İbrahim BALOĞLU - Siber Güvenlik Paylaşımları
الذهاب إلى القناة على Telegram
Mevcut grup, Siber Güvenlik alanında paylaşımlar yapmak için oluşturulmuştur.
إظهار المزيد1 114
المشتركون
-124 ساعات
+27 أيام
+930 أيام
جاري تحميل البيانات...
القنوات المماثلة
سحابة العلامات
الإشارات الواردة والصادرة
---
---
---
---
---
---
جذب المشتركين
سبتمبر '26
سبتمبر '26
+21
في 0 قنوات
أغسطس '26
+43
في 0 قنوات
Get PRO
يوليو '26
+45
في 0 قنوات
Get PRO
يونيو '26
+29
في 0 قنوات
Get PRO
مايو '26
+57
في 0 قنوات
Get PRO
أبريل '26
+65
في 0 قنوات
Get PRO
مارس '26
+45
في 0 قنوات
Get PRO
فبراير '26
+38
في 1 قنوات
Get PRO
يناير '26
+46
في 0 قنوات
Get PRO
ديسمبر '25
+30
في 0 قنوات
Get PRO
نوفمبر '250
في 0 قنوات
Get PRO
أكتوبر '250
في 0 قنوات
Get PRO
سبتمبر '250
في 0 قنوات
Get PRO
أغسطس '250
في 0 قنوات
Get PRO
يوليو '250
في 0 قنوات
Get PRO
يونيو '250
في 0 قنوات
Get PRO
مايو '250
في 0 قنوات
Get PRO
أبريل '250
في 0 قنوات
Get PRO
مارس '250
في 0 قنوات
Get PRO
فبراير '250
في 0 قنوات
Get PRO
يناير '250
في 0 قنوات
Get PRO
ديسمبر '240
في 0 قنوات
Get PRO
نوفمبر '24
+88
في 0 قنوات
Get PRO
أكتوبر '24
+129
في 0 قنوات
Get PRO
سبتمبر '24
+53
في 0 قنوات
Get PRO
أغسطس '24
+48
في 0 قنوات
Get PRO
يوليو '24
+54
في 0 قنوات
Get PRO
يونيو '24
+46
في 0 قنوات
Get PRO
مايو '24
+53
في 0 قنوات
Get PRO
أبريل '24
+48
في 0 قنوات
Get PRO
مارس '24
+68
في 0 قنوات
Get PRO
فبراير '24
+83
في 0 قنوات
Get PRO
يناير '24
+70
في 0 قنوات
Get PRO
ديسمبر '23
+264
في 0 قنوات
| التاريخ | نمو المشتركين | الإشارات | القنوات | |
| 18 سبتمبر | 0 | |||
| 17 سبتمبر | 0 | |||
| 16 سبتمبر | +2 | |||
| 15 سبتمبر | +6 | |||
| 14 سبتمبر | 0 | |||
| 13 سبتمبر | 0 | |||
| 12 سبتمبر | +1 | |||
| 11 سبتمبر | 0 | |||
| 10 سبتمبر | +1 | |||
| 09 سبتمبر | +1 | |||
| 08 سبتمبر | +1 | |||
| 07 سبتمبر | +1 | |||
| 06 سبتمبر | +3 | |||
| 05 سبتمبر | +1 | |||
| 04 سبتمبر | +2 | |||
| 03 سبتمبر | +1 | |||
| 02 سبتمبر | +1 | |||
| 01 سبتمبر | 0 |
منشورات القناة
#tools
#Malware_analysis
#Blue_Team_Techniques
RuleAutoPilot: Synthesizing Deployable Suricata Rules from Network Traffic", Sep 2026.
