Repository navigation
[每日信息流] 2026-10-20 #1400
Description
每日安全资讯（2026-10-20）
- Sploitus.com Exploits RSS Feed
- 安全客-有思想的安全新媒体
- Darknet – Hacking Tools, Hacker News & Cyber Security
- Tenable Blog
- obaby 𝐢𝐧⃝ void
- SecWiki News
- Cybernews News
- "Genius or corrupt?" Musk's promise of free SpaceX shares for American kids riles up the interwebs
- ConnectWise breach puts more than 300 companies’ secrets at risk
- SafeLine Web Firewall Surpasses 700,000 Installs
- Hackers claim producer of “Friends” and “The Office:’ next big hits may have been stolen
- South Korean police officer caught distributing AI porn on Telegram
- AI agents go to extraordinary lengths to chase $460 refund
- French looters sell stolen items in plain sight on Vinted
- Workers fearing AI replacement tend to slack off more
- MapQuest now shows Flock camera locations on your route
- Fly brains were uploaded to AI-generated Matrix. Should we worry?
- Secret Broadcom chip flaw lets nearby hackers take over millions of routers
- Congressman proposes bill to ensure gamers actually own games they buy
- Will AI usher in a “golden age of gaming?”
- Interpol’s new campaign shows how anyone can fall victim to deepfake scams
- Man sold everything and moved 1,200 miles for a woman who never existed
- AI must threaten to kill over 50 people for government to intervene, Anthropic proposes
- Frontier settles data breach affecting 59K Connecticut residents for $625K
- Interpol-led operation strikes online child abuse networks, resulting in 95 arrests
- AI executive search that keeps human judgment
- Apple tightens App Store rules to keep AI nudification apps out
- PS6 will likely cost over $1,000 thanks to AI, hardware leaker claims
- Cybernews Readers’ Choice Awards 2026 voting is open now — help pick this year’s best tech
- Microsoft Security Blog
- Private Feed for M09Ic
- anthropics released v2.1.304 at anthropics/claude-code
- WAY29 starred dota2modmanager/dota2-mod-manager
- liamg contributed to liamg/grabber
- liamg contributed to infracost/proto
- timwhitez contributed to timwhitez/harness-evolver
- timwhitez starred N1nEmAn/sapper
- Ridter starred kinokopio/CVE-2026-23111
- yuligesec starred aaPanel/aaWAF
- timwhitez contributed to timwhitez/agent-sdk-golang
- timwhitez contributed to timwhitez/avo-pi-agent
- 0xbug starred KnifeLemon/Droidline
- timwhitez starred google-research/harness2
- xgo-dev released v1.0.7 at xgo-dev/llgo
- Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- taikotalent-phishing-iocs
- Aliens_eye v2.7.2
- broadcom-wps
- plex2shell_pcap
- CubeSandbox
- GoReSym
- warpgate v0.30.0
- DidierStevensSuite
- hermes-agent — Updated!
- malscore
- SyscallRevenant
- ebpf-container-escape-framework
- frp — Updated!
- Barzakh
- veiled-eye
- nextjs-supabase-stripe-security-checker
- HostBadger
- openwrt v25.12.6
- IDWolf
- deco-filepush-disclosure
- Vader-Pro-VDR
- invisible_playwright v0.39.0
- jbl-wave-buds2-firmware-research
- Shell is Only the Beginning
- ysl 的程式天堂 - Android 應用開發 ‧ 研究 ‧ 與諮詢
- CCC Event Blog
- Horizon3
- Malwarebytes
- Reverse Engineering
- 风雪之隅
- 绿盟科技技术博客
- rtl-sdr.com
- BrowSDR Update: Multi-SDR Support, LimeSDR, and Decoders for ADS-B, AIS, ACARS, RS41, rtl_433, BLE and DMR
- Live TEA1 Decryption Support Added to an osmo-tetra Fork
- Etherbulb: An ESP32-C3 Smart Bulb That Changes Color Based on Nearby RF Signals
- Advanced FT8/FT4 DX Decoder: A Native FT8/FT4 Decoder Plugin for SDR++Brown on macOS
- 奇客Solidot–传递最新科技情报
- 腾讯玄武实验室
- 微步在线研究响应中心
- 黑鸟
- 雷神众测
- 威努特安全网络
- 安全内参
- 腾讯安全应急响应中心
- 长亭安全应急响应中心
- Shostack & Friends Blog
- 信息安全国家工程研究中心
- 安全圈
- 微步在线
- 数世咨询
- 中国信息安全
- M01N Team
- 补天平台
- 腾讯科恩实验室
- 看雪学苑
- 极客公园
- 默安科技
- 奇安信威胁情报中心
- 安全牛
- 中通安全应急响应中心
- 奇安信 CERT
- 丁爸 情报分析师的工具箱
- 火绒安全
- OnionSec
- NISL实验室
- 慢雾科技
- 情报分析师
- 安全分析与研究
- Over Security
- Nikkei discloses third data breach in a month, 1.8M records exposed
- WordPress SEO plugin Rank Math compromised to backdoor websites
- Inside Joint Disruption Week: 28 Arrests and 3.7 Million Scam Accounts Removed
- ConnectWise suspends Cloud Backup service after supply chain attack
- Judge denies WhatsApp’s bid to hold spyware maker in contempt for allegedly targeting users
- Hackers hijack AOMEI update servers to secretly spread malware
- Two more Serbian opposition figures targeted with spyware, researchers say
- Bullhorn takes staffing platform offline to contain cyberattack
- subfinder – Passive Subdomain Enumeration Tool
- Digital360 e Cybersecurity360 Awards 2026: tutti i vincitori e le sfide dell’innovazione
- Scraping Public Websites For OSINT: Where The Legal Risk Starts
- OpenCode hack exposes API keys amid AI distillation attacks
- Ahold Delhaize confirms 'malicious actions' behind cyber outages affecting grocery brands
- Russian social media giant VK faces disruptions after data center drone strike
- Sovranità digitale, SASE, AI security: le nuove sfide per le aziende
- Microsoft fixes game, app crashes caused by recent Windows update
- Guida alla cyber security: endpoint, network e cloud compliance
- Inside the Underground Market for Know Your Client Services
- F5 releases out-of-band patches for critical NGINX vulnerabilities
- Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
- Cybertech Europe 2026, la nuova sfida cyber: difendere i dati alla velocità dell’AI
- Microsoft fixes classic Outlook bug that hid Copilot buttons
- Hackers steal customer data from major Russian hosting provider FirstVDS
- How To Date A Photo From Its Shadows, And Check The Sun Was Out
- La cyber security non si costruisce punendo chi scopre le vulnerabilità
- Microsoft: October Windows Server updates break Exchange sign-in, mail flow
- BAE Systems Cyberattack Halts Bankruptcy Notices at Every U.S. Federal Court
- Sekoia Honeypot Captures an Attack on GenAI Infrastructure
- North Korean IT Worker Raids: Who Was Charged, And With What
- Avvelenare un modello LLM è diventato facile ed economico
- No Lessons, No Test, No Travel: Dubai Police Bust AED 10,000 Licence Scheme
- AI Can’t Judge Your Paper: EU Updates Guidelines on Peer Review and AI Agents
- NETRESEC Network Security Blog
- IT Service Management News
- 安全419
- Javvad Malik
- CNVD漏洞平台
- Troy Hunt's Blog
- Schneier on Security
- ICT Security Magazine
- ConnectWise Cloud Backup attacco supply chain: la credenziale del fornitore apre i tenant Microsoft 365
- NovaMDR™: Sangfor Technologies presenta la sua offerta MDR al Forum ICT Security 2026
- Oltre il malware: se tutto sembra legittimo, chi ferma l’attacco?
- Attacco alla rete elettrica ucraina del 2015: MATRIX alla prova
- Instapaper: Unread
- Passkeys Explained, and Choosing the Right Model
- iOS 27.0.1 Untethered Jailbreak Demonstrated on iPhone 18 Pro
- Targeted ads installed Candiru spyware in zero-click attacks
- Trattamenti dati per finalità di Polizia dalla DPIA ai controlli che garantiscono sicurezza e tracciabilità
- CRA, pubblicato lo schema di decreto italiano controlli, certificazioni e sanzioni
- Keystrokes in Disguise Forensic Analysis of a Digispark HID Device
- Network Forensics Wireshark Fundamentals
- Deeplinks
- KitPloit - PenTest Tools!
- taikotalent-phishing-iocs
- Aliens_eye v2.7.2
- broadcom-wps
- plex2shell_pcap
- CubeSandbox
- GoReSym
- warpgate v0.30.0
- DidierStevensSuite
- hermes-agent — Updated!
- malscore
- SyscallRevenant
- ebpf-container-escape-framework
- frp — Updated!
- Barzakh
- veiled-eye
- nextjs-supabase-stripe-security-checker
- HostBadger
- openwrt v25.12.6
- IDWolf
- deco-filepush-disclosure
- Vader-Pro-VDR
- invisible_playwright v0.39.0
- jbl-wave-buds2-firmware-research
- TorrentFreak
- The Hacker News
- Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
- Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
- ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
- GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
- From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software
- Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
- Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers
- OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys
- Security Affairs
- Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners
- Meta wants to scrape your website to train its AI, and you can’t say no
- Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection
- Big Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel Flaw
- Attackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365
- Japan’s SiteGuard WAF flaw CVE-2026-106931 is already being exploited
- 16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password
- www.theregister.com - Articles
- Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline
- Security patches need patches now that attackers have AI
- ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFU
- Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking
- Blackhat Library: Hacking techniques and research
- Krebs on Security
- 网安寻路人
Activity