Sys-Admin InfoSec
Open in Telegram
News of cybersecurity / information security, information technology, data leaks / breaches, cve, hacks, tools, trainings * Multilingual (En, Ru). * Chat - @sysadm_in * Job - @sysadm_in_job * DNS - OpenBLD.net * ? - @sysadminkz
Show more📈 Analytical overview of Telegram channel Sys-Admin InfoSec
Channel Sys-Admin InfoSec (@sysadm_in_channel) in the English language segment is an active participant. Currently, the community unites 12 949 subscribers, ranking 9 493 in the Technologies & Applications category and 50 090 in the Russia region.
📊 Audience metrics and dynamics
Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 12 949 subscribers.
According to the latest data from 08 September, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by 33 over the last 30 days and by 1 over the last 24 hours, overall reach remains high.
- Verification status: Not verified
- Engagement rate (ER): The average audience engagement rate is 14.83%. Within the first 24 hours after publication, content typically collects 5.57% reactions from the total number of subscribers.
- Post reach: On average, each post receives 1 920 views. Within the first day, a publication typically gains 721 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 0.
- Thematic interests: Content is focused on key topics such as threat, aws, attack, actor, cve-2025.
📝 Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
“News of cybersecurity / information security, information technology, data leaks / breaches, cve, hacks, tools, trainings
* Multilingual (En, Ru).
* Chat - @sysadm_in
* Job - @sysadm_in_job
* DNS - OpenBLD.net
* ? - @sysadminkz”
Thanks to the high frequency of updates (latest data received on 09 September, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
12 949
Subscribers
+124 hours
+27 days
+3330 days
Posts Archive
12 949
Critical vulnerabilities in MikroTik RouterOS are being actively exploited. Immediate update recommended
The CERT Polska team has identified and coordinated the disclosure of six vulnerabilities in MikroTik RouterOS. Combining two of them allows an attacker to take full control of the device without authentication if the device supports remote access using the SSH protocol. To make this chain easier to identify, we have given it a common name, MikroTrick:
https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/
12 949
🦄️️️️️️ Open SysConf'26. Спикер - ты нам нужен.
Начало сентября означает не только начало учебного года, но и, что Open SysConf'26 ближе чем ты думаешь!
Мы ищем доклады и докладчиков, заявки оставлять здесь.
В этом году места ограничены, поэтому фиксируйся, что бы точно попасть здесь.
Какие доклады мы ищем - интересные, бизнесовые, технические, ресерчи - все то, что поможет каждому развиться и сделать шаг вперед.
Передай друзьям, знакомым - мы рады видеть всех, кто готов развиваться и показывать дела, а "не пиздеть - не мешки ворочить".
Будут вопросы - смело пиши.
Всем Мир ✌️
12 949
Building Linux eBPF/XDP apps on macOS (Apple Silicon)
I spend a lot of time building high-performance DNS filters and network tools in Go. My primary development machine is an Apple Silicon Mac, but all the production deployments target Linux/AMD64 servers.
Recently, I started heavily integrating eBPF and XDP to drop abusive traffic (like random subdomain attacks) before it even hits the Go networking stack. However, compiling C eBPF code locally on macOS has always been a pain due to the missing Linux headers and the architectural differences...
I wrote down the exact step-by-step process, including a workaround for the notorious Debian multiarch header issue (asm/types.h) and a neat little smoke test using bpftool inside the container..:
https://openbld.net/blog/build-xdp-ebpf-macos-guide/
12 949
Repost from Sys-Admin Up
Survey: 56% of AI enthusiasts (and a third of all users) tell chatbots things they keep from other people
https://spreadprivacy.com/ai-privacy-survey-aug26/
12 949
Manic: Blend between Banking Malware & Spyware
is a new Android banking malware and mobile spyware:
https://www.threatfabric.com/blogs/manic-blend-between-banking-malware-and-spyware
12 949
Clop Returns with Custom Implant in Mass-Extortion Campaign
..“Clop's” exploitation of CVE-2026-12569 in PTC Windchill has returned the group to mass exploitation, delivering a custom web shell that provides full data-theft capability from the moment of deployment, with no additional tooling required..:
https://reliaquest.com/blog/clop-returns-with-custom-implant-in-mass-extortion-campaign/
12 949
Repost from OpenBLD.net
3 BILLION DNS queries.
Almost +1 billion in one week.