// RuleAutoPilot - end-to-end agentic framework that generates deployable Suricata rules directly from malware network traffic, with no prior threat intelligence required. A key challenge is noise: network traffic captures often contain a small amount of security-relevant traffic mixed with large volumes of background traffic, which reduces LLM reasoning quality and increases cost. RuleAutoPilot addresses this challenge with a Benign Traffic Fingerprinting stage that removes known benign background flows before LLM processing
| 2 | #Malware_analysis
1⃣ "Eye" spy: Cyclops Blink returns with extended capabilities
https://www.sophos.com/en-gb/blog/-eye-spy-cyclops-blink-returns-with-extended-capabilities
2⃣ Angry Birds: Toy Ghouls’ new toys
https://securelist.com/toy-ghouls-new-hivemq-and-element-backdoors/121270
3⃣ REVSTEALER: analysis of up-and-coming infostealer
https://www.elastic.co/security-labs/threat-command/revstealer-credential-harvesting-infostealer | 249 |
| 3 | Penetration-List
https://github.com/AlbusSec/Penetration-List | 200 |
| 4 | #AppSec
#Research
#WebApp_Security
"IDORacle: Template-Guided SQL-Sink Mediation for Object-Level Authorization in Java Applications", Sep 2026.
]-> https://github.com/GuanhangShiFDU/IDOR-GUARD
// Cross-language IDOR reproduction and defense demo for Java, Python, Go, and PHP applications. Evaluated applications include XXL-Job, RuoYi, BootDo, wger, Gitea, Krayin, and Langflow | 77 |
| 5 | #Analytics
#Threat_Research
An analytical review of the main cybersecurity events (Sep 05-12, 2026)
1⃣ Sonicwall SMA1000 Attack
// CVE-2026-15409
2⃣ Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability
3⃣ Next Nightmare Eclipse Vulnerability
// Microsoft has failed to properly patch ShieldBreak CVE-2026-69414..
4⃣ FortiPAM Vulnerability
// CVE-2026-84388
5⃣ Researchers from Nebula Security have disclosed 18 vulnerabilities in the Linux kernel
// CVE-2026-80714, CVE-2026-74597, CVE-2026-74581, CVE-2026-74480, CVE-2026-72255, CVE-2026-72137, CVE-2026-68376, CVE-2026-68162, CVE-2026-64560, CVE-2026-63834, CVE-2026-52933, CVE-2026-52929, CVE-2026-52924, CVE-2026-52923, CVE-2026-52912, CVE-2026-43501, CVE-2026-43502, CVE-2026-43074, CVE-2026-43042, CVE-2026-31678, CVE-2026-31659, CVE-2026-23274
6⃣ Netscaler ADC Exploit
7⃣ Critical vulnerabilities in MikroTik RouterOS
8⃣ GRAYRABBIT One-click backdoor
// One click. Three critical failures. One backdoor
9⃣ Attacks using browser-in-browser (BiTB) phishing techniques
🔟 Beltdown: Escaping the Claude Code sandbox
// An untrusted repository opened in Claude Code can escape the macOS sandbox and run commands on your computer as your privileged user | 216 |
| 6 | #reversing
#Malware_analysis
Malware Analysis Series (MAS):
Article 10 - Linux, 2025.
]-> Article 09 - Shellcode (.pdf)
]-> Articles 01 - 08
// last article of MAS series. | 430 |
| 7 | #Threat_Research
#Malware_analysis
1⃣ Robobox: Self driven malware creation and execution
https://netaskari.substack.com/p/robobox-self-driven-malware-creation
2⃣ UpdraftPlus: PHP backdoor delivery attempts via CVE-2026-10795
https://offseq.com/en/research/the-backdoor-inside-the-backup-request
3⃣ Tengu: Reverse Engineering a Mirai-Style Linux/IoT Botnet
https://app.reverser.space/p/duckie/tengu-reverse-engineering-a-mirai-style-linux-iot
4⃣ PEEP: A Chrome Extension RAT
https://socradar.io/blog/peep-browser-rat-chrome-extension | 458 |
| 8 | #Analytics
#Threat_Research
An analytical review of the main cybersecurity events (Aug 15 - Sep 05, 2026)
0⃣ nDPI 6.0 (Aug 2026)
1⃣ Attackers used BGP to spoof the Virtualizor update server and the Softaculous website
2⃣ Sleepwalker Malware
3⃣ Sangoma Switchvox Exploit
4⃣ Fronics Deploy Abuse
