Netsec
@RNetsec
7.93K subscribers
23.6K links
This channel posts the feed from r/netsec.
For any suggestions dm @streaak
Donate to keep the bot running https://www.paypal.me/akhilgv
Download Telegram
About
Blog
Apps
Platform
Join
Netsec
7.93K subscribers
Netsec
Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) - watchTowr Labs
https://ift.tt/e2O5Uas

Submitted September 29, 2026 at 07:27PM by dx7r__
via reddit https://ift.tt/CxVsHN9
watchTowr Labs
Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)
Part 1 of this week's saga can be found here.

This research is a glimpse into the capabilities that power our Preemptive Exposure Management solution, enabling organizations to rapidly react to emerging threats: the watchTowr Platform.


What Is A Citrix…
358 views
Netsec
Paint It Blue: Reversing Win32k's Callbacks
https://idov31.github.io/posts/paint-it-blue-reverse-win32k

Submitted September 29, 2026 at 11:10PM by Idov31
via reddit https://ift.tt/PJUmjMd
344 views
Netsec
AI coding agents have been creating public GitHub repos on their own to post internal company screenshots
https://ift.tt/vDKB07L

Submitted September 29, 2026 at 09:47PM by Fit-Management2067
via reddit https://ift.tt/5KMyj2T
www.glow.io
Glow: The Endpoint AI Company | PixelLeak AI exposure of private developer data
PixelLeak: New research reveals AI coding agents are exposing secrets, PII, and live admin access across 1,000+ public GitHub repos.
359 views
Netsec
Why "Extension Blocked" Doesn't Mean Safe: Rethinking File Upload Security Testing
https://haakimsec.github.io/GoUpload-site/research

Submitted September 30, 2026 at 12:47AM by Additional_Resort653
via reddit https://ift.tt/VWuniGr
351 views
Netsec
Critical RCE Alert: Full takeover of HashiCorp Vault and OpenBao. OpenBao is patched. Vault remains exposed
https://ift.tt/iAnSr61

Submitted September 30, 2026 at 03:13AM by the_hypotenuse
via reddit https://ift.tt/wkivrPp
control-plane.io
A Realistic Code Execution Exploit Chain in OpenBao and Vault
ControlPlane and the OpenBao community recently patched a full exploit chain from unauthenticated access to full remote code execution that also affects IBM's HashiCorp Vault.
394 views
Netsec
Microsoft Copilot Cowork Exfiltrates Files
https://ift.tt/kVHJPis

Submitted September 30, 2026 at 03:30AM by fagnerbrack
via reddit https://ift.tt/GgHPybh
Promptarmor
Microsoft Copilot Cowork Exfiltrates Files
Microsoft Copilot Cowork is vulnerable to file exfiltration attacks via indirect prompt injection as a result of insecure automatic action approvals for sending Emails and Teams messages.
398 views
Netsec
Pwnd Blaster: Hacking your PC using your speaker without ever touching it
https://ift.tt/7qIwXVl

Submitted September 30, 2026 at 06:30AM by fagnerbrack
via reddit https://ift.tt/FKuybte
nns.ee
Pwnd Blaster: Hacking your PC using your speaker without ever touching it | nns.ee
Abusing an unauthenticated Bluetooth protocol to turn a PC speaker into a Rubber Ducky.
385 views
Netsec
No Time to Pwn – Can AI Find and Exploit the Linux Kernel?
https://ift.tt/AuahTKf

Submitted September 30, 2026 at 03:28AM by fede_k
via reddit https://ift.tt/fKrpY1l
XBOW
No Time to Pwn: CVE-2026-72018 Linux Kernel LPE | XBOW
XBOW discovered CVE-2026-72018, an out-of-bounds write in the Linux kernel's SMC-D driver, and turned one weak primitive into a working root exploit.
371 views
Netsec
Tales from the Trenches: Anthropic’s Mythos and Rejetto HFS
https://ift.tt/onXPywh

Submitted September 30, 2026 at 06:38PM by scopedsecurity
via reddit https://ift.tt/u0Bk2gM
Horizon3
Anthropic Mythos Finds Rejetto HFS RCE
See how Horizon3 used Anthropic’s Mythos to uncover a Rejetto HFS cryptographic flaw, forge admin sessions, and achieve remote code execution.
395 views
Netsec
The Real Price Tag on Breaches
https://ift.tt/8m1EybX

Submitted October 1, 2026 at 06:31AM by fagnerbrack
via reddit https://ift.tt/hqzG7WQ
www.resilientcyber.io
The Real Price Tag on Breaches
A look at Verizon's Data Breach Impact Study And What The Findings Teach Us
367 views
Netsec
New Local Privilege Escalation on Acer laptops
https://ift.tt/2s6ywBh

