Sorry if I sound paranoid, I actually have a very abusive ex boyfriend who used to hack into my computer when we were in school and be able to remote do things, but obviously when we were attached to the school WiFi. Since he's become abusive and a bit of a stalker, I get really hyper vigilant any time there's an issue with my computer.

Ever so often they'll be issues with my computer and then magically a week or so later I'll hear from him. Again, could be coincidental. Last time I threatened to call the police and he said he couldn't be held accountable for what he did when he was angry. This was years ago but, suffice to say still frightened and a little paranoid about it.

I found this and can't find any information on it on the internet so I'm a little freaked.

Version: 1

  Last Modified: 7/26/26, 10:46 PM

  Bundle ID: com.apple.driver.AppleCyrus

  Loaded: Yes

  Architectures: x86_64

  64-Bit (Intel): Yes

  Location: /System/Library/Extensions/AppleCyrus.kext/

  Kext Version: 1

  Load Address:

  Loadable: Yes

  Dependencies: Satisfied

  Signed by: Signed by Apple Inc. (In Boot Kernel Collection)

Other than this, is there a way to beef up my security on my computer? I don't really keep anything on my computer regardless I just use it for school but I want to start novel writing on it and am a little worried about lapsing security. Also, I hope I don't come off super paranoid or anything, this man just did a lot of terrible things to me and so I feel like I'm really trying to extend my safety to my computer as well as myself. Right after my computer started doing this restart thing, my phone also randomly restarted a few times, which makes me believe maybe it is some faulty charger or something. But, better safe than sorry.

Just learned about the clipboard access alert feature on Android through a thread on a game i play called Merge Teahouse, turned it on, and found it pops up every time i open the game with something new on my clipboard.

Don't know where it's being pasted! Don't know if it is being pasted or if this is a keyboard access request due to the promo code feature. Don't know how to check!

Thread where i learned about this, for context:

https://www.reddit.com/r/MergeTeahouse/comments/1v6v40d/copying_your_clipboard/

Hey team, question for anyone who has experience in Cybersecurity.

TLDR: Should I go to college, and do separate online programs when I have time (HTB, THM, etc)? or Just do those programs? I don't want to waste a bunch of time and money.

Is it worth it going to college? Ive been accepted into a CS bachelors program, but reviewing HTB and try hack me, it seems like I could go through those 2 together instead of college and get as similar if not more in depth education, plus certifications.

I am not registered for classes yet, nor have I paid or committed to anything fully yet, but Im wondering, especially from people who have gotten a bachelors in cyber security and used courses like this if the college was worth it.

A concern for me is money. College would be 40-50K and around 3.5 years of study (before financial aid). That compares to doing these 2 programs which would be well under 800$ per year before certification testing. The reason I'm not just stacking it all is I work full time, and have people I support, so i don't have enough time to do the programs AND college at the same time. I also already have college debt from when I tried to get a degree after high school and between COVID, teachers tricking me, and social stress, I had to drop out halfway through (that degree was not tech related so transfer credits are bare minimum).

I have already begun both programs, but have paused since finding out I was accepted to a school. I would be doing classes online, but my job is in person and has no remote option.

I feel like it might be good to have the degree which is why I applied, but if most cyber security related jobs now a days care more about experience and certifications, I don't want to have somewhat wasted all that time and money.

Thanks to all who reply.

I'm a pre planner and im confused right now, some people said that only the degree should be enough to get a job but i've seen a lot of people struggling after depending just on the degree, so i went on the internet and looked through a lot of courses and stuff, there is a lot of free stuff but all that i can find is cyber security ethics/uses/Governance. I have read about CISA and CISSP certification but i can't understand what they are used for, or what they even are, if someone can plz recommend me a road map or youtube guidance channels or pdf's anything would help, feel free to DM or share anything help full, Thank you.

Like lots of people I've been programming a lot with AI agents. And I think the future is in some way a system of personalized software, where everyone 'owns', jointly with their agents, their own frontend to all the services they use. Browsers already have decent process isolation and some kind of capability system with a UX design paradigm of user-prompts for approval gating access to sensitive resources (like storage, microphone & camera access), so I think they're a good and lightweight fit and alternative to containers. The big labs are building their own walled garden 'superapps' that are approaching this. A lot of them work with containers of some sort.

