Top Security News for Today
AI-Generated Law
https://www.schneier.com/blog/archives/2025/05/ai-generated-law.html
Threat Landscape for Industrial Automation Systems in Q1 2025
https://securelist.com/industrial-threat-report-q1-2025/116505/
Expression Payloads Meet Mayhem - Ivanti EPMM Unauth RCE Chain (CVE-2025-4427 and CVE-2025-4428) - watchTowr Labs
https://www.reddit.com/r/netsec/comments/1kna9px/expression_payloads_meet_mayhem_ivanti_epmm/
How the Microsoft Secure Future Initiative Brings Zero Trust to Life
https://www.microsoft.com/en-us/security/blog/2025/05/15/how-the-microsoft-secure-future-initiative-brings-zero-trust-to-life/
Fileless Execution: PowerShell Based Shellcode Loader Executes Remcos RAT
https://blog.qualys.com/vulnerabilities-threat-research/2025/05/15/fileless-execution-powershell-based-shellcode-loader-executes-remcos-rat
Breachforums Boss to Pay $700k in Healthcare Breach
https://krebsonsecurity.com/2025/05/breachforums-boss-to-pay-700k-in-healthcare-breach/
Commit Stomping - Manipulating Git Histories to Obscure the Truth
https://www.reddit.com/r/netsec/comments/1knl6j5/commit_stomping_manipulating_git_histories_to/
Wazuh – Open Source Security Platform for Threat Detection, Visibility & Compliance
https://www.darknet.org.uk/2025/05/wazuh-open-source-security-platform-for-threat-detection-visibility-compliance/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
AI-Generated Law
https://www.schneier.com/blog/archives/2025/05/ai-generated-law.html
Threat Landscape for Industrial Automation Systems in Q1 2025
https://securelist.com/industrial-threat-report-q1-2025/116505/
Expression Payloads Meet Mayhem - Ivanti EPMM Unauth RCE Chain (CVE-2025-4427 and CVE-2025-4428) - watchTowr Labs
https://www.reddit.com/r/netsec/comments/1kna9px/expression_payloads_meet_mayhem_ivanti_epmm/
How the Microsoft Secure Future Initiative Brings Zero Trust to Life
https://www.microsoft.com/en-us/security/blog/2025/05/15/how-the-microsoft-secure-future-initiative-brings-zero-trust-to-life/
Fileless Execution: PowerShell Based Shellcode Loader Executes Remcos RAT
https://blog.qualys.com/vulnerabilities-threat-research/2025/05/15/fileless-execution-powershell-based-shellcode-loader-executes-remcos-rat
Breachforums Boss to Pay $700k in Healthcare Breach
https://krebsonsecurity.com/2025/05/breachforums-boss-to-pay-700k-in-healthcare-breach/
Commit Stomping - Manipulating Git Histories to Obscure the Truth
https://www.reddit.com/r/netsec/comments/1knl6j5/commit_stomping_manipulating_git_histories_to/
Wazuh – Open Source Security Platform for Threat Detection, Visibility & Compliance
https://www.darknet.org.uk/2025/05/wazuh-open-source-security-platform-for-threat-detection-visibility-compliance/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Schneier on Security
AI-Generated Law - Schneier on Security
On April 14, Dubai’s ruler, Sheikh Mohammed bin Rashid Al Maktoum, announced that the United Arab Emirates would begin using artificial intelligence to help write its laws. A new Regulatory Intelligence Office would use the technology to “regularly suggest…
Top Security News for Today
Self Rewarding Self Improving
https://arxiv.org/abs/2505.08827
Communications Backdoor in Chinese Power Inverters
https://www.schneier.com/blog/archives/2025/05/communications-backdoor-in-chinese-power-inverters.html
Announcing the Official Parity Release of Volatility 3!
https://www.reddit.com/r/netsec/comments/1ko3uye/announcing_the_official_parity_release_of/
Skitnet(Bossnet) Malware Analysis
https://www.reddit.com/r/netsec/comments/1ko59nn/skitnetbossnet_malware_analysis/
Automated Alert Classification and Triage (AACT): An Intelligent System for the Prioritisation of Cybersecurity Alerts
https://arxiv.org/abs/2505.09616
Guardian Positioning System (GPS) for Location Based Services
https://arxiv.org/abs/2505.09628
Correlating Account on Ethereum Mixing Service via Domain-Invariant feature learning
https://arxiv.org/abs/2505.09743
PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization
https://arxiv.org/abs/2505.09639
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Self Rewarding Self Improving
https://arxiv.org/abs/2505.08827
Communications Backdoor in Chinese Power Inverters
https://www.schneier.com/blog/archives/2025/05/communications-backdoor-in-chinese-power-inverters.html
Announcing the Official Parity Release of Volatility 3!
https://www.reddit.com/r/netsec/comments/1ko3uye/announcing_the_official_parity_release_of/
Skitnet(Bossnet) Malware Analysis
https://www.reddit.com/r/netsec/comments/1ko59nn/skitnetbossnet_malware_analysis/
Automated Alert Classification and Triage (AACT): An Intelligent System for the Prioritisation of Cybersecurity Alerts
https://arxiv.org/abs/2505.09616
Guardian Positioning System (GPS) for Location Based Services
https://arxiv.org/abs/2505.09628
Correlating Account on Ethereum Mixing Service via Domain-Invariant feature learning
https://arxiv.org/abs/2505.09743
PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization
https://arxiv.org/abs/2505.09639
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
arXiv.org
RLSR: Reinforcement Learning from Self Reward
Large language models can generate solutions to complex problems, but training them with reinforcement learning typically requires verifiable rewards that are expensive to create and not possible...
