Discussions, questions and news about VPN from cybersecurity professionals on Cyberr.
0 members · 47 posts
Maxwell Bwire — Technical Support Technician
I’ve just completed the Guided Pentest: Web room on TryHackMe! 🚩 This was a valuable hands-on exercise that helped me put web penetration-testing concepts into practice, from enumerating a web application and identifying vulnerabilities to exploiting a file-upload weakness and…
· 10 reactions · 0 comments
Mario Matkovski — Independent Threat Researcher | Ransomware Intelligence & OSINT
Before the Ransomware Attack: The Initial Access Broker Economy Not every ransomware operation begins with the ransomware group gaining initial access. In some cases, that access may already be available through an Initial Access Broker (IAB). Compromised VPN credentials, expose…
· 8 reactions · 5 comments
Alborz Nazari — Cybersecurity Engineer | Technical Writer
Let's assume a hardening chain of thought. Suppose that you got hired to harden a business that appeals to two distinct types of clients: public and private. Public clients' concerns include GDPR and PII protection, while private clients' concerns include legal disclosures, conf…
· 9 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
BREAKING: Ivanti & Windows Zero-Days Hit CISA KEV List. Here is the Cure. If your security team hasn't analyzed yesterday’s emergency additions to the CISA Known Exploited Vulnerabilities (KEV) catalog, you are exposed. Attackers are actively bypassing VPN authentication and wea…
· 4 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
The reason our framework handles edge infrastructure variance natively where standard automation drops the ball is simple: we validate the execution boundary at Layer Zero, pre-authentication. Look at what happened this month with Cisco and NetScaler—major enterprises burned tho…
· 4 reactions · 0 comments
Quinton Plaatjies — SOC Engineer
Ivanti Urges Emergency Patching as Connect Secure Zero-Day Attacks Expose Corporate Networks This headline means that Ivanti is warning organizations to apply emergency security updates because attackers are actively exploiting a previously unknown ("zero-day") vulnerability in…
· 2 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
The Changed Locks Paradigm and the Blind Spot of Identity We need to talk about the tactical reality behind the ongoing FortiBleed infrastructure panic. The FBI and Secret Service didn't issue an emergency joint advisory because threat actors are writing complex, flashy zero-day…
· 3 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Pre-Execution State Validation: Decoupling Validation Matrices from Execution Logic at Layer Zero Technical Abstract As network-connected environments grow more complex, software stacks face an increasing risk of Emergent Trust Boundary Violations (ETBV). Traditional network pro…
· 3 reactions · 0 comments
Zane Anderson — Security Consultant
CISA Orders Federal Agencies to Patch Four Actively Exploited Zero-Days Within 72 Hours TL;DR: CISA has added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, affecting F5 BIG-IP, Arista VeloCloud Orchestrator, and two Check Point pla…
· 5 reactions · 0 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
Most security budgets go toward tools: SIEMs, EDR platforms, threat intel feeds, vulnerability scanners. Fewer go toward the thing that actually decides whether those tools produce good outcomes, how the people running them think. A well-tuned detection stack still fails if the…
· 4 reactions · 1 comments
Rafael Martin Jr. — Cybersecurity Professional | CompTIA Security+ | SOC & Security Operations | Incident Response | SIEM & Log Analysis | NIST CSF | Enterprise IT & Operations
I'm going to be real with you all... I'm looking for someone to give me a chance. I've spent 20 years in tech, marketing, and operations. Salesforce, Intuit, ON24, running my own studio. I've managed $2M portfolios, trained 200+ people, and troubleshot more VPN, SSO, and connect…
· 3 reactions · 0 comments
Christian Toon — Fractional CISO | Strategic Cyber, Technology & AI Advisor | Founder, Alvearium Associates
A misconception I hear often, from otherwise sensible clients: "we're too small to be a target." Attackers do not check headcount before choosing a mark, they check for exposed RDP, reused passwords, and a finance team that will move money if the email looks urgent enough. Size…
· 3 reactions · 0 comments
Mario Matkovski — Independent Threat Researcher | Ransomware Intelligence & OSINT
Knowing what is exposed to the internet is only the beginning. The harder question is deciding what actually deserves attention first. A public attack surface can include hundreds or thousands of web applications, cloud services, network services, domains, IP addresses, and unma…
· 4 reactions · 4 comments
Nikki Webb — Cybersecurity is not just technical, it is human | Protecting people, businesses & resilience
As an industry we spend so much time convincing people security folks are on their side. That we are not the bad people, but the ones stopping them. Then a plane from Vegas with some DEFCON attendees on allegedly jams the WiFi and phishes their own seatmates for "the lols," and…
· 4 reactions · 2 comments
Patrick Arthur — On a mission to become a SOC Analyst; bringing hands-on SIEM, IR, and compliance chops, plus a genuine belief that good security is built with good people.
