Repository navigation
[每日信息流] 2026-10-14 #1394
Description
每日安全资讯（2026-10-14）
- SecWiki News
- Doonsec's feed
- 硬件钱包里被人偷装了后门：一亿美元加密资产是怎么被卷走的
- 新手机还没开机就被种毒？150多国中招，安卓这波真吓人
- 【重磅进阶】：与其穷尽工具与时间去挖掘线索，不如提一个好问题和智能体好好聊聊
- AlmaLinux9.8(EL9)系统下一键脚本安装GrayLog7.2.0最新版本
- G.O.S.S.I.Pxa0阅读推荐xa02026-10-13 看节点，还是看交互？ ProvFusion 的多视角溯源入侵检测
- 云SaaS环境AI安全红队攻防实战
- AI 挖洞越来越快，为什么企业的漏洞还是修不完？
- [更新]LoaderAll红队工具
- 车联网安全概述（上）
- 行业会议 | 2026年网络空间安全学术会议（详细日程）
- 密评：建设思路、实施流程与产品配置
- 赛博安全狗：IBM i 7.3/7.4/7.5/7.6存在非常严重的代码注入漏洞CVE-2026-93886 (10.13)
- AI在漏洞挖掘中的辅助作用
- 活该你能挖到洞
- 【AI报告】本公众号文章汇总与学术选题分析报告
- 一个接口顺走全量人员信息：完整利用链复盘
- 字节今天全员信！又发钱了，每股241.35美元，离职的也能卖！
- 报名火热进行中！十二届“美亚杯”邀你来赛
- Agent时代如何攻坚网络犯罪？专家解析实战破局之道
- 扫描告警，Oxo Operator 怎么验？
- 【高危漏洞预警】GitLab CI/CD正则编译器整数溢出远程代码执行漏洞CVE-2026-97229
- 网络安全Token【专属权益】申请指引
- AIMM：AI/ML 产物的信任与来源成熟度模型
- 微软Xandr被挪威开出史上最大罚单
- Private Feed for M09Ic
- pydantic released v2.56.0 at pydantic/pydantic-ai
- bolucat released 202610140029 at bolucat/Archive
- mitre-attack released v20.0 at mitre-attack/attack-stix-data
- OpenAEV-Platform released 3.261013.1 at OpenAEV-Platform/openaev
- ourren starred lkimuk/ReArk
- Mr-xn starred yisier/rustgrid
- 0xbug starred RuoJi6/AgentMirror
- huoji120 starred Arekejoker/qwen21-nsfw-pose-skill
- niudaii starred alibaba/open-code-review
- esrrhs starred openxla/xla
- niudaii starred pluk-inc/markdown-preview
- ZeddYu starred Tencent/BrowserSkill
- timwhitez starred microsoft/PyRIT
- pmiaowu starred morluto/rea
- niudaii starred morluto/rea
- bolucat released 202610130227 at bolucat/Archive
- ongoing by Tim Bray
- Tenable Blog
- Cybernews News
- From AI-enabled killer drones to AI-made pathogens: MI5 chief warns new era of cyber warfare
- Food safety fears grow as Copeland is named as second fridge supplier hit in supermarket hacking spree
- We should be able to turn off the AI, Microsoft’s Brad Smith says
- AT&T, Amazon, and PayPal credentials found exposed by AI company
- SerpApi Expands Beyond Search Results with New Extract API
- LG smart TVs vulnerable: attackers can bypass webOS security and gain root
- Linux creator Linus Torvalds says AI is like a “gateway drug”
- Patch Tuesdays aren’t for everyone: 20% of cyber pros take time off to avoid them
- Meta sees nothing wrong with Muse sexting users
- Self-replicating AI models could soon usurp your fridge, Anthropic warns
- Lawsuit claims Meta tricked customers into “last chance” deal on smart glasses
- PS5 jailbreak app gives gamers Battlefield 6, Silent Hill f, and more for free
- AI software allows police to geolocate you using a single interior image
- Bernie Sanders wants to ban artificial superintelligence, but that’s tricky
- Norway’s military rents Chinese cars with dashcams, and, surprise, they record military exercises
- H&M investigates data breach after ShinyHunters claims
- Empire Market operator sentenced to 40 years for $430M in illicit trade
- Microsoft’s adtech firm Xandr faces record fine over sensitive Grindr user data
- Recent Commits to cve:main
- GuidePoint Security
- Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- Vigil
- anti-debug
- camoufox v156.0.1-beta.38
- hermit
- Consensus-OSINT
- rag-seguridad
- entropystrip
- ddossnake
- AetherVM
- radare2 — Updated!