Top Security News for Today
Large Language Models Are More Persuasive Than Incentivized Human Persuaders
https://arxiv.org/abs/2505.09662
$XX^{t}$ Can Be Faster
https://arxiv.org/abs/2505.09814
Analog Foundation Models
https://arxiv.org/abs/2505.09663
Frame by Frame, Kernel Streaming Keeps Giving Vulnerabilities
https://devco.re/blog/2025/05/17/frame-by-frame-kernel-streaming-keeps-giving-vulnerabilities-en/
Stateful Connection With Spoofed Source IP — NetImpostor
https://www.reddit.com/r/netsec/comments/1kp4n2r/stateful_connection_with_spoofed_source_ip/
Translating Electrocardiograms to Cardiac Magnetic Resonance Imaging Useful for Cardiac Assessment and Disease Screening: A Multi-Center Study AI for ECG to CMR Translation Study
https://arxiv.org/abs/2411.13602
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Large Language Models Are More Persuasive Than Incentivized Human Persuaders
https://arxiv.org/abs/2505.09662
$XX^{t}$ Can Be Faster
https://arxiv.org/abs/2505.09814
Analog Foundation Models
https://arxiv.org/abs/2505.09663
Frame by Frame, Kernel Streaming Keeps Giving Vulnerabilities
https://devco.re/blog/2025/05/17/frame-by-frame-kernel-streaming-keeps-giving-vulnerabilities-en/
Stateful Connection With Spoofed Source IP — NetImpostor
https://www.reddit.com/r/netsec/comments/1kp4n2r/stateful_connection_with_spoofed_source_ip/
Translating Electrocardiograms to Cardiac Magnetic Resonance Imaging Useful for Cardiac Assessment and Disease Screening: A Multi-Center Study AI for ECG to CMR Translation Study
https://arxiv.org/abs/2411.13602
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
arXiv.org
When Large Language Models are More PersuasiveThan Incentivized...
Large Language Models (LLMs) have been shown to be highly persuasive, but when and why they outperform humans is still an open question. We compare the persuasiveness of two LLMs (Claude 3.5...
Top Security News for Today
Frida 17 is out
https://www.reddit.com/r/netsec/comments/1kpide4/frida_17_is_out/
Apple downplays framework vuln
https://www.reddit.com/r/netsec/comments/1kpwauf/apple_downplays_framework_vuln/
O2 VoLTE: locating any customer with a phone call
https://www.reddit.com/r/netsec/comments/1kptt5x/o2_volte_locating_any_customer_with_a_phone_call/
Falco – Real-Time Threat Detection for Linux and Containers
https://www.darknet.org.uk/2025/05/falco-real-time-threat-detection-for-linux-and-containers/
Introducing EntraFalcon – A Tool to Enumerate Entra ID Objects and Assignments
https://www.reddit.com/r/netsec/comments/1kq4oie/introducing_entrafalcon_a_tool_to_enumerate_entra/
Cache poisoning via race-condition in Next.js
https://www.reddit.com/r/netsec/comments/1kq64ta/cache_poisoning_via_racecondition_in_nextjs/
Preparing for the Quantum Future: Insights from the NCSC’s PQC Migration Roadmap
https://www.tripwire.com/state-of-security/preparing-quantum-future-insights-ncscs-pqc-migration-roadmap/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Frida 17 is out
https://www.reddit.com/r/netsec/comments/1kpide4/frida_17_is_out/
Apple downplays framework vuln
https://www.reddit.com/r/netsec/comments/1kpwauf/apple_downplays_framework_vuln/
O2 VoLTE: locating any customer with a phone call
https://www.reddit.com/r/netsec/comments/1kptt5x/o2_volte_locating_any_customer_with_a_phone_call/
Falco – Real-Time Threat Detection for Linux and Containers
https://www.darknet.org.uk/2025/05/falco-real-time-threat-detection-for-linux-and-containers/
Introducing EntraFalcon – A Tool to Enumerate Entra ID Objects and Assignments
https://www.reddit.com/r/netsec/comments/1kq4oie/introducing_entrafalcon_a_tool_to_enumerate_entra/
Cache poisoning via race-condition in Next.js
https://www.reddit.com/r/netsec/comments/1kq64ta/cache_poisoning_via_racecondition_in_nextjs/
Preparing for the Quantum Future: Insights from the NCSC’s PQC Migration Roadmap
https://www.tripwire.com/state-of-security/preparing-quantum-future-insights-ncscs-pqc-migration-roadmap/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: Frida 17 is out
Posted by oleavr - 5 votes and 0 comments
Top Security News for Today
The NSA’s “Fifty Years of Mathematical Cryptanalysis (1937–1987)”
https://www.schneier.com/blog/archives/2025/05/the-nsas-fifty-years-of-mathematical-cryptanalysis-1937-1987.html
Introducing EntraFalcon – A Tool to Enumerate Entra ID Objects and Assignments
https://www.reddit.com/r/netsec/comments/1kq4oie/introducing_entrafalcon_a_tool_to_enumerate_entra/
Cache poisoning via race-condition in Next.js
https://www.reddit.com/r/netsec/comments/1kq64ta/cache_poisoning_via_racecondition_in_nextjs/
19th May – Threat Intelligence Report
https://research.checkpoint.com/2025/19th-may-threat-intelligence-report/
Microsoft extends Zero Trust to secure the agentic workforce
https://www.microsoft.com/en-us/security/blog/2025/05/19/microsoft-extends-zero-trust-to-secure-the-agentic-workforce/
SafeTrans: LLM-assisted Transpilation from C to Rust
https://arxiv.org/abs/2505.10708
Agent Name Service (ANS): A Universal Directory for Secure AI Agent Discovery and Interoperability
https://arxiv.org/abs/2505.10609
Neural-Inspired Advances in Integral Cryptanalysis
https://arxiv.org/abs/2505.10790
RAN Tester UE: An Automated Declarative UE Centric Security Testing Platform
https://arxiv.org/abs/2505.10812
Automating Security Audit Using Large Language Model based Agent: An Exploration Experiment
https://arxiv.org/abs/2505.10732
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
The NSA’s “Fifty Years of Mathematical Cryptanalysis (1937–1987)”
https://www.schneier.com/blog/archives/2025/05/the-nsas-fifty-years-of-mathematical-cryptanalysis-1937-1987.html
Introducing EntraFalcon – A Tool to Enumerate Entra ID Objects and Assignments
https://www.reddit.com/r/netsec/comments/1kq4oie/introducing_entrafalcon_a_tool_to_enumerate_entra/
Cache poisoning via race-condition in Next.js
https://www.reddit.com/r/netsec/comments/1kq64ta/cache_poisoning_via_racecondition_in_nextjs/
19th May – Threat Intelligence Report
https://research.checkpoint.com/2025/19th-may-threat-intelligence-report/
Microsoft extends Zero Trust to secure the agentic workforce
https://www.microsoft.com/en-us/security/blog/2025/05/19/microsoft-extends-zero-trust-to-secure-the-agentic-workforce/
SafeTrans: LLM-assisted Transpilation from C to Rust
https://arxiv.org/abs/2505.10708
Agent Name Service (ANS): A Universal Directory for Secure AI Agent Discovery and Interoperability
https://arxiv.org/abs/2505.10609
Neural-Inspired Advances in Integral Cryptanalysis
https://arxiv.org/abs/2505.10790
RAN Tester UE: An Automated Declarative UE Centric Security Testing Platform
https://arxiv.org/abs/2505.10812
