Endi mavjud! Telegram Tadqiqoti 2025 — yilning asosiy insaytlari 
Bug bounty Tips
Kanalga Telegram’da o‘tish
🛡️ Cybersecurity enthusiast | 💻 Helping secure the digital world | 🌐 Web App Tester | 🕵️♂️ OSINT Specialist Admin: @laazy_hack3r
Ko'proq ko'rsatish5 769
Obunachilar
+624 soatlar
+867 kunlar
+43730 kunlar
Postlar arxiv
5 769
🦾 **VulnOps Daily Digest**
☀️ 11 Jun 2026 · 01:36 PM IST
📰 Krebs on Security – In-depth security news and investigation
https://news.google.com/rss/articles/CBMiQkFVX3lxTE1pNDRzd3JnaFdKdnNXeEl4cnY4aURsMnJhQWQxTkpUUkg1WmZocEw0S1huTVhxR19KZGUyTW0tU2w0QQ?oc=5
📰 Security Alert CVE-2026-35273 Released
https://news.google.com/rss/articles/CBMifEFVX3lxTFBZSXUzZjExaWhmdGdEdWFIbktlcmU5bVVvRXo5SlZQX1JuaHFTNmpKQU95c2Z0c3BUeWZYS04ySkpka0ZPeGhkSUJSUGd0b1k2c3RBS2J1ODBjZlVMSnVqSm9xaEM3N2FTQXFGdGVJMHE5WnBSb0RSQlE1NmM?oc=5
📰 CISA gives agencies new vulnerability remediation deadlines that take risk levels into account
https://news.google.com/rss/articles/CBMipAFBVV95cUxQUm9OV3AzZmRIdFU2T2NkREE4ZGlob05NT0w3V3B0MFlSYldHWTdvWTJBS2F0SEp3TFZzaDVDZldTVE54NmRORllzQnZLVk9UUzNJeXhNMDNXdGgtUVF1cDRfVzRyWkRXMDlCNnBEUEZCV0JGSGN6UmF0WUQzZnZ1QzhtaTBWQWVYWFpkOTBYZnk0eFNTd1FzLWRPbm5HTlAtLUk0RQ?oc=5
📰 Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257
https://news.google.com/rss/articles/CBMihwFBVV95cUxQTUVTa0pZeTdwQS1ySmhSTV85cFBkeXdBOUFkWWFxeW9MOE9RNGtETVlwOEVXbkxxcmREUkNqVWlQNmh6VHJMMGZZTHBfdGhmTTNfaTh4S1gwMnZCdkhEdkJrYXBMb0NJOXJhT0U4R0lFVGJfYjNaREM3eFMxeU52bVdpUjhrbGc?oc=5
📰 Microsoft and Adobe Patch Tuesday, June 2026 Security Update Review
https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5
💡 MFA stops 99% of account takeovers. Enable it everywhere.
⚡ _VulnOps · AI-Powered Security_
5 769
🖼️ Daily Cybersecurity Meme
"PATCH LOG4J IN ALL SERVICES"
"REWRITE EVERYTHING IN RUST"
"THE ONLY TWO OPTIONS"
5 769
🖼️ Daily Cybersecurity Meme
"ENCRYPTED S3 BUCKET"
"INTERNS"
"PUBLIC S3 BUCKET WITH "backup-DO-NOT-DELETE""
5 769
🦾 **VulnOps Daily Digest**
🌙 10 Jun 2026 · 11:30 PM IST
📰 Microsoft and Adobe Patch Tuesday, June 2026 Security Update Review
https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5
📰 BOD 26-04: Prioritizing Security Updates Based on Risk
https://news.google.com/rss/articles/CBMimgFBVV95cUxPTHhha0dLbWU2aTlDSXFXMGtCaWZNY09UTU5ISWZTOXNLY0xXTnJDSzNMQndTZElSWHFGb2xSNVZxV0Z1QV85Q2xWUU00NkVDelhuM0Zmb19tVVVLNWhpN0QtUmNwMXdMZUNONUNYc0JrbzQ1SkFTR056WWNnOEMtNGhDbExQekxiaWsyQzJUUHR0TFpUdUh2Yzd3?oc=5
📰 CISA gives agencies new vulnerability remediation deadlines that take risk levels into account
https://news.google.com/rss/articles/CBMipAFBVV95cUxQUm9OV3AzZmRIdFU2T2NkREE4ZGlob05NT0w3V3B0MFlSYldHWTdvWTJBS2F0SEp3TFZzaDVDZldTVE54NmRORllzQnZLVk9UUzNJeXhNMDNXdGgtUVF1cDRfVzRyWkRXMDlCNnBEUEZCV0JGSGN6UmF0WUQzZnZ1QzhtaTBWQWVYWFpkOTBYZnk0eFNTd1FzLWRPbm5HTlAtLUk0RQ?oc=5
