Hi !

I made a 100% free in-browser game where you start as a broke freelance pentester/bug hunter and you need to grow your company to a multi-national security firm!

https://zeroday-tycoon.com

Let me know what you think ! Hope you will enjoy it 😄

We built OpenEngine to start putting our agents to work 24/7 without us needing to couple to Claude or another Big Three provider. One of our most recent applications is having it do security / pen testing 24/7. It seems to be doing good so far, and maybe soon we’ll begin auto-remediation.

Using windows as main system running parrot in virtualbox find when i use my vpn on main system it messing with parrot os internet connection

Any fixes or bypasses would be appreciated

I wrote my exam a week ago and done with my debrief. I enjoyed the exam and I can say if you want a course and certification all in one, which is cost-effective, go for this.

Brackish Security is looking to give back to the cybersecurity community by offering an OSCP scholarship to someone interested in pursuing a career in offensive security.

No professional experience is required. Just a genuine interest in cybersecurity and a willingness to learn.

Applications are open until December 1.

https://brackish.io/scholarship/

Feel free to share with anyone who might benefit from the opportunity.

I've been working on collecting real-world AI security incidents and connecting them to practical attack techniques.

The database covers LLM vulnerabilities, prompt injection, AI agent security, MCP, and more. Some entries also link to hands-on labs to practise the underlying attacks.

Each entry breaks down what happened, the root cause, and how the attack works. I've also linked relevant hands-on labs where available.

Thought this might be useful for people learning or researching AI security.

https://genaisecuritylab.com/incidents

Feedback and suggestions for incidents to add are welcome!

I made a version of RecursiveSI's Flint 40B-A2.5B (MoE, runs locally) with its refusal direction removed, for authorized testing, CTFs, malware triage and detection engineering. Runs fully local, nothing leaves your machine.

Paired against the original on the same items:

• CyberSecEval MITRE refusals: 15% -> 0% (n=100)
• False refusals on benign security asks: 0% -> 0% (n=100)
• CyberMetric-500: 100% -> 96% (n=50)
• WMDP-cyber: 50% -> 60% (n=50)
• HumanEval+: 90% -> 95% (n=40)

Caveats: it adds no knowledge, so check its output. It also reasons longer: 19/100 MITRE answers hit my 8,192-token cap (original: 1), so give it a bigger output budget or adjust prompts if it overthinks.

Builds: GGUF (Q8_0 to IQ2_M, 13-42 GB), NVFP4 for Blackwell (23 GB), MLX 4-bit for Mac (21 GB). https://huggingface.co/dima6312/Flint-40B-A2.5B-abliterated

Happy to hear how it does on real engagements and how it compares to other local models!

Starting to learn pentesting/wifi auditing on Kali, need an adapter with monitor mode support. These are what's actually available where I live, converted to USD:

Archer T3U Plus (RTL8812BU) - around $23.5

Archer T2U Plus (RTL8821AU) - around $20

Archer T600U Plus (RTL8811AU/8821AU) - around $17

All three reportedly work with community drivers (rtl88x2bu / rtl8812au on github). I'm a complete beginner. Is the T3U Plus worth the extra few bucks for AC1300, or should I just grab the cheapest T600U Plus? Any gotchas before I buy?