Automating Security Audit Using Large Language Model based Agent: An Exploration Experiment
https://arxiv.org/abs/2505.10732
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Schneier on Security
The NSA's "Fifty Years of Mathematical Cryptanalysis (1937–1987)" - Schneier on Security
In response to a FOIA request, the NSA released “Fifty Years of Mathematical Cryptanalysis (1937-1987),” by Glenn F. Stahly, with a lot of redactions. Weirdly, this is the second time the NSA has declassified the document. John Young got a copy in 2019. This…
Top Security News for Today
Government Organizations Lose Nearly a Month in Downtime for Every Ransomware Attack
https://www.tripwire.com/state-of-security/government-organizations-lose-nearly-month-downtime-every-ransomware-attack
How IoT Security Cameras Are Susceptible to Cyber Attacks
https://www.tripwire.com/state-of-security/how-iot-security-cameras-are-susceptible-cyber-attacks
DoorDash Hack
https://www.schneier.com/blog/archives/2025/05/doordash-hack.html
New Vulnerabilities in Foscam X5
https://www.reddit.com/r/netsec/comments/1kr32cs/new_vulnerabilities_in_foscam_x5/
The Sting of Fake Kling: Facebook Malvertising Lures Victims to Fake AI Generation Website
https://research.checkpoint.com/2025/impersonated-kling-ai-site-installs-malware/
How to Extract Useful Info from Microsoft Deployment Toolkit (MDT) Shares on Red Teams
https://www.reddit.com/r/netsec/comments/1kr5uiu/how_to_extract_useful_info_from_microsoft/
Varonis' Data Security Report Reveals 99% of Orgs Have Sensitive Information Exposed to AI
https://www.reddit.com/r/netsec/comments/1kr5uee/varonis_data_security_report_reveals_99_of_orgs/
Malvertising's New Threat: Exploiting Trusted Google Domains
https://www.reddit.com/r/netsec/comments/1krgc39/malvertisings_new_threat_exploiting_trusted/
KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS
https://krebsonsecurity.com/2025/05/krebsonsecurity-hit-with-near-record-6-3-tbps-ddos/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Government Organizations Lose Nearly a Month in Downtime for Every Ransomware Attack
https://www.tripwire.com/state-of-security/government-organizations-lose-nearly-month-downtime-every-ransomware-attack
How IoT Security Cameras Are Susceptible to Cyber Attacks
https://www.tripwire.com/state-of-security/how-iot-security-cameras-are-susceptible-cyber-attacks
DoorDash Hack
https://www.schneier.com/blog/archives/2025/05/doordash-hack.html
New Vulnerabilities in Foscam X5
https://www.reddit.com/r/netsec/comments/1kr32cs/new_vulnerabilities_in_foscam_x5/
The Sting of Fake Kling: Facebook Malvertising Lures Victims to Fake AI Generation Website
https://research.checkpoint.com/2025/impersonated-kling-ai-site-installs-malware/
How to Extract Useful Info from Microsoft Deployment Toolkit (MDT) Shares on Red Teams
https://www.reddit.com/r/netsec/comments/1kr5uiu/how_to_extract_useful_info_from_microsoft/
Varonis' Data Security Report Reveals 99% of Orgs Have Sensitive Information Exposed to AI
https://www.reddit.com/r/netsec/comments/1kr5uee/varonis_data_security_report_reveals_99_of_orgs/
Malvertising's New Threat: Exploiting Trusted Google Domains
https://www.reddit.com/r/netsec/comments/1krgc39/malvertisings_new_threat_exploiting_trusted/
KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS
https://krebsonsecurity.com/2025/05/krebsonsecurity-hit-with-near-record-6-3-tbps-ddos/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Tripwire
Government Organizations Lose Nearly a Month in Downtime for Every Ransomware Attack
Government ransomware attacks cause nearly a month of downtime, costing millions. Learn why prevention is crucial.
Top Security News for Today
Dero miner zombies biting through Docker APIs to build a cryptojacking horde
https://securelist.com/dero-miner-infects-containers-through-docker-api/116546/
EvilWorker: a new AiTM attack framework leveraging service workers — much more effective, autonomous, and adaptable than Evilginx2? 🎣
https://www.reddit.com/r/netsec/comments/1krtrht/evilworker_a_new_aitm_attack_framework_leveraging/
Humans are Insecure Password Generators
https://www.reddit.com/r/netsec/comments/1krqom1/humans_are_insecure_password_generators/
BadSuccessor: Abusing dMSA to Escalate Privileges in Active Directory
https://www.reddit.com/r/netsec/comments/1ks1i9g/badsuccessor_abusing_dmsa_to_escalate_privileges/
Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer
https://www.microsoft.com/en-us/security/blog/2025/05/21/lumma-stealer-breaking-down-the-delivery-techniques-and-capabilities-of-a-prolific-infostealer/
AI-Powered Malware – The Next Evolution in Cyber Threats
https://www.darknet.org.uk/2025/05/ai-powered-malware-the-next-evolution-in-cyber-threats/
CVE-2024-45332 brings back branch target injection attacks on Intel
https://www.reddit.com/r/netsec/comments/1ksc31c/cve202445332_brings_back_branch_target_injection/
ZathuraDbg: Open-Source GUI tool for learning assembly
https://www.reddit.com/r/lowlevel/comments/1ks4em6/zathuradbg_opensource_gui_tool_for_learning/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Dero miner zombies biting through Docker APIs to build a cryptojacking horde
https://securelist.com/dero-miner-infects-containers-through-docker-api/116546/
EvilWorker: a new AiTM attack framework leveraging service workers — much more effective, autonomous, and adaptable than Evilginx2? 🎣
https://www.reddit.com/r/netsec/comments/1krtrht/evilworker_a_new_aitm_attack_framework_leveraging/
Humans are Insecure Password Generators
https://www.reddit.com/r/netsec/comments/1krqom1/humans_are_insecure_password_generators/
BadSuccessor: Abusing dMSA to Escalate Privileges in Active Directory
https://www.reddit.com/r/netsec/comments/1ks1i9g/badsuccessor_abusing_dmsa_to_escalate_privileges/
Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer
https://www.microsoft.com/en-us/security/blog/2025/05/21/lumma-stealer-breaking-down-the-delivery-techniques-and-capabilities-of-a-prolific-infostealer/
AI-Powered Malware – The Next Evolution in Cyber Threats
https://www.darknet.org.uk/2025/05/ai-powered-malware-the-next-evolution-in-cyber-threats/
CVE-2024-45332 brings back branch target injection attacks on Intel
https://www.reddit.com/r/netsec/comments/1ksc31c/cve202445332_brings_back_branch_target_injection/
ZathuraDbg: Open-Source GUI tool for learning assembly
https://www.reddit.com/r/lowlevel/comments/1ks4em6/zathuradbg_opensource_gui_tool_for_learning/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Securelist
Dero miner spreads inside containerized Linux environments
Kaspersky experts break down an updated cryptojacking campaign targeting containerized environments: a Dero crypto miner abuses the Docker API.
