Netsec
@RNetsec
7.93K subscribers
23.6K links
This channel posts the feed from r/netsec.
For any suggestions dm @streaak
Donate to keep the bot running https://www.paypal.me/akhilgv
Download Telegram
About
Blog
Apps
Platform
Join
Netsec
7.93K subscribers
Netsec
Critical RCE Alert: Full takeover of HashiCorp Vault and OpenBao. OpenBao is patched. Vault remains exposed
https://ift.tt/iAnSr61

Submitted September 30, 2026 at 03:13AM by the_hypotenuse
via reddit https://ift.tt/wkivrPp
control-plane.io
A Realistic Code Execution Exploit Chain in OpenBao and Vault
ControlPlane and the OpenBao community recently patched a full exploit chain from unauthenticated access to full remote code execution that also affects IBM's HashiCorp Vault.
392 views
Netsec
Microsoft Copilot Cowork Exfiltrates Files
https://ift.tt/kVHJPis

Submitted September 30, 2026 at 03:30AM by fagnerbrack
via reddit https://ift.tt/GgHPybh
Promptarmor
Microsoft Copilot Cowork Exfiltrates Files
Microsoft Copilot Cowork is vulnerable to file exfiltration attacks via indirect prompt injection as a result of insecure automatic action approvals for sending Emails and Teams messages.
395 views
Netsec
Pwnd Blaster: Hacking your PC using your speaker without ever touching it
https://ift.tt/7qIwXVl

Submitted September 30, 2026 at 06:30AM by fagnerbrack
via reddit https://ift.tt/FKuybte
nns.ee
Pwnd Blaster: Hacking your PC using your speaker without ever touching it | nns.ee
Abusing an unauthenticated Bluetooth protocol to turn a PC speaker into a Rubber Ducky.
381 views
Netsec
No Time to Pwn – Can AI Find and Exploit the Linux Kernel?
https://ift.tt/AuahTKf

Submitted September 30, 2026 at 03:28AM by fede_k
via reddit https://ift.tt/fKrpY1l
XBOW
No Time to Pwn: CVE-2026-72018 Linux Kernel LPE | XBOW
XBOW discovered CVE-2026-72018, an out-of-bounds write in the Linux kernel's SMC-D driver, and turned one weak primitive into a working root exploit.
368 views
Netsec
Tales from the Trenches: Anthropic’s Mythos and Rejetto HFS
https://ift.tt/onXPywh

Submitted September 30, 2026 at 06:38PM by scopedsecurity
via reddit https://ift.tt/u0Bk2gM
Horizon3
Anthropic Mythos Finds Rejetto HFS RCE
See how Horizon3 used Anthropic’s Mythos to uncover a Rejetto HFS cryptographic flaw, forge admin sessions, and achieve remote code execution.
388 views
Netsec
The Real Price Tag on Breaches
https://ift.tt/8m1EybX

Submitted October 1, 2026 at 06:31AM by fagnerbrack
via reddit https://ift.tt/hqzG7WQ
www.resilientcyber.io
The Real Price Tag on Breaches
A look at Verizon's Data Breach Impact Study And What The Findings Teach Us
363 views
Netsec
New Local Privilege Escalation on Acer laptops
https://ift.tt/2s6ywBh

Submitted October 1, 2026 at 01:04PM by Intrinsec_
via reddit https://ift.tt/PsqweZX
INTRINSEC
Acer System Monitor: from standard user to SYSTEM with CVE-2026-50610
CVE-2026-50610 : une vulnérabilité Acer permet à un utilisateur standard d’obtenir les privilèges SYSTEM sur Windows. En savoir plus..
343 views
Netsec
From: anyone@icloud.com - Spoofing Arbitrary Apple iCloud Identities
https://ift.tt/WLOFCUN

Submitted October 1, 2026 at 03:27PM by The_Login
via reddit https://ift.tt/eWAfiNq
SEC Consult
From: anyone@icloud.com - Spoofing Arbitrary Apple iCloud Identities
A case study on discovering two email spoofing vulnerabilities in Apple iCloud.
323 views
Netsec
r/netsec monthly discussion & tool thread
Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.Rules & GuidelinesAlways maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.Avoid use of memes. If you have something to say, say it with real words.All discussions and questions should directly relate to netsec.No tech support is to be requested or provided on r/netsec.As always, the content & discussion guidelines should also be observed on r/netsec.FeedbackFeedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

Submitted October 1, 2026 at 06:59PM by albinowax
via reddit https://ift.tt/0CZK8gY
Reddit
From the netsec community on Reddit
Explore this post and more from the netsec community
317 views
Netsec
How to Spot a Compromised MikroTik Router
https://ift.tt/efNAUnX

Submitted October 1, 2026 at 08:16PM by ifritnoises
via reddit https://ift.tt/nZvi0Vy
Ifrit
The Lucifer: How to Spot a Compromised MikroTik Router
How attackers turn a MikroTik router's own features against the network, and how to detect it in the configuration
318 views
Netsec
Server Mismatch: WordPress plugin vulnerabilities when relying on .htaccess files
https://ift.tt/M6xFZdY

