DjamgaMind: Audio Intelligence for the C-Suite (Daily AI News, Energy, Healthcare, Finance)
Full-Stack AI Intelligence. Zero Noise.The definitive audio briefing for the C-Suite and AI Architects. From Daily News and Strategic Deep Dives to high-density Industrial & Regulatory Intelligence—decoded at the speed of the AI era. . 👉 Start your specialized audio briefing today at Djamgamind.com
AI Jobs and Career
I wanted to share an exciting opportunity for those of you looking to advance your careers in the AI space. You know how rapidly the landscape is evolving, and finding the right fit can be a challenge. That's why I'm excited about Mercor – they're a platform specifically designed to connect top-tier AI talent with leading companies. Whether you're a data scientist, machine learning engineer, or something else entirely, Mercor can help you find your next big role. If you're ready to take the next step in your AI career, check them out through my referral link: https://work.mercor.com/?referralCode=82d5f4e3-e1a3-4064-963f-c197bb2c8db1. It's a fantastic resource, and I encourage you to explore the opportunities they have available.
- Full Stack Engineer [$150K-$220K]
- Software Engineer, Tooling & AI Workflow, Contract [$90/hour]
- DevOps Engineer, India, Contract [$90/hour]
- More AI Jobs Opportunitieshere
| Job Title | Status | Pay |
|---|---|---|
| Full-Stack Engineer | Strong match, Full-time | $150K - $220K / year |
| Developer Experience and Productivity Engineer | Pre-qualified, Full-time | $160K - $300K / year |
| Software Engineer - Tooling & AI Workflows (Contract) | Contract | $90 / hour |
| DevOps Engineer (India) | Full-time | $20K - $50K / year |
| Senior Full-Stack Engineer | Full-time | $2.8K - $4K / week |
| Enterprise IT & Cloud Domain Expert - India | Contract | $20 - $30 / hour |
| Senior Software Engineer | Contract | $100 - $200 / hour |
| Senior Software Engineer | Pre-qualified, Full-time | $150K - $300K / year |
| Senior Full-Stack Engineer: Latin America | Full-time | $1.6K - $2.1K / week |
| Software Engineering Expert | Contract | $50 - $150 / hour |
| Generalist Video Annotators | Contract | $45 / hour |
| Generalist Writing Expert | Contract | $45 / hour |
| Editors, Fact Checkers, & Data Quality Reviewers | Contract | $50 - $60 / hour |
| Multilingual Expert | Contract | $54 / hour |
| Mathematics Expert (PhD) | Contract | $60 - $80 / hour |
| Software Engineer - India | Contract | $20 - $45 / hour |
| Physics Expert (PhD) | Contract | $60 - $80 / hour |
| Finance Expert | Contract | $150 / hour |
| Designers | Contract | $50 - $70 / hour |
| Chemistry Expert (PhD) | Contract | $60 - $80 / hour |
CyberSecurity – What are some things that get a bad rap, but are actually quite secure?
Cybersecurity is an important issue for everyone, from individuals to large organizations. There are many things that get a bad rap when it comes to cybersecurity, but that doesn’t mean they’re not secure. For example, PGP (Pretty Good Privacy) is a method of encrypting emails that is considered to be very secure. However, it can be difficult to set up and use. Another example is using very long passwords that are actually a sentence. This may seem like a security risk, but it’s actually more secure than a shorter password because it’s more difficult for hackers to guess. Additionally, changing the default port for certain services like databases can help to prevent hacking. Unplugging the ethernet cable may also seem like a security risk, but it’s actually one of the most effective ways to prevent data breaches. Finally, browser password managers are often considered to be insecure, but they’re actually quite secure if used properly. Cybersecurity is an important issue, and there are many things that can be done to help prevent hacking and data breaches.
There are a lot of CyberSecurity myths out there. People think that X, Y, and Z are the most secure way to do things when in reality, they are the least secure. The biggest myth is that PGP is unbreakable. PGP has been broken many times and is not a reliable form of CyberSecurity. Another myth is that very long passwords are secure. The problem with very long passwords is that they are difficult to remember and often get written down somewhere. If a hacker gets ahold of your password, they can easily access your account. The best way to prevent CyberSecurity breaches is to use MFA, OAuth, and two-step verification whenever possible. These methods make it much more difficult for hackers to gain access to your accounts. While they may not be foolproof, they are the best CyberSecurity measure available.
1- PGP
PGP is a Form of Minimalism
As a protocol, PGP is surprising simple. Here is what happens if you want to use it to securely send a message to someone:
- You get from them a PGP identity (public key). How you do that is entirely up to you.
- Your PGP program uses that identity to perform a single public key encryption of a message key.
- Then the message key is used to encrypt the message which is added to the encrypted message key to make the encrypted message.