Top Security News for Today
Authenticated Remote Code Execution in Netwrix Password Secure (CVE-2025-26817)
https://www.reddit.com/r/netsec/comments/1kslcpa/authenticated_remote_code_execution_in_netwrix/
EXP-401 (OSEE)：用五天課程訓練通透十年的知識體
https://devco.re/blog/2025/05/22/exp-401-osee-five-days-to-master-a-decade-of-knowledge/
The Voter Experience
https://www.schneier.com/blog/archives/2025/05/the-voter-experience.html
How to Enumerate and Exploit CefSharp Thick Clients Using CefEnum
https://www.reddit.com/r/netsec/comments/1kskq0k/how_to_enumerate_and_exploit_cefsharp_thick/
Automating MS-RPC vulnerability research
https://www.reddit.com/r/netsec/comments/1ksp4m2/automating_msrpc_vulnerability_research/
Live Forensic Collection from Ivanti EPMM Appliances (CVE-2025-4427 & CVE-2025-4428)
https://www.reddit.com/r/netsec/comments/1ksufxv/live_forensic_collection_from_ivanti_epmm/
Oops: DanaBot Malware Devs Infected Their Own PCs
https://krebsonsecurity.com/2025/05/oops-danabot-malware-devs-infected-their-own-pcs/
CVE-2025-32756: Write-Up of a Buffer Overflow in Various Fortinet Products
https://www.reddit.com/r/netsec/comments/1kszzx6/cve202532756_writeup_of_a_buffer_overflow_in/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Authenticated Remote Code Execution in Netwrix Password Secure (CVE-2025-26817)
https://www.reddit.com/r/netsec/comments/1kslcpa/authenticated_remote_code_execution_in_netwrix/
EXP-401 (OSEE)：用五天課程訓練通透十年的知識體
https://devco.re/blog/2025/05/22/exp-401-osee-five-days-to-master-a-decade-of-knowledge/
The Voter Experience
https://www.schneier.com/blog/archives/2025/05/the-voter-experience.html
How to Enumerate and Exploit CefSharp Thick Clients Using CefEnum
https://www.reddit.com/r/netsec/comments/1kskq0k/how_to_enumerate_and_exploit_cefsharp_thick/
Automating MS-RPC vulnerability research
https://www.reddit.com/r/netsec/comments/1ksp4m2/automating_msrpc_vulnerability_research/
Live Forensic Collection from Ivanti EPMM Appliances (CVE-2025-4427 & CVE-2025-4428)
https://www.reddit.com/r/netsec/comments/1ksufxv/live_forensic_collection_from_ivanti_epmm/
Oops: DanaBot Malware Devs Infected Their Own PCs
https://krebsonsecurity.com/2025/05/oops-danabot-malware-devs-infected-their-own-pcs/
CVE-2025-32756: Write-Up of a Buffer Overflow in Various Fortinet Products
https://www.reddit.com/r/netsec/comments/1kszzx6/cve202532756_writeup_of_a_buffer_overflow_in/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: Authenticated Remote Code Execution in Netwrix Password Secure (CVE-2025-26817)
Explore this post and more from the netsec community
Top Security News for Today
Signal Blocks Windows Recall
https://www.schneier.com/blog/archives/2025/05/signal-blocks-windows-recall.html
3AM Ransomware Attackers Pose as IT Support to Compromise Networks
https://www.tripwire.com/state-of-security/3am-ransomware-attackers-pose-it-support-compromise-networks
Don't Call That "Protected" Method: Dissecting an N-Day vBulletin RCE
https://www.reddit.com/r/netsec/comments/1ktjoa8/dont_call_that_protected_method_dissecting_an/
Prime Path Coverage in the GNU Compiler Collection
https://arxiv.org/abs/2505.14694
RoboCulture: A Robotics Platform for Automated Biological Experimentation
https://arxiv.org/abs/2505.14941
Diffusion vs. Autoregressive Language Models: A Text Embedding Perspective
https://arxiv.org/abs/2505.15045
Text Generation Beyond Discrete Token Sampling
https://arxiv.org/abs/2505.14827
One-Layer Transformers are Provably Optimal for In-context Reasoning and Distributional Association Learning in Next-Token Prediction Tasks
https://arxiv.org/abs/2505.15009
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Signal Blocks Windows Recall
https://www.schneier.com/blog/archives/2025/05/signal-blocks-windows-recall.html
3AM Ransomware Attackers Pose as IT Support to Compromise Networks
https://www.tripwire.com/state-of-security/3am-ransomware-attackers-pose-it-support-compromise-networks
Don't Call That "Protected" Method: Dissecting an N-Day vBulletin RCE
https://www.reddit.com/r/netsec/comments/1ktjoa8/dont_call_that_protected_method_dissecting_an/
Prime Path Coverage in the GNU Compiler Collection
https://arxiv.org/abs/2505.14694
RoboCulture: A Robotics Platform for Automated Biological Experimentation
https://arxiv.org/abs/2505.14941
Diffusion vs. Autoregressive Language Models: A Text Embedding Perspective
https://arxiv.org/abs/2505.15045
Text Generation Beyond Discrete Token Sampling
https://arxiv.org/abs/2505.14827
One-Layer Transformers are Provably Optimal for In-context Reasoning and Distributional Association Learning in Next-Token Prediction Tasks
https://arxiv.org/abs/2505.15009
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Schneier on Security
Signal Blocks Windows Recall - Schneier on Security
This article gives a good rundown of the security risks of Windows Recall, and the repurposed copyright protection took that Signal used to block the AI feature from scraping Signal data.