OpenBLD started in 2019 as a homegrown project handling around 35K DNS queries a day.
Today:
→ ~15M queries/hour
→ 4K+ queries/second
→ servers distributed around the world
→ billions of DNS queries processed
And it still runs mostly on regular VPS infrastructure - with plenty of performance headroom left.
Getting here required years of optimizing the entire stack: networking, DNS processing, caching, filtering, load balancing, observability, and the Go code itself.
Now the growth is public too:
Real-time OpenBLD network statistics are live on OpenBLD.net.
From 35K/day to 3 billion.
Still building. 🚀
Fast. Private. Open.
12 949
Claude in Chrome: From alert(1) to Full Account Takeover
https://labs.zenity.io/post/claude-in-chrome-from-alert-to-full-account-takeover
12 949
7-Zip Leaves Extracted Malware Without Mark-of-the-Web, Bypassing Windows SmartScreen
evil 7-zip)
https://cyberpress.org/7-zip-bypasses-smartscreen-protections/
12 949
Threat Actors Abuse Trusted Software Lures and Cloudflare Tunnels to Deploy ScreenConnect RMM Agents Across Windows and macOSScreenConnect RMM Agents Across Windows and macOS
Analyzing SMOKE#SCREEN:
https://www.securonix.com/blog/smoke-screen-screenconnect-rmm-abuse-cloudflare-tunnels/
12 949
Welcome to Danglegeddon
Silent Push Simulation Demonstrates Why Dangling Dns Domains Continue To Pose Global Threats..:
https://www.silentpush.com/blog/danglegeddon/
12 949
ClickLock Stealer: Paste Once, Lose Everything
https://www.group-ib.com/blog/clicklock-stealer-macos-malware/
12 949
Coordinated AsyncAPI Supply Chain Attack: Miasma RAT Delivered via Compromised CI/CD Pipelines in Two Repositories
https://www.stepsecurity.io/blog/compromised-next-branch-pushes-malicious-asyncapi-generator-generator-helpers-and-generator-components-to-npm
12 949
Cursor 0day: When Full Disclosure Becomes the Only Protection Left
https://mindgard.ai/blog/cursor-0day-when-full-disclosure-becomes-the-only-protection-left
12 949
Inside Forg365: A Telegram-Distributed Sneaky 2FA-Style PhaaS Targeting
https://zerobec.com/blog/inside-forg365-telegram-distributed-sneaky2fa-style-phaas
12 949
Vishing actors target Entra passkey enrollment (mimics the Microsoft passkey enrollment)
The threat actor registers domains that incorporate the word passkey as part of a voice-enabled phishing (“vishing”) scheme. The threat actor then calls targeted users on the phone in an attempt to persuade them that they need to register a new passkey.:
https://www.okta.com/en-au/blog/threat-intelligence/vishing-actors-target-microsoft-entra-passkey-enrollment-/
12 949
DuneSlide: Two Critical RCE vulnerabilities via Zero-Click Prompt Injection in Cursor IDE
https://www.catonetworks.com/blog/duneslide-two-critical-rce-vulnerabilities/
12 949
FortiBleed - Breach How 80,000+ Corporate= Firewalls Were Quietly Compromised
If your organization uses a Fortinet firewall or VPN product and appears in this dataset, treat your network perimeter as already compromised and act immediately. SOCRadar rates this campaign Critical..:
https://socradar.io/blog/fortibleed-fortinet-firewalls-compromised/
