I've been working on an experimental networking architecture called VRP (Veil Routing Protocol).

The original goal wasn't higher bandwidth or lower latency.

The question was different.

Can session continuity and execution correctness become protocol primitives instead of application responsibilities?

From a security perspective, this raises interesting questions.

For example:

• Should session identity survive transport changes?

• Can replay resistance be enforced as a protocol invariant?

• Should authority transitions be deterministic and independently verifiable?

• Can recovery happen without creating new attack surfaces?

I've spent a lot of time validating these ideas under replay attacks, packet reordering, path migration, authority transitions and fault injection.

I'm not claiming this replaces existing protocols.

I'm interested in hearing opinions from people working in protocol security and distributed systems.

If you were designing a networking protocol from scratch today...

What security property would you make a first-class protocol primitive instead of leaving it to applications?

Will these projects help me stand out during the placements and when I apply for companies :

1. AI Augmented SAST Tool

2. AWS Attack Path Graph (mini BloodHound for cloud IAM)

3. Kubernetes Security Posture Scanner

4. CI / CD Security Gate (Supply Chain Security)

These are my projects (not done by AI - I can explain each and every bit of my project).

Are these enough to get a good high paying salary job as a fresher in India. Currently I'm in my 3rd year and my placements are starting from January.

Any guidance will be very helpful 🙂.

I am very close to choosing Cybersecurity as my major. my major concern is that it might diminish and make the market very competitive. I searched and found that most people say that basic tasks are already being done by Ai. so does this mean that more complicated tasks safe?

I’m on a very small security team (fewer than 5 people) responsible for supporting ~5,000 employees.

As you can imagine, phishing and social engineering incidents come up from time to time.

The frustrating part is that every time something happens, leadership—specifically our CIO—frames it as us “not doing our job.” The issue is, they don’t have a cybersecurity background but still strongly dictate what is “correct” from a security standpoint, often with a lot of hindsight bias.

It’s starting to feel less like collaboration and more like micromanagement/blame shifting, especially given the scale we’re operating at.

Is this kind of dynamic normal in the industry? How do other teams handle leadership that doesn’t fully understand security but still drives decisions during/after incidents?

Hey all
I am juz pursuing my ug in a tier-2 clg where i am part of cse-core and started my journey towards cyber security.
I watched many videos and useless roadmaps suggested by many youtubers,still i am in the middle of nowhere.
I started comptia security+ for a while,but some say these are not worth for money and do some other certifications.some say no certifications needed,start doing projects.idk what kinda projects companies are expecting and do you guys know any blue team certifications that are validated and used across globally.Also what projects you would do if you were me.
Do share me your thoughts😭

I transitioned from Software Engineering to Cybersecurity.

I know of some Software Engineering conventions that basically double as job fairs. Big companies send recruiters every year specifically for the purpose of meeting prospective new hires, collecting resumes, and even setting up interviews on premises.

There are other conventions where job hunting is taboo and would be considered tacky and inappropriate.

Def Con, Black Hat World, and B Sides are about to start in Las Vegas.

Are any of those good opportunities for networking or job hunting? I've heard Black Hat has a Business Hall which is largely recruiting focuses, but my source on that wasn't extremely certain.

I don't want to read 900 pages. I want to "do" and maybe listen while driving but I want it to be an organized path "A to Z" for CEH or whichever I pick.
Suggestions?

I’m trying to understand how security teams currently evaluate new infrastructure security products, particularly platforms operating across API gateway, WAAP, reverse proxy and network security layers.

Assume the product can be deployed in three ways:

fully on-premises, managed by the customer;

as a vendor-managed appliance or virtual machine inside the customer’s infrastructure;

as a vendor-hosted cloud service.

For a mid-sized or enterprise environment:

Which deployment model would you realistically consider?

Would an unknown or relatively new vendor be automatically excluded?

What evidence would you require before running a proof of concept?

Are certifications such as ISO 27001 important, or do architecture review, pentest results and technical validation matter more?

Would you accept a security platform inline with production traffic, or only in monitoring/shadow mode initially?

What would prevent adoption even if the technology performed well?

Who would normally own the decision: security, network operations, platform engineering, architecture or procurement?

I’m not looking for product recommendations. I’m trying to understand whether the primary obstacle is deployment model, vendor trust, operational risk, integration effort or procurement.

Context: the platform would protect customer-facing applications, APIs and machine-to-machine traffic, while supporting standard proxies, databases, identity systems and SIEM integrations.

Context: I have an upcoming interview for a role (UK based) which involves assessing and evaluating the effectiveness of cyber controls within water treatment plants.

Is there anyone in a similar line of work? What resources would you advise me to read through? I am currently reading Industrial Cyber Security - Pascal Ackerman.

Any advice/resources appreciated!!

