Cyber Security News
Be Cyber Aware. Subscribe. Our chat: t.me/cybersecuritynewschat Our vacancies channel: @CyberSecurityJobs LinkedIn: https://www.linkedin.com/company/securitynews/ 📩 Collab: cybersecnewsinfo@gmail.com Paid Ads: @cybersecadmin
نمایش بیشتر📈 تحلیل کانال تلگرام Cyber Security News
کانال Cyber Security News (@cyber_security_channel) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 55 738 مشترک است و جایگاه 2 369 را در دسته فناوری و برنامهها و رتبه 506 را در منطقه الولايات المتحدة الأمريكية دارد.
📊 شاخصهای مخاطب و پویایی
از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 55 738 مشترک جذب کرده است.
بر اساس آخرین دادهها در تاریخ 08 ژوئیه, 2026، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر 416 و در ۲۴ ساعت گذشته برابر 23 بوده و همچنان دسترسی گستردهای حفظ شده است.
- وضعیت تأیید: تأیید نشده
- نرخ تعامل (ER): میانگین تعامل مخاطب 7.01% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً 2.67% واکنش نسبت به کل مشترکان کسب میکند.
- دسترسی پستها: هر پست به طور میانگین 3 909 بازدید دریافت میکند. در اولین روز معمولاً 1 490 بازدید جمعآوری میشود.
- واکنشها و تعامل: مخاطبان بهطور فعال حمایت میکنند؛ میانگین واکنش به هر پست 7 است.
- علایق موضوعی: محتوا بر موضوعات کلیدی مانند cybersecurity, attack, threat, cyber, ----- تمرکز دارد.
📝 توضیح و سیاست محتوایی
نویسنده این فضا را محل بیان دیدگاههای شخصی توصیف میکند:
“Be Cyber Aware. Subscribe.
Our chat: t.me/cybersecuritynewschat
Our vacancies channel: @CyberSecurityJobs
LinkedIn: https://www.linkedin.com/company/securitynews/
📩 Collab: cybersecnewsinfo@gmail.com
Paid Ads: @cybersecadmin”
به لطف بهروزرسانیهای پرتکرار (آخرین داده در تاریخ 09 ژوئیه, 2026)، کانال همواره بهروز و دارای دسترسی بالاست. تحلیلها نشان میدهد مخاطبان بهطور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامهها تبدیل کردهاند.
در حال بارگیری داده...
| تاریخ | رشد مشترکین | اشارات | کانالها | |
| 09 ژوئیه | +12 | |||
| 08 ژوئیه | +25 | |||
| 07 ژوئیه | +30 | |||
| 06 ژوئیه | +28 | |||
| 05 ژوئیه | +10 | |||
| 04 ژوئیه | +15 | |||
| 03 ژوئیه | +17 | |||
| 02 ژوئیه | +32 | |||
| 01 ژوئیه | +5 |
| 2 | «Bad Epoll» 0-Day in Linux Kernel Grants Root on Linux Servers and Android Devices
Researchers disclosed CVE-2026-46242, a use-after-free race condition in the Linux kernel's epoll subsystem that lets a local unprivileged user escalate to root.
The exploit reportedly achieves ~99% reliability and is reachable from the Chrome renderer sandbox, opening a browser-to-kernel escalation chain.
Epoll cannot be disabled, so patching is the only mitigation — a fix landed roughly two months after initial disclosure.
@Cyber_Security_Channel | 2 424 |
| 3 | US Offers $10M for Info on Russia-Linked Hackers Behind Signal and WhatsApp Attacks
The State Department announced a $10 million reward for information on UNC5792 and UNC4221, two Russia-linked groups accused of hijacking the Signal and WhatsApp accounts of government officials.
The operations abused legitimate «linked device» features via phishing pages.
Officials working on Ukraine-related policy were among the primary targets.
@Cyber_Security_Channel | 3 226 |
| 4 | ‘DirtyClone’ Linux Kernel Vulnerability Leads to Root Access
At a high level, the vulnerabilities exist because the kernel does not separate the page cache used for executables and files from packet data processed via zero-copy paths, and in-place transformations such as encryption/decryption that write back to the same buffer.
Cyber_Security_Channel | 3 747 |
| 5 | From Last Week: Klue Breach Cascades Into Multiple Cybersecurity Firms
Attackers breached market-intelligence platform Klue and pivoted into the Salesforce environments of several of its cybersecurity-firm customers.