- Your correspondent does the opposite operations to get the message.
If you want to sign your message then you:
- Hash the message.
- Do a public key signature operation on the hash and attach the result to the message.
- Your correspondent checks the signature from your PGP identity, which they have acquired somehow.
The simple key handling is where the minimalism comes from. It is why PGP can be used in so many non-email contexts.
As a contrast, consider the Signal Protocol for instant messaging. I will not attempt to describe Signal in any detail as I would get parts of it wrong. It would also make for a pointlessly long article. There is a high level description of the Signal protocol here. None of the following comments are intended to be critical, they are intended to give an idea of the level of complexity of the protocol in total:
- Signal has at least 2 systems for creating forward secrecy. Each system requires a system to deal with loss of synchronization.
- A Signal session requires the storage and maintenance of a lot of state information.
- Signal normally uses a server based “prekey” system to deal with the case where a client is offline and thus is unable to negotiate.
- Signal achieves partial deniability with a triple Diffie-Hellman key exchange. OpenPGP achieves complete deniability by not signing the message in the first place.
- Supporting the Signal protocol in practice requires a separate system to store and protect past messages1). Since this is at odds with forward secrecy such a system will end up with a system to delete old messages.
The Signal Protocol is built on ideas from the Off the Record (OTR) protocol. Interestingly enough, OTR was intended to improve PGP by adding extra functionality. Signal adds functionality on top of the OTR functionality. So Signal could be considered the result of an attempt to improve something by making it more complex.
I believe that reliability and security are best achieved with simple systems. OpenPGP is a standard that describes such a system.
2- Very long passwords that are actually a sentence
It could be bad if you just came up with it and forget it, and people think it’s bad if it only has lowercase and no numbers or punctuation. But a 5-6 word sentence could be quite secure, especially if it’s a bit weird. “Lemons make a delicious snack in my house.”
AI-Powered Professional Certification Quiz Platform
Web|iOs|Android|Windows
Are you passionate about AI and looking for your next career challenge? In the fast-evolving world of artificial intelligence, connecting with the right opportunities can make all the difference. We're excited to recommend Mercor, a premier platform dedicated to bridging the gap between exceptional AI professionals and innovative companies.
Whether you're seeking roles in machine learning, data science, or other cutting-edge AI fields, Mercor offers a streamlined path to your ideal position. Explore the possibilities and accelerate your AI career by visiting Mercor through our exclusive referral link:
Find Your AI Dream Job on Mercor
Your next big opportunity in AI could be just a click away!
3- Writing passwords down.
I tell all my old relatives to write their passwords down in a little notebook. As long as there isn’t someone there regularly I don’t trust, it is much better than using same password and if their physical security at their house is compromised, there are bigger concerns than a notebook of banking passwords.
We write down all the passwords to our most secure systems – but then we rip them in half and put them in 2 separate safes.
AI- Powered Jobs Interview Warmup For Job Seekers
⚽️Comparative Analysis: Top Calgary Amateur Soccer Clubs – Outdoor 2025 Season (Kids' Programs by Age Group)
Did I say passwords? I meant encryption keys.
4- Changing default ports for certain services like dbs
Most of the gangs out there use tools that don’t do a full search, so they go through the default port list
AI Jobs and Career
And before we wrap up today's AI news, I wanted to share an exciting opportunity for those of you looking to advance your careers in the AI space. You know how rapidly the landscape is evolving, and finding the right fit can be a challenge. That's why I'm excited about Mercor – they're a platform specifically designed to connect top-tier AI talent with leading companies. Whether you're a data scientist, machine learning engineer, or something else entirely, Mercor can help you find your next big role. If you're ready to take the next step in your AI career, check them out through my referral link: https://work.mercor.com/?referralCode=82d5f4e3-e1a3-4064-963f-c197bb2c8db1. It's a fantastic resource, and I encourage you to explore the opportunities they have available.
5- MFA in general.
Takes 60 seconds to set up, and an additional 5s each time you use it, but can save you hours if not days of manual recovery efforts with support to regain access to a compromised account. Yet people don’t like the idea.
If you are using TOTP for your MFA, you can even put it right in the browser with a plug-in. I use this approach for work. It’s very convenient.
Invest in your future today by enrolling in this Azure Fundamentals - Pass the Azure Fundamentals Exam with Ease: Master the AZ-900 Certification with the Comprehensive Exam Preparation Guide!
- AWS Certified AI Practitioner (AIF-C01): Conquer the AWS Certified AI Practitioner exam with our AI and Machine Learning For Dummies test prep. Master fundamental AI concepts, AWS AI services, and ethical considerations.
- Azure AI Fundamentals: Ace the Azure AI Fundamentals exam with our comprehensive test prep. Learn the basics of AI, Azure AI services, and their applications.
