cKure Red – Telegram
cKure Red
@ckuRED
2.29K subscribers
69 photos
31 videos
21 files
444 links
The director's cut on critical feeds from InfoSec world 🌎

Main Channel: @cKure

☕️ or queries email us
📨 i@ckure.org
Download Telegram
About
Blog
Apps
Platform
Join
cKure Red
2.29K subscribers
cKure Red
💣 BombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices.

https://eclypsium.com/blog/bombshell-the-signed-backdoor-hiding-in-plain-sight-on-framework-devices/
Please open Telegram to view this post
VIEW IN TELEGRAM
Eclypsium | Supply Chain Security for the Modern Enterprise
BombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices
Eclypsium researchers have discovered UEFI shells, authorized via Secure Boot, on Framework laptops. The UEFI shells contain capabilities that allow attackers to bypass Secure Boot on roughly 200,000 affected Framework laptops and desktops.
🔥2
1.84K views
cKure Red
Pwn²Own Day 2: Hackers exploit 56 zero-days for $790,000.

https://www.bleepingcomputer.com/news/security/samsung-galaxy-s25-hacked-on-day-two-of-pwn2own-ireland-2025/
BleepingComputer
Pwn2Own Day 2: Hackers exploit 22 zero-days for $267,500
Security researchers collected $267,500 in cash after exploiting 22​​​​​​​ unique zero-day vulnerabilities during the second day of the Pwn2Own Ireland 2025 hacking competition.
🔥1
1.7K views
cKure Red
🎃 Mem3nt0 mori – The Hacking Team is back!

https://securelist.com/forumtroll-apt-hacking-team-dante-spyware/117851/
Please open Telegram to view this post
VIEW IN TELEGRAM
Securelist
Mem3nt0 mori – The Hacking Team is back!
Kaspersky researchers discovered previously unidentified commercial Dante spyware developed by Memento Labs (formerly Hacking Team) and linked it to the ForumTroll APT attacks.
🔥1
1.66K views
cKure Red
Media is too big
VIEW IN TELEGRAM
🎞 Surveillance company expo gets video taped by journalists.
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥2😱1
2.09K views
cKure Red
📱 Now in private beta: Aardvark, an agent that finds and fixes security bugs using GPT-5.

https://openai.com/index/introducing-aardvark/
Please open Telegram to view this post
VIEW IN TELEGRAM
Openai
Introducing Aardvark: OpenAI’s agentic security researcher
Now in private beta: an AI agent that thinks like a security researcher and scales to meet the demands of modern software.
❤1🤔1
1.77K views
cKure Red
💻 Zero-Day MSR Kernel Exploit for Windows 11 25H2.
Juan Sacco


https://www.exploitpack.com/blogs/news/0-day-msr-kernel-exploit-for-windows-11-25h2
Please open Telegram to view this post
VIEW IN TELEGRAM
Exploit Pack
0-Day MSR Kernel Exploit for Windows 11 25H2
New 0-day Windows Kernel Exploit, working in Windows 11 25h2 fully patched.It took me 2 weeks of endless coffee cups! MSRs control where the CPU jumps for privileged transitions, they are a sensitive part of system state. Operating systems carefully  them…
👍1🔥1👏1
1.92K views
cKure Red
A Major Leak Spills a Chinese Hacking Contractor’s Tools and Targets.

https://www.wired.com/story/major-leak-spills-chinese-hacking-contractor-tools-targets/
WIRED
A Major Leak Spills a Chinese Hacking Contractor’s Tools and Targets
Plus: State-sponsored AI hacking is here, Google hosts a CBP face recognition app, and more of the week’s top security news.
🙉21
1.76K views
cKure Red
🗜📂 CVE-2025-11001: Hackers Actively Exploiting 7-Zip RCE Vulnerability in the Wild.

https://cybersecuritynews.com/7-zip-rce-vulnerability-exploited/
Please open Telegram to view this post
VIEW IN TELEGRAM
Cyber Security News
Hackers Actively Exploiting 7-Zip RCE Vulnerability in the Wild
Hackers have begun actively exploiting a critical remote code execution (RCE) vulnerability in the popular file archiver 7-Zip, putting millions of users at risk of malware infection and system compromise.
❤‍🔥1👍1🔥1
1.57K views
cKure Red
🏷️ Critical Windows Graphics Vulnerability Lets Hackers Seize Control with a Single Image.

https://cybersecuritynews.com/critical-windows-graphics-vulnerability/
Please open Telegram to view this post
VIEW IN TELEGRAM
Cyber Security News
Critical Windows Graphics Vulnerability Lets Hackers Seize Control with a Single Image
A critical remote code execution flaw in Microsoft's Windows Graphics Component allows attackers to seize control of systems using specially crafted JPEG images.
☃2👍1👌11
1.88K views
cKure Red
WhatsApp 📱 and Signal 📱 suffer from metadata leakage.

📱https://youtu.be/B9Syj555RQc
Please open Telegram to view this post
VIEW IN TELEGRAM
👏4🤔1
1.6K viewsedited  
cKure Red
cKure Red
📱 Samsung shares surveillance software under the control of the Israeli firm [IronSource]. 📌 A class of Samsung devices are vulnerable. 📌Legally, Samsung can not install the third-partyware. 📌App cloud ☁️ can not be removed unless the device is rooted.
🇮🇱Jew Supply-Chain Attack [last week]: New Samsung Galaxy A and M series phones that have entered Gaza via checkpoints (post official but not-working ceasefire) have malfunctioned and one exploded in the hands of Gaza resident. This is second such incident in two days.

➿This could be the Israeli supply chain attack as A and M series device by Samsung has a built-in zionist signal intelligence app that collects user telemetric and metadata.

➿Based on a source around 5K to 10K such devices have entered Gaza.

➿The app is from Iron Source.
The zionist entity (Israel) has “Iron” in the name of many 🪖 technologies (defense-related):

Iron Beam – Israel. High-energy laser air-defense system.

Iron Fist – Israel. Active protection system for vehicles.

Iron Curtain – US. APS for close-range RPG/missile interception.

Iron Wolf – Lithuania. Mechanized infantry brigade (NATO).

Iron Dome – Missile Defense system of Israel.

Iron Sting – Israel. Precision 120mm mortar-guided munition.

Iron Vision – Elbit helmet-mounted 360° situational awareness for tanks.
Please open Telegram to view this post
VIEW IN TELEGRAM
🤯3🤮2🤔1
1.74K viewsedited  
cKure Red
🔄Tomiris wreaks Havoc: New tools and techniques of the APT group.

https://securelist.com/tomiris-new-tools/118143/
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥1
1.63K viewsedited  
cKure Red
🟥CVE-2024-21413: PoC Exploit Released for Critical Outlook 0-Click Remote Code Execution Vulnerability.

https://github.com/mmathivanan17/CVE-2024-21413

https://cybersecuritynews.com/outlook-remote-code-execution-vulnerability-2/
Please open Telegram to view this post
VIEW IN TELEGRAM
GitHub
GitHub - mmathivanan17/CVE-2024-21413: Outlook exploitation
Outlook exploitation. Contribute to mmathivanan17/CVE-2024-21413 development by creating an account on GitHub.
🔥5🆒11
1.88K views
cKure Red
📱 React2Shell Ultimate - CVE-2025-66478 Scanner.

https://github.com/hackersatyamrastogi/react2shell-ultimate
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥3👌11
1.86K views
cKure Red
cKure Red pinned a photo
cKure Red
🤩🤩 Jewish ✡️ state's another cyber crime unmasked.

Hacked in Pakistan: Israeli Spyware Firm Intellexa, Owned by Ex-intel Officer, Still Active Amid 🤩🤩 United States' Sanctions.

Spyware targets in Pakistan 🤩🤩 and Iraq 🇮🇶 and a new infection method. The sanctions aren't deterring Intellexa 💻

https://www.haaretz.com/israel-news/security-aviation/2025-12-04/ty-article-magazine/.premium/israeli-spyware-firm-intellexa-owned-by-ex-intel-officer-still-active-amid-us-sanctions/0000019a-e3e8-db35-afbf-ebfcb8bb0000
Please open Telegram to view this post
VIEW IN TELEGRAM
❤1
1.9K views
cKure Red
💻Bug Bounty: Iran-linked hacker group offers $30,000 bounty for Israel's military info.

https://www.iranintl.com/en/202512164597
Please open Telegram to view this post
VIEW IN TELEGRAM
Iranintl
Iran-linked hacker group offers $30,000 bounty for Israel's military info
An Iran-linked hacker group said it was offering a $30,000 reward for information related to Israel’s military sector after releasing material it said identified people involved in designing Israeli missile defense systems.
❤1
1.62K views
cKure Red
This media is not supported in your browser
VIEW IN TELEGRAM
OSINT via Google 🔍
Please open Telegram to view this post
VIEW IN TELEGRAM
🤔1
1.48K views
cKure Red
cKure Red pinned Deleted message
cKure Red
This media is not supported in your browser
VIEW IN TELEGRAM
🇮🇱 jmail.world
Please open Telegram to view this post
VIEW IN TELEGRAM
❤4
1.34K viewsedited  
cKure Red
🐲 GhidraGPT: A powerful Ghidra plugin that integrates Large Language Models (LLMs) directly into Ghidra to enhance reverse engineering workflows with code analysis and enhancement capabilities.

https://github.com/weirdmachine64/GhidraGPT
Please open Telegram to view this post
VIEW IN TELEGRAM
GitHub
GitHub - weirdmachine64/GhidraGPT: Integrate LLM models directly into Ghidra for automated code rewrite and analysis.
Integrate LLM models directly into Ghidra for automated code rewrite and analysis. - weirdmachine64/GhidraGPT
👏1
1.64K views