Discussions, questions and news about XDR from cybersecurity professionals on Cyberr.
0 members · 43 posts
Jordan Hadley — Senior Security Consultant
Has successfully verified SentinelOne Sales Engineer Expert (SentinelOne), SentinelOne Paladin Certified (SentinelOne) and 1 more certification
· 0 reactions · 0 comments
REEMA Nasser ALMUTAIRI — Cybersecurity Engineer
For those working in SOC L2 what are you guys seeing lately in real-world investigations? I’m curious about what’s actually changing in the way you investigate alerts, hunt for threats, and build detection rules. Any new techniques, tools, or approaches that have made a real dif…
· 5 reactions · 4 comments
samuel watua Soita — Full Stack Software Engineer
Your firewall can be working perfectly while an attacker is already inside. That sounds contradictory. It isn't. Modern attacks don't always look like attacks. A compromised employee account can authenticate normally. A stolen session token can bypass the login process entirely.…
· 2 reactions · 1 comments
Schomer — Principal Security Solutions Architect & Founder
THE DOOM LOOP OF DOWNSTREAM DETECTION: WHY REACTIVE SECURITY IS COLLAPSING The industry is currently drowning in an administrative "patch tsunami." Frontier AI is being weaponized by threat actors to generate thousands of polymorphic zero‑click variants every single cycle, and s…
· 4 reactions · 1 comments
samuel watua Soita — Full Stack Software Engineer
The most dangerous alert in a SOC might be the one that looks completely normal. An employee logs in. A legitimate PowerShell command executes. A service account accesses a database. An administrator creates a new API token. Nothing immediately looks malicious. But cybersecurity…
· 3 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Critical Perimeter Alert: The Reality of Chained Zero-Clicks Today's CISA KEV expansion highlights a massive reality check for enterprise defense. Look at the Ivanti Connect Secure chain (CVE-2026-104935): 1. Auth bypass via an edge script (welcome.cgi) 2. Arbitrary file-write v…
· 3 reactions · 0 comments
While waiting for the CybHER bootcamp to start (Monday!!), I kept working on the Level Effect platform. And I'm happy to say I've passed their CDCA certification that validates the end of the "from 0 to Tier 1 SOC analyst" training path. For the "exam", you have to work through…
· 7 reactions · 2 comments
Schomer — Principal Security Solutions Architect & Founder
Rethinking the Protocol Ingress: Moving from Signature Defense to LayerZero State Determinism Traditional endpoint detection and response (EDR) matrices are built to monitor application-layer anomalies and process actions. However, when an architectural vulnerability occurs with…
· 4 reactions · 0 comments
🤖 AI + Cybersecurity: Are Cyber Attacks About to Become Far More Advanced? The more I learn about cybersecurity, the more obvious it becomes that AI is going to fundamentally change the cyber threat landscape. But there are two sides to this. 🔴 AI for attackers AI could potent…
· 4 reactions · 1 comments
Lara Borenovic — Building Cyberr
There are a lot of new cybersecurity companies right now. And, unsurprisingly, almost all of them are talking about AI. AI-powered SOCs, AI pentesting, AI detection, AI agents protecting other AI agents. After a while, it becomes difficult to tell which companies are genuinely b…
· 7 reactions · 1 comments
Favour Oluwatowoju Ajiboye — IT Support Intern
Has successfully verified Microsoft Applied Skills: Defend against cyberthreats with Microsoft Defender XDR (Microsoft) and Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) (Microsoft)
· 1 reactions · 0 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
The Cybersecurity Confidence Gap: 96% Feel Ready, 70% Got Breached Security teams have never had more monitoring in place, and they have rarely been more sure of themselves. In its 2026 AI & Cybersecurity Trends Report, Arctic Wolf, a managed detection and response (MDR) provide…
· 7 reactions · 0 comments
Yasir Mehmood — Microsoft Security Consultant
👋 Hello Cyberr.ai Community! I’m Yasir Mehmood, a cybersecurity professional, Microsoft Security Consultant, and Cybersecurity Instructor/Trainer focused on helping professionals and organizations strengthen their security capabilities. My core areas include: 🔐 Microsoft Entra…
· 3 reactions · 2 comments
Kameron — IT Support Technician