- Google Cloud Professional Machine Learning Engineer: Nail the Google Professional Machine Learning Engineer exam with our expert-designed test prep. Deepen your understanding of ML algorithms, models, and deployment strategies.
- AWS Certified Machine Learning Specialty: Dominate the AWS Certified Machine Learning Specialty exam with our targeted test prep. Master advanced ML techniques, AWS ML services, and practical applications.
- AWS Certified Data Engineer Associate (DEA-C01): Set yourself up for promotion, get a better job or Increase your salary by Acing the AWS DEA-C01 Certification.
If you use a password manager that supports TOTP and auto type (e.g. KeePassXC) then you don’t even need to mess with it once you have it set up.
6- Oauth for 3rd party apps.
Those “sign into our app with your (Google, Microsoft, etc) account” things. As long as you trust the ID provider and the app, it’s usually secure. More so, considering it prevents password reuse, and you aren’t exposed if any of those 3rd party apps have a breach.
7- Two-step verification.
Yes it’s annoying to need two devices every time you want to log into your most precious accounts, but trust me, I’d rather take the extra 10 seconds to authorize a login than go through the hell of having my account breached.
8-Biometric Authentication.
The argument is that ‘you can’t change your face/finger’ but it is actually more secure than other ‘magic link’ providers.
Let me be clear, there are some providers that are still iffy on security. But there are also some that have device native authentication (you need the device to auth), they don’t store passwords or password hashes, and only has public keys.
One example of this is https://passage.id/ which is about as secure as you can get.
9- Zoom.
Yes, they had a bunch of issues at the start, but they fixed them. I would much rather work with a company that had security assessments and fixed the problems rather than a company which has never been assessed.
10- Unplugging the ethernet cable.
11- Browser password managers?
Rant moment: reasons cybersecurity fails
<Rant>
People don’t see value of putting effort in cybersecurity because they don’t see any material gains from it. The best thing they can see is nothing bad happening.
No news isn’t good enough of a good news. This is enough to mostly ignore all cybersecurity advice altogether.
This is similar to people not taking care of themselves health-wise, because the best things they can see is not getting sick.
</Rant>
Why do cyber attackers commonly use social engineering attacks?
Hackers commonly use social engineering attacks because they can be very effective. By using social engineering, hackers can take advantage of people’s trusting nature and willingness to help others. They can also exploit the fact that people are often not well-informed about security and privacy issues. For example, a hacker might pose as a customer service representative and ask for someone’s password. Or, they might send an email that looks like it is from a trusted source, such as a bank or government agency, and ask the recipient to click on a link or download an attachment. If the person falls for the deception, the hacker can gain access to their accounts or infect their computer with malware. That is why it is important to be aware of these types of attacks and know how to protect yourself.
Cyber attackers commonly use social engineering attacks for a number of reasons. First, hacking into a person’s or organization’s computer systems is becoming increasingly difficult as security measures become more sophisticated. Second, even if a hacker is able to gain access to a system, they are likely to be discovered and caught before they can do any significant damage. Third, social engineering attacks allow hackers to bypass security measures and obtain sensitive information without being detected. Finally, social media platforms have made it easier for cyber attackers to obtain personal information about their targets and to carry out attacks. As a result, social engineering attacks are an attractive option for many cyber attackers.
To conclude:
Cybersecurity is often thought of as a complex and technical field, but there are actually many simple things that everyone can do to help stay safe online. For example, one way to protect your online communications is to use PGP encryption. This type of encryption is incredibly difficult for even the most skilled hacker to break, but it’s also easy to use. Another way to improve your cybersecurity is to use very long passwords that are actually a sentence. This may seem daunting, but using a phrase as your password makes it much harder for hackers to guess. Additionally, changing the default ports for certain services can help prevent unauthorized access. And finally, unplugging the ethernet cable when you’re not using it is a great way to physically block hackers from accessing your device. By following these simple tips, you can dramatically improve your cybersecurity and protect your privacy.
source: r/cybersecurity
Source: r/cybersecurity
- Mentorship Monday - Post All Career, Education and Job questions here!
