TGViewer
Channel Public Channel
cKure Red

cKure Red

@ckured

The director's cut on critical feeds from InfoSec world ๐ŸŒŽ

Main Channel: @cKure

โ˜•๏ธ or queries email us
๐Ÿ“จ i@ckure.org
Subscribers
2.77K
Photos
73
Videos
69
Links
480

Showing posts older than #755 ยท Back to latest

Older Posts 19 shown
Post #754 1.79K
Techno-Fascism, The Palantair; an evil-corp in true sense.
  • ๐Ÿคฏ 2
  • ๐ŸŒš 2
  • โค 1
  • ๐Ÿ‘ 1
  • ๐Ÿ’ฏ 1
  • ๐Ÿคจ 1
Post #753 1.79K
๐ŸงGhostLock (CVE-2026-43499): a 15-year-old Linux kernel vulnerability that affects every distribution. Desktop, server, Android, IoT, embedded. $92,337 Google kernelCTF bounty.

A stack-UAF in the rtmutex subsystem. remove_waiter() uses current instead of waiter::task during proxy-lock rollback in futex_requeue(), leaving a dangling pointer to freed kernel stack memory. No special kernel modules needed, only CONFIG_FUTEX_PI which is enabled on every distro.

Nebula Security (NebuSec) turned it into a 97% stable privilege escalation and container escape. The exploit chains a dangling pointer into an arbitrary address write, hijacks a function table for control flow, and achieves root in about 5 seconds. Found by VEGA, their AI vulnerability scanner.

Part of IonStack, the first browser-to-kernel full-chain RCE on Android 17: CVE-2026-10702 (Firefox IonMonkey JIT 0-day, near 100% success rate) chained with GhostLock for kernel LPE.

Present since Linux 2.6.39 (2011). Fixed in Linux 7.1. Full exploit code published on GitHub.


Exploit:

https://github.com/NebuSec/CyberMeowfia/tree/main/IonStack/CVE-2026-43499
  • ๐Ÿ‘ 4
Post #751 1.6K
Peter Stokes was pulled off a flight in Helsinki, and Scattered Spiderโ€™s run of arrests keeps growing as they triste Microsoft Windows for their operational security.

This is when a cyber crime group trusted Microsoft.

The GDID gives Microsoft access to everyone of your internet history of all applications.

And can also initiate remote monitoring through security updates.

And if you think that there is some hard drive you used encryption that uses TPM.

TPM let's are actually stored with Microsoft for every installation.

Never use Microsoft products and any organisation known for complicity and backdoor installations.
Post #748 2.13K
๐Ÿ‡ฎ๐Ÿ‡ฑ CARS ARE EXPLODING ACROSS ISRAEL

Iranian cyber units and agents have penetrated the heart of Israel, and multiple assassinations are taking place.

-Ethan Levins (not verbatim)


Source: https://x.com/i/status/2071203804326805937
  • ๐Ÿฅด 3
  • ๐Ÿ‘Œ 2
  • ๐Ÿ”ฅ 1
  • ๐Ÿฅฑ 1
  • ๐ŸŒญ 1
Post #747 2.12K
๐Ÿ“ฑ President of Signal (messenger) on shift in policy.
  • ๐Ÿ’ฏ 4
  • ๐Ÿซก 2
  • ๐Ÿ‘ 1
  • ๐Ÿค” 1
Post #746 1.88K
Post #743 2.13K
๐Ÿ“ก๐Ÿ…ฐ๏ธ๐Ÿ…ฐ๏ธ๐Ÿ…ฐ๏ธโŽโŽ๐Ÿ…ฐ๏ธ๐Ÿ…ฐ๏ธ๐Ÿ…ฐ๏ธ๐Ÿ…ฐ๏ธ
PimEyes.Com
Post #742
cKure Red pinned ยซ๐Ÿ‘ฉโ€๐Ÿ’ป Performing RCE in Internet Explorer via clickjacking! Credits: Igor Sak-Sakovsky's (๐• | Psych0tr1a) https://swarm.ptsecurity.com/the-click-that-shouldnt-have-worked-rce-via-clickjacking-in-internet-explorer/ยป
Post #740 2.48K
๐Ÿ“ก๐Ÿ›ฐ For 19 years, GPS satellites have secretly broadcast a โ€œnumbers stationโ€ in their public signals. We decoded 12M messages: a 2011 flash where 31 of 32 satellites flipped in hours, โ€œghostโ€ substrings repeating years apart, and a โ€œTEXTโ€ prefix spreading now.

https://lsc-pagepro.mydigitalpublication.com/publication/?i=865273&p=62&view=issueViewer

https://github.com/sjmurdoch/gps-special-messages

https://x.com/i/status/2061829547289387209
Mydigitalpublication Inside GNSS Media & Research โ€ข May/June 2026
Post #737 1.72K
๐Ÿ”—๐Ÿ†’๐Ÿ†’๐Ÿ”ค๐Ÿ†’๐Ÿ†’๐Ÿ†’๐Ÿ†’

Transfer data between devices using just QR codes!


QR-Beam โ€” A browser-based data transfer tool where both sender and receiver run entirely client-side via JavaScript. No installation, simple mobile-friendly UI, and designed for real-world use.

The idea isn't new, but was focused on turning it into a practical, production-ready solution with several improvements over existing PoCs.

Beta: https://ckure.org/rx/QR-Beam
  • ๐Ÿ”ฅ 2
  • ๐Ÿ˜ 1
Post #736
cKure Red pinned ยซ๐Ÿ˜” Mini Plasma Zero-Day by Chaotic Eclipse (aka Nightmare Eclipse) with a total of 6 0-Days in 6 weeks. Official blog: https://deadeclipse666.blogspot.com https://blog.barracuda.com/2026/05/19/nightmare-eclipse-zero-days-grudgeยป
Post #735 1.84K
Post #734 1.27K
๐Ÿ“ฑAnthropic co-founder says there is a "real possibility that AI will displace human labor at a very large scale," and that supporting those people "will be a moral imperative of historic proportions."


And we do not have a mechanism while most of the control of AI is with few wealthy nations and individuals.
  • ๐Ÿคฃ 3
Post #732
cKure Red pinned ยซ๐Ÿค– ๐Ÿ†’๐Ÿ†’๐Ÿ†’๐Ÿ†’๐Ÿ†’๐Ÿ†’ Earlier today Cloudflare's CSO shared how they tested Anthropic Mythos using an unreleased 8-stage vulnerability-discovery agent. Opus implemented the agent and it works via Claude SDK with a Pro or Max subscription, no API. https://github.comโ€ฆยป
Older posts โ†’
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook โ†’Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 โ†’