{"repo": "brucefeiix/picker", "files": {"archive/daily/2026/2026-04-30.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747303.9313447, "n": 35016, "h": "b7fcb64fa4e681e4", "c": "# 每日安全资讯（2026-04-30）\n\n- SecWiki News\n - [ ] [SecWiki News 2026-04-29 Review](http://www.sec-wiki.com/?2026-04-29)\n- Microsoft Security Blog\n - [ ] [8 best practices for CISOs conducting risk reviews](https://www.microsoft.com/en-us/security/blog/2026/04/29/8-best-practices-for-cisos-conducting-risk-reviews/)\n- LoRexxar's Blog | 信息技术分享\n - [ ] [Ghost Bits，Java WAF之殇？](https://lorexxar.cn/2026/04/29/java-ghost-bits/)\n- Recent Commits to cve:main\n - [ ] [Update Wed Apr 29 11:15:54 UTC 2026](https://github.com/trickest/cve/commit/9edbb018c0d81e99e33edf3064ce19ffcd1635d8)\n- Verne in GitHub\n - [ ] [在 OpenClaw 中使用 Moomoo API Skills 查看和分析日本股市](https://blog.einverne.info/post/2026/04/openclaw-moomoo-api-japan-stock-analysis.html)\n- 博客\n - [ ] [Apt Conflicts and Replaces](https://dyrnq.com/apt-conflicts-and-replaces/)\n- 先知安全技术社区\n - [ ] [面向大模型隐私推理的安全协议-MPC与ZK的角色分工](https://xz.aliyun.com/news/92061)\n - [ ] [Agentic / Context](https://xz.aliyun.com/news/92060)\n - [ ] [AI洪流下的防守对抗新范式](https://xz.aliyun.com/news/92059)\n - [ ] [LLM 能帮一个安全工程师干些什么](https://xz.aliyun.com/news/92058)\n - [ ] [AI For Security：AI在云产品安全建设中能做什么？](https://xz.aliyun.com/news/92056)\n- Tenable Blog\n - [ ] [Mastering agentic AI security through exposure management](https://www.tenable.com/blog/mastering-agentic-ai-security-through-exposure-management)\n- bunnie's blog\n - [ ] [Name that Ware, April 2026](https://www.bunniestudios.com/blog/2026/name-that-ware-april-2026/)\n - [ ] [Winner, Name that Ware March 2026](https://www.bunniestudios.com/blog/2026/winner-name-that-ware-march-2026/)\n- 安全客-有思想的安全新媒体\n - [ ] [安全进入“AI自主攻击”时代，瑞数信息如何用AI对抗AI](https://www.anquanke.com/post/id/315417)\n - [ ] [智能体关键年：Agent扎根业务流，AI生产力正在形成](https://www.anquanke.com/post/id/315419)\n - [ ] [深度分析Sorry勒索软件的加密实现与行为特征](https://www.anquanke.com/post/id/315390)\n- InfoSec Write-ups - Medium\n - [ ] [WaTF Bank Walkthrough (Part 4): Exploiting Android App Security Flaws](https://infosecwriteups.com/watf-bank-walkthrough-part-4-exploiting-android-app-security-flaws-fb8c8bc6da14?source=rss----7b722bfd1b8d---4)\n - [ ] [URL Anatomy & Encoding: Why Your Payloads Break](https://infosecwriteups.com/url-anatomy-encoding-why-your-payloads-break-faec39eef0c5?source=rss----7b722bfd1b8d---4)\n - [ ] [PaloAltoRCE Lab Write-Up | By BnHany](https://infosecwriteups.com/paloaltorce-lab-write-up-by-bnhany-03e767059788?source=rss----7b722bfd1b8d---4)\n- ElcomSoft blog\n - [ ] [New Security Features and Low-Level Extraction of iOS 26](https://blog.elcomsoft.com/2026/04/new-and-updated-security-features-in-ios-26-and-their-forensic-implications/)\n- Doonsec's feed\n - [ ] [MajorDoMo admin.php接口存在远程代码执行漏洞CVE-2026-27174 附POC](https://mp.weixin.qq.com/s/Z2dWGAwId9e7H5yXQVsxPA)\n - [ ] [（19）6.3 变更的策划 — 企业信息安全负责人必读系列丛书书稿《ISO/IEC 42001: 2023人工智能管理体系标准的谬误辨析与实施详解》](https://mp.weixin.qq.com/s/scBT9TwoXwBP1lLRpURbgA)\n - [ ] [（18）6.2 人工智能目标及其实现的策划—企业信息安全负责人必读系列丛书《ISO/IEC 42001:2023人工智能管理体系标准谬误辨析与实施详解》](https://mp.weixin.qq.com/s/LqUTynQyndu3zhMUk6zwww)\n - [ ] [（17）6.1.4 人工智能系统影响评估—企业信息安全负责人必读系列丛书《ISO/IEC 42001: 2023人工智能管理体系标准的谬误辨析与实施详解》](https://mp.weixin.qq.com/s/foCIiZyI8NKHyPm1ZCUj7w)\n - [ ] [（16）6.1.3 人工智能风险应对 —企业信息安全负责人必读系列丛书书稿《ISO/IEC 42001: 2023人工智能管理体系标准的谬误辨析与实施详解》](https://mp.weixin.qq.com/s/vEUHywddCn63M8wvlxkRrA)\n - [ ] [（15）6.1.2 人工智能风险评估 —企业信息安全负责人必读系列丛书书稿《ISO/IEC 42001: 2023人工智能管理体系标准的谬误辨析与实施详解》](https://mp.weixin.qq.com/s/wzb3mCpekOkwHPGDH-nB4Q)\n - [ ] [这才是公安需要的警务研判新大脑！](https://mp.weixin.qq.com/s/kGJx5twKjeCG6hQA4ZBsRQ)\n - [ ] [国投智能战略“跃迁”：基本盘稳固，新引擎发力](https://mp.weixin.qq.com/s/urPhZzpkWNW7MwcvNe1gjQ)\n - [ ] [Misc-Galaxysail：一站式 CTF Misc 杂项分析工具](https://mp.weixin.qq.com/s/3bFWifwmXZaF_jwDkJNbQA)\n - [ ] [红石V5：资产管理功能](https://mp.weixin.qq.com/s/zE5q7hGyoFLHSrGBkB4abA)\n - [ ] [供应链攻击永无眠：SAP CAP & Cloud MTA npm 供应链攻击事件报告](https://mp.weixin.qq.com/s/gaeeRzgxg-E_9G6_vtfO_g)\n - [ ] [Ghost Bits 绕waf原理研究分析](https://mp.weixin.qq.com/s/7rOTGcXQCkOoiVUmXGI8sA)\n - [ ] [第一次密评题库易错题公益答疑圆满完成，未来不忘初心，继续前行](https://mp.weixin.qq.com/s/hyfpyTYv2VwqjPTWD5H4-A)\n - [ ] [网络安全行业，已经连续 11 个季度没增长了](https://mp.weixin.qq.com/s/GmFsx4DJt85gVXzLqtgFMw)\n - [ ] [DeepSeek突然「开眼」，识图模式灰度上线](https://mp.weixin.qq.com/s/FsWfW-KZpr1EmiTg8ha1NA)\n - [ ] [2026护网专项行动，你参与不](https://mp.weixin.qq.com/s/m7rB8Q6MKjmVjJA4v_vchg)\n - [ ] [勒索动态 | 新勒索组织对深圳某上市通信制造企业发起勒索威胁，核心数据面临泄露风险](https://mp.weixin.qq.com/s/A3OgtT-DMOHb0CdsxrtlNQ)\n - [ ] [【首发】从APIServer到Kubelet：K8sPenTool如何串起一条云原生攻击链？](https://mp.weixin.qq.com/s/l0lfe6LbD5BHT89dl650qQ)\n - [ ] [倒计时1天 | 2026智能云生态大会](https://mp.weixin.qq.com/s/t7d8RkkihWnzo2eoA81R3w)\n - [ ] [获奖名单公布！2026数字中国创新大赛·数字安全赛道——网络和数据安全产业赛圆满落幕](https://mp.weixin.qq.com/s/Stro6eS_0wz8xxxEn4xPTg)\n - [ ] [公安机关发布景区游览、大型活动安全提示](https://mp.weixin.qq.com/s/NrMGihjXaJ1BvpIyYCMNPQ)\n - [ ] [9秒删库，AI“越狱”的真实样本](https://mp.weixin.qq.com/s/KOXyj1MY81F8w0CL8ikS1w)\n - [ ] [GhostBits-WAF-Bypass-Toolkit——针对 Java 幽灵比特位漏洞的 WAF 绕过辅助脚本](https://mp.weixin.qq.com/s/Q6SqplB6NUzs2_lc5WuQww)\n - [ ] [Telegram担保市场深度研究：平台演化、生态结构与监管挑战](https://mp.weixin.qq.com/s/xZpj8v8VWZwTpBHOwPDo0g)\n - [ ] [破解数据跨境难题！杨“数”浦数字沙龙第十五期精彩回顾](https://mp.weixin.qq.com/s/Q9A5yxJ74p-g4KopG6ubAw)\n - [ ] [五一假期将至：网警以案说法防微杜渐 守好网络安全关](https://mp.weixin.qq.com/s/q2MfLE2ACbQm_gBnQUZF6Q)\n - [ ] [CCB决赛有感(附RE/AI题目附件)](https://mp.weixin.qq.com/s/yL69Ee2pmFD2AMe6YX6RQQ)\n - [ ] [腾讯员工公寓曝光，竟是这样的布置！](https://mp.weixin.qq.com/s/0tOs8D31gMUc6C6pSFctNg)\n - [ ] [全球海拔高度数据集下载服务上线](https://mp.weixin.qq.com/s/Yl0-mDD3WZ7HzdnkqofaHg)\n - [ ] [【漏洞通告】Github-Enterprise远程命令执行漏洞(CVE-2026-3854)](https://mp.weixin.qq.com/s/bWSo1ktSYgWQXCQZvY_DJw)\n - [ ] [【漏洞通告】LiteLLM SQL注入漏洞(CVE-2026-42208)](https://mp.weixin.qq.com/s/ruU7aGSsvZY24ILNi4zkrw)\n - [ ] [网络安全信息与动态周报2026年第17期（4月20日-4月26日）](https://mp.weixin.qq.com/s/OyeRfDTqiOZPgJgebAJBsg)\n - [ ] [如何让齐静春帮我打CTF](https://mp.weixin.qq.com/s/gaRO5oL73NuILTNofHRvYg)\n - [ ] [紧急通知：此号即将注销！](https://mp.weixin.qq.com/s/YbhUXF5vy1NQJvdlPC5MuA)\n - [ ] [花600美元就能监听天上数据？银行记录、军事机密全在卫星上裸奔！](https://mp.weixin.qq.com/s/ZHzG0n-iecHrEg1Titl4BA)\n - [ ] [Ubuntu 22中找不到libcrypto.so.1.1](https://mp.weixin.qq.com/s/oSTBkL9GbSY_ixtGXRjXcw)\n - [ ] [王小洪在全国公安机关常态化开展扫黑除恶斗争推进会议上强调 以为人民出政绩以实干出政绩的使命担当 坚决抓好常态化扫黑除恶斗争](https://mp.weixin.qq.com/s/hMi7yAGOhfJz_cxiJ2MtWw)\n - [ ] [AI彻底取代产品经理？言之凿凿，却为时尚早](https://mp.weixin.qq.com/s/LwuX9E5XodMYKdU0_CUPdw)\n - [ ] [新型 VECT 2.0 勒索软件可破坏 Windows、Linux 和 ESXi 系统上超过 128 KB 的文件](https://mp.weixin.qq.com/s/rp85FK3zKX3GPpIOGcdMJA)\n - [ ] [实验室学生参加软件系统安全赛华东区现场赛](https://mp.weixin.qq.com/s/5PDDKgKYlCgS_usfUxWU2w)\n - [ ] [什么是Eth-trunk？](https://mp.weixin.qq.com/s/NcsEOuSdajNzu8JGDfiJXg)\n - [ ] [最近的收藏爱好：攒内存条](https://mp.weixin.qq.com/s/qQ_ITMkqlcZHfiKMzMdabQ)\n - [ ] [假期出行，请勿随意扫描来源不明的二维码](https://mp.weixin.qq.com/s/mDnCOQtflfawUEzp0qsqZQ)\n - [ ] [新型沙虫通信技术利用Tor隧道进行SSH远程访问](https://mp.weixin.qq.com/s/XcU7KHJfuzugFibEBOtE-w)\n - [ ] [cPanel发布严重身份验证漏洞警告——紧急补丁已发布](https://mp.weixin.qq.com/s/eBnlFVk8Q4GQNP6keHuSjQ)\n - [ ] [北京银行打造AI原生能力、已建成280+智能体](https://mp.weixin.qq.com/s/qTqzCEsbJ1ad3pDlF9HGhQ)\n - [ ] [AI快讯：去年我国Token调用量达21100万亿，DeepSeek灰度测试多模态识图模式](https://mp.weixin.qq.com/s/vjlI9P8JuV7r59OpZ1FdQw)\n - [ ] [金智维单一！国联民生证券金智维RPA系统采购项目](https://mp.weixin.qq.com/s/MDqRG6punPHfxSPEHSHwPA)\n - [ ] [【安全圈】伊朗黑客组织：已“开盒” 2379 名美国海军陆战队员，掌握数万名中东美军姓名、住址、日常轨迹、购物习惯等](https://mp.weixin.qq.com/s/-8ESG0kUMs_4Grq6RAlDgA)\n - [ ] [【安全圈】医疗科技大厂美敦力 IT 系统遭遇黑客入侵，未影响服务交付](https://mp.weixin.qq.com/s/ez8tByW_23TppI7DUoq5BA)\n - [ ] [【安全圈】巴西 LofyGang 团伙沉寂三年后卷土重来，发起 Minecraft LofyStealer 窃取器活动](https://mp.weixin.qq.com/s/KzK57Of1l-GhHE2Kj7EH9g)\n - [ ] [Ghost Bits 自动化提效：让WAF绕过告别重复劳作](https://mp.weixin.qq.com/s/WMD3MQ-8QM8hZXtTpbxFnA)\n - [ ] [分享一个渗透测试必备的POC速查网站](https://mp.weixin.qq.com/s/RAbn3W0NNbqbALHktf8U5Q)\n - [ ] [如何通过幽灵比特位绕过限制与利用](https://mp.weixin.qq.com/s/w_OG-WYREo4emmpcfVoNnQ)\n - [ ] [某省级发改委线上会议竟全程被外人旁听：警惕线上会议泄密](https://mp.weixin.qq.com/s/Zun7a5k3PRBUgJ9znhFykA)\n - [ ] [化身自主思考、动态演进的攻击者：AI如何重塑钓鱼攻击格局](https://mp.weixin.qq.com/s/lNtPDgGmg09mZBWA_JGqhQ)\n - [ ] [第三届“长城杯”网数智安全大赛（防护赛）总决赛在福州顺利闭幕](https://mp.weixin.qq.com/s/wl3kEqASy-iL1bS6MuW6lQ)\n - [ ] [信安世纪深耕新兴应用场景 打开安全防护新增长曲线](https://mp.weixin.qq.com/s/9XSwSWLCXn5r4bZsn7jl9g)\n - [ ] [周三：资讯速递（OpenAI漏洞赏金、安全skills库、OpenClaw漏洞）](https://mp.weixin.qq.com/s/7HTN5GYNkrQkfFuL2gaVJw)\n - [ ] [2025-2026免杀技术年鉴](https://mp.weixin.qq.com/s/PupDKHBbyP1ZKlaaAOoKow)\n - [ ] [众测src测试姿势总结上](https://mp.weixin.qq.com/s/G4L5Q1hQ-OuPMNqKpGTmTQ)\n - [ ] [关于AI与工作的一点思考](https://mp.weixin.qq.com/s/FYfaQiomvZ7lYJPFpLyupQ)\n - [ ] [以资产治理为基，筑网络安全之盾。灵创网络空间资产风险感知系统，智能感知每一处风险，用心守护每一份资产！](https://mp.weixin.qq.com/s/n6bAWp_-aUIgecjVyoJQsA)\n - [ ] [咱网安人自己的度娘，漏洞情报查询一步直达](https://mp.weixin.qq.com/s/RpN6WMjou-yH-sGyWtnCWg)\n - [ ] [【红队工具】Kerberos TGT Monitor BOF](https://mp.weixin.qq.com/s/E3yEN4vu9t4mZ-A_hgei1g)\n - [ ] [生成端合规之后，传播端的真正考题才开始](https://mp.weixin.qq.com/s/Ml4_15zIVuGET9eeZgq4IQ)\n - [ ] [Ghost Bits，Java WAF之殇？](https://mp.weixin.qq.com/s/JaxVrys8tqGnXsWhfFzAPw)\n - [ ] [构建密码学资产清单：微软密码学态势管理实践指南](https://mp.weixin.qq.com/s/cZI1bHPiEJnaznUEibrz9Q)\n - [ ] [前沿 | 人工智能对关键信息基础设施安全治理带来的影响](https://mp.weixin.qq.com/s/UZmvE9meJQB9mnjqr-UhPQ)\n - [ ] [发布 | 国家数据局发布《数字中国发展报告（2025年）》](https://mp.weixin.qq.com/s/SvQekhWc5qvm4Irr0ih7dg)\n - [ ] [第九届数字中国建设峰会“数据基础设施和数据标准化分论坛”在福州召开](https://mp.weixin.qq.com/s/18BuZVSRCxUe_0AMQ1J57w)\n - [ ] [第九届数字中国建设峰会数字技术赋能工业园区高质量发展专题会议在福州成功举办](https://mp.weixin.qq.com/s/vlcPXxwXOp9tBD3xh2YifA)\n - [ ] [关注 | 国家网信办就个人信息保护政策法规问题最新解答](https://mp.weixin.qq.com/s/BFr1Qo4lxNDY_zOxNBEbgQ)\n - [ ] [关注 | 市场监管总局部署开展网络食品销售虚假宣传专项整治](https://mp.weixin.qq.com/s/5ldOyozCgpHlp3FgALwq4A)\n - [ ] [成功复现！一条 git push 即可接管 GitHub 服务器，任意拉取他人私有仓库 (CVE-2026-3854)](https://mp.weixin.qq.com/s/3BgVRD3ap1MukW8C2kPS2w)\n - [ ] [直播回顾｜安全运营AI 进阶：AI威胁研判的场景化应用与落地路径](https://mp.weixin.qq.com/s/nWS-Udu2X_qLvPcnUWcbww)\n - [ ] [持安科技五一劳动节放假期间值守通知！](https://mp.weixin.qq.com/s/h13-V5F4wIiyD5r_6MighA)\n - [ ] [28个Claude子Agent重构渗透测试，一键部署AI黑客军团](https://mp.weixin.qq.com/s/7UvpaAmzQtg7IQ21p8wuQw)\n - [ ] [直播预告：“古法挖洞”还能走多远？](https://mp.weixin.qq.com/s/hxW_S8aaOza2awbuqv_LuA)\n- Blog on STAR Labs\n - [ ] [Three Bugs Walk Into a PDF: Prototype Pollution, Served Cold](https://starlabs.sg/blog/2026/04-three-bugs-walk-into-a-pdf-prototype-pollution-served-cold/)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [Backup Files + .env Exposure Developers Ki Sabse Badi Galti: Config Files Se Credentials Nikalo!](https://infosecwriteups.com/backup-files-env-exposure-developers-ki-sabse-badi-galti-config-files-se-credentials-nikalo-1432674639b8?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [From Zero Reports to My First Hall of Fame](https://infosecwriteups.com/from-zero-reports-to-my-first-hall-of-fame-177eb70afd58?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [This Is How I Could Have Reactivated Your Instagram Account Without Your Knowledge](https://infosecwriteups.com/this-is-how-i-could-have-reactivated-your-instagram-account-without-your-knowledge-9d220bda5620?source=rss----7b722bfd1b8d--bug_bounty)\n- Malware-Traffic-Analysis.net - Blog Entries\n - [ ] [2026-04-22: Malicious ad leads to ClickFix-style page for macOS malware](https://www.malware-traffic-analysis.net/2026/04/22/index.html)\n- Reverse Engineering\n - [ ] [I'm not an expert but a beginner. So using guides I've tried an app in everyway for intercepting network traffic.Frida didn't worked even. The app doesn't even work in a rooted I tried decompiling and change network config. But doesn't work as after installed the app redirects play store for update.](https://www.reddit.com/r/ReverseEngineering/comments/1sywof4/im_not_an_expert_but_a_beginner_so_using_guides/)\n - [ ] [I built a free open-source CAN bus reverse engineering workstation in Python — 15 tabs, offline ML, dual AI engines, MitM gateway](https://www.reddit.com/r/ReverseEngineering/comments/1syxlkh/i_built_a_free_opensource_can_bus_reverse/)\n- Malwarebytes\n - [ ] [Researchers built a chatbot that only knows the world before 1931](https://www.malwarebytes.com/blog/ai/2026/04/researchers-built-a-chatbot-that-only-knows-the-world-before-1931)\n - [ ] [Microsoft won’t patch PhantomRPC: Feature or bug?](https://www.malwarebytes.com/blog/news/2026/04/microsoft-wont-patch-phantomrpc-feature-or-bug)\n - [ ] [Scam-checking just got a lot easier: Malwarebytes is now in Claude](https://www.malwarebytes.com/blog/product/2026/04/scam-checking-just-got-a-lot-easier-malwarebytes-is-now-in-claude)\n- The Trail of Bits Blog\n - [ ] [Extending Ruzzy with LibAFL](https://blog.trailofbits.com/2026/04/29/extending-ruzzy-with-libafl/)\n- Exploit-DB.com RSS Feed\n - [ ] [[webapps] HAX CMS 24.x - Stored Cross-Site Scripting (XSS)](https://www.exploit-db.com/exploits/52526)\n - [ ] [[webapps] Craft CMS 5.6.16 - RCE](https://www.exploit-db.com/exploits/52525)\n - [ ] [[local] GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation](https://www.exploit-db.com/exploits/52524)\n - [ ] [[webapps] phpMyFAQ 4.0.16 - Improper Authorization](https://www.exploit-db.com/exploits/52523)\n - [ ] [[webapps] GeographicLib v2.5.1 - stack buffer overflow](https://www.exploit-db.com/exploits/52522)\n - [ ] [[local] OpenWrt 23.05 - Authenticated Remote Code Execution (RCE)](https://www.exploit-db.com/exploits/52521)\n - [ ] [[webapps] OpenKM 6.3.12 - Multiple](https://www.exploit-db.com/exploits/52520)\n - [ ] [[webapps] GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)](https://www.exploit-db.com/exploits/52519)\n - [ ] [[webapps] JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution](https://www.exploit-db.com/exploits/52518)\n - [ ] [[webapps] FacturaScripts 2025.43 - XSS](https://www.exploit-db.com/exploits/52517)\n - [ ] [[webapps] Xibo CMS 4.3.0 - RCE via SSTI](https://www.exploit-db.com/exploits/52516)\n - [ ] [[local] Fedora - Local Privilege Escalation](https://www.exploit-db.com/exploits/52515)\n - [ ] [[webapps] LangChain Core 1.2.4 - SSTI/RCE](https://www.exploit-db.com/exploits/52514)\n - [ ] [[local] Atlona ATOMERX21 - Authenticated Command Injection](https://www.exploit-db.com/exploits/52513)\n- daniel.haxx.se\n - [ ] [curl 8.20.0](https://daniel.haxx.se/blog/2026/04/29/curl-8-20-0/)\n- text/plain\n - [ ] [Exploiting Vulnerable Drivers](https://textslashplain.com/2026/04/29/exploiting-vulnerable-drivers/)\n- 奇客Solidot–传递最新科技情报\n - [ ] [Zed 编辑器发布 1.0 版本](https://www.solidot.org/story?sid=84187)\n - [ ] [城里的鸟更怕女性，原因未知](https://www.solidot.org/story?sid=84186)\n - [ ] [.icu 域名被短暂劫持](https://www.solidot.org/story?sid=84185)\n - [ ] [荷兰政府上线开源代码托管平台](https://www.solidot.org/story?sid=84184)\n - [ ] [报告称逾三分之二婴儿使用屏幕，最多花 8 小时在屏幕上](https://www.solidot.org/story?sid=84183)\n - [ ] [马斯克称他创办非盈利的 OpenAI 是为了对抗 Google](https://www.solidot.org/story?sid=84182)\n - [ ] [打呵欠有助于大脑清理脑液](https://www.solidot.org/story?sid=84181)\n - [ ] [食肉细菌在三天内就破坏了男子的手臂和腿](https://www.solidot.org/story?sid=84180)\n - [ ] [Ghostty 项目将退出 GitHub 平台](https://www.solidot.org/story?sid=84179)\n - [ ] [Fedora Linux 44 释出](https://www.solidot.org/story?sid=84177)\n - [ ] [美国数据中心新建天然气项目排放量超过部分国家一年总排放量](https://www.solidot.org/story?sid=84176)\n- Black Hills Information Security, Inc.\n - [ ] [A Practical Guide to BloodHound Data Collection](https://www.blackhillsinfosec.com/bloodhound-data-collection/)\n- 绿盟科技技术博客\n - [ ] [Claude Mythos Preview 模型能力解析：大模型攻防实测与企业应对建议](https://blog.nsfocus.net/claude-mythos-preview-%e6%a8%a1%e5%9e%8b%e8%83%bd%e5%8a%9b%e8%a7%a3%e6%9e%90%ef%bc%9a%e5%a4%a7%e6%a8%a1%e5%9e%8b%e6%94%bb%e9%98%b2%e5%ae%9e%e6%b5%8b%e4%b8%8e%e4%bc%81%e4%b8%9a%e5%ba%94%e5%af%b9/)\n - [ ] [绿盟云原生靶场：体系化教学，让客户安全人才培养更高效](https://blog.nsfocus.net/%e7%bb%bf%e7%9b%9f%e4%ba%91%e5%8e%9f%e7%94%9f%e9%9d%b6%e5%9c%ba%ef%bc%9a%e4%bd%93%e7%b3%bb%e5%8c%96%e6%95%99%e5%ad%a6%ef%bc%8c%e8%ae%a9%e5%ae%a2%e6%88%b7%e5%ae%89%e5%85%a8%e4%ba%ba%e6%89%8d%e5%9f%b9/)\n - [ ] [【公益译文】2026年国际AI安全报告（六）](https://blog.nsfocus.net/%e3%80%90%e5%85%ac%e7%9b%8a%e8%af%91%e6%96%87%e3%80%912026%e5%b9%b4%e5%9b%bd%e9%99%85ai%e5%ae%89%e5%85%a8%e6%8a%a5%e5%91%8a%ef%bc%88%e5%85%ad%ef%bc%89/)\n - [ ] [权威认证 | 绿盟科技再次荣膺CNCERT甲级支撑单位](https://blog.nsfocus.net/%e6%9d%83%e5%a8%81%e8%ae%a4%e8%af%81-%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e5%86%8d%e6%ac%a1%e8%8d%a3%e8%86%bacncert%e7%94%b2%e7%ba%a7%e6%94%af%e6%92%91%e5%8d%95%e4%bd%8d/)\n- 锦行科技\n - [ ] [锦行科技获评广东省制造业单项冠军--以网安技术赋能制造业高质量发展](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247494887&idx=1&sn=9f95427d136c978534caa7d31e2c0251)\n- HackerNews\n - [ ] [塴輿 LofyGang ĺ›˘äź™ć˛‰ĺŻ‚ä¸‰ĺš´ĺŽĺˇĺœŸé‡ćĽďźŒĺ‘čľˇ Minecraft LofyStealer çŞƒĺ–ĺ™¨ć´ťĺŠ¨](http://0.0.0.0:8080/post/64195)\n - [ ] [Signal é’“éąźć´ťĺŠ¨çž„ĺ‡†ĺžˇĺ›˝ĺŽ˜ĺ‘˜ďźŒç–‘äźźäż„ç˝—ć–ŻčĄŒĺŠ¨](http://0.0.0.0:8080/post/64194)\n - [ ] [ćœ‰çźşé™ˇçš„ VECT 2.0 ĺ‹’ç´˘č˝ŻäťśĺŻšĺ¤§ć–‡äťśĺ……ĺ˝“ć•°ćŽć“Śé™¤ĺ™¨](http://0.0.0.0:8080/post/64193)\n - [ ] [č§†é˘‘ćœĺŠĄ Vimeo 祎莤 Anodot ćł„éœ˛äş‹äťśĺŻźč‡´ç”¨ćˆˇć•°ćŽćš´éœ˛](http://0.0.0.0:8080/post/64192)\n - [ ] [éť‘ĺŽ˘ć­Łĺœ¨ĺˆŠç”¨ LiteLLM éŤ˜ĺąé˘„čŽ¤čŻ SQL ćł¨ĺ…Ľćźć´ž](http://0.0.0.0:8080/post/64191)\n - [ ] [ç ”çŠśäşşĺ‘˜ĺ‘çŽ°ĺ…łé”Ž GitHub RCE ćźć´žďźšäť…éœ€ä¸€ćŹĄ Git Push ĺłĺŻĺˆŠç”¨](http://0.0.0.0:8080/post/64190)\n- 腾讯玄武实验室\n - [ ] [每日安全动态推送(26/4/29)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960463&idx=1&sn=015c75ee26b3745447c1f01f5cf34c2f)\n- 威努特安全网络\n - [ ] [智能体工厂来了！解读工信部、国家数据局联合“模数共振”行动](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651141486&idx=1&sn=2e505e08a56c51d68a942c64211bbcc1)\n- 漕河泾小黑屋\n - [ ] [CVE-2024-38812 深度分析：从堆风水到远程代码执行](https://mp.weixin.qq.com/s?__biz=MzA4NzQwNzY3OQ==&mid=2247484086&idx=1&sn=5d6bbe68afada10fbfe35201dfeb801e)\n- 黑鸟\n - [ ] [APT29曾经最隐秘的武器：目标机器运行的定制化间谍木马](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186574&idx=1&sn=3ee6eff7d3195af7bf9e10f8f0051298)\n- 绿盟科技研究通讯\n - [ ] [AI靶场安全实战系列：训练数据投毒——利用标签翻转实现内容审核定向漏判](https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499884&idx=1&sn=5d65fb971fbb00e7c92b236e86eaaed1)\n- 微步在线研究响应中心\n - [ ] [一个人，两个AI，0代码，把墨西哥政府打成筛子](https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508657&idx=1&sn=91bbcd48f789f8112b1e17c05ef2e94e)\n- 丁爸 情报分析师的工具箱\n - [ ] [【AI报告】近一周全球安全态势简报（4.29）](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651155341&idx=1&sn=db01cc12a23f4f1115c2458d833e039c)\n- 看雪学苑\n - [ ] [利用任意物理读写驱动来加载自己的驱动](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614348&idx=1&sn=3ad065ac0bd0b6e152a887670ef1e5dd)\n - [ ] [单个Git Push就能攻陷GitHub？CVE-2026-3854高危漏洞曝光](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614348&idx=2&sn=ce07c53a847420a458cfab9e46207714)\n - [ ] [月薪3W定向培养！看雪安卓高级研修班『2026春季班』火热招生中](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614348&idx=3&sn=62e4bc182f8c27b9cd4fc1664da29b41)\n- 代码卫士\n - [ ] [仅凭一条 git push 命令，即可在 GitHub 实现RCE 并访问数百万仓库](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525909&idx=1&sn=3a1d88cd8e20887b0792cd899f1b843e)\n - [ ] [刚刚，cPanel紧急修复影响所有受支持版本的认证漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525909&idx=2&sn=80fc4007516f0fcfc9072f775b3c330a)\n- 安全内参\n - [ ] [上海隧道新加坡公司发生数据泄露，甲方暂停数字系统访问权限](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515877&idx=1&sn=2332d7f8b501a1d47d2a083c76ffaca2)\n - [ ] [美国空军部发布人工智能和数据战略以加速提升军事优势](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515877&idx=2&sn=efe28fc0af81525c9a1f74dd319f9bba)\n- 青衣十三楼飞花堂\n - [ ] [Ubuntu 22中找不到libcrypto.so.1.1](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247489366&idx=1&sn=25aed7e787c8a2adcf137c0d79400ac7)\n- 安全圈\n - [ ] [【安全圈】伊朗黑客组织：已“开盒” 2379 名美国海军陆战队员，掌握数万名中东美军姓名、住址、日常轨迹、购物习惯等](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076059&idx=1&sn=da1650f67f6af7da8ad2b79dff4f91a3)\n - [ ] [【安全圈】医疗科技大厂美敦力 IT 系统遭遇黑客入侵，未影响服务交付](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076059&idx=2&sn=6a35f617d45895376be8b42f42bc2cd0)\n - [ ] [【安全圈】巴西 LofyGang 团伙沉寂三年后卷土重来，发起 Minecraft LofyStealer 窃取器活动](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076059&idx=3&sn=86fa3d53221d6b2950f6138d34ba3c1f)\n- 电子物证\n - [ ] [【微信附件命名规则大揭秘】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048987&idx=1&sn=280addaf3dcb224fb97d69fb695b6fc9)\n - [ ] [手机取证：从 WhatsApp、Signal 和 Telegram 提取媒体和消息的简单方法](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048987&idx=2&sn=309bed7249de4b6f4a119ebe6cdeaf00)\n- 中国信息安全\n - [ ] [视频 | 百队竞技淬精英 数智筑盾护山河！第三届“长城杯”网数智安全大赛（防护赛）总决赛在福州胜利闭幕](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262069&idx=1&sn=2043a5b7f19741ec05fe604bb7078e0c)\n- 青藤云安全\n - [ ] [幽灵比特告诉你，为什么有了WAF你还需要RASP ？](https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650851210&idx=1&sn=dc2cdcae2121592b41fac046243f6b4d)\n- 信息安全国家工程研究中心\n - [ ] [专家解读｜推动我国网络法治建设迈向更高水平](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247503779&idx=1&sn=830ec4705741bd1d0696f8b6b0283afd)\n- 火绒安全\n - [ ] [火绒在线 你的节日安全我包了](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532513&idx=1&sn=c47286d23b046817cbc4acd24f544a25)\n - [ ] [火绒小问答--「个人版」近期top问题解答](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532513&idx=2&sn=d39192aed969909ee4d3d812767f3340)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532513&idx=3&sn=f5680223b6ef6876b83daf76b88e39f7)\n- 数世咨询\n - [ ] [美国网络犯罪损失首次突破200亿美元](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542754&idx=1&sn=fcdc1d572f0c00c86d522b8289144147)\n - [ ] [百队竞技淬精英 数智筑盾护山河 | 第三届“长城杯”网数智安全大赛（防护赛）总决赛在福州胜利闭幕](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542754&idx=2&sn=48ad6e0c018995a383e2bee088673419)\n- 安全牛\n - [ ] [2283美元，AI造出可用Chrome漏洞武器：网络攻防平衡已被彻底颠覆](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141181&idx=1&sn=378f9848d3f349beb7a1bd6a965d6b46)\n - [ ] [网信部门依法查处剪映 App 等 AI 生成合成内容标识违法平台；CNVD周报：高危0day漏洞激增，Adobe、NVIDIA、Cisco成重灾区| 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141181&idx=2&sn=a454d1c6b28958fd4ffe80cb59bd0a57)\n- 安全客\n - [ ] [深度分析Sorry勒索软件的加密实现与行为特征](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789890&idx=1&sn=7105facbd94397f0277f8dda2ce10396)\n- 极客公园\n - [ ] [AI 走出屏幕，家电变成「机器人」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653104961&idx=1&sn=72388a60efefba651c7ff837db3486d0)\n - [ ] [比亚迪5月1日开始涨价；微信朋友圈悄然改版；麦当劳奶昔正式回归｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653104940&idx=1&sn=148290a972a03e9d9d721582bca21cfb)\n- 深信服千里目安全技术中心\n - [ ] [【漏洞通告】Github-Enterprise远程命令执行漏洞(CVE-2026-3854)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525429&idx=1&sn=efffa2a9040316ec6d7753bd4b59e865)\n - [ ] [【漏洞通告】LiteLLM SQL注入漏洞(CVE-2026-42208)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525429&idx=2&sn=576d9806998fdf7f0dbf7b40e17dcfcb)\n - [ ] [网络安全信息与动态周报2026年第17期（4月20日-4月26日）](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525429&idx=3&sn=81c972bbb2dae75573479374efa28eb1)\n- 表图\n - [ ] [网络安全行业，已经连续 11 个季度没增长了](https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247484986&idx=1&sn=f01cbdba037a67e00007de8cfe6dac6c)\n- Desync InfoSec\n - [ ] [构建密码学资产清单：微软密码学态势管理实践指南](https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247490256&idx=1&sn=ceee7d855ca1354058e7b96de35db47b)\n- 安全行者老霍\n - [ ] [多模型协同使用比单一模型的选择更为关键](https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486556&idx=1&sn=9eb2bfccb21150c4a28d244257187e81)\n- 国家互联网应急中心CNCERT\n - [ ] [网络安全信息与动态周报2026年第17期（4月20日-4月26日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501549&idx=1&sn=97ecbb76c2cb79f98d955fbb80b7cdb4)\n- 360数字安全\n - [ ] [360获全国五一劳动奖状、全国工人先锋号两项国家级荣誉](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585850&idx=1&sn=4ab125c5e4594f14b071f7bb4546e169)\n- Over Security - Cybersecurity news aggregator\n - [ ] [A un anno dallo scandalo sullo spionaggio di giornalisti e attivisti, Paragon non ha ancora dato risposte sull'uso dei suoi spyware alla giustizia italiana](https://www.wired.it/article/paragon-spyware-risposte-indagine-italia-procura/)\n- 迪哥讲事\n - [ ] [Java \"幽灵比特位\"（Ghost Bits）引发的waf通杀](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499396&idx=1&sn=42f82893ad0bb6a9c4141fc432d2ff7c)\n- ICT Security Magazine\n - [ ] [Le vie nascoste del digitale: vulnerabilità e sicurezza dei cavi sottomarini](https://www.ictsecuritymagazine.com/articoli/vulnerabilita-cavi-sottomarini/)\n - [ ] [Caso Mythos: l’AI che trova zero-day in autonomia, il leak su Discord e la nuova economia delle vulnerabilità](https://www.ictsecuritymagazine.com/notizie/claude-mythos-leak-discord/)\n - [ ] [Cloud forensics e il labirinto giurisdizionale: acquisire prove oltre i confini](https://www.ictsecuritymagazine.com/articoli/cloud-forensics-prove-digitali/)\n- Yak Project\n - [ ] [Ghost Bits 自动化提效：让WAF绕过告别重复劳作](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529777&idx=1&sn=30895fc3b2cb1832945d2b442ce3852e)\n- Javvad Malik\n - [ ] [The Tyranny of Security](https://javvadmalik.com/2026/04/29/the-tyranny-of-security/)\n- 悬镜安全\n - [ ] [拆解 Agent Loop 盲盒：从 RSAC2026 冠军看灵境 AIDR 的智能体原生安全实践！](https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647799274&idx=1&sn=f6adc342d85f11907e3544292ecbc6ea)\n- IT Service Management News\n - [ ] [Privacy filter di Open AI](http://blog.cesaregallotti.it/2026/04/privacy-filter-di-open-ai.html)\n- LR的安全自留地\n - [ ] [Ghost Bits，Java WAF之殇？](https://mp.weixin.qq.com/s?__biz=MzkwNzMyNjU0MQ==&mid=2247484328&idx=1&sn=c5e9397cfd395a2e969ca70ebe70465b)\n- Full Disclosure\n - [ ] [ESP-RFID-Tool v2 PRO — Full Public Disclosure](https://seclists.org/fulldisclosure/2026/Apr/18)\n - [ ] [Re: SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App](https://seclists.org/fulldisclosure/2026/Apr/21)\n - [ ] [SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App](https://seclists.org/fulldisclosure/2026/Apr/20)\n - [ ] [SEC Consult SA-20260423-0 :: DLL Hijacking in EfficientLab Controlio (cloud-based employee monitoring service)](https://seclists.org/fulldisclosure/2026/Apr/19)\n - [ ] [SEC Consult SA-20260421-0 :: Broken Access Control in Config Endpoint in LiteLLM](https://seclists.org/fulldisclosure/2026/Apr/17)\n - [ ] [SEC Consult SA-20260415-0 :: Exposed Private Key of X.509 Certificate in SAP HANA Cockpit & SAP HANA Database Explorer](https://seclists.org/fulldisclosure/2026/Apr/16)\n - [ ] [APPLE-SA-04-22-2026-2 iOS 18.7.8 and iPadOS 18.7.8](https://seclists.org/fulldisclosure/2026/Apr/15)\n - [ ] [APPLE-SA-04-22-2026-1 iOS 26.4.2 and iPadOS 26.4.2](https://seclists.org/fulldisclosure/2026/Apr/14)\n - [ ] [Research: When Trusted Tools Become Attack Primitives](https://seclists.org/fulldisclosure/2026/Apr/13)\n - [ ] [[KIS-2026-08] SocialEngine <= 7.8.0 (get-memberall) SQL\tInjection Vulnerability](https://seclists.org/fulldisclosure/2026/Apr/12)\n - [ ] [[KIS-2026-07] SocialEngine <= 7.8.0 Blind Server-Side Request\tForgery Vulnerability](https://seclists.org/fulldisclosure/2026/Apr/11)\n - [ ] [Trojan-Spy.Win32.Small / Remote Command Execution](https://seclists.org/fulldisclosure/2026/Apr/10)\n - [ ] [[IWCC 2026] CfP: 15th International Workshop on Cyber Crime - Linköping, Sweden, Aug 24-27, 2026](https://seclists.org/fulldisclosure/2026/Apr/9)\n - [ ] [[SBA-ADV-20251120-01] CVE-2026-0972: GoAnywhere MFT Email HTML Injection](https://seclists.org/fulldisclosure/2026/Apr/8)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Today's Odd Web Requests, (Wed, Apr 29th)](https://isc.sans.edu/diary/rss/32934)\n - [ ] [ISC Stormcast For Wednesday, April 29th, 2026 https://isc.sans.edu/podcastdetail/9910, (Wed, Apr 29th)](https://isc.sans.edu/diary/rss/32932)\n- Schneier on Security\n - [ ] [Claude Mythos Has Found 271 Zero-Days in Firefox](https://www.schneier.com/blog/archives/2026/04/claude-mythos-has-found-271-zero-days-in-firefox.html)\n- The Hacker News\n - [ ] [SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack](https://thehackernews.com/2026/04/sap-npm-packages-compromised-by-mini.html)\n - [ ] [New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs](https://thehackernews.com/2026/04/new-wave-of-dprk-attacks-uses-ai.html)\n - [ ] [Webinar: How to Automate Exposure Validation to Match the Speed of AI Attacks](https://thehackernews.com/2026/04/webinar-how-to-automate-exposure.html)\n - [ ] [What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)](https://thehackernews.com/2026/04/what-to-look-for-in-exposure-management.html)\n - [ ] [Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately](https://thehackernews.com/2026/04/critical-cpanel-authentication.html)\n - [ ] [CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV](https://thehackernews.com/2026/04/cisa-adds-actively-exploited.html)\n - [ ] [LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure](https://thehackernews.com/2026/04/litellm-cve-2026-42208-sql-injection.html)\n- Deep Web\n - [ ] [Need help with an account takeover type situation](https://www.reddit.com/r/deepweb/comments/1szf9iu/need_help_with_an_account_takeover_type_situation/)\n- Your Open Hacker Community\n - [ ] [Force factory reset bypassing security measures](https://www.reddit.com/r/HowToHack/comments/1szdhww/force_factory_reset_bypassing_security_measures/)\n - [ ] [Ubuntu or Kali Linux for a CS student doing cybersecurity and CTFs?](https://www.reddit.com/r/HowToHack/comments/1syuk6f/ubuntu_or_kali_linux_for_a_cs_student_doing/)\n - [ ] [.](https://www.reddit.com/r/HowToHack/comments/1sza0gw/_/)\n - [ ] [Trying to recover my mom's lost Gmail account via hacking](https://www.reddit.com/r/HowToHack/comments/1sz6moa/trying_to_recover_my_moms_lost_gmail_account_via/)\n- Deeplinks\n - [ ] [EFF Submission to UN Report on the Role of Media in the Context of Israel’s Policies Toward Palestinians](https://www.eff.org/deeplinks/2026/04/eff-submission-un-report-role-media-context-israels-policies-toward-palestinians)\n - [ ] [Former EFF Activism Director's New Book, Transaction Denied, Explores What Happens When Financial Companies Act like Censors](https://www.eff.org/deeplinks/2026/04/former-eff-activism-directors-new-book-transaction-denied-explores-what-happens)\n- Information Security\n - [ ] [Are a lot of security programs still too focused on prevention and not enough on visibility?](https://www.reddit.com/r/Information_Security/comments/1syyg2r/are_a_lot_of_security_programs_still_too_focused/)\n - [ ] [Bluekit: The AI-Powered All-in-One Phishing Kit](https://www.reddit.com/r/Information_Security/comments/1sz0rb5/bluekit_the_aipowered_allinone_phishing_kit/)\n - [ ] [ALERT: US-Targeted Phishing Campaign Exploiting Remote Access Blind Spots](https://www.reddit.com/r/Information_Security/comments/1szagqm/alert_ustargeted_phishing_campaign_exploiting/)\n - [ ] [Mobile Malware Analysis Blog Series - Pegasus, Xenomorph, Blackrock & more](https://www.reddit.com/r/Information_Security/comments/1syza5p/mobile_malware_analysis_blog_series_pegasus/)\n - [ ] [ShinyHunters Medtronic ADT Breach: 14.5M Records Stolen](https://www.reddit.com/r/Information_Security/comments/1syyabc/shinyhunters_medtronic_adt_breach_145m_records/)\n - [ ] [KnowBe4 vs Adaptive](https://www.reddit.com/r/Information_Security/comments/1sz5sj3/knowbe4_vs_adaptive/)\n - [ ] [How know information about someone](https://www.reddit.com/r/Information_Security/comments/1sz9sw8/how_know_information_about_someone/)\n - [ ] [Cyera vs BigID for cloud-native DSPM when your breach surface is dev tooling](https://www.reddit.com/r/Information_Security/comments/1syz808/cyera_vs_bigid_for_cloudnative_dspm_when_your/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [How are you monitoring and handling vulnerable company credentials showing up in breaches and dark web dumps?](https://www.reddit.com/r/netsecstudents/comments/1syx78m/how_are_you_monitoring_and_handling_vulnerable/)\n - [ ] [Interesting bootloader if anybody wants to see how one is created in C and ASM](https://www.reddit.com/r/netsecstudents/comments/1sz0hh6/interesting_bootloader_if_anybody_wants_to_see/)\n- GRAHAM CLULEY\n - [ ] [Smashing Security podcast #465: This developer wanted to cheat at Roblox. It cost millions](https://grahamcluley.com/smashing-security-podcast-465/)\n - [ ] [Alleged Silk Typhoon hacker extradited to the United States to face charges](https://www.bitdefender.com/en-us/blog/hotforsecurity/silk-typhoon-hacker-extradited-united-states)\n- Security Affairs\n - [ ] [CVE-2026-42208: LiteLLM bug exploited 36 hours after its disclosure](https://securityaffairs.com/191483/hacking/cve-2026-42208-litellm-bug-exploited-36-hours-after-its-disclosure.html)\n - [ ] [Internet censorship index reveals Russia’s lead and widespread content blocking](https://securityaffairs.com/191475/security/internet-censorship-index-reveals-russias-lead-and-widespread-content-blocking.html)\n - [ ] [All supported cPanel versions hit by critical auth bug, now patched](https://securityaffairs.com/191465/security/all-supported-cpanel-versions-hit-by-critical-auth-bug-now-patched.html)\n - [ ] [U.S. CISA adds Microsoft Windows Shell and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/191442/security/u-s-cisa-adds-microsoft-windows-shell-and-connectwise-screenconnect-flaws-to-its-known-exploited-vulnerabilities-catalog.html)\n - [ ] [ShinyHunters exploit Anodot incident to target Vimeo](https://securityaffairs.com/191448/security/shinyhunters-exploit-anodot-incident-to-target-vimeo.html)\n- Technical Information Security Content & Discussion\n - [ ] [Copy Fail exploit lets 732 bytes hijack Linux systems and quietly grab root](https://www.reddit.com/r/netsec/comments/1szduu3/copy_fail_exploit_lets_732_bytes_hijack_linux/)\n - [ ] [The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940) - watchTowr Labs](https://www.reddit.com/r/netsec/comments/1sz5aoi/the_internet_is_falling_down_falling_down_falling/)\n - [ ] [The Thymeleaf Template Injection That Only Hurts If You Let It](https://www.reddit.com/r/netsec/comments/1sz3u3l/the_thymeleaf_template_injection_that_only_hurts/)\n - [ ] [AI security capabilities and the human side of vulnerability management](https://www.reddit.com/r/netsec/comments/1sz68c6/ai_security_capabilities_and_the_human_side_of/)\n - [ ] [A Route to Root in a 4G Industrial Router](https://www.reddit.com/r/netsec/comments/1sykrpt/a_route_to_root_in_a_4g_industrial_router/)\n - [ ] [Set up automated dependency scanning after the recent npm/PyPI supply chain attacks](https://www.reddit.com/r/netsec/comments/1syyyea/set_up_automated_dependency_scanning_after_the/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [The Next Frontier: Autonomous Security and RSAC Interviews from Quantro & SandboxAQ - Marc Manzano, Mark Hughes, Mehul Revankar - BSW #445](http://sites.libsyn.com/18678/the-next-frontier-autonomous-security-and-rsac-interviews-from-quantro-sandboxaq-marc-manzano-mark-hughes-mehul-revankar-bsw-445)\n"}, "6c5ad5300f15c8afbe795c3ed910abd82246420b": {"t": 1785772233.415288, "n": 35016, "h": "b7fcb64fa4e681e4", "c": "# 每日安全资讯（2026-04-30）\n\n- SecWiki News\n - [ ] [SecWiki News 2026-04-29 Review](http://www.sec-wiki.com/?2026-04-29)\n- Microsoft Security Blog\n - [ ] [8 best practices for CISOs conducting risk reviews](https://www.microsoft.com/en-us/security/blog/2026/04/29/8-best-practices-for-cisos-conducting-risk-reviews/)\n- LoRexxar's Blog | 信息技术分享\n - [ ] [Ghost Bits，Java WAF之殇？](https://lorexxar.cn/2026/04/29/java-ghost-bits/)\n- Recent Commits to cve:main\n - [ ] [Update Wed Apr 29 11:15:54 UTC 2026](https://github.com/trickest/cve/commit/9edbb018c0d81e99e33edf3064ce19ffcd1635d8)\n- Verne in GitHub\n - [ ] [在 OpenClaw 中使用 Moomoo API Skills 查看和分析日本股市](https://blog.einverne.info/post/2026/04/openclaw-moomoo-api-japan-stock-analysis.html)\n- 博客\n - [ ] [Apt Conflicts and Replaces](https://dyrnq.com/apt-conflicts-and-replaces/)\n- 先知安全技术社区\n - [ ] [面向大模型隐私推理的安全协议-MPC与ZK的角色分工](https://xz.aliyun.com/news/92061)\n - [ ] [Agentic / Context](https://xz.aliyun.com/news/92060)\n - [ ] [AI洪流下的防守对抗新范式](https://xz.aliyun.com/news/92059)\n - [ ] [LLM 能帮一个安全工程师干些什么](https://xz.aliyun.com/news/92058)\n - [ ] [AI For Security：AI在云产品安全建设中能做什么？](https://xz.aliyun.com/news/92056)\n- Tenable Blog\n - [ ] [Mastering agentic AI security through exposure management](https://www.tenable.com/blog/mastering-agentic-ai-security-through-exposure-management)\n- bunnie's blog\n - [ ] [Name that Ware, April 2026](https://www.bunniestudios.com/blog/2026/name-that-ware-april-2026/)\n - [ ] [Winner, Name that Ware March 2026](https://www.bunniestudios.com/blog/2026/winner-name-that-ware-march-2026/)\n- 安全客-有思想的安全新媒体\n - [ ] [安全进入“AI自主攻击”时代，瑞数信息如何用AI对抗AI](https://www.anquanke.com/post/id/315417)\n - [ ] [智能体关键年：Agent扎根业务流，AI生产力正在形成](https://www.anquanke.com/post/id/315419)\n - [ ] [深度分析Sorry勒索软件的加密实现与行为特征](https://www.anquanke.com/post/id/315390)\n- InfoSec Write-ups - Medium\n - [ ] [WaTF Bank Walkthrough (Part 4): Exploiting Android App Security Flaws](https://infosecwriteups.com/watf-bank-walkthrough-part-4-exploiting-android-app-security-flaws-fb8c8bc6da14?source=rss----7b722bfd1b8d---4)\n - [ ] [URL Anatomy & Encoding: Why Your Payloads Break](https://infosecwriteups.com/url-anatomy-encoding-why-your-payloads-break-faec39eef0c5?source=rss----7b722bfd1b8d---4)\n - [ ] [PaloAltoRCE Lab Write-Up | By BnHany](https://infosecwriteups.com/paloaltorce-lab-write-up-by-bnhany-03e767059788?source=rss----7b722bfd1b8d---4)\n- ElcomSoft blog\n - [ ] [New Security Features and Low-Level Extraction of iOS 26](https://blog.elcomsoft.com/2026/04/new-and-updated-security-features-in-ios-26-and-their-forensic-implications/)\n- Doonsec's feed\n - [ ] [MajorDoMo admin.php接口存在远程代码执行漏洞CVE-2026-27174 附POC](https://mp.weixin.qq.com/s/Z2dWGAwId9e7H5yXQVsxPA)\n - [ ] [（19）6.3 变更的策划 — 企业信息安全负责人必读系列丛书书稿《ISO/IEC 42001: 2023人工智能管理体系标准的谬误辨析与实施详解》](https://mp.weixin.qq.com/s/scBT9TwoXwBP1lLRpURbgA)\n - [ ] [（18）6.2 人工智能目标及其实现的策划—企业信息安全负责人必读系列丛书《ISO/IEC 42001:2023人工智能管理体系标准谬误辨析与实施详解》](https://mp.weixin.qq.com/s/LqUTynQyndu3zhMUk6zwww)\n - [ ] [（17）6.1.4 人工智能系统影响评估—企业信息安全负责人必读系列丛书《ISO/IEC 42001: 2023人工智能管理体系标准的谬误辨析与实施详解》](https://mp.weixin.qq.com/s/foCIiZyI8NKHyPm1ZCUj7w)\n - [ ] [（16）6.1.3 人工智能风险应对 —企业信息安全负责人必读系列丛书书稿《ISO/IEC 42001: 2023人工智能管理体系标准的谬误辨析与实施详解》](https://mp.weixin.qq.com/s/vEUHywddCn63M8wvlxkRrA)\n - [ ] [（15）6.1.2 人工智能风险评估 —企业信息安全负责人必读系列丛书书稿《ISO/IEC 42001: 2023人工智能管理体系标准的谬误辨析与实施详解》](https://mp.weixin.qq.com/s/wzb3mCpekOkwHPGDH-nB4Q)\n - [ ] [这才是公安需要的警务研判新大脑！](https://mp.weixin.qq.com/s/kGJx5twKjeCG6hQA4ZBsRQ)\n - [ ] [国投智能战略“跃迁”：基本盘稳固，新引擎发力](https://mp.weixin.qq.com/s/urPhZzpkWNW7MwcvNe1gjQ)\n - [ ] [Misc-Galaxysail：一站式 CTF Misc 杂项分析工具](https://mp.weixin.qq.com/s/3bFWifwmXZaF_jwDkJNbQA)\n - [ ] [红石V5：资产管理功能](https://mp.weixin.qq.com/s/zE5q7hGyoFLHSrGBkB4abA)\n - [ ] [供应链攻击永无眠：SAP CAP & Cloud MTA npm 供应链攻击事件报告](https://mp.weixin.qq.com/s/gaeeRzgxg-E_9G6_vtfO_g)\n - [ ] [Ghost Bits 绕waf原理研究分析](https://mp.weixin.qq.com/s/7rOTGcXQCkOoiVUmXGI8sA)\n - [ ] [第一次密评题库易错题公益答疑圆满完成，未来不忘初心，继续前行](https://mp.weixin.qq.com/s/hyfpyTYv2VwqjPTWD5H4-A)\n - [ ] [网络安全行业，已经连续 11 个季度没增长了](https://mp.weixin.qq.com/s/GmFsx4DJt85gVXzLqtgFMw)\n - [ ] [DeepSeek突然「开眼」，识图模式灰度上线](https://mp.weixin.qq.com/s/FsWfW-KZpr1EmiTg8ha1NA)\n - [ ] [2026护网专项行动，你参与不](https://mp.weixin.qq.com/s/m7rB8Q6MKjmVjJA4v_vchg)\n - [ ] [勒索动态 | 新勒索组织对深圳某上市通信制造企业发起勒索威胁，核心数据面临泄露风险](https://mp.weixin.qq.com/s/A3OgtT-DMOHb0CdsxrtlNQ)\n - [ ] [【首发】从APIServer到Kubelet：K8sPenTool如何串起一条云原生攻击链？](https://mp.weixin.qq.com/s/l0lfe6LbD5BHT89dl650qQ)\n - [ ] [倒计时1天 | 2026智能云生态大会](https://mp.weixin.qq.com/s/t7d8RkkihWnzo2eoA81R3w)\n - [ ] [获奖名单公布！2026数字中国创新大赛·数字安全赛道——网络和数据安全产业赛圆满落幕](https://mp.weixin.qq.com/s/Stro6eS_0wz8xxxEn4xPTg)\n - [ ] [公安机关发布景区游览、大型活动安全提示](https://mp.weixin.qq.com/s/NrMGihjXaJ1BvpIyYCMNPQ)\n - [ ] [9秒删库，AI“越狱”的真实样本](https://mp.weixin.qq.com/s/KOXyj1MY81F8w0CL8ikS1w)\n - [ ] [GhostBits-WAF-Bypass-Toolkit——针对 Java 幽灵比特位漏洞的 WAF 绕过辅助脚本](https://mp.weixin.qq.com/s/Q6SqplB6NUzs2_lc5WuQww)\n - [ ] [Telegram担保市场深度研究：平台演化、生态结构与监管挑战](https://mp.weixin.qq.com/s/xZpj8v8VWZwTpBHOwPDo0g)\n - [ ] [破解数据跨境难题！杨“数”浦数字沙龙第十五期精彩回顾](https://mp.weixin.qq.com/s/Q9A5yxJ74p-g4KopG6ubAw)\n - [ ] [五一假期将至：网警以案说法防微杜渐 守好网络安全关](https://mp.weixin.qq.com/s/q2MfLE2ACbQm_gBnQUZF6Q)\n - [ ] [CCB决赛有感(附RE/AI题目附件)](https://mp.weixin.qq.com/s/yL69Ee2pmFD2AMe6YX6RQQ)\n - [ ] [腾讯员工公寓曝光，竟是这样的布置！](https://mp.weixin.qq.com/s/0tOs8D31gMUc6C6pSFctNg)\n - [ ] [全球海拔高度数据集下载服务上线](https://mp.weixin.qq.com/s/Yl0-mDD3WZ7HzdnkqofaHg)\n - [ ] [【漏洞通告】Github-Enterprise远程命令执行漏洞(CVE-2026-3854)](https://mp.weixin.qq.com/s/bWSo1ktSYgWQXCQZvY_DJw)\n - [ ] [【漏洞通告】LiteLLM SQL注入漏洞(CVE-2026-42208)](https://mp.weixin.qq.com/s/ruU7aGSsvZY24ILNi4zkrw)\n - [ ] [网络安全信息与动态周报2026年第17期（4月20日-4月26日）](https://mp.weixin.qq.com/s/OyeRfDTqiOZPgJgebAJBsg)\n - [ ] [如何让齐静春帮我打CTF](https://mp.weixin.qq.com/s/gaRO5oL73NuILTNofHRvYg)\n - [ ] [紧急通知：此号即将注销！](https://mp.weixin.qq.com/s/YbhUXF5vy1NQJvdlPC5MuA)\n - [ ] [花600美元就能监听天上数据？银行记录、军事机密全在卫星上裸奔！](https://mp.weixin.qq.com/s/ZHzG0n-iecHrEg1Titl4BA)\n - [ ] [Ubuntu 22中找不到libcrypto.so.1.1](https://mp.weixin.qq.com/s/oSTBkL9GbSY_ixtGXRjXcw)\n - [ ] [王小洪在全国公安机关常态化开展扫黑除恶斗争推进会议上强调 以为人民出政绩以实干出政绩的使命担当 坚决抓好常态化扫黑除恶斗争](https://mp.weixin.qq.com/s/hMi7yAGOhfJz_cxiJ2MtWw)\n - [ ] [AI彻底取代产品经理？言之凿凿，却为时尚早](https://mp.weixin.qq.com/s/LwuX9E5XodMYKdU0_CUPdw)\n - [ ] [新型 VECT 2.0 勒索软件可破坏 Windows、Linux 和 ESXi 系统上超过 128 KB 的文件](https://mp.weixin.qq.com/s/rp85FK3zKX3GPpIOGcdMJA)\n - [ ] [实验室学生参加软件系统安全赛华东区现场赛](https://mp.weixin.qq.com/s/5PDDKgKYlCgS_usfUxWU2w)\n - [ ] [什么是Eth-trunk？](https://mp.weixin.qq.com/s/NcsEOuSdajNzu8JGDfiJXg)\n - [ ] [最近的收藏爱好：攒内存条](https://mp.weixin.qq.com/s/qQ_ITMkqlcZHfiKMzMdabQ)\n - [ ] [假期出行，请勿随意扫描来源不明的二维码](https://mp.weixin.qq.com/s/mDnCOQtflfawUEzp0qsqZQ)\n - [ ] [新型沙虫通信技术利用Tor隧道进行SSH远程访问](https://mp.weixin.qq.com/s/XcU7KHJfuzugFibEBOtE-w)\n - [ ] [cPanel发布严重身份验证漏洞警告——紧急补丁已发布](https://mp.weixin.qq.com/s/eBnlFVk8Q4GQNP6keHuSjQ)\n - [ ] [北京银行打造AI原生能力、已建成280+智能体](https://mp.weixin.qq.com/s/qTqzCEsbJ1ad3pDlF9HGhQ)\n - [ ] [AI快讯：去年我国Token调用量达21100万亿，DeepSeek灰度测试多模态识图模式](https://mp.weixin.qq.com/s/vjlI9P8JuV7r59OpZ1FdQw)\n - [ ] [金智维单一！国联民生证券金智维RPA系统采购项目](https://mp.weixin.qq.com/s/MDqRG6punPHfxSPEHSHwPA)\n - [ ] [【安全圈】伊朗黑客组织：已“开盒” 2379 名美国海军陆战队员，掌握数万名中东美军姓名、住址、日常轨迹、购物习惯等](https://mp.weixin.qq.com/s/-8ESG0kUMs_4Grq6RAlDgA)\n - [ ] [【安全圈】医疗科技大厂美敦力 IT 系统遭遇黑客入侵，未影响服务交付](https://mp.weixin.qq.com/s/ez8tByW_23TppI7DUoq5BA)\n - [ ] [【安全圈】巴西 LofyGang 团伙沉寂三年后卷土重来，发起 Minecraft LofyStealer 窃取器活动](https://mp.weixin.qq.com/s/KzK57Of1l-GhHE2Kj7EH9g)\n - [ ] [Ghost Bits 自动化提效：让WAF绕过告别重复劳作](https://mp.weixin.qq.com/s/WMD3MQ-8QM8hZXtTpbxFnA)\n - [ ] [分享一个渗透测试必备的POC速查网站](https://mp.weixin.qq.com/s/RAbn3W0NNbqbALHktf8U5Q)\n - [ ] [如何通过幽灵比特位绕过限制与利用](https://mp.weixin.qq.com/s/w_OG-WYREo4emmpcfVoNnQ)\n - [ ] [某省级发改委线上会议竟全程被外人旁听：警惕线上会议泄密](https://mp.weixin.qq.com/s/Zun7a5k3PRBUgJ9znhFykA)\n - [ ] [化身自主思考、动态演进的攻击者：AI如何重塑钓鱼攻击格局](https://mp.weixin.qq.com/s/lNtPDgGmg09mZBWA_JGqhQ)\n - [ ] [第三届“长城杯”网数智安全大赛（防护赛）总决赛在福州顺利闭幕](https://mp.weixin.qq.com/s/wl3kEqASy-iL1bS6MuW6lQ)\n - [ ] [信安世纪深耕新兴应用场景 打开安全防护新增长曲线](https://mp.weixin.qq.com/s/9XSwSWLCXn5r4bZsn7jl9g)\n - [ ] [周三：资讯速递（OpenAI漏洞赏金、安全skills库、OpenClaw漏洞）](https://mp.weixin.qq.com/s/7HTN5GYNkrQkfFuL2gaVJw)\n - [ ] [2025-2026免杀技术年鉴](https://mp.weixin.qq.com/s/PupDKHBbyP1ZKlaaAOoKow)\n - [ ] [众测src测试姿势总结上](https://mp.weixin.qq.com/s/G4L5Q1hQ-OuPMNqKpGTmTQ)\n - [ ] [关于AI与工作的一点思考](https://mp.weixin.qq.com/s/FYfaQiomvZ7lYJPFpLyupQ)\n - [ ] [以资产治理为基，筑网络安全之盾。灵创网络空间资产风险感知系统，智能感知每一处风险，用心守护每一份资产！](https://mp.weixin.qq.com/s/n6bAWp_-aUIgecjVyoJQsA)\n - [ ] [咱网安人自己的度娘，漏洞情报查询一步直达](https://mp.weixin.qq.com/s/RpN6WMjou-yH-sGyWtnCWg)\n - [ ] [【红队工具】Kerberos TGT Monitor BOF](https://mp.weixin.qq.com/s/E3yEN4vu9t4mZ-A_hgei1g)\n - [ ] [生成端合规之后，传播端的真正考题才开始](https://mp.weixin.qq.com/s/Ml4_15zIVuGET9eeZgq4IQ)\n - [ ] [Ghost Bits，Java WAF之殇？](https://mp.weixin.qq.com/s/JaxVrys8tqGnXsWhfFzAPw)\n - [ ] [构建密码学资产清单：微软密码学态势管理实践指南](https://mp.weixin.qq.com/s/cZI1bHPiEJnaznUEibrz9Q)\n - [ ] [前沿 | 人工智能对关键信息基础设施安全治理带来的影响](https://mp.weixin.qq.com/s/UZmvE9meJQB9mnjqr-UhPQ)\n - [ ] [发布 | 国家数据局发布《数字中国发展报告（2025年）》](https://mp.weixin.qq.com/s/SvQekhWc5qvm4Irr0ih7dg)\n - [ ] [第九届数字中国建设峰会“数据基础设施和数据标准化分论坛”在福州召开](https://mp.weixin.qq.com/s/18BuZVSRCxUe_0AMQ1J57w)\n - [ ] [第九届数字中国建设峰会数字技术赋能工业园区高质量发展专题会议在福州成功举办](https://mp.weixin.qq.com/s/vlcPXxwXOp9tBD3xh2YifA)\n - [ ] [关注 | 国家网信办就个人信息保护政策法规问题最新解答](https://mp.weixin.qq.com/s/BFr1Qo4lxNDY_zOxNBEbgQ)\n - [ ] [关注 | 市场监管总局部署开展网络食品销售虚假宣传专项整治](https://mp.weixin.qq.com/s/5ldOyozCgpHlp3FgALwq4A)\n - [ ] [成功复现！一条 git push 即可接管 GitHub 服务器，任意拉取他人私有仓库 (CVE-2026-3854)](https://mp.weixin.qq.com/s/3BgVRD3ap1MukW8C2kPS2w)\n - [ ] [直播回顾｜安全运营AI 进阶：AI威胁研判的场景化应用与落地路径](https://mp.weixin.qq.com/s/nWS-Udu2X_qLvPcnUWcbww)\n - [ ] [持安科技五一劳动节放假期间值守通知！](https://mp.weixin.qq.com/s/h13-V5F4wIiyD5r_6MighA)\n - [ ] [28个Claude子Agent重构渗透测试，一键部署AI黑客军团](https://mp.weixin.qq.com/s/7UvpaAmzQtg7IQ21p8wuQw)\n - [ ] [直播预告：“古法挖洞”还能走多远？](https://mp.weixin.qq.com/s/hxW_S8aaOza2awbuqv_LuA)\n- Blog on STAR Labs\n - [ ] [Three Bugs Walk Into a PDF: Prototype Pollution, Served Cold](https://starlabs.sg/blog/2026/04-three-bugs-walk-into-a-pdf-prototype-pollution-served-cold/)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [Backup Files + .env Exposure Developers Ki Sabse Badi Galti: Config Files Se Credentials Nikalo!](https://infosecwriteups.com/backup-files-env-exposure-developers-ki-sabse-badi-galti-config-files-se-credentials-nikalo-1432674639b8?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [From Zero Reports to My First Hall of Fame](https://infosecwriteups.com/from-zero-reports-to-my-first-hall-of-fame-177eb70afd58?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [This Is How I Could Have Reactivated Your Instagram Account Without Your Knowledge](https://infosecwriteups.com/this-is-how-i-could-have-reactivated-your-instagram-account-without-your-knowledge-9d220bda5620?source=rss----7b722bfd1b8d--bug_bounty)\n- Malware-Traffic-Analysis.net - Blog Entries\n - [ ] [2026-04-22: Malicious ad leads to ClickFix-style page for macOS malware](https://www.malware-traffic-analysis.net/2026/04/22/index.html)\n- Reverse Engineering\n - [ ] [I'm not an expert but a beginner. So using guides I've tried an app in everyway for intercepting network traffic.Frida didn't worked even. The app doesn't even work in a rooted I tried decompiling and change network config. But doesn't work as after installed the app redirects play store for update.](https://www.reddit.com/r/ReverseEngineering/comments/1sywof4/im_not_an_expert_but_a_beginner_so_using_guides/)\n - [ ] [I built a free open-source CAN bus reverse engineering workstation in Python — 15 tabs, offline ML, dual AI engines, MitM gateway](https://www.reddit.com/r/ReverseEngineering/comments/1syxlkh/i_built_a_free_opensource_can_bus_reverse/)\n- Malwarebytes\n - [ ] [Researchers built a chatbot that only knows the world before 1931](https://www.malwarebytes.com/blog/ai/2026/04/researchers-built-a-chatbot-that-only-knows-the-world-before-1931)\n - [ ] [Microsoft won’t patch PhantomRPC: Feature or bug?](https://www.malwarebytes.com/blog/news/2026/04/microsoft-wont-patch-phantomrpc-feature-or-bug)\n - [ ] [Scam-checking just got a lot easier: Malwarebytes is now in Claude](https://www.malwarebytes.com/blog/product/2026/04/scam-checking-just-got-a-lot-easier-malwarebytes-is-now-in-claude)\n- The Trail of Bits Blog\n - [ ] [Extending Ruzzy with LibAFL](https://blog.trailofbits.com/2026/04/29/extending-ruzzy-with-libafl/)\n- Exploit-DB.com RSS Feed\n - [ ] [[webapps] HAX CMS 24.x - Stored Cross-Site Scripting (XSS)](https://www.exploit-db.com/exploits/52526)\n - [ ] [[webapps] Craft CMS 5.6.16 - RCE](https://www.exploit-db.com/exploits/52525)\n - [ ] [[local] GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation](https://www.exploit-db.com/exploits/52524)\n - [ ] [[webapps] phpMyFAQ 4.0.16 - Improper Authorization](https://www.exploit-db.com/exploits/52523)\n - [ ] [[webapps] GeographicLib v2.5.1 - stack buffer overflow](https://www.exploit-db.com/exploits/52522)\n - [ ] [[local] OpenWrt 23.05 - Authenticated Remote Code Execution (RCE)](https://www.exploit-db.com/exploits/52521)\n - [ ] [[webapps] OpenKM 6.3.12 - Multiple](https://www.exploit-db.com/exploits/52520)\n - [ ] [[webapps] GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)](https://www.exploit-db.com/exploits/52519)\n - [ ] [[webapps] JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution](https://www.exploit-db.com/exploits/52518)\n - [ ] [[webapps] FacturaScripts 2025.43 - XSS](https://www.exploit-db.com/exploits/52517)\n - [ ] [[webapps] Xibo CMS 4.3.0 - RCE via SSTI](https://www.exploit-db.com/exploits/52516)\n - [ ] [[local] Fedora - Local Privilege Escalation](https://www.exploit-db.com/exploits/52515)\n - [ ] [[webapps] LangChain Core 1.2.4 - SSTI/RCE](https://www.exploit-db.com/exploits/52514)\n - [ ] [[local] Atlona ATOMERX21 - Authenticated Command Injection](https://www.exploit-db.com/exploits/52513)\n- daniel.haxx.se\n - [ ] [curl 8.20.0](https://daniel.haxx.se/blog/2026/04/29/curl-8-20-0/)\n- text/plain\n - [ ] [Exploiting Vulnerable Drivers](https://textslashplain.com/2026/04/29/exploiting-vulnerable-drivers/)\n- 奇客Solidot–传递最新科技情报\n - [ ] [Zed 编辑器发布 1.0 版本](https://www.solidot.org/story?sid=84187)\n - [ ] [城里的鸟更怕女性，原因未知](https://www.solidot.org/story?sid=84186)\n - [ ] [.icu 域名被短暂劫持](https://www.solidot.org/story?sid=84185)\n - [ ] [荷兰政府上线开源代码托管平台](https://www.solidot.org/story?sid=84184)\n - [ ] [报告称逾三分之二婴儿使用屏幕，最多花 8 小时在屏幕上](https://www.solidot.org/story?sid=84183)\n - [ ] [马斯克称他创办非盈利的 OpenAI 是为了对抗 Google](https://www.solidot.org/story?sid=84182)\n - [ ] [打呵欠有助于大脑清理脑液](https://www.solidot.org/story?sid=84181)\n - [ ] [食肉细菌在三天内就破坏了男子的手臂和腿](https://www.solidot.org/story?sid=84180)\n - [ ] [Ghostty 项目将退出 GitHub 平台](https://www.solidot.org/story?sid=84179)\n - [ ] [Fedora Linux 44 释出](https://www.solidot.org/story?sid=84177)\n - [ ] [美国数据中心新建天然气项目排放量超过部分国家一年总排放量](https://www.solidot.org/story?sid=84176)\n- Black Hills Information Security, Inc.\n - [ ] [A Practical Guide to BloodHound Data Collection](https://www.blackhillsinfosec.com/bloodhound-data-collection/)\n- 绿盟科技技术博客\n - [ ] [Claude Mythos Preview 模型能力解析：大模型攻防实测与企业应对建议](https://blog.nsfocus.net/claude-mythos-preview-%e6%a8%a1%e5%9e%8b%e8%83%bd%e5%8a%9b%e8%a7%a3%e6%9e%90%ef%bc%9a%e5%a4%a7%e6%a8%a1%e5%9e%8b%e6%94%bb%e9%98%b2%e5%ae%9e%e6%b5%8b%e4%b8%8e%e4%bc%81%e4%b8%9a%e5%ba%94%e5%af%b9/)\n - [ ] [绿盟云原生靶场：体系化教学，让客户安全人才培养更高效](https://blog.nsfocus.net/%e7%bb%bf%e7%9b%9f%e4%ba%91%e5%8e%9f%e7%94%9f%e9%9d%b6%e5%9c%ba%ef%bc%9a%e4%bd%93%e7%b3%bb%e5%8c%96%e6%95%99%e5%ad%a6%ef%bc%8c%e8%ae%a9%e5%ae%a2%e6%88%b7%e5%ae%89%e5%85%a8%e4%ba%ba%e6%89%8d%e5%9f%b9/)\n - [ ] [【公益译文】2026年国际AI安全报告（六）](https://blog.nsfocus.net/%e3%80%90%e5%85%ac%e7%9b%8a%e8%af%91%e6%96%87%e3%80%912026%e5%b9%b4%e5%9b%bd%e9%99%85ai%e5%ae%89%e5%85%a8%e6%8a%a5%e5%91%8a%ef%bc%88%e5%85%ad%ef%bc%89/)\n - [ ] [权威认证 | 绿盟科技再次荣膺CNCERT甲级支撑单位](https://blog.nsfocus.net/%e6%9d%83%e5%a8%81%e8%ae%a4%e8%af%81-%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e5%86%8d%e6%ac%a1%e8%8d%a3%e8%86%bacncert%e7%94%b2%e7%ba%a7%e6%94%af%e6%92%91%e5%8d%95%e4%bd%8d/)\n- 锦行科技\n - [ ] [锦行科技获评广东省制造业单项冠军--以网安技术赋能制造业高质量发展](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247494887&idx=1&sn=9f95427d136c978534caa7d31e2c0251)\n- HackerNews\n - [ ] [塴輿 LofyGang ĺ›˘äź™ć˛‰ĺŻ‚ä¸‰ĺš´ĺŽĺˇĺœŸé‡ćĽďźŒĺ‘čľˇ Minecraft LofyStealer çŞƒĺ–ĺ™¨ć´ťĺŠ¨](http://0.0.0.0:8080/post/64195)\n - [ ] [Signal é’“éąźć´ťĺŠ¨çž„ĺ‡†ĺžˇĺ›˝ĺŽ˜ĺ‘˜ďźŒç–‘äźźäż„ç˝—ć–ŻčĄŒĺŠ¨](http://0.0.0.0:8080/post/64194)\n - [ ] [ćœ‰çźşé™ˇçš„ VECT 2.0 ĺ‹’ç´˘č˝ŻäťśĺŻšĺ¤§ć–‡äťśĺ……ĺ˝“ć•°ćŽć“Śé™¤ĺ™¨](http://0.0.0.0:8080/post/64193)\n - [ ] [č§†é˘‘ćœĺŠĄ Vimeo 祎莤 Anodot ćł„éœ˛äş‹äťśĺŻźč‡´ç”¨ćˆˇć•°ćŽćš´éœ˛](http://0.0.0.0:8080/post/64192)\n - [ ] [éť‘ĺŽ˘ć­Łĺœ¨ĺˆŠç”¨ LiteLLM éŤ˜ĺąé˘„čŽ¤čŻ SQL ćł¨ĺ…Ľćźć´ž](http://0.0.0.0:8080/post/64191)\n - [ ] [ç ”çŠśäşşĺ‘˜ĺ‘çŽ°ĺ…łé”Ž GitHub RCE ćźć´žďźšäť…éœ€ä¸€ćŹĄ Git Push ĺłĺŻĺˆŠç”¨](http://0.0.0.0:8080/post/64190)\n- 腾讯玄武实验室\n - [ ] [每日安全动态推送(26/4/29)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960463&idx=1&sn=015c75ee26b3745447c1f01f5cf34c2f)\n- 威努特安全网络\n - [ ] [智能体工厂来了！解读工信部、国家数据局联合“模数共振”行动](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651141486&idx=1&sn=2e505e08a56c51d68a942c64211bbcc1)\n- 漕河泾小黑屋\n - [ ] [CVE-2024-38812 深度分析：从堆风水到远程代码执行](https://mp.weixin.qq.com/s?__biz=MzA4NzQwNzY3OQ==&mid=2247484086&idx=1&sn=5d6bbe68afada10fbfe35201dfeb801e)\n- 黑鸟\n - [ ] [APT29曾经最隐秘的武器：目标机器运行的定制化间谍木马](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186574&idx=1&sn=3ee6eff7d3195af7bf9e10f8f0051298)\n- 绿盟科技研究通讯\n - [ ] [AI靶场安全实战系列：训练数据投毒——利用标签翻转实现内容审核定向漏判](https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499884&idx=1&sn=5d65fb971fbb00e7c92b236e86eaaed1)\n- 微步在线研究响应中心\n - [ ] [一个人，两个AI，0代码，把墨西哥政府打成筛子](https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508657&idx=1&sn=91bbcd48f789f8112b1e17c05ef2e94e)\n- 丁爸 情报分析师的工具箱\n - [ ] [【AI报告】近一周全球安全态势简报（4.29）](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651155341&idx=1&sn=db01cc12a23f4f1115c2458d833e039c)\n- 看雪学苑\n - [ ] [利用任意物理读写驱动来加载自己的驱动](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614348&idx=1&sn=3ad065ac0bd0b6e152a887670ef1e5dd)\n - [ ] [单个Git Push就能攻陷GitHub？CVE-2026-3854高危漏洞曝光](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614348&idx=2&sn=ce07c53a847420a458cfab9e46207714)\n - [ ] [月薪3W定向培养！看雪安卓高级研修班『2026春季班』火热招生中](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614348&idx=3&sn=62e4bc182f8c27b9cd4fc1664da29b41)\n- 代码卫士\n - [ ] [仅凭一条 git push 命令，即可在 GitHub 实现RCE 并访问数百万仓库](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525909&idx=1&sn=3a1d88cd8e20887b0792cd899f1b843e)\n - [ ] [刚刚，cPanel紧急修复影响所有受支持版本的认证漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525909&idx=2&sn=80fc4007516f0fcfc9072f775b3c330a)\n- 安全内参\n - [ ] [上海隧道新加坡公司发生数据泄露，甲方暂停数字系统访问权限](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515877&idx=1&sn=2332d7f8b501a1d47d2a083c76ffaca2)\n - [ ] [美国空军部发布人工智能和数据战略以加速提升军事优势](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515877&idx=2&sn=efe28fc0af81525c9a1f74dd319f9bba)\n- 青衣十三楼飞花堂\n - [ ] [Ubuntu 22中找不到libcrypto.so.1.1](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247489366&idx=1&sn=25aed7e787c8a2adcf137c0d79400ac7)\n- 安全圈\n - [ ] [【安全圈】伊朗黑客组织：已“开盒” 2379 名美国海军陆战队员，掌握数万名中东美军姓名、住址、日常轨迹、购物习惯等](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076059&idx=1&sn=da1650f67f6af7da8ad2b79dff4f91a3)\n - [ ] [【安全圈】医疗科技大厂美敦力 IT 系统遭遇黑客入侵，未影响服务交付](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076059&idx=2&sn=6a35f617d45895376be8b42f42bc2cd0)\n - [ ] [【安全圈】巴西 LofyGang 团伙沉寂三年后卷土重来，发起 Minecraft LofyStealer 窃取器活动](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076059&idx=3&sn=86fa3d53221d6b2950f6138d34ba3c1f)\n- 电子物证\n - [ ] [【微信附件命名规则大揭秘】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048987&idx=1&sn=280addaf3dcb224fb97d69fb695b6fc9)\n - [ ] [手机取证：从 WhatsApp、Signal 和 Telegram 提取媒体和消息的简单方法](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048987&idx=2&sn=309bed7249de4b6f4a119ebe6cdeaf00)\n- 中国信息安全\n - [ ] [视频 | 百队竞技淬精英 数智筑盾护山河！第三届“长城杯”网数智安全大赛（防护赛）总决赛在福州胜利闭幕](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262069&idx=1&sn=2043a5b7f19741ec05fe604bb7078e0c)\n- 青藤云安全\n - [ ] [幽灵比特告诉你，为什么有了WAF你还需要RASP ？](https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650851210&idx=1&sn=dc2cdcae2121592b41fac046243f6b4d)\n- 信息安全国家工程研究中心\n - [ ] [专家解读｜推动我国网络法治建设迈向更高水平](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247503779&idx=1&sn=830ec4705741bd1d0696f8b6b0283afd)\n- 火绒安全\n - [ ] [火绒在线 你的节日安全我包了](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532513&idx=1&sn=c47286d23b046817cbc4acd24f544a25)\n - [ ] [火绒小问答--「个人版」近期top问题解答](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532513&idx=2&sn=d39192aed969909ee4d3d812767f3340)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532513&idx=3&sn=f5680223b6ef6876b83daf76b88e39f7)\n- 数世咨询\n - [ ] [美国网络犯罪损失首次突破200亿美元](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542754&idx=1&sn=fcdc1d572f0c00c86d522b8289144147)\n - [ ] [百队竞技淬精英 数智筑盾护山河 | 第三届“长城杯”网数智安全大赛（防护赛）总决赛在福州胜利闭幕](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542754&idx=2&sn=48ad6e0c018995a383e2bee088673419)\n- 安全牛\n - [ ] [2283美元，AI造出可用Chrome漏洞武器：网络攻防平衡已被彻底颠覆](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141181&idx=1&sn=378f9848d3f349beb7a1bd6a965d6b46)\n - [ ] [网信部门依法查处剪映 App 等 AI 生成合成内容标识违法平台；CNVD周报：高危0day漏洞激增，Adobe、NVIDIA、Cisco成重灾区| 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141181&idx=2&sn=a454d1c6b28958fd4ffe80cb59bd0a57)\n- 安全客\n - [ ] [深度分析Sorry勒索软件的加密实现与行为特征](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789890&idx=1&sn=7105facbd94397f0277f8dda2ce10396)\n- 极客公园\n - [ ] [AI 走出屏幕，家电变成「机器人」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653104961&idx=1&sn=72388a60efefba651c7ff837db3486d0)\n - [ ] [比亚迪5月1日开始涨价；微信朋友圈悄然改版；麦当劳奶昔正式回归｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653104940&idx=1&sn=148290a972a03e9d9d721582bca21cfb)\n- 深信服千里目安全技术中心\n - [ ] [【漏洞通告】Github-Enterprise远程命令执行漏洞(CVE-2026-3854)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525429&idx=1&sn=efffa2a9040316ec6d7753bd4b59e865)\n - [ ] [【漏洞通告】LiteLLM SQL注入漏洞(CVE-2026-42208)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525429&idx=2&sn=576d9806998fdf7f0dbf7b40e17dcfcb)\n - [ ] [网络安全信息与动态周报2026年第17期（4月20日-4月26日）](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525429&idx=3&sn=81c972bbb2dae75573479374efa28eb1)\n- 表图\n - [ ] [网络安全行业，已经连续 11 个季度没增长了](https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247484986&idx=1&sn=f01cbdba037a67e00007de8cfe6dac6c)\n- Desync InfoSec\n - [ ] [构建密码学资产清单：微软密码学态势管理实践指南](https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247490256&idx=1&sn=ceee7d855ca1354058e7b96de35db47b)\n- 安全行者老霍\n - [ ] [多模型协同使用比单一模型的选择更为关键](https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486556&idx=1&sn=9eb2bfccb21150c4a28d244257187e81)\n- 国家互联网应急中心CNCERT\n - [ ] [网络安全信息与动态周报2026年第17期（4月20日-4月26日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501549&idx=1&sn=97ecbb76c2cb79f98d955fbb80b7cdb4)\n- 360数字安全\n - [ ] [360获全国五一劳动奖状、全国工人先锋号两项国家级荣誉](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585850&idx=1&sn=4ab125c5e4594f14b071f7bb4546e169)\n- Over Security - Cybersecurity news aggregator\n - [ ] [A un anno dallo scandalo sullo spionaggio di giornalisti e attivisti, Paragon non ha ancora dato risposte sull'uso dei suoi spyware alla giustizia italiana](https://www.wired.it/article/paragon-spyware-risposte-indagine-italia-procura/)\n- 迪哥讲事\n - [ ] [Java \"幽灵比特位\"（Ghost Bits）引发的waf通杀](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499396&idx=1&sn=42f82893ad0bb6a9c4141fc432d2ff7c)\n- ICT Security Magazine\n - [ ] [Le vie nascoste del digitale: vulnerabilità e sicurezza dei cavi sottomarini](https://www.ictsecuritymagazine.com/articoli/vulnerabilita-cavi-sottomarini/)\n - [ ] [Caso Mythos: l’AI che trova zero-day in autonomia, il leak su Discord e la nuova economia delle vulnerabilità](https://www.ictsecuritymagazine.com/notizie/claude-mythos-leak-discord/)\n - [ ] [Cloud forensics e il labirinto giurisdizionale: acquisire prove oltre i confini](https://www.ictsecuritymagazine.com/articoli/cloud-forensics-prove-digitali/)\n- Yak Project\n - [ ] [Ghost Bits 自动化提效：让WAF绕过告别重复劳作](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529777&idx=1&sn=30895fc3b2cb1832945d2b442ce3852e)\n- Javvad Malik\n - [ ] [The Tyranny of Security](https://javvadmalik.com/2026/04/29/the-tyranny-of-security/)\n- 悬镜安全\n - [ ] [拆解 Agent Loop 盲盒：从 RSAC2026 冠军看灵境 AIDR 的智能体原生安全实践！](https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647799274&idx=1&sn=f6adc342d85f11907e3544292ecbc6ea)\n- IT Service Management News\n - [ ] [Privacy filter di Open AI](http://blog.cesaregallotti.it/2026/04/privacy-filter-di-open-ai.html)\n- LR的安全自留地\n - [ ] [Ghost Bits，Java WAF之殇？](https://mp.weixin.qq.com/s?__biz=MzkwNzMyNjU0MQ==&mid=2247484328&idx=1&sn=c5e9397cfd395a2e969ca70ebe70465b)\n- Full Disclosure\n - [ ] [ESP-RFID-Tool v2 PRO — Full Public Disclosure](https://seclists.org/fulldisclosure/2026/Apr/18)\n - [ ] [Re: SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App](https://seclists.org/fulldisclosure/2026/Apr/21)\n - [ ] [SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App](https://seclists.org/fulldisclosure/2026/Apr/20)\n - [ ] [SEC Consult SA-20260423-0 :: DLL Hijacking in EfficientLab Controlio (cloud-based employee monitoring service)](https://seclists.org/fulldisclosure/2026/Apr/19)\n - [ ] [SEC Consult SA-20260421-0 :: Broken Access Control in Config Endpoint in LiteLLM](https://seclists.org/fulldisclosure/2026/Apr/17)\n - [ ] [SEC Consult SA-20260415-0 :: Exposed Private Key of X.509 Certificate in SAP HANA Cockpit & SAP HANA Database Explorer](https://seclists.org/fulldisclosure/2026/Apr/16)\n - [ ] [APPLE-SA-04-22-2026-2 iOS 18.7.8 and iPadOS 18.7.8](https://seclists.org/fulldisclosure/2026/Apr/15)\n - [ ] [APPLE-SA-04-22-2026-1 iOS 26.4.2 and iPadOS 26.4.2](https://seclists.org/fulldisclosure/2026/Apr/14)\n - [ ] [Research: When Trusted Tools Become Attack Primitives](https://seclists.org/fulldisclosure/2026/Apr/13)\n - [ ] [[KIS-2026-08] SocialEngine <= 7.8.0 (get-memberall) SQL\tInjection Vulnerability](https://seclists.org/fulldisclosure/2026/Apr/12)\n - [ ] [[KIS-2026-07] SocialEngine <= 7.8.0 Blind Server-Side Request\tForgery Vulnerability](https://seclists.org/fulldisclosure/2026/Apr/11)\n - [ ] [Trojan-Spy.Win32.Small / Remote Command Execution](https://seclists.org/fulldisclosure/2026/Apr/10)\n - [ ] [[IWCC 2026] CfP: 15th International Workshop on Cyber Crime - Linköping, Sweden, Aug 24-27, 2026](https://seclists.org/fulldisclosure/2026/Apr/9)\n - [ ] [[SBA-ADV-20251120-01] CVE-2026-0972: GoAnywhere MFT Email HTML Injection](https://seclists.org/fulldisclosure/2026/Apr/8)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Today's Odd Web Requests, (Wed, Apr 29th)](https://isc.sans.edu/diary/rss/32934)\n - [ ] [ISC Stormcast For Wednesday, April 29th, 2026 https://isc.sans.edu/podcastdetail/9910, (Wed, Apr 29th)](https://isc.sans.edu/diary/rss/32932)\n- Schneier on Security\n - [ ] [Claude Mythos Has Found 271 Zero-Days in Firefox](https://www.schneier.com/blog/archives/2026/04/claude-mythos-has-found-271-zero-days-in-firefox.html)\n- The Hacker News\n - [ ] [SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack](https://thehackernews.com/2026/04/sap-npm-packages-compromised-by-mini.html)\n - [ ] [New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs](https://thehackernews.com/2026/04/new-wave-of-dprk-attacks-uses-ai.html)\n - [ ] [Webinar: How to Automate Exposure Validation to Match the Speed of AI Attacks](https://thehackernews.com/2026/04/webinar-how-to-automate-exposure.html)\n - [ ] [What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)](https://thehackernews.com/2026/04/what-to-look-for-in-exposure-management.html)\n - [ ] [Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately](https://thehackernews.com/2026/04/critical-cpanel-authentication.html)\n - [ ] [CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV](https://thehackernews.com/2026/04/cisa-adds-actively-exploited.html)\n - [ ] [LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure](https://thehackernews.com/2026/04/litellm-cve-2026-42208-sql-injection.html)\n- Deep Web\n - [ ] [Need help with an account takeover type situation](https://www.reddit.com/r/deepweb/comments/1szf9iu/need_help_with_an_account_takeover_type_situation/)\n- Your Open Hacker Community\n - [ ] [Force factory reset bypassing security measures](https://www.reddit.com/r/HowToHack/comments/1szdhww/force_factory_reset_bypassing_security_measures/)\n - [ ] [Ubuntu or Kali Linux for a CS student doing cybersecurity and CTFs?](https://www.reddit.com/r/HowToHack/comments/1syuk6f/ubuntu_or_kali_linux_for_a_cs_student_doing/)\n - [ ] [.](https://www.reddit.com/r/HowToHack/comments/1sza0gw/_/)\n - [ ] [Trying to recover my mom's lost Gmail account via hacking](https://www.reddit.com/r/HowToHack/comments/1sz6moa/trying_to_recover_my_moms_lost_gmail_account_via/)\n- Deeplinks\n - [ ] [EFF Submission to UN Report on the Role of Media in the Context of Israel’s Policies Toward Palestinians](https://www.eff.org/deeplinks/2026/04/eff-submission-un-report-role-media-context-israels-policies-toward-palestinians)\n - [ ] [Former EFF Activism Director's New Book, Transaction Denied, Explores What Happens When Financial Companies Act like Censors](https://www.eff.org/deeplinks/2026/04/former-eff-activism-directors-new-book-transaction-denied-explores-what-happens)\n- Information Security\n - [ ] [Are a lot of security programs still too focused on prevention and not enough on visibility?](https://www.reddit.com/r/Information_Security/comments/1syyg2r/are_a_lot_of_security_programs_still_too_focused/)\n - [ ] [Bluekit: The AI-Powered All-in-One Phishing Kit](https://www.reddit.com/r/Information_Security/comments/1sz0rb5/bluekit_the_aipowered_allinone_phishing_kit/)\n - [ ] [ALERT: US-Targeted Phishing Campaign Exploiting Remote Access Blind Spots](https://www.reddit.com/r/Information_Security/comments/1szagqm/alert_ustargeted_phishing_campaign_exploiting/)\n - [ ] [Mobile Malware Analysis Blog Series - Pegasus, Xenomorph, Blackrock & more](https://www.reddit.com/r/Information_Security/comments/1syza5p/mobile_malware_analysis_blog_series_pegasus/)\n - [ ] [ShinyHunters Medtronic ADT Breach: 14.5M Records Stolen](https://www.reddit.com/r/Information_Security/comments/1syyabc/shinyhunters_medtronic_adt_breach_145m_records/)\n - [ ] [KnowBe4 vs Adaptive](https://www.reddit.com/r/Information_Security/comments/1sz5sj3/knowbe4_vs_adaptive/)\n - [ ] [How know information about someone](https://www.reddit.com/r/Information_Security/comments/1sz9sw8/how_know_information_about_someone/)\n - [ ] [Cyera vs BigID for cloud-native DSPM when your breach surface is dev tooling](https://www.reddit.com/r/Information_Security/comments/1syz808/cyera_vs_bigid_for_cloudnative_dspm_when_your/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [How are you monitoring and handling vulnerable company credentials showing up in breaches and dark web dumps?](https://www.reddit.com/r/netsecstudents/comments/1syx78m/how_are_you_monitoring_and_handling_vulnerable/)\n - [ ] [Interesting bootloader if anybody wants to see how one is created in C and ASM](https://www.reddit.com/r/netsecstudents/comments/1sz0hh6/interesting_bootloader_if_anybody_wants_to_see/)\n- GRAHAM CLULEY\n - [ ] [Smashing Security podcast #465: This developer wanted to cheat at Roblox. It cost millions](https://grahamcluley.com/smashing-security-podcast-465/)\n - [ ] [Alleged Silk Typhoon hacker extradited to the United States to face charges](https://www.bitdefender.com/en-us/blog/hotforsecurity/silk-typhoon-hacker-extradited-united-states)\n- Security Affairs\n - [ ] [CVE-2026-42208: LiteLLM bug exploited 36 hours after its disclosure](https://securityaffairs.com/191483/hacking/cve-2026-42208-litellm-bug-exploited-36-hours-after-its-disclosure.html)\n - [ ] [Internet censorship index reveals Russia’s lead and widespread content blocking](https://securityaffairs.com/191475/security/internet-censorship-index-reveals-russias-lead-and-widespread-content-blocking.html)\n - [ ] [All supported cPanel versions hit by critical auth bug, now patched](https://securityaffairs.com/191465/security/all-supported-cpanel-versions-hit-by-critical-auth-bug-now-patched.html)\n - [ ] [U.S. CISA adds Microsoft Windows Shell and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/191442/security/u-s-cisa-adds-microsoft-windows-shell-and-connectwise-screenconnect-flaws-to-its-known-exploited-vulnerabilities-catalog.html)\n - [ ] [ShinyHunters exploit Anodot incident to target Vimeo](https://securityaffairs.com/191448/security/shinyhunters-exploit-anodot-incident-to-target-vimeo.html)\n- Technical Information Security Content & Discussion\n - [ ] [Copy Fail exploit lets 732 bytes hijack Linux systems and quietly grab root](https://www.reddit.com/r/netsec/comments/1szduu3/copy_fail_exploit_lets_732_bytes_hijack_linux/)\n - [ ] [The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940) - watchTowr Labs](https://www.reddit.com/r/netsec/comments/1sz5aoi/the_internet_is_falling_down_falling_down_falling/)\n - [ ] [The Thymeleaf Template Injection That Only Hurts If You Let It](https://www.reddit.com/r/netsec/comments/1sz3u3l/the_thymeleaf_template_injection_that_only_hurts/)\n - [ ] [AI security capabilities and the human side of vulnerability management](https://www.reddit.com/r/netsec/comments/1sz68c6/ai_security_capabilities_and_the_human_side_of/)\n - [ ] [A Route to Root in a 4G Industrial Router](https://www.reddit.com/r/netsec/comments/1sykrpt/a_route_to_root_in_a_4g_industrial_router/)\n - [ ] [Set up automated dependency scanning after the recent npm/PyPI supply chain attacks](https://www.reddit.com/r/netsec/comments/1syyyea/set_up_automated_dependency_scanning_after_the/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [The Next Frontier: Autonomous Security and RSAC Interviews from Quantro & SandboxAQ - Marc Manzano, Mark Hughes, Mehul Revankar - BSW #445](http://sites.libsyn.com/18678/the-next-frontier-autonomous-security-and-rsac-interviews-from-quantro-sandboxaq-marc-manzano-mark-hughes-mehul-revankar-bsw-445)\n"}}, "archive/daily/2025/2025-08-28.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747304.5469663, "n": 50996, "h": "3ac4083a8ff3cc46", "c": "# 每日安全资讯（2025-08-28）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-08-27 Review](http://www.sec-wiki.com/?2025-08-27)\n- paper - Last paper\n - [ ] [MCPTox：针对真实世界 MCP 服务器工具投毒攻击的基准测试](https://paper.seebug.org/3377/)\n- 安全客-有思想的安全新媒体\n - [ ] [IETF重磅推进AI内容标注标准 全球首个AI生成内容识别规范即将落地](https://www.anquanke.com/post/id/311590)\n - [ ] [Windows 10预览版更新：新增企业级备份功能并修复ESU问题](https://www.anquanke.com/post/id/311589)\n - [ ] [谷歌Chrome紧急发布ANGLE高危补丁，人工智能安全研究员Big Sleep发现零日漏洞（CVE-2025-9478）](https://www.anquanke.com/post/id/311513)\n - [ ] [全球性UpCrypter钓鱼攻击持续蔓延 Windows用户面临紧急安全威胁](https://www.anquanke.com/post/id/311523)\n - [ ] [全球首例AI驱动勒索软件“PromptLock”已在野利用](https://www.anquanke.com/post/id/311538)\n - [ ] [新型AI攻击将数据窃取指令隐藏于缩小图像中](https://www.anquanke.com/post/id/311537)\n - [ ] [蝉联入选！360多领域领跑2025网络安全创新方向报告](https://www.anquanke.com/post/id/311512)\n - [ ] [这届钓鱼邮件太“AI”装了](https://www.anquanke.com/post/id/311526)\n - [ ] [360护航天津医保双活容灾切换顺利完成](https://www.anquanke.com/post/id/311547)\n - [ ] [CISA紧急警告：Git代码执行漏洞正遭黑客利用](https://www.anquanke.com/post/id/311567)\n - [ ] [All in One模式+云地一体架构全面赋能，360终端安全智能体引领行业变革](https://www.anquanke.com/post/id/311557)\n - [ ] [Citrix NetScaler曝零日漏洞（CVE-2023-6548）黑客正利用RCE漏洞发动攻击](https://www.anquanke.com/post/id/311559)\n- Recent Commits to cve:main\n - [ ] [Update Wed Aug 27 11:21:03 UTC 2025](https://github.com/trickest/cve/commit/7f0358d2fdf427fdf81a8dc3c97237f865e35da1)\n- Tenable Blog\n - [ ] [Why Google’s Warning Highlights Critical Risk of AI Context-Injection Attacks](https://www.tenable.com/blog/why-google-warning-highlights-critical-risk-of-ai-context-injection-attacks)\n- myfreax\n - [ ] [Gemini 精准图像生成功能挑战 ChatGPT](https://www.myfreax.com/introducing-gemini-2-5-flash-image/)\n- 奇安信攻防社区\n - [ ] [某集团子域安全缺陷引发的全域沦陷](https://forum.butian.net/share/4502)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [假冒macOS欺骗用户安装新型Shamos信息窃取器](https://www.4hou.com/posts/7MZA)\n- Trustwave Blog\n - [ ] [Making Cyber Threat Intelligence Work for Your Organization: The Intelligence Paradox](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/making-cyber-threat-intelligence-work-for-your-organization-the-intelligence-paradox/)\n- obaby@mars\n - [ ] [“京喜”，什么他妈的叫惊喜！？](https://h4ck.org.cn/2025/08/21427)\n- 先知安全技术社区\n - [ ] [幻影|一款漏洞挖掘的浏览器扩展辅助工具|收集中的隐藏接口和敏感信息](https://xz.aliyun.com/news/18714)\n - [ ] [某在线拍卖系统代码审计](https://xz.aliyun.com/news/18713)\n - [ ] [万户OA代码审计与0day挖掘](https://xz.aliyun.com/news/18712)\n - [ ] [CVE-2025-6715 WordPress Latepoint 文件包含漏洞分析](https://xz.aliyun.com/news/18711)\n- Microsoft Security Blog\n - [ ] [Storm-0501’s evolving techniques lead to cloud-based ransomware](https://www.microsoft.com/en-us/security/blog/2025/08/27/storm-0501s-evolving-techniques-lead-to-cloud-based-ransomware/)\n - [ ] [Microsoft ranked number one in modern endpoint security market share third year in a row](https://www.microsoft.com/en-us/security/blog/2025/08/27/microsoft-ranked-number-one-in-modern-endpoint-security-market-share-third-year-in-a-row/)\n- ongoing by Tim Bray\n - [ ] [Maritime Vacation](https://www.tbray.org/ongoing/When/202x/2025/08/27/Maritime-Vacation)\n- Doonsec's feed\n - [ ] [【资料】美国人发布文章披露越南在南海填海造岛情况](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151796&idx=1&sn=9bd5e5d72a8ac18d9477d9fbce77e23c)\n - [ ] [【通知】第三届全国大学生开源情报数据采集与分析大赛开始报名啦！提供免费培训](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151796&idx=2&sn=5196841af0e502cf3b66ea0512d44db7)\n - [ ] [MetaCRM美特crm系统sendsms.jsp接口存在任意文件上传漏洞 附POC](https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488986&idx=1&sn=263f1b2004456001a8c7f189ba66bc79)\n - [ ] [一次DotNetWebShell免杀学习](https://mp.weixin.qq.com/s?__biz=MzkzNTY5NzA0Mg==&mid=2247484643&idx=1&sn=3108f1bf06975d8d3638f8f5dfc93caf)\n - [ ] [ping命令为什么它不用 TCP 或 UDP，而是 ICMP？](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247531585&idx=1&sn=5485043916a64b578f87958e26e73489)\n - [ ] [企业SRC简单漏洞挖掘](https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247488603&idx=1&sn=108ddc32df3e0264e04b344fd2fcb3b0)\n - [ ] [有些版本要停更，有些要下架，Windows软件该焕新啦！](https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492585&idx=1&sn=105521583c2ce1aa1558f9d23842307b)\n - [ ] [VS Code Copilot 提示词注入漏洞分析](https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484592&idx=1&sn=83d8bd964224df21f163a4f056a801d5)\n - [ ] [“没有安全能力” ，是对运营商做安全的最大误解](https://mp.weixin.qq.com/s?__biz=MjM5MDk4OTk0NA==&mid=2650126597&idx=1&sn=56ccb5cf6bae73de35019a4aa64d4cbe)\n - [ ] [人工智能 大模型 ：通用要求、评测指标与方法、服务能力成熟度评估](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290257&idx=1&sn=713df8638210df1654e7b46c8eaf1fc4)\n - [ ] [人工智能、算力算网 今天上传文件列表](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290257&idx=2&sn=e84b0a8b6300ac695d99692f21bb3000)\n - [ ] [授课材料准备与材料制作](https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247494069&idx=1&sn=34579aa76a6d75075391338fa196ba61)\n - [ ] [yayaya Miner挖矿木马变种分析报告](https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650212298&idx=1&sn=ccf7fde7aa01a78af9581af5b3077070)\n - [ ] [俄罗斯如何大力推动朝鲜的卫星发射计划](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562111&idx=1&sn=b2dcecde416a3810e17661d3256d93ba)\n - [ ] [中朝边境秘密导弹基地曝光｜战略意图与风险评估](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247510975&idx=1&sn=c2c10b845d892dd8828869c1e55f0629)\n - [ ] [办公网防钓鱼策略与安全意识培训指南](https://mp.weixin.qq.com/s?__biz=MzUzMDgwMjY1Mg==&mid=2247485824&idx=1&sn=71fe5d2336eb9a80aaf77d8fda78e116)\n - [ ] [第一个人工智能勒索软件PromptLock问世](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491912&idx=1&sn=810ed7024f5c10fd5eea60aa68ce9b1e)\n - [ ] [西交利物浦大学 | 针对大型语言模型的目标导向生成式提示注入攻击](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493597&idx=1&sn=45c8d52a4b9f8e73c4ab92f100ff3b14)\n - [ ] [如何学好网络安全，成为一名大黑客？](https://mp.weixin.qq.com/s?__biz=MzU5NzQ3NzIwMA==&mid=2247486968&idx=1&sn=6edbcbd58be11049593729495c056f1c)\n - [ ] [Cerbero 电子期刊：第4期](https://mp.weixin.qq.com/s?__biz=MzkzMzMyOTc5OQ==&mid=2247484332&idx=1&sn=c81d63d8ae4c4c3b0c647dcda7758170)\n - [ ] [漏洞侦查圣经](https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489631&idx=1&sn=ea636433fb8ddca37ac12d22ae46f592)\n - [ ] [筑牢安全堡垒・护航商用密码合规前行——2025淮北商用密码专题会议圆满召开](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637104&idx=1&sn=2c56ec1950da378ba25d6fd69e1185df)\n - [ ] [教育部最新公示，2025年7所高校拟新增密码本科专业！](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637104&idx=2&sn=008df149686d020c1a00eaf5549b38db)\n - [ ] [一文揭秘｜什么是零日漏洞？如何防范它带来的危害？](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637104&idx=3&sn=d6da1587ec0d12550820272d6843d4cd)\n - [ ] [美国《天才法》稳定币监管框架及影响研判](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637104&idx=4&sn=bbf15d0aa63ce4e785523a3dd5a86a04)\n - [ ] [Chrome浏览器高危零日漏洞PoC公开，已被用于野外攻击](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326763&idx=1&sn=796f7326ec14635b627337fa18948c42)\n - [ ] [倒计时3天！ 大杂会 暨 Z DemoDay 2nd 全天议程请查收！](https://mp.weixin.qq.com/s?__biz=MzkyMDU5NzQ2Mg==&mid=2247488900&idx=1&sn=95fa4c031d2b77564b676e8d1b5bb288)\n - [ ] [国家工业信息安全发展研究中心：网联汽车数据安全风险分析与治理思考](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247626950&idx=1&sn=fca9460b1a78e8574895db08b4609468)\n - [ ] [面向智能汽车的信息安全漏洞评分模型](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247626950&idx=2&sn=9deddd3b83f40621e00c6c8a30f13401)\n - [ ] [智能汽车网络安全与信息安全基础培训课程 2025](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247626950&idx=3&sn=30068ecd5f82cfd27fe2ff2067c28bd9)\n - [ ] [迈向全面实战：平行切面拉开低谷期安全产业“新质生产力”突围序幕](https://mp.weixin.qq.com/s?__biz=MzkzMDE5MDI5Mg==&mid=2247509499&idx=1&sn=db59465434c2de2b271575ce19d30fdc)\n - [ ] [安全毕业生，如何拿下好工作？](https://mp.weixin.qq.com/s?__biz=MzU5NzQ3NzIwMA==&mid=2247486963&idx=1&sn=c25641eee9b7b2ff68a0c21ca309c0a2)\n - [ ] [行业资讯：中孚信息发布公告，董事长和副总经理都被解除留置](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247493300&idx=1&sn=fd3a2c83b00d110b3dbae547525db4a9)\n - [ ] [Cointelegraph对话CertiK联合创始人顾荣辉：人性弱点成Web3安全最大挑战](https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247504527&idx=1&sn=0804c402f205a11c07265d8156641db2)\n - [ ] [免费WiFi有时可能是“致命”陷阱](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643010&idx=1&sn=b3ff2f38ac1e8e248d39ae235de0d3af)\n - [ ] [免费赠送丨网络安全意识：2025红蓝对抗网络安全意识培训课程27节](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643010&idx=2&sn=a5c7fb5d531504057234dd6c18da48c2)\n - [ ] [首席信息安全官(CISO)的新战场：管理员工行为风险](https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247485213&idx=1&sn=10dcee117e9e2e8ddd59b4b00ada0de2)\n - [ ] [文件上传之双重扩展名绕过人机验证](https://mp.weixin.qq.com/s?__biz=MzI1NDU2MzAzNQ==&mid=2247487821&idx=1&sn=5098080fd3cc076572c837fe42ba9865)\n - [ ] [国务院部署“人工智能+”，360 All In Agent战略正逢其时](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581760&idx=1&sn=d38ebefd678f4003fd6727bf7c1c6649)\n - [ ] [从3分钟到5秒！邮储银行大模型用户声音智能分析实践](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932601&idx=1&sn=21718cdd51241715ba079b20f3573504)\n - [ ] [AI快讯：中国平安将实现“AI in ALL”，AI浏览器被曝重大安全漏洞](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932601&idx=2&sn=9de4e584b0a7155b5f05210d304adfc4)\n - [ ] [马上消费金融AI拍照解题服务项目供应商征集](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932601&idx=3&sn=90ef5032980983b7c97808956bfe3bcb)\n - [ ] [【安全圈】谷歌将推行开发者实名验证：未来未验证应用将被禁止安装](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=1&sn=d1efd4b04b60550d119190338131fed1)\n - [ ] [【安全圈】澳电信巨头iiNet再陷数据泄露危机](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=2&sn=5b8e5b02424bc3889d33e2cfa8839dbd)\n - [ ] [【安全圈】全球八百多家家银行遭殃！77款恶意安卓应用以1900万次下载量实施诈骗](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=3&sn=4a5d6fa7c9489fd4242b0cf744b1b6a2)\n - [ ] [【安全圈】黑客通过OAuth令牌漏洞，入侵多家企业](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=4&sn=c0434c93832c33a5e2732eb4db9d6fb3)\n - [ ] [早期文件上传双重扩展名人机绕过](https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247491319&idx=1&sn=5a560011f57309a264097ac6ce695b92)\n - [ ] [【相关分享】记一次渗透偶遇抽象开发成功getshell](https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247489880&idx=1&sn=a7eb4e86f0fedd024db8193cb43b6988)\n - [ ] [【中国消费名品产业创新大赛】AI+消费新引擎启动！！快来Pick未来消费风向标！](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254112&idx=1&sn=c117d26b9289bf7d7b635c8481899ebc)\n - [ ] [【正式启动】2025年中国数据安全企业全景图征集启动](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254112&idx=2&sn=2b4317b00e0d0fddafcaf82feb799a58)\n - [ ] [【数字政府优秀案例联播】浙江省：浙食链——基本建成食品安全数字化追溯体系](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254112&idx=3&sn=6170c91c20dbd59ccf006b76b9f4f2ea)\n - [ ] [CISA 提醒注意已遭活跃利用的 Git 代码执行漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523897&idx=2&sn=a9f209d80ecb2cb20899f31b1b931255)\n - [ ] [全球首现AI勒索软件PromptLock：跨平台黑客新武器来袭](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247542910&idx=1&sn=e7804dc6f0912477a36b2caa9b48666d)\n - [ ] [考试中心丨您的城市可以进行ISC2考试吗](https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247493081&idx=1&sn=f16bc4db4af2ac3753bbd33d94d73091)\n - [ ] [全国总工会第二届职工数字化应用技术技能大赛福建省选拔赛（数据安全管理员赛项）圆满落幕](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247493746&idx=1&sn=b2dfc473ed03c3dd63e4a1c60ccbf2fe)\n - [ ] [赛事招标丨陕西公司2025年网络和信息安全技能竞赛技术服务项目](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247493746&idx=2&sn=783133871d51e4f09307d920acac7082)\n - [ ] [赛事招标丨中国电信新疆分公司2025年网络安全攻防培训服务项目](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247493746&idx=3&sn=96999496423d942a3c16edde89ca1bcf)\n - [ ] [第六届“蒙古马杯”网络安全竞赛开始报名啦！](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247493746&idx=4&sn=47833bcdbac83213502e504dc86ef0ba)\n - [ ] [【守护数字安全，锻造网安尖兵】六安市第三届网络安全技能大赛报名通道已开启！](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247493746&idx=5&sn=094a4422f3f6e356f067541e8f676f1f)\n - [ ] [DownUnderCTF · 2025 WriteUp](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247493746&idx=6&sn=c2b07fbab6e7928a1a70be42738d228e)\n - [ ] [第九届御网杯网络安全大赛线下半决赛Writeup](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247493746&idx=7&sn=2952ffed884eb0ba049e6b73c12531b8)\n - [ ] [3个月狂揽70万赏金，挖洞赛道惊现17岁“天才黑马”！](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326763&idx=2&sn=3cdcdd980635bf0c5f8219d7262afb8c)\n - [ ] [借AI工具绕过安全边界，供应链攻击瞄准开发者](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326763&idx=4&sn=58044a1c3547d4189a81fe635a5a113b)\n - [ ] [Amazon Q Developer for VS Code：易受不可见提示词注入影响](https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247485071&idx=1&sn=a1ab176bad236fb74b9881959cb15295)\n - [ ] [启明星辰2025半年报：亏损收窄但营收承压，AI安全赛道突围](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486093&idx=1&sn=7e0deffa6c0fe9c10c1c8644f800f395)\n - [ ] [2024网安裁员全景：巨头收缩与独角兽转身的生存逻辑](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486093&idx=2&sn=be3b91ba31b14c4f9f5da7c76e9301a0)\n - [ ] [【干货】笑傲“网安职场”的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486093&idx=3&sn=95edab1a537ce89622ecff423849eb27)\n - [ ] [【原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486093&idx=4&sn=bc21044cfcd7c0936f2bf7ae216ee1f7)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486093&idx=5&sn=e123cc5b5777a95a940b57b601d46c8c)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486093&idx=6&sn=de683a52b42095fe445df9600d0f7d7b)\n - [ ] [决赛倒计时！2025湾区杯网络安全大赛点亮未来科技安全](https://mp.weixin.qq.com/s?__biz=MzA4Mjk5NjU3MA==&mid=2455489930&idx=1&sn=e2fa5bc056d7fbe8645894070ab22b4c)\n - [ ] [SRC漏洞挖掘辅助工具-Phantom](https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247493832&idx=1&sn=cb10b94449d98dce6e9d416d4d082b20)\n - [ ] [国务院印发《关于深入实施“人工智能+”行动的意见》](https://mp.weixin.qq.com/s?__biz=Mzg4MDE0MzQzMw==&mid=2247488356&idx=1&sn=9670f5cf1d59f610e2e68cd54cabedc3)\n - [ ] [《关于深入实施“人工智能+”行动的意见》答记者问](https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448689981&idx=2&sn=894847614cc93fca19207f0c5bfb07cd)\n - [ ] [首个“AI勒索软件”出现：恶意行为代码由大模型动态生成](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514913&idx=1&sn=367779756b98b43f296381ad23aff8f2)\n - [ ] [美国特种作战司令部文件曝光美军拟利用AI技术开展信息战](https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247490607&idx=1&sn=bbdc11fbd8b4f8c70a31b60d8b313120)\n - [ ] [零成本学 CISA！职场硬通货，从 “被替代” 到 “抢着要”！](https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247524824&idx=1&sn=b07b3e7ff1a31352c3077a3171cb10e5)\n - [ ] [DPO认证限时特惠|面试企业合规岗刚需证书](https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247524824&idx=2&sn=4929fe93f698321bb7986a7d94d97f0f)\n - [ ] [信安世纪入选2025年度IDC中国金融IT中坚力量榜单，以硬核实力赋能金融数字化转型](https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650665275&idx=1&sn=d957c54953ef0f3f7699cdc633a64568)\n - [ ] [基于LLM+Kali Linux MCP下的自动化渗透实践](https://mp.weixin.qq.com/s?__biz=MzkzOTYzMzY3MQ==&mid=2247484064&idx=1&sn=32550b5fa68243ff51594013ffce3ce1)\n - [ ] [小红书新一代数据库代理 RedHub 的设计与实践](https://mp.weixin.qq.com/s?__biz=Mzg4OTc2MzczNg==&mid=2247493624&idx=1&sn=5b5341735fdc2c68992f723c776e6e56)\n - [ ] [必看报告！AI防御时代：如何用杀伤链模型守住自己资产](https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850668&idx=1&sn=73076daac1c7ab40ce509bb741ffa229)\n - [ ] [【国际视野】美国国家标准与技术研究院发布指南草案，帮助企业应对新兴网络安全风险](https://mp.weixin.qq.com/s?__biz=MzIyMjQwMTQ3Ng==&mid=2247491726&idx=1&sn=8ad705baa70438e830f5057fef1871c6)\n - [ ] [记某次攻防暴肝的一夜](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498105&idx=1&sn=80b2c9600a82f84ebcf08d62548346b0)\n - [ ] [绿盟科技亮相2025人民数据大会](https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650471009&idx=1&sn=e35eff41f8cde4890ba4b98f0f20253e)\n - [ ] [日产确认遭勒索软件入侵，4TB核心数据被盗](https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247503974&idx=2&sn=536e2262fec4d21dccb2e6807cd9dd96)\n - [ ] [上汽最详细的整车开发流程(CPMP)解读](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247558877&idx=2&sn=563aa9f262379d24b17c39b063355f25)\n - [ ] [重磅专题论坛 | AES汽车以太网及车载光通信技术论坛开启报名](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247558877&idx=3&sn=2f5ad978dafae88b92277be4488d33c9)\n - [ ] [西安交通大学副教授确认AutoSQT 2025分享：复杂软件生态协同演化分析技术，操作系统的视角与实践](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247558877&idx=4&sn=b4ef4dcaa0b6d0e782a27acee10b86c4)\n - [ ] [代码基础，情书就不基础](https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649795537&idx=1&sn=fd99f498a1b5ef21e2728af342feb968)\n - [ ] [谷歌“纳米香蕉”重磅发布！Gemini 2.5 Flash Image引领AI图像编辑新风潮](https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484958&idx=1&sn=ba1897f3af7cab7bc645fa64ac604d96)\n - [ ] [网络安全信息与动态周报2025年第34期（8月18日-8月24日）](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524553&idx=2&sn=20d91a9e9f0f3fc04a2128fb536964f8)\n - [ ] [黑客最常用的扫描工具-Nessus安装教程来了！网安小白必看！](https://mp.weixin.qq.com/s?__biz=MzkzMzkyNTQ0Ng==&mid=2247484576&idx=1&sn=16fbf7259a319d01427fa1128f960541)\n - [ ] [二进制漏洞挖掘过程](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556164&idx=1&sn=1f1ee93256374d943bbd8dc9d465a77a)\n - [ ] [【免费领】国内首部Docker容器最佳安全实践白皮书](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556164&idx=2&sn=42369a6f3e06b94e7b4436eb0b42ee52)\n - [ ] [社区交流群号，速度近，有业务需求的进，闲聊者勿扰](https://mp.weixin.qq.com/s?__biz=MzkyNzYzNTQ2Nw==&mid=2247485020&idx=1&sn=4f2b782337220d84cf8bb6575039a58d)\n - [ ] [A.S.E首月答卷：社区声音驱动进化，有奖悬赏！](https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207343&idx=1&sn=dc21614767d97a4101a539188d5a4b94)\n - [ ] [AISOC运营手记 | 安全ROI难量化？4大核心指标破解运营低效困局](https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247507924&idx=1&sn=d417fcb72f978b61ddc4c84aee6993fe)\n - [ ] [深度好文丨大区域（城市）低空安全管控应用发展与未来展望](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601155&idx=1&sn=fa6b9ff165c28365defa8bfcceda4dd1)\n - [ ] [侵犯华为芯片技术，估值超3亿！14人被判刑](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601155&idx=2&sn=f6cc3943cdd2e70d3c44160079b2371b)\n - [ ] [待遇优厚+免费发表+版权自有+高录用率 ｜2025第三届电子系统工程大会“赛博安全”分论坛征文通知](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601155&idx=3&sn=82fe08fc424405cf1927ec2c52204c50)\n - [ ] [国务院重磅发布：提升安全能力水平，推动AI应用合规](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601155&idx=4&sn=e356bf18e6bc01af2354b6512934b503)\n - [ ] [新潮信息出席2025淮北商用密码专题会议，共探密码应用合规新路径](https://mp.weixin.qq.com/s?__biz=MzkwNDcyODgwOQ==&mid=2247487613&idx=1&sn=8933d53e766cbc162abdd53e20dac910)\n - [ ] [一图读懂 | 关于深入实施“人工智能+”行动的意见](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649174276&idx=2&sn=c946d61a196d86606684976b3acbbd7e)\n - [ ] [《网络安全技术 鉴别与授权 基于属性的访问控制模型与管理规范》（征求意见稿）等4项国家标准公开征求意见](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649174276&idx=3&sn=b7438112f74765dacd3801aa41f3b96a)\n - [ ] [国务院关于深入实施“人工智能+”行动的意见](https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247504622&idx=1&sn=cb868eaf86c34ae79fcc98419db5dec9)\n - [ ] [特朗普拟解雇美联储理事，施压其降低利率](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651621683&idx=2&sn=e433b8ffa4cb0398e6ffd6ceb1ecc1e0)\n - [ ] [全文 | 中共中央办公厅 国务院办公厅关于推进绿色低碳转型加强全国碳市场建设的意见](https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247593838&idx=1&sn=f85fdfcfb2a0050df5cb072094a71a1f)\n - [ ] [一篇讲清楚渗透测试是什么？种类以及细节，渗透小白必看！](https://mp.weixin.qq.com/s?__biz=MzkzODU5MTkyNQ==&mid=2247485871&idx=1&sn=cae6db5faf8bdffd6c837326788eead5)\n - [ ] [静默之控：主动与被动双模后门MystRodX的隐匿渗透](https://mp.weixin.qq.com/s?__biz=MzkxMDYzODQxNA==&mid=2247484093&idx=1&sn=830282cdd26681db43d723364c52f1c5)\n - [ ] [＂人工智能+＂新政将如何影响网络安全格局？](https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247488393&idx=1&sn=ca34e8038f0e83130e8870cd15710981)\n - [ ] [长亭解决方案｜场景化Web安全建设解决方案](https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247488393&idx=2&sn=a6bb69f8a33187d8c7d34dc8429cc509)\n - [ ] [渗透测试中常用的在线工具和网站（强烈建议收藏）](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574645&idx=1&sn=c0aa6792e8bd9b99debe0f26b7a511b9)\n - [ ] [超全网络安全面试题汇总（2025版）](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574645&idx=2&sn=48635f04e59d13be21b27095b403db98)\n - [ ] [第24期《平航电子取证技术简报》实物刊来了！](https://mp.weixin.qq.com/s?__biz=MzI0OTEyMTk5OQ==&mid=2247494998&idx=1&sn=d09a7502a9e53d0a4df861d648fea1ff)\n - [ ] [欢迎注册参会｜第22届中国信息和通信安全学术会议即将召开](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247500794&idx=1&sn=b6f04eaea0d9acc85ca3a72634817933)\n - [ ] [招聘启动！别让才华等太久！](https://mp.weixin.qq.com/s?__biz=MzIzODAwMTYxNQ==&mid=2652145574&idx=1&sn=33691f73a301c76fc4137dcabc487c01)\n - [ ] [【招聘】平安银河实验室招人啦，可内推～](https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247487157&idx=1&sn=4ca19e1e3929a719887ca3862993eb26)\n - [ ] [选核心交换机？先搞清楚转发速率和背板带宽](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649470412&idx=1&sn=04b6386c15174faa8fcd7fab1189b1fb)\n - [ ] [使用 Sentinel-1 雷达数据监测新的经济指标——德国汽车工业生产水平的潜力](https://mp.weixin.qq.com/s?__biz=MzI2MDIyOTMyOA==&mid=2247488144&idx=1&sn=b450afe6dfb2ec4c9baec6a3b8d63a9d)\n - [ ] [【内推】平安银河实验室 蓝紫军方向](https://mp.weixin.qq.com/s?__biz=MzkwMDQ4MDU2MA==&mid=2247484437&idx=1&sn=3e586af73647c3341e2a5624f9511221)\n - [ ] [2025年 ISG 观安杯网络安全比赛部分题解](https://mp.weixin.qq.com/s?__biz=MzI3NDEzMDgzNw==&mid=2247485195&idx=1&sn=0fa30176d4af6286f7e0124171e1bb9c)\n - [ ] [仅80元，全开源智能 AI 手表，乐鑫ESP32开发板，内置计步器、指南针、气压计](https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454939796&idx=1&sn=fa69d4228c6e1c075f46da74437dfcae)\n - [ ] [智能驱动，守护税务数据安全](https://mp.weixin.qq.com/s?__biz=MzI0NjAyMjU4MA==&mid=2649597221&idx=1&sn=8b38a2bf44bc90f8dd64ea8d3dc132e1)\n - [ ] [常用的内网渗透命令！](https://mp.weixin.qq.com/s?__biz=MzkyODk0MDY5OA==&mid=2247485884&idx=1&sn=118574e7dce4bac9bdbc30b36d6271c4)\n - [ ] [云上容器内脚本监控的简单实现](https://mp.weixin.qq.com/s?__biz=Mzg4MTA2MTc4MA==&mid=2247494292&idx=1&sn=79ee35326b5a6c2decd00d8d4bf685c0)\n - [ ] [微软公布量子安全计划路线图：2033 年全面量子安全，比政府要求提前两年](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540106&idx=1&sn=da2a7c993db33a51c1b6e84d52faffd9)\n - [ ] [半年度报告：山石网科2025年半年度营收4.1682亿，同比（上年同期3.8079亿）增加9.46%，亏损0.76亿，亏损收窄](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247493294&idx=1&sn=1baa5a31aec203ca49c8fc3962e72053)\n - [ ] [XCon x HG 国际黑马会议圆满成功 | 安全锚定 智守未来](https://mp.weixin.qq.com/s?__biz=MzIxNjk0MzQ4NQ==&mid=2247491357&idx=1&sn=80cf72d2635d9faa5a32dda9bd87b546)\n - [ ] [GB T 19771-2025 网络安全技术 公钥基础设施 PKI组件最小互操作规范 将于2026年2月1日实施](https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247504622&idx=2&sn=2f3c7d799f10ebeacf09bf8b5d535f1a)\n - [ ] [Cobalt Strike 4.9.1 部署手册优惠](https://mp.weixin.qq.com/s?__biz=MzkzMTk0NTQ5Nw==&mid=2247483769&idx=1&sn=8e96fc82a01fd178f95ccb02d7679594)\n - [ ] [补天众测Q2榜单发布|今年已过半，年初列的收入目标完成了多少？快来加入补天众测帮你完成你的小目标吧！](https://mp.weixin.qq.com/s?__biz=MzU4MzgwODc3Ng==&mid=2247499315&idx=1&sn=5ceee7c1654311fbee2ad4fa8eecd30f)\n - [ ] [黑客武器库 | BloodHound域渗透神器](https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247485012&idx=1&sn=7602981746ffe9476e525f861b346c10)\n - [ ] [【卫星图像】朝鲜新丰洞导弹作战基地](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247510975&idx=2&sn=a56b2f51e63e23705a680ebf94f4a1e7)\n - [ ] [什么？下载速度几kb/s很难受？？还不会用Turbo Download Manager 提升浏览器下载速度？](https://mp.weixin.qq.com/s?__biz=Mzk3NTEyMzQzOA==&mid=2247487136&idx=1&sn=f05f227458e3f41cea3493e1e7556e31)\n - [ ] [港美股第1弹，彻底打破你的认知差](https://mp.weixin.qq.com/s?__biz=MzkwOTU4NzE1Mw==&mid=2247483767&idx=1&sn=1f856295c16795508b31c303aab610a2)\n - [ ] [【每日突破100+】Claude Pro使用次数无限延长秘籍（附5步骤详解）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510750&idx=1&sn=9b0ef3e00b6dce2455be857f957dbb1e)\n - [ ] [【七天实操】Claude 4国内免翻墙账号获取秘籍！（内附独家渠道）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510750&idx=2&sn=3e05f42b14d2753bf743ee15a7df1b2c)\n - [ ] [【实操指南】10分钟搭建Claude账号池！高效管理多账号避开限制（附详细步骤）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510750&idx=3&sn=8f0c3b272e2be0ccc084d3530f3a6b41)\n - [ ] [10分钟搭建个人专属Claude 3.7镜像！无障碍高效使用指南（附独家稳定方案）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510750&idx=4&sn=f52374f2c405c429210c9c953095c532)\n - [ ] [10分钟搞定Claude 4封号危机！三步应对策略完全指南（内附专属解决方案）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510750&idx=5&sn=49ddcf7d94f1bb6b7565fb85cea6a745)\n - [ ] [【业界动态】国务院印发《关于深入实施“人工智能+”行动的意见》](https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664996121&idx=1&sn=3d1c5116bedc5d4e073592c28e90f38e)\n - [ ] [【业界动态】全国网安标委公示人工智能安全标准应用实践案例入选建议名单](https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664996121&idx=2&sn=7738cae5ec8c8c6db5dff05c2ca8a83e)\n - [ ] [【业界动态】2025第一届全国大学生人工智能安全竞赛总决赛圆满收官](https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664996121&idx=3&sn=a877eff3b2337b64c30156298915d9dc)\n - [ ] [网络安全进步最快的方式！没有之一！](https://mp.weixin.qq.com/s?__biz=Mzk0MzcyNjMyNg==&mid=2247485369&idx=1&sn=09e1099cd8b291010a5d5efa1045facf)\n - [ ] [Osaurus：让你的Mac芯片性能起飞的本地AI神器，比Ollama更快更强！](https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485829&idx=1&sn=784c409d95bfd25d01a74adb3aec2c78)\n - [ ] [信息安全漏洞周报（2025年第34期）](https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463386&idx=1&sn=ae16bd4b49827c60204915736e81d8fa)\n - [ ] [攻防演练中红队基础设施的搭建与隐蔽措施](https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247488189&idx=1&sn=68eb4d81ed5b8dbffb4ccba1b2f1d7db)\n - [ ] [TingYu【高性能的 Web 指纹识别与资产扫描工具】](https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486842&idx=1&sn=602dcdd0330e725d0e319771651315b0)\n - [ ] [内卷破局：ES:Tools武器库用Rust重构安全生态](https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247488255&idx=1&sn=5a1d92553c594cabcded7c89f5db4c9a)\n - [ ] [《国务院关于深入实施“人工智能+”行动的意见》解读：以安全保发展，用安全促发展](https://mp.weixin.qq.com/s?__biz=MzA3NDUzMjc5Ng==&mid=2650203879&idx=1&sn=8ee516a1d4ba340f69b502d7c511a88a)\n - [ ] [人工智能与软件漏洞生命周期](https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484461&idx=1&sn=bdc29b3968cb0827199ede78b31f6f94)\n - [ ] [人工智能在网络安全中的应用：主要优势、防御策略和未来趋势](https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484461&idx=2&sn=a0ec8c0f30b04cc0462345a779579072)\n - [ ] [安势信息亮相openkylin开发者大会，以“白银捐赠人”身份，共同推动开源安全与合规生态健康持续发展](https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491892&idx=1&sn=d257a3cfd9db7fb5ebe8f8dad3e509e8)\n - [ ] [很有意思](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247491225&idx=1&sn=f256c9f212c5400e076edf23916e109b)\n - [ ] [彻底搞懂零拷贝：提升系统性能的关键技术](https://mp.weixin.qq.com/s?__biz=MzA3MTAwODc0NQ==&mid=2649891451&idx=1&sn=c2383e46e68fe492557409bb60f7ce23)\n - [ ] [恶意 Go 模块伪装成 SSH 暴力破解器，通过 Telegram 窃取凭证](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247532467&idx=1&sn=7a47f6b8f342f19f666704e5b7f22af9)\n - [ ] [关于SSH-Snake 是一个自我传播、自我复制、无文件的脚本，可自动执行 SSH 私钥和主机发现的后期利用任务](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247532467&idx=2&sn=d6cd7858d0dc4e4200834ccbb0e7d132)\n - [ ] [假冒macOS欺骗用户安装新型Shamos信息窃取器](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584383&idx=1&sn=7bc202ded4e0af48aa6d1f1a14859af5)\n - [ ] [售票开启｜GEEKCON 2025 上海站早鸟票限时抢购中](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584383&idx=2&sn=43f6126b0f44159c87173e59b8074621)\n - [ ] [生态协同 技术创新｜山石网科2025年百城巡展·郑州站圆满落幕](https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661302423&idx=1&sn=2ea2cc5a2540cf8155e055ac267269c2)\n - [ ] [首次发现实验型 AI 驱动的勒索软件](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247502232&idx=1&sn=e2a94a47e21f942e7b54ecfdf77407b5)\n - [ ] [篇 41： DOGE上传社会保障数据库到亚马逊云](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247502232&idx=2&sn=d22327400996d2a2264d969f360b5fab)\n - [ ] [X 的“精确定位”画像：从可用性到“可跟踪”](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247502232&idx=3&sn=3ff8fc9e86c6036dbf556c5858e69ac4)\n - [ ] [俄罗斯通过Max应用收集用户信息](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247502232&idx=4&sn=b99beddfe6cce6fc8934d09501ffd254)\n - [ ] [破解人才困境的智慧罗盘！新时期的人才“能力地图”](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138491&idx=1&sn=05adfb1debc66039794c06b27aff6dbe)\n - [ ] [美国内华达州政府办公室因网络安全事件紧急关闭，多项政务服务中断；DeepSeek V3.1曝离奇Bug | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138491&idx=2&sn=09075496f0ac8ed27fbe6110fd013892)\n - [ ] [助力科技兴警|成都链安受广西网安总队邀请在“新型网络犯罪侦查培训班”中开展授课](https://mp.weixin.qq.com/s?__biz=MzU2NzUxMTM0Nw==&mid=2247513969&idx=1&sn=65d09363c06b8ff722398fc340baa12d)\n - [ ] [第二届“长城杯”信息安全铁人三项赛（作品赛）总决赛在赣州成功举办](https://mp.weixin.qq.com/s?__biz=MzI1NzQ0NTMxMQ==&mid=2247490746&idx=1&sn=f560e434ce97eb1e63a29fcf4eaefa9b)\n - [ ] [每天走够这个步数，益处最大！](https://mp.weixin.qq.com/s?__biz=Mzg2MjgwMzIxMA==&mid=2247485243&idx=1&sn=287cbbe3a3ff6320f70f37725baa9f42)\n - [ ] [ssrf漏洞结合redis渗透linux主机](https://mp.weixin.qq.com/s?__biz=MzAwMjc0NTEzMw==&mid=2653589096&idx=1&sn=6c9c4ce08ec837ca9499d02f790d29d6)\n - [ ] [“人工智能+”行动意见发布 亚信安全AI XDR开启“人工智能+安全”新阶段](https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650624820&idx=1&sn=f4e91809dca6a4924d99276bdc9d5409)\n - [ ] [Y老师的密码学 · 第一篇](https://mp.weixin.qq.com/s?__biz=MzIyMjkzMzY4Ng==&mid=2247510972&idx=1&sn=cafe5ac20ed3a1ff655d1857370c6f4d)\n - [ ] [网络安全实施框架指南](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=1&sn=0b2a11320ef41db0533421c02154ff61)\n - [ ] [钢铁行业工业互联网云原生技术实施指南](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=2&sn=0aa8ea3ea7f59602d5cb1588becc5988)\n - [ ] [数字低空安全技术白皮书（2025）](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=3&sn=f94f9360ad4196e9f63d2f5da3453908)\n - [ ] [2025年版无人机安全白皮书](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=4&sn=d5053b39c6117f32a3c68fb06dcca044)\n - [ ] [低空智联网环境下的安全管控技术与应用研究（2025版）](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=5&sn=2524b626dd130b6b27c64505f0b1bcf2)\n - [ ] [低空智能网联网络与数据安全体系白皮书（2025）](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=6&sn=4b1d53f26178c0c8f3cf8669212293c8)\n - [ ] [泛在安全低空数智网技术体系白皮书](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=7&sn=57dfcfceb096f258b45332607c9f43ac)\n - [ ] [低空经济发展白皮书（3.0）安全体系](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=8&sn=7040abb44b64ef8ef398b258c50839c0)\n - [ ] [谷歌应用商店爆出大量恶意软件，被下载1900万次](https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247503974&idx=1&sn=4e7ebd7be014e435e066f1f772ae4236)\n - [ ] [【严重】Dataease DB2 Aspectweaver 反序列化任意文件写入漏洞](https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247486028&idx=1&sn=5de99b5c36af6f971c1c756922f4c65f)\n- SpiderLabs Blog\n - [ ] [Malicious Screen Connect Campaign Abuses AI-Themed Lures for Xworm Delivery](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/malicious-screen-connect-campaign-abuses-ai-themed-lures-for-xworm-delivery/)\n- GuidePoint Security\n - [ ] [Automating CloudFront C2 with AI – Reduce Errors & Save Time](https://www.guidepointsecurity.com/blog/automating-cloudfront-c2-with-ai/)\n- Sandfly Security Blog RSS Feed\n - [ ] [Sandfly Security Named Finalist in CyberShark Pitch Competition](https://sandflysecurity.com/blog/sandfly-security-named-finalist-in-cybershark-pitch-competition)\n- Securelist\n - [ ] [Exploits and vulnerabilities in Q2 2025](https://securelist.com/vulnerabilities-and-exploits-in-q2-2025/117333/)\n- Horizon3.ai\n - [ ] [From Patch Tuesday to Pentest Wednesday™: Proof That Redefined Security for a Manufacturer](https://horizon3.ai/intelligence/blogs/from-patch-tuesday-to-pentest-wednesday-proof-that-redefined-security-for-a-manufacturer/)\n - [ ] [CVE-2025-7776](https://horizon3.ai/attack-research/vulnerabilities/cve-2025-7776/)\n- The Trail of Bits Blog\n - [ ] [Implement EIP-7730 today](https://blog.trailofbits.com/2025/08/27/implement-eip-7730-today/)\n- Malwarebytes\n - [ ] [Developer verification: a promised lift for Android security](https://www.malwarebytes.com/blog/news/2025/08/developer-verification-a-promised-lift-for-android-security)\n - [ ] [More vulnerable stalkerware victims’ data exposed in new TheTruthSpy flaw](https://www.malwarebytes.com/blog/news/2025/08/more-vulnerable-stalkerware-victims-data-exposed-in-new-thetruthspy-flaw)\n - [ ] [77 malicious apps removed from Google Play Store](https://www.malwarebytes.com/blog/news/2025/08/77-malicious-apps-removed-from-google-play-store)\n- PortSwigger Blog\n - [ ] [\"The entire internet is broken\": ethical hacking expert John Hammond meets James Kettle](https://portswigger.net/blog/the-entire-internet-is-broken-ethical-hacking-expert-john-hammond-meets-james-kettle)\n- Microsoft Security Response Center\n - [ ] [BlueHat Asia 2025: Closing soon: Submit your papers by September 5, 2025](https://msrc.microsoft.com/blog/2025/08/bluehat-asia-2025-closing-soon-submit-your-papers-by-september-5-2025/)\n- bishopfox.com\n - [ ] [The Top Reasons Security Leaders Choose Red Teaming](https://bishopfox.com/blog/top-reasons-security-leaders-choose-red-teaming)\n- Dhole Moments\n - [ ] [It’s a Cold Day in Developer Hell, So I Must Roll My Own Crypto](https://soatok.blog/2025/08/27/its-a-cold-day-in-developer-hell-so-i-must-roll-my-own-crypto/)\n- 奇客Solidot–传递最新科技情报\n - [ ] [Google 在翻译应用中加入 AI 驱动的语言学习功能](https://www.solidot.org/story?sid=82151)\n - [ ] [父母指控 OpenAI 的 ChatGPT 杀死了他们的孩子](https://www.solidot.org/story?sid=82150)\n - [ ] [苹果讨论过收购 Mistral AI 和 Perplexity](https://www.solidot.org/story?sid=82149)\n - [ ] [Anthropic 与图书作者就侵犯版权达成和解](https://www.solidot.org/story?sid=82148)\n - [ ] [无印良品在华商标诉讼败诉](https://www.solidot.org/story?sid=82147)\n- 腾讯安全应急响应中心\n - [ ] [A.S.E首月答卷：社区声音驱动进化，有奖悬赏！](https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207343&idx=1&sn=dc21614767d97a4101a539188d5a4b94)\n- 奇安信 CERT\n - [ ] [【在野利用】Citrix NetScaler 内存溢出漏洞(CVE-2025-7775)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503847&idx=1&sn=3adb444bbcb1ac6ce14501ee51e12668)\n- 腾讯玄武实验室\n - [ ] [每日安全动态推送(25/8/27)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960206&idx=1&sn=5b443058d24fd1a6f3344bf716363b46)\n- 安全内参\n - [ ] [首个“AI勒索软件”出现：恶意行为代码由大模型动态生成](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514913&idx=1&sn=367779756b98b43f296381ad23aff8f2)\n - [ ] [美国特种作战司令部文件曝光美军拟利用AI技术开展信息战](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514913&idx=2&sn=d67e8dd0a5a3c5d9ffc7821ad56cb24a)\n- 威努特安全网络\n - [ ] [企业智能体应用：破局“烟囱困境”的思考与启示](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651135229&idx=1&sn=6d6e4f3114f2ef8e02eca662a04f6a4e)\n- 知道创宇404实验室\n - [ ] [404星链计划 | 项目版本更新](https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650991017&idx=1&sn=e93ae14d534b5042960f883e33c6643b)\n- 奇安信威胁情报中心\n - [ ] [深度揭露，银狐黑产借育儿补贴之名的精心骗局](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247515766&idx=1&sn=30a7d04ff2b61bfda9ac6d7c6c1070a5)\n- 代码卫士\n - [ ] [Citrix 紧急修复已遭利用的 NetScaler RCE 0day漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523897&idx=1&sn=e11d4a106337143972fe49dc8aee936b)\n - [ ] [CISA 提醒注意已遭活跃利用的 Git 代码执行漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523897&idx=2&sn=a9f209d80ecb2cb20899f31b1b931255)\n- 回忆飘如雪\n - [ ] [从零开始学PWN学03：jarvisoj_level2](https://mp.weixin.qq.com/s?__biz=Mzg3NjA4MTQ1NQ==&mid=2247484377&idx=1&sn=985d43f8742fd8c3260acf32afc49ceb)\n- 看雪学苑\n - [ ] [2025 KCTF | 第六题《秘辛揭露》设计思路及解析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599037&idx=1&sn=abc68109222dd66c812a851a5dca25f2)\n - [ ] [Nissan 旗下设计工作室服务器遭入侵，4TB 数据被窃](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599037&idx=2&sn=262c8846fc7337ad1bd664d688112e71)\n - [ ] [3个月直通大厂高新岗位！全程实战案例解析，掌握高危漏洞攻防技巧](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599037&idx=3&sn=92ae50e75a40d302a6d812176bb7e7d9)\n- 微步在线研究响应中心\n - [ ] [漏洞通告 | CrushFTP 身份认证绕过漏洞被黑客组织积极利用](https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507906&idx=1&sn=72fd63f59c6d92e8c1effe15196079d7)\n- 安全圈\n - [ ] [【安全圈】谷歌将推行开发者实名验证：未来未验证应用将被禁止安装](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=1&sn=d1efd4b04b60550d119190338131fed1)\n - [ ] [【安全圈】澳电信巨头iiNet再陷数据泄露危机](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=2&sn=5b8e5b02424bc3889d33e2cfa8839dbd)\n - [ ] [【安全圈】全球八百多家家银行遭殃！77款恶意安卓应用以1900万次下载量实施诈骗](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=3&sn=4a5d6fa7c9489fd4242b0cf744b1b6a2)\n - [ ] [【安全圈】黑客通过OAuth令牌漏洞，入侵多家企业](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=4&sn=c0434c93832c33a5e2732eb4db9d6fb3)\n- 安全牛\n - [ ] [破解人才困境的智慧罗盘！新时期的人才“能力地图”](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138491&idx=1&sn=05adfb1debc66039794c06b27aff6dbe)\n - [ ] [美国内华达州政府办公室因网络安全事件紧急关闭，多项政务服务中断；DeepSeek V3.1曝离奇Bug | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138491&idx=2&sn=09075496f0ac8ed27fbe6110fd013892)\n- 数世咨询\n - [ ] [微软公布量子安全计划路线图：2033 年全面量子安全，比政府要求提前两年](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540106&idx=1&sn=da2a7c993db33a51c1b6e84d52faffd9)\n- 青藤云安全\n - [ ] [必看报告！AI防御时代：如何用杀伤链模型守住自己资产](https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850668&idx=1&sn=73076daac1c7ab40ce509bb741ffa229)\n- 信安之路\n - [ ] [揭秘参加 SRC 培训后的学员收入有多少？](https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500073&idx=1&sn=47f421ada610904d49ec7d6938c423ef)\n- 微步在线\n - [ ] [CSOP2025看点 | 中国信科集团袁俊：破局单点防御](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650184510&idx=1&sn=dfc564dc0d77b0edaa1380bd92275096)\n- dotNet安全矩阵\n - [ ] [.NET 会话劫持，实现在不同用户会话中执行命令](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500396&idx=1&sn=b5bf5ca7baa8bf65db3f2b210a17414c)\n - [ ] [.NET 内网攻防实战电子报刊](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500396&idx=2&sn=99a73dce010e7e95bd741fbea140eddd)\n - [ ] [.NET MVC 漏洞挖掘，通过匿名访问实现权限绕过](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500396&idx=3&sn=6aa7fa0dfd430326fedd9b3f6d4c19f4)\n- 极客公园\n - [ ] [21.98 万起！小鹏 P7 要让 Model 3 和小米 SU7 睡不着觉](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653085626&idx=1&sn=7f6edf53982003759559eb8fb470e34e)\n - [ ] [AI 上新 | 谷歌最新「香蕉」AI 图像模型，让网友疯玩「Vibe Photoshoping」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653085608&idx=1&sn=7c04c31940c2f2557508d0bf9d853211)\n - [ ] [苹果9月10日发新品，曝超燃海报；淘宝骑士新装登《福布斯》封面；泰勒·斯威夫特官宣订婚｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653085590&idx=1&sn=11d06ae036e97c6ad5d8fe96802c4db1)\n- 国家互联网应急中心CNCERT\n - [ ] [网络安全信息与动态周报2025年第34期（8月18日-8月24日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500312&idx=1&sn=48377c0787ab0fde54b158c0c70b2a0e)\n- ChaMd5安全团队\n - [ ] [Korban Android Ransomware分析](https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247513372&idx=1&sn=8a8469c7ccd101996958288c317340bd)\n- 信息安全国家工程研究中心\n - [ ] [欢迎注册参会｜第22届中国信息和通信安全学术会议即将召开](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247500794&idx=1&sn=b6f04eaea0d9acc85ca3a72634817933)\n- 奇安盘古\n - [ ] [喜讯！奇安盘古荣获上海市科技进步一等奖](https://mp.weixin.qq.com/s?__biz=MzI2MDA0MTYyMQ==&mid=2654404469&idx=1&sn=fa36778dccf7c50e0e1a9be92ca5e268)\n- 迪哥讲事\n - [ ] [记某次攻防暴肝的一夜](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498105&idx=1&sn=80b2c9600a82f84ebcf08d62548346b0)\n- 360数字安全\n - [ ] [国务院部署“人工智能+”，360 All In Agent战略正逢其时](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581760&idx=1&sn=d38ebefd678f4003fd6727bf7c1c6649)\n- Black Hills Information Security, Inc.\n - [ ] [Commonly Abused Administrative Utilities: A Hidden Risk to Enterprise Security](https://www.blackhillsinfosec.com/commonly-abused-administrative-utilities/)\n- Securityinfo.it\n - [ ] [Android, più sicurezza con la verifica dell’identità sviluppatori](https://www.securityinfo.it/2025/08/27/android-piu-sicurezza-con-la-verifica-dellidentita-sviluppatori/?utm_source=rss&utm_medium=rss&utm_campaign=android-piu-sicurezza-con-la-verifica-dellidentita-sviluppatori)\n- ICT Security Magazine\n - [ ] [Cloud Security Landscape: una guida per il 2025-2026](https://www.ictsecuritymagazine.com/articoli/cloud-security/)\n - [ ] [Attacchi mirati ai sistemi di prenotazione online dei ristoranti stellati: il lusso a tavola sotto attacco digitale](https://www.ictsecuritymagazine.com/notizie/attacchi-ristoranti-stellati/)\n - [ ] [AI degenerativa: il degrado dei modelli di intelligenza artificiale e rischi per la cybersecurity](https://www.ictsecuritymagazine.com/notizie/ai-degenerativa/)\n - [ ] [Quantum Readiness: la preparazione strategica alla crittografia post-quantistica nell’era dell’informatica quantistica](https://www.ictsecuritymagazine.com/articoli/quantum-readiness/)\n- 深信服千里目安全技术中心\n - [ ] [【漏洞通告】NetScaler ADC和NetScaler Gateway内存溢出漏洞(CVE-2025-7775)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524553&idx=1&sn=e3d9d6b4cce8ffb39461980f2feab9a7)\n - [ ] [网络安全信息与动态周报2025年第34期（8月18日-8月24日）](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524553&idx=2&sn=20d91a9e9f0f3fc04a2128fb536964f8)\n- Over Security - Cybersecurity news aggregator\n - [ ] [100 video](https://roccosicilia.com/2025/08/28/100-video/)\n - [ ] [Storm-0501 hackers shift to ransomware attacks in the cloud](https://www.bleepingcomputer.com/news/security/storm-0501-hackers-shift-to-ransomware-attacks-in-the-cloud/)\n - [ ] [Experimental PromptLock ransomware uses AI to encrypt, steal data](https://www.bleepingcomputer.com/news/security/experimental-promptlock-ransomware-uses-ai-to-encrypt-steal-data/)\n - [ ] [FreePBX servers hacked via zero-day, emergency fix released](https://www.bleepingcomputer.com/news/security/freepbx-servers-hacked-via-zero-day-emergency-fix-released/)\n - [ ] [US sanctions Russian national and Chinese company over North Korean IT worker schemes](https://therecord.media/us-sanctions-company-national-north)\n - [ ] [IT system supplier cyberattack impacts 200 municipalities in Sweden](https://www.bleepingcomputer.com/news/security/it-system-supplier-cyberattack-impacts-200-municipalities-in-sweden/)\n - [ ] [Libbiosig, Tenda, SAIL, PDF XChange, Foxit vulnerabilities](https://blog.talosintelligence.com/libbiosig-tenda-sail-pdf-xchange-foxit-vulnerabilities/)\n - [ ] [Google to verify all Android devs to protect users from malware](https://www.bleepingcomputer.com/news/security/google-to-verify-all-android-devs-to-protect-users-from-malware/)\n - [ ] [Global Salt Typhoon hacking campaigns linked to Chinese tech firms](https://www.bleepingcomputer.com/news/security/global-salt-typhoon-hacking-campaigns-linked-to-chinese-tech-firms/)\n - [ ] [License-plate reader company pauses work with federal agencies after backlash](https://therecord.media/flock-license-plate-reader-pauses-federal-work)\n - [ ] [Over 28,000 Citrix devices vulnerable to new exploited RCE flaw](https://www.bleepingcomputer.com/news/security/over-28-200-citrix-instances-vulnerable-to-actively-exploited-rce-bug/)\n - [ ] [Hackers use fake NDAs to deliver malware to US manufacturers](https://therecord.media/hackers-fake-ndas-malware)\n - [ ] [Allied spy agencies blame 3 Chinese tech companies for Salt Typhoon attacks](https://therecord.media/allied-spy-agencies-blame-chinese-companies-salt-typhoon)\n - [ ] [Spanish police arrest student suspected of hacking school system to change grades](https://therecord.media/spanish-police-hacker-arrest-grades)\n - [ ] [Why zero trust is never 'done' and is an ever-evolving process](https://www.bleepingcomputer.com/news/security/why-zero-trust-is-never-done-and-is-an-ever-evolving-process/)\n - [ ] [MDR su misura](https://www.certego.net/blog/mdr-su-misura-quando-le-tecnologie-proprietarie-fanno-la-differenza/)\n - [ ] [Cybersecurity Workforce Trends in 2025 – Skills Gap, Diversity and SOC Readiness](https://www.darknet.org.uk/2025/08/cybersecurity-workforce-trends-in-2025-skills-gap-diversity-and-soc-readiness/)\n - [ ] [AI generativa a supporto del SOC: come cambia la sicurezza dell’e-mail](https://www.cybersecurity360.it/soluzioni-aziendali/ai-generativa-a-supporto-del-soc-come-cambia-la-sicurezza-dellemail/)\n - [ ] [2,5 miliardi di account Gmail violati, nessun allarme: ecco cosa è successo davvero](https://www.cybersecurity360.it/news/25-miliardi-di-account-gmail-violati-nessun-allarme-ecco-cosa-e-successo-davvero/)\n - [ ] [Healthcare Services Group data breach impacts 624,000 people](https://www.bleepingcomputer.com/news/security/healthcare-services-group-data-breach-impacts-624-000-people/)\n - [ ] [Incidenti NIS, ancora in salita la strada verso la cyber resilience: i dati ENISA](https://www.cybersecurity360.it/nuove-minacce/incidenti-nis-ancora-in-salita-la-strada-verso-la-cyber-resilience-i-dati-enisa/)\n - [ ] [Hundreds of Swedish municipalities impacted by suspected ransomware attack on IT supplier](https://therecord.media/sweden-municipalities-ransomware-software)\n - [ ] [From Forecasting Storms to Staying Weatherproof](https://bfore.ai/blog/from-forecasting-storms-to-staying-weatherproof/)\n - [ ] [Finnish police wiretap reveals Russian ‘shadow fleet’ captain instructed to destroy evidence](https://therecord.media/finnish-police-wiretap-eagles-sabotage)\n - [ ] [MSSP Growth Guide: Scaling Threat Detection for Expanding Client Base](https://any.run/cybersecurity-blog/mssp-growth-guide-ti-feed/)\n - [ ] [Exploits and vulnerabilities in Q2 2025](https://securelist.com/vulnerabilities-and-exploits-in-q2-2025/117333/)\n - [ ] [Intelligenza artificiale e privacy: oggi più importante che mai](https://www.cybersecurity360.it/soluzioni-aziendali/intelligenza-artificiale-e-privacy-oggi-piu-importante-che-mai/)\n - [ ] [Android, più sicurezza con la verifica dell’identità sviluppatori](https://www.securityinfo.it/2025/08/27/android-piu-sicurezza-con-la-verifica-dellidentita-sviluppatori/)\n - [ ] [Ransomware e Information Disclosure, giocare d’anticipo](https://www.cybersecurity360.it/outlook/ransomware-e-information-disclosure-giocare-danticipo/)\n - [ ] [ShadowSilk: A Cross-Border Binary Union for Data Exfiltration](https://www.group-ib.com/blog/shadowsilk/)\n - [ ] [TheSqua.re - 107,041 breached accounts](https://haveibeenpwned.com/Breach/TheSquare)\n- RedTeam\n - [ ] [VS Code Copilot 提示词注入漏洞分析](https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484592&idx=1&sn=83d8bd964224df21f163a4f056a801d5)\n- Have I Been Pwned latest breaches\n - [ ] [TheSqua.re - 107,041 breached accounts](https://haveibeenpwned.com/Breach/TheSquare)\n- 安全学术圈\n - [ ] [西交利物浦大学 | 针对大型语言模型的目标导向生成式提示注入攻击](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493597&idx=1&sn=45c8d52a4b9f8e73c4ab92f100ff3b14)\n- IT Service Management News\n - [ ] [Alberghi, documenti di identità e l'approccio del \"non si sa mai\"](http://blog.cesaregallotti.it/2025/08/alberghi-documenti-di-identita-e.html)\n - [ ] [Pubblicata la ISO/IEC 27018:2025](http://blog.cesaregallotti.it/2025/08/pubblicata-la-isoiec-270182025.html)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Interesting Technique to Launch a Shellcode, (Wed, Aug 27th)](https://isc.sans.edu/diary/rss/32238)\n - [ ] [ISC Stormcast For Wednesday, August 27th, 2025 https://isc.sans.edu/podcastdetail/9588, (Wed, Aug 27th)](https://isc.sans.edu/diary/rss/32236)\n- Cyber Security – Strategy and Innovation\n - [ ] [Security Chat 6.0: A Night of Ideas, Innovation, and Community in Zurich](https://raffy.ch/blog/2025/08/27/security-chat-6-0-a-night-of-ideas-innovation-and-community-in-zurich/)\n- 嘶吼专业版\n - [ ] [假冒macOS欺骗用户安装新型Shamos信息窃取器](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584383&idx=1&sn=7bc202ded4e0af48aa6d1f1a14859af5)\n - [ ] [售票开启｜GEEKCON 2025 上海站早鸟票限时抢购中](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584383&idx=2&sn=43f6126b0f44159c87173e59b8074621)\n- Schneier on Security\n - [ ] [We Are Still Unable to Secure LLMs from Malicious Inputs](https://www.schneier.com/blog/archives/2025/08/we-are-still-unable-to-secure-llms-from-malicious-inputs.html)\n- BorderGate\n - [ ] [Capture the Flag Exercises: Part Three](https://www.bordergate.co.uk/capture-the-flag-exercises-part-three/)\n- Troy Hunt's Blog\n - [ ] [Home Assistant + Ubiquiti + AI = Home Automation Magic](https://www.troyhunt.com/home-assistant-ubiquiti-ai-home-automation-magic/)\n- The Grey Corner\n - [ ] [AWS Service Command and Control HTTP traffic forwarding part 3](/2025/08/27/aws-service-c2-forwarding-part3.html)\n - [ ] [Azure Service Command and Control HTTP traffic forwarding part 5](/2025/08/27/azure-service-c2-forwarding-part5.html)\n- blackMORE Ops\n - [ ] [Custom GPT Creation Guide for Building Your Own AI Assistant](https://www.blackmoreops.com/custom-gpt-creation-guide-building-ai-assistants/)\n- Security Affairs\n - [ ] [Over 28,000 Citrix instances remain exposed to critical RCE flaw CVE-2025-7775](https://securityaffairs.com/181614/hacking/over-28000-citrix-instances-remain-exposed-to-critical-rce-flaw-cve-2025-7775.html)\n - [ ] [U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/181615/security/u-s-cisa-adds-citrix-netscaler-flaw-to-its-known-exploited-vulnerabilities-catalog-2.html)\n - [ ] [Healthcare Services Group discloses 2024 data breach that impacted 624,496 people](https://securityaffairs.com/181608/data-breach/healthcare-services-group-discloses-2024-data-breach-that-impacted-624496-people.html)\n - [ ] [ESET warns of PromptLock, the first AI-driven ransomware](https://securityaffairs.com/181595/malware/eset-warns-of-promptlock-the-first-ai-driven-ransomware.html)\n - [ ] [China linked Silk Typhoon targeted diplomats by hijacking web traffic](https://securityaffairs.com/181584/security/china-linked-silk-typhoon-targeted-diplomats-by-hijacking-web-traffic.html)\n- Deeplinks\n - [ ] [Podcast Episode: Protecting Privacy in Your Brain](https://www.eff.org/deeplinks/2025/08/podcast-episode-protecting-privacy-your-brain)\n- Graham Cluley\n - [ ] [Smashing Security podcast #432: Oops! I auto-filled my password into a cookie banner](https://grahamcluley.com/smashing-security-podcast-432/)\n - [ ] [Cephalus ransomware: What you need to know](https://www.fortra.com/blog/cephalus-ransomware-what-you-need-know)\n- Tor Project blog\n - [ ] [Corruption and Control: How Turkmenistan turned internet censorship into a business](https://blog.torproject.org/Corruption-Control-Turkmenistan-internet-censorship-business/)\n- The Hacker News\n - [ ] [Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks](https://thehackernews.com/2025/08/storm-0501-exploits-entra-id-to.html)\n - [ ] [Someone Created First AI-Powered Ransomware Using OpenAI's gpt-oss:20b Model](https://thehackernews.com/2025/08/someone-created-first-ai-powered.html)\n - [ ] [Anthropic Disrupts AI-Powered Cyberattacks Automating Theft and Extortion Across Critical Sectors](https://thehackernews.com/2025/08/anthropic-disrupts-ai-powered.html)\n - [ ] [ShadowSilk Hits 35 Organizations in Central Asia and APAC Using Telegram Bots](https://thehackernews.com/2025/08/shadowsilk-hits-36-government-targets.html)\n - [ ] [The 5 Golden Rules of Safe AI Adoption](https://thehackernews.com/2025/08/the-5-golden-rules-of-safe-ai-adoption.html)\n - [ ] [Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data](https://thehackernews.com/2025/08/salesloft-oauth-breach-via-drift-ai.html)\n - [ ] [Blind Eagle’s Five Clusters Target Colombia Using RATs, Phishing Lures, and Dynamic DNS Infra](https://thehackernews.com/2025/08/blind-eagles-five-clusters-target.html)\n- Security Weekly Podcast Network (Audio)\n - [ ] [vCISO Benefits as the CISO Becomes Strategic and the Board's Responsible for Security - Brian Haugli - BSW #410](http://sites.libsyn.com/18678/vciso-benefits-as-the-ciso-becomes-strategic-and-the-boards-responsible-for-security-brian-haugli-bsw-410)\n"}, "27b7011a1764772ae53b12276a0d1dbb1446fbcc": {"t": 1785772259.4831152, "n": 50996, "h": "3ac4083a8ff3cc46", "c": "# 每日安全资讯（2025-08-28）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-08-27 Review](http://www.sec-wiki.com/?2025-08-27)\n- paper - Last paper\n - [ ] [MCPTox：针对真实世界 MCP 服务器工具投毒攻击的基准测试](https://paper.seebug.org/3377/)\n- 安全客-有思想的安全新媒体\n - [ ] [IETF重磅推进AI内容标注标准 全球首个AI生成内容识别规范即将落地](https://www.anquanke.com/post/id/311590)\n - [ ] [Windows 10预览版更新：新增企业级备份功能并修复ESU问题](https://www.anquanke.com/post/id/311589)\n - [ ] [谷歌Chrome紧急发布ANGLE高危补丁，人工智能安全研究员Big Sleep发现零日漏洞（CVE-2025-9478）](https://www.anquanke.com/post/id/311513)\n - [ ] [全球性UpCrypter钓鱼攻击持续蔓延 Windows用户面临紧急安全威胁](https://www.anquanke.com/post/id/311523)\n - [ ] [全球首例AI驱动勒索软件“PromptLock”已在野利用](https://www.anquanke.com/post/id/311538)\n - [ ] [新型AI攻击将数据窃取指令隐藏于缩小图像中](https://www.anquanke.com/post/id/311537)\n - [ ] [蝉联入选！360多领域领跑2025网络安全创新方向报告](https://www.anquanke.com/post/id/311512)\n - [ ] [这届钓鱼邮件太“AI”装了](https://www.anquanke.com/post/id/311526)\n - [ ] [360护航天津医保双活容灾切换顺利完成](https://www.anquanke.com/post/id/311547)\n - [ ] [CISA紧急警告：Git代码执行漏洞正遭黑客利用](https://www.anquanke.com/post/id/311567)\n - [ ] [All in One模式+云地一体架构全面赋能，360终端安全智能体引领行业变革](https://www.anquanke.com/post/id/311557)\n - [ ] [Citrix NetScaler曝零日漏洞（CVE-2023-6548）黑客正利用RCE漏洞发动攻击](https://www.anquanke.com/post/id/311559)\n- Recent Commits to cve:main\n - [ ] [Update Wed Aug 27 11:21:03 UTC 2025](https://github.com/trickest/cve/commit/7f0358d2fdf427fdf81a8dc3c97237f865e35da1)\n- Tenable Blog\n - [ ] [Why Google’s Warning Highlights Critical Risk of AI Context-Injection Attacks](https://www.tenable.com/blog/why-google-warning-highlights-critical-risk-of-ai-context-injection-attacks)\n- myfreax\n - [ ] [Gemini 精准图像生成功能挑战 ChatGPT](https://www.myfreax.com/introducing-gemini-2-5-flash-image/)\n- 奇安信攻防社区\n - [ ] [某集团子域安全缺陷引发的全域沦陷](https://forum.butian.net/share/4502)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [假冒macOS欺骗用户安装新型Shamos信息窃取器](https://www.4hou.com/posts/7MZA)\n- Trustwave Blog\n - [ ] [Making Cyber Threat Intelligence Work for Your Organization: The Intelligence Paradox](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/making-cyber-threat-intelligence-work-for-your-organization-the-intelligence-paradox/)\n- obaby@mars\n - [ ] [“京喜”，什么他妈的叫惊喜！？](https://h4ck.org.cn/2025/08/21427)\n- 先知安全技术社区\n - [ ] [幻影|一款漏洞挖掘的浏览器扩展辅助工具|收集中的隐藏接口和敏感信息](https://xz.aliyun.com/news/18714)\n - [ ] [某在线拍卖系统代码审计](https://xz.aliyun.com/news/18713)\n - [ ] [万户OA代码审计与0day挖掘](https://xz.aliyun.com/news/18712)\n - [ ] [CVE-2025-6715 WordPress Latepoint 文件包含漏洞分析](https://xz.aliyun.com/news/18711)\n- Microsoft Security Blog\n - [ ] [Storm-0501’s evolving techniques lead to cloud-based ransomware](https://www.microsoft.com/en-us/security/blog/2025/08/27/storm-0501s-evolving-techniques-lead-to-cloud-based-ransomware/)\n - [ ] [Microsoft ranked number one in modern endpoint security market share third year in a row](https://www.microsoft.com/en-us/security/blog/2025/08/27/microsoft-ranked-number-one-in-modern-endpoint-security-market-share-third-year-in-a-row/)\n- ongoing by Tim Bray\n - [ ] [Maritime Vacation](https://www.tbray.org/ongoing/When/202x/2025/08/27/Maritime-Vacation)\n- Doonsec's feed\n - [ ] [【资料】美国人发布文章披露越南在南海填海造岛情况](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151796&idx=1&sn=9bd5e5d72a8ac18d9477d9fbce77e23c)\n - [ ] [【通知】第三届全国大学生开源情报数据采集与分析大赛开始报名啦！提供免费培训](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151796&idx=2&sn=5196841af0e502cf3b66ea0512d44db7)\n - [ ] [MetaCRM美特crm系统sendsms.jsp接口存在任意文件上传漏洞 附POC](https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488986&idx=1&sn=263f1b2004456001a8c7f189ba66bc79)\n - [ ] [一次DotNetWebShell免杀学习](https://mp.weixin.qq.com/s?__biz=MzkzNTY5NzA0Mg==&mid=2247484643&idx=1&sn=3108f1bf06975d8d3638f8f5dfc93caf)\n - [ ] [ping命令为什么它不用 TCP 或 UDP，而是 ICMP？](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247531585&idx=1&sn=5485043916a64b578f87958e26e73489)\n - [ ] [企业SRC简单漏洞挖掘](https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247488603&idx=1&sn=108ddc32df3e0264e04b344fd2fcb3b0)\n - [ ] [有些版本要停更，有些要下架，Windows软件该焕新啦！](https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492585&idx=1&sn=105521583c2ce1aa1558f9d23842307b)\n - [ ] [VS Code Copilot 提示词注入漏洞分析](https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484592&idx=1&sn=83d8bd964224df21f163a4f056a801d5)\n - [ ] [“没有安全能力” ，是对运营商做安全的最大误解](https://mp.weixin.qq.com/s?__biz=MjM5MDk4OTk0NA==&mid=2650126597&idx=1&sn=56ccb5cf6bae73de35019a4aa64d4cbe)\n - [ ] [人工智能 大模型 ：通用要求、评测指标与方法、服务能力成熟度评估](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290257&idx=1&sn=713df8638210df1654e7b46c8eaf1fc4)\n - [ ] [人工智能、算力算网 今天上传文件列表](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290257&idx=2&sn=e84b0a8b6300ac695d99692f21bb3000)\n - [ ] [授课材料准备与材料制作](https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247494069&idx=1&sn=34579aa76a6d75075391338fa196ba61)\n - [ ] [yayaya Miner挖矿木马变种分析报告](https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650212298&idx=1&sn=ccf7fde7aa01a78af9581af5b3077070)\n - [ ] [俄罗斯如何大力推动朝鲜的卫星发射计划](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562111&idx=1&sn=b2dcecde416a3810e17661d3256d93ba)\n - [ ] [中朝边境秘密导弹基地曝光｜战略意图与风险评估](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247510975&idx=1&sn=c2c10b845d892dd8828869c1e55f0629)\n - [ ] [办公网防钓鱼策略与安全意识培训指南](https://mp.weixin.qq.com/s?__biz=MzUzMDgwMjY1Mg==&mid=2247485824&idx=1&sn=71fe5d2336eb9a80aaf77d8fda78e116)\n - [ ] [第一个人工智能勒索软件PromptLock问世](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491912&idx=1&sn=810ed7024f5c10fd5eea60aa68ce9b1e)\n - [ ] [西交利物浦大学 | 针对大型语言模型的目标导向生成式提示注入攻击](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493597&idx=1&sn=45c8d52a4b9f8e73c4ab92f100ff3b14)\n - [ ] [如何学好网络安全，成为一名大黑客？](https://mp.weixin.qq.com/s?__biz=MzU5NzQ3NzIwMA==&mid=2247486968&idx=1&sn=6edbcbd58be11049593729495c056f1c)\n - [ ] [Cerbero 电子期刊：第4期](https://mp.weixin.qq.com/s?__biz=MzkzMzMyOTc5OQ==&mid=2247484332&idx=1&sn=c81d63d8ae4c4c3b0c647dcda7758170)\n - [ ] [漏洞侦查圣经](https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489631&idx=1&sn=ea636433fb8ddca37ac12d22ae46f592)\n - [ ] [筑牢安全堡垒・护航商用密码合规前行——2025淮北商用密码专题会议圆满召开](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637104&idx=1&sn=2c56ec1950da378ba25d6fd69e1185df)\n - [ ] [教育部最新公示，2025年7所高校拟新增密码本科专业！](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637104&idx=2&sn=008df149686d020c1a00eaf5549b38db)\n - [ ] [一文揭秘｜什么是零日漏洞？如何防范它带来的危害？](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637104&idx=3&sn=d6da1587ec0d12550820272d6843d4cd)\n - [ ] [美国《天才法》稳定币监管框架及影响研判](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637104&idx=4&sn=bbf15d0aa63ce4e785523a3dd5a86a04)\n - [ ] [Chrome浏览器高危零日漏洞PoC公开，已被用于野外攻击](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326763&idx=1&sn=796f7326ec14635b627337fa18948c42)\n - [ ] [倒计时3天！ 大杂会 暨 Z DemoDay 2nd 全天议程请查收！](https://mp.weixin.qq.com/s?__biz=MzkyMDU5NzQ2Mg==&mid=2247488900&idx=1&sn=95fa4c031d2b77564b676e8d1b5bb288)\n - [ ] [国家工业信息安全发展研究中心：网联汽车数据安全风险分析与治理思考](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247626950&idx=1&sn=fca9460b1a78e8574895db08b4609468)\n - [ ] [面向智能汽车的信息安全漏洞评分模型](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247626950&idx=2&sn=9deddd3b83f40621e00c6c8a30f13401)\n - [ ] [智能汽车网络安全与信息安全基础培训课程 2025](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247626950&idx=3&sn=30068ecd5f82cfd27fe2ff2067c28bd9)\n - [ ] [迈向全面实战：平行切面拉开低谷期安全产业“新质生产力”突围序幕](https://mp.weixin.qq.com/s?__biz=MzkzMDE5MDI5Mg==&mid=2247509499&idx=1&sn=db59465434c2de2b271575ce19d30fdc)\n - [ ] [安全毕业生，如何拿下好工作？](https://mp.weixin.qq.com/s?__biz=MzU5NzQ3NzIwMA==&mid=2247486963&idx=1&sn=c25641eee9b7b2ff68a0c21ca309c0a2)\n - [ ] [行业资讯：中孚信息发布公告，董事长和副总经理都被解除留置](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247493300&idx=1&sn=fd3a2c83b00d110b3dbae547525db4a9)\n - [ ] [Cointelegraph对话CertiK联合创始人顾荣辉：人性弱点成Web3安全最大挑战](https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247504527&idx=1&sn=0804c402f205a11c07265d8156641db2)\n - [ ] [免费WiFi有时可能是“致命”陷阱](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643010&idx=1&sn=b3ff2f38ac1e8e248d39ae235de0d3af)\n - [ ] [免费赠送丨网络安全意识：2025红蓝对抗网络安全意识培训课程27节](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643010&idx=2&sn=a5c7fb5d531504057234dd6c18da48c2)\n - [ ] [首席信息安全官(CISO)的新战场：管理员工行为风险](https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247485213&idx=1&sn=10dcee117e9e2e8ddd59b4b00ada0de2)\n - [ ] [文件上传之双重扩展名绕过人机验证](https://mp.weixin.qq.com/s?__biz=MzI1NDU2MzAzNQ==&mid=2247487821&idx=1&sn=5098080fd3cc076572c837fe42ba9865)\n - [ ] [国务院部署“人工智能+”，360 All In Agent战略正逢其时](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581760&idx=1&sn=d38ebefd678f4003fd6727bf7c1c6649)\n - [ ] [从3分钟到5秒！邮储银行大模型用户声音智能分析实践](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932601&idx=1&sn=21718cdd51241715ba079b20f3573504)\n - [ ] [AI快讯：中国平安将实现“AI in ALL”，AI浏览器被曝重大安全漏洞](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932601&idx=2&sn=9de4e584b0a7155b5f05210d304adfc4)\n - [ ] [马上消费金融AI拍照解题服务项目供应商征集](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932601&idx=3&sn=90ef5032980983b7c97808956bfe3bcb)\n - [ ] [【安全圈】谷歌将推行开发者实名验证：未来未验证应用将被禁止安装](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=1&sn=d1efd4b04b60550d119190338131fed1)\n - [ ] [【安全圈】澳电信巨头iiNet再陷数据泄露危机](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=2&sn=5b8e5b02424bc3889d33e2cfa8839dbd)\n - [ ] [【安全圈】全球八百多家家银行遭殃！77款恶意安卓应用以1900万次下载量实施诈骗](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=3&sn=4a5d6fa7c9489fd4242b0cf744b1b6a2)\n - [ ] [【安全圈】黑客通过OAuth令牌漏洞，入侵多家企业](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=4&sn=c0434c93832c33a5e2732eb4db9d6fb3)\n - [ ] [早期文件上传双重扩展名人机绕过](https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247491319&idx=1&sn=5a560011f57309a264097ac6ce695b92)\n - [ ] [【相关分享】记一次渗透偶遇抽象开发成功getshell](https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247489880&idx=1&sn=a7eb4e86f0fedd024db8193cb43b6988)\n - [ ] [【中国消费名品产业创新大赛】AI+消费新引擎启动！！快来Pick未来消费风向标！](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254112&idx=1&sn=c117d26b9289bf7d7b635c8481899ebc)\n - [ ] [【正式启动】2025年中国数据安全企业全景图征集启动](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254112&idx=2&sn=2b4317b00e0d0fddafcaf82feb799a58)\n - [ ] [【数字政府优秀案例联播】浙江省：浙食链——基本建成食品安全数字化追溯体系](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254112&idx=3&sn=6170c91c20dbd59ccf006b76b9f4f2ea)\n - [ ] [CISA 提醒注意已遭活跃利用的 Git 代码执行漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523897&idx=2&sn=a9f209d80ecb2cb20899f31b1b931255)\n - [ ] [全球首现AI勒索软件PromptLock：跨平台黑客新武器来袭](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247542910&idx=1&sn=e7804dc6f0912477a36b2caa9b48666d)\n - [ ] [考试中心丨您的城市可以进行ISC2考试吗](https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247493081&idx=1&sn=f16bc4db4af2ac3753bbd33d94d73091)\n - [ ] [全国总工会第二届职工数字化应用技术技能大赛福建省选拔赛（数据安全管理员赛项）圆满落幕](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247493746&idx=1&sn=b2dfc473ed03c3dd63e4a1c60ccbf2fe)\n - [ ] [赛事招标丨陕西公司2025年网络和信息安全技能竞赛技术服务项目](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247493746&idx=2&sn=783133871d51e4f09307d920acac7082)\n - [ ] [赛事招标丨中国电信新疆分公司2025年网络安全攻防培训服务项目](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247493746&idx=3&sn=96999496423d942a3c16edde89ca1bcf)\n - [ ] [第六届“蒙古马杯”网络安全竞赛开始报名啦！](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247493746&idx=4&sn=47833bcdbac83213502e504dc86ef0ba)\n - [ ] [【守护数字安全，锻造网安尖兵】六安市第三届网络安全技能大赛报名通道已开启！](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247493746&idx=5&sn=094a4422f3f6e356f067541e8f676f1f)\n - [ ] [DownUnderCTF · 2025 WriteUp](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247493746&idx=6&sn=c2b07fbab6e7928a1a70be42738d228e)\n - [ ] [第九届御网杯网络安全大赛线下半决赛Writeup](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247493746&idx=7&sn=2952ffed884eb0ba049e6b73c12531b8)\n - [ ] [3个月狂揽70万赏金，挖洞赛道惊现17岁“天才黑马”！](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326763&idx=2&sn=3cdcdd980635bf0c5f8219d7262afb8c)\n - [ ] [借AI工具绕过安全边界，供应链攻击瞄准开发者](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326763&idx=4&sn=58044a1c3547d4189a81fe635a5a113b)\n - [ ] [Amazon Q Developer for VS Code：易受不可见提示词注入影响](https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247485071&idx=1&sn=a1ab176bad236fb74b9881959cb15295)\n - [ ] [启明星辰2025半年报：亏损收窄但营收承压，AI安全赛道突围](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486093&idx=1&sn=7e0deffa6c0fe9c10c1c8644f800f395)\n - [ ] [2024网安裁员全景：巨头收缩与独角兽转身的生存逻辑](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486093&idx=2&sn=be3b91ba31b14c4f9f5da7c76e9301a0)\n - [ ] [【干货】笑傲“网安职场”的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486093&idx=3&sn=95edab1a537ce89622ecff423849eb27)\n - [ ] [【原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486093&idx=4&sn=bc21044cfcd7c0936f2bf7ae216ee1f7)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486093&idx=5&sn=e123cc5b5777a95a940b57b601d46c8c)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486093&idx=6&sn=de683a52b42095fe445df9600d0f7d7b)\n - [ ] [决赛倒计时！2025湾区杯网络安全大赛点亮未来科技安全](https://mp.weixin.qq.com/s?__biz=MzA4Mjk5NjU3MA==&mid=2455489930&idx=1&sn=e2fa5bc056d7fbe8645894070ab22b4c)\n - [ ] [SRC漏洞挖掘辅助工具-Phantom](https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247493832&idx=1&sn=cb10b94449d98dce6e9d416d4d082b20)\n - [ ] [国务院印发《关于深入实施“人工智能+”行动的意见》](https://mp.weixin.qq.com/s?__biz=Mzg4MDE0MzQzMw==&mid=2247488356&idx=1&sn=9670f5cf1d59f610e2e68cd54cabedc3)\n - [ ] [《关于深入实施“人工智能+”行动的意见》答记者问](https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448689981&idx=2&sn=894847614cc93fca19207f0c5bfb07cd)\n - [ ] [首个“AI勒索软件”出现：恶意行为代码由大模型动态生成](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514913&idx=1&sn=367779756b98b43f296381ad23aff8f2)\n - [ ] [美国特种作战司令部文件曝光美军拟利用AI技术开展信息战](https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247490607&idx=1&sn=bbdc11fbd8b4f8c70a31b60d8b313120)\n - [ ] [零成本学 CISA！职场硬通货，从 “被替代” 到 “抢着要”！](https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247524824&idx=1&sn=b07b3e7ff1a31352c3077a3171cb10e5)\n - [ ] [DPO认证限时特惠|面试企业合规岗刚需证书](https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247524824&idx=2&sn=4929fe93f698321bb7986a7d94d97f0f)\n - [ ] [信安世纪入选2025年度IDC中国金融IT中坚力量榜单，以硬核实力赋能金融数字化转型](https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650665275&idx=1&sn=d957c54953ef0f3f7699cdc633a64568)\n - [ ] [基于LLM+Kali Linux MCP下的自动化渗透实践](https://mp.weixin.qq.com/s?__biz=MzkzOTYzMzY3MQ==&mid=2247484064&idx=1&sn=32550b5fa68243ff51594013ffce3ce1)\n - [ ] [小红书新一代数据库代理 RedHub 的设计与实践](https://mp.weixin.qq.com/s?__biz=Mzg4OTc2MzczNg==&mid=2247493624&idx=1&sn=5b5341735fdc2c68992f723c776e6e56)\n - [ ] [必看报告！AI防御时代：如何用杀伤链模型守住自己资产](https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850668&idx=1&sn=73076daac1c7ab40ce509bb741ffa229)\n - [ ] [【国际视野】美国国家标准与技术研究院发布指南草案，帮助企业应对新兴网络安全风险](https://mp.weixin.qq.com/s?__biz=MzIyMjQwMTQ3Ng==&mid=2247491726&idx=1&sn=8ad705baa70438e830f5057fef1871c6)\n - [ ] [记某次攻防暴肝的一夜](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498105&idx=1&sn=80b2c9600a82f84ebcf08d62548346b0)\n - [ ] [绿盟科技亮相2025人民数据大会](https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650471009&idx=1&sn=e35eff41f8cde4890ba4b98f0f20253e)\n - [ ] [日产确认遭勒索软件入侵，4TB核心数据被盗](https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247503974&idx=2&sn=536e2262fec4d21dccb2e6807cd9dd96)\n - [ ] [上汽最详细的整车开发流程(CPMP)解读](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247558877&idx=2&sn=563aa9f262379d24b17c39b063355f25)\n - [ ] [重磅专题论坛 | AES汽车以太网及车载光通信技术论坛开启报名](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247558877&idx=3&sn=2f5ad978dafae88b92277be4488d33c9)\n - [ ] [西安交通大学副教授确认AutoSQT 2025分享：复杂软件生态协同演化分析技术，操作系统的视角与实践](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247558877&idx=4&sn=b4ef4dcaa0b6d0e782a27acee10b86c4)\n - [ ] [代码基础，情书就不基础](https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649795537&idx=1&sn=fd99f498a1b5ef21e2728af342feb968)\n - [ ] [谷歌“纳米香蕉”重磅发布！Gemini 2.5 Flash Image引领AI图像编辑新风潮](https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484958&idx=1&sn=ba1897f3af7cab7bc645fa64ac604d96)\n - [ ] [网络安全信息与动态周报2025年第34期（8月18日-8月24日）](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524553&idx=2&sn=20d91a9e9f0f3fc04a2128fb536964f8)\n - [ ] [黑客最常用的扫描工具-Nessus安装教程来了！网安小白必看！](https://mp.weixin.qq.com/s?__biz=MzkzMzkyNTQ0Ng==&mid=2247484576&idx=1&sn=16fbf7259a319d01427fa1128f960541)\n - [ ] [二进制漏洞挖掘过程](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556164&idx=1&sn=1f1ee93256374d943bbd8dc9d465a77a)\n - [ ] [【免费领】国内首部Docker容器最佳安全实践白皮书](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556164&idx=2&sn=42369a6f3e06b94e7b4436eb0b42ee52)\n - [ ] [社区交流群号，速度近，有业务需求的进，闲聊者勿扰](https://mp.weixin.qq.com/s?__biz=MzkyNzYzNTQ2Nw==&mid=2247485020&idx=1&sn=4f2b782337220d84cf8bb6575039a58d)\n - [ ] [A.S.E首月答卷：社区声音驱动进化，有奖悬赏！](https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207343&idx=1&sn=dc21614767d97a4101a539188d5a4b94)\n - [ ] [AISOC运营手记 | 安全ROI难量化？4大核心指标破解运营低效困局](https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247507924&idx=1&sn=d417fcb72f978b61ddc4c84aee6993fe)\n - [ ] [深度好文丨大区域（城市）低空安全管控应用发展与未来展望](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601155&idx=1&sn=fa6b9ff165c28365defa8bfcceda4dd1)\n - [ ] [侵犯华为芯片技术，估值超3亿！14人被判刑](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601155&idx=2&sn=f6cc3943cdd2e70d3c44160079b2371b)\n - [ ] [待遇优厚+免费发表+版权自有+高录用率 ｜2025第三届电子系统工程大会“赛博安全”分论坛征文通知](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601155&idx=3&sn=82fe08fc424405cf1927ec2c52204c50)\n - [ ] [国务院重磅发布：提升安全能力水平，推动AI应用合规](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601155&idx=4&sn=e356bf18e6bc01af2354b6512934b503)\n - [ ] [新潮信息出席2025淮北商用密码专题会议，共探密码应用合规新路径](https://mp.weixin.qq.com/s?__biz=MzkwNDcyODgwOQ==&mid=2247487613&idx=1&sn=8933d53e766cbc162abdd53e20dac910)\n - [ ] [一图读懂 | 关于深入实施“人工智能+”行动的意见](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649174276&idx=2&sn=c946d61a196d86606684976b3acbbd7e)\n - [ ] [《网络安全技术 鉴别与授权 基于属性的访问控制模型与管理规范》（征求意见稿）等4项国家标准公开征求意见](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649174276&idx=3&sn=b7438112f74765dacd3801aa41f3b96a)\n - [ ] [国务院关于深入实施“人工智能+”行动的意见](https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247504622&idx=1&sn=cb868eaf86c34ae79fcc98419db5dec9)\n - [ ] [特朗普拟解雇美联储理事，施压其降低利率](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651621683&idx=2&sn=e433b8ffa4cb0398e6ffd6ceb1ecc1e0)\n - [ ] [全文 | 中共中央办公厅 国务院办公厅关于推进绿色低碳转型加强全国碳市场建设的意见](https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247593838&idx=1&sn=f85fdfcfb2a0050df5cb072094a71a1f)\n - [ ] [一篇讲清楚渗透测试是什么？种类以及细节，渗透小白必看！](https://mp.weixin.qq.com/s?__biz=MzkzODU5MTkyNQ==&mid=2247485871&idx=1&sn=cae6db5faf8bdffd6c837326788eead5)\n - [ ] [静默之控：主动与被动双模后门MystRodX的隐匿渗透](https://mp.weixin.qq.com/s?__biz=MzkxMDYzODQxNA==&mid=2247484093&idx=1&sn=830282cdd26681db43d723364c52f1c5)\n - [ ] [＂人工智能+＂新政将如何影响网络安全格局？](https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247488393&idx=1&sn=ca34e8038f0e83130e8870cd15710981)\n - [ ] [长亭解决方案｜场景化Web安全建设解决方案](https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247488393&idx=2&sn=a6bb69f8a33187d8c7d34dc8429cc509)\n - [ ] [渗透测试中常用的在线工具和网站（强烈建议收藏）](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574645&idx=1&sn=c0aa6792e8bd9b99debe0f26b7a511b9)\n - [ ] [超全网络安全面试题汇总（2025版）](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574645&idx=2&sn=48635f04e59d13be21b27095b403db98)\n - [ ] [第24期《平航电子取证技术简报》实物刊来了！](https://mp.weixin.qq.com/s?__biz=MzI0OTEyMTk5OQ==&mid=2247494998&idx=1&sn=d09a7502a9e53d0a4df861d648fea1ff)\n - [ ] [欢迎注册参会｜第22届中国信息和通信安全学术会议即将召开](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247500794&idx=1&sn=b6f04eaea0d9acc85ca3a72634817933)\n - [ ] [招聘启动！别让才华等太久！](https://mp.weixin.qq.com/s?__biz=MzIzODAwMTYxNQ==&mid=2652145574&idx=1&sn=33691f73a301c76fc4137dcabc487c01)\n - [ ] [【招聘】平安银河实验室招人啦，可内推～](https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247487157&idx=1&sn=4ca19e1e3929a719887ca3862993eb26)\n - [ ] [选核心交换机？先搞清楚转发速率和背板带宽](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649470412&idx=1&sn=04b6386c15174faa8fcd7fab1189b1fb)\n - [ ] [使用 Sentinel-1 雷达数据监测新的经济指标——德国汽车工业生产水平的潜力](https://mp.weixin.qq.com/s?__biz=MzI2MDIyOTMyOA==&mid=2247488144&idx=1&sn=b450afe6dfb2ec4c9baec6a3b8d63a9d)\n - [ ] [【内推】平安银河实验室 蓝紫军方向](https://mp.weixin.qq.com/s?__biz=MzkwMDQ4MDU2MA==&mid=2247484437&idx=1&sn=3e586af73647c3341e2a5624f9511221)\n - [ ] [2025年 ISG 观安杯网络安全比赛部分题解](https://mp.weixin.qq.com/s?__biz=MzI3NDEzMDgzNw==&mid=2247485195&idx=1&sn=0fa30176d4af6286f7e0124171e1bb9c)\n - [ ] [仅80元，全开源智能 AI 手表，乐鑫ESP32开发板，内置计步器、指南针、气压计](https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454939796&idx=1&sn=fa69d4228c6e1c075f46da74437dfcae)\n - [ ] [智能驱动，守护税务数据安全](https://mp.weixin.qq.com/s?__biz=MzI0NjAyMjU4MA==&mid=2649597221&idx=1&sn=8b38a2bf44bc90f8dd64ea8d3dc132e1)\n - [ ] [常用的内网渗透命令！](https://mp.weixin.qq.com/s?__biz=MzkyODk0MDY5OA==&mid=2247485884&idx=1&sn=118574e7dce4bac9bdbc30b36d6271c4)\n - [ ] [云上容器内脚本监控的简单实现](https://mp.weixin.qq.com/s?__biz=Mzg4MTA2MTc4MA==&mid=2247494292&idx=1&sn=79ee35326b5a6c2decd00d8d4bf685c0)\n - [ ] [微软公布量子安全计划路线图：2033 年全面量子安全，比政府要求提前两年](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540106&idx=1&sn=da2a7c993db33a51c1b6e84d52faffd9)\n - [ ] [半年度报告：山石网科2025年半年度营收4.1682亿，同比（上年同期3.8079亿）增加9.46%，亏损0.76亿，亏损收窄](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247493294&idx=1&sn=1baa5a31aec203ca49c8fc3962e72053)\n - [ ] [XCon x HG 国际黑马会议圆满成功 | 安全锚定 智守未来](https://mp.weixin.qq.com/s?__biz=MzIxNjk0MzQ4NQ==&mid=2247491357&idx=1&sn=80cf72d2635d9faa5a32dda9bd87b546)\n - [ ] [GB T 19771-2025 网络安全技术 公钥基础设施 PKI组件最小互操作规范 将于2026年2月1日实施](https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247504622&idx=2&sn=2f3c7d799f10ebeacf09bf8b5d535f1a)\n - [ ] [Cobalt Strike 4.9.1 部署手册优惠](https://mp.weixin.qq.com/s?__biz=MzkzMTk0NTQ5Nw==&mid=2247483769&idx=1&sn=8e96fc82a01fd178f95ccb02d7679594)\n - [ ] [补天众测Q2榜单发布|今年已过半，年初列的收入目标完成了多少？快来加入补天众测帮你完成你的小目标吧！](https://mp.weixin.qq.com/s?__biz=MzU4MzgwODc3Ng==&mid=2247499315&idx=1&sn=5ceee7c1654311fbee2ad4fa8eecd30f)\n - [ ] [黑客武器库 | BloodHound域渗透神器](https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247485012&idx=1&sn=7602981746ffe9476e525f861b346c10)\n - [ ] [【卫星图像】朝鲜新丰洞导弹作战基地](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247510975&idx=2&sn=a56b2f51e63e23705a680ebf94f4a1e7)\n - [ ] [什么？下载速度几kb/s很难受？？还不会用Turbo Download Manager 提升浏览器下载速度？](https://mp.weixin.qq.com/s?__biz=Mzk3NTEyMzQzOA==&mid=2247487136&idx=1&sn=f05f227458e3f41cea3493e1e7556e31)\n - [ ] [港美股第1弹，彻底打破你的认知差](https://mp.weixin.qq.com/s?__biz=MzkwOTU4NzE1Mw==&mid=2247483767&idx=1&sn=1f856295c16795508b31c303aab610a2)\n - [ ] [【每日突破100+】Claude Pro使用次数无限延长秘籍（附5步骤详解）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510750&idx=1&sn=9b0ef3e00b6dce2455be857f957dbb1e)\n - [ ] [【七天实操】Claude 4国内免翻墙账号获取秘籍！（内附独家渠道）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510750&idx=2&sn=3e05f42b14d2753bf743ee15a7df1b2c)\n - [ ] [【实操指南】10分钟搭建Claude账号池！高效管理多账号避开限制（附详细步骤）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510750&idx=3&sn=8f0c3b272e2be0ccc084d3530f3a6b41)\n - [ ] [10分钟搭建个人专属Claude 3.7镜像！无障碍高效使用指南（附独家稳定方案）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510750&idx=4&sn=f52374f2c405c429210c9c953095c532)\n - [ ] [10分钟搞定Claude 4封号危机！三步应对策略完全指南（内附专属解决方案）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510750&idx=5&sn=49ddcf7d94f1bb6b7565fb85cea6a745)\n - [ ] [【业界动态】国务院印发《关于深入实施“人工智能+”行动的意见》](https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664996121&idx=1&sn=3d1c5116bedc5d4e073592c28e90f38e)\n - [ ] [【业界动态】全国网安标委公示人工智能安全标准应用实践案例入选建议名单](https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664996121&idx=2&sn=7738cae5ec8c8c6db5dff05c2ca8a83e)\n - [ ] [【业界动态】2025第一届全国大学生人工智能安全竞赛总决赛圆满收官](https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664996121&idx=3&sn=a877eff3b2337b64c30156298915d9dc)\n - [ ] [网络安全进步最快的方式！没有之一！](https://mp.weixin.qq.com/s?__biz=Mzk0MzcyNjMyNg==&mid=2247485369&idx=1&sn=09e1099cd8b291010a5d5efa1045facf)\n - [ ] [Osaurus：让你的Mac芯片性能起飞的本地AI神器，比Ollama更快更强！](https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485829&idx=1&sn=784c409d95bfd25d01a74adb3aec2c78)\n - [ ] [信息安全漏洞周报（2025年第34期）](https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463386&idx=1&sn=ae16bd4b49827c60204915736e81d8fa)\n - [ ] [攻防演练中红队基础设施的搭建与隐蔽措施](https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247488189&idx=1&sn=68eb4d81ed5b8dbffb4ccba1b2f1d7db)\n - [ ] [TingYu【高性能的 Web 指纹识别与资产扫描工具】](https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486842&idx=1&sn=602dcdd0330e725d0e319771651315b0)\n - [ ] [内卷破局：ES:Tools武器库用Rust重构安全生态](https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247488255&idx=1&sn=5a1d92553c594cabcded7c89f5db4c9a)\n - [ ] [《国务院关于深入实施“人工智能+”行动的意见》解读：以安全保发展，用安全促发展](https://mp.weixin.qq.com/s?__biz=MzA3NDUzMjc5Ng==&mid=2650203879&idx=1&sn=8ee516a1d4ba340f69b502d7c511a88a)\n - [ ] [人工智能与软件漏洞生命周期](https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484461&idx=1&sn=bdc29b3968cb0827199ede78b31f6f94)\n - [ ] [人工智能在网络安全中的应用：主要优势、防御策略和未来趋势](https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484461&idx=2&sn=a0ec8c0f30b04cc0462345a779579072)\n - [ ] [安势信息亮相openkylin开发者大会，以“白银捐赠人”身份，共同推动开源安全与合规生态健康持续发展](https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491892&idx=1&sn=d257a3cfd9db7fb5ebe8f8dad3e509e8)\n - [ ] [很有意思](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247491225&idx=1&sn=f256c9f212c5400e076edf23916e109b)\n - [ ] [彻底搞懂零拷贝：提升系统性能的关键技术](https://mp.weixin.qq.com/s?__biz=MzA3MTAwODc0NQ==&mid=2649891451&idx=1&sn=c2383e46e68fe492557409bb60f7ce23)\n - [ ] [恶意 Go 模块伪装成 SSH 暴力破解器，通过 Telegram 窃取凭证](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247532467&idx=1&sn=7a47f6b8f342f19f666704e5b7f22af9)\n - [ ] [关于SSH-Snake 是一个自我传播、自我复制、无文件的脚本，可自动执行 SSH 私钥和主机发现的后期利用任务](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247532467&idx=2&sn=d6cd7858d0dc4e4200834ccbb0e7d132)\n - [ ] [假冒macOS欺骗用户安装新型Shamos信息窃取器](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584383&idx=1&sn=7bc202ded4e0af48aa6d1f1a14859af5)\n - [ ] [售票开启｜GEEKCON 2025 上海站早鸟票限时抢购中](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584383&idx=2&sn=43f6126b0f44159c87173e59b8074621)\n - [ ] [生态协同 技术创新｜山石网科2025年百城巡展·郑州站圆满落幕](https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661302423&idx=1&sn=2ea2cc5a2540cf8155e055ac267269c2)\n - [ ] [首次发现实验型 AI 驱动的勒索软件](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247502232&idx=1&sn=e2a94a47e21f942e7b54ecfdf77407b5)\n - [ ] [篇 41： DOGE上传社会保障数据库到亚马逊云](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247502232&idx=2&sn=d22327400996d2a2264d969f360b5fab)\n - [ ] [X 的“精确定位”画像：从可用性到“可跟踪”](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247502232&idx=3&sn=3ff8fc9e86c6036dbf556c5858e69ac4)\n - [ ] [俄罗斯通过Max应用收集用户信息](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247502232&idx=4&sn=b99beddfe6cce6fc8934d09501ffd254)\n - [ ] [破解人才困境的智慧罗盘！新时期的人才“能力地图”](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138491&idx=1&sn=05adfb1debc66039794c06b27aff6dbe)\n - [ ] [美国内华达州政府办公室因网络安全事件紧急关闭，多项政务服务中断；DeepSeek V3.1曝离奇Bug | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138491&idx=2&sn=09075496f0ac8ed27fbe6110fd013892)\n - [ ] [助力科技兴警|成都链安受广西网安总队邀请在“新型网络犯罪侦查培训班”中开展授课](https://mp.weixin.qq.com/s?__biz=MzU2NzUxMTM0Nw==&mid=2247513969&idx=1&sn=65d09363c06b8ff722398fc340baa12d)\n - [ ] [第二届“长城杯”信息安全铁人三项赛（作品赛）总决赛在赣州成功举办](https://mp.weixin.qq.com/s?__biz=MzI1NzQ0NTMxMQ==&mid=2247490746&idx=1&sn=f560e434ce97eb1e63a29fcf4eaefa9b)\n - [ ] [每天走够这个步数，益处最大！](https://mp.weixin.qq.com/s?__biz=Mzg2MjgwMzIxMA==&mid=2247485243&idx=1&sn=287cbbe3a3ff6320f70f37725baa9f42)\n - [ ] [ssrf漏洞结合redis渗透linux主机](https://mp.weixin.qq.com/s?__biz=MzAwMjc0NTEzMw==&mid=2653589096&idx=1&sn=6c9c4ce08ec837ca9499d02f790d29d6)\n - [ ] [“人工智能+”行动意见发布 亚信安全AI XDR开启“人工智能+安全”新阶段](https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650624820&idx=1&sn=f4e91809dca6a4924d99276bdc9d5409)\n - [ ] [Y老师的密码学 · 第一篇](https://mp.weixin.qq.com/s?__biz=MzIyMjkzMzY4Ng==&mid=2247510972&idx=1&sn=cafe5ac20ed3a1ff655d1857370c6f4d)\n - [ ] [网络安全实施框架指南](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=1&sn=0b2a11320ef41db0533421c02154ff61)\n - [ ] [钢铁行业工业互联网云原生技术实施指南](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=2&sn=0aa8ea3ea7f59602d5cb1588becc5988)\n - [ ] [数字低空安全技术白皮书（2025）](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=3&sn=f94f9360ad4196e9f63d2f5da3453908)\n - [ ] [2025年版无人机安全白皮书](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=4&sn=d5053b39c6117f32a3c68fb06dcca044)\n - [ ] [低空智联网环境下的安全管控技术与应用研究（2025版）](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=5&sn=2524b626dd130b6b27c64505f0b1bcf2)\n - [ ] [低空智能网联网络与数据安全体系白皮书（2025）](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=6&sn=4b1d53f26178c0c8f3cf8669212293c8)\n - [ ] [泛在安全低空数智网技术体系白皮书](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=7&sn=57dfcfceb096f258b45332607c9f43ac)\n - [ ] [低空经济发展白皮书（3.0）安全体系](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290234&idx=8&sn=7040abb44b64ef8ef398b258c50839c0)\n - [ ] [谷歌应用商店爆出大量恶意软件，被下载1900万次](https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247503974&idx=1&sn=4e7ebd7be014e435e066f1f772ae4236)\n - [ ] [【严重】Dataease DB2 Aspectweaver 反序列化任意文件写入漏洞](https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247486028&idx=1&sn=5de99b5c36af6f971c1c756922f4c65f)\n- SpiderLabs Blog\n - [ ] [Malicious Screen Connect Campaign Abuses AI-Themed Lures for Xworm Delivery](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/malicious-screen-connect-campaign-abuses-ai-themed-lures-for-xworm-delivery/)\n- GuidePoint Security\n - [ ] [Automating CloudFront C2 with AI – Reduce Errors & Save Time](https://www.guidepointsecurity.com/blog/automating-cloudfront-c2-with-ai/)\n- Sandfly Security Blog RSS Feed\n - [ ] [Sandfly Security Named Finalist in CyberShark Pitch Competition](https://sandflysecurity.com/blog/sandfly-security-named-finalist-in-cybershark-pitch-competition)\n- Securelist\n - [ ] [Exploits and vulnerabilities in Q2 2025](https://securelist.com/vulnerabilities-and-exploits-in-q2-2025/117333/)\n- Horizon3.ai\n - [ ] [From Patch Tuesday to Pentest Wednesday™: Proof That Redefined Security for a Manufacturer](https://horizon3.ai/intelligence/blogs/from-patch-tuesday-to-pentest-wednesday-proof-that-redefined-security-for-a-manufacturer/)\n - [ ] [CVE-2025-7776](https://horizon3.ai/attack-research/vulnerabilities/cve-2025-7776/)\n- The Trail of Bits Blog\n - [ ] [Implement EIP-7730 today](https://blog.trailofbits.com/2025/08/27/implement-eip-7730-today/)\n- Malwarebytes\n - [ ] [Developer verification: a promised lift for Android security](https://www.malwarebytes.com/blog/news/2025/08/developer-verification-a-promised-lift-for-android-security)\n - [ ] [More vulnerable stalkerware victims’ data exposed in new TheTruthSpy flaw](https://www.malwarebytes.com/blog/news/2025/08/more-vulnerable-stalkerware-victims-data-exposed-in-new-thetruthspy-flaw)\n - [ ] [77 malicious apps removed from Google Play Store](https://www.malwarebytes.com/blog/news/2025/08/77-malicious-apps-removed-from-google-play-store)\n- PortSwigger Blog\n - [ ] [\"The entire internet is broken\": ethical hacking expert John Hammond meets James Kettle](https://portswigger.net/blog/the-entire-internet-is-broken-ethical-hacking-expert-john-hammond-meets-james-kettle)\n- Microsoft Security Response Center\n - [ ] [BlueHat Asia 2025: Closing soon: Submit your papers by September 5, 2025](https://msrc.microsoft.com/blog/2025/08/bluehat-asia-2025-closing-soon-submit-your-papers-by-september-5-2025/)\n- bishopfox.com\n - [ ] [The Top Reasons Security Leaders Choose Red Teaming](https://bishopfox.com/blog/top-reasons-security-leaders-choose-red-teaming)\n- Dhole Moments\n - [ ] [It’s a Cold Day in Developer Hell, So I Must Roll My Own Crypto](https://soatok.blog/2025/08/27/its-a-cold-day-in-developer-hell-so-i-must-roll-my-own-crypto/)\n- 奇客Solidot–传递最新科技情报\n - [ ] [Google 在翻译应用中加入 AI 驱动的语言学习功能](https://www.solidot.org/story?sid=82151)\n - [ ] [父母指控 OpenAI 的 ChatGPT 杀死了他们的孩子](https://www.solidot.org/story?sid=82150)\n - [ ] [苹果讨论过收购 Mistral AI 和 Perplexity](https://www.solidot.org/story?sid=82149)\n - [ ] [Anthropic 与图书作者就侵犯版权达成和解](https://www.solidot.org/story?sid=82148)\n - [ ] [无印良品在华商标诉讼败诉](https://www.solidot.org/story?sid=82147)\n- 腾讯安全应急响应中心\n - [ ] [A.S.E首月答卷：社区声音驱动进化，有奖悬赏！](https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207343&idx=1&sn=dc21614767d97a4101a539188d5a4b94)\n- 奇安信 CERT\n - [ ] [【在野利用】Citrix NetScaler 内存溢出漏洞(CVE-2025-7775)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503847&idx=1&sn=3adb444bbcb1ac6ce14501ee51e12668)\n- 腾讯玄武实验室\n - [ ] [每日安全动态推送(25/8/27)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960206&idx=1&sn=5b443058d24fd1a6f3344bf716363b46)\n- 安全内参\n - [ ] [首个“AI勒索软件”出现：恶意行为代码由大模型动态生成](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514913&idx=1&sn=367779756b98b43f296381ad23aff8f2)\n - [ ] [美国特种作战司令部文件曝光美军拟利用AI技术开展信息战](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514913&idx=2&sn=d67e8dd0a5a3c5d9ffc7821ad56cb24a)\n- 威努特安全网络\n - [ ] [企业智能体应用：破局“烟囱困境”的思考与启示](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651135229&idx=1&sn=6d6e4f3114f2ef8e02eca662a04f6a4e)\n- 知道创宇404实验室\n - [ ] [404星链计划 | 项目版本更新](https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650991017&idx=1&sn=e93ae14d534b5042960f883e33c6643b)\n- 奇安信威胁情报中心\n - [ ] [深度揭露，银狐黑产借育儿补贴之名的精心骗局](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247515766&idx=1&sn=30a7d04ff2b61bfda9ac6d7c6c1070a5)\n- 代码卫士\n - [ ] [Citrix 紧急修复已遭利用的 NetScaler RCE 0day漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523897&idx=1&sn=e11d4a106337143972fe49dc8aee936b)\n - [ ] [CISA 提醒注意已遭活跃利用的 Git 代码执行漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523897&idx=2&sn=a9f209d80ecb2cb20899f31b1b931255)\n- 回忆飘如雪\n - [ ] [从零开始学PWN学03：jarvisoj_level2](https://mp.weixin.qq.com/s?__biz=Mzg3NjA4MTQ1NQ==&mid=2247484377&idx=1&sn=985d43f8742fd8c3260acf32afc49ceb)\n- 看雪学苑\n - [ ] [2025 KCTF | 第六题《秘辛揭露》设计思路及解析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599037&idx=1&sn=abc68109222dd66c812a851a5dca25f2)\n - [ ] [Nissan 旗下设计工作室服务器遭入侵，4TB 数据被窃](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599037&idx=2&sn=262c8846fc7337ad1bd664d688112e71)\n - [ ] [3个月直通大厂高新岗位！全程实战案例解析，掌握高危漏洞攻防技巧](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599037&idx=3&sn=92ae50e75a40d302a6d812176bb7e7d9)\n- 微步在线研究响应中心\n - [ ] [漏洞通告 | CrushFTP 身份认证绕过漏洞被黑客组织积极利用](https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507906&idx=1&sn=72fd63f59c6d92e8c1effe15196079d7)\n- 安全圈\n - [ ] [【安全圈】谷歌将推行开发者实名验证：未来未验证应用将被禁止安装](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=1&sn=d1efd4b04b60550d119190338131fed1)\n - [ ] [【安全圈】澳电信巨头iiNet再陷数据泄露危机](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=2&sn=5b8e5b02424bc3889d33e2cfa8839dbd)\n - [ ] [【安全圈】全球八百多家家银行遭殃！77款恶意安卓应用以1900万次下载量实施诈骗](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=3&sn=4a5d6fa7c9489fd4242b0cf744b1b6a2)\n - [ ] [【安全圈】黑客通过OAuth令牌漏洞，入侵多家企业](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=4&sn=c0434c93832c33a5e2732eb4db9d6fb3)\n- 安全牛\n - [ ] [破解人才困境的智慧罗盘！新时期的人才“能力地图”](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138491&idx=1&sn=05adfb1debc66039794c06b27aff6dbe)\n - [ ] [美国内华达州政府办公室因网络安全事件紧急关闭，多项政务服务中断；DeepSeek V3.1曝离奇Bug | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138491&idx=2&sn=09075496f0ac8ed27fbe6110fd013892)\n- 数世咨询\n - [ ] [微软公布量子安全计划路线图：2033 年全面量子安全，比政府要求提前两年](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540106&idx=1&sn=da2a7c993db33a51c1b6e84d52faffd9)\n- 青藤云安全\n - [ ] [必看报告！AI防御时代：如何用杀伤链模型守住自己资产](https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850668&idx=1&sn=73076daac1c7ab40ce509bb741ffa229)\n- 信安之路\n - [ ] [揭秘参加 SRC 培训后的学员收入有多少？](https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500073&idx=1&sn=47f421ada610904d49ec7d6938c423ef)\n- 微步在线\n - [ ] [CSOP2025看点 | 中国信科集团袁俊：破局单点防御](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650184510&idx=1&sn=dfc564dc0d77b0edaa1380bd92275096)\n- dotNet安全矩阵\n - [ ] [.NET 会话劫持，实现在不同用户会话中执行命令](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500396&idx=1&sn=b5bf5ca7baa8bf65db3f2b210a17414c)\n - [ ] [.NET 内网攻防实战电子报刊](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500396&idx=2&sn=99a73dce010e7e95bd741fbea140eddd)\n - [ ] [.NET MVC 漏洞挖掘，通过匿名访问实现权限绕过](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500396&idx=3&sn=6aa7fa0dfd430326fedd9b3f6d4c19f4)\n- 极客公园\n - [ ] [21.98 万起！小鹏 P7 要让 Model 3 和小米 SU7 睡不着觉](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653085626&idx=1&sn=7f6edf53982003759559eb8fb470e34e)\n - [ ] [AI 上新 | 谷歌最新「香蕉」AI 图像模型，让网友疯玩「Vibe Photoshoping」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653085608&idx=1&sn=7c04c31940c2f2557508d0bf9d853211)\n - [ ] [苹果9月10日发新品，曝超燃海报；淘宝骑士新装登《福布斯》封面；泰勒·斯威夫特官宣订婚｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653085590&idx=1&sn=11d06ae036e97c6ad5d8fe96802c4db1)\n- 国家互联网应急中心CNCERT\n - [ ] [网络安全信息与动态周报2025年第34期（8月18日-8月24日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500312&idx=1&sn=48377c0787ab0fde54b158c0c70b2a0e)\n- ChaMd5安全团队\n - [ ] [Korban Android Ransomware分析](https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247513372&idx=1&sn=8a8469c7ccd101996958288c317340bd)\n- 信息安全国家工程研究中心\n - [ ] [欢迎注册参会｜第22届中国信息和通信安全学术会议即将召开](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247500794&idx=1&sn=b6f04eaea0d9acc85ca3a72634817933)\n- 奇安盘古\n - [ ] [喜讯！奇安盘古荣获上海市科技进步一等奖](https://mp.weixin.qq.com/s?__biz=MzI2MDA0MTYyMQ==&mid=2654404469&idx=1&sn=fa36778dccf7c50e0e1a9be92ca5e268)\n- 迪哥讲事\n - [ ] [记某次攻防暴肝的一夜](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498105&idx=1&sn=80b2c9600a82f84ebcf08d62548346b0)\n- 360数字安全\n - [ ] [国务院部署“人工智能+”，360 All In Agent战略正逢其时](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581760&idx=1&sn=d38ebefd678f4003fd6727bf7c1c6649)\n- Black Hills Information Security, Inc.