Repository navigation
[每日信息流] 2026-09-29 #1379
Description
每日安全资讯（2026-09-29）
- Private Feed for M09Ic
- bolucat released 202609290107 at bolucat/Archive
- spf13 contributed to kenn-io/msgvault
- skosovsky released v0.2.5 at skosovsky/okf
- liamg made this repository public
- anthropics released v2.1.284 at anthropics/claude-code
- huoji120 forked huoji120/sub4api from MACOS-DO/sub4api
- timwhitez starred alibaba/open-code-review
- huoji120 starred saileaxh/ccodex
- esrrhs starred esrrhs/fastremove
- xgo-dev released v1.0.6 at xgo-dev/llgo
- safedv starred h4ckf0r0day/obscura
- xgo-dev released v1.0.5 at xgo-dev/llgo
- wh0amitz starred dagowda/notRDP
- agentscope-ai released v2.0.9 at agentscope-ai/agentscope
- Ascotbe starred fzlzjerry/wechat-antirecall
- mgeeky starred 0xhackerfren/ProcMon-MCP
- SecWiki News
- Verne in GitHub
- Darknet – Hacking Tools, Hacker News & Cyber Security
- Recent Commits to cve:main
- obaby 𝐢𝐧⃝ void
- Microsoft Security Blog
- Doonsec's feed
- 朝鲜IT工人团伙开始利用女性进行活动
- 第174篇：Python 型内存马注入与沙箱逃逸（记一次应急响应中的内存马样本分析）
- 信息收集不是扫端口：真正决定成败的是开工前那七十二小时
- 全球安全动态日报｜20260928｜早
- 情报分析师培训课程（一）情报学导论与职业素养（1）
- 一次遗憾的渗透，差最后一步 getshell
- PHP 把 Bearer Token 发给了无关的第三方：curl 在 2018 年修好的坑，PHP 拖到 2026 年
- 全球三大飞机发动机制造商之一数据泄露
- 宇树创新低，从1100跌到459，蒸发2500亿元！不是机器人不行，是“市梦率”退烧了
- AI-vs-AI的对抗博弈理论
- AI的核心用途，是扩大人类能够负担的搜索范围，以及降低可核验的认知工作的处理成本
- 你忽略了网络安全行业的残酷
- 漏洞挖掘和红队工作技能包 - Claude-BugHunter
- 降级窗口关了：升 iOS 27 的，回不去 iOS 26 了
- 不用 WriteProcessMemory 的进程注入：借控制台命名管道把载荷写进远程进程
- 华为HiSecEngine USG6855G通过中国电子技术标准化研究院赛西实验室首批人工智能防火墙测评
- 【困难】某行业攻防演练
- (10分) CVE-2026-101001：Netcore路由器未鉴权命令注入
- AI时代下红队新工作方式
- 秦安：是生死之争，不是好坏之分！中国8月对日稀土出口翻了将近一倍，为什么？
- 秦安：这里只有批斗，没有行动，谁是最大障碍？
- 罗永浩遭投资人举报偷税漏税！回应来了
- 跟老公双双失业在家，家里共200w左右，没房贷，准备要小孩，有京户，也不想回老家，年纪都是80后，未来该咋办？
- 哈工程20名同学因“翻墙”被警告处分！网传是差一名无缘保研的同学举报的
- 私有化部署，开箱即用，轮式四足机器狗 AI 巡检平台，自主定位、全局路径规划、动态避障、实时图像回传、人工远程接管
- CSA大中华区大会 | 李雨航强调AI时代，安全有三个"不变"
- 如何免费获取专业的全球AI安全简报
- 2026年"经纬杯"交通运输网络安全大赛报名火热进行中
- 关于举办2026年“黄鹤杯”网络安全人才创新大赛决赛的通知
- 2026年福建省大学生数据安全大赛9月30日开始报名！
- 赛查查喊你来投票！ | 投出你最喜欢的安全赛事
- 个保竞赛 | 初赛组委会中国电建北京院成功承办2026北京市职工职业技能大赛个人信息保护合规管理员竞赛（初赛）
- 2026 年网安联北京教育行业 SRC 众测挑战赛获奖名单公告
- 2026腾讯游戏安全初赛Android题解
- PKWCTF新生RE-“看看就好”
- 【世界杯专题02】直播的三套技术底座，如何实现 3 周交付 40+ 需求、千万级 PCU 零事故
- 赛事升级｜ 第十二届“美亚杯”与时俱进，提档升级
- AI 灭种论，我们认真验算了一遍
- 【安全圈】苹果崩了
- 【安全圈】Citrix曝双严重零日漏洞
- 【安全圈】Cloudflare容器曝隔离漏洞：残余数据可跨租户窃取
- 基于Ai自主代码审计的红队Agent，真正做到审计出漏洞
- 湖北省数据局等七部门关于印发《关于促进互联网和相关服务业高质量发展行动方案（2026—2028年）》的通知
- 关于VSRC 恢复运营通知
- 活动回顾 | 第三期复旦白泽青年学者论坛
- 智能汽车车载网络通信安全架构深度解析
- CAN总线详解
- Horizon3
- Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- Malwarebytes
- Reverse Engineering
- HackerNews
- 绿盟科技技术博客
- 奇客Solidot–传递最新科技情报
- 威努特安全网络
- 看雪学苑
- 黑鸟
- rtl-sdr.com
- KhanfarRX: Mayhem External App for the PortaPack H4M with Band Plan Tuning, Band Lock, EIBI “On Air Now” and FT8 Geo Map
- Turning a Smartphone’s Speaker Amplifier into a Silent Intentional VHF Morse Transmitter
- Elektro-L3 Now Drifting West to 14.5°W: L-Band xRIT Could Return to Western Europe in October
- 安全分析与研究
- 奇安信威胁情报中心
- 腾讯安全威胁情报中心
- 数世咨询
- 安全圈
- 安全内参
- 唯品会安全应急响应中心
- 复旦白泽战队
- KCon 黑客大会
- 国家互联网应急中心CNCERT
- 信息安全国家工程研究中心
- 代码卫士
- 火绒安全
- 电子物证
- 中国信息安全
- 情报分析师
- 极客公园
- OnionSec
- Qualys Security Blog
- CNVD漏洞平台
- Over Security
- Japan's Keio confirms ransomware attack disrupted business systems
- Times Car confirms data breach affecting 6.6 million user accounts
- Dutch police confirm arrest in ShinyHunters hacking investigation
- ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns
- Misconfigured Supabase apps expose data in over 16,000 databases
