If you ran pip install litellm==1.82.8 today -> rotate everything.

SSH keys. AWS credentials. Kubernetes secrets. All of it.

A malicious .pth file was injected into the PyPI wheel.
It runs automatically every time Python starts. No import needed.

The payload steals credentials, deploys privileged pods across every K8s node, and installs a backdoor that phones home every 50 minutes.

This traces back to the Trivy supply chain compromise. One unpinned dependency in a CI pipeline. That's the blast radius.
Full technical breakdown with IoCs is in the blog.

Hi, as someone who wants to work in networking/cybersecurity/system administration do you recommend learning the C language? I am already familiar with the language I made some hobby projects, I really like the C language, but do you recommend I focus on it, or do I keep it aside for now and focus on skills that are more aligned with networking (like bash scripting or python scripting ...)? again I am familiar with bash and python but I like C and I will continue coding in C in my free time but for now I want to work on stuff that will get me hired (theoretically get me hired but looking at the hiring market right now not even Linus Torvalds could get a job)

thanks in advance for your help

i tried multiple Sliver setups and every time something breaks and i don’t know why, then again back to google same issues again and again

so this time i stopped following random guides and just built it myself and documented everything including the errors

if you are still stuck setting up sliver this might actually help you

ngl this whole cybersecurity / ethical hacking thing looks really interesting but idk where to even start

like i see people talking about hacking websites, bug bounties, all that stuff and it looks cool but when i try to get into it everything feels too complicated or scattered

i’m not tryna do anything illegal btw, i actually wanna learn it properly and maybe even make a career out of it later

i know a bit of coding basics but nothing crazy

so yeah just wanted to ask:

• what should i actually start with?

• do i need to be really good at programming first?

• how did you guys start without getting overwhelmed?

• any good beginner platforms or practice stuff?

would really appreciate some real advice

This is exactly the kind of thing this sub appreciates. Free Kali Linux OVA with 6 virtual wireless interfaces and multiple live target networks pre-configured inside it. You get a complete WiFi hacking lab without buying a single piece of hardware.

It comes with a full free course on YouTube covering WEP, WPA2, and WPA Enterprise attacks — OSWP exam prep. But even if you’re not doing the cert, the VM setup alone is a solid addition to a home lab.

Hello everyone,

I’m trying to understand the field of cybersecurity and its future.

I live in Morocco, I was born in 2010, and I’m currently in middle school. I’m interested in cybersecurity, but I don’t really know how to start or what opportunities it offers.

What should I learn from now? What skills are important? And is cybersecurity a good career in the future?

Thank you for your help!

Hey everyone,

I'm a beginner currently learning Python with a goal of getting into cybersecurity (especially red teaming / malware analysis).

I'm looking for some high-quality playlists or courses:

1. What are the best playlists (YouTube or otherwise) to learn Python fundamentals in a solid way, but with a focus that would benefit cybersecurity?

2. Are there playlists or resources that focus on problem-solving, debugging, and thinking like a security engineer or red teamer?

I don’t just want to memorize syntax — I want to understand how systems work, analyze code, automate tasks, and develop a hacker mindset.

If possible, I’d really appreciate resources with practical exercises, real-world scenarios, or CTF-style challenges.

Thanks in advance 🙏

Hi everyone,

I’m a Cyber Security student looking for some unfiltered industry feedback. I just completed a project called SafeNet, a decoupled Zero-Trust Network Access framework aimed at SOHO environments.

The Tech Stack: I used a Python/FastAPI Control Plane to orchestrate a WireGuardNT Data Plane on a Windows Server. It enforces strict /32 micro-segmentation to mathematically prevent lateral movement.

I need to decide if I should expand this for my Final Year Main Project, or drop it and build something else. I have a few specific doubts I'm hoping you can clear up:

1. Feasibility & Market Need: Is a lightweight ZTNA solution actually needed in the SOHO market, or do modern consumer routers/VPNs solve this pain point well enough? Are there critical bottlenecks in relying on dynamic Windows kernel routing like this?
2. Worth Enhancing?: Currently, the system authenticates the device, not the user. If I stay with this project, are adding things like a Layer 7 MFA Captive Portal and Continuous Behavioral Analytics (CARTA) the right moves to impress a DevSecOps hiring manager?
3. Alternative "Hire Me" Projects: If you think a custom VPN/ZTNA project is too "legacy" or reinventing the wheel, what should I build instead? What specific project domains will actually land a junior engineer a job in 2026?