\n - [ ] [Commonly Abused Administrative Utilities: A Hidden Risk to Enterprise Security](https://www.blackhillsinfosec.com/commonly-abused-administrative-utilities/)\n- Securityinfo.it\n - [ ] [Android, più sicurezza con la verifica dell’identità sviluppatori](https://www.securityinfo.it/2025/08/27/android-piu-sicurezza-con-la-verifica-dellidentita-sviluppatori/?utm_source=rss&utm_medium=rss&utm_campaign=android-piu-sicurezza-con-la-verifica-dellidentita-sviluppatori)\n- ICT Security Magazine\n - [ ] [Cloud Security Landscape: una guida per il 2025-2026](https://www.ictsecuritymagazine.com/articoli/cloud-security/)\n - [ ] [Attacchi mirati ai sistemi di prenotazione online dei ristoranti stellati: il lusso a tavola sotto attacco digitale](https://www.ictsecuritymagazine.com/notizie/attacchi-ristoranti-stellati/)\n - [ ] [AI degenerativa: il degrado dei modelli di intelligenza artificiale e rischi per la cybersecurity](https://www.ictsecuritymagazine.com/notizie/ai-degenerativa/)\n - [ ] [Quantum Readiness: la preparazione strategica alla crittografia post-quantistica nell’era dell’informatica quantistica](https://www.ictsecuritymagazine.com/articoli/quantum-readiness/)\n- 深信服千里目安全技术中心\n - [ ] [【漏洞通告】NetScaler ADC和NetScaler Gateway内存溢出漏洞(CVE-2025-7775)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524553&idx=1&sn=e3d9d6b4cce8ffb39461980f2feab9a7)\n - [ ] [网络安全信息与动态周报2025年第34期（8月18日-8月24日）](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524553&idx=2&sn=20d91a9e9f0f3fc04a2128fb536964f8)\n- Over Security - Cybersecurity news aggregator\n - [ ] [100 video](https://roccosicilia.com/2025/08/28/100-video/)\n - [ ] [Storm-0501 hackers shift to ransomware attacks in the cloud](https://www.bleepingcomputer.com/news/security/storm-0501-hackers-shift-to-ransomware-attacks-in-the-cloud/)\n - [ ] [Experimental PromptLock ransomware uses AI to encrypt, steal data](https://www.bleepingcomputer.com/news/security/experimental-promptlock-ransomware-uses-ai-to-encrypt-steal-data/)\n - [ ] [FreePBX servers hacked via zero-day, emergency fix released](https://www.bleepingcomputer.com/news/security/freepbx-servers-hacked-via-zero-day-emergency-fix-released/)\n - [ ] [US sanctions Russian national and Chinese company over North Korean IT worker schemes](https://therecord.media/us-sanctions-company-national-north)\n - [ ] [IT system supplier cyberattack impacts 200 municipalities in Sweden](https://www.bleepingcomputer.com/news/security/it-system-supplier-cyberattack-impacts-200-municipalities-in-sweden/)\n - [ ] [Libbiosig, Tenda, SAIL, PDF XChange, Foxit vulnerabilities](https://blog.talosintelligence.com/libbiosig-tenda-sail-pdf-xchange-foxit-vulnerabilities/)\n - [ ] [Google to verify all Android devs to protect users from malware](https://www.bleepingcomputer.com/news/security/google-to-verify-all-android-devs-to-protect-users-from-malware/)\n - [ ] [Global Salt Typhoon hacking campaigns linked to Chinese tech firms](https://www.bleepingcomputer.com/news/security/global-salt-typhoon-hacking-campaigns-linked-to-chinese-tech-firms/)\n - [ ] [License-plate reader company pauses work with federal agencies after backlash](https://therecord.media/flock-license-plate-reader-pauses-federal-work)\n - [ ] [Over 28,000 Citrix devices vulnerable to new exploited RCE flaw](https://www.bleepingcomputer.com/news/security/over-28-200-citrix-instances-vulnerable-to-actively-exploited-rce-bug/)\n - [ ] [Hackers use fake NDAs to deliver malware to US manufacturers](https://therecord.media/hackers-fake-ndas-malware)\n - [ ] [Allied spy agencies blame 3 Chinese tech companies for Salt Typhoon attacks](https://therecord.media/allied-spy-agencies-blame-chinese-companies-salt-typhoon)\n - [ ] [Spanish police arrest student suspected of hacking school system to change grades](https://therecord.media/spanish-police-hacker-arrest-grades)\n - [ ] [Why zero trust is never 'done' and is an ever-evolving process](https://www.bleepingcomputer.com/news/security/why-zero-trust-is-never-done-and-is-an-ever-evolving-process/)\n - [ ] [MDR su misura](https://www.certego.net/blog/mdr-su-misura-quando-le-tecnologie-proprietarie-fanno-la-differenza/)\n - [ ] [Cybersecurity Workforce Trends in 2025 – Skills Gap, Diversity and SOC Readiness](https://www.darknet.org.uk/2025/08/cybersecurity-workforce-trends-in-2025-skills-gap-diversity-and-soc-readiness/)\n - [ ] [AI generativa a supporto del SOC: come cambia la sicurezza dell’e-mail](https://www.cybersecurity360.it/soluzioni-aziendali/ai-generativa-a-supporto-del-soc-come-cambia-la-sicurezza-dellemail/)\n - [ ] [2,5 miliardi di account Gmail violati, nessun allarme: ecco cosa è successo davvero](https://www.cybersecurity360.it/news/25-miliardi-di-account-gmail-violati-nessun-allarme-ecco-cosa-e-successo-davvero/)\n - [ ] [Healthcare Services Group data breach impacts 624,000 people](https://www.bleepingcomputer.com/news/security/healthcare-services-group-data-breach-impacts-624-000-people/)\n - [ ] [Incidenti NIS, ancora in salita la strada verso la cyber resilience: i dati ENISA](https://www.cybersecurity360.it/nuove-minacce/incidenti-nis-ancora-in-salita-la-strada-verso-la-cyber-resilience-i-dati-enisa/)\n - [ ] [Hundreds of Swedish municipalities impacted by suspected ransomware attack on IT supplier](https://therecord.media/sweden-municipalities-ransomware-software)\n - [ ] [From Forecasting Storms to Staying Weatherproof](https://bfore.ai/blog/from-forecasting-storms-to-staying-weatherproof/)\n - [ ] [Finnish police wiretap reveals Russian ‘shadow fleet’ captain instructed to destroy evidence](https://therecord.media/finnish-police-wiretap-eagles-sabotage)\n - [ ] [MSSP Growth Guide: Scaling Threat Detection for Expanding Client Base](https://any.run/cybersecurity-blog/mssp-growth-guide-ti-feed/)\n - [ ] [Exploits and vulnerabilities in Q2 2025](https://securelist.com/vulnerabilities-and-exploits-in-q2-2025/117333/)\n - [ ] [Intelligenza artificiale e privacy: oggi più importante che mai](https://www.cybersecurity360.it/soluzioni-aziendali/intelligenza-artificiale-e-privacy-oggi-piu-importante-che-mai/)\n - [ ] [Android, più sicurezza con la verifica dell’identità sviluppatori](https://www.securityinfo.it/2025/08/27/android-piu-sicurezza-con-la-verifica-dellidentita-sviluppatori/)\n - [ ] [Ransomware e Information Disclosure, giocare d’anticipo](https://www.cybersecurity360.it/outlook/ransomware-e-information-disclosure-giocare-danticipo/)\n - [ ] [ShadowSilk: A Cross-Border Binary Union for Data Exfiltration](https://www.group-ib.com/blog/shadowsilk/)\n - [ ] [TheSqua.re - 107,041 breached accounts](https://haveibeenpwned.com/Breach/TheSquare)\n- RedTeam\n - [ ] [VS Code Copilot 提示词注入漏洞分析](https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484592&idx=1&sn=83d8bd964224df21f163a4f056a801d5)\n- Have I Been Pwned latest breaches\n - [ ] [TheSqua.re - 107,041 breached accounts](https://haveibeenpwned.com/Breach/TheSquare)\n- 安全学术圈\n - [ ] [西交利物浦大学 | 针对大型语言模型的目标导向生成式提示注入攻击](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493597&idx=1&sn=45c8d52a4b9f8e73c4ab92f100ff3b14)\n- IT Service Management News\n - [ ] [Alberghi, documenti di identità e l'approccio del \"non si sa mai\"](http://blog.cesaregallotti.it/2025/08/alberghi-documenti-di-identita-e.html)\n - [ ] [Pubblicata la ISO/IEC 27018:2025](http://blog.cesaregallotti.it/2025/08/pubblicata-la-isoiec-270182025.html)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Interesting Technique to Launch a Shellcode, (Wed, Aug 27th)](https://isc.sans.edu/diary/rss/32238)\n - [ ] [ISC Stormcast For Wednesday, August 27th, 2025 https://isc.sans.edu/podcastdetail/9588, (Wed, Aug 27th)](https://isc.sans.edu/diary/rss/32236)\n- Cyber Security – Strategy and Innovation\n - [ ] [Security Chat 6.0: A Night of Ideas, Innovation, and Community in Zurich](https://raffy.ch/blog/2025/08/27/security-chat-6-0-a-night-of-ideas-innovation-and-community-in-zurich/)\n- 嘶吼专业版\n - [ ] [假冒macOS欺骗用户安装新型Shamos信息窃取器](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584383&idx=1&sn=7bc202ded4e0af48aa6d1f1a14859af5)\n - [ ] [售票开启｜GEEKCON 2025 上海站早鸟票限时抢购中](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584383&idx=2&sn=43f6126b0f44159c87173e59b8074621)\n- Schneier on Security\n - [ ] [We Are Still Unable to Secure LLMs from Malicious Inputs](https://www.schneier.com/blog/archives/2025/08/we-are-still-unable-to-secure-llms-from-malicious-inputs.html)\n- BorderGate\n - [ ] [Capture the Flag Exercises: Part Three](https://www.bordergate.co.uk/capture-the-flag-exercises-part-three/)\n- Troy Hunt's Blog\n - [ ] [Home Assistant + Ubiquiti + AI = Home Automation Magic](https://www.troyhunt.com/home-assistant-ubiquiti-ai-home-automation-magic/)\n- The Grey Corner\n - [ ] [AWS Service Command and Control HTTP traffic forwarding part 3](/2025/08/27/aws-service-c2-forwarding-part3.html)\n - [ ] [Azure Service Command and Control HTTP traffic forwarding part 5](/2025/08/27/azure-service-c2-forwarding-part5.html)\n- blackMORE Ops\n - [ ] [Custom GPT Creation Guide for Building Your Own AI Assistant](https://www.blackmoreops.com/custom-gpt-creation-guide-building-ai-assistants/)\n- Security Affairs\n - [ ] [Over 28,000 Citrix instances remain exposed to critical RCE flaw CVE-2025-7775](https://securityaffairs.com/181614/hacking/over-28000-citrix-instances-remain-exposed-to-critical-rce-flaw-cve-2025-7775.html)\n - [ ] [U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/181615/security/u-s-cisa-adds-citrix-netscaler-flaw-to-its-known-exploited-vulnerabilities-catalog-2.html)\n - [ ] [Healthcare Services Group discloses 2024 data breach that impacted 624,496 people](https://securityaffairs.com/181608/data-breach/healthcare-services-group-discloses-2024-data-breach-that-impacted-624496-people.html)\n - [ ] [ESET warns of PromptLock, the first AI-driven ransomware](https://securityaffairs.com/181595/malware/eset-warns-of-promptlock-the-first-ai-driven-ransomware.html)\n - [ ] [China linked Silk Typhoon targeted diplomats by hijacking web traffic](https://securityaffairs.com/181584/security/china-linked-silk-typhoon-targeted-diplomats-by-hijacking-web-traffic.html)\n- Deeplinks\n - [ ] [Podcast Episode: Protecting Privacy in Your Brain](https://www.eff.org/deeplinks/2025/08/podcast-episode-protecting-privacy-your-brain)\n- Graham Cluley\n - [ ] [Smashing Security podcast #432: Oops! I auto-filled my password into a cookie banner](https://grahamcluley.com/smashing-security-podcast-432/)\n - [ ] [Cephalus ransomware: What you need to know](https://www.fortra.com/blog/cephalus-ransomware-what-you-need-know)\n- Tor Project blog\n - [ ] [Corruption and Control: How Turkmenistan turned internet censorship into a business](https://blog.torproject.org/Corruption-Control-Turkmenistan-internet-censorship-business/)\n- The Hacker News\n - [ ] [Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks](https://thehackernews.com/2025/08/storm-0501-exploits-entra-id-to.html)\n - [ ] [Someone Created First AI-Powered Ransomware Using OpenAI's gpt-oss:20b Model](https://thehackernews.com/2025/08/someone-created-first-ai-powered.html)\n - [ ] [Anthropic Disrupts AI-Powered Cyberattacks Automating Theft and Extortion Across Critical Sectors](https://thehackernews.com/2025/08/anthropic-disrupts-ai-powered.html)\n - [ ] [ShadowSilk Hits 35 Organizations in Central Asia and APAC Using Telegram Bots](https://thehackernews.com/2025/08/shadowsilk-hits-36-government-targets.html)\n - [ ] [The 5 Golden Rules of Safe AI Adoption](https://thehackernews.com/2025/08/the-5-golden-rules-of-safe-ai-adoption.html)\n - [ ] [Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data](https://thehackernews.com/2025/08/salesloft-oauth-breach-via-drift-ai.html)\n - [ ] [Blind Eagle’s Five Clusters Target Colombia Using RATs, Phishing Lures, and Dynamic DNS Infra](https://thehackernews.com/2025/08/blind-eagles-five-clusters-target.html)\n- Security Weekly Podcast Network (Audio)\n - [ ] [vCISO Benefits as the CISO Becomes Strategic and the Board's Responsible for Security - Brian Haugli - BSW #410](http://sites.libsyn.com/18678/vciso-benefits-as-the-ciso-becomes-strategic-and-the-boards-responsible-for-security-brian-haugli-bsw-410)\n"}}, "archive/daily/2025/2025-03-06.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747306.1079803, "n": 44046, "h": "31b248139792fa2a", "c": "# 每日安全资讯（2025-03-06）\n\n- Trustwave Blog\n - [ ] [The Microsoft Security Score: The Future Benchmark of Enterprise Security and Trust](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/the-microsoft-security-score-the-future-benchmark-of-enterprise-security-and-trust/)\n- SecWiki News\n - [ ] [SecWiki News 2025-03-05 Review](http://www.sec-wiki.com/?2025-03-05)\n- Security Boulevard\n - [ ] [Ransomware Attack Ends a 150 Year Company](https://securityboulevard.com/2025/03/ransomware-attack-ends-a-150-year-company/?utm_source=rss&utm_medium=rss&utm_campaign=ransomware-attack-ends-a-150-year-company)\n - [ ] [DEF CON 32 – War Stories – Stranger In A Changed Land](https://securityboulevard.com/2025/03/def-con-32-war-stories-stranger-in-a-changed-land/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-war-stories-stranger-in-a-changed-land)\n - [ ] [Apple vs. UK — ADP E2EE Back Door Faceoff](https://securityboulevard.com/2025/03/apple-appeals-uk-adp-richixbw/?utm_source=rss&utm_medium=rss&utm_campaign=apple-appeals-uk-adp-richixbw)\n - [ ] [Randall Munroe’s XKCD ‘RNA’](https://securityboulevard.com/2025/03/randall-munroes-xkcd-rna/?utm_source=rss&utm_medium=rss&utm_campaign=randall-munroes-xkcd-rna)\n - [ ] [Anti-detect browser analysis: How to detect the Undetectable browser?](https://securityboulevard.com/2025/03/anti-detect-browser-analysis-how-to-detect-the-undetectable-browser/?utm_source=rss&utm_medium=rss&utm_campaign=anti-detect-browser-analysis-how-to-detect-the-undetectable-browser)\n - [ ] [Fueling the Fight Against Identity Attacks](https://securityboulevard.com/2025/03/fueling-the-fight-against-identity-attacks/?utm_source=rss&utm_medium=rss&utm_campaign=fueling-the-fight-against-identity-attacks)\n - [ ] [7 container security best practices](https://securityboulevard.com/2025/03/7-container-security-best-practices/?utm_source=rss&utm_medium=rss&utm_campaign=7-container-security-best-practices)\n - [ ] [The Rise of Digital Passports: Navigating the Security Implications](https://securityboulevard.com/2025/03/the-rise-of-digital-passports-navigating-the-security-implications/?utm_source=rss&utm_medium=rss&utm_campaign=the-rise-of-digital-passports-navigating-the-security-implications)\n - [ ] [MixMode Uncovers Nation-State Attacks, Insider Threats, and Regulatory Risks in Critical Infrastructure Environment within 3 Days of Deployment](https://securityboulevard.com/2025/03/mixmode-uncovers-nation-state-attacks-insider-threats-and-regulatory-risks-in-critical-infrastructure-environment-within-3-days-of-deployment/?utm_source=rss&utm_medium=rss&utm_campaign=mixmode-uncovers-nation-state-attacks-insider-threats-and-regulatory-risks-in-critical-infrastructure-environment-within-3-days-of-deployment)\n - [ ] [DEF CON 32 – War Stories – Breaking Network Crypto In Popular Chinese Keyboard Apps](https://securityboulevard.com/2025/03/def-con-32-war-stories-breaking-network-crypto-in-popular-chinese-keyboard-apps/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-war-stories-breaking-network-crypto-in-popular-chinese-keyboard-apps)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [Teachers Record Management System 2.1 SQL Injection](https://cxsecurity.com/issue/WLB-2025030007)\n - [ ] [OpenPanel 0.3.4 Remote Code Execution](https://cxsecurity.com/issue/WLB-2025030006)\n - [ ] [Webmin RCE Leading to Privilege Escalation](https://cxsecurity.com/issue/WLB-2025030005)\n - [ ] [IdoDesigns - Multiple Vulnerabilities](https://cxsecurity.com/issue/WLB-2025030004)\n- Recent Commits to cve:main\n - [ ] [Update Wed Mar 5 20:29:28 UTC 2025](https://github.com/trickest/cve/commit/e3528693a6ed8a3ceccbd087696de98e5e516bf5)\n - [ ] [Update Wed Mar 5 12:31:52 UTC 2025](https://github.com/trickest/cve/commit/af86cc2f56298905cb5a0776fca9346e6cb8fe9a)\n - [ ] [Update Wed Mar 5 04:28:47 UTC 2025](https://github.com/trickest/cve/commit/637674a34749a5842f181c9e3ea4ef5935e955fe)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [新型恶意软件猛攻 4000 多家 ISP，从而实现远程入侵](https://www.4hou.com/posts/gyKr)\n- 奇安信攻防社区\n - [ ] [.Net Core下的内存马](https://forum.butian.net/share/4173)\n- obaby@mars\n - [ ] [再谈 Python自动生成 pdf 文件](https://h4ck.org.cn/2025/03/19568)\n- Microsoft Security Blog\n - [ ] [Silk Typhoon targeting IT supply chain](https://www.microsoft.com/en-us/security/blog/2025/03/05/silk-typhoon-targeting-it-supply-chain/)\n- InfoSec Write-ups - Medium\n - [ ] [6 Best AI Website Builders of 2025 — Which One is Right for You?](https://infosecwriteups.com/best-ai-website-builders-2025-cd8fb61a6e45?source=rss----7b722bfd1b8d---4)\n - [ ] [Bypass WAF Cloudflare RXSS | Hackerone](https://infosecwriteups.com/bypass-waf-cloudflare-rxss-hackerone-c12c57809ad6?source=rss----7b722bfd1b8d---4)\n - [ ] [Finding jwt tokens that lead to PII data leakage.](https://infosecwriteups.com/finding-jwt-tokens-that-lead-to-pii-data-leakage-b047d45d97bf?source=rss----7b722bfd1b8d---4)\n - [ ] [Penetration testing a Kubernetes environment](https://infosecwriteups.com/penetration-testing-a-kubernetes-environment-72719f9e1010?source=rss----7b722bfd1b8d---4)\n - [ ] [SURIKATA: Stopping Insider Threats Before They Strike](https://infosecwriteups.com/surikata-stopping-insider-threats-before-they-strike-17c2174cafe7?source=rss----7b722bfd1b8d---4)\n - [ ] [Able to create an account without a phone number. (unique bug)](https://infosecwriteups.com/able-to-create-an-account-without-a-phone-number-unique-bug-1fe2d14b9d54?source=rss----7b722bfd1b8d---4)\n - [ ] [SSRF steals EC2 tokens](https://infosecwriteups.com/ssrf-steals-ec2-tokens-d6f46835286e?source=rss----7b722bfd1b8d---4)\n - [ ] [Find new apex domains that are related to your bug bounty target.](https://infosecwriteups.com/find-new-apex-domains-that-are-related-to-your-bug-bounty-target-a05fdcbf5875?source=rss----7b722bfd1b8d---4)\n - [ ] [A Logical Bug That Slipped Through](https://infosecwriteups.com/a-logical-bug-that-slipped-through-792b90850e72?source=rss----7b722bfd1b8d---4)\n- Doonsec's feed\n - [ ] [秦安：东方集团造假付惨重代价，普通股民不陪绑，赔偿制度要跟上](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650477233&idx=1&sn=231cba11555843c257e219e4218fa64d)\n - [ ] [牟林：美俄在乌克兰的冲突谁赢了？](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650477233&idx=2&sn=ab58e715c08158a70dbcbd350cc8ef31)\n - [ ] [牟林：斯塔默负责落实特朗普指示精神时泽连斯基和特朗普吵架了](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650477233&idx=3&sn=038e62e50f303c72c59cfd458311f84a)\n - [ ] [reCAPTCHA Phishing:xa0Ι Am Nοt A Rοbοt, Are You?](https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489202&idx=1&sn=089ad3e5762ec80d69be559db94b4bec)\n - [ ] [2025年小道消息？大学生天崩开局！](https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538969&idx=1&sn=42317327f884b1292137a07f173b1729)\n - [ ] [2025年勒索软件新威胁：新兴组织崛起，安全形势告急！](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=1&sn=c4d11e559015b3b012434ee7641d7b49)\n - [ ] [【干货】笑傲职场的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=2&sn=cba7d1395b0bf7ecea48dff5c7b43da2)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=3&sn=a7ad047e393eff87d97bf424c6478d57)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=4&sn=adcb7a529cfc5f14f9a89735577197cc)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=5&sn=390e507478f0be7b62df0f271b9ddb5e)\n - [ ] [某节技术专家，刚清空工位，恶心到了。](https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491177&idx=1&sn=99ff2768ccc8268f2d612c1dfb6bc036)\n - [ ] [通过 iOS 应用程序中的 Deep Links 利用未经过滤的 URL Handling 和 SQL 注入](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487558&idx=1&sn=86afccba855a95902d9347cb9ed9c870)\n - [ ] [定制你的 Mac Studio](https://mp.weixin.qq.com/s?__biz=MzIyNDg2MDQ4Ng==&mid=2247486654&idx=1&sn=afb3aeca7e0f85e1952220d5f6c56e59)\n - [ ] [网络安全人士必知的黑客工具NanoCore](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490547&idx=1&sn=1574d0459983605de74bc81d8fdc82b5)\n - [ ] [专家解读 | 构建全国一体化公共数据资源登记平台 推动数据要素市场高质量发展](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=1&sn=10e68f771f25102581731d92ae63471f)\n - [ ] [两部委发布智能网联汽车准入召回通知，要求落实密码应用规定](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=2&sn=621c90a3fee7a8d71cfc55f259e19719)\n - [ ] [领先谷歌六个数量级！我国再创全球量子计算优越性里程碑，比超算快10的15次方倍](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=3&sn=9f93b810c1c2f55332cf1690e28fe850)\n - [ ] [最新黑产技术曝光，只需19分钟即可劫持AI大模型](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=4&sn=23dbc83e5257ec1639e7e677d40dbc93)\n - [ ] [2025必看！软考网络工程师值不值得冲？考完竟然有这么多隐藏福利！](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247528456&idx=1&sn=f42ee963aa8855e5259979cf427fc741)\n - [ ] [记一次小程序漏洞打包](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=1&sn=141b292fc69ff9d745e021ad98999ec2)\n - [ ] [SRC挖掘 | fastjson反序列化漏洞实战](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=2&sn=a4481e4d2263583ccf6816d48497e8a7)\n - [ ] [近期暗网 0day 售卖情报预警](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=3&sn=e70df2122c3094a8037fd3096b81ed74)\n - [ ] [车载Android系统破解工具和漏洞挖掘浅析](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=4&sn=e6dd20d2247732b0e5e73f6e9ae93343)\n - [ ] [坤舆 - 更高效的企业资产收集](https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486620&idx=1&sn=29800656c4390f4137abb6b2c749fb2f)\n - [ ] [IPv4 vs IPv6：你真的了解它们的区别吗？](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649465873&idx=1&sn=a97412aaab165218d45d90168d41eca5)\n - [ ] [HVV 行动，项目招聘！！！](https://mp.weixin.qq.com/s?__biz=Mzk0NDQwMDY1Nw==&mid=2247486039&idx=1&sn=169dd0fec4d90cea1ab8738dbc051e35)\n - [ ] [DeepSeek原理和落地应用](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655268998&idx=1&sn=fcd085d254c624b50fd88bcb942dfff6)\n - [ ] [rust第二季-加密网络通信高级开发视频教程(2025最新)更新到第6节了](https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247505344&idx=1&sn=6159cddf33ad74f1c82ee2098334b918)\n - [ ] [漏洞预警 | VMware ESXi 存在缓冲区溢出漏洞（CVE-2025-22224）](https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487022&idx=1&sn=be6d4d80fd50ee781458871cfc1eef6f)\n - [ ] [深度伪造技术的滥用——网络安全的新挑战](https://mp.weixin.qq.com/s?__biz=Mzg4MjY5MDE4NA==&mid=2247486159&idx=1&sn=8ca047afb453ddd53926938b033f0279)\n- Blog – Red Siege Information Security\n - [ ] [Regex: Simplicity, Security, and Power](https://redsiege.com/blog/2025/03/regex-simplicity-security-and-power/)\n- Hacking Dream\n - [ ] [Understanding Kerberos Authentication and its Attacks](https://www.hackingdream.net/2025/03/understanding-kerberos-authentication-and-its-attacks.html)\n- SpiderLabs Blog\n - [ ] [The Russia-Ukraine Cyber War Part 3: Attacks on Telecom and Critical Infrastructure](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/the-russia-ukraine-cyber-war-part-3-attacks-on-telecom-and-critical-infrastructure/)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [Finding jwt tokens that lead to PII data leakage.](https://infosecwriteups.com/finding-jwt-tokens-that-lead-to-pii-data-leakage-b047d45d97bf?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Able to create an account without a phone number. (unique bug)](https://infosecwriteups.com/able-to-create-an-account-without-a-phone-number-unique-bug-1fe2d14b9d54?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Find new apex domains that are related to your bug bounty target.](https://infosecwriteups.com/find-new-apex-domains-that-are-related-to-your-bug-bounty-target-a05fdcbf5875?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [A Logical Bug That Slipped Through](https://infosecwriteups.com/a-logical-bug-that-slipped-through-792b90850e72?source=rss----7b722bfd1b8d--bug_bounty)\n- Horizon3.ai\n - [ ] [Identify Cybersecurity Risks at Scale to De-Risk M&A Transactions with Horizon3.ai’s NodeZero® Platform](https://www.horizon3.ai/downloads/use-case/identify-cybersecurity-risks-at-scale-to-de-risk-ma-transactions-with-horizon3-ais-nodezero-platform/)\n- Securelist\n - [ ] [Undercover miner: how YouTubers get pressed into distributing SilentCryptoMiner as a restriction bypass tool](https://securelist.com/silentcryptominer-spreads-through-blackmail-on-youtube/115788/)\n- Didier Stevens\n - [ ] [Update: zoneidentifier.exe Version 0.0.2](https://blog.didierstevens.com/2025/03/05/update-zoneidentifier-exe-version-0-0-2/)\n- Reverse Engineering\n - [ ] [Zen and the Art of Microcode Hacking](https://www.reddit.com/r/ReverseEngineering/comments/1j4cv9f/zen_and_the_art_of_microcode_hacking/)\n - [ ] [GoStringUngarbler: Deobfuscating Strings in Garbled Binaries](https://www.reddit.com/r/ReverseEngineering/comments/1j48mqn/gostringungarbler_deobfuscating_strings_in/)\n - [ ] [Deobfuscation with rev.ng](https://www.reddit.com/r/ReverseEngineering/comments/1j4bwc7/deobfuscation_with_revng/)\n- Malwarebytes\n - [ ] [I spoke to a task scammer. Here’s how it went](https://www.malwarebytes.com/blog/news/2025/03/i-spoke-to-a-task-scammer-heres-how-it-went)\n - [ ] [Android zero-day vulnerabilities actively abused. Update as soon as you can](https://www.malwarebytes.com/blog/news/2025/03/android-zero-day-vulnerabilities-actively-abused-update-as-soon-as-you-can)\n- 绿盟科技技术博客\n - [ ] [绿盟威胁情报周报2025年第08周（2025.02.24-2025.03.02）](https://blog.nsfocus.net/2025-02-24-2025-03-02/)\n - [ ] [Ollama配置不当未授权访问漏洞（CNVD-2025-04094）](https://blog.nsfocus.net/cnvd-2025-04094/)\n - [ ] [VMware ESXi&Workstation&Fusion多个高危漏洞 (CVE-2025-22224/CVE-2025-22225/CVE-2025-22226)](https://blog.nsfocus.net/cve-2025-22224-cve-2025-22225-cve-2025-22226/)\n- FreeBuf网络安全行业门户\n - [ ] [FreeBuf早报 | 2025 OWSAP LLM TOP10关键变化；社交媒体成恶意攻击主要目标](https://www.freebuf.com/news/423637.html)\n - [ ] [汇正财经广纳贤才：信息安全官，虚位以待！](https://www.freebuf.com/jobs/423631.html)\n - [ ] [近期暗网 0day 售卖情报预警](https://www.freebuf.com/news/423624.html)\n - [ ] [WordPress曝9.8分高危漏洞，可执行远程代码攻击](https://www.freebuf.com/vuls/423693.html)\n - [ ] [CISA警告VMware漏洞正遭积极利用，敦促企业立即修补](https://www.freebuf.com/vuls/423684.html)\n - [ ] [Vim 编辑器漏洞：恶意 TAR 文件触发代码执行风险](https://www.freebuf.com/vuls/423695.html)\n- 安全牛\n - [ ] [智能化安全运营时代，安全分析师需要扮演好三个新角色](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135371&idx=1&sn=09830c406c7369f6c1ef77590b1ee2f2&chksm=bd15ad588a62244e2fc1b6285ef43be628c0b8a2e8e98cc233abc63ecdeee97cec1cda980986&scene=58&subscene=0#rd)\n - [ ] [工信部CSTIS提醒：防范Murdoc_Botnet僵尸网络的风险；谷歌修复两个已被利用的Android零日漏洞 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135371&idx=2&sn=6a4ed653f5f735d427b6b4b80a73c605&chksm=bd15ad588a62244e67295291773f1dfcf10039ea37bc7ec7363949d7f90676247858568f2c95&scene=58&subscene=0#rd)\n- HackerNews\n - [ ] [谷歌推出“屏蔽邮件”功能，用户可隐藏邮箱地址](https://hackernews.cc/archives/57685)\n - [ ] [新型 Eleven11bot 僵尸网络感染 86,000 台设备，用于 DDoS 攻击](https://hackernews.cc/archives/57681)\n - [ ] [思科、日立、微软和 Progress 漏洞遭积极利用，CISA 发出警报](https://hackernews.cc/archives/57679)\n - [ ] [中美超过4,000个ISP IP地址遭暴力破解攻击，黑客植入恶意软件](https://hackernews.cc/archives/57677)\n - [ ] [疑似伊朗黑客利用受感染的印度公司邮箱攻击阿联酋航空业](https://hackernews.cc/archives/57670)\n - [ ] [Broadcom 发布紧急补丁修复 VMware 安全漏洞](https://hackernews.cc/archives/57668)\n - [ ] [研究人员将 CACTUS 勒索软件的战术与前 Black Basta 附属机构联系起来](https://hackernews.cc/archives/57665)\n- 安全分析与研究\n - [ ] [UEFI BootKit恶意软件狩猎技术](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490899&idx=1&sn=ac54b3c578d2f70f2c7c75b4609c4906&chksm=902fb27ba7583b6de45783544044400daffb356939e6e5bbd3a7d5c45218f14bd53d2a58a402&scene=58&subscene=0#rd)\n- 绿盟科技CERT\n - [ ] [【漏洞通告】VMware ESXi&Workstation&Fusion多个高危漏洞](https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489028&idx=1&sn=2093ce6762f3251c9e9d9b6de632ad98&chksm=c2c6410ff5b1c819362fdf10a6e0acbea0001f6ca2dd2cdbac4ca1496af3aeda46869a3fa4dc&scene=58&subscene=0#rd)\n - [ ] [【已支持识别检测】Ollama配置不当未授权访问漏洞（CNVD-2025-04094）](https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489028&idx=2&sn=acdcd9105653b3dfe1eb03d48cf3bdd3&chksm=c2c6410ff5b1c819fcc80c2c0b6d4fa2175d93cb297e3e64fdb828b5d143815241270699ea7e&scene=58&subscene=0#rd)\n- 奇安信 CERT\n - [ ] [【已发现在野利用】VMware ESXi多个高危漏洞安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503073&idx=1&sn=6769c38d6b37afb2cecf671963dff742&chksm=fe79e879c90e616f8d3bc3f16b6ef82738e3618fb4be9584f97a3f0b6c743197970c469212d0&scene=58&subscene=0#rd)\n- 红日安全\n - [ ] [hvv时间已来？可以参加的小伙伴们抓紧时间填报信息了](https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851814&idx=1&sn=add5eaf6c4687f3fd9c5de8f4a9b2142&chksm=f3e4e925c4936033dc1e53d34158b42cff2eef78c2dfca7ffb0d85f3dbe12add485a763a1fd9&scene=58&subscene=0#rd)\n- 安全内参\n - [ ] [AI换脸攻击激增300%！你视频会议里的领导同事可能都是伪造的](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513884&idx=1&sn=d0516b584c52d648aeaf38847d9449fb&chksm=ebfaf03cdc8d792aca4d2afe5477c35c5d867fb8221fad6f636899956a4a6fe89f15de3a9181&scene=58&subscene=0#rd)\n - [ ] [特朗普网络团队任命预示美国政府将转向进攻性网络政策](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513884&idx=2&sn=54105096f2781e325925f6d29c22481f&chksm=ebfaf03cdc8d792a3052b190ce1c1f1a38b006b342aec29475948ee52952c655bb0b30870700&scene=58&subscene=0#rd)\n- 长亭安全应急响应中心\n - [ ] [【风险提示】VMware ESXi新型漏洞利用链已出现在野利用](https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492725&idx=1&sn=de0f08e06363a7386f762ff89911fa2f&chksm=96f7fb18a180720ebf4fc3a9847cbae47c513332d35b81c4111e4bb0b4cbbdfc8b40446bbfb0&scene=58&subscene=0#rd)\n- dotNet安全矩阵\n - [ ] [.NET 实战中使用 Sharp4FUAC 通过 Windows 白名单文件绕过 UAC 实现本地权限提升](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499055&idx=1&sn=9774cc140fd8036509026fd4f651e291&chksm=fa5953c2cd2edad4f7ad902f6db3030a1c38dc3448adf89e328573959813ede260b1cfc28022&scene=58&subscene=0#rd)\n - [ ] [.NET 内网攻防实战电子报刊](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499055&idx=2&sn=33bd494fa1a2ae6e8fd46bbdf1f97623&chksm=fa5953c2cd2edad46803a2311a5b86f83803307fd2f14d710fab25105ad43a52b0fbe472bca2&scene=58&subscene=0#rd)\n - [ ] [2025年2月份红队武器库和资源汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499055&idx=3&sn=e8afa902aa37df3a81977d2c668b57d6&chksm=fa5953c2cd2edad40887201edf2391f19053ae6cf7222e5fdac2ab8278001cf6a4a01a02b154&scene=58&subscene=0#rd)\n- 慢雾科技\n - [ ] [浏览器钱包扩展突遭损坏，如何化险为夷？](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501374&idx=1&sn=81df5175deaa669dbde4c2ceadf8ca9d&chksm=fddeb8b9caa931af5d15205313b3ed53bdbfc446c9a96aaaf6d87ac587f8dfe4d254794d80ae&scene=58&subscene=0#rd)\n- 天御攻防实验室\n - [ ] [军事专家建议组建俄罗斯网络部队](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486291&idx=1&sn=de04a9abc8fc3aa3cdbf901068da56e2&chksm=fb04c83bcc73412d2290840b2decb87e3d6b715c84faf36f0099426ebf7f13685a6dc571f582&scene=58&subscene=0#rd)\n- 代码卫士\n - [ ] [博通修复3个已遭利用的 VMware 0day 漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522410&idx=1&sn=0f5b704ab0b14c7dd3262ffbc0697b07&chksm=ea94a900dde32016fa789ad6e1cbd205eab3afe70049ad11ab8634e97423249682ce8b5d438a&scene=58&subscene=0#rd)\n - [ ] [思科： Webex 漏洞可导致凭据遭远程访问](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522410&idx=2&sn=0aef267bcd2c2f831a7dedbda98b4668&chksm=ea94a900dde32016f9902d5634144e61cbf559478eaf697cb00cf146b7b4de1bae7a4526be98&scene=58&subscene=0#rd)\n- 全频带阻塞干扰\n - [ ] [SECURITY SHOW 2025 | 揭秘日本最大安防展](https://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648958466&idx=1&sn=7b2e4f2f3053d9d6ad182363ec4862f9&chksm=f09ef17dc7e9786b87a330eb3d1098ff4540be3c78dd7e66e953be27dd35326a5227fba797be&scene=58&subscene=0#rd)\n- 数世咨询\n - [ ] [独家揭秘：如何推进人工智能驱动的安全创新](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537838&idx=1&sn=ac365e194b53bef7a8f6658f4a5ddffd&chksm=c1442613f633af05d5e21efd4e3a12b6b640073e2136d7f0fc15ec732b67384639aef729e20d&scene=58&subscene=0#rd)\n - [ ] [直播预约：数安三人行——Deep Seek爆火背后，大模型如何重塑安全?](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537838&idx=2&sn=efd860d89d0249828150599857bc2d72&chksm=c1442613f633af05e3ae265aaba00be2c68cc8fd8b8a8cbabd1cc5e0463f22ec1bedd4ba76ef&scene=58&subscene=0#rd)\n- 网络空间安全科学学报\n - [ ] [“网络信息系统安全性评测”专题征稿](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505183&idx=1&sn=a0ca19e256ff424a866f8c5d88f6d21c&chksm=e9bfc1a1dec848b706502326fffc620a561bde0f993bc219f060184e064668553ec89c1b7719&scene=58&subscene=0#rd)\n - [ ] [学术前沿 | 一种安全的集群无线网络环境下密钥协商协议](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505183&idx=2&sn=7264c046dbd8515e33d7d93db259c5d5&chksm=e9bfc1a1dec848b76f29f710e1b0d140e5d3e510eb1f8046280b032eafc80ad960afa3300bae&scene=58&subscene=0#rd)\n- 安全研究GoSSIP\n - [ ] [G.O.S.S.I.P 阅读推荐 2025-03-05 LLM是安全的银弹吗？](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499858&idx=1&sn=3ec725428dd98d800860265277c0b941&chksm=c063ee8bf714679df279af8d55dad7ed13acf2739b35dc48f07af3f3851424d5eff24507a663&scene=58&subscene=0#rd)\n- 威胁棱镜\n - [ ] [2024 年 GreyNoise 在野大规模漏洞利用报告](https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247487732&idx=1&sn=e92589cbe79e05ee823759d988b688f9&chksm=c1e9e738f69e6e2e78755af17ee489b1e7fb96a891bbcfce9bf45ac7f7c6592147fafe36832c&scene=58&subscene=0#rd)\n- 安全圈\n - [ ] [【安全圈】最新黑产技术曝光，只需19分钟即可劫持AI大模型](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=1&sn=d8c361d857947b4f7ddd18672093ed23&chksm=f36e75fac419fcec9b98a65660841511b124c3eea8dcdc951f1a23d09cdb9b820e5dcce820c0&scene=58&subscene=0#rd)\n - [ ] [【安全圈】全球 49,000 多个门禁管理系统存在巨大安全漏洞](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=2&sn=cfbab77073fc932a8b466a9586809efc&chksm=f36e75fac419fcecbf602c6a23698a377a6e7431fbf29023fffe68d6c04af74eecaea10c2e0a&scene=58&subscene=0#rd)\n - [ ] [【安全圈】GitHub 大规模恶意软件行动：Redox Stealer盯上游戏玩家与盗版用户](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=3&sn=b6b1eda81cdc868cb996830336a5f909&chksm=f36e75fac419fcece71eeed0e3c426419606644ca9724f292236889f8a42504a83eed17cfba9&scene=58&subscene=0#rd)\n - [ ] [【安全圈】320万用户因恶意浏览器扩展程序遭信息泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=4&sn=101d9a5f9ab1488a2654bb7bdb7ebdf5&chksm=f36e75fac419fcecce7874fa3b39840d9b7cdcb5effc01bffe605c6bb3411b11257c19ce1742&scene=58&subscene=0#rd)\n- 看雪学苑\n - [ ] [从逆向还原的角度探讨x86与x64的异常：32位3代异常处理还原（VS2019）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590532&idx=1&sn=bf6d8a881eb64cc3fe35157d1a015c23&chksm=b18c2dce86fba4d85a84d5d8063ab44a551c4e79c2eb39cb1aec64eb908aa9d6dc372fa01b42&scene=58&subscene=0#rd)\n - [ ] [黑客利用暴露的云凭证，仅19分钟劫持AI大模型](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590532&idx=2&sn=ecd38eda9e2e4bd27eacd184b6bc7d96&chksm=b18c2dce86fba4d87754b0dcc27e9a9d76c6ba04e788bdf59ddaba11d33aa5413536bdc0a1ec&scene=58&subscene=0#rd)\n - [ ] [第22周更新： 反序列化漏洞（三）ThinkPHP反序列链分析 | CTF训练营-Web篇](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590532&idx=3&sn=64c9bf27d9ed81ec82e0506b47b8d3cc&chksm=b18c2dce86fba4d89b9c96e5a591d6a3253d659e5c9cfe03f638e6fda35228fc96840fd97a35&scene=58&subscene=0#rd)\n- 嘶吼专业版\n - [ ] [「职」为你来||嘶吼·来个Offer网安人才招聘社群，正式上线~~](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581408&idx=1&sn=648391a112b5b6a7674f1784e9a1e965&chksm=e9146edade63e7cc69d84a916d3f603dfb539d583b78703541d118f00ed8f1befa044737fa26&scene=58&subscene=0#rd)\n - [ ] [新型恶意软件猛攻 4000 多家 ISP，从而实现远程入侵](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581408&idx=2&sn=4bc77c23c2146af863386ddf099196b4&chksm=e9146edade63e7cce4f3b1292059d9a2917d16de9b8c9a65ee7ed15e6d82a8cbe75e29b0552a&scene=58&subscene=0#rd)\n- XCTF联赛\n - [ ] [TPCTF 2025｜倒计时3天！](https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247515508&idx=1&sn=02603364959caf80ad3d90bd19669d45&chksm=a6874f4e91f0c658727b8298731c7ab6a76246d5105bc21656c30f67f8c7575e09680ae61fca&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [不仅有能用国补的 MacBook Air，还有模型训练神器 Mac Studio](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075084&idx=1&sn=8c796ab839df6e22b2d88af232c3cec4&chksm=7e57cb3a4920422ccd9736d29cb01e3d0a99928c8658dd26edec1a0a1893e43c0759b85ada5c&scene=58&subscene=0#rd)\n - [ ] [月薪 5000，我给人形机器人当「老师」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075060&idx=1&sn=548b9d389884e09a2b97a659c097ce80&chksm=7e57cbc2492042d4d63787f577d4bcd2a094b304a8acc4e37387492495799f77230e89f91250&scene=58&subscene=0#rd)\n - [ ] [字节启动新一轮股票回购，估值增至 3150 亿美元；雷军提议优化新能源车牌；北京举办首届人形机器人马拉松｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075018&idx=1&sn=9243bf414e1b91aae81e75b1c31f3969&chksm=7e57cbfc492042eacf8d98165779353cc104bdaca483248f74b463d7cfa5d3c1a373c3894f09&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [内部邮件截获暴露俄罗斯联邦第243军区重大隐患](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560164&idx=1&sn=ca65cf4a41ce258fc9ab6727ac1147ec&chksm=871178efb066f1f928cdc615843fd4cf7a9fc716cd28d3f223887af893b961a515b242b41a5d&scene=58&subscene=0#rd)\n - [ ] [蒙古国媒体舆论导向转变对我形象及对外传播的影响与应对](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560164&idx=2&sn=6257004cfaeae6e539bdce175857cae2&chksm=871178efb066f1f9349773d3067ea54755683ecc20d6c55309beb1c90e754b14247a271eaff5&scene=58&subscene=0#rd)\n- 京东安全应急响应中心\n - [ ] [【招聘】京东集团信息安全部诚邀各路英雄加入~~](https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727844182&idx=1&sn=e20a71c9e1db4610ef4b27ddb4a1318c&chksm=80504edeb727c7c8154c5b3e5fcdcf1ef620e4f5adccfef95d691ad65b468dde6d214f7e8b44&scene=58&subscene=0#rd)\n- 信息安全国家工程研究中心\n - [ ] [【二十四节气】惊蛰 | 微雨众卉新，一雷惊蛰始。](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498982&idx=1&sn=8ebb87255eb8a623e12a0965736544d7&chksm=feb67df5c9c1f4e3eae7e2ab754bb38f5857db274517388ae13b12b0e9381c8d4dd466f28cd8&scene=58&subscene=0#rd)\n- 字节跳动技术团队\n - [ ] [285 学科全覆盖！豆包大模型团队开源基准测试集 SuperGPQA](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513660&idx=1&sn=df5fb0b249a74acedd46c53acc2031ea&chksm=e9d37ddedea4f4c85d9f6e3e65cceef63401ef6af8c64f93a3156e9d103750719b0c39b14728&scene=58&subscene=0#rd)\n- 黑伞安全\n - [ ] [【风险提示】VMware ESXi新型漏洞利用链已出现在野利用](https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489754&idx=1&sn=57c283962096cbe0ba12fd8927bf9ccf&chksm=fb029582cc751c943a4e53c5a0a3b96e80459f0cb16241c005be5e0baaf9eb80a742f2e3d548&scene=58&subscene=0#rd)\n - [ ] [Deepseek助力职场办公效能提升课程](https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489754&idx=2&sn=db20737721bcb2b35ab909435bf9361f&chksm=fb029582cc751c947abd3e8a0afdc4dc930e0b06ef91cabe77fb6687905a42b660f2aa37f00b&scene=58&subscene=0#rd)\n- 恒脑与AI\n - [ ] [AI数据污染危机：1.2 万个敏感信息藏在训练数据里！](https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496727&idx=1&sn=8695d84c49f42fa2437afa03b34d1c47&chksm=e9fd6986de8ae09031a2407b290039bbdbb278ab755cc0646d71cfc926f7b3a255b08a3dacc6&scene=58&subscene=0#rd)\n- 复旦白泽战队\n - [ ] [成果分享｜ 基于包管理平台的黑帽搜索引擎优化](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247493225&idx=1&sn=530e028915257a6cc30176eb962ebdb7&chksm=fde86217ca9feb01ac5ce8a574c5bdc14b8fb393da7fe2b5c208e65646abaf853004108da14e&scene=58&subscene=0#rd)\n- 墨菲安全\n - [ ] [软件供应链安全行业大佬闭门交流会](https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488096&idx=1&sn=edf79fed7f7ec855c8897bfb9dacf413&chksm=c13d7158f64af84eafbe51b0adee58edcfe4f566ebcdd04f1e1cb14d623922ff9e4da5d18e5e&scene=58&subscene=0#rd)\n- Beacon Tower Lab\n - [ ] [漏洞预警 | VMware ESXi 存在缓冲区溢出漏洞（CVE-2025-22224）](https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487022&idx=1&sn=be6d4d80fd50ee781458871cfc1eef6f&chksm=c22296d7f5551fc1e5006b6bc19fb3b5655ab633f1b0815aae458952101c37baae87d8f56aac&scene=58&subscene=0#rd)\n- 深信服千里目安全技术中心\n - [ ] [【漏洞通告】VMware ESXi 等多款产品缓冲区溢出漏洞(CVE-2025-22224)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524017&idx=1&sn=1eee483c71f1b398696a1d224d767b12&chksm=ce4615a1f9319cb7c52e9731ee8e24dcd9f34b47a048b0a5ff2af0f2bee17afdd1723624ae07&scene=58&subscene=0#rd)\n - [ ] [网络安全信息与动态周报2025年第8期（2月17日-2月23日）](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524017&idx=2&sn=b8f4ca73f0de7cfa0a633ae874442f1a&chksm=ce4615a1f9319cb7cb7d4565af0f113ed51f44565a727dc28232d5d040d9fae39a5160a3fe28&scene=58&subscene=0#rd)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #767: Forensic Lunch Test Kicthen - unit tests and documentation](https://www.hecfblog.com/2025/03/daily-blog-767-forensic-lunch-test.html)\n- 360数字安全\n - [ ] [《人民政协报》报道：以模制模，重塑人工智能安全新范式](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579797&idx=1&sn=ebaf3c9ca6017484870873e659a905ce&chksm=9f8d289da8faa18b2af5ae32ef5bfd4f1419036e392f416f3ec721c61b1860130720f16f7c6d&scene=58&subscene=0#rd)\n- 迪哥讲事\n - [ ] [JS利用](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497222&idx=1&sn=0be4689e2b33beb274758f53874dbdbe&chksm=e8a5fc65dfd2757343626ee228a66b830d831717698d39266b701d9238201a59f07fe2945e54&scene=58&subscene=0#rd)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Così Black Basta e Cactus sfruttano Teams e OneDrive per infiltrarsi nelle reti aziendali](https://www.cybersecurity360.it/news/cosi-black-basta-e-cactus-sfruttano-teams-e-onedrive-per-infiltrarsi-nelle-reti-aziendali/)\n - [ ] [Federal cyber firings imperil efforts to stop Chinese hacking campaigns, experts tell lawmakers](https://therecord.media/federal-cyber-firings-cisa-workforce)\n - [ ] [Two decades of visitor data at the Toronto Zoo stolen in cyberattack](https://therecord.media/toronto-zoo-warns-decades-cyberattack)\n - [ ] [Justice Department Charges 12 Chinese Contract Hackers and Law Enforcement Officers in Global Computer Intrusion Campaigns](https://flashpoint.io/blog/justice-department-charges-12-chinese-contract-hackers-and-law-enforcement-officers-in-global-computer-intrusion-campaigns/)\n - [ ] [Open-source tool 'Rayhunter' helps users detect Stingray attacks](https://www.bleepingcomputer.com/news/security/open-source-tool-rayhunter-helps-users-detect-stingray-attacks/)\n - [ ] [DOJ to appeal court decision ruling broad cell phone tower searches are unconstitutional](https://therecord.media/doj-to-appeal-cell-tower-ruling)\n - [ ] [Catalan court says NSO Group executives can be charged in spyware investigation](https://techcrunch.com/2025/03/05/catalan-court-says-nso-group-executives-can-be-charged-in-spyware-investigation/)\n - [ ] [US charges Chinese nationals in cyberattacks on Treasury, dissidents and more](https://therecord.media/doj-charges-chinese-nationals-isoon-cyberattacks-treasury)\n - [ ] [Silk Typhoon hackers now target IT supply chains to breach networks](https://www.bleepingcomputer.com/news/security/silk-typhoon-hackers-now-target-it-supply-chains-to-breach-networks/)\n - [ ] [Rural hospitals in US need to invest at least $70 million in cybersecurity, Microsoft finds](https://therecord.media/rural-hospitals-need-millions-cyber)\n - [ ] [Trump orders halt to intelligence sharing with Ukraine, CIA director says](https://therecord.media/trump-halt-intel-sharing-ukraine)\n - [ ] [US charges Chinese hackers linked to critical infrastructure breaches](https://www.bleepingcomputer.com/news/security/us-charges-chinese-hackers-linked-to-critical-infrastructure-breaches/)\n - [ ] [La minaccia ibrida fa paura e l’Italia è nel mirino: il rapporto degli 007](https://www.cybersecurity360.it/news/la-minaccia-ibrida-fa-paura-e-litalia-e-nel-mirino-il-rapporto-degli-007/)\n - [ ] [BadBox malware disrupted on 500K infected Android devices](https://www.bleepingcomputer.com/news/security/badbox-malware-disrupted-on-500k-infected-android-devices/)\n - [ ] [DORA, si apre la partita dell’attuazione: ecco come](https://www.cybersecurity360.it/news/dora-si-apre-la-partita-dellattuazione-ecco-come/)\n - [ ] [Ukraine's intel service honors civilian hackers for the first time with military award](https://therecord.media/ukraine-intel-service-honors-civilian-hackers-with-military-award)\n - [ ] [Look up: The new frontier of cyberthreats is in the sky](https://www.bleepingcomputer.com/news/security/look-up-the-new-frontier-of-cyberthreats-is-in-the-sky/)\n - [ ] [YouTube warns of AI-generated video of its CEO used in phishing attacks](https://www.bleepingcomputer.com/news/security/youtube-warns-of-ai-generated-video-of-its-ceo-used-in-phishing-attacks/)\n - [ ] [Gli USA sospendono le operazioni cyber contro la Russia: l’impatto sulla sicurezza nazionale](https://www.cybersecurity360.it/news/sospensione-usa-delleoperazioni-informatiche-contro-la-russia-limpatto-sulla-sicurezza-nazionale/)\n - [ ] [Gli scammer di PayPal sfruttano Docusign per inviare email di phishing](https://www.securityinfo.it/2025/03/05/gli-scammer-di-paypal-sfruttano-docusign-per-inviare-email-di-phishing/)\n - [ ] [Toronto Zoo shares update on last year's ransomware attack](https://www.bleepingcomputer.com/news/security/toronto-zoo-shares-update-on-last-years-ransomware-attack/)\n - [ ] [ACSC Warns of Increasing Ransomware Risks and Offers Key Protection Tips](https://cyble.com/blog/acsc-warns-of-ransomware-risks/)\n - [ ] [February Sees Record-Breaking Ransomware Attacks, New Data Shows](https://cyble.com/blog/february-sees-ransomware-attacks-new-data-shows/)\n - [ ] [November 2024 Cyber Attacks Statistics](https://www.hackmageddon.com/2025/03/05/november-2024-cyber-attacks-statistics/)\n - [ ] [How Transport Company Gets Real-Time IOC and IOB Updates on Active Cyber Attacks](https://any.run/cybersecurity-blog/how-transport-company-monitors-threats/)\n - [ ] [!exploitable Episode Two - Enter the Matrix](https://blog.doyensec.com/2025/02/27/exploitable-sshd.html)\n - [ ] [Undercover miner: how YouTubers get pressed into distributing SilentCryptoMiner as a restriction bypass tool](https://securelist.com/silentcryptominer-spreads-through-blackmail-on-youtube/115788/)\n - [ ] [La complessa geopolitica delle VPN](https://www.guerredirete.it/la-complessa-geopolitica-delle-vpn/)\n - [ ] [Detection engineering at scale: one step closer (part three)](https://blog.sekoia.io/detection-engineering-at-scale-one-step-closer-part-three/)\n - [ ] [Strategia Zero Trust, proviamo a capire meglio di cosa si tratta](https://www.cybersecurity360.it/outlook/strategia-zero-trust-proviamo-a-capire-meglio-di-cosa-si-tratta/)\n - [ ] [EvilLoader: Unpatched Telegram for Android Vulnerability Disclosed](https://www.mobile-hacker.com/2025/03/05/evilloader-unpatched-telegram-for-android-vulnerability-disclosed/)\n - [ ] [Tales of Advertising Abuse: Affiliate Brand Bidding](https://bfore.ai/tales-of-advertising-abuse-affiliate-brand-bidding/)\n - [ ] [Fake BianLian ransom notes mailed to US CEOs in postal mail scam](https://www.bleepingcomputer.com/news/security/fake-bianlian-ransom-notes-mailed-to-us-ceos-in-postal-mail-scam/)\n- DEF CON Announcements!\n - [ ] [DEF CON 33 Theme Drop!](https://defcon.org/html/defcon-33/dc-33-theme.html)\n - [ ] [Pre-reg for DEF CON 33 opens 3/5!](https://shop.defcon.org/products/def-con-33-ticket)\n- Securityinfo.it\n - [ ] [Gli scammer di PayPal sfruttano Docusign per inviare email di phishing](https://www.securityinfo.it/2025/03/05/gli-scammer-di-paypal-sfruttano-docusign-per-inviare-email-di-phishing/?utm_source=rss&utm_medium=rss&utm_campaign=gli-scammer-di-paypal-sfruttano-docusign-per-inviare-email-di-phishing)\n- bellingcat\n - [ ] [The Story of a Storm – Part 1: Visualising Climate Data with NASA’s Giovanni Tool](https://www.bellingcat.com/resources/how-tos/2025/03/05/the-story-of-a-storm-part-1-visualising-climate-data-with-nasas-giovanni-tool/)\n- Arturo Di Corinto\n - [ ] [Stipendi non pagati: giornalisti Dire in sciopero. Il comunicato](https://dicorinto.it/associazionismo/stipendi-non-pagati-giornalisti-dire-domani-in-sciopero-il-comunicato/)\n- ICT Security Magazine\n - [ ] [Cybersecurity Italia 2025: Minacce APT, Ransomware e Attacchi Statali in aumento secondo la Relazione sulla Sicurezza Nazionale](https://www.ictsecuritymagazine.com/notizie/cybersecurity-italia-2025/)\n - [ ] [L’attacco Bybit, il paradosso delle soluzioni decentralizzate in un’infrastruttura centralizzata](https://www.ictsecuritymagazine.com/articoli/attacco-bybit-cybercrime/)\n - [ ] [IA Gen: Potenziali Strategie di Mitigazione](https://www.ictsecuritymagazine.com/articoli/mitigazione-ia-gen/)\n- Desync InfoSec\n - [ ] [reCAPTCHA Phishing: Ι Am Nοt A Rοbοt, Are You?](https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489202&idx=1&sn=089ad3e5762ec80d69be559db94b4bec&chksm=c27f651cf508ec0a0cb5d6cafbeeff4769af89db36444bd9393b4e78aa873845e78d2a4fa246&scene=58&subscene=0#rd)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [ISC Stormcast For Wednesday, March 5th, 2025 https://isc.sans.edu/podcastdetail/9350, (Wed, Mar 5th)](https://isc.sans.edu/diary/rss/31740)\n- Schneier on Security\n - [ ] [CISA Identifies Five New Vulnerabilities Currently Being Exploited](https://www.schneier.com/blog/archives/2025/03/cisa-identifies-five-new-vulnerabilities-currently-being-exploited.html)\n- Posts By SpecterOps Team Members - Medium\n - [ ] [Fueling the Fight Against Identity Attacks](https://posts.specterops.io/fueling-the-fight-against-identity-attacks-1c899f7356e4?source=rss----f05f8696e3cc---4)\n- Rasta Mouse\n - [ ] [Kerberoasting w/o the TGS-REQ](https://rastamouse.me/kerberoasting-without-tgs-reqs/)\n- Deep Web\n - [ ] [Sites on dark.fail on january 2023](https://www.reddit.com/r/deepweb/comments/1j44b4j/sites_on_darkfail_on_january_2023/)\n - [ ] [What's a good site for I.d. number generator?](https://www.reddit.com/r/deepweb/comments/1j3vtsr/whats_a_good_site_for_id_number_generator/)\n- Security Affairs\n - [ ] [China-linked APT Silk Typhoon targets IT Supply Chain](https://securityaffairs.com/174962/apt/china-linked-apt-silk-typhoon-targets-it-supply-chain.html)\n - [ ] [Hunters International gang claims the theft of 1.4 TB of data allegedly stolen from Tata Technologies](https://securityaffairs.com/174953/data-breach/ransomware-group-hunters-international-claims-to-have-hacked-tata-technologies.html)\n - [ ] [New Eleven11bot botnet infected +86K IoT devices](https://securityaffairs.com/174941/malware/new-eleven11bot-botnet-infected-86k-iot-devices.html)\n - [ ] [Polish Space Agency POLSA disconnected its network following a cyberattack](https://securityaffairs.com/174930/security/polish-space-agency-polsa-disconnected-its-network-following-a-cyberattack.html)\n - [ ] [U.S. CISA adds Linux kernel and VMware ESXi and Workstation flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/174923/security/u-s-cisa-adds-linux-kernel-and-vmware-esxi-and-workstation-flaws-to-its-known-exploited-vulnerabilities-catalog.html)\n- Information Security\n - [ ] [Ever Noticed How No One Talks About Burnout in Cybersecurity?](https://www.reddit.com/r/Information_Security/comments/1j41km1/ever_noticed_how_no_one_talks_about_burnout_in/)\n - [ ] [Malware Traffic Analysis in Linux: A Practical Guide with Examples](https://www.reddit.com/r/Information_Security/comments/1j44jjc/malware_traffic_analysis_in_linux_a_practical/)\n- Computer Forensics\n - [ ] [What do you do to help you not struggle finding answers?](https://www.reddit.com/r/computerforensics/comments/1j3t8m4/what_do_you_do_to_help_you_not_struggle_finding/)\n - [ ] [VMWare Workstation / Axiom Process](https://www.reddit.com/r/computerforensics/comments/1j3zuh9/vmware_workstation_axiom_process/)\n- Blackhat Library: Hacking techniques and research\n - [ ] [How Did \"Cloaked\" Do This? You call and they respond with the last 4 digits of your SSN. Any data vendors come to mind?](https://www.reddit.com/r/blackhat/comments/1j45v03/how_did_cloaked_do_this_you_call_and_they_respond/)\n - [ ] [Need gmail accounts](https://www.reddit.com/r/blackhat/comments/1j42meg/need_gmail_accounts/)\n- Social Engineering\n - [ ] [Psyops EXPOSED: Watch How They Try To Manipulate You!](https://www.reddit.com/r/SocialEngineering/comments/1j3rahv/psyops_exposed_watch_how_they_try_to_manipulate/)\n- Deeplinks\n - [ ] [Trump Calls On Congress To Pass The “Take It Down” Act—So He Can Censor His Critics](https://www.eff.org/deeplinks/2025/03/trump-calls-congress-pass-overbroad-take-it-down-act-so-he-can-use-it-censor)\n- Graham Cluley\n - [ ] [Cactus ransomware: what you need to know](https://www.tripwire.com/state-of-security/cactus-ransomware-what-you-need-know)\n - [ ] [Fake police call cryptocurrency investors to steal their funds](https://www.bitdefender.com/en-us/blog/hotforsecurity/fake-police-call-cryptocurrency-investors-to-steal-their-funds)\n- The Hacker News\n - [ ] [China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access](https://thehackernews.com/2025/03/china-linked-silk-typhoon-expands-cyber.html)\n - [ ] [Defending against USB drive attacks with Wazuh](https://thehackernews.com/2025/03/defending-against-usb-drive-attacks.html)\n - [ ] [Dark Caracal Uses Poco RAT to Target Spanish-Speaking Enterprises in Latin America](https://thehackernews.com/2025/03/dark-caracal-uses-poco-rat-to-target.html)\n - [ ] [Google Rolls Out AI Scam Detection for Android to Combat Conversational Fraud](https://thehackernews.com/2025/03/google-rolls-out-ai-scam-detection-for.html)\n - [ ] [Chinese APT Lotus Panda Targets Governments With New Sagerunex Backdoor Variants](https://thehackernews.com/2025/03/chinese-apt-lotus-panda-targets.html)\n - [ ] [Identity: The New Cybersecurity Battleground](https://thehackernews.com/2025/03/identity-new-cybersecurity-battleground.html)\n - [ ] [Seven Malicious Go Packages Found Deploying Malware on Linux and macOS Systems](https://thehackernews.com/2025/03/seven-malicious-go-packages-found.html)\n- Technical Information Security Content & Discussion\n - [ ] [EvilLoader: Yesterday was published PoC for unpatched Vulnerability affecting Telegram for Android](https://www.reddit.com/r/netsec/comments/1j3y1kl/evilloader_yesterday_was_published_poc_for/)\n - [ ] [Case Study: Traditional CVSS scoring missed this actively exploited vulnerability (CVE-2024-50302)](https://www.reddit.com/r/netsec/comments/1j3tvof/case_study_traditional_cvss_scoring_missed_this/)\n - [ ] [Multiple backdoors injected using frontend JS](https://www.reddit.com/r/netsec/comments/1j454ff/multiple_backdoors_injected_using_frontend_js/)\n - [ ] [Case Study: Analyzing macOS IONVMeFamily Driver Denial of Service Issue](https://www.reddit.com/r/netsec/comments/1j42l89/case_study_analyzing_macos_ionvmefamily_driver/)\n - [ ] [New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails](https://www.reddit.com/r/netsec/comments/1j3riyc/new_method_to_leverage_unsafe_reflection_and/)\n - [ ] [Understanding and Mitigating TOCTOU Vulnerabilities in C# Applications](https://www.reddit.com/r/netsec/comments/1j42koq/understanding_and_mitigating_toctou/)\n- Your Open Hacker Community\n - [ ] [Technical breakdown of notable cyber attack](https://www.reddit.com/r/HowToHack/comments/1j44b0m/technical_breakdown_of_notable_cyber_attack/)\n - [ ] [NOC Analyst wanting to get into Hacking](https://www.reddit.com/r/HowToHack/comments/1j4c7bx/noc_analyst_wanting_to_get_into_hacking/)\n - [ ] [How to pentest](https://www.reddit.com/r/HowToHack/comments/1j4ax83/how_to_pentest/)\n - [ ] [Ethical Question](https://www.reddit.com/r/HowToHack/comments/1j4e49e/ethical_question/)\n - [ ] [Hey everyone I'm a beginner how do i start (wannabe a white hat hacker)](https://www.reddit.com/r/HowToHack/comments/1j4e689/hey_everyone_im_a_beginner_how_do_i_start_wannabe/)\n - [ ] [RAR5 encrypted .rar file’s password forgot](https://www.reddit.com/r/HowToHack/comments/1j3xfoa/rar5_encrypted_rar_files_password_forgot/)\n - [ ] [Recover Twitter Account](https://www.reddit.com/r/HowToHack/comments/1j40uza/recover_twitter_account/)\n - [ ] [How do you ask a question?](https://www.reddit.com/r/HowToHack/comments/1j3xc8d/how_do_you_ask_a_question/)\n - [ ] [Can I hack an email?](https://www.reddit.com/r/HowToHack/comments/1j3x7h2/can_i_hack_an_email/)\n - [ ] [[ Removed by Reddit ]](https://www.reddit.com/r/HowToHack/comments/1j3w711/removed_by_reddit/)\n - [ ] [Question](https://www.reddit.com/r/HowToHack/comments/1j3tnu0/question/)\n - [ ] [I wanna get into hacking](https://www.reddit.com/r/HowToHack/comments/1j3qqgg/i_wanna_get_into_hacking/)\n - [ ] [Where can i find marketplace to buy cheats , for fps games like pub G , free fire ?](https://www.reddit.com/r/HowToHack/comments/1j3s232/where_can_i_find_marketplace_to_buy_cheats_for/)\n"}, "aedaebcc7e63e85c869fe33950341c4d7a99888d": {"t": 1785772241.679195, "n": 44046, "h": "31b248139792fa2a", "c": "# 每日安全资讯（2025-03-06）\n\n- Trustwave Blog\n - [ ] [The Microsoft Security Score: The Future Benchmark of Enterprise Security and Trust](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/the-microsoft-security-score-the-future-benchmark-of-enterprise-security-and-trust/)\n- SecWiki News\n - [ ] [SecWiki News 2025-03-05 Review](http://www.sec-wiki.com/?2025-03-05)\n- Security Boulevard\n - [ ] [Ransomware Attack Ends a 150 Year Company](https://securityboulevard.com/2025/03/ransomware-attack-ends-a-150-year-company/?utm_source=rss&utm_medium=rss&utm_campaign=ransomware-attack-ends-a-150-year-company)\n - [ ] [DEF CON 32 – War Stories – Stranger In A Changed Land](https://securityboulevard.com/2025/03/def-con-32-war-stories-stranger-in-a-changed-land/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-war-stories-stranger-in-a-changed-land)\n - [ ] [Apple vs. UK — ADP E2EE Back Door Faceoff](https://securityboulevard.com/2025/03/apple-appeals-uk-adp-richixbw/?utm_source=rss&utm_medium=rss&utm_campaign=apple-appeals-uk-adp-richixbw)\n - [ ] [Randall Munroe’s XKCD ‘RNA’](https://securityboulevard.com/2025/03/randall-munroes-xkcd-rna/?utm_source=rss&utm_medium=rss&utm_campaign=randall-munroes-xkcd-rna)\n - [ ] [Anti-detect browser analysis: How to detect the Undetectable browser?](https://securityboulevard.com/2025/03/anti-detect-browser-analysis-how-to-detect-the-undetectable-browser/?utm_source=rss&utm_medium=rss&utm_campaign=anti-detect-browser-analysis-how-to-detect-the-undetectable-browser)\n - [ ] [Fueling the Fight Against Identity Attacks](https://securityboulevard.com/2025/03/fueling-the-fight-against-identity-attacks/?utm_source=rss&utm_medium=rss&utm_campaign=fueling-the-fight-against-identity-attacks)\n - [ ] [7 container security best practices](https://securityboulevard.com/2025/03/7-container-security-best-practices/?utm_source=rss&utm_medium=rss&utm_campaign=7-container-security-best-practices)\n - [ ] [The Rise of Digital Passports: Navigating the Security Implications](https://securityboulevard.com/2025/03/the-rise-of-digital-passports-navigating-the-security-implications/?utm_source=rss&utm_medium=rss&utm_campaign=the-rise-of-digital-passports-navigating-the-security-implications)\n - [ ] [MixMode Uncovers Nation-State Attacks, Insider Threats, and Regulatory Risks in Critical Infrastructure Environment within 3 Days of Deployment](https://securityboulevard.com/2025/03/mixmode-uncovers-nation-state-attacks-insider-threats-and-regulatory-risks-in-critical-infrastructure-environment-within-3-days-of-deployment/?utm_source=rss&utm_medium=rss&utm_campaign=mixmode-uncovers-nation-state-attacks-insider-threats-and-regulatory-risks-in-critical-infrastructure-environment-within-3-days-of-deployment)\n - [ ] [DEF CON 32 – War Stories – Breaking Network Crypto In Popular Chinese Keyboard Apps](https://securityboulevard.com/2025/03/def-con-32-war-stories-breaking-network-crypto-in-popular-chinese-keyboard-apps/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-war-stories-breaking-network-crypto-in-popular-chinese-keyboard-apps)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [Teachers Record Management System 2.1 SQL Injection](https://cxsecurity.com/issue/WLB-2025030007)\n - [ ] [OpenPanel 0.3.4 Remote Code Execution](https://cxsecurity.com/issue/WLB-2025030006)\n - [ ] [Webmin RCE Leading to Privilege Escalation](https://cxsecurity.com/issue/WLB-2025030005)\n - [ ] [IdoDesigns - Multiple Vulnerabilities](https://cxsecurity.com/issue/WLB-2025030004)\n- Recent Commits to cve:main\n - [ ] [Update Wed Mar 5 20:29:28 UTC 2025](https://github.com/trickest/cve/commit/e3528693a6ed8a3ceccbd087696de98e5e516bf5)\n - [ ] [Update Wed Mar 5 12:31:52 UTC 2025](https://github.com/trickest/cve/commit/af86cc2f56298905cb5a0776fca9346e6cb8fe9a)\n - [ ] [Update Wed Mar 5 04:28:47 UTC 2025](https://github.com/trickest/cve/commit/637674a34749a5842f181c9e3ea4ef5935e955fe)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [新型恶意软件猛攻 4000 多家 ISP，从而实现远程入侵](https://www.4hou.com/posts/gyKr)\n- 奇安信攻防社区\n - [ ] [.Net Core下的内存马](https://forum.butian.net/share/4173)\n- obaby@mars\n - [ ] [再谈 Python自动生成 pdf 文件](https://h4ck.org.cn/2025/03/19568)\n- Microsoft Security Blog\n - [ ] [Silk Typhoon targeting IT supply chain](https://www.microsoft.com/en-us/security/blog/2025/03/05/silk-typhoon-targeting-it-supply-chain/)\n- InfoSec Write-ups - Medium\n - [ ] [6 Best AI Website Builders of 2025 — Which One is Right for You?](https://infosecwriteups.com/best-ai-website-builders-2025-cd8fb61a6e45?source=rss----7b722bfd1b8d---4)\n - [ ] [Bypass WAF Cloudflare RXSS | Hackerone](https://infosecwriteups.com/bypass-waf-cloudflare-rxss-hackerone-c12c57809ad6?source=rss----7b722bfd1b8d---4)\n - [ ] [Finding jwt tokens that lead to PII data leakage.](https://infosecwriteups.com/finding-jwt-tokens-that-lead-to-pii-data-leakage-b047d45d97bf?source=rss----7b722bfd1b8d---4)\n - [ ] [Penetration testing a Kubernetes environment](https://infosecwriteups.com/penetration-testing-a-kubernetes-environment-72719f9e1010?source=rss----7b722bfd1b8d---4)\n - [ ] [SURIKATA: Stopping Insider Threats Before They Strike](https://infosecwriteups.com/surikata-stopping-insider-threats-before-they-strike-17c2174cafe7?source=rss----7b722bfd1b8d---4)\n - [ ] [Able to create an account without a phone number. (unique bug)](https://infosecwriteups.com/able-to-create-an-account-without-a-phone-number-unique-bug-1fe2d14b9d54?source=rss----7b722bfd1b8d---4)\n - [ ] [SSRF steals EC2 tokens](https://infosecwriteups.com/ssrf-steals-ec2-tokens-d6f46835286e?source=rss----7b722bfd1b8d---4)\n - [ ] [Find new apex domains that are related to your bug bounty target.](https://infosecwriteups.com/find-new-apex-domains-that-are-related-to-your-bug-bounty-target-a05fdcbf5875?source=rss----7b722bfd1b8d---4)\n - [ ] [A Logical Bug That Slipped Through](https://infosecwriteups.com/a-logical-bug-that-slipped-through-792b90850e72?source=rss----7b722bfd1b8d---4)\n- Doonsec's feed\n - [ ] [秦安：东方集团造假付惨重代价，普通股民不陪绑，赔偿制度要跟上](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650477233&idx=1&sn=231cba11555843c257e219e4218fa64d)\n - [ ] [牟林：美俄在乌克兰的冲突谁赢了？](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650477233&idx=2&sn=ab58e715c08158a70dbcbd350cc8ef31)\n - [ ] [牟林：斯塔默负责落实特朗普指示精神时泽连斯基和特朗普吵架了](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650477233&idx=3&sn=038e62e50f303c72c59cfd458311f84a)\n - [ ] [reCAPTCHA Phishing:xa0Ι Am Nοt A Rοbοt, Are You?](https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489202&idx=1&sn=089ad3e5762ec80d69be559db94b4bec)\n - [ ] [2025年小道消息？大学生天崩开局！](https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538969&idx=1&sn=42317327f884b1292137a07f173b1729)\n - [ ] [2025年勒索软件新威胁：新兴组织崛起，安全形势告急！](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=1&sn=c4d11e559015b3b012434ee7641d7b49)\n - [ ] [【干货】笑傲职场的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=2&sn=cba7d1395b0bf7ecea48dff5c7b43da2)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=3&sn=a7ad047e393eff87d97bf424c6478d57)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=4&sn=adcb7a529cfc5f14f9a89735577197cc)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=5&sn=390e507478f0be7b62df0f271b9ddb5e)\n - [ ] [某节技术专家，刚清空工位，恶心到了。](https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491177&idx=1&sn=99ff2768ccc8268f2d612c1dfb6bc036)\n - [ ] [通过 iOS 应用程序中的 Deep Links 利用未经过滤的 URL Handling 和 SQL 注入](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487558&idx=1&sn=86afccba855a95902d9347cb9ed9c870)\n - [ ] [定制你的 Mac Studio](https://mp.weixin.qq.com/s?__biz=MzIyNDg2MDQ4Ng==&mid=2247486654&idx=1&sn=afb3aeca7e0f85e1952220d5f6c56e59)\n - [ ] [网络安全人士必知的黑客工具NanoCore](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490547&idx=1&sn=1574d0459983605de74bc81d8fdc82b5)\n - [ ] [专家解读 | 构建全国一体化公共数据资源登记平台 推动数据要素市场高质量发展](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=1&sn=10e68f771f25102581731d92ae63471f)\n - [ ] [两部委发布智能网联汽车准入召回通知，要求落实密码应用规定](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=2&sn=621c90a3fee7a8d71cfc55f259e19719)\n - [ ] [领先谷歌六个数量级！我国再创全球量子计算优越性里程碑，比超算快10的15次方倍](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=3&sn=9f93b810c1c2f55332cf1690e28fe850)\n - [ ] [最新黑产技术曝光，只需19分钟即可劫持AI大模型](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=4&sn=23dbc83e5257ec1639e7e677d40dbc93)\n - [ ] [2025必看！软考网络工程师值不值得冲？考完竟然有这么多隐藏福利！](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247528456&idx=1&sn=f42ee963aa8855e5259979cf427fc741)\n - [ ] [记一次小程序漏洞打包](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=1&sn=141b292fc69ff9d745e021ad98999ec2)\n - [ ] [SRC挖掘 | fastjson反序列化漏洞实战](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=2&sn=a4481e4d2263583ccf6816d48497e8a7)\n - [ ] [近期暗网 0day 售卖情报预警](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=3&sn=e70df2122c3094a8037fd3096b81ed74)\n - [ ] [车载Android系统破解工具和漏洞挖掘浅析](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=4&sn=e6dd20d2247732b0e5e73f6e9ae93343)\n - [ ] [坤舆 - 更高效的企业资产收集](https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486620&idx=1&sn=29800656c4390f4137abb6b2c749fb2f)\n - [ ] [IPv4 vs IPv6：你真的了解它们的区别吗？](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649465873&idx=1&sn=a97412aaab165218d45d90168d41eca5)\n - [ ] [HVV 行动，项目招聘！！！](https://mp.weixin.qq.com/s?__biz=Mzk0NDQwMDY1Nw==&mid=2247486039&idx=1&sn=169dd0fec4d90cea1ab8738dbc051e35)\n - [ ] [DeepSeek原理和落地应用](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655268998&idx=1&sn=fcd085d254c624b50fd88bcb942dfff6)\n - [ ] [rust第二季-加密网络通信高级开发视频教程(2025最新)更新到第6节了](https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247505344&idx=1&sn=6159cddf33ad74f1c82ee2098334b918)\n - [ ] [漏洞预警 | VMware ESXi 存在缓冲区溢出漏洞（CVE-2025-22224）](https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487022&idx=1&sn=be6d4d80fd50ee781458871cfc1eef6f)\n - [ ] [深度伪造技术的滥用——网络安全的新挑战](https://mp.weixin.qq.com/s?__biz=Mzg4MjY5MDE4NA==&mid=2247486159&idx=1&sn=8ca047afb453ddd53926938b033f0279)\n- Blog – Red Siege Information Security\n - [ ] [Regex: Simplicity, Security, and Power](https://redsiege.com/blog/2025/03/regex-simplicity-security-and-power/)\n- Hacking Dream\n - [ ] [Understanding Kerberos Authentication and its Attacks](https://www.hackingdream.net/2025/03/understanding-kerberos-authentication-and-its-attacks.html)\n- SpiderLabs Blog\n - [ ] [The Russia-Ukraine Cyber War Part 3: Attacks on Telecom and Critical Infrastructure](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/the-russia-ukraine-cyber-war-part-3-attacks-on-telecom-and-critical-infrastructure/)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [Finding jwt tokens that lead to PII data leakage.](https://infosecwriteups.com/finding-jwt-tokens-that-lead-to-pii-data-leakage-b047d45d97bf?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Able to create an account without a phone number. (unique bug)](https://infosecwriteups.com/able-to-create-an-account-without-a-phone-number-unique-bug-1fe2d14b9d54?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Find new apex domains that are related to your bug bounty target.](https://infosecwriteups.com/find-new-apex-domains-that-are-related-to-your-bug-bounty-target-a05fdcbf5875?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [A Logical Bug That Slipped Through](https://infosecwriteups.com/a-logical-bug-that-slipped-through-792b90850e72?source=rss----7b722bfd1b8d--bug_bounty)\n- Horizon3.ai\n - [ ] [Identify Cybersecurity Risks at Scale to De-Risk M&A Transactions with Horizon3.ai’s NodeZero® Platform](https://www.horizon3.ai/downloads/use-case/identify-cybersecurity-risks-at-scale-to-de-risk-ma-transactions-with-horizon3-ais-nodezero-platform/)\n- Securelist\n - [ ] [Undercover miner: how YouTubers get pressed into distributing SilentCryptoMiner as a restriction bypass tool](https://securelist.com/silentcryptominer-spreads-through-blackmail-on-youtube/115788/)\n- Didier Stevens\n - [ ] [Update: zoneidentifier.exe Version 0.0.2](https://blog.didierstevens.com/2025/03/05/update-zoneidentifier-exe-version-0-0-2/)\n- Reverse Engineering\n - [ ] [Zen and the Art of Microcode Hacking](https://www.reddit.com/r/ReverseEngineering/comments/1j4cv9f/zen_and_the_art_of_microcode_hacking/)\n - [ ] [GoStringUngarbler: Deobfuscating Strings in Garbled Binaries](https://www.reddit.com/r/ReverseEngineering/comments/1j48mqn/gostringungarbler_deobfuscating_strings_in/)\n - [ ] [Deobfuscation with rev.ng](https://www.reddit.com/r/ReverseEngineering/comments/1j4bwc7/deobfuscation_with_revng/)\n- Malwarebytes\n - [ ] [I spoke to a task scammer. Here’s how it went](https://www.malwarebytes.com/blog/news/2025/03/i-spoke-to-a-task-scammer-heres-how-it-went)\n - [ ] [Android zero-day vulnerabilities actively abused. Update as soon as you can](https://www.malwarebytes.com/blog/news/2025/03/android-zero-day-vulnerabilities-actively-abused-update-as-soon-as-you-can)\n- 绿盟科技技术博客\n - [ ] [绿盟威胁情报周报2025年第08周（2025.02.24-2025.03.02）](https://blog.nsfocus.net/2025-02-24-2025-03-02/)\n - [ ] [Ollama配置不当未授权访问漏洞（CNVD-2025-04094）](https://blog.nsfocus.net/cnvd-2025-04094/)\n - [ ] [VMware ESXi&Workstation&Fusion多个高危漏洞 (CVE-2025-22224/CVE-2025-22225/CVE-2025-22226)](https://blog.nsfocus.net/cve-2025-22224-cve-2025-22225-cve-2025-22226/)\n- FreeBuf网络安全行业门户\n - [ ] [FreeBuf早报 | 2025 OWSAP LLM TOP10关键变化；社交媒体成恶意攻击主要目标](https://www.freebuf.com/news/423637.html)\n - [ ] [汇正财经广纳贤才：信息安全官，虚位以待！](https://www.freebuf.com/jobs/423631.html)\n - [ ] [近期暗网 0day 售卖情报预警](https://www.freebuf.com/news/423624.html)\n - [ ] [WordPress曝9.8分高危漏洞，可执行远程代码攻击](https://www.freebuf.com/vuls/423693.html)\n - [ ] [CISA警告VMware漏洞正遭积极利用，敦促企业立即修补](https://www.freebuf.com/vuls/423684.html)\n - [ ] [Vim 编辑器漏洞：恶意 TAR 文件触发代码执行风险](https://www.freebuf.com/vuls/423695.html)\n- 安全牛\n - [ ] [智能化安全运营时代，安全分析师需要扮演好三个新角色](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135371&idx=1&sn=09830c406c7369f6c1ef77590b1ee2f2&chksm=bd15ad588a62244e2fc1b6285ef43be628c0b8a2e8e98cc233abc63ecdeee97cec1cda980986&scene=58&subscene=0#rd)\n - [ ] [工信部CSTIS提醒：防范Murdoc_Botnet僵尸网络的风险；谷歌修复两个已被利用的Android零日漏洞 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135371&idx=2&sn=6a4ed653f5f735d427b6b4b80a73c605&chksm=bd15ad588a62244e67295291773f1dfcf10039ea37bc7ec7363949d7f90676247858568f2c95&scene=58&subscene=0#rd)\n- HackerNews\n - [ ] [谷歌推出“屏蔽邮件”功能，用户可隐藏邮箱地址](https://hackernews.cc/archives/57685)\n - [ ] [新型 Eleven11bot 僵尸网络感染 86,000 台设备，用于 DDoS 攻击](https://hackernews.cc/archives/57681)\n - [ ] [思科、日立、微软和 Progress 漏洞遭积极利用，CISA 发出警报](https://hackernews.cc/archives/57679)\n - [ ] [中美超过4,000个ISP IP地址遭暴力破解攻击，黑客植入恶意软件](https://hackernews.cc/archives/57677)\n - [ ] [疑似伊朗黑客利用受感染的印度公司邮箱攻击阿联酋航空业](https://hackernews.cc/archives/57670)\n - [ ] [Broadcom 发布紧急补丁修复 VMware 安全漏洞](https://hackernews.cc/archives/57668)\n - [ ] [研究人员将 CACTUS 勒索软件的战术与前 Black Basta 附属机构联系起来](https://hackernews.cc/archives/57665)\n- 安全分析与研究\n - [ ] [UEFI BootKit恶意软件狩猎技术](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490899&idx=1&sn=ac54b3c578d2f70f2c7c75b4609c4906&chksm=902fb27ba7583b6de45783544044400daffb356939e6e5bbd3a7d5c45218f14bd53d2a58a402&scene=58&subscene=0#rd)\n- 绿盟科技CERT\n - [ ] [【漏洞通告】VMware ESXi&Workstation&Fusion多个高危漏洞](https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489028&idx=1&sn=2093ce6762f3251c9e9d9b6de632ad98&chksm=c2c6410ff5b1c819362fdf10a6e0acbea0001f6ca2dd2cdbac4ca1496af3aeda46869a3fa4dc&scene=58&subscene=0#rd)\n - [ ] [【已支持识别检测】Ollama配置不当未授权访问漏洞（CNVD-2025-04094）](https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489028&idx=2&sn=acdcd9105653b3dfe1eb03d48cf3bdd3&chksm=c2c6410ff5b1c819fcc80c2c0b6d4fa2175d93cb297e3e64fdb828b5d143815241270699ea7e&scene=58&subscene=0#rd)\n- 奇安信 CERT\n - [ ] [【已发现在野利用】VMware ESXi多个高危漏洞安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503073&idx=1&sn=6769c38d6b37afb2cecf671963dff742&chksm=fe79e879c90e616f8d3bc3f16b6ef82738e3618fb4be9584f97a3f0b6c743197970c469212d0&scene=58&subscene=0#rd)\n- 红日安全\n - [ ] [hvv时间已来？可以参加的小伙伴们抓紧时间填报信息了](https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851814&idx=1&sn=add5eaf6c4687f3fd9c5de8f4a9b2142&chksm=f3e4e925c4936033dc1e53d34158b42cff2eef78c2dfca7ffb0d85f3dbe12add485a763a1fd9&scene=58&subscene=0#rd)\n- 安全内参\n - [ ] [AI换脸攻击激增300%！你视频会议里的领导同事可能都是伪造的](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513884&idx=1&sn=d0516b584c52d648aeaf38847d9449fb&chksm=ebfaf03cdc8d792aca4d2afe5477c35c5d867fb8221fad6f636899956a4a6fe89f15de3a9181&scene=58&subscene=0#rd)\n - [ ] [特朗普网络团队任命预示美国政府将转向进攻性网络政策](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513884&idx=2&sn=54105096f2781e325925f6d29c22481f&chksm=ebfaf03cdc8d792a3052b190ce1c1f1a38b006b342aec29475948ee52952c655bb0b30870700&scene=58&subscene=0#rd)\n- 长亭安全应急响应中心\n - [ ] [【风险提示】VMware ESXi新型漏洞利用链已出现在野利用](https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492725&idx=1&sn=de0f08e06363a7386f762ff89911fa2f&chksm=96f7fb18a180720ebf4fc3a9847cbae47c513332d35b81c4111e4bb0b4cbbdfc8b40446bbfb0&scene=58&subscene=0#rd)\n- dotNet安全矩阵\n - [ ] [.NET 实战中使用 Sharp4FUAC 通过 Windows 白名单文件绕过 UAC 实现本地权限提升](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499055&idx=1&sn=9774cc140fd8036509026fd4f651e291&chksm=fa5953c2cd2edad4f7ad902f6db3030a1c38dc3448adf89e328573959813ede260b1cfc28022&scene=58&subscene=0#rd)\n - [ ] [.NET 内网攻防实战电子报刊](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499055&idx=2&sn=33bd494fa1a2ae6e8fd46bbdf1f97623&chksm=fa5953c2cd2edad46803a2311a5b86f83803307fd2f14d710fab25105ad43a52b0fbe472bca2&scene=58&subscene=0#rd)\n - [ ] [2025年2月份红队武器库和资源汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499055&idx=3&sn=e8afa902aa37df3a81977d2c668b57d6&chksm=fa5953c2cd2edad40887201edf2391f19053ae6cf7222e5fdac2ab8278001cf6a4a01a02b154&scene=58&subscene=0#rd)\n- 慢雾科技\n - [ ] [浏览器钱包扩展突遭损坏，如何化险为夷？](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501374&idx=1&sn=81df5175deaa669dbde4c2ceadf8ca9d&chksm=fddeb8b9caa931af5d15205313b3ed53bdbfc446c9a96aaaf6d87ac587f8dfe4d254794d80ae&scene=58&subscene=0#rd)\n- 天御攻防实验室\n - [ ] [军事专家建议组建俄罗斯网络部队](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486291&idx=1&sn=de04a9abc8fc3aa3cdbf901068da56e2&chksm=fb04c83bcc73412d2290840b2decb87e3d6b715c84faf36f0099426ebf7f13685a6dc571f582&scene=58&subscene=0#rd)\n- 代码卫士\n - [ ] [博通修复3个已遭利用的 VMware 0day 漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522410&idx=1&sn=0f5b704ab0b14c7dd3262ffbc0697b07&chksm=ea94a900dde32016fa789ad6e1cbd205eab3afe70049ad11ab8634e97423249682ce8b5d438a&scene=58&subscene=0#rd)\n - [ ] [思科： Webex 漏洞可导致凭据遭远程访问](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522410&idx=2&sn=0aef267bcd2c2f831a7dedbda98b4668&chksm=ea94a900dde32016f9902d5634144e61cbf559478eaf697cb00cf146b7b4de1bae7a4526be98&scene=58&subscene=0#rd)\n- 全频带阻塞干扰\n - [ ] [SECURITY SHOW 2025 | 揭秘日本最大安防展](https://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648958466&idx=1&sn=7b2e4f2f3053d9d6ad182363ec4862f9&chksm=f09ef17dc7e9786b87a330eb3d1098ff4540be3c78dd7e66e953be27dd35326a5227fba797be&scene=58&subscene=0#rd)\n- 数世咨询\n - [ ] [独家揭秘：如何推进人工智能驱动的安全创新](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537838&idx=1&sn=ac365e194b53bef7a8f6658f4a5ddffd&chksm=c1442613f633af05d5e21efd4e3a12b6b640073e2136d7f0fc15ec732b67384639aef729e20d&scene=58&subscene=0#rd)\n - [ ] [直播预约：数安三人行——Deep Seek爆火背后，大模型如何重塑安全?](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537838&idx=2&sn=efd860d89d0249828150599857bc2d72&chksm=c1442613f633af05e3ae265aaba00be2c68cc8fd8b8a8cbabd1cc5e0463f22ec1bedd4ba76ef&scene=58&subscene=0#rd)\n- 网络空间安全科学学报\n - [ ] [“网络信息系统安全性评测”专题征稿](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505183&idx=1&sn=a0ca19e256ff424a866f8c5d88f6d21c&chksm=e9bfc1a1dec848b706502326fffc620a561bde0f993bc219f060184e064668553ec89c1b7719&scene=58&subscene=0#rd)\n - [ ] [学术前沿 | 一种安全的集群无线网络环境下密钥协商协议](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505183&idx=2&sn=7264c046dbd8515e33d7d93db259c5d5&chksm=e9bfc1a1dec848b76f29f710e1b0d140e5d3e510eb1f8046280b032eafc80ad960afa3300bae&scene=58&subscene=0#rd)\n- 安全研究GoSSIP\n - [ ] [G.O.S.S.I.P 阅读推荐 2025-03-05 LLM是安全的银弹吗？](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499858&idx=1&sn=3ec725428dd98d800860265277c0b941&chksm=c063ee8bf714679df279af8d55dad7ed13acf2739b35dc48f07af3f3851424d5eff24507a663&scene=58&subscene=0#rd)\n- 威胁棱镜\n - [ ] [2024 年 GreyNoise 在野大规模漏洞利用报告](https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247487732&idx=1&sn=e92589cbe79e05ee823759d988b688f9&chksm=c1e9e738f69e6e2e78755af17ee489b1e7fb96a891bbcfce9bf45ac7f7c6592147fafe36832c&scene=58&subscene=0#rd)\n- 安全圈\n - [ ] [【安全圈】最新黑产技术曝光，只需19分钟即可劫持AI大模型](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=1&sn=d8c361d857947b4f7ddd18672093ed23&chksm=f36e75fac419fcec9b98a65660841511b124c3eea8dcdc951f1a23d09cdb9b820e5dcce820c0&scene=58&subscene=0#rd)\n - [ ] [【安全圈】全球 49,000 多个门禁管理系统存在巨大安全漏洞](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=2&sn=cfbab77073fc932a8b466a9586809efc&chksm=f36e75fac419fcecbf602c6a23698a377a6e7431fbf29023fffe68d6c04af74eecaea10c2e0a&scene=58&subscene=0#rd)\n - [ ] [【安全圈】GitHub 大规模恶意软件行动：Redox Stealer盯上游戏玩家与盗版用户](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=3&sn=b6b1eda81cdc868cb996830336a5f909&chksm=f36e75fac419fcece71eeed0e3c426419606644ca9724f292236889f8a42504a83eed17cfba9&scene=58&subscene=0#rd)\n - [ ] [【安全圈】320万用户因恶意浏览器扩展程序遭信息泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=4&sn=101d9a5f9ab1488a2654bb7bdb7ebdf5&chksm=f36e75fac419fcecce7874fa3b39840d9b7cdcb5effc01bffe605c6bb3411b11257c19ce1742&scene=58&subscene=0#rd)\n- 看雪学苑\n - [ ] [从逆向还原的角度探讨x86与x64的异常：32位3代异常处理还原（VS2019）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590532&idx=1&sn=bf6d8a881eb64cc3fe35157d1a015c23&chksm=b18c2dce86fba4d85a84d5d8063ab44a551c4e79c2eb39cb1aec64eb908aa9d6dc372fa01b42&scene=58&subscene=0#rd)\n - [ ] [黑客利用暴露的云凭证，仅19分钟劫持AI大模型](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590532&idx=2&sn=ecd38eda9e2e4bd27eacd184b6bc7d96&chksm=b18c2dce86fba4d87754b0dcc27e9a9d76c6ba04e788bdf59ddaba11d33aa5413536bdc0a1ec&scene=58&subscene=0#rd)\n - [ ] [第22周更新： 反序列化漏洞（三）ThinkPHP反序列链分析 | CTF训练营-Web篇](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590532&idx=3&sn=64c9bf27d9ed81ec82e0506b47b8d3cc&chksm=b18c2dce86fba4d89b9c96e5a591d6a3253d659e5c9cfe03f638e6fda35228fc96840fd97a35&scene=58&subscene=0#rd)\n- 嘶吼专业版\n - [ ] [「职」为你来||嘶吼·来个Offer网安人才招聘社群，正式上线~~](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581408&idx=1&sn=648391a112b5b6a7674f1784e9a1e965&chksm=e9146edade63e7cc69d84a916d3f603dfb539d583b78703541d118f00ed8f1befa044737fa26&scene=58&subscene=0#rd)\n - [ ] [新型恶意软件猛攻 4000 多家 ISP，从而实现远程入侵](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581408&idx=2&sn=4bc77c23c2146af863386ddf099196b4&chksm=e9146edade63e7cce4f3b1292059d9a2917d16de9b8c9a65ee7ed15e6d82a8cbe75e29b0552a&scene=58&subscene=0#rd)\n- XCTF联赛\n - [ ] [TPCTF 2025｜倒计时3天！](https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247515508&idx=1&sn=02603364959caf80ad3d90bd19669d45&chksm=a6874f4e91f0c658727b8298731c7ab6a76246d5105bc21656c30f67f8c7575e09680ae61fca&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [不仅有能用国补的 MacBook Air，还有模型训练神器 Mac Studio](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075084&idx=1&sn=8c796ab839df6e22b2d88af232c3cec4&chksm=7e57cb3a4920422ccd9736d29cb01e3d0a99928c8658dd26edec1a0a1893e43c0759b85ada5c&scene=58&subscene=0#rd)\n - [ ] [月薪 5000，我给人形机器人当「老师」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075060&idx=1&sn=548b9d389884e09a2b97a659c097ce80&chksm=7e57cbc2492042d4d63787f577d4bcd2a094b304a8acc4e37387492495799f77230e89f91250&scene=58&subscene=0#rd)\n - [ ] [字节启动新一轮股票回购，估值增至 3150 亿美元；雷军提议优化新能源车牌；北京举办首届人形机器人马拉松｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075018&idx=1&sn=9243bf414e1b91aae81e75b1c31f3969&chksm=7e57cbfc492042eacf8d98165779353cc104bdaca483248f74b463d7cfa5d3c1a373c3894f09&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [内部邮件截获暴露俄罗斯联邦第243军区重大隐患](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560164&idx=1&sn=ca65cf4a41ce258fc9ab6727ac1147ec&chksm=871178efb066f1f928cdc615843fd4cf7a9fc716cd28d3f223887af893b961a515b242b41a5d&scene=58&subscene=0#rd)\n - [ ] [蒙古国媒体舆论导向转变对我形象及对外传播的影响与应对](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560164&idx=2&sn=6257004cfaeae6e539bdce175857cae2&chksm=871178efb066f1f9349773d3067ea54755683ecc20d6c55309beb1c90e754b14247a271eaff5&scene=58&subscene=0#rd)\n- 京东安全应急响应中心\n - [ ] [【招聘】京东集团信息安全部诚邀各路英雄加入~~](https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727844182&idx=1&sn=e20a71c9e1db4610ef4b27ddb4a1318c&chksm=80504edeb727c7c8154c5b3e5fcdcf1ef620e4f5adccfef95d691ad65b468dde6d214f7e8b44&scene=58&subscene=0#rd)\n- 信息安全国家工程研究中心\n - [ ] [【二十四节气】惊蛰 | 微雨众卉新，一雷惊蛰始。](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498982&idx=1&sn=8ebb87255eb8a623e12a0965736544d7&chksm=feb67df5c9c1f4e3eae7e2ab754bb38f5857db274517388ae13b12b0e9381c8d4dd466f28cd8&scene=58&subscene=0#rd)\n- 字节跳动技术团队\n - [ ] [285 学科全覆盖！豆包大模型团队开源基准测试集 SuperGPQA](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513660&idx=1&sn=df5fb0b249a74acedd46c53acc2031ea&chksm=e9d37ddedea4f4c85d9f6e3e65cceef63401ef6af8c64f93a3156e9d103750719b0c39b14728&scene=58&subscene=0#rd)\n- 黑伞安全\n - [ ] [【风险提示】VMware ESXi新型漏洞利用链已出现在野利用](https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489754&idx=1&sn=57c283962096cbe0ba12fd8927bf9ccf&chksm=fb029582cc751c943a4e53c5a0a3b96e80459f0cb16241c005be5e0baaf9eb80a742f2e3d548&scene=58&subscene=0#rd)\n - [ ] [Deepseek助力职场办公效能提升课程](https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489754&idx=2&sn=db20737721bcb2b35ab909435bf9361f&chksm=fb029582cc751c947abd3e8a0afdc4dc930e0b06ef91cabe77fb6687905a42b660f2aa37f00b&scene=58&subscene=0#rd)\n- 恒脑与AI\n - [ ] [AI数据污染危机：1.2 万个敏感信息藏在训练数据里！](https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496727&idx=1&sn=8695d84c49f42fa2437afa03b34d1c47&chksm=e9fd6986de8ae09031a2407b290039bbdbb278ab755cc0646d71cfc926f7b3a255b08a3dacc6&scene=58&subscene=0#rd)\n- 复旦白泽战队\n - [ ] [成果分享｜ 基于包管理平台的黑帽搜索引擎优化](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247493225&idx=1&sn=530e028915257a6cc30176eb962ebdb7&chksm=fde86217ca9feb01ac5ce8a574c5bdc14b8fb393da7fe2b5c208e65646abaf853004108da14e&scene=58&subscene=0#rd)\n- 墨菲安全\n - [ ] [软件供应链安全行业大佬闭门交流会](https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488096&idx=1&sn=edf79fed7f7ec855c8897bfb9dacf413&chksm=c13d7158f64af84eafbe51b0adee58edcfe4f566ebcdd04f1e1cb14d623922ff9e4da5d18e5e&scene=58&subscene=0#rd)\n- Beacon Tower Lab\n - [ ] [漏洞预警 | VMware ESXi 存在缓冲区溢出漏洞（CVE-2025-22224）](https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487022&idx=1&sn=be6d4d80fd50ee781458871cfc1eef6f&chksm=c22296d7f5551fc1e5006b6bc19fb3b5655ab633f1b0815aae458952101c37baae87d8f56aac&scene=58&subscene=0#rd)\n- 深信服千里目安全技术中心\n - [ ] [【漏洞通告】VMware ESXi 等多款产品缓冲区溢出漏洞(CVE-2025-22224)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524017&idx=1&sn=1eee483c71f1b398696a1d224d767b12&chksm=ce4615a1f9319cb7c52e9731ee8e24dcd9f34b47a048b0a5ff2af0f2bee17afdd1723624ae07&scene=58&subscene=0#rd)\n - [ ] [网络安全信息与动态周报2025年第8期（2月17日-2月23日）](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524017&idx=2&sn=b8f4ca73f0de7cfa0a633ae874442f1a&chksm=ce4615a1f9319cb7cb7d4565af0f113ed51f44565a727dc28232d5d040d9fae39a5160a3fe28&scene=58&subscene=0#rd)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #767: Forensic Lunch Test Kicthen - unit tests and documentation](https://www.hecfblog.com/2025/03/daily-blog-767-forensic-lunch-test.html)\n- 360数字安全\n - [ ] [《人民政协报》报道：以模制模，重塑人工智能安全新范式](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579797&idx=1&sn=ebaf3c9ca6017484870873e659a905ce&chksm=9f8d289da8faa18b2af5ae32ef5bfd4f1419036e392f416f3ec721c61b1860130720f16f7c6d&scene=58&subscene=0#rd)\n- 迪哥讲事\n - [ ] [JS利用](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497222&idx=1&sn=0be4689e2b33beb274758f53874dbdbe&chksm=e8a5fc65dfd2757343626ee228a66b830d831717698d39266b701d9238201a59f07fe2945e54&scene=58&subscene=0#rd)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Così Black Basta e Cactus sfruttano Teams e OneDrive per infiltrarsi nelle reti aziendali](https://www.cybersecurity360.it/news/cosi-black-basta-e-cactus-sfruttano-teams-e-onedrive-per-infiltrarsi-nelle-reti-aziendali/)\n - [ ] [Federal cyber firings imperil efforts to stop Chinese hacking campaigns, experts tell lawmakers](https://therecord.media/federal-cyber-firings-cisa-workforce)\n - [ ] [Two decades of visitor data at the Toronto Zoo stolen in cyberattack](https://therecord.media/toronto-zoo-warns-decades-cyberattack)\n - [ ] [Justice Department Charges 12 Chinese Contract Hackers and Law Enforcement Officers in Global Computer Intrusion Campaigns](https://flashpoint.io/blog/justice-department-charges-12-chinese-contract-hackers-and-law-enforcement-officers-in-global-computer-intrusion-campaigns/)\n - [ ] [Open-source tool 'Rayhunter' helps users detect Stingray attacks](https://www.bleepingcomputer.com/news/security/open-source-tool-rayhunter-helps-users-detect-stingray-attacks/)\n - [ ] [DOJ to appeal court decision ruling broad cell phone tower searches are unconstitutional](https://therecord.media/doj-to-appeal-cell-tower-ruling)\n - [ ] [Catalan court says NSO Group executives can be charged in spyware investigation](https://techcrunch.com/2025/03/05/catalan-court-says-nso-group-executives-can-be-charged-in-spyware-investigation/)\n - [ ] [US charges Chinese nationals in cyberattacks on Treasury, dissidents and more](https://therecord.media/doj-charges-chinese-nationals-isoon-cyberattacks-treasury)\n - [ ] [Silk Typhoon hackers now target IT supply chains to breach networks](https://www.bleepingcomputer.com/news/security/silk-typhoon-hackers-now-target-it-supply-chains-to-breach-networks/)\n - [ ] [Rural hospitals in US need to invest at least $70 million in cybersecurity, Microsoft finds](https://therecord.media/rural-hospitals-need-millions-cyber)\n - [ ] [Trump orders halt to intelligence sharing with Ukraine, CIA director says](https://therecord.media/trump-halt-intel-sharing-ukraine)\n - [ ] [US charges Chinese hackers linked to critical infrastructure breaches](https://www.bleepingcomputer.com/news/security/us-charges-chinese-hackers-linked-to-critical-infrastructure-breaches/)\n - [ ] [La minaccia ibrida fa paura e l’Italia è nel mirino: il rapporto degli 007](https://www.cybersecurity360.it/news/la-minaccia-ibrida-fa-paura-e-litalia-e-nel-mirino-il-rapporto-degli-007/)\n - [ ] [BadBox malware disrupted on 500K infected Android devices](https://www.bleepingcomputer.com/news/security/badbox-malware-disrupted-on-500k-infected-android-devices/)\n - [ ] [DORA, si apre la partita dell’attuazione: ecco come](https://www.cybersecurity360.it/news/dora-si-apre-la-partita-dellattuazione-ecco-come/)\n - [ ] [Ukraine's intel service honors civilian hackers for the first time with military award](https://therecord.media/ukraine-intel-service-honors-civilian-hackers-with-military-award)\n - [ ] [Look up: The new frontier of cyberthreats is in the sky](https://www.bleepingcomputer.com/news/security/look-up-the-new-frontier-of-cyberthreats-is-in-the-sky/)\n - [ ] [YouTube warns of AI-generated video of its CEO used in phishing attacks](https://www.bleepingcomputer.com/news/security/youtube-warns-of-ai-generated-video-of-its-ceo-used-in-phishing-attacks/)\n - [ ] [Gli USA sospendono le operazioni cyber contro la Russia: l’impatto sulla sicurezza nazionale](https://www.cybersecurity360.it/news/sospensione-usa-delleoperazioni-informatiche-contro-la-russia-limpatto-sulla-sicurezza-nazionale/)\n - [ ] [Gli scammer di PayPal sfruttano Docusign per inviare email di phishing](https://www.securityinfo.it/2025/03/05/gli-scammer-di-paypal-sfruttano-docusign-per-inviare-email-di-phishing/)\n - [ ] [Toronto Zoo shares update on last year's ransomware attack](https://www.bleepingcomputer.com/news/security/toronto-zoo-shares-update-on-last-years-ransomware-attack/)\n - [ ] [ACSC Warns of Increasing Ransomware Risks and Offers Key Protection Tips](https://cyble.com/blog/acsc-warns-of-ransomware-risks/)\n - [ ] [February Sees Record-Breaking Ransomware Attacks, New Data Shows](https://cyble.com/blog/february-sees-ransomware-attacks-new-data-shows/)\n - [ ] [November 2024 Cyber Attacks Statistics](https://www.hackmageddon.com/2025/03/05/november-2024-cyber-attacks-statistics/)\n - [ ] [How Transport Company Gets Real-Time IOC and IOB Updates on Active Cyber Attacks](https://any.run/cybersecurity-blog/how-transport-company-monitors-threats/)\n - [ ] [!exploitable Episode Two - Enter the Matrix](https://blog.doyensec.com/2025/02/27/exploitable-sshd.html)\n - [ ] [Undercover miner: how YouTubers get pressed into distributing SilentCryptoMiner as a restriction bypass tool](https://securelist.com/silentcryptominer-spreads-through-blackmail-on-youtube/115788/)\n - [ ] [La complessa geopolitica delle VPN](https://www.guerredirete.it/la-complessa-geopolitica-delle-vpn/)\n - [ ] [Detection engineering at scale: one step closer (part three)](https://blog.sekoia.io/detection-engineering-at-scale-one-step-closer-part-three/)\n - [ ] [Strategia Zero Trust, proviamo a capire meglio di cosa si tratta](https://www.cybersecurity360.it/outlook/strategia-zero-trust-proviamo-a-capire-meglio-di-cosa-si-tratta/)\n - [ ] [EvilLoader: Unpatched Telegram for Android Vulnerability Disclosed](https://www.mobile-hacker.com/2025/03/05/evilloader-unpatched-telegram-for-android-vulnerability-disclosed/)\n - [ ] [Tales of Advertising Abuse: Affiliate Brand Bidding](https://bfore.ai/tales-of-advertising-abuse-affiliate-brand-bidding/)\n - [ ] [Fake BianLian ransom notes mailed to US CEOs in postal mail scam](https://www.bleepingcomputer.com/news/security/fake-bianlian-ransom-notes-mailed-to-us-ceos-in-postal-mail-scam/)\n- DEF CON Announcements!\n - [ ] [DEF CON 33 Theme Drop!](https://defcon.org/html/defcon-33/dc-33-theme.html)\n - [ ] [Pre-reg for DEF CON 33 opens 3/5!](https://shop.defcon.org/products/def-con-33-ticket)\n- Securityinfo.it\n - [ ] [Gli scammer di PayPal sfruttano Docusign per inviare email di phishing](https://www.securityinfo.it/2025/03/05/gli-scammer-di-paypal-sfruttano-docusign-per-inviare-email-di-phishing/?utm_source=rss&utm_medium=rss&utm_campaign=gli-scammer-di-paypal-sfruttano-docusign-per-inviare-email-di-phishing)\n- bellingcat\n - [ ] [The Story of a Storm – Part 1: Visualising Climate Data with NASA’s Giovanni Tool](https://www.bellingcat.com/resources/how-tos/2025/03/05/the-story-of-a-storm-part-1-visualising-climate-data-with-nasas-giovanni-tool/)\n- Arturo Di Corinto\n - [ ] [Stipendi non pagati: giornalisti Dire in sciopero. Il comunicato](https://dicorinto.it/associazionismo/stipendi-non-pagati-giornalisti-dire-domani-in-sciopero-il-comunicato/)\n- ICT Security Magazine\n - [ ] [Cybersecurity Italia 2025: Minacce APT, Ransomware e Attacchi Statali in aumento secondo la Relazione sulla Sicurezza Nazionale](https://www.ictsecuritymagazine.com/notizie/cybersecurity-italia-2025/)\n - [ ] [L’attacco Bybit, il paradosso delle soluzioni decentralizzate in un’infrastruttura centralizzata](https://www.ictsecuritymagazine.com/articoli/attacco-bybit-cybercrime/)\n - [ ] [IA Gen: Potenziali Strategie di Mitigazione](https://www.ictsecuritymagazine.com/articoli/mitigazione-ia-gen/)\n- Desync InfoSec\n - [ ] [reCAPTCHA Phishing: Ι Am Nοt A Rοbοt, Are You?](https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489202&idx=1&sn=089ad3e5762ec80d69be559db94b4bec&chksm=c27f651cf508ec0a0cb5d6cafbeeff4769af89db36444bd9393b4e78aa873845e78d2a4fa246&scene=58&subscene=0#rd)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [ISC Stormcast For Wednesday, March 5th, 2025 https://isc.sans.edu/podcastdetail/9350, (Wed, Mar 5th)](https://isc.sans.edu/diary/rss/31740)\n- Schneier on Security\n - [ ] [CISA Identifies Five New Vulnerabilities Currently Being Exploited](https://www.schneier.com/blog/archives/2025/03/cisa-identifies-five-new-vulnerabilities-currently-being-exploited.html)\n- Posts By SpecterOps Team Members - Medium\n - [ ] [Fueling the Fight Against Identity Attacks](https://posts.specterops.io/fueling-the-fight-against-identity-attacks-1c899f7356e4?source=rss----f05f8696e3cc---4)\n- Rasta Mouse\n - [ ] [Kerberoasting w/o the TGS-REQ](https://rastamouse.me/kerberoasting-without-tgs-reqs/)\n- Deep Web\n - [ ] [Sites on dark.fail on january 2023](https://www.reddit.com/r/deepweb/comments/1j44b4j/sites_on_darkfail_on_january_2023/)\n - [ ] [What's a good site for I.d. number generator?](https://www.reddit.com/r/deepweb/comments/1j3vtsr/whats_a_good_site_for_id_number_generator/)\n- Security Affairs\n - [ ] [China-linked APT Silk Typhoon targets IT Supply Chain](https://securityaffairs.com/174962/apt/china-linked-apt-silk-typhoon-targets-it-supply-chain.html)\n - [ ] [Hunters International gang claims the theft of 1.4 TB of data allegedly stolen from Tata Technologies](https://securityaffairs.com/174953/data-breach/ransomware-group-hunters-international-claims-to-have-hacked-tata-technologies.html)\n - [ ] [New Eleven11bot botnet infected +86K IoT devices](https://securityaffairs.com/174941/malware/new-eleven11bot-botnet-infected-86k-iot-devices.html)\n - [ ] [Polish Space Agency POLSA disconnected its network following a cyberattack](https://securityaffairs.com/174930/security/polish-space-agency-polsa-disconnected-its-network-following-a-cyberattack.html)\n - [ ] [U.S. CISA adds Linux kernel and VMware ESXi and Workstation flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/174923/security/u-s-cisa-adds-linux-kernel-and-vmware-esxi-and-workstation-flaws-to-its-known-exploited-vulnerabilities-catalog.html)\n- Information Security\n - [ ] [Ever Noticed How No One Talks About Burnout in Cybersecurity?](https://www.reddit.com/r/Information_Security/comments/1j41km1/ever_noticed_how_no_one_talks_about_burnout_in/)\n - [ ] [Malware Traffic Analysis in Linux: A Practical Guide with Examples](https://www.reddit.com/r/Information_Security/comments/1j44jjc/malware_traffic_analysis_in_linux_a_practical/)\n- Computer Forensics\n - [ ] [What do you do to help you not struggle finding answers?](https://www.reddit.com/r/computerforensics/comments/1j3t8m4/what_do_you_do_to_help_you_not_struggle_finding/)\n - [ ] [VMWare Workstation / Axiom Process](https://www.reddit.com/r/computerforensics/comments/1j3zuh9/vmware_workstation_axiom_process/)\n- Blackhat Library: Hacking techniques and research\n - [ ] [How Did \"Cloaked\" Do This? You call and they respond with the last 4 digits of your SSN. Any data vendors come to mind?](https://www.reddit.com/r/blackhat/comments/1j45v03/how_did_cloaked_do_this_you_call_and_they_respond/)\n - [ ] [Need gmail accounts](https://www.reddit.com/r/blackhat/comments/1j42meg/need_gmail_accounts/)\n- Social Engineering\n - [ ] [Psyops EXPOSED: Watch How They Try To Manipulate You!](https://www.reddit.com/r/SocialEngineering/comments/1j3rahv/psyops_exposed_watch_how_they_try_to_manipulate/)\n- Deeplinks\n - [ ] [Trump Calls On Congress To Pass The “Take It Down” Act—So He Can Censor His Critics](https://www.eff.org/deeplinks/2025/03/trump-calls-congress-pass-overbroad-take-it-down-act-so-he-can-use-it-censor)\n- Graham Cluley\n - [ ] [Cactus ransomware: what you need to know](https://www.tripwire.com/state-of-security/cactus-ransomware-what-you-need-know)\n - [ ] [Fake police call cryptocurrency investors to steal their funds](https://www.bitdefender.com/en-us/blog/hotforsecurity/fake-police-call-cryptocurrency-investors-to-steal-their-funds)\n- The Hacker News\n - [ ] [China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access](https://thehackernews.com/2025/03/china-linked-silk-typhoon-expands-cyber.html)\n - [ ] [Defending against USB drive attacks with Wazuh](https://thehackernews.com/2025/03/defending-against-usb-drive-attacks.html)\n - [ ] [Dark Caracal Uses Poco RAT to Target Spanish-Speaking Enterprises in Latin America](https://thehackernews.com/2025/03/dark-caracal-uses-poco-rat-to-target.html)\n - [ ] [Google Rolls Out AI Scam Detection for Android to Combat Conversational Fraud](https://thehackernews.com/2025/03/google-rolls-out-ai-scam-detection-for.html)\n - [ ] [Chinese APT Lotus Panda Targets Governments With New Sagerunex Backdoor Variants](https://thehackernews.com/2025/03/chinese-apt-lotus-panda-targets.html)\n - [ ] [Identity: The New Cybersecurity Battleground](https://thehackernews.com/2025/03/identity-new-cybersecurity-battleground.html)\n - [ ] [Seven Malicious Go Packages Found Deploying Malware on Linux and macOS Systems](https://thehackernews.com/2025/03/seven-malicious-go-packages-found.html)\n- Technical Information Security Content & Discussion\n - [ ] [EvilLoader: Yesterday was published PoC for unpatched Vulnerability affecting Telegram for Android](https://www.reddit.com/r/netsec/comments/1j3y1kl/evilloader_yesterday_was_published_poc_for/)\n - [ ] [Case Study: Traditional CVSS scoring missed this actively exploited vulnerability (CVE-2024-50302)](https://www.reddit.com/r/netsec/comments/1j3tvof/case_study_traditional_cvss_scoring_missed_this/)\n - [ ] [Multiple backdoors injected using frontend JS](https://www.reddit.com/r/netsec/comments/1j454ff/multiple_backdoors_injected_using_frontend_js/)\n - [ ] [Case Study: Analyzing macOS IONVMeFamily Driver Denial of Service Issue](https://www.reddit.com/r/netsec/comments/1j42l89/case_study_analyzing_macos_ionvmefamily_driver/)\n - [ ] [New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails](https://www.reddit.com/r/netsec/comments/1j3riyc/new_method_to_leverage_unsafe_reflection_and/)\n - [ ] [Understanding and Mitigating TOCTOU Vulnerabilities in C# Applications](https://www.reddit.com/r/netsec/comments/1j42koq/understanding_and_mitigating_toctou/)\n- Your Open Hacker Community\n - [ ] [Technical breakdown of notable cyber attack](https://www.reddit.com/r/HowToHack/comments/1j44b0m/technical_breakdown_of_notable_cyber_attack/)\n - [ ] [NOC Analyst wanting to get into Hacking](https://www.reddit.com/r/HowToHack/comments/1j4c7bx/noc_analyst_wanting_to_get_into_hacking/)\n - [ ] [How to pentest](https://www.reddit.com/r/HowToHack/comments/1j4ax83/how_to_pentest/)\n - [ ] [Ethical Question](https://www.reddit.com/r/HowToHack/comments/1j4e49e/ethical_question/)\n - [ ] [Hey everyone I'm a beginner how do i start (wannabe a white hat hacker)](https://www.reddit.com/r/HowToHack/comments/1j4e689/hey_everyone_im_a_beginner_how_do_i_start_wannabe/)\n - [ ] [RAR5 encrypted .rar file’s password forgot](https://www.reddit.com/r/HowToHack/comments/1j3xfoa/rar5_encrypted_rar_files_password_forgot/)\n - [ ] [Recover Twitter Account](https://www.reddit.com/r/HowToHack/comments/1j40uza/recover_twitter_account/)\n - [ ] [How do you ask a question?](https://www.reddit.com/r/HowToHack/comments/1j3xc8d/how_do_you_ask_a_question/)\n - [ ] [Can I hack an email?](https://www.reddit.com/r/HowToHack/comments/1j3x7h2/can_i_hack_an_email/)\n - [ ] [[ Removed by Reddit ]](https://www.reddit.com/r/HowToHack/comments/1j3w711/removed_by_reddit/)\n - [ ] [Question](https://www.reddit.com/r/HowToHack/comments/1j3tnu0/question/)\n - [ ] [I wanna get into hacking](https://www.reddit.com/r/HowToHack/comments/1j3qqgg/i_wanna_get_into_hacking/)\n - [ ] [Where can i find marketplace to buy cheats , for fps games like pub G , free fire ?](https://www.reddit.com/r/HowToHack/comments/1j3s232/where_can_i_find_marketplace_to_buy_cheats_for/)\n"}}, "archive/tmp/2025-03-07.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747307.8695223, "n": 45951, "h": "1546a1c828faf32a", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-03-06 Review\": \"http://www.sec-wiki.com/?2025-03-06\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"赛宁网安大模型四件套重磅发布！院士领衔，清华复旦老师最佳实践指导\": \"https://www.anquanke.com/post/id/304941\"\n },\n \"paper - Last paper\": {\n \"Llama 的悖论：深入探索 Llama.cpp 的堆迷宫，从堆溢出到远程代码执行\": \"https://paper.seebug.org/3299/\"\n },\n \"Security Boulevard\": {\n \"What Is Data Leak Prevention? Benefits and Best Practices\": \"https://securityboulevard.com/2025/03/what-is-data-leak-prevention-benefits-and-best-practices/?utm_source=rss&utm_medium=rss&utm_campaign=what-is-data-leak-prevention-benefits-and-best-practices\",\n \"What Is an Identity Provider (IdP) and How Does It Work?\": \"https://securityboulevard.com/2025/03/what-is-an-identity-provider-idp-and-how-does-it-work/?utm_source=rss&utm_medium=rss&utm_campaign=what-is-an-identity-provider-idp-and-how-does-it-work\",\n \"Patch Management Guide: Benefits and Best Practices\": \"https://securityboulevard.com/2025/03/patch-management-guide-benefits-and-best-practices/?utm_source=rss&utm_medium=rss&utm_campaign=patch-management-guide-benefits-and-best-practices\",\n \"DEF CON 32 – War Stories – Hacking Millions Of Modems And Investigating Who Hacked My Modem\": \"https://securityboulevard.com/2025/03/def-con-32-war-stories-hacking-millions-of-modems-and-investigating-who-hacked-my-modem/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-war-stories-hacking-millions-of-modems-and-investigating-who-hacked-my-modem\",\n \"Votiro’s Proven Protection: Retroscan for Zero-Day Threats\": \"https://securityboulevard.com/2025/03/votiros-proven-protection-retroscan-for-zero-day-threats/?utm_source=rss&utm_medium=rss&utm_campaign=votiros-proven-protection-retroscan-for-zero-day-threats\",\n \"Daniel Stori’s Turnoff.US: ‘Docker Panacea’\": \"https://securityboulevard.com/2025/03/daniel-storis-turnoff-us-docker-panacea/?utm_source=rss&utm_medium=rss&utm_campaign=daniel-storis-turnoff-us-docker-panacea\",\n \"Emulating the Relentless RansomHub Ransomware\": \"https://securityboulevard.com/2025/03/emulating-the-relentless-ransomhub-ransomware/?utm_source=rss&utm_medium=rss&utm_campaign=emulating-the-relentless-ransomhub-ransomware\",\n \"Why Understanding Your Secrets is the Key to Faster Remediation\": \"https://securityboulevard.com/2025/03/why-understanding-your-secrets-is-the-key-to-faster-remediation/?utm_source=rss&utm_medium=rss&utm_campaign=why-understanding-your-secrets-is-the-key-to-faster-remediation\",\n \"Inside Black Basta Ransomware Group’s Chat Leak\": \"https://securityboulevard.com/2025/03/inside-black-basta-ransomware-groups-chat-leak/?utm_source=rss&utm_medium=rss&utm_campaign=inside-black-basta-ransomware-groups-chat-leak\",\n \"Top 5 Ways Automation Increases Profitability\": \"https://securityboulevard.com/2025/03/top-5-ways-automation-increases-profitability/?utm_source=rss&utm_medium=rss&utm_campaign=top-5-ways-automation-increases-profitability\"\n },\n \"Der Flounder\": {\n \"Determining update source for Microsoft Office 365 applications\": \"https://derflounder.wordpress.com/2025/03/06/determining-update-source-for-microsoft-office-365-applications/\"\n },\n \"奇安信攻防社区\": {\n \"Tomcat内存马之Upgrade构建调试分析\": \"https://forum.butian.net/share/4178\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"8 Best AI Headshot Generators of 2025 — Tested & Reviewed (With Samples!)\": \"https://infosecwriteups.com/best-ai-headshot-generators-2025-a2480d72dc6d?source=rss----7b722bfd1b8d---4\",\n \"Sendai Vulnlab| ESC4 & ReadGMSAPassword for AD Domination\": \"https://infosecwriteups.com/sendai-vulnlab-esc4-readgmsapassword-for-ad-domination-8b2638bf8268?source=rss----7b722bfd1b8d---4\",\n \"$50-$100 worth Sensitive Leaks via Google Dorks | Part 2\": \"https://infosecwriteups.com/50-100-worth-sensitive-leaks-via-google-dorks-part-2-868f4b1e7919?source=rss----7b722bfd1b8d---4\",\n \"Use this unique way to find broken link hijacking bugs.\": \"https://infosecwriteups.com/use-this-unique-way-to-find-broken-link-hijacking-bugs-3081878839d4?source=rss----7b722bfd1b8d---4\",\n \"SOC329 — CUPS RCE Detection via IPP Injection (CVE-2024–47177)\": \"https://infosecwriteups.com/soc329-cups-rce-detection-via-ipp-injection-cve-2024-47177-6022c49181f3?source=rss----7b722bfd1b8d---4\",\n \"Open Redirect To XSS | Hackerone\": \"https://infosecwriteups.com/open-redirect-to-xss-hackerone-413ced1d4e1e?source=rss----7b722bfd1b8d---4\",\n \"Finding the origin IP part 2\": \"https://infosecwriteups.com/finding-the-origin-ip-part-2-c96d7488c40e?source=rss----7b722bfd1b8d---4\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"时隔四年再提“平安中国”，国投智能深耕AI+公共安全\": \"https://www.4hou.com/posts/pn6Q\",\n \"为AI助跑！赛宁网安大模型四件套重磅发布！\": \"https://www.4hou.com/posts/mkVR\",\n \"个人信息安全三重防线（下）：三者相互独立还是紧密联系？\": \"https://www.4hou.com/posts/9jAz\",\n \"AI 训练数据藏雷：近 12,000 个 API 密钥与密码曝光\": \"https://www.4hou.com/posts/jBMy\",\n \"国产化替换案例：CACTER邮件网关为Groupwise系统加固邮件安全防线\": \"https://www.4hou.com/posts/kgKJ\"\n },\n \"obaby@mars\": {\n \"我不配拥有题目\": \"https://h4ck.org.cn/2025/03/19575\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Thu Mar 6 20:26:57 UTC 2025\": \"https://github.com/trickest/cve/commit/992d527aeb84314d5a5be5f85791c47ec873e957\",\n \"Update Thu Mar 6 12:27:28 UTC 2025\": \"https://github.com/trickest/cve/commit/4133c68bef225412769910352ee86b21c9a6a70f\",\n \"Update Thu Mar 6 04:26:35 UTC 2025\": \"https://github.com/trickest/cve/commit/e4616ab9fc196275d51cf5bdd9dd3c260717abc7\"\n },\n \"一个被知识诅咒的人\": {\n \"【人工智能】深入理解深度学习模型可解释性：使用LIME和SHAP方法解析预测结果\": \"https://blog.csdn.net/nokiaguy/article/details/146065016\",\n \"【人工智能】用Python与多语言模型畅游全球——跨语言文本生成的全流程实战\": \"https://blog.csdn.net/nokiaguy/article/details/146064978\"\n },\n \"ongoing by Tim Bray\": {\n \"Bye, Prime\": \"https://www.tbray.org/ongoing/When/202x/2025/03/06/Canceled-Prime\"\n },\n \"ElcomSoft blog\": {\n \"NVIDIA GeForce RTX 5090 Power Connectors Melting Again\": \"https://blog.elcomsoft.com/2025/03/nvidia-geforce-rtx-5090-power-connectors-melting-again/\"\n },\n \"Doonsec's feed\": {\n \"OSPF邻居vs邻接关系傻傻分不清？\": \"https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247528491&idx=1&sn=5a2ed4dfecea8ee57a8a88120ca8e81f\",\n \"Nginx配置硬核干货！从入门到精通，一篇搞定！\": \"https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649465916&idx=1&sn=0904225a58999df7b89b26c34dad175e\",\n \"【智能体发布】：AI公文优化专家\": \"https://mp.weixin.qq.com/s?__biz=MzI1NDMxOTkyNw==&mid=2247485541&idx=1&sn=acc73f240fedf7f6de13b101ad832d0d\",\n \"服务器多？密码烦？用这个脚本，一键搞定SSH免密信任！\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTc5MjM4Nw==&mid=2457387546&idx=1&sn=4d4d24486ff8eb7dc882c39d995123d8\",\n \"快看！风险管理框架2.0的NIST RMF光环\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492478&idx=1&sn=0a8d2650b6731e7e890da34fdab411c9\",\n \"挖矿病毒应急响应处置手册\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490067&idx=1&sn=f1a7306995b639d415565f535c007694\",\n \"SRC挖掘 | fastjson反序列化漏洞实战\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490067&idx=2&sn=ee52f8aa1b647a17c100596ca1ee8238\",\n \"Lynis 安全审计与加固工具\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490067&idx=3&sn=bda552821b9f4800cf8c543d42fac371\",\n \"[※]一个神一般的linux命令行RDP远程桌面工具\": \"https://mp.weixin.qq.com/s?__biz=MzkwMDMyOTA1OA==&mid=2247484437&idx=1&sn=acee78cae6dc3f10ac06be17be6cda37\",\n \"基于AI对抗雷池waf [已开源]\": \"https://mp.weixin.qq.com/s?__biz=MzAxNzY0ODI5MQ==&mid=2247492220&idx=1&sn=d4bfed3f222d68cd377eb1493da01262\",\n \"【智能体发布】：审讯辅助专家\": \"https://mp.weixin.qq.com/s?__biz=MzI1NDMxOTkyNw==&mid=2247485539&idx=1&sn=85d3de6eae6aebc13848e8d4f154bcd6\",\n \"BadUSB攻击全解：从原理到实践与防御\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247487930&idx=1&sn=2661e75b605aa1848a7771ef7409e2df\",\n \"说实话，我自卑了，聊聊年轻人赚钱那些事....\": \"https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538982&idx=1&sn=2682e5e01faad4fcfea513e89ab433ef\",\n \"Manus 创始人肖弘简历—从华科极客到全球通用AI Agent领军人\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247544570&idx=1&sn=3bbf3f1f241a5c387283f60b4b23664e\",\n \"动态路由协议，网络工程师必知\": \"https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247528478&idx=1&sn=9aa8dfda05e70af4567b2b1f7dee22d9\",\n \"EDR 规避与硬件断点的盲侧技术\": \"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487572&idx=1&sn=43722c7852b44c2660cd5cc48763859d\",\n \"每个CISO都应关注的GENAI安全矩阵\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488821&idx=1&sn=7e99e5d2a8cadf1c175e450a29d3059d\",\n \"Manus一夜封神！这个AI“电子牛马”竟能自动搬砖？打工人该笑还是慌？\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDkzMTk3Mg==&mid=2247485406&idx=1&sn=9b0067e61b847d93f22bfdae6c448396\",\n \"xscan反馈问卷\": \"https://mp.weixin.qq.com/s?__biz=MzU2NzcwNTY3Mg==&mid=2247485365&idx=1&sn=4a5bf1710f4167f32993ed72e709e58a\",\n \"知识解密：利用CDN底层技术替代多地Ping\": \"https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490448&idx=1&sn=e652531c12bd784ce81e14ec13a272d2\",\n \"人工智能安全趋势研究\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655269273&idx=1&sn=a449596482dff586f3a4edb7935c0578\",\n \"[更新日志]hawkeye-去除规则，避免杀软误报\": \"https://mp.weixin.qq.com/s?__biz=MzU4NTg4MzIzNA==&mid=2247484622&idx=1&sn=ce56975d9029b09199c2978ae21c3d55\",\n \"昨天抖音掉洞，今天商城捡洞\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518660&idx=1&sn=35bad2a4e001558fb71fcbbba2a43c58\",\n \"SRC专项知识库\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518660&idx=2&sn=8c949881da6d33fd2ba8410601699520\",\n \"专题·漏洞人才培养 | 实战化漏洞安全人才培养 为新质生产力保驾护航\": \"https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462668&idx=1&sn=26885cbdc84ff23e350a6e29b79636ac\",\n \"专题·漏洞人才培养 | 以CTF学科竞赛为抓手的漏洞人才培养探索与实践\": \"https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462668&idx=2&sn=fea352bcd11c8dd1d9163cf83b2f0959\",\n \"从DeepSeek到Manus：当AI学会\\\\\\\"手脑并用\\\\\\\"，我们或站在职业消亡的临界点\": \"https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500758&idx=1&sn=b4f1094755e5ebfbba6ab1aa0375e082\",\n \"总书记与我们在一起丨勇挑大梁 为全国发展大局作贡献\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDc2MzcwNw==&mid=2247498619&idx=1&sn=715cc157829f59cce8363711a6a0957c\",\n \"桶文件覆盖之谷歌语法显神功\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497226&idx=1&sn=858dbb1b0a23b21ad618a3850106166c\",\n \"mysql屏蔽nmap扫描\": \"https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486625&idx=1&sn=f7be6b433152657ae2f16d32ca4fa522\",\n \"金和OA-C6系统接口IncentivePlanFulfillAppprove.aspx存在SQL注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490647&idx=1&sn=79a47f349f15755a1ac9615096a65d29\",\n \"啊？什么上中级猴子要花8000RMB\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486054&idx=1&sn=d97ea6ffb1989c3da386ef22f9a1f326\",\n \"等保信息系统定级指导（国标+行标）\": \"https://mp.weixin.qq.com/s?__biz=MzUyNjk2MDU4MQ==&mid=2247486678&idx=1&sn=aa0238764c77f454bac15176094e3dd7\",\n \"智能体AI-manus，早申请早体验\": \"https://mp.weixin.qq.com/s?__biz=MzU1NzgyMzA0OA==&mid=2247490401&idx=1&sn=fb7190d4644f60cf20b643b68a269cc4\",\n \"G.O.S.S.I.P 阅读推荐 2025-03-06 禅与AMD CPU维修艺术\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499871&idx=1&sn=b0bb73c5122fe130a95fe09e0a333447\",\n \"告别付费焦虑！无问网安社区月初福利\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247485995&idx=1&sn=93ae28d666bc3fdef0ddbe671d1599f0\"\n },\n \"Microsoft Security Blog\": {\n \"Women’s History Month: Why different perspectives in cybersecurity and AI matter more than ever before\": \"https://www.microsoft.com/en-us/security/blog/2025/03/06/womens-history-month-why-different-perspectives-in-cybersecurity-and-ai-matter-more-than-ever-before/\",\n \"Malvertising campaign leads to info stealers hosted on GitHub\": \"https://www.microsoft.com/en-us/security/blog/2025/03/06/malvertising-campaign-leads-to-info-stealers-hosted-on-github/\"\n },\n \"Sucuri Blog\": {\n \"Cascading Redirects: Unmasking a Multi-Site JavaScript Malware Campaign\": \"https://blog.sucuri.net/2025/03/cascading-redirects-unmasking-a-multi-site-javascript-malware-campaign.html\"\n },\n \"Trustwave Blog\": {\n \"Defending Manufacturing: How Cybercriminals Are Targeting the Industry and How to Respond\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/defending-manufacturing-how-cybercriminals-are-targeting-the-industry-and-how-to-respond/\"\n },\n \"Orange Cyberdefense\": {\n \"InvokeADCheck – A PowerShell Module for Assessing Active Directory\": \"https://sensepost.com/blog/2025/invokeadcheck-a-powershell-module-for-assessing-active-directory/\"\n },\n \"GuidePoint Security\": {\n \"Breaking Basta: Insights from Black Basta’s Leaked Ransomware Chats\": \"https://www.guidepointsecurity.com/blog/breaking-basta-insights-from-black-bastas-leaked-ransomware-chats/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"$50-$100 worth Sensitive Leaks via Google Dorks | Part 2\": \"https://infosecwriteups.com/50-100-worth-sensitive-leaks-via-google-dorks-part-2-868f4b1e7919?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Use this unique way to find broken link hijacking bugs.\": \"https://infosecwriteups.com/use-this-unique-way-to-find-broken-link-hijacking-bugs-3081878839d4?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Finding the origin IP part 2\": \"https://infosecwriteups.com/finding-the-origin-ip-part-2-c96d7488c40e?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"SpiderLabs Blog\": {\n \"A Deep Dive into Strela Stealer and how it Targets European Countries\": \"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/a-deep-dive-into-strela-stealer-and-how-it-targets-european-countries/\"\n },\n \"Twitter @bytehx\": {\n \"Re @19whoami19 @Hacker0x01 Congrats!\": \"https://x.com/bytehx343/status/1897624735594459527\"\n },\n \"Securelist\": {\n \"Trojans disguised as AI: Cybercriminals exploit DeepSeek’s popularity\": \"https://securelist.com/backdoors-and-stealers-prey-on-deepseek-and-grok/115801/\"\n },\n \"Horizon3.ai\": {\n \"Breaking the Bank: How NodeZero® Secured a Financial Giant in Just 14 Hours\": \"https://www.horizon3.ai/downloads/use-case/breaking-the-bank-how-nodezero-secured-a-financial-giant-in-just-14-hours/\"\n },\n \"The Trail of Bits Blog\": {\n \"Benchmarking OpenSearch and Elasticsearch\": \"https://blog.trailofbits.com/2025/03/06/benchmarking-opensearch-and-elasticsearch/\"\n },\n \"Didier Stevens\": {\n \"Update: oledump.py Version 0.0.79\": \"https://blog.didierstevens.com/2025/03/06/update-oledump-py-version-0-0-79/\"\n },\n \"VMRay\": {\n \"What is SEO Poisoning? A Growing Threat to Cybersecurity\": \"https://www.vmray.com/seo-poisoning/\",\n \"DLL Sideloading: What It Is and How to Detect It\": \"https://www.vmray.com/dll-sideloading/\"\n },\n \"Malwarebytes\": {\n \"Ransomware threat mailed in letters to business owners\": \"https://www.malwarebytes.com/blog/news/2025/03/ransomware-threat-mailed-in-letters-to-business-owners\",\n \"Android botnet BadBox largely disrupted\": \"https://www.malwarebytes.com/blog/news/2025/03/android-botnet-badbox-largely-disrupted\"\n },\n \"Twitter @James Kettle\": {\n \"Sadly, my attempt to perform WAF onboarding on the target website failed 😂\": \"https://x.com/albinowax/status/1897668955927429586\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"FreeBuf早报 | 2025年全球50家最佳网络安全公司；谷歌不打开应用也收集用户数据\": \"https://www.freebuf.com/news/423780.html\",\n \"最新研究，谷歌大量收集用户数据，无需打开应用\": \"https://www.freebuf.com/news/423763.html\",\n \"freebuf快速同步语雀文章\": \"https://www.freebuf.com/sectool/417015.html\",\n \"跟着黑客学习fake captcha\": \"https://www.freebuf.com/articles/system/423758.html\",\n \"勒索团伙利用网络摄像头绕过EDR实施加密攻击\": \"https://www.freebuf.com/articles/network/423845.html\",\n \"研究人员绕过 CrowdStrike Falcon 传感器执行恶意应用程序\": \"https://www.freebuf.com/articles/endpoint/423835.html\",\n \"Gartner发布2025年网络安全六大预测\": \"https://www.freebuf.com/news/423730.html\"\n },\n \"绿盟科技技术博客\": {\n \"绿盟科技威胁情报月报-2025年2月\": \"https://blog.nsfocus.net/2025-2/\"\n },\n \"安全牛\": {\n \"逾10亿美元Bybit被盗加密货币已初步进行洗钱，引发全球追踪；WordPress插件RCE漏洞曝光，威胁超10万网站 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135403&idx=1&sn=782d8879f7d96cee8da7d2513d16fb2b&chksm=bd15ad788a62246e12de917ea5e93cdd9adbf8cdf4f2f544ff98e7370054e009d1bb8966c4e8&scene=58&subscene=0#rd\",\n \"揭秘黑客窃取数据的内幕\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135403&idx=2&sn=4e73f5dc6abd6ab6cfa3c101af71b382&chksm=bd15ad788a62246e90569ed6ef7957bccc8959096e055c51d8976e32f9b7cab16e7000b5f7c5&scene=58&subscene=0#rd\"\n },\n \"Shostack & Friends Blog\": {\n \"Strategy for threat modeling AI\": \"https://shostack.org/blog/strategy-for-threat-modeling-ai/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"Google 以国家安全理由希望不被肢解\": \"https://www.solidot.org/story?sid=80730\",\n \"光首次被转化为超固体\": \"https://www.solidot.org/story?sid=80729\",\n \"NASA 关闭航海家的科学设备以节省电力\": \"https://www.solidot.org/story?sid=80728\",\n \"研究发现精液质量与男性寿命相关\": \"https://www.solidot.org/story?sid=80727\",\n \"NASA 首次在月球上使用 GPS\": \"https://www.solidot.org/story?sid=80726\",\n \"OpenAI 计划对博士水平的 AI 智能体收取 2 万美元月费\": \"https://www.solidot.org/story?sid=80725\",\n \"36 家石化巨头产生的碳排放占到了全球的一半\": \"https://www.solidot.org/story?sid=80724\",\n \"美国停止分享大使馆领事馆收集的空气质量数据\": \"https://www.solidot.org/story?sid=80723\",\n \"全球暖化威胁低纬度地区到粮食产量\": \"https://www.solidot.org/story?sid=80722\",\n \"犹他州要求美国应用商店验证用户年龄\": \"https://www.solidot.org/story?sid=80721\"\n },\n \"HackerNews\": {\n \"黑客利用暴露的云凭证，仅 19 分钟劫持 AI 大模型\": \"https://hackernews.cc/archives/57700\",\n \"WordPress 插件漏洞使 10000 个网站遭代码执行攻击\": \"https://hackernews.cc/archives/57698\",\n \"YouTube 警告：AI 生成的 CEO 视频用于钓鱼攻击\": \"https://hackernews.cc/archives/57695\",\n \"50 万台受感染的 Android 设备上的 BadBox 恶意软件被成功阻断\": \"https://hackernews.cc/archives/57693\",\n \"七种恶意 Go 软件包被发现针对 Linux 和 macOS 系统\": \"https://hackernews.cc/archives/57691\"\n },\n \"杨龙\": {\n \"Prepared statement needs to be re-prepared\": \"https://www.yanglong.pro/prepared-statement-needs-to-be-re-prepared/\"\n },\n \"安全分析与研究\": {\n \"恶意软件分析与逆向破解工具包\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490905&idx=1&sn=37201c8f21097b01ad5225ab9b1e35d4&chksm=902fb271a7583b6756d87dc12b0b26834918d0606f80ded4edf95c98919df8347194fddaa604&scene=58&subscene=0#rd\"\n },\n \"锦行科技\": {\n \"锦行科技网安创意课高校巡演启动，2025首站走进广东财贸职业学院！\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493854&idx=1&sn=752e4ab6bc7bb1312d0b44da74bea485&chksm=979a137ba0ed9a6df210b557022182ebf87ad3e8d8b380c479caee920c499715c0e4a9bb42a8&scene=58&subscene=0#rd\",\n \"企业网络安全：构建多层防御体系，守护数字资产\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493854&idx=2&sn=532b69a6d1e0c0b04808f5f496c46ad7&chksm=979a137ba0ed9a6d9ed0cfcb0f8eefcd49cbcee81d1c35866b11358d23ada53b71393288ff32&scene=58&subscene=0#rd\"\n },\n \"Black Hills Information Security\": {\n \"Burp Suite Extension: Copy For\": \"https://www.blackhillsinfosec.com/copy-for/\"\n },\n \"奇安信 CERT\": {\n \"Elastic Kibana 原型污染致任意代码执行漏洞(CVE-2025-25012)安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503086&idx=1&sn=54b69bd61f8b821652d16322e589e4d0&chksm=fe79e876c90e61605089205fed1cd9b9c046434058f58982e7e8a76e785ecdd9b8869f510bc0&scene=58&subscene=0#rd\"\n },\n \"威努特安全网络\": {\n \"医疗行业存算分离新趋势：如何破解海量数据存储与计算难题？\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131490&idx=1&sn=6b00757b480e31756a09964f1f4ad358&chksm=80e714d2b7909dc4539fac52d4f7ce3bb2088ef6be0239851fb1c69d3edb690545d7acde8acf&scene=58&subscene=0#rd\",\n \"工业互联网雷达：助力大型石油企业资产管理精准高效\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131447&idx=1&sn=ad8c11dff9d64a0898bf6ff139e2e8a8&chksm=80e71487b7909d915890f8b84943dd4699ae46c8afd666bc727827dddaecdf06d6b5bfbe0dfa&scene=58&subscene=0#rd\"\n },\n \"吾爱破解论坛\": {\n \"【开放注册公告】吾爱破解论坛2025年3月13日十七周年开放注册公告\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141850&idx=1&sn=7f2cdc72f2748ba4ccb5776257be544d&chksm=bd50a68e8a272f987301f273fa9310b2feca3ab9e3a87374dc7a8ed47eecc8972a1cac00b527&scene=58&subscene=0#rd\"\n },\n \"青衣十三楼飞花堂\": {\n \"2025年Chrome继续使用旧版插件\": \"https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488053&idx=1&sn=57117f6ea7e29bafc6295495b0a3d70f&chksm=fab2d10acdc5581cf904a956b8fd12debfad52768a00a4e1998e9e9d06efee5b6593ae324f02&scene=58&subscene=0#rd\"\n },\n \"绿盟科技研究通讯\": {\n \"全球云上数据泄露风险分析简报（第五期）：配置错误叠加供应链投毒与第三方组件漏洞，大模型数据链暴露全生态安全脆弱性\": \"https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498531&idx=1&sn=c8c6e6ecb121cd2533d8dc4dbd3dc81e&chksm=e84c5dfcdf3bd4ea5d206af1b35fc989670d47d9004a543464f67e0dfae99a0987ea78760fd7&scene=58&subscene=0#rd\"\n },\n \"代码卫士\": {\n \"谷歌修复已遭利用的安卓0day\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522418&idx=1&sn=6414a084ddce5639ed66ee1cdf5970cb&chksm=ea94a918dde3200e4957c6c238db663d0186415de3557b205951842801e465f313189d312680&scene=58&subscene=0#rd\",\n \"CISA称将不会停止监控俄罗斯网络威胁\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522418&idx=2&sn=fcea7c698026178b462b6b2369a3a5a2&chksm=ea94a918dde3200e121c48ee6430d3343d2de2c32624a4c6824afb77338b8b9a83730cf49e21&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"初探 android crc 检测及绕过\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590565&idx=1&sn=755a5d7753e8ae9721c994111c34d6ce&chksm=b18c2def86fba4f9b88b21cc7ee7a38208d9c783da1421eee664f69ef17184e3e722bdb341ac&scene=58&subscene=0#rd\",\n \"GDK8+挥码枪 | 轻松玩转ARM开发！让调试像“查字典”一样简单\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590565&idx=2&sn=b31aedd8e5c0c6984b7a883aaad935dc&chksm=b18c2def86fba4f9326dad1f4c6a9d9bd8a71b7067e285ce8c102a55324335a5f87ad18fb353&scene=58&subscene=0#rd\",\n \"霉霉演唱会门票遭黑客非法获取，牟利600万美元被捕\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590565&idx=3&sn=ce3d76100dd1f24820618805f863ae86&chksm=b18c2def86fba4f9619324b5bb96c7fb31dffd4e31c2e1e9ea0e3f85e3af594978936bb97674&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \"MachineKeys 大字典：利用 3000 条 MachineKeys 爆破 ViewState 反序列化漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499062&idx=1&sn=780d36184c63b257ce9a15c1e4cf67e5&chksm=fa5953dbcd2edacd634e99df62c8e21b1b249a45f475b8616cae4fc6a3152df08b9f1dcb90d5&scene=58&subscene=0#rd\",\n \".NET 内网攻防实战电子报刊\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499062&idx=2&sn=52f04375de06c2511d50fb71225f96a6&chksm=fa5953dbcd2edacd4e4e8227bee307f834bf5f8900ed61318fead09ac54127310c007dc0378b&scene=58&subscene=0#rd\",\n \"通过 Sharp4FUAC 绕过 UAC 实现本地权限提升\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499062&idx=3&sn=040506f1aec0a1640025ed2d5eae2058&chksm=fa5953dbcd2edacdd87ca5acb0f771ea9e338bda63cce0b7a2b23adc0ba18109cc743f05c272&scene=58&subscene=0#rd\"\n },\n \"威胁棱镜\": {\n \"2024 勒索软件年度态势报告\": \"https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247487742&idx=1&sn=50204f2d7e9e19367184f7eeb48aa955&chksm=c1e9e732f69e6e24d2ff4808bff1d7e56f1cc9842f4b56d3f1ec34be8b3842c5550cd3895432&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】VMware 修复了 ESX 产品中三个被积极利用的零日漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068293&idx=1&sn=4072ff26a5a85713e31cd4cf30212887&chksm=f36e7585c419fc9356a7046dc54fb206e322422b5731c4ab60f59fb6313a63c15c4c84191994&scene=58&subscene=0#rd\",\n \"【安全圈】CISA 警告 VMware 漏洞正被积极利用，并敦促立即修补\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068293&idx=2&sn=fab921fefe8673f13fcda40d2f2a8a58&chksm=f36e7585c419fc93777f66d5dc6d0cab3c6eef6c192ccbcb909d9e932e498d3bfcbf3a14e4e3&scene=58&subscene=0#rd\",\n \"【安全圈】Windows KDC 代理 RCE 漏洞让攻击者远程控制服务器\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068293&idx=3&sn=c28c7a09130437d1363a6b34dc11bdcf&chksm=f36e7585c419fc93f0d6435efa2025a8433255864c2df71c0fc5a4c4a74991faaecce0f85f3f&scene=58&subscene=0#rd\"\n },\n \"天御攻防实验室\": {\n \"美俄网络战：美防长\\\"暂停令\\\"背后的战略黑洞\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486295&idx=1&sn=31e4f344dccf056d57b0ad0a4de00a69&chksm=fb04c83fcc734129fc6814b739082bc3c8d5af45b8ba337558b1ba407bd177a9604fc42e926d&scene=58&subscene=0#rd\"\n },\n \"网络空间安全科学学报\": {\n \"学术前沿 | 抗侧信道攻击的后量子密码掩码转换方案\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505184&idx=1&sn=7beea30d56e863adc3126e71c073b050&chksm=e9bfc19edec848886f9bcbe4305956146746175439cdaf61f4eb84b9bd91ae47cb8063e893ff&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"Gartner发布2025年网络安全六大预测\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513890&idx=1&sn=d58c20e6410d10d4c7d53aa1362a6c35&chksm=ebfaf002dc8d79143dc435b8da6bd988190fb65ee43ddefaf1d98e54dc87436f682e68492fa1&scene=58&subscene=0#rd\",\n \"工信部：关于防范Murdoc_Botnet僵尸网络的风险提示\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513890&idx=2&sn=2adcf91198d4e710db18114286dbfd3c&chksm=ebfaf002dc8d79146800bd3b668889b62624cf4be4fdbf85472b46c618d0e35d39dfe0436268&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"机器人到来前，智能汽车可能是更早服务人类的 AI Agent\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075148&idx=1&sn=8341aba453f9c6942359bd1a0a2289b1&chksm=7e57cb7a4920426c3acb152823056e4cae3bc43142816caa0d00b3fbbb9493eb4533ad84f472&scene=58&subscene=0#rd\",\n \"苹果发布M3 Ultra：为AI而生，顶配超10万；全球首款AI Agent产品上线；腾讯元宝回应「霸王条款」｜极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075124&idx=1&sn=587ce2f2023d0e9a8c6ff02d9d9d276d&chksm=7e57cb02492042149192d473cb36d2bf2479af1345f74a95294abf1c998647a7094705e8a11f&scene=58&subscene=0#rd\"\n },\n \"默安科技\": {\n \"只聊干货的【落地有声】专栏第一期：金融行业开源软件治理\": \"https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247500400&idx=1&sn=84f26e24ac813d224ce3be5f93fa2888&chksm=e93b3552de4cbc44fd8c9296f702c4cd3719862fd3377cac4cc38c4406cc9d677e33dfec4fb1&scene=58&subscene=0#rd\"\n },\n \"奇安信威胁情报中心\": {\n \"仿冒DeepSeek本地部署工具：银狐与UTG-Q-1000的新活动\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247514330&idx=1&sn=e4c964524a17037b3d98be0d6cac095f&chksm=ea664faddd11c6bbbb93ee756a35d89f4783a80cd305f169bd30dd4bc8fee4318e984b1cbc75&scene=58&subscene=0#rd\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 阅读推荐 2025-03-06 禅与AMD CPU维修艺术\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499871&idx=1&sn=b0bb73c5122fe130a95fe09e0a333447&chksm=c063ee86f7146790d32636084711819ffc3dea158eb5bff927d578e1d65d09d4d86a5c565b12&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"【揭秘】金正恩的那辆迈巴赫是怎么去到平壤的？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560177&idx=1&sn=2d26c829c0c1f46113bf88ac9308993b&chksm=871178fab066f1ec9517702053e324a16b2df20e6508593b77672ec9f7af521137ecb35cb736&scene=58&subscene=0#rd\",\n \"朝鲜半岛军事安全形势对我情报工作的考验与提升路径\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560177&idx=2&sn=0b8a0105afeaaa66706dcdbe73024716&chksm=871178fab066f1ec62cd99aa77c1e7f0e6a7bd4d63dc1c6e6296848bd045f5556fe76d4e3679&scene=58&subscene=0#rd\"\n },\n \"中国信息安全\": {\n \"前沿 | 人工智能国际治理：安全偏好及其现实影响\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237883&idx=1&sn=ecc1f396f87f8a84b1144aaa66233ba0&chksm=8b5809c2bc2f80d4694405d933f20cc98b5a0f5dbe112db1445e02e1bc852733d41578094531&scene=58&subscene=0#rd\",\n \"专家解读 | 蒋艳：加快工业高质量数据集建设 筑牢人工智能赋能新型工业化根基\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237883&idx=2&sn=e6ff4c84a374a9d066a45070cca7bf15&chksm=8b5809c2bc2f80d4304d44fff0c16507c5c0934ec0cee398099597d59fe1c3bcc2add76ddb1b&scene=58&subscene=0#rd\",\n \"专家观点 | 以数据安全认证促进数字经济高质量发展\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237883&idx=3&sn=7fe8aa511abb27614c7f669b0d3268a3&chksm=8b5809c2bc2f80d47fb2c710dac278f0df6a1f5862ae69ce2e3d096407b3bcd1be3bc61c1811&scene=58&subscene=0#rd\",\n \"中消协提示：警惕新型诈骗手段，远离网络购物陷阱！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237883&idx=4&sn=0fa60782a971643b2337a70868ccef79&chksm=8b5809c2bc2f80d490c18aca3ff12c14c2a174946bd7e351ab28a10687c74fab558caded5c75&scene=58&subscene=0#rd\",\n \"观点 | 如何保证电商平台在流量与算法驱动下的公平性\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237883&idx=5&sn=735472f31690aa300454fe3058180a7e&chksm=8b5809c2bc2f80d45dfd82d1cbd2a8c90360aeed96cfd41ed2708d22c4673e6cb46c94972c35&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"报告解读：ICS/OT 安全预算不断增加，但关键领域资金不足\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537916&idx=1&sn=9e0a6e4f6c00bcc9cae2d5b03fd4765d&chksm=c1442641f633af57d8cda7a1300c7c626625525dd6add295132b5aa3532a929c75aba153f4c3&scene=58&subscene=0#rd\",\n \"​【新品发布】赛宁网安大模型四件套重磅发布！\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537916&idx=2&sn=aafdeecc7449bacee47ae7b45a62bd06&chksm=c1442641f633af57831946d1177958003e6bc3f25fed88ca7af38174997ecd0a27611de23c28&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"AI 训练数据藏雷：近 12,000 个 API 密钥与密码曝光\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581417&idx=1&sn=f36148918b5bfdf5ce28229621c2b1d9&chksm=e9146ed3de63e7c55aba140f0c914286e3680be0baffcb4feeb29d0c23ea0f839417a5b4e946&scene=58&subscene=0#rd\"\n },\n \"京东安全应急响应中心\": {\n \"京麒沙龙15期回顾①-京东软件供应链安全运营与实践分享\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727844230&idx=1&sn=ff08ee2357c6aa560ae9e3883a2bea67&chksm=80504e0eb727c7184fe55952094a63bb557cf14db65bc2ace1425b3a4e28bfd0bbe225ddf51e&scene=58&subscene=0#rd\"\n },\n \"腾讯科恩实验室\": {\n \"腾讯云安全科恩实验室2025社会招聘\": \"https://mp.weixin.qq.com/s?__biz=MzU1MjgwNzc4Ng==&mid=2247512825&idx=1&sn=17eb5a6a83a8bfb41d60f0bb5b21bbae&chksm=fbfe8efccc8907ea78e5ffb335176aa479af267a572e188b066ec912a0dcb999ffc994ca3e2a&scene=58&subscene=0#rd\",\n \"云智研发公司科恩工作室2025年社会招聘\": \"https://mp.weixin.qq.com/s?__biz=MzU1MjgwNzc4Ng==&mid=2247512825&idx=2&sn=24a46f93973d7630399ac2199bc95002&chksm=fbfe8efccc8907eae4cd24c1d8b47c0498c0e0e3c91e26fa4f6ea22a7b5d87a85d9632788577&scene=58&subscene=0#rd\"\n },\n \"字节跳动技术团队\": {\n \"为你的奇思妙想喝彩｜稀土掘金首届 AI FOR CODE 创意挑战赛开启报名啦！\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513681&idx=1&sn=cf9ec6a2168caf4a3185637225fce90e&chksm=e9d37db3dea4f4a585a55ea6adf6a02de5ca8709233bc77e4b39e90528046714ede52281a3a6&scene=58&subscene=0#rd\"\n },\n \"黑伞安全\": {\n \"从数据库沦陷到供应链投毒：大模型安全危机背后的“隐形战场”\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489756&idx=1&sn=c4c797f9202614853b92777e88699fde&chksm=fb029584cc751c9267dba2a3e15103684cc5ab91ae652fe0e298a2ed6d0aa52ce10064c47cdd&scene=58&subscene=0#rd\"\n },\n \"Yak Project\": {\n \"SyntaxFlow Java实战（一）：值的搜索与筛选\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247527833&idx=1&sn=ca5486cfe5c638eb4dd389c7c1c7e1e3&chksm=c2d1113df5a6982be27719f7ed450cecf992f2c1f690e9c12ba080d8392f07ac2ae681e08134&scene=58&subscene=0#rd\"\n },\n \"美团技术团队\": {\n \"老显卡福音！美团开源首发INT8无损满血版DeepSeek R1\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651779979&idx=1&sn=5d90567182478675d953587161579b6b&chksm=bd122ac68a65a3d0cfda1352db16e6ff2d29a88e25b01d83a7f919348d285a594c6f766edb1d&scene=58&subscene=0#rd\"\n },\n \"表图\": {\n \"CrowdStrike 2025 财年 Q4 财报要点：强劲增长与战略升级\": \"https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247484733&idx=1&sn=67758e73d5f59344345c7c9f10cf8d09&chksm=facb83a8cdbc0abe2f76b0cc763a1a17cb7d7cced910079b01a427bae752ac36f3d2594299bf&scene=58&subscene=0#rd\"\n },\n \"青藤智库\": {\n \"正式发布:《基于杀伤链的勒索软件防御指南》\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489414&idx=1&sn=65a18aaf8d71e0435095acd6eb4ee5e1&chksm=fa58b5bdcd2f3cab7be4b46be4753fe9dc6d3280c4136a25cb88a9bb6d67104ab3b89f299141&scene=58&subscene=0#rd\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #768: HTCIA Boston April 8, 2025\": \"https://www.hecfblog.com/2025/03/daily-blog-768-htcia-boston-april-8-2025.html\"\n },\n \"ICT Security Magazine\": {\n \"Sanità italiana e Sicurezza Informatica – L’Ecosistema Dati Sanitari (EDS) come parte integrante del Sistema FSE (Fascicolo Sanitario Elettronico)\": \"https://www.ictsecuritymagazine.com/notizie/ecosistema-dati-sanitari-eds-fse-fascicolo-sanitario-elettronico/\",\n \"Intelligenza artificiale e sicurezza nazionale 2025\": \"https://www.ictsecuritymagazine.com/notizie/intelligenza-artificiale-e-sicurezza-nazionale/\",\n \"Spazio e cyber, un intreccio per le nuove dinamiche di potere\": \"https://www.ictsecuritymagazine.com/articoli/spazio-cyber/\"\n },\n \"迪哥讲事\": {\n \"桶文件覆盖之谷歌语法显神功\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497226&idx=1&sn=858dbb1b0a23b21ad618a3850106166c&chksm=e8a5fc69dfd2757f0f5acda754634066bb1336fe1c1001716f3b479c1e9c455d7367aef5a196&scene=58&subscene=0#rd\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"ISC Stormcast For Thursday, March 6th, 2025 https://isc.sans.edu/podcastdetail/9352, (Thu, Mar 6th)\": \"https://isc.sans.edu/diary/rss/31744\",\n \"DShield Traffic Analysis using ELK, (Thu, Mar 6th)\": \"https://isc.sans.edu/diary/rss/31742\"\n },\n \"360数字安全\": {\n \"高仿Microsoft 365暗藏勒索陷阱，360全网截杀Montelli威胁\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579811&idx=1&sn=bd07298bba1c621e0c886cf79d065156&chksm=9f8d28aba8faa1bdd7de52a504d7931903b41624739e6f563aeee452eeb807673dba9939df22&scene=58&subscene=0#rd\"\n },\n \"TrustedSec\": {\n \"Measuring the Success of Your Adversary Simulations\": \"https://trustedsec.com/blog/measuring-the-success-of-your-adversary-simulations\"\n },\n \"Schneier on Security\": {\n \"The Combined Cipher Machine\": \"https://www.schneier.com/blog/archives/2025/03/the-combined-cipher-machine.html\"\n },\n \"Posts By SpecterOps Team Members - Medium\": {\n \"Decrypting the Forest From the Trees\": \"https://posts.specterops.io/decrypting-the-forest-from-the-trees-661694ed1616?source=rss----f05f8696e3cc---4\"\n },\n \"Securityinfo.it\": {\n \"Indagine Zscaler: le aziende devono investire sulla resilienza informatica\": \"https://www.securityinfo.it/2025/03/06/indagine-zscaler-le-aziende-devono-investire-sulla-resilienza-informatica/?utm_source=rss&utm_medium=rss&utm_campaign=indagine-zscaler-le-aziende-devono-investire-sulla-resilienza-informatica\"\n },\n \"contagio\": {\n \"Is he dead yet?\": \"https://contagiodump.blogspot.com/2025/03/is-he-dead-yet.html\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Cascading Redirects: Unmasking a Multi-Site JavaScript Malware Campaign\": \"https://blog.sucuri.net/2025/03/cascading-redirects-unmasking-a-multi-site-javascript-malware-campaign.html\",\n \"Microsoft says malvertising campaign impacted 1 million PCs\": \"https://www.bleepingcomputer.com/news/security/microsoft-says-malvertising-campaign-impacted-1-million-pcs/\",\n \"Ransomware gang encrypted network from a webcam to bypass EDR\": \"https://www.bleepingcomputer.com/news/security/akira-ransomware-encrypted-network-from-a-webcam-to-bypass-edr/\",\n \"Russian crypto exchange Garantex’s website taken down in apparent law enforcement operation\": \"https://therecord.media/garantex-crypto-exchange-taken-down-law-enforcement-operation\",\n \"Russian crypto exchange Garantex seized by law enforcement operation\": \"https://techcrunch.com/2025/03/06/russian-crypto-exchange-garantex-seized-by-law-enforcement-operation/\",\n \"Who is Responsible and Does it Matter?\": \"https://blog.talosintelligence.com/who-is-responsible-and-does-it-matter/\",\n \"US seizes domain of Garantex crypto exchange used by ransomware gangs\": \"https://www.bleepingcomputer.com/news/security/us-seizes-domain-of-garantex-crypto-exchange-used-by-ransomware-gangs/\",\n \"Cybercrime 'crew' stole $635,000 in Taylor Swift concert tickets\": \"https://www.bleepingcomputer.com/news/security/cybercrime-crew-stole-635-000-in-taylor-swift-concert-tickets/\",\n \"Thousands of public school workers impacted by cyberattack on retirement plan administrator\": \"https://therecord.media/thousands-of-public-school-workers-impacted-data-breach\",\n \"Personal digital protection\": \"https://www.adainese.it/blog/2021/01/04/personal-digital-protection/\",\n \"Ecosistema dei dati sanitari: verso una sanità digitale integrata e sicura\": \"https://www.cybersecurity360.it/news/ecosistema-dei-dati-sanitari-verso-una-sanita-digitale-integrata-e-sicura/\",\n \"Ethereum private key stealer on PyPI downloaded over 1,000 times\": \"https://www.bleepingcomputer.com/news/security/ethereum-private-key-stealer-on-pypi-downloaded-over-1-000-times/\",\n \"Two arrested for stealing Taylor Swift Eras Tour tickets and selling for a $600,000 profit in cybercrime scheme\": \"https://therecord.media/two-arrested-for-stealing-taylor-swift-tickets-cybertheft\",\n \"Microsoft 365 apps will prompt users to back up files in OneDrive\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-365-apps-will-prompt-users-to-back-up-files-in-onedrive/\",\n \"Free vCISO Course: Turning MSPs and MSSPs into Cybersecurity Powerhouses\": \"https://www.bleepingcomputer.com/news/security/free-vciso-course-turning-msps-and-mssps-into-cybersecurity-powerhouses/\",\n \"Over 37,000 VMware ESXi servers vulnerable to ongoing attacks\": \"https://www.bleepingcomputer.com/news/security/over-37-000-vmware-esxi-servers-vulnerable-to-ongoing-attacks/\",\n \"Russia claims Ukraine hacked state youth organizations to recruit minors\": \"https://therecord.media/russia-claims-ukraine-hacked-kremlin-backed-youth-organizations\",\n \"Lumma Stealer e ClickFix: accoppiata malevola di nuovo in azione abusando di un dominio .it\": \"https://cert-agid.gov.it/news/lumma-stealer-e-clickfix-accoppiata-malevola-di-nuovo-in-azione-abusando-di-un-dominio-it/\",\n \"Credential Leaks, Enterprise Risk, and IOCs: How Contextual Intelligence Strengthens Your Defenses\": \"https://flashpoint.io/blog/credential-leaks-enterprise-risk-iocs-contextual-intelligence/\",\n \"Regolamento DORA: i punti chiave sulla gestione dei fornitori ICT\": \"https://www.cybersecurity360.it/legal/regolamento-dora-i-punti-chiave-sulla-gestione-dei-fornitori-ict/\",\n \"Malicious Chrome extensions can spoof password managers in new attack\": \"https://www.bleepingcomputer.com/news/security/malicious-chrome-extensions-can-spoof-password-managers-in-new-attack/\",\n \"Indagine Zscaler: le aziende devono investire sulla resilienza informatica\": \"https://www.securityinfo.it/2025/03/06/indagine-zscaler-le-aziende-devono-investire-sulla-resilienza-informatica/\",\n \"BianLian Denies Involvement in Ransom Letters: “Not Our Doing,” Group Tells SuspectFile.com\": \"https://www.suspectfile.com/bianlian-denies-involvement-in-ransom-letters-not-our-doing-group-tells-suspectfile-com/\",\n \"UAC-0173 Resumes Cyberattacks Against Ukrainian Notary Offices Using DARKCRYSTALRAT Malware\": \"https://cyble.com/blog/uac-0173-targeted-cyberattacks-on-ua-notary/\",\n \"Unmasking the new persistent attacks on Japan\": \"https://blog.talosintelligence.com/new-persistent-attacks-japan/\",\n \"Business continuity e disaster recovery: come potenziare la sicurezza aziendale nel rispetto della NIS2\": \"https://www.cybersecurity360.it/soluzioni-aziendali/business-continuity-e-disaster-recovery-come-potenziare-la-sicurezza-aziendale-nel-rispetto-della-nis2/\",\n \"Trojans disguised as AI: Cybercriminals exploit DeepSeek’s popularity\": \"https://securelist.com/backdoors-and-stealers-prey-on-deepseek-and-grok/115801/\",\n \"Spazio europeo dei dati sanitari, pubblicato il Regolamento: che c’è da sapere\": \"https://www.cybersecurity360.it/legal/privacy-dati-personali/spazio-europeo-dei-dati-sanitari-arriva-la-rivoluzione-europea-ecco-di-che-si-tratta/\",\n \"Cosa ci insegna la breccia nei firewall Fortinet\": \"https://www.cybersecurity360.it/news/cosa-insegna-breccia-fortinet/\",\n \"Phantom-Goblin: Covert Credential Theft and VSCode Tunnel Exploitation\": \"https://cyble.com/blog/phantom-goblin-covert-credential-theft/\"\n },\n \"bellingcat\": {\n \"Unmasking Maskov: How Bellingcat Found a Man Outfitting Russian Neo-Nazis\": \"https://www.bellingcat.com/news/2025/03/06/unmasking-maskov-how-bellingcat-found-a-man-outfitting-russian-neo-nazis/\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Just started my MSc Cyber Security in Royal Holloway after 20 years in the tech industry and saw this...\": \"https://www.reddit.com/r/netsecstudents/comments/1j4wnch/just_started_my_msc_cyber_security_in_royal/\"\n },\n \"The Hacker News\": {\n \"Elastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code Execution\": \"https://thehackernews.com/2025/03/elastic-releases-urgent-fix-for.html\",\n \"EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing\": \"https://thehackernews.com/2025/03/encrypthub-deploys-ransomware-and.html\",\n \"Outsmarting Cyber Threats with Attack Graphs\": \"https://thehackernews.com/2025/03/outsmarting-cyber-threats-with-attack.html\",\n \"Medusa Ransomware Hits 40+ Victims in 2025, Demands $100K–$15M Ransom\": \"https://thehackernews.com/2025/03/medusa-ransomware-hits-40-victims-in.html\",\n \"Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access\": \"https://thehackernews.com/2025/03/over-1000-wordpress-sites-infected-with.html\",\n \"U.S. Charges 12 Chinese Nationals in State-Backed Hacking Operations\": \"https://thehackernews.com/2025/03/us-charges-12-chinese-nationals-in.html\"\n },\n \"Graham Cluley\": {\n \"Smashing Security podcast #407: HP’s hold music, and human trafficking\": \"https://grahamcluley.com/smashing-security-podcast-407/\"\n },\n \"Deeplinks\": {\n \"Simple Phish Bait: EFF Is Not Investigating Your Albion Online Forum Account\": \"https://www.eff.org/deeplinks/2025/03/simple-phish-bait-eff-not-investigating-your-albion-online-forums-account\"\n },\n \"Social Engineering\": {\n \"God is light\": \"https://www.reddit.com/r/SocialEngineering/comments/1j565tf/god_is_light/\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"The Burn Notice, Part 2/5 | How We Uncovered a Critical Vulnerability in a Leading AI Agent Framework\": \"https://www.reddit.com/r/netsec/comments/1j4x1tp/the_burn_notice_part_25_how_we_uncovered_a/\",\n \"Command Injection - Compressive Guide & Payloads | VeryLazyTech\": \"https://www.reddit.com/r/netsec/comments/1j4yi3f/command_injection_compressive_guide_payloads/\",\n \"Zen and the Art of Microcode Hacking\": \"https://www.reddit.com/r/netsec/comments/1j4r13c/zen_and_the_art_of_microcode_hacking/\",\n \"Sitecore: Unsafe Deserialisation Again! (CVE-2025-27218)\": \"https://www.reddit.com/r/netsec/comments/1j4rhlc/sitecore_unsafe_deserialisation_again_cve202527218/\"\n },\n \"Information Security\": {\n \"PDF with password attached to email\": \"https://www.reddit.com/r/Information_Security/comments/1j576tw/pdf_with_password_attached_to_email/\",\n \"Email's info got stolen and I need to know if they got my other emails Linked to it\": \"https://www.reddit.com/r/Information_Security/comments/1j561nw/emails_info_got_stolen_and_i_need_to_know_if_they/\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"Check inbox from valid combolist\": \"https://www.reddit.com/r/blackhat/comments/1j4rc0g/check_inbox_from_valid_combolist/\"\n },\n \"Tor Project blog\": {\n \"Tor Project's internship sponsored by Google Summer of Code\": \"https://blog.torproject.org/tor-in-google-summer-of-code-mentorship/\",\n \"New Release: Tails 6.13\": \"https://blog.torproject.org/new-release-tails-6-13/\"\n },\n \"Deep Web\": {\n \"Guys i need i site i used to access in 2023\": \"https://www.reddit.com/r/deepweb/comments/1j4z1id/guys_i_need_i_site_i_used_to_access_in_2023/\",\n \"Es seguro entrar a la deep web desde un celular?\": \"https://www.reddit.com/r/deepweb/comments/1j5697y/es_seguro_entrar_a_la_deep_web_desde_un_celular/\"\n },\n \"Your Open Hacker Community\": {\n \"People who learned hacking using internet and by themselves, what's are the best sources to start?\": \"https://www.reddit.com/r/HowToHack/comments/1j4z0vs/people_who_learned_hacking_using_internet_and_by/\",\n \"Text via email\": \"https://www.reddit.com/r/HowToHack/comments/1j58vgb/text_via_email/\",\n \"How to find out a burner accounts identity\": \"https://www.reddit.com/r/HowToHack/comments/1j58sw9/how_to_find_out_a_burner_accounts_identity/\",\n \"Save image in which right click is disabled, inspect element > image link gives me a 403?\": \"https://www.reddit.com/r/HowToHack/comments/1j4r4f4/save_image_in_which_right_click_is_disabled/\",\n \"How can I get around Internet restrictions?\": \"https://www.reddit.com/r/HowToHack/comments/1j4xkhk/how_can_i_get_around_internet_restrictions/\",\n \"true or false?\": \"https://www.reddit.com/r/HowToHack/comments/1j4u9ud/true_or_false/\",\n \"how to see google forms responses?\": \"https://www.reddit.com/r/HowToHack/comments/1j4nmyy/how_to_see_google_forms_responses/\",\n \"My First Ethical Hacking Project, Help me out!\": \"https://www.reddit.com/r/HowToHack/comments/1j4pi98/my_first_ethical_hacking_project_help_me_out/\"\n },\n \"Security Affairs\": {\n \"Elastic patches critical Kibana flaw allowing code execution\": \"https://securityaffairs.com/174999/security/elastic-kibana-critical-flaw.html\",\n \"The U.S. DoJ charges 12 Chinese nationals for state-linked cyber operations\": \"https://securityaffairs.com/174986/cyber-warfare-2/u-s-department-of-justice-doj-charges-12-chinese-nationals.html\",\n \"Chinese Lotus Blossom APT targets multiple sectors with Sagerunex backdoor\": \"https://securityaffairs.com/174976/apt/lotus-blossom-apt-sagerunex-backdoor.html\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Don't Hack Russia - PSW #864\": \"http://sites.libsyn.com/18678/dont-hack-russia-psw-864\"\n }\n}"}, "9613c17316e0720c4b18fe81a1e9031057ea76a4": {"t": 1785772234.7773175, "n": 45951, "h": "1546a1c828faf32a", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-03-06 Review\": \"http://www.sec-wiki.com/?2025-03-06\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"赛宁网安大模型四件套重磅发布！院士领衔，清华复旦老师最佳实践指导\": \"https://www.anquanke.com/post/id/304941\"\n },\n \"paper - Last paper\": {\n \"Llama 的悖论：深入探索 Llama.cpp 的堆迷宫，从堆溢出到远程代码执行\": \"https://paper.seebug.org/3299/\"\n },\n \"Security Boulevard\": {\n \"What Is Data Leak Prevention? Benefits and Best Practices\": \"https://securityboulevard.com/2025/03/what-is-data-leak-prevention-benefits-and-best-practices/?utm_source=rss&utm_medium=rss&utm_campaign=what-is-data-leak-prevention-benefits-and-best-practices\",\n \"What Is an Identity Provider (IdP) and How Does It Work?\": \"https://securityboulevard.com/2025/03/what-is-an-identity-provider-idp-and-how-does-it-work/?utm_source=rss&utm_medium=rss&utm_campaign=what-is-an-identity-provider-idp-and-how-does-it-work\",\n \"Patch Management Guide: Benefits and Best Practices\": \"https://securityboulevard.com/2025/03/patch-management-guide-benefits-and-best-practices/?utm_source=rss&utm_medium=rss&utm_campaign=patch-management-guide-benefits-and-best-practices\",\n \"DEF CON 32 – War Stories – Hacking Millions Of Modems And Investigating Who Hacked My Modem\": \"https://securityboulevard.com/2025/03/def-con-32-war-stories-hacking-millions-of-modems-and-investigating-who-hacked-my-modem/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-war-stories-hacking-millions-of-modems-and-investigating-who-hacked-my-modem\",\n \"Votiro’s Proven Protection: Retroscan for Zero-Day Threats\": \"https://securityboulevard.com/2025/03/votiros-proven-protection-retroscan-for-zero-day-threats/?utm_source=rss&utm_medium=rss&utm_campaign=votiros-proven-protection-retroscan-for-zero-day-threats\",\n \"Daniel Stori’s Turnoff.US: ‘Docker Panacea’\": \"https://securityboulevard.com/2025/03/daniel-storis-turnoff-us-docker-panacea/?utm_source=rss&utm_medium=rss&utm_campaign=daniel-storis-turnoff-us-docker-panacea\",\n \"Emulating the Relentless RansomHub Ransomware\": \"https://securityboulevard.com/2025/03/emulating-the-relentless-ransomhub-ransomware/?utm_source=rss&utm_medium=rss&utm_campaign=emulating-the-relentless-ransomhub-ransomware\",\n \"Why Understanding Your Secrets is the Key to Faster Remediation\": \"https://securityboulevard.com/2025/03/why-understanding-your-secrets-is-the-key-to-faster-remediation/?utm_source=rss&utm_medium=rss&utm_campaign=why-understanding-your-secrets-is-the-key-to-faster-remediation\",\n \"Inside Black Basta Ransomware Group’s Chat Leak\": \"https://securityboulevard.com/2025/03/inside-black-basta-ransomware-groups-chat-leak/?utm_source=rss&utm_medium=rss&utm_campaign=inside-black-basta-ransomware-groups-chat-leak\",\n \"Top 5 Ways Automation Increases Profitability\": \"https://securityboulevard.com/2025/03/top-5-ways-automation-increases-profitability/?utm_source=rss&utm_medium=rss&utm_campaign=top-5-ways-automation-increases-profitability\"\n },\n \"Der Flounder\": {\n \"Determining update source for Microsoft Office 365 applications\": \"https://derflounder.wordpress.com/2025/03/06/determining-update-source-for-microsoft-office-365-applications/\"\n },\n \"奇安信攻防社区\": {\n \"Tomcat内存马之Upgrade构建调试分析\": \"https://forum.butian.net/share/4178\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"8 Best AI Headshot Generators of 2025 — Tested & Reviewed (With Samples!)\": \"https://infosecwriteups.com/best-ai-headshot-generators-2025-a2480d72dc6d?source=rss----7b722bfd1b8d---4\",\n \"Sendai Vulnlab| ESC4 & ReadGMSAPassword for AD Domination\": \"https://infosecwriteups.com/sendai-vulnlab-esc4-readgmsapassword-for-ad-domination-8b2638bf8268?source=rss----7b722bfd1b8d---4\",\n \"$50-$100 worth Sensitive Leaks via Google Dorks | Part 2\": \"https://infosecwriteups.com/50-100-worth-sensitive-leaks-via-google-dorks-part-2-868f4b1e7919?source=rss----7b722bfd1b8d---4\",\n \"Use this unique way to find broken link hijacking bugs.\": \"https://infosecwriteups.com/use-this-unique-way-to-find-broken-link-hijacking-bugs-3081878839d4?source=rss----7b722bfd1b8d---4\",\n \"SOC329 — CUPS RCE Detection via IPP Injection (CVE-2024–47177)\": \"https://infosecwriteups.com/soc329-cups-rce-detection-via-ipp-injection-cve-2024-47177-6022c49181f3?source=rss----7b722bfd1b8d---4\",\n \"Open Redirect To XSS | Hackerone\": \"https://infosecwriteups.com/open-redirect-to-xss-hackerone-413ced1d4e1e?source=rss----7b722bfd1b8d---4\",\n \"Finding the origin IP part 2\": \"https://infosecwriteups.com/finding-the-origin-ip-part-2-c96d7488c40e?source=rss----7b722bfd1b8d---4\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"时隔四年再提“平安中国”，国投智能深耕AI+公共安全\": \"https://www.4hou.com/posts/pn6Q\",\n \"为AI助跑！赛宁网安大模型四件套重磅发布！\": \"https://www.4hou.com/posts/mkVR\",\n \"个人信息安全三重防线（下）：三者相互独立还是紧密联系？\": \"https://www.4hou.com/posts/9jAz\",\n \"AI 训练数据藏雷：近 12,000 个 API 密钥与密码曝光\": \"https://www.4hou.com/posts/jBMy\",\n \"国产化替换案例：CACTER邮件网关为Groupwise系统加固邮件安全防线\": \"https://www.4hou.com/posts/kgKJ\"\n },\n \"obaby@mars\": {\n \"我不配拥有题目\": \"https://h4ck.org.cn/2025/03/19575\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Thu Mar 6 20:26:57 UTC 2025\": \"https://github.com/trickest/cve/commit/992d527aeb84314d5a5be5f85791c47ec873e957\",\n \"Update Thu Mar 6 12:27:28 UTC 2025\": \"https://github.com/trickest/cve/commit/4133c68bef225412769910352ee86b21c9a6a70f\",\n \"Update Thu Mar 6 04:26:35 UTC 2025\": \"https://github.com/trickest/cve/commit/e4616ab9fc196275d51cf5bdd9dd3c260717abc7\"\n },\n \"一个被知识诅咒的人\": {\n \"【人工智能】深入理解深度学习模型可解释性：使用LIME和SHAP方法解析预测结果\": \"https://blog.csdn.net/nokiaguy/article/details/146065016\",\n \"【人工智能】用Python与多语言模型畅游全球——跨语言文本生成的全流程实战\": \"https://blog.csdn.net/nokiaguy/article/details/146064978\"\n },\n \"ongoing by Tim Bray\": {\n \"Bye, Prime\": \"https://www.tbray.org/ongoing/When/202x/2025/03/06/Canceled-Prime\"\n },\n \"ElcomSoft blog\": {\n \"NVIDIA GeForce RTX 5090 Power Connectors Melting Again\": \"https://blog.elcomsoft.com/2025/03/nvidia-geforce-rtx-5090-power-connectors-melting-again/\"\n },\n \"Doonsec's feed\": {\n \"OSPF邻居vs邻接关系傻傻分不清？\": \"https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247528491&idx=1&sn=5a2ed4dfecea8ee57a8a88120ca8e81f\",\n \"Nginx配置硬核干货！从入门到精通，一篇搞定！\": \"https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649465916&idx=1&sn=0904225a58999df7b89b26c34dad175e\",\n \"【智能体发布】：AI公文优化专家\": \"https://mp.weixin.qq.com/s?__biz=MzI1NDMxOTkyNw==&mid=2247485541&idx=1&sn=acc73f240fedf7f6de13b101ad832d0d\",\n \"服务器多？密码烦？用这个脚本，一键搞定SSH免密信任！\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTc5MjM4Nw==&mid=2457387546&idx=1&sn=4d4d24486ff8eb7dc882c39d995123d8\",\n \"快看！风险管理框架2.0的NIST RMF光环\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492478&idx=1&sn=0a8d2650b6731e7e890da34fdab411c9\",\n \"挖矿病毒应急响应处置手册\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490067&idx=1&sn=f1a7306995b639d415565f535c007694\",\n \"SRC挖掘 | fastjson反序列化漏洞实战\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490067&idx=2&sn=ee52f8aa1b647a17c100596ca1ee8238\",\n \"Lynis 安全审计与加固工具\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490067&idx=3&sn=bda552821b9f4800cf8c543d42fac371\",\n \"[※]一个神一般的linux命令行RDP远程桌面工具\": \"https://mp.weixin.qq.com/s?__biz=MzkwMDMyOTA1OA==&mid=2247484437&idx=1&sn=acee78cae6dc3f10ac06be17be6cda37\",\n \"基于AI对抗雷池waf [已开源]\": \"https://mp.weixin.qq.com/s?__biz=MzAxNzY0ODI5MQ==&mid=2247492220&idx=1&sn=d4bfed3f222d68cd377eb1493da01262\",\n \"【智能体发布】：审讯辅助专家\": \"https://mp.weixin.qq.com/s?__biz=MzI1NDMxOTkyNw==&mid=2247485539&idx=1&sn=85d3de6eae6aebc13848e8d4f154bcd6\",\n \"BadUSB攻击全解：从原理到实践与防御\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247487930&idx=1&sn=2661e75b605aa1848a7771ef7409e2df\",\n \"说实话，我自卑了，聊聊年轻人赚钱那些事....\": \"https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538982&idx=1&sn=2682e5e01faad4fcfea513e89ab433ef\",\n \"Manus 创始人肖弘简历—从华科极客到全球通用AI Agent领军人\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247544570&idx=1&sn=3bbf3f1f241a5c387283f60b4b23664e\",\n \"动态路由协议，网络工程师必知\": \"https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247528478&idx=1&sn=9aa8dfda05e70af4567b2b1f7dee22d9\",\n \"EDR 规避与硬件断点的盲侧技术\": \"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487572&idx=1&sn=43722c7852b44c2660cd5cc48763859d\",\n \"每个CISO都应关注的GENAI安全矩阵\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488821&idx=1&sn=7e99e5d2a8cadf1c175e450a29d3059d\",\n \"Manus一夜封神！这个AI“电子牛马”竟能自动搬砖？打工人该笑还是慌？\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDkzMTk3Mg==&mid=2247485406&idx=1&sn=9b0067e61b847d93f22bfdae6c448396\",\n \"xscan反馈问卷\": \"https://mp.weixin.qq.com/s?__biz=MzU2NzcwNTY3Mg==&mid=2247485365&idx=1&sn=4a5bf1710f4167f32993ed72e709e58a\",\n \"知识解密：利用CDN底层技术替代多地Ping\": \"https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490448&idx=1&sn=e652531c12bd784ce81e14ec13a272d2\",\n \"人工智能安全趋势研究\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655269273&idx=1&sn=a449596482dff586f3a4edb7935c0578\",\n \"[更新日志]hawkeye-去除规则，避免杀软误报\": \"https://mp.weixin.qq.com/s?__biz=MzU4NTg4MzIzNA==&mid=2247484622&idx=1&sn=ce56975d9029b09199c2978ae21c3d55\",\n \"昨天抖音掉洞，今天商城捡洞\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518660&idx=1&sn=35bad2a4e001558fb71fcbbba2a43c58\",\n \"SRC专项知识库\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518660&idx=2&sn=8c949881da6d33fd2ba8410601699520\",\n \"专题·漏洞人才培养 | 实战化漏洞安全人才培养 为新质生产力保驾护航\": \"https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462668&idx=1&sn=26885cbdc84ff23e350a6e29b79636ac\",\n \"专题·漏洞人才培养 | 以CTF学科竞赛为抓手的漏洞人才培养探索与实践\": \"https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462668&idx=2&sn=fea352bcd11c8dd1d9163cf83b2f0959\",\n \"从DeepSeek到Manus：当AI学会\\\\\\\"手脑并用\\\\\\\"，我们或站在职业消亡的临界点\": \"https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500758&idx=1&sn=b4f1094755e5ebfbba6ab1aa0375e082\",\n \"总书记与我们在一起丨勇挑大梁 为全国发展大局作贡献\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDc2MzcwNw==&mid=2247498619&idx=1&sn=715cc157829f59cce8363711a6a0957c\",\n \"桶文件覆盖之谷歌语法显神功\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497226&idx=1&sn=858dbb1b0a23b21ad618a3850106166c\",\n \"mysql屏蔽nmap扫描\": \"https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486625&idx=1&sn=f7be6b433152657ae2f16d32ca4fa522\",\n \"金和OA-C6系统接口IncentivePlanFulfillAppprove.aspx存在SQL注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490647&idx=1&sn=79a47f349f15755a1ac9615096a65d29\",\n \"啊？什么上中级猴子要花8000RMB\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486054&idx=1&sn=d97ea6ffb1989c3da386ef22f9a1f326\",\n \"等保信息系统定级指导（国标+行标）\": \"https://mp.weixin.qq.com/s?__biz=MzUyNjk2MDU4MQ==&mid=2247486678&idx=1&sn=aa0238764c77f454bac15176094e3dd7\",\n \"智能体AI-manus，早申请早体验\": \"https://mp.weixin.qq.com/s?__biz=MzU1NzgyMzA0OA==&mid=2247490401&idx=1&sn=fb7190d4644f60cf20b643b68a269cc4\",\n \"G.O.S.S.I.P 阅读推荐 2025-03-06 禅与AMD CPU维修艺术\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499871&idx=1&sn=b0bb73c5122fe130a95fe09e0a333447\",\n \"告别付费焦虑！无问网安社区月初福利\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247485995&idx=1&sn=93ae28d666bc3fdef0ddbe671d1599f0\"\n },\n \"Microsoft Security Blog\": {\n \"Women’s History Month: Why different perspectives in cybersecurity and AI matter more than ever before\": \"https://www.microsoft.com/en-us/security/blog/2025/03/06/womens-history-month-why-different-perspectives-in-cybersecurity-and-ai-matter-more-than-ever-before/\",\n \"Malvertising campaign leads to info stealers hosted on GitHub\": \"https://www.microsoft.com/en-us/security/blog/2025/03/06/malvertising-campaign-leads-to-info-stealers-hosted-on-github/\"\n },\n \"Sucuri Blog\": {\n \"Cascading Redirects: Unmasking a Multi-Site JavaScript Malware Campaign\": \"https://blog.sucuri.net/2025/03/cascading-redirects-unmasking-a-multi-site-javascript-malware-campaign.html\"\n },\n \"Trustwave Blog\": {\n \"Defending Manufacturing: How Cybercriminals Are Targeting the Industry and How to Respond\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/defending-manufacturing-how-cybercriminals-are-targeting-the-industry-and-how-to-respond/\"\n },\n \"Orange Cyberdefense\": {\n \"InvokeADCheck – A PowerShell Module for Assessing Active Directory\": \"https://sensepost.com/blog/2025/invokeadcheck-a-powershell-module-for-assessing-active-directory/\"\n },\n \"GuidePoint Security\": {\n \"Breaking Basta: Insights from Black Basta’s Leaked Ransomware Chats\": \"https://www.guidepointsecurity.com/blog/breaking-basta-insights-from-black-bastas-leaked-ransomware-chats/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"$50-$100 worth Sensitive Leaks via Google Dorks | Part 2\": \"https://infosecwriteups.com/50-100-worth-sensitive-leaks-via-google-dorks-part-2-868f4b1e7919?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Use this unique way to find broken link hijacking bugs.\": \"https://infosecwriteups.com/use-this-unique-way-to-find-broken-link-hijacking-bugs-3081878839d4?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Finding the origin IP part 2\": \"https://infosecwriteups.com/finding-the-origin-ip-part-2-c96d7488c40e?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"SpiderLabs Blog\": {\n \"A Deep Dive into Strela Stealer and how it Targets European Countries\": \"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/a-deep-dive-into-strela-stealer-and-how-it-targets-european-countries/\"\n },\n \"Twitter @bytehx\": {\n \"Re @19whoami19 @Hacker0x01 Congrats!\": \"https://x.com/bytehx343/status/1897624735594459527\"\n },\n \"Securelist\": {\n \"Trojans disguised as AI: Cybercriminals exploit DeepSeek’s popularity\": \"https://securelist.com/backdoors-and-stealers-prey-on-deepseek-and-grok/115801/\"\n },\n \"Horizon3.ai\": {\n \"Breaking the Bank: How NodeZero® Secured a Financial Giant in Just 14 Hours\": \"https://www.horizon3.ai/downloads/use-case/breaking-the-bank-how-nodezero-secured-a-financial-giant-in-just-14-hours/\"\n },\n \"The Trail of Bits Blog\": {\n \"Benchmarking OpenSearch and Elasticsearch\": \"https://blog.trailofbits.com/2025/03/06/benchmarking-opensearch-and-elasticsearch/\"\n },\n \"Didier Stevens\": {\n \"Update: oledump.py Version 0.0.79\": \"https://blog.didierstevens.com/2025/03/06/update-oledump-py-version-0-0-79/\"\n },\n \"VMRay\": {\n \"What is SEO Poisoning? A Growing Threat to Cybersecurity\": \"https://www.vmray.com/seo-poisoning/\",\n \"DLL Sideloading: What It Is and How to Detect It\": \"https://www.vmray.com/dll-sideloading/\"\n },\n \"Malwarebytes\": {\n \"Ransomware threat mailed in letters to business owners\": \"https://www.malwarebytes.com/blog/news/2025/03/ransomware-threat-mailed-in-letters-to-business-owners\",\n \"Android botnet BadBox largely disrupted\": \"https://www.malwarebytes.com/blog/news/2025/03/android-botnet-badbox-largely-disrupted\"\n },\n \"Twitter @James Kettle\": {\n \"Sadly, my attempt to perform WAF onboarding on the target website failed 😂\": \"https://x.com/albinowax/status/1897668955927429586\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"FreeBuf早报 | 2025年全球50家最佳网络安全公司；谷歌不打开应用也收集用户数据\": \"https://www.freebuf.com/news/423780.html\",\n \"最新研究，谷歌大量收集用户数据，无需打开应用\": \"https://www.freebuf.com/news/423763.html\",\n \"freebuf快速同步语雀文章\": \"https://www.freebuf.com/sectool/417015.html\",\n \"跟着黑客学习fake captcha\": \"https://www.freebuf.com/articles/system/423758.html\",\n \"勒索团伙利用网络摄像头绕过EDR实施加密攻击\": \"https://www.freebuf.com/articles/network/423845.html\",\n \"研究人员绕过 CrowdStrike Falcon 传感器执行恶意应用程序\": \"https://www.freebuf.com/articles/endpoint/423835.html\",\n \"Gartner发布2025年网络安全六大预测\": \"https://www.freebuf.com/news/423730.html\"\n },\n \"绿盟科技技术博客\": {\n \"绿盟科技威胁情报月报-2025年2月\": \"https://blog.nsfocus.net/2025-2/\"\n },\n \"安全牛\": {\n \"逾10亿美元Bybit被盗加密货币已初步进行洗钱，引发全球追踪；WordPress插件RCE漏洞曝光，威胁超10万网站 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135403&idx=1&sn=782d8879f7d96cee8da7d2513d16fb2b&chksm=bd15ad788a62246e12de917ea5e93cdd9adbf8cdf4f2f544ff98e7370054e009d1bb8966c4e8&scene=58&subscene=0#rd\",\n \"揭秘黑客窃取数据的内幕\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135403&idx=2&sn=4e73f5dc6abd6ab6cfa3c101af71b382&chksm=bd15ad788a62246e90569ed6ef7957bccc8959096e055c51d8976e32f9b7cab16e7000b5f7c5&scene=58&subscene=0#rd\"\n },\n \"Shostack & Friends Blog\": {\n \"Strategy for threat modeling AI\": \"https://shostack.org/blog/strategy-for-threat-modeling-ai/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"Google 以国家安全理由希望不被肢解\": \"https://www.solidot.org/story?sid=80730\",\n \"光首次被转化为超固体\": \"https://www.solidot.org/story?sid=80729\",\n \"NASA 关闭航海家的科学设备以节省电力\": \"https://www.solidot.org/story?sid=80728\",\n \"研究发现精液质量与男性寿命相关\": \"https://www.solidot.org/story?sid=80727\",\n \"NASA 首次在月球上使用 GPS\": \"https://www.solidot.org/story?sid=80726\",\n \"OpenAI 计划对博士水平的 AI 智能体收取 2 万美元月费\": \"https://www.solidot.org/story?sid=80725\",\n \"36 家石化巨头产生的碳排放占到了全球的一半\": \"https://www.solidot.org/story?sid=80724\",\n \"美国停止分享大使馆领事馆收集的空气质量数据\": \"https://www.solidot.org/story?sid=80723\",\n \"全球暖化威胁低纬度地区到粮食产量\": \"https://www.solidot.org/story?sid=80722\",\n \"犹他州要求美国应用商店验证用户年龄\": \"https://www.solidot.org/story?sid=80721\"\n },\n \"HackerNews\": {\n \"黑客利用暴露的云凭证，仅 19 分钟劫持 AI 大模型\": \"https://hackernews.cc/archives/57700\",\n \"WordPress 插件漏洞使 10000 个网站遭代码执行攻击\": \"https://hackernews.cc/archives/57698\",\n \"YouTube 警告：AI 生成的 CEO 视频用于钓鱼攻击\": \"https://hackernews.cc/archives/57695\",\n \"50 万台受感染的 Android 设备上的 BadBox 恶意软件被成功阻断\": \"https://hackernews.cc/archives/57693\",\n \"七种恶意 Go 软件包被发现针对 Linux 和 macOS 系统\": \"https://hackernews.cc/archives/57691\"\n },\n \"杨龙\": {\n \"Prepared statement needs to be re-prepared\": \"https://www.yanglong.pro/prepared-statement-needs-to-be-re-prepared/\"\n },\n \"安全分析与研究\": {\n \"恶意软件分析与逆向破解工具包\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490905&idx=1&sn=37201c8f21097b01ad5225ab9b1e35d4&chksm=902fb271a7583b6756d87dc12b0b26834918d0606f80ded4edf95c98919df8347194fddaa604&scene=58&subscene=0#rd\"\n },\n \"锦行科技\": {\n \"锦行科技网安创意课高校巡演启动，2025首站走进广东财贸职业学院！\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493854&idx=1&sn=752e4ab6bc7bb1312d0b44da74bea485&chksm=979a137ba0ed9a6df210b557022182ebf87ad3e8d8b380c479caee920c499715c0e4a9bb42a8&scene=58&subscene=0#rd\",\n \"企业网络安全：构建多层防御体系，守护数字资产\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493854&idx=2&sn=532b69a6d1e0c0b04808f5f496c46ad7&chksm=979a137ba0ed9a6d9ed0cfcb0f8eefcd49cbcee81d1c35866b11358d23ada53b71393288ff32&scene=58&subscene=0#rd\"\n },\n \"Black Hills Information Security\": {\n \"Burp Suite Extension: Copy For\": \"https://www.blackhillsinfosec.com/copy-for/\"\n },\n \"奇安信 CERT\": {\n \"Elastic Kibana 原型污染致任意代码执行漏洞(CVE-2025-25012)安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503086&idx=1&sn=54b69bd61f8b821652d16322e589e4d0&chksm=fe79e876c90e61605089205fed1cd9b9c046434058f58982e7e8a76e785ecdd9b8869f510bc0&scene=58&subscene=0#rd\"\n },\n \"威努特安全网络\": {\n \"医疗行业存算分离新趋势：如何破解海量数据存储与计算难题？\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131490&idx=1&sn=6b00757b480e31756a09964f1f4ad358&chksm=80e714d2b7909dc4539fac52d4f7ce3bb2088ef6be0239851fb1c69d3edb690545d7acde8acf&scene=58&subscene=0#rd\",\n \"工业互联网雷达：助力大型石油企业资产管理精准高效\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131447&idx=1&sn=ad8c11dff9d64a0898bf6ff139e2e8a8&chksm=80e71487b7909d915890f8b84943dd4699ae46c8afd666bc727827dddaecdf06d6b5bfbe0dfa&scene=58&subscene=0#rd\"\n },\n \"吾爱破解论坛\": {\n \"【开放注册公告】吾爱破解论坛2025年3月13日十七周年开放注册公告\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141850&idx=1&sn=7f2cdc72f2748ba4ccb5776257be544d&chksm=bd50a68e8a272f987301f273fa9310b2feca3ab9e3a87374dc7a8ed47eecc8972a1cac00b527&scene=58&subscene=0#rd\"\n },\n \"青衣十三楼飞花堂\": {\n \"2025年Chrome继续使用旧版插件\": \"https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488053&idx=1&sn=57117f6ea7e29bafc6295495b0a3d70f&chksm=fab2d10acdc5581cf904a956b8fd12debfad52768a00a4e1998e9e9d06efee5b6593ae324f02&scene=58&subscene=0#rd\"\n },\n \"绿盟科技研究通讯\": {\n \"全球云上数据泄露风险分析简报（第五期）：配置错误叠加供应链投毒与第三方组件漏洞，大模型数据链暴露全生态安全脆弱性\": \"https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498531&idx=1&sn=c8c6e6ecb121cd2533d8dc4dbd3dc81e&chksm=e84c5dfcdf3bd4ea5d206af1b35fc989670d47d9004a543464f67e0dfae99a0987ea78760fd7&scene=58&subscene=0#rd\"\n },\n \"代码卫士\": {\n \"谷歌修复已遭利用的安卓0day\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522418&idx=1&sn=6414a084ddce5639ed66ee1cdf5970cb&chksm=ea94a918dde3200e4957c6c238db663d0186415de3557b205951842801e465f313189d312680&scene=58&subscene=0#rd\",\n \"CISA称将不会停止监控俄罗斯网络威胁\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522418&idx=2&sn=fcea7c698026178b462b6b2369a3a5a2&chksm=ea94a918dde3200e121c48ee6430d3343d2de2c32624a4c6824afb77338b8b9a83730cf49e21&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"初探 android crc 检测及绕过\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590565&idx=1&sn=755a5d7753e8ae9721c994111c34d6ce&chksm=b18c2def86fba4f9b88b21cc7ee7a38208d9c783da1421eee664f69ef17184e3e722bdb341ac&scene=58&subscene=0#rd\",\n \"GDK8+挥码枪 | 轻松玩转ARM开发！让调试像“查字典”一样简单\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590565&idx=2&sn=b31aedd8e5c0c6984b7a883aaad935dc&chksm=b18c2def86fba4f9326dad1f4c6a9d9bd8a71b7067e285ce8c102a55324335a5f87ad18fb353&scene=58&subscene=0#rd\",\n \"霉霉演唱会门票遭黑客非法获取，牟利600万美元被捕\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590565&idx=3&sn=ce3d76100dd1f24820618805f863ae86&chksm=b18c2def86fba4f9619324b5bb96c7fb31dffd4e31c2e1e9ea0e3f85e3af594978936bb97674&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \"MachineKeys 大字典：利用 3000 条 MachineKeys 爆破 ViewState 反序列化漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499062&idx=1&sn=780d36184c63b257ce9a15c1e4cf67e5&chksm=fa5953dbcd2edacd634e99df62c8e21b1b249a45f475b8616cae4fc6a3152df08b9f1dcb90d5&scene=58&subscene=0#rd\",\n \".NET 内网攻防实战电子报刊\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499062&idx=2&sn=52f04375de06c2511d50fb71225f96a6&chksm=fa5953dbcd2edacd4e4e8227bee307f834bf5f8900ed61318fead09ac54127310c007dc0378b&scene=58&subscene=0#rd\",\n \"通过 Sharp4FUAC 绕过 UAC 实现本地权限提升\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499062&idx=3&sn=040506f1aec0a1640025ed2d5eae2058&chksm=fa5953dbcd2edacdd87ca5acb0f771ea9e338bda63cce0b7a2b23adc0ba18109cc743f05c272&scene=58&subscene=0#rd\"\n },\n \"威胁棱镜\": {\n \"2024 勒索软件年度态势报告\": \"https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247487742&idx=1&sn=50204f2d7e9e19367184f7eeb48aa955&chksm=c1e9e732f69e6e24d2ff4808bff1d7e56f1cc9842f4b56d3f1ec34be8b3842c5550cd3895432&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】VMware 修复了 ESX 产品中三个被积极利用的零日漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068293&idx=1&sn=4072ff26a5a85713e31cd4cf30212887&chksm=f36e7585c419fc9356a7046dc54fb206e322422b5731c4ab60f59fb6313a63c15c4c84191994&scene=58&subscene=0#rd\",\n \"【安全圈】CISA 警告 VMware 漏洞正被积极利用，并敦促立即修补\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068293&idx=2&sn=fab921fefe8673f13fcda40d2f2a8a58&chksm=f36e7585c419fc93777f66d5dc6d0cab3c6eef6c192ccbcb909d9e932e498d3bfcbf3a14e4e3&scene=58&subscene=0#rd\",\n \"【安全圈】Windows KDC 代理 RCE 漏洞让攻击者远程控制服务器\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068293&idx=3&sn=c28c7a09130437d1363a6b34dc11bdcf&chksm=f36e7585c419fc93f0d6435efa2025a8433255864c2df71c0fc5a4c4a74991faaecce0f85f3f&scene=58&subscene=0#rd\"\n },\n \"天御攻防实验室\": {\n \"美俄网络战：美防长\\\"暂停令\\\"背后的战略黑洞\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486295&idx=1&sn=31e4f344dccf056d57b0ad0a4de00a69&chksm=fb04c83fcc734129fc6814b739082bc3c8d5af45b8ba337558b1ba407bd177a9604fc42e926d&scene=58&subscene=0#rd\"\n },\n \"网络空间安全科学学报\": {\n \"学术前沿 | 抗侧信道攻击的后量子密码掩码转换方案\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505184&idx=1&sn=7beea30d56e863adc3126e71c073b050&chksm=e9bfc19edec848886f9bcbe4305956146746175439cdaf61f4eb84b9bd91ae47cb8063e893ff&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"Gartner发布2025年网络安全六大预测\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513890&idx=1&sn=d58c20e6410d10d4c7d53aa1362a6c35&chksm=ebfaf002dc8d79143dc435b8da6bd988190fb65ee43ddefaf1d98e54dc87436f682e68492fa1&scene=58&subscene=0#rd\",\n \"工信部：关于防范Murdoc_Botnet僵尸网络的风险提示\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513890&idx=2&sn=2adcf91198d4e710db18114286dbfd3c&chksm=ebfaf002dc8d79146800bd3b668889b62624cf4be4fdbf85472b46c618d0e35d39dfe0436268&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"机器人到来前，智能汽车可能是更早服务人类的 AI Agent\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075148&idx=1&sn=8341aba453f9c6942359bd1a0a2289b1&chksm=7e57cb7a4920426c3acb152823056e4cae3bc43142816caa0d00b3fbbb9493eb4533ad84f472&scene=58&subscene=0#rd\",\n \"苹果发布M3 Ultra：为AI而生，顶配超10万；全球首款AI Agent产品上线；腾讯元宝回应「霸王条款」｜极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075124&idx=1&sn=587ce2f2023d0e9a8c6ff02d9d9d276d&chksm=7e57cb02492042149192d473cb36d2bf2479af1345f74a95294abf1c998647a7094705e8a11f&scene=58&subscene=0#rd\"\n },\n \"默安科技\": {\n \"只聊干货的【落地有声】专栏第一期：金融行业开源软件治理\": \"https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247500400&idx=1&sn=84f26e24ac813d224ce3be5f93fa2888&chksm=e93b3552de4cbc44fd8c9296f702c4cd3719862fd3377cac4cc38c4406cc9d677e33dfec4fb1&scene=58&subscene=0#rd\"\n },\n \"奇安信威胁情报中心\": {\n \"仿冒DeepSeek本地部署工具：银狐与UTG-Q-1000的新活动\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247514330&idx=1&sn=e4c964524a17037b3d98be0d6cac095f&chksm=ea664faddd11c6bbbb93ee756a35d89f4783a80cd305f169bd30dd4bc8fee4318e984b1cbc75&scene=58&subscene=0#rd\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 阅读推荐 2025-03-06 禅与AMD CPU维修艺术\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499871&idx=1&sn=b0bb73c5122fe130a95fe09e0a333447&chksm=c063ee86f7146790d32636084711819ffc3dea158eb5bff927d578e1d65d09d4d86a5c565b12&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"【揭秘】金正恩的那辆迈巴赫是怎么去到平壤的？