[
News
|
Newsletters
|
Blogs
|
Reddits
|
Lists
|
Media
|
Jobs
]
HoneyDB
/r/netsec
Detect NetxJS CVE-2025-29927 efficiently and at scale
Blacklock Ransomware: A Late Holiday Gift with Intrusion into the Threat Actor's Infrastructure
Blasting Past Webp - Google Project Zero
Behind the Schenes of a Chinese Phishing-As-A-Service: Lucid
Llama's Paradox - Delving deep into Llama.cpp and exploiting Llama.cpp's Heap Maze, from Heap-Overflow to Remote-Code Execution
CodeQLEAKED – Public Secrets Exposure Leads to Potential Supply Chain Attack on GitHub CodeQL
Next.js and the corrupt middleware: the authorizing artifact
CVE-2024-55963: Unauthenticated RCE in Default-Install of Appsmith
Remote Code Execution Vulnerabilities in Ingress NGINX
Frida 16.7.0 is out w/ brand new APIs for observing the lifecycles of threads and modules, a profiler, multiple samplers for measuring cycles/time/etc., MemoryAccessMonitor providing access to thread ID and registers, and more 🎉
/r/Malware
Malware thru email or browser
Looking for a job at Malware Analysis
Grandoreiro attacks LATAM
Malware
SparrowDoor 2.0: Chinese Hackers Deploy More Powerful Malware in Global Attacks
Over 150K websites hit by full-page hijack linking to Chinese gambling sites
Vanhelsing Ransomware Analysis | From a TV Show into a Fully Fledged Ransomware
ML and malware detection
Received unexpected, suspect file received. Is it malvare?
Favorite/ Funniest Malware
/r/pwned
Data breaches you might have missed this month
Thousands of Records, Including PII, Exposed Online in Healthcare Marketplace Connecting Facilities and Nurses Data Leak
Has TradingView ever experienced any data breaches?
1 Million Accounts Impacted by the Massive 2023 Glamira Data Breach, 875,000 Emails Exposed
Anna Jaques Hospital ransomware breach exposed data of 300K patients
Hot Topic Breach Confirmed, Millions of Credit Cards Exposed
UnitedHealth breach leaks info on over 100M people. Including medical records.
Internet Archive hacked, data breach impacts 31 million users
Australians among 560 million users around the world caught in Ticketmaster hack
26,818,266 compromised accounts from The Post Millenial conservative news site on May 2, 2024.
/r/blackhat
Samsung Tickets Data Leak: Infostealers Strike Again in Massive Free Dump
does anybody know a way to view a private twitter account????
Hackers behind massive broadband provider WOW! breach, Hudson Rock says
StreamElements Confirms Third-Party Data Breach from an Infostealer Infection
"vibe coding" website same.dev was hacked and leaked some interesting user prompt data.
Question/asking for help
Does “Inspect Element” show passwords?
Arkana Ransomware Group Hacks WideOpenWest Using Data from an Infostealer Infection
Email Spoofing?
I need your opinion about CyberSources
/r/websec
Bitcoin Casinos
Need your advice for bug hunting
I made a FOSS tool for observable / IoC analysis (domain, URL, IP, hash)
How was this fraud committed?
Research paper CS
weshlient: A simple tool to interact with web shells and command injection vulnerabilities
any open source vulnerability scanners I can run on an untrusted git repo?
The Global InfoSec / Cybersecurity Salary Index for 2024 💰📊
Secure Code Review: How to find XSS in code(for beginners)
How to find XXE(XML External Entities) vulnerabilities during Secure Code Review
/r/computerforensics
Purview Client issue
Unified Audit Log Timeline Builder - A help for M365 BEC investigations
LEAPPs
How to extract pictures from a PDF as jpeg?
Tools need to stop offering cloud collection sources if it doesn't work. What actually works for social media preservation/searching?
New Purview
Thoughts on what is the best practice for acquisition/hashing order?
K-Scan Questions
Cellebrite Guardian or Magnet
Andriller Free License - Where to find?
/r/xss
XSS noob needs help
The Biggest XSS Attack Was Samy
Server-side issues leading to stored XSS
XSS CTF - How to execute payload inside an HTML comment (blacklisted words & encoded characters)
How to use deepseek to exploit xss vuln
How to bypass filters for "<>' special chars?
form-action Content-Security-Policy Bypass And Other Tactics For Dealing With The CSP
Are the PortSwigger Academy XSS labs a good starting point for beginners?
Xss encode payload problem
beginner
/r/cybersecurity
Decentralized platforms
CRTA (CWL EXAM)
"Disk re-encryption in Linux" by Stepan Yakimovich -- "Disk encryption is an essential technology for ensuring data confidentiality, and on Linux systems, the de facto standard for disk encryption is LUKS (Linux Unified Key Setup)."
How big is Credential Stuffing?
Mentorship Monday - Post All Career, Education and Job questions here!
Has anyone in here become a security engineer by means of being an IAM administrator/ engineer first? If so, how did you go about it?
Samsung Tickets Data Leak: Infostealers Strike Again in Massive Free Dump
Keeping Curl Successful and Secure Over the Decades [podcast]
For "Passkeys" Specifically: 1Password (or any third party) or Apple Passwords?
Student, and I need you help!
/r/crypto
FBI raids home of prominent computer scientist who has gone incommunicado
Post-quantum PAKE
Asymmetric Data Encryption - Is reversing the role of keys interesting or valuable?
What should the server do in a TLS 1.3 handshake if it doesn't recognise the early data PSK?
Is there any encryption algorithm that uses hashing?
Chunking attacks on Tarsnap (and others)
Breaking and Fixing Content-Defined Chunking
What do you think of my protocol design?
Crypto Forum Research Group (CFRG) Process
Weekly cryptography community and meta thread
/r/HackBloc
Hactivists say they hacked Belarus rail system to stop Russian military buildup
Can anyone here be my free "hacker friend"?
Reccomendations
The Internet's Own Boy - The Story of Aaron Swartz
Hacktivism as a social movement is back
Why did no one show up to the MMM in Los Angeles?
where do I find a million mask march meetup?
Firewall dropping me off from an ssh connection
[1 Minute] Cool Tool Friday: How to Bypass ANY Paywall!
Docker for CTFs (Application Virtualization)
© 2024 RiskDiscovery | Sponsored by:
Deception Logic