Repository navigation
[每日信息流] 2026-09-22 #1372
Description
每日安全资讯（2026-09-22）
- 安全客-有思想的安全新媒体
- Paper - 知道创宇404实验室
- SecWiki News
- Darknet – Hacking Tools, Hacker News & Cyber Security
- Doonsec's feed
- AI 能自主做安全研究吗？PortSwigger 用 700 个漏洞回答：能
- 一夜之间近百G数据被锁死：这波 .weax 勒索病毒，专挑中小企业
- 10月17日专题会议：新型网络体系与行为智能分析学术会议
- 一场假面试引发的入侵
- 两艘油轮接连被黑？美国海岸警卫队和FBI紧急登船
- Jev 刷屏：一个「不会说话」的 AI 模型，和围绕它的三场争论
- 上海生育津贴最高能拿20万+？大厂媳妇21万到账，普通人差在哪
- 某公众号 RSS 平台存在未授权 RCE：从模板注入到内存马
- 红队面经，红队高频面试题分享与拆解
- 提示注入的形式化理论与不可能性
- 10月17日专题会议：人工智能安全前沿学术会议
- Jev 最不适合干的活，可能就是告警研判
- 越贵反而越慢？iPhone 18 Pro Max 顶配实测掉到 25MB/s，我劝你先别急着下单
- PAYLOAD勒索软件滥用活动目录组策略破坏整个Windows域
- 行业资讯｜亚信安全完成第三届董事会换届，核心团队平稳过渡，网安主业增长但整体仍承压
- 一 Key 通万模，尽享 AI
- 网安秋招警惕“假面试”投毒：已有3万台设备中招
- [2026 京津冀蒙 & ccb 初赛] TicketSage_智能工单助手（RAG 投毒）
- AI辅助漏洞挖掘三种失真：边界、上下文、多 agent 同步
- 9月AI圈彻底炸了！GPT-6、Claude 5.1、Grok 4.7、DeepSeek V4.1 集体发布，十万卡时代来了！
- （9.1分）CVE-2026-94098：Netcore 路由器固件升级接口命令注入
- 麦肯锡：2026技术趋势展望
- 低谷期千万别长期宅家，好offer都是学网安拿到的
- 应急响应之公交车系统应急排查
- 每天学一个 Kali 工具 · Day21 nikto：Web 服务器的老牌"体检医生"
- Shellshock CGI 注入与 ftplib.py 组权限提权：Symfonos3 靶机实战
- 媳妇在字节生个娃，生育金21万：公务员老公破防了
- 智谱开源！真把“裤子脱了”给社区看了
- 喜报 | 国舜SCA成功中标某城商行软件成分分析系统采购项目
- 秦安：人民军队更强大的利好消息！评张又侠、刘振立严重违纪违法被开除党籍军籍。
- 秦安：从胡塞武装手中订购F-35残骸，或成为现实，美向沙特出售48架先进战机，必将面临重大挫败！
- 长三角安全人工智能安徽省实验室发布三大治理方案，AI安全迎来新解法
- 专家解读 | 王志勤：完善未成年人网络保护规则 护航信息时代未成年人健康成长
- 专家解读 | 王江：顺应人工智能技术和应用发展趋势xa0构建人工智能安全治理新范式
- 前沿 | 为破解全球人工智能治理难题提供行动遵循
- 评论 | 数据库升级筑牢数字经济底座
- 评论 | 重视医疗智能体的应用与治理
- 快手技术沙龙精彩回顾｜聚焦 Data Agent，共探数据生产与智能决策新范式
- 国内首部智能体安全漏洞治理蓝皮书发布！
- 关基行业网安宣教行动：国网武汉供电公司
- 网络安全进基层 | 进机关：走进武汉市科技创新局 面对面讲解学网安
- 网络安全进基层 | 进机关：武汉地区网络安全宣传活动走进市数据局
- 网络安全进基层 | 进机关：走进武汉边检站 边检网安专题行
- 网络安全进基层 | 进学校：走进武汉设计工程学院 趣味互动学网安
- 网络安全进基层 | 进学校：走进首义学院 网安宣传进高校
- 网络安全进基层 | 进学校：走进武汉学院 筑牢校园网安防线
- 网络安全进基层 | 进学校：走进沙湖实验学校 网安科普进校园
- 行业资讯｜网络安全项目中标情况汇总（9月21日）
- 中年失业第 100 天：老婆终于说出了那句话
- 广西自治区交通运输厅党组书记、厅长刘可与奇安信集团董事长齐向东进行座谈
- 奇安信出席2026中国无线电大会 携手共建电磁空间安全技术与产业发展联合实验室
- 奇安信亮相第23届中国—东盟博览会
- CC通关必备：考试大纲
- 2026年“美亚杯”赛前备赛篇
- Private Feed for M09Ic
- strands-agents released harness-cli/v0.1.0 at strands-agents/harness-sdk
- bolucat released 202609212353 at bolucat/Archive
- pydantic released v1.0.0-beta.2 at pydantic/monty
- mgeeky starred mubix/ai-ctf
- strands-agents released harness-python/v0.1.1 at strands-agents/harness-sdk
- pydantic released v1.0.0-beta.1 at pydantic/monty
- itm4n released 2026.09.21-1 at itm4n/PrivescCheck
- OpenAEV-Platform released 3.260921.0 at OpenAEV-Platform/openaev
- Rvn0xsy made this repository public
- liamg contributed to infracost/go-proto
- mgeeky starred entropykit/entropia
- niudaii starred jlcodes99/cockpit-tools
- liamg contributed to infracost/proto
- gh0stkey starred NandhaKishorM/laya
- ZeddYu starred trailofbits/coop
- niudaii starred browser-use/jev-ultrafast
