اکنون در دسترس! پژوهش تلگرام ۲۰۲۵ — مهمترین بینشهای سال 
CyberSecurityTechnologies
کانال بسته
We have been working for YOU for more than 8 years!!! https://t.me/+9vdG4JOSgY8xMzdi See also: https://t.me/Cognitive_Security https://t.me/CyberSecurityOSINT https://t.me/Wireless_Cybersecurity For All Questions: in messages to the channel
نمایش بیشتر📈 تحلیل کانال تلگرام CyberSecurityTechnologies
کانال CyberSecurityTechnologies در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 35 655 مشترک است و جایگاه 3 828 را در دسته فناوری و برنامهها و رتبه 1 027 را در منطقه الولايات المتحدة الأمريكية دارد.
📊 شاخصهای مخاطب و پویایی
از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 35 655 مشترک جذب کرده است.
بر اساس آخرین دادهها در تاریخ 22 ژوئن, 2026، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر -443 و در ۲۴ ساعت گذشته برابر -14 بوده و همچنان دسترسی گستردهای حفظ شده است.
- وضعیت تأیید: تأیید نشده
- نرخ تعامل (ER): میانگین تعامل مخاطب 9.30% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً 2.95% واکنش نسبت به کل مشترکان کسب میکند.
- دسترسی پستها: هر پست به طور میانگین 3 316 بازدید دریافت میکند. در اولین روز معمولاً 1 052 بازدید جمعآوری میشود.
- واکنشها و تعامل: مخاطبان بهطور فعال حمایت میکنند؛ میانگین واکنش به هر پست 12 است.
- علایق موضوعی: محتوا بر موضوعات کلیدی مانند cve-2025, attack, threat, detection, llm تمرکز دارد.
📝 توضیح و سیاست محتوایی
نویسنده این فضا را محل بیان دیدگاههای شخصی توصیف میکند:
“We have been working for YOU for more than 8 years!!!
https://t.me/+9vdG4JOSgY8xMzdi
See also:
https://t.me/Cognitive_Security
https://t.me/CyberSecurityOSINT
https://t.me/Wireless_Cybersecurity
For All Questions: in messages to the channel”
به لطف بهروزرسانیهای پرتکرار (آخرین داده در تاریخ 23 ژوئن, 2026)، کانال همواره بهروز و دارای دسترسی بالاست. تحلیلها نشان میدهد مخاطبان بهطور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامهها تبدیل کردهاند.
35 655
مشترکین
-1424 ساعت
-1057 روز
-44330 روز
آرشیو پست ها
#WebApp_Security
#Infosec_Standards
NIST SP 800-228A ipd:
"Guidelines for the Secure Deployment of RESTful Web APIs", May 2026.
// This document:
- Analyzes threats to RESTful APIs across the pre-runtime and runtime phases
- Provides guidelines for implementing a set of controls to mitigate threats
#tools
#AIOps
"AIRGuard: Guarding Agent Actions with Runtime Authority Control", May 2026.
// AIRGuard - runtime defense that combines authority context, resource trust labels, LLM-based risk simulation, and tiered enforcement to protect LLM agents from indirect prompt injection attacks via untrusted tool outputs
#AppSec
#Threat_Research
1⃣ Click Or Trick (CVE-2025-59199):
Escaping the Sandbox with Windows URIs
https://www.safebreach.com/blog/click-or-trick-cve-2025-59199-escaping-the-sandbox-with-windows-uris
2⃣ Adobe Acrobat Reader Escript.api UAF RCE
https://blog.exodusintel.com/2026/06/01/adobe-acrobat-reader-escript-api-use-after-free-remote-code-execution
3⃣ Exploiting Windows Defender's Remediation Workflow for LPE
https://blog.calif.io/p/redsun-exploiting-windows-defenders
#NetSec
#Blue_Team_Techniques
"PLM-NIDS: A Protocol-Language Model for Network Intrusion Detection from Raw Packet Sequences Using RWKV State-Space Models", May 2026.
]-> https://github.com/shiva2vk/PLM-NIDS
// The RWKV backbone’s O(T) recurrent inference enables per-packet streaming without flow buffering, making PLM-NIDS operationally viable at line rate. Because it reads only IP/TCP/UDP headers, it is inherently encryption-agnostic: TLS 1.3, QUIC, and future encrypted protocols are handled transparently
#Fuzzing
#IoD_Security
"Framework for Discovering GPS Spoofing Attacks in Drone Swarms", Jun 2026.
// SwarmFuzz - fuzzing framework to efficiently find Swarm Propagation Vulnerabilities in drone swarms. It uses a combination of graph theory and gradient-guided optimization to find the potential attack parameters
#AIOps
"Hijacking Agent Memory: Stealthy Trojan Attacks Through Conversational Interaction", May 2026.
// MemPoison - novel memory poisoning attack that bypasses selective memory mechanisms in LLM agents, where an attacker can inject triggerable backdoors into the agent's long-term memory through dialogue interactions, thereby misleading its subsequent responses
#Whitepaper
#Kernel_Security
#Offensive_security
"Debugging Filesystem Minifilters with WinDbg", 2026.
// This technical reference poster explores Windows filesystem minifilters, kernel debugging, and filter communication ports from a red team perspective
#reversing
#Kernel_Security
BYOVD and Looting LSASS in the Modern EDR Era
https://g3tsyst3m.com/byovd/BYOVD-and-Looting-LSASS-in-the-Modern-EDR-Era
// The article details advanced BYOVD techniques exploiting kernel driver vulnerabilities to bypass Windows security, including methods for disabling LSASS protections, memory dumping, obfuscation, and defensive countermeasures
#Tech_book
#Kernel_Security
"Learning eBPF: Programming the Linux Kernel for Enhanced Observability, Networking, and Security", 2023.