I've been building something in my spare time and I'd love some honest feedback from folks who live this stuff day to day. It's an ongoing homelab; 10 nodes on Proxmox/LXC running a media stack, but the real point is the security layer. So far I've deployed Wazuh for SIEM, set u…
· 7 reactions · 7 comments
Zane Anderson — Security Consultant
Understanding TOR Operations: An Anonymity & Dark Web Intelligence Framework. TOR remains one of the most misunderstood tools in modern cybersecurity. While many view it solely as a privacy browser, it functions more accurately as an anonymity infrastructure layer that enables b…
· 3 reactions · 0 comments
Zane Anderson — Security Consultant
OSINT Environment Hardening: Your OSINT Environment Is Your First Line of Defense; But It Needs an Update Most OSINT practitioners still make the same fundamental mistake: they treat their operating environment as an afterthought. They run reconnaissance from their daily driver.…
· 3 reactions · 1 comments
Schomer — Principal Security Solutions Architect & Founder
CISA BOD 26-04 Is Active: Checkbox Scans Are Dead. Is Your Perimeter Edge Truly Exploit-Resistant?With CISA officially retiring the Weekly Vulnerability Bulletin and enforcing Binding Operational Directive (BOD) 26-04, the regulatory threshold has permanently shifted. CISOs and…
· 1 reactions · 0 comments
Zane Anderson — Security Consultant
Search Engines Are Passive Reconnaissance Sensors: Search engines are the most accessible intelligence platform on the internet. Used correctly, they let you map attack surfaces, exhume deleted content, and fingerprint internal infrastructure without sending a single packet to t…
· 3 reactions · 0 comments
Zane Anderson — Security Consultant
Breach Intelligence: The Highest-Stakes OSINT Discipline. Breach data provides pre-compromise intelligence that no scanner can replicate. It tells you what has already been broken, what credentials circulate in criminal economies, and whether your organization has been quietly c…
· 2 reactions · 0 comments
Biswadeb Mukherjee — Security Engineer & Independent Researcher
Spent the day breaking and rebuilding an organisational web policy in Cloudflare Zero Trust, and it reminded me of a mistake many organisations still make: They mistake configured control for enforced control. From a business perspective, a blocked category in DNS looks like a p…
· 2 reactions · 2 comments
Zane Anderson — Security Consultant
Edge appliances remain the front door. SonicWall confirmed active wild exploitation of two new SMA 1000 flaws today: CVE-2026-83548 (pre-auth SSRF, CVSS 10.0) and CVE-2026-83549 (command injection, CVSS 7.8). Chained together, they allow unauthenticated remote code execution. •…
· 1 reactions · 0 comments
Zane Anderson — Security Consultant
OSINT Operating System Tradecraft: Your Operating System Is Part of Your Tradecraft; But in 2026, the Distro Wars Are Over. The operating system you choose for OSINT is not a neutral platform. It shapes your security, your privacy, your tool availability, and your operational fl…
· 2 reactions · 0 comments
HOROIHEOMA LAZARUS CHIMEZIE — Cybersecurity Analyst
First things you should do when a link drops on your timeline 👀 It’s 2026. We really shouldn’t be clicking links anyhow. Today, I received this link via WhatsApp from a colleague: https://gvly.xyz/FG-Free-CAC-Registration-Portal Instead of clicking it immediately, I applied a Z…
· 2 reactions · 0 comments
George Botnaru — Senior Software Engineer
Not every cyberattack starts with an exploit—sometimes it starts with a download. Socket uncovered a campaign of 737 Chrome VPN extensions impersonating 66 legitimate VPN brands, with more than 75,000 installs. Many silently routed users’ browser traffic through attacker-control…
· 2 reactions · 0 comments