DjamgaMind: Audio Intelligence for the C-Suite (Daily AI News, Energy, Healthcare, Finance)
Full-Stack AI Intelligence. Zero Noise.The definitive audio briefing for the C-Suite and AI Architects. From Daily News and Strategic Deep Dives to high-density Industrial & Regulatory Intelligence—decoded at the speed of the AI era. . 👉 Start your specialized audio briefing today at Djamgamind.com
AI Jobs and Career
I wanted to share an exciting opportunity for those of you looking to advance your careers in the AI space. You know how rapidly the landscape is evolving, and finding the right fit can be a challenge. That's why I'm excited about Mercor – they're a platform specifically designed to connect top-tier AI talent with leading companies. Whether you're a data scientist, machine learning engineer, or something else entirely, Mercor can help you find your next big role. If you're ready to take the next step in your AI career, check them out through my referral link: https://work.mercor.com/?referralCode=82d5f4e3-e1a3-4064-963f-c197bb2c8db1. It's a fantastic resource, and I encourage you to explore the opportunities they have available.
- Full Stack Engineer [$150K-$220K]
- Software Engineer, Tooling & AI Workflow, Contract [$90/hour]
- DevOps Engineer, India, Contract [$90/hour]
- More AI Jobs Opportunitieshere
| Job Title | Status | Pay |
|---|---|---|
| Full-Stack Engineer | Strong match, Full-time | $150K - $220K / year |
| Developer Experience and Productivity Engineer | Pre-qualified, Full-time | $160K - $300K / year |
| Software Engineer - Tooling & AI Workflows (Contract) | Contract | $90 / hour |
| DevOps Engineer (India) | Full-time | $20K - $50K / year |
| Senior Full-Stack Engineer | Full-time | $2.8K - $4K / week |
| Enterprise IT & Cloud Domain Expert - India | Contract | $20 - $30 / hour |
| Senior Software Engineer | Contract | $100 - $200 / hour |
| Senior Software Engineer | Pre-qualified, Full-time | $150K - $300K / year |
| Senior Full-Stack Engineer: Latin America | Full-time | $1.6K - $2.1K / week |
| Software Engineering Expert | Contract | $50 - $150 / hour |
| Generalist Video Annotators | Contract | $45 / hour |
| Generalist Writing Expert | Contract | $45 / hour |
| Editors, Fact Checkers, & Data Quality Reviewers | Contract | $50 - $60 / hour |
| Multilingual Expert | Contract | $54 / hour |
| Mathematics Expert (PhD) | Contract | $60 - $80 / hour |
| Software Engineer - India | Contract | $20 - $45 / hour |
| Physics Expert (PhD) | Contract | $60 - $80 / hour |
| Finance Expert | Contract | $150 / hour |
| Designers | Contract | $50 - $70 / hour |
| Chemistry Expert (PhD) | Contract | $60 - $80 / hour |
CyberSecurity – What are some things that get a bad rap, but are actually quite secure?
Cybersecurity is an important issue for everyone, from individuals to large organizations. There are many things that get a bad rap when it comes to cybersecurity, but that doesn’t mean they’re not secure. For example, PGP (Pretty Good Privacy) is a method of encrypting emails that is considered to be very secure. However, it can be difficult to set up and use. Another example is using very long passwords that are actually a sentence. This may seem like a security risk, but it’s actually more secure than a shorter password because it’s more difficult for hackers to guess. Additionally, changing the default port for certain services like databases can help to prevent hacking. Unplugging the ethernet cable may also seem like a security risk, but it’s actually one of the most effective ways to prevent data breaches. Finally, browser password managers are often considered to be insecure, but they’re actually quite secure if used properly. Cybersecurity is an important issue, and there are many things that can be done to help prevent hacking and data breaches.
There are a lot of CyberSecurity myths out there. People think that X, Y, and Z are the most secure way to do things when in reality, they are the least secure. The biggest myth is that PGP is unbreakable. PGP has been broken many times and is not a reliable form of CyberSecurity. Another myth is that very long passwords are secure. The problem with very long passwords is that they are difficult to remember and often get written down somewhere. If a hacker gets ahold of your password, they can easily access your account. The best way to prevent CyberSecurity breaches is to use MFA, OAuth, and two-step verification whenever possible. These methods make it much more difficult for hackers to gain access to your accounts. While they may not be foolproof, they are the best CyberSecurity measure available.
