CyberSecurityTechnologies
关闭频道
We have been working for YOU for more than 8 years!!! https://t.me/+9vdG4JOSgY8xMzdi See also: https://t.me/Cognitive_Security https://t.me/CyberSecurityOSINT https://t.me/Wireless_Cybersecurity For All Questions: in messages to the channel
显示更多📈 Telegram 频道 CyberSecurityTechnologies 的分析概览
频道 CyberSecurityTechnologies 英语 语言赛道中的 是活跃参与者。目前社区聚集了 33 824 名订阅者，在 技术与应用 类别中位列第 3 956，并在 美国 地区排名第 1 206 位。
📊 受众指标与增长动态
自 невідомо 创建以来，项目保持高速增长，吸引了 33 824 名订阅者。
根据 26 十月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 -429，过去 24 小时变化为 -13，整体触达仍然可观。
- 认证状态： 未认证
- 互动率 (ER)： 平均受众互动率为 6.87%。内容发布后 24 小时内通常能获得 3.14% 的反应，占订阅者总量。
- 帖子覆盖： 每篇帖子平均可获得 2 322 次浏览，首日通常累积 1 063 次浏览。
- 互动与反馈： 受众积极参与，单帖平均反应数为 5。
- 主题关注点： 内容集中在 cve-2025, attack, threat, detection, llm 等核心主题上。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台：
“We have been working for YOU for more than 8 years!!!
https://t.me/+9vdG4JOSgY8xMzdi
See also:
https://t.me/Cognitive_Security
https://t.me/CyberSecurityOSINT
https://t.me/Wireless_Cybersecurity
For All Questions: in messages to the channel”
凭借高频更新（最新数据采集于 27 十月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。
33 824
订阅者
-1324 小时
-1127 天
-42930 天
帖子存档
#Research
#Cloud_Security
"CVM-STORE: A Secure Storage System for Confidential Virtual Machines", NDSS 2027.
]-> https://github.com/TUM-DSE/CVM-Store
]-> CVM-Store Evaluation
// CVM-Store - secure storage library for confidential virtual machines (CVMs). CVMs protect data in use, but persistent storage lies outside their trust boundary: the cloud provider can read, corrupt or replay anything written to disk. CVM-Store gives persisted data confidentiality, integrity and freshness at close to raw NVMe throughput
#MLSecOps
"To Cache or Not to Cache: Understanding and Mitigating Safety Incompatibility in Cross-Model KV Cache Reuse", Oct 2026.
]-> VReparo - Value alignment for safer cross-model KV cache reuse
#Research
#MLSecOps
"Making attacking agents pay:
Context Bombs as defense against offensive AI", 2026.
// Context Bombs are deceptive traps designed to turn an AI attacker’s own reasoning against it: drawing it into wasted work, steering it away from real targets, or getting it to reveal its intentions. Canary interactions alert you to its presence, while these traps can buy your team time to contain the attack
#NetSec
#Tech_book
"Network Programming with Go:
Code Secure and Reliable Network Services from Scratch", 2021.
// This book details the basics of network programming with an emphasis on security. You will learn socket-level programming including TCP, UDP, and Unix sockets, interact with application-level protocols like HTTPS and HTTP/2, serialize data with formats like Gob, JSON, XML, and protocol buffers, perform authentication and authorization for your network services, create streams and asynchronous data transfers, write gRPC microservices, perform structured logging and instrumentation, and deploy your applications to the cloud
#info
PHP2Shell: 22-24 October 2026
https://gist.github.com/0x4D31/6b1e7b5fb7a10219af187be91335c96f
#DevOps
#Tech_book
"DevSecOps and DevOps for Linux:
The Foundations", 2026.
]-> https://github.com/Apress/DevSecOps-for-Linux
// This book focuses on the widest interpretation of DevSecOps, which blends security concepts into DevOps. For this reason, it illustrates not only concepts strictly related to DevSecOps, but also DevOps concepts since it is not correct to take them for granted
#tools
#Offensive_security
Defeating enforced SMB signing
https://blackfield.ch/blog/defeating-enforced-smb-signing
]-> PoC: defeating enforced SMB signing on an SMB relay
#Tech_book
"The Art of 64-bit Assembly Vol.2:
Machine-Level OOP, Exceptions, and Concurrency", 2026.
// This book covers the following subjects: advanced macro programming, unicode string types and functions, advanced use of local variables in procedures and functions, object-oriented programming in assembly language, transcendental function implementation, exception handling under Windows using assembly language, advanced procedure types as well as advanced parameter-passing mechanisms and techniques, coroutines, generators, iterators, and concurrent programming
#Analytics
#Threat_Research
An analytical review of the main cybersecurity events (Oct 17-24, 2026)
1⃣ PHP2Shell
]-> Pre-auth RCE research toolkit
// CVE-2026-109619, CVE-2026-109619
2⃣ Another vulnerability in PHP
// The PHP project's developers have announced the discovery of another vulnerability (CVE-2026-115560), which could potentially be exploited for RCE on the server under a certain, rare combination of non-default settings and executed PHP code
3⃣ OpenSSL 4.1.0 and LibreSSL 4.4.0
4⃣ About 10% of Tor exit nodes were involved in an SSH connection hijacking attack
5⃣ Nmap 7.992
6⃣ Cisco Snort 3 Critical Vulnerabilities
// CVE-2026-20043
7⃣ FortiSIEM gRPC Path Traversal File Write RCE
// CVE-2026-106173
8⃣ Linux Kernel KSMBD Vulnerability
9⃣ Signal: Flooded Call Event Queue Blocks Local Hang-Up
// CVE-2026-113380
#tools
#MLSecOps
"The Trigger in the Haystack:
Extracting and Reconstructing LLM Backdoor Triggers", Feb. 2026.