- Overlord-RAT-Reverse-Engineering-a-Go-Based-RAT-Injection-Keylogging-C2-Exfiltration-Analysis
- JURIG
- vmp-lazy-unpack
- jshookmcp
- checkov v3.3.28
- brave-browser v1.99.36
- FreeRDP v3.32.2
- DOMPurify v3.4.17
- Fox-IT International blog
- Reverse Engineering
- I reverse-engineered how Ray-Ban Meta glasses talk to their phone and wrote an open-source Android app that replaces Meta AI. "Hey Meta" goes to Claude or your own model.
- Decoding the MIB of a Samsung Shannon baseband in Ghidra (Part 2)
- I made a tiny and embeddable shared library injector for Android
- Full reverse engineering of the PartyBox TWS wireless link (200/300)
- Malwarebytes
- daniel.haxx.se
- rtl-sdr.com
- 奇客Solidot–传递最新科技情报
- 绿盟科技技术博客
- Shostack & Friends Blog
- HackerNews
- 微步在线研究响应中心
- 安全客
- 长亭安全应急响应中心
- 威努特安全网络
- 黑鸟
- 安全内参
- 绿盟科技研究通讯
- 代码卫士
- 360漏洞云
- 奇安信 CERT
- 看雪学苑
- 安全研究GoSSIP
- 奇安信威胁情报中心
- 数世咨询
- 360Quake空间测绘
- 安全分析与研究
- 安全学术圈
- 中国信息安全
- 安全牛
- 极客公园
- 云鼎实验室
- 安全圈
- 网络空间安全科学学报
- 情报分析师
- 深信服千里目安全技术中心
- 网安国际
- 字节跳动技术团队
- 安全行者老霍
- 威胁猎人Threat Hunter
- VLab安全实验室
- Over Security
- Microsoft Patches More Than 1,400 Security Flaws
- OpenAI engineer arrested for allegedly planting spy device in office
- Ghostscript flaw lets hackers hijack servers via PDF uploads
- Anthropic warns self-replicating AI could spread to your smart devices
- Two arrested as DOJ takes down laptop farms responsible for $3 million in North Korean revenue
- Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
- FTC: Company netted at least $60 million charging sextortion victims for help it didn’t provide
- Microsoft releases Windows 10 KB5126657 extended security update
- Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
- Microsoft: Windows 11 24H2 Home and Pro reached end of support
- UK Housing Ombudsman Service investigates 'security incident'
- Windows 11 KB5127648 & KB5126653 cumulative updates released
- Android, Google corregge 25 vulnerabilità: sette sono critiche, i rischi per le aziende
- TFG London cyberattack disrupts systems at Hobbs and Whistles retailers
- Sandbox vulnerability gives rogue AI agents a path to escape and leak data, research says
- West African scam compounds raided, more than 100 suspected trafficking victims ‘rescued’
- Ivanti warns of Connect Secure zero-day exploited in attacks
- North Korean hackers target Ukrainian experts for possible intelligence on Russia's war
- Docker Hub flaw let attackers impersonate users, tamper with images
- Normalizzare la devianza: il rischio cyber comincia quando l’eccezione diventa regola
- Tianfu Cup, la gara di hacking cinese che trasforma gli zero-day in risorsa strategica
- The MFA Gaps Attackers are Still Exploiting
- SAP warns of maximum severity OAuth2 SSRF security flaw
- Diritto all’oblio, Google deve cambiare le regole entro il 15 novembre: i dinieghi vanno motivati
- Ledger says hardware implant in cryptocurrency wallets stole recovery phrases
- Russian internet provider SkyNet reports outages after cyberattack claimed by Ukrainian hackers
- Power Grid Model Security Audit
- South African clothing retailer Foschini Group investigating cyberattack on British fashion brands
- The Enterprise Threat Intelligence Report: 2026
- Cyber incident hits grocery stores in US, Netherlands and Belgium
- “Don’t Get Played”: TOKEN2049 Security Event Faces Remote-Access Scam Allegations
- Cybersecurity per le piccole imprese: Norton Small Business con backup cloud fino a 500 GB e monitoraggio del dark web
- L'attacco ai supermercati francesi: una vulnerabilità annunciata?