1- PGP
PGP is a Form of Minimalism
As a protocol, PGP is surprising simple. Here is what happens if you want to use it to securely send a message to someone:
- You get from them a PGP identity (public key). How you do that is entirely up to you.
- Your PGP program uses that identity to perform a single public key encryption of a message key.
- Then the message key is used to encrypt the message which is added to the encrypted message key to make the encrypted message.
- Your correspondent does the opposite operations to get the message.
If you want to sign your message then you:
- Hash the message.
- Do a public key signature operation on the hash and attach the result to the message.
- Your correspondent checks the signature from your PGP identity, which they have acquired somehow.
The simple key handling is where the minimalism comes from. It is why PGP can be used in so many non-email contexts.
As a contrast, consider the Signal Protocol for instant messaging. I will not attempt to describe Signal in any detail as I would get parts of it wrong. It would also make for a pointlessly long article. There is a high level description of the Signal protocol here. None of the following comments are intended to be critical, they are intended to give an idea of the level of complexity of the protocol in total:
- Signal has at least 2 systems for creating forward secrecy. Each system requires a system to deal with loss of synchronization.
- A Signal session requires the storage and maintenance of a lot of state information.
- Signal normally uses a server based “prekey” system to deal with the case where a client is offline and thus is unable to negotiate.
- Signal achieves partial deniability with a triple Diffie-Hellman key exchange. OpenPGP achieves complete deniability by not signing the message in the first place.
- Supporting the Signal protocol in practice requires a separate system to store and protect past messages1). Since this is at odds with forward secrecy such a system will end up with a system to delete old messages.
The Signal Protocol is built on ideas from the Off the Record (OTR) protocol. Interestingly enough, OTR was intended to improve PGP by adding extra functionality. Signal adds functionality on top of the OTR functionality. So Signal could be considered the result of an attempt to improve something by making it more complex.
I believe that reliability and security are best achieved with simple systems. OpenPGP is a standard that describes such a system.
2- Very long passwords that are actually a sentence
It could be bad if you just came up with it and forget it, and people think it’s bad if it only has lowercase and no numbers or punctuation. But a 5-6 word sentence could be quite secure, especially if it’s a bit weird. “Lemons make a delicious snack in my house.”
AI-Powered Professional Certification Quiz Platform
Web|iOs|Android|Windows
Are you passionate about AI and looking for your next career challenge? In the fast-evolving world of artificial intelligence, connecting with the right opportunities can make all the difference. We're excited to recommend Mercor, a premier platform dedicated to bridging the gap between exceptional AI professionals and innovative companies.
Whether you're seeking roles in machine learning, data science, or other cutting-edge AI fields, Mercor offers a streamlined path to your ideal position. Explore the possibilities and accelerate your AI career by visiting Mercor through our exclusive referral link:
Find Your AI Dream Job on Mercor
Your next big opportunity in AI could be just a click away!
3- Writing passwords down.
I tell all my old relatives to write their passwords down in a little notebook. As long as there isn’t someone there regularly I don’t trust, it is much better than using same password and if their physical security at their house is compromised, there are bigger concerns than a notebook of banking passwords.
We write down all the passwords to our most secure systems – but then we rip them in half and put them in 2 separate safes.
AI- Powered Jobs Interview Warmup For Job Seekers
⚽️Comparative Analysis: Top Calgary Amateur Soccer Clubs – Outdoor 2025 Season (Kids' Programs by Age Group)
Did I say passwords? I meant encryption keys.
4- Changing default ports for certain services like dbs
Most of the gangs out there use tools that don’t do a full search, so they go through the default port list
AI Jobs and Career
And before we wrap up today's AI news, I wanted to share an exciting opportunity for those of you looking to advance your careers in the AI space. You know how rapidly the landscape is evolving, and finding the right fit can be a challenge. That's why I'm excited about Mercor – they're a platform specifically designed to connect top-tier AI talent with leading companies. Whether you're a data scientist, machine learning engineer, or something else entirely, Mercor can help you find your next big role. If you're ready to take the next step in your AI career, check them out through my referral link: https://work.mercor.com/?referralCode=82d5f4e3-e1a3-4064-963f-c197bb2c8db1. It's a fantastic resource, and I encourage you to explore the opportunities they have available.
5- MFA in general.
Takes 60 seconds to set up, and an additional 5s each time you use it, but can save you hours if not days of manual recovery efforts with support to regain access to a compromised account. Yet people don’t like the idea.
