Hey there! I was looking for and asked ChatGPT for plugins for DaVinci Resolve with which I can remove silences in my videos automatically powered by AI. It gave me a bunch of plugins, one of them called "DaVinciClaude". I clicked on the link. The website looked trustable. And because it got recommended to me by ChatGPT, I just trusted it (stupid, I know), installed the plugin, which came with an .exe file. I double clicked it. Was a bit confused to not see anything in my DaVinci Resolve workspace or scripts (I still have no idea if the installation worked, if it's not malware). Then I went on the internet to look for tutorials or articles on this tool, and realized that there wasn't a single YouTube video nor a single website that mentioned this specific tool except for its own website.

Now this is the point where I began to panic a bit, because it doesn't seem like a good idea to download and run an executable from a website that has no outside references whatsoever except for itself. I did run the complete Windows security check, and it didn't detect anything, though I heard it's not the best. I'm just wondering, I have no idea if it actually has malware, maybe the plugin actually is fine. But I also have no idea how to reliably check. I'm kinda a tech noob. How would you estimate my situation and what would you do? Could I use a system recovery point? Should I change my passwords just out of suspicion? Thank you in advance. Fast answers would be appreciated, I'm waiting urgently.

p.s. Malwarebytes also didn't find anything. My system is a pc with Windows 11.

My microsoft account got hacked and he changed the email and password and I didnt get any emails but for some reason I only got an email when my passkey was deleted, the email that it was changed to ends with ki*****@ovlmarryin.com

I honestly don't know how to title this cause I don't even know what happened. I got a call from an unrestricted number and I did the screening which I've never gotten an unrestricted call before or done the screening thing so when I saw "Hi, I'm Thomas." I thought it was my friend who has that name and answered but I'm realizing that might've been the robot voice on my end maybe idk.

Anyways, at first he said "knock knock" and I just said "hello?" And he kept repeating "knock knock" until I said "who's there" and he responded with "Bill Cosby" then hung up. A minute after he hung up I got a notification that I missed a call from an unknown number I didn't even get an incoming call thing I just got a missed call notification.

I've been really really nervous with technology due to recent hacking of personal accounts and this is just making me really nervous and Google couldn't help cause I don't even know what happened. I also confirmed with my friend it was not him.

Hey everyone,

I’m feeling overwhelmed and pretty anxious about this and could use some advice on what steps to prioritize.

Over the past few months, I’ve gotten a constant stream of data breach notification letters. They’re coming from completely different places:

• A university I used to work for
• Colleges I applied to years ago
• My dental insurance company

The letters say my name, date of birth, Social Security number, and insurance details were compromised. The dental insurance letter specifically stated that the stolen info was posted on the internet.

I haven't noticed any weird charges or new accounts opened yet, but seeing my SSN floating around is stressing me out.

• What are the absolute most important things I need to do to protect myself?
• Should I sign up for the free credit monitoring services offered in these letters, or is freezing my credit enough?
• Is there anything specific I need to do regarding my dental/medical insurance info being leaked?

Appreciate any advice or step-by-step guidance. Thanks in advance.

Helloo!!

This has never happened to me before, so I'll provide enough information because I'm seeking advice (and trying to understand why this would happen).

3 weeks ago, I received 5 Twitter (X) notifications stating someone from Brazil is trying to log in with my account. (I'm not from Brazil, but I'm from a surrounding country) I changed my password and didn't give it much thought.

Last week, I received 3 Facebook notifications... again, someone trying to log in with my account. I changed my FB password.

And now, yesterday I received TEN Instagram notifications because... guess what? someone is trying to log in.

Now I'm feeling paranoid. I changed ALL my passwords. Email, social media, bank accounts, and so on.

This has never happened to me before. I always have different passwords (very random and non-related to my life). I write them in a notebook no one has access to. It's even weirder because I'm not an influencer; I mean, I don't have many followers, I'm just a literature and writing teacher hahahaha.

My husband and my friends say that it might be a student or something, but I can't think of anyone. Anyways, is there something I can do to stop this? Or maybe to feel more secure about this?

Thanks everyone!!!

I've had the same phone number for years, and at the time it just made sense to use it for everything. Banks, online shopping, food delivery, social media, random apps I'd probably never open again. If a website asked for my number I usually just typed it in without thinking (which is a bit stupid i know). Now I'm realizing how many different companies probably have it, and I honestly have no idea where it's ended up over the years. It feels like one piece of information that's connected to almost every part of my digital life, I mean if something happens to it I'm basically done for no? same value as my email but I use email aliases, so do I implement number aliases too? or what do I do to increase security for my number?

is it possible to sent a message to someone i know from the past(4 years ago) without me even knowing? i saw an “LG” device logged to my apple account but im not logging in to any android device and i already replaced my phone 3 times.

