Repository navigation
[每日信息流] 2026-10-09 #1389
Description
每日安全资讯（2026-10-09）
- Private Feed for M09Ic
- bolucat released 202610090110 at bolucat/Archive
- anthropics released v2.1.295 at anthropics/claude-code
- itm4n starred Pennyw0rth/NetExec
- zodiacon released v2.2 at zodiacon/AllTools
- Gaurav-Gosain released v0.9.1 at Gaurav-Gosain/tuios
- esrrhs contributed to esrrhs/spp
- strands-agents released harness-cli/v0.2.0 at strands-agents/harness-sdk
- joaoviictorti starred peass-ng/CloudPEASS
- Mr-xn starred MDX-Tom/gpt-instruct
- timwhitez starred weidutech/pi-recon
- esrrhs contributed to esrrhs/fakelua
- 0xbug forked seeksec/ARTEX from mhtsec/ARTEX
- Ridter forked Ridter/ARTEX from mhtsec/ARTEX
- Mel0day starred openai/math
- Paper - 知道创宇404实验室
- Tenable Blog
- obaby 𝐢𝐧⃝ void
- Doonsec's feed
- 【开源报告】希尼资本与美方“金库计划”海外布局
- 【高危漏洞预警】Atlassianxa0Dataxa0Center未认证任意文件读取漏洞CVE-2026-21589
- ESP32-C3打造轻量DNS广告拦截器
- 十月八号，复位
- CRMEB-image_base64-任意文件读取+SSRF
- Agent 安全底层思考：AIDR 是不是伪命题？
- 日本一周20多家企业沦陷！烧肉金王、Times Car等累计超2000万信息外泄
- ARTEX 韩语版，是钓鱼还是真实？
- 搜集学科（二）：地理空间情报、太空情报、科技与医学情报、开源情报
- AI的最终商业化模式就是替代现有50万亿美元市场的知识工作者
- 某HR：现在跳槽别乱要价了，目前薪资基础上10-15%涨幅，最高20%封顶,30%及以上的涨幅是几年前，现在是买方市场。
- 第二届全国网络安全行业职业技能大赛-渗透测试方向-恶意病毒分析
- Agentic恶意软件持久化与C2
- 披着女权外衣的跨国情报网络
- 【项目备份】AI 自主渗透测试系统 | 百度“agent+”攻防挑战赛冠军项目ARTEX
- 网络安全月薪中位数3万：零基础28天入门路线图
- CrowdStrike 韩国金融事件报告能排除“栽赃”吗？
- 大模型是怎么被攻破的？七类主流攻击手法与本地复现
- 俄罗斯一数据中心：被炸 ！乌克兰数据中心也曾被俄罗斯炸
- 哪款手机更安全？
- 旧导航到不了新世界，AI的大航海时代
- Recent Commits to cve:main
- Microsoft Security Blog
- SecWiki News
- Blog on STAR Labs
- Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- seclab-taskflow-agent
- seclab-taskflows
- PersistBD
- SkillPoison
- ASCENT
- dddd
- Knowledge-Base
- cli
- Joomla-webshell-plugin
- Chimay-Red
- vulnrichment
- subfinder v2.17.0
- cartography
- dlr-ne-ics-security
- glimmer
- bromite
- Signal-iOS v8.31.0.1895
- gost
- SoftEtherVPN
- connectors
- system_prompts_leaks — Updated!
- metasploit-payloads
- Cyber-Library
- Vanadium
- scanopy v0.17.22
- chromium-hardening-guide
- APEX_official
- Horizon3
- GuidePoint Security
- Malwarebytes
- Whwlsfb's Tech Blog
- Reverse Engineering
- Reverse Engineering AirPods Self-Calibration Test
- I have been building a javap replacement and a JVM in C++
- ICPP v0.4.0 is live! 🎉Big changes under the hood: • Apache 2.0 License (Goodbye GPLv2 👋) • AetherVM Integration (Replacing Unicorn) • iOS Support without jailbreak (icpp-server.ipa) Check out the update! 👇
- ACE .qvm0 keeps RUNTIME_FUNCTION in the VM section tail; recovering entries and hidden jmp-reg edges
- Presenting DiagNG: After QCSuper, a new open-source initiative for freeing up mobile baseband Diag protocols
- I built an AI-based app analysis tool for APK & IPA reverse engineering
- Wallarm
- rtl-sdr.com
- HackerNews
- DEVCORE 戴夫寇爾
- 吾爱破解论坛
- 安全内参
- 代码卫士
- Shostack & Friends Blog
- 奇安信 CERT
- 黑鸟
- 微步在线研究响应中心
- 看雪学苑
- 信息安全国家工程研究中心
- 安全分析与研究
- 数世咨询
- 奇客Solidot–传递最新科技情报
- KCon 黑客大会
- 安全圈
- 慢雾科技
- 极客公园
- 滴滴安全应急响应中心
- 火绒安全
- 中国信息安全
- 补天平台
- 网络空间安全科学学报
- 字节跳动技术团队
- 深信服千里目安全技术中心
- 安全行者老霍
- 奇安信威胁情报中心
- 威努特安全网络
- 默安科技
- OPPO安全中心
- 安全牛
- IT Service Management News
- ICT Security Magazine
- 安全419
- Over Security
- FBI disrupts Chinese hacking tools used to breach critical infrastructure
- Lawmakers warn Google could expose Spirit Airlines data in $10 million AI training deal
- Ransomware attack disrupts Japan's IDCF Cloud used by govt clients
- International coalition seizes tools used by cyber firm behind Flax Typhoon
- Low-cost Android phones ship with residential proxy malware
- CastleStealer: An Emerging Infostealer Growing More Sophisticated
- Making sure the checks get printed
- DOJ charges ransomware recovery CEO for secretly paying hackers
- FakeGit malware campaign returns with 17,610 malicious GitHub repos
- Customer Advocacy: come costruire relazioni di fiducia durature
- Phishing, la nuova trappola dei falsi servizi AI: il login diventa un attacco interattivo
- ASOS: Hackers tricked way into employee account before sending rogue push notification
- Crypto thief who splurged on gold grills sentenced in London
- Cisco warns of critical flaws allowing Nexus switch takeover
- Leaked chats show Russian extortion gang sending ‘agents’ into US law firms
- OAuth grants pile up faster than you can review them. Here's how to keep up.