If you are using TOTP for your MFA, you can even put it right in the browser with a plug-in. I use this approach for work. It’s very convenient.
Invest in your future today by enrolling in this Azure Fundamentals - Pass the Azure Fundamentals Exam with Ease: Master the AZ-900 Certification with the Comprehensive Exam Preparation Guide!
- AWS Certified AI Practitioner (AIF-C01): Conquer the AWS Certified AI Practitioner exam with our AI and Machine Learning For Dummies test prep. Master fundamental AI concepts, AWS AI services, and ethical considerations.
- Azure AI Fundamentals: Ace the Azure AI Fundamentals exam with our comprehensive test prep. Learn the basics of AI, Azure AI services, and their applications.
- Google Cloud Professional Machine Learning Engineer: Nail the Google Professional Machine Learning Engineer exam with our expert-designed test prep. Deepen your understanding of ML algorithms, models, and deployment strategies.
- AWS Certified Machine Learning Specialty: Dominate the AWS Certified Machine Learning Specialty exam with our targeted test prep. Master advanced ML techniques, AWS ML services, and practical applications.
- AWS Certified Data Engineer Associate (DEA-C01): Set yourself up for promotion, get a better job or Increase your salary by Acing the AWS DEA-C01 Certification.
If you use a password manager that supports TOTP and auto type (e.g. KeePassXC) then you don’t even need to mess with it once you have it set up.
6- Oauth for 3rd party apps.
Those “sign into our app with your (Google, Microsoft, etc) account” things. As long as you trust the ID provider and the app, it’s usually secure. More so, considering it prevents password reuse, and you aren’t exposed if any of those 3rd party apps have a breach.
7- Two-step verification.
Yes it’s annoying to need two devices every time you want to log into your most precious accounts, but trust me, I’d rather take the extra 10 seconds to authorize a login than go through the hell of having my account breached.
8-Biometric Authentication.
The argument is that ‘you can’t change your face/finger’ but it is actually more secure than other ‘magic link’ providers.
Let me be clear, there are some providers that are still iffy on security. But there are also some that have device native authentication (you need the device to auth), they don’t store passwords or password hashes, and only has public keys.
One example of this is https://passage.id/ which is about as secure as you can get.
9- Zoom.
Yes, they had a bunch of issues at the start, but they fixed them. I would much rather work with a company that had security assessments and fixed the problems rather than a company which has never been assessed.
10- Unplugging the ethernet cable.
11- Browser password managers?
Rant moment: reasons cybersecurity fails
<Rant>
People don’t see value of putting effort in cybersecurity because they don’t see any material gains from it. The best thing they can see is nothing bad happening.
No news isn’t good enough of a good news. This is enough to mostly ignore all cybersecurity advice altogether.
This is similar to people not taking care of themselves health-wise, because the best things they can see is not getting sick.
</Rant>
Why do cyber attackers commonly use social engineering attacks?
Hackers commonly use social engineering attacks because they can be very effective. By using social engineering, hackers can take advantage of people’s trusting nature and willingness to help others. They can also exploit the fact that people are often not well-informed about security and privacy issues. For example, a hacker might pose as a customer service representative and ask for someone’s password. Or, they might send an email that looks like it is from a trusted source, such as a bank or government agency, and ask the recipient to click on a link or download an attachment. If the person falls for the deception, the hacker can gain access to their accounts or infect their computer with malware. That is why it is important to be aware of these types of attacks and know how to protect yourself.
Cyber attackers commonly use social engineering attacks for a number of reasons. First, hacking into a person’s or organization’s computer systems is becoming increasingly difficult as security measures become more sophisticated. Second, even if a hacker is able to gain access to a system, they are likely to be discovered and caught before they can do any significant damage. Third, social engineering attacks allow hackers to bypass security measures and obtain sensitive information without being detected. Finally, social media platforms have made it easier for cyber attackers to obtain personal information about their targets and to carry out attacks. As a result, social engineering attacks are an attractive option for many cyber attackers.
