Netsec
@RNetsec
7.75K subscribers
23.5K links
This channel posts the feed from r/netsec.
For any suggestions dm @streaak
Donate to keep the bot running https://www.paypal.me/akhilgv
Download Telegram
About
Blog
Apps
Platform
Join
Netsec
7.75K subscribers
Netsec
Flying Eagle Android RAT: TLS Certificate Pivots, Panel Fingerprints, and 170 Servers Across Hong Kong ASNs
https://ift.tt/BqvoDEd

Submitted July 28, 2026 at 11:15PM by Straight-Practice-99
via reddit https://ift.tt/ZYjszW3
hunt.io
Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon
Hunt.io and NetAskari trace a leaked Android RAT framework across 170 active servers, analyze the APK builder internals, and document a successor platform called Night Dragon targeting Chinese users.
417 views
Netsec
How AI is powering business email compromise at scale
https://ift.tt/lJnkgNA

Submitted July 28, 2026 at 07:01PM by eyesec_research
via reddit https://ift.tt/qKuLlk5
Eye Research
AI-powered Phishing-as-a-Service: Inside Two BEC Kits
A look at two undocumented, AI-built phishing kits that automate the full business email compromise chain: device code phishing, token theft, persistence, and AI-driven invoice fraud.
419 views
Netsec
Claude Mythos degrades HAWK and developed new exploit for round-reduced AES
https://ift.tt/G0HtiPl

Submitted July 29, 2026 at 01:23AM by Soundwave_47
via reddit https://ift.tt/cd4sDpn
Anthropic
Discovering cryptographic weaknesses with Claude
Anthropic researchers find weaknesses in cryptographic algorithms with Claude Mythos Preview
439 views
Netsec
Hush Security raises $30 million to govern enterprise AI agents
https://ift.tt/DsgZX3n

Submitted July 29, 2026 at 01:13AM by ryanmerket
via reddit https://ift.tt/UE1Jefu
RuntimeWire
Hush Security raises $30 million to govern enterprise AI agents
Hush Security raised a $30 million Series A from Akamai, Battery Ventures and YL Ventures to expand its runtime identity and access platform for AI agents.
472 views
Netsec
HTTP Request Smuggling in Hiawatha
https://ift.tt/G5Kirly

Submitted July 29, 2026 at 05:59PM by SzLam__
via reddit https://ift.tt/nSiC12E
Fenrisk
HTTP Request Smuggling in Hiawatha - CVE-2026-51785
Security experts
444 views
Netsec
Your House Has an FFmpeg Problem - elttam
https://ift.tt/Bw6WIn0

Submitted July 29, 2026 at 05:42PM by AnimalStrange
via reddit https://ift.tt/PkN8eSM
Elttam
Your House Has an FFmpeg Problem - elttam
How we went hunting for attack chain primitives on Home Assistant and ended up with an interesting exploit by abusing FFmpeg input streams.
464 views
Netsec
Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident
https://ift.tt/ufT7Ybi

Submitted July 29, 2026 at 08:19PM by si9int
via reddit https://ift.tt/lYVqDNU
huggingface.co
Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident
We’re on a journey to advance and democratize artificial intelligence through open source and open science.
497 views
Netsec
Reversing of Eufy Security Video Doorbell sync protocol and wifi creds decryption from flash memory
https://adepts.of0x.cc/eufy-doorbell-hacking/

Submitted July 30, 2026 at 12:27AM by gid0rah
via reddit https://ift.tt/7N4oSci
From your doorbell to your home network |
From your doorbell to your home network | AdeptsOf0xCC
Analyzing Eufy Security Ecosystem and reverse engineering of its doorbell component
506 views
Netsec
Sixteen strangers and a shared obfuscator: mapping the wool scene
https://ift.tt/HUSX1P0

Submitted July 30, 2026 at 01:53AM by TheSilenceOfWinter
via reddit https://ift.tt/0gb4tuv
Alex Manson
Sixteen strangers and a shared obfuscator: mapping the wool scene
A 16 actor map of a Chinese reward farming scene, built out from a single GitHub repo over a weekend. The operators know GitHub is dangerous and scrub their history religiously, but they defend the page and forget the graph: the scrub itself is a trace, and…
501 views
Netsec
Detection and Enforcement for Endpoint AI Agents
https://ift.tt/gLwE8WY

Submitted July 30, 2026 at 05:52AM by netw0rm
via reddit https://ift.tt/ynDKomQ
research.perplexity.ai
Securing Agents Across Perplexity’s Client Endpoints with Numbat
Numbat is Perplexity’s open-source agent security suite for client endpoints. It detects, prevents, and investigates risky AI agent behavior on macOS, Linux, and Windows.
499 views
Netsec
KindaRails2Shell: arbitrary file read to RCE in Rails Active Storage via libvips (CVE-2026-66066)
https://ift.tt/pj8HOiY

Submitted July 30, 2026 at 07:34PM by ZealousidealHunter80
via reddit https://ift.tt/Hp4iLvZ
Ethiack
KindaRails2Shell - Critical RCE in Rails via Active Storage (CVE-2026-66066) | Ethiack — Autonomous Ethical Hacking for continuous…
Ethiack research team discovered KindaRails2Shell (CVE-2026-66066): a critical RCE in Ruby on Rails via Active Storage. 500,000+ sites affected. Find out if you are and how to mitigate.
476 views
Netsec
What Every Programmer Should Know About Twists of Elliptic Curves
https://ift.tt/P2q8JjR

