Endi mavjud! Telegram Tadqiqoti 2025 — yilning asosiy insaytlari 
CyberSecurityTechnologies
Yopiq kanal
We have been working for YOU for more than 8 years!!! https://t.me/+9vdG4JOSgY8xMzdi See also: https://t.me/Cognitive_Security https://t.me/CyberSecurityOSINT https://t.me/Wireless_Cybersecurity For All Questions: in messages to the channel
Ko'proq ko'rsatish📈 Telegram kanali CyberSecurityTechnologies analitikasi
CyberSecurityTechnologies Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 35 756 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 3 845-o'rinni va AQSH mintaqasida 1 045-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 35 756 obunachiga ega bo‘ldi.
15 Iyun, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni -482 ga, so‘nggi 24 soatda esa -14 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 6.92% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining N/A% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 2 475 marta ko‘riladi; birinchi sutkada odatda 0 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 11 ta reaksiya keladi.
- Tematik yo‘nalishlar: Kontent cve-2025, attack, threat, detection, llm kabi asosiy mavzularga jamlangan.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“We have been working for YOU for more than 8 years!!!
https://t.me/+9vdG4JOSgY8xMzdi
See also:
https://t.me/Cognitive_Security
https://t.me/CyberSecurityOSINT
https://t.me/Wireless_Cybersecurity
For All Questions: in messages to the channel”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 16 Iyun, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
35 756
Obunachilar
-1424 soatlar
-1037 kunlar
-48230 kunlar
Ma'lumot yuklanmoqda...
O'xshash kanallar
Taglar buluti
Kirish va chiqish esdaliklari
---
---
---
---
---
---
Obunachilarni jalb qilish
Iyun '26
Iyun '26
+2
2 kanalda
May '26
+8
8 kanalda
Get PRO
Aprel '26
+5
5 kanalda
Get PRO
Mart '26
+6
6 kanalda
Get PRO
Fevral '26
+53
12 kanalda
Get PRO
Yanvar '26
+5
5 kanalda
Get PRO
Dekabr '25
+30
10 kanalda
Get PRO
Noyabr '25
+5
10 kanalda
Get PRO
Oktabr '25
+103
11 kanalda
Get PRO
Sentabr '25
+169
11 kanalda
Get PRO
Avgust '25
+181
14 kanalda
Get PRO
Iyul '25
+216
13 kanalda
Get PRO
Iyun '25
+140
8 kanalda
Get PRO
May '25
+80
4 kanalda
Get PRO
Aprel '25
+110
4 kanalda
Get PRO
Mart '25
+154
7 kanalda
Get PRO
Fevral '25
+150
7 kanalda
Get PRO
Yanvar '25
+153
10 kanalda
Get PRO
Dekabr '24
+614
6 kanalda
Get PRO
Noyabr '24
+2 694
9 kanalda
Get PRO
Oktabr '24
+3 905
8 kanalda
Get PRO
Sentabr '24
+3 114
4 kanalda
Get PRO
Avgust '24
+3 425
7 kanalda
Get PRO
Iyul '24
+3 738
2 kanalda
Get PRO
Iyun '24
+3 441
3 kanalda
Get PRO
May '24
+3 316
1 kanalda
Get PRO
Aprel '24
+3 222
4 kanalda
Get PRO
Mart '24
+3 443
6 kanalda
Get PRO
Fevral '24
+2 626
4 kanalda
Get PRO
Yanvar '24
+1 689
8 kanalda
Get PRO
Dekabr '23
+1 310
2 kanalda
Get PRO
Noyabr '23
+273
7 kanalda
Get PRO
Oktabr '23
+331
2 kanalda
Get PRO
Sentabr '23
+322
0 kanalda
Get PRO
Avgust '23
+197
0 kanalda
Get PRO
Iyul '23
+179
0 kanalda
Get PRO
Iyun '23
+148
0 kanalda
Get PRO
May '23
+149
0 kanalda
Get PRO
Aprel '23
+210
0 kanalda
Get PRO
Mart '23
+149
0 kanalda
Get PRO
Fevral '23
+149
0 kanalda
Get PRO
Yanvar '23
+141
0 kanalda
Get PRO
Dekabr '22
+187
0 kanalda
Get PRO
Noyabr '22
+288
0 kanalda
Get PRO
Oktabr '22
+140
0 kanalda
Get PRO
Sentabr '22
+192
0 kanalda
Get PRO
Avgust '22
+672
0 kanalda
Get PRO
Iyul '22
+174
0 kanalda
Get PRO
Iyun '22
+162
0 kanalda
Get PRO
May '22
+168
0 kanalda
Get PRO
Aprel '22
+129
0 kanalda
Get PRO
Mart '22
+163
0 kanalda
Get PRO
Fevral '22
+315
0 kanalda
Get PRO
Yanvar '22
+154
0 kanalda
Get PRO
Dekabr '21
+247
0 kanalda
Get PRO
Noyabr '21
+119
0 kanalda
Get PRO
Oktabr '21
+157
0 kanalda
Get PRO
Sentabr '21
+126
0 kanalda
Get PRO
Avgust '21
+346
0 kanalda
Get PRO
Iyul '21
+140
0 kanalda
Get PRO
Iyun '21
+409
0 kanalda
Get PRO
May '21
+97
0 kanalda
Get PRO
Aprel '21
+315
0 kanalda
Get PRO
Mart '21
+199
0 kanalda
Get PRO
Fevral '21
+220
0 kanalda
Get PRO
Yanvar '21
+211
0 kanalda
Get PRO
Dekabr '20
+2 406
0 kanalda
| Sana | Obunachilarni jalb qilish | Esdaliklar | Kanallar | |
| 16 Iyun | 0 | |||
| 15 Iyun | 0 | |||
| 14 Iyun | 0 | |||
| 13 Iyun | 0 | |||
| 12 Iyun | 0 | |||
| 11 Iyun | +1 | |||
| 10 Iyun | 0 | |||
| 09 Iyun | 0 | |||
| 08 Iyun | 0 | |||
| 07 Iyun | 0 | |||
| 06 Iyun | +1 | |||
| 05 Iyun | 0 | |||
| 04 Iyun | 0 | |||
| 03 Iyun | 0 | |||
| 02 Iyun | 0 | |||
| 01 Iyun | 0 |
Kanal postlari
#AIOps
#MLSecOps
"Deep-Research Agents Can Be Poisoned via User-Generated Content", May 2026.
]-> https://github.com/Tingwei-Zhang/geo_storm
// WARP (Web Agent Retrieval Poisoning) attack exploits the predictable retrieval patterns of deep-research agents. Key observation is that within a topic cluster, the same UGC pages are retrieved across many related queries. By appending poisoned text to one of these high-overlap pages - e.g., posting a comment on a popular Reddit thread - an adversary can influence the agent’s output across the entire cluster. Crucially, the WARP attack does not inject new documents into retrieval; it modifies existing pages that the agent already retrieves organically
| 2 | #Kernel_Security
Unix GC Remastered
https://mohandacherir.github.io/Qdiv7/posts/unix_new_gc
// A walkthrough of the rewritten AF_UNIX garbage collector, the CVE-2025-40214 scc_index uninitialised-field bug, and two reproducers | 1 107 |
| 3 | #hardening
#Whitepaper
"Know Your Blind Spots: Better Visibility Through EDR Policy Hardening", May 2026.
