Repository navigation
[每日信息流] 2026-10-15 #1395
Description
每日安全资讯（2026-10-15）
- Private Feed for M09Ic
- esrrhs contributed to esrrhs/spp
- bolucat released 202610142329 at bolucat/Archive
- strands-agents released python/v1.61.0 at strands-agents/harness-sdk
- huoji120 starred lightseekorg/tokenspeed
- OpenAEV-Platform released 3.261014.1 at OpenAEV-Platform/openaev
- liamg contributed to infracost/go-proto
- anthropics released v2.1.300 at anthropics/claude-code
- Gaurav-Gosain released v0.9.3 at Gaurav-Gosain/tuios
- Mel0day starred open-compass/opencompass
- Ridter starred jburgess-r7/CVE-2026-97229-PoC
- timwhitez starred x86rc/vmp-lazy-unpack
- ourren starred puyuan1996/exploit-data-spec-eval
- kyxiaxiang starred livid/exe
- esrrhs starred morluto/rea
- zema1 starred yetone/magpie
- anthropics released v2.1.299 at anthropics/claude-code
- Mel0day starred wheresryan22/anatomy
- SecWiki News
- Der Flounder
- Recent Commits to cve:main
- Verne in GitHub
- Cybernews News
- Ivanti's multi-headed zero-day exploited in the wild: CISA says patch now, but one flaw has no fix
- AI boom propels Chinese semiconductor exports to record $44.95 billion
- Samsung Galaxy Tab S12 Ultra: Will it replace your laptop?
- OpenAI CFO explains why major AI model release is on hold
- Apple Music ditches iconic red logo, and users are not having it
- NEW: H&M faces data leak threat as suspected breach trail leads to warehouse supplier
- OpenAI claims its AI busted a spying employee, but that might not be true
- TERMS AND CONDITIONS OF CYBERNEWS READER’S CHOICE AWARDS 2026
- Hackers could steal OpenAI, Anthropic keys through LiteLLM bugs
- Ubiquiti patches high-severity security bugs in its security appliance AI Key
- Google’s AI prodigy drops major warning in Dublin: “AI systems are not healthy yet”
- AI and cloud could make gaming consoles niche products by 2035
- Careless hacker leaves gift card fraud blueprint open: What did we learn?
- Ukraine says their troops suddenly face restrictions over Starlink access
- Hackers could disable your local supermarket fridge for just $6
- Apple launches new smart home devices, but users are busy joking about its $9 polishing cloth
- Yandex data center attacks are a PR coup for Ukraine, but global cybersecurity remains volatile
- Microsoft fixes 1,400+ vulnerabilities in October, exceeding 2025’s annual total
- “Shielded from the truth:” ex-UAP chief claims US presidents are kept in the dark about UFOs
- Personal data stolen from Meta’s GitHub: Why was it even there?