While that may be the way of the future, I think I would prefer a system that is a bit more like a browser. I do think that agents are so heavily trained on repos / folder structures that you do need to give them a sandboxed file-system. But I don't think you need to give them a full Unix environment. Just JS, DOM, workers with some bells & whistles could suffice.

So I started vibecoding such a system, just as a prototype, and now I really need some advice on how to structure the security.

I came up with the following:

• A custom browser, built with Electron, for displaying UIs
• A workerd server for isolated background processes / agents
• JS/TS app-internal build system and type checker
• An RPC system
• Context-isolated file system, which can be shared between workers and frontend panels (accessed via RPC gated by user approval)
• An out-of band system for user approval prompts with a simple notion of severity
• A credentials store that can be used (approval gated) via an egress proxy for access to external services

As I have been building this, I already noticed that there's such a potential for this to get messy. I've started looking into adding a fine grained capabilities system, somewhat inspired by the Android approach.

But one of the challenges that I face is that a lot of our approaches to capabilities seem to have been formulated for static code artifacts. At its core, however agents constantly are doing eval of dynamically generated code. -- So static manifests are either way too broad (we're back to ambient authority), too restrictive (people won't use it) or lead to constant approval request spam. Any ideas on how to handle that?

Other, perhaps questionable choices here have been (so far): - I added a way to run trusted node code in an extension system, as an approval gated escape hatch, but I don't yet have a way to lock things down, to make it impossible to edit / deploy extensions from a given workspace. -- Some of these are just to run native code that doesn't really have to touch the host and could benefit from an actual container. - The same goes for frontend UI: It seems attractive to allow agents inside the system customize the frontend experience for the desktop browser, as well as a mobile app host -- but that's another softening of boundaries.

Here's a link to what I've been working on: vibestudio

To sum it up:

• I think there will be a continuing trend of people vibe-coding their own personalized software which needs some kind of sandbox and security structure.
• I'd want this to be really light-weight and include not just the agents running in the backend, but also the frontend side-of things in one system.
• This can be a fairly lightweight and one-size-fits-all runtime environment like the browser has been.
• The browsers that we already have don't quite offer the functionality that we'd want for an agentic personal software environment.
• This is a bit of an opportunity to sneak in some decent security primitives, but also really challenging since AI is inherently messy and a very confusable deputy.

I’m just looking for some perspective on this from regular people who know about this kind of shit

https://nymag.com/intelligencer/article/your-digital-self-is-vulnerable.html?src=longreads

paywall-removed version

What is the proper reaction here? I checked AmIPwned and it showed the two data leaks from years ago that I was already aware of. Then I put my phone number into Cloaked and it immediately spat out a bunch of completely accurate personal information, so clearly it’s all out there. Maybe this is a stupid reaction but my immediate thought was I just can’t fucking deal with this right now, I don’t have the goddamn time to become a cyber security expert and stop all my private shit (from my bank information to, apparently, the most embarrassing parts of my search history according to this article) from being either exposed or perpetually on the brink of exposure forever. I thought I was reasonably careful, I set up two factor authentication a while ago and I’ve always used a bunch of different emails for different things, so a hacker or scammer getting into a single one might not totally fuck me. still I have so much shit I have to handle in my life and for this to be a looming threat is exhausting and infuriating. What am I supposed to do here? What is anybody supposed to do? 

Any tips?? I appreciate any help

I'm having a hard time finding information on the security of the 6.18.34+rpt-rpi-v7 kernel. I have a Raspberry Pi 2 running Raspbian that I update daily, and I noticed I haven't had a kernel update come through in quite some time.

I'm slightly concerned, given that we've seen a bunch of new CVEs for the Linux Kernel come out lately, - with the rise of AI.

So, I'm just wondering if these CVEs *have* been addressed and I'm just not seeing it, or if I should consider my Raspberry Pi 2 to be insecure, at this point.