by /u/AutoModerator (cybersecurity) on May 18, 2026 at 12:00 amThis is the weekly thread for career and education questions and advice. There are no stupid questions; so, what do you want to know about certs/degrees, job requirements, and any other general cybersecurity career questions? Ask away! Interested in what other people are asking, or think your question has been asked before? Have a look through prior weeks of content - though we're working on making this more easily searchable for the future. submitted by /u/AutoModerator [link] [comments]
- Mean time-to-exploit just hit 2.1 days. Critical vulnerabilities everywhere. Is the AI apocalypse here?by /u/Mr_Prometius (cybersecurity) on May 17, 2026 at 11:23 pm
Mandiant's new figure: attacks begin 7 days before the patch ships. Patch Tuesday is now exploit-last-Friday Supporting stats: 71% of known exploits hit same-day as disclosure (Zero Day Clock) 40% of breaches start with an unpatched flaw (IBM) +162% CVE volume since 2020 (Mondoo) 25,973 CVEs filed in 2026 already — heading towards 70k, FIRST.org forecasts up to 100k And we seem to be seeing a lot of Linux and other software critical vulnerabilities lately, all thanks to AI. Take a look at https://zerodayclock.com Is the AI exploit apocalypse here? Is this the end? submitted by /u/Mr_Prometius [link] [comments]
- Does the CBP bug phones?by /u/Super-Distance-7717 (cybersecurity) on May 17, 2026 at 11:11 pm
Does the CBP install spyware or “bug” phones that they inspect at the border? Is there anyway to know whether the phone is bugged? submitted by /u/Super-Distance-7717 [link] [comments]
- What We Learned Building Runtime Visibility for Modern Telco Networksby /u/deadbeef0-0 (cybersecurity) on May 17, 2026 at 10:20 pm
submitted by /u/deadbeef0-0 [link] [comments]
- The Politics of AI Transparency
by /u/Indie-Intervalist (cybersecurity) on May 17, 2026 at 9:55 pmAI transparency is often framed as a technical or ethical requirement. But it is also a political question — one that turns on power, incentives, and competing ideas of accountability. I explore that here. submitted by /u/Indie-Intervalist [link] [comments]
- A million baby monitors and security cameras were easily viewable by hackers
by /u/julian88888888 (cybersecurity) on May 17, 2026 at 9:42 pmsubmitted by /u/julian88888888 [link] [comments]
- NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE
by /u/Cristiano1 (cybersecurity) on May 17, 2026 at 9:37 pmsubmitted by /u/Cristiano1 [link] [comments]
- Is cybersecurity becoming more behavioral than technical?by /u/Andrewpaul46 (cybersecurity) on May 17, 2026 at 8:55 pm
Lately I’ve been feeling like attackers are targeting human behavior more than infrastructure itself. A lot of breaches don’t happen because security is completely missing.Usually it’s an employee mistake, rushed decision, reused password, ignored alert. Meanwhile most security discussions still focus heavily on tools, dashboards and AI detection. Feels like the human side of security is becoming more important than ever. Curious how people working in SOC/blue team environments see this. submitted by /u/Andrewpaul46 [link] [comments]
- Questions About Promo Items for a Cybersecurity Conferenceby /u/Jiminy_Cactus (cybersecurity) on May 17, 2026 at 8:53 pm
Hey There & Thank You in Advance For Sharing Your Thoughts/Ideas One of my clients is one of the sponsors of a rather elite cybersecurity conference and I want to ensure we provide promotional items that will actually be used and/or appreciated, i.e. won't end up in ad drawer or the trash. GOAL: Raise awareness and familiarity with our company, capabilities and solutions QUESTION: What branded promotional items have you really appreciated and used at a conference and/or after a conference? _______________________ I am not personally fond of "branded" promotional materials, but that defeats a promotional items' 'reason for being' -- so, I'm going for very subtle when it comes to branding the items we choose. WHAT I'M LOOKING AT: SAGA BOLT ACTION PENS: I've done considerable research and so far the SAGA brand seem to be really rugged, reliable and cost-effective enough such that everyone take 1-2 of these pens with them. The thought is go with a light gray with our typographic logo" in a silver so it barely stands out. TACTILETURN BOLT ACTION PENS These TactileTurn pens are for the key decision makers, those run about $100+ each. I'd like to personalize the clip with the name of the Person of Interest. They come in a box and I want to use these as a Post-Event gift, i.e. my client follows up after the've met and talked etc. SIGNATURE COIN MULTI-TOOL I like the signature coin multi-tools as a giftie/giveaway at the dinner we're hosting. The tools can be as simple as a bottle opener to a multi-tool that includes screwdriver tips or the hex bit of a socket wrench and honestly apparently any other kind of tool that someone might find useful. They're made in 3D relief, and again, I want to go subtle with the brand name. I envision our mascot (which is a super cool creature!) coming up and out and our name on the other side. I WELCOME YOUR FEEDBACK AND THANK YOU! submitted by /u/Jiminy_Cactus [link] [comments]
- Microsoft - "Your single use code" email when it was not requestedby /u/lostinmygarden (cybersecurity) on May 17, 2026 at 6:46 pm
