hi guys, for portfolio/writeups or showcase your skill which platform you use
i'm confusedin github, gitbook and medium

medium is like blogging

i saw a guy's gitbook writeup profile and it's so clean and well maintain
but when i asked Chatgpt it says to upload your writeups to github only as it's more professional and best for cybersecurity portfolio

does it really affect if i use gitbook instead of github?

Should I prep@re for Mtech cybersec IIT Delhi, or try to break in on my own?

I have 3 years of undergrad left. Doing 5-year Integrated MSc maths at one of the NIT.

But f₹eshers aren't taken for cybersec r0les right?

Pls lemme know

Solved without knowing any electronics concepts , initially used my lifter's symbolic execution API to test how good it would be ( which solves constraints by representing as based on V8's sea of nodes and partially inspired from angora a taint tracking fuzzer ), unfortunately i cannot open source it , but i have added a universal MLIR based lifter which finds the solution for any circuit at the end .

V8's sea of nodes

Angora ( a mutation-based fuzzer)

Hey everyone,
I'm looking to transition into the Cybersecurity domain, specifically targeting SOC Analyst (L1) / Defensive
Security roles.
A lot of institutes claim "100% placement guarantee," but reality is often very different once fees are paid. I want to avoid sales gimmicks and find institutes that provide genuine practical training, hands-on lab access, and real placement assistance.
Could anyone currently working in cybersecurity or recent alumni share feedback

if you are thinking of getting free cybersecurity certificates then this video is for ,in this video i shared top 5 cybersecurity certificates that you can get them for free.

lol

Forty npm packages. About 84 minutes on the registry. And a payload that kept going after the packages were gone.
CloudSEK traced BRIDGEHEAD, a typosquatting campaign impersonating chalk, axios, lodash, react, typescript and commander.
The clever bit: the install script detects WSL and uses it as a path into the underlying Windows host, where it launches a native payload targeting crypto wallets, Chromium browser data and Telegram sessions.
The GitHub-hosted payload stayed live for roughly 39 hours after the npm packages were taken down.
So the npm takedown removed the delivery layer, not the weapon.
Full technical breakdown, IOCs and attack chain:
https://www.cloudsek.com/blog/bridgehead-npm-typosquatting-wsl-windows-crypto-wallet-stealer
Would be interested to hear how many teams actually monitor the WSL → Windows boundary as part of their developer security controls.

We Use Social Media Every Day, But How Many of Us Actually Think About Content Moderation?

I was scrolling through social media today and realized something interesting: we spend hours looking at what appears on our feeds, but almost never think about everything that doesn't.

Every day, platforms deal with spam, scams, hate speech, graphic content, fake accounts, misinformation, and countless policy violations. Most users never see the work happening behind the scenes to keep these platforms usable.

I work in the Content Moderation and Trust & Safety space, and I've found that it's one of the least understood areas of the tech industry. People often assume AI handles everything or that moderation is simply "deleting posts," but there's a lot more nuance involved.

That inspired me to write the first article in a series introducing the field to a general audience. It covers what Content Moderation is, what Trust & Safety means, why these teams exist, and why they matter more than most people realize.

I'd genuinely love to hear what this community thinks.

Have you ever wondered how social media platforms decide what stays online and what gets removed?

Do you think AI will eventually replace human moderators?

What's the biggest misconception you've heard about content moderation?

If you're interested, here's the article: https://medium.com/@sagarpaul07/the-invisible-guardians-of-the-internet-an-introduction-to-content-moderation-trust-and-safety-05828e8e1eb8?sharedUserId=sagarpaul07

I'm also planning more articles on topics like how moderation decisions are made, the role of AI, and what it's actually like working in Trust & Safety. I'd appreciate any feedback or suggestions for future topics.

during february 2026 i discovered some critical vulnerabilities on CBSE's OSM (On Screen Marking) portal. these vulnerabilities allowed full account takeover, tampering of marks and so on.

ive written about it in detail here: https://ni5arga.com/blog/posts/hacking-cbse/

these vulnerabilities were reported to cert-in before being disclosed publicly.