// EDR tools identify, detect, and respond to anomalous behavior. They assist blue teams, incident response operations, and threat hunting. However, an EDR is only as effective as the events it can detect. Alerts and actions depend on the tool's detections, which in turn depend on visibility within the environment | 1 079 |
| 4 | #Malware_analysis
1⃣ Inside the Miasma Software Supply Chain Attack Toolkit
https://safedep.io/inside-the-miasma-supply-chain-attack-toolkit
2⃣ The Fake Download That Steals Everything:
How Deceptive Installers Are Targeting macOS Users
https://www.huntress.com/blog/deceptive-installers-macos-infostealers
3⃣ Arch Linux Malicious User Packages
https://www.sonatype.com/blog/atomic-arch-npm-campaign-adds-malicious-dependency | 1 044 |
| 5 | #tools
#Threat_Research
Ghost-Sender - Universal Email Spoofing against Exchange Online
https://labs.infoguard.ch/posts/ghost-sender
]-> tool to test
// Using Exchange Online (or on-premises exchange in hybrid mode) in combination with an external MX record, such as a third-party email server or spam protection solution, can allow the spoofing of emails from any sender to any recipient in the target tenant | 1 209 |
| 6 | #DFIR
#AIOps
#Whitepaper
"From Alert to Evidence:
Evaluating AI Agents for Cyber Forensic Triage", 2026.
]-> https://github.com/connorblackard/breadcrumb
// LLM-powered forensic triage. Takes a SIEM alert plus a directory of KAPE/EZ-tools forensic output and produces an incident report | 1 483 |
| 7 | #DFIR
1⃣ A deep technical analysis of Windows input pipelines, security telemetry, and why PuTTY, WinSCP, MySQL, SSH, and SFTP passwords may leak into system memory
https://hexderef.com/windows-11-passwords-in-memory-lsass-ctfmon-analysis
2⃣ Aether - Windows memory-forensics and threat hunting tool
https://github.com/0xsp-SRD/aether | 3 320 |
| 8 | #DevOps
#Tech_book
#Cyber_Education
"Fundamentals of DevOps and Software Delivery:
A Hands-On Guide to Deploying and Managing Software in Production", 2025.
]-> Code samples | 3 402 |
| 9 | #WebApp_Security
#Infosec_Standards
NIST SP 800-228A ipd:
"Guidelines for the Secure Deployment of RESTful Web APIs", May 2026.
// This document:
- Analyzes threats to RESTful APIs across the pre-runtime and runtime phases
- Provides guidelines for implementing a set of controls to mitigate threats | 3 007 |
| 10 | #tools
#AIOps
"AIRGuard: Guarding Agent Actions with Runtime Authority Control", May 2026.
// AIRGuard - runtime defense that combines authority context, resource trust labels, LLM-based risk simulation, and tiered enforcement to protect LLM agents from indirect prompt injection attacks via untrusted tool outputs | 2 806 |
| 11 | #AppSec
#Threat_Research
1⃣ Click Or Trick (CVE-2025-59199):
Escaping the Sandbox with Windows URIs
https://www.safebreach.com/blog/click-or-trick-cve-2025-59199-escaping-the-sandbox-with-windows-uris
2⃣ Adobe Acrobat Reader Escript.api UAF RCE
https://blog.exodusintel.com/2026/06/01/adobe-acrobat-reader-escript-api-use-after-free-remote-code-execution
3⃣ Exploiting Windows Defender's Remediation Workflow for LPE
https://blog.calif.io/p/redsun-exploiting-windows-defenders | 2 517 |
| 12 | #NetSec
#Blue_Team_Techniques
"PLM-NIDS: A Protocol-Language Model for Network Intrusion Detection from Raw Packet Sequences Using RWKV State-Space Models", May 2026.
]-> https://github.com/shiva2vk/PLM-NIDS
// The RWKV backbone’s O(T) recurrent inference enables per-packet streaming without flow buffering, making PLM-NIDS operationally viable at line rate. Because it reads only IP/TCP/UDP headers, it is inherently encryption-agnostic: TLS 1.3, QUIC, and future encrypted protocols are handled transparently | 2 479 |
| 13 | #Fuzzing
#IoD_Security
"Framework for Discovering GPS Spoofing Attacks in Drone Swarms", Jun 2026.
