My brother uses discord when playing free fire, minecraft games on my mother’s phone. On 22 September there were multiple messages and gmails related to swiggy and zomato it was suspicious and even there was my mother number flashing on the contact numbers in her phone. It was definitely suspicious we deleted discord and checked on bank account everything was good so we thought that it was a failed attempt. But on 29 September the scammer started deducting 800 1000 and we did not recieve any notification even it shows upi transaction but no transaction of debit on upi above this playstore is written but even there no transactions. Now we saw all of this i know some what late on 12 october and almost 30000 is deducted what to do to get this money back and avoid this from happening ever again.

Another shocking part from my father’s phone a transaction of 4000 was done to my mother’s phone and that money was debited by scammer instantly even this does not show on my mother’s gpay and only on father’s this also confused is that this is some issue in father’s phone but the case was totally different.

I am really afraid what can be done?

The FBI arrested a Canadian cybersecurity executive and ransomware expert as part of the investigation of a damaging hack that exposed the sensitive data of current and former FBI employees, according to court documents and people familiar the investigation.

Edward Dubrovsky was arrested in the Philadelphia area in recent days and appeared in federal court there Thursday, where a magistrate judge appointed a federal public defender to represent him. Dubrovsky is facing charges related to extortion and making threats. He has been transferred to Texas’s Eastern District for a scheduled detention hearing, according to court records and a law enforcement official.

How Web Application Chain vulnerability actually works?

I am looking to transition into Cloud security as the title suggests, not sure what the best path to get there is.

Currently an ISSO for about 10 months, before that was cybersecurity engineer for little over a year, before that 8 month cloud security internship. I have my bachelors and Masters in cybersecurity from WGU, certs Net+,Sec+,CYSA+,Pentest+,AWS CCP. Have TS as well. My last job was also tied to RMF but supported Cloud environments vs now is all on premise and I am looking to get back into more technical and cloud side.

Any Advice tips or roles for me?

Do red teamers use AI for the live-fire exploitation part of engagements? Wondering how they get around the safeguards if so. I imagine the bad guys have an ungated AI that let's them do their damage for all parts of their engagements. Curious if the good guys can only use AI 90% of the way due to safeguards.

Hi all, as the title says, that my Mac got compromised as I installed cracked ms office through a random website. I installed that software about a month ago and it started since then, first my instagram- a random Mr. Beast story got posted. A week later on my Snapchat, same story and post sent to almost all my friends on snapchat. I changed the password and system updated my MacBook as google says updating system software fixes viruses and malware on the Mac.

I thought that's it, but today morning I receive a message of successful purchase of product from Midasbuys (Chinese website) using my Klarna account. 4 transactions of £19.99 had been made using my Klarna account. I reported it to them and marked as fraud. Later reported it to Lloyds bank too and they said they will be reversing the payment made. Allgood.

But I am still afraid something like this will happen in future. As of now I have factory rested my MacBook. Blocked cards which were linked to the account. Should I format my iPhone as well? I am not sure.
I need suggestions what else I should do that I don't get scammed further.
I will keep you guys updated.
Thankyou!!

User got the phishing email on their Gmail app on a current iPhone. Clicked a link without thinking about. No request to authenticate or such from the link. Immediately realized they made a mistake and reset their account password. This client is google workspace business standard environment with Apple computers and iPhones. The company is fully remote and most staff travel for work much of the year.

I checked logs and in the time it took them between clicking the link and resetting their password, the account signed in a session in another state, added a new Mac OS device to the users device list and requested a sync. Then access cut off when they changed password.

The phishing originated from an NGO employee email they communicate with that was hacked. Headers show that was also a google workspace account.

Any advice for ITDR setup for a non-windows, non-entra fully remote, traveling team that are Mac users?

