TGViewer
Channel Public Channel
cKure Red

cKure Red

@ckured

The director's cut on critical feeds from InfoSec world 🌎

Main Channel: @cKure

☕️ or queries email us
📨 i@ckure.org
Open in Telegram
Subscribers
2.78K
Photos
73
Videos
69
Links
480

Showing posts older than #668 · Back to latest

Older Posts 20 shown
Post #667 2.19K
💻 Zero-Day MSR Kernel Exploit for Windows 11 25H2.
Juan Sacco


https://www.exploitpack.com/blogs/news/0-day-msr-kernel-exploit-for-windows-11-25h2
Exploit Pack 0-Day MSR Kernel Exploit for Windows 11 25H2 Check out our Technical Training Courses on Windows Kernel Exploitation --- New 0-day Windows Kernel Exploit, working in Windows 11 25h2 fully patched.It took me 2 weeks of endless coffee cups! MSRs control where the CPU jumps for privileged transitions,…
  • 👍 1
  • 🔥 1
  • 👏 1
Post #665 2.35K
🎞 Surveillance company expo gets video taped by journalists.
  • 🔥 2
  • 😱 1
Post #662 2.03K
💣 BombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices.

https://eclypsium.com/blog/bombshell-the-signed-backdoor-hiding-in-plain-sight-on-framework-devices/
Eclypsium BombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices Eclypsium researchers have discovered UEFI shells, authorized via Secure Boot, on Framework laptops. The UEFI shells contain capabilities that allow attackers to bypass Secure Boot on roughly 200,000 affected Framework laptops and desktops.
  • 🔥 2
Post #661 1.94K
🔴Cybercrime-as-a-Service Takedown

Major coordinated operation leads to the arrest of 7 suspects behind a large-scale SMS spoofing and SIM-boxing network.

Operation highlights:

🔍 26 searches conducted

👥 5 main operators apprehended

📦 1,200 SIM-boxes running 40,000 SIM cards seized

💳 Hundreds of thousands of additional SIM cards confiscated

🌐 5 servers hosting the illegal service dismantled

💻 2 domains — gogetsms.com & apisim.com — seized and replaced with law enforcement splash pages

💶 €431,000 frozen in bank accounts

💰 $333,000 in crypto seized

🚗 4 luxury cars confiscated


💡 Credits: @smspoolnet (𝕏)
🔗 More: https://x.com/DarkWebInformer/status/1978603403354792430

#CyberSecurity #Takedown #OSINT #CyberCrime #LEA
  • 👍 2
  • ❤ 1
  • 🔥 1
  • 🤣 1
Post #660 1.39K
■■■■□ Illegal cell tower location tracking en-masse as FARA disclosure of yet another Jew act emerges.

Credits: Ian Caroll
  • 🤔 1
  • 😱 1
  • 😐 1
Post #658 2.24K
DPRK Adopts EtherHiding: Nation-State Malware Hiding on Blockchains.

EtherHiding, a novel technique where the attackers embed malicious payloads (like JADESNOW and INVISIBLEFERRET malware) within smart contracts on public blockchains (like BNB Smart Chain and Ethereum).

https://cloud.google.com/blog/topics/threat-intelligence/dprk-adopts-etherhiding/
Google Cloud Blog DPRK Adopts EtherHiding: Nation-State Malware Hiding on Blockchains | Google Cloud Blog North Korea threat actor UNC5342 is leveraging the EtherHiding technique in espionage and financially motivated operations.
  • 🔥 5
  • ✍ 1
Post #656 2.1K
📱 Critical zero-click vulnerability (CVE-2025-55177) within WhatsApp has been leveraged in targeted spyware operations, in conjunction with an Apple Imagel0 flaw (CVE-2025-43300).

This combination enabled malicious actors to disseminate exploits via WhatsApp, resulting in potential data exfiltration from the user's Apple device.
The attack sequence involved:
🚫Attacker-controlled delivery
🚫Malicious DNG/remote image (Imagel0) parsing vulnerability (OOB write)
➿ Remote code execution
All occurring without user engagement.

https://techcrunch.com/2025/08/29/whatsapp-fixes-zero-click-bug-used-to-hack-apple-users-with-spyware/

https://blog.quarkslab.com/patch-analysis-of-Apple-iOS-CVE-2025-43300.html
TechCrunch WhatsApp fixes 'zero-click' bug used to hack Apple users with spyware | TechCrunch A spyware vendor was behind a recent campaign that abused a vulnerability in WhatsApp to deliver an exploit capable of hacking into iPhones and Macs.
  • ❤ 2
  • 🔥 2
  • ⚡ 1
Post #655 2.6K
🔑 OpenSSL Vulnerabilities Let Attackers Execute Malicious Code and Recover Private Key Remotely.

➿CVE-2025-9230: Memory Corruption Vulnerability
➿CVE-2025-9231: Timing Side-Channel Flaw

https://cybersecuritynews.com/openssl-vulnerabilities/
Cyber Security News OpenSSL Vulnerabilities Let Attackers Execute Malicious Code and Recover Private Key Remotely The OpenSSL Project has released a critical security advisory, addressing three significant vulnerabilities that could allow attackers to execute remote code and potentially recover private cryptographic keys.
  • ❤ 3
Post #650 9.46K
Google 🔍 Engineer dropped a book. A comprehensive guide to building agentic AI systems.

Key points:

Concepts: Prompt chaining, routing, memory, planning, safety, and evaluation.

✅Patterns: Design methods for multi-agent setups, tool-using agents, and autonomous workflows.

✅Hands-on: Code samples for implementing these patterns in real-world apps.

✅Goal: Help developers build reliable, scalable, and safe intelligent agents.

Think of it as a playbook for advanced AI agent design.


📱https://docs.google.com/document/d/1rsaK53T3Lg5KoGwvf8ukOUvbELRtH-V0LnOIFDxBryE/mobilebasic
Google Docs Agentic Design Patterns Agentic Design Patterns 👉 🧠 ✅ I’m excited to share that my new book, "Agentic Design Patterns: A Hands-On Guide to Intelligent AI Agents," is officially out! 👉 🧠 ✅ In a field moving at lightning speed, this book focuses on the durable, fundamental patterns…
  • 🔥 5
Post #649
cKure Red pinned «🖼The One-Man APT, Part I: A Picture That Can Execute Code on the Target. https://hackers-arise.com/the-one-man-apt-part-i-a-picture-that-can-execute-code-on-the-target/»
Post #648 1.91K
🖼The One-Man APT, Part I: A Picture That Can Execute Code on the Target.

https://hackers-arise.com/the-one-man-apt-part-i-a-picture-that-can-execute-code-on-the-target/
Hackers Arise - EXPERT CYBERSECURITY TRAINING FOR ETHICAL HACKERS The One-Man APT, Part I: A Picture That Can Execute Code on the Target The One-Man APT, Part I: A Picture That Can Execute Code… Have you ever wondered if it’s possible to replicate the stealthy behavior of a modern cyber‑attack using artificial intelligence? As part of my research, I focused on the techniques used by a Linux-based threat known as Koske — malware that cleverly hides…
  • 🤮 1
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →