Repository navigation
[每日信息流] 2026-10-21 #1401
Description
每日安全资讯（2026-10-21）
- Private Feed for M09Ic
- spf13 forked spf13/nexus-service from hello-nexus/nexus-service
- spf13 starred hello-nexus/nexus
- anthropics released v2.1.305 at anthropics/claude-code
- ring04h starred multica-ai/multica
- killeven starred zinja-coder/jadx-ai-mcp
- esrrhs contributed to esrrhs/fakecc
- timwhitez starred deepseek-ai/deepseek-recipe
- esrrhs starred yetone/magpie
- CHYbeta starred yetone/magpie
- WAY29 starred thesysdev/openui
- pydantic released v1.107.8 at pydantic/pydantic-ai
- esrrhs starred HKUDS/CLI-Anything
- yuligesec starred sunblaze-ucb/exploitgym
- gh0stkey starred Agents365-ai/drawio-skill
- CHYbeta starred google-research/harness2
- CXSECURITY Database RSS Feed - CXSecurity.com
- SecWiki News
- Cybernews News
- France puts Meta, TikTok, other platforms on notice over riot content
- $500,000 worth of Nvidia RTX 5090 GPUs vanish from Brazilian airport
- There’s something you should know about Pink Panther from the French riots
- Two per customer: Why is Apple limiting iPhone Duo purchases?
- Swiss army rejects collaboration with Palantir 5 times
- Europe and Canada explore cable links as Trump befriends Putin
- Angeblich 100.000 Euro Schweigegeld für AfD-Datenleck geboten
- French presidential candidate calls for social media blackout amid riots
- Canada’s Telesat is building a Starlink rival and is ready to share it with Ukraine
- Someone allegedly offered €100,000 to bury German AfD party email leak
- Google Cloud resolves outage that crashed Revolut, Lloyds, HSBC and Spotify across Europe
- Feds say ransom negotiator actually ran ShinyHunters extortion site
- Some Google Home Speakers download excessive amounts of data, the company says it's on it
- Citizens Bank data exposed: here’s what customers need to know
- Father of PlayStation backs Sony’s decision to go disc-less, thinks gamers’ fury isn’t entirely logical
- Fake AI photos of elderly couple “robbed” in France riots spark outrage
- Netherlands sees the number of cybersecurity firms skyrocket amid rising threats
- 先知安全技术社区
- Tenable Blog
- Jiajun的技术笔记
- Doonsec's feed
- 第三届 TCH，第 60 名，以及最近对 Agent 的一点想法
- 「借 Windows 自家 GUI 消息把 payload 喂进进程：PhantomBuffer 凭啥让 EDR 的 WriteProcessMemory 监控形同虚设」
- 随手下载的越狱版模型，可能正把你的服务器密钥送出门
- DeepSeek 开源推理框架：走向真正普惠的未来
- SPIP X-Spip-Filtrej接口存在远程代码执行漏洞CVE-2026-77806 xa0附POC
- DeepSeek开源推理“魔法”：DeepInfer与deepseek-recipe拆解
- Hack The Box 实战：企业级靶场训练与真实攻防能力对标
- 为啥别人的 AI 秒回，你的还在转圈圈？
- 一年一度谷安双11狂欢开启！最高可省万元
- 内存取证-练习
- 勒索事件日报：2026年-10月-19日
- 2026 精武杯 手机取证部分
- 别再拼价格了！广交会买家在为省电买单
- 动作级实时护栏与中断机制
- DeepSentry 2.0.6 发布：让 Agent 会搜索、会思考，也能直接交付 Office 报告
- Vaelor正式发布：智能体可自主分析站点暴露面，提供更高阶的合规安全检查能力。
- “六张网”布局里的中国之治
- 高校网络安全等级保护测评方案
- 第107篇 AI全栈 · 漏洞链的艺术
- 第176篇：大模型驱动的 AI 智能体自动化入侵Hugging Face案例全过程复盘分析（超详细版上篇）
- 冲刺“美亚杯”！第二期赛前培训开放报名
- 为什么AI三十问能治好你的职场焦虑？面试跳槽、升职加薪，AI架构师、FDE转型等深度蜕变收藏必备
- 上周有个候选人，二面都过了，薪资也谈到58k*16了。结果背调的时候，前公司给了句：不建议录用。offer悬了，前司的离职评价真那么重要么
- 不用安装、不用启动服务，这个数据库有点不一样
- 还在每天手动给掘金签到？这个小工具帮你全自动搞定
- 重装系统，再也不用折腾半个下午了！免费神器 LetRecovery 保姆级使用教程
- 我被诈骗了
- Agentic AI 红队检查清单 —— 编排与 MLOps 基础设施（Orchestration & MLOps Infrastructure）
- G.O.S.S.I.P 阅读推荐 2026-10-20 PV-BENCH
- AI大模型失控怎么破？一图看懂如何“用AI管AI”
- 从工程师到全员，从个体到组织：快手企业AI生产力实践
- 安全客-有思想的安全新媒体
- Sucuri Blog
- Horizon3
- CVE-2026-101767 | Oracle E-Business Suite TCF SQL Injection and Remote Code Execution
- Horizon3 Surpasses $100 Million ARR, Marking a Key Milestone in the Shift to Continuous, Production-Safe Autonomous Security
- CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
- Horizon3 expands in Singapore to accelerate AI‑native proactive security across Southeast Asia
- NVISO Labs
- Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- pybluez
- camoufox v158.0-beta.40
- AI-Threat-Modeler
- BLT
- certstream-server-rust
- python-certifi
- ESP32Marauder nightly_45f47da
- Win32_Hash
- DecodeBox
- secure-headers-project
- gods-eye-view — Updated!
- NoDPI4Android
- paramtrace
- nmmp
- rea — Updated!
- wifisting
- 3snake
- aws-pentest
- trufflehog v3.99.3
- SilentSniffer
- get-trust-anchor
- iocs
- Securelist
- Reverse Engineering
- Malwarebytes
- Binary Ninja
- Mozilla Security Blog
- daniel.haxx.se
- Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
- A Domains Portfolio Managed and Operated by Exploit.in Cybercrime-Friendly Forum Community - An Analysis
- Username to IP Mappings for Darkforums.as Cybercrime-Friendly Forum Community - An Analysis - Part Five
- Username to IP Mappings for Darkforums.as Cybercrime-Friendly Forum Community - An Analysis - Part Four
- Username to IP Mappings for Darkforums.as Cybercrime-Friendly Forum Community - An Analysis - Part Three
- 奇客Solidot–传递最新科技情报
- 绿盟科技技术博客
- HackerNews
- rtl-sdr.com
- 黑鸟
- 威努特安全网络
- 安全客
- 安全内参
- 代码卫士
- 腾讯安全应急响应中心
- 信息安全国家工程研究中心
- Shostack & Friends Blog
- 安全研究GoSSIP
- 漏洞推送
- 微步在线
- 安全圈
- 数世咨询
- 补天平台
- 中国信息安全
- 看雪学苑
- 安全学术圈
- KCon 黑客大会
- 极客公园
- 青藤云安全
- 安全牛
- 奇安信 CERT
- 火绒安全
- 奇安信威胁情报中心
- 谛听ditecting
- 字节跳动技术团队
- 云鼎实验室
- 威胁猎人Threat Hunter
- 慢雾科技
- 国家互联网应急中心CNCERT
- 360数字安全
- TrustedSec
- Over Security
- Cyber security e interesse nazionale: il costo strategico delle vulnerabilità che restano invisibili
- 76% Faster Triage: How US SOCs Increase ROI Through Visibility and Automation
- Defense contractors in two NATO allies hacked in recent Russia-linked campaign
- Revolut outage disrupts online banking operations worldwide
- GDPR e NIS 2: quando la convergenza tra Safety e Security diventa obbligo giuridico
- The Checker You Pay For
- Poland Ran Pegasus Without Holding The Keys
- The journey of a paper unicorn: adventures inside a modern warehouse
- Voucher cloud e cyber: sfruttare al meglio i fondi per ridurre il gap delle pmi italiane
- Assurance Retraite - 70,372 breached accounts
- Qualys Security Blog
- 安全分析与研究
- ICT Security Magazine
- 安全419
- SANS Internet Storm Center, InfoCON: green
- 放之
- Schneier on Security
- SEI Blog
- Have I Been Pwned latest breaches
- 希潭实验室
- Krypt3ia
- Full Disclosure
- [0day-rubbish] TRENDnet TV-IP302PI firmware 1.02.38 authenticated NTP server-address OS command injection to root command execution via a shell-form system() call (7.2 High, PR:H)
- [0day-rubbish] Royal Render 9.1.26b: default-unauthenticated job submission on rrServer TCP 7773 reaches worker-side shell execution as the worker identity, measured root (8.1 High)
- [0day-rubbish] ProSoft Technology RLX-IFH24E v2.2.44 unsigned firmware upgrade package to root command execution and full account-database overwrite (7.2)
- [0day-rubbish] Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT anonymous deserialization in the database restore path to JSP command execution as uid=1000 (9.8)
- [0day-rubbish] Exasol Database 7.1.30 docker-db form: shipped default SYS credential to PYTHON3 UDF os.popen command execution as uid=500(exadefusr), output returned in-band (8.8)
- [0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the setWAN WAN-configuration handler, root command execution (7.2)
- [0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the formWlanMP manufacturing-test handler, root command execution (7.2)
- [ROOTEDCON] Call for Papers 2027 · RootedCON2027 (Madrid)
- www.theregister.com - Articles
- Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’
- Auto tech startup claims it traced hack attempt back to rival's IP address
- Palo Alto's firewall OS has been under attack from multiple ransomware groups since June
- Swamped curl maintainers take low-level flaws public to survive vulnerability 'avalanche'
- 'Password1' and a forgotten test account land Welsh outfits in hot water
- Bullhorn sees red after cyberattack knocks recruitment platform offline
- Whitehall shuts the front door on digital ID but leaves the back open
- UK finance watchdog wants firms to report AI failures and close calls
- Why cyber resilience is now a boardroom priority for UK public services
- ICANN testing tech to let law enforcement access non-public WHOIS info
- DeepSeek deep-sixed at all US federal civilian agencies
- TorrentFreak
- Instapaper: Unread
- 娜璋AI安全之家
- The Hacker News
- Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
- Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
- Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
- Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites
- Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election
- WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators
- What Security Teams Can Do To Tame Wild Code
- Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns
- Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader
- ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident
- Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware
- ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
- Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts Emerge
- Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware
- Deeplinks
- Security Affairs
- KitPloit - PenTest Tools!
- pybluez
- camoufox v158.0-beta.40
- AI-Threat-Modeler
- BLT
- certstream-server-rust
- python-certifi
- ESP32Marauder nightly_45f47da
- Win32_Hash
- DecodeBox
- secure-headers-project
- gods-eye-view — Updated!
- NoDPI4Android
- paramtrace
- nmmp
- rea — Updated!
- wifisting
- 3snake
- aws-pentest
- trufflehog v3.99.3
- SilentSniffer
- get-trust-anchor
- iocs
Activity