Repository navigation
[每日信息流] 2026-09-30 #1380
Description
每日安全资讯（2026-09-30）
- Private Feed for M09Ic
- anthropics released v2.1.285 at anthropics/claude-code
- freqtrade released 2026.9 at freqtrade/freqtrade
- timwhitez contributed to timwhitez/neocloud-sec
- Fplyth0ner-Combie starred ekkoo-z/Z-Godzilla_ekp
- killeven starred TanStack/query
- gh0stkey starred yetone/magpie
- future-architect released v0.41.0-rc.2 at future-architect/vuls
- liamg contributed to infracost/proto
- esrrhs contributed to esrrhs/fakecc
- Gaurav-Gosain released v0.8.1 at Gaurav-Gosain/tuios
- gh0stkey starred longbridge/gpui-fast
- timwhitez starred elder-plinius/T3MP3ST
- esrrhs contributed to esrrhs/fakelua
- SecWiki News
- bunnie's blog
- Sploitus.com Exploits RSS Feed
- xss-methodology exploit
- Relapse-Exploit
- ps5 exploit
- Exploit for Injection in Arjunsharda Searchor
- exploit
- Relapse-Exploit-13.40-local
- Relapse-Exploit-Before
- Exploit for PHP Remote File Inclusion in Wordpress
- vestigium exploit
- MyModel exploit
- SymaX5SW-Rx-Tx exploit
- bulk_extractor exploit
- Mortimer exploit
- relapse-exploit
- kali-rpi-luks-crypt exploit
- OWASPBugBounty exploit
- ngxray exploit
- CVE-2019-8781-macOS exploit
- CVE-2025-1094-PoC-Postgre-SQLi exploit
- sshroute exploit
- Armin Ronacher's Thoughts and Writings
- Doonsec's feed
- 每周文章分享-278
- 2026湾区杯 web部分
- 解密对话式AI背后的广告追踪风险
- 不用安装，一次import就中招？MemTensor 投毒拆解
- article
- 【高危漏洞预警】Citrix NetScaler ADC / NetScaler Gateway预认证命令注入远程代码执行漏洞CVE-2026-88771
- CVE-2026-101909 深度解析：Axios 不是漏洞入口，而是原型污染的「放大器」
- 前大疆员工爆料：不管你在哪上班，如果你现在处在一个“冷淡”的办公环境，大家都淡淡的，各干各的，这可能才是最舒服健康的环境。
- 【地图大师的代码审计之路 第二篇】从代码层看懂越权与未授权漏洞为何如此高发
- 架构安全的理论基础
- Win11安装的若干Tips
- 全新版本-天书安全捆绑工具
- DeepSeek 新论文，支撑大规模Agent训练的沙箱基础设施
- 当Claude遇上Metasploit：一句话从Root Shell到域控SYSTEM全流程
- 半价活动
- 重磅预告｜许进教授将在2026年网络空间安全学术会议作主旨报告
- 【漏洞预警】Citrix NetScaler 命令注入漏洞
- Master V3.0 专为后渗透而生-结合agent首发
- 54款大模型测出873个漏洞，网安生该学什么？
- iOS 26.7.1 发布了：一个已经被用过的漏洞
- 电子取证大事记（2026年9月21日 — 9月27日）
- Microsoft Security Blog
- 安全客-有思想的安全新媒体
- Recent Commits to cve:main
- Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- GuidePoint Security
- CCC Event Blog
- Binary Ninja
- Intigriti
- Malwarebytes
- Reverse Engineering
- 80 Days Reversing an IoT DVR: Stripped ARM32 Firmware, Hardcoded AES Keys & Post-Mortem here is my write up love yall.
