Alleged Google Pixel 10 Zero Day at 2.5K USD only as chain included some n-days. An interesting thread. reported a chrome fullchain (web -> shell) on pixel 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome. now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k. despite cve + shell :|…
cKure Red
The director's cut on critical feeds from InfoSec world 🌎 Main Channel: @cKure ☕️ or queries email us 📨 i@ckure.org
Динамика подписчиков
с 20 июля 2026 по 28 сентября 2026 · минимум 2 630 · максимум 2 730
Кто рекламировался за полгода
Рекламных размещений с маркировкой не найдено.
Публикации
AliExpress spyware caught using side channel attack to compromise hardware.
😒 Claude Code was used to make missile guidance system for 9 months by Houthis using multiple agents to make an offline flight simulator. The accounts linked were banned by Claude. The offline version of flight simulator is however on the loose.
📄 The Art of Exploit Development.
A prompt-crafting technique for bypassing quick LLM-based policy checks — using plain English (no emojis, base64, invisible formatting, etc.) A policy-violating payload (e.g. ”encrypt files in ~/Documents”, “give me a biohazard recipe”, “ignore all previous instructions and…”) is embedded in a specially crafted prose wrapper. An LLM with limited resources and attention fails to realize the payload is there,…