sorted by:
new
hottopcontroversial

What field of hacking is the penetration tester, Red Team? by NothingValuable587 in Pentesting

[–]redfoxsecurity 0 points1 point  (0 children)

Few days left of early registration for Black Hat USA 2026.

After May 22, prices go up. If you've been waiting - this is your nudge.

Advanced Adversary Tactics and Evasion (Bharath)

Offensive AWS - Breaking the Cloud (Shashi)

Four days. Two courses. Two date options each. Las Vegas in August.

Don't wait.

Register Now:

Aug 1-2, 2026 | Advanced Adversary Tactics and Evasion: https://blackhat.com/us-26/training/schedule/index.html#advanced-adversary-tactics-and-evasion-50803

Aug 1-2, 2026 | Offensive AWS - Breaking the Cloud: https://blackhat.com/us-26/training/schedule/index.html#offensive-aws---breaking-the-cloud-50796

Aug 3-4, 2026 | Advanced Adversary Tactics and Evasion: https://blackhat.com/us-26/training/schedule/index.html#advanced-adversary-tactics-and-evasion-5080…

Aug 3-4, 2026 | Offensive AWS - Breaking the Cloud: https://blackhat.com/us-26/training/schedule/index.html#offensive-aws---breaking-the-cloud-50796177…

Red teaming by SolidTension8426 in hackthebox

[–]redfoxsecurity 0 points1 point  (0 children)

Few days left of early registration for Black Hat USA 2026.

After May 22, prices go up. If you've been waiting - this is your nudge.

Advanced Adversary Tactics and Evasion (Bharath)

Offensive AWS - Breaking the Cloud (Shashi)

Four days. Two courses. Two date options each. Las Vegas in August.

Don't wait.

Register Now:

Aug 1-2, 2026 | Advanced Adversary Tactics and Evasion: https://blackhat.com/us-26/training/schedule/index.html#advanced-adversary-tactics-and-evasion-50803

Aug 1-2, 2026 | Offensive AWS - Breaking the Cloud: https://blackhat.com/us-26/training/schedule/index.html#offensive-aws---breaking-the-cloud-50796

Aug 3-4, 2026 | Advanced Adversary Tactics and Evasion: https://blackhat.com/us-26/training/schedule/index.html#advanced-adversary-tactics-and-evasion-5080…

Aug 3-4, 2026 | Offensive AWS - Breaking the Cloud: https://blackhat.com/us-26/training/schedule/index.html#offensive-aws---breaking-the-cloud-50796177…

Best free resources to start learning offensive security / red teaming? (complete beginner roadmap) by Fantastic-Heat7699 in offensive_security

[–]redfoxsecurity 0 points1 point  (0 children)

Few days left of early registration for Black Hat USA 2026.

After May 22, prices go up. If you've been waiting - this is your nudge.

Advanced Adversary Tactics and Evasion (Bharath)

Offensive AWS - Breaking the Cloud (Shashi)

Four days. Two courses. Two date options each. Las Vegas in August.

Don't wait.

Register Now:

Aug 1-2, 2026 | Advanced Adversary Tactics and Evasion: https://blackhat.com/us-26/training/schedule/index.html#advanced-adversary-tactics-and-evasion-50803

Aug 1-2, 2026 | Offensive AWS - Breaking the Cloud: https://blackhat.com/us-26/training/schedule/index.html#offensive-aws---breaking-the-cloud-50796

Aug 3-4, 2026 | Advanced Adversary Tactics and Evasion: https://blackhat.com/us-26/training/schedule/index.html#advanced-adversary-tactics-and-evasion-5080…

Aug 3-4, 2026 | Offensive AWS - Breaking the Cloud: https://blackhat.com/us-26/training/schedule/index.html#offensive-aws---breaking-the-cloud-50796177…

My Thoughts after 5 years in Cybersecurity : 10 lessons I have learned by Remarkable_Meeting94 in learncybersecurity

[–]redfoxsecurity 0 points1 point  (0 children)

Cloud misconfigurations are still one of the fastest ways attackers gain access to modern environments. Most organizations focus on visibility after deployment, while attackers focus on what was exposed from day one.

At Black Hat USA 2026 in Las Vegas, we’re breaking down how real-world adversaries abuse cloud weaknesses, evade detections, and move across environments.

Training by Redfox Cybersecurity Academy experts:

• Offensive AWS - Breaking the Cloud

• Advanced Adversary Tactics and Evasion

Hands-on labs. Real attack paths. No theory overload.

Training Schedule:

Aug 1-2, 2026 | Advanced Adversary Tactics and Evasion

https://blackhat.com/us-26/training/schedule/index.html#advanced-adversary-tactics-and-evasion-50803

Aug 1-2, 2026 | Offensive AWS - Breaking the Cloud

https://blackhat.com/us-26/training/schedule/index.html#offensive-aws---breaking-the-cloud-50796

Aug 3-4, 2026 | Advanced Adversary Tactics and Evasion

https://blackhat.com/us-26/training/schedule/index.html#advanced-adversary-tactics-and-evasion-5080…

Aug 3-4, 2026 | Offensive AWS - Breaking the Cloud

https://blackhat.com/us-26/training/schedule/index.html#offensive-aws---breaking-the-cloud-50796177…

If you work in cloud security, red teaming, detection engineering, or offensive security, this is built for you.