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560177&idx=1&sn=2d26c829c0c1f46113bf88ac9308993b&chksm=871178fab066f1ec9517702053e324a16b2df20e6508593b77672ec9f7af521137ecb35cb736&scene=58&subscene=0#rd\",\n \"朝鲜半岛军事安全形势对我情报工作的考验与提升路径\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560177&idx=2&sn=0b8a0105afeaaa66706dcdbe73024716&chksm=871178fab066f1ec62cd99aa77c1e7f0e6a7bd4d63dc1c6e6296848bd045f5556fe76d4e3679&scene=58&subscene=0#rd\"\n },\n \"中国信息安全\": {\n \"前沿 | 人工智能国际治理：安全偏好及其现实影响\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237883&idx=1&sn=ecc1f396f87f8a84b1144aaa66233ba0&chksm=8b5809c2bc2f80d4694405d933f20cc98b5a0f5dbe112db1445e02e1bc852733d41578094531&scene=58&subscene=0#rd\",\n \"专家解读 | 蒋艳：加快工业高质量数据集建设 筑牢人工智能赋能新型工业化根基\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237883&idx=2&sn=e6ff4c84a374a9d066a45070cca7bf15&chksm=8b5809c2bc2f80d4304d44fff0c16507c5c0934ec0cee398099597d59fe1c3bcc2add76ddb1b&scene=58&subscene=0#rd\",\n \"专家观点 | 以数据安全认证促进数字经济高质量发展\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237883&idx=3&sn=7fe8aa511abb27614c7f669b0d3268a3&chksm=8b5809c2bc2f80d47fb2c710dac278f0df6a1f5862ae69ce2e3d096407b3bcd1be3bc61c1811&scene=58&subscene=0#rd\",\n \"中消协提示：警惕新型诈骗手段，远离网络购物陷阱！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237883&idx=4&sn=0fa60782a971643b2337a70868ccef79&chksm=8b5809c2bc2f80d490c18aca3ff12c14c2a174946bd7e351ab28a10687c74fab558caded5c75&scene=58&subscene=0#rd\",\n \"观点 | 如何保证电商平台在流量与算法驱动下的公平性\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237883&idx=5&sn=735472f31690aa300454fe3058180a7e&chksm=8b5809c2bc2f80d45dfd82d1cbd2a8c90360aeed96cfd41ed2708d22c4673e6cb46c94972c35&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"报告解读：ICS/OT 安全预算不断增加，但关键领域资金不足\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537916&idx=1&sn=9e0a6e4f6c00bcc9cae2d5b03fd4765d&chksm=c1442641f633af57d8cda7a1300c7c626625525dd6add295132b5aa3532a929c75aba153f4c3&scene=58&subscene=0#rd\",\n \"​【新品发布】赛宁网安大模型四件套重磅发布！\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537916&idx=2&sn=aafdeecc7449bacee47ae7b45a62bd06&chksm=c1442641f633af57831946d1177958003e6bc3f25fed88ca7af38174997ecd0a27611de23c28&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"AI 训练数据藏雷：近 12,000 个 API 密钥与密码曝光\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581417&idx=1&sn=f36148918b5bfdf5ce28229621c2b1d9&chksm=e9146ed3de63e7c55aba140f0c914286e3680be0baffcb4feeb29d0c23ea0f839417a5b4e946&scene=58&subscene=0#rd\"\n },\n \"京东安全应急响应中心\": {\n \"京麒沙龙15期回顾①-京东软件供应链安全运营与实践分享\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727844230&idx=1&sn=ff08ee2357c6aa560ae9e3883a2bea67&chksm=80504e0eb727c7184fe55952094a63bb557cf14db65bc2ace1425b3a4e28bfd0bbe225ddf51e&scene=58&subscene=0#rd\"\n },\n \"腾讯科恩实验室\": {\n \"腾讯云安全科恩实验室2025社会招聘\": \"https://mp.weixin.qq.com/s?__biz=MzU1MjgwNzc4Ng==&mid=2247512825&idx=1&sn=17eb5a6a83a8bfb41d60f0bb5b21bbae&chksm=fbfe8efccc8907ea78e5ffb335176aa479af267a572e188b066ec912a0dcb999ffc994ca3e2a&scene=58&subscene=0#rd\",\n \"云智研发公司科恩工作室2025年社会招聘\": \"https://mp.weixin.qq.com/s?__biz=MzU1MjgwNzc4Ng==&mid=2247512825&idx=2&sn=24a46f93973d7630399ac2199bc95002&chksm=fbfe8efccc8907eae4cd24c1d8b47c0498c0e0e3c91e26fa4f6ea22a7b5d87a85d9632788577&scene=58&subscene=0#rd\"\n },\n \"字节跳动技术团队\": {\n \"为你的奇思妙想喝彩｜稀土掘金首届 AI FOR CODE 创意挑战赛开启报名啦！\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513681&idx=1&sn=cf9ec6a2168caf4a3185637225fce90e&chksm=e9d37db3dea4f4a585a55ea6adf6a02de5ca8709233bc77e4b39e90528046714ede52281a3a6&scene=58&subscene=0#rd\"\n },\n \"黑伞安全\": {\n \"从数据库沦陷到供应链投毒：大模型安全危机背后的“隐形战场”\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489756&idx=1&sn=c4c797f9202614853b92777e88699fde&chksm=fb029584cc751c9267dba2a3e15103684cc5ab91ae652fe0e298a2ed6d0aa52ce10064c47cdd&scene=58&subscene=0#rd\"\n },\n \"Yak Project\": {\n \"SyntaxFlow Java实战（一）：值的搜索与筛选\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247527833&idx=1&sn=ca5486cfe5c638eb4dd389c7c1c7e1e3&chksm=c2d1113df5a6982be27719f7ed450cecf992f2c1f690e9c12ba080d8392f07ac2ae681e08134&scene=58&subscene=0#rd\"\n },\n \"美团技术团队\": {\n \"老显卡福音！美团开源首发INT8无损满血版DeepSeek R1\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651779979&idx=1&sn=5d90567182478675d953587161579b6b&chksm=bd122ac68a65a3d0cfda1352db16e6ff2d29a88e25b01d83a7f919348d285a594c6f766edb1d&scene=58&subscene=0#rd\"\n },\n \"表图\": {\n \"CrowdStrike 2025 财年 Q4 财报要点：强劲增长与战略升级\": \"https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247484733&idx=1&sn=67758e73d5f59344345c7c9f10cf8d09&chksm=facb83a8cdbc0abe2f76b0cc763a1a17cb7d7cced910079b01a427bae752ac36f3d2594299bf&scene=58&subscene=0#rd\"\n },\n \"青藤智库\": {\n \"正式发布:《基于杀伤链的勒索软件防御指南》\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489414&idx=1&sn=65a18aaf8d71e0435095acd6eb4ee5e1&chksm=fa58b5bdcd2f3cab7be4b46be4753fe9dc6d3280c4136a25cb88a9bb6d67104ab3b89f299141&scene=58&subscene=0#rd\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #768: HTCIA Boston April 8, 2025\": \"https://www.hecfblog.com/2025/03/daily-blog-768-htcia-boston-april-8-2025.html\"\n },\n \"ICT Security Magazine\": {\n \"Sanità italiana e Sicurezza Informatica – L’Ecosistema Dati Sanitari (EDS) come parte integrante del Sistema FSE (Fascicolo Sanitario Elettronico)\": \"https://www.ictsecuritymagazine.com/notizie/ecosistema-dati-sanitari-eds-fse-fascicolo-sanitario-elettronico/\",\n \"Intelligenza artificiale e sicurezza nazionale 2025\": \"https://www.ictsecuritymagazine.com/notizie/intelligenza-artificiale-e-sicurezza-nazionale/\",\n \"Spazio e cyber, un intreccio per le nuove dinamiche di potere\": \"https://www.ictsecuritymagazine.com/articoli/spazio-cyber/\"\n },\n \"迪哥讲事\": {\n \"桶文件覆盖之谷歌语法显神功\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497226&idx=1&sn=858dbb1b0a23b21ad618a3850106166c&chksm=e8a5fc69dfd2757f0f5acda754634066bb1336fe1c1001716f3b479c1e9c455d7367aef5a196&scene=58&subscene=0#rd\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"ISC Stormcast For Thursday, March 6th, 2025 https://isc.sans.edu/podcastdetail/9352, (Thu, Mar 6th)\": \"https://isc.sans.edu/diary/rss/31744\",\n \"DShield Traffic Analysis using ELK, (Thu, Mar 6th)\": \"https://isc.sans.edu/diary/rss/31742\"\n },\n \"360数字安全\": {\n \"高仿Microsoft 365暗藏勒索陷阱，360全网截杀Montelli威胁\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579811&idx=1&sn=bd07298bba1c621e0c886cf79d065156&chksm=9f8d28aba8faa1bdd7de52a504d7931903b41624739e6f563aeee452eeb807673dba9939df22&scene=58&subscene=0#rd\"\n },\n \"TrustedSec\": {\n \"Measuring the Success of Your Adversary Simulations\": \"https://trustedsec.com/blog/measuring-the-success-of-your-adversary-simulations\"\n },\n \"Schneier on Security\": {\n \"The Combined Cipher Machine\": \"https://www.schneier.com/blog/archives/2025/03/the-combined-cipher-machine.html\"\n },\n \"Posts By SpecterOps Team Members - Medium\": {\n \"Decrypting the Forest From the Trees\": \"https://posts.specterops.io/decrypting-the-forest-from-the-trees-661694ed1616?source=rss----f05f8696e3cc---4\"\n },\n \"Securityinfo.it\": {\n \"Indagine Zscaler: le aziende devono investire sulla resilienza informatica\": \"https://www.securityinfo.it/2025/03/06/indagine-zscaler-le-aziende-devono-investire-sulla-resilienza-informatica/?utm_source=rss&utm_medium=rss&utm_campaign=indagine-zscaler-le-aziende-devono-investire-sulla-resilienza-informatica\"\n },\n \"contagio\": {\n \"Is he dead yet?\": \"https://contagiodump.blogspot.com/2025/03/is-he-dead-yet.html\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Cascading Redirects: Unmasking a Multi-Site JavaScript Malware Campaign\": \"https://blog.sucuri.net/2025/03/cascading-redirects-unmasking-a-multi-site-javascript-malware-campaign.html\",\n \"Microsoft says malvertising campaign impacted 1 million PCs\": \"https://www.bleepingcomputer.com/news/security/microsoft-says-malvertising-campaign-impacted-1-million-pcs/\",\n \"Ransomware gang encrypted network from a webcam to bypass EDR\": \"https://www.bleepingcomputer.com/news/security/akira-ransomware-encrypted-network-from-a-webcam-to-bypass-edr/\",\n \"Russian crypto exchange Garantex’s website taken down in apparent law enforcement operation\": \"https://therecord.media/garantex-crypto-exchange-taken-down-law-enforcement-operation\",\n \"Russian crypto exchange Garantex seized by law enforcement operation\": \"https://techcrunch.com/2025/03/06/russian-crypto-exchange-garantex-seized-by-law-enforcement-operation/\",\n \"Who is Responsible and Does it Matter?\": \"https://blog.talosintelligence.com/who-is-responsible-and-does-it-matter/\",\n \"US seizes domain of Garantex crypto exchange used by ransomware gangs\": \"https://www.bleepingcomputer.com/news/security/us-seizes-domain-of-garantex-crypto-exchange-used-by-ransomware-gangs/\",\n \"Cybercrime 'crew' stole $635,000 in Taylor Swift concert tickets\": \"https://www.bleepingcomputer.com/news/security/cybercrime-crew-stole-635-000-in-taylor-swift-concert-tickets/\",\n \"Thousands of public school workers impacted by cyberattack on retirement plan administrator\": \"https://therecord.media/thousands-of-public-school-workers-impacted-data-breach\",\n \"Personal digital protection\": \"https://www.adainese.it/blog/2021/01/04/personal-digital-protection/\",\n \"Ecosistema dei dati sanitari: verso una sanità digitale integrata e sicura\": \"https://www.cybersecurity360.it/news/ecosistema-dei-dati-sanitari-verso-una-sanita-digitale-integrata-e-sicura/\",\n \"Ethereum private key stealer on PyPI downloaded over 1,000 times\": \"https://www.bleepingcomputer.com/news/security/ethereum-private-key-stealer-on-pypi-downloaded-over-1-000-times/\",\n \"Two arrested for stealing Taylor Swift Eras Tour tickets and selling for a $600,000 profit in cybercrime scheme\": \"https://therecord.media/two-arrested-for-stealing-taylor-swift-tickets-cybertheft\",\n \"Microsoft 365 apps will prompt users to back up files in OneDrive\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-365-apps-will-prompt-users-to-back-up-files-in-onedrive/\",\n \"Free vCISO Course: Turning MSPs and MSSPs into Cybersecurity Powerhouses\": \"https://www.bleepingcomputer.com/news/security/free-vciso-course-turning-msps-and-mssps-into-cybersecurity-powerhouses/\",\n \"Over 37,000 VMware ESXi servers vulnerable to ongoing attacks\": \"https://www.bleepingcomputer.com/news/security/over-37-000-vmware-esxi-servers-vulnerable-to-ongoing-attacks/\",\n \"Russia claims Ukraine hacked state youth organizations to recruit minors\": \"https://therecord.media/russia-claims-ukraine-hacked-kremlin-backed-youth-organizations\",\n \"Lumma Stealer e ClickFix: accoppiata malevola di nuovo in azione abusando di un dominio .it\": \"https://cert-agid.gov.it/news/lumma-stealer-e-clickfix-accoppiata-malevola-di-nuovo-in-azione-abusando-di-un-dominio-it/\",\n \"Credential Leaks, Enterprise Risk, and IOCs: How Contextual Intelligence Strengthens Your Defenses\": \"https://flashpoint.io/blog/credential-leaks-enterprise-risk-iocs-contextual-intelligence/\",\n \"Regolamento DORA: i punti chiave sulla gestione dei fornitori ICT\": \"https://www.cybersecurity360.it/legal/regolamento-dora-i-punti-chiave-sulla-gestione-dei-fornitori-ict/\",\n \"Malicious Chrome extensions can spoof password managers in new attack\": \"https://www.bleepingcomputer.com/news/security/malicious-chrome-extensions-can-spoof-password-managers-in-new-attack/\",\n \"Indagine Zscaler: le aziende devono investire sulla resilienza informatica\": \"https://www.securityinfo.it/2025/03/06/indagine-zscaler-le-aziende-devono-investire-sulla-resilienza-informatica/\",\n \"BianLian Denies Involvement in Ransom Letters: “Not Our Doing,” Group Tells SuspectFile.com\": \"https://www.suspectfile.com/bianlian-denies-involvement-in-ransom-letters-not-our-doing-group-tells-suspectfile-com/\",\n \"UAC-0173 Resumes Cyberattacks Against Ukrainian Notary Offices Using DARKCRYSTALRAT Malware\": \"https://cyble.com/blog/uac-0173-targeted-cyberattacks-on-ua-notary/\",\n \"Unmasking the new persistent attacks on Japan\": \"https://blog.talosintelligence.com/new-persistent-attacks-japan/\",\n \"Business continuity e disaster recovery: come potenziare la sicurezza aziendale nel rispetto della NIS2\": \"https://www.cybersecurity360.it/soluzioni-aziendali/business-continuity-e-disaster-recovery-come-potenziare-la-sicurezza-aziendale-nel-rispetto-della-nis2/\",\n \"Trojans disguised as AI: Cybercriminals exploit DeepSeek’s popularity\": \"https://securelist.com/backdoors-and-stealers-prey-on-deepseek-and-grok/115801/\",\n \"Spazio europeo dei dati sanitari, pubblicato il Regolamento: che c’è da sapere\": \"https://www.cybersecurity360.it/legal/privacy-dati-personali/spazio-europeo-dei-dati-sanitari-arriva-la-rivoluzione-europea-ecco-di-che-si-tratta/\",\n \"Cosa ci insegna la breccia nei firewall Fortinet\": \"https://www.cybersecurity360.it/news/cosa-insegna-breccia-fortinet/\",\n \"Phantom-Goblin: Covert Credential Theft and VSCode Tunnel Exploitation\": \"https://cyble.com/blog/phantom-goblin-covert-credential-theft/\"\n },\n \"bellingcat\": {\n \"Unmasking Maskov: How Bellingcat Found a Man Outfitting Russian Neo-Nazis\": \"https://www.bellingcat.com/news/2025/03/06/unmasking-maskov-how-bellingcat-found-a-man-outfitting-russian-neo-nazis/\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Just started my MSc Cyber Security in Royal Holloway after 20 years in the tech industry and saw this...\": \"https://www.reddit.com/r/netsecstudents/comments/1j4wnch/just_started_my_msc_cyber_security_in_royal/\"\n },\n \"The Hacker News\": {\n \"Elastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code Execution\": \"https://thehackernews.com/2025/03/elastic-releases-urgent-fix-for.html\",\n \"EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing\": \"https://thehackernews.com/2025/03/encrypthub-deploys-ransomware-and.html\",\n \"Outsmarting Cyber Threats with Attack Graphs\": \"https://thehackernews.com/2025/03/outsmarting-cyber-threats-with-attack.html\",\n \"Medusa Ransomware Hits 40+ Victims in 2025, Demands $100K–$15M Ransom\": \"https://thehackernews.com/2025/03/medusa-ransomware-hits-40-victims-in.html\",\n \"Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access\": \"https://thehackernews.com/2025/03/over-1000-wordpress-sites-infected-with.html\",\n \"U.S. Charges 12 Chinese Nationals in State-Backed Hacking Operations\": \"https://thehackernews.com/2025/03/us-charges-12-chinese-nationals-in.html\"\n },\n \"Graham Cluley\": {\n \"Smashing Security podcast #407: HP’s hold music, and human trafficking\": \"https://grahamcluley.com/smashing-security-podcast-407/\"\n },\n \"Deeplinks\": {\n \"Simple Phish Bait: EFF Is Not Investigating Your Albion Online Forum Account\": \"https://www.eff.org/deeplinks/2025/03/simple-phish-bait-eff-not-investigating-your-albion-online-forums-account\"\n },\n \"Social Engineering\": {\n \"God is light\": \"https://www.reddit.com/r/SocialEngineering/comments/1j565tf/god_is_light/\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"The Burn Notice, Part 2/5 | How We Uncovered a Critical Vulnerability in a Leading AI Agent Framework\": \"https://www.reddit.com/r/netsec/comments/1j4x1tp/the_burn_notice_part_25_how_we_uncovered_a/\",\n \"Command Injection - Compressive Guide & Payloads | VeryLazyTech\": \"https://www.reddit.com/r/netsec/comments/1j4yi3f/command_injection_compressive_guide_payloads/\",\n \"Zen and the Art of Microcode Hacking\": \"https://www.reddit.com/r/netsec/comments/1j4r13c/zen_and_the_art_of_microcode_hacking/\",\n \"Sitecore: Unsafe Deserialisation Again! (CVE-2025-27218)\": \"https://www.reddit.com/r/netsec/comments/1j4rhlc/sitecore_unsafe_deserialisation_again_cve202527218/\"\n },\n \"Information Security\": {\n \"PDF with password attached to email\": \"https://www.reddit.com/r/Information_Security/comments/1j576tw/pdf_with_password_attached_to_email/\",\n \"Email's info got stolen and I need to know if they got my other emails Linked to it\": \"https://www.reddit.com/r/Information_Security/comments/1j561nw/emails_info_got_stolen_and_i_need_to_know_if_they/\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"Check inbox from valid combolist\": \"https://www.reddit.com/r/blackhat/comments/1j4rc0g/check_inbox_from_valid_combolist/\"\n },\n \"Tor Project blog\": {\n \"Tor Project's internship sponsored by Google Summer of Code\": \"https://blog.torproject.org/tor-in-google-summer-of-code-mentorship/\",\n \"New Release: Tails 6.13\": \"https://blog.torproject.org/new-release-tails-6-13/\"\n },\n \"Deep Web\": {\n \"Guys i need i site i used to access in 2023\": \"https://www.reddit.com/r/deepweb/comments/1j4z1id/guys_i_need_i_site_i_used_to_access_in_2023/\",\n \"Es seguro entrar a la deep web desde un celular?\": \"https://www.reddit.com/r/deepweb/comments/1j5697y/es_seguro_entrar_a_la_deep_web_desde_un_celular/\"\n },\n \"Your Open Hacker Community\": {\n \"People who learned hacking using internet and by themselves, what's are the best sources to start?\": \"https://www.reddit.com/r/HowToHack/comments/1j4z0vs/people_who_learned_hacking_using_internet_and_by/\",\n \"Text via email\": \"https://www.reddit.com/r/HowToHack/comments/1j58vgb/text_via_email/\",\n \"How to find out a burner accounts identity\": \"https://www.reddit.com/r/HowToHack/comments/1j58sw9/how_to_find_out_a_burner_accounts_identity/\",\n \"Save image in which right click is disabled, inspect element > image link gives me a 403?\": \"https://www.reddit.com/r/HowToHack/comments/1j4r4f4/save_image_in_which_right_click_is_disabled/\",\n \"How can I get around Internet restrictions?\": \"https://www.reddit.com/r/HowToHack/comments/1j4xkhk/how_can_i_get_around_internet_restrictions/\",\n \"true or false?\": \"https://www.reddit.com/r/HowToHack/comments/1j4u9ud/true_or_false/\",\n \"how to see google forms responses?\": \"https://www.reddit.com/r/HowToHack/comments/1j4nmyy/how_to_see_google_forms_responses/\",\n \"My First Ethical Hacking Project, Help me out!\": \"https://www.reddit.com/r/HowToHack/comments/1j4pi98/my_first_ethical_hacking_project_help_me_out/\"\n },\n \"Security Affairs\": {\n \"Elastic patches critical Kibana flaw allowing code execution\": \"https://securityaffairs.com/174999/security/elastic-kibana-critical-flaw.html\",\n \"The U.S. DoJ charges 12 Chinese nationals for state-linked cyber operations\": \"https://securityaffairs.com/174986/cyber-warfare-2/u-s-department-of-justice-doj-charges-12-chinese-nationals.html\",\n \"Chinese Lotus Blossom APT targets multiple sectors with Sagerunex backdoor\": \"https://securityaffairs.com/174976/apt/lotus-blossom-apt-sagerunex-backdoor.html\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Don't Hack Russia - PSW #864\": \"http://sites.libsyn.com/18678/dont-hack-russia-psw-864\"\n }\n}"}}, "archive/tmp/2025-02-19.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747308.3038986, "n": 62737, "h": "0d4331df005ae5cd", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-02-18 Review\": \"http://www.sec-wiki.com/?2025-02-18\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"微软推出修复华硕蓝屏问题的 BIOS 更新\": \"https://www.anquanke.com/post/id/304455\",\n \"马斯克与 OpenAI 的交锋：收购提案遇冷，立场分歧引争议\": \"https://www.anquanke.com/post/id/304451\",\n \"保护投资者，重塑市场信任：ESMA 就加密员工指导方针征求意见\": \"https://www.anquanke.com/post/id/304441\",\n \"AMD 多款嵌入式处理器现安全隐患，官方建议升级固件防范\": \"https://www.anquanke.com/post/id/304437\",\n \"Juniper Networks多款产品现严重身份验证绕过漏洞（CVE-2025-21589），速升级软件修复\": \"https://www.anquanke.com/post/id/304433\",\n \"2025全球网络安全政策法律趋势：AI、数据安全等成焦点！\": \"https://www.anquanke.com/post/id/304429\",\n \"LibreOffice 严重漏洞：或致系统被写入文件及数据泄露，需更新版本\": \"https://www.anquanke.com/post/id/304422\",\n \"微软曝光：针对 macOS 的 XCSSET 恶意软件盗窃加密货币\": \"https://www.anquanke.com/post/id/304417\",\n \"警惕！X 平台将 Signal.me 链接标记为恶意，屏蔽行为引猜测\": \"https://www.anquanke.com/post/id/304411\",\n \"XCSSET 恶意软件新变种来袭，目标直指 macOS 开发者与用户\": \"https://www.anquanke.com/post/id/304407\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"微软：黑客在设备代码钓鱼攻击中窃取电子邮件\": \"https://www.4hou.com/posts/wxxX\",\n \"「深蓝洞察」2024年度最难以阻挡的攻防趋势\": \"https://www.4hou.com/posts/l00j\"\n },\n \"paper - Last paper\": {\n \"DeepSeek本地化部署有风险！快来看看你中招了吗?\": \"https://paper.seebug.org/3282/\",\n \"如何为大型语言模型植入后门：创建“BadSeek”，一个狡猾的开源编码模型\": \"https://paper.seebug.org/3281/\",\n \"本地化 AI 审计工具落地小试牛刀\": \"https://paper.seebug.org/3280/\"\n },\n \"obaby@mars\": {\n \"伏地魔？\": \"https://h4ck.org.cn/2025/02/19333\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Tue Feb 18 20:30:07 UTC 2025\": \"https://github.com/trickest/cve/commit/990fe6ceaadcf34085f84750a0369bb2e8f78373\",\n \"Update Tue Feb 18 12:31:05 UTC 2025\": \"https://github.com/trickest/cve/commit/ae962b44913a77b1cb0c16a3051b880d5a8cc752\",\n \"Update Tue Feb 18 04:27:55 UTC 2025\": \"https://github.com/trickest/cve/commit/bd07eabc7259ff38bd175b80cef43bcb121a4c5d\"\n },\n \"奇安信攻防社区\": {\n \"掌握Tornado隐秘漏洞：构建内存马，实现命令执行\": \"https://forum.butian.net/share/4148\"\n },\n \"Security Boulevard\": {\n \"US Military, Defense Contractors Infected with Infostealers: Hudson Rock\": \"https://securityboulevard.com/2025/02/us-military-defense-contractors-infected-with-infostealers-hudson-rock/\",\n \"PCI DSS 4: 6.4.3/11.6.1 – A Guide to SAQ A-EP Compliance using Feroot PaymentGuard AI\": \"https://securityboulevard.com/2025/02/pci-dss-4-6-4-3-11-6-1-a-guide-to-saq-a-ep-compliance-using-feroot-paymentguard-ai/\",\n \"Randall Munroe’s XKCD ‘Hardwood’\": \"https://securityboulevard.com/2025/02/randall-munroes-xkcd-hardwood/\",\n \"DEF CON 32 – Manufacturing Lessons Learned, Lessons Taught\": \"https://securityboulevard.com/2025/02/def-con-32-manufacturing-lessons-learned-lessons-taught/\",\n \"Learn & Avoid Social Engineering Scams in 2025\": \"https://securityboulevard.com/2025/02/learn-avoid-social-engineering-scams-in-2025/\",\n \"Inside Amazon GuardDuty: What the Logs Reveal About Cloud Security\": \"https://securityboulevard.com/2025/02/inside-amazon-guardduty-what-the-logs-reveal-about-cloud-security/\",\n \"Intruder Enhances Free Vulnerability Intelligence Platform ‘Intel’ with AI-Generated CVE Descriptions\": \"https://securityboulevard.com/2025/02/intruder-enhances-free-vulnerability-intelligence-platform-intel-with-ai-generated-cve-descriptions/\",\n \"Cybersecurity in 2025: AI, Attack Surfaces and the Shift to Cyber Resilience\": \"https://securityboulevard.com/2025/02/cybersecurity-in-2025-ai-attack-surfaces-and-the-shift-to-cyber-resilience/\",\n \"Cybersecurity Predictions for 2025: Platforms, Convergence and the Future of Risk Management\": \"https://securityboulevard.com/2025/02/cybersecurity-in-2025-platforms-convergence-and-the-future-of-risk-management/\",\n \"GRIT’s 2025 Report: Ransomware Group Dynamics and Case Studies\": \"https://securityboulevard.com/2025/02/grits-2025-report-ransomware-group-dynamics-and-case-studies/\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"WordPress Plugin A/B Image Optimizer 3.3 Arbitrary File Download\": \"https://cxsecurity.com/issue/WLB-2025020009\",\n \"OpenSSH 9.9p1 Denial of Service / Man-In-The-Middle\": \"https://cxsecurity.com/issue/WLB-2025020008\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"VulnLab Trusted | Maverick Got Your Trusted Baby\": \"https://infosecwriteups.com/vulnlab-trusted-maverick-got-your-trusted-baby-71420c15273e?source=rss----7b722bfd1b8d---4\",\n \"I Pasted a Simple HTML Code on BookMyShow… and Got ₹1000 for It!\": \"https://infosecwriteups.com/i-pasted-a-simple-html-code-on-bookmyshow-and-got-1000-for-it-26313f0e2115?source=rss----7b722bfd1b8d---4\",\n \"HTMLI to ATO leads to $$$ bounty\": \"https://infosecwriteups.com/htmli-to-ato-leads-to-bounty-9725cb23a67c?source=rss----7b722bfd1b8d---4\",\n \"Simulating Phishing Attacks with Gophish: A Comprehensive Guide\": \"https://infosecwriteups.com/simulating-phishing-attacks-with-gophish-a-comprehensive-guide-3f4b709f76b6?source=rss----7b722bfd1b8d---4\",\n \"How I Bypassed BookMyShow’s OTP Limit with Just a Space & Got ₹1000 for It!\": \"https://infosecwriteups.com/how-i-bypassed-bookmyshows-otp-limit-with-just-a-space-got-1000-for-it-70eab29fb6aa?source=rss----7b722bfd1b8d---4\",\n \"Zoho Account Takeover: How a Single Click Can Lead to Full Control over your Zoho account\": \"https://infosecwriteups.com/zoho-account-takeover-how-a-single-click-can-lead-to-full-control-over-your-zoho-account-cd6f0c245272?source=rss----7b722bfd1b8d---4\",\n \"Why You Need a Digital Garden (How to Start Guide)\": \"https://infosecwriteups.com/why-you-need-a-digital-garden-how-to-start-guide-a1f30f818c75?source=rss----7b722bfd1b8d---4\",\n \"No email verification leads to an Oauth account takeover.\": \"https://infosecwriteups.com/no-email-verification-leads-to-an-oauth-account-takeover-02eb30496939?source=rss----7b722bfd1b8d---4\"\n },\n \"Trustwave Blog\": {\n \"Building a Sustainable PCI DSS 4.0 Compliance Culture\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/building-a-sustainable-pci-dss-4.0-compliance-culture/\"\n },\n \"Microsoft Security Blog\": {\n \"​​Join us for the end-to-end Microsoft RSAC 2025 Conference experience\": \"https://www.microsoft.com/en-us/security/blog/2025/02/18/join-us-for-the-end-to-end-microsoft-rsac-2025-conference-experience/\"\n },\n \"Doonsec's feed\": {\n \"Windows 二进制文件模糊测试的艺术\": \"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487223&idx=1&sn=9aa6e3fe0de698f9ceb8d051c0aaa3ff\",\n \"秦安：打江山马克思主义，守江山马斯克方法，首先从中国股市做起\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476925&idx=1&sn=01d93d4dadce125e24ad3724abb6353b\",\n \"张志坤：重新规划安排中欧班列，应早为之计\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476925&idx=2&sn=1899256b96824a441fd19512224c1fad\",\n \"漏洞预警 用友 UFIDA NC portal/pt/office/checkekey 接口存在 SQL 注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488037&idx=1&sn=e95060073c6bd35b738e6465d0b60b50\",\n \"【工具分享】提取微信聊天记录，导出可视化文档永久保存，（还可训练成个人AI）\": \"https://mp.weixin.qq.com/s?__biz=MzA3MzgwMzYyMA==&mid=2452890317&idx=1&sn=3caa34536c488d3876b6b147d2930a5c\",\n \"进京证 啥时候能取消呢？\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491125&idx=1&sn=c9bd12a613875b317037512d8a476b9d\",\n \"获取JA3指纹\": \"https://mp.weixin.qq.com/s?__biz=MzA4NjQxMDcxNA==&mid=2709355324&idx=1&sn=e5a03aadddae69088e13b89a35140a48\",\n \"DeepSeek+DeepResearch：应用实践\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655266852&idx=1&sn=38ea338b89b098cf63b856a2f414cd8e\",\n \"《怒吼的战场：凌晨1点17分的WiFi攻防战以失败告终》\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484556&idx=1&sn=12c872fd27ffe88bc241f1dd3eeec777\",\n \"某Q出现校验异常\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDcwNjkzNw==&mid=2247487199&idx=1&sn=a1a273098fc6300a58ffe6a67c537327\",\n \"构建智能反爬防御体系：从多终端攻防到AI驱动的实时风控策略\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484585&idx=1&sn=1c762308451b7ff7e8dd0e2ec8da3630\",\n \"马斯克放大招，宣称\\\\\\\"已超越DeepSeek\\\\\\\"\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=1&sn=b1af6bf06c963951bd1efe6120474e8f\",\n \"国家数据局发布第二批公共数据应用示范场景建设清单\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=2&sn=8ddddc8b5ecc47757dc85c7a57236175\",\n \"首批70名公务员已上岗，工作效率最高提升100倍！多地政务系统接入…网友：混日子的要下岗了\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=3&sn=e58ce6090e46fb39801d533d4dd1c6ee\",\n \"ChatGPT Operator 遭提示注入攻击，泄露用户隐私数据\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=1&sn=a008bd32d4ac4e5ba959a13e6714c501\",\n \"美国会拟立法：将太空系统作为关基设施进行保护\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=5&sn=fc96f1404b4ccf2689471b3893cd11e5\",\n \"网络安全人士必知的指纹探测技术\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490447&idx=1&sn=c76f4f8d6bc8c35d6bfa414da48951d4\",\n \"合规引领，助力企业“扬帆出海” | “杨数浦”品牌沙龙第三期精彩回顾\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247517311&idx=1&sn=27626dc4110c4ebc078a1013dc60579f\",\n \"国货正当红！国货之光软件优惠庆典 6 折起\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492205&idx=1&sn=88bbac3ffda3b659cfce532265a3f0c3\",\n \"【漏洞预警】ChurchCRM系统中通过EditEventTypes.php文件的newCountName参数进行SQL注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489623&idx=1&sn=0eb82923c11d936eda41661733bab356\",\n \"DeepSeek本地部署安全隐患问题，建议紧急排查\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489623&idx=2&sn=1892455a5ca464abf6bafa8a8b182a37\",\n \"DNS投毒与利用\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488726&idx=1&sn=17db9da06b19b3ba1cd01d7dd63f6d01\",\n \"DeepSeek 引爆！AI 智能体 商业应用全景图：万亿市场新赛道开启！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484148&idx=1&sn=b7ab4ffaac68b0d6fe269e8573046c09\",\n \"MWC 2025 | 华为星河AI融合SASE最新案例精选，3月3日与您相约巴塞罗那！\": \"https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505890&idx=1&sn=a912c683b5aebb4d0c610bc25d467199\",\n \"DeepSeek本地化部署有风险！快来看看你中招了吗？\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487304&idx=2&sn=242893b8bf6c59a594f746e2bb5fa1fb\",\n \"SRC专项知识库\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518592&idx=2&sn=047c56c3573a6a30f3e5ceeb8bcae850\",\n \"【待确认】疑似解决微信小程序devtools无法全局搜索问题？\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484391&idx=1&sn=ea11c8d30ad0c916d24a4f289610a955\",\n \"如何使用MSSQL CLR组件绕过EDR\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527921&idx=1&sn=76f38448f0b318e4f4f82e935e6128b7\",\n \"无休止的漏洞：macOS 漏洞被利用九次\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527921&idx=2&sn=15dd9f4e59983a9c588916d3058ae171\",\n \"AboutSQLRecorder是一个能够实时记录SQL语句的工具，方便代码审计时对SQL注入的实时关注\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496521&idx=1&sn=e1dcb02f0d4846b88555054e2ef84719\",\n \"【漏洞预警】Cisco Meeting Management客户端-服务器权限提升漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484334&idx=1&sn=f4599ad3ed50659f274d2b35c7589312\",\n \"常见WEB漏洞—SQL 注入\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247488289&idx=1&sn=4adfd4de8707c7989afa203de3cd49f2\",\n \"2025网安公司避坑互助墙--内部吐槽墙\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247487372&idx=1&sn=779e647e788030ce94c9885eb5a35752\",\n \"Deepseek真的能搞定安全运营？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTMxMjQ4OA==&mid=2247485648&idx=1&sn=35fa7f43468584d6ea0f0671b4f85497\",\n \"《论语别裁》第01章 学而（01）语文的变与不变\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247500817&idx=1&sn=f442b82b587f4fb37bfd705baccb2b38\",\n \"Tips | 提取java应用内存从而直接获取明文密码和配置信息的方法\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487304&idx=1&sn=2be4a08b7a4c875f17816f8c7c6b0e6f\",\n \"《内网安全攻防渗透测试实战指南》笔记之权限提升分析与防御\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjQwOTc4MQ==&mid=2247490399&idx=1&sn=a786f6dd8f07344cff4940f72b75c8ae\",\n \"反反rootkit--覆盖驱动与隐藏线程\": \"https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488462&idx=1&sn=9cfb75421975bffdfe049b3e6df12b67\",\n \"【各大培训机构】网络安全圈最硬核投票来了！\": \"https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211340&idx=1&sn=b960a0001604e507aeddba440fbcb312\",\n \"网络安全行情这么差？oscp十多个证书也弥补不了学历的弱势吗？\": \"https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538747&idx=1&sn=56e22e4c93b198237411b0f2f211c16f\",\n \"常行AI+安全方案：减少大模型部署风险，助力企业智能革新\": \"https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247502972&idx=1&sn=80f9f7d77c81336634fd3e7763a28da8\",\n \"[网络安全]HVV面试面经\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTUzMDk4OA==&mid=2247483793&idx=1&sn=c4d35af48992977eb8b7db6febf5181a\",\n \"全国政协推动人工智能更好服务“四个面向”专题组座谈会在奇安信召开 全国政协副主席陈武率课题组参加\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625170&idx=1&sn=c7c9ce3e42ff91f8caec4631c2dbfca6\",\n \"95015应急响应报告：内部违规是网安事件罪魁祸首\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625170&idx=2&sn=bb8dc3eaf025dc789cd7440977078139\",\n \"SRC实战系列-记某次大学漏洞挖掘经过\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzQyMzUwMg==&mid=2247486443&idx=1&sn=9bf618a3a424cefc958f0ca4a7a0c934\",\n \"OSINT信息收集工具 - chiasmodon\": \"https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486075&idx=1&sn=468f3470d7602f73a3d4df0bf0c51acb\",\n \"SecWiki周刊（第572期）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=2651053441&idx=1&sn=629cf305baee3944d86b7985ac0f61a9\",\n \"XCSSET恶意软件卷土重来，剑指macOS用户与开发者\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=2&sn=0fda5989ef936d6dea0b0956d4fbbbf1\",\n \"黑客滥用Microsoft Teams会议邀请窃取用户权限\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=3&sn=5319bd4c3b4b6bd974e10791184e93e2\",\n \"网络攻击者借助SharpHide改良版，加大注册表检测难度\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=4&sn=1f8b1a860ab6290b3aa06a8c839c25f3\",\n \"2025年1月涉国内数据泄露事件汇总\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzQ4MzA4Ng==&mid=2247485268&idx=1&sn=8724d38ebcfdd0697c212e18d90a34a3\",\n \"【安全圈】短视频平台“封号圈”乱象猖獗，IP查询如何助力防范\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=1&sn=77b78d28e626bb57cf51f82d0c472aa6\",\n \"【安全圈】俄罗斯黑客利用 7-Zip 零日漏洞攻击乌克兰\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=2&sn=634853ba2d9852cc240a7d5d46ce82c5\",\n \"【安全圈】微软发现用于加密货币盗窃的 XCSSET macOS 恶意软件变种\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=3&sn=b875bcdbb815582bbc7966d6ebc3a164\",\n \"【安全圈】马斯克与 OpenAI 的交锋：收购提案遇冷，立场分歧引争议\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=4&sn=38c4e0921e00478f77d52173d75865fa\",\n \"TimelineSec助力顺丰SRC第三届白帽技术沙龙活动，预约已开启！\": \"https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497142&idx=1&sn=3f5b46d1df2a8f6f8bec1b43e632f71f\",\n \"XPSRC助力|顺丰SRC第三届白帽技术沙龙预约开启！\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTY5MTQ1NA==&mid=2247484065&idx=1&sn=81bf7598983b7b2094d08d4fa6f19fff\",\n \"启明星辰发布大模型应用安全“新三件套”，奠基“后DeepSeek智能时代”的安全基石\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=1&sn=5b672ecff51556db43509b5c84cb09dd\",\n \"专家解读 | 出台《个人信息保护合规审计管理办法》 为数字经济持续健康发展保驾护航\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=2&sn=19ef83d5756ac4b267766ce1434e8a5b\",\n \"前沿 | 排他性思路违背全球AI发展潮流\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=3&sn=536c842056b617da26b3a83cf09b195d\",\n \"评论 | 算法更透明 公众更安心\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=4&sn=25460fdc26dd1f8b0aea2a356f01bf64\",\n \"关注 | 用行动落实打击电诈的共同意愿\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=5&sn=6a708c7814d057322cbf80593342a4f1\",\n \"观点 | MCN机构要走规范化发展之路\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=6&sn=4558e8136659bdfcaf2dde736f38b77e\",\n \"评论 | 营造有利于青少年成长成才的良好信息环境\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=7&sn=eb5a761b2a5d240d86a28fdccf3b8a63\",\n \"为什么运营商“沉迷”做总包、总集？\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=1&sn=cd835808ada01d35850bdcc5c59611eb\",\n \"北七家-未来科学城,3居变4居豪装,理想楼层/户型/朝向\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=2&sn=fa2cefbe0f44ae8f576af68d7c075e80\",\n \"【0.9元】德银重磅：中国鲸吞世界！全文和翻译！\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=3&sn=f452879eebc1ec28ccd0516533798c3d\",\n \"【干货】笑傲职场的独家经验（1）\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=4&sn=614d3e17ec92cd87c0d610fbf4fb17fa\",\n \"【干货原创】实网攻防演习常态化，会带来什么变化01\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=5&sn=0a8eeadf2aaa25d2d65ee6acc2806427\",\n \"【干货原创】K12教育，鲜为人知的模式秘密\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=6&sn=a4a15902985ab471b071ee9426d451ea\",\n \"原创文章目录\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=7&sn=38e7919f220cac38a2494162456e2095\",\n \"Merlin后渗透利用框架之Merlin Agent远控木马剖析\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDUzNDExMQ==&mid=2247485192&idx=1&sn=751f75626f62cc4463141c4cefa3b97f\",\n \"继上次ollama自由后，又一次自由……\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDQxODk4NQ==&mid=2247484364&idx=1&sn=6e261738ce559083feb198bd1fcef489\",\n \"顺丰SRC第三届白帽技术沙龙预约开启！\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541606&idx=1&sn=012be792517f5ee11d9feac39ffe3b74\",\n \"等保测评||达梦数据库作业指导书\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDYzNTYxNQ==&mid=2247502632&idx=1&sn=97e84602de7606f21d45a215ee2f52bc\",\n \"美国政府：开发人员应停止制造“不可原谅的”缓冲溢出漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=1&sn=f4ba8096e5c48add46aab6c9f0f9b6db\",\n \"VeraCore 两个0day漏洞被用于实施供应链攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=2&sn=9b28d0ae22a8aee011365d83bbe3e244\",\n \"超级CSO研修班 | 杜跃进：未来安全的核心是能力\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636358&idx=1&sn=87ce38dc5d636b8975a99ca7305f711d\",\n \"LockBit死而不僵，仍不断有“帮凶”落网\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636358&idx=2&sn=a82d0bc18938a4a50fd92369e0d58673\",\n \"韩国暂停DeepSeek下载，称其侵犯隐私\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636358&idx=3&sn=32666d76e53892b54705fb8386f4bc8b\",\n \"【资讯】山东省大数据局印发《山东省公共数据开放工作细则》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247549835&idx=1&sn=4301f3fc724332d16aaeff001f9b5b2d\",\n \"【资讯】云南省通管局印发《云南省电信领域数据安全风险评估实施细则（试行）》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247549835&idx=2&sn=eb917c98028b4f355c0ac073a9c23a7f\",\n \"【资讯】绍兴市政府办公室印发《绍兴市加快制造业数字化转型行动方案》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247549835&idx=3&sn=b8dc9888890b753dbb2f5c2a66f5e1b2\",\n \"国家公共数据资源登记平台将于3月1日正式上线试运行\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448683184&idx=1&sn=c8520840f07b17a90a9b3252d5c70ae0\",\n \"Grok-3正式发布！马斯克：“地球上最聪明的AI”\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247550522&idx=1&sn=d74d75abf3ff7ca922176ac61326b9fb\",\n \"AutoSec年会专家确认 | F5：全球多云环境下的合规遵从和统一安全治理\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247550522&idx=2&sn=5b6c7862384ae75a6909c706728520ba\",\n \"独家首发，免费｜Trae 从入门到实践，开启 AI 编码新征程！\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513387&idx=1&sn=ce7672590c2cd60a22e9b620dcbdcfca\",\n \"DeepSeek重构智能运维和安全运营\": \"https://mp.weixin.qq.com/s?__biz=MzA4Mzg1ODIzMw==&mid=2653545935&idx=1&sn=7e68e08b429b85ade74986b62e3d22dd\",\n \"BSSRC助力 | 顺丰SRC第三届白帽技术沙龙预约开启！\": \"https://mp.weixin.qq.com/s?__biz=MzkyODIwNDI3NA==&mid=2247486170&idx=1&sn=9287f9f60bd2d701fe1d1d4ba26f3f42\",\n \"AI聊天还能用，但下载按钮灰了！韩国给DeepSeek划下\\\\\\\"红线\\\\\\\"\": \"https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488538&idx=1&sn=7d2b1822bf137d6a59722d0ff454db32\",\n \"学术前沿 | 华南师范大学密码学与信息安全团队：白盒密码实现的侧信道分析技术综述\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505072&idx=1&sn=9f910b3ab2a5ccd60b3e071af3e4aaa7\",\n \"官方机构提示仿冒DeepSeek手机木马病毒肆虐！梆梆安全为您的移动应用保驾护航！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135338&idx=1&sn=94642b4d6d742c855af4c615b6c2c399\",\n \"企业级EDR实施技术指南：十大关键要素深度解析\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489351&idx=1&sn=3da833b6858ec815c4acd2bffbdb5f69\",\n \"雨水｜甘雨时降 万物以嘉\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135338&idx=2&sn=33cd10d5c79ebcefca7db1364a627025\",\n \"大模型背景下生成式AI带来的网络安全威胁应对\": \"https://mp.weixin.qq.com/s?__biz=Mzg2MDY0MjQwMw==&mid=2247494317&idx=1&sn=e67cb658cf43995bd5c239ca54c97c7f\",\n \"旅行APP流程分析（TCP+protobuf）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=1&sn=e1354617c606204a98db2a1960b7647d\",\n \"立即预约！顺丰SRC第三届白帽技术沙龙即将开启\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=2&sn=278b59f239fe65d5cfe07f93ecaa636e\",\n \"ChatGPT Operator 遭提示注入攻击\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=3&sn=a005da20fc0a49c5e16d1ada1109ad46\",\n \"《科学数据安全分类分级指南》等5项国家标准发布\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931568&idx=1&sn=717c83d99ebeb4b1ad0806e4de9f8f6d\",\n \"韩国称DeepSeek与字节跳动共享数据？我外交部回应；美国国防部一承包商和一大型金融机构虚拟专用网络疑被攻破 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=1&sn=265652c42964cda677cb67cdd3409cb8\",\n \"应对高级勒索软件攻击，你需要关注这7项技术手段\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=2&sn=47591d1505f32bcf70149d3a92cd8961\",\n \"勒索软件攻击加速：从潜伏到“打砸抢”式入侵 企业防御面临新挑战\": \"https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247546921&idx=1&sn=2545d75b63623d7a78c2e5e708fcab02\",\n \"深度测评 | AI引领安全运营提升用户使用感受及分析处置能力\": \"https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247506691&idx=1&sn=06af6565c9541f1ac54a40b8ee0ad97a\",\n \"突破 | 中国电信安全天地一体化网络安全领域研究成果入选国际顶级期刊\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247533100&idx=1&sn=8561e9f4008f89b213c2c57003b546ab\",\n \"Grok-3“最聪明AI”来了！为您整理发布会重点及当下明星AI产品\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496639&idx=1&sn=ebd1da91dd9c3743289106d6c491a062\",\n \"获奖公布 | 网安加社区元宵灯谜竞猜活动获奖名单公布！\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247523961&idx=1&sn=ce71c7021d7bd63e842ff1d81f521961\",\n \"培训招募中！CISAW灾难备份与恢复\": \"https://mp.weixin.qq.com/s?__biz=MzU0Mzk0NDQyOA==&mid=2247521403&idx=1&sn=06480e6a0ed6208d43b642e1dc74569c\",\n \"飞天诚信、小米等入选北京市商业秘密保护示范基地\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649876752&idx=1&sn=79b42426d9a8bc2fde0c44947ad71d77\",\n \"论文速递 | 智能网联汽车网络信息安全综述\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NDczNDc4NA==&mid=2247495478&idx=1&sn=ca8a1aaa0f4f8a0953c8f5688edc8439\",\n \"甲方乙方视角剖析：信安通用三认证，如何抉择才不亏\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247516067&idx=1&sn=858499704f81840848f3c78c36fd8bd1\",\n \"职场人的精神brunch|说几个对数据安全从业者友好的证书\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247516067&idx=2&sn=97de123527d3b7627ea1ac87be96da4b\",\n \"埃隆·马斯克的政府网站漏洞曝光，黑客留下嘲讽信息\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486178&idx=1&sn=0582e8fd5a1c4aa57ec6fab589ffa06d\",\n \"解锁高能，秒变渗透高手\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553681&idx=1&sn=a2dd04fdc8069d3d7cbd47d8fa276169\",\n \"【免费领】近400页！SQL注入攻击与防御策略大全\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553681&idx=2&sn=a454fa2b8c0f9b1231f8e5d45959d0c1\",\n \"敢挑战吗？蚂蚁国际要的就是你！\": \"https://mp.weixin.qq.com/s?__biz=MzI3NDEzNzIxMg==&mid=2650492397&idx=1&sn=0c4d95bf831194932a3c8e4ec57c721e\",\n \"走向卓越丨2025，对您的未来许下承诺\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492403&idx=1&sn=f7a256cfeab0b700ae77b9b52b57c6ec\",\n \"网络安全动态 - 2025.02.18\": \"https://mp.weixin.qq.com/s?__biz=MzU1MzEzMzAxMA==&mid=2247499921&idx=1&sn=dd53eca4974397a099fb2c0461221fc0\",\n \"【渗透测试Top10漏洞详解·萌新友好版（上）】黑客最爱的5大漏洞竟是这些？\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzI5MTc0Nw==&mid=2247485048&idx=1&sn=70c9a4aed11e2474656cc9141ff44488\",\n \"360SRC助力 | 顺丰SRC第三届白帽技术沙龙预约开启！\": \"https://mp.weixin.qq.com/s?__biz=MzkzOTIyMzYyMg==&mid=2247494998&idx=1&sn=c28dfd53a667692becafd42ff90f0bdd\",\n \"好书推荐 | 数字化转型安全根基，硬件安全攻防实战指南\": \"https://mp.weixin.qq.com/s?__biz=MzkzOTIyMzYyMg==&mid=2247494998&idx=2&sn=b6655366fc7c96b81815be8bcaa35e43\",\n \"「招聘」长亭科技-内推码\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486890&idx=1&sn=aa3d1c7a1d959391c51f401ce54ff9a0\",\n \"【知道创宇404实验室】本地化 AI 审计工具落地小试牛刀\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870976&idx=1&sn=532f0cf3ec728a9abfa1fecbfab03268\",\n \"“新春第一课”，DeepSeek席卷政务系统\": \"https://mp.weixin.qq.com/s?__biz=MzI3MDY0Nzg1Nw==&mid=2247489502&idx=1&sn=49c20331256f1c7843ca92f5abe15275\",\n \"AI 与隐私悖论：在数据浪潮中寻找平衡\": \"https://mp.weixin.qq.com/s?__biz=MzI3MDY0Nzg1Nw==&mid=2247489502&idx=2&sn=1159e25e2a14b93fc07abf733c9adf0d\",\n \"互联网和人工智能会影响我们的记忆吗？科学怎么说？\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619275&idx=1&sn=49f6b6b8186ed70e29dbf21fc0a55d00\",\n \"美国xAI公司发布AI模型Grok 3，部分功能性能超越OpenAI、DeepSeek相关模型\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619275&idx=2&sn=df636eefa3f94db514cc271d09c8267a\",\n \"海外研究｜国外人工智能热点安全技术发展情况研究\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597829&idx=1&sn=7caaef0c1a1f694359e7dbe9673b2136\",\n \"特色专题 | 基于混沌映射和NFSR的16比特动态S盒构造方法\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597829&idx=2&sn=935bc30bbc576877560381a3ad325e24\",\n \"默安科技两度荣膺“浙江省软件核心竞争力企业”\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597829&idx=3&sn=f63629da6856652881dd72f692d1e269\",\n \"雷神众测漏洞周报2024.2.10-2024.2.16\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503318&idx=1&sn=b5b13cfc554a840876a561de454e8f7e\",\n \"“硅基生命”的崛起，碳基生命的挑战：AI的伦理与安全边界\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTM5MDUxMA==&mid=2247504042&idx=1&sn=e60dd68fdcb43ee4273cbd208b5ce8f1\",\n \"SEAMFUZZ：灰盒模糊测试的学习种子自适应突变策略\": \"https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247486942&idx=1&sn=d249d0aa9047c41d34cb0da0cb74053b\",\n \"AI 重塑国家安全格局：机遇与挑战并存\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247529179&idx=1&sn=f0a1963cefd524f87ea8286a30cfd630\",\n \"科技动态｜英国发布全球首个人工智能安全标准\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247529179&idx=2&sn=a530a0a4bf56c6d58569f6d015816c9d\",\n \"益生菌能提高运动成绩吗？\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485851&idx=1&sn=ea0ba6fa83bc28e5ae13ca0fd8eb82b3\",\n \"点击劫持与双击劫持\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485479&idx=1&sn=6086c9a3c256df6bb971fc5a86f652e4\",\n \"《2025Hvv 行动集训营，紧跟热点潮流，带你 1 个月突破网络安全防线，实现薪资逆袭！ 》\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTUyNjkwNA==&mid=2247484287&idx=1&sn=ebf831861225afe20f3c6990e6173bff\",\n \"2025数字中国创新大赛·数字安全赛道时空数据安全赛题等你来战！\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247491931&idx=1&sn=8748a773257b0ff5b9d92455e3a96528\",\n \"报名即将截止 | “网谷杯”信创应用软件网络安全攻防大赛\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247491931&idx=2&sn=81b4c20f905b01e807d5a520de212ca2\",\n \"解锁安全研究新姿势：DeepSeek 本地部署指南\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247492941&idx=1&sn=476fc818f0028dad0a4bff3c74c59c09\",\n \"如何借力AI促进网络安全文化建设？\": \"https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247484821&idx=1&sn=576dcd8f20191c91171e92b96396f667\",\n \"为何数学会出现虚数i这无意义的符号？\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTM3NDE2Nw==&mid=2247490341&idx=1&sn=9d16eefe20cca638ffb901bcf8d4253f\",\n \"美俄会谈结束俄乌战争，为何要选在沙特进行？\": \"https://mp.weixin.qq.com/s?__biz=MzkxMTA3MDk3NA==&mid=2247487198&idx=1&sn=920bc7bd62ab08726141df8a37133eeb\",\n \"微信接入DeepSeek！可惜87%的IT人还不会高效利用它...\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571133&idx=1&sn=4cb9c4b4b7bca014e94cf6c93bee83b0\",\n \"一款Windows GUI界面的渗透测试工具箱-V1.1（更新）\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571133&idx=2&sn=2b97b09c38d3658ada05deddb2b56617\",\n \"『CTF』密码学-一道LFSR\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NTA0MzgxNQ==&mid=2247489904&idx=1&sn=1c0472deec7bd1db7d35ca3ec02216cf\",\n \"国家安全部提醒：这些随处可见的设备，也可能有风险！\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170858&idx=1&sn=24cbb4ccb5e3ed8603ee8f469b55a71a\",\n \"马斯克口中“最聪明AI”，Grok 3正式发布\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170858&idx=2&sn=0eef501df2b4e2e40f8767f11fe65453\",\n \"【2025春节】解题领红包之番外篇writeup\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141800&idx=1&sn=ce4fbd9d5e88415d4d773b2501fe657d\",\n \"DeepSeek浪潮之下，安全暗礁逐渐显现\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650465264&idx=1&sn=e64e6f0cc1955816c5cda713594ab2c3\",\n \"预约开启！BUGBANK助力顺丰SRC第三届白帽技术沙龙\": \"https://mp.weixin.qq.com/s?__biz=MzAxODg1MDMwOQ==&mid=2247507752&idx=1&sn=f2713e90546e22c6cdfc33eb6e40b103\",\n \"揭晓｜2025年网络安全十项发展趋势预测\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247486831&idx=1&sn=edd41385bacb72e6f559fd94dd323098\",\n \"冰雪同梦 网安铸盾丨迪普科技助力2025亚冬会圆满完成\": \"https://mp.weixin.qq.com/s?__biz=MzA4NzE5MzkzNA==&mid=2650371663&idx=1&sn=5978913cf66a2bce8e6d23a890b999ba\",\n \"【渗透干货】Apache Tomcat弱口令批量检测利用工具\": \"https://mp.weixin.qq.com/s?__biz=MzIxOTk0ODY0NQ==&mid=2247485428&idx=1&sn=1d21795f59bb1a32ba9f23da0a4a7781\",\n \"安全简讯（2025.02.18）\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500752&idx=1&sn=aee35d6ecb95122bbaa6dd9b86ee7c72\",\n \"网安行业互助文档，又来了\": \"https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500642&idx=1&sn=c2b2eb6863906fe6e431165b2b9ab48c\",\n \"【靶场手记】JARBAS：细节决定攻击链，boot2root的重要拼图\": \"https://mp.weixin.qq.com/s?__biz=MzUyMTE0MDQ0OA==&mid=2247494122&idx=1&sn=49888cf816741a3e5dadb6e96373c763\",\n \"新媒体人必备神器！一键发布公众号文章不是梦\": \"https://mp.weixin.qq.com/s?__biz=Mzg2MTc0NTYyNg==&mid=2247486911&idx=1&sn=efd65ddc3598f81bb149766952fa9ba8\"\n },\n \"GuidePoint Security\": {\n \"GRIT’s 2025 Report: Ransomware Group Dynamics and Case Studies\": \"https://www.guidepointsecurity.com/blog/grit-2025-ransomware-group-dynamics-and-case-studies-understanding-the-threat-landscape/\"\n },\n \"SpiderLabs Blog\": {\n \"The Rise of Email Marketing Platforms for Business Email Compromise Attacks\": \"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/the-rise-of-email-marketing-platforms-for-business-email-compromise-attacks/\"\n },\n \"Horizon3.ai\": {\n \"Fireside Chat: Horizon3.ai and Jerome’s Furniture\": \"https://www.horizon3.ai/intelligence/webinars/fireside-chat-horizon3-ai-and-jeromes-furniture/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"I Pasted a Simple HTML Code on BookMyShow… and Got ₹1000 for It!\": \"https://infosecwriteups.com/i-pasted-a-simple-html-code-on-bookmyshow-and-got-1000-for-it-26313f0e2115?source=rss----7b722bfd1b8d--bug_bounty\",\n \"HTMLI to ATO leads to $$$ bounty\": \"https://infosecwriteups.com/htmli-to-ato-leads-to-bounty-9725cb23a67c?source=rss----7b722bfd1b8d--bug_bounty\",\n \"How I Bypassed BookMyShow’s OTP Limit with Just a Space & Got ₹1000 for It!\": \"https://infosecwriteups.com/how-i-bypassed-bookmyshows-otp-limit-with-just-a-space-got-1000-for-it-70eab29fb6aa?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Zoho Account Takeover: How a Single Click Can Lead to Full Control over your Zoho account\": \"https://infosecwriteups.com/zoho-account-takeover-how-a-single-click-can-lead-to-full-control-over-your-zoho-account-cd6f0c245272?source=rss----7b722bfd1b8d--bug_bounty\",\n \"No email verification leads to an Oauth account takeover.\": \"https://infosecwriteups.com/no-email-verification-leads-to-an-oauth-account-takeover-02eb30496939?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Malwarebytes\": {\n \"Hard drives containing sensitive medical data found in flea market\": \"https://www.malwarebytes.com/blog/news/2025/02/hard-drives-containing-sensitive-medical-data-found-in-flea-market\"\n },\n \"Securelist\": {\n \"StaryDobry ruins New Year’s Eve, delivering miner instead of presents\": \"https://securelist.com/starydobry-campaign-spreads-xmrig-miner-via-torrents/115509/\"\n },\n \"Reverse Engineering\": {\n \"ImHex - A Binary Data Reverse Engineering Toolkit | New v1.37.X Release with HiDPI support and tons of other UX improvements\": \"https://www.reddit.com/r/ReverseEngineering/comments/1isddf7/imhex_a_binary_data_reverse_engineering_toolkit/\",\n \"A HuggingFace space for testing the LLM4Decompile 9B V2 model for refining Ghidra decompiler output\": \"https://www.reddit.com/r/ReverseEngineering/comments/1isegar/a_huggingface_space_for_testing_the_llm4decompile/\",\n \"Z x86_64 Linux Anti-Anti-Debugger: Bypass Anti-Debugging in Protected Binaries with User-Supplied LD_PRELOAD Libraries\": \"https://www.reddit.com/r/ReverseEngineering/comments/1isnvsn/z_x86_64_linux_antiantidebugger_bypass/\",\n \"Everyday Ghidra: How Platform Choice Influences Ghidra’s Binary Analysis\": \"https://www.reddit.com/r/ReverseEngineering/comments/1isfze3/everyday_ghidra_how_platform_choice_influences/\",\n \"An introduction to LLVM IR\": \"https://www.reddit.com/r/ReverseEngineering/comments/1is7rzo/an_introduction_to_llvm_ir/\",\n \"Arechclient2 (sectopRAT) Analysis – A Highly Obfuscated .NET RAT with Malicious Chrome Extension\": \"https://www.reddit.com/r/ReverseEngineering/comments/1isaavt/arechclient2_sectoprat_analysis_a_highly/\"\n },\n \"daniel.haxx.se\": {\n \"Changing every line three times\": \"https://daniel.haxx.se/blog/2025/02/18/changing-every-line-three-times/\"\n },\n \"Twitter @James Kettle\": {\n \"Re @Freyxfi Nah it's a lot of work, I'd rather be doing research. I do maintain a playlist of all our research though. https://www.youtube.com/playlis...\": \"https://x.com/albinowax/status/1891867917760778324\",\n \"Re You can find the show notes & links at https://www.scworld.com/podcast-show/application-security-weekly\": \"https://x.com/albinowax/status/1891861901803430192\",\n \"Catch the inside story on the Top Ten Web Hacking Techniques in my interview with the Application Security Weekly podcast https://youtu.be/8XEK3NkbKOA\": \"https://x.com/albinowax/status/1891861705652645990\"\n },\n \"rtl-sdr.com\": {\n \"ESPARGOS: An ESP32 Phased Array for Seeing WiFi\": \"https://www.rtl-sdr.com/espargos-an-esp32-phased-array-for-seeing-wifi/\",\n \"Saveitforparts: Listening in on Russian Soldiers Hijacking US Military Satellites\": \"https://www.rtl-sdr.com/saveitforparts-listening-in-on-russian-soldiers-hijacking-us-military-satellites/\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"OpenSSH曝高危漏洞，可引发中间人攻击与DoS攻击\": \"https://www.freebuf.com/vuls/422180.html\",\n \"CVE-2016-4437（Shiro-550）漏洞简述\": \"https://www.freebuf.com/vuls/422102.html\",\n \"短视频平台“封号圈”乱象猖獗，IP查询如何助力防范\": \"https://www.freebuf.com/news/422099.html\",\n \"FreeBuf早报 | Palo Alto防火墙又被黑；微软投资7亿美元提升波兰网络安全\": \"https://www.freebuf.com/news/422094.html\",\n \"【黄金圆环】在研发领域的实践分享\": \"https://www.freebuf.com/news/422069.html\",\n \"DeepSeek本地化部署有风险！快来看看你中招了吗?\": \"https://www.freebuf.com/sectool/422066.html\",\n \"XCSSET信息窃取恶意软件卷土重来，针对macOS用户和开发者\": \"https://www.freebuf.com/articles/422056.html\",\n \"网络犯罪分子利用图片标签中的Onerror事件窃取支付信息\": \"https://www.freebuf.com/articles/web/422085.html\",\n \"当AI邂逅日志海：从骨感现实到无限可能\": \"https://www.freebuf.com/news/422038.html\"\n },\n \"Dhole Moments\": {\n \"Reviewing the Cryptography Used by Signal\": \"https://soatok.blog/2025/02/18/reviewing-the-cryptography-used-by-signal/\"\n },\n \"绿盟科技技术博客\": {\n \"绿盟威胁情报周报（2025.02.10-2025.02.16）\": \"https://blog.nsfocus.net/2025-02-10-2025-02-16/\"\n },\n \"Shostack & Friends Blog\": {\n \"A New Hope for Threat Modeling, on The CyberTuesday Podcast\": \"https://shostack.org/blog/cybertuesday-podcast/\"\n },\n \"安全牛\": {\n \"韩国称DeepSeek与字节跳动共享数据？我外交部回应；美国国防部一承包商和一大型金融机构虚拟专用网络疑被攻破 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=1&sn=265652c42964cda677cb67cdd3409cb8&chksm=bd15ac5d8a62254b382f53aeb16d3d10305ac645ba976317dd34d61c48682f2becea57e4d15f&scene=58&subscene=0#rd\",\n \"应对高级勒索软件攻击，你需要关注这7项技术手段\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=2&sn=47591d1505f32bcf70149d3a92cd8961&chksm=bd15ac5d8a62254bdb882276f5ca5888b7b5e98968aadee2365824f305a7ca4b025fc91140ea&scene=58&subscene=0#rd\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"美国白领工人的工作面临风险\": \"https://www.solidot.org/story?sid=80583\",\n \"为什么吃饱之后仍然想吃甜食\": \"https://www.solidot.org/story?sid=80582\",\n \"OpenSUSE Tumbleweed 使用的 MAC 切换到 SELinux\": \"https://www.solidot.org/story?sid=80581\",\n \"青少年可能不适合断食\": \"https://www.solidot.org/story?sid=80580\",\n \"日本政府将重新发展核电\": \"https://www.solidot.org/story?sid=80579\"\n },\n \"腾讯玄武实验室\": {\n \"每日安全动态推送(25/2/18)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960026&idx=1&sn=a6b3b18c68a2a23dfb2c6854255e463f&chksm=8baed245bcd95b532bedc5b2e1788d0577db0211a5ed16b23d4e95cc7134302a9a803a17dfad&scene=58&subscene=0#rd\"\n },\n \"雷神众测\": {\n \"雷神众测漏洞周报2024.2.10-2024.2.16\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503318&idx=1&sn=b5b13cfc554a840876a561de454e8f7e&chksm=f2585ea5c52fd7b368ebc5c86a95e6425d2a601f7df5519e543aa82f70e7d68e5de1882a350e&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"旅行APP流程分析（TCP+protobuf）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=1&sn=e1354617c606204a98db2a1960b7647d&chksm=b18c2aaa86fba3bc25d1d7e3d341a334fb0b35e4f4b63591cdb6b0749c7030212ba278bab9c5&scene=58&subscene=0#rd\",\n \"立即预约！顺丰SRC第三届白帽技术沙龙即将开启\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=2&sn=278b59f239fe65d5cfe07f93ecaa636e&chksm=b18c2aaa86fba3bcedd2b8d75f3dfa777e55c1a4767c45b6a015e7d97213b67b22e727e8ac68&scene=58&subscene=0#rd\",\n \"ChatGPT Operator 遭提示注入攻击\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=3&sn=a005da20fc0a49c5e16d1ada1109ad46&chksm=b18c2aaa86fba3bc13efec4f0ade8cc48cb172e9486d09bd97b185c29dea9d667a9327beb034&scene=58&subscene=0#rd\"\n },\n \"吾爱破解论坛\": {\n \"【2025春节】解题领红包之番外篇writeup\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141800&idx=1&sn=ce4fbd9d5e88415d4d773b2501fe657d&chksm=bd50a6fc8a272fea1d4e9755a365a519da26d3cd87eed14b4e0059d95b6951e0538608dced32&scene=58&subscene=0#rd\"\n },\n \"安全分析与研究\": {\n \"TransparentTribe(透明部落) APT组织CrimsonRAT远控样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490574&idx=1&sn=01ffe4798637dd2465d3d3b7171b4aaa&chksm=902fb326a7583a30c4e61dde6527c7b77143024a1e40892601805568b72d1d1f9e9bb791b8f8&scene=58&subscene=0#rd\"\n },\n \"威努特安全网络\": {\n \"威努特海上平台智算中心，助力海上油田智能化转型\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131173&idx=1&sn=ecda2cfd067a5213307b305e9e0616eb&chksm=80e71795b7909e835093c15ff3f9333b9413af6dd919217c768e638a49f1469eb115225f1425&scene=58&subscene=0#rd\"\n },\n \"暗影安全\": {\n \"DeepSeek本地化部署有风险！快来看看你中招了吗？\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165657&idx=1&sn=c6c0514ec5ae2bdece02b895469bacf8&chksm=f1d4d3bcc6a35aaa19cb47abfe0f407db4b4c97464d6c69e5de1ea2656b2044891a291847f6e&scene=58&subscene=0#rd\"\n },\n \"信安之路\": {\n \"高效检测 SQL 注入漏洞，自动化实战经验分享\": \"https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499808&idx=1&sn=1c6724f7a6565b221b60843413d36b8a&chksm=ec1df008db6a791e8fc2c1cc0d8c4d81737f1e79e1f95761924835b7161ff5f21f80c0724268&scene=58&subscene=0#rd\"\n },\n \"ChaMd5安全团队\": {\n \"DeepSeek本地化部署有风险！快来看看你中招了吗？\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247511991&idx=1&sn=c40bb92defdfa8105881c5b26bec8c78&chksm=e89d876fdfea0e79ef69c60bce53d83d5cb023fdb5364f481f6ded6ab799ba1431fd8b880d11&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"新一轮勒索潮来了？超级勒索软件组织宣布攻陷47家企业\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513762&idx=1&sn=62912b605c08b523f4aa7e56733c954a&chksm=ebfaf182dc8d78945f71786a16c4ac7b798ea5e0444b31a8c9f9a73e58423bc65c0660459848&scene=58&subscene=0#rd\",\n \"美国会拟立法：将太空系统作为关基设施进行保护\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513762&idx=2&sn=7915c55f55994f07201c25420d94731a&chksm=ebfaf182dc8d7894dada7eb2437159773a0c1e0a7ca77d79cdf630a59ca3b0dae9d500cd6078&scene=58&subscene=0#rd\"\n },\n \"安全实践\": {\n \"2025开始资产配置，年终一起复盘\": \"https://mp.weixin.qq.com/s?__biz=MzI5NzAzMDg0NA==&mid=2650698012&idx=1&sn=6bd707b9f86353bd96b581568133c700&chksm=f4b194cfc3c61dd9ef8285010597b71b0b7f6d17abf7c2c1896399a9c4fc9f728e59a79dde68&scene=58&subscene=0#rd\"\n },\n \"Hacking就是好玩\": {\n \"DeepSeek本地化部署有风险！快来看看你中招了吗？\": \"https://mp.weixin.qq.com/s?__biz=MzU2NzcwNTY3Mg==&mid=2247485334&idx=1&sn=688a9c353d4c7b1232685404fc6ae399&chksm=fc986eb1cbefe7a78b8711640338b4f926f4cf1ef350bdf53fd64b8bcaf18e241a4417302a6a&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \".NET 通过代码审计发现某 OA 系统全局性权限访问绕过漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498952&idx=1&sn=a08ebc1ce872683b07a16218dbcbc8e9&chksm=fa595225cd2edb33e2e0624ce93a8e1ad168afdaa762794a6062913e3d523289e1c16b3749af&scene=58&subscene=0#rd\",\n \".NET 安全攻防知识交流社区\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498952&idx=2&sn=a49e296419efabfbbbd89e3d51b8f18c&chksm=fa595225cd2edb334d39bed36f3d337a32ffcc250236a2dbf423b8eb4df9f9a9bcf4b275fc4b&scene=58&subscene=0#rd\",\n \"一款通过调用Windows系统白名单文件执行PowerShell命令的工具\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498952&idx=3&sn=0bc91a522aca2f82d80edd2ae8742b71&chksm=fa595225cd2edb334536e258879a68a047f596ceb038b58f5a2df7ca33fb7642059e0b39c1a6&scene=58&subscene=0#rd\"\n },\n \"信息安全国家工程研究中心\": {\n \"雨水 | 春雨滋养万物昌\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498870&idx=1&sn=2f2a11a83b3ebffd73e6da5f2b1e1fc2&chksm=feb67d65c9c1f47370aadc92070d2f9e422b734e3eb6674caf2c682c8b9110bccd4d0d9ca823&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】短视频平台“封号圈”乱象猖獗，IP查询如何助力防范\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=1&sn=77b78d28e626bb57cf51f82d0c472aa6&chksm=f36e7462c419fd74ab3906ce860f6440680390728f5808049a4037668b474c84037d2686cce6&scene=58&subscene=0#rd\",\n \"【安全圈】俄罗斯黑客利用 7-Zip 零日漏洞攻击乌克兰\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=2&sn=634853ba2d9852cc240a7d5d46ce82c5&chksm=f36e7462c419fd74d29690ade86cd94c8f1353765e594a85d6f64779b2262b4aad515e3ff40c&scene=58&subscene=0#rd\",\n \"【安全圈】微软发现用于加密货币盗窃的 XCSSET macOS 恶意软件变种\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=3&sn=b875bcdbb815582bbc7966d6ebc3a164&chksm=f36e7462c419fd74485e8ebdb3defa2fd94bb38ffe4cb647dd2e95a725273325e9a817afdddb&scene=58&subscene=0#rd\",\n \"【安全圈】马斯克与 OpenAI 的交锋：收购提案遇冷，立场分歧引争议\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=4&sn=38c4e0921e00478f77d52173d75865fa&chksm=f36e7462c419fd743b5d8bf833ed7ec62a44e52917a3582cb5cd430619c335622558e4ec296b&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"《全球数据泄露态势月度报告》（2025年1月）| 附下载地址\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247536793&idx=1&sn=cfd0b0c45c95f14ab3bb11106fcca468&chksm=c1442224f633ab32c95ea0c4ff07909c8342e3cd1c98d6b062e4db40bfaed538284513e50aab&scene=58&subscene=0#rd\"\n },\n \"知道创宇404实验室\": {\n \"原创 Paper | 本地化 AI 审计工具落地小试牛刀\": \"https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990663&idx=1&sn=d3612bcdf320efdc783e5740d519c69d&chksm=8079aa75b70e2363a96c1c2318ebdea7a8fda22f5029416d80c2a7cc641c0ee2e3d263c0c79b&scene=58&subscene=0#rd\"\n },\n \"安全学术圈\": {\n \"特拉维夫大学 | FlowPic：一种通用的加密流量分类与应用识别表示方法\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491689&idx=1&sn=17687d1be26ab151a1e6d49e00a734e0&chksm=fe2d1fe2c95a96f4eddee949c7d9d669df8708caae70eb5e9a9a18eecf15d90eca0995d9c83a&scene=58&subscene=0#rd\"\n },\n \"代码卫士\": {\n \"美国政府：开发人员应停止制造“不可原谅的”缓冲溢出漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=1&sn=f4ba8096e5c48add46aab6c9f0f9b6db&chksm=ea94a6bbdde32fad212f6cefd231e991e6b3aa181b89c3c4f8942edda2b8c87b959349dba3ab&scene=58&subscene=0#rd\",\n \"VeraCore 两个0day漏洞被用于实施供应链攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=2&sn=9b28d0ae22a8aee011365d83bbe3e244&chksm=ea94a6bbdde32fad583ad06bb5abe8c191b454c50e40661e1fbba804d5ae0e3a6d9cc4164ad8&scene=58&subscene=0#rd\"\n },\n \"微步在线\": {\n \"突破千亿美元！CrowdStrike的顶级理解\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183152&idx=1&sn=c8baea3e5fbf8adbb58445304f3160fc&chksm=f4486e4cc33fe75a6889fd4400798823026225a843573abb95eeaf128a8025fb1257177f52cb&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"Grok3 来了，马斯克笑了，网站崩溃了\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073974&idx=1&sn=4f0cc225c27656ce2828992ef9f4579f&chksm=7e57cf8049204696cef80385843a3db30affa86ff2e1bb75b1f5dd335558ecf86ab9850e55b9&scene=58&subscene=0#rd\",\n \"「9块9」 的中国 AI 耳机，疯狂收割老外\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073960&idx=1&sn=5c2319c04fa976eb3be557d768a9a010&chksm=7e57cf9e49204688c19df3ddedef1a50b0aceff13682d3a08edbe326dc7321389a3bde5b05f6&scene=58&subscene=0#rd\",\n \"小米YU7续航820公里；OpenAI或发GPT-4.5狙击马斯克；DeepMind研究副总裁加盟字节跳动 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073947&idx=1&sn=459dcc6086a85c978352f0a5817f9305&chksm=7e57cfad492046bb7d901f0b9384f60e84bba68ff84cb391e50729b8e74d214a945b03eb56b3&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"马斯克Grok 3接入X平台：一场没有硝烟的“数据战争”，我们将如何突围？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559771&idx=1&sn=7a1aa6dd145b6db21d216b962b96a900&chksm=87117b50b066f246e0ad0554e7d64caf1b6dfc17b0a9ce11e89802c0db324b1b567de7575e71&scene=58&subscene=0#rd\",\n \"美国国务院全球人员名单数据分析与战略意图研判\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559771&idx=2&sn=5534a2140a7da0a950900b4c9dc705cb&chksm=87117b50b066f246924f5603e181a8b8b71e60e6e2d327882b25419e10813998b03f1a16b4d7&scene=58&subscene=0#rd\"\n },\n \"复旦白泽战队\": {\n \"解锁安全研究新姿势：DeepSeek 本地部署指南\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247492941&idx=1&sn=476fc818f0028dad0a4bff3c74c59c09&chksm=fde86133ca9fe825e7b72423b6c538f0e2ac47d59a591854a3719f3d3b29f0c18e1347588af4&scene=58&subscene=0#rd\"\n },\n \"黑伞安全\": {\n \"Run-llama/LlamaIndex 大模型框架提示词注入构造 sqli实现任意文件创建\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489678&idx=1&sn=9039652d59a286b1904c7a3d68373f84&chksm=fb0295d6cc751cc001a871a2a515f11801be690b4da1548c74df06b4f971d46e06b94c132649&scene=58&subscene=0#rd\"\n },\n \"字节跳动技术团队\": {\n \"独家首发，免费｜Trae 从入门到实践，开启 AI 编码新征程！\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513387&idx=1&sn=ce7672590c2cd60a22e9b620dcbdcfca&chksm=e9d37ec9dea4f7df39b5549782a0921ba94ce44b12aa184545d0e3be013b25b248d26446a04a&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"微软：黑客在设备代码钓鱼攻击中窃取电子邮件\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581190&idx=1&sn=4b0c5a0975729f23cbf0196d260df3cb&chksm=e9146e3cde63e72a6c68e3717252770ba4af7ddcd656d81e0e3220c3b6f769d7346e61b51764&scene=58&subscene=0#rd\",\n \"中电安科|万事俱备，“职”等你来\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581190&idx=2&sn=23364da2fcdaabf3085192e999914d3a&chksm=e9146e3cde63e72ab1879f639dac35c0342e56bcff89c1ecee9b871e13927b415ddb571ad129&scene=58&subscene=0#rd\"\n },\n \"安全攻防团队\": {\n \"腾讯云安全中心推出2025年1月必修安全漏洞清单\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485049&idx=1&sn=2c3c26e2c4796c0f8af116747bc1187b&chksm=c2b1040ff5c68d1908d6d0b9c78e0d0ecc9ac81fef4dbf443c42b396962becfe491f85323aaa&scene=58&subscene=0#rd\"\n },\n \"渊龙Sec安全团队\": {\n \"DeepSeek本地化部署有风险！快来看看你中招了吗？\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485650&idx=1&sn=e20f3b5b3a27549b0f3549d813888c73&chksm=cfa49329f8d31a3f78eb1f422f41cb3c59ddc0d1b1539512d0abd1cbe344b61d6a114a7069a9&scene=58&subscene=0#rd\"\n },\n \"网络空间安全科学学报\": {\n \"学术前沿 | 华南师范大学密码学与信息安全团队：白盒密码实现的侧信道分析技术综述\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505072&idx=1&sn=9f910b3ab2a5ccd60b3e071af3e4aaa7&chksm=e9bfc00edec84918e630b82f33309725ee168e285f72dac4e7a8adc24e86647dac879c47ccc1&scene=58&subscene=0#rd\"\n },\n \"DEF CON Announcements!\": {\n \"Franklin Project Hackers' Almanack from DEF CON 32!\": \"https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20Hackers'%20Almanack.pdf\"\n },\n \"TrustedSec\": {\n \"Getting Started Using LLMs in Application Testing With an MVP\": \"https://trustedsec.com/blog/getting-started-using-llms-in-application-testing-with-an-mvp\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"WinRAR 7.10 boosts Windows privacy by stripping MoTW data\": \"https://www.bleepingcomputer.com/news/security/winrar-710-boosts-windows-privacy-by-stripping-motw-data/\",\n \"Managed healthcare defense contractor to pay $11 million over alleged cyber failings\": \"https://therecord.media/managed-health-tricare-false-claims\",\n \"Cracked Garry’s Mod, BeamNG.drive games infect gamers with miners\": \"https://www.bleepingcomputer.com/news/security/cracked-garrys-mod-beamngdrive-games-infect-gamers-with-miners/\",\n \"Hackers use ‘sophisticated’ macOS malware to steal cryptocurrency, Microsoft says\": \"https://therecord.media/hackers-use-macos-malware-to-steal-crypto\",\n \"Venture capital giant Insight Partners hit by cyberattack\": \"https://www.bleepingcomputer.com/news/security/venture-capital-giant-insight-partners-hit-by-cyberattack/\",\n \"Microsoft reminds admins to prepare for WSUS driver sync deprecation\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-reminds-admins-to-prepare-for-wsus-driver-sync-deprecation/\",\n \"How Phished Data Turns into Apple & Google Wallets\": \"https://krebsonsecurity.com/2025/02/how-phished-data-turns-into-apple-google-wallets/\",\n \"Chinese hackers abuse Microsoft APP-v tool to evade antivirus\": \"https://www.bleepingcomputer.com/news/security/chinese-hackers-abuse-microsoft-app-v-tool-to-evade-antivirus/\",\n \"Ecuador's legislature says hackers attempted to access confidential information\": \"https://therecord.media/ecuador-national-assembly-cyberattack\",\n \"The people in Elon Musk’s DOGE universe\": \"https://techcrunch.com/2025/02/18/the-people-in-elon-musk-doge-universe/\",\n \"Hackers planted a Steam game with malware to steal gamers’ passwords\": \"https://techcrunch.com/2025/02/18/hackers-planted-a-steam-game-with-malware-to-steal-gamers-passwords/\",\n \"Juniper patches critical auth bypass in Session Smart routers\": \"https://www.bleepingcomputer.com/news/security/juniper-patches-critical-auth-bypass-in-session-smart-routers/\",\n \"New OpenSSH flaws expose SSH servers to MiTM and DoS attacks\": \"https://www.bleepingcomputer.com/news/security/new-openssh-flaws-expose-ssh-servers-to-mitm-and-dos-attacks/\",\n \"Cyberattack likely to have ‘material impact’ on media giant Lee Enterprises’ bottom line\": \"https://therecord.media/cyberattack-lee-enterprises-news-media\",\n \"Your Ultimate Guide to Online Brand Protection\": \"https://bfore.ai/your-ultimate-guide-to-online-brand-protection/\",\n \"Tulsi Gabbard ai vertici della National Intelligence: come cambia la cyber dei Servizi USA\": \"https://www.cybersecurity360.it/news/tulsi-gabbard-ai-vertici-della-national-intelligence-come-cambia-la-cyber-dei-servizi-usa/\",\n \"Compliance Isn’t Security: Why a Checklist Won’t Stop Cyberattacks\": \"https://www.bleepingcomputer.com/news/security/compliance-isnt-security-why-a-checklist-wont-stop-cyberattacks/\",\n \"L’ascesa di DeepSeek, la sfida della protezione di dati e AI nelle aziende\": \"https://www.cybersecurity360.it/soluzioni-aziendali/lascesa-di-deepseek-la-sfida-della-protezione-di-dati-e-ai-nelle-aziende/\",\n \"Dati personali pseudonimizzati e anonimi, la CNIL chiarisce bene la differenza\": \"https://www.cybersecurity360.it/news/dati-personali-pseudonimizzati-e-anonimi-la-cnil-chiarisce-bene-la-differenza/\",\n \"BforeAI Triumphs at CPX EMEA 2025 Innovation Sandbox Competition: Leading Preemptive Cyber Defense innovator secures top award\": \"https://bfore.ai/bforeai-triumphs-at-cpx-emea-2025-innovation-sandbox-competition/\",\n \"CERT-In Issues Critical Warning on Adobe Software Security Flaws\": \"https://cyble.com/blog/cert-in-issues-critical-software-security-flaws/\",\n \"CVE-2022-31631: High-Risk PHP Vulnerability Demands Immediate Patch\": \"https://cyble.com/blog/cve-2022-31631-vulnerability-immediate-patch/\",\n \"Lee Enterprises newspaper disruptions caused by ransomware attack\": \"https://www.bleepingcomputer.com/news/security/lee-enterprises-newspaper-disruptions-caused-by-ransomware-attack/\",\n \"Zhong Stealer Analysis: New Malware Targeting Fintech and Cryptocurrency\": \"https://any.run/cybersecurity-blog/zhong-stealer-malware-analysis/\",\n \"Quando l’“altro dipendente” diventa terzo: le responsabilità privacy nelle organizzazioni\": \"https://www.cybersecurity360.it/legal/privacy-dati-personali/quando-laltro-dipendente-diventa-terzo-le-responsabilita-privacy-nelle-organizzazioni/\",\n \"StaryDobry ruins New Year’s Eve, delivering miner instead of presents\": \"https://securelist.com/starydobry-campaign-spreads-xmrig-miner-via-torrents/115509/\",\n \"whoAMI, l’attacco di name confusion che sfrutta un errore di configurazione di AWS\": \"https://www.securityinfo.it/2025/02/18/whoami-lattacco-di-name-confusion-che-sfrutta-un-errore-di-configurazione-di-aws/\",\n \"Phishing sui motori di ricerca, l’esca è un PDF dannoso usato per rubare dati finanziari\": \"https://www.cybersecurity360.it/news/phishing-sui-motori-di-ricerca-lesca-e-un-pdf-dannoso-usato-per-rubare-dati-finanziari/\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #752: Windows hello challenge part 3 fingerprints\": \"https://www.hecfblog.com/2025/02/daily-blog-752-windows-hello-challenge.html\"\n },\n \"Securityinfo.it\": {\n \"whoAMI, l’attacco di name confusion che sfrutta un errore di configurazione di AWS\": \"https://www.securityinfo.it/2025/02/18/whoami-lattacco-di-name-confusion-che-sfrutta-un-errore-di-configurazione-di-aws/?utm_source=rss&utm_medium=rss&utm_campaign=whoami-lattacco-di-name-confusion-che-sfrutta-un-errore-di-configurazione-di-aws\"\n },\n \"青藤智库\": {\n \"企业级EDR实施技术指南：十大关键要素深度解析\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489351&idx=1&sn=3da833b6858ec815c4acd2bffbdb5f69&chksm=fa58b57ccd2f3c6ab2cc18d4bf8ba912d182435ffce285f01c61664847b774308bde51ba5161&scene=58&subscene=0#rd\"\n },\n \"ICT Security Magazine\": {\n \"Il Divieto di TikTok, una panoramica approfondita\": \"https://www.ictsecuritymagazine.com/articoli/divieto-di-tiktok/\",\n \"Paragon: la vicenda dello spyware Graphite, i chiarimenti del Garante Privacy e il ruolo dell’ACN\": \"https://www.ictsecuritymagazine.com/notizie/paragon-spyware-cyber/\",\n \"Data Loss Prevention: Cause della perdita dei dati\": \"https://www.ictsecuritymagazine.com/articoli/data-loss-cause/\"\n },\n \"Full Disclosure\": {\n \"Re: Netgear Router Administrative Web Interface Lacks Transport Encryption By Default\": \"https://seclists.org/fulldisclosure/2025/Feb/14\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"https://SecTemplates.com - simplified, free open-source templates to enable engineering and smaller security teams to bootstrap security capabilities for their organizations, (Tue, Feb 18th)\": \"https://isc.sans.edu/diary/rss/31696\",\n \"ISC Stormcast For Tuesday, February 18th, 2025 https://isc.sans.edu/podcastdetail/9328, (Tue, Feb 18th)\": \"https://isc.sans.edu/diary/rss/31694\",\n \"ModelScan - Protection Against Model Serialization Attacks, (Mon, Feb 17th)\": \"https://isc.sans.edu/diary/rss/31692\"\n },\n \"迪哥讲事\": {\n \"Src第六期：稳住！别浪~\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497153&idx=1&sn=4d60c3c89eae0138d75f829c8f433627&chksm=e8a5ffa2dfd276b4b72173a26423b9e4b16176518083fc9c8188c76ec87d102ec8c7bf8b5b0d&scene=58&subscene=0#rd\"\n },\n \"Security Affairs\": {\n \"Juniper Networks fixed a critical flaw in Session Smart Routers\": \"https://securityaffairs.com/174365/security/juniper-networks-fixed-a-critical-flaw-in-session-smart-routers.html\",\n \"China-linked APT group Winnti targets Japanese organizations since March 2024\": \"https://securityaffairs.com/174353/apt/china-linked-apt-group-winnti-targets-japanese-orgs.html\",\n \"Xerox VersaLink C7025 Multifunction printer flaws may expose Windows Active Directory credentials to attackers\": \"https://securityaffairs.com/174342/hacking/xerox-versalink-c7025-multifunction-printer-flaws.html\",\n \"New XCSSET macOS malware variant used in limited attacks\": \"https://securityaffairs.com/174333/malware/apple-macos-malware-xcsset-limited-attacks.html\"\n },\n \"Graham Cluley\": {\n \"The AI Fix #38: AI proves time travel is impossible (but still can’t draw fingers)\": \"https://grahamcluley.com/the-ai-fix-38/\",\n \"Got a Microsoft Teams invite? Storm-2372 gang exploit device codes in global phishing attacks\": \"https://www.tripwire.com/state-of-security/microsoft-teams-storm-2372-exploit-device-codes\"\n },\n \"Computer Forensics\": {\n \"iOS WhatsAPP Database Encrypted\": \"https://www.reddit.com/r/computerforensics/comments/1ism8na/ios_whatsapp_database_encrypted/\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Cloud platform recommendation as a test bed\": \"https://www.reddit.com/r/netsecstudents/comments/1isk2bt/cloud_platform_recommendation_as_a_test_bed/\",\n \"airtel fiber/airfiber portforwarding\": \"https://www.reddit.com/r/netsecstudents/comments/1isil01/airtel_fiberairfiber_portforwarding/\",\n \"I want to learn some skills or knowledge on this field but I have no idea where to start.\": \"https://www.reddit.com/r/netsecstudents/comments/1isf9x0/i_want_to_learn_some_skills_or_knowledge_on_this/\",\n \"How to Prepare for Cisco 700-240 Certification?\": \"https://www.reddit.com/r/netsecstudents/comments/1ischo1/how_to_prepare_for_cisco_700240_certification/\"\n },\n \"Krebs on Security\": {\n \"How Phished Data Turns into Apple & Google Wallets\": \"https://krebsonsecurity.com/2025/02/how-phished-data-turns-into-apple-google-wallets/\"\n },\n \"FuzzWiki\": {\n \"SEAMFUZZ：灰盒模糊测试的学习种子自适应突变策略\": \"https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247486942&idx=1&sn=d249d0aa9047c41d34cb0da0cb74053b&chksm=fbd9a662ccae2f741e774425250e2a2894e7b3796ce123e69795798288442b9c5d04647a4069&scene=58&subscene=0#rd\"\n },\n \"The Hacker News\": {\n \"New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now\": \"https://thehackernews.com/2025/02/new-openssh-flaws-enable-man-in-middle.html\",\n \"Chinese Hackers Exploit MAVInject.exe to Evade Detection in Targeted Cyber Attacks\": \"https://thehackernews.com/2025/02/chinese-hackers-exploit-mavinjectexe-to.html\",\n \"New FrigidStealer Malware Targets macOS Users via Fake Browser Updates\": \"https://thehackernews.com/2025/02/new-frigidstealer-malware-targets-macos.html\",\n \"Debunking the AI Hype: Inside Real Hacker Tactics\": \"https://thehackernews.com/2025/02/debunking-ai-hype-inside-real-hacker.html\",\n \"Juniper Session Smart Routers Vulnerability Could Let Attackers Bypass Authentication\": \"https://thehackernews.com/2025/02/juniper-session-smart-routers.html\",\n \"Winnti APT41 Targets Japanese Firms in RevivalStone Cyber Espionage Campaign\": \"https://thehackernews.com/2025/02/winnti-apt41-targets-japanese-firms-in.html\",\n \"New Xerox Printer Flaws Could Let Attackers Capture Windows Active Directory Credentials\": \"https://thehackernews.com/2025/02/new-xerox-printer-flaws-could-let.html\",\n \"Cybercriminals Exploit Onerror Event in Image Tags to Deploy Payment Skimmers\": \"https://thehackernews.com/2025/02/cybercriminals-exploit-onerror-event-in.html\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Everyday Ghidra: How Platform Choice Influences Ghidra’s Binary Analysis\": \"https://www.reddit.com/r/netsec/comments/1isfypx/everyday_ghidra_how_platform_choice_influences/\",\n \"Microsoft Edge Developer VM Remote Code Execution\": \"https://www.reddit.com/r/netsec/comments/1isdwc6/microsoft_edge_developer_vm_remote_code_execution/\",\n \"Arechclient2 (sectopRAT) Analysis – A Highly Obfuscated .NET RAT with Malicious Chrome Extension\": \"https://www.reddit.com/r/netsec/comments/1isaca7/arechclient2_sectoprat_analysis_a_highly/\",\n \"Passkey Raider: Burp Suite Extension for Pentesting Passkey (Pentest & Bug Bounty)\": \"https://www.reddit.com/r/netsec/comments/1isbbvt/passkey_raider_burp_suite_extension_for/\"\n },\n \"恒脑与AI\": {\n \"Grok-3“最聪明AI”来了！为您整理发布会重点及当下明星AI产品\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496639&idx=1&sn=ebd1da91dd9c3743289106d6c491a062&chksm=e9fd6e2ede8ae738fb0088894c8e55e6a60eb4d8e4b9be65a7d9ecff32aec34c273b1800fa11&scene=58&subscene=0#rd\"\n },\n \"Schneier on Security\": {\n \"Story About Medical Device Security\": \"https://www.schneier.com/blog/archives/2025/02/story-about-medical-device-security.html\"\n },\n \"Your Open Hacker Community\": {\n \"pentest / hacking courses+certification\": \"https://www.reddit.com/r/HowToHack/comments/1isighp/pentest_hacking_coursescertification/\",\n \"QuasarRAT exclusion on client side\": \"https://www.reddit.com/r/HowToHack/comments/1is9bok/quasarrat_exclusion_on_client_side/\",\n \"Can anyone help me to remove password from my pdf\": \"https://www.reddit.com/r/HowToHack/comments/1isgixr/can_anyone_help_me_to_remove_password_from_my_pdf/\",\n \"Scammed\": \"https://www.reddit.com/r/HowToHack/comments/1is9bh3/scammed/\",\n \"Am I hacked?\": \"https://www.reddit.com/r/HowToHack/comments/1is2w86/am_i_hacked/\",\n \"Hacking Old Roblox Account\": \"https://www.reddit.com/r/HowToHack/comments/1is3dot/hacking_old_roblox_account/\"\n },\n \"RedTeam\": {\n \"DeepSeek本地化部署有风险！快来看看你中招了吗？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484156&idx=1&sn=19bb941c4a3c27e1a5239ddad80eeb2c&chksm=c006ca0cf771431a2a1a1311e6c489deec495226828e73bf98de345a40c1df31c0df51a4ff07&scene=58&subscene=0#rd\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"AI Threat Intelligence, AI Hacking, Data Breaches, Zhong, DOGE, and more - SWN #452\": \"http://sites.libsyn.com/18678/ai-threat-intelligence-ai-hacking-data-breaches-zhong-doge-and-more-swn-452\",\n \"Top 10 Web Hacking Techniques of 2024 - James Kettle - ASW #318\": \"http://sites.libsyn.com/18678/top-10-web-hacking-techniques-of-2024-james-kettle-asw-318\"\n }\n}"}, "0a13ddc8259d653c92b07b532114ad8f586e1397": {"t": 1785772256.6734543, "n": 62737, "h": "0d4331df005ae5cd", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-02-18 Review\": \"http://www.sec-wiki.com/?2025-02-18\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"微软推出修复华硕蓝屏问题的 BIOS 更新\": \"https://www.anquanke.com/post/id/304455\",\n \"马斯克与 OpenAI 的交锋：收购提案遇冷，立场分歧引争议\": \"https://www.anquanke.com/post/id/304451\",\n \"保护投资者，重塑市场信任：ESMA 就加密员工指导方针征求意见\": \"https://www.anquanke.com/post/id/304441\",\n \"AMD 多款嵌入式处理器现安全隐患，官方建议升级固件防范\": \"https://www.anquanke.com/post/id/304437\",\n \"Juniper Networks多款产品现严重身份验证绕过漏洞（CVE-2025-21589），速升级软件修复\": \"https://www.anquanke.com/post/id/304433\",\n \"2025全球网络安全政策法律趋势：AI、数据安全等成焦点！\": \"https://www.anquanke.com/post/id/304429\",\n \"LibreOffice 严重漏洞：或致系统被写入文件及数据泄露，需更新版本\": \"https://www.anquanke.com/post/id/304422\",\n \"微软曝光：针对 macOS 的 XCSSET 恶意软件盗窃加密货币\": \"https://www.anquanke.com/post/id/304417\",\n \"警惕！X 平台将 Signal.me 链接标记为恶意，屏蔽行为引猜测\": \"https://www.anquanke.com/post/id/304411\",\n \"XCSSET 恶意软件新变种来袭，目标直指 macOS 开发者与用户\": \"https://www.anquanke.com/post/id/304407\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"微软：黑客在设备代码钓鱼攻击中窃取电子邮件\": \"https://www.4hou.com/posts/wxxX\",\n \"「深蓝洞察」2024年度最难以阻挡的攻防趋势\": \"https://www.4hou.com/posts/l00j\"\n },\n \"paper - Last paper\": {\n \"DeepSeek本地化部署有风险！快来看看你中招了吗?\": \"https://paper.seebug.org/3282/\",\n \"如何为大型语言模型植入后门：创建“BadSeek”，一个狡猾的开源编码模型\": \"https://paper.seebug.org/3281/\",\n \"本地化 AI 审计工具落地小试牛刀\": \"https://paper.seebug.org/3280/\"\n },\n \"obaby@mars\": {\n \"伏地魔？\": \"https://h4ck.org.cn/2025/02/19333\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Tue Feb 18 20:30:07 UTC 2025\": \"https://github.com/trickest/cve/commit/990fe6ceaadcf34085f84750a0369bb2e8f78373\",\n \"Update Tue Feb 18 12:31:05 UTC 2025\": \"https://github.com/trickest/cve/commit/ae962b44913a77b1cb0c16a3051b880d5a8cc752\",\n \"Update Tue Feb 18 04:27:55 UTC 2025\": \"https://github.com/trickest/cve/commit/bd07eabc7259ff38bd175b80cef43bcb121a4c5d\"\n },\n \"奇安信攻防社区\": {\n \"掌握Tornado隐秘漏洞：构建内存马，实现命令执行\": \"https://forum.butian.net/share/4148\"\n },\n \"Security Boulevard\": {\n \"US Military, Defense Contractors Infected with Infostealers: Hudson Rock\": \"https://securityboulevard.com/2025/02/us-military-defense-contractors-infected-with-infostealers-hudson-rock/\",\n \"PCI DSS 4: 6.4.3/11.6.1 – A Guide to SAQ A-EP Compliance using Feroot PaymentGuard AI\": \"https://securityboulevard.com/2025/02/pci-dss-4-6-4-3-11-6-1-a-guide-to-saq-a-ep-compliance-using-feroot-paymentguard-ai/\",\n \"Randall Munroe’s XKCD ‘Hardwood’\": \"https://securityboulevard.com/2025/02/randall-munroes-xkcd-hardwood/\",\n \"DEF CON 32 – Manufacturing Lessons Learned, Lessons Taught\": \"https://securityboulevard.com/2025/02/def-con-32-manufacturing-lessons-learned-lessons-taught/\",\n \"Learn & Avoid Social Engineering Scams in 2025\": \"https://securityboulevard.com/2025/02/learn-avoid-social-engineering-scams-in-2025/\",\n \"Inside Amazon GuardDuty: What the Logs Reveal About Cloud Security\": \"https://securityboulevard.com/2025/02/inside-amazon-guardduty-what-the-logs-reveal-about-cloud-security/\",\n \"Intruder Enhances Free Vulnerability Intelligence Platform ‘Intel’ with AI-Generated CVE Descriptions\": \"https://securityboulevard.com/2025/02/intruder-enhances-free-vulnerability-intelligence-platform-intel-with-ai-generated-cve-descriptions/\",\n \"Cybersecurity in 2025: AI, Attack Surfaces and the Shift to Cyber Resilience\": \"https://securityboulevard.com/2025/02/cybersecurity-in-2025-ai-attack-surfaces-and-the-shift-to-cyber-resilience/\",\n \"Cybersecurity Predictions for 2025: Platforms, Convergence and the Future of Risk Management\": \"https://securityboulevard.com/2025/02/cybersecurity-in-2025-platforms-convergence-and-the-future-of-risk-management/\",\n \"GRIT’s 2025 Report: Ransomware Group Dynamics and Case Studies\": \"https://securityboulevard.com/2025/02/grits-2025-report-ransomware-group-dynamics-and-case-studies/\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"WordPress Plugin A/B Image Optimizer 3.3 Arbitrary File Download\": \"https://cxsecurity.com/issue/WLB-2025020009\",\n \"OpenSSH 9.9p1 Denial of Service / Man-In-The-Middle\": \"https://cxsecurity.com/issue/WLB-2025020008\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"VulnLab Trusted | Maverick Got Your Trusted Baby\": \"https://infosecwriteups.com/vulnlab-trusted-maverick-got-your-trusted-baby-71420c15273e?source=rss----7b722bfd1b8d---4\",\n \"I Pasted a Simple HTML Code on BookMyShow… and Got ₹1000 for It!\": \"https://infosecwriteups.com/i-pasted-a-simple-html-code-on-bookmyshow-and-got-1000-for-it-26313f0e2115?source=rss----7b722bfd1b8d---4\",\n \"HTMLI to ATO leads to $$$ bounty\": \"https://infosecwriteups.com/htmli-to-ato-leads-to-bounty-9725cb23a67c?source=rss----7b722bfd1b8d---4\",\n \"Simulating Phishing Attacks with Gophish: A Comprehensive Guide\": \"https://infosecwriteups.com/simulating-phishing-attacks-with-gophish-a-comprehensive-guide-3f4b709f76b6?source=rss----7b722bfd1b8d---4\",\n \"How I Bypassed BookMyShow’s OTP Limit with Just a Space & Got ₹1000 for It!\": \"https://infosecwriteups.com/how-i-bypassed-bookmyshows-otp-limit-with-just-a-space-got-1000-for-it-70eab29fb6aa?source=rss----7b722bfd1b8d---4\",\n \"Zoho Account Takeover: How a Single Click Can Lead to Full Control over your Zoho account\": \"https://infosecwriteups.com/zoho-account-takeover-how-a-single-click-can-lead-to-full-control-over-your-zoho-account-cd6f0c245272?source=rss----7b722bfd1b8d---4\",\n \"Why You Need a Digital Garden (How to Start Guide)\": \"https://infosecwriteups.com/why-you-need-a-digital-garden-how-to-start-guide-a1f30f818c75?source=rss----7b722bfd1b8d---4\",\n \"No email verification leads to an Oauth account takeover.\": \"https://infosecwriteups.com/no-email-verification-leads-to-an-oauth-account-takeover-02eb30496939?source=rss----7b722bfd1b8d---4\"\n },\n \"Trustwave Blog\": {\n \"Building a Sustainable PCI DSS 4.0 Compliance Culture\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/building-a-sustainable-pci-dss-4.0-compliance-culture/\"\n },\n \"Microsoft Security Blog\": {\n \"​​Join us for the end-to-end Microsoft RSAC 2025 Conference experience\": \"https://www.microsoft.com/en-us/security/blog/2025/02/18/join-us-for-the-end-to-end-microsoft-rsac-2025-conference-experience/\"\n },\n \"Doonsec's feed\": {\n \"Windows 二进制文件模糊测试的艺术\": \"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487223&idx=1&sn=9aa6e3fe0de698f9ceb8d051c0aaa3ff\",\n \"秦安：打江山马克思主义，守江山马斯克方法，首先从中国股市做起\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476925&idx=1&sn=01d93d4dadce125e24ad3724abb6353b\",\n \"张志坤：重新规划安排中欧班列，应早为之计\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476925&idx=2&sn=1899256b96824a441fd19512224c1fad\",\n \"漏洞预警 用友 UFIDA NC portal/pt/office/checkekey 接口存在 SQL 注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488037&idx=1&sn=e95060073c6bd35b738e6465d0b60b50\",\n \"【工具分享】提取微信聊天记录，导出可视化文档永久保存，（还可训练成个人AI）\": \"https://mp.weixin.qq.com/s?__biz=MzA3MzgwMzYyMA==&mid=2452890317&idx=1&sn=3caa34536c488d3876b6b147d2930a5c\",\n \"进京证 啥时候能取消呢？\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491125&idx=1&sn=c9bd12a613875b317037512d8a476b9d\",\n \"获取JA3指纹\": \"https://mp.weixin.qq.com/s?__biz=MzA4NjQxMDcxNA==&mid=2709355324&idx=1&sn=e5a03aadddae69088e13b89a35140a48\",\n \"DeepSeek+DeepResearch：应用实践\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655266852&idx=1&sn=38ea338b89b098cf63b856a2f414cd8e\",\n \"《怒吼的战场：凌晨1点17分的WiFi攻防战以失败告终》\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484556&idx=1&sn=12c872fd27ffe88bc241f1dd3eeec777\",\n \"某Q出现校验异常\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDcwNjkzNw==&mid=2247487199&idx=1&sn=a1a273098fc6300a58ffe6a67c537327\",\n \"构建智能反爬防御体系：从多终端攻防到AI驱动的实时风控策略\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484585&idx=1&sn=1c762308451b7ff7e8dd0e2ec8da3630\",\n \"马斯克放大招，宣称\\\\\\\"已超越DeepSeek\\\\\\\"\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=1&sn=b1af6bf06c963951bd1efe6120474e8f\",\n \"国家数据局发布第二批公共数据应用示范场景建设清单\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=2&sn=8ddddc8b5ecc47757dc85c7a57236175\",\n \"首批70名公务员已上岗，工作效率最高提升100倍！多地政务系统接入…网友：混日子的要下岗了\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=3&sn=e58ce6090e46fb39801d533d4dd1c6ee\",\n \"ChatGPT Operator 遭提示注入攻击，泄露用户隐私数据\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=1&sn=a008bd32d4ac4e5ba959a13e6714c501\",\n \"美国会拟立法：将太空系统作为关基设施进行保护\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=5&sn=fc96f1404b4ccf2689471b3893cd11e5\",\n \"网络安全人士必知的指纹探测技术\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490447&idx=1&sn=c76f4f8d6bc8c35d6bfa414da48951d4\",\n \"合规引领，助力企业“扬帆出海” | “杨数浦”品牌沙龙第三期精彩回顾\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247517311&idx=1&sn=27626dc4110c4ebc078a1013dc60579f\",\n \"国货正当红！国货之光软件优惠庆典 6 折起\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492205&idx=1&sn=88bbac3ffda3b659cfce532265a3f0c3\",\n \"【漏洞预警】ChurchCRM系统中通过EditEventTypes.php文件的newCountName参数进行SQL注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489623&idx=1&sn=0eb82923c11d936eda41661733bab356\",\n \"DeepSeek本地部署安全隐患问题，建议紧急排查\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489623&idx=2&sn=1892455a5ca464abf6bafa8a8b182a37\",\n \"DNS投毒与利用\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488726&idx=1&sn=17db9da06b19b3ba1cd01d7dd63f6d01\",\n \"DeepSeek 引爆！AI 智能体 商业应用全景图：万亿市场新赛道开启！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484148&idx=1&sn=b7ab4ffaac68b0d6fe269e8573046c09\",\n \"MWC 2025 | 华为星河AI融合SASE最新案例精选，3月3日与您相约巴塞罗那！\": \"https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505890&idx=1&sn=a912c683b5aebb4d0c610bc25d467199\",\n \"DeepSeek本地化部署有风险！快来看看你中招了吗？\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487304&idx=2&sn=242893b8bf6c59a594f746e2bb5fa1fb\",\n \"SRC专项知识库\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518592&idx=2&sn=047c56c3573a6a30f3e5ceeb8bcae850\",\n \"【待确认】疑似解决微信小程序devtools无法全局搜索问题？\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484391&idx=1&sn=ea11c8d30ad0c916d24a4f289610a955\",\n \"如何使用MSSQL CLR组件绕过EDR\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527921&idx=1&sn=76f38448f0b318e4f4f82e935e6128b7\",\n \"无休止的漏洞：macOS 漏洞被利用九次\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527921&idx=2&sn=15dd9f4e59983a9c588916d3058ae171\",\n \"AboutSQLRecorder是一个能够实时记录SQL语句的工具，方便代码审计时对SQL注入的实时关注\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496521&idx=1&sn=e1dcb02f0d4846b88555054e2ef84719\",\n \"【漏洞预警】Cisco Meeting Management客户端-服务器权限提升漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484334&idx=1&sn=f4599ad3ed50659f274d2b35c7589312\",\n \"常见WEB漏洞—SQL 注入\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247488289&idx=1&sn=4adfd4de8707c7989afa203de3cd49f2\",\n \"2025网安公司避坑互助墙--内部吐槽墙\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247487372&idx=1&sn=779e647e788030ce94c9885eb5a35752\",\n \"Deepseek真的能搞定安全运营？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTMxMjQ4OA==&mid=2247485648&idx=1&sn=35fa7f43468584d6ea0f0671b4f85497\",\n \"《论语别裁》第01章 学而（01）语文的变与不变\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247500817&idx=1&sn=f442b82b587f4fb37bfd705baccb2b38\",\n \"Tips | 提取java应用内存从而直接获取明文密码和配置信息的方法\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487304&idx=1&sn=2be4a08b7a4c875f17816f8c7c6b0e6f\",\n \"《内网安全攻防渗透测试实战指南》笔记之权限提升分析与防御\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjQwOTc4MQ==&mid=2247490399&idx=1&sn=a786f6dd8f07344cff4940f72b75c8ae\",\n \"反反rootkit--覆盖驱动与隐藏线程\": \"https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488462&idx=1&sn=9cfb75421975bffdfe049b3e6df12b67\",\n \"【各大培训机构】网络安全圈最硬核投票来了！\": \"https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211340&idx=1&sn=b960a0001604e507aeddba440fbcb312\",\n \"网络安全行情这么差？oscp十多个证书也弥补不了学历的弱势吗？\": \"https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538747&idx=1&sn=56e22e4c93b198237411b0f2f211c16f\",\n \"常行AI+安全方案：减少大模型部署风险，助力企业智能革新\": \"https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247502972&idx=1&sn=80f9f7d77c81336634fd3e7763a28da8\",\n \"[网络安全]HVV面试面经\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTUzMDk4OA==&mid=2247483793&idx=1&sn=c4d35af48992977eb8b7db6febf5181a\",\n \"全国政协推动人工智能更好服务“四个面向”专题组座谈会在奇安信召开 全国政协副主席陈武率课题组参加\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625170&idx=1&sn=c7c9ce3e42ff91f8caec4631c2dbfca6\",\n \"95015应急响应报告：内部违规是网安事件罪魁祸首\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625170&idx=2&sn=bb8dc3eaf025dc789cd7440977078139\",\n \"SRC实战系列-记某次大学漏洞挖掘经过\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzQyMzUwMg==&mid=2247486443&idx=1&sn=9bf618a3a424cefc958f0ca4a7a0c934\",\n \"OSINT信息收集工具 - chiasmodon\": \"https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486075&idx=1&sn=468f3470d7602f73a3d4df0bf0c51acb\",\n \"SecWiki周刊（第572期）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=2651053441&idx=1&sn=629cf305baee3944d86b7985ac0f61a9\",\n \"XCSSET恶意软件卷土重来，剑指macOS用户与开发者\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=2&sn=0fda5989ef936d6dea0b0956d4fbbbf1\",\n \"黑客滥用Microsoft Teams会议邀请窃取用户权限\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=3&sn=5319bd4c3b4b6bd974e10791184e93e2\",\n \"网络攻击者借助SharpHide改良版，加大注册表检测难度\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=4&sn=1f8b1a860ab6290b3aa06a8c839c25f3\",\n \"2025年1月涉国内数据泄露事件汇总\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzQ4MzA4Ng==&mid=2247485268&idx=1&sn=8724d38ebcfdd0697c212e18d90a34a3\",\n \"【安全圈】短视频平台“封号圈”乱象猖獗，IP查询如何助力防范\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=1&sn=77b78d28e626bb57cf51f82d0c472aa6\",\n \"【安全圈】俄罗斯黑客利用 7-Zip 零日漏洞攻击乌克兰\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=2&sn=634853ba2d9852cc240a7d5d46ce82c5\",\n \"【安全圈】微软发现用于加密货币盗窃的 XCSSET macOS 恶意软件变种\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=3&sn=b875bcdbb815582bbc7966d6ebc3a164\",\n \"【安全圈】马斯克与 OpenAI 的交锋：收购提案遇冷，立场分歧引争议\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=4&sn=38c4e0921e00478f77d52173d75865fa\",\n \"TimelineSec助力顺丰SRC第三届白帽技术沙龙活动，预约已开启！\": \"https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497142&idx=1&sn=3f5b46d1df2a8f6f8bec1b43e632f71f\",\n \"XPSRC助力|顺丰SRC第三届白帽技术沙龙预约开启！\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTY5MTQ1NA==&mid=2247484065&idx=1&sn=81bf7598983b7b2094d08d4fa6f19fff\",\n \"启明星辰发布大模型应用安全“新三件套”，奠基“后DeepSeek智能时代”的安全基石\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=1&sn=5b672ecff51556db43509b5c84cb09dd\",\n \"专家解读 | 出台《个人信息保护合规审计管理办法》 为数字经济持续健康发展保驾护航\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=2&sn=19ef83d5756ac4b267766ce1434e8a5b\",\n \"前沿 | 排他性思路违背全球AI发展潮流\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=3&sn=536c842056b617da26b3a83cf09b195d\",\n \"评论 | 算法更透明 公众更安心\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=4&sn=25460fdc26dd1f8b0aea2a356f01bf64\",\n \"关注 | 用行动落实打击电诈的共同意愿\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=5&sn=6a708c7814d057322cbf80593342a4f1\",\n \"观点 | MCN机构要走规范化发展之路\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=6&sn=4558e8136659bdfcaf2dde736f38b77e\",\n \"评论 | 营造有利于青少年成长成才的良好信息环境\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=7&sn=eb5a761b2a5d240d86a28fdccf3b8a63\",\n \"为什么运营商“沉迷”做总包、总集？\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=1&sn=cd835808ada01d35850bdcc5c59611eb\",\n \"北七家-未来科学城,3居变4居豪装,理想楼层/户型/朝向\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=2&sn=fa2cefbe0f44ae8f576af68d7c075e80\",\n \"【0.9元】德银重磅：中国鲸吞世界！全文和翻译！\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=3&sn=f452879eebc1ec28ccd0516533798c3d\",\n \"【干货】笑傲职场的独家经验（1）\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=4&sn=614d3e17ec92cd87c0d610fbf4fb17fa\",\n \"【干货原创】实网攻防演习常态化，会带来什么变化01\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=5&sn=0a8eeadf2aaa25d2d65ee6acc2806427\",\n \"【干货原创】K12教育，鲜为人知的模式秘密\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=6&sn=a4a15902985ab471b071ee9426d451ea\",\n \"原创文章目录\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=7&sn=38e7919f220cac38a2494162456e2095\",\n \"Merlin后渗透利用框架之Merlin Agent远控木马剖析\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDUzNDExMQ==&mid=2247485192&idx=1&sn=751f75626f62cc4463141c4cefa3b97f\",\n \"继上次ollama自由后，又一次自由……\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDQxODk4NQ==&mid=2247484364&idx=1&sn=6e261738ce559083feb198bd1fcef489\",\n \"顺丰SRC第三届白帽技术沙龙预约开启！\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541606&idx=1&sn=012be792517f5ee11d9feac39ffe3b74\",\n \"等保测评||达梦数据库作业指导书\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDYzNTYxNQ==&mid=2247502632&idx=1&sn=97e84602de7606f21d45a215ee2f52bc\",\n \"美国政府：开发人员应停止制造“不可原谅的”缓冲溢出漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=1&sn=f4ba8096e5c48add46aab6c9f0f9b6db\",\n \"VeraCore 两个0day漏洞被用于实施供应链攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=2&sn=9b28d0ae22a8aee011365d83bbe3e244\",\n \"超级CSO研修班 | 杜跃进：未来安全的核心是能力\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636358&idx=1&sn=87ce38dc5d636b8975a99ca7305f711d\",\n \"LockBit死而不僵，仍不断有“帮凶”落网\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636358&idx=2&sn=a82d0bc18938a4a50fd92369e0d58673\",\n \"韩国暂停DeepSeek下载，称其侵犯隐私\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636358&idx=3&sn=32666d76e53892b54705fb8386f4bc8b\",\n \"【资讯】山东省大数据局印发《山东省公共数据开放工作细则》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247549835&idx=1&sn=4301f3fc724332d16aaeff001f9b5b2d\",\n \"【资讯】云南省通管局印发《云南省电信领域数据安全风险评估实施细则（试行）》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247549835&idx=2&sn=eb917c98028b4f355c0ac073a9c23a7f\",\n \"【资讯】绍兴市政府办公室印发《绍兴市加快制造业数字化转型行动方案》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247549835&idx=3&sn=b8dc9888890b753dbb2f5c2a66f5e1b2\",\n \"国家公共数据资源登记平台将于3月1日正式上线试运行\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448683184&idx=1&sn=c8520840f07b17a90a9b3252d5c70ae0\",\n \"Grok-3正式发布！马斯克：“地球上最聪明的AI”\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247550522&idx=1&sn=d74d75abf3ff7ca922176ac61326b9fb\",\n \"AutoSec年会专家确认 | F5：全球多云环境下的合规遵从和统一安全治理\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247550522&idx=2&sn=5b6c7862384ae75a6909c706728520ba\",\n \"独家首发，免费｜Trae 从入门到实践，开启 AI 编码新征程！\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513387&idx=1&sn=ce7672590c2cd60a22e9b620dcbdcfca\",\n \"DeepSeek重构智能运维和安全运营\": \"https://mp.weixin.qq.com/s?__biz=MzA4Mzg1ODIzMw==&mid=2653545935&idx=1&sn=7e68e08b429b85ade74986b62e3d22dd\",\n \"BSSRC助力 | 顺丰SRC第三届白帽技术沙龙预约开启！\": \"https://mp.weixin.qq.com/s?__biz=MzkyODIwNDI3NA==&mid=2247486170&idx=1&sn=9287f9f60bd2d701fe1d1d4ba26f3f42\",\n \"AI聊天还能用，但下载按钮灰了！韩国给DeepSeek划下\\\\\\\"红线\\\\\\\"\": \"https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488538&idx=1&sn=7d2b1822bf137d6a59722d0ff454db32\",\n \"学术前沿 | 华南师范大学密码学与信息安全团队：白盒密码实现的侧信道分析技术综述\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505072&idx=1&sn=9f910b3ab2a5ccd60b3e071af3e4aaa7\",\n \"官方机构提示仿冒DeepSeek手机木马病毒肆虐！梆梆安全为您的移动应用保驾护航！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135338&idx=1&sn=94642b4d6d742c855af4c615b6c2c399\",\n \"企业级EDR实施技术指南：十大关键要素深度解析\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489351&idx=1&sn=3da833b6858ec815c4acd2bffbdb5f69\",\n \"雨水｜甘雨时降 万物以嘉\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135338&idx=2&sn=33cd10d5c79ebcefca7db1364a627025\",\n \"大模型背景下生成式AI带来的网络安全威胁应对\": \"https://mp.weixin.qq.com/s?__biz=Mzg2MDY0MjQwMw==&mid=2247494317&idx=1&sn=e67cb658cf43995bd5c239ca54c97c7f\",\n \"旅行APP流程分析（TCP+protobuf）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=1&sn=e1354617c606204a98db2a1960b7647d\",\n \"立即预约！顺丰SRC第三届白帽技术沙龙即将开启\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=2&sn=278b59f239fe65d5cfe07f93ecaa636e\",\n \"ChatGPT Operator 遭提示注入攻击\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=3&sn=a005da20fc0a49c5e16d1ada1109ad46\",\n \"《科学数据安全分类分级指南》等5项国家标准发布\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931568&idx=1&sn=717c83d99ebeb4b1ad0806e4de9f8f6d\",\n \"韩国称DeepSeek与字节跳动共享数据？我外交部回应；美国国防部一承包商和一大型金融机构虚拟专用网络疑被攻破 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=1&sn=265652c42964cda677cb67cdd3409cb8\",\n \"应对高级勒索软件攻击，你需要关注这7项技术手段\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=2&sn=47591d1505f32bcf70149d3a92cd8961\",\n \"勒索软件攻击加速：从潜伏到“打砸抢”式入侵 企业防御面临新挑战\": \"https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247546921&idx=1&sn=2545d75b63623d7a78c2e5e708fcab02\",\n \"深度测评 | AI引领安全运营提升用户使用感受及分析处置能力\": \"https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247506691&idx=1&sn=06af6565c9541f1ac54a40b8ee0ad97a\",\n \"突破 | 中国电信安全天地一体化网络安全领域研究成果入选国际顶级期刊\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247533100&idx=1&sn=8561e9f4008f89b213c2c57003b546ab\",\n \"Grok-3“最聪明AI”来了！为您整理发布会重点及当下明星AI产品\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496639&idx=1&sn=ebd1da91dd9c3743289106d6c491a062\",\n \"获奖公布 | 网安加社区元宵灯谜竞猜活动获奖名单公布！\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247523961&idx=1&sn=ce71c7021d7bd63e842ff1d81f521961\",\n \"培训招募中！CISAW灾难备份与恢复\": \"https://mp.weixin.qq.com/s?__biz=MzU0Mzk0NDQyOA==&mid=2247521403&idx=1&sn=06480e6a0ed6208d43b642e1dc74569c\",\n \"飞天诚信、小米等入选北京市商业秘密保护示范基地\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649876752&idx=1&sn=79b42426d9a8bc2fde0c44947ad71d77\",\n \"论文速递 | 智能网联汽车网络信息安全综述\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NDczNDc4NA==&mid=2247495478&idx=1&sn=ca8a1aaa0f4f8a0953c8f5688edc8439\",\n \"甲方乙方视角剖析：信安通用三认证，如何抉择才不亏\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247516067&idx=1&sn=858499704f81840848f3c78c36fd8bd1\",\n \"职场人的精神brunch|说几个对数据安全从业者友好的证书\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247516067&idx=2&sn=97de123527d3b7627ea1ac87be96da4b\",\n \"埃隆·马斯克的政府网站漏洞曝光，黑客留下嘲讽信息\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486178&idx=1&sn=0582e8fd5a1c4aa57ec6fab589ffa06d\",\n \"解锁高能，秒变渗透高手\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553681&idx=1&sn=a2dd04fdc8069d3d7cbd47d8fa276169\",\n \"【免费领】近400页！SQL注入攻击与防御策略大全\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553681&idx=2&sn=a454fa2b8c0f9b1231f8e5d45959d0c1\",\n \"敢挑战吗？蚂蚁国际要的就是你！\": \"https://mp.weixin.qq.com/s?__biz=MzI3NDEzNzIxMg==&mid=2650492397&idx=1&sn=0c4d95bf831194932a3c8e4ec57c721e\",\n \"走向卓越丨2025，对您的未来许下承诺\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492403&idx=1&sn=f7a256cfeab0b700ae77b9b52b57c6ec\",\n \"网络安全动态 - 2025.02.18\": \"https://mp.weixin.qq.com/s?__biz=MzU1MzEzMzAxMA==&mid=2247499921&idx=1&sn=dd53eca4974397a099fb2c0461221fc0\",\n \"【渗透测试Top10漏洞详解·萌新友好版（上）】黑客最爱的5大漏洞竟是这些？\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzI5MTc0Nw==&mid=2247485048&idx=1&sn=70c9a4aed11e2474656cc9141ff44488\",\n \"360SRC助力 | 顺丰SRC第三届白帽技术沙龙预约开启！\": \"https://mp.weixin.qq.com/s?__biz=MzkzOTIyMzYyMg==&mid=2247494998&idx=1&sn=c28dfd53a667692becafd42ff90f0bdd\",\n \"好书推荐 | 数字化转型安全根基，硬件安全攻防实战指南\": \"https://mp.weixin.qq.com/s?__biz=MzkzOTIyMzYyMg==&mid=2247494998&idx=2&sn=b6655366fc7c96b81815be8bcaa35e43\",\n \"「招聘」长亭科技-内推码\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486890&idx=1&sn=aa3d1c7a1d959391c51f401ce54ff9a0\",\n \"【知道创宇404实验室】本地化 AI 审计工具落地小试牛刀\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870976&idx=1&sn=532f0cf3ec728a9abfa1fecbfab03268\",\n \"“新春第一课”，DeepSeek席卷政务系统\": \"https://mp.weixin.qq.com/s?__biz=MzI3MDY0Nzg1Nw==&mid=2247489502&idx=1&sn=49c20331256f1c7843ca92f5abe15275\",\n \"AI 与隐私悖论：在数据浪潮中寻找平衡\": \"https://mp.weixin.qq.com/s?__biz=MzI3MDY0Nzg1Nw==&mid=2247489502&idx=2&sn=1159e25e2a14b93fc07abf733c9adf0d\",\n \"互联网和人工智能会影响我们的记忆吗？科学怎么说？\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619275&idx=1&sn=49f6b6b8186ed70e29dbf21fc0a55d00\",\n \"美国xAI公司发布AI模型Grok 3，部分功能性能超越OpenAI、DeepSeek相关模型\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619275&idx=2&sn=df636eefa3f94db514cc271d09c8267a\",\n \"海外研究｜国外人工智能热点安全技术发展情况研究\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597829&idx=1&sn=7caaef0c1a1f694359e7dbe9673b2136\",\n \"特色专题 | 基于混沌映射和NFSR的16比特动态S盒构造方法\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597829&idx=2&sn=935bc30bbc576877560381a3ad325e24\",\n \"默安科技两度荣膺“浙江省软件核心竞争力企业”\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597829&idx=3&sn=f63629da6856652881dd72f692d1e269\",\n \"雷神众测漏洞周报2024.2.10-2024.2.16\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503318&idx=1&sn=b5b13cfc554a840876a561de454e8f7e\",\n \"“硅基生命”的崛起，碳基生命的挑战：AI的伦理与安全边界\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTM5MDUxMA==&mid=2247504042&idx=1&sn=e60dd68fdcb43ee4273cbd208b5ce8f1\",\n \"SEAMFUZZ：灰盒模糊测试的学习种子自适应突变策略\": \"https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247486942&idx=1&sn=d249d0aa9047c41d34cb0da0cb74053b\",\n \"AI 重塑国家安全格局：机遇与挑战并存\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247529179&idx=1&sn=f0a1963cefd524f87ea8286a30cfd630\",\n \"科技动态｜英国发布全球首个人工智能安全标准\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247529179&idx=2&sn=a530a0a4bf56c6d58569f6d015816c9d\",\n \"益生菌能提高运动成绩吗？\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485851&idx=1&sn=ea0ba6fa83bc28e5ae13ca0fd8eb82b3\",\n \"点击劫持与双击劫持\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485479&idx=1&sn=6086c9a3c256df6bb971fc5a86f652e4\",\n \"《2025Hvv 行动集训营，紧跟热点潮流，带你 1 个月突破网络安全防线，实现薪资逆袭！ 》\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTUyNjkwNA==&mid=2247484287&idx=1&sn=ebf831861225afe20f3c6990e6173bff\",\n \"2025数字中国创新大赛·数字安全赛道时空数据安全赛题等你来战！\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247491931&idx=1&sn=8748a773257b0ff5b9d92455e3a96528\",\n \"报名即将截止 | “网谷杯”信创应用软件网络安全攻防大赛\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247491931&idx=2&sn=81b4c20f905b01e807d5a520de212ca2\",\n \"解锁安全研究新姿势：DeepSeek 本地部署指南\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247492941&idx=1&sn=476fc818f0028dad0a4bff3c74c59c09\",\n \"如何借力AI促进网络安全文化建设？\": \"https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247484821&idx=1&sn=576dcd8f20191c91171e92b96396f667\",\n \"为何数学会出现虚数i这无意义的符号？\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTM3NDE2Nw==&mid=2247490341&idx=1&sn=9d16eefe20cca638ffb901bcf8d4253f\",\n \"美俄会谈结束俄乌战争，为何要选在沙特进行？\": \"https://mp.weixin.qq.com/s?__biz=MzkxMTA3MDk3NA==&mid=2247487198&idx=1&sn=920bc7bd62ab08726141df8a37133eeb\",\n \"微信接入DeepSeek！可惜87%的IT人还不会高效利用它...\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571133&idx=1&sn=4cb9c4b4b7bca014e94cf6c93bee83b0\",\n \"一款Windows GUI界面的渗透测试工具箱-V1.1（更新）\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571133&idx=2&sn=2b97b09c38d3658ada05deddb2b56617\",\n \"『CTF』密码学-一道LFSR\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NTA0MzgxNQ==&mid=2247489904&idx=1&sn=1c0472deec7bd1db7d35ca3ec02216cf\",\n \"国家安全部提醒：这些随处可见的设备，也可能有风险！\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170858&idx=1&sn=24cbb4ccb5e3ed8603ee8f469b55a71a\",\n \"马斯克口中“最聪明AI”，Grok 3正式发布\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170858&idx=2&sn=0eef501df2b4e2e40f8767f11fe65453\",\n \"【2025春节】解题领红包之番外篇writeup\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141800&idx=1&sn=ce4fbd9d5e88415d4d773b2501fe657d\",\n \"DeepSeek浪潮之下，安全暗礁逐渐显现\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650465264&idx=1&sn=e64e6f0cc1955816c5cda713594ab2c3\",\n \"预约开启！BUGBANK助力顺丰SRC第三届白帽技术沙龙\": \"https://mp.weixin.qq.com/s?__biz=MzAxODg1MDMwOQ==&mid=2247507752&idx=1&sn=f2713e90546e22c6cdfc33eb6e40b103\",\n \"揭晓｜2025年网络安全十项发展趋势预测\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247486831&idx=1&sn=edd41385bacb72e6f559fd94dd323098\",\n \"冰雪同梦 网安铸盾丨迪普科技助力2025亚冬会圆满完成\": \"https://mp.weixin.qq.com/s?__biz=MzA4NzE5MzkzNA==&mid=2650371663&idx=1&sn=5978913cf66a2bce8e6d23a890b999ba\",\n \"【渗透干货】Apache Tomcat弱口令批量检测利用工具\": \"https://mp.weixin.qq.com/s?__biz=MzIxOTk0ODY0NQ==&mid=2247485428&idx=1&sn=1d21795f59bb1a32ba9f23da0a4a7781\",\n \"安全简讯（2025.02.18）\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500752&idx=1&sn=aee35d6ecb95122bbaa6dd9b86ee7c72\",\n \"网安行业互助文档，又来了\": \"https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500642&idx=1&sn=c2b2eb6863906fe6e431165b2b9ab48c\",\n \"【靶场手记】JARBAS：细节决定攻击链，boot2root的重要拼图\": \"https://mp.weixin.qq.com/s?__biz=MzUyMTE0MDQ0OA==&mid=2247494122&idx=1&sn=49888cf816741a3e5dadb6e96373c763\",\n \"新媒体人必备神器！一键发布公众号文章不是梦\": \"https://mp.weixin.qq.com/s?__biz=Mzg2MTc0NTYyNg==&mid=2247486911&idx=1&sn=efd65ddc3598f81bb149766952fa9ba8\"\n },\n \"GuidePoint Security\": {\n \"GRIT’s 2025 Report: Ransomware Group Dynamics and Case Studies\": \"https://www.guidepointsecurity.com/blog/grit-2025-ransomware-group-dynamics-and-case-studies-understanding-the-threat-landscape/\"\n },\n \"SpiderLabs Blog\": {\n \"The Rise of Email Marketing Platforms for Business Email Compromise Attacks\": \"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/the-rise-of-email-marketing-platforms-for-business-email-compromise-attacks/\"\n },\n \"Horizon3.ai\": {\n \"Fireside Chat: Horizon3.ai and Jerome’s Furniture\": \"https://www.horizon3.ai/intelligence/webinars/fireside-chat-horizon3-ai-and-jeromes-furniture/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"I Pasted a Simple HTML Code on BookMyShow… and Got ₹1000 for It!\": \"https://infosecwriteups.com/i-pasted-a-simple-html-code-on-bookmyshow-and-got-1000-for-it-26313f0e2115?source=rss----7b722bfd1b8d--bug_bounty\",\n \"HTMLI to ATO leads to $$$ bounty\": \"https://infosecwriteups.com/htmli-to-ato-leads-to-bounty-9725cb23a67c?source=rss----7b722bfd1b8d--bug_bounty\",\n \"How I Bypassed BookMyShow’s OTP Limit with Just a Space & Got ₹1000 for It!\": \"https://infosecwriteups.com/how-i-bypassed-bookmyshows-otp-limit-with-just-a-space-got-1000-for-it-70eab29fb6aa?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Zoho Account Takeover: How a Single Click Can Lead to Full Control over your Zoho account\": \"https://infosecwriteups.com/zoho-account-takeover-how-a-single-click-can-lead-to-full-control-over-your-zoho-account-cd6f0c245272?source=rss----7b722bfd1b8d--bug_bounty\",\n \"No email verification leads to an Oauth account takeover.\": \"https://infosecwriteups.com/no-email-verification-leads-to-an-oauth-account-takeover-02eb30496939?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Malwarebytes\": {\n \"Hard drives containing sensitive medical data found in flea market\": \"https://www.malwarebytes.com/blog/news/2025/02/hard-drives-containing-sensitive-medical-data-found-in-flea-market\"\n },\n \"Securelist\": {\n \"StaryDobry ruins New Year’s Eve, delivering miner instead of presents\": \"https://securelist.com/starydobry-campaign-spreads-xmrig-miner-via-torrents/115509/\"\n },\n \"Reverse Engineering\": {\n \"ImHex - A Binary Data Reverse Engineering Toolkit | New v1.37.X Release with HiDPI support and tons of other UX improvements\": \"https://www.reddit.com/r/ReverseEngineering/comments/1isddf7/imhex_a_binary_data_reverse_engineering_toolkit/\",\n \"A HuggingFace space for testing the LLM4Decompile 9B V2 model for refining Ghidra decompiler output\": \"https://www.reddit.com/r/ReverseEngineering/comments/1isegar/a_huggingface_space_for_testing_the_llm4decompile/\",\n \"Z x86_64 Linux Anti-Anti-Debugger: Bypass Anti-Debugging in Protected Binaries with User-Supplied LD_PRELOAD Libraries\": \"https://www.reddit.com/r/ReverseEngineering/comments/1isnvsn/z_x86_64_linux_antiantidebugger_bypass/\",\n \"Everyday Ghidra: How Platform Choice Influences Ghidra’s Binary Analysis\": \"https://www.reddit.com/r/ReverseEngineering/comments/1isfze3/everyday_ghidra_how_platform_choice_influences/\",\n \"An introduction to LLVM IR\": \"https://www.reddit.com/r/ReverseEngineering/comments/1is7rzo/an_introduction_to_llvm_ir/\",\n \"Arechclient2 (sectopRAT) Analysis – A Highly Obfuscated .NET RAT with Malicious Chrome Extension\": \"https://www.reddit.com/r/ReverseEngineering/comments/1isaavt/arechclient2_sectoprat_analysis_a_highly/\"\n },\n \"daniel.haxx.se\": {\n \"Changing every line three times\": \"https://daniel.haxx.se/blog/2025/02/18/changing-every-line-three-times/\"\n },\n \"Twitter @James Kettle\": {\n \"Re @Freyxfi Nah it's a lot of work, I'd rather be doing research. I do maintain a playlist of all our research though. https://www.youtube.com/playlis...\": \"https://x.com/albinowax/status/1891867917760778324\",\n \"Re You can find the show notes & links at https://www.scworld.com/podcast-show/application-security-weekly\": \"https://x.com/albinowax/status/1891861901803430192\",\n \"Catch the inside story on the Top Ten Web Hacking Techniques in my interview with the Application Security Weekly podcast https://youtu.be/8XEK3NkbKOA\": \"https://x.com/albinowax/status/1891861705652645990\"\n },\n \"rtl-sdr.com\": {\n \"ESPARGOS: An ESP32 Phased Array for Seeing WiFi\": \"https://www.rtl-sdr.com/espargos-an-esp32-phased-array-for-seeing-wifi/\",\n \"Saveitforparts: Listening in on Russian Soldiers Hijacking US Military Satellites\": \"https://www.rtl-sdr.com/saveitforparts-listening-in-on-russian-soldiers-hijacking-us-military-satellites/\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"OpenSSH曝高危漏洞，可引发中间人攻击与DoS攻击\": \"https://www.freebuf.com/vuls/422180.html\",\n \"CVE-2016-4437（Shiro-550）漏洞简述\": \"https://www.freebuf.com/vuls/422102.html\",\n \"短视频平台“封号圈”乱象猖獗，IP查询如何助力防范\": \"https://www.freebuf.com/news/422099.html\",\n \"FreeBuf早报 | Palo Alto防火墙又被黑；微软投资7亿美元提升波兰网络安全\": \"https://www.freebuf.com/news/422094.html\",\n \"【黄金圆环】在研发领域的实践分享\": \"https://www.freebuf.com/news/422069.html\",\n \"DeepSeek本地化部署有风险！快来看看你中招了吗?\": \"https://www.freebuf.com/sectool/422066.html\",\n \"XCSSET信息窃取恶意软件卷土重来，针对macOS用户和开发者\": \"https://www.freebuf.com/articles/422056.html\",\n \"网络犯罪分子利用图片标签中的Onerror事件窃取支付信息\": \"https://www.freebuf.com/articles/web/422085.html\",\n \"当AI邂逅日志海：从骨感现实到无限可能\": \"https://www.freebuf.com/news/422038.html\"\n },\n \"Dhole Moments\": {\n \"Reviewing the Cryptography Used by Signal\": \"https://soatok.blog/2025/02/18/reviewing-the-cryptography-used-by-signal/\"\n },\n \"绿盟科技技术博客\": {\n \"绿盟威胁情报周报（2025.02.10-2025.02.16）\": \"https://blog.nsfocus.net/2025-02-10-2025-02-16/\"\n },\n \"Shostack & Friends Blog\": {\n \"A New Hope for Threat Modeling, on The CyberTuesday Podcast\": \"https://shostack.org/blog/cybertuesday-podcast/\"\n },\n \"安全牛\": {\n \"韩国称DeepSeek与字节跳动共享数据？我外交部回应；美国国防部一承包商和一大型金融机构虚拟专用网络疑被攻破 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=1&sn=265652c42964cda677cb67cdd3409cb8&chksm=bd15ac5d8a62254b382f53aeb16d3d10305ac645ba976317dd34d61c48682f2becea57e4d15f&scene=58&subscene=0#rd\",\n \"应对高级勒索软件攻击，你需要关注这7项技术手段\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=2&sn=47591d1505f32bcf70149d3a92cd8961&chksm=bd15ac5d8a62254bdb882276f5ca5888b7b5e98968aadee2365824f305a7ca4b025fc91140ea&scene=58&subscene=0#rd\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"美国白领工人的工作面临风险\": \"https://www.solidot.org/story?sid=80583\",\n \"为什么吃饱之后仍然想吃甜食\": \"https://www.solidot.org/story?sid=80582\",\n \"OpenSUSE Tumbleweed 使用的 MAC 切换到 SELinux\": \"https://www.solidot.org/story?sid=80581\",\n \"青少年可能不适合断食\": \"https://www.solidot.org/story?sid=80580\",\n \"日本政府将重新发展核电\": \"https://www.solidot.org/story?sid=80579\"\n },\n \"腾讯玄武实验室\": {\n \"每日安全动态推送(25/2/18)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960026&idx=1&sn=a6b3b18c68a2a23dfb2c6854255e463f&chksm=8baed245bcd95b532bedc5b2e1788d0577db0211a5ed16b23d4e95cc7134302a9a803a17dfad&scene=58&subscene=0#rd\"\n },\n \"雷神众测\": {\n \"雷神众测漏洞周报2024.2.10-2024.2.16\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503318&idx=1&sn=b5b13cfc554a840876a561de454e8f7e&chksm=f2585ea5c52fd7b368ebc5c86a95e6425d2a601f7df5519e543aa82f70e7d68e5de1882a350e&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"旅行APP流程分析（TCP+protobuf）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=1&sn=e1354617c606204a98db2a1960b7647d&chksm=b18c2aaa86fba3bc25d1d7e3d341a334fb0b35e4f4b63591cdb6b0749c7030212ba278bab9c5&scene=58&subscene=0#rd\",\n \"立即预约！顺丰SRC第三届白帽技术沙龙即将开启\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=2&sn=278b59f239fe65d5cfe07f93ecaa636e&chksm=b18c2aaa86fba3bcedd2b8d75f3dfa777e55c1a4767c45b6a015e7d97213b67b22e727e8ac68&scene=58&subscene=0#rd\",\n \"ChatGPT Operator 遭提示注入攻击\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=3&sn=a005da20fc0a49c5e16d1ada1109ad46&chksm=b18c2aaa86fba3bc13efec4f0ade8cc48cb172e9486d09bd97b185c29dea9d667a9327beb034&scene=58&subscene=0#rd\"\n },\n \"吾爱破解论坛\": {\n \"【2025春节】解题领红包之番外篇writeup\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141800&idx=1&sn=ce4fbd9d5e88415d4d773b2501fe657d&chksm=bd50a6fc8a272fea1d4e9755a365a519da26d3cd87eed14b4e0059d95b6951e0538608dced32&scene=58&subscene=0#rd\"\n },\n \"安全分析与研究\": {\n \"TransparentTribe(透明部落) APT组织CrimsonRAT远控样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490574&idx=1&sn=01ffe4798637dd2465d3d3b7171b4aaa&chksm=902fb326a7583a30c4e61dde6527c7b77143024a1e40892601805568b72d1d1f9e9bb791b8f8&scene=58&subscene=0#rd\"\n },\n \"威努特安全网络\": {\n \"威努特海上平台智算中心，助力海上油田智能化转型\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131173&idx=1&sn=ecda2cfd067a5213307b305e9e0616eb&chksm=80e71795b7909e835093c15ff3f9333b9413af6dd919217c768e638a49f1469eb115225f1425&scene=58&subscene=0#rd\"\n },\n \"暗影安全\": {\n \"DeepSeek本地化部署有风险！快来看看你中招了吗？\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165657&idx=1&sn=c6c0514ec5ae2bdece02b895469bacf8&chksm=f1d4d3bcc6a35aaa19cb47abfe0f407db4b4c97464d6c69e5de1ea2656b2044891a291847f6e&scene=58&subscene=0#rd\"\n },\n \"信安之路\": {\n \"高效检测 SQL 注入漏洞，自动化实战经验分享\": \"https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499808&idx=1&sn=1c6724f7a6565b221b60843413d36b8a&chksm=ec1df008db6a791e8fc2c1cc0d8c4d81737f1e79e1f95761924835b7161ff5f21f80c0724268&scene=58&subscene=0#rd\"\n },\n \"ChaMd5安全团队\": {\n \"DeepSeek本地化部署有风险！快来看看你中招了吗？\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247511991&idx=1&sn=c40bb92defdfa8105881c5b26bec8c78&chksm=e89d876fdfea0e79ef69c60bce53d83d5cb023fdb5364f481f6ded6ab799ba1431fd8b880d11&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"新一轮勒索潮来了？超级勒索软件组织宣布攻陷47家企业\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513762&idx=1&sn=62912b605c08b523f4aa7e56733c954a&chksm=ebfaf182dc8d78945f71786a16c4ac7b798ea5e0444b31a8c9f9a73e58423bc65c0660459848&scene=58&subscene=0#rd\",\n \"美国会拟立法：将太空系统作为关基设施进行保护\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513762&idx=2&sn=7915c55f55994f07201c25420d94731a&chksm=ebfaf182dc8d7894dada7eb2437159773a0c1e0a7ca77d79cdf630a59ca3b0dae9d500cd6078&scene=58&subscene=0#rd\"\n },\n \"安全实践\": {\n \"2025开始资产配置，年终一起复盘\": \"https://mp.weixin.qq.com/s?__biz=MzI5NzAzMDg0NA==&mid=2650698012&idx=1&sn=6bd707b9f86353bd96b581568133c700&chksm=f4b194cfc3c61dd9ef8285010597b71b0b7f6d17abf7c2c1896399a9c4fc9f728e59a79dde68&scene=58&subscene=0#rd\"\n },\n \"Hacking就是好玩\": {\n \"DeepSeek本地化部署有风险！快来看看你中招了吗？\": \"https://mp.weixin.qq.com/s?__biz=MzU2NzcwNTY3Mg==&mid=2247485334&idx=1&sn=688a9c353d4c7b1232685404fc6ae399&chksm=fc986eb1cbefe7a78b8711640338b4f926f4cf1ef350bdf53fd64b8bcaf18e241a4417302a6a&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \".NET 通过代码审计发现某 OA 系统全局性权限访问绕过漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498952&idx=1&sn=a08ebc1ce872683b07a16218dbcbc8e9&chksm=fa595225cd2edb33e2e0624ce93a8e1ad168afdaa762794a6062913e3d523289e1c16b3749af&scene=58&subscene=0#rd\",\n \".NET 安全攻防知识交流社区\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498952&idx=2&sn=a49e296419efabfbbbd89e3d51b8f18c&chksm=fa595225cd2edb334d39bed36f3d337a32ffcc250236a2dbf423b8eb4df9f9a9bcf4b275fc4b&scene=58&subscene=0#rd\",\n \"一款通过调用Windows系统白名单文件执行PowerShell命令的工具\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498952&idx=3&sn=0bc91a522aca2f82d80edd2ae8742b71&chksm=fa595225cd2edb334536e258879a68a047f596ceb038b58f5a2df7ca33fb7642059e0b39c1a6&scene=58&subscene=0#rd\"\n },\n \"信息安全国家工程研究中心\": {\n \"雨水 | 春雨滋养万物昌\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498870&idx=1&sn=2f2a11a83b3ebffd73e6da5f2b1e1fc2&chksm=feb67d65c9c1f47370aadc92070d2f9e422b734e3eb6674caf2c682c8b9110bccd4d0d9ca823&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】短视频平台“封号圈”乱象猖獗，IP查询如何助力防范\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=1&sn=77b78d28e626bb57cf51f82d0c472aa6&chksm=f36e7462c419fd74ab3906ce860f6440680390728f5808049a4037668b474c84037d2686cce6&scene=58&subscene=0#rd\",\n \"【安全圈】俄罗斯黑客利用 7-Zip 零日漏洞攻击乌克兰\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=2&sn=634853ba2d9852cc240a7d5d46ce82c5&chksm=f36e7462c419fd74d29690ade86cd94c8f1353765e594a85d6f64779b2262b4aad515e3ff40c&scene=58&subscene=0#rd\",\n \"【安全圈】微软发现用于加密货币盗窃的 XCSSET macOS 恶意软件变种\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=3&sn=b875bcdbb815582bbc7966d6ebc3a164&chksm=f36e7462c419fd74485e8ebdb3defa2fd94bb38ffe4cb647dd2e95a725273325e9a817afdddb&scene=58&subscene=0#rd\",\n \"【安全圈】马斯克与 OpenAI 的交锋：收购提案遇冷，立场分歧引争议\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=4&sn=38c4e0921e00478f77d52173d75865fa&chksm=f36e7462c419fd743b5d8bf833ed7ec62a44e52917a3582cb5cd430619c335622558e4ec296b&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"《全球数据泄露态势月度报告》（2025年1月）| 附下载地址\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247536793&idx=1&sn=cfd0b0c45c95f14ab3bb11106fcca468&chksm=c1442224f633ab32c95ea0c4ff07909c8342e3cd1c98d6b062e4db40bfaed538284513e50aab&scene=58&subscene=0#rd\"\n },\n \"知道创宇404实验室\": {\n \"原创 Paper | 本地化 AI 审计工具落地小试牛刀\": \"https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990663&idx=1&sn=d3612bcdf320efdc783e5740d519c69d&chksm=8079aa75b70e2363a96c1c2318ebdea7a8fda22f5029416d80c2a7cc641c0ee2e3d263c0c79b&scene=58&subscene=0#rd\"\n },\n \"安全学术圈\": {\n \"特拉维夫大学 | FlowPic：一种通用的加密流量分类与应用识别表示方法\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491689&idx=1&sn=17687d1be26ab151a1e6d49e00a734e0&chksm=fe2d1fe2c95a96f4eddee949c7d9d669df8708caae70eb5e9a9a18eecf15d90eca0995d9c83a&scene=58&subscene=0#rd\"\n },\n \"代码卫士\": {\n \"美国政府：开发人员应停止制造“不可原谅的”缓冲溢出漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=1&sn=f4ba8096e5c48add46aab6c9f0f9b6db&chksm=ea94a6bbdde32fad212f6cefd231e991e6b3aa181b89c3c4f8942edda2b8c87b959349dba3ab&scene=58&subscene=0#rd\",\n \"VeraCore 两个0day漏洞被用于实施供应链攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=2&sn=9b28d0ae22a8aee011365d83bbe3e244&chksm=ea94a6bbdde32fad583ad06bb5abe8c191b454c50e40661e1fbba804d5ae0e3a6d9cc4164ad8&scene=58&subscene=0#rd\"\n },\n \"微步在线\": {\n \"突破千亿美元！CrowdStrike的顶级理解\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183152&idx=1&sn=c8baea3e5fbf8adbb58445304f3160fc&chksm=f4486e4cc33fe75a6889fd4400798823026225a843573abb95eeaf128a8025fb1257177f52cb&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"Grok3 来了，马斯克笑了，网站崩溃了\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073974&idx=1&sn=4f0cc225c27656ce2828992ef9f4579f&chksm=7e57cf8049204696cef80385843a3db30affa86ff2e1bb75b1f5dd335558ecf86ab9850e55b9&scene=58&subscene=0#rd\",\n \"「9块9」 的中国 AI 耳机，疯狂收割老外\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073960&idx=1&sn=5c2319c04fa976eb3be557d768a9a010&chksm=7e57cf9e49204688c19df3ddedef1a50b0aceff13682d3a08edbe326dc7321389a3bde5b05f6&scene=58&subscene=0#rd\",\n \"小米YU7续航820公里；OpenAI或发GPT-4.5狙击马斯克；DeepMind研究副总裁加盟字节跳动 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073947&idx=1&sn=459dcc6086a85c978352f0a5817f9305&chksm=7e57cfad492046bb7d901f0b9384f60e84bba68ff84cb391e50729b8e74d214a945b03eb56b3&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"马斯克Grok 3接入X平台：一场没有硝烟的“数据战争”，我们将如何突围？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559771&idx=1&sn=7a1aa6dd145b6db21d216b962b96a900&chksm=87117b50b066f246e0ad0554e7d64caf1b6dfc17b0a9ce11e89802c0db324b1b567de7575e71&scene=58&subscene=0#rd\",\n \"美国国务院全球人员名单数据分析与战略意图研判\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559771&idx=2&sn=5534a2140a7da0a950900b4c9dc705cb&chksm=87117b50b066f246924f5603e181a8b8b71e60e6e2d327882b25419e10813998b03f1a16b4d7&scene=58&subscene=0#rd\"\n },\n \"复旦白泽战队\": {\n \"解锁安全研究新姿势：DeepSeek 本地部署指南\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247492941&idx=1&sn=476fc818f0028dad0a4bff3c74c59c09&chksm=fde86133ca9fe825e7b72423b6c538f0e2ac47d59a591854a3719f3d3b29f0c18e1347588af4&scene=58&subscene=0#rd\"\n },\n \"黑伞安全\": {\n \"Run-llama/LlamaIndex 大模型框架提示词注入构造 sqli实现任意文件创建\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489678&idx=1&sn=9039652d59a286b1904c7a3d68373f84&chksm=fb0295d6cc751cc001a871a2a515f11801be690b4da1548c74df06b4f971d46e06b94c132649&scene=58&subscene=0#rd\"\n },\n \"字节跳动技术团队\": {\n \"独家首发，免费｜Trae 从入门到实践，开启 AI 编码新征程！\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513387&idx=1&sn=ce7672590c2cd60a22e9b620dcbdcfca&chksm=e9d37ec9dea4f7df39b5549782a0921ba94ce44b12aa184545d0e3be013b25b248d26446a04a&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"微软：黑客在设备代码钓鱼攻击中窃取电子邮件\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581190&idx=1&sn=4b0c5a0975729f23cbf0196d260df3cb&chksm=e9146e3cde63e72a6c68e3717252770ba4af7ddcd656d81e0e3220c3b6f769d7346e61b51764&scene=58&subscene=0#rd\",\n \"中电安科|万事俱备，“职”等你来\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581190&idx=2&sn=23364da2fcdaabf3085192e999914d3a&chksm=e9146e3cde63e72ab1879f639dac35c0342e56bcff89c1ecee9b871e13927b415ddb571ad129&scene=58&subscene=0#rd\"\n },\n \"安全攻防团队\": {\n \"腾讯云安全中心推出2025年1月必修安全漏洞清单\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485049&idx=1&sn=2c3c26e2c4796c0f8af116747bc1187b&chksm=c2b1040ff5c68d1908d6d0b9c78e0d0ecc9ac81fef4dbf443c42b396962becfe491f85323aaa&scene=58&subscene=0#rd\"\n },\n \"渊龙Sec安全团队\": {\n \"DeepSeek本地化部署有风险！快来看看你中招了吗？\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485650&idx=1&sn=e20f3b5b3a27549b0f3549d813888c73&chksm=cfa49329f8d31a3f78eb1f422f41cb3c59ddc0d1b1539512d0abd1cbe344b61d6a114a7069a9&scene=58&subscene=0#rd\"\n },\n \"网络空间安全科学学报\": {\n \"学术前沿 | 华南师范大学密码学与信息安全团队：白盒密码实现的侧信道分析技术综述\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505072&idx=1&sn=9f910b3ab2a5ccd60b3e071af3e4aaa7&chksm=e9bfc00edec84918e630b82f33309725ee168e285f72dac4e7a8adc24e86647dac879c47ccc1&scene=58&subscene=0#rd\"\n },\n \"DEF CON Announcements!\": {\n \"Franklin Project Hackers' Almanack from DEF CON 32!\": \"https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20Hackers'%20Almanack.pdf\"\n },\n \"TrustedSec\": {\n \"Getting Started Using LLMs in Application Testing With an MVP\": \"https://trustedsec.com/blog/getting-started-using-llms-in-application-testing-with-an-mvp\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"WinRAR 7.10 boosts Windows privacy by stripping MoTW data\": \"https://www.bleepingcomputer.com/news/security/winrar-710-boosts-windows-privacy-by-stripping-motw-data/\",\n \"Managed healthcare defense contractor to pay $11 million over alleged cyber failings\": \"https://therecord.media/managed-health-tricare-false-claims\",\n \"Cracked Garry’s Mod, BeamNG.drive games infect gamers with miners\": \"https://www.bleepingcomputer.com/news/security/cracked-garrys-mod-beamngdrive-games-infect-gamers-with-miners/\",\n \"Hackers use ‘sophisticated’ macOS malware to steal cryptocurrency, Microsoft says\": \"https://therecord.media/hackers-use-macos-malware-to-steal-crypto\",\n \"Venture capital giant Insight Partners hit by cyberattack\": \"https://www.bleepingcomputer.com/news/security/venture-capital-giant-insight-partners-hit-by-cyberattack/\",\n \"Microsoft reminds admins to prepare for WSUS driver sync deprecation\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-reminds-admins-to-prepare-for-wsus-driver-sync-deprecation/\",\n \"How Phished Data Turns into Apple & Google Wallets\": \"https://krebsonsecurity.com/2025/02/how-phished-data-turns-into-apple-google-wallets/\",\n \"Chinese hackers abuse Microsoft APP-v tool to evade antivirus\": \"https://www.bleepingcomputer.com/news/security/chinese-hackers-abuse-microsoft-app-v-tool-to-evade-antivirus/\",\n \"Ecuador's legislature says hackers attempted to access confidential information\": \"https://therecord.media/ecuador-national-assembly-cyberattack\",\n \"The people in Elon Musk’s DOGE universe\": \"https://techcrunch.com/2025/02/18/the-people-in-elon-musk-doge-universe/\",\n \"Hackers planted a Steam game with malware to steal gamers’ passwords\": \"https://techcrunch.com/2025/02/18/hackers-planted-a-steam-game-with-malware-to-steal-gamers-passwords/\",\n \"Juniper patches critical auth bypass in Session Smart routers\": \"https://www.bleepingcomputer.com/news/security/juniper-patches-critical-auth-bypass-in-session-smart-routers/\",\n \"New OpenSSH flaws expose SSH servers to MiTM and DoS attacks\": \"https://www.bleepingcomputer.com/news/security/new-openssh-flaws-expose-ssh-servers-to-mitm-and-dos-attacks/\",\n \"Cyberattack likely to have ‘material impact’ on media giant Lee Enterprises’ bottom line\": \"https://therecord.media/cyberattack-lee-enterprises-news-media\",\n \"Your Ultimate Guide to Online Brand Protection\": \"https://bfore.ai/your-ultimate-guide-to-online-brand-protection/\",\n \"Tulsi Gabbard ai vertici della National Intelligence: come cambia la cyber dei Servizi USA\": \"https://www.cybersecurity360.it/news/tulsi-gabbard-ai-vertici-della-national-intelligence-come-cambia-la-cyber-dei-servizi-usa/\",\n \"Compliance Isn’t Security: Why a Checklist Won’t Stop Cyberattacks\": \"https://www.bleepingcomputer.com/news/security/compliance-isnt-security-why-a-checklist-wont-stop-cyberattacks/\",\n \"L’ascesa di DeepSeek, la sfida della protezione di dati e AI nelle aziende\": \"https://www.cybersecurity360.it/soluzioni-aziendali/lascesa-di-deepseek-la-sfida-della-protezione-di-dati-e-ai-nelle-aziende/\",\n \"Dati personali pseudonimizzati e anonimi, la CNIL chiarisce bene la differenza\": \"https://www.cybersecurity360.it/news/dati-personali-pseudonimizzati-e-anonimi-la-cnil-chiarisce-bene-la-differenza/\",\n \"BforeAI Triumphs at CPX EMEA 2025 Innovation Sandbox Competition: Leading Preemptive Cyber Defense innovator secures top award\": \"https://bfore.ai/bforeai-triumphs-at-cpx-emea-2025-innovation-sandbox-competition/\",\n \"CERT-In Issues Critical Warning on Adobe Software Security Flaws\": \"https://cyble.com/blog/cert-in-issues-critical-software-security-flaws/\",\n \"CVE-2022-31631: High-Risk PHP Vulnerability Demands Immediate Patch\": \"https://cyble.com/blog/cve-2022-31631-vulnerability-immediate-patch/\",\n \"Lee Enterprises newspaper disruptions caused by ransomware attack\": \"https://www.bleepingcomputer.com/news/security/lee-enterprises-newspaper-disruptions-caused-by-ransomware-attack/\",\n \"Zhong Stealer Analysis: New Malware Targeting Fintech and Cryptocurrency\": \"https://any.run/cybersecurity-blog/zhong-stealer-malware-analysis/\",\n \"Quando l’“altro dipendente” diventa terzo: le responsabilità privacy nelle organizzazioni\": \"https://www.cybersecurity360.it/legal/privacy-dati-personali/quando-laltro-dipendente-diventa-terzo-le-responsabilita-privacy-nelle-organizzazioni/\",\n \"StaryDobry ruins New Year’s Eve, delivering miner instead of presents\": \"https://securelist.com/starydobry-campaign-spreads-xmrig-miner-via-torrents/115509/\",\n \"whoAMI, l’attacco di name confusion che sfrutta un errore di configurazione di AWS\": \"https://www.securityinfo.it/2025/02/18/whoami-lattacco-di-name-confusion-che-sfrutta-un-errore-di-configurazione-di-aws/\",\n \"Phishing sui motori di ricerca, l’esca è un PDF dannoso usato per rubare dati finanziari\": \"https://www.cybersecurity360.it/news/phishing-sui-motori-di-ricerca-lesca-e-un-pdf-dannoso-usato-per-rubare-dati-finanziari/\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #752: Windows hello challenge part 3 fingerprints\": \"https://www.hecfblog.com/2025/02/daily-blog-752-windows-hello-challenge.html\"\n },\n \"Securityinfo.it\": {\n \"whoAMI, l’attacco di name confusion che sfrutta un errore di configurazione di AWS\": \"https://www.securityinfo.it/2025/02/18/whoami-lattacco-di-name-confusion-che-sfrutta-un-errore-di-configurazione-di-aws/?utm_source=rss&utm_medium=rss&utm_campaign=whoami-lattacco-di-name-confusion-che-sfrutta-un-errore-di-configurazione-di-aws\"\n },\n \"青藤智库\": {\n \"企业级EDR实施技术指南：十大关键要素深度解析\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489351&idx=1&sn=3da833b6858ec815c4acd2bffbdb5f69&chksm=fa58b57ccd2f3c6ab2cc18d4bf8ba912d182435ffce285f01c61664847b774308bde51ba5161&scene=58&subscene=0#rd\"\n },\n \"ICT Security Magazine\": {\n \"Il Divieto di TikTok, una panoramica approfondita\": \"https://www.ictsecuritymagazine.com/articoli/divieto-di-tiktok/\",\n \"Paragon: la vicenda dello spyware Graphite, i chiarimenti del Garante Privacy e il ruolo dell’ACN\": \"https://www.ictsecuritymagazine.com/notizie/paragon-spyware-cyber/\",\n \"Data Loss Prevention: Cause della perdita dei dati\": \"https://www.ictsecuritymagazine.com/articoli/data-loss-cause/\"\n },\n \"Full Disclosure\": {\n \"Re: Netgear Router Administrative Web Interface Lacks Transport Encryption By Default\": \"https://seclists.org/fulldisclosure/2025/Feb/14\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"https://SecTemplates.com - simplified, free open-source templates to enable engineering and smaller security teams to bootstrap security capabilities for their organizations, (Tue, Feb 18th)\": \"https://isc.sans.edu/diary/rss/31696\",\n \"ISC Stormcast For Tuesday, February 18th, 2025 https://isc.sans.edu/podcastdetail/9328, (Tue, Feb 18th)\": \"https://isc.sans.edu/diary/rss/31694\",\n \"ModelScan - Protection Against Model Serialization Attacks, (Mon, Feb 17th)\": \"https://isc.sans.edu/diary/rss/31692\"\n },\n \"迪哥讲事\": {\n \"Src第六期：稳住！别浪~\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497153&idx=1&sn=4d60c3c89eae0138d75f829c8f433627&chksm=e8a5ffa2dfd276b4b72173a26423b9e4b16176518083fc9c8188c76ec87d102ec8c7bf8b5b0d&scene=58&subscene=0#rd\"\n },\n \"Security Affairs\": {\n \"Juniper Networks fixed a critical flaw in Session Smart Routers\": \"https://securityaffairs.com/174365/security/juniper-networks-fixed-a-critical-flaw-in-session-smart-routers.html\",\n \"China-linked APT group Winnti targets Japanese organizations since March 2024\": \"https://securityaffairs.com/174353/apt/china-linked-apt-group-winnti-targets-japanese-orgs.html\",\n \"Xerox VersaLink C7025 Multifunction printer flaws may expose Windows Active Directory credentials to attackers\": \"https://securityaffairs.com/174342/hacking/xerox-versalink-c7025-multifunction-printer-flaws.html\",\n \"New XCSSET macOS malware variant used in limited attacks\": \"https://securityaffairs.com/174333/malware/apple-macos-malware-xcsset-limited-attacks.html\"\n },\n \"Graham Cluley\": {\n \"The AI Fix #38: AI proves time travel is impossible (but still can’t draw fingers)\": \"https://grahamcluley.com/the-ai-fix-38/\",\n \"Got a Microsoft Teams invite? Storm-2372 gang exploit device codes in global phishing attacks\": \"https://www.tripwire.com/state-of-security/microsoft-teams-storm-2372-exploit-device-codes\"\n },\n \"Computer Forensics\": {\n \"iOS WhatsAPP Database Encrypted\": \"https://www.reddit.com/r/computerforensics/comments/1ism8na/ios_whatsapp_database_encrypted/\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Cloud platform recommendation as a test bed\": \"https://www.reddit.com/r/netsecstudents/comments/1isk2bt/cloud_platform_recommendation_as_a_test_bed/\",\n \"airtel fiber/airfiber portforwarding\": \"https://www.reddit.com/r/netsecstudents/comments/1isil01/airtel_fiberairfiber_portforwarding/\",\n \"I want to learn some skills or knowledge on this field but I have no idea where to start.\": \"https://www.reddit.com/r/netsecstudents/comments/1isf9x0/i_want_to_learn_some_skills_or_knowledge_on_this/\",\n \"How to Prepare for Cisco 700-240 Certification?\": \"https://www.reddit.com/r/netsecstudents/comments/1ischo1/how_to_prepare_for_cisco_700240_certification/\"\n },\n \"Krebs on Security\": {\n \"How Phished Data Turns into Apple & Google Wallets\": \"https://krebsonsecurity.com/2025/02/how-phished-data-turns-into-apple-google-wallets/\"\n },\n \"FuzzWiki\": {\n \"SEAMFUZZ：灰盒模糊测试的学习种子自适应突变策略\": \"https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247486942&idx=1&sn=d249d0aa9047c41d34cb0da0cb74053b&chksm=fbd9a662ccae2f741e774425250e2a2894e7b3796ce123e69795798288442b9c5d04647a4069&scene=58&subscene=0#rd\"\n },\n \"The Hacker News\": {\n \"New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now\": \"https://thehackernews.com/2025/02/new-openssh-flaws-enable-man-in-middle.html\",\n \"Chinese Hackers Exploit MAVInject.exe to Evade Detection in Targeted Cyber Attacks\": \"https://thehackernews.com/2025/02/chinese-hackers-exploit-mavinjectexe-to.html\",\n \"New FrigidStealer Malware Targets macOS Users via Fake Browser Updates\": \"https://thehackernews.com/2025/02/new-frigidstealer-malware-targets-macos.html\",\n \"Debunking the AI Hype: Inside Real Hacker Tactics\": \"https://thehackernews.com/2025/02/debunking-ai-hype-inside-real-hacker.html\",\n \"Juniper Session Smart Routers Vulnerability Could Let Attackers Bypass Authentication\": \"https://thehackernews.com/2025/02/juniper-session-smart-routers.html\",\n \"Winnti APT41 Targets Japanese Firms in RevivalStone Cyber Espionage Campaign\": \"https://thehackernews.com/2025/02/winnti-apt41-targets-japanese-firms-in.html\",\n \"New Xerox Printer Flaws Could Let Attackers Capture Windows Active Directory Credentials\": \"https://thehackernews.com/2025/02/new-xerox-printer-flaws-could-let.html\",\n \"Cybercriminals Exploit Onerror Event in Image Tags to Deploy Payment Skimmers\": \"https://thehackernews.com/2025/02/cybercriminals-exploit-onerror-event-in.html\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Everyday Ghidra: How Platform Choice Influences Ghidra’s Binary Analysis\": \"https://www.reddit.com/r/netsec/comments/1isfypx/everyday_ghidra_how_platform_choice_influences/\",\n \"Microsoft Edge Developer VM Remote Code Execution\": \"https://www.reddit.com/r/netsec/comments/1isdwc6/microsoft_edge_developer_vm_remote_code_execution/\",\n \"Arechclient2 (sectopRAT) Analysis – A Highly Obfuscated .NET RAT with Malicious Chrome Extension\": \"https://www.reddit.com/r/netsec/comments/1isaca7/arechclient2_sectoprat_analysis_a_highly/\",\n \"Passkey Raider: Burp Suite Extension for Pentesting Passkey (Pentest & Bug Bounty)\": \"https://www.reddit.com/r/netsec/comments/1isbbvt/passkey_raider_burp_suite_extension_for/\"\n },\n \"恒脑与AI\": {\n \"Grok-3“最聪明AI”来了！为您整理发布会重点及当下明星AI产品\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496639&idx=1&sn=ebd1da91dd9c3743289106d6c491a062&chksm=e9fd6e2ede8ae738fb0088894c8e55e6a60eb4d8e4b9be65a7d9ecff32aec34c273b1800fa11&scene=58&subscene=0#rd\"\n },\n \"Schneier on Security\": {\n \"Story About Medical Device Security\": \"https://www.schneier.com/blog/archives/2025/02/story-about-medical-device-security.html\"\n },\n \"Your Open Hacker Community\": {\n \"pentest / hacking courses+certification\": \"https://www.reddit.com/r/HowToHack/comments/1isighp/pentest_hacking_coursescertification/\",\n \"QuasarRAT exclusion on client side\": \"https://www.reddit.com/r/HowToHack/comments/1is9bok/quasarrat_exclusion_on_client_side/\",\n \"Can anyone help me to remove password from my pdf\": \"https://www.reddit.com/r/HowToHack/comments/1isgixr/can_anyone_help_me_to_remove_password_from_my_pdf/\",\n \"Scammed\": \"https://www.reddit.com/r/HowToHack/comments/1is9bh3/scammed/\",\n \"Am I hacked?\": \"https://www.reddit.com/r/HowToHack/comments/1is2w86/am_i_hacked/\",\n \"Hacking Old Roblox Account\": \"https://www.reddit.com/r/HowToHack/comments/1is3dot/hacking_old_roblox_account/\"\n },\n \"RedTeam\": {\n \"DeepSeek本地化部署有风险！快来看看你中招了吗？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484156&idx=1&sn=19bb941c4a3c27e1a5239ddad80eeb2c&chksm=c006ca0cf771431a2a1a1311e6c489deec495226828e73bf98de345a40c1df31c0df51a4ff07&scene=58&subscene=0#rd\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"AI Threat Intelligence, AI Hacking, Data Breaches, Zhong, DOGE, and more - SWN #452\": \"http://sites.libsyn.com/18678/ai-threat-intelligence-ai-hacking-data-breaches-zhong-doge-and-more-swn-452\",\n \"Top 10 Web Hacking Techniques of 2024 - James Kettle - ASW #318\": \"http://sites.libsyn.com/18678/top-10-web-hacking-techniques-of-2024-james-kettle-asw-318\"\n }\n}"}}, "archive/tmp/2025-11-08.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747308.7459342, "n": 54925, "h": "ad35f23b552300fc", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-11-07 Review\": \"http://www.sec-wiki.com/?2025-11-07\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"黑客正滥用Windows Hyper-V功能隐匿Linux虚拟机，以规避终端检测与响应机制的检测\": \"https://www.anquanke.com/post/id/313062\",\n \"谷歌发出警告：新型PROMPTFLUX恶意软件正利用Gemini API实现源代码自我重写\": \"https://www.anquanke.com/post/id/313072\",\n \"开源安全模型OpenGuardrails发布，旨在为现实世界AI应用保驾护航\": \"https://www.anquanke.com/post/id/313066\",\n \"为遵循欧盟监管要求，苹果将于欧盟地区关闭Apple Watch的自动Wi-Fi同步功能\": \"https://www.anquanke.com/post/id/313079\",\n \"美国CISA发布警告：Gladinet CentreStack与Triofox文件共享软件中的漏洞正遭攻击利用\": \"https://www.anquanke.com/post/id/313069\",\n \"恶意软件Gootloader重出江湖，采用ZIP文件新策略隐匿恶意负载\": \"https://www.anquanke.com/post/id/313076\",\n \"远程控制木马EndClient通过滥用遭泄露的代码签名证书来规避防病毒软件检测\": \"https://www.anquanke.com/post/id/313056\",\n \"二进制供应链安全平台Binarly Transparency Platform 3.5发布，新增对Java归档文件与JVM字节码的深度支持\": \"https://www.anquanke.com/post/id/313053\",\n \"思科发布警告：黑客正积极在野利用其ASA与FTD防火墙中的零日远程代码执行漏洞\": \"https://www.anquanke.com/post/id/313049\",\n \"Django框架中存在多处安全漏洞，可引发SQL注入与拒绝服务攻击\": \"https://www.anquanke.com/post/id/313045\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"动态自适应欺骗防御：重构网络安全防御新格局\": \"https://www.4hou.com/posts/RX90\"\n },\n \"奇安信攻防社区\": {\n \"Calibre代码审计集合\": \"https://forum.butian.net/share/4635\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"hop.bg | web app | Cross-site scripting (reflected)\": \"https://cxsecurity.com/issue/WLB-2025110008\",\n \"3kits template via imgGallery.php SQL Injection id parameter\": \"https://cxsecurity.com/issue/WLB-2025110007\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Fri Nov 7 11:57:28 UTC 2025\": \"https://github.com/trickest/cve/commit/b38a0d7a83fbf635fc87ec6ca536159699fc1823\"\n },\n \"Tenable Blog\": {\n \"Cybersecurity Snapshot: AI Will Take Center Stage in Cyber in 2026, Google Says, as MITRE Revamps ATT&CK Framework\": \"https://www.tenable.com/blog/cybersecurity-snapshot-agentic-ai-security-best-practices-mitre-attack-v18-11-07-2025\"\n },\n \"Microsoft Security Blog\": {\n \"​​Whisper Leak: A novel side-channel attack on remote language models\": \"https://www.microsoft.com/en-us/security/blog/2025/11/07/whisper-leak-a-novel-side-channel-cyberattack-on-remote-language-models/\"\n },\n \"Sucuri Blog\": {\n \"Slot Gacor: The Rise of Online Casino Spam\": \"https://blog.sucuri.net/2025/11/slot-gacor-the-rise-of-online-casino-spam.html\"\n },\n \"一个被知识诅咒的人\": {\n \"【JavaScript】React 19革命：让你的前端UI如闪电般迅捷\": \"https://blog.csdn.net/nokiaguy/article/details/154437425\",\n \"揭秘Java 17：用前沿特性铸就极速Web帝国\": \"https://blog.csdn.net/nokiaguy/article/details/154437373\"\n },\n \"Doonsec's feed\": {\n \"自研C2【XC2】1.0.4版本发布，新增文件管理模块【文件列表预览、文件预览、文件上传下载删除】\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247490793&idx=1&sn=bb89ae1000d192650ae651c0393bf940\",\n \"基于特征分析的智能网联汽车数据分级方法研究\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628322&idx=1&sn=a94776c722cf52255fda4cc771dfd823\",\n \"智能汽车网络安全与信息安全基础培训课程 2025\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628322&idx=2&sn=986e3b1eb3d84d4d1053060b7c6f9031\",\n \"智能网联汽车信息安全风险及应对举措\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628322&idx=3&sn=229e74a0df5db1d2e33bbb5c1084e5cb\",\n \"近五年投资理财笔记复盘\": \"https://mp.weixin.qq.com/s?__biz=MzU0MjExNDkyMQ==&mid=2247486239&idx=1&sn=1213cce700684ea21752914f58c6bfec\",\n \"AI到底能不能自主完美入侵系统？\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MzA4NTM0OA==&mid=2247494009&idx=1&sn=350665e807772641ae3f189486d1d631\",\n \"限时免费报名！第27届高交会网络安全前沿科技与创新发展论坛即将开幕\": \"https://mp.weixin.qq.com/s?__biz=MzU0Mzk0NDQyOA==&mid=2247522838&idx=1&sn=b1d51fd4c49d17b4deb85ddb072735d2\",\n \"滴滴开源走进浙江大学｜共话开源实践与高校共建\": \"https://mp.weixin.qq.com/s?__biz=MzU1ODEzNjI2NA==&mid=2247574747&idx=1&sn=47a252d23c1c9077a5c30469317b18e8\",\n \"密码重置漏洞挖掘指南：从原理到实战的完整路径\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247490055&idx=1&sn=a91b235f679c8c88d77574a91738b45c\",\n \"国家标准支撑《网络数据安全管理条例》生效施行（v1.0）\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175031&idx=1&sn=f29b2b75a4a4dc4fd32b767888a003b5\",\n \"《大模型一体机产品安全基本要求（征求意见稿）》等2项网络安全标准实践指南公开征求意见\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175031&idx=2&sn=708a1e2e2a42cf67d23bbb2a44b48fd6\",\n \"CertiK联合创始人顾荣辉出席中国国际金融论坛·香港峰会：探讨数字资产合规化与全球监管新格局\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247504782&idx=1&sn=80799c00b83a501e9220a6ac323fbf1e\",\n \"漏洞无处可藏：OWASP dependency_check助你高效挖掘安全隐患\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797319&idx=1&sn=2b853936db4e5d2420749e9bb634f1ef\",\n \"把敌人带进训练场：用真实APT样本打造实战攻防演练场景\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDAwNzM3MQ==&mid=2247522251&idx=1&sn=7fcb524124fa07bb4207a2a421394ac4\",\n \"论文研读与思考|TrafficFormer:AnEfficient Pre-trainedModelforTrafficData\": \"https://mp.weixin.qq.com/s?__biz=MzU4NjcxMTY3Mg==&mid=2247488388&idx=1&sn=4bc0c6bb8acc37fe96cc6aaed9f80323\",\n \"工业IoT 必备！基于.NET生态的WPF工业级控件，支持西门子、欧姆龙、施耐德等Modbus工控设备可视化\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454941381&idx=1&sn=da411b12922eade1f6712c3a4e950303\",\n \"AI时代银行数据安全的挑战与应对浅析\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932902&idx=1&sn=5fc3a91d1bd1e77ab1f16988fd4fedd9\",\n \"AI快讯：劳埃德银行推进采用AI技术，“金蝶云”全面升级为“金蝶AI”\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932902&idx=2&sn=3278bce2e04ffcb32fc5f7996a5d38c2\",\n \"建信金租人工智能+应用项目供应商征集\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932902&idx=3&sn=4e32f1cdaa56208778e418fa2730a73d\",\n \"【安全圈】ChatGPT曝出七大安全漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=1&sn=8f70b2c8f6cc8495d0e6692ce5d981d8\",\n \"【安全圈】荷兰区域电视台RTV Noord遭遇网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=2&sn=17e5abc2bbcceb99144c2ecd8183bc74\",\n \"【安全圈】现代汽车IT服务遭入侵：逾270万车主面临数据泄露风险\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=3&sn=9597a4310e1a0ccd9d147d6ff5c21720\",\n \"【安全圈】NVIDIA 修复 Windows 版 NVApp 严重漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=4&sn=cd862a7afb4d45dad113fd278b270cb1\",\n \"【AI安全】函数调用（Function Call）\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzU2NDgxNQ==&mid=2247484022&idx=1&sn=8d984d4d0759eff698d33dd68e4ad97f\",\n \"CPS安全丨OT安全不伤身，CPS安全再进化（附PPT全文）\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247535637&idx=1&sn=ae5bff3c4e98b6514fb26afd48e35946\",\n \"直播页面上线！一文get“AI赋能制造数智化暨工业智能边缘计算2025年会”全场~\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247535637&idx=2&sn=c48761455d41578749397cd6cc6f2621\",\n \"个人edu挖洞总结\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzgzMjkxOQ==&mid=2247485887&idx=1&sn=0d0d191a5d6a99c479b7358edb3775ab\",\n \"连续三年！腾讯云列入Gartner®《中国托管检测和响应服务市场指南》代表供应商\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247528413&idx=1&sn=e1466f2a45f6a5b072f494a5b9330c63\",\n \"238支全球顶尖战队上演AI攻防巅峰对决，腾讯云黑客松-智能渗透挑战赛即将开启！\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496936&idx=1&sn=28a7612170846b9621fc2b933614dfd2\",\n \"渊亭科技获评省级人工智能“领雁”软件企业\": \"https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660192845&idx=1&sn=8658643dc8d21b848c554b131ee6a363\",\n \"搞波大的！超级翻倍+免费飞澳门直通白帽世界大会\": \"https://mp.weixin.qq.com/s?__biz=Mzg2MjIzODI3Mw==&mid=2247493085&idx=1&sn=b15fc53f146b60209864eeaeeb8dc378\",\n \"聚焦人工智能+，世界互联网大会天融信展区再迎参观热潮\": \"https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650980157&idx=1&sn=919c5b647e25bb542cd735bce514d5f1\",\n \"NVIDIA NVApp 漏洞可致恶意代码执行\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096602&idx=1&sn=299bc901842aef25108f90b845a4b497\",\n \"思科 UCCX存在远程任意代码执行漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096602&idx=2&sn=aea8c8ae0fbae9ad74287a60f4b73cd7\",\n \"【高危漏洞预警】AutoCAD权限提升漏洞（CVE-2025-10885）\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490960&idx=1&sn=8c0d7ee4efff3cef20ee2be9727a6d4f\",\n \"【高危漏洞预警】Dataease拒绝服务漏洞CVE-2025-64164\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490960&idx=2&sn=a931af8f0470f877a18f8c51e416a1f3\",\n \"黑客voices38破解《极品飞车21》D加密！畅谈未来计划\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247543234&idx=1&sn=fc77a562656d106d6d7bb31f2eac0dd8\",\n \"网络安全工具-搜索(一)\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NzgzNjI2NQ==&mid=2247483805&idx=1&sn=bca9dd61fcc31fa31e5e96837d4edf11\",\n \"聚焦乌镇 | 奇安信发布量子安全SD-WAN，以“零改造”守护关基安全\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629708&idx=1&sn=eeb27798578ce3447e7989f553f271aa\",\n \"奇安信中标香港金融管理局网络安全攻防演练防守服务项目\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629708&idx=2&sn=2e6e09eb93e62b728f2a22693884d88e\",\n \"智能养老服务机器人产业高质量发展座谈会顺利召开\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649255719&idx=1&sn=98943678d6abeb23c9569cfeae5d2382\",\n \"【通知】关于征集《人工智能从业人员能力评价规范》团体标准参编单位的通知\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649255719&idx=2&sn=591c8a9cefe21b71200f7835487d8b47\",\n \"【征集活动】关于征集《机器人整机产品自主化率评估指南》标准起草工作组专家的通知\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649255719&idx=3&sn=62e6d89a981562c4cc9e6ea38330a937\",\n \"聚焦 | 2025年世界互联网大会乌镇峰会开幕 李书磊出席开幕式并发表主旨讲话\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=1&sn=e74a7f043c1fc094179993b3b4699d3b\",\n \"国家卫健委等三部门发布医务人员健康科普“十不准”！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=2&sn=d783ebb6f797f1ede14321383f5825ba\",\n \"国家卫健委等五部门发布《关于促进和规范“人工智能+医疗卫生”应用发展的实施意见》（附全文）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=3&sn=e53636da8d73e33c668833300780b4f8\",\n \"通知 | 《大模型一体机产品安全基本要求（征求意见稿）》等2项网络安全标准实践指南公开征求意见（附下载）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=4&sn=763c154a8a8cd4d61b4ee2113c186db8\",\n \"一图读懂 | 《关于促进和规范“人工智能+医疗卫生”应用发展的实施意见》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=5&sn=5610b1f0fca4a52d1fa626b6e0c4ca41\",\n \"AI 全自动漏扫工具更新！联合“资产发现”工具，帮你一键搞定找接口、测漏洞\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329972&idx=1&sn=4710ad685f2dfafcaa9da7efd0ed5f9d\",\n \"GPT-4o与GPT-5存在七项零点击攻击漏洞\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329972&idx=2&sn=6958144eaa1853dc966bc1000a97ae4f\",\n \"现代汽车确认遭遇数据泄露，攻击者持续驻留9天获取用户驾照信息\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329972&idx=3&sn=f682e2e42cccb2016323ee49b03b2194\",\n \"攻击者利用Windows虚拟化技术绕过EDR检测，部署Linux虚拟机\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329972&idx=4&sn=43d8ae3461c04020086e3e6d38c84564\",\n \"热点观察︱蚂蚁集团王宇：数字时代网络安全“新范式”\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664997853&idx=1&sn=594a70a5441ba681fdc2b1b47047812e\",\n \"【业界动态】两部门组织开展第二批次网络安全保险服务试点工作\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664997853&idx=2&sn=ea1fcfb7df2fb63972d967000d22df7c\",\n \"【业界动态】世界互联网大会发布12项“携手构建网络空间命运共同体精品案例”\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664997853&idx=3&sn=31a8c4118ca17e37a3f6bc591fe7c2f1\",\n \"每周勒索威胁摘要\": \"https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498552&idx=1&sn=c82e2586630ba033119e033bb5a4627c\",\n \"干货报告《企业级智能体产业落地研究报告》\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247646159&idx=1&sn=d174b249154b5918fd7a664e3fe34901\",\n \"免费赠送 | 企业办公安全意识培训科普素材（第一期）\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247646159&idx=2&sn=ae26df5e471c3ed010198e75890bf0f4\",\n \"免费赠送 | 诸子云星球福利大放送 · 安全科技报告合集\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247646159&idx=3&sn=69f91e4db63720b623dea2517c315a4a\",\n \"2025年首场武汉市工业领域数据安全能力提升专题宣贯培训汉口片区活动成功举办\": \"https://mp.weixin.qq.com/s?__biz=MzA3OTEyODAxMw==&mid=2247510641&idx=1&sn=9b04153115c71ddf81af1449228a77e6\",\n \"湖北省知识产权局关于组织申报第二十六届中国专利奖参评项目的通知\": \"https://mp.weixin.qq.com/s?__biz=MzA3OTEyODAxMw==&mid=2247510641&idx=2&sn=393c1ffc16255ffaecad463b1105891b\",\n \"从近期俄乌战场看美军侦察机与侦察卫星\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NjIzOTgzNw==&mid=2247500585&idx=1&sn=4a12e4decb07a661f25e9d106dec244e\",\n \"活动回顾｜慢雾(SlowMist)亮相第十届香港金融科技周 2025\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247503653&idx=1&sn=bd9bc4dc267d404f27c32716db8eb43b\",\n \"360首席科学家潘剑锋当选世界互联网大会人工智能专委会副主任委员\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582822&idx=1&sn=6ec9311498151e9d1260d71ad2fec74d\",\n \"勒索月报 | 360披露10月勒索软件流行态势：AI“养蛊”新变种，防御难度陡增\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582822&idx=2&sn=fed9869501a44970e9cdee1f4dc654c4\",\n \"教育行业系统等保定级：判定逻辑与实操指南\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTIzMQ==&mid=2247497929&idx=1&sn=6b9ad7d932d289a3d699ecd310598b5f\",\n \"【竞赛进行时】2025北京市职工职业技能大赛数据安全管理员竞赛暨“网安联杯”首届数据安全管理员职业技能竞赛（复赛）顺利进行\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTIzMQ==&mid=2247497929&idx=2&sn=5e7f2780950c03fb18ac36b461d248fc\",\n \"世界互联网大会重磅奖项！被央视报道啦！\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247538354&idx=1&sn=7ba65006cf9279f974681b0b7d3d0c4a\",\n \"Chrome紧急修复 WebGPU 和 V8引擎中的三个高危漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524343&idx=1&sn=bafd6d107e51fa5d67f552a22dd26211\",\n \"思科修复 Contact Center Appliance 中的多个严重漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524343&idx=2&sn=54f09a81eb6da8e9b06f5a17b8b70644\",\n \"喜报！矢安科技斩获2025年”创·在上海”国际创新创业大赛优胜奖！\": \"https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517606&idx=1&sn=2f077324b7163d8ffebfec40aa520a8c\",\n \"【网安科普】十个网络安全小常识\": \"https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247517875&idx=1&sn=b09faeca2bed8ba7af2c334c240e2cd6\",\n \"AI Network Security |《网络安全法》修订发布，迈向AI+安全新时代\": \"https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247506619&idx=1&sn=f0b331f9efff87b3cb49d9e29af3ed26\",\n \"华为星河AI网络安全重磅亮相香港网络安全高峰会2025，以AI赋能数字安全\": \"https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247506619&idx=2&sn=fe1203860535b0404754a2eb438325ca\",\n \"被操控的真相：解码以色列认知战\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MDczNjcyNA==&mid=2247489917&idx=1&sn=ffbdc114cac994dca74e10c290496c7a\",\n \"SDC2025 议题回顾 | 大模型供应链安全的熵增效应：风险挖掘与熵减策略\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=1&sn=39283ac5055f746948790e5c713dfb51\",\n \"看雪双11·课程福利——满额赠《加密与解密》第五版（签名版）、VIP年卡、T恤等\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=2&sn=b2a1a614e41aa0094176189adbde0ea0\",\n \"本周职位更新！速速投简历\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=3&sn=ea06487f77ee940f8f83ff33418d4817\",\n \"NVIDIA App曝高危漏洞，紧急更新防黑客入侵！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=4&sn=496a77a25e59671f8e5c5b380d758c1a\",\n \"绝密档案：最强网络攻击试图颠覆对立国家政权\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515177&idx=1&sn=1341cfdaee2aa6c60474ba6db88b513f\",\n \"欧洲学者建议欧洲摆脱对美国的网络安全依赖\": \"https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247490880&idx=1&sn=50d33117a87125d47e312e343ca53807\",\n \"Transformer与CNN在恶意URL路径识别中的实践探索\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjkwNTUwOA==&mid=2247484199&idx=1&sn=b672350cd09054175871f0fbeac71c56\",\n \"每周蓝军技术推送（2025.11.1-11.7）\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494499&idx=1&sn=f8e0a8774a42c096b51fb030a289d5ac\",\n \"每家企业都应开展的10项实战化网络安全演练\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247493238&idx=1&sn=19fd4f3f4643294eda03880970c9f618\",\n \"组件安全合规实践指南：构建企业数字防线新范式\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDkyNTQ2OA==&mid=2247486286&idx=1&sn=98287f6dda4e00bc53cf3ec4b55b5b7a\",\n \"那看来网安也要转型物联网安全了，机器人(IoT)渗透......\": \"https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483938&idx=1&sn=a24b50a28c46557e02e5dc7b281254b2\",\n \"烽火狼烟丨暗网数据及攻击威胁情报分析周报（11/03-11/07）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NjMxNTgyOQ==&mid=2247484804&idx=1&sn=da73fd17221561f6182c7c6880785e7e\",\n \"网络安全信息与动态周报2025年第44期（10月27日-11月2日）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650625982&idx=2&sn=dc16c437801595c7580b12400a19575f\",\n \"国投智能股份入选工信部第九批制造业单项冠军企业\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651447228&idx=1&sn=102d531399c52ee69143ae529331122e\",\n \"【协会风采】副会长单位：国安达股份有限公司\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651447228&idx=2&sn=c89e2c6d6b7970f8489e765887d6c6e0\",\n \"汽车软件升级——A/B分区与回滚\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247562400&idx=1&sn=68120d893ff54fef18009486da5154a9\",\n \"附PPT下载 | 鹏瞰科技：高带宽需求下光纤上车的产业化机遇与挑战\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247562400&idx=2&sn=db8b01c87eed1bdec37dd7fabf0d1f33\",\n \"警惕！APT-C-08（蔓灵花）组织首次借WinRAR漏洞CVE-2025-6218实施网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247507464&idx=1&sn=fa744e1c4a49e29091fc417d2ca74226\",\n \"跌多涨少\": \"https://mp.weixin.qq.com/s?__biz=MzkzMjIwMDY4Nw==&mid=2247486328&idx=1&sn=ad6158b3a6ba6cdb1c3083117cc8f451\",\n \"河南省工业和信息化厅发布《关于组织开展“数据治理服务进百企”活动的通知》\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448691054&idx=1&sn=17cb28fabb1cfe7a60948627bf153181\",\n \"网安标委就《大模型一体机产品安全基本要求》等2项网络安全标准实践指南征求意见\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448691054&idx=2&sn=b79b3b19a1ecd092a6107dbfa34e0d32\",\n \"世界互联网大会之际——高校网安学院院长寄语学生创新资助计划、开源安全奖励计划\": \"https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649403283&idx=1&sn=853f99fecaf1ec4e2c62b5e6301e25b7\",\n \"获NVIDIA致谢：悟空Agent的实践、复盘与迭代\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649796466&idx=1&sn=bde4c05e0548ed972aaed26ca85a8b28\",\n \"《2025年大语言模型主机安全态势报告》（第一期）\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDIzNTYwOA==&mid=2247490338&idx=1&sn=7e60cd5370bdde105a27dec762380c61\",\n \"2025年度“金智奖”参评企业风采展（四）：仰望星空，见证产业中坚力量\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247602141&idx=1&sn=40abfb42e2c72f871dcaf97609d3004a\",\n \"强化安全治理，警惕AI大模型被“魔咒”操控\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247602141&idx=2&sn=424daa1fa5df994e102790bb93c3dbf9\",\n \"模拟红队进行漏洞挖掘\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556711&idx=1&sn=921bc63ee014e892a8a53ec0adae25fb\",\n \"【免费领】Kali Linux无线渗透测试实战教程\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556711&idx=2&sn=e2633ebe43ace4f389f01e18f3eac668\",\n \"A.S.E 2.0 正式发布 | 开放生态 · 动静协同 · 让 AI 编程安全可量化\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207584&idx=1&sn=96d9b909bb8a2634da0aa30b92667dfb\",\n \"边缘 AI 的现状与展望\": \"https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247493252&idx=1&sn=49026034665b66f92c47b4eda1a51984\",\n \"百年沉淀，科技赋能！商丘三院 AI 咨询秒级响应，解锁医疗服务新体验！\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651389854&idx=1&sn=970a33ef655e860a083b499314caedb4\",\n \"AI赋能风控“智”变 | 国舜智能预警案件分析平台：风险识别快人一步！\": \"https://mp.weixin.qq.com/s?__biz=MzA3NjU5MTIxMg==&mid=2650575839&idx=1&sn=33b3eb1307679db44bc617bd54bd9746\",\n \"“一周懿语”丨第四十六期\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650637553&idx=1&sn=798077cc98e9c1f52432e94c1a66d9a6\",\n \"亚信安全荣登2025年信创分类排行榜，引领信息安全新发展\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650625982&idx=1&sn=83eb28094ac9aad5a64d55533ca83e07\",\n \"CCS\\\\'25 杰出论文奖: Web 应用越权漏洞检测新进展\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247496499&idx=1&sn=d6dcde468457c835229d2b83687fb0a5\",\n \"每日安全动态推送(25/11/7)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960246&idx=1&sn=39b0d9f440cdf13d99db1e8af6e3905b\",\n \"工业网络安全周报-2025年第45期\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTQ5NjI2Ng==&mid=2247486956&idx=1&sn=b57727612212bbde13e1a0db39180ba5\",\n \"【CTF入门必看】分享8个适合练习CTF的平台，让你从菜鸟变大神！\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDU0MTUyNw==&mid=2247493758&idx=1&sn=07bce8756b1c487844ad9fedf86a9f90\",\n \"山石网科协办网安企业出海技术沙龙，深度分享全球化战略与实践经验\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661303791&idx=1&sn=713fd8c4f3aca094b6ac0d268be1b3a9\",\n \"国内仅3家｜山石网科连续3年获Gartner® VoC for NDR “强劲表现者”称号\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661303791&idx=2&sn=532fbf68ad371763152d482a60e9174f\",\n \"Wepro180｜山石网科港澳业务增长四成 自研ASIC芯片成重要战略\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661303791&idx=3&sn=b00f23c22f2e2b83a1819bca47eae5f8\",\n \"美海军陆战队《欺骗》条令的内容、特点及局限\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622087&idx=1&sn=d99b08f2c9a9477f282c365d3ab1a83a\",\n \"欧盟委员会通过2026年欧洲创新理事会工作计划，拨款14亿欧元促进欧洲深度科技创新\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622087&idx=2&sn=69be21d538788a146b41d8069d919934\",\n \"长亭科技朱文雷：驾驭变革，智能增长\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651389854&idx=2&sn=113744089ee468f1f61da43798561d88\",\n \"清晨的从容：一份无人值守报告背后的人工智能安全革命\": \"https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247501453&idx=1&sn=23477cb8f67a9f95717dd01158cf11e5\",\n \"安全热点周报：黑客利用 Gladinet 文件共享软件中的零日漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504113&idx=1&sn=ebbfa1f912a759a56775f303c03ba0ee\",\n \"wepoc 高效多任务nuclei 图形化POC扫描工具\": \"https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247524829&idx=1&sn=d0db4dd0d5eb7913ac16bf8f78e4ca9c\",\n \"安全威胁情报周报（2025/11/01-2025/11/07）\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NjYyMzUyNg==&mid=2247492922&idx=1&sn=ba00de24be96535e0a09b091cb4a0fd0\",\n \"图解安全 | 效率低、盲区多？看一体化网络安全检测平台如何破局\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDUzMjc5Ng==&mid=2650204248&idx=1&sn=9f061522833dc3503759f45cac1529bb\",\n \"木马如何生成--简易木马的制作\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247575563&idx=1&sn=a372b94eddd18278da34dc42e3a0bd31\",\n \"355页渗透测试笔记，看完一半就是高手！\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247575563&idx=2&sn=cfbb6d80969bde1fdc62978c436075cb\",\n \"IRify 性能升级（三）：3GB缩至500MB，内存优化完整复盘\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529017&idx=1&sn=12b8e1576324391ac1ce925710b590e1\",\n \"哪所高校网络安全专业最强---第九届“强网杯”全国网络安全挑战赛获奖名单（高校排名）\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247545759&idx=1&sn=5c14ca068331d720141c346517e2e2d7\",\n \"【网络安全招聘】-中国联通招聘网络安全岗\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247545759&idx=2&sn=29d66e1f6f095c55ce930cefabe0085d\",\n \"为什么数据安全是私人市场透明度的关键\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247486042&idx=1&sn=77fe2f6425c1ed4a029ba86831539597\",\n \"常行科技：数智赋能，打造食品安全智慧监管新范式\": \"https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247504121&idx=1&sn=8d1ba12c7e972fbe94a370537e1c27a0\",\n \"携手乌镇峰会，CSA与全球伙伴共筑安全普惠数智未来\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTM5MDUxMA==&mid=2247508235&idx=1&sn=fb9f66293ecbbaf53eb5d68e43344ef6\",\n \"【首届密码竞赛成功举办】2025年广东省密码技术行业（密码技术应用员）职业技能竞赛决赛在深圳成功举办（获奖名单附后）\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MDYzMjAyNA==&mid=2247486610&idx=1&sn=30c0d426def9dbf8ab7acf71fa39b6dd\",\n \"2025高校网络安全管理运维赛-电子取证分析师赛道-决赛WriteUp\": \"https://mp.weixin.qq.com/s?