{ "subreddit": "r/netsec", "page": "https://redlisten.com/r/netsec", "updated": "2026-11-12T00:56:02.189Z", "members": 577309, "activity": { "posts_last_24_hours": 4, "posts_per_hour": 0.2, "comments_per_hour": 0.4, "newest_post_utc": 1794410112.212, "newest_comment_utc": 1794425806.673 }, "top_threads_this_week": [ { "title": "Tricking Deepseek Into Not Hacking Your Website", "score": 238, "comments": 22, "created_utc": 1794157031.015, "snippet": "", "url": "https://www.reddit.com/r/netsec/comments/1xr332o/tricking_deepseek_into_not_hacking_your_website/" }, { "title": "I spent countless nights digging into PHP2Shell. Here's a deep dive into how it actually works, from memory to PHP internals to a real exploit.", "score": 203, "comments": 10, "created_utc": 1794099649.087, "snippet": "When the PHP vulnerabilities were first announced, I spent a HUGE amount of time trying to figure out the logic behind them. As many others who tried investigating them probably noticed, there was...", "url": "https://www.reddit.com/r/netsec/comments/1xqlw37/i_spent_countless_nights_digging_into_php2shell/" }, { "title": "IP snowshoeing under US .gov email via a whitelisted AmazonSES typo in SPF", "score": 159, "comments": 12, "created_utc": 1794246079.253, "snippet": "I run a small email security consultancy and this is our research. A typo of AmazonSES in US government DNS whitelisted 32,066 IPs to pass DMARC p=quarantine as milivcounty\\[.\\]gov, with the IP...", "url": "https://www.reddit.com/r/netsec/comments/1xry7z3/ip_snowshoeing_under_us_gov_email_via_a/" }, { "title": "unlocking any car from X brand in most of the world", "score": 99, "comments": 7, "created_utc": 1794049850.142, "snippet": "", "url": "https://www.reddit.com/r/netsec/comments/1xq3xin/unlocking_any_car_from_x_brand_in_most_of_the/" }, { "title": "Certificate authority list: every CA's incident record since 2017", "score": 42, "comments": 5, "created_utc": 1794234275.35, "snippet": "CAs found 17% of their own incidents in 2026 so far, down from 29% last year and 59% in 2022. Researchers, root programs, and other outsiders found the rest. That's from a dataset we built of...", "url": "https://www.reddit.com/r/netsec/comments/1xrsyyg/certificate_authority_list_every_cas_incident/" }, { "title": "Forwarded Without Question: How Web Frameworks Overtrust the Forwarded Header", "score": 33, "comments": 2, "created_utc": 1793961277.987, "snippet": "Many common web frameworks like Spring and Ruby on Rails trust the Forwarded header by default, even though most proxies don't actually have any support for it. This makes apps vulnerable to...", "url": "https://www.reddit.com/r/netsec/comments/1xp9n79/forwarded_without_question_how_web_frameworks/" }, { "title": "Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) - watchTowr Labs", "score": 31, "comments": 1, "created_utc": 1793913843.414, "snippet": "", "url": "https://www.reddit.com/r/netsec/comments/1xouqpj/barracuda_networks_is_your_new_best_friend/" }, { "title": "Electron, we have a problem", "score": 20, "comments": 0, "created_utc": 1794310685.236, "snippet": "Electron, we have a problem. Many Electron apps auto-update without verifying signatures. Many also still trust the compromised eMudhra certificates. Together, that lets an attacker on your...", "url": "https://www.reddit.com/r/netsec/comments/1xskopy/electron_we_have_a_problem/" }, { "title": "Pwning Home Assistant Green: Pre-Auth RCE in Eclipse Mosquitto", "score": 11, "comments": 1, "created_utc": 