CyberSecurityTechnologies
قناة بسيطة
We have been working for YOU for more than 8 years!!! https://t.me/+9vdG4JOSgY8xMzdi See also: https://t.me/Cognitive_Security https://t.me/CyberSecurityOSINT https://t.me/Wireless_Cybersecurity For All Questions: in messages to the channel
إظهار المزيد📈 نظرة تحليلية على قناة تيليجرام CyberSecurityTechnologies
تُعد قناة CyberSecurityTechnologies في القطاع اللغوي الإنكليزية لاعباً نشطاً. يضم المجتمع حالياً 33 824 مشتركاً، محتلاً المرتبة 3 956 في فئة التكنولوجيات والتطبيقات والمرتبة 1 206 في منطقة الولايات المتحدة.
📊 مؤشرات الجمهور والحراك
منذ تأسيسه في невідомо، حقق المشروع نمواً سريعاً وجمع 33 824 مشتركاً.
بحسب آخر البيانات بتاريخ 26 أكتوبر, 2026، تحافظ القناة على نشاط مستقر. خلال آخر 30 يوماً تغيّر عدد الأعضاء بمقدار -429، وفي آخر 24 ساعة بمقدار -13، مع بقاء الوصول العام مرتفعاً.
- حالة التحقق: غير موثّقة
- معدل التفاعل (ER): يبلغ متوسط تفاعل الجمهور 6.87%. وخلال أول 24 ساعة من النشر يحصد المحتوى عادةً 3.14% من ردود الفعل نسبةً إلى إجمالي المشتركين.
- وصول المنشورات: يحصل كل منشور على متوسط 2 322 مشاهدة. وخلال اليوم الأول يجمع عادةً 1 063 مشاهدة.
- التفاعلات والاستجابة: يتفاعل الجمهور بانتظام؛ متوسط التفاعلات لكل منشور يبلغ 5.
- الاهتمامات الموضوعية: يركز المحتوى على مواضيع رئيسية مثل cve-2025, attack, threat, detection, llm.
📝 الوصف وسياسة المحتوى
يصف المؤلف القناة بأنها مساحة للتعبير عن الآراء الذاتية:
“We have been working for YOU for more than 8 years!!!
https://t.me/+9vdG4JOSgY8xMzdi
See also:
https://t.me/Cognitive_Security
https://t.me/CyberSecurityOSINT
https://t.me/Wireless_Cybersecurity
For All Questions: in messages to the channel”
بفضل وتيرة التحديث المرتفعة (أحدث البيانات بتاريخ 27 أكتوبر, 2026) تحافظ القناة على حداثتها ومستوى وصول مرتفع. وتُظهر التحليلات تفاعلاً نشطاً من الجمهور، ما يجعلها نقطة تأثير مهمة ضمن فئة التكنولوجيات والتطبيقات.
33 824
المشتركون
-1324 ساعات
-1127 أيام
-42930 أيام
أرشيف المشاركات
#Research
#MLSecOps
"Making attacking agents pay:
Context Bombs as defense against offensive AI", 2026.
// Context Bombs are deceptive traps designed to turn an AI attacker’s own reasoning against it: drawing it into wasted work, steering it away from real targets, or getting it to reveal its intentions. Canary interactions alert you to its presence, while these traps can buy your team time to contain the attack
#NetSec
#Tech_book
"Network Programming with Go:
Code Secure and Reliable Network Services from Scratch", 2021.
// This book details the basics of network programming with an emphasis on security. You will learn socket-level programming including TCP, UDP, and Unix sockets, interact with application-level protocols like HTTPS and HTTP/2, serialize data with formats like Gob, JSON, XML, and protocol buffers, perform authentication and authorization for your network services, create streams and asynchronous data transfers, write gRPC microservices, perform structured logging and instrumentation, and deploy your applications to the cloud
#info
PHP2Shell: 22-24 October 2026
https://gist.github.com/0x4D31/6b1e7b5fb7a10219af187be91335c96f
#DevOps
#Tech_book
"DevSecOps and DevOps for Linux:
The Foundations", 2026.
]-> https://github.com/Apress/DevSecOps-for-Linux
// This book focuses on the widest interpretation of DevSecOps, which blends security concepts into DevOps. For this reason, it illustrates not only concepts strictly related to DevSecOps, but also DevOps concepts since it is not correct to take them for granted
#tools
#Offensive_security
Defeating enforced SMB signing
https://blackfield.ch/blog/defeating-enforced-smb-signing
]-> PoC: defeating enforced SMB signing on an SMB relay
#Tech_book
"The Art of 64-bit Assembly Vol.2:
Machine-Level OOP, Exceptions, and Concurrency", 2026.
// This book covers the following subjects: advanced macro programming, unicode string types and functions, advanced use of local variables in procedures and functions, object-oriented programming in assembly language, transcendental function implementation, exception handling under Windows using assembly language, advanced procedure types as well as advanced parameter-passing mechanisms and techniques, coroutines, generators, iterators, and concurrent programming
#Analytics
#Threat_Research
An analytical review of the main cybersecurity events (Oct 17-24, 2026)
1⃣ PHP2Shell
]-> Pre-auth RCE research toolkit
// CVE-2026-109619, CVE-2026-109619
2⃣ Another vulnerability in PHP
// The PHP project's developers have announced the discovery of another vulnerability (CVE-2026-115560), which could potentially be exploited for RCE on the server under a certain, rare combination of non-default settings and executed PHP code
3⃣ OpenSSL 4.1.0 and LibreSSL 4.4.0
4⃣ About 10% of Tor exit nodes were involved in an SSH connection hijacking attack
5⃣ Nmap 7.992
6⃣ Cisco Snort 3 Critical Vulnerabilities
// CVE-2026-20043
7⃣ FortiSIEM gRPC Path Traversal File Write RCE
// CVE-2026-106173
8⃣ Linux Kernel KSMBD Vulnerability
9⃣ Signal: Flooded Call Event Queue Blocks Local Hang-Up
// CVE-2026-113380
#tools
#MLSecOps
"The Trigger in the Haystack:
Extracting and Reconstructing LLM Backdoor Triggers", Feb. 2026.
