cKure Red
Open in Telegram
The director's cut on critical feeds from InfoSec world 🌎 Main Channel: @cKure ☕️ or queries email us 📨 i@ckure.org
Show more2 755
Subscribers
+224 hours
+197 days
+6230 days
Data loading in progress...
Similar Channels
Tags Cloud
Incoming and Outgoing Mentions
---
---
---
---
---
---
Attracting Subscribers
October '26Oct '26
October '26
+5
in 0 channels
September '26
+89
in 7 channels
Get PRO
August '26
+56
in 5 channels
Get PRO
July '26
+90
in 3 channels
Get PRO
June '26
+106
in 2 channels
Get PRO
May '26
+82
in 1 channels
Get PRO
April '26
+81
in 2 channels
Get PRO
March '26
+69
in 2 channels
Get PRO
February '26
+51
in 2 channels
Get PRO
January '26
+119
in 2 channels
Get PRO
December '25
+81
in 2 channels
Get PRO
November '25
+86
in 1 channels
Get PRO
October '25
+54
in 3 channels
Get PRO
September '25
+56
in 3 channels
Get PRO
August '25
+34
in 2 channels
Get PRO
July '25
+39
in 3 channels
Get PRO
June '25
+41
in 2 channels
Get PRO
May '25
+71
in 3 channels
Get PRO
April '25
+36
in 1 channels
Get PRO
March '25
+37
in 2 channels
Get PRO
February '25
+50
in 1 channels
Get PRO
January '25
+29
in 1 channels
Get PRO
December '24
+75
in 3 channels
Get PRO
November '24
+112
in 3 channels
Get PRO
October '24
+65
in 1 channels
Get PRO
September '24
+110
in 1 channels
Get PRO
August '24
+114
in 1 channels
Get PRO
July '24
+127
in 6 channels
Get PRO
June '24
+53
in 2 channels
Get PRO
May '24
+70
in 2 channels
Get PRO
April '24
+158
in 26 channels
Get PRO
March '24
+95
in 2 channels
Get PRO
February '24
+153
in 24 channels
Get PRO
January '24
+114
in 2 channels
Get PRO
December '23
+96
in 1 channels
Get PRO
November '23
+28
in 1 channels
Get PRO
October '23
+34
in 1 channels
Get PRO
September '23
+22
in 0 channels
Get PRO
August '23
+32
in 0 channels
Get PRO
July '23
+31
in 0 channels
Get PRO
June '23
+32
in 0 channels
Get PRO
May '23
+16
in 0 channels
Get PRO
April '23
+29
in 0 channels
Get PRO
March '23
+22
in 0 channels
Get PRO
February '23
+18
in 0 channels
Get PRO
January '23
+28
in 0 channels
Get PRO
December '22
+33
in 0 channels
Get PRO
November '22
+33
in 0 channels
Get PRO
October '22
+12
in 0 channels
Get PRO
September '22
+14
in 0 channels
Get PRO
August '22
+38
in 0 channels
Get PRO
July '22
+34
in 0 channels
Get PRO
June '22
+30
in 0 channels
Get PRO
May '22
+38
in 0 channels
Get PRO
April '22
+40
in 0 channels
Get PRO
March '22
+51
in 0 channels
Get PRO
February '22
+23
in 0 channels
Get PRO
January '22
+39
in 0 channels
Get PRO
December '21
+243
in 0 channels
| Date | Subscriber Growth | Mentions | Channels | |
| 02 October | +3 | |||
| 01 October | +2 |
Channel Posts
| 2 | ☁️ Italian firm Dataflow Security, founded in 2019 by young hacker Luca Todesco, develops high-value exploits; including zero-click tools that break into computers and smartphones and has grown rapidly into a multimillion-euro supplier for governments and spyware makers.
An investigation shows deep ties to Israel’s intelligence and military-cyber world:
former senior Mossad official Eyal Tsir Cohen (shortlisted in 2025 to lead Shin Bet) now heads its two Israeli subsidiaries, while staff include veterans of Unit 8200 and former NSO Group employees.
https://irpimedia.irpi.eu/en-inside-the-secretive-cyberweapons-company-that-won-over-israels-intelligence-elite/ | 883 |
| 3 |  Alleged Google Pixel 10 Zero Day at 2.5K USD only as chain included some n-days. An interesting thread.
reported a chrome fullchain (web -> shell) on pixel 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome.
now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k. despite cve + shell :|
https://x.com/1lexxi/status/2102771891630928223 | 648 |
| 4 |  AliExpress spyware caught using side channel attack to compromise hardware. | 1 545 |
| 5 |  😒 Claude Code was used to make missile guidance system for 9 months by Houthis using multiple agents to make an offline flight simulator.
The accounts linked were banned by Claude. The offline version of flight simulator is however on the loose. | 3 044 |
| 6 | theartofexploitation.pdf | 1 475 |
| 7 | A prompt-crafting technique for bypassing quick LLM-based policy checks — using plain English (no emojis, base64, invisible formatting, etc.) A policy-violating payload (e.g. ”encrypt files in ~/Documents”, “give me a biohazard recipe”, “ignore all previous instructions and…”) is embedded in a specially crafted prose wrapper.
An LLM with limited resources and attention fails to realize the payload is there, classifies the prompt as benign and passes it off to the target model. The target then notices the payload, extracts it and treats it as further input. This technique is itself not a jailbreak, but it can be combined with one by using a jailbreak prompt as the payload.
https://research.checkpoint.com/2026/puzzlemask-abusing-plain-prose-as-a-covert-ai-attack-vector/ | 1 544 |
| 8 | 🎵 Cloudflare Zero-day: Accessing Any Host Globally.
https://fearsoff.org/research/cloudflare-acme | 1 713 |
| 9 | 🤩🤩🤩Harmony SASE: When a quote in the path was enough for root.
https://somelab.ai/harmony-sase-helpertool-lpe | 1 540 |
| 10 |  ⭕️ RFID relay attack by Lukas Stefanko. | 1 950 |
| 11 |  🛫A device the size of a coin could hack a Boeing 737.