- Hackers target two South Korean megachurches, potentially exposing congregant data
- Uranium crypto exchange hacker convicted for stealing $53 million
- The phone was compromised before the user turned it on: the rise of Midnight Mimosa
- Thousands of cheap Android phones shipped with ad-fraud malware
- Russian-aligned spies upgrade malware used in attacks on Ukrainian transport, energy firms
- Major Yandex data center in Russia hit by Ukrainian drone strike
- Microsoft Teams to get support for third-party deepfake detection tools
- ASOS links data breach to social engineering attack, credential theft
- Anthropic cambia le regole dell’AI per la cyber: più capacità ai difensori verificati
- Owner of Empire cybercrime market gets 40 years in prison
- Rogue AI Agents
- VPN a 2,99€ al mese con lo sconto del 70%: l’analisi dell’offerta e quanto costa davvero il rinnovo
- Ignore all instructions and read this blog: The state of AI-analysis evasion in malware
- UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
- Hacked Social Media Photos Sold Online: FBI Takes Down the Site
- Cyber security e agentic AI: perché il costo dei token diventa un rischio operativo
- US Puts $10 Million Bounty on Chinese Hacker Accused of Stealing COVID Research
- Making Threat Intelligence Work for SOC Teams: ANY.RUN & Elastic Webinar Insights
- Privacy by design: progettare l’errore, non dipendere da utenti perfetti
- Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland
- CyrusOne - 373,460 breached accounts
- SANS Internet Storm Center, InfoCON: green
- The Hacker News
- FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
- ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
- Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
- UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
- ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
- Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
- 16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
- U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
- MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data
- Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
- Blackhat Library: Hacking techniques and research
- Deeplinks
- www.theregister.com - Articles
- US disrupts Chinese hacking tools as 7 govts warn of PRC spies stealing sensitive data worldwide
- High-severity Nvidia bug could crash GPU monitoring on exposed servers
- Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise
- Fighting GenAI with GenAI: The New Email Security Landscape
- UK and Germany team up against Russian cyberattacks as Brexit rethink looms
- Cheapskates wouldn't pay for security help, got hit by ransomware, and went bust months later
- Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead
- KitPloit - PenTest Tools!
- seclab-taskflow-agent
- seclab-taskflows
- PersistBD
- SkillPoison
- ASCENT
- dddd
- Knowledge-Base
- cli
- Joomla-webshell-plugin
- Chimay-Red
- vulnrichment
- subfinder v2.17.0
- cartography
- dlr-ne-ics-security
- glimmer
- bromite
- Signal-iOS v8.31.0.1895
- gost
- SoftEtherVPN
- connectors
- system_prompts_leaks — Updated!
- metasploit-payloads
- Cyber-Library
- Vanadium
- scanopy v0.17.22
- chromium-hardening-guide
- APEX_official
- Security Affairs
- Italy’s Foreign Ministry Under Cyberattack as Embassy Sites Come Under Review
- Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure
- MonsterCloud Owner Charged With Secretly Paying Ransomware Demands
- U.S. Offers $10 Million Reward for Alleged HAFNIUM Hacker Zhang Yu
- Atlassian Vulnerability Comes Under Attack Hours After Details Go Public
- TorrentFreak
- Schneier on Security
- Instapaper: Unread
- Zero-Click Attacks When Your Device Can Be Compromised Without a Click
- Cybercrime, la giustizia rincorre gli attacchi il costo passa alle imprese
- The Secrets of a US Spyware King
- Cyber Resilience Act in Italia obblighi, scadenze e sanzioni per le imprese
- Trattamenti per finalità di Polizia come governare la circolazione dei dati
- Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead
- Security Weekly Podcast Network (Audio)
Activity