es
Feedback
cKure Red

cKure Red

Ir al canal en Telegram

The director's cut on critical feeds from InfoSec world 🌎 Main Channel: @cKure ☕️ or queries email us 📨 i@ckure.org

Mostrar más
EEUU9 257Tecnologías y Aplicaciones27 858
2 558
Suscriptores
+224 horas
+97 días
+5630 días

Carga de datos en curso...

Canales Similares
vx-underground
55.2K
vx-underground
The Bug Bounty Hunter
47.6K
The Bug Bounty Hunter
Malware News
14.5K
Malware News
Blue Team Alerts
14.3K
Blue Team Alerts
Security Harvester
8.7K
Security Harvester
avatar
1
Más canales
Nube de Etiquetas
attack16
cve-202511
exploit11
bypass9
avazeh8
cve-20248
researcher8
reza8
antenna7
cyber7
hacker7
linux7
resistance7
authentication6
drone6
handala6
rtk6
identity5
scada5
threat5
Menciones Entrantes y Salientes
---
---
---
---
---
---
Atraer Suscriptores
junio '26
junio '26
+39
en 2 canales
mayo '26
+82
en 1 canales
Get PRO
abril '26
+81
en 2 canales
Get PRO
marzo '26
+69
en 2 canales
Get PRO
febrero '26
+51
en 2 canales
Get PRO
enero '26
+119
en 2 canales
Get PRO
diciembre '25
+81
en 2 canales
Get PRO
noviembre '25
+86
en 1 canales
Get PRO
octubre '25
+54
en 3 canales
Get PRO
septiembre '25
+56
en 3 canales
Get PRO
agosto '25
+34
en 2 canales
Get PRO
julio '25
+39
en 3 canales
Get PRO
junio '25
+41
en 2 canales
Get PRO
mayo '25
+71
en 3 canales
Get PRO
abril '25
+36
en 1 canales
Get PRO
marzo '25
+37
en 2 canales
Get PRO
febrero '25
+50
en 1 canales
Get PRO
enero '25
+29
en 1 canales
Get PRO
diciembre '24
+75
en 3 canales
Get PRO
noviembre '24
+112
en 3 canales
Get PRO
octubre '24
+65
en 1 canales
Get PRO
septiembre '24
+110
en 1 canales
Get PRO
agosto '24
+114
en 1 canales
Get PRO
julio '24
+127
en 6 canales
Get PRO
junio '24
+53
en 2 canales
Get PRO
mayo '24
+70
en 2 canales
Get PRO
abril '24
+158
en 26 canales
Get PRO
marzo '24
+95
en 2 canales
Get PRO
febrero '24
+153
en 24 canales
Get PRO
enero '24
+114
en 2 canales
Get PRO
diciembre '23
+96
en 1 canales
Get PRO
noviembre '23
+28
en 1 canales
Get PRO
octubre '23
+34
en 1 canales
Get PRO
septiembre '23
+22
en 0 canales
Get PRO
agosto '23
+32
en 0 canales
Get PRO
julio '23
+31
en 0 canales
Get PRO
junio '23
+32
en 0 canales
Get PRO
mayo '23
+16
en 0 canales
Get PRO
abril '23
+29
en 0 canales
Get PRO
marzo '23
+22
en 0 canales
Get PRO
febrero '23
+18
en 0 canales
Get PRO
enero '23
+28
en 0 canales
Get PRO
diciembre '22
+33
en 0 canales
Get PRO
noviembre '22
+33
en 0 canales
Get PRO
octubre '22
+12
en 0 canales
Get PRO
septiembre '22
+14
en 0 canales
Get PRO
agosto '22
+38
en 0 canales
Get PRO
julio '22
+34
en 0 canales
Get PRO
junio '22
+30
en 0 canales
Get PRO
mayo '22
+38
en 0 canales
Get PRO
abril '22
+40
en 0 canales
Get PRO
marzo '22
+51
en 0 canales
Get PRO
febrero '22
+23
en 0 canales
Get PRO
enero '22
+39
en 0 canales
Get PRO
diciembre '21
+243
en 0 canales
Fecha
Crecimiento de Suscriptores
Menciones
Canales
13 junio+2
12 junio+2
11 junio+1
10 junio0
09 junio+2
08 junio+3
07 junio+2
06 junio+4
05 junio+1
04 junio+2
03 junio+6
02 junio+9
01 junio+5
Publicaciones del Canal
cKure Red
Exploiting CVE-2024-1065 via the Page Cache! A strategy for physical-page UAFs in MIGRATE_MOVABLE, where Dirty Pagetable and Dirty Cred don't apply. https://kuzey.rs/posts/MaliUAF/ Demonstrated on the Mali GPU UAF found by Project Zero.

