Available now! Telegram Research 2025 β the year's key insights 
CyberSecurityTechnologies
Closed channel
We have been working for YOU for more than 8 years!!! https://t.me/+9vdG4JOSgY8xMzdi See also: https://t.me/Cognitive_Security https://t.me/CyberSecurityOSINT https://t.me/Wireless_Cybersecurity For All Questions: in messages to the channel
Show moreπ Analytical overview of Telegram channel CyberSecurityTechnologies
Channel CyberSecurityTechnologies in the English language segment is an active participant. Currently, the community unites 35 841 subscribers, ranking 3 835 in the Technologies & Applications category and 1 046 in the USA region.
π Audience metrics and dynamics
Since its creation on Π½Π΅Π²ΡΠ΄ΠΎΠΌΠΎ, the project has demonstrated rapid growth, gathering an audience of 35 841 subscribers.
According to the latest data from 10 June, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by -517 over the last 30 days and by -15 over the last 24 hours, overall reach remains high.
- Verification status: Not verified
- Engagement rate (ER): The average audience engagement rate is 6.55%. Within the first 24 hours after publication, content typically collects 3.07% reactions from the total number of subscribers.
- Post reach: On average, each post receives 2 349 views. Within the first day, a publication typically gains 1 102 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 10.
- Thematic interests: Content is focused on key topics such as cve-2025, attack, threat, detection, llm.
π Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
βWe have been working for YOU for more than 8 years!!!
https://t.me/+9vdG4JOSgY8xMzdi
See also:
https://t.me/Cognitive_Security
https://t.me/CyberSecurityOSINT
https://t.me/Wireless_Cybersecurity
For All Questions: in messages to the channelβ
Thanks to the high frequency of updates (latest data received on 11 June, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
35 841
Subscribers
-1524 hours
-1117 days
-51730 days
Data loading in progress...
Similar Channels
Tags Cloud
Incoming and Outgoing Mentions
---
---
---
---
---
---
Attracting Subscribers
June '26
June '26
+1
in 2 channels
May '26
+8
in 8 channels
Get PRO
April '26
+5
in 5 channels
Get PRO
March '26
+6
in 6 channels
Get PRO
February '26
+53
in 12 channels
Get PRO
January '26
+5
in 5 channels
Get PRO
December '25
+30
in 10 channels
Get PRO
November '25
+5
in 10 channels
Get PRO
October '25
+103
in 11 channels
Get PRO
September '25
+169
in 11 channels
Get PRO
August '25
+181
in 14 channels
Get PRO
July '25
+216
in 13 channels
Get PRO
June '25
+140
in 8 channels
Get PRO
May '25
+80
in 4 channels
Get PRO
April '25
+110
in 4 channels
Get PRO
March '25
+154
in 7 channels
Get PRO
February '25
+150
in 7 channels
Get PRO
January '25
+153
in 10 channels
Get PRO
December '24
+614
in 6 channels
Get PRO
November '24
+2 694
in 9 channels
Get PRO
October '24
+3 905
in 8 channels
Get PRO
September '24
+3 114
in 4 channels
Get PRO
August '24
+3 425
in 7 channels
Get PRO
July '24
+3 738
in 2 channels
Get PRO
June '24
+3 441
in 3 channels
Get PRO
May '24
+3 316
in 1 channels
Get PRO
April '24
+3 222
in 4 channels
Get PRO
March '24
+3 443
in 6 channels
Get PRO
February '24
+2 626
in 4 channels
Get PRO
January '24
+1 689
in 8 channels
Get PRO
December '23
+1 310
in 2 channels
Get PRO
November '23
+273
in 7 channels
Get PRO
October '23
+331
in 2 channels
Get PRO
September '23
+322
in 0 channels
Get PRO
August '23
+197
in 0 channels
Get PRO
July '23
+179
in 0 channels
Get PRO
June '23
+148
in 0 channels
Get PRO
May '23
+149
in 0 channels
Get PRO
April '23
+210
in 0 channels
Get PRO
March '23
+149
in 0 channels
Get PRO
February '23
+149
in 0 channels
Get PRO
January '23
+141
in 0 channels
Get PRO
December '22
+187
in 0 channels
Get PRO
November '22
+288
in 0 channels
Get PRO
October '22
+140
in 0 channels
Get PRO
September '22
+192
in 0 channels
Get PRO
August '22
+672
in 0 channels
Get PRO
July '22
+174
in 0 channels
Get PRO
June '22
+162
in 0 channels
Get PRO
May '22
+168
in 0 channels
Get PRO
April '22
+129
in 0 channels
Get PRO
March '22
+163
in 0 channels
Get PRO
February '22
+315
in 0 channels
Get PRO
January '22
+154
in 0 channels
Get PRO
December '21
+247
in 0 channels
Get PRO
November '21
+119
in 0 channels
Get PRO
October '21
+157
in 0 channels
Get PRO
September '21
+126
