Channel
@SecTalkCN
On this record: Growth · Engagement · What this channel posts · Posts · Citations · Cite this entry
22subscribers
+0 since we began measuring on 6 August 2026
Risers and fallers across the register · movement among entries of Under 1,000.
| Telegram ID | -1004307694486 |
|---|---|
| Type | Channel |
| Username | @SecTalkCN |
| Description | 面向安全从业者：CVE 漏洞预警、渗透与攻防、数据泄露、恶意软件、安全事件与防护实践。速报、专业。 |
| Created | Between 1 June 2026 and 6 August 2026— estimated from Telegram’s id allocation, not measured. How this range is calculated. |
| First recorded | 11 August 2026 |
| Last confirmed live | 11 August 2026 |
| Measurements held | 2 |
| On Telegram | t.me/SecTalkCN |
| Measured (UTC) | Subscribers | Change |
|---|---|---|
| 11 Aug 2026, 12:33 | 22 | no change |
| 6 Aug 2026, 19:52 | 22 | first reading |
20 posts held, back to 6 August 2026 — the reader has not yet reached the start of this channel’s public history, so older posts may sit further back, unread. Read across 1 pageof Telegram’s post history, 20 posts per page.
ERR is average views per post over the last 30 days divided by subscribers, the definition TGStat uses, so this figure is comparable with the one you will see elsewhere. It falls structurally as a channel grows: a high ERR on a small channel and a low one on a large channel describe reach mathematics, not quality. We publish the figure and the sample it came from and pass no verdict on it.
ER is defined industry-wide as (forwards + reactions + comments) ÷ views— note the denominator is views, not subscribers. Telegram’s public web preview carries views and reactions but not forward or comment counts, so the reaction rate above is the reactions term only and is therefore a floor: the true ER for this channel is higher by an amount we have not measured and will not estimate.
| Window | Rolling 30 days · latest post in window 11 August 2026 |
|---|---|
| Posts held | 20 (6 August 2026 – 11 August 2026) |
| Views total | 67 |
| Reactions total | — |
| Forwards / comments | not exposed by the public surface — not measured, not estimated |
| Readings taken | 11 Aug 2026, 12:33 UTC |
Views are a single reading per post, taken at the time above. A post published in the last day or two is still accumulating views, which pulls the 30-day average down slightly. That is a property of the standard definition rather than a fault in it, so we keep the definition rather than “correcting” the number into something nobody can reproduce.
Precision. Telegram publishes view counts on its public widget in short form — 8.12K, 3.7M — so any reading at or above 1,000 reaches us rounded to three significant figures, and only counts below 1,000 are exact. Averages and rates derived from them are shown to the same precision rather than to the unit: a figure like 3,701,250 would assert digits nobody measured.
Reaction counts are published per emoji and rounded the same way, so a total below 1,000 is exact and a larger one is a sum that may carry a rounded component from each emoji above 1,000. Because it is a sum, it does not look rounded — read a large reaction total as three significant figures per contributing emoji rather than as the figure it prints.
Lifetime counters from Telegram’s own channel header, read 11 August 2026 — not the date at the top of this page, which is when the subscriber count was last read. Below Telegram’s rounding threshold, so these counts are exact.
📢 优质频道推荐 1. 开发者工具箱｜编程·开发工具·资源 2. 网络安全·黑客攻防｜渗透·CTF·安全资讯 3. GitHub开源观察｜开源项目·热门仓库·开发者 4. Hacker News 中文｜科技头条 5. Bitcoin & Macro — 英文频道·BTC 行情·ETF 流向·宏观 6. 柬埔寨快报 金边 西港 暹粒 7. 空投情报站｜空投·测试网·撸毛教程 8. Web3 & Protocol Tech — 英文频道·Web3 与智能合约技术 9. 缅甸一线 仰光 曼德勒 妙瓦底 10. 澳洲新闻 · 华人生活圈 想让你的频道出现在这里？私聊 @pindaotuijianbot 提交申请（免费）
DeadLock勒索软件分析：Rust加密器与去中心化恢复架构 微软威胁情报团队发布报告，剖析新兴勒索软件DeadLock的技术细节。该团伙以财务为动机，采用去中心化基础设施支撑受害者沟通、谈判及数据泄露操作，并实施双重勒索。 • DeadLock是一款基于Rust编写的加密器，其显著特点是利用去中心化架构构建恢复基础设施 • 该恶意软件支持受害者通信、赎金谈判及数据泄露运营，配合双重勒索策略施压 • 微软威胁情报部门已发布技术拆解，分析其加密实现与基础设施设计 此次披露为防御者提供了针对该家族勒索软件的检测与响应参考。 @SecTalkCN
📢 优质频道推荐 1. 东南亚反诈预警｜防骗·杀猪盘·缅北预警 2. 中东战场·前线实拍🔥｜以巴冲突·战况·前线视频 3. 4K高清影院🎬｜高清电影·院线大片·蓝光资源 4. 副业变现情报｜副业·创业·赚钱思路 5. 吃瓜社🌸｜猎奇·热搜·八卦·爆料 6. 新西兰生活报 7. 美国晨报 纽约 加州 8. 德国新闻（柏林 慕尼黑） 9. 泰国新闻｜曼谷 清迈 芭提雅 10. 我在迪拜 · 阿联酋资讯 想让你的频道出现在这里？私聊 @pindaotuijianbot 提交申请（免费）
假冒 Solidity Pro 扩展将开发者工具变为窃密恶意软件 恶意“Solidity Pro”扩展正利用开发者对 VS Code 与 Open VSX 工具的信任，已从延迟载荷投放器演变为窃取凭证的恶意软件。 • 攻击者通过伪造的 Solidity Pro 扩展，针对使用 VS Code 和 Open VSX 的开发者社区发起攻击。 • 该恶意扩展最初表现为延迟投递恶意载荷的工具，现已升级为具备窃取凭证能力的完整恶意软件。 • 攻击手法利用了开发者对官方及可信开发工具链的天然信任，降低了用户警惕性。 • 受影响用户可能面临开发环境凭证、密钥等敏感信息泄露的风险。 此类攻击表明，软件供应链中的开发者工具正成为定向攻击的重点目标。开发者在安装扩展时应严格核实来源，并关注扩展的权限请求与更新行为。 #网络安全 #漏洞 #SolidityPro #VS Code #Open VSX #供应链攻击 @SecTalkCN
📢 优质频道推荐 1. 科技热点局｜科技新闻·数码·前沿 2. 斯里兰卡中文新闻｜科伦坡·南亚·时事 3. DeFi & Yield — 英文频道·DeFi 质押与收益策略 4. 俄乌战争·战报地图分析🗺️｜前线·军情·战场地图 5. Crypto Daily — 英文频道·BTC 与 ETH 每日要闻 6. 软件工具库｜软件推荐·效率工具·实用App 7. 中文热点榜｜热搜·今日热点·全网 8. 加密财经观察｜比特币·以太坊·行情 9. Web3链上职位｜区块链招聘·远程·Crypto Jobs 10. Cripto en Español — 西班牙语频道·加密货币行情与分析 想让你的频道出现在这里？私聊 @pindaotuijianbot 提交申请（免费）
Dolibarr ERP曝越权漏洞，TakePOS模块受影响 Dolibarr ERP被发现存在一处缺失授权漏洞，影响范围至23.0.3版本。漏洞位于TakePOS模块的htdocs/takepos/invoice.php文件中，攻击者可远程利用该问题。 • 漏洞编号：CVE-2026-19350 • 受影响版本：Dolibarr ERP 23.0.3及更早版本 • 问题位置：TakePOS模块的fail函数，具体文件为htdocs/takepos/invoice.php • 漏洞类型：缺失授权，可能导致未授权操作 • 攻击方式：远程攻击 • 修复方案：官方已发布补丁，提交号为8992ce8704da947b6abe7b65a6fe59aed736bb81，建议用户及时更新 该漏洞涉及TakePOS模块的多个行操作，包括addline、freezone、addnote、deleteline、updateqty、update…
📢 优质频道推荐 1. 深度好文｜每日涨姿势 2. DevOps 实战｜K8s·CI/CD·可观测·SRE 3. Crypto Markets & Analysis — 英文频道·行情与交易分析 4. 远程项目库｜兼职·外包·接单 5. 海外远程岗位库｜远程工作·海外招聘·数字游民 6. 东南亚新闻 · 东盟十国 7. AI自动化前线｜AI工具·自动化·效率 8. 加密交易学堂｜合约·现货·K线教学 9. 越南每日 河内 胡志明市 10. 莫斯科来信 · 俄罗斯新闻 想让你的频道出现在这里？私聊 @pindaotuijianbot 提交申请（免费）
