Discussions, questions and news about MITRE ATT&CK from cybersecurity professionals on Cyberr.
0 members · 116 posts
samuel watua Soita — Full Stack Software Engineer
A compromised developer account can become a production security incident. Developers routinely work with credentials that connect them to valuable systems: Git repositories. Cloud consoles. CI/CD pipelines. AI coding assistants. Package registries. Databases. Production APIs. I…
· 1 reactions · 0 comments
SHERIF SALAH EL-DIN — Cyber Security Analyst
https://youtu.be/kIG2ffjUrXU في الفيديو ده من مجتمع Information Security Tutorials هنناقش أبرز الثغرات الأمنية اللي اتكشفت في Node.js خلال أكتوبر 2026، وهنفهم ليه تحديثات الأمان الخاصة بالـ Runtime والـ Dependencies ممكن تكون حاسمة في حماية تطبيقات الويب والأنظمة اللي بتعتمد علي…
· 3 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
The Architectural Manifesto: Part 2 — Why "Black October" Proves Your Threat Model is Dead. The global cybersecurity ecosystem is scrambling over the new PHP "php2shell" zero-days (CVE-2026-109618 & CVE-2026-109619). CISA is yelling to patch, tech stacks are forcing emergency of…
· 6 reactions · 0 comments
Jason Murray — Strategic Information Security Leader Championing Quantified Risk Analysis and Security Process Improvement.
I read every primary report behind the nine AI "escapes" of 2026: the OpenAI agents at Hugging Face, Anthropic's four, AISI's, Meta's, Moonshot's, and the DseWiki case. I found nine leaks, and nine groups of people who built the environments and then, to their credit, wrote most…
· 9 reactions · 1 comments
samuel watua Soita — Full Stack Software Engineer
A critical vulnerability doesn't automatically mean you're compromised. But an exposed critical vulnerability is a very different story. This distinction is becoming increasingly important. Organizations are dealing with an enormous volume of vulnerabilities. Google Threat Intel…
· 1 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Inside the ETBV Engine State Machine: Eliminating Vulnerability Classes in <0.15ms If you want to survive sub-minute weaponization windows, your defenses must be completely deterministic. Here is exactly how the Execution-Time Boundary Verification (ETBV) engine processes, handl…
· 5 reactions · 0 comments
samuel watua Soita — Full Stack Software Engineer
What happens when vulnerabilities are discovered faster than organizations can patch them? We may be approaching that reality. Google Threat Intelligence reports that monthly vulnerability disclosures more than doubled in 2026—from 5,045 in January to 10,477 in July, reaching 10…
· 1 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Under the Hood: Real-Time STIX 2.1 Telemetry of a Blocked PHP2Shell Cascade When an automated exploit cascade hits your environment, you don’t have time to wait for a database write or an application-layer parsing loop. True security requires capturing, validating, and stripping…
· 4 reactions · 0 comments
Maxwell Bwire — Technical Support Technician
I’ve completed the Using the Metasploit Framework module on HTB Academy. During this module, I gained hands-on experience with Metasploit, including searching for exploits, configuring payloads, managing sessions, and using Meterpreter to investigate compromised systems. I also…
· 6 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Chained Memory Exploits vs. Authentication Spoofing: Why the Application Plane is Failing Under Fire The simultaneous exploitation of BeyondTrust (CVE-2026-102764) and the PHP2Shell memory chain (CVE-2026-109618/19) exposes the complete collapse of application-level trust bounda…
· 3 reactions · 0 comments
Mario Matkovski — Independent Threat Researcher | Ransomware Intelligence & OSINT
Beyond the Leak Site: What the Azazel Case Reveals About Ransomware Attribution Independent Threat Research | 12 October 2026 Introduction Ransomware data leak sites are a valuable source of threat intelligence. They provide visibility into victim claims, extortion activity, and…
· 5 reactions · 8 comments
Goran Pizent — Information Security Lead
Agentic pentesting tools are no longer confined to security labs. CrowdStrike found ARTEX configurations, Claude Code histories and model prompts on infrastructure connected to attacks against South Korean financial organisations. The interesting part for me is the workflow. The…
· 6 reactions · 1 comments
Schomer — Principal Security Solutions Architect & Founder
