Discussions, questions and news about Windows Server from cybersecurity professionals on Cyberr.
0 members · 58 posts
HOROIHEOMA LAZARUS CHIMEZIE — Cybersecurity Analyst
Building My Cybersecurity Home Lab with Kali Linux & VirtualBox Completed my Week 1 cybersecurity lab project at Networkwalks (batch B084)! The main challenge was configuring a dedicated NAT Network and static IPV4 address alongside my existing VirtualBox and Kali setup. Here’s…
· 3 reactions · 3 comments
Daniel Owen — Senior Cybersecurity Consulting Engineer | EDR/XDR · Zero Trust · Architecture & Engineering | CISSP · CCSP · GIAC
build-lab 2.0 is out. The PowerShell script I published to build a lab AD domain controller from a Windows Server ISO now builds domain-joined member servers too. No GUI, no clicking Next, nothing outside what Microsoft and VMware ship. Version 1.0 built one DC. It was a nice st…
· 4 reactions · 1 comments
Quinton Plaatjies — SOC Engineer
“PHP Releases Emergency Windows Security Update To Fix Critical Brotli Decoder Vulnerability” highlights a serious security issue affecting PHP deployments on Windows that use the Brotli compression library. What is Brotli? Brotli is a compression algorithm developed by Google a…
· 1 reactions · 0 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
Critical security issue affecting PHP he NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and CVE-2026-109619). What has happened? PHP has published a security update to address a critical security issue th…
· 10 reactions · 1 comments
Nikki Webb — Cybersecurity is not just technical, it is human | Protecting people, businesses & resilience
#PHP2Shell has everyone rattled this week. Here is the calm version. Two critical flaws in PHP itself. Fixes are out. The National Cyber Security Centre says patch now. Most teams will update the servers they know about. The breach risk sits in the ones they don’t. The forgotten…
· 8 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
1,411 Vulnerabilities: Is Patch Tuesday Scalable Anymore? Microsoft just dropped its largest security update to date—1,411 vulnerabilities in a single cycle, including 70 rated Critical and an active Windows Shell zero-day (CVE-2026-96951) bypassing Mark of the Web (MotW) protec…
· 3 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
CISA just sounded an absolute alarm on two critical zero-days hitting Citrix NetScaler ADC and Gateway systems (CVE-2026-88771 and CVE-2026-88772). Threat actors are actively deploying memory-based shellcode directly onto perimeter systems to execute unauthenticated remote comma…
· 4 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Moving Beyond Access Control: Live Terminal Proof of Layer Zero Execution Integrity We talk heavily about shifting the defensive cybersecurity paradigm from "who got access" to "what is the autonomous machine action actively trying to do." Today, I spun up the local environment…
· 2 reactions · 0 comments
Samuel Santos Belloso — Senior Cyber Strategy, Risk and Compliance
Hi everyone, I’m 23 years old and currently open to new opportunities in cybersecurity, with full flexibility to relocate internationally. At this stage of my career, I have already had the opportunity to build experience across both technical IT and cybersecurity environments.…
· 3 reactions · 0 comments
Esla Kwanza — CyberOps Community Lead
From Adversary Behavior to a Production-Ready Detection A detection should not begin with a YAML file. It should begin with "behavior". For my current detection engineering workflow, I’m using a 13-stage lifecycle designed to make every detection reproducible and evidence-driven…
· 4 reactions · 0 comments
Vitalii Bibikov — SOC Analyst, Blue team, Purple team, Incident Response, Inestigation
Done a small EDR evasion research lab, the name of the EDR I will not disclose, since I don't know whether it is a sensitive information or not, anyways, the research was driven by personal curiosity and has self educational intentions. Objective: Learn how an EDR works, underst…
· 3 reactions · 2 comments
Zane Anderson — Security Consultant
In OSINT and security operations, note-taking is not a habit. It is a foundational discipline. But discipline without security is just evidence collection for the other side. Your notes tie intelligence to action; and they are a single point of catastrophic failure if handled in…
· 2 reactions · 2 comments
Zane Anderson — Security Consultant