2
Free research papers https://sci-bot.ru/
555
3
📡🅰️🅰️🅰️❎❎🅰️🅰️🅰️🅰️ PimEyes.Com
📡🅰️🅰️🅰️❎❎🅰️🅰️🅰️🅰️ PimEyes.Com
906
4
👩‍💻 Performing RCE in Internet Explorer via clickjacking! Credits: Igor Sak-Sakovsky's (𝕏 | Psych0tr1a) https://swarm.ptsecurity.com/the-click-that-shouldnt-have-worked-rce-via-clickjacking-in-internet-explorer/
1 012
5
📡🛰 For 19 years, GPS satellites have secretly broadcast a “numbers station” in their public signals. We decoded 12M messages: a 2011 flash where 31 of 32 satellites flipped in hours, “ghost” substrings repeating years apart, and a “TEXT” prefix spreading now. https://lsc-pagepro.mydigitalpublication.com/publication/?i=865273&p=62&view=issueViewer https://github.com/sjmurdoch/gps-special-messages https://x.com/i/status/2061829547289387209
1 450
6
🔗🆒🆒🔤🆒🆒🆒🆒 Transfer data between devices using just QR codes! QR-Beam — A browser-based data transfer tool where both sender and receiver run entirely client-side via JavaScript. No installation, simple mobile-friendly UI, and designed for real-world use. The idea isn't new, but was focused on turning it into a practical, production-ready solution with several improvements over existing PoCs. Beta: https://ckure.org/rx/QR-Beam
1
7
🔗🆒🆒🔤🆒🆒🆒🆒 Transfer data between devices using just QR codes! QR-Beam — A browser-based data transfer tool where both sender and receiver run entirely client-side via JavaScript. No installation, simple mobile-friendly UI, and designed for real-world use. The idea isn't new, but was focused on turning it into a practical, production-ready solution with several improvements over existing PoCs. Beta: https://ckure.org/rx/QR-Beam
1
8
🔗🆒🆒🔤🆒🆒🆒🆒 Transfer data between devices using just QR codes! QR-Beam — A browser-based data transfer tool where both sender and receiver run entirely client-side via JavaScript. No installation, simple mobile-friendly UI, and designed for real-world use. The idea isn't new, but was focused on turning it into a practical, production-ready solution with several improvements over existing PoCs. Beta: https://ckure.org/rx/QR-Beam
1 047
9
😔 Mini Plasma Zero-Day by Chaotic Eclipse (aka Nightmare Eclipse) with a total of 6 0-Days in 6 weeks. Official blog: https://deadeclipse666.blogspot.com https://blog.barracuda.com/2026/05/19/nightmare-eclipse-zero-days-grudge
1 164
10
📱Anthropic co-founder says there is a "real possibility that AI will displace human labor at a very large scale," and that s
📱Anthropic co-founder says there is a "real possibility that AI will displace human labor at a very large scale," and that supporting those people "will be a moral imperative of historic proportions." And we do not have a mechanism while most of the control of AI is with few wealthy nations and individuals.
855
11
🔠🔠🔠🔠🔠🔠🔠➖🔠🔠🔠 https://www.theverge.com/tech/935202/flipper-devices-one-zero-wireless-multi-tool-linux-open-source-com
🔠🔠🔠🔠🔠🔠🔠➖🔠🔠🔠 https://www.theverge.com/tech/935202/flipper-devices-one-zero-wireless-multi-tool-linux-open-source-computer
1 361
12
🤖 🆒🆒🆒🆒🆒🆒 Earlier today Cloudflare's CSO shared how they tested Anthropic Mythos using an unreleased 8-stage vulnerability-discovery agent. Opus implemented the agent and it works via Claude SDK with a Pro or Max subscription, no API. https://github.com/evilsocket/audit 𝕏 | Simone
1 454
13
🚀40K Starlink terminals hacked to lure Russians into a cyber trap as per anti-Russia propaganda news. 40,000 Starlink termin