// SwarmFuzz - fuzzing framework to efficiently find Swarm Propagation Vulnerabilities in drone swarms. It uses a combination of graph theory and gradient-guided optimization to find the potential attack parameters | 2 339 |
| 14 | #AIOps
"Hijacking Agent Memory: Stealthy Trojan Attacks Through Conversational Interaction", May 2026.
// MemPoison - novel memory poisoning attack that bypasses selective memory mechanisms in LLM agents, where an attacker can inject triggerable backdoors into the agent's long-term memory through dialogue interactions, thereby misleading its subsequent responses | 2 378 |
| 15 | #Whitepaper
#Kernel_Security
#Offensive_security
"Debugging Filesystem Minifilters with WinDbg", 2026.
// This technical reference poster explores Windows filesystem minifilters, kernel debugging, and filter communication ports from a red team perspective | 4 153 |
| 16 | #reversing
#Kernel_Security
BYOVD and Looting LSASS in the Modern EDR Era
https://g3tsyst3m.com/byovd/BYOVD-and-Looting-LSASS-in-the-Modern-EDR-Era
// The article details advanced BYOVD techniques exploiting kernel driver vulnerabilities to bypass Windows security, including methods for disabling LSASS protections, memory dumping, obfuscation, and defensive countermeasures | 2 316 |
| 17 | #Tech_book
#Kernel_Security
"Learning eBPF: Programming the Linux Kernel for Enhanced Observability, Networking, and Security", 2023.
]-> Repo | 2 984 |
| 18 | #Malware_analysis
1⃣ BlackToad: Network Manipulation in an AutoIt Payload
https://www.jumpsec.com/guides/blacktoad-network-manipulation-in-an-autoit-payload
2⃣ BTMOB: A stealthy RAT burrowing deep into Android devices
https://www.welivesecurity.com/en/malware/btmob-stealthy-rat-burrowing-deep-android-devices
3⃣ Deep Dive into a Device Code Phishing Toolkit
https://newtonpaul.com/blog/device-code-lab-post-exploit | 2 555 |
| 19 | #Analytics
#Threat_Research
An analytical review of the main cybersecurity events for the week (May 23-30, 2026)
1⃣ Privilege Escalation via a Page UaF in Qualcomm's AI Accelerator Linux Kernel Driver
// bug lives in Qualcomm's Cloud AI Accelerator kernel driver, qaic, which is present in mainline Linux
2⃣ The Word 'Toad' Gave Any Website Full Control of Chrome's Most Popular VPN
// Urban VPN's extension deliberately sets up a postMessage listener - a channel that lets any script on any page you visit send it messages
3⃣ Vaultjacking: One Captured PIN, the Entire Google Password Manager Vault
4⃣ A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities
// ASR Rules
5⃣ Detecting Tycoon 2FA AiTM attacks across Entra ID and Google Workspace
// Tycoon 2FA bypasses MFA on Entra ID and Google Workspace...
6⃣ CIFSwitch - vulnerability in Linux kernel's CIFS subsystem that allows root privileges to be gained
7⃣ PuTTY 0.84 released
8⃣ PyFory - Insecure Pickle Deserialization to RCE
// CVE-2025-61622
9⃣ Drupal PostgreSQL SQLI
// SELECT-only SQLi to RCE when the injected expression runs as a PostgreSQL superuser
🔟 Suricata 8.0.5 and 7.0.16 released
]-> Analytical review (May 16-23, 2026) | 2 732 |
| 20 | #SCA
#Hardware_Security
"FROST: Fingerprinting Remotely using
OPFS-based SSD Timing", 2026.
// SSD contention side channels can be mounted by a remote attacker from within the browser, without native code execution. FROST attack targets the Origin Private File System API in JavaScript, allowing us to create and access files on the disk, within the browser’s sandboxed environment | 2 243 |