Top Security News for Today
BadUSB Attack Explained: From Principles to Practice and Defense
https://www.reddit.com/r/netsec/comments/1kuuvzz/badusb_attack_explained_from_principles_to/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
BadUSB Attack Explained: From Principles to Practice and Defense
https://www.reddit.com/r/netsec/comments/1kuuvzz/badusb_attack_explained_from_principles_to/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: BadUSB Attack Explained: From Principles to Practice and Defense
Explore this post and more from the netsec community
Top Security News for Today
BadUSB Attack Explained: From Principles to Practice and Defense
https://www.reddit.com/r/netsec/comments/1kuuvzz/badusb_attack_explained_from_principles_to/
AIDE – Lightweight Linux Host Intrusion Detection
https://www.darknet.org.uk/2025/05/aide-lightweight-linux-host-intrusion-detection/
What the UK’s New Cyber Resilience Bill Means for Businesses—and How to Stay Ahead
https://www.tripwire.com/state-of-security/what-uks-new-cyber-resilience-bill-means-businesses-and-how-stay-ahead
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
BadUSB Attack Explained: From Principles to Practice and Defense
https://www.reddit.com/r/netsec/comments/1kuuvzz/badusb_attack_explained_from_principles_to/
AIDE – Lightweight Linux Host Intrusion Detection
https://www.darknet.org.uk/2025/05/aide-lightweight-linux-host-intrusion-detection/
What the UK’s New Cyber Resilience Bill Means for Businesses—and How to Stay Ahead
https://www.tripwire.com/state-of-security/what-uks-new-cyber-resilience-bill-means-businesses-and-how-stay-ahead
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: BadUSB Attack Explained: From Principles to Practice and Defense
Explore this post and more from the netsec community
Top Security News for Today
Threat of TCC Bypasses on macOS
https://www.reddit.com/r/netsec/comments/1kvr057/threat_of_tcc_bypasses_on_macos/
26th May – Threat Intelligence Report
https://research.checkpoint.com/2025/26th-may-threat-intelligence-report/
Unauthenticated RCE on Smartbedded MeteoBridge (CVE-2025-4008)
https://www.reddit.com/r/netsec/comments/1kvtr2i/unauthenticated_rce_on_smartbedded_meteobridge/
Windows namespace traversal
https://www.reddit.com/r/lowlevel/comments/1kvtv22/windows_namespace_traversal/
Preparing for the Post Quantum Era: Quantum Ready Architecture for Security and Risk Management (QUASAR) -- A Strategic Framework for Cybersecurity
https://arxiv.org/abs/2505.17084
Improving LLM Outputs Against Jailbreak Attacks with Expert Model Integration
https://arxiv.org/abs/2505.17066
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Threat of TCC Bypasses on macOS
https://www.reddit.com/r/netsec/comments/1kvr057/threat_of_tcc_bypasses_on_macos/
26th May – Threat Intelligence Report
https://research.checkpoint.com/2025/26th-may-threat-intelligence-report/
Unauthenticated RCE on Smartbedded MeteoBridge (CVE-2025-4008)
https://www.reddit.com/r/netsec/comments/1kvtr2i/unauthenticated_rce_on_smartbedded_meteobridge/
Windows namespace traversal
https://www.reddit.com/r/lowlevel/comments/1kvtv22/windows_namespace_traversal/
Preparing for the Post Quantum Era: Quantum Ready Architecture for Security and Risk Management (QUASAR) -- A Strategic Framework for Cybersecurity
https://arxiv.org/abs/2505.17084
Improving LLM Outputs Against Jailbreak Attacks with Expert Model Integration
https://arxiv.org/abs/2505.17066
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: Threat of TCC Bypasses on macOS
Explore this post and more from the netsec community
Top Security News for Today
New graph capabilities and MCP server for CTI / OSINT analysis
https://www.reddit.com/r/netsec/comments/1kwjc7w/new_graph_capabilities_and_mcp_server_for_cti/
New Russia-affiliated actor Void Blizzard targets critical sectors for espionage
https://www.microsoft.com/en-us/security/blog/2025/05/27/new-russia-affiliated-actor-void-blizzard-targets-critical-sectors-for-espionage/
Chinese-Owned VPNs
https://www.schneier.com/blog/archives/2025/05/chinese-owned-vpns.html
OSEE Exam Uncovered: Cracking OSEE in Taipei
https://devco.re/blog/2025/05/27/osee-exam-uncovered-cracking-osee-in-taipei/
GitHub MCP Exploited: Accessing private repositories via MCP
https://www.reddit.com/r/netsec/comments/1kwhjaz/github_mcp_exploited_accessing_private/
Firefox Security Response to pwn2own 2025
https://www.reddit.com/r/netsec/comments/1kwgp8p/firefox_security_response_to_pwn2own_2025/
Have I Been Squatted — Analyze (open beta, free)
https://www.reddit.com/r/netsec/comments/1kwm3nv/have_i_been_squatted_analyze_open_beta_free/
Trend Micro Leading the Fight to Secure AI
https://www.trendmicro.com/en_us/research/25/e/mitre-atlas-secure-ai.html
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
New graph capabilities and MCP server for CTI / OSINT analysis
https://www.reddit.com/r/netsec/comments/1kwjc7w/new_graph_capabilities_and_mcp_server_for_cti/
New Russia-affiliated actor Void Blizzard targets critical sectors for espionage
https://www.microsoft.com/en-us/security/blog/2025/05/27/new-russia-affiliated-actor-void-blizzard-targets-critical-sectors-for-espionage/
Chinese-Owned VPNs
https://www.schneier.com/blog/archives/2025/05/chinese-owned-vpns.html
OSEE Exam Uncovered: Cracking OSEE in Taipei
https://devco.re/blog/2025/05/27/osee-exam-uncovered-cracking-osee-in-taipei/
GitHub MCP Exploited: Accessing private repositories via MCP
https://www.reddit.com/r/netsec/comments/1kwhjaz/github_mcp_exploited_accessing_private/
Firefox Security Response to pwn2own 2025
https://www.reddit.com/r/netsec/comments/1kwgp8p/firefox_security_response_to_pwn2own_2025/
Have I Been Squatted — Analyze (open beta, free)
https://www.reddit.com/r/netsec/comments/1kwm3nv/have_i_been_squatted_analyze_open_beta_free/
Trend Micro Leading the Fight to Secure AI
https://www.trendmicro.com/en_us/research/25/e/mitre-atlas-secure-ai.html
