Repository navigation
[每日信息流] 2026-10-24 #1404
Description
每日安全资讯（2026-10-24）
- SecWiki News
- Private Feed for M09Ic
- Rvn0xsy starred Alejandros17487/ai-jailbreaks
- anthropics released v2.1.310 at anthropics/claude-code
- modelcontextprotocol released v1.8.4 at modelcontextprotocol/registry
- mgeeky starred whokilleddb/3lkToShell
- esrrhs contributed to esrrhs/golua
- esrrhs contributed to esrrhs/fakecc
- esrrhs made this repository public
- Mr-xn starred Gathin23/cleanyourtv
- modelcontextprotocol released v1.8.2 at modelcontextprotocol/registry
- 0xbug starred Calcium-Ion/moejs
- b1nhack forked b1nhack/linux-kernel-exploitation from xairy/linux-kernel-exploitation
- OpenAEV-Platform released 3.261023.0 at OpenAEV-Platform/openaev
- timwhitez starred JANUS-SEC/ZeroMDASH
- yuligesec starred JANUS-SEC/ZeroMDASH
- mgeeky starred rafalohaki/php2shell-poc
- gh0stkey starred abcwyc/pi-agent-desktop
- gh0stkey forked HACK-THE-WORLD/CVE-2026-40369-EXPLOIT from keecth/CVE-2026-40369-EXPLOIT
- esrrhs contributed to esrrhs/spp
- whwlsfb starred shuaiZend/PingWAF
- esrrhs starred github-linguist/linguist
- pydantic released v2.60.0 at pydantic/pydantic-ai
- Paper - 知道创宇404实验室
- Cybernews News
- Microsoft partner PwC is facing data breach claim
- PHP’s nightmare is far from over: new unpatched vulnerability found
- Resident Evil Maker says no game disruptions after breach, but users should stay vigilant
- Giving away your old TV? You should wipe it just like you would your phone
- eMudhra quits issuing trust certificates after blunder triggers Java and Python updates
- Musk's $1B stake at Skydance raises questions for CNN
- Nokia partners with Ukraine to build a Starlink alternative as Trump asks Musk to ditch limits
- Hundreds of thousands of trees chopped down to make space for Google data centers
- AI godfather Geoffrey Hinton says we’re toast if we’re not nice to bots
- Samsung One UI 9 update leaves some phones stuck in setup mode or with a drained battery
- Morgan Stanley, Bank of America, Citi have started blocking AI agents
- French lawmakers propose tagging rioters with invisible markers to track them down later
- GRU hacked Kushner’s iPhone, but the Dutch flipped a Russian spy and took a look themselves
- Europol investigators identify 51 potential human trafficking victims online
- Scammer admits to fraud scheme targeting US military personnel with stolen PII
- Russia seeks to sow chaos ahead of US midterms, lawmakers warn
- Quest Diagnostics confirms breach of lab systems, patient data now at risk
- Fortinet says patch now, details later, but experts warn of hacks before Nov 10 disclosure
- Doonsec's feed
- 【风险提示】天融信关于Node.js Brotli解码器远程代码执行漏洞(CVE-2026-111497)的风险提示
- PHP2Shell：一个漏洞，让全球近七成网站紧张了三天
- 每个企业都应该有一套AI自动化渗透测试系统
- 1024 还有谁没领到 Zcode 送的300亿 GLM-5.3 Token？
- 一部被监听的iPhoneX，牵出横跨三国的二十亿美元秘密资金网
- PHP中的关键RCE漏洞(CVE-2026-109618, CVE-2026-109619)
- 2026年网络空间安全学术会议在成都成功召开
- PHP又爆未修复xa0RCExa0漏洞？别慌！没那么严重
- 【开源报告】美国国务院2026年度对外援助项目清单深度解析与中国的应对
- 【竞赛】第四届全国大学生开源情报数据采集与分析大赛火热进行中
- u200bCNNVD关于Oracle多个安全漏洞的通报
- 信息安全漏洞周报（2026年第42期）
- 26精武杯服务器
- PHP 中的高危远程代码执行漏洞
- 高危漏洞复盘｜从公开学号到脱库，某高校平台双重安全隐患剖析
- CarMore 无线连接教程：安卓走 CarLife，苹果走 CarPlay
- 2026年渗透测试双线基础：Windows命令与PHP文件/网络函数，从Shell到RCE的实战拆解
- PHP2Shell 不是核弹，也不是玩具：把利用链拆成两段就看懂了
- Node.js 双高危漏洞预警：CVE-2026-105482｜CVE-2026-105481
- 南京大学 | SPAR：用对抗式LLM交互从RFC中萃取精确的网络协议格式规范
- PHP2Shell 漏洞席卷全球：当未知漏洞来袭，安全防护能否不再依赖规则更新？
- 三星 Galaxy Z Fold 9 爆料汇总：3.9 毫米是目标，落地还早
- 【工业行业】解读｜GB/T41400-2026《网络安全技术 工业控制系统网络安全防护能力成熟度模型》
- 我学了2个月，拿了1.5w
- 速修！Node.js曝RCE漏洞，CVSS评分9.2
- 寰球密码简报（2026年乙本第31期）丨德国后量子密码迁移指南——量子时代的生存法则
- KCon 2026 议题抢先看：当 AI 开始行动，安全如何以更高标准重画边界？
- 更新WordPress也没用：PHP2Shell之后，比打补丁更要紧的7件事
- 河北镌远百日奋战第一阶段成果检视（9.23-10.23）
- 某互联网大厂安全工程师实习面经
- 赛迪党委书记、副院长刘文强：以碳排放双控为抓手 确保工业和信息化领域碳达峰目标如期实现
- 鸿蒙系统下首款截图贴图录屏工具
- 鸿蒙系统首款跳过开屏广告神器
- 一条 POST 伪装任意用户：Bytebase 未认证登录绕过（CVSS 9.8）
- 不止PHP，Node.js曝出4项高危漏洞，排查处置指南来了！
- PHP2Shell 之后，Imperva 又拿 Node.js 开刀
- PHP2Shell 的「最终兵器」被解剖了：ChaCha20 加密配置的 Mirai 变种
- 那位2017年阻止了WannaCry的黑客对php2shell的看法
- 发布 | 中央网信委印发《国家信息化“十五五”规划》（附全文）
- 发布 | 国务院办公厅关于适应人工智能技术发展助力构建就业友好型发展方式的意见
- CNCERT | 关于“银狐”木马“镜昙（G02）”团伙攻击态势深入分析报告
- 信息化"十五五"规划发布，智能体与端侧大模型纳入评估备案
- 清华大学 x 中国信通院「BigModelGym 大模型安全评测体系」联合发布
- 直播回顾｜FDE岗位一年增长729%，安全人的下一个能力层在哪里？
- PHP 被曝严重远程代码执行漏洞，阿里云快速防护指南速览
- 未来CSO · FDE启学营 | 首期即将开课，课表正式公开
- 秦安：太狡猾了，突然转向！特朗普支持内塔尼亚胡，很可能是让以色列再次打击伊朗，要高度警惕！
- 视频监控被境外盯上了：南昌网信办处罚某电缆公司，等保、日志、技术措施三项全缺
- OpenViking 网关：让任意客户端用上 Agentic 记忆
- 【处置手册】PHP远程代码执行漏洞（CVE-2026-109618/CVE-2026-109619）
- NMG - .NET 内存壳生成器
- 第十八届大学生学术科技创新节暨2026年CTF新生杯网络安全大赛正式开启！
- AiPy Pro 2.1.1 更新：更省 Token，运行更稳定
- crAPI 靶场实战：OWASP API Top 10 的越权与逻辑缺陷
- 自进化长效智能体：Prime Agent 项目全方位解析
- 再再再次通过CMMI5级评估！渊亭科技持续提升研发与交付能力
- 专题·网暴治理 | 网络暴力的治理难点与立法回应
- 前沿 | 自甘风险规则在智能体安全责任中的适用
- 行业 | 端云一体讯飞星火X2.6大模型正式发布——让敏感数据留在端，把复杂任务交给云
- 观点 | 构建人工智能赋能社会治理的风险防范体系
- 评论 | 智能体犯错，谁来承担责任？
- ZeroFall——面向攻防测试与情报分析场景的 Windows AI工作台
- 【在野利用】PHP Core 远程代码执行漏洞（CVE-2026-109618/109619）
- 关于“银狐”木马“镜昙（G02）”团伙攻击态势深入分析报告
- 多重风险或加剧PHP高危漏洞威胁，360图龙锋开放免费安全体检
- Mac 只能用 4K / 5K 屏？180 元副屏接上后，才发现……
- 上新日 | 文件夹、代码、压缩包、3D 模型……一键全预览，Unfold 上架！
- 2026中国海博会丨盛邦安全带你探秘“船—海—港”安全底座
- 威胁情报｜警惕！Web3 面试题暗藏盗窃后门
- Crypt0xa0资金行情日报2026-10-23
- AI暴露数字世界的安全欠账，加速安全企业分化
- 黑客劫持公网暴露AI模型发起攻击，算力成本由受害者承担
- Microsoft Security Blog
- Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- Decepticon v1.5.4
- NetSpecter
- vphone-cli v2.12.0
- regextokens
- agenttriage-open-source
- Windows-LPE-Auditor
- mcp-gamehacking
- nuclei-templates v10.5.1
- retrokit
- IDA-Processor-Modules
- SecLog
- beyond_asr
- Agent-Reach v1.6.0
- aide
- bruno v4.3.0
- ns2jb
- Locksmith2
- Vidar-Stealer-Chrome-Injection-Malicious-JS-Targeting-Google-Reddit-Sessions-Analysis
- ConfluenceC2
- Deep-Live-Cam v2.8
- yara-rules
- Memory-injection
- sudp
- NVISO Labs
- Horizon3
- Reverse Engineering
- iPhone
- GitHub - alltechdev/mtk-imei-switcheroo: Read and write IMEI records and WiFi/Bluetooth addresses in MediaTek NVRAM files or partition images. Includes interactive ADB tools for rooted devices and separate, version-specific modem/LK patchers for biloba.
- Switch 2 Jailbreak
- Mesh2CAD | A New Approach to Reverse Engineering — Coming Soon
- [Open Source] 2XL Racing Legacy Server Emulation Project (FastAPI backend + libndkwrapper.so binary attached for analysis)
- Ps4 PKG extractor for Android
- Quantum logic is completely reversible and absolute fun to learn now
- GitHub - 1llu50ry/mcp-gamehacking: MCP (Model Context Protocol) server for game hacking & reverse engineering. A structured knowledge base of 4,100+ skills with full source code archives, specialized agents, and workflow tools.
- Five IDA Processor Modules for Uncommon Architectures — xCORE, C7x, PRU, MicroBlaze and NVIDIA SASS
- PortSwigger Blog
- Malwarebytes
- rtl-sdr.com
- HackerNews
- 绿盟科技技术博客
- 奇客Solidot–传递最新科技情报
- 梵高名画《The Starry Night》可能描绘的是真实的夜空
- 希腊通过法案禁止 15 岁以下儿童使用社媒
- 宫本茂成为首位获得日本文化勋章的游戏从业者
- 联合国警告厄尔尼诺可能导致数千万人粮食短缺
- mRNA 癌症疫苗将死亡复发风险减少 42%
- 浏览器 Arc 将于 12 月关闭
- Switch 2 越狱能运行自制程序
- KeePassXC 2.8.0 释出
- eMudhra 退出全球 CA 业务
- 趋势科技在公开的内核邮件列表上披露内核漏洞
- 科学家揭示低温延缓衰老的机制
- 逾半数美国人认为 AI 对社会有害
- 研究识别出第一位企业心理病态者
- 毅力号行使距离超机遇号刷新历史记录
- 因加州考虑征收亿万富翁税扎克伯格有意离开
- OpenClaw 作者称他上个月花掉了千万美元的 Tokens
- 美光桃园厂员工罢工一天
- EA 关闭 BioWare 工作室，取消《质量效应》新作开发
- 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台
- 黑鸟
- 长亭安全应急响应中心
- 安全客
- 威努特安全网络
- 360 Netlab Blog - Network Security Research Lab at 360
- 奶牛安全
- 代码卫士
- 安全内参
- 天御攻防实验室
- 信息安全国家工程研究中心
- 中国信息安全
- 君哥的体历
- 安全圈
- 电子物证
- M01N Team
- 奇安信 CERT
- 微步在线
- 极客公园
- 安全牛
- 网络空间安全科学学报
- 火绒安全
- 字节跳动安全中心
- 复旦白泽战队
- 奇安信威胁情报中心
- 天融信阿尔法实验室
- 深信服千里目安全技术中心
- 字节跳动技术团队
- 奇安信病毒响应中心
- 嘶吼专业版
- OPPO安全中心
- 慢雾科技
- 360数字安全
- Over Security
- Abandoned Popcorn Time app exposed millions of device to RCE attacks
- Sintesi riepilogativa delle campagne malevole nella settimana del 17 – 23 ottobre
- Microsoft Teams to get AI-powered, context-aware phishing detection
- Artificial Intelligence and Reverse Engineering: Defeating DoNex by Automating Analysis with REA and MCP Protocol
- Reports of PHP bug exploitation attempts grow as experts downplay viability of exploits
- FCC bans two devices with surveillance chips linked to Huawei
- Microsoft: Windows Server 2016 reaches end of support in January
- Endpoint isolation e microsegmentazione per la rete B2B
- What Companies House's New 'Verified' Label Proves, And What It Doesn't
- Quest Diagnostics confirms data breach exposed patient records
- Svizzera sotto attacco: il furto di dati mette a nudo i segreti della Confederazione
- Plan, Do, Check… Quack!
- PHP shares mitigation for new RCE vulnerability with no patch
- Falsi inviti Microsoft Teams e calendari trappola: così il phishing ruba le credenziali aziendali
- You gave your AI agent access, but who is giving it orders?
- UK proposes 14-year prison terms for undersea cable sabotage
- AI War Videos: Why The Hidden Labels Rarely Survive A Repost
- Agenti AI nei conti bancari USA: quali rischi, anche in Italia
- Quest Diagnostics warns of potential data theft after attack on lab service system
- HPE patches eight max severity RCE and auth bypass AOS flaws
- The Cyber Express Weekly Roundup: PHP2Shell Knocks Wikipedia Offline, ASD Retires the Essential Eight and More
- TotalVPN con antivirus e adblock inclusi a 1,59 euro al mese: protezione multi-dispositivo e crittografia per la sicurezza online
- INTERPOL’s Operation Serengeti III Disrupts 10,909 Malicious Networks
- Fake Reviews, Deceptive Ads: FTC Targets Alleged Passport Scam
- BalCCon2k26: Deconstructing Modern macOS Initial Access Vectors
- BSides Tallinn: Deconstructing Modern macOS Initial Access Vectors
- Field Notes: EtherRAT Distributed Through a Legitimate Intune Workflow
- Field Notes: Reconstructing an Attacker’s Workflow
- PHP2Shell, perché applicare le patch non basta a mettere in sicurezza i sistemi
- Japan AI Cyberattack Simulations Planned as PHP Flaws Disrupt Services
- La cooperazione come cultura nei trattamenti dati per finalità di Polizia
- Bankruptcy Notices Are Down, And Courts Are Handing You The Job
- AI Act, il decreto italiano entra in vigore: nuovi poteri di controllo e rischi per le aziende
- Why Fintechs Must Treat Software Supply Chain Security as an Enterprise Risk
- PHP2Shell,milioni di siti Web a rischio e la disclosure diventa un caso
- Yak Project
- 白泽安全实验室
- Qualys Security Blog
- Securityinfo.it
- 墨菲安全
- SANS Internet Storm Center, InfoCON: green
- Schneier on Security
- ICT Security Magazine
- LastKnight.com Feed
- JUMPSEC
- Tor Project blog
- 悬镜安全
- Instapaper: Unread
- Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
- Analyzing Android Phones At Scale - Anthony
- Does opting out of smart TV tracking work Research finds “suspicious” traffic.
- PHP2Shell strumenti per verificare l’esposizione alle vulnerabilità critiche
- 333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
- eMudhra to Exit Global SSLTLS Business After 8 Intermediate CA Keys Found Easily Guessable
- The Hacker News
- BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
- Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
- Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
- Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
- PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches
- Russia-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
- Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
- Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
- Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
- PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
- Deeplinks
- Security Affairs
- PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches
- Meta Faces $25 Billion Penalty Linked to Cambridge Analytica Scandal
- PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet
- INTERPOL Operation Serengeti III Nets 1,462 Arrests and Recovers $105 Million in Cybercrime Crackdown
- Daniel Miessler
- KitPloit - PenTest Tools!
- Decepticon v1.5.4
- NetSpecter
- vphone-cli v2.12.0
- regextokens
- agenttriage-open-source
- Windows-LPE-Auditor
- mcp-gamehacking
- nuclei-templates v10.5.1
- retrokit
- IDA-Processor-Modules
- SecLog
- beyond_asr
- Agent-Reach v1.6.0
- aide
- bruno v4.3.0
- ns2jb
- Locksmith2
- Vidar-Stealer-Chrome-Injection-Malicious-JS-Targeting-Google-Reddit-Sessions-Analysis
- ConfluenceC2
- Deep-Live-Cam v2.8
- yara-rules
- Memory-injection
- sudp
- GRAHAM CLULEY
- www.theregister.com - Articles
- 绿盟科技CERT
- Security Weekly Podcast Network (Audio)
Activity