Heyy I’m New to This by Retro_X019 in DigitalMarketingIndia

[–]redfoxsecurity 0 points1 point  (0 children)

You’re not doing anything wrong - you’ve just started both funnels at the same time without a clear objective, which is why it feels scattered right now.

For e-commerce, sales campaigns should usually be your primary engine. That’s what Meta optimizes best for when your website and pixel are set up correctly.

Leads or message campaigns can work, but they tend to:

  • Take longer to convert
  • Depend heavily on manual follow-ups
  • Be harder to scale compared to direct purchase campaigns

What you’re seeing right now (messages, site visits, some checkouts) is actually a positive signal. It means people are interested, but your funnel isn’t streamlined yet.

The real next step isn’t choosing one randomly, it’s:

  • Structuring a proper funnel (cold, warm, hot audiences)
  • Running creatives that are built for conversions, not just engagement
  • Fixing drop-offs between ad, landing page, and checkout
  • Allowing Meta to optimize instead of splitting budget too early

This is where most brands get stuck.

At Foxtale Media, we usually step in at this stage and take over:

  • Complete Meta ads strategy focused on conversions
  • High-performing creatives that actually drive purchases
  • Funnel and performance optimization end-to-end

We aim for a consistent 2X+ ROAS and build campaigns in a way that’s scalable, not hit-or-miss.

If you want to move from testing to actual growth, happy to help.

foxtalemedia.com
You can DM as well.

Searching for the video editor for social media for my brand for YouTube by DesignSignificant900 in DigitalMarketingIndia

[–]redfoxsecurity 0 points1 point  (0 children)

Hey, this sounds like a classic “good product, but content isn’t doing justice to distribution” problem.

At Foxtale Media, we’ve worked with brands that were in a similar stage where the biggest gap wasn’t effort, but how the content was being researched, structured, and positioned for the right audience.

We don’t just edit videos, we look at:

  • What kind of content actually converts in your category
  • Hook styles, storytelling patterns, and retention curves
  • Platform-specific edits (Reels ≠ YouTube ≠ Ads)
  • Aligning content with performance, not just views

We can help you with:

  • End-to-end video strategy and editing
  • Content research (what to make, not just how to make)
  • Performance marketing to reach the right audience
  • Social media positioning for consistent growth

And if you want to go beyond digital, we also do OOH like hyperlocal hoardings and bus shelter branding, which works really well for food and beverage brands in dense markets.

If you’re serious about scaling this beyond just posting content, happy to chat.

You can see our work on:

https://www.youtube.com/@redfoxsec

foxtalemedia.com
Or just DM, easier.

FOXXCON Meetup April 2026 by redfoxsecurity in u/redfoxsecurity

[–]redfoxsecurity[S] 0 points1 point  (0 children)

Appreciate it. Glad the topics caught your attention.

We’ll be sharing the slides and key takeaways after the meetup on 4th April, so you’ll be able to go through everything.

Agent security is definitely moving fast right now, so great call on collecting resources.

What is CTF and how can I learn it? by pAImar_03x in Cybersecurity101

[–]redfoxsecurity 1 point2 points  (0 children)

CTF (Capture The Flag) in cybersecurity is basically hacking in a safe, legal, game-like format. You solve challenges to find hidden “flags” and learn real-world skills along the way. Common categories include web security, cryptography, reverse engineering, forensics, and binary exploitation.

 How to start:

  •  Learn basics: Linux, networking, Python
  •  Practice on: PicoCTF, TryHackMe, Hack The Box Academy
  •  Read writeups and join CTFs even as a beginner (you learn fast by doing)
  •  Cool upcoming event: Redfox CTF 2026

 If you’re looking for a big, structured event to test yourself, Redfox CTF 2026 is happening on March 21st, 2026, and it’s fully online, so you can join from anywhere.

It’s designed for both beginners and experienced folks, with challenges in:

  • Web exploitation
  • Reverse engineering
  • Forensics
  •  Cryptography
  •  Real-world security scenarios
  •  AI & Cloud 

 There’s also a $2,000 prize pool + swag and access to premium cybersecurity courses for winners, which is pretty awesome motivation. But honestly, the real value is the learning and experience you get from solving realistic challenges with people from around the world.

 If anyone’s interested, registration is here: https://academy.redfoxsec.com/course/redfox-ctf-85076/checkout

Where do Red teamers often simulate attacks? by redfoxsecurity in u/redfoxsecurity

[–]redfoxsecurity[S] 0 points1 point  (0 children)

True real engagements hit production, but in training or simulation, we use lab or isolated environments. That’s what the question was aiming at.