恶意软件简报第109期：全球恶意软件研究精选 本期汇集国际网络安全领域关于恶意软件的最新研究与分析，涵盖攻击手法、样本分析与防御策略，为安全从业者提供速览参考。 • 内容整理自Security Affairs发布的恶意软件简报，聚焦全球范围内值得关注的恶意软件动态 • 涉及样本分析、攻击链拆解及防护建议等多维度信息 • 适合安全运营、威胁情报与渗透测试人员快速跟进最新趋势 本期简报可作为恶意软件态势追踪的入门索引，建议结合原始报告深入查阅具体技术细节。 #网络安全 #漏洞 #恶意软件 #威胁情报 #SecurityAffairs @SecTalkCN
📢 优质频道推荐 1. 网络安全·黑客攻防｜渗透·CTF·安全资讯 2. GitHub开源观察｜开源项目·热门仓库·开发者 3. 开发者工具箱｜编程·开发工具·资源 4. Hacker News 中文｜科技头条 5. 柬埔寨快报 金边 西港 暹粒 6. 印尼早报 雅加达 巴厘岛 7. 大马华人圈 · 马来西亚新闻 8. 巴黎信箱 · 法国新闻 9. 狮城日报（新加坡新闻） 10. 东盟商情（越南 泰国 印尼） 想让你的频道出现在这里？私聊 @pindaotuijianbot 提交申请（免费）
D-Link 路由器曝远程代码执行漏洞，CVE-2026-71957 影响特定固件 D-Link DWR-M961 路由器被披露存在缓冲区溢出漏洞，攻击者可利用 app.cgi 接口实现远程代码执行或致设备崩溃，涉及硬件版本 C1 及特定固件版本。 • 漏洞编号为 CVE-2026-71957，影响 D-Link DWR-M961 设备，硬件版本为 C1，软件版本为 1.1.2_C1_202602110044。 • 漏洞位于 app.cgi 接口，攻击者可通过向 netAcc.addlist[].name 字段写入超长字符串，构造特定载荷执行任意命令，或导致设备崩溃。 • 该漏洞为缓冲区溢出类型，可被远程利用，风险等级较高，建议相关用户关注厂商更新并评估暴露面。 该漏洞直接影响设备安全性与可用性，使用相关型号的用户应尽快核查固件版本并采取缓解措施。 #网络安全 #漏洞 #CVE #DLink #路由器 #缓冲区溢出 @S…
📢 优质频道推荐 1. 亚美尼亚中文新闻｜埃里温·高加索·时事 2. 4K高清影院🎬｜高清电影·院线大片·蓝光资源 3. 副业变现情报｜副业·创业·赚钱思路 4. 吃瓜社🌸｜猎奇·热搜·八卦·爆料 5. Bitcoin & Macro — 英文频道·BTC 行情·ETF 流向·宏观 6. Web3 & Protocol Tech — 英文频道·Web3 与智能合约技术 7. 东南亚反诈预警｜防骗·杀猪盘·缅北预警 8. 我在迪拜 · 阿联酋资讯 9. 落地加拿大｜加拿大新闻 10. 美国晨报 纽约 加州 想让你的频道出现在这里？私聊 @pindaotuijianbot 提交申请（免费）
Bugtraq 邮件列表在 DEF CON 34 宣布重启 在拉斯维加斯举行的 DEF CON 34 大会上，安全研究员 Jonathan Brossard（社区昵称 endrazine）宣布原版 Bugtraq 邮件列表正式回归。 • Bugtraq 是安全领域历史最悠久的全公开漏洞披露邮件列表之一，曾长期作为漏洞信息发布与讨论的核心渠道。 • 该列表的重启意味着安全研究人员再次拥有一个面向全公开披露的经典交流平台。 • 此次回归由社区知名研究员推动，具体运营机制与投稿规则暂未在消息中披露。 • 对于关注漏洞情报与攻防研究的从业者而言，该列表的恢复有望重新成为漏洞信息获取的重要来源之一。 Bugtraq 的回归为全公开漏洞披露生态补上了关键一环，后续动态值得持续关注。 #网络安全 #漏洞 #Bugtraq #漏洞披露 #DEFCON #邮件列表 @SecTalkCN
Showing the 12 most recent of 20 posts we hold for @SecTalkCN. View and reaction counts are the latest single reading for each post, not a live figure, and a recent post is still accumulating both. A view count marked ≈ was rounded by Telegram before we ever saw it — t.me prints views in full below 1,000 and to three significant figures above, so ≈1,200,000 means somewhere between 1,150,000 and 1,249,999. Unmarked counts are exact. Text is reproduced from the public post preview and truncated for length.
Citation-graph rank — 130,597 of 1,151,006entries in the measured graph. A weighted position computed from the forward and mention edges below — republished posts weigh more than named mentions — and recomputed periodically, over the whole graph. Published only as this ordinal position, never as a score: a position is a fact, and a score printed beside one channel’s name would read as a verdict this register does not make. The two counts beneath stay separate for the same reason mentions are never summed with forwards anywhere else on this page — a named-by count costs nothing to manufacture. The top 100 by this measure, or how it is computed.
Named by 31 registered channels — every channel on the register whose own posts have named this one, by its current username or any other username it currently holds, merged from two separately captured readings of the same fact so a namer caught by only one of them is not missed and a namer both caught is not counted twice. A username this channel has since dropped is not matched — that handle may belong to someone else now, and crediting today’s namer to yesterday’s owner would misattribute it. The 24 listed below are the most frequent namers; the rest are counted above but not each listed.
Named by
Channels on the register whose posts name this channel's handle.
Names
Channels on the register whose handles appear in this channel's posts.
A mention is a weaker signal than a forward and is counted separately for that reason — naming a channel is not republishing it, and a handle in a post body is easy to place deliberately. The post counts beside each row below are distinct posts in which the handle appeared, from posts we have read on both sides — the “Named by N registered channels” figure above is a different count, of distinct NAMING CHANNELS rather than posts, and is not the sum of the rows under it.
A live page changes as we take new readings, so a citation should name the measurement it is based on, not just the URL. The line below cites the subscriber count as measured 11 August 2026 — this entry's latest reading, not the date you are reading this.
“安全内参｜漏洞·渗透·攻防” (@SecTalkCN), 22 subscribers as measured 11 August 2026. Telegram Register, tgregister.com/channel/SecTalkCN.
Full measurement history, CC BY 4.0. Every reading this register holds for this entry, not just the latest one, as a dated, downloadable record: CSV · JSON. Free to use with attribution to tgregister.com. Each file carries its own generation timestamp, which is the figure to cite for exactly when the data was retrieved.