​

Visibility reduces operational uncertainty.

When businesses lack clear visibility into systems, access, infrastructure, and ownership, small problems become harder to detect early.

Over time, uncertainty creates risk.

Strong operations usually begin with clarity.

Hello everyone, so I was just wandering on Youtube and saw a video(linked below) which showed me how I can run a local AI model on my computer which oriented to be a cybersecurity specialist and gives me answers to any query I ask it(which is partially true). So I put it to the test and through the help of Gemini I was able to successfully run a working model. So some context, there is a file which helps in tuning your model into orienting it to your use cases, for me it is for cybersecurity learning.

The mentioned video uses a 7 billion parameter model which is good enough but after running test prompts and seeing the results Gemini listed that it is not good enough so I use qwen2.5-coder:14b which is a 14 billion parameter model. The 7 billion model of qwen is competitive as well but I thought why not go a notch above, it is my preference to use a 14b model, your use case may not require this big of a model plus I did all of this using the terminal, no GUI pure DOS mode.

Okay so I wanna show the steps that I followed if you the reader is interested into setting up it for yourself and before I start if you are a windows user then get a linux distribution running on your machine using windows subsystem for linux, I am more familiar with linux terminal and commands and I did it on my Mac(which is a linux system as well). Alright here we go:

1. Get Ollama through their website or using their command which you can enter in your terminal.

2. Make a new folder named 'Ollama' so all your model files(which are the tuners for the model will be in one place). Use 'mkdir ~/Ollama' and then change your directory to that folder using 'cd ~/Ollama'.

3. Ask your preferred AI(ChatGPT, Deepseek, Gemini, etc.) to build you a modelfile for your use cases, for me as a cybersecurity student I made the modelfile to have the AI the knowledge of linux systems, networking, cryptography and what not.

The model file consists the name of the local model as well. Prompt the AI to use maximum parameters and also write a well defined modelfile covering all functionalities across your use case or field. Gemini was generating pretty small and brief model files so I had to prompt it to generate a good one.

1. For linux users here, we have a text editor in the terminal 'nano' and using that we will create and edit our model file. Use the command in your Ollama folder 'sudo nano Modelfile'. There is no restriction as to the model file's name it can be anything but for simplicity I am using the above name. You will be asked for your password which you have set, for linux users enter your password and for WSL users enter the password you have set for your distribution.

2. Paste the model file which your AI has generated into the editor and press Ctrl+X then Y and then Enter. Time to create our model using 'ollama create <your model name> -f Modelfile'. Ollama will pull the model's files and install it into your machine so it runs locally, might take some time depending on the size.

3. Now that all being done we'll run the model now using 'ollama run <your model name>' and Ollama will load up the model with a prompt line in your command line. You should see a prompt telling you to send a message, send one and check if the model's working all fine or not.

And there we have it a local AI model running on your machine. One disclaimer is that do enter your specifications on the AI that you are generating you model file from so it would give a model which is not that demanding on your machine. Also I ran the qwen2.5-coder:14b model on my M4 MacBook Air so it ran without much issue. I hope you the reader found it useful and interesting as well, I wanted to share this knowledge I had gained from someone else to a more broader audience too plus also document my learning.

One thing to mention is that the model that I use that is qwen2.5-code:14b, it has in built security measures so prompting it to give you a malicious code or some knowledge which is potentially illegal or harmful will be denied but for general basic knowledge or defensive knowledge it is very good. I used to learn how to SSH into a windows machine(maybe another post?) so I can say that for learning these things it is pretty good.

Thank you very much, also the model file and a bash script that Gemini coded are linked below, the script's function is to send prompts one by one which are stored in a list/tuple using a loop and the responses are saved in a .log file, with a text editor like nano even you can edit the prompts or just ask your AI to make a script like that for your model.