Thought I'd post what I've done so far in a hope to stop these from happening and get some insight from others as to what else could be done. Also, would be great to find out exactly why this has been happening. I have a Gmail address that I have set up on my Microsoft account to send these codes to; I receive the emails to my Gmail account, but it does not indicate which Microsoft account it is links to. You can use a Microsoft service to see which accounts your email (the one you received codes on) links to in some way on Microsoft. The details are obfuscated, but useful. https://account.live.com/username/recover I also use my Gmail address as my account for my windows laptop, so effectively I have another Microsoft account, but with my Gmail address. Perhaps this is something others have done and do not realise the linkage here. Microsoft have not said anything about this still (AFAIK), my guess is that it is a bug or some kind of cyber incident, perhaps probing for flaws in the service. As long as you don't use these codes you have not requested, it should be fine. There is a very small chance that the code could be guessed (1 in a million, maybe less if a guessed code can be entered a few times). I have checked aliases I have for my Microsoft accounts and removed them as options from sign in preferences, didn't know about this but found that on Microsoft forum. Unfortunately, I received a code after these changes, so didn't resolve my issue but still worthwhile checking. Last thing I've tried is to set my Microsoft account with my Gmail address to have an alias (made sure it was quite different to the Gmail address), I have then made this the primary address and removed the Gmail email address from being used as a sign in address option (it's still there, just disabled that feature for it). Unsure if this will impact my Windows laptop as will not have access to it until tomorrow, will update as soon as I find out. Since the above change, I have not received another email with a code that I have not initiated myself, but it has only been 1 day... The Microsoft security log is pretty useless as it doesn't log these code requests, only successful logins (makes me think these logs would show a disturbing number of events if it included even partial attempts to sign in with your email address). I would hope it would include unsuccessful attempts too (I don't see any of these), but really don't know. I have various things in place to help secure my accounts, such as authenticator, MFA, complex and unique passwords etc... I need to look into going password-less more, but unsure if this will help here at all. I have created recovery codes for all my accounts, in the event I could mess something up. Anyway, any other thoughts on what we can do? Hopefully some bits here will help others too. submitted by /u/lostinmygarden [link] [comments]
- Security / Compliance work going Agentic?by /u/Beautiful-Training93 (cybersecurity) on May 17, 2026 at 6:35 pm
I launched my new startup today, and I wonder whether we are pushing for something relevant, or something that is too “different” to what customers are used to. We are betting that everything will eventually go agentic, what shape or form we don’t know. But, our bet is: humanity will want verification of AI output, using our own (human) standards / frameworks for a very long time, before we can trust and act on AI generated output in fields like security and compliance. So, our solution is to build an army of MCP servers that encompass laws, regulations, frameworks, standards etc. We serve this fleet through an MCP gateway, which helps agents find the right servers to be able to do work without relying on memory. Rather, we force the agents who connect, to receive citations from our MCP sources and through prompts we are able to get agents to honestly say whether they were able to “ground” answers through our sources. If they did, you can get verbatim citations, and if we don’t have the sources or there is a bug, they will report this honestly saying x and y answer could not be verified. Then we also expose big multi-step workflows like threat models, DPIA, Gap Analysis cross jurisdictions etc. Which combines into a deliverable that you can actually verify quite quickly, instead of wonder where it hallucinated heavily. I want this at my consulting jobs, but I worry most of our potential customers are not ready for this yet, even though they all have copilot and claude, and love getting unverified answers. So, do you guys think this would land at the companies you work for? Are we already in this way of working, or is it going to take months to years? Would love to hear some thoughts. We pitched to Masschallenge recently, and they could not understand we don’t ship any AI in our product, but still talk about AI in our pitch 🤣 so this worried me! submitted by /u/Beautiful-Training93 [link] [comments]
- Microsoft account keeps getting Authenticator requests?by /u/birdsofjay (cybersecurity) on May 17, 2026 at 5:39 pm
I got an Authenticator request from another country for my Microsoft account. I denied it and went in and changed my password, a day later I get another Authenticator request from a different country than the first. Again change password and again it happens. How can I secure my account how are they able to send these Authenticator requests? submitted by /u/birdsofjay [link] [comments]
- [Tool] Grafana Final Scanner - Mass CVE Testing Script with All Public CVEs Aggregated.
by /u/Decent-Assistance-50 (cybersecurity) on May 17, 2026 at 5:26 pmHey everyone, I aggregated and curated all public Grafana CVEs into a single, high-speed Python script to make testing mass targets easier for bug hunters and red teamers. Zero dependencies, clean terminal output, and ready for automation. submitted by /u/Decent-Assistance-50 [link] [comments]
- eBPF: Hello World Or: how I learned to run code in the kernel without crying
by digant patel (Security on Medium) on May 17, 2026 at 5:10 pmLast article ended with “and now you don’t have to write a kernel module.” This is what you write instead.Continue reading on Medium »
- Hunting Lazarus, Part V: Eleven Hours on His Diskby Red Asgard (Cybersecurity on Medium) on May 17, 2026 at 5:01 pm
Forensic examination of an active Lazarus Group operator machine: a target list of nearly 17,000 developers, six drained wallets, and a…Continue reading on Medium »
- 4.8 Million Cybersecurity Jobs Exist. So Why Does Your Application Keep Getting Ghosted?