- Ahold Delhaize reports no evidence of stolen customer data as systems are rebooted
- Dutch nonprofit takes Meta to court over controversial AI glasses
- JPMorgan blocks outside AI agents from customer accounts
- Revolut data breach may be linked to $800,000 robbery
- Google's developer website had a remote code execution flaw worth $90,000
- FBI arrests Saudi OpenAI engineer over covert recording device
- obaby 𝐢𝐧⃝ void
- Doonsec's feed
- 代工利润都被渠道商拿走？一个包装动作救了两本账
- 从一张浴室照到具体门牌号，这家AI公司把室内照片变成侦查线索
- 网络安全工程师必知：Function Calling 和 MCP，到底是什么？
- 最新AI渗透平台收录【信矛 AI 自主渗透平台】
- 今天，上甘岭战役打响74周年：山河无恙，英雄永志
- 十年后，AI 会长成什么样？我想象了三个画面
- 今日速递｜Gemini 4 Argon 上岗，KernelSU 和 Dopamine 夜里也在加班
- VMware 费用暴涨4倍！1.2万台虚拟机连夜搬家，这家公司硬省7500万
- 【重要POC】金蝶产品线安全漏洞汇总
- 内存取证练习8
- [高级攻防]使用幻影持久化维持权限实现隐蔽持久化
- 荷兰光刻机ASML 又杀疯了：卖机器像印钱，前三季度净赚 797 亿
- GitLab CVE-2026-97229 满分 RCE 分析：一条注释骗过校验，一次重编译引爆 Onigmo
- 不偷钱只调温：法国五大连锁冷柜被远程调至50°C，数百万欧生鲜进了垃圾桶
- MCP协议形式化安全规范与验证
- 揭秘私彩预测诈骗
- 2026精武杯-手搓版-计算机取证
- Agent 桌面版产品全景文档（2026年10月）
- 测什么、怎么测、测到什么程度：把型号软件测试要求说明白
- 学网络安全卡在第一步？这套资料库+靶场+6000份漏洞报告，全部免费领
- 一个验证码，让某招聘网门户洞开
- WebGoat 靶场实战：OWASP 官方课程式 Web 安全训练指南
- 一个skill让哥斯拉Bypass D盾HOOK
- 安全简讯（2026.10.14）
- 【漏洞通告】GitLab远程代码执行漏洞（CVE-2026-97229）
- 【安全更新】微软10月安全更新多个产品高危漏洞通告
- 豆包手机、AI音乐、3D数字人......这些技术博士在字节都做了什么？
- 网友制作的claude封号歌太洗脑了
- 第十届“强网杯”创新创业专项赛竞赛规程
- Microsoft Security Blog
- Sucuri Blog
- Horizon3
- Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- Reverse Engineering
- I made a assembly line to reverse apks smoothly and gracefully,based on opencode and other mcp tools
- Recovering missing GTA 2 data tables while porting CriminalRETeam's gta2_re to WebAssembly
- Red-teaming myself to learn reverse engineering
- Linux configurator for the 8BitDo Ultimate 2, reverse-engineered from the Windows app
- Black-box Modbus RE of a 5-in-1 water-quality controller: AI-assisted reset discovery and a 401 ms reply trap
- I reverse engineered Black & White with Astra and added LLM integration by exposing the game world as tools and context so you can now control your creature via Chat!
- Reverse engineered this from a Gizmo on the Pocket app 😅🎵💙💜🩷❤️🧡💛💚
- hexvero: execution-free first look at ELF/PE/Mach-O/APK/.NET/Wasm/Electron with evidence per finding. Zero-dep parsers in Node, optional r2/rizin/Ghidra.
- Malwarebytes
- The Trail of Bits Blog
- Whwlsfb's Tech Blog
- Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
- Black Hills Information Security
- daniel.haxx.se
- 奇客Solidot–传递最新科技情报
- rtl-sdr.com
- HackerNews
- 绿盟科技技术博客
- 黑鸟
- 腾讯玄武实验室
- 微步在线研究响应中心
- 威努特安全网络
- 全频带阻塞干扰
- 安全内参
- 长亭安全应急响应中心
- 代码卫士
- 二道情报贩子
- 中国信息安全
- 信息安全国家工程研究中心
- 数世咨询
- 安全圈
- 看雪学苑
- 微步在线
- VLab安全实验室
- 极客公园
- 奇安信 CERT
- 网络空间安全科学学报
- 安全分析与研究
- ChaMd5安全团队
- 火绒安全
- 安全牛
- 字节跳动技术团队
- 奇安信威胁情报中心
- 威胁猎人Threat Hunter
- 深信服千里目安全技术中心
- 情报分析师
- 云鼎实验室
- NISL实验室
- 国家互联网应急中心CNCERT
- Over Security
- Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
- Threat Hunting Process
- North Macedonian police arrest alleged administrator behind OLVX cybercrime market
- Brooklyn DA’s office disrupts crypto scam targeting Russian community
- BalCCon2k26: Deconstructing Modern macOS Initial Access Vectors
- BSides Tallinn: Deconstructing Modern macOS Initial Access Vectors
- Field Notes: EtherRAT Distributed Through a Legitimate Intune Workflow
- FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
- 500 Internal Server Error: What It Means and How to Fix It
- Ledger asks sellers across Asia to halt sales after supply-chain attack
- Cisco patches new Secure Email Gateway zero-day exploited in attacks
- Spyware manufacturer had access to data harvested by former Polish government, current PM says
- Attacco ai supermercati francesi: perché la OT security è prima di tutto questione di governance
- Cyber Mission di Anthropic: l’AI scopre le vulnerabilità, la sfida è correggerle
- U.K. Sanctions Cryptomus for RU Money Laundering
- Cybertech Europe 2026: l’AI moltiplica i rischi cyber, ma il vero problema è perdere il controllo