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: New graph capabilities and MCP server for CTI / OSINT analysis
Posted by stan_frbd - 0 votes and 0 comments
Top Security News for Today
Remote Code Execution on Evertz SDVN (CVE-2025-4009 - Full Disclosure)
https://www.reddit.com/r/netsec/comments/1kxcit3/remote_code_execution_on_evertz_sdvn_cve20254009/
Zanubis in motion: Tracing the active evolution of the Android banking malware
https://securelist.com/evolution-of-zanubis-banking-trojan-for-android/116588/
Proposed HIPAA Update Makes Yearly Pen Testing Mandatory
https://www.tripwire.com/state-of-security/proposed-hipaa-update-makes-yearly-pen-testing-mandatory
Location Tracking App for Foreigners in Moscow
https://www.schneier.com/blog/archives/2025/05/location-tracking-app-for-foreigners-in-moscow.html
Pakistan Arrests 21 in ‘Heartsender’ Malware Service
https://krebsonsecurity.com/2025/05/pakistan-arrests-21-in-heartsender-malware-service/
Decoding TCP SYN for Stronger Network Security
https://www.reddit.com/r/netsec/comments/1kxhgwo/decoding_tcp_syn_for_stronger_network_security/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Remote Code Execution on Evertz SDVN (CVE-2025-4009 - Full Disclosure)
https://www.reddit.com/r/netsec/comments/1kxcit3/remote_code_execution_on_evertz_sdvn_cve20254009/
Zanubis in motion: Tracing the active evolution of the Android banking malware
https://securelist.com/evolution-of-zanubis-banking-trojan-for-android/116588/
Proposed HIPAA Update Makes Yearly Pen Testing Mandatory
https://www.tripwire.com/state-of-security/proposed-hipaa-update-makes-yearly-pen-testing-mandatory
Location Tracking App for Foreigners in Moscow
https://www.schneier.com/blog/archives/2025/05/location-tracking-app-for-foreigners-in-moscow.html
Pakistan Arrests 21 in ‘Heartsender’ Malware Service
https://krebsonsecurity.com/2025/05/pakistan-arrests-21-in-heartsender-malware-service/
Decoding TCP SYN for Stronger Network Security
https://www.reddit.com/r/netsec/comments/1kxhgwo/decoding_tcp_syn_for_stronger_network_security/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: Remote Code Execution on Evertz SDVN (CVE-2025-4009 - Full Disclosure)
Explore this post and more from the netsec community
Top Security News for Today
Meet Burp Suite DAST: Your questions answered
https://portswigger.net/blog/meet-burp-suite-dast-your-questions-answered
Deguard: turning a T480 into a coreboot laptop (10-min talk + live demo)
https://www.reddit.com/r/netsec/comments/1ky7bng/deguard_turning_a_t480_into_a_coreboot_laptop/
Surveillance Via Smart Toothbrush
https://www.schneier.com/blog/archives/2025/05/surveillance-via-smart-toothbrush.html
Learning AMD Zen 3 (Family 19h) microarchitecture
https://www.reddit.com/r/lowlevel/comments/1ky4e2u/learning_amd_zen_3_family_19h_microarchitecture/
How to deploy AI safely
https://www.microsoft.com/en-us/security/blog/2025/05/29/how-to-deploy-ai-safely/
U.S. Sanctions Cloud Provider ‘Funnull’ as Top Source of ‘Pig Butchering’ Scams
https://krebsonsecurity.com/2025/05/u-s-sanctions-cloud-provider-funnull-as-top-source-of-pig-butchering-scams/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Meet Burp Suite DAST: Your questions answered
https://portswigger.net/blog/meet-burp-suite-dast-your-questions-answered
Deguard: turning a T480 into a coreboot laptop (10-min talk + live demo)
https://www.reddit.com/r/netsec/comments/1ky7bng/deguard_turning_a_t480_into_a_coreboot_laptop/
Surveillance Via Smart Toothbrush
https://www.schneier.com/blog/archives/2025/05/surveillance-via-smart-toothbrush.html
Learning AMD Zen 3 (Family 19h) microarchitecture
https://www.reddit.com/r/lowlevel/comments/1ky4e2u/learning_amd_zen_3_family_19h_microarchitecture/
How to deploy AI safely
https://www.microsoft.com/en-us/security/blog/2025/05/29/how-to-deploy-ai-safely/
U.S. Sanctions Cloud Provider ‘Funnull’ as Top Source of ‘Pig Butchering’ Scams
https://krebsonsecurity.com/2025/05/u-s-sanctions-cloud-provider-funnull-as-top-source-of-pig-butchering-scams/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
PortSwigger Blog
Meet Burp Suite DAST: Your questions answered
We recently hosted a webinar to introduce Burp Suite DAST, the new name for Burp Suite Enterprise Edition, the best-in-class, automated web application and API security scanning solution for modern Ap
Top Security News for Today
PortSwigger Honored with the King's Award for Enterprise in International Trade
https://portswigger.net/blog/portswigger-honored-with-the-kings-award-for-enterprise-in-international-trade
Finding SSRFs in Azure DevOps - Part 2
https://www.reddit.com/r/netsec/comments/1kz0nci/finding_ssrfs_in_azure_devops_part_2/
A detailed guide to Stealth syscall and EDR Bypass
https://www.reddit.com/r/netsec/comments/1kz06v8/a_detailed_guide_to_stealth_syscall_and_edr_bypass/
Why Take9 Won’t Improve Cybersecurity
https://www.schneier.com/blog/archives/2025/05/why-take9-wont-improve-cybersecurity.html
Exploits and vulnerabilities in Q1 2025
https://securelist.com/vulnerabilities-and-exploits-in-q1-2025/116624/
B-XAIC Dataset: Benchmarking Explainable AI for Graph Neural Networks Using Chemical Data
https://arxiv.org/abs/2505.22252
TensorShield: Safeguarding On-Device Inference by Shielding Critical DNN Tensors with TEE
https://arxiv.org/abs/2505.22843
Azure Arc - C2aaS
https://www.reddit.com/r/netsec/comments/1kzfqty/azure_arc_c2aas/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
PortSwigger Honored with the King's Award for Enterprise in International Trade
https://portswigger.net/blog/portswigger-honored-with-the-kings-award-for-enterprise-in-international-trade
Finding SSRFs in Azure DevOps - Part 2
https://www.reddit.com/r/netsec/comments/1kz0nci/finding_ssrfs_in_azure_devops_part_2/
A detailed guide to Stealth syscall and EDR Bypass
https://www.reddit.com/r/netsec/comments/1kz06v8/a_detailed_guide_to_stealth_syscall_and_edr_bypass/
