Discussions, questions and news about Social Engineering from cybersecurity professionals on Cyberr.
0 members · 110 posts
Quinton Plaatjies — SOC Engineer
“Tomorrow, 1:00 PM ET: Watch an Attacker Log In Without a Password & Stay In After the Reset” is the kind of headline commonly used to promote a cybersecurity webinar or demonstration focused on identity attacks , particularly attacks that target authentication tokens, sessions,…
· 1 reactions · 0 comments
Mike M — Technical Support Specialist
A critical flaw threatens websites worldwide. Millions of California student records are exposed. An AI coding service suffers a security breach. This week's cybersecurity news reveals a common concern: even when we take precautions to protect our devices and accounts, the servi…
· 10 reactions · 2 comments
samuel watua Soita — Full Stack Software Engineer
“We use passkeys, so phishing can't get us.” I wouldn't be so confident. Passkeys are a major improvement in authentication security. But attackers are adapting around the technology rather than simply attacking the cryptography. Microsoft has documented active campaigns where a…
· 0 reactions · 0 comments
Erlend Andreas Gjære — Co-founder / Chief Executive Officer at Secure Practice AS
Websites are going offline due PHP2Shell, with WordPress and 70% of the Internet affected. The biggest risk here may however be not the most obvious one, and may eventuall affect a lot more people than we'd like to think. A vulnerable webshop based on e.g. WooCommerce may of cou…
· 11 reactions · 2 comments
Jason Murray — Strategic Information Security Leader Championing Quantified Risk Analysis and Security Process Improvement.
I read every primary report behind the nine AI "escapes" of 2026: the OpenAI agents at Hugging Face, Anthropic's four, AISI's, Meta's, Moonshot's, and the DseWiki case. I found nine leaks, and nine groups of people who built the environments and then, to their credit, wrote most…
· 9 reactions · 1 comments
Samuele Sparno
I've been working on a personal project called Foxscan 🦊, and I wanted to share it with the cybersecurity community and get some feedback. The idea came from a problem I kept running into: different news outlets covering the same cybersecurity incident, each reporting different…
· 8 reactions · 3 comments
samuel watua Soita — Full Stack Software Engineer
What if the person asking you to “fix your computer” is actually trying to compromise the entire company? This isn't science fiction. Microsoft has reported attacks where threat actors impersonate IT support through Microsoft Teams, convincing targets to interact with them and u…
· 2 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
PHP2Shell is Proving It: Traditional Vulnerability Management is Dead. The industry is currently running in circles trying to patch CVE-2026-109618 and CVE-2026-109619. But the real crisis isn't the code flaws themselves—it’s the architectural blindspots they expose. Two critica…
· 3 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Samuel Watua Soita dropped an excellent point recently about how AI is rewriting the economics of phishing. The takeaway is clear: We can no longer train users to spot fakes when the fakes are mathematically perfect copies. Traditional awareness training looks at the perimeter—b…
· 5 reactions · 2 comments
Mike M — Technical Support Specialist
When Everyday Technology Becomes a Target Cybersecurity isn't just about stolen passwords or hacked computers. This week, cyberattacks disrupted grocery-store refrigeration systems, researchers uncovered malware installed on new Android phones, and attackers found a way to obtai…
· 4 reactions · 3 comments
samuel watua Soita — Full Stack Software Engineer
The next phishing email might not look like phishing at all. For years, security awareness training taught us to look for obvious warning signs: Bad grammar. Strange formatting. Suspicious links. Unusual requests. But AI is changing the economics of social engineering. An attack…
· 4 reactions · 2 comments
Lara Borenovic — Building Cyberr
We still train people to spot a suspicious email? Is that still a thing? What about the Teams message from “IT,” the MFA reset call, the wapp or LI message that looks normal, or the fake CAPTCHA ... Social engineering has moved way beyond email. But has security awareness traini…
· 10 reactions · 17 comments
Samantha Swift — Product, Go-to-Market & Marketing Leadership
