r/cybersecurity

Authenticating ARP and NDP

ARP (IPv4) and NDP (IPv6) have no built-in authentication. For 20 years, Layer 2 neighbor discovery …

Does anyone use rule feeds in 2026?

We’re considering investing in a few paid rule feeds to save time on building and maintaining detect…

Possible spyware on my phone camera activating on its own, tried everything short of factory reset

my camera is being accessed randomly and I think my phone is compromised — need help getting to the …

Building a tactical Pelican case for my Flipper Zero + AIO setup. Looking for advanced tool and script recommendations!

Hey everyone, I’m putting together a compact Pelican case to protect and organize my field gear for …

Need a vm for practice

Hi, i am looking for a VM for practicing the cyber security labs can some one suggest a best free/ l…

Tips/Tricks to WFH as a SOC Analyst?

Hello everyone, Firstly, I apologize if this post is not well suited for this sub. Please let me kno…

Cybersecurity statistics of the week (June 1st - June 7th)

Hi guys, I send out a weekly newsletter with the latest cybersecurity vendor reports and research, a…

Where can GRC folks learn practical AppSec / DevSecOps without going full engineer?

I’m a GRC director and struggling to find AppSec or "DevSecOps" training that hits the "right depth"…

I almost got “onboarded” into a malware campaign disguised as a job opportunity.

A recruiter LinkedIn account contacted me about a role and asked me to review their MVP before the a…

University of Toronto proof-of-concept AI worm spread to 62% of a test network in 7 days using a free open-weight model

This one breaks a core assumption about worm containment. Traditional worms have a fixed exploit pay…

AI Blocklist - help

Hello everyone. I am trying to find a AI blocklist like this one: https://github.com/laylavish/uBloc…

Are there any free and good certs?

Certs that are at least kind of regarded by HR/mgmt, too. (no Cybrary tests) If not, why hasn't anyb…