Article: Wikipedia hit by self-propagating JavaScript worm that vandalized pages - published 7 months ago.
Content:
Copy Link: https://www.bleepingcomputer.com/news/security/wikipedia-hit-by-self-propagating-javascript-worm-that-vandalized-pages/   
Published: 2026 03 05 20:42:25
Received: 2026 03 05 20:44:24
Feed: Bleeping Computer - All News Feeds
Source: Bleeping Computer
Category: News
Topic: Cyber Security

Article: cvsweb.openbsd.org fights AI crawler bots by redirecting hotlinking requests to theannoyingsite.com (labelled "Malware" by eero), gets blacklisted by eero, too, for "Phishing & Deception" - published 9 months ago.
Content: submitted by /u/Mcnst [link] [comments]
Copy Link: https://www.reddit.com/r/netsec/comments/1qmo7qr/cvswebopenbsdorg_fights_ai_crawler_bots_by/   
Published: 2026 01 25 16:46:36
Received: 2026 03 05 20:40:56
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: Blind Boolean-Based Prompt Injection - published 9 months ago.
Content: I had an idea for leaking a system prompt against a LLM powered classifying system that is constrained to give static responses. The attacker uses a prompt injection to update the response logic and signal true/false responses to attacker prompts. I haven't seen other research on this technique so I'm calling it blind boolean-based prompt injection (BBPI) un...
Copy Link: https://www.reddit.com/r/netsec/comments/1qnh5qq/blind_booleanbased_prompt_injection/   
Published: 2026 01 26 14:15:12
Received: 2026 03 05 20:40:56
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Free Score Certificate

Article: "Open sesame": Critical vulnerabilities in dormakaba physical access control system enable unlocking arbitrary doors - published 9 months ago.
Content: Multiple critical flaws (20 CVEs!) in dormakaba physical access control system exos 9300 & access manager & registration unit (pin pad) allow attackers with network access to open arbitrary doors, reconfigure connected controllers and peripherals without prior authentication, and much more. Seems some systems are also reachable over the internet due ...
Copy Link: https://www.reddit.com/r/netsec/comments/1qncvtn/open_sesame_critical_vulnerabilities_in_dormakaba/   
Published: 2026 01 26 10:51:47
Received: 2026 03 05 20:40:56
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: After reporting vulnerabilities found in MDT, Microsoft chose to retire the service rather than fix the issues... Admins should follow the defensive recommendations to mitigate the issues if they choose to continue using the software or can’t migrate to a different solution. - published 9 months ago.
Content: submitted by /u/TheDarthSnarf [link] [comments]...
Copy Link: https://www.reddit.com/r/netsec/comments/1qng5ag/after_reporting_vulnerabilities_found_in_mdt/   
Published: 2026 01 26 13:34:14
Received: 2026 03 05 20:40:55
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: Bypassing Windows Administrator Protection - published 9 months ago.
Content: submitted by /u/thewhippersnapper4 [link] [comments]
Copy Link: https://www.reddit.com/r/netsec/comments/1qnnddx/bypassing_windows_administrator_protection/   
Published: 2026 01 26 17:56:05
Received: 2026 03 05 20:40:55
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Score Summary

Article: Kubernetes Remote Code Execution Via Nodes/Proxy GET Permission - published 9 months ago.
Content: submitted by /u/safeaim [link] [comments]
Copy Link: https://www.reddit.com/r/netsec/comments/1qns6o2/kubernetes_remote_code_execution_via_nodesproxy/   
Published: 2026 01 26 20:38:47
Received: 2026 03 05 20:40:55
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: OpenSSL January 2026 Security Update: CMS and PKCS#12 Buffer Overflows - published 9 months ago.
Content: submitted by /u/RedTermSession [link] [comments]...
Copy Link: https://www.reddit.com/r/netsec/comments/1qonkwp/openssl_january_2026_security_update_cms_and/   
Published: 2026 01 27 19:18:42
Received: 2026 03 05 20:40:55
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: Safeguarding sources and sensitive information in the event of a raid - published 9 months ago.
Content: submitted by /u/FreedomofPress [link] [comments]...
Copy Link: https://www.reddit.com/r/netsec/comments/1qoplqw/safeguarding_sources_and_sensitive_information_in/   
Published: 2026 01 27 20:30:23
Received: 2026 03 05 20:40:54
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Your Score Explained

