Risk Discovery

/r/netsec

pyghidra-mcp: Headless Ghidra MCP Server for Project-Wide, Multi-Binary Analysis

Enumerating AWS the quiet way: CloudTrail-free discovery with Resource Explorer | Datadog Security Labs

How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories

Deep learning with leagues championship algorithm based intrusion detection

Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling

Git 2.51: Preparing for the future with SHA-256

Trivial C# Random Exploitation

Live Q&A with an Author of the NIST Security Guidelines (SP 800-115)

CTF stats, mobile wallet attacks & magstripe demos – Payment Village @ DEF CON 33

/r/Malware

Modular set of libraries & components for Maldev

Website Verification Scam That’s actually a info stealer in disguise

Seeing this in process hacker, unsure if i should be suspicious of it or not

[Video] Dump with PE-sieve, scan dumps -> Malware family

I Made a Few C2s

Triaging malware with Malcat

From Drone Strike to File Recovery: Outsmarting a Nation State

Malware research you might like to know this week (August 4th - 10th 2025)

/r/pwned

May 2025 Hack Report: Healthcare, Logistics, Tech—and Yes, LockBit

Britain’s Companies Are Being Hacked

Loopscale Breach Twist: Hacker Offers to Return Funds for 20%

Data breaches you might have missed this month

Thousands of Records, Including PII, Exposed Online in Healthcare Marketplace Connecting Facilities and Nurses Data Leak

Has TradingView ever experienced any data breaches?

1 Million Accounts Impacted by the Massive 2023 Glamira Data Breach, 875,000 Emails Exposed

Anna Jaques Hospital ransomware breach exposed data of 300K patients

Hot Topic Breach Confirmed, Millions of Credit Cards Exposed

UnitedHealth breach leaks info on over 100M people. Including medical records.

/r/blackhat

tiktok live cashapp

Mining Exploit Intelligence to develop custom Nuclei templates for CVE, EUVD, CNNVD & BDU

admin panel entry

Defcon badge via Blackhat?

High school student builds AI-powered Chrome extension using Gemini to detect phishing in real time

Best Way to Safely Test Potentially Malicious or Untrusted Apps on Mac (Virtual Machine?

UK online safety law sparks massive VPN surge

Good Wi-Fi card with Monitor & Packet Injection Mode.

/r/websec

Fast, Dynamic ... and Insecure? Rethinking Web App Security in the Modern Era

What’s your go-to method for keeping malicious sites from ever reaching end users?

Im a security researcher and i've made MCP server to search for vulnerabilities

My New PenTesting tool on the block for bug bounties!

How do these illegal clear web websites accept bank payments?

Bitcoin Casinos

Need your advice for bug hunting

I made a FOSS tool for observable / IoC analysis (domain, URL, IP, hash)

How was this fraud committed?

Research paper CS

/r/computerforensics

Is it stupid to try for CFCE when my degree is in Marketing and I have no experience in the field?

Some Elcomsoft iCloud Backups missing attachments

Guys with experience from different fields, how would you compare DFIR to other jobs in IT?

Can a Forensic Expert Disprove Back-Dating of a Printed Document?

Image Hash in Magnet RAM Capture

Forensic Cellular Class October 6-10

How to get a job in computer forensics in the US?

Secure boot + TPM, bitlocker 🤷‍♂️

macOS Forensics: The Joy of Hidden Plists

Problme with The FTK imager output fole

/r/xss

Slonser Notes - Make Self-XSS Great Again

XSSy Impossible Labs

Can JSX default escaping be bypassed?

Report on the Most Famous XSS Attack – The Samy Worm on MySpace

Help with bypassing type checking and content validation for DOM XSS

Simple Tips for Bug Bounty Beginners: Finding Blind XSS Vulnerabilities

Let me sleep,im tired of my grief.. (Need guidance please)

/r/cybersecurity

WIZ or Upwind thoughts .?

Certification guidance needed

Interactive Security Certification Roadmap [NEW]

AndroBuster – Gobuster-like tool for Android

SentinelOne migration

S 2602 - A bill to amend title 10, United States Code, to expand the scope of affirmation of authority for cyber operations to include defense of critical infrastructure of the Department of Defense, and for other purposes.

The new flat network of AI

Would it be my fault?

NIST Issues Guidelines to Detect Face Photo Morphing Attacks

UK drops demand for backdoor into Apple encryption

/r/crypto

Is multi-party computation or FHE realistic yet for private LLM inference at scale?

Weekly cryptography community and meta thread

Any Practical Use of Menezes Qu Vanstone over Authenticated Diffie-Hellman

Experimental Post-Quantum Concept: VEINN – Vector Encrypted Invertible Neural Network

Nice video on applications of FHE from a machine learning researcher

Decrypting Memory Chip Data

I just got two Nitrokey 3C NFC keys. My first time using 2FA, first time having keys

Signal protocol in JavaScript

Expected and unexpected developments in quantum computing | Joke title: Is this whole conference a waste of time?

Heracles attack - Chosen Plaintext Attack on AMD SEV-SNP

/r/HackBloc

Hactivists say they hacked Belarus rail system to stop Russian military buildup

Can anyone here be my free "hacker friend"?

Reccomendations

The Internet's Own Boy - The Story of Aaron Swartz

Hacktivism as a social movement is back

Why did no one show up to the MMM in Los Angeles?

where do I find a million mask march meetup?

Firewall dropping me off from an ssh connection

[1 Minute] Cool Tool Friday: How to Bypass ANY Paywall!

Docker for CTFs (Application Virtualization)

© 2025 RiskDiscovery | Sponsored by: Deception Logic