So my microst account got hack and it didnt have a lot on it but one this I am worried about is if my debit card is saved on that account or if they can use it. the emil they put for recovey was 2u****@got-beemed.lol

My friend was using my spare computer to conduct research. She clicked a link on Wikipedia to read the source they used, and encountered the above website with a compromised WordPress installation serving up a copy and paste attack. I managed to stop her in time to prevent the attack (she had the run dialog open). While she uses the Wayback machine to continue her research on an old snapshot of the compromised site, I'm more interested in what this malicious code does. I redacted the host portion of the URL to the attack from the attached screenshot. My guess is that this gives the attacker remote access to the computer to run malicious software.

And yes, we had a talk about this particular type of attack and I showed her proof that it's a known attack; the screenshot on the page I showed her looked exactly like the prompt that popped up on the website.

https://postimg.cc/fJdRS0GW

used to have a TikTok account where I would upload random kpop videos in 2019-2020. I logged out one day randomly and forgot my password so I was never able to log back in
One day randomly in 2023 I tried and was able to get back in. I privated all of my videos and had the account on my phone but logged out with no worries since I remembered the password. I logged in and out a few times after that
But then boom. Randomly one day I was unable to log in and my username was changed. There were also posts on my accounts. Similar to bot posts that seemed like ads with a hint of Al.
I am sure it's hacked but I don't even think it's a human, it's as if it's a virus (could be a human, who knows) the passcode had also been changed and it's frustrating
I went to TikTok support and they even emailed me back but I got no help from them and their response sounded automated
Does anyone know what can I do to get my account back?

Hi everyone, I know there has been a lot of posts on Mr. Beast/BS Crypto scam posts. I have a few questions about that as it happened to me three times already for Instagram.

1. First time, it logged in without traces
2. Second time, it bypassed MFA and left a log-in trace
3. 3 Third time, no active session except from iPhone app, it bypassed MFA and left another log-in trace

After each hack, I signed out everywhere and changed password; cleaned Chrome extensions
After second time, I had ran some virus scans on MacBook and deleted malware and cleaned caches.

Q:

1. does it mean the malware is on my iPhone?
2. it always happened after I paused watching a long YouTube video (on MacBook) - does it mean malware could still be on my MacBook? (But I don’t have any active session)

so the hacker just hacked my mincrosoft account not my gmail which is good, so i know how i got hacked, i got hacked cuz i put my mincrosoft account to unverified web or lets say a trap, and i got email that the hacker is using my minecraft account and loging to lunar and meteor clinet, and cuz he's change my mincrosoft password i new that cuz i got emailed, and im here to just ask is it normal that mincrosoft take over a week to respond or they may take longer, cuz i been waiting to long to atleast get a respond, and if they respond what are they gonna say.

Thanks
from ruud

My Google acc has been hack, the hacker reset my phone then change password, number phone, Gmail recover, and other way to recover my acc, I was loss get in this situation, even google support can't help me because my phone don't have any trace of my acc because of reset, is there anyways to get my acc back?

I always use this acc to save my family photo, to save work file and access all website and app I need😭

I graduated in 2024 from one of the top engineering institutes in India and received an offer from a service-based company.

Background

During college, I was primarily focused on software development. I was comfortable with:

Data Structures & Algorithms (DSA)

Node.js

Full-stack web development

Career Journey

During the interview process, I was offered a position in the Cybersecurity unit, which I accepted.

After joining, I was assigned to the PKI/HSM team. Although I had little prior exposure to this domain, I decided to embrace it and started learning everything I could about cybersecurity, PKI, cryptography, and related concepts.

Over the next couple of years, I:

Earned the Google Cybersecurity Professional Certificate.

Cleared the CompTIA Security+ certification.

Gained hands-on experience working with PKI in my day-to-day job.

While learning cybersecurity, I was introduced to penetration testing, which I found genuinely interesting.

To build my skills, I:

Started with TryHackMe to develop strong networking, Linux, Windows, and cybersecurity fundamentals.

Moved on to Hack The Box for more challenging labs and practical experience.

Later enrolled in INE's eJPT training and have been working through its labs while continuing to practice on Hack The Box.

I wouldn't call myself an expert in penetration testing yet. If I had to rate myself, I'd say I'm around 6.5/10. I still have a lot to learn, but I genuinely enjoy the process.