__biz=MzkyOTI4NTY4MQ==&mid=2247491682&idx=1&sn=e40b2e326cea3c22d61a21617dc173d4\",\n \"美国检方起诉 3 人！前网安从业者涉嫌参与 BlackCat 黑客攻击\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537586&idx=1&sn=2d5b738c8d07f43a75beb347a9511b3a\",\n \"黑客入侵宾大！滥用官方邮箱群发挑衅邮件\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537586&idx=2&sn=6bda5146cb2caf310052bab8c991c582\",\n \"警惕！Windows SMB 高危漏洞遭滥用，设备或被获取最高权限\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537586&idx=3&sn=eadb658ae974ce25311eb6b299d19010\",\n \"不按规定发漏洞信息？有关单位被处罚，给行业敲警钟\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537586&idx=4&sn=19899a2d043f495eda174ed453d85b0a\",\n \"CTF 选手必藏！20 个 Wireshark 实战秘籍，从入门到精通抓包解题\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537586&idx=5&sn=efe860007c9b72065a507eafebe398ce\",\n \"模拟黑客入侵OA系统实战\": \"https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247490818&idx=1&sn=e2735bfad4f75f02b07df8490bee5d71\",\n \"立冬·守暖｜为你的数字世界，筑牢御寒安全盾\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjMxMzg5MQ==&mid=2247492353&idx=1&sn=4947c9fce870eea3f84f9446ff71f574\",\n \"王牌A计划——九月月度奖励\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998227&idx=1&sn=3f34bf6581c834cf612cbcce15ec2e2c\",\n \"鸿蒙(HarmonyOS)应用安全检测平台V6.6\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247499040&idx=1&sn=ad71ce13827db04d5ed4e50ea5d0932f\",\n \"Objection使用指南：基于Frida的移动安全测试神器\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247499040&idx=2&sn=d733975c4a24c51d3392378d39887eaa\",\n \"物联网安全权威认证，帮你抢占行业风口\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDI0MjUyNQ==&mid=2247485702&idx=1&sn=f1b7ef3f766f50c217c2499bba434d74\",\n \"吸取ERP迁移的教训，五大策略助力CISO迈向安全与业务一体化的新阶段\": \"https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650260539&idx=1&sn=72f4893004fe7001f017ed3b226801b7\",\n \"信息安全漏洞周报【第046期】\": \"https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064428&idx=1&sn=7b9e0004f744ee1edef9442b7b0724fc\",\n \"凝聚社会力量，共筑区域网络安全防线——网信自主创新产业商会网络安全志愿服务队正式成立\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzI3MzMwMQ==&mid=2247531619&idx=1&sn=e79e21d446bfa8dcb1085634d1473c06\",\n \"安全简讯（2025.11.07）\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501753&idx=1&sn=690ef67129f0d5b07ece2e4548ca4790\",\n \"【漏洞通告】Django SQL注入漏洞(CVE-2025-64459)\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501753&idx=2&sn=98fb11fa65c0ecebfa4a1fa04ec9736a\",\n \"这年头，还有人拿免费软件行骗！\": \"https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247487605&idx=1&sn=df0ae6200ecd3320124948456df502d8\",\n \"再获认可！深信达荣获信创工委会技术活动单位，深耕信创安全，引领终端防护\": \"https://mp.weixin.qq.com/s?__biz=MzI2ODQ5NTI5OA==&mid=2247485987&idx=1&sn=39a49e05d1ce827f2198320817f0d839\",\n \"SSH高危漏洞修复、屏蔽工具----付费文章集合版本\": \"https://mp.weixin.qq.com/s?__biz=MzkxODc0Mzk4OQ==&mid=2247484787&idx=1&sn=e85605021c07afbdcc238acc5dd88b86\",\n \"【赠书抽奖】《Web漏洞分析与防范实战》上下册\": \"https://mp.weixin.qq.com/s?__biz=MzI1ODI0MTczNQ==&mid=2247491225&idx=1&sn=3fe6a97e7f7cd4411605787d25fa0830\",\n \"如何评估并选择合适的 AI-SOC 平台？\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540726&idx=1&sn=71e7881ab056aebb03c42c8f9639e039\",\n \"分享一个能一键获取两万+资源的情报网站\": \"https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247495348&idx=1&sn=7fdff9e20750bdbf4f1864b51c4a7ae8\",\n \"公告｜湖北省网络和数据安全协会2025年网络安全管理员第五期考试公告\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDE5NzY3NQ==&mid=2247514006&idx=1&sn=646323bc13cc932be24729f191de18f1\",\n \"会员动态丨县乡一体、乡村联动，天融信助力赤峰某旗打造县域医共体建设标杆\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDE5NzY3NQ==&mid=2247514006&idx=2&sn=0127ebfc138c7addc68cf39057167bd7\",\n \"【开放注册公告】吾爱破解论坛2025年11月11日光棍节开放注册公告\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143158&idx=1&sn=a6995fb20a83d854f718ed7d104fb662\",\n \"【产品】ST-301有线线路检测仪功能介绍\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM4MTIxMA==&mid=2247485654&idx=1&sn=a76337b9e57bca48a758c3da356eb833\",\n \"【技术】使用 ST-301 检测有线线路的方式方法建议\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM4MTIxMA==&mid=2247485654&idx=2&sn=5291198f80c5f61f7a6a2db1a5585909\",\n \"中国财富网专访安芯网盾CEO姜向前\": \"https://mp.weixin.qq.com/s?__biz=MzU1Njk1NTYzOA==&mid=2247491906&idx=1&sn=f350d2d002d8a5ea99f500287a244032\",\n \"喜报xa0| 赛博研究院荣获上海市第三届中青年工程师创新创业大赛“优秀组织单位”称号\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247521265&idx=1&sn=755b00935c7ba107e608bd13ce1e7310\",\n \"今日立冬！\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247521265&idx=2&sn=c1b7f2893ab80babbeb5d4a0604c1b90\",\n \"最近后台找《网路关键设备和网络安全专用产品目录》的同事很多，文末提供下载地址\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDYzNTYxNQ==&mid=2247504568&idx=1&sn=d98abf82e1f1a8959d09c56b6a37bb0b\",\n \"一张图让你秒懂SSL证书\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247538350&idx=1&sn=275bbdc4d1b36f0a756782af55f45ac5\",\n \"Renew｜中美战略竞争下的网络空间冲突\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486583&idx=1&sn=7a2b939aefe787d279a4665d9524e345\",\n \"朝鲜在东南亚的制裁规避与朝越外交新局\": \"https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247512078&idx=1&sn=cbac3638079e258a5ab84aa20508f62f\",\n \"锁定乌克兰粮食命脉，俄罗斯发动数据擦除软件攻击\": \"https://mp.weixin.qq.com/s?__biz=Mzk2ODExMjEyNA==&mid=2247486759&idx=1&sn=d42cb26c2559d020ba60392b83a02e02\",\n \"能信安：病毒和恶意代码通告\": \"https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491380&idx=1&sn=9b3914f4b11a6c1c8b7d04bf07bd1e63\",\n \"应急响应后门排查处置指南\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247488340&idx=1&sn=2a9c9f3809a72fde2bf998418a13fc56\",\n \"内网渗透应该如何做\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247488340&idx=2&sn=92a23b140d5691eeaa5de410d60d6c6c\",\n \"白加黑攻击技术原理深度分析\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247488340&idx=3&sn=3bc3ac7ccfd058d4915c0a273cfaa7e2\",\n \"绕过现代终端防护（EDR/XDR）的免杀Payload生成与执行技术综述\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247488340&idx=4&sn=fbbb14b0ac773d4ff0288afa2b34bcd1\",\n \"安全报告：CVE-2025-64459 — Django QuerySet _connectorSQL 注入\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533421&idx=1&sn=30972cc727df5d6b837709fd7f5ed1a8\",\n \"管理科学部关于征集2026年度重大项目立项领域建议的通告\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247534593&idx=1&sn=da367960049d7f5a0ea960572f5f5403\",\n \"资料下载 | 十五五规划建议全文及说明\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247534593&idx=2&sn=7f9516f40cbafbcb1012d5999612157a\",\n \"每周安全速递³⁶⁵ | 研究人员剖析新兴网络犯罪联盟SLH\": \"https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247497367&idx=1&sn=d2f1175a442c9fd432f8dcae74873635\",\n \"动态分析丨印尼测试新型AI无人潜航器\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NTYyODgyNg==&mid=2247508576&idx=1&sn=33b1611c72acffcf6ecf53afc777d954\",\n \"埃尔比特系统公司推出Condor MS多光谱战略吊舱系统\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NTYyODgyNg==&mid=2247508576&idx=2&sn=62ebd438a85a7042d9e642390c7f7caf\",\n \"专访xiya：从破解到构建，一名团队负责人的安全观【T00ls人物专访第十九期】\": \"https://mp.weixin.qq.com/s?__biz=Mzg3NzYzODU5NQ==&mid=2247485503&idx=1&sn=1e11184b483ef175f0b1c95538146033\",\n \"补天专属【全年积分挑战赛】目前排名公布！发起最终冲刺！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509629&idx=1&sn=d785c0ba85d6bbaac14eef6e8438bde0\",\n \"秋冬福利季｜速来⏳10个漏洞轻松赢最新款周边！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509629&idx=2&sn=8f6f1eb82c1f9c446e57d9186f8438c6\",\n \"2025人工智能赋能新型工业化论坛暨工业互联网一体化进园区“百城千园行”重庆站（两江新区）将于11月12日在重庆市召开！\": \"https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247594251&idx=1&sn=585e3e0af9ad398469b0e7a57896fae3\",\n \"中国信通院工业互联网与物联网研究所发布《物联网产业规模测算指标体系》\": \"https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247594251&idx=2&sn=da69bbd59c37454b12281bb09d3b615d\",\n \"学术报告|高效零知识证明以及在大模型中的应用\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NDczNDc4NA==&mid=2247495807&idx=1&sn=6a19f530e6f7a268617352df8386dff8\",\n \"DudeSuite 漏洞更新播报 20251107\": \"https://mp.weixin.qq.com/s?__biz=MzA3ODUzNzMzOQ==&mid=2648562853&idx=1&sn=bc0d16218fecc81ef5aa64ede6a8b026\",\n \"ChatGPT曝七大漏洞，可诱使AI泄露记忆与聊天记录\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789373&idx=1&sn=23dbbc6520d871be580baf1455ec6516\",\n \"安全大厂实验室的《Web漏洞分析与防范实战》什么水平？\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247521259&idx=1&sn=921de1bb763fcf63e63342bdd12bc1fa\",\n \"春秋云镜靶场渗透测试--Certify\": \"https://mp.weixin.qq.com/s?__biz=MzkyMDcyODYwNw==&mid=2247487541&idx=1&sn=d7a21a658c9079529e5cfa9e6019206c\",\n \"超越渗透测试！每家企业都应开展的10项实战化网络安全演练\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139258&idx=1&sn=c1e16d728603b322c78798c3caa2cac9\",\n \"中国牵头制定的工业5G国际标准发布；92%漏洞检测率!OpenAI推出AI安全研究员颠覆传统防御模式 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139258&idx=2&sn=1c5e3e24e36adb99a54567b2b477a1a7\",\n \"佰倬创新应用入选2025物联网密码应用成果汇编\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODAyMjQxMg==&mid=2247486438&idx=1&sn=013a1266332fe74b2a9ff7ca5339c33e\"\n },\n \"SpiderLabs Blog\": {\n \"The Cat's Out of the Bag: A 'Meow Attack' Data Corruption Campaign Simulation via MAD-CAT\": \"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/the-cats-out-of-the-bag-a-meow-attack-data-corruption-campaign-simulation-via-mad-cat/\"\n },\n \"GuidePoint Security\": {\n \"5 Signs Your Risk Register is Stuck in the Past\": \"https://www.guidepointsecurity.com/blog/5-signs-your-risk-register-is-stuck-in-the-past/\"\n },\n \"Malwarebytes\": {\n \"Malwarebytes scores 100% in AV-Comparatives Stalkerware Test 2025\": \"https://www.malwarebytes.com/blog/news/2025/11/malwarebytes-scores-100-in-av-comparatives-stalkerware-test-2025\",\n \"Fake CAPTCHA sites now have tutorial videos to help victims install malware\": \"https://www.malwarebytes.com/blog/news/2025/11/fake-captcha-sites-now-have-tutorial-videos-to-help-victims-install-malware\"\n },\n \"Horizon3.ai\": {\n \"Black Unicorn Awards 2025\": \"https://horizon3.ai/news/awards/black-unicorn-awards-2025/\"\n },\n \"Intigriti\": {\n \"Exploiting JWT vulnerabilities: A complete guide\": \"https://www.intigriti.com/researchers/blog/hacking-tools/exploiting-jwt-vulnerabilities\"\n },\n \"The Trail of Bits Blog\": {\n \"Balancer hack analysis and guidance for the DeFi ecosystem\": \"https://blog.trailofbits.com/2025/11/07/balancer-hack-analysis-and-guidance-for-the-defi-ecosystem/\"\n },\n \"SentinelOne\": {\n \"The Good, the Bad and the Ugly in Cybersecurity – Week 45\": \"https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-45-7/\"\n },\n \"VMRay\": {\n \"How to turn Defender & Sentinel alerts into actionable threat intelligence\": \"https://www.vmray.com/how-to-turn-defender-sentinel-alerts-into-actionable-threat-intelligence/\"\n },\n \"Security Blog | Praetorian\": {\n \"How I Found the Worst ASP.NET Vulnerability — A $10K Bug (CVE-2025-55315)\": \"https://www.praetorian.com/blog/how-i-found-the-worst-asp-net-vulnerability-a-10k-bug-cve-2025-55315/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"2023 年亚马逊湖泊温度飙升\": \"https://www.solidot.org/story?sid=82745\"\n },\n \"黑海洋 - Wiki\": {\n \"ParallelChat：多AI并行对话桌面应用，让ChatGPT、Kimi、DeepSeek等大模型同步作答\": \"https://blog.upx8.com/4897\"\n },\n \"安全分析与研究\": {\n \"伪装成奇安信专杀工具CS木马样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494156&idx=1&sn=8aa2b3f633deacf36634e297e0ad64a0\"\n },\n \"看雪学苑\": {\n \"SDC2025 议题回顾 | 大模型供应链安全的熵增效应：风险挖掘与熵减策略\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=1&sn=39283ac5055f746948790e5c713dfb51\",\n \"看雪双11·课程福利——满额赠《加密与解密》第五版（签名版）、VIP年卡、T恤等\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=2&sn=b2a1a614e41aa0094176189adbde0ea0\",\n \"本周职位更新！速速投简历\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=3&sn=ea06487f77ee940f8f83ff33418d4817\",\n \"NVIDIA App曝高危漏洞，紧急更新防黑客入侵！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=4&sn=496a77a25e59671f8e5c5b380d758c1a\"\n },\n \"代码卫士\": {\n \"Chrome紧急修复 WebGPU 和 V8引擎中的三个高危漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524343&idx=1&sn=bafd6d107e51fa5d67f552a22dd26211\",\n \"思科修复 Contact Center Appliance 中的多个严重漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524343&idx=2&sn=54f09a81eb6da8e9b06f5a17b8b70644\"\n },\n \"威努特安全网络\": {\n \"日经新闻在线平台遭入侵，瑞典IT供应商客户数据泄露|一周特辑\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651137285&idx=1&sn=8213f80b54c32cb7b6c97966874fc5bb\",\n \"倒计时1天 | 1+1的无限可能，1起奔赴新未来\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651137285&idx=2&sn=03026acad35d94ca4a1a3bde23c04510\"\n },\n \"腾讯安全应急响应中心\": {\n \"A.S.E 2.0 正式发布 | 开放生态 · 动静协同 · 让 AI 编程安全可量化\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207584&idx=1&sn=96d9b909bb8a2634da0aa30b92667dfb\"\n },\n \"黑鸟\": {\n \"全球实时高清网络直播摄像头网站\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183502&idx=1&sn=aa9f5f7ee36e0914c8a5173445e0ed96\"\n },\n \"奇安信 CERT\": {\n \"安全热点周报：黑客利用 Gladinet 文件共享软件中的零日漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504113&idx=1&sn=ebbfa1f912a759a56775f303c03ba0ee\"\n },\n \"二道情报贩子\": {\n \"反反Ai造假退款手段\": \"https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489752&idx=1&sn=c73b429b8b5d952063149539b6194767\"\n },\n \"天御攻防实验室\": {\n \"Renew｜中美战略竞争下的网络空间冲突\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486583&idx=1&sn=7a2b939aefe787d279a4665d9524e345\"\n },\n \"吾爱破解论坛\": {\n \"【开放注册公告】吾爱破解论坛2025年11月11日光棍节开放注册公告\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143158&idx=1&sn=a6995fb20a83d854f718ed7d104fb662\"\n },\n \"腾讯玄武实验室\": {\n \"每日安全动态推送(25/11/7)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960246&idx=1&sn=39b0d9f440cdf13d99db1e8af6e3905b\"\n },\n \"dotNet安全矩阵\": {\n \".NET 通过 LINQ 投影加载程序集实现命令执行\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500894&idx=1&sn=c3c917eb3fa8268ac1592741c312559b\",\n \".NET 实战：通过FSharp白名单执行命令绕过防护\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500894&idx=2&sn=27757a3b176e4a56be0d51c9303bc61b\"\n },\n \"天黑说嘿话\": {\n \"OpenAI发布安全智能体Aardvark：你的下一位网络安全专家，可能不是人类\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485069&idx=1&sn=7994dcab8232559c3e13f560608e3ff4\"\n },\n \"安全客\": {\n \"ChatGPT曝七大漏洞，可诱使AI泄露记忆与聊天记录\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789373&idx=1&sn=23dbbc6520d871be580baf1455ec6516\"\n },\n \"丁爸 情报分析师的工具箱\": {\n \"【资料】战略与预算评估中心（CSBA）研究报告\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152863&idx=1&sn=076990647833b3a0f846bcf0b9aa649e\"\n },\n \"微步在线\": {\n \"声明\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650185072&idx=1&sn=af167239aba5027423cfec264d104a64\"\n },\n \"补天平台\": {\n \"补天专属【全年积分挑战赛】目前排名公布！发起最终冲刺！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509629&idx=1&sn=d785c0ba85d6bbaac14eef6e8438bde0\",\n \"秋冬福利季｜速来⏳10个漏洞轻松赢最新款周边！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509629&idx=2&sn=8f6f1eb82c1f9c446e57d9186f8438c6\"\n },\n \"M01N Team\": {\n \"每周蓝军技术推送（2025.11.1-11.7）\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494499&idx=1&sn=f8e0a8774a42c096b51fb030a289d5ac\"\n },\n \"极客公园\": {\n \"复盘大疆 Pocket 的七年：从「定义产品」到「定义时代」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653090450&idx=1&sn=9b1cd05528a894225f16e2f7c2b9ca31\",\n \"当一家传统车企，终于决定「师中长技」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653090450&idx=2&sn=3c0cecada4704349c0d8ac51f8ea815a\",\n \"有些答案，听 AI 说一百遍，不如和「最有料的人」聊一次\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653090360&idx=1&sn=456bf391de78443153fac773a583efda\",\n \"马斯克1万亿美元薪酬方案获特斯拉股东批准；东方甄选孙东旭离职；今年 OpenAI 年化收入或将达 200 亿美元 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653090335&idx=1&sn=c0ef96cd203c79e7c45bc971c6beb6e3\"\n },\n \"XCTF联赛\": {\n \"RCTF 2025 | 星海启航，砺行致远\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247516079&idx=1&sn=2b4586bdbe32c65abe3e99e154b4fc43\"\n },\n \"默安科技\": {\n \"清晨的从容：一份无人值守报告背后的人工智能安全革命\": \"https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247501453&idx=1&sn=23477cb8f67a9f95717dd01158cf11e5\"\n },\n \"奇安信威胁情报中心\": {\n \"每周高级威胁情报解读(2025.10.31~11.06)\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247516573&idx=1&sn=41e4287a07c23e992b7a7d5f13ebc09a\"\n },\n \"复旦白泽战队\": {\n \"CCS'25 杰出论文奖: Web 应用越权漏洞检测新进展\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247496499&idx=1&sn=d6dcde468457c835229d2b83687fb0a5\"\n },\n \"阿里安全响应中心\": {\n \"王牌A计划——九月月度奖励\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998227&idx=1&sn=3f34bf6581c834cf612cbcce15ec2e2c\"\n },\n \"嘶吼专业版\": {\n \"动态自适应欺骗防御：重构网络安全防御新格局\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585207&idx=1&sn=88ba03f38b2df070d86cc6134bf7aded\",\n \"倒计时三天！2025年网络安全“金帽子”年度评选活动即将截止报名\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585207&idx=2&sn=fedd9c47dcbdb170fdcfafc055c03251\"\n },\n \"字节跳动安全中心\": {\n \"一文读懂｜ByteSRC AI业务挖什么、怎么评、奖多少\": \"https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495693&idx=1&sn=e77e89079ca827718f304c8086874ec5\"\n },\n \"火绒安全\": {\n \"抽奖啦 | 让温暖，在这个冬天续“杯”\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527171&idx=1&sn=7bd29fd2e51f62418093f61a9a95fa5a\",\n \"【火绒安全周报】莆田网警破获诈骗案/全球数据泄露578亿条\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527171&idx=2&sn=05155bda0da730a8a12cc8df4a3afd2b\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527171&idx=3&sn=d48ef60b96be67d1e008a52c6d47faa4\"\n },\n \"中国信息安全\": {\n \"聚焦 | 2025年世界互联网大会乌镇峰会开幕 李书磊出席开幕式并发表主旨讲话\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=1&sn=e74a7f043c1fc094179993b3b4699d3b\",\n \"国家卫健委等三部门发布医务人员健康科普“十不准”！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=2&sn=d783ebb6f797f1ede14321383f5825ba\",\n \"国家卫健委等五部门发布《关于促进和规范“人工智能+医疗卫生”应用发展的实施意见》（附全文）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=3&sn=e53636da8d73e33c668833300780b4f8\",\n \"通知 | 《大模型一体机产品安全基本要求（征求意见稿）》等2项网络安全标准实践指南公开征求意见（附下载）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=4&sn=763c154a8a8cd4d61b4ee2113c186db8\",\n \"一图读懂 | 《关于促进和规范“人工智能+医疗卫生”应用发展的实施意见》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=5&sn=5610b1f0fca4a52d1fa626b6e0c4ca41\"\n },\n \"信息安全国家工程研究中心\": {\n \"【二十四节气】立冬 | 霜轻未杀萋萋草，日暖初干漠漠沙。\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247501451&idx=1&sn=2f880886f8f254e136de2981c214516b\"\n },\n \"安全圈\": {\n \"【安全圈】ChatGPT曝出七大安全漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=1&sn=8f70b2c8f6cc8495d0e6692ce5d981d8\",\n \"【安全圈】荷兰区域电视台RTV Noord遭遇网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=2&sn=17e5abc2bbcceb99144c2ecd8183bc74\",\n \"【安全圈】现代汽车IT服务遭入侵：逾270万车主面临数据泄露风险\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=3&sn=9597a4310e1a0ccd9d147d6ff5c21720\",\n \"【安全圈】NVIDIA 修复 Windows 版 NVApp 严重漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=4&sn=cd862a7afb4d45dad113fd278b270cb1\"\n },\n \"360数字安全\": {\n \"360首席科学家潘剑锋当选世界互联网大会人工智能专委会副主任委员\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582822&idx=1&sn=6ec9311498151e9d1260d71ad2fec74d\",\n \"勒索月报 | 360披露10月勒索软件流行态势：AI“养蛊”新变种，防御难度陡增\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582822&idx=2&sn=fed9869501a44970e9cdee1f4dc654c4\"\n },\n \"慢雾科技\": {\n \"活动回顾｜慢雾(SlowMist)亮相第十届香港金融科技周 2025\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247503653&idx=1&sn=bd9bc4dc267d404f27c32716db8eb43b\"\n },\n \"数世咨询\": {\n \"如何评估并选择合适的 AI-SOC 平台？\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540726&idx=1&sn=71e7881ab056aebb03c42c8f9639e039\"\n },\n \"长亭科技\": {\n \"百年沉淀，科技赋能！商丘三院 AI 咨询秒级响应，解锁医疗服务新体验！\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651389854&idx=1&sn=970a33ef655e860a083b499314caedb4\",\n \"长亭科技朱文雷：驾驭变革，智能增长\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651389854&idx=2&sn=113744089ee468f1f61da43798561d88\"\n },\n \"悬镜安全\": {\n \"权威认可 | 悬镜安全斩获多项信通院“2025年度OSCAR开源”殊荣\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647797064&idx=1&sn=7d33f2fe6f97c07b6f368f7dd98d42a0\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Slot Gacor: The Rise of Online Casino Spam\": \"https://blog.sucuri.net/2025/11/slot-gacor-the-rise-of-online-casino-spam.html\",\n \"Washington Post confirms data breach linked to Oracle hacks\": \"https://techcrunch.com/2025/11/07/washington-post-confirms-data-breach-linked-to-oracle-hacks/\",\n \"Malicious NuGet packages drop disruptive 'time bombs'\": \"https://www.bleepingcomputer.com/news/security/malicious-nuget-packages-drop-disruptive-time-bombs/\",\n \"Microsoft testing faster Quick Machine Recovery in Windows 11\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-testing-faster-quick-machine-recovery-in-windows-11/\",\n \"Don't call it Cyber Command 2.0: Master plan for digital forces will take years to implement\": \"https://therecord.media/revised-cyber-command-master-plan-dod-pentagon\",\n \"New LandFall spyware exploited Samsung zero-day via WhatsApp messages\": \"https://www.bleepingcomputer.com/news/security/new-landfall-spyware-exploited-samsung-zero-day-via-whatsapp-messages/\",\n \"QNAP fixes seven NAS zero-day flaws exploited at Pwn2Own\": \"https://www.bleepingcomputer.com/news/security/qnap-fixes-seven-nas-zero-day-vulnerabilities-exploited-at-pwn2own/\",\n \"Congressional Budget Office implementing new security controls following cyberattack\": \"https://therecord.media/cbo-implements-controls-following-cyberattack-reports\",\n \"Congressional Budget Office confirms it was hacked\": \"https://techcrunch.com/2025/11/07/congressional-budget-office-confirms-it-was-hacked/\",\n \"In aumento gli attacchi russi e lo spionaggio contro Ucraina ed Europa. Il report di ESET\": \"https://www.securityinfo.it/2025/11/07/in-aumento-gli-attacchi-russi-e-lo-spionaggio-contro-ucraina-ed-europa-il-report-di-eset/\",\n \"Newly identified Android spyware appears to be from a commercial vendor\": \"https://therecord.media/landfall-spyware-middle-east-appears-commercial-grade\",\n \"AI e commercio online: lo scontro Amazon-Perplexity tra trasparenza e privacy\": \"https://www.cybersecurity360.it/legal/ai-e-commercio-online-lo-scontro-amazon-perplexity-tra-trasparenza-e-privacy/\",\n \"Sintesi riepilogativa delle campagne malevole nella settimana del 1 – 7 novembre\": \"https://cert-agid.gov.it/news/sintesi-riepilogativa-delle-campagne-malevole-nella-settimana-del-1-7-novembre/\",\n \"Cisco: Actively exploited firewall flaws now abused for DoS attacks\": \"https://www.bleepingcomputer.com/news/security/cisco-actively-exploited-firewall-flaws-now-abused-for-dos-attacks/\",\n \"ID verification laws are fueling the next wave of breaches\": \"https://www.bleepingcomputer.com/news/security/id-verification-laws-are-fueling-the-next-wave-of-breaches/\",\n \"Mal di compliance\": \"https://www.cybersecurity360.it/cultura-cyber/mal-di-compliance/\",\n \"Red Teaming LLMs 2025 – Offensive Security Meets Generative AI\": \"https://www.darknet.org.uk/2025/11/red-teaming-llms-2025-offensive-security-meets-generative-ai/\",\n \"Australia Strengthens Regional Cyber Partnerships to Bolster Security Across the Asia-Pacific\": \"https://cyble.com/blog/australia-asia-pacific-cybersecurity-partnerships/\",\n \"Leak confirms Google Gemini 3 Pro and Nano Banana 2 could launch soon\": \"https://www.bleepingcomputer.com/news/artificial-intelligence/leak-confirms-google-gemini-3-pro-and-nano-banana-2-could-launch-soon/\",\n \"Videosorveglianza veicolare: ecco perché è stato bloccato il progetto di Bolzano\": \"https://www.cybersecurity360.it/legal/videosorveglianza-veicolare-ecco-perche-e-stato-bloccato-il-progetto-di-bolzano/\",\n \"La nuova governance: integrare GDPR e NIS 2 per guidare efficacemente le organizzazioni\": \"https://www.cybersecurity360.it/legal/la-nuova-governance-integrare-gdpr-e-nis-2-per-guidare-efficacemente-le-organizzazioni/\",\n \"U.S. Congressional Budget Office hit by suspected foreign cyberattack\": \"https://www.bleepingcomputer.com/news/security/us-congressional-budget-office-hit-by-suspected-foreign-cyberattack/\"\n },\n \"安全内参\": {\n \"绝密档案：最强网络攻击试图颠覆对立国家政权\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515177&idx=1&sn=1341cfdaee2aa6c60474ba6db88b513f\",\n \"欧洲学者建议欧洲摆脱对美国的网络安全依赖\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515177&idx=2&sn=91d551ec40a0da643d85c19f76424ce4\"\n },\n \"Schneier on Security\": {\n \"Friday Squid Blogging: Squid Game: The Challenge, Season Two\": \"https://www.schneier.com/blog/archives/2025/11/friday-squid-blogging-squid-game-the-challenge-season-two.html\",\n \"Faking Receipts with AI\": \"https://www.schneier.com/blog/archives/2025/11/faking-receipts-with-ai.html\"\n },\n \"迪哥讲事\": {\n \"【SRC实战】通过FUZZ挖掘高危漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498521&idx=1&sn=9306378db8f472d0d916be7e9389dcfc\"\n },\n \"Yak Project\": {\n \"IRify 性能升级（三）：3GB缩至500MB，内存优化完整复盘\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529017&idx=1&sn=12b8e1576324391ac1ce925710b590e1\"\n },\n \"HackerNews\": {\n \"CLOP 勒索软件团伙宣称入侵《华盛顿邮报》\": \"https://hackernews.cc/archives/61433\",\n \"黑客利用 Windows Hyper-V 隐藏 Linux 虚拟机，规避 EDR 检测\": \"https://hackernews.cc/archives/61431\",\n \"意大利通信业高管披露遭 Paragon 间谍软件攻击\": \"https://hackernews.cc/archives/61429\",\n \"教育科技公司因数据安全措施不力引发黑客攻击，被罚 510 万美元\": \"https://hackernews.cc/archives/61427\",\n \"内华达州政府拒绝支付赎金，称有信心恢复数据\": \"https://hackernews.cc/archives/61425\",\n \"锁定乌克兰粮食命脉，俄罗斯发动数据擦除软件攻击\": \"https://hackernews.cc/archives/61421\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"ISC Stormcast For Friday, November 7th, 2025 https://isc.sans.edu/podcastdetail/9690, (Fri, Nov 7th)\": \"https://isc.sans.edu/diary/rss/32458\"\n },\n \"Securityinfo.it\": {\n \"In aumento gli attacchi russi e lo spionaggio contro Ucraina ed Europa. Il report di ESET\": \"https://www.securityinfo.it/2025/11/07/in-aumento-gli-attacchi-russi-e-lo-spionaggio-contro-ucraina-ed-europa-il-report-di-eset/?utm_source=rss&utm_medium=rss&utm_campaign=in-aumento-gli-attacchi-russi-e-lo-spionaggio-contro-ucraina-ed-europa-il-report-di-eset\"\n },\n \"安全牛\": {\n \"超越渗透测试！每家企业都应开展的10项实战化网络安全演练\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139258&idx=1&sn=c1e16d728603b322c78798c3caa2cac9\",\n \"中国牵头制定的工业5G国际标准发布；92%漏洞检测率!OpenAI推出AI安全研究员颠覆传统防御模式 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139258&idx=2&sn=1c5e3e24e36adb99a54567b2b477a1a7\"\n },\n \"ICT Security Magazine\": {\n \"L’Italia e le E-Evidence: architettura tecnico-giuridica del nuovo ecosistema investigativo transfrontaliero\": \"https://www.ictsecuritymagazine.com/articoli/e-evidence/\",\n \"Intelligenza artificiale e machine learning nelle indagini forensi digitali: rivoluzione tecnologica tra potenzialità e sfide giuridiche\": \"https://www.ictsecuritymagazine.com/notizie/indagini-forensi-digitali/\"\n },\n \"Full Disclosure\": {\n \"Re: [FD]\\t: \\\"Glass Cage\\\" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)\": \"https://seclists.org/fulldisclosure/2025/Nov/15\",\n \"Re: : \\\"Glass Cage\\\" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)\": \"https://seclists.org/fulldisclosure/2025/Nov/14\",\n \"runc container breakouts via procfs writes: CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881\": \"https://seclists.org/fulldisclosure/2025/Nov/13\",\n \"OXAS-ADV-2025-0002: OX App Suite Security Advisory\": \"https://seclists.org/fulldisclosure/2025/Nov/12\",\n \"APPLE-SA-11-05-2025-1 iOS 18.7.2 and iPadOS 18.7.2\": \"https://seclists.org/fulldisclosure/2025/Nov/11\",\n \"APPLE-SA-11-03-2025-9 Xcode 26.1\": \"https://seclists.org/fulldisclosure/2025/Nov/10\",\n \"APPLE-SA-11-03-2025-8 Safari 26.1\": \"https://seclists.org/fulldisclosure/2025/Nov/9\",\n \"APPLE-SA-11-03-2025-7 visionOS 26.1\": \"https://seclists.org/fulldisclosure/2025/Nov/8\",\n \"APPLE-SA-11-03-2025-6 watchOS 26.1\": \"https://seclists.org/fulldisclosure/2025/Nov/7\",\n \"APPLE-SA-11-03-2025-5 tvOS 26.1\": \"https://seclists.org/fulldisclosure/2025/Nov/6\",\n \"APPLE-SA-11-03-2025-4 macOS Sonoma 14.8.2\": \"https://seclists.org/fulldisclosure/2025/Nov/5\",\n \"APPLE-SA-11-03-2025-3 macOS Sequoia 15.7.2\": \"https://seclists.org/fulldisclosure/2025/Nov/4\",\n \"APPLE-SA-11-03-2025-2 macOS Tahoe 26.1\": \"https://seclists.org/fulldisclosure/2025/Nov/3\",\n \"APPLE-SA-11-03-2025-1 iOS 26.1 and iPadOS 26.1\": \"https://seclists.org/fulldisclosure/2025/Nov/2\",\n \"Re: [oss-security] runc container breakouts via procfs writes: CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881\": \"https://seclists.org/fulldisclosure/2025/Nov/1\"\n },\n \"白帽子章华鹏\": {\n \"2026年安全规划之开源安全治理\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650238117&idx=1&sn=9e548aea6e4bf54fe78f0e3f1528e227\"\n },\n \"云鼎实验室\": {\n \"238支全球顶尖战队上演AI攻防巅峰对决，腾讯云黑客松-智能渗透挑战赛即将开启！\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496936&idx=1&sn=28a7612170846b9621fc2b933614dfd2\"\n },\n \"BorderGate\": {\n \"Driver Signature Enforcement\": \"https://www.bordergate.co.uk/driver-signature-enforcement/\"\n },\n \"Security Affairs\": {\n \"LANDFALL spyware exploited Samsung zero-day CVE-2025-21042 in Middle East attacks\": \"https://securityaffairs.com/184331/security/landfall-spyware-exploited-samsung-zero-day-cve-2025-21042-in-middle-east-attacks.html\",\n \"Cisco fixes critical UCCX flaw allowing Root command execution\": \"https://securityaffairs.com/184321/security/cisco-fixes-critical-uccx-flaw-allowing-root-command-execution.html\",\n \"Russia-linked APT InedibleOchotense impersonates ESET to deploy backdoor on Ukrainian systems\": \"https://securityaffairs.com/184303/apt/russia-linked-apt-inedibleochotense-impersonates-eset-to-deploy-backdoor-on-ukrainian-systems.html\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"AI-Obfuscating Malware, China Influence Ops, and Meta’s Fraud Fortune and Jason Wood - SWN #527\": \"http://sites.libsyn.com/18678/ai-obfuscating-malware-china-influence-ops-and-metas-fraud-fortune-and-jason-wood-swn-527\"\n },\n \"The Hacker News\": {\n \"Samsung Zero-Click Flaw Exploited to Deploy LANDFALL Android Spyware via WhatsApp\": \"https://thehackernews.com/2025/11/samsung-zero-click-flaw-exploited-to.html\",\n \"From Log4j to IIS, China’s Hackers Turn Legacy Bugs into Global Espionage Tools\": \"https://thehackernews.com/2025/11/from-log4j-to-iis-chinas-hackers-turn.html\",\n \"Hidden Logic Bombs in Malware-Laced NuGet Packages Set to Detonate Years After Installation\": \"https://thehackernews.com/2025/11/hidden-logic-bombs-in-malware-laced.html\",\n \"Enterprise Credentials at Risk – Same Old, Same Old?\": \"https://thehackernews.com/2025/11/enterprise-credentials-at-risk-same-old.html\",\n \"Google Launches New Maps Feature to Help Businesses Report Review-Based Extortion Attempts\": \"https://thehackernews.com/2025/11/google-launches-new-maps-feature-to.html\",\n \"Vibe-Coded Malicious VS Code Extension Found with Built-In Ransomware Capabilities\": \"https://thehackernews.com/2025/11/vibe-coded-malicious-vs-code-extension.html\"\n },\n \"Dark Space Blogspot\": {\n \"Indicatori Per Rotazione Di Capitali e Speculazione (Investimenti e Trading)\": \"http://darkwhite666.blogspot.com/2025/11/indicatori-per-rotazione-di-capitali-e.html\"\n }\n}"}, "2d04428de7debb0eae6c84d2084679472921e6d7": {"t": 1785772245.7678132, "n": 54925, "h": "ad35f23b552300fc", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-11-07 Review\": \"http://www.sec-wiki.com/?2025-11-07\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"黑客正滥用Windows Hyper-V功能隐匿Linux虚拟机，以规避终端检测与响应机制的检测\": \"https://www.anquanke.com/post/id/313062\",\n \"谷歌发出警告：新型PROMPTFLUX恶意软件正利用Gemini API实现源代码自我重写\": \"https://www.anquanke.com/post/id/313072\",\n \"开源安全模型OpenGuardrails发布，旨在为现实世界AI应用保驾护航\": \"https://www.anquanke.com/post/id/313066\",\n \"为遵循欧盟监管要求，苹果将于欧盟地区关闭Apple Watch的自动Wi-Fi同步功能\": \"https://www.anquanke.com/post/id/313079\",\n \"美国CISA发布警告：Gladinet CentreStack与Triofox文件共享软件中的漏洞正遭攻击利用\": \"https://www.anquanke.com/post/id/313069\",\n \"恶意软件Gootloader重出江湖，采用ZIP文件新策略隐匿恶意负载\": \"https://www.anquanke.com/post/id/313076\",\n \"远程控制木马EndClient通过滥用遭泄露的代码签名证书来规避防病毒软件检测\": \"https://www.anquanke.com/post/id/313056\",\n \"二进制供应链安全平台Binarly Transparency Platform 3.5发布，新增对Java归档文件与JVM字节码的深度支持\": \"https://www.anquanke.com/post/id/313053\",\n \"思科发布警告：黑客正积极在野利用其ASA与FTD防火墙中的零日远程代码执行漏洞\": \"https://www.anquanke.com/post/id/313049\",\n \"Django框架中存在多处安全漏洞，可引发SQL注入与拒绝服务攻击\": \"https://www.anquanke.com/post/id/313045\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"动态自适应欺骗防御：重构网络安全防御新格局\": \"https://www.4hou.com/posts/RX90\"\n },\n \"奇安信攻防社区\": {\n \"Calibre代码审计集合\": \"https://forum.butian.net/share/4635\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"hop.bg | web app | Cross-site scripting (reflected)\": \"https://cxsecurity.com/issue/WLB-2025110008\",\n \"3kits template via imgGallery.php SQL Injection id parameter\": \"https://cxsecurity.com/issue/WLB-2025110007\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Fri Nov 7 11:57:28 UTC 2025\": \"https://github.com/trickest/cve/commit/b38a0d7a83fbf635fc87ec6ca536159699fc1823\"\n },\n \"Tenable Blog\": {\n \"Cybersecurity Snapshot: AI Will Take Center Stage in Cyber in 2026, Google Says, as MITRE Revamps ATT&CK Framework\": \"https://www.tenable.com/blog/cybersecurity-snapshot-agentic-ai-security-best-practices-mitre-attack-v18-11-07-2025\"\n },\n \"Microsoft Security Blog\": {\n \"​​Whisper Leak: A novel side-channel attack on remote language models\": \"https://www.microsoft.com/en-us/security/blog/2025/11/07/whisper-leak-a-novel-side-channel-cyberattack-on-remote-language-models/\"\n },\n \"Sucuri Blog\": {\n \"Slot Gacor: The Rise of Online Casino Spam\": \"https://blog.sucuri.net/2025/11/slot-gacor-the-rise-of-online-casino-spam.html\"\n },\n \"一个被知识诅咒的人\": {\n \"【JavaScript】React 19革命：让你的前端UI如闪电般迅捷\": \"https://blog.csdn.net/nokiaguy/article/details/154437425\",\n \"揭秘Java 17：用前沿特性铸就极速Web帝国\": \"https://blog.csdn.net/nokiaguy/article/details/154437373\"\n },\n \"Doonsec's feed\": {\n \"自研C2【XC2】1.0.4版本发布，新增文件管理模块【文件列表预览、文件预览、文件上传下载删除】\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247490793&idx=1&sn=bb89ae1000d192650ae651c0393bf940\",\n \"基于特征分析的智能网联汽车数据分级方法研究\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628322&idx=1&sn=a94776c722cf52255fda4cc771dfd823\",\n \"智能汽车网络安全与信息安全基础培训课程 2025\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628322&idx=2&sn=986e3b1eb3d84d4d1053060b7c6f9031\",\n \"智能网联汽车信息安全风险及应对举措\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628322&idx=3&sn=229e74a0df5db1d2e33bbb5c1084e5cb\",\n \"近五年投资理财笔记复盘\": \"https://mp.weixin.qq.com/s?__biz=MzU0MjExNDkyMQ==&mid=2247486239&idx=1&sn=1213cce700684ea21752914f58c6bfec\",\n \"AI到底能不能自主完美入侵系统？\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MzA4NTM0OA==&mid=2247494009&idx=1&sn=350665e807772641ae3f189486d1d631\",\n \"限时免费报名！第27届高交会网络安全前沿科技与创新发展论坛即将开幕\": \"https://mp.weixin.qq.com/s?__biz=MzU0Mzk0NDQyOA==&mid=2247522838&idx=1&sn=b1d51fd4c49d17b4deb85ddb072735d2\",\n \"滴滴开源走进浙江大学｜共话开源实践与高校共建\": \"https://mp.weixin.qq.com/s?__biz=MzU1ODEzNjI2NA==&mid=2247574747&idx=1&sn=47a252d23c1c9077a5c30469317b18e8\",\n \"密码重置漏洞挖掘指南：从原理到实战的完整路径\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247490055&idx=1&sn=a91b235f679c8c88d77574a91738b45c\",\n \"国家标准支撑《网络数据安全管理条例》生效施行（v1.0）\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175031&idx=1&sn=f29b2b75a4a4dc4fd32b767888a003b5\",\n \"《大模型一体机产品安全基本要求（征求意见稿）》等2项网络安全标准实践指南公开征求意见\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175031&idx=2&sn=708a1e2e2a42cf67d23bbb2a44b48fd6\",\n \"CertiK联合创始人顾荣辉出席中国国际金融论坛·香港峰会：探讨数字资产合规化与全球监管新格局\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247504782&idx=1&sn=80799c00b83a501e9220a6ac323fbf1e\",\n \"漏洞无处可藏：OWASP dependency_check助你高效挖掘安全隐患\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797319&idx=1&sn=2b853936db4e5d2420749e9bb634f1ef\",\n \"把敌人带进训练场：用真实APT样本打造实战攻防演练场景\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDAwNzM3MQ==&mid=2247522251&idx=1&sn=7fcb524124fa07bb4207a2a421394ac4\",\n \"论文研读与思考|TrafficFormer:AnEfficient Pre-trainedModelforTrafficData\": \"https://mp.weixin.qq.com/s?__biz=MzU4NjcxMTY3Mg==&mid=2247488388&idx=1&sn=4bc0c6bb8acc37fe96cc6aaed9f80323\",\n \"工业IoT 必备！基于.NET生态的WPF工业级控件，支持西门子、欧姆龙、施耐德等Modbus工控设备可视化\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454941381&idx=1&sn=da411b12922eade1f6712c3a4e950303\",\n \"AI时代银行数据安全的挑战与应对浅析\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932902&idx=1&sn=5fc3a91d1bd1e77ab1f16988fd4fedd9\",\n \"AI快讯：劳埃德银行推进采用AI技术，“金蝶云”全面升级为“金蝶AI”\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932902&idx=2&sn=3278bce2e04ffcb32fc5f7996a5d38c2\",\n \"建信金租人工智能+应用项目供应商征集\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932902&idx=3&sn=4e32f1cdaa56208778e418fa2730a73d\",\n \"【安全圈】ChatGPT曝出七大安全漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=1&sn=8f70b2c8f6cc8495d0e6692ce5d981d8\",\n \"【安全圈】荷兰区域电视台RTV Noord遭遇网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=2&sn=17e5abc2bbcceb99144c2ecd8183bc74\",\n \"【安全圈】现代汽车IT服务遭入侵：逾270万车主面临数据泄露风险\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=3&sn=9597a4310e1a0ccd9d147d6ff5c21720\",\n \"【安全圈】NVIDIA 修复 Windows 版 NVApp 严重漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=4&sn=cd862a7afb4d45dad113fd278b270cb1\",\n \"【AI安全】函数调用（Function Call）\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzU2NDgxNQ==&mid=2247484022&idx=1&sn=8d984d4d0759eff698d33dd68e4ad97f\",\n \"CPS安全丨OT安全不伤身，CPS安全再进化（附PPT全文）\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247535637&idx=1&sn=ae5bff3c4e98b6514fb26afd48e35946\",\n \"直播页面上线！一文get“AI赋能制造数智化暨工业智能边缘计算2025年会”全场~\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247535637&idx=2&sn=c48761455d41578749397cd6cc6f2621\",\n \"个人edu挖洞总结\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzgzMjkxOQ==&mid=2247485887&idx=1&sn=0d0d191a5d6a99c479b7358edb3775ab\",\n \"连续三年！腾讯云列入Gartner®《中国托管检测和响应服务市场指南》代表供应商\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247528413&idx=1&sn=e1466f2a45f6a5b072f494a5b9330c63\",\n \"238支全球顶尖战队上演AI攻防巅峰对决，腾讯云黑客松-智能渗透挑战赛即将开启！\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496936&idx=1&sn=28a7612170846b9621fc2b933614dfd2\",\n \"渊亭科技获评省级人工智能“领雁”软件企业\": \"https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660192845&idx=1&sn=8658643dc8d21b848c554b131ee6a363\",\n \"搞波大的！超级翻倍+免费飞澳门直通白帽世界大会\": \"https://mp.weixin.qq.com/s?__biz=Mzg2MjIzODI3Mw==&mid=2247493085&idx=1&sn=b15fc53f146b60209864eeaeeb8dc378\",\n \"聚焦人工智能+，世界互联网大会天融信展区再迎参观热潮\": \"https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650980157&idx=1&sn=919c5b647e25bb542cd735bce514d5f1\",\n \"NVIDIA NVApp 漏洞可致恶意代码执行\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096602&idx=1&sn=299bc901842aef25108f90b845a4b497\",\n \"思科 UCCX存在远程任意代码执行漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096602&idx=2&sn=aea8c8ae0fbae9ad74287a60f4b73cd7\",\n \"【高危漏洞预警】AutoCAD权限提升漏洞（CVE-2025-10885）\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490960&idx=1&sn=8c0d7ee4efff3cef20ee2be9727a6d4f\",\n \"【高危漏洞预警】Dataease拒绝服务漏洞CVE-2025-64164\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490960&idx=2&sn=a931af8f0470f877a18f8c51e416a1f3\",\n \"黑客voices38破解《极品飞车21》D加密！畅谈未来计划\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247543234&idx=1&sn=fc77a562656d106d6d7bb31f2eac0dd8\",\n \"网络安全工具-搜索(一)\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NzgzNjI2NQ==&mid=2247483805&idx=1&sn=bca9dd61fcc31fa31e5e96837d4edf11\",\n \"聚焦乌镇 | 奇安信发布量子安全SD-WAN，以“零改造”守护关基安全\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629708&idx=1&sn=eeb27798578ce3447e7989f553f271aa\",\n \"奇安信中标香港金融管理局网络安全攻防演练防守服务项目\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629708&idx=2&sn=2e6e09eb93e62b728f2a22693884d88e\",\n \"智能养老服务机器人产业高质量发展座谈会顺利召开\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649255719&idx=1&sn=98943678d6abeb23c9569cfeae5d2382\",\n \"【通知】关于征集《人工智能从业人员能力评价规范》团体标准参编单位的通知\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649255719&idx=2&sn=591c8a9cefe21b71200f7835487d8b47\",\n \"【征集活动】关于征集《机器人整机产品自主化率评估指南》标准起草工作组专家的通知\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649255719&idx=3&sn=62e6d89a981562c4cc9e6ea38330a937\",\n \"聚焦 | 2025年世界互联网大会乌镇峰会开幕 李书磊出席开幕式并发表主旨讲话\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=1&sn=e74a7f043c1fc094179993b3b4699d3b\",\n \"国家卫健委等三部门发布医务人员健康科普“十不准”！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=2&sn=d783ebb6f797f1ede14321383f5825ba\",\n \"国家卫健委等五部门发布《关于促进和规范“人工智能+医疗卫生”应用发展的实施意见》（附全文）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=3&sn=e53636da8d73e33c668833300780b4f8\",\n \"通知 | 《大模型一体机产品安全基本要求（征求意见稿）》等2项网络安全标准实践指南公开征求意见（附下载）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=4&sn=763c154a8a8cd4d61b4ee2113c186db8\",\n \"一图读懂 | 《关于促进和规范“人工智能+医疗卫生”应用发展的实施意见》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=5&sn=5610b1f0fca4a52d1fa626b6e0c4ca41\",\n \"AI 全自动漏扫工具更新！联合“资产发现”工具，帮你一键搞定找接口、测漏洞\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329972&idx=1&sn=4710ad685f2dfafcaa9da7efd0ed5f9d\",\n \"GPT-4o与GPT-5存在七项零点击攻击漏洞\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329972&idx=2&sn=6958144eaa1853dc966bc1000a97ae4f\",\n \"现代汽车确认遭遇数据泄露，攻击者持续驻留9天获取用户驾照信息\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329972&idx=3&sn=f682e2e42cccb2016323ee49b03b2194\",\n \"攻击者利用Windows虚拟化技术绕过EDR检测，部署Linux虚拟机\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329972&idx=4&sn=43d8ae3461c04020086e3e6d38c84564\",\n \"热点观察︱蚂蚁集团王宇：数字时代网络安全“新范式”\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664997853&idx=1&sn=594a70a5441ba681fdc2b1b47047812e\",\n \"【业界动态】两部门组织开展第二批次网络安全保险服务试点工作\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664997853&idx=2&sn=ea1fcfb7df2fb63972d967000d22df7c\",\n \"【业界动态】世界互联网大会发布12项“携手构建网络空间命运共同体精品案例”\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664997853&idx=3&sn=31a8c4118ca17e37a3f6bc591fe7c2f1\",\n \"每周勒索威胁摘要\": \"https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498552&idx=1&sn=c82e2586630ba033119e033bb5a4627c\",\n \"干货报告《企业级智能体产业落地研究报告》\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247646159&idx=1&sn=d174b249154b5918fd7a664e3fe34901\",\n \"免费赠送 | 企业办公安全意识培训科普素材（第一期）\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247646159&idx=2&sn=ae26df5e471c3ed010198e75890bf0f4\",\n \"免费赠送 | 诸子云星球福利大放送 · 安全科技报告合集\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247646159&idx=3&sn=69f91e4db63720b623dea2517c315a4a\",\n \"2025年首场武汉市工业领域数据安全能力提升专题宣贯培训汉口片区活动成功举办\": \"https://mp.weixin.qq.com/s?__biz=MzA3OTEyODAxMw==&mid=2247510641&idx=1&sn=9b04153115c71ddf81af1449228a77e6\",\n \"湖北省知识产权局关于组织申报第二十六届中国专利奖参评项目的通知\": \"https://mp.weixin.qq.com/s?__biz=MzA3OTEyODAxMw==&mid=2247510641&idx=2&sn=393c1ffc16255ffaecad463b1105891b\",\n \"从近期俄乌战场看美军侦察机与侦察卫星\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NjIzOTgzNw==&mid=2247500585&idx=1&sn=4a12e4decb07a661f25e9d106dec244e\",\n \"活动回顾｜慢雾(SlowMist)亮相第十届香港金融科技周 2025\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247503653&idx=1&sn=bd9bc4dc267d404f27c32716db8eb43b\",\n \"360首席科学家潘剑锋当选世界互联网大会人工智能专委会副主任委员\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582822&idx=1&sn=6ec9311498151e9d1260d71ad2fec74d\",\n \"勒索月报 | 360披露10月勒索软件流行态势：AI“养蛊”新变种，防御难度陡增\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582822&idx=2&sn=fed9869501a44970e9cdee1f4dc654c4\",\n \"教育行业系统等保定级：判定逻辑与实操指南\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTIzMQ==&mid=2247497929&idx=1&sn=6b9ad7d932d289a3d699ecd310598b5f\",\n \"【竞赛进行时】2025北京市职工职业技能大赛数据安全管理员竞赛暨“网安联杯”首届数据安全管理员职业技能竞赛（复赛）顺利进行\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTIzMQ==&mid=2247497929&idx=2&sn=5e7f2780950c03fb18ac36b461d248fc\",\n \"世界互联网大会重磅奖项！被央视报道啦！\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247538354&idx=1&sn=7ba65006cf9279f974681b0b7d3d0c4a\",\n \"Chrome紧急修复 WebGPU 和 V8引擎中的三个高危漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524343&idx=1&sn=bafd6d107e51fa5d67f552a22dd26211\",\n \"思科修复 Contact Center Appliance 中的多个严重漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524343&idx=2&sn=54f09a81eb6da8e9b06f5a17b8b70644\",\n \"喜报！矢安科技斩获2025年”创·在上海”国际创新创业大赛优胜奖！\": \"https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517606&idx=1&sn=2f077324b7163d8ffebfec40aa520a8c\",\n \"【网安科普】十个网络安全小常识\": \"https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247517875&idx=1&sn=b09faeca2bed8ba7af2c334c240e2cd6\",\n \"AI Network Security |《网络安全法》修订发布，迈向AI+安全新时代\": \"https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247506619&idx=1&sn=f0b331f9efff87b3cb49d9e29af3ed26\",\n \"华为星河AI网络安全重磅亮相香港网络安全高峰会2025，以AI赋能数字安全\": \"https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247506619&idx=2&sn=fe1203860535b0404754a2eb438325ca\",\n \"被操控的真相：解码以色列认知战\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MDczNjcyNA==&mid=2247489917&idx=1&sn=ffbdc114cac994dca74e10c290496c7a\",\n \"SDC2025 议题回顾 | 大模型供应链安全的熵增效应：风险挖掘与熵减策略\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=1&sn=39283ac5055f746948790e5c713dfb51\",\n \"看雪双11·课程福利——满额赠《加密与解密》第五版（签名版）、VIP年卡、T恤等\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=2&sn=b2a1a614e41aa0094176189adbde0ea0\",\n \"本周职位更新！速速投简历\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=3&sn=ea06487f77ee940f8f83ff33418d4817\",\n \"NVIDIA App曝高危漏洞，紧急更新防黑客入侵！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=4&sn=496a77a25e59671f8e5c5b380d758c1a\",\n \"绝密档案：最强网络攻击试图颠覆对立国家政权\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515177&idx=1&sn=1341cfdaee2aa6c60474ba6db88b513f\",\n \"欧洲学者建议欧洲摆脱对美国的网络安全依赖\": \"https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247490880&idx=1&sn=50d33117a87125d47e312e343ca53807\",\n \"Transformer与CNN在恶意URL路径识别中的实践探索\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjkwNTUwOA==&mid=2247484199&idx=1&sn=b672350cd09054175871f0fbeac71c56\",\n \"每周蓝军技术推送（2025.11.1-11.7）\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494499&idx=1&sn=f8e0a8774a42c096b51fb030a289d5ac\",\n \"每家企业都应开展的10项实战化网络安全演练\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247493238&idx=1&sn=19fd4f3f4643294eda03880970c9f618\",\n \"组件安全合规实践指南：构建企业数字防线新范式\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDkyNTQ2OA==&mid=2247486286&idx=1&sn=98287f6dda4e00bc53cf3ec4b55b5b7a\",\n \"那看来网安也要转型物联网安全了，机器人(IoT)渗透......\": \"https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483938&idx=1&sn=a24b50a28c46557e02e5dc7b281254b2\",\n \"烽火狼烟丨暗网数据及攻击威胁情报分析周报（11/03-11/07）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NjMxNTgyOQ==&mid=2247484804&idx=1&sn=da73fd17221561f6182c7c6880785e7e\",\n \"网络安全信息与动态周报2025年第44期（10月27日-11月2日）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650625982&idx=2&sn=dc16c437801595c7580b12400a19575f\",\n \"国投智能股份入选工信部第九批制造业单项冠军企业\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651447228&idx=1&sn=102d531399c52ee69143ae529331122e\",\n \"【协会风采】副会长单位：国安达股份有限公司\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651447228&idx=2&sn=c89e2c6d6b7970f8489e765887d6c6e0\",\n \"汽车软件升级——A/B分区与回滚\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247562400&idx=1&sn=68120d893ff54fef18009486da5154a9\",\n \"附PPT下载 | 鹏瞰科技：高带宽需求下光纤上车的产业化机遇与挑战\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247562400&idx=2&sn=db8b01c87eed1bdec37dd7fabf0d1f33\",\n \"警惕！APT-C-08（蔓灵花）组织首次借WinRAR漏洞CVE-2025-6218实施网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247507464&idx=1&sn=fa744e1c4a49e29091fc417d2ca74226\",\n \"跌多涨少\": \"https://mp.weixin.qq.com/s?__biz=MzkzMjIwMDY4Nw==&mid=2247486328&idx=1&sn=ad6158b3a6ba6cdb1c3083117cc8f451\",\n \"河南省工业和信息化厅发布《关于组织开展“数据治理服务进百企”活动的通知》\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448691054&idx=1&sn=17cb28fabb1cfe7a60948627bf153181\",\n \"网安标委就《大模型一体机产品安全基本要求》等2项网络安全标准实践指南征求意见\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448691054&idx=2&sn=b79b3b19a1ecd092a6107dbfa34e0d32\",\n \"世界互联网大会之际——高校网安学院院长寄语学生创新资助计划、开源安全奖励计划\": \"https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649403283&idx=1&sn=853f99fecaf1ec4e2c62b5e6301e25b7\",\n \"获NVIDIA致谢：悟空Agent的实践、复盘与迭代\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649796466&idx=1&sn=bde4c05e0548ed972aaed26ca85a8b28\",\n \"《2025年大语言模型主机安全态势报告》（第一期）\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDIzNTYwOA==&mid=2247490338&idx=1&sn=7e60cd5370bdde105a27dec762380c61\",\n \"2025年度“金智奖”参评企业风采展（四）：仰望星空，见证产业中坚力量\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247602141&idx=1&sn=40abfb42e2c72f871dcaf97609d3004a\",\n \"强化安全治理，警惕AI大模型被“魔咒”操控\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247602141&idx=2&sn=424daa1fa5df994e102790bb93c3dbf9\",\n \"模拟红队进行漏洞挖掘\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556711&idx=1&sn=921bc63ee014e892a8a53ec0adae25fb\",\n \"【免费领】Kali Linux无线渗透测试实战教程\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556711&idx=2&sn=e2633ebe43ace4f389f01e18f3eac668\",\n \"A.S.E 2.0 正式发布 | 开放生态 · 动静协同 · 让 AI 编程安全可量化\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207584&idx=1&sn=96d9b909bb8a2634da0aa30b92667dfb\",\n \"边缘 AI 的现状与展望\": \"https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247493252&idx=1&sn=49026034665b66f92c47b4eda1a51984\",\n \"百年沉淀，科技赋能！商丘三院 AI 咨询秒级响应，解锁医疗服务新体验！\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651389854&idx=1&sn=970a33ef655e860a083b499314caedb4\",\n \"AI赋能风控“智”变 | 国舜智能预警案件分析平台：风险识别快人一步！\": \"https://mp.weixin.qq.com/s?__biz=MzA3NjU5MTIxMg==&mid=2650575839&idx=1&sn=33b3eb1307679db44bc617bd54bd9746\",\n \"“一周懿语”丨第四十六期\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650637553&idx=1&sn=798077cc98e9c1f52432e94c1a66d9a6\",\n \"亚信安全荣登2025年信创分类排行榜，引领信息安全新发展\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650625982&idx=1&sn=83eb28094ac9aad5a64d55533ca83e07\",\n \"CCS\\\\'25 杰出论文奖: Web 应用越权漏洞检测新进展\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247496499&idx=1&sn=d6dcde468457c835229d2b83687fb0a5\",\n \"每日安全动态推送(25/11/7)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960246&idx=1&sn=39b0d9f440cdf13d99db1e8af6e3905b\",\n \"工业网络安全周报-2025年第45期\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTQ5NjI2Ng==&mid=2247486956&idx=1&sn=b57727612212bbde13e1a0db39180ba5\",\n \"【CTF入门必看】分享8个适合练习CTF的平台，让你从菜鸟变大神！\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDU0MTUyNw==&mid=2247493758&idx=1&sn=07bce8756b1c487844ad9fedf86a9f90\",\n \"山石网科协办网安企业出海技术沙龙，深度分享全球化战略与实践经验\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661303791&idx=1&sn=713fd8c4f3aca094b6ac0d268be1b3a9\",\n \"国内仅3家｜山石网科连续3年获Gartner® VoC for NDR “强劲表现者”称号\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661303791&idx=2&sn=532fbf68ad371763152d482a60e9174f\",\n \"Wepro180｜山石网科港澳业务增长四成 自研ASIC芯片成重要战略\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661303791&idx=3&sn=b00f23c22f2e2b83a1819bca47eae5f8\",\n \"美海军陆战队《欺骗》条令的内容、特点及局限\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622087&idx=1&sn=d99b08f2c9a9477f282c365d3ab1a83a\",\n \"欧盟委员会通过2026年欧洲创新理事会工作计划，拨款14亿欧元促进欧洲深度科技创新\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622087&idx=2&sn=69be21d538788a146b41d8069d919934\",\n \"长亭科技朱文雷：驾驭变革，智能增长\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651389854&idx=2&sn=113744089ee468f1f61da43798561d88\",\n \"清晨的从容：一份无人值守报告背后的人工智能安全革命\": \"https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247501453&idx=1&sn=23477cb8f67a9f95717dd01158cf11e5\",\n \"安全热点周报：黑客利用 Gladinet 文件共享软件中的零日漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504113&idx=1&sn=ebbfa1f912a759a56775f303c03ba0ee\",\n \"wepoc 高效多任务nuclei 图形化POC扫描工具\": \"https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247524829&idx=1&sn=d0db4dd0d5eb7913ac16bf8f78e4ca9c\",\n \"安全威胁情报周报（2025/11/01-2025/11/07）\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NjYyMzUyNg==&mid=2247492922&idx=1&sn=ba00de24be96535e0a09b091cb4a0fd0\",\n \"图解安全 | 效率低、盲区多？看一体化网络安全检测平台如何破局\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDUzMjc5Ng==&mid=2650204248&idx=1&sn=9f061522833dc3503759f45cac1529bb\",\n \"木马如何生成--简易木马的制作\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247575563&idx=1&sn=a372b94eddd18278da34dc42e3a0bd31\",\n \"355页渗透测试笔记，看完一半就是高手！\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247575563&idx=2&sn=cfbb6d80969bde1fdc62978c436075cb\",\n \"IRify 性能升级（三）：3GB缩至500MB，内存优化完整复盘\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529017&idx=1&sn=12b8e1576324391ac1ce925710b590e1\",\n \"哪所高校网络安全专业最强---第九届“强网杯”全国网络安全挑战赛获奖名单（高校排名）\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247545759&idx=1&sn=5c14ca068331d720141c346517e2e2d7\",\n \"【网络安全招聘】-中国联通招聘网络安全岗\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247545759&idx=2&sn=29d66e1f6f095c55ce930cefabe0085d\",\n \"为什么数据安全是私人市场透明度的关键\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247486042&idx=1&sn=77fe2f6425c1ed4a029ba86831539597\",\n \"常行科技：数智赋能，打造食品安全智慧监管新范式\": \"https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247504121&idx=1&sn=8d1ba12c7e972fbe94a370537e1c27a0\",\n \"携手乌镇峰会，CSA与全球伙伴共筑安全普惠数智未来\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTM5MDUxMA==&mid=2247508235&idx=1&sn=fb9f66293ecbbaf53eb5d68e43344ef6\",\n \"【首届密码竞赛成功举办】2025年广东省密码技术行业（密码技术应用员）职业技能竞赛决赛在深圳成功举办（获奖名单附后）\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MDYzMjAyNA==&mid=2247486610&idx=1&sn=30c0d426def9dbf8ab7acf71fa39b6dd\",\n \"2025高校网络安全管理运维赛-电子取证分析师赛道-决赛WriteUp\": \"https://mp.weixin.qq.com/s?__biz=MzkyOTI4NTY4MQ==&mid=2247491682&idx=1&sn=e40b2e326cea3c22d61a21617dc173d4\",\n \"美国检方起诉 3 人！前网安从业者涉嫌参与 BlackCat 黑客攻击\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537586&idx=1&sn=2d5b738c8d07f43a75beb347a9511b3a\",\n \"黑客入侵宾大！滥用官方邮箱群发挑衅邮件\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537586&idx=2&sn=6bda5146cb2caf310052bab8c991c582\",\n \"警惕！Windows SMB 高危漏洞遭滥用，设备或被获取最高权限\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537586&idx=3&sn=eadb658ae974ce25311eb6b299d19010\",\n \"不按规定发漏洞信息？有关单位被处罚，给行业敲警钟\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537586&idx=4&sn=19899a2d043f495eda174ed453d85b0a\",\n \"CTF 选手必藏！20 个 Wireshark 实战秘籍，从入门到精通抓包解题\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537586&idx=5&sn=efe860007c9b72065a507eafebe398ce\",\n \"模拟黑客入侵OA系统实战\": \"https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247490818&idx=1&sn=e2735bfad4f75f02b07df8490bee5d71\",\n \"立冬·守暖｜为你的数字世界，筑牢御寒安全盾\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjMxMzg5MQ==&mid=2247492353&idx=1&sn=4947c9fce870eea3f84f9446ff71f574\",\n \"王牌A计划——九月月度奖励\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998227&idx=1&sn=3f34bf6581c834cf612cbcce15ec2e2c\",\n \"鸿蒙(HarmonyOS)应用安全检测平台V6.6\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247499040&idx=1&sn=ad71ce13827db04d5ed4e50ea5d0932f\",\n \"Objection使用指南：基于Frida的移动安全测试神器\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247499040&idx=2&sn=d733975c4a24c51d3392378d39887eaa\",\n \"物联网安全权威认证，帮你抢占行业风口\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDI0MjUyNQ==&mid=2247485702&idx=1&sn=f1b7ef3f766f50c217c2499bba434d74\",\n \"吸取ERP迁移的教训，五大策略助力CISO迈向安全与业务一体化的新阶段\": \"https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650260539&idx=1&sn=72f4893004fe7001f017ed3b226801b7\",\n \"信息安全漏洞周报【第046期】\": \"https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064428&idx=1&sn=7b9e0004f744ee1edef9442b7b0724fc\",\n \"凝聚社会力量，共筑区域网络安全防线——网信自主创新产业商会网络安全志愿服务队正式成立\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzI3MzMwMQ==&mid=2247531619&idx=1&sn=e79e21d446bfa8dcb1085634d1473c06\",\n \"安全简讯（2025.11.07）\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501753&idx=1&sn=690ef67129f0d5b07ece2e4548ca4790\",\n \"【漏洞通告】Django SQL注入漏洞(CVE-2025-64459)\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501753&idx=2&sn=98fb11fa65c0ecebfa4a1fa04ec9736a\",\n \"这年头，还有人拿免费软件行骗！\": \"https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247487605&idx=1&sn=df0ae6200ecd3320124948456df502d8\",\n \"再获认可！深信达荣获信创工委会技术活动单位，深耕信创安全，引领终端防护\": \"https://mp.weixin.qq.com/s?__biz=MzI2ODQ5NTI5OA==&mid=2247485987&idx=1&sn=39a49e05d1ce827f2198320817f0d839\",\n \"SSH高危漏洞修复、屏蔽工具----付费文章集合版本\": \"https://mp.weixin.qq.com/s?__biz=MzkxODc0Mzk4OQ==&mid=2247484787&idx=1&sn=e85605021c07afbdcc238acc5dd88b86\",\n \"【赠书抽奖】《Web漏洞分析与防范实战》上下册\": \"https://mp.weixin.qq.com/s?__biz=MzI1ODI0MTczNQ==&mid=2247491225&idx=1&sn=3fe6a97e7f7cd4411605787d25fa0830\",\n \"如何评估并选择合适的 AI-SOC 平台？\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540726&idx=1&sn=71e7881ab056aebb03c42c8f9639e039\",\n \"分享一个能一键获取两万+资源的情报网站\": \"https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247495348&idx=1&sn=7fdff9e20750bdbf4f1864b51c4a7ae8\",\n \"公告｜湖北省网络和数据安全协会2025年网络安全管理员第五期考试公告\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDE5NzY3NQ==&mid=2247514006&idx=1&sn=646323bc13cc932be24729f191de18f1\",\n \"会员动态丨县乡一体、乡村联动，天融信助力赤峰某旗打造县域医共体建设标杆\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDE5NzY3NQ==&mid=2247514006&idx=2&sn=0127ebfc138c7addc68cf39057167bd7\",\n \"【开放注册公告】吾爱破解论坛2025年11月11日光棍节开放注册公告\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143158&idx=1&sn=a6995fb20a83d854f718ed7d104fb662\",\n \"【产品】ST-301有线线路检测仪功能介绍\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM4MTIxMA==&mid=2247485654&idx=1&sn=a76337b9e57bca48a758c3da356eb833\",\n \"【技术】使用 ST-301 检测有线线路的方式方法建议\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM4MTIxMA==&mid=2247485654&idx=2&sn=5291198f80c5f61f7a6a2db1a5585909\",\n \"中国财富网专访安芯网盾CEO姜向前\": \"https://mp.weixin.qq.com/s?__biz=MzU1Njk1NTYzOA==&mid=2247491906&idx=1&sn=f350d2d002d8a5ea99f500287a244032\",\n \"喜报xa0| 赛博研究院荣获上海市第三届中青年工程师创新创业大赛“优秀组织单位”称号\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247521265&idx=1&sn=755b00935c7ba107e608bd13ce1e7310\",\n \"今日立冬！\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247521265&idx=2&sn=c1b7f2893ab80babbeb5d4a0604c1b90\",\n \"最近后台找《网路关键设备和网络安全专用产品目录》的同事很多，文末提供下载地址\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDYzNTYxNQ==&mid=2247504568&idx=1&sn=d98abf82e1f1a8959d09c56b6a37bb0b\",\n \"一张图让你秒懂SSL证书\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247538350&idx=1&sn=275bbdc4d1b36f0a756782af55f45ac5\",\n \"Renew｜中美战略竞争下的网络空间冲突\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486583&idx=1&sn=7a2b939aefe787d279a4665d9524e345\",\n \"朝鲜在东南亚的制裁规避与朝越外交新局\": \"https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247512078&idx=1&sn=cbac3638079e258a5ab84aa20508f62f\",\n \"锁定乌克兰粮食命脉，俄罗斯发动数据擦除软件攻击\": \"https://mp.weixin.qq.com/s?__biz=Mzk2ODExMjEyNA==&mid=2247486759&idx=1&sn=d42cb26c2559d020ba60392b83a02e02\",\n \"能信安：病毒和恶意代码通告\": \"https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491380&idx=1&sn=9b3914f4b11a6c1c8b7d04bf07bd1e63\",\n \"应急响应后门排查处置指南\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247488340&idx=1&sn=2a9c9f3809a72fde2bf998418a13fc56\",\n \"内网渗透应该如何做\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247488340&idx=2&sn=92a23b140d5691eeaa5de410d60d6c6c\",\n \"白加黑攻击技术原理深度分析\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247488340&idx=3&sn=3bc3ac7ccfd058d4915c0a273cfaa7e2\",\n \"绕过现代终端防护（EDR/XDR）的免杀Payload生成与执行技术综述\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247488340&idx=4&sn=fbbb14b0ac773d4ff0288afa2b34bcd1\",\n \"安全报告：CVE-2025-64459 — Django QuerySet _connectorSQL 注入\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533421&idx=1&sn=30972cc727df5d6b837709fd7f5ed1a8\",\n \"管理科学部关于征集2026年度重大项目立项领域建议的通告\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247534593&idx=1&sn=da367960049d7f5a0ea960572f5f5403\",\n \"资料下载 | 十五五规划建议全文及说明\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247534593&idx=2&sn=7f9516f40cbafbcb1012d5999612157a\",\n \"每周安全速递³⁶⁵ | 研究人员剖析新兴网络犯罪联盟SLH\": \"https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247497367&idx=1&sn=d2f1175a442c9fd432f8dcae74873635\",\n \"动态分析丨印尼测试新型AI无人潜航器\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NTYyODgyNg==&mid=2247508576&idx=1&sn=33b1611c72acffcf6ecf53afc777d954\",\n \"埃尔比特系统公司推出Condor MS多光谱战略吊舱系统\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NTYyODgyNg==&mid=2247508576&idx=2&sn=62ebd438a85a7042d9e642390c7f7caf\",\n \"专访xiya：从破解到构建，一名团队负责人的安全观【T00ls人物专访第十九期】\": \"https://mp.weixin.qq.com/s?__biz=Mzg3NzYzODU5NQ==&mid=2247485503&idx=1&sn=1e11184b483ef175f0b1c95538146033\",\n \"补天专属【全年积分挑战赛】目前排名公布！发起最终冲刺！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509629&idx=1&sn=d785c0ba85d6bbaac14eef6e8438bde0\",\n \"秋冬福利季｜速来⏳10个漏洞轻松赢最新款周边！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509629&idx=2&sn=8f6f1eb82c1f9c446e57d9186f8438c6\",\n \"2025人工智能赋能新型工业化论坛暨工业互联网一体化进园区“百城千园行”重庆站（两江新区）将于11月12日在重庆市召开！\": \"https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247594251&idx=1&sn=585e3e0af9ad398469b0e7a57896fae3\",\n \"中国信通院工业互联网与物联网研究所发布《物联网产业规模测算指标体系》\": \"https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247594251&idx=2&sn=da69bbd59c37454b12281bb09d3b615d\",\n \"学术报告|高效零知识证明以及在大模型中的应用\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NDczNDc4NA==&mid=2247495807&idx=1&sn=6a19f530e6f7a268617352df8386dff8\",\n \"DudeSuite 漏洞更新播报 20251107\": \"https://mp.weixin.qq.com/s?__biz=MzA3ODUzNzMzOQ==&mid=2648562853&idx=1&sn=bc0d16218fecc81ef5aa64ede6a8b026\",\n \"ChatGPT曝七大漏洞，可诱使AI泄露记忆与聊天记录\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789373&idx=1&sn=23dbbc6520d871be580baf1455ec6516\",\n \"安全大厂实验室的《Web漏洞分析与防范实战》什么水平？\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247521259&idx=1&sn=921de1bb763fcf63e63342bdd12bc1fa\",\n \"春秋云镜靶场渗透测试--Certify\": \"https://mp.weixin.qq.com/s?__biz=MzkyMDcyODYwNw==&mid=2247487541&idx=1&sn=d7a21a658c9079529e5cfa9e6019206c\",\n \"超越渗透测试！每家企业都应开展的10项实战化网络安全演练\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139258&idx=1&sn=c1e16d728603b322c78798c3caa2cac9\",\n \"中国牵头制定的工业5G国际标准发布；92%漏洞检测率!OpenAI推出AI安全研究员颠覆传统防御模式 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139258&idx=2&sn=1c5e3e24e36adb99a54567b2b477a1a7\",\n \"佰倬创新应用入选2025物联网密码应用成果汇编\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODAyMjQxMg==&mid=2247486438&idx=1&sn=013a1266332fe74b2a9ff7ca5339c33e\"\n },\n \"SpiderLabs Blog\": {\n \"The Cat's Out of the Bag: A 'Meow Attack' Data Corruption Campaign Simulation via MAD-CAT\": \"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/the-cats-out-of-the-bag-a-meow-attack-data-corruption-campaign-simulation-via-mad-cat/\"\n },\n \"GuidePoint Security\": {\n \"5 Signs Your Risk Register is Stuck in the Past\": \"https://www.guidepointsecurity.com/blog/5-signs-your-risk-register-is-stuck-in-the-past/\"\n },\n \"Malwarebytes\": {\n \"Malwarebytes scores 100% in AV-Comparatives Stalkerware Test 2025\": \"https://www.malwarebytes.com/blog/news/2025/11/malwarebytes-scores-100-in-av-comparatives-stalkerware-test-2025\",\n \"Fake CAPTCHA sites now have tutorial videos to help victims install malware\": \"https://www.malwarebytes.com/blog/news/2025/11/fake-captcha-sites-now-have-tutorial-videos-to-help-victims-install-malware\"\n },\n \"Horizon3.ai\": {\n \"Black Unicorn Awards 2025\": \"https://horizon3.ai/news/awards/black-unicorn-awards-2025/\"\n },\n \"Intigriti\": {\n \"Exploiting JWT vulnerabilities: A complete guide\": \"https://www.intigriti.com/researchers/blog/hacking-tools/exploiting-jwt-vulnerabilities\"\n },\n \"The Trail of Bits Blog\": {\n \"Balancer hack analysis and guidance for the DeFi ecosystem\": \"https://blog.trailofbits.com/2025/11/07/balancer-hack-analysis-and-guidance-for-the-defi-ecosystem/\"\n },\n \"SentinelOne\": {\n \"The Good, the Bad and the Ugly in Cybersecurity – Week 45\": \"https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-45-7/\"\n },\n \"VMRay\": {\n \"How to turn Defender & Sentinel alerts into actionable threat intelligence\": \"https://www.vmray.com/how-to-turn-defender-sentinel-alerts-into-actionable-threat-intelligence/\"\n },\n \"Security Blog | Praetorian\": {\n \"How I Found the Worst ASP.NET Vulnerability — A $10K Bug (CVE-2025-55315)\": \"https://www.praetorian.com/blog/how-i-found-the-worst-asp-net-vulnerability-a-10k-bug-cve-2025-55315/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"2023 年亚马逊湖泊温度飙升\": \"https://www.solidot.org/story?sid=82745\"\n },\n \"黑海洋 - Wiki\": {\n \"ParallelChat：多AI并行对话桌面应用，让ChatGPT、Kimi、DeepSeek等大模型同步作答\": \"https://blog.upx8.com/4897\"\n },\n \"安全分析与研究\": {\n \"伪装成奇安信专杀工具CS木马样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494156&idx=1&sn=8aa2b3f633deacf36634e297e0ad64a0\"\n },\n \"看雪学苑\": {\n \"SDC2025 议题回顾 | 大模型供应链安全的熵增效应：风险挖掘与熵减策略\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=1&sn=39283ac5055f746948790e5c713dfb51\",\n \"看雪双11·课程福利——满额赠《加密与解密》第五版（签名版）、VIP年卡、T恤等\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=2&sn=b2a1a614e41aa0094176189adbde0ea0\",\n \"本周职位更新！速速投简历\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=3&sn=ea06487f77ee940f8f83ff33418d4817\",\n \"NVIDIA App曝高危漏洞，紧急更新防黑客入侵！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=4&sn=496a77a25e59671f8e5c5b380d758c1a\"\n },\n \"代码卫士\": {\n \"Chrome紧急修复 WebGPU 和 V8引擎中的三个高危漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524343&idx=1&sn=bafd6d107e51fa5d67f552a22dd26211\",\n \"思科修复 Contact Center Appliance 中的多个严重漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524343&idx=2&sn=54f09a81eb6da8e9b06f5a17b8b70644\"\n },\n \"威努特安全网络\": {\n \"日经新闻在线平台遭入侵，瑞典IT供应商客户数据泄露|一周特辑\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651137285&idx=1&sn=8213f80b54c32cb7b6c97966874fc5bb\",\n \"倒计时1天 | 1+1的无限可能，1起奔赴新未来\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651137285&idx=2&sn=03026acad35d94ca4a1a3bde23c04510\"\n },\n \"腾讯安全应急响应中心\": {\n \"A.S.E 2.0 正式发布 | 开放生态 · 动静协同 · 让 AI 编程安全可量化\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207584&idx=1&sn=96d9b909bb8a2634da0aa30b92667dfb\"\n },\n \"黑鸟\": {\n \"全球实时高清网络直播摄像头网站\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183502&idx=1&sn=aa9f5f7ee36e0914c8a5173445e0ed96\"\n },\n \"奇安信 CERT\": {\n \"安全热点周报：黑客利用 Gladinet 文件共享软件中的零日漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504113&idx=1&sn=ebbfa1f912a759a56775f303c03ba0ee\"\n },\n \"二道情报贩子\": {\n \"反反Ai造假退款手段\": \"https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489752&idx=1&sn=c73b429b8b5d952063149539b6194767\"\n },\n \"天御攻防实验室\": {\n \"Renew｜中美战略竞争下的网络空间冲突\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486583&idx=1&sn=7a2b939aefe787d279a4665d9524e345\"\n },\n \"吾爱破解论坛\": {\n \"【开放注册公告】吾爱破解论坛2025年11月11日光棍节开放注册公告\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143158&idx=1&sn=a6995fb20a83d854f718ed7d104fb662\"\n },\n \"腾讯玄武实验室\": {\n \"每日安全动态推送(25/11/7)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960246&idx=1&sn=39b0d9f440cdf13d99db1e8af6e3905b\"\n },\n \"dotNet安全矩阵\": {\n \".NET 通过 LINQ 投影加载程序集实现命令执行\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500894&idx=1&sn=c3c917eb3fa8268ac1592741c312559b\",\n \".NET 实战：通过FSharp白名单执行命令绕过防护\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500894&idx=2&sn=27757a3b176e4a56be0d51c9303bc61b\"\n },\n \"天黑说嘿话\": {\n \"OpenAI发布安全智能体Aardvark：你的下一位网络安全专家，可能不是人类\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485069&idx=1&sn=7994dcab8232559c3e13f560608e3ff4\"\n },\n \"安全客\": {\n \"ChatGPT曝七大漏洞，可诱使AI泄露记忆与聊天记录\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789373&idx=1&sn=23dbbc6520d871be580baf1455ec6516\"\n },\n \"丁爸 情报分析师的工具箱\": {\n \"【资料】战略与预算评估中心（CSBA）研究报告\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152863&idx=1&sn=076990647833b3a0f846bcf0b9aa649e\"\n },\n \"微步在线\": {\n \"声明\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650185072&idx=1&sn=af167239aba5027423cfec264d104a64\"\n },\n \"补天平台\": {\n \"补天专属【全年积分挑战赛】目前排名公布！发起最终冲刺！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509629&idx=1&sn=d785c0ba85d6bbaac14eef6e8438bde0\",\n \"秋冬福利季｜速来⏳10个漏洞轻松赢最新款周边！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509629&idx=2&sn=8f6f1eb82c1f9c446e57d9186f8438c6\"\n },\n \"M01N Team\": {\n \"每周蓝军技术推送（2025.11.1-11.7）\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494499&idx=1&sn=f8e0a8774a42c096b51fb030a289d5ac\"\n },\n \"极客公园\": {\n \"复盘大疆 Pocket 的七年：从「定义产品」到「定义时代」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653090450&idx=1&sn=9b1cd05528a894225f16e2f7c2b9ca31\",\n \"当一家传统车企，终于决定「师中长技」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653090450&idx=2&sn=3c0cecada4704349c0d8ac51f8ea815a\",\n \"有些答案，听 AI 说一百遍，不如和「最有料的人」聊一次\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653090360&idx=1&sn=456bf391de78443153fac773a583efda\",\n \"马斯克1万亿美元薪酬方案获特斯拉股东批准；东方甄选孙东旭离职；今年 OpenAI 年化收入或将达 200 亿美元 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653090335&idx=1&sn=c0ef96cd203c79e7c45bc971c6beb6e3\"\n },\n \"XCTF联赛\": {\n \"RCTF 2025 | 星海启航，砺行致远\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247516079&idx=1&sn=2b4586bdbe32c65abe3e99e154b4fc43\"\n },\n \"默安科技\": {\n \"清晨的从容：一份无人值守报告背后的人工智能安全革命\": \"https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247501453&idx=1&sn=23477cb8f67a9f95717dd01158cf11e5\"\n },\n \"奇安信威胁情报中心\": {\n \"每周高级威胁情报解读(2025.10.31~11.06)\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247516573&idx=1&sn=41e4287a07c23e992b7a7d5f13ebc09a\"\n },\n \"复旦白泽战队\": {\n \"CCS'25 杰出论文奖: Web 应用越权漏洞检测新进展\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247496499&idx=1&sn=d6dcde468457c835229d2b83687fb0a5\"\n },\n \"阿里安全响应中心\": {\n \"王牌A计划——九月月度奖励\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998227&idx=1&sn=3f34bf6581c834cf612cbcce15ec2e2c\"\n },\n \"嘶吼专业版\": {\n \"动态自适应欺骗防御：重构网络安全防御新格局\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585207&idx=1&sn=88ba03f38b2df070d86cc6134bf7aded\",\n \"倒计时三天！2025年网络安全“金帽子”年度评选活动即将截止报名\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585207&idx=2&sn=fedd9c47dcbdb170fdcfafc055c03251\"\n },\n \"字节跳动安全中心\": {\n \"一文读懂｜ByteSRC AI业务挖什么、怎么评、奖多少\": \"https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495693&idx=1&sn=e77e89079ca827718f304c8086874ec5\"\n },\n \"火绒安全\": {\n \"抽奖啦 | 让温暖，在这个冬天续“杯”\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527171&idx=1&sn=7bd29fd2e51f62418093f61a9a95fa5a\",\n \"【火绒安全周报】莆田网警破获诈骗案/全球数据泄露578亿条\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527171&idx=2&sn=05155bda0da730a8a12cc8df4a3afd2b\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527171&idx=3&sn=d48ef60b96be67d1e008a52c6d47faa4\"\n },\n \"中国信息安全\": {\n \"聚焦 | 2025年世界互联网大会乌镇峰会开幕 李书磊出席开幕式并发表主旨讲话\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=1&sn=e74a7f043c1fc094179993b3b4699d3b\",\n \"国家卫健委等三部门发布医务人员健康科普“十不准”！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=2&sn=d783ebb6f797f1ede14321383f5825ba\",\n \"国家卫健委等五部门发布《关于促进和规范“人工智能+医疗卫生”应用发展的实施意见》（附全文）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=3&sn=e53636da8d73e33c668833300780b4f8\",\n \"通知 | 《大模型一体机产品安全基本要求（征求意见稿）》等2项网络安全标准实践指南公开征求意见（附下载）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=4&sn=763c154a8a8cd4d61b4ee2113c186db8\",\n \"一图读懂 | 《关于促进和规范“人工智能+医疗卫生”应用发展的实施意见》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252706&idx=5&sn=5610b1f0fca4a52d1fa626b6e0c4ca41\"\n },\n \"信息安全国家工程研究中心\": {\n \"【二十四节气】立冬 | 霜轻未杀萋萋草，日暖初干漠漠沙。\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247501451&idx=1&sn=2f880886f8f254e136de2981c214516b\"\n },\n \"安全圈\": {\n \"【安全圈】ChatGPT曝出七大安全漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=1&sn=8f70b2c8f6cc8495d0e6692ce5d981d8\",\n \"【安全圈】荷兰区域电视台RTV Noord遭遇网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=2&sn=17e5abc2bbcceb99144c2ecd8183bc74\",\n \"【安全圈】现代汽车IT服务遭入侵：逾270万车主面临数据泄露风险\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=3&sn=9597a4310e1a0ccd9d147d6ff5c21720\",\n \"【安全圈】NVIDIA 修复 Windows 版 NVApp 严重漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=4&sn=cd862a7afb4d45dad113fd278b270cb1\"\n },\n \"360数字安全\": {\n \"360首席科学家潘剑锋当选世界互联网大会人工智能专委会副主任委员\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582822&idx=1&sn=6ec9311498151e9d1260d71ad2fec74d\",\n \"勒索月报 | 360披露10月勒索软件流行态势：AI“养蛊”新变种，防御难度陡增\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582822&idx=2&sn=fed9869501a44970e9cdee1f4dc654c4\"\n },\n \"慢雾科技\": {\n \"活动回顾｜慢雾(SlowMist)亮相第十届香港金融科技周 2025\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247503653&idx=1&sn=bd9bc4dc267d404f27c32716db8eb43b\"\n },\n \"数世咨询\": {\n \"如何评估并选择合适的 AI-SOC 平台？\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540726&idx=1&sn=71e7881ab056aebb03c42c8f9639e039\"\n },\n \"长亭科技\": {\n \"百年沉淀，科技赋能！商丘三院 AI 咨询秒级响应，解锁医疗服务新体验！\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651389854&idx=1&sn=970a33ef655e860a083b499314caedb4\",\n \"长亭科技朱文雷：驾驭变革，智能增长\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651389854&idx=2&sn=113744089ee468f1f61da43798561d88\"\n },\n \"悬镜安全\": {\n \"权威认可 | 悬镜安全斩获多项信通院“2025年度OSCAR开源”殊荣\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647797064&idx=1&sn=7d33f2fe6f97c07b6f368f7dd98d42a0\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Slot Gacor: The Rise of Online Casino Spam\": \"https://blog.sucuri.net/2025/11/slot-gacor-the-rise-of-online-casino-spam.html\",\n \"Washington Post confirms data breach linked to Oracle hacks\": \"https://techcrunch.com/2025/11/07/washington-post-confirms-data-breach-linked-to-oracle-hacks/\",\n \"Malicious NuGet packages drop disruptive 'time bombs'\": \"https://www.bleepingcomputer.com/news/security/malicious-nuget-packages-drop-disruptive-time-bombs/\",\n \"Microsoft testing faster Quick Machine Recovery in Windows 11\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-testing-faster-quick-machine-recovery-in-windows-11/\",\n \"Don't call it Cyber Command 2.0: Master plan for digital forces will take years to implement\": \"https://therecord.media/revised-cyber-command-master-plan-dod-pentagon\",\n \"New LandFall spyware exploited Samsung zero-day via WhatsApp messages\": \"https://www.bleepingcomputer.com/news/security/new-landfall-spyware-exploited-samsung-zero-day-via-whatsapp-messages/\",\n \"QNAP fixes seven NAS zero-day flaws exploited at Pwn2Own\": \"https://www.bleepingcomputer.com/news/security/qnap-fixes-seven-nas-zero-day-vulnerabilities-exploited-at-pwn2own/\",\n \"Congressional Budget Office implementing new security controls following cyberattack\": \"https://therecord.media/cbo-implements-controls-following-cyberattack-reports\",\n \"Congressional Budget Office confirms it was hacked\": \"https://techcrunch.com/2025/11/07/congressional-budget-office-confirms-it-was-hacked/\",\n \"In aumento gli attacchi russi e lo spionaggio contro Ucraina ed Europa. Il report di ESET\": \"https://www.securityinfo.it/2025/11/07/in-aumento-gli-attacchi-russi-e-lo-spionaggio-contro-ucraina-ed-europa-il-report-di-eset/\",\n \"Newly identified Android spyware appears to be from a commercial vendor\": \"https://therecord.media/landfall-spyware-middle-east-appears-commercial-grade\",\n \"AI e commercio online: lo scontro Amazon-Perplexity tra trasparenza e privacy\": \"https://www.cybersecurity360.it/legal/ai-e-commercio-online-lo-scontro-amazon-perplexity-tra-trasparenza-e-privacy/\",\n \"Sintesi riepilogativa delle campagne malevole nella settimana del 1 – 7 novembre\": \"https://cert-agid.gov.it/news/sintesi-riepilogativa-delle-campagne-malevole-nella-settimana-del-1-7-novembre/\",\n \"Cisco: Actively exploited firewall flaws now abused for DoS attacks\": \"https://www.bleepingcomputer.com/news/security/cisco-actively-exploited-firewall-flaws-now-abused-for-dos-attacks/\",\n \"ID verification laws are fueling the next wave of breaches\": \"https://www.bleepingcomputer.com/news/security/id-verification-laws-are-fueling-the-next-wave-of-breaches/\",\n \"Mal di compliance\": \"https://www.cybersecurity360.it/cultura-cyber/mal-di-compliance/\",\n \"Red Teaming LLMs 2025 – Offensive Security Meets Generative AI\": \"https://www.darknet.org.uk/2025/11/red-teaming-llms-2025-offensive-security-meets-generative-ai/\",\n \"Australia Strengthens Regional Cyber Partnerships to Bolster Security Across the Asia-Pacific\": \"https://cyble.com/blog/australia-asia-pacific-cybersecurity-partnerships/\",\n \"Leak confirms Google Gemini 3 Pro and Nano Banana 2 could launch soon\": \"https://www.bleepingcomputer.com/news/artificial-intelligence/leak-confirms-google-gemini-3-pro-and-nano-banana-2-could-launch-soon/\",\n \"Videosorveglianza veicolare: ecco perché è stato bloccato il progetto di Bolzano\": \"https://www.cybersecurity360.it/legal/videosorveglianza-veicolare-ecco-perche-e-stato-bloccato-il-progetto-di-bolzano/\",\n \"La nuova governance: integrare GDPR e NIS 2 per guidare efficacemente le organizzazioni\": \"https://www.cybersecurity360.it/legal/la-nuova-governance-integrare-gdpr-e-nis-2-per-guidare-efficacemente-le-organizzazioni/\",\n \"U.S. Congressional Budget Office hit by suspected foreign cyberattack\": \"https://www.bleepingcomputer.com/news/security/us-congressional-budget-office-hit-by-suspected-foreign-cyberattack/\"\n },\n \"安全内参\": {\n \"绝密档案：最强网络攻击试图颠覆对立国家政权\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515177&idx=1&sn=1341cfdaee2aa6c60474ba6db88b513f\",\n \"欧洲学者建议欧洲摆脱对美国的网络安全依赖\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515177&idx=2&sn=91d551ec40a0da643d85c19f76424ce4\"\n },\n \"Schneier on Security\": {\n \"Friday Squid Blogging: Squid Game: The Challenge, Season Two\": \"https://www.schneier.com/blog/archives/2025/11/friday-squid-blogging-squid-game-the-challenge-season-two.html\",\n \"Faking Receipts with AI\": \"https://www.schneier.com/blog/archives/2025/11/faking-receipts-with-ai.html\"\n },\n \"迪哥讲事\": {\n \"【SRC实战】通过FUZZ挖掘高危漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498521&idx=1&sn=9306378db8f472d0d916be7e9389dcfc\"\n },\n \"Yak Project\": {\n \"IRify 性能升级（三）：3GB缩至500MB，内存优化完整复盘\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529017&idx=1&sn=12b8e1576324391ac1ce925710b590e1\"\n },\n \"HackerNews\": {\n \"CLOP 勒索软件团伙宣称入侵《华盛顿邮报》\": \"https://hackernews.cc/archives/61433\",\n \"黑客利用 Windows Hyper-V 隐藏 Linux 虚拟机，规避 EDR 检测\": \"https://hackernews.cc/archives/61431\",\n \"意大利通信业高管披露遭 Paragon 间谍软件攻击\": \"https://hackernews.cc/archives/61429\",\n \"教育科技公司因数据安全措施不力引发黑客攻击，被罚 510 万美元\": \"https://hackernews.cc/archives/61427\",\n \"内华达州政府拒绝支付赎金，称有信心恢复数据\": \"https://hackernews.cc/archives/61425\",\n \"锁定乌克兰粮食命脉，俄罗斯发动数据擦除软件攻击\": \"https://hackernews.cc/archives/61421\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"ISC Stormcast For Friday, November 7th, 2025 https://isc.sans.edu/podcastdetail/9690, (Fri, Nov 7th)\": \"https://isc.sans.edu/diary/rss/32458\"\n },\n \"Securityinfo.it\": {\n \"In aumento gli attacchi russi e lo spionaggio contro Ucraina ed Europa. Il report di ESET\": \"https://www.securityinfo.it/2025/11/07/in-aumento-gli-attacchi-russi-e-lo-spionaggio-contro-ucraina-ed-europa-il-report-di-eset/?utm_source=rss&utm_medium=rss&utm_campaign=in-aumento-gli-attacchi-russi-e-lo-spionaggio-contro-ucraina-ed-europa-il-report-di-eset\"\n },\n \"安全牛\": {\n \"超越渗透测试！每家企业都应开展的10项实战化网络安全演练\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139258&idx=1&sn=c1e16d728603b322c78798c3caa2cac9\",\n \"中国牵头制定的工业5G国际标准发布；92%漏洞检测率!OpenAI推出AI安全研究员颠覆传统防御模式 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139258&idx=2&sn=1c5e3e24e36adb99a54567b2b477a1a7\"\n },\n \"ICT Security Magazine\": {\n \"L’Italia e le E-Evidence: architettura tecnico-giuridica del nuovo ecosistema investigativo transfrontaliero\": \"https://www.ictsecuritymagazine.com/articoli/e-evidence/\",\n \"Intelligenza artificiale e machine learning nelle indagini forensi digitali: rivoluzione tecnologica tra potenzialità e sfide giuridiche\": \"https://www.ictsecuritymagazine.com/notizie/indagini-forensi-digitali/\"\n },\n \"Full Disclosure\": {\n \"Re: [FD]\\t: \\\"Glass Cage\\\" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)\": \"https://seclists.org/fulldisclosure/2025/Nov/15\",\n \"Re: : \\\"Glass Cage\\\" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)\": \"https://seclists.org/fulldisclosure/2025/Nov/14\",\n \"runc container breakouts via procfs writes: CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881\": \"https://seclists.org/fulldisclosure/2025/Nov/13\",\n \"OXAS-ADV-2025-0002: OX App Suite Security Advisory\": \"https://seclists.org/fulldisclosure/2025/Nov/12\",\n \"APPLE-SA-11-05-2025-1 iOS 18.7.2 and iPadOS 18.7.2\": \"https://seclists.org/fulldisclosure/2025/Nov/11\",\n \"APPLE-SA-11-03-2025-9 Xcode 26.1\": \"https://seclists.org/fulldisclosure/2025/Nov/10\",\n \"APPLE-SA-11-03-2025-8 Safari 26.1\": \"https://seclists.org/fulldisclosure/2025/Nov/9\",\n \"APPLE-SA-11-03-2025-7 visionOS 26.1\": \"https://seclists.org/fulldisclosure/2025/Nov/8\",\n \"APPLE-SA-11-03-2025-6 watchOS 26.1\": \"https://seclists.org/fulldisclosure/2025/Nov/7\",\n \"APPLE-SA-11-03-2025-5 tvOS 26.1\": \"https://seclists.org/fulldisclosure/2025/Nov/6\",\n \"APPLE-SA-11-03-2025-4 macOS Sonoma 14.8.2\": \"https://seclists.org/fulldisclosure/2025/Nov/5\",\n \"APPLE-SA-11-03-2025-3 macOS Sequoia 15.7.2\": \"https://seclists.org/fulldisclosure/2025/Nov/4\",\n \"APPLE-SA-11-03-2025-2 macOS Tahoe 26.1\": \"https://seclists.org/fulldisclosure/2025/Nov/3\",\n \"APPLE-SA-11-03-2025-1 iOS 26.1 and iPadOS 26.1\": \"https://seclists.org/fulldisclosure/2025/Nov/2\",\n \"Re: [oss-security] runc container breakouts via procfs writes: CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881\": \"https://seclists.org/fulldisclosure/2025/Nov/1\"\n },\n \"白帽子章华鹏\": {\n \"2026年安全规划之开源安全治理\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650238117&idx=1&sn=9e548aea6e4bf54fe78f0e3f1528e227\"\n },\n \"云鼎实验室\": {\n \"238支全球顶尖战队上演AI攻防巅峰对决，腾讯云黑客松-智能渗透挑战赛即将开启！\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496936&idx=1&sn=28a7612170846b9621fc2b933614dfd2\"\n },\n \"BorderGate\": {\n \"Driver Signature Enforcement\": \"https://www.bordergate.co.uk/driver-signature-enforcement/\"\n },\n \"Security Affairs\": {\n \"LANDFALL spyware exploited Samsung zero-day CVE-2025-21042 in Middle East attacks\": \"https://securityaffairs.com/184331/security/landfall-spyware-exploited-samsung-zero-day-cve-2025-21042-in-middle-east-attacks.html\",\n \"Cisco fixes critical UCCX flaw allowing Root command execution\": \"https://securityaffairs.com/184321/security/cisco-fixes-critical-uccx-flaw-allowing-root-command-execution.html\",\n \"Russia-linked APT InedibleOchotense impersonates ESET to deploy backdoor on Ukrainian systems\": \"https://securityaffairs.com/184303/apt/russia-linked-apt-inedibleochotense-impersonates-eset-to-deploy-backdoor-on-ukrainian-systems.html\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"AI-Obfuscating Malware, China Influence Ops, and Meta’s Fraud Fortune and Jason Wood - SWN #527\": \"http://sites.libsyn.com/18678/ai-obfuscating-malware-china-influence-ops-and-metas-fraud-fortune-and-jason-wood-swn-527\"\n },\n \"The Hacker News\": {\n \"Samsung Zero-Click Flaw Exploited to Deploy LANDFALL Android Spyware via WhatsApp\": \"https://thehackernews.com/2025/11/samsung-zero-click-flaw-exploited-to.html\",\n \"From Log4j to IIS, China’s Hackers Turn Legacy Bugs into Global Espionage Tools\": \"https://thehackernews.com/2025/11/from-log4j-to-iis-chinas-hackers-turn.html\",\n \"Hidden Logic Bombs in Malware-Laced NuGet Packages Set to Detonate Years After Installation\": \"https://thehackernews.com/2025/11/hidden-logic-bombs-in-malware-laced.html\",\n \"Enterprise Credentials at Risk – Same Old, Same Old?\": \"https://thehackernews.com/2025/11/enterprise-credentials-at-risk-same-old.html\",\n \"Google Launches New Maps Feature to Help Businesses Report Review-Based Extortion Attempts\": \"https://thehackernews.com/2025/11/google-launches-new-maps-feature-to.html\",\n \"Vibe-Coded Malicious VS Code Extension Found with Built-In Ransomware Capabilities\": \"https://thehackernews.com/2025/11/vibe-coded-malicious-vs-code-extension.html\"\n },\n \"Dark Space Blogspot\": {\n \"Indicatori Per Rotazione Di Capitali e Speculazione (Investimenti e Trading)\": \"http://darkwhite666.blogspot.com/2025/11/indicatori-per-rotazione-di-capitali-e.html\"\n }\n}"}}, "archive/daily/2025/2025-06-08.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747309.6492357, "n": 28368, "h": "f839c99868604d30", "c": "# 每日安全资讯（2025-06-08）\n\n- Security Boulevard\n - [ ] [Empower Your Team with Robust NHI Protocols](https://securityboulevard.com/2025/06/empower-your-team-with-robust-nhi-protocols/?utm_source=rss&utm_medium=rss&utm_campaign=empower-your-team-with-robust-nhi-protocols)\n - [ ] [Driving Innovation through Secure NHIs](https://securityboulevard.com/2025/06/driving-innovation-through-secure-nhis-2/?utm_source=rss&utm_medium=rss&utm_campaign=driving-innovation-through-secure-nhis-2)\n - [ ] [Boost Your Confidence with Strong NHI Management](https://securityboulevard.com/2025/06/boost-your-confidence-with-strong-nhi-management/?utm_source=rss&utm_medium=rss&utm_campaign=boost-your-confidence-with-strong-nhi-management)\n - [ ] [Scalable Solutions for NHI Management](https://securityboulevard.com/2025/06/scalable-solutions-for-nhi-management/?utm_source=rss&utm_medium=rss&utm_campaign=scalable-solutions-for-nhi-management)\n - [ ] [OffensiveCon25 – No Signal, No Security: Dynamic Baseband Vulnerability Research](https://securityboulevard.com/2025/06/offensivecon25-no-signal-no-security-dynamic-baseband-vulnerability-research/?utm_source=rss&utm_medium=rss&utm_campaign=offensivecon25-no-signal-no-security-dynamic-baseband-vulnerability-research)\n - [ ] [MCP (Model Context Protocol) and Its Critical Vulnerabilities](https://securityboulevard.com/2025/06/mcp-model-context-protocol-and-its-critical-vulnerabilities/?utm_source=rss&utm_medium=rss&utm_campaign=mcp-model-context-protocol-and-its-critical-vulnerabilities)\n- SecWiki News\n - [ ] [SecWiki News 2025-06-07 Review](http://www.sec-wiki.com/?2025-06-07)\n- Recent Commits to cve:main\n - [ ] [Update Sat Jun 7 16:00:52 UTC 2025](https://github.com/trickest/cve/commit/5c2aaf2c81233b5265d0ca1afd10ffa89ddc58ed)\n- InfoSec Write-ups - Medium\n - [ ] [Living Off The Land: The Stealth Art of Red Team Operations](https://infosecwriteups.com/living-off-the-land-the-stealth-art-of-red-team-operations-1d65cf390792?source=rss----7b722bfd1b8d---4)\n - [ ] [21 Secret Linux Commands Hackers and Sysadmins Don’t Want You to Know About](https://infosecwriteups.com/21-secret-linux-commands-hackers-and-sysadmins-dont-want-you-to-know-about-b02fa72cc057?source=rss----7b722bfd1b8d---4)\n - [ ] [From Classic SOC to Autonomous SOC: The Future of Cyber Defense](https://infosecwriteups.com/from-classic-soc-to-autonomous-soc-the-future-of-cyber-defense-1ada150e86ca?source=rss----7b722bfd1b8d---4)\n - [ ] [Race Condition Rumble: How I Bought 100 Products for the Price of One ️️](https://infosecwriteups.com/race-condition-rumble-how-i-bought-100-products-for-the-price-of-one-%EF%B8%8F-%EF%B8%8F-fb73f8477249?source=rss----7b722bfd1b8d---4)\n - [ ] [How I Captured a Password with One Command](https://infosecwriteups.com/why-https-matters-capturing-login-information-with-tshark-12d7818a667d?source=rss----7b722bfd1b8d---4)\n - [ ] [$7,500 Bug: Exposing Any HackerOne User’s Email via Private Program Invite](https://infosecwriteups.com/7-500-bug-exposing-any-hackerone-users-email-via-private-program-invite-de6fd6b3b6c8?source=rss----7b722bfd1b8d---4)\n - [ ] [How to Set Up a VPN with Tailscale: Overcoming CGNAT Challenges](https://infosecwriteups.com/how-to-set-up-a-vpn-with-tailscale-overcoming-cgnat-challenges-0e9c0088ef79?source=rss----7b722bfd1b8d---4)\n - [ ] [OIDC: Integrate Kubernetes authentication with Azure AD via OIDC (Part IV)](https://infosecwriteups.com/oidc-integrate-kubernetes-authentication-with-azure-ad-via-oidc-part-iv-69815768cf62?source=rss----7b722bfd1b8d---4)\n- Doonsec's feed\n - [ ] [网络安全人士必知的 AWVS 漏洞扫描工具](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491495&idx=1&sn=28a749aa101664e76dd905dfc0081fe3)\n - [ ] [互联网安全的核心：数据安全不容忽视！](https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520886&idx=1&sn=47ce6e65037a7aacad891d96a8f3866d)\n - [ ] [网络安全真的完蛋了吗？](https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485228&idx=1&sn=548a77398804d6eaf8a79823e1505e43)\n - [ ] [自定义合集| 常规黑客|交流|技巧|技术使用](https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247491202&idx=1&sn=c120356411814ab8a271d4e95957a3e3)\n - [ ] [【JAVA代审】从0到实战：超全Java SQL注入漏洞全解析与防御指南](https://mp.weixin.qq.com/s?__biz=Mzk3NTIxNzEzNA==&mid=2247492804&idx=1&sn=5258769e3eb478e47f0d9cb91d055b0a)\n - [ ] [安天AVL SDK反病毒引擎升级通告（20250607）](https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650211322&idx=1&sn=376444ca8da33b76b3fe34d11997f4d8)\n - [ ] [Sqlmap全参数讲解之第六篇](https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247489310&idx=1&sn=01a0e38cb3e8ff34b9466ded585e3de1)\n - [ ] [自定义合集 | VIP BooK | 高级资源区](https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247491197&idx=1&sn=a717319ff4cde0191502f9f6ce5db711)\n - [ ] [赚取50000美元的5个顶级 XSS PoC](https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519442&idx=1&sn=c589daacc1be8e90294d6c18e509d2fb)\n - [ ] [可以的](https://mp.weixin.qq.com/s?__biz=Mzk1NzIyODg2OQ==&mid=2247484836&idx=1&sn=52ec0cb7b05502aeadcaf7f22f25bd2b)\n - [ ] [网络安全顶会——SP 2025 论文清单与摘要（中）](https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485970&idx=1&sn=abe8fcc59c58b9e0dbbeba6dccb067c2)\n - [ ] [网络安全顶会——SP 2025 论文清单与摘要（下）](https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485970&idx=2&sn=f3dcab288fcbf3ee09a30065ad6461a5)\n - [ ] [Book整理|神经网络|人工智能 |面部识别|高玩必备～（显卡太贵～）](https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247491191&idx=1&sn=9d91174c86f7dd5a4ca4154bded44d42)\n - [ ] [智联云采 SRM2.0系统接口 autologin 身份认证绕过漏洞](https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485904&idx=1&sn=88ebe7b12908357268cf7bf6ff26daed)\n - [ ] [击穿 shopify 经典回顾: 缓存欺骗的极致艺术](https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247507111&idx=1&sn=9eff921c8a54fee657e7f3229c971ece)\n - [ ] [中科院软件所｜凌祥课题组招生](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247492439&idx=1&sn=db17dc545db05a4c05a1bdc39b7aa73a)\n - [ ] [.NET 2025年第 75 期工具库和资源汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499825&idx=1&sn=5fe0437d6976a8a53098db1e2f5bf603)\n - [ ] [.NET 内网攻防实战电子报刊](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499825&idx=2&sn=779297d0e91e626002d066c4f83e9a74)\n - [ ] [绕过无 Python 环境，红队通过 Sharp4Python 执行脚本和命令](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499825&idx=3&sn=574b709a91e7b84fff4b6360cfdeb1a1)\n - [ ] [有史以来最大的中国数据泄露：逾40亿条支付宝微信数据](https://mp.weixin.qq.com/s?__biz=MzU2MDQ0NzkyMw==&mid=2247484896&idx=1&sn=5fbbb08659a106b2ab9dcfcfc3de1be6)\n - [ ] [网警护高考 安全伴你行](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652116239&idx=1&sn=0fce89bc99eceb5b6d9ac1e60e4a5416)\n - [ ] [逆向SSO登录加密](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497700&idx=1&sn=3f05f2371d864de7b8468d997fcaa5ce)\n - [ ] [IPv6那么难配置，为啥还要配置和推广？](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247530746&idx=1&sn=2e73dfcaf6dedbd37801e105dada3ac5)\n - [ ] [澳门举行国际论坛 聚焦关键信息基础设施网络安全](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247627548&idx=1&sn=5f6dbf190aa59be4f9c69891053cbd2e)\n - [ ] [BCS2025|赛力斯张正萍：安全为基赢未来 打造智能网联新能源汽车新质生产力](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247627548&idx=2&sn=038f85b379bcee71e4946c626e10413d)\n - [ ] [2025天枢杯青少年AI安全创新大赛颁奖现场掠影](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247627548&idx=3&sn=48333e91d17431f83c89373f2202f207)\n - [ ] [2025 AIDC行业现状、核心趋势及产业链重点环节梳理分析报告](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655281791&idx=1&sn=86cc9fc01fdda43e73a1d0c068df1253)\n - [ ] [【攻防实战】phpmyadmin-RCE集锦](https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247502951&idx=1&sn=fae4b38afc3c1eb2bfbc0e6f0c4db3d2)\n - [ ] [车载以太网PHY，MAC，MII，switch简介](https://mp.weixin.qq.com/s?__biz=Mzg2NTYxOTcxMw==&mid=2247494048&idx=1&sn=08b080e10cad48c1063137ba3257e4ef)\n - [ ] [《嵌入式高阶C语言》第九节课：结构体和函数指针变量的定义技巧](https://mp.weixin.qq.com/s?__biz=Mzg2NTYxOTcxMw==&mid=2247494048&idx=2&sn=c093a3c3feabc79ca2c6158557b93de4)\n - [ ] [【安全圈】刑事拘留！江苏一男子破解无人机禁飞限高](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070055&idx=1&sn=8d82fcbefb07cba0ce31b9d2c9ce28da)\n - [ ] [【安全圈】奢侈时尚品牌卡地亚遭遇网络攻击 客户数据被泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070055&idx=2&sn=dc80894346d8d9a4dfc2ce2e6dba2198)\n - [ ] [【安全圈】热门 Chrome 扩展陷 HTTP 和硬编码密钥双重漏洞](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070055&idx=3&sn=6b9ef71bf3e0c60b87ab26c126ce970f)\n - [ ] [CVE-2025-49113｜Roundcube Webmail反序列化漏洞（POC）](https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485975&idx=1&sn=a3a96fcfeca034089636e9a89ae83d48)\n - [ ] [CVE-2025-48827｜vBulletin远程代码执行漏洞（POC）](https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485975&idx=2&sn=dbe57e94f20bc9b3f98b334b6267cffc)\n - [ ] [流量分析 - oa](https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485831&idx=1&sn=3db61700e132a8a73b31a179d8562339)\n - [ ] [Windows 强制认证技术终极指南 2025](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488738&idx=1&sn=70bbee4c262d7359d8a64306915f9ddb)\n - [ ] [【资讯】江西省工业强省领导小组印发《江西省人工智能与制造业数字化转型协同实施方案》](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247553043&idx=1&sn=41bf6700b9fe027481a5cd8b66c9dd84)\n - [ ] [【资讯】武汉市数据局等五部门印发《武汉市数据标注产业发展三年行动方案(2025-2027年)》](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247553043&idx=2&sn=bdd6dd9a11b057f5789bcb9cc0d531cb)\n - [ ] [【资讯】惠州市工信局印发《惠州市加快推动人工智能与机器人产业创新发展行动方案（2025-2027年）》](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247553043&idx=3&sn=d8e75309997773ae776501b1ce920018)\n - [ ] [民生银行积极布局大模型，视AI为 “一把手” 工程推动](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932247&idx=1&sn=c0a186d360899bd57b765cbd0b0b28b2)\n - [ ] [48万！国元证券服务接口AI辅助生成平台项目](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932247&idx=2&sn=7a04f354155f384862a4948b94bad0c4)\n - [ ] [从感染到入侵：现代窃取程序攻击的24小时全流程](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322725&idx=1&sn=cdfa2728f2f4cc0b66475852c33a0a2f)\n - [ ] [6.11北京 | 报名FORCE原动力大会-大模型安全分会场 文末有福利](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322725&idx=2&sn=a6d9bad6730f5365d0a54cf5c19b22bf)\n - [ ] [FreeBuf周报 | OpenAI对抗美国法院命令；AI界面遭劫持](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322725&idx=3&sn=7b50c08315fdd840af0b22c8daefa8bc)\n - [ ] [构筑企业网络安全防线：勒索攻击防护方案设计](https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492633&idx=1&sn=4c3cf67d89fecd55430a662b00f7975e)\n - [ ] [征题中！2025 KCTF 即将开赛](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595412&idx=1&sn=da8305cf1869329da82c3b1b7a7fffd3)\n - [ ] [miniL2025 mmapheap 题解](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595412&idx=2&sn=ec6916b24840bbf9d1ea2cc1a64cd869)\n - [ ] [2025 HVV必修高危漏洞集合3](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655281741&idx=1&sn=2975bc75e4e224aca1c0bfccb16aaa4e)\n - [ ] [网络安全资料库](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655281741&idx=2&sn=243a928e5e57adc2c3469392d3ad1ab0)\n - [ ] [MCU多核异构通信原理](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247555571&idx=1&sn=be322527458800baa78dbfbda3b73ac7)\n - [ ] [一文解读ISO26262安全标准：概念阶段](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247555571&idx=2&sn=d4a5b88207156af032e5dda16ea7f9d4)\n - [ ] [子域名扫描工具开发](https://mp.weixin.qq.com/s?__biz=Mzk1NzcxMTMyOQ==&mid=2247484320&idx=1&sn=e3c2e538991c7bc908487f3b1cadf463)\n - [ ] [《网络安全和信息化》杂志2025年第6期 目录](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649173325&idx=1&sn=5b17974a82ee9614784f33413f825fef)\n - [ ] [中国网络法治发展报告（2024年）发布](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649173325&idx=2&sn=31ea3b2aef72b343014dcefa68d70f4e)\n - [ ] [【通知】第五届全国开源情报技术大会（COSINT-2025）开始征稿了](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651150376&idx=1&sn=722fa32b306120afb32ed25e072065db)\n - [ ] [【资讯】全球特定国家每日动态2025.6.7](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651150376&idx=2&sn=7af89addcc10cf3348c641cf9407aaa6)\n - [ ] [杭州新威数字信息-SMG网关管理软件 9-12ping.php 命令执行漏洞 (CVE-2025-1448)](https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491721&idx=1&sn=bca6974ea87562392f4e4f205edb8ece)\n - [ ] [以梦为舟，渡人渡己](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247491302&idx=1&sn=be54ee8ef7faf5661ee99a00a5ca0461)\n - [ ] [【已复现】Dataease JWT 认证绕过漏洞/远程代码执行（CVE-2025-49001/CVE-2025-49002）](https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484110&idx=1&sn=e7c3b3595ccf8ca433e1a2e4c2b81c46)\n - [ ] [比特币或将作为美国治国工具在“全球经济秩序重构”中发挥重要作用](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651621251&idx=1&sn=42e491663560da6da178fcee528f8f96)\n - [ ] [超详细的 kali Linux经典教程！懂一半绝对高手！](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247573095&idx=1&sn=cf940b16dd547bebff92b75eb00785f7)\n - [ ] [一款HVV攻防演练必备的IP筛选工具](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247573095&idx=2&sn=11c4ee55d6f6811c8d004065aac6c234)\n - [ ] [在看 | 5月国内安全动态一览](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247640269&idx=1&sn=4d714ed52658496f66499cf4adc7eec1)\n - [ ] [在看 | 周报：公安网安侦破一起侵犯公民个人信息案；河南某公司办公系统遭篡改挂恶意标语被罚3万元](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247640269&idx=2&sn=6a86f8057359b6bba6ec402c885f3413)\n - [ ] [1V* | 在线多人直播间，激情对线，只等你来](https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247489515&idx=1&sn=702630a163b6a38fa343ac26ac6c90ac)\n - [ ] [具有特殊含义的IP地址有哪些？包含IPv4和IPv6](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649468589&idx=1&sn=fbd00f0008ebb4fcffd6573f6580a84e)\n - [ ] [恭喜您被广东电子厂录取～](https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488941&idx=1&sn=2dfcc8cd89156fb8658f61cd5d3e485d)\n - [ ] [分享图片](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499321&idx=1&sn=ccea5fa616f82a036a3b9010db457c02)\n - [ ] [Chrome插件硬编码API密钥泄露，超2100万用户受影响](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499321&idx=2&sn=9baa2eb12b87a84225575ad7bb88e3db)\n - [ ] [电商网站 SSTI 漏洞利用：专业攻略](https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488976&idx=1&sn=823dff2e68ba60b26f2a7c07d1c136f0)\n - [ ] [capcut某映国际版：安卓+PC端的剪辑神器，国际版剪辑软件完全免费，所有功能均可无限制使用。尊享永久V1P！](https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247487314&idx=1&sn=139ab55b66523890b48b14f75736ae1a)\n - [ ] [Java 安全 | SecurityManager](https://mp.weixin.qq.com/s?__biz=MzkwMzQyMTg5OA==&mid=2247487387&idx=1&sn=2ba9157af5c0db39f5170e9a71bf8894)\n - [ ] [中国红客红蓝对抗大赛即将开始，进群即可参赛并可获得参赛资料和全套免费装备库，备战冠军，红客老兵把压箱底的宝贝都搬来了~~](https://mp.weixin.qq.com/s?__biz=MzkxMDc0NjM0Mg==&mid=2247484093&idx=1&sn=35e457da24c2e2bc8ce533d2fe944e15)\n - [ ] [HW 行动还没开始，前期开始踩点了吗？还是内部演练？](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499422&idx=1&sn=7f3c0e20f28b38b3d5718b8bca354d88)\n - [ ] [针对我国的印度 apt 间谍活动全面解析](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499422&idx=2&sn=1313fc72a2c2122f08fba5179c78dd55)\n - [ ] [微软分享用于恢复不应删除的 inetpub 文件夹的脚本](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499422&idx=3&sn=ae969a8710121ee9db217670a04fa8a9)\n - [ ] [勒索软件面前：谈判究竟是救命还是陷阱？](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499422&idx=4&sn=16888736772b265b9c2651335f5f96e8)\n - [ ] [Mimikatz 案例用法](https://mp.weixin.qq.com/s?__biz=Mzg4NzY5NjgyNw==&mid=2247485445&idx=1&sn=972422bdd22d68bbf2962e1a2c3d9ff4)\n - [ ] [特朗普政府发布加强国家网络安全的行政命令](https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247490163&idx=1&sn=8948cc6784d5bd7c70b82de029cb825a)\n - [ ] [Anthropic MCP 中的漏洞：全模式中毒 + 机密泄露工具攻击（内含 PoC）](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530523&idx=1&sn=eae1159f200e68098297acb465d5d4c8)\n - [ ] [筹码结构怎么看？三个特征判断主力是否控盘](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530523&idx=2&sn=cbb5d1f62209fe535ec85a816e8496b1)\n - [ ] [WMI 研究与横向移动](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530523&idx=3&sn=0e2360559ae8e9e373e92ae885eb8071)\n - [ ] [伪装的 Golang：用 Go 语言构建规避加载器](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530523&idx=4&sn=346cc59731c441668e8766bcdd82d0e2)\n - [ ] [车联网、工控协议测试——MQTT协议篇](https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485642&idx=1&sn=b974e97273052cee99def075c204f42f)\n - [ ] [某景人事管理系统漏洞挖掘与分析](https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485643&idx=1&sn=ec74894c3ce42e4b21fd19a407c54c24)\n - [ ] [攻防项目中的代码审计](https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485641&idx=1&sn=a492557e6d2213382b3d248875d636e0)\n - [ ] [用DeepSeek写2025年高考作文，你觉得能可以得满分吗？](https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247545015&idx=1&sn=e01b40f4f593429be767c406d7a0a635)\n - [ ] [美国网络司令部 6月2日启动年度训练演习“网络卫士 25-2”](https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247523849&idx=1&sn=b92a7db543dcc2259b2091d6baa3fd08)\n - [ ] [OpenStack核心功能详细介绍](https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247515742&idx=1&sn=28d7e560e9fa4eb1c7fb8c2e00cd9e54)\n - [ ] [国外：一周网络安全态势回顾之第102期](https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247500280&idx=1&sn=87f8e73a98dd9aa3f9172697949e4921)\n - [ ] [从 SSRF 到 RCE：一次众测Fastjson<=1.2.68反序列化RCE过程|挖洞技巧](https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492226&idx=1&sn=a5a57ba3077ab1eb8f5e4725a95a05fe)\n - [ ] [大模型赶考记：与人类共答2025高考语文大题](https://mp.weixin.qq.com/s?__biz=MzIyNDg2MDQ4Ng==&mid=2247487142&idx=1&sn=51483e851a4dd61c1a2d7a3fbfd67c2e)\n - [ ] [HNS 2025亚太站 | 华为发布HiSec Endpoint三合一终端安全防护系统，获国际权威Tolly机构认证](https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247506116&idx=1&sn=bfa6a4badc013e745a70acebb05460df)\n - [ ] [高考作文一卷《责任与担当：时代之强音》](https://mp.weixin.qq.com/s?__biz=Mzk0MzYyMjEzMQ==&mid=2247489609&idx=1&sn=ef8e635e5baf3c0c4d03b4def30a05cc)\n - [ ] [HW持续招人-缺中高级](https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486933&idx=1&sn=1c5d63aca7d1d214979295ecc4ec3912)\n - [ ] [团队内部--文本暗水印工具](https://mp.weixin.qq.com/s?__biz=MzA3MzQzODg2Nw==&mid=2247487202&idx=1&sn=99e5ecbb9740c7899a3e016ef600f2f5)\n - [ ] [国家互联网信息办公室公开《中国网络法治发展报告（2024年）》全文](https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448688959&idx=1&sn=d336454420ced211191553b7eb1b9063)\n - [ ] [2025年最新建筑材料毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=1&sn=fe81a1644f1bcfde343e68c672f3db81)\n - [ ] [2025年最新建筑给排水毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=2&sn=2055c31d99694f47f2757b655d7ae799)\n - [ ] [2025年最新建筑环境与能源应用工程方向毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=3&sn=b2d4d670d8a2e4d333cfe41e90edff63)\n - [ ] [2025年最新建筑节能毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=4&sn=c978064dd46a67ff4ea03fd34a56fb94)\n - [ ] [2025年最新建筑智能化毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=5&sn=a5d11b85b14b7c222f9eee5a9e7ec6ef)\n - [ ] [2025年最新结构工程毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=6&sn=748dd464eaf3d39ecb110c11f47ec294)\n - [ ] [2025年最新金融市场分析毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=7&sn=c061987e5afc6a367271dceb4a11bd2c)\n - [ ] [2025年最新金融政策毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=8&sn=cc7c10df2acc252d63f17e569432fa65)\n - [ ] [工业网络安全周报-2025年第21期](https://mp.weixin.qq.com/s?__biz=MzU3ODQ4NjA3Mg==&mid=2247567426&idx=1&sn=1b9fe744eb16a33113d7b3908a7d85d7)\n - [ ] [【免杀思路】APC注入绕过杀软](https://mp.weixin.qq.com/s?__biz=Mzk0MDczMzYxNw==&mid=2247484100&idx=1&sn=5ca41f3d4bb851111b0921342da01cbf)\n - [ ] [免杀shellcode加载器：免杀:火绒\\\\360\\\\卡巴\\\\wd【文末附下载地址】](https://mp.weixin.qq.com/s?__biz=MzkwNjY1NjI2Mg==&mid=2247487398&idx=1&sn=630f79ade96c90d05c247731c0b9c5fb)\n - [ ] [低空经济的核心矛盾：安全托底能力不足与产业快速发展需求之间的失衡](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247531594&idx=1&sn=d3dda79f0937df665aface4cb4d39d67)\n - [ ] [前沿报告 | 低空智联网与低空安全管控研究](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247531594&idx=2&sn=33ad2e0a4dd2d1a63f0a6def8ba72b7d)\n - [ ] [【一周安全资讯0607】《国家网络身份认证公共服务管理办法》7月15日起实施；奢侈时尚品牌卡地亚遭遇网络攻击 客户数据被泄露](https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247507334&idx=1&sn=20d0b816598de8b6f2b98f70ebf6f6c2)\n - [ ] [为什么黑客的手机安全性百分百？](https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497591&idx=1&sn=8925d6b3324c564aa2250b13ba2097f9)\n - [ ] [网络安全攻防战：别再死磕Linux那五种“伪”IO模型了！](https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497591&idx=2&sn=e330d462c28182ddcc6fdb5f4aaa341a)\n - [ ] [电子取证所有赛事检材（请转至电子取证wiki）](https://mp.weixin.qq.com/s?__biz=MzkwNTM1MTQ5OQ==&mid=2247486110&idx=1&sn=f917b1eea4d92be44113ce5fffbf0b48)\n - [ ] [数据情报化的机遇与挑战](https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247493965&idx=1&sn=1998cbc2a2a27d6347f4565c4dd9e953)\n - [ ] [【资源说明】电子取证所有赛事检材](https://mp.weixin.qq.com/s?__biz=MzI2MTUwNjI4Mw==&mid=2247489588&idx=1&sn=494addd0095eaa0628e40ed347618d4c)\n - [ ] [周末来玩啊](https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247506169&idx=1&sn=d5e3fab0436efff1b99a12db72d17380)\n - [ ] [东风汽车：车联网网络安全探索与实践](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624948&idx=1&sn=c2f8111d26ce27ffd688e0bfb9865457)\n - [ ] [智能汽车网络安全与信息安全基础培训课程 2025](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624948&idx=2&sn=fcd5c73e27a2825183f13cb12da6d9c3)\n - [ ] [智能网联汽车信息安全测试白皮书（2025）](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624948&idx=3&sn=0ff4d9dd8c4838a7939dd85eeeaede19)\n - [ ] [更进一步](https://mp.weixin.qq.com/s?__biz=MzkwNTM1MTQ5OQ==&mid=2247486108&idx=1&sn=6651df712868d63ec3e71a2b50c7bc77)\n - [ ] [第一期圆满结束 | “浦江护航”2025年上海市电信和互联网行业数据安全专项行动公益培训](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518773&idx=1&sn=e9bd5b40917ecc3f95646fa84bb103cc)\n - [ ] [美国人工智能安全研究所更名为人工智能标准与创新中心](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518773&idx=2&sn=fcf42b37934242082d178a750ce6c862)\n - [ ] [电子取证所有赛事检材](https://mp.weixin.qq.com/s?__biz=MzUyOTcyNDg1OA==&mid=2247484524&idx=1&sn=b4d4d6333054a3068182d6e0484322fe)\n - [ ] [CIA前海外情报站长谈谍报艺术](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247510683&idx=1&sn=b04ff35c0d9a4afe427b261f5411b8cc)\n - [ ] [怎样才能在哈佛做一场成功的演讲？](https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247493075&idx=1&sn=ed6cf422d76de78b7e222d1fe001d43f)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [Race Condition Rumble: How I Bought 100 Products for the Price of One ️️](https://infosecwriteups.com/race-condition-rumble-how-i-bought-100-products-for-the-price-of-one-%EF%B8%8F-%EF%B8%8F-fb73f8477249?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [$7,500 Bug: Exposing Any HackerOne User’s Email via Private Program Invite](https://infosecwriteups.com/7-500-bug-exposing-any-hackerone-users-email-via-private-program-invite-de6fd6b3b6c8?source=rss----7b722bfd1b8d--bug_bounty)\n- Didier Stevens\n - [ ] [Python Requirements for Didier Stevens Suite](https://blog.didierstevens.com/2025/06/07/python-requirements-for-didier-stevens-suite/)\n- Reverse Engineering\n - [ ] [How I hacked into my language learning app to optimize it](https://www.reddit.com/r/ReverseEngineering/comments/1l5vi74/how_i_hacked_into_my_language_learning_app_to/)\n- rtl-sdr.com\n - [ ] [Updates To NOAA-18 Decommissioning: NOAA-18 Has Now Shut Down](https://www.rtl-sdr.com/updates-to-noaa-18-decommissioning-noaa-18-has-now-shut-down/)\n- 奇客Solidot–传递最新科技情报\n - [ ] [天文学家发现中等质量黑洞的新证据](https://www.solidot.org/story?sid=81495)\n - [ ] [英国考虑推出数字 ID 卡](https://www.solidot.org/story?sid=81494)\n - [ ] [就读美国大学的中国留学生人数持续下降](https://www.solidot.org/story?sid=81493)\n - [ ] [YouTube 以有害内容下架主播的自我托管视频内容的教程](https://www.solidot.org/story?sid=81492)\n- 看雪学苑\n - [ ] [征题中！2025 KCTF 即将开赛](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595412&idx=1&sn=da8305cf1869329da82c3b1b7a7fffd3)\n - [ ] [miniL2025 mmapheap 题解](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595412&idx=2&sn=ec6916b24840bbf9d1ea2cc1a64cd869)\n- 丁爸 情报分析师的工具箱\n - [ ] [【通知】第五届全国开源情报技术大会（COSINT-2025）开始征稿了](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651150376&idx=1&sn=722fa32b306120afb32ed25e072065db)\n - [ ] [【资讯】全球特定国家每日动态2025.6.7](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651150376&idx=2&sn=7af89addcc10cf3348c641cf9407aaa6)\n- dotNet安全矩阵\n - [ ] [.NET 2025年第 75 期工具库和资源汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499825&idx=1&sn=5fe0437d6976a8a53098db1e2f5bf603)\n - [ ] [.NET 内网攻防实战电子报刊](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499825&idx=2&sn=779297d0e91e626002d066c4f83e9a74)\n - [ ] [绕过无 Python 环境，红队通过 Sharp4Python 执行脚本和命令](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499825&idx=3&sn=574b709a91e7b84fff4b6360cfdeb1a1)\n- 安全内参\n - [ ] [阿里云核心域名遭劫持，Shadowserver扮演何种角色？](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514485&idx=1&sn=b79ac979390502df50bea6aa05bdd19b)\n- 漏洞战争\n - [ ] [网络安全顶会——SP 2025 论文清单与摘要（中）](https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485970&idx=1&sn=abe8fcc59c58b9e0dbbeba6dccb067c2)\n - [ ] [网络安全顶会——SP 2025 论文清单与摘要（下）](https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485970&idx=2&sn=f3dcab288fcbf3ee09a30065ad6461a5)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Malicious npm packages posing as utilities delete project directories](https://www.bleepingcomputer.com/news/security/malicious-npm-packages-posing-as-utilities-delete-project-directories/)\n - [ ] [Supply chain attack hits Gluestack NPM packages with 960K weekly downloads](https://www.bleepingcomputer.com/news/security/supply-chain-attack-hits-gluestack-npm-packages-with-960k-weekly-downloads/)\n - [ ] [Guerre di Rete - Musk-Trump, la posta in gioco](https://guerredirete.substack.com/p/guerre-di-rete-musk-trump-la-posta)\n - [ ] [Disk Union - 690,667 breached accounts](https://haveibeenpwned.com/Breach/DiskUnion)\n- 情报分析师\n - [ ] [2020–2025年俾路支解放军袭击手段与策略演变分析](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650561265&idx=1&sn=402ca8167f5e9a1d47a4ad91c5fe2cf5)\n- 极客公园\n - [ ] [增速超比亚迪后，新能源狂飙 135%，这家公司做对了什么？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653080850&idx=1&sn=51035f2a2887fe93bcd390a6fd34b19d)\n - [ ] [王自如解释投身 AI：确实来钱快；雷军：给1万车主免费培训智驾；身家缩水股价暴跌，马斯克向美总统低头 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653080841&idx=1&sn=ae72ca3a4c68d2c8a55d8c1303f6b976)\n- 迪哥讲事\n - [ ] [逆向SSO登录加密](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497700&idx=1&sn=3f05f2371d864de7b8468d997fcaa5ce)\n- ICT Security Magazine\n - [ ] [Zip Slip: quando un semplice file Zip minaccia la sicurezza](https://www.ictsecuritymagazine.com/articoli/zip-slip-vulnerability/)\n- BorderGate\n - [ ] [Local Large Language Models](https://www.bordergate.co.uk/local-large-language-models/)\n- Information Security\n - [ ] [Account hacked](https://www.reddit.com/r/Information_Security/comments/1l5g7k2/account_hacked/)\n- Your Open Hacker Community\n - [ ] [Hack + JLPT](https://www.reddit.com/r/HowToHack/comments/1l5sk16/hack_jlpt/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [If you had to focus on one cybersecurity skill starting out — what would it be?](https://www.reddit.com/r/netsecstudents/comments/1l5jrdc/if_you_had_to_focus_on_one_cybersecurity_skill/)\n - [ ] [Need advice on continuing my career in cybersecurity](https://www.reddit.com/r/netsecstudents/comments/1l5r7ne/need_advice_on_continuing_my_career_in/)\n - [ ] [Ho avviato un blog sulla sicurezza informatica dove imparo insieme ad altri. Feedback benvenuti!](https://www.reddit.com/r/netsecstudents/comments/1l5pazs/ho_avviato_un_blog_sulla_sicurezza_informatica/)\n- Social Engineering\n - [ ] [Social engineering attempts or am I overthinking?](https://www.reddit.com/r/SocialEngineering/comments/1l5wjtb/social_engineering_attempts_or_am_i_overthinking/)\n- Technical Information Security Content & Discussion\n - [ ] [Riding The Time Machine: Journey Through An Old vBulletin PHP Object Injection](https://www.reddit.com/r/netsec/comments/1l5lj9b/riding_the_time_machine_journey_through_an_old/)\n- Blackhat Library: Hacking techniques and research\n - [ ] [looking for a new project to get excited about. partner up?](https://www.reddit.com/r/blackhat/comments/1l59qya/looking_for_a_new_project_to_get_excited_about/)\n- Security Affairs\n - [ ] [Experts found 4 billion user records online, the largest known leak of Chinese personal data from a single source](https://securityaffairs.com/178744/data-breach/experts-found-4-billion-user-records-online-the-largest-known-leak-of-chinese-personal-data-from-a-single-source.html)\n"}, "933e22faa4bdabcc0bb9599078336425ff9d9668": {"t": 1785772247.282889, "n": 28368, "h": "f839c99868604d30", "c": "# 每日安全资讯（2025-06-08）\n\n- Security Boulevard\n - [ ] [Empower Your Team with Robust NHI Protocols](https://securityboulevard.com/2025/06/empower-your-team-with-robust-nhi-protocols/?utm_source=rss&utm_medium=rss&utm_campaign=empower-your-team-with-robust-nhi-protocols)\n - [ ] [Driving Innovation through Secure NHIs](https://securityboulevard.com/2025/06/driving-innovation-through-secure-nhis-2/?utm_source=rss&utm_medium=rss&utm_campaign=driving-innovation-through-secure-nhis-2)\n - [ ] [Boost Your Confidence with Strong NHI Management](https://securityboulevard.com/2025/06/boost-your-confidence-with-strong-nhi-management/?utm_source=rss&utm_medium=rss&utm_campaign=boost-your-confidence-with-strong-nhi-management)\n - [ ] [Scalable Solutions for NHI Management](https://securityboulevard.com/2025/06/scalable-solutions-for-nhi-management/?utm_source=rss&utm_medium=rss&utm_campaign=scalable-solutions-for-nhi-management)\n - [ ] [OffensiveCon25 – No Signal, No Security: Dynamic Baseband Vulnerability Research](https://securityboulevard.com/2025/06/offensivecon25-no-signal-no-security-dynamic-baseband-vulnerability-research/?utm_source=rss&utm_medium=rss&utm_campaign=offensivecon25-no-signal-no-security-dynamic-baseband-vulnerability-research)\n - [ ] [MCP (Model Context Protocol) and Its Critical Vulnerabilities](https://securityboulevard.com/2025/06/mcp-model-context-protocol-and-its-critical-vulnerabilities/?utm_source=rss&utm_medium=rss&utm_campaign=mcp-model-context-protocol-and-its-critical-vulnerabilities)\n- SecWiki News\n - [ ] [SecWiki News 2025-06-07 Review](http://www.sec-wiki.com/?2025-06-07)\n- Recent Commits to cve:main\n - [ ] [Update Sat Jun 7 16:00:52 UTC 2025](https://github.com/trickest/cve/commit/5c2aaf2c81233b5265d0ca1afd10ffa89ddc58ed)\n- InfoSec Write-ups - Medium\n - [ ] [Living Off The Land: The Stealth Art of Red Team Operations](https://infosecwriteups.com/living-off-the-land-the-stealth-art-of-red-team-operations-1d65cf390792?source=rss----7b722bfd1b8d---4)\n - [ ] [21 Secret Linux Commands Hackers and Sysadmins Don’t Want You to Know About](https://infosecwriteups.com/21-secret-linux-commands-hackers-and-sysadmins-dont-want-you-to-know-about-b02fa72cc057?source=rss----7b722bfd1b8d---4)\n - [ ] [From Classic SOC to Autonomous SOC: The Future of Cyber Defense](https://infosecwriteups.com/from-classic-soc-to-autonomous-soc-the-future-of-cyber-defense-1ada150e86ca?source=rss----7b722bfd1b8d---4)\n - [ ] [Race Condition Rumble: How I Bought 100 Products for the Price of One ️️](https://infosecwriteups.com/race-condition-rumble-how-i-bought-100-products-for-the-price-of-one-%EF%B8%8F-%EF%B8%8F-fb73f8477249?source=rss----7b722bfd1b8d---4)\n - [ ] [How I Captured a Password with One Command](https://infosecwriteups.com/why-https-matters-capturing-login-information-with-tshark-12d7818a667d?source=rss----7b722bfd1b8d---4)\n - [ ] [$7,500 Bug: Exposing Any HackerOne User’s Email via Private Program Invite](https://infosecwriteups.com/7-500-bug-exposing-any-hackerone-users-email-via-private-program-invite-de6fd6b3b6c8?source=rss----7b722bfd1b8d---4)\n - [ ] [How to Set Up a VPN with Tailscale: Overcoming CGNAT Challenges](https://infosecwriteups.com/how-to-set-up-a-vpn-with-tailscale-overcoming-cgnat-challenges-0e9c0088ef79?source=rss----7b722bfd1b8d---4)\n - [ ] [OIDC: Integrate Kubernetes authentication with Azure AD via OIDC (Part IV)](https://infosecwriteups.com/oidc-integrate-kubernetes-authentication-with-azure-ad-via-oidc-part-iv-69815768cf62?source=rss----7b722bfd1b8d---4)\n- Doonsec's feed\n - [ ] [网络安全人士必知的 AWVS 漏洞扫描工具](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491495&idx=1&sn=28a749aa101664e76dd905dfc0081fe3)\n - [ ] [互联网安全的核心：数据安全不容忽视！](https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520886&idx=1&sn=47ce6e65037a7aacad891d96a8f3866d)\n - [ ] [网络安全真的完蛋了吗？](https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485228&idx=1&sn=548a77398804d6eaf8a79823e1505e43)\n - [ ] [自定义合集| 常规黑客|交流|技巧|技术使用](https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247491202&idx=1&sn=c120356411814ab8a271d4e95957a3e3)\n - [ ] [【JAVA代审】从0到实战：超全Java SQL注入漏洞全解析与防御指南](https://mp.weixin.qq.com/s?__biz=Mzk3NTIxNzEzNA==&mid=2247492804&idx=1&sn=5258769e3eb478e47f0d9cb91d055b0a)\n - [ ] [安天AVL SDK反病毒引擎升级通告（20250607）](https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650211322&idx=1&sn=376444ca8da33b76b3fe34d11997f4d8)\n - [ ] [Sqlmap全参数讲解之第六篇](https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247489310&idx=1&sn=01a0e38cb3e8ff34b9466ded585e3de1)\n - [ ] [自定义合集 | VIP BooK | 高级资源区](https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247491197&idx=1&sn=a717319ff4cde0191502f9f6ce5db711)\n - [ ] [赚取50000美元的5个顶级 XSS PoC](https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519442&idx=1&sn=c589daacc1be8e90294d6c18e509d2fb)\n - [ ] [可以的](https://mp.weixin.qq.com/s?__biz=Mzk1NzIyODg2OQ==&mid=2247484836&idx=1&sn=52ec0cb7b05502aeadcaf7f22f25bd2b)\n - [ ] [网络安全顶会——SP 2025 论文清单与摘要（中）](https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485970&idx=1&sn=abe8fcc59c58b9e0dbbeba6dccb067c2)\n - [ ] [网络安全顶会——SP 2025 论文清单与摘要（下）](https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485970&idx=2&sn=f3dcab288fcbf3ee09a30065ad6461a5)\n - [ ] [Book整理|神经网络|人工智能 |面部识别|高玩必备～（显卡太贵～）](https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247491191&idx=1&sn=9d91174c86f7dd5a4ca4154bded44d42)\n - [ ] [智联云采 SRM2.0系统接口 autologin 身份认证绕过漏洞](https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485904&idx=1&sn=88ebe7b12908357268cf7bf6ff26daed)\n - [ ] [击穿 shopify 经典回顾: 缓存欺骗的极致艺术](https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247507111&idx=1&sn=9eff921c8a54fee657e7f3229c971ece)\n - [ ] [中科院软件所｜凌祥课题组招生](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247492439&idx=1&sn=db17dc545db05a4c05a1bdc39b7aa73a)\n - [ ] [.NET 2025年第 75 期工具库和资源汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499825&idx=1&sn=5fe0437d6976a8a53098db1e2f5bf603)\n - [ ] [.NET 内网攻防实战电子报刊](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499825&idx=2&sn=779297d0e91e626002d066c4f83e9a74)\n - [ ] [绕过无 Python 环境，红队通过 Sharp4Python 执行脚本和命令](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499825&idx=3&sn=574b709a91e7b84fff4b6360cfdeb1a1)\n - [ ] [有史以来最大的中国数据泄露：逾40亿条支付宝微信数据](https://mp.weixin.qq.com/s?__biz=MzU2MDQ0NzkyMw==&mid=2247484896&idx=1&sn=5fbbb08659a106b2ab9dcfcfc3de1be6)\n - [ ] [网警护高考 安全伴你行](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652116239&idx=1&sn=0fce89bc99eceb5b6d9ac1e60e4a5416)\n - [ ] [逆向SSO登录加密](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497700&idx=1&sn=3f05f2371d864de7b8468d997fcaa5ce)\n - [ ] [IPv6那么难配置，为啥还要配置和推广？](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247530746&idx=1&sn=2e73dfcaf6dedbd37801e105dada3ac5)\n - [ ] [澳门举行国际论坛 聚焦关键信息基础设施网络安全](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247627548&idx=1&sn=5f6dbf190aa59be4f9c69891053cbd2e)\n - [ ] [BCS2025|赛力斯张正萍：安全为基赢未来 打造智能网联新能源汽车新质生产力](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247627548&idx=2&sn=038f85b379bcee71e4946c626e10413d)\n - [ ] [2025天枢杯青少年AI安全创新大赛颁奖现场掠影](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247627548&idx=3&sn=48333e91d17431f83c89373f2202f207)\n - [ ] [2025 AIDC行业现状、核心趋势及产业链重点环节梳理分析报告](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655281791&idx=1&sn=86cc9fc01fdda43e73a1d0c068df1253)\n - [ ] [【攻防实战】phpmyadmin-RCE集锦](https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247502951&idx=1&sn=fae4b38afc3c1eb2bfbc0e6f0c4db3d2)\n - [ ] [车载以太网PHY，MAC，MII，switch简介](https://mp.weixin.qq.com/s?__biz=Mzg2NTYxOTcxMw==&mid=2247494048&idx=1&sn=08b080e10cad48c1063137ba3257e4ef)\n - [ ] [《嵌入式高阶C语言》第九节课：结构体和函数指针变量的定义技巧](https://mp.weixin.qq.com/s?__biz=Mzg2NTYxOTcxMw==&mid=2247494048&idx=2&sn=c093a3c3feabc79ca2c6158557b93de4)\n - [ ] [【安全圈】刑事拘留！江苏一男子破解无人机禁飞限高](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070055&idx=1&sn=8d82fcbefb07cba0ce31b9d2c9ce28da)\n - [ ] [【安全圈】奢侈时尚品牌卡地亚遭遇网络攻击 客户数据被泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070055&idx=2&sn=dc80894346d8d9a4dfc2ce2e6dba2198)\n - [ ] [【安全圈】热门 Chrome 扩展陷 HTTP 和硬编码密钥双重漏洞](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070055&idx=3&sn=6b9ef71bf3e0c60b87ab26c126ce970f)\n - [ ] [CVE-2025-49113｜Roundcube Webmail反序列化漏洞（POC）](https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485975&idx=1&sn=a3a96fcfeca034089636e9a89ae83d48)\n - [ ] [CVE-2025-48827｜vBulletin远程代码执行漏洞（POC）](https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485975&idx=2&sn=dbe57e94f20bc9b3f98b334b6267cffc)\n - [ ] [流量分析 - oa](https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485831&idx=1&sn=3db61700e132a8a73b31a179d8562339)\n - [ ] [Windows 强制认证技术终极指南 2025](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488738&idx=1&sn=70bbee4c262d7359d8a64306915f9ddb)\n - [ ] [【资讯】江西省工业强省领导小组印发《江西省人工智能与制造业数字化转型协同实施方案》](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247553043&idx=1&sn=41bf6700b9fe027481a5cd8b66c9dd84)\n - [ ] [【资讯】武汉市数据局等五部门印发《武汉市数据标注产业发展三年行动方案(2025-2027年)》](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247553043&idx=2&sn=bdd6dd9a11b057f5789bcb9cc0d531cb)\n - [ ] [【资讯】惠州市工信局印发《惠州市加快推动人工智能与机器人产业创新发展行动方案（2025-2027年）》](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247553043&idx=3&sn=d8e75309997773ae776501b1ce920018)\n - [ ] [民生银行积极布局大模型，视AI为 “一把手” 工程推动](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932247&idx=1&sn=c0a186d360899bd57b765cbd0b0b28b2)\n - [ ] [48万！国元证券服务接口AI辅助生成平台项目](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932247&idx=2&sn=7a04f354155f384862a4948b94bad0c4)\n - [ ] [从感染到入侵：现代窃取程序攻击的24小时全流程](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322725&idx=1&sn=cdfa2728f2f4cc0b66475852c33a0a2f)\n - [ ] [6.11北京 | 报名FORCE原动力大会-大模型安全分会场 文末有福利](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322725&idx=2&sn=a6d9bad6730f5365d0a54cf5c19b22bf)\n - [ ] [FreeBuf周报 | OpenAI对抗美国法院命令；AI界面遭劫持](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322725&idx=3&sn=7b50c08315fdd840af0b22c8daefa8bc)\n - [ ] [构筑企业网络安全防线：勒索攻击防护方案设计](https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492633&idx=1&sn=4c3cf67d89fecd55430a662b00f7975e)\n - [ ] [征题中！2025 KCTF 即将开赛](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595412&idx=1&sn=da8305cf1869329da82c3b1b7a7fffd3)\n - [ ] [miniL2025 mmapheap 题解](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595412&idx=2&sn=ec6916b24840bbf9d1ea2cc1a64cd869)\n - [ ] [2025 HVV必修高危漏洞集合3](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655281741&idx=1&sn=2975bc75e4e224aca1c0bfccb16aaa4e)\n - [ ] [网络安全资料库](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655281741&idx=2&sn=243a928e5e57adc2c3469392d3ad1ab0)\n - [ ] [MCU多核异构通信原理](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247555571&idx=1&sn=be322527458800baa78dbfbda3b73ac7)\n - [ ] [一文解读ISO26262安全标准：概念阶段](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247555571&idx=2&sn=d4a5b88207156af032e5dda16ea7f9d4)\n - [ ] [子域名扫描工具开发](https://mp.weixin.qq.com/s?__biz=Mzk1NzcxMTMyOQ==&mid=2247484320&idx=1&sn=e3c2e538991c7bc908487f3b1cadf463)\n - [ ] [《网络安全和信息化》杂志2025年第6期 目录](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649173325&idx=1&sn=5b17974a82ee9614784f33413f825fef)\n - [ ] [中国网络法治发展报告（2024年）发布](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649173325&idx=2&sn=31ea3b2aef72b343014dcefa68d70f4e)\n - [ ] [【通知】第五届全国开源情报技术大会（COSINT-2025）开始征稿了](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651150376&idx=1&sn=722fa32b306120afb32ed25e072065db)\n - [ ] [【资讯】全球特定国家每日动态2025.6.7](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651150376&idx=2&sn=7af89addcc10cf3348c641cf9407aaa6)\n - [ ] [杭州新威数字信息-SMG网关管理软件 9-12ping.php 命令执行漏洞 (CVE-2025-1448)](https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491721&idx=1&sn=bca6974ea87562392f4e4f205edb8ece)\n - [ ] [以梦为舟，渡人渡己](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247491302&idx=1&sn=be54ee8ef7faf5661ee99a00a5ca0461)\n - [ ] [【已复现】Dataease JWT 认证绕过漏洞/远程代码执行（CVE-2025-49001/CVE-2025-49002）](https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484110&idx=1&sn=e7c3b3595ccf8ca433e1a2e4c2b81c46)\n - [ ] [比特币或将作为美国治国工具在“全球经济秩序重构”中发挥重要作用](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651621251&idx=1&sn=42e491663560da6da178fcee528f8f96)\n - [ ] [超详细的 kali Linux经典教程！懂一半绝对高手！](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247573095&idx=1&sn=cf940b16dd547bebff92b75eb00785f7)\n - [ ] [一款HVV攻防演练必备的IP筛选工具](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247573095&idx=2&sn=11c4ee55d6f6811c8d004065aac6c234)\n - [ ] [在看 | 5月国内安全动态一览](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247640269&idx=1&sn=4d714ed52658496f66499cf4adc7eec1)\n - [ ] [在看 | 周报：公安网安侦破一起侵犯公民个人信息案；河南某公司办公系统遭篡改挂恶意标语被罚3万元](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247640269&idx=2&sn=6a86f8057359b6bba6ec402c885f3413)\n - [ ] [1V* | 在线多人直播间，激情对线，只等你来](https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247489515&idx=1&sn=702630a163b6a38fa343ac26ac6c90ac)\n - [ ] [具有特殊含义的IP地址有哪些？包含IPv4和IPv6](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649468589&idx=1&sn=fbd00f0008ebb4fcffd6573f6580a84e)\n - [ ] [恭喜您被广东电子厂录取～](https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488941&idx=1&sn=2dfcc8cd89156fb8658f61cd5d3e485d)\n - [ ] [分享图片](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499321&idx=1&sn=ccea5fa616f82a036a3b9010db457c02)\n - [ ] [Chrome插件硬编码API密钥泄露，超2100万用户受影响](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499321&idx=2&sn=9baa2eb12b87a84225575ad7bb88e3db)\n - [ ] [电商网站 SSTI 漏洞利用：专业攻略](https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488976&idx=1&sn=823dff2e68ba60b26f2a7c07d1c136f0)\n - [ ] [capcut某映国际版：安卓+PC端的剪辑神器，国际版剪辑软件完全免费，所有功能均可无限制使用。尊享永久V1P！](https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247487314&idx=1&sn=139ab55b66523890b48b14f75736ae1a)\n - [ ] [Java 安全 | SecurityManager](https://mp.weixin.qq.com/s?__biz=MzkwMzQyMTg5OA==&mid=2247487387&idx=1&sn=2ba9157af5c0db39f5170e9a71bf8894)\n - [ ] [中国红客红蓝对抗大赛即将开始，进群即可参赛并可获得参赛资料和全套免费装备库，备战冠军，红客老兵把压箱底的宝贝都搬来了~~](https://mp.weixin.qq.com/s?__biz=MzkxMDc0NjM0Mg==&mid=2247484093&idx=1&sn=35e457da24c2e2bc8ce533d2fe944e15)\n - [ ] [HW 行动还没开始，前期开始踩点了吗？还是内部演练？](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499422&idx=1&sn=7f3c0e20f28b38b3d5718b8bca354d88)\n - [ ] [针对我国的印度 apt 间谍活动全面解析](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499422&idx=2&sn=1313fc72a2c2122f08fba5179c78dd55)\n - [ ] [微软分享用于恢复不应删除的 inetpub 文件夹的脚本](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499422&idx=3&sn=ae969a8710121ee9db217670a04fa8a9)\n - [ ] [勒索软件面前：谈判究竟是救命还是陷阱？](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499422&idx=4&sn=16888736772b265b9c2651335f5f96e8)\n - [ ] [Mimikatz 案例用法](https://mp.weixin.qq.com/s?__biz=Mzg4NzY5NjgyNw==&mid=2247485445&idx=1&sn=972422bdd22d68bbf2962e1a2c3d9ff4)\n - [ ] [特朗普政府发布加强国家网络安全的行政命令](https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247490163&idx=1&sn=8948cc6784d5bd7c70b82de029cb825a)\n - [ ] [Anthropic MCP 中的漏洞：全模式中毒 + 机密泄露工具攻击（内含 PoC）](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530523&idx=1&sn=eae1159f200e68098297acb465d5d4c8)\n - [ ] [筹码结构怎么看？三个特征判断主力是否控盘](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530523&idx=2&sn=cbb5d1f62209fe535ec85a816e8496b1)\n - [ ] [WMI 研究与横向移动](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530523&idx=3&sn=0e2360559ae8e9e373e92ae885eb8071)\n - [ ] [伪装的 Golang：用 Go 语言构建规避加载器](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530523&idx=4&sn=346cc59731c441668e8766bcdd82d0e2)\n - [ ] [车联网、工控协议测试——MQTT协议篇](https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485642&idx=1&sn=b974e97273052cee99def075c204f42f)\n - [ ] [某景人事管理系统漏洞挖掘与分析](https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485643&idx=1&sn=ec74894c3ce42e4b21fd19a407c54c24)\n - [ ] [攻防项目中的代码审计](https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485641&idx=1&sn=a492557e6d2213382b3d248875d636e0)\n - [ ] [用DeepSeek写2025年高考作文，你觉得能可以得满分吗？](https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247545015&idx=1&sn=e01b40f4f593429be767c406d7a0a635)\n - [ ] [美国网络司令部 6月2日启动年度训练演习“网络卫士 25-2”](https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247523849&idx=1&sn=b92a7db543dcc2259b2091d6baa3fd08)\n - [ ] [OpenStack核心功能详细介绍](https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247515742&idx=1&sn=28d7e560e9fa4eb1c7fb8c2e00cd9e54)\n - [ ] [国外：一周网络安全态势回顾之第102期](https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247500280&idx=1&sn=87f8e73a98dd9aa3f9172697949e4921)\n - [ ] [从 SSRF 到 RCE：一次众测Fastjson<=1.2.68反序列化RCE过程|挖洞技巧](https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492226&idx=1&sn=a5a57ba3077ab1eb8f5e4725a95a05fe)\n - [ ] [大模型赶考记：与人类共答2025高考语文大题](https://mp.weixin.qq.com/s?__biz=MzIyNDg2MDQ4Ng==&mid=2247487142&idx=1&sn=51483e851a4dd61c1a2d7a3fbfd67c2e)\n - [ ] [HNS 2025亚太站 | 华为发布HiSec Endpoint三合一终端安全防护系统，获国际权威Tolly机构认证](https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247506116&idx=1&sn=bfa6a4badc013e745a70acebb05460df)\n - [ ] [高考作文一卷《责任与担当：时代之强音》](https://mp.weixin.qq.com/s?__biz=Mzk0MzYyMjEzMQ==&mid=2247489609&idx=1&sn=ef8e635e5baf3c0c4d03b4def30a05cc)\n - [ ] [HW持续招人-缺中高级](https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486933&idx=1&sn=1c5d63aca7d1d214979295ecc4ec3912)\n - [ ] [团队内部--文本暗水印工具](https://mp.weixin.qq.com/s?__biz=MzA3MzQzODg2Nw==&mid=2247487202&idx=1&sn=99e5ecbb9740c7899a3e016ef600f2f5)\n - [ ] [国家互联网信息办公室公开《中国网络法治发展报告（2024年）》全文](https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448688959&idx=1&sn=d336454420ced211191553b7eb1b9063)\n - [ ] [2025年最新建筑材料毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=1&sn=fe81a1644f1bcfde343e68c672f3db81)\n - [ ] [2025年最新建筑给排水毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=2&sn=2055c31d99694f47f2757b655d7ae799)\n - [ ] [2025年最新建筑环境与能源应用工程方向毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=3&sn=b2d4d670d8a2e4d333cfe41e90edff63)\n - [ ] [2025年最新建筑节能毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=4&sn=c978064dd46a67ff4ea03fd34a56fb94)\n - [ ] [2025年最新建筑智能化毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=5&sn=a5d11b85b14b7c222f9eee5a9e7ec6ef)\n - [ ] [2025年最新结构工程毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=6&sn=748dd464eaf3d39ecb110c11f47ec294)\n - [ ] [2025年最新金融市场分析毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=7&sn=c061987e5afc6a367271dceb4a11bd2c)\n - [ ] [2025年最新金融政策毕业论文全程技巧指南：快速拿下选题、文献综述、大纲、初稿、降重、润色与AI降重](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247504050&idx=8&sn=cc7c10df2acc252d63f17e569432fa65)\n - [ ] [工业网络安全周报-2025年第21期](https://mp.weixin.qq.com/s?__biz=MzU3ODQ4NjA3Mg==&mid=2247567426&idx=1&sn=1b9fe744eb16a33113d7b3908a7d85d7)\n - [ ] [【免杀思路】APC注入绕过杀软](https://mp.weixin.qq.com/s?__biz=Mzk0MDczMzYxNw==&mid=2247484100&idx=1&sn=5ca41f3d4bb851111b0921342da01cbf)\n - [ ] [免杀shellcode加载器：免杀:火绒\\\\360\\\\卡巴\\\\wd【文末附下载地址】](https://mp.weixin.qq.com/s?__biz=MzkwNjY1NjI2Mg==&mid=2247487398&idx=1&sn=630f79ade96c90d05c247731c0b9c5fb)\n - [ ] [低空经济的核心矛盾：安全托底能力不足与产业快速发展需求之间的失衡](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247531594&idx=1&sn=d3dda79f0937df665aface4cb4d39d67)\n - [ ] [前沿报告 | 低空智联网与低空安全管控研究](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247531594&idx=2&sn=33ad2e0a4dd2d1a63f0a6def8ba72b7d)\n - [ ] [【一周安全资讯0607】《国家网络身份认证公共服务管理办法》7月15日起实施；奢侈时尚品牌卡地亚遭遇网络攻击 客户数据被泄露](https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247507334&idx=1&sn=20d0b816598de8b6f2b98f70ebf6f6c2)\n - [ ] [为什么黑客的手机安全性百分百？](https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497591&idx=1&sn=8925d6b3324c564aa2250b13ba2097f9)\n - [ ] [网络安全攻防战：别再死磕Linux那五种“伪”IO模型了！](https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497591&idx=2&sn=e330d462c28182ddcc6fdb5f4aaa341a)\n - [ ] [电子取证所有赛事检材（请转至电子取证wiki）](https://mp.weixin.qq.com/s?__biz=MzkwNTM1MTQ5OQ==&mid=2247486110&idx=1&sn=f917b1eea4d92be44113ce5fffbf0b48)\n - [ ] [数据情报化的机遇与挑战](https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247493965&idx=1&sn=1998cbc2a2a27d6347f4565c4dd9e953)\n - [ ] [【资源说明】电子取证所有赛事检材](https://mp.weixin.qq.com/s?__biz=MzI2MTUwNjI4Mw==&mid=2247489588&idx=1&sn=494addd0095eaa0628e40ed347618d4c)\n - [ ] [周末来玩啊](https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247506169&idx=1&sn=d5e3fab0436efff1b99a12db72d17380)\n - [ ] [东风汽车：车联网网络安全探索与实践](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624948&idx=1&sn=c2f8111d26ce27ffd688e0bfb9865457)\n - [ ] [智能汽车网络安全与信息安全基础培训课程 2025](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624948&idx=2&sn=fcd5c73e27a2825183f13cb12da6d9c3)\n - [ ] [智能网联汽车信息安全测试白皮书（2025）](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624948&idx=3&sn=0ff4d9dd8c4838a7939dd85eeeaede19)\n - [ ] [更进一步](https://mp.weixin.qq.com/s?__biz=MzkwNTM1MTQ5OQ==&mid=2247486108&idx=1&sn=6651df712868d63ec3e71a2b50c7bc77)\n - [ ] [第一期圆满结束 | “浦江护航”2025年上海市电信和互联网行业数据安全专项行动公益培训](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518773&idx=1&sn=e9bd5b40917ecc3f95646fa84bb103cc)\n - [ ] [美国人工智能安全研究所更名为人工智能标准与创新中心](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518773&idx=2&sn=fcf42b37934242082d178a750ce6c862)\n - [ ] [电子取证所有赛事检材](https://mp.weixin.qq.com/s?__biz=MzUyOTcyNDg1OA==&mid=2247484524&idx=1&sn=b4d4d6333054a3068182d6e0484322fe)\n - [ ] [CIA前海外情报站长谈谍报艺术](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247510683&idx=1&sn=b04ff35c0d9a4afe427b261f5411b8cc)\n - [ ] [怎样才能在哈佛做一场成功的演讲？](https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247493075&idx=1&sn=ed6cf422d76de78b7e222d1fe001d43f)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [Race Condition Rumble: How I Bought 100 Products for the Price of One ️️](https://infosecwriteups.com/race-condition-rumble-how-i-bought-100-products-for-the-price-of-one-%EF%B8%8F-%EF%B8%8F-fb73f8477249?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [$7,500 Bug: Exposing Any HackerOne User’s Email via Private Program Invite](https://infosecwriteups.com/7-500-bug-exposing-any-hackerone-users-email-via-private-program-invite-de6fd6b3b6c8?source=rss----7b722bfd1b8d--bug_bounty)\n- Didier Stevens\n - [ ] [Python Requirements for Didier Stevens Suite](https://blog.didierstevens.com/2025/06/07/python-requirements-for-didier-stevens-suite/)\n- Reverse Engineering\n - [ ] [How I hacked into my language learning app to optimize it](https://www.reddit.com/r/ReverseEngineering/comments/1l5vi74/how_i_hacked_into_my_language_learning_app_to/)\n- rtl-sdr.com\n - [ ] [Updates To NOAA-18 Decommissioning: NOAA-18 Has Now Shut Down](https://www.rtl-sdr.com/updates-to-noaa-18-decommissioning-noaa-18-has-now-shut-down/)\n- 奇客Solidot–传递最新科技情报\n - [ ] [天文学家发现中等质量黑洞的新证据](https://www.solidot.org/story?sid=81495)\n - [ ] [英国考虑推出数字 ID 卡](https://www.solidot.org/story?sid=81494)\n - [ ] [就读美国大学的中国留学生人数持续下降](https://www.solidot.org/story?sid=81493)\n - [ ] [YouTube 以有害内容下架主播的自我托管视频内容的教程](https://www.solidot.org/story?sid=81492)\n- 看雪学苑\n - [ ] [征题中！2025 KCTF 即将开赛](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595412&idx=1&sn=da8305cf1869329da82c3b1b7a7fffd3)\n - [ ] [miniL2025 mmapheap 题解](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595412&idx=2&sn=ec6916b24840bbf9d1ea2cc1a64cd869)\n- 丁爸 情报分析师的工具箱\n - [ ] [【通知】第五届全国开源情报技术大会（COSINT-2025）开始征稿了](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651150376&idx=1&sn=722fa32b306120afb32ed25e072065db)\n - [ ] [【资讯】全球特定国家每日动态2025.6.7](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651150376&idx=2&sn=7af89addcc10cf3348c641cf9407aaa6)\n- dotNet安全矩阵\n - [ ] [.NET 2025年第 75 期工具库和资源汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499825&idx=1&sn=5fe0437d6976a8a53098db1e2f5bf603)\n - [ ] [.NET 内网攻防实战电子报刊](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499825&idx=2&sn=779297d0e91e626002d066c4f83e9a74)\n - [ ] [绕过无 Python 环境，红队通过 Sharp4Python 执行脚本和命令](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499825&idx=3&sn=574b709a91e7b84fff4b6360cfdeb1a1)\n- 安全内参\n - [ ] [阿里云核心域名遭劫持，Shadowserver扮演何种角色？](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514485&idx=1&sn=b79ac979390502df50bea6aa05bdd19b)\n- 漏洞战争\n - [ ] [网络安全顶会——SP 2025 论文清单与摘要（中）](https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485970&idx=1&sn=abe8fcc59c58b9e0dbbeba6dccb067c2)\n - [ ] [网络安全顶会——SP 2025 论文清单与摘要（下）](https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485970&idx=2&sn=f3dcab288fcbf3ee09a30065ad6461a5)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Malicious npm packages posing as utilities delete project directories](https://www.bleepingcomputer.com/news/security/malicious-npm-packages-posing-as-utilities-delete-project-directories/)\n - [ ] [Supply chain attack hits Gluestack NPM packages with 960K weekly downloads](https://www.bleepingcomputer.com/news/security/supply-chain-attack-hits-gluestack-npm-packages-with-960k-weekly-downloads/)\n - [ ] [Guerre di Rete - Musk-Trump, la posta in gioco](https://guerredirete.substack.com/p/guerre-di-rete-musk-trump-la-posta)\n - [ ] [Disk Union - 690,667 breached accounts](https://haveibeenpwned.com/Breach/DiskUnion)\n- 情报分析师\n - [ ] [2020–2025年俾路支解放军袭击手段与策略演变分析](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650561265&idx=1&sn=402ca8167f5e9a1d47a4ad91c5fe2cf5)\n- 极客公园\n - [ ] [增速超比亚迪后，新能源狂飙 135%，这家公司做对了什么？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653080850&idx=1&sn=51035f2a2887fe93bcd390a6fd34b19d)\n - [ ] [王自如解释投身 AI：确实来钱快；雷军：给1万车主免费培训智驾；身家缩水股价暴跌，马斯克向美总统低头 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653080841&idx=1&sn=ae72ca3a4c68d2c8a55d8c1303f6b976)\n- 迪哥讲事\n - [ ] [逆向SSO登录加密](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497700&idx=1&sn=3f05f2371d864de7b8468d997fcaa5ce)\n- ICT Security Magazine\n - [ ] [Zip Slip: quando un semplice file Zip minaccia la sicurezza](https://www.ictsecuritymagazine.com/articoli/zip-slip-vulnerability/)\n- BorderGate\n - [ ] [Local Large Language Models](https://www.bordergate.co.uk/local-large-language-models/)\n- Information Security\n - [ ] [Account hacked](https://www.reddit.com/r/Information_Security/comments/1l5g7k2/account_hacked/)\n- Your Open Hacker Community\n - [ ] [Hack + JLPT](https://www.reddit.com/r/HowToHack/comments/1l5sk16/hack_jlpt/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [If you had to focus on one cybersecurity skill starting out — what would it be?](https://www.reddit.com/r/netsecstudents/comments/1l5jrdc/if_you_had_to_focus_on_one_cybersecurity_skill/)\n - [ ] [Need advice on continuing my career in cybersecurity](https://www.reddit.com/r/netsecstudents/comments/1l5r7ne/need_advice_on_continuing_my_career_in/)\n - [ ] [Ho avviato un blog sulla sicurezza informatica dove imparo insieme ad altri. Feedback benvenuti!](https://www.reddit.com/r/netsecstudents/comments/1l5pazs/ho_avviato_un_blog_sulla_sicurezza_informatica/)\n- Social Engineering\n - [ ] [Social engineering attempts or am I overthinking?](https://www.reddit.com/r/SocialEngineering/comments/1l5wjtb/social_engineering_attempts_or_am_i_overthinking/)\n- Technical Information Security Content & Discussion\n - [ ] [Riding The Time Machine: Journey Through An Old vBulletin PHP Object Injection](https://www.reddit.com/r/netsec/comments/1l5lj9b/riding_the_time_machine_journey_through_an_old/)\n- Blackhat Library: Hacking techniques and research\n - [ ] [looking for a new project to get excited about. partner up?](https://www.reddit.com/r/blackhat/comments/1l59qya/looking_for_a_new_project_to_get_excited_about/)\n- Security Affairs\n - [ ] [Experts found 4 billion user records online, the largest known leak of Chinese personal data from a single source](https://securityaffairs.com/178744/data-breach/experts-found-4-billion-user-records-online-the-largest-known-leak-of-chinese-personal-data-from-a-single-source.html)\n"}}, "archive/daily/2026/2026-06-23.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747311.036368, "n": 34805, "h": "32b0e8ece17b3d93", "c": "# 每日安全资讯（2026-06-23）\n\n- SecWiki News\n - [ ] [SecWiki News 2026-06-22 Review](http://www.sec-wiki.com/?2026-06-22)\n- Doonsec's feed\n - [ ] [新开源网络安全平台CyberSentinel AI v3.0 正式亮相](https://mp.weixin.qq.com/s/5oxSt1UtaF7_zBM1_qNA_Q)\n - [ ] [有无深圳做跨境电商，交流学习](https://mp.weixin.qq.com/s/TQzsxS1XclLmyes0yHHUmA)\n - [ ] [LiteLLM存在远程命令执行漏洞CVE-2026-42271 附POC](https://mp.weixin.qq.com/s/hvYkolfT2yWRd9a77HdV6g)\n - [ ] [继 YunSeeIRs 之后，新一代安全运维（应急响应）利器 Wayfort 重磅登场](https://mp.weixin.qq.com/s/5_Rze5OOSGxrg8T4pfGhcw)\n - [ ] [YunSeeIRs 应急响应工具](https://mp.weixin.qq.com/s/hZfj96_bGuSXdG7TboFHAA)\n - [ ] [打不死的网络犯罪品牌ShinyHunters：六年进化，从数据贩子到勒索团伙](https://mp.weixin.qq.com/s/3hAmi3xa4dXvSufjQ8Bv-Q)\n - [ ] [【AI情报】全球安全态势分析报告-中国视角](https://mp.weixin.qq.com/s/ZdGnQ1YsiFUSnfV4ewzWow)\n - [ ] [攻防技战术动态一周更新 - 20260615](https://mp.weixin.qq.com/s/6mESOHD50IjUAbyapPVhSw)\n - [ ] [第五章xa0-xa0重生之我是AI人：ReAct 决策循环 — LLM 怎么\\\"思考\\\"](https://mp.weixin.qq.com/s/KUM7vV5SEmfGGEHd08aesQ)\n - [ ] [暗网情报对武器测试的辅助性意义](https://mp.weixin.qq.com/s/p4OzSAeycThcjooydMxfsg)\n - [ ] [阿里禾伙人上线！马云、吴泳铭、周靖人等下田插秧，“马稻成功”](https://mp.weixin.qq.com/s/e5WeSKVICaZOB0Si1oLDUg)\n - [ ] [125G 内存被吃光！欧拉操作系统生产环境内存泄露 11 小时排查全记录](https://mp.weixin.qq.com/s/QYpgezafB50Jc-VhTCvYxA)\n - [ ] [百度闷声放大招！轻量OCR登顶全球第一，核心作者疑似DeepSeek出走大牛](https://mp.weixin.qq.com/s/aA8fhfRJvXMe_55P0U5m1w)\n - [ ] [请求响应包都加密时，如何用大模型分析明文数据包来挖洞](https://mp.weixin.qq.com/s/eDadHY0Far_cVL-md6zK3w)\n - [ ] [【AI安全】多轮越聊越危险！ToolShield反杀](https://mp.weixin.qq.com/s/b9XakNs3Vm_WovCvdtB-9Q)\n - [ ] [数据安全测评，新机构、新要求](https://mp.weixin.qq.com/s/d7LyzV8YE_zRFQaVTuwp5Q)\n - [ ] [Cloudflare 如何搭建 AI 漏洞发现流水线](https://mp.weixin.qq.com/s/9Brj5DXFKOcOfWmFajbwdg)\n - [ ] [明天见](https://mp.weixin.qq.com/s/gn0skxAuA_UCwIJHVdd8dw)\n - [ ] [Anthropic Mythos可在数小时内攻破美国国安局（NSA）机密系统](https://mp.weixin.qq.com/s/VS1SCexAYIb9xWywz_qdvw)\n - [ ] [行之:我的大模型黑盒RCE挖掘之路](https://mp.weixin.qq.com/s/whv4LzJTiJt-i2zHzdG8Eg)\n - [ ] [没有爆破、没有注入，一个空参数就够了](https://mp.weixin.qq.com/s/ybsn73FJbgATmE6mTUtuzg)\n - [ ] [网络中的端口号是什么？](https://mp.weixin.qq.com/s/n4am7hgRonfuNvFTdGS9WA)\n - [ ] [官方预警丨银狐木马最新变种，专门针对中小企业！](https://mp.weixin.qq.com/s/XrqCosxbef-fki68T3fTlw)\n - [ ] [gemma-4-12B-coder-fable5-composer2.5](https://mp.weixin.qq.com/s/hqWFHsALrcYtxvpMdXVxfQ)\n - [ ] [【会议活动】赛迪研究院参加2026全国低碳日工业产品碳足迹主题活动xa0助力工业碳数据体系建设](https://mp.weixin.qq.com/s/SMX5AY0DO4oCzI125fpl_g)\n - [ ] [【实验室】基础软件质量控制与技术评价工业和信息化部重点实验室2026年开放课题申请指南](https://mp.weixin.qq.com/s/8knX6RFQCe1qmtjBnzpPrQ)\n - [ ] [备战时间加码！2026 年“黄鹤杯”报名截止期延至7月15日！ AI攻防+实物靶标等你来战！](https://mp.weixin.qq.com/s/p9FFFVNLDSwnZyVafEeu3Q)\n - [ ] [2026FIC决赛（手机部分）](https://mp.weixin.qq.com/s/5mKN2_HYHkDmC2x_BlqDSQ)\n - [ ] [奇安信AI安全系列新品发布周启幕，首发威胁分析数字专家](https://mp.weixin.qq.com/s/zNS_kfSFs92malLeMOa3jw)\n - [ ] [媒体聚焦 | 拥抱数智时代 培育未来人才——“天枢杯”打造AI教育“以赛促学”新体系](https://mp.weixin.qq.com/s/lrRBS48N5vPINasUR058xQ)\n - [ ] [黑客冒充 Google Ads 中的 Node.js 安装程序来部署信息窃取恶意软件](https://mp.weixin.qq.com/s/Itqrg6g-oeZgbzIAq9cOkw)\n - [ ] [大模型+AI Agent双管控：深安AI Gateway上线！](https://mp.weixin.qq.com/s/OWgk0ehVuQnhd1Jclk6LDg)\n - [ ] [帮乌克兰打赢网络战的首席分析师也未能幸免：AI大潮下这群“安全特种兵”被裁了](https://mp.weixin.qq.com/s/P8zi_ZUA1R9UhTlRO368hQ)\n - [ ] [恶意 JetBrains 和 VS Code 扩展程序窃取 OpenAI、Anthropic 和 DeepSeek 的 API 密钥](https://mp.weixin.qq.com/s/P8t2xdoCbgRouhlhwzYMAA)\n - [ ] [5月银行AI项目动态：浦发银行3.79亿采购信创算力服务器，智能体平台成布局重点](https://mp.weixin.qq.com/s/YXolDLTMPyLcFMneRHAvDA)\n - [ ] [AI快讯：微信测试AI助手“小微”，豆包APP测试一键打车功能](https://mp.weixin.qq.com/s/2quKcpQLnnXhUoVsFzE8pg)\n - [ ] [被同事问了一下午等保，我把答案都整理出来了](https://mp.weixin.qq.com/s/aPDCa4hBT4mUNAM-YR9qDw)\n - [ ] [SkillSentinel — Skill 安全扫描哨兵](https://mp.weixin.qq.com/s/KvufZmYaeSFl1Prl626B7A)\n - [ ] [中国电信云脉SASE入选IDC市场份额报告，排名跻身TOP3，增速领跑行业](https://mp.weixin.qq.com/s/BUZip0dD-eLYiOWtjeyxHw)\n - [ ] [人人都要学大脑 ｜ 第5期](https://mp.weixin.qq.com/s/1vF3lWIIuH-eEMruwuRIPQ)\n - [ ] [《网络数据安全风险评估办法》：三方权责 + 企业落地建议](https://mp.weixin.qq.com/s/lqytY0rer_mUKyTFdK__vQ)\n - [ ] [匠心竞技收官！2026 年职业技能大赛暨贵阳市第五届 “筑城工匠杯” 职工职业技能竞赛圆满落幕](https://mp.weixin.qq.com/s/gPq9cVjjqWLi4fHa0_hA8g)\n - [ ] [SecWiki周刊（第642期）](https://mp.weixin.qq.com/s/WLXD1fFSImQhpELH8GAHWg)\n - [ ] [通过 AI agent + 通用大模型，实现海量告警研判分析实践](https://mp.weixin.qq.com/s/BNSZThkPIc3u4nUT6ku59w)\n - [ ] [关于利用AI分析样本的一些疑问](https://mp.weixin.qq.com/s/yz1o3pKAdn7PWLZQisTUYg)\n - [ ] [Anthropic Mythos可在数小时内攻破美国国安局机密系统](https://mp.weixin.qq.com/s/8IjoooWRGJf_JAALQh_E0w)\n - [ ] [Chrome扩展程序存在严重漏洞，攻击者可轻松入侵数百万浏览器](https://mp.weixin.qq.com/s/hsFCML3EoECqFgnhSighNw)\n - [ ] [黑客滥用Claude.ai共享聊天功能实施ClickFix攻击，窃取敏感数据](https://mp.weixin.qq.com/s/4S7abV-swkthTVYdgNWUvg)\n - [ ] [CyberSentinel AI整合33款黑客工具，实现本地离线执行高危扫描](https://mp.weixin.qq.com/s/Xa0TV8z97bt2NK1UrtnW8w)\n - [ ] [每周网安资讯 （6.16-6.22）|三部门联合发布《网络数据安全风险评估办法》，规范企业数据安全管理](https://mp.weixin.qq.com/s/6rabaNNPEm7egSQuizNWhw)\n - [ ] [海外报告｜量子产业化关键时刻：强化美国量子供应链以形成可扩展化优势（译文）](https://mp.weixin.qq.com/s/a3dHSoDZYrmVyqRMiw3tOQ)\n - [ ] [启明星辰荣获“华为终端安全奖励计划二等奖”](https://mp.weixin.qq.com/s/oVnRL4f3Q_Gbi-xBkMfS1Q)\n - [ ] [活动预约 | 2026 AI安全 智在直播](https://mp.weixin.qq.com/s/X1TfBU6QxN6db8oppQ13qw)\n - [ ] [苏州银行领760.97万元开业以来最大罚单，涉网络安全与数据安全违规](https://mp.weixin.qq.com/s/3EpvVAoXu62GYz3EjOsDug)\n - [ ] [倒计时2天，ISC.AI 2026蓄势待发！](https://mp.weixin.qq.com/s/N6CL_YPjFjNrnlT4v1cBlw)\n - [ ] [ISC.AI 2026 红衣课堂 议程抢先看](https://mp.weixin.qq.com/s/_lV9Zs9LYbYgzDW7BzEdxg)\n - [ ] [“不安全智能体”会带来什么后果？ISC.AI 2026将答案搬到现场](https://mp.weixin.qq.com/s/P4h7i3JJMiC75t64hfhmig)\n - [ ] [内网仿真靶机《GreenTiger》wp](https://mp.weixin.qq.com/s/32SvDRiRY-7p954C5fxm3w)\n - [ ] [ELF GOT Hook 实战](https://mp.weixin.qq.com/s/mRX26sPZ-etz2tGmCIkFOw)\n - [ ] [Anthropic最强AI数小时攻破NSA全密级系统，美国次日紧急封杀模型](https://mp.weixin.qq.com/s/b7YR-H8taNlPV1HIpya0ug)\n - [ ] [大模型落地必学！提示词越狱与防御](https://mp.weixin.qq.com/s/A3zveh4Gbmw_ZP7_WwBsYg)\n - [ ] [近八成中招设备防护缺位，360发布5月勒索软件态势报告](https://mp.weixin.qq.com/s/HPj7stqDP1pFYFSWSJ-W_g)\n - [ ] [Anthropic旗舰AI遭禁的真相：“数小时攻陷NSA几乎所有机密系统”是禁令导火索，还是政治猎巫的完美借口？](https://mp.weixin.qq.com/s/kV2kDR-VkMLGeVX5jOAQ_Q)\n - [ ] [雳鉴 IAST AI 能力落地战报](https://mp.weixin.qq.com/s/JNfsnB1sugzCihvVUZdhyw)\n - [ ] [第149期|GPTSecurity周报](https://mp.weixin.qq.com/s/jZalVcBvusVPq6Tj4nov0A)\n - [ ] [国家网信办发布《促进分布式数字身份互通互认应用规定（征求意见稿）》](https://mp.weixin.qq.com/s/L6IprpC8lKtSdsMhU8MtTw)\n - [ ] [国家金融监督管理总局发布《关于银行业保险业人工智能安全开发应用的指导意见》](https://mp.weixin.qq.com/s/WVgXuzsCN6zq9kb2U2sdaQ)\n - [ ] [国家金融监督管理总局有关司局负责人就《关于银行业保险业人工智能安全开发应用的指导意见》答记者问](https://mp.weixin.qq.com/s/04I0satvd1Xn6Dldh2FdiA)\n - [ ] [实战速来，自动化破解密码技术解密](https://mp.weixin.qq.com/s/P041GQYLXfia4y0XhjZ0bQ)\n - [ ] [【免费领】全网最贴近实战的Web安全开发测试指南](https://mp.weixin.qq.com/s/ZXNAMq1LKTcNsDripclCTA)\n - [ ] [【高危漏洞预警】FreeBSD KTLS本地权限提升漏洞(CVE-2026-45257)](https://mp.weixin.qq.com/s/Ao7jqzuTB3iUZG-ZHTfBbQ)\n - [ ] [吃瓜速递|某国产AI软件，弹窗XSS](https://mp.weixin.qq.com/s/WrDTGHJd-hqAovKQwcPUXQ)\n - [ ] [聚铭网络受邀加入南京市雨花台区人工智能学会理事会成员单位](https://mp.weixin.qq.com/s/wcYZCEa2lBvaz0KQWYdVmA)\n - [ ] [银狐防不住、红蓝“秒破”？是时候洗牌你的终端防御架构了](https://mp.weixin.qq.com/s/5Lmk23I0SHzj2F1hQvcEww)\n - [ ] [公安部计算机信息系统安全产品质量监督检验中心通报40款App违法违规收集使用个人信息](https://mp.weixin.qq.com/s/-MWUAm1IuxgS6QhrP2ubAw)\n - [ ] [60天倒计时⏰数据安全风险评估新规落地，企业如何有序适配？](https://mp.weixin.qq.com/s/36Jut2UudXkrDFax65qvdw)\n - [ ] [一年一评、保存3年，数据安全评估进入硬合规时代](https://mp.weixin.qq.com/s/JwH8h1KKVFbztjg0KVIGUQ)\n - [ ] [专家解读｜建立健全数据安全风险评估制度 筑牢国家数据安全屏障](https://mp.weixin.qq.com/s/hTJJoS_iKpN1j6tUs24ZRA)\n - [ ] [沙发搬到线上：火山引擎视频云如何用 RTC+直播打造一场“云上陪看房”？](https://mp.weixin.qq.com/s/mQxdiBssBoVCtC4d2iKZOw)\n - [ ] [每日安全动态推送(26/6/22)](https://mp.weixin.qq.com/s/bUNm24ozzLshczhYKBHYvQ)\n - [ ] [关于使用Google竞价排名分享Claude对话的恶意投毒](https://mp.weixin.qq.com/s/r969nf8JFqE5n6R20QwFWA)\n - [ ] [2026年6月12日职业技能等级认定评价结果公示](https://mp.weixin.qq.com/s/WhvnLxmdQOXFXvM1Kf25Vg)\n - [ ] [豆包的xss漏洞复现(蹭热点版)](https://mp.weixin.qq.com/s/hKnSpfWIod-hnG4DQFm4lg)\n - [ ] [工业网络安全周报-2026年第21期](https://mp.weixin.qq.com/s/YaZMbu-X90X6Sy5tiNWrUw)\n - [ ] [记录一下如何批量进行ICP备案查询](https://mp.weixin.qq.com/s/MUEvwbcbCBc1Hl3MVSQ-Kw)\n - [ ] [安全简讯（2026.06.22）](https://mp.weixin.qq.com/s/RNO8Z-WGcW6kFDb3_AXZBQ)\n - [ ] [美国管理预算办公室提议对国际研究实施广泛限制](https://mp.weixin.qq.com/s/JgyLLPT8REDj8gTJyq69Rg)\n - [ ] [拨开欧盟碳关税的规则迷雾](https://mp.weixin.qq.com/s/eoRYg98jidbcM0qEI3RKSw)\n - [ ] [关注｜国家网信办、工业和信息化部、公安部联合公布《网络数据安全风险评估办法》](https://mp.weixin.qq.com/s/r5ASi6_TghzwGS84pVb2Lw)\n - [ ] [财政部突然发文“拉黑”46家美国企业](https://mp.weixin.qq.com/s/f1AMUKrk15P6lRDcqWV9xQ)\n - [ ] [我弹豆包](https://mp.weixin.qq.com/s/XQncJzUoA-5cgNikjbNUvQ)\n - [ ] [GraphQL授权检查缺失如何暴露了一台HealthTech独角兽的医疗记录](https://mp.weixin.qq.com/s/UgKpjuCFkoKDwnF-QICANQ)\n - [ ] [两起真实案例：AI只是机械的代码生成器 缺乏真正的智能](https://mp.weixin.qq.com/s/wYH7TRRqR314xyBoHytDfw)\n - [ ] [直播预约：ISC.AI 2026开幕式与未来峰会](https://mp.weixin.qq.com/s/JjZmxGb-ptWIPAIk9RBtDA)\n - [ ] [打开A页面但是跳转到B页面了？有可能是这个原因](https://mp.weixin.qq.com/s/z76li2eKbnWZA3XuRfjgWA)\n - [ ] [《网络数据安全风险评估办法》全文 | 关键要点浅析与全文速览](https://mp.weixin.qq.com/s/okuHU-tknOsNpz30y6E9gg)\n - [ ] [安全热点周报 | 一周网络安全大事件盘点（2026/06/15-2026/06/19）](https://mp.weixin.qq.com/s/KEE9iDgDKBzLe3Ukl3w7aA)\n - [ ] [交换机类型有哪些？](https://mp.weixin.qq.com/s/xJ8CFS79ZIZPv9cX_PrpKg)\n - [ ] [Who is json？](https://mp.weixin.qq.com/s/3fw4MBR8W2XPz3Rx6bvPEw)\n - [ ] [NGINX Open Source 中存在两个可导致RCE的严重漏洞](https://mp.weixin.qq.com/s/negrW-wvlejIt_LpjfKtkA)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [](https://cxsecurity.com/issue/WLB-2026060017)\n - [ ] [KNX visualisering - Broken Access Control](https://cxsecurity.com/issue/WLB-2026060016)\n - [ ] [vm2 < = 3.11.3 - NodeVM Builtin Denylist Bypass](https://cxsecurity.com/issue/WLB-2026060015)\n - [ ] [SiYuan < = 3.5.9 Remote Code Execution via Malicious Bazaar Package](https://cxsecurity.com/issue/WLB-2026060014)\n- Microsoft Security Blog\n - [ ] [Guarding AI memory](https://www.microsoft.com/en-us/security/blog/2026/06/22/guarding-ai-memory/)\n - [ ] [One intrusion, two cyberattackers: Uncovering parallel threat activity](https://www.microsoft.com/en-us/security/blog/2026/06/22/one-intrusion-two-cyberattackers-uncovering-parallel-threat-activity/)\n- 安全客-有思想的安全新媒体\n - [ ] [Weaxor勒索软件又添Linux平台变种](https://www.anquanke.com/post/id/315628)\n - [ ] [「文科生AI黑客松」专访：社会工作专业范心怡，和她那个会夸人的电子穿搭闺蜜](https://www.anquanke.com/post/id/315622)\n- Recent Commits to cve:main\n - [ ] [Update Mon Jun 22 13:34:29 UTC 2026](https://github.com/trickest/cve/commit/31351f367daeca143805ee520964630e20b2a39a)\n- Exodus Intelligence\n - [ ] [Out of Shift: How a Shared State Bug in V8’s AsmJS Parser Broke the Ubercage](https://blog.exodusintel.com/2026/06/22/out-of-shift-how-a-shared-state-bug-in-v8s-asmjs-parser-broke-the-ubercage/)\n- obaby 𝐢‍𝐧⃝ void\n - [ ] [饥荒](https://zhongxiaojie.cn/2026/06/1518/)\n- Insinuator.net\n - [ ] [Heads-up: TROOPERS Roundtable – Supply Chain Security](https://insinuator.net/2026/06/heads-up-troopers-roundtable-supply-chain-security/)\n- Securelist\n - [ ] [A VBScript campaign distributed through WhatsApp deploying RMM software](https://securelist.com/whatsapp-vbs-rmm-campaign/120290/)\n- Payatu\n - [ ] [Bypass of Bypass in Mozilla Firefox – CVE-2026-8971](https://payatu.com/blog/bypass-of-bypass-in-mozilla-firefox-cve-2026-8971/)\n - [ ] [Top 10 Mobile App Penetration Testing Companies in India (2026)](https://payatu.com/blog/top-10-mobile-app-penetration-testing-companies-in-india-2026/)\n - [ ] [Chronicles of a Pentester (Frida Edition)](https://payatu.com/blog/chronicles-of-a-pentester-frida-edition/)\n- Malwarebytes\n - [ ] [Thousands of D-Link routers under control of AryStinger botnet](https://www.malwarebytes.com/blog/news/2026/06/thousands-of-d-link-routers-under-control-of-arystinger-botnet)\n - [ ] [Document delivery scams: What are they and what’s their goal?](https://www.malwarebytes.com/blog/scams/2026/06/document-delivery-scams-what-are-they-and-whats-their-goal)\n - [ ] [A week in security (June 15 – June 21)](https://www.malwarebytes.com/blog/news/2026/06/a-week-in-security-june-15-june-21-2)\n- The Trail of Bits Blog\n - [ ] [Introducing Patch the Planet](https://blog.trailofbits.com/2026/06/22/introducing-patch-the-planet/)\n- Reverse Engineering\n - [ ] [/r/ReverseEngineering's Weekly Questions Thread](https://www.reddit.com/r/ReverseEngineering/comments/1ucdds8/rreverseengineerings_weekly_questions_thread/)\n - [ ] [CAN bus reverse engineering with AI [Claude Code]](https://www.reddit.com/r/ReverseEngineering/comments/1ucrh8p/can_bus_reverse_engineering_with_ai_claude_code/)\n - [ ] [AirPlay 2 realtime audio sender, the encrypted RAOP/RTSP path reconstructed and documented](https://www.reddit.com/r/ReverseEngineering/comments/1ucf0hr/airplay_2_realtime_audio_sender_the_encrypted/)\n - [ ] [VAXD - 1.60](https://www.reddit.com/r/ReverseEngineering/comments/1ucsbih/vaxd_160/)\n - [ ] [how reverse engineering a h3c inode vpn caused a security nightmare](https://www.reddit.com/r/ReverseEngineering/comments/1uctx68/how_reverse_engineering_a_h3c_inode_vpn_caused_a/)\n - [ ] [HexWalk 2.1.0 Hex analyzer new release, new light theme, export analysis to csv, works both on Windows, Linux and MacOs, give it a try!](https://www.reddit.com/r/ReverseEngineering/comments/1ucd1sn/hexwalk_210_hex_analyzer_new_release_new_light/)\n - [ ] [JavaScript Obfuscator](https://www.reddit.com/r/ReverseEngineering/comments/1uc5p2e/javascript_obfuscator/)\n- rtl-sdr.com\n - [ ] [Cascade-SDR: A Web-Based Multimode Receiver App for RTL-SDR Dongles](https://www.rtl-sdr.com/cascade-sdr-a-web-based-multimode-receiver-app-for-rtl-sdr-dongles/)\n- Checkmarx\n - [ ] [Checkmarx Named a Leader in Inaugural 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security](https://checkmarx.com/blog/checkmarx-named-a-leader-in-inaugural-2026-gartner-magic-quadrant-for-software-supply-chain-security/)\n- HackerNews\n - [ ] [德克萨斯州政府数据泄露，超 300 万张驾照信息外泄](http://0.0.0.0:8080/post/64367)\n - [ ] [网络安全公司受 Klue 供应链攻击影响](http://0.0.0.0:8080/post/64366)\n - [ ] [CryptoBandits 恶意软件兼具后门功能，滥用 Tor](http://0.0.0.0:8080/post/64365)\n - [ ] [Splunk Enterprise 漏洞在披露数日后即遭攻击利用](http://0.0.0.0:8080/post/64364)\n - [ ] [黑客利用 Gravity SMTP WordPress 插件漏洞泄露 API 密钥](http://0.0.0.0:8080/post/64363)\n - [ ] [Microsoft 将 Mastra AI 供应链攻击归因于朝鲜黑客](http://0.0.0.0:8080/post/64368)\n- 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台\n - [ ] [🖼 《泰坦之旅》等多款安卓游戏限时促销](https://blog.upx8.com/%E6%B3%B0%E5%9D%A6%E4%B9%8B%E6%97%85-%E7%AD%89%E5%A4%9A%E6%AC%BE%E5%AE%89%E5%8D%93%E6%B8%B8%E6%88%8F%E9%99%90%E6%97%B6%E4%BF%83%E9%94%80)\n- 奇客Solidot–传递最新科技情报\n - [ ] [回顾对 AUR 的攻击](https://www.solidot.org/story?sid=84647)\n - [ ] [HPV 疫苗将 30 岁前死于宫颈癌的风险降至几乎为零](https://www.solidot.org/story?sid=84646)\n - [ ] [Anthropic 对特定功能访问要求身份验证](https://www.solidot.org/story?sid=84645)\n - [ ] [Linux 7.2 内核完全移除 strncpy 函数](https://www.solidot.org/story?sid=84644)\n - [ ] [霸王龙到 40 岁才完全成年](https://www.solidot.org/story?sid=84643)\n - [ ] [日本宣布新超算理究](https://www.solidot.org/story?sid=84642)\n - [ ] [美国芯片安全法案将强制性要求位置跟踪 AI 芯片](https://www.solidot.org/story?sid=84641)\n - [ ] [10% 消费最高人群每年造成数万亿美元环境损害](https://www.solidot.org/story?sid=84640)\n - [ ] [Polymarket 付费给内容创作者制作假的押注获胜视频](https://www.solidot.org/story?sid=84639)\n - [ ] [Canonical 将为 Ubuntu 桌面加入语音文本转录 AI 功能](https://www.solidot.org/story?sid=84638)\n - [ ] [TikTok 向新账号推荐的视频近六成是 AI slop](https://www.solidot.org/story?sid=84637)\n- 绿盟科技技术博客\n - [ ] [权威认可 | 绿盟科技入选国内入侵检测与防御市场排名前列](https://blog.nsfocus.net/%e6%9d%83%e5%a8%81%e8%ae%a4%e5%8f%af-%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e5%85%a5%e9%80%89%e5%9b%bd%e5%86%85%e5%85%a5%e4%be%b5%e6%a3%80%e6%b5%8b%e4%b8%8e%e9%98%b2%e5%be%a1%e5%b8%82%e5%9c%ba/)\n - [ ] [国际认可 | 绿盟NF防火墙入选权威机构企业防火墙报告](https://blog.nsfocus.net/%e5%9b%bd%e9%99%85%e8%ae%a4%e5%8f%af-%e7%bb%bf%e7%9b%9fnf%e9%98%b2%e7%81%ab%e5%a2%99%e5%85%a5%e9%80%89%e6%9d%83%e5%a8%81%e6%9c%ba%e6%9e%84%e4%bc%81%e4%b8%9a%e9%98%b2%e7%81%ab%e5%a2%99%e6%8a%a5/)\n- 黑鸟\n - [ ] [打不死的网络犯罪品牌ShinyHunters：六年进化，从数据贩子到勒索团伙](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451187126&idx=1&sn=1bc51b9f0b5488c2c086711ae7d251ec)\n- 安全内参\n - [ ] [多地用户收到虚假警告信息！某国家应急警报平台疑遭入侵后下线](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516124&idx=1&sn=90d58031129cd2f3d33b6da41f9a665a)\n - [ ] [国家金监总局发布《关于银行业保险业人工智能安全开发应用的指导意见》](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516124&idx=2&sn=67e3dee3cf6823f7c9bd71a604d7bae7)\n- 看雪学苑\n - [ ] [ELF GOT Hook 实战](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616803&idx=1&sn=169a63cd320c405cc6f793cb0611de1d)\n - [ ] [Anthropic最强AI数小时攻破NSA全密级系统，美国次日紧急封杀模型](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616803&idx=2&sn=2da1a6091197c3cf2616f3c9f507b251)\n - [ ] [大模型落地必学！提示词越狱与防御](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616803&idx=3&sn=73bff545f301784c953e5a54ec67cda1)\n- 威努特安全网络\n - [ ] [破解制造业数字化难题：云桌面打造安全高效办公新模式](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651142409&idx=1&sn=df8897f72f95dc464fba49b743db6641)\n - [ ] [WinClaw限时全免！注册即享AI大模型免费额度](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651142409&idx=2&sn=8e45ba8204bebd977d8f2c59c04f839a)\n- 安全分析与研究\n - [ ] [银狐黑产组织BYOVD攻击技术深度详解](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247496850&idx=1&sn=697fa47e1bdbac5eff5729c35f745f67)\n- 代码卫士\n - [ ] [NGINX Open Source 中存在两个可导致RCE的严重漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526334&idx=1&sn=e353058df9e3673f97b4cec3ed0de092)\n - [ ] [多家网络安全公司受 Klue 供应链攻击影响](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526334&idx=2&sn=d4abea93a1ec375ff30540cc905667d5)\n- 天黑说嘿话\n - [ ] [详解《关于银行业保险业人工智能安全开发应用的指导意见》-7维/32项](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486110&idx=1&sn=9f40bb26f2e4d7d5d8506301eef0a966)\n- 青衣十三楼飞花堂\n - [ ] [反对初中平面几何辅助线的神秘主义](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247489649&idx=1&sn=e2f5ada6384b377901d566424ee2fb28)\n- 奇安信 CERT\n - [ ] [【已复现】FreeBSD KTLS 本地权限提升漏洞(CVE-2026-45257)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506369&idx=1&sn=f3e34e1a2ecddc21e1dc2066270eb1cd)\n- 腾讯玄武实验室\n - [ ] [每日安全动态推送(26/6/22)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960496&idx=1&sn=0f0002abbd9e554879bf7da9144cef73)\n- 安全圈\n - [ ] [【安全圈】13个字就能投毒AI搜索结果？ChatGPT和Gemini都中招了](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077524&idx=1&sn=25abaf541e635c8640e3714f3b3e1ac6)\n - [ ] [【安全圈】FortiBleed曝光：黑客正在收割FortiGate防火墙登录凭证](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077524&idx=2&sn=259335a0d64c6c26d00c5d49a73a0577)\n - [ ] [【安全圈】Microsoft 将 Mastra AI 供应链攻击归因于朝鲜黑客](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077524&idx=3&sn=f942cc202b31e844a47795b26bf60f98)\n- 中国信息安全\n - [ ] [专题 | 蚂蚁集团副总裁、大安全事业群首席技术官陈亮：AI智能体安全治理——风险、框架与实现路径](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664263963&idx=1&sn=981fd3038fc64f434869c4c315706688)\n - [ ] [国安部提示：谨防“间谍式”弹窗广告](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664263963&idx=2&sn=56ada4c8e2e51814813a1891e5747580)\n - [ ] [专家解读 | 赵精武：以风险评估为制度牵引 构建数据安全治理新格局](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664263963&idx=3&sn=b9e666fd9f014b2a10d59e4c067630a2)\n - [ ] [关注 | 公安部计算机信息系统安全产品质量监督检验中心检测发现40款违法违规收集使用个人信息的移动应用](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664263963&idx=4&sn=dd5d19fb8f5f4bafeca2ef2756e71a95)\n - [ ] [聚焦 | @高考生和家长，考后防诈骗，看这里！](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664263963&idx=5&sn=60ed868721584b3f9d604a6b0347e6e9)\n - [ ] [评论 | 协同治理AI“投毒”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664263963&idx=6&sn=51a6a7386e398794a3a85a9c2b3c1be3)\n- 信息安全国家工程研究中心\n - [ ] [专家解读｜建立健全数据安全风险评估制度 筑牢国家数据安全屏障](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247504237&idx=1&sn=abb249c868ca654055abe54f13d31b7c)\n- 数世咨询\n - [ ] [两起真实案例：AI只是机械的代码生成器 缺乏真正的智能](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543308&idx=1&sn=f447e9589c10a248941e570e3918646e)\n - [ ] [直播预约：ISC.AI 2026开幕式与未来峰会](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543308&idx=2&sn=61244e7da90dc51ec02e2fc3ae4268f8)\n- 极客公园\n - [ ] [给 AI 看的「P 站」，藏着关于「人与 AI」最大的「讽刺」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653109293&idx=1&sn=68174e65f8789f8d3507aebbf2f3df35)\n - [ ] [美国版「幻方量化」，没做 DeepSeek，但押注 Anthropic 爆赚 50 倍](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653109268&idx=1&sn=9eeca79170d11b764714b81ed458b810)\n - [ ] [马斯克行权获 7800 亿元收益；雷军回应「路边蹲坐吃早点被吐槽」；育碧创始人因飞机坠毁去世 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653109262&idx=1&sn=efc8085c22f9ba44cd9cefb87ba701af)\n- 阿里安全响应中心\n - [ ] [王牌A计划｜四月月度奖励](https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998984&idx=1&sn=fc9392a6849fa3448c72961b027b9961)\n- 奇安信威胁情报中心\n - [ ] [INC勒索软件Rust双平台加密器技术演进与攻击链解构](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247519179&idx=1&sn=f6e0f543ac0020f57a10d244a7dbfc2a)\n- M01N Team\n - [ ] [AI安全案例分析 | JetBrains插件供应链攻击窃取AI密钥事件](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247495240&idx=1&sn=cd0b410dcaa96cc1b95014372b28944f)\n- 黑哥虾撩\n - [ ] [阿黑正传](https://mp.weixin.qq.com/s?