cKure Red
前往频道在 Telegram
The director's cut on critical feeds from InfoSec world 🌎 Main Channel: @cKure ☕️ or queries email us 📨 i@ckure.org
显示更多2 556
订阅者
无数据24 小时
+87 天
+5330 天
数据加载中...
吸引订阅者
六月 '26
六月 '26
+35
在2个频道中
五月 '26
+82
在1个频道中
Get PRO
四月 '26
+81
在2个频道中
Get PRO
三月 '26
+69
在2个频道中
Get PRO
二月 '26
+51
在2个频道中
Get PRO
一月 '26
+119
在2个频道中
Get PRO
十二月 '25
+81
在2个频道中
Get PRO
十一月 '25
+86
在1个频道中
Get PRO
十月 '25
+54
在3个频道中
Get PRO
九月 '25
+56
在3个频道中
Get PRO
八月 '25
+34
在2个频道中
Get PRO
七月 '25
+39
在3个频道中
Get PRO
六月 '25
+41
在2个频道中
Get PRO
五月 '25
+71
在3个频道中
Get PRO
四月 '25
+36
在1个频道中
Get PRO
三月 '25
+37
在2个频道中
Get PRO
二月 '25
+50
在1个频道中
Get PRO
一月 '25
+29
在1个频道中
Get PRO
十二月 '24
+75
在3个频道中
Get PRO
十一月 '24
+112
在3个频道中
Get PRO
十月 '24
+65
在1个频道中
Get PRO
九月 '24
+110
在1个频道中
Get PRO
八月 '24
+114
在1个频道中
Get PRO
七月 '24
+127
在6个频道中
Get PRO
六月 '24
+53
在2个频道中
Get PRO
五月 '24
+70
在2个频道中
Get PRO
四月 '24
+158
在26个频道中
Get PRO
三月 '24
+95
在2个频道中
Get PRO
二月 '24
+153
在24个频道中
Get PRO
一月 '24
+114
在2个频道中
Get PRO
十二月 '23
+96
在1个频道中
Get PRO
十一月 '23
+28
在1个频道中
Get PRO
十月 '23
+34
在1个频道中
Get PRO
九月 '23
+22
在0个频道中
Get PRO
八月 '23
+32
在0个频道中
Get PRO
七月 '23
+31
在0个频道中
Get PRO
六月 '23
+32
在0个频道中
Get PRO
五月 '23
+16
在0个频道中
Get PRO
四月 '23
+29
在0个频道中
Get PRO
三月 '23
+22
在0个频道中
Get PRO
二月 '23
+18
在0个频道中
Get PRO
一月 '23
+28
在0个频道中
Get PRO
十二月 '22
+33
在0个频道中
Get PRO
十一月 '22
+33
在0个频道中
Get PRO
十月 '22
+12
在0个频道中
Get PRO
九月 '22
+14
在0个频道中
Get PRO
八月 '22
+38
在0个频道中
Get PRO
七月 '22
+34
在0个频道中
Get PRO
六月 '22
+30
在0个频道中
Get PRO
五月 '22
+38
在0个频道中
Get PRO
四月 '22
+40
在0个频道中
Get PRO
三月 '22
+51
在0个频道中
Get PRO
二月 '22
+23
在0个频道中
Get PRO
一月 '22
+39
在0个频道中
Get PRO
十二月 '21
+243
在0个频道中
| 日期 | 订阅者增长 | 提及 | 频道 | |
| 11 六月 | +1 | |||
| 10 六月 | 0 | |||
| 09 六月 | +2 | |||
| 08 六月 | +3 | |||
| 07 六月 | +2 | |||
| 06 六月 | +4 | |||
| 05 六月 | +1 | |||
| 04 六月 | +2 | |||
| 03 六月 | +6 | |||
| 02 六月 | +9 | |||
| 01 六月 | +5 |
频道帖子
| 2 | 📡🅰️🅰️🅰️❎❎🅰️🅰️🅰️🅰️
PimEyes.Com | 760 |
| 3 | 👩💻 Performing RCE in Internet Explorer via clickjacking!
Credits: Igor Sak-Sakovsky's (𝕏 | Psych0tr1a)
https://swarm.ptsecurity.com/the-click-that-shouldnt-have-worked-rce-via-clickjacking-in-internet-explorer/ | 912 |
| 4 | 📡🛰 For 19 years, GPS satellites have secretly broadcast a “numbers station” in their public signals. We decoded 12M messages: a 2011 flash where 31 of 32 satellites flipped in hours, “ghost” substrings repeating years apart, and a “TEXT” prefix spreading now.
https://lsc-pagepro.mydigitalpublication.com/publication/?i=865273&p=62&view=issueViewer
https://github.com/sjmurdoch/gps-special-messages
https://x.com/i/status/2061829547289387209 | 1 338 |
| 5 | 🔗🆒🆒🔤🆒🆒🆒🆒
Transfer data between devices using just QR codes!
QR-Beam — A browser-based data transfer tool where both sender and receiver run entirely client-side via JavaScript. No installation, simple mobile-friendly UI, and designed for real-world use.
The idea isn't new, but was focused on turning it into a practical, production-ready solution with several improvements over existing PoCs.
Beta: https://ckure.org/rx/QR-Beam | 1 |
| 6 | 🔗🆒🆒🔤🆒🆒🆒🆒
Transfer data between devices using just QR codes!
QR-Beam — A browser-based data transfer tool where both sender and receiver run entirely client-side via JavaScript. No installation, simple mobile-friendly UI, and designed for real-world use.
The idea isn't new, but was focused on turning it into a practical, production-ready solution with several improvements over existing PoCs.