To conclude:
Cybersecurity is often thought of as a complex and technical field, but there are actually many simple things that everyone can do to help stay safe online. For example, one way to protect your online communications is to use PGP encryption. This type of encryption is incredibly difficult for even the most skilled hacker to break, but it’s also easy to use. Another way to improve your cybersecurity is to use very long passwords that are actually a sentence. This may seem daunting, but using a phrase as your password makes it much harder for hackers to guess. Additionally, changing the default ports for certain services can help prevent unauthorized access. And finally, unplugging the ethernet cable when you’re not using it is a great way to physically block hackers from accessing your device. By following these simple tips, you can dramatically improve your cybersecurity and protect your privacy.
source: r/cybersecurity
Source: r/cybersecurity
- VulnHub — sunset: twilight | Full Walkthrough
by Shikhali Jamalzade (Cybersecurity on Medium) on May 15, 2026 at 9:58 amAuthor: Shikhali Jamalzade GitHub: github.com/alisalive LinkedIn: linkedin.com/in/camalzads Platform: VulnHub Machine: sunset: twilight by…Continue reading on Medium »
- Claude Mythos: Are SaaS Applications Safe?
by Kamalmeet Singh (Cybersecurity on Medium) on May 15, 2026 at 9:57 amIf you run a SaaS product, the news about Claude Mythos Preview probably brought a lot of confusion.Continue reading on Medium »
- The Cyber Insurance Trap: Why Your Claim May Fail After the Breach
by Travis Ray Caverhill (Cybersecurity on Medium) on May 15, 2026 at 9:56 amCyber insurance is supposed to be the financial parachute organizations pull after a breach, but too many leaders treat it like magic…Continue reading on Medium »
- All in One Wazuh Kurulumu (Wazuh Serisi — 4)
by Fatih Yuksektepe (Cybersecurity on Medium) on May 15, 2026 at 9:56 amWazuh, XDR (Extended Detection and Response) ve SIEM (Security Information and Event Management) yeteneklerini tek çatı altında…Continue reading on Medium »
- Why Modern Enterprises Are Replacing Traditional Visitor Systems With Intelligent Security?
by LogBook360 (Security on Medium) on May 15, 2026 at 9:55 amMost enterprises upgraded cybersecurity years ago, but many still manage visitors with outdated systems.Continue reading on Medium »
- Why Modern Enterprises Are Replacing Traditional Visitor Systems With Intelligent Security?by LogBook360 (Cybersecurity on Medium) on May 15, 2026 at 9:55 am
Most enterprises upgraded cybersecurity years ago, but many still manage visitors with outdated systems.Continue reading on Medium »
- The Internet Didn’t Become Dangerous Overnight.
by Dipyansi Rai (Cybersecurity on Medium) on May 15, 2026 at 9:54 amIt Became Comfortable.Continue reading on Medium »
- Weak Encryption: The Silent Crisis Hidden Inside Modern Cybersecurity
by Karthick Ganapathy (Cybersecurity on Medium) on May 15, 2026 at 9:50 amMost people think encryption means safety.Continue reading on Medium »
- SentinelOne. Backup delete attempt at 06:28, Kill process mitigation action at 06:31. Was the deletion blocked or not?by /u/allexj (cybersecurity) on May 15, 2026 at 9:49 am
Hi everyone, I'm reviewing a "Critical - Ransomware" alert ("VSS Shadow Copies Deletion Attempt detected") and I have a question about the timestamps and mitigation logic. Here is the timeline from the report: 06:28:24 - vssadmin.exe executes delete shadows /for=C: /oldest 06:30:28 - diskshadow.exe is executed (presumably a fallback) 06:31:06 - SentinelOne executes "Kill" (11/11 processes) and "Quarantine". Mitigation status is "Success / Mitigated". The dilemma: There is a 3-minute gap between the first execution and the final Kill action. Does the SentinelOne agent intercept and block the deletion command at the kernel level in real-time (06:28), or is there a risk the shadow copies were actually purged before the Kill at 06:31? SentinelOne, in the alert, consistently uses the word "attempted", which implies the deletion failed... but is Sentinel just being optimistic, or can I trust that "attempted" means the backups are 100% safe despite the delayed Kill? submitted by /u/allexj [link] [comments]
- RASP Root Detection Bypass
by Infallible (Cybersecurity on Medium) on May 15, 2026 at 9:48 amRASP Android Root Detection Bypass (Samsung A52s)Continue reading on Medium »
- Penetration Testing Services: Could Hackers Already Access Your Systems?by Misanjayshra (Cybersecurity on Medium) on May 15, 2026 at 9:44 am
Penetration Testing Services: What If Your Business Has Already Been Targeted?Continue reading on Medium »
- Anthropic Says Competitors Used 24,000 Fake Accounts to Clone Claude. Here’s the Pipeline.