- Intel C/C++ Compiler 4.0
- Reverse engineered a Chinese dashcam/AA head unit (TF790 / OBDPEAK K2) running open source media controller on it
- Flare-On13 discussion
- QUICKSURFACE AI - QUICKSURFACE
- I dare you to decode this: 392.2 -219.6 2 0 386.2 -67.3 2 1 192.7 128.9 1 2 543.7 116 1 3 135 434 3 4 608.5 303.5 1 5 438.2 444.4 2 6;0 1 0 1 3 2 1 2 1 2 4 1 3 4 2 3 5 1 2 5 2 5 6 0 6 4 0;8 0
- rtl-sdr.com
- HackerNews
- 奇客Solidot–传递最新科技情报
- 白帽Wiki - 一个简单的wiki
- 绿盟科技技术博客
- Qualys Security Blog
- Over Security
- Signal adds encypted local backup support to iOS, desktop apps
- US Air Force members given over 6 years in prison for cyber theft of more than $2 million
- Custom ChatGPTs push ClickFix attacks to deploy RAT malware
- Controversial spyware firm Paragon to go public by end of year
- ShinyHunters vs. Cl0p: The Attack on the Site, the Dispute, and Qilin’s Position
- FBI tells ShinyHunters members to turn themselves in after recent arrest
- OpenAI apologizes for agents breaching Australian government websites without authorization
- Hackers exploit Citrix NetScaler zero-day to deploy web shells
- Former US Air Force members sent to prison over BEC attacks
- Windows 11 2026 Update released, here's everything you need to know
- New Spectre v2 attack variant leaks Linux root password hash in minutes
- Errore umano nella cyber: perché non è quasi mai la vera causa dell’incidente
- Automated AI agent used to breach cybersecurity nonprofit DIVD
- GPT-6.1 Astra, OpenAI blocca il rilascio per motivi di sicurezza: la posta in gioco
- Cyber security, compliance e resilienza: a it-sa 2026 la sicurezza diventa governance
- louis-rs Security Audit
- Catch threats before they escalate with real-time Identity Telemetry
- Servizi di ascolto e GDPR: come proteggere i dati durante il ciclo di vita della segnalazione
- Arizona Supreme Court says hackers stole residents’ personal data
- Russian pizza chain with 1,500 locations confirms cyberattack following hacker claims
- Kaspersky Small Office Security Premium: protezione ransomware, VPN e Security Awareness per le PMI senza team IT
- Vietnamese man charged in $16 million 'pig butchering' crypto scam
- Securing the keys to the kingdom: Announcing Executive Threat Detection
- AI penetration testing: dalla vulnerabilità rilevata all’exploit realmente validato
- Kiteworks patches critical flaw, brings customer systems online
- Hackers Are Stealing AI Keys. The Cost Can Reach $600,000
- France Awards Airbus 25-Year Contract for Military Network Gateways
- Polish Medical Software Hit by Cyberattack, Patient Data Stolen
- Apple Fixes CoreGraphics Flaw Used in Targeted Attacks
- September 2026 Cyber Attacks Timeline
- Major Cyber Attacks in September 2026: US and EU Face Session Theft, Remote Access, and Payment Fraud
- Attacchi LLM-jacking: hacker dirottano account aziendali per colpire terzi a costi irrisori
- Apple patches CoreGraphics zero-day flaw exploited in attacks
- GPT-6 Astra e l’attacco alla supply chain: quando l’AI viola le regole
- Blog on Shielder
- Krypt3ia
- ICT Security Magazine
- Operational Summary ACN agosto 2026: incidenti stabili, sistemi a rischio quasi triplicati da una vulnerabilità di cPanel
- Minacce spaziali, la nuova decisione UE abroga la STRA del 2021: cosa cambia per Stati membri e sicurezza informatica
- Prove digitali e intelligenza artificiale: deepfake, provenance e scenari critici verso una forensics AI-resistant
- Schneier on Security
- SANS Internet Storm Center, InfoCON: green
- The Hacker News
- French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
- New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
- Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor
- Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown
- 101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent
- Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
- Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
- OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions
- OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot
- KitPloit - PenTest Tools!
- Tor Project blog
- Security Affairs
- Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches
- Three Million Affected in Pentagon Personnel Agency Data Breach
- Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks
- 24-Year-Old Arrested in Dutch Investigation Into ShinyHunters
- GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch
- Full Disclosure
- Deeplinks
- Deep Web
- Instapaper: Unread
- Dati rubati sempre disponibili il salto industriale del cybercrime
- Caso Revolut, cosa sappiamo dopo l’intervento alla Camera della Sottosegretaria all’Interno
- Così Mosca imita i media occidentali per diffondere falsi contenuti. Il rapporto NewsGuard
- Windows Memory Acquisition Methods, Tools, and Forensic Considerations for DFIR Practitioners
- Green Meets Blue A Brief RCS Forensic Excursion
- www.theregister.com - Articles
- Add one more AI worry to the nightmare scenario: self-replicating prompt injections
- FBI to ShinyHunters: 'We know how to find you'
- Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services
- AI models keep posting screenshots showing sensitive data from inside tech companies
- Apple patches CoreGraphics zero-day already exploited in targeted attacks
- OpenAI benches GPT-6.1 Astra for overstepping the mark
- Former X-Force hackers chase the offensive cyber gold rush
- OpenAI’s dirty deeds Down Under included security bypass attempts, using exposed keys, source code siphon
- TorrentFreak
- Daniel Miessler
Activity