Security researchers from the University of California San Diego and Oberlin College recently presented a prototype device that could hack a Boeing 737 in less than a minute. Their aim was to expose a blind spot in aviation security and to show how physical access hacking represents a practical threat. In a statement to WIRED, Boeing downplayed that threat. “Our technical experts are confident that the layers of protection in place on the airplane, including within the system design and the operating environment, provide sufficient mitigation to significantly limit the feasibility and risk of real-world attacks.” The researchers say, Boeing hasn't told them about any technical fix for the vulnerabilities they've discovered. That lack of an immediate security update for planes shouldn't be cause for panic or grounding aircraft, the security researchers wrote in their paper. “All of the authors of this paper routinely travel on Boeing 737 aircraft and expect to continue doing so,” the introduction of the paper reads. Words: Andy Greenberg Video Producer: Tamanna Sajeed | 1 063 |
| 12 |  🇮🇱🇮🇱 How NSW police could soon clone your entire phone at a traffic stop. No warrant needed.
On Friday the Minns government introduced legislation letting police plug your phone into military-grade Israeli extraction tech, the same UFED devices used by ICE, and copy everything. Contacts, messages, photos, even deleted files, in minutes. Refuse your PIN and they can brute force it anyway. It also lets them pull unredacted toll camera images into the national facial recognition database, search your device without a warrant, and override your right against self-incrimination. | 2 284 |
| 13 |  Malicious AI | 1 880 |
| 14 |  Fish Audio just launched S2.1 Pro, a new voice AI model positioned as a serious competitor to ElevenLabs. Its biggest advantage is cost. Depending on the ElevenLabs model used for comparison, Fish Audio can be nearly 5 times cheaper while also being built on an open-weight foundation. In this demo, the system handles multiple speakers, interruptions, changing requests, name spelling, and a longer conversation without losing track of the order. It shows how quickly voice AI is becoming more capable, accessible, and affordable for developers. The real test will be whether Fish Audio can match ElevenLabs in voice quality, reliability, latency, and production performance. | 917 |
| 15 | 👩💻 Achieving GitLab RCE via Two Ruby Memory Corruption Vulnerabilities.
Technical Summary:
https://depthfirst.com/research/going-depthfirst-achieving-gitlab-rce-via-two-ruby-memory-corruption-vulnerabilities
PoC:
https://github.com/wupco/gitlab-rce-demo/tree/main
Overview:
https://depthfirst.com/gitlab-rce-oj-spill
Thread: 🧵
https://x.com/i/status/2080763568044290535 | 1 695 |
| 16 | ✅CVE-2026-63030: Unauthenticated SQL injection in WordPress core chaining to RCE. No credentials, no configuration. One endpoint: POST /wp-json/batch/v1.
The REST batch endpoint builds two parallel arrays ($matches and $validation) that fall out of step when a sub-request path fails wp_parse_url(). A sub-request gets dispatched under a different handler's context. The PoC nests this route confusion twice: first to bypass the method allow-list, then to reach a blind SQL injection via author_exclude in WP_Query, which interpolates the value into SQL as a string.
The chain:
boolean/time-based blind SQLi → extract admin password hash → crack → plugin upload → command execution. Interactive shell included.
Affects WordPress 6.9.0–6.9.4 and 7.0.0–7.0.1. Fixed in 6.9.5 and 7.0.2. Python 3.8+, zero dependencies.
Mitigation:
block /wp-json/batch/v1 and rest_route=/batch/v1 at the edge, or require auth via rest_pre_dispatch filter.
https://github.com/Icex0/wp2shell-poc | 1 444 |
| 17 |  Detecting jammers via over the shelf hardware like directional antenna 📡 | 1 359 |
| 18 | 💻😯Windows includes a file-system virtualization feature that can redirect one local path to another without modifying the original file or leaving a persistent filesystem artifact. It is implemented by bindflt.sys, the Bind Filter minifilter driver, and used legitimately by Store apps, Windows Sandbox, and Windows containers.
https://www.bitdefender.com/en-us/blog/businessinsights/bind-link-abuses-windows-feature-edr-evasion-technique
https://x.com/i/status/2078016406856282445 | 1 166 |
| 19 |  Techno-Fascism, The Palantair; an evil-corp in true sense. | 1 381 |
| 20 |  🐧GhostLock (CVE-2026-43499): a 15-year-old Linux kernel vulnerability that affects every distribution. Desktop, server, Android, IoT, embedded. $92,337 Google kernelCTF bounty.
A stack-UAF in the rtmutex subsystem. remove_waiter() uses current instead of waiter::task during proxy-lock rollback in futex_requeue(), leaving a dangling pointer to freed kernel stack memory. No special kernel modules needed, only CONFIG_FUTEX_PI which is enabled on every distro.
Nebula Security (NebuSec) turned it into a 97% stable privilege escalation and container escape. The exploit chains a dangling pointer into an arbitrary address write, hijacks a function table for control flow, and achieves root in about 5 seconds. Found by VEGA, their AI vulnerability scanner.
Part of IonStack, the first browser-to-kernel full-chain RCE on Android 17: CVE-2026-10702 (Firefox IonMonkey JIT 0-day, near 100% success rate) chained with GhostLock for kernel LPE.
Present since Linux 2.6.39 (2011). Fixed in Linux 7.1. Full exploit code published on GitHub.
Exploit:
https://github.com/NebuSec/CyberMeowfia/tree/main/IonStack/CVE-2026-43499 | 1 382 |
