CyberSecurityTechnologies
Yopiq kanal
We have been working for YOU for more than 8 years!!! https://t.me/+9vdG4JOSgY8xMzdi See also: https://t.me/Cognitive_Security https://t.me/CyberSecurityOSINT https://t.me/Wireless_Cybersecurity For All Questions: in messages to the channel
Ko'proq ko'rsatish📈 Telegram kanali CyberSecurityTechnologies analitikasi
CyberSecurityTechnologies Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 33 824 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 3 956-o'rinni va AQSH mintaqasida 1 206-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 33 824 obunachiga ega bo‘ldi.
26 Oktabr, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni -429 ga, so‘nggi 24 soatda esa -13 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 6.87% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 3.14% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 2 322 marta ko‘riladi; birinchi sutkada odatda 1 063 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 5 ta reaksiya keladi.
- Tematik yo‘nalishlar: Kontent cve-2025, attack, threat, detection, llm kabi asosiy mavzularga jamlangan.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“We have been working for YOU for more than 8 years!!!
https://t.me/+9vdG4JOSgY8xMzdi
See also:
https://t.me/Cognitive_Security
https://t.me/CyberSecurityOSINT
https://t.me/Wireless_Cybersecurity
For All Questions: in messages to the channel”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 27 Oktabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
33 824
Obunachilar
-1324 soatlar
-1127 kun
-42930 kun
Postlar arxiv
#Research
#MLSecOps
"Making attacking agents pay:
Context Bombs as defense against offensive AI", 2026.
// Context Bombs are deceptive traps designed to turn an AI attacker’s own reasoning against it: drawing it into wasted work, steering it away from real targets, or getting it to reveal its intentions. Canary interactions alert you to its presence, while these traps can buy your team time to contain the attack
#NetSec
#Tech_book
"Network Programming with Go:
Code Secure and Reliable Network Services from Scratch", 2021.
// This book details the basics of network programming with an emphasis on security. You will learn socket-level programming including TCP, UDP, and Unix sockets, interact with application-level protocols like HTTPS and HTTP/2, serialize data with formats like Gob, JSON, XML, and protocol buffers, perform authentication and authorization for your network services, create streams and asynchronous data transfers, write gRPC microservices, perform structured logging and instrumentation, and deploy your applications to the cloud
#info
PHP2Shell: 22-24 October 2026
https://gist.github.com/0x4D31/6b1e7b5fb7a10219af187be91335c96f
#DevOps
#Tech_book
"DevSecOps and DevOps for Linux:
The Foundations", 2026.
]-> https://github.com/Apress/DevSecOps-for-Linux
// This book focuses on the widest interpretation of DevSecOps, which blends security concepts into DevOps. For this reason, it illustrates not only concepts strictly related to DevSecOps, but also DevOps concepts since it is not correct to take them for granted
#tools
#Offensive_security
Defeating enforced SMB signing
https://blackfield.ch/blog/defeating-enforced-smb-signing
]-> PoC: defeating enforced SMB signing on an SMB relay
#Tech_book
"The Art of 64-bit Assembly Vol.2:
Machine-Level OOP, Exceptions, and Concurrency", 2026.
// This book covers the following subjects: advanced macro programming, unicode string types and functions, advanced use of local variables in procedures and functions, object-oriented programming in assembly language, transcendental function implementation, exception handling under Windows using assembly language, advanced procedure types as well as advanced parameter-passing mechanisms and techniques, coroutines, generators, iterators, and concurrent programming
#Analytics
#Threat_Research
An analytical review of the main cybersecurity events (Oct 17-24, 2026)
1⃣ PHP2Shell
]-> Pre-auth RCE research toolkit
// CVE-2026-109619, CVE-2026-109619
2⃣ Another vulnerability in PHP
// The PHP project's developers have announced the discovery of another vulnerability (CVE-2026-115560), which could potentially be exploited for RCE on the server under a certain, rare combination of non-default settings and executed PHP code
3⃣ OpenSSL 4.1.0 and LibreSSL 4.4.0
4⃣ About 10% of Tor exit nodes were involved in an SSH connection hijacking attack
5⃣ Nmap 7.992
6⃣ Cisco Snort 3 Critical Vulnerabilities
// CVE-2026-20043
7⃣ FortiSIEM gRPC Path Traversal File Write RCE
// CVE-2026-106173
8⃣ Linux Kernel KSMBD Vulnerability
9⃣ Signal: Flooded Call Event Queue Blocks Local Hang-Up
// CVE-2026-113380
#tools
#MLSecOps
"The Trigger in the Haystack:
Extracting and Reconstructing LLM Backdoor Triggers", Feb. 2026.
]-> https://github.com/microsoft/llm-backdoor-scanner
#Malware_analysis
1⃣ MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
https://www.welivesecurity.com/en/eset-research/mythicratatoskr-yggdrasil-enabled-backdoor-deployed-uac0099-sandworm-collaboration
2⃣ DarkCore: A Data-Theft RAT With a Session-Hijacking Browser
https://www.blackfog.com/darkcore-a-data-theft-rat-with-a-session-hijacking-browser
3⃣
#Kernel_Security
When Defenses Become Attack Surface: CVE-2026-20971, a Samsung Kernel UAF
https://lucidbitlabs.com/blog/when-defenses-become-attack-surface
// Affected Devices: Galaxy S9 through Galaxy S25, A-series, Exynos, and Qualcomm devices
#Tech_book
"Authorization in Action:
Build policy-based access control for zero trust, APIs, SaaS, and AI agents", 2026.
// This book uses the Cedar policy language for most of its examples. Cedar - open source policy language for expressing fine-grained permissions
https://github.com/cedar-policy/cedar
Policies and schemas appear throughout the text, and the three appendixes provide complete, runnable examples.
Appendix A:
https://github.com/windley/acme-cedar-demo
Appendix B:
https://github.com/windley/acme-cedar-ai-authoring
Appendix C:
https://github.com/windley/openclaw-cedar-policy-demo
#tools
#OSINT
1⃣ WireTapper - wireless OSINT tool that passively detects and maps Wi-Fi, Bluetooth, CCTV cameras, vehicles, headphones, TVs, IoT devices, and cell towers, turning nearby radio signals into clear situational intelligence
2⃣ Claude-OSINT - 8 Claude skills, 100+ recon capabilities, 80 secret-regex patterns, 80+ dorks, 9 read-only credential validators, 27 attack-path templates, ~10k lines of structured tradecraft
3⃣ Ground Station - open-source, browser-based application for tracking satellites and celestial targets, controlling station hardware, and receiving, decoding, and recording SDR signals
#AIOps
#Offensive_security
"AutoRedClaw: Automated Red-Teaming for Claw-Style Agents", 2026.
]-> https://github.com/SaFo-Lab/AutoRedClaw
// AutoRedClaw - automated red-teaming framework that generates end-to-end attacks together with the environments needed to execute them. AutoRedClaw combines a strict quality-checking protocol with execution-based validation to ensure the correctness, realism, and effectiveness of generated samples, and adopts task-driven environment construction to keep costs low
#Offensive_security
#Malware_analysis
PhantomBuffer:
Effective EDR Evasion Through Stealth Injection
https://www.zerosalarium.com/2026/10/PhantomBuffer-Effective-EDR-Evasion-Stealth-Injection.html
]-> https://github.com/TwoSevenOneT/PhantomBuffer
// The article introduces "PhantomBuffer", a stealth technique that injects payloads into processes via SendMessageW with WM_SETTEXT, avoiding WriteProcessMemory, and leverages cdb.exe for thread hijacking, with recommendations to monitor related API calls and suspicious debugger activity
#OpSec
#Whitepaper
"passwords.txt: Using Notepad and SmartScreen to Oracle Account Passwords", Sep 2026.
// Enhanced Phishing Protection (EPP) is designed to reduce credential theft by detecting unsafe password entry and providing additional security telemetry within Windows. However, security mechanisms that generate observable system artifacts may introduce unintended information disclosure
#MLSecOps
#SCADA_Security
"Recording-Aware Evaluation of Multimodal OT Intrusion Detection", Oct 2026.
]-> https://github.com/ANTS-OntarioTechU/Recording-Aware-Evaluation-of-Multimodal-OT-Intrusion-Detection
#exploit
#Kernel_Security
Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
https://github.com/califio/publications/tree/main/MADBugs/openbsd
// Disclaimer
#AppSec
1⃣ GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
https://www.rapid7.com/blog/post/ra-gitlab-ci-cd-regex-integer-overflow-technical-analysis-cve-2026-97229
2⃣ Plex2Shell:
Unauthenticated RCE in Plex Media Server
https://zmain.info/blog/plex2shell
3⃣ CVE-2026-108097 Deep Dive:
Turning a Drupal Field UI Callback Into RCE
https://fortbridge.co.uk/research/cve-2026-108097-deep-dive-turning-a-drupal-field-ui-callback-into-rce
#DFIR
#Infographics
Windows Forensic Analysis, SANS, 2006.
// What files were opened? Which programs ran? Where did the user connect?..
#tools
#Offensive_security
SyscallRevenant: Surpassing EDRs & AVs
https://github.com/SilentisVox/SyscallRevenant
// new method of performing clean indirect syscalls. The main component resolves System Service Numbers and syscall instruction addresses dynamically. This is done by enabling the trap flag during execution. The secondary component is tampering via parameter replacement before a syscall. This combination is designed to bypass userland hooks during the subsequent syscall invocation while substituting the initially presented parameters
// Disclaimer