I work in a college town not terribly far from a major city, and there is very little cyber security presence outside of the major metropolitan area. Security is not just for big companies doing business in the city. Often times, it's smaller businesses that are prone to vulnera…
· 2 reactions · 0 comments
Yasir Mehmood — Microsoft Security Consultant
🚀 SC-200 Training Special Offer! Preparing for the Microsoft Certified: Security Operations Analyst Associate (SC-200) certification? Build hands-on skills with Microsoft Sentinel, Defender XDR, KQL, Threat Hunting, Incident Investigation, and Security Operations through practi…
· 1 reactions · 2 comments
PETER DESFIGIES — Cybersecurity / Threat Researcher / Breaker of All Things / Discovered a 563-Node Global Botnet
Hot take: your detection stack is lying to you. Not because it's broken. Because it can only catch what it already knows. I've spent the last year building a deception platform from scratch — honeypots, canary infrastructure, darknet presence, actor attribution chains. No budget…
· 5 reactions · 8 comments
Claudia Ramona Brebeanu — Cyber Security Analyst
📰 Microsoft Defender flags legitimate Google search links as malicious https://www.bleepingcomputer.com/news/security/microsoft-defender-flags-legitimate-google-search-links-as-malicious/ via BleepingComputer · 🛡️ Powered by Cyberr Threat Intelligence — platform.cyberr.ai/news
· 3 reactions · 0 comments
Ritick Chowdhury — Consultant / Service Manager
Hello everyone, I’m excited to be part of this community and would like to introduce myself. I bring over 18 years of experience in IT and cybersecurity, specializing in security operations, service delivery, and enterprise security management. Currently, I work as a Service Del…
· 11 reactions · 2 comments
PETER DESFIGIES — Cybersecurity / Threat Researcher / Breaker of All Things / Discovered a 563-Node Global Botnet
I wasn't going to post anything more today, but this one really sunk in and I reaped the rewards.. Friday afternoon. Mid-session. Alert fires. Live IAB operator. Healthcare credential harvesting. Caught in the act. But here's the part that matters — I've been tracking this guy f…
· 3 reactions · 3 comments
Mario Matkovski — Independent Threat Researcher | Ransomware Intelligence & OSINT
One extra click during a security investigation doesn’t sound like much. But the cost isn’t really the click. It’s the context switch around it. Open another panel. Check related activity. Go back. Find the previous alert. Rebuild the context. Each action is small, but investiga…
· 1 reactions · 0 comments
Lara Borenovic — Building Cyberr
Salt Typhoon: What Happened and What It Means Chinese state hackers (Salt Typhoon/MSS) spent up to 18 months inside nine major US telecoms. Six were breached through a single shared IT contractor. Three through unpatched Cisco and Fortinet systems - patches had been available fo…
· 3 reactions · 1 comments
PETER DESFIGIES — Cybersecurity / Threat Researcher / Breaker of All Things / Discovered a 563-Node Global Botnet
76 days. 896 hits.....wth?! I know a lot of my posts start like this.. but, this really is when I find things :P I'm constantly thinking that I may have missed something, or it fell through the cracks, or something silently failed, which has me review the logs, data every so oft…
· 5 reactions · 0 comments
Blynn Atchley — Founder & Cybersecurity Consultant at Byson Cyber | Helping SMBs Reduce Real Cyber Risk Through Practical Security
👋 Howdy everyone! Figured I'd introduce myself since I'm new here. I'm the owner of Byson Cyber, where I help small and mid-sized businesses reduce real cyber risk through practical cybersecurity consulting. Most of my work focuses on Microsoft 365 security, email security, clo…
· 3 reactions · 0 comments
OLUWATOYIN OYEDIJO — Security Operations & Threat Analysis
🚨 From Traffic Analysis to Threat Intelligence — My Journey into Cybersecurity + AI 🚨 Over the past few months, I’ve been intentionally sharpening my skills in Security Operations, Network Traffic Analysis, and AI-driven threat detection — and the growth has been real. Here’s…
· 6 reactions · 1 comments
Innocent O. Akpareva — Cybersecurity Analyst
Happy Sunday to all the SOC analysts currently on shift, monitoring alerts, investigating suspicious activity, and making sure critical assets and infrastructure stay protected. 🛡️ While most people are resting, someone is watching the dashboards, correlating logs, escalating i…
· 6 reactions · 0 comments