When trying to impersonate someone to contact me about a cybersecurity CMO role, spelling their name correctly would be a stronger start. An email arrived last night. Apparently my cybersecurity marketing and GTM experience had “genuinely stood out”. Except… The sender was using…
· 4 reactions · 0 comments
SHERIF SALAH EL-DIN — Cyber Security Analyst
🔐 Splunk SIEM INTEGRATION Generate → Collect → Forward → Parse → Index → Normalize → Search → Alert ⚠️ Collection fails = Splunk is blind. ⚠️ Forwarding/parsing fails = Detection can fail. 🏗️ SPLUNK CORE 🔹 UF → Endpoint log collection 🔹 HF → Optional parsing/routing 🔹 Index…
· 4 reactions · 0 comments
samuel watua Soita — Full Stack Software Engineer
AI is no longer just a cybersecurity tool. It is becoming part of the attack itself. That changes the game. We're used to thinking about AI as something defenders use to: → Detect anomalies → Analyze logs → Find vulnerabilities → Automate investigations → Respond to incidents Bu…
· 2 reactions · 0 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
Hackers Don’t Break In; They Log In Most people think of security concerns in terms of hacking. In the case of deepfakes, however, no hacking may be required. The holes in our security networks often lie in our humanity: the judgment calls made by customer service or human resou…
· 10 reactions · 1 comments
Juliana Ackon — Cyber Security Analyst
🤖 AI in Cybersecurity: Our Greatest Ally or an Attacker’s Best Tool? 🔐 Let's talk about something that is becoming increasingly difficult to ignore in today's cybersecurity landscape: Artificial Intelligence. AI is changing the way we live, work and protect ourselves online. I…
· 4 reactions · 2 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
When Machines Fight Machines: AI Is Reshaping Both Sides of Cybersecurity The next phase of cybersecurity may involve far fewer people at the keyboard. Security researchers increasingly expect future digital conflicts to be fought mainly between autonomous AI systems: one set bu…
· 4 reactions · 2 comments
🛡️ From Cybersecurity Student to Building My Own SOC Investigation Platform Introducing PhilSIEM v4 | Cybersecurity Portfolio & Interactive SOC Lab Over the past several months, I’ve been taking what I learned during my cybersecurity training and putting it into practice throug…
· 4 reactions · 0 comments
Samantha Swift — Product, Go-to-Market & Marketing Leadership
ASOS has confirmed a data breach after customers received an unauthorised notification through its own app claiming attackers had compromised company data. The incident involves third-party platforms ASOS uses to communicate with customers. The retailer says names and contact de…
· 8 reactions · 1 comments
Quinton Plaatjies — SOC Engineer
Global professional services firm Ernst & Young (EY) is reportedly investigating a data breach that exposed sensitive information belonging to a number of financial-sector clients, including Goldman Sachs. According to reports, attackers gained unauthorized access to systems con…
· 6 reactions · 1 comments
Marco Iacovitti — Chief Innovation Officer & Chief Information Security Officer
What cybersecurity IS? It's not attributable only to “security of IT” Cybersecurity is a "coordinated system" of layers that could be, rateher, are surely imperfect but absolutely complementary each other. Each layar has it's hole (passages) like a slice of "Swiss Chees". The su…
· 6 reactions · 1 comments
Schomer — Principal Security Solutions Architect & Founder
BREAKING: Ivanti & Windows Zero-Days Hit CISA KEV List. Here is the Cure. If your security team hasn't analyzed yesterday’s emergency additions to the CISA Known Exploited Vulnerabilities (KEV) catalog, you are exposed. Attackers are actively bypassing VPN authentication and wea…
· 4 reactions · 0 comments
usama rasheed — Cybersecurity | Web Application Penetration Tester | Vulnerability Assessment | OWASP Top 10 | Burp Suite Professional
📰 Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks https://www.bleepingcomputer.com/news/security/hackers-abuse-google-ads-bing-redirects-to-push-claude-clickfix-attacks/ via BleepingComputer · 🛡️ Powered by Cyberr Threat Intelligence — platform.cyberr.…
· 6 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
🔒 HACKERS DON'T BREAK IN; THEY LOG IN. WHY IDENTITY SECRETS ARE AN ARCHITECTURAL TRAP. The industry is learning a painful lesson: traditional IAM and network segmentation are completely helpless against an attacker holding valid, compromised credentials. When a rogue actor uses…
· 4 reactions · 0 comments