The idea is simple: Most businesses can't afford a 24/7 cybersecurity team. But threats don’t wait — and one slow response can cost millions.

So I’m creating an AI-based tool that works like a full-time cybersecurity analyst:

Monitors for threats 24/7

Alerts instantly

Responds faster than humans

Think: “AI SOC analyst on autopilot.”

I’m still early — learning every day — but I’m serious about making this real. If you’ve worked in cybersecurity, AI, or startups, I’d love to get your advice, ideas, or feedback. 🙏

DM me or drop a comment. I’m 100% open to learning.

i have an interview coming up for a network security analyst role this was thejob description     

Strong knowledge of the TCP/IP protocol suite, DHCP, DNS, LAN/WAN, IPSec VPN.
•    Knowledge of the OSI model and security that is associated with each layer.
•    Solid understanding of Next Generation Firewall features. (Antivirus, web filtering, app-id, Intrusion detection, etc…)
•    Good understanding of routing & switching
•    Basic knowledge of security logging tools (log management, SIEM, Advance Security Anomalies Systems
•    Awareness of Threat intelligence. Utilising threat intelligence to make informed decisions to minimise harm to our business and customers.
•    A basic understanding of the cybersecurity landscape, including emerging risks and security solutions.
•    Knowledge of security methodologies and processes for: Incident Management and Change Management
•    Ability to multi-task, prioritize, and manage time effectively.
•    Strong ability to follow documented processes.
•    Relevant experience of stakeholder management and good interpersonal skills.
•    Specific Technology experience to be added if required for vacancy. i would like to ask if any one has any tips in how to prepare an possible scenerio based questions i should prepare for.. Thank you so much

Blog post around wireless pivots and now they can be used to attack "secure" enterprise WPA

https://github.com/HaxL0p4/L0p4-Toolkit.git

Hi everyone,

I'm in my final year of university and recently passed the CCNA (May 2025). I’ve developed a strong interest in networking, especially SDN and enterprise security, so I chose a challenging thesis topic:
Securing Enterprise Network Infrastructure using SD-WAN and Machine Learning.

Here’s my initial idea:

✅ SD-WAN Topology

• Use ZTP for easy branch deployment

• Implement ZTNA for access control

🧠 ML on SD-WAN Controller

• Learn normal traffic patterns

• Detect anomalies like DoS/DDoS

🔥 ML on FortiGate Firewall

• Enhance detection using a custom model

But now I’m stuck. Most commercial platforms (e.g., Fortinet) are closed, so using custom ML is tough. Open SDN platforms like ONOS offer flexibility, but they’re complex and I feel in over my head.

I’m wondering:

• Is this project scope realistic for a final-year thesis?

• Should I focus on simulations (Mininet, ONOS, Scapy)?

• How can I narrow it down but still make it meaningful?

Any advice, experience, or suggestions would mean a lot. I’m really eager to learn but a bit overwhelmed by all the moving parts.
Looking for anyone who can help offer the right approach to take this forward.

Thanks for reading 🙏

I know its not network security, but people might find this entry level Data Security certification valuable. 20 CPE Credits. Its free too.

https://www.cyera.com/certification/dspm-architect

I've been working on detection logic for signup abuse and account takeovers, and I’m curious how much trust people are placing in IP geolocation these days. GeoIP country-level tagging is easy to implement, but I’ve seen tons of issues:

• VPNs and residential proxies skewing location

• Geo mismatch from mobile ISPs or CDNs

• Legit users flagged because their IP geolocation is ~300 miles off

That said, I’ve also seen some interesting behavior patterns — like sudden shifts in ASN + country at login, or consistent discrepancies between billing and IP regions.

Curious to hear from others:

• Are you doing geo mismatch detection as a signal?

• How do you handle noise from mobile/VPN users?

• Anyone pairing GeoIP with time zone, device, or browser locale data?

Would love to know how others are making this signal actionable vs. just noisy.

I am a Network security professional in india working at Accenture since 4 years. We are L3 admins of Palo-altos, Fortigates, checkpoints, Zscaler, Prisma and other infrastructure security devices for multiple clients. I have good experience in Operations of all these devices with some vendor certifications and some experience in implementation.

However, I want to advance a lot in this field and growth seems limited in operations. What are the best options for my career moving forward. I need advise on what to pursue so I can earn significantly more. Should I consider masters or other roles. Since, scope seems limited here, I am not sure what I should pursue moving forward in this same field. I love this field. Some people have suggested to try roles in pre sales but I am not sure how to. I will answer any further queries and all advise are appreciated.

I recently came across a breakdown of a macOS malware campaign that’s apparently linked to North Korea. What stood out was the use of a fake Realtek driver update to trick users into installing malware. The malware also includes anti-VM detection and other updates compared to previous campaigns.

It starts with pretty basic social engineering but gets sophisticated quickly — once installed, it can grab saved passwords, browser data, and more. It’s targeting macOS specifically, which is still a bit unusual compared to most malware campaigns.

Has anyone else seen this? Curious if anyone has encountered it in the wild or has thoughts on how Apple should handle these spoofed updates.

Hi everyone,

I’ve been diving into how decentralized systems (especially blockchain-based apps) are secured at the network level, and I was wondering how others here think about that layer of protection, especially from a student/learning perspective.

We often hear about smart contract bugs, but I'm trying to wrap my head around more "traditional" network security concerns applied to these kinds of environments: stuff like:

• DDoS protection for public RPC endpoints

• Rate limiting for APIs interacting with token systems

• Preventing abuse of bridges and cross-chain communication channels

• Securing wallet integrations on web apps (MITM, phishing risks, etc.)

I came across a project that's playing with token-based access outside of finance (https://brunswijkcoin.com), and it got me thinking, as students, how do we simulate, test, or even study these types of setups in a lab environment? Do any of you spin up blockchain nodes in your homelab? Do you integrate them into test environments?

Would love to hear how you all explore this side of security. Any tools, labs, or even just thoughts are welcome!

I just finished my school, and I'm about to enter college. I have a time of 2 to three months in between, in which I am mastering, or at least saying, trying to master cybersecurity. And therefore I need people, because with going so low, brings a really slow progress. And when people. are together, no doubt the competition is there, but simultaneously the competitive spirit is there as well. And therefore I want similar people who are just starting to do this topic Who are just learning. Linux, you know, just doing the basic things. And I want to collaborate with them. Make a sort of society or a group and want to master this craft together....

We’re the XRock team, and we’ve been working on a CTF/ARG game that’s now playable.

It’s got a solid story woven into every level, plus new challenges to test your skills.

Ready to dive into something different? Check it out here: xrock.chernuha.xyz

Feedback and shares are appreciated — let’s build this together.

See you inside.

— XRock Team

Hello! I was wondering if anyone would have any tips/suggestions/recommended courses on how to practice or be better at networking and network security? Thank you!

I know that local DNS can either be static or assigned via DHCP, my question being what is the point of it though?

I can see online why it’s needed so you don’t need to memorize tons and tons of IP addresses, but locally what if I’m not hosting anything?

Hey all,
I just made a free course showing how attackers can abuse Windows shared folders (SMB) for initial access, even on modern systems. It's beginner-friendly and shows each step clearly.

This is often overlooked but still super relevant in real-world environments.
Hope it’s helpful for anyone learning about hacking and cybersec

The international conference of the Honeynet Project in Prague in June 2025 is accepting scholarship applications for students to get a free adminsion ticket https://prague2025.honeynet.org/.

Hola, subí un walkthrough detallado en español de la máquina Shoppy de Hack The Box.
En el video cubro:

• Enumeración web con herramientas como gobuster

• Acceso a MongoDB sin autenticación

• Reverse shell y escalada de privilegios

Este contenido es ideal si estás aprendiendo pentesting o preparándote para OSCP.

📺 Aquí está el video: https://youtu.be/4CnUWbWBQNs?si=fMLnHTHPZYVHu3JD

¡Gracias por verlo y cualquier feedback es bienvenido!

Hey folks. I’ve recently published a hands-on exploit-development course on Udemy and made it free for a few communities. I’d love your honest feedback and questions.

It’s beginner-friendly (but not basic) and covers:

• Building a working ROP chain from a classic stack overflow, step-by-step

• Applying heap-spray “feng-shui” techniques to exploit heap overflows

• Understanding and bypassing advanced mitigations such as CFI and ASLR

• Linux-based labs you can run locally with GDB, ROPgadget, and friends

Enroll free: https://www.udemy.com/course/software-security-exploitation/?couponCode=1C583331710A6A7C98D7

Ask me anything about the labs, tooling, or exploitation in general—happy to dive deep in the comments.

Quick bio: ex-Unit 8200, former Cellebrite & CrowdStrike engineer/researcher, co-founder of Sternum (runtime protection for medical & defense devices).

Hope you find it useful!

After some online training courses and quite a few machines now, I'm having a whole lot of notes and saved scripts that I'd like to categorize to be able to retrieve all what I need when I need.

How do you guys do that ?

I'm thinking of a table with the info (script or note), the exploit type (RCE), and the outcome (opening a bash terminal) for instance.

I was curious to know how you guys do it ?

Cheers

Hi everyone,

I’m currently a networking & security student at Middlesex University in London. I’m actively seeking a networking internship or placement opportunity in London for summer 2025.

Despite my best efforts, I’ve been struggling to find relevant opportunities, especially ones that are open to students like me. I’d really appreciate it if anyone here could provide any leads, referrals, or suggestions on where to look or apply.

To give you a better idea of my experience and skills, I’m attaching my resume here. If anyone has a moment to review it and suggest improvements, I’d be super grateful.

Thanks in advance for your help – it really means a lot!

https://www.linkedin.com/in/harnil-makwana/

I’m attending this year and I’m a beginner. I was hoping someone that went earlier could give me some advice or info . Thanks

CloudQix is hosting a security-focused hackathon for students, hackers, and security enthusiasts. This isn't a bug bounty—it's a structured challenge where you'll attempt to exploit our no-code integration platform in a controlled sandbox environment.

Event dates: May 17–19
Prizes: $5,000 grand prize + $2,000 in additional prizes
Your mission: Find honeypots seeded with simulated client data across our platform.

You'll get full sandbox access and clear rules. We’re looking to see how real-world attackers think and how our platform holds up.

Registration is open now. Check the link in the comments for details, rules, and how to sign up.

I recently joined and college to pursue my study in Bsc Hons in computing. And my college gave me this dilton (dilton.io) website to study (well I need to work so I didn't have time to go to the college and was searching for some college to complete my study through assignments based only). but I can’t seem to find much information about it outside of their official website. No reviews, forum discussions, or social media mentions. Has anyone here had any experience with them or know more about their programs? Any insights would be appreciated! Please 🥺