r/cybersecurity

Russia struck a Kharkiv power plant hours after Donald Trump announced an energy ceasefire, while Ukrainian drones knocked out three Yandex data centres in four days. Cloudflare Radar data analysed by Valdrans shows traffic from Yandex's network falling in step with each strike, collapsing by about 94% on 11 October.

All HTTP requests from Yandex AS13238 as a share of the period's maximum; the dashed line is the previous week. At 18:00 UTC on 11 October the reading was 7%, against 82.6% at the same time a week earlier. Source: Cloudflare Radar (CC BY 4.0).

Trump announced the "energy ceasefire" on Truth Social on 11 October, saying it was effective immediately and that "both parties have agreed". As Valdrans reported earlier on Sunday, Kyiv appeared to learn of it from the post. Volodymyr Zelenskyy said Ukraine would observe a halt if Russia did, and had already offered to stop striking Russian refineries if the Kremlin stopped attacking Ukraine's grid.

• Sasovo, Ryazan region (night of 7 to 8 October). Yandex said the site was "seriously damaged" and completely shut down. Reuters reported that it houses two of the three supercomputers the company uses to develop its AI models.
• Kaluga region (9 October). Yandex said part of the site's infrastructure was out of service.
• **Vladimir region (11 October).**Yandex said drone damage forced a complete shutdown of the data centre. No one was hurt, but some of its services were unavailable.

In its own statement, Yandex warned customers that it was "very difficult to say" when the equipment would be running again. It listed the kinds of services affected: navigation and traffic, music and video, grocery ordering and the business tools companies use to take orders.

This is the weekly thread for career and education questions and advice. There are no stupid questions; so, what do you want to know about certs/degrees, job requirements, and any other general cybersecurity career questions? Ask away!

Interested in what other people are asking, or think your question has been asked before? Have a look through prior weeks of content - though we're working on making this more easily searchable for the future.

Don't mess with the US Government? Anyone else is fine..

Hi all,

I currently work as a Developer in a fintech company. I've been offered a GRC Engineer role on a team focused on automating GRC processes — reporting to a senior manager, under a director whose entire org (multiple teams) is staffed by analysts, with no engineers currently in that chain.

I've already accepted the offer — pay and level were a solid step up from my current role. But I'm unsure if this move makes sense long-term, since I'm essentially the only engineer in an otherwise analyst-heavy org.

For those in cybersecurity/GRC: what kind of automation work should I focus on to bring real value here? And how should I think about planning my career from this position — does being the "engineer among analysts" set me up well, or is it a narrowing path?

Appreciate any guidance.

(Used AI for correction of grammar)

This is the weekly thread for career and education questions and advice. There are no stupid questions; so, what do you want to know about certs/degrees, job requirements, and any other general cybersecurity career questions? Ask away!

Interested in what other people are asking, or think your question has been asked before? Have a look through prior weeks of content - though we're working on making this more easily searchable for the future.

we had two spoofed vendor invoices hit our accounting desk last week with altered wire instructions and updated routing numbers. our mail gateway filtered out basic dkim failures, but these came from lookalike domains that passed spf checks. we currently run bitdefender gravityzone cloud security across our endpoints to flag malicious attachments, but since these spoofed pdfs lack executable payloads or macro scripts, endpoint tools obviously cannot replace strict payment verification procedures on their own.

i am trying to put together a tighter operational setup that pairs technical email controls with strict human verification. we are enforcing mandatory out-of-band phone callbacks using existing vendor directory numbers whenever banking details change, along with targeted phishing training for AP staff. hoping to see what specific callback protocols and dual-approval workflows you guys use to stop accounting from accidentally processing a fraudulent payment.

Almost half a month ago i submitted a report to a program on cantina i set the severity as high (remember this) then almost a week later the triager asked for a few extra things to continue the triaging i had some of the files he asked for but some i didn't had i honestly accepted that and in a later comment on the report i gave everything i had and also asked that i would be willing to downgrade the severity to medium(but i didn't change the original high) then few days later he marked my report as a duplicate of a rejected finding (as you can see the status of the report if it was rejected) not only this but he also upgraded the severity to critical now i was so confused and i submitted a ticket to cantina support team and also mailed them but 6 business days later no response had came yet i am seeking help or advice on this situation please yelp!

future pen tester here, heard ai can save u time, etc but i’m not sure if it actually does the job since i don’t wanna get stuck or helpless in the future

[removed]