cKure
Kanalga Telegram’da o‘tish
﷽ This channel was created in 2018 and contains content from the information security domain. This channel is primarily run by AI bots (n8n). Archive: ckure.esy.es Criticals: @ckuRED linkedin.com/company/ckure Support 📨 i@ckure.org
Ko'proq ko'rsatish6 836
Obunachilar
+124 soatlar
+377 kunlar
+15230 kunlar
Ma'lumot yuklanmoqda...
O'xshash kanallar
Taglar buluti
Kirish va chiqish esdaliklari
---
---
---
---
---
---
Obunachilarni jalb qilish
Iyul '26
Iyul '26
+78
1 kanalda
Iyun '26
+203
3 kanalda
Get PRO
May '26
+176
1 kanalda
Get PRO
Aprel '26
+193
7 kanalda
Get PRO
Mart '26
+161
5 kanalda
Get PRO
Fevral '26
+130
1 kanalda
Get PRO
Yanvar '26
+160
6 kanalda
Get PRO
Dekabr '25
+151
1 kanalda
Get PRO
Noyabr '25
+165
2 kanalda
Get PRO
Oktabr '25
+94
2 kanalda
Get PRO
Sentabr '25
+67
2 kanalda
Get PRO
Avgust '25
+66
4 kanalda
Get PRO
Iyul '25
+44
4 kanalda
Get PRO
Iyun '25
+77
4 kanalda
Get PRO
May '25
+45
1 kanalda
Get PRO
Aprel '25
+84
4 kanalda
Get PRO
Mart '25
+35
0 kanalda
Get PRO
Fevral '25
+32
1 kanalda
Get PRO
Yanvar '25
+61
3 kanalda
Get PRO
Dekabr '24
+129
5 kanalda
Get PRO
Noyabr '24
+206
3 kanalda
Get PRO
Oktabr '24
+178
2 kanalda
Get PRO
Sentabr '24
+241
5 kanalda
Get PRO
Avgust '24
+242
4 kanalda
Get PRO
Iyul '24
+172
3 kanalda
Get PRO
Iyun '24
+167
0 kanalda
Get PRO
May '24
+186
1 kanalda
Get PRO
Aprel '24
+168
1 kanalda
Get PRO
Mart '24
+181
0 kanalda
Get PRO
Fevral '24
+269
0 kanalda
Get PRO
Yanvar '24
+356
0 kanalda
Get PRO
Dekabr '23
+281
0 kanalda
Get PRO
Noyabr '23
+63
2 kanalda
Get PRO
Oktabr '23
+66
0 kanalda
Get PRO
Sentabr '23
+66
0 kanalda
Get PRO
Avgust '23
+78
0 kanalda
Get PRO
Iyul '23
+47
0 kanalda
Get PRO
Iyun '23
+64
0 kanalda
Get PRO
May '23
+43
0 kanalda
Get PRO
Aprel '23
+48
0 kanalda
Get PRO
Mart '23
+30
0 kanalda
Get PRO
Fevral '23
+23
0 kanalda
Get PRO
Yanvar '23
+42
0 kanalda
Get PRO
Dekabr '22
+25
0 kanalda
Get PRO
Noyabr '22
+30
0 kanalda
Get PRO
Oktabr '22
+67
0 kanalda
Get PRO
Sentabr '22
+53
0 kanalda
Get PRO
Avgust '22
+70
0 kanalda
Get PRO
Iyul '22
+79
0 kanalda
Get PRO
Iyun '22
+78
0 kanalda
Get PRO
May '22
+64
0 kanalda
Get PRO
Aprel '22
+77
0 kanalda
Get PRO
Mart '22
+49
0 kanalda
Get PRO
Fevral '22
+44
0 kanalda
Get PRO
Yanvar '22
+70
0 kanalda
Get PRO
Dekabr '21
+61
0 kanalda
Get PRO
Noyabr '21
+53
0 kanalda
Get PRO
Oktabr '21
+90
0 kanalda
Get PRO
Sentabr '21
+87
0 kanalda
Get PRO
Avgust '21
+108
0 kanalda
Get PRO
Iyul '21
+110
0 kanalda
Get PRO
Iyun '21
+103
0 kanalda
Get PRO
May '21
+105
0 kanalda
Get PRO
Aprel '21
+222
0 kanalda
Get PRO
Mart '21
+120
0 kanalda
Get PRO
Fevral '21
+55
0 kanalda
Get PRO
Yanvar '21
+61
0 kanalda
Get PRO
Dekabr '20
+3 174
0 kanalda
| Sana | Obunachilarni jalb qilish | Esdaliklar | Kanallar | |
| 09 Iyul | +6 | |||
| 08 Iyul | +8 | |||
| 07 Iyul | +7 | |||
| 06 Iyul | +9 | |||
| 05 Iyul | +7 | |||
| 04 Iyul | +5 | |||
| 03 Iyul | +12 | |||
| 02 Iyul | +12 | |||
| 01 Iyul | +12 |
Kanal postlari
| 2 | ■■■□□ no-gdid: Read, understand, and silence the Windows Global Device Identifier (GDID) — the hidden per-account device ID that helped the FBI locate a suspect who was using a VPN.
