Netsec

Detecting Agentic AI Threats in Claude: Sigma Rules and Correlation Detections for the Execution Layer https://ift.tt/3Jdx7MO Submitted July 1, 2026 at 11:02PM by TheAlphaBravo via reddit https://ift.tt/cYvFfuA

Zero-Click Prompt Injection to RCE in Cursor IDE: DuneSlide https://ift.tt/9VbJ65P Submitted July 1, 2026 at 09:49PM by bscottrosen21 via reddit https://ift.tt/8KaOFYQ

Privilege escalation to root in Lima QEMU guests via a world-writable agent socket (CVE-2026-53657) https://ift.tt/cmKZnOk Submitted July 1, 2026 at 08:22PM by Sandwich_1337 via reddit https://ift.tt/dNnlO2x

Privilege escalation to root in Lima QEMU guests via a world-writable agent socket (CVE-2026-53657) https://ift.tt/cmKZnOk Submitted July 1, 2026 at 06:44PM by Sandwich_1337 via reddit https://ift.tt/fGm4zhw

r/netsec monthly discussion & tool thread Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.Rules & GuidelinesAlways maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.Avoid use of memes. If you have something to say, say it with real words.All discussions and questions should directly relate to netsec.No tech support is to be requested or provided on r/netsec.As always, the content & discussion guidelines should also be observed on r/netsec.FeedbackFeedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox. Submitted July 1, 2026 at 06:59PM by albinowax via reddit https://ift.tt/0NGLIT8

Symfony YAML Security Audit - Shielder https://ift.tt/hSrE0ev Submitted July 1, 2026 at 06:25PM by smaury via reddit https://ift.tt/LThQcgY

I open-sourced a personal project called Bomly and would appreciate feedback from netsec/AppSec folks https://ift.tt/cdyUAn4 Submitted July 1, 2026 at 05:16AM by Pleasant-Ad192 via reddit https://ift.tt/y7ZEda0

CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) - watchTowr Labs https://ift.tt/MQp09xX Submitted July 1, 2026 at 01:10AM by dx7r__ via reddit https://ift.tt/plkzcX5

DHIS2 (used across 80+ countries) ships with hardcoded default admin credentials and no forced password change. https://ift.tt/8S0VLmJ Submitted June 30, 2026 at 08:21PM by Hadsa_CounterStrike via reddit https://ift.tt/IKJrXqD

Trusted by NVIDIA, Amazon and Banks, This Extension Let Any Website run a drive-by RCE. CVSS 9.3 https://ift.tt/JoyQORH Submitted June 30, 2026 at 05:02PM by acorn222 via reddit https://ift.tt/I8K6VwN

Auditing OpenReception: 16 CVEs in an end-to-end encrypted appointment booking platform (unauthenticated admin creation, account takeover, E2E bypass) https://ift.tt/r9KNwBL Submitted June 30, 2026 at 03:37PM by moltenbit-r via reddit https://ift.tt/sbVvhDi

Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) - watchTowr Labs https://ift.tt/trER2ZH Submitted June 30, 2026 at 12:57AM by dx7r__ via reddit https://ift.tt/9uXrTUb

Applying DI in C to decouple Windows exploitation from the execution mechanics https://ift.tt/Hj3XJaf Submitted June 29, 2026 at 04:23PM by Important_Map6928 via reddit https://ift.tt/1xQj6LP

WinPE as a stateless harness for Windows driver testing and fuzzing https://ift.tt/Iy7lh2u Submitted June 29, 2026 at 12:53AM by Acanthisitta-Sea via reddit https://ift.tt/CIlaEPj

I tried a Local AI model (Qwen 3.6 27b) for security research and it works surprisingly well. https://ift.tt/ADthG43 Submitted June 28, 2026 at 05:26PM by ezzzzz via reddit https://ift.tt/m0QEys2

Dissecting Apple's Sparse Image Format (ASIF) https://ift.tt/Doy9TcS Submitted June 28, 2026 at 04:31PM by luke-paradoxis via reddit https://ift.tt/mQiPMOW

Measuring LLM system prompt extraction (OWASP LLM07) against ground truth, across 4 models https://ift.tt/AUiVoOc Submitted June 28, 2026 at 01:10PM by Omsherikar via reddit https://ift.tt/LmSVjvG

50 Chrome extensions. One codebase. One backend. One API key. https://ift.tt/KMlEQzG Submitted June 28, 2026 at 05:32AM by Huge-Skirt-6990 via reddit https://ift.tt/guNwISc

A peek into Reddit's anti-spam internals https://ift.tt/0cjugbW Submitted June 27, 2026 at 10:33PM by rebane2001 via reddit https://ift.tt/2Djxn45

Slow JSON Stream: 64 connections at 1 B/s takes down PHP/Laravel in under 2 minutes https://ift.tt/biMLQU5 Submitted June 27, 2026 at 04:46PM by cr0hn via reddit https://ift.tt/lFnkThY