1794157089.018, "snippet": "", "url": "https://www.reddit.com/r/netsec/comments/1xr33yo/pwning_home_assistant_green_preauth_rce_in/" }, { "title": "Who’s Trying to Get Into Our Fridge Freezer? There's nowt in it!", "score": 10, "comments": 1, "created_utc": 1793883614.845, "snippet": "", "url": "https://www.reddit.com/r/netsec/comments/1xoi14n/whos_trying_to_get_into_our_fridge_freezer_theres/" } ], "newest_posts": [ { "title": "Hide and Stream: Ambient Aircraft-DopplerGeolocation of Live Audio, and a Defense", "score": 1, "comments": 0, "created_utc": 1794410112.212, "url": "https://www.reddit.com/r/netsec/comments/1xtkb4y/hide_and_stream_ambient/" }, { "title": "Qlik Sense Servers Hit With PowerShell Reverse Shells; Attacker Server Holds ActiveMQ and Veeam Exploits", "score": 1, "comments": 0, "created_utc": 1794408907.031, "url": "https://www.reddit.com/r/netsec/comments/1xtjslt/qlik_sense_servers_hit_with_powershell_reverse/" }, { "title": "ScriptBlock Smuggling - AMSI Evasion", "score": 1, "comments": 0, "created_utc": 1794407584.297, "url": "https://www.reddit.com/r/netsec/comments/1xtj92s/scriptblock_smuggling_amsi_evasion/" }, { "title": "2.4% of AFRINIC’s IPv4 addresses answer from outside Africa, and about 81% of those sit in one company’s four blocks", "score": 1, "comments": 0, "created_utc": 1794406357.929, "url": "https://www.reddit.com/r/netsec/comments/1xtirgl/24_of_afrinics_ipv4_addresses_answer_from_outside/" }, { "title": "Supabase Security findings why RLS is only 25% of the issues", "score": 1, "comments": 0, "created_utc": 1794349274.053, "url": "https://www.reddit.com/r/netsec/comments/1xt0jrg/supabase_security_findings_why_rls_is_only_25_of/" }, { "title": "Cracking Server 2022 NTLMv1-SSP Hashes with Rainbow Tables", "score": 1, "comments": 0, "created_utc": 1794340398.287, "url": "https://www.reddit.com/r/netsec/comments/1xswu2e/cracking_server_2022_ntlmv1ssp_hashes_with/" }, { "title": "Kubernetes Non-Core Security Audit", "score": 6, "comments": 0, "created_utc": 1794324428.117, "url": "https://www.reddit.com/r/netsec/comments/1xspr6l/kubernetes_noncore_security_audit/" }, { "title": "Electron, we have a problem", "score": 20, "comments": 0, "created_utc": 1794310685.236, "url": "https://www.reddit.com/r/netsec/comments/1xskopy/electron_we_have_a_problem/" }, { "title": "IP snowshoeing under US .gov email via a whitelisted AmazonSES typo in SPF", "score": 159, "comments": 12, "created_utc": 1794246079.253, "url": "https://www.reddit.com/r/netsec/comments/1xry7z3/ip_snowshoeing_under_us_gov_email_via_a/" }, { "title": "Certificate authority list: every CA's incident record since 2017", "score": 42, "comments": 5, "created_utc": 1794234275.35, "url": "https://www.reddit.com/r/netsec/comments/1xrsyyg/certificate_authority_list_every_cas_incident/" } ], "words_this_week": [ { "word": "cve", "titles": 17 }, { "word": "rce", "titles": 15 }, { "word": "security", "titles": 10 }, { "word": "php", "titles": 7 }, { "word": "email", "titles": 6 }, { "word": "server", "titles": 6 }, { "word": "php2shell", "titles": 5 }, { "word": "deep", "titles": 5 }, { "word": "dive", "titles": 5 }, { "word": "exploit", "titles": 5 }, { "word": "pre", "titles": 5 }, { "word": "auth", "titles": 5 } ], "preview": "This is a preview. Every post and comment in r/netsec, live, as JSON or RSS on the same paths a Reddit client uses, plus keyword streams to Slack, Discord, webhook or email, needs a free key: https://app.redlisten.com/?signup=1&utm_source=redlisten&utm_medium=subreddit", "docs": "https://redlisten.com/docs", "attribution": "Source: Redlisten, https://redlisten.com/r/netsec" }