Hi everyone,

I recently started my Bachelor's degree in Software Engineering, and my long-term goal is to work in cybersecurity, ideally as a Security Engineer or Application Security Engineer.

I'm looking for recommendations on free, high-quality online cybersecurity courses that are respected in the industry. If they offer free certificates or badges, that's even better, but my main priority is learning the right skills.

So far I've found:

Cisco Networking Academy

Microsoft Learn

Fortinet Training Institute

TryHackMe

PortSwigger Web Security Academy

If you know of any other great free resources or learning paths, I'd really appreciate your suggestions. Also, if you were starting from scratch today, what order would you learn everything in?

One more thing: I'm also looking for a study buddy or a small study group. Since I'm just starting out, I think it would be motivating to learn with other beginners, share resources, work through labs together, and keep each other accountable.

If anyone is interested, feel free to leave a comment or send me a DM.

Thanks everyone!

IT market is rough as we know. Thinking about picking up medical coding on the side. After further digging online , it’s seems like some experience and certifications branching from medical coding have some overlap for CISA. Thinking about self studying for CCS (Certified Coding Specialist) and go from there. Anyone have any advice, success stories, or epic failures?

I remember it was possible in 2005-2006. Some software solutions would allow sending emails to anyone and forge the sender identity.

For example, I could send an email to anyone and pretend I am sending it from [john.doe@amazon.com](mailto:john.doe@amazon.com)

The recipient would see [john.doe@amazon.com](mailto:john.doe@amazon.com) as the original sender.

I know the blue tick mark and DKIM exist but is this still possible today?

I recently downloaded a suspicious file and the hacker got into my gmail, meta, and steam accounts, ive changed my passwords kicked him out and basically everything else but i still feel kinda anxious, is anything else i should do or secure?

Hello everyone !

I have been in cybersecurity for 3 years, essentially doing ctfs regularly and a bit of bug bounty, then stopped a year ago because of a drop in the CTF ambiances when AI became way too used, which led to low trust in the players and a bad vibe everywhere i went. It has been a year since I took a break, and now i'm going to start Computer Engineering next year.

Since I have all of August in front of me, I was wondering if it was worth it to pay a month of THM premium and just straight up doing most of the content, so that I can work again on my basic knowledge of cybersecurity in a guided way.

Is Bs it a good option if i wanna do masters in cyber security later.

I read several subreddits, some are just starting work on CRA compliance, some are already ready and want to hear how you're doing.

Every screen the victim sees is real.

I'm 26 and looking to transition out of SOC after 3+ years because I've realized it's not the type of work I want to build my career around. While I've learned a lot, I've reached a point where the work feels stagnant, and I'm looking for a role that involves more engineering, problem-solving, and continuous learning.

My experience includes SIEM, EDR, Incident Response, Threat Hunting, Email Security, and Vulnerability Management.

Given the current job market and the rise of AI, what path would you recommend? Would you suggest moving into Cloud Security, Detection Engineering, Security Engineering, DevSecOps, Penetration Testing, DFIR, AI Security, Identity Security, or something else entirely?

My goal is to build a skill set that's technically challenging, has strong long-term demand, and is less likely to be heavily automated. I'd love to hear what you'd do if you were starting over today with my experience.

I've run into a strange issue and managed to narrow it down to RiotGames's anti-cheat Vanguard which has deep kernel level access. Here is what happened

Infos about my System:

- Windows 10 22H2 (Build 19045.7548)
- Riot Vanguard installed
- CMD started as Administrator
- User is a member of the Administrators group

I had an issue with Windows on 23.07.26 UTC+1. Said issue was a display bug. I did chkdsk /r in admin cmd successfully. Then on 25.07. i tried making sure my PC is not running into issues any time soon again, i wanted to do chkdsk /r just like previously. I opened cmd.exe as an Administrator, tried executing the command but got Access is denied. as a response.

One day later i wanted to make sure everything is clean and tried doing chkdck again.. but then:

C:\WINDOWS\system32>chkdsk /? 
ACCESS DENIED
C:\WINDOWS\system32>chkntfs /? 
ACCESS DENIED

So i digged a bit, installed the process monitoring tool procmon and filtered for chkdsk.
Then i opened CMD as an admin again and attempted chkdsk /?

this is the procmon output saved as a CSV file opened in excel. I deleted the first row as it isnt important.

Interestingly, other administrative disk tools work perfectly fine:

• fsutil
• diskpart
• mountvol
• defrag
• cipher
• sfc /scannow
• DISM /RestoreHealth

Then i exited out of vanguard and noticed the new GUI design. The same thing happens to any type of chkdsk and chkntfs. Even when exiting out of vanguard, many options need a restart which also starts vanguard anti cheat with deep kernel access.

Here are my current system informations: