CyberSecurityTechnologies
We have been working for YOU for more than 8 years!!! https://t.me/+9vdG4JOSgY8xMzdi See also: https://t.me/Cognitive_Security https://t.me/CyberSecurityOSINT https://t.me/Wireless_Cybersecurity For All Questions: in messages to the channel
Ko'proq ko'rsatish📈 Telegram kanali CyberSecurityTechnologies analitikasi
CyberSecurityTechnologies Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 33 802 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 3 965-o'rinni va AQSH mintaqasida 1 203-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 33 802 obunachiga ega bo‘ldi.
27 Oktabr, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni -419 ga, so‘nggi 24 soatda esa -11 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 6.94% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 3.17% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 2 347 marta ko‘riladi; birinchi sutkada odatda 1 073 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 5 ta reaksiya keladi.
- Tematik yo‘nalishlar: Kontent cve-2025, attack, threat, detection, llm kabi asosiy mavzularga jamlangan.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“We have been working for YOU for more than 8 years!!!
https://t.me/+9vdG4JOSgY8xMzdi
See also:
https://t.me/Cognitive_Security
https://t.me/CyberSecurityOSINT
https://t.me/Wireless_Cybersecurity
For All Questions: in messages to the channel”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 28 Oktabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
Ma'lumotlar yuklanmoqda
| Sana | Obunachilarni jalb qilish | Esdaliklar | Kanallar | |
| 28 Oktabr | +2 | |||
| 27 Oktabr | +1 | |||
| 26 Oktabr | 0 | |||
| 25 Oktabr | 0 | |||
| 24 Oktabr | 0 | |||
| 23 Oktabr | 0 | |||
| 22 Oktabr | 0 | |||
| 21 Oktabr | 0 | |||
| 20 Oktabr | 0 | |||
| 19 Oktabr | 0 | |||
| 18 Oktabr | 0 | |||
| 17 Oktabr | 0 | |||
| 16 Oktabr | 0 | |||
| 15 Oktabr | 0 | |||
| 14 Oktabr | 0 | |||
| 13 Oktabr | 0 | |||
| 12 Oktabr | 0 | |||
| 11 Oktabr | +1 | |||
| 10 Oktabr | 0 | |||
| 09 Oktabr | 0 | |||
| 08 Oktabr | +1 | |||
| 07 Oktabr | 0 | |||
| 06 Oktabr | 0 | |||
| 05 Oktabr | 0 | |||
| 04 Oktabr | 0 | |||
| 03 Oktabr | 0 | |||
| 02 Oktabr | 0 | |||
| 01 Oktabr | 0 |
| 2 | #MLSecOps
#Red_Team_Tactics
"GenAI Red Teaming Manual:
A Practical Guide for Adversarial Testing of Generative AI Models & Systems", Oct 2026.
// Its eight-phase methodology covers planning, reconnaissance, attack surface mapping, exploitation, persistence, impact assessment, reporting, and remediation. Addressing models, applications, multimodal interfaces, and AI agents, it emphasizes ethical testing, reproducible findings, measurable outcomes, and integration with defensive operations | 553 |
| 3 | #IoT_Security
Choose Your Backend: Three TLS Bugs in GoAhead
https://foxio.io/blog/choose-your-backend-three-tls-bugs-in-goahead
// GoAhead is used in hundreds of millions of IoT, Firewall, OT, and Military devices including those from Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing, and more. Three independent bugs in GoAhead's TLS integrations can leave revoked client certificates accepted, encrypted sessions recoverable to an observer or a configured chain-depth limit unenforced | 504 |
| 4 | #Infosec_Standards
NIST IR 8547 (Final):
"Transition to Post-Quantum Cryptography Standards", Oct 2026.
// This report describes NIST’s approach to transitioning from quantum-vulnerable cryptographic algorithms to post-quantum digital signature algorithms and key-establishment schemes. It identifies existing quantum-vulnerable cryptographic standards and the quantum-resistant standards to which information technology products and services will need to transition | 485 |
| 5 | #exploit
#AppSec
1⃣ CVE-2026-35273:
SSRF to RCE in Oracle PeopleSoft
https://www.zerodayinitiative.com/blog/2026/10/20/cve-2026-35273-ssrf-to-rce-in-oracle-peoplesoft
2⃣ CVE-2026-106173:
Path traversal file write leading to RCE for Fortinet FortiSIEM
https://github.com/horizon3ai/CVE-2026-106173
3⃣ CVE-2026-115905:
Vulnerability in the Rust libraries zip-rs and librsvg
https://github.com/zip-rs/zip2/security/advisories/GHSA-m665-v7pm-7grj
// Disclaimer | 840 |
| 6 | #tools
#Fuzzing
#Sec_code_review
Fuzzers vs. AI: Comparing Fuzzilli and BigSleep
on JavaScript Engines
https://projectzero.google/2026/10/fuzzing-v-AI.html | 1 058 |
| 7 | #Research
#Cloud_Security
"CVM-STORE: A Secure Storage System for Confidential Virtual Machines", NDSS 2027.
]-> https://github.com/TUM-DSE/CVM-Store
]-> CVM-Store Evaluation
// CVM-Store - secure storage library for confidential virtual machines (CVMs). CVMs protect data in use, but persistent storage lies outside their trust boundary: the cloud provider can read, corrupt or replay anything written to disk. CVM-Store gives persisted data confidentiality, integrity and freshness at close to raw NVMe throughput | 1 240 |
| 8 | #MLSecOps
"To Cache or Not to Cache: Understanding and Mitigating Safety Incompatibility in Cross-Model KV Cache Reuse", Oct 2026.
]-> VReparo - Value alignment for safer cross-model KV cache reuse | 1 467 |
| 9 | #Research
#MLSecOps
"Making attacking agents pay:
Context Bombs as defense against offensive AI", 2026.
// Context Bombs are deceptive traps designed to turn an AI attacker’s own reasoning against it: drawing it into wasted work, steering it away from real targets, or getting it to reveal its intentions. Canary interactions alert you to its presence, while these traps can buy your team time to contain the attack | 1 533 |
| 10 | #NetSec
#Tech_book
"Network Programming with Go:
Code Secure and Reliable Network Services from Scratch", 2021.
// This book details the basics of network programming with an emphasis on security. You will learn socket-level programming including TCP, UDP, and Unix sockets, interact with application-level protocols like HTTPS and HTTP/2, serialize data with formats like Gob, JSON, XML, and protocol buffers, perform authentication and authorization for your network services, create streams and asynchronous data transfers, write gRPC microservices, perform structured logging and instrumentation, and deploy your applications to the cloud | 1 724 |
| 11 | #info
PHP2Shell: 22-24 October 2026
https://gist.github.com/0x4D31/6b1e7b5fb7a10219af187be91335c96f | 1 696 |
| 12 | #DevOps
#Tech_book
"DevSecOps and DevOps for Linux:
The Foundations", 2026.
]-> https://github.com/Apress/DevSecOps-for-Linux
// This book focuses on the widest interpretation of DevSecOps, which blends security concepts into DevOps. For this reason, it illustrates not only concepts strictly related to DevSecOps, but also DevOps concepts since it is not correct to take them for granted | 1 720 |
| 13 | #tools
#Offensive_security
Defeating enforced SMB signing
https://blackfield.ch/blog/defeating-enforced-smb-signing
]-> PoC: defeating enforced SMB signing on an SMB relay | 1 582 |
| 14 | #Tech_book
"The Art of 64-bit Assembly Vol.2:
Machine-Level OOP, Exceptions, and Concurrency", 2026.
// This book covers the following subjects: advanced macro programming, unicode string types and functions, advanced use of local variables in procedures and functions, object-oriented programming in assembly language, transcendental function implementation, exception handling under Windows using assembly language, advanced procedure types as well as advanced parameter-passing mechanisms and techniques, coroutines, generators, iterators, and concurrent programming | 1 676 |
| 15 | #Analytics
#Threat_Research
An analytical review of the main cybersecurity events (Oct 17-24, 2026)
1⃣ PHP2Shell
]-> Pre-auth RCE research toolkit
// CVE-2026-109619, CVE-2026-109619
2⃣ Another vulnerability in PHP
// The PHP project's developers have announced the discovery of another vulnerability (CVE-2026-115560), which could potentially be exploited for RCE on the server under a certain, rare combination of non-default settings and executed PHP code
3⃣ OpenSSL 4.1.0 and LibreSSL 4.4.0
4⃣ About 10% of Tor exit nodes were involved in an SSH connection hijacking attack
5⃣ Nmap 7.992
6⃣ Cisco Snort 3 Critical Vulnerabilities
// CVE-2026-20043
7⃣ FortiSIEM gRPC Path Traversal File Write RCE
// CVE-2026-106173
8⃣ Linux Kernel KSMBD Vulnerability
9⃣ Signal: Flooded Call Event Queue Blocks Local Hang-Up
// CVE-2026-113380 | 1 665 |
| 16 | #tools
#MLSecOps
"The Trigger in the Haystack:
Extracting and Reconstructing LLM Backdoor Triggers", Feb. 2026.
]-> https://github.com/microsoft/llm-backdoor-scanner | 1 815 |
| 17 | #Malware_analysis
1⃣ MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
https://www.welivesecurity.com/en/eset-research/mythicratatoskr-yggdrasil-enabled-backdoor-deployed-uac0099-sandworm-collaboration
2⃣ DarkCore: A Data-Theft RAT With a Session-Hijacking Browser
https://www.blackfog.com/darkcore-a-data-theft-rat-with-a-session-hijacking-browser
3⃣ | 1 739 |
| 18 | #Kernel_Security
When Defenses Become Attack Surface: CVE-2026-20971, a Samsung Kernel UAF
https://lucidbitlabs.com/blog/when-defenses-become-attack-surface
// Affected Devices: Galaxy S9 through Galaxy S25, A-series, Exynos, and Qualcomm devices | 1 712 |
| 19 | #Tech_book
"Authorization in Action:
Build policy-based access control for zero trust, APIs, SaaS, and AI agents", 2026.
// This book uses the Cedar policy language for most of its examples. Cedar - open source policy language for expressing fine-grained permissions
https://github.com/cedar-policy/cedar
Policies and schemas appear throughout the text, and the three appendixes provide complete, runnable examples.
Appendix A:
https://github.com/windley/acme-cedar-demo
Appendix B:
https://github.com/windley/acme-cedar-ai-authoring
Appendix C:
https://github.com/windley/openclaw-cedar-policy-demo | 2 158 |
| 20 | #tools
#OSINT
1⃣ WireTapper - wireless OSINT tool that passively detects and maps Wi-Fi, Bluetooth, CCTV cameras, vehicles, headphones, TVs, IoT devices, and cell towers, turning nearby radio signals into clear situational intelligence
2⃣ Claude-OSINT - 8 Claude skills, 100+ recon capabilities, 80 secret-regex patterns, 80+ dorks, 9 read-only credential validators, 27 attack-path templates, ~10k lines of structured tradecraft
3⃣ Ground Station - open-source, browser-based application for tracking satellites and celestial targets, controlling station hardware, and receiving, decoding, and recording SDR signals | 2 471 |
