Telegram RegisterThe public register of Telegram
Telegram profile photo for Sombrero Blanco - Ciberseguridad

Channel

Sombrero Blanco - Ciberseguridad

@sombreroblanco

On this record: Topic · Observations · Also posting the same content · Growth · Engagement · Reactions · Posts · Citations · Telegram's recommendations · Cite this entry

9,875subscribers

+111 since we began measuring on 6 August 2026

Risers and fallers across the register · movement among entries of 3,162–10,000.

Register entry

Telegram ID-1001428508732
TypeChannel
Username@sombreroblanco
CreatedBetween 1 April 2019 and 30 September 2021 — estimated from Telegram’s id allocation, not measured. How this range is calculated.
First recorded6 August 2026
Last confirmed live17 September 2026
Measurements held15
Confirmed unchanged1 time, most recently 17 September 2026
On Telegramt.me/sombreroblanco

Topic

Hacking & security — a classification, not a measurement. An on-box language model (Qwen3.6-35B-A3B-UD-Q6_K_XL, prompt version 1) read this channel’s own recent posts on 10 August 2026 and assigned it the closest of 31 fixed categories, at 97% confidence. This is a model’s judgement about what the channel is likely to be about, not a fact this register measured the way a subscriber count or a view count is measured — it can be revised on a later pass, and it carries no weight anywhere else on this page. How this classification works, and why it has no browse page of its own yet.

Observations

These are measurements, not verdicts. Each one below states something we counted, alongside the evidence it was counted from, so you can check it rather than take it. None of them is graded: every observation this register holds is recorded at severity 0, because the precision of the detectors behind them has not been measured yet, and a rating we cannot support is worse than none. Read each as a fact about the data, not as a judgement about the channel. How we measure.

Content that also appears on other registered channels

Posts published here appear word for word on 1 other registered channel. The matching is on the text itself, not on Telegram’s forward marker, so it finds a copy whether or not it was labelled as one.

Matching posts — open both and compare (6 of the pairs behind the counts below)
Posted firstThenOverlapGap
@sombreroblanco/7614 · this entry20 Jul 2026, 14:02 UTC@unaaldia/269920 Jul 2026, 14:34 UTC1.0032 minutes
@unaaldia/270122 Jul 2026, 08:29 UTC@sombreroblanco/7619 · this entry22 Jul 2026, 14:03 UTC1.005.6 hours
@unaaldia/270223 Jul 2026, 09:46 UTC@sombreroblanco/7620 · this entry23 Jul 2026, 14:03 UTC1.004.3 hours
@unaaldia/270527 Jul 2026, 12:52 UTC@sombreroblanco/7623 · this entry27 Jul 2026, 14:03 UTC1.0071 minutes
@unaaldia/270427 Jul 2026, 12:51 UTC@sombreroblanco/7624 · this entry27 Jul 2026, 14:03 UTC1.0072 minutes
@sombreroblanco/7626 · this entry28 Jul 2026, 14:03 UTC@unaaldia/270628 Jul 2026, 17:00 UTC1.003.0 hours
Every channel this entry shares post bodies with
ChannelMatching postsText overlapTypical gapPublished first
@unaaldia12 (8/8 hand-verifiable sample passed)1.0072 minutesthis entry (75)

Text overlap is the Jaccard coefficient over the set of distinct three-word phrases in the two bodies: 1.00 is identical wording, and the threshold for counting a pair at all is 0.70. Candidates are generated by simhash LSH (4 x 16-bit bands, exact Hamming <= 3) verified against the bodies with Jaccard over the SET of distinct 3-word shingles. Published first counts which side of each matching pair carries the earlier timestamp — in this corpus, which is the limitation directly below.

What this cannot establish

MEASURED, DOMINANT ERROR SOURCE: a post ingested before 2026-08-06 may have carried a forward header that was not recorded. A 45-pair hand-check against live t.me pages found 14 (31%) where the live page shows a forward header naming the other channel and the database has none, plus 4 more (9%) naming a third party. The text match itself was wrong 0 times out of 45. Read attribution_capture.items_in_trusted_window before treating the unattributed count as a claim.

Telegram lets a channel forward a post with a header naming the source, and we only began reliably recording that header on 2026-08-06. None of the 5 matches recorded here fall after that date, so for this entry we cannot say whether any of them carried a credit. The duplication is measured; the absence of attribution is not.

“Published first” means first in this corpus. We hold 23 comparable posts for this entry, running 18 July 2026 to 7 August 2026. A channel we have read one page deep will look younger than a neighbour we have read in full, and the order would flip with no change in the underlying facts.

The detector’s own notes on this observation, as it recorded them. Names in this_style are fields of the underlying evidence record, which the plain-English paragraphs above read out for this entry.

  • Verbatim republication has three causes and the text separates only two: a clone/mirror, unattributed copy-paste, or BOTH channels copying a common third source that neither attributes. The spread filter (content held by at most 8 channels) reduces the third and does not remove it.
  • 'Earliest' means earliest IN THIS CORPUS. A channel ingested one page deep will look younger than a neighbour ingested in full; corpus_coverage above is there to be checked before the direction is believed.
  • shared_verified_est extrapolates the sampled pass rate over the full narrow match count; sampled/passed are the numbers actually measured.
  • Absence of a forward header is not proof of intent: Telegram lets a channel disable forward attribution, and a credit written in the body is not parsed as attribution here (mention_edge_either_way above is the closest available signal).

Across the whole group of 2, the earliest publisher we hold is @sombreroblanco — which is this entry. That is a statement about our reading window, not a claim of authorship.

Recorded under the key clone_mutual, last confirmed 7 August 2026. An observation that a later pass no longer finds is cleared, and a cleared observation is removed from this page rather than being shown struck through — we do not keep publishing a claim we have withdrawn. Dispute an observation.

Also posting the same content

This channel’s posts match, word for word or near enough, posts on 1 other registered channel, found by comparing text fingerprints across every channel on the register. That matching has been checked by hand against the live Telegram pages and found reliable — 0 wrong of 45 pairs re-read.

Which channel, if either, published first is deliberately not shown. The same hand-check found that reading wrong 18 of 45 times — 60%, no better than a coin flip — because it depends on how deep our own crawl happened to reach into each channel’s history, not on when the content was actually first posted. This list is ordered by subscriber count, the same as every other listing on this site, never by which channel we think came first. Word-for-word matching has several ordinary explanations besides copying — a channel mirroring itself, an unattributed repost, or two channels independently repeating the same wire story — and this measurement cannot tell those apart. How this is measured.

Growth

9,7649,8759,819.56 August 2026 — 9,764 subscribers6 August 2026 — 9,764 subscribers6 August 2026 — 9,767 subscribers9 August 2026 — 9,775 subscribers12 August 2026 — 9,781 subscribers15 August 2026 — 9,782 subscribers18 August 2026 — 9,788 subscribers21 August 2026 — 9,801 subscribers25 August 2026 — 9,807 subscribers28 August 2026 — 9,814 subscribers31 August 2026 — 9,818 subscribers4 September 2026 — 9,834 subscribers9 September 2026 — 9,866 subscribers13 September 2026 — 9,868 subscribers17 September 2026 — 9,875 subscribers6 August 202617 September 2026
15 measurements spanning 42 days, net +111. Dots are measurements; the straight line between them is drawn to join them, not to claim we know the path taken in between — snapshots are recorded only when a count changes, so gaps mean “no change observed”, never “interpolated”. The vertical axis spans 9,747–9,892 and does not start at zero.
Measurement log — every subscribers count we have recorded
Measured (UTC)SubscribersChange
17 Sept 2026, 11:179,875+7
13 Sept 2026, 19:019,868+2
9 Sept 2026, 21:199,866+32
4 Sept 2026, 09:179,834+16
31 Aug 2026, 16:089,818+4
28 Aug 2026, 07:049,814+7
25 Aug 2026, 03:159,807+6
21 Aug 2026, 09:249,801+13
18 Aug 2026, 11:039,788+6
15 Aug 2026, 16:569,782+1
12 Aug 2026, 12:539,781+6
9 Aug 2026, 19:019,775+8
6 Aug 2026, 20:009,767+3
6 Aug 2026, 02:499,764no change
6 Aug 2026, 01:369,764first reading

Engagement

47 posts held, back to 18 July 2026the reader has not yet reached the start of this channel’s public history, so older posts may sit further back, unread. Read across 36 pages of Telegram’s post history, 20 posts per page.