📰 Cyera, a Cybersecurity Start-Up for the A.I. Era, Raises $600 Million
https://news.google.com/rss/articles/CBMikgFBVV95cUxPSkFhMUZQeVlhNkNmSmpHQjVjem5VbW13ZjhYUXI2S1FRSWZOWnVDN0h0cUxCaU13dzUzd3JrYl9QbHFjVHJZWmdINkZJcGwyLW4yOThkZU1mWEZ5Mzdxdkc4aFl4QVd3SGJmdHlNTkFrbmtNWk9qSDZGczBPUmphckZCcmpjSENrakxBeWlIZEF6UQ?oc=5
📰 OT cybersecurity becomes a board-level priority as industrial security maturity rises, Fortinet finds
https://news.google.com/rss/articles/CBMi6AFBVV95cUxOOEN0eXNEM3VsaFkzM0RudEZMYzBYbHk3WHhSQW9feElyMmNfYl9aeHh2c3d3eFF0azV2d0o3MmhwRXNvYV9VLW55TkwyU25mY2tGekV3elh5YTRnYTBWc2h2dkpWUWhlUkdjYUE4U3dXWkxpdmd3YWpOdkt2eDQ2Q0dzYTZxSll6TmJrdVRGYmdjSjJTT1ptVEd6cnBtTk5kRFE0NFMzMW1wWVBCSEtuRTYxSHYtUXBxRU9FX3B6cms3S1U4RGZoaWFpMHFNVTJFZ0FOZ2FhX3dIc19xYXhpeUtfWTByTlJK?oc=5
💡 Run weekly dependency scans — CVEs don't wait for patch Tuesday.
⚡ _VulnOps · AI-Powered Security_
5 769
🦾 VulnOps Daily Digest
🌙 10 Jun 2026 · 06:54 PM IST
📰 Microsoft and Adobe Patch Tuesday, June 2026 Security Update Review
https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5
📰 More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520)
https://news.google.com/rss/articles/CBMi4gFBVV95cUxOWFVjTEVhWTlLSnRCYk85Qlo1SHYwYkFGVnhnTXQ2by1UaWpVTjJBLXJQYmdqcVdWUTduT2lhSUpZMlh3bW1MeW1qUlp5MEhtSXRNRXJWVDgwOHVmcUpHZmx3Q01wVDM3RFBsMEc5eWROZEl0MzBvZUtCd3VFb0JrelZyM190TWJEam9rYUdvNzNVTHJVdGUxZnNqbm0wZWpVNzVyNnJ1Ql9RRkQwQzVZOVNxM2h3YmVxVjBRcjNkNS04aU9Qc2x0LXVWbmdhSklRM1h3Y0FIS2huSEEzREJCYXRB?oc=5
📰 OT cybersecurity becomes a board-level priority as industrial security maturity rises, Fortinet finds
https://news.google.com/rss/articles/CBMi6AFBVV95cUxOOEN0eXNEM3VsaFkzM0RudEZMYzBYbHk3WHhSQW9feElyMmNfYl9aeHh2c3d3eFF0azV2d0o3MmhwRXNvYV9VLW55TkwyU25mY2tGekV3elh5YTRnYTBWc2h2dkpWUWhlUkdjYUE4U3dXWkxpdmd3YWpOdkt2eDQ2Q0dzYTZxSll6TmJrdVRGYmdjSjJTT1ptVEd6cnBtTk5kRFE0NFMzMW1wWVBCSEtuRTYxSHYtUXBxRU9FX3B6cms3S1U4RGZoaWFpMHFNVTJFZ0FOZ2FhX3dIc19xYXhpeUtfWTByTlJK?oc=5
📰 Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs
https://news.google.com/rss/articles/CBMifkFVX3lxTE5yNWJfMlRwcjhGT1BzT1RrdHk0VEJIU3lTYjIxOTVYcXNmUHB1WkJlZjA5Vl9fYmR4aV8yS01DbXlKaUN0T3B1UmswV09PclhTNF81R2dnZlhTTDE2QnNWVDhnaXhNTC01R2YxelJ2TTV4ZHFXMVZRMnVBOUk5Zw?oc=5
📰 Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities
https://news.google.com/rss/articles/CBMitgFBVV95cUxPSW9BNHZBMzV6UzF5X0NvbHYySDJVTjVTRFQ3SWZJSUs3Zlg2eWd1bkp0eS1BVC1FMzRTM3JKY1lQR0FucHg2UXA5SzROcHpIQmp4RG1CNE9maVFVaE5mNVVPblRaNnNEbFBybS10RUpWUHNyTlRuZ1IwZ0lPY1VJczdvMDhVT0xZbnRnNkhtX1N5Z2ZwdXlsUi1kRnRUVHRKcGU3QnlHQjlMSFB1OFlCbDFwRy10UQ?oc=5
💡 Segment your network. One compromised host shouldn't mean game over.