Article: [Research] Analysis of 74,636 AI Agent Interactions: 37.8% Contained Attack Attempts - New "Inter-Agent Attack" Category Emerges - published 9 months ago.
Content: We've been running inference-time threat detection across 38 production AI agent deployments. Here's what Week 3 of 2026 looked like with on-device detections. Key Findings 28,194 threats detected across 74,636 interactions (37.8% attack rate) Inter-Agent Attacks emerged as a new category (3.4% of threats) - agents sending poisoned messages to other agents ...
Copy Link: https://www.reddit.com/r/netsec/comments/1qp3rpz/research_analysis_of_74636_ai_agent_interactions/   
Published: 2026 01 28 06:30:42
Received: 2026 03 05 20:40:54
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: Limits of static guarantees under adaptive adversaries (G-CTR experience) - published 9 months ago.
Content: Sharing some practical experience evaluating G-CTR-like guarantees from a security perspective. When adversaries adapt, several assumptions behind the guarantees degrade faster than expected. In particular: - threat models get implicitly frozen - test-time confidence doesn’t transfer to live systems - some failures are invisible until exploited Curious if ot...
Copy Link: https://www.reddit.com/r/netsec/comments/1qphmvg/limits_of_static_guarantees_under_adaptive/   
Published: 2026 01 28 17:21:59
Received: 2026 03 05 20:40:54
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: Corrupting the Hive Mind: Persistence Through Forgotten Windows Internals - published 9 months ago.
Content: Dropping a link to our blog post about our tool Swarmer, a windows persistence tool for abusing mandatory user profiles. Essentially you copy the current user's registry hive and modify it to add a new registry key to run on startup. Because the new hive isn't loaded until the next time the user logs in, EDR never sees any actual registry writes. submitte...
Copy Link: https://www.reddit.com/r/netsec/comments/1qp0n60/corrupting_the_hive_mind_persistence_through/   
Published: 2026 01 28 03:54:03
Received: 2026 03 05 20:40:53
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Gold Score Certificate

Article: Tycoon 2FA phishing campaign abusing *.contractors domains for Gmail & Microsoft 365 credential harvesting - published 9 months ago.
Content: submitted by /u/anuraggawande [link] [comments]...
Copy Link: https://www.reddit.com/r/netsec/comments/1qprn85/tycoon_2fa_phishing_campaign_abusing_contractors/   
Published: 2026 01 28 23:25:39
Received: 2026 03 05 20:40:53
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: CVE-2025-40551: SolarWinds WebHelpDesk RCE Deep-Dive and Indicators of Compromise - published 9 months ago.
Content: submitted by /u/scopedsecurity [link] [comments]...
Copy Link: https://www.reddit.com/r/netsec/comments/1qpgpd4/cve202540551_solarwinds_webhelpdesk_rce_deepdive/   
Published: 2026 01 28 16:49:57
Received: 2026 03 05 20:40:53
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: Gakido - CRLF Injection - published 9 months ago.
Content: submitted by /u/c0daman [link] [comments]
Copy Link: https://www.reddit.com/r/netsec/comments/1qq464p/gakido_crlf_injection/   
Published: 2026 01 29 09:37:10
Received: 2026 03 05 20:40:53
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Score Analysis