Why Take9 Won’t Improve Cybersecurity
https://www.schneier.com/blog/archives/2025/05/why-take9-wont-improve-cybersecurity.html
Exploits and vulnerabilities in Q1 2025
https://securelist.com/vulnerabilities-and-exploits-in-q1-2025/116624/
B-XAIC Dataset: Benchmarking Explainable AI for Graph Neural Networks Using Chemical Data
https://arxiv.org/abs/2505.22252
TensorShield: Safeguarding On-Device Inference by Shielding Critical DNN Tensors with TEE
https://arxiv.org/abs/2505.22843
Azure Arc - C2aaS
https://www.reddit.com/r/netsec/comments/1kzfqty/azure_arc_c2aas/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
PortSwigger Blog
PortSwigger Honored with the King's Award for Enterprise in International Trade
We’re proud to announce that PortSwigger has been awarded the prestigious King’s Award for Enterprise in the category of International Trade - a recognition that reflects our sustained international s
Top Security News for Today
Wireless Pivots: How Trusted Networks Become Invisible Threat Vectors
https://www.reddit.com/r/netsec/comments/1kzttw0/wireless_pivots_how_trusted_networks_become/
Experimenting with USB-Based Attacks: Can a Standard USB Become a Bad USB? (Write-up)
https://www.reddit.com/r/netsec/comments/1l02exx/experimenting_with_usbbased_attacks_can_a/
Beyond HTTP: InterceptSuite for TCP/TLS Traffic Interception in Windows
https://www.reddit.com/r/netsec/comments/1l02jra/beyond_http_interceptsuite_for_tcptls_traffic/
Thought netsec people might enjoy this read - the ultimate guide to different types of wireless signals and what they are used for.
https://www.reddit.com/r/netsec/comments/1l06tm8/thought_netsec_people_might_enjoy_this_read_the/
Reverse Engineer Android Apps for API Key
https://www.reddit.com/r/netsec/comments/1l09vab/reverse_engineer_android_apps_for_api_key/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Wireless Pivots: How Trusted Networks Become Invisible Threat Vectors
https://www.reddit.com/r/netsec/comments/1kzttw0/wireless_pivots_how_trusted_networks_become/
Experimenting with USB-Based Attacks: Can a Standard USB Become a Bad USB? (Write-up)
https://www.reddit.com/r/netsec/comments/1l02exx/experimenting_with_usbbased_attacks_can_a/
Beyond HTTP: InterceptSuite for TCP/TLS Traffic Interception in Windows
https://www.reddit.com/r/netsec/comments/1l02jra/beyond_http_interceptsuite_for_tcptls_traffic/
Thought netsec people might enjoy this read - the ultimate guide to different types of wireless signals and what they are used for.
https://www.reddit.com/r/netsec/comments/1l06tm8/thought_netsec_people_might_enjoy_this_read_the/
Reverse Engineer Android Apps for API Key
https://www.reddit.com/r/netsec/comments/1l09vab/reverse_engineer_android_apps_for_api_key/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: Wireless Pivots: How Trusted Networks Become Invisible Threat Vectors
Posted by thexerocouk - 1 vote and 0 comments
Top Security News for Today
Canada, Australia or Netherlands
https://www.reddit.com/r/netsec/comments/1l0lssn/canada_australia_or_netherlands/
r/netsec monthly discussion & tool thread
https://www.reddit.com/r/netsec/comments/1l0ozt4/rnetsec_monthly_discussion_tool_thread/
Certification roadmap please
https://www.reddit.com/r/netsec/comments/1l1bsrz/certification_roadmap_please/
Is Continuous Deployment Too Risky? Security Concerns and Mitigations
https://www.tripwire.com/state-of-security/continuous-deployment-too-risky-security-concerns-and-mitigations
The Evolution of Phishing Attacks: Why Traditional Detection Methods Are Failing
https://www.tripwire.com/state-of-security/evolution-phishing-attacks-why-traditional-detection-methods-are-failing
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Canada, Australia or Netherlands
https://www.reddit.com/r/netsec/comments/1l0lssn/canada_australia_or_netherlands/
r/netsec monthly discussion & tool thread
https://www.reddit.com/r/netsec/comments/1l0ozt4/rnetsec_monthly_discussion_tool_thread/
Certification roadmap please
https://www.reddit.com/r/netsec/comments/1l1bsrz/certification_roadmap_please/
Is Continuous Deployment Too Risky? Security Concerns and Mitigations
https://www.tripwire.com/state-of-security/continuous-deployment-too-risky-security-concerns-and-mitigations
The Evolution of Phishing Attacks: Why Traditional Detection Methods Are Failing
https://www.tripwire.com/state-of-security/evolution-phishing-attacks-why-traditional-detection-methods-are-failing
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: Canada, Australia or Netherlands
Posted by ash347799 - 1 vote and 1 comment
Top Security News for Today
Certification Roadmap Please
https://www.reddit.com/r/netsec/comments/1l1bsrz/certification_roadmap_please/
Australia Requires Ransomware Victims to Declare Payments
https://www.schneier.com/blog/archives/2025/06/australia-requires-ransomware-victims-to-declare-payments.html
Vulnerabilities Found in Preinstalled Apps on Android Smartphones Could Perform Factory Reset of Device, Exfiltrate PIN Code or Inject an Arbitrary Intent with System-Level Privileges
https://www.reddit.com/r/netsec/comments/1l1fh52/vulnerabilities_found_in_preinstalled_apps_on/
Seeking Insights from Network Security Leaders at Large Companies on Vendor Selection and Challenges
https://www.reddit.com/r/netsec/comments/1l1io63/seeking_insights_from_network_security_leaders_at/
2nd June – Threat Intelligence Report
https://research.checkpoint.com/2025/2nd-june-threat-intelligence-report/
Announcing a New Strategic Collaboration to Bring Clarity to Threat Actor Naming
https://www.microsoft.com/en-us/security/blog/2025/06/02/announcing-a-new-strategic-collaboration-to-bring-clarity-to-threat-actor-naming/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Certification Roadmap Please
https://www.reddit.com/r/netsec/comments/1l1bsrz/certification_roadmap_please/
Australia Requires Ransomware Victims to Declare Payments