- Microsoft fixes VPN issues caused by September Windows updates
- The Blind Spots of Agentic Pentesting and How to Close Them
- Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
- Patch Tuesday ottobre 2026: oltre 1.400 falle e uno zero-day sfruttato, le priorità per le aziende
- The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws
- Microsoft takes down 3 major phishing platforms used by Chinese cybercriminals
- Russian travel booking platform suspends reservations after cyberattack
- Global takedown hits network behind 1 billion phishing messages
- CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
- Four-Step Intelligence Model for Decision Making
- Google Dorking For OSINT
- Maltego For Beginners
- What A Cyber Investigator Can Find Out For You
- Congressional probe faults Match Group for failing to rein in dating app scams
- CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
- Hirudo Android malware replaces banking apps to evade security checks
- Microsoft: Recent Windows updates may trigger Remote Desktop failures
- Saudi national charged with planting spy device in OpenAI executive conference room
- Hackers Turned French Supermarket Freezers Into Ovens Overnight
- Fake AI Tools Put US Companies at Risk: Inside the Counterfeit Claude, ChatGPT, and Copilot Campaigns
- L’Italia non protegge gli hacker etici
- Hirudo: From Fake Updates to Patched Banking Apps
- Netherlands, Belgium Face Grocery Supply Disruptions After Ahold Delhaize Incident
- Microsoft Fixes Record 1,413 CVEs in October Patch Tuesday
- Death Threats, Laptop Farms, Stolen IDs: Inside North Korea’s Job Scam
- SAP Patches Critical CVSS 10.0 Flaw in Cloud SDK for Python
- KGB RAT: A Fully Undetectable Windows Trojan Built to Spy, Steal, and Terrorize
- Anthropic vuole rallentare l’AI per renderla più sicura: il paradosso del piano di Dario Amodei
- Crunchbase - 559,908 breached accounts
- Anatomy of a Phish: How Tech-Support Scams Buy Their Way Onto Your Screen
- 赛博昆仑CERT
- 安全419
- Have I Been Pwned latest breaches
- SANS Internet Storm Center, InfoCON: green
- ICT Security Magazine
- Instapaper: Unread
- Schneier on Security
- Daniel Miessler
- KitPloit - PenTest Tools!
- Krebs on Security
- www.theregister.com - Articles
- Cisco make-me-root email bug exploited as a 0-day by unknown crims
- Security researchers spent 6 days doing their Chromework, built 1B user exploit
- Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
- OpenAI engineer charged after boardroom bug found wrapped in toilet paper
- Ransomware gets personal: 'We-know-where-you-are kind of stuff'
- NetSPI
- The Hacker News
- Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
- Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
- Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
- U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud
- CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
- curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
- How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team
- Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
- Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
- An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
- AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
- Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
- Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
- OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room
- Deeplinks
- Security Affairs
- U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog
- Microsoft Patch Tuesday Sets New Record with 1,415 CVEs in October 2026 Updates
- Hidden Audio Recorder Found at OpenAI as Employee Faces Federal Charges
- Volexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day Vulnerabilities
- How a leaked builder of XWorm turned a remote access trojan into a surveillance kit
- GRAHAM CLULEY
- 绿盟科技CERT
- TorrentFreak
Activity