Repository navigation
[每日信息流] 2026-10-31 #1411
Description
每日安全资讯（2026-10-31）
- SecWiki News
- Private Feed for M09Ic
- pydantic released v2.64.0 at pydantic/pydantic-ai
- strands-agents released harness-typescript/v0.3.3 at strands-agents/harness-sdk
- esrrhs contributed to esrrhs/fakelua
- Gaurav-Gosain released v0.12.0 at Gaurav-Gosain/tuios
- wuhan005 contributed to sayrud/sayrud
- Mr-xn starred t8y2/dbx
- modelcontextprotocol released v1.8.7 at modelcontextprotocol/registry
- DVKunion starred my9app/ipasupersign
- freqtrade released 2026.10 at freqtrade/freqtrade
- timwhitez starred yaklang/OpenXDR
- ZeddYu starred NVIDIA/OpenShell
- 0xbug forked seeksec/cve-2024-10441-synology-rce from Ntn10/cve-2024-10441-synology-rce
- gh0stkey starred anywhere-labs/dsh-desktop
- esrrhs starred google/elephant-goldfish-model
- timwhitez starred superdesigndev/treg
- whwlsfb starred blacktop/ida-mcp-rs
- anthropics released v2.1.314 at anthropics/claude-code
- Rvn0xsy starred spellshift/realm
- 先知安全技术社区
- Doonsec's feed
- Binance 一夜被盗 63 亿美元，资金流向了哪里？
- 他让 AI 助手复盘牌局，AI 却在后台揪出一个盯了自己三年的黑客
- 新锐启航，共筑安全运营新篇章丨中资网安2026年新员工培训圆满结束
- 热点速览 | 每周网安大事件（20261019-20261025）
- Linux 内核里躺了六年半的一个清理顺序问题
- 腾讯发布《WorkBuddy企业版安全白皮书》，让Agent进入企业可控可溯可管
- 如果 Agent 犯错是大概率事件，企业安全应该如何设计？
- Beatrice.py 源码解读
- 密码产品部署、使用、运维、销毁
- 2026最新 Pikachu 漏洞练习平台通关教程
- 好靶场杯第一届综合赛-古法赛道-流量分析-FTP流量分析
- Linux挖矿病毒应急排查实战【附靶机链接】
- 二手 iPhone 避坑：15PM 和 16PM 怎么选
- 国产模型正在重写网安能力的入口
- 不拆闪存也能抽固件：BD Alaris 8015 输液泵的活体 JTAG
- 《人工智能赋能钢铁行业高价值场景技术路线图（2026版）》（征求意见稿）发布
- 关于征集“AI+工业互联网安全”产教融合合作共建单位的通知
- 第五届“鼎信杯”大赛增设“开源鸿蒙生态创新”赛道
- 安天智甲 Linux 版本可有效防护 Cerber 勒索软件变种 "C3RB3R"
- 破防！PHP2Shell 漏洞首现实战利用，无认证 RCE 拿下服务器权限
- 智能网联安全学术沙龙（智慧家庭安全）活动在青岛举办
- 1508万元！41个安全项目集中挂网
- 黑客用 DeepSeek 智能体并行渗透 200 机构：没装猎鹰的机器先打
- 币安63.6亿美元被盗案
- 群晖 NAS 勒索事件引热议：你的公网入口，谁在把关？
- AI加入攻防后，防守方首先要改掉的3个习惯
- 中央网信办召开网信系统传达学习党的二十届五中全会精神视频会议
- 数据泄露情报 2026.10.31 - 170G 美国军工铝铸造数据（员工 PII，合同，客户资料)
- 把朋友圈交给一个透明的沙箱：一次安全架构设计
- Proving Grounds 实战：黑盒渗透测试的六阶段工程化流程
- 漏洞预警｜Linux内核 TCP IP选项远程代码执行漏洞（CVE-2026-98432）
- 秦安：姆巴佩是谁？竟敢如此踩线，外交部警告，人民愤怒，市场不惯着！解约只是开始，反思必须跟上。
- DiPlay 更新 0.2.22：0.2.21 那几个坑终于填了
- 2026年6—10月国内网络攻击事件与企业受损情况报告（附官方信源）
- 存量摄像头利旧，信创私有化部署、国产AI 多路视频监控平台，支持国标 GB28181，适配海康、大华、宇视
- Qiko3.0正式全面开放！AI 算力积分免费送！
- 2026年 第4卷 第5期
- 关于新型僵尸网络VeilDHT大范围传播的风险提示
- 关于"美国国土安全部雇员数据泄露"的几个小问题
- 【高危漏洞预警】Linux内核TCP子系统竞争条件Use-After-Free漏洞CVE-2026-98432
- 十五五智能制造｜大型汽车集团ERP系统建设落地方案，驱动整车产业数字化转型
- 每周高级威胁情报解读(2026.10.23~10.29)
- 35款App违法违规收集使用个人信息被通报
- HashCat 8.0 重磅发布！这次更新了什么？
- 一个数据包的旅程：5G安全无线局域网里的“护送队”都有哪些高手？ （上）
- 安全资讯汇总：2026.10.26-2026.10.30
- 限免一周｜Memfit 全面升级：安全评估，流量分析与知识系统
- OWASP LLM Top10 2026：AI 安全进入治理时代
- 技海扬帆勇担当 先锋引领启新程——优秀党员谢振瑜的奋斗篇章
- 电子取证初探——电子取证实训一（计算机取证）
- 世界第一！360图龙锋登顶CyberGym国际AI安全榜单
- 从“救火英雄”到“防火工程师”：AI正在改写网络安全的底层逻辑
- 无印良品官方App遭非法访问，最多2726万条用户信息或已外泄
- 未来CSO · FDE启学营 | 首期即将开课，课表正式公开
- ZeroG-零重力 CTF 2026（WEB）
- 117项！渊亭科技发明专利再创新高！
- 赏金猎人实战：喂一段压缩数据，官方 Node.js 就被打成 RCE
- AI与云安全事件案例分析周报｜2026.10.26 - 2026.10.30
- 弗吉尼亚理工大学 | 从“能力”到“性能”：LLM 渗透测试智能体的功能属性评测
- openpilot 全新 SR 上线：这次升级了什么？
- “朝匠技弈”网安技能竞赛圆满收官，360助力打造数字安全工匠名片
- 网络安全AI商业化加速！谷歌明码标价兜售最新模型
- 币安疑遭史上最大黑客盗窃案，被盗资产或超420亿元
- 币安63亿美元损失：「白+黑」攻击总能成功，AI赋能安全赋能了个寂寞
- 喜报｜众安天下独家承办某专项活动，荣膺北京铁路公安局五项表彰
- 众安天下创始人杨蔚受邀为河南省地方铁路公安局讲授AI实战课程
- 一周安全事件回顾：420亿元！史上最大黑客盗窃案叒刷新
- 一图速览奇安信2026第三季度财报
- 保密领域技术交流应用研讨会在奇安信安全中心举行
- AI 开发普及的今天，企业研发效率提升了多少？
- 天翼安全“大模型安全检测与防护系统”通过公安部第三研究所网络安全产品检测认证
- QECon北京2026｜小红书创新产品的 AI Native 质量工程实践
- 烽火狼烟丨暗网数据及攻击威胁情报分析周报（10/24-10/30）
- 网络安全信息与动态周报2026年第43期（10月19日-10月25日）
- 警惕Office宏文件与陌生脚本，切勿随意运行
- 珞安科技实力入选《2026年中国网络安全市场全景图》多个细分领域
- 全球最大加密交易所币安遭入侵，被盗金额或超57亿美元
- 每周蓝军技术推送（2026.10.24-10.30）
- Tenable Blog
- Cybernews News
- UFO disclosure rocked as Kelly Chase alleges drugging and deception
- TikTok influencers caught willing to hide sponsored political content
- Proton users cancel subscriptions following CEO Andy Yen’s “loser thinking” remarks
- Cyberattack knocks Belgium’s tax services offline ahead of filing deadline
- Invisible “SMS of Death” crashes Android phone, traps victim in reboot loop until factory reset
- This French content creator built a map that can track police movements worldwide
- Nvidia CEO targeted by alleged Chinese spy
- Hacker attack hits Sony’s internet provider, exposing millions of records
- Reddit CEO shares major platform updates in new shareholder letter: Rollout starts outside the US
- Finland launches criminal probe into land clearance for Google data centre
- UK social media ban could mean more users must prove their age online
- French privacy watchdog fines FNAC €7M for tracking app users without consent
- Google suffers its worst value crash in history amid AI bubble burst fears
- Columbia University to pay $16.1M to settle cyberattack lawsuit
- Binance hack: North Korean hackers blamed for $6.3B theft
- 安全客-有思想的安全新媒体
- Paper - 知道创宇404实验室
- Microsoft Security Blog
- Securelist
- NVISO Labs
- Reverse Engineering
- D2-Web: Diablo II 1.13c Open-Source and Playable in Browser
- 81.5% code recovered for mythical Icewind Dale 2 lost source code. ETA 2027 unless you plug your agents today!
- Built a Microsoft-signed Windows kernel filter driver for keyboard & mouse input.
- I couldn't find a Flutter-specific security scanner that runs entirely on Android, so I built one. No root, no PC, no internet.
- PUBG Lite DEVLOG #9 - Movement, Airplane, Blue Zone update
- Reverse engineering the SMS and phonebook formats in Nokia Series 30+ backups
- GameFrame: Code skills for humans and agents for reverse engineering and rebuilding old games
- Didier Stevens
- Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- Intigriti
- Malwarebytes
