uk
Feedback
cKure Red

cKure Red

Відкрити в Telegram

The director's cut on critical feeds from InfoSec world 🌎 Main Channel: @cKure ☕️ or queries email us 📨 i@ckure.org

Показати більше
США9 248Технології та додатки27 839
2 558
Підписники
Немає даних24 години
+57 днів
+5330 день

Триває завантаження даних...

Схожі канали
vx-underground
55.2K
vx-underground
Malware News
14.5K
Malware News
Netsec
7.6K
Netsec
Pentester
2.6K
Pentester
CTF Community | Hints
1.3K
CTF Community | Hints
avatar
1
Більше каналів
Хмара тегів
attack16
cve-202511
exploit11
bypass9
avazeh8
cve-20248
researcher8
reza8
antenna7
cyber7
hacker7
linux7
resistance7
authentication6
drone6
handala6
rtk6
identity5
scada5
threat5
Вхідні та вихідні згадування
---
---
---
---
---
---
Залучення підписників
червень '26
червень '26
+40
в 2 каналах
травень '26
+82
в 1 каналах
Get PRO
квітень '26
+81
в 2 каналах
Get PRO
березень '26
+69
в 2 каналах
Get PRO
лютий '26
+51
в 2 каналах
Get PRO
січень '26
+119
в 2 каналах
Get PRO
грудень '25
+81
в 2 каналах
Get PRO
листопад '25
+86
в 1 каналах
Get PRO
жовтень '25
+54
в 3 каналах
Get PRO
вересень '25
+56
в 3 каналах
Get PRO
серпень '25
+34
в 2 каналах
Get PRO
липень '25
+39
в 3 каналах
Get PRO
червень '25
+41
в 2 каналах
Get PRO
травень '25
+71
в 3 каналах
Get PRO
квітень '25
+36
в 1 каналах
Get PRO
березень '25
+37
в 2 каналах
Get PRO
лютий '25
+50
в 1 каналах
Get PRO
січень '25
+29
в 1 каналах
Get PRO
грудень '24
+75
в 3 каналах
Get PRO
листопад '24
+112
в 3 каналах
Get PRO
жовтень '24
+65
в 1 каналах
Get PRO
вересень '24
+110
в 1 каналах
Get PRO
серпень '24
+114
в 1 каналах
Get PRO
липень '24
+127
в 6 каналах
Get PRO
червень '24
+53
в 2 каналах
Get PRO
травень '24
+70
в 2 каналах
Get PRO
квітень '24
+158
в 26 каналах
Get PRO
березень '24
+95
в 2 каналах
Get PRO
лютий '24
+153
в 24 каналах
Get PRO
січень '24
+114
в 2 каналах
Get PRO
грудень '23
+96
в 1 каналах
Get PRO
листопад '23
+28
в 1 каналах
Get PRO
жовтень '23
+34
в 1 каналах
Get PRO
вересень '23
+22
в 0 каналах
Get PRO
серпень '23
+32
в 0 каналах
Get PRO
липень '23
+31
в 0 каналах
Get PRO
червень '23
+32
в 0 каналах
Get PRO
травень '23
+16
в 0 каналах
Get PRO
квітень '23
+29
в 0 каналах
Get PRO
березень '23
+22
в 0 каналах
Get PRO
лютий '23
+18
в 0 каналах
Get PRO
січень '23
+28
в 0 каналах
Get PRO
грудень '22
+33
в 0 каналах
Get PRO
листопад '22
+33
в 0 каналах
Get PRO
жовтень '22
+12
в 0 каналах
Get PRO
вересень '22
+14
в 0 каналах
Get PRO
серпень '22
+38
в 0 каналах
Get PRO
липень '22
+34
в 0 каналах
Get PRO
червень '22
+30
в 0 каналах
Get PRO
травень '22
+38
в 0 каналах
Get PRO
квітень '22
+40
в 0 каналах
Get PRO
березень '22
+51
в 0 каналах
Get PRO
лютий '22
+23
в 0 каналах
Get PRO
січень '22
+39
в 0 каналах
Get PRO
грудень '21
+243
в 0 каналах
Дата
Залучення підписників
Згадування
Канали
14 червня+1
13 червня+2
12 червня+2
11 червня+1
10 червня0
09 червня+2
08 червня+3
07 червня+2
06 червня+4
05 червня+1
04 червня+2
03 червня+6
02 червня+9
01 червня+5
Дописи каналу
cKure Red
Exploiting CVE-2024-1065 via the Page Cache! A strategy for physical-page UAFs in MIGRATE_MOVABLE, where Dirty Pagetable and Dirty Cred don't apply. https://kuzey.rs/posts/MaliUAF/ Demonstrated on the Mali GPU UAF found by Project Zero.

