Repository navigation
[每日信息流] 2026-09-25 #1375
Description
每日安全资讯（2026-09-25）
- Microsoft Security Blog
- Private Feed for M09Ic
- bolucat released 202609242322 at bolucat/Archive
- strands-agents released harness-cli/v0.1.3 at strands-agents/harness-sdk
- anthropics released v2.1.282 at anthropics/claude-code
- esrrhs contributed to esrrhs/spp
- strands-agents released mcp/v0.3.0 at strands-agents/harness-sdk
- huoji120 starred lordx64/phantom-kv
- Mr-xn starred yu1745/wetype-ime-linux
- pydantic released v1.0.0-beta.3 at pydantic/monty
- huoji120 forked huoji120/cyberkimi-benchmarks from lordx64/cyberkimi-benchmarks
- huoji120 starred lordx64/cyberkimi-benchmarks
- timwhitez starred NandhaKishorM/laya
- safedv starred ricardojoserf/CrystalPotato
- gh0stkey starred nex-agi/Nex-N2.5
- whwlsfb starred yaklang/javajive
- future-architect released v0.41.0-rc.1 at future-architect/vuls
- pydantic released v2.49.0 at pydantic/pydantic-ai
- timwhitez starred tihanyin/REx-skill
- Mel0day starred riba2534/claude-opus-5-5-demo
- 安全客-有思想的安全新媒体
- ElcomSoft blog
- Doonsec's feed
- arighi's blog
- SecWiki News
- Blog on STAR Labs
- Der Flounder
- Paper - 知道创宇404实验室
- Recent Commits to cve:main
- Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- Securelist
- Malwarebytes
- GuidePoint Security
- Reverse Engineering
- HAHWUL
- Lenny Zeltser
- text/plain
- HackerNews
- 奇客Solidot–传递最新科技情报
- 腾讯玄武实验室
- 黑鸟
- 威努特安全网络
- 代码卫士
- 微步在线研究响应中心
- 安全分析与研究
- Shostack & Friends Blog
- 安全内参
- 中国信息安全
- 安全研究GoSSIP
- 数世咨询
- 奇安信 CERT
- 安全学术圈
- 安全牛
- NOVASEC
- 京东安全应急响应中心
- 看雪学苑
- 奇安信威胁情报中心
- 极客公园
- 字节跳动安全中心
- OPPO安全中心
- 国家互联网应急中心CNCERT
- 网络空间安全科学学报
- 火绒安全
- 云鼎实验室
- 情报分析师
- TrustedSec
- 慢雾科技
- 奇安信病毒响应中心
- huasec
- 墨菲安全
- 安全419
- DEF CON Announcements!
- 悬镜安全
- Over Security
- MacSync malware uses public iCloud calendars to deliver new payloads
- Digital forensics firm with US federal contracts covered up ties to Russia, DOJ alleges
- Lawmakers introduce bill for voluntary telecom cyber rules after Salt Typhoon hacks
- Bitdefender crea una VPN per gli agenti AI
- New Carbonato malware uses AI agents to hijack exposed Docker hosts
- Rydox cybercriminal marketplace operator pleads guilty following co-conspirator brothers’s deportation
- Trust and the enticing consultancy offer
- Exposed GitLab project email addresses let attackers push code
- Caso Revolut: girano documenti di ministeri, quanto è grave
- dfir.ch
- The .zshrc.zwc You Forgot to Check
- OpenAI, un agente AI viola un sistema governativo australiano: cosa non ha funzionato
- Quantum-safe network: perché la cybersecurity deve prepararsi all’era post-quantistica
- One Tap Too Far: Using Shortcuts to Bypass Chrome for iOS Call Prompts
- FedRAMP VDR & VER: Daily Scans Are Only the Beginning
- Compliance e cyber security: perché la governance non può più essere gestita a silos
- Kyiv internet providers report major outages after Russian attacks damage data centers
- MintsLoader via PEC: falsi solleciti di pagamento per diffondere malware
- Astrana latest healthcare tech firm to report data breach to SEC
- Hackers now exploit critical Roundcube flaw in code injection attacks
- OpenAI agent breached Australian government health website, Albanese says
- How Can You Tell if a Domain Is Malicious?
- Ionos azzera il costo del piano Plus per 12 mesi per spingere le PMI europee online
- Windows 11 KB5124010 update released with 46 changes and fixes
- Offerta NordVPN: sconti fino al 75% e tre mesi gratis per il cyber mese
- Falso sito del Servizio Sanitario Nazionale distribuisce StreamRat su Android e XWorm su Windows
- CISA: Ransomware gangs now exploiting critical TeamCity flaw
- MacSync under the microscope: new delivery methods and a new payload
- ENISA Threat Landscape 2026: il rischio cyber corre lungo la supply chain
- OpenAI hacked Australian Medicare govt site, probed data providers
- Apache Tomcat Update: 12 Security Flaws Fixed in Tomcat 11.0.26
- Che cosa sono le ambasciate dei dati
- No One Gets Phished: The New Group-IB Browser Agent Applies Predictive Intelligence At The Click.
- L’era degli hacker “Gentlemen”: perché la lotta al ransomware richiede nuove strategie difensive
- Microsoft fixes bug that broke Windows File History backup feature
- OT Security: la resilienza industriale nell’era della convergenza con l’IT
- Latvia Hacker Arrested Over TSC Data Theft and Extortion Attempt
- OpenAI AI Agent Breaches Australian Government Website, Albanese Demands Answers
- Ofcom Investigates Pornhub Parent Aylo Over Age Checks
- http://localhost:1313/posts/__tweet/
- Living Inside the Shell: zsh Modules on macOS
- Yak Project
- SANS Internet Storm Center, InfoCON: green
- Schneier on Security
- Instapaper: Unread
- There's a new way to break RSA that's faster than anything we've seen before
- Low-Level Extraction the Apple TV 4K 2nd Generation
- Corrobora – Cross-Artifact Consistency Analysis For Windows Digital Forensics
- UE, il ransomware resta la principale minaccia cyber
- Perché il data breach all’FBI è un problema di sicurezza internazionale
- Low-Level Extraction of the Apple Watch S4S5
- The Hacker News
- Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions
- ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories
- Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content
- Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer
- Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls
- Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore
- 17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360
- OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files
- TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords
- Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure
- Deeplinks
- www.theregister.com - Articles
- Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs
- Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
- Decades-old file security flaws found in Android, Linux, macOS, and Windows
- CVE flood pushes Ubuntu onto weekly kernel release cycle
- Someone went shopping in ASUS's eShop – for customer data
- Google to critical infra orgs: Our AI scanners won't be evil, promise
- Government contractor exposed path to immigration records
- OpenAI agents ‘infiltrated Australian government website’
- IndexSec
- Security Affairs
- KitPloit - PenTest Tools!
- GRAHAM CLULEY
- Blackhat Library: Hacking techniques and research
- Daniel Miessler
Activity