by freerangethoughts (Cybersecurity on Medium) on May 15, 2026 at 9:42 amBy the time Anthropic’s security team noticed the pattern, it was already operating at industrial scale. Not one account. Not a dozen…Continue reading on Medium »
- I'm going crazy. At the application level what I can actually do to prevent DDos?by /u/Electrical-Dog-8572 (cybersecurity) on May 15, 2026 at 9:38 am
I'm working on a C++ authentication server for my desktop application. I intend to have Cloudflare behind it, and I'm going insane and spiraling over the same issues I'm starting to think I just cannot mitigate at the application level. It currently goes like this: Client connects to the acceptor via TCP socket Acceptor accepts, server checks in an in-memory ipMap to see if the client that just connected have made x requests in the past 2 minutes, if so, it drops the connection immediately. The client will be able to reconnect and get past the ipMap when the ipMap gets pruned by the server (which happens periodically). If the ipMap check passes. If it succeeds, the TLS handshake is performed and before the actual exchange begins, the server requests a proof-of-work (client has to solve a puzzle). Now, I obviously need to put a limit to how much the ipMap grows, I've decided I can store 100k IPs. If my ipMap fills because the DDos attack is making 200k requests - what should I do then? I cannot do anything to protect the server and allow legit users to authenticate? Because the only thing that I can see is: if the map fills, drop every request that comes in. But isn't that then a successful DDOs because legit clients will be dropped as well? Same concept I cannot understand applies for global rate limiter with the toke bucket: if my server has 500 tokens per second capped at 500, isn't enough for the attacker to make 500 requests per second to lock everybody else out? submitted by /u/Electrical-Dog-8572 [link] [comments]
- Running Antigravity in Docker — Complete Developer Guide
by Okoye N. Bilikha (Security on Medium) on May 15, 2026 at 9:32 amIntroductionContinue reading on Medium »
- Is anyone enrolled in Intellipaat's cybersecurity course?by /u/Ashishthakur56 (cybersecurity) on May 15, 2026 at 9:06 am
please share your thoughts. submitted by /u/Ashishthakur56 [link] [comments]
- Why Hardened git clone Commands Matter in Modern Dev Toolingby Selvakumar Subramanian (Security on Medium) on May 15, 2026 at 8:49 am
Most developers use git clone without thinking twice about what happens under the hood:Continue reading on Medium »
- What's best certification choice after OSWEby /u/uug4na (cybersecurity) on May 15, 2026 at 8:47 am
I am quite interested in almost all fields in offsec like maldev, web exploitation etc, but since it's becoming so AI era i am thinking about OSAI ( Would love to hear the experience of this ), also another choice's OSCE3 ( maybe best for career laddering ). Also concepts of HTB certs seems like so modern and well done but not quite strong on resume i guess. submitted by /u/uug4na [link] [comments]
- Facebook Page Call Slipping through Sleep modeby /u/Reasonable-Dance7491 (cybersecurity) on May 15, 2026 at 8:31 am
Even when I keep my iphone in sleep mode, turn off all the notifications, etc I still get calls that i get in the facebook page I manage. How is this even possible for Facebook to do ? submitted by /u/Reasonable-Dance7491 [link] [comments]
- Membangun VERTEX: Masa Depan Keamanan Siber Kedirgantaraan di Era Sovereign AI dan Web5
by VERTEX-AERO-CYBER DEFENSE (Security on Medium) on May 15, 2026 at 8:08 amOleh: Founder, VERTEX-AERO-CYBER DEFENSEContinue reading on Medium »
- ssh-keysign-pwn: Linux LPE allows unprivileged users to read root-owned files. PoC with SSH server privkeyby /u/CrimsonNorseman (cybersecurity) on May 15, 2026 at 8:07 am
In short: Patched last night by Linus, so technically not a 0day Yann Horn (Google PZ) proposed a fix six years ago Only hours after Linus patched, Brad Spengler went "look what we have here" _SiCK (who did Copy Fail 2 in the same manner - after analyzing the commit) posted a working PoC within another hour or so And that's where we are now: https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn/tree/main All kernels up to last night are affected It's a pretty straightforward race condition from what I can tell submitted by /u/CrimsonNorseman [link] [comments]
- A fix for the previous Linux kernel critical exploit has seemingly introduced another critical local privilege escalation exploit, a third in two weeks.by /u/Cybernews_com (cybersecurity) on May 15, 2026 at 8:04 am
Security professionals are now frustrated with disclosures dropping without any embargoes for defenders to prepare. submitted by /u/Cybernews_com [link] [comments]
- Security company Birmingham
by Ptpsecurity (Security on Medium) on May 15, 2026 at 7:45 amFinding a trusted security company in Birmingham is essential for protecting your property, staff, and customers. With increasing security…Continue reading on Medium »
- Stop treating SSH as just a remote terminal; it’s actually the most versatile encrypted transport…by Sahil Bansal (Security on Medium) on May 15, 2026 at 7:41 am
While most engineers use SSH exclusively for shell access, its true power lies in its ability to act as a secure, arbitrary TCP tunnel. By…Continue reading on Medium »
- The Device You Ignore Is Now a National Security Risk
by Robert Haas (Security on Medium) on May 15, 2026 at 7:39 amSecurity programs are fundamentally built on a straightforward idea: if you can see it, you can secure it.Continue reading on Medium »
- Can VPNs Really Protect Users From AI-Powered Cyberattacks?