- Mr-xn starred tamaratran/fast-jev-compaction
- safedv starred nmht3t/OneDrive-UDC2
- timwhitez starred tamaratran/fast-jev-compaction
- esrrhs starred TianyuCodings/NanoJev
- Mr-xn forked Mr-xn/ZCode from zai-org/ZCode
- Mr-xn starred zai-org/ZCode
- ring04h starred tailscale/tailcat
- gh0stkey starred zai-org/ZCode
- Recent Commits to cve:main
- Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- apk-medit v0.2.7
- GPOZaurr v1.1.11
- KTO v3.0.1
- v2ray-core v5.54.0
- mobsfscan v1.0.1
- DockSec v2026.9.21
- ironcurtain memory-mcp-server/v0.2.1
- vopono v1.0.2
- KubeArmor v1.7.6-rc1
- owasp-ctf-in-a-box
- GitVault
- ida-pro-mcp
- hol-guard
- dnspython
- JavaSecLab
- owasp-ctf
- holos v0.6.3
- node9-proxy v2.16.2
- JShunter v0.8
- pwndbg v2026.09.15
- Zircolite v4.0.0
- conpot v1.0.0
- APT-Hunter V4.0
- phantom-frida v17.16.4-20260920-run41.1
- netwatch v0.32.3
- brave-browser v1.98.12
- Antiphishing v35456910988
- Lenny Zeltser
- Malware-Traffic-Analysis.net - Blog Entries
- Malwarebytes
- The AI plot to scan and destroy books (Lock and Code S07E19)
- The fake sites using a cheap toolkit to sell $2,000 AI subscriptions
- Gemini’s breach of real companies exposes an AI guardrail problem
- ShinyHunters hacks rival extortion gang and takes over its dark web site
- A week in security (September 14 – September 20)
- Securelist
- Reverse Engineering
- Intigriti
- GuidePoint Security
- HackerNews
- The Trail of Bits Blog
- 奇客Solidot–传递最新科技情报
- rtl-sdr.com
- 微步在线研究响应中心
- 威努特安全网络
- 黑鸟
- 安全内参
- 安全客
- 代码卫士
- Shostack & Friends Blog
- 青衣十三楼飞花堂
- 安全分析与研究
- 中国信息安全
- 信息安全国家工程研究中心
- 微步在线
- M01N Team
- 补天平台
- 数世咨询
- 安全圈
- 极客公园
- 看雪学苑
- 网络空间安全科学学报
- 安全牛
- 青藤云安全
- 火绒安全
- 慢雾科技
- 字节跳动技术团队
- 奇安信威胁情报中心
- 情报分析师
- T00ls安全
- OnionSec
- 墨菲安全
- Over Security
- BigCommerce alerts merchants of data breach linked to Ribon apps
- Turn a Rooted Android Phone into an NFC Authenticator and Automation Tool for Your PC
- CISA alerts of active exploitation of three Linux kernel flaws
- RSA-896
- EU data regulator fines Google more than $460 million for location data violations
- WordPress Click2Shell flaw lets hackers execute PHP on the server
- Microsoft to retire Microsoft 365 Companion apps in December
- Google fined €403 million over location data privacy violations
- Belgian table tennis, gymnastics federations hit by cyberattacks
- Cyber Exposure Management: perché conoscere il rischio non basta più
- Microsoft fixes broken Excel copy and paste for all Office users
- Cyberattack hits University of Munich, potentially exposing student financial data
- Cyber resilience e Zero Trust: perché fermare il movimento laterale è diventato decisivo
- ShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment
- FBI's CJIS v6.1: What Security Teams Need to Know.
