Discussions, questions and news about Application Security from cybersecurity professionals on Cyberr.
0 members · 262 posts
Schomer — Principal Security Solutions Architect & Founder
Just dropped a massive suite of 9 live services on the Heelr marketplace. I’m moving application security and compliance out of traditional bottlenecking models and into pure, automated velocity. What's live on the dashboard right now: • Deterministic Layer-Zero Validation: Neut…
· 4 reactions · 0 comments
Quinton Plaatjies — SOC Engineer
The headline suggests that OpenBSD 8.0 introduces three major areas of improvement: Stronger security controls : OpenBSD is already known for its security-first design, so this likely includes additional kernel hardening, stricter privilege separation, improved memory-protection…
· 2 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
framework engine. I just locked in the architecture showcase for the Build With AI Hackathon. Built completely from scratch as a solo backend developer on a non-rooted Android device running Termux, the ETBV gateway engine achieves absolute logic assurance. The Metrics: • Valid…
· 5 reactions · 0 comments
Quinton Plaatjies — SOC Engineer
“PHP Releases Emergency Windows Security Update To Fix Critical Brotli Decoder Vulnerability” highlights a serious security issue affecting PHP deployments on Windows that use the Brotli compression library. What is Brotli? Brotli is a compression algorithm developed by Google a…
· 1 reactions · 0 comments
SHERIF SALAH EL-DIN — Cyber Security Analyst
https://youtu.be/kIG2ffjUrXU في الفيديو ده من مجتمع Information Security Tutorials هنناقش أبرز الثغرات الأمنية اللي اتكشفت في Node.js خلال أكتوبر 2026، وهنفهم ليه تحديثات الأمان الخاصة بالـ Runtime والـ Dependencies ممكن تكون حاسمة في حماية تطبيقات الويب والأنظمة اللي بتعتمد علي…
· 3 reactions · 0 comments
George Botnaru — Senior Software Engineer
I got 3/3 on today's Cyberr daily challenge (Application security, senior level). Think you'd beat me? https://cyberr.ai/daily
· 4 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
The Architectural Manifesto: Part 2 — Why "Black October" Proves Your Threat Model is Dead. The global cybersecurity ecosystem is scrambling over the new PHP "php2shell" zero-days (CVE-2026-109618 & CVE-2026-109619). CISA is yelling to patch, tech stacks are forcing emergency of…
· 6 reactions · 0 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
AI is now finding bugs that humans missed for a decade. But attackers have AI too. If both sides find the same flaw at the same time, does a 90-day (or even 2-day) embargo still protect anyone? Vote, then tell us: how fast did your team patch PHP2Shell?”
· 7 reactions · 1 comments
samuel watua Soita — Full Stack Software Engineer
Your business doesn't just need software. It needs software you can trust. A website can look perfect and still have serious security weaknesses. An application can work flawlessly and still expose sensitive data. An API can return the right response and still allow the wrong pe…
· 0 reactions · 0 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
A critical flaw affecting 70% of all websites has the cybersecurity world panicked Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take ov…
· 12 reactions · 2 comments
samuel watua Soita — Full Stack Software Engineer
One malicious package can turn a developer tool into a credential-harvesting machine. That's exactly why software supply-chain security deserves much more attention. Microsoft recently analyzed the LiteLLM 1.107.0 supply-chain compromise, where attackers used stolen developer to…
· 0 reactions · 0 comments
Erlend Andreas Gjære — Co-founder / Chief Executive Officer at Secure Practice AS
Websites are going offline due PHP2Shell, with WordPress and 70% of the Internet affected. The biggest risk here may however be not the most obvious one, and may eventuall affect a lot more people than we'd like to think. A vulnerable webshop based on e.g. WooCommerce may of cou…
· 11 reactions · 2 comments
Maxwell Bwire — Technical Support Technician
I'm happy to share that I've been working through the OWASP Top 10 on TryHackMe, building my understanding of common web application security risks through hands-on practicals. During this learning journey, I've explored topics including: - Injection— understanding how unsafe in…