__biz=Mzg5OTU1NTEwMg==&mid=2247484568&idx=1&sn=9a1db860bb6e9bbb9bbb418f0d15e249)\n- NOVASEC\n - [ ] [【工具】zipany 跨平台目录压缩打包工具](https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490906&idx=1&sn=625587bdaa3bddfe208e856ab3f1dd5c)\n- 默安科技\n - [ ] [雳鉴 IAST AI 能力落地战报](https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247501866&idx=1&sn=75b2bb2590aa11a380ff70187adf2634)\n- 微步在线\n - [ ] [微步技术合伙人黄雅芳：员工和虚拟员工带来的办公安全挑战](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650186836&idx=1&sn=55f9d4a2802a07236573ca0eb4879696)\n- 安全牛\n - [ ] [失控的\"数字雇佣兵\"：当AI智能体扛着100Gbps\"大炮\"打蚊子，谁来买单？](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141733&idx=1&sn=40accf7414791fd23668c6b2ae40c15b)\n - [ ] [中央网信办启动3 个月清朗专项，集中整治账号名称信息四大乱象；三部门发布《网络数据安全风险评估办法》| 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141733&idx=2&sn=64a74e69c94f8834f7086c78ebb92907)\n- 情报分析师\n - [ ] [一家没人认识的美国公司刚刚买下了中亚的一张关键网络节点](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650568289&idx=1&sn=9307e91e889d8949331633bd883c6f06)\n- 字节跳动安全中心\n - [ ] [明天见](https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496281&idx=1&sn=6a8509617ac87efacd2122c7c7f9e317)\n- 字节跳动技术团队\n - [ ] [沙发搬到线上：火山引擎视频云如何用 RTC+直播打造一场“云上陪看房”？](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247520434&idx=1&sn=a64546f280df6673c7cceb76d3465a6e)\n- 360数字安全\n - [ ] [近八成中招设备防护缺位，360发布5月勒索软件态势报告](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247586297&idx=1&sn=b3a1099afa9b88e868f94c9db21fab55)\n- 迪哥讲事\n - [ ] [$7,000高危漏洞披露](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499586&idx=1&sn=6e282e57f4d714c86ea88b9c2d337840)\n- 吾爱破解论坛\n - [ ] [红魔多屏协同自动创建 E:\\code_decodeew\\pre_music_cut 文件夹 bug](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651144611&idx=1&sn=50b7ca2c05b4d05f1a63574c2af31dcb)\n- CNVD漏洞平台\n - [ ] [CNVD漏洞周报2026年第24期](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497044&idx=1&sn=119e670ee5cdceeda5e2f9cd8c1660b0)\n - [ ] [上周关注度较高的产品安全漏洞(20260615-20260621)](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497044&idx=2&sn=9e47bc978f20d00c66818029c9f39bde)\n- Over Security\n - [ ] [WhatsApp phishing attack uses fake business docs to hack PCs](https://www.bleepingcomputer.com/news/security/whatsapp-phishing-attack-uses-fake-business-docs-to-hack-pcs/)\n - [ ] [JaredFromSubway MEV bot hacked in $15 million crypto theft](https://www.bleepingcomputer.com/news/security/jaredfromsubway-mev-bot-hacked-in-15-million-crypto-theft/)\n - [ ] [FFmpeg fixes PixelSmash flaw in widely used video decoder](https://www.bleepingcomputer.com/news/security/ffmpeg-fixes-pixelsmash-flaw-in-widely-used-video-decoder/)\n - [ ] [FortiBleed campaign used custom FortiGate sniffer to steal credentials](https://www.bleepingcomputer.com/news/security/fortibleed-campaign-used-custom-fortigate-sniffer-to-steal-credentials/)\n - [ ] [A new unpatchable flaw in Apple chips opens the door to an iPhone jailbreak](https://techcrunch.com/2026/06/22/a-new-unpatchable-flaw-in-apple-chips-opens-the-door-to-an-iphone-jailbreak/)\n - [ ] [8 Questions to Ask Before Choosing an Incident Response Retainer](https://www.group-ib.com/blog/incident-response-questions/)\n - [ ] [Microsoft says Windows 11 26H2 is coming soon, details upgrade process](https://www.bleepingcomputer.com/news/microsoft/microsoft-says-windows-11-26h2-is-coming-soon-details-upgrade-process/)\n - [ ] [BackBox Labs Launches: Cybersecurity Company from the Open Source Ecosystem](https://blog.backbox.org/2026/06/22/backbox-labs-launches-cybersecurity-company-from-the-open-source-ecosystem/)\n - [ ] [Microsoft fixes AutoGen Studio flaw that enabled code execution](https://www.bleepingcomputer.com/news/security/microsoft-fixes-autogen-studio-flaw-that-enabled-code-execution/)\n - [ ] [WhatsApp e crimeware: la convergenza tra malware, social engineering e strumenti leciti](https://www.cybersecurity360.it/news/whatsapp-e-crimeware-la-convergenza-tra-malware-social-engineering-e-strumenti-leciti/)\n - [ ] [Cyber Risk Assessment: come calcolare l’impatto economico degli incidenti IT](https://www.cybersecurity360.it/soluzioni-aziendali/cyber-risk-assessment-come-calcolare-limpatto-economico-degli-incidenti-it/)\n - [ ] [Il blocco di Claude Mythos: le implicazioni per le aziende italiane ed europee](https://www.cybersecurity360.it/legal/il-blocco-di-claude-mythos-le-implicazioni-per-le-aziende-italiane-ed-europee/)\n - [ ] [Suspected cyberattack triggers false emergency alerts across parts of Brazil](https://therecord.media/suspected-cyberattack-triggers-false-emergency-alerts-brazil)\n - [ ] [A Glimpse into the “Search Your Target” Market for Stolen Credentials](https://www.bleepingcomputer.com/news/security/a-glimpse-into-the-search-your-target-market-for-stolen-credentials/)\n - [ ] [Breaking Out of Chrome’s Sandbox: A Native Messaging Backdoor Observed in Italy](https://www.d3lab.net/breaking-out-of-chromes-sandbox-a-native-messaging-backdoor-observed-in-italy/)\n - [ ] [Rokarolla, il banking trojan Android che punta al controllo totale dello smartphone](https://www.cybersecurity360.it/news/rokarolla-il-banking-trojan-android-che-punta-al-controllo-totale-dello-smartphone/)\n - [ ] [Sunil Varkey Joins Hexaware Technologies as EVP & CISO](https://thecyberexpress.com/sunil-varkey-joins-hexaware-technologies/)\n - [ ] [Data manipulation nei sistemi OT e IoT: il rischio cyber che i CDA non stanno governando](https://www.cybersecurity360.it/nuove-minacce/data-manipulation-nei-sistemi-ot-e-iot-il-rischio-cyber-che-i-cda-non-stanno-governando/)\n - [ ] [NordVPN antivirus, fino al 75% di sconto e 3 mesi extra: tutti i dettagli dell’offerta](https://www.cybersecurity360.it/cultura-cyber/nordvpn-antivirus-vpn-con-3-mesi-extra-75-per-cento-di-sconto/)\n - [ ] [A VBScript campaign distributed through WhatsApp deploying RMM software](https://securelist.com/whatsapp-vbs-rmm-campaign/120290/)\n - [ ] [Global Schools Group and FulcrumSec: A Massive Data Breach and the Worldwide Push to Suppress Reporting on It](https://www.suspectfile.com/global-schools-group-and-fulcrumsec-a-massive-data-breach-and-the-worldwide-push-to-suppress-reporting-on-it/)\n - [ ] [Fantastic clear-text passwords and where to collect them (Part 1 - Linux)](http://localhost:1313/posts/fantastic_passwords_linux/)\n - [ ] [http://localhost:1313/course/linux_rootkits/](http://localhost:1313/course/linux_rootkits/)\n - [ ] [macOS Extended Attributes: Case Study](http://localhost:1313/posts/macos_extended_attributes/)\n - [ ] [Today I Learned - Protected Symlinks](http://localhost:1313/posts/today_i_learned_protected_symlinks/)\n - [ ] [BSides Kent: The Gist of Hundreds of Incident Response Cases](http://localhost:1313/talks/bsides_kent_2025/)\n - [ ] [FIRST Technical Colloquium Amsterdam: In-Depth Study of Linux Rootkits](http://localhost:1313/talks/first_amsterdam_2025/)\n - [ ] [BSides Transylvania: From Zero to a Moderately Skilled MacOS Forensic Analyst](http://localhost:1313/talks/bsides_transylvania_2025/)\n - [ ] [Linux Capabilities Revisited](http://localhost:1313/posts/linux_capabilities/)\n - [ ] [SecurityFest: Anti-Forensics - You are doing it wrong](http://localhost:1313/talks/securityfest_2025/)\n - [ ] [x33fcon: From Zero to a Moderately Skilled MacOS Forensic Analyst](http://localhost:1313/talks/x33fcon_2025/)\n - [ ] [Euskalhack: In-Depth Study Of Linux Rootkits](http://localhost:1313/talks/euskalhack_2025/)\n - [ ] [FIRST Conference: Anti-Forensics - You are doing it wrong](http://localhost:1313/talks/firstcon_2025/)\n - [ ] [Troopers: Anti-Forensics - You are doing it wrong](http://localhost:1313/talks/troopers_2025/)\n - [ ] [Hack.lu: Anti-Forensics - You are doing it wrong](http://localhost:1313/talks/hack.lu_2025/)\n - [ ] [Today I learned: binfmt_misc](http://localhost:1313/posts/today_i_learned_binfmt_misc/)\n - [ ] [BSides Chisinau: Congratulations, You're Still Insecure!](http://localhost:1313/talks/bsides_chisinau_2025/)\n - [ ] [BSides Berlin: Inside Mythic: Dissecting a Modern Attack Framework](http://localhost:1313/talks/bsides_berlin_2025/)\n - [ ] [Dissection of a PHP Backdoor leveraging php-win.exe](http://localhost:1313/posts/dissection_php_backdoor/)\n - [ ] [FIRST Technical Colloquium Paris: Inside Mythic: Dissecting a Modern Attack Framework](http://localhost:1313/talks/first_paris_2026/)\n - [ ] [Botconf: Tomb Raider - In Search of the Lost Signatures](http://localhost:1313/talks/botconf_2026/)\n - [ ] [Brucon: Anti-Forensics (and Anti-Anti-Forensics) Techniques](http://localhost:1313/talks/brucon_2026/)\n - [ ] [Anatomy of a Deno-Based Proxy & RAT](http://localhost:1313/posts/deno/)\n - [ ] [L’AI non cambia solo la cyber, cambia gli equilibri geopolitici: la lezione di Roberto Baldoni](https://www.cybersecurity360.it/cybersecurity-nazionale/ai-e-cybersecurity-roberto-baldoni-sulle-nuove-minacce-geopolitiche/)\n- Javvad Malik\n - [ ] [The Security Industry Stole My Motorbike](https://javvadmalik.com/2026/06/22/the-security-industry-stole-my-motorbike/)\n- D3Lab\n - [ ] [Breaking Out of Chrome’s Sandbox: A Native Messaging Backdoor Observed in Italy](https://www.d3lab.net/breaking-out-of-chromes-sandbox-a-native-messaging-backdoor-observed-in-italy/)\n- ICT Security Magazine\n - [ ] [Human in the loop: il controllo finto e la responsabilità vera](https://www.ictsecuritymagazine.com/notizie/human-in-the-loop-controllo-e-colpa/)\n - [ ] [IaC security: la falla nel cloud nasce nel codice che lo costruisce](https://www.ictsecuritymagazine.com/cyber-security/iac-security-policy-as-code/)\n- Schneier on Security\n - [ ] [Professional Athletes and Wearables](https://www.schneier.com/blog/archives/2026/06/professional-athletes-and-wearables.html)\n- Security Affairs\n - [ ] [WhatsApp Malware Campaign Hijacks Trust, Installs Legitimate Admin Tools](https://securityaffairs.com/194031/malware/whatsapp-malware-campaign-hijacks-trust-installs-legitimate-admin-tools.html)\n - [ ] [Texas Parks & Wildlife (TPWD) Data Breach impacts 3 Million People](https://securityaffairs.com/194023/data-breach/texas-parks-wildlife-tpwd-data-breach-impacts-3-million-people.html)\n - [ ] [Anthropic’s Mythos AI broke into almost all NSA classified systems in hours](https://securityaffairs.com/194016/ai/anthropics-mythos-ai-broke-into-almost-all-nsa-classified-systems-in-hours.html)\n - [ ] [FortiBleed: The Most Detailed Breakdown Yet of an Active Russian Credential-Harvesting Operation](https://securityaffairs.com/194004/hacking/fortibleed-the-most-detailed-breakdown-yet-of-an-active-russian-credential-harvesting-operation.html)\n - [ ] [4,300+ Outdated Routers Hijacked in Stealthy Spy Infrastructure by AryStinger malware](https://securityaffairs.com/193987/security/4300-outdated-routers-hijacked-in-stealthy-spy-infrastructure-by-arystinger-malware.html)\n - [ ] [usbliter8 Brings Unpatchable BootROM Exploit to Apple A12 and A13 Devices](https://securityaffairs.com/193965/hacking/usbliter8-brings-unpatchable-bootrom-exploit-to-apple-a12-and-a13-devices.html)\n- IT Service Management News\n - [ ] [Il DPO non paga i danni in caso di attacco informatico (aggiornamento)](http://blog.cesaregallotti.it/2026/06/il-dpo-non-paga-i-danni-in-caso-di_0154841902.html)\n - [ ] [Sanzione a Carrefour per accessibilità](http://blog.cesaregallotti.it/2026/06/sanzione-carrefour-per-accessibilita.html)\n - [ ] [Data broker e sanzione del Garante](http://blog.cesaregallotti.it/2026/06/data-broker-e-sanzione-del-garante.html)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Webshells Remain Popular, (Mon, Jun 22nd)](https://isc.sans.edu/diary/rss/33096)\n - [ ] [ISC Stormcast For Monday, June 22nd, 2026 https://isc.sans.edu/podcastdetail/9980, (Mon, Jun 22nd)](https://isc.sans.edu/diary/rss/33092)\n- NetSPI\n - [ ] [Bypassing Microsoft Entra Conditional Access Policies via Nested App Authentication](https://www.netspi.com/blog/technical-blog/cloud-pentesting/bypassing-microsoft-entra-conditional-access-policies-via-nested-app-authentication/)\n- The Hacker News\n - [ ] [ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack](https://thehackernews.com/2026/06/shapedplugin-wordpress-pro-plugins.html)\n - [ ] [Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants](https://thehackernews.com/2026/06/researchers-detail-difytap-flaws-in.html)\n - [ ] [29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests](https://thehackernews.com/2026/06/29-year-old-squid-proxy-bug-squidbleed.html)\n - [ ] [New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer](https://thehackernews.com/2026/06/new-oxloader-loader-uses-malicious.html)\n - [ ] [Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries](https://thehackernews.com/2026/06/google-sets-sept-30-deadline-for.html)\n - [ ] [Stop Your Legacy Infrastructure from Hijacking Your AI Agents](https://thehackernews.com/2026/06/stop-your-legacy-infrastructure-from.html)\n - [ ] [⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More](https://thehackernews.com/2026/06/weekly-recap-browser-bugs-edr-killers.html)\n - [ ] [Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices](https://thehackernews.com/2026/06/canadas-spy-agency-used-first-of-its.html)\n - [ ] [AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network](https://thehackernews.com/2026/06/arystinger-malware-infects-4300-legacy.html)\n - [ ] [INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific](https://thehackernews.com/2026/06/interpol-warns-phishing-ransomware-and.html)\n- Security Weekly Podcast Network (Audio)\n - [ ] [Navigating Shadow AI in the Enterprise, Verizon's SECOND 2026 report, and the news - Ankita Gupta - ESW #464](http://sites.libsyn.com/18678/navigating-shadow-ai-in-the-enterprise-verizons-second-2026-report-and-the-news-ankita-gupta-esw-464)\n"}, "64de5540fe82ae6860712e6cabe0abcd88e26e16": {"t": 1785772253.3139348, "n": 34805, "h": "32b0e8ece17b3d93", "c": "# 每日安全资讯（2026-06-23）\n\n- SecWiki News\n - [ ] [SecWiki News 2026-06-22 Review](http://www.sec-wiki.com/?2026-06-22)\n- Doonsec's feed\n - [ ] [新开源网络安全平台CyberSentinel AI v3.0 正式亮相](https://mp.weixin.qq.com/s/5oxSt1UtaF7_zBM1_qNA_Q)\n - [ ] [有无深圳做跨境电商，交流学习](https://mp.weixin.qq.com/s/TQzsxS1XclLmyes0yHHUmA)\n - [ ] [LiteLLM存在远程命令执行漏洞CVE-2026-42271 附POC](https://mp.weixin.qq.com/s/hvYkolfT2yWRd9a77HdV6g)\n - [ ] [继 YunSeeIRs 之后，新一代安全运维（应急响应）利器 Wayfort 重磅登场](https://mp.weixin.qq.com/s/5_Rze5OOSGxrg8T4pfGhcw)\n - [ ] [YunSeeIRs 应急响应工具](https://mp.weixin.qq.com/s/hZfj96_bGuSXdG7TboFHAA)\n - [ ] [打不死的网络犯罪品牌ShinyHunters：六年进化，从数据贩子到勒索团伙](https://mp.weixin.qq.com/s/3hAmi3xa4dXvSufjQ8Bv-Q)\n - [ ] [【AI情报】全球安全态势分析报告-中国视角](https://mp.weixin.qq.com/s/ZdGnQ1YsiFUSnfV4ewzWow)\n - [ ] [攻防技战术动态一周更新 - 20260615](https://mp.weixin.qq.com/s/6mESOHD50IjUAbyapPVhSw)\n - [ ] [第五章xa0-xa0重生之我是AI人：ReAct 决策循环 — LLM 怎么\\\"思考\\\"](https://mp.weixin.qq.com/s/KUM7vV5SEmfGGEHd08aesQ)\n - [ ] [暗网情报对武器测试的辅助性意义](https://mp.weixin.qq.com/s/p4OzSAeycThcjooydMxfsg)\n - [ ] [阿里禾伙人上线！马云、吴泳铭、周靖人等下田插秧，“马稻成功”](https://mp.weixin.qq.com/s/e5WeSKVICaZOB0Si1oLDUg)\n - [ ] [125G 内存被吃光！欧拉操作系统生产环境内存泄露 11 小时排查全记录](https://mp.weixin.qq.com/s/QYpgezafB50Jc-VhTCvYxA)\n - [ ] [百度闷声放大招！轻量OCR登顶全球第一，核心作者疑似DeepSeek出走大牛](https://mp.weixin.qq.com/s/aA8fhfRJvXMe_55P0U5m1w)\n - [ ] [请求响应包都加密时，如何用大模型分析明文数据包来挖洞](https://mp.weixin.qq.com/s/eDadHY0Far_cVL-md6zK3w)\n - [ ] [【AI安全】多轮越聊越危险！ToolShield反杀](https://mp.weixin.qq.com/s/b9XakNs3Vm_WovCvdtB-9Q)\n - [ ] [数据安全测评，新机构、新要求](https://mp.weixin.qq.com/s/d7LyzV8YE_zRFQaVTuwp5Q)\n - [ ] [Cloudflare 如何搭建 AI 漏洞发现流水线](https://mp.weixin.qq.com/s/9Brj5DXFKOcOfWmFajbwdg)\n - [ ] [明天见](https://mp.weixin.qq.com/s/gn0skxAuA_UCwIJHVdd8dw)\n - [ ] [Anthropic Mythos可在数小时内攻破美国国安局（NSA）机密系统](https://mp.weixin.qq.com/s/VS1SCexAYIb9xWywz_qdvw)\n - [ ] [行之:我的大模型黑盒RCE挖掘之路](https://mp.weixin.qq.com/s/whv4LzJTiJt-i2zHzdG8Eg)\n - [ ] [没有爆破、没有注入，一个空参数就够了](https://mp.weixin.qq.com/s/ybsn73FJbgATmE6mTUtuzg)\n - [ ] [网络中的端口号是什么？](https://mp.weixin.qq.com/s/n4am7hgRonfuNvFTdGS9WA)\n - [ ] [官方预警丨银狐木马最新变种，专门针对中小企业！](https://mp.weixin.qq.com/s/XrqCosxbef-fki68T3fTlw)\n - [ ] [gemma-4-12B-coder-fable5-composer2.5](https://mp.weixin.qq.com/s/hqWFHsALrcYtxvpMdXVxfQ)\n - [ ] [【会议活动】赛迪研究院参加2026全国低碳日工业产品碳足迹主题活动xa0助力工业碳数据体系建设](https://mp.weixin.qq.com/s/SMX5AY0DO4oCzI125fpl_g)\n - [ ] [【实验室】基础软件质量控制与技术评价工业和信息化部重点实验室2026年开放课题申请指南](https://mp.weixin.qq.com/s/8knX6RFQCe1qmtjBnzpPrQ)\n - [ ] [备战时间加码！2026 年“黄鹤杯”报名截止期延至7月15日！ AI攻防+实物靶标等你来战！](https://mp.weixin.qq.com/s/p9FFFVNLDSwnZyVafEeu3Q)\n - [ ] [2026FIC决赛（手机部分）](https://mp.weixin.qq.com/s/5mKN2_HYHkDmC2x_BlqDSQ)\n - [ ] [奇安信AI安全系列新品发布周启幕，首发威胁分析数字专家](https://mp.weixin.qq.com/s/zNS_kfSFs92malLeMOa3jw)\n - [ ] [媒体聚焦 | 拥抱数智时代 培育未来人才——“天枢杯”打造AI教育“以赛促学”新体系](https://mp.weixin.qq.com/s/lrRBS48N5vPINasUR058xQ)\n - [ ] [黑客冒充 Google Ads 中的 Node.js 安装程序来部署信息窃取恶意软件](https://mp.weixin.qq.com/s/Itqrg6g-oeZgbzIAq9cOkw)\n - [ ] [大模型+AI Agent双管控：深安AI Gateway上线！](https://mp.weixin.qq.com/s/OWgk0ehVuQnhd1Jclk6LDg)\n - [ ] [帮乌克兰打赢网络战的首席分析师也未能幸免：AI大潮下这群“安全特种兵”被裁了](https://mp.weixin.qq.com/s/P8zi_ZUA1R9UhTlRO368hQ)\n - [ ] [恶意 JetBrains 和 VS Code 扩展程序窃取 OpenAI、Anthropic 和 DeepSeek 的 API 密钥](https://mp.weixin.qq.com/s/P8t2xdoCbgRouhlhwzYMAA)\n - [ ] [5月银行AI项目动态：浦发银行3.79亿采购信创算力服务器，智能体平台成布局重点](https://mp.weixin.qq.com/s/YXolDLTMPyLcFMneRHAvDA)\n - [ ] [AI快讯：微信测试AI助手“小微”，豆包APP测试一键打车功能](https://mp.weixin.qq.com/s/2quKcpQLnnXhUoVsFzE8pg)\n - [ ] [被同事问了一下午等保，我把答案都整理出来了](https://mp.weixin.qq.com/s/aPDCa4hBT4mUNAM-YR9qDw)\n - [ ] [SkillSentinel — Skill 安全扫描哨兵](https://mp.weixin.qq.com/s/KvufZmYaeSFl1Prl626B7A)\n - [ ] [中国电信云脉SASE入选IDC市场份额报告，排名跻身TOP3，增速领跑行业](https://mp.weixin.qq.com/s/BUZip0dD-eLYiOWtjeyxHw)\n - [ ] [人人都要学大脑 ｜ 第5期](https://mp.weixin.qq.com/s/1vF3lWIIuH-eEMruwuRIPQ)\n - [ ] [《网络数据安全风险评估办法》：三方权责 + 企业落地建议](https://mp.weixin.qq.com/s/lqytY0rer_mUKyTFdK__vQ)\n - [ ] [匠心竞技收官！2026 年职业技能大赛暨贵阳市第五届 “筑城工匠杯” 职工职业技能竞赛圆满落幕](https://mp.weixin.qq.com/s/gPq9cVjjqWLi4fHa0_hA8g)\n - [ ] [SecWiki周刊（第642期）](https://mp.weixin.qq.com/s/WLXD1fFSImQhpELH8GAHWg)\n - [ ] [通过 AI agent + 通用大模型，实现海量告警研判分析实践](https://mp.weixin.qq.com/s/BNSZThkPIc3u4nUT6ku59w)\n - [ ] [关于利用AI分析样本的一些疑问](https://mp.weixin.qq.com/s/yz1o3pKAdn7PWLZQisTUYg)\n - [ ] [Anthropic Mythos可在数小时内攻破美国国安局机密系统](https://mp.weixin.qq.com/s/8IjoooWRGJf_JAALQh_E0w)\n - [ ] [Chrome扩展程序存在严重漏洞，攻击者可轻松入侵数百万浏览器](https://mp.weixin.qq.com/s/hsFCML3EoECqFgnhSighNw)\n - [ ] [黑客滥用Claude.ai共享聊天功能实施ClickFix攻击，窃取敏感数据](https://mp.weixin.qq.com/s/4S7abV-swkthTVYdgNWUvg)\n - [ ] [CyberSentinel AI整合33款黑客工具，实现本地离线执行高危扫描](https://mp.weixin.qq.com/s/Xa0TV8z97bt2NK1UrtnW8w)\n - [ ] [每周网安资讯 （6.16-6.22）|三部门联合发布《网络数据安全风险评估办法》，规范企业数据安全管理](https://mp.weixin.qq.com/s/6rabaNNPEm7egSQuizNWhw)\n - [ ] [海外报告｜量子产业化关键时刻：强化美国量子供应链以形成可扩展化优势（译文）](https://mp.weixin.qq.com/s/a3dHSoDZYrmVyqRMiw3tOQ)\n - [ ] [启明星辰荣获“华为终端安全奖励计划二等奖”](https://mp.weixin.qq.com/s/oVnRL4f3Q_Gbi-xBkMfS1Q)\n - [ ] [活动预约 | 2026 AI安全 智在直播](https://mp.weixin.qq.com/s/X1TfBU6QxN6db8oppQ13qw)\n - [ ] [苏州银行领760.97万元开业以来最大罚单，涉网络安全与数据安全违规](https://mp.weixin.qq.com/s/3EpvVAoXu62GYz3EjOsDug)\n - [ ] [倒计时2天，ISC.AI 2026蓄势待发！](https://mp.weixin.qq.com/s/N6CL_YPjFjNrnlT4v1cBlw)\n - [ ] [ISC.AI 2026 红衣课堂 议程抢先看](https://mp.weixin.qq.com/s/_lV9Zs9LYbYgzDW7BzEdxg)\n - [ ] [“不安全智能体”会带来什么后果？ISC.AI 2026将答案搬到现场](https://mp.weixin.qq.com/s/P4h7i3JJMiC75t64hfhmig)\n - [ ] [内网仿真靶机《GreenTiger》wp](https://mp.weixin.qq.com/s/32SvDRiRY-7p954C5fxm3w)\n - [ ] [ELF GOT Hook 实战](https://mp.weixin.qq.com/s/mRX26sPZ-etz2tGmCIkFOw)\n - [ ] [Anthropic最强AI数小时攻破NSA全密级系统，美国次日紧急封杀模型](https://mp.weixin.qq.com/s/b7YR-H8taNlPV1HIpya0ug)\n - [ ] [大模型落地必学！提示词越狱与防御](https://mp.weixin.qq.com/s/A3zveh4Gbmw_ZP7_WwBsYg)\n - [ ] [近八成中招设备防护缺位，360发布5月勒索软件态势报告](https://mp.weixin.qq.com/s/HPj7stqDP1pFYFSWSJ-W_g)\n - [ ] [Anthropic旗舰AI遭禁的真相：“数小时攻陷NSA几乎所有机密系统”是禁令导火索，还是政治猎巫的完美借口？](https://mp.weixin.qq.com/s/kV2kDR-VkMLGeVX5jOAQ_Q)\n - [ ] [雳鉴 IAST AI 能力落地战报](https://mp.weixin.qq.com/s/JNfsnB1sugzCihvVUZdhyw)\n - [ ] [第149期|GPTSecurity周报](https://mp.weixin.qq.com/s/jZalVcBvusVPq6Tj4nov0A)\n - [ ] [国家网信办发布《促进分布式数字身份互通互认应用规定（征求意见稿）》](https://mp.weixin.qq.com/s/L6IprpC8lKtSdsMhU8MtTw)\n - [ ] [国家金融监督管理总局发布《关于银行业保险业人工智能安全开发应用的指导意见》](https://mp.weixin.qq.com/s/WVgXuzsCN6zq9kb2U2sdaQ)\n - [ ] [国家金融监督管理总局有关司局负责人就《关于银行业保险业人工智能安全开发应用的指导意见》答记者问](https://mp.weixin.qq.com/s/04I0satvd1Xn6Dldh2FdiA)\n - [ ] [实战速来，自动化破解密码技术解密](https://mp.weixin.qq.com/s/P041GQYLXfia4y0XhjZ0bQ)\n - [ ] [【免费领】全网最贴近实战的Web安全开发测试指南](https://mp.weixin.qq.com/s/ZXNAMq1LKTcNsDripclCTA)\n - [ ] [【高危漏洞预警】FreeBSD KTLS本地权限提升漏洞(CVE-2026-45257)](https://mp.weixin.qq.com/s/Ao7jqzuTB3iUZG-ZHTfBbQ)\n - [ ] [吃瓜速递|某国产AI软件，弹窗XSS](https://mp.weixin.qq.com/s/WrDTGHJd-hqAovKQwcPUXQ)\n - [ ] [聚铭网络受邀加入南京市雨花台区人工智能学会理事会成员单位](https://mp.weixin.qq.com/s/wcYZCEa2lBvaz0KQWYdVmA)\n - [ ] [银狐防不住、红蓝“秒破”？是时候洗牌你的终端防御架构了](https://mp.weixin.qq.com/s/5Lmk23I0SHzj2F1hQvcEww)\n - [ ] [公安部计算机信息系统安全产品质量监督检验中心通报40款App违法违规收集使用个人信息](https://mp.weixin.qq.com/s/-MWUAm1IuxgS6QhrP2ubAw)\n - [ ] [60天倒计时⏰数据安全风险评估新规落地，企业如何有序适配？](https://mp.weixin.qq.com/s/36Jut2UudXkrDFax65qvdw)\n - [ ] [一年一评、保存3年，数据安全评估进入硬合规时代](https://mp.weixin.qq.com/s/JwH8h1KKVFbztjg0KVIGUQ)\n - [ ] [专家解读｜建立健全数据安全风险评估制度 筑牢国家数据安全屏障](https://mp.weixin.qq.com/s/hTJJoS_iKpN1j6tUs24ZRA)\n - [ ] [沙发搬到线上：火山引擎视频云如何用 RTC+直播打造一场“云上陪看房”？](https://mp.weixin.qq.com/s/mQxdiBssBoVCtC4d2iKZOw)\n - [ ] [每日安全动态推送(26/6/22)](https://mp.weixin.qq.com/s/bUNm24ozzLshczhYKBHYvQ)\n - [ ] [关于使用Google竞价排名分享Claude对话的恶意投毒](https://mp.weixin.qq.com/s/r969nf8JFqE5n6R20QwFWA)\n - [ ] [2026年6月12日职业技能等级认定评价结果公示](https://mp.weixin.qq.com/s/WhvnLxmdQOXFXvM1Kf25Vg)\n - [ ] [豆包的xss漏洞复现(蹭热点版)](https://mp.weixin.qq.com/s/hKnSpfWIod-hnG4DQFm4lg)\n - [ ] [工业网络安全周报-2026年第21期](https://mp.weixin.qq.com/s/YaZMbu-X90X6Sy5tiNWrUw)\n - [ ] [记录一下如何批量进行ICP备案查询](https://mp.weixin.qq.com/s/MUEvwbcbCBc1Hl3MVSQ-Kw)\n - [ ] [安全简讯（2026.06.22）](https://mp.weixin.qq.com/s/RNO8Z-WGcW6kFDb3_AXZBQ)\n - [ ] [美国管理预算办公室提议对国际研究实施广泛限制](https://mp.weixin.qq.com/s/JgyLLPT8REDj8gTJyq69Rg)\n - [ ] [拨开欧盟碳关税的规则迷雾](https://mp.weixin.qq.com/s/eoRYg98jidbcM0qEI3RKSw)\n - [ ] [关注｜国家网信办、工业和信息化部、公安部联合公布《网络数据安全风险评估办法》](https://mp.weixin.qq.com/s/r5ASi6_TghzwGS84pVb2Lw)\n - [ ] [财政部突然发文“拉黑”46家美国企业](https://mp.weixin.qq.com/s/f1AMUKrk15P6lRDcqWV9xQ)\n - [ ] [我弹豆包](https://mp.weixin.qq.com/s/XQncJzUoA-5cgNikjbNUvQ)\n - [ ] [GraphQL授权检查缺失如何暴露了一台HealthTech独角兽的医疗记录](https://mp.weixin.qq.com/s/UgKpjuCFkoKDwnF-QICANQ)\n - [ ] [两起真实案例：AI只是机械的代码生成器 缺乏真正的智能](https://mp.weixin.qq.com/s/wYH7TRRqR314xyBoHytDfw)\n - [ ] [直播预约：ISC.AI 2026开幕式与未来峰会](https://mp.weixin.qq.com/s/JjZmxGb-ptWIPAIk9RBtDA)\n - [ ] [打开A页面但是跳转到B页面了？有可能是这个原因](https://mp.weixin.qq.com/s/z76li2eKbnWZA3XuRfjgWA)\n - [ ] [《网络数据安全风险评估办法》全文 | 关键要点浅析与全文速览](https://mp.weixin.qq.com/s/okuHU-tknOsNpz30y6E9gg)\n - [ ] [安全热点周报 | 一周网络安全大事件盘点（2026/06/15-2026/06/19）](https://mp.weixin.qq.com/s/KEE9iDgDKBzLe3Ukl3w7aA)\n - [ ] [交换机类型有哪些？](https://mp.weixin.qq.com/s/xJ8CFS79ZIZPv9cX_PrpKg)\n - [ ] [Who is json？](https://mp.weixin.qq.com/s/3fw4MBR8W2XPz3Rx6bvPEw)\n - [ ] [NGINX Open Source 中存在两个可导致RCE的严重漏洞](https://mp.weixin.qq.com/s/negrW-wvlejIt_LpjfKtkA)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [](https://cxsecurity.com/issue/WLB-2026060017)\n - [ ] [KNX visualisering - Broken Access Control](https://cxsecurity.com/issue/WLB-2026060016)\n - [ ] [vm2 < = 3.11.3 - NodeVM Builtin Denylist Bypass](https://cxsecurity.com/issue/WLB-2026060015)\n - [ ] [SiYuan < = 3.5.9 Remote Code Execution via Malicious Bazaar Package](https://cxsecurity.com/issue/WLB-2026060014)\n- Microsoft Security Blog\n - [ ] [Guarding AI memory](https://www.microsoft.com/en-us/security/blog/2026/06/22/guarding-ai-memory/)\n - [ ] [One intrusion, two cyberattackers: Uncovering parallel threat activity](https://www.microsoft.com/en-us/security/blog/2026/06/22/one-intrusion-two-cyberattackers-uncovering-parallel-threat-activity/)\n- 安全客-有思想的安全新媒体\n - [ ] [Weaxor勒索软件又添Linux平台变种](https://www.anquanke.com/post/id/315628)\n - [ ] [「文科生AI黑客松」专访：社会工作专业范心怡，和她那个会夸人的电子穿搭闺蜜](https://www.anquanke.com/post/id/315622)\n- Recent Commits to cve:main\n - [ ] [Update Mon Jun 22 13:34:29 UTC 2026](https://github.com/trickest/cve/commit/31351f367daeca143805ee520964630e20b2a39a)\n- Exodus Intelligence\n - [ ] [Out of Shift: How a Shared State Bug in V8’s AsmJS Parser Broke the Ubercage](https://blog.exodusintel.com/2026/06/22/out-of-shift-how-a-shared-state-bug-in-v8s-asmjs-parser-broke-the-ubercage/)\n- obaby 𝐢‍𝐧⃝ void\n - [ ] [饥荒](https://zhongxiaojie.cn/2026/06/1518/)\n- Insinuator.net\n - [ ] [Heads-up: TROOPERS Roundtable – Supply Chain Security](https://insinuator.net/2026/06/heads-up-troopers-roundtable-supply-chain-security/)\n- Securelist\n - [ ] [A VBScript campaign distributed through WhatsApp deploying RMM software](https://securelist.com/whatsapp-vbs-rmm-campaign/120290/)\n- Payatu\n - [ ] [Bypass of Bypass in Mozilla Firefox – CVE-2026-8971](https://payatu.com/blog/bypass-of-bypass-in-mozilla-firefox-cve-2026-8971/)\n - [ ] [Top 10 Mobile App Penetration Testing Companies in India (2026)](https://payatu.com/blog/top-10-mobile-app-penetration-testing-companies-in-india-2026/)\n - [ ] [Chronicles of a Pentester (Frida Edition)](https://payatu.com/blog/chronicles-of-a-pentester-frida-edition/)\n- Malwarebytes\n - [ ] [Thousands of D-Link routers under control of AryStinger botnet](https://www.malwarebytes.com/blog/news/2026/06/thousands-of-d-link-routers-under-control-of-arystinger-botnet)\n - [ ] [Document delivery scams: What are they and what’s their goal?](https://www.malwarebytes.com/blog/scams/2026/06/document-delivery-scams-what-are-they-and-whats-their-goal)\n - [ ] [A week in security (June 15 – June 21)](https://www.malwarebytes.com/blog/news/2026/06/a-week-in-security-june-15-june-21-2)\n- The Trail of Bits Blog\n - [ ] [Introducing Patch the Planet](https://blog.trailofbits.com/2026/06/22/introducing-patch-the-planet/)\n- Reverse Engineering\n - [ ] [/r/ReverseEngineering's Weekly Questions Thread](https://www.reddit.com/r/ReverseEngineering/comments/1ucdds8/rreverseengineerings_weekly_questions_thread/)\n - [ ] [CAN bus reverse engineering with AI [Claude Code]](https://www.reddit.com/r/ReverseEngineering/comments/1ucrh8p/can_bus_reverse_engineering_with_ai_claude_code/)\n - [ ] [AirPlay 2 realtime audio sender, the encrypted RAOP/RTSP path reconstructed and documented](https://www.reddit.com/r/ReverseEngineering/comments/1ucf0hr/airplay_2_realtime_audio_sender_the_encrypted/)\n - [ ] [VAXD - 1.60](https://www.reddit.com/r/ReverseEngineering/comments/1ucsbih/vaxd_160/)\n - [ ] [how reverse engineering a h3c inode vpn caused a security nightmare](https://www.reddit.com/r/ReverseEngineering/comments/1uctx68/how_reverse_engineering_a_h3c_inode_vpn_caused_a/)\n - [ ] [HexWalk 2.1.0 Hex analyzer new release, new light theme, export analysis to csv, works both on Windows, Linux and MacOs, give it a try!](https://www.reddit.com/r/ReverseEngineering/comments/1ucd1sn/hexwalk_210_hex_analyzer_new_release_new_light/)\n - [ ] [JavaScript Obfuscator](https://www.reddit.com/r/ReverseEngineering/comments/1uc5p2e/javascript_obfuscator/)\n- rtl-sdr.com\n - [ ] [Cascade-SDR: A Web-Based Multimode Receiver App for RTL-SDR Dongles](https://www.rtl-sdr.com/cascade-sdr-a-web-based-multimode-receiver-app-for-rtl-sdr-dongles/)\n- Checkmarx\n - [ ] [Checkmarx Named a Leader in Inaugural 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security](https://checkmarx.com/blog/checkmarx-named-a-leader-in-inaugural-2026-gartner-magic-quadrant-for-software-supply-chain-security/)\n- HackerNews\n - [ ] [德克萨斯州政府数据泄露，超 300 万张驾照信息外泄](http://0.0.0.0:8080/post/64367)\n - [ ] [网络安全公司受 Klue 供应链攻击影响](http://0.0.0.0:8080/post/64366)\n - [ ] [CryptoBandits 恶意软件兼具后门功能，滥用 Tor](http://0.0.0.0:8080/post/64365)\n - [ ] [Splunk Enterprise 漏洞在披露数日后即遭攻击利用](http://0.0.0.0:8080/post/64364)\n - [ ] [黑客利用 Gravity SMTP WordPress 插件漏洞泄露 API 密钥](http://0.0.0.0:8080/post/64363)\n - [ ] [Microsoft 将 Mastra AI 供应链攻击归因于朝鲜黑客](http://0.0.0.0:8080/post/64368)\n- 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台\n - [ ] [🖼 《泰坦之旅》等多款安卓游戏限时促销](https://blog.upx8.com/%E6%B3%B0%E5%9D%A6%E4%B9%8B%E6%97%85-%E7%AD%89%E5%A4%9A%E6%AC%BE%E5%AE%89%E5%8D%93%E6%B8%B8%E6%88%8F%E9%99%90%E6%97%B6%E4%BF%83%E9%94%80)\n- 奇客Solidot–传递最新科技情报\n - [ ] [回顾对 AUR 的攻击](https://www.solidot.org/story?sid=84647)\n - [ ] [HPV 疫苗将 30 岁前死于宫颈癌的风险降至几乎为零](https://www.solidot.org/story?sid=84646)\n - [ ] [Anthropic 对特定功能访问要求身份验证](https://www.solidot.org/story?sid=84645)\n - [ ] [Linux 7.2 内核完全移除 strncpy 函数](https://www.solidot.org/story?sid=84644)\n - [ ] [霸王龙到 40 岁才完全成年](https://www.solidot.org/story?sid=84643)\n - [ ] [日本宣布新超算理究](https://www.solidot.org/story?sid=84642)\n - [ ] [美国芯片安全法案将强制性要求位置跟踪 AI 芯片](https://www.solidot.org/story?sid=84641)\n - [ ] [10% 消费最高人群每年造成数万亿美元环境损害](https://www.solidot.org/story?sid=84640)\n - [ ] [Polymarket 付费给内容创作者制作假的押注获胜视频](https://www.solidot.org/story?sid=84639)\n - [ ] [Canonical 将为 Ubuntu 桌面加入语音文本转录 AI 功能](https://www.solidot.org/story?sid=84638)\n - [ ] [TikTok 向新账号推荐的视频近六成是 AI slop](https://www.solidot.org/story?sid=84637)\n- 绿盟科技技术博客\n - [ ] [权威认可 | 绿盟科技入选国内入侵检测与防御市场排名前列](https://blog.nsfocus.net/%e6%9d%83%e5%a8%81%e8%ae%a4%e5%8f%af-%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e5%85%a5%e9%80%89%e5%9b%bd%e5%86%85%e5%85%a5%e4%be%b5%e6%a3%80%e6%b5%8b%e4%b8%8e%e9%98%b2%e5%be%a1%e5%b8%82%e5%9c%ba/)\n - [ ] [国际认可 | 绿盟NF防火墙入选权威机构企业防火墙报告](https://blog.nsfocus.net/%e5%9b%bd%e9%99%85%e8%ae%a4%e5%8f%af-%e7%bb%bf%e7%9b%9fnf%e9%98%b2%e7%81%ab%e5%a2%99%e5%85%a5%e9%80%89%e6%9d%83%e5%a8%81%e6%9c%ba%e6%9e%84%e4%bc%81%e4%b8%9a%e9%98%b2%e7%81%ab%e5%a2%99%e6%8a%a5/)\n- 黑鸟\n - [ ] [打不死的网络犯罪品牌ShinyHunters：六年进化，从数据贩子到勒索团伙](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451187126&idx=1&sn=1bc51b9f0b5488c2c086711ae7d251ec)\n- 安全内参\n - [ ] [多地用户收到虚假警告信息！某国家应急警报平台疑遭入侵后下线](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516124&idx=1&sn=90d58031129cd2f3d33b6da41f9a665a)\n - [ ] [国家金监总局发布《关于银行业保险业人工智能安全开发应用的指导意见》](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516124&idx=2&sn=67e3dee3cf6823f7c9bd71a604d7bae7)\n- 看雪学苑\n - [ ] [ELF GOT Hook 实战](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616803&idx=1&sn=169a63cd320c405cc6f793cb0611de1d)\n - [ ] [Anthropic最强AI数小时攻破NSA全密级系统，美国次日紧急封杀模型](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616803&idx=2&sn=2da1a6091197c3cf2616f3c9f507b251)\n - [ ] [大模型落地必学！提示词越狱与防御](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616803&idx=3&sn=73bff545f301784c953e5a54ec67cda1)\n- 威努特安全网络\n - [ ] [破解制造业数字化难题：云桌面打造安全高效办公新模式](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651142409&idx=1&sn=df8897f72f95dc464fba49b743db6641)\n - [ ] [WinClaw限时全免！注册即享AI大模型免费额度](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651142409&idx=2&sn=8e45ba8204bebd977d8f2c59c04f839a)\n- 安全分析与研究\n - [ ] [银狐黑产组织BYOVD攻击技术深度详解](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247496850&idx=1&sn=697fa47e1bdbac5eff5729c35f745f67)\n- 代码卫士\n - [ ] [NGINX Open Source 中存在两个可导致RCE的严重漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526334&idx=1&sn=e353058df9e3673f97b4cec3ed0de092)\n - [ ] [多家网络安全公司受 Klue 供应链攻击影响](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526334&idx=2&sn=d4abea93a1ec375ff30540cc905667d5)\n- 天黑说嘿话\n - [ ] [详解《关于银行业保险业人工智能安全开发应用的指导意见》-7维/32项](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486110&idx=1&sn=9f40bb26f2e4d7d5d8506301eef0a966)\n- 青衣十三楼飞花堂\n - [ ] [反对初中平面几何辅助线的神秘主义](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247489649&idx=1&sn=e2f5ada6384b377901d566424ee2fb28)\n- 奇安信 CERT\n - [ ] [【已复现】FreeBSD KTLS 本地权限提升漏洞(CVE-2026-45257)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506369&idx=1&sn=f3e34e1a2ecddc21e1dc2066270eb1cd)\n- 腾讯玄武实验室\n - [ ] [每日安全动态推送(26/6/22)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960496&idx=1&sn=0f0002abbd9e554879bf7da9144cef73)\n- 安全圈\n - [ ] [【安全圈】13个字就能投毒AI搜索结果？ChatGPT和Gemini都中招了](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077524&idx=1&sn=25abaf541e635c8640e3714f3b3e1ac6)\n - [ ] [【安全圈】FortiBleed曝光：黑客正在收割FortiGate防火墙登录凭证](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077524&idx=2&sn=259335a0d64c6c26d00c5d49a73a0577)\n - [ ] [【安全圈】Microsoft 将 Mastra AI 供应链攻击归因于朝鲜黑客](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077524&idx=3&sn=f942cc202b31e844a47795b26bf60f98)\n- 中国信息安全\n - [ ] [专题 | 蚂蚁集团副总裁、大安全事业群首席技术官陈亮：AI智能体安全治理——风险、框架与实现路径](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664263963&idx=1&sn=981fd3038fc64f434869c4c315706688)\n - [ ] [国安部提示：谨防“间谍式”弹窗广告](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664263963&idx=2&sn=56ada4c8e2e51814813a1891e5747580)\n - [ ] [专家解读 | 赵精武：以风险评估为制度牵引 构建数据安全治理新格局](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664263963&idx=3&sn=b9e666fd9f014b2a10d59e4c067630a2)\n - [ ] [关注 | 公安部计算机信息系统安全产品质量监督检验中心检测发现40款违法违规收集使用个人信息的移动应用](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664263963&idx=4&sn=dd5d19fb8f5f4bafeca2ef2756e71a95)\n - [ ] [聚焦 | @高考生和家长，考后防诈骗，看这里！](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664263963&idx=5&sn=60ed868721584b3f9d604a6b0347e6e9)\n - [ ] [评论 | 协同治理AI“投毒”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664263963&idx=6&sn=51a6a7386e398794a3a85a9c2b3c1be3)\n- 信息安全国家工程研究中心\n - [ ] [专家解读｜建立健全数据安全风险评估制度 筑牢国家数据安全屏障](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247504237&idx=1&sn=abb249c868ca654055abe54f13d31b7c)\n- 数世咨询\n - [ ] [两起真实案例：AI只是机械的代码生成器 缺乏真正的智能](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543308&idx=1&sn=f447e9589c10a248941e570e3918646e)\n - [ ] [直播预约：ISC.AI 2026开幕式与未来峰会](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543308&idx=2&sn=61244e7da90dc51ec02e2fc3ae4268f8)\n- 极客公园\n - [ ] [给 AI 看的「P 站」，藏着关于「人与 AI」最大的「讽刺」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653109293&idx=1&sn=68174e65f8789f8d3507aebbf2f3df35)\n - [ ] [美国版「幻方量化」，没做 DeepSeek，但押注 Anthropic 爆赚 50 倍](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653109268&idx=1&sn=9eeca79170d11b764714b81ed458b810)\n - [ ] [马斯克行权获 7800 亿元收益；雷军回应「路边蹲坐吃早点被吐槽」；育碧创始人因飞机坠毁去世 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653109262&idx=1&sn=efc8085c22f9ba44cd9cefb87ba701af)\n- 阿里安全响应中心\n - [ ] [王牌A计划｜四月月度奖励](https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998984&idx=1&sn=fc9392a6849fa3448c72961b027b9961)\n- 奇安信威胁情报中心\n - [ ] [INC勒索软件Rust双平台加密器技术演进与攻击链解构](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247519179&idx=1&sn=f6e0f543ac0020f57a10d244a7dbfc2a)\n- M01N Team\n - [ ] [AI安全案例分析 | JetBrains插件供应链攻击窃取AI密钥事件](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247495240&idx=1&sn=cd0b410dcaa96cc1b95014372b28944f)\n- 黑哥虾撩\n - [ ] [阿黑正传](https://mp.weixin.qq.com/s?__biz=Mzg5OTU1NTEwMg==&mid=2247484568&idx=1&sn=9a1db860bb6e9bbb9bbb418f0d15e249)\n- NOVASEC\n - [ ] [【工具】zipany 跨平台目录压缩打包工具](https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490906&idx=1&sn=625587bdaa3bddfe208e856ab3f1dd5c)\n- 默安科技\n - [ ] [雳鉴 IAST AI 能力落地战报](https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247501866&idx=1&sn=75b2bb2590aa11a380ff70187adf2634)\n- 微步在线\n - [ ] [微步技术合伙人黄雅芳：员工和虚拟员工带来的办公安全挑战](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650186836&idx=1&sn=55f9d4a2802a07236573ca0eb4879696)\n- 安全牛\n - [ ] [失控的\"数字雇佣兵\"：当AI智能体扛着100Gbps\"大炮\"打蚊子，谁来买单？](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141733&idx=1&sn=40accf7414791fd23668c6b2ae40c15b)\n - [ ] [中央网信办启动3 个月清朗专项，集中整治账号名称信息四大乱象；三部门发布《网络数据安全风险评估办法》| 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141733&idx=2&sn=64a74e69c94f8834f7086c78ebb92907)\n- 情报分析师\n - [ ] [一家没人认识的美国公司刚刚买下了中亚的一张关键网络节点](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650568289&idx=1&sn=9307e91e889d8949331633bd883c6f06)\n- 字节跳动安全中心\n - [ ] [明天见](https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496281&idx=1&sn=6a8509617ac87efacd2122c7c7f9e317)\n- 字节跳动技术团队\n - [ ] [沙发搬到线上：火山引擎视频云如何用 RTC+直播打造一场“云上陪看房”？](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247520434&idx=1&sn=a64546f280df6673c7cceb76d3465a6e)\n- 360数字安全\n - [ ] [近八成中招设备防护缺位，360发布5月勒索软件态势报告](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247586297&idx=1&sn=b3a1099afa9b88e868f94c9db21fab55)\n- 迪哥讲事\n - [ ] [$7,000高危漏洞披露](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499586&idx=1&sn=6e282e57f4d714c86ea88b9c2d337840)\n- 吾爱破解论坛\n - [ ] [红魔多屏协同自动创建 E:\\code_decodeew\\pre_music_cut 文件夹 bug](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651144611&idx=1&sn=50b7ca2c05b4d05f1a63574c2af31dcb)\n- CNVD漏洞平台\n - [ ] [CNVD漏洞周报2026年第24期](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497044&idx=1&sn=119e670ee5cdceeda5e2f9cd8c1660b0)\n - [ ] [上周关注度较高的产品安全漏洞(20260615-20260621)](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497044&idx=2&sn=9e47bc978f20d00c66818029c9f39bde)\n- Over Security\n - [ ] [WhatsApp phishing attack uses fake business docs to hack PCs](https://www.bleepingcomputer.com/news/security/whatsapp-phishing-attack-uses-fake-business-docs-to-hack-pcs/)\n - [ ] [JaredFromSubway MEV bot hacked in $15 million crypto theft](https://www.bleepingcomputer.com/news/security/jaredfromsubway-mev-bot-hacked-in-15-million-crypto-theft/)\n - [ ] [FFmpeg fixes PixelSmash flaw in widely used video decoder](https://www.bleepingcomputer.com/news/security/ffmpeg-fixes-pixelsmash-flaw-in-widely-used-video-decoder/)\n - [ ] [FortiBleed campaign used custom FortiGate sniffer to steal credentials](https://www.bleepingcomputer.com/news/security/fortibleed-campaign-used-custom-fortigate-sniffer-to-steal-credentials/)\n - [ ] [A new unpatchable flaw in Apple chips opens the door to an iPhone jailbreak](https://techcrunch.com/2026/06/22/a-new-unpatchable-flaw-in-apple-chips-opens-the-door-to-an-iphone-jailbreak/)\n - [ ] [8 Questions to Ask Before Choosing an Incident Response Retainer](https://www.group-ib.com/blog/incident-response-questions/)\n - [ ] [Microsoft says Windows 11 26H2 is coming soon, details upgrade process](https://www.bleepingcomputer.com/news/microsoft/microsoft-says-windows-11-26h2-is-coming-soon-details-upgrade-process/)\n - [ ] [BackBox Labs Launches: Cybersecurity Company from the Open Source Ecosystem](https://blog.backbox.org/2026/06/22/backbox-labs-launches-cybersecurity-company-from-the-open-source-ecosystem/)\n - [ ] [Microsoft fixes AutoGen Studio flaw that enabled code execution](https://www.bleepingcomputer.com/news/security/microsoft-fixes-autogen-studio-flaw-that-enabled-code-execution/)\n - [ ] [WhatsApp e crimeware: la convergenza tra malware, social engineering e strumenti leciti](https://www.cybersecurity360.it/news/whatsapp-e-crimeware-la-convergenza-tra-malware-social-engineering-e-strumenti-leciti/)\n - [ ] [Cyber Risk Assessment: come calcolare l’impatto economico degli incidenti IT](https://www.cybersecurity360.it/soluzioni-aziendali/cyber-risk-assessment-come-calcolare-limpatto-economico-degli-incidenti-it/)\n - [ ] [Il blocco di Claude Mythos: le implicazioni per le aziende italiane ed europee](https://www.cybersecurity360.it/legal/il-blocco-di-claude-mythos-le-implicazioni-per-le-aziende-italiane-ed-europee/)\n - [ ] [Suspected cyberattack triggers false emergency alerts across parts of Brazil](https://therecord.media/suspected-cyberattack-triggers-false-emergency-alerts-brazil)\n - [ ] [A Glimpse into the “Search Your Target” Market for Stolen Credentials](https://www.bleepingcomputer.com/news/security/a-glimpse-into-the-search-your-target-market-for-stolen-credentials/)\n - [ ] [Breaking Out of Chrome’s Sandbox: A Native Messaging Backdoor Observed in Italy](https://www.d3lab.net/breaking-out-of-chromes-sandbox-a-native-messaging-backdoor-observed-in-italy/)\n - [ ] [Rokarolla, il banking trojan Android che punta al controllo totale dello smartphone](https://www.cybersecurity360.it/news/rokarolla-il-banking-trojan-android-che-punta-al-controllo-totale-dello-smartphone/)\n - [ ] [Sunil Varkey Joins Hexaware Technologies as EVP & CISO](https://thecyberexpress.com/sunil-varkey-joins-hexaware-technologies/)\n - [ ] [Data manipulation nei sistemi OT e IoT: il rischio cyber che i CDA non stanno governando](https://www.cybersecurity360.it/nuove-minacce/data-manipulation-nei-sistemi-ot-e-iot-il-rischio-cyber-che-i-cda-non-stanno-governando/)\n - [ ] [NordVPN antivirus, fino al 75% di sconto e 3 mesi extra: tutti i dettagli dell’offerta](https://www.cybersecurity360.it/cultura-cyber/nordvpn-antivirus-vpn-con-3-mesi-extra-75-per-cento-di-sconto/)\n - [ ] [A VBScript campaign distributed through WhatsApp deploying RMM software](https://securelist.com/whatsapp-vbs-rmm-campaign/120290/)\n - [ ] [Global Schools Group and FulcrumSec: A Massive Data Breach and the Worldwide Push to Suppress Reporting on It](https://www.suspectfile.com/global-schools-group-and-fulcrumsec-a-massive-data-breach-and-the-worldwide-push-to-suppress-reporting-on-it/)\n - [ ] [Fantastic clear-text passwords and where to collect them (Part 1 - Linux)](http://localhost:1313/posts/fantastic_passwords_linux/)\n - [ ] [http://localhost:1313/course/linux_rootkits/](http://localhost:1313/course/linux_rootkits/)\n - [ ] [macOS Extended Attributes: Case Study](http://localhost:1313/posts/macos_extended_attributes/)\n - [ ] [Today I Learned - Protected Symlinks](http://localhost:1313/posts/today_i_learned_protected_symlinks/)\n - [ ] [BSides Kent: The Gist of Hundreds of Incident Response Cases](http://localhost:1313/talks/bsides_kent_2025/)\n - [ ] [FIRST Technical Colloquium Amsterdam: In-Depth Study of Linux Rootkits](http://localhost:1313/talks/first_amsterdam_2025/)\n - [ ] [BSides Transylvania: From Zero to a Moderately Skilled MacOS Forensic Analyst](http://localhost:1313/talks/bsides_transylvania_2025/)\n - [ ] [Linux Capabilities Revisited](http://localhost:1313/posts/linux_capabilities/)\n - [ ] [SecurityFest: Anti-Forensics - You are doing it wrong](http://localhost:1313/talks/securityfest_2025/)\n - [ ] [x33fcon: From Zero to a Moderately Skilled MacOS Forensic Analyst](http://localhost:1313/talks/x33fcon_2025/)\n - [ ] [Euskalhack: In-Depth Study Of Linux Rootkits](http://localhost:1313/talks/euskalhack_2025/)\n - [ ] [FIRST Conference: Anti-Forensics - You are doing it wrong](http://localhost:1313/talks/firstcon_2025/)\n - [ ] [Troopers: Anti-Forensics - You are doing it wrong](http://localhost:1313/talks/troopers_2025/)\n - [ ] [Hack.lu: Anti-Forensics - You are doing it wrong](http://localhost:1313/talks/hack.lu_2025/)\n - [ ] [Today I learned: binfmt_misc](http://localhost:1313/posts/today_i_learned_binfmt_misc/)\n - [ ] [BSides Chisinau: Congratulations, You're Still Insecure!](http://localhost:1313/talks/bsides_chisinau_2025/)\n - [ ] [BSides Berlin: Inside Mythic: Dissecting a Modern Attack Framework](http://localhost:1313/talks/bsides_berlin_2025/)\n - [ ] [Dissection of a PHP Backdoor leveraging php-win.exe](http://localhost:1313/posts/dissection_php_backdoor/)\n - [ ] [FIRST Technical Colloquium Paris: Inside Mythic: Dissecting a Modern Attack Framework](http://localhost:1313/talks/first_paris_2026/)\n - [ ] [Botconf: Tomb Raider - In Search of the Lost Signatures](http://localhost:1313/talks/botconf_2026/)\n - [ ] [Brucon: Anti-Forensics (and Anti-Anti-Forensics) Techniques](http://localhost:1313/talks/brucon_2026/)\n - [ ] [Anatomy of a Deno-Based Proxy & RAT](http://localhost:1313/posts/deno/)\n - [ ] [L’AI non cambia solo la cyber, cambia gli equilibri geopolitici: la lezione di Roberto Baldoni](https://www.cybersecurity360.it/cybersecurity-nazionale/ai-e-cybersecurity-roberto-baldoni-sulle-nuove-minacce-geopolitiche/)\n- Javvad Malik\n - [ ] [The Security Industry Stole My Motorbike](https://javvadmalik.com/2026/06/22/the-security-industry-stole-my-motorbike/)\n- D3Lab\n - [ ] [Breaking Out of Chrome’s Sandbox: A Native Messaging Backdoor Observed in Italy](https://www.d3lab.net/breaking-out-of-chromes-sandbox-a-native-messaging-backdoor-observed-in-italy/)\n- ICT Security Magazine\n - [ ] [Human in the loop: il controllo finto e la responsabilità vera](https://www.ictsecuritymagazine.com/notizie/human-in-the-loop-controllo-e-colpa/)\n - [ ] [IaC security: la falla nel cloud nasce nel codice che lo costruisce](https://www.ictsecuritymagazine.com/cyber-security/iac-security-policy-as-code/)\n- Schneier on Security\n - [ ] [Professional Athletes and Wearables](https://www.schneier.com/blog/archives/2026/06/professional-athletes-and-wearables.html)\n- Security Affairs\n - [ ] [WhatsApp Malware Campaign Hijacks Trust, Installs Legitimate Admin Tools](https://securityaffairs.com/194031/malware/whatsapp-malware-campaign-hijacks-trust-installs-legitimate-admin-tools.html)\n - [ ] [Texas Parks & Wildlife (TPWD) Data Breach impacts 3 Million People](https://securityaffairs.com/194023/data-breach/texas-parks-wildlife-tpwd-data-breach-impacts-3-million-people.html)\n - [ ] [Anthropic’s Mythos AI broke into almost all NSA classified systems in hours](https://securityaffairs.com/194016/ai/anthropics-mythos-ai-broke-into-almost-all-nsa-classified-systems-in-hours.html)\n - [ ] [FortiBleed: The Most Detailed Breakdown Yet of an Active Russian Credential-Harvesting Operation](https://securityaffairs.com/194004/hacking/fortibleed-the-most-detailed-breakdown-yet-of-an-active-russian-credential-harvesting-operation.html)\n - [ ] [4,300+ Outdated Routers Hijacked in Stealthy Spy Infrastructure by AryStinger malware](https://securityaffairs.com/193987/security/4300-outdated-routers-hijacked-in-stealthy-spy-infrastructure-by-arystinger-malware.html)\n - [ ] [usbliter8 Brings Unpatchable BootROM Exploit to Apple A12 and A13 Devices](https://securityaffairs.com/193965/hacking/usbliter8-brings-unpatchable-bootrom-exploit-to-apple-a12-and-a13-devices.html)\n- IT Service Management News\n - [ ] [Il DPO non paga i danni in caso di attacco informatico (aggiornamento)](http://blog.cesaregallotti.it/2026/06/il-dpo-non-paga-i-danni-in-caso-di_0154841902.html)\n - [ ] [Sanzione a Carrefour per accessibilità](http://blog.cesaregallotti.it/2026/06/sanzione-carrefour-per-accessibilita.html)\n - [ ] [Data broker e sanzione del Garante](http://blog.cesaregallotti.it/2026/06/data-broker-e-sanzione-del-garante.html)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Webshells Remain Popular, (Mon, Jun 22nd)](https://isc.sans.edu/diary/rss/33096)\n - [ ] [ISC Stormcast For Monday, June 22nd, 2026 https://isc.sans.edu/podcastdetail/9980, (Mon, Jun 22nd)](https://isc.sans.edu/diary/rss/33092)\n- NetSPI\n - [ ] [Bypassing Microsoft Entra Conditional Access Policies via Nested App Authentication](https://www.netspi.com/blog/technical-blog/cloud-pentesting/bypassing-microsoft-entra-conditional-access-policies-via-nested-app-authentication/)\n- The Hacker News\n - [ ] [ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack](https://thehackernews.com/2026/06/shapedplugin-wordpress-pro-plugins.html)\n - [ ] [Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants](https://thehackernews.com/2026/06/researchers-detail-difytap-flaws-in.html)\n - [ ] [29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests](https://thehackernews.com/2026/06/29-year-old-squid-proxy-bug-squidbleed.html)\n - [ ] [New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer](https://thehackernews.com/2026/06/new-oxloader-loader-uses-malicious.html)\n - [ ] [Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries](https://thehackernews.com/2026/06/google-sets-sept-30-deadline-for.html)\n - [ ] [Stop Your Legacy Infrastructure from Hijacking Your AI Agents](https://thehackernews.com/2026/06/stop-your-legacy-infrastructure-from.html)\n - [ ] [⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More](https://thehackernews.com/2026/06/weekly-recap-browser-bugs-edr-killers.html)\n - [ ] [Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices](https://thehackernews.com/2026/06/canadas-spy-agency-used-first-of-its.html)\n - [ ] [AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network](https://thehackernews.com/2026/06/arystinger-malware-infects-4300-legacy.html)\n - [ ] [INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific](https://thehackernews.com/2026/06/interpol-warns-phishing-ransomware-and.html)\n- Security Weekly Podcast Network (Audio)\n - [ ] [Navigating Shadow AI in the Enterprise, Verizon's SECOND 2026 report, and the news - Ankita Gupta - ESW #464](http://sites.libsyn.com/18678/navigating-shadow-ai-in-the-enterprise-verizons-second-2026-report-and-the-news-ankita-gupta-esw-464)\n"}}, "archive/daily/2025/2025-03-13.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747311.0686023, "n": 38595, "h": "bf29534703a87a86", "c": "# 每日安全资讯（2025-03-13）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-03-12 Review](http://www.sec-wiki.com/?2025-03-12)\n- 醉卧烟雨's Blog\n - [ ] [国内小鸡可用的BBR一键脚本](http://blog.cctv.com.im/4252)\n- paper - Last paper\n - [ ] [「深蓝洞察」2024年度最憋屈的漏洞披露](https://paper.seebug.org/3304/)\n- Security Boulevard\n - [ ] [Executive Perspectives: The Cybersecurity Leadership Landscape with Ryan Surry](https://securityboulevard.com/2025/03/executive-perspectives-the-cybersecurity-leadership-landscape-with-ryan-surry/?utm_source=rss&utm_medium=rss&utm_campaign=executive-perspectives-the-cybersecurity-leadership-landscape-with-ryan-surry)\n - [ ] [What key metrics indicate NHI performance in DevOps?](https://securityboulevard.com/2025/03/what-key-metrics-indicate-nhi-performance-in-devops/?utm_source=rss&utm_medium=rss&utm_campaign=what-key-metrics-indicate-nhi-performance-in-devops)\n - [ ] [What strategies improve NHI provisioning speed without sacrificing security?](https://securityboulevard.com/2025/03/what-strategies-improve-nhi-provisioning-speed-without-sacrificing-security/?utm_source=rss&utm_medium=rss&utm_campaign=what-strategies-improve-nhi-provisioning-speed-without-sacrificing-security)\n - [ ] [How do I secure dynamic NHIs in a microservices architecture?](https://securityboulevard.com/2025/03/how-do-i-secure-dynamic-nhis-in-a-microservices-architecture/?utm_source=rss&utm_medium=rss&utm_campaign=how-do-i-secure-dynamic-nhis-in-a-microservices-architecture)\n - [ ] [AI-Driven Security Operations Center: AI SOC Explained](https://securityboulevard.com/2025/03/ai-driven-security-operations-center-ai-soc-explained/?utm_source=rss&utm_medium=rss&utm_campaign=ai-driven-security-operations-center-ai-soc-explained)\n - [ ] [BSides Exeter 2024 – Purple Track – Turning The Tables: Using Cyber Deception To Hunt Phishers At Scale](https://securityboulevard.com/2025/03/bsides-exeter-2024-purple-track-turning-the-tables-using-cyber-deception-to-hunt-phishers-at-scale/?utm_source=rss&utm_medium=rss&utm_campaign=bsides-exeter-2024-purple-track-turning-the-tables-using-cyber-deception-to-hunt-phishers-at-scale)\n - [ ] [No, Elon — X DDoS was NOT by Ukraine](https://securityboulevard.com/2025/03/elon-musk-x-ddos-ukraine-richixbw/?utm_source=rss&utm_medium=rss&utm_campaign=elon-musk-x-ddos-ukraine-richixbw)\n - [ ] [AI Security in 2025: Why Data Protection Must Be Built In, Not Bolted On](https://securityboulevard.com/2025/03/ai-security-in-2025-why-data-protection-must-be-built-in-not-bolted-on/?utm_source=rss&utm_medium=rss&utm_campaign=ai-security-in-2025-why-data-protection-must-be-built-in-not-bolted-on)\n - [ ] [Comic Agilé – Luxshan Ratnaravi, Mikkel Noe-Nygaard – #328 – Last Minute Change](https://securityboulevard.com/2025/03/comic-agile-luxshan-ratnaravi-mikkel-noe-nygaard-328-last-minute-change/?utm_source=rss&utm_medium=rss&utm_campaign=comic-agile-luxshan-ratnaravi-mikkel-noe-nygaard-328-last-minute-change)\n - [ ] [Rising Threat of Online Fraud in Quick Service Restaurants](https://securityboulevard.com/2025/03/rising-threat-of-online-fraud-in-quick-service-restaurants/?utm_source=rss&utm_medium=rss&utm_campaign=rising-threat-of-online-fraud-in-quick-service-restaurants)\n- Trustwave Blog\n - [ ] [How Managed Database Security Enhances Compliance, Privacy, and Threat Defense for the Financial Services Sector](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/how-managed-database-security-enhances-compliance-privacy-and-threat-defense-for-the-financial-services-sector/)\n- 90Sec - 最新话题\n - [ ] [远程分离免杀：是如何绕过杀软检测的？](https://forum.90sec.com/t/topic/2490)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [丈八网安获批入选教育部产学合作协同育人项目 诚邀高校申报](https://www.4hou.com/posts/J1jK)\n - [ ] [警惕 Apache Camel 漏洞 攻击者借此能注入任意标头](https://www.4hou.com/posts/GA7K)\n- Recent Commits to cve:main\n - [ ] [Update Wed Mar 12 20:31:33 UTC 2025](https://github.com/trickest/cve/commit/31ea98b7208fff44fbb1d270fb3e19d6e0b94e53)\n - [ ] [Update Wed Mar 12 12:20:34 UTC 2025](https://github.com/trickest/cve/commit/c819b5f3f9e5b0336fe81d13b909e80308bf1b59)\n - [ ] [Update Wed Mar 12 04:25:35 UTC 2025](https://github.com/trickest/cve/commit/58e2955fe654582d91bb54c69a77778c08a3b154)\n- 安全客-有思想的安全新媒体\n - [ ] [紧急！CISA 警告苹果 iOS 漏洞正被恶意利用](https://www.anquanke.com/post/id/304990)\n - [ ] [360携手清微智能DeepSeek一体机 拟推动“国产算力+大模型安全+AI应用”协同发展](https://www.anquanke.com/post/id/304988)\n - [ ] [重磅！苹果攻克 2025 年第三个正被利用的零日漏洞](https://www.anquanke.com/post/id/304985)\n - [ ] [微软 2025 年 3 月周二补丁行动紧急修复 57 个漏洞](https://www.anquanke.com/post/id/304982)\n - [ ] [威胁行为者突破安全层，助长 SIM 卡交换攻击升级](https://www.anquanke.com/post/id/304980)\n - [ ] [紧急警报：Eleven11bot 僵尸网络突袭，30000 台网络摄像头惨遭入侵](https://www.anquanke.com/post/id/304978)\n - [ ] [Opus Security 创新发布：基于 AI 数据分析框架的漏洞精准识别平台上线](https://www.anquanke.com/post/id/304975)\n - [ ] [2024 报告预警：高级持续性威胁以 74% 的增幅迅猛增长](https://www.anquanke.com/post/id/304973)\n - [ ] [KnowBe4 全球报告警示：零售行业面临的网络威胁呈上升趋势](https://www.anquanke.com/post/id/304970)\n - [ ] [利用合法 RMM 工具的网络攻击数量攀升](https://www.anquanke.com/post/id/304967)\n - [ ] [招聘信息安全工程师](https://www.anquanke.com/post/id/304752)\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗?](https://www.anquanke.com/post/id/304555)\n - [ ] [御辰平台 × DeepSeek | AI深度赋能攻击面管理，全流程提升风险分析与决策能力](https://www.anquanke.com/post/id/304673)\n - [ ] [隐匿在供应链丛林中的狩猎者：针对中小型供应商的定向突破策略](https://www.anquanke.com/post/id/304754)\n - [ ] [论AI与鸭血粉丝汤： 一场美味的“数据烹饪”之旅](https://www.anquanke.com/post/id/304866)\n- 奇安信攻防社区\n - [ ] [一次渗透过程中的CVE-2022-45460撞洞RCE](https://forum.butian.net/share/4170)\n- InfoSec Write-ups - Medium\n - [ ] [Billing TryHackMe Writeup](https://infosecwriteups.com/billing-tryhackme-writeup-aa32f343b0f1?source=rss----7b722bfd1b8d---4)\n - [ ] [How I uncover an IDOR led to access Private CV](https://infosecwriteups.com/how-i-uncover-an-idor-led-to-access-private-cv-access-3ff5be987896?source=rss----7b722bfd1b8d---4)\n - [ ] [Redelegate — VulnLab | ForceChangePassword, GenericAll, and Constrained Delegation](https://infosecwriteups.com/redelegate-vulnlab-forcechangepassword-genericall-and-constrained-delegation-aa48b6d89931?source=rss----7b722bfd1b8d---4)\n- obaby@mars\n - [ ] [Cursor 初体验](https://h4ck.org.cn/2025/03/19771)\n - [ ] [❤️闺蜜圈（大姨妈记录） APP/H5/小程序[置顶] — 3.0.06（更新时间：2025.03.12）](https://h4ck.org.cn/2025/03/15833)\n- BREAKDEV\n - [ ] [Evilginx Pro is finally here!](https://breakdev.org/evilginx-pro-release/)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [How I uncover an IDOR led to access Private CV](https://infosecwriteups.com/how-i-uncover-an-idor-led-to-access-private-cv-access-3ff5be987896?source=rss----7b722bfd1b8d--bug_bounty)\n- rutk1t0r's blog\n - [ ] [chromium支持arm64架构验证](https://embpgp.github.io/2025/03/12/chromium%E6%94%AF%E6%8C%81arm64%E6%9E%B6%E6%9E%84%E9%AA%8C%E8%AF%81/)\n- Securelist\n - [ ] [Incident response analyst report 2024](https://securelist.com/kaspersky-incident-response-report-2024/115873/)\n- SpiderLabs Blog\n - [ ] [Resurgence of a Fake Captcha Malware Campaign](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/resurgence-of-a-fake-captcha-malware-campaign/)\n- Horizon3.ai\n - [ ] [Is Continuous Threat Exposure Management right for you?](https://www.horizon3.ai/intelligence/blogs/is-continuous-threat-exposure-management-right-for-you/)\n- VMRay\n - [ ] [February 2025 Detection Highlights: A Record Month of New YARA Rules](https://www.vmray.com/february-2025-detection-highlights-a-record-month-of-new-yara-rules/)\n- PortSwigger Blog\n - [ ] [Behind the Scenes of Burp AI: How we built it, and what's next](https://portswigger.net/blog/behind-the-scenes-of-burp-ai-how-we-built-it-and-whats-next)\n- Malwarebytes\n - [ ] [Update your iPhone now: Apple patches vulnerability used in “extremely sophisticated attacks”](https://www.malwarebytes.com/blog/news/2025/03/update-your-iphone-now-apple-patches-vulnerability-used-in-extremely-sophisticated-attacks)\n - [ ] [The dark side of sports betting: How mirror sites help gambling scams thrive](https://www.malwarebytes.com/blog/personal/2025/03/the-dark-side-of-sports-betting-how-mirror-sites-help-gambling-scams-thrive)\n - [ ] [Android devices track you before you even sign in](https://www.malwarebytes.com/blog/news/2025/03/android-devices-track-you-before-you-even-sign-in)\n- text/plain\n - [ ] [Authenticode in 2025 – Azure Trusted Signing](https://textslashplain.com/2025/03/12/authenticode-in-2025-azure-trusted-signing/)\n- Lexfo's security blog\n - [ ] [Pre-authentication SQL injection to RCE in GLPI (CVE-2025-24799/CVE-2025-24801)](https://blog.lexfo.fr/glpi-sql-to-rce.html)\n- 体验盒子\n - [ ] [Mac下反编译微信小程序获得源码](https://www.uedbox.com/post/119330/)\n- Mozilla Security Blog\n - [ ] [Enhancing CA Practices: Key Updates in Mozilla Root Store Policy, v3.0](https://blog.mozilla.org/security/2025/03/12/enhancing-ca-practices-key-updates-in-mozilla-root-store-policy-v3-0/)\n- 安全牛\n - [ ] [警惕！黑客组织 Lazarus 在 npm 平台投放恶意软件包；SolarWinds网络帮助台漏洞曝光：攻击者可解密敏感密码](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135460&idx=1&sn=a13284cb4a851616277053291d51988d&chksm=bd15ad378a622421a956dc238b66c97ba05efe1d8b33368f13012f4ff3352b9771b0d034c27d&scene=58&subscene=0#rd)\n - [ ] [攻防对抗中的六个“AI VS. AI”最佳实践](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135460&idx=2&sn=2e4d8c6a3af0e6d45ef297c37acfcb9c&chksm=bd15ad378a622421ed0e27976bfd02f30454ec129b95d593fffece035734dd36417081269c64&scene=58&subscene=0#rd)\n- HackerNews\n - [ ] [朝鲜 Lazarus 黑客组织通过 npm 软件包实施大规模网络攻击](https://hackernews.cc/archives/57800)\n - [ ] [MassJacker 恶意软件利用 77.8 万个钱包窃取加密货币](https://hackernews.cc/archives/57798)\n - [ ] [苹果紧急修复“高度复杂”攻击中利用的 WebKit 零日漏洞](https://hackernews.cc/archives/57796)\n - [ ] [CISA 将五个正在被利用的 Advantive VeraCore 漏洞添加到 KEV 列表中](https://hackernews.cc/archives/57794)\n - [ ] [摩莎发布修复PT交换机关键认证绕过漏洞的补丁](https://hackernews.cc/archives/57792)\n - [ ] [SideWinder APT 组织针对亚洲、中东和非洲的海事、核能和 IT 部门发起攻击](https://hackernews.cc/archives/57790)\n - [ ] [Ballista 僵尸网络利用未修复的 TP-Link 漏洞，感染超过 6000 台设备](https://hackernews.cc/archives/57788)\n- FreeBuf网络安全行业门户\n - [ ] [多视角解码大模型安全：以 AI 制衡 AI，突破安全困局](https://www.freebuf.com/fevents/424379.html)\n - [ ] [AI会取代渗透测试工程师吗？](https://www.freebuf.com/articles/neopoints/424414.html)\n - [ ] [FreeBuf早报 | 微软与VMware零日漏洞紧急修复指南；未修复的TP-Link漏洞感染超6000台设备](https://www.freebuf.com/news/424346.html)\n - [ ] [API攻击威胁加剧：2025年如何确保API安全](https://www.freebuf.com/articles/web/424399.html)\n - [ ] [攻击者开始利用MFA漏洞在内的高级手段绕过多因素身份验证](https://www.freebuf.com/articles/web/424386.html)\n- Webroot Blog\n - [ ] [World Backup Day: Pledge to protect your digital life](https://www.webroot.com/blog/2025/03/12/world-backup-day-pledge-to-protect-your-digital-life/)\n- Dhole Moments\n - [ ] [On The Insecurity of Telecom Stacks in the Wake of Salt Typhoon](https://soatok.blog/2025/03/12/on-the-insecurity-of-telecom-stacks-in-the-wake-of-salt-typhoon/)\n- 吾爱破解论坛\n - [ ] [十七周年开放注册微信抽奖活动，再送40个账号注册码或300论坛币，下午两点开奖，详见：【开放注册公告】吾爱破解论坛2025年3月13日十七周年开放注册公告。](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141921&idx=1&sn=d924a1e589890ba4bb6cfe382ac8366a&chksm=bd50a7758a272e634c75890df442aedbf0bf467bc67f4c43b4eab1904df5e4b13b5a28679bec&scene=58&subscene=0#rd)\n- 奇安信 CERT\n - [ ] [微软3月补丁日多个产品安全漏洞风险通告：6个在野利用、6个紧急漏洞](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503142&idx=1&sn=f4f47cabc55a311159daa2ca4cca64e4&chksm=fe79e9bec90e60a85e97f731b274b26c3cc17015ef8c1a979957b1c82c53ac998a1e16658bbb&scene=58&subscene=0#rd)\n- 威努特安全网络\n - [ ] [构建主机防护坚固屏障：威努特勒索病毒处置方案实战分享](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131601&idx=1&sn=9bbb439ec74e05f7ab82138886c2972d&chksm=80e71461b7909d7739009c640d0de3b357025ae8027ab954af0f269826f58bb97ac8591cd8ed&scene=58&subscene=0#rd)\n- 代码卫士\n - [ ] [苹果紧急修复已遭利用的0day漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522462&idx=1&sn=c051df72b6c28d0692307dd16d721ac3&chksm=ea94a9f4dde320e2d70d9b7a80e5498b123869d81567fe01975c9045575a19dd18d413f1a724&scene=58&subscene=0#rd)\n - [ ] [微软三月补丁星期二值得关注的漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522462&idx=2&sn=f4fd6b2b3208ba9bf9c03f0a964fe0e5&chksm=ea94a9f4dde320e2794628bba1a96ea5a4fbdcaf3687cbaf3007508db92db3e077e36f2cfa87&scene=58&subscene=0#rd)\n- 安全分析与研究\n - [ ] [BumbleBee加载器木马样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491005&idx=1&sn=f6d79e2f106d664e0c27bb76ea8a559a&chksm=902fb295a7583b838a52bad758d4914eab3938cdddc735b033c702eb8daceed04ff099a700bf&scene=58&subscene=0#rd)\n- 奇客Solidot–传递最新科技情报\n - [ ] [长时间玩游戏对幸福感影响不大](https://www.solidot.org/story?sid=80775)\n - [ ] [微软用 Windows App 替代 Remote Desktop app](https://www.solidot.org/story?sid=80774)\n - [ ] [至少 1.1 % 的中世纪手稿是修女抄写的](https://www.solidot.org/story?sid=80773)\n - [ ] [Spotify 在 2024 年支付了 100 亿美元版税](https://www.solidot.org/story?sid=80772)\n - [ ] [Meta 开始测试其自研 AI 训练芯片](https://www.solidot.org/story?sid=80771)\n - [ ] [空气污染与生物衰老正相关，而绿地负相关](https://www.solidot.org/story?sid=80770)\n - [ ] [台积电提议与 AMD 等接管英特尔芯片制造业务](https://www.solidot.org/story?sid=80769)\n - [ ] [全球只有 7 个国家的 PM2.5 水平达到 WHO 的标准](https://www.solidot.org/story?sid=80768)\n - [ ] [TP-Link 高危漏洞被僵尸网络感染传播恶意程序](https://www.solidot.org/story?sid=80767)\n - [ ] [西班牙将对不标记 AI 生成内容的公司处以巨额罚款](https://www.solidot.org/story?sid=80766)\n - [ ] [Firefox 一根证书将于 2025 年 3 月 14 日过期](https://www.solidot.org/story?sid=80765)\n- VAADATA – Ethical Hacking Services\n - [ ] [How WebSockets Work? Vulnerabilities and Security Best Practices](https://www.vaadata.com/blog/how-websockets-work-vulnerabilities-and-security-best-practices/)\n- dotNet安全矩阵\n - [ ] [.NET 基于会话劫持的权限切换：通过 Sharp4SessionExec 实现在不同用户会话中执行命令](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499108&idx=1&sn=c042d132d9a3f67c2eeb4b0d39418a3d&chksm=fa595389cd2eda9f5f92ca11d32d29f22e661c15034287a4e33d073aeeb4fdecde51882d1552&scene=58&subscene=0#rd)\n - [ ] [.NET内网实战：通过扩展名劫持和屏保劫持技术实现注册表权限维持](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499108&idx=2&sn=94b985267550edca504cd50411270a26&chksm=fa595389cd2eda9f16c24a82a9495d7e164df151523c796c7315da5b966eaf0c660768ab4f53&scene=58&subscene=0#rd)\n - [ ] [通过 Sharp4FUAC 绕过 UAC 实现本地权限提升](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499108&idx=3&sn=77dac7daf099cc2263ef51f603f3f10a&chksm=fa595389cd2eda9f88396f6c510f2da13174048417f5ddb1af6f71bf0b8f1ffa49e13a8452de&scene=58&subscene=0#rd)\n- 酒仙桥六号部队\n - [ ] [利用微软工具击败windows自带的防御系统](https://mp.weixin.qq.com/s?__biz=MzAwMzYxNzc1OA==&mid=2247502047&idx=1&sn=c1a04bfdf83d879003fd53f059ee2690&chksm=9b3aee6eac4d67785ccccf19cb4c0119f88ea01f7880fc91d643f61afa0b63d3f6569c82aa16&scene=58&subscene=0#rd)\n- 腾讯科恩实验室\n - [ ] [BinaryAI函数语义匹配大模型API日调用量破亿：前沿技术与业务适配的实战验证](https://mp.weixin.qq.com/s?__biz=MzU1MjgwNzc4Ng==&mid=2247512894&idx=1&sn=553b7a6a2c627e3d3ae94fa20318e6cd&chksm=fbfe8f3bcc89062d6d85c3cb6268bbc4d9a43df8fe42f25aac3535f4f53ba856847bc5d8976d&scene=58&subscene=0#rd)\n- 安全内参\n - [ ] [谷歌2024年发放了8500万元漏洞赏金，单个漏洞最高奖励72万元](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513939&idx=1&sn=174ed08d5a6c7985103d8537cbcc9346&chksm=ebfaf073dc8d79659e21b1bf00aa5bcf21b6868436740aab2bffdf7adebc9c7c03cb0d3df7dc&scene=58&subscene=0#rd)\n - [ ] [新疆一企业主机多次感染“僵木蠕”病毒被约谈整改](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513939&idx=2&sn=06840c54211b97964a1f022928009870&chksm=ebfaf073dc8d796555d4e956faafddbb3b17f4d3524c4983220b95b954aaa88d8e11645c7830&scene=58&subscene=0#rd)\n- 绿盟科技CERT\n - [ ] [【安全更新】微软3月安全更新多个产品高危漏洞通告](https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489050&idx=1&sn=b8a3c83bd1226e6846cf900b6521eb3e&chksm=c2c64111f5b1c8073c8272d5a6a272095297af0cd68edb9cd84c6b972f9c1960d0d457e44ef5&scene=58&subscene=0#rd)\n- 安全客\n - [ ] [浅析新型网络犯罪DeepSeek AI实战应用](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788155&idx=1&sn=7efc6d1ac3416d736815eb5cca191073&chksm=8893be94bfe43782acc1236943deabc5ad4b184fa5413750b782dd2e4870fa4f38a34b9c0091&scene=58&subscene=0#rd)\n- 侠易龙门阵\n - [ ] [见山见海见自己](https://mp.weixin.qq.com/s?__biz=MzIxODYyNjczNA==&mid=2247483907&idx=1&sn=290dc419d57bc9c9f59bca0b952acc34&chksm=97e6edc2a09164d49153e8f976e19dba7644f02e98f185490ea4b54f8ee76dc25acb2566f6e5&scene=58&subscene=0#rd)\n- 360漏洞云\n - [ ] [360漏洞情报月报2025年02期｜全网捕获4000+漏洞，整体威胁水平处于高位](https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502991&idx=1&sn=aa35c8e8e6ad6ef56e7f35c84e5150ba&chksm=cfc56bd0f8b2e2c62f23476a2f394839ae286c8f994de2e8ba0f40cd727167b04167a569c207&scene=58&subscene=0#rd)\n- 安全研究GoSSIP\n - [ ] [G.O.S.S.I.P 阅读推荐 2025-03-12 此 Exclave 非 Enclave](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499908&idx=1&sn=804f71543189801b1f3edd41c5caf5df&chksm=c063ee5df714674b1ffdaff902c41978ddcb41eb854292bbd53237622ec28b75766f1e83a833&scene=58&subscene=0#rd)\n- 慢雾科技\n - [ ] [SwitchyOmega 被曝盗取私钥，如何防范插件被篡改？](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501403&idx=1&sn=96cf05ebef9908a66d09b27b305b72cb&chksm=fddeb8dccaa931cab7b54791c8df8f5f5c7fb9917b1a046769f3d06583a2a82a8a124cfb7624&scene=58&subscene=0#rd)\n- 数世咨询\n - [ ] [谷歌 2024 年漏洞赏金计划，1200 万美元奖励安全研究人员，诚邀白帽黑客找bug](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537996&idx=1&sn=fdcf381e7c40c8ecd8bebbd855c987ba&chksm=c14427f1f633aee7d974cbc8383746ff4c5a2dbc2c24c7a653886d084fdffb58147af6b5d8c7&scene=58&subscene=0#rd)\n- ChaMd5安全团队\n - [ ] [TPCTF2025 writeup by Mini-Venom](https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247512289&idx=1&sn=3335feefc68146cf1e3763bc0a609005&chksm=e89d9839dfea112f28a34546c4f2aa6de0d6498de4e12054d1169fb4d46d4f5d43f89845e2a3&scene=58&subscene=0#rd)\n- 微步在线\n - [ ] [想偷摸把IPS扔了，领导会发现吗？](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183308&idx=1&sn=6f0a0adad1f2ebc35851d9b59547a96c&chksm=f4486d30c33fe42648d0bfe655b6e68a2f884081b0e084383ff117cc7d6d671c3ac530b4bf02&scene=58&subscene=0#rd)\n- 网络空间安全科学学报\n - [ ] [综述合辑 | 《网络空间安全科学学报》综述论文（上）](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505224&idx=1&sn=67c0601b07787d2dcc7856172b9c4dbe&chksm=e9bfc1f6dec848e0de29e801a3ccf77f9209c6a605496d0e5f8d624bc19dda2b88850ecefee6&scene=58&subscene=0#rd)\n - [ ] [第40次全国计算机安全学术交流会征文通知](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505224&idx=2&sn=f7ca28fcaf803e6d8bc32aaf80862f4f&chksm=e9bfc1f6dec848e022e092cdbd5fc38975ef55c008151affeaa37b0a81dc15a9d29b6d5add2c&scene=58&subscene=0#rd)\n- 安全圈\n - [ ] [【安全圈】美国政府称 2024 年美国人因欺诈损失创纪录 125 亿美元](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068449&idx=1&sn=7aa71495a16a8590c5a5dbaf2a299a09&chksm=f36e7621c419ff37a55f6e4a2f6fe2b939915e853e953c5910425e2de36e9283828150b61edb&scene=58&subscene=0#rd)\n - [ ] [【安全圈】朝鲜 Lazarus 黑客通过 npm 软件包感染数百人](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068449&idx=2&sn=bbe1548572f3323cc8067fa2bc9bdf6b&chksm=f36e7621c419ff373d9c7a473f822763f9acf8da2fea0f87ba95570197bef4a355865d2c5e45&scene=58&subscene=0#rd)\n - [ ] [【安全圈】瑞士关键行业面临新的 24 小时网络攻击报告规则](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068449&idx=3&sn=cbceff6b7d8cacc138082e8b186207c7&chksm=f36e7621c419ff37d6183448d166632cf5aae7c16311657d3c699dcfe92aa16fad794e320a78&scene=58&subscene=0#rd)\n - [ ] [【安全圈】SideWinder APT 利用增强的工具集瞄准海事和核能领域](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068449&idx=4&sn=90a8bf33c53d8d8882985f1e9798ea93&chksm=f36e7621c419ff379fb81b60765a30c5e72df0f4426e948152ea02b8615c04cabaf32fbc5f31&scene=58&subscene=0#rd)\n- 国家互联网应急中心CNCERT\n - [ ] [网络安全信息与动态周报2025年第10期（3月3日-3月9日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499707&idx=1&sn=bfb1dd4a9c6e230f01150906b792357e&chksm=973accd9a04d45cf2aed798aa03416655795775e5152767bbfbc8e4b5d0eae45c43befb7d60e&scene=58&subscene=0#rd)\n- 看雪学苑\n - [ ] [无壳app的libmsaoaidsec.so frida反调试绕过姿势](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590751&idx=1&sn=3a5f5b3c1d41a36914abf745b355f9dc&chksm=b18c2e9586fba783b1bd4f8635ecc2a5b66820a37a7e27896c9e0759525e816863d39f88fd7b&scene=58&subscene=0#rd)\n - [ ] [捷豹路虎数据泄露：黑客“Rey”曝光700份内部文件](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590751&idx=2&sn=7844135d72f9f822231b770e7cd58981&chksm=b18c2e9586fba78333777d3c39f5f751a9988cea1709250a875278be1374db4353c71562ee26&scene=58&subscene=0#rd)\n - [ ] [10人开班，欢迎报名！大模型安全应用开发：高薪赛道快速入局](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590751&idx=3&sn=4ae640da3325cfb415bc7c5f2a8615e5&chksm=b18c2e9586fba78385a9ae902c1f1936dab695b6923b71815db52f09a72ea975bc67a1cb3a24&scene=58&subscene=0#rd)\n- 嘶吼专业版\n - [ ] [来个Offer||腾讯云安全科恩实验室，正在招募中~~](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581481&idx=1&sn=ae6ec15426f50727fe659f7e1386d2b7&chksm=e9146f13de63e60574d42ed888441696c3c2f75c1a1ce4753e48575dca91f6a20c8939ad5a18&scene=58&subscene=0#rd)\n - [ ] [警惕 Apache Camel 漏洞 攻击者借此能注入任意标头](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581481&idx=2&sn=2a2b8413424b32da5743ddb9a2b5d0aa&chksm=e9146f13de63e6057096876ddbef6879d3b48aab956596d0c6457f950bb9fc9ccd55c068b527&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [菲律宾前总统杜特尔特国际刑事法院逮捕事件情报分析报告](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560251&idx=1&sn=2d8902ae837622d230a58ec16337d23c&chksm=871178b0b066f1a6d22d9bc973ff0d3bd7a60c1f40d7ee9c3dc221e25f86296412607e5ba4bf&scene=58&subscene=0#rd)\n - [ ] [巴基斯坦列车劫持事件：安全危机背后的深度剖析](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560251&idx=2&sn=b113812e6173750086e6d8bddc453b3f&chksm=871178b0b066f1a6f78b90967a9943807e25c5909e35edd4bdce625a9d4f710edfe874b611ca&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [Manus 合作阿里千问，意味着什么？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075503&idx=1&sn=cdb9cc040d6bb0a49bae651266babb9e&chksm=7e57c59949204c8fc2a2d0bb33af9372812a5c5947824849105dc47e82cf515f7f39f87c8d85&scene=58&subscene=0#rd)\n - [ ] [完整复盘：Manus 是怎么诞生的？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075464&idx=1&sn=10f65e628e93d3cfc89fe90dc0f56515&chksm=7e57c5be49204ca8cb0876ada832e903cfa21f69825912a0552644b721e681b92fc477adcd6c&scene=58&subscene=0#rd)\n - [ ] [Manus与阿里千问合作，实现全部功能；美总统：抵制特斯拉违法！；OpenAI 发新工具，目标直指 Manus | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075443&idx=1&sn=9ce6a5a50bee75791583e8732dc8d53d&chksm=7e57ca4549204353440439e54f1c2998cb307fae74e4062ef5150cb6a6546843be65a14d0072&scene=58&subscene=0#rd)\n- 天御攻防实验室\n - [ ] [美国CISA红队全部被解雇](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486317&idx=1&sn=62fe68388f58c6e8517031fa5641f429&chksm=fb04c805cc7341138b4256da5fc653da915f850b7594303794a73e5b6383ba65410dd2e2cd05&scene=58&subscene=0#rd)\n- 火绒安全\n - [ ] [2025-03微软漏洞通告](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524536&idx=1&sn=fe1a221c3018811a521d058549750ce5&chksm=eb70be87dc07379174ddbb0b779981b4c3e9b5b51a28f443dedb84b98e3ab3fb6f44063ae962&scene=58&subscene=0#rd)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524536&idx=2&sn=27709d14077e3a3c67f8b97f9f616d59&chksm=eb70be87dc073791545519016272768a03993655e37cb1de8b080347046bba4255a2a455a2fd&scene=58&subscene=0#rd)\n- 全频带阻塞干扰\n - [ ] [2025纳新计划 | 上海 • RC2实习生招募](https://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648958553&idx=1&sn=3c57bd0632107ae4c5e8674a4aec63a6&chksm=f09ef126c7e97830d20bb9b2e2eaece5553ddfc2608f0b5b2c7c77e5a137aebb59c25690bb12&scene=58&subscene=0#rd)\n- 字节跳动安全中心\n - [ ] [双倍积分 | 生活服务漏洞+爬虫双专测开启](https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494528&idx=1&sn=7f8e933d26286579c5b9dc60986b3aa0&chksm=fa9d10d6cdea99c024e39078c2ebc8819c119162458dc9295006e366faef9a056c2df2415957&scene=58&subscene=0#rd)\n- 深信服千里目安全技术中心\n - [ ] [微软补丁日安全通告 | 3月份](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524066&idx=1&sn=8b94c05d7e4411ea13760fac6855a1b8&chksm=ce4615f2f9319ce4f90b4020ae60337afe34a4b5c5d85ee1f91970d7d58dc42cb89c3a833165&scene=58&subscene=0#rd)\n - [ ] [【漏洞通告】Fortinet多产品前台远程代码执行漏洞(CVE-2024-45324)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524066&idx=2&sn=93a40ee8c5d3b9832561ea2de0fe1861&chksm=ce4615f2f9319ce4ef9e0e219fde02b0290a2fbe48140af183e5ab091de704323c946d09126d&scene=58&subscene=0#rd)\n - [ ] [网络安全信息与动态周报2025年第10期（3月3日-3月9日）](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524066&idx=3&sn=a4fd06dad9ee8a45aca7441be0f835be&chksm=ce4615f2f9319ce4565492c123ad6a76de255b68e80f8ec15773bb425f85bd0778d7f14827ed&scene=58&subscene=0#rd)\n- Securityinfo.it\n - [ ] [Apple risolve un bug 0-day di WebKit già sfruttato](https://www.securityinfo.it/2025/03/12/apple-risolve-un-bug-0-day-di-webkit-gia-sfruttato/?utm_source=rss&utm_medium=rss&utm_campaign=apple-risolve-un-bug-0-day-di-webkit-gia-sfruttato)\n - [ ] [Kaspersky avverte: email aziendali usate per account personali, il 7% finisce sul dark web](https://www.securityinfo.it/2025/03/12/kaspersky-email-aziendali-account-personali-dark-web/?utm_source=rss&utm_medium=rss&utm_campaign=kaspersky-email-aziendali-account-personali-dark-web)\n- Beacon Tower Lab\n - [ ] [漏洞预警 | Apache Tomcat 存在远程代码执行漏洞（CVE-2025-24813）](https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487041&idx=1&sn=fb038aa4f1e439a4799309bf67f1c0e1&chksm=c22296b8f5551fae1f5f314d9269a1f3f9b456602fed225a076affb51fcfbe52d3f221a79e3a&scene=58&subscene=0#rd)\n- 360数字安全\n - [ ] [360携手首都在线 拟推动DeepSeek一体机安全与服务落地合作](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579865&idx=1&sn=408ecb508f8427cce2626e192845eab3&chksm=9f8d28d1a8faa1c71df0a4ec8f66c25d88dbc42d9cb678fb5ed35bbf97f6d46e1ae8dd3ce1cc&scene=58&subscene=0#rd)\n- NetSPI\n - [ ] [NetSPI Wins First Place at SHARE Mainframe Capture the Flag Event](https://www.netspi.com/blog/executive-blog/mainframe-penetration-testing/netspi-wins-first-place-at-share-mainframe-capture-the-flag-event/)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #774: Forensic Lunch Test Kitchen 3/11/25](https://www.hecfblog.com/2025/03/daily-blog-774-forensic-lunch-test.html)\n- Max Kersten\n - [ ] [My impression of RE//VERSE 2025](https://maxkersten.nl/2025/03/12/my-impression-of-re-verse-2025/)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Scans for VMWare Hybrid Cloud Extension (HCX) API (Log4j - not brute forcing), (Wed, Mar 12th)](https://isc.sans.edu/diary/rss/31762)\n - [ ] [ISC Stormcast For Wednesday, March 12th, 2025 https://isc.sans.edu/podcastdetail/9360, (Wed, Mar 12th)](https://isc.sans.edu/diary/rss/31760)\n- Over Security - Cybersecurity news aggregator\n - [ ] [China continues cyberattacks on routers, this time targeting Juniper Networks devices](https://therecord.media/china-continues-attacks-routers-juniper)\n - [ ] [Facebook discloses FreeType 2 flaw exploited in attacks](https://www.bleepingcomputer.com/news/security/facebook-discloses-freetype-2-flaw-exploited-in-attacks/)\n - [ ] [CISA: More than 300 critical infrastructure orgs attacked by Medusa ransomware](https://therecord.media/medusa-ransomware-targeting-critical-infrastructure-orgs)\n - [ ] [The people in Elon Musk’s DOGE universe](https://techcrunch.com/2025/03/12/the-people-in-elon-musk-doge-universe/)\n - [ ] [CISA: Medusa ransomware hit over 300 critical infrastructure orgs](https://www.bleepingcomputer.com/news/security/cisa-medusa-ransomware-hit-over-300-critical-infrastructure-orgs/)\n - [ ] [Volt Typhoon hackers were in Massachusetts utility’s systems for 10 months](https://therecord.media/volt-typhoon-hackers-utility-months)\n - [ ] [New North Korean Android spyware slips onto Google Play](https://www.bleepingcomputer.com/news/security/new-north-korean-android-spyware-slips-onto-google-play/)\n - [ ] [Garantex crypto exchange admin arrested while on vacation](https://www.bleepingcomputer.com/news/security/garantex-crypto-exchange-admin-arrested-while-on-vacation/)\n - [ ] [CISA cuts $10 million annually from ISAC funding for states amid wider cyber cuts](https://therecord.media/cisa-cuts-10-million-isac-funding)\n - [ ] [Garantex administrator arrested in India under extradition law](https://techcrunch.com/2025/03/12/garantex-administrator-arrested-in-india-under-extradition-law/)\n - [ ] [Europe urged to seize ‘opportunity’ by replacing US funding for Ukraine cyber defense](https://therecord.media/europe-opportunity-tallinn-funding-replace)\n - [ ] [Zero day in WebKit sfruttata in attacchi sofisticati: la patch Apple è urgente](https://www.cybersecurity360.it/news/zero-day-in-webkit-sfruttata-in-attacchi-sofisticati-la-patch-apple-e-urgente/)\n - [ ] [Spyware in bogus Android apps is attributed to North Korean group](https://therecord.media/north-korea-malware-android-apps-kospy-apt37-scarcruft)\n - [ ] [CISA Adds Five New Vulnerabilities to Its Known Exploited Vulnerabilities Catalog](https://cyble.com/blog/cisa-adds-5-flaws-to-kev-catalog/)\n - [ ] [Mozilla warns users to update Firefox before certificate expires](https://www.bleepingcomputer.com/news/software/mozilla-warns-users-to-update-firefox-before-certificate-expires/)\n - [ ] [Signal no longer cooperating with Ukraine on Russian cyber threats, official says](https://therecord.media/signal-no-longer-cooperating-with-ukraine)\n - [ ] [Chinese cyberspies backdoor Juniper routers for stealthy access](https://www.bleepingcomputer.com/news/security/chinese-cyberspies-backdoor-juniper-routers-for-stealthy-access/)\n - [ ] [Browser-Based Data Leaks: 3 Biggest Data Security Challenges Today](https://www.bleepingcomputer.com/news/security/browser-based-data-leaks-3-biggest-data-security-challenges-today/)\n - [ ] [Microsoft patches Windows Kernel zero-day exploited since 2023](https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-windows-kernel-zero-day-exploited-since-2023/)\n - [ ] [Apple risolve un bug 0-day di WebKit già sfruttato](https://www.securityinfo.it/2025/03/12/apple-risolve-un-bug-0-day-di-webkit-gia-sfruttato/)\n - [ ] [AI Safety: Key Threats and Solutions](https://any.run/cybersecurity-blog/ai-risks-and-threats/)\n - [ ] [Nuova truffa con SMS e telefonate false a tema UniCredit: come proteggersi](https://www.cybersecurity360.it/news/nuova-truffa-con-sms-e-telefonate-false-a-tema-unicredit-come-proteggersi/)\n - [ ] [NCSC Reports Surge in Cyber Security Incidents with Financial Losses in Q4 2024](https://cyble.com/blog/ncsc-reports-6-8m-losses-in-q4-2024/)\n - [ ] [Microsoft: Recent Windows updates make USB printers print random text](https://www.bleepingcomputer.com/news/microsoft/microsoft-usb-printers-print-random-text-after-recent-windows-updates/)\n - [ ] [North Korean government hackers snuck spyware on Android app store](https://techcrunch.com/2025/03/12/north-korean-government-hackers-snuck-spyware-on-android-app-store/)\n - [ ] [La corsa al nucleare di ChatGPT e gli altri](https://www.guerredirete.it/la-corsa-al-nucleare-di-chatgpt-e-gli-altri/)\n - [ ] [Aggiornamenti Microsoft marzo 2025, corrette 7 vulnerabilità zero-day: update urgente](https://www.cybersecurity360.it/news/aggiornamenti-microsoft-marzo-2025-corrette-7-vulnerabilita-zero-day-update-urgente/)\n - [ ] [Kaspersky avverte: e-mail aziendali usate per account personali, il 7% finisce sul dark web](https://www.securityinfo.it/2025/03/12/kaspersky-email-aziendali-account-personali-dark-web/)\n - [ ] [Incident response analyst report 2024](https://securelist.com/kaspersky-incident-response-report-2024/115873/)\n - [ ] [Microsoft: 6 Zero-Days in March 2025 Patch Tuesday](https://krebsonsecurity.com/2025/03/microsoft-6-zero-days-in-march-2025-patch-tuesday/)\n- Schneier on Security\n - [ ] [China, Russia, Iran, and North Korea Intelligence Sharing](https://www.schneier.com/blog/archives/2025/03/china-russia-iran-and-north-korea-intelligence-sharing.html)\n- Posts By SpecterOps Team Members - Medium\n - [ ] [Getting Started with BHE — Part 1](https://posts.specterops.io/getting-started-with-bhe-part-1-f33c20c6f6f2?source=rss----f05f8696e3cc---4)\n- 迪哥讲事\n - [ ] [web端爬虫逆向](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497265&idx=1&sn=7d9f575c8f52cd4260c96da2296ea029&chksm=e8a5fc52dfd275448ee9769b8c0c11c39b75dad6e7cc65004539b1e11827c267188dadabcdab&scene=58&subscene=0#rd)\n- ICT Security Magazine\n - [ ] [Analista OSINT: Ruolo, Approcci e sfide nella Cybersecurity](https://www.ictsecuritymagazine.com/articoli/analista-osint-ruolo/)\n- The Hacker News\n - [ ] [Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and Rootkits](https://thehackernews.com/2025/03/chinese-hackers-breach-juniper-networks.html)\n - [ ] [Over 400 IPs Exploiting Multiple SSRF Vulnerabilities in Coordinated Cyber Attack](https://thehackernews.com/2025/03/over-400-ips-exploiting-multiple-ssrf.html)\n - [ ] [Pentesters: Is AI Coming for Your Role?](https://thehackernews.com/2025/03/pentesters-is-ai-coming-for-your-role.html)\n - [ ] [URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-Days](https://thehackernews.com/2025/03/urgent-microsoft-patches-57-security.html)\n - [ ] [Apple Releases Patch for WebKit Zero-Day Vulnerability Exploited in Targeted Attacks](https://thehackernews.com/2025/03/apple-releases-patch-for-webkit-zero.html)\n- Deep Web\n - [ ] [Is it normal for Tor links to disappear?](https://www.reddit.com/r/deepweb/comments/1j97e50/is_it_normal_for_tor_links_to_disappear/)\n- Blackhat Library: Hacking techniques and research\n - [ ] [CyberSec Tools by category....](https://www.reddit.com/r/blackhat/comments/1j9tz6t/cybersec_tools_by_category/)\n- Technical Information Security Content & Discussion\n - [ ] [New Lumma Stealer campaign abuses Reddit threads to drop malware via fake WeTransfer links](https://www.reddit.com/r/netsec/comments/1j9xq07/new_lumma_stealer_campaign_abuses_reddit_threads/)\n - [ ] [Pre-authentication SQL injection to RCE in GLPI (CVE-2025-24799/CVE-2025-24801)](https://www.reddit.com/r/netsec/comments/1j9hcdw/preauthentication_sql_injection_to_rce_in_glpi/)\n - [ ] [Impossible XXE in PHP](https://www.reddit.com/r/netsec/comments/1j9f0i7/impossible_xxe_in_php/)\n - [ ] [Ruthless Mantis - Modus Operandi](https://www.reddit.com/r/netsec/comments/1j9v0dh/ruthless_mantis_modus_operandi/)\n - [ ] [Analysis of CVE-2025-24813 Apache Tomcat Path Equivalence RCE](https://www.reddit.com/r/netsec/comments/1j9f0ur/analysis_of_cve202524813_apache_tomcat_path/)\n- Your Open Hacker Community\n - [ ] [How do botnets make money?](https://www.reddit.com/r/HowToHack/comments/1j9nj7l/how_do_botnets_make_money/)\n - [ ] [unable to solve problems](https://www.reddit.com/r/HowToHack/comments/1j9rl5j/unable_to_solve_problems/)\n - [ ] [I need help with kali linux rootless](https://www.reddit.com/r/HowToHack/comments/1j9onay/i_need_help_with_kali_linux_rootless/)\n - [ ] [Is it possible to evade antivirus with common tools?](https://www.reddit.com/r/HowToHack/comments/1j9nzws/is_it_possible_to_evade_antivirus_with_common/)\n - [ ] [How to use the Termux in Mobile ?](https://www.reddit.com/r/HowToHack/comments/1j9e4po/how_to_use_the_termux_in_mobile/)\n - [ ] [How would one by pass bios passwords?](https://www.reddit.com/r/HowToHack/comments/1j97kpr/how_would_one_by_pass_bios_passwords/)\n - [ ] [broken iphone screen](https://www.reddit.com/r/HowToHack/comments/1j99d1n/broken_iphone_screen/)\n - [ ] [Anyone have any experience with bypassing ASLR, DEP, CFG and random XOR canary?](https://www.reddit.com/r/HowToHack/comments/1j98sa8/anyone_have_any_experience_with_bypassing_aslr/)\n - [ ] [My FB account hacked, but how that's possible](https://www.reddit.com/r/HowToHack/comments/1j9d23l/my_fb_account_hacked_but_how_thats_possible/)\n - [ ] [Need help with a doxxer](https://www.reddit.com/r/HowToHack/comments/1j992zc/need_help_with_a_doxxer/)\n- Deeplinks\n - [ ] [In Memoriam: Mark Klein, AT&T Whistleblower Who Revealed NSA Mass Spying](https://www.eff.org/deeplinks/2025/03/memoriam-mark-klein-att-whistleblower-about-nsa-mass-spying)\n - [ ] [EFF Stands with Perkins Coie and the Rule of Law](https://www.eff.org/deeplinks/2025/03/eff-stands-perkins-coie-and-rule-law)\n - [ ] [Anchorage Police Department: AI-Generated Police Reports Don’t Save Time](https://www.eff.org/deeplinks/2025/03/anchorage-police-department-ai-generated-police-reports-dont-save-time)\n- Computer Forensics\n - [ ] [Is it possible to install LiME on the current Sift Workstation Image?](https://www.reddit.com/r/computerforensics/comments/1j9m9by/is_it_possible_to_install_lime_on_the_current/)\n - [ ] [Mac RDP question](https://www.reddit.com/r/computerforensics/comments/1j9gfof/mac_rdp_question/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [If you have experience with cyber ranges, i would be grateful if you took a few minutes to fill out my survey for my thesis on the topic!](https://www.reddit.com/r/netsecstudents/comments/1j9qnkk/if_you_have_experience_with_cyber_ranges_i_would/)\n- TG Soft Software House - News\n - [ ] [Vir.IT eXplorer PRO supera, ottenendo il massimo risultato, l'ultimo test effettuato a Gennaio 2025 da AppEsteem per i prodotti AV DeceptorFighters](http://www.tgsoft.it/italy/news_archivio.asp?id=1617)\n- Security Affairs\n - [ ] [China-linked APT UNC3886 targets EoL Juniper routers](https://securityaffairs.com/175308/apt/china-linked-apt-unc3886-targets-eol-juniper-routers.html)\n - [ ] [U.S. CISA adds six Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/175298/hacking/u-s-cisa-adds-six-microsoft-windows-flaws-to-its-known-exploited-vulnerabilities-catalog.html)\n - [ ] [Microsoft Patch Tuesday security updates for March 2025 fix six actively exploited zero-days](https://securityaffairs.com/175289/hacking/microsoft-patch-tuesday-security-updates-for-march-2025.html)\n - [ ] [New Ballista Botnet spreads using TP-Link flaw. Is it an Italian job?](https://securityaffairs.com/175278/malware/ballista-botnet-exploits-unpatched-tp-link-flaw.html)\n- Graham Cluley\n - [ ] [Man found guilty of planting infinite loop logic bomb on ex-employer’s system](https://www.bitdefender.com/en-us/blog/hotforsecurity/man-found-guilty-of-planting-infinite-loop-logic-bomb-on-ex-employers-system)\n- Information Security\n - [ ] [Is Anyone Else Worried About the Security of AI-Powered SOCs?](https://www.reddit.com/r/Information_Security/comments/1j9k4my/is_anyone_else_worried_about_the_security_of/)\n- Tor Project blog\n - [ ] [It takes a (Global) Village to Fight Censorship](https://blog.torproject.org/fighting-censorship-with-webtunnel/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [The Counterfeit Problem: How Blockchain Is Revolutionizing Brand Protection - Noam Krasniansky - BSW #386](http://sites.libsyn.com/18678/the-counterfeit-problem-how-blockchain-is-revolutionizing-brand-protection-noam-krasniansky-bsw-386)\n"}, "1469f5649fc17ca53cd4f322d99a8d8f5762cf72": {"t": 1785772255.8540595, "n": 38595, "h": "bf29534703a87a86", "c": "# 每日安全资讯（2025-03-13）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-03-12 Review](http://www.sec-wiki.com/?2025-03-12)\n- 醉卧烟雨's Blog\n - [ ] [国内小鸡可用的BBR一键脚本](http://blog.cctv.com.im/4252)\n- paper - Last paper\n - [ ] [「深蓝洞察」2024年度最憋屈的漏洞披露](https://paper.seebug.org/3304/)\n- Security Boulevard\n - [ ] [Executive Perspectives: The Cybersecurity Leadership Landscape with Ryan Surry](https://securityboulevard.com/2025/03/executive-perspectives-the-cybersecurity-leadership-landscape-with-ryan-surry/?utm_source=rss&utm_medium=rss&utm_campaign=executive-perspectives-the-cybersecurity-leadership-landscape-with-ryan-surry)\n - [ ] [What key metrics indicate NHI performance in DevOps?](https://securityboulevard.com/2025/03/what-key-metrics-indicate-nhi-performance-in-devops/?utm_source=rss&utm_medium=rss&utm_campaign=what-key-metrics-indicate-nhi-performance-in-devops)\n - [ ] [What strategies improve NHI provisioning speed without sacrificing security?](https://securityboulevard.com/2025/03/what-strategies-improve-nhi-provisioning-speed-without-sacrificing-security/?utm_source=rss&utm_medium=rss&utm_campaign=what-strategies-improve-nhi-provisioning-speed-without-sacrificing-security)\n - [ ] [How do I secure dynamic NHIs in a microservices architecture?](https://securityboulevard.com/2025/03/how-do-i-secure-dynamic-nhis-in-a-microservices-architecture/?utm_source=rss&utm_medium=rss&utm_campaign=how-do-i-secure-dynamic-nhis-in-a-microservices-architecture)\n - [ ] [AI-Driven Security Operations Center: AI SOC Explained](https://securityboulevard.com/2025/03/ai-driven-security-operations-center-ai-soc-explained/?utm_source=rss&utm_medium=rss&utm_campaign=ai-driven-security-operations-center-ai-soc-explained)\n - [ ] [BSides Exeter 2024 – Purple Track – Turning The Tables: Using Cyber Deception To Hunt Phishers At Scale](https://securityboulevard.com/2025/03/bsides-exeter-2024-purple-track-turning-the-tables-using-cyber-deception-to-hunt-phishers-at-scale/?utm_source=rss&utm_medium=rss&utm_campaign=bsides-exeter-2024-purple-track-turning-the-tables-using-cyber-deception-to-hunt-phishers-at-scale)\n - [ ] [No, Elon — X DDoS was NOT by Ukraine](https://securityboulevard.com/2025/03/elon-musk-x-ddos-ukraine-richixbw/?utm_source=rss&utm_medium=rss&utm_campaign=elon-musk-x-ddos-ukraine-richixbw)\n - [ ] [AI Security in 2025: Why Data Protection Must Be Built In, Not Bolted On](https://securityboulevard.com/2025/03/ai-security-in-2025-why-data-protection-must-be-built-in-not-bolted-on/?utm_source=rss&utm_medium=rss&utm_campaign=ai-security-in-2025-why-data-protection-must-be-built-in-not-bolted-on)\n - [ ] [Comic Agilé – Luxshan Ratnaravi, Mikkel Noe-Nygaard – #328 – Last Minute Change](https://securityboulevard.com/2025/03/comic-agile-luxshan-ratnaravi-mikkel-noe-nygaard-328-last-minute-change/?utm_source=rss&utm_medium=rss&utm_campaign=comic-agile-luxshan-ratnaravi-mikkel-noe-nygaard-328-last-minute-change)\n - [ ] [Rising Threat of Online Fraud in Quick Service Restaurants](https://securityboulevard.com/2025/03/rising-threat-of-online-fraud-in-quick-service-restaurants/?utm_source=rss&utm_medium=rss&utm_campaign=rising-threat-of-online-fraud-in-quick-service-restaurants)\n- Trustwave Blog\n - [ ] [How Managed Database Security Enhances Compliance, Privacy, and Threat Defense for the Financial Services Sector](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/how-managed-database-security-enhances-compliance-privacy-and-threat-defense-for-the-financial-services-sector/)\n- 90Sec - 最新话题\n - [ ] [远程分离免杀：是如何绕过杀软检测的？](https://forum.90sec.com/t/topic/2490)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [丈八网安获批入选教育部产学合作协同育人项目 诚邀高校申报](https://www.4hou.com/posts/J1jK)\n - [ ] [警惕 Apache Camel 漏洞 攻击者借此能注入任意标头](https://www.4hou.com/posts/GA7K)\n- Recent Commits to cve:main\n - [ ] [Update Wed Mar 12 20:31:33 UTC 2025](https://github.com/trickest/cve/commit/31ea98b7208fff44fbb1d270fb3e19d6e0b94e53)\n - [ ] [Update Wed Mar 12 12:20:34 UTC 2025](https://github.com/trickest/cve/commit/c819b5f3f9e5b0336fe81d13b909e80308bf1b59)\n - [ ] [Update Wed Mar 12 04:25:35 UTC 2025](https://github.com/trickest/cve/commit/58e2955fe654582d91bb54c69a77778c08a3b154)\n- 安全客-有思想的安全新媒体\n - [ ] [紧急！CISA 警告苹果 iOS 漏洞正被恶意利用](https://www.anquanke.com/post/id/304990)\n - [ ] [360携手清微智能DeepSeek一体机 拟推动“国产算力+大模型安全+AI应用”协同发展](https://www.anquanke.com/post/id/304988)\n - [ ] [重磅！苹果攻克 2025 年第三个正被利用的零日漏洞](https://www.anquanke.com/post/id/304985)\n - [ ] [微软 2025 年 3 月周二补丁行动紧急修复 57 个漏洞](https://www.anquanke.com/post/id/304982)\n - [ ] [威胁行为者突破安全层，助长 SIM 卡交换攻击升级](https://www.anquanke.com/post/id/304980)\n - [ ] [紧急警报：Eleven11bot 僵尸网络突袭，30000 台网络摄像头惨遭入侵](https://www.anquanke.com/post/id/304978)\n - [ ] [Opus Security 创新发布：基于 AI 数据分析框架的漏洞精准识别平台上线](https://www.anquanke.com/post/id/304975)\n - [ ] [2024 报告预警：高级持续性威胁以 74% 的增幅迅猛增长](https://www.anquanke.com/post/id/304973)\n - [ ] [KnowBe4 全球报告警示：零售行业面临的网络威胁呈上升趋势](https://www.anquanke.com/post/id/304970)\n - [ ] [利用合法 RMM 工具的网络攻击数量攀升](https://www.anquanke.com/post/id/304967)\n - [ ] [招聘信息安全工程师](https://www.anquanke.com/post/id/304752)\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗?](https://www.anquanke.com/post/id/304555)\n - [ ] [御辰平台 × DeepSeek | AI深度赋能攻击面管理，全流程提升风险分析与决策能力](https://www.anquanke.com/post/id/304673)\n - [ ] [隐匿在供应链丛林中的狩猎者：针对中小型供应商的定向突破策略](https://www.anquanke.com/post/id/304754)\n - [ ] [论AI与鸭血粉丝汤： 一场美味的“数据烹饪”之旅](https://www.anquanke.com/post/id/304866)\n- 奇安信攻防社区\n - [ ] [一次渗透过程中的CVE-2022-45460撞洞RCE](https://forum.butian.net/share/4170)\n- InfoSec Write-ups - Medium\n - [ ] [Billing TryHackMe Writeup](https://infosecwriteups.com/billing-tryhackme-writeup-aa32f343b0f1?source=rss----7b722bfd1b8d---4)\n - [ ] [How I uncover an IDOR led to access Private CV](https://infosecwriteups.com/how-i-uncover-an-idor-led-to-access-private-cv-access-3ff5be987896?source=rss----7b722bfd1b8d---4)\n - [ ] [Redelegate — VulnLab | ForceChangePassword, GenericAll, and Constrained Delegation](https://infosecwriteups.com/redelegate-vulnlab-forcechangepassword-genericall-and-constrained-delegation-aa48b6d89931?source=rss----7b722bfd1b8d---4)\n- obaby@mars\n - [ ] [Cursor 初体验](https://h4ck.org.cn/2025/03/19771)\n - [ ] [❤️闺蜜圈（大姨妈记录） APP/H5/小程序[置顶] — 3.0.06（更新时间：2025.03.12）](https://h4ck.org.cn/2025/03/15833)\n- BREAKDEV\n - [ ] [Evilginx Pro is finally here!](https://breakdev.org/evilginx-pro-release/)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [How I uncover an IDOR led to access Private CV](https://infosecwriteups.com/how-i-uncover-an-idor-led-to-access-private-cv-access-3ff5be987896?source=rss----7b722bfd1b8d--bug_bounty)\n- rutk1t0r's blog\n - [ ] [chromium支持arm64架构验证](https://embpgp.github.io/2025/03/12/chromium%E6%94%AF%E6%8C%81arm64%E6%9E%B6%E6%9E%84%E9%AA%8C%E8%AF%81/)\n- Securelist\n - [ ] [Incident response analyst report 2024](https://securelist.com/kaspersky-incident-response-report-2024/115873/)\n- SpiderLabs Blog\n - [ ] [Resurgence of a Fake Captcha Malware Campaign](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/resurgence-of-a-fake-captcha-malware-campaign/)\n- Horizon3.ai\n - [ ] [Is Continuous Threat Exposure Management right for you?](https://www.horizon3.ai/intelligence/blogs/is-continuous-threat-exposure-management-right-for-you/)\n- VMRay\n - [ ] [February 2025 Detection Highlights: A Record Month of New YARA Rules](https://www.vmray.com/february-2025-detection-highlights-a-record-month-of-new-yara-rules/)\n- PortSwigger Blog\n - [ ] [Behind the Scenes of Burp AI: How we built it, and what's next](https://portswigger.net/blog/behind-the-scenes-of-burp-ai-how-we-built-it-and-whats-next)\n- Malwarebytes\n - [ ] [Update your iPhone now: Apple patches vulnerability used in “extremely sophisticated attacks”](https://www.malwarebytes.com/blog/news/2025/03/update-your-iphone-now-apple-patches-vulnerability-used-in-extremely-sophisticated-attacks)\n - [ ] [The dark side of sports betting: How mirror sites help gambling scams thrive](https://www.malwarebytes.com/blog/personal/2025/03/the-dark-side-of-sports-betting-how-mirror-sites-help-gambling-scams-thrive)\n - [ ] [Android devices track you before you even sign in](https://www.malwarebytes.com/blog/news/2025/03/android-devices-track-you-before-you-even-sign-in)\n- text/plain\n - [ ] [Authenticode in 2025 – Azure Trusted Signing](https://textslashplain.com/2025/03/12/authenticode-in-2025-azure-trusted-signing/)\n- Lexfo's security blog\n - [ ] [Pre-authentication SQL injection to RCE in GLPI (CVE-2025-24799/CVE-2025-24801)](https://blog.lexfo.fr/glpi-sql-to-rce.html)\n- 体验盒子\n - [ ] [Mac下反编译微信小程序获得源码](https://www.uedbox.com/post/119330/)\n- Mozilla Security Blog\n - [ ] [Enhancing CA Practices: Key Updates in Mozilla Root Store Policy, v3.0](https://blog.mozilla.org/security/2025/03/12/enhancing-ca-practices-key-updates-in-mozilla-root-store-policy-v3-0/)\n- 安全牛\n - [ ] [警惕！黑客组织 Lazarus 在 npm 平台投放恶意软件包；SolarWinds网络帮助台漏洞曝光：攻击者可解密敏感密码](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135460&idx=1&sn=a13284cb4a851616277053291d51988d&chksm=bd15ad378a622421a956dc238b66c97ba05efe1d8b33368f13012f4ff3352b9771b0d034c27d&scene=58&subscene=0#rd)\n - [ ] [攻防对抗中的六个“AI VS. AI”最佳实践](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135460&idx=2&sn=2e4d8c6a3af0e6d45ef297c37acfcb9c&chksm=bd15ad378a622421ed0e27976bfd02f30454ec129b95d593fffece035734dd36417081269c64&scene=58&subscene=0#rd)\n- HackerNews\n - [ ] [朝鲜 Lazarus 黑客组织通过 npm 软件包实施大规模网络攻击](https://hackernews.cc/archives/57800)\n - [ ] [MassJacker 恶意软件利用 77.8 万个钱包窃取加密货币](https://hackernews.cc/archives/57798)\n - [ ] [苹果紧急修复“高度复杂”攻击中利用的 WebKit 零日漏洞](https://hackernews.cc/archives/57796)\n - [ ] [CISA 将五个正在被利用的 Advantive VeraCore 漏洞添加到 KEV 列表中](https://hackernews.cc/archives/57794)\n - [ ] [摩莎发布修复PT交换机关键认证绕过漏洞的补丁](https://hackernews.cc/archives/57792)\n - [ ] [SideWinder APT 组织针对亚洲、中东和非洲的海事、核能和 IT 部门发起攻击](https://hackernews.cc/archives/57790)\n - [ ] [Ballista 僵尸网络利用未修复的 TP-Link 漏洞，感染超过 6000 台设备](https://hackernews.cc/archives/57788)\n- FreeBuf网络安全行业门户\n - [ ] [多视角解码大模型安全：以 AI 制衡 AI，突破安全困局](https://www.freebuf.com/fevents/424379.html)\n - [ ] [AI会取代渗透测试工程师吗？](https://www.freebuf.com/articles/neopoints/424414.html)\n - [ ] [FreeBuf早报 | 微软与VMware零日漏洞紧急修复指南；未修复的TP-Link漏洞感染超6000台设备](https://www.freebuf.com/news/424346.html)\n - [ ] [API攻击威胁加剧：2025年如何确保API安全](https://www.freebuf.com/articles/web/424399.html)\n - [ ] [攻击者开始利用MFA漏洞在内的高级手段绕过多因素身份验证](https://www.freebuf.com/articles/web/424386.html)\n- Webroot Blog\n - [ ] [World Backup Day: Pledge to protect your digital life](https://www.webroot.com/blog/2025/03/12/world-backup-day-pledge-to-protect-your-digital-life/)\n- Dhole Moments\n - [ ] [On The Insecurity of Telecom Stacks in the Wake of Salt Typhoon](https://soatok.blog/2025/03/12/on-the-insecurity-of-telecom-stacks-in-the-wake-of-salt-typhoon/)\n- 吾爱破解论坛\n - [ ] [十七周年开放注册微信抽奖活动，再送40个账号注册码或300论坛币，下午两点开奖，详见：【开放注册公告】吾爱破解论坛2025年3月13日十七周年开放注册公告。](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141921&idx=1&sn=d924a1e589890ba4bb6cfe382ac8366a&chksm=bd50a7758a272e634c75890df442aedbf0bf467bc67f4c43b4eab1904df5e4b13b5a28679bec&scene=58&subscene=0#rd)\n- 奇安信 CERT\n - [ ] [微软3月补丁日多个产品安全漏洞风险通告：6个在野利用、6个紧急漏洞](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503142&idx=1&sn=f4f47cabc55a311159daa2ca4cca64e4&chksm=fe79e9bec90e60a85e97f731b274b26c3cc17015ef8c1a979957b1c82c53ac998a1e16658bbb&scene=58&subscene=0#rd)\n- 威努特安全网络\n - [ ] [构建主机防护坚固屏障：威努特勒索病毒处置方案实战分享](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131601&idx=1&sn=9bbb439ec74e05f7ab82138886c2972d&chksm=80e71461b7909d7739009c640d0de3b357025ae8027ab954af0f269826f58bb97ac8591cd8ed&scene=58&subscene=0#rd)\n- 代码卫士\n - [ ] [苹果紧急修复已遭利用的0day漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522462&idx=1&sn=c051df72b6c28d0692307dd16d721ac3&chksm=ea94a9f4dde320e2d70d9b7a80e5498b123869d81567fe01975c9045575a19dd18d413f1a724&scene=58&subscene=0#rd)\n - [ ] [微软三月补丁星期二值得关注的漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522462&idx=2&sn=f4fd6b2b3208ba9bf9c03f0a964fe0e5&chksm=ea94a9f4dde320e2794628bba1a96ea5a4fbdcaf3687cbaf3007508db92db3e077e36f2cfa87&scene=58&subscene=0#rd)\n- 安全分析与研究\n - [ ] [BumbleBee加载器木马样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491005&idx=1&sn=f6d79e2f106d664e0c27bb76ea8a559a&chksm=902fb295a7583b838a52bad758d4914eab3938cdddc735b033c702eb8daceed04ff099a700bf&scene=58&subscene=0#rd)\n- 奇客Solidot–传递最新科技情报\n - [ ] [长时间玩游戏对幸福感影响不大](https://www.solidot.org/story?sid=80775)\n - [ ] [微软用 Windows App 替代 Remote Desktop app](https://www.solidot.org/story?sid=80774)\n - [ ] [至少 1.1 % 的中世纪手稿是修女抄写的](https://www.solidot.org/story?sid=80773)\n - [ ] [Spotify 在 2024 年支付了 100 亿美元版税](https://www.solidot.org/story?sid=80772)\n - [ ] [Meta 开始测试其自研 AI 训练芯片](https://www.solidot.org/story?sid=80771)\n - [ ] [空气污染与生物衰老正相关，而绿地负相关](https://www.solidot.org/story?sid=80770)\n - [ ] [台积电提议与 AMD 等接管英特尔芯片制造业务](https://www.solidot.org/story?sid=80769)\n - [ ] [全球只有 7 个国家的 PM2.5 水平达到 WHO 的标准](https://www.solidot.org/story?sid=80768)\n - [ ] [TP-Link 高危漏洞被僵尸网络感染传播恶意程序](https://www.solidot.org/story?sid=80767)\n - [ ] [西班牙将对不标记 AI 生成内容的公司处以巨额罚款](https://www.solidot.org/story?sid=80766)\n - [ ] [Firefox 一根证书将于 2025 年 3 月 14 日过期](https://www.solidot.org/story?sid=80765)\n- VAADATA – Ethical Hacking Services\n - [ ] [How WebSockets Work? Vulnerabilities and Security Best Practices](https://www.vaadata.com/blog/how-websockets-work-vulnerabilities-and-security-best-practices/)\n- dotNet安全矩阵\n - [ ] [.NET 基于会话劫持的权限切换：通过 Sharp4SessionExec 实现在不同用户会话中执行命令](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499108&idx=1&sn=c042d132d9a3f67c2eeb4b0d39418a3d&chksm=fa595389cd2eda9f5f92ca11d32d29f22e661c15034287a4e33d073aeeb4fdecde51882d1552&scene=58&subscene=0#rd)\n - [ ] [.NET内网实战：通过扩展名劫持和屏保劫持技术实现注册表权限维持](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499108&idx=2&sn=94b985267550edca504cd50411270a26&chksm=fa595389cd2eda9f16c24a82a9495d7e164df151523c796c7315da5b966eaf0c660768ab4f53&scene=58&subscene=0#rd)\n - [ ] [通过 Sharp4FUAC 绕过 UAC 实现本地权限提升](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499108&idx=3&sn=77dac7daf099cc2263ef51f603f3f10a&chksm=fa595389cd2eda9f88396f6c510f2da13174048417f5ddb1af6f71bf0b8f1ffa49e13a8452de&scene=58&subscene=0#rd)\n- 酒仙桥六号部队\n - [ ] [利用微软工具击败windows自带的防御系统](https://mp.weixin.qq.com/s?__biz=MzAwMzYxNzc1OA==&mid=2247502047&idx=1&sn=c1a04bfdf83d879003fd53f059ee2690&chksm=9b3aee6eac4d67785ccccf19cb4c0119f88ea01f7880fc91d643f61afa0b63d3f6569c82aa16&scene=58&subscene=0#rd)\n- 腾讯科恩实验室\n - [ ] [BinaryAI函数语义匹配大模型API日调用量破亿：前沿技术与业务适配的实战验证](https://mp.weixin.qq.com/s?__biz=MzU1MjgwNzc4Ng==&mid=2247512894&idx=1&sn=553b7a6a2c627e3d3ae94fa20318e6cd&chksm=fbfe8f3bcc89062d6d85c3cb6268bbc4d9a43df8fe42f25aac3535f4f53ba856847bc5d8976d&scene=58&subscene=0#rd)\n- 安全内参\n - [ ] [谷歌2024年发放了8500万元漏洞赏金，单个漏洞最高奖励72万元](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513939&idx=1&sn=174ed08d5a6c7985103d8537cbcc9346&chksm=ebfaf073dc8d79659e21b1bf00aa5bcf21b6868436740aab2bffdf7adebc9c7c03cb0d3df7dc&scene=58&subscene=0#rd)\n - [ ] [新疆一企业主机多次感染“僵木蠕”病毒被约谈整改](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513939&idx=2&sn=06840c54211b97964a1f022928009870&chksm=ebfaf073dc8d796555d4e956faafddbb3b17f4d3524c4983220b95b954aaa88d8e11645c7830&scene=58&subscene=0#rd)\n- 绿盟科技CERT\n - [ ] [【安全更新】微软3月安全更新多个产品高危漏洞通告](https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489050&idx=1&sn=b8a3c83bd1226e6846cf900b6521eb3e&chksm=c2c64111f5b1c8073c8272d5a6a272095297af0cd68edb9cd84c6b972f9c1960d0d457e44ef5&scene=58&subscene=0#rd)\n- 安全客\n - [ ] [浅析新型网络犯罪DeepSeek AI实战应用](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788155&idx=1&sn=7efc6d1ac3416d736815eb5cca191073&chksm=8893be94bfe43782acc1236943deabc5ad4b184fa5413750b782dd2e4870fa4f38a34b9c0091&scene=58&subscene=0#rd)\n- 侠易龙门阵\n - [ ] [见山见海见自己](https://mp.weixin.qq.com/s?__biz=MzIxODYyNjczNA==&mid=2247483907&idx=1&sn=290dc419d57bc9c9f59bca0b952acc34&chksm=97e6edc2a09164d49153e8f976e19dba7644f02e98f185490ea4b54f8ee76dc25acb2566f6e5&scene=58&subscene=0#rd)\n- 360漏洞云\n - [ ] [360漏洞情报月报2025年02期｜全网捕获4000+漏洞，整体威胁水平处于高位](https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502991&idx=1&sn=aa35c8e8e6ad6ef56e7f35c84e5150ba&chksm=cfc56bd0f8b2e2c62f23476a2f394839ae286c8f994de2e8ba0f40cd727167b04167a569c207&scene=58&subscene=0#rd)\n- 安全研究GoSSIP\n - [ ] [G.O.S.S.I.P 阅读推荐 2025-03-12 此 Exclave 非 Enclave](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499908&idx=1&sn=804f71543189801b1f3edd41c5caf5df&chksm=c063ee5df714674b1ffdaff902c41978ddcb41eb854292bbd53237622ec28b75766f1e83a833&scene=58&subscene=0#rd)\n- 慢雾科技\n - [ ] [SwitchyOmega 被曝盗取私钥，如何防范插件被篡改？](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501403&idx=1&sn=96cf05ebef9908a66d09b27b305b72cb&chksm=fddeb8dccaa931cab7b54791c8df8f5f5c7fb9917b1a046769f3d06583a2a82a8a124cfb7624&scene=58&subscene=0#rd)\n- 数世咨询\n - [ ] [谷歌 2024 年漏洞赏金计划，1200 万美元奖励安全研究人员，诚邀白帽黑客找bug](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537996&idx=1&sn=fdcf381e7c40c8ecd8bebbd855c987ba&chksm=c14427f1f633aee7d974cbc8383746ff4c5a2dbc2c24c7a653886d084fdffb58147af6b5d8c7&scene=58&subscene=0#rd)\n- ChaMd5安全团队\n - [ ] [TPCTF2025 writeup by Mini-Venom](https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247512289&idx=1&sn=3335feefc68146cf1e3763bc0a609005&chksm=e89d9839dfea112f28a34546c4f2aa6de0d6498de4e12054d1169fb4d46d4f5d43f89845e2a3&scene=58&subscene=0#rd)\n- 微步在线\n - [ ] [想偷摸把IPS扔了，领导会发现吗？](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183308&idx=1&sn=6f0a0adad1f2ebc35851d9b59547a96c&chksm=f4486d30c33fe42648d0bfe655b6e68a2f884081b0e084383ff117cc7d6d671c3ac530b4bf02&scene=58&subscene=0#rd)\n- 网络空间安全科学学报\n - [ ] [综述合辑 | 《网络空间安全科学学报》综述论文（上）](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505224&idx=1&sn=67c0601b07787d2dcc7856172b9c4dbe&chksm=e9bfc1f6dec848e0de29e801a3ccf77f9209c6a605496d0e5f8d624bc19dda2b88850ecefee6&scene=58&subscene=0#rd)\n - [ ] [第40次全国计算机安全学术交流会征文通知](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505224&idx=2&sn=f7ca28fcaf803e6d8bc32aaf80862f4f&chksm=e9bfc1f6dec848e022e092cdbd5fc38975ef55c008151affeaa37b0a81dc15a9d29b6d5add2c&scene=58&subscene=0#rd)\n- 安全圈\n - [ ] [【安全圈】美国政府称 2024 年美国人因欺诈损失创纪录 125 亿美元](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068449&idx=1&sn=7aa71495a16a8590c5a5dbaf2a299a09&chksm=f36e7621c419ff37a55f6e4a2f6fe2b939915e853e953c5910425e2de36e9283828150b61edb&scene=58&subscene=0#rd)\n - [ ] [【安全圈】朝鲜 Lazarus 黑客通过 npm 软件包感染数百人](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068449&idx=2&sn=bbe1548572f3323cc8067fa2bc9bdf6b&chksm=f36e7621c419ff373d9c7a473f822763f9acf8da2fea0f87ba95570197bef4a355865d2c5e45&scene=58&subscene=0#rd)\n - [ ] [【安全圈】瑞士关键行业面临新的 24 小时网络攻击报告规则](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068449&idx=3&sn=cbceff6b7d8cacc138082e8b186207c7&chksm=f36e7621c419ff37d6183448d166632cf5aae7c16311657d3c699dcfe92aa16fad794e320a78&scene=58&subscene=0#rd)\n - [ ] [【安全圈】SideWinder APT 利用增强的工具集瞄准海事和核能领域](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068449&idx=4&sn=90a8bf33c53d8d8882985f1e9798ea93&chksm=f36e7621c419ff379fb81b60765a30c5e72df0f4426e948152ea02b8615c04cabaf32fbc5f31&scene=58&subscene=0#rd)\n- 国家互联网应急中心CNCERT\n - [ ] [网络安全信息与动态周报2025年第10期（3月3日-3月9日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499707&idx=1&sn=bfb1dd4a9c6e230f01150906b792357e&chksm=973accd9a04d45cf2aed798aa03416655795775e5152767bbfbc8e4b5d0eae45c43befb7d60e&scene=58&subscene=0#rd)\n- 看雪学苑\n - [ ] [无壳app的libmsaoaidsec.so frida反调试绕过姿势](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590751&idx=1&sn=3a5f5b3c1d41a36914abf745b355f9dc&chksm=b18c2e9586fba783b1bd4f8635ecc2a5b66820a37a7e27896c9e0759525e816863d39f88fd7b&scene=58&subscene=0#rd)\n - [ ] [捷豹路虎数据泄露：黑客“Rey”曝光700份内部文件](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590751&idx=2&sn=7844135d72f9f822231b770e7cd58981&chksm=b18c2e9586fba78333777d3c39f5f751a9988cea1709250a875278be1374db4353c71562ee26&scene=58&subscene=0#rd)\n - [ ] [10人开班，欢迎报名！大模型安全应用开发：高薪赛道快速入局](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590751&idx=3&sn=4ae640da3325cfb415bc7c5f2a8615e5&chksm=b18c2e9586fba78385a9ae902c1f1936dab695b6923b71815db52f09a72ea975bc67a1cb3a24&scene=58&subscene=0#rd)\n- 嘶吼专业版\n - [ ] [来个Offer||腾讯云安全科恩实验室，正在招募中~~](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581481&idx=1&sn=ae6ec15426f50727fe659f7e1386d2b7&chksm=e9146f13de63e60574d42ed888441696c3c2f75c1a1ce4753e48575dca91f6a20c8939ad5a18&scene=58&subscene=0#rd)\n - [ ] [警惕 Apache Camel 漏洞 攻击者借此能注入任意标头](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581481&idx=2&sn=2a2b8413424b32da5743ddb9a2b5d0aa&chksm=e9146f13de63e6057096876ddbef6879d3b48aab956596d0c6457f950bb9fc9ccd55c068b527&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [菲律宾前总统杜特尔特国际刑事法院逮捕事件情报分析报告](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560251&idx=1&sn=2d8902ae837622d230a58ec16337d23c&chksm=871178b0b066f1a6d22d9bc973ff0d3bd7a60c1f40d7ee9c3dc221e25f86296412607e5ba4bf&scene=58&subscene=0#rd)\n - [ ] [巴基斯坦列车劫持事件：安全危机背后的深度剖析](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560251&idx=2&sn=b113812e6173750086e6d8bddc453b3f&chksm=871178b0b066f1a6f78b90967a9943807e25c5909e35edd4bdce625a9d4f710edfe874b611ca&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [Manus 合作阿里千问，意味着什么？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075503&idx=1&sn=cdb9cc040d6bb0a49bae651266babb9e&chksm=7e57c59949204c8fc2a2d0bb33af9372812a5c5947824849105dc47e82cf515f7f39f87c8d85&scene=58&subscene=0#rd)\n - [ ] [完整复盘：Manus 是怎么诞生的？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075464&idx=1&sn=10f65e628e93d3cfc89fe90dc0f56515&chksm=7e57c5be49204ca8cb0876ada832e903cfa21f69825912a0552644b721e681b92fc477adcd6c&scene=58&subscene=0#rd)\n - [ ] [Manus与阿里千问合作，实现全部功能；美总统：抵制特斯拉违法！；OpenAI 发新工具，目标直指 Manus | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075443&idx=1&sn=9ce6a5a50bee75791583e8732dc8d53d&chksm=7e57ca4549204353440439e54f1c2998cb307fae74e4062ef5150cb6a6546843be65a14d0072&scene=58&subscene=0#rd)\n- 天御攻防实验室\n - [ ] [美国CISA红队全部被解雇](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486317&idx=1&sn=62fe68388f58c6e8517031fa5641f429&chksm=fb04c805cc7341138b4256da5fc653da915f850b7594303794a73e5b6383ba65410dd2e2cd05&scene=58&subscene=0#rd)\n- 火绒安全\n - [ ] [2025-03微软漏洞通告](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524536&idx=1&sn=fe1a221c3018811a521d058549750ce5&chksm=eb70be87dc07379174ddbb0b779981b4c3e9b5b51a28f443dedb84b98e3ab3fb6f44063ae962&scene=58&subscene=0#rd)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524536&idx=2&sn=27709d14077e3a3c67f8b97f9f616d59&chksm=eb70be87dc073791545519016272768a03993655e37cb1de8b080347046bba4255a2a455a2fd&scene=58&subscene=0#rd)\n- 全频带阻塞干扰\n - [ ] [2025纳新计划 | 上海 • RC2实习生招募](https://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648958553&idx=1&sn=3c57bd0632107ae4c5e8674a4aec63a6&chksm=f09ef126c7e97830d20bb9b2e2eaece5553ddfc2608f0b5b2c7c77e5a137aebb59c25690bb12&scene=58&subscene=0#rd)\n- 字节跳动安全中心\n - [ ] [双倍积分 | 生活服务漏洞+爬虫双专测开启](https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494528&idx=1&sn=7f8e933d26286579c5b9dc60986b3aa0&chksm=fa9d10d6cdea99c024e39078c2ebc8819c119162458dc9295006e366faef9a056c2df2415957&scene=58&subscene=0#rd)\n- 深信服千里目安全技术中心\n - [ ] [微软补丁日安全通告 | 3月份](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524066&idx=1&sn=8b94c05d7e4411ea13760fac6855a1b8&chksm=ce4615f2f9319ce4f90b4020ae60337afe34a4b5c5d85ee1f91970d7d58dc42cb89c3a833165&scene=58&subscene=0#rd)\n - [ ] [【漏洞通告】Fortinet多产品前台远程代码执行漏洞(CVE-2024-45324)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524066&idx=2&sn=93a40ee8c5d3b9832561ea2de0fe1861&chksm=ce4615f2f9319ce4ef9e0e219fde02b0290a2fbe48140af183e5ab091de704323c946d09126d&scene=58&subscene=0#rd)\n - [ ] [网络安全信息与动态周报2025年第10期（3月3日-3月9日）](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524066&idx=3&sn=a4fd06dad9ee8a45aca7441be0f835be&chksm=ce4615f2f9319ce4565492c123ad6a76de255b68e80f8ec15773bb425f85bd0778d7f14827ed&scene=58&subscene=0#rd)\n- Securityinfo.it\n - [ ] [Apple risolve un bug 0-day di WebKit già sfruttato](https://www.securityinfo.it/2025/03/12/apple-risolve-un-bug-0-day-di-webkit-gia-sfruttato/?utm_source=rss&utm_medium=rss&utm_campaign=apple-risolve-un-bug-0-day-di-webkit-gia-sfruttato)\n - [ ] [Kaspersky avverte: email aziendali usate per account personali, il 7% finisce sul dark web](https://www.securityinfo.it/2025/03/12/kaspersky-email-aziendali-account-personali-dark-web/?utm_source=rss&utm_medium=rss&utm_campaign=kaspersky-email-aziendali-account-personali-dark-web)\n- Beacon Tower Lab\n - [ ] [漏洞预警 | Apache Tomcat 存在远程代码执行漏洞（CVE-2025-24813）](https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487041&idx=1&sn=fb038aa4f1e439a4799309bf67f1c0e1&chksm=c22296b8f5551fae1f5f314d9269a1f3f9b456602fed225a076affb51fcfbe52d3f221a79e3a&scene=58&subscene=0#rd)\n- 360数字安全\n - [ ] [360携手首都在线 拟推动DeepSeek一体机安全与服务落地合作](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579865&idx=1&sn=408ecb508f8427cce2626e192845eab3&chksm=9f8d28d1a8faa1c71df0a4ec8f66c25d88dbc42d9cb678fb5ed35bbf97f6d46e1ae8dd3ce1cc&scene=58&subscene=0#rd)\n- NetSPI\n - [ ] [NetSPI Wins First Place at SHARE Mainframe Capture the Flag Event](https://www.netspi.com/blog/executive-blog/mainframe-penetration-testing/netspi-wins-first-place-at-share-mainframe-capture-the-flag-event/)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #774: Forensic Lunch Test Kitchen 3/11/25](https://www.hecfblog.com/2025/03/daily-blog-774-forensic-lunch-test.html)\n- Max Kersten\n - [ ] [My impression of RE//VERSE 2025](https://maxkersten.nl/2025/03/12/my-impression-of-re-verse-2025/)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Scans for VMWare Hybrid Cloud Extension (HCX) API (Log4j - not brute forcing), (Wed, Mar 12th)](https://isc.sans.edu/diary/rss/31762)\n - [ ] [ISC Stormcast For Wednesday, March 12th, 2025 https://isc.sans.edu/podcastdetail/9360, (Wed, Mar 12th)](https://isc.sans.edu/diary/rss/31760)\n- Over Security - Cybersecurity news aggregator\n - [ ] [China continues cyberattacks on routers, this time targeting Juniper Networks devices](https://therecord.media/china-continues-attacks-routers-juniper)\n - [ ] [Facebook discloses FreeType 2 flaw exploited in attacks](https://www.bleepingcomputer.com/news/security/facebook-discloses-freetype-2-flaw-exploited-in-attacks/)\n - [ ] [CISA: More than 300 critical infrastructure orgs attacked by Medusa ransomware](https://therecord.media/medusa-ransomware-targeting-critical-infrastructure-orgs)\n - [ ] [The people in Elon Musk’s DOGE universe](https://techcrunch.com/2025/03/12/the-people-in-elon-musk-doge-universe/)\n - [ ] [CISA: Medusa ransomware hit over 300 critical infrastructure orgs](https://www.bleepingcomputer.com/news/security/cisa-medusa-ransomware-hit-over-300-critical-infrastructure-orgs/)\n - [ ] [Volt Typhoon hackers were in Massachusetts utility’s systems for 10 months](https://therecord.media/volt-typhoon-hackers-utility-months)\n - [ ] [New North Korean Android spyware slips onto Google Play](https://www.bleepingcomputer.com/news/security/new-north-korean-android-spyware-slips-onto-google-play/)\n - [ ] [Garantex crypto exchange admin arrested while on vacation](https://www.bleepingcomputer.com/news/security/garantex-crypto-exchange-admin-arrested-while-on-vacation/)\n - [ ] [CISA cuts $10 million annually from ISAC funding for states amid wider cyber cuts](https://therecord.media/cisa-cuts-10-million-isac-funding)\n - [ ] [Garantex administrator arrested in India under extradition law](https://techcrunch.com/2025/03/12/garantex-administrator-arrested-in-india-under-extradition-law/)\n - [ ] [Europe urged to seize ‘opportunity’ by replacing US funding for Ukraine cyber defense](https://therecord.media/europe-opportunity-tallinn-funding-replace)\n - [ ] [Zero day in WebKit sfruttata in attacchi sofisticati: la patch Apple è urgente](https://www.cybersecurity360.it/news/zero-day-in-webkit-sfruttata-in-attacchi-sofisticati-la-patch-apple-e-urgente/)\n - [ ] [Spyware in bogus Android apps is attributed to North Korean group](https://therecord.media/north-korea-malware-android-apps-kospy-apt37-scarcruft)\n - [ ] [CISA Adds Five New Vulnerabilities to Its Known Exploited Vulnerabilities Catalog](https://cyble.com/blog/cisa-adds-5-flaws-to-kev-catalog/)\n - [ ] [Mozilla warns users to update Firefox before certificate expires](https://www.bleepingcomputer.com/news/software/mozilla-warns-users-to-update-firefox-before-certificate-expires/)\n - [ ] [Signal no longer cooperating with Ukraine on Russian cyber threats, official says](https://therecord.media/signal-no-longer-cooperating-with-ukraine)\n - [ ] [Chinese cyberspies backdoor Juniper routers for stealthy access](https://www.bleepingcomputer.com/news/security/chinese-cyberspies-backdoor-juniper-routers-for-stealthy-access/)\n - [ ] [Browser-Based Data Leaks: 3 Biggest Data Security Challenges Today](https://www.bleepingcomputer.com/news/security/browser-based-data-leaks-3-biggest-data-security-challenges-today/)\n - [ ] [Microsoft patches Windows Kernel zero-day exploited since 2023](https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-windows-kernel-zero-day-exploited-since-2023/)\n - [ ] [Apple risolve un bug 0-day di WebKit già sfruttato](https://www.securityinfo.it/2025/03/12/apple-risolve-un-bug-0-day-di-webkit-gia-sfruttato/)\n - [ ] [AI Safety: Key Threats and Solutions](https://any.run/cybersecurity-blog/ai-risks-and-threats/)\n - [ ] [Nuova truffa con SMS e telefonate false a tema UniCredit: come proteggersi](https://www.cybersecurity360.it/news/nuova-truffa-con-sms-e-telefonate-false-a-tema-unicredit-come-proteggersi/)\n - [ ] [NCSC Reports Surge in Cyber Security Incidents with Financial Losses in Q4 2024](https://cyble.com/blog/ncsc-reports-6-8m-losses-in-q4-2024/)\n - [ ] [Microsoft: Recent Windows updates make USB printers print random text](https://www.bleepingcomputer.com/news/microsoft/microsoft-usb-printers-print-random-text-after-recent-windows-updates/)\n - [ ] [North Korean government hackers snuck spyware on Android app store](https://techcrunch.com/2025/03/12/north-korean-government-hackers-snuck-spyware-on-android-app-store/)\n - [ ] [La corsa al nucleare di ChatGPT e gli altri](https://www.guerredirete.it/la-corsa-al-nucleare-di-chatgpt-e-gli-altri/)\n - [ ] [Aggiornamenti Microsoft marzo 2025, corrette 7 vulnerabilità zero-day: update urgente](https://www.cybersecurity360.it/news/aggiornamenti-microsoft-marzo-2025-corrette-7-vulnerabilita-zero-day-update-urgente/)\n - [ ] [Kaspersky avverte: e-mail aziendali usate per account personali, il 7% finisce sul dark web](https://www.securityinfo.it/2025/03/12/kaspersky-email-aziendali-account-personali-dark-web/)\n - [ ] [Incident response analyst report 2024](https://securelist.com/kaspersky-incident-response-report-2024/115873/)\n - [ ] [Microsoft: 6 Zero-Days in March 2025 Patch Tuesday](https://krebsonsecurity.com/2025/03/microsoft-6-zero-days-in-march-2025-patch-tuesday/)\n- Schneier on Security\n - [ ] [China, Russia, Iran, and North Korea Intelligence Sharing](https://www.schneier.com/blog/archives/2025/03/china-russia-iran-and-north-korea-intelligence-sharing.html)\n- Posts By SpecterOps Team Members - Medium\n - [ ] [Getting Started with BHE — Part 1](https://posts.specterops.io/getting-started-with-bhe-part-1-f33c20c6f6f2?source=rss----f05f8696e3cc---4)\n- 迪哥讲事\n - [ ] [web端爬虫逆向](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497265&idx=1&sn=7d9f575c8f52cd4260c96da2296ea029&chksm=e8a5fc52dfd275448ee9769b8c0c11c39b75dad6e7cc65004539b1e11827c267188dadabcdab&scene=58&subscene=0#rd)\n- ICT Security Magazine\n - [ ] [Analista OSINT: Ruolo, Approcci e sfide nella Cybersecurity](https://www.ictsecuritymagazine.com/articoli/analista-osint-ruolo/)\n- The Hacker News\n - [ ] [Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and Rootkits](https://thehackernews.com/2025/03/chinese-hackers-breach-juniper-networks.html)\n - [ ] [Over 400 IPs Exploiting Multiple SSRF Vulnerabilities in Coordinated Cyber Attack](https://thehackernews.com/2025/03/over-400-ips-exploiting-multiple-ssrf.html)\n - [ ] [Pentesters: Is AI Coming for Your Role?](https://thehackernews.com/2025/03/pentesters-is-ai-coming-for-your-role.html)\n - [ ] [URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-Days](https://thehackernews.com/2025/03/urgent-microsoft-patches-57-security.html)\n - [ ] [Apple Releases Patch for WebKit Zero-Day Vulnerability Exploited in Targeted Attacks](https://thehackernews.com/2025/03/apple-releases-patch-for-webkit-zero.html)\n- Deep Web\n - [ ] [Is it normal for Tor links to disappear?](https://www.reddit.com/r/deepweb/comments/1j97e50/is_it_normal_for_tor_links_to_disappear/)\n- Blackhat Library: Hacking techniques and research\n - [ ] [CyberSec Tools by category....](https://www.reddit.com/r/blackhat/comments/1j9tz6t/cybersec_tools_by_category/)\n- Technical Information Security Content & Discussion\n - [ ] [New Lumma Stealer campaign abuses Reddit threads to drop malware via fake WeTransfer links](https://www.reddit.com/r/netsec/comments/1j9xq07/new_lumma_stealer_campaign_abuses_reddit_threads/)\n - [ ] [Pre-authentication SQL injection to RCE in GLPI (CVE-2025-24799/CVE-2025-24801)](https://www.reddit.com/r/netsec/comments/1j9hcdw/preauthentication_sql_injection_to_rce_in_glpi/)\n - [ ] [Impossible XXE in PHP](https://www.reddit.com/r/netsec/comments/1j9f0i7/impossible_xxe_in_php/)\n - [ ] [Ruthless Mantis - Modus Operandi](https://www.reddit.com/r/netsec/comments/1j9v0dh/ruthless_mantis_modus_operandi/)\n - [ ] [Analysis of CVE-2025-24813 Apache Tomcat Path Equivalence RCE](https://www.reddit.com/r/netsec/comments/1j9f0ur/analysis_of_cve202524813_apache_tomcat_path/)\n- Your Open Hacker Community\n - [ ] [How do botnets make money?](https://www.reddit.com/r/HowToHack/comments/1j9nj7l/how_do_botnets_make_money/)\n - [ ] [unable to solve problems](https://www.reddit.com/r/HowToHack/comments/1j9rl5j/unable_to_solve_problems/)\n - [ ] [I need help with kali linux rootless](https://www.reddit.com/r/HowToHack/comments/1j9onay/i_need_help_with_kali_linux_rootless/)\n - [ ] [Is it possible to evade antivirus with common tools?](https://www.reddit.com/r/HowToHack/comments/1j9nzws/is_it_possible_to_evade_antivirus_with_common/)\n - [ ] [How to use the Termux in Mobile ?](https://www.reddit.com/r/HowToHack/comments/1j9e4po/how_to_use_the_termux_in_mobile/)\n - [ ] [How would one by pass bios passwords?](https://www.reddit.com/r/HowToHack/comments/1j97kpr/how_would_one_by_pass_bios_passwords/)\n - [ ] [broken iphone screen](https://www.reddit.com/r/HowToHack/comments/1j99d1n/broken_iphone_screen/)\n - [ ] [Anyone have any experience with bypassing ASLR, DEP, CFG and random XOR canary?](https://www.reddit.com/r/HowToHack/comments/1j98sa8/anyone_have_any_experience_with_bypassing_aslr/)\n - [ ] [My FB account hacked, but how that's possible](https://www.reddit.com/r/HowToHack/comments/1j9d23l/my_fb_account_hacked_but_how_thats_possible/)\n - [ ] [Need help with a doxxer](https://www.reddit.com/r/HowToHack/comments/1j992zc/need_help_with_a_doxxer/)\n- Deeplinks\n - [ ] [In Memoriam: Mark Klein, AT&T Whistleblower Who Revealed NSA Mass Spying](https://www.eff.org/deeplinks/2025/03/memoriam-mark-klein-att-whistleblower-about-nsa-mass-spying)\n - [ ] [EFF Stands with Perkins Coie and the Rule of Law](https://www.eff.org/deeplinks/2025/03/eff-stands-perkins-coie-and-rule-law)\n - [ ] [Anchorage Police Department: AI-Generated Police Reports Don’t Save Time](https://www.eff.org/deeplinks/2025/03/anchorage-police-department-ai-generated-police-reports-dont-save-time)\n- Computer Forensics\n - [ ] [Is it possible to install LiME on the current Sift Workstation Image?](https://www.reddit.com/r/computerforensics/comments/1j9m9by/is_it_possible_to_install_lime_on_the_current/)\n - [ ] [Mac RDP question](https://www.reddit.com/r/computerforensics/comments/1j9gfof/mac_rdp_question/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [If you have experience with cyber ranges, i would be grateful if you took a few minutes to fill out my survey for my thesis on the topic!](https://www.reddit.com/r/netsecstudents/comments/1j9qnkk/if_you_have_experience_with_cyber_ranges_i_would/)\n- TG Soft Software House - News\n - [ ] [Vir.IT eXplorer PRO supera, ottenendo il massimo risultato, l'ultimo test effettuato a Gennaio 2025 da AppEsteem per i prodotti AV DeceptorFighters](http://www.tgsoft.it/italy/news_archivio.asp?id=1617)\n- Security Affairs\n - [ ] [China-linked APT UNC3886 targets EoL Juniper routers](https://securityaffairs.com/175308/apt/china-linked-apt-unc3886-targets-eol-juniper-routers.html)\n - [ ] [U.S. CISA adds six Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/175298/hacking/u-s-cisa-adds-six-microsoft-windows-flaws-to-its-known-exploited-vulnerabilities-catalog.html)\n - [ ] [Microsoft Patch Tuesday security updates for March 2025 fix six actively exploited zero-days](https://securityaffairs.com/175289/hacking/microsoft-patch-tuesday-security-updates-for-march-2025.html)\n - [ ] [New Ballista Botnet spreads using TP-Link flaw. Is it an Italian job?](https://securityaffairs.com/175278/malware/ballista-botnet-exploits-unpatched-tp-link-flaw.html)\n- Graham Cluley\n - [ ] [Man found guilty of planting infinite loop logic bomb on ex-employer’s system](https://www.bitdefender.com/en-us/blog/hotforsecurity/man-found-guilty-of-planting-infinite-loop-logic-bomb-on-ex-employers-system)\n- Information Security\n - [ ] [Is Anyone Else Worried About the Security of AI-Powered SOCs?](https://www.reddit.com/r/Information_Security/comments/1j9k4my/is_anyone_else_worried_about_the_security_of/)\n- Tor Project blog\n - [ ] [It takes a (Global) Village to Fight Censorship](https://blog.torproject.org/fighting-censorship-with-webtunnel/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [The Counterfeit Problem: How Blockchain Is Revolutionizing Brand Protection - Noam Krasniansky - BSW #386](http://sites.libsyn.com/18678/the-counterfeit-problem-how-blockchain-is-revolutionizing-brand-protection-noam-krasniansky-bsw-386)\n"}}, "archive/daily/2025/2025-02-12.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747311.1722207, "n": 41061, "h": "77d43c9a44182b55", "c": "# 每日安全资讯（2025-02-12）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-02-11 Review](http://www.sec-wiki.com/?2025-02-11)\n- 奇安信攻防社区\n - [ ] [浅谈Flask内存马中的攻与防](https://forum.butian.net/share/4113)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [360发布高级威胁研究报告：我国新能源汽车领域面临APT威胁加剧](https://www.4hou.com/posts/333p)\n - [ ] [360发布全球高级威胁研究报告：我国14大重点行业面临境外APT威胁](https://www.4hou.com/posts/2XXA)\n - [ ] [「深蓝洞察」2024年度最具含“金”量的绕过](https://www.4hou.com/posts/1MMq)\n - [ ] [新型 Aquabotv3 勒索软件利用 Mitel 命令注入漏洞发起攻击](https://www.4hou.com/posts/MXX1)\n - [ ] [实力加冕！盛邦安全上榜《嘶吼2024中国网络安全产业势能榜》](https://www.4hou.com/posts/0M33)\n - [ ] [盛邦安全亮相LEAP 2025中东国际先进科技展](https://www.4hou.com/posts/YZZY)\n - [ ] [API治理方案护航某头部高校](https://www.4hou.com/posts/qopy)\n - [ ] [嘶吼安全产业研究院 | 2025网络安全产业图谱调研启动](https://www.4hou.com/posts/QXX5)\n- Trustwave Blog\n - [ ] [Cyber and Physical Security Considerations for Returning to the Office](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/cyber-and-physical-security-considerations-for-returning-to-the-office/)\n- Recent Commits to cve:main\n - [ ] [Update Tue Feb 11 20:25:39 UTC 2025](https://github.com/trickest/cve/commit/46049aaf0af488473dd4bc88513de53706f70360)\n - [ ] [Update Tue Feb 11 12:30:04 UTC 2025](https://github.com/trickest/cve/commit/231b23cedc9423176ef698a0c88f188bfdafe294)\n - [ ] [Update Tue Feb 11 04:09:27 UTC 2025](https://github.com/trickest/cve/commit/eb3d0d11fb9ac7bcd84a6574d1849a82641c52db)\n- 安全客-有思想的安全新媒体\n - [ ] [全年披露40000+漏洞，《2024年度网络安全漏洞分析报告》解码漏洞风险](https://www.anquanke.com/post/id/304112)\n - [ ] [黑客利用Google Tag Manager在Magento商店上部署信用卡Skimmers](https://www.anquanke.com/post/id/304109)\n - [ ] [涉嫌伪造SEC帖子背后的黑客可能会在认罪协议中没收5万美元](https://www.anquanke.com/post/id/304105)\n - [ ] [网络攻击扰乱了Lee报纸在美国各地的运营](https://www.anquanke.com/post/id/304102)\n - [ ] [警方逮捕4名Phobos勒索软件嫌疑人，查获8个基地](https://www.anquanke.com/post/id/304099)\n - [ ] [8Base勒索软件暗网站被查获，四名运营商被捕](https://www.anquanke.com/post/id/304096)\n - [ ] [2024年澳大利亚人每秒遭受一起网络攻击](https://www.anquanke.com/post/id/304093)\n - [ ] [黑客承认对美国SEC X账户进行SIM交换攻击](https://www.anquanke.com/post/id/304090)\n - [ ] [苹果修复了“极其复杂”攻击中的零日漏洞](https://www.anquanke.com/post/id/304084)\n - [ ] [医疗数据遭窃：Embargo 团伙与多起黑客事件揭秘](https://www.anquanke.com/post/id/304080)\n- Tenable Blog\n - [ ] [Microsoft’s February 2025 Patch Tuesday Addresses 55 CVEs (CVE-2025-21418, CVE-2025-21391)](https://www.tenable.com/blog/microsofts-february-2025-patch-tuesday-addresses-55-cves-cve-2025-21418-cve-2025-21391)\n- InfoSec Write-ups - Medium\n - [ ] [Selecting A Program for Bug Bounty on HackerOne](https://infosecwriteups.com/selecting-a-program-for-bug-bounty-on-hackerone-e51ce8a83b2a?source=rss----7b722bfd1b8d---4)\n - [ ] [Mastering Amass: The Ultimate Recon Toolkit](https://infosecwriteups.com/mastering-amass-the-ultimate-recon-toolkit-d66a56627849?source=rss----7b722bfd1b8d---4)\n - [ ] [Finding subdomains that are hidden in the cloud.](https://infosecwriteups.com/finding-subdomains-that-are-hidden-in-the-cloud-ec54412802bf?source=rss----7b722bfd1b8d---4)\n - [ ] [Stored XSS into Onclick Event: Bypassing Angle Brackets, Double Quotes, and Escaped Characters —…](https://infosecwriteups.com/stored-xss-into-onclick-event-bypassing-angle-brackets-double-quotes-and-escaped-characters-ee347b9e19d9?source=rss----7b722bfd1b8d---4)\n - [ ] [Creating a Code Obfuscation Program For C](https://infosecwriteups.com/creating-a-code-obfuscation-program-for-c-d10d604178d4?source=rss----7b722bfd1b8d---4)\n - [ ] [How to Uncover Hidden Attack Surfaces? Recon part 6](https://infosecwriteups.com/how-to-uncover-hidden-attack-surfaces-recon-part-6-61e43976ed22?source=rss----7b722bfd1b8d---4)\n - [ ] [Bug Bounty Target Selection: How Hackers Find the Most Profitable & Juicy Bugs Before Anyone Else!](https://infosecwriteups.com/bug-bounty-target-selection-how-hackers-find-the-most-profitable-juicy-bugs-before-anyone-else-061510e83698?source=rss----7b722bfd1b8d---4)\n - [ ] [Mastering Nmap: The Full Toolkit](https://infosecwriteups.com/mastering-nmap-the-full-toolkit-8231c918e144?source=rss----7b722bfd1b8d---4)\n - [ ] [SOC335 — CVE-2024-49138 Exploitation Detected](https://infosecwriteups.com/soc335-cve-2024-49138-exploitation-detected-d039190f202a?source=rss----7b722bfd1b8d---4)\n - [ ] [CSRF in Instagram](https://infosecwriteups.com/csrf-in-instagram-461cbba286a?source=rss----7b722bfd1b8d---4)\n- Security Boulevard\n - [ ] [Authorities Seize 8Base Ransomware Infrastructure, Arrest Four Russians](https://securityboulevard.com/2025/02/authorities-seize-8base-ransomware-infrastructure-arrest-four-russians/)\n - [ ] [The Current State of the CISO with Nick Kakolowski](https://securityboulevard.com/2025/02/the-current-state-of-the-ciso-with-nick-kakolowski/)\n - [ ] [Enhancing IAM Security with AI Agents: A Strategic Approach by SecureFLO](https://securityboulevard.com/2025/02/enhancing-iam-security-with-ai-agents-a-strategic-approach-by-secureflo/)\n - [ ] [Adam Khan on the Unique Security Challenges in Education IT](https://securityboulevard.com/2025/02/adam-khan-on-the-unique-security-challenges-in-education-it/)\n - [ ] [Microsoft’s February 2025 Patch Tuesday Addresses 55 CVEs (CVE-2025-21418, CVE-2025-21391)](https://securityboulevard.com/2025/02/microsofts-february-2025-patch-tuesday-addresses-55-cves-cve-2025-21418-cve-2025-21391/)\n - [ ] [Comic Agilé – Luxshan Ratnaravi, Mikkel Noe-Nygaard – #325 – Fixing the Bug](https://securityboulevard.com/2025/02/comic-agile-luxshan-ratnaravi-mikkel-noe-nygaard-325-fixing-the-bug/)\n - [ ] [The Field Engineer’s Handbook: Configuring an Arista Networks Switch with Splunk](https://securityboulevard.com/2025/02/the-field-engineers-handbook-configuring-an-arista-networks-switch-with-splunk/)\n - [ ] [Navigating Firewall Security Policy Challenges in Technology Organizations: How FireMon Simplifies Complexity](https://securityboulevard.com/2025/02/navigating-firewall-security-policy-challenges-in-technology-organizations-how-firemon-simplifies-complexity-2/)\n - [ ] [Networks hosting botnet C&Cs: Same players, same problems](https://securityboulevard.com/2025/02/networks-hosting-botnet-ccs-same-players-same-problems/)\n - [ ] [News alert: Gcore Radar reveals 56% rise in DDoS attacks – gaming industry targeted the most](https://securityboulevard.com/2025/02/news-alert-gcore-radar-reveals-56-rise-in-ddos-attacks-gaming-industry-targeted-the-most/)\n- GuidePoint Security\n - [ ] [Proposed Changes from the HHS to HIPAA Security Rule](https://www.guidepointsecurity.com/blog/proposed-changes-from-the-hhs-to-hipaa-security-rule/)\n- hn security\n - [ ] [Fault Injection – Looking for a Unicorn](https://security.humanativaspa.it/fault-injection-looking-for-a-unicorn/)\n- Twitter @bytehx\n - [ ] [Re @adrien_jeanneau @yeswehack @Brumens2 Thank you @Brumens2](https://x.com/bytehx343/status/1889347485241581991)\n - [ ] [RT YesWeHack ⠵: XSS is the most common vulnerability, but do you really know how to exploit it? 🤔 In our latest article, we go through everything ...](https://x.com/bytehx343/status/1889335452777542113)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [Selecting A Program for Bug Bounty on HackerOne](https://infosecwriteups.com/selecting-a-program-for-bug-bounty-on-hackerone-e51ce8a83b2a?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Mastering Amass: The Ultimate Recon Toolkit](https://infosecwriteups.com/mastering-amass-the-ultimate-recon-toolkit-d66a56627849?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Finding subdomains that are hidden in the cloud.](https://infosecwriteups.com/finding-subdomains-that-are-hidden-in-the-cloud-ec54412802bf?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Stored XSS into Onclick Event: Bypassing Angle Brackets, Double Quotes, and Escaped Characters —…](https://infosecwriteups.com/stored-xss-into-onclick-event-bypassing-angle-brackets-double-quotes-and-escaped-characters-ee347b9e19d9?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [How to Uncover Hidden Attack Surfaces? Recon part 6](https://infosecwriteups.com/how-to-uncover-hidden-attack-surfaces-recon-part-6-61e43976ed22?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Bug Bounty Target Selection: How Hackers Find the Most Profitable & Juicy Bugs Before Anyone Else!](https://infosecwriteups.com/bug-bounty-target-selection-how-hackers-find-the-most-profitable-juicy-bugs-before-anyone-else-061510e83698?source=rss----7b722bfd1b8d--bug_bounty)\n- VMRay\n - [ ] [January 2025 Detection Highlights: Entrypoint Injection, Hotlinking, and a Robust New Set of Smart Link Detonation Rules](https://www.vmray.com/january-2025-detection-highlights-entrypoint-injection-hotlinking-and-a-robust-new-set-of-smart-link-detonation-rules/)\n- Didier Stevens\n - [ ] [Update: Python Templates Version 0.0.12](https://blog.didierstevens.com/2025/02/11/update-python-templates-version-0-0-12/)\n- Malwarebytes\n - [ ] [Apple fixes zero-day vulnerability used in “extremely sophisticated attack”](https://www.malwarebytes.com/blog/news/2025/02/apple-fixes-zero-day-vulnerability-used-in-extremely-sophisticated-attack)\n - [ ] [Phishing evolves beyond email to become latest Android app threat](https://www.malwarebytes.com/blog/news/2025/02/phishing-evolves-beyond-email-to-become-latest-android-app-threat)\n - [ ] [Apple ordered to grant access to users’ encrypted data](https://www.malwarebytes.com/blog/news/2025/02/apple-ordered-to-grant-access-to-users-encrypted-data)\n- Malware-Traffic-Analysis.net - Blog Entries\n - [ ] [2025-02-10: StrelaStealer infection](https://www.malware-traffic-analysis.net/2025/02/10/index.html)\n- Reverse Engineering\n - [ ] [Fault Injection – Looking for a Unicorn](https://www.reddit.com/r/ReverseEngineering/comments/1imtwu0/fault_injection_looking_for_a_unicorn/)\n- Webroot Blog\n - [ ] [The rising role of cloud-based SIEM in MDR: What MSPs need to know](https://www.webroot.com/blog/2025/02/11/the-rising-role-of-cloud-based-siem-in-mdr-what-msps-need-to-know/)\n- daniel.haxx.se\n - [ ] [disabling cert checks: we have not learned much](https://daniel.haxx.se/blog/2025/02/11/disabling-cert-checks-we-have-not-learned-much/)\n- FreeBuf网络安全行业门户\n - [ ] [xss-labs 靶场详细攻略（附常用payload）](https://www.freebuf.com/articles/web/338123.html)\n - [ ] [中小企业级流量检测实战（第一期）—— Suricata与ELK快速部署](https://www.freebuf.com/articles/network/421334.html)\n - [ ] [【CTF】Flask SSTI姿势与手法总结 Cheatsheet速查表](https://www.freebuf.com/articles/web/421402.html)\n - [ ] [OmniGPT疑似遭入侵：黑客泄露3400万条用户数据](https://www.freebuf.com/news/421517.html)\n - [ ] [苹果紧急修复iOS零日漏洞CVE-2025-24200，已遭黑客利用](https://www.freebuf.com/vuls/421492.html)\n - [ ] [FreeBuf早报 | OpenAI回应账号权限遭出售；黑产团伙专门窃取DeepSeek API密钥](https://www.freebuf.com/news/421453.html)\n - [ ] [DeepSeek遭遇连环攻击，AI 安全何去何从？](https://www.freebuf.com/news/421454.html)\n - [ ] [系统BC远控木马现瞄准Linux，传播勒索软件和信息窃取程序](https://www.freebuf.com/articles/endpoint/421497.html)\n - [ ] [苹果0-Day漏洞被用于“极其复杂”的特性攻击中](https://www.freebuf.com/news/421415.html)\n - [ ] [臭名昭著的8Base勒索软件被查，4名嫌疑人被捕](https://www.freebuf.com/news/421413.html)\n- rtl-sdr.com\n - [ ] [Creating a Software Defined Radio from Tiny Tapeout Chips](https://www.rtl-sdr.com/creating-a-software-defined-radio-from-tiny-tapeout-chips/)\n- HackerNews\n - [ ] [Orthanc 服务器漏洞对美国医疗数据和医疗运营构成风险](https://hackernews.cc/archives/57297)\n - [ ] [美国一男子因攻击美国证券交易委员会 X 账户被捕认罪](https://hackernews.cc/archives/57294)\n - [ ] [苹果修复被用于“极其复杂攻击”的零日漏洞](https://hackernews.cc/archives/57292)\n - [ ] [超过1.2万个 KerioControl 防火墙实例暴露于严重 RCE 漏洞](https://hackernews.cc/archives/57290)\n - [ ] [XE 黑客组织利用 VeraCore 零日漏洞部署持久性 Web 后门](https://hackernews.cc/archives/57287)\n- 绿盟科技技术博客\n - [ ] [当风云卫拥抱DeepSeek发生了哪些（二）：渗透测试多智能体新添深度推理能力](https://blog.nsfocus.net/deepseek2/)\n - [ ] [当风云卫拥抱DeepSeek发生了哪些（一）：DeepSeek-R1安全告警分析实测获三高](https://blog.nsfocus.net/deepseek1/)\n- Shostack & Friends Blog\n - [ ] [Talk at CERIAS](https://shostack.org/blog/risk-talk-cerias/)\n- 威努特安全网络\n - [ ] [威努特超融合底座—助力高速行业数字化蓬勃发展](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131087&idx=1&sn=37c63ce1a27bb99f669473600f34386a&chksm=80e7167fb7909f693a6090946ddde9a4956980cff8ed07a4b4928457f023972b21a02e0e17e6&scene=58&subscene=0#rd)\n - [ ] [5G智慧钢厂丨威努特打造一体化高效稳定融合通信网络](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131054&idx=1&sn=cef2c6a655a23f7de620bf8d206af073&chksm=80e7161eb7909f0841bd994361b7bce96ffa1fc9609b4fd8b6fc9e355fba66ced4252c4451ad&scene=58&subscene=0#rd)\n- 奇客Solidot–传递最新科技情报\n - [ ] [DeepSeek AI 训练成本并不低](https://www.solidot.org/story?sid=80531)\n - [ ] [上海自研 GLP-1 糖尿病新药批准上市](https://www.solidot.org/story?sid=80530)\n - [ ] [微软研究发现 AI 可能会导致人类认知能力退化](https://www.solidot.org/story?sid=80529)\n - [ ] [美国优秀 AI 人才四成来自中国](https://www.solidot.org/story?sid=80528)\n - [ ] [OpenAI 预计数个月内完成自研 AI 芯片的设计](https://www.solidot.org/story?sid=80527)\n - [ ] [对国内大学生的研究发现锻炼有助于减轻网瘾症状](https://www.solidot.org/story?sid=80526)\n - [ ] [科学家发现宇宙最大结构 Quipu](https://www.solidot.org/story?sid=80525)\n - [ ] [感染 COVID-19 可能加速大脑衰老四年](https://www.solidot.org/story?sid=80524)\n - [ ] [地球内核并非完全固态](https://www.solidot.org/story?sid=80523)\n - [ ] [TikTok 鼓励美国 Android 用户通过其官网下载 APK](https://www.solidot.org/story?sid=80522)\n- 安全牛\n - [ ] [美国有史以来最大、最严重的数据泄露事件？马斯克DOGE访问权引发安全担忧；黑客承认入侵SEC的X账户并发布虚假消息 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135067&idx=1&sn=2b5edaeaaa50de622ed435f5b3ad50b8&chksm=bd15ac888a62259eafc567adfb653b57cf110e1baab4ec223fba39075db1f619238835f1a41d&scene=58&subscene=0#rd)\n - [ ] [AI驱动的安全漏洞发现正在重塑网络安全新模式](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135067&idx=2&sn=032f618504363a24b36aa09bcb1de2a2&chksm=bd15ac888a62259e61b14206dac39f8a213fb4031c342f061005fb16700abd7913ab52bd129e&scene=58&subscene=0#rd)\n- 看雪学苑\n - [ ] [炸弹指令何处来？](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589455&idx=1&sn=a9caaef34d3f907a54a42d1846408b82&chksm=b18c298586fba093e99a2b4c5bd1860b116df49868dea6a05386fa7e18fcdb467f4f49b41330&scene=58&subscene=0#rd)\n - [ ] [科锐软件逆向52期预科班、正式班开始火爆招生报名啦！！！](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589455&idx=2&sn=372490e4eaeab725d4d6c54d3e805886&chksm=b18c298586fba0932b42b71c86900af74d4f06c2b02dedce84260f347695400a09d9e75f62dd&scene=58&subscene=0#rd)\n - [ ] [8Base勒索软件团伙在普吉岛被端，4名嫌疑人被捕](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589455&idx=3&sn=432c3ce898f4a9df66be0a9d7986bdbd&chksm=b18c298586fba0939d86d4a0b1717f7e6ac8ebe035606b3c6a8f61d73d8a0a1dc023a8572d88&scene=58&subscene=0#rd)\n- 代码卫士\n - [ ] [微软扩展Copilot AI漏洞奖励计划范围，提高赏金](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522200&idx=1&sn=7bf07566564fbc663142355517974f16&chksm=ea94a6f2dde32fe494139aa68b283b850ad2abbaccfe22f1ead83704b179669c431a4e4e3f47&scene=58&subscene=0#rd)\n - [ ] [苹果紧急修复被用于“极其复杂”攻击中的0day漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522200&idx=2&sn=a8084137286ce6cbebda935ab8c0d5c2&chksm=ea94a6f2dde32fe49daed48eb8edd329d603e903408e746f6d6d111473da1914de662d214989&scene=58&subscene=0#rd)\n- 青衣十三楼飞花堂\n - [ ] [随缘](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247487981&idx=1&sn=c39525d44fce72a769386b8769bdc873&chksm=fab2d2d2cdc55bc404a206bc436bc21fdbfc8eeeff75acb7c7c0c7c7593045ecdb8c1e6fc642&scene=58&subscene=0#rd)\n- 安全内参\n - [ ] [安全厂商警告2000万个OpenAI账号权限遭出售，官方回应](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513699&idx=1&sn=e08bed77ab557ac45630a406e606dd01&chksm=ebfaf143dc8d78557a204ac16c2befded19062d26529da67a721df0db771bd68e243af01f6fc&scene=58&subscene=0#rd)\n - [ ] [日本政府推进主动网络防御，授权军警可摧毁敌方服务器](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513699&idx=2&sn=76d3123c95cfe36b0ce17df2a21b2476&chksm=ebfaf143dc8d78551b7ec3a65ba50915b57f00bb87707edabe3e00684b5e992e096df47909cd&scene=58&subscene=0#rd)\n- dotNet安全矩阵\n - [ ] [.NET 代码审计：发现某企业级 OA 系统中任意文件下载漏洞](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498871&idx=1&sn=d261fad92b90cc79e3796f377d25a658&chksm=fa59529acd2edb8c7e6332dfcada6233d17fd489271cb6a618488ca71747042ade56663166af&scene=58&subscene=0#rd)\n - [ ] [国内最专业、最全面的 [ .NET 代码审计 ] 体系化学习交流社区](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498871&idx=2&sn=8674cdd452f616f2408dc7eec628c2a1&chksm=fa59529acd2edb8c6b9c47f8e9f7cddba6abd397839a54e2578f94b77d0e7dda575a647c0549&scene=58&subscene=0#rd)\n - [ ] [内网获取用户哈希，通过 Sharp4GetNTLM 实现 NTLM 降级攻击](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498871&idx=3&sn=c852f97b1b4e6f12bdaabff47d22182f&chksm=fa59529acd2edb8c4429e812f76e904e2935b331c594f2260bf5740f9218a14f6a4b577949d9&scene=58&subscene=0#rd)\n- 丁爸 情报分析师的工具箱\n - [ ] [【资料】如何成为一名情报分析师？](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148961&idx=1&sn=796f42dcd356bff9f36c01ae75528679&chksm=f1af259bc6d8ac8d56e47bb0fcfc8be86ac73908aeef0826cf0963f065c3ca039fe913ba32f2&scene=58&subscene=0#rd)\n - [ ] [​【论文】情报和恐怖分子的“心脏”：发现和应对恐怖战术的管理系统](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148961&idx=2&sn=ba5e02330b9a40fb5c9a31cf1b322201&chksm=f1af259bc6d8ac8dbf8d2b12145882bc81a52d6e09fce0dde3a4df6cf2750e380e66b4bfddb8&scene=58&subscene=0#rd)\n- 吾爱破解论坛\n - [ ] [【2025春节】解题领红包活动倒计时——最后两天！](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141708&idx=1&sn=e4b9e15585376a9c02967fd36df609e7&chksm=bd50a6188a272f0e1bce859cb357ff77c8e2920b88be248b8d56aa22dd72508d44bf33115808&scene=58&subscene=0#rd)\n- 数世咨询\n - [ ] [整合安全工具集的五大理由](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247535791&idx=1&sn=820c52eb1de6eda93e24ba28280f6df4&chksm=c1443e12f633b704b32a7f52ed993dfdc0f2e0b7a3a6e982e4a16f62c3169b7d3eb82de61e38&scene=58&subscene=0#rd)\n - [ ] [DeepSeek火了，大模型的原生安全怎么做？](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247535791&idx=2&sn=05ddc997e31835baddca9e6f40357483&chksm=c1443e12f633b704b67ae77ff5b4cea40c3daabd3ccaf6d2ca661592034a36b29e0cb6e2fb41&scene=58&subscene=0#rd)\n- 网络空间安全科学学报\n - [ ] [“智能身份认证”专题征稿](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505040&idx=1&sn=fcc190c91315e23fcd0df68b5498514a&chksm=e9bfc02edec84938f50c14845d2c50f8542e461352080334d407baacce2c0104e579193623cb&scene=58&subscene=0#rd)\n- 安全分析与研究\n - [ ] [恶意样本动态调试-下](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490447&idx=1&sn=c7cf5c60d80febdcde3d62e977e3b04b&chksm=902fb4a7a7583db1421da7bebe0319e6670cc2ae7cee63df93330435eb892ce6e851ddc34080&scene=58&subscene=0#rd)\n - [ ] [BlueSky勒索病毒攻击](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490447&idx=2&sn=0703d696ace333f4a65b0923359c20eb&chksm=902fb4a7a7583db19c0ba8a5224d1a6836bc73108eaf8411b65ca47aa07a0c442e9cca50b1c4&scene=58&subscene=0#rd)\n - [ ] [Fag勒索病毒攻击](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490447&idx=3&sn=45563e8a4b1d5e96e6c330db05949203&chksm=902fb4a7a7583db1e1bfd25f4bbafcf1186e85553be70851a9bbc57cc02ebfa23fbe14cf8dd9&scene=58&subscene=0#rd)\n - [ ] [Afire勒索病毒攻击](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490447&idx=4&sn=9bfc4a15b00ef33944d6a6d8d4abcc08&chksm=902fb4a7a7583db1f90a848869d857dfc56644b194359bf0eaf817bc317d3168a61f95dd6128&scene=58&subscene=0#rd)\n - [ ] [Albabat勒索病毒攻击](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490447&idx=5&sn=69e7f96c16c1e5a0df4e72d66cf88881&chksm=902fb4a7a7583db1f9f317c29a34d85fc85513d13c20c8604e8e6f9e7738c63c1d57a1a06fe1&scene=58&subscene=0#rd)\n- 信息安全国家工程研究中心\n - [ ] [《公共安全视频图像信息系统管理条例》发布](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498848&idx=1&sn=ca0142e6bf268c8ac788b3158aa58683&chksm=feb67d73c9c1f4654b47a149ae704dc0a6506269717c8c7cc3aff11d41fcfc380b208e8d0695&scene=58&subscene=0#rd)\n- 中国信息安全\n - [ ] [新赛道 | 启明星辰发布MAF大模型应用防火墙产品，提升DeepSeek类企业用户安全](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236408&idx=1&sn=fda66ccd9a00a3fc877870161835d2b7&chksm=8b580781bc2f8e97bfbf21f194399745d95ccf34e9f0678fe897a5405ec3236c73943ae7f1d3&scene=58&subscene=0#rd)\n - [ ] [专家观点 | 鲁传颖：人工智能重塑国家安全的范式和逻辑](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236408&idx=2&sn=09b33daa9ebd26df49b1e1aae88463a3&chksm=8b580781bc2f8e97c317728b47f6c11cb40d4bed4e725b448084b027980c0f7fdb0c8a0834bc&scene=58&subscene=0#rd)\n - [ ] [专家解读 | 以“少而精”“小而准”举措 降低数据流通安全治理成本](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236408&idx=3&sn=e8c1db916f05ebfbf5dc2bd609ef9880&chksm=8b580781bc2f8e979187d833ec37379a794c5925de1a6c2b3b4d1d7eb3b8a7914dc663d8d2ac&scene=58&subscene=0#rd)\n - [ ] [外交部：中方主张开源人工智能技术，实现各国共享智能红利](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236408&idx=4&sn=e8f28adad19f3526a324812e47b1b4fa&chksm=8b580781bc2f8e972feb7b3ce203fb44197615f709f2dc7bf71df15318b16a9cf86e40468a5f&scene=58&subscene=0#rd)\n - [ ] [国际 | 泰国出台措施打击电信诈骗](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236408&idx=5&sn=e0cfcf469417676f86a75b0d041193d3&chksm=8b580781bc2f8e97cc6a4a7bc563a8caa9995226bd9929ab166296a3ef3a08f8b60c6961210b&scene=58&subscene=0#rd)\n - [ ] [评论 | 筑牢人工智能安全防火墙](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236408&idx=6&sn=23fd1dfffd9bede882c177d94c558adc&chksm=8b580781bc2f8e979fbba2812cbb20188bbee7a862ba661bb60f62cfa15e66c3926d0462963e&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [【深度解局】法国AI行动峰会！法印联盟竟想掀翻中美牌桌？](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559624&idx=1&sn=4d1d4066a7b9d0c83961c05e9be97d13&chksm=87117ac3b066f3d5a9671b437c5595132dc471d1422aea2e340afa5a2741dde8ce751f4723b0&scene=58&subscene=0#rd)\n - [ ] [德国2025大选：政治风云再起，谁将主导欧洲心脏？](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559624&idx=2&sn=983aaa1b1ec8b735dbd1f971fe2075d5&chksm=87117ac3b066f3d50ca841a4649e82972a2f521cc06a6fff5dcf74c291a92c165fb62507e0fa&scene=58&subscene=0#rd)\n- 嘶吼专业版\n - [ ] [新型 Aquabotv3 勒索软件利用 Mitel 命令注入漏洞发起攻击](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581088&idx=1&sn=6f659e38152e18f130196a1c00b075df&chksm=e9146d9ade63e48ca17d4b701dad4ace777dd6c60ca7e49f2b1d7ed66e41688ff1922c4e54dd&scene=58&subscene=0#rd)\n - [ ] [一图读懂 | 关于完善数据流通安全治理 更好促进数据要素市场化价值化的实施方案](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581088&idx=2&sn=b3057c776e9314f94a9e693c2a36825c&chksm=e9146d9ade63e48c2108aa37d68c7b974f72be9c9ac8a75c614687359932f42e24b985c536d6&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [下探到 7 万，比亚迪把「智驾溢价」打没了](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073593&idx=1&sn=0baae0f150411d0630c12103b60f3f3b&chksm=7e57cd0f4920441907d81d44ebb839162fe6d732dc94c0a8f1b2f6b4e3dd311b8c002617a635&scene=58&subscene=0#rd)\n - [ ] [马斯克提出 974 亿美元收购 OpenAI；百度文小言接入 Deepseek；《武林外传》将上线二十周年纪念版 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073580&idx=1&sn=d44c5a95b0dc2210f851981a6e324023&chksm=7e57cd1a4920440c85234e1349f7e160991ecee5282aa69a4631316087e967c94abd9ef8e893&scene=58&subscene=0#rd)\n- 阿里安全响应中心\n - [ ] [先知通用软件漏洞收集及奖励计划第六期 正式开始！](https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652997301&idx=1&sn=09bd4de58c5c588576a09927ad5248f8&chksm=8c9e09e2bbe980f403539ec52854902747f4f3f5a614d45ecf4d0c81b11d322260a0270339b3&scene=58&subscene=0#rd)\n- 安全圈\n - [ ] [【安全圈】Deepseek 安全故障：AI 网络防御的未来将何去何从？](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067763&idx=1&sn=1a4ec6efad507af3a0732a4e315a923e&chksm=f36e7bf3c419f2e5a51bae9f66058ff235936a9a25a9de79ca4e735afb04b9f72242952e084f&scene=58&subscene=0#rd)\n - [ ] [【安全圈】苹果修复了在“极其复杂”的攻击中被利用的零日漏洞](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067763&idx=2&sn=6f436c8b629c5b79837b0940cb025969&chksm=f36e7bf3c419f2e5f88fddf5bf9e3baa0788caae324cc1abe361faee4d27bcb20472812e22dd&scene=58&subscene=0#rd)\n - [ ] [【安全圈】8Base 勒索软件暗网网站被查封，四名运营商被捕](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067763&idx=3&sn=126c23369d2e838e5a4b821c468123d2&chksm=f36e7bf3c419f2e5aaa0f430b3a1bbc20f8dd49ad782f598316c6893870209b07fb2765dc5c3&scene=58&subscene=0#rd)\n - [ ] [【安全圈】涉嫌伪造SEC帖子背后的黑客可能会在认罪协议中没收5万美元](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067763&idx=4&sn=6bc70ff732a53d900048d66f15a3b44a&chksm=f36e7bf3c419f2e561879868ab5e9c1a0cd6f19f9167a734afb1d79f283f8568aa8b40946cde&scene=58&subscene=0#rd)\n- 360数字安全\n - [ ] [独家|360发布全球高级威胁研究报告：我国14大重点行业面临境外APT威胁](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579509&idx=1&sn=0b56794720b224bd3af0dd6bead2f1e6&chksm=9f8d277da8faae6ba0521ed0550bad806c0a0d91b7bd77d7c65be9d6ac12b1cf99a0c7961389&scene=58&subscene=0#rd)\n - [ ] [深度解读 | 六部门印发方案，要求完善数据流通安全治理](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579509&idx=2&sn=3f427fd100d4c28ebe43ddf4ca051187&chksm=9f8d277da8faae6b947c3db3a90e092c07275df97a4e118e09707aeaaabfb33c2b63dc313a10&scene=58&subscene=0#rd)\n- 字节跳动技术团队\n - [ ] [AI 与星辰大海：2025，从新手到开挂勇士的奇幻旅程](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513244&idx=1&sn=055cba5f623eb2e791d5f632df7937d8&chksm=e9d37f7edea4f6685d1a1bc9b541acd1ba853415aebdeefc99bc28e4b4537dff7d81ba62555b&scene=58&subscene=0#rd)\n- 青藤智库\n - [ ] [EDR技术革命：从被动防御到智能反制的进化之路](https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489341&idx=1&sn=dfcada3265816f7fe620d778b2962533&chksm=fa58b506cd2f3c1023352f630b5f2670dc7054ca49f43e69c6599ad60507d4d3cb06f3100bc9&scene=58&subscene=0#rd)\n- ICT Security Magazine\n - [ ] [Threat actors made in China](https://www.ictsecuritymagazine.com/articoli/threat-actors-made-in-china/)\n- DARKNAVY\n - [ ] [「深蓝洞察」2024年度最狂躁不安的漏洞](https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247486838&idx=1&sn=2eaf81a0e3a11a2a5a3aa79ff165f19d&chksm=c1f449bef683c0a89858e91ff419da0a8b461d180aedcb33a2a25b3984d067dd401255bacadf&scene=58&subscene=0#rd)\n- RedTeam\n - [ ] [从 IAM 松散管理到零信任架构：Sendbird AWS 安全实战演进实录](https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484070&idx=1&sn=183c6569561febbd5b919e8496dc65f3&chksm=c006ca56f7714340d02c223a0b9e81cb9306f6fad5f7b304ce4295583d75777110b0f346b19c&scene=58&subscene=0#rd)\n- TrustedSec\n - [ ] [From RAGs to Riches: Using LLMs and RAGs to Enhance Your Ops](https://trustedsec.com/blog/from-rags-to-riches-using-llms-and-rags-to-enhance-your-ops)\n- 迪哥讲事\n - [ ] [记一次卑微的渗透测试](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497069&idx=1&sn=5d1df54873a6a3a04185d317220298ba&chksm=e8a5ff0edfd27618b42c11f47bb9c4b8eefa860d92e11f43d70e0b01ec88987b5df820ef8ada&scene=58&subscene=0#rd)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #745: Solving the windows hello challenge part 1](https://www.hecfblog.com/2025/02/daily-blog-745-solving-windows-hello.html)\n- Have I Been Pwned latest breaches\n - [ ] [LandAirSea - 337,373 breached accounts](https://haveibeenpwned.com/PwnedWebsites#LandAirSea)\n- Full Disclosure\n - [ ] [APPLE-SA-02-10-2025-2 iPadOS 17.7.5](https://seclists.org/fulldisclosure/2025/Feb/8)\n - [ ] [APPLE-SA-02-10-2025-1 iOS 18.3.1 and iPadOS 18.3.1](https://seclists.org/fulldisclosure/2025/Feb/7)\n - [ ] [CVE-2024-55447: Access Control in Paxton Net2 software (update)](https://seclists.org/fulldisclosure/2025/Feb/6)\n - [ ] [ChatGPT AI finds \"security concern\" (XSS) in DeepSeek's code](https://seclists.org/fulldisclosure/2025/Feb/5)\n- Securityinfo.it\n - [ ] [Apple rilascia un fix per un bug 0-day già sfruttato](https://www.securityinfo.it/2025/02/11/apple-rilascia-un-fix-per-un-bug-0-day-gia-sfruttato/?utm_source=rss&utm_medium=rss&utm_campaign=apple-rilascia-un-fix-per-un-bug-0-day-gia-sfruttato)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Arizona woman pleads guilty to running laptop farm for N. Korean IT workers, faces 9-year sentence](https://therecord.media/arizona-woman-pleads-guilty-north-korean-laptop-farm)\n - [ ] [Apple fixes security flaw allowing third-party access to locked devices](https://therecord.media/apple-ios-vulnerability-citizen-lab)\n - [ ] [Windows 10 KB5051974 update force installs new Microsoft Outlook app](https://www.bleepingcomputer.com/news/microsoft/windows-10-kb5051974-update-force-installs-new-microsoft-outlook-app/)\n - [ ] [Microsoft Patch Tuesday for February 2025 — Snort rules and prominent vulnerabilities](https://blog.talosintelligence.com/february-patch-tuesday-release/)\n - [ ] [Russian bulletproof hosting service Zservers sanctioned by US for LockBit coordination](https://therecord.media/zservers-russia-bulletproof-hosting-us-uk-sanctions)\n - [ ] [Windows 11 KB5051987 & KB5051989 cumulative updates released](https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5051987-and-kb5051989-cumulative-updates-released/)\n - [ ] [Fortinet warns of new zero-day exploited to hijack firewalls](https://www.bleepingcomputer.com/news/security/fortinet-warns-of-new-zero-day-exploited-to-hijack-firewalls/)\n - [ ] [Microsoft February 2025 Patch Tuesday fixes 4 zero-days, 55 flaws](https://www.bleepingcomputer.com/news/microsoft/microsoft-february-2025-patch-tuesday-fixes-4-zero-days-55-flaws/)\n - [ ] [Lawsuit accuses Trump administration of violating federal information security law](https://therecord.media/doge-lawsuit-alleged-information-security-violations)\n - [ ] [Another person targeted by Paragon spyware comes forward](https://techcrunch.com/2025/02/11/another-person-targeted-by-paragon-spyware-comes-forward/)\n - [ ] [The Company Man: Binance exec detained in Nigeria breaks his silence](https://therecord.media/binance-exec-tigran-gambaryan-breaks-his-silence)\n - [ ] [Changing Windows Passwords in the Most Complex Way](https://decoder.cloud/2025/02/11/changing-windows-passwords-in-the-most-complex-way/)\n - [ ] [SonicWall firewall exploit lets hackers hijack VPN sessions, patch now](https://www.bleepingcomputer.com/news/security/sonicwall-firewall-exploit-lets-hackers-hijack-vpn-sessions-patch-now/)\n - [ ] [Russian military hackers deploy malicious Windows activators in Ukraine](https://www.bleepingcomputer.com/news/security/russian-military-hackers-deploy-malicious-windows-activators-in-ukraine/)\n - [ ] [The Future of Predictive Security: A Manifesto](https://bfore.ai/the-future-of-predictive-security-a-manifesto/)\n - [ ] [AI Action Summit: l’Ue scommette su InvestAI e crea il Cern dell’intelligenza artificiale](https://www.cybersecurity360.it/news/ai-action-summit-la-ue-scommette-su-investai-per-creare-il-cern-dellintelligenza-artificiale/)\n - [ ] [Il CISO](https://roccosicilia.com/2025/02/11/il-ciso/)\n - [ ] [PowerSchool breach exposed special education status, mental health data and parent restraining orders](https://therecord.media/powerschool-breach-exposed-special-ed-status-mental-health-data)\n - [ ] [Two Russian nationals arrested in takedown of Phobos ransomware infrastructure](https://therecord.media/phobos-ransomware-takedown-arrests-russian-nationals)\n - [ ] [Implementazione della NIS 2: un piano d’azione per il DPO](https://www.cybersecurity360.it/legal/implementazione-della-nis-2-un-piano-dazione-per-il-dpo/)\n - [ ] [Police arrests 2 Phobos ransomware suspects, seizes 8Base sites](https://www.bleepingcomputer.com/news/legal/police-arrests-2-phobos-ransomware-suspects-seizes-8base-sites/)\n - [ ] [US indicts 8Base ransomware operators for Phobos encryption attacks](https://www.bleepingcomputer.com/news/security/us-indicts-8base-ransomware-operators-for-phobos-encryption-attacks/)\n - [ ] [Il Regno Unito sfida Apple: una backdoor nei sistemi crittografici. I possibili impatti](https://www.cybersecurity360.it/news/il-regno-unito-sfida-apple-ordinata-la-creazione-di-una-backdoor-nei-sistemi-di-crittografia/)\n - [ ] [US sanctions LockBit ransomware’s bulletproof hosting provider](https://www.bleepingcomputer.com/news/security/us-sanctions-lockbit-ransomwares-bulletproof-hosting-provider/)\n - [ ] [RATatouille: Cooking Up Chaos in the I2P Kitchen](https://blog.sekoia.io/ratatouille-cooking-up-chaos-in-the-i2p-kitchen/)\n - [ ] [Exclusive: Data breach at SimonMed: the Medusa group demands a $1 million ransom, exposing at least 132.173 people, including patients and employees](https://www.suspectfile.com/exclusive-data-breach-at-simonmed-the-medusa-group-demands-a-1-million-ransom-exposing-at-least-132-173-people-including-patients-and-employees/)\n - [ ] [Cyber Security Agency of Singapore Alerts Users on Active Exploitation of Zero-Day Vulnerability in Apple Products](https://cyble.com/blog/csa-alerts-users-of-cve-2025-24200/)\n - [ ] [!exploitable Episode One - Breaking IoT](https://blog.doyensec.com/2025/02/11/exploitable-iot.html)\n - [ ] [I Used a Sandbox to Strengthen Bank’s Security—Here’s How It Worked](https://any.run/cybersecurity-blog/how-investment-bank-improved-security/)\n - [ ] [EFCC Witness Exposes Shocking Details of Cyber Terrorism and Internet Fraud Scheme](https://cyble.com/blog/efcc-witness-details-cyber-terrorism/)\n - [ ] [Safer Internet Day 2025: per una rete più sicura serve un cambio di prospettiva](https://www.cybersecurity360.it/news/safer-internet-day-2025-per-una-rete-piu-sicura-serve-un-cambio-di-prospettiva/)\n - [ ] [Apple rilascia un fix per un bug 0-day già sfruttato](https://www.securityinfo.it/2025/02/11/apple-rilascia-un-fix-per-un-bug-0-day-gia-sfruttato/)\n - [ ] [Dalla fiducia alla sicurezza: come gestire il rischio di terze parti](https://www.cybersecurity360.it/outlook/come-gestire-il-rischio-di-terze-parti/)\n - [ ] [Fault Injection – Looking for a Unicorn](https://security.humanativaspa.it/fault-injection-looking-for-a-unicorn/)\n - [ ] [Stealthy AD CS Reconnaissance](https://blog.compass-security.com/2025/02/stealthy-ad-cs-reconnaissance/)\n - [ ] [Evil Crow RF: A Portable Radio Frequency Device](https://www.mobile-hacker.com/2025/02/11/evil-crow-rf-a-portable-radio-frequency-device/)\n - [ ] [LandAirSea - 337,373 breached accounts](https://haveibeenpwned.com/PwnedWebsites#LandAirSea)\n - [ ] [Over 12,000 KerioControl firewalls exposed to exploited RCE flaw](https://www.bleepingcomputer.com/news/security/over-12-000-keriocontrol-firewalls-exposed-to-exploited-rce-flaw/)\n- Schneier on Security\n - [ ] [Trusted Encryption Environments](https://www.schneier.com/blog/archives/2025/02/trusted-encryption-environments.html)\n- Posts By SpecterOps Team Members - Medium\n - [ ] [Enhancements for BloodHound v7.0 Provide Fresh User Experience and Attack Path Risk Optimizations](https://posts.specterops.io/enhancements-for-bloodhound-v7-0-provide-fresh-user-experience-and-attack-path-risk-optimizations-525dae030ec5?source=rss----f05f8696e3cc---4)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Microsoft February 2025 Patch Tuesday, (Tue, Feb 11th)](https://isc.sans.edu/diary/rss/31674)\n - [ ] [ISC Stormcast For Tuesday, February 11th, 2025 https://isc.sans.edu/podcastdetail/9318, (Tue, Feb 11th)](https://isc.sans.edu/diary/rss/31672)\n- Tor Project blog\n - [ ] [New Alpha Release: Tor Browser 14.5a3](https://blog.torproject.org/new-alpha-release-tor-browser-145a3/)\n- The Hacker News\n - [ ] [Google Confirms Android SafetyCore Enables AI-Powered On-Device Content Classification](https://thehackernews.com/2025/02/google-confirms-android-safetycore.html)\n - [ ] [4 Ways to Keep MFA From Becoming too Much of a Good Thing](https://thehackernews.com/2025/02/4-ways-to-keep-mfa-from-becoming-too.html)\n - [ ] [Progress Software Patches High-Severity LoadMaster Flaws Affecting Multiple Versions](https://thehackernews.com/2025/02/progress-software-patches-high-severity.html)\n - [ ] [Gcore DDoS Radar Reveals 56% YoY Increase in DDoS Attacks](https://thehackernews.com/2025/02/gcore-ddos-radar-reveals-56-yoy.html)\n - [ ] [Apple Patches Actively Exploited iOS Zero-Day CVE-2025-24200 in Emergency Update](https://thehackernews.com/2025/02/apple-patches-actively-exploited-ios.html)\n - [ ] [Protecting Your Software Supply Chain: Assessing the Risks Before Deployment](https://thehackernews.com/2025/02/protecting-your-software-supply-chain.html)\n - [ ] [Threat Actors Exploit ClickFix to Deploy NetSupport RAT in Latest Cyber Attacks](https://thehackernews.com/2025/02/threat-actors-exploit-clickfix-to.html)\n - [ ] [FBI, Europol, and NCA Take Down 8Base Ransomware Data Leak and Negotiation Sites](https://thehackernews.com/2025/02/8base-ransomware-data-leak-sites-seized.html)\n- Security Affairs\n - [ ] [Attackers exploit a new zero-day to hijack Fortinet firewalls](https://securityaffairs.com/174117/hacking/fortinet-fortios-zero-day-exploited.html)\n - [ ] [OpenSSL patched high-severity flaw CVE-2024-12797](https://securityaffairs.com/174111/security/openssl-patched-the-vulnerability-cve-2024-12797.html)\n - [ ] [Progress Software fixed multiple high-severity LoadMaster flaws](https://securityaffairs.com/174103/security/progress-software-loadmaster-software-flaws.html)\n - [ ] [Artificial intelligence (AI) as an Enabler for Enhanced Data Security](https://securityaffairs.com/174095/security/artificial-intelligence-enhanced-data-security.html)\n - [ ] [Crooks use Google Tag Manager skimmer to steal credit card data from a Magento-based e-stores](https://securityaffairs.com/174085/cyber-crime/google-tag-manager-gtm-e-skimmer-software-in-magento.html)\n - [ ] [Operation Phobos Aetor: Police dismantled 8Base ransomware gang](https://securityaffairs.com/174078/cyber-crime/police-dismantled-8base-ransomware-gang.html)\n- Computer Forensics\n - [ ] [Is there any way where IOCs and Evidences can be fetched automatically on DFIR IRIS?](https://www.reddit.com/r/computerforensics/comments/1imtyfd/is_there_any_way_where_iocs_and_evidences_can_be/)\n - [ ] [Super basic question…](https://www.reddit.com/r/computerforensics/comments/1impg89/super_basic_question/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [Build Your Own Offensive Security Lab A Step-by-Step Guide with Ludus](https://www.reddit.com/r/netsecstudents/comments/1imuc6x/build_your_own_offensive_security_lab_a/)\n- Deep Web\n - [ ] [Reminder: Bitcoin \"Mixing\" doesn't work anymore. Only use Monero.](https://www.reddit.com/r/deepweb/comments/1imx6kg/reminder_bitcoin_mixing_doesnt_work_anymore_only/)\n - [ ] [Am I getting scammed?](https://www.reddit.com/r/deepweb/comments/1in0dzz/am_i_getting_scammed/)\n- Deeplinks\n - [ ] [EFF Sues OPM, DOGE and Musk for Endangering the Privacy of Millions](https://www.eff.org/press/releases/eff-sues-opm-doge-and-musk-endangering-privacy-millions)\n - [ ] [The TAKE IT DOWN Act: A Flawed Attempt to Protect Victims That Will Lead to Censorship](https://www.eff.org/deeplinks/2025/02/take-it-down-act-flawed-attempt-protect-victims-will-lead-censorship)\n - [ ] [EFF Sues DOGE and the Office of Personnel Management to Halt Ransacking of Federal Data](https://www.eff.org/deeplinks/2025/02/eff-sues-doge-and-office-personnel-management-halt-ransacking-federal-data)\n - [ ] [Building a Community Privacy Plan](https://www.eff.org/deeplinks/2025/02/building-community-privacy-plan)\n - [ ] [Privacy Loves Company](https://www.eff.org/deeplinks/2025/02/privacy-loves-company)\n- Your Open Hacker Community\n - [ ] [What to do after reverse shell?](https://www.reddit.com/r/HowToHack/comments/1imzsip/what_to_do_after_reverse_shell/)\n - [ ] [HDMI-CEC exploitation!](https://www.reddit.com/r/HowToHack/comments/1in7943/hdmicec_exploitation/)\n - [ ] [Weird question maybe ?](https://www.reddit.com/r/HowToHack/comments/1imuwod/weird_question_maybe/)\n - [ ] [Noredink](https://www.reddit.com/r/HowToHack/comments/1imollf/noredink/)\n - [ ] [help to decrypt this hash pls](https://www.reddit.com/r/HowToHack/comments/1imo29k/help_to_decrypt_this_hash_pls/)\n - [ ] [Where do I start?](https://www.reddit.com/r/HowToHack/comments/1imm9ea/where_do_i_start/)\n- Technical Information Security Content & Discussion\n - [ ] [PsExec’ing the right way and why zero trust is mandatory](https://www.reddit.com/r/netsec/comments/1in1np1/psexecing_the_right_way_and_why_zero_trust_is/)\n - [ ] [CVE-2025-0693: AWS IAM User Enumeration](https://www.reddit.com/r/netsec/comments/1in52vb/cve20250693_aws_iam_user_enumeration/)\n - [ ] [How auto-generated passwords in Sitevision leads to signing key leakage - CVE-2022-35202](https://www.reddit.com/r/netsec/comments/1in8xnb/how_autogenerated_passwords_in_sitevision_leads/)\n - [ ] [Build Your Own Offensive Security Lab A Step-by-Step Guide with Ludus](https://www.reddit.com/r/netsec/comments/1imt27h/build_your_own_offensive_security_lab_a/)\n - [ ] [Exploring a VPN Appliance: A Researcher’s Journey](https://www.reddit.com/r/netsec/comments/1in1wa9/exploring_a_vpn_appliance_a_researchers_journey/)\n - [ ] [Tenda AC15 CVE-2020-13393 Exploit (!exploitable episode one)](https://www.reddit.com/r/netsec/comments/1in15r3/tenda_ac15_cve202013393_exploit_exploitable/)\n - [ ] [Evil Crow RF: A Portable Radio Frequency Device compatible with Flipper Zero Sub-GHz file format](https://www.reddit.com/r/netsec/comments/1imtc8m/evil_crow_rf_a_portable_radio_frequency_device/)\n - [ ] [Fault Injection – Looking for a Unicorn](https://www.reddit.com/r/netsec/comments/1imtwnf/fault_injection_looking_for_a_unicorn/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [PlayStation, KerioControl, SEC SimSWAP, 8base, Copilot, AI, Bird, Josh Marpet... - SWN #450](http://sites.libsyn.com/18678/playstation-keriocontrol-sec-simswap-8base-copilot-ai-bird-josh-marpet-swn-450)\n - [ ] [Code Scanning That Works With Your Code - Scott Norberg - ASW #317](http://sites.libsyn.com/18678/code-scanning-that-works-with-your-code-scott-norberg-asw-317)\n"}, "79f057878b4f2cfdef3b98400b4226e5f0ff28ed": {"t": 1785772255.8979652, "n": 41061, "h": "77d43c9a44182b55", "c": "# 每日安全资讯（2025-02-12）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-02-11 Review](http://www.sec-wiki.com/?2025-02-11)\n- 奇安信攻防社区\n - [ ] [浅谈Flask内存马中的攻与防](https://forum.butian.net/share/4113)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [360发布高级威胁研究报告：我国新能源汽车领域面临APT威胁加剧](https://www.4hou.com/posts/333p)\n - [ ] [360发布全球高级威胁研究报告：我国14大重点行业面临境外APT威胁](https://www.4hou.com/posts/2XXA)\n - [ ] [「深蓝洞察」2024年度最具含“金”量的绕过](https://www.4hou.com/posts/1MMq)\n - [ ] [新型 Aquabotv3 勒索软件利用 Mitel 命令注入漏洞发起攻击](https://www.4hou.com/posts/MXX1)\n - [ ] [实力加冕！