r/cybersecurity

Cybersecurity statistics of the week (April 27th - May 3rd)

Hi guys, I send out a weekly newsletter with the latest cybersecurity vendor reports and research, a…

Where to find reliable vendors?

Hi there folks, Here is the context: I am pretty much the only appsec lead at the company at the mom…

Just got into cybersecurity with no prior experience and feeling intimidated. Thoughts?

Finally broke into cybersecurity, but here’s the thing, I don’t have direct cybersecurity experience…

We wrote a guide on securing Claude across the enterprise — here's the core framework (with download)

Hey all - Mike from Airia here. Wanted to share something we put together that I think will resonate…

Over 5 months: Payment bypass marked OOS, moved to VDP, and downgraded to Medium.

Hi everyone. I want to share a frustrating timeline and get your thoughts. I found a server-side pri…

Microsoft Edge Stores Passwords in Process Memory, Posing Risk

submitted by /u/rkhunter_ [link] [comments]…

Open-source scanner for MCP servers and skill files : attack chain detection and server-card scanning

If you are running MCP servers or loading skill files into your agents, you might want to run this b…

GRC Path to CISO (Certifications)

Currently an IT GRC Analyst and want to put education/certificates back into thoughts. I know alot o…

CISOs and pentest buyers, what's the worst thing you've seen in a pentest report?

Been thinking a lot lately about the gap between what pentest reports should deliver and what they a…

How to enforce M365 Sign-in frequency on corporate laptops?

A company plans to enforce an 8-hour sign-in frequency such that every 8 hours, the users will have …

CloudZ malware abuses Microsoft Phone Link to steal SMS and OTPs

submitted by /u/rkhunter_ [link] [comments]…

Built an independent directory of AI Act / AI governance tools, feedback?

EU AI Act high-risk obligations land August 2026. I built aiactdirectory.com as an independent (no p…