]-> Repo
#Malware_analysis
1⃣ BlackToad: Network Manipulation in an AutoIt Payload
https://www.jumpsec.com/guides/blacktoad-network-manipulation-in-an-autoit-payload
2⃣ BTMOB: A stealthy RAT burrowing deep into Android devices
https://www.welivesecurity.com/en/malware/btmob-stealthy-rat-burrowing-deep-android-devices
3⃣ Deep Dive into a Device Code Phishing Toolkit
https://newtonpaul.com/blog/device-code-lab-post-exploit
#Analytics
#Threat_Research
An analytical review of the main cybersecurity events for the week (May 23-30, 2026)
1⃣ Privilege Escalation via a Page UaF in Qualcomm's AI Accelerator Linux Kernel Driver
// bug lives in Qualcomm's Cloud AI Accelerator kernel driver, qaic, which is present in mainline Linux
2⃣ The Word 'Toad' Gave Any Website Full Control of Chrome's Most Popular VPN
// Urban VPN's extension deliberately sets up a postMessage listener - a channel that lets any script on any page you visit send it messages
3⃣ Vaultjacking: One Captured PIN, the Entire Google Password Manager Vault
4⃣ A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities
// ASR Rules
5⃣ Detecting Tycoon 2FA AiTM attacks across Entra ID and Google Workspace
// Tycoon 2FA bypasses MFA on Entra ID and Google Workspace...
6⃣ CIFSwitch - vulnerability in Linux kernel's CIFS subsystem that allows root privileges to be gained
7⃣ PuTTY 0.84 released
8⃣ PyFory - Insecure Pickle Deserialization to RCE
// CVE-2025-61622
9⃣ Drupal PostgreSQL SQLI
// SELECT-only SQLi to RCE when the injected expression runs as a PostgreSQL superuser
🔟 Suricata 8.0.5 and 7.0.16 released
]-> Analytical review (May 16-23, 2026)
#SCA
#Hardware_Security
"FROST: Fingerprinting Remotely using
OPFS-based SSD Timing", 2026.
// SSD contention side channels can be mounted by a remote attacker from within the browser, without native code execution. FROST attack targets the Origin Private File System API in JavaScript, allowing us to create and access files on the disk, within the browser’s sandboxed environment
#exploit
#Kernel_Security
An AI audit of FreeBSD
https://blog.calif.io/p/an-ai-audit-of-freebsd
]-> setcred (CVE-2026-45250)
]-> ptrace (CVE-2026-45253)
]-> procdesc (CVE-2026-45251)
]-> Bonus
// Disclaimer
#tools
#NetSec
#hardening
Puck - Autonomous endpoint investigation via MCP
https://github.com/puck-security/puck-scout
// Puck is a three-component system that enables AI-driven, read-only endpoint investigation. The AI client asks questions, the MCP server orchestrates, and endpoint agents execute read-only commands
#tools
#NetSec
#hardening
Puck - Autonomous endpoint investigation via MCP
https://github.com/puck-security/puck-scout
// Puck is a three-component system that enables AI-driven, read-only endpoint investigation. The AI client asks questions, the MCP server orchestrates, and endpoint agents execute read-only commands
#tools
#Whitepaper
#Blue_Team_Techniques
"SIEM Detection Logic Conversion with LLMs", 2025.
]-> Scripts used to convert Splunk detections to Elastic Security using OpenAI and Google Gemini
// This research explores how LLMs and automation scripts can expedite the translation of detection logic between SIEMs, converting detections in minutes instead of hours
#tools
#DFIR
#Malware_analysis
#Blue_Team_Techniques
MalShark - AI-powered malware traffic analysis
and network forensics tool via MCP
https://github.com/MohitDabas/malshark
// Most pcap tools require an analyst to know exactly what to look for. This server bridges the gap...
#AppSec
#Threat_Research
"Resolving the Correct Library: A Loader-Level Defense Solution Against Shared Object Hijacking", Jan. 2026.
https://anonymous.4open.science/r/shareb_object_library_hijacking-5E36
// developed a loader-centric glibc prevention mechanism that enforces checking shared library identity at load time by binding dependencies to immutable build identifiers and cryptographic hashes
#Malware_analysis
1⃣ Showboat Linux malware
https://www.lumen.com/blog/en-us/introducing-showboat-a-new-malware-family-taunts-defenses-and-targets-international-telecom-firms
2⃣ Analyzing Void Dokkaebi’s Cython-Compiled InvisibleFerret Malware
https://www.trendmicro.com/en_us/research/26/e/analyzing-void-dokkaebi-invisibleferret-malware.html
3⃣ FortiClient EMS Exploited via CVE-2026-35616 to Deliver EKZ Infostealer Disguised as a Fortinet Patch
https://arcticwolf.com/resources/blog/forticlient-ems-exploited-via-cve-2026-35616-to-deliver-ekz-infostealer-disguised-as-a-fortinet-patch
#IoT_Security
#Hardware_Security
"Device Context Protocol: A Compact, Safety-First Architecture for LLM-Driven Control of Constrained Devices", May 2026.
https://github.com/device-context-protocol/dcp
// Device Context Protocol - bridge LLM agents to physical devices. A protocol that lets LLM agents safely control physical devices, down to dollar-class microcontrollers