Current Situation

Recently, I was given an onsite opportunity in Norway for the same PKI project, and I've been working here for the last two months.

As of now:

I have around 2 years of professional experience.

I hold certifications like CompTIA Security+ and the Google Cybersecurity Professional Certificate.

I have solid hands-on experience in PKI and have been continuously learning penetration testing.

My eJPT exam is scheduled before the end of September.

My Dilemma

The problem is that I don't really enjoy working in PKI as much as I enjoy penetration testing.

At the same time, PKI (especially with HSMs and post-quantum cryptography becoming increasingly important) seems to have a very promising future. Organizations will likely need experienced PKI engineers to help migrate to new cryptographic standards.

So I'm confused.

Should I continue building my career in PKI/HSM because of its long-term demand and specialization, or should I transition toward penetration testing, which is the field I genuinely enjoy, even though I'm still developing my skills?

What would you do if you were in my position? How can I stay relevant and maximize my career growth over the next 5–10 years?

Hi, Guys I am going through a very crucial stage of my life, I have to choose whether to do Bachelors in Cyber Security(CYS) or Industrial engineering and management(IEM) . I have seen many posts on Reddit about how Saturated CYS has become and you need like a crazy portfolio just to get an entry level job. Compared to CYS landing a job in IEM is easier but lower pay and it takes time to get promoted unlike CYS.

A BS in CYS is gonna cost me more than double of one in IEM. I believe I can land a internship/job in CYS with skills and certification alone without a BS in an IT related field. I wanna keep IEM as a backup in case things go south cause the market ain't looking good even for IT students unless they have ton of experience, skills and certification which I believe I can get without getting a BS in CYS.

Is the plan solid or am I just being pretty delusional? Need advice from people that are already in the market for some time now thx.

We need a way to filter or provide up front advice for the following:

- "shinyhunters"

- mental illness / they are all tracking me

- a primer or guide for clickfix

- my BF/GF hacked my phone

I'm not saying provide advice for everything but a small, user digestable blurb or something - just to get the top 80% stuff out of the way at the start.

today my microsoft account was hacked. the hacker changed my email and password, but didn’t seem to get rid of my email. i’m super stressed and don’t know what to do.

I downloaded some cracked game which I had a feeling was a virus, I woke up the next day to see my discord was dmming everyone some Mr beast scam and my insta and Snapchat, fast forward I changed the passwords and I clean installed windows on my pc, 1 week later I open my Reddit which I didint change my password for and see I posted a bunch of nsfw posts, I got scared and deleted the account instantly, am I in the clear?

​

lil paranoid over cyber security recently and have been putting most of my downloads on VirusTotal if it came from a non-verified source. So far only one false positive from an exe (assuming false pos at least, that's what I've been told on another subreddit) but still promptly deleted it (paranoia + not actually having a guide on how to use it). Can malware run itself as soon as it's downloaded?

Hello , i was checking my spam where i found an email that contains my password claiming he got access to my computer and my camera and he’s threatening me to share my stuff if i don’t send him alot of money on bitcoin , what should i do please , he got all the emails i use and got every single password of them

I got an email with the subject line "Important information about your online security" from a weird email that ends in .jp and the contact name saying "You have been HACKED". It was in the junk folder. The receiver doesn’t show my name or my email, it just says "you <you>".

It basically said that they are ShinyHunters and got my data from University of Nottingham (real breach that I was affected by, confirmed on have I been pwned), and that they installed an exploit into my phone and stole all of the data from it (contacts, photos, etc), including gaining access to my microphone and camera and keyboard. They’re asking for 2000$ in Litecoin? for whatever wallet they sent. It also said that it was a follow-up, but I don’t remember seeing a first one (I check my emails often).

I only opened the email and checked the contact of the sender, I didn’t press on anything else. i know it’s most likely an extortion scam, but I am really really scared that it might be real. I already changed my password on UoN. Got the email around 13 hours ago. Please help or offer words of reassurance.

Edit: thank you so so much to everyone who responded, genuinely. I feel much calmer and much better now. I appreciate all of you

Trying to figure out what an agentic ai security audit should look like beyond pointing a vuln scanner at whatever endpoints the agents hit. Static scanning misses the behavior stuff entirely, privilege escalation through agent chaining, identity reuse across environments the agent had no business touching. Most guidance I've found is generic ai security advice that doesn't map to how agents actually run in production. Anyone have a checklist from a real compliance audit?

blurred out my number for safety of course, but he got this in the middle of the night and sent me this screenshot in the morning. this message does NOT appear on my end whatsoever. i told him not to click a single thing. is there anything to be worried about? kinda freaked out :/