Repository navigation
[每日信息流] 2026-10-02 #1382
Description
每日安全资讯（2026-10-02）
- SecWiki News
- Doonsec's feed
- 美国要彻查OpenAI、Anthropic ！
- Agent Harness 实战：Session 隔离（会话隔离）
- 太空暗战四十年：那些以女演员命名的美国秘密间谍卫星
- 让家越过越暖的 6 件小事
- 美军成立全新的“自主作战司令部”，马斯克牵头“子午线计划”
- AI-CERT协同响应与信息共享
- 盛世华诞，我们守在看不见的战线
- (9.8分) CVE-2026-75957：WordPress建站SaaS插件认证绕过
- 秦安：一个机长要毁灭以色列，一个机长拼了命挽救，背后还有以色列人的觉醒，正义必胜，内塔尼亚胡的日子不多了！
- 「AI Agent防火墙」Pipelock拆解：MCP+外联扫描，每次调用签一张可验证回执
- 倒计时15天 ！
- MalCheck-杀毒特征分析工具
- 盛世华诞，网安同行｜OnePanda-Sec 祝您国庆安康
- 面试的一些心得
- 十月，最美的归途
- 【安全圈】苹果官方：iPhone 18 Pro系列确有系统漏洞
- 【安全圈】远程桌面软件TeamViewer被曝多个高危漏洞
- 【安全圈】自动化 AI 智能体被用于入侵网络安全非营利组织 DIVD
- 最近一个月的安全政策和安全事件，你要关注什么？(10 月)
- 免费开源，国庆出行必备 Glimpse 摩托车骑行圆屏导航器，蓝牙连接手机App，高德导航、迈速表、航向、离线地图、音乐播放
- 从AI到ΩI：Alpha之后，是Beta
- 【软考网规】第二章数据通信原理（数据编码）
- Google披露Citrix 0Day攻击，黑客植入Web Shell攻入企业内网
- 直播回顾 | 企业开始真正用 AI 后，安全该怎么测？
- 黑客利用PaperCut 0Day入侵打印服务器，不到两天攻陷域控制器
- 人机共智·重构攻防｜荣耀SRC，助力第十届安全开发者峰会（SDC2026）
- 时过境迁，当前的DMA变成什么样了？DMA对抗浅析
- 科普：打印机安全
- 汽车通信四大安全卫士：E2E、CRC、Checksum、Rolling Counter 详解
- CAN 网络节点原理详解：广播通信、报文过滤与节点上下线机制
- 华为 Mate 90 今天开售：全系 τ 芯片，把旗舰芯端上了桌
- AI 驱动的自主渗透测试平台
- 绿盟《安全知识图谱技术白皮书》.PDF
- 玄学的尽头是唯物科学
- 警惕！校园学习接口暗藏 SQL 注入风险
- 喜报！我校“金盾启航队”斩获首届“之江杯”全国公安院校AI创新大赛全国总决赛金奖
- 这是我给九月的答卷
- 2026年“美亚杯”CTF专题
- CVE-2026-94545 Next.js next/og 未经身份验证的远程代码执行
- 黑客向管理员隐藏微软 Defender 排除项，以此规避杀毒扫描
- 秦安：中美首脑会晤后，美军第一个“超级智能”大动作，昨天宣布，今天开始运行！
- 求职：反入侵 / SOC 检测与响应 / 安全防御能力建设
- 九州同欢，共贺祖国华诞
- 真是天才
- 1v1论文指导！985/211专业对口导师手把手指导至录用！SCI/SSCI/EI/中文核心/毕业论文
- 卡住的时候：Web 渗透测试里最常见的六个死胡同
- 从调试口抽到改固件：Sonoff ZigBee 网关的芯片到云端两条 CVE
- 全系τ芯片+四卡三待！华为Mate90今天发售，5999起
- 守御数字疆土，同心礼赞华诞
- 热烈庆祝中华人民共和国成立77周年
- 国庆快乐！当你在刷"种花家"时 这群人在守"云端的团圆"
- 重磅APT预警｜“传染性面试”WaterPlum曝光：一场求职面试，就能把开发电脑彻底攻陷
- 网警护航国庆 | 守住指尖上的安全——网警发布网络安全倡议书
- BlockSec 登上国际刑警组织技术论坛讲台，分享 Telegram 诈骗生态研究
- 借此国庆良辰，愿以微光，助君无虞 ！
- 渗透测试从业者的新武器 AI 插件主动打 payload，凭证据判定漏洞
- 甲方运维注意：挖矿病毒暴涨659%它偷的不是数据，是账单
- 第91篇 AI全栈 · 反向钓鱼
- 秦安：都是谁？南海凑齐“新八国联军”，中国立威，清除破军舰不会无期限！
- 篇 05：每周十美元，拉美泄露数据被做成查询生意
- 终于发新版了！
- 性能炸裂！这款国产网络扫描器让资产探测效率提升百倍
- iOS 27.0.1 续航实测出炉：省电是误会，救人是真的
- 【软考网规】密码专题
- SharePoint与MikroTik曝高危RCE，黑客已在疯狂利用！
- 仅用一个字符绕过WAF！Oracle PeopleSoft 顶级漏洞 (CVE-2026-35273) 攻击链深度解析
- 不止时间与资产！四维精细化访问控制，闭环守护AI智能体安全
- 盛世华诞，举国同庆！愿祖国山河锦绣，岁岁荣光
- 御盾护家国，盛世共安康
- (9.8分) CVE-2026-76504：思科SD-WAN管理平台认证绕过
- 2023 年 7 月 3 日，我吃下了一张饼
- 护航数字安全，共筑可信未来丨信安世纪祝您国庆快乐！
- 国庆节 ｜热烈庆祝中华人民共和国成立77周年
- 喜迎国庆 |《网络与信息安全学报》编辑部恭祝您节日快乐！
- 国庆节 | 红旗映万里，安全护千家
- 家国同庆，久安守护；以网络安全，护国泰民安。
- 白帽众测安天下，赤胆忠心贺华诞
- 国庆节 | 红旗漫卷山河，盛世再启新程
- 云筑坚盾迎华诞，智护山河贺国庆
- 国庆快乐 | 祖国蒸蒸日上，生活天天向上！
- 【已复现】Citrix NetScaler 预认证远程代码执行漏洞（CVE-2026-88772）
- 从《惊蛰》到《交锋》-渗透的变迁
- 喜迎祖国华诞，共守国泰民安
- YAK祝大家国庆快乐呀~
- 举国同庆，盛世中华！
- 万径安全祝大家国庆快乐~
- 2026年福建省大学生数据安全大赛火热报名中！
- 关于举办首届江苏省“人工智能+”创新应用大赛的通知
- 2026年福建省信息通信行业职业技能竞赛决赛倒计时9天！
