Repository navigation
[每日信息流] 2026-05-19 #1244
Description
每日安全资讯（2026-05-19）
- SecWiki News
- Doonsec's feed
- 终于！我的公众号也有‘账号检测’功能了！
- XS语言：2.9MB 单二进制集成全套开发工具链
- 【文末抽奖】21天跑通海外SRC漏洞挖掘闭环！海外漏洞赏金猎人共学营等你来战～
- 基础模型公司下场做实施，中转站也不能只卖 token
- 槐树下的热汤与屏幕前的坚守：一个网安老兵的《渡尘寰》感悟
- 陨落的上帝货币
- 别迷信模型了：Cisco开源Foundry Security Spec，用8个Agent角色+11条铁律告诉你——AI安全测试的核心不是模型，是模型周围的验证闭环
- 聊真东西的地方，今天终于敢开门了
- 崩溃后的重生-用概率博胜率
- 快看！2026年第十四届ICPC陕西省大学生程序设计竞赛
- 邮件钓鱼免杀完全指南（2026 实战版）· 四、VHD/ISO 武器化免杀
- HVV护网行动：域名信息搜集
- 东胜物流软件CrmProxyMailListGridSource.aspx接口存在SQL注入漏洞 附POC
- Ai逆向工程-从零开始通过创建自己喜欢的东西来提升自己的技术能力。
- MCP协议的安全攻防：当AI Agent编排150+工具时，攻击面不再是代码而是元数据
- 谷歌突然“偷跑”！Gemini 3.2 Flash炸场：2200行代码一镜到底，AI三巨头彻底坐不住
- 什么是IPSG？
- 三大运营商可以冲Token了！用AI就像交话费
- Linus点名AI漏洞报告！Linux安全列表已被挤爆
- CVE-2026-34621：Adobe Acrobat 2026 原型污染和 JS 注入链 — 研究 PoC
- 安全警报 | 勒索未果！黑客威胁泄露常州姚力电子科技数据，企业数据安全再敲警钟
- 上邦 电子文档安全管理系统 skins 任意文件读取漏洞
- 专家证实，Fast16恶意软件曾破坏核武器试验，很可能发生在伊朗【机翻】
- 扎心真相 | 为什么国内的安全公司难出真创新？
- 大白哥红队课第9期，报名就送1个亿token
- DoublePulsar:Crystal Palace 与 Tradecraft Garden 时代的用户自定义反射加载器
- 为什么信任你的漏洞扫描器是个坏主意
- 等保测评“高风险判定实施指引”神器：高风险判定实施指引桌面客户端来了！
- 好家伙，伊朗为霍尔木斯海峡创建了一个账号
- 本地离线语音转文字与翻译工具
- 行业首发！硬核临检神器严打无人机飞控破解！
- 原创 | ShadowScan 安全扫描器v1.0.1更新
- 论文研读与思考|从 Web 应用中提取数据库访问控制策略
- 记录一次逆向实战
- 2025年全球DDoS攻击态势分析报告解读
- 智护数字生命线，AI赋能云网安｜华为亮相2026年世界电信日厦门论坛赋能数字发展
- Windows“MiniPlasma”新零日漏洞让攻击者获得系统访问权限——概念验证已发布
- Patch免杀工具更新！！!
- 美国网络安全和基础设施安全局 (CISA) 警告：微软 Exchange 服务器漏洞已被攻击者利用
- 【安全圈】AI 假图“仅退款”成风：商家叫苦不迭，国家反诈中心“AI 鉴定师”进入实战阶段
- 【安全圈】针对电话诈骗 谷歌要推新识别功能了
- 【安全圈】警惕 AI 造谣传谣！“张家界大峡谷玻璃桥断裂垮塌”视频系伪造
- 🔥 净网2026大捷！你的信息可能正被倒卖…
- 360数字安全集团与泰达数科达成战略合作 共筑AI创新与数字安全新生态
- 奇安信Qcodexa0Agents重磅升级，正式解锁操作系统级漏洞挖掘能力
- 奇安信受邀出席西城区民营经济高质量发展推进会
- 这是什么鱼啊？
- Linux常用命令大全
- 【漏洞通告】Linux Kernel ptrace 权限提升漏洞
- 全球「共享充电宝第一股」黯然退市！淘宝、小米被套牢，王校长终于不用吃翔了
- 汽车网络安全之 AUTOSAR - SHE 密钥更新
- 定制沙龙 | 走进车企 | 培训 | 媒体 | 产业研报——谈思汽车一站式产业服务手册
- TC260-TR-004-2026《工业具身智能安全标准化研究》
- 浙江大学：具身智能安全治理
- 中科院：智能算法安全：内涵、科学问题与展望
- CCSP更新丨CCSP考试大纲将于2026年8月1日更新
- 送了二十万单外卖，却送不来一单"回本"
- UI可爱又能打：给Hermes Agent套个Web壳部署实录
- 精品产品 | 捷普WEB应用防火墙系统
- 精品产品 | 捷普WEB应用漏洞扫描系统
- 精品产品 | 捷普漏洞扫描系统
- 精品产品 | 捷普日志审计分析系统
- 精品产品 | 捷普信息审计系统
- AI Native知识普惠工程（三）：AI编排能力分享，带你从 Prompt 走向 Workflow
- AI 渗透测试背后的 Cairn
- AI安全案例分析：Prompts Become Shells —— 从提示词注入到AI Agent远程代码执行（RCE）
- 华青融天入选嘶吼 2026 网络安全产业图谱，安全运营实力再获权威产业研究机构认可
- CNVD漏洞周报2026年第19期
- 上周关注度较高的产品安全漏洞(20260511-20260517)
- 网安周报｜一周全球网安重大事件速览（5.11—5.17）
- IPv6网络地址管理和防探测技术
- 四项金融行业标准获批发布
- 【AI代码审计工具】ai自动代码审计平台
- 每日一段子
- 开始起飞
- 一图读懂 | 公共安全行业标准GA/T 1390.8—2025 《信息安全技术 网络安全等级保护基本要求 第8部分：IPv6网络安全扩展要求》
- 从零信任到“零信任+”：网络安全范式的演进与创新
- 东北师范大学携手绿盟科技 共筑产学研深度融合示范高地
- 第144期 | GPTSecurity周报
- Microsoft Security Blog
- 安全客-有思想的安全新媒体
- Recent Commits to cve:main
- ElcomSoft blog
- Sucuri Blog
- Private Feed for M09Ic
- kpcyrd contributed to kpcyrd/debian-repro-status
- bolucat released 202605182152 at bolucat/Archive
- kpcyrd contributed to kpcyrd/rebuilderd
- mgeeky starred iamsopotatoe-coder/TinyLoad
- Teach2Breach forked Teach2Breach/ATO-Via-Password-Reset from wadgamaraldeen/ATO-Via-Password-Reset
- Teach2Breach starred wadgamaraldeen/ATO-Via-Password-Reset
- kpcyrd contributed to kpcyrd/repro-threshold
- mgeeky starred scrt/KexecDDPlus
- gh0stkey starred Zoo-Code-Org/Zoo-Code
- 0xbug starred HacktronAI/skills
- future-architect released v0.39.1 at future-architect/vuls
- PrefectHQ released 3.7.2.dev1 at PrefectHQ/prefect
- Ridter forked Ridter/CVE-2026-46333 from 0xBlackash/CVE-2026-46333
- Ridter starred 0xBlackash/CVE-2026-46333
- liamg contributed to infracost/lsp
- liamg contributed to infracost/cli
- lz520520 starred orinimron123/CVE-2026-40369-EXPLOIT
- panjf2000 starred msitarzewski/agency-agents
- gh0stkey starred waybarrios/vllm-mlx
- whwlsfb starred aprillz/MewUI
- Rvn0xsy starred anthropics/financial-services
- CHYbeta starred deusyu/harness-engineering
- WAY29 starred Evol-ai/SkillCompass
- gynvael.coldwind//vx.log (en)
- obaby 𝐢𝐧⃝ void
- Horizon3.ai
- Bug Bounty in InfoSec Write-ups on Medium
- Securelist
- SentinelOne
- Malwarebytes
- Intigriti
- shubs
- Wallarm
- 绿盟科技技术博客
- 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台
- 奇客Solidot–传递最新科技情报
- 黑鸟
- 雷神众测
- 代码卫士
- 安全内参
- 绿盟科技研究通讯
- 漕河泾小黑屋
- 威努特安全网络
- 中国信息安全
- 看雪学苑
- 奇安信威胁情报中心
- 安全圈
- 安全牛
- 极客公园
- 数世咨询
- OPPO安全中心
- 火绒安全
- 陌陌安全
- 吴鲁加
- 字节跳动技术团队
- 情报分析师
- 表图
- 迪哥讲事
- 深信服千里目安全技术中心
- 安全行者老霍
- NISL实验室
- NETRESEC Network Security Blog
- 360数字安全
- Forensic Focus
- Over Security
- INTERPOL ‘Operation Ramz’ seizes 53 malware, phishing servers
- Experts warn of privacy risks as AI firms looks to connect to financial accounts
- SHub macOS infostealer variant spoofs Apple security updates
- Addi - 34,532,941 breached accounts
- What to Do When a Third-Party Data Breach Puts Your Website at Risk
- More than 200 arrested in cyber raids aimed at Middle East scam networks
- CISA Admin Leaked AWS GovCloud Keys on Github
- 5 Steps to Managing Shadow AI Tools Without Slowing Down Employees
- Grafana refuses to pay ransom after codebase theft
- Leaked Shai-Hulud malware fuels new npm infostealer campaign
- Mythos e il bug scovato in macOS: con l’AI il patch management deve cambiare passo
- Le nuove infrastrutture per l’AI partono da un approccio “security first”
- Grafana says stolen GitHub token let hackers steal codebase
- Keatrix: un nuovo approccio di Security Awareness
- VPN gratis senza rischi: come sfruttare i periodi di prova di 4 provider leader
- IT threat evolution in Q1 2026. Non-mobile statistics
- IT threat evolution in Q1 2026. Mobile statistics
- Microsoft testing adjustable taskbar, Start menu in Windows 11
- ANY.RUN Turns 10: Special Offers for Stronger Security Operations
- NFC Relay Goes Local: How AI Is Accelerating a New Wave of Independent Malware Developers
- L’IA che combatte l’IA: quando la guerra cibernetica smette di avere un volto umano
- MiniPlasma: la patch del 2020 su Windows che non c’è mai stata o è sparita
- Dubai Police Warns Against Viral Energy Drink Videos Targeting Children on Social Media
- Introducing Group-IB Prevyn AI
- Microsoft confirms Windows 11 security update install issues
- Exploit available for new DirtyDecrypt Linux root escalation flaw
- NCSC Calls for Tight Security and Human Oversight as Agentic AI Use Expands
- Shadow AI Is Growing in Silence While Enterprise Security Falls Behind
- Hackers earn $1,298,250 for 47 zero-days at Pwn2Own Berlin 2026
- Since When Did Asking for Evidence Become “Defending Criminals”?
- 安全419
- CNVD漏洞平台
- SANS Internet Storm Center, InfoCON: green
- Have I Been Pwned latest breaches
- 悬镜安全
- Schneier on Security
- ICT Security Magazine
- Troy Hunt's Blog
- Tor Project blog
- LockBoxx
- Trend Micro Research, News and Perspectives
- Krebs on Security
- Deeplinks
- www.theregister.com - Articles
- Do fear the Reaper - stealer swipes macOS users' passwords, wallets, then backdoors them
- Shai-Hulud copycat worm infects yet another npm package
- Linux kernel flaw opens root-only files to unprivileged users
- TanStack weighs invitation-only pull requests after supply chain attack
- NGINX Rift attackers waste no time targeting exposed servers
- Poland directs officials to ditch Signal in favor of 'secure' state-developed alternative
- F-35 software delays leave UK buying time with US glide bombs
- Mozilla warns UK: Breaking VPNs will not magically fix Britain's age-check mess
- Grafana Labs admits all its codebase are belong to someone who popped its GitHub account
- Security Affairs
- Grafana confirms GitHub token breach cybercrime group claims the attack
- ShinyHunters hack 7-Eleven: franchisee data and Salesforce records exposed
- Public Amazon bucket leaks sensitive guest data from Japanese hotel platform Tabiq
- Chaotic Eclipse discloses MiniPlasma zero-day, suggesting a missing or undone 2020 Windows security fix
- Experts warn of active exploitation of critical NGINX flaw CVE-2026-42945
- The Hacker News
- INTERPOL Operation Ramz Disrupts MENA Cybercrime Networks with 201 Arrests
- ⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More
- How to Reduce Phishing Exposure Before It Turns into Business Disruption
- Developer Workstations Are Now Part of the Software Supply Chain
- Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws
- MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems
- Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware
- Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulations
- 网安寻路人
Activity
MichisGitIsKing commentedon May 19, 2026
/attempt #1244
I'd like to work on this bounty. Starting implementation now.