盛邦安全上榜《嘶吼2024中国网络安全产业势能榜》](https://www.4hou.com/posts/0M33)\n - [ ] [盛邦安全亮相LEAP 2025中东国际先进科技展](https://www.4hou.com/posts/YZZY)\n - [ ] [API治理方案护航某头部高校](https://www.4hou.com/posts/qopy)\n - [ ] [嘶吼安全产业研究院 | 2025网络安全产业图谱调研启动](https://www.4hou.com/posts/QXX5)\n- Trustwave Blog\n - [ ] [Cyber and Physical Security Considerations for Returning to the Office](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/cyber-and-physical-security-considerations-for-returning-to-the-office/)\n- Recent Commits to cve:main\n - [ ] [Update Tue Feb 11 20:25:39 UTC 2025](https://github.com/trickest/cve/commit/46049aaf0af488473dd4bc88513de53706f70360)\n - [ ] [Update Tue Feb 11 12:30:04 UTC 2025](https://github.com/trickest/cve/commit/231b23cedc9423176ef698a0c88f188bfdafe294)\n - [ ] [Update Tue Feb 11 04:09:27 UTC 2025](https://github.com/trickest/cve/commit/eb3d0d11fb9ac7bcd84a6574d1849a82641c52db)\n- 安全客-有思想的安全新媒体\n - [ ] [全年披露40000+漏洞，《2024年度网络安全漏洞分析报告》解码漏洞风险](https://www.anquanke.com/post/id/304112)\n - [ ] [黑客利用Google Tag Manager在Magento商店上部署信用卡Skimmers](https://www.anquanke.com/post/id/304109)\n - [ ] [涉嫌伪造SEC帖子背后的黑客可能会在认罪协议中没收5万美元](https://www.anquanke.com/post/id/304105)\n - [ ] [网络攻击扰乱了Lee报纸在美国各地的运营](https://www.anquanke.com/post/id/304102)\n - [ ] [警方逮捕4名Phobos勒索软件嫌疑人，查获8个基地](https://www.anquanke.com/post/id/304099)\n - [ ] [8Base勒索软件暗网站被查获，四名运营商被捕](https://www.anquanke.com/post/id/304096)\n - [ ] [2024年澳大利亚人每秒遭受一起网络攻击](https://www.anquanke.com/post/id/304093)\n - [ ] [黑客承认对美国SEC X账户进行SIM交换攻击](https://www.anquanke.com/post/id/304090)\n - [ ] [苹果修复了“极其复杂”攻击中的零日漏洞](https://www.anquanke.com/post/id/304084)\n - [ ] [医疗数据遭窃：Embargo 团伙与多起黑客事件揭秘](https://www.anquanke.com/post/id/304080)\n- Tenable Blog\n - [ ] [Microsoft’s February 2025 Patch Tuesday Addresses 55 CVEs (CVE-2025-21418, CVE-2025-21391)](https://www.tenable.com/blog/microsofts-february-2025-patch-tuesday-addresses-55-cves-cve-2025-21418-cve-2025-21391)\n- InfoSec Write-ups - Medium\n - [ ] [Selecting A Program for Bug Bounty on HackerOne](https://infosecwriteups.com/selecting-a-program-for-bug-bounty-on-hackerone-e51ce8a83b2a?source=rss----7b722bfd1b8d---4)\n - [ ] [Mastering Amass: The Ultimate Recon Toolkit](https://infosecwriteups.com/mastering-amass-the-ultimate-recon-toolkit-d66a56627849?source=rss----7b722bfd1b8d---4)\n - [ ] [Finding subdomains that are hidden in the cloud.](https://infosecwriteups.com/finding-subdomains-that-are-hidden-in-the-cloud-ec54412802bf?source=rss----7b722bfd1b8d---4)\n - [ ] [Stored XSS into Onclick Event: Bypassing Angle Brackets, Double Quotes, and Escaped Characters —…](https://infosecwriteups.com/stored-xss-into-onclick-event-bypassing-angle-brackets-double-quotes-and-escaped-characters-ee347b9e19d9?source=rss----7b722bfd1b8d---4)\n - [ ] [Creating a Code Obfuscation Program For C](https://infosecwriteups.com/creating-a-code-obfuscation-program-for-c-d10d604178d4?source=rss----7b722bfd1b8d---4)\n - [ ] [How to Uncover Hidden Attack Surfaces? Recon part 6](https://infosecwriteups.com/how-to-uncover-hidden-attack-surfaces-recon-part-6-61e43976ed22?source=rss----7b722bfd1b8d---4)\n - [ ] [Bug Bounty Target Selection: How Hackers Find the Most Profitable & Juicy Bugs Before Anyone Else!](https://infosecwriteups.com/bug-bounty-target-selection-how-hackers-find-the-most-profitable-juicy-bugs-before-anyone-else-061510e83698?source=rss----7b722bfd1b8d---4)\n - [ ] [Mastering Nmap: The Full Toolkit](https://infosecwriteups.com/mastering-nmap-the-full-toolkit-8231c918e144?source=rss----7b722bfd1b8d---4)\n - [ ] [SOC335 — CVE-2024-49138 Exploitation Detected](https://infosecwriteups.com/soc335-cve-2024-49138-exploitation-detected-d039190f202a?source=rss----7b722bfd1b8d---4)\n - [ ] [CSRF in Instagram](https://infosecwriteups.com/csrf-in-instagram-461cbba286a?source=rss----7b722bfd1b8d---4)\n- Security Boulevard\n - [ ] [Authorities Seize 8Base Ransomware Infrastructure, Arrest Four Russians](https://securityboulevard.com/2025/02/authorities-seize-8base-ransomware-infrastructure-arrest-four-russians/)\n - [ ] [The Current State of the CISO with Nick Kakolowski](https://securityboulevard.com/2025/02/the-current-state-of-the-ciso-with-nick-kakolowski/)\n - [ ] [Enhancing IAM Security with AI Agents: A Strategic Approach by SecureFLO](https://securityboulevard.com/2025/02/enhancing-iam-security-with-ai-agents-a-strategic-approach-by-secureflo/)\n - [ ] [Adam Khan on the Unique Security Challenges in Education IT](https://securityboulevard.com/2025/02/adam-khan-on-the-unique-security-challenges-in-education-it/)\n - [ ] [Microsoft’s February 2025 Patch Tuesday Addresses 55 CVEs (CVE-2025-21418, CVE-2025-21391)](https://securityboulevard.com/2025/02/microsofts-february-2025-patch-tuesday-addresses-55-cves-cve-2025-21418-cve-2025-21391/)\n - [ ] [Comic Agilé – Luxshan Ratnaravi, Mikkel Noe-Nygaard – #325 – Fixing the Bug](https://securityboulevard.com/2025/02/comic-agile-luxshan-ratnaravi-mikkel-noe-nygaard-325-fixing-the-bug/)\n - [ ] [The Field Engineer’s Handbook: Configuring an Arista Networks Switch with Splunk](https://securityboulevard.com/2025/02/the-field-engineers-handbook-configuring-an-arista-networks-switch-with-splunk/)\n - [ ] [Navigating Firewall Security Policy Challenges in Technology Organizations: How FireMon Simplifies Complexity](https://securityboulevard.com/2025/02/navigating-firewall-security-policy-challenges-in-technology-organizations-how-firemon-simplifies-complexity-2/)\n - [ ] [Networks hosting botnet C&Cs: Same players, same problems](https://securityboulevard.com/2025/02/networks-hosting-botnet-ccs-same-players-same-problems/)\n - [ ] [News alert: Gcore Radar reveals 56% rise in DDoS attacks – gaming industry targeted the most](https://securityboulevard.com/2025/02/news-alert-gcore-radar-reveals-56-rise-in-ddos-attacks-gaming-industry-targeted-the-most/)\n- GuidePoint Security\n - [ ] [Proposed Changes from the HHS to HIPAA Security Rule](https://www.guidepointsecurity.com/blog/proposed-changes-from-the-hhs-to-hipaa-security-rule/)\n- hn security\n - [ ] [Fault Injection – Looking for a Unicorn](https://security.humanativaspa.it/fault-injection-looking-for-a-unicorn/)\n- Twitter @bytehx\n - [ ] [Re @adrien_jeanneau @yeswehack @Brumens2 Thank you @Brumens2](https://x.com/bytehx343/status/1889347485241581991)\n - [ ] [RT YesWeHack ⠵: XSS is the most common vulnerability, but do you really know how to exploit it? 🤔 In our latest article, we go through everything ...](https://x.com/bytehx343/status/1889335452777542113)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [Selecting A Program for Bug Bounty on HackerOne](https://infosecwriteups.com/selecting-a-program-for-bug-bounty-on-hackerone-e51ce8a83b2a?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Mastering Amass: The Ultimate Recon Toolkit](https://infosecwriteups.com/mastering-amass-the-ultimate-recon-toolkit-d66a56627849?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Finding subdomains that are hidden in the cloud.](https://infosecwriteups.com/finding-subdomains-that-are-hidden-in-the-cloud-ec54412802bf?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Stored XSS into Onclick Event: Bypassing Angle Brackets, Double Quotes, and Escaped Characters —…](https://infosecwriteups.com/stored-xss-into-onclick-event-bypassing-angle-brackets-double-quotes-and-escaped-characters-ee347b9e19d9?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [How to Uncover Hidden Attack Surfaces? Recon part 6](https://infosecwriteups.com/how-to-uncover-hidden-attack-surfaces-recon-part-6-61e43976ed22?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Bug Bounty Target Selection: How Hackers Find the Most Profitable & Juicy Bugs Before Anyone Else!](https://infosecwriteups.com/bug-bounty-target-selection-how-hackers-find-the-most-profitable-juicy-bugs-before-anyone-else-061510e83698?source=rss----7b722bfd1b8d--bug_bounty)\n- VMRay\n - [ ] [January 2025 Detection Highlights: Entrypoint Injection, Hotlinking, and a Robust New Set of Smart Link Detonation Rules](https://www.vmray.com/january-2025-detection-highlights-entrypoint-injection-hotlinking-and-a-robust-new-set-of-smart-link-detonation-rules/)\n- Didier Stevens\n - [ ] [Update: Python Templates Version 0.0.12](https://blog.didierstevens.com/2025/02/11/update-python-templates-version-0-0-12/)\n- Malwarebytes\n - [ ] [Apple fixes zero-day vulnerability used in “extremely sophisticated attack”](https://www.malwarebytes.com/blog/news/2025/02/apple-fixes-zero-day-vulnerability-used-in-extremely-sophisticated-attack)\n - [ ] [Phishing evolves beyond email to become latest Android app threat](https://www.malwarebytes.com/blog/news/2025/02/phishing-evolves-beyond-email-to-become-latest-android-app-threat)\n - [ ] [Apple ordered to grant access to users’ encrypted data](https://www.malwarebytes.com/blog/news/2025/02/apple-ordered-to-grant-access-to-users-encrypted-data)\n- Malware-Traffic-Analysis.net - Blog Entries\n - [ ] [2025-02-10: StrelaStealer infection](https://www.malware-traffic-analysis.net/2025/02/10/index.html)\n- Reverse Engineering\n - [ ] [Fault Injection – Looking for a Unicorn](https://www.reddit.com/r/ReverseEngineering/comments/1imtwu0/fault_injection_looking_for_a_unicorn/)\n- Webroot Blog\n - [ ] [The rising role of cloud-based SIEM in MDR: What MSPs need to know](https://www.webroot.com/blog/2025/02/11/the-rising-role-of-cloud-based-siem-in-mdr-what-msps-need-to-know/)\n- daniel.haxx.se\n - [ ] [disabling cert checks: we have not learned much](https://daniel.haxx.se/blog/2025/02/11/disabling-cert-checks-we-have-not-learned-much/)\n- FreeBuf网络安全行业门户\n - [ ] [xss-labs 靶场详细攻略（附常用payload）](https://www.freebuf.com/articles/web/338123.html)\n - [ ] [中小企业级流量检测实战（第一期）—— Suricata与ELK快速部署](https://www.freebuf.com/articles/network/421334.html)\n - [ ] [【CTF】Flask SSTI姿势与手法总结 Cheatsheet速查表](https://www.freebuf.com/articles/web/421402.html)\n - [ ] [OmniGPT疑似遭入侵：黑客泄露3400万条用户数据](https://www.freebuf.com/news/421517.html)\n - [ ] [苹果紧急修复iOS零日漏洞CVE-2025-24200，已遭黑客利用](https://www.freebuf.com/vuls/421492.html)\n - [ ] [FreeBuf早报 | OpenAI回应账号权限遭出售；黑产团伙专门窃取DeepSeek API密钥](https://www.freebuf.com/news/421453.html)\n - [ ] [DeepSeek遭遇连环攻击，AI 安全何去何从？](https://www.freebuf.com/news/421454.html)\n - [ ] [系统BC远控木马现瞄准Linux，传播勒索软件和信息窃取程序](https://www.freebuf.com/articles/endpoint/421497.html)\n - [ ] [苹果0-Day漏洞被用于“极其复杂”的特性攻击中](https://www.freebuf.com/news/421415.html)\n - [ ] [臭名昭著的8Base勒索软件被查，4名嫌疑人被捕](https://www.freebuf.com/news/421413.html)\n- rtl-sdr.com\n - [ ] [Creating a Software Defined Radio from Tiny Tapeout Chips](https://www.rtl-sdr.com/creating-a-software-defined-radio-from-tiny-tapeout-chips/)\n- HackerNews\n - [ ] [Orthanc 服务器漏洞对美国医疗数据和医疗运营构成风险](https://hackernews.cc/archives/57297)\n - [ ] [美国一男子因攻击美国证券交易委员会 X 账户被捕认罪](https://hackernews.cc/archives/57294)\n - [ ] [苹果修复被用于“极其复杂攻击”的零日漏洞](https://hackernews.cc/archives/57292)\n - [ ] [超过1.2万个 KerioControl 防火墙实例暴露于严重 RCE 漏洞](https://hackernews.cc/archives/57290)\n - [ ] [XE 黑客组织利用 VeraCore 零日漏洞部署持久性 Web 后门](https://hackernews.cc/archives/57287)\n- 绿盟科技技术博客\n - [ ] [当风云卫拥抱DeepSeek发生了哪些（二）：渗透测试多智能体新添深度推理能力](https://blog.nsfocus.net/deepseek2/)\n - [ ] [当风云卫拥抱DeepSeek发生了哪些（一）：DeepSeek-R1安全告警分析实测获三高](https://blog.nsfocus.net/deepseek1/)\n- Shostack & Friends Blog\n - [ ] [Talk at CERIAS](https://shostack.org/blog/risk-talk-cerias/)\n- 威努特安全网络\n - [ ] [威努特超融合底座—助力高速行业数字化蓬勃发展](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131087&idx=1&sn=37c63ce1a27bb99f669473600f34386a&chksm=80e7167fb7909f693a6090946ddde9a4956980cff8ed07a4b4928457f023972b21a02e0e17e6&scene=58&subscene=0#rd)\n - [ ] [5G智慧钢厂丨威努特打造一体化高效稳定融合通信网络](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131054&idx=1&sn=cef2c6a655a23f7de620bf8d206af073&chksm=80e7161eb7909f0841bd994361b7bce96ffa1fc9609b4fd8b6fc9e355fba66ced4252c4451ad&scene=58&subscene=0#rd)\n- 奇客Solidot–传递最新科技情报\n - [ ] [DeepSeek AI 训练成本并不低](https://www.solidot.org/story?sid=80531)\n - [ ] [上海自研 GLP-1 糖尿病新药批准上市](https://www.solidot.org/story?sid=80530)\n - [ ] [微软研究发现 AI 可能会导致人类认知能力退化](https://www.solidot.org/story?sid=80529)\n - [ ] [美国优秀 AI 人才四成来自中国](https://www.solidot.org/story?sid=80528)\n - [ ] [OpenAI 预计数个月内完成自研 AI 芯片的设计](https://www.solidot.org/story?sid=80527)\n - [ ] [对国内大学生的研究发现锻炼有助于减轻网瘾症状](https://www.solidot.org/story?sid=80526)\n - [ ] [科学家发现宇宙最大结构 Quipu](https://www.solidot.org/story?sid=80525)\n - [ ] [感染 COVID-19 可能加速大脑衰老四年](https://www.solidot.org/story?sid=80524)\n - [ ] [地球内核并非完全固态](https://www.solidot.org/story?sid=80523)\n - [ ] [TikTok 鼓励美国 Android 用户通过其官网下载 APK](https://www.solidot.org/story?sid=80522)\n- 安全牛\n - [ ] [美国有史以来最大、最严重的数据泄露事件？马斯克DOGE访问权引发安全担忧；黑客承认入侵SEC的X账户并发布虚假消息 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135067&idx=1&sn=2b5edaeaaa50de622ed435f5b3ad50b8&chksm=bd15ac888a62259eafc567adfb653b57cf110e1baab4ec223fba39075db1f619238835f1a41d&scene=58&subscene=0#rd)\n - [ ] [AI驱动的安全漏洞发现正在重塑网络安全新模式](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135067&idx=2&sn=032f618504363a24b36aa09bcb1de2a2&chksm=bd15ac888a62259e61b14206dac39f8a213fb4031c342f061005fb16700abd7913ab52bd129e&scene=58&subscene=0#rd)\n- 看雪学苑\n - [ ] [炸弹指令何处来？](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589455&idx=1&sn=a9caaef34d3f907a54a42d1846408b82&chksm=b18c298586fba093e99a2b4c5bd1860b116df49868dea6a05386fa7e18fcdb467f4f49b41330&scene=58&subscene=0#rd)\n - [ ] [科锐软件逆向52期预科班、正式班开始火爆招生报名啦！！！](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589455&idx=2&sn=372490e4eaeab725d4d6c54d3e805886&chksm=b18c298586fba0932b42b71c86900af74d4f06c2b02dedce84260f347695400a09d9e75f62dd&scene=58&subscene=0#rd)\n - [ ] [8Base勒索软件团伙在普吉岛被端，4名嫌疑人被捕](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589455&idx=3&sn=432c3ce898f4a9df66be0a9d7986bdbd&chksm=b18c298586fba0939d86d4a0b1717f7e6ac8ebe035606b3c6a8f61d73d8a0a1dc023a8572d88&scene=58&subscene=0#rd)\n- 代码卫士\n - [ ] [微软扩展Copilot AI漏洞奖励计划范围，提高赏金](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522200&idx=1&sn=7bf07566564fbc663142355517974f16&chksm=ea94a6f2dde32fe494139aa68b283b850ad2abbaccfe22f1ead83704b179669c431a4e4e3f47&scene=58&subscene=0#rd)\n - [ ] [苹果紧急修复被用于“极其复杂”攻击中的0day漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522200&idx=2&sn=a8084137286ce6cbebda935ab8c0d5c2&chksm=ea94a6f2dde32fe49daed48eb8edd329d603e903408e746f6d6d111473da1914de662d214989&scene=58&subscene=0#rd)\n- 青衣十三楼飞花堂\n - [ ] [随缘](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247487981&idx=1&sn=c39525d44fce72a769386b8769bdc873&chksm=fab2d2d2cdc55bc404a206bc436bc21fdbfc8eeeff75acb7c7c0c7c7593045ecdb8c1e6fc642&scene=58&subscene=0#rd)\n- 安全内参\n - [ ] [安全厂商警告2000万个OpenAI账号权限遭出售，官方回应](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513699&idx=1&sn=e08bed77ab557ac45630a406e606dd01&chksm=ebfaf143dc8d78557a204ac16c2befded19062d26529da67a721df0db771bd68e243af01f6fc&scene=58&subscene=0#rd)\n - [ ] [日本政府推进主动网络防御，授权军警可摧毁敌方服务器](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513699&idx=2&sn=76d3123c95cfe36b0ce17df2a21b2476&chksm=ebfaf143dc8d78551b7ec3a65ba50915b57f00bb87707edabe3e00684b5e992e096df47909cd&scene=58&subscene=0#rd)\n- dotNet安全矩阵\n - [ ] [.NET 代码审计：发现某企业级 OA 系统中任意文件下载漏洞](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498871&idx=1&sn=d261fad92b90cc79e3796f377d25a658&chksm=fa59529acd2edb8c7e6332dfcada6233d17fd489271cb6a618488ca71747042ade56663166af&scene=58&subscene=0#rd)\n - [ ] [国内最专业、最全面的 [ .NET 代码审计 ] 体系化学习交流社区](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498871&idx=2&sn=8674cdd452f616f2408dc7eec628c2a1&chksm=fa59529acd2edb8c6b9c47f8e9f7cddba6abd397839a54e2578f94b77d0e7dda575a647c0549&scene=58&subscene=0#rd)\n - [ ] [内网获取用户哈希，通过 Sharp4GetNTLM 实现 NTLM 降级攻击](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498871&idx=3&sn=c852f97b1b4e6f12bdaabff47d22182f&chksm=fa59529acd2edb8c4429e812f76e904e2935b331c594f2260bf5740f9218a14f6a4b577949d9&scene=58&subscene=0#rd)\n- 丁爸 情报分析师的工具箱\n - [ ] [【资料】如何成为一名情报分析师？](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148961&idx=1&sn=796f42dcd356bff9f36c01ae75528679&chksm=f1af259bc6d8ac8d56e47bb0fcfc8be86ac73908aeef0826cf0963f065c3ca039fe913ba32f2&scene=58&subscene=0#rd)\n - [ ] [​【论文】情报和恐怖分子的“心脏”：发现和应对恐怖战术的管理系统](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148961&idx=2&sn=ba5e02330b9a40fb5c9a31cf1b322201&chksm=f1af259bc6d8ac8dbf8d2b12145882bc81a52d6e09fce0dde3a4df6cf2750e380e66b4bfddb8&scene=58&subscene=0#rd)\n- 吾爱破解论坛\n - [ ] [【2025春节】解题领红包活动倒计时——最后两天！](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141708&idx=1&sn=e4b9e15585376a9c02967fd36df609e7&chksm=bd50a6188a272f0e1bce859cb357ff77c8e2920b88be248b8d56aa22dd72508d44bf33115808&scene=58&subscene=0#rd)\n- 数世咨询\n - [ ] [整合安全工具集的五大理由](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247535791&idx=1&sn=820c52eb1de6eda93e24ba28280f6df4&chksm=c1443e12f633b704b32a7f52ed993dfdc0f2e0b7a3a6e982e4a16f62c3169b7d3eb82de61e38&scene=58&subscene=0#rd)\n - [ ] [DeepSeek火了，大模型的原生安全怎么做？](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247535791&idx=2&sn=05ddc997e31835baddca9e6f40357483&chksm=c1443e12f633b704b67ae77ff5b4cea40c3daabd3ccaf6d2ca661592034a36b29e0cb6e2fb41&scene=58&subscene=0#rd)\n- 网络空间安全科学学报\n - [ ] [“智能身份认证”专题征稿](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505040&idx=1&sn=fcc190c91315e23fcd0df68b5498514a&chksm=e9bfc02edec84938f50c14845d2c50f8542e461352080334d407baacce2c0104e579193623cb&scene=58&subscene=0#rd)\n- 安全分析与研究\n - [ ] [恶意样本动态调试-下](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490447&idx=1&sn=c7cf5c60d80febdcde3d62e977e3b04b&chksm=902fb4a7a7583db1421da7bebe0319e6670cc2ae7cee63df93330435eb892ce6e851ddc34080&scene=58&subscene=0#rd)\n - [ ] [BlueSky勒索病毒攻击](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490447&idx=2&sn=0703d696ace333f4a65b0923359c20eb&chksm=902fb4a7a7583db19c0ba8a5224d1a6836bc73108eaf8411b65ca47aa07a0c442e9cca50b1c4&scene=58&subscene=0#rd)\n - [ ] [Fag勒索病毒攻击](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490447&idx=3&sn=45563e8a4b1d5e96e6c330db05949203&chksm=902fb4a7a7583db1e1bfd25f4bbafcf1186e85553be70851a9bbc57cc02ebfa23fbe14cf8dd9&scene=58&subscene=0#rd)\n - [ ] [Afire勒索病毒攻击](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490447&idx=4&sn=9bfc4a15b00ef33944d6a6d8d4abcc08&chksm=902fb4a7a7583db1f90a848869d857dfc56644b194359bf0eaf817bc317d3168a61f95dd6128&scene=58&subscene=0#rd)\n - [ ] [Albabat勒索病毒攻击](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490447&idx=5&sn=69e7f96c16c1e5a0df4e72d66cf88881&chksm=902fb4a7a7583db1f9f317c29a34d85fc85513d13c20c8604e8e6f9e7738c63c1d57a1a06fe1&scene=58&subscene=0#rd)\n- 信息安全国家工程研究中心\n - [ ] [《公共安全视频图像信息系统管理条例》发布](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498848&idx=1&sn=ca0142e6bf268c8ac788b3158aa58683&chksm=feb67d73c9c1f4654b47a149ae704dc0a6506269717c8c7cc3aff11d41fcfc380b208e8d0695&scene=58&subscene=0#rd)\n- 中国信息安全\n - [ ] [新赛道 | 启明星辰发布MAF大模型应用防火墙产品，提升DeepSeek类企业用户安全](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236408&idx=1&sn=fda66ccd9a00a3fc877870161835d2b7&chksm=8b580781bc2f8e97bfbf21f194399745d95ccf34e9f0678fe897a5405ec3236c73943ae7f1d3&scene=58&subscene=0#rd)\n - [ ] [专家观点 | 鲁传颖：人工智能重塑国家安全的范式和逻辑](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236408&idx=2&sn=09b33daa9ebd26df49b1e1aae88463a3&chksm=8b580781bc2f8e97c317728b47f6c11cb40d4bed4e725b448084b027980c0f7fdb0c8a0834bc&scene=58&subscene=0#rd)\n - [ ] [专家解读 | 以“少而精”“小而准”举措 降低数据流通安全治理成本](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236408&idx=3&sn=e8c1db916f05ebfbf5dc2bd609ef9880&chksm=8b580781bc2f8e979187d833ec37379a794c5925de1a6c2b3b4d1d7eb3b8a7914dc663d8d2ac&scene=58&subscene=0#rd)\n - [ ] [外交部：中方主张开源人工智能技术，实现各国共享智能红利](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236408&idx=4&sn=e8f28adad19f3526a324812e47b1b4fa&chksm=8b580781bc2f8e972feb7b3ce203fb44197615f709f2dc7bf71df15318b16a9cf86e40468a5f&scene=58&subscene=0#rd)\n - [ ] [国际 | 泰国出台措施打击电信诈骗](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236408&idx=5&sn=e0cfcf469417676f86a75b0d041193d3&chksm=8b580781bc2f8e97cc6a4a7bc563a8caa9995226bd9929ab166296a3ef3a08f8b60c6961210b&scene=58&subscene=0#rd)\n - [ ] [评论 | 筑牢人工智能安全防火墙](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236408&idx=6&sn=23fd1dfffd9bede882c177d94c558adc&chksm=8b580781bc2f8e979fbba2812cbb20188bbee7a862ba661bb60f62cfa15e66c3926d0462963e&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [【深度解局】法国AI行动峰会！法印联盟竟想掀翻中美牌桌？](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559624&idx=1&sn=4d1d4066a7b9d0c83961c05e9be97d13&chksm=87117ac3b066f3d5a9671b437c5595132dc471d1422aea2e340afa5a2741dde8ce751f4723b0&scene=58&subscene=0#rd)\n - [ ] [德国2025大选：政治风云再起，谁将主导欧洲心脏？](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559624&idx=2&sn=983aaa1b1ec8b735dbd1f971fe2075d5&chksm=87117ac3b066f3d50ca841a4649e82972a2f521cc06a6fff5dcf74c291a92c165fb62507e0fa&scene=58&subscene=0#rd)\n- 嘶吼专业版\n - [ ] [新型 Aquabotv3 勒索软件利用 Mitel 命令注入漏洞发起攻击](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581088&idx=1&sn=6f659e38152e18f130196a1c00b075df&chksm=e9146d9ade63e48ca17d4b701dad4ace777dd6c60ca7e49f2b1d7ed66e41688ff1922c4e54dd&scene=58&subscene=0#rd)\n - [ ] [一图读懂 | 关于完善数据流通安全治理 更好促进数据要素市场化价值化的实施方案](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581088&idx=2&sn=b3057c776e9314f94a9e693c2a36825c&chksm=e9146d9ade63e48c2108aa37d68c7b974f72be9c9ac8a75c614687359932f42e24b985c536d6&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [下探到 7 万，比亚迪把「智驾溢价」打没了](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073593&idx=1&sn=0baae0f150411d0630c12103b60f3f3b&chksm=7e57cd0f4920441907d81d44ebb839162fe6d732dc94c0a8f1b2f6b4e3dd311b8c002617a635&scene=58&subscene=0#rd)\n - [ ] [马斯克提出 974 亿美元收购 OpenAI；百度文小言接入 Deepseek；《武林外传》将上线二十周年纪念版 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073580&idx=1&sn=d44c5a95b0dc2210f851981a6e324023&chksm=7e57cd1a4920440c85234e1349f7e160991ecee5282aa69a4631316087e967c94abd9ef8e893&scene=58&subscene=0#rd)\n- 阿里安全响应中心\n - [ ] [先知通用软件漏洞收集及奖励计划第六期 正式开始！](https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652997301&idx=1&sn=09bd4de58c5c588576a09927ad5248f8&chksm=8c9e09e2bbe980f403539ec52854902747f4f3f5a614d45ecf4d0c81b11d322260a0270339b3&scene=58&subscene=0#rd)\n- 安全圈\n - [ ] [【安全圈】Deepseek 安全故障：AI 网络防御的未来将何去何从？](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067763&idx=1&sn=1a4ec6efad507af3a0732a4e315a923e&chksm=f36e7bf3c419f2e5a51bae9f66058ff235936a9a25a9de79ca4e735afb04b9f72242952e084f&scene=58&subscene=0#rd)\n - [ ] [【安全圈】苹果修复了在“极其复杂”的攻击中被利用的零日漏洞](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067763&idx=2&sn=6f436c8b629c5b79837b0940cb025969&chksm=f36e7bf3c419f2e5f88fddf5bf9e3baa0788caae324cc1abe361faee4d27bcb20472812e22dd&scene=58&subscene=0#rd)\n - [ ] [【安全圈】8Base 勒索软件暗网网站被查封，四名运营商被捕](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067763&idx=3&sn=126c23369d2e838e5a4b821c468123d2&chksm=f36e7bf3c419f2e5aaa0f430b3a1bbc20f8dd49ad782f598316c6893870209b07fb2765dc5c3&scene=58&subscene=0#rd)\n - [ ] [【安全圈】涉嫌伪造SEC帖子背后的黑客可能会在认罪协议中没收5万美元](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067763&idx=4&sn=6bc70ff732a53d900048d66f15a3b44a&chksm=f36e7bf3c419f2e561879868ab5e9c1a0cd6f19f9167a734afb1d79f283f8568aa8b40946cde&scene=58&subscene=0#rd)\n- 360数字安全\n - [ ] [独家|360发布全球高级威胁研究报告：我国14大重点行业面临境外APT威胁](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579509&idx=1&sn=0b56794720b224bd3af0dd6bead2f1e6&chksm=9f8d277da8faae6ba0521ed0550bad806c0a0d91b7bd77d7c65be9d6ac12b1cf99a0c7961389&scene=58&subscene=0#rd)\n - [ ] [深度解读 | 六部门印发方案，要求完善数据流通安全治理](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579509&idx=2&sn=3f427fd100d4c28ebe43ddf4ca051187&chksm=9f8d277da8faae6b947c3db3a90e092c07275df97a4e118e09707aeaaabfb33c2b63dc313a10&scene=58&subscene=0#rd)\n- 字节跳动技术团队\n - [ ] [AI 与星辰大海：2025，从新手到开挂勇士的奇幻旅程](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513244&idx=1&sn=055cba5f623eb2e791d5f632df7937d8&chksm=e9d37f7edea4f6685d1a1bc9b541acd1ba853415aebdeefc99bc28e4b4537dff7d81ba62555b&scene=58&subscene=0#rd)\n- 青藤智库\n - [ ] [EDR技术革命：从被动防御到智能反制的进化之路](https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489341&idx=1&sn=dfcada3265816f7fe620d778b2962533&chksm=fa58b506cd2f3c1023352f630b5f2670dc7054ca49f43e69c6599ad60507d4d3cb06f3100bc9&scene=58&subscene=0#rd)\n- ICT Security Magazine\n - [ ] [Threat actors made in China](https://www.ictsecuritymagazine.com/articoli/threat-actors-made-in-china/)\n- DARKNAVY\n - [ ] [「深蓝洞察」2024年度最狂躁不安的漏洞](https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247486838&idx=1&sn=2eaf81a0e3a11a2a5a3aa79ff165f19d&chksm=c1f449bef683c0a89858e91ff419da0a8b461d180aedcb33a2a25b3984d067dd401255bacadf&scene=58&subscene=0#rd)\n- RedTeam\n - [ ] [从 IAM 松散管理到零信任架构：Sendbird AWS 安全实战演进实录](https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484070&idx=1&sn=183c6569561febbd5b919e8496dc65f3&chksm=c006ca56f7714340d02c223a0b9e81cb9306f6fad5f7b304ce4295583d75777110b0f346b19c&scene=58&subscene=0#rd)\n- TrustedSec\n - [ ] [From RAGs to Riches: Using LLMs and RAGs to Enhance Your Ops](https://trustedsec.com/blog/from-rags-to-riches-using-llms-and-rags-to-enhance-your-ops)\n- 迪哥讲事\n - [ ] [记一次卑微的渗透测试](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497069&idx=1&sn=5d1df54873a6a3a04185d317220298ba&chksm=e8a5ff0edfd27618b42c11f47bb9c4b8eefa860d92e11f43d70e0b01ec88987b5df820ef8ada&scene=58&subscene=0#rd)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #745: Solving the windows hello challenge part 1](https://www.hecfblog.com/2025/02/daily-blog-745-solving-windows-hello.html)\n- Have I Been Pwned latest breaches\n - [ ] [LandAirSea - 337,373 breached accounts](https://haveibeenpwned.com/PwnedWebsites#LandAirSea)\n- Full Disclosure\n - [ ] [APPLE-SA-02-10-2025-2 iPadOS 17.7.5](https://seclists.org/fulldisclosure/2025/Feb/8)\n - [ ] [APPLE-SA-02-10-2025-1 iOS 18.3.1 and iPadOS 18.3.1](https://seclists.org/fulldisclosure/2025/Feb/7)\n - [ ] [CVE-2024-55447: Access Control in Paxton Net2 software (update)](https://seclists.org/fulldisclosure/2025/Feb/6)\n - [ ] [ChatGPT AI finds \"security concern\" (XSS) in DeepSeek's code](https://seclists.org/fulldisclosure/2025/Feb/5)\n- Securityinfo.it\n - [ ] [Apple rilascia un fix per un bug 0-day già sfruttato](https://www.securityinfo.it/2025/02/11/apple-rilascia-un-fix-per-un-bug-0-day-gia-sfruttato/?utm_source=rss&utm_medium=rss&utm_campaign=apple-rilascia-un-fix-per-un-bug-0-day-gia-sfruttato)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Arizona woman pleads guilty to running laptop farm for N. Korean IT workers, faces 9-year sentence](https://therecord.media/arizona-woman-pleads-guilty-north-korean-laptop-farm)\n - [ ] [Apple fixes security flaw allowing third-party access to locked devices](https://therecord.media/apple-ios-vulnerability-citizen-lab)\n - [ ] [Windows 10 KB5051974 update force installs new Microsoft Outlook app](https://www.bleepingcomputer.com/news/microsoft/windows-10-kb5051974-update-force-installs-new-microsoft-outlook-app/)\n - [ ] [Microsoft Patch Tuesday for February 2025 — Snort rules and prominent vulnerabilities](https://blog.talosintelligence.com/february-patch-tuesday-release/)\n - [ ] [Russian bulletproof hosting service Zservers sanctioned by US for LockBit coordination](https://therecord.media/zservers-russia-bulletproof-hosting-us-uk-sanctions)\n - [ ] [Windows 11 KB5051987 & KB5051989 cumulative updates released](https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5051987-and-kb5051989-cumulative-updates-released/)\n - [ ] [Fortinet warns of new zero-day exploited to hijack firewalls](https://www.bleepingcomputer.com/news/security/fortinet-warns-of-new-zero-day-exploited-to-hijack-firewalls/)\n - [ ] [Microsoft February 2025 Patch Tuesday fixes 4 zero-days, 55 flaws](https://www.bleepingcomputer.com/news/microsoft/microsoft-february-2025-patch-tuesday-fixes-4-zero-days-55-flaws/)\n - [ ] [Lawsuit accuses Trump administration of violating federal information security law](https://therecord.media/doge-lawsuit-alleged-information-security-violations)\n - [ ] [Another person targeted by Paragon spyware comes forward](https://techcrunch.com/2025/02/11/another-person-targeted-by-paragon-spyware-comes-forward/)\n - [ ] [The Company Man: Binance exec detained in Nigeria breaks his silence](https://therecord.media/binance-exec-tigran-gambaryan-breaks-his-silence)\n - [ ] [Changing Windows Passwords in the Most Complex Way](https://decoder.cloud/2025/02/11/changing-windows-passwords-in-the-most-complex-way/)\n - [ ] [SonicWall firewall exploit lets hackers hijack VPN sessions, patch now](https://www.bleepingcomputer.com/news/security/sonicwall-firewall-exploit-lets-hackers-hijack-vpn-sessions-patch-now/)\n - [ ] [Russian military hackers deploy malicious Windows activators in Ukraine](https://www.bleepingcomputer.com/news/security/russian-military-hackers-deploy-malicious-windows-activators-in-ukraine/)\n - [ ] [The Future of Predictive Security: A Manifesto](https://bfore.ai/the-future-of-predictive-security-a-manifesto/)\n - [ ] [AI Action Summit: l’Ue scommette su InvestAI e crea il Cern dell’intelligenza artificiale](https://www.cybersecurity360.it/news/ai-action-summit-la-ue-scommette-su-investai-per-creare-il-cern-dellintelligenza-artificiale/)\n - [ ] [Il CISO](https://roccosicilia.com/2025/02/11/il-ciso/)\n - [ ] [PowerSchool breach exposed special education status, mental health data and parent restraining orders](https://therecord.media/powerschool-breach-exposed-special-ed-status-mental-health-data)\n - [ ] [Two Russian nationals arrested in takedown of Phobos ransomware infrastructure](https://therecord.media/phobos-ransomware-takedown-arrests-russian-nationals)\n - [ ] [Implementazione della NIS 2: un piano d’azione per il DPO](https://www.cybersecurity360.it/legal/implementazione-della-nis-2-un-piano-dazione-per-il-dpo/)\n - [ ] [Police arrests 2 Phobos ransomware suspects, seizes 8Base sites](https://www.bleepingcomputer.com/news/legal/police-arrests-2-phobos-ransomware-suspects-seizes-8base-sites/)\n - [ ] [US indicts 8Base ransomware operators for Phobos encryption attacks](https://www.bleepingcomputer.com/news/security/us-indicts-8base-ransomware-operators-for-phobos-encryption-attacks/)\n - [ ] [Il Regno Unito sfida Apple: una backdoor nei sistemi crittografici. I possibili impatti](https://www.cybersecurity360.it/news/il-regno-unito-sfida-apple-ordinata-la-creazione-di-una-backdoor-nei-sistemi-di-crittografia/)\n - [ ] [US sanctions LockBit ransomware’s bulletproof hosting provider](https://www.bleepingcomputer.com/news/security/us-sanctions-lockbit-ransomwares-bulletproof-hosting-provider/)\n - [ ] [RATatouille: Cooking Up Chaos in the I2P Kitchen](https://blog.sekoia.io/ratatouille-cooking-up-chaos-in-the-i2p-kitchen/)\n - [ ] [Exclusive: Data breach at SimonMed: the Medusa group demands a $1 million ransom, exposing at least 132.173 people, including patients and employees](https://www.suspectfile.com/exclusive-data-breach-at-simonmed-the-medusa-group-demands-a-1-million-ransom-exposing-at-least-132-173-people-including-patients-and-employees/)\n - [ ] [Cyber Security Agency of Singapore Alerts Users on Active Exploitation of Zero-Day Vulnerability in Apple Products](https://cyble.com/blog/csa-alerts-users-of-cve-2025-24200/)\n - [ ] [!exploitable Episode One - Breaking IoT](https://blog.doyensec.com/2025/02/11/exploitable-iot.html)\n - [ ] [I Used a Sandbox to Strengthen Bank’s Security—Here’s How It Worked](https://any.run/cybersecurity-blog/how-investment-bank-improved-security/)\n - [ ] [EFCC Witness Exposes Shocking Details of Cyber Terrorism and Internet Fraud Scheme](https://cyble.com/blog/efcc-witness-details-cyber-terrorism/)\n - [ ] [Safer Internet Day 2025: per una rete più sicura serve un cambio di prospettiva](https://www.cybersecurity360.it/news/safer-internet-day-2025-per-una-rete-piu-sicura-serve-un-cambio-di-prospettiva/)\n - [ ] [Apple rilascia un fix per un bug 0-day già sfruttato](https://www.securityinfo.it/2025/02/11/apple-rilascia-un-fix-per-un-bug-0-day-gia-sfruttato/)\n - [ ] [Dalla fiducia alla sicurezza: come gestire il rischio di terze parti](https://www.cybersecurity360.it/outlook/come-gestire-il-rischio-di-terze-parti/)\n - [ ] [Fault Injection – Looking for a Unicorn](https://security.humanativaspa.it/fault-injection-looking-for-a-unicorn/)\n - [ ] [Stealthy AD CS Reconnaissance](https://blog.compass-security.com/2025/02/stealthy-ad-cs-reconnaissance/)\n - [ ] [Evil Crow RF: A Portable Radio Frequency Device](https://www.mobile-hacker.com/2025/02/11/evil-crow-rf-a-portable-radio-frequency-device/)\n - [ ] [LandAirSea - 337,373 breached accounts](https://haveibeenpwned.com/PwnedWebsites#LandAirSea)\n - [ ] [Over 12,000 KerioControl firewalls exposed to exploited RCE flaw](https://www.bleepingcomputer.com/news/security/over-12-000-keriocontrol-firewalls-exposed-to-exploited-rce-flaw/)\n- Schneier on Security\n - [ ] [Trusted Encryption Environments](https://www.schneier.com/blog/archives/2025/02/trusted-encryption-environments.html)\n- Posts By SpecterOps Team Members - Medium\n - [ ] [Enhancements for BloodHound v7.0 Provide Fresh User Experience and Attack Path Risk Optimizations](https://posts.specterops.io/enhancements-for-bloodhound-v7-0-provide-fresh-user-experience-and-attack-path-risk-optimizations-525dae030ec5?source=rss----f05f8696e3cc---4)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Microsoft February 2025 Patch Tuesday, (Tue, Feb 11th)](https://isc.sans.edu/diary/rss/31674)\n - [ ] [ISC Stormcast For Tuesday, February 11th, 2025 https://isc.sans.edu/podcastdetail/9318, (Tue, Feb 11th)](https://isc.sans.edu/diary/rss/31672)\n- Tor Project blog\n - [ ] [New Alpha Release: Tor Browser 14.5a3](https://blog.torproject.org/new-alpha-release-tor-browser-145a3/)\n- The Hacker News\n - [ ] [Google Confirms Android SafetyCore Enables AI-Powered On-Device Content Classification](https://thehackernews.com/2025/02/google-confirms-android-safetycore.html)\n - [ ] [4 Ways to Keep MFA From Becoming too Much of a Good Thing](https://thehackernews.com/2025/02/4-ways-to-keep-mfa-from-becoming-too.html)\n - [ ] [Progress Software Patches High-Severity LoadMaster Flaws Affecting Multiple Versions](https://thehackernews.com/2025/02/progress-software-patches-high-severity.html)\n - [ ] [Gcore DDoS Radar Reveals 56% YoY Increase in DDoS Attacks](https://thehackernews.com/2025/02/gcore-ddos-radar-reveals-56-yoy.html)\n - [ ] [Apple Patches Actively Exploited iOS Zero-Day CVE-2025-24200 in Emergency Update](https://thehackernews.com/2025/02/apple-patches-actively-exploited-ios.html)\n - [ ] [Protecting Your Software Supply Chain: Assessing the Risks Before Deployment](https://thehackernews.com/2025/02/protecting-your-software-supply-chain.html)\n - [ ] [Threat Actors Exploit ClickFix to Deploy NetSupport RAT in Latest Cyber Attacks](https://thehackernews.com/2025/02/threat-actors-exploit-clickfix-to.html)\n - [ ] [FBI, Europol, and NCA Take Down 8Base Ransomware Data Leak and Negotiation Sites](https://thehackernews.com/2025/02/8base-ransomware-data-leak-sites-seized.html)\n- Security Affairs\n - [ ] [Attackers exploit a new zero-day to hijack Fortinet firewalls](https://securityaffairs.com/174117/hacking/fortinet-fortios-zero-day-exploited.html)\n - [ ] [OpenSSL patched high-severity flaw CVE-2024-12797](https://securityaffairs.com/174111/security/openssl-patched-the-vulnerability-cve-2024-12797.html)\n - [ ] [Progress Software fixed multiple high-severity LoadMaster flaws](https://securityaffairs.com/174103/security/progress-software-loadmaster-software-flaws.html)\n - [ ] [Artificial intelligence (AI) as an Enabler for Enhanced Data Security](https://securityaffairs.com/174095/security/artificial-intelligence-enhanced-data-security.html)\n - [ ] [Crooks use Google Tag Manager skimmer to steal credit card data from a Magento-based e-stores](https://securityaffairs.com/174085/cyber-crime/google-tag-manager-gtm-e-skimmer-software-in-magento.html)\n - [ ] [Operation Phobos Aetor: Police dismantled 8Base ransomware gang](https://securityaffairs.com/174078/cyber-crime/police-dismantled-8base-ransomware-gang.html)\n- Computer Forensics\n - [ ] [Is there any way where IOCs and Evidences can be fetched automatically on DFIR IRIS?](https://www.reddit.com/r/computerforensics/comments/1imtyfd/is_there_any_way_where_iocs_and_evidences_can_be/)\n - [ ] [Super basic question…](https://www.reddit.com/r/computerforensics/comments/1impg89/super_basic_question/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [Build Your Own Offensive Security Lab A Step-by-Step Guide with Ludus](https://www.reddit.com/r/netsecstudents/comments/1imuc6x/build_your_own_offensive_security_lab_a/)\n- Deep Web\n - [ ] [Reminder: Bitcoin \"Mixing\" doesn't work anymore. Only use Monero.](https://www.reddit.com/r/deepweb/comments/1imx6kg/reminder_bitcoin_mixing_doesnt_work_anymore_only/)\n - [ ] [Am I getting scammed?](https://www.reddit.com/r/deepweb/comments/1in0dzz/am_i_getting_scammed/)\n- Deeplinks\n - [ ] [EFF Sues OPM, DOGE and Musk for Endangering the Privacy of Millions](https://www.eff.org/press/releases/eff-sues-opm-doge-and-musk-endangering-privacy-millions)\n - [ ] [The TAKE IT DOWN Act: A Flawed Attempt to Protect Victims That Will Lead to Censorship](https://www.eff.org/deeplinks/2025/02/take-it-down-act-flawed-attempt-protect-victims-will-lead-censorship)\n - [ ] [EFF Sues DOGE and the Office of Personnel Management to Halt Ransacking of Federal Data](https://www.eff.org/deeplinks/2025/02/eff-sues-doge-and-office-personnel-management-halt-ransacking-federal-data)\n - [ ] [Building a Community Privacy Plan](https://www.eff.org/deeplinks/2025/02/building-community-privacy-plan)\n - [ ] [Privacy Loves Company](https://www.eff.org/deeplinks/2025/02/privacy-loves-company)\n- Your Open Hacker Community\n - [ ] [What to do after reverse shell?](https://www.reddit.com/r/HowToHack/comments/1imzsip/what_to_do_after_reverse_shell/)\n - [ ] [HDMI-CEC exploitation!](https://www.reddit.com/r/HowToHack/comments/1in7943/hdmicec_exploitation/)\n - [ ] [Weird question maybe ?](https://www.reddit.com/r/HowToHack/comments/1imuwod/weird_question_maybe/)\n - [ ] [Noredink](https://www.reddit.com/r/HowToHack/comments/1imollf/noredink/)\n - [ ] [help to decrypt this hash pls](https://www.reddit.com/r/HowToHack/comments/1imo29k/help_to_decrypt_this_hash_pls/)\n - [ ] [Where do I start?](https://www.reddit.com/r/HowToHack/comments/1imm9ea/where_do_i_start/)\n- Technical Information Security Content & Discussion\n - [ ] [PsExec’ing the right way and why zero trust is mandatory](https://www.reddit.com/r/netsec/comments/1in1np1/psexecing_the_right_way_and_why_zero_trust_is/)\n - [ ] [CVE-2025-0693: AWS IAM User Enumeration](https://www.reddit.com/r/netsec/comments/1in52vb/cve20250693_aws_iam_user_enumeration/)\n - [ ] [How auto-generated passwords in Sitevision leads to signing key leakage - CVE-2022-35202](https://www.reddit.com/r/netsec/comments/1in8xnb/how_autogenerated_passwords_in_sitevision_leads/)\n - [ ] [Build Your Own Offensive Security Lab A Step-by-Step Guide with Ludus](https://www.reddit.com/r/netsec/comments/1imt27h/build_your_own_offensive_security_lab_a/)\n - [ ] [Exploring a VPN Appliance: A Researcher’s Journey](https://www.reddit.com/r/netsec/comments/1in1wa9/exploring_a_vpn_appliance_a_researchers_journey/)\n - [ ] [Tenda AC15 CVE-2020-13393 Exploit (!exploitable episode one)](https://www.reddit.com/r/netsec/comments/1in15r3/tenda_ac15_cve202013393_exploit_exploitable/)\n - [ ] [Evil Crow RF: A Portable Radio Frequency Device compatible with Flipper Zero Sub-GHz file format](https://www.reddit.com/r/netsec/comments/1imtc8m/evil_crow_rf_a_portable_radio_frequency_device/)\n - [ ] [Fault Injection – Looking for a Unicorn](https://www.reddit.com/r/netsec/comments/1imtwnf/fault_injection_looking_for_a_unicorn/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [PlayStation, KerioControl, SEC SimSWAP, 8base, Copilot, AI, Bird, Josh Marpet... - SWN #450](http://sites.libsyn.com/18678/playstation-keriocontrol-sec-simswap-8base-copilot-ai-bird-josh-marpet-swn-450)\n - [ ] [Code Scanning That Works With Your Code - Scott Norberg - ASW #317](http://sites.libsyn.com/18678/code-scanning-that-works-with-your-code-scott-norberg-asw-317)\n"}}, "archive/daily/2025/2025-05-10.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747311.4505532, "n": 50384, "h": "42dccd569cc015c6", "c": "# 每日安全资讯（2025-05-10）\n\n- Tenable Blog\n - [ ] [Cybersecurity Snapshot: U.K. NCSC’s Best Cyber Advice on AI Security, the Quantum Threat, API Risks, Mobile Malware and More](https://www.tenable.com/blog/cybersecurity-snapshot-best-practices-ai-security-quantum-cryptography-api-security-cyber-governance-05-09-2025)\n- paper - Last paper\n - [ ] [利用通信攻击对基于 LLM 的多智能体系统进行渗透测试](https://paper.seebug.org/3319/)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [2025Q1企业邮箱安全报告：三大威胁升级，揭秘应对之法](https://www.4hou.com/posts/l0gg)\n - [ ] [【附下载】重庆信通设计院：150+AI 大模型安全常用术语解析](https://www.4hou.com/posts/kgLN)\n - [ ] [超过1200个SAP NetWeaver服务器容易受到主动利用漏洞的攻击](https://www.4hou.com/posts/QXG0)\n - [ ] [随着全球紧张局势加剧，针对能源行业的网络威胁激增](https://www.4hou.com/posts/1MDm)\n - [ ] [中央网信办开展 “清朗·整治AI技术滥用” 专项行动](https://www.4hou.com/posts/jBKP)\n- InfoSec Write-ups - Medium\n - [ ] [Tackling Conditional Blind SQLi Like a Pro: OSWE Prep Powered by Burp Suite](https://infosecwriteups.com/tackling-conditional-blind-sqli-like-a-pro-oswe-prep-powered-by-burp-suite-9764ba210b40?source=rss----7b722bfd1b8d---4)\n - [ ] [Mastering Rate Limit Bypass Techniques](https://infosecwriteups.com/mastering-rate-limit-bypass-techniques-fff9499b0f42?source=rss----7b722bfd1b8d---4)\n - [ ] [UUIDs: A False Sense Of Security](https://infosecwriteups.com/uuids-a-false-sense-of-security-10467497daae?source=rss----7b722bfd1b8d---4)\n - [ ] [$50,000 Bounty: GitHub Access Token](https://infosecwriteups.com/50-000-bounty-github-access-token-c29cb6f00182?source=rss----7b722bfd1b8d---4)\n - [ ] [️Recon Automation Like a Pro: My 5-Stage System to Catch More Bugs](https://infosecwriteups.com/%EF%B8%8Frecon-automation-like-a-pro-my-5-stage-system-to-catch-more-bugs-4fff7b7c4726?source=rss----7b722bfd1b8d---4)\n - [ ] [Top 10 Ways Hackers Exploit Web Applications (and How to Prevent Them)](https://infosecwriteups.com/top-10-ways-hackers-exploit-web-applications-and-how-to-prevent-them-6dfd05630e2c?source=rss----7b722bfd1b8d---4)\n - [ ] [Open Redirect Vulnerability: What It Is and Why It Matters](https://infosecwriteups.com/open-redirect-vulnerability-what-it-is-and-why-it-matters-b600117c61a7?source=rss----7b722bfd1b8d---4)\n - [ ] [Wazuh: The Free SIEM That Fights Like a Paid One](https://infosecwriteups.com/wazuh-the-free-siem-that-fights-like-a-paid-one-9554ed1272da?source=rss----7b722bfd1b8d---4)\n - [ ] [Unlimited Emails: A Bug That Let Me Spam Anyone =>$250](https://infosecwriteups.com/unlimited-emails-a-bug-that-let-me-spam-anyone-250-e0d1b14ae810?source=rss----7b722bfd1b8d---4)\n - [ ] [Bypassing Email Verification](https://infosecwriteups.com/bypassing-email-verification-299d94230724?source=rss----7b722bfd1b8d---4)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [Ruckus IoT Controller 1.7.1.0 Undocumented Backdoor Account](https://cxsecurity.com/issue/WLB-2025050027)\n - [ ] [Firefox ESR 115.11 PDF.js Arbitrary JavaScript execution](https://cxsecurity.com/issue/WLB-2025050026)\n - [ ] [Explore IT CMS - Blind SQL Injection Vulnerability](https://cxsecurity.com/issue/WLB-2025050025)\n - [ ] [Synotec Holdings - Blind Sql Injection Vulnerability](https://cxsecurity.com/issue/WLB-2025050024)\n - [ ] [Apache ActiveMQ 6.1.6 Denial of Service](https://cxsecurity.com/issue/WLB-2025050023)\n- SecWiki News\n - [ ] [SecWiki News 2025-05-09 Review](http://www.sec-wiki.com/?2025-05-09)\n- Security Boulevard\n - [ ] [Microsoft Listens to Security Concerns and Delays New OneDrive Sync](https://securityboulevard.com/2025/05/microsoft-listens-to-security-concerns-and-delays-new-onedrive-sync/?utm_source=rss&utm_medium=rss&utm_campaign=microsoft-listens-to-security-concerns-and-delays-new-onedrive-sync)\n - [ ] [Stay Confident with Robust Secrets Management](https://securityboulevard.com/2025/05/stay-confident-with-robust-secrets-management/?utm_source=rss&utm_medium=rss&utm_campaign=stay-confident-with-robust-secrets-management)\n - [ ] [How Protected Are Your NHIs in Cloud Environments?](https://securityboulevard.com/2025/05/how-protected-are-your-nhis-in-cloud-environments/?utm_source=rss&utm_medium=rss&utm_campaign=how-protected-are-your-nhis-in-cloud-environments)\n - [ ] [Feel Reassured with Advanced Secret Scanning](https://securityboulevard.com/2025/05/feel-reassured-with-advanced-secret-scanning/?utm_source=rss&utm_medium=rss&utm_campaign=feel-reassured-with-advanced-secret-scanning)\n - [ ] [OpenText Report Shines Spotlight on Malware Infection Rates](https://securityboulevard.com/2025/05/opentext-report-shines-spotlight-on-malware-infection-rates/?utm_source=rss&utm_medium=rss&utm_campaign=opentext-report-shines-spotlight-on-malware-infection-rates)\n - [ ] [BSidesLV24 – Proving Ground – CVSS v4 – A Better Version Of An Imperfect Solution](https://securityboulevard.com/2025/05/bsideslv24-proving-ground-cvss-v4-a-better-version-of-an-imperfect-solution/?utm_source=rss&utm_medium=rss&utm_campaign=bsideslv24-proving-ground-cvss-v4-a-better-version-of-an-imperfect-solution)\n - [ ] [The 2025 State of Application Risk Report: Understanding AI Risk in Software Development](https://securityboulevard.com/2025/05/the-2025-state-of-application-risk-report-understanding-ai-risk-in-software-development/?utm_source=rss&utm_medium=rss&utm_campaign=the-2025-state-of-application-risk-report-understanding-ai-risk-in-software-development)\n - [ ] [The CMMC Rev 2 to Rev 3 Memo: What’s Changed?](https://securityboulevard.com/2025/05/the-cmmc-rev-2-to-rev-3-memo-whats-changed/?utm_source=rss&utm_medium=rss&utm_campaign=the-cmmc-rev-2-to-rev-3-memo-whats-changed)\n - [ ] [Why You Should Segment RDP & SSH](https://securityboulevard.com/2025/05/why-you-should-segment-rdp-ssh/?utm_source=rss&utm_medium=rss&utm_campaign=why-you-should-segment-rdp-ssh)\n - [ ] [ColorTokens + Nozomi Networks: A Partnership That’s Built for the Trenches of OT and IoT Security](https://securityboulevard.com/2025/05/colortokens-nozomi-networks-a-partnership-thats-built-for-the-trenches-of-ot-and-iot-security/?utm_source=rss&utm_medium=rss&utm_campaign=colortokens-nozomi-networks-a-partnership-thats-built-for-the-trenches-of-ot-and-iot-security)\n- Recent Commits to cve:main\n - [ ] [Update Fri May 9 15:59:04 UTC 2025](https://github.com/trickest/cve/commit/6f4319a4a59d1545c44f0d72faebeb8e0dcfc6a8)\n- 奇安信攻防社区\n - [ ] [基于影子栈的大模型系统防御技术](https://forum.butian.net/share/4309)\n- Trustwave Blog\n - [ ] [Why Offensive Security Is Crucial for Retail Resilience](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/why-offensive-security-is-crucial-for-retail-resilience/)\n - [ ] [From Facebook Ad to Near Breach: The Power of Threat Hunting in Modern MDR](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/from-facebook-ad-to-near-breach-the-power-of-threat-hunting-in-modern-mdr/)\n- Doonsec's feed\n - [ ] [【应急响应】- 日志流量如何下手？](https://mp.weixin.qq.com/s?__biz=Mzk1Nzk3MjA5Ng==&mid=2247485348&idx=1&sn=52db408094ecaed1d998d6e09543a248)\n - [ ] [2024年末网络安全上市公司员工总数同比下降10.5%，回到2021年初的水平](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485810&idx=1&sn=e8b60ee515aa4ce000717806cc4704db)\n - [ ] [【干货】笑傲职场的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485810&idx=2&sn=a759ada09741eb4eb43da0b52c1f1308)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485810&idx=3&sn=56b6f9f50c1c034afc3e3cf9c00d0166)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485810&idx=4&sn=6d862141cb5336f55a991aac242a9114)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485810&idx=5&sn=72a5a2a4cca9e7955a3c50f2e4805d34)\n - [ ] [【资料】论人工智能的毁灭风险](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651149922&idx=1&sn=f8057a83c9a82178a7ecc8984582e378)\n - [ ] [【通知】四川警察学院2025年公开招聘博士等高层次人才的公告](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651149922&idx=2&sn=b0f39ac055efc7c475ab47efc2e6df1c)\n - [ ] [深入解读迪普科技2024年财报：营收11.5亿、盈利1.6亿、人均创收67万](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491310&idx=1&sn=a3f1a6a95ec62cae263eb2ac95d8582e)\n - [ ] [6 月相约上海，共探商用密码创新蓝海，诚邀您拨冗参会](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491310&idx=2&sn=7d5f09e666daa9aab624e16650046757)\n - [ ] [偷偷发个预告，第二届 “Parloo 杯”CTF 应急响应挑战赛](https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247490941&idx=1&sn=9b7e0e4023b04a844514695d47238a24)\n - [ ] [亲爱的你不要点击，看来是被黑客攻击了](https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485134&idx=1&sn=af9e9724176b9b1f53fff2f478e4fee8)\n - [ ] [重磅！米好信安上榜安全牛第十二版《中国网络安全行业全景图》](https://mp.weixin.qq.com/s?__biz=MzU1NTYxMjA5MA==&mid=2247505736&idx=1&sn=73ef8a45710d9c675e1a0738b4fa3f3a)\n - [ ] [全新电子数据取证模式！AI快速取证系统“霹雳”上线](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651444634&idx=1&sn=11c0f2fdc3aeb0d1888620dcac423bf0)\n - [ ] [全职岗位汇总-长期不断更新](https://mp.weixin.qq.com/s?__biz=MzkwNDI0MjkzOA==&mid=2247486054&idx=1&sn=5148b839003b7d6b9816b62019febcac)\n - [ ] [【工信动态】深入贯彻中央八项规定精神学习教育中央第四指导组指导督导工业和信息化部见面会召开](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649252082&idx=1&sn=030a60b5612d05f8a4ab1611724f68c7)\n - [ ] [印巴紧张局势加剧，主要金融和市场机构加强网络安全](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115630&idx=1&sn=7b9ceb6dd877b25514f1831898c8a874)\n - [ ] [耳环](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488273&idx=1&sn=fef73492c1d303ae9cfad3f701dbcfa3)\n - [ ] [github托管代码导致的敏感信息泄露](https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485558&idx=1&sn=eaa5b873a1c2a486d9ddc00e3f32073f)\n - [ ] [招聘｜京东｜安全研发工程师](https://mp.weixin.qq.com/s?__biz=MzkzMDQ5MzM1NA==&mid=2247484032&idx=1&sn=492ba1117af55b1d5ee9ad00f710adc2)\n - [ ] [【全球最大规模网络攻防战】41个国家参加北约“锁盾2025”网络防御演习](https://mp.weixin.qq.com/s?__biz=MzkxMzQwNDcxNg==&mid=2247487170&idx=1&sn=6306f20b5bfc5e024c74bcf908cf79fb)\n - [ ] [DeepSeek在银行业务场景的应用](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655278175&idx=1&sn=1901a7ca0ec31f768fe8b1d54e2475b7)\n - [ ] [没百万资产_千万别做好人！！努力活着就是对自己最大的安慰！！](https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247491073&idx=1&sn=2395fd73d896387201271a3738470db0)\n - [ ] [安全测试辅助bp插件 - AutoFuzz](https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486339&idx=1&sn=47fe3888047a8544ac9c9420b20d4ede)\n - [ ] [网络安全创新论坛 | 百度大模型安全斩获“2024年十大优秀网络安全创新成果”](https://mp.weixin.qq.com/s?__biz=MzA3NTQ3ODI0NA==&mid=2247487771&idx=1&sn=756199516a763374e48c2950635f9bbd)\n - [ ] [中国人民银行业务领域数据安全管理办法](https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499849&idx=1&sn=051f58092163dac96d9cb01d3f25f8ba)\n - [ ] [Knowbe4《2025网络钓鱼威胁趋势报告》快速解读](https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247485115&idx=1&sn=38e1e0f6f4f19024449c42aa22e50dcd)\n - [ ] [网络安全顶会——SP 2025 论文清单与摘要](https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485954&idx=1&sn=d361d90c096adcfc889b969fb4614c84)\n - [ ] [如何通过XSS接管 Microsoft 账户](https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247483935&idx=1&sn=0fbe8c7a7cbf9784bb9f3f8735c7d9b8)\n - [ ] [河南省委书记刘宁会见奇安信集团董事长齐向东](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626748&idx=1&sn=9c74cc42d4dc9c66a082448631e40958)\n - [ ] [奇安信再次入选全球《静态应用安全测试解决方案全景图》代表厂商](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626748&idx=2&sn=906a7a570aca57714ee3ad91d065b732)\n - [ ] [丰田中国到访奇安信安全中心](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626748&idx=3&sn=cc36ad3574d6302f4dc27c2beb9f5b82)\n - [ ] [【DeepSeek实践】Mcp+DeepSeek的Demo编写体验](https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503224&idx=1&sn=f44af92eb9a16188961631bbf0424227)\n - [ ] [思路清晰，我是菜B，8小时爆肝windows 32位syncbreeze缓冲区溢出漏洞复现](https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247484976&idx=1&sn=6f68502e14ea7cd7b9cbb0cac874a1e7)\n - [ ] [紫金山实验室党委召开会议 推动科技创新加快转化为新质生产力](https://mp.weixin.qq.com/s?__biz=MzU4NDc2MzcwNw==&mid=2247499103&idx=1&sn=56e09294c9a68f25ec3ba6cd01b0a2c5)\n - [ ] [网络安全界的“瑞士军刀之netcat工具使用](https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484438&idx=1&sn=6c8525a3b68d1d0318d9a4621175dae7)\n - [ ] [7天掌握Claude 3.7账号使用的六步进阶指南（内含官方隐藏技巧）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247502783&idx=1&sn=45a1f86ba10873c1add2f179d4342ea4)\n - [ ] [7天掌握Claude 3.7账号使用秘籍：三大核心技巧让你效率翻10倍（内附独家进阶方案）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247502783&idx=2&sn=18732f13f1ff053c93dfa236257b8e0a)\n - [ ] [7天掌握Claude 3.7账号使用秘籍：新手3步上手高阶AI的全流程攻略（内含隐藏技巧）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247502783&idx=3&sn=c4f05e63219af5e5bf3d8347b75f8322)\n - [ ] [7天掌握Claude 3.7账号使用全攻略：3个核心技巧+4个高阶玩法（含稀缺资源渠道）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247502783&idx=4&sn=d6629b2ff86576e0fbcddab3f6f13255)\n - [ ] [7天掌握Claude 3.7账号使用全攻略：3个隐藏技巧+5个高级提示（内含稀缺资源）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247502783&idx=5&sn=10a9144e1d316131acf9fe6e742e8f78)\n - [ ] [7天掌握Claude 3.7账号使用全指南！三种方法解锁超强AI，五步突破聊天限制（附隐藏功能教程）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247502783&idx=6&sn=0318d02c444fd9a3ef34d14eb6b8db1d)\n - [ ] [7天掌握Claude 3.7账号完整使用攻略：从零开始的5个高级技巧（内附独家资源）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247502783&idx=7&sn=25a963d847622bb6d55ee47ba3dde56f)\n - [ ] [恶意 npm 包通过后门感染 3,200+ 游标用户，窃取凭据](https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492526&idx=1&sn=2a01f856513647ce955a0bc632ab2477)\n - [ ] [每日安全动态推送(25/5/9)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960093&idx=1&sn=fd2ebf927e985931080c7e092d7fbb56)\n - [ ] [如果脱离IT体系，安全能不能做得更好？](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247639339&idx=1&sn=ac942ff282e0964e140dacfae9c45bba)\n - [ ] [诸子云｜甲方 ：如何看待安全岗位年龄限制？怎么看待用Augment开发出本地大模型防火墙？](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247639339&idx=2&sn=72bc54a71787896d43237d2b37b5e5c9)\n - [ ] [CSO评选 | 提名·直播：第四场预告](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247639339&idx=3&sn=f4da240ae2b4cca7851a526cde99fa27)\n - [ ] [流量分析 - 黑客(解)](https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485784&idx=1&sn=73fb7caf72f567e4619423ce27d8ab95)\n - [ ] [吉大正元2025年第一季度报告，营收0.61亿，同比骤降51.89%。](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247490600&idx=1&sn=8abe504aa60b9f5433173fd11467d686)\n - [ ] [还是得做安全](https://mp.weixin.qq.com/s?__biz=MzU2NzkxMDUyNg==&mid=2247492143&idx=1&sn=8fae9c1fc338d5ecb0cf07c046e64ca6)\n - [ ] [通知 | 三部门：全面推行以专项信用报告替代有无违法违规记录证明（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=2&sn=31440493440c39a7f37dca361c5cb63d)\n - [ ] [中国人民银行发布《中国人民银行业务领域数据安全管理办法》（附答记者问）](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635760&idx=2&sn=95ead6e6181380402d1bff89817cedd3)\n - [ ] [观点 | 系统治理护航AI技术向善而行](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635760&idx=3&sn=dd6665519e185e596cf5cb391fe5287a)\n - [ ] [美国著名服装品牌因隐私违规被罚250万元](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635760&idx=4&sn=fed6c53f75e6a9bffd261963ceba3dc3)\n - [ ] [护网先锋·白帽守护行动 — QFSRC挑战赛](https://mp.weixin.qq.com/s?__biz=Mzk0NTY4OTM3Nw==&mid=2247483982&idx=1&sn=09b74952d7eccf2ab8d7015caa925e7d)\n - [ ] [总结分析Lockbit数据泄露的背后](https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489254&idx=1&sn=b5bdd11ef5887b64599230399e8c2b85)\n - [ ] [打靶日记 Escalate_Linux](https://mp.weixin.qq.com/s?__biz=Mzk1Nzc0MzY3NA==&mid=2247486616&idx=1&sn=738914104a6b2b1b8d3373b354b7aede)\n - [ ] [【免杀】C2免杀 | 概念篇](https://mp.weixin.qq.com/s?__biz=MzUyNTUyNTA5OQ==&mid=2247485227&idx=1&sn=5ec7100fa4045fb4466298fd5bf429ab)\n - [ ] [现在有什么行业可以让人快速翻身上岸？可以试试这个方向 上岸其实不难！](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529653&idx=1&sn=75c9ae2288380ea72ebba08148124bb9)\n - [ ] [使用 Terraform、Nebula、Caddy 和 Cobalt Strike 实现 C2 基础设施自动化](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529653&idx=2&sn=2ea6b7ba1e7140bc84db0228c8d0c0d4)\n - [ ] [阿里CEO吴泳铭内网发文多次提及AI：让改变不仅落于口头](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932093&idx=1&sn=d111ea7bab55016ea972732d93f3161c)\n - [ ] [AI快讯：阿里开源创新大模型搜索引擎，京东争夺AI人才，英伟达开源代码大模型](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932093&idx=2&sn=139f66ffe02df576861b6a3de84b643a)\n - [ ] [98万！大模型应用开发平台项目](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932093&idx=3&sn=56859db890b9ff40c8529bf907ae566c)\n - [ ] [韩媒聚焦Lazarus攻击手段升级，CertiK联创顾荣辉详解应对之道](https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247504163&idx=1&sn=44f53871d32a1e4565bb18dc5ae20ed7)\n - [ ] [2025HW项目招人帖](https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486300&idx=1&sn=8f82ec4fddc6d5ab484855cc3ff04662)\n - [ ] [温馨母亲节 | 江苏国保致敬每一位伟大的母亲](https://mp.weixin.qq.com/s?__biz=MzU5MTQ4NTI0OA==&mid=2247487678&idx=1&sn=7cc94b56705ade1cc78344af1d46726a)\n - [ ] [王老师SRC挖洞培训课介绍](https://mp.weixin.qq.com/s?__biz=Mzk3NTk1NjM1MQ==&mid=2247487883&idx=1&sn=ade4e0578e7c585d287aa1e23d7bbbc4)\n - [ ] [【安全圈】波兰破获跨国DDoS攻击平台 抓获4名嫌疑人](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=1&sn=1b2ced6285c823f319ffd192c55b60db)\n - [ ] [【安全圈】\\\"地狱提款机\\\"重出江湖：新型加密钓鱼攻击席卷全球，盗取超900万美元](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=2&sn=7e600cf7e9152beb1ffc1e9d80a30ee1)\n - [ ] [【安全圈】虚假加密货币交易所广告入侵Facebook](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=3&sn=1ad65266724165c7200cbab554544364)\n - [ ] [【安全圈】Cisco IOS XE WLC 中的关键 CVE-2025-20188 (CVSS 10) 缺陷允许远程根部访问](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=4&sn=a0ceb517f0bd46bd1296a5aa917fbf4c)\n - [ ] [印巴冲突升级：开源情报与卫星图像揭示战场真相](https://mp.weixin.qq.com/s?__biz=Mzg3MDczNjcyNA==&mid=2247489318&idx=1&sn=1d7af64c540ac54df5e64e6eca710c83)\n - [ ] [安易科技成功晋级2025第十届安全创客汇40强](https://mp.weixin.qq.com/s?__biz=MzkwMTI3ODUxOQ==&mid=2247485267&idx=1&sn=fb389febf24fdb321df1d5f62ea843c0)\n - [ ] [共筑新智安全价值 | 蜚语科技登榜《中国网络安全全景图（第十二版），持续领航静态安全测试领域](https://mp.weixin.qq.com/s?__biz=MzI5NzI5NzY1MA==&mid=2247491662&idx=1&sn=cf795617112aa0e9e5151771a9de9849)\n - [ ] [如何优雅关闭 windows 默认杀毒软件？](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498759&idx=1&sn=333861560a845c5bbb48b9789e270653)\n - [ ] [安全资讯汇总：2025.5.5-2025.5.9](https://mp.weixin.qq.com/s?__biz=MzA4MTE0MTEwNQ==&mid=2668670263&idx=1&sn=dd19081833c5797124cfa563bf51c1b0)\n - [ ] [启明星辰亮相CHIMA2025 构建智慧医疗安全新生态](https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651733061&idx=1&sn=c8f226a92c29a58dfac8b2843d422589)\n - [ ] [人工智能生成合成内容标识政策法规宣讲会在重庆举办](https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649402135&idx=1&sn=ff4cb2a9fb683db05d1da8bdc9e6f7ff)\n - [ ] [AI在网络安全中的应用之钓鱼邮件检测](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490943&idx=1&sn=4a2b06b08da13633e0c0b365d8614305)\n - [ ] [AWVS最新破解版25.1.250204](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490943&idx=2&sn=78118a467bbb5e4c00f2915855f7550e)\n - [ ] [移动应用程序中网络代理技术的应用及其安全隐患](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490943&idx=3&sn=76dffdc3a48892a9ecc72ea3d50de5f3)\n - [ ] [权威解答！密评中与【国密证书】相关的若干Q&A](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490943&idx=4&sn=1a77e74bb79e5dfc7ff4910efc8d2ef2)\n - [ ] [击败倦怠：如何在CISSP之旅中保持动力](https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492691&idx=1&sn=14be06926ed9c747bd497fea4ff9de29)\n - [ ] [《中国人民银行业务领域数据安全管理办法》发布,附修订对照](https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247573883&idx=1&sn=35656a80f2b88b4059df5c8a24daadc0)\n - [ ] [快乐下载 v1.27 一款超强力多功能解析下载工具箱](https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247493792&idx=1&sn=509f2aa179f4ab9e887896ec9316e0d3)\n - [ ] [烽火狼烟丨暗网数据及攻击威胁情报分析周报（05/06-05/09）](https://mp.weixin.qq.com/s?__biz=Mzk0NjMxNTgyOQ==&mid=2247484597&idx=1&sn=8e472a0d8e74b83d6d7dcab980a60204)\n - [ ] [网络安全信息与动态周报2025年第18期（4月28日-5月4日）](https://mp.weixin.qq.com/s?__biz=Mzk0NjMxNTgyOQ==&mid=2247484597&idx=2&sn=2250909cf98544c4e2d6b0265dfb3d97)\n - [ ] [Android9安装burp证书解决浏览器报错：该网站的安全证书有问题](https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486440&idx=1&sn=d9539535b48783e6923b28a9ef4cb11b)\n - [ ] [零系统调用的暗度陈仓：深度解构io_uring新型Rootkit的攻击防护](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496377&idx=1&sn=27cbb8a50866b909bd9a1cb441df1a6f)\n - [ ] [关于公司经营现状及应对措施的声明](https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247514152&idx=1&sn=9677d6b37cbda30b73ebbf33a3a38536)\n - [ ] [信息安全漏洞周报【第021期】](https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064140&idx=1&sn=d260768ad429a25cbf848cf56cd7d89a)\n - [ ] [发布 | 中国人民银行发布《中国人民银行业务领域数据安全管理办法》（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=1&sn=191232065f01e2a27d524a0bb91c8242)\n - [ ] [专家解读 | 李俊慧：网络司法持续深化，网络治理更加从容](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=3&sn=8c3271f4cb984245de1b8146c6ef5f88)\n - [ ] [前沿 | 欧盟金融业供应链安全立法对我国的启示](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=4&sn=f1917afdbee07d6886f9291bd6e6be77)\n - [ ] [盘点 | 中国互联网联合辟谣平台2025年4月辟谣榜](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=5&sn=00283af2fe0ad9bc072b2db2602db840)\n - [ ] [研究分析丨基于AI大模型技术构建安全业务融合的工业控制系统安全可信防护体系](https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247533171&idx=1&sn=712c3274fba2b8fd7305ea7f12aacc99)\n - [ ] [数据安全丨2024数商产业场景调研报告（附下载）](https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247533171&idx=2&sn=28297d607966bab9909d3df4d1f56dd0)\n - [ ] [5月网络安全竞赛高能亮点速看](https://mp.weixin.qq.com/s?__biz=MzkyNDA5NjgyMg==&mid=2247501575&idx=1&sn=facd65158d2973c10bde41cd1524b6e2)\n - [ ] [WordPress 广告欺诈插件每天产生 14 亿个广告请求](https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492772&idx=1&sn=de2e0eddde72323f9ea608a593b87a33)\n - [ ] [AI换脸，一场娱乐引发的安全思考](https://mp.weixin.qq.com/s?__biz=MzAwNTg2NjYxOA==&mid=2650743471&idx=1&sn=7107b602f7a90229ae1e7936972a504d)\n - [ ] [直播预告｜网易易盾携手百融云创，聚焦金融大模型攻防对话](https://mp.weixin.qq.com/s?__biz=MzAwNTg2NjYxOA==&mid=2650743471&idx=2&sn=1106d3952805d40cf13ab32cc6126872)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [Mastering Rate Limit Bypass Techniques](https://infosecwriteups.com/mastering-rate-limit-bypass-techniques-fff9499b0f42?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [$50,000 Bounty: GitHub Access Token](https://infosecwriteups.com/50-000-bounty-github-access-token-c29cb6f00182?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [️Recon Automation Like a Pro: My 5-Stage System to Catch More Bugs](https://infosecwriteups.com/%EF%B8%8Frecon-automation-like-a-pro-my-5-stage-system-to-catch-more-bugs-4fff7b7c4726?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Bypassing Email Verification](https://infosecwriteups.com/bypassing-email-verification-299d94230724?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Exposed Session Tokens via Misconfigured Endpoint](https://infosecwriteups.com/exposed-session-tokens-via-misconfigured-endpoint-c6676b79476e?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [⚔️ Unsafe Eval = Unlimited Control: How a JS Sink Let Me Run Anything](https://infosecwriteups.com/%EF%B8%8F-unsafe-eval-unlimited-control-how-a-js-sink-let-me-run-anything-60794929a295?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [$840 Bounty: How I Stole OAuth Tokens from Twitter](https://infosecwriteups.com/840-bounty-how-i-stole-oauth-tokens-from-twitter-733f82857eda?source=rss----7b722bfd1b8d--bug_bounty)\n- Project Zero\n - [ ] [Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages](https://googleprojectzero.blogspot.com/2025/05/breaking-sound-barrier-part-i-fuzzing.html)\n- Binary Ninja\n - [ ] [Advanced Binary Search: Finding Needles in Binary Haystacks](https://binary.ninja/2025/05/09/advanced-binary-search.html)\n- Didier Stevens\n - [ ] [Update: oledump.py Version 0.0.81](https://blog.didierstevens.com/2025/05/09/update-oledump-py-version-0-0-81/)\n- Reverse Engineering\n - [ ] [How I ruined my vacation by reverse engineering Windows Security Center](https://www.reddit.com/r/ReverseEngineering/comments/1kieu5l/how_i_ruined_my_vacation_by_reverse_engineering/)\n - [ ] [Nintendo Threatens to Brick Your Switch 2 if you RE it](https://www.reddit.com/r/ReverseEngineering/comments/1kiqhqv/nintendo_threatens_to_brick_your_switch_2_if_you/)\n - [ ] [Under the microscope: The Lost World – Jurassic Park (Saturn, PlayStation)](https://www.reddit.com/r/ReverseEngineering/comments/1kiwv58/under_the_microscope_the_lost_world_jurassic_park/)\n - [ ] [Fuzzing Windows Defender with loadlibrary in 2025](https://www.reddit.com/r/ReverseEngineering/comments/1kiig7v/fuzzing_windows_defender_with_loadlibrary_in_2025/)\n- Malwarebytes\n - [ ] [Google Chrome will use AI to block tech support scam websites](https://www.malwarebytes.com/blog/news/2025/05/google-chrome-will-use-ai-to-block-tech-support-scam-websites)\n- SentinelOne\n - [ ] [The Good, the Bad and the Ugly in Cybersecurity – Week 19](https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-19-6/)\n - [ ] [Insider Risk Revisited: Espionage, Encryption & Economics](https://www.sentinelone.com/blog/insider-risk-revisited-espionage-encryption-and-economics/)\n- Webroot Blog\n - [ ] [Mobile security matters: Protecting your phone from text scams](https://www.webroot.com/blog/2025/05/09/mobile-security-matters-protecting-your-phone-from-text-scams/)\n- Exploit-DB.com RSS Feed\n - [ ] [[remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)](https://www.exploit-db.com/exploits/52288)\n - [ ] [[local] VirtualBox 7.0.16 - Privilege Escalation](https://www.exploit-db.com/exploits/52287)\n - [ ] [[webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation](https://www.exploit-db.com/exploits/52286)\n - [ ] [[webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection](https://www.exploit-db.com/exploits/52285)\n - [ ] [[local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation](https://www.exploit-db.com/exploits/52284)\n- VMRay\n - [ ] [Release Highlights: VMRay Platform 2025.2.0](https://www.vmray.com/release-highlights-vmray-platform-2025-2-0/)\n- Microsoft Security Response Center\n - [ ] [Congratulations to the Top MSRC 2025 Q1 Security Researchers!](https://msrc.microsoft.com/blog/2025/05/congratulations-to-the-top-msrc-2025-q1-security-researchers/)\n- bishopfox.com\n - [ ] [Before You Red Team: Fix These 5 Common Mistakes](https://bishopfox.com/blog/before-red-team-fix-these-5-common-mistakes)\n- 博客园 - 渗透测试中心\n - [ ] [NPS内网穿透详细案例 - 渗透测试中心](https://www.cnblogs.com/backlion/p/18868280)\n - [ ] [零基础JS逆向和前端加密暴力破解 - 渗透测试中心](https://www.cnblogs.com/backlion/p/18867823)\n - [ ] [自搭建蜜罐到反制攻击队详解教程 - 渗透测试中心](https://www.cnblogs.com/backlion/p/18867809)\n - [ ] [PHP从零学习到Webshell免杀手册 - 渗透测试中心](https://www.cnblogs.com/backlion/p/18867807)\n - [ ] [JAVA半自动化代码审计实战 - 渗透测试中心](https://www.cnblogs.com/backlion/p/18867804)\n- HackerNews\n - [ ] [​​南非航空遭遇网络攻击，多个运营系统暂时中断](https://hackernews.cc/archives/58666)\n - [ ] [教育巨头培生集团遭受网络攻击，客户数据泄露](https://hackernews.cc/archives/58663)\n - [ ] [LockBit 勒索软件网站遭入侵，内部谈判记录被曝光](https://hackernews.cc/archives/58660)\n - [ ] [网络安全专家警告：REAL ID 成全球黑客“巨型靶心”](https://hackernews.cc/archives/58656)\n - [ ] [Cats Tower 游戏泄露 45 万用户隐私数据](https://hackernews.cc/archives/58653)\n - [ ] [黑客发现绕过 SentinelOne EDR 解决方案的新技术](https://hackernews.cc/archives/58651)\n - [ ] [俄罗斯黑客利用 ClickFix 虚假验证码传播新型 LOSTKEYS 恶意软件](https://hackernews.cc/archives/58648)\n- 安全分析与研究\n - [ ] [针对红队免杀CS测试样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491882&idx=1&sn=8c3efd770f0234656af2e67e6e80a373&subscene=0)\n- 奇客Solidot–传递最新科技情报\n - [ ] [Linux 停止支持 486 和第一代奔腾处理器](https://www.solidot.org/story?sid=81251)\n - [ ] [不可避免的内存安全（Memory Safety）之路](https://www.solidot.org/story?sid=81250)\n - [ ] [Linux 发行版 AnduinOS 的维护者是微软华裔工程师](https://www.solidot.org/story?sid=81249)\n - [ ] [特定基因让花散发出臭味](https://www.solidot.org/story?sid=81248)\n - [ ] [印度要求 X 在其境内屏蔽逾 8000 个账号](https://www.solidot.org/story?sid=81247)\n - [ ] [罗马天主教选择首位美籍枢机为教宗](https://www.solidot.org/story?sid=81246)\n- 安全客\n - [ ] [勒索风暴席卷金融行业，406起攻击暴露新危机](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788548&idx=1&sn=f494f2b0019b53b104727c1645c848af&subscene=0)\n- 黑海洋 - Wiki\n - [ ] [如何注册ASU.edu教育邮箱并获取学生福利](https://blog.upx8.com/4794)\n- 奇安信病毒响应中心\n - [ ] [每周勒索威胁摘要](https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498423&idx=1&sn=646d9c5867753be80fde125654be5c02&subscene=0)\n- 灾难控制 局\n - [ ] [Linux EDR 工程师招聘](https://mp.weixin.qq.com/s?__biz=MzI1NTc1NTcwNg==&mid=2247484392&idx=1&sn=044b1e8ad3f03981ad99a12973529cc0&subscene=0)\n- 绿盟科技技术博客\n - [ ] [美国发布《推动政府高效采购人工智能》备忘录，加速落实特朗普政府人工智能新政](https://blog.nsfocus.net/22-4/)\n- 安全内参\n - [ ] [美国防部拟加强采购软件安全验证：提高供应链可见性 禁止过时软件](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514317&idx=1&sn=52fd5122e186450377b5a8b18ff394a8&subscene=0)\n - [ ] [著名服装品牌因隐私违规被罚250万元](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514317&idx=2&sn=5d5bcae5c8a05943013c2a749c1cf47c&subscene=0)\n- 威努特安全网络\n - [ ] [公安部发布等保工作说明函，流行AI开发工具曝严重漏洞|一周特辑](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651132902&idx=1&sn=bdfaec57ddc0a69a2a89a2753a0597fa&subscene=0)\n- 奇安信威胁情报中心\n - [ ] [每周高级威胁情报解读(2025.05.02~05.08)](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247514809&idx=1&sn=273c9a60344ff8b773f25d823ae4f815&subscene=0)\n- KitPloit - PenTest & Hacking Tools\n - [ ] [Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale](http://www.kitploit.com/2025/05/witcher-managing-github-advanced.html)\n- 君哥的体历\n - [ ] [第五届企业安全实践群安全峰会（GCCP）成都站报名开启！](https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492078&idx=1&sn=8b9074cd95b787813b357421234400cb&subscene=0)\n- 云鼎实验室\n - [ ] [零系统调用的暗度陈仓：深度解构io_uring新型Rootkit的攻击防护](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496377&idx=1&sn=27cbb8a50866b909bd9a1cb441df1a6f&subscene=0)\n- dotNet安全矩阵\n - [ ] [.NET 内网攻防实战电子报刊](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499624&idx=2&sn=a2899f00753b5309eee67d027cab47e2&subscene=0)\n - [ ] [通过 Sharp4ReverseShell 获取反弹交互式 Shell](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499624&idx=3&sn=1d7427e746da399e129386c3020633da&subscene=0)\n - [ ] [从 .NET 代码审计看 ViewState 反序列化漏洞](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499624&idx=1&sn=7c645b1f4a16642c32bafc3802d9582a&subscene=0)\n- 安全圈\n - [ ] [【安全圈】波兰破获跨国DDoS攻击平台 抓获4名嫌疑人](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=1&sn=1b2ced6285c823f319ffd192c55b60db&subscene=0)\n - [ ] [【安全圈】\"地狱提款机\"重出江湖：新型加密钓鱼攻击席卷全球，盗取超900万美元](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=2&sn=7e600cf7e9152beb1ffc1e9d80a30ee1&subscene=0)\n - [ ] [【安全圈】虚假加密货币交易所广告入侵Facebook](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=3&sn=1ad65266724165c7200cbab554544364&subscene=0)\n - [ ] [【安全圈】Cisco IOS XE WLC 中的关键 CVE-2025-20188 (CVSS 10) 缺陷允许远程根部访问](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=4&sn=a0ceb517f0bd46bd1296a5aa917fbf4c&subscene=0)\n- 雷神众测\n - [ ] [这个端午，雷神众测与您一起“粽”享安全，“盒”力共赢！](https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503398&idx=1&sn=1ac9ae95355a2a8b4f45165fcad153e8&subscene=0)\n- 数世咨询\n - [ ] [为什么说密码时代快结束了？](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538714&idx=1&sn=66e0391cf49817b7b33e29c37d3d9f95&subscene=0)\n - [ ] [漏洞管理“扫雷”之动态优先级技术](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538714&idx=2&sn=d5c3a134feb1803915d85600ad4b9f08&subscene=0)\n- 安全牛\n - [ ] [AI的USB-C：MCP（模型上下文协议）缘何正成为网络安全的新战场](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136771&idx=1&sn=451b5341eb540ad42c8e1be9f6b2604a&subscene=0)\n - [ ] [Meta获赔1.67亿美元，历时6年的NSO间谍软件案尘埃落定；LockBit勒索软件团伙遭黑客入侵，谈判记录等被曝光 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136771&idx=2&sn=833554e2232eb5d33a9a39761cedf197&subscene=0)\n- 慢雾科技\n - [ ] [MistTrack：跨链协议分析系列之 Bitget Swap](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247502143&idx=1&sn=7aeabe16488909f906733631948dc44c&subscene=0)\n- 极客公园\n - [ ] [透视 2024 全球车企：谁家底更厚，谁已开始掉队？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653078984&idx=1&sn=03271780fac99496ff50382872faff8e&subscene=0)\n - [ ] [一台「反科技」的电动皮卡，要做美国版「五菱宏光」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653078971&idx=1&sn=e74ea9be0bf957ed230566f37bd07104&subscene=0)\n - [ ] [雷军：SU7 Ultra 正式挑战纽北；华为「鸿蒙电脑」亮相；盖茨将捐出所有财富，2045 关闭基金会 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653078969&idx=1&sn=eebbe50e0a37c1e9fa172289969b6c20&subscene=0)\n- 漏洞战争\n - [ ] [网络安全顶会——SP 2025 论文清单与摘要](https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485954&idx=1&sn=d361d90c096adcfc889b969fb4614c84&subscene=0)\n- 火绒安全\n - [ ] [【火绒安全周报】教培机构非法获取个人信息卖课/男子自研拍卖外挂软件牟利百万被捕](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525079&idx=1&sn=6b20896ca53366241e13568413e04aae&subscene=0)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525079&idx=2&sn=655d8673050caa20c08d05999dc7f0ee&subscene=0)\n- 安全攻防团队\n - [ ] [​云安全风险态势（2025.4.1-4.30）](https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485069&idx=1&sn=0e266fc84dff9fffbc429f48904ed7a8&subscene=0)\n- M01N Team\n - [ ] [每周蓝军技术推送（2025.4.26-5.9）](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494180&idx=1&sn=6fb30ca1ba3a3d62c5a76594deb79cc5&subscene=0)\n- 长亭科技\n - [ ] [【江苏省质检院X长亭科技】 在共创「网络攻防实验室」可以做些什么？](https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651389146&idx=1&sn=017519ee432c577f858d1c0afd895b99&subscene=0)\n- 信息安全国家工程研究中心\n - [ ] [解读 | 公网安〔2025〕1846号文关于对网络安全等级保护有关工作事项进一步说明的函](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247499542&idx=1&sn=815b52da837545529b71cc76d51a2cfc&subscene=0)\n- 代码卫士\n - [ ] [奇安信再次入选全球《静态应用安全测试解决方案全景图》代表厂商](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522958&idx=1&sn=f6a02f6fb6a3501c8980479bb16c65a7&subscene=0)\n- 情报分析师\n - [ ] [印美声纳浮标合作背后的技术体系与战略重塑（附对我风险研判）](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560918&idx=1&sn=28d2564b8f6438223fe77d6a7bb3714e&subscene=0)\n - [ ] [开源情报技巧：解构环境犯罪背后的金融网络](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560918&idx=2&sn=67b470cbf9640559478954399fbbee45&subscene=0)\n- 百度安全实验室\n - [ ] [网络安全创新论坛 | 百度大模型安全斩获“2024年十大优秀网络安全创新成果”](https://mp.weixin.qq.com/s?__biz=MzA3NTQ3ODI0NA==&mid=2247487771&idx=1&sn=756199516a763374e48c2950635f9bbd&subscene=0)\n- 嘶吼专业版\n - [ ] [超过1200个SAP NetWeaver服务器容易受到主动利用漏洞的攻击](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582281&idx=1&sn=eff71cea21807271925c234b3191e3c9&subscene=0)\n - [ ] [随着全球紧张局势加剧，针对能源行业的网络威胁激增](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582281&idx=2&sn=3439fef3e9f4b8b7d0dbebbed23b6957&subscene=0)\n- 看雪学苑\n - [ ] [安卓逆向之插件化技术学习](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593398&idx=1&sn=13b0c4e9ab5fdc1bd0663826a3c4f577&subscene=0)\n - [ ] [思科紧急修复致命漏洞，黑客可借此全面接管设备](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593398&idx=2&sn=37e1aae01543dd7d70cdf78802000f93&subscene=0)\n - [ ] [近期招聘合集汇总](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593398&idx=3&sn=da5e586f6c123edc22b555aee0dc2bfb&subscene=0)\n - [ ] [直播预约 | ARM系统深度调试与逆向：M核精华之存储与外设](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593398&idx=4&sn=b23ed043ec69fede5e313d8b77f1a8f0&subscene=0)\n- 复旦白泽战队\n - [ ] [参会预告 | 白泽带着4篇论文去参加S&P'25啦，我们旧金山见！](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247494628&idx=1&sn=e2e69a68a7bf32be04f765b8409bb788&subscene=0)\n- Yak Project\n - [ ] [SyntaxFlow 代码审计实战解析，拆解整个攻击链路！](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528172&idx=1&sn=731c6834920e64a4ae1160309d87260f&subscene=0)\n- 字节跳动技术团队\n - [ ] [火山引擎推出veimagex-mcp Server，打造专属您的图片智能助理](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247514424&idx=1&sn=30902f6b661137d1a3f67d293925ea7d&subscene=0)\n- Tide安全团队\n - [ ] [AI在网络安全中的应用之钓鱼邮件检测](https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247521237&idx=1&sn=cd222509863427c5bf7735627aadba71&subscene=0)\n- 中国信息安全\n - [ ] [发布 | 中国人民银行发布《中国人民银行业务领域数据安全管理办法》（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=1&sn=191232065f01e2a27d524a0bb91c8242&subscene=0)\n - [ ] [通知 | 三部门：全面推行以专项信用报告替代有无违法违规记录证明（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=2&sn=31440493440c39a7f37dca361c5cb63d&subscene=0)\n - [ ] [专家解读 | 李俊慧：网络司法持续深化，网络治理更加从容](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=3&sn=8c3271f4cb984245de1b8146c6ef5f88&subscene=0)\n - [ ] [前沿 | 欧盟金融业供应链安全立法对我国的启示](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=4&sn=f1917afdbee07d6886f9291bd6e6be77&subscene=0)\n - [ ] [盘点 | 中国互联网联合辟谣平台2025年4月辟谣榜](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=5&sn=00283af2fe0ad9bc072b2db2602db840&subscene=0)\n- Securityinfo.it\n - [ ] [Lockbit hackerato: infrastruttura compromessa, ma il gruppo non si arrende](https://www.securityinfo.it/2025/05/09/lockbit-hackerato-infrastruttura-compromessa-ma-il-gruppo-non-si-arrende/?utm_source=rss&utm_medium=rss&utm_campaign=lockbit-hackerato-infrastruttura-compromessa-ma-il-gruppo-non-si-arrende)\n - [ ] [Npm, attacco supply chain: compromesso un package con 45.000 download settimanali](https://www.securityinfo.it/2025/05/09/npm-attacco-supply-chain-compromesso-un-package-con-45-000-download-settimanali/?utm_source=rss&utm_medium=rss&utm_campaign=npm-attacco-supply-chain-compromesso-un-package-con-45-000-download-settimanali)\n- bellingcat\n - [ ] [India-Pakistan Conflict: How a Deepfake Video Made it Mainstream](https://www.bellingcat.com/news/rest-of-world/2025/05/09/india-pakistan-conflict-how-a-deepfake-video-made-it-mainstream/)\n- IT Service Management News\n - [ ] [Fediverso](http://blog.cesaregallotti.it/2025/05/fediverso.html)\n - [ ] [DPCM 30 aprile su acquisti di beni e servizi IT](http://blog.cesaregallotti.it/2025/05/dpcm-30-aprile-su-acquisti-di-beni-e.html)\n- DARKNAVY\n - [ ] [HarmonyOS NEXT鸿蒙应用反编译器 .abcD 发布试用](https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247488520&idx=1&sn=932b759f6f2e125fbbac5f303a8df2be&subscene=0)\n- 山石网科安全技术研究院\n - [ ] [全国卫生健康行业网络安全攻防大赛理论学习——制度篇](https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512186&idx=1&sn=53a841e4095147e5e949f6dd19fa9ec3&subscene=0)\n- Schneier on Security\n - [ ] [Friday Squid Blogging: Japanese Divers Video Giant Squid](https://www.schneier.com/blog/archives/2025/05/friday-squid-blogging-japanese-divers-video-giant-squid.html)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Lockbit hackerato: infrastruttura compromessa, ma il gruppo non si arrende](https://www.securityinfo.it/2025/05/09/lockbit-hackerato-infrastruttura-compromessa-ma-il-gruppo-non-si-arrende/)\n - [ ] [Three Russians, one Kazakhstani charged in takedown of Anyproxy and 5socks botnets](https://therecord.media/5socks-anyproxy-botnets-takedown-russians-kazakhstani-charged)\n - [ ] [Ascension says recent data breach affects over 430,000 patients](https://www.bleepingcomputer.com/news/security/ascension-says-recent-data-breach-affects-over-430-000-patients/)\n - [ ] [German operation shuts down crypto mixer eXch, seizes millions in assets](https://therecord.media/exch-cryptocurrency-mixer-germany-takedown)\n - [ ] [FBI and Dutch police seize and shut down botnet of hacked routers](https://techcrunch.com/2025/05/09/fbi-and-dutch-police-seize-and-shut-down-botnet-of-hacked-routers/)\n - [ ] [Police dismantles botnet selling hacked routers as residential proxies](https://www.bleepingcomputer.com/news/security/police-dismantles-botnet-selling-hacked-routers-as-residential-proxies/)\n - [ ] [Google Chrome to use on-device AI to detect tech support scams](https://www.bleepingcomputer.com/news/security/google-chrome-to-use-on-device-ai-to-detect-tech-support-scams/)\n - [ ] [Hackers hijack Japanese financial accounts to conduct nearly $2 billion in trades](https://therecord.media/hackers-hijack-japan-finance-accounts)\n - [ ] [US surveillance watchdog says expanded use of facial recognition at airports should be voluntary](https://therecord.media/us-surveillance-watchdog-pclob-airport-facial-recognition-tech)\n - [ ] [Chinese hackers behind attacks targeting SAP NetWeaver servers](https://www.bleepingcomputer.com/news/security/chinese-hackers-behind-attacks-targeting-sap-netweaver-servers/)\n - [ ] [Anti-ransomware Day 2025: come mitigare gli attacchi non convenzionali e con l’AI](https://www.cybersecurity360.it/nuove-minacce/ransomware/anti-ransomware-day-2025-come-mitigare-il-rischio-di-attacchi-non-convenzionali-e-con-lai/)\n - [ ] [Germany takes down eXch cryptocurrency exchange, seizes servers](https://www.bleepingcomputer.com/news/security/germany-takes-down-exch-cryptocurrency-exchange-seizes-servers/)\n - [ ] [Sintesi riepilogativa delle campagne malevole nella settimana del 3 – 9 maggio](https://cert-agid.gov.it/news/sintesi-riepilogativa-delle-campagne-malevole-nella-settimana-del-3-9-maggio/)\n - [ ] [Sanzione privacy ad Acea: costa caro il mancato controllo sulle pratiche ingannevoli dei fornitori](https://www.cybersecurity360.it/news/sanzione-privacy-ad-acea-il-mancato-controllo-sulle-pratiche-ingannevoli-dei-fornitori-costa-caro/)\n - [ ] [Quanto costa un Data Breach?](https://www.certego.net/blog/quanto-costa-un-data-breach/)\n - [ ] [Israele, è controverso l’uso dell’AI nel conflitto di Gaza](https://www.cybersecurity360.it/nuove-minacce/israele-e-controverso-luso-dellai-nel-conflitto-di-gaza/)\n - [ ] [India Experiences Surge in Hacktivist Group Activity Amid Military Tensions](https://cyble.com/blog/india-experience-hacktivist-group-activity/)\n - [ ] [Data Act: la regolamentazione non riguarda solo i dispositivi IoT](https://www.cybersecurity360.it/legal/data-act-la-regolamentazione-non-riguarda-solo-i-dispositivi-iot/)\n - [ ] [Npm, attacco supply chain: compromesso un package con 45.000 download settimanali](https://www.securityinfo.it/2025/05/09/npm-attacco-supply-chain-compromesso-un-package-con-45-000-download-settimanali/)\n- ICT Security Magazine\n - [ ] [Security by Design: paradigma fondativo della resilienza digitale contemporanea](https://www.ictsecuritymagazine.com/articoli/security-by-design/)\n- 360数字安全\n - [ ] [点亮国家级地标！奥林匹克塔为360安全大模型“代言”](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580478&idx=1&sn=dffe5ca8447689b55060387a14caa450&subscene=0)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [ISC Stormcast For Friday, May 9th, 2025 https://isc.sans.edu/podcastdetail/9444, (Fri, May 9th)](https://isc.sans.edu/diary/rss/31934)\n- 迪哥讲事\n - [ ] [实战-漏洞挖掘](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497571&idx=1&sn=9ca2dfab23ac7985bbd0170175c7c154&subscene=0)\n- 小米安全中心\n - [ ] [2025 数字中国创新大赛 |「小米人车家生态安全左移」项目摘得银奖](https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247518049&idx=1&sn=c6656ef15f573cc9a7f2e947d3f3fcef&subscene=0)\n- KitPloit - PenTest Tools!\n - [ ] [Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale](http://www.kitploit.com/2025/05/witcher-managing-github-advanced.html)\n- Deeplinks\n - [ ] [How Signal, WhatsApp, Apple, and Google Handle Encrypted Chat Backups](https://www.eff.org/deeplinks/2025/05/back-it-back-it-let-us-begin-explain-encrypted-chat-backups)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [is class b network something necessary for a small starbucks store?](https://www.reddit.com/r/netsecstudents/comments/1kivrze/is_class_b_network_something_necessary_for_a/)\n - [ ] [DFIR for Security Engineer / Security Architect?](https://www.reddit.com/r/netsecstudents/comments/1kikaa6/dfir_for_security_engineer_security_architect/)\n - [ ] [GroqRunner is a USB-ready terminal AI assistant designed for real-time task scripting, file operations, and dynamic network tooling. Built for speed. Filtered. If this hits 50 stars, ill drop the uncensored version. that does stuff like this. (for educational, legal research, and/or redteamopts)](https://www.reddit.com/r/netsecstudents/comments/1kiunfp/groqrunner_is_a_usbready_terminal_ai_assistant/)\n - [ ] [Built a Passive Signal Detection System – No Camera, No Mic, Just BLE/Wi-Fi OSINT](https://www.reddit.com/r/netsecstudents/comments/1kib0k9/built_a_passive_signal_detection_system_no_camera/)\n- Computer Forensics\n - [ ] [Anyone running a detective agency?](https://www.reddit.com/r/computerforensics/comments/1kiogwa/anyone_running_a_detective_agency/)\n - [ ] [What are Budget-Friendly IR CERTs and/or Trainings?](https://www.reddit.com/r/computerforensics/comments/1kiiorf/what_are_budgetfriendly_ir_certs_andor_trainings/)\n - [ ] [Workflow for automated COC processing](https://www.reddit.com/r/computerforensics/comments/1kiqixk/workflow_for_automated_coc_processing/)\n - [ ] [Cómo saber cuando y a qué hora subieron un pdf en una página web](https://www.reddit.com/r/computerforensics/comments/1kic9ho/cómo_saber_cuando_y_a_qué_hora_subieron_un_pdf_en/)\n - [ ] [Changing the way a .pgp file is read help!](https://www.reddit.com/r/computerforensics/comments/1ki8v6m/changing_the_way_a_pgp_file_is_read_help/)\n- Blackhat Library: Hacking techniques and research\n - [ ] [How to log into someones acc](https://www.reddit.com/r/blackhat/comments/1kijrvx/how_to_log_into_someones_acc/)\n- Information Security\n - [ ] [18 Cyber Security News Worth Your Attention in First Week of May](https://www.reddit.com/r/Information_Security/comments/1kiq5u0/18_cyber_security_news_worth_your_attention_in/)\n - [ ] [The FIFTEENTH SocVel Cyber Quiz is here](https://www.reddit.com/r/Information_Security/comments/1kiixki/the_fifteenth_socvel_cyber_quiz_is_here/)\n - [ ] [5 Best Practices for Securing Your Intranet with SSL Certificates](https://www.reddit.com/r/Information_Security/comments/1kiduiz/5_best_practices_for_securing_your_intranet_with/)\n- Technical Information Security Content & Discussion\n - [ ] [Stealthy .NET Malware: Hiding Malicious Payloads as Bitmap Resources](https://www.reddit.com/r/netsec/comments/1kivxei/stealthy_net_malware_hiding_malicious_payloads_as/)\n- Graham Cluley\n - [ ] [LockBit ransomware gang breached, secrets exposed](https://www.tripwire.com/state-of-security/lockbit-ransomware-gang-breached-secrets-exposed)\n - [ ] [Hackers hit deportation airline GlobalX, leak flight manifests, and leave an unsubtle message for “Donnie” Trump](https://www.bitdefender.com/en-us/blog/hotforsecurity/hackers-globalx-message-trump)\n- Social Engineering\n - [ ] [How to reframe situations in a way that highlights common goals or values?](https://www.reddit.com/r/SocialEngineering/comments/1kif025/how_to_reframe_situations_in_a_way_that/)\n - [ ] [Religion used to be manipulation?](https://www.reddit.com/r/SocialEngineering/comments/1kie5c1/religion_used_to_be_manipulation/)\n - [ ] [The Beauty Bias can be exploited to manipulate](https://www.reddit.com/r/SocialEngineering/comments/1kiebi6/the_beauty_bias_can_be_exploited_to_manipulate/)\n- Your Open Hacker Community\n - [ ] [I just completed my highschool. I need a career advice.](https://www.reddit.com/r/HowToHack/comments/1kiitcg/i_just_completed_my_highschool_i_need_a_career/)\n - [ ] [How Would You Exploit The Bazaar (99% of Calculations Are Done on the Server)?](https://www.reddit.com/r/HowToHack/comments/1kivq99/how_would_you_exploit_the_bazaar_99_of/)\n - [ ] [Wifite2 stuck on retrieving PSK](https://www.reddit.com/r/HowToHack/comments/1kidbnv/wifite2_stuck_on_retrieving_psk/)\n - [ ] [Is it allowed to directly attack the OWASP Juice Shop website using my Kali Linux, or is it not permitted and do I have to download the source code and run it in a virtual machine like VirtualBox first?](https://www.reddit.com/r/HowToHack/comments/1kiaap2/is_it_allowed_to_directly_attack_the_owasp_juice/)\n - [ ] [Bypass Volume Limiter on Headphones?](https://www.reddit.com/r/HowToHack/comments/1kigyb7/bypass_volume_limiter_on_headphones/)\n - [ ] [Can anyone help me](https://www.reddit.com/r/HowToHack/comments/1kiid3w/can_anyone_help_me/)\n- Security Affairs\n - [ ] [A cyber attack briefly disrupted South African Airways operations](https://securityaffairs.com/177656/hacking/a-cyber-attack-briefly-disrupted-south-african-airways-operations.html)\n - [ ] [Cybercriminal services target end-of-life routers, FBI warns](https://securityaffairs.com/177648/cyber-crime/malware-targets-end-of-life-routers.html)\n - [ ] [Russia-linked ColdRiver used LostKeys malware in recent attacks](https://securityaffairs.com/177638/apt/russia-linked-coldriver-used-lostkeys-malware-in-recent-attacks.html)\n - [ ] [SonicWall fixed SMA 100 flaws that could be chained to execute arbitrary code](https://securityaffairs.com/177626/hacking/sonicwall-fixed-sma-100-flaws-that-could-be-chained-to-execute-arbitrary-code.html)\n- The Hacker News\n - [ ] [BREAKING: 7,000-Device Proxy Botnet Using IoT, EoL Systems Dismantled in U.S. - Dutch Operation](https://thehackernews.com/2025/05/breaking-7000-device-proxy-botnet-using.html)\n - [ ] [OtterCookie v4 Adds VM Detection and Chrome, MetaMask Credential Theft Capabilities](https://thehackernews.com/2025/05/ottercookie-v4-adds-vm-detection-and.html)\n - [ ] [Initial Access Brokers Target Brazil Execs via NF-e Spam and Legit RMM Trials](https://thehackernews.com/2025/05/initial-access-brokers-target-brazil.html)\n - [ ] [Deploying AI Agents? Learn to Secure Them Before Hackers Strike Your Business](https://thehackernews.com/2025/05/deploying-ai-agents-learn-to-secure.html)\n - [ ] [Beyond Vulnerability Management – Can You CVE What I CVE?](https://thehackernews.com/2025/05/beyond-vulnerability-management-cves.html)\n - [ ] [Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials](https://thehackernews.com/2025/05/malicious-npm-packages-infect-3200.html)\n - [ ] [Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android](https://thehackernews.com/2025/05/google-rolls-out-on-device-ai.html)\n - [ ] [Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell](https://thehackernews.com/2025/05/chinese-hackers-exploit-sap-rce-flaw.html)\n- NOVASEC\n - [ ] [Windows下完整NMAP源码编译指南](https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490469&idx=1&sn=f9636eab5b4d25d92c023e3e50be9d2a&subscene=0)\n- 网安寻路人\n - [ ] [关于GDPR记录保存义务“简化”草案的情况和EDPB/EDPS的评论](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247507188&idx=1&sn=ac1cfd16e04e4a82bd78d5b26dca98fb&subscene=0)\n- Security Weekly Podcast Network (Audio)\n - [ ] [Sudo watch, AI Dreams, Kickidler, Powershool, Old Man Router, PSMU, Aaran Leyland... - SWN #475](http://sites.libsyn.com/18678/sudo-watch-ai-dreams-kickidler-powershool-old-man-router-psmu-aaran-leyland-swn-475)\n"}, "170c094bf83395fa430845279891d5739082382e": {"t": 1785772259.8243425, "n": 50384, "h": "42dccd569cc015c6", "c": "# 每日安全资讯（2025-05-10）\n\n- Tenable Blog\n - [ ] [Cybersecurity Snapshot: U.K. NCSC’s Best Cyber Advice on AI Security, the Quantum Threat, API Risks, Mobile Malware and More](https://www.tenable.com/blog/cybersecurity-snapshot-best-practices-ai-security-quantum-cryptography-api-security-cyber-governance-05-09-2025)\n- paper - Last paper\n - [ ] [利用通信攻击对基于 LLM 的多智能体系统进行渗透测试](https://paper.seebug.org/3319/)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [2025Q1企业邮箱安全报告：三大威胁升级，揭秘应对之法](https://www.4hou.com/posts/l0gg)\n - [ ] [【附下载】重庆信通设计院：150+AI 大模型安全常用术语解析](https://www.4hou.com/posts/kgLN)\n - [ ] [超过1200个SAP NetWeaver服务器容易受到主动利用漏洞的攻击](https://www.4hou.com/posts/QXG0)\n - [ ] [随着全球紧张局势加剧，针对能源行业的网络威胁激增](https://www.4hou.com/posts/1MDm)\n - [ ] [中央网信办开展 “清朗·整治AI技术滥用” 专项行动](https://www.4hou.com/posts/jBKP)\n- InfoSec Write-ups - Medium\n - [ ] [Tackling Conditional Blind SQLi Like a Pro: OSWE Prep Powered by Burp Suite](https://infosecwriteups.com/tackling-conditional-blind-sqli-like-a-pro-oswe-prep-powered-by-burp-suite-9764ba210b40?source=rss----7b722bfd1b8d---4)\n - [ ] [Mastering Rate Limit Bypass Techniques](https://infosecwriteups.com/mastering-rate-limit-bypass-techniques-fff9499b0f42?source=rss----7b722bfd1b8d---4)\n - [ ] [UUIDs: A False Sense Of Security](https://infosecwriteups.com/uuids-a-false-sense-of-security-10467497daae?source=rss----7b722bfd1b8d---4)\n - [ ] [$50,000 Bounty: GitHub Access Token](https://infosecwriteups.com/50-000-bounty-github-access-token-c29cb6f00182?source=rss----7b722bfd1b8d---4)\n - [ ] [️Recon Automation Like a Pro: My 5-Stage System to Catch More Bugs](https://infosecwriteups.com/%EF%B8%8Frecon-automation-like-a-pro-my-5-stage-system-to-catch-more-bugs-4fff7b7c4726?source=rss----7b722bfd1b8d---4)\n - [ ] [Top 10 Ways Hackers Exploit Web Applications (and How to Prevent Them)](https://infosecwriteups.com/top-10-ways-hackers-exploit-web-applications-and-how-to-prevent-them-6dfd05630e2c?source=rss----7b722bfd1b8d---4)\n - [ ] [Open Redirect Vulnerability: What It Is and Why It Matters](https://infosecwriteups.com/open-redirect-vulnerability-what-it-is-and-why-it-matters-b600117c61a7?source=rss----7b722bfd1b8d---4)\n - [ ] [Wazuh: The Free SIEM That Fights Like a Paid One](https://infosecwriteups.com/wazuh-the-free-siem-that-fights-like-a-paid-one-9554ed1272da?source=rss----7b722bfd1b8d---4)\n - [ ] [Unlimited Emails: A Bug That Let Me Spam Anyone =>$250](https://infosecwriteups.com/unlimited-emails-a-bug-that-let-me-spam-anyone-250-e0d1b14ae810?source=rss----7b722bfd1b8d---4)\n - [ ] [Bypassing Email Verification](https://infosecwriteups.com/bypassing-email-verification-299d94230724?source=rss----7b722bfd1b8d---4)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [Ruckus IoT Controller 1.7.1.0 Undocumented Backdoor Account](https://cxsecurity.com/issue/WLB-2025050027)\n - [ ] [Firefox ESR 115.11 PDF.js Arbitrary JavaScript execution](https://cxsecurity.com/issue/WLB-2025050026)\n - [ ] [Explore IT CMS - Blind SQL Injection Vulnerability](https://cxsecurity.com/issue/WLB-2025050025)\n - [ ] [Synotec Holdings - Blind Sql Injection Vulnerability](https://cxsecurity.com/issue/WLB-2025050024)\n - [ ] [Apache ActiveMQ 6.1.6 Denial of Service](https://cxsecurity.com/issue/WLB-2025050023)\n- SecWiki News\n - [ ] [SecWiki News 2025-05-09 Review](http://www.sec-wiki.com/?2025-05-09)\n- Security Boulevard\n - [ ] [Microsoft Listens to Security Concerns and Delays New OneDrive Sync](https://securityboulevard.com/2025/05/microsoft-listens-to-security-concerns-and-delays-new-onedrive-sync/?utm_source=rss&utm_medium=rss&utm_campaign=microsoft-listens-to-security-concerns-and-delays-new-onedrive-sync)\n - [ ] [Stay Confident with Robust Secrets Management](https://securityboulevard.com/2025/05/stay-confident-with-robust-secrets-management/?utm_source=rss&utm_medium=rss&utm_campaign=stay-confident-with-robust-secrets-management)\n - [ ] [How Protected Are Your NHIs in Cloud Environments?](https://securityboulevard.com/2025/05/how-protected-are-your-nhis-in-cloud-environments/?utm_source=rss&utm_medium=rss&utm_campaign=how-protected-are-your-nhis-in-cloud-environments)\n - [ ] [Feel Reassured with Advanced Secret Scanning](https://securityboulevard.com/2025/05/feel-reassured-with-advanced-secret-scanning/?utm_source=rss&utm_medium=rss&utm_campaign=feel-reassured-with-advanced-secret-scanning)\n - [ ] [OpenText Report Shines Spotlight on Malware Infection Rates](https://securityboulevard.com/2025/05/opentext-report-shines-spotlight-on-malware-infection-rates/?utm_source=rss&utm_medium=rss&utm_campaign=opentext-report-shines-spotlight-on-malware-infection-rates)\n - [ ] [BSidesLV24 – Proving Ground – CVSS v4 – A Better Version Of An Imperfect Solution](https://securityboulevard.com/2025/05/bsideslv24-proving-ground-cvss-v4-a-better-version-of-an-imperfect-solution/?utm_source=rss&utm_medium=rss&utm_campaign=bsideslv24-proving-ground-cvss-v4-a-better-version-of-an-imperfect-solution)\n - [ ] [The 2025 State of Application Risk Report: Understanding AI Risk in Software Development](https://securityboulevard.com/2025/05/the-2025-state-of-application-risk-report-understanding-ai-risk-in-software-development/?utm_source=rss&utm_medium=rss&utm_campaign=the-2025-state-of-application-risk-report-understanding-ai-risk-in-software-development)\n - [ ] [The CMMC Rev 2 to Rev 3 Memo: What’s Changed?](https://securityboulevard.com/2025/05/the-cmmc-rev-2-to-rev-3-memo-whats-changed/?utm_source=rss&utm_medium=rss&utm_campaign=the-cmmc-rev-2-to-rev-3-memo-whats-changed)\n - [ ] [Why You Should Segment RDP & SSH](https://securityboulevard.com/2025/05/why-you-should-segment-rdp-ssh/?utm_source=rss&utm_medium=rss&utm_campaign=why-you-should-segment-rdp-ssh)\n - [ ] [ColorTokens + Nozomi Networks: A Partnership That’s Built for the Trenches of OT and IoT Security](https://securityboulevard.com/2025/05/colortokens-nozomi-networks-a-partnership-thats-built-for-the-trenches-of-ot-and-iot-security/?utm_source=rss&utm_medium=rss&utm_campaign=colortokens-nozomi-networks-a-partnership-thats-built-for-the-trenches-of-ot-and-iot-security)\n- Recent Commits to cve:main\n - [ ] [Update Fri May 9 15:59:04 UTC 2025](https://github.com/trickest/cve/commit/6f4319a4a59d1545c44f0d72faebeb8e0dcfc6a8)\n- 奇安信攻防社区\n - [ ] [基于影子栈的大模型系统防御技术](https://forum.butian.net/share/4309)\n- Trustwave Blog\n - [ ] [Why Offensive Security Is Crucial for Retail Resilience](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/why-offensive-security-is-crucial-for-retail-resilience/)\n - [ ] [From Facebook Ad to Near Breach: The Power of Threat Hunting in Modern MDR](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/from-facebook-ad-to-near-breach-the-power-of-threat-hunting-in-modern-mdr/)\n- Doonsec's feed\n - [ ] [【应急响应】- 日志流量如何下手？](https://mp.weixin.qq.com/s?__biz=Mzk1Nzk3MjA5Ng==&mid=2247485348&idx=1&sn=52db408094ecaed1d998d6e09543a248)\n - [ ] [2024年末网络安全上市公司员工总数同比下降10.5%，回到2021年初的水平](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485810&idx=1&sn=e8b60ee515aa4ce000717806cc4704db)\n - [ ] [【干货】笑傲职场的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485810&idx=2&sn=a759ada09741eb4eb43da0b52c1f1308)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485810&idx=3&sn=56b6f9f50c1c034afc3e3cf9c00d0166)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485810&idx=4&sn=6d862141cb5336f55a991aac242a9114)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485810&idx=5&sn=72a5a2a4cca9e7955a3c50f2e4805d34)\n - [ ] [【资料】论人工智能的毁灭风险](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651149922&idx=1&sn=f8057a83c9a82178a7ecc8984582e378)\n - [ ] [【通知】四川警察学院2025年公开招聘博士等高层次人才的公告](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651149922&idx=2&sn=b0f39ac055efc7c475ab47efc2e6df1c)\n - [ ] [深入解读迪普科技2024年财报：营收11.5亿、盈利1.6亿、人均创收67万](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491310&idx=1&sn=a3f1a6a95ec62cae263eb2ac95d8582e)\n - [ ] [6 月相约上海，共探商用密码创新蓝海，诚邀您拨冗参会](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491310&idx=2&sn=7d5f09e666daa9aab624e16650046757)\n - [ ] [偷偷发个预告，第二届 “Parloo 杯”CTF 应急响应挑战赛](https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247490941&idx=1&sn=9b7e0e4023b04a844514695d47238a24)\n - [ ] [亲爱的你不要点击，看来是被黑客攻击了](https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485134&idx=1&sn=af9e9724176b9b1f53fff2f478e4fee8)\n - [ ] [重磅！米好信安上榜安全牛第十二版《中国网络安全行业全景图》](https://mp.weixin.qq.com/s?__biz=MzU1NTYxMjA5MA==&mid=2247505736&idx=1&sn=73ef8a45710d9c675e1a0738b4fa3f3a)\n - [ ] [全新电子数据取证模式！AI快速取证系统“霹雳”上线](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651444634&idx=1&sn=11c0f2fdc3aeb0d1888620dcac423bf0)\n - [ ] [全职岗位汇总-长期不断更新](https://mp.weixin.qq.com/s?__biz=MzkwNDI0MjkzOA==&mid=2247486054&idx=1&sn=5148b839003b7d6b9816b62019febcac)\n - [ ] [【工信动态】深入贯彻中央八项规定精神学习教育中央第四指导组指导督导工业和信息化部见面会召开](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649252082&idx=1&sn=030a60b5612d05f8a4ab1611724f68c7)\n - [ ] [印巴紧张局势加剧，主要金融和市场机构加强网络安全](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115630&idx=1&sn=7b9ceb6dd877b25514f1831898c8a874)\n - [ ] [耳环](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488273&idx=1&sn=fef73492c1d303ae9cfad3f701dbcfa3)\n - [ ] [github托管代码导致的敏感信息泄露](https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485558&idx=1&sn=eaa5b873a1c2a486d9ddc00e3f32073f)\n - [ ] [招聘｜京东｜安全研发工程师](https://mp.weixin.qq.com/s?__biz=MzkzMDQ5MzM1NA==&mid=2247484032&idx=1&sn=492ba1117af55b1d5ee9ad00f710adc2)\n - [ ] [【全球最大规模网络攻防战】41个国家参加北约“锁盾2025”网络防御演习](https://mp.weixin.qq.com/s?__biz=MzkxMzQwNDcxNg==&mid=2247487170&idx=1&sn=6306f20b5bfc5e024c74bcf908cf79fb)\n - [ ] [DeepSeek在银行业务场景的应用](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655278175&idx=1&sn=1901a7ca0ec31f768fe8b1d54e2475b7)\n - [ ] [没百万资产_千万别做好人！！努力活着就是对自己最大的安慰！！](https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247491073&idx=1&sn=2395fd73d896387201271a3738470db0)\n - [ ] [安全测试辅助bp插件 - AutoFuzz](https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486339&idx=1&sn=47fe3888047a8544ac9c9420b20d4ede)\n - [ ] [网络安全创新论坛 | 百度大模型安全斩获“2024年十大优秀网络安全创新成果”](https://mp.weixin.qq.com/s?__biz=MzA3NTQ3ODI0NA==&mid=2247487771&idx=1&sn=756199516a763374e48c2950635f9bbd)\n - [ ] [中国人民银行业务领域数据安全管理办法](https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499849&idx=1&sn=051f58092163dac96d9cb01d3f25f8ba)\n - [ ] [Knowbe4《2025网络钓鱼威胁趋势报告》快速解读](https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247485115&idx=1&sn=38e1e0f6f4f19024449c42aa22e50dcd)\n - [ ] [网络安全顶会——SP 2025 论文清单与摘要](https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485954&idx=1&sn=d361d90c096adcfc889b969fb4614c84)\n - [ ] [如何通过XSS接管 Microsoft 账户](https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247483935&idx=1&sn=0fbe8c7a7cbf9784bb9f3f8735c7d9b8)\n - [ ] [河南省委书记刘宁会见奇安信集团董事长齐向东](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626748&idx=1&sn=9c74cc42d4dc9c66a082448631e40958)\n - [ ] [奇安信再次入选全球《静态应用安全测试解决方案全景图》代表厂商](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626748&idx=2&sn=906a7a570aca57714ee3ad91d065b732)\n - [ ] [丰田中国到访奇安信安全中心](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626748&idx=3&sn=cc36ad3574d6302f4dc27c2beb9f5b82)\n - [ ] [【DeepSeek实践】Mcp+DeepSeek的Demo编写体验](https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503224&idx=1&sn=f44af92eb9a16188961631bbf0424227)\n - [ ] [思路清晰，我是菜B，8小时爆肝windows 32位syncbreeze缓冲区溢出漏洞复现](https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247484976&idx=1&sn=6f68502e14ea7cd7b9cbb0cac874a1e7)\n - [ ] [紫金山实验室党委召开会议 推动科技创新加快转化为新质生产力](https://mp.weixin.qq.com/s?__biz=MzU4NDc2MzcwNw==&mid=2247499103&idx=1&sn=56e09294c9a68f25ec3ba6cd01b0a2c5)\n - [ ] [网络安全界的“瑞士军刀之netcat工具使用](https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484438&idx=1&sn=6c8525a3b68d1d0318d9a4621175dae7)\n - [ ] [7天掌握Claude 3.7账号使用的六步进阶指南（内含官方隐藏技巧）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247502783&idx=1&sn=45a1f86ba10873c1add2f179d4342ea4)\n - [ ] [7天掌握Claude 3.7账号使用秘籍：三大核心技巧让你效率翻10倍（内附独家进阶方案）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247502783&idx=2&sn=18732f13f1ff053c93dfa236257b8e0a)\n - [ ] [7天掌握Claude 3.7账号使用秘籍：新手3步上手高阶AI的全流程攻略（内含隐藏技巧）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247502783&idx=3&sn=c4f05e63219af5e5bf3d8347b75f8322)\n - [ ] [7天掌握Claude 3.7账号使用全攻略：3个核心技巧+4个高阶玩法（含稀缺资源渠道）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247502783&idx=4&sn=d6629b2ff86576e0fbcddab3f6f13255)\n - [ ] [7天掌握Claude 3.7账号使用全攻略：3个隐藏技巧+5个高级提示（内含稀缺资源）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247502783&idx=5&sn=10a9144e1d316131acf9fe6e742e8f78)\n - [ ] [7天掌握Claude 3.7账号使用全指南！三种方法解锁超强AI，五步突破聊天限制（附隐藏功能教程）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247502783&idx=6&sn=0318d02c444fd9a3ef34d14eb6b8db1d)\n - [ ] [7天掌握Claude 3.7账号完整使用攻略：从零开始的5个高级技巧（内附独家资源）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247502783&idx=7&sn=25a963d847622bb6d55ee47ba3dde56f)\n - [ ] [恶意 npm 包通过后门感染 3,200+ 游标用户，窃取凭据](https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492526&idx=1&sn=2a01f856513647ce955a0bc632ab2477)\n - [ ] [每日安全动态推送(25/5/9)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960093&idx=1&sn=fd2ebf927e985931080c7e092d7fbb56)\n - [ ] [如果脱离IT体系，安全能不能做得更好？](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247639339&idx=1&sn=ac942ff282e0964e140dacfae9c45bba)\n - [ ] [诸子云｜甲方 ：如何看待安全岗位年龄限制？怎么看待用Augment开发出本地大模型防火墙？](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247639339&idx=2&sn=72bc54a71787896d43237d2b37b5e5c9)\n - [ ] [CSO评选 | 提名·直播：第四场预告](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247639339&idx=3&sn=f4da240ae2b4cca7851a526cde99fa27)\n - [ ] [流量分析 - 黑客(解)](https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485784&idx=1&sn=73fb7caf72f567e4619423ce27d8ab95)\n - [ ] [吉大正元2025年第一季度报告，营收0.61亿，同比骤降51.89%。](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247490600&idx=1&sn=8abe504aa60b9f5433173fd11467d686)\n - [ ] [还是得做安全](https://mp.weixin.qq.com/s?__biz=MzU2NzkxMDUyNg==&mid=2247492143&idx=1&sn=8fae9c1fc338d5ecb0cf07c046e64ca6)\n - [ ] [通知 | 三部门：全面推行以专项信用报告替代有无违法违规记录证明（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=2&sn=31440493440c39a7f37dca361c5cb63d)\n - [ ] [中国人民银行发布《中国人民银行业务领域数据安全管理办法》（附答记者问）](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635760&idx=2&sn=95ead6e6181380402d1bff89817cedd3)\n - [ ] [观点 | 系统治理护航AI技术向善而行](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635760&idx=3&sn=dd6665519e185e596cf5cb391fe5287a)\n - [ ] [美国著名服装品牌因隐私违规被罚250万元](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635760&idx=4&sn=fed6c53f75e6a9bffd261963ceba3dc3)\n - [ ] [护网先锋·白帽守护行动 — QFSRC挑战赛](https://mp.weixin.qq.com/s?__biz=Mzk0NTY4OTM3Nw==&mid=2247483982&idx=1&sn=09b74952d7eccf2ab8d7015caa925e7d)\n - [ ] [总结分析Lockbit数据泄露的背后](https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489254&idx=1&sn=b5bdd11ef5887b64599230399e8c2b85)\n - [ ] [打靶日记 Escalate_Linux](https://mp.weixin.qq.com/s?__biz=Mzk1Nzc0MzY3NA==&mid=2247486616&idx=1&sn=738914104a6b2b1b8d3373b354b7aede)\n - [ ] [【免杀】C2免杀 | 概念篇](https://mp.weixin.qq.com/s?__biz=MzUyNTUyNTA5OQ==&mid=2247485227&idx=1&sn=5ec7100fa4045fb4466298fd5bf429ab)\n - [ ] [现在有什么行业可以让人快速翻身上岸？可以试试这个方向 上岸其实不难！](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529653&idx=1&sn=75c9ae2288380ea72ebba08148124bb9)\n - [ ] [使用 Terraform、Nebula、Caddy 和 Cobalt Strike 实现 C2 基础设施自动化](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529653&idx=2&sn=2ea6b7ba1e7140bc84db0228c8d0c0d4)\n - [ ] [阿里CEO吴泳铭内网发文多次提及AI：让改变不仅落于口头](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932093&idx=1&sn=d111ea7bab55016ea972732d93f3161c)\n - [ ] [AI快讯：阿里开源创新大模型搜索引擎，京东争夺AI人才，英伟达开源代码大模型](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932093&idx=2&sn=139f66ffe02df576861b6a3de84b643a)\n - [ ] [98万！大模型应用开发平台项目](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932093&idx=3&sn=56859db890b9ff40c8529bf907ae566c)\n - [ ] [韩媒聚焦Lazarus攻击手段升级，CertiK联创顾荣辉详解应对之道](https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247504163&idx=1&sn=44f53871d32a1e4565bb18dc5ae20ed7)\n - [ ] [2025HW项目招人帖](https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486300&idx=1&sn=8f82ec4fddc6d5ab484855cc3ff04662)\n - [ ] [温馨母亲节 | 江苏国保致敬每一位伟大的母亲](https://mp.weixin.qq.com/s?__biz=MzU5MTQ4NTI0OA==&mid=2247487678&idx=1&sn=7cc94b56705ade1cc78344af1d46726a)\n - [ ] [王老师SRC挖洞培训课介绍](https://mp.weixin.qq.com/s?__biz=Mzk3NTk1NjM1MQ==&mid=2247487883&idx=1&sn=ade4e0578e7c585d287aa1e23d7bbbc4)\n - [ ] [【安全圈】波兰破获跨国DDoS攻击平台 抓获4名嫌疑人](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=1&sn=1b2ced6285c823f319ffd192c55b60db)\n - [ ] [【安全圈】\\\"地狱提款机\\\"重出江湖：新型加密钓鱼攻击席卷全球，盗取超900万美元](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=2&sn=7e600cf7e9152beb1ffc1e9d80a30ee1)\n - [ ] [【安全圈】虚假加密货币交易所广告入侵Facebook](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=3&sn=1ad65266724165c7200cbab554544364)\n - [ ] [【安全圈】Cisco IOS XE WLC 中的关键 CVE-2025-20188 (CVSS 10) 缺陷允许远程根部访问](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=4&sn=a0ceb517f0bd46bd1296a5aa917fbf4c)\n - [ ] [印巴冲突升级：开源情报与卫星图像揭示战场真相](https://mp.weixin.qq.com/s?__biz=Mzg3MDczNjcyNA==&mid=2247489318&idx=1&sn=1d7af64c540ac54df5e64e6eca710c83)\n - [ ] [安易科技成功晋级2025第十届安全创客汇40强](https://mp.weixin.qq.com/s?__biz=MzkwMTI3ODUxOQ==&mid=2247485267&idx=1&sn=fb389febf24fdb321df1d5f62ea843c0)\n - [ ] [共筑新智安全价值 | 蜚语科技登榜《中国网络安全全景图（第十二版），持续领航静态安全测试领域](https://mp.weixin.qq.com/s?__biz=MzI5NzI5NzY1MA==&mid=2247491662&idx=1&sn=cf795617112aa0e9e5151771a9de9849)\n - [ ] [如何优雅关闭 windows 默认杀毒软件？](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498759&idx=1&sn=333861560a845c5bbb48b9789e270653)\n - [ ] [安全资讯汇总：2025.5.5-2025.5.9](https://mp.weixin.qq.com/s?__biz=MzA4MTE0MTEwNQ==&mid=2668670263&idx=1&sn=dd19081833c5797124cfa563bf51c1b0)\n - [ ] [启明星辰亮相CHIMA2025 构建智慧医疗安全新生态](https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651733061&idx=1&sn=c8f226a92c29a58dfac8b2843d422589)\n - [ ] [人工智能生成合成内容标识政策法规宣讲会在重庆举办](https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649402135&idx=1&sn=ff4cb2a9fb683db05d1da8bdc9e6f7ff)\n - [ ] [AI在网络安全中的应用之钓鱼邮件检测](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490943&idx=1&sn=4a2b06b08da13633e0c0b365d8614305)\n - [ ] [AWVS最新破解版25.1.250204](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490943&idx=2&sn=78118a467bbb5e4c00f2915855f7550e)\n - [ ] [移动应用程序中网络代理技术的应用及其安全隐患](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490943&idx=3&sn=76dffdc3a48892a9ecc72ea3d50de5f3)\n - [ ] [权威解答！密评中与【国密证书】相关的若干Q&A](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490943&idx=4&sn=1a77e74bb79e5dfc7ff4910efc8d2ef2)\n - [ ] [击败倦怠：如何在CISSP之旅中保持动力](https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492691&idx=1&sn=14be06926ed9c747bd497fea4ff9de29)\n - [ ] [《中国人民银行业务领域数据安全管理办法》发布,附修订对照](https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247573883&idx=1&sn=35656a80f2b88b4059df5c8a24daadc0)\n - [ ] [快乐下载 v1.27 一款超强力多功能解析下载工具箱](https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247493792&idx=1&sn=509f2aa179f4ab9e887896ec9316e0d3)\n - [ ] [烽火狼烟丨暗网数据及攻击威胁情报分析周报（05/06-05/09）](https://mp.weixin.qq.com/s?__biz=Mzk0NjMxNTgyOQ==&mid=2247484597&idx=1&sn=8e472a0d8e74b83d6d7dcab980a60204)\n - [ ] [网络安全信息与动态周报2025年第18期（4月28日-5月4日）](https://mp.weixin.qq.com/s?__biz=Mzk0NjMxNTgyOQ==&mid=2247484597&idx=2&sn=2250909cf98544c4e2d6b0265dfb3d97)\n - [ ] [Android9安装burp证书解决浏览器报错：该网站的安全证书有问题](https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486440&idx=1&sn=d9539535b48783e6923b28a9ef4cb11b)\n - [ ] [零系统调用的暗度陈仓：深度解构io_uring新型Rootkit的攻击防护](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496377&idx=1&sn=27cbb8a50866b909bd9a1cb441df1a6f)\n - [ ] [关于公司经营现状及应对措施的声明](https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247514152&idx=1&sn=9677d6b37cbda30b73ebbf33a3a38536)\n - [ ] [信息安全漏洞周报【第021期】](https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064140&idx=1&sn=d260768ad429a25cbf848cf56cd7d89a)\n - [ ] [发布 | 中国人民银行发布《中国人民银行业务领域数据安全管理办法》（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=1&sn=191232065f01e2a27d524a0bb91c8242)\n - [ ] [专家解读 | 李俊慧：网络司法持续深化，网络治理更加从容](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=3&sn=8c3271f4cb984245de1b8146c6ef5f88)\n - [ ] [前沿 | 欧盟金融业供应链安全立法对我国的启示](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=4&sn=f1917afdbee07d6886f9291bd6e6be77)\n - [ ] [盘点 | 中国互联网联合辟谣平台2025年4月辟谣榜](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=5&sn=00283af2fe0ad9bc072b2db2602db840)\n - [ ] [研究分析丨基于AI大模型技术构建安全业务融合的工业控制系统安全可信防护体系](https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247533171&idx=1&sn=712c3274fba2b8fd7305ea7f12aacc99)\n - [ ] [数据安全丨2024数商产业场景调研报告（附下载）](https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247533171&idx=2&sn=28297d607966bab9909d3df4d1f56dd0)\n - [ ] [5月网络安全竞赛高能亮点速看](https://mp.weixin.qq.com/s?__biz=MzkyNDA5NjgyMg==&mid=2247501575&idx=1&sn=facd65158d2973c10bde41cd1524b6e2)\n - [ ] [WordPress 广告欺诈插件每天产生 14 亿个广告请求](https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492772&idx=1&sn=de2e0eddde72323f9ea608a593b87a33)\n - [ ] [AI换脸，一场娱乐引发的安全思考](https://mp.weixin.qq.com/s?__biz=MzAwNTg2NjYxOA==&mid=2650743471&idx=1&sn=7107b602f7a90229ae1e7936972a504d)\n - [ ] [直播预告｜网易易盾携手百融云创，聚焦金融大模型攻防对话](https://mp.weixin.qq.com/s?__biz=MzAwNTg2NjYxOA==&mid=2650743471&idx=2&sn=1106d3952805d40cf13ab32cc6126872)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [Mastering Rate Limit Bypass Techniques](https://infosecwriteups.com/mastering-rate-limit-bypass-techniques-fff9499b0f42?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [$50,000 Bounty: GitHub Access Token](https://infosecwriteups.com/50-000-bounty-github-access-token-c29cb6f00182?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [️Recon Automation Like a Pro: My 5-Stage System to Catch More Bugs](https://infosecwriteups.com/%EF%B8%8Frecon-automation-like-a-pro-my-5-stage-system-to-catch-more-bugs-4fff7b7c4726?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Bypassing Email Verification](https://infosecwriteups.com/bypassing-email-verification-299d94230724?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Exposed Session Tokens via Misconfigured Endpoint](https://infosecwriteups.com/exposed-session-tokens-via-misconfigured-endpoint-c6676b79476e?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [⚔️ Unsafe Eval = Unlimited Control: How a JS Sink Let Me Run Anything](https://infosecwriteups.com/%EF%B8%8F-unsafe-eval-unlimited-control-how-a-js-sink-let-me-run-anything-60794929a295?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [$840 Bounty: How I Stole OAuth Tokens from Twitter](https://infosecwriteups.com/840-bounty-how-i-stole-oauth-tokens-from-twitter-733f82857eda?source=rss----7b722bfd1b8d--bug_bounty)\n- Project Zero\n - [ ] [Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages](https://googleprojectzero.blogspot.com/2025/05/breaking-sound-barrier-part-i-fuzzing.html)\n- Binary Ninja\n - [ ] [Advanced Binary Search: Finding Needles in Binary Haystacks](https://binary.ninja/2025/05/09/advanced-binary-search.html)\n- Didier Stevens\n - [ ] [Update: oledump.py Version 0.0.81](https://blog.didierstevens.com/2025/05/09/update-oledump-py-version-0-0-81/)\n- Reverse Engineering\n - [ ] [How I ruined my vacation by reverse engineering Windows Security Center](https://www.reddit.com/r/ReverseEngineering/comments/1kieu5l/how_i_ruined_my_vacation_by_reverse_engineering/)\n - [ ] [Nintendo Threatens to Brick Your Switch 2 if you RE it](https://www.reddit.com/r/ReverseEngineering/comments/1kiqhqv/nintendo_threatens_to_brick_your_switch_2_if_you/)\n - [ ] [Under the microscope: The Lost World – Jurassic Park (Saturn, PlayStation)](https://www.reddit.com/r/ReverseEngineering/comments/1kiwv58/under_the_microscope_the_lost_world_jurassic_park/)\n - [ ] [Fuzzing Windows Defender with loadlibrary in 2025](https://www.reddit.com/r/ReverseEngineering/comments/1kiig7v/fuzzing_windows_defender_with_loadlibrary_in_2025/)\n- Malwarebytes\n - [ ] [Google Chrome will use AI to block tech support scam websites](https://www.malwarebytes.com/blog/news/2025/05/google-chrome-will-use-ai-to-block-tech-support-scam-websites)\n- SentinelOne\n - [ ] [The Good, the Bad and the Ugly in Cybersecurity – Week 19](https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-19-6/)\n - [ ] [Insider Risk Revisited: Espionage, Encryption & Economics](https://www.sentinelone.com/blog/insider-risk-revisited-espionage-encryption-and-economics/)\n- Webroot Blog\n - [ ] [Mobile security matters: Protecting your phone from text scams](https://www.webroot.com/blog/2025/05/09/mobile-security-matters-protecting-your-phone-from-text-scams/)\n- Exploit-DB.com RSS Feed\n - [ ] [[remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)](https://www.exploit-db.com/exploits/52288)\n - [ ] [[local] VirtualBox 7.0.16 - Privilege Escalation](https://www.exploit-db.com/exploits/52287)\n - [ ] [[webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation](https://www.exploit-db.com/exploits/52286)\n - [ ] [[webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection](https://www.exploit-db.com/exploits/52285)\n - [ ] [[local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation](https://www.exploit-db.com/exploits/52284)\n- VMRay\n - [ ] [Release Highlights: VMRay Platform 2025.2.0](https://www.vmray.com/release-highlights-vmray-platform-2025-2-0/)\n- Microsoft Security Response Center\n - [ ] [Congratulations to the Top MSRC 2025 Q1 Security Researchers!](https://msrc.microsoft.com/blog/2025/05/congratulations-to-the-top-msrc-2025-q1-security-researchers/)\n- bishopfox.com\n - [ ] [Before You Red Team: Fix These 5 Common Mistakes](https://bishopfox.com/blog/before-red-team-fix-these-5-common-mistakes)\n- 博客园 - 渗透测试中心\n - [ ] [NPS内网穿透详细案例 - 渗透测试中心](https://www.cnblogs.com/backlion/p/18868280)\n - [ ] [零基础JS逆向和前端加密暴力破解 - 渗透测试中心](https://www.cnblogs.com/backlion/p/18867823)\n - [ ] [自搭建蜜罐到反制攻击队详解教程 - 渗透测试中心](https://www.cnblogs.com/backlion/p/18867809)\n - [ ] [PHP从零学习到Webshell免杀手册 - 渗透测试中心](https://www.cnblogs.com/backlion/p/18867807)\n - [ ] [JAVA半自动化代码审计实战 - 渗透测试中心](https://www.cnblogs.com/backlion/p/18867804)\n- HackerNews\n - [ ] [​​南非航空遭遇网络攻击，多个运营系统暂时中断](https://hackernews.cc/archives/58666)\n - [ ] [教育巨头培生集团遭受网络攻击，客户数据泄露](https://hackernews.cc/archives/58663)\n - [ ] [LockBit 勒索软件网站遭入侵，内部谈判记录被曝光](https://hackernews.cc/archives/58660)\n - [ ] [网络安全专家警告：REAL ID 成全球黑客“巨型靶心”](https://hackernews.cc/archives/58656)\n - [ ] [Cats Tower 游戏泄露 45 万用户隐私数据](https://hackernews.cc/archives/58653)\n - [ ] [黑客发现绕过 SentinelOne EDR 解决方案的新技术](https://hackernews.cc/archives/58651)\n - [ ] [俄罗斯黑客利用 ClickFix 虚假验证码传播新型 LOSTKEYS 恶意软件](https://hackernews.cc/archives/58648)\n- 安全分析与研究\n - [ ] [针对红队免杀CS测试样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491882&idx=1&sn=8c3efd770f0234656af2e67e6e80a373&subscene=0)\n- 奇客Solidot–传递最新科技情报\n - [ ] [Linux 停止支持 486 和第一代奔腾处理器](https://www.solidot.org/story?sid=81251)\n - [ ] [不可避免的内存安全（Memory Safety）之路](https://www.solidot.org/story?sid=81250)\n - [ ] [Linux 发行版 AnduinOS 的维护者是微软华裔工程师](https://www.solidot.org/story?sid=81249)\n - [ ] [特定基因让花散发出臭味](https://www.solidot.org/story?sid=81248)\n - [ ] [印度要求 X 在其境内屏蔽逾 8000 个账号](https://www.solidot.org/story?sid=81247)\n - [ ] [罗马天主教选择首位美籍枢机为教宗](https://www.solidot.org/story?sid=81246)\n- 安全客\n - [ ] [勒索风暴席卷金融行业，406起攻击暴露新危机](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788548&idx=1&sn=f494f2b0019b53b104727c1645c848af&subscene=0)\n- 黑海洋 - Wiki\n - [ ] [如何注册ASU.edu教育邮箱并获取学生福利](https://blog.upx8.com/4794)\n- 奇安信病毒响应中心\n - [ ] [每周勒索威胁摘要](https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498423&idx=1&sn=646d9c5867753be80fde125654be5c02&subscene=0)\n- 灾难控制 局\n - [ ] [Linux EDR 工程师招聘](https://mp.weixin.qq.com/s?__biz=MzI1NTc1NTcwNg==&mid=2247484392&idx=1&sn=044b1e8ad3f03981ad99a12973529cc0&subscene=0)\n- 绿盟科技技术博客\n - [ ] [美国发布《推动政府高效采购人工智能》备忘录，加速落实特朗普政府人工智能新政](https://blog.nsfocus.net/22-4/)\n- 安全内参\n - [ ] [美国防部拟加强采购软件安全验证：提高供应链可见性 禁止过时软件](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514317&idx=1&sn=52fd5122e186450377b5a8b18ff394a8&subscene=0)\n - [ ] [著名服装品牌因隐私违规被罚250万元](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514317&idx=2&sn=5d5bcae5c8a05943013c2a749c1cf47c&subscene=0)\n- 威努特安全网络\n - [ ] [公安部发布等保工作说明函，流行AI开发工具曝严重漏洞|一周特辑](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651132902&idx=1&sn=bdfaec57ddc0a69a2a89a2753a0597fa&subscene=0)\n- 奇安信威胁情报中心\n - [ ] [每周高级威胁情报解读(2025.05.02~05.08)](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247514809&idx=1&sn=273c9a60344ff8b773f25d823ae4f815&subscene=0)\n- KitPloit - PenTest & Hacking Tools\n - [ ] [Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale](http://www.kitploit.com/2025/05/witcher-managing-github-advanced.html)\n- 君哥的体历\n - [ ] [第五届企业安全实践群安全峰会（GCCP）成都站报名开启！](https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492078&idx=1&sn=8b9074cd95b787813b357421234400cb&subscene=0)\n- 云鼎实验室\n - [ ] [零系统调用的暗度陈仓：深度解构io_uring新型Rootkit的攻击防护](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496377&idx=1&sn=27cbb8a50866b909bd9a1cb441df1a6f&subscene=0)\n- dotNet安全矩阵\n - [ ] [.NET 内网攻防实战电子报刊](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499624&idx=2&sn=a2899f00753b5309eee67d027cab47e2&subscene=0)\n - [ ] [通过 Sharp4ReverseShell 获取反弹交互式 Shell](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499624&idx=3&sn=1d7427e746da399e129386c3020633da&subscene=0)\n - [ ] [从 .NET 代码审计看 ViewState 反序列化漏洞](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499624&idx=1&sn=7c645b1f4a16642c32bafc3802d9582a&subscene=0)\n- 安全圈\n - [ ] [【安全圈】波兰破获跨国DDoS攻击平台 抓获4名嫌疑人](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=1&sn=1b2ced6285c823f319ffd192c55b60db&subscene=0)\n - [ ] [【安全圈】\"地狱提款机\"重出江湖：新型加密钓鱼攻击席卷全球，盗取超900万美元](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=2&sn=7e600cf7e9152beb1ffc1e9d80a30ee1&subscene=0)\n - [ ] [【安全圈】虚假加密货币交易所广告入侵Facebook](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=3&sn=1ad65266724165c7200cbab554544364&subscene=0)\n - [ ] [【安全圈】Cisco IOS XE WLC 中的关键 CVE-2025-20188 (CVSS 10) 缺陷允许远程根部访问](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=4&sn=a0ceb517f0bd46bd1296a5aa917fbf4c&subscene=0)\n- 雷神众测\n - [ ] [这个端午，雷神众测与您一起“粽”享安全，“盒”力共赢！](https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503398&idx=1&sn=1ac9ae95355a2a8b4f45165fcad153e8&subscene=0)\n- 数世咨询\n - [ ] [为什么说密码时代快结束了？](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538714&idx=1&sn=66e0391cf49817b7b33e29c37d3d9f95&subscene=0)\n - [ ] [漏洞管理“扫雷”之动态优先级技术](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538714&idx=2&sn=d5c3a134feb1803915d85600ad4b9f08&subscene=0)\n- 安全牛\n - [ ] [AI的USB-C：MCP（模型上下文协议）缘何正成为网络安全的新战场](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136771&idx=1&sn=451b5341eb540ad42c8e1be9f6b2604a&subscene=0)\n - [ ] [Meta获赔1.67亿美元，历时6年的NSO间谍软件案尘埃落定；LockBit勒索软件团伙遭黑客入侵，谈判记录等被曝光 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136771&idx=2&sn=833554e2232eb5d33a9a39761cedf197&subscene=0)\n- 慢雾科技\n - [ ] [MistTrack：跨链协议分析系列之 Bitget Swap](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247502143&idx=1&sn=7aeabe16488909f906733631948dc44c&subscene=0)\n- 极客公园\n - [ ] [透视 2024 全球车企：谁家底更厚，谁已开始掉队？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653078984&idx=1&sn=03271780fac99496ff50382872faff8e&subscene=0)\n - [ ] [一台「反科技」的电动皮卡，要做美国版「五菱宏光」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653078971&idx=1&sn=e74ea9be0bf957ed230566f37bd07104&subscene=0)\n - [ ] [雷军：SU7 Ultra 正式挑战纽北；华为「鸿蒙电脑」亮相；盖茨将捐出所有财富，2045 关闭基金会 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653078969&idx=1&sn=eebbe50e0a37c1e9fa172289969b6c20&subscene=0)\n- 漏洞战争\n - [ ] [网络安全顶会——SP 2025 论文清单与摘要](https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485954&idx=1&sn=d361d90c096adcfc889b969fb4614c84&subscene=0)\n- 火绒安全\n - [ ] [【火绒安全周报】教培机构非法获取个人信息卖课/男子自研拍卖外挂软件牟利百万被捕](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525079&idx=1&sn=6b20896ca53366241e13568413e04aae&subscene=0)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525079&idx=2&sn=655d8673050caa20c08d05999dc7f0ee&subscene=0)\n- 安全攻防团队\n - [ ] [​云安全风险态势（2025.4.1-4.30）](https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485069&idx=1&sn=0e266fc84dff9fffbc429f48904ed7a8&subscene=0)\n- M01N Team\n - [ ] [每周蓝军技术推送（2025.4.26-5.9）](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494180&idx=1&sn=6fb30ca1ba3a3d62c5a76594deb79cc5&subscene=0)\n- 长亭科技\n - [ ] [【江苏省质检院X长亭科技】 在共创「网络攻防实验室」可以做些什么？](https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651389146&idx=1&sn=017519ee432c577f858d1c0afd895b99&subscene=0)\n- 信息安全国家工程研究中心\n - [ ] [解读 | 公网安〔2025〕1846号文关于对网络安全等级保护有关工作事项进一步说明的函](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247499542&idx=1&sn=815b52da837545529b71cc76d51a2cfc&subscene=0)\n- 代码卫士\n - [ ] [奇安信再次入选全球《静态应用安全测试解决方案全景图》代表厂商](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522958&idx=1&sn=f6a02f6fb6a3501c8980479bb16c65a7&subscene=0)\n- 情报分析师\n - [ ] [印美声纳浮标合作背后的技术体系与战略重塑（附对我风险研判）](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560918&idx=1&sn=28d2564b8f6438223fe77d6a7bb3714e&subscene=0)\n - [ ] [开源情报技巧：解构环境犯罪背后的金融网络](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560918&idx=2&sn=67b470cbf9640559478954399fbbee45&subscene=0)\n- 百度安全实验室\n - [ ] [网络安全创新论坛 | 百度大模型安全斩获“2024年十大优秀网络安全创新成果”](https://mp.weixin.qq.com/s?__biz=MzA3NTQ3ODI0NA==&mid=2247487771&idx=1&sn=756199516a763374e48c2950635f9bbd&subscene=0)\n- 嘶吼专业版\n - [ ] [超过1200个SAP NetWeaver服务器容易受到主动利用漏洞的攻击](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582281&idx=1&sn=eff71cea21807271925c234b3191e3c9&subscene=0)\n - [ ] [随着全球紧张局势加剧，针对能源行业的网络威胁激增](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582281&idx=2&sn=3439fef3e9f4b8b7d0dbebbed23b6957&subscene=0)\n- 看雪学苑\n - [ ] [安卓逆向之插件化技术学习](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593398&idx=1&sn=13b0c4e9ab5fdc1bd0663826a3c4f577&subscene=0)\n - [ ] [思科紧急修复致命漏洞，黑客可借此全面接管设备](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593398&idx=2&sn=37e1aae01543dd7d70cdf78802000f93&subscene=0)\n - [ ] [近期招聘合集汇总](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593398&idx=3&sn=da5e586f6c123edc22b555aee0dc2bfb&subscene=0)\n - [ ] [直播预约 | ARM系统深度调试与逆向：M核精华之存储与外设](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593398&idx=4&sn=b23ed043ec69fede5e313d8b77f1a8f0&subscene=0)\n- 复旦白泽战队\n - [ ] [参会预告 | 白泽带着4篇论文去参加S&P'25啦，我们旧金山见！](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247494628&idx=1&sn=e2e69a68a7bf32be04f765b8409bb788&subscene=0)\n- Yak Project\n - [ ] [SyntaxFlow 代码审计实战解析，拆解整个攻击链路！](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528172&idx=1&sn=731c6834920e64a4ae1160309d87260f&subscene=0)\n- 字节跳动技术团队\n - [ ] [火山引擎推出veimagex-mcp Server，打造专属您的图片智能助理](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247514424&idx=1&sn=30902f6b661137d1a3f67d293925ea7d&subscene=0)\n- Tide安全团队\n - [ ] [AI在网络安全中的应用之钓鱼邮件检测](https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247521237&idx=1&sn=cd222509863427c5bf7735627aadba71&subscene=0)\n- 中国信息安全\n - [ ] [发布 | 中国人民银行发布《中国人民银行业务领域数据安全管理办法》（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=1&sn=191232065f01e2a27d524a0bb91c8242&subscene=0)\n - [ ] [通知 | 三部门：全面推行以专项信用报告替代有无违法违规记录证明（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=2&sn=31440493440c39a7f37dca361c5cb63d&subscene=0)\n - [ ] [专家解读 | 李俊慧：网络司法持续深化，网络治理更加从容](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=3&sn=8c3271f4cb984245de1b8146c6ef5f88&subscene=0)\n - [ ] [前沿 | 欧盟金融业供应链安全立法对我国的启示](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=4&sn=f1917afdbee07d6886f9291bd6e6be77&subscene=0)\n - [ ] [盘点 | 中国互联网联合辟谣平台2025年4月辟谣榜](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242250&idx=5&sn=00283af2fe0ad9bc072b2db2602db840&subscene=0)\n- Securityinfo.it\n - [ ] [Lockbit hackerato: infrastruttura compromessa, ma il gruppo non si arrende](https://www.securityinfo.it/2025/05/09/lockbit-hackerato-infrastruttura-compromessa-ma-il-gruppo-non-si-arrende/?utm_source=rss&utm_medium=rss&utm_campaign=lockbit-hackerato-infrastruttura-compromessa-ma-il-gruppo-non-si-arrende)\n - [ ] [Npm, attacco supply chain: compromesso un package con 45.000 download settimanali](https://www.securityinfo.it/2025/05/09/npm-attacco-supply-chain-compromesso-un-package-con-45-000-download-settimanali/?utm_source=rss&utm_medium=rss&utm_campaign=npm-attacco-supply-chain-compromesso-un-package-con-45-000-download-settimanali)\n- bellingcat\n - [ ] [India-Pakistan Conflict: How a Deepfake Video Made it Mainstream](https://www.bellingcat.com/news/rest-of-world/2025/05/09/india-pakistan-conflict-how-a-deepfake-video-made-it-mainstream/)\n- IT Service Management News\n - [ ] [Fediverso](http://blog.cesaregallotti.it/2025/05/fediverso.html)\n - [ ] [DPCM 30 aprile su acquisti di beni e servizi IT](http://blog.cesaregallotti.it/2025/05/dpcm-30-aprile-su-acquisti-di-beni-e.html)\n- DARKNAVY\n - [ ] [HarmonyOS NEXT鸿蒙应用反编译器 .abcD 发布试用](https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247488520&idx=1&sn=932b759f6f2e125fbbac5f303a8df2be&subscene=0)\n- 山石网科安全技术研究院\n - [ ] [全国卫生健康行业网络安全攻防大赛理论学习——制度篇](https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512186&idx=1&sn=53a841e4095147e5e949f6dd19fa9ec3&subscene=0)\n- Schneier on Security\n - [ ] [Friday Squid Blogging: Japanese Divers Video Giant Squid](https://www.schneier.com/blog/archives/2025/05/friday-squid-blogging-japanese-divers-video-giant-squid.html)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Lockbit hackerato: infrastruttura compromessa, ma il gruppo non si arrende](https://www.securityinfo.it/2025/05/09/lockbit-hackerato-infrastruttura-compromessa-ma-il-gruppo-non-si-arrende/)\n - [ ] [Three Russians, one Kazakhstani charged in takedown of Anyproxy and 5socks botnets](https://therecord.media/5socks-anyproxy-botnets-takedown-russians-kazakhstani-charged)\n - [ ] [Ascension says recent data breach affects over 430,000 patients](https://www.bleepingcomputer.com/news/security/ascension-says-recent-data-breach-affects-over-430-000-patients/)\n - [ ] [German operation shuts down crypto mixer eXch, seizes millions in assets](https://therecord.media/exch-cryptocurrency-mixer-germany-takedown)\n - [ ] [FBI and Dutch police seize and shut down botnet of hacked routers](https://techcrunch.com/2025/05/09/fbi-and-dutch-police-seize-and-shut-down-botnet-of-hacked-routers/)\n - [ ] [Police dismantles botnet selling hacked routers as residential proxies](https://www.bleepingcomputer.com/news/security/police-dismantles-botnet-selling-hacked-routers-as-residential-proxies/)\n - [ ] [Google Chrome to use on-device AI to detect tech support scams](https://www.bleepingcomputer.com/news/security/google-chrome-to-use-on-device-ai-to-detect-tech-support-scams/)\n - [ ] [Hackers hijack Japanese financial accounts to conduct nearly $2 billion in trades](https://therecord.media/hackers-hijack-japan-finance-accounts)\n - [ ] [US surveillance watchdog says expanded use of facial recognition at airports should be voluntary](https://therecord.media/us-surveillance-watchdog-pclob-airport-facial-recognition-tech)\n - [ ] [Chinese hackers behind attacks targeting SAP NetWeaver servers](https://www.bleepingcomputer.com/news/security/chinese-hackers-behind-attacks-targeting-sap-netweaver-servers/)\n - [ ] [Anti-ransomware Day 2025: come mitigare gli attacchi non convenzionali e con l’AI](https://www.cybersecurity360.it/nuove-minacce/ransomware/anti-ransomware-day-2025-come-mitigare-il-rischio-di-attacchi-non-convenzionali-e-con-lai/)\n - [ ] [Germany takes down eXch cryptocurrency exchange, seizes servers](https://www.bleepingcomputer.com/news/security/germany-takes-down-exch-cryptocurrency-exchange-seizes-servers/)\n - [ ] [Sintesi riepilogativa delle campagne malevole nella settimana del 3 – 9 maggio](https://cert-agid.gov.it/news/sintesi-riepilogativa-delle-campagne-malevole-nella-settimana-del-3-9-maggio/)\n - [ ] [Sanzione privacy ad Acea: costa caro il mancato controllo sulle pratiche ingannevoli dei fornitori](https://www.cybersecurity360.it/news/sanzione-privacy-ad-acea-il-mancato-controllo-sulle-pratiche-ingannevoli-dei-fornitori-costa-caro/)\n - [ ] [Quanto costa un Data Breach?](https://www.certego.net/blog/quanto-costa-un-data-breach/)\n - [ ] [Israele, è controverso l’uso dell’AI nel conflitto di Gaza](https://www.cybersecurity360.it/nuove-minacce/israele-e-controverso-luso-dellai-nel-conflitto-di-gaza/)\n - [ ] [India Experiences Surge in Hacktivist Group Activity Amid Military Tensions](https://cyble.com/blog/india-experience-hacktivist-group-activity/)\n - [ ] [Data Act: la regolamentazione non riguarda solo i dispositivi IoT](https://www.cybersecurity360.it/legal/data-act-la-regolamentazione-non-riguarda-solo-i-dispositivi-iot/)\n - [ ] [Npm, attacco supply chain: compromesso un package con 45.000 download settimanali](https://www.securityinfo.it/2025/05/09/npm-attacco-supply-chain-compromesso-un-package-con-45-000-download-settimanali/)\n- ICT Security Magazine\n - [ ] [Security by Design: paradigma fondativo della resilienza digitale contemporanea](https://www.ictsecuritymagazine.com/articoli/security-by-design/)\n- 360数字安全\n - [ ] [点亮国家级地标！奥林匹克塔为360安全大模型“代言”](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580478&idx=1&sn=dffe5ca8447689b55060387a14caa450&subscene=0)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [ISC Stormcast For Friday, May 9th, 2025 https://isc.sans.edu/podcastdetail/9444, (Fri, May 9th)](https://isc.sans.edu/diary/rss/31934)\n- 迪哥讲事\n - [ ] [实战-漏洞挖掘](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497571&idx=1&sn=9ca2dfab23ac7985bbd0170175c7c154&subscene=0)\n- 小米安全中心\n - [ ] [2025 数字中国创新大赛 |「小米人车家生态安全左移」项目摘得银奖](https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247518049&idx=1&sn=c6656ef15f573cc9a7f2e947d3f3fcef&subscene=0)\n- KitPloit - PenTest Tools!\n - [ ] [Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale](http://www.kitploit.com/2025/05/witcher-managing-github-advanced.html)\n- Deeplinks\n - [ ] [How Signal, WhatsApp, Apple, and Google Handle Encrypted Chat Backups](https://www.eff.org/deeplinks/2025/05/back-it-back-it-let-us-begin-explain-encrypted-chat-backups)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [is class b network something necessary for a small starbucks store?](https://www.reddit.com/r/netsecstudents/comments/1kivrze/is_class_b_network_something_necessary_for_a/)\n - [ ] [DFIR for Security Engineer / Security Architect?](https://www.reddit.com/r/netsecstudents/comments/1kikaa6/dfir_for_security_engineer_security_architect/)\n - [ ] [GroqRunner is a USB-ready terminal AI assistant designed for real-time task scripting, file operations, and dynamic network tooling. Built for speed. Filtered. If this hits 50 stars, ill drop the uncensored version. that does stuff like this. (for educational, legal research, and/or redteamopts)](https://www.reddit.com/r/netsecstudents/comments/1kiunfp/groqrunner_is_a_usbready_terminal_ai_assistant/)\n - [ ] [Built a Passive Signal Detection System – No Camera, No Mic, Just BLE/Wi-Fi OSINT](https://www.reddit.com/r/netsecstudents/comments/1kib0k9/built_a_passive_signal_detection_system_no_camera/)\n- Computer Forensics\n - [ ] [Anyone running a detective agency?](https://www.reddit.com/r/computerforensics/comments/1kiogwa/anyone_running_a_detective_agency/)\n - [ ] [What are Budget-Friendly IR CERTs and/or Trainings?](https://www.reddit.com/r/computerforensics/comments/1kiiorf/what_are_budgetfriendly_ir_certs_andor_trainings/)\n - [ ] [Workflow for automated COC processing](https://www.reddit.com/r/computerforensics/comments/1kiqixk/workflow_for_automated_coc_processing/)\n - [ ] [Cómo saber cuando y a qué hora subieron un pdf en una página web](https://www.reddit.com/r/computerforensics/comments/1kic9ho/cómo_saber_cuando_y_a_qué_hora_subieron_un_pdf_en/)\n - [ ] [Changing the way a .pgp file is read help!](https://www.reddit.com/r/computerforensics/comments/1ki8v6m/changing_the_way_a_pgp_file_is_read_help/)\n- Blackhat Library: Hacking techniques and research\n - [ ] [How to log into someones acc](https://www.reddit.com/r/blackhat/comments/1kijrvx/how_to_log_into_someones_acc/)\n- Information Security\n - [ ] [18 Cyber Security News Worth Your Attention in First Week of May](https://www.reddit.com/r/Information_Security/comments/1kiq5u0/18_cyber_security_news_worth_your_attention_in/)\n - [ ] [The FIFTEENTH SocVel Cyber Quiz is here](https://www.reddit.com/r/Information_Security/comments/1kiixki/the_fifteenth_socvel_cyber_quiz_is_here/)\n - [ ] [5 Best Practices for Securing Your Intranet with SSL Certificates](https://www.reddit.com/r/Information_Security/comments/1kiduiz/5_best_practices_for_securing_your_intranet_with/)\n- Technical Information Security Content & Discussion\n - [ ] [Stealthy .NET Malware: Hiding Malicious Payloads as Bitmap Resources](https://www.reddit.com/r/netsec/comments/1kivxei/stealthy_net_malware_hiding_malicious_payloads_as/)\n- Graham Cluley\n - [ ] [LockBit ransomware gang breached, secrets exposed](https://www.tripwire.com/state-of-security/lockbit-ransomware-gang-breached-secrets-exposed)\n - [ ] [Hackers hit deportation airline GlobalX, leak flight manifests, and leave an unsubtle message for “Donnie” Trump](https://www.bitdefender.com/en-us/blog/hotforsecurity/hackers-globalx-message-trump)\n- Social Engineering\n - [ ] [How to reframe situations in a way that highlights common goals or values?](https://www.reddit.com/r/SocialEngineering/comments/1kif025/how_to_reframe_situations_in_a_way_that/)\n - [ ] [Religion used to be manipulation?](https://www.reddit.com/r/SocialEngineering/comments/1kie5c1/religion_used_to_be_manipulation/)\n - [ ] [The Beauty Bias can be exploited to manipulate](https://www.reddit.com/r/SocialEngineering/comments/1kiebi6/the_beauty_bias_can_be_exploited_to_manipulate/)\n- Your Open Hacker Community\n - [ ] [I just completed my highschool. I need a career advice.](https://www.reddit.com/r/HowToHack/comments/1kiitcg/i_just_completed_my_highschool_i_need_a_career/)\n - [ ] [How Would You Exploit The Bazaar (99% of Calculations Are Done on the Server)?](https://www.reddit.com/r/HowToHack/comments/1kivq99/how_would_you_exploit_the_bazaar_99_of/)\n - [ ] [Wifite2 stuck on retrieving PSK](https://www.reddit.com/r/HowToHack/comments/1kidbnv/wifite2_stuck_on_retrieving_psk/)\n - [ ] [Is it allowed to directly attack the OWASP Juice Shop website using my Kali Linux, or is it not permitted and do I have to download the source code and run it in a virtual machine like VirtualBox first?](https://www.reddit.com/r/HowToHack/comments/1kiaap2/is_it_allowed_to_directly_attack_the_owasp_juice/)\n - [ ] [Bypass Volume Limiter on Headphones?](https://www.reddit.com/r/HowToHack/comments/1kigyb7/bypass_volume_limiter_on_headphones/)\n - [ ] [Can anyone help me](https://www.reddit.com/r/HowToHack/comments/1kiid3w/can_anyone_help_me/)\n- Security Affairs\n - [ ] [A cyber attack briefly disrupted South African Airways operations](https://securityaffairs.com/177656/hacking/a-cyber-attack-briefly-disrupted-south-african-airways-operations.html)\n - [ ] [Cybercriminal services target end-of-life routers, FBI warns](https://securityaffairs.com/177648/cyber-crime/malware-targets-end-of-life-routers.html)\n - [ ] [Russia-linked ColdRiver used LostKeys malware in recent attacks](https://securityaffairs.com/177638/apt/russia-linked-coldriver-used-lostkeys-malware-in-recent-attacks.html)\n - [ ] [SonicWall fixed SMA 100 flaws that could be chained to execute arbitrary code](https://securityaffairs.com/177626/hacking/sonicwall-fixed-sma-100-flaws-that-could-be-chained-to-execute-arbitrary-code.html)\n- The Hacker News\n - [ ] [BREAKING: 7,000-Device Proxy Botnet Using IoT, EoL Systems Dismantled in U.S. - Dutch Operation](https://thehackernews.com/2025/05/breaking-7000-device-proxy-botnet-using.html)\n - [ ] [OtterCookie v4 Adds VM Detection and Chrome, MetaMask Credential Theft Capabilities](https://thehackernews.com/2025/05/ottercookie-v4-adds-vm-detection-and.html)\n - [ ] [Initial Access Brokers Target Brazil Execs via NF-e Spam and Legit RMM Trials](https://thehackernews.com/2025/05/initial-access-brokers-target-brazil.html)\n - [ ] [Deploying AI Agents? Learn to Secure Them Before Hackers Strike Your Business](https://thehackernews.com/2025/05/deploying-ai-agents-learn-to-secure.html)\n - [ ] [Beyond Vulnerability Management – Can You CVE What I CVE?](https://thehackernews.com/2025/05/beyond-vulnerability-management-cves.html)\n - [ ] [Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials](https://thehackernews.com/2025/05/malicious-npm-packages-infect-3200.html)\n - [ ] [Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android](https://thehackernews.com/2025/05/google-rolls-out-on-device-ai.html)\n - [ ] [Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell](https://thehackernews.com/2025/05/chinese-hackers-exploit-sap-rce-flaw.html)\n- NOVASEC\n - [ ] [Windows下完整NMAP源码编译指南](https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490469&idx=1&sn=f9636eab5b4d25d92c023e3e50be9d2a&subscene=0)\n- 网安寻路人\n - [ ] [关于GDPR记录保存义务“简化”草案的情况和EDPB/EDPS的评论](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247507188&idx=1&sn=ac1cfd16e04e4a82bd78d5b26dca98fb&subscene=0)\n- Security Weekly Podcast Network (Audio)\n - [ ] [Sudo watch, AI Dreams, Kickidler, Powershool, Old Man Router, PSMU, Aaran Leyland... - SWN #475](http://sites.libsyn.com/18678/sudo-watch-ai-dreams-kickidler-powershool-old-man-router-psmu-aaran-leyland-swn-475)\n"}}, "archive/daily/2026/2026-05-26.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747311.5297136, "n": 38479, "h": "3caaa11ad6225d99", "c": "# 每日安全资讯（2026-05-26）\n\n- Paper - 知道创宇404实验室\n - [ ] [潜在对抗检测：基于大模型激活自适应探测的多轮攻击检测](https://paper.seebug.org/3486)\n- 博客\n - [ ] [gnutls_handshake() failed: The TLS connection was non-properly terminated.](https://dyrnq.com/gnutls_handshake-failed-the-tls-connection-was-non-properly-terminated/)\n- 美团技术团队\n - [ ] [从高拟真到真可用，LongCat-Video-Avatar 1.5 正式开源](https://tech.meituan.com/2026/05/25/longcat-video-avatar-1.5.html)\n- Recent Commits to cve:main\n - [ ] [Update Mon May 25 11:41:06 UTC 2026](https://github.com/trickest/cve/commit/46cfd030d2694f72badecfb6e139313dd1fe43c9)\n- 博客园 - potatso\n - [ ] [马氏距离以及其推导过程 - potatso](https://www.cnblogs.com/potatso/p/20150670)\n- SecWiki News\n - [ ] [SecWiki News 2026-05-25 Review](http://www.sec-wiki.com/?2026-05-25)\n- InfoSec Write-ups - Medium\n - [ ] [Testing SQL Injection Using Google gemma4:31b-cloud on PortSwigger’s Vulnerable Shop](https://infosecwriteups.com/testing-sql-injection-using-google-gemma4-31b-cloud-on-portswiggers-vulnerable-shop-ef9dc05dd1aa?source=rss----7b722bfd1b8d---4)\n - [ ] [Hacking the Scammers and Exposing Their Tactics in a Mission to Protect Nepalese Youth](https://infosecwriteups.com/hacking-the-scammers-and-exposing-their-tactics-in-a-mission-to-protect-nepalese-youth-173f67677c5c?source=rss----7b722bfd1b8d---4)\n - [ ] [The Invite That Lied: A Business Logic Flaw Hidden Behind LG’s Walls](https://infosecwriteups.com/the-invite-that-lied-a-business-logic-flaw-hidden-behind-lgs-walls-a49cca506294?source=rss----7b722bfd1b8d---4)\n - [ ] [How I Found 2 Bugs on BBC’s Subdomains and Made It Into Their Hall of Fame](https://infosecwriteups.com/how-i-found-2-bugs-on-bbcs-subdomains-and-made-it-into-their-hall-of-fame-86fc4be89e68?source=rss----7b722bfd1b8d---4)\n - [ ] [Building Another Vulnerable Lab — SSRF.](https://infosecwriteups.com/building-another-vulnerable-lab-ssrf-01c27ab92b4e?source=rss----7b722bfd1b8d---4)\n - [ ] [MonitorsFour HTB — HackTheBox Walkthrough | By Alham Rizvi](https://infosecwriteups.com/monitorsfour-htb-hackthebox-walkthrough-by-alham-rizvi-3862c72c498f?source=rss----7b722bfd1b8d---4)\n - [ ] [Rejected but Rewarded — What a GraphQL Misconfiguration Taught Me About Bug Bounty Triage.](https://infosecwriteups.com/rejected-but-rewarded-what-a-graphql-misconfiguration-taught-me-about-bug-bounty-triage-a69a9f42e12c?source=rss----7b722bfd1b8d---4)\n- Doonsec's feed\n - [ ] [鼎信安全xa0|xa0网络安全一周资讯](https://mp.weixin.qq.com/s/gupfHo4ChgnAUZB1roS7aw)\n - [ ] [工业和信息化部深入开展树立和践行正确政绩观学习教育督导工作](https://mp.weixin.qq.com/s/GExGEUDy6Wxx-ALTlAxfOQ)\n - [ ] [留下属于自己的行业印记 | 灰度安全创始人曹静受邀今晚报采访](https://mp.weixin.qq.com/s/io9H0yKSl5fTSn0qmzpOrw)\n - [ ] [OWASP MCP Top 10 2025中文版发布](https://mp.weixin.qq.com/s/1Nf6Nz_tOGpp1agpBWWy9A)\n - [ ] [每周网安资讯 （5.19-5.25）| 中国互联网协会发布《安全应急大模型》等10项团体标准](https://mp.weixin.qq.com/s/aK2XvqgLW_ExE5KJxgc3qA)\n - [ ] [国内上市公司近2000万条用户数据疑似泄露](https://mp.weixin.qq.com/s/-oSqt-9Nwgitle9bfdVv5Q)\n - [ ] [兼顾创新与安全：美国人工智能行政命令草案提出建立前沿AI安全部署框架](https://mp.weixin.qq.com/s/vXitHAYujgFFwLODqeTL9w)\n - [ ] [获取网络安全金牌认证，开启您的 CISSP之路](https://mp.weixin.qq.com/s/nF8DS2mPdc1AV3cYVzMLCw)\n - [ ] [国家网络与信息安全信息通报中心通报：主流JavaScript软件包管理平台npm遭供应链投毒攻击](https://mp.weixin.qq.com/s/3oLiraDdslkN7r-zqaSgZQ)\n - [ ] [黑客拼凑旧数据冒充OnlyFans新泄露，7.6万美元叫卖3.4亿用户隐私](https://mp.weixin.qq.com/s/jmCNRmYmz09giEoPsJgqZA)\n - [ ] [Google 42个月未修复的Chromium漏洞被公开 可劫持浏览器变\\\"僵尸节点\\\"](https://mp.weixin.qq.com/s/wGRVggdfNW1XsC8tpIhYNw)\n - [ ] [黑客入侵三大代码平台，34个恶意包窃取开发者密钥与加密货币](https://mp.weixin.qq.com/s/KElGYJwpws5JPaAqwdPrpQ)\n - [ ] [WantToCry勒索软件利用暴露的SMB服务实现远程加密闭环](https://mp.weixin.qq.com/s/Do60cVJOlYuUZhsx3_yESg)\n - [ ] [捷报丨盛邦安全成功中标招商局集团2026年WAF集中采购项目](https://mp.weixin.qq.com/s/bcfNb1281QFDtpy9FemFrg)\n - [ ] [CNVD漏洞周报2026年第20期](https://mp.weixin.qq.com/s/KRiMF2UI7p4_Iw-1zIpKYw)\n - [ ] [上周关注度较高的产品安全漏洞(20260518-20260524)](https://mp.weixin.qq.com/s/o25SNu3ZMUfrNhmt4kv-gw)\n - [ ] [YoroTrooper组织针对独联体及周边区域的攻击活动分析](https://mp.weixin.qq.com/s/9wGEdvuJVPIv_D6PpoaZHg)\n - [ ] [AUTOSAR OTA升级](https://mp.weixin.qq.com/s/x1RPq0hp8lgICYyn97kH0w)\n - [ ] [ECU的在线刷写流程](https://mp.weixin.qq.com/s/nc09gMtNYwuygkeG70pDaw)\n - [ ] [重磅嘉宾 | Maritime Ethanol & Methanol Alliance A Global Centre for Green Fuels Platform确认出席Green Ship APAC 2026](https://mp.weixin.qq.com/s/KZsdTrXCZIjE4ciF-wm1WA)\n - [ ] [国内首批！奇瑞汽车荣获AUTOSQS汽车软件（含AI）质量安全管理体系认证](https://mp.weixin.qq.com/s/5ViRIcyiwpPDd3grmKRs6Q)\n - [ ] [内网拿到数据库还在一个个表翻找吗？这个工具帮你自动化识别，提取，文末速取！](https://mp.weixin.qq.com/s/kNNGuq5WhTOA5p3t6Np_5g)\n - [ ] [一键接管目标机器，获取权限](https://mp.weixin.qq.com/s/cDeAlwyJtY98RSe7Z6_6Gw)\n - [ ] [【免费领】近400页！SQL注入攻击与防御实战教程](https://mp.weixin.qq.com/s/f4fQG_BK0tP15MprDI60pQ)\n - [ ] [网安周报｜一周全球网安重大事件速览（5.18—5.24）](https://mp.weixin.qq.com/s/deIXjjw4u2zEsjqxQCyLhQ)\n - [ ] [把握智能体发展机遇，加快构建智能体治理体系](https://mp.weixin.qq.com/s/YyntANKVXUxFkKnYd55iiw)\n - [ ] [AI Infra入门干货总结：大模型是如何高效推理的](https://mp.weixin.qq.com/s/gCRMjGry2EmBmv1CFfCzVQ)\n - [ ] [AI+泛安全｜观安信息聚力打造全栈式AI智能体安全体系 重构安全运营新范式](https://mp.weixin.qq.com/s/sPzKdzpugiB_3b0bzKXRiw)\n - [ ] [NGINX 爆出堆溢出高危漏洞，可致 RCE！我们开源了一款自查工具](https://mp.weixin.qq.com/s/eJ5WgkGQNN0FyOy1SzB1Bg)\n - [ ] [2026 ZeroG-CTF WEB 官方 Write-up](https://mp.weixin.qq.com/s/8jOjoUoNP5h7ypwjI1ostw)\n - [ ] [2026ZeroG-CTF MISC 官方Write-up](https://mp.weixin.qq.com/s/oaScBRZEph_HTstQPjb2Hg)\n - [ ] [关于TpoScan v3.2.4：专业版和高级版](https://mp.weixin.qq.com/s/bkVlBbUzemPY_VOPWoDsvQ)\n - [ ] [“六张网”建设提速，国家发改委：新型电网和城市地下管网预计各投5万亿元](https://mp.weixin.qq.com/s/e1CL65YeE2Br-2Ay5Zfbsg)\n - [ ] [发现超10000个高危和严重漏洞：Anthropic“玻璃之翼”项目揭示AI网络安全新挑战](https://mp.weixin.qq.com/s/HOKlBmtIUWfZhZNw_yUQCw)\n - [ ] [WebShell 流量特征分析及解密方法综述](https://mp.weixin.qq.com/s/kDB5spthG2VI8VPADnOFAA)\n - [ ] [结合Open WebUI，搭建专属个人的AI助手](https://mp.weixin.qq.com/s/RZK-GKzAPw-vJx8gcrWBsQ)\n - [ ] [应急响应打靶--Linux溯源](https://mp.weixin.qq.com/s/LpC3kUbC9mLy15kUZLvUrQ)\n - [ ] [网安必知的50个高危端口，新手挖漏洞必备！](https://mp.weixin.qq.com/s/oQdbevdGyUGtD8BbHaHcnA)\n - [ ] [一款专为红蓝工程师和渗透测试人员打造的跨平台安全工具箱](https://mp.weixin.qq.com/s/H1JazXTyLKPcZuGIcdm3OA)\n - [ ] [安全大佬内部学习笔记曝光，这也太牛了吧！（附完整版PDF）](https://mp.weixin.qq.com/s/HBGFzYvTUfaOuW_Yzca9HA)\n - [ ] [高校车联网安全教学的困局与破局](https://mp.weixin.qq.com/s/eCyYrvjxonXxHyFJ3rSRwQ)\n - [ ] [重磅发布！思维世纪大模型安全测评系统](https://mp.weixin.qq.com/s/76-mDbEaWTgUBWdur3qtew)\n - [ ] [研究发现，已删除的Google API密钥可保持有效时间长达23分钟](https://mp.weixin.qq.com/s/5ZdjKzVbQ0zkq5iXN9qjcA)\n - [ ] [安全简讯（2026.05.25）](https://mp.weixin.qq.com/s/SanKtb1-_vlWNKBRTblkxQ)\n - [ ] [组件漏洞学习特辑一 | Bash Shellshock（CVE-2014-6271）漏洞复现全解](https://mp.weixin.qq.com/s/aFZ-8EA1crEWGlU3RbeAqA)\n - [ ] [全国首部“AI产品合规”标准启动编制，欢迎加入起草组！](https://mp.weixin.qq.com/s/oLW2blY3LyIlsC4q6L6Kfg)\n - [ ] [常见Linux提权方法及防护建议](https://mp.weixin.qq.com/s/gZVYIlFbxWLnWdWQy3x8KA)\n - [ ] [AI带来的影响初现：互联网漏洞赏金大幅下降](https://mp.weixin.qq.com/s/1w9d6GAhWw71VLoGsIxt1g)\n - [ ] [【直播预告】新一代反钓鱼系统上线，AI 高仿真四步实战演练](https://mp.weixin.qq.com/s/Kfq67_ZWoih2dmhzEvw3ag)\n - [ ] [从摩尔定律到韬定律：华为给半导体产业的一份新答卷](https://mp.weixin.qq.com/s/j4oRU5o1H9o_tl-sX6iT0A)\n - [ ] [某健康教育平台 ASP.NET前台RCE代码审计](https://mp.weixin.qq.com/s/tlgsNLVwzYkvhSu7nM1LfQ)\n - [ ] [BadPods 实战：在 AWS EKS 上投放一枚“全权限”炸弹会怎样](https://mp.weixin.qq.com/s/LVrgqeHXjMkLTiios3eMVg)\n - [ ] [一文吃透全球四大隐私法规：GDPR、CCPA、APPI、中国个保法核心对比](https://mp.weixin.qq.com/s/FKVHGyHojLEoUfEr5Ux0Fg)\n - [ ] [招商证券：基于AIGC的数据中台数据研发和智能分析研究及探索](https://mp.weixin.qq.com/s/m0khPm8QmAEFPGkm0FM7pw)\n - [ ] [代码审计：保障软件安全与质量的核心手段](https://mp.weixin.qq.com/s/BPus_Fkm-DZRYASuGbu29A)\n - [ ] [原创—人要懂得给健康投入](https://mp.weixin.qq.com/s/NX0PftkPlY8IHoabs10SDg)\n - [ ] [CrewAI-Studio 未授权 RCE：从 JSON 导入到 eval 的任意代码执行](https://mp.weixin.qq.com/s/IbZczLPZUCW2yCWqIsGkNg)\n - [ ] [传统零信任之困:一个万人企业的OA(PC/WEB/APP)暴露面收敛实践](https://mp.weixin.qq.com/s/crcpFMw_jg3zBvvTgZU_3Q)\n - [ ] [通用 | 端午第三弹，粽享万元奖励金](https://mp.weixin.qq.com/s/ugZWegNn2s030lCcpPyuZg)\n - [ ] [补天端午活动第一弹 | “粽”测有礼](https://mp.weixin.qq.com/s/FamcxGTTtt9jhSmNN5Us2w)\n - [ ] [WhiteShadowv2.1更新，批量白加黑免杀如何实现“零编译”导出表劫持](https://mp.weixin.qq.com/s/eHyGcl_2mCbe3tzcjG5HPw)\n - [ ] [工业大数据分析与集成应用工业和信息化部重点实验室2026年度开放课题申报通知](https://mp.weixin.qq.com/s/R3B6Ykkd3oFeDgpZOCaHHQ)\n - [ ] [我国加快研究制定全国一体化算力网技术标准](https://mp.weixin.qq.com/s/C-vnd-LUPWMw-ltu7saBjQ)\n - [ ] [科技｜认知战迈向大模型驱动的认知智能体阶段](https://mp.weixin.qq.com/s/oFmZCudS60-2c4DacoAkPQ)\n - [ ] [江苏银行北京分行因数据安全多项合规违规被罚51.2万元](https://mp.weixin.qq.com/s/lwrmXfaEPwqrmtohRck90A)\n - [ ] [产业｜网安市场周度监测（2026-05-25）](https://mp.weixin.qq.com/s/imtydjicW8sBxTqjIMFwAA)\n - [ ] [屏南县农信社因”数据安全管理不到位”等被罚65万 一责任人被禁业三年](https://mp.weixin.qq.com/s/TFQXR4gYzPxSET31zSAFqw)\n - [ ] [建行南通分行因网络安全等多项违规被罚没超140万元](https://mp.weixin.qq.com/s/6_TaDFrjFrecg1vhJ01TXg)\n - [ ] [太原信都村镇银行因网络安全等多项违规被罚43.91万](https://mp.weixin.qq.com/s/oq2G1Ml502EDrz3YhpEMGg)\n - [ ] [java内存马应急排查指南](https://mp.weixin.qq.com/s/jOFOkvCQnm8KofpO4rmfIQ)\n - [ ] [免费领取无问AI网安模型的调用额度](https://mp.weixin.qq.com/s/SbG7nZUf4Hiijhta5fjf6Q)\n - [ ] [无问AI网安模型接入方法详解](https://mp.weixin.qq.com/s/Sst8Lfqae9zrspmBU4MzrA)\n - [ ] [网安行业的我们，会被AI淘汰吗？我写了五千字，希望可以帮到你](https://mp.weixin.qq.com/s/1IIgJiw-B2yGaJTCY-zwHQ)\n - [ ] [警惕翻译软件成泄密“暗道”，国家安全部提示三大隐患](https://mp.weixin.qq.com/s/yCwp5Yw5Ei54yjXBqVvkug)\n - [ ] [APKPure 上的 Telegram 被植入后门](https://mp.weixin.qq.com/s/gdRD4Ix20fRvI2uXvdL04Q)\n - [ ] [Hermes Kanban 使用指南：多智能体任务编排实战](https://mp.weixin.qq.com/s/BPSXWB6aLqoSUENJ3jG1aQ)\n - [ ] [安全警报 | 黑产叫卖全国公积金数据，泄露样本直指江苏某市！](https://mp.weixin.qq.com/s/_HUmTtRuxPbEcvVsczauEQ)\n - [ ] [什么是 CVE 公共漏洞和暴露？](https://mp.weixin.qq.com/s/M3U2Gw04lzVjaH1pDi1Zmw)\n - [ ] [关于开展“保密法的历史沿革与制度落地实操指引（下）”培训的通知](https://mp.weixin.qq.com/s/ILFB9hHPpaunb4pYn88BuQ)\n - [ ] [民参军企业“保密宣传教育月”活动中后期注意事项](https://mp.weixin.qq.com/s/a6_JjkffVP85jpKHErZQQg)\n - [ ] [【每周一品】非线性节点探测器](https://mp.weixin.qq.com/s/nv2EO1YMPk7CX5baCbeLRQ)\n - [ ] [石梁：规划养老需趁早，健康快乐享余生](https://mp.weixin.qq.com/s/oI0MG5W6mq49hqWi8uKfhA)\n - [ ] [花了几天，研究了下自动化渗透](https://mp.weixin.qq.com/s/MKZO7gW22MBjrkFjqbuK_A)\n - [ ] [JWT渗透姿势](https://mp.weixin.qq.com/s/UxrCRRFcwLOUE3sXsgidtg)\n - [ ] [【组合拳】某币币期权多语言交易所前台任意文件上传漏洞](https://mp.weixin.qq.com/s/f0zo1uc14oy3OtefuAq73g)\n - [ ] [抱歉，团队已经解散了！](https://mp.weixin.qq.com/s/3jhfj3ESGi-LPBTvLlkXLQ)\n - [ ] [山石网科亮相香港数码港Cyberport AI Frontier 2026活动](https://mp.weixin.qq.com/s/9H5H6Ds7SZvvwSWpQBEWhQ)\n - [ ] [AI 简讯｜Google I/O 2026大会;Anthropic 《Agentic Coding Trends 2026》深度解析](https://mp.weixin.qq.com/s/GQQLOys5xb4zYOE6usdSOA)\n - [ ] [【深度研判】美国对古巴认知战：情报-媒体协同泄露与制裁联动机制及其对我战略利益的深层影响](https://mp.weixin.qq.com/s/ClQKb4yKBlDAqKP5_2Vymw)\n - [ ] [喜报！计算机学院石川教授团队荣获2026年国际基础科学大会（ICBS）前沿科学奖](https://mp.weixin.qq.com/s/1C0EP2n6mYw8IWpWtyb4LQ)\n - [ ] [拉勾网破产了！曾估值2.2亿](https://mp.weixin.qq.com/s/LJcau5CPZcescpK_rbx_rg)\n - [ ] [5080 SLIM 专为 Mac Pro 设计](https://mp.weixin.qq.com/s/76J_H_ndqxH6njDcavwNzQ)\n - [ ] [看鱼猜大小](https://mp.weixin.qq.com/s/spWqONURmbZsIL7V7iZJ5Q)\n - [ ] [AI 定向注入攻击：加密货币窃取供应链攻击新邪招](https://mp.weixin.qq.com/s/OkukaJ2sWaVj6BaH4oMcOQ)\n - [ ] [有人知道这是什么鱼](https://mp.weixin.qq.com/s/Jq8WyUkAE2yf_yYolK8jWg)\n - [ ] [网络安全周报 | 2026.05.18 - 2026.05.22](https://mp.weixin.qq.com/s/UBBatS4b0IZIppTuRzNung)\n - [ ] [【赛特背调-查企业】正式上线！无需授权，无感查询](https://mp.weixin.qq.com/s/g3kBCmZmWSFysODPUJhsAQ)\n - [ ] [【吃瓜速递】关于用AI挖掘，把业务挖“挂”那件事](https://mp.weixin.qq.com/s/1dsb0mpcFZHevSfeydqBJQ)\n - [ ] [我是如何找到攻击链并获得 CVE-2026-42558 的？](https://mp.weixin.qq.com/s/GYgXnxporQqrmqmmWUqHJQ)\n - [ ] [Pixel 手机锁屏绕过攻略：完整攻略](https://mp.weixin.qq.com/s/DG5D-aCByvBp1TXZClwYkw)\n - [ ] [2026年OSINT调查人员都在怎么查人](https://mp.weixin.qq.com/s/8yGRKh_a8WxylyZt6Km67g)\n - [ ] [2026-05-25 安全简报（S/A/B 三级版）](https://mp.weixin.qq.com/s/HjzySjPI2VTxVNGbbD43OA)\n - [ ] [分队战术决心 | “高价值目标防护”课目推演通知](https://mp.weixin.qq.com/s/Zk5_4sbJ0EyWkGflapHgAQ)\n - [ ] [知远防务论坛 | “印太地区美军燃料供应链韧性”兵棋推演邀请](https://mp.weixin.qq.com/s/NLuLGSEb5n3jiQtHreAFIA)\n - [ ] [【一周知新】外军防务开源情报数据库更新（2026.05.18-2026.05.24）](https://mp.weixin.qq.com/s/napx8IoK_lrNjqI1dutvYw)\n - [ ] [【推荐】知远蓝军战术态势数据系统系列产品](https://mp.weixin.qq.com/s/S7yEV-0E92_yOdTnaIXZQw)\n - [ ] [【推荐】知远全球军事基地设施全彩图册](https://mp.weixin.qq.com/s/nkFlfg9FYnnSgavznl8otw)\n - [ ] [《公安机关电子数据取证规则（2026版征求意见稿）》与2019版规则变化对照](https://mp.weixin.qq.com/s/YCDUAFApe-r0G66KrGd3lg)\n - [ ] [学习干货 | 年薪25W！从传统自动化测试到大模型安全测试，粉丝分享真实的转型复盘笔记](https://mp.weixin.qq.com/s/thT7bTDEPA-DPC4gAy9jfQ)\n - [ ] [MOE模型死亡循环到6层防御之解决之道！](https://mp.weixin.qq.com/s/U1_09xS-pkZcWKPDgFG8Gw)\n - [ ] [2026中国新能源智能汽车产业链出海研究报告：出海目的地市场环境、出海策略、出海案例](https://mp.weixin.qq.com/s/lo_QVZFc_HfG53dbjKEkGA)\n - [ ] [2026年中国汽车零部件白皮书：技术、博弈与出海新范式](https://mp.weixin.qq.com/s/H5J_bweXtpD61k0YgR2Wog)\n - [ ] [今晚的睡前故事：会发光的小石头](https://mp.weixin.qq.com/s/gLRfXpD1XRa4DUZlDVlbMA)\n - [ ] [内推网络安全驻场工程师一枚](https://mp.weixin.qq.com/s/0Lb3RPyoA7ZL4ZejMj3vXw)\n - [ ] [效率飙升80%，这家科技企业被IT工单智能填报Agent狠狠惊艳！](https://mp.weixin.qq.com/s/Q4pDsRn1VIwETLiVbQR74Q)\n - [ ] [安全小知识-第三十七期_穿透代码迷雾：白盒安全测试核心技术深度解析](https://mp.weixin.qq.com/s/9IwZoJFYCXhqadqn0xuVaA)\n - [ ] [并发逻辑漏洞靶场案例](https://mp.weixin.qq.com/s/sQiHk__-XZoZ06PcyKPBAA)\n - [ ] [dddd改版：更聪明的资产发现&漏洞扫描工具](https://mp.weixin.qq.com/s/-5o6a5aRPaoPVgoGHrMZ6g)\n - [ ] [DeepPhish 轻量版 — 钓鱼演练平台](https://mp.weixin.qq.com/s/BBvy73riF8iBo79SLhqskw)\n - [ ] [Mythos挖出上万漏洞，AI正在把网络安全“核爆”提前](https://mp.weixin.qq.com/s/jnQuP2MjYgPa9ZNphKu-Ag)\n - [ ] [网络安全面试通关指南：30道高频面试题深度解析（含答案）](https://mp.weixin.qq.com/s/Bfd9CeOX_HK1pkQJvrBPxA)\n - [ ] [AI渗透的拐点已至？我是如何通过AI纯黑盒挖到通用产品的9.8分RCE 0day漏洞](https://mp.weixin.qq.com/s/--YqoyfqPOxN6HI3Mkt4yA)\n - [ ] [简单即效率：命令行 vs 图形界面，一场不该存在的战争](https://mp.weixin.qq.com/s/IIP_zXjq__MnE5eflFy_mw)\n - [ ] [API公益中转站建议还是先了解后再用](https://mp.weixin.qq.com/s/46sTtB-BX97rc4hsbo-WPg)\n - [ ] [暗网线报 | 台湾上市短信平台遭“破防”：网络架构图与敏感政务短信双双泄露](https://mp.weixin.qq.com/s/FO9kuJgzuIQGkFPI1-RZtg)\n - [ ] [网安原创文章推荐【2026/5/24】](https://mp.weixin.qq.com/s/yieJSZjXqimD3OvyzE_0cA)\n - [ ] [网络侦查利器BurpAPIFinder，自动扒接口 + 收集感信息](https://mp.weixin.qq.com/s/XHo8JQXi5ihY8cpWyCMTIQ)\n - [ ] [群众里面有高手](https://mp.weixin.qq.com/s/USYpc1VmxhvAfi7w6Xicyw)\n - [ ] [匠心铸盾 数智护航 | 数据安全管理员技能大赛暨第四届浦东新区数智未来守护者大赛诚邀参与！](https://mp.weixin.qq.com/s/d54KhnRmyIY8yOOXChE9uw)\n - [ ] [2026年人工智能技术赋能网络安全应用测试公告](https://mp.weixin.qq.com/s/FOLBa0a8lVD2hfqGj1ynhA)\n - [ ] [关于举办2026年电力行业职业技能竞赛（网络与信息安全管理员S）决赛的通知](https://mp.weixin.qq.com/s/5M7hgfAaUNUSsRAAj1zx1w)\n - [ ] [关于举办\\\"复兴杯\\\"第五届全国大学生网络安全精英赛总决赛的通知](https://mp.weixin.qq.com/s/RAXkBVB3pbXW09g0XzpcOQ)\n - [ ] [关于举办江苏省第四届数据安全技术应用职业技能竞赛的通知](https://mp.weixin.qq.com/s/EqnlGrVBWOqPjWIszB7Uig)\n - [ ] [第二届“湾区杯”网络安全大赛青少年组报名已开启](https://mp.weixin.qq.com/s/GUD-D7ZVCb3BGVQZ2zpkcA)\n - [ ] [千万别错过！2026年济宁市“技能状元”职业技能竞赛—“运河杯”济宁市网络安全大赛报名开始啦！](https://mp.weixin.qq.com/s/Drb2J949i24Q9Bq9O-gMSQ)\n - [ ] [刘烈宏出席数据安全发展大会开幕式并启动2026年“数据要素×”大赛](https://mp.weixin.qq.com/s/_nKXnyL13NGOPzpZYPyYzA)\n - [ ] [厦门四信通信 水利信息化平台 index.do 存在SQL注入漏洞](https://mp.weixin.qq.com/s/C2S4iw7AjvibVhJFHR0-BA)\n - [ ] [【交流】跳出价格陷阱：甲方如何甄别、选择靠谱的反窃密服务商？](https://mp.weixin.qq.com/s/uP4Dn8b-j269JIBktbRFXw)\n - [ ] [FreePBX 遭六层持久化攻击，电话系统被黑后可能直接产生话费损失](https://mp.weixin.qq.com/s/GrE2HtDnIEzeBpolw9Grpg)\n - [ ] [[前沿技术] GraphQL API 安全测试](https://mp.weixin.qq.com/s/37TChtjZDRdcMdn3C6AQWQ)\n - [ ] [[前沿技术] 依赖混淆攻击实战](https://mp.weixin.qq.com/s/2bixNZYnhWJXf4HWG0I76Q)\n - [ ] [[代码审计] php SSRF](https://mp.weixin.qq.com/s/-1uJNEYNIClUoBRlSYnbwQ)\n - [ ] [网络安全行业，聊一聊企业的负债率为什么要保持在一定的合理水平](https://mp.weixin.qq.com/s/KOLWqC3S0WbdkAyblgBN8A)\n - [ ] [字节攻防岗校招，一面面经(网安)](https://mp.weixin.qq.com/s/WndF0X31t457V1voDaSLtA)\n - [ ] [暗网线报 | 3.4亿人的“秘密”藏不住了？OnlyFans数据库疑似泄露，这波“吃瓜”有点大](https://mp.weixin.qq.com/s/nl6E2H9iQ4yTHjX0FRKNAA)\n - [ ] [学网络安全一定要找对学习路线！](https://mp.weixin.qq.com/s/wkNfRyy03BPQB5d8P_Q5IQ)\n - [ ] [天津 “十五五” 规划（2026—2030）深度解读](https://mp.weixin.qq.com/s/ZZ-HzXr_eqyGFAXULxuMPw)\n - [ ] [【公益译文】2026年AI指数报告（一）](https://mp.weixin.qq.com/s/PYEJOIVmdBO5gbuQn-qtNQ)\n - [ ] [Meta被裁员工自爆：部门90%华裔、普通话办公、非华裔遭排挤，大厂职场“小圈子”有多窒息？](https://mp.weixin.qq.com/s/TE-bk6EE22yHuNuZFR70dQ)\n - [ ] [白俄罗斯关联APT组织Ghostwriter利用乌克兰教育平台作诱饵，攻击政府机构](https://mp.weixin.qq.com/s/yv0Xl7sTvQVmlT1VTxPakA)\n - [ ] [2025强网拟态决赛唯一解 云网互联赛道-WEB层层加码](https://mp.weixin.qq.com/s/ttq3xS0NY62rpqf11hs9Ew)\n - [ ] [Apache Tomcat Tribes EncryptInterceptor 加密绕过反序列化漏洞分析（CVE-2026-34486）](https://mp.weixin.qq.com/s/IItltbbMPC9tEu01fw6Wfg)\n - [ ] [通过xa0getcwd()xa0失败与竞态条件BYPASS PHPxa0open_basedir](https://mp.weixin.qq.com/s/TT8zwTTcIhrcl52q9eZP6Q)\n - [ ] [LangChain AI代码审计Agent 初用心得](https://mp.weixin.qq.com/s/bXPJHX3iScORlbkBz5n80A)\n - [ ] [日本船级社（ClassNK）船舶网络弹性指南（2024 年 7 月 版本 1.0 ）](https://mp.weixin.qq.com/s/yjXfBJSy_6Y3Nll6HesoSQ)\n - [ ] [智能船舶网络安全与系统防护专项培训课程 2026](https://mp.weixin.qq.com/s/GGyuCrvP5tYveCQla8f76A)\n - [ ] [船舶及系统网络弹性指导意见（2024 年版）](https://mp.weixin.qq.com/s/IOLk7nFYUjFyAMfGnVZk2g)\n - [ ] [现在这情况，我劝大家提前做好准备。。](https://mp.weixin.qq.com/s/TUnD2GJOoM9DbmGGfC0a0Q)\n - [ ] [0166.从失败到获得 32,000 美元：我的漏洞赏金之旅](https://mp.weixin.qq.com/s/Bi3Ye6Fd1RqC5gK9xUxyVQ)\n - [ ] [DeepSeek 原生的终端 AI 编程代理——Reasonix，力求将编程成本打下来](https://mp.weixin.qq.com/s/OrUpRHtEn_P3VSeqQLX28Q)\n - [ ] [可是我找不到她了](https://mp.weixin.qq.com/s/2RDw0wUwTEeybE5OmEDf8w)\n - [ ] [腾讯云智能渗透挑战赛中AI First的学习与思考](https://mp.weixin.qq.com/s/QP92wjd1yU7OfoemwwTmmw)\n - [ ] [【通知】华住SRC暂停漏洞测试公告](https://mp.weixin.qq.com/s/6UVjSi2W_Vj-JDUbqfKLOg)\n - [ ] [key泄露利用：高危漏洞一条龙漏洞利用工具](https://mp.weixin.qq.com/s/mVAPxYLBauokKWrYUe-o5g)\n - [ ] [又一攻防刷分利器！数据库批量取样工具，速速下载！](https://mp.weixin.qq.com/s/iBPCewJNhMEMQumDuiHmTw)\n - [ ] [网络安全、人工智能、轨道控制等岗位](https://mp.weixin.qq.com/s/59lxv7h3knM616RHdFqjqg)\n - [ ] [网络安全攻防实验室](https://mp.weixin.qq.com/s/0TF3Mq84cqmjbCxGmkZYaA)\n - [ ] [npm 新增双重验证发布权限与包安装管控功能，抵御供应链攻击](https://mp.weixin.qq.com/s/_CwEWJB9CrQOeviN200uRg)\n - [ ] [LiteSpeed cPanel 插件漏洞 CVE-2026-48172 遭利用，可获取 root 权限执行脚本](https://mp.weixin.qq.com/s/yFpua0TG3FhLkcVMWc9YHg)\n - [ ] [Laravel-Lang PHP 软件包遭入侵，被植入跨平台凭据窃取木马](https://mp.weixin.qq.com/s/aQIz8GU09riTvUbcVMDISg)\n - [ ] [涉W资讯专刊-第14期](https://mp.weixin.qq.com/s/NZ_UblXJ3tbO1_hoTT8sVA)\n - [ ] [150万！富滇银行2026年AI智能尽调报告助手采购项目](https://mp.weixin.qq.com/s/y3vMDF4ZNICbW4NlX3X9aw)\n - [ ] [迈富时245万中！江南农商银行AI赋能企微展业与数字化营销项目](https://mp.weixin.qq.com/s/9OWBUQ3DNZ6miS_N-zUANw)\n - [ ] [天才黑客的堕落：从985硕士到跨国电诈集团的“幽灵”操盘手](https://mp.weixin.qq.com/s/Sai0rqrJh4aXW611ifINoQ)\n - [ ] [渗透神器！BurpAPIFinder 自动扒接口 + 查敏感信息，效率拉满](https://mp.weixin.qq.com/s/aroFBUTFo5lk_5p9LUvsUA)\n - [ ] [CAPEv2自动化分析沙箱安装指南](https://mp.weixin.qq.com/s/tVLDSVXAI1C_mLrKv4bcMQ)\n - [ ] [AI安全网关：企业统一接入、安全防护与数据安全的必要性与实践路径](https://mp.weixin.qq.com/s/4x3NVQMktGRueyJlK5_WEA)\n - [ ] [赏金实战｜从修改地址到远程代码执行，服务端原型链污染的威力有多可怕？](https://mp.weixin.qq.com/s/7g8KLLciQqZujzGCczy_Nw)\n - [ ] [微软出手干掉千万级“黑产”！底层技术细节全揭秘：黑客是如何白嫖官方签名的？](https://mp.weixin.qq.com/s/B2BW-iErJqUDKmzTIOVANA)\n - [ ] [净网 | 58公里变101公里？网警破获抢单外挂、私改计价器案15起，73人落网](https://mp.weixin.qq.com/s/-iaYQXK5khdOF1jKsN0fXQ)\n - [ ] [Hermes 修改MSF特征 轻松逃逸安全软件](https://mp.weixin.qq.com/s/YY9lnq-_go9ToDKB-lfN8g)\n - [ ] [AI渗透测试新范式：DeepSeek用XML报错盲注绕过WAF，2小时1.4元抽干19个数据库](https://mp.weixin.qq.com/s/MAmNL7kdwvcfVkBRcTvDJg)\n - [ ] [微软豪掷500亿却叫停工程师用Claude Code：AI成本危机敲响警钟](https://mp.weixin.qq.com/s/9aRft0iULGetIQeJbpC0OQ)\n - [ ] [StubZero：Google Cloud生产环境RCE漏洞，奖金148,337美元](https://mp.weixin.qq.com/s/b3jAOox4jV1G9NQ2TgiGEQ)\n - [ ] [GhostTree：Windows路径操纵技术让EDR全面失效](https://mp.weixin.qq.com/s/GP1Xt_rQmoBzowgh1UUndA)\n - [ ] [漏洞预警 | NGINX堆缓冲区溢出漏洞](https://mp.weixin.qq.com/s/RpBBkWt-hF5fLf9X-lskAQ)\n - [ ] [漏洞预警 | 天地伟业Easy7 SQL注入漏洞](https://mp.weixin.qq.com/s/0sR9rFg9YThUWiuHEEIBwg)\n - [ ] [工具 | JsRpc](https://mp.weixin.qq.com/s/Sy02bnTFyyR0HnDDGuY93Q)\n - [ ] [两块网卡=4倍速？揭秘Windows Server网卡绑定的那些坑与技巧](https://mp.weixin.qq.com/s/gEmfvg_xOs_r1CG9hSjKAA)\n - [ ] [Skill 评估与提升专家 | 评估和提升其他 Skill 的能力、提供基准测试、红队测试和自主改进循环](https://mp.weixin.qq.com/s/gXESwlGIiFls3JwbxvZf0w)\n - [ ] [暗网快讯【20260525】124期](https://mp.weixin.qq.com/s/JEVKjVq2ncf1jL6pYcv90g)\n - [ ] [安全销售的\\\"专业自信\\\"](https://mp.weixin.qq.com/s/Z1nLhT_LsnJTKTfBk2yN_Q)\n - [ ] [【研究报告】美军微波武器发展、作战运用与对我影响研究](https://mp.weixin.qq.com/s/v9FtFcKzDaQRH8cfuDD5Mw)\n - [ ] [【研究报告】俄军军事训练经验教训及启示研究](https://mp.weixin.qq.com/s/bRxl5JzfCVWaFC_ZKp1twA)\n - [ ] [【研究报告】我军太空攻防体系建设与战略制衡能力发展研究](https://mp.weixin.qq.com/s/3sCU6ABfjOolZw_2eG_Gww)\n - [ ] [【研究报告】剖析“星链”在俄乌战争中赋能无人机作战的效能与体系性弱点](https://mp.weixin.qq.com/s/SpJzOxtzQGasAI2DaKaALA)\n - [ ] [【会员下载】俄乌冲突的教训——第三部分](https://mp.weixin.qq.com/s/K40owF2X1pUI4D9jz6JTrA)\n - [ ] [【会员下载】俄乌冲突的教训——第四部分](https://mp.weixin.qq.com/s/oJ8XpV8U2xZLNkx-oS-pYQ)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [Testing SQL Injection Using Google gemma4:31b-cloud on PortSwigger’s Vulnerable Shop](https://infosecwriteups.com/testing-sql-injection-using-google-gemma4-31b-cloud-on-portswiggers-vulnerable-shop-ef9dc05dd1aa?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [How I Found 2 Bugs on BBC’s Subdomains and Made It Into Their Hall of Fame](https://infosecwriteups.com/how-i-found-2-bugs-on-bbcs-subdomains-and-made-it-into-their-hall-of-fame-86fc4be89e68?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Rejected but Rewarded — What a GraphQL Misconfiguration Taught Me About Bug Bounty Triage.](https://infosecwriteups.com/rejected-but-rewarded-what-a-graphql-misconfiguration-taught-me-about-bug-bounty-triage-a69a9f42e12c?source=rss----7b722bfd1b8d--bug_bounty)\n- Malwarebytes\n - [ ] [A week in security (May 18 – May 24)](https://www.malwarebytes.com/blog/news/2026/05/a-week-in-security-may-18-may-24)\n- HackerNews\n - [ ] [荷兰扣押了一家支持网络攻击的托管服务商的 800 台服务器](http://0.0.0.0:8080/post/64259)\n - [ ] [npm 新增 2FA 门控发布与包安装控制，防范供应链攻击](http://0.0.0.0:8080/post/64258)\n - [ ] [Drupal 漏洞在披露后不久即成为黑客攻击目标](http://0.0.0.0:8080/post/64257)\n - [ ] [“Underminr”漏洞允许攻击者将恶意连接隐藏在受信任域名之后](http://0.0.0.0:8080/post/64256)\n - [ ] [Laravel Lang 软件包遭劫持，被用于部署凭证窃取恶意软件](http://0.0.0.0:8080/post/64255)\n- 赵武的自留地\n - [ ] [天赋操作系统 v1.0](https://mp.weixin.qq.com/s?