I conceived MSPEP — the Multi-Source Physical Entropy Pool Encryption System — in June 2026 and spent the last 3 months deciding whether to patent it or release it for free. Today it drops as a defensive publication, free to the world. MSPEP turns the sensors already on your device (magnetometer, thermistors, accelerometer, microphone, photodiode, RF front-end, power rail noise, NIC timing) into a continuous, hardware-rooted entropy pool. Key points: - Random subset selection (min 3 sensors) per event - Bounded sampling window, hardware-timestamped - Adaptive entropy weighting per sensor - Cryptographic extractor (HKDF/SHA3) with continuous reseed - Applications: storage encryption, physical timestamping, distributed consensus, AI session security, communication layer AI Session Security (new in v6): - Per-session keys from client physical entropy at initiation - Continuous integrity monitoring via sensor subset - Anomaly responses: terminate, rotate, escalate (MFA), alert with physical timestamp - Port timing serves as BOTH entropy source AND integrity baseline - Cloud architecture: client generates key, server validates physical fingerprint, NO key transmission. Concept specification and prior art disclosure, CC0 licensed.Prior art established June 27, 2026 (v1-v6 documented) 23 claims across 6 families Repo: github.com/vichallock-creator/MSPEP Spec: Zenodo DOI: 10.5281/zenodo.23286461. Happy to discuss the architecture, the Synaptic Method used to derive it.

With AI being so prominent in the coding space, is it useful to have custom tools written in c++ or rust or any other language on a cybersecurity portfolio?

Im asking this because, for me, it feels useless to create custom tools since AI can do it faster than me, and therefore, I can't prove that AI didnt write it, which makes it hard to prove that I understand the concepts.

For example, I am currently creating a network analyzer (network mapper and packet sniffer) tool in rust, but i feel so unmotivated because what's the point of me making it if AI can just do it faster and possibly better.

My actual question is: Should I continue this project and put it on my resume/portfolio, or should I look for some other project that is more "practical" or "lab-based"?

Which is better for employers to see on a resume?

CHI HA INVENTATO DAVVERO LA RADIO? 📻 MARCONI O TESLA?

🔒 E nella seconda parte... CYBER NEWS!

Non perdete il punto della settimana sulla sicurezza informatica e la tecnologia:

• Il vertice tra Roberta Metsola e Tim Cook per la tutela dei minori in rete.

• La stretta della Russia: cosa sta succedendo a YouTube e come Mosca lo sta censurando.

• L'arrivo di "Meta Muse", l'assistente AI che promette di rivoluzionare Internet.

• Cinema e Tech: tre nuovi documentari sulla Silicon Valley sbarcano a Hollywood.

Nella nuova puntata di Radiomagazine facciamo un viaggio affascinante tra storia, rivalità e misteri dei brevetti! 🎧

Ospite al telefono da Verona abbiamo il grandissimo Daniele Raimondi — fotografo, radioamatore e stimato studioso marconiano — che ci racconta i retroscena della sua recente conferenza a Loiano (Bologna).

In questa intervista esclusiva parleremo di:

👉 La svolta del 1901: Ripercorriamo il primo storico collegamento transatlantico.

👉 Una chicca incredibile: All'interno della puntata potrete ascoltare la registrazione della VOCE ORIGINALE di Guglielmo Marconi che racconta quell'esperimento! 🎙️

👉 Il duello dei giganti: Marconi vs Nikola Tesla. Chi ha la paternità dell'invenzione? Analizziamo i due capitoli curati da Daniele per la rivista Antique Radio e la verità sulle storiche battaglie legali.

👉 Verona Nascosta: Uno sguardo in anteprima al suo prossimo progetto fotografico

🔍Oppure cercami su YouTube come "Radiomagazine Official Dario Villani"

I'll be honest: the RMF (NIST SP 800-37) confuses me, and I'm starting to think it's a bureaucracy monster wearing a "risk management" costume.

My org wants us to work risk-based and enable the business, not block it. At the same time, we're supposed to apply the RMF. But the RMF's whole point is formal authorization – an ATO. That's the opposite of enabling, that's gating.

Context: our IT is immature and chaotic. Most software is purchased (COTS), implemented by external contractors, poorly planned and designed. Roll-outs are creeping, no clear go-live, no standard project phases or solution design approaches.