by Ethan Carter (Security on Medium) on May 15, 2026 at 7:30 amArtificial Intelligence is changing cybersecurity faster than ever. While AI is helping companies detect threats more efficiently…Continue reading on Medium »
- Ransomware Has Evolved: Why Modern Attacks Are More Dangerous Than Ever
by Cybersphere Official (Security on Medium) on May 15, 2026 at 7:21 amRansomware is no longer just about locking files.Continue reading on Medium »
- 4 Things You Should NEVER Lend Anyone — Even Your Best Friend!by Quentina (Security on Medium) on May 15, 2026 at 7:21 am
Discover the shocking truth about borrowing that could destroy your closest relationshipsContinue reading on Medium »
- Slow-drip responses as a bot defense: streaming fake credentials 3 bytes at a timeby /u/B4dPanda (cybersecurity) on May 15, 2026 at 7:06 am
Instead of 404ing vulnerability scanners, I've been experimenting with slow-drip responses. Fake .env files, WordPress login pages, admin panels, all streamed in 3-byte chunks with random delays. ~80 seconds per scan instead of instant. 141K hits across 76 sites over the past month. Curious if anyone else has tried something similar or sees obvious downsides I'm missing. submitted by /u/B4dPanda [link] [comments]
- Maximum Severity Cisco SD-WAN Bug Exploited in the Wild
by /u/rkhunter_ (cybersecurity) on May 15, 2026 at 6:57 amsubmitted by /u/rkhunter_ [link] [comments]
- FrostyNeighbor: Fresh mischief and digital shenanigans
by /u/DerBootsMann (cybersecurity) on May 15, 2026 at 5:48 amsubmitted by /u/DerBootsMann [link] [comments]
- ANTS Hack: 19 million records exposed in French ID agency breachby /u/DerBootsMann (cybersecurity) on May 15, 2026 at 4:25 am
submitted by /u/DerBootsMann [link] [comments]
- AI coding tools are shipping code faster than security can review it. What's your team doing about itby /u/The-bay-boy (cybersecurity) on May 15, 2026 at 3:40 am
more than 90% of devs now use AI coding tools and something like 40% of committed code is AI-generated (or even more) Our security review process was already a bottleneck, now it's completely underwater. Are your teams adapting? How? New tooling? New processes? Or just accepting the risk? submitted by /u/The-bay-boy [link] [comments]
- Interview for AI security engineer position at a fortune 500 companyby /u/Technical-Natural343 (cybersecurity) on May 15, 2026 at 2:48 am
Just had an interview for an AI security engineer position for a large manufacturer. Here is what they are looking for. Secure RAG pipelines Adversarial testing MITRE Atlas framework Projects SecAI+ was respected. Decent math foundation Threat modeling exercises One question I was asked that was math specific. So imagine you have two vectors, say [1, 2, 3] and [2, 0, 1]. How would you measure how similar these two vectors are to each other? Walk me through it. After I answered they hit me with; Now think about this in the context of a RAG pipeline. If an attacker knows roughly what kinds of questions users are asking, what does that similarity score mean for them? What could they do with that? Good luck out there guys! submitted by /u/Technical-Natural343 [link] [comments]
- Has anyone read "The Art of Deception"? How does it hold up to now?by /u/OpticalBarracuda (cybersecurity) on May 15, 2026 at 2:22 am
In reference to the art of deception by Kevin Mitnick. This is also a request for anyone to recommend any good social engineering books. I'm just curious as to how it holds up today as its been over twenty years since the book was published. I believe now there's a bigger shift on being security conscious, so some strategies might be less effective now than in 2002. submitted by /u/OpticalBarracuda [link] [comments]
- Zero trust in hybrid environments - what's actually worked for youby /u/unumri (cybersecurity) on May 15, 2026 at 12:45 am
Been thinking about this a lot lately. Most of the guidance out there says start with identity hardening, then device posture, then app access, then segmentation, then telemetry and automation. Phased rollout rather than trying to rearchitect everything at once. That approach has generally made sense in my experience, but I'm curious how others have actually sequenced it in practice, especially when you've got a mix of on-prem AD, Entra ID, and cloud workloads all in play at the same time. One thing I keep coming back to is the debate around network-centric ZTNA vs identity/workload-centric access. Granting "trusted network" access feels too broad even with segmentation in place. App-level access with identity-bound sessions and device compliance checks seems tighter, but it creates