__biz=MjM5NDQ5NjM5NQ==&mid=2651626479&idx=1&sn=8c5cb0c8811a793ce9a9c5db42221792)\n- 腾讯安全应急响应中心\n - [ ] [攻守之间，亿万信任｜腾讯七线联合众测，四倍奖金+超百万奖池等你来！](https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651208444&idx=1&sn=46952da4ea467153555b9f060d93d88e)\n- 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台\n - [ ] [Anthropic模型震动金融圈 欧洲央行紧急开会要求升级网络防御](https://blog.upx8.com/Anthropic%E6%A8%A1%E5%9E%8B%E9%9C%87%E5%8A%A8%E9%87%91%E8%9E%8D%E5%9C%88-%E6%AC%A7%E6%B4%B2%E5%A4%AE%E8%A1%8C%E7%B4%A7%E6%80%A5%E5%BC%80%E4%BC%9A%E8%A6%81%E6%B1%82%E5%8D%87%E7%BA%A7%E7%BD%91%E7%BB%9C%E9%98%B2%E5%BE%A1)\n - [ ] [全球最大铝土矿生产国计划下月推出出口管制措施](https://blog.upx8.com/%E5%85%A8%E7%90%83%E6%9C%80%E5%A4%A7%E9%93%9D%E5%9C%9F%E7%9F%BF%E7%94%9F%E4%BA%A7%E5%9B%BD%E8%AE%A1%E5%88%92%E4%B8%8B%E6%9C%88%E6%8E%A8%E5%87%BA%E5%87%BA%E5%8F%A3%E7%AE%A1%E5%88%B6%E6%8E%AA%E6%96%BD)\n - [ ] [一款开源App为国行机补上快速分享功能](https://blog.upx8.com/%E4%B8%80%E6%AC%BE%E5%BC%80%E6%BA%90App%E4%B8%BA%E5%9B%BD%E8%A1%8C%E6%9C%BA%E8%A1%A5%E4%B8%8A%E5%BF%AB%E9%80%9F%E5%88%86%E4%BA%AB%E5%8A%9F%E8%83%BD)\n - [ ] [华为正式发表半导体领域新定律 晶体管密度与系统性能逻辑折叠技术](https://blog.upx8.com/%E5%8D%8E%E4%B8%BA%E6%AD%A3%E5%BC%8F%E5%8F%91%E8%A1%A8%E5%8D%8A%E5%AF%BC%E4%BD%93%E9%A2%86%E5%9F%9F%E6%96%B0%E5%AE%9A%E5%BE%8B-%E6%99%B6%E4%BD%93%E7%AE%A1%E5%AF%86%E5%BA%A6%E4%B8%8E%E7%B3%BB%E7%BB%9F%E6%80%A7%E8%83%BD%E9%80%BB%E8%BE%91%E6%8A%98%E5%8F%A0%E6%8A%80%E6%9C%AF)\n - [ ] [教皇称AI应被解除武装以避免统治人类](https://blog.upx8.com/%E6%95%99%E7%9A%87%E7%A7%B0AI%E5%BA%94%E8%A2%AB%E8%A7%A3%E9%99%A4%E6%AD%A6%E8%A3%85%E4%BB%A5%E9%81%BF%E5%85%8D%E7%BB%9F%E6%B2%BB%E4%BA%BA%E7%B1%BB)\n- 黑鸟\n - [ ] [警惕Underminr新型网络规避技术：CDN共享边缘的隐形漏洞](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186831&idx=1&sn=7a0ed378ca1323a830b4cfb7f28b7ae5)\n- 威努特安全网络\n - [ ] [威努特超融合+WinClaw亮相鲲鹏昇腾开发者大会2026](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651141818&idx=1&sn=98c2dacda0c1d4641352e9f006668308)\n- 奇客Solidot–传递最新科技情报\n - [ ] [欧洲执法部门黑进 VPN 服务识别勒索组织用户](https://www.solidot.org/story?sid=84397)\n - [ ] [HBM 成本占到了 AI 芯片组件成本的三分之二](https://www.solidot.org/story?sid=84396)\n - [ ] [惠普调查 BIOS 更新导致笔记本故障问题](https://www.solidot.org/story?sid=84395)\n - [ ] [俄罗斯推迟对移动 VPN 用户收费的计划](https://www.solidot.org/story?sid=84394)\n - [ ] [政治情绪和普通情绪不同](https://www.solidot.org/story?sid=84393)\n - [ ] [科学家推翻空气动力学的基础原则](https://www.solidot.org/story?sid=84392)\n - [ ] [科学家破解烟草合成尼古丁之谜](https://www.solidot.org/story?sid=84390)\n - [ ] [日本声优起诉要求 TikTok 删除 AI 模仿其声音的视频](https://www.solidot.org/story?sid=84389)\n - [ ] [气候变化威胁全球植物物种](https://www.solidot.org/story?sid=84388)\n - [ ] [Firefox 加入对 Web Serial API 的支持，与 Adafruit 合作](https://www.solidot.org/story?sid=84387)\n - [ ] [四月全球风能太阳能发电量超过天然气发电量](https://www.solidot.org/story?sid=84386)\n - [ ] [《星际公民(Star Citizen)》筹款突破十亿美元](https://www.solidot.org/story?sid=84385)\n- 绿盟科技研究通讯\n - [ ] [【公益译文】2026年AI指数报告（一）](https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499931&idx=1&sn=e4ebbbfddcccf48ff2b5aceec7bb6641)\n- 代码卫士\n - [ ] [趋势科技提醒注意已遭利用的 Apex One 0day 漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526099&idx=1&sn=d07e28ac6d092fa30327a6c688e850a5)\n - [ ] [自动化供应链攻击6小时内攻陷5561个 GitHub 仓库](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526099&idx=2&sn=d06f127d835cfd48afbbe4980d54ed19)\n- 天御攻防实验室\n - [ ] [网安传承](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486982&idx=1&sn=92e6b6c9cfc3592d6fb27b212da7558d)\n- 看雪学苑\n - [ ] [硬啃反封号 dylib：OLLVM CFF/MBA 混淆拆解与167 Hook 深度分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458615455&idx=1&sn=86932f09204eb52a339f06b4e66678e9)\n - [ ] [7.6 万美金叫卖 3.4 亿条数据，OnlyFans 的 “泄露” 竟是一场骗局？](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458615455&idx=2&sn=84e660c57959d2401093c1e570f92510)\n - [ ] [真机解锁难、调试受限？CVD 云手机定制及风控对抗全解](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458615455&idx=3&sn=5c863f190cdf7061107437eba3fb6f65)\n- 安全分析与研究\n - [ ] [CAPEv2自动化分析沙箱安装指南](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247496735&idx=1&sn=f49e736b54a8a1fc1fe646a1304fef9f)\n- 奇安信威胁情报中心\n - [ ] [AI 定向注入攻击：加密货币窃取供应链攻击新邪招](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518885&idx=1&sn=2b936557ad35aca9d49d04dba256b222)\n- 信息安全国家工程研究中心\n - [ ] [官方预警 | “银狐”木马病毒出现专门针对我国用户的新变种，真实受害案例触目惊心](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247503980&idx=1&sn=d8b085e50bcb1a86f429a3855f72f7e7)\n- 安全圈\n - [ ] [【安全圈】985博士为间谍偷拍涉密资料，被判15年](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076871&idx=1&sn=174533ee2e8168689c6a17ed4456f79b)\n - [ ] [【安全圈】上海网警今年破获抢单外挂、私改计价器案15起，73人落网](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076871&idx=2&sn=2513fe61bd37bf8a502c574b783c6f7e)\n - [ ] [【安全圈】已修复：微软 Win11 内核曝 7.8 高危漏洞](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076871&idx=3&sn=8b7e1ab3adc698e9b50411d949be259c)\n- 安全内参\n - [ ] [国内上市公司近2000万条用户数据疑似泄露](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515993&idx=1&sn=5c57a6f70af23c6e836f681a234c6739)\n - [ ] [兼顾创新与安全：美国人工智能行政命令草案提出建立前沿AI安全部署框架](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515993&idx=2&sn=552eaf396352b45e6cb3bd17898d41d6)\n- 网络空间安全科学学报\n - [ ] [太空会师！](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247507485&idx=1&sn=e10b51409dc5fb7596663f64db800172)\n- 安全牛\n - [ ] [黑客哲学的AI新篇章：Joey Melo与“不改规则，只控体验”的红队传奇](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141442&idx=1&sn=25d82d49e6988e4879ac2a8883999452)\n - [ ] [你的新同事是AI代理人？网络安全视角下，如何驯服“数字竞争者”而不被淘汰](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141442&idx=2&sn=3d6c6adf2b030708f1aa73b2662c3d12)\n- 极客公园\n - [ ] [微软按下 vibe coding 暂停键：烧 token 已经比员工贵了](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653107181&idx=1&sn=58fc8abc6447f864db5b2675f085910b)\n - [ ] [阿里云的「Agentic 时刻」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653107169&idx=1&sn=a7e0318af6595eac37a62a53cca0e046)\n - [ ] [「死了么」App 被「收编」，改名「在么在么」；台积电盈利大增却传出削减奖金，员工酝酿罢工；NVIDIA 杀入 CPU 市场 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653107125&idx=1&sn=0bd5221c2f37eec77ab374070b6fd517)\n- 默安科技\n - [ ] [从规则到智能：雳鉴 SAST AI 版三大能力突破代码安全瓶颈](https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247501839&idx=1&sn=0a7149d4c7d437486ae963346fae02e7)\n- 中国信息安全\n - [ ] [论坛·数据安全治理 | AI智能体的数据安全风险与合规监管研究](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262951&idx=1&sn=41b3e25293f7d86d817f4241a44ae7b3)\n - [ ] [公告 | 公安部就《公安机关电子数据取证规则（征求意见稿）》公开征求意见](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262951&idx=2&sn=ab0dcdc7340bcfd2ad4bf8dbac1f8b5a)\n - [ ] [专家解读 | 从技术规则到数字程序法——评《公安机关电子数据取证规则（征求意见稿）》](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262951&idx=3&sn=81dbc89e2767afd98be05b3cddd3e662)\n - [ ] [关注 | 主流JavaScript软件包管理平台npm遭供应链投毒攻击](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262951&idx=4&sn=eb7bc2ea4900edd6205c21445cf7996a)\n - [ ] [天融信李雪莹：安全底座铺路、智算中枢加速，融合助力数据要素安全高效流通](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262951&idx=5&sn=f901958c21d75a9ec190ab02f84b4699)\n - [ ] [观点 | 划定人工智能终端“聪明标尺”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262951&idx=6&sn=7f978dc9eb67020741bd76cb033c330c)\n- 微步在线\n - [ ] [第一手金融行业实战总结，来了](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650186590&idx=1&sn=c67af564507fa98d240699bb41611194)\n- 火绒安全\n - [ ] [隧道藏暗控——Cloudflare合法工具被黑产用于远程控制](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247533709&idx=1&sn=7d7097c74e78c9364c2fa26808d0a8c7)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247533709&idx=2&sn=317bb84c12f332e6b4520fc93a0bb2cc)\n- 枇杷熟了\n - [ ] [卖枇杷啦！](https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247490059&idx=1&sn=5d2daa4d1f45a82e4a452c779bf18bfc)\n- 补天平台\n - [ ] [通用 | 端午第三弹，粽享万元奖励金](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510770&idx=1&sn=89f22525e3ea7ba0987bcb7c30df0dfd)\n - [ ] [补天端午活动第一弹 | “粽”测有礼](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510770&idx=2&sn=0c1c3c3f9ca8383af78a24b0cc1af672)\n- M01N Team\n - [ ] [AI安全案例分析：Prompts Become Shells —— 从提示词注入到AI Agent远程代码执行（RCE）（文末附邀请码）](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247495083&idx=1&sn=f13abeb4a11eb21249dc9e6e46d7e6e7)\n- Over Security\n - [ ] [Universitat de València Targeted by Nova Group: 300GB Data Exfiltration Claimed, Initial $500,000 Ransom Demand Revealed](https://www.suspectfile.com/universitat-de-valencia-targeted-by-nova-group-300gb-data-exfiltration-claimed-initial-500000-ransom-demand-revealed/)\n - [ ] [Anthropic’s restricted Claude Mythos model may be coming to Claude Code](https://www.bleepingcomputer.com/news/artificial-intelligence/anthropics-restricted-claude-mythos-model-may-be-coming-to-claude-code/)\n - [ ] [Dal cookie ai tracking pixel: i rischi regolatori per le imprese](https://www.cybersecurity360.it/legal/privacy-dati-personali/dal-cookie-ai-tracking-pixel-i-rischi-regolatori-per-le-imprese/)\n - [ ] [DBIR 2026, il ritorno ai fondamentali nella cyber: le 5 azioni strutturali da mettere in campo](https://www.cybersecurity360.it/news/dbir-2026-il-ritorno-ai-fondamentali-nella-cyber-le-5-azioni-strutturali-da-mettere-in-campo/)\n - [ ] [Rotta sul Canada: strategia VPN tra tunnel a 10 Gbps e la trappola dei 5 Eyes](https://www.cybersecurity360.it/cultura-cyber/vpn-canada-le-migliori/)\n - [ ] [Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks](https://krebsonsecurity.com/2026/05/netherlands-seizes-800-servers-arrests-2-for-aiding-cyberattacks/)\n - [ ] [FBI warns of Kali365 phishing service targeting Microsoft 365 accounts](https://www.bleepingcomputer.com/news/security/fbi-warns-of-kali365-phishing-service-targeting-microsoft-365-accounts/)\n - [ ] [Nordpass business: 14 giorni di prova gratis e senza carta di credito per gestire in sicurezza le password aziendali](https://www.cybersecurity360.it/cultura-cyber/nordpass-gratis/)\n - [ ] [Bce, allarme sui cyberattacchi AI alle banche: il nodo è il tempo di patch](https://www.cybersecurity360.it/cybersecurity-nazionale/bce-allarme-sui-cyberattacchi-ai-alle-banche-il-nodo-e-il-tempo-di-patch/)\n - [ ] [Taiwan Flags Five Major Cyber Risks After 726 Security Incidents in 2025](https://thecyberexpress.com/taiwan-cyber-risk-726-cybersecurity-incidents/)\n - [ ] [Ransomware, una minaccia in evoluzione: cosa aspettarsi nell’era dell’Agentic AI](https://www.cybersecurity360.it/nuove-minacce/ransomware/ransomware-una-minaccia-in-evoluzione-cosa-aspettarsi-nellera-dellagentic-ai/)\n - [ ] [Navigating Lax Load Balancers: When an Intersection Gets You Inside](https://blog.doyensec.com/2026/05/25/cloudsectidbits-elbaph-alb.html)\n - [ ] [Kaspersky: la GenAI mette alla prova il riconoscimento facciale](https://www.securityinfo.it/2026/05/25/kaspersky-la-genai-mette-alla-prova-il-riconoscimento-facciale/)\n - [ ] [Wireshark 4.6.6 Resolves ROHC Parser and Buffer Overflow Vulnerabilities](https://thecyberexpress.com/wireshark-4-6-6-rohc-dissector-crash-fix/)\n - [ ] [FBI Flags Kali365 as New Phishing Threat Targeting Microsoft 365 Users](https://thecyberexpress.com/kali365-phishing-kit-hijacks-microsoft-365/)\n - [ ] [Quacivi a capo dell’Acn: perché è svolta per la cyber italiana](https://www.cybersecurity360.it/cybersecurity-nazionale/quacivi-a-capo-dellacn-un-cambio-di-stagione-per-la-cyber-italiana/)\n- CNVD漏洞平台\n - [ ] [CNVD漏洞周报2026年第20期](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496966&idx=1&sn=ac3699b4b31bce4c5b16877fd623757d)\n - [ ] [上周关注度较高的产品安全漏洞(20260518-20260524)](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496966&idx=2&sn=e60e7fcef20b977ae462ccddd14972dc)\n- Securityinfo.it\n - [ ] [Kaspersky: la GenAI mette alla prova il riconoscimento facciale](https://www.securityinfo.it/2026/05/25/kaspersky-la-genai-mette-alla-prova-il-riconoscimento-facciale/?utm_source=rss&utm_medium=rss&utm_campaign=kaspersky-la-genai-mette-alla-prova-il-riconoscimento-facciale)\n- IT Service Management News\n - [ ] [Hacking Apple Pay](http://blog.cesaregallotti.it/2026/05/hacking-apple-pay.html)\n- ICT Security Magazine\n - [ ] [Da Operation Power-OFF a Operation Lightning: i recenti colpi delle forze dell’ordine europee al patrimonio cybercriminale](https://www.ictsecuritymagazine.com/articoli/operation-power-off-europol/)\n - [ ] [Cyber Warfare autonoma: l’Agentic AI nell’era del conflitto algoritmico](https://www.ictsecuritymagazine.com/articoli/cyber-warfare-autonoma/)\n - [ ] [Data monetization nel dark web: perché il dato sanitario vale più di una carta di credito](https://www.ictsecuritymagazine.com/articoli/data-monetization-nel-dark-web/)\n- 情报分析师\n - [ ] [用开源情报读懂美情报总监加巴德辞职，一封辞职信背后的权力退场学](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567975&idx=1&sn=38af05756a97079c806d94a974c14c6c)\n- 迪哥讲事\n - [ ] [任意用户密码重置](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499479&idx=1&sn=7b31ce3782f8169bf32a4a2d2349a80a)\n- 吾爱破解论坛\n - [ ] [API公益中转站建议还是先了解后再用](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651144341&idx=1&sn=a7a8df4f5847a4961b3eb72124f08882)\n- 深信服千里目安全技术中心\n - [ ] [【漏洞通告】Drupal Core SQL注入漏洞(CVE-2026-9082)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525807&idx=1&sn=d2d585508a04051bd1604794e648dd71)\n - [ ] [【漏洞通告】cPanel-WHM 任意文件读取漏洞(CVE-2026-29205)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525807&idx=2&sn=d883b4663246394babb72bb364b34d39)\n- 数世咨询\n - [ ] [AI带来的影响初现：互联网漏洞赏金大幅下降](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542986&idx=1&sn=b97ba56003ced175f3894af25166c243)\n - [ ] [【直播预告】新一代反钓鱼系统上线，AI 高仿真四步实战演练](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542986&idx=2&sn=d6f77754aad6ee129a8f93b0c8572f3d)\n- The Hacker News\n - [ ] [⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos](https://thehackernews.com/2026/05/weekly-recap-linux-flaws-defender-0.html)\n - [ ] [Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks](https://thehackernews.com/2026/05/ghost-cms-cve-2026-26980-exploited-to.html)\n - [ ] [The Alert Firehose Finally Meets Its Match](https://thehackernews.com/2026/05/the-alert-firehose-finally-meets-its.html)\n - [ ] [Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms](https://thehackernews.com/2026/05/lazarus-deploys-remotepe-memory-only.html)\n - [ ] [TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO](https://thehackernews.com/2026/05/trapdoor-supply-chain-attack-spreads.html)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Microsoft Access VBA, (Mon, May 25th)](https://isc.sans.edu/diary/rss/33012)\n - [ ] [TeamPCP Supply Chain Campaign: Activity Through 2026-05-24, (Mon, May 25th)](https://isc.sans.edu/diary/rss/33014)\n- Troy Hunt's Blog\n - [ ] [Welcoming the Bhutanese Government to Have I Been Pwned](https://www.troyhunt.com/welcoming-the-bhutanese-government-to-have-i-been-pwned/)\n- Krebs on Security\n - [ ] [Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks](https://krebsonsecurity.com/2026/05/netherlands-seizes-800-servers-arrests-2-for-aiding-cyberattacks/)\n- Yak Project\n - [ ] [Yakit x Memfit AI TOKEN 超级限时免费](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529814&idx=1&sn=09dd15a23976af0e26d3fd57065d876c)\n- Javvad Malik\n - [ ] [Cybersecurity films that need to be made](https://javvadmalik.com/2026/05/25/cybersecurity-films-that-need-to-be-made/)\n - [ ] [Alex Honnold and Other Keynote Choices](https://javvadmalik.com/2026/05/25/alex-honnold-and-other-keynote-choices/)\n- Security Affairs\n - [ ] [Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites](https://securityaffairs.com/192655/cyber-crime/ghost-cms-flaw-abused-to-push-clickfix-attacks-on-hundreds-of-sites.html)\n - [ ] [340 Million OnlyFans Profiles Allegedly Rebuilt from Leaks](https://securityaffairs.com/192643/cyber-crime/340-million-onlyfans-profiles-allegedly-rebuilt-from-leaks.html)\n - [ ] [Zero-Click WhatsApp Account Takeover Hits iPhone Users Running iOS 16. No Linked Devices, No Warning](https://securityaffairs.com/192627/security/zero-click-whatsapp-account-takeover-hits-iphone-users-running-ios-16-no-linked-devices-no-warning.html)\n - [ ] [Dutch authorities dismantle hosting network allegedly used for cyberattacks and disinformation](https://securityaffairs.com/192602/intelligence/dutch-authorities-dismantle-hosting-network-allegedly-used-for-cyberattacks-and-disinformation.html)\n - [ ] [FBI director Kash Patel’s brand website taken offline after malware reports](https://securityaffairs.com/192613/security/fbi-director-kash-patels-brand-website-taken-offline-after-malware-reports.html)\n- Security Weekly Podcast Network (Audio)\n - [ ] [Visibility with EDR/MDR is still important, 'the basics' are impossible, and the news - Rob Allen - ESW #460](http://sites.libsyn.com/18678/visibility-with-edrmdr-is-still-important-the-basics-are-impossible-and-the-news-rob-allen-esw-460)\n"}, "b4744980e65522575c2f8b350d5cc94915d85db5": {"t": 1785772251.8476803, "n": 38479, "h": "3caaa11ad6225d99", "c": "# 每日安全资讯（2026-05-26）\n\n- Paper - 知道创宇404实验室\n - [ ] [潜在对抗检测：基于大模型激活自适应探测的多轮攻击检测](https://paper.seebug.org/3486)\n- 博客\n - [ ] [gnutls_handshake() failed: The TLS connection was non-properly terminated.](https://dyrnq.com/gnutls_handshake-failed-the-tls-connection-was-non-properly-terminated/)\n- 美团技术团队\n - [ ] [从高拟真到真可用，LongCat-Video-Avatar 1.5 正式开源](https://tech.meituan.com/2026/05/25/longcat-video-avatar-1.5.html)\n- Recent Commits to cve:main\n - [ ] [Update Mon May 25 11:41:06 UTC 2026](https://github.com/trickest/cve/commit/46cfd030d2694f72badecfb6e139313dd1fe43c9)\n- 博客园 - potatso\n - [ ] [马氏距离以及其推导过程 - potatso](https://www.cnblogs.com/potatso/p/20150670)\n- SecWiki News\n - [ ] [SecWiki News 2026-05-25 Review](http://www.sec-wiki.com/?2026-05-25)\n- InfoSec Write-ups - Medium\n - [ ] [Testing SQL Injection Using Google gemma4:31b-cloud on PortSwigger’s Vulnerable Shop](https://infosecwriteups.com/testing-sql-injection-using-google-gemma4-31b-cloud-on-portswiggers-vulnerable-shop-ef9dc05dd1aa?source=rss----7b722bfd1b8d---4)\n - [ ] [Hacking the Scammers and Exposing Their Tactics in a Mission to Protect Nepalese Youth](https://infosecwriteups.com/hacking-the-scammers-and-exposing-their-tactics-in-a-mission-to-protect-nepalese-youth-173f67677c5c?source=rss----7b722bfd1b8d---4)\n - [ ] [The Invite That Lied: A Business Logic Flaw Hidden Behind LG’s Walls](https://infosecwriteups.com/the-invite-that-lied-a-business-logic-flaw-hidden-behind-lgs-walls-a49cca506294?source=rss----7b722bfd1b8d---4)\n - [ ] [How I Found 2 Bugs on BBC’s Subdomains and Made It Into Their Hall of Fame](https://infosecwriteups.com/how-i-found-2-bugs-on-bbcs-subdomains-and-made-it-into-their-hall-of-fame-86fc4be89e68?source=rss----7b722bfd1b8d---4)\n - [ ] [Building Another Vulnerable Lab — SSRF.](https://infosecwriteups.com/building-another-vulnerable-lab-ssrf-01c27ab92b4e?source=rss----7b722bfd1b8d---4)\n - [ ] [MonitorsFour HTB — HackTheBox Walkthrough | By Alham Rizvi](https://infosecwriteups.com/monitorsfour-htb-hackthebox-walkthrough-by-alham-rizvi-3862c72c498f?source=rss----7b722bfd1b8d---4)\n - [ ] [Rejected but Rewarded — What a GraphQL Misconfiguration Taught Me About Bug Bounty Triage.](https://infosecwriteups.com/rejected-but-rewarded-what-a-graphql-misconfiguration-taught-me-about-bug-bounty-triage-a69a9f42e12c?source=rss----7b722bfd1b8d---4)\n- Doonsec's feed\n - [ ] [鼎信安全xa0|xa0网络安全一周资讯](https://mp.weixin.qq.com/s/gupfHo4ChgnAUZB1roS7aw)\n - [ ] [工业和信息化部深入开展树立和践行正确政绩观学习教育督导工作](https://mp.weixin.qq.com/s/GExGEUDy6Wxx-ALTlAxfOQ)\n - [ ] [留下属于自己的行业印记 | 灰度安全创始人曹静受邀今晚报采访](https://mp.weixin.qq.com/s/io9H0yKSl5fTSn0qmzpOrw)\n - [ ] [OWASP MCP Top 10 2025中文版发布](https://mp.weixin.qq.com/s/1Nf6Nz_tOGpp1agpBWWy9A)\n - [ ] [每周网安资讯 （5.19-5.25）| 中国互联网协会发布《安全应急大模型》等10项团体标准](https://mp.weixin.qq.com/s/aK2XvqgLW_ExE5KJxgc3qA)\n - [ ] [国内上市公司近2000万条用户数据疑似泄露](https://mp.weixin.qq.com/s/-oSqt-9Nwgitle9bfdVv5Q)\n - [ ] [兼顾创新与安全：美国人工智能行政命令草案提出建立前沿AI安全部署框架](https://mp.weixin.qq.com/s/vXitHAYujgFFwLODqeTL9w)\n - [ ] [获取网络安全金牌认证，开启您的 CISSP之路](https://mp.weixin.qq.com/s/nF8DS2mPdc1AV3cYVzMLCw)\n - [ ] [国家网络与信息安全信息通报中心通报：主流JavaScript软件包管理平台npm遭供应链投毒攻击](https://mp.weixin.qq.com/s/3oLiraDdslkN7r-zqaSgZQ)\n - [ ] [黑客拼凑旧数据冒充OnlyFans新泄露，7.6万美元叫卖3.4亿用户隐私](https://mp.weixin.qq.com/s/jmCNRmYmz09giEoPsJgqZA)\n - [ ] [Google 42个月未修复的Chromium漏洞被公开 可劫持浏览器变\\\"僵尸节点\\\"](https://mp.weixin.qq.com/s/wGRVggdfNW1XsC8tpIhYNw)\n - [ ] [黑客入侵三大代码平台，34个恶意包窃取开发者密钥与加密货币](https://mp.weixin.qq.com/s/KElGYJwpws5JPaAqwdPrpQ)\n - [ ] [WantToCry勒索软件利用暴露的SMB服务实现远程加密闭环](https://mp.weixin.qq.com/s/Do60cVJOlYuUZhsx3_yESg)\n - [ ] [捷报丨盛邦安全成功中标招商局集团2026年WAF集中采购项目](https://mp.weixin.qq.com/s/bcfNb1281QFDtpy9FemFrg)\n - [ ] [CNVD漏洞周报2026年第20期](https://mp.weixin.qq.com/s/KRiMF2UI7p4_Iw-1zIpKYw)\n - [ ] [上周关注度较高的产品安全漏洞(20260518-20260524)](https://mp.weixin.qq.com/s/o25SNu3ZMUfrNhmt4kv-gw)\n - [ ] [YoroTrooper组织针对独联体及周边区域的攻击活动分析](https://mp.weixin.qq.com/s/9wGEdvuJVPIv_D6PpoaZHg)\n - [ ] [AUTOSAR OTA升级](https://mp.weixin.qq.com/s/x1RPq0hp8lgICYyn97kH0w)\n - [ ] [ECU的在线刷写流程](https://mp.weixin.qq.com/s/nc09gMtNYwuygkeG70pDaw)\n - [ ] [重磅嘉宾 | Maritime Ethanol & Methanol Alliance A Global Centre for Green Fuels Platform确认出席Green Ship APAC 2026](https://mp.weixin.qq.com/s/KZsdTrXCZIjE4ciF-wm1WA)\n - [ ] [国内首批！奇瑞汽车荣获AUTOSQS汽车软件（含AI）质量安全管理体系认证](https://mp.weixin.qq.com/s/5ViRIcyiwpPDd3grmKRs6Q)\n - [ ] [内网拿到数据库还在一个个表翻找吗？这个工具帮你自动化识别，提取，文末速取！](https://mp.weixin.qq.com/s/kNNGuq5WhTOA5p3t6Np_5g)\n - [ ] [一键接管目标机器，获取权限](https://mp.weixin.qq.com/s/cDeAlwyJtY98RSe7Z6_6Gw)\n - [ ] [【免费领】近400页！SQL注入攻击与防御实战教程](https://mp.weixin.qq.com/s/f4fQG_BK0tP15MprDI60pQ)\n - [ ] [网安周报｜一周全球网安重大事件速览（5.18—5.24）](https://mp.weixin.qq.com/s/deIXjjw4u2zEsjqxQCyLhQ)\n - [ ] [把握智能体发展机遇，加快构建智能体治理体系](https://mp.weixin.qq.com/s/YyntANKVXUxFkKnYd55iiw)\n - [ ] [AI Infra入门干货总结：大模型是如何高效推理的](https://mp.weixin.qq.com/s/gCRMjGry2EmBmv1CFfCzVQ)\n - [ ] [AI+泛安全｜观安信息聚力打造全栈式AI智能体安全体系 重构安全运营新范式](https://mp.weixin.qq.com/s/sPzKdzpugiB_3b0bzKXRiw)\n - [ ] [NGINX 爆出堆溢出高危漏洞，可致 RCE！我们开源了一款自查工具](https://mp.weixin.qq.com/s/eJ5WgkGQNN0FyOy1SzB1Bg)\n - [ ] [2026 ZeroG-CTF WEB 官方 Write-up](https://mp.weixin.qq.com/s/8jOjoUoNP5h7ypwjI1ostw)\n - [ ] [2026ZeroG-CTF MISC 官方Write-up](https://mp.weixin.qq.com/s/oaScBRZEph_HTstQPjb2Hg)\n - [ ] [关于TpoScan v3.2.4：专业版和高级版](https://mp.weixin.qq.com/s/bkVlBbUzemPY_VOPWoDsvQ)\n - [ ] [“六张网”建设提速，国家发改委：新型电网和城市地下管网预计各投5万亿元](https://mp.weixin.qq.com/s/e1CL65YeE2Br-2Ay5Zfbsg)\n - [ ] [发现超10000个高危和严重漏洞：Anthropic“玻璃之翼”项目揭示AI网络安全新挑战](https://mp.weixin.qq.com/s/HOKlBmtIUWfZhZNw_yUQCw)\n - [ ] [WebShell 流量特征分析及解密方法综述](https://mp.weixin.qq.com/s/kDB5spthG2VI8VPADnOFAA)\n - [ ] [结合Open WebUI，搭建专属个人的AI助手](https://mp.weixin.qq.com/s/RZK-GKzAPw-vJx8gcrWBsQ)\n - [ ] [应急响应打靶--Linux溯源](https://mp.weixin.qq.com/s/LpC3kUbC9mLy15kUZLvUrQ)\n - [ ] [网安必知的50个高危端口，新手挖漏洞必备！](https://mp.weixin.qq.com/s/oQdbevdGyUGtD8BbHaHcnA)\n - [ ] [一款专为红蓝工程师和渗透测试人员打造的跨平台安全工具箱](https://mp.weixin.qq.com/s/H1JazXTyLKPcZuGIcdm3OA)\n - [ ] [安全大佬内部学习笔记曝光，这也太牛了吧！（附完整版PDF）](https://mp.weixin.qq.com/s/HBGFzYvTUfaOuW_Yzca9HA)\n - [ ] [高校车联网安全教学的困局与破局](https://mp.weixin.qq.com/s/eCyYrvjxonXxHyFJ3rSRwQ)\n - [ ] [重磅发布！思维世纪大模型安全测评系统](https://mp.weixin.qq.com/s/76-mDbEaWTgUBWdur3qtew)\n - [ ] [研究发现，已删除的Google API密钥可保持有效时间长达23分钟](https://mp.weixin.qq.com/s/5ZdjKzVbQ0zkq5iXN9qjcA)\n - [ ] [安全简讯（2026.05.25）](https://mp.weixin.qq.com/s/SanKtb1-_vlWNKBRTblkxQ)\n - [ ] [组件漏洞学习特辑一 | Bash Shellshock（CVE-2014-6271）漏洞复现全解](https://mp.weixin.qq.com/s/aFZ-8EA1crEWGlU3RbeAqA)\n - [ ] [全国首部“AI产品合规”标准启动编制，欢迎加入起草组！](https://mp.weixin.qq.com/s/oLW2blY3LyIlsC4q6L6Kfg)\n - [ ] [常见Linux提权方法及防护建议](https://mp.weixin.qq.com/s/gZVYIlFbxWLnWdWQy3x8KA)\n - [ ] [AI带来的影响初现：互联网漏洞赏金大幅下降](https://mp.weixin.qq.com/s/1w9d6GAhWw71VLoGsIxt1g)\n - [ ] [【直播预告】新一代反钓鱼系统上线，AI 高仿真四步实战演练](https://mp.weixin.qq.com/s/Kfq67_ZWoih2dmhzEvw3ag)\n - [ ] [从摩尔定律到韬定律：华为给半导体产业的一份新答卷](https://mp.weixin.qq.com/s/j4oRU5o1H9o_tl-sX6iT0A)\n - [ ] [某健康教育平台 ASP.NET前台RCE代码审计](https://mp.weixin.qq.com/s/tlgsNLVwzYkvhSu7nM1LfQ)\n - [ ] [BadPods 实战：在 AWS EKS 上投放一枚“全权限”炸弹会怎样](https://mp.weixin.qq.com/s/LVrgqeHXjMkLTiios3eMVg)\n - [ ] [一文吃透全球四大隐私法规：GDPR、CCPA、APPI、中国个保法核心对比](https://mp.weixin.qq.com/s/FKVHGyHojLEoUfEr5Ux0Fg)\n - [ ] [招商证券：基于AIGC的数据中台数据研发和智能分析研究及探索](https://mp.weixin.qq.com/s/m0khPm8QmAEFPGkm0FM7pw)\n - [ ] [代码审计：保障软件安全与质量的核心手段](https://mp.weixin.qq.com/s/BPus_Fkm-DZRYASuGbu29A)\n - [ ] [原创—人要懂得给健康投入](https://mp.weixin.qq.com/s/NX0PftkPlY8IHoabs10SDg)\n - [ ] [CrewAI-Studio 未授权 RCE：从 JSON 导入到 eval 的任意代码执行](https://mp.weixin.qq.com/s/IbZczLPZUCW2yCWqIsGkNg)\n - [ ] [传统零信任之困:一个万人企业的OA(PC/WEB/APP)暴露面收敛实践](https://mp.weixin.qq.com/s/crcpFMw_jg3zBvvTgZU_3Q)\n - [ ] [通用 | 端午第三弹，粽享万元奖励金](https://mp.weixin.qq.com/s/ugZWegNn2s030lCcpPyuZg)\n - [ ] [补天端午活动第一弹 | “粽”测有礼](https://mp.weixin.qq.com/s/FamcxGTTtt9jhSmNN5Us2w)\n - [ ] [WhiteShadowv2.1更新，批量白加黑免杀如何实现“零编译”导出表劫持](https://mp.weixin.qq.com/s/eHyGcl_2mCbe3tzcjG5HPw)\n - [ ] [工业大数据分析与集成应用工业和信息化部重点实验室2026年度开放课题申报通知](https://mp.weixin.qq.com/s/R3B6Ykkd3oFeDgpZOCaHHQ)\n - [ ] [我国加快研究制定全国一体化算力网技术标准](https://mp.weixin.qq.com/s/C-vnd-LUPWMw-ltu7saBjQ)\n - [ ] [科技｜认知战迈向大模型驱动的认知智能体阶段](https://mp.weixin.qq.com/s/oFmZCudS60-2c4DacoAkPQ)\n - [ ] [江苏银行北京分行因数据安全多项合规违规被罚51.2万元](https://mp.weixin.qq.com/s/lwrmXfaEPwqrmtohRck90A)\n - [ ] [产业｜网安市场周度监测（2026-05-25）](https://mp.weixin.qq.com/s/imtydjicW8sBxTqjIMFwAA)\n - [ ] [屏南县农信社因”数据安全管理不到位”等被罚65万 一责任人被禁业三年](https://mp.weixin.qq.com/s/TFQXR4gYzPxSET31zSAFqw)\n - [ ] [建行南通分行因网络安全等多项违规被罚没超140万元](https://mp.weixin.qq.com/s/6_TaDFrjFrecg1vhJ01TXg)\n - [ ] [太原信都村镇银行因网络安全等多项违规被罚43.91万](https://mp.weixin.qq.com/s/oq2G1Ml502EDrz3YhpEMGg)\n - [ ] [java内存马应急排查指南](https://mp.weixin.qq.com/s/jOFOkvCQnm8KofpO4rmfIQ)\n - [ ] [免费领取无问AI网安模型的调用额度](https://mp.weixin.qq.com/s/SbG7nZUf4Hiijhta5fjf6Q)\n - [ ] [无问AI网安模型接入方法详解](https://mp.weixin.qq.com/s/Sst8Lfqae9zrspmBU4MzrA)\n - [ ] [网安行业的我们，会被AI淘汰吗？我写了五千字，希望可以帮到你](https://mp.weixin.qq.com/s/1IIgJiw-B2yGaJTCY-zwHQ)\n - [ ] [警惕翻译软件成泄密“暗道”，国家安全部提示三大隐患](https://mp.weixin.qq.com/s/yCwp5Yw5Ei54yjXBqVvkug)\n - [ ] [APKPure 上的 Telegram 被植入后门](https://mp.weixin.qq.com/s/gdRD4Ix20fRvI2uXvdL04Q)\n - [ ] [Hermes Kanban 使用指南：多智能体任务编排实战](https://mp.weixin.qq.com/s/BPSXWB6aLqoSUENJ3jG1aQ)\n - [ ] [安全警报 | 黑产叫卖全国公积金数据，泄露样本直指江苏某市！](https://mp.weixin.qq.com/s/_HUmTtRuxPbEcvVsczauEQ)\n - [ ] [什么是 CVE 公共漏洞和暴露？](https://mp.weixin.qq.com/s/M3U2Gw04lzVjaH1pDi1Zmw)\n - [ ] [关于开展“保密法的历史沿革与制度落地实操指引（下）”培训的通知](https://mp.weixin.qq.com/s/ILFB9hHPpaunb4pYn88BuQ)\n - [ ] [民参军企业“保密宣传教育月”活动中后期注意事项](https://mp.weixin.qq.com/s/a6_JjkffVP85jpKHErZQQg)\n - [ ] [【每周一品】非线性节点探测器](https://mp.weixin.qq.com/s/nv2EO1YMPk7CX5baCbeLRQ)\n - [ ] [石梁：规划养老需趁早，健康快乐享余生](https://mp.weixin.qq.com/s/oI0MG5W6mq49hqWi8uKfhA)\n - [ ] [花了几天，研究了下自动化渗透](https://mp.weixin.qq.com/s/MKZO7gW22MBjrkFjqbuK_A)\n - [ ] [JWT渗透姿势](https://mp.weixin.qq.com/s/UxrCRRFcwLOUE3sXsgidtg)\n - [ ] [【组合拳】某币币期权多语言交易所前台任意文件上传漏洞](https://mp.weixin.qq.com/s/f0zo1uc14oy3OtefuAq73g)\n - [ ] [抱歉，团队已经解散了！](https://mp.weixin.qq.com/s/3jhfj3ESGi-LPBTvLlkXLQ)\n - [ ] [山石网科亮相香港数码港Cyberport AI Frontier 2026活动](https://mp.weixin.qq.com/s/9H5H6Ds7SZvvwSWpQBEWhQ)\n - [ ] [AI 简讯｜Google I/O 2026大会;Anthropic 《Agentic Coding Trends 2026》深度解析](https://mp.weixin.qq.com/s/GQQLOys5xb4zYOE6usdSOA)\n - [ ] [【深度研判】美国对古巴认知战：情报-媒体协同泄露与制裁联动机制及其对我战略利益的深层影响](https://mp.weixin.qq.com/s/ClQKb4yKBlDAqKP5_2Vymw)\n - [ ] [喜报！计算机学院石川教授团队荣获2026年国际基础科学大会（ICBS）前沿科学奖](https://mp.weixin.qq.com/s/1C0EP2n6mYw8IWpWtyb4LQ)\n - [ ] [拉勾网破产了！曾估值2.2亿](https://mp.weixin.qq.com/s/LJcau5CPZcescpK_rbx_rg)\n - [ ] [5080 SLIM 专为 Mac Pro 设计](https://mp.weixin.qq.com/s/76J_H_ndqxH6njDcavwNzQ)\n - [ ] [看鱼猜大小](https://mp.weixin.qq.com/s/spWqONURmbZsIL7V7iZJ5Q)\n - [ ] [AI 定向注入攻击：加密货币窃取供应链攻击新邪招](https://mp.weixin.qq.com/s/OkukaJ2sWaVj6BaH4oMcOQ)\n - [ ] [有人知道这是什么鱼](https://mp.weixin.qq.com/s/Jq8WyUkAE2yf_yYolK8jWg)\n - [ ] [网络安全周报 | 2026.05.18 - 2026.05.22](https://mp.weixin.qq.com/s/UBBatS4b0IZIppTuRzNung)\n - [ ] [【赛特背调-查企业】正式上线！无需授权，无感查询](https://mp.weixin.qq.com/s/g3kBCmZmWSFysODPUJhsAQ)\n - [ ] [【吃瓜速递】关于用AI挖掘，把业务挖“挂”那件事](https://mp.weixin.qq.com/s/1dsb0mpcFZHevSfeydqBJQ)\n - [ ] [我是如何找到攻击链并获得 CVE-2026-42558 的？](https://mp.weixin.qq.com/s/GYgXnxporQqrmqmmWUqHJQ)\n - [ ] [Pixel 手机锁屏绕过攻略：完整攻略](https://mp.weixin.qq.com/s/DG5D-aCByvBp1TXZClwYkw)\n - [ ] [2026年OSINT调查人员都在怎么查人](https://mp.weixin.qq.com/s/8yGRKh_a8WxylyZt6Km67g)\n - [ ] [2026-05-25 安全简报（S/A/B 三级版）](https://mp.weixin.qq.com/s/HjzySjPI2VTxVNGbbD43OA)\n - [ ] [分队战术决心 | “高价值目标防护”课目推演通知](https://mp.weixin.qq.com/s/Zk5_4sbJ0EyWkGflapHgAQ)\n - [ ] [知远防务论坛 | “印太地区美军燃料供应链韧性”兵棋推演邀请](https://mp.weixin.qq.com/s/NLuLGSEb5n3jiQtHreAFIA)\n - [ ] [【一周知新】外军防务开源情报数据库更新（2026.05.18-2026.05.24）](https://mp.weixin.qq.com/s/napx8IoK_lrNjqI1dutvYw)\n - [ ] [【推荐】知远蓝军战术态势数据系统系列产品](https://mp.weixin.qq.com/s/S7yEV-0E92_yOdTnaIXZQw)\n - [ ] [【推荐】知远全球军事基地设施全彩图册](https://mp.weixin.qq.com/s/nkFlfg9FYnnSgavznl8otw)\n - [ ] [《公安机关电子数据取证规则（2026版征求意见稿）》与2019版规则变化对照](https://mp.weixin.qq.com/s/YCDUAFApe-r0G66KrGd3lg)\n - [ ] [学习干货 | 年薪25W！从传统自动化测试到大模型安全测试，粉丝分享真实的转型复盘笔记](https://mp.weixin.qq.com/s/thT7bTDEPA-DPC4gAy9jfQ)\n - [ ] [MOE模型死亡循环到6层防御之解决之道！](https://mp.weixin.qq.com/s/U1_09xS-pkZcWKPDgFG8Gw)\n - [ ] [2026中国新能源智能汽车产业链出海研究报告：出海目的地市场环境、出海策略、出海案例](https://mp.weixin.qq.com/s/lo_QVZFc_HfG53dbjKEkGA)\n - [ ] [2026年中国汽车零部件白皮书：技术、博弈与出海新范式](https://mp.weixin.qq.com/s/H5J_bweXtpD61k0YgR2Wog)\n - [ ] [今晚的睡前故事：会发光的小石头](https://mp.weixin.qq.com/s/gLRfXpD1XRa4DUZlDVlbMA)\n - [ ] [内推网络安全驻场工程师一枚](https://mp.weixin.qq.com/s/0Lb3RPyoA7ZL4ZejMj3vXw)\n - [ ] [效率飙升80%，这家科技企业被IT工单智能填报Agent狠狠惊艳！](https://mp.weixin.qq.com/s/Q4pDsRn1VIwETLiVbQR74Q)\n - [ ] [安全小知识-第三十七期_穿透代码迷雾：白盒安全测试核心技术深度解析](https://mp.weixin.qq.com/s/9IwZoJFYCXhqadqn0xuVaA)\n - [ ] [并发逻辑漏洞靶场案例](https://mp.weixin.qq.com/s/sQiHk__-XZoZ06PcyKPBAA)\n - [ ] [dddd改版：更聪明的资产发现&漏洞扫描工具](https://mp.weixin.qq.com/s/-5o6a5aRPaoPVgoGHrMZ6g)\n - [ ] [DeepPhish 轻量版 — 钓鱼演练平台](https://mp.weixin.qq.com/s/BBvy73riF8iBo79SLhqskw)\n - [ ] [Mythos挖出上万漏洞，AI正在把网络安全“核爆”提前](https://mp.weixin.qq.com/s/jnQuP2MjYgPa9ZNphKu-Ag)\n - [ ] [网络安全面试通关指南：30道高频面试题深度解析（含答案）](https://mp.weixin.qq.com/s/Bfd9CeOX_HK1pkQJvrBPxA)\n - [ ] [AI渗透的拐点已至？我是如何通过AI纯黑盒挖到通用产品的9.8分RCE 0day漏洞](https://mp.weixin.qq.com/s/--YqoyfqPOxN6HI3Mkt4yA)\n - [ ] [简单即效率：命令行 vs 图形界面，一场不该存在的战争](https://mp.weixin.qq.com/s/IIP_zXjq__MnE5eflFy_mw)\n - [ ] [API公益中转站建议还是先了解后再用](https://mp.weixin.qq.com/s/46sTtB-BX97rc4hsbo-WPg)\n - [ ] [暗网线报 | 台湾上市短信平台遭“破防”：网络架构图与敏感政务短信双双泄露](https://mp.weixin.qq.com/s/FO9kuJgzuIQGkFPI1-RZtg)\n - [ ] [网安原创文章推荐【2026/5/24】](https://mp.weixin.qq.com/s/yieJSZjXqimD3OvyzE_0cA)\n - [ ] [网络侦查利器BurpAPIFinder，自动扒接口 + 收集感信息](https://mp.weixin.qq.com/s/XHo8JQXi5ihY8cpWyCMTIQ)\n - [ ] [群众里面有高手](https://mp.weixin.qq.com/s/USYpc1VmxhvAfi7w6Xicyw)\n - [ ] [匠心铸盾 数智护航 | 数据安全管理员技能大赛暨第四届浦东新区数智未来守护者大赛诚邀参与！](https://mp.weixin.qq.com/s/d54KhnRmyIY8yOOXChE9uw)\n - [ ] [2026年人工智能技术赋能网络安全应用测试公告](https://mp.weixin.qq.com/s/FOLBa0a8lVD2hfqGj1ynhA)\n - [ ] [关于举办2026年电力行业职业技能竞赛（网络与信息安全管理员S）决赛的通知](https://mp.weixin.qq.com/s/5M7hgfAaUNUSsRAAj1zx1w)\n - [ ] [关于举办\\\"复兴杯\\\"第五届全国大学生网络安全精英赛总决赛的通知](https://mp.weixin.qq.com/s/RAXkBVB3pbXW09g0XzpcOQ)\n - [ ] [关于举办江苏省第四届数据安全技术应用职业技能竞赛的通知](https://mp.weixin.qq.com/s/EqnlGrVBWOqPjWIszB7Uig)\n - [ ] [第二届“湾区杯”网络安全大赛青少年组报名已开启](https://mp.weixin.qq.com/s/GUD-D7ZVCb3BGVQZ2zpkcA)\n - [ ] [千万别错过！2026年济宁市“技能状元”职业技能竞赛—“运河杯”济宁市网络安全大赛报名开始啦！](https://mp.weixin.qq.com/s/Drb2J949i24Q9Bq9O-gMSQ)\n - [ ] [刘烈宏出席数据安全发展大会开幕式并启动2026年“数据要素×”大赛](https://mp.weixin.qq.com/s/_nKXnyL13NGOPzpZYPyYzA)\n - [ ] [厦门四信通信 水利信息化平台 index.do 存在SQL注入漏洞](https://mp.weixin.qq.com/s/C2S4iw7AjvibVhJFHR0-BA)\n - [ ] [【交流】跳出价格陷阱：甲方如何甄别、选择靠谱的反窃密服务商？](https://mp.weixin.qq.com/s/uP4Dn8b-j269JIBktbRFXw)\n - [ ] [FreePBX 遭六层持久化攻击，电话系统被黑后可能直接产生话费损失](https://mp.weixin.qq.com/s/GrE2HtDnIEzeBpolw9Grpg)\n - [ ] [[前沿技术] GraphQL API 安全测试](https://mp.weixin.qq.com/s/37TChtjZDRdcMdn3C6AQWQ)\n - [ ] [[前沿技术] 依赖混淆攻击实战](https://mp.weixin.qq.com/s/2bixNZYnhWJXf4HWG0I76Q)\n - [ ] [[代码审计] php SSRF](https://mp.weixin.qq.com/s/-1uJNEYNIClUoBRlSYnbwQ)\n - [ ] [网络安全行业，聊一聊企业的负债率为什么要保持在一定的合理水平](https://mp.weixin.qq.com/s/KOLWqC3S0WbdkAyblgBN8A)\n - [ ] [字节攻防岗校招，一面面经(网安)](https://mp.weixin.qq.com/s/WndF0X31t457V1voDaSLtA)\n - [ ] [暗网线报 | 3.4亿人的“秘密”藏不住了？OnlyFans数据库疑似泄露，这波“吃瓜”有点大](https://mp.weixin.qq.com/s/nl6E2H9iQ4yTHjX0FRKNAA)\n - [ ] [学网络安全一定要找对学习路线！](https://mp.weixin.qq.com/s/wkNfRyy03BPQB5d8P_Q5IQ)\n - [ ] [天津 “十五五” 规划（2026—2030）深度解读](https://mp.weixin.qq.com/s/ZZ-HzXr_eqyGFAXULxuMPw)\n - [ ] [【公益译文】2026年AI指数报告（一）](https://mp.weixin.qq.com/s/PYEJOIVmdBO5gbuQn-qtNQ)\n - [ ] [Meta被裁员工自爆：部门90%华裔、普通话办公、非华裔遭排挤，大厂职场“小圈子”有多窒息？](https://mp.weixin.qq.com/s/TE-bk6EE22yHuNuZFR70dQ)\n - [ ] [白俄罗斯关联APT组织Ghostwriter利用乌克兰教育平台作诱饵，攻击政府机构](https://mp.weixin.qq.com/s/yv0Xl7sTvQVmlT1VTxPakA)\n - [ ] [2025强网拟态决赛唯一解 云网互联赛道-WEB层层加码](https://mp.weixin.qq.com/s/ttq3xS0NY62rpqf11hs9Ew)\n - [ ] [Apache Tomcat Tribes EncryptInterceptor 加密绕过反序列化漏洞分析（CVE-2026-34486）](https://mp.weixin.qq.com/s/IItltbbMPC9tEu01fw6Wfg)\n - [ ] [通过xa0getcwd()xa0失败与竞态条件BYPASS PHPxa0open_basedir](https://mp.weixin.qq.com/s/TT8zwTTcIhrcl52q9eZP6Q)\n - [ ] [LangChain AI代码审计Agent 初用心得](https://mp.weixin.qq.com/s/bXPJHX3iScORlbkBz5n80A)\n - [ ] [日本船级社（ClassNK）船舶网络弹性指南（2024 年 7 月 版本 1.0 ）](https://mp.weixin.qq.com/s/yjXfBJSy_6Y3Nll6HesoSQ)\n - [ ] [智能船舶网络安全与系统防护专项培训课程 2026](https://mp.weixin.qq.com/s/GGyuCrvP5tYveCQla8f76A)\n - [ ] [船舶及系统网络弹性指导意见（2024 年版）](https://mp.weixin.qq.com/s/IOLk7nFYUjFyAMfGnVZk2g)\n - [ ] [现在这情况，我劝大家提前做好准备。。](https://mp.weixin.qq.com/s/TUnD2GJOoM9DbmGGfC0a0Q)\n - [ ] [0166.从失败到获得 32,000 美元：我的漏洞赏金之旅](https://mp.weixin.qq.com/s/Bi3Ye6Fd1RqC5gK9xUxyVQ)\n - [ ] [DeepSeek 原生的终端 AI 编程代理——Reasonix，力求将编程成本打下来](https://mp.weixin.qq.com/s/OrUpRHtEn_P3VSeqQLX28Q)\n - [ ] [可是我找不到她了](https://mp.weixin.qq.com/s/2RDw0wUwTEeybE5OmEDf8w)\n - [ ] [腾讯云智能渗透挑战赛中AI First的学习与思考](https://mp.weixin.qq.com/s/QP92wjd1yU7OfoemwwTmmw)\n - [ ] [【通知】华住SRC暂停漏洞测试公告](https://mp.weixin.qq.com/s/6UVjSi2W_Vj-JDUbqfKLOg)\n - [ ] [key泄露利用：高危漏洞一条龙漏洞利用工具](https://mp.weixin.qq.com/s/mVAPxYLBauokKWrYUe-o5g)\n - [ ] [又一攻防刷分利器！数据库批量取样工具，速速下载！](https://mp.weixin.qq.com/s/iBPCewJNhMEMQumDuiHmTw)\n - [ ] [网络安全、人工智能、轨道控制等岗位](https://mp.weixin.qq.com/s/59lxv7h3knM616RHdFqjqg)\n - [ ] [网络安全攻防实验室](https://mp.weixin.qq.com/s/0TF3Mq84cqmjbCxGmkZYaA)\n - [ ] [npm 新增双重验证发布权限与包安装管控功能，抵御供应链攻击](https://mp.weixin.qq.com/s/_CwEWJB9CrQOeviN200uRg)\n - [ ] [LiteSpeed cPanel 插件漏洞 CVE-2026-48172 遭利用，可获取 root 权限执行脚本](https://mp.weixin.qq.com/s/yFpua0TG3FhLkcVMWc9YHg)\n - [ ] [Laravel-Lang PHP 软件包遭入侵，被植入跨平台凭据窃取木马](https://mp.weixin.qq.com/s/aQIz8GU09riTvUbcVMDISg)\n - [ ] [涉W资讯专刊-第14期](https://mp.weixin.qq.com/s/NZ_UblXJ3tbO1_hoTT8sVA)\n - [ ] [150万！富滇银行2026年AI智能尽调报告助手采购项目](https://mp.weixin.qq.com/s/y3vMDF4ZNICbW4NlX3X9aw)\n - [ ] [迈富时245万中！江南农商银行AI赋能企微展业与数字化营销项目](https://mp.weixin.qq.com/s/9OWBUQ3DNZ6miS_N-zUANw)\n - [ ] [天才黑客的堕落：从985硕士到跨国电诈集团的“幽灵”操盘手](https://mp.weixin.qq.com/s/Sai0rqrJh4aXW611ifINoQ)\n - [ ] [渗透神器！BurpAPIFinder 自动扒接口 + 查敏感信息，效率拉满](https://mp.weixin.qq.com/s/aroFBUTFo5lk_5p9LUvsUA)\n - [ ] [CAPEv2自动化分析沙箱安装指南](https://mp.weixin.qq.com/s/tVLDSVXAI1C_mLrKv4bcMQ)\n - [ ] [AI安全网关：企业统一接入、安全防护与数据安全的必要性与实践路径](https://mp.weixin.qq.com/s/4x3NVQMktGRueyJlK5_WEA)\n - [ ] [赏金实战｜从修改地址到远程代码执行，服务端原型链污染的威力有多可怕？](https://mp.weixin.qq.com/s/7g8KLLciQqZujzGCczy_Nw)\n - [ ] [微软出手干掉千万级“黑产”！底层技术细节全揭秘：黑客是如何白嫖官方签名的？](https://mp.weixin.qq.com/s/B2BW-iErJqUDKmzTIOVANA)\n - [ ] [净网 | 58公里变101公里？网警破获抢单外挂、私改计价器案15起，73人落网](https://mp.weixin.qq.com/s/-iaYQXK5khdOF1jKsN0fXQ)\n - [ ] [Hermes 修改MSF特征 轻松逃逸安全软件](https://mp.weixin.qq.com/s/YY9lnq-_go9ToDKB-lfN8g)\n - [ ] [AI渗透测试新范式：DeepSeek用XML报错盲注绕过WAF，2小时1.4元抽干19个数据库](https://mp.weixin.qq.com/s/MAmNL7kdwvcfVkBRcTvDJg)\n - [ ] [微软豪掷500亿却叫停工程师用Claude Code：AI成本危机敲响警钟](https://mp.weixin.qq.com/s/9aRft0iULGetIQeJbpC0OQ)\n - [ ] [StubZero：Google Cloud生产环境RCE漏洞，奖金148,337美元](https://mp.weixin.qq.com/s/b3jAOox4jV1G9NQ2TgiGEQ)\n - [ ] [GhostTree：Windows路径操纵技术让EDR全面失效](https://mp.weixin.qq.com/s/GP1Xt_rQmoBzowgh1UUndA)\n - [ ] [漏洞预警 | NGINX堆缓冲区溢出漏洞](https://mp.weixin.qq.com/s/RpBBkWt-hF5fLf9X-lskAQ)\n - [ ] [漏洞预警 | 天地伟业Easy7 SQL注入漏洞](https://mp.weixin.qq.com/s/0sR9rFg9YThUWiuHEEIBwg)\n - [ ] [工具 | JsRpc](https://mp.weixin.qq.com/s/Sy02bnTFyyR0HnDDGuY93Q)\n - [ ] [两块网卡=4倍速？揭秘Windows Server网卡绑定的那些坑与技巧](https://mp.weixin.qq.com/s/gEmfvg_xOs_r1CG9hSjKAA)\n - [ ] [Skill 评估与提升专家 | 评估和提升其他 Skill 的能力、提供基准测试、红队测试和自主改进循环](https://mp.weixin.qq.com/s/gXESwlGIiFls3JwbxvZf0w)\n - [ ] [暗网快讯【20260525】124期](https://mp.weixin.qq.com/s/JEVKjVq2ncf1jL6pYcv90g)\n - [ ] [安全销售的\\\"专业自信\\\"](https://mp.weixin.qq.com/s/Z1nLhT_LsnJTKTfBk2yN_Q)\n - [ ] [【研究报告】美军微波武器发展、作战运用与对我影响研究](https://mp.weixin.qq.com/s/v9FtFcKzDaQRH8cfuDD5Mw)\n - [ ] [【研究报告】俄军军事训练经验教训及启示研究](https://mp.weixin.qq.com/s/bRxl5JzfCVWaFC_ZKp1twA)\n - [ ] [【研究报告】我军太空攻防体系建设与战略制衡能力发展研究](https://mp.weixin.qq.com/s/3sCU6ABfjOolZw_2eG_Gww)\n - [ ] [【研究报告】剖析“星链”在俄乌战争中赋能无人机作战的效能与体系性弱点](https://mp.weixin.qq.com/s/SpJzOxtzQGasAI2DaKaALA)\n - [ ] [【会员下载】俄乌冲突的教训——第三部分](https://mp.weixin.qq.com/s/K40owF2X1pUI4D9jz6JTrA)\n - [ ] [【会员下载】俄乌冲突的教训——第四部分](https://mp.weixin.qq.com/s/oJ8XpV8U2xZLNkx-oS-pYQ)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [Testing SQL Injection Using Google gemma4:31b-cloud on PortSwigger’s Vulnerable Shop](https://infosecwriteups.com/testing-sql-injection-using-google-gemma4-31b-cloud-on-portswiggers-vulnerable-shop-ef9dc05dd1aa?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [How I Found 2 Bugs on BBC’s Subdomains and Made It Into Their Hall of Fame](https://infosecwriteups.com/how-i-found-2-bugs-on-bbcs-subdomains-and-made-it-into-their-hall-of-fame-86fc4be89e68?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Rejected but Rewarded — What a GraphQL Misconfiguration Taught Me About Bug Bounty Triage.](https://infosecwriteups.com/rejected-but-rewarded-what-a-graphql-misconfiguration-taught-me-about-bug-bounty-triage-a69a9f42e12c?source=rss----7b722bfd1b8d--bug_bounty)\n- Malwarebytes\n - [ ] [A week in security (May 18 – May 24)](https://www.malwarebytes.com/blog/news/2026/05/a-week-in-security-may-18-may-24)\n- HackerNews\n - [ ] [荷兰扣押了一家支持网络攻击的托管服务商的 800 台服务器](http://0.0.0.0:8080/post/64259)\n - [ ] [npm 新增 2FA 门控发布与包安装控制，防范供应链攻击](http://0.0.0.0:8080/post/64258)\n - [ ] [Drupal 漏洞在披露后不久即成为黑客攻击目标](http://0.0.0.0:8080/post/64257)\n - [ ] [“Underminr”漏洞允许攻击者将恶意连接隐藏在受信任域名之后](http://0.0.0.0:8080/post/64256)\n - [ ] [Laravel Lang 软件包遭劫持，被用于部署凭证窃取恶意软件](http://0.0.0.0:8080/post/64255)\n- 赵武的自留地\n - [ ] [天赋操作系统 v1.0](https://mp.weixin.qq.com/s?__biz=MjM5NDQ5NjM5NQ==&mid=2651626479&idx=1&sn=8c5cb0c8811a793ce9a9c5db42221792)\n- 腾讯安全应急响应中心\n - [ ] [攻守之间，亿万信任｜腾讯七线联合众测，四倍奖金+超百万奖池等你来！](https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651208444&idx=1&sn=46952da4ea467153555b9f060d93d88e)\n- 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台\n - [ ] [Anthropic模型震动金融圈 欧洲央行紧急开会要求升级网络防御](https://blog.upx8.com/Anthropic%E6%A8%A1%E5%9E%8B%E9%9C%87%E5%8A%A8%E9%87%91%E8%9E%8D%E5%9C%88-%E6%AC%A7%E6%B4%B2%E5%A4%AE%E8%A1%8C%E7%B4%A7%E6%80%A5%E5%BC%80%E4%BC%9A%E8%A6%81%E6%B1%82%E5%8D%87%E7%BA%A7%E7%BD%91%E7%BB%9C%E9%98%B2%E5%BE%A1)\n - [ ] [全球最大铝土矿生产国计划下月推出出口管制措施](https://blog.upx8.com/%E5%85%A8%E7%90%83%E6%9C%80%E5%A4%A7%E9%93%9D%E5%9C%9F%E7%9F%BF%E7%94%9F%E4%BA%A7%E5%9B%BD%E8%AE%A1%E5%88%92%E4%B8%8B%E6%9C%88%E6%8E%A8%E5%87%BA%E5%87%BA%E5%8F%A3%E7%AE%A1%E5%88%B6%E6%8E%AA%E6%96%BD)\n - [ ] [一款开源App为国行机补上快速分享功能](https://blog.upx8.com/%E4%B8%80%E6%AC%BE%E5%BC%80%E6%BA%90App%E4%B8%BA%E5%9B%BD%E8%A1%8C%E6%9C%BA%E8%A1%A5%E4%B8%8A%E5%BF%AB%E9%80%9F%E5%88%86%E4%BA%AB%E5%8A%9F%E8%83%BD)\n - [ ] [华为正式发表半导体领域新定律 晶体管密度与系统性能逻辑折叠技术](https://blog.upx8.com/%E5%8D%8E%E4%B8%BA%E6%AD%A3%E5%BC%8F%E5%8F%91%E8%A1%A8%E5%8D%8A%E5%AF%BC%E4%BD%93%E9%A2%86%E5%9F%9F%E6%96%B0%E5%AE%9A%E5%BE%8B-%E6%99%B6%E4%BD%93%E7%AE%A1%E5%AF%86%E5%BA%A6%E4%B8%8E%E7%B3%BB%E7%BB%9F%E6%80%A7%E8%83%BD%E9%80%BB%E8%BE%91%E6%8A%98%E5%8F%A0%E6%8A%80%E6%9C%AF)\n - [ ] [教皇称AI应被解除武装以避免统治人类](https://blog.upx8.com/%E6%95%99%E7%9A%87%E7%A7%B0AI%E5%BA%94%E8%A2%AB%E8%A7%A3%E9%99%A4%E6%AD%A6%E8%A3%85%E4%BB%A5%E9%81%BF%E5%85%8D%E7%BB%9F%E6%B2%BB%E4%BA%BA%E7%B1%BB)\n- 黑鸟\n - [ ] [警惕Underminr新型网络规避技术：CDN共享边缘的隐形漏洞](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186831&idx=1&sn=7a0ed378ca1323a830b4cfb7f28b7ae5)\n- 威努特安全网络\n - [ ] [威努特超融合+WinClaw亮相鲲鹏昇腾开发者大会2026](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651141818&idx=1&sn=98c2dacda0c1d4641352e9f006668308)\n- 奇客Solidot–传递最新科技情报\n - [ ] [欧洲执法部门黑进 VPN 服务识别勒索组织用户](https://www.solidot.org/story?sid=84397)\n - [ ] [HBM 成本占到了 AI 芯片组件成本的三分之二](https://www.solidot.org/story?sid=84396)\n - [ ] [惠普调查 BIOS 更新导致笔记本故障问题](https://www.solidot.org/story?sid=84395)\n - [ ] [俄罗斯推迟对移动 VPN 用户收费的计划](https://www.solidot.org/story?sid=84394)\n - [ ] [政治情绪和普通情绪不同](https://www.solidot.org/story?sid=84393)\n - [ ] [科学家推翻空气动力学的基础原则](https://www.solidot.org/story?sid=84392)\n - [ ] [科学家破解烟草合成尼古丁之谜](https://www.solidot.org/story?sid=84390)\n - [ ] [日本声优起诉要求 TikTok 删除 AI 模仿其声音的视频](https://www.solidot.org/story?sid=84389)\n - [ ] [气候变化威胁全球植物物种](https://www.solidot.org/story?sid=84388)\n - [ ] [Firefox 加入对 Web Serial API 的支持，与 Adafruit 合作](https://www.solidot.org/story?sid=84387)\n - [ ] [四月全球风能太阳能发电量超过天然气发电量](https://www.solidot.org/story?sid=84386)\n - [ ] [《星际公民(Star Citizen)》筹款突破十亿美元](https://www.solidot.org/story?sid=84385)\n- 绿盟科技研究通讯\n - [ ] [【公益译文】2026年AI指数报告（一）](https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499931&idx=1&sn=e4ebbbfddcccf48ff2b5aceec7bb6641)\n- 代码卫士\n - [ ] [趋势科技提醒注意已遭利用的 Apex One 0day 漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526099&idx=1&sn=d07e28ac6d092fa30327a6c688e850a5)\n - [ ] [自动化供应链攻击6小时内攻陷5561个 GitHub 仓库](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526099&idx=2&sn=d06f127d835cfd48afbbe4980d54ed19)\n- 天御攻防实验室\n - [ ] [网安传承](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486982&idx=1&sn=92e6b6c9cfc3592d6fb27b212da7558d)\n- 看雪学苑\n - [ ] [硬啃反封号 dylib：OLLVM CFF/MBA 混淆拆解与167 Hook 深度分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458615455&idx=1&sn=86932f09204eb52a339f06b4e66678e9)\n - [ ] [7.6 万美金叫卖 3.4 亿条数据，OnlyFans 的 “泄露” 竟是一场骗局？](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458615455&idx=2&sn=84e660c57959d2401093c1e570f92510)\n - [ ] [真机解锁难、调试受限？CVD 云手机定制及风控对抗全解](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458615455&idx=3&sn=5c863f190cdf7061107437eba3fb6f65)\n- 安全分析与研究\n - [ ] [CAPEv2自动化分析沙箱安装指南](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247496735&idx=1&sn=f49e736b54a8a1fc1fe646a1304fef9f)\n- 奇安信威胁情报中心\n - [ ] [AI 定向注入攻击：加密货币窃取供应链攻击新邪招](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518885&idx=1&sn=2b936557ad35aca9d49d04dba256b222)\n- 信息安全国家工程研究中心\n - [ ] [官方预警 | “银狐”木马病毒出现专门针对我国用户的新变种，真实受害案例触目惊心](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247503980&idx=1&sn=d8b085e50bcb1a86f429a3855f72f7e7)\n- 安全圈\n - [ ] [【安全圈】985博士为间谍偷拍涉密资料，被判15年](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076871&idx=1&sn=174533ee2e8168689c6a17ed4456f79b)\n - [ ] [【安全圈】上海网警今年破获抢单外挂、私改计价器案15起，73人落网](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076871&idx=2&sn=2513fe61bd37bf8a502c574b783c6f7e)\n - [ ] [【安全圈】已修复：微软 Win11 内核曝 7.8 高危漏洞](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076871&idx=3&sn=8b7e1ab3adc698e9b50411d949be259c)\n- 安全内参\n - [ ] [国内上市公司近2000万条用户数据疑似泄露](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515993&idx=1&sn=5c57a6f70af23c6e836f681a234c6739)\n - [ ] [兼顾创新与安全：美国人工智能行政命令草案提出建立前沿AI安全部署框架](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515993&idx=2&sn=552eaf396352b45e6cb3bd17898d41d6)\n- 网络空间安全科学学报\n - [ ] [太空会师！](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247507485&idx=1&sn=e10b51409dc5fb7596663f64db800172)\n- 安全牛\n - [ ] [黑客哲学的AI新篇章：Joey Melo与“不改规则，只控体验”的红队传奇](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141442&idx=1&sn=25d82d49e6988e4879ac2a8883999452)\n - [ ] [你的新同事是AI代理人？网络安全视角下，如何驯服“数字竞争者”而不被淘汰](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141442&idx=2&sn=3d6c6adf2b030708f1aa73b2662c3d12)\n- 极客公园\n - [ ] [微软按下 vibe coding 暂停键：烧 token 已经比员工贵了](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653107181&idx=1&sn=58fc8abc6447f864db5b2675f085910b)\n - [ ] [阿里云的「Agentic 时刻」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653107169&idx=1&sn=a7e0318af6595eac37a62a53cca0e046)\n - [ ] [「死了么」App 被「收编」，改名「在么在么」；台积电盈利大增却传出削减奖金，员工酝酿罢工；NVIDIA 杀入 CPU 市场 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653107125&idx=1&sn=0bd5221c2f37eec77ab374070b6fd517)\n- 默安科技\n - [ ] [从规则到智能：雳鉴 SAST AI 版三大能力突破代码安全瓶颈](https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247501839&idx=1&sn=0a7149d4c7d437486ae963346fae02e7)\n- 中国信息安全\n - [ ] [论坛·数据安全治理 | AI智能体的数据安全风险与合规监管研究](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262951&idx=1&sn=41b3e25293f7d86d817f4241a44ae7b3)\n - [ ] [公告 | 公安部就《公安机关电子数据取证规则（征求意见稿）》公开征求意见](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262951&idx=2&sn=ab0dcdc7340bcfd2ad4bf8dbac1f8b5a)\n - [ ] [专家解读 | 从技术规则到数字程序法——评《公安机关电子数据取证规则（征求意见稿）》](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262951&idx=3&sn=81dbc89e2767afd98be05b3cddd3e662)\n - [ ] [关注 | 主流JavaScript软件包管理平台npm遭供应链投毒攻击](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262951&idx=4&sn=eb7bc2ea4900edd6205c21445cf7996a)\n - [ ] [天融信李雪莹：安全底座铺路、智算中枢加速，融合助力数据要素安全高效流通](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262951&idx=5&sn=f901958c21d75a9ec190ab02f84b4699)\n - [ ] [观点 | 划定人工智能终端“聪明标尺”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262951&idx=6&sn=7f978dc9eb67020741bd76cb033c330c)\n- 微步在线\n - [ ] [第一手金融行业实战总结，来了](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650186590&idx=1&sn=c67af564507fa98d240699bb41611194)\n- 火绒安全\n - [ ] [隧道藏暗控——Cloudflare合法工具被黑产用于远程控制](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247533709&idx=1&sn=7d7097c74e78c9364c2fa26808d0a8c7)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247533709&idx=2&sn=317bb84c12f332e6b4520fc93a0bb2cc)\n- 枇杷熟了\n - [ ] [卖枇杷啦！](https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247490059&idx=1&sn=5d2daa4d1f45a82e4a452c779bf18bfc)\n- 补天平台\n - [ ] [通用 | 端午第三弹，粽享万元奖励金](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510770&idx=1&sn=89f22525e3ea7ba0987bcb7c30df0dfd)\n - [ ] [补天端午活动第一弹 | “粽”测有礼](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510770&idx=2&sn=0c1c3c3f9ca8383af78a24b0cc1af672)\n- M01N Team\n - [ ] [AI安全案例分析：Prompts Become Shells —— 从提示词注入到AI Agent远程代码执行（RCE）（文末附邀请码）](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247495083&idx=1&sn=f13abeb4a11eb21249dc9e6e46d7e6e7)\n- Over Security\n - [ ] [Universitat de València Targeted by Nova Group: 300GB Data Exfiltration Claimed, Initial $500,000 Ransom Demand Revealed](https://www.suspectfile.com/universitat-de-valencia-targeted-by-nova-group-300gb-data-exfiltration-claimed-initial-500000-ransom-demand-revealed/)\n - [ ] [Anthropic’s restricted Claude Mythos model may be coming to Claude Code](https://www.bleepingcomputer.com/news/artificial-intelligence/anthropics-restricted-claude-mythos-model-may-be-coming-to-claude-code/)\n - [ ] [Dal cookie ai tracking pixel: i rischi regolatori per le imprese](https://www.cybersecurity360.it/legal/privacy-dati-personali/dal-cookie-ai-tracking-pixel-i-rischi-regolatori-per-le-imprese/)\n - [ ] [DBIR 2026, il ritorno ai fondamentali nella cyber: le 5 azioni strutturali da mettere in campo](https://www.cybersecurity360.it/news/dbir-2026-il-ritorno-ai-fondamentali-nella-cyber-le-5-azioni-strutturali-da-mettere-in-campo/)\n - [ ] [Rotta sul Canada: strategia VPN tra tunnel a 10 Gbps e la trappola dei 5 Eyes](https://www.cybersecurity360.it/cultura-cyber/vpn-canada-le-migliori/)\n - [ ] [Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks](https://krebsonsecurity.com/2026/05/netherlands-seizes-800-servers-arrests-2-for-aiding-cyberattacks/)\n - [ ] [FBI warns of Kali365 phishing service targeting Microsoft 365 accounts](https://www.bleepingcomputer.com/news/security/fbi-warns-of-kali365-phishing-service-targeting-microsoft-365-accounts/)\n - [ ] [Nordpass business: 14 giorni di prova gratis e senza carta di credito per gestire in sicurezza le password aziendali](https://www.cybersecurity360.it/cultura-cyber/nordpass-gratis/)\n - [ ] [Bce, allarme sui cyberattacchi AI alle banche: il nodo è il tempo di patch](https://www.cybersecurity360.it/cybersecurity-nazionale/bce-allarme-sui-cyberattacchi-ai-alle-banche-il-nodo-e-il-tempo-di-patch/)\n - [ ] [Taiwan Flags Five Major Cyber Risks After 726 Security Incidents in 2025](https://thecyberexpress.com/taiwan-cyber-risk-726-cybersecurity-incidents/)\n - [ ] [Ransomware, una minaccia in evoluzione: cosa aspettarsi nell’era dell’Agentic AI](https://www.cybersecurity360.it/nuove-minacce/ransomware/ransomware-una-minaccia-in-evoluzione-cosa-aspettarsi-nellera-dellagentic-ai/)\n - [ ] [Navigating Lax Load Balancers: When an Intersection Gets You Inside](https://blog.doyensec.com/2026/05/25/cloudsectidbits-elbaph-alb.html)\n - [ ] [Kaspersky: la GenAI mette alla prova il riconoscimento facciale](https://www.securityinfo.it/2026/05/25/kaspersky-la-genai-mette-alla-prova-il-riconoscimento-facciale/)\n - [ ] [Wireshark 4.6.6 Resolves ROHC Parser and Buffer Overflow Vulnerabilities](https://thecyberexpress.com/wireshark-4-6-6-rohc-dissector-crash-fix/)\n - [ ] [FBI Flags Kali365 as New Phishing Threat Targeting Microsoft 365 Users](https://thecyberexpress.com/kali365-phishing-kit-hijacks-microsoft-365/)\n - [ ] [Quacivi a capo dell’Acn: perché è svolta per la cyber italiana](https://www.cybersecurity360.it/cybersecurity-nazionale/quacivi-a-capo-dellacn-un-cambio-di-stagione-per-la-cyber-italiana/)\n- CNVD漏洞平台\n - [ ] [CNVD漏洞周报2026年第20期](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496966&idx=1&sn=ac3699b4b31bce4c5b16877fd623757d)\n - [ ] [上周关注度较高的产品安全漏洞(20260518-20260524)](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496966&idx=2&sn=e60e7fcef20b977ae462ccddd14972dc)\n- Securityinfo.it\n - [ ] [Kaspersky: la GenAI mette alla prova il riconoscimento facciale](https://www.securityinfo.it/2026/05/25/kaspersky-la-genai-mette-alla-prova-il-riconoscimento-facciale/?utm_source=rss&utm_medium=rss&utm_campaign=kaspersky-la-genai-mette-alla-prova-il-riconoscimento-facciale)\n- IT Service Management News\n - [ ] [Hacking Apple Pay](http://blog.cesaregallotti.it/2026/05/hacking-apple-pay.html)\n- ICT Security Magazine\n - [ ] [Da Operation Power-OFF a Operation Lightning: i recenti colpi delle forze dell’ordine europee al patrimonio cybercriminale](https://www.ictsecuritymagazine.com/articoli/operation-power-off-europol/)\n - [ ] [Cyber Warfare autonoma: l’Agentic AI nell’era del conflitto algoritmico](https://www.ictsecuritymagazine.com/articoli/cyber-warfare-autonoma/)\n - [ ] [Data monetization nel dark web: perché il dato sanitario vale più di una carta di credito](https://www.ictsecuritymagazine.com/articoli/data-monetization-nel-dark-web/)\n- 情报分析师\n - [ ] [用开源情报读懂美情报总监加巴德辞职，一封辞职信背后的权力退场学](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567975&idx=1&sn=38af05756a97079c806d94a974c14c6c)\n- 迪哥讲事\n - [ ] [任意用户密码重置](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499479&idx=1&sn=7b31ce3782f8169bf32a4a2d2349a80a)\n- 吾爱破解论坛\n - [ ] [API公益中转站建议还是先了解后再用](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651144341&idx=1&sn=a7a8df4f5847a4961b3eb72124f08882)\n- 深信服千里目安全技术中心\n - [ ] [【漏洞通告】Drupal Core SQL注入漏洞(CVE-2026-9082)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525807&idx=1&sn=d2d585508a04051bd1604794e648dd71)\n - [ ] [【漏洞通告】cPanel-WHM 任意文件读取漏洞(CVE-2026-29205)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525807&idx=2&sn=d883b4663246394babb72bb364b34d39)\n- 数世咨询\n - [ ] [AI带来的影响初现：互联网漏洞赏金大幅下降](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542986&idx=1&sn=b97ba56003ced175f3894af25166c243)\n - [ ] [【直播预告】新一代反钓鱼系统上线，AI 高仿真四步实战演练](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542986&idx=2&sn=d6f77754aad6ee129a8f93b0c8572f3d)\n- The Hacker News\n - [ ] [⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos](https://thehackernews.com/2026/05/weekly-recap-linux-flaws-defender-0.html)\n - [ ] [Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks](https://thehackernews.com/2026/05/ghost-cms-cve-2026-26980-exploited-to.html)\n - [ ] [The Alert Firehose Finally Meets Its Match](https://thehackernews.com/2026/05/the-alert-firehose-finally-meets-its.html)\n - [ ] [Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms](https://thehackernews.com/2026/05/lazarus-deploys-remotepe-memory-only.html)\n - [ ] [TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO](https://thehackernews.com/2026/05/trapdoor-supply-chain-attack-spreads.html)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Microsoft Access VBA, (Mon, May 25th)](https://isc.sans.edu/diary/rss/33012)\n - [ ] [TeamPCP Supply Chain Campaign: Activity Through 2026-05-24, (Mon, May 25th)](https://isc.sans.edu/diary/rss/33014)\n- Troy Hunt's Blog\n - [ ] [Welcoming the Bhutanese Government to Have I Been Pwned](https://www.troyhunt.com/welcoming-the-bhutanese-government-to-have-i-been-pwned/)\n- Krebs on Security\n - [ ] [Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks](https://krebsonsecurity.com/2026/05/netherlands-seizes-800-servers-arrests-2-for-aiding-cyberattacks/)\n- Yak Project\n - [ ] [Yakit x Memfit AI TOKEN 超级限时免费](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529814&idx=1&sn=09dd15a23976af0e26d3fd57065d876c)\n- Javvad Malik\n - [ ] [Cybersecurity films that need to be made](https://javvadmalik.com/2026/05/25/cybersecurity-films-that-need-to-be-made/)\n - [ ] [Alex Honnold and Other Keynote Choices](https://javvadmalik.com/2026/05/25/alex-honnold-and-other-keynote-choices/)\n- Security Affairs\n - [ ] [Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites](https://securityaffairs.com/192655/cyber-crime/ghost-cms-flaw-abused-to-push-clickfix-attacks-on-hundreds-of-sites.html)\n - [ ] [340 Million OnlyFans Profiles Allegedly Rebuilt from Leaks](https://securityaffairs.com/192643/cyber-crime/340-million-onlyfans-profiles-allegedly-rebuilt-from-leaks.html)\n - [ ] [Zero-Click WhatsApp Account Takeover Hits iPhone Users Running iOS 16. No Linked Devices, No Warning](https://securityaffairs.com/192627/security/zero-click-whatsapp-account-takeover-hits-iphone-users-running-ios-16-no-linked-devices-no-warning.html)\n - [ ] [Dutch authorities dismantle hosting network allegedly used for cyberattacks and disinformation](https://securityaffairs.com/192602/intelligence/dutch-authorities-dismantle-hosting-network-allegedly-used-for-cyberattacks-and-disinformation.html)\n - [ ] [FBI director Kash Patel’s brand website taken offline after malware reports](https://securityaffairs.com/192613/security/fbi-director-kash-patels-brand-website-taken-offline-after-malware-reports.html)\n- Security Weekly Podcast Network (Audio)\n - [ ] [Visibility with EDR/MDR is still important, 'the basics' are impossible, and the news - Rob Allen - ESW #460](http://sites.libsyn.com/18678/visibility-with-edrmdr-is-still-important-the-basics-are-impossible-and-the-news-rob-allen-esw-460)\n"}}, "archive/tmp/2025-11-21.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747313.8955138, "n": 55742, "h": "464dfbeaff962e6a", "c": "{\n \"Recent Commits to cve:main\": {\n \"Update Thu Nov 20 11:38:16 UTC 2025\": \"https://github.com/trickest/cve/commit/841a45bfc430b1eebf7ae820336942c435c96ff9\"\n },\n \"Google Online Security Blog\": {\n \"Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing\": \"http://security.googleblog.com/2025/11/android-quick-share-support-for-airdrop-security.html\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2025-11-20 Review\": \"http://www.sec-wiki.com/?2025-11-20\"\n },\n \"Tenable Blog\": {\n \"Protecting Your Cloud Data: How Tenable Cloud Security Guards Your Most Valuable Assets in the Cloud\": \"https://www.tenable.com/blog/cloud-data-security-dspm-aispm-cnapp-tenable-cloud-security\",\n \"Stop Patching Panic: Ditch Slow Manual Patching and Embrace Intelligent Automation\": \"https://www.tenable.com/blog/why-do-patches-break-things-and-how-can-we-reduce-that-risk\"\n },\n \"obaby@mars\": {\n \"送别\": \"https://h4ck.org.cn/2025/11/22016\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"获奖名单公布！近3000人，1000支队伍参与第十一届“美亚杯”角逐\": \"https://www.4hou.com/posts/LG3W\",\n \"2025网络安全“金帽子”年度评选 | 投票通道开放中，敬请投票助力！\": \"https://www.4hou.com/posts/KG3z\"\n },\n \"Filippo Valsorda\": {\n \"The 2025 Go Cryptography State of the Union\": \"https://words.filippo.io/2025-state/\"\n },\n \"Sucuri Blog\": {\n \"A Beginner’s Guide to the CVE Database\": \"https://blog.sucuri.net/2025/11/a-beginners-guide-to-the-cve-database.html\"\n },\n \"paper - Last paper\": {\n \"BadThink：针对大型语言模型思维链推理的触发式过度思考攻击\": \"https://paper.seebug.org/3415/\",\n \"无 gadgets 也能翻盘：ret2gets 能否成为核武器？\": \"https://paper.seebug.org/3414/\"\n },\n \"Cerbero Blog\": {\n \"InnoSetup Format Package 3.0\": \"https://blog.cerbero.io/innosetup-format-package-3-0/\"\n },\n \"Doonsec's feed\": {\n \"APT跟踪 热门攻击事件 国家黑客\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDg5ODQxMg==&mid=2247483791&idx=1&sn=07f0f46633ace5b06db2f80e68bf8826\",\n \"论文研读与思考|PENTESTGPT：评估和利用大型语言模型进行自动渗透测试\": \"https://mp.weixin.qq.com/s?__biz=MzU4NjcxMTY3Mg==&mid=2247489147&idx=1&sn=4de2adccbcdecd928a83135ded19acae\",\n \"论文研读与思考|ChatAFL:大语言模型引导的协议模糊测试\": \"https://mp.weixin.qq.com/s?__biz=MzU4NjcxMTY3Mg==&mid=2247489147&idx=2&sn=8650082601bf0199fbd223e6573c916b\",\n \"条件竞争导致的RCE\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDM1NjY4Mw==&mid=2247483775&idx=1&sn=3bcc6d0273d6c7ec4d47b651c90993f3\",\n \"【AI安全】结构化防御提示词注入攻击\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzU2NDgxNQ==&mid=2247484087&idx=1&sn=51a4b18f2235ec6aa1d65250e8dc7cf5\",\n \"每日一问：有人要办比赛吗？\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTQzNTQzMQ==&mid=2247486084&idx=1&sn=8aa58dbbf2dd623828de144eb214db03\",\n \"某互联网金融平台遭DDoS攻击事件详情与分析\": \"https://mp.weixin.qq.com/s?__biz=MzUzMDgwMjY1Mg==&mid=2247485906&idx=1&sn=6729ed986dafc7997a8a7cba62955803\",\n \"全国“一站式”等保合规，破解企业安全落地难题\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTIxNzg0Ng==&mid=2247488359&idx=1&sn=316f13ed951954f61d3c49d5a65bf2c2\",\n \"免费分享 | HTB第9赛季最新靶机Eighteen解法分享\": \"https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247485420&idx=1&sn=303d22a50b61485e4c44c28bddf120d9\",\n \"数智转型 共启新程|金盾信安深度参与数智化成熟度及数智化转型使能咨询服务机构研讨会\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448691208&idx=1&sn=f17dc2ddf2ac3c8c2da9eec913729da7\",\n \"自然资源部发布《卫星导航定位基准站管理办法》\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448691208&idx=2&sn=2bd32734c3262a9bfcca07d7ea3413cd\",\n \"一图读懂《卫星导航定位基准站管理办法》\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448691208&idx=3&sn=a2d45042d8c0f5f46eabe964a650496b\",\n \"小程序抓包解包详解\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDQxODk4NQ==&mid=2247484458&idx=1&sn=a5b9aeb0f1e2f85ee40e28cdf702505a\",\n \"记某国外大学网络安全作业及课件\": \"https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247487107&idx=1&sn=37575d927d606625bcb604ccef032f89\",\n \"docker逃逸\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDQ2ODU4NQ==&mid=2247483909&idx=1&sn=4d4a27f176b5ce8006e0673ca4c836c0\",\n \"BTC中所使用的密码学原理\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MzUwNDEzNg==&mid=2247484672&idx=1&sn=1c41b4e359e24ba757dd6217f6d93f09\",\n \"【JS逆向】0基础一文入门JS逆向\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247521422&idx=1&sn=a9ee6dab77adb8ea45b96fb8c00643f7\",\n \"活该你能挖到洞\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247521422&idx=2&sn=a59010dbebbd31dde6dd1ad4099198a3\",\n \"网安工具箱天花板！有这一个就够了\": \"https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485915&idx=1&sn=2901f1a567c5d849050c8391489d8bff\",\n \"团队赛高分密码公开！取证云平台上架第十一届美亚杯团体赛参考题解\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651448233&idx=1&sn=6550c1297ef0f7def9a0e416c592617f\",\n \"【连载】红蓝对抗-攻防演练-WEB安全渗透测试：XXE-XML实体注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484909&idx=1&sn=1076dd71abe896baf07402348c189630\",\n \"多层隐匿载荷解密与驱动级致盲对抗手法分析丨游蛇（银狐）技战术追踪\": \"https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650213148&idx=1&sn=c34648624bb2cce8fdc90630520e1233\",\n \"重要通知丨第九届“强网杯”漏洞智能分析赛道决赛入围名单公布\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MjY3NDQ2Ng==&mid=2247488438&idx=1&sn=e2c046be327b9ae0c5cffc891a87e45a\",\n \"神州希望协助昌江黎族自治县科学技术和工业信息化局开展网络安全应急演练\": \"https://mp.weixin.qq.com/s?__biz=MzA4Mzg1ODMwMg==&mid=2650726186&idx=1&sn=90ef26c19cda97be711c78305eed8196\",\n \"让搜索更“懂你”：快手自研UniDex与UniSearch实现新一代工业级搜索\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NzU4MDM0MQ==&mid=2247498365&idx=1&sn=de0a2684938a655c9faea1313b0bba5f\",\n \"比 App Store 还省心的一键更新工具，要停止服务了？\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492770&idx=1&sn=e52d75a2da371390db293aec3f5b75a3\",\n \"美团 LongCat Interaction 团队发布大模型交互系统技术报告 WOWService\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781734&idx=1&sn=cc848330c852f22c1cb6bde1fbc2147c\",\n \"美团首款 AI IDE 产品 CatPaw 开启公测 | 文末附邀请码\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781734&idx=2&sn=bea84cd8e7eefcdceab09abd8b685605\",\n \"抽奖赠书 | 从理论到落地，清华×美团出版教材，讲透即时配送\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781734&idx=3&sn=214cd9f12c1f178d074ee7ae5eb95e7d\",\n \"信息安全团队责任分工的精细化管理：从混乱到高效的组织变革\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247488037&idx=1&sn=0f457f41f9041ff3362ac438555081be\",\n \"7-Zip曝高危RCE漏洞（CVE-2025-11001）\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096658&idx=1&sn=8a5eab9c867402d27970098dbc644768\",\n \"FortiWeb曝高危命令注入漏洞（CVE-2025-58034）\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096658&idx=2&sn=56298d867873c5d74d35b1d04625675f\",\n \"行政拘留和刑事拘留的区别\": \"https://mp.weixin.qq.com/s?__biz=MzYzMjE2NDk4Mg==&mid=2247483875&idx=1&sn=7bd79ad562e8e1b1d0436a6fd7fed6b8\",\n \"欢迎订阅2026年度《中国网信》杂志！\": \"https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649403426&idx=1&sn=5cb136192cea0f3a6b0ccc797bc8710a\",\n \"【活动】LPSRC 翻倍活动开启！！最高三倍积分！！！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MjY0MTEzMQ==&mid=2247483874&idx=1&sn=2924bf49cf0b4ac1649be55e8f5023d1\",\n \"学术年会 | 2025年网络空间安全学术会议通知（第二轮）\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247506206&idx=1&sn=f13a7a43c115c86e4c25a75d8e3b28ce\",\n \"长安银行以赛促用，全员发力推动AI大模型应用落地\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932950&idx=1&sn=1f613871756d23211af8c33e10e087e7\",\n \"AI快讯：央行将降低AI金融应用门槛，浙商银行与阿里达成AI合作\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932950&idx=2&sn=f0edbfeafc84ac4b0b179048807f398d\",\n \"60万！北京银行2025年智能合规管理平台（AI合规制度重检与合规出题）项目\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932950&idx=3&sn=b84176d0b8f4a030f82411c0cc387cbb\",\n \"怀新投资中，通联数据、深擎信息、同花顺候选！华西证券投顾AI教练：诊股诊基智能体建设项目\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932950&idx=4&sn=8ea103867a3c5c93870d3538cc603a0a\",\n \"照这样挖洞，小白不出洞来找我\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330685&idx=2&sn=341469dabfde30fa45249e50e29ca992\",\n \"G.O.S.S.I.P 特别推荐 2025-11-20 贯通计算机系统！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501002&idx=1&sn=5d302912b9092f7231df8c23dfe0e6e3\",\n \"银狐组织最新ValleyRAT样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDUzNDExMQ==&mid=2247485978&idx=1&sn=f04fddd9394f0e12096595a57ae57178\",\n \"【安全圈】CISA 警告 Chrome V8 0-Day 被积极利用导致远程代码执行\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=1&sn=d86cbdc3bcd1c657ff0c80a9e915853a\",\n \"【安全圈】7-Zip 漏洞被证实遭到攻击利用\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=2&sn=988a91ea3270a54f52e42d08973b89fb\",\n \"【安全圈】Ollama 被曝模型解析漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=3&sn=5f9c47c03a34f8134402494b1cb87ca4\",\n \"【安全圈】三星医疗子公司疑遭第三方供应链泄露\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=4&sn=82cda6d303afabd58112903c25219fb5\",\n \"国内外科技人才共享案例对比及启示\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622145&idx=1&sn=941cde37021dcd5e73e80c6bdf29aa7a\",\n \"德国发布首个《太空安全战略》，将太空领域系统纳入国防规划\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622145&idx=2&sn=2cd0bb72962ae3a346f42c0ccc1771c8\",\n \"11 宇宙的十二种假说：人择原理\": \"https://mp.weixin.qq.com/s?__biz=Mzk5MDgzMDExMg==&mid=2247484626&idx=1&sn=c5c9481a3291c10265fb7727f898974e\",\n \"分享的图片、视频、链接\": \"https://mp.weixin.qq.com/s?__biz=MzU0MTA3OTU5Ng==&mid=2247570019&idx=1&sn=7d1b9b8df3cbde7f25499118f02d4906\",\n \"重要认证 | 恒安嘉新荣获全国首家智能体安全数据集认证评价\": \"https://mp.weixin.qq.com/s?__biz=MzIwMTUzNDY0NA==&mid=2649119899&idx=1&sn=a71a4e76661ec2476c8cc892323a34fc\",\n \"喜报 | 恒安嘉新联合项目荣获2025年中国通信学会科学技术奖一等奖\": \"https://mp.weixin.qq.com/s?__biz=MzIwMTUzNDY0NA==&mid=2649119899&idx=2&sn=bfca320361b9bc158fedc559cae72bfc\",\n \"企业动态 | 恒安嘉新斩获2025年第一届黑灰产检测技能大赛多个奖项\": \"https://mp.weixin.qq.com/s?__biz=MzIwMTUzNDY0NA==&mid=2649119899&idx=3&sn=815b075ab9b4edb0d8d1176347106de8\",\n \"企业动态 | 恒安嘉新出席中国-东盟数据安全产业创新论坛\": \"https://mp.weixin.qq.com/s?__biz=MzIwMTUzNDY0NA==&mid=2649119899&idx=4&sn=1c6d1fd1cd629937b0684f3899a33a7b\",\n \"实战化培训筑牢数字安全防线！虎符网络赋能杭州西站枢纽\": \"https://mp.weixin.qq.com/s?__biz=MzUxODY3MDExMA==&mid=2247490494&idx=1&sn=2333556fe5e3ba0ac0098ca29fa79845\",\n \"全球多个AI集群遭AI恶意软件劫持，被改造成挖矿僵尸网络\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515231&idx=1&sn=8df5f094bc50a13545c25a50d79af141\",\n \"亚马逊警告称“网络赋能的动能打击”正在走进现代战争\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515231&idx=2&sn=7a1e00d3a3a3977796f691ed4176498d\",\n \"从注入到Shell：记一次绕过WAF过滤的十六进制上传木马实战\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797408&idx=1&sn=009a7c33eba7c301ef63af6f70049133\",\n \"17位CISO的书单：网安人提升综合能力的必读经典\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247647058&idx=1&sn=e0abd4453832d8cbb902157b20ed8901\",\n \"违法违规收集使用个人信息 这40款移动应用被通报\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247647058&idx=2&sn=246c6be10e703e5c86ba54f455c8adfe\",\n \"免费赠送 | 青少年安全意识科普素材（第三期）\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247647058&idx=3&sn=8d1d426012a9a0dbd2b1bd13bb4c58a6\",\n \"Fortinet警告FortiWeb新漏洞（CVE-2025-58034）已被野外利用\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330685&idx=1&sn=2dd634c0df98b743e578697b13c40b6f\",\n \"欧盟拟修订《通用数据保护条例》和《人工智能法案》以简化监管\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330685&idx=3&sn=c89af185ca33b0f2792b2c3f06abf9f3\",\n \"点击一次渗透42天：Akira勒索软件利用CAPTCHA诱饵摧毁云备份致存储公司瘫痪\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330685&idx=4&sn=15d272142ae04c0e467a8087cf0f6576\",\n \"【培训通知】关于组织开展“数智化转型管理师（DTM）”培训的通知\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649255938&idx=1&sn=69f74644a9b8d384ed5ee779e02f18e7\",\n \"【培训通知】关于组织开展“数智化转型咨询师（DTC）”培训的通知\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649255938&idx=2&sn=a014778cabf25e891dcf0bc77109c0c2\",\n \"ISC2供应链风险调查报告：70%受访者高度关注供应链风险\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247493368&idx=1&sn=8ca845f9bba9a152a1651f57aae38243\",\n \"推荐等级最高级！华为防火墙通过武汉云黄鹤实验室首批安全公测评级\": \"https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247506651&idx=1&sn=ad0a648d4e9b64eebf89a443486a1714\",\n \"渊亭中标信息技术中试平台项目，打造AI落地“安全试验场”\": \"https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660192925&idx=1&sn=8555a436fd772e01cca9038c09277306\",\n \"打造AI+安全标杆，奇安信AISOC中标某市电子政务项目\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629839&idx=1&sn=e18d10974fbeaca945de07a58cb02c05\",\n \"北京网神洞鉴入选“中青年骨干司法鉴定人才库”\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629839&idx=2&sn=46d086a510eb1c6772a7d18d83dfa5b3\",\n \"行业 | 激活流量数据价值，CSNAS V17开启共享、可控新纪元\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=1&sn=1dad61aef89efd0fea492c6621ad7c35\",\n \"专家解读 | 规范电子印章应用管理 构筑数字信任坚实基础\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=2&sn=f9e6aaa7fb139378ec7825027e78e057\",\n \"关注 | 最高法发布涉未成年人网络保护与违法犯罪惩处典型案例\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=3&sn=2732bf245820d7065ff95d70bf25c7a6\",\n \"观点 | 给未成年人使用生成式人工智能装上“法治护栏”\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=4&sn=df8961710185c25554ebaa6220d26b47\",\n \"【漏洞通告】Fortinet FortiWeb身份验证绕过与命令注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489417&idx=1&sn=08bf5aa3fb48b70cdd6a884ad30b4659\",\n \"信息安全：对称加密与非对称加密算法原理详解\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247562823&idx=1&sn=396962b1f313b3aa845b91adc782fb40\",\n \"原创 | 万字深度解读：TEE技术如何成为全球智能汽车安全的合规基石\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247562823&idx=2&sn=bd03edacefdd234e6ea71f7aadeb88f0\",\n \"网警护航“公考季” | 着急想上岸？网警提醒你注意！\": \"https://mp.weixin.qq.com/s?__biz=MzA4NTk5NzgxOA==&mid=2657569197&idx=1&sn=22efb54a4d930032db3d15702fb5ad2e\",\n \"国内首个！360开发SnowSoul勒索软件专用解密解决方案\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247583034&idx=1&sn=af283a5a8c3efe879ce9d97431a4ac09\",\n \"小红书推出通用推理智能体 DeepAgent：工具&任务随心配！\": \"https://mp.weixin.qq.com/s?__biz=Mzg4OTc2MzczNg==&mid=2247494045&idx=1&sn=a988f6a2338318e1ff4633f3a03daa00\",\n \"创宇安全智脑通用安全能力升级通告（20251120）\": \"https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247492428&idx=1&sn=0532b6bbb8577c0441373f1f40c4f43d\",\n \"信安世纪联合海光信息成立AI密算联合实验室，以“密码+算力”融合夯实AI安全底座\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650665678&idx=1&sn=8f816c2600afab8b448a424c16c8ed8c\",\n \"餐饮不止关注食品安全，老乡鸡3步搭起“全域安全壁垒”，守护千万消费者权益\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247528558&idx=2&sn=4f54e5e32c1f34f899462c8f94f6f022\",\n \"一公司因未处置高危漏洞被黑客攻击篡改，公安机关依法处罚\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247493295&idx=1&sn=94d6e1334ca0b946028d766480e82648\",\n \"X402 如何让 AI 代理具备 KYA/KYT 能力？BlockSec 完整解析\": \"https://mp.weixin.qq.com/s?__biz=MzkyMzI2NzIyMw==&mid=2247490308&idx=1&sn=9c721294d53af9071b9912d5bbb49fcc\",\n \"SDC2025 议题回顾 | SCPGA：自认同CoT渐进式泛化攻击\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604411&idx=1&sn=c9c3d5f23ce7da8357d9fe24b9dc9e30\",\n \"华硕路由器遭大规模黑客攻击，超5万台设备被窃密操控\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604411&idx=2&sn=e1c465c37e801bfde89a6decf640dce1\",\n \"代码审计无从下手？四阶段实战教学，带你从入门到精通\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604411&idx=3&sn=b355152f50e954a71ee190e6438d7f89\",\n \"启明星辰隐私盾：四重防护，安心发“声”\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651734942&idx=1&sn=70d6aca06c7229989541112c1ea30c4a\",\n \"CISA要求政府机构在7天内修复这个 Fortinet 新0day\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524465&idx=1&sn=cf210939b4c44de97b60529383818aaa\",\n \"用AI攻击AI：Ray AI开源框架中的老旧漏洞被用于攻击集群\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524465&idx=2&sn=41ec03ab3c0572c4ecc61e20dcd8fdb6\",\n \"【中日甲午战争】第三回：东学党燃起烈火，金玉均魂断沪上\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MzgwMDE2Mw==&mid=2247488389&idx=1&sn=6808db9e5e541733a980c3b7aac36057\",\n \"【高危漏洞预警】Fortinet FortiWeb命令注入漏洞CVE-2025-58034\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491020&idx=1&sn=a327b53864674a3f633b52a9f73593e1\",\n \"安全圈最大的谎言：联动！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650626235&idx=1&sn=d56f0c7d35db122b7dcf3b073a1dadfe\",\n \"前沿 | 我国网络安全基本制度的建立与实施\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247501619&idx=1&sn=e1dbaaebea9d05ce1f5de2677dc6148c\",\n \"一图读懂GB/T 22080-2025《网络安全技术 信息安全管理体系 要求》\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247501619&idx=2&sn=0df402240ccbe800d9e8c4dbae883fe0\",\n \"安信天行云网端一体化综合运营解决方案\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzMxMTMyMA==&mid=2648571463&idx=1&sn=d01b03d6910e375bd1f64932efdc2464\",\n \"0v0.pro , 话不多说，周免gpt-5 , gemini-3-pro , grok-4.1\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MDk3NDE2Mw==&mid=2247484041&idx=1&sn=755b0db3b94f3110bf82555410f39352\",\n \"【论文速读】| 面向自主高效的网络安全：一种基于多目标自动化机器学习的入侵检测系统\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247497377&idx=1&sn=0119bd3570b401e1bc989d046abf08f2\",\n \"一次有点抽象的渗透\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556791&idx=1&sn=39318351e4418a5aa69c3fdc68079b6d\",\n \"【免费领】渗透测试必备工具：Nmap实战技术全解教程\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556791&idx=2&sn=1bf0c88e682dd55dafea3f2e885a0578\",\n \"你的员工正在把核心机密“喂”给AI？警惕大模型应用背后的“三大隐形杀手”\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649872881&idx=1&sn=42914cd33fa7a0cf4eb3e379640384cc\",\n \"2025年10月考试成绩\": \"https://mp.weixin.qq.com/s?__biz=MzI4MzA0ODUwNw==&mid=2247487287&idx=1&sn=8dba4db6f6c9b81208fd49dd1c31b88c\",\n \"体育赋能 安全添彩｜观安信息深度参与2025新金环上海Top Run 10公里精英赛\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247509917&idx=1&sn=7e20c62d6be748be9569421940b4a32e\",\n \"首发|天地伟业Easy7 存在信息泄露漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485224&idx=1&sn=12dab424ccfe7fab9086a9ce9e308175\",\n \"认知空间测绘概念及技术\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247602328&idx=1&sn=2003f6deec3f7bf66d56e431b50f037c\",\n \"超级计算机实现量子微芯片高精度模拟\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247602328&idx=2&sn=65592c8b10b4117c6bcbb16b2ce65da0\",\n \"人工智能时代健全网络安全治理体系研究\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175112&idx=1&sn=f5e0fb86fc19884094a727ec8763c83c\",\n \"具身智能的 “阿喀琉斯之踵”，我们如何与脆弱的钢铁之躯共存？\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651136479&idx=1&sn=c7c2309b3e65011c6802f5c43cec217b\",\n \"【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告（1026-1108）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651136479&idx=2&sn=2d18d0d67d888d122884e7191613e785\",\n \"Oracle数据库迁移到GaussDB\": \"https://mp.weixin.qq.com/s?__biz=MzE5MTQzMzg5MA==&mid=2247484233&idx=1&sn=e303678589ff4001071c899a422faf38\",\n \"攻防领域开班计划（2025年12月）\": \"https://mp.weixin.qq.com/s?__biz=MzI4MzA0ODUwNw==&mid=2247487282&idx=1&sn=47aedfa62d1455a6dd63b4cc9a4a763e\",\n \"信安从业者为什么要考CISP？\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247525782&idx=1&sn=efcaaee8313ef87fb32af896af4fa0da\",\n \"全面资产收集流程及方法解析 万字长文窥探信息收集|挖洞技巧\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247575748&idx=1&sn=5c1347b03806a08205468233db3a262e\",\n \"【资源贴】华为大佬安全学习笔记曝光，太牛了！\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247575748&idx=2&sn=68608c880da499adbf47c27e5cdb9569\",\n \"双第一！阿里云领跑安全运营智能体\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTQ2MjI5OA==&mid=2664093433&idx=1&sn=63c54ca877f46addf5def7467b30dbbd\",\n \"【格物刊】技术速递已上新！前沿取证技术刊物第十一期上线啦！\": \"https://mp.weixin.qq.com/s?__biz=MzI5NzkxMTIzOQ==&mid=2247494064&idx=1&sn=bb559b9a7da75f8ae3a91ded7875a459\",\n \"绕过JWT签名导致的越权漏洞-玄域靶场实操演示\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NTYwNzY3NQ==&mid=2247483982&idx=1&sn=ab2afe14cd00bc2cb011307420528611\",\n \"Cloudflare全球故障导致互联网瘫痪，多家主流平台服务中断\": \"https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247525107&idx=1&sn=f49b53bde40e920c0ecebd99f7b896f2\",\n \"国家安全部｜你的设备还在“保质期”吗？\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247489049&idx=1&sn=a94efb164ea37a23fd05e80cc91d9222\",\n \"JeecgBoot3.5.0版SQL注入漏洞详细分析记录\": \"https://mp.weixin.qq.com/s?__biz=MzI4MjI2NDI1Ng==&mid=2247485392&idx=1&sn=1b412936be907f33772f9eaf91abdc2c\",\n \"天融信助力某造船厂筑牢网络安全防线，合规护航远洋航行\": \"https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650980356&idx=1&sn=958318cfe0229521fc4685a2d0eea0a5\",\n \"八年积淀再升级！《2025网信自主创新调研报告》编写工作正式启动\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzI3MzMwMQ==&mid=2247531743&idx=1&sn=3cc47689a2d234b9a4bb3666af2f1209\",\n \"飞天诚信F55安全支付终端通过PCI 7.0认证\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649877614&idx=1&sn=c9a4a6ff6656e58dd00120e0ccfea3d7\",\n \"零零信安五张优惠卷免费送\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490985&idx=1&sn=95bd848ef4905b4b27c4236eb89483b0\",\n \"安全简讯（2025.11.20）\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501805&idx=1&sn=4b124935c5c6c36ef439869ea5ab4d44\",\n \"【漏洞通告】FortiWeb API 与 CLI 多处命令注入漏洞(CVE-2025-58034)\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501805&idx=2&sn=8347174d02f34aa53010eee073b57c68\",\n \"车联网靶场的破局与跃迁：提升主动实战能力和助力T型人才培养\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139385&idx=1&sn=23d719a241135a08a4b401ccf0a007b2\",\n \"三分钟，走完网安售前的一生\": \"https://mp.weixin.qq.com/s?__biz=MzU3NDY0NDAxMw==&mid=2247485055&idx=1&sn=7673c9f7fc7fba7568f518446565c4bd\",\n \"心动的橱窗秋冬上新！来get心动好物！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509772&idx=1&sn=4d6406694f5eca622d5d74254e8cb1db\",\n \"AI破局安全痛点：国舜受邀参加中国工程院青年学者沙龙并斩获殊荣\": \"https://mp.weixin.qq.com/s?__biz=MzA3NjU5MTIxMg==&mid=2650575882&idx=1&sn=b8fe09b35b1701781095193b57e4a20d\",\n \"RocketMQ 命令执行漏洞复现分析\": \"https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247490894&idx=1&sn=3e063f33eb915ebd6eca714cedf93a02\",\n \"GJB 141能力验证相关资料\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzUyNjU5Mg==&mid=2247486199&idx=1&sn=2c207c6949bd7a437fd4167e05d2323d\",\n \"SonarQube选型采购指南\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzUyNjU5Mg==&mid=2247486199&idx=2&sn=56ee7735ceb151d7f2c0e7c519971b15\",\n \"刚想休息！一夜破掉13个国家防火墙，并调出7个国家系统源码。\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODY3NDYxNA==&mid=2247486633&idx=1&sn=e814866462e54511fcd76fca2983504c\",\n \"网易易盾受邀参与中国信通院政务大模型安全标准制定，共建国家级安全护栏体系\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTg2NjYxOA==&mid=2650744415&idx=1&sn=9ee70031c582108ef38f075bf4020dce\",\n \"不是，这也有Callback？\": \"https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247487422&idx=1&sn=312c992a2c45f0ed374ea212ddf4cbb7\",\n \"没想到这家网安公司就这么陨落了！\": \"https://mp.weixin.qq.com/s?__biz=MzkzMDY3ODg5MQ==&mid=2247484292&idx=1&sn=dc1535ef0b51383452727b28938aa6bd\",\n \"价值图谱 | 网络准入产品核心能力介绍\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540899&idx=1&sn=f1b3a9c05b9694846f9d8ed674885658\",\n \"干货 | 从 T+1 到分钟级：携程基于 Flink 与 Paimon 的近实时湖仓建设实践\": \"https://mp.weixin.qq.com/s?__biz=MjM5MDI3MjA5MQ==&mid=2697276987&idx=1&sn=3ef92987369d03bc0b2b01a496e28a05\",\n \"越南网络司令部（86司令部）扩张及其对我影响\": \"https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247512360&idx=1&sn=9f11d379018914dfa71d67c00bf36537\",\n \"高危runC漏洞曝光 黑客可突破Docker容器逃逸\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247543288&idx=1&sn=84f03402334a772c9736b9081094fd65\",\n \"Chrome修复2025年第七个0day漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489284&idx=1&sn=2641d7dedd9ae76df2352937b61e07f6\",\n \"智绘可信AI新图景，共筑网络安全新未来——第五届网络空间内生安全学术大会报名通道正式开启\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247534802&idx=1&sn=2cc7c6ed7d89e0beb98959de39b04119\",\n \"开源情报（OSINT）的演变：人工智能时代的机遇与挑战\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650563298&idx=1&sn=30ed9324c2ee7004cc0b225243c1dc9c\",\n \"印度启用缪德诺马高原空军基地对我安全战略影响分析\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650563298&idx=2&sn=47e7548d6e8b980fc10a78d072cfea91\",\n \"CDG之敏感文件外发安全： 敏感文件外发怕泄密？ 这套技术直接锁死风险！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MjE0OTQzMw==&mid=2666307486&idx=1&sn=839a584989863b4c0d7e40aaa63480c5\",\n \"行业资讯：任子行 财务总监换人 钟海川离任 沈智杰接任\": \"https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247496063&idx=1&sn=76b1225dfeec0e016832493f38906ccb\",\n \"燃情落幕！2025年网络安全 & 数据安全竞赛幕后纪实 ——xa0以赛铸盾，共筑数字安全防线\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTUyNjkwNA==&mid=2247484435&idx=1&sn=8d09cdceb472b091a9f9871f4ee188c3\",\n \"【已复现】Fortinetu2002FortiWeb 命令注入漏洞(CVE-2025-58034)\": \"https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247520724&idx=1&sn=ea5c82fc85f3cf5b05dabf1c21ed6d1b\",\n \"12个细分领域！网御星云强势入围《2025中国数据安全企业全景图》\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDUzMjc5Ng==&mid=2650204353&idx=1&sn=d979ec68d7d5ad77f38db792a6ce6260\",\n \"【业界动态】第十八届中国密码学会年会在天津举办\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664998211&idx=1&sn=92e7aba99edfedb56d9791bd05c2ee11\",\n \"【业界动态】新版CSNAS V17正式发布 开启共享可控新纪元（文末附免费获取方式）\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664998211&idx=2&sn=abf5d0b8599e4ba41491a8b173b9018c\",\n \"【业界动态】CAAI社会计算与社会智能专委会征集“社会计算十大科学问题”\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664998211&idx=3&sn=4c18994438c0a1ca3546b1d50f66ef08\",\n \"⌈京麒沙龙第18期⌋AI+移动安全专场，立即扫码，锁定你的线下专属席位！\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727850219&idx=1&sn=78ddddbb2874dac305041a00426377e6\",\n \"实力认证 | 众智维科技多领域入选《2025年中国数据安全企业全景图》\": \"https://mp.weixin.qq.com/s?__biz=MzU5Mjg0NzA5Mw==&mid=2247494830&idx=1&sn=07259be1c6a99ece9b818c87caf6c7ee\",\n \"网络监控：夜莺对超300台信锐无线AP监控告警最佳实践\": \"https://mp.weixin.qq.com/s?__biz=MzIzNjU5NDE2MA==&mid=2247491400&idx=1&sn=fa4dbf6ef5100aecc535c579aa4c2702\",\n \"JS逆向 -- 利用土办法+AI编写的视频下载脚本过程复现\": \"https://mp.weixin.qq.com/s?__biz=MzA4MzgzNTU5MA==&mid=2652040809&idx=1&sn=6a3af62023aba4661cbecef5602199c4\",\n \"关于2024年度深圳市网络空间安全专业职称评审表领取通知\": \"https://mp.weixin.qq.com/s?__biz=MzU0Mzk0NDQyOA==&mid=2247522906&idx=1&sn=6854a3e49f2fa61a008c5bedffc27e44\",\n \"数据要流动 更要安全地流动：石犀科技于高交会提出治理新范式\": \"https://mp.weixin.qq.com/s?__biz=MzU0Mzk0NDQyOA==&mid=2247522906&idx=2&sn=9c508338339e53f0d955cb7b5fcaa0f9\",\n \"常见未经授权漏洞测试及利用\": \"https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712621&idx=1&sn=189f1dffeb2dfda6f58768294a239e2a\",\n \"国家级黑客在现代混合战争中的新战术\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247504167&idx=1&sn=546f9eee8b2c8bb73abddc84c7bfa808\",\n \"澳大利亚三星旧款手机软件过时导致用户死亡\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247504167&idx=2&sn=d4cf7f56764dbd991b4691835cce0111\",\n \"小学初中高中资料免费分享群（20251120）\": \"https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247500306&idx=1&sn=d6b139eca43394782b6c3af5534fba79\",\n \"你升级 OpenSSH 10.2 了吗？\": \"https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247487645&idx=1&sn=bb82a6b66fd172f45912784ee7e0facb\",\n \"85秒生成抖音页面，1分钟打造操作系统：一觉醒来，天又又又塌了...\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650262299&idx=1&sn=f9a1a1a02e5e3a414c6c050b9688870b\",\n \"一页纸，跟上级说清楚安全这点事\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTMzMDUyOA==&mid=2247506964&idx=1&sn=7ae64d70d11c76e86e618647275e7e49\",\n \"TG云取“黑科技”！CF919支持动态提取TG数据！\": \"https://mp.weixin.qq.com/s?__biz=MzI0OTEyMTk5OQ==&mid=2247495334&idx=1&sn=e8e1d0604e7de736ff51adffa794dbc9\",\n \"博世：功能安全和信息安全的挑战-设计功能安全与信息安全之间的流程接口\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628764&idx=1&sn=37dfa308726e91ec22b7e97e83f40325\",\n \"智能网联汽车功能安全开发实战培训课程（基于ISO 26262:2025）\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628764&idx=2&sn=b938e0152a361470e067d0b2f85b7291\",\n \"基于本体与攻击—故障树的智能网联汽车功能安全和网络安全联合分析评估方法\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628764&idx=3&sn=c1de0dfcb0628ca04063c85c9223ea40\",\n \"破“隐”者说：AI时代，你的网络安全谁来守护？\": \"https://mp.weixin.qq.com/s?__biz=MzE5MTEyMTg1Nw==&mid=2247484143&idx=1&sn=0eedca92bda9e656d1957031ab5b113d\",\n \"2025网络安全“金帽子”年度评选 | 投票通道开放中，敬请投票助力！\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585531&idx=1&sn=04607db0ee9dd112e7c6a97ba989bbc0\",\n \"Finger协议遭滥用 沦为 ClickFix 恶意软件攻击工具\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585531&idx=2&sn=00408b6c3d23eeb9f1108b6691095724\",\n \"公安部计算机信息系统安全产品质量监督检验中心检测发现40款违法违规收集使用个人信息的移动应用\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585531&idx=3&sn=dd9979c4b504fe7c3d094aeacf246fe2\",\n \"开放融合 AI赋能 智慧运维 | 山石网科2025“秋实行动”圆满收官\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661304108&idx=1&sn=31df8ff250bf96af31cb9d6bcae339f2\",\n \"山石网科亮相香港AI防火墙专题活动，展示双A战略创新应用成果\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661304108&idx=2&sn=5df2282ef60bce792e765231493ddab1\",\n \"山石方案｜某卫健局等级保护安全建设解决方案\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661304108&idx=3&sn=dd5c835b6034c90d38cec53b80b4b4b3\",\n \"【病毒分析】专挑制造业下手！揭秘BEAST图形化勒索软件（Windows版）的加密逻辑与免杀手段\": \"https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247505544&idx=1&sn=56416c26ae65456dd29387da0dda5966\",\n \"燃情落幕！网络安全竞赛见证安全尖兵的诞生\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTUyNjkwNA==&mid=2247484418&idx=1&sn=88da966f498fe7ca7427ff97806f342d\",\n \"很现实，很沉重！\": \"https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649472260&idx=1&sn=912db47a2d41f07249bebaf6e8d29222\",\n \"臭外包小剧场之“你是来背锅的吧？”\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY3ODk4MQ==&mid=2247484638&idx=1&sn=020feb182f6d678e1d102b33c8666e44\",\n \"渗透测试 | 二挖某985高校获取2本证书小记（三）\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDkzMTE0Ng==&mid=2247484458&idx=1&sn=361ee4fdf1bf3250869da9a419b815a6\",\n \"以技破灰！晨星安全4队勇夺黑灰产检测技能大赛决赛铜奖\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDI0MjUyNQ==&mid=2247485765&idx=1&sn=51708f34817d367b816ebdf864cf4652\",\n \"鸿宇多用户商城scan_list.php存在SQL注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDkwMDg3Nw==&mid=2247483976&idx=1&sn=ec7abcbd830c3bccf43d6081661f843f\",\n \"速修！FortiWeb无条件RCE利用链发现在野利用\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507976&idx=1&sn=6b5edb53f10e21451c6e14ae478b7268\",\n \"ChatGPT等多个大型网站集体宕机，你们的海外业务能够幸免稳定运行吗？\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTYyOTUyOA==&mid=2247487745&idx=1&sn=3a52708668078571d347997c1d6c020a\",\n \"倒计时2天！第九届“强网杯”全国网络安全挑战赛线下赛即将打响\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MjY3NDQ2Ng==&mid=2247488414&idx=1&sn=a215dd3a3630650345c765a06a701801\",\n \"NSA联合CISA发布新指南，直击隐蔽网络攻击手法；预算削减遇上攻击升级，2026年网络安全面临双重挤压| 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139385&idx=2&sn=d07f0a7ffbc111a90290dfe147a03e80\",\n \"2025第二届“平航杯”电子数据取证竞赛-计算机部分WriteUp\": \"https://mp.weixin.qq.com/s?__biz=MzkyOTI4NTY4MQ==&mid=2247491845&idx=1&sn=d480aeae559174b233a155764e9c24f8\",\n \"认识安全本身（手稿二）\": \"https://mp.weixin.qq.com/s?__biz=MzkwNTI3MjIyOQ==&mid=2247484239&idx=1&sn=e957c2f48bd9ffbfd0871c5133a157b1\",\n \"带你一步步搞懂某工控题（附思路）\": \"https://mp.weixin.qq.com/s?__biz=MzU3MzEwMTQ3NQ==&mid=2247508329&idx=1&sn=f2c725ab92f73c255b724f654c9df317\",\n \"【在野利用】Fortinet FortiWeb OS命令注入漏洞(CVE-2025-58034)\": \"https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247495318&idx=1&sn=1520e42c7cee2f4dcee0a2f720c16a65\"\n },\n \"GuidePoint Security\": {\n \"Beyond Spicy Autocomplete: Are LLMs Enough for Static Application Security Testing (SAST)?\": \"https://www.guidepointsecurity.com/blog/beyond-spicy-autocorrect-llms-for-sast/\"\n },\n \"hasherezade's 1001 nights\": {\n \"Flare-On 12 – Task 9\": \"https://hshrzd.wordpress.com/2025/11/20/flare-on-12-task-9/\"\n },\n \"Securelist\": {\n \"Inside the dark web job market\": \"https://securelist.com/dark-web-job-market-2023-2025/118057/\",\n \"Blockchain and Node.js abused by Tsundere: an emerging botnet\": \"https://securelist.com/tsundere-node-js-botnet-uses-ethereum-blockchain/117979/\"\n },\n \"CCC Event Blog\": {\n \"Creature ChroniCles – Künstlerische Dokumentation des 39C3\": \"https://events.ccc.de/2025/11/20/39c3-creature-chronicles/\"\n },\n \"Malwarebytes\": {\n \"Budget Samsung phones shipped with unremovable spyware, say researchers\": \"https://www.malwarebytes.com/blog/news/2025/11/budget-samsung-phones-shipped-with-unremovable-spyware-say-researchers\",\n \"What the Flock is happening with license plate readers?\": \"https://www.malwarebytes.com/blog/privacy/2025/11/what-the-flock-is-happening-with-license-plate-readers\",\n \"Holiday scams 2025: These common shopping habits make you the easiest target\": \"https://www.malwarebytes.com/blog/news/2025/11/holiday-scams-2025-these-common-shopping-habits-make-you-the-easiest-target\",\n \"Gmail can read your emails and attachments to train its AI, unless you opt out\": \"https://www.malwarebytes.com/blog/news/2025/11/gmail-is-reading-your-emails-and-attachments-to-train-its-ai-unless-you-turn-it-off\"\n },\n \"Security Blog | Praetorian\": {\n \"CVE-2025-52493: When Password FieldsAren’t Enough – Client-Side SecretExposure in PagerDuty Cloud Runbook\": \"https://www.praetorian.com/blog/cve-2025-52493-when-password-fieldsarent-enough-client-side-secretexposure-in-pagerduty-cloud-runbook/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"冷冻妻子的男子结交新伴侣引发争论\": \"https://www.solidot.org/story?sid=82856\",\n \"清华去年获得 AI 专利超过 MIT、斯坦福、普林斯顿和哈佛的总和\": \"https://www.solidot.org/story?sid=82855\",\n \"大脑处理不同语言的基本语音的方式相同\": \"https://www.solidot.org/story?sid=82854\",\n \"美国可能会在两个月内失去麻疹消除国地位\": \"https://www.solidot.org/story?sid=82853\",\n \"逾 60 个警局装备了波士顿动力的机器狗\": \"https://www.solidot.org/story?sid=82852\",\n \"中国卡车正迅速从柴油转向电动\": \"https://www.solidot.org/story?sid=82851\",\n \"中国人才推动美国 AI 研究\": \"https://www.solidot.org/story?sid=82850\",\n \"Linus Torvalds 认为 AI 辅助编程对新手有用，但不适合应用于生产代码\": \"https://www.solidot.org/story?sid=82849\",\n \"荷兰将安世半导体控制权归还给中国母公司\": \"https://www.solidot.org/story?sid=82848\",\n \"物理学家开发 DeepSeek R1 去审查版本\": \"https://www.solidot.org/story?sid=82847\"\n },\n \"奇安信 CERT\": {\n \"【已复现】Fortinet FortiWeb 命令注入漏洞(CVE-2025-58034)安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504197&idx=1&sn=99fe135087d866605140a294cccf24a6\"\n },\n \"安全客\": {\n \"SnowSoul勒索软件样本分析：加密机制与解密研究\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789452&idx=1&sn=1366256ab9a09d6005d4c983a138bc3c\"\n },\n \"黑鸟\": {\n \"黑客团伙如何用树莓派入侵银行ATM系统并取款数年\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183735&idx=1&sn=631912063f482c082ba2297863f4d87a\"\n },\n \"看雪学苑\": {\n \"SDC2025 议题回顾 | SCPGA：自认同CoT渐进式泛化攻击\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604411&idx=1&sn=c9c3d5f23ce7da8357d9fe24b9dc9e30\",\n \"华硕路由器遭大规模黑客攻击，超5万台设备被窃密操控\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604411&idx=2&sn=e1c465c37e801bfde89a6decf640dce1\",\n \"代码审计无从下手？四阶段实战教学，带你从入门到精通\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604411&idx=3&sn=b355152f50e954a71ee190e6438d7f89\"\n },\n \"绿盟科技CERT\": {\n \"【漏洞通告】Fortinet FortiWeb身份验证绕过与命令注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489417&idx=1&sn=08bf5aa3fb48b70cdd6a884ad30b4659\"\n },\n \"安全内参\": {\n \"全球多个AI集群遭AI恶意软件劫持，被改造成挖矿僵尸网络\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515231&idx=1&sn=8df5f094bc50a13545c25a50d79af141\",\n \"亚马逊警告称“网络赋能的动能打击”正在走进现代战争\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515231&idx=2&sn=7a1e00d3a3a3977796f691ed4176498d\"\n },\n \"vivo千镜\": {\n \"蓝心小V荣获中国信通院AI安全“卓越型”认证，全力守护你的隐私安全\": \"https://mp.weixin.qq.com/s?__biz=MzI0Njg4NzE3MQ==&mid=2247492268&idx=1&sn=63f531cd1f3a5af604f8ad2dc1de5290\"\n },\n \"dotNet安全矩阵\": {\n \".NET 通过 AppDomain 创建与管理新的应用程序域\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500916&idx=1&sn=abbc7caf49edc55bb49c4d8431795114\",\n \".NET 环境下的 CSRF 漏洞与防御策略\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500916&idx=2&sn=c809d65e0ffe14a95ba22270c4d64f37\",\n \".NET内网实战： 通过 FileSecurity 获取目录及文件控制列表和规则\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500916&idx=3&sn=2b7be1ba01f8e3c7837510c28189be51\"\n },\n \"HackerNews\": {\n \"黑客正活跃利用 7-Zip 符号链接远程代码执行漏洞\": \"https://hackernews.cc/archives/61621\",\n \"基于 Python 的 WhatsApp 蠕虫，向巴西设备传播 Eternidade 窃取器\": \"https://hackernews.cc/archives/61617\",\n \"WrtHug 利用华硕 WRT 路由器六大漏洞，劫持全球数万台淘汰设备\": \"https://hackernews.cc/archives/61614\",\n \"俄罗斯大型保险公司遭网络攻击，服务大面积中断\": \"https://hackernews.cc/archives/61612\",\n \"美欧多国制裁俄 “防弹主机” 服务商，因其支持勒索软件犯罪\": \"https://hackernews.cc/archives/61609\",\n \"常春藤盟校数据泄露，国防部长、前第一夫人等校友信息曝光\": \"https://hackernews.cc/archives/61607\",\n \"巴西石油巨头 90GB 敏感地震和勘探数据被俄系黑客窃取\": \"https://hackernews.cc/archives/61603\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 特别推荐 2025-11-20 贯通计算机系统！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501002&idx=1&sn=5d302912b9092f7231df8c23dfe0e6e3\"\n },\n \"信息安全国家工程研究中心\": {\n \"前沿 | 我国网络安全基本制度的建立与实施\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247501619&idx=1&sn=e1dbaaebea9d05ce1f5de2677dc6148c\",\n \"一图读懂GB/T 22080-2025《网络安全技术 信息安全管理体系 要求》\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247501619&idx=2&sn=0df402240ccbe800d9e8c4dbae883fe0\"\n },\n \"丁爸 情报分析师的工具箱\": {\n \"【情报机构】湾湾的情报与反情报体系\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651153022&idx=1&sn=075a387efe54302ada67fbd4dd617945\",\n \"【喜报】第三届全国大学生开源情报数据采集与分析大赛获奖通知\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651153022&idx=2&sn=67011503c2a94a80301976fcce3d3b6e\"\n },\n \"天黑说嘿话\": {\n \"EasyTools渗透测试工具箱V1.9.7更新(支持cli工具参数添加与调用功能，支持定时任务执行)\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485230&idx=1&sn=4848d16adb80554725493425cbbea342\"\n },\n \"中国信息安全\": {\n \"行业 | 激活流量数据价值，CSNAS V17开启共享、可控新纪元\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=1&sn=1dad61aef89efd0fea492c6621ad7c35\",\n \"专家解读 | 规范电子印章应用管理 构筑数字信任坚实基础\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=2&sn=f9e6aaa7fb139378ec7825027e78e057\",\n \"关注 | 最高法发布涉未成年人网络保护与违法犯罪惩处典型案例\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=3&sn=2732bf245820d7065ff95d70bf25c7a6\",\n \"观点 | 给未成年人使用生成式人工智能装上“法治护栏”\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=4&sn=df8961710185c25554ebaa6220d26b47\"\n },\n \"网络空间安全科学学报\": {\n \"学术年会 | 2025年网络空间安全学术会议通知（第二轮）\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247506206&idx=1&sn=f13a7a43c115c86e4c25a75d8e3b28ce\"\n },\n \"安全牛\": {\n \"车联网靶场的破局与跃迁：提升主动实战能力和助力T型人才培养\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139385&idx=1&sn=23d719a241135a08a4b401ccf0a007b2\",\n \"NSA联合CISA发布新指南，直击隐蔽网络攻击手法；预算削减遇上攻击升级，2026年网络安全面临双重挤压| 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139385&idx=2&sn=d07f0a7ffbc111a90290dfe147a03e80\"\n },\n \"代码卫士\": {\n \"CISA要求政府机构在7天内修复这个 Fortinet 新0day\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524465&idx=1&sn=cf210939b4c44de97b60529383818aaa\",\n \"用AI攻击AI：Ray AI开源框架中的老旧漏洞被用于攻击集群\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524465&idx=2&sn=41ec03ab3c0572c4ecc61e20dcd8fdb6\"\n },\n \"极客公园\": {\n \"他们没在追风口，而是在造下一个\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653091561&idx=1&sn=d599311b0db4691a381e1f069662aa53\",\n \"字节这个「消失」了几年的 App，悄悄杀回苹果商城排行榜\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653091561&idx=2&sn=3ce929cdb83be6d5c9a53da3e567cca8\",\n \"OpenAI 的「群聊」，可能比你想得更重要！\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653091558&idx=1&sn=8e1809717d9b4f160e57b442abdd47cd\",\n \"​「数字分身」白菜价：每月 998 元，雇一个 AI 帮你直播 8 小时\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653091558&idx=2&sn=035fc7bc2ad4985e04f37cca5118092a\",\n \"杨立昆宣布离开 Meta「自立门户」；荷兰暂停干预安世半导体；TikTok 将支持用户设置减少 AI 内容 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653091538&idx=1&sn=58092dc53b67658d27d250f639b3f3e9\"\n },\n \"安全分析与研究\": {\n \"捆绑友道词典银狐最新攻击样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494404&idx=1&sn=4eab56714dddb7bf9cf10bcf593d0761\"\n },\n \"情报分析师\": {\n \"开源情报（OSINT）的演变：人工智能时代的机遇与挑战\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650563298&idx=1&sn=30ed9324c2ee7004cc0b225243c1dc9c\",\n \"印度启用缪德诺马高原空军基地对我安全战略影响分析\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650563298&idx=2&sn=47e7548d6e8b980fc10a78d072cfea91\"\n },\n \"字节跳动安全中心\": {\n \"PatchEval 发布：一个比你更关心修复效果的 AI 漏洞自动修复评测基准\": \"https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495788&idx=1&sn=c0996b5d49e67f725e68f37dc9511ac9\"\n },\n \"补天平台\": {\n \"心动的橱窗秋冬上新！来get心动好物！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509772&idx=1&sn=4d6406694f5eca622d5d74254e8cb1db\"\n },\n \"数世咨询\": {\n \"价值图谱 | 网络准入产品核心能力介绍\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540899&idx=1&sn=f1b3a9c05b9694846f9d8ed674885658\"\n },\n \"美团技术团队\": {\n \"美团 LongCat Interaction 团队发布大模型交互系统技术报告 WOWService\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781734&idx=1&sn=cc848330c852f22c1cb6bde1fbc2147c\",\n \"美团首款 AI IDE 产品 CatPaw 开启公测 | 文末附邀请码\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781734&idx=2&sn=bea84cd8e7eefcdceab09abd8b685605\",\n \"抽奖赠书 | 从理论到落地，清华×美团出版教材，讲透即时配送\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781734&idx=3&sn=214cd9f12c1f178d074ee7ae5eb95e7d\"\n },\n \"嘶吼专业版\": {\n \"2025网络安全“金帽子”年度评选 | 投票通道开放中，敬请投票助力！\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585531&idx=1&sn=04607db0ee9dd112e7c6a97ba989bbc0\",\n \"Finger协议遭滥用 沦为 ClickFix 恶意软件攻击工具\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585531&idx=2&sn=00408b6c3d23eeb9f1108b6691095724\",\n \"公安部计算机信息系统安全产品质量监督检验中心检测发现40款违法违规收集使用个人信息的移动应用\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585531&idx=3&sn=dd9979c4b504fe7c3d094aeacf246fe2\"\n },\n \"安全圈\": {\n \"【安全圈】CISA 警告 Chrome V8 0-Day 被积极利用导致远程代码执行\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=1&sn=d86cbdc3bcd1c657ff0c80a9e915853a\",\n \"【安全圈】7-Zip 漏洞被证实遭到攻击利用\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=2&sn=988a91ea3270a54f52e42d08973b89fb\",\n \"【安全圈】Ollama 被曝模型解析漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=3&sn=5f9c47c03a34f8134402494b1cb87ca4\",\n \"【安全圈】三星医疗子公司疑遭第三方供应链泄露\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=4&sn=82cda6d303afabd58112903c25219fb5\"\n },\n \"360数字安全\": {\n \"国内首个！360开发SnowSoul勒索软件专用解密解决方案\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247583034&idx=1&sn=af283a5a8c3efe879ce9d97431a4ac09\"\n },\n \"微步在线研究响应中心\": {\n \"速修！FortiWeb无条件RCE利用链发现在野利用\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507976&idx=1&sn=6b5edb53f10e21451c6e14ae478b7268\"\n },\n \"Securityinfo.it\": {\n \"Sneaky2FA si evolve con una funzionalità Browser-in-the-Browser\": \"https://www.securityinfo.it/2025/11/20/sneaky2fa-si-evolve-con-una-funzionalita-browser-in-the-browser/?utm_source=rss&utm_medium=rss&utm_campaign=sneaky2fa-si-evolve-con-una-funzionalita-browser-in-the-browser\"\n },\n \"Have I Been Pwned latest breaches\": {\n \"International Kiteboarding Organization - 340,349 breached accounts\": \"https://haveibeenpwned.com/Breach/IKO\",\n \"Beckett Collectibles - 541,132 breached accounts\": \"https://haveibeenpwned.com/Breach/Beckett\",\n \"Eurofiber - 10,003 breached accounts\": \"https://haveibeenpwned.com/Breach/Eurofiber\",\n \"Vultr - 187,872 breached accounts\": \"https://haveibeenpwned.com/Breach/Vultr\"\n },\n \"ICT Security Magazine\": {\n \"Maritime cybersecurity: vulnerabilità dei sistemi navali, AIS spoofing e GPS spoofing\": \"https://www.ictsecuritymagazine.com/articoli/maritime-cybersecurity/\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"Oracle Identity Manager Exploit Observation from September (CVE-2025-61757), (Thu, Nov 20th)\": \"https://isc.sans.edu/diary/rss/32506\",\n \"ISC Stormcast For Thursday, November 20th, 2025 https://isc.sans.edu/podcastdetail/9708, (Thu, Nov 20th)\": \"https://isc.sans.edu/diary/rss/32504\"\n },\n \"京东安全应急响应中心\": {\n \"⌈京麒沙龙第18期⌋AI+移动安全专场，立即扫码，锁定你的线下专属席位！\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727850219&idx=1&sn=78ddddbb2874dac305041a00426377e6\"\n },\n \"NetSPI\": {\n \"Public Report: Android Quick Share Application Penetration Test\": \"https://www.netspi.com/blog/executive-blog/mobile-application-pentesting/google-quick-share-extension/\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"International Kiteboarding Organization - 340,349 breached accounts\": \"https://haveibeenpwned.com/Breach/IKO\",\n \"Salesforce cuts off access to third-party app after discovering ‘unusual activity’\": \"https://therecord.media/salesforce-cuts-off-access-to-third-party-unusual-activity\",\n \"Privacy oversight board finds FBI does not buy real-time location data\": \"https://therecord.media/pclob-finds-fbi-does-not-use-real-time-location-data\",\n \"Google exposes BadAudio malware used in APT24 espionage campaigns\": \"https://www.bleepingcomputer.com/news/security/google-exposes-badaudio-malware-used-in-apt24-espionage-campaigns/\",\n \"Salesforce says some of its customers’ data was accessed after Gainsight breach\": \"https://techcrunch.com/2025/11/20/salesforce-says-some-of-its-customers-data-was-accessed-after-gainsight-breach/\",\n \"Mozilla Says It’s Finally Done With Two-Faced Onerep\": \"https://krebsonsecurity.com/2025/11/mozilla-says-its-finally-done-with-two-faced-onerep/\",\n \"It’s not personal, it’s just business\": \"https://blog.talosintelligence.com/its-not-personal-its-just-business/\",\n \"Hacker claims to steal 2.3TB data from Italian rail group, Almavia\": \"https://www.bleepingcomputer.com/news/security/hacker-claims-to-steal-23tb-data-from-italian-rail-group-almavia/\",\n \"New Android malware can capture private messages, researchers warn\": \"https://therecord.media/new-android-malware-captures-private-messages\",\n \"FCC spikes Biden-era cyber regulations prompted by Salt Typhoon telecom breaches\": \"https://therecord.media/fcc-removes-biden-era-cybersecurity-rules-telecoms-salt-typhoon\",\n \"GlobalProtect VPN portals probed with 2.3 million scan sessions\": \"https://www.bleepingcomputer.com/news/security/globalprotect-vpn-portals-probed-with-23-million-scan-sessions/\",\n \"Salesforce investigates customer data theft via Gainsight breach\": \"https://www.bleepingcomputer.com/news/security/salesforce-investigates-customer-data-theft-via-gainsight-breach/\",\n \"WhatsApp by the Numbers: What Anonymized Metadata from a Security Flaw Reveals\": \"https://www.mobile-hacker.com/2025/11/20/whatsapp-by-the-numbers-what-anonymized-metadata-from-a-security-flaw-reveals/\",\n \"NSO seeks to overturn WhatsApp case, saying it is ‘catastrophic’ for the spyware maker\": \"https://therecord.media/nso-seeks-to-overturn-whatsapp-case\",\n \"New SonicWall SonicOS flaw allows hackers to crash firewalls\": \"https://www.bleepingcomputer.com/news/security/new-sonicwall-sonicos-flaw-allows-hackers-to-crash-firewalls/\",\n \"Russia blacklists S.T.A.L.K.E.R. game developer, accusing it of aiding Ukraine’s war effort\": \"https://therecord.media/russia-blacklists-stalker-game-developer\",\n \"D-Link warns of new RCE flaws in end-of-life DIR-878 routers\": \"https://www.bleepingcomputer.com/news/security/d-link-warns-of-new-rce-flaws-in-end-of-life-dir-878-routers/\",\n \"Turn your Windows 11 migration into a security opportunity\": \"https://www.bleepingcomputer.com/news/security/turn-your-windows-11-migration-into-a-security-opportunity/\",\n \"Samourai Wallet crypto mixer’s co-founders sentenced to prison\": \"https://therecord.media/samourai-wallet-crypto-mixer-founders-sentenced\",\n \"Attacco ransomware a Poltronesofà: il rischio è l’esposizione di dati personali\": \"https://www.cybersecurity360.it/news/ransomware-a-poltronesofa-il-rischio-e-lesposizione-di-dati-personali/\",\n \"Fuga di dati WhatsApp, perché è giusto preoccuparsi\": \"https://www.cybersecurity360.it/news/fuga-di-dati-whatsapp-perche-e-giusto-preoccuparsi/\",\n \"Fuga di dati Whatsapp, perché è giusto preoccuparsi\": \"https://www.cybersecurity360.it/nuove-minacce/fuga-di-dati-whatsapp-perche-e-giusto-preoccuparsi/\",\n \"TV streaming piracy service with 26M yearly visits shut down\": \"https://www.bleepingcomputer.com/news/security/tv-streaming-piracy-service-photocall-with-26m-yearly-visits-shut-down/\",\n \"Sneaky2FA si evolve con una funzionalità Browser-in-the-Browser\": \"https://www.securityinfo.it/2025/11/20/sneaky2fa-si-evolve-con-una-funzionalita-browser-in-the-browser/\",\n \"Trasferimento dati: il Consiglio d’Europa chiarisce le modalità per eventuali reclami\": \"https://www.cybersecurity360.it/news/trasferimento-dati-il-consiglio-deuropa-chiarisce-le-modalita-per-eventuali-reclami/\",\n \"Inside the dark web job market\": \"https://securelist.com/dark-web-job-market-2023-2025/118057/\",\n \"Crypto mixer founders sent to prison for laundering over $237 million\": \"https://www.bleepingcomputer.com/news/security/samourai-cryptomixer-founders-sent-to-prison-for-laundering-over-237-million/\",\n \"Detected in 60 Seconds: How to Identify Phishing with a Malware Sandbox\": \"https://any.run/cybersecurity-blog/60-seconds-phishing-analysis/\",\n \"Sturnus: Mobile Banking Malware bypassing WhatsApp, Telegram and Signal Encryption\": \"https://www.threatfabric.com/blogs/sturnus-banking-trojan-bypassing-whatsapp-telegram-and-signal\",\n \"Deepfake: il nuovo punto vulnerabile delle aziende è umano\": \"https://www.cybersecurity360.it/nuove-minacce/deepfake-il-nuovo-punto-vulnerabile-delle-aziende-e-umano/\",\n \"L’attacco alla rete elettrica svedese e l’ipotesi che si possa rimanere al buio\": \"https://www.cybersecurity360.it/news/rete-elettrica-svedese/\",\n \"OpenAI says its latest GPT-5.1 Codex can code independently for hours\": \"https://www.bleepingcomputer.com/news/artificial-intelligence/openai-says-its-latest-gpt-51-codex-can-code-independently-for-hours/\",\n \"Multi-threat Android malware Sturnus steals Signal, WhatsApp messages\": \"https://www.bleepingcomputer.com/news/security/multi-threat-android-malware-sturnus-steals-signal-whatsapp-messages/\",\n \"Blockchain and Node.js abused by Tsundere: an emerging botnet\": \"https://securelist.com/tsundere-node-js-botnet-uses-ethereum-blockchain/117979/\",\n \"DetectionStream Just Got a Major Upgrade: Suricata Integration is Here!\": \"https://kostas-ts.medium.com/detectionstream-just-got-a-major-upgrade-suricata-integration-is-here-96ea5caf635c\",\n \"Beckett Collectibles - 541,132 breached accounts\": \"https://haveibeenpwned.com/Breach/Beckett\",\n \"A Beginner’s Guide to the CVE Database\": \"https://blog.sucuri.net/2025/11/a-beginners-guide-to-the-cve-database.html\",\n \"Eurofiber - 10,003 breached accounts\": \"https://haveibeenpwned.com/Breach/Eurofiber\",\n \"Endgame for Rhadamanthys (temporarily)\": \"https://catchingphish.com/posts/f/endgame-for-rhadamanthys-temporarily\"\n },\n \"The Hacker News\": {\n \"ShadowRay 2.0 Exploits Unpatched Ray Flaw to Build Self-Spreading GPU Cryptomining Botnet\": \"https://thehackernews.com/2025/11/shadowray-20-exploits-unpatched-ray.html\",\n \"Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows\": \"https://thehackernews.com/2025/11/tsundere-botnet-expands-using-game.html\",\n \"ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware Waves\": \"https://thehackernews.com/2025/11/threatsday-bulletin-0-days-linkedin.html\",\n \"CTM360 Exposes a Global WhatsApp Hijacking Campaign: HackOnChat\": \"https://thehackernews.com/2025/11/ctm360-exposes-global-whatsapp.html\",\n \"New Sturnus Android Trojan Quietly Captures Encrypted Chats and Hijacks Devices\": \"https://thehackernews.com/2025/11/new-sturnus-android-trojan-quietly.html\",\n \"Iran-Linked Hackers Mapped Ship AIS Data Days Before Real-World Missile Strike Attempt\": \"https://thehackernews.com/2025/11/iran-linked-hackers-mapped-ship-ais.html\",\n \"TamperedChef Malware Spreads via Fake Software Installers in Ongoing Global Campaign\": \"https://thehackernews.com/2025/11/tamperedchef-malware-spreads-via-fake.html\"\n },\n \"Krebs on Security\": {\n \"Mozilla Says It’s Finally Done With Two-Faced Onerep\": \"https://krebsonsecurity.com/2025/11/mozilla-says-its-finally-done-with-two-faced-onerep/\"\n },\n \"Daniel Miessler\": {\n \"Leave the em dash Alone\": \"https://danielmiessler.com/blog/leave-the-em-dash-alone?utm_source=rss&utm_medium=feed&utm_campaign=website\"\n },\n \"迪哥讲事\": {\n \"实战几个比较有意思的SQL注入\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498609&idx=1&sn=8376dccf873d344af914b2a85ce388a6\"\n },\n \"Schneier on Security\": {\n \"Scam USPS and E-Z Pass Texts and Websites\": \"https://www.schneier.com/blog/archives/2025/11/scam-usps-and-e-z-pass-texts-and-websites.html\"\n },\n \"白帽子章华鹏\": {\n \"链接一批优质的安全岗位及安全人才｜11月20日更新\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650238161&idx=1&sn=302f6917522df526eb3c4afd7a30186e\"\n },\n \"BorderGate\": {\n \"Blocking EDR Traffic\": \"https://www.bordergate.co.uk/blocking-edr-traffic/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Give Me Liberty or Linux, Badge Hacking Interview - Bryce Owen - PSW #901\": \"http://sites.libsyn.com/18678/give-me-liberty-or-linux-badge-hacking-interview-bryce-owen-psw-901\"\n },\n \"Graham Cluley\": {\n \"UK’s new cybersecurity bill takes aim at ransomware gangs and state-backed hackers\": \"https://www.fortra.com/blog/uks-new-cybersecurity-bill-takes-aim-ransomware-gangs-state-backed-hackers\",\n \"Wind farm worker sentenced after turning turbines into a secret crypto mine\": \"https://www.bitdefender.com/en-us/blog/hotforsecurity/wind-farm-worker-sentenced-after-turning-turbines-into-a-secret-crypto-mine\",\n \"Smashing Security podcast #444: We’re sorry. Wait, did a company actually say that?\": \"https://grahamcluley.com/smashing-security-podcast-444/\"\n },\n \"Security Affairs\": {\n \"Researchers devised a new enumeration technique that exposed 3.5B WhatsApp profiles\": \"https://securityaffairs.com/184886/mobile-2/researchers-devised-a-new-enumeration-technique-that-exposed-3-5b-whatsapp-profiles.html\",\n \"Sturnus: New Android banking trojan targets WhatsApp, Telegram, and Signal\": \"https://securityaffairs.com/184878/cyber-crime/sturnus-new-android-banking-trojan-targets-whatsapp-telegram-and-signal.html\",\n \"Coordinated sanctions hit Russian bulletproof hosting providers enabling top ransomware Ops\": \"https://securityaffairs.com/184871/cyber-crime/coordinated-sanctions-hit-russian-bulletproof-hosting-providers-enabling-top-ransomware-ops.html\",\n \"Cyber-enabled kinetic targeting: Iran-linked actor uses cyber operations to support physical attacks\": \"https://securityaffairs.com/184862/apt/cyber-enabled-kinetic-targeting-iran-linked-actor-uses-cyber-operations-to-support-physical-attacks.html\"\n },\n \"Deeplinks\": {\n \"How Cops Are Using Flock Safety's ALPR Network to Surveil Protesters and Activists\": \"https://www.eff.org/deeplinks/2025/11/how-cops-are-using-flock-safetys-alpr-network-surveil-protesters-and-activists\",\n \"The Trump Administration’s Order on AI Is Deeply Misguided\": \"https://www.eff.org/deeplinks/2025/11/trump-administrations-order-ai-deeply-misguided\",\n \"EFF Demands Answers About ICE-Spotting App Takedowns\": \"https://www.eff.org/press/releases/eff-demands-answers-about-ice-spotting-app-takedowns\"\n }\n}"}, "6ce5738fd557f7e2f2482cfb8f06b85b37fd0938": {"t": 1785772249.0873976, "n": 55742, "h": "464dfbeaff962e6a", "c": "{\n \"Recent Commits to cve:main\": {\n \"Update Thu Nov 20 11:38:16 UTC 2025\": \"https://github.com/trickest/cve/commit/841a45bfc430b1eebf7ae820336942c435c96ff9\"\n },\n \"Google Online Security Blog\": {\n \"Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing\": \"http://security.googleblog.com/2025/11/android-quick-share-support-for-airdrop-security.html\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2025-11-20 Review\": \"http://www.sec-wiki.com/?2025-11-20\"\n },\n \"Tenable Blog\": {\n \"Protecting Your Cloud Data: How Tenable Cloud Security Guards Your Most Valuable Assets in the Cloud\": \"https://www.tenable.com/blog/cloud-data-security-dspm-aispm-cnapp-tenable-cloud-security\",\n \"Stop Patching Panic: Ditch Slow Manual Patching and Embrace Intelligent Automation\": \"https://www.tenable.com/blog/why-do-patches-break-things-and-how-can-we-reduce-that-risk\"\n },\n \"obaby@mars\": {\n \"送别\": \"https://h4ck.org.cn/2025/11/22016\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"获奖名单公布！近3000人，1000支队伍参与第十一届“美亚杯”角逐\": \"https://www.4hou.com/posts/LG3W\",\n \"2025网络安全“金帽子”年度评选 | 投票通道开放中，敬请投票助力！\": \"https://www.4hou.com/posts/KG3z\"\n },\n \"Filippo Valsorda\": {\n \"The 2025 Go Cryptography State of the Union\": \"https://words.filippo.io/2025-state/\"\n },\n \"Sucuri Blog\": {\n \"A Beginner’s Guide to the CVE Database\": \"https://blog.sucuri.net/2025/11/a-beginners-guide-to-the-cve-database.html\"\n },\n \"paper - Last paper\": {\n \"BadThink：针对大型语言模型思维链推理的触发式过度思考攻击\": \"https://paper.seebug.org/3415/\",\n \"无 gadgets 也能翻盘：ret2gets 能否成为核武器？\": \"https://paper.seebug.org/3414/\"\n },\n \"Cerbero Blog\": {\n \"InnoSetup Format Package 3.0\": \"https://blog.cerbero.io/innosetup-format-package-3-0/\"\n },\n \"Doonsec's feed\": {\n \"APT跟踪 热门攻击事件 国家黑客\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDg5ODQxMg==&mid=2247483791&idx=1&sn=07f0f46633ace5b06db2f80e68bf8826\",\n \"论文研读与思考|PENTESTGPT：评估和利用大型语言模型进行自动渗透测试\": \"https://mp.weixin.qq.com/s?__biz=MzU4NjcxMTY3Mg==&mid=2247489147&idx=1&sn=4de2adccbcdecd928a83135ded19acae\",\n \"论文研读与思考|ChatAFL:大语言模型引导的协议模糊测试\": \"https://mp.weixin.qq.com/s?__biz=MzU4NjcxMTY3Mg==&mid=2247489147&idx=2&sn=8650082601bf0199fbd223e6573c916b\",\n \"条件竞争导致的RCE\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDM1NjY4Mw==&mid=2247483775&idx=1&sn=3bcc6d0273d6c7ec4d47b651c90993f3\",\n \"【AI安全】结构化防御提示词注入攻击\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzU2NDgxNQ==&mid=2247484087&idx=1&sn=51a4b18f2235ec6aa1d65250e8dc7cf5\",\n \"每日一问：有人要办比赛吗？\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTQzNTQzMQ==&mid=2247486084&idx=1&sn=8aa58dbbf2dd623828de144eb214db03\",\n \"某互联网金融平台遭DDoS攻击事件详情与分析\": \"https://mp.weixin.qq.com/s?__biz=MzUzMDgwMjY1Mg==&mid=2247485906&idx=1&sn=6729ed986dafc7997a8a7cba62955803\",\n \"全国“一站式”等保合规，破解企业安全落地难题\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTIxNzg0Ng==&mid=2247488359&idx=1&sn=316f13ed951954f61d3c49d5a65bf2c2\",\n \"免费分享 | HTB第9赛季最新靶机Eighteen解法分享\": \"https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247485420&idx=1&sn=303d22a50b61485e4c44c28bddf120d9\",\n \"数智转型 共启新程|金盾信安深度参与数智化成熟度及数智化转型使能咨询服务机构研讨会\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448691208&idx=1&sn=f17dc2ddf2ac3c8c2da9eec913729da7\",\n \"自然资源部发布《卫星导航定位基准站管理办法》\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448691208&idx=2&sn=2bd32734c3262a9bfcca07d7ea3413cd\",\n \"一图读懂《卫星导航定位基准站管理办法》\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448691208&idx=3&sn=a2d45042d8c0f5f46eabe964a650496b\",\n \"小程序抓包解包详解\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDQxODk4NQ==&mid=2247484458&idx=1&sn=a5b9aeb0f1e2f85ee40e28cdf702505a\",\n \"记某国外大学网络安全作业及课件\": \"https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247487107&idx=1&sn=37575d927d606625bcb604ccef032f89\",\n \"docker逃逸\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDQ2ODU4NQ==&mid=2247483909&idx=1&sn=4d4a27f176b5ce8006e0673ca4c836c0\",\n \"BTC中所使用的密码学原理\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MzUwNDEzNg==&mid=2247484672&idx=1&sn=1c41b4e359e24ba757dd6217f6d93f09\",\n \"【JS逆向】0基础一文入门JS逆向\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247521422&idx=1&sn=a9ee6dab77adb8ea45b96fb8c00643f7\",\n \"活该你能挖到洞\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247521422&idx=2&sn=a59010dbebbd31dde6dd1ad4099198a3\",\n \"网安工具箱天花板！有这一个就够了\": \"https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485915&idx=1&sn=2901f1a567c5d849050c8391489d8bff\",\n \"团队赛高分密码公开！取证云平台上架第十一届美亚杯团体赛参考题解\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651448233&idx=1&sn=6550c1297ef0f7def9a0e416c592617f\",\n \"【连载】红蓝对抗-攻防演练-WEB安全渗透测试：XXE-XML实体注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484909&idx=1&sn=1076dd71abe896baf07402348c189630\",\n \"多层隐匿载荷解密与驱动级致盲对抗手法分析丨游蛇（银狐）技战术追踪\": \"https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650213148&idx=1&sn=c34648624bb2cce8fdc90630520e1233\",\n \"重要通知丨第九届“强网杯”漏洞智能分析赛道决赛入围名单公布\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MjY3NDQ2Ng==&mid=2247488438&idx=1&sn=e2c046be327b9ae0c5cffc891a87e45a\",\n \"神州希望协助昌江黎族自治县科学技术和工业信息化局开展网络安全应急演练\": \"https://mp.weixin.qq.com/s?__biz=MzA4Mzg1ODMwMg==&mid=2650726186&idx=1&sn=90ef26c19cda97be711c78305eed8196\",\n \"让搜索更“懂你”：快手自研UniDex与UniSearch实现新一代工业级搜索\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NzU4MDM0MQ==&mid=2247498365&idx=1&sn=de0a2684938a655c9faea1313b0bba5f\",\n \"比 App Store 还省心的一键更新工具，要停止服务了？\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492770&idx=1&sn=e52d75a2da371390db293aec3f5b75a3\",\n \"美团 LongCat Interaction 团队发布大模型交互系统技术报告 WOWService\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781734&idx=1&sn=cc848330c852f22c1cb6bde1fbc2147c\",\n \"美团首款 AI IDE 产品 CatPaw 开启公测 | 文末附邀请码\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781734&idx=2&sn=bea84cd8e7eefcdceab09abd8b685605\",\n \"抽奖赠书 | 从理论到落地，清华×美团出版教材，讲透即时配送\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781734&idx=3&sn=214cd9f12c1f178d074ee7ae5eb95e7d\",\n \"信息安全团队责任分工的精细化管理：从混乱到高效的组织变革\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247488037&idx=1&sn=0f457f41f9041ff3362ac438555081be\",\n \"7-Zip曝高危RCE漏洞（CVE-2025-11001）\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096658&idx=1&sn=8a5eab9c867402d27970098dbc644768\",\n \"FortiWeb曝高危命令注入漏洞（CVE-2025-58034）\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096658&idx=2&sn=56298d867873c5d74d35b1d04625675f\",\n \"行政拘留和刑事拘留的区别\": \"https://mp.weixin.qq.com/s?__biz=MzYzMjE2NDk4Mg==&mid=2247483875&idx=1&sn=7bd79ad562e8e1b1d0436a6fd7fed6b8\",\n \"欢迎订阅2026年度《中国网信》杂志！\": \"https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649403426&idx=1&sn=5cb136192cea0f3a6b0ccc797bc8710a\",\n \"【活动】LPSRC 翻倍活动开启！！最高三倍积分！！！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MjY0MTEzMQ==&mid=2247483874&idx=1&sn=2924bf49cf0b4ac1649be55e8f5023d1\",\n \"学术年会 | 2025年网络空间安全学术会议通知（第二轮）\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247506206&idx=1&sn=f13a7a43c115c86e4c25a75d8e3b28ce\",\n \"长安银行以赛促用，全员发力推动AI大模型应用落地\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932950&idx=1&sn=1f613871756d23211af8c33e10e087e7\",\n \"AI快讯：央行将降低AI金融应用门槛，浙商银行与阿里达成AI合作\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932950&idx=2&sn=f0edbfeafc84ac4b0b179048807f398d\",\n \"60万！北京银行2025年智能合规管理平台（AI合规制度重检与合规出题）项目\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932950&idx=3&sn=b84176d0b8f4a030f82411c0cc387cbb\",\n \"怀新投资中，通联数据、深擎信息、同花顺候选！华西证券投顾AI教练：诊股诊基智能体建设项目\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932950&idx=4&sn=8ea103867a3c5c93870d3538cc603a0a\",\n \"照这样挖洞，小白不出洞来找我\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330685&idx=2&sn=341469dabfde30fa45249e50e29ca992\",\n \"G.O.S.S.I.P 特别推荐 2025-11-20 贯通计算机系统！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501002&idx=1&sn=5d302912b9092f7231df8c23dfe0e6e3\",\n \"银狐组织最新ValleyRAT样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDUzNDExMQ==&mid=2247485978&idx=1&sn=f04fddd9394f0e12096595a57ae57178\",\n \"【安全圈】CISA 警告 Chrome V8 0-Day 被积极利用导致远程代码执行\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=1&sn=d86cbdc3bcd1c657ff0c80a9e915853a\",\n \"【安全圈】7-Zip 漏洞被证实遭到攻击利用\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=2&sn=988a91ea3270a54f52e42d08973b89fb\",\n \"【安全圈】Ollama 被曝模型解析漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=3&sn=5f9c47c03a34f8134402494b1cb87ca4\",\n \"【安全圈】三星医疗子公司疑遭第三方供应链泄露\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=4&sn=82cda6d303afabd58112903c25219fb5\",\n \"国内外科技人才共享案例对比及启示\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622145&idx=1&sn=941cde37021dcd5e73e80c6bdf29aa7a\",\n \"德国发布首个《太空安全战略》，将太空领域系统纳入国防规划\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622145&idx=2&sn=2cd0bb72962ae3a346f42c0ccc1771c8\",\n \"11 宇宙的十二种假说：人择原理\": \"https://mp.weixin.qq.com/s?__biz=Mzk5MDgzMDExMg==&mid=2247484626&idx=1&sn=c5c9481a3291c10265fb7727f898974e\",\n \"分享的图片、视频、链接\": \"https://mp.weixin.qq.com/s?__biz=MzU0MTA3OTU5Ng==&mid=2247570019&idx=1&sn=7d1b9b8df3cbde7f25499118f02d4906\",\n \"重要认证 | 恒安嘉新荣获全国首家智能体安全数据集认证评价\": \"https://mp.weixin.qq.com/s?__biz=MzIwMTUzNDY0NA==&mid=2649119899&idx=1&sn=a71a4e76661ec2476c8cc892323a34fc\",\n \"喜报 | 恒安嘉新联合项目荣获2025年中国通信学会科学技术奖一等奖\": \"https://mp.weixin.qq.com/s?__biz=MzIwMTUzNDY0NA==&mid=2649119899&idx=2&sn=bfca320361b9bc158fedc559cae72bfc\",\n \"企业动态 | 恒安嘉新斩获2025年第一届黑灰产检测技能大赛多个奖项\": \"https://mp.weixin.qq.com/s?__biz=MzIwMTUzNDY0NA==&mid=2649119899&idx=3&sn=815b075ab9b4edb0d8d1176347106de8\",\n \"企业动态 | 恒安嘉新出席中国-东盟数据安全产业创新论坛\": \"https://mp.weixin.qq.com/s?__biz=MzIwMTUzNDY0NA==&mid=2649119899&idx=4&sn=1c6d1fd1cd629937b0684f3899a33a7b\",\n \"实战化培训筑牢数字安全防线！虎符网络赋能杭州西站枢纽\": \"https://mp.weixin.qq.com/s?__biz=MzUxODY3MDExMA==&mid=2247490494&idx=1&sn=2333556fe5e3ba0ac0098ca29fa79845\",\n \"全球多个AI集群遭AI恶意软件劫持，被改造成挖矿僵尸网络\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515231&idx=1&sn=8df5f094bc50a13545c25a50d79af141\",\n \"亚马逊警告称“网络赋能的动能打击”正在走进现代战争\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515231&idx=2&sn=7a1e00d3a3a3977796f691ed4176498d\",\n \"从注入到Shell：记一次绕过WAF过滤的十六进制上传木马实战\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797408&idx=1&sn=009a7c33eba7c301ef63af6f70049133\",\n \"17位CISO的书单：网安人提升综合能力的必读经典\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247647058&idx=1&sn=e0abd4453832d8cbb902157b20ed8901\",\n \"违法违规收集使用个人信息 这40款移动应用被通报\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247647058&idx=2&sn=246c6be10e703e5c86ba54f455c8adfe\",\n \"免费赠送 | 青少年安全意识科普素材（第三期）\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247647058&idx=3&sn=8d1d426012a9a0dbd2b1bd13bb4c58a6\",\n \"Fortinet警告FortiWeb新漏洞（CVE-2025-58034）已被野外利用\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330685&idx=1&sn=2dd634c0df98b743e578697b13c40b6f\",\n \"欧盟拟修订《通用数据保护条例》和《人工智能法案》以简化监管\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330685&idx=3&sn=c89af185ca33b0f2792b2c3f06abf9f3\",\n \"点击一次渗透42天：Akira勒索软件利用CAPTCHA诱饵摧毁云备份致存储公司瘫痪\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330685&idx=4&sn=15d272142ae04c0e467a8087cf0f6576\",\n \"【培训通知】关于组织开展“数智化转型管理师（DTM）”培训的通知\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649255938&idx=1&sn=69f74644a9b8d384ed5ee779e02f18e7\",\n \"【培训通知】关于组织开展“数智化转型咨询师（DTC）”培训的通知\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649255938&idx=2&sn=a014778cabf25e891dcf0bc77109c0c2\",\n \"ISC2供应链风险调查报告：70%受访者高度关注供应链风险\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247493368&idx=1&sn=8ca845f9bba9a152a1651f57aae38243\",\n \"推荐等级最高级！华为防火墙通过武汉云黄鹤实验室首批安全公测评级\": \"https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247506651&idx=1&sn=ad0a648d4e9b64eebf89a443486a1714\",\n \"渊亭中标信息技术中试平台项目，打造AI落地“安全试验场”\": \"https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660192925&idx=1&sn=8555a436fd772e01cca9038c09277306\",\n \"打造AI+安全标杆，奇安信AISOC中标某市电子政务项目\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629839&idx=1&sn=e18d10974fbeaca945de07a58cb02c05\",\n \"北京网神洞鉴入选“中青年骨干司法鉴定人才库”\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629839&idx=2&sn=46d086a510eb1c6772a7d18d83dfa5b3\",\n \"行业 | 激活流量数据价值，CSNAS V17开启共享、可控新纪元\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=1&sn=1dad61aef89efd0fea492c6621ad7c35\",\n \"专家解读 | 规范电子印章应用管理 构筑数字信任坚实基础\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=2&sn=f9e6aaa7fb139378ec7825027e78e057\",\n \"关注 | 最高法发布涉未成年人网络保护与违法犯罪惩处典型案例\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=3&sn=2732bf245820d7065ff95d70bf25c7a6\",\n \"观点 | 给未成年人使用生成式人工智能装上“法治护栏”\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=4&sn=df8961710185c25554ebaa6220d26b47\",\n \"【漏洞通告】Fortinet FortiWeb身份验证绕过与命令注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489417&idx=1&sn=08bf5aa3fb48b70cdd6a884ad30b4659\",\n \"信息安全：对称加密与非对称加密算法原理详解\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247562823&idx=1&sn=396962b1f313b3aa845b91adc782fb40\",\n \"原创 | 万字深度解读：TEE技术如何成为全球智能汽车安全的合规基石\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247562823&idx=2&sn=bd03edacefdd234e6ea71f7aadeb88f0\",\n \"网警护航“公考季” | 着急想上岸？网警提醒你注意！\": \"https://mp.weixin.qq.com/s?__biz=MzA4NTk5NzgxOA==&mid=2657569197&idx=1&sn=22efb54a4d930032db3d15702fb5ad2e\",\n \"国内首个！360开发SnowSoul勒索软件专用解密解决方案\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247583034&idx=1&sn=af283a5a8c3efe879ce9d97431a4ac09\",\n \"小红书推出通用推理智能体 DeepAgent：工具&任务随心配！\": \"https://mp.weixin.qq.com/s?__biz=Mzg4OTc2MzczNg==&mid=2247494045&idx=1&sn=a988f6a2338318e1ff4633f3a03daa00\",\n \"创宇安全智脑通用安全能力升级通告（20251120）\": \"https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247492428&idx=1&sn=0532b6bbb8577c0441373f1f40c4f43d\",\n \"信安世纪联合海光信息成立AI密算联合实验室，以“密码+算力”融合夯实AI安全底座\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650665678&idx=1&sn=8f816c2600afab8b448a424c16c8ed8c\",\n \"餐饮不止关注食品安全，老乡鸡3步搭起“全域安全壁垒”，守护千万消费者权益\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247528558&idx=2&sn=4f54e5e32c1f34f899462c8f94f6f022\",\n \"一公司因未处置高危漏洞被黑客攻击篡改，公安机关依法处罚\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247493295&idx=1&sn=94d6e1334ca0b946028d766480e82648\",\n \"X402 如何让 AI 代理具备 KYA/KYT 能力？BlockSec 完整解析\": \"https://mp.weixin.qq.com/s?__biz=MzkyMzI2NzIyMw==&mid=2247490308&idx=1&sn=9c721294d53af9071b9912d5bbb49fcc\",\n \"SDC2025 议题回顾 | SCPGA：自认同CoT渐进式泛化攻击\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604411&idx=1&sn=c9c3d5f23ce7da8357d9fe24b9dc9e30\",\n \"华硕路由器遭大规模黑客攻击，超5万台设备被窃密操控\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604411&idx=2&sn=e1c465c37e801bfde89a6decf640dce1\",\n \"代码审计无从下手？四阶段实战教学，带你从入门到精通\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604411&idx=3&sn=b355152f50e954a71ee190e6438d7f89\",\n \"启明星辰隐私盾：四重防护，安心发“声”\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651734942&idx=1&sn=70d6aca06c7229989541112c1ea30c4a\",\n \"CISA要求政府机构在7天内修复这个 Fortinet 新0day\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524465&idx=1&sn=cf210939b4c44de97b60529383818aaa\",\n \"用AI攻击AI：Ray AI开源框架中的老旧漏洞被用于攻击集群\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524465&idx=2&sn=41ec03ab3c0572c4ecc61e20dcd8fdb6\",\n \"【中日甲午战争】第三回：东学党燃起烈火，金玉均魂断沪上\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MzgwMDE2Mw==&mid=2247488389&idx=1&sn=6808db9e5e541733a980c3b7aac36057\",\n \"【高危漏洞预警】Fortinet FortiWeb命令注入漏洞CVE-2025-58034\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491020&idx=1&sn=a327b53864674a3f633b52a9f73593e1\",\n \"安全圈最大的谎言：联动！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650626235&idx=1&sn=d56f0c7d35db122b7dcf3b073a1dadfe\",\n \"前沿 | 我国网络安全基本制度的建立与实施\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247501619&idx=1&sn=e1dbaaebea9d05ce1f5de2677dc6148c\",\n \"一图读懂GB/T 22080-2025《网络安全技术 信息安全管理体系 要求》\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247501619&idx=2&sn=0df402240ccbe800d9e8c4dbae883fe0\",\n \"安信天行云网端一体化综合运营解决方案\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzMxMTMyMA==&mid=2648571463&idx=1&sn=d01b03d6910e375bd1f64932efdc2464\",\n \"0v0.pro , 话不多说，周免gpt-5 , gemini-3-pro , grok-4.1\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MDk3NDE2Mw==&mid=2247484041&idx=1&sn=755b0db3b94f3110bf82555410f39352\",\n \"【论文速读】| 面向自主高效的网络安全：一种基于多目标自动化机器学习的入侵检测系统\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247497377&idx=1&sn=0119bd3570b401e1bc989d046abf08f2\",\n \"一次有点抽象的渗透\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556791&idx=1&sn=39318351e4418a5aa69c3fdc68079b6d\",\n \"【免费领】渗透测试必备工具：Nmap实战技术全解教程\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556791&idx=2&sn=1bf0c88e682dd55dafea3f2e885a0578\",\n \"你的员工正在把核心机密“喂”给AI？警惕大模型应用背后的“三大隐形杀手”\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649872881&idx=1&sn=42914cd33fa7a0cf4eb3e379640384cc\",\n \"2025年10月考试成绩\": \"https://mp.weixin.qq.com/s?__biz=MzI4MzA0ODUwNw==&mid=2247487287&idx=1&sn=8dba4db6f6c9b81208fd49dd1c31b88c\",\n \"体育赋能 安全添彩｜观安信息深度参与2025新金环上海Top Run 10公里精英赛\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247509917&idx=1&sn=7e20c62d6be748be9569421940b4a32e\",\n \"首发|天地伟业Easy7 存在信息泄露漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485224&idx=1&sn=12dab424ccfe7fab9086a9ce9e308175\",\n \"认知空间测绘概念及技术\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247602328&idx=1&sn=2003f6deec3f7bf66d56e431b50f037c\",\n \"超级计算机实现量子微芯片高精度模拟\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247602328&idx=2&sn=65592c8b10b4117c6bcbb16b2ce65da0\",\n \"人工智能时代健全网络安全治理体系研究\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175112&idx=1&sn=f5e0fb86fc19884094a727ec8763c83c\",\n \"具身智能的 “阿喀琉斯之踵”，我们如何与脆弱的钢铁之躯共存？\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651136479&idx=1&sn=c7c2309b3e65011c6802f5c43cec217b\",\n \"【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告（1026-1108）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651136479&idx=2&sn=2d18d0d67d888d122884e7191613e785\",\n \"Oracle数据库迁移到GaussDB\": \"https://mp.weixin.qq.com/s?__biz=MzE5MTQzMzg5MA==&mid=2247484233&idx=1&sn=e303678589ff4001071c899a422faf38\",\n \"攻防领域开班计划（2025年12月）\": \"https://mp.weixin.qq.com/s?__biz=MzI4MzA0ODUwNw==&mid=2247487282&idx=1&sn=47aedfa62d1455a6dd63b4cc9a4a763e\",\n \"信安从业者为什么要考CISP？\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247525782&idx=1&sn=efcaaee8313ef87fb32af896af4fa0da\",\n \"全面资产收集流程及方法解析 万字长文窥探信息收集|挖洞技巧\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247575748&idx=1&sn=5c1347b03806a08205468233db3a262e\",\n \"【资源贴】华为大佬安全学习笔记曝光，太牛了！\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247575748&idx=2&sn=68608c880da499adbf47c27e5cdb9569\",\n \"双第一！阿里云领跑安全运营智能体\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTQ2MjI5OA==&mid=2664093433&idx=1&sn=63c54ca877f46addf5def7467b30dbbd\",\n \"【格物刊】技术速递已上新！前沿取证技术刊物第十一期上线啦！\": \"https://mp.weixin.qq.com/s?__biz=MzI5NzkxMTIzOQ==&mid=2247494064&idx=1&sn=bb559b9a7da75f8ae3a91ded7875a459\",\n \"绕过JWT签名导致的越权漏洞-玄域靶场实操演示\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NTYwNzY3NQ==&mid=2247483982&idx=1&sn=ab2afe14cd00bc2cb011307420528611\",\n \"Cloudflare全球故障导致互联网瘫痪，多家主流平台服务中断\": \"https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247525107&idx=1&sn=f49b53bde40e920c0ecebd99f7b896f2\",\n \"国家安全部｜你的设备还在“保质期”吗？\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247489049&idx=1&sn=a94efb164ea37a23fd05e80cc91d9222\",\n \"JeecgBoot3.5.0版SQL注入漏洞详细分析记录\": \"https://mp.weixin.qq.com/s?__biz=MzI4MjI2NDI1Ng==&mid=2247485392&idx=1&sn=1b412936be907f33772f9eaf91abdc2c\",\n \"天融信助力某造船厂筑牢网络安全防线，合规护航远洋航行\": \"https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650980356&idx=1&sn=958318cfe0229521fc4685a2d0eea0a5\",\n \"八年积淀再升级！《2025网信自主创新调研报告》编写工作正式启动\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzI3MzMwMQ==&mid=2247531743&idx=1&sn=3cc47689a2d234b9a4bb3666af2f1209\",\n \"飞天诚信F55安全支付终端通过PCI 7.0认证\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649877614&idx=1&sn=c9a4a6ff6656e58dd00120e0ccfea3d7\",\n \"零零信安五张优惠卷免费送\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490985&idx=1&sn=95bd848ef4905b4b27c4236eb89483b0\",\n \"安全简讯（2025.11.20）\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501805&idx=1&sn=4b124935c5c6c36ef439869ea5ab4d44\",\n \"【漏洞通告】FortiWeb API 与 CLI 多处命令注入漏洞(CVE-2025-58034)\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501805&idx=2&sn=8347174d02f34aa53010eee073b57c68\",\n \"车联网靶场的破局与跃迁：提升主动实战能力和助力T型人才培养\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139385&idx=1&sn=23d719a241135a08a4b401ccf0a007b2\",\n \"三分钟，走完网安售前的一生\": \"https://mp.weixin.qq.com/s?__biz=MzU3NDY0NDAxMw==&mid=2247485055&idx=1&sn=7673c9f7fc7fba7568f518446565c4bd\",\n \"心动的橱窗秋冬上新！来get心动好物！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509772&idx=1&sn=4d6406694f5eca622d5d74254e8cb1db\",\n \"AI破局安全痛点：国舜受邀参加中国工程院青年学者沙龙并斩获殊荣\": \"https://mp.weixin.qq.com/s?__biz=MzA3NjU5MTIxMg==&mid=2650575882&idx=1&sn=b8fe09b35b1701781095193b57e4a20d\",\n \"RocketMQ 命令执行漏洞复现分析\": \"https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247490894&idx=1&sn=3e063f33eb915ebd6eca714cedf93a02\",\n \"GJB 141能力验证相关资料\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzUyNjU5Mg==&mid=2247486199&idx=1&sn=2c207c6949bd7a437fd4167e05d2323d\",\n \"SonarQube选型采购指南\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzUyNjU5Mg==&mid=2247486199&idx=2&sn=56ee7735ceb151d7f2c0e7c519971b15\",\n \"刚想休息！一夜破掉13个国家防火墙，并调出7个国家系统源码。\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODY3NDYxNA==&mid=2247486633&idx=1&sn=e814866462e54511fcd76fca2983504c\",\n \"网易易盾受邀参与中国信通院政务大模型安全标准制定，共建国家级安全护栏体系\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTg2NjYxOA==&mid=2650744415&idx=1&sn=9ee70031c582108ef38f075bf4020dce\",\n \"不是，这也有Callback？\": \"https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247487422&idx=1&sn=312c992a2c45f0ed374ea212ddf4cbb7\",\n \"没想到这家网安公司就这么陨落了！\": \"https://mp.weixin.qq.com/s?__biz=MzkzMDY3ODg5MQ==&mid=2247484292&idx=1&sn=dc1535ef0b51383452727b28938aa6bd\",\n \"价值图谱 | 网络准入产品核心能力介绍\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540899&idx=1&sn=f1b3a9c05b9694846f9d8ed674885658\",\n \"干货 | 从 T+1 到分钟级：携程基于 Flink 与 Paimon 的近实时湖仓建设实践\": \"https://mp.weixin.qq.com/s?__biz=MjM5MDI3MjA5MQ==&mid=2697276987&idx=1&sn=3ef92987369d03bc0b2b01a496e28a05\",\n \"越南网络司令部（86司令部）扩张及其对我影响\": \"https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247512360&idx=1&sn=9f11d379018914dfa71d67c00bf36537\",\n \"高危runC漏洞曝光 黑客可突破Docker容器逃逸\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247543288&idx=1&sn=84f03402334a772c9736b9081094fd65\",\n \"Chrome修复2025年第七个0day漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489284&idx=1&sn=2641d7dedd9ae76df2352937b61e07f6\",\n \"智绘可信AI新图景，共筑网络安全新未来——第五届网络空间内生安全学术大会报名通道正式开启\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247534802&idx=1&sn=2cc7c6ed7d89e0beb98959de39b04119\",\n \"开源情报（OSINT）的演变：人工智能时代的机遇与挑战\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650563298&idx=1&sn=30ed9324c2ee7004cc0b225243c1dc9c\",\n \"印度启用缪德诺马高原空军基地对我安全战略影响分析\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650563298&idx=2&sn=47e7548d6e8b980fc10a78d072cfea91\",\n \"CDG之敏感文件外发安全： 敏感文件外发怕泄密？ 这套技术直接锁死风险！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MjE0OTQzMw==&mid=2666307486&idx=1&sn=839a584989863b4c0d7e40aaa63480c5\",\n \"行业资讯：任子行 财务总监换人 钟海川离任 沈智杰接任\": \"https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247496063&idx=1&sn=76b1225dfeec0e016832493f38906ccb\",\n \"燃情落幕！2025年网络安全 & 数据安全竞赛幕后纪实 ——xa0以赛铸盾，共筑数字安全防线\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTUyNjkwNA==&mid=2247484435&idx=1&sn=8d09cdceb472b091a9f9871f4ee188c3\",\n \"【已复现】Fortinetu2002FortiWeb 命令注入漏洞(CVE-2025-58034)\": \"https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247520724&idx=1&sn=ea5c82fc85f3cf5b05dabf1c21ed6d1b\",\n \"12个细分领域！网御星云强势入围《2025中国数据安全企业全景图》\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDUzMjc5Ng==&mid=2650204353&idx=1&sn=d979ec68d7d5ad77f38db792a6ce6260\",\n \"【业界动态】第十八届中国密码学会年会在天津举办\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664998211&idx=1&sn=92e7aba99edfedb56d9791bd05c2ee11\",\n \"【业界动态】新版CSNAS V17正式发布 开启共享可控新纪元（文末附免费获取方式）\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664998211&idx=2&sn=abf5d0b8599e4ba41491a8b173b9018c\",\n \"【业界动态】CAAI社会计算与社会智能专委会征集“社会计算十大科学问题”\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664998211&idx=3&sn=4c18994438c0a1ca3546b1d50f66ef08\",\n \"⌈京麒沙龙第18期⌋AI+移动安全专场，立即扫码，锁定你的线下专属席位！\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727850219&idx=1&sn=78ddddbb2874dac305041a00426377e6\",\n \"实力认证 | 众智维科技多领域入选《2025年中国数据安全企业全景图》\": \"https://mp.weixin.qq.com/s?__biz=MzU5Mjg0NzA5Mw==&mid=2247494830&idx=1&sn=07259be1c6a99ece9b818c87caf6c7ee\",\n \"网络监控：夜莺对超300台信锐无线AP监控告警最佳实践\": \"https://mp.weixin.qq.com/s?__biz=MzIzNjU5NDE2MA==&mid=2247491400&idx=1&sn=fa4dbf6ef5100aecc535c579aa4c2702\",\n \"JS逆向 -- 利用土办法+AI编写的视频下载脚本过程复现\": \"https://mp.weixin.qq.com/s?__biz=MzA4MzgzNTU5MA==&mid=2652040809&idx=1&sn=6a3af62023aba4661cbecef5602199c4\",\n \"关于2024年度深圳市网络空间安全专业职称评审表领取通知\": \"https://mp.weixin.qq.com/s?__biz=MzU0Mzk0NDQyOA==&mid=2247522906&idx=1&sn=6854a3e49f2fa61a008c5bedffc27e44\",\n \"数据要流动 更要安全地流动：石犀科技于高交会提出治理新范式\": \"https://mp.weixin.qq.com/s?__biz=MzU0Mzk0NDQyOA==&mid=2247522906&idx=2&sn=9c508338339e53f0d955cb7b5fcaa0f9\",\n \"常见未经授权漏洞测试及利用\": \"https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712621&idx=1&sn=189f1dffeb2dfda6f58768294a239e2a\",\n \"国家级黑客在现代混合战争中的新战术\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247504167&idx=1&sn=546f9eee8b2c8bb73abddc84c7bfa808\",\n \"澳大利亚三星旧款手机软件过时导致用户死亡\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247504167&idx=2&sn=d4cf7f56764dbd991b4691835cce0111\",\n \"小学初中高中资料免费分享群（20251120）\": \"https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247500306&idx=1&sn=d6b139eca43394782b6c3af5534fba79\",\n \"你升级 OpenSSH 10.2 了吗？\": \"https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247487645&idx=1&sn=bb82a6b66fd172f45912784ee7e0facb\",\n \"85秒生成抖音页面，1分钟打造操作系统：一觉醒来，天又又又塌了...\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650262299&idx=1&sn=f9a1a1a02e5e3a414c6c050b9688870b\",\n \"一页纸，跟上级说清楚安全这点事\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTMzMDUyOA==&mid=2247506964&idx=1&sn=7ae64d70d11c76e86e618647275e7e49\",\n \"TG云取“黑科技”！CF919支持动态提取TG数据！\": \"https://mp.weixin.qq.com/s?__biz=MzI0OTEyMTk5OQ==&mid=2247495334&idx=1&sn=e8e1d0604e7de736ff51adffa794dbc9\",\n \"博世：功能安全和信息安全的挑战-设计功能安全与信息安全之间的流程接口\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628764&idx=1&sn=37dfa308726e91ec22b7e97e83f40325\",\n \"智能网联汽车功能安全开发实战培训课程（基于ISO 26262:2025）\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628764&idx=2&sn=b938e0152a361470e067d0b2f85b7291\",\n \"基于本体与攻击—故障树的智能网联汽车功能安全和网络安全联合分析评估方法\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628764&idx=3&sn=c1de0dfcb0628ca04063c85c9223ea40\",\n \"破“隐”者说：AI时代，你的网络安全谁来守护？\": \"https://mp.weixin.qq.com/s?__biz=MzE5MTEyMTg1Nw==&mid=2247484143&idx=1&sn=0eedca92bda9e656d1957031ab5b113d\",\n \"2025网络安全“金帽子”年度评选 | 投票通道开放中，敬请投票助力！\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585531&idx=1&sn=04607db0ee9dd112e7c6a97ba989bbc0\",\n \"Finger协议遭滥用 沦为 ClickFix 恶意软件攻击工具\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585531&idx=2&sn=00408b6c3d23eeb9f1108b6691095724\",\n \"公安部计算机信息系统安全产品质量监督检验中心检测发现40款违法违规收集使用个人信息的移动应用\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585531&idx=3&sn=dd9979c4b504fe7c3d094aeacf246fe2\",\n \"开放融合 AI赋能 智慧运维 | 山石网科2025“秋实行动”圆满收官\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661304108&idx=1&sn=31df8ff250bf96af31cb9d6bcae339f2\",\n \"山石网科亮相香港AI防火墙专题活动，展示双A战略创新应用成果\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661304108&idx=2&sn=5df2282ef60bce792e765231493ddab1\",\n \"山石方案｜某卫健局等级保护安全建设解决方案\": \"https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661304108&idx=3&sn=dd5c835b6034c90d38cec53b80b4b4b3\",\n \"【病毒分析】专挑制造业下手！揭秘BEAST图形化勒索软件（Windows版）的加密逻辑与免杀手段\": \"https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247505544&idx=1&sn=56416c26ae65456dd29387da0dda5966\",\n \"燃情落幕！网络安全竞赛见证安全尖兵的诞生\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTUyNjkwNA==&mid=2247484418&idx=1&sn=88da966f498fe7ca7427ff97806f342d\",\n \"很现实，很沉重！\": \"https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649472260&idx=1&sn=912db47a2d41f07249bebaf6e8d29222\",\n \"臭外包小剧场之“你是来背锅的吧？”\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY3ODk4MQ==&mid=2247484638&idx=1&sn=020feb182f6d678e1d102b33c8666e44\",\n \"渗透测试 | 二挖某985高校获取2本证书小记（三）\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDkzMTE0Ng==&mid=2247484458&idx=1&sn=361ee4fdf1bf3250869da9a419b815a6\",\n \"以技破灰！晨星安全4队勇夺黑灰产检测技能大赛决赛铜奖\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDI0MjUyNQ==&mid=2247485765&idx=1&sn=51708f34817d367b816ebdf864cf4652\",\n \"鸿宇多用户商城scan_list.php存在SQL注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDkwMDg3Nw==&mid=2247483976&idx=1&sn=ec7abcbd830c3bccf43d6081661f843f\",\n \"速修！FortiWeb无条件RCE利用链发现在野利用\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507976&idx=1&sn=6b5edb53f10e21451c6e14ae478b7268\",\n \"ChatGPT等多个大型网站集体宕机，你们的海外业务能够幸免稳定运行吗？\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTYyOTUyOA==&mid=2247487745&idx=1&sn=3a52708668078571d347997c1d6c020a\",\n \"倒计时2天！第九届“强网杯”全国网络安全挑战赛线下赛即将打响\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MjY3NDQ2Ng==&mid=2247488414&idx=1&sn=a215dd3a3630650345c765a06a701801\",\n \"NSA联合CISA发布新指南，直击隐蔽网络攻击手法；预算削减遇上攻击升级，2026年网络安全面临双重挤压| 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139385&idx=2&sn=d07f0a7ffbc111a90290dfe147a03e80\",\n \"2025第二届“平航杯”电子数据取证竞赛-计算机部分WriteUp\": \"https://mp.weixin.qq.com/s?__biz=MzkyOTI4NTY4MQ==&mid=2247491845&idx=1&sn=d480aeae559174b233a155764e9c24f8\",\n \"认识安全本身（手稿二）\": \"https://mp.weixin.qq.com/s?__biz=MzkwNTI3MjIyOQ==&mid=2247484239&idx=1&sn=e957c2f48bd9ffbfd0871c5133a157b1\",\n \"带你一步步搞懂某工控题（附思路）\": \"https://mp.weixin.qq.com/s?__biz=MzU3MzEwMTQ3NQ==&mid=2247508329&idx=1&sn=f2c725ab92f73c255b724f654c9df317\",\n \"【在野利用】Fortinet FortiWeb OS命令注入漏洞(CVE-2025-58034)\": \"https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247495318&idx=1&sn=1520e42c7cee2f4dcee0a2f720c16a65\"\n },\n \"GuidePoint Security\": {\n \"Beyond Spicy Autocomplete: Are LLMs Enough for Static Application Security Testing (SAST)?\": \"https://www.guidepointsecurity.com/blog/beyond-spicy-autocorrect-llms-for-sast/\"\n },\n \"hasherezade's 1001 nights\": {\n \"Flare-On 12 – Task 9\": \"https://hshrzd.wordpress.com/2025/11/20/flare-on-12-task-9/\"\n },\n \"Securelist\": {\n \"Inside the dark web job market\": \"https://securelist.com/dark-web-job-market-2023-2025/118057/\",\n \"Blockchain and Node.js abused by Tsundere: an emerging botnet\": \"https://securelist.com/tsundere-node-js-botnet-uses-ethereum-blockchain/117979/\"\n },\n \"CCC Event Blog\": {\n \"Creature ChroniCles – Künstlerische Dokumentation des 39C3\": \"https://events.ccc.de/2025/11/20/39c3-creature-chronicles/\"\n },\n \"Malwarebytes\": {\n \"Budget Samsung phones shipped with unremovable spyware, say researchers\": \"https://www.malwarebytes.com/blog/news/2025/11/budget-samsung-phones-shipped-with-unremovable-spyware-say-researchers\",\n \"What the Flock is happening with license plate readers?\": \"https://www.malwarebytes.com/blog/privacy/2025/11/what-the-flock-is-happening-with-license-plate-readers\",\n \"Holiday scams 2025: These common shopping habits make you the easiest target\": \"https://www.malwarebytes.com/blog/news/2025/11/holiday-scams-2025-these-common-shopping-habits-make-you-the-easiest-target\",\n \"Gmail can read your emails and attachments to train its AI, unless you opt out\": \"https://www.malwarebytes.com/blog/news/2025/11/gmail-is-reading-your-emails-and-attachments-to-train-its-ai-unless-you-turn-it-off\"\n },\n \"Security Blog | Praetorian\": {\n \"CVE-2025-52493: When Password FieldsAren’t Enough – Client-Side SecretExposure in PagerDuty Cloud Runbook\": \"https://www.praetorian.com/blog/cve-2025-52493-when-password-fieldsarent-enough-client-side-secretexposure-in-pagerduty-cloud-runbook/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"冷冻妻子的男子结交新伴侣引发争论\": \"https://www.solidot.org/story?sid=82856\",\n \"清华去年获得 AI 专利超过 MIT、斯坦福、普林斯顿和哈佛的总和\": \"https://www.solidot.org/story?sid=82855\",\n \"大脑处理不同语言的基本语音的方式相同\": \"https://www.solidot.org/story?sid=82854\",\n \"美国可能会在两个月内失去麻疹消除国地位\": \"https://www.solidot.org/story?sid=82853\",\n \"逾 60 个警局装备了波士顿动力的机器狗\": \"https://www.solidot.org/story?sid=82852\",\n \"中国卡车正迅速从柴油转向电动\": \"https://www.solidot.org/story?sid=82851\",\n \"中国人才推动美国 AI 研究\": \"https://www.solidot.org/story?sid=82850\",\n \"Linus Torvalds 认为 AI 辅助编程对新手有用，但不适合应用于生产代码\": \"https://www.solidot.org/story?sid=82849\",\n \"荷兰将安世半导体控制权归还给中国母公司\": \"https://www.solidot.org/story?sid=82848\",\n \"物理学家开发 DeepSeek R1 去审查版本\": \"https://www.solidot.org/story?sid=82847\"\n },\n \"奇安信 CERT\": {\n \"【已复现】Fortinet FortiWeb 命令注入漏洞(CVE-2025-58034)安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504197&idx=1&sn=99fe135087d866605140a294cccf24a6\"\n },\n \"安全客\": {\n \"SnowSoul勒索软件样本分析：加密机制与解密研究\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789452&idx=1&sn=1366256ab9a09d6005d4c983a138bc3c\"\n },\n \"黑鸟\": {\n \"黑客团伙如何用树莓派入侵银行ATM系统并取款数年\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183735&idx=1&sn=631912063f482c082ba2297863f4d87a\"\n },\n \"看雪学苑\": {\n \"SDC2025 议题回顾 | SCPGA：自认同CoT渐进式泛化攻击\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604411&idx=1&sn=c9c3d5f23ce7da8357d9fe24b9dc9e30\",\n \"华硕路由器遭大规模黑客攻击，超5万台设备被窃密操控\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604411&idx=2&sn=e1c465c37e801bfde89a6decf640dce1\",\n \"代码审计无从下手？四阶段实战教学，带你从入门到精通\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604411&idx=3&sn=b355152f50e954a71ee190e6438d7f89\"\n },\n \"绿盟科技CERT\": {\n \"【漏洞通告】Fortinet FortiWeb身份验证绕过与命令注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489417&idx=1&sn=08bf5aa3fb48b70cdd6a884ad30b4659\"\n },\n \"安全内参\": {\n \"全球多个AI集群遭AI恶意软件劫持，被改造成挖矿僵尸网络\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515231&idx=1&sn=8df5f094bc50a13545c25a50d79af141\",\n \"亚马逊警告称“网络赋能的动能打击”正在走进现代战争\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515231&idx=2&sn=7a1e00d3a3a3977796f691ed4176498d\"\n },\n \"vivo千镜\": {\n \"蓝心小V荣获中国信通院AI安全“卓越型”认证，全力守护你的隐私安全\": \"https://mp.weixin.qq.com/s?__biz=MzI0Njg4NzE3MQ==&mid=2247492268&idx=1&sn=63f531cd1f3a5af604f8ad2dc1de5290\"\n },\n \"dotNet安全矩阵\": {\n \".NET 通过 AppDomain 创建与管理新的应用程序域\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500916&idx=1&sn=abbc7caf49edc55bb49c4d8431795114\",\n \".NET 环境下的 CSRF 漏洞与防御策略\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500916&idx=2&sn=c809d65e0ffe14a95ba22270c4d64f37\",\n \".NET内网实战： 通过 FileSecurity 获取目录及文件控制列表和规则\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500916&idx=3&sn=2b7be1ba01f8e3c7837510c28189be51\"\n },\n \"HackerNews\": {\n \"黑客正活跃利用 7-Zip 符号链接远程代码执行漏洞\": \"https://hackernews.cc/archives/61621\",\n \"基于 Python 的 WhatsApp 蠕虫，向巴西设备传播 Eternidade 窃取器\": \"https://hackernews.cc/archives/61617\",\n \"WrtHug 利用华硕 WRT 路由器六大漏洞，劫持全球数万台淘汰设备\": \"https://hackernews.cc/archives/61614\",\n \"俄罗斯大型保险公司遭网络攻击，服务大面积中断\": \"https://hackernews.cc/archives/61612\",\n \"美欧多国制裁俄 “防弹主机” 服务商，因其支持勒索软件犯罪\": \"https://hackernews.cc/archives/61609\",\n \"常春藤盟校数据泄露，国防部长、前第一夫人等校友信息曝光\": \"https://hackernews.cc/archives/61607\",\n \"巴西石油巨头 90GB 敏感地震和勘探数据被俄系黑客窃取\": \"https://hackernews.cc/archives/61603\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 特别推荐 2025-11-20 贯通计算机系统！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501002&idx=1&sn=5d302912b9092f7231df8c23dfe0e6e3\"\n },\n \"信息安全国家工程研究中心\": {\n \"前沿 | 我国网络安全基本制度的建立与实施\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247501619&idx=1&sn=e1dbaaebea9d05ce1f5de2677dc6148c\",\n \"一图读懂GB/T 22080-2025《网络安全技术 信息安全管理体系 要求》\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247501619&idx=2&sn=0df402240ccbe800d9e8c4dbae883fe0\"\n },\n \"丁爸 情报分析师的工具箱\": {\n \"【情报机构】湾湾的情报与反情报体系\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651153022&idx=1&sn=075a387efe54302ada67fbd4dd617945\",\n \"【喜报】第三届全国大学生开源情报数据采集与分析大赛获奖通知\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651153022&idx=2&sn=67011503c2a94a80301976fcce3d3b6e\"\n },\n \"天黑说嘿话\": {\n \"EasyTools渗透测试工具箱V1.9.7更新(支持cli工具参数添加与调用功能，支持定时任务执行)\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485230&idx=1&sn=4848d16adb80554725493425cbbea342\"\n },\n \"中国信息安全\": {\n \"行业 | 激活流量数据价值，CSNAS V17开启共享、可控新纪元\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=1&sn=1dad61aef89efd0fea492c6621ad7c35\",\n \"专家解读 | 规范电子印章应用管理 构筑数字信任坚实基础\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=2&sn=f9e6aaa7fb139378ec7825027e78e057\",\n \"关注 | 最高法发布涉未成年人网络保护与违法犯罪惩处典型案例\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=3&sn=2732bf245820d7065ff95d70bf25c7a6\",\n \"观点 | 给未成年人使用生成式人工智能装上“法治护栏”\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253574&idx=4&sn=df8961710185c25554ebaa6220d26b47\"\n },\n \"网络空间安全科学学报\": {\n \"学术年会 | 2025年网络空间安全学术会议通知（第二轮）\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247506206&idx=1&sn=f13a7a43c115c86e4c25a75d8e3b28ce\"\n },\n \"安全牛\": {\n \"车联网靶场的破局与跃迁：提升主动实战能力和助力T型人才培养\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139385&idx=1&sn=23d719a241135a08a4b401ccf0a007b2\",\n \"NSA联合CISA发布新指南，直击隐蔽网络攻击手法；预算削减遇上攻击升级，2026年网络安全面临双重挤压| 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139385&idx=2&sn=d07f0a7ffbc111a90290dfe147a03e80\"\n },\n \"代码卫士\": {\n \"CISA要求政府机构在7天内修复这个 Fortinet 新0day\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524465&idx=1&sn=cf210939b4c44de97b60529383818aaa\",\n \"用AI攻击AI：Ray AI开源框架中的老旧漏洞被用于攻击集群\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524465&idx=2&sn=41ec03ab3c0572c4ecc61e20dcd8fdb6\"\n },\n \"极客公园\": {\n \"他们没在追风口，而是在造下一个\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653091561&idx=1&sn=d599311b0db4691a381e1f069662aa53\",\n \"字节这个「消失」了几年的 App，悄悄杀回苹果商城排行榜\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653091561&idx=2&sn=3ce929cdb83be6d5c9a53da3e567cca8\",\n \"OpenAI 的「群聊」，可能比你想得更重要！\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653091558&idx=1&sn=8e1809717d9b4f160e57b442abdd47cd\",\n \"​「数字分身」白菜价：每月 998 元，雇一个 AI 帮你直播 8 小时\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653091558&idx=2&sn=035fc7bc2ad4985e04f37cca5118092a\",\n \"杨立昆宣布离开 Meta「自立门户」；荷兰暂停干预安世半导体；TikTok 将支持用户设置减少 AI 内容 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653091538&idx=1&sn=58092dc53b67658d27d250f639b3f3e9\"\n },\n \"安全分析与研究\": {\n \"捆绑友道词典银狐最新攻击样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494404&idx=1&sn=4eab56714dddb7bf9cf10bcf593d0761\"\n },\n \"情报分析师\": {\n \"开源情报（OSINT）的演变：人工智能时代的机遇与挑战\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650563298&idx=1&sn=30ed9324c2ee7004cc0b225243c1dc9c\",\n \"印度启用缪德诺马高原空军基地对我安全战略影响分析\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650563298&idx=2&sn=47e7548d6e8b980fc10a78d072cfea91\"\n },\n \"字节跳动安全中心\": {\n \"PatchEval 发布：一个比你更关心修复效果的 AI 漏洞自动修复评测基准\": \"https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495788&idx=1&sn=c0996b5d49e67f725e68f37dc9511ac9\"\n },\n \"补天平台\": {\n \"心动的橱窗秋冬上新！来get心动好物！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509772&idx=1&sn=4d6406694f5eca622d5d74254e8cb1db\"\n },\n \"数世咨询\": {\n \"价值图谱 | 网络准入产品核心能力介绍\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540899&idx=1&sn=f1b3a9c05b9694846f9d8ed674885658\"\n },\n \"美团技术团队\": {\n \"美团 LongCat Interaction 团队发布大模型交互系统技术报告 WOWService\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781734&idx=1&sn=cc848330c852f22c1cb6bde1fbc2147c\",\n \"美团首款 AI IDE 产品 CatPaw 开启公测 | 文末附邀请码\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781734&idx=2&sn=bea84cd8e7eefcdceab09abd8b685605\",\n \"抽奖赠书 | 从理论到落地，清华×美团出版教材，讲透即时配送\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781734&idx=3&sn=214cd9f12c1f178d074ee7ae5eb95e7d\"\n },\n \"嘶吼专业版\": {\n \"2025网络安全“金帽子”年度评选 | 投票通道开放中，敬请投票助力！\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585531&idx=1&sn=04607db0ee9dd112e7c6a97ba989bbc0\",\n \"Finger协议遭滥用 沦为 ClickFix 恶意软件攻击工具\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585531&idx=2&sn=00408b6c3d23eeb9f1108b6691095724\",\n \"公安部计算机信息系统安全产品质量监督检验中心检测发现40款违法违规收集使用个人信息的移动应用\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585531&idx=3&sn=dd9979c4b504fe7c3d094aeacf246fe2\"\n },\n \"安全圈\": {\n \"【安全圈】CISA 警告 Chrome V8 0-Day 被积极利用导致远程代码执行\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=1&sn=d86cbdc3bcd1c657ff0c80a9e915853a\",\n \"【安全圈】7-Zip 漏洞被证实遭到攻击利用\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=2&sn=988a91ea3270a54f52e42d08973b89fb\",\n \"【安全圈】Ollama 被曝模型解析漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=3&sn=5f9c47c03a34f8134402494b1cb87ca4\",\n \"【安全圈】三星医疗子公司疑遭第三方供应链泄露\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=4&sn=82cda6d303afabd58112903c25219fb5\"\n },\n \"360数字安全\": {\n \"国内首个！360开发SnowSoul勒索软件专用解密解决方案\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247583034&idx=1&sn=af283a5a8c3efe879ce9d97431a4ac09\"\n },\n \"微步在线研究响应中心\": {\n \"速修！FortiWeb无条件RCE利用链发现在野利用\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507976&idx=1&sn=6b5edb53f10e21451c6e14ae478b7268\"\n },\n \"Securityinfo.it\": {\n \"Sneaky2FA si evolve con una funzionalità Browser-in-the-Browser\": \"https://www.securityinfo.it/2025/11/20/sneaky2fa-si-evolve-con-una-funzionalita-browser-in-the-browser/?utm_source=rss&utm_medium=rss&utm_campaign=sneaky2fa-si-evolve-con-una-funzionalita-browser-in-the-browser\"\n },\n \"Have I Been Pwned latest breaches\": {\n \"International Kiteboarding Organization - 340,349 breached accounts\": \"https://haveibeenpwned.com/Breach/IKO\",\n \"Beckett Collectibles - 541,132 breached accounts\": \"https://haveibeenpwned.com/Breach/Beckett\",\n \"Eurofiber - 10,003 breached accounts\": \"https://haveibeenpwned.com/Breach/Eurofiber\",\n \"Vultr - 187,872 breached accounts\": \"https://haveibeenpwned.com/Breach/Vultr\"\n },\n \"ICT Security Magazine\": {\n \"Maritime cybersecurity: vulnerabilità dei sistemi navali, AIS spoofing e GPS spoofing\": \"https://www.ictsecuritymagazine.com/articoli/maritime-cybersecurity/\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"Oracle Identity Manager Exploit Observation from September (CVE-2025-61757), (Thu, Nov 20th)\": \"https://isc.sans.edu/diary/rss/32506\",\n \"ISC Stormcast For Thursday, November 20th, 2025 https://isc.sans.edu/podcastdetail/9708, (Thu, Nov 20th)\": \"https://isc.sans.edu/diary/rss/32504\"\n },\n \"京东安全应急响应中心\": {\n \"⌈京麒沙龙第18期⌋AI+移动安全专场，立即扫码，锁定你的线下专属席位！\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727850219&idx=1&sn=78ddddbb2874dac305041a00426377e6\"\n },\n \"NetSPI\": {\n \"Public Report: Android Quick Share Application Penetration Test\": \"https://www.netspi.com/blog/executive-blog/mobile-application-pentesting/google-quick-share-extension/\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"International Kiteboarding Organization - 340,349 breached accounts\": \"https://haveibeenpwned.com/Breach/IKO\",\n \"Salesforce cuts off access to third-party app after discovering ‘unusual activity’\": \"https://therecord.media/salesforce-cuts-off-access-to-third-party-unusual-activity\",\n \"Privacy oversight board finds FBI does not buy real-time location data\": \"https://therecord.media/pclob-finds-fbi-does-not-use-real-time-location-data\",\n \"Google exposes BadAudio malware used in APT24 espionage campaigns\": \"https://www.bleepingcomputer.com/news/security/google-exposes-badaudio-malware-used-in-apt24-espionage-campaigns/\",\n \"Salesforce says some of its customers’ data was accessed after Gainsight breach\": \"https://techcrunch.com/2025/11/20/salesforce-says-some-of-its-customers-data-was-accessed-after-gainsight-breach/\",\n \"Mozilla Says It’s Finally Done With Two-Faced Onerep\": \"https://krebsonsecurity.com/2025/11/mozilla-says-its-finally-done-with-two-faced-onerep/\",\n \"It’s not personal, it’s just business\": \"https://blog.talosintelligence.com/its-not-personal-its-just-business/\",\n \"Hacker claims to steal 2.3TB data from Italian rail group, Almavia\": \"https://www.bleepingcomputer.com/news/security/hacker-claims-to-steal-23tb-data-from-italian-rail-group-almavia/\",\n \"New Android malware can capture private messages, researchers warn\": \"https://therecord.media/new-android-malware-captures-private-messages\",\n \"FCC spikes Biden-era cyber regulations prompted by Salt Typhoon telecom breaches\": \"https://therecord.media/fcc-removes-biden-era-cybersecurity-rules-telecoms-salt-typhoon\",\n \"GlobalProtect VPN portals probed with 2.3 million scan sessions\": \"https://www.bleepingcomputer.com/news/security/globalprotect-vpn-portals-probed-with-23-million-scan-sessions/\",\n \"Salesforce investigates customer data theft via Gainsight breach\": \"https://www.bleepingcomputer.com/news/security/salesforce-investigates-customer-data-theft-via-gainsight-breach/\",\n \"WhatsApp by the Numbers: What Anonymized Metadata from a Security Flaw Reveals\": \"https://www.mobile-hacker.com/2025/11/20/whatsapp-by-the-numbers-what-anonymized-metadata-from-a-security-flaw-reveals/\",\n \"NSO seeks to overturn WhatsApp case, saying it is ‘catastrophic’ for the spyware maker\": \"https://therecord.media/nso-seeks-to-overturn-whatsapp-case\",\n \"New SonicWall SonicOS flaw allows hackers to crash firewalls\": \"https://www.bleepingcomputer.com/news/security/new-sonicwall-sonicos-flaw-allows-hackers-to-crash-firewalls/\",\n \"Russia blacklists S.T.A.L.K.E.R. game developer, accusing it of aiding Ukraine’s war effort\": \"https://therecord.media/russia-blacklists-stalker-game-developer\",\n \"D-Link warns of new RCE flaws in end-of-life DIR-878 routers\": \"https://www.bleepingcomputer.com/news/security/d-link-warns-of-new-rce-flaws-in-end-of-life-dir-878-routers/\",\n \"Turn your Windows 11 migration into a security opportunity\": \"https://www.bleepingcomputer.com/news/security/turn-your-windows-11-migration-into-a-security-opportunity/\",\n \"Samourai Wallet crypto mixer’s co-founders sentenced to prison\": \"https://therecord.media/samourai-wallet-crypto-mixer-founders-sentenced\",\n \"Attacco ransomware a Poltronesofà: il rischio è l’esposizione di dati personali\": \"https://www.cybersecurity360.it/news/ransomware-a-poltronesofa-il-rischio-e-lesposizione-di-dati-personali/\",\n \"Fuga di dati WhatsApp, perché è giusto preoccuparsi\": \"https://www.cybersecurity360.it/news/fuga-di-dati-whatsapp-perche-e-giusto-preoccuparsi/\",\n \"Fuga di dati Whatsapp, perché è giusto preoccuparsi\": \"https://www.cybersecurity360.it/nuove-minacce/fuga-di-dati-whatsapp-perche-e-giusto-preoccuparsi/\",\n \"TV streaming piracy service with 26M yearly visits shut down\": \"https://www.bleepingcomputer.com/news/security/tv-streaming-piracy-service-photocall-with-26m-yearly-visits-shut-down/\",\n \"Sneaky2FA si evolve con una funzionalità Browser-in-the-Browser\": \"https://www.securityinfo.it/2025/11/20/sneaky2fa-si-evolve-con-una-funzionalita-browser-in-the-browser/\",\n \"Trasferimento dati: il Consiglio d’Europa chiarisce le modalità per eventuali reclami\": \"https://www.cybersecurity360.it/news/trasferimento-dati-il-consiglio-deuropa-chiarisce-le-modalita-per-eventuali-reclami/\",\n \"Inside the dark web job market\": \"https://securelist.com/dark-web-job-market-2023-2025/118057/\",\n \"Crypto mixer founders sent to prison for laundering over $237 million\": \"https://www.bleepingcomputer.com/news/security/samourai-cryptomixer-founders-sent-to-prison-for-laundering-over-237-million/\",\n \"Detected in 60 Seconds: How to Identify Phishing with a Malware Sandbox\": \"https://any.run/cybersecurity-blog/60-seconds-phishing-analysis/\",\n \"Sturnus: Mobile Banking Malware bypassing WhatsApp, Telegram and Signal Encryption\": \"https://www.threatfabric.com/blogs/sturnus-banking-trojan-bypassing-whatsapp-telegram-and-signal\",\n \"Deepfake: il nuovo punto vulnerabile delle aziende è umano\": \"https://www.cybersecurity360.it/nuove-minacce/deepfake-il-nuovo-punto-vulnerabile-delle-aziende-e-umano/\",\n \"L’attacco alla rete elettrica svedese e l’ipotesi che si possa rimanere al buio\": \"https://www.cybersecurity360.it/news/rete-elettrica-svedese/\",\n \"OpenAI says its latest GPT-5.1 Codex can code independently for hours\": \"https://www.bleepingcomputer.com/news/artificial-intelligence/openai-says-its-latest-gpt-51-codex-can-code-independently-for-hours/\",\n \"Multi-threat Android malware Sturnus steals Signal, WhatsApp messages\": \"https://www.bleepingcomputer.com/news/security/multi-threat-android-malware-sturnus-steals-signal-whatsapp-messages/\",\n \"Blockchain and Node.js abused by Tsundere: an emerging botnet\": \"https://securelist.com/tsundere-node-js-botnet-uses-ethereum-blockchain/117979/\",\n \"DetectionStream Just Got a Major Upgrade: Suricata Integration is Here!\": \"https://kostas-ts.medium.com/detectionstream-just-got-a-major-upgrade-suricata-integration-is-here-96ea5caf635c\",\n \"Beckett Collectibles - 541,132 breached accounts\": \"https://haveibeenpwned.com/Breach/Beckett\",\n \"A Beginner’s Guide to the CVE Database\": \"https://blog.sucuri.net/2025/11/a-beginners-guide-to-the-cve-database.html\",\n \"Eurofiber - 10,003 breached accounts\": \"https://haveibeenpwned.com/Breach/Eurofiber\",\n \"Endgame for Rhadamanthys (temporarily)\": \"https://catchingphish.com/posts/f/endgame-for-rhadamanthys-temporarily\"\n },\n \"The Hacker News\": {\n \"ShadowRay 2.0 Exploits Unpatched Ray Flaw to Build Self-Spreading GPU Cryptomining Botnet\": \"https://thehackernews.com/2025/11/shadowray-20-exploits-unpatched-ray.html\",\n \"Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows\": \"https://thehackernews.com/2025/11/tsundere-botnet-expands-using-game.html\",\n \"ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware Waves\": \"https://thehackernews.com/2025/11/threatsday-bulletin-0-days-linkedin.html\",\n \"CTM360 Exposes a Global WhatsApp Hijacking Campaign: HackOnChat\": \"https://thehackernews.com/2025/11/ctm360-exposes-global-whatsapp.html\",\n \"New Sturnus Android Trojan Quietly Captures Encrypted Chats and Hijacks Devices\": \"https://thehackernews.com/2025/11/new-sturnus-android-trojan-quietly.html\",\n \"Iran-Linked Hackers Mapped Ship AIS Data Days Before Real-World Missile Strike Attempt\": \"https://thehackernews.com/2025/11/iran-linked-hackers-mapped-ship-ais.html\",\n \"TamperedChef Malware Spreads via Fake Software Installers in Ongoing Global Campaign\": \"https://thehackernews.com/2025/11/tamperedchef-malware-spreads-via-fake.html\"\n },\n \"Krebs on Security\": {\n \"Mozilla Says It’s Finally Done With Two-Faced Onerep\": \"https://krebsonsecurity.com/2025/11/mozilla-says-its-finally-done-with-two-faced-onerep/\"\n },\n \"Daniel Miessler\": {\n \"Leave the em dash Alone\": \"https://danielmiessler.com/blog/leave-the-em-dash-alone?utm_source=rss&utm_medium=feed&utm_campaign=website\"\n },\n \"迪哥讲事\": {\n \"实战几个比较有意思的SQL注入\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498609&idx=1&sn=8376dccf873d344af914b2a85ce388a6\"\n },\n \"Schneier on Security\": {\n \"Scam USPS and E-Z Pass Texts and Websites\": \"https://www.schneier.com/blog/archives/2025/11/scam-usps-and-e-z-pass-texts-and-websites.html\"\n },\n \"白帽子章华鹏\": {\n \"链接一批优质的安全岗位及安全人才｜11月20日更新\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650238161&idx=1&sn=302f6917522df526eb3c4afd7a30186e\"\n },\n \"BorderGate\": {\n \"Blocking EDR Traffic\": \"https://www.bordergate.co.uk/blocking-edr-traffic/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Give Me Liberty or Linux, Badge Hacking Interview - Bryce Owen - PSW #901\": \"http://sites.libsyn.com/18678/give-me-liberty-or-linux-badge-hacking-interview-bryce-owen-psw-901\"\n },\n \"Graham Cluley\": {\n \"UK’s new cybersecurity bill takes aim at ransomware gangs and state-backed hackers\": \"https://www.fortra.com/blog/uks-new-cybersecurity-bill-takes-aim-ransomware-gangs-state-backed-hackers\",\n \"Wind farm worker sentenced after turning turbines into a secret crypto mine\": \"https://www.bitdefender.com/en-us/blog/hotforsecurity/wind-farm-worker-sentenced-after-turning-turbines-into-a-secret-crypto-mine\",\n \"Smashing Security podcast #444: We’re sorry. Wait, did a company actually say that?\": \"https://grahamcluley.com/smashing-security-podcast-444/\"\n },\n \"Security Affairs\": {\n \"Researchers devised a new enumeration technique that exposed 3.5B WhatsApp profiles\": \"https://securityaffairs.com/184886/mobile-2/researchers-devised-a-new-enumeration-technique-that-exposed-3-5b-whatsapp-profiles.html\",\n \"Sturnus: New Android banking trojan targets WhatsApp, Telegram, and Signal\": \"https://securityaffairs.com/184878/cyber-crime/sturnus-new-android-banking-trojan-targets-whatsapp-telegram-and-signal.html\",\n \"Coordinated sanctions hit Russian bulletproof hosting providers enabling top ransomware Ops\": \"https://securityaffairs.com/184871/cyber-crime/coordinated-sanctions-hit-russian-bulletproof-hosting-providers-enabling-top-ransomware-ops.html\",\n \"Cyber-enabled kinetic targeting: Iran-linked actor uses cyber operations to support physical attacks\": \"https://securityaffairs.com/184862/apt/cyber-enabled-kinetic-targeting-iran-linked-actor-uses-cyber-operations-to-support-physical-attacks.html\"\n },\n \"Deeplinks\": {\n \"How Cops Are Using Flock Safety's ALPR Network to Surveil Protesters and Activists\": \"https://www.eff.org/deeplinks/2025/11/how-cops-are-using-flock-safetys-alpr-network-surveil-protesters-and-activists\",\n \"The Trump Administration’s Order on AI Is Deeply Misguided\": \"https://www.eff.org/deeplinks/2025/11/trump-administrations-order-ai-deeply-misguided\",\n \"EFF Demands Answers About ICE-Spotting App Takedowns\": \"https://www.eff.org/press/releases/eff-demands-answers-about-ice-spotting-app-takedowns\"\n }\n}"}}, "archive/tmp/2025-03-06.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747315.179915, "n": 45760, "h": "d563061e4f6963af", "c": "{\n \"Trustwave Blog\": {\n \"The Microsoft Security Score: The Future Benchmark of Enterprise Security and Trust\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/the-microsoft-security-score-the-future-benchmark-of-enterprise-security-and-trust/\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2025-03-05 Review\": \"http://www.sec-wiki.com/?2025-03-05\"\n },\n \"Security Boulevard\": {\n \"Ransomware Attack Ends a 150 Year Company\": \"https://securityboulevard.com/2025/03/ransomware-attack-ends-a-150-year-company/?utm_source=rss&utm_medium=rss&utm_campaign=ransomware-attack-ends-a-150-year-company\",\n \"DEF CON 32 – War Stories – Stranger In A Changed Land\": \"https://securityboulevard.com/2025/03/def-con-32-war-stories-stranger-in-a-changed-land/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-war-stories-stranger-in-a-changed-land\",\n \"Apple vs. UK — ADP E2EE Back Door Faceoff\": \"https://securityboulevard.com/2025/03/apple-appeals-uk-adp-richixbw/?utm_source=rss&utm_medium=rss&utm_campaign=apple-appeals-uk-adp-richixbw\",\n \"Randall Munroe’s XKCD ‘RNA’\": \"https://securityboulevard.com/2025/03/randall-munroes-xkcd-rna/?utm_source=rss&utm_medium=rss&utm_campaign=randall-munroes-xkcd-rna\",\n \"Anti-detect browser analysis: How to detect the Undetectable browser?