- 风雪之隅
- HackerNews
- 绿盟科技技术博客
- 奇客Solidot–传递最新科技情报
- 腾讯玄武实验室
- 黑海洋 - AI工具与技术教程｜免费资源与开发实战
- 微步在线研究响应中心
- 黑鸟
- 威努特安全网络
- 网安志异
- 安全客
- 奶牛安全
- 看雪学苑
- 我的安全视界观
- 安全内参
- 360 Netlab Blog - Network Security Research Lab at 360
- 360漏洞云
- 绿盟科技研究通讯
- 数世咨询
- 电子物证
- 中国信息安全
- 安全圈
- 长亭科技
- 微步在线
- KCon 黑客大会
- M01N Team
- 安全牛
- 极客公园
- 安全学术圈
- 网络空间安全科学学报
- 奇安信 CERT
- 火绒安全
- 知道创宇404实验室
- ChaMd5安全团队
- 慢雾科技
- 情报分析师
- 表图
- 360数字安全
- 吴鲁加
- 字节跳动技术团队
- 奇安信病毒响应中心
- 纽创信安
- Over Security
- Critical Linux kernel flaw allows remote root attacks on MPTCP servers
- Linux kernel exploit enables remote root attacks on MPTCP servers
- DOJ raises privacy concerns over potential sale of Character.AI chats
- Fashion retailer Resolve says hackers stole payment card information
- Sintesi riepilogativa delle campagne malevole nella settimana del 24 – 30 ottobre
- Ransomware, l’attacco a PQE Group rivela il rischio nascosto nei backup cifrati
- Open-weight AI models can exploit the patch gap
- PHP2Shell in Italia: il rischio per oltre 285mila servizi PHP
- Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach
- Registrazione NIS2: il 31 ottobre chiude il canale per i ritardatari
- Trezor warns of suspected crypto-theft implant in hardware wallet
- Attacco a Binance: in 20 minuti la Nord Corea compie il furto cripto del secolo
- Tailscale Investigates Serious SSH Privilege Escalation Issues After Tailworm Report
- Discord to Let Google Index Public Server Messages, Raising Privacy Concerns
- INJ3CTOR3 Malware Steals FreePBX Credentials, Enabling Toll Fraud After Cleanup
- Australian Data Breach Incidents Up 66% as AI Sharpens Scams
- FBI Seizes Bulletproof Hosting Domain Linked to Cybercrime
- Ransomware Attacks on Hospitals and Businesses Lead to 70-Month Sentence
- Three Cyberattack Campaigns Target Japan, Exposing AI’s Growing Role
- Binance Security Incident Affects $6.3 Billion in Crypto Assets, $3 Billion Frozen
- The Cyber Express Weekly Roundup: Binance Hit by $6.3 Billion Security Incident, South Korea Busts AI-Powered Hacking Ring and More
- Sample Post
- Non sapevo d’essere in filiera
- Comitato controllo e rischi: la supervisione delle minacce cyber
- Syrian Electronic Army hacker gets prison time for attacks on Western targets
- Malicious Claude Code extension on Cursor planted SSH backdoors
- SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone
- Bellingcat's Donor-Fund Total Checks Out On One Reading Of The Years
- CISA says max severity GitLab flaw now exploited in the wild
- British spy agency cannot account for thousands of data storage devices, watchdog says
- Hackers target government Windows systems in Asia with new malware
- Russian popular home goods chain faces days of disruption following cyberattack
- Polymarket confirms cyberattack on third-party provider after outages