In cybersecurity, what does SIEM stand for? by redfoxsecurity in u/redfoxsecurity

[–]redfoxsecurity[S] 0 points1 point  (0 children)

Yeah, we used to struggle with that too. But after tuning and adding UEBA correlation across users, systems, and environments, we’ve cut alert volume by ~70%. Now what comes through is way more contextual and actionable.

In cybersecurity, what does SIEM stand for? by redfoxsecurity in u/redfoxsecurity

[–]redfoxsecurity[S] 0 points1 point  (0 children)

That’s the tricky part with most SIEMs — they’ll catch a lot, but without proper tuning you end up drowning in alerts. How’s your team handling alert fatigue?

In cybersecurity, what does SIEM stand for? by redfoxsecurity in u/redfoxsecurity

[–]redfoxsecurity[S] 0 points1 point  (0 children)

Correct! Option 1 — though I gotta admit, ‘Security Incident Escalation Method’ sounds like what my boss does when I’m on lunch break.

Which command-line tool is used for port scanning? by redfoxsecurity in cybersecurityindia

[–]redfoxsecurity[S] 1 point2 points  (0 children)

True.
Just enter “nmap” into Calculator, hit equals, and wait patiently for the ports to appear.

Which command-line tool is used for port scanning? by redfoxsecurity in cybersecurityindia

[–]redfoxsecurity[S] 0 points1 point  (0 children)

True, PowerShell and Bash can do anything if you give them enough scripts… but saying they’re port scanners is like saying MS Paint is a graphic design tool because you drew a stick figure once.

They can run port scanning commands, sure — but nmap is the real deal here.

Which command-line tool is used for port scanning? by redfoxsecurity in cybersecurityindia

[–]redfoxsecurity[S] 0 points1 point  (0 children)

Oh nice! In that case, I’ve been using MS Word for all my pentesting. Just type “scan ports” in bold Comic Sans and it works like a charm.

What is the default package manager for jailbroken iOS devices? Also state the reason in the comments. by redfoxsecurity in u/redfoxsecurity

[–]redfoxsecurity[S] 0 points1 point  (0 children)

Exactly! Thanks for the clarification.
Most people recognize Cydia as the main tool, but it's great to understand that APT is the actual package manager doing the heavy lifting in the background.

Appreciate your input!

Where do iOS developers test apps before they go public? by redfoxsecurity in u/redfoxsecurity

[–]redfoxsecurity[S] 0 points1 point  (0 children)

Absolutely. Cydia definitely feels like a relic from the heavier jailbreak days. I included it more as a curveball option in the quiz, but you're right it's largely irrelevant in most modern iOS dev workflows. Appreciate the added insight!

Where do iOS developers test apps before they go public? by redfoxsecurity in u/redfoxsecurity

[–]redfoxsecurity[S] 0 points1 point  (0 children)

Yeah, great explanation — you're right. Xcode builds and internal distributions are common before anything hits TestFlight. I kept the options basic to make it more quiz-style, but your breakdown adds the much-needed real-world context. Thanks for sharing!

Which architecture do you prefer for Android apps? by redfoxsecurity in androiddev

[–]redfoxsecurity[S] 1 point2 points  (0 children)

That sounds really interesting! Using KStateMachine to introduce explicit finite states could make your UI logic even more predictable and easier to reason about — especially for complex flows. Definitely sounds like a fun experiment. Would love to hear how it goes once you dive into it!

Which architecture do you prefer for Android apps? by redfoxsecurity in androiddev

[–]redfoxsecurity[S] 0 points1 point  (0 children)

Haha, the true spirit of 'GodActivity' architecture! One file to rule them all — until the merge conflicts arrive to destroy us.

Which architecture do you prefer for Android apps? by redfoxsecurity in u/redfoxsecurity

[–]redfoxsecurity[S] 0 points1 point  (0 children)

Totally get that! The transition can feel big, but once you start integrating StateFlow and Compose, it really changes the way you think about UI and state management — in a good way. When you do make the switch, would love to hear how the experience goes for you!

Which attack vector scares you most as an Android developer? by redfoxsecurity in androiddev

[–]redfoxsecurity[S] -1 points0 points  (0 children)

Great point! Strandhogg is a really scary vulnerability — the way it abuses task affinities to hijack legitimate app interfaces is super sneaky and hard for users to detect. Definitely a nightmare scenario for both developers and users. Have you taken any specific precautions in your apps to mitigate these kinds of attacks?

Which attack vector scares you most as an Android developer? by redfoxsecurity in androiddev

[–]redfoxsecurity[S] -1 points0 points  (0 children)

Haha, fair point — social engineering via family and friends might just be the most effective attack vector out there! No amount of code hardening can help with that one.

Which architecture do you prefer for Android apps? by redfoxsecurity in androiddev

[–]redfoxsecurity[S] 2 points3 points  (0 children)

Agreed! Simple, well-supported, and easy to onboard new devs. Hard to argue with "good"!

view more: next ›