\": \"https://securityboulevard.com/2025/03/anti-detect-browser-analysis-how-to-detect-the-undetectable-browser/?utm_source=rss&utm_medium=rss&utm_campaign=anti-detect-browser-analysis-how-to-detect-the-undetectable-browser\",\n \"Fueling the Fight Against Identity Attacks\": \"https://securityboulevard.com/2025/03/fueling-the-fight-against-identity-attacks/?utm_source=rss&utm_medium=rss&utm_campaign=fueling-the-fight-against-identity-attacks\",\n \"7 container security best practices\": \"https://securityboulevard.com/2025/03/7-container-security-best-practices/?utm_source=rss&utm_medium=rss&utm_campaign=7-container-security-best-practices\",\n \"The Rise of Digital Passports: Navigating the Security Implications\": \"https://securityboulevard.com/2025/03/the-rise-of-digital-passports-navigating-the-security-implications/?utm_source=rss&utm_medium=rss&utm_campaign=the-rise-of-digital-passports-navigating-the-security-implications\",\n \"MixMode Uncovers Nation-State Attacks, Insider Threats, and Regulatory Risks in Critical Infrastructure Environment within 3 Days of Deployment\": \"https://securityboulevard.com/2025/03/mixmode-uncovers-nation-state-attacks-insider-threats-and-regulatory-risks-in-critical-infrastructure-environment-within-3-days-of-deployment/?utm_source=rss&utm_medium=rss&utm_campaign=mixmode-uncovers-nation-state-attacks-insider-threats-and-regulatory-risks-in-critical-infrastructure-environment-within-3-days-of-deployment\",\n \"DEF CON 32 – War Stories – Breaking Network Crypto In Popular Chinese Keyboard Apps\": \"https://securityboulevard.com/2025/03/def-con-32-war-stories-breaking-network-crypto-in-popular-chinese-keyboard-apps/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-war-stories-breaking-network-crypto-in-popular-chinese-keyboard-apps\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"Teachers Record Management System 2.1 SQL Injection\": \"https://cxsecurity.com/issue/WLB-2025030007\",\n \"OpenPanel 0.3.4 Remote Code Execution\": \"https://cxsecurity.com/issue/WLB-2025030006\",\n \"Webmin RCE Leading to Privilege Escalation\": \"https://cxsecurity.com/issue/WLB-2025030005\",\n \"IdoDesigns - Multiple Vulnerabilities\": \"https://cxsecurity.com/issue/WLB-2025030004\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Wed Mar 5 20:29:28 UTC 2025\": \"https://github.com/trickest/cve/commit/e3528693a6ed8a3ceccbd087696de98e5e516bf5\",\n \"Update Wed Mar 5 12:31:52 UTC 2025\": \"https://github.com/trickest/cve/commit/af86cc2f56298905cb5a0776fca9346e6cb8fe9a\",\n \"Update Wed Mar 5 04:28:47 UTC 2025\": \"https://github.com/trickest/cve/commit/637674a34749a5842f181c9e3ea4ef5935e955fe\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"新型恶意软件猛攻 4000 多家 ISP，从而实现远程入侵\": \"https://www.4hou.com/posts/gyKr\"\n },\n \"奇安信攻防社区\": {\n \".Net Core下的内存马\": \"https://forum.butian.net/share/4173\"\n },\n \"obaby@mars\": {\n \"再谈 Python自动生成 pdf 文件\": \"https://h4ck.org.cn/2025/03/19568\"\n },\n \"Microsoft Security Blog\": {\n \"Silk Typhoon targeting IT supply chain\": \"https://www.microsoft.com/en-us/security/blog/2025/03/05/silk-typhoon-targeting-it-supply-chain/\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"6 Best AI Website Builders of 2025 — Which One is Right for You?\": \"https://infosecwriteups.com/best-ai-website-builders-2025-cd8fb61a6e45?source=rss----7b722bfd1b8d---4\",\n \"Bypass WAF Cloudflare RXSS | Hackerone\": \"https://infosecwriteups.com/bypass-waf-cloudflare-rxss-hackerone-c12c57809ad6?source=rss----7b722bfd1b8d---4\",\n \"Finding jwt tokens that lead to PII data leakage.\": \"https://infosecwriteups.com/finding-jwt-tokens-that-lead-to-pii-data-leakage-b047d45d97bf?source=rss----7b722bfd1b8d---4\",\n \"Penetration testing a Kubernetes environment\": \"https://infosecwriteups.com/penetration-testing-a-kubernetes-environment-72719f9e1010?source=rss----7b722bfd1b8d---4\",\n \"SURIKATA: Stopping Insider Threats Before They Strike\": \"https://infosecwriteups.com/surikata-stopping-insider-threats-before-they-strike-17c2174cafe7?source=rss----7b722bfd1b8d---4\",\n \"Able to create an account without a phone number. (unique bug)\": \"https://infosecwriteups.com/able-to-create-an-account-without-a-phone-number-unique-bug-1fe2d14b9d54?source=rss----7b722bfd1b8d---4\",\n \"SSRF steals EC2 tokens\": \"https://infosecwriteups.com/ssrf-steals-ec2-tokens-d6f46835286e?source=rss----7b722bfd1b8d---4\",\n \"Find new apex domains that are related to your bug bounty target.\": \"https://infosecwriteups.com/find-new-apex-domains-that-are-related-to-your-bug-bounty-target-a05fdcbf5875?source=rss----7b722bfd1b8d---4\",\n \"A Logical Bug That Slipped Through\": \"https://infosecwriteups.com/a-logical-bug-that-slipped-through-792b90850e72?source=rss----7b722bfd1b8d---4\"\n },\n \"Doonsec's feed\": {\n \"秦安：东方集团造假付惨重代价，普通股民不陪绑，赔偿制度要跟上\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650477233&idx=1&sn=231cba11555843c257e219e4218fa64d\",\n \"牟林：美俄在乌克兰的冲突谁赢了？\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650477233&idx=2&sn=ab58e715c08158a70dbcbd350cc8ef31\",\n \"牟林：斯塔默负责落实特朗普指示精神时泽连斯基和特朗普吵架了\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650477233&idx=3&sn=038e62e50f303c72c59cfd458311f84a\",\n \"reCAPTCHA Phishing:xa0Ι Am Nοt A Rοbοt, Are You?\": \"https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489202&idx=1&sn=089ad3e5762ec80d69be559db94b4bec\",\n \"2025年小道消息？大学生天崩开局！\": \"https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538969&idx=1&sn=42317327f884b1292137a07f173b1729\",\n \"2025年勒索软件新威胁：新兴组织崛起，安全形势告急！\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=1&sn=c4d11e559015b3b012434ee7641d7b49\",\n \"【干货】笑傲职场的独家经验（1）\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=2&sn=cba7d1395b0bf7ecea48dff5c7b43da2\",\n \"【干货原创】实网攻防演习常态化，会带来什么变化01\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=3&sn=a7ad047e393eff87d97bf424c6478d57\",\n \"【干货原创】K12教育，鲜为人知的模式秘密\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=4&sn=adcb7a529cfc5f14f9a89735577197cc\",\n \"原创文章目录\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=5&sn=390e507478f0be7b62df0f271b9ddb5e\",\n \"某节技术专家，刚清空工位，恶心到了。\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491177&idx=1&sn=99ff2768ccc8268f2d612c1dfb6bc036\",\n \"通过 iOS 应用程序中的 Deep Links 利用未经过滤的 URL Handling 和 SQL 注入\": \"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487558&idx=1&sn=86afccba855a95902d9347cb9ed9c870\",\n \"定制你的 Mac Studio\": \"https://mp.weixin.qq.com/s?__biz=MzIyNDg2MDQ4Ng==&mid=2247486654&idx=1&sn=afb3aeca7e0f85e1952220d5f6c56e59\",\n \"网络安全人士必知的黑客工具NanoCore\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490547&idx=1&sn=1574d0459983605de74bc81d8fdc82b5\",\n \"专家解读 | 构建全国一体化公共数据资源登记平台 推动数据要素市场高质量发展\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=1&sn=10e68f771f25102581731d92ae63471f\",\n \"两部委发布智能网联汽车准入召回通知，要求落实密码应用规定\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=2&sn=621c90a3fee7a8d71cfc55f259e19719\",\n \"领先谷歌六个数量级！我国再创全球量子计算优越性里程碑，比超算快10的15次方倍\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=3&sn=9f93b810c1c2f55332cf1690e28fe850\",\n \"最新黑产技术曝光，只需19分钟即可劫持AI大模型\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=4&sn=23dbc83e5257ec1639e7e677d40dbc93\",\n \"2025必看！软考网络工程师值不值得冲？考完竟然有这么多隐藏福利！\": \"https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247528456&idx=1&sn=f42ee963aa8855e5259979cf427fc741\",\n \"记一次小程序漏洞打包\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=1&sn=141b292fc69ff9d745e021ad98999ec2\",\n \"SRC挖掘 | fastjson反序列化漏洞实战\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=2&sn=a4481e4d2263583ccf6816d48497e8a7\",\n \"近期暗网 0day 售卖情报预警\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=3&sn=e70df2122c3094a8037fd3096b81ed74\",\n \"车载Android系统破解工具和漏洞挖掘浅析\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=4&sn=e6dd20d2247732b0e5e73f6e9ae93343\",\n \"坤舆 - 更高效的企业资产收集\": \"https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486620&idx=1&sn=29800656c4390f4137abb6b2c749fb2f\",\n \"IPv4 vs IPv6：你真的了解它们的区别吗？\": \"https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649465873&idx=1&sn=a97412aaab165218d45d90168d41eca5\",\n \"HVV 行动，项目招聘！！！\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NDQwMDY1Nw==&mid=2247486039&idx=1&sn=169dd0fec4d90cea1ab8738dbc051e35\",\n \"DeepSeek原理和落地应用\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655268998&idx=1&sn=fcd085d254c624b50fd88bcb942dfff6\",\n \"rust第二季-加密网络通信高级开发视频教程(2025最新)更新到第6节了\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247505344&idx=1&sn=6159cddf33ad74f1c82ee2098334b918\",\n \"漏洞预警 | VMware ESXi 存在缓冲区溢出漏洞（CVE-2025-22224）\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487022&idx=1&sn=be6d4d80fd50ee781458871cfc1eef6f\",\n \"深度伪造技术的滥用——网络安全的新挑战\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MjY5MDE4NA==&mid=2247486159&idx=1&sn=8ca047afb453ddd53926938b033f0279\"\n },\n \"Blog – Red Siege Information Security\": {\n \"Regex: Simplicity, Security, and Power\": \"https://redsiege.com/blog/2025/03/regex-simplicity-security-and-power/\"\n },\n \"Hacking Dream\": {\n \"Understanding Kerberos Authentication and its Attacks\": \"https://www.hackingdream.net/2025/03/understanding-kerberos-authentication-and-its-attacks.html\"\n },\n \"SpiderLabs Blog\": {\n \"The Russia-Ukraine Cyber War Part 3: Attacks on Telecom and Critical Infrastructure\": \"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/the-russia-ukraine-cyber-war-part-3-attacks-on-telecom-and-critical-infrastructure/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"Finding jwt tokens that lead to PII data leakage.\": \"https://infosecwriteups.com/finding-jwt-tokens-that-lead-to-pii-data-leakage-b047d45d97bf?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Able to create an account without a phone number. (unique bug)\": \"https://infosecwriteups.com/able-to-create-an-account-without-a-phone-number-unique-bug-1fe2d14b9d54?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Find new apex domains that are related to your bug bounty target.\": \"https://infosecwriteups.com/find-new-apex-domains-that-are-related-to-your-bug-bounty-target-a05fdcbf5875?source=rss----7b722bfd1b8d--bug_bounty\",\n \"A Logical Bug That Slipped Through\": \"https://infosecwriteups.com/a-logical-bug-that-slipped-through-792b90850e72?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Horizon3.ai\": {\n \"Identify Cybersecurity Risks at Scale to De-Risk M&A Transactions with Horizon3.ai’s NodeZero® Platform\": \"https://www.horizon3.ai/downloads/use-case/identify-cybersecurity-risks-at-scale-to-de-risk-ma-transactions-with-horizon3-ais-nodezero-platform/\"\n },\n \"Securelist\": {\n \"Undercover miner: how YouTubers get pressed into distributing SilentCryptoMiner as a restriction bypass tool\": \"https://securelist.com/silentcryptominer-spreads-through-blackmail-on-youtube/115788/\"\n },\n \"Didier Stevens\": {\n \"Update: zoneidentifier.exe Version 0.0.2\": \"https://blog.didierstevens.com/2025/03/05/update-zoneidentifier-exe-version-0-0-2/\"\n },\n \"Reverse Engineering\": {\n \"Zen and the Art of Microcode Hacking\": \"https://www.reddit.com/r/ReverseEngineering/comments/1j4cv9f/zen_and_the_art_of_microcode_hacking/\",\n \"GoStringUngarbler: Deobfuscating Strings in Garbled Binaries\": \"https://www.reddit.com/r/ReverseEngineering/comments/1j48mqn/gostringungarbler_deobfuscating_strings_in/\",\n \"Deobfuscation with rev.ng\": \"https://www.reddit.com/r/ReverseEngineering/comments/1j4bwc7/deobfuscation_with_revng/\"\n },\n \"Malwarebytes\": {\n \"I spoke to a task scammer. Here’s how it went\": \"https://www.malwarebytes.com/blog/news/2025/03/i-spoke-to-a-task-scammer-heres-how-it-went\",\n \"Android zero-day vulnerabilities actively abused. Update as soon as you can\": \"https://www.malwarebytes.com/blog/news/2025/03/android-zero-day-vulnerabilities-actively-abused-update-as-soon-as-you-can\"\n },\n \"绿盟科技技术博客\": {\n \"绿盟威胁情报周报2025年第08周（2025.02.24-2025.03.02）\": \"https://blog.nsfocus.net/2025-02-24-2025-03-02/\",\n \"Ollama配置不当未授权访问漏洞（CNVD-2025-04094）\": \"https://blog.nsfocus.net/cnvd-2025-04094/\",\n \"VMware ESXi&Workstation&Fusion多个高危漏洞 (CVE-2025-22224/CVE-2025-22225/CVE-2025-22226)\": \"https://blog.nsfocus.net/cve-2025-22224-cve-2025-22225-cve-2025-22226/\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"FreeBuf早报 | 2025 OWSAP LLM TOP10关键变化；社交媒体成恶意攻击主要目标\": \"https://www.freebuf.com/news/423637.html\",\n \"汇正财经广纳贤才：信息安全官，虚位以待！\": \"https://www.freebuf.com/jobs/423631.html\",\n \"近期暗网 0day 售卖情报预警\": \"https://www.freebuf.com/news/423624.html\",\n \"WordPress曝9.8分高危漏洞，可执行远程代码攻击\": \"https://www.freebuf.com/vuls/423693.html\",\n \"CISA警告VMware漏洞正遭积极利用，敦促企业立即修补\": \"https://www.freebuf.com/vuls/423684.html\",\n \"Vim 编辑器漏洞：恶意 TAR 文件触发代码执行风险\": \"https://www.freebuf.com/vuls/423695.html\"\n },\n \"安全牛\": {\n \"智能化安全运营时代，安全分析师需要扮演好三个新角色\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135371&idx=1&sn=09830c406c7369f6c1ef77590b1ee2f2&chksm=bd15ad588a62244e2fc1b6285ef43be628c0b8a2e8e98cc233abc63ecdeee97cec1cda980986&scene=58&subscene=0#rd\",\n \"工信部CSTIS提醒：防范Murdoc_Botnet僵尸网络的风险；谷歌修复两个已被利用的Android零日漏洞 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135371&idx=2&sn=6a4ed653f5f735d427b6b4b80a73c605&chksm=bd15ad588a62244e67295291773f1dfcf10039ea37bc7ec7363949d7f90676247858568f2c95&scene=58&subscene=0#rd\"\n },\n \"HackerNews\": {\n \"谷歌推出“屏蔽邮件”功能，用户可隐藏邮箱地址\": \"https://hackernews.cc/archives/57685\",\n \"新型 Eleven11bot 僵尸网络感染 86,000 台设备，用于 DDoS 攻击\": \"https://hackernews.cc/archives/57681\",\n \"思科、日立、微软和 Progress 漏洞遭积极利用，CISA 发出警报\": \"https://hackernews.cc/archives/57679\",\n \"中美超过4,000个ISP IP地址遭暴力破解攻击，黑客植入恶意软件\": \"https://hackernews.cc/archives/57677\",\n \"疑似伊朗黑客利用受感染的印度公司邮箱攻击阿联酋航空业\": \"https://hackernews.cc/archives/57670\",\n \"Broadcom 发布紧急补丁修复 VMware 安全漏洞\": \"https://hackernews.cc/archives/57668\",\n \"研究人员将 CACTUS 勒索软件的战术与前 Black Basta 附属机构联系起来\": \"https://hackernews.cc/archives/57665\"\n },\n \"安全分析与研究\": {\n \"UEFI BootKit恶意软件狩猎技术\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490899&idx=1&sn=ac54b3c578d2f70f2c7c75b4609c4906&chksm=902fb27ba7583b6de45783544044400daffb356939e6e5bbd3a7d5c45218f14bd53d2a58a402&scene=58&subscene=0#rd\"\n },\n \"绿盟科技CERT\": {\n \"【漏洞通告】VMware ESXi&Workstation&Fusion多个高危漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489028&idx=1&sn=2093ce6762f3251c9e9d9b6de632ad98&chksm=c2c6410ff5b1c819362fdf10a6e0acbea0001f6ca2dd2cdbac4ca1496af3aeda46869a3fa4dc&scene=58&subscene=0#rd\",\n \"【已支持识别检测】Ollama配置不当未授权访问漏洞（CNVD-2025-04094）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489028&idx=2&sn=acdcd9105653b3dfe1eb03d48cf3bdd3&chksm=c2c6410ff5b1c819fcc80c2c0b6d4fa2175d93cb297e3e64fdb828b5d143815241270699ea7e&scene=58&subscene=0#rd\"\n },\n \"奇安信 CERT\": {\n \"【已发现在野利用】VMware ESXi多个高危漏洞安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503073&idx=1&sn=6769c38d6b37afb2cecf671963dff742&chksm=fe79e879c90e616f8d3bc3f16b6ef82738e3618fb4be9584f97a3f0b6c743197970c469212d0&scene=58&subscene=0#rd\"\n },\n \"红日安全\": {\n \"hvv时间已来？可以参加的小伙伴们抓紧时间填报信息了\": \"https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851814&idx=1&sn=add5eaf6c4687f3fd9c5de8f4a9b2142&chksm=f3e4e925c4936033dc1e53d34158b42cff2eef78c2dfca7ffb0d85f3dbe12add485a763a1fd9&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"AI换脸攻击激增300%！你视频会议里的领导同事可能都是伪造的\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513884&idx=1&sn=d0516b584c52d648aeaf38847d9449fb&chksm=ebfaf03cdc8d792aca4d2afe5477c35c5d867fb8221fad6f636899956a4a6fe89f15de3a9181&scene=58&subscene=0#rd\",\n \"特朗普网络团队任命预示美国政府将转向进攻性网络政策\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513884&idx=2&sn=54105096f2781e325925f6d29c22481f&chksm=ebfaf03cdc8d792a3052b190ce1c1f1a38b006b342aec29475948ee52952c655bb0b30870700&scene=58&subscene=0#rd\"\n },\n \"长亭安全应急响应中心\": {\n \"【风险提示】VMware ESXi新型漏洞利用链已出现在野利用\": \"https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492725&idx=1&sn=de0f08e06363a7386f762ff89911fa2f&chksm=96f7fb18a180720ebf4fc3a9847cbae47c513332d35b81c4111e4bb0b4cbbdfc8b40446bbfb0&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \".NET 实战中使用 Sharp4FUAC 通过 Windows 白名单文件绕过 UAC 实现本地权限提升\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499055&idx=1&sn=9774cc140fd8036509026fd4f651e291&chksm=fa5953c2cd2edad4f7ad902f6db3030a1c38dc3448adf89e328573959813ede260b1cfc28022&scene=58&subscene=0#rd\",\n \".NET 内网攻防实战电子报刊\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499055&idx=2&sn=33bd494fa1a2ae6e8fd46bbdf1f97623&chksm=fa5953c2cd2edad46803a2311a5b86f83803307fd2f14d710fab25105ad43a52b0fbe472bca2&scene=58&subscene=0#rd\",\n \"2025年2月份红队武器库和资源汇总\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499055&idx=3&sn=e8afa902aa37df3a81977d2c668b57d6&chksm=fa5953c2cd2edad40887201edf2391f19053ae6cf7222e5fdac2ab8278001cf6a4a01a02b154&scene=58&subscene=0#rd\"\n },\n \"慢雾科技\": {\n \"浏览器钱包扩展突遭损坏，如何化险为夷？\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501374&idx=1&sn=81df5175deaa669dbde4c2ceadf8ca9d&chksm=fddeb8b9caa931af5d15205313b3ed53bdbfc446c9a96aaaf6d87ac587f8dfe4d254794d80ae&scene=58&subscene=0#rd\"\n },\n \"天御攻防实验室\": {\n \"军事专家建议组建俄罗斯网络部队\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486291&idx=1&sn=de04a9abc8fc3aa3cdbf901068da56e2&chksm=fb04c83bcc73412d2290840b2decb87e3d6b715c84faf36f0099426ebf7f13685a6dc571f582&scene=58&subscene=0#rd\"\n },\n \"代码卫士\": {\n \"博通修复3个已遭利用的 VMware 0day 漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522410&idx=1&sn=0f5b704ab0b14c7dd3262ffbc0697b07&chksm=ea94a900dde32016fa789ad6e1cbd205eab3afe70049ad11ab8634e97423249682ce8b5d438a&scene=58&subscene=0#rd\",\n \"思科： Webex 漏洞可导致凭据遭远程访问\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522410&idx=2&sn=0aef267bcd2c2f831a7dedbda98b4668&chksm=ea94a900dde32016f9902d5634144e61cbf559478eaf697cb00cf146b7b4de1bae7a4526be98&scene=58&subscene=0#rd\"\n },\n \"全频带阻塞干扰\": {\n \"SECURITY SHOW 2025 | 揭秘日本最大安防展\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648958466&idx=1&sn=7b2e4f2f3053d9d6ad182363ec4862f9&chksm=f09ef17dc7e9786b87a330eb3d1098ff4540be3c78dd7e66e953be27dd35326a5227fba797be&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"独家揭秘：如何推进人工智能驱动的安全创新\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537838&idx=1&sn=ac365e194b53bef7a8f6658f4a5ddffd&chksm=c1442613f633af05d5e21efd4e3a12b6b640073e2136d7f0fc15ec732b67384639aef729e20d&scene=58&subscene=0#rd\",\n \"直播预约：数安三人行——Deep Seek爆火背后，大模型如何重塑安全?\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537838&idx=2&sn=efd860d89d0249828150599857bc2d72&chksm=c1442613f633af05e3ae265aaba00be2c68cc8fd8b8a8cbabd1cc5e0463f22ec1bedd4ba76ef&scene=58&subscene=0#rd\"\n },\n \"网络空间安全科学学报\": {\n \"“网络信息系统安全性评测”专题征稿\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505183&idx=1&sn=a0ca19e256ff424a866f8c5d88f6d21c&chksm=e9bfc1a1dec848b706502326fffc620a561bde0f993bc219f060184e064668553ec89c1b7719&scene=58&subscene=0#rd\",\n \"学术前沿 | 一种安全的集群无线网络环境下密钥协商协议\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505183&idx=2&sn=7264c046dbd8515e33d7d93db259c5d5&chksm=e9bfc1a1dec848b76f29f710e1b0d140e5d3e510eb1f8046280b032eafc80ad960afa3300bae&scene=58&subscene=0#rd\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 阅读推荐 2025-03-05 LLM是安全的银弹吗？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499858&idx=1&sn=3ec725428dd98d800860265277c0b941&chksm=c063ee8bf714679df279af8d55dad7ed13acf2739b35dc48f07af3f3851424d5eff24507a663&scene=58&subscene=0#rd\"\n },\n \"威胁棱镜\": {\n \"2024 年 GreyNoise 在野大规模漏洞利用报告\": \"https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247487732&idx=1&sn=e92589cbe79e05ee823759d988b688f9&chksm=c1e9e738f69e6e2e78755af17ee489b1e7fb96a891bbcfce9bf45ac7f7c6592147fafe36832c&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】最新黑产技术曝光，只需19分钟即可劫持AI大模型\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=1&sn=d8c361d857947b4f7ddd18672093ed23&chksm=f36e75fac419fcec9b98a65660841511b124c3eea8dcdc951f1a23d09cdb9b820e5dcce820c0&scene=58&subscene=0#rd\",\n \"【安全圈】全球 49,000 多个门禁管理系统存在巨大安全漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=2&sn=cfbab77073fc932a8b466a9586809efc&chksm=f36e75fac419fcecbf602c6a23698a377a6e7431fbf29023fffe68d6c04af74eecaea10c2e0a&scene=58&subscene=0#rd\",\n \"【安全圈】GitHub 大规模恶意软件行动：Redox Stealer盯上游戏玩家与盗版用户\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=3&sn=b6b1eda81cdc868cb996830336a5f909&chksm=f36e75fac419fcece71eeed0e3c426419606644ca9724f292236889f8a42504a83eed17cfba9&scene=58&subscene=0#rd\",\n \"【安全圈】320万用户因恶意浏览器扩展程序遭信息泄露\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=4&sn=101d9a5f9ab1488a2654bb7bdb7ebdf5&chksm=f36e75fac419fcecce7874fa3b39840d9b7cdcb5effc01bffe605c6bb3411b11257c19ce1742&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"从逆向还原的角度探讨x86与x64的异常：32位3代异常处理还原（VS2019）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590532&idx=1&sn=bf6d8a881eb64cc3fe35157d1a015c23&chksm=b18c2dce86fba4d85a84d5d8063ab44a551c4e79c2eb39cb1aec64eb908aa9d6dc372fa01b42&scene=58&subscene=0#rd\",\n \"黑客利用暴露的云凭证，仅19分钟劫持AI大模型\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590532&idx=2&sn=ecd38eda9e2e4bd27eacd184b6bc7d96&chksm=b18c2dce86fba4d87754b0dcc27e9a9d76c6ba04e788bdf59ddaba11d33aa5413536bdc0a1ec&scene=58&subscene=0#rd\",\n \"第22周更新： 反序列化漏洞（三）ThinkPHP反序列链分析 | CTF训练营-Web篇\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590532&idx=3&sn=64c9bf27d9ed81ec82e0506b47b8d3cc&chksm=b18c2dce86fba4d89b9c96e5a591d6a3253d659e5c9cfe03f638e6fda35228fc96840fd97a35&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"「职」为你来||嘶吼·来个Offer网安人才招聘社群，正式上线~~\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581408&idx=1&sn=648391a112b5b6a7674f1784e9a1e965&chksm=e9146edade63e7cc69d84a916d3f603dfb539d583b78703541d118f00ed8f1befa044737fa26&scene=58&subscene=0#rd\",\n \"新型恶意软件猛攻 4000 多家 ISP，从而实现远程入侵\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581408&idx=2&sn=4bc77c23c2146af863386ddf099196b4&chksm=e9146edade63e7cce4f3b1292059d9a2917d16de9b8c9a65ee7ed15e6d82a8cbe75e29b0552a&scene=58&subscene=0#rd\"\n },\n \"XCTF联赛\": {\n \"TPCTF 2025｜倒计时3天！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247515508&idx=1&sn=02603364959caf80ad3d90bd19669d45&chksm=a6874f4e91f0c658727b8298731c7ab6a76246d5105bc21656c30f67f8c7575e09680ae61fca&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"不仅有能用国补的 MacBook Air，还有模型训练神器 Mac Studio\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075084&idx=1&sn=8c796ab839df6e22b2d88af232c3cec4&chksm=7e57cb3a4920422ccd9736d29cb01e3d0a99928c8658dd26edec1a0a1893e43c0759b85ada5c&scene=58&subscene=0#rd\",\n \"月薪 5000，我给人形机器人当「老师」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075060&idx=1&sn=548b9d389884e09a2b97a659c097ce80&chksm=7e57cbc2492042d4d63787f577d4bcd2a094b304a8acc4e37387492495799f77230e89f91250&scene=58&subscene=0#rd\",\n \"字节启动新一轮股票回购，估值增至 3150 亿美元；雷军提议优化新能源车牌；北京举办首届人形机器人马拉松｜极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075018&idx=1&sn=9243bf414e1b91aae81e75b1c31f3969&chksm=7e57cbfc492042eacf8d98165779353cc104bdaca483248f74b463d7cfa5d3c1a373c3894f09&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"内部邮件截获暴露俄罗斯联邦第243军区重大隐患\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560164&idx=1&sn=ca65cf4a41ce258fc9ab6727ac1147ec&chksm=871178efb066f1f928cdc615843fd4cf7a9fc716cd28d3f223887af893b961a515b242b41a5d&scene=58&subscene=0#rd\",\n \"蒙古国媒体舆论导向转变对我形象及对外传播的影响与应对\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560164&idx=2&sn=6257004cfaeae6e539bdce175857cae2&chksm=871178efb066f1f9349773d3067ea54755683ecc20d6c55309beb1c90e754b14247a271eaff5&scene=58&subscene=0#rd\"\n },\n \"京东安全应急响应中心\": {\n \"【招聘】京东集团信息安全部诚邀各路英雄加入~~\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727844182&idx=1&sn=e20a71c9e1db4610ef4b27ddb4a1318c&chksm=80504edeb727c7c8154c5b3e5fcdcf1ef620e4f5adccfef95d691ad65b468dde6d214f7e8b44&scene=58&subscene=0#rd\"\n },\n \"信息安全国家工程研究中心\": {\n \"【二十四节气】惊蛰 | 微雨众卉新，一雷惊蛰始。\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498982&idx=1&sn=8ebb87255eb8a623e12a0965736544d7&chksm=feb67df5c9c1f4e3eae7e2ab754bb38f5857db274517388ae13b12b0e9381c8d4dd466f28cd8&scene=58&subscene=0#rd\"\n },\n \"字节跳动技术团队\": {\n \"285 学科全覆盖！豆包大模型团队开源基准测试集 SuperGPQA\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513660&idx=1&sn=df5fb0b249a74acedd46c53acc2031ea&chksm=e9d37ddedea4f4c85d9f6e3e65cceef63401ef6af8c64f93a3156e9d103750719b0c39b14728&scene=58&subscene=0#rd\"\n },\n \"黑伞安全\": {\n \"【风险提示】VMware ESXi新型漏洞利用链已出现在野利用\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489754&idx=1&sn=57c283962096cbe0ba12fd8927bf9ccf&chksm=fb029582cc751c943a4e53c5a0a3b96e80459f0cb16241c005be5e0baaf9eb80a742f2e3d548&scene=58&subscene=0#rd\",\n \"Deepseek助力职场办公效能提升课程\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489754&idx=2&sn=db20737721bcb2b35ab909435bf9361f&chksm=fb029582cc751c947abd3e8a0afdc4dc930e0b06ef91cabe77fb6687905a42b660f2aa37f00b&scene=58&subscene=0#rd\"\n },\n \"恒脑与AI\": {\n \"AI数据污染危机：1.2 万个敏感信息藏在训练数据里！\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496727&idx=1&sn=8695d84c49f42fa2437afa03b34d1c47&chksm=e9fd6986de8ae09031a2407b290039bbdbb278ab755cc0646d71cfc926f7b3a255b08a3dacc6&scene=58&subscene=0#rd\"\n },\n \"复旦白泽战队\": {\n \"成果分享｜ 基于包管理平台的黑帽搜索引擎优化\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247493225&idx=1&sn=530e028915257a6cc30176eb962ebdb7&chksm=fde86217ca9feb01ac5ce8a574c5bdc14b8fb393da7fe2b5c208e65646abaf853004108da14e&scene=58&subscene=0#rd\"\n },\n \"墨菲安全\": {\n \"软件供应链安全行业大佬闭门交流会\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488096&idx=1&sn=edf79fed7f7ec855c8897bfb9dacf413&chksm=c13d7158f64af84eafbe51b0adee58edcfe4f566ebcdd04f1e1cb14d623922ff9e4da5d18e5e&scene=58&subscene=0#rd\"\n },\n \"Beacon Tower Lab\": {\n \"漏洞预警 | VMware ESXi 存在缓冲区溢出漏洞（CVE-2025-22224）\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487022&idx=1&sn=be6d4d80fd50ee781458871cfc1eef6f&chksm=c22296d7f5551fc1e5006b6bc19fb3b5655ab633f1b0815aae458952101c37baae87d8f56aac&scene=58&subscene=0#rd\"\n },\n \"深信服千里目安全技术中心\": {\n \"【漏洞通告】VMware ESXi 等多款产品缓冲区溢出漏洞(CVE-2025-22224)\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524017&idx=1&sn=1eee483c71f1b398696a1d224d767b12&chksm=ce4615a1f9319cb7c52e9731ee8e24dcd9f34b47a048b0a5ff2af0f2bee17afdd1723624ae07&scene=58&subscene=0#rd\",\n \"网络安全信息与动态周报2025年第8期（2月17日-2月23日）\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524017&idx=2&sn=b8f4ca73f0de7cfa0a633ae874442f1a&chksm=ce4615a1f9319cb7cb7d4565af0f113ed51f44565a727dc28232d5d040d9fae39a5160a3fe28&scene=58&subscene=0#rd\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #767: Forensic Lunch Test Kicthen - unit tests and documentation\": \"https://www.hecfblog.com/2025/03/daily-blog-767-forensic-lunch-test.html\"\n },\n \"360数字安全\": {\n \"《人民政协报》报道：以模制模，重塑人工智能安全新范式\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579797&idx=1&sn=ebaf3c9ca6017484870873e659a905ce&chksm=9f8d289da8faa18b2af5ae32ef5bfd4f1419036e392f416f3ec721c61b1860130720f16f7c6d&scene=58&subscene=0#rd\"\n },\n \"迪哥讲事\": {\n \"JS利用\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497222&idx=1&sn=0be4689e2b33beb274758f53874dbdbe&chksm=e8a5fc65dfd2757343626ee228a66b830d831717698d39266b701d9238201a59f07fe2945e54&scene=58&subscene=0#rd\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Così Black Basta e Cactus sfruttano Teams e OneDrive per infiltrarsi nelle reti aziendali\": \"https://www.cybersecurity360.it/news/cosi-black-basta-e-cactus-sfruttano-teams-e-onedrive-per-infiltrarsi-nelle-reti-aziendali/\",\n \"Federal cyber firings imperil efforts to stop Chinese hacking campaigns, experts tell lawmakers\": \"https://therecord.media/federal-cyber-firings-cisa-workforce\",\n \"Two decades of visitor data at the Toronto Zoo stolen in cyberattack\": \"https://therecord.media/toronto-zoo-warns-decades-cyberattack\",\n \"Justice Department Charges 12 Chinese Contract Hackers and Law Enforcement Officers in Global Computer Intrusion Campaigns\": \"https://flashpoint.io/blog/justice-department-charges-12-chinese-contract-hackers-and-law-enforcement-officers-in-global-computer-intrusion-campaigns/\",\n \"Open-source tool 'Rayhunter' helps users detect Stingray attacks\": \"https://www.bleepingcomputer.com/news/security/open-source-tool-rayhunter-helps-users-detect-stingray-attacks/\",\n \"DOJ to appeal court decision ruling broad cell phone tower searches are unconstitutional\": \"https://therecord.media/doj-to-appeal-cell-tower-ruling\",\n \"Catalan court says NSO Group executives can be charged in spyware investigation\": \"https://techcrunch.com/2025/03/05/catalan-court-says-nso-group-executives-can-be-charged-in-spyware-investigation/\",\n \"US charges Chinese nationals in cyberattacks on Treasury, dissidents and more\": \"https://therecord.media/doj-charges-chinese-nationals-isoon-cyberattacks-treasury\",\n \"Silk Typhoon hackers now target IT supply chains to breach networks\": \"https://www.bleepingcomputer.com/news/security/silk-typhoon-hackers-now-target-it-supply-chains-to-breach-networks/\",\n \"Rural hospitals in US need to invest at least $70 million in cybersecurity, Microsoft finds\": \"https://therecord.media/rural-hospitals-need-millions-cyber\",\n \"Trump orders halt to intelligence sharing with Ukraine, CIA director says\": \"https://therecord.media/trump-halt-intel-sharing-ukraine\",\n \"US charges Chinese hackers linked to critical infrastructure breaches\": \"https://www.bleepingcomputer.com/news/security/us-charges-chinese-hackers-linked-to-critical-infrastructure-breaches/\",\n \"La minaccia ibrida fa paura e l’Italia è nel mirino: il rapporto degli 007\": \"https://www.cybersecurity360.it/news/la-minaccia-ibrida-fa-paura-e-litalia-e-nel-mirino-il-rapporto-degli-007/\",\n \"BadBox malware disrupted on 500K infected Android devices\": \"https://www.bleepingcomputer.com/news/security/badbox-malware-disrupted-on-500k-infected-android-devices/\",\n \"DORA, si apre la partita dell’attuazione: ecco come\": \"https://www.cybersecurity360.it/news/dora-si-apre-la-partita-dellattuazione-ecco-come/\",\n \"Ukraine's intel service honors civilian hackers for the first time with military award\": \"https://therecord.media/ukraine-intel-service-honors-civilian-hackers-with-military-award\",\n \"Look up: The new frontier of cyberthreats is in the sky\": \"https://www.bleepingcomputer.com/news/security/look-up-the-new-frontier-of-cyberthreats-is-in-the-sky/\",\n \"YouTube warns of AI-generated video of its CEO used in phishing attacks\": \"https://www.bleepingcomputer.com/news/security/youtube-warns-of-ai-generated-video-of-its-ceo-used-in-phishing-attacks/\",\n \"Gli USA sospendono le operazioni cyber contro la Russia: l’impatto sulla sicurezza nazionale\": \"https://www.cybersecurity360.it/news/sospensione-usa-delleoperazioni-informatiche-contro-la-russia-limpatto-sulla-sicurezza-nazionale/\",\n \"Gli scammer di PayPal sfruttano Docusign per inviare email di phishing\": \"https://www.securityinfo.it/2025/03/05/gli-scammer-di-paypal-sfruttano-docusign-per-inviare-email-di-phishing/\",\n \"Toronto Zoo shares update on last year's ransomware attack\": \"https://www.bleepingcomputer.com/news/security/toronto-zoo-shares-update-on-last-years-ransomware-attack/\",\n \"ACSC Warns of Increasing Ransomware Risks and Offers Key Protection Tips\": \"https://cyble.com/blog/acsc-warns-of-ransomware-risks/\",\n \"February Sees Record-Breaking Ransomware Attacks, New Data Shows\": \"https://cyble.com/blog/february-sees-ransomware-attacks-new-data-shows/\",\n \"November 2024 Cyber Attacks Statistics\": \"https://www.hackmageddon.com/2025/03/05/november-2024-cyber-attacks-statistics/\",\n \"How Transport Company Gets Real-Time IOC and IOB Updates on Active Cyber Attacks\": \"https://any.run/cybersecurity-blog/how-transport-company-monitors-threats/\",\n \"!exploitable Episode Two - Enter the Matrix\": \"https://blog.doyensec.com/2025/02/27/exploitable-sshd.html\",\n \"Undercover miner: how YouTubers get pressed into distributing SilentCryptoMiner as a restriction bypass tool\": \"https://securelist.com/silentcryptominer-spreads-through-blackmail-on-youtube/115788/\",\n \"La complessa geopolitica delle VPN\": \"https://www.guerredirete.it/la-complessa-geopolitica-delle-vpn/\",\n \"Detection engineering at scale: one step closer (part three)\": \"https://blog.sekoia.io/detection-engineering-at-scale-one-step-closer-part-three/\",\n \"Strategia Zero Trust, proviamo a capire meglio di cosa si tratta\": \"https://www.cybersecurity360.it/outlook/strategia-zero-trust-proviamo-a-capire-meglio-di-cosa-si-tratta/\",\n \"EvilLoader: Unpatched Telegram for Android Vulnerability Disclosed\": \"https://www.mobile-hacker.com/2025/03/05/evilloader-unpatched-telegram-for-android-vulnerability-disclosed/\",\n \"Tales of Advertising Abuse: Affiliate Brand Bidding\": \"https://bfore.ai/tales-of-advertising-abuse-affiliate-brand-bidding/\",\n \"Fake BianLian ransom notes mailed to US CEOs in postal mail scam\": \"https://www.bleepingcomputer.com/news/security/fake-bianlian-ransom-notes-mailed-to-us-ceos-in-postal-mail-scam/\"\n },\n \"DEF CON Announcements!\": {\n \"DEF CON 33 Theme Drop!\": \"https://defcon.org/html/defcon-33/dc-33-theme.html\",\n \"Pre-reg for DEF CON 33 opens 3/5!\": \"https://shop.defcon.org/products/def-con-33-ticket\"\n },\n \"Securityinfo.it\": {\n \"Gli scammer di PayPal sfruttano Docusign per inviare email di phishing\": \"https://www.securityinfo.it/2025/03/05/gli-scammer-di-paypal-sfruttano-docusign-per-inviare-email-di-phishing/?utm_source=rss&utm_medium=rss&utm_campaign=gli-scammer-di-paypal-sfruttano-docusign-per-inviare-email-di-phishing\"\n },\n \"bellingcat\": {\n \"The Story of a Storm – Part 1: Visualising Climate Data with NASA’s Giovanni Tool\": \"https://www.bellingcat.com/resources/how-tos/2025/03/05/the-story-of-a-storm-part-1-visualising-climate-data-with-nasas-giovanni-tool/\"\n },\n \"Arturo Di Corinto\": {\n \"Stipendi non pagati: giornalisti Dire in sciopero. Il comunicato\": \"https://dicorinto.it/associazionismo/stipendi-non-pagati-giornalisti-dire-domani-in-sciopero-il-comunicato/\"\n },\n \"ICT Security Magazine\": {\n \"Cybersecurity Italia 2025: Minacce APT, Ransomware e Attacchi Statali in aumento secondo la Relazione sulla Sicurezza Nazionale\": \"https://www.ictsecuritymagazine.com/notizie/cybersecurity-italia-2025/\",\n \"L’attacco Bybit, il paradosso delle soluzioni decentralizzate in un’infrastruttura centralizzata\": \"https://www.ictsecuritymagazine.com/articoli/attacco-bybit-cybercrime/\",\n \"IA Gen: Potenziali Strategie di Mitigazione\": \"https://www.ictsecuritymagazine.com/articoli/mitigazione-ia-gen/\"\n },\n \"Desync InfoSec\": {\n \"reCAPTCHA Phishing: Ι Am Nοt A Rοbοt, Are You?\": \"https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489202&idx=1&sn=089ad3e5762ec80d69be559db94b4bec&chksm=c27f651cf508ec0a0cb5d6cafbeeff4769af89db36444bd9393b4e78aa873845e78d2a4fa246&scene=58&subscene=0#rd\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"ISC Stormcast For Wednesday, March 5th, 2025 https://isc.sans.edu/podcastdetail/9350, (Wed, Mar 5th)\": \"https://isc.sans.edu/diary/rss/31740\"\n },\n \"Schneier on Security\": {\n \"CISA Identifies Five New Vulnerabilities Currently Being Exploited\": \"https://www.schneier.com/blog/archives/2025/03/cisa-identifies-five-new-vulnerabilities-currently-being-exploited.html\"\n },\n \"Posts By SpecterOps Team Members - Medium\": {\n \"Fueling the Fight Against Identity Attacks\": \"https://posts.specterops.io/fueling-the-fight-against-identity-attacks-1c899f7356e4?source=rss----f05f8696e3cc---4\"\n },\n \"Rasta Mouse\": {\n \"Kerberoasting w/o the TGS-REQ\": \"https://rastamouse.me/kerberoasting-without-tgs-reqs/\"\n },\n \"Deep Web\": {\n \"Sites on dark.fail on january 2023\": \"https://www.reddit.com/r/deepweb/comments/1j44b4j/sites_on_darkfail_on_january_2023/\",\n \"What's a good site for I.d. number generator?\": \"https://www.reddit.com/r/deepweb/comments/1j3vtsr/whats_a_good_site_for_id_number_generator/\"\n },\n \"Security Affairs\": {\n \"China-linked APT Silk Typhoon targets IT Supply Chain\": \"https://securityaffairs.com/174962/apt/china-linked-apt-silk-typhoon-targets-it-supply-chain.html\",\n \"Hunters International gang claims the theft of 1.4 TB of data allegedly stolen from Tata Technologies\": \"https://securityaffairs.com/174953/data-breach/ransomware-group-hunters-international-claims-to-have-hacked-tata-technologies.html\",\n \"New Eleven11bot botnet infected +86K IoT devices\": \"https://securityaffairs.com/174941/malware/new-eleven11bot-botnet-infected-86k-iot-devices.html\",\n \"Polish Space Agency POLSA disconnected its network following a cyberattack\": \"https://securityaffairs.com/174930/security/polish-space-agency-polsa-disconnected-its-network-following-a-cyberattack.html\",\n \"U.S. CISA adds Linux kernel and VMware ESXi and Workstation flaws to its Known Exploited Vulnerabilities catalog\": \"https://securityaffairs.com/174923/security/u-s-cisa-adds-linux-kernel-and-vmware-esxi-and-workstation-flaws-to-its-known-exploited-vulnerabilities-catalog.html\"\n },\n \"Information Security\": {\n \"Ever Noticed How No One Talks About Burnout in Cybersecurity?\": \"https://www.reddit.com/r/Information_Security/comments/1j41km1/ever_noticed_how_no_one_talks_about_burnout_in/\",\n \"Malware Traffic Analysis in Linux: A Practical Guide with Examples\": \"https://www.reddit.com/r/Information_Security/comments/1j44jjc/malware_traffic_analysis_in_linux_a_practical/\"\n },\n \"Computer Forensics\": {\n \"What do you do to help you not struggle finding answers?\": \"https://www.reddit.com/r/computerforensics/comments/1j3t8m4/what_do_you_do_to_help_you_not_struggle_finding/\",\n \"VMWare Workstation / Axiom Process\": \"https://www.reddit.com/r/computerforensics/comments/1j3zuh9/vmware_workstation_axiom_process/\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"How Did \\\"Cloaked\\\" Do This? You call and they respond with the last 4 digits of your SSN. Any data vendors come to mind?\": \"https://www.reddit.com/r/blackhat/comments/1j45v03/how_did_cloaked_do_this_you_call_and_they_respond/\",\n \"Need gmail accounts\": \"https://www.reddit.com/r/blackhat/comments/1j42meg/need_gmail_accounts/\"\n },\n \"Social Engineering\": {\n \"Psyops EXPOSED: Watch How They Try To Manipulate You!\": \"https://www.reddit.com/r/SocialEngineering/comments/1j3rahv/psyops_exposed_watch_how_they_try_to_manipulate/\"\n },\n \"Deeplinks\": {\n \"Trump Calls On Congress To Pass The “Take It Down” Act—So He Can Censor His Critics\": \"https://www.eff.org/deeplinks/2025/03/trump-calls-congress-pass-overbroad-take-it-down-act-so-he-can-use-it-censor\"\n },\n \"Graham Cluley\": {\n \"Cactus ransomware: what you need to know\": \"https://www.tripwire.com/state-of-security/cactus-ransomware-what-you-need-know\",\n \"Fake police call cryptocurrency investors to steal their funds\": \"https://www.bitdefender.com/en-us/blog/hotforsecurity/fake-police-call-cryptocurrency-investors-to-steal-their-funds\"\n },\n \"The Hacker News\": {\n \"China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access\": \"https://thehackernews.com/2025/03/china-linked-silk-typhoon-expands-cyber.html\",\n \"Defending against USB drive attacks with Wazuh\": \"https://thehackernews.com/2025/03/defending-against-usb-drive-attacks.html\",\n \"Dark Caracal Uses Poco RAT to Target Spanish-Speaking Enterprises in Latin America\": \"https://thehackernews.com/2025/03/dark-caracal-uses-poco-rat-to-target.html\",\n \"Google Rolls Out AI Scam Detection for Android to Combat Conversational Fraud\": \"https://thehackernews.com/2025/03/google-rolls-out-ai-scam-detection-for.html\",\n \"Chinese APT Lotus Panda Targets Governments With New Sagerunex Backdoor Variants\": \"https://thehackernews.com/2025/03/chinese-apt-lotus-panda-targets.html\",\n \"Identity: The New Cybersecurity Battleground\": \"https://thehackernews.com/2025/03/identity-new-cybersecurity-battleground.html\",\n \"Seven Malicious Go Packages Found Deploying Malware on Linux and macOS Systems\": \"https://thehackernews.com/2025/03/seven-malicious-go-packages-found.html\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"EvilLoader: Yesterday was published PoC for unpatched Vulnerability affecting Telegram for Android\": \"https://www.reddit.com/r/netsec/comments/1j3y1kl/evilloader_yesterday_was_published_poc_for/\",\n \"Case Study: Traditional CVSS scoring missed this actively exploited vulnerability (CVE-2024-50302)\": \"https://www.reddit.com/r/netsec/comments/1j3tvof/case_study_traditional_cvss_scoring_missed_this/\",\n \"Multiple backdoors injected using frontend JS\": \"https://www.reddit.com/r/netsec/comments/1j454ff/multiple_backdoors_injected_using_frontend_js/\",\n \"Case Study: Analyzing macOS IONVMeFamily Driver Denial of Service Issue\": \"https://www.reddit.com/r/netsec/comments/1j42l89/case_study_analyzing_macos_ionvmefamily_driver/\",\n \"New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails\": \"https://www.reddit.com/r/netsec/comments/1j3riyc/new_method_to_leverage_unsafe_reflection_and/\",\n \"Understanding and Mitigating TOCTOU Vulnerabilities in C# Applications\": \"https://www.reddit.com/r/netsec/comments/1j42koq/understanding_and_mitigating_toctou/\"\n },\n \"Your Open Hacker Community\": {\n \"Technical breakdown of notable cyber attack\": \"https://www.reddit.com/r/HowToHack/comments/1j44b0m/technical_breakdown_of_notable_cyber_attack/\",\n \"NOC Analyst wanting to get into Hacking\": \"https://www.reddit.com/r/HowToHack/comments/1j4c7bx/noc_analyst_wanting_to_get_into_hacking/\",\n \"How to pentest\": \"https://www.reddit.com/r/HowToHack/comments/1j4ax83/how_to_pentest/\",\n \"Ethical Question\": \"https://www.reddit.com/r/HowToHack/comments/1j4e49e/ethical_question/\",\n \"Hey everyone I'm a beginner how do i start (wannabe a white hat hacker)\": \"https://www.reddit.com/r/HowToHack/comments/1j4e689/hey_everyone_im_a_beginner_how_do_i_start_wannabe/\",\n \"RAR5 encrypted .rar file’s password forgot\": \"https://www.reddit.com/r/HowToHack/comments/1j3xfoa/rar5_encrypted_rar_files_password_forgot/\",\n \"Recover Twitter Account\": \"https://www.reddit.com/r/HowToHack/comments/1j40uza/recover_twitter_account/\",\n \"How do you ask a question?\": \"https://www.reddit.com/r/HowToHack/comments/1j3xc8d/how_do_you_ask_a_question/\",\n \"Can I hack an email?\": \"https://www.reddit.com/r/HowToHack/comments/1j3x7h2/can_i_hack_an_email/\",\n \"[ Removed by Reddit ]\": \"https://www.reddit.com/r/HowToHack/comments/1j3w711/removed_by_reddit/\",\n \"Question\": \"https://www.reddit.com/r/HowToHack/comments/1j3tnu0/question/\",\n \"I wanna get into hacking\": \"https://www.reddit.com/r/HowToHack/comments/1j3qqgg/i_wanna_get_into_hacking/\",\n \"Where can i find marketplace to buy cheats , for fps games like pub G , free fire ?\": \"https://www.reddit.com/r/HowToHack/comments/1j3s232/where_can_i_find_marketplace_to_buy_cheats_for/\"\n }\n}"}, "aedaebcc7e63e85c869fe33950341c4d7a99888d": {"t": 1785772258.5124168, "n": 45760, "h": "d563061e4f6963af", "c": "{\n \"Trustwave Blog\": {\n \"The Microsoft Security Score: The Future Benchmark of Enterprise Security and Trust\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/the-microsoft-security-score-the-future-benchmark-of-enterprise-security-and-trust/\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2025-03-05 Review\": \"http://www.sec-wiki.com/?2025-03-05\"\n },\n \"Security Boulevard\": {\n \"Ransomware Attack Ends a 150 Year Company\": \"https://securityboulevard.com/2025/03/ransomware-attack-ends-a-150-year-company/?utm_source=rss&utm_medium=rss&utm_campaign=ransomware-attack-ends-a-150-year-company\",\n \"DEF CON 32 – War Stories – Stranger In A Changed Land\": \"https://securityboulevard.com/2025/03/def-con-32-war-stories-stranger-in-a-changed-land/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-war-stories-stranger-in-a-changed-land\",\n \"Apple vs. UK — ADP E2EE Back Door Faceoff\": \"https://securityboulevard.com/2025/03/apple-appeals-uk-adp-richixbw/?utm_source=rss&utm_medium=rss&utm_campaign=apple-appeals-uk-adp-richixbw\",\n \"Randall Munroe’s XKCD ‘RNA’\": \"https://securityboulevard.com/2025/03/randall-munroes-xkcd-rna/?utm_source=rss&utm_medium=rss&utm_campaign=randall-munroes-xkcd-rna\",\n \"Anti-detect browser analysis: How to detect the Undetectable browser?\": \"https://securityboulevard.com/2025/03/anti-detect-browser-analysis-how-to-detect-the-undetectable-browser/?utm_source=rss&utm_medium=rss&utm_campaign=anti-detect-browser-analysis-how-to-detect-the-undetectable-browser\",\n \"Fueling the Fight Against Identity Attacks\": \"https://securityboulevard.com/2025/03/fueling-the-fight-against-identity-attacks/?utm_source=rss&utm_medium=rss&utm_campaign=fueling-the-fight-against-identity-attacks\",\n \"7 container security best practices\": \"https://securityboulevard.com/2025/03/7-container-security-best-practices/?utm_source=rss&utm_medium=rss&utm_campaign=7-container-security-best-practices\",\n \"The Rise of Digital Passports: Navigating the Security Implications\": \"https://securityboulevard.com/2025/03/the-rise-of-digital-passports-navigating-the-security-implications/?utm_source=rss&utm_medium=rss&utm_campaign=the-rise-of-digital-passports-navigating-the-security-implications\",\n \"MixMode Uncovers Nation-State Attacks, Insider Threats, and Regulatory Risks in Critical Infrastructure Environment within 3 Days of Deployment\": \"https://securityboulevard.com/2025/03/mixmode-uncovers-nation-state-attacks-insider-threats-and-regulatory-risks-in-critical-infrastructure-environment-within-3-days-of-deployment/?utm_source=rss&utm_medium=rss&utm_campaign=mixmode-uncovers-nation-state-attacks-insider-threats-and-regulatory-risks-in-critical-infrastructure-environment-within-3-days-of-deployment\",\n \"DEF CON 32 – War Stories – Breaking Network Crypto In Popular Chinese Keyboard Apps\": \"https://securityboulevard.com/2025/03/def-con-32-war-stories-breaking-network-crypto-in-popular-chinese-keyboard-apps/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-war-stories-breaking-network-crypto-in-popular-chinese-keyboard-apps\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"Teachers Record Management System 2.1 SQL Injection\": \"https://cxsecurity.com/issue/WLB-2025030007\",\n \"OpenPanel 0.3.4 Remote Code Execution\": \"https://cxsecurity.com/issue/WLB-2025030006\",\n \"Webmin RCE Leading to Privilege Escalation\": \"https://cxsecurity.com/issue/WLB-2025030005\",\n \"IdoDesigns - Multiple Vulnerabilities\": \"https://cxsecurity.com/issue/WLB-2025030004\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Wed Mar 5 20:29:28 UTC 2025\": \"https://github.com/trickest/cve/commit/e3528693a6ed8a3ceccbd087696de98e5e516bf5\",\n \"Update Wed Mar 5 12:31:52 UTC 2025\": \"https://github.com/trickest/cve/commit/af86cc2f56298905cb5a0776fca9346e6cb8fe9a\",\n \"Update Wed Mar 5 04:28:47 UTC 2025\": \"https://github.com/trickest/cve/commit/637674a34749a5842f181c9e3ea4ef5935e955fe\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"新型恶意软件猛攻 4000 多家 ISP，从而实现远程入侵\": \"https://www.4hou.com/posts/gyKr\"\n },\n \"奇安信攻防社区\": {\n \".Net Core下的内存马\": \"https://forum.butian.net/share/4173\"\n },\n \"obaby@mars\": {\n \"再谈 Python自动生成 pdf 文件\": \"https://h4ck.org.cn/2025/03/19568\"\n },\n \"Microsoft Security Blog\": {\n \"Silk Typhoon targeting IT supply chain\": \"https://www.microsoft.com/en-us/security/blog/2025/03/05/silk-typhoon-targeting-it-supply-chain/\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"6 Best AI Website Builders of 2025 — Which One is Right for You?\": \"https://infosecwriteups.com/best-ai-website-builders-2025-cd8fb61a6e45?source=rss----7b722bfd1b8d---4\",\n \"Bypass WAF Cloudflare RXSS | Hackerone\": \"https://infosecwriteups.com/bypass-waf-cloudflare-rxss-hackerone-c12c57809ad6?source=rss----7b722bfd1b8d---4\",\n \"Finding jwt tokens that lead to PII data leakage.\": \"https://infosecwriteups.com/finding-jwt-tokens-that-lead-to-pii-data-leakage-b047d45d97bf?source=rss----7b722bfd1b8d---4\",\n \"Penetration testing a Kubernetes environment\": \"https://infosecwriteups.com/penetration-testing-a-kubernetes-environment-72719f9e1010?source=rss----7b722bfd1b8d---4\",\n \"SURIKATA: Stopping Insider Threats Before They Strike\": \"https://infosecwriteups.com/surikata-stopping-insider-threats-before-they-strike-17c2174cafe7?source=rss----7b722bfd1b8d---4\",\n \"Able to create an account without a phone number. (unique bug)\": \"https://infosecwriteups.com/able-to-create-an-account-without-a-phone-number-unique-bug-1fe2d14b9d54?source=rss----7b722bfd1b8d---4\",\n \"SSRF steals EC2 tokens\": \"https://infosecwriteups.com/ssrf-steals-ec2-tokens-d6f46835286e?source=rss----7b722bfd1b8d---4\",\n \"Find new apex domains that are related to your bug bounty target.\": \"https://infosecwriteups.com/find-new-apex-domains-that-are-related-to-your-bug-bounty-target-a05fdcbf5875?source=rss----7b722bfd1b8d---4\",\n \"A Logical Bug That Slipped Through\": \"https://infosecwriteups.com/a-logical-bug-that-slipped-through-792b90850e72?source=rss----7b722bfd1b8d---4\"\n },\n \"Doonsec's feed\": {\n \"秦安：东方集团造假付惨重代价，普通股民不陪绑，赔偿制度要跟上\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650477233&idx=1&sn=231cba11555843c257e219e4218fa64d\",\n \"牟林：美俄在乌克兰的冲突谁赢了？\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650477233&idx=2&sn=ab58e715c08158a70dbcbd350cc8ef31\",\n \"牟林：斯塔默负责落实特朗普指示精神时泽连斯基和特朗普吵架了\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650477233&idx=3&sn=038e62e50f303c72c59cfd458311f84a\",\n \"reCAPTCHA Phishing:xa0Ι Am Nοt A Rοbοt, Are You?\": \"https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489202&idx=1&sn=089ad3e5762ec80d69be559db94b4bec\",\n \"2025年小道消息？大学生天崩开局！\": \"https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538969&idx=1&sn=42317327f884b1292137a07f173b1729\",\n \"2025年勒索软件新威胁：新兴组织崛起，安全形势告急！\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=1&sn=c4d11e559015b3b012434ee7641d7b49\",\n \"【干货】笑傲职场的独家经验（1）\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=2&sn=cba7d1395b0bf7ecea48dff5c7b43da2\",\n \"【干货原创】实网攻防演习常态化，会带来什么变化01\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=3&sn=a7ad047e393eff87d97bf424c6478d57\",\n \"【干货原创】K12教育，鲜为人知的模式秘密\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=4&sn=adcb7a529cfc5f14f9a89735577197cc\",\n \"原创文章目录\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485739&idx=5&sn=390e507478f0be7b62df0f271b9ddb5e\",\n \"某节技术专家，刚清空工位，恶心到了。\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491177&idx=1&sn=99ff2768ccc8268f2d612c1dfb6bc036\",\n \"通过 iOS 应用程序中的 Deep Links 利用未经过滤的 URL Handling 和 SQL 注入\": \"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487558&idx=1&sn=86afccba855a95902d9347cb9ed9c870\",\n \"定制你的 Mac Studio\": \"https://mp.weixin.qq.com/s?__biz=MzIyNDg2MDQ4Ng==&mid=2247486654&idx=1&sn=afb3aeca7e0f85e1952220d5f6c56e59\",\n \"网络安全人士必知的黑客工具NanoCore\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490547&idx=1&sn=1574d0459983605de74bc81d8fdc82b5\",\n \"专家解读 | 构建全国一体化公共数据资源登记平台 推动数据要素市场高质量发展\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=1&sn=10e68f771f25102581731d92ae63471f\",\n \"两部委发布智能网联汽车准入召回通知，要求落实密码应用规定\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=2&sn=621c90a3fee7a8d71cfc55f259e19719\",\n \"领先谷歌六个数量级！我国再创全球量子计算优越性里程碑，比超算快10的15次方倍\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=3&sn=9f93b810c1c2f55332cf1690e28fe850\",\n \"最新黑产技术曝光，只需19分钟即可劫持AI大模型\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634830&idx=4&sn=23dbc83e5257ec1639e7e677d40dbc93\",\n \"2025必看！软考网络工程师值不值得冲？考完竟然有这么多隐藏福利！\": \"https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247528456&idx=1&sn=f42ee963aa8855e5259979cf427fc741\",\n \"记一次小程序漏洞打包\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=1&sn=141b292fc69ff9d745e021ad98999ec2\",\n \"SRC挖掘 | fastjson反序列化漏洞实战\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=2&sn=a4481e4d2263583ccf6816d48497e8a7\",\n \"近期暗网 0day 售卖情报预警\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=3&sn=e70df2122c3094a8037fd3096b81ed74\",\n \"车载Android系统破解工具和漏洞挖掘浅析\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=4&sn=e6dd20d2247732b0e5e73f6e9ae93343\",\n \"坤舆 - 更高效的企业资产收集\": \"https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486620&idx=1&sn=29800656c4390f4137abb6b2c749fb2f\",\n \"IPv4 vs IPv6：你真的了解它们的区别吗？\": \"https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649465873&idx=1&sn=a97412aaab165218d45d90168d41eca5\",\n \"HVV 行动，项目招聘！！！\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NDQwMDY1Nw==&mid=2247486039&idx=1&sn=169dd0fec4d90cea1ab8738dbc051e35\",\n \"DeepSeek原理和落地应用\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655268998&idx=1&sn=fcd085d254c624b50fd88bcb942dfff6\",\n \"rust第二季-加密网络通信高级开发视频教程(2025最新)更新到第6节了\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247505344&idx=1&sn=6159cddf33ad74f1c82ee2098334b918\",\n \"漏洞预警 | VMware ESXi 存在缓冲区溢出漏洞（CVE-2025-22224）\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487022&idx=1&sn=be6d4d80fd50ee781458871cfc1eef6f\",\n \"深度伪造技术的滥用——网络安全的新挑战\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MjY5MDE4NA==&mid=2247486159&idx=1&sn=8ca047afb453ddd53926938b033f0279\"\n },\n \"Blog – Red Siege Information Security\": {\n \"Regex: Simplicity, Security, and Power\": \"https://redsiege.com/blog/2025/03/regex-simplicity-security-and-power/\"\n },\n \"Hacking Dream\": {\n \"Understanding Kerberos Authentication and its Attacks\": \"https://www.hackingdream.net/2025/03/understanding-kerberos-authentication-and-its-attacks.html\"\n },\n \"SpiderLabs Blog\": {\n \"The Russia-Ukraine Cyber War Part 3: Attacks on Telecom and Critical Infrastructure\": \"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/the-russia-ukraine-cyber-war-part-3-attacks-on-telecom-and-critical-infrastructure/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"Finding jwt tokens that lead to PII data leakage.\": \"https://infosecwriteups.com/finding-jwt-tokens-that-lead-to-pii-data-leakage-b047d45d97bf?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Able to create an account without a phone number. (unique bug)\": \"https://infosecwriteups.com/able-to-create-an-account-without-a-phone-number-unique-bug-1fe2d14b9d54?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Find new apex domains that are related to your bug bounty target.\": \"https://infosecwriteups.com/find-new-apex-domains-that-are-related-to-your-bug-bounty-target-a05fdcbf5875?source=rss----7b722bfd1b8d--bug_bounty\",\n \"A Logical Bug That Slipped Through\": \"https://infosecwriteups.com/a-logical-bug-that-slipped-through-792b90850e72?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Horizon3.ai\": {\n \"Identify Cybersecurity Risks at Scale to De-Risk M&A Transactions with Horizon3.ai’s NodeZero® Platform\": \"https://www.horizon3.ai/downloads/use-case/identify-cybersecurity-risks-at-scale-to-de-risk-ma-transactions-with-horizon3-ais-nodezero-platform/\"\n },\n \"Securelist\": {\n \"Undercover miner: how YouTubers get pressed into distributing SilentCryptoMiner as a restriction bypass tool\": \"https://securelist.com/silentcryptominer-spreads-through-blackmail-on-youtube/115788/\"\n },\n \"Didier Stevens\": {\n \"Update: zoneidentifier.exe Version 0.0.2\": \"https://blog.didierstevens.com/2025/03/05/update-zoneidentifier-exe-version-0-0-2/\"\n },\n \"Reverse Engineering\": {\n \"Zen and the Art of Microcode Hacking\": \"https://www.reddit.com/r/ReverseEngineering/comments/1j4cv9f/zen_and_the_art_of_microcode_hacking/\",\n \"GoStringUngarbler: Deobfuscating Strings in Garbled Binaries\": \"https://www.reddit.com/r/ReverseEngineering/comments/1j48mqn/gostringungarbler_deobfuscating_strings_in/\",\n \"Deobfuscation with rev.ng\": \"https://www.reddit.com/r/ReverseEngineering/comments/1j4bwc7/deobfuscation_with_revng/\"\n },\n \"Malwarebytes\": {\n \"I spoke to a task scammer. Here’s how it went\": \"https://www.malwarebytes.com/blog/news/2025/03/i-spoke-to-a-task-scammer-heres-how-it-went\",\n \"Android zero-day vulnerabilities actively abused. Update as soon as you can\": \"https://www.malwarebytes.com/blog/news/2025/03/android-zero-day-vulnerabilities-actively-abused-update-as-soon-as-you-can\"\n },\n \"绿盟科技技术博客\": {\n \"绿盟威胁情报周报2025年第08周（2025.02.24-2025.03.02）\": \"https://blog.nsfocus.net/2025-02-24-2025-03-02/\",\n \"Ollama配置不当未授权访问漏洞（CNVD-2025-04094）\": \"https://blog.nsfocus.net/cnvd-2025-04094/\",\n \"VMware ESXi&Workstation&Fusion多个高危漏洞 (CVE-2025-22224/CVE-2025-22225/CVE-2025-22226)\": \"https://blog.nsfocus.net/cve-2025-22224-cve-2025-22225-cve-2025-22226/\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"FreeBuf早报 | 2025 OWSAP LLM TOP10关键变化；社交媒体成恶意攻击主要目标\": \"https://www.freebuf.com/news/423637.html\",\n \"汇正财经广纳贤才：信息安全官，虚位以待！\": \"https://www.freebuf.com/jobs/423631.html\",\n \"近期暗网 0day 售卖情报预警\": \"https://www.freebuf.com/news/423624.html\",\n \"WordPress曝9.8分高危漏洞，可执行远程代码攻击\": \"https://www.freebuf.com/vuls/423693.html\",\n \"CISA警告VMware漏洞正遭积极利用，敦促企业立即修补\": \"https://www.freebuf.com/vuls/423684.html\",\n \"Vim 编辑器漏洞：恶意 TAR 文件触发代码执行风险\": \"https://www.freebuf.com/vuls/423695.html\"\n },\n \"安全牛\": {\n \"智能化安全运营时代，安全分析师需要扮演好三个新角色\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135371&idx=1&sn=09830c406c7369f6c1ef77590b1ee2f2&chksm=bd15ad588a62244e2fc1b6285ef43be628c0b8a2e8e98cc233abc63ecdeee97cec1cda980986&scene=58&subscene=0#rd\",\n \"工信部CSTIS提醒：防范Murdoc_Botnet僵尸网络的风险；谷歌修复两个已被利用的Android零日漏洞 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135371&idx=2&sn=6a4ed653f5f735d427b6b4b80a73c605&chksm=bd15ad588a62244e67295291773f1dfcf10039ea37bc7ec7363949d7f90676247858568f2c95&scene=58&subscene=0#rd\"\n },\n \"HackerNews\": {\n \"谷歌推出“屏蔽邮件”功能，用户可隐藏邮箱地址\": \"https://hackernews.cc/archives/57685\",\n \"新型 Eleven11bot 僵尸网络感染 86,000 台设备，用于 DDoS 攻击\": \"https://hackernews.cc/archives/57681\",\n \"思科、日立、微软和 Progress 漏洞遭积极利用，CISA 发出警报\": \"https://hackernews.cc/archives/57679\",\n \"中美超过4,000个ISP IP地址遭暴力破解攻击，黑客植入恶意软件\": \"https://hackernews.cc/archives/57677\",\n \"疑似伊朗黑客利用受感染的印度公司邮箱攻击阿联酋航空业\": \"https://hackernews.cc/archives/57670\",\n \"Broadcom 发布紧急补丁修复 VMware 安全漏洞\": \"https://hackernews.cc/archives/57668\",\n \"研究人员将 CACTUS 勒索软件的战术与前 Black Basta 附属机构联系起来\": \"https://hackernews.cc/archives/57665\"\n },\n \"安全分析与研究\": {\n \"UEFI BootKit恶意软件狩猎技术\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490899&idx=1&sn=ac54b3c578d2f70f2c7c75b4609c4906&chksm=902fb27ba7583b6de45783544044400daffb356939e6e5bbd3a7d5c45218f14bd53d2a58a402&scene=58&subscene=0#rd\"\n },\n \"绿盟科技CERT\": {\n \"【漏洞通告】VMware ESXi&Workstation&Fusion多个高危漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489028&idx=1&sn=2093ce6762f3251c9e9d9b6de632ad98&chksm=c2c6410ff5b1c819362fdf10a6e0acbea0001f6ca2dd2cdbac4ca1496af3aeda46869a3fa4dc&scene=58&subscene=0#rd\",\n \"【已支持识别检测】Ollama配置不当未授权访问漏洞（CNVD-2025-04094）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489028&idx=2&sn=acdcd9105653b3dfe1eb03d48cf3bdd3&chksm=c2c6410ff5b1c819fcc80c2c0b6d4fa2175d93cb297e3e64fdb828b5d143815241270699ea7e&scene=58&subscene=0#rd\"\n },\n \"奇安信 CERT\": {\n \"【已发现在野利用】VMware ESXi多个高危漏洞安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503073&idx=1&sn=6769c38d6b37afb2cecf671963dff742&chksm=fe79e879c90e616f8d3bc3f16b6ef82738e3618fb4be9584f97a3f0b6c743197970c469212d0&scene=58&subscene=0#rd\"\n },\n \"红日安全\": {\n \"hvv时间已来？可以参加的小伙伴们抓紧时间填报信息了\": \"https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851814&idx=1&sn=add5eaf6c4687f3fd9c5de8f4a9b2142&chksm=f3e4e925c4936033dc1e53d34158b42cff2eef78c2dfca7ffb0d85f3dbe12add485a763a1fd9&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"AI换脸攻击激增300%！你视频会议里的领导同事可能都是伪造的\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513884&idx=1&sn=d0516b584c52d648aeaf38847d9449fb&chksm=ebfaf03cdc8d792aca4d2afe5477c35c5d867fb8221fad6f636899956a4a6fe89f15de3a9181&scene=58&subscene=0#rd\",\n \"特朗普网络团队任命预示美国政府将转向进攻性网络政策\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513884&idx=2&sn=54105096f2781e325925f6d29c22481f&chksm=ebfaf03cdc8d792a3052b190ce1c1f1a38b006b342aec29475948ee52952c655bb0b30870700&scene=58&subscene=0#rd\"\n },\n \"长亭安全应急响应中心\": {\n \"【风险提示】VMware ESXi新型漏洞利用链已出现在野利用\": \"https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492725&idx=1&sn=de0f08e06363a7386f762ff89911fa2f&chksm=96f7fb18a180720ebf4fc3a9847cbae47c513332d35b81c4111e4bb0b4cbbdfc8b40446bbfb0&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \".NET 实战中使用 Sharp4FUAC 通过 Windows 白名单文件绕过 UAC 实现本地权限提升\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499055&idx=1&sn=9774cc140fd8036509026fd4f651e291&chksm=fa5953c2cd2edad4f7ad902f6db3030a1c38dc3448adf89e328573959813ede260b1cfc28022&scene=58&subscene=0#rd\",\n \".NET 内网攻防实战电子报刊\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499055&idx=2&sn=33bd494fa1a2ae6e8fd46bbdf1f97623&chksm=fa5953c2cd2edad46803a2311a5b86f83803307fd2f14d710fab25105ad43a52b0fbe472bca2&scene=58&subscene=0#rd\",\n \"2025年2月份红队武器库和资源汇总\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499055&idx=3&sn=e8afa902aa37df3a81977d2c668b57d6&chksm=fa5953c2cd2edad40887201edf2391f19053ae6cf7222e5fdac2ab8278001cf6a4a01a02b154&scene=58&subscene=0#rd\"\n },\n \"慢雾科技\": {\n \"浏览器钱包扩展突遭损坏，如何化险为夷？\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501374&idx=1&sn=81df5175deaa669dbde4c2ceadf8ca9d&chksm=fddeb8b9caa931af5d15205313b3ed53bdbfc446c9a96aaaf6d87ac587f8dfe4d254794d80ae&scene=58&subscene=0#rd\"\n },\n \"天御攻防实验室\": {\n \"军事专家建议组建俄罗斯网络部队\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486291&idx=1&sn=de04a9abc8fc3aa3cdbf901068da56e2&chksm=fb04c83bcc73412d2290840b2decb87e3d6b715c84faf36f0099426ebf7f13685a6dc571f582&scene=58&subscene=0#rd\"\n },\n \"代码卫士\": {\n \"博通修复3个已遭利用的 VMware 0day 漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522410&idx=1&sn=0f5b704ab0b14c7dd3262ffbc0697b07&chksm=ea94a900dde32016fa789ad6e1cbd205eab3afe70049ad11ab8634e97423249682ce8b5d438a&scene=58&subscene=0#rd\",\n \"思科： Webex 漏洞可导致凭据遭远程访问\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522410&idx=2&sn=0aef267bcd2c2f831a7dedbda98b4668&chksm=ea94a900dde32016f9902d5634144e61cbf559478eaf697cb00cf146b7b4de1bae7a4526be98&scene=58&subscene=0#rd\"\n },\n \"全频带阻塞干扰\": {\n \"SECURITY SHOW 2025 | 揭秘日本最大安防展\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648958466&idx=1&sn=7b2e4f2f3053d9d6ad182363ec4862f9&chksm=f09ef17dc7e9786b87a330eb3d1098ff4540be3c78dd7e66e953be27dd35326a5227fba797be&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"独家揭秘：如何推进人工智能驱动的安全创新\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537838&idx=1&sn=ac365e194b53bef7a8f6658f4a5ddffd&chksm=c1442613f633af05d5e21efd4e3a12b6b640073e2136d7f0fc15ec732b67384639aef729e20d&scene=58&subscene=0#rd\",\n \"直播预约：数安三人行——Deep Seek爆火背后，大模型如何重塑安全?\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537838&idx=2&sn=efd860d89d0249828150599857bc2d72&chksm=c1442613f633af05e3ae265aaba00be2c68cc8fd8b8a8cbabd1cc5e0463f22ec1bedd4ba76ef&scene=58&subscene=0#rd\"\n },\n \"网络空间安全科学学报\": {\n \"“网络信息系统安全性评测”专题征稿\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505183&idx=1&sn=a0ca19e256ff424a866f8c5d88f6d21c&chksm=e9bfc1a1dec848b706502326fffc620a561bde0f993bc219f060184e064668553ec89c1b7719&scene=58&subscene=0#rd\",\n \"学术前沿 | 一种安全的集群无线网络环境下密钥协商协议\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505183&idx=2&sn=7264c046dbd8515e33d7d93db259c5d5&chksm=e9bfc1a1dec848b76f29f710e1b0d140e5d3e510eb1f8046280b032eafc80ad960afa3300bae&scene=58&subscene=0#rd\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 阅读推荐 2025-03-05 LLM是安全的银弹吗？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499858&idx=1&sn=3ec725428dd98d800860265277c0b941&chksm=c063ee8bf714679df279af8d55dad7ed13acf2739b35dc48f07af3f3851424d5eff24507a663&scene=58&subscene=0#rd\"\n },\n \"威胁棱镜\": {\n \"2024 年 GreyNoise 在野大规模漏洞利用报告\": \"https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247487732&idx=1&sn=e92589cbe79e05ee823759d988b688f9&chksm=c1e9e738f69e6e2e78755af17ee489b1e7fb96a891bbcfce9bf45ac7f7c6592147fafe36832c&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】最新黑产技术曝光，只需19分钟即可劫持AI大模型\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=1&sn=d8c361d857947b4f7ddd18672093ed23&chksm=f36e75fac419fcec9b98a65660841511b124c3eea8dcdc951f1a23d09cdb9b820e5dcce820c0&scene=58&subscene=0#rd\",\n \"【安全圈】全球 49,000 多个门禁管理系统存在巨大安全漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=2&sn=cfbab77073fc932a8b466a9586809efc&chksm=f36e75fac419fcecbf602c6a23698a377a6e7431fbf29023fffe68d6c04af74eecaea10c2e0a&scene=58&subscene=0#rd\",\n \"【安全圈】GitHub 大规模恶意软件行动：Redox Stealer盯上游戏玩家与盗版用户\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=3&sn=b6b1eda81cdc868cb996830336a5f909&chksm=f36e75fac419fcece71eeed0e3c426419606644ca9724f292236889f8a42504a83eed17cfba9&scene=58&subscene=0#rd\",\n \"【安全圈】320万用户因恶意浏览器扩展程序遭信息泄露\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=4&sn=101d9a5f9ab1488a2654bb7bdb7ebdf5&chksm=f36e75fac419fcecce7874fa3b39840d9b7cdcb5effc01bffe605c6bb3411b11257c19ce1742&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"从逆向还原的角度探讨x86与x64的异常：32位3代异常处理还原（VS2019）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590532&idx=1&sn=bf6d8a881eb64cc3fe35157d1a015c23&chksm=b18c2dce86fba4d85a84d5d8063ab44a551c4e79c2eb39cb1aec64eb908aa9d6dc372fa01b42&scene=58&subscene=0#rd\",\n \"黑客利用暴露的云凭证，仅19分钟劫持AI大模型\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590532&idx=2&sn=ecd38eda9e2e4bd27eacd184b6bc7d96&chksm=b18c2dce86fba4d87754b0dcc27e9a9d76c6ba04e788bdf59ddaba11d33aa5413536bdc0a1ec&scene=58&subscene=0#rd\",\n \"第22周更新： 反序列化漏洞（三）ThinkPHP反序列链分析 | CTF训练营-Web篇\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590532&idx=3&sn=64c9bf27d9ed81ec82e0506b47b8d3cc&chksm=b18c2dce86fba4d89b9c96e5a591d6a3253d659e5c9cfe03f638e6fda35228fc96840fd97a35&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"「职」为你来||嘶吼·来个Offer网安人才招聘社群，正式上线~~\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581408&idx=1&sn=648391a112b5b6a7674f1784e9a1e965&chksm=e9146edade63e7cc69d84a916d3f603dfb539d583b78703541d118f00ed8f1befa044737fa26&scene=58&subscene=0#rd\",\n \"新型恶意软件猛攻 4000 多家 ISP，从而实现远程入侵\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581408&idx=2&sn=4bc77c23c2146af863386ddf099196b4&chksm=e9146edade63e7cce4f3b1292059d9a2917d16de9b8c9a65ee7ed15e6d82a8cbe75e29b0552a&scene=58&subscene=0#rd\"\n },\n \"XCTF联赛\": {\n \"TPCTF 2025｜倒计时3天！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247515508&idx=1&sn=02603364959caf80ad3d90bd19669d45&chksm=a6874f4e91f0c658727b8298731c7ab6a76246d5105bc21656c30f67f8c7575e09680ae61fca&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"不仅有能用国补的 MacBook Air，还有模型训练神器 Mac Studio\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075084&idx=1&sn=8c796ab839df6e22b2d88af232c3cec4&chksm=7e57cb3a4920422ccd9736d29cb01e3d0a99928c8658dd26edec1a0a1893e43c0759b85ada5c&scene=58&subscene=0#rd\",\n \"月薪 5000，我给人形机器人当「老师」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075060&idx=1&sn=548b9d389884e09a2b97a659c097ce80&chksm=7e57cbc2492042d4d63787f577d4bcd2a094b304a8acc4e37387492495799f77230e89f91250&scene=58&subscene=0#rd\",\n \"字节启动新一轮股票回购，估值增至 3150 亿美元；雷军提议优化新能源车牌；北京举办首届人形机器人马拉松｜极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075018&idx=1&sn=9243bf414e1b91aae81e75b1c31f3969&chksm=7e57cbfc492042eacf8d98165779353cc104bdaca483248f74b463d7cfa5d3c1a373c3894f09&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"内部邮件截获暴露俄罗斯联邦第243军区重大隐患\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560164&idx=1&sn=ca65cf4a41ce258fc9ab6727ac1147ec&chksm=871178efb066f1f928cdc615843fd4cf7a9fc716cd28d3f223887af893b961a515b242b41a5d&scene=58&subscene=0#rd\",\n \"蒙古国媒体舆论导向转变对我形象及对外传播的影响与应对\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560164&idx=2&sn=6257004cfaeae6e539bdce175857cae2&chksm=871178efb066f1f9349773d3067ea54755683ecc20d6c55309beb1c90e754b14247a271eaff5&scene=58&subscene=0#rd\"\n },\n \"京东安全应急响应中心\": {\n \"【招聘】京东集团信息安全部诚邀各路英雄加入~~\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727844182&idx=1&sn=e20a71c9e1db4610ef4b27ddb4a1318c&chksm=80504edeb727c7c8154c5b3e5fcdcf1ef620e4f5adccfef95d691ad65b468dde6d214f7e8b44&scene=58&subscene=0#rd\"\n },\n \"信息安全国家工程研究中心\": {\n \"【二十四节气】惊蛰 | 微雨众卉新，一雷惊蛰始。\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498982&idx=1&sn=8ebb87255eb8a623e12a0965736544d7&chksm=feb67df5c9c1f4e3eae7e2ab754bb38f5857db274517388ae13b12b0e9381c8d4dd466f28cd8&scene=58&subscene=0#rd\"\n },\n \"字节跳动技术团队\": {\n \"285 学科全覆盖！豆包大模型团队开源基准测试集 SuperGPQA\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513660&idx=1&sn=df5fb0b249a74acedd46c53acc2031ea&chksm=e9d37ddedea4f4c85d9f6e3e65cceef63401ef6af8c64f93a3156e9d103750719b0c39b14728&scene=58&subscene=0#rd\"\n },\n \"黑伞安全\": {\n \"【风险提示】VMware ESXi新型漏洞利用链已出现在野利用\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489754&idx=1&sn=57c283962096cbe0ba12fd8927bf9ccf&chksm=fb029582cc751c943a4e53c5a0a3b96e80459f0cb16241c005be5e0baaf9eb80a742f2e3d548&scene=58&subscene=0#rd\",\n \"Deepseek助力职场办公效能提升课程\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489754&idx=2&sn=db20737721bcb2b35ab909435bf9361f&chksm=fb029582cc751c947abd3e8a0afdc4dc930e0b06ef91cabe77fb6687905a42b660f2aa37f00b&scene=58&subscene=0#rd\"\n },\n \"恒脑与AI\": {\n \"AI数据污染危机：1.2 万个敏感信息藏在训练数据里！\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496727&idx=1&sn=8695d84c49f42fa2437afa03b34d1c47&chksm=e9fd6986de8ae09031a2407b290039bbdbb278ab755cc0646d71cfc926f7b3a255b08a3dacc6&scene=58&subscene=0#rd\"\n },\n \"复旦白泽战队\": {\n \"成果分享｜ 基于包管理平台的黑帽搜索引擎优化\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247493225&idx=1&sn=530e028915257a6cc30176eb962ebdb7&chksm=fde86217ca9feb01ac5ce8a574c5bdc14b8fb393da7fe2b5c208e65646abaf853004108da14e&scene=58&subscene=0#rd\"\n },\n \"墨菲安全\": {\n \"软件供应链安全行业大佬闭门交流会\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488096&idx=1&sn=edf79fed7f7ec855c8897bfb9dacf413&chksm=c13d7158f64af84eafbe51b0adee58edcfe4f566ebcdd04f1e1cb14d623922ff9e4da5d18e5e&scene=58&subscene=0#rd\"\n },\n \"Beacon Tower Lab\": {\n \"漏洞预警 | VMware ESXi 存在缓冲区溢出漏洞（CVE-2025-22224）\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487022&idx=1&sn=be6d4d80fd50ee781458871cfc1eef6f&chksm=c22296d7f5551fc1e5006b6bc19fb3b5655ab633f1b0815aae458952101c37baae87d8f56aac&scene=58&subscene=0#rd\"\n },\n \"深信服千里目安全技术中心\": {\n \"【漏洞通告】VMware ESXi 等多款产品缓冲区溢出漏洞(CVE-2025-22224)\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524017&idx=1&sn=1eee483c71f1b398696a1d224d767b12&chksm=ce4615a1f9319cb7c52e9731ee8e24dcd9f34b47a048b0a5ff2af0f2bee17afdd1723624ae07&scene=58&subscene=0#rd\",\n \"网络安全信息与动态周报2025年第8期（2月17日-2月23日）\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524017&idx=2&sn=b8f4ca73f0de7cfa0a633ae874442f1a&chksm=ce4615a1f9319cb7cb7d4565af0f113ed51f44565a727dc28232d5d040d9fae39a5160a3fe28&scene=58&subscene=0#rd\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #767: Forensic Lunch Test Kicthen - unit tests and documentation\": \"https://www.hecfblog.com/2025/03/daily-blog-767-forensic-lunch-test.html\"\n },\n \"360数字安全\": {\n \"《人民政协报》报道：以模制模，重塑人工智能安全新范式\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579797&idx=1&sn=ebaf3c9ca6017484870873e659a905ce&chksm=9f8d289da8faa18b2af5ae32ef5bfd4f1419036e392f416f3ec721c61b1860130720f16f7c6d&scene=58&subscene=0#rd\"\n },\n \"迪哥讲事\": {\n \"JS利用\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497222&idx=1&sn=0be4689e2b33beb274758f53874dbdbe&chksm=e8a5fc65dfd2757343626ee228a66b830d831717698d39266b701d9238201a59f07fe2945e54&scene=58&subscene=0#rd\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Così Black Basta e Cactus sfruttano Teams e OneDrive per infiltrarsi nelle reti aziendali\": \"https://www.cybersecurity360.it/news/cosi-black-basta-e-cactus-sfruttano-teams-e-onedrive-per-infiltrarsi-nelle-reti-aziendali/\",\n \"Federal cyber firings imperil efforts to stop Chinese hacking campaigns, experts tell lawmakers\": \"https://therecord.media/federal-cyber-firings-cisa-workforce\",\n \"Two decades of visitor data at the Toronto Zoo stolen in cyberattack\": \"https://therecord.media/toronto-zoo-warns-decades-cyberattack\",\n \"Justice Department Charges 12 Chinese Contract Hackers and Law Enforcement Officers in Global Computer Intrusion Campaigns\": \"https://flashpoint.io/blog/justice-department-charges-12-chinese-contract-hackers-and-law-enforcement-officers-in-global-computer-intrusion-campaigns/\",\n \"Open-source tool 'Rayhunter' helps users detect Stingray attacks\": \"https://www.bleepingcomputer.com/news/security/open-source-tool-rayhunter-helps-users-detect-stingray-attacks/\",\n \"DOJ to appeal court decision ruling broad cell phone tower searches are unconstitutional\": \"https://therecord.media/doj-to-appeal-cell-tower-ruling\",\n \"Catalan court says NSO Group executives can be charged in spyware investigation\": \"https://techcrunch.com/2025/03/05/catalan-court-says-nso-group-executives-can-be-charged-in-spyware-investigation/\",\n \"US charges Chinese nationals in cyberattacks on Treasury, dissidents and more\": \"https://therecord.media/doj-charges-chinese-nationals-isoon-cyberattacks-treasury\",\n \"Silk Typhoon hackers now target IT supply chains to breach networks\": \"https://www.bleepingcomputer.com/news/security/silk-typhoon-hackers-now-target-it-supply-chains-to-breach-networks/\",\n \"Rural hospitals in US need to invest at least $70 million in cybersecurity, Microsoft finds\": \"https://therecord.media/rural-hospitals-need-millions-cyber\",\n \"Trump orders halt to intelligence sharing with Ukraine, CIA director says\": \"https://therecord.media/trump-halt-intel-sharing-ukraine\",\n \"US charges Chinese hackers linked to critical infrastructure breaches\": \"https://www.bleepingcomputer.com/news/security/us-charges-chinese-hackers-linked-to-critical-infrastructure-breaches/\",\n \"La minaccia ibrida fa paura e l’Italia è nel mirino: il rapporto degli 007\": \"https://www.cybersecurity360.it/news/la-minaccia-ibrida-fa-paura-e-litalia-e-nel-mirino-il-rapporto-degli-007/\",\n \"BadBox malware disrupted on 500K infected Android devices\": \"https://www.bleepingcomputer.com/news/security/badbox-malware-disrupted-on-500k-infected-android-devices/\",\n \"DORA, si apre la partita dell’attuazione: ecco come\": \"https://www.cybersecurity360.it/news/dora-si-apre-la-partita-dellattuazione-ecco-come/\",\n \"Ukraine's intel service honors civilian hackers for the first time with military award\": \"https://therecord.media/ukraine-intel-service-honors-civilian-hackers-with-military-award\",\n \"Look up: The new frontier of cyberthreats is in the sky\": \"https://www.bleepingcomputer.com/news/security/look-up-the-new-frontier-of-cyberthreats-is-in-the-sky/\",\n \"YouTube warns of AI-generated video of its CEO used in phishing attacks\": \"https://www.bleepingcomputer.com/news/security/youtube-warns-of-ai-generated-video-of-its-ceo-used-in-phishing-attacks/\",\n \"Gli USA sospendono le operazioni cyber contro la Russia: l’impatto sulla sicurezza nazionale\": \"https://www.cybersecurity360.it/news/sospensione-usa-delleoperazioni-informatiche-contro-la-russia-limpatto-sulla-sicurezza-nazionale/\",\n \"Gli scammer di PayPal sfruttano Docusign per inviare email di phishing\": \"https://www.securityinfo.it/2025/03/05/gli-scammer-di-paypal-sfruttano-docusign-per-inviare-email-di-phishing/\",\n \"Toronto Zoo shares update on last year's ransomware attack\": \"https://www.bleepingcomputer.com/news/security/toronto-zoo-shares-update-on-last-years-ransomware-attack/\",\n \"ACSC Warns of Increasing Ransomware Risks and Offers Key Protection Tips\": \"https://cyble.com/blog/acsc-warns-of-ransomware-risks/\",\n \"February Sees Record-Breaking Ransomware Attacks, New Data Shows\": \"https://cyble.com/blog/february-sees-ransomware-attacks-new-data-shows/\",\n \"November 2024 Cyber Attacks Statistics\": \"https://www.hackmageddon.com/2025/03/05/november-2024-cyber-attacks-statistics/\",\n \"How Transport Company Gets Real-Time IOC and IOB Updates on Active Cyber Attacks\": \"https://any.run/cybersecurity-blog/how-transport-company-monitors-threats/\",\n \"!exploitable Episode Two - Enter the Matrix\": \"https://blog.doyensec.com/2025/02/27/exploitable-sshd.html\",\n \"Undercover miner: how YouTubers get pressed into distributing SilentCryptoMiner as a restriction bypass tool\": \"https://securelist.com/silentcryptominer-spreads-through-blackmail-on-youtube/115788/\",\n \"La complessa geopolitica delle VPN\": \"https://www.guerredirete.it/la-complessa-geopolitica-delle-vpn/\",\n \"Detection engineering at scale: one step closer (part three)\": \"https://blog.sekoia.io/detection-engineering-at-scale-one-step-closer-part-three/\",\n \"Strategia Zero Trust, proviamo a capire meglio di cosa si tratta\": \"https://www.cybersecurity360.it/outlook/strategia-zero-trust-proviamo-a-capire-meglio-di-cosa-si-tratta/\",\n \"EvilLoader: Unpatched Telegram for Android Vulnerability Disclosed\": \"https://www.mobile-hacker.com/2025/03/05/evilloader-unpatched-telegram-for-android-vulnerability-disclosed/\",\n \"Tales of Advertising Abuse: Affiliate Brand Bidding\": \"https://bfore.ai/tales-of-advertising-abuse-affiliate-brand-bidding/\",\n \"Fake BianLian ransom notes mailed to US CEOs in postal mail scam\": \"https://www.bleepingcomputer.com/news/security/fake-bianlian-ransom-notes-mailed-to-us-ceos-in-postal-mail-scam/\"\n },\n \"DEF CON Announcements!\": {\n \"DEF CON 33 Theme Drop!\": \"https://defcon.org/html/defcon-33/dc-33-theme.html\",\n \"Pre-reg for DEF CON 33 opens 3/5!\": \"https://shop.defcon.org/products/def-con-33-ticket\"\n },\n \"Securityinfo.it\": {\n \"Gli scammer di PayPal sfruttano Docusign per inviare email di phishing\": \"https://www.securityinfo.it/2025/03/05/gli-scammer-di-paypal-sfruttano-docusign-per-inviare-email-di-phishing/?utm_source=rss&utm_medium=rss&utm_campaign=gli-scammer-di-paypal-sfruttano-docusign-per-inviare-email-di-phishing\"\n },\n \"bellingcat\": {\n \"The Story of a Storm – Part 1: Visualising Climate Data with NASA’s Giovanni Tool\": \"https://www.bellingcat.com/resources/how-tos/2025/03/05/the-story-of-a-storm-part-1-visualising-climate-data-with-nasas-giovanni-tool/\"\n },\n \"Arturo Di Corinto\": {\n \"Stipendi non pagati: giornalisti Dire in sciopero. Il comunicato\": \"https://dicorinto.it/associazionismo/stipendi-non-pagati-giornalisti-dire-domani-in-sciopero-il-comunicato/\"\n },\n \"ICT Security Magazine\": {\n \"Cybersecurity Italia 2025: Minacce APT, Ransomware e Attacchi Statali in aumento secondo la Relazione sulla Sicurezza Nazionale\": \"https://www.ictsecuritymagazine.com/notizie/cybersecurity-italia-2025/\",\n \"L’attacco Bybit, il paradosso delle soluzioni decentralizzate in un’infrastruttura centralizzata\": \"https://www.ictsecuritymagazine.com/articoli/attacco-bybit-cybercrime/\",\n \"IA Gen: Potenziali Strategie di Mitigazione\": \"https://www.ictsecuritymagazine.com/articoli/mitigazione-ia-gen/\"\n },\n \"Desync InfoSec\": {\n \"reCAPTCHA Phishing: Ι Am Nοt A Rοbοt, Are You?\": \"https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489202&idx=1&sn=089ad3e5762ec80d69be559db94b4bec&chksm=c27f651cf508ec0a0cb5d6cafbeeff4769af89db36444bd9393b4e78aa873845e78d2a4fa246&scene=58&subscene=0#rd\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"ISC Stormcast For Wednesday, March 5th, 2025 https://isc.sans.edu/podcastdetail/9350, (Wed, Mar 5th)\": \"https://isc.sans.edu/diary/rss/31740\"\n },\n \"Schneier on Security\": {\n \"CISA Identifies Five New Vulnerabilities Currently Being Exploited\": \"https://www.schneier.com/blog/archives/2025/03/cisa-identifies-five-new-vulnerabilities-currently-being-exploited.html\"\n },\n \"Posts By SpecterOps Team Members - Medium\": {\n \"Fueling the Fight Against Identity Attacks\": \"https://posts.specterops.io/fueling-the-fight-against-identity-attacks-1c899f7356e4?source=rss----f05f8696e3cc---4\"\n },\n \"Rasta Mouse\": {\n \"Kerberoasting w/o the TGS-REQ\": \"https://rastamouse.me/kerberoasting-without-tgs-reqs/\"\n },\n \"Deep Web\": {\n \"Sites on dark.fail on january 2023\": \"https://www.reddit.com/r/deepweb/comments/1j44b4j/sites_on_darkfail_on_january_2023/\",\n \"What's a good site for I.d. number generator?\": \"https://www.reddit.com/r/deepweb/comments/1j3vtsr/whats_a_good_site_for_id_number_generator/\"\n },\n \"Security Affairs\": {\n \"China-linked APT Silk Typhoon targets IT Supply Chain\": \"https://securityaffairs.com/174962/apt/china-linked-apt-silk-typhoon-targets-it-supply-chain.html\",\n \"Hunters International gang claims the theft of 1.4 TB of data allegedly stolen from Tata Technologies\": \"https://securityaffairs.com/174953/data-breach/ransomware-group-hunters-international-claims-to-have-hacked-tata-technologies.html\",\n \"New Eleven11bot botnet infected +86K IoT devices\": \"https://securityaffairs.com/174941/malware/new-eleven11bot-botnet-infected-86k-iot-devices.html\",\n \"Polish Space Agency POLSA disconnected its network following a cyberattack\": \"https://securityaffairs.com/174930/security/polish-space-agency-polsa-disconnected-its-network-following-a-cyberattack.html\",\n \"U.S. CISA adds Linux kernel and VMware ESXi and Workstation flaws to its Known Exploited Vulnerabilities catalog\": \"https://securityaffairs.com/174923/security/u-s-cisa-adds-linux-kernel-and-vmware-esxi-and-workstation-flaws-to-its-known-exploited-vulnerabilities-catalog.html\"\n },\n \"Information Security\": {\n \"Ever Noticed How No One Talks About Burnout in Cybersecurity?\": \"https://www.reddit.com/r/Information_Security/comments/1j41km1/ever_noticed_how_no_one_talks_about_burnout_in/\",\n \"Malware Traffic Analysis in Linux: A Practical Guide with Examples\": \"https://www.reddit.com/r/Information_Security/comments/1j44jjc/malware_traffic_analysis_in_linux_a_practical/\"\n },\n \"Computer Forensics\": {\n \"What do you do to help you not struggle finding answers?\": \"https://www.reddit.com/r/computerforensics/comments/1j3t8m4/what_do_you_do_to_help_you_not_struggle_finding/\",\n \"VMWare Workstation / Axiom Process\": \"https://www.reddit.com/r/computerforensics/comments/1j3zuh9/vmware_workstation_axiom_process/\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"How Did \\\"Cloaked\\\" Do This? You call and they respond with the last 4 digits of your SSN. Any data vendors come to mind?\": \"https://www.reddit.com/r/blackhat/comments/1j45v03/how_did_cloaked_do_this_you_call_and_they_respond/\",\n \"Need gmail accounts\": \"https://www.reddit.com/r/blackhat/comments/1j42meg/need_gmail_accounts/\"\n },\n \"Social Engineering\": {\n \"Psyops EXPOSED: Watch How They Try To Manipulate You!\": \"https://www.reddit.com/r/SocialEngineering/comments/1j3rahv/psyops_exposed_watch_how_they_try_to_manipulate/\"\n },\n \"Deeplinks\": {\n \"Trump Calls On Congress To Pass The “Take It Down” Act—So He Can Censor His Critics\": \"https://www.eff.org/deeplinks/2025/03/trump-calls-congress-pass-overbroad-take-it-down-act-so-he-can-use-it-censor\"\n },\n \"Graham Cluley\": {\n \"Cactus ransomware: what you need to know\": \"https://www.tripwire.com/state-of-security/cactus-ransomware-what-you-need-know\",\n \"Fake police call cryptocurrency investors to steal their funds\": \"https://www.bitdefender.com/en-us/blog/hotforsecurity/fake-police-call-cryptocurrency-investors-to-steal-their-funds\"\n },\n \"The Hacker News\": {\n \"China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access\": \"https://thehackernews.com/2025/03/china-linked-silk-typhoon-expands-cyber.html\",\n \"Defending against USB drive attacks with Wazuh\": \"https://thehackernews.com/2025/03/defending-against-usb-drive-attacks.html\",\n \"Dark Caracal Uses Poco RAT to Target Spanish-Speaking Enterprises in Latin America\": \"https://thehackernews.com/2025/03/dark-caracal-uses-poco-rat-to-target.html\",\n \"Google Rolls Out AI Scam Detection for Android to Combat Conversational Fraud\": \"https://thehackernews.com/2025/03/google-rolls-out-ai-scam-detection-for.html\",\n \"Chinese APT Lotus Panda Targets Governments With New Sagerunex Backdoor Variants\": \"https://thehackernews.com/2025/03/chinese-apt-lotus-panda-targets.html\",\n \"Identity: The New Cybersecurity Battleground\": \"https://thehackernews.com/2025/03/identity-new-cybersecurity-battleground.html\",\n \"Seven Malicious Go Packages Found Deploying Malware on Linux and macOS Systems\": \"https://thehackernews.com/2025/03/seven-malicious-go-packages-found.html\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"EvilLoader: Yesterday was published PoC for unpatched Vulnerability affecting Telegram for Android\": \"https://www.reddit.com/r/netsec/comments/1j3y1kl/evilloader_yesterday_was_published_poc_for/\",\n \"Case Study: Traditional CVSS scoring missed this actively exploited vulnerability (CVE-2024-50302)\": \"https://www.reddit.com/r/netsec/comments/1j3tvof/case_study_traditional_cvss_scoring_missed_this/\",\n \"Multiple backdoors injected using frontend JS\": \"https://www.reddit.com/r/netsec/comments/1j454ff/multiple_backdoors_injected_using_frontend_js/\",\n \"Case Study: Analyzing macOS IONVMeFamily Driver Denial of Service Issue\": \"https://www.reddit.com/r/netsec/comments/1j42l89/case_study_analyzing_macos_ionvmefamily_driver/\",\n \"New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails\": \"https://www.reddit.com/r/netsec/comments/1j3riyc/new_method_to_leverage_unsafe_reflection_and/\",\n \"Understanding and Mitigating TOCTOU Vulnerabilities in C# Applications\": \"https://www.reddit.com/r/netsec/comments/1j42koq/understanding_and_mitigating_toctou/\"\n },\n \"Your Open Hacker Community\": {\n \"Technical breakdown of notable cyber attack\": \"https://www.reddit.com/r/HowToHack/comments/1j44b0m/technical_breakdown_of_notable_cyber_attack/\",\n \"NOC Analyst wanting to get into Hacking\": \"https://www.reddit.com/r/HowToHack/comments/1j4c7bx/noc_analyst_wanting_to_get_into_hacking/\",\n \"How to pentest\": \"https://www.reddit.com/r/HowToHack/comments/1j4ax83/how_to_pentest/\",\n \"Ethical Question\": \"https://www.reddit.com/r/HowToHack/comments/1j4e49e/ethical_question/\",\n \"Hey everyone I'm a beginner how do i start (wannabe a white hat hacker)\": \"https://www.reddit.com/r/HowToHack/comments/1j4e689/hey_everyone_im_a_beginner_how_do_i_start_wannabe/\",\n \"RAR5 encrypted .rar file’s password forgot\": \"https://www.reddit.com/r/HowToHack/comments/1j3xfoa/rar5_encrypted_rar_files_password_forgot/\",\n \"Recover Twitter Account\": \"https://www.reddit.com/r/HowToHack/comments/1j40uza/recover_twitter_account/\",\n \"How do you ask a question?\": \"https://www.reddit.com/r/HowToHack/comments/1j3xc8d/how_do_you_ask_a_question/\",\n \"Can I hack an email?\": \"https://www.reddit.com/r/HowToHack/comments/1j3x7h2/can_i_hack_an_email/\",\n \"[ Removed by Reddit ]\": \"https://www.reddit.com/r/HowToHack/comments/1j3w711/removed_by_reddit/\",\n \"Question\": \"https://www.reddit.com/r/HowToHack/comments/1j3tnu0/question/\",\n \"I wanna get into hacking\": \"https://www.reddit.com/r/HowToHack/comments/1j3qqgg/i_wanna_get_into_hacking/\",\n \"Where can i find marketplace to buy cheats , for fps games like pub G , free fire ?\": \"https://www.reddit.com/r/HowToHack/comments/1j3s232/where_can_i_find_marketplace_to_buy_cheats_for/\"\n }\n}"}}, "archive/tmp/2025-01-31.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747319.187279, "n": 48466, "h": "87cabab044413ea2", "c": "{\n \"Trustwave Blog\": {\n \"How Trustwave’s Fusion Platform Analyzes Ransomware Tactics in the Energy Sector: A Comprehensive Overview\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/how-trustwaves-fusion-platform-analyzes-ransomware-tactics-in-the-energy-sector-a-comprehensive-overview/\"\n },\n \"Armin Ronacher's Thoughts and Writings\": {\n \"How I Use AI: Meet My Promptly Hired Model Intern\": \"http://lucumr.pocoo.org/2025/1/30/how-i-ai\"\n },\n \"Security Boulevard\": {\n \"2025 predictions: Security industry\": \"https://securityboulevard.com/2025/01/2025-predictions-security-industry/\",\n \"Preparing for PCI DSS 4.0: How Sonatype SBOM Manager can streamline and accelerate your transition\": \"https://securityboulevard.com/2025/01/preparing-for-pci-dss-4-0-how-sonatype-sbom-manager-can-streamline-and-accelerate-your-transition/\",\n \"Trust in Cloud Security with Effective Secrets Rotation\": \"https://securityboulevard.com/2025/01/trust-in-cloud-security-with-effective-secrets-rotation/\",\n \"Innovative PAM Strategies for Modern Enterprises\": \"https://securityboulevard.com/2025/01/innovative-pam-strategies-for-modern-enterprises/\",\n \"Advancing Cloud Compliance with Proactive Measures\": \"https://securityboulevard.com/2025/01/advancing-cloud-compliance-with-proactive-measures/\",\n \"Hiya AI Phone App Protects Against Deepfakes, Other Scams\": \"https://securityboulevard.com/2025/01/hiya-ai-phone-app-protects-against-deepfakes-other-scams/\",\n \"DEF CON 32 – Color Blasted Badge Making: How Hard Could It Be\": \"https://securityboulevard.com/2025/01/def-con-32-color-blasted-badge-making-how-hard-could-it-be/\",\n \"2025’s Top Five Trends in Identity Verification\": \"https://securityboulevard.com/2025/01/2025s-top-five-trends-in-identity-verification/\",\n \"Next Steps from the PCI Council’s SAQ-A Update: Critical Responsibilities and Opportunities for PSPs\": \"https://securityboulevard.com/2025/01/next-steps-from-the-pci-councils-saq-a-update-critical-responsibilities-and-opportunities-for-psps/\",\n \"Assessing the New SAQ-A Changes: Insights for QSAs\": \"https://securityboulevard.com/2025/01/assessing-the-new-saq-a-changes-insights-for-qsas/\"\n },\n \"Sukka's Blog\": {\n \"2024：浏览器从 A 到 Z\": \"https://blog.skk.moe/post/2024-browser-from-a-to-z/\"\n },\n \"一个被知识诅咒的人\": {\n \"【Python】深入探索Python元类：动态生成类与对象的艺术\": \"https://blog.csdn.net/nokiaguy/article/details/145397730\",\n \"【Python】深入理解Python中的装饰器链：创建组合装饰器的技巧与实践\": \"https://blog.csdn.net/nokiaguy/article/details/145397710\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"How iPhone Data Can Be Securely Erased?\": \"https://infosecwriteups.com/how-iphone-data-can-be-securely-erased-7b044dbf7919?source=rss----7b722bfd1b8d---4\",\n \"Cutting Off Skynet: Running Local LLMs With Ollama\": \"https://infosecwriteups.com/cutting-off-skynet-running-local-llms-with-ollama-8753e4d1426b?source=rss----7b722bfd1b8d---4\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2025-01-30 Review\": \"http://www.sec-wiki.com/?2025-01-30\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Thu Jan 30 20:25:02 UTC 2025\": \"https://github.com/trickest/cve/commit/630b95e7243b0245cde3df59fe484976ce30e2ee\",\n \"Update Thu Jan 30 12:18:33 UTC 2025\": \"https://github.com/trickest/cve/commit/6d2f59a5338e9b0f9fda557d99080a0f50fd20af\",\n \"Update Thu Jan 30 04:17:50 UTC 2025\": \"https://github.com/trickest/cve/commit/9cf77fc7fab952fdfcbf1e41b07c41bd3ecd8cd6\"\n },\n \"bunnie's blog\": {\n \"Name that Ware, January 2025\": \"https://www.bunniestudios.com/blog/2025/name-that-ware-january-2025/\",\n \"Winner, Name that Ware December 2024\": \"https://www.bunniestudios.com/blog/2025/winner-name-that-ware-december-2024/\"\n },\n \"gynvael.coldwind//vx.log (en)\": {\n \"On hackers, hackers, and hilarious misunderstandings\": \"https://gynvael.coldwind.pl/?id=799\"\n },\n \"Hacking Articles\": {\n \"AD Recon: Kerberos Username Bruteforce\": \"https://www.hackingarticles.in/ad-recon-kerberos-username-bruteforce/\"\n },\n \"Doonsec's feed\": {\n \"秦安：特朗普“半夜清洗”，解雇17名检察长，成三位一体反腐布局\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=1&sn=11cf99bd5faf07695e3ac89ec70c72aa\",\n \"张志坤：巴拿马运河争夺战，真正目标是中国\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=2&sn=4135a1c0538e4e13d4e225ad3de60ac2\",\n \"牟林：关于无人武器作战的战略思考\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=3&sn=c0854894545a61159ff4423409fe77fe\",\n \"牟林：靠征关税致富做得到吗？\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=4&sn=a54df395e2fe825567a13f177b2f1ed2\",\n \"Loggy - Introduce to reverseing golang binary\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzU4MDE5NQ==&mid=2247484272&idx=1&sn=b38cb2dd664786c222e314a789b7da40\",\n \"byd红客\": \"https://mp.weixin.qq.com/s?__biz=MzkyNTQ0OTYxOQ==&mid=2247483988&idx=1&sn=5b25e95ccbd765424198f50243e7edf7\",\n \"【速报】github 挂了？（世界就是一个巨大的草台班子）\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485449&idx=1&sn=2e621cb2afe5e511ac88f055da981272\",\n \"Kali下安装与使用BeEF：反射型与存储型XSS攻击、Cookie会话劫持、键盘监听及浏览器操控技巧\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486453&idx=1&sn=cd3057994dfa4e6a29c9d70b342f9e8a\",\n \"起\": \"https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496866&idx=1&sn=50672ddfb00ba89a961f457c1121f0f1\",\n \"（吃瓜）Github疑似遭受ddos攻击\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484164&idx=1&sn=0e0f18f1790d8e9a2fd97d76ed9ff8eb\",\n \"特朗普“午夜清洗”：17名监察长“下马”，法律争议“炸锅\": \"https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505045&idx=1&sn=d3b57f2d70f4497ba9e6bd0d3792b39b\",\n \"印度卫星对接成功：技术存在局限性\": \"https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505045&idx=2&sn=1f9e6ca2b9e492d72bd16233e83dcf9c\",\n \"大家一起ddos白宫\": \"https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491639&idx=1&sn=ea6a2bb14d619f5834396d7fe8ebf609\",\n \"研究完威胁分类，才发现我们平时谈的“以威胁为中心”都是假的！\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492288&idx=1&sn=4a85f9ccfbc35e9f52f817bc25f4ce10\",\n \"世界需要一个能谋善断的AI（三）决策的厚重：人类世界是如何被“选择”塑造的?\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492288&idx=2&sn=416787d4505f6a7bf562f91bcf9f37cd\",\n \"DeepSeek-R1：通过强化学习激励LLM的推理能力\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264879&idx=1&sn=74c7f7b47fbb79364c8dc55264481f92\",\n \"分享图片\": \"https://mp.weixin.qq.com/s?__biz=MzI3Njc1MjcxMg==&mid=2247494399&idx=1&sn=21a59287adb50dc4b945b2325e795fe4\",\n \"SpiderX-V2.0发布 解锁JS加密新姿势攻防武器\": \"https://mp.weixin.qq.com/s?__biz=MzkxOTU3MDY4MQ==&mid=2247484842&idx=1&sn=29eca64227216346731e46e212de2a92\",\n \"量子计算机时代的汽车系统的嵌入式安全\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620255&idx=1&sn=610c3bff71970b4fbc041a0177ee93fd\",\n \"揭开人工智能在交通网络安全中的神秘面纱\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620255&idx=2&sn=c361a268b2ef526cf5e44433248d1d13\",\n \"车辆网络处理器上的后量子安全启动\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620255&idx=3&sn=ee30d942f28072654d6b335624aea228\",\n \"新年开工啦\": \"https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247484490&idx=1&sn=379870838aa89954061ce91a8fe22392\",\n \"揭秘土耳其“红皮书”：真相还是阴谋？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559341&idx=1&sn=517465083ba598dcfc9d243a3f11d1c9\",\n \"中亚新位置：美国到底是“机遇”还是“陷阱”？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559341&idx=2&sn=58f2aa6cb8bf4e2d52982ba4dc461e34\",\n \"深入浅出API测试｜搜集分析与漏洞挖掘实战\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496981&idx=1&sn=1b88708a474086d96cf22a9428c93835\",\n \"网络运维工程师如何高效运维数据中心，记住这6条定律！\": \"https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247528027&idx=1&sn=bb96422660e09519af965fecc213d4cf\",\n \"春节假期7个基本网络安全提示\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114269&idx=1&sn=731f251283d6f584e16dd15c5f0f1b4f\",\n \"为什么DDoS攻击如此致命？\": \"https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649464754&idx=1&sn=df89b63da565ca06f6419c818442ef13\",\n \"利用DeepSeek进行java代码审计，好用！\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjQyODY5MA==&mid=2247487042&idx=1&sn=256d32002fcf342d7770b39c1d41f695\",\n \"收藏 | dotNet安全矩阵 2024 年度目标权限维持阶段文章和工具汇总\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498569&idx=1&sn=a273094850e815c5dccaf5c9fbb7956f\",\n \"国内最专业、最全面的 [ .NET 代码审计 ] 体系化学习交流社区\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498569&idx=2&sn=efe5abab1b53aa0c37945f18fbfb5043\",\n \"收藏 | dotNet安全矩阵 2024 年度外网入口打点阶段文章和工具汇总\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498569&idx=3&sn=b5363f2569c8b2f819bc9d52cc71cc79\",\n \"2024年，安全厂商为什么这么惨？\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=1&sn=ccf61766565e0badd0172f57ee1728f1\",\n \"【干货原创】实网攻防演习常态化，会带来什么变化01\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=4&sn=919cc9d33961ed8e6a35eede596478de\",\n \"【干货原创】K12教育，鲜为人知的模式秘密\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=5&sn=bf335b4022071ba93823b812090acee6\",\n \"原创文章目录\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=6&sn=3ff7227d97237b358e80b064be4215f2\",\n \"四川大学网安少年班\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485616&idx=1&sn=5255daa9a5e28be2c73d156eeb167ad5\",\n \"世界经济论坛《2025年全球网络安全展望》报告一览\": \"https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247484780&idx=1&sn=5c29954e85b159e98b2db3467a6f4281\",\n \"【恭贺新春】企业级内网仿真「Thunder」免费开战！通关赢千元现金\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MDc1MjY5Ng==&mid=2247493011&idx=1&sn=324fff14046b3d7b31e4f2827bccacfb\",\n \"AI风险分析 | Grok提示词泄露前后暗藏玄机\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494054&idx=1&sn=9122e0562bcad42ee707e0879b945aa1\",\n \"针对DeepSeek的网络攻击再升级：僵尸网络进场 攻击指令激增上百倍u200b\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513623&idx=1&sn=d0d49c0d4b6e85b4dd8aacd8623ca272\",\n \"Offsec PG靶场-Pelican(OSCP考试)\": \"https://mp.weixin.qq.com/s?__biz=MzU5MjIzMDMzNg==&mid=2247484347&idx=1&sn=0c628f8609fa4badb4f81f1f90b3d305\",\n \"六部门印发｜关于完善数据流通安全治理 更好促进数据要素市场化价值化的实施方案\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247506759&idx=1&sn=851aa85a7e994c201ed3fa8c930ebe05\",\n \"UbuntuServer24.04上使用NVIDIA GeForce RTX 4060Ti部署并训练DeepSeek R1大模型\": \"https://mp.weixin.qq.com/s?__biz=Mzg2MjYxODQ4Mw==&mid=2247484982&idx=1&sn=226d2daae237f9ead22b087b2611e457\",\n \"干货 | 渗透测试以及checklist模板，附PDF免费下载！\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247570691&idx=1&sn=74eca2607d62024085a1edf27565aeef\",\n \"DeepSeek遭暴力破解 攻击IP均来自美国\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170578&idx=1&sn=c79c88154ac6083c4d178ed4a123665b\",\n \"奇安信：针对DeepSeek的网络攻击再升级! 僵尸网络进场，指令激增上百倍\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170578&idx=2&sn=19ad0e0ac08770adde15936cbc245f61\",\n \"从创新环境看新质生产力发展\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651618932&idx=1&sn=829c061c8fe0ac244f869355102c255f\",\n \"僵尸网络进场，针对 DeepSeek 网络攻击再升级\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624774&idx=1&sn=5c438a523258d18082e4918e22ff51c9\",\n \"惊魂72小时：一场席卷Linux世界的巨大威胁是如何被阻止的\": \"https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489858&idx=1&sn=01a4503fd428692055c9a137cd9bb0a8\",\n \"比特币链上大周期投资指导方案\": \"https://mp.weixin.qq.com/s?__biz=MzI3NTcwNTQ2Mg==&mid=2247487630&idx=1&sn=532f51f67ceab5e41324cbf9a80d0432\",\n \"秒达工具箱：各种开发者必备的工具集合，支持Docker部署\": \"https://mp.weixin.qq.com/s?__biz=MzA4MjkzMTcxMg==&mid=2449046776&idx=1&sn=c7985da37fee0d92ef3585fa526b3ba5\",\n \"DeepSeek 数据库被攻击，国外团队已公开披露漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488775&idx=1&sn=2b8f2e1154eb0de5e1422589ee7b4f95\",\n \"旧知新话说“标识”之心意篇：标识助力物流信息可追溯\": \"https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247592366&idx=1&sn=28ab8739af2ccfaae353c286890cde3f\",\n \"DeepSeek 开源免费，大洋彼岸直接急了\": \"https://mp.weixin.qq.com/s?__biz=MzIzNjU5NDE2MA==&mid=2247490177&idx=1&sn=8c3da180f37e24bb83cc20d6168c694a\",\n \"可能这就是你deepseek无法访问的原因——deepseek 漏洞（已修复）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485665&idx=1&sn=ce7d065feabad43d7bd144eb57ba1115\",\n \"小日子已经被deepseek折服——日媒：DeepSeek模型以简单方法实现高性能\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485665&idx=2&sn=3648dc775f70e3d481072e9e72b21a84\",\n \"FtC4Wraiths CTF战队招募令：成为幽灵，掌控战场！\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247485011&idx=1&sn=eab2c10d8fcd6cc7e3fbdff694b4cd7a\",\n \"【2025-01-30】黑客新闻摘要\": \"https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488390&idx=1&sn=3e958dfb1428d5b530c24db97201ea53\",\n \"DeepSeek因软件供应链安全问题导致严重聊天记录数据泄漏\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488049&idx=1&sn=377ab6f02bf6685c6ecd606923242cc3\",\n \"（吃瓜）刘农TV之渗透中遇到的神人运维\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484157&idx=1&sn=597aa22f30bf086e39d157e7ba9082ad\",\n \"DeepSeek 大模型数据泄露被国外安全团队发现\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491067&idx=1&sn=53535c35ef941d31f4d587b0cbd426e6\",\n \"利用 Unicode 溢出绕过字符阻止列表\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527393&idx=1&sn=c9213875c652ac0318560b3966348226\",\n \"幻影行动：朝鲜的全球数据渗透运动\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527393&idx=2&sn=9923de4ef6d306281ce4fb13f253af1d\",\n \"Operation Talent:FBI 查获 Nulled.to、Cracked.to、Sellix.io 等\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527393&idx=3&sn=2949b5b96b17ce834ae88fc78313dbb7\",\n \"nt-load-order 第二部分 - 你想知道的更多内容\": \"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247486806&idx=1&sn=cb4a4fbf16cf2ff7c0a99333cf155ca8\",\n \"资讯 ｜ DeepSeek被曝数据泄漏\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDkyMTE4OQ==&mid=2247489001&idx=1&sn=e965d2b7151b3b51e0b48dc264cc7cd2\",\n \"DeepSeek被海外曝出严重聊天记录数据泄漏问题\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650236959&idx=1&sn=0024f87794598ce60e345aa728e8a771\",\n \"真假\": \"https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496860&idx=1&sn=dac3717d63b7496fc260f3d91e4d5ec0\",\n \"越权漏洞实战漏洞报告\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485094&idx=1&sn=300233e404ea534282f994bd51e38594\",\n \"功能强大的XSS自动化扫描器\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489193&idx=1&sn=08b43c401df76f44cf749c44eb4af9c6\",\n \"有网安需求记得找我\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489193&idx=2&sn=6c2c55bb757aa67cc9f21a6b40c6df40\",\n \"30 - 使用DInvoke和Sliver规避OpenEDR并提升权限\": \"https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615412&idx=1&sn=3c8990ffa72d3496df8110af3260a080\",\n \"代码审计 | 如何获取CVE漏洞编号\": \"https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547534&idx=1&sn=89f840ad1397911a18d5776cb54ed32c\",\n \"俄罗斯APT组织 RomCom 再次出击，针对乌克兰政府和波兰实体的网络攻击升级！\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485658&idx=1&sn=1811ccb336bf5596bc0376a10ebe3cbe\",\n \"deepseek写的对联，总感觉有点不对劲🐶\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494633&idx=1&sn=644193027ce66213cffde32a42bad868\",\n \"【已修复】DeepSeek数据库暴露，泄露包括聊天记录在内的敏感信息\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494633&idx=2&sn=62ef49860992fd84fbebc9fbae2d8839\",\n \"Wiz研究发现暴露的DeepSeek数据库泄露敏感信息，包括聊天记录\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487248&idx=1&sn=24a5ae9036da7d03afb83c9dd679255b\",\n \"🐍年好~~嘶嘶嘶\": \"https://mp.weixin.qq.com/s?__biz=MzU4Mzc4MDQyOQ==&mid=2247484414&idx=1&sn=0caae77933f7012d33420541deab9019\",\n \"【2025春节】解题领红包活动开始喽，解出就送论坛币！\\\\\\\\n\\\\\\\\n第一题送分题有手就行（不需有脑，已有 1376 位会员完成此任务）。\\\\\\\\n\\\\\\\\n第二题 Windows 初级题 14点整 上线，题目很简单，如果你对逆向分析感兴趣，不妨借此机会自学尝试，让这次活动真正成为你技能提升的阶梯。\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141658&idx=1&sn=11067b00a771b8ee9bd4c4d0da1e8908\",\n \"当DDoS成为DeepSeek的进化催化剂\": \"https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247488198&idx=1&sn=294befdcf4fe9033a98c6148815a0ec1\",\n \"初二娘家暖 祥蛇护亲安\": \"https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247520422&idx=1&sn=ca4a601872c8ca514160ea4117463939\",\n \"本地部署 deepseek-r1 模型\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247484010&idx=1&sn=d298326b0ef79202e6e0093216ebaa82\",\n \"美军对DeepSeek“出手”了！DeepSeek遭恶意攻击，攻击IP均来自美国！\": \"https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525698&idx=1&sn=131f65bb9cab76e179f85720d4c77212\",\n \"大年初二 | 金蛇迎春，福“巳”绵延\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579270&idx=1&sn=07b4d333a5b2f57048e51d6aa8cc4224\",\n \"太丢人了\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NjY4NDg1Nw==&mid=2247483948&idx=1&sn=c78c4f6b64f4e732bb3fcbe3684d3819\",\n \"DeepSeek与其他大模型网络安全领域测评\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485615&idx=1&sn=2faa9a9f50deaf18f69117424391d9a5\",\n \"多次加密攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI1NzUxOTUzMA==&mid=2247485786&idx=1&sn=ef2f09bcc5eb7ecad5b545295bf5be21\",\n \"2025网络暴露危机报告：45%第三方应用越权访问用户数据\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=1&sn=21db4a4d88530fd63cdb722001dad229\",\n \"Banshee Stealer新变种正借Apple XProtect加密技术躲避杀毒软件\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=2&sn=428f13d4f84f8d084d6730cfab69b9cb\",\n \"上千个恶意域名正在仿冒Reddit和WeTransfer\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=3&sn=e2d553ae7f7a6dab81dc2d0f81f9d42f\",\n \"如何使用LDAPX动态检查和转换LDAP数据包\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=4&sn=d1471190e17067ad31fd0a762ad813d1\",\n \"Redis数据库主从复制RCE影响分析\": \"https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037457&idx=1&sn=32e47044585804b9f31934fb3a7a3f5c\",\n \"大年初二 画蛇添福\": \"https://mp.weixin.qq.com/s?__biz=Mzg2MTU5ODQ2Mg==&mid=2247507174&idx=1&sn=af46b8c1bdd9e12e5913225f518e1e09\",\n \"新年新挑战，红日安全不打烊！携手同行，保障数字世界，迎接无限机遇！💻💼\": \"https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851771&idx=1&sn=e32da143725cb1281d784159a2d92a85\",\n \"数字取证之数据收集u200c\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264859&idx=1&sn=5157da074859752737fca3e1377e830b\",\n \"公众号爆款突破10万+是种什么体验？\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247492229&idx=1&sn=fb6516c2c50768440203194bf072ef8f\",\n \"网安原创文章推荐【2025/1/29】\": \"https://mp.weixin.qq.com/s?__biz=MzAxNzg3NzMyNQ==&mid=2247489523&idx=1&sn=b774285745567a078a25412d369d42e3\",\n \"Qwen 2.5横空出世：阿里大模型超越DeepSeek-V3\": \"https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247486600&idx=1&sn=8759e5cb59a7ae3a10f4e360ae1343c8\",\n \"DeepSeek已遭美西方全面围剿：各种放大后的问题及恶意舆论接踵而至\": \"https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507157&idx=1&sn=705ed2698837c80532fbdcaa33a20411\",\n \"暗网情报6则：阿根廷电信公司数据泄露-260G登录凭证兜售-以色列国家安全部遭黑\": \"https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507157&idx=2&sn=32183d1acca665f6055c418febf0b72a\",\n \"5th域安全微讯早报【20250130】026期\": \"https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507157&idx=3&sn=678b70aba584829d92026c69f41dad6a\",\n \"DeepSeek与ChatGPT代码审计能力对比与分析\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247488582&idx=1&sn=48f04da2ac9254f4e9bcaba0a14431a5\",\n \"ScanV、ScanA：监测违规防患，事件安全无虞\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870840&idx=1&sn=eb6c30950bf84dd86835312726abf657\",\n \"阿里巴巴发布Qwen 2.5系列新模型，宣称超越 DeepSeek-V3\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485776&idx=1&sn=73a8b2ee13adf483ccc862bea60a6657\",\n \"知识星球持续更新\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485776&idx=2&sn=6cab966e4a4f99fd7f1a7f60f7177a88\",\n \"大年初二丨安天睿甲给您拜年了\": \"https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650209904&idx=1&sn=2d3424335c5408deda2ab07b51876c54\",\n \"初二 | 愿家人和和美美，吉祥安康！\": \"https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497079&idx=1&sn=081d5bd8e78c90a7d1bcba0e251b48ea\",\n \"记一次绕过阿里云waf与某不知名waf的双waf上传getshell\": \"https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487348&idx=1&sn=2c7a4d59b64392a92053475c8096f285\",\n \"正月初二| 有蛇有得 团团圆圆\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506081&idx=1&sn=c7bc814576e63a573c12fae1a2f9aefe\",\n \"捷普基础产品线，守护基础设施安全\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506081&idx=2&sn=95cf7a673991ce095ee9525401f5f855\",\n \"【焕新领先】捷普下一代防火墙\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506081&idx=3&sn=0776637513dd08e8549e6e036951db3e\",\n \"ISO 45001: 2018 标准详解与实施（11）6.1.3 法律法规要求和其他要求的确定\": \"https://mp.weixin.qq.com/s?__biz=MzA5OTEyNzc1Nw==&mid=2247486050&idx=1&sn=2750be0dbb0d7015b92061bb993add86\",\n \"初二\": \"https://mp.weixin.qq.com/s?__biz=MzUyMjAyODU1NA==&mid=2247491947&idx=1&sn=1d01beee8ad4061189c478e349ef78d7\",\n \"DeepSeek的强大，一句话让AI帮我写了个程序-流量安全分析研判工具\": \"https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247490145&idx=1&sn=a932062265ad24982beeee1706d70d4d\",\n \"大年初二 | 金蛇纳福，好事成双\": \"https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650963505&idx=1&sn=b6d789ba930e09c363ebc1f9444849d6\",\n \"正月初二归家暖！亚信安全祝大家蛇全蛇美，蛇行大运\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620959&idx=1&sn=7d3ca2f816e618a8e9e764ebd74f3644\",\n \"大年初二 二龙腾飞\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135289&idx=1&sn=ccfa447f9bf7ccfdf2f578f6b4f71e1d\",\n \"大年初二 | 眉开眼笑回娘家\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MDQ5MTQ4NA==&mid=2247487428&idx=1&sn=7f6bc2eb6c48e2d05a319a51de44f0c3\",\n \"CIO启示录：技术管理如何突破效率天花板\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247487724&idx=1&sn=992966ac782bfff5f58a78669566cd34\",\n \"2025常见的网络安全服务大全（汇总详解）\": \"https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247517988&idx=1&sn=71db8ddc34dbb5bd2e9fce7b232edaaf\",\n \"初二：好运连连\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624762&idx=1&sn=47241d7f7296e0089b5da756046322f0\",\n \"初二｜燃炮迎春盼福至 网站弹窗鉴虚实\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247532957&idx=1&sn=9932467d97cae7cd76bdb1790358e7cc\",\n \"【初二】安全一路相随 团聚近在眼前\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650624574&idx=1&sn=d10e6d1823438874c6e7929eb90b1e97\",\n \"2025年最可能的五种网络攻击，你的企业准备好了吗？\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247487182&idx=1&sn=3c76f4710e63ed2414babafceda9eec1\",\n \"诸葛亮教你如何应对APT攻击\": \"https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496849&idx=1&sn=d3276fd13b7a991e2e1c5cbbb41a3b4c\",\n \"国自然中标真不难！十年评审专家1v1精修你的本子，中标率提升58%\": \"https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496849&idx=2&sn=41d0f5a68ff64924994dc39112bf9672\",\n \"初二 | 姻缘美满\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493741&idx=1&sn=e36485b394ed47daf3a04225998efbe1\"\n },\n \"Flexera Blog - Feed\": {\n \"Cyber-Resilience regulations are here—is your organization ready?\": \"https://www.flexera.com/blog/security/cyber-resilience-regulations-are-here-is-your-organization-ready/\"\n },\n \"Twitter @bytehx\": {\n \"Re @CristiVlad25 @SynackRedTeam Yes!\": \"https://x.com/bytehx343/status/1884928882094268475\",\n \"Thanks @SynackRedTeam\": \"https://x.com/bytehx343/status/1884926738385580064\"\n },\n \"Trail of Bits Blog\": {\n \"PyPI now supports archiving projects\": \"https://blog.trailofbits.com/2025/01/30/pypi-now-supports-archiving-projects/\"\n },\n \"Securelist\": {\n \"No need to RSVP: a closer look at the Tria stealer campaign\": \"https://securelist.com/tria-stealer-collects-sms-data-from-android-devices/115295/\"\n },\n \"Project Zero\": {\n \"Windows Bug Class: Accessing Trapped COM Objects with IDispatch\": \"https://googleprojectzero.blogspot.com/2025/01/windows-bug-class-accessing-trapped-com.html\",\n \"Windows Exploitation Tricks: Trapping Virtual Memory Access (2025 Update)\": \"https://googleprojectzero.blogspot.com/2025/01/windows-exploitation-tricks-trapping.html\"\n },\n \"Malware-Traffic-Analysis.net - Blog Entries\": {\n \"2025-01-30: XLoader infection\": \"https://www.malware-traffic-analysis.net/2025/01/30/index.html\"\n },\n \"Malwarebytes\": {\n \"Microsoft advertisers phished via malicious Google ads\": \"https://www.malwarebytes.com/blog/cybercrime/2025/01/microsoft-advertisers-phished-via-malicious-google-ads\",\n \"The DeepSeek controversy: Authorities ask where does the data come from and how safe is it?\": \"https://www.malwarebytes.com/blog/news/2025/01/the-deepseek-controversy-authorities-ask-where-the-data-comes-from-and-where-it-goes\"\n },\n \"Reverse Engineering\": {\n \"ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries [PDF]\": \"https://www.reddit.com/r/ReverseEngineering/comments/1idxr88/resym_harnessing_llms_to_recover_variable_and/\",\n \"Decompiling 2024: A Year of Resurgance in Decompilation Research\": \"https://www.reddit.com/r/ReverseEngineering/comments/1idb0wg/decompiling_2024_a_year_of_resurgance_in/\",\n \"arm64 PC-relative addressing fun\": \"https://www.reddit.com/r/ReverseEngineering/comments/1idmknl/arm64_pcrelative_addressing_fun/\",\n \"College Survey on AI-Enhanced Phishing and Cybersecurity Training Effectiveness\": \"https://www.reddit.com/r/ReverseEngineering/comments/1idq68v/college_survey_on_aienhanced_phishing_and/\"\n },\n \"Intigriti\": {\n \"Power of the collective: Investing in the security researcher community for shared success\": \"https://www.intigriti.com/blog/business-insights/power-of-the-collective-investing-in-the-security-researcher-community-for-shared\"\n },\n \"Shostack & Friends Blog\": {\n \"The Birth of the CVE System, on Hackers To Founders\": \"https://shostack.org/blog/hackers-to-founders/\",\n \"Hoarding, Debt and Threat Modeling\": \"https://shostack.org/blog/hoarding-debt-and-threat-modeling/\"\n },\n \"rtl-sdr.com\": {\n \"Jeff Geerling Explores the CaribouLite Raspberry Pi Hat\": \"https://www.rtl-sdr.com/jeff-geerling-explores-the-cariboulite-raspberry-pi-hat/\",\n \"The Taylorator: Flooding the Broadcast FM Band with Taylor Swift Songs using a LimeSDR\": \"https://www.rtl-sdr.com/the-taylorator-flooding-the-broadcast-fm-band-with-taylor-swift-songs-using-a-limesdr/\",\n \"Video on the Basics of SDR for Hackers\": \"https://www.rtl-sdr.com/video-on-the-basics-of-sdr-for-hackers/\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"DeepSeek AI数据库泄露：超百万条日志和密钥曝光\": \"https://www.freebuf.com/articles/420968.html\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"美国版权局称 AI 辅助作品如果包含足够的人类创意可获得版权保护\": \"https://www.solidot.org/story?sid=80451\",\n \"LibreOffice 下载量突破 4 亿\": \"https://www.solidot.org/story?sid=80450\",\n \"Debian 项目停止在 X 上发推\": \"https://www.solidot.org/story?sid=80449\",\n \"Douglas Engelbart 诞辰 100 周年\": \"https://www.solidot.org/story?sid=80448\"\n },\n \"安全分析与研究\": {\n \"Fake CAPTCHA攻击技术\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490238&idx=1&sn=f7929631aed8f88ecb74b428362ec4eb&chksm=902fb596a7583c80a17cb1f35f04930cd0fa4f66251be8f81b04a1801ee9d2f8725ffb4bda0c&scene=58&subscene=0#rd\"\n },\n \"锦行科技\": {\n \"初二 | 姻缘美满\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493741&idx=1&sn=e36485b394ed47daf3a04225998efbe1&chksm=979a13c8a0ed9ade19f74ca917b1703c7b395367c03069fe1b164a21f581251495a707ffdfa8&scene=58&subscene=0#rd\"\n },\n \"Black Hills Information Security\": {\n \"Questions From a Beginner Threat Hunter\": \"https://www.blackhillsinfosec.com/questions-from-a-beginner-threat-hunter/\"\n },\n \"红日安全\": {\n \"新年新挑战，红日安全不打烊！携手同行，保障数字世界，迎接无限机遇！💻💼\": \"https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851771&idx=1&sn=e32da143725cb1281d784159a2d92a85&chksm=f3e4e9f8c49360ee9f066a43959bd3732de37e27ca245ce7717817dc356c25315b6e3cd90820&scene=58&subscene=0#rd\"\n },\n \"吾爱破解论坛\": {\n \"【2025春节】解题领红包活动开始喽，解出就送论坛币！\\n\\n第一题送分题有手就行（不需有脑，已有 1376 位会员完成此任务）。\\n\\n第二题 Windows 初级题 14点整 上线，题目很简单，如果你对逆向分析感兴趣，不妨借此机会自学尝试，让这次活动真正成为你技能提升的阶梯。\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141658&idx=1&sn=11067b00a771b8ee9bd4c4d0da1e8908&chksm=bd50a64e8a272f589319d04410866e550b8792cd73b49c0eecc8abb4df9996d504f306e3b43c&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"针对DeepSeek的网络攻击再升级：僵尸网络进场 攻击指令激增上百倍​\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513623&idx=1&sn=d0d49c0d4b6e85b4dd8aacd8623ca272&chksm=ebfaf137dc8d782175c2209f64fe50b91bf2c7ff519b1be99b56d7f5f4f3171fe8cb575f539a&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"我合理怀疑，春晚节目组混进了 B 站的人\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073042&idx=1&sn=e5673315f8ee79ebe9dd7e1d2616c261&chksm=7e57d32449205a32ea25640d2639fcc099fe5048fbdbbc484c363f514ec6a87a0fa0321f07d2&scene=58&subscene=0#rd\",\n \"美国对 DeepSeek 开展国家安全调查；传 DS 训练模型绕过英伟达 CUDA；春节档刷新初一票房纪录 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073041&idx=1&sn=f9ec93124dfcfa3b5d40259ab4c2c990&chksm=7e57d32749205a310d8f135837f52b88af79c3c4cfa6f0101b33a99b48b746b953b3373c0e88&scene=58&subscene=0#rd\"\n },\n \"白帽子章华鹏\": {\n \"DeepSeek被海外曝出严重聊天记录数据泄漏问题\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650236959&idx=1&sn=0024f87794598ce60e345aa728e8a771&chksm=f04ad2a3c73d5bb52eb2a39504865a355749cee5228d9bcaa1078cab5387d5509791a0eafeb4&scene=58&subscene=0#rd\"\n },\n \"墨菲安全\": {\n \"DeepSeek因软件供应链安全问题导致严重聊天记录数据泄漏\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488049&idx=1&sn=377ab6f02bf6685c6ecd606923242cc3&chksm=c13d7109f64af81f818a52b31171cec774bb86a531f1405b24c020869c281e0865f573e9c6a6&scene=58&subscene=0#rd\"\n },\n \"迪哥讲事\": {\n \"深入浅出API测试｜搜集分析与漏洞挖掘实战\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496981&idx=1&sn=1b88708a474086d96cf22a9428c93835&chksm=e8a5ff76dfd276605ae35037c735c6cb3cb39f0962d2b476be2284664584944a6e21d112112a&scene=58&subscene=0#rd\"\n },\n \"bellingcat\": {\n \"Neo-Nazis Linked to “Terrorist Activities” to Host Budapest Concert\": \"https://www.bellingcat.com/news/2025/01/30/neo-nazis-linked-to-terrorist-activities-to-host-budapest-concert/\"\n },\n \"M01N Team\": {\n \"AI风险分析 | Grok提示词泄露前后暗藏玄机\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494054&idx=1&sn=9122e0562bcad42ee707e0879b945aa1&chksm=c18429b7f6f3a0a16b65fc9b18ee5c979853c462ea1f43800abab53c6e5bc3e5d73dc9c1c540&scene=58&subscene=0#rd\"\n },\n \"360数字安全\": {\n \"大年初二 | 金蛇迎春，福“巳”绵延\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579270&idx=1&sn=07b4d333a5b2f57048e51d6aa8cc4224&chksm=9f8d268ea8faaf982879ec311f767c0e01c96d6b31f504cb5edd372b41e9ddedf3659c61e603&scene=58&subscene=0#rd\"\n },\n \"Full Disclosure\": {\n \"Quorum onQ OS - 6.0.0.5.2064 | Reflected Cross Site Scripting\\t(XSS) | CVE-2024-44449\": \"https://seclists.org/fulldisclosure/2025/Jan/23\",\n \"Deepseek writes textbook insecure code in 2025-01-28\": \"https://seclists.org/fulldisclosure/2025/Jan/22\",\n \"Text injection on https://www.google.com/sorry/index via ?q parameter (no XSS)\": \"https://seclists.org/fulldisclosure/2025/Jan/21\"\n },\n \"Securityinfo.it\": {\n \"Privacy dei dati: la maggior parte degli utenti teme una violazione\": \"https://www.securityinfo.it/2025/01/30/privacy-dei-dati-la-maggior-parte-degli-utenti-teme-una-violazione/?utm_source=rss&utm_medium=rss&utm_campaign=privacy-dei-dati-la-maggior-parte-degli-utenti-teme-una-violazione\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #733: Test Kitchen building cloud tools with cursor\": \"https://www.hecfblog.com/2025/01/daily-blog-733-test-kitchen-building.html\"\n },\n \"Have I Been Pwned latest breaches\": {\n \"Speedio (unverified) - 27,501,041 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Speedio\"\n },\n \"The Hacker News\": {\n \"Google: Over 57 Nation-State Threat Groups Using AI for Cyber Operations\": \"https://thehackernews.com/2025/01/google-over-57-nation-state-threat.html\",\n \"Authorities Seize Domains of Popular Hacking Forums in Major Cybercrime Crackdown\": \"https://thehackernews.com/2025/01/authorities-seize-domains-of-popular.html\",\n \"Lightning AI Studio Vulnerability Allowed RCE via Hidden URL Parameter\": \"https://thehackernews.com/2025/01/lightning-ai-studio-vulnerability.html\",\n \"SOC Analysts - Reimagining Their Role Using AI\": \"https://thehackernews.com/2025/01/soc-analysts-reimagining-their-role.html\",\n \"DeepSeek AI Database Exposed: Over 1 Million Log Lines, Secret Keys Leaked\": \"https://thehackernews.com/2025/01/deepseek-ai-database-exposed-over-1.html\",\n \"Unpatched PHP Voyager Flaws Leave Servers Open to One-Click RCE Exploits\": \"https://thehackernews.com/2025/01/unpatched-php-voyager-flaws-leave.html\",\n \"New Aquabot Botnet Exploits CVE-2024-41710 in Mitel Phones for DDoS Attacks\": \"https://thehackernews.com/2025/01/new-aquabot-botnet-exploits-cve-2024.html\"\n },\n \"Deeplinks\": {\n \"Executive Order to the State Department Sideswipes Freedom Tools, Threatens Censorship Resistance, Privacy, and Anonymity of Millions\": \"https://www.eff.org/deeplinks/2025/01/executive-order-state-department-sideswipes-freedom-tools-threatens-censorship\",\n \"The Internet Never Forgets: Fighting the Memory Hole\": \"https://www.eff.org/deeplinks/2025/01/internet-never-forgets-fighting-memory-hole\",\n \"Protect Your Privacy on Bumble\": \"https://www.eff.org/deeplinks/2025/01/protect-your-privacy-bumble\"\n },\n \"Security Affairs\": {\n \"DeepSeek database exposed highly sensitive information\": \"https://securityaffairs.com/173666/data-breach/deepseek-db-exposed-highly-sensitive-information.html\",\n \"TeamViewer fixed a vulnerability in Windows client and host applications\": \"https://securityaffairs.com/173658/security/teamviewer-windows-client-flaw.html\",\n \"Operation Talent: An international law enforcement operation seized Cracked, Nulled and other cybercrime websites\": \"https://securityaffairs.com/173651/cyber-crime/operation-talent-seized-cracked-nulled-cybercrime-websites.html\",\n \"PHP package Voyager flaws expose to one-click RCE exploits\": \"https://securityaffairs.com/173646/hacking/php-package-voyager-flaws.html\",\n \"Italy’s Data Protection Authority Garante requested information from Deepseek\": \"https://securityaffairs.com/173637/digital-id/italys-garante-requested-information-from-deepseek.html\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Backdoor found in two healthcare patient monitors, linked to IP in China\": \"https://www.bleepingcomputer.com/news/security/backdoor-found-in-two-healthcare-patient-monitors-linked-to-ip-in-china/\",\n \"Lawmakers push for guardrails, deadline on cyber military study\": \"https://therecord.media/lawmakers-push-for-guardrails-deadline-cyber-force-study\",\n \"Google blocked 2.36 million risky Android apps from Play Store in 2024\": \"https://www.bleepingcomputer.com/news/security/google-blocked-236-million-risky-android-apps-from-play-store-in-2024/\",\n \"States with laws requiring data brokers to register are ramping up enforcement\": \"https://therecord.media/state-data-broker-registry-laws-fines-warnings\",\n \"Gabbard grilled over Snowden comments during Senate confirmation hearing\": \"https://therecord.media/gabbard-grilled-over-snowden-comments-senate-confirmation-hearing\",\n \"US Justice Department says cybercrime forum allegedly affected 17 million Americans\": \"https://techcrunch.com/2025/01/30/us-justice-department-says-cybercrime-forum-allegedly-affected-17-million-americans/\",\n \"Defeating Future Threats Starts Today\": \"https://blog.talosintelligence.com/defeating-future-threats-starts-today/\",\n \"Ransomware attack disrupts New York blood donation giant\": \"https://www.bleepingcomputer.com/news/security/ransomware-attack-disrupts-new-york-blood-donation-giant/\",\n \"Infrastructure Laundering: Blending in with the Cloud\": \"https://krebsonsecurity.com/2025/01/infrastructure-laundering-blending-in-with-the-cloud/\",\n \"Ransomware attack on New York Blood Center forces workarounds, drive cancellations\": \"https://therecord.media/ransomware-attack-new-york-blood-center-forces-workarounds\",\n \"DeepSeek exposes database with over 1 million chat records\": \"https://www.bleepingcomputer.com/news/security/deepseek-exposes-database-with-over-1-million-chat-records/\",\n \"International police coalition takes down two prolific cybercrime and hacking forums\": \"https://techcrunch.com/2025/01/30/international-police-coalition-takes-down-two-prolific-cybercrime-and-hacking-forums/\",\n \"Police take down two large cybercrime forums, arrest suspects\": \"https://therecord.media/cybercrime-forums-cracked-nulled-takedowns-arrests\",\n \"Major GitHub outage affects pull requests and other services\": \"https://www.bleepingcomputer.com/news/technology/major-github-outage-affects-pull-requests-and-other-services/\",\n \"The Advantages of Cloud-Based Remote Desktop versus RDP over VPN\": \"https://www.bleepingcomputer.com/news/security/the-advantages-of-cloud-based-remote-desktop-versus-rdp-over-vpn/\",\n \"(Un)Happy Trails\": \"https://bfore.ai/unhappy-trails-travel-related-scams-and-what-travel-vendors-can-do-to-protect-their-customers/\",\n \"New Syncjacking attack hijacks devices using Chrome extensions\": \"https://www.bleepingcomputer.com/news/security/new-syncjacking-attack-hijacks-devices-using-chrome-extensions/\",\n \"bedevil: Dynamic Linker Patching\": \"http://localhost:1313/posts/bedevil_dynamic_linker_patching/\",\n \"Hack.lu: In-Depth Study of Linux Rootkits: Evolution, Detection, and Defense\": \"http://localhost:1313/talks/hack.lu_rootkits_2024/\",\n \"Hack.lu: The Gist of Hundreds of Incident Response Cases\": \"http://localhost:1313/talks/hack.lu_gist_2024/\",\n \"Reptile's Custom Kernel-Module Launcher\": \"http://localhost:1313/posts/reptile_launcher/\",\n \"BSides Munich: /proc for Security Analysts\": \"http://localhost:1313/talks/bsides_munich_2024/\",\n \"DeepSec: RAT Builders - How to catch them all\": \"http://localhost:1313/talks/deepsec_2024/\",\n \"Shell Script Compiler (shc)\": \"http://localhost:1313/posts/shell_script_compiler/\",\n \"Today I Learned - setfacl\": \"http://localhost:1313/posts/today_i_learned_setfacl/\",\n \"Analysis of Python's .pth files as a persistence mechanism\": \"http://localhost:1313/posts/publish_python_pth_extension/\",\n \"Tear Down The Castle - Part 1\": \"http://localhost:1313/posts/tear_down_castle_part_one/\",\n \"Oh my .. ! - Suspicious network traffic detected including Ransomware\": \"http://localhost:1313/posts/suspicious_network_traffic_ransomware/\",\n \"Tear Down The Castle - Part 2\": \"http://localhost:1313/posts/tear_down_castle_part_two/\",\n \"Follow-Up: Alibaba’s Qwen2.5-VL Model is Also Vulnerable to Prompt Attacks\": \"https://www.kelacyber.com/blog/follow-up-alibabas-qwen2-5-vl-model-is-also-vulnerable-to-prompt-attacks/\",\n \"Police seizes Cracked and Nulled hacking forum servers, arrests suspects\": \"https://www.bleepingcomputer.com/news/security/police-seizes-cracked-and-nulled-hacking-forum-servers-arrests-suspects/\",\n \"Microsoft lifts Windows 11 update block for PCs with gaming issues\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-lifts-windows-11-update-block-for-pcs-with-gaming-issues/\",\n \"Common OAuth Vulnerabilities\": \"https://blog.doyensec.com/2025/01/30/oauth-common-vulnerabilities.html\",\n \"DeepSeek’s Growing Influence Sparks a Surge in Frauds and Phishing Attacks\": \"https://cyble.com/blog/deepseeks-growing-influence-sparks-a-surge-in-frauds-and-phishing-attacks/\",\n \"Time Bandit ChatGPT jailbreak bypasses safeguards on sensitive topics\": \"https://www.bleepingcomputer.com/news/security/time-bandit-chatgpt-jailbreak-bypasses-safeguards-on-sensitive-topics/\",\n \"Comunicare per proteggere: strategie e strumenti per implementare i requisiti ISO 27001\": \"https://www.cybersecurity360.it/legal/comunicare-per-proteggere-strategie-e-strumenti-per-implementare-i-requisiti-iso-27001/\",\n \"Bilanciare i rischi di security beneficiando di tecnologie di AI: fra opportunità e rischi\": \"https://www.cybersecurity360.it/news/bilanciare-i-rischi-di-security-beneficiando-di-tecnologie-di-ai-fra-opportunita-e-rischi/\",\n \"DeepSeek: i timori per la privacy e la cyber security\": \"https://www.cybersecurity360.it/cultura-cyber/deepseek-i-timori-per-la-privacy-e-la-cyber-security/\",\n \"DeepSeek, serve cautela: ci sono pericoli per la sicurezza\": \"https://www.cybersecurity360.it/news/deepseek-usarlo-con-cautela-ci-sono-pericoli-per-la-sicurezza/\",\n \"Smishing a tema Poste Italiane: i dettagli e come difendersi\": \"https://www.cybersecurity360.it/news/smishing-a-tema-poste-italiane-i-dettagli-e-come-difendersi/\",\n \"Più cyber attacchi nel 2024. E nel 2025 il trend non si fermerà\": \"https://www.cybersecurity360.it/outlook/piu-cyber-attacchi-nel-2024-e-nel-2025-il-trend-non-si-fermera/\",\n \"I cyber rischi in azienda che (anche) gli italiani non comprendono\": \"https://www.cybersecurity360.it/news/i-cyber-rischi-in-azienda-che-anche-gli-italiani-non-comprendono/\",\n \"Le chat WhatsApp sono corrispondenza da tutelare: i paletti privacy della Cassazione\": \"https://www.cybersecurity360.it/news/le-chat-whatsapp-sono-corrispondenza-da-tutelare-i-paletti-privacy-della-cassazione/\",\n \"Decentraleyes potenzia la privacy online: vantaggi e limiti\": \"https://www.cybersecurity360.it/soluzioni-aziendali/decentraleyes-potenzia-la-privacy-online-vantaggi-e-limiti/\",\n \"Il controllo del dipendente da parte del datore di lavoro: le sfide per la privacy\": \"https://www.cybersecurity360.it/legal/privacy-dati-personali/il-controllo-del-dipendente-da-parte-del-datore-di-lavoro-le-sfide-per-la-privacy/\",\n \"Talos IR trends Q4 2024: Web shell usage and exploitation of public-facing applications spike\": \"https://blog.talosintelligence.com/talos-ir-trends-q4-2024/\",\n \"UK, US Introduce “Content Credentials” Labeling to Counter Deepfakes, Misinformation in the Age of AI\": \"https://cyble.com/blog/uk-us-introduce-content-credentials-labeling/\",\n \"Speedio (unverified) - 27,501,041 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Speedio\",\n \"ICS Vulnerability Report: Cyble Urges Critical mySCADA Fixes\": \"https://cyble.com/blog/ics-vulnerability-report-cyble-urges-critical-myscada-fixes/\"\n },\n \"Social Engineering\": {\n \"\\\"Humans Aren’t the Weakest Link, They’re the Strongest Layer in Cybersecurity\\\"\": \"https://www.reddit.com/r/SocialEngineering/comments/1idqop9/humans_arent_the_weakest_link_theyre_the/\",\n \"How to better at socialising?\": \"https://www.reddit.com/r/SocialEngineering/comments/1idam33/how_to_better_at_socialising/\"\n },\n \"Schneier on Security\": {\n \"Fake Reddit and WeTransfer Sites are Pushing Malware\": \"https://www.schneier.com/blog/archives/2025/01/fake-reddit-and-wetransfer-sites-are-pushing-malware.html\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"The Slow Death of OCSP\": \"https://www.reddit.com/r/netsec/comments/1idvdv5/the_slow_death_of_ocsp/\",\n \"Practising Heap Exploitation: Using House Of Force Technique with Practicals\": \"https://www.reddit.com/r/netsec/comments/1idm8tr/practising_heap_exploitation_using_house_of_force/\",\n \"WebAssembly and security: a review\": \"https://www.reddit.com/r/netsec/comments/1idnsqk/webassembly_and_security_a_review/\",\n \"A short Introduction to BloodHound Custom Queries\": \"https://www.reddit.com/r/netsec/comments/1idlm4q/a_short_introduction_to_bloodhound_custom_queries/\",\n \"CVE-2024-46506: Unauthenticated RCE in NetAlertx\": \"https://www.reddit.com/r/netsec/comments/1idsuzx/cve202446506_unauthenticated_rce_in_netalertx/\"\n },\n \"Graham Cluley\": {\n \"Smashing Security podcast #402: Hackers get hacked, the British Museum IT shutdown, and social media kidnaps\": \"https://grahamcluley.com/smashing-security-podcast-402-hackers-get-hacked-the-british-museum-it-shutdown-and-social-media-kidnaps/\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"GCP Red Teaming / Pentesting Certifications\": \"https://www.reddit.com/r/netsecstudents/comments/1idjlk4/gcp_red_teaming_pentesting_certifications/\"\n },\n \"Krebs on Security\": {\n \"Infrastructure Laundering: Blending in with the Cloud\": \"https://krebsonsecurity.com/2025/01/infrastructure-laundering-blending-in-with-the-cloud/\"\n },\n \"Krypt3ia\": {\n \"Threat Report: Risks and Considerations of Storing Corporate Security Telemetry in EDR Vendor Cloud Instances\": \"https://krypt3ia.wordpress.com/2025/01/30/threat-report-risks-and-considerations-of-storing-corporate-security-telemetry-in-edr-vendor-cloud-instances/\",\n \"Krypt3ia Daily Cyber Threat Intelligence (CTI) Digest\": \"https://krypt3ia.wordpress.com/2025/01/30/krypt3ia-daily-cyber-threat-intelligence-cti-digest-6/\"\n },\n \"Your Open Hacker Community\": {\n \"Everything is hacked 😊\": \"https://www.reddit.com/r/HowToHack/comments/1ie17ff/everything_is_hacked/\",\n \"Phones that are open to connecting via Bluetooth\": \"https://www.reddit.com/r/HowToHack/comments/1idms17/phones_that_are_open_to_connecting_via_bluetooth/\",\n \"Most Effective learning path to Reverse engineer network server of old games?\": \"https://www.reddit.com/r/HowToHack/comments/1ids89n/most_effective_learning_path_to_reverse_engineer/\",\n \"Is there any website I can use to convert a large amount of passwords into Hashes (in batch)?\": \"https://www.reddit.com/r/HowToHack/comments/1idu982/is_there_any_website_i_can_use_to_convert_a_large/\",\n \"Finding an array of class instances using Cheat Engine?\": \"https://www.reddit.com/r/HowToHack/comments/1idh9ob/finding_an_array_of_class_instances_using_cheat/\",\n \"Free course\": \"https://www.reddit.com/r/HowToHack/comments/1idm5ny/free_course/\",\n \"Cheat engine?\": \"https://www.reddit.com/r/HowToHack/comments/1idu18m/cheat_engine/\",\n \"Who has dark web AI?\": \"https://www.reddit.com/r/HowToHack/comments/1idtmsb/who_has_dark_web_ai/\",\n \"Question\": \"https://www.reddit.com/r/HowToHack/comments/1ide7pg/question/\",\n \"I want to hack like elliot from mister robot\": \"https://www.reddit.com/r/HowToHack/comments/1idwvv2/i_want_to_hack_like_elliot_from_mister_robot/\",\n \"Tips for Copying and Pasting from Apps That Restrict It\": \"https://www.reddit.com/r/HowToHack/comments/1idg62q/tips_for_copying_and_pasting_from_apps_that/\",\n \"Can I duplicate a SIM card?\": \"https://www.reddit.com/r/HowToHack/comments/1idihtl/can_i_duplicate_a_sim_card/\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"PCAPs or It Didn't Happen: Exposing an Old Netgear Vulnerability Still Active in 2025 [Guest Diary], (Thu, Jan 30th)\": \"https://isc.sans.edu/diary/rss/31638\",\n \"ISC Stormcast For Thursday, January 30th, 2025 https://isc.sans.edu/podcastdetail/9302, (Thu, Jan 30th)\": \"https://isc.sans.edu/diary/rss/31636\"\n },\n \"Deep Web\": {\n \"My friend stumbled upon these while gliding at dark web.\": \"https://www.reddit.com/r/deepweb/comments/1idlmuj/my_friend_stumbled_upon_these_while_gliding_at/\"\n },\n \"Information Security\": {\n \"Change Healthcare data breach – how to protect yourself\": \"https://www.reddit.com/r/Information_Security/comments/1idnbgn/change_healthcare_data_breach_how_to_protect/\",\n \"College Survey on AI-Enhanced Phishing and Cybersecurity Training Effectiveness\": \"https://www.reddit.com/r/Information_Security/comments/1idq592/college_survey_on_aienhanced_phishing_and/\",\n \"CIS standards for CyberArk\": \"https://www.reddit.com/r/Information_Security/comments/1idn856/cis_standards_for_cyberark/\",\n \"What is SHEIN doing to our data?\": \"https://www.reddit.com/r/Information_Security/comments/1idgkn6/what_is_shein_doing_to_our_data/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Cred Vaults, Cheap AI, and Hacking Devices - Matt Bishop - PSW #859\": \"http://sites.libsyn.com/18678/cred-vaults-cheap-ai-and-hacking-devices-matt-bishop-psw-859\"\n }\n}"}, "d7947b8192250ba7dd1cadd76aaeccff298ba8f2": {"t": 1785772252.884333, "n": 48466, "h": "87cabab044413ea2", "c": "{\n \"Trustwave Blog\": {\n \"How Trustwave’s Fusion Platform Analyzes Ransomware Tactics in the Energy Sector: A Comprehensive Overview\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/how-trustwaves-fusion-platform-analyzes-ransomware-tactics-in-the-energy-sector-a-comprehensive-overview/\"\n },\n \"Armin Ronacher's Thoughts and Writings\": {\n \"How I Use AI: Meet My Promptly Hired Model Intern\": \"http://lucumr.pocoo.org/2025/1/30/how-i-ai\"\n },\n \"Security Boulevard\": {\n \"2025 predictions: Security industry\": \"https://securityboulevard.com/2025/01/2025-predictions-security-industry/\",\n \"Preparing for PCI DSS 4.0: How Sonatype SBOM Manager can streamline and accelerate your transition\": \"https://securityboulevard.com/2025/01/preparing-for-pci-dss-4-0-how-sonatype-sbom-manager-can-streamline-and-accelerate-your-transition/\",\n \"Trust in Cloud Security with Effective Secrets Rotation\": \"https://securityboulevard.com/2025/01/trust-in-cloud-security-with-effective-secrets-rotation/\",\n \"Innovative PAM Strategies for Modern Enterprises\": \"https://securityboulevard.com/2025/01/innovative-pam-strategies-for-modern-enterprises/\",\n \"Advancing Cloud Compliance with Proactive Measures\": \"https://securityboulevard.com/2025/01/advancing-cloud-compliance-with-proactive-measures/\",\n \"Hiya AI Phone App Protects Against Deepfakes, Other Scams\": \"https://securityboulevard.com/2025/01/hiya-ai-phone-app-protects-against-deepfakes-other-scams/\",\n \"DEF CON 32 – Color Blasted Badge Making: How Hard Could It Be\": \"https://securityboulevard.com/2025/01/def-con-32-color-blasted-badge-making-how-hard-could-it-be/\",\n \"2025’s Top Five Trends in Identity Verification\": \"https://securityboulevard.com/2025/01/2025s-top-five-trends-in-identity-verification/\",\n \"Next Steps from the PCI Council’s SAQ-A Update: Critical Responsibilities and Opportunities for PSPs\": \"https://securityboulevard.com/2025/01/next-steps-from-the-pci-councils-saq-a-update-critical-responsibilities-and-opportunities-for-psps/\",\n \"Assessing the New SAQ-A Changes: Insights for QSAs\": \"https://securityboulevard.com/2025/01/assessing-the-new-saq-a-changes-insights-for-qsas/\"\n },\n \"Sukka's Blog\": {\n \"2024：浏览器从 A 到 Z\": \"https://blog.skk.moe/post/2024-browser-from-a-to-z/\"\n },\n \"一个被知识诅咒的人\": {\n \"【Python】深入探索Python元类：动态生成类与对象的艺术\": \"https://blog.csdn.net/nokiaguy/article/details/145397730\",\n \"【Python】深入理解Python中的装饰器链：创建组合装饰器的技巧与实践\": \"https://blog.csdn.net/nokiaguy/article/details/145397710\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"How iPhone Data Can Be Securely Erased?\": \"https://infosecwriteups.com/how-iphone-data-can-be-securely-erased-7b044dbf7919?source=rss----7b722bfd1b8d---4\",\n \"Cutting Off Skynet: Running Local LLMs With Ollama\": \"https://infosecwriteups.com/cutting-off-skynet-running-local-llms-with-ollama-8753e4d1426b?source=rss----7b722bfd1b8d---4\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2025-01-30 Review\": \"http://www.sec-wiki.com/?2025-01-30\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Thu Jan 30 20:25:02 UTC 2025\": \"https://github.com/trickest/cve/commit/630b95e7243b0245cde3df59fe484976ce30e2ee\",\n \"Update Thu Jan 30 12:18:33 UTC 2025\": \"https://github.com/trickest/cve/commit/6d2f59a5338e9b0f9fda557d99080a0f50fd20af\",\n \"Update Thu Jan 30 04:17:50 UTC 2025\": \"https://github.com/trickest/cve/commit/9cf77fc7fab952fdfcbf1e41b07c41bd3ecd8cd6\"\n },\n \"bunnie's blog\": {\n \"Name that Ware, January 2025\": \"https://www.bunniestudios.com/blog/2025/name-that-ware-january-2025/\",\n \"Winner, Name that Ware December 2024\": \"https://www.bunniestudios.com/blog/2025/winner-name-that-ware-december-2024/\"\n },\n \"gynvael.coldwind//vx.log (en)\": {\n \"On hackers, hackers, and hilarious misunderstandings\": \"https://gynvael.coldwind.pl/?id=799\"\n },\n \"Hacking Articles\": {\n \"AD Recon: Kerberos Username Bruteforce\": \"https://www.hackingarticles.in/ad-recon-kerberos-username-bruteforce/\"\n },\n \"Doonsec's feed\": {\n \"秦安：特朗普“半夜清洗”，解雇17名检察长，成三位一体反腐布局\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=1&sn=11cf99bd5faf07695e3ac89ec70c72aa\",\n \"张志坤：巴拿马运河争夺战，真正目标是中国\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=2&sn=4135a1c0538e4e13d4e225ad3de60ac2\",\n \"牟林：关于无人武器作战的战略思考\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=3&sn=c0854894545a61159ff4423409fe77fe\",\n \"牟林：靠征关税致富做得到吗？\": \"https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=4&sn=a54df395e2fe825567a13f177b2f1ed2\",\n \"Loggy - Introduce to reverseing golang binary\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzU4MDE5NQ==&mid=2247484272&idx=1&sn=b38cb2dd664786c222e314a789b7da40\",\n \"byd红客\": \"https://mp.weixin.qq.com/s?__biz=MzkyNTQ0OTYxOQ==&mid=2247483988&idx=1&sn=5b25e95ccbd765424198f50243e7edf7\",\n \"【速报】github 挂了？（世界就是一个巨大的草台班子）\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485449&idx=1&sn=2e621cb2afe5e511ac88f055da981272\",\n \"Kali下安装与使用BeEF：反射型与存储型XSS攻击、Cookie会话劫持、键盘监听及浏览器操控技巧\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486453&idx=1&sn=cd3057994dfa4e6a29c9d70b342f9e8a\",\n \"起\": \"https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496866&idx=1&sn=50672ddfb00ba89a961f457c1121f0f1\",\n \"（吃瓜）Github疑似遭受ddos攻击\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484164&idx=1&sn=0e0f18f1790d8e9a2fd97d76ed9ff8eb\",\n \"特朗普“午夜清洗”：17名监察长“下马”，法律争议“炸锅\": \"https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505045&idx=1&sn=d3b57f2d70f4497ba9e6bd0d3792b39b\",\n \"印度卫星对接成功：技术存在局限性\": \"https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505045&idx=2&sn=1f9e6ca2b9e492d72bd16233e83dcf9c\",\n \"大家一起ddos白宫\": \"https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491639&idx=1&sn=ea6a2bb14d619f5834396d7fe8ebf609\",\n \"研究完威胁分类，才发现我们平时谈的“以威胁为中心”都是假的！\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492288&idx=1&sn=4a85f9ccfbc35e9f52f817bc25f4ce10\",\n \"世界需要一个能谋善断的AI（三）决策的厚重：人类世界是如何被“选择”塑造的?\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492288&idx=2&sn=416787d4505f6a7bf562f91bcf9f37cd\",\n \"DeepSeek-R1：通过强化学习激励LLM的推理能力\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264879&idx=1&sn=74c7f7b47fbb79364c8dc55264481f92\",\n \"分享图片\": \"https://mp.weixin.qq.com/s?__biz=MzI3Njc1MjcxMg==&mid=2247494399&idx=1&sn=21a59287adb50dc4b945b2325e795fe4\",\n \"SpiderX-V2.0发布 解锁JS加密新姿势攻防武器\": \"https://mp.weixin.qq.com/s?__biz=MzkxOTU3MDY4MQ==&mid=2247484842&idx=1&sn=29eca64227216346731e46e212de2a92\",\n \"量子计算机时代的汽车系统的嵌入式安全\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620255&idx=1&sn=610c3bff71970b4fbc041a0177ee93fd\",\n \"揭开人工智能在交通网络安全中的神秘面纱\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620255&idx=2&sn=c361a268b2ef526cf5e44433248d1d13\",\n \"车辆网络处理器上的后量子安全启动\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620255&idx=3&sn=ee30d942f28072654d6b335624aea228\",\n \"新年开工啦\": \"https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247484490&idx=1&sn=379870838aa89954061ce91a8fe22392\",\n \"揭秘土耳其“红皮书”：真相还是阴谋？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559341&idx=1&sn=517465083ba598dcfc9d243a3f11d1c9\",\n \"中亚新位置：美国到底是“机遇”还是“陷阱”？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559341&idx=2&sn=58f2aa6cb8bf4e2d52982ba4dc461e34\",\n \"深入浅出API测试｜搜集分析与漏洞挖掘实战\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496981&idx=1&sn=1b88708a474086d96cf22a9428c93835\",\n \"网络运维工程师如何高效运维数据中心，记住这6条定律！\": \"https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247528027&idx=1&sn=bb96422660e09519af965fecc213d4cf\",\n \"春节假期7个基本网络安全提示\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114269&idx=1&sn=731f251283d6f584e16dd15c5f0f1b4f\",\n \"为什么DDoS攻击如此致命？\": \"https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649464754&idx=1&sn=df89b63da565ca06f6419c818442ef13\",\n \"利用DeepSeek进行java代码审计，好用！\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjQyODY5MA==&mid=2247487042&idx=1&sn=256d32002fcf342d7770b39c1d41f695\",\n \"收藏 | dotNet安全矩阵 2024 年度目标权限维持阶段文章和工具汇总\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498569&idx=1&sn=a273094850e815c5dccaf5c9fbb7956f\",\n \"国内最专业、最全面的 [ .NET 代码审计 ] 体系化学习交流社区\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498569&idx=2&sn=efe5abab1b53aa0c37945f18fbfb5043\",\n \"收藏 | dotNet安全矩阵 2024 年度外网入口打点阶段文章和工具汇总\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498569&idx=3&sn=b5363f2569c8b2f819bc9d52cc71cc79\",\n \"2024年，安全厂商为什么这么惨？\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=1&sn=ccf61766565e0badd0172f57ee1728f1\",\n \"【干货原创】实网攻防演习常态化，会带来什么变化01\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=4&sn=919cc9d33961ed8e6a35eede596478de\",\n \"【干货原创】K12教育，鲜为人知的模式秘密\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=5&sn=bf335b4022071ba93823b812090acee6\",\n \"原创文章目录\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=6&sn=3ff7227d97237b358e80b064be4215f2\",\n \"四川大学网安少年班\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485616&idx=1&sn=5255daa9a5e28be2c73d156eeb167ad5\",\n \"世界经济论坛《2025年全球网络安全展望》报告一览\": \"https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247484780&idx=1&sn=5c29954e85b159e98b2db3467a6f4281\",\n \"【恭贺新春】企业级内网仿真「Thunder」免费开战！通关赢千元现金\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MDc1MjY5Ng==&mid=2247493011&idx=1&sn=324fff14046b3d7b31e4f2827bccacfb\",\n \"AI风险分析 | Grok提示词泄露前后暗藏玄机\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494054&idx=1&sn=9122e0562bcad42ee707e0879b945aa1\",\n \"针对DeepSeek的网络攻击再升级：僵尸网络进场 攻击指令激增上百倍u200b\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513623&idx=1&sn=d0d49c0d4b6e85b4dd8aacd8623ca272\",\n \"Offsec PG靶场-Pelican(OSCP考试)\": \"https://mp.weixin.qq.com/s?__biz=MzU5MjIzMDMzNg==&mid=2247484347&idx=1&sn=0c628f8609fa4badb4f81f1f90b3d305\",\n \"六部门印发｜关于完善数据流通安全治理 更好促进数据要素市场化价值化的实施方案\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247506759&idx=1&sn=851aa85a7e994c201ed3fa8c930ebe05\",\n \"UbuntuServer24.04上使用NVIDIA GeForce RTX 4060Ti部署并训练DeepSeek R1大模型\": \"https://mp.weixin.qq.com/s?__biz=Mzg2MjYxODQ4Mw==&mid=2247484982&idx=1&sn=226d2daae237f9ead22b087b2611e457\",\n \"干货 | 渗透测试以及checklist模板，附PDF免费下载！\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247570691&idx=1&sn=74eca2607d62024085a1edf27565aeef\",\n \"DeepSeek遭暴力破解 攻击IP均来自美国\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170578&idx=1&sn=c79c88154ac6083c4d178ed4a123665b\",\n \"奇安信：针对DeepSeek的网络攻击再升级! 僵尸网络进场，指令激增上百倍\": \"https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170578&idx=2&sn=19ad0e0ac08770adde15936cbc245f61\",\n \"从创新环境看新质生产力发展\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651618932&idx=1&sn=829c061c8fe0ac244f869355102c255f\",\n \"僵尸网络进场，针对 DeepSeek 网络攻击再升级\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624774&idx=1&sn=5c438a523258d18082e4918e22ff51c9\",\n \"惊魂72小时：一场席卷Linux世界的巨大威胁是如何被阻止的\": \"https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489858&idx=1&sn=01a4503fd428692055c9a137cd9bb0a8\",\n \"比特币链上大周期投资指导方案\": \"https://mp.weixin.qq.com/s?__biz=MzI3NTcwNTQ2Mg==&mid=2247487630&idx=1&sn=532f51f67ceab5e41324cbf9a80d0432\",\n \"秒达工具箱：各种开发者必备的工具集合，支持Docker部署\": \"https://mp.weixin.qq.com/s?__biz=MzA4MjkzMTcxMg==&mid=2449046776&idx=1&sn=c7985da37fee0d92ef3585fa526b3ba5\",\n \"DeepSeek 数据库被攻击，国外团队已公开披露漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488775&idx=1&sn=2b8f2e1154eb0de5e1422589ee7b4f95\",\n \"旧知新话说“标识”之心意篇：标识助力物流信息可追溯\": \"https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247592366&idx=1&sn=28ab8739af2ccfaae353c286890cde3f\",\n \"DeepSeek 开源免费，大洋彼岸直接急了\": \"https://mp.weixin.qq.com/s?__biz=MzIzNjU5NDE2MA==&mid=2247490177&idx=1&sn=8c3da180f37e24bb83cc20d6168c694a\",\n \"可能这就是你deepseek无法访问的原因——deepseek 漏洞（已修复）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485665&idx=1&sn=ce7d065feabad43d7bd144eb57ba1115\",\n \"小日子已经被deepseek折服——日媒：DeepSeek模型以简单方法实现高性能\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485665&idx=2&sn=3648dc775f70e3d481072e9e72b21a84\",\n \"FtC4Wraiths CTF战队招募令：成为幽灵，掌控战场！\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247485011&idx=1&sn=eab2c10d8fcd6cc7e3fbdff694b4cd7a\",\n \"【2025-01-30】黑客新闻摘要\": \"https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488390&idx=1&sn=3e958dfb1428d5b530c24db97201ea53\",\n \"DeepSeek因软件供应链安全问题导致严重聊天记录数据泄漏\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488049&idx=1&sn=377ab6f02bf6685c6ecd606923242cc3\",\n \"（吃瓜）刘农TV之渗透中遇到的神人运维\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484157&idx=1&sn=597aa22f30bf086e39d157e7ba9082ad\",\n \"DeepSeek 大模型数据泄露被国外安全团队发现\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491067&idx=1&sn=53535c35ef941d31f4d587b0cbd426e6\",\n \"利用 Unicode 溢出绕过字符阻止列表\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527393&idx=1&sn=c9213875c652ac0318560b3966348226\",\n \"幻影行动：朝鲜的全球数据渗透运动\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527393&idx=2&sn=9923de4ef6d306281ce4fb13f253af1d\",\n \"Operation Talent:FBI 查获 Nulled.to、Cracked.to、Sellix.io 等\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527393&idx=3&sn=2949b5b96b17ce834ae88fc78313dbb7\",\n \"nt-load-order 第二部分 - 你想知道的更多内容\": \"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247486806&idx=1&sn=cb4a4fbf16cf2ff7c0a99333cf155ca8\",\n \"资讯 ｜ DeepSeek被曝数据泄漏\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MDkyMTE4OQ==&mid=2247489001&idx=1&sn=e965d2b7151b3b51e0b48dc264cc7cd2\",\n \"DeepSeek被海外曝出严重聊天记录数据泄漏问题\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650236959&idx=1&sn=0024f87794598ce60e345aa728e8a771\",\n \"真假\": \"https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496860&idx=1&sn=dac3717d63b7496fc260f3d91e4d5ec0\",\n \"越权漏洞实战漏洞报告\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485094&idx=1&sn=300233e404ea534282f994bd51e38594\",\n \"功能强大的XSS自动化扫描器\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489193&idx=1&sn=08b43c401df76f44cf749c44eb4af9c6\",\n \"有网安需求记得找我\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489193&idx=2&sn=6c2c55bb757aa67cc9f21a6b40c6df40\",\n \"30 - 使用DInvoke和Sliver规避OpenEDR并提升权限\": \"https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615412&idx=1&sn=3c8990ffa72d3496df8110af3260a080\",\n \"代码审计 | 如何获取CVE漏洞编号\": \"https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547534&idx=1&sn=89f840ad1397911a18d5776cb54ed32c\",\n \"俄罗斯APT组织 RomCom 再次出击，针对乌克兰政府和波兰实体的网络攻击升级！\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485658&idx=1&sn=1811ccb336bf5596bc0376a10ebe3cbe\",\n \"deepseek写的对联，总感觉有点不对劲🐶\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494633&idx=1&sn=644193027ce66213cffde32a42bad868\",\n \"【已修复】DeepSeek数据库暴露，泄露包括聊天记录在内的敏感信息\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494633&idx=2&sn=62ef49860992fd84fbebc9fbae2d8839\",\n \"Wiz研究发现暴露的DeepSeek数据库泄露敏感信息，包括聊天记录\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487248&idx=1&sn=24a5ae9036da7d03afb83c9dd679255b\",\n \"🐍年好~~嘶嘶嘶\": \"https://mp.weixin.qq.com/s?__biz=MzU4Mzc4MDQyOQ==&mid=2247484414&idx=1&sn=0caae77933f7012d33420541deab9019\",\n \"【2025春节】解题领红包活动开始喽，解出就送论坛币！\\\\\\\\n\\\\\\\\n第一题送分题有手就行（不需有脑，已有 1376 位会员完成此任务）。\\\\\\\\n\\\\\\\\n第二题 Windows 初级题 14点整 上线，题目很简单，如果你对逆向分析感兴趣，不妨借此机会自学尝试，让这次活动真正成为你技能提升的阶梯。\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141658&idx=1&sn=11067b00a771b8ee9bd4c4d0da1e8908\",\n \"当DDoS成为DeepSeek的进化催化剂\": \"https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247488198&idx=1&sn=294befdcf4fe9033a98c6148815a0ec1\",\n \"初二娘家暖 祥蛇护亲安\": \"https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247520422&idx=1&sn=ca4a601872c8ca514160ea4117463939\",\n \"本地部署 deepseek-r1 模型\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247484010&idx=1&sn=d298326b0ef79202e6e0093216ebaa82\",\n \"美军对DeepSeek“出手”了！DeepSeek遭恶意攻击，攻击IP均来自美国！\": \"https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525698&idx=1&sn=131f65bb9cab76e179f85720d4c77212\",\n \"大年初二 | 金蛇迎春，福“巳”绵延\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579270&idx=1&sn=07b4d333a5b2f57048e51d6aa8cc4224\",\n \"太丢人了\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NjY4NDg1Nw==&mid=2247483948&idx=1&sn=c78c4f6b64f4e732bb3fcbe3684d3819\",\n \"DeepSeek与其他大模型网络安全领域测评\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485615&idx=1&sn=2faa9a9f50deaf18f69117424391d9a5\",\n \"多次加密攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI1NzUxOTUzMA==&mid=2247485786&idx=1&sn=ef2f09bcc5eb7ecad5b545295bf5be21\",\n \"2025网络暴露危机报告：45%第三方应用越权访问用户数据\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=1&sn=21db4a4d88530fd63cdb722001dad229\",\n \"Banshee Stealer新变种正借Apple XProtect加密技术躲避杀毒软件\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=2&sn=428f13d4f84f8d084d6730cfab69b9cb\",\n \"上千个恶意域名正在仿冒Reddit和WeTransfer\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=3&sn=e2d553ae7f7a6dab81dc2d0f81f9d42f\",\n \"如何使用LDAPX动态检查和转换LDAP数据包\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=4&sn=d1471190e17067ad31fd0a762ad813d1\",\n \"Redis数据库主从复制RCE影响分析\": \"https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037457&idx=1&sn=32e47044585804b9f31934fb3a7a3f5c\",\n \"大年初二 画蛇添福\": \"https://mp.weixin.qq.com/s?__biz=Mzg2MTU5ODQ2Mg==&mid=2247507174&idx=1&sn=af46b8c1bdd9e12e5913225f518e1e09\",\n \"新年新挑战，红日安全不打烊！携手同行，保障数字世界，迎接无限机遇！💻💼\": \"https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851771&idx=1&sn=e32da143725cb1281d784159a2d92a85\",\n \"数字取证之数据收集u200c\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264859&idx=1&sn=5157da074859752737fca3e1377e830b\",\n \"公众号爆款突破10万+是种什么体验？\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247492229&idx=1&sn=fb6516c2c50768440203194bf072ef8f\",\n \"网安原创文章推荐【2025/1/29】\": \"https://mp.weixin.qq.com/s?__biz=MzAxNzg3NzMyNQ==&mid=2247489523&idx=1&sn=b774285745567a078a25412d369d42e3\",\n \"Qwen 2.5横空出世：阿里大模型超越DeepSeek-V3\": \"https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247486600&idx=1&sn=8759e5cb59a7ae3a10f4e360ae1343c8\",\n \"DeepSeek已遭美西方全面围剿：各种放大后的问题及恶意舆论接踵而至\": \"https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507157&idx=1&sn=705ed2698837c80532fbdcaa33a20411\",\n \"暗网情报6则：阿根廷电信公司数据泄露-260G登录凭证兜售-以色列国家安全部遭黑\": \"https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507157&idx=2&sn=32183d1acca665f6055c418febf0b72a\",\n \"5th域安全微讯早报【20250130】026期\": \"https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507157&idx=3&sn=678b70aba584829d92026c69f41dad6a\",\n \"DeepSeek与ChatGPT代码审计能力对比与分析\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247488582&idx=1&sn=48f04da2ac9254f4e9bcaba0a14431a5\",\n \"ScanV、ScanA：监测违规防患，事件安全无虞\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870840&idx=1&sn=eb6c30950bf84dd86835312726abf657\",\n \"阿里巴巴发布Qwen 2.5系列新模型，宣称超越 DeepSeek-V3\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485776&idx=1&sn=73a8b2ee13adf483ccc862bea60a6657\",\n \"知识星球持续更新\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485776&idx=2&sn=6cab966e4a4f99fd7f1a7f60f7177a88\",\n \"大年初二丨安天睿甲给您拜年了\": \"https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650209904&idx=1&sn=2d3424335c5408deda2ab07b51876c54\",\n \"初二 | 愿家人和和美美，吉祥安康！\": \"https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497079&idx=1&sn=081d5bd8e78c90a7d1bcba0e251b48ea\",\n \"记一次绕过阿里云waf与某不知名waf的双waf上传getshell\": \"https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487348&idx=1&sn=2c7a4d59b64392a92053475c8096f285\",\n \"正月初二| 有蛇有得 团团圆圆\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506081&idx=1&sn=c7bc814576e63a573c12fae1a2f9aefe\",\n \"捷普基础产品线，守护基础设施安全\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506081&idx=2&sn=95cf7a673991ce095ee9525401f5f855\",\n \"【焕新领先】捷普下一代防火墙\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506081&idx=3&sn=0776637513dd08e8549e6e036951db3e\",\n \"ISO 45001: 2018 标准详解与实施（11）6.1.3 法律法规要求和其他要求的确定\": \"https://mp.weixin.qq.com/s?__biz=MzA5OTEyNzc1Nw==&mid=2247486050&idx=1&sn=2750be0dbb0d7015b92061bb993add86\",\n \"初二\": \"https://mp.weixin.qq.com/s?__biz=MzUyMjAyODU1NA==&mid=2247491947&idx=1&sn=1d01beee8ad4061189c478e349ef78d7\",\n \"DeepSeek的强大，一句话让AI帮我写了个程序-流量安全分析研判工具\": \"https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247490145&idx=1&sn=a932062265ad24982beeee1706d70d4d\",\n \"大年初二 | 金蛇纳福，好事成双\": \"https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650963505&idx=1&sn=b6d789ba930e09c363ebc1f9444849d6\",\n \"正月初二归家暖！亚信安全祝大家蛇全蛇美，蛇行大运\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620959&idx=1&sn=7d3ca2f816e618a8e9e764ebd74f3644\",\n \"大年初二 二龙腾飞\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135289&idx=1&sn=ccfa447f9bf7ccfdf2f578f6b4f71e1d\",\n \"大年初二 | 眉开眼笑回娘家\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MDQ5MTQ4NA==&mid=2247487428&idx=1&sn=7f6bc2eb6c48e2d05a319a51de44f0c3\",\n \"CIO启示录：技术管理如何突破效率天花板\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247487724&idx=1&sn=992966ac782bfff5f58a78669566cd34\",\n \"2025常见的网络安全服务大全（汇总详解）\": \"https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247517988&idx=1&sn=71db8ddc34dbb5bd2e9fce7b232edaaf\",\n \"初二：好运连连\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624762&idx=1&sn=47241d7f7296e0089b5da756046322f0\",\n \"初二｜燃炮迎春盼福至 网站弹窗鉴虚实\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247532957&idx=1&sn=9932467d97cae7cd76bdb1790358e7cc\",\n \"【初二】安全一路相随 团聚近在眼前\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650624574&idx=1&sn=d10e6d1823438874c6e7929eb90b1e97\",\n \"2025年最可能的五种网络攻击，你的企业准备好了吗？\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247487182&idx=1&sn=3c76f4710e63ed2414babafceda9eec1\",\n \"诸葛亮教你如何应对APT攻击\": \"https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496849&idx=1&sn=d3276fd13b7a991e2e1c5cbbb41a3b4c\",\n \"国自然中标真不难！十年评审专家1v1精修你的本子，中标率提升58%\": \"https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496849&idx=2&sn=41d0f5a68ff64924994dc39112bf9672\",\n \"初二 | 姻缘美满\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493741&idx=1&sn=e36485b394ed47daf3a04225998efbe1\"\n },\n \"Flexera Blog - Feed\": {\n \"Cyber-Resilience regulations are here—is your organization ready?\": \"https://www.flexera.com/blog/security/cyber-resilience-regulations-are-here-is-your-organization-ready/\"\n },\n \"Twitter @bytehx\": {\n \"Re @CristiVlad25 @SynackRedTeam Yes!\": \"https://x.com/bytehx343/status/1884928882094268475\",\n \"Thanks @SynackRedTeam\": \"https://x.com/bytehx343/status/1884926738385580064\"\n },\n \"Trail of Bits Blog\": {\n \"PyPI now supports archiving projects\": \"https://blog.trailofbits.com/2025/01/30/pypi-now-supports-archiving-projects/\"\n },\n \"Securelist\": {\n \"No need to RSVP: a closer look at the Tria stealer campaign\": \"https://securelist.com/tria-stealer-collects-sms-data-from-android-devices/115295/\"\n },\n \"Project Zero\": {\n \"Windows Bug Class: Accessing Trapped COM Objects with IDispatch\": \"https://googleprojectzero.blogspot.com/2025/01/windows-bug-class-accessing-trapped-com.html\",\n \"Windows Exploitation Tricks: Trapping Virtual Memory Access (2025 Update)\": \"https://googleprojectzero.blogspot.com/2025/01/windows-exploitation-tricks-trapping.html\"\n },\n \"Malware-Traffic-Analysis.net - Blog Entries\": {\n \"2025-01-30: XLoader infection\": \"https://www.malware-traffic-analysis.net/2025/01/30/index.html\"\n },\n \"Malwarebytes\": {\n \"Microsoft advertisers phished via malicious Google ads\": \"https://www.malwarebytes.com/blog/cybercrime/2025/01/microsoft-advertisers-phished-via-malicious-google-ads\",\n \"The DeepSeek controversy: Authorities ask where does the data come from and how safe is it?\": \"https://www.malwarebytes.com/blog/news/2025/01/the-deepseek-controversy-authorities-ask-where-the-data-comes-from-and-where-it-goes\"\n },\n \"Reverse Engineering\": {\n \"ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries [PDF]\": \"https://www.reddit.com/r/ReverseEngineering/comments/1idxr88/resym_harnessing_llms_to_recover_variable_and/\",\n \"Decompiling 2024: A Year of Resurgance in Decompilation Research\": \"https://www.reddit.com/r/ReverseEngineering/comments/1idb0wg/decompiling_2024_a_year_of_resurgance_in/\",\n \"arm64 PC-relative addressing fun\": \"https://www.reddit.com/r/ReverseEngineering/comments/1idmknl/arm64_pcrelative_addressing_fun/\",\n \"College Survey on AI-Enhanced Phishing and Cybersecurity Training Effectiveness\": \"https://www.reddit.com/r/ReverseEngineering/comments/1idq68v/college_survey_on_aienhanced_phishing_and/\"\n },\n \"Intigriti\": {\n \"Power of the collective: Investing in the security researcher community for shared success\": \"https://www.intigriti.com/blog/business-insights/power-of-the-collective-investing-in-the-security-researcher-community-for-shared\"\n },\n \"Shostack & Friends Blog\": {\n \"The Birth of the CVE System, on Hackers To Founders\": \"https://shostack.org/blog/hackers-to-founders/\",\n \"Hoarding, Debt and Threat Modeling\": \"https://shostack.org/blog/hoarding-debt-and-threat-modeling/\"\n },\n \"rtl-sdr.com\": {\n \"Jeff Geerling Explores the CaribouLite Raspberry Pi Hat\": \"https://www.rtl-sdr.com/jeff-geerling-explores-the-cariboulite-raspberry-pi-hat/\",\n \"The Taylorator: Flooding the Broadcast FM Band with Taylor Swift Songs using a LimeSDR\": \"https://www.rtl-sdr.com/the-taylorator-flooding-the-broadcast-fm-band-with-taylor-swift-songs-using-a-limesdr/\",\n \"Video on the Basics of SDR for Hackers\": \"https://www.rtl-sdr.com/video-on-the-basics-of-sdr-for-hackers/\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"DeepSeek AI数据库泄露：超百万条日志和密钥曝光\": \"https://www.freebuf.com/articles/420968.html\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"美国版权局称 AI 辅助作品如果包含足够的人类创意可获得版权保护\": \"https://www.solidot.org/story?sid=80451\",\n \"LibreOffice 下载量突破 4 亿\": \"https://www.solidot.org/story?sid=80450\",\n \"Debian 项目停止在 X 上发推\": \"https://www.solidot.org/story?sid=80449\",\n \"Douglas Engelbart 诞辰 100 周年\": \"https://www.solidot.org/story?sid=80448\"\n },\n \"安全分析与研究\": {\n \"Fake CAPTCHA攻击技术\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490238&idx=1&sn=f7929631aed8f88ecb74b428362ec4eb&chksm=902fb596a7583c80a17cb1f35f04930cd0fa4f66251be8f81b04a1801ee9d2f8725ffb4bda0c&scene=58&subscene=0#rd\"\n },\n \"锦行科技\": {\n \"初二 | 姻缘美满\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493741&idx=1&sn=e36485b394ed47daf3a04225998efbe1&chksm=979a13c8a0ed9ade19f74ca917b1703c7b395367c03069fe1b164a21f581251495a707ffdfa8&scene=58&subscene=0#rd\"\n },\n \"Black Hills Information Security\": {\n \"Questions From a Beginner Threat Hunter\": \"https://www.blackhillsinfosec.com/questions-from-a-beginner-threat-hunter/\"\n },\n \"红日安全\": {\n \"新年新挑战，红日安全不打烊！携手同行，保障数字世界，迎接无限机遇！💻💼\": \"https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851771&idx=1&sn=e32da143725cb1281d784159a2d92a85&chksm=f3e4e9f8c49360ee9f066a43959bd3732de37e27ca245ce7717817dc356c25315b6e3cd90820&scene=58&subscene=0#rd\"\n },\n \"吾爱破解论坛\": {\n \"【2025春节】解题领红包活动开始喽，解出就送论坛币！\\n\\n第一题送分题有手就行（不需有脑，已有 1376 位会员完成此任务）。\\n\\n第二题 Windows 初级题 14点整 上线，题目很简单，如果你对逆向分析感兴趣，不妨借此机会自学尝试，让这次活动真正成为你技能提升的阶梯。\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141658&idx=1&sn=11067b00a771b8ee9bd4c4d0da1e8908&chksm=bd50a64e8a272f589319d04410866e550b8792cd73b49c0eecc8abb4df9996d504f306e3b43c&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"针对DeepSeek的网络攻击再升级：僵尸网络进场 攻击指令激增上百倍​\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513623&idx=1&sn=d0d49c0d4b6e85b4dd8aacd8623ca272&chksm=ebfaf137dc8d782175c2209f64fe50b91bf2c7ff519b1be99b56d7f5f4f3171fe8cb575f539a&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"我合理怀疑，春晚节目组混进了 B 站的人\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073042&idx=1&sn=e5673315f8ee79ebe9dd7e1d2616c261&chksm=7e57d32449205a32ea25640d2639fcc099fe5048fbdbbc484c363f514ec6a87a0fa0321f07d2&scene=58&subscene=0#rd\",\n \"美国对 DeepSeek 开展国家安全调查；传 DS 训练模型绕过英伟达 CUDA；春节档刷新初一票房纪录 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073041&idx=1&sn=f9ec93124dfcfa3b5d40259ab4c2c990&chksm=7e57d32749205a310d8f135837f52b88af79c3c4cfa6f0101b33a99b48b746b953b3373c0e88&scene=58&subscene=0#rd\"\n },\n \"白帽子章华鹏\": {\n \"DeepSeek被海外曝出严重聊天记录数据泄漏问题\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650236959&idx=1&sn=0024f87794598ce60e345aa728e8a771&chksm=f04ad2a3c73d5bb52eb2a39504865a355749cee5228d9bcaa1078cab5387d5509791a0eafeb4&scene=58&subscene=0#rd\"\n },\n \"墨菲安全\": {\n \"DeepSeek因软件供应链安全问题导致严重聊天记录数据泄漏\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488049&idx=1&sn=377ab6f02bf6685c6ecd606923242cc3&chksm=c13d7109f64af81f818a52b31171cec774bb86a531f1405b24c020869c281e0865f573e9c6a6&scene=58&subscene=0#rd\"\n },\n \"迪哥讲事\": {\n \"深入浅出API测试｜搜集分析与漏洞挖掘实战\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496981&idx=1&sn=1b88708a474086d96cf22a9428c93835&chksm=e8a5ff76dfd276605ae35037c735c6cb3cb39f0962d2b476be2284664584944a6e21d112112a&scene=58&subscene=0#rd\"\n },\n \"bellingcat\": {\n \"Neo-Nazis Linked to “Terrorist Activities” to Host Budapest Concert\": \"https://www.bellingcat.com/news/2025/01/30/neo-nazis-linked-to-terrorist-activities-to-host-budapest-concert/\"\n },\n \"M01N Team\": {\n \"AI风险分析 | Grok