Article: Fun RCE in Command & Conquer: Generals - published 9 months ago.
Content: So many of your favorite childhood games are open source now, and bugs fall out of them if you just glance in the right spots. submitted by /u/jordan9001 [link] [comments]...
Copy Link: https://www.reddit.com/r/netsec/comments/1qpfcpd/fun_rce_in_command_conquer_generals/   
Published: 2026 01 28 16:02:19
Received: 2026 03 05 20:40:52
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: Tool release: CVE Alert – targeted CVE email alerts by vendor/product - published 9 months ago.
Content: I built a small service to track newly published CVEs and send email alerts based on vendor, product, and severity. It started as an internal tool and is now running in production and usable. Feedback welcome. submitted by /u/CarlVon77 [link] [comments]...
Copy Link: https://www.reddit.com/r/netsec/comments/1qqj071/tool_release_cve_alert_targeted_cve_email_alerts/   
Published: 2026 01 29 19:50:03
Received: 2026 03 05 20:40:52
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: Object-capability SQL sandboxing for LLM agents — $1K CTF bounty to break it - published 9 months ago.
Content: Writeup on a defensive technique for constraining LLM agent database access: The core idea: instead of detecting bad queries at runtime, make them structurally inexpressible via object-capabilities. Live CTF: two DB agents guarding bitcoin wallets -- one protected by system prompt (already broken), one by capability layer (~$1K still standing). Interested ...
Copy Link: https://www.reddit.com/r/netsec/comments/1qqot81/objectcapability_sql_sandboxing_for_llm_agents_1k/   
Published: 2026 01 29 23:31:41
Received: 2026 03 05 20:40:52
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Risk Impact Distribution

Article: Need Advice - published 9 months ago.
Content: Hello! My name is Bogdan Mihai, I'm 21 yr old from Romania , I am a cybersecurity researcher and I'm new to this group. I don't know how many BGP experts are here, but I have a question for them if there are any. I recently invented something a little more abstract for BGP security, and I'm almost sure that there is nothing similar. I wasn't inspired by anyt...
Copy Link: https://www.reddit.com/r/netsec/comments/1qrlczl/need_advice/   
Published: 2026 01 30 23:13:12
Received: 2026 03 05 20:40:52
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: How We Exploited Qodo: From a PR Comment to RCE and an AWS Admin Key - Leaked Twice - published 9 months ago.
Content: submitted by /u/tmlxs [link] [comments]
Copy Link: https://www.reddit.com/r/netsec/comments/1qr7g3t/how_we_exploited_qodo_from_a_pr_comment_to_rce/   
Published: 2026 01 30 14:47:52
Received: 2026 03 05 20:40:52
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340) - watchTowr Labs - published 9 months ago.
Content: submitted by /u/dx7r__ [link] [comments]...
Copy Link: https://www.reddit.com/r/netsec/comments/1qr9war/someone_knows_bash_far_too_well_and_we_love_it/   
Published: 2026 01 30 16:17:50
Received: 2026 03 05 20:40:51
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Risk Impact Assesment

Article: Comparing different IP Geolocation Provider's Accuracy - published 8 months ago.
Content: submitted by /u/incolumitas [link] [comments]
Copy Link: https://www.reddit.com/r/netsec/comments/1qt4yy1/comparing_different_ip_geolocation_providers/   
Published: 2026 02 01 17:39:41
Received: 2026 03 05 20:40:51
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: 1-Click RCE in OpenClaw/Moltbot/ClawdBot - published 8 months ago.
Content: submitted by /u/va_start [link] [comments]
Copy Link: https://www.reddit.com/r/netsec/comments/1qt5wms/1click_rce_in_openclawmoltbotclawdbot/   
Published: 2026 02 01 18:12:21
Received: 2026 03 05 20:40:51
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: AppLocker Rules Abuse - published 8 months ago.
Content: submitted by /u/netbiosX [link] [comments]
Copy Link: https://www.reddit.com/r/netsec/comments/1qttj14/applocker_rules_abuse/   
Published: 2026 02 02 12:18:57
Received: 2026 03 05 20:40:51
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Your Score Explained

Article: GatewayToHeaven: Finding a Cross-Tenant Vulnerability in Google Cloud's Apigee - published 8 months ago.
Content: submitted by /u/omerhacking [link] [comments]
Copy Link: https://www.reddit.com/r/netsec/comments/1qtvonw/gatewaytoheaven_finding_a_crosstenant/   
Published: 2026 02 02 13:55:38
Received: 2026 03 05 20:40:50
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: Goldman Sachs backs cybersecurity compliance firm Schellman - PE Hub - published 7 months ago.
Content: Goldman Sachs Alternatives is making an investment in Schellman, a Tampa-based provider of cybersecurity compliance and attestation services. No ...
Copy Link: https://www.pehub.com/goldman-sachs-backs-cybersecurity-compliance-firm-schellman/   
Published: 2026 03 05 14:21:58
Received: 2026 03 05 20:20:31
Feed: Google Alert – cybersecurity
Source: Google Alert
Category: News
Topic: Cyber Security