friction and sometimes the tooling doesn't play nicely across the hybrid boundary. Also seen plenty of orgs that ticked the MFA box and called it zero trust, which. yeah nah, that's not it. Without continuous posture checking and meaningful segmentation it's just stronger IAM, not an actual architecture. The lateral movement problem doesn't go away because you hardened the front door. Also worth calling out the visibility piece before almost anything else. You can't enforce policy on users, devices, or workloads you haven't inventoried. A lot of implementations I've seen skip that step and end up with coverage gaps that are genuinely, hard to find later, especially across the hybrid boundary where AD-joined and Entra-joined devices are being treated inconsistently. The privileged account piece is where I see the most resistance in practice. Getting the business to actually enforce least privilege on admin accounts, not just document it, is a different conversation than deploying Conditional Access policies. Curious what controls others have found most impactful early in the process, and whether anyone's, had real success building that business case for enforcing least privilege where it actually hurts. submitted by /u/unumri [link] [comments]
- Have you encountered issues with CSAF advisories in practice?by /u/Zekdot (cybersecurity) on May 15, 2026 at 12:40 am
Hi everyone For those working in vuln management or security automation: how mature is CSAF adoption in your environment? Have you observed discrepancies between CSAF feeds and vendor PDF/HTML advisories (e.g., affected versions, remediation steps, CVSS, etc.)? submitted by /u/Zekdot [link] [comments]
- Zero trust in hybrid environments - what's actually working for youby /u/unumri (cybersecurity) on May 15, 2026 at 12:39 am
Been thinking about this a lot lately. Most orgs I see are buying ZTNA or SASE products and calling it done, but the underlying trust boundaries haven't changed at all. Standing privilege still everywhere, conditional access policies covering maybe half the apps, and nobody's touched service account sprawl in years. The tooling is there but the architecture work just doesn't happen. My take after working through a few of these rollouts is that identity has to come first, but people underestimate how much of that means non-human identities too. Service-to-service traffic is a massive blind spot. You can get MFA coverage into the 90s for users and still have hundreds of service accounts with broad permissions and no monitoring. Microsegmentation matters, but if you haven't sorted out workload identities first you're just building walls with open gates. Phishing-resistant auth for admins is also something I'd push earlier than most orgs do. Passwordless for high-risk accounts is pretty achievable now with Entra ID and it removes a whole class of risk that conditional access alone doesn't cover. CI/CD pipelines and other non-human identities are often sitting on permissions broader than anything you'd grant a human user, and they're getting almost no scrutiny. The other thing I'd push back on is the idea of full zero trust as an end state. Incremental rollout by asset criticality is just how this actually works in practice. Start with your crown jewels, enforce compliant device access, kill standing privilege for admins, then expand from there. Trying to boil the ocean gets you nowhere. Curious what others have found most impactful early on, specifically whether you went identity-first or tackled network segmentation before sorting out the identity layer. submitted by /u/unumri [link] [comments]
- OpenAI confirms security breach in TanStack supply chain attack
by /u/Normal_student_5745 (cybersecurity) on May 14, 2026 at 10:44 pmBelow is a detailed summary of the incident and how it specifically impacts you as a macOS user. 1. The Core Incident: What Happened? • The Breach: Two OpenAI employees had their devices compromised after accidentally installing a malicious version of the @tanstack library (a very popular tool for web developers). • The Payload: The malware, named "Mini Shai-Hulud," was designed to steal credentials (GitHub tokens, AWS keys, etc.) and exfiltrate them through an anonymous messaging network called Session. • The Response: OpenAI rotated its code-signing certificates for all platforms (macOS, Windows, iOS, Android) out of extreme caution. Although they found no evidence that their software was actually tampered with, the old certificates are now considered "tainted." submitted by /u/Normal_student_5745 [link] [comments]
