CyberSecurityTechnologies
关闭频道
We have been working for YOU for more than 8 years!!! https://t.me/+9vdG4JOSgY8xMzdi See also: https://t.me/Cognitive_Security https://t.me/CyberSecurityOSINT https://t.me/Wireless_Cybersecurity For All Questions: in messages to the channel
显示更多📈 Telegram 频道 CyberSecurityTechnologies 的分析概览
频道 CyberSecurityTechnologies 英语 语言赛道中的 是活跃参与者。目前社区聚集了 34 109 名订阅者，在 技术与应用 类别中位列第 3 840，并在 美国 地区排名第 1 184 位。
📊 受众指标与增长动态
自 невідомо 创建以来，项目保持高速增长，吸引了 34 109 名订阅者。
根据 05 十月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 -418，过去 24 小时变化为 -8，整体触达仍然可观。
- 认证状态： 未认证
- 互动率 (ER)： 平均受众互动率为 5.84%。内容发布后 24 小时内通常能获得 2.95% 的反应，占订阅者总量。
- 帖子覆盖： 每篇帖子平均可获得 1 994 次浏览，首日通常累积 1 005 次浏览。
- 互动与反馈： 受众积极参与，单帖平均反应数为 6。
- 主题关注点： 内容集中在 cve-2025, attack, threat, detection, llm 等核心主题上。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台：
“We have been working for YOU for more than 8 years!!!
https://t.me/+9vdG4JOSgY8xMzdi
See also:
https://t.me/Cognitive_Security
https://t.me/CyberSecurityOSINT
https://t.me/Wireless_Cybersecurity
For All Questions: in messages to the channel”
凭借高频更新（最新数据采集于 06 十月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。
34 109
订阅者
-824 小时
-917 天
-41830 天
数据加载中...
相似频道
标签云
进出提及
---
---
---
---
---
---
吸引订阅者
十月 '2610月 '26
十月 '260
在1个频道中
九月 '26
+9
在8个频道中
Get PRO
八月 '26
+2
在9个频道中
Get PRO
七月 '26
+8
在4个频道中
Get PRO
六月 '26
+2
在2个频道中
Get PRO
五月 '26
+8
在8个频道中
Get PRO
四月 '26
+5
在5个频道中
Get PRO
三月 '26
+6
在6个频道中
Get PRO
二月 '26
+53
在12个频道中
Get PRO
一月 '26
+5
在5个频道中
Get PRO
十二月 '25
+30
在10个频道中
Get PRO
十一月 '25
+5
在10个频道中
Get PRO
十月 '25
+103
在11个频道中
Get PRO
九月 '25
+169
在11个频道中
Get PRO
八月 '25
+181
在14个频道中
Get PRO
七月 '25
+216
在13个频道中
Get PRO
六月 '25
+140
在8个频道中
Get PRO
五月 '25
+80
在4个频道中
Get PRO
四月 '25
+110
在4个频道中
Get PRO
三月 '25
+154
在7个频道中
Get PRO
二月 '25
+150
在7个频道中
Get PRO
一月 '25
+153
在10个频道中
Get PRO
十二月 '24
+614
在6个频道中
Get PRO
十一月 '24
+2 694
在9个频道中
Get PRO
十月 '24
+3 905
在8个频道中
Get PRO
九月 '24
+3 114
在4个频道中
Get PRO
八月 '24
+3 425
在7个频道中
Get PRO
七月 '24
+3 738
在2个频道中
Get PRO
六月 '24
+3 441
在3个频道中
Get PRO
五月 '24
+3 316
在1个频道中
Get PRO
四月 '24
+3 222
在4个频道中
Get PRO
三月 '24
+3 443
在6个频道中
Get PRO
二月 '24
+2 626
在4个频道中
Get PRO
一月 '24
+1 689
在8个频道中
Get PRO
十二月 '23
+1 310
在2个频道中
Get PRO
十一月 '23
+273
在7个频道中
Get PRO
十月 '23
+331
在2个频道中
Get PRO
九月 '23
+322
在0个频道中
Get PRO
八月 '23
+197
在0个频道中
Get PRO
七月 '23
+179
在0个频道中
Get PRO
六月 '23
+148
在0个频道中
Get PRO
五月 '23
+149
在0个频道中
Get PRO
四月 '23
+210
在0个频道中
Get PRO
三月 '23
+149
在0个频道中
Get PRO
二月 '23
+149
在0个频道中
Get PRO
一月 '23
+141
在0个频道中
Get PRO
十二月 '22
+187
在0个频道中
Get PRO
十一月 '22
+288
在0个频道中
Get PRO
十月 '22
+140
在0个频道中
Get PRO
九月 '22
+192
在0个频道中
Get PRO
