CyberSecurityTechnologies
关闭频道
We have been working for YOU for more than 8 years!!! https://t.me/+9vdG4JOSgY8xMzdi See also: https://t.me/Cognitive_Security https://t.me/CyberSecurityOSINT https://t.me/Wireless_Cybersecurity For All Questions: in messages to the channel
显示更多📈 Telegram 频道 CyberSecurityTechnologies 的分析概览
频道 CyberSecurityTechnologies 英语 语言赛道中的 是活跃参与者。目前社区聚集了 35 252 名订阅者，在 技术与应用 类别中位列第 3 763，并在 美国 地区排名第 990 位。
📊 受众指标与增长动态
自 невідомо 创建以来，项目保持高速增长，吸引了 35 252 名订阅者。
根据 19 七月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 -447，过去 24 小时变化为 -23，整体触达仍然可观。
- 认证状态： 未认证
- 互动率 (ER)： 平均受众互动率为 6.60%。内容发布后 24 小时内通常能获得 2.97% 的反应，占订阅者总量。
- 帖子覆盖： 每篇帖子平均可获得 2 329 次浏览，首日通常累积 1 048 次浏览。
- 互动与反馈： 受众积极参与，单帖平均反应数为 11。
- 主题关注点： 内容集中在 cve-2025, attack, threat, detection, llm 等核心主题上。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台：
“We have been working for YOU for more than 8 years!!!
https://t.me/+9vdG4JOSgY8xMzdi
See also:
https://t.me/Cognitive_Security
https://t.me/CyberSecurityOSINT
https://t.me/Wireless_Cybersecurity
For All Questions: in messages to the channel”
凭借高频更新（最新数据采集于 20 七月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。
35 252
订阅者
-2324 小时
-1217 天
-44730 天
帖子存档
#reversing
crackmes-RE - Labeled reverse-engineering dataset over 4,598 crackmes: flags, verifier scripts, and normalized obfuscation tags
https://github.com/crackmesone/crackmes-re-dataset
#exploit
1⃣ Januscape: Guest-to-Host Escape in KVM/x86 (CVE-2026-53359)
https://github.com/V4bel/Januscape
2⃣ Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)
https://blog.amberwolf.com/blog/2026/july/dell-bios-passwords-weak-xor-encryption-allows-recovery-from-spi-flash-cve-2026-40639
]-> Tooling for extracting and clearing passwords from Dell BIOS flash
// Disclaimer
#AIOps
#Tech_book
"Agentic AI in Enterprise: Harnessing Agentic AI for Business Transformation", 2025.
// This book delves into the transformative power of Enterprise Agentic AI, tracing its evolution from basic automation to intelligent agents capable of contextual reasoning, memory retention, and autonomous decision-making
#NetSec
#AppSec
1⃣ CVE-2026-47291:
RCE in the Windows HTTP.sys
https://www.zerodayinitiative.com/blog/2026/7/9/cve-2026-47291-remote-code-execution-in-the-windows-httpsys
// Windows HTTP.sys vulnerability allowing DoS or kernel code execution via a 16-bit overflow in header parsing during TLS, exploitable through crafted HTTP/1.x requests with many headers over HTTPS
2⃣ Unpatched XRING Flaw in XQUIC
https://foxio.io/blog/xring-crashing-xquic-with-spec-compliant-qpack-instructions
// A flaw in Alibaba's XQUIC (< 1.9.4) allows remote attackers to crash HTTP/3 servers via small, spec-compliant QPACK traffic due to a size calculation bug, with no patch available as of July 10
#NetSec
#Analytics
"Evaluating the Detection Effectiveness of Network Monitoring Tools Against Modern Command-and-Control Frameworks", May 2026.
// This research measures the effectiveness of Zeek, Suricata, and Security Onion against representative modern C2 frameworks in a controlled laboratory environment. Detection rate, false positive rate, and detection latency are recorded and analyzed. The outcome is evidence-based guidance for defenders who need to prioritize practical monitoring improvements and structured tuning strategies for network-level C2 detection
#reversing
"SACK: Systematic Generation of Function Substitution Attacks Against Control-Flow Integrity", NDSS 2026.
]-> https://github.com/PSU-Security-Universe/sack
// The presentation clearly demonstrates how to bypass hardware and software CFI without invoking ROP code chains
]-> NDSS 2026 - All Accepted Papers
#tools
#Blue_Team_Techniques
RootAsRole - Linux/Unix privilege delegation tool
based on Role-Based Access Control (RBAC)
]-> RootAsAnsible (RootAsRole + Ansible)
]-> See also:
rsudoas sudo-rs PEASS-ng bouheki (eBPF+LSM)
#Research
#cryptography
"Git Hash Chain Malleability", Jul 2026.