2
Free research papers https://sci-bot.ru/
605
3
📡🅰️🅰️🅰️❎❎🅰️🅰️🅰️🅰️ PimEyes.Com
📡🅰️🅰️🅰️❎❎🅰️🅰️🅰️🅰️ PimEyes.Com
945
4
👩‍💻 Performing RCE in Internet Explorer via clickjacking! Credits: Igor Sak-Sakovsky's (𝕏 | Psych0tr1a) https://swarm.ptsecurity.com/the-click-that-shouldnt-have-worked-rce-via-clickjacking-in-internet-explorer/
1 042
5
📡🛰 For 19 years, GPS satellites have secretly broadcast a “numbers station” in their public signals. We decoded 12M messages: a 2011 flash where 31 of 32 satellites flipped in hours, “ghost” substrings repeating years apart, and a “TEXT” prefix spreading now. https://lsc-pagepro.mydigitalpublication.com/publication/?i=865273&p=62&view=issueViewer https://github.com/sjmurdoch/gps-special-messages https://x.com/i/status/2061829547289387209
1 485
6
🔗🆒🆒🔤🆒🆒🆒🆒 Transfer data between devices using just QR codes! QR-Beam — A browser-based data transfer tool where both sender and receiver run entirely client-side via JavaScript. No installation, simple mobile-friendly UI, and designed for real-world use. The idea isn't new, but was focused on turning it into a practical, production-ready solution with several improvements over existing PoCs. Beta: https://ckure.org/rx/QR-Beam
1
7
🔗🆒🆒🔤🆒🆒🆒🆒 Transfer data between devices using just QR codes! QR-Beam — A browser-based data transfer tool where both sender and receiver run entirely client-side via JavaScript. No installation, simple mobile-friendly UI, and designed for real-world use. The idea isn't new, but was focused on turning it into a practical, production-ready solution with several improvements over existing PoCs. Beta: https://ckure.org/rx/QR-Beam
1
8
🔗🆒🆒🔤🆒🆒🆒🆒 Transfer data between devices using just QR codes! QR-Beam — A browser-based data transfer tool where both sender and receiver run entirely client-side via JavaScript. No installation, simple mobile-friendly UI, and designed for real-world use. The idea isn't new, but was focused on turning it into a practical, production-ready solution with several improvements over existing PoCs. Beta: https://ckure.org/rx/QR-Beam
1 064
9
😔 Mini Plasma Zero-Day by Chaotic Eclipse (aka Nightmare Eclipse) with a total of 6 0-Days in 6 weeks. Official blog: https://deadeclipse666.blogspot.com https://blog.barracuda.com/2026/05/19/nightmare-eclipse-zero-days-grudge
1 180
10
📱Anthropic co-founder says there is a "real possibility that AI will displace human labor at a very large scale," and that s
📱Anthropic co-founder says there is a "real possibility that AI will displace human labor at a very large scale," and that supporting those people "will be a moral imperative of historic proportions." And we do not have a mechanism while most of the control of AI is with few wealthy nations and individuals.
864
11
🔠🔠🔠🔠🔠🔠🔠➖🔠🔠🔠 https://www.theverge.com/tech/935202/flipper-devices-one-zero-wireless-multi-tool-linux-open-source-com
🔠🔠🔠🔠🔠🔠🔠➖🔠🔠🔠 https://www.theverge.com/tech/935202/flipper-devices-one-zero-wireless-multi-tool-linux-open-source-computer
1 374
12
🤖 🆒🆒🆒🆒🆒🆒 Earlier today Cloudflare's CSO shared how they tested Anthropic Mythos using an unreleased 8-stage vulnerability-discovery agent. Opus implemented the agent and it works via Claude SDK with a Pro or Max subscription, no API. https://github.com/evilsocket/audit 𝕏 | Simone
1 474
13
🚀40K Starlink terminals hacked to lure Russians into a cyber trap as per anti-Russia propaganda news. 40,000 Starlink termin
🚀40K Starlink terminals hacked to lure Russians into a cyber trap as per anti-Russia propaganda news. 40,000 Starlink terminals go dark. Russian soldiers scramble for answers and turn to Telegram. They don’t realise they’ve just walked into a trap. The journalists travelled across Ukraine from Lviv to the front line in Zaporizhzhia to uncover a pretty audacious cyber operation. Meet Goldfinger and the 256 Cyber Assault Brigade and Yaro, and the 128th Mechanised Brigade, holding the line in the south.
1 368
14
🤩 ❗️❗️❗️❗️❗️❗️ LLM used to make a Zero-Day by APT group on a popular software. The zero day was a 2FA bypass via logic bug �
🤩 ❗️❗️❗️❗️❗️❗️ LLM used to make a Zero-Day by APT group on a popular software. The zero day was a 2FA bypass via logic bug 🪲 Security researchers at Alphabet’s Google said they believe a cybercrime group used artificial intelligence to create a hacking tool that can bypass defenses in a widely-used tool to administer computer systems. The scheme, which was foiled when Google alerted the tool developer, would mark the first time that Google’s Threat Intelligence Group caught a hacker using an AI-generated “zero-day” in such a way, according to a report published Monday.
1 190
15
⚠️⚠️⚠️⚠️⚠️⚠️ CVE-2026-0073: Critical Android Zero-Click, Zero-Day exploit in wireless debugging (if enabled) can allow adjace
⚠️⚠️⚠️⚠️⚠️⚠️ CVE-2026-0073: Critical Android Zero-Click, Zero-Day exploit in wireless debugging (if enabled) can allow adjacent hacker (in same network) to execute code as shell user.
1 426
16
🅰️🅰️🅰️🔢🅰️🅰️🅰️ Devcore team chained ⛓️‍💥 4 logic bugs to achieve sandbox escape in Microsoft Edge in Pwn²Own 2026, Ber
🅰️🅰️🅰️🔢🅰️🅰️🅰️ Devcore team chained ⛓️‍💥 4 logic bugs to achieve sandbox escape in Microsoft Edge in Pwn²Own 2026, Berlin.
1 187
17
🤖 Mythos finds a curl vulnerability. https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-vulnerability/
1 296
18
🆒🆒🆒🆒🔢🔢 FAST16 — Pre-Stuxnet Sabotage Malware (2005) - Referenced in Shadow Brokers (2017) leak (“NOTHING TO SEE HERE”)
🆒🆒🆒🆒🔢🔢 FAST16 — Pre-Stuxnet Sabotage Malware (2005) - Referenced in Shadow Brokers (2017) leak (“NOTHING TO SEE HERE”) - Compiled ~2005 → ~5 years before Stuxnet - Type: Sabotage malware (not espionage) Target - High-precision engineering / simulation software - Includes LS-DYNA, PKPM, MOHID - Used for physics, impact, and advanced simulations (incl. nuclear-related domains) Technique - Kernel driver: "fast16.sys" - In-memory patching of target processes - Injects subtle calculation errors (floating-point manipulation) - Goal: corrupt outputs while appearing normal Propagation - Worm-like spread via weak Windows network shares Attribution - Not confirmed - Strong suspicion: US or allied origin (based on NSA-linked leak context) Note - LS-DYNA ≠ purely “explosive software” - Broader simulation usage; “explosive calculations” is a subset use case
1 781
19
IoT side channel (correlation) attack using WiFi. Heuristic surveillance data is both widely under-reported and difficult to
IoT side channel (correlation) attack using WiFi. Heuristic surveillance data is both widely under-reported and difficult to mitigate without tossing your devices and living in the stone age.
817
20
💽 Phantomdrive is an open-source USB drive designed to conceal its actual capacity. Upon initial insertion, the device prese
💽 Phantomdrive is an open-source USB drive designed to conceal its actual capacity. Upon initial insertion, the device presents itself as an 8GB disk. To access the secondary partition, a file named "unlock.txt" must be created, followed by the entry of the password; the drive will subsequently unmount and remount, revealing the remaining data. All data is encrypted in place using an AES-256 key derived from the password. This mechanism is fundamentally different from how Veracrypt operates.
1 520
Переглянути всі дописи