- Microsoft Teams sotto attacco: falsi tecnici IT sfruttano le chat esterne per violare le aziende
- Microsoft finally fixes VPN issues caused by September updates
- Drupal warns of critical Commerce Core flaw exploited in attacks
- Piani di hosting web e promozioni Black Friday: sconti fino all’85 per cento, domini gratuiti e strumenti di intelligenza artificiale
- PHP2Shell: diminuiscono le URL potenzialmente vulnerabili. Disponibili gli strumenti AgID
- Filter generation in practice: from algorithms to LLMs
- Binance hit by record $6.3 billion crypto hack, scrambles to freeze funds
- PEERSTITCH, il malware fantasma nei firewall Fortinet: quando il rischio arriva dal fornitore
- Binance links $6.3 billion crypto theft to compromised DevOps laptop
- GDPR, otto anni di enforcement hanno cambiato le regole della protezione dei dati
- Oltre la crittografia: proteggere i dati dall’archiviazione all’elaborazione
- Deepfake Fraud Prevention: Why Detection Alone Fails
- LastKnight.com Feed
- Yak Project
- IT Service Management News
- 美团技术团队
- Qualys Security Blog
- Krypt3ia
- 大兵说安全
- ICT Security Magazine
- Javvad Malik
- Arturo Di Corinto
- 白泽安全实验室
- Schneier on Security
- SANS Internet Storm Center, InfoCON: green
- Security Affairs
- Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries
- U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog
- $6.3 Billion Stolen from Binance in Attack Attributed to North Korea
- How to prioritize remediation after a pentest: a practitioner workflow
- Hacker leaks data on more than 40,000 Homeland Security employees
- Deeplinks
- Blackhat Library: Hacking techniques and research
- KitPloit - PenTest Tools!
- GRAHAM CLULEY
- TorrentFreak
- The Hacker News
- Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
- TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
- WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
- Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis
- Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving
- Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison
- Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor
- Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
- CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
- Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
- Instapaper: Unread
- www.theregister.com - Articles
- Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see
- GM cracks the petty cash box for multistate driver tracking settlement
- Anthropic: That Claude Code extension compromise… couldn't be us
- British intelligence agency misplaced 'thousands' of storage devices, years later still can't say how many
- In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security
- Tor Project blog
- Daniel Miessler
Activity