八月 '22
+672
在0个频道中
Get PRO
七月 '22
+174
在0个频道中
Get PRO
六月 '22
+162
在0个频道中
Get PRO
五月 '22
+168
在0个频道中
Get PRO
四月 '22
+129
在0个频道中
Get PRO
三月 '22
+163
在0个频道中
Get PRO
二月 '22
+315
在0个频道中
Get PRO
一月 '22
+154
在0个频道中
Get PRO
十二月 '21
+247
在0个频道中
Get PRO
十一月 '21
+119
在0个频道中
Get PRO
十月 '21
+157
在0个频道中
Get PRO
九月 '21
+126
在0个频道中
Get PRO
八月 '21
+346
在0个频道中
Get PRO
七月 '21
+140
在0个频道中
Get PRO
六月 '21
+409
在0个频道中
Get PRO
五月 '21
+97
在0个频道中
Get PRO
四月 '21
+315
在0个频道中
Get PRO
三月 '21
+199
在0个频道中
Get PRO
二月 '21
+220
在0个频道中
Get PRO
一月 '21
+211
在0个频道中
Get PRO
十二月 '20
+2 406
在0个频道中
| 日期 | 订阅者增长 | 提及 | 频道 | |
| 06 十月 | 0 | |||
| 05 十月 | 0 | |||
| 04 十月 | 0 | |||
| 03 十月 | 0 | |||
| 02 十月 | 0 | |||
| 01 十月 | 0 |
频道帖子
#NetSec
#MLSecOps
"Cooldown Landmines: Cross-Tenant Interference Attacks on LLM Gateways", Oct 2026.
]-> This repo contains the paper draft, experiments, and data for a cross-tenant vulnerability class in multi-tenant LLM gateways (LiteLLM, Portkey, Kong AI Gateway)
| 2 | #Whitepaper
Security Awareness Roadmap:
Managing Your Human Risk, 2026.
// Leverage this poster to quickly determine why your program may not be having the impact your want, proven steps you can take to mature your program, and how to communicate the value of the program to your leadership | 713 |
| 3 | #Research
#Hardware_Security
"TONTOU: On the Exploitability of Time-of-Neutralization to Time-of-Use Windows", 2026.
]-> https://github.com/MATCHA-MIT/TONTOU-Interrupt-Injection
// The paper is devoted to a practical analysis of ARM's MTE (Memory Tagging Extension) hardware technology, which is widely used in modern mobile processors to protect memory. The researchers examine in detail the "windows" between threat mitigation and data exploitation, demonstrating the possibility of bypassing hardware barriers | 997 |
| 4 | #NetSec
#Research
#cryptography
"Mind the Gap: Proving and Improving RPKI", 2026.
]-> https://github.com/shaycohen988/routinator-multi-resolver
// This work presents the first rigorous security analysis of the Resource Public Key Infrastructure, an IETF standard for protecting inter-domain routing from basic yet effective attacks: prefix and subprefix hijacks. It focuses on rigorous, modular security specifications and analysis of RPKI, including its interactions with BGP and IP. It shows that existing RPKI deployments do not always meet these conditions, e.g., because of circular dependencies, and proposes standard-compliant improvements that restore them | 1 248 |
| 5 | #RAG_Security
"Hop-Decayed Influence: New Vulnerabilities of Structural Auxiliary Indexing in GraphRAG Pipelines with LLM", Oct. 2026.