]-> https://github.com/microsoft/llm-backdoor-scanner
#Malware_analysis
1⃣ MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
https://www.welivesecurity.com/en/eset-research/mythicratatoskr-yggdrasil-enabled-backdoor-deployed-uac0099-sandworm-collaboration
2⃣ DarkCore: A Data-Theft RAT With a Session-Hijacking Browser
https://www.blackfog.com/darkcore-a-data-theft-rat-with-a-session-hijacking-browser
3⃣
#Kernel_Security
When Defenses Become Attack Surface: CVE-2026-20971, a Samsung Kernel UAF
https://lucidbitlabs.com/blog/when-defenses-become-attack-surface
// Affected Devices: Galaxy S9 through Galaxy S25, A-series, Exynos, and Qualcomm devices
#Tech_book
"Authorization in Action:
Build policy-based access control for zero trust, APIs, SaaS, and AI agents", 2026.
// This book uses the Cedar policy language for most of its examples. Cedar - open source policy language for expressing fine-grained permissions
https://github.com/cedar-policy/cedar
Policies and schemas appear throughout the text, and the three appendixes provide complete, runnable examples.
Appendix A:
https://github.com/windley/acme-cedar-demo
Appendix B:
https://github.com/windley/acme-cedar-ai-authoring
Appendix C:
https://github.com/windley/openclaw-cedar-policy-demo
#tools
#OSINT
1⃣ WireTapper - wireless OSINT tool that passively detects and maps Wi-Fi, Bluetooth, CCTV cameras, vehicles, headphones, TVs, IoT devices, and cell towers, turning nearby radio signals into clear situational intelligence
2⃣ Claude-OSINT - 8 Claude skills, 100+ recon capabilities, 80 secret-regex patterns, 80+ dorks, 9 read-only credential validators, 27 attack-path templates, ~10k lines of structured tradecraft
3⃣ Ground Station - open-source, browser-based application for tracking satellites and celestial targets, controlling station hardware, and receiving, decoding, and recording SDR signals
#AIOps
#Offensive_security
"AutoRedClaw: Automated Red-Teaming for Claw-Style Agents", 2026.
]-> https://github.com/SaFo-Lab/AutoRedClaw
// AutoRedClaw - automated red-teaming framework that generates end-to-end attacks together with the environments needed to execute them. AutoRedClaw combines a strict quality-checking protocol with execution-based validation to ensure the correctness, realism, and effectiveness of generated samples, and adopts task-driven environment construction to keep costs low
#Offensive_security
#Malware_analysis
PhantomBuffer:
Effective EDR Evasion Through Stealth Injection
https://www.zerosalarium.com/2026/10/PhantomBuffer-Effective-EDR-Evasion-Stealth-Injection.html
]-> https://github.com/TwoSevenOneT/PhantomBuffer
// The article introduces "PhantomBuffer", a stealth technique that injects payloads into processes via SendMessageW with WM_SETTEXT, avoiding WriteProcessMemory, and leverages cdb.exe for thread hijacking, with recommendations to monitor related API calls and suspicious debugger activity
#OpSec
#Whitepaper
"passwords.txt: Using Notepad and SmartScreen to Oracle Account Passwords", Sep 2026.
// Enhanced Phishing Protection (EPP) is designed to reduce credential theft by detecting unsafe password entry and providing additional security telemetry within Windows. However, security mechanisms that generate observable system artifacts may introduce unintended information disclosure
#MLSecOps
#SCADA_Security
"Recording-Aware Evaluation of Multimodal OT Intrusion Detection", Oct 2026.
]-> https://github.com/ANTS-OntarioTechU/Recording-Aware-Evaluation-of-Multimodal-OT-Intrusion-Detection
#exploit
#Kernel_Security
Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
https://github.com/califio/publications/tree/main/MADBugs/openbsd
// Disclaimer
#AppSec
1⃣ GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
https://www.rapid7.com/blog/post/ra-gitlab-ci-cd-regex-integer-overflow-technical-analysis-cve-2026-97229
2⃣ Plex2Shell:
Unauthenticated RCE in Plex Media Server
https://zmain.info/blog/plex2shell
3⃣ CVE-2026-108097 Deep Dive:
Turning a Drupal Field UI Callback Into RCE
https://fortbridge.co.uk/research/cve-2026-108097-deep-dive-turning-a-drupal-field-ui-callback-into-rce
#DFIR
#Infographics
Windows Forensic Analysis, SANS, 2006.
// What files were opened? Which programs ran? Where did the user connect?..
#tools
#Offensive_security
SyscallRevenant: Surpassing EDRs & AVs
https://github.com/SilentisVox/SyscallRevenant
// new method of performing clean indirect syscalls. The main component resolves System Service Numbers and syscall instruction addresses dynamically. This is done by enabling the trap flag during execution. The secondary component is tampering via parameter replacement before a syscall. This combination is designed to bypass userland hooks during the subsequent syscall invocation while substituting the initially presented parameters
// Disclaimer
