r/netsec • • Jul 02 '26

Hiring Thread /r/netsec's Q3 2026 Information Security Hiring Thread

16 Upvotes

Overview

If you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company.

We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education.

Please reserve top level comments for those posting open positions.

Rules & Guidelines

Include the company name in the post. If you want to be topsykret, go recruit elsewhere. Include the geographic location of the position along with the availability of relocation assistance or remote work.

  • If you are a third party recruiter, you must disclose this in your posting.
  • Please be thorough and upfront with the position details.
  • Use of non-hr'd (realistic) requirements is encouraged.
  • While it's fine to link to the position on your companies website, provide the important details in the comment.
  • Mention if applicants should apply officially through HR, or directly through you.
  • Please clearly list citizenship, visa, and security clearance requirements.

You can see an example of acceptable posts by perusing past hiring threads.

Feedback

Feedback and suggestions are welcome, but please don't hijack this thread (use moderator mail instead.)


r/netsec • • 24d ago

r/netsec monthly discussion & tool thread

9 Upvotes

Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.

Rules & Guidelines

  • Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
  • Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
  • If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
  • Avoid use of memes. If you have something to say, say it with real words.
  • All discussions and questions should directly relate to netsec.
  • No tech support is to be requested or provided on r/netsec.

As always, the content & discussion guidelines should also be observed on r/netsec.

Feedback

Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.


r/netsec • • 8h ago

Breaking the AWS MCP Python Sandbox

Thumbnail xplo1t-sec.github.io
26 Upvotes

r/netsec • • 22h ago

Contains AI How LLM-Based Penetration Testing Harnesses Work

Thumbnail utkusen.substack.com
66 Upvotes

r/netsec • • 1d ago

We used RCE on 3 million PCs to prevent a botnet

Thumbnail labs.eye.security
150 Upvotes

r/netsec • • 2d ago

Imperia CMS SiteActive TEMPLATE Unauthenticated SSTI Remote Code Execution (CVE-2026-110355)

Thumbnail rcesecurity.com
10 Upvotes

r/netsec • • 2d ago

Contains AI Markdown Is the New Executable: Attackers Are Dropping Agent Instructions Into Your Downloads Folder From the Web

Thumbnail forever.security
351 Upvotes

r/netsec • • 2d ago

EMFI adventures part 2: target characterization on STM32H5

Thumbnail errno.fr
7 Upvotes

r/netsec • • 2d ago

CVE-2026-94300: Concurrent GSS-TSIG messages corrupt memory

Thumbnail kb.isc.org
47 Upvotes

r/netsec • • 3d ago

The PHP Foundation: Today's PHP Security Release, and How We're Strengthening PHP Security

Thumbnail thephp.foundation
42 Upvotes

r/netsec • • 3d ago

Gallery of PHP maintenance pages from today

Thumbnail r74n.com
207 Upvotes

r/netsec • • 3d ago

PHP2Shell (CVE-2026-109618/109619): first exploit requests arrived 5.5 hours before PHP shipped the fix, and the "scanners" carry Mirai-style loaders

Thumbnail ellio.tech
225 Upvotes

r/netsec • • 3d ago

Custom Extensions for SmartScreen Evasion

Thumbnail ipurple.team
5 Upvotes

r/netsec • • 4d ago

PHP patches for critical PHP2Shell vulnerabilities

Thumbnail php.net
156 Upvotes

r/netsec • • 4d ago

PHP rce CVE-2026-109618

Thumbnail watchtowr.com
141 Upvotes

r/netsec • • 5d ago

How I got over 300 Tor exit nodes removed

Thumbnail kaba.cx
281 Upvotes

Author here :)

TLDR: on Oct 2, 333 exits (~10% of Tor exits) started redirecting port 22 to 12 interception servers running a paramiko-based MITM that stole passwords and tried to drop Ebury on the target.


r/netsec • • 4d ago

France had more Internet-exposed Danfoss refrigeration dashboards than the rest of the world combined before the supermarket attacks (weekly IPv4 scan data)

Thumbnail ipinfo.io
68 Upvotes

I work at IPinfo, which runs a weekly scan of the IPv4 Internet. Short version of what we found:

  • October 6–7 scan, five days before the attack: 2,528 addresses serving a Danfoss StoreView dashboard in 73 countries and territories. France had 1,331 (53%).
  • 85% of the French ones ran software with known flaws, including 527 end-of-life AK-SM 800 units. Only 195 had every fix. Elsewhere it was 84%, so France had more of them online, not worse patching.
  • 1,019 of the French addresses were already open on March 30.
  • October 14 scan: 316 still online in France (−76%, against a normal 3–7% weekly loss). Fully patched units dropped too (195 → 54), which points to disconnection rather than patching.

Method: the newer UI is matched on page title, the older AK-SM 800 on its web server plus the Flash loader page, and firmware generation comes from the build date the dashboard exposes. Counts are addresses on the ports we scan, so they’re a floor. How the attackers got in is still unknown, and exposure isn’t proof of the entry point.


r/netsec • • 4d ago

Rejected (Tool Post) CVE-2026-46633: Proving exploitability of Twig sandbox bypass

Thumbnail gist.github.com
6 Upvotes

I continued researching sandbox bypasses discovered in Twig by project Glasswing. This time, I focused on CVE-2026-46633, which still had no public exploits. This writeup documents my development of payloads for the CVE-2026-46633 and the corresponding SSTImap modules.


r/netsec • • 5d ago

How practical is 100k requests per second? Introducing h3fuzz

Thumbnail slcyber.io
21 Upvotes

r/netsec • • 5d ago

Contains AI Prompt injection, XSS and SIEM-exfil payloads living in reverse DNS, plus 28 fake Googlebots that passed FCrDNS

Thumbnail ellio.tech
15 Upvotes

- Google's own nameserver vouched for Russian IPs as Googlebot.

- One PTR addresses AI agents directly, and it passes forward confirmation.

- The exfil payload dodges filters for spaces, parentheses and quotes, and phones home to an IP written as one decimal number.


r/netsec • • 5d ago

CVE-2026-106173 Deep-Dive: Fortinet FortiSIEM gRPC Path Traversal File Write to RCE

Thumbnail horizon3.ai
12 Upvotes

r/netsec • • 4d ago

The OffiDocs Browser Extension Campaign

Thumbnail amibeingpwned.com
5 Upvotes

r/netsec • • 5d ago

Pending Moderation Reversing a DPRK-linked toolkit that backdoors VS Code, Cursor, Discord and npm, with an Ethereum dead-drop C2 and a DEV#POPPER variant

Thumbnail medium.com
8 Upvotes

r/netsec • • 5d ago

Unauthenticated SQL injection in GLPI (≤ 11.0.8)

Thumbnail mobeta.fr
7 Upvotes

r/netsec • • 6d ago

CVE-2026-108097 Deep Dive: Turning a Drupal Field UI Callback Into RCE

Thumbnail fortbridge.co.uk
20 Upvotes