5⃣ Escaping Google Cloud Application Integration Sandbox: Straight into Borg
6⃣ VMware threat emulation techniques
// A reproducible catalogue of 86 atomic actions against vCenter, ESXi, SDDC Manager, and the wider VCF ecosystem
7⃣ Log4J FilteredObjectInputStream Vulnerability
// Research
8⃣ FTP Banners The New Dead Drop Resolver Delivering Novel RATs
9⃣ Android Car Malware
🔟 AliExpress WebAudio fingerprinting | 611 |
| 9 | #exploit
#AppSec
1⃣ FalconFlank - Crowdstrike Falcon 0day Privilege Escalation Vulnerability
https://github.com/MSNightmare/FalconFlank
2⃣ Chamilo LMS... It's raining 0days, hallelujah, it's raining 0days
https://blog.quarkslab.com/chamilo-lms-its-raining-0days-hallelujah-its-raining-0days.html
3⃣ Privilege escalation from IIS AppPool to NT Authority/SYSTEM via AD CS RPC endpoint
https://www.mannulinux.org/2026/08/Privilege-escalation-from-IIS-AppPool-to-NT-AuthoritySYSTEM-via-AD-CS-RPC-endpoint.html
]-> Certi-Bhai - AD CS Exploitation Toolkit | 571 |
| 10 | https://www.udemy.com/course/siber-olaylara-mudahale-egitimi-windows-forensics/?couponCode=E489923CACD393A226B8 | 756 |
| 11 | Herkese selam,
Bugün saat 20.00’da, grubu takip eden aktif üyelerimize özel “Siber Olaylara Müdahale Eğitimi (Windows Forensics)” eğitimi için ücretsiz kayıt linkini paylaşacağım.
Yayınlanacak link üzerinden yalnızca ilk 9 kişi ücretsiz kayıt olabilecek.
Eğitim Udemy üzerinde yer almakta olup detaylarına aşağıdaki linkten ulaşabilirsiniz.
https://www.udemy.com/course/siber-olaylara-mudahale-egitimi-windows-forensics/ | 692 |
| 12 | #Threat_Research
#WebApp_Security
Attack of The Extensions
https://specterops.io/blog/2026/08/13/chromium-extension-c2-persistence
// Browser extensions can turn Chromium into a persistent foothold. This post introduces a way to silently install extensions turning Chromium browsers into a command and control (C2) platform for persistent cookie theft | 606 |
| 13 |  CVE-2026-18963 KeyCloak
*
reset-credentials bypass → unauthenticated account takeover
PoCexploit | 647 |
| 14 |  CVE-2026-20217 File Drop to RCE
*
full WriteUP
+ PoC | 796 |
| 15 | #Analytics
#Threat_Research
An analytical review of the main cybersecurity events (Aug 08 - 15, 2026)
0⃣ DEF CON 34
1⃣ Bypassing Android Hardware Attestation from the Analyst's Chair
2⃣ Zoom Vulnerablities CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415
3⃣ Rogue Inflight Wifi
4⃣ Why AI-generated vulnerability patches still require expert human review
5⃣ Gunra Ransomware
6⃣ Neo4J/GraphQL Vulnerability (CVE-2026-5423)
7⃣ Ruby 4.0 Universal RCE Deserialization Gadget Chain
8⃣ OpenSSH 10.5 released
9⃣ Citrix NetScaler Pre-Auth RCE (CVE-2026-8452)
🔟 SCTPhantom - vulnerability in the Linux kernel that allows root access and container escape | 988 |
| 16 | #tools
#Hardware_Security
CPU Privilege Escalation
https://github.com/xoreaxeaxeax/smiiiiiiiiiiiiiiii
]-> DEF CON 2026 - Weaponizing Uselessness (.pdf)
]-> Unlocking everything on the CPU with DRAM scrambling - PSP, C6, microcode, SMM, and anything else the specs left out | 787 |
| 17 |  CVE-2026-41452 Krayin CRM
*
Auth Bypass → Admin Takeover
PoC | 744 |
| 18 |  defcon 34
*
media server | 913 |
| 19 |  Продолжаем делиться интересным
*
DEFCON: New Red Team Tactic - EvilFontTool | 873 |
| 20 |  #exploit
#Kernel_Security
#Mobile_security
IonStack Vulnerability Chain
Part 1 - Unsound IonBanana Peel in Ion Compiler, Slipping Through Firefox's SpiderMonkey JIT
// IonMonkey CVE-2026-10702
Part 2 - GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years
// GhostLock (CVE-2026-43499) + CVE-2026-53166
Part 3 - Rooting Android 17 with GhostLock
// Using GhostLock to develop the world's first public root for Android 17
// Disclaimer | 886 |