- Burger King Russia - 3,155,792 breached accounts
- Microsoft reminds admins to migrate Entra ID users to passkeys
- Hash Identifier Tools – Command-Line Password Hash Identification
- LinkedIn wins court order blocking mass scraping of user data
- Google says Gemini breached three companies during security test
- Digital Freedom Fund impact story about us
- Launching Reversing the Gaze: a New Handbook for Investigating Workplace Apps
- Microsoft: September updates break File History backup feature
- WaterPlum Hackers Steal $10.7M in Crypto From IT Workers
- Boustead Singapore Reveals Cybersecurity Incident at Overseas Unit
- Russia reports thousands of cyberattacks on election infrastructure during vote
- Revolut: la paper compliance e la favola della PEC come e-mail sicura
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- Hosting WordPress gestito e sicurezza cloud: l’architettura ad alta disponibilità con AI integrata di Ionos
- Commerciale o open source, l’AI in azienda tra rischi noti e trappole nascoste
- IntelTechniques by Michael Bazzell
- IT Service Management News
- NETRESEC Network Security Blog
- 安全419
- SANS Internet Storm Center, InfoCON: green
- Krypt3ia
- CNVD漏洞平台
- Schneier on Security
- Have I Been Pwned latest breaches
- TorrentFreak
- Daniel Miessler
- Instapaper: Unread
- KitPloit - PenTest Tools!
- apk-medit v0.2.7
- GPOZaurr v1.1.11
- KTO v3.0.1
- v2ray-core v5.54.0
- mobsfscan v1.0.1
- DockSec v2026.9.21
- ironcurtain memory-mcp-server/v0.2.1
- vopono v1.0.2
- KubeArmor v1.7.6-rc1
- owasp-ctf-in-a-box
- GitVault
- ida-pro-mcp
- hol-guard
- dnspython
- JavaSecLab
- owasp-ctf
- holos v0.6.3
- node9-proxy v2.16.2
- JShunter v0.8
- pwndbg v2026.09.15
- Zircolite v4.0.0
- conpot v1.0.0
- APT-Hunter V4.0
- phantom-frida v17.16.4-20260920-run41.1
- netwatch v0.32.3
- brave-browser v1.98.12
- Antiphishing v35456910988
- Computer Forensics
- Security Affairs
- Google Fined €403 Million Over Location Data Practices
- Foreign Hackers Target Two Colorado Water Utilities
- ChainScript: the RAT that hides its command server inside a blockchain contract
- A BYD Shark 6 Hack Shows the Risks of Connected Cars
- The Target Is No Longer the Model. It’s the Agent.
- UK Police Data Faces Long-Standing Microsoft Cloud Security Concerns
- www.theregister.com - Articles
- Anthropic-linked CVEs pile up, attackers mostly shrug
- Meta Muse AI app flaw lets local malware redirect dictation traffic
- Treasury chief says AI bosses, not their bots, will carry the can for criminal acts
- Clop gets a taste of its own medicine after ShinyHunters hijack leak site
- Rustaceans warned of job interviews with a malicious payload
- ICT Security Magazine
- The Hacker News
- Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
- Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto
- Google Fined €403 Million Over GDPR Violations Tied to Location Data
- ⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks
- TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data
- ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
- Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
- Deeplinks
- 网安寻路人
- Project Zero
Activity