Repository navigation
[每日信息流] 2026-10-29 #1409
Description
每日安全资讯（2026-10-29）
- Private Feed for M09Ic
- xgo-dev released v1.0.9 at xgo-dev/llgo
- safedv starred ShawnPana/phone-harness
- wuhan005 contributed to sayrud/sayrud
- esrrhs starred heiher/hev-socks5-tunnel
- Y4er starred daeuniverse/honk
- itm4n released 2026.10.28-1 at itm4n/PrivescCheck
- Mr-xn forked Mr-xn/tongjiang-lab from smithjohn78390/tongjiang-lab
- Mr-xn starred smithjohn78390/tongjiang-lab
- Ridter starred DozenTwelve/Papermorph
- gh0stkey starred MG1937/rust_ASC
- 4ra1n starred yetone/magpie
- 0xbug starred egoist/mygo
- pydantic released v2.63.0 at pydantic/pydantic-ai
- SecWiki News
- Doonsec's feed
- Microsoft Security Blog
- 安全客-有思想的安全新媒体
- Cybernews News
- China-linked hackers exploit PHP2Shell to breach US government network
- Microsoft and Epic Games face AI backlash as gamers cry hypocrisy
- We think we've seen tech revolutions before. This expert says we're dead wrong
- PureVPN Makes Data Exposure Easier to Understand With a Free Scan
- AI sees the human race as “sheeple” who care about pleasing the masses over facts
- Russia desperate to camouflage its data centers to protect them from Ukraine’s drones
- Exclusive: Political deepfakes target Democrats more than Republicans ahead of midterms
- South Korean voice phishing gang intercepted victim’s calls to police and regulator
- Free AI models suddenly look much worse: leaderboard update delivers a massive rankings hit
- iJustine accused of “engagement bait” after tone deaf comment about iPhone Duo
- Firefox brings back Bad Luck Brian and other meme legends to resist big tech
- Discord makes public communities searchable, users immediately look for a way to opt out
- Can Claude Code really detect hidden cameras in hotel rooms?
- Texas accuses OpenAI of putting profits ahead of user safety
- Security vulnerability at Bitonic allows unauthorized access to customer accounts
- Scale AI reported to European authorities over alleged privacy violations
- I took this $1,300 exoskeleton to turn myself into a cyborg with good knees
- obaby 𝐢𝐧⃝ void
- Paper - 知道创宇404实验室
- Horizon3
- Didier Stevens
- Securelist
- GuidePoint Security
- Reverse Engineering
- SEO Poisoning Campaign Targets DeepSeek Users: Chinese Threat Actor Deploys Kong RAT via Multi-Stage Attacks
- I made a reverse engineered version of cursor that you can customize as you want
- JNISleuth-MCP: Automated Android JNI RegisterNatives recovery, ARM64 OLLVM (CSEL + BR X8) deobfuscator, and Ghidra / IDA Pro 9.0 bridge
- Inside our inline hooking engine: relocating prologues with iced-x86 (x86-64 + AArch64, deps closed to two crates)
- A new obliterated version of curser that works with your local models
- Does any one Reverse Engineered IDM ( Internet Download Manager) ??
- Malwarebytes
- Intigriti
- PortSwigger Blog
- Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- passer
- harlogger
- Charles-Proxy-Mobile-Guide
- svg-hush
- inventory
- svg-sanitizer
- blackbird
- BruteForceAI
- ahmia-site
- darkfox
- TorCrawl.py
- Darkus
- Evilginx3-Phishlets
- Awesome-Redteam
- CTF-All-In-One
- darc
- redStack
- OpenShell v0.1.6
- edk2-security
- get-the-hacker
- ILSpy v11.2
- alignment-cage-challenge-2
- GhostStrike
- Hacking-Cheatsheets
- safe-svg
- osint_stuff_tool_collection
- ScubaGoggles
- Black Hills Information Security
- rtl-sdr.com
- HackerNews
- 奇客Solidot–传递最新科技情报
- 黑海洋 - AI工具与技术教程｜免费资源与开发实战
- 绿盟科技技术博客
- 黑鸟
- 威努特安全网络
- 安全客
- 信息时代的犯罪侦查
- 青衣十三楼飞花堂
- 奶牛安全
- 安全内参
- 天御攻防实验室
- 数世咨询
- 代码卫士
- 信息安全国家工程研究中心
- 软件安全与逆向分析
- 中国信息安全
- 安全圈
- DEVCORE 戴夫寇爾
- 微步在线
- 看雪学苑
- 极客公园
- 奇安信威胁情报中心
- 默安科技
- 火绒安全
- KCon 黑客大会
- 安全牛
- 丁爸 情报分析师的工具箱
- 威胁猎人Threat Hunter
- 吴鲁加
- 字节跳动技术团队
- 安全学术圈
- 嘶吼专业版
- 360数字安全
- 云鼎实验室
- ICT Security Magazine
- 安全419
- Arturo Di Corinto
- CNVD漏洞平台
- SANS Internet Storm Center, InfoCON: green
- Securityinfo.it
- Qualys Security Blog
- Over Security
- Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
- Court strikes down West Virginia law barring disclosure of public officials’ personal data
- Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
- Japan Airlines warns of data breach as country grapples with multiple cyber incidents
- Discord to let search engines index public server messages
- L’evoluzione del SOC: dal limite del SOAR agli agenti AI
- The Screenshot Is Real, But the Timeline Might Not Be
- European digital rights nonprofit noyb sues Scale AI for ‘invasive’ worker surveillance
- US sanctions Russians, North Koreans for laundering IT worker earnings
- Sony ISP subsidiary data breach exposes 2.5 million customer records
- Moldova investigates possible foreign involvement in major government cyberattack
- Volt Typhoon hides zero-day attacks using 'Silent Train' framework
- UK to look at making software companies liable for cyber breaches
- Belarusian hackers increasingly acting as proxies for Russia amid war in Ukraine
- Servizi di sicurezza gestiti: la certificazione europea non riguarda soltanto i SOC
- Microsoft urges Entra ID admins to migrate users to passkeys
- Even after PHP2Shell, blast radius matters more than a CVSS score
- InfraTrust report warns of exploited flaws in critical network infrastructure
- CISA's Triage Flag Misses 13 Bugs Its Own Rules Say Need It
- Hackers now scanning systems for recently-patched Oracle flaw
- FBI seizes ‘bulletproof’ hosting site accused of facilitating child abuse, money laundering
- NordVPN anticipa il Black Friday 2026: sconto del 78% e 3 mesi extra sulla VPN da 3,49 € al mese
- AI-Powered Malware & Phishing Analysis for SOC Teams: Cut Workload and Speed Up Response
- How Tech Support Scams Exploit Google Ads and Trusted Websites
- Predictive vs. Reactive Threat Intelligence: What Businesses Need to Know
- Frost Radar 2026: Enterprise Risk and Path to Preemptive Security
- CISA warns of hackers now exploiting critical Node2Shell flaw
- Difendere gli aerei al tempo della guerra ibrida
- PHP2Shell, gli attacchi precedono la patch: cosa cambia per i difensori
- Millions of security cameras at risk: DoS vulnerability in Intelbras devices
- Nefilim and Hive ransomware affiliate gets 70 months in prison
- PHP2Shell Was Exploited Before the Patch
- False Protection, Emptied Accounts: The Seven Android Trojan Families Targeting Indian Banking Apps
- Tracking pixel nelle e-mail: promemoria operativo per titolari e piattaforme
- AI, il ritardo è nelle competenze: servono professionisti per superare i silos
- INJ3CTOR3 Malware Steals FreePBX Credentials, Enabling Toll Fraud After Cleanup
- Australian Data Breach Incidents Up 66% as AI Sharpens Scams
- Discord to Let Google Index Public Server Messages, Raising Privacy Concerns
- From Hijacked PBX to Stolen Trunk: INJ3CTOR3’s Campaign Evolves
- What Is Phishing? Recognizing and Preventing Attacks
- Coding Horror
- TorrentFreak
- TG Soft Software House - News
- The Hacker News
- Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
- Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
- Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
- PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
- Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
- Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
- Wazuh and AI for Enhanced SOC Workflows
- Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
- American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed
- Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
- FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering
- Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
- Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
- ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
- IndexSec
- Schneier on Security
- Deeplinks
- GRAHAM CLULEY
- KitPloit - PenTest Tools!
- passer
- harlogger
- Charles-Proxy-Mobile-Guide
- svg-hush
- inventory
- svg-sanitizer
- blackbird
- BruteForceAI
- ahmia-site
- darkfox
- TorCrawl.py
- Darkus
- Evilginx3-Phishlets
- Awesome-Redteam
- CTF-All-In-One
- darc
- redStack
- OpenShell v0.1.6
- edk2-security
- get-the-hacker
- ILSpy v11.2
- alignment-cage-challenge-2
- GhostStrike
- Hacking-Cheatsheets
- safe-svg
- osint_stuff_tool_collection
- ScubaGoggles
- www.theregister.com - Articles
- Instapaper: Unread
- Security Affairs
- Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail
- Ads or Surveillance? Researchers Flag Suspicious Targeting of Starlink Users
- CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers
- U.S. CISA adds Google Brotli and Adobe Commerce and Magento flaws to its Known Exploited Vulnerabilities catalog
- Three Japan-Focused Cyberattacks Show How Hackers Use AI
- Security Weekly Podcast Network (Audio)
- 网安寻路人
Activity