🚀40K Starlink terminals hacked to lure Russians into a cyber trap as per anti-Russia propaganda news. 40,000 Starlink terminals go dark. Russian soldiers scramble for answers and turn to Telegram. They don’t realise they’ve just walked into a trap. The journalists travelled across Ukraine from Lviv to the front line in Zaporizhzhia to uncover a pretty audacious cyber operation. Meet Goldfinger and the 256 Cyber Assault Brigade and Yaro, and the 128th Mechanised Brigade, holding the line in the south.
1 352
14
🤩 ❗️❗️❗️❗️❗️❗️ LLM used to make a Zero-Day by APT group on a popular software. The zero day was a 2FA bypass via logic bug �
🤩 ❗️❗️❗️❗️❗️❗️ LLM used to make a Zero-Day by APT group on a popular software. The zero day was a 2FA bypass via logic bug 🪲 Security researchers at Alphabet’s Google said they believe a cybercrime group used artificial intelligence to create a hacking tool that can bypass defenses in a widely-used tool to administer computer systems. The scheme, which was foiled when Google alerted the tool developer, would mark the first time that Google’s Threat Intelligence Group caught a hacker using an AI-generated “zero-day” in such a way, according to a report published Monday.
1 179
15
⚠️⚠️⚠️⚠️⚠️⚠️ CVE-2026-0073: Critical Android Zero-Click, Zero-Day exploit in wireless debugging (if enabled) can allow adjace
⚠️⚠️⚠️⚠️⚠️⚠️ CVE-2026-0073: Critical Android Zero-Click, Zero-Day exploit in wireless debugging (if enabled) can allow adjacent hacker (in same network) to execute code as shell user.
1 426
16
🅰️🅰️🅰️🔢🅰️🅰️🅰️ Devcore team chained ⛓️‍💥 4 logic bugs to achieve sandbox escape in Microsoft Edge in Pwn²Own 2026, Ber
🅰️🅰️🅰️🔢🅰️🅰️🅰️ Devcore team chained ⛓️‍💥 4 logic bugs to achieve sandbox escape in Microsoft Edge in Pwn²Own 2026, Berlin.
1 187
17
🤖 Mythos finds a curl vulnerability. https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-vulnerability/
1 296
18
🆒🆒🆒🆒🔢🔢 FAST16 — Pre-Stuxnet Sabotage Malware (2005) - Referenced in Shadow Brokers (2017) leak (“NOTHING TO SEE HERE”)
🆒🆒🆒🆒🔢🔢 FAST16 — Pre-Stuxnet Sabotage Malware (2005) - Referenced in Shadow Brokers (2017) leak (“NOTHING TO SEE HERE”) - Compiled ~2005 → ~5 years before Stuxnet - Type: Sabotage malware (not espionage) Target - High-precision engineering / simulation software - Includes LS-DYNA, PKPM, MOHID - Used for physics, impact, and advanced simulations (incl. nuclear-related domains) Technique - Kernel driver: "fast16.sys" - In-memory patching of target processes - Injects subtle calculation errors (floating-point manipulation) - Goal: corrupt outputs while appearing normal Propagation - Worm-like spread via weak Windows network shares Attribution - Not confirmed - Strong suspicion: US or allied origin (based on NSA-linked leak context) Note - LS-DYNA ≠ purely “explosive software” - Broader simulation usage; “explosive calculations” is a subset use case
1 781
19
IoT side channel (correlation) attack using WiFi. Heuristic surveillance data is both widely under-reported and difficult to
IoT side channel (correlation) attack using WiFi. Heuristic surveillance data is both widely under-reported and difficult to mitigate without tossing your devices and living in the stone age.
817
20
💽 Phantomdrive is an open-source USB drive designed to conceal its actual capacity. Upon initial insertion, the device prese
💽 Phantomdrive is an open-source USB drive designed to conceal its actual capacity. Upon initial insertion, the device presents itself as an 8GB disk. To access the secondary partition, a file named "unlock.txt" must be created, followed by the entry of the password; the drive will subsequently unmount and remount, revealing the remaining data. All data is encrypted in place using an AES-256 key derived from the password. This mechanism is fundamentally different from how Veracrypt operates.
1 520
Ver todas las publicaciones