CyberSecurityTechnologies
Закрытый канал
We have been working for YOU for more than 8 years!!! https://t.me/+9vdG4JOSgY8xMzdi See also: https://t.me/Cognitive_Security https://t.me/CyberSecurityOSINT https://t.me/Wireless_Cybersecurity For All Questions: in messages to the channel
Больше📈 Аналитический обзор Telegram-канала CyberSecurityTechnologies
Канал CyberSecurityTechnologies языкового сегмента Английский является активным участником. Сейчас сообщество объединяет 33 824 подписчиков, занимая 3 956 место в категории Технологии и приложения и 1 206 место в регионе США.
📊 Показатели аудитории и динамика
С момента создания невідомо проект демонстрирует стремительный рост, собрав аудиторию из 33 824 подписчиков.
Согласно последним данным от 26 октября, 2026, канал показывает стабильную активность. За последние 30 дней изменение числа участников составило -429, а за последние 24 часа — -13, при этом общий охват остаётся высоким.
- Статус верификации: Не верифицирован
- Уровень вовлечённости (ER): Средний показатель вовлечённости аудитории составляет 6.87%. В первые 24 часа после публикации контент обычно набирает 3.14% реакций от общего числа подписчиков.
- Охват публикаций: В среднем каждый пост получает 2 322 просмотров. В течение первых суток публикация набирает 1 063 просмотров.
- Реакции и взаимодействия: Аудитория активно поддерживает контент: среднее количество реакций на один пост — 5.
- Тематические интересы: Контент сосредоточен на ключевых темах, таких как cve-2025, attack, threat, detection, llm.
📝 Описание и контентная политика
Автор описывает ресурс как площадку для выражения субъективного мнения:
“We have been working for YOU for more than 8 years!!!
https://t.me/+9vdG4JOSgY8xMzdi
See also:
https://t.me/Cognitive_Security
https://t.me/CyberSecurityOSINT
https://t.me/Wireless_Cybersecurity
For All Questions: in messages to the channel”
Благодаря высокой частоте обновлений (последние данные получены 27 октября, 2026) канал поддерживает актуальность и высокий уровень охвата публикаций. Аналитика показывает, что аудитория активно взаимодействует с контентом, что делает его важной точкой влияния в категории Технологии и приложения.
33 824
Подписчики
-1324 часа
-1127 дней
-42930 дней
Архив постов
#Research
#MLSecOps
"Making attacking agents pay:
Context Bombs as defense against offensive AI", 2026.
// Context Bombs are deceptive traps designed to turn an AI attacker’s own reasoning against it: drawing it into wasted work, steering it away from real targets, or getting it to reveal its intentions. Canary interactions alert you to its presence, while these traps can buy your team time to contain the attack
#NetSec
#Tech_book
"Network Programming with Go:
Code Secure and Reliable Network Services from Scratch", 2021.
// This book details the basics of network programming with an emphasis on security. You will learn socket-level programming including TCP, UDP, and Unix sockets, interact with application-level protocols like HTTPS and HTTP/2, serialize data with formats like Gob, JSON, XML, and protocol buffers, perform authentication and authorization for your network services, create streams and asynchronous data transfers, write gRPC microservices, perform structured logging and instrumentation, and deploy your applications to the cloud
#info
PHP2Shell: 22-24 October 2026
https://gist.github.com/0x4D31/6b1e7b5fb7a10219af187be91335c96f
#DevOps
#Tech_book
"DevSecOps and DevOps for Linux:
The Foundations", 2026.
]-> https://github.com/Apress/DevSecOps-for-Linux
// This book focuses on the widest interpretation of DevSecOps, which blends security concepts into DevOps. For this reason, it illustrates not only concepts strictly related to DevSecOps, but also DevOps concepts since it is not correct to take them for granted
#tools
#Offensive_security
Defeating enforced SMB signing
https://blackfield.ch/blog/defeating-enforced-smb-signing
]-> PoC: defeating enforced SMB signing on an SMB relay
#Tech_book
"The Art of 64-bit Assembly Vol.2:
Machine-Level OOP, Exceptions, and Concurrency", 2026.
// This book covers the following subjects: advanced macro programming, unicode string types and functions, advanced use of local variables in procedures and functions, object-oriented programming in assembly language, transcendental function implementation, exception handling under Windows using assembly language, advanced procedure types as well as advanced parameter-passing mechanisms and techniques, coroutines, generators, iterators, and concurrent programming
#Analytics
#Threat_Research
An analytical review of the main cybersecurity events (Oct 17-24, 2026)
1⃣ PHP2Shell
]-> Pre-auth RCE research toolkit
// CVE-2026-109619, CVE-2026-109619
2⃣ Another vulnerability in PHP
// The PHP project's developers have announced the discovery of another vulnerability (CVE-2026-115560), which could potentially be exploited for RCE on the server under a certain, rare combination of non-default settings and executed PHP code
3⃣ OpenSSL 4.1.0 and LibreSSL 4.4.0
4⃣ About 10% of Tor exit nodes were involved in an SSH connection hijacking attack
5⃣ Nmap 7.992
6⃣ Cisco Snort 3 Critical Vulnerabilities
// CVE-2026-20043
7⃣ FortiSIEM gRPC Path Traversal File Write RCE
// CVE-2026-106173
8⃣ Linux Kernel KSMBD Vulnerability
9⃣ Signal: Flooded Call Event Queue Blocks Local Hang-Up
// CVE-2026-113380
#tools
#MLSecOps
"The Trigger in the Haystack:
Extracting and Reconstructing LLM Backdoor Triggers", Feb. 2026.