ERR · 30 days
6.55%
avg views ÷ 9,875 subscribers
Avg views / post
647
9 posts measured
Reaction rate
0.167%
reactions ÷ views · ER floor
Posts in window
9
of 47 held

ERR is average views per post over the last 30 days divided by subscribers, the definition TGStat uses, so this figure is comparable with the one you will see elsewhere. It falls structurally as a channel grows: a high ERR on a small channel and a low one on a large channel describe reach mathematics, not quality. We publish the figure and the sample it came from and pass no verdict on it.

ER is defined industry-wide as (forwards + reactions + comments) ÷ views — note the denominator is views, not subscribers. Telegram’s public web preview carries views and reactions but not forward or comment counts, so the reaction rate above is the reactions term only and is therefore a floor: the true ER for this channel is higher by an amount we have not measured and will not estimate. It is computed over the 1 of 9 measured posts that carry a reaction reading, and over those same posts' views.

What these figures were computed from
WindowRolling 30 days · latest post in window 28 August 2026
Posts held47 (18 July 202628 August 2026)
Views total5,819
Reactions total1
Forwards / commentsnot exposed by the public surface — not measured, not estimated
Readings taken29 Aug 2026, 05:02 UTC

Views are a single reading per post, taken at the time above. A post published in the last day or two is still accumulating views, which pulls the 30-day average down slightly. That is a property of the standard definition rather than a fault in it, so we keep the definition rather than “correcting” the number into something nobody can reproduce.

Precision. Telegram publishes view counts on its public widget in short form — 8.12K, 3.7M — so any reading at or above 1,000 reaches us rounded to three significant figures, and only counts below 1,000 are exact. Averages and rates derived from them are shown to the same precision rather than to the unit: a figure like 3,701,250 would assert digits nobody measured.

Reaction counts are published per emoji and rounded the same way, so a total below 1,000 is exact and a larger one is a sum that may carry a rounded component from each emoji above 1,000. Because it is a sum, it does not look rounded — read a large reaction total as three significant figures per contributing emoji rather than as the figure it prints.

Reaction mix

32 reactions across 19 posts, in 6 distinct kinds. The most used accounts for 31.3% of them.

Every reaction kind recorded on the sample, most used first
ReactionCountShareShare, drawn
1031.3%
👍1031.3%
😱618.8%
🔥39.38%
👌26.25%
🤩13.13%

No sentiment is inferred, and none should be read in. This table is ordered by count and by nothing else. Emoji do not carry stable meaning across languages or communities — 🙏 is thanks in one channel and mourning in another — so we publish which ones were pressed and how often, and pass no judgement on what an audience meant by them.

Precision. Telegram publishes reaction counts per emoji and short-forms each one — 4.34K, 1.2M — so any single kind at or above 1,000 reaches us at three significant figures, and only counts below 1,000 are exact. The shares above are ratios of those figures and carry the same error. This is also why the total here can differ slightly from a reaction total printed elsewhere on the page: both are sums of the same rounded parts, taken over samples with different edges.

Coverage. Reactions were read on 20 of the 47 sampled posts in this sample. Summed by Telegram’s own count on each post — not by adding up the per-emoji breakdown above — those same posts carry 35 reactions in total: the kind of figure the paragraph above means by “a reaction total printed elsewhere on the page”.

Measured over the 47 most recent posts we hold, published 18 July 2026 to 28 August 2026, using the newest reading held for each. Telegram Stars are excluded: they are a payment, not a reaction, and they have their own section.