Submitted October 1, 2026 at 09:41PM by ultrastrik3
via reddit https://ift.tt/R2ltLir
UltraStrike Cybersecurity
Server Mismatch: WordPress Plugin Vulnerabilities When Relying On .htaccess Files
Table of Contents



Table of ContentsKey TakeawaysWelcomeBackgroundDetailsExamplesEverest BackupBackWPUpExposureDigitalOceanAzure AppServiceAWS LightSailAkamai (Linode)WordPress.comDreamHostLiquidWebBlueHostShodanResponseServer AdministratorsSecurity An…
353 views
Netsec
a CVE dispute
https://ift.tt/Kpnes94

Submitted October 2, 2026 at 03:30AM by fagnerbrack
via reddit https://ift.tt/KMWXTn5
daniel.haxx.se
a CVE dispute
A few years years ago the curl project signed up and became a CNA. This means that we are masters of and can allocate our own CVE identifiers. For any security problems within our territory, it is we who decides if the issue should get a CVE or not. No more…
435 views
Netsec
Prompt like a Butterfly, Sting like a Tracker: A Privacy Analysis ofWeb and Mobile Conversational AI Agents
https://ift.tt/fkD1l5t

Submitted September 30, 2026 at 08:45PM by Alarming_Minute5260
via reddit https://ift.tt/WZLBX1t
317 views
Netsec
Azure's Weakest Link - Five Full Cross-Tenant Compromises
https://ift.tt/k6r4HM1

Submitted October 2, 2026 at 05:45PM by piraterapper
via reddit https://ift.tt/tVhYymq
Binary Security AS
Azure’s Weakest Link - Five Full Cross-Tenant Compromises
In my previous blog posts, Azure’s Weakest Link? and Azure’s Weakest Link - Full Cross-Tenant Compromise, I gave an overview of the severely insecure architecture behind API Connections in Azure, a part of Azure Logic Apps, and an instance of a full cross…
306 views
Netsec
45% of credential-phishing pages weren't on Google Safe Browsing when first seen; 29% still weren't after a week
https://ift.tt/P0dDKqr

Submitted October 2, 2026 at 07:20PM by ricveloso
via reddit https://ift.tt/T4cf6Dj
Grizzlysec
The zero-hour phishing gap
Nearly half the credential-phishing Grizzly catches isn't on Google's blocklist yet. Here's exactly how we measure that.
304 views
Netsec
8 out of 10 Banks HATE This One Weird 3SKey RCE
https://ift.tt/w5WXKqx

Submitted October 2, 2026 at 09:35PM by acorn222
via reddit https://ift.tt/KDWSc9e
Amibeingpwned
8 out of 10 Banks HATE This One Weird 3SKey RCE
SConnect (1M+ users), the extension and native host used to authenticate with 3SKey, SWIFT, eIDs and other hardware signing tokens, had a drive-by RCE: any site or iframe could silently download and run a DLL by exploiting an uninitialised-memory bypass in…
309 views
Netsec
Bypassing Secure Boot via Unbounded RLE8 Splash Images in U-Boot (CVE-2026-71972)
https://ift.tt/vlmoKwM

Submitted October 2, 2026 at 10:20PM by Emergency_Stable_923
via reddit https://ift.tt/fJRQzIt
324 views
Netsec
security.txt on the Czech web: Scanning 1k popular .cz domains
https://ift.tt/qjxInmk

Submitted October 2, 2026 at 10:22PM by _vavkamil_
via reddit https://ift.tt/R7BtaiU
Kamil Vavra @vavkamil
security.txt on the Czech web: Scanning 1k popular .cz domains
Adding security.txt to the web should be easy. The RFC is fairly simple, and there aren’t many ways to fail. Well, at least I thought that, until now. Let’s look at how a very small standard can fail in surprisingly creative ways.
334 views
Netsec
A peek into Reddit's anti-spam internals
https://lyra.horse/blog/2026/06/reddit-spam-internals/

Submitted October 3, 2026 at 09:30AM by fagnerbrack
via reddit https://ift.tt/Iw6VxG1
lyra's epic blog
A peek into Reddit's anti-spam internals
How Reddit accidentally leaked its spamurai system.
290 views
Netsec
RCE and bad crypto in Internxt's 'post-quantum' cloud storage
https://ift.tt/A6W9Tr1

Submitted October 3, 2026 at 12:13PM by pascalschaerli
via reddit https://ift.tt/Cx8BjqO
Pascal Schärli
Post-Quantum Crypto Won't Fix Your Architecture
Adding PQC to this product was like installing a vault door on a tent. The server could intercept your keys and an RCE let attackers run code on your desktop.
290 views
Netsec
Post quantum migration is the thing nobody in SMB is talking about... and timelines make that a problem
https://ift.tt/exF9rso

Submitted October 4, 2026 at 12:48PM by snippipedia
via reddit https://ift.tt/jZKQWsX
Snippipedia
Snippipedia — Cybersecurity & AI
Penetration testing, cloud security, AI red-teaming, and LLM security — built by a Google Cloud security engineer.
157 views