I’m so unbelievably stunned that this just happened. Around 5:15AM I went to put my pc back to sleep because I assumed my cat stepped on my keyboard and woke it up. I was fidgeting with my mouse because it wouldn’t work and then realized that someone was controlling my desktop. The only thing I actually witnessed them do was go into my google profile/settings and copy my phone number, then I think they noticed I was trying to click and spam my keyboard so they left. I went to my search history and they were in my bank account and also in my email. I called the bank and immediately froze my entire account. They saw my savings, my credit card, and were in my profile. I have 2 factor and did receive a code right before I woke up. I don’t think it’s possible for them to actually know my password since it just auto-filled, but they 100% have my phone number. Besides the obvious things, changing passwords, freezing my bank, what else do I need to do??? I’m so overwhelmed and shocked that I just witnessed this. Are there other steps I need to take here? I’ve been trying my best investigative work here but all I have is some search history and I was able to disable a device in my pc that allows Wake-on-LAN, so they shouldn’t be able to wake it up from sleep again. What damage can they do with my phone number? I watched him copy it. Please let me know if there are some obvious countermeasures I should be taking here. I’m so stunned I don’t even know where to start.

Has anyone heard anything about ARTEX being abused to grab leaked GitHub secrets?

Info here from Microsoft: https://www.microsoft.com/en-us/security/blog/2026/11/05/threat-actors-use-agentic-ai-tooling-to-find-and-abuse-exposed-secrets/

And GitGuardian: https://blog.gitguardian.com/the-agents-have-now-found-your-secrets-on-github-artex-is-abusing-public-secrets-right-now/

I’m trying to get into the cybersecurity industry, and I’ve met a few people through networking who work multiple jobs in the field, which has always made me curious about how they manage their time and what their day to day lives actually look like.

For those of you working two, three, or even more cybersecurity jobs, how many hours are you actually putting into each job, and how demanding is the workload? Are you constantly busy throughout the day, or do you have enough downtime between tasks to make working multiple jobs manageable? I’m also curious how you handle situations where meetings, deadlines, or other responsibilities overlap, and whether managing multiple positions is as stressful as it sounds or if it really depends on the roles you’re working.

I’m especially curious about your work-life balance because I can’t imagine juggling that many responsibilities without sacrificing a good amount of personal time. Do you still have time to spend with friends and family, go to the gym, enjoy your hobbies, or even just have a day to yourself without worrying about work? I’d really like to hear what a typical day looks like for those of you doing this and how you manage to have a life outside of work.

Does anyone have experience with Black Hat trainings taking place during their gatherings? I am talking about these 2 or 4 day trainings happening during the event. Is it worth the money and time?

It’s been a horrible experience, right from subscriptions to exam scheduling. Seriously, they can’t even get a basic calendar and scheduling system right.

Hi everyone,

I have successfully cleared the CEH Theory exam and am now preparing for the CEH Practical exam.

I'm looking for suggestions from people who have already taken the practical exam or are currently preparing for it.

1. Which platforms or resources are best for practicing?

2. Are there any recommended mock tests or practice labs?

3. What tools and topics should I focus on?

4. How similar is the actual exam to the available practice tests?

5. Any tips or strategies to manage time during the exam?

Any guidance, resources, or personal experiences would be greatly appreciated.

Thanks in advance, bros!

Hey there! I'm new to this community, so I would appreciate it if you could share your opinion on this matter.

I'm currently a senior help desk technician that gets extensive experience in several aspects of cybersecurity.

To make the eventual jump into cyber, I've been working on a lab using GNS3 and Suricata fine-tuning. It currently has two offices using OPNsense firewalls connected via an IPsec tunnel, and Suricata running on the firewalls in IDS mode. There is also a simulated attacker host connected to the ISP router.

I wanted to get advice on some things you'd be impressed by if you were to see them in a lab. So far the only thing I've really done is establish least privilege ACLs and also a web server in one office, which is the only thing the other office can reach

Please let me know if this is not the right sub for this. I also know it's very vague, but to be honest I don't have a very clear goal for the lab yet. I want to focus more on network security engineering, but I am also interested in detection engineering.

I really need your help and guidance with something. Are there any forums or communities where cybersecurity is taught in a more hands-on or collaborative way?
I’m not referring to virtual labs like Hack The Box or similar platforms.
I mean communities more like Reddit, Discord servers, or groups where people share knowledge, work together on practical challenges, and learn from each other.
Could you point me in the right direction? I’d really appreciate your help!

​Hi everyone,

​Over the past few weeks, I’ve been working on an open-source defensive cybersecurity project called Zero-Day Radar.

​The goal is to build a high-performance network monitoring and threat detection framework. I decided to use a hybrid architecture:

​C++ Core Engine (88.1%): Handles the low-level heavy lifting — fast network packet capture, process monitoring, and minimal overhead execution.

​Python Analytical Layer (11.9%): Parses telemetry data, aggregates log records, and integrates with threat intelligence feeds.

​Key components in the repo:

​radar_core.cpp - Low-level monitoring engine

​zeroday_radar.py - Log parser & analytical engine

​rules.txt & radar.conf - Custom detection logic

​The source code is available here:

https://github.com/aouamchawki-3A/zero-day-radar

​I would really appreciate any feedback from the community regarding the C++ performance, IPC mechanisms between C++ and Python, or suggestions for additional detection capabilities!

I'm a computer engineering student specializing in cybersecurity, currently exploring potential problems for a six-month engineering project.

Rather than inventing another generic security tool, I'd like to understand the real problems professionals encounter in their day-to-day work.

A few things I'd particularly like to understand:

• What tasks are unnecessarily manual or time-consuming?
• What security problems are difficult to detect, validate, or investigate?
• Where do existing tools fail or require complicated workarounds?
• What problem would you genuinely like to see solved?

I'm interested in specific, real-world experiences rather than generic project suggestions.

Thanks in advance!

Hello All, does anyone a good cyber deception masters program that is beneficial and has hands-on implementation as a focus?

Thank you!

When new ELT takes over and starts questioning the SOC value

Exec: "What does the SOC actually do all day?"

Me: "Let us go and find out"

After 15 years in security leadership, not sure I can take much more