OSINT Environment Hardening: Your OSINT Environment Is Your First Line of Defense; But It Needs an Update Most OSINT practitioners still make the same fundamental mistake: they treat their operating environment as an afterthought. They run reconnaissance from their daily driver.…
· 3 reactions · 1 comments
Lara Borenovic — Building Cyberr
Android malware reverse engineer Three things I'm curious about: What's actually hidden behind the title? What does the work really look like, day to day? What's specific about the people who do it? What makes someone good at this? And where do you even find them? They never see…
· 2 reactions · 3 comments
Innocent O. Akpareva — Cybersecurity Analyst
📢 Shared from CyberShift Built something I wish existed when I was starting out. A full cybersecurity home lab walkthrough, beginner level, no fluff. You go from zero to running live Nmap scans between a Kali VM and a Windows host in under 30 minutes. I also added 8 quiz checkp…
· 5 reactions · 4 comments
Michael Swinarski — Information Security Leader
🚀 We are growing our Security Team at CorVel! CorVel is a national leader in risk management solutions and a certified Great Place to Work®. We are looking for a dedicated Security Analyst to play a pivotal role in safeguarding our digital ecosystem. This is a 100% remote posit…
· 6 reactions · 1 comments
Armaan Ilyas — MEng Cybersecurity and Digital Forensics | Open to Work
Running a local Al (like Qwen) on LMStudio to speed up your research during bug bounties is amazing, but exposing your setup to a public network isn't. Here is how I built a 100% private, hardware-accelerated link from my Kali VM to my Mac, so I can query the Al safely without l…
· 2 reactions · 0 comments
Ikechukwu Justin Onyekwere — Security Operations Center (SOC) Analyst
If there are no logs in Sentinel, you have zero visibility and zero detection. While building out my Microsoft Sentinel lab, I hit a critical wall: Windows Security Events simply stopped flowing. For any SOC analyst, this is a nightmare scenario where authentication activity, pr…
· 5 reactions · 0 comments
Zane Anderson — Security Consultant
OSINT Operating System Tradecraft: Your Operating System Is Part of Your Tradecraft; But in 2026, the Distro Wars Are Over. The operating system you choose for OSINT is not a neutral platform. It shapes your security, your privacy, your tool availability, and your operational fl…
· 2 reactions · 0 comments
Claudette Medjiogue — Cybersecurity Analyst
Recently completed a hands-on Wazuh SIEM deployment lab as part of my SOC Analyst learning path. The project included installing Wazuh on Ubuntu, integrating Windows and Kali Linux agents, monitoring security events, and validating threat detections through the dashboard. This e…
· 4 reactions · 1 comments
Innocent O. Akpareva — Cybersecurity Analyst
There is nothing quite like watching students go from complete beginners to confidently executing live cyber attacks and defenses. This week at Drillerbyte, our current CyberShift cohort kicked off their presentation sessions. We require our students to present everything they h…
· 1 reactions · 0 comments
Innocent O. Akpareva — Cybersecurity Analyst
Why did I miss my Nutanix exam today? Because I am getting ready to impact a new breed of cyber minds at the Drillerbyte 4-Week Intensive Cybersecurity Training! Today is Day Zero, and I will be guiding our students through getting their systems completely lab-ready. We are ins…
· 2 reactions · 0 comments
Jason Twin — IT Support and Systems Monitoring
Project: Network Traffic Analysis with Wireshark - Detecting Man-in-the-middle attacks - ARP Poisoning Security+ will introduce you to many types of attacks that happens in our networks everyday, and how to identify them and methods to mitigate them. Network+ and CCNA also cover…
· 6 reactions · 0 comments
Adrien R. R. — CTI Leader | 5G/Telecom Security | AI Integration | Detection Engineering | Attack Surface Management | ex-NATO
🛡️ Just released: PowerAudit 3.2 / a free open-source Windows security audit tool for Blue Teamers & sysadmins. 🔍 Run 46 read-only audit modules on any Windows machine / firewall, antivirus, accounts, encryption, persistence, forensics, MITRE ATT&CK and more. 📊 Get a self-con…
· 5 reactions · 0 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
Critical Notepad++ Vulnerabilities Allow Attackers to Execute Arbitrary Code Notepad++, one of the most widely used open-source text editors for Windows, has released an urgent security update addressing three vulnerabilities, including two arbitrary code execution flaws that co…
· 5 reactions · 0 comments