Beta: https://ckure.org/rx/QR-Beam | 1 |
| 7 | 🔗🆒🆒🔤🆒🆒🆒🆒
Transfer data between devices using just QR codes!
QR-Beam — A browser-based data transfer tool where both sender and receiver run entirely client-side via JavaScript. No installation, simple mobile-friendly UI, and designed for real-world use.
The idea isn't new, but was focused on turning it into a practical, production-ready solution with several improvements over existing PoCs.
Beta: https://ckure.org/rx/QR-Beam | 971 |
| 8 | 😔 Mini Plasma Zero-Day by Chaotic Eclipse (aka Nightmare Eclipse) with a total of 6 0-Days in 6 weeks.
Official blog:
https://deadeclipse666.blogspot.com
https://blog.barracuda.com/2026/05/19/nightmare-eclipse-zero-days-grudge | 1 113 |
| 9 | 📱Anthropic co-founder says there is a "real possibility that AI will displace human labor at a very large scale," and that supporting those people "will be a moral imperative of historic proportions."
And we do not have a mechanism while most of the control of AI is with few wealthy nations and individuals. | 830 |
| 10 | 🔠🔠🔠🔠🔠🔠🔠➖🔠🔠🔠
https://www.theverge.com/tech/935202/flipper-devices-one-zero-wireless-multi-tool-linux-open-source-computer | 1 341 |
| 11 | 🤖 🆒🆒🆒🆒🆒🆒
Earlier today Cloudflare's CSO shared how they tested Anthropic Mythos using an unreleased 8-stage vulnerability-discovery agent.
Opus implemented the agent and it works via Claude SDK with a Pro or Max subscription, no API.
https://github.com/evilsocket/audit
𝕏 | Simone | 1 379 |
| 12 | 🚀40K Starlink terminals hacked to lure Russians into a cyber trap as per anti-Russia propaganda news.
40,000 Starlink terminals go dark. Russian soldiers scramble for answers and turn to Telegram. They don’t realise they’ve just walked into a trap. The journalists travelled across Ukraine from Lviv to the front line in Zaporizhzhia to uncover a pretty audacious cyber operation. Meet Goldfinger and the 256 Cyber Assault Brigade and Yaro, and the 128th Mechanised Brigade, holding the line in the south. | 1 324 |
| 13 | 🤩 ❗️❗️❗️❗️❗️❗️
LLM used to make a Zero-Day by APT group on a popular software.
The zero day was a 2FA bypass via logic bug 🪲
Security researchers at Alphabet’s Google said they believe a cybercrime group used artificial intelligence to create a hacking tool that can bypass defenses in a widely-used tool to administer computer systems. The scheme, which was foiled when Google alerted the tool developer, would mark the first time that Google’s Threat Intelligence Group caught a hacker using an AI-generated “zero-day” in such a way, according to a report published Monday. | 1 162 |
| 14 | ⚠️⚠️⚠️⚠️⚠️⚠️
CVE-2026-0073: Critical Android Zero-Click, Zero-Day exploit in wireless debugging (if enabled) can allow adjacent hacker (in same network) to execute code as shell user. | 1 405 |
| 15 | 🅰️🅰️🅰️🔢🅰️🅰️🅰️
Devcore team chained ⛓️💥 4 logic bugs to achieve sandbox escape in Microsoft Edge in Pwn²Own 2026, Berlin. | 1 175 |
| 16 | 🤖 Mythos finds a curl vulnerability.
https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-vulnerability/ | 1 294 |
| 17 | 🆒🆒🆒🆒🔢🔢
FAST16 — Pre-Stuxnet Sabotage Malware (2005)
- Referenced in Shadow Brokers (2017) leak (“NOTHING TO SEE HERE”)
- Compiled ~2005 → ~5 years before Stuxnet
- Type: Sabotage malware (not espionage)
Target
- High-precision engineering / simulation software
- Includes LS-DYNA, PKPM, MOHID
- Used for physics, impact, and advanced simulations (incl. nuclear-related domains)
Technique
- Kernel driver: "fast16.sys"
- In-memory patching of target processes
- Injects subtle calculation errors (floating-point manipulation)
- Goal: corrupt outputs while appearing normal
Propagation
- Worm-like spread via weak Windows network shares
Attribution
- Not confirmed
- Strong suspicion: US or allied origin (based on NSA-linked leak context)
Note
- LS-DYNA ≠ purely “explosive software”
- Broader simulation usage; “explosive calculations” is a subset use case | 1 781 |
| 18 | IoT side channel (correlation) attack using WiFi.
Heuristic surveillance data is both widely under-reported and difficult to mitigate without tossing your devices and living in the stone age. | 817 |
| 19 | 💽 Phantomdrive is an open-source USB drive designed to conceal its actual capacity. Upon initial insertion, the device presents itself as an 8GB disk. To access the secondary partition, a file named "unlock.txt" must be created, followed by the entry of the password; the drive will subsequently unmount and remount, revealing the remaining data. All data is encrypted in place using an AES-256 key derived from the password. This mechanism is fundamentally different from how Veracrypt operates. | 1 520 |
| 20 | Phantomdrive is an open-source USB drive designed to conceal its actual capacity. Upon initial insertion, the device presents itself as an 8GB disk. To access the secondary partition, a file named "unlock.txt" must be created, followed by the entry of the password; the drive will subsequently unmount and remount, revealing the remaining data. All data is encrypted in place using an AES-256 key derived from the password. This mechanism is fundamentally different from how Veracrypt operates. Beta devices are available on the official website; please refer to the bio for the link. | 0 |
现已上线!2025 年 Telegram 研究 — 年度关键洞察 
