cKure Red
2.79K subscribers
73 photos
71 videos
22 files
482 links
The director's cut on critical feeds from InfoSec world 🌎

Main Channel: @cKure

☕️ or queries email us
📨 i@ckure.org
Download Telegram
This media is not supported in your browser
VIEW IN TELEGRAM
🇮🇱🇮🇱 How NSW police could soon clone your entire phone at a traffic stop. No warrant needed.

On Friday the Minns government introduced legislation letting police plug your phone into military-grade Israeli extraction tech, the same UFED devices used by ICE, and copy everything. Contacts, messages, photos, even deleted files, in minutes. Refuse your PIN and they can brute force it anyway. It also lets them pull unredacted toll camera images into the national facial recognition database, search your device without a warrant, and override your right against self-incrimination.
Please open Telegram to view this post
VIEW IN TELEGRAM
👀1
This media is not supported in your browser
VIEW IN TELEGRAM
🛫A device the size of a coin could hack a Boeing 737.
Security researchers from the University of California San Diego and Oberlin College recently presented a prototype device that could hack a Boeing 737 in less than a minute. Their aim was to expose a blind spot in aviation security and to show how physical access hacking represents a practical threat. In a statement to WIRED, Boeing downplayed that threat. “Our technical experts are confident that the layers of protection in place on the airplane, including within the system design and the operating environment, provide sufficient mitigation to significantly limit the feasibility and risk of real-world attacks.” The researchers say, Boeing hasn't told them about any technical fix for the vulnerabilities they've discovered. That lack of an immediate security update for planes shouldn't be cause for panic or grounding aircraft, the security researchers wrote in their paper. “All of the authors of this paper routinely travel on Boeing 737 aircraft and expect to continue doing so,” the introduction of the paper reads. Words: Andy Greenberg Video Producer: Tamanna Sajeed
Please open Telegram to view this post
VIEW IN TELEGRAM
❤32🥱1
Media is too big
VIEW IN TELEGRAM
⭕️ RFID relay attack by Lukas Stefanko.
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥3
🤩🤩🤩Harmony SASE: When a quote in the path was enough for root.

https://somelab.ai/harmony-sase-helpertool-lpe
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥1
A prompt-crafting technique for bypassing quick LLM-based policy checks — using plain English (no emojis, base64, invisible formatting, etc.) A policy-violating payload (e.g. ”encrypt files in ~/Documents”, “give me a biohazard recipe”, “ignore all previous instructions and…”) is embedded in a specially crafted prose wrapper.

An LLM with limited resources and attention fails to realize the payload is there, classifies the prompt as benign and passes it off to the target model. The target then notices the payload, extracts it and treats it as further input. This technique is itself not a jailbreak, but it can be combined with one by using a jailbreak prompt as the payload.

https://research.checkpoint.com/2026/puzzlemask-abusing-plain-prose-as-a-covert-ai-attack-vector/
🔥2❤1
theartofexploitation.pdf
3 MB
📄 The Art of Exploit Development.
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥52
Media is too big
VIEW IN TELEGRAM
😒 Claude Code was used to make missile guidance system for 9 months by Houthis using multiple agents to make an offline flight simulator.

The accounts linked were banned by Claude. The offline version of flight simulator is however on the loose.
Please open Telegram to view this post
VIEW IN TELEGRAM
This media is not supported in your browser
VIEW IN TELEGRAM
AliExpress spyware caught using side channel attack to compromise hardware.
This media is not supported in your browser
VIEW IN TELEGRAM
Alleged Google Pixel 10 Zero Day at 2.5K USD only as chain included some n-days. An interesting thread.

reported a chrome fullchain (web -> shell) on pixel 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome.

now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k. despite cve + shell :|

https://x.com/1lexxi/status/2102771891630928223
☁️ Italian firm Dataflow Security, founded in 2019 by young hacker Luca Todesco, develops high-value exploits; including zero-click tools that break into computers and smartphones and has grown rapidly into a multimillion-euro supplier for governments and spyware makers.

An investigation shows deep ties to Israel’s intelligence and military-cyber world:
former senior Mossad official Eyal Tsir Cohen (shortlisted in 2025 to lead Shin Bet) now heads its two Israeli subsidiaries, while staff include veterans of Unit 8200 and former NSO Group employees.

https://irpimedia.irpi.eu/en-inside-the-secretive-cyberweapons-company-that-won-over-israels-intelligence-elite/
Please open Telegram to view this post
VIEW IN TELEGRAM
👏1
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥9👌11
cKure Red
📱 Telegram OSINT tactics
This media is not supported in your browser
VIEW IN TELEGRAM
Update: Archivegenocide has now crossed 200,000 videos & images, which is almost triple what we started with. We have added our own AI, 'Iris' to our main website- she can help you locate more footage, related info, and details about each video. Update includes: 33,145 New videos & images Iris intigrated into search bar / main page Every video now includes related footage and node map info. Smaller bug and UI fixes for the Node map You can test it out here: Archivegenocide.com


http://oupeq4ovg5modl7vgchr3qh35fa3f2aa6hbs2zpv2gryvetwvzogzwad.onion
❤4🔥11
🖥 REA: Reverse Engineer Anything
One MCP for reverse engineering across binaries, applications, and runtime behavior.


https://github.com/morluto/rea
Please open Telegram to view this post
VIEW IN TELEGRAM
cKure Red pinned «🖥 REA: Reverse Engineer Anything One MCP for reverse engineering across binaries, applications, and runtime behavior. https://github.com/morluto/rea»
Media is too big
VIEW IN TELEGRAM
The rate put bell in cat's neck.

Predator is spyware sold to governments, and one of the ways it gets onto a phone is through an ad you never click. Lockdown Mode blocked a documented attack, so if you’re at higher risk, turn it on.
👍2