Recent posts

28 Aug 2026, 14:02 UTC394 viewsread 29 August 2026

Todos los modelos de IA hacen trampas si les das ocasión. Decirles “no hagas trampas” no basta https://www.xataka.com/robotica-e-ia/todos-modelos-ia-hacen-trampas-les-das-ocasion-decirles-no-hagas-trampas-no-basta

28 Aug 2026, 14:02 UTC377 viewsread 29 August 2026

CISA impone un parche urgente por un fallo crítico en Citrix NetScaler con explotación activa https://unaaldia.hispasec.com/cisa-impone-un-parche-urgente-por-un-fallo-critico-en-citrix-netscaler-con-explotacion-activa/?utm_source=rss&utm_medium=rss&utm_campaign=cisa-impone-un-parche-urgente-por-un-fallo-critico-en-citrix-netscaler-con-explotacion-activa

27 Aug 2026, 14:03 UTC600 views1 reactionsread 29 August 2026

CISA suma seis fallos explotados al catálogo KEV y eleva la urgencia de parcheo en NetScaler, Linux y SQL Server https://unaaldia.hispasec.com/cisa-suma-seis-fallos-explotados-al-catalogo-kev-y-eleva-la-urgencia-de-parcheo-en-netscaler-linux-y-sql-server/?utm_source=rss&utm_medium=rss&utm_campaign=cisa-suma-seis-fallos-explotados-al-catalogo-kev-y-eleva-la-urgencia-de-parcheo-en-netscaler-linux-y-sql-server

1

26 Aug 2026, 20:02 UTC716 viewsread 29 August 2026

Esta IA es la favorita de los hackers para realizar ciberataques (y no es Claude) https://hipertextual.com/seguridad/hackers-chinos-deepseek-ciberataques/

26 Aug 2026, 14:01 UTC738 viewsread 29 August 2026

Daniel Púa, jefe de seguridad en Magnific: "Si Claude Opus 4.8 podía ser una navaja, Mythos es un machete" https://www.xataka.com/seguridad/daniel-pua-jefe-seguridad-magnific-claude-opus-4-8-podia-ser-navaja-mythos-machete

26 Aug 2026, 14:01 UTC665 viewsread 29 August 2026

SLEEPWALKER introduce una puerta trasera para Windows que solo despierta con un único paquete de red https://unaaldia.hispasec.com/sleepwalker-introduce-una-puerta-trasera-para-windows-que-solo-despierta-con-un-unico-paquete-de-red/?utm_source=rss&utm_medium=rss&utm_campaign=sleepwalker-introduce-una-puerta-trasera-para-windows-que-solo-despierta-con-un-unico-paquete-de-red

26 Aug 2026, 14:01 UTC642 viewsread 29 August 2026

SLEEPWALKER introduce una puerta trasera para Windows que solo despierta con un único paquete de red https://unaaldia.hispasec.com/sleepwalker-introduce-una-puerta-trasera-para-windows-que-solo-despierta-con-un-unico-paquete-de-red-2/?utm_source=rss&utm_medium=rss&utm_campaign=sleepwalker-introduce-una-puerta-trasera-para-windows-que-solo-despierta-con-un-unico-paquete-de-red-2

25 Aug 2026, 14:02 UTC764 viewsread 29 August 2026

Keycloak corrige un fallo crítico en el restablecimiento de contraseñas que permite tomar cuentas sin autenticación https://unaaldia.hispasec.com/keycloak-corrige-un-fallo-critico-en-el-restablecimiento-de-contrasenas-que-permite-tomar-cuentas-sin-autenticacion/?utm_source=rss&utm_medium=rss&utm_campaign=keycloak-corrige-un-fallo-critico-en-el-restablecimiento-de-contrasenas-que-permite-tomar-cuentas-sin-autenticacio

24 Aug 2026, 14:03 UTC923 viewsread 29 August 2026

CISA exige parchear un fallo de Zimbra que ya se explota para ejecutar comandos sin autenticación https://unaaldia.hispasec.com/cisa-exige-parchear-un-fallo-de-zimbra-que-ya-se-explota-para-ejecutar-comandos-sin-autenticacion/?utm_source=rss&utm_medium=rss&utm_campaign=cisa-exige-parchear-un-fallo-de-zimbra-que-ya-se-explota-para-ejecutar-comandos-sin-autenticacion

23 Aug 2026, 16:05 UTC≈1,060 views3 reactionsread 29 August 2026

Este hacker demuestra en una conferencia de ciberseguridad por qué hay que apagar el Bluetooth del iPhone. Yo discrepo https://www.applesfera.com/seguridad/este-hacker-demuestra-conferencia-ciberseguridad-que-hay-que-apagar-bluetooth-iphone-yo-discrepo