Submitted October 1, 2026 at 01:04PM by Intrinsec_
via reddit https://ift.tt/PsqweZX
INTRINSEC
Acer System Monitor: from standard user to SYSTEM with CVE-2026-50610
CVE-2026-50610 : une vulnérabilité Acer permet à un utilisateur standard d’obtenir les privilèges SYSTEM sur Windows. En savoir plus..
349 views
Netsec
From: anyone@icloud.com - Spoofing Arbitrary Apple iCloud Identities
https://ift.tt/WLOFCUN

Submitted October 1, 2026 at 03:27PM by The_Login
via reddit https://ift.tt/eWAfiNq
SEC Consult
From: anyone@icloud.com - Spoofing Arbitrary Apple iCloud Identities
A case study on discovering two email spoofing vulnerabilities in Apple iCloud.
330 views
Netsec
r/netsec monthly discussion & tool thread
Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.Rules & GuidelinesAlways maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.Avoid use of memes. If you have something to say, say it with real words.All discussions and questions should directly relate to netsec.No tech support is to be requested or provided on r/netsec.As always, the content & discussion guidelines should also be observed on r/netsec.FeedbackFeedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

Submitted October 1, 2026 at 06:59PM by albinowax
via reddit https://ift.tt/0CZK8gY
Reddit
From the netsec community on Reddit
Explore this post and more from the netsec community
322 views
Netsec
How to Spot a Compromised MikroTik Router
https://ift.tt/efNAUnX

Submitted October 1, 2026 at 08:16PM by ifritnoises
via reddit https://ift.tt/nZvi0Vy
Ifrit
The Lucifer: How to Spot a Compromised MikroTik Router
How attackers turn a MikroTik router's own features against the network, and how to detect it in the configuration
322 views
Netsec
Server Mismatch: WordPress plugin vulnerabilities when relying on .htaccess files
https://ift.tt/M6xFZdY

Submitted October 1, 2026 at 09:41PM by ultrastrik3
via reddit https://ift.tt/R2ltLir
UltraStrike Cybersecurity
Server Mismatch: WordPress Plugin Vulnerabilities When Relying On .htaccess Files
Table of Contents



Table of ContentsKey TakeawaysWelcomeBackgroundDetailsExamplesEverest BackupBackWPUpExposureDigitalOceanAzure AppServiceAWS LightSailAkamai (Linode)WordPress.comDreamHostLiquidWebBlueHostShodanResponseServer AdministratorsSecurity An…
357 views
Netsec
a CVE dispute
https://ift.tt/Kpnes94

Submitted October 2, 2026 at 03:30AM by fagnerbrack
via reddit https://ift.tt/KMWXTn5
daniel.haxx.se
a CVE dispute
A few years years ago the curl project signed up and became a CNA. This means that we are masters of and can allocate our own CVE identifiers. For any security problems within our territory, it is we who decides if the issue should get a CVE or not. No more…
446 views
Netsec
Prompt like a Butterfly, Sting like a Tracker: A Privacy Analysis ofWeb and Mobile Conversational AI Agents
https://ift.tt/fkD1l5t

Submitted September 30, 2026 at 08:45PM by Alarming_Minute5260
via reddit https://ift.tt/WZLBX1t
326 views
Netsec
Azure's Weakest Link - Five Full Cross-Tenant Compromises
https://ift.tt/k6r4HM1

Submitted October 2, 2026 at 05:45PM by piraterapper
via reddit https://ift.tt/tVhYymq
Binary Security AS
Azure’s Weakest Link - Five Full Cross-Tenant Compromises
In my previous blog posts, Azure’s Weakest Link? and Azure’s Weakest Link - Full Cross-Tenant Compromise, I gave an overview of the severely insecure architecture behind API Connections in Azure, a part of Azure Logic Apps, and an instance of a full cross…
319 views
Netsec
45% of credential-phishing pages weren't on Google Safe Browsing when first seen; 29% still weren't after a week
https://ift.tt/P0dDKqr

Submitted October 2, 2026 at 07:20PM by ricveloso
via reddit https://ift.tt/T4cf6Dj
Grizzlysec
The zero-hour phishing gap
Nearly half the credential-phishing Grizzly catches isn't on Google's blocklist yet. Here's exactly how we measure that.
316 views
Netsec
8 out of 10 Banks HATE This One Weird 3SKey RCE
https://ift.tt/w5WXKqx

Submitted October 2, 2026 at 09:35PM by acorn222
via reddit https://ift.tt/KDWSc9e
Amibeingpwned
8 out of 10 Banks HATE This One Weird 3SKey RCE
SConnect (1M+ users), the extension and native host used to authenticate with 3SKey, SWIFT, eIDs and other hardware signing tokens, had a drive-by RCE: any site or iframe could silently download and run a DLL by exploiting an uninitialised-memory bypass in…
324 views
Netsec
Bypassing Secure Boot via Unbounded RLE8 Splash Images in U-Boot (CVE-2026-71972)
https://ift.tt/vlmoKwM

Submitted October 2, 2026 at 10:20PM by Emergency_Stable_923
via reddit https://ift.tt/fJRQzIt
339 views