👮 the best option is to switch Microsoft products out of environment completely. At ckure, we use Fedora.
https://github.com/Korben00/no-gdid | 189 |
| 3 |  ■■□□□ The $54B military AI deal that divided Big Tech. Seven companies agreed to the terms, but the makers of Claude pushed back. AI isn't just software anymore—it's changing the rules of global defense. | 203 |
| 4 | ■■■□□ Proxyware actor behind fake 7-Zip is bigger than most assumed.
https://www.infoblox.com/blog/threat-intelligence/fake-installers-fake-reviews-fake-services-real-proxies-real-victims/ | 223 |
| 5 |  🐧GhostLock (CVE-2026-43499): a 15-year-old Linux kernel vulnerability that affects every distribution. Desktop, server, Android, IoT, embedded. $92,337 Google kernelCTF bounty.
A stack-UAF in the rtmutex subsystem. remove_waiter() uses current instead of waiter::task during proxy-lock rollback in futex_requeue(), leaving a dangling pointer to freed kernel stack memory. No special kernel modules needed, only CONFIG_FUTEX_PI which is enabled on every distro.
Nebula Security (NebuSec) turned it into a 97% stable privilege escalation and container escape. The exploit chains a dangling pointer into an arbitrary address write, hijacks a function table for control flow, and achieves root in about 5 seconds. Found by VEGA, their AI vulnerability scanner.
Part of IonStack, the first browser-to-kernel full-chain RCE on Android 17: CVE-2026-10702 (Firefox IonMonkey JIT 0-day, near 100% success rate) chained with GhostLock for kernel LPE.
Present since Linux 2.6.39 (2011). Fixed in Linux 7.1. Full exploit code published on GitHub.
Exploit:
https://github.com/NebuSec/CyberMeowfia/tree/main/IonStack/CVE-2026-43499 | 181 |
| 6 | ■■■■■ 💻 Windows kernel exploitation series.
https://mdanilor.github.io/posts/hevd-0/
https://mdanilor.github.io/posts/hevd-1/
https://mdanilor.github.io/posts/hevd-2/
https://mdanilor.github.io/posts/hevd-3/
https://mdanilor.github.io/posts/hevd-4/ | 301 |
| 7 |  ■■□□□ Uninstalling 🤩🤩🤩🤩🤩🤩🤩
🇫🇷 France just fired 2.5 million Windows machines. The French government has ordered every ministry to rip out American tech, operating systems, cloud, even AI tools, and move to Linux by this autumn. The minister’s reasoning was blunt: they can no longer accept that their data, infrastructure and strategic decisions depend on solutions they don’t control. And France isn’t alone. Denmark is dumping Microsoft Office. Germany moved tens of thousands of government PCs to Linux. This is a continental exodus. What triggered it? One incident. When the US sanctioned the ICC, the chief prosecutor reportedly got locked out of his Microsoft email overnight. Europe watched that and realised your software vendor is a geopolitical chokepoint. Flip a switch in Washington, and your government goes dark. Here’s the part that matters even here in Australia. Every business runs on someone else’s infrastructure. The real question was never “is the cloud safe?” It’s who controls the kill switch. If your vendor cut you off tomorrow, could you still operate? Follow for more on cyber, sovereignty and the new digital cold war. | 345 |
| 8 |  ■■■□□ Verbatim:
All major AI companies have hired philosophers. Which is mainly because AI stopped being a pure technical tool (long time ago), and is now making decisions about honesty, harm, conciousness, and legitimately everything else. What I find difficult to understand is how much power a philosopher inside a corporation like Open AI or Anthropic ACTUALLY has. Like when it boils down to finances... does a philosopher really have that much to say? Asking big questions, but what about the answers? Will those be acted upon? Maybe it is actually AI safety. But maybe it also is ethics-washing? Either way, I do feel better knowing there are philosophers included. | 444 |
| 9 | 🎚 The Mosad Playbook: How One Alias Built a Cross-Platform Leak Network.
https://stealthmole-intelligence-hub.blogspot.com/2026/07/the-mosad-playbook-how-one-alias-built.html | 233 |
| 10 | ■■■■■ EvilTokens phishing can look clean during URL checks.