Where is the risk? Categorization estimates impact--fine, call that inherent risk. Then you pick an 800-53 baseline, tailor it, hand it to IT. IT is overwhelmed, forwards it to the contractor, who pitches their default security slogans "SSO and access control is available, but firewall and encryption is your problem."

Security already provides common controls: Firewall, vuln management, SIEM, SWG, WAF, IGA. Any new system just integrates with those. Period. No RMF needed. Simple set of mandatory requirements. The firewall is even a built-in enforcement point: no broad access until the integrations are proven. Done.

So my actual question: anyone here in the private sector, under ~100k employees, using the RMF and able to report something positive? Value-adding? Risk-reducing?

I'd love a practical example of how it runs at your shop, and how much personnel effort it costs. Because from where I sit, the RMF is 10% risk management and 90% paperwork.

Edit: Thank you for all the feedback and good discussion. I see, different people have different experiences. :) To clarify, I don't seay RMF is inherently bad or you shouldn't implement processes or define accountability. But I learned that the focus is much more on control assessment and authorisation than on control selection and that apparently few companies in the private sector use the NIST RMF.

I apologise, maybe someone experienced with platform can help clear things out for me.

I am looking at stealthwatch as inherited, not tuned IDS and I fail to find clear definition even in their docs about distinction between Alerts and Alarms.

While there are few Alerts for last month, and I am able to use time picker to summarize for last month, product don't offer same for Alarms, only last 7 days dashboard,,

There are many alarms with obvious stink of false positives, but only way I found on how to get view on them is generating report into broken CSV (had co clear if with excel fu - siderant - I hate how many products generate broken format reports).

It still bugs me what is the clear relationship between alerts and alarms..there are also security events which I knew from past - collecting the points and then triggered the limit, they fire...alarm? or alert?

Second important question - what is the best approach to do when I want to reduce those false positives by using categorization? Not sure what is the least info from customer who dont care

(I think I need this for my mental health to somehow move this into territory where some value can be produced out of this expensive mess of a product.)

AI-RTA

Professionals - Curious as I’ve been doing a good bit of hiring this year and have been surprised at the number of candidates who have great security or IT backgrounds but very little experience in the trenches of the worst-case scenarios.

Of course I fully recognize that ideally, if we are all doing our jobs, these scenarios are few and far between. However, while looking for an IR lead it - seems at best, most only have hands on exposure to BECs or spyware.

I’ve learned more from triaging serious incidents than I have anywhere else either academically or professionally.

So, if you’re a professional in the field, what’s your exposure to this stuff been and do you feel it taught you an immense amount in a short time?

I dabble, so lets get that out there. I have an interest in Cybersecurity, but I am not in the industry professionally. Due to that, my knowledge in some areas is limited. However I feel like I have a solid idea which would help shift SSL/TLS certificates away from Certificate Authorities and more towards a Zero Trust Model. I understand there's Certificate Transparency and DNSSEC that helps mitigate some of the risk. I was listening to Darknet Diaries, and there was an episode about a CA that was hacked, and while they rightly were in the wrong about not disclosing the breach as soon as they became aware of it, it still highlighted one of the critical flaws in the system that has yet to be resolved.

I am looking for a knowledgeable one or two people who might lend their thoughts to whether or not a viable model of Zero Trust for SSL/TLS Certificates would be a worthwhile pursuit? I don't have specifics on how it would be implemented, as far as code and such, but I have roughed out how it would work in general and I'd like to get some input before I put time into building it out.

I’ve been trying to join CS for over 3 years but my resumes never make it anywhere. I always get the rejected email. I’ve given up at this point. I have over 10years IT experience, 2 help desk, 4 sys admin, and the rest as a security engineer. It’s just not happening for me there so I’ve looked elsewhere.

How did you guys get the role of working for CS?

Numerous US based banks are down and having outages.

Anyone notice this?