⚡ VulnOps · AI-Powered Security
5 769
🦾 **VulnOps Daily Digest**
☀️ 10 Jun 2026 · 01:37 PM IST
📰 Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities
https://news.google.com/rss/articles/CBMitgFBVV95cUxPSW9BNHZBMzV6UzF5X0NvbHYySDJVTjVTRFQ3SWZJSUs3Zlg2eWd1bkp0eS1BVC1FMzRTM3JKY1lQR0FucHg2UXA5SzROcHpIQmp4RG1CNE9maVFVaE5mNVVPblRaNnNEbFBybS10RUpWUHNyTlRuZ1IwZ0lPY1VJczdvMDhVT0xZbnRnNkhtX1N5Z2ZwdXlsUi1kRnRUVHRKcGU3QnlHQjlMSFB1OFlCbDFwRy10UQ?oc=5
📰 Microsoft and Adobe Patch Tuesday, June 2026 Security Update Review
https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5
📰 High-severity vulnerability in Linux caused by a single faulty character
https://news.google.com/rss/articles/CBMitwFBVV95cUxOZ2VZLVl4SE0xZGxSTEZiOW1CNUpidHNhdVJmM1FOTlpHUWN3MXhoaUx4b2ZIS2RiYVl2RzV0OHViX3VBRW1YYmxBNlN2dTVXT0licTE1RlNRZDBBb0o3d1NRcWhFOUVfTDc5c3BjcUJfbGR2N2pqYUUxNmVoTEU2U0pRUkNPNEI1Sm1tU0RDZThocFB3ejdtU3IwbnFxT1Bqd0FoQXlQV2xFZVF5Tk92bmxrMVpRazA?oc=5
📰 Federal vulnerability management is stuck. A patch wave is coming anyway.
https://news.google.com/rss/articles/CBMivwFBVV95cUxQb2JnZ1A3NDI3RUprVThsUUZKU2NiOUk5SVV1MW52cHltRkpSRTVZZTFnYzhRN2pPYXk3akJaVnhxUmVSV2VRbnc5V0wxVUNSeTBnLWg5WEw2Nm84bkhhU2RYMU1SOXB1X25Qa09KLVRydmM1S3lwN2hNT0JuQlhMdzM0cldUWFhwdDRBOWdHcllfMHRpTmtUZGwyTEpkbGVaa1VWRlpsU2pFTXVUam92X1M5UENDNkJ0cE1ReHNqaw?oc=5
📰 Update Chrome: Google patches actively exploited vulnerability and 73 others
https://news.google.com/rss/articles/CBMivwFBVV95cUxQV0xrX1MtYWV3aFdKWWlTa1ZEN2dmaGozRnI3Ym5iei0tc0JHT2g5UFBuR3lZOHk1SVNSbUpqVDNWVzlHTmZ6elZKWEFyem8ycWNITERjQzBBeElZQ25QX0lDaUJyNU8waG9GZVM1V05NbmxKcUZtZTZIZ1pkZHd3YlZmajZtdVU2NzhWT3U0V1A5MTQ0UmdvT2RtVk9tcGVhcFBqaWN5S3dLb1BVLVd1Z1dQMXRmSHlOZHVBT0FMcw?oc=5
💡 Default creds are still the #1 initial access vector. Change them.