]-> https://github.com/Jisung-Pacific/HDI-GraphRAG-Attack
// GraphRAG pipelines construct auxiliary structures during offline indexing - semantic summaries, hierarchical edges, and pre-computed scores - that determine how retrieval is prioritized at query time. Prior attacks target only instance-level components (nodes, edges, triples), overlooking these schema-level structures. This work formalizes the Auxiliary Schema-Level Entity as a novel attack surface and proposes the 3S Framework (Semantics, Structure, Scoring) for its systematic exploitation. Its Hop-Decayed Influence attack identifies high-impact targets through query-aware influence propagation and corrupts their auxiliary structures post-indexing | 1 186 |
| 6 | #Malware_analysis
1⃣ CloudSyncD: macOS backdoor hidden in a fake Zoom installer
https://www.jamf.com/blog/cloudsyncd-macos-backdoor-fake-zoom-installer
2⃣ knock-outd: an undetected port-knocking backdoor in the wild
https://www.virlabs.ai/blog/knock-outd
3⃣ Breakdown of a c2-network of chinese beamers - SilentSDK-Analysis
https://github.com/Kavan00/Android-Projector-C2-Malware | 1 276 |
| 7 | #Tech_book
#Offensive_security
#Red_Team_Tactics
"Red Team Engineering: The Art of Building Offensive Tools and Infrastructure", 2026.
]-> Various course materials, scripts, and configurations | 2 307 |
| 8 | #Analytics
#Threat_Research
An analytical review of the main cybersecurity events (Sep 26 - Oct 03, 2026)
1⃣ Here We Go Again:
Citrix NetScaler DTLS Preauth Memory Overflow
// CVE-2026-88772
2⃣ A Realistic Code Execution Exploit Chain in OpenBao and Vault
3⃣ Attackers abuse ChatGPT to deliver RAT via ClickFix
4⃣ Poper Blocker: The Adblocker That Spies on You
5⃣ PoC for macOS CoreServices Priv. Escalation
// CVE-2026-43786
6⃣ PaperCut MF Zero-Day Intrusion: Java Loader, Web Shell, and AdaptixC2 via CVE-2026-82078 and CVE-2026-81578
7⃣ CVE-2026-86950: The Great Glyph Grift
// An in-the-wild iOS bug with a possible WhatsApp zero-click path
8⃣ Stopping a coordinated campaign to distill models
9⃣ nDPI TCP Fingerprint: A Stable, Patent-Free Way to Fingerprint TCP Stacks | 1 604 |
| 9 | #SCA
#compilers
#Kernel_Security
"Branch Target Reuse: Practical Spectre-v2 Attacks in JIT Engines via Stale Branch Prediction Entries", Oct. 2026.
]-> Repo
]-> BTR end-to-end exploit on cBPF
// A new BTR (Branch Target Reuse) attack method has been developed, belonging to the Spectre-v2 class, allowing for the bypass of memory isolation mechanisms on systems with Intel, AMD, ARM processors. Memory leaks are initiated during speculative instruction execution during a BTR attack by manipulating JIT compilers. The feasibility of attacking through the cBPF JIT engines in the Linux kernel, Oracle GraalVM, and SpiderMonkey in Firefox has been analyzed | 1 504 |
| 10 | #SCA
#Whitepaper
"Invisible by Default: The Polyglot Smuggler", Sep 2026.
// This paper demonstrates a novel data smuggling mechanism: Sub-Channel Steganography. By weaponizing uninspected MP4 subtitle tracks within a structurally compliant ISO base media file, adversaries can encapsulate malicious payloads and exfiltrate sensitive data. Utilizing entirely native LotL interpreters for bidirectional extraction, this polyglot methodology successfully circumvents network DLP and CDR systems while eliminating the forensic artifacts traditionally monitored by endpoint defenses | 1 430 |
| 11 | #AppSec
1⃣ Sender spoofing in Proton Mail via display-name homograph
https://alonsovidales.github.io/protonmail-sender-spoofing
2⃣ Acer System Monitor: from standard user to SYSTEM with CVE-2026-50610
https://www.intrinsec.com/cve-2026-50610-elevation-privileges-acer-nitrosense
3⃣ Spoofing Arbitrary Apple iCloud Identities
https://sec-consult.com/blog/detail/from-anyoneicloudcom-spoofing-arbitrary-apple-icloud-identities
4⃣ Cato VPN Client: Split-Tunnel and Privilege Escalation (CVE-2026-10739)
https://blog.quarkslab.com/cato-vpn-client-split-tunnel-and-privilege-escalation-cve-2026-10739.html | 1 387 |
| 12 | #MLSecOps
#Threat_Research
#Malware_analysis
"The Innocent Courier: Covert Exfiltration Through Legitimate LLM Web Fetching", Oct. 2026.