]-> https://github.com/microsoft/llm-backdoor-scanner
#Malware_analysis
1⃣ MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
https://www.welivesecurity.com/en/eset-research/mythicratatoskr-yggdrasil-enabled-backdoor-deployed-uac0099-sandworm-collaboration
2⃣ DarkCore: A Data-Theft RAT With a Session-Hijacking Browser
https://www.blackfog.com/darkcore-a-data-theft-rat-with-a-session-hijacking-browser
3⃣
#Kernel_Security
When Defenses Become Attack Surface: CVE-2026-20971, a Samsung Kernel UAF
https://lucidbitlabs.com/blog/when-defenses-become-attack-surface
// Affected Devices: Galaxy S9 through Galaxy S25, A-series, Exynos, and Qualcomm devices
#Tech_book
"Authorization in Action:
Build policy-based access control for zero trust, APIs, SaaS, and AI agents", 2026.
// This book uses the Cedar policy language for most of its examples. Cedar - open source policy language for expressing fine-grained permissions
https://github.com/cedar-policy/cedar
Policies and schemas appear throughout the text, and the three appendixes provide complete, runnable examples.
Appendix A:
https://github.com/windley/acme-cedar-demo
Appendix B:
https://github.com/windley/acme-cedar-ai-authoring
Appendix C:
https://github.com/windley/openclaw-cedar-policy-demo
#tools
#OSINT
1⃣ WireTapper - wireless OSINT tool that passively detects and maps Wi-Fi, Bluetooth, CCTV cameras, vehicles, headphones, TVs, IoT devices, and cell towers, turning nearby radio signals into clear situational intelligence
2⃣ Claude-OSINT - 8 Claude skills, 100+ recon capabilities, 80 secret-regex patterns, 80+ dorks, 9 read-only credential validators, 27 attack-path templates, ~10k lines of structured tradecraft
3⃣ Ground Station - open-source, browser-based application for tracking satellites and celestial targets, controlling station hardware, and receiving, decoding, and recording SDR signals
#AIOps
#Offensive_security
"AutoRedClaw: Automated Red-Teaming for Claw-Style Agents", 2026.
]-> https://github.com/SaFo-Lab/AutoRedClaw
// AutoRedClaw - automated red-teaming framework that generates end-to-end attacks together with the environments needed to execute them. AutoRedClaw combines a strict quality-checking protocol with execution-based validation to ensure the correctness, realism, and effectiveness of generated samples, and adopts task-driven environment construction to keep costs low
#Offensive_security
#Malware_analysis
PhantomBuffer:
Effective EDR Evasion Through Stealth Injection
https://www.zerosalarium.com/2026/10/PhantomBuffer-Effective-EDR-Evasion-Stealth-Injection.html
]-> https://github.com/TwoSevenOneT/PhantomBuffer
// The article introduces "PhantomBuffer", a stealth technique that injects payloads into processes via SendMessageW with WM_SETTEXT, avoiding WriteProcessMemory, and leverages cdb.exe for thread hijacking, with recommendations to monitor related API calls and suspicious debugger activity
#OpSec
#Whitepaper
"passwords.txt: Using Notepad and SmartScreen to Oracle Account Passwords", Sep 2026.
// Enhanced Phishing Protection (EPP) is designed to reduce credential theft by detecting unsafe password entry and providing additional security telemetry within Windows. However, security mechanisms that generate observable system artifacts may introduce unintended information disclosure
#MLSecOps
#SCADA_Security
"Recording-Aware Evaluation of Multimodal OT Intrusion Detection", Oct 2026.
]-> https://github.com/ANTS-OntarioTechU/Recording-Aware-Evaluation-of-Multimodal-OT-Intrusion-Detection
#exploit
#Kernel_Security
Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
https://github.com/califio/publications/tree/main/MADBugs/openbsd
// Disclaimer
#AppSec
1⃣ GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
https://www.rapid7.com/blog/post/ra-gitlab-ci-cd-regex-integer-overflow-technical-analysis-cve-2026-97229
2⃣ Plex2Shell:
Unauthenticated RCE in Plex Media Server
https://zmain.info/blog/plex2shell
3⃣ CVE-2026-108097 Deep Dive:
Turning a Drupal Field UI Callback Into RCE
https://fortbridge.co.uk/research/cve-2026-108097-deep-dive-turning-a-drupal-field-ui-callback-into-rce