👍2👌1

21 Aug 2026, 14:02 UTC≈1,330 views3 reactionsread 29 August 2026

Anthropic lanza Claude Opus 5: su nueva IA se acerca a Fable 5, pero sin ser tan cara https://hipertextual.com/inteligencia-artificial/nuevo-claude-opus-5/

👍3

17 Aug 2026, 16:03 UTC≈1,880 views1 reactionsread 29 August 2026

La IA ha resuelto uno de los grandes problemas de la ciberseguridad: encontrar fallos. Ahora tenemos otro mucho mayor https://www.xataka.com/robotica-e-ia/ia-ha-resuelto-uno-grandes-problemas-ciberseguridad-encontrar-fallos-ahora-tenemos-otro-mucho-mayor

🤩1

Showing the 12 most recent of 47 posts we hold for @sombreroblanco. View and reaction counts are the latest single reading for each post, not a live figure, and a recent post is still accumulating both. A view count marked was rounded by Telegram before we ever saw it — t.me prints views in full below 1,000 and to three significant figures above, so ≈1,200,000 means somewhere between 1,150,000 and 1,249,999. Unmarked counts are exact. Text is reproduced from the public post preview and truncated for length.

Mentions

Named by 2 registered channels — every channel on the register whose own posts have named this one, by its current username or any other username it currently holds, merged from two separately captured readings of the same fact so a namer caught by only one of them is not missed and a namer both caught is not counted twice. A username this channel has since dropped is not matched — that handle may belong to someone else now, and crediting today’s namer to yesterday’s owner would misattribute it.

A mention is a weaker signal than a forward and is counted separately for that reason — naming a channel is not republishing it, and a handle in a post body is easy to place deliberately. The post counts beside each row below are distinct posts in which the handle appeared, from posts we have read on both sides — the “Named by N registered channels” figure above is a different count, of distinct NAMING CHANNELS rather than posts, and is not the sum of the rows under it.

Appears in Telegram’s recommendations for other channels

The reverse of the list above, and a different kind of signal. This does not require this channel to have ever been asked about directly — each row below is a channel we DID ask Telegram about, whose Telegram-generated list happened to include this one. A channel can appear here with an empty list above it, because being named by someone else’s query is independent of having been queried itself.

🔒Seguridad Informática
@seguridadinformatic4 · 29,172
Telegram ranks this channel #5 of 76 here — alongside 75 others — read 8 September 2026
Cursos Gratis
@CursosFacialix · 52,001
Telegram ranks this channel #24 of 28 here — alongside 27 others — read 5 September 2026
GUIAS GRATIS 📖
@guiasgratis · 101,627
Telegram ranks this channel #30 of 41 here — alongside 40 others — read 25 August 2026
The Hacker News
@thehackernews · 164,665
Telegram ranks this channel #52 of 58 here — alongside 57 others — read 13 August 2026
Cloud and Cybersecurity
@cloudandcybersecurity · 21,828
Telegram ranks this channel #57 of 62 here — alongside 61 others — read 22 September 2026
Tokin Privacy
@TokinPrivacy · 50,439
Telegram ranks this channel #74 of 86 here — alongside 85 others — read 25 August 2026

This channel appears in 6 seed channels' Telegram-generated recommendation lists in total. Each is Telegram’s list for THAT channel, not this one — see how this is measured.

Cite this entry

A live page changes as we take new readings, so a citation should name the measurement it is based on, not just the URL. The line below cites the subscriber count as measured 17 September 2026 — this entry's latest reading, not the date you are reading this.

“Sombrero Blanco - Ciberseguridad” (@sombreroblanco), 9,875 subscribers as measured 17 September 2026. Telegram Register, tgregister.com/channel/sombreroblanco.

Full measurement history, CC BY 4.0. Every reading this register holds for this entry, not just the latest one, as a dated, downloadable record: CSV · JSON. Free to use with attribution to tgregister.com. Each file carries its own generation timestamp, which is the figure to cite for exactly when the data was retrieved.