// In this paper, the authors demonstrate with LLMLeak a novel attack vector where malicious software that runs locally but cannot communicate directly with the internet abuses LLMs to establish a covert channel. While inputs that instruct the LLM to send data directly via generated code are easy to detect and network libraries are typically restricted, LLMLeak relies only on the LLM’s tool to fetch websites for further information | 1 375 |
| 13 |  #NetSec
JA4Scan: Active Server Fingerprinting for TLS and QUIC
https://foxio.io/blog/introducing-ja4scan-active-server-fingerprinting-for-tls-and-quic
// JA4Scan-TLS and JA4Scan-QUIC - latest additions to the JA4+ suite of fingerprinting methods. Together they fingerprint the TLS and QUIC libraries running on any given server, uncovering both the running TLS/QUIC stack and its configuration | 1 475 |
| 14 | #MLSecOps
"CodeMimicry Exploiting Safety Generalization Lag in Large Language Models via Structured Code Completion", Sep 2026.
]-> https://github.com/lzzzr123/CodeMimicry
// In this work, it identifies a previously underexplored failure mode - safety generalization lag - where alignment trained predominantly on natural language fails to transfer to the code domain. The work shows that this lag induces a code-completion blind spot, allowing malicious intent embedded within syntactically valid code to evade safety mechanisms | 1 605 |
| 15 | #NetSec
#hardening
Cisco Catalyst SD-WAN Hardening Guide
https://sec.cloudapps.cisco.com/security/center/resources/Cisco-Catalyst-SD-WAN-HardeningGuide
]-> Cisco IOS XE Software Hardening Guide | 1 556 |
| 16 | #tools
#Hardware_Security
"Implementing Data Diodes Using Commodity Hardware and Open Source Software", Sep 2026.
]-> https://github.com/ClarkuCSCI/pydiode
// The authors tested three existing open source programs for one-way data transfers: netcat, UDPcast, and lidi. Although these programs were unreliable in their default configurations, reliable configurations were identified for UDPcast and lidi. Finally, these findings were incorporated into pydiode, a cross-platform program for reliable one-way data transfers | 1 832 |
| 17 | #Threat_Research
Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances
https://cloud.google.com/blog/topics/threat-intelligence/defending-against-active-exploitation-of-citrix-netscaler-adc-and-gateway-appliances
]-> How to Fix CVE-2026-88771 and CVE-2026-88772 | 1 766 |
| 18 | #cryptography
"Forging 1024-bit RSA signatures in nearly SNFS time", Sep 2026.
]-> https://github.com/ucsd-hacc/NSNFSSSFSFN
// In this paper, we carry out an attack that allows us to forge arbitrary 1024-bit RSA digital signatures (or decrypt arbitrary ciphertexts) using academic computational resources, without factoring the modulus. This attack reduces RSA security levels below acceptable thresholds for modern cryptographic deployments, and demonstrates a theoretical gap in RSA-based security assumptions and practical parameter choices | 2 282 |
| 19 | #Malware_analysis
1⃣ NeedyMantis: Unpacking a post-compromise malware family used in targeted operations
https://www.microsoft.com/en-us/security/blog/2026/09/28/needymantis-unpacking-a-post-compromise-malware-family-used-in-targeted-operations
2⃣ The Stealer Factory: Unpacking a Python-Based MaaS Infostealer Builder
https://labs.k7computing.com/index.php/the-stealer-factory-unpacking-a-python-based-maas-infostealer-builder
3⃣ Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
https://securelist.com/tr/payload-ransomware-via-group-policy/121335 | 1 718 |
| 20 | #tools
#Malware_analysis
"DeScrypt: A Multi-Tool Framework for Automated Unpacking and Analysis of Malicious Scripts", Aug. 2026.
]-> DeScrypt - automated, recursive unpacking of obfuscated malicious JavaScript and PowerShell
// Scripting languages are increasingly dominant malware vectors that often employ layered obfuscation techniques to slow down manual analysis by reverse engineers and to prevent pattern recognition. Existing deobfuscators are often developed for specific encoding mechanisms or programming languages, resulting in complex analysis pipelines that require multiple tools or techniques to analyze samples fully | 2 219 |