Submitted July 30, 2026 at 09:10PM by DataBaeBee
via reddit https://ift.tt/xNuHigY
Substack
What Every Programmer Should Know About Twists of Elliptic Curves
Twists Make Elliptic Curves Wildly Insecure. Here'a Cheatsheet Using Bitcoin's Familiar Secp
488 views
Netsec
Deterministic Runtime Bounds for Autonomous AI Agents at the C-ABI Syscall Layer
https://drive.google.com/file/d/1PTXugwbuqKvw1Eo4_pul-Z3v--dCFJrD/view?usp=drive_link

Submitted July 31, 2026 at 07:54AM by Smiling509
via reddit https://ift.tt/O104anp
Reddit
From the netsec community on Reddit: [ Removed by moderator ]
Posted by Smiling509 - 2 votes and 0 comments
468 views
Netsec
Full Rails RCE technical writeup... KindaRails2Shell: How a MATLAB file reads your secrets and pops a shell on Ruby on Rails | Ethiack
https://ift.tt/lIUV9Tt

Submitted July 31, 2026 at 04:38PM by hakluke
via reddit https://ift.tt/MkRQvq6
Ethiack
KindaRails2Shell: How a MATLAB file reads your secrets and pops a shell on Ruby on Rails | Ethiack — Autonomous Ethical Hacking…
CVE-2026-66066: how a .mat file declared as image/png chains into arbitrary file read and remote code execution as root on a default Ruby on Rails application.
493 views
Netsec
Predictable RNG Fallback and 32-Bit Reseed in COLDCARD Firmware
https://engineering.block.xyz/blog/predictable-rng-fallback-and-32-bit-reseed-in-coldcard-firmware

Submitted July 31, 2026 at 07:47PM by _vavkamil_
via reddit https://ift.tt/fO3P7Xg
Block Engineering Blog
Predictable RNG Fallback and 32-Bit Reseed in COLDCARD Firmware
How a disabled hardware-RNG path and 32-bit reseed constrain entropy in affected COLDCARD firmware and expose generated secrets.
493 views
Netsec
Investigating three real-world incidents in Anthropic's evaluations
https://ift.tt/IDaJZE4

Submitted August 1, 2026 at 02:37AM by luckokkkk
via reddit https://ift.tt/3yQrAGK
Anthropic
Investigating three real-world incidents in our cybersecurity evaluations
In a review of our cybersecurity evaluation transcripts, we found three incidents in which a Claude model reached the internet from within or while interacting with a third-party evaluation environment, and then gained unauthorized access to the real systems…
523 views
Netsec
frontier class vulnerabilities: it gets worse before it (maybe) gets better
https://ift.tt/AXsvNYV

Submitted August 1, 2026 at 05:21PM by Mempodipper
via reddit https://ift.tt/wXDJWVc
shubs
frontier class vulnerabilities: it gets worse before it (maybe) gets better
Early in my career as a consultant, I was put on source code review engagements despite not being experienced. This forced me to deliver on projects that, looking back, were of a ludicrous size and scope for my skills at the time.

Those early career opportunities…
475 views
Netsec
r/netsec monthly discussion & tool thread
Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.Rules & GuidelinesAlways maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.Avoid use of memes. If you have something to say, say it with real words.All discussions and questions should directly relate to netsec.No tech support is to be requested or provided on r/netsec.As always, the content & discussion guidelines should also be observed on r/netsec.FeedbackFeedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

Submitted August 1, 2026 at 06:59PM by albinowax
via reddit https://ift.tt/bAcGs8F
Reddit
From the netsec community on Reddit
Explore this post and more from the netsec community
544 views
Netsec
The Risk of Fine-Tuned Open-Weight Models · MSec Operations Blog
https://ift.tt/flHdiSr

Submitted August 3, 2026 at 12:30AM by S3cur3Th1sSh1t
via reddit https://ift.tt/tuNikhP
www.msecops.de
The Risk of Fine-Tuned Open-Weight Models · MSec Operations Blog
A proof of concept: fine-tuning small open-weight coding models into silent backdoors that execute code on the machine of anyone who connects to them.
483 views
Netsec
L2 Reduction: LLL Algorithm With Quadratic Complexity in Python
https://ift.tt/eyRd9rm

Submitted August 3, 2026 at 08:45AM by DataBaeBee
via reddit https://ift.tt/1oBOLRQ
Substack
L2 Reduction: LLL Algorithm With Quadratic Complexity
[Python] Fast Floating-Point Variant of LLL Reduction with Proven Termination
470 views
Netsec
Cruising for Shells in Flowise - elttam
https://ift.tt/0gCtOFk

Submitted August 3, 2026 at 05:24PM by AnimalStrange
via reddit https://ift.tt/E8sQeUR
Elttam
Cruising for Shells in Flowise - elttam
After reviewing Flowise, a popular AI agent/workflow platform, and its history of critical security advisories, we uncovered 6 new remote code execution vulnerabilities in v3.1.1/v3.1.2
482 views