Article: APT28-Linked Campaign Deploys BadPaw Loader and MeowMeow Backdoor in Ukraine - published 7 months ago.
Content: Cybersecurity researchers have disclosed details of a new Russian cyber campaign that has targeted Ukrainian entities with two previously ...
Copy Link: https://thehackernews.com/2026/03/apt28-linked-campaign-deploys-badpaw.html   
Published: 2026 03 05 16:14:43
Received: 2026 03 05 20:20:29
Feed: Google Alert – cybersecurity
Source: Google Alert
Category: News
Topic: Cyber Security

Cyber Tzar Risk Groups Explained

Article: Mac Studio 512GB RAM Option Disappears Amid Global DRAM Shortage - published 7 months ago.
Content:
Copy Link: https://www.macrumors.com/2026/03/05/mac-studio-no-512gb-ram-upgrade/   
Published: 2026 03 05 19:49:29
Received: 2026 03 05 20:05:56
Feed: MacRumors : Mac News and Rumors
Source: MacRumors : Mac News and Rumors
Category: News
Topic: Cyber Security

Article: Missing From Apple's Announcements: iPad 12 With Apple Intelligence - published 7 months ago.
Content:
Copy Link: https://www.macrumors.com/2026/03/05/ipad-12-with-apple-intelligence/   
Published: 2026 03 05 19:57:43
Received: 2026 03 05 20:05:55
Feed: MacRumors : Mac News and Rumors
Source: MacRumors : Mac News and Rumors
Category: News
Topic: Cyber Security

Article: Apple Seeds Revised Third Betas of iOS 26.4 and iPadOS 26.4 to Developers, New Public Betas - published 7 months ago.
Content:
Copy Link: https://www.macrumors.com/2026/03/05/apple-seeds-revised-ios-26-4-beta-3/   
Published: 2026 03 05 20:01:00
Received: 2026 03 05 20:05:55
Feed: MacRumors : Mac News and Rumors
Source: MacRumors : Mac News and Rumors
Category: News
Topic: Cyber Security

Cyber Tzar Change Over Time (Extended)

Article: CISA Adds Five Known Exploited Vulnerabilities to Catalog - published 7 months ago.
Content:
Copy Link: https://www.cisa.gov/news-events/alerts/2026/03/05/cisa-adds-five-known-exploited-vulnerabilities-catalog   
Published: 2026 03 05 12:00:00
Received: 2026 03 05 20:04:26
Feed: CISA Current Activity
Source: Cybersecurity and Infrastructure Security Agency (CISA)
Category: News
Topic: Cyber Security

Article: The Controversies Finally Caught Up to Kristi Noem - published 7 months ago.
Content:
Copy Link: https://www.wired.com/story/the-controversies-finally-caught-up-to-kristi-noem/   
Published: 2026 03 05 19:43:46
Received: 2026 03 05 20:00:43
Feed: Wired.com – Security Feed
Source: Wired
Category: News
Topic: Cyber Security

Article: Spy agency warns NZ's cyber security barely up to scratch - NZ Herald - published 7 months ago.
Content: By Phil Pennington of RNZ The Government has launched cyber security reforms in the scramble to catch up with its Five Eyes partners, even as its.
Copy Link: https://www.nzherald.co.nz/business/spy-agency-warns-nzs-cybersecurity-barely-up-to-scratch/MPDFDU25XVA3RC5GDHIZ3YE2IA/   
Published: 2026 03 05 19:15:22
Received: 2026 03 05 20:00:34
Feed: Google Alert – "cyber security"
Source: Google Alert
Category: News
Topic: Cyber Security

Cyber Tzar Change Over Time (Extended)