Disclosed downstream victims include HackerOne, Huntress, Recorded Future, Snyk, and Tanium.
The incident underscores how SaaS supply-chain access can turn one vendor compromise into a sector-wide breach.
@Cyber_Security_Channel | 4 154 |
| 6 | Microsoft Ties Mastra AI npm Supply Chain Attack to North Korea
Microsoft attributed a supply chain attack on the Mastra AI ecosystem to Sapphire Sleet, a North Korean group also known as BlueNoroff.
Attackers compromised more than 140 npm packages to plant malicious dependencies in downstream developer projects.
The campaign extends a pattern of DPRK targeting of Web3 and AI developer pipelines.
@Cyber_Security_Channel | 4 479 |
| 7 | FBI Dismantles China-Based Cybercrime Network Tied to $1.9B in Losses
Federal authorities, working with Google and Lumen, took down a sprawling cybercrime operation based in China.
The group is linked to roughly $1.9 billion in documented victim losses worldwide.
The takedown disrupted infrastructure used for fraud, account compromise, and money laundering across multiple campaigns.
@Cyber_Security_Channel | 3 969 |
| 8 | FBI Dismantles China-Based Cybercrime Network Tied to $1.9B in Losses
Federal authorities, working with Google and Lumen, took down a sprawling cybercrime operation based in China.
The group is linked to roughly $1.9 billion in documented victim losses worldwide.
The takedown disrupted infrastructure used for fraud, account compromise, and money laundering across multiple campaigns.
@Cyber_Security_Channel | 312 |
| 9 | Tata Electronics Confirms Cybersecurity Incident Exposing Confidential Data
As a subsidiary of the Tata Group, Tata Electronics has acknowledged a breach affecting its systems.
The group known as World Leaks has claimed responsibility for the incident, alleging it has exfiltrated over 200,000 files, amounting to approximately 630 gigabytes of sensitive information.
Cyber_Security_Channel | 4 020 |
| 10 | California Water Utility Investigates Iran-Linked Breach Claim
A California water utility is investigating claims that an Iran-linked hacking group breached its systems.
The incident renews concerns about state-sponsored intrusions into US critical infrastructure.
Authorities are assessing the scope and whether operational technology was affected.
@Cyber_Security_Channel | 4 277 |
| 11 | ❗Your SOC May See the URL, but Still Miss the Attack Unfolding Inside the Browser
Hidden browser activity can slow triage and weaken response decisions.
Behavior-based analysis closes the gap by executing the URL in an isolated browser environment and bringing the full attack chain into one view:
• Forms
• Redirects
• DOM changes
• Hidden scripts
• Browser artifacts
• Network requests
The result = faster validation, better threat visibility, and more confident phishing response.
Give your SOC the browser-level visibility to uncover phishing threats in seconds with ANY.RUN → click here for the power up.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel | 4 464 |
| 12 | Splunk Enterprise Zero-Day Exploited Days After Disclosure
Attackers weaponized CVE-2026-20253, an unauthenticated remote code execution flaw in Splunk Enterprise, within days of public disclosure.
CISA ordered federal agencies to patch within three days.
The flaw enables full takeover without authentication, putting any internet-exposed Splunk deployment at immediate risk.
@Cyber_Security_Channel | 4 153 |
| 13 | Join the Webinar: ImmuniWeb AI Platform, new products and features to discover the latest innovations of the award-winning ImmuniWeb® AI Platform, earn CPE credits, and learn how to strengthen your cybersecurity program while reducing operational costs.
⚡ Key Insights:
✔ Live demo of ImmuniWeb AI Platform
✔ AI governance & compliance
✔ Cybersecurity cost optimization strategies
✔ Application Security in the era of agentic AI
✔ Product roadmap & innovations
✔ Third-Party Risk Management (TPRM) automation
✔ New features & functionalities of ImmuniWeb AI Platform
✔ Takedown of malicious web content & phishing resources
✔ Continuous Threat Exposure Management (CTEM) best practices
📅 Date & Time: June 25, 2026
• Session 1 – Geneva 10am | Dubai 12pm | Singapore 4pm
• Session 2 – Geneva 5pm | New York 11am | California 8am`
🎤 Host: Dr. Ilia Kolochenko, Founder, Chief Architect & CEO at ImmuniWeb.`
✅ Register: click here to proceed.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel | 4 035 |
| 14 | Researcher Earns $500K From Google in 90 Days Using Claude as an Automated Pentester
A hunter known as “brutecat” collected half a million dollars in Google bug bounties by wiring Claude into a custom fuzzer that hit roughly 1,500 internal APIs — Google Voice/Fiber, YouTube TV, Widevine, Cloud Console GraphQL, Vertex AI Search, Maps, Nest, and Translation Hub.
