Schomer — Principal Security Solutions Architect & Founder
🚀 [PROJECT MILESTONE] Secure Agentic Commerce is Here: Introducing ETB PayShield for the PayPal AI Hackathon High-volume digital checkouts and autonomous AI commerce flows face an overlooked vulnerability vector: traditional application security configurations run too high up t…
Completed: Guided Pentest: Infrastructure | TryHackMe I've completed the Guided Pentest: Infrastructure room on TryHackMe, where I practised the main stages of an infrastructure penetration test, from enumeration to privilege escalation. What I worked on -Nmap: Scanned the targe…
Schomer — Principal Security Solutions Architect & Founder
AI found the bug. Humans took the blame. Meanwhile, the internet went dark. The current global PHP crisis (php2shell) forced entire government and healthcare networks in Europe to literally pull the plug and go offline. Why? Because an AI discovered a remote code execution (RCE)…
Schomer — Principal Security Solutions Architect & Founder
Under the Hood: Real-Time STIX 2.1 Telemetry of a Blocked PHP2Shell Cascade When an automated exploit cascade hits your environment, you don’t have time to wait for a database write or an application-layer parsing loop. True security requires capturing, validating, and stripping…
While waiting for the CybHER bootcamp to start (Monday!!), I kept working on the Level Effect platform. And I'm happy to say I've passed their CDCA certification that validates the end of the "from 0 to Tier 1 SOC analyst" training path. For the "exam", you have to work through…
Schomer — Principal Security Solutions Architect & Founder
Rethinking the Protocol Ingress: Moving from Signature Defense to LayerZero State Determinism Traditional endpoint detection and response (EDR) matrices are built to monitor application-layer anomalies and process actions. However, when an architectural vulnerability occurs with…
Schomer — Principal Security Solutions Architect & Founder
Breaking the Symmetrical Asymmetry with Real-Time STIX 2.1 Pipeline Mapping If you’re still trying to secure critical infrastructure by manually grepping firewall syslog entries after an incident occurs, you’ve already lost the execution race. When threat actors execute automate…
Schomer — Principal Security Solutions Architect & Founder
Pre-Execution State Validation: Decoupling Validation Matrices from Execution Logic at Layer Zero Technical Abstract As network-connected environments grow more complex, software stacks face an increasing risk of Emergent Trust Boundary Violations (ETBV). Traditional network pro…
Wireshark Fixes 19 Security Flaws Including Critical Code Execution Vulnerability The headline means that Wireshark, the widely used network protocol analyzer, has released updates that fix 19 security vulnerabilities, including at least one critical remote code execution (RCE)…
Schomer — Principal Security Solutions Architect & Founder
Deterministic Layer-Zero Frame Gating: Eliminating Modbus/TCP Vulnerability Classes Inline Tired of seeing the same legacy firmware flaws (buffer overflows, loop-bombs, alignment panics) patched one CVE at a time. The real fix belongs inline, dropping malicious frames before the…
Schomer — Principal Security Solutions Architect & Founder
CISA just sounded an absolute alarm on two critical zero-days hitting Citrix NetScaler ADC and Gateway systems (CVE-2026-88771 and CVE-2026-88772). Threat actors are actively deploying memory-based shellcode directly onto perimeter systems to execute unauthenticated remote comma…
Schomer — Principal Security Solutions Architect & Founder
Layer Zero telemetry shouldn’t require enterprise overhead to be presentable. When auditing network infrastructure, drowning in thousands of raw packet captures or standard octet-stream updates makes real-time analysis impossible. The gap isn't a lack of logging; it's a lack of…
Schomer — Principal Security Solutions Architect & Founder
Hardening Layer Zero: 8/8 Async Rust TCP Engine Validation Complete (ARM/Termux Wire Metrics) Following up on the inline Modbus proxy validation from earlier. I just finalized a wire validation run on the absolute lower-level foundation of the framework: the asynchronous Layer-Z…
ASM Shamimul Islam Shawon — Cyber Security & Client Support Executive
Looking for a Seasoned Enterprise IT Infrastructure & Cyber Security Specialist? Let's connect! With 14+ years of hands-on experience orchestrating distributed enterprise architectures and secure operations, I help organizations build resilient infrastructures and mitigate criti…
OPERATION RESOLVE & TRACE: SOC ANALYST CTF CHALLENGE: Challenge Scenario Your Security Operations Center (SOC) SIEM has raised alerts regarding anomalous network traffic and DNS queries generated by multiple hosts. As a Tier-1 SOC Analyst, you are assigned a specific target doma…
Nikki Webb — Cybersecurity is not just technical, it is human | Protecting people, businesses & resilience
As an industry we spend so much time convincing people security folks are on their side. That we are not the bad people, but the ones stopping them. Then a plane from Vegas with some DEFCON attendees on allegedly jams the WiFi and phishes their own seatmates for "the lols," and…
Module 6 — Vulnerability Analysis is live on iscsecurity.org. This is the module after enumeration: turning a target list into a prioritized, evidence-backed vulnerability picture. Authenticated vs. unauthenticated scans, false positive triage, CVSS/EPSS scoring, and reporting t…
Schomer — Principal Security Solutions Architect & Founder
CISA BOD 26-04 Is Active: Checkbox Scans Are Dead. Is Your Perimeter Edge Truly Exploit-Resistant?With CISA officially retiring the Weekly Vulnerability Bulletin and enforcing Binding Operational Directive (BOD) 26-04, the regulatory threshold has permanently shifted. CISOs and…
📢 Shared from CyberShift Built something I wish existed when I was starting out. A full cybersecurity home lab walkthrough, beginner level, no fluff. You go from zero to running live Nmap scans between a Kali VM and a Windows host in under 30 minutes. I also added 8 quiz checkp…
Search Engines Are Passive Reconnaissance Sensors: Search engines are the most accessible intelligence platform on the internet. Used correctly, they let you map attack surfaces, exhume deleted content, and fingerprint internal infrastructure without sending a single packet to t…
🏆 Voting is open — I need your support! I'm honoured to be nominated for the Arab Cybersecurity Social Media Influencer Award 2026, part of the Arab Security Conference (10th Edition)! This nomination means a lot — it reflects the time we've spent together building real cyberse…
Hi everyone! I'm new to the platform, and I wanted to introduce myself to the community. I'm Haydn, and I'm currently transitioning into cybersecurity after a career in the food industry. I'm focused on the blue team side of things, specifically aiming for a Tier 1 SOC Analyst p…
Not every cyberattack starts with an exploit—sometimes it starts with a download. Socket uncovered a campaign of 737 Chrome VPN extensions impersonating 66 legitimate VPN brands, with more than 75,000 installs. Many silently routed users’ browser traffic through attacker-control…