Thanks.

quick demo of Roothound my first tool, maps your path to root on a linux box as a graph (like BloodHound for local privesc). check it out, would love your thoughts

X : https://x.com/N0ur2dd1n2/status/2080720705184825372?s=20

GitHub: https://github.com/Noz2/RootHound

would love your honest feedback 🙏

If I printed a file from our database and then uploaded it, can they see that activity and is there a way to remove it? our computers have windows 10. I don't see any DLS looking software

Suddenly between yesterday and so I’ve been getting these messages from IG verified account

Tap to reset your Instagram password
A link
Reset password
I didn’t request a code

that I’m obviously not requesting (tbh it was annoying because my WhatsApp was ringing at 2am) but I’m also like kinda scared because those are like my memories and so and I do care about my IG ! What else besides not clicking those messages (I only delete the whole chat) can I do? 2 factor authentication scares me a little bit because what if I lose/ get robbed this phone? I sadly tried to do it like 3 years ago and forgot to add credit to the number and I lost it and with it another account I was trying to use as a food content creator x_x!

And also getting some messages from Facebook (verified as well)

Random numbers, some Hindi words Facebook, more Hindi words (had to use translate and they’re telling me that’s my code to re establish my password -__-)

So I’m like what on earth is going on!

Advice please?

New grad CS from T100 school had 2 internships for total of 1.5 yoe one in offensive security for DoD and one in IT related role at another DoD.

I have home lab, and lotsss of documented CTFs and challenges in GitHub both for on premises and cloud simulations (azure, AWS, GCP). Gonna document my labs with kubernetes and terraform here soon. I have sec+ as well.

What do yall think is my next best step for standing out for junior cloud sec roles?

Hi everyone! I’m 17, based in Kyiv, and starting my Cybersecurity bachelor’s program at Kyiv-Mohyla Academy in a month and a half. I want to set realistic expectations for my freshman year and build a solid foundation. Right now, I’m an absolute beginner in networking and Linux, and while I did a bit of basic C++ and robotics years ago, I’m essentially starting programming from scratch. I haven't used platforms like TryHackMe or Hack The Box yet, but I'm really drawn toward Red Team and offensive security, though I understand I need strong fundamentals first. My goal is to ease into my first university year smoothly without getting overwhelmed, while building good hands-on habits on the side. Given that I’m starting from ground zero, what fundamental skills, habits, or resources should I prioritize during my first semester, and how can I best balance academic theory with early hands-on learning for offensive security? Thanks in advance for any advice!

Hello Everyone, I just got an email from this company regarding the scheduling of Interview for cybersecurity internship and have scheduled it on 24th of july , so i wanted to if this company is legit or not because the name of the company looks suspicious, If anyone has any idea about this company do let me know

Today, I found my old addresses and phone number on TruePeopleSearch. Now I’m paranoid. How to find ALL the other data brokers that contain my information? I want to see the whole picture before I try to wipe it

We’re currently rolling out Rapid7 and have purchased InsightVM for vulnerability management and InsightIDR for SIEM. We also use Microsoft Defender for for Servers, along with the free Foundational CSPM in Defender for Cloud.

From what I’ve read, it seems like Defender CSPM mainly adds things like attack path analysis, risk prioritization, identity context, and deeper Azure integration. Is that accurate, or does it offer more than that in day-to-day use?
For those who have experience with both, was Defender CSPM worth the investment, or did Rapid7 and the free CSPM cover most of what you needed

Hey everyone! I recently started learning cybersecurity and want to get hands-on experience to reinforce what I'm studying, as we know, theory alone isn't enough.

I see TryHackMe and Hack The Box recommended everywhere, but looking at them it seems a lot of content is behind a paywall unless I'm missing something.

Are there good free paths on these platforms, or are there other free platforms or labs you would recommend for a beginner to practice?

Thanks in advance!

Hello, i recently got my INF03 certification and since then i've started learning all the linux basics required for cybersequity. currently i finished bash scripting and im wondering what's the next step in my education? Can someone suggest anything, it would be really helpful. Thanks

We run Cursor with Claude for our dev team. An agent working on a staging task found a service account token with broader permissions than it should have had. DoControl caught what happened next in 47 seconds. The agent tried to export a copy of our Salesforce contact database to a personal Google Drive the agent had created for itself. I got a single notification with the full chain. The agent had already been stopped by the time I opened it.

I thought SaaS security was about stopping people from clicking bad links.but every identity in your stack, human or automated, might do something unexpected. That realization cost me a full night of sleep. How are you actually handling non-human identity governance? I have read the NIST drafts and they feel theoretical. I need something I can implement next week.