Telegram 频道 "Sys-Admin InfoSec"

Sys-Admin InfoSec

Public

查看频道

注意 : 在信任任何信息（尤其是涉及金钱请求的信息）之前，进行自己的研究是很重要的。

无法加入？ @sysadm_in_channel

12.6k 成员

已更新: March 13, 2026 at 2:20 PM

Sys-Admin InfoSec

News of cybersecurity / information security, information technology, data leaks / breaches, cve, hacks, tools, trainings * Multilingual (En, Ru). * Forum - forum.sys-adm.in * Chat - @sysadm_in * Job - @sysadm_in_job * ? - @sysadminkz

@sysadm_in_channel offers specialized information about leaks and news for subscribers interested in Cybersecurity

排名

全球排名

#8867

语言排名

#1842

类别排名

#34无变化

订阅者增长 (过去 27 天)

总计: 12.6K

24 小时增长: -8 0%

最新帖子

Sys-Admin InfoSec

2026年3月13日 00:34

LookOut: Discovering RCE and Internal Access on Looker (Google Cloud & On-Prem)

https://www.tenable.com/blog/google-looker-vulnerabilities-rce-internal-access-lookout

2,170

Sys-Admin InfoSec

2026年3月13日 00:34

Love? Actually: Fake dating app used as lure in targeted spyware campaign

https://www.welivesecurity.com/en/eset-research/love-actually-fake-dating-app-used-lure-targeted-spyware-campaign-pakistan/

2,640

Sys-Admin InfoSec

2026年3月13日 00:34

PeckBirdy: A Versatile Script Framework for LOLBins Exploitation

https://www.trendmicro.com/en_us/research/26/a/peckbirdy-script-framework.html

2,980

Sys-Admin InfoSec

2026年3月13日 00:34

Notepad++ Hijacked by State-Sponsored Hackers

https://notepad-plus-plus.org/news/hijacked-incident-info-update/

2,540

Sys-Admin InfoSec

2026年3月13日 00:34

Open-Source Python Script Drives Social Media Phishing Campaign

.. In this particular campaign, attackers abused LinkedIn’s professional context to establish trust and familiarity, increasing their chances of success by targeting high-value individuals in corporate environments. This tactic, however, could be applied to any social media platform commonly accessed on business devices..:

https://reliaquest.com/blog/threat-spotlight-open-source-python-script-drives-social-media-phishing-campaign

2,880

Sys-Admin InfoSec

2026年3月13日 00:34

Microsoft mishandling example.com

Microsoft's https://learn.microsoft.com/en-us/exchange/architecture/client-access/autodiscover service has incorrectly routed the IANA-reserved example.com to Sumitomo Electric Industries' mail servers at sei.co.jp, potentially sending test credentials there.

https://tinyapps.org/blog/microsoft-mishandling-example-com.html

2,600

Sys-Admin InfoSec

2026年3月13日 00:34

UNO reverse card: stealing cookies from cookie stealers

https://www.cyberark.com/resources/threat-research-blog/uno-reverse-card-stealing-cookies-from-cookie-stealers

P. S. реклама даже в панели управления малвари присутствует 😁

2,460

Sys-Admin InfoSec

2026年3月13日 00:34

Threat Actors Expand Abuse of Microsoft Visual Studio Code

This activity involved the deployment of a backdoor implant that provides remote code execution capabilities on the victim system:

https://www.jamf.com/blog/threat-actors-expand-abuse-of-visual-studio-code/

2,430

Sys-Admin InfoSec

2026年3月13日 00:34

Malware Peddlers Are Now Hijacking Snap Publisher Domains

There’s a relentless campaign by scammers to publish malware in the Canonical Snap Store. Some gets caught by automated filters, but plenty slips through. Recently, these miscreants have changed tactics - they’re now registering expired domains belonging to legitimate snap publishers, taking over their accounts, and pushing malicious updates to previously trustworthy applications..:

https://blog.popey.com/2026/01/malware-purveyors-taking-over-published-snap-email-domains/

2,040

Sys-Admin InfoSec

2026年3月13日 00:34

Cloudflare Zero-day: Accessing Any Host Globally

https://fearsoff.org/research/cloudflare-acme

2,100

Sys-Admin InfoSec

2026年3月11日 01:29

StackWarp is a security vulnerability that exploits a synchronization bug present in all AMD Zen 1–5 processors. In the context of SEV-SNP, this flaw allows malicious VM hosts to manipulate the guest VM’s stack pointer

https://stackwarpattack.com/

2,670

Sys-Admin InfoSec

2026年3月9日 20:55

UNVEILING VOIDLINK – A STEALTHY, CLOUD-NATIVE LINUX MALWARE FRAMEWORK

https://research.checkpoint.com/2026/voidlink-the-cloud-native-malware-framework/

2,890

Sys-Admin InfoSec

2026年3月4日 15:42

deVixor: An Evolving Android Banking RAT with Ransomware

https://cyble.com/blog/devixor-an-evolving-android-banking-rat-with-ransomware-capabilities-targeting-iran/

2,620

Sys-Admin InfoSec

2026年3月3日 02:31

VVS Discord Stealer Using Pyarmor for Obfuscation and Detection Evasion

https://unit42.paloaltonetworks.com/vvs-stealer/

3,180

Sys-Admin InfoSec

2026年2月25日 14:32

Bluetooth Headphone Jacking: Full Disclosure of Airoha RACE Vulnerabilities

https://insinuator.net/2025/12/bluetooth-headphone-jacking-full-disclosure-of-airoha-race-vulnerabilities/

3,440

Sys-Admin InfoSec

2026年2月19日 03:25

Time Nist Gov Incorrect Time

The affected servers are:
time-a-b.nist.gov
time-b-b.nist.gov
time-c-b.nist.gov
time-d-b.nist.gov
time-e-b.nist.gov
ntp-b.nist.gov (authenticated NTP)

https://groups.google.com/a/list.nist.gov/g/internet-time-service/c/o0dDDcr1a8I

3,730

Sys-Admin InfoSec

2026年2月19日 03:25

Nezha: The Monitoring Tool That’s Also a Perfect RAT

https://www.ontinue.com/resource/nezha-the-monitoring-tool-thats-also-a-perfect-rat/

3,530

Sys-Admin InfoSec

2026年2月9日 23:04

CyberVolk Returns | Flawed VolkLocker Brings New Features With Growing Pains

https://www.sentinelone.com/blog/cybervolk-returns-flawed-volklocker-brings-new-features-with-growing-pains/

3,330

Sys-Admin InfoSec

2026年2月9日 23:04

Inside GhostPoster: How a PNG Icon Infected 50,000 Firefox Users

https://www.koi.ai/blog/inside-ghostposter-how-a-png-icon-infected-50-000-firefox-browser-users

3,340

Sys-Admin InfoSec

2026年2月4日 03:32

Windows Stealers: How Modern Infostealers Harvest Credentials

https://deceptiq.com/blog/windows-stealers-technical-analysis

2,810

Sys-Admin InfoSec

2026年2月4日 03:32

December 2025 Security Updates

This release consists of the following 57 Microsoft CVEs:

https://msrc.microsoft.com/update-guide/releaseNote/2025-Dec

2,740

Sys-Admin InfoSec

2025年12月6日 10:56

F5 Hacked. Mass companies can be under attack potentially..

https://www.bloomberg.com/news/articles/2025-10-16/potentially-catastrophic-breach-of-cyber-firm-blamed-on-china

F5-Big IP source code leaks:

https://my.f5.com/manage/s/article/K000154696

3,590

Sys-Admin InfoSec

2025年12月6日 10:56

Malware being hosted on xubuntu.org

https://lists.ubuntu.com/archives/xubuntu-devel/2025-October/012209.html

2,900

Sys-Admin InfoSec

2025年12月6日 10:56

ToolShell Used to Compromise Telecoms Company in Middle East

ToolShell was patched by Microsoft in July 2025, but by the time it was patched it had already been exploited in the wild as a zero-day vulnerability. ToolShell affects on-premise SharePoint servers and gives an attacker unauthenticated access to vulnerable servers, allowing them to remotely execute code and access all content and file systems..

https://www.security.com/blog-post/toolshell-china-zingdoor

2,690

Sys-Admin InfoSec

2025年12月6日 10:56

Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs

GhostCall attack heavily targets the macOS devices of executives at tech companies and in the venture capital sector by directly approaching targets via platforms like Telegram, and inviting potential victims to investment-related meetings linked to Zoom-like phishing websites:

https://securelist.com/bluenoroff-apt-campaigns-ghostcall-and-ghosthire/117842/

2,200

Sys-Admin InfoSec

2025年12月6日 10:56

“ChatGPT Tainted Memories:” LayerX Discovers The First Vulnerability in OpenAI Atlas Browser, Allowing Injection of Malicious Instructions into ChatGPT

https://layerxsecurity.com/blog/layerx-identifies-vulnerability-in-new-chatgpt-atlas-browser/

2,300

Sys-Admin InfoSec

2025年12月6日 10:56

New Android Malware Herodotus Mimics Human Behaviour to Evade Detection

https://www.threatfabric.com/blogs/new-android-malware-herodotus-mimics-human-behaviour-to-evade-detection

2,470

Sys-Admin InfoSec

2025年12月6日 10:56

Иллюзия [без] опасности на Profit Security Day

14 ноября в Алматы пройдет Profit Security Day (след. пятница).

Key-аспекты:

- наблюдение за тем, каково понимание нынешнего представителя ИБ о реалиях и возможностях нападающей стороны
- как это представление коррелируется с реалиями суровой действительности
- возможность пообщаться с интересными людьми

Интересно послушать мнение на тему - [Без] опасного использования ИИ.

До начала осталось 10 дней. Все детали здесь:

- https://profitday.kz/security

1,840

Sys-Admin InfoSec

2025年12月6日 10:56

Another Critical RCE Discovered in a Popular MCP Server

https://www.imperva.com/blog/another-critical-rce-discovered-in-a-popular-mcp-server/

2,620

Sys-Admin InfoSec

2025年12月6日 10:56

Cache smuggling: When a picture isn’t a thousand words

https://expel.com/blog/cache-smuggling-when-a-picture-isnt-a-thousand-words/

3,520

Showing 30 of 45 posts

Loading posts...

评分

需要登录

用户评论 (0)

暂无评论。成为第一个分享您体验的人！

Loading reviews...

Sys-Admin InfoSec

@sysadm_in_channel offers specialized information about leaks and news for subscribers interested in Cybersecurity

排名

全球排名

#8867

语言排名

#1842

类别排名

#34无变化

订阅者增长 (过去 27 天)

总计: 12.6K

24 小时增长: -8 0%

最新帖子

Sys-Admin InfoSec

2026年3月13日 00:34

LookOut: Discovering RCE and Internal Access on Looker (Google Cloud & On-Prem)

https://www.tenable.com/blog/google-looker-vulnerabilities-rce-internal-access-lookout

2,170

Sys-Admin InfoSec

2026年3月13日 00:34

Love? Actually: Fake dating app used as lure in targeted spyware campaign

https://www.welivesecurity.com/en/eset-research/love-actually-fake-dating-app-used-lure-targeted-spyware-campaign-pakistan/

2,640

Sys-Admin InfoSec

2026年3月13日 00:34

PeckBirdy: A Versatile Script Framework for LOLBins Exploitation

https://www.trendmicro.com/en_us/research/26/a/peckbirdy-script-framework.html

2,980

Sys-Admin InfoSec

2026年3月13日 00:34

Notepad++ Hijacked by State-Sponsored Hackers

https://notepad-plus-plus.org/news/hijacked-incident-info-update/

2,540

Sys-Admin InfoSec

2026年3月13日 00:34

Open-Source Python Script Drives Social Media Phishing Campaign

.. In this particular campaign, attackers abused LinkedIn’s professional context to establish trust and familiarity, increasing their chances of success by targeting high-value individuals in corporate environments. This tactic, however, could be applied to any social media platform commonly accessed on business devices..:

https://reliaquest.com/blog/threat-spotlight-open-source-python-script-drives-social-media-phishing-campaign

2,880

Sys-Admin InfoSec

2026年3月13日 00:34

Microsoft mishandling example.com

Microsoft's https://learn.microsoft.com/en-us/exchange/architecture/client-access/autodiscover service has incorrectly routed the IANA-reserved example.com to Sumitomo Electric Industries' mail servers at sei.co.jp, potentially sending test credentials there.

https://tinyapps.org/blog/microsoft-mishandling-example-com.html

2,600

Sys-Admin InfoSec

2026年3月13日 00:34

UNO reverse card: stealing cookies from cookie stealers

https://www.cyberark.com/resources/threat-research-blog/uno-reverse-card-stealing-cookies-from-cookie-stealers

P. S. реклама даже в панели управления малвари присутствует 😁

2,460

Sys-Admin InfoSec

2026年3月13日 00:34

Threat Actors Expand Abuse of Microsoft Visual Studio Code

This activity involved the deployment of a backdoor implant that provides remote code execution capabilities on the victim system:

https://www.jamf.com/blog/threat-actors-expand-abuse-of-visual-studio-code/

2,430

Sys-Admin InfoSec

2026年3月13日 00:34

Malware Peddlers Are Now Hijacking Snap Publisher Domains

There’s a relentless campaign by scammers to publish malware in the Canonical Snap Store. Some gets caught by automated filters, but plenty slips through. Recently, these miscreants have changed tactics - they’re now registering expired domains belonging to legitimate snap publishers, taking over their accounts, and pushing malicious updates to previously trustworthy applications..:

https://blog.popey.com/2026/01/malware-purveyors-taking-over-published-snap-email-domains/

2,040

Sys-Admin InfoSec

2026年3月13日 00:34

Cloudflare Zero-day: Accessing Any Host Globally

https://fearsoff.org/research/cloudflare-acme

2,100

Sys-Admin InfoSec

2026年3月11日 01:29

StackWarp is a security vulnerability that exploits a synchronization bug present in all AMD Zen 1–5 processors. In the context of SEV-SNP, this flaw allows malicious VM hosts to manipulate the guest VM’s stack pointer

https://stackwarpattack.com/

2,670

Sys-Admin InfoSec

2026年3月9日 20:55

UNVEILING VOIDLINK – A STEALTHY, CLOUD-NATIVE LINUX MALWARE FRAMEWORK

https://research.checkpoint.com/2026/voidlink-the-cloud-native-malware-framework/

2,890

Sys-Admin InfoSec

2026年3月4日 15:42

deVixor: An Evolving Android Banking RAT with Ransomware

https://cyble.com/blog/devixor-an-evolving-android-banking-rat-with-ransomware-capabilities-targeting-iran/

2,620

Sys-Admin InfoSec

2026年3月3日 02:31

VVS Discord Stealer Using Pyarmor for Obfuscation and Detection Evasion

https://unit42.paloaltonetworks.com/vvs-stealer/

3,180

Sys-Admin InfoSec

2026年2月25日 14:32

Bluetooth Headphone Jacking: Full Disclosure of Airoha RACE Vulnerabilities

https://insinuator.net/2025/12/bluetooth-headphone-jacking-full-disclosure-of-airoha-race-vulnerabilities/

3,440

Sys-Admin InfoSec

2026年2月19日 03:25

Time Nist Gov Incorrect Time

The affected servers are:
time-a-b.nist.gov
time-b-b.nist.gov
time-c-b.nist.gov
time-d-b.nist.gov
time-e-b.nist.gov
ntp-b.nist.gov (authenticated NTP)

https://groups.google.com/a/list.nist.gov/g/internet-time-service/c/o0dDDcr1a8I

3,730

Sys-Admin InfoSec

2026年2月19日 03:25

Nezha: The Monitoring Tool That’s Also a Perfect RAT

https://www.ontinue.com/resource/nezha-the-monitoring-tool-thats-also-a-perfect-rat/

3,530

Sys-Admin InfoSec

2026年2月9日 23:04

CyberVolk Returns | Flawed VolkLocker Brings New Features With Growing Pains

https://www.sentinelone.com/blog/cybervolk-returns-flawed-volklocker-brings-new-features-with-growing-pains/

3,330

Sys-Admin InfoSec

2026年2月9日 23:04

Inside GhostPoster: How a PNG Icon Infected 50,000 Firefox Users

https://www.koi.ai/blog/inside-ghostposter-how-a-png-icon-infected-50-000-firefox-browser-users

3,340

Sys-Admin InfoSec

2026年2月4日 03:32

Windows Stealers: How Modern Infostealers Harvest Credentials

https://deceptiq.com/blog/windows-stealers-technical-analysis

2,810

Sys-Admin InfoSec

2026年2月4日 03:32

December 2025 Security Updates

This release consists of the following 57 Microsoft CVEs:

https://msrc.microsoft.com/update-guide/releaseNote/2025-Dec

2,740

Sys-Admin InfoSec

2025年12月6日 10:56

F5 Hacked. Mass companies can be under attack potentially..

https://www.bloomberg.com/news/articles/2025-10-16/potentially-catastrophic-breach-of-cyber-firm-blamed-on-china