by Akhil Sharma (Cybersecurity on Medium) on May 17, 2026 at 4:56 pmI reviewed 300 resumes for a single entry-level role. Two weeks later, I’d interviewed six people and hired one. Here’s what the “talent…Continue reading on Medium »
- What is BOPLA? API3:2023 Broken Object Property Level Authorization Explained for Beginnersby Abrar Bin Habib (Cybersecurity on Medium) on May 17, 2026 at 4:54 pm
The API security flaw that gives away too much and accepts even more. The idea for this blog from APISec University.Continue reading on Medium »
- They Fixed the Thing You Didn’t Know Was Broken
by Ajay Kumar Bakkashetti (Cybersecurity on Medium) on May 17, 2026 at 4:47 pmiOS 26.5 brings encryption to iPhone-Android texts. It’s a bigger deal than it sounds.Continue reading on Mac O’Clock »
- Apakah aplikasimu sudah aman? Bisa jadi kerentanan ini ada di aplikasimu?
by Allan Kwek (Security on Medium) on May 17, 2026 at 4:47 pmBagaimana Mediscribe NG menerapkan keamanan berlapis dari frontend sampai backend dan bagaimana satu celah otorisasi ditemukan dan ditutup.Continue reading on Medium »
- What Is The Quantum Computer Threat to Bitcoin?
by VTECH (Cybersecurity on Medium) on May 17, 2026 at 4:42 pmThe security of Bitcoin has rested on a strong foundation deemed practically unhackable. It is a decentralized network based on computer…Continue reading on The Bitcoinist »
- Is MovieBox Pro Safe to UseIs MovieBox Pro Safe to Use on Android and iPhone?
by CineStream Insights (Cybersecurity on Medium) on May 17, 2026 at 4:41 pmBefore installing most streaming apps, up to millions of users who roam around on Android and iOS come across ONE common question: “Is…Continue reading on Medium »
- The Ghostwriters in the Machine: A Technical Autopsy of Outsourced Chat Platforms
by AKUMAAYORI (Cybersecurity on Medium) on May 17, 2026 at 4:27 pmThe structural analysis of the digital Social Discovery and online interaction sector reveals an increasingly specialized international…Continue reading on Medium »
- INFORMATION GATHERING
by BlueTeamMal (Cybersecurity on Medium) on May 17, 2026 at 4:25 pmTheHarvester is especially useful during the reconnaissance phase of an ethical hacking engagement.Continue reading on Medium »
- Hunting Lazarus, Part VII: The Server That Was Not Just FTPby Red Asgard (Cybersecurity on Medium) on May 17, 2026 at 4:21 pm
The FTP exfiltration sink was port 21. The rest of the host told a larger story.Continue reading on Medium »
- An npm worm compromised 170 packages in six minutes — including OpenAI’s laptopsby Jerome (Cybersecurity on Medium) on May 17, 2026 at 4:19 pm
The TanStack attack wasn’t a stolen password. It was a structural failure in GitHub Actions that no rotated token can patch.Continue reading on Medium »
- The $293 million KelpDAO hack is a wake-up call for DeFi’s complexity problemby Crypto Buying Tips (Security on Medium) on May 17, 2026 at 4:00 pm
Continue reading on Medium »
- OverTheWire Bandit Walkthrough — Level 5 → 6 | 30-Day Cybersecurity Learning Journey (Day 6)
by William | Cybersecurity & SOC Analyst (Security on Medium) on May 17, 2026 at 3:33 pmContinue reading on Medium »
- Wallet Security Is the Foundation of Every Crypto Experience
by Ethlas Pro (Security on Medium) on May 17, 2026 at 3:13 pmCrypto wallets have changed a lot over the last few years.Continue reading on Medium »
- Certs to go into Security Engineer/architectby /u/Interesting-Skill-70 (cybersecurity) on May 17, 2026 at 3:13 pm
Currently only have Sec+ and just started as a SOC Analyst, wondering what certs to get next and someone told me after sec+ to get a cert focusing on your specific path you want. Did some research but figured to get more advice directly. submitted by /u/Interesting-Skill-70 [link] [comments]
- Transition from traditional penetration testing into AI securityby /u/Horror_Problem9618 (cybersecurity) on May 17, 2026 at 2:47 pm
Hey everyone, I've been working as a penetration tester for eight years now. I'm about to transition from traditional pentesting to a more interesting field. Right now, there is huge potential (and hype) in AI and AI security as a whole, and I think in the near future there will be an emerging need for AI security engineers and professionals who understand the different system components around it. Do you think it's worth it in the long run? To prepare, I've already subscribed to some courses that focus on AI security and AI basics. Right now I feel that what I regularly do is ticket grinding in a senior role (however my projects are way more complex). The business doesn't really care how professional you are, they just want to clear the backlog and save some serious $$$ for the company. I'm a bit frustrated and bored in this role. I think I don't get recognition anymore, and I need to bring something new to the table to get promoted or rewarded. Earlier, I did a lot for the team to help with everyone's work, but I think I was exploited, and now I'm planning to adopt a gatekeeping mentality. submitted by /u/Horror_Problem9618 [link] [comments]
- Seeking advice on next career stepsby /u/Dapper-Ad4488 (cybersecurity) on May 17, 2026 at 2:44 pm
Hey everyone. First time making a post on here. I’m looking for some advice. So for some background: my current company is a pretty good size GovTech company with a very immature security department. This is my first security job and I’ve been with the company for 3 years now. We recently went through a merger (and acquisition simultaneously) which caused a lot of turnover and some security folks have left the company. At this point I have the longest amount of time with the company of anyone on the security team. Anyway, new leadership for the security team has come in and I’ve been told they plan to promote me and that if everything goes as planned I’ll sort of be allowed to determine the direction I want to go going forward. There’s a lot of major security projects coming up (vulnerability/patch management overhaul, IAM overhaul, etc.). I’m currently a security analyst. I like the sound of cybersecurity engineer because I want to get into cloud security and maybe security architecture a little further along in my career. The other option would be moving up to a higher tier analyst position. TLDR: I’m a security analyst with three years experience at a company with a small security department. There are a lot of major projects coming up. It’s been floated out there that I’ll likely be getting a promotion and my current team lead has stated I’ll have the ability to sort of pick my title and the trajectory I take with the company (high tier analyst or security engineer role). So my question(s): of the two paths (tier2/3 sec analyst or cybersecurity engineer) which one has the most growth potential? Which one would be more in-demand in the future and look better on a resume? For anyone who has experience in higher tier security analyst roles, what’s your career path looked like so far and what opportunities have you been presented? This post ended up being longer than I thought it would be so thanks for reading. If you have any advice at all I’d really like to hear it. I feel like I’ve been presented with a unique opportunity (if everything goes as planned) and I really want to capitalize on it and make the most of it. submitted by /u/Dapper-Ad4488 [link] [comments]
- Will the analyst role become obsolete?by /u/RAM-I-T (cybersecurity) on May 17, 2026 at 2:02 pm
After doom scrolling on this sub, it doesn’t give me any hope to pursue my goal of becoming an SOC Analyst. I’ve had this goal for a while. While completing my degree. But reading how companies have started to phase out the juniors to Claude and other ai, how are we supposed to make an entry? Should I even pursue CySa+ and CCDL1? submitted by /u/RAM-I-T [link] [comments]
- Best path into cybersecurity for a high schooler?by /u/Rare-Rain-7013 (cybersecurity) on May 17, 2026 at 1:37 pm
I’m 17 and planning on going into cybersecurity, but I’m having trouble deciding between different military paths and how they’ll affect my future career. At first, I wanted to do Air Force cyber (17C), but I missed the ASVAB requirement by 12 points (I still have all my senior year aswell to try to get a higher score). I’ve also I’ve been considering joining the Army National Guard as a 25B so I can have my college tuition paid for while still starting my civilian career earlier instead of spending too much extra time waiting around. I’m mainly trying to figure out: Which path would help me more long-term for cybersecurity? How can I start learning coding and cyber skills now before college? What certifications, programming languages, or projects should I focus on as a beginner? How do people transition military cyber/IT experience into civilian jobs? What degree would be best for this field (Cybersecurity, Computer Science, IT, etc.)? Would going for a master’s degree eventually be worth it in cybersecurity? I’d appreciate any advice from people in cybersecurity, the military, or anyone who started learning young. submitted by /u/Rare-Rain-7013 [link] [comments]
- Your SLSA Provenance Is Lying to You
by Heinan Cabouly (Security on Medium) on May 17, 2026 at 1:19 pmA DevOps Team Lead managing FDA/MDR-compliant infrastructure for hospital patient monitoring systems breaks down why the industry’s most…Continue reading on That Infrastructure Guy »
- YellowKey: The BitLocker Bypass That Needs Only a USB Stick and One Held Key
by Afi0pchik (Security on Medium) on May 17, 2026 at 1:01 pmNo CVE. No patch. No explanation from Microsoft. Just a folder, a reboot, and a shell on your encrypted drive.Continue reading on MeetCyber »
- Terror Labels, Enemy, the State and Indonesian Cases
by Eryan Dwiki (Security on Medium) on May 17, 2026 at 12:57 pmA Short Dive into How State Actors Use ‘Terrorism’ to Let Slip Their Dogs of WarContinue reading on Medium »
- Building a Secure Kubernetes Platform with Terraform and Kyverno
by Ennebet Mohammed (Security on Medium) on May 17, 2026 at 12:00 pmKubernetes security is often implemented manually and differently from one environment to another, which can quickly become difficult to…Continue reading on Medium »
- Complete beginner looking to learn cybersecurity for personal/everyday use. Where to start?by /u/InternalRazzmatazz92 (cybersecurity) on May 17, 2026 at 10:02 am
Hi everyone! I'm interested in learning the basics of cybersecurity, but strictly for personal use. I'm not looking to make a career switch, get professional certifications, or learn advanced pentesting. My main goal is simply to learn how to better protect my personal data, secure my devices and home network, understand common threats (like phishing or malware), and improve my overall digital hygiene. Since I'm starting from zero, the highly technical resources are a bit overwhelming. What are some good, easy-to-digest resources (YouTube channels, blogs, free basic courses, or podcasts) geared towards an everyday user? What fundamental topics should I focus on first? Any advice is really appreciated. Thanks in advance! submitted by /u/InternalRazzmatazz92 [link] [comments]
- Am I overthinking Claude Code security or is this actually a risk?by /u/Sweaty-Career330 (cybersecurity) on May 17, 2026 at 9:36 am
Maybe I'm being paranoid but Claude Code running on dev machines with access to our codebase and network... that seems like a pretty big deal from a security perspective. Like if it got compromised somehow, it would have direct access to everything. Am I the only one thinking about this? Or are companies actually locking this down? How are you all handling AI tools like Claude Code? submitted by /u/Sweaty-Career330 [link] [comments]
- ISO/IEC 27701 ( SoA ) Applicabilityby /u/Anas5667 (cybersecurity) on May 17, 2026 at 9:11 am
Regarding ISO 27701 controls, I would like a simple clarification on when each control should be marked as Applicable and when it should be marked as Not Applicable (N/A). Please note that I act as a PII Controller for employee data and client contract data. I also act as a PII Processor for my solution, which is hosted on a cloud infrastructure. Please provide a simple and clear explanation of when each control should be applied and when it should be marked as “Not Applicable,” from the list below. Thank you. A.1 - Control objectives and controls for PII controllers (Employees Data and ) A.1.2.4 Determine when and how consent is to be obtained A.1.2.5 Obtain and record consent A.1.2.7 Contracts with PII processors A.1.2.8 Joint PII controller A.1.3.5 Providing mechanism to modify or withdraw consent A.1.3.11 Automated decision making ---- A.2 - Control objectives and controls for PII processors A.2.2.4 Marketing and advertising use A.2.2.5 Infringing instruction submitted by /u/Anas5667 [link] [comments]
- This article about AI allucinations written by thehackernews, is literally written with AI lol... We need to do something to stop this phenomenon
by /u/allexj (cybersecurity) on May 17, 2026 at 8:46 amTake a look, for example, at the section "3 ways AI hallucinations are impacting cybersecurity": https://thehackernews.com/2026/05/how-ai-hallucinations-are-creating-real.html?m=1#3-ways-ai-hallucinations-are-impacting-cybersecurity It feels verbose without saying much of value. Using reliable services that usually (I know they are not perfect) get detection right, such as "gptzero.me", it turns out that it was indeed written by AI. Where will we end up if even articles discussing the risks of AI are written by AI? We need to introduce some regulations and require that a specific pattern or signature be included in some way within the text, images or videos generated, so that we can determine whether or not the content is of human origin. Is there a study or discussion underway somewhere in a law firm or research centre looking into this? submitted by /u/allexj [link] [comments]
- Interview Assessmentsby /u/ButterscotchBandiit (cybersecurity) on May 17, 2026 at 1:38 am
Managers and hiring panel in cyber. Do you conduct practical assessments when hiring for a role. What do your assessments look like, what are you looking for beyond assessment completion? submitted by /u/ButterscotchBandiit [link] [comments]
- Experts Confirm the Fast16 Malware Was Sabotaging Nuclear Weapons Tests, Likely in Iran
by /u/rkhunter_ (cybersecurity) on May 16, 2026 at 2:10 pmsubmitted by /u/rkhunter_ [link] [comments]
- Mentorship Monday - Post All Career, Education and Job questions here!by /u/AutoModerator (cybersecurity) on May 11, 2026 at 12:00 am
This is the weekly thread for career and education questions and advice. There are no stupid questions; so, what do you want to know about certs/degrees, job requirements, and any other general cybersecurity career questions? Ask away! Interested in what other people are asking, or think your question has been asked before? Have a look through prior weeks of content - though we're working on making this more easily searchable for the future. submitted by /u/AutoModerator [link] [comments]