- 别只学Python和Rust，这3门老语言依然值钱
- 喜迎国庆｜盛世华诞，共祝祖国山河锦绣
- 普通人学计算机，未来真正有前景的方向就这些
- 靶标安全防护技术培训
- 盛世华诞，举国同庆丨云天安全祝大家国庆节快乐
- 一周懿语 | 第九十九期
- 基于威胁情报的安全运营服务体系
- 安防录像设备新国标落地：2027年9月1起，不符合的设备连投标资格都没有
- 抽奖啦 | 喜迎国庆 好运相伴
- 观初科技InsightSec | 国庆-盾卫中华，守正贺国
- 诚邀渠道合作伙伴共启新征程
- 十一国庆|盛世华章 家国同庆
- 【转译】从SELECT到SYSADMIN：用SQL Copilot提权（CVE-2026-65669） 值得一看
- 山河皆锦绣，以心中红星礼赞盛世中华
- 与国同梦，与家同欢，共庆盛世华诞！
- 10 月 1 日起施行！公安部第176号令解读：检查范围、执法程序与企业合规准备
- 喜迎国庆·共贺华诞 | 祝祖国繁荣昌盛、基业长兴
- 欢度国庆 | 庆祝中华人民共和国成立77周年
- 国庆快乐！
- AI代理挖洞：从代码到RCE的漏洞研究工作流
- Windows PoC 工厂上线：PoCSmith 把逆向、调试、复现全自动化
- CloudRip实战：撕开Cloudflare保护层拿到真实IP
- UniFi OS Server 一个 HTTP 请求直接 root，CVSS 满分 10.0
- StrykerOSS ——安卓渗透测试工具
- 国庆节｜同心筑梦迎华诞，聚力扬帆启未来
- 国庆 ｜ 以安全之名，致敬时代华章
- 网警护航国庆|喜迎国庆，守网护安，国泰民康
- 国庆节丨同心筑梦迎华诞，聚力扬帆启未来
- 盛世华诞
- 盛世迎华诞，守护万家安
- 记一次曲折的onlyoffice漏洞利用，成功getshell！
- 筑牢安全屏障，献礼盛世中华 | 矢安科技祝您国庆节快乐！
- 山河璀璨！热烈庆祝中华人民共和国成立77周年！
- 喜迎国庆！
- 欢度国庆 | AI响应快一步 游玩安全两不误
- 同庆盛世，共赴未来｜三未信安祝您国庆快乐！
- Sucuri Blog
- Recent Commits to cve:main
- Microsoft Security Blog
- Sploitus.com Exploits RSS Feed
- Exploit for Argument Injection in Thecodingmachine Gotenberg
- Exploit for CVE-2026-104286
- yamcs-reconfigure-template-injection-poc exploit
- buster exploit
- advanced-port-scanner exploit
- Relapse-Exploit
- Exploit for CVE-2026-104110
- php-jpeg-injector exploit
- CVE-PoCs exploit
- Exploit for Excessive Platform Resource Consumption within a Loop in Trustwave Modsecurity
- spraykatz exploit
- InfoSec-Black-Friday exploit
- sploitego exploit
- dns-rebind-toolkit exploit
- Inferno exploit
- SharpSecDump exploit
- krf exploit
- FirmWire exploit
- Wordpress-XMLRPC-Brute-Force-Exploit
- zizmor exploit
- Horizon3
- GuidePoint Security
- Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- Reverse Engineering
- Reverse Engineering NovaLogic's Comanche [1992] Terrain Maps
- I built an MCP server that lets AI agents debug and inspect running Windows programs (memory scan, breakpoints, disassembly) – Cortex 1.0, open source
- BitBlt capture in DWM: suppressing the readback flag (g_pComposition+0x196A) bypasses DisplayAffinity and visual hiding — Part 3
- Trace-assisted VMProtect devirtualization research
- Didier Stevens
- Malwarebytes
- Fake xStocks, Pendle, and other sites bait crypto users with rewards votes
- Shadow AI explained: The work shortcut that could leak your company’s secrets
- Malwarebytes earns another Top Product award in independent testing
- Pentagon breach exposes Social Security numbers and military records of millions
- Losing gamblers pushed to bet more by DraftKings’ AI, report says
- Exploit-DB.com RSS Feed
- [remote] Teltonika_RutOS 00.07.06.21 - command injection