A month of iterative prompt engineering pushed reporting accuracy past 50%, with IDORs and broken access controls dominating the findings.
The top bug — an unauthenticated gfibervoice API that exposed PII and let attackers assign phone numbers to victims — rated P0/S0 and paid $20,000 on its own.
@Cyber_Security_Channel | 4 404 |
| 15 | North Korea’s BlueNoroff Uses AI-Generated Zoom Meetings to Rob Web3 Execs
Arctic Wolf detailed a Lazarus subgroup campaign that hit 100+ crypto and Web3 leaders across 20 countries via typo-squatted links and ClickFix-style lures.
Victims joined deepfaked Zoom calls where AI-generated participants kept them talking while fileless PowerShell stole credentials, webcam footage, and Telegram sessions.
The stolen webcam and chat material is then recycled to build even more convincing fake meetings for the next round of targets.
@Cyber_Security_Channel | 4 738 |
| 16 | Meta AI Support Bug Let Attackers Hijack 20,225 Instagram Accounts
Meta disclosed that its AI-powered High Touch Support tool failed to verify whether the email submitted for a password reset actually matched the target account, letting anyone request a reset link for accounts without 2FA.
The abuse started on April 17 and ran undetected until May 31, when Meta yanked the tool and invalidated all generated links.
Exposed data may include DMs, posts, contact info, birthdays, and linked services; affected users have been force-reset and pushed through security checkpoints.
@Cyber_Security_Channel | 5 257 |
| 17 | Microsoft: Attackers Impersonate ChatGPT, Claude, Copilot, and DeepSeek in New Phishing Wave
Microsoft Threat Intelligence documented credential-harvesting emails, AI-themed malvertising, and SEO poisoning that lean on the trust users place in big AI brands.
One ChatGPT-themed wave hit 100,000 inboxes a day across Switzerland, Austria, and South Africa, while a Claude lure framed as a policy violation reached 2,000+ orgs in the US, UK, and India.
A fake DeepSeek V4 repo on GitHub also dropped Vidar Stealer; defenders should turn on phishing-resistant MFA, Safe Links, and train staff on AI-pretexted lures.
@Cyber_Security_Channel | 5 801 |
| 18 | 🤝 Cyber Security News is looking for ADVERTISERS
Our community is continuously growing and we are searching for exciting companies & products to share with our audience.
Requirements to Qualify
• Relevant to channels niche / industry
• Long-term approach and collaboration mindset
• $2,000+ monthly ad spend budget to invest in campaigns
What We Offer
• Exposure to 60,000+ community members
• Personal success manager to scale your campaigns
• Brand awareness, leads, sign-ups, customers, followers, etc.
📩 Contact for Partnership
If you are serious about promoting your business, send us an introduction Email → cybersecnewsinfo@gmail.com
Important Note
Spots to become a sponsor are limited.
Reach out before they fill up.
(we only have 7 left)
- - - - -
@Cyber_Security_Channel | 8 589 |
| 19 | Residential AI Data Centers: Security, Privacy, and Governance Concerns
Another major concern is the blurring of ownership, accountability, and liability.
Many of these emerging models fail to clearly define who owns processed data, who controls logs and telemetry, and who assumes responsibility following a breach or criminal misuse.
Cyber_Security_Channel | 5 306 |
| 20 | Cisco: Leading AI Models Crack at 88% Under Multi-Turn Prompt Attacks Vendors Don't Test
Cisco researchers tested 15 leading models from OpenAI, Anthropic, Google, Amazon and xAI and found multi-turn attack success rates of 8–88% versus 2–65% for single-turn — every model proved vulnerable when an attacker could adapt across turns.
Grok 4.1 Fast Non-Reasoning was the worst at 88% multi-turn ASR; Amazon Nova 2 Lite the best at 8%, still flagged as meaningful residual risk.
Successful tactics included role-play, misdirection, information decomposition, refusal reframing and incremental escalation.
Vendor safety reports lean on single-turn benchmarks, so published claims understate real-world risk for enterprises deploying these models.
@Cyber_Security_Channel | 5 855 |