The real page stays encrypted until it opens in the victim’s browser, then uses Microsoft device-code phishing to push toward Microsoft 365 account takeover.
The blind spot is browser visibility, not just email scanning.
https://thehackernews.com/2026/07/new-ghost-phishing-wave-is-breaking.html | 275 |
| 11 |  Peter Stokes was pulled off a flight in Helsinki, and Scattered Spider’s run of arrests keeps growing as they triste Microsoft Windows for their operational security.
This is when a cyber crime group trusted Microsoft.
The GDID gives Microsoft access to everyone of your internet history of all applications.
And can also initiate remote monitoring through security updates.
And if you think that there is some hard drive you used encryption that uses TPM.
TPM let's are actually stored with Microsoft for every installation.
Never use Microsoft products and any organisation known for complicity and backdoor installations. | 243 |
| 12 |  🔥 A new 16-year-old #Linux KVM flaw lets a rooted nested VM crash the x86 host and take down other tenants on the same machine.
Dubbed "Januscape" (CVE-2026-53359), the bug sits in KVM’s shadow MMU.
Researcher says a full guest-to-host escape exploit also exists in a controlled setup; only the host-crash PoC is public.
Explained here: https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html | 435 |
| 13 | ■■■□□ 🇮🇷 Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
CP<r> reveals:
🎯 Israeli Gov & IT sector targeted
🧩 Novel modular "Cavern" C2 framework, 3 .NET formats
🕵️ Iran-nexus; MOIS ties to MuddyWater & Lyceum
👻 Most samples: zero VT hits
https://research.checkpoint.com/2026/cavern-manticore-exposing-iran-linked-modular-c2-framework/ | 451 |
| 14 |  ■□□□□ Corrupting the FOSS | 501 |
| 15 | ■■■■□ ⚪️⚪️⚪️🔺🔺⚪️
⚪️⚪️🔺⚪️🔺⚪️🔺
Exploit for Exynos devices to gain ACE in BootROM context.
A length parameter left unchecked in the USB Control Request code allows iRAM to be dumped, modified and resent to the device, allowing for code execution.
https://github.com/halal-beef/houston-pub | 454 |
| 16 | ■■□□□ Why DMARC's new "NP" tag can fail with DNSSEC.
https://dmarcwise.io/blog/dmarc-np-incompatibility-with-dnssec | 453 |
| 17 | ■■■■■ ☁️ ☁️ Floci – A Fast, Free & Open-Source AWS Local Emulator
Floci is an open-source AWS emulator that lets developers run AWS services locally without an AWS account, authentication tokens, or feature restrictions. Designed as a lightweight alternative to LocalStack Community, it supports 68+ AWS services with real Docker-backed execution for higher fidelity.
✨ Key Features:
• ☁️ Emulates 68+ AWS services locally
• 🚀 Fast startup (~24ms) with low memory usage
• 🐳 Real Docker execution for Lambda, RDS, ECS, EKS, MSK & more
• 🔄 Works with AWS CLI, SDKs, Terraform, CDK & OpenTofu
• 🧪 Built-in Testcontainers support for Java, Node.js & Python
• 💾 Multiple storage modes: Memory, Persistent, Hybrid & WAL
• 🔓 No AWS account, auth token or paid feature gates required
https://github.com/floci-io/floci | 449 |
| 18 | ■■■■□ Exploring cross-domain & cross-forest RBCD: part 2
https://www.synacktiv.com/en/publications/exploring-cross-domain-cross-forest-rbcd-part-2 | 454 |
| 19 | FROST side channel correlation attack.
https://youtube.com/shorts/heZO6o1fqRA | 499 |
| 20 |  +1👍Sim Swap Attack
https://covertaccessteam.substack.com/p/podcast-with-dmitry-kurbatov | 630 |