⚡ _VulnOps · AI-Powered Security_
5 769
🖼️ Daily Cybersecurity Meme
""WE FOLLOW OWASP BEST PRACTICES""
""We FoLlOw OwAsP bEsT pRaCtIcEs""
5 769
🖼️ Daily Cybersecurity Meme
"STARTUP: "WE'RE TOO SMALL"
"TO BE HACKED, NO ONE CARES""
"NARRATOR: They were, in fact, already hacked"
5 769
#DevOps
#Tech_book
#Cyber_Education
"Fundamentals of DevOps and Software Delivery:
A Hands-On Guide to Deploying and Managing Software in Production", 2025.
]-> Code samples
5 769
#AppSec
#Threat_Research
1⃣ Click Or Trick (CVE-2025-59199):
Escaping the Sandbox with Windows URIs
https://www.safebreach.com/blog/click-or-trick-cve-2025-59199-escaping-the-sandbox-with-windows-uris
2⃣ Adobe Acrobat Reader Escript.api UAF RCE
https://blog.exodusintel.com/2026/06/01/adobe-acrobat-reader-escript-api-use-after-free-remote-code-execution
3⃣ Exploiting Windows Defender's Remediation Workflow for LPE
https://blog.calif.io/p/redsun-exploiting-windows-defenders
5 769
#AIOps
"Hijacking Agent Memory: Stealthy Trojan Attacks Through Conversational Interaction", May 2026.
// MemPoison - novel memory poisoning attack that bypasses selective memory mechanisms in LLM agents, where an attacker can inject triggerable backdoors into the agent's long-term memory through dialogue interactions, thereby misleading its subsequent responses
5 769
#Tech_book
#Kernel_Security
"Learning eBPF: Programming the Linux Kernel for Enhanced Observability, Networking, and Security", 2023.
]-> Repo
5 769
#SCA
#Hardware_Security
"FROST: Fingerprinting Remotely using
OPFS-based SSD Timing", 2026.
// SSD contention side channels can be mounted by a remote attacker from within the browser, without native code execution. FROST attack targets the Origin Private File System API in JavaScript, allowing us to create and access files on the disk, within the browser’s sandboxed environment
5 769
#exploit
#Kernel_Security
An AI audit of FreeBSD
https://blog.calif.io/p/an-ai-audit-of-freebsd
]-> setcred (CVE-2026-45250)
]-> ptrace (CVE-2026-45253)
]-> procdesc (CVE-2026-45251)
]-> Bonus
// Disclaimer
5 769
#AppSec
#Threat_Research
"Resolving the Correct Library: A Loader-Level Defense Solution Against Shared Object Hijacking", Jan. 2026.
https://anonymous.4open.science/r/shareb_object_library_hijacking-5E36
// developed a loader-centric glibc prevention mechanism that enforces checking shared library identity at load time by binding dependencies to immutable build identifiers and cryptographic hashes
5 769
#IoT_Security
#Hardware_Security
"Device Context Protocol: A Compact, Safety-First Architecture for LLM-Driven Control of Constrained Devices", May 2026.
https://github.com/device-context-protocol/dcp
// Device Context Protocol - bridge LLM agents to physical devices. A protocol that lets LLM agents safely control physical devices, down to dollar-class microcontrollers
5 769
#NetSec
#Threat_Research
1⃣ Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability
// CVE-2026-5426 enabled RCE via shared ASPNET machine keys, leading to web shells, privilege escalation, and malware deployment, with mitigation requiring key rotation and vigilant monitoring
2⃣ Laravel Lang Packages Compromised
// Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets
3⃣ Google API keys keep working after you delete them
// When you delete a Google API key, it says it’s immediately deleted. Our testing says ~23 min. During that window, an attacker with a leaked key keeps access to your data and enabled APIs
4⃣ Unauthenticated InfoLeak to Full Admin Compromise on ZTE ZXHN H168N
// CVE-2021-21735 - critical flaw in ZTE routers allowing unauthenticated access to sensitive configuration data, enabling full device compromise and WLAN takeover
5⃣ Critical heap buffer overflow in 7-Zip
// CVE-2026-48095
