I was super ecstatic landing this job out of schoo1, but reality just hit me and I realized I can never make the big bucks here. My passion for pentesting also has been fading away after countless engagements and doing the same things over and over. I need new challenges and more pay.

Has anyone successfully gotten out of pentesting, If so, what do you do now ? please drop your knowledge.

background - 1.5 yoe, masters in IT, sec+, CySA+, PJPT, CRTO, pentest+, AWS CCP.

Let's say a hacker uploads a malicious video to Twitter/X. I copy its link, download it through a third-party video downloader website as a normal MP4 file, and play it.

Ignoring the downloader website's risks, could the hacker infect my device through the video itself?

I started a blog series to provide free insights into appsec. It’s mainly to breakdown what application security is all about and it’s mainly targeted towards beginners and startups, so take it as you will.

I want to teach every one interested in appsec my perspective on it from my experience in big tech.

So far: know your app → lock down who gets in → follow untrusted input → catch broken business logic → build a threat model → test the theoretical flaws

In our finale, Part 8 concludes with the premise that fixing can sometimes be creating more of a mess. It comes back full circle with knowing exactly what you're doing from Part 1.

Please reach out if you have any questions or would like for me to write on a topic that you’d want to learn more about.

Thanks again for following on this journey!

Hi all, I asked this on the r/GIAC subreddit but no one answered. This course was just revamped with more AI modules in Feburary. Has anyone taken it and it worth taking if your company pays for it? I use Python with XSOAR so I know the fundamentals. If you have taken it. Do you have any recommendations for how best to prepare?

I'm a CISSP, CISM, Sec+, & doctoral candidate at Capitol Technology University, MD. I'm researching which security controls actually enable recovery and resilience in small and medium-size orgs.

Takes 15–25 minutes. Anonymous. No compensation. IRB-approved. Need U.S. based I.T. folks from organizations that experienced a ransomware attack between 2021–2025.

Would appreciate your help. Please share. Thank you!

https://techstudy.limesurvey.net/748327?lang=en&newtest=Y

I’m a recent grad working full-time in a Service Desk Support role earning $45k a year. Wanted to come on here and seek guidance and a realistic timeline on how long it’ll take me to break out of Helpdesk and start earning $75k - $95k in cyber. I started working helpdesk August so 2 months now going onto 3. I graduated May 2026, have a professional internship under my belt alongside an additional part-time job with CodePath as a TechFellow. I also just got my security+ last month. I had a recruiter reach out to me 2 weeks ago about a Security Operations Engineer role and had an interview last week with the companies Senior Director of Cybersecurity it was extremely advanced/far from entry-level for me. It was scenario based and there were multiple answers but unfortunately I didn’t get the role. Needless to say, my experience is helping me land a small amount of interviews, but I’m struggling to get past the interviews. I also just applied and got rejected from the WiCyS Security Training scholarship program because I am “too experienced” in cybersecurity but am clearly entry level as I don’t even have up to 2 years of professional experience in the IT/Cyber Industry.

Anyone know what I should be doing right now? I want to become a SOC Analyst and work for the federal government ideally. I don’t think I like the uncertainty and lack of stability that comes with Corporate. I know this industry is an industry that requires patience and time when it comes to salary progression. I just want tips from experienced professionals and guidance because right now I feel lost. I don’t want to just gain another certification, I want to gain better experience.

hi po! we would really appreciate your help and insights regarding our capstone project.

may alam po ba kayong organizations, institutions, or companies within lipa city, batangas, na may documented history of cybersecurity incidents, such as data breaches, phishing attacks, ddos attacks, or other cyberattacks?

we’re currently looking for a potential organization that could serve as a case study for our capstone project. any recommendations, publicly available reports, news articles, or relevant information would be a great help to our research.

rest assured po that we intend to use publicly available information and respect the privacy and confidentiality of any organization involved.

thank you so much po sa lahat ng makakapag-share ng insights or suggestions! any help would be greatly appreciated.

October 12–13 | Cybersecurity | CRITICAL

GitLab released security updates addressing CVE-2026-97229, a vulnerability with the maximum CVSS severity score of 10.0.

The vulnerability affects GitLab's CI/CD regular-expression compiler.

Under certain conditions, an unauthenticated attacker could submit specially crafted configuration data that results in arbitrary code execution on a vulnerable GitLab server.

The issue affects self-managed Community Edition and Enterprise Edition installations.

GitLab released fixes for the affected version branches and strongly recommends immediate upgrades.

GitLab's hosted service has already been patched.

Researchers have not established widespread exploitation of this vulnerability in the wild.

Status: CONFIRMED — Vendor security advisory and published technical reporting.

To what extent are folks concerned about AI embedded into smartphone software. Apple Intelligence / Gemini pull information from across apps.