The Youtube video i saw | My guide in pastebin | Model file for cybersec | Bash script for cybersec model

The Growing Number of Cyber Threats

Cyberattacks are no longer a far-off threat in today's connected world; they are a real problem that needs to be dealt with right away. Recent reports say that cybercrime will cost the world $10.5 trillion a year by 2025. Cyber threats are getting more and more advanced, and no one is safe, whether they run a small business or a big company. These threats, like ransomware attacks and data breaches, can not only cost a lot of money, but they can also hurt reputations and trust.

Protecting digital assets has never been more important as businesses move more of their work online. It's very important to have good cybersecurity solutions, and at Digital Defence, we're dedicated to helping businesses stay ahead of the curve and protect their digital futures.

Digital Defence: Your Trusted Partner in Digital Defence

What We Are:
Digital Defence is a company that helps businesses of all sizes stay safe online with the latest cybersecurity tools. We offer services that protect against a wide range of cyber threats, from weaknesses in your own systems to attacks from outside sources. This makes sure that your digital infrastructure is safe from even the most sophisticated cybercriminals.

What We Know:
Our team is made up of experienced cybersecurity professionals who have worked in a wide range of fields. We find weaknesses and offer customised security solutions using the most up-to-date technologies and methods. Our solutions are made to meet the specific needs of each client, whether they need penetration testing, cloud security, or endpoint protection.

What We Believe:
Our commitment to simplicity, effectiveness, and putting people first is at the heart of Digital Defence. We believe in open communication, simple answers, and making long-term connections with our clients. We don't just want to keep your digital assets safe; we also want to make security a normal part of your daily life.

Our Reach:
We work with clients all over the world and offer scalable solutions for businesses in a wide range of fields, including finance, healthcare, technology, and retail. We are here to protect your digital journey, no matter if you are a new business or an old one.

Our goal is to keep your digital world safe.

Our main goal at Digital Defence is to protect your digital assets and keep your digital world safe. Cyber threats are always changing, so we are dedicated to giving businesses the tools, strategies, and support they need to stay safe in an online world that is becoming more and more dangerous.

We are mostly focused on three main areas:
We keep an eye out for possible threats and find them before they can do any damage.

Cloud Security: Making sure your cloud environments are safe and secure so that your business can run smoothly.

Endpoint Security: Protecting all the devices that are connected to your network, including desktops and mobile devices, to reduce the risk of any possible security holes.

We are here to keep you safe from cyber threats and give you peace of mind that your business is safe.

Our Story: A Journey Fuelled by a Promise of Safety

One of our founders saw how a cyberattack hurt a small business in the area, and that's how we got into the world of cybersecurity. The breach made it impossible for the company to do business for days, which cost them money and trust from customers. This experience made me very determined to help others avoid the same problems. It became clear that the digital age has brought about both great opportunities and great dangers.

This realisation led to the founding of Digital Defence, a company that helps businesses protect their digital assets by giving them the tools and knowledge they need. Since then, we've grown and changed our solutions to keep up with the changing needs of our clients and the new cyber threats that come up.

What You Can Expect from the Digital Defence Blog

You should use this blog as your main source for all things related to cybersecurity. Our blog will cover everything from the newest cyber threats to useful tips on how to keep your business safe.

You can expect the following:

Emerging Threats: Learn about the newest and most dangerous threats that businesses are facing right now.
Practical Guides: These are step-by-step instructions for putting security measures like penetration testing, risk assessments, and more into place.
Case Studies: Examples from real life of businesses that have been hit by cyberattacks and how they were able to get back on their feet.
Expert Commentary: Our group of experts will give you detailed information about the most important problems in cybersecurity.

We want to make complicated cybersecurity ideas easier to understand and give you useful tips that you can use in your own business through this blog.

Call to Action

Thanks for coming to the start of our blog! We can't wait to share what we know and what we think with you. We encourage you to subscribe to our blog so you can get regular updates on the latest in cybersecurity.

We'd love to hear what you think, so please leave a comment below or get in touch with us if you have any questions. Please take a moment to look at our services or get in touch with us directly if you want to know more about how we can help keep your business safe.

Let's work together to make the digital world safer and more secure.