F5-Big IP source code leaks:

https://my.f5.com/manage/s/article/K000154696

3,590

Sys-Admin InfoSec

2025年12月6日 10:56

Malware being hosted on xubuntu.org

https://lists.ubuntu.com/archives/xubuntu-devel/2025-October/012209.html

2,900

Sys-Admin InfoSec

2025年12月6日 10:56

ToolShell Used to Compromise Telecoms Company in Middle East

ToolShell was patched by Microsoft in July 2025, but by the time it was patched it had already been exploited in the wild as a zero-day vulnerability. ToolShell affects on-premise SharePoint servers and gives an attacker unauthenticated access to vulnerable servers, allowing them to remotely execute code and access all content and file systems..

https://www.security.com/blog-post/toolshell-china-zingdoor

2,690

Sys-Admin InfoSec

2025年12月6日 10:56

Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs

GhostCall attack heavily targets the macOS devices of executives at tech companies and in the venture capital sector by directly approaching targets via platforms like Telegram, and inviting potential victims to investment-related meetings linked to Zoom-like phishing websites:

https://securelist.com/bluenoroff-apt-campaigns-ghostcall-and-ghosthire/117842/

2,200

Sys-Admin InfoSec

2025年12月6日 10:56

“ChatGPT Tainted Memories:” LayerX Discovers The First Vulnerability in OpenAI Atlas Browser, Allowing Injection of Malicious Instructions into ChatGPT

https://layerxsecurity.com/blog/layerx-identifies-vulnerability-in-new-chatgpt-atlas-browser/

2,300

Sys-Admin InfoSec

2025年12月6日 10:56

New Android Malware Herodotus Mimics Human Behaviour to Evade Detection

https://www.threatfabric.com/blogs/new-android-malware-herodotus-mimics-human-behaviour-to-evade-detection

2,470

Sys-Admin InfoSec

2025年12月6日 10:56

Иллюзия [без] опасности на Profit Security Day

14 ноября в Алматы пройдет Profit Security Day (след. пятница).

Key-аспекты:

- наблюдение за тем, каково понимание нынешнего представителя ИБ о реалиях и возможностях нападающей стороны
- как это представление коррелируется с реалиями суровой действительности
- возможность пообщаться с интересными людьми

Интересно послушать мнение на тему - [Без] опасного использования ИИ.

До начала осталось 10 дней. Все детали здесь:

- https://profitday.kz/security

1,840

Sys-Admin InfoSec

2025年12月6日 10:56

Another Critical RCE Discovered in a Popular MCP Server

https://www.imperva.com/blog/another-critical-rce-discovered-in-a-popular-mcp-server/

2,620

Sys-Admin InfoSec

2025年12月6日 10:56

Cache smuggling: When a picture isn’t a thousand words

https://expel.com/blog/cache-smuggling-when-a-picture-isnt-a-thousand-words/

3,520

Showing 30 of 45 posts

Loading posts...

评分

需要登录

用户评论 (0)

暂无评论。成为第一个分享您体验的人！

Loading reviews...

Sys-Admin InfoSec

Sys-Admin InfoSec

排名

订阅者增长 (过去 27 天)

最新帖子

评分

用户评论 (0)

Sys-Admin InfoSec

排名

订阅者增长 (过去 27 天)

最新帖子

评分

用户评论 (0)

相关 Telegram 频道

CVE PUSH ⚠️

Русская культура 俄罗斯文化⚔

相关 Telegram 频道

CVE PUSH ⚠️

Русская культура 俄罗斯文化⚔

最新帖子

最新帖子

相关 Telegram 频道

CVE PUSH ⚠️

Русская культура 俄罗斯文化⚔

相关 Telegram 频道

CVE PUSH ⚠️

Русская культура 俄罗斯文化⚔

大成联盟出海供需-需求1U/条

大成联盟出海供需-需求1U/条

大成出海联盟官方公告:「实力供需」「限时邀请」「0元入会」即刻了解→

TG鉴黄师官方频道📢

㊙️电报热门导航|精选推送

Лисейчева, твой выход

大成联盟出海供需-需求1U/条

大成联盟出海供需-需求1U/条

大成出海联盟官方公告:「实力供需」「限时邀请」「0元入会」即刻了解→

TG鉴黄师官方频道📢

㊙️电报热门导航|精选推送

Лисейчева, твой выход

用户评论 (0)

用户评论 (0)