in 0 channels
Get PRO
August '21
+346
in 0 channels
Get PRO
July '21
+140
in 0 channels
Get PRO
June '21
+409
in 0 channels
Get PRO
May '21
+97
in 0 channels
Get PRO
April '21
+315
in 0 channels
Get PRO
March '21
+199
in 0 channels
Get PRO
February '21
+220
in 0 channels
Get PRO
January '21
+211
in 0 channels
Get PRO
December '20
+2 406
in 0 channels
| Date | Subscriber Growth | Mentions | Channels | |
| 11 June | 0 | |||
| 10 June | 0 | |||
| 09 June | 0 | |||
| 08 June | 0 | |||
| 07 June | 0 | |||
| 06 June | +1 | |||
| 05 June | 0 | |||
| 04 June | 0 | |||
| 03 June | 0 | |||
| 02 June | 0 | |||
| 01 June | 0 |
Channel Posts
#DFIR
1β£ A deep technical analysis of Windows input pipelines, security telemetry, and why PuTTY, WinSCP, MySQL, SSH, and SFTP passwords may leak into system memory
https://hexderef.com/windows-11-passwords-in-memory-lsass-ctfmon-analysis
2β£ Aether - Windows memory-forensics and threat hunting tool
https://github.com/0xsp-SRD/aether
| 2 | #DevOps
#Tech_book
#Cyber_Education
"Fundamentals of DevOps and Software Delivery:
A Hands-On Guide to Deploying and Managing Software in Production", 2025.
]-> Code samples | 2 128 |
| 3 | #WebApp_Security
#Infosec_Standards
NIST SP 800-228A ipd:
"Guidelines for the Secure Deployment of RESTful Web APIs", May 2026.
// This document:
- Analyzes threats to RESTful APIs across the pre-runtime and runtime phases
- Provides guidelines for implementing a set of controls to mitigate threats | 2 037 |
| 4 | #tools
#AIOps
"AIRGuard: Guarding Agent Actions with Runtime Authority Control", May 2026.
// AIRGuard - runtime defense that combines authority context, resource trust labels, LLM-based risk simulation, and tiered enforcement to protect LLM agents from indirect prompt injection attacks via untrusted tool outputs | 2 083 |
| 5 | #AppSec
#Threat_Research
1β£ Click Or Trick (CVE-2025-59199):
Escaping the Sandbox with Windows URIs
https://www.safebreach.com/blog/click-or-trick-cve-2025-59199-escaping-the-sandbox-with-windows-uris
2β£ Adobe Acrobat Reader Escript.api UAF RCE
https://blog.exodusintel.com/2026/06/01/adobe-acrobat-reader-escript-api-use-after-free-remote-code-execution
3β£ Exploiting Windows Defender's Remediation Workflow for LPE
https://blog.calif.io/p/redsun-exploiting-windows-defenders | 2 025 |
| 6 | #NetSec
#Blue_Team_Techniques
"PLM-NIDS: A Protocol-Language Model for Network Intrusion Detection from Raw Packet Sequences Using RWKV State-Space Models", May 2026.
]-> https://github.com/shiva2vk/PLM-NIDS
// The RWKV backboneβs O(T) recurrent inference enables per-packet streaming without flow buffering, making PLM-NIDS operationally viable at line rate. Because it reads only IP/TCP/UDP headers, it is inherently encryption-agnostic: TLS 1.3, QUIC, and future encrypted protocols are handled transparently | 2 035 |
| 7 | #Fuzzing
#IoD_Security
"Framework for Discovering GPS Spoofing Attacks in Drone Swarms", Jun 2026.
// SwarmFuzz - fuzzing framework to efficiently find Swarm Propagation Vulnerabilities in drone swarms. It uses a combination of graph theory and gradient-guided optimization to find the potential attack parameters | 1 871 |
| 8 | #AIOps
"Hijacking Agent Memory: Stealthy Trojan Attacks Through Conversational Interaction", May 2026.
// MemPoison - novel memory poisoning attack that bypasses selective memory mechanisms in LLM agents, where an attacker can inject triggerable backdoors into the agent's long-term memory through dialogue interactions, thereby misleading its subsequent responses | 1 960 |
| 9 | #Whitepaper
#Kernel_Security
#Offensive_security
"Debugging Filesystem Minifilters with WinDbg", 2026.
// This technical reference poster explores Windows filesystem minifilters, kernel debugging, and filter communication ports from a red team perspective | 3 634 |
| 10 | #reversing
#Kernel_Security
BYOVD and Looting LSASS in the Modern EDR Era
https://g3tsyst3m.com/byovd/BYOVD-and-Looting-LSASS-in-the-Modern-EDR-Era
// The article details advanced BYOVD techniques exploiting kernel driver vulnerabilities to bypass Windows security, including methods for disabling LSASS protections, memory dumping, obfuscation, and defensive countermeasures | 1 987 |
| 11 | #Tech_book
#Kernel_Security
"Learning eBPF: Programming the Linux Kernel for Enhanced Observability, Networking, and Security", 2023.
]-> Repo | 2 416 |
| 12 | #Malware_analysis
1β£ BlackToad: Network Manipulation in an AutoIt Payload
https://www.jumpsec.com/guides/blacktoad-network-manipulation-in-an-autoit-payload
2β£ BTMOB: A stealthy RAT burrowing deep into Android devices
https://www.welivesecurity.com/en/malware/btmob-stealthy-rat-burrowing-deep-android-devices
3β£ Deep Dive into a Device Code Phishing Toolkit
https://newtonpaul.com/blog/device-code-lab-post-exploit | 2 033 |
| 13 | #Analytics
#Threat_Research
An analytical review of the main cybersecurity events for the week (May 23-30, 2026)
1β£ Privilege Escalation via a Page UaF in Qualcomm's AI Accelerator Linux Kernel Driver
// bug lives in Qualcomm's Cloud AI Accelerator kernel driver, qaic, which is present in mainline Linux
2β£ The Word 'Toad' Gave Any Website Full Control of Chrome's Most Popular VPN
// Urban VPN's extension deliberately sets up aΒ postMessageΒ listener - a channel that lets any script on any page you visit send it messages
3β£ Vaultjacking: One Captured PIN, the Entire Google Password Manager Vault
4β£ A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities
// ASR Rules
5β£ Detecting Tycoon 2FA AiTM attacks across Entra ID and GoogleΒ Workspace
// Tycoon 2FA bypasses MFA on Entra ID and Google Workspace...
6β£ CIFSwitch - vulnerability in Linux kernel's CIFS subsystem that allows root privileges to be gained
7β£ PuTTY 0.84 released
8β£ PyFory - Insecure Pickle Deserialization to RCE
// CVE-2025-61622
9β£ Drupal PostgreSQL SQLI
// SELECT-only SQLi to RCE when the injected expression runs as a PostgreSQL superuser
π Suricata 8.0.5 and 7.0.16 released
]-> Analytical review (May 16-23, 2026) | 2 307 |
| 14 | #SCA
#Hardware_Security
"FROST: Fingerprinting Remotely using
OPFS-based SSD Timing", 2026.
// SSD contention side channels can be mounted by a remote attacker fromΒ within the browser, without native code execution. FROST attack targets the Origin Private File System API in JavaScript, allowing us to create and access files on the disk, within the browserβs sandboxed environment | 2 045 |
| 15 | #exploit
#Kernel_Security
An AI audit of FreeBSD
https://blog.calif.io/p/an-ai-audit-of-freebsd
]-> setcred (CVE-2026-45250)
]-> ptrace (CVE-2026-45253)
]-> procdesc (CVE-2026-45251)
]-> Bonus
// Disclaimer | 2 403 |
| 16 | #tools
#NetSec
#hardening
Puck - Autonomous endpoint investigation via MCP
https://github.com/puck-security/puck-scout
// Puck is a three-component system that enables AI-driven, read-only endpoint investigation. The AI client asks questions, the MCP server orchestrates, and endpoint agents execute read-only commands | 2 294 |
| 17 | #tools
#NetSec
#hardening
Puck - Autonomous endpoint investigation via MCP
https://github.com/puck-security/puck-scout
// Puck is a three-component system that enables AI-driven, read-only endpoint investigation. The AI client asks questions, the MCP server orchestrates, and endpoint agents execute read-only commands | 1 |
| 18 | #tools
#Whitepaper
#Blue_Team_Techniques
"SIEM Detection Logic Conversion with LLMs", 2025.
]-> Scripts used to convert Splunk detections to Elastic Security using OpenAI and Google Gemini
// This research explores how LLMs and automation scripts can expedite the translation of detection logic between SIEMs, converting detections in minutes instead of hours | 2 421 |
| 19 | #tools
#DFIR
#Malware_analysis
#Blue_Team_Techniques
MalShark - AI-powered malware traffic analysis
and network forensics tool via MCP
https://github.com/MohitDabas/malshark
// Most pcap tools require an analyst to know exactly what to look for. This server bridges the gap... | 2 278 |
| 20 | #AppSec
#Threat_Research
"Resolving the Correct Library: A Loader-Level Defense Solution Against Shared Object Hijacking", Jan. 2026.
https://anonymous.4open.science/r/shareb_object_library_hijacking-5E36
// developed a loader-centric glibc prevention mechanism that enforces checking shared library identity at load time by binding dependencies to immutable build identifiers and cryptographic hashes | 2 524 |