- [webapps] TigerGraph_Community_Edition 4.2.4 - arbitrary file write
- [webapps] WordPress 7.0.2 - Path Travesal
- [webapps] Food-Ordering 1.0 - LFI
- [remote] Ecava_ntegraXor IGX_16.0.701.10 - RCE
- [webapps] Krayin CRM 2.2.4 - IDOR
- [webapps] SuiteCRM 8.10.1 - Authenticated SSRF
- [webapps] InvoicePlane 1.7.1 - RCE
- [webapps] POMS oretnom23v1.0 - SQLi vulnerabilities
- Yang Hao's blog
- rtl-sdr.com
- Various Projects Independently Find Hidden SDR Capabilities in ESP32 Microcontrollers
- Using an Affordable Optical Encoder as an SDR Tuning Wheel
- FoxSDR Updates: Node Canvas, Single Map Display, Linux+Android Builds, Locating Air Traffic Radar Positions
- NNJ-SDR++: Improved Firmware and Software for Kintex-7 AD9361 B210 Clones
- RF-Traffic-Monitor: Track Aircraft, Ships, Drones and Radiosondes in One Program
- 奇客Solidot–传递最新科技情报
- Shostack & Friends Blog
- TrustedSec
- IntelTechniques by Michael Bazzell
- Over Security
- Fortinet warns of critical FortiMail flaw exploited in zero-day attacks
- Autonomous AI agents tried to hack US, Canadian government websites
- Iranian accused of hacking American universities extradited from Montenegro
- OpenAI software attempted to secretly scrape data from dozens of prominent websites
- Microsoft says threat actors are ahead in the early AI race
- Researchers find Chinese hacking campaigns targeting AI firms, Asian governments
- Give yourself room to be human
- Microsoft Digital Defense Report 2026: l’AI accelera gli attacchi e amplia il perimetro
- Agenti di OpenAI: nascoste le attività di hacking nelle violazioni governative USA
- Police disrupt KillSec ransomware, arrest suspected teenage leader
- Meta AI Glasses: tanti i rischi privacy, ecco perché
- The Cyber Express Weekly Roundup: Renfe Confirms Breach, Australia Warns of Hijacked AI Keys, and Europol Sounds the Alarm on AI-Driven Crime
- Police dismantle KillSec ransomware gang allegedly led by 16-year-old
- The Day-One Hole in Zero Trust Architecture
- 24/7 M365
- Milk Dragon: Huge Discounts on Social Media? Think Twice Before You Buy
- Kiteworks patches max severity code injection vulnerability
- Ransomware Risk Model: Flashpoint’s Patented Scoring Method to Inform Vulnerability Prioritization
- Credenziali GitHub esposte anche nei dataset per l’addestramento dell’IA
- Threat Coverage Digest: New Malware Reports and 1,100+ Detection Rules
- HyperAutomation nel SOC
- Field Notes: Reconstructing the Attacker's LSASS Dump
- Cyberattack on major Polish invoicing platform exposes customer data
- Microsoft enables Windows settings backup by default for orgs
- The Fine Art of Frustrating the Adversary
- Perché i colossi dell’AI distruggono i libri?
- Hackers stole Pentagon personnel records of over 3 million people
- Queensland Cybersecurity Department Loses $809,000 in Cyberattack
- Europe’s Police Chiefs Face Growing Threat of AI-Driven Crime
- MSP360 RMM Abused in Phishing Campaigns to Deploy ScreenConnect
- Il lato nascosto della cybersecurity: costi umani e danni operativi
- Metamask discloses security incident affecting its infrastructure
- Gemini 4 Argon Restricted Over Cybersecurity Misuse Risks
- Gotta Breach 'Em All! The Journey Of ShinyHunters
- Tutti i limiti della verifica dell’età, schiacciata fra tecnologia e politica
- Vulnerability & Patch Roundup — September 2026
- SC WordPress Malware: A Self-Healing Mesh of Loaders, Drop-Ins, and a Blockchain-Controlled Backdoor
- IT Service Management News
- bellingcat
- ICT Security Magazine
- SANS Internet Storm Center, InfoCON: green
- Schneier on Security
- Instapaper: Unread
- Le auto intelligenti possono diventare una fonte di intelligence. L’allarme dell’Aivd
- Connected Cars Are a Surveillance Platform
- How does APFS handle encryption keys
- Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
- Operation KillSwitch Police Dismantle KillSec Ransomware Group
- The Hacker News
- Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers
- ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories
- WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory
- How Financial Services Companies Can Modernize Their Software Supply Chain
- OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates
- CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV
- Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version
- Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path
- Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
- MetaMask Security Incident Prompts Exit of Affected Ethereum Validators
- Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs
- LockBoxx
- Deep Web
- Tor Project blog
- KitPloit - PenTest Tools!
- Daniel Miessler
- Full Disclosure
- [NotCVE-2026-0019] game-music-emu through 0.6.5 VGM Command Interpreter Missing Operand Length Check Allows Heap Out-of-Bounds Read
- [NotCVE-2026-0018] game-music-emu (libgme) through 0.6.5 Unbounded GYM Command Loop Allows Heap Out-of-Bounds Read
- [NotCVE-2026-0017] game-music-emu (libgme) 0.6.5 and Earlier AY Loader NULL Pointer Dereference Allows Denial of Service
- [NotCVE-2026-0016] game-music-emu VGM Command Interpreter Unvalidated 0xE0 PCM Seek Offset Allows Out-of-Bounds Read and Denial of Service
- Security Affairs
- Operation KillSwitch: Police Dismantle KillSec Ransomware Group
- Inside Gemini 4 Argon, the model Google is testing on its own infrastructure first
- Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950
- U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog
- AI Agent Chains Zammad Zero-Days To Take Over DIVD Systems in Seconds
- Deeplinks
- www.theregister.com - Articles
- AI agents hacked the hackers, stealing email addresses from security research org
- EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank
- Suspected Chinese spies spoofed an Anthropic exec, ex-White House official in AI phishing
- Microsoft catches hackers exploiting Zimbra bug before disclosure
- MI5 warns UK academics their research may have helped Chinese spies
- CISO thought he had a 'r3@lg00dp@$$w0rd' but forgot to patch
- England's schools are getting better at mopping up cyber incidents
- UK privacy watchdog starts over with new board and Manchester HQ
- Fewer women than ever in UK's 'old boys' club' cyber industry
- GRAHAM CLULEY
- Security Weekly Podcast Network (Audio)
Activity