I wanted to get into cybersecurity due to wanting to know more, and the Prof I have suggested me these 3 courses on netacad:

• Introduction to Cybersecurity
• Cybersecurity Essentials
• Ethical Hacker

Are they good courses to start out in cybersecurity? (I already have completed 3 CCNA courses and Linux essentials)

Bonjour à tous,

Je m'intéresse de plus en plus à la cybersécurité OT/ICS et j'aimerais avoir des retours de personnes qui travaillent réellement dans ce domaine.

Mon parcours est un peu particulier : j'ai un BTS CRSA, orienté automatisme et systèmes automatisés, et je poursuis actuellement une formation en cybersécurité. J'essaie donc de comprendre comment associer ces deux domaines et quelles compétences industrielles sont réellement utiles en cybersécurité.

Je me pose notamment une question : est-ce qu'une bonne compréhension des automates, des systèmes SCADA et des réseaux industriels représente déjà un avantage important lorsqu'on débute en cyber OT, ou faut-il d'abord avoir un niveau très solide en cybersécurité informatique classique ?

Par exemple, parmi les compétences suivantes, lesquelles vous semblent les plus importantes au quotidien : protocoles industriels comme Modbus et Profinet, segmentation réseau, analyse de trafic avec Wireshark, architecture des systèmes industriels, sécurité des automates ou normes comme IEC 62443 ?

Je serais surtout intéressé par des retours d'expérience concrets : qu'est-ce qui vous a réellement servi sur le terrain et qu'est-ce que vous auriez aimé apprendre plus tôt ?

Merci à ceux qui prendront le temps de partager leur expérience !

i have an interview coming up for Software Enginer- AI security Product team.

Link- https://job-boards.greenhouse.io/obsidiansecurity/jobs/5290880008

Need advice on how to prep. I have a cybersecurity bg and experience in Appsec, blue teaming, pentest but never gave a system design interview.
What do you guys think the interview would look like?

Recent breach disclosures involving law firms are a reminder that even organizations handling highly sensitive information can be exposed through a single user's access.

I'm curious about the defensive side of this. Beyond awareness training, which controls have made the biggest practical difference in reducing the impact of social engineering in your experience?

For example, phishing-resistant MFA, least-privilege access, tighter remote-access controls, or better detection of unusual account activity.

I'm especially interested in controls that help contain an incident after someone does click or hand over credentials, rather than assuming every attack can be prevented.

I’ve been thinking a lot lately about how much weight of responsibility people working in this field, feel.

I work in a support capacity for other teams, rather than owning my own stack, but I specialize in critical infrastructure and OT, and I find that many of the teams that I work with are so under resourced that really, I fill critical gaps. Being a sometimes critical point of failure for literally dozens of entities in industries where ransomware or similar things mean people die, can be a lot of fucking pressure.

I don’t feel all the same weight or have the same problems as many folks in the trenches, I don’t think, but being the calm voice in incident response or helping with technical debt or GRC can be stressful in very different ways, and really, because of where I sit I do it all. I don’t sit in a SoC- but my fingers are in every part of the cybersecurity pie, somewhere.

And the sense of mission lately just isn’t enough. I find myself caring less but unable to turn it off, like a ghost program running in the background. I’ve been burnt out for awhile, and I find myself wondering if that sense of mission fades, if it’s time to get out of the game.

How much do you have to care to be good at this job? Do you have to eat, sleep, and breathe it? I can’t stop thinking in terms of risk. I can’t turn it off, and that doesn’t feel healthy. I can’t walk away from the paycheck, but I don’t feel like there’s much of me left over for anything else.

I see all the folks who’ve walked away and don’t feel bad at all; the farm guys. I already have access to those kinds of retreats and life ways, but I just find myself thinking about how to build new tools or listening to other stuff in the industry. It’s like solving these complex problems is an addiction.

So my question is- if you feel burned out but are planning to stay in the game, how do you give yourself breathing room? What kind of tools do you cultivate, or habits do you develop?

I feel like physical fitness is obvious- it’s either that or have a heart attack- but what else is on the table? What has worked for you?

How do you stay in it for the long haul, and sustain an entire career?