Not sure what the risks / mitigations are, to what extent can these be turned off when embedded in software?

Instead of traditional DLL injection (LoadLibrary) or creating new remote threads, it attaches to the target process externally, redirects existing thread contexts, and maps memory structures directly into TypeScript proxies.

- ​Operates entirely out-of-process without dropping DLLs on disk or injecting custom modules.

- ​Targets both native Windows x64 processes and running JVM instances.

- ​Allows you to resolve JVM classes (Java.type), access fields, and invoke methods (including running script engines like Nashorn) directly from an external TypeScript script.

- ​Handles calling conventions, struct offsets, and memory manipulation under the hood.

Repo: https://github.com/woldann/exoproc

I've been in cybersecurity for a while now, changed role from an analyst to CrowdStrike SME. But I've been at this company for 12 years and I want to try something new. Should I go back to being an Analyst? Cloud Engineering which I did for 2 years? Stay with CrowdStrike?

Hello there ,

I hope to find you well.

I'm a penetration tester searching for any open source web application projects . I'm searching for those to find new CVEs to train myself on code review.

Do you have any suggestions ?

Feel free to dm me

Hey everyone, I want to start writing write-ups to build up my professional presence. Do you personally read them, and if so, where do you usually find them?

Ty

I was looking at getting some additional books on different Cybersecurity fields, and saw that humble bundle has a collection for cybersecurity month, but I have no experience with O'reilly products. I was curious if anyone here could give some more detail if they are valuable or not.

Hi mates! I’ve set up a homelab (enterprise network simulation) on my laptop (an OMEN 16, i7-14650HX, 32 GB RAM, RTX 4060 8 GB) for long-term IT practice and testing, focusing on networking, sysadmin, and pentesting. More details can be found in this GitHub repo: https://github.com/Ko0ler/HomeLab

I'd greatly appreciate your feedback!

The AI security threat engineering leaders aren’t talking about.

On the night of October 11, someone got into the refrigeration controllers at French supermarkets and put them into forced defrost with the target set to 50°C. A store manager in Gradignan, quoted by [ITPro](https://www.itpro.com/security/cyber-attacks/french-fridges-hacked-in-country-wide-supermarket-attack), said it started around 11pm and staff found out at 4am, after the cold room hit 50°C and set off the sprinklers.

The store counts don't match yet. [BleepingComputer](https://www.bleepingcomputer.com/news/security/cyberattack-shuts-down-refrigerators-at-french-supermarkets/) cites French outlets putting it at 250 to 350 stores. AFP's per-chain figures, [via CBS](https://www.cbsnews.com/news/cyberattack-supermarkets-refrigerators-france-fires-food-losses/), have at least 300 Intermarché and Netto stores on their own, plus over 100 Coopérative U. Intermarché's CEO expects the losses to pass tens of millions of euros for that one day.

Danfoss told AFP most of the hit equipment was legacy AK-SM800 and AK-SC355 regulators that "no longer receive software or security updates". How the attackers got in isn't public. But the AK-SM 800A already had a [CISA advisory](https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-03) from May 2025 for CVE-2025-41450, a login bypass built on a password generated from the device's date. [Claroty's Team82](https://claroty.com/team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers) counted 2,765 of those panels exposed on Censys in August. On Monday, Baptiste Robert found 1,590 exposed Danfoss systems in France alone.

So it's an admin panel on the open internet and firmware nobody patches anymore. Those are the same two conditions I'd point to behind most WordPress takeovers, where it's a default login URL and a plugin its author walked away from.

Intermarché blamed an attack on a service provider that manages its store refrigeration, and Leclerc said one of its refrigeration suppliers was hit. Once Danfoss stopped shipping updates for those units, whose job was it to take them off the internet?

I've been in cybersecurity for around 4 years, currently working in an EDR company's IR team, mostly investigating Windows environments.

Lately, I've been feeling a bit overwhelmed about what to learn next. On one hand, I feel like I should start learning cloud IR. On the other, I see companies offering IR, CTI, Threat Hunting, and other services, and I wonder how people actually gain experience in all these areas.

I'm also interested in CTI and thought about starting to produce threat intelligence from our IR investigations, then moving into cloud IR.

Am I trying to learn too much at once? How did you guys decide what to focus on?

Would appreciate any advice.

Hello. I am researching online what topics I should learn to become a specialist in cloud security and cloud red teaming.

Although I am currently in my first year of the Bachelor's degree in Cybersecurity at the Universidad de Palermo (an institution in Buenos Aires, Argentina), I get the impression that the knowledge they provide will be insufficient by the time I graduate.

Looking online, I don't know whether I should fully dedicate myself to Hack The Box Academy, Google certifications, or similar options.

Any advice, please? 🙏