The boundaries are collapsing everywhere you look. Check out the breaking intel on the feed right now. We aren't just dealing with basic application bugs anymore—we are looking at structural engineering failures across the board: 🔘 Zero-Click Ad Spyware: Adversaries are deployi…
· 4 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
THE DOOM LOOP OF DOWNSTREAM DETECTION: WHY REACTIVE SECURITY IS COLLAPSING The industry is currently drowning in an administrative "patch tsunami." Frontier AI is being weaponized by threat actors to generate thousands of polymorphic zero‑click variants every single cycle, and s…
· 4 reactions · 1 comments
Schomer — Principal Security Solutions Architect & Founder
The Last 24 Hours Proved It: Your Patch Management Strategy is Broken 🛑 Look at the threat intelligence feed from just the last day. It’s a total structural failure across the entire software stack: • Edge Infrastructure: Palo Alto PAN-OS (CVE-2026-0322) under active RCE exploi…
· 3 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
ENTERPRISE ADVISORY NOTE: The Hierarchical Inversion of Risk ManagementTitle: Beyond CWE-1000: Why Edge-Detection Workflows Fail Against Pre-System Layer-Zero GatesAuthor: Justin Schomer, Founder & Lead Architect | Eternal BoundariesTarget Audience: Enterprise CISOs, AppSec Dire…
· 3 reactions · 5 comments
SAHLA YASEL — Network / Web applications tester
Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian at The Validation Summit ’26. Hosted by Picus Security, this two-hour digital summit focuses on how to build a security program that keeps pace with attackers using AI. You’ll hear why patching and peri…
· 6 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
⚡ LAYER ZERO MECHANICS: HOW WE ENGINE-OBJECTIFY TELEMETRY AT LINE-RATE When handling an execution-time validation threshold of <0.15ms, you cannot allow raw transactional payloads to touch disk or block the main thread. Traditional security architectures introduce serialization…
· 4 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Scaling Defensive Architecture: The Triad of Automation, Protocol Isolation, and Structured Telemetry To build resilient security frameworks that withstand modern, low-level attack vectors, we must move away from reactive signature-matching. True runtime defense requires a parad…
· 2 reactions · 4 comments
Zane Anderson — Security Consultant
Module 7: System Hacking is live on iscsecurity.org. This is the module after vulnerability analysis: moving from a prioritized target list to active exploitation, privilege escalation, and domain dominance. Gaining initial access, bypassing local defenses, dumping credentials,…
· 6 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Breaking the Symmetrical Asymmetry with Real-Time STIX 2.1 Pipeline Mapping If you’re still trying to secure critical infrastructure by manually grepping firewall syslog entries after an incident occurs, you’ve already lost the execution race. When threat actors execute automate…
· 3 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Machine-Speed Exploits Require Pre-Execution Layer Zero Trust We are watching the cyber-attack lifecycle shrink from days to minutes. Threat actors are no longer just writing malware; they are deploying agentic frameworks to automate the discovery of existing software flaws and…
· 4 reactions · 0 comments
Zane Anderson — Security Consultant
Hello All, Warm Greetings from Austria – Been Out of Action for the last few days, I hope this post will bring some of you up to speed! The Cisco Catalyst SD-WAN Authentication Bypass (CVE-2026-76504) The Story: CISA has added a critical 9.8 CVSS zero-day vulnerability impacting…
· 5 reactions · 0 comments
Lara Borenovic — Building Cyberr
North Korean IT workers are using fake identities to get hired by foreign companies. At the same time, fake recruiters are targeting IT professionals through malicious coding assignments and technical interviews. The latest joint advisory from Japanese, US, Australian and German…
· 5 reactions · 1 comments
HOROIHEOMA LAZARUS CHIMEZIE — Cybersecurity Analyst
Just defended my capstone project for the AI in Cybersecurity programme, and I'm still excited about how it went. The project simulated an end-to-end security assessment for a fictional fintech, working across four areas: researching a real threat actor and its history of target…
· 6 reactions · 0 comments