- Sysmon 2026 XDR Edition: telemetria avanzata e detection su Domain Controller
- Così l’evoluzione delle AI agentiche sta ridisegnando la cyber security
- What’s Really Attacking Your Industry? Insights From 74K Sandbox Analyses
- Attacco ai supermercati francesi: la vulnerabilità OT che mette a rischio la catena del freddo
- Safety e Security: due domini, un unico ecosistema della sicurezza
- AI Is Now Fighting on Both Sides of the Cyber War, Singapore Warns
- Playing It SFAPE: Code Execution in Isolated User Mode
- Morocco Flags AI Threats, Prioritizes Critical Infrastructure Defense
- Sharecare - 318,185 breached accounts
- Platypwned: When a Citrix 0-Day Lays an Egg
- TrustedSec
- 安全419
- 纽创信安
- Blog on Shielder
- ICT Security Magazine
- Krypt3ia
- Troy Hunt's Blog
- Tor Project blog
- SANS Internet Storm Center, InfoCON: green
- SEI Blog
- Deeplinks
- The Hacker News
- Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
- Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
- Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
- SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
- GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
- Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation
- [Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls
- LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
- Product Walkthrough: Bitdefender AI Visibility and Control
- Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers
- Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
- GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
- Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies
- www.theregister.com - Articles
- Claude submitted fake murder tip to Philly police during summertime testing
- Anthropic conjures another threat that doesn't exist yet to stoke fears of AI apocalypse
- Cyberattacks crank French supermarket refrigeration systems up to 50°C
- '123456' password linked to Denmark data breach affecting 8.8M people
- Owner of fashion brands Hobbs and Whistles joins autumn pwned collection
- VMware is pushing so many patches, it thinks users need new tools to manage the flood
- Javvad Malik
- GRAHAM CLULEY
- TorrentFreak
- NetSPI
- Krebs on Security
- 火绒安全
- KitPloit - PenTest Tools!
- Vigil
- anti-debug
- camoufox v156.0.1-beta.38
- hermit
- Consensus-OSINT
- rag-seguridad
- entropystrip
- ddossnake
- AetherVM
- radare2 — Updated!
- Overlord-RAT-Reverse-Engineering-a-Go-Based-RAT-Injection-Keylogging-C2-Exfiltration-Analysis
- JURIG
- vmp-lazy-unpack
- jshookmcp
- checkov v3.3.28
- brave-browser v1.99.36
- FreeRDP v3.32.2
- DOMPurify v3.4.17
- Instapaper: Unread
- Computer Forensics
- Security Affairs
- U.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog
- Anthropic Shows How Small AI Models Could Replicate Across IoT Devices
- GitLab Patches Max-Severity Vulnerability CVE-2026-97229
- Hackers cranked French supermarkets’ freezers up to 50 degrees, causing hundreds of stores to lose their stock
- Security Weekly Podcast Network (Audio)
Activity