- Level Effect AMA! Former NSA Operators turned EDR developers and trainers in 2020. We’ve seen a lot of trends over the years and want to start being active in r/cybersecurity giving back. Ask us anything!by /u/LevelEffectOfficial (cybersecurity) on May 14, 2026 at 12:57 pm
Hello there r/cybersecurity! We're Level Effect. Three of us are here today. We’re former NSA, and now also senior/principal engineers and consultants. We started this company in 2020. Built an EDR that was acquired by Huntress, then went all in on small live training cohorts seeing a gap in training at the time. We made the first “virtual SOC” cyber range at that time with a 1-week practical exam and have graduated 100s of students into the field. We've also live streamed close to 100 hours of free cybersecurity instruction from 0 to Tier 1 SOC. We’re shifting to more content creation and community interaction now. Giving back has always been important to us and we want to be more involved here in r/cybersecurity after this intro AMA. So how’s the industry doing? Is it all over now with AI? We don’t think so at all, but: The "entry-level" market is now more accurate to mid-level IT, and provable hands-on experience went from a nice-to-have to a must. The common advice of "just go work in IT first" doesn't always get you there either if you're stuck on end-user support forever, never touching malware triage or detection rule crafting. You’d be great with printers though. Guiding people to be ready for this field is still the same problem it was in 2020 in spite of many best efforts from a lot of talented educators out there. In some ways even harder actually. We’re here to help answer anything around: What we learned building enterprise security tooling Gaps and opportunities in the field What has actually helped our students get hired and what hasn't The shift toward provable skills over certs 2026 career trends and what's coming next Or anything else! Otherwise, we’ve got questions for you! What are you studying right now that's working well? If you're already in the field, what skills are still paying off? If you're hiring or mentoring, what are you seeing (or not seeing) from candidates? Let's hear it! Rob Noeth, Anthony Bendas & Jonny Johnson * Edit - Taking a break for the evening, thank you joining us today! We'll be back in the morning (US Eastern) to address any posts we missed. submitted by /u/LevelEffectOfficial [link] [comments]
- Struggling to Stay Up to Date With Vulnerabilitiesby /u/Impossible-Group-971 (cybersecurity) on May 14, 2026 at 12:49 pm
Hello everyone, lately I’ve been struggling a bit to stay up to date with newly disclosed vulnerabilities, exploits, vendor advisories, and threat intelligence feeds. It feels like there are more and more sources every day, and keeping track of what is actually important without missing something critical is becoming increasingly difficult. Because of that, I started looking into building a self-hosted solution that aggregates the most relevant sources into one central place and helps me stay current more efficiently. I’d really like to hear how others here are approaching this. Are you using open-source tools? Any recommendations, lessons learned, or architectures you can share would be highly appreciated. submitted by /u/Impossible-Group-971 [link] [comments]
- Two brothers deleted 96 federal databases after being fired – one googled how to hide the evidence afterward
by /u/rkhunter_ (cybersecurity) on May 14, 2026 at 11:35 amsubmitted by /u/rkhunter_ [link] [comments]
- Microsoft's multi-agent AI system tops Anthropic's Mythos on cybersecurity benchmark
by /u/Doug24 (cybersecurity) on May 14, 2026 at 9:34 amsubmitted by /u/Doug24 [link] [comments]
- New Fragnesia Linux flaw lets attackers gain root privileges
by /u/rkhunter_ (cybersecurity) on May 14, 2026 at 8:49 amsubmitted by /u/rkhunter_ [link] [comments]
- Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor
by /u/rkhunter_ (cybersecurity) on May 13, 2026 at 4:01 pmsubmitted by /u/rkhunter_ [link] [comments]
- Mentorship Monday - Post All Career, Education and Job questions here!by /u/AutoModerator (cybersecurity) on May 11, 2026 at 12:00 am
This is the weekly thread for career and education questions and advice. There are no stupid questions; so, what do you want to know about certs/degrees, job requirements, and any other general cybersecurity career questions? Ask away! Interested in what other people are asking, or think your question has been asked before? Have a look through prior weeks of content - though we're working on making this more easily searchable for the future. submitted by /u/AutoModerator [link] [comments]