]-> https://github.com/microsoft/llm-backdoor-scanner
#Malware_analysis
1⃣ MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
https://www.welivesecurity.com/en/eset-research/mythicratatoskr-yggdrasil-enabled-backdoor-deployed-uac0099-sandworm-collaboration
2⃣ DarkCore: A Data-Theft RAT With a Session-Hijacking Browser
https://www.blackfog.com/darkcore-a-data-theft-rat-with-a-session-hijacking-browser
3⃣
#Kernel_Security
When Defenses Become Attack Surface: CVE-2026-20971, a Samsung Kernel UAF
https://lucidbitlabs.com/blog/when-defenses-become-attack-surface
// Affected Devices: Galaxy S9 through Galaxy S25, A-series, Exynos, and Qualcomm devices
#Tech_book
"Authorization in Action:
Build policy-based access control for zero trust, APIs, SaaS, and AI agents", 2026.
// This book uses the Cedar policy language for most of its examples. Cedar - open source policy language for expressing fine-grained permissions
https://github.com/cedar-policy/cedar
Policies and schemas appear throughout the text, and the three appendixes provide complete, runnable examples.
Appendix A:
https://github.com/windley/acme-cedar-demo
Appendix B:
https://github.com/windley/acme-cedar-ai-authoring
Appendix C:
https://github.com/windley/openclaw-cedar-policy-demo
#tools
#OSINT
1⃣ WireTapper - wireless OSINT tool that passively detects and maps Wi-Fi, Bluetooth, CCTV cameras, vehicles, headphones, TVs, IoT devices, and cell towers, turning nearby radio signals into clear situational intelligence
2⃣ Claude-OSINT - 8 Claude skills, 100+ recon capabilities, 80 secret-regex patterns, 80+ dorks, 9 read-only credential validators, 27 attack-path templates, ~10k lines of structured tradecraft
3⃣ Ground Station - open-source, browser-based application for tracking satellites and celestial targets, controlling station hardware, and receiving, decoding, and recording SDR signals
#AIOps
#Offensive_security
"AutoRedClaw: Automated Red-Teaming for Claw-Style Agents", 2026.
]-> https://github.com/SaFo-Lab/AutoRedClaw
// AutoRedClaw - automated red-teaming framework that generates end-to-end attacks together with the environments needed to execute them. AutoRedClaw combines a strict quality-checking protocol with execution-based validation to ensure the correctness, realism, and effectiveness of generated samples, and adopts task-driven environment construction to keep costs low
#Offensive_security
#Malware_analysis
PhantomBuffer:
Effective EDR Evasion Through Stealth Injection
https://www.zerosalarium.com/2026/10/PhantomBuffer-Effective-EDR-Evasion-Stealth-Injection.html
]-> https://github.com/TwoSevenOneT/PhantomBuffer
// The article introduces "PhantomBuffer", a stealth technique that injects payloads into processes via SendMessageW with WM_SETTEXT, avoiding WriteProcessMemory, and leverages cdb.exe for thread hijacking, with recommendations to monitor related API calls and suspicious debugger activity
#OpSec
#Whitepaper
"passwords.txt: Using Notepad and SmartScreen to Oracle Account Passwords", Sep 2026.
// Enhanced Phishing Protection (EPP) is designed to reduce credential theft by detecting unsafe password entry and providing additional security telemetry within Windows. However, security mechanisms that generate observable system artifacts may introduce unintended information disclosure
#MLSecOps
#SCADA_Security
"Recording-Aware Evaluation of Multimodal OT Intrusion Detection", Oct 2026.
]-> https://github.com/ANTS-OntarioTechU/Recording-Aware-Evaluation-of-Multimodal-OT-Intrusion-Detection
#exploit
#Kernel_Security
Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
https://github.com/califio/publications/tree/main/MADBugs/openbsd
// Disclaimer
#AppSec
1⃣ GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
https://www.rapid7.com/blog/post/ra-gitlab-ci-cd-regex-integer-overflow-technical-analysis-cve-2026-97229
2⃣ Plex2Shell:
Unauthenticated RCE in Plex Media Server
https://zmain.info/blog/plex2shell
3⃣ CVE-2026-108097 Deep Dive:
Turning a Drupal Field UI Callback Into RCE
https://fortbridge.co.uk/research/cve-2026-108097-deep-dive-turning-a-drupal-field-ui-callback-into-rce
#DFIR
#Infographics
Windows Forensic Analysis, SANS, 2006.
// What files were opened? Which programs ran? Where did the user connect?..
#tools
#Offensive_security
SyscallRevenant: Surpassing EDRs & AVs
https://github.com/SilentisVox/SyscallRevenant
// new method of performing clean indirect syscalls. The main component resolves System Service Numbers and syscall instruction addresses dynamically. This is done by enabling the trap flag during execution. The secondary component is tampering via parameter replacement before a syscall. This combination is designed to bypass userland hooks during the subsequent syscall invocation while substituting the initially presented parameters
// Disclaimer