]-> https://github.com/JakeGinesin/git-chain-malleator
// Git commit signing is widely entrusted to serve as evidence that a commit hash uniquely and immutably identifies a specific piece of signed content. We show this invariant does not hold. Given any signed commit, an attacker without access to the signing key, and without breaking SHA2 can produce a second, distinct commit with an identical tree, identical metadata, a valid signature, and a "Verified" badge from a Git Forge such as Github, differing only in its commit hash
#Kernel_Security
ITScape: Guest-to-Host Escape in KVM/arm64
https://github.com/V4bel/ITScape
// CVE-2026-46316 + PoC. If you are not on an arm64 KVM host, you do not need to worry about this vulnerability
#reversing
#Mobile_security
"Beyond Conventional Triggers:
Auto-Contextualized Covert Triggers for Android Logic Bombs", Feb. 2026.
// A study (paper) on Android malware reverse engineering. The authors analyze the evolution of hidden triggers (logic bombs) in mobile apps that activate malicious functionality only when complex system contexts (battery status, geolocation, and the user launching specific utilities) coincide. This allows them to successfully evade detection in automated sandboxes
#tools
#Malware_analysis
#Offensive_security
1⃣ Nemesis - .NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on disk binaries
2⃣ CAPE Sandbox v2 - Malware Configuration And Payload Extraction
3⃣ NeuroSploit v3.5.5 - Autonomous, multi-model pentesting harness
4⃣ FlatScan - production-grade static malicious-file scanner
5⃣ QuickSand v2 - Python-based framework to analyze suspected malware documents to identify exploits in streams of different encodings or compressions
#tools
#Kernel_Security
#Malware_analysis
"KraKenGuard: Towards Fine-Grained eBPF Isolation", May 2026.
// A deep dive into the security of the kernel's eBPF subsystem, which is increasingly being exploited by attackers to create stealthy rootkits. The presentation describes a symbolic execution-based isolation architecture (KraKenGuard), which prevents host memory attacks from untrusted eBPF programs
#compilers
#Sec_code_review
"RUSTMIZAN: ACompilable, Contamination-Aware Benchmarking Framework for Rust Vulnerabilities",
Jul 2026.
]-> https://github.com/sfu-rsl/rust-mizan
// LLM agents are increasingly applied to vulnerability analysis, but existing benchmarks have not kept pace. They typically rely on small non-compilable snippets, focus on binary classification, and do not account for the risk that publicly-released datasets are part of model training corpora. RustMizan - framework for Rust vulnerability analysis that addresses these gaps
#AppSec
#Threat_Research
1⃣ Veeam Backup Authenticated RCE Explained
https://blog.securelayer7.net/cve-2026-44963-veeam-backup-authenticated-rce-binaryformatter-bypass
// CVE-2026-44963
2⃣ Multiple LPE Vulnerabilities in Little Orbit GFAC Driver (GFAC_Sys_x64.sys)
https://github.com/FzRsLLaSheR/CVE-2026-12166_CVE-2026-12167_CVE-2026-12168
3⃣ Seven FatFs bugs, one very large blast radius
https://www.runzero.com/blog/fatfs-bugs
// CVE-2026-6682 - CVE-2026-6688 + PoCs
#Kernel_Security
#Offensive_security
"DirtyFree: Simplified Data-Oriented Programming in the Linux Kernel", Feb. 2026.
]-> https://github.com/MPI-SysSec/DirtyFree
// DirtyFree - novel exploitation technique that simplifies Data-Oriented Programming attacks in the Linux kernel through the arbitrary free primitive
#info
#MLSecOps
"Detecting GenAI Threats at Scale with YARA-like Semantic Rules", [un]prompted 2026.
See also:
]-> Collection of all slide decks from [un]prompted 2026, the AI Security Practitioner Conference (March 3-4, San Francisco)
#reversing
#Research
"SoK: 20 Years of Power, Privilege, and Peril in x86 System Management Mode", 2026.
]-> https://github.com/antonislouca/SoK-SMM
// A fundamental summary report by researcher Jo Van Bulck, dedicated to reverse engineering and attacks on SMM Ring-2 in x86 processors. The presentation recreates in detail the architecture of the TSEG hidden memory, SMI handlers, and SMM Core
#Malware_analysis
1⃣ The Gentlemen are knocking:
сustom backdoors and evolving tactics
https://securelist.com/the-gentlemen-raas/120447
2⃣ TONResolver RAT
https://www.trendmicro.com/en_us/research/26/f/tonresolver.html
3⃣ From Bing Search to Ransomware:
Bumblebee and AdaptixC2 Deliver Akira
https://thedfirreport.com/2026/06/29/from-bing-search-to-ransomware-bumblebee-and-adaptixc2-deliver-akira-3