· 6 reactions · 0 comments
samuel watua Soita — Full Stack Software Engineer
Your AI model may be secure. Your AI supply chain might not be. Think about everything surrounding a modern AI application. Open-source packages. Models. Plugins. MCP servers. APIs. Vector databases. Cloud services. Third-party tools. Container images. CI/CD pipelines. Every con…
· 3 reactions · 0 comments
samuel watua Soita — Full Stack Software Engineer
The scariest vulnerability isn't necessarily the one with the highest CVSS score. It's the one attackers are already exploiting while defenders are still trying to understand it. Recent threat intelligence shows the pace of zero-day exploitation is increasing. Google Threat Inte…
· 4 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
🚀 [PROJECT MILESTONE] Secure Agentic Commerce is Here: Introducing ETB PayShield for the PayPal AI Hackathon High-volume digital checkouts and autonomous AI commerce flows face an overlooked vulnerability vector: traditional application security configurations run too high up t…
· 3 reactions · 2 comments
samuel watua Soita — Full Stack Software Engineer
AI is getting better at finding vulnerabilities. That means “we'll fix security later” is becoming an increasingly expensive strategy. For years, security teams have had to search through enormous codebases looking for weaknesses. Now AI can help automate parts of that process.…
· 1 reactions · 0 comments
samuel watua Soita — Full Stack Software Engineer
A critical vulnerability doesn't automatically mean you're compromised. But an exposed critical vulnerability is a very different story. This distinction is becoming increasingly important. Organizations are dealing with an enormous volume of vulnerabilities. Google Threat Intel…
· 1 reactions · 0 comments
samuel watua Soita — Full Stack Software Engineer
You may have written 99% of your application code—and still be trusting thousands of lines you didn't write. That's the uncomfortable reality of modern software development. A typical application depends on: → npm packages → Python packages → Docker images → GitHub Actions → Clo…
· 1 reactions · 0 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
Critical security issue affecting PHP he NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and CVE-2026-109619). What has happened? PHP has published a security update to address a critical security issue th…
· 10 reactions · 1 comments
Schomer — Principal Security Solutions Architect & Founder
AI is discovering RCE vulnerabilities (like php2shell) faster than human teams can patch them. Taking websites offline shouldn't be your incident response plan. If your security isn't embedded at Layer Zero, you're just renting safety until the next zero-day drops. Build determi…
· 5 reactions · 0 comments
SHERIF SALAH EL-DIN — Cyber Security Analyst
https://youtu.be/jxJujICo9xc في الفيديو ده من مجتمع Information Security Tutorials هنتكلم عن ثغرات PHP2Shell اللي ظهرت في أكتوبر 2026، وليه الثغرات اللي بتصيب الـ PHP Runtime ممكن تمثل خطورة كبيرة على خوادم الويب والتطبيقات اللي بتعتمد عليه. هنناقش الثغرتين CVE-2026-109618 وCVE-…
· 3 reactions · 0 comments
Maxwell Bwire — Technical Support Technician
I’ve just completed the Guided Pentest: Web room on TryHackMe! 🚩 This was a valuable hands-on exercise that helped me put web penetration-testing concepts into practice, from enumerating a web application and identifying vulnerabilities to exploiting a file-upload weakness and…
· 10 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
AI found the bug. Humans took the blame. Meanwhile, the internet went dark. The current global PHP crisis (php2shell) forced entire government and healthcare networks in Europe to literally pull the plug and go offline. Why? Because an AI discovered a remote code execution (RCE)…
· 4 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
[PERFORMANCE BENCHMARK] ETB PayShield Achieves 4,980.54 TPS Under High-Concurrency Load Matrix A core critique of deterministic pre-execution validation gates is that out-of-band input inspection introduces unacceptable processing overhead to high-throughput financial environmen…
· 5 reactions · 0 comments