- New Mexico jury finds Meta deceived consumers about data privacy practices
- US, UK warn of exploited Citrix NetScaler zero-day bugs
- La frode a Fideuram e la teoria della verità predefinita: cosa impariamo
- JadePuffer agentic AI attacks target Azure, destroy cloud resources
- AI, migliaia di incidenti cyber: è difficile governare sistemi sempre più autonomi
- Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
- Tutto al DPO? L’AI Act riapre il problema della governance nelle aziende
- 80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjacking
- Account WhatsApp compromessi su iPhone con iOS 16: l’attacco 0click che bypassa i dispositivi collegati - Forenser Srl
- Cyberattack on Polish medical software provider exposed patient data
- Continuous compliance: perché la conformità cyber deve passare dalla fotografia al processo
- Attack Surface Management in 2026: Why Point-in-Time Scans Can’t Keep Up With Cloud Sprawl
- Former US soldier gets nearly six-year sentence for hacking, extorting telecoms
- Proton VPN: 168 euro di risparmio con l’offerta biennale a 2,99 euro al mese tra giurisdizione svizzera e codice open source
- From BlackCat to Panda Workshop: Inside the Evolving C2 Panel Behind RATHat
- Renfe Cyberattack Hits Spain’s Rail Network as AI Role Probed
- Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist
- Agenti AI sotto attacco: come la contaminazione dell’ambiente inganna le difese cyber
- Citrix NetScaler Hit by Two Critical RCE Flaws Already Under Attack
- Gestione dei rischi cyber degli agenti IA: i 4 limiti delle regole europee
- US soldier gets 70 months in prison for extorting 10 tech, telecom firms
- Kiteworks Systems Went Offline After Federal Threat Warning
- http-terminator – AI-Assisted HTTP Request-Smuggling Discovery
- Cyberattack Disrupts Police Systems in Wales, Staff Data Under Investigation
- CISA orders feds to patch exploited Citrix flaws by Wednesday
- 希潭实验室
- Dark Space Blogspot
- 安全419
- ICT Security Magazine
- Javvad Malik
- SANS Internet Storm Center, InfoCON: green
- Daniel Miessler
- huasec
- KitPloit - PenTest Tools!
- Schneier on Security
- Deeplinks
- Security Affairs
- AI Accounts Are Becoming the New Target for Infostealers
- Nearly 400,000 Medicaid Beneficiaries Caught in Medicaid and DC Healthcare Alliance Data Exposure
- Storm-3168, Linked to JADEPUFFER, Abused Stolen Azure Identities
- U.S. CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog
- Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild
- Krebs on Security
- www.theregister.com - Articles
- JadePuffer crims hijacked Azure identities and used them to blow up cloud resources
- Ex-soldier's telecom hacking spree earns him 70 months
- Certainties in life: Death, taxes, and critical Citrix vulns under attack
- OpenAI pauses some training amid allegations its rogue agents behaved more badly than first thought
- Troy Hunt's Blog
- The Hacker News
- Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks
- Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks
- IAM for AI agents: A Practical Enterprise Framework
- Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M
- RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims
- ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
- Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI
- Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
- JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources
- CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally
- TorrentFreak
- Security Weekly Podcast Network (Audio)
- 君哥的体历
Activity