https://www.schneier.com/blog/archives/2025/06/australia-requires-ransomware-victims-to-declare-payments.html
Vulnerabilities Found in Preinstalled Apps on Android Smartphones Could Perform Factory Reset of Device, Exfiltrate PIN Code or Inject an Arbitrary Intent with System-Level Privileges
https://www.reddit.com/r/netsec/comments/1l1fh52/vulnerabilities_found_in_preinstalled_apps_on/
Seeking Insights from Network Security Leaders at Large Companies on Vendor Selection and Challenges
https://www.reddit.com/r/netsec/comments/1l1io63/seeking_insights_from_network_security_leaders_at/
2nd June – Threat Intelligence Report
https://research.checkpoint.com/2025/2nd-june-threat-intelligence-report/
Announcing a New Strategic Collaboration to Bring Clarity to Threat Actor Naming
https://www.microsoft.com/en-us/security/blog/2025/06/02/announcing-a-new-strategic-collaboration-to-bring-clarity-to-threat-actor-naming/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Reddit
From the netsec community on Reddit: Certification roadmap please
Explore this post and more from the netsec community
Top Security News for Today
Host-based logs, container-based threats: How to tell where an attack began
https://securelist.com/host-based-logs-container-based-threats/116643/
New Linux Vulnerabilities
https://www.schneier.com/blog/archives/2025/06/new-linux-vulnerabilities.html
How to build a high-performance network fuzzer with LibAFL and libdesock
https://www.reddit.com/r/netsec/comments/1l29uvp/how_to_build_a_highperformance_network_fuzzer/
Bypassing tamper protection and getting root shell access on a Worldline Yomani XR credit card terminal
https://www.reddit.com/r/netsec/comments/1l2ef65/bypassing_tamper_protection_and_getting_root/
How Microsoft Defender for Endpoint is redefining endpoint security
https://www.microsoft.com/en-us/security/blog/2025/06/03/how-microsoft-defender-for-endpoint-is-redefining-endpoint-security/
OSSEC – Open Source Host-Based Intrusion Detection for Linux, Windows and Unix Systems
https://www.darknet.org.uk/2025/06/ossec-open-source-host-based-intrusion-detection-for-linux-windows-and-unix-systems/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Host-based logs, container-based threats: How to tell where an attack began
https://securelist.com/host-based-logs-container-based-threats/116643/
New Linux Vulnerabilities
https://www.schneier.com/blog/archives/2025/06/new-linux-vulnerabilities.html
How to build a high-performance network fuzzer with LibAFL and libdesock
https://www.reddit.com/r/netsec/comments/1l29uvp/how_to_build_a_highperformance_network_fuzzer/
Bypassing tamper protection and getting root shell access on a Worldline Yomani XR credit card terminal
https://www.reddit.com/r/netsec/comments/1l2ef65/bypassing_tamper_protection_and_getting_root/
How Microsoft Defender for Endpoint is redefining endpoint security
https://www.microsoft.com/en-us/security/blog/2025/06/03/how-microsoft-defender-for-endpoint-is-redefining-endpoint-security/
OSSEC – Open Source Host-Based Intrusion Detection for Linux, Windows and Unix Systems
https://www.darknet.org.uk/2025/06/ossec-open-source-host-based-intrusion-detection-for-linux-windows-and-unix-systems/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Securelist
How to find container-based threats in host-based logs
Kaspersky expert shares insights on how to determine whether an attack was first launched in a container or on the host itself when an organization’s logs lack container visibility.
Top Security News for Today
The Ramifications of Ukraine’s Drone Attack
https://www.schneier.com/blog/archives/2025/06/the-ramifications-of-ukraines-drone-attack.html
So you want to rapidly run a BOF? Let's look at this 'cli4bofs' thing then
https://www.reddit.com/r/netsec/comments/1l33fxt/so_you_want_to_rapidly_run_a_bof_lets_look_at/
The Ultimate Guide to Windows Coercion Techniques in 2025
https://www.reddit.com/r/netsec/comments/1l3079i/the_ultimate_guide_to_windows_coercion_techniques/
Multiple CVEs in Infoblox NetMRI: RCE, Auth Bypass, SQLi, and File Read Vulnerabilities
https://www.reddit.com/r/netsec/comments/1l39v5s/multiple_cves_in_infoblox_netmri_rce_auth_bypass/
2025 Red Team Tools – C2 Frameworks, Active Directory & Network Exploitation
https://bishopfox.com/blog/2025-red-team-tools-c2-frameworks-active-directory-network-exploitation
Detailed research for Roundcube ≤ 1.6.10 Post-Auth RCE is out
https://www.reddit.com/r/netsec/comments/1l3o04q/detailed_research_for_roundcube_1610_postauth_rce/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
The Ramifications of Ukraine’s Drone Attack
https://www.schneier.com/blog/archives/2025/06/the-ramifications-of-ukraines-drone-attack.html
So you want to rapidly run a BOF? Let's look at this 'cli4bofs' thing then
https://www.reddit.com/r/netsec/comments/1l33fxt/so_you_want_to_rapidly_run_a_bof_lets_look_at/
The Ultimate Guide to Windows Coercion Techniques in 2025
https://www.reddit.com/r/netsec/comments/1l3079i/the_ultimate_guide_to_windows_coercion_techniques/
Multiple CVEs in Infoblox NetMRI: RCE, Auth Bypass, SQLi, and File Read Vulnerabilities
https://www.reddit.com/r/netsec/comments/1l39v5s/multiple_cves_in_infoblox_netmri_rce_auth_bypass/
2025 Red Team Tools – C2 Frameworks, Active Directory & Network Exploitation
https://bishopfox.com/blog/2025-red-team-tools-c2-frameworks-active-directory-network-exploitation
Detailed research for Roundcube ≤ 1.6.10 Post-Auth RCE is out
https://www.reddit.com/r/netsec/comments/1l3o04q/detailed_research_for_roundcube_1610_postauth_rce/
Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman
Schneier on Security
The Ramifications of Ukraine's Drone Attack - Schneier on Security
You can read the details of Operation Spiderweb elsewhere. What interests me are the implications for future warfare: If the Ukrainians could sneak drones so close to major air bases in a police state such as Russia, what is to prevent the Chinese from doing…