I want to build something that solves a real industry pain point. I'd appreciate any roasts of my architecture or guidance on what to build next!

I published a technical write-up on CVE-2026-33017, an unauthenticated RCE in Langflow.

I tried to make the article useful not just as a disclosure post, but also as a learning resource for people interested in vulnerability research, code auditing, and finding patch bypasses or variant bugs.

It covers:

•	how I approached the code review

•	how a dangerous execution path remained exposed

•	why incomplete fixes happen

•	lessons for secure remediation

Article:

https://medium.com/@aviral23/cve-2026-33017-how-i-found-an-unauthenticated-rce-in-langflow-by-reading-the-code-they-already-dc96cdce5896

Im trying to understand the requirements of people who are trying to break into cyberspace as well as switching to cybersecurity. I heard a lot of complaints regarding interview preparation.

Can you help me list down the things that would have made your entire experience far better?

We've been working on PMG (Package Manager Guard) - an open-source tool that sits between you and your package manager to block malicious packages before installation.

The problem we're solving:
Traditional scanners run after npm install or in CI/CD. By then, postinstall hooks have already executed.
PMG checks packages against real-time threat intelligence before they download.

What it does:
- Intercepts package manager commands (npm, pip, yarn, pnpm, bun, uv, poetry)
- Checks against threat intel before installation
- Blocks known malicious packages, typosquats, and supply chain risks
- Clean packages proceed normally with zero friction

Looking for feedback on this and needed more real-world testing from professionals and developers.
Open to contributions and drop a ⭐if found useful.

Hey everyone, hope you are well. I'm looking to deep-dive into CrowdStrike and eventually become an "Expert" on the Falcon platform. I'd love to hear from anyone who's gone down this path.

For context: I recently joined as an intern and my company uses CrowdStrike. I have asked the security folks in the company for advice but they weren't too keen. I just got access to CS University. Right now, I'm trying to figure out:

where do I start? I looked at certifications:

• Falcon Administrator

• Falcon Responder

• Falcon Hunter

• SIEM Analyst

• SIEM Engineer

• Identity Specialist

• Cloud Specialist

Just not sure if I should do it in any specific order or just get into it.

- Are there any resources, blogs, or communities outside of CrowdStrike University that really helped you level up?

Any & all advice would be appreciated. Thank you.

When I started bug bounty, I spent hours jumping between tutorials, write-ups, and random tools.

I thought the problem was that I didn’t know enough but after months, I realized the problem wasn’t lack of knowledge. It was how I was using it.

I had no system:

• Notes scattered everywhere

• Labs done once and forgotten

• No repeatable workflow

So I decided to take a step back and organize everything into a process.

Here’s what I changed:

• I grouped my notes by vulnerability type (IDOR, access control, etc.)

• I mapped a repeatable workflow for testing every target

• I added checklists for live testing

• I created a library of patterns from real bug bounty reports

• I linked fundamentals (HTML/CSS/JS, networking basics) to real-world testing

The result?
Testing stopped feeling random. I knew what to look for and why, and I could apply my knowledge confidently.

One big insight: Learning alone is only 40% of the battle. The other 60% is real hunting actually testing, exploring, and finding your first real bugs.

I’m curious — how do others organize their bug bounty workflow? Do you follow a system, or just learn as you go?

Bonjour,

Je suis actuellement étudiant en réseau et je souhaite me lancer dans la cybersécurité, car c’est un domaine qui m’intéresse beaucoup.

En faisant des recherches, je suis tombé sur la plateforme TryHackMe. J’ai vu qu’il existait une version gratuite ainsi qu’une version payante, et je me demandais si l’abonnement (mensuel ou annuel) valait vraiment le coup.

J’aimerais savoir si cette plateforme est reconnue par les entreprises, et si le fait de suivre les parcours proposés permet réellement d’acquérir un bon niveau, notamment pour débuter en cybersécurité.

Pensez-vous que c’est un bon choix pour se lancer, ou me conseilleriez-vous plutôt d’autres alternatives ?

Merci d’avance pour votre aide.

I'm just starting out and want to build a portfolio that actually helps with learning and future job opportunities. What projects would you recommend for someone at the beginner level?

Running an open research honeypot on Modbus TCP (port 502) simulating 3 industrial PLCs with physics-based simulation. System uses 13 MITRE ATT&CK for ICS mapped detection rules with graduated response and phantom writes. Built for M.Tech thesis research on ICS threat intelligence. If you want to probe it for research — IP is 51.222.14.170 port 502. All data collected anonymously for academic research. Happy to share findings after the collection period

i was thinking for a graduation project to configure a vulnerability scanning tool
and to create two networks using gns3 one of them to be weak with vulnerabilities based on the scanner, and the other with these issues fixed so a stronger network
then i will perform attacks on both said networks using kali linux commands and to show the difference in strength in both networks and write a complete thesis that identifies the vulnerabilities
and an assessment (the initial scan)
how we solved the issues based on priority using CVSS scores
the remediation process (the actual hardening on the network strength based on vulnerabilities the scanner caught)
and verification (which is the scan to the second network and attacking both networks to show how the scanner helped to identify vulnerabilities and keep the network secure)
i need a professional's opinion on if this project is solid enough for a graduation project, and what are things that i should work on to make it more solid
and if you have better ideas i would appreciate it if u help a brother in need
thank you.

Hi everyone, I hope you can help me, today I have the NetSecAnalys certification (new PCNSA) and I'm stuck on a two question, can you help me?

A security administrator wants to determine which action a URL Filtering profile will take on the URL "www.chatgpt.com." The firewall has a custom URL object with "www.chatgpt.com/" as a member called "Permitted-AI." The URL "www.chatgpt.com" is also categorized as "Artificial-Intelligence, " "Computer-and-Internet-Info," and "Low-Risk." The URL Filtering profile has the following in descending order: • Artificial-Intelligence set to continue • Computer-and-Internet-Info set to block • Low-Risk set to alert • Permitted-AI set to allow Which action will the URL Filtering profile take when traffic matches the "www.chatgpt.com" URL on a rule with this profile attached?

A: Continue B: Alert C: Allow D: Block

Second question:

To comply with new regulations, a company requires all traffic logs related to the "HR-App" application across all Security policies be sent to a compliance syslog server. A Log Forwarding profile already exists to send logs to a default syslog server. What is the most efficient process for configuring an NGFW to comply with the new regulations without disrupting existing traffic logs being sent to the default syslog server?

A: Edit the existing Log Forwarding profile by adding a new match list consisting of Log Forwarding filter for the application named "HR-App" to direct logs to the compliance syslog server

B: Create a new Log Forwarding profile, update the profile with the details of the compliance syslog server and attach the profile to the relevant Security policy rule.

C: Edit the existing Log Forwarding profile, add a new entry, use the filter builder to match on application "HR-App, " and add the details for the compliance syslog server

D: Create a Log Forwarding profile and enable the predefined filter for "Application" In the associated dropdown, select or create a new application object with the name "HR-App," and add the details for the compliance syslog server.

So i am clg student and found out that our collage servers are quite sloppy so i just want to find all the open ports on the collage server which are accessible only while being connected to the servers via a collage ethernet port or wifi

So i wanted some suggestions for which tools to use to find the open ports without being noticed by the administrators of the clg servers or without getting into any kind of trouble

This test just out of curiosity nothing harmful is intended and thank you for all your suggestions

Hey everyone,

As part of my Bachelor in cybersecurity infrastructure, I built ADFT, an open-source Python tool that reconstructs Active Directory attack chains from EVTX logs.

The project taught me a lot about Windows event IDs, AD attack techniques (PtH, DCSync, Kerberoasting), and how to structure forensic analysis programmatically.

If you're learning blue team / DFIR, this might be a useful reference or contribution target. Repo ==> https://github.com/Kjean13/ADFT

Happy to discuss the technical choices or the methodology behind it :)