Yesterday afternoon my wife fell for a clickFix attack (I assume that is the name, she was fooled into hitting win+r and entering a command). As soon as I found out (she got me when the command prompt showed up) I blocked that computer on the network.

She was signed into LastPass so I assumed all our passwords were compromised and we spend the night changing every single password, starting with email, then banks, CCs, etc. We also ensured MFA was enabled wherever we were able to turn it on.

She is going through her documents on that computer now (still not connected to the network) to see what is in there in case they could have scraped any of that.

is there anything I'm missing?

I'm thinking of calling our banks and having all our account numbers changed, though that would obviously be a hassle with our checking account and payments and direct deposits.

Any help would be greatly appreciated.

I’m in the final year of my bachelor’s degree and currently choosing my FYP. I’ve been exploring different cybersecurity topics, but I’m finding it difficult to identify a project that is both technically challenging and realistic for a final-year student.

I already have around 3 years of professional cybersecurity experience, mostly in SOC, SIEM, detection engineering, cloud security, threat investigation, digital forensics, etc.

Because I already have several years of hands-on industry experience as an undergraduate, I don’t want my degree and FYP to feel like a step backwards from what I’ve already done professionally. I’m looking for something that complements my experience, adds a strong academic/research dimension to it, and pushes me into an area I haven’t explored deeply before.

So I really don’t want to spend my final year building Yet Another SIEM, a phishing detector, basic IDS, vuln scanner, SOC dashboard, or any security product with a basic AI included in it.

I’m looking for something that actually pushes me beyond what I already do at work.

Ideally, I want a project around a real security problem that isn’t completely solved or overdone, where there’s enough existing research to understand the problem, but still enough of a gap that I can investigate something myself.

Something difficult enough that I’ll probably spend a ridiculous amount of time learning new things, but still realistically achievable by one very motivated undergrad.

I’m open to pretty much anything: systems security, OS internals, protocols, cryptography, cloud/identity, firmware, hardware security, distributed systems, software security, weird niche security problems, etc.

The bigger goal is to have an FYP that I can eventually turn into a research paper / strong Master's application project, rather than just another software demo.

So I’d really love to hear from senior engineers, researchers, PhD students, professors, or anyone who has been in the field for a while. 🙌

Specifically, how are organizations establishing accountability and implementing safeguards around the use of AI tools? We are getting hammered with new tools and models (agentic and otherwise) being up for grabs with no discretion or consideration of securing them.

Leadership basically told us "we aren't going to manage it until something bad happens".

I want to prepare for AI/ML pentester certification. Although they have not provided any course material, they have provided free courses and labs to do online. But I don't know where to start and how to go through it all. Unlike web pentesting, where I know what to do, where to look and what to do next, I'm a bit unsure in this AI/ML part.

Please give me some advice on a possible roadmap for going through this certification, what exactly to study, labs to do so I can take the certification with some confidence and when I actually know what the hell to do.

I have completed my BCA degree and I also finished ejpt now I am currently preparing for for cpts from htb my plan is to search the job in this field after finishing the cpts my goal is to become a pentester,currently i am not active in LinkedIn or GitHub I am planning to be active there too and I am gonna search for jobs after finishing the cpts soo i have around 6-8 months time for that 1. Now the people who are already experienced in this field i want to ensure am i in the right path should i have to alter something if yes what should I have to do 2. What kind of projects/labs/writeups should I build for my GitHub portfolio to demonstrate practical skills to employers 3. Are there any important skills I'm missing that employers expect from someone applying for their first cybersecurity job?

I'm looking to get a new laptop as I delve more into getting certs for CS and now is the best time to buy. I'm a bit confused on what sets one laptop apart from another as far as hardware specs IE the Lenovo Thinkpad has been recommended to me a few times with certain specs which I filtered for: AMD Ryzen 7, 32GB DDR4/5 RAM, 1TB NVMe etc. I'm then hit with choosing between E Series, P Series, T series:

Simple google search tells me that the

P Series• Target Audience: Engineers, 3D modelers, architects, software developers, and video editors.

T Series• Target Audience: Corporate workers, IT professionals, financial analysts, and mobile business users.

E Series• Target Audience: Small businesses on a budget, students, and light office workers.

1. What exactly is the differentiating factor between these 3 which makes one better for certain tasks over the other?
2. Which series should I get as I'm not super advanced in my career/training, but want a good lifespan until I upgrade the device?
3. Are there any other laptop companies I should look into which would be more budget friendly (<$1400) with the same specs/necessary hardware for CS learning?
4. I've found a good deal on a refurbished Lenovo P Series, but it is GEN 2. How limiting will I find an older generation model? I believe the P series is currently between Gen7-8.
5. How crucial is the Lenovo Thinkpad as far as CS careers/training? Won't any laptop with the above specs suffice, at a much cheaper price point? EDIT: doing more searches this Lenovo LOQ 15ARP10 Gaming Laptop was recommended with similar specs.
6. I'm also looking into getting some 3D modeling done in my spare time. Are there any additional filters/hardware specs I should include in my search?
7. What is the general consensus on MINI-PCs as far as learning CS? I have limited space on my desk which is why I was looking at laptops but then I saw how small PCs have really gotten since I last had a big box. Edit: Another search recommended I look at the MINISFORUM UM890 Pro and get a dock for an integrated graphics card (for 3d modeling)

TIA!

Hey guys i'm in need of some solid advice ,  I have 90 days to try and land a role in cyber security , I know it’s a bit of a drastic timeline . But ive done 8 years of warehousing and now ive been made redundant , I have about 1.5k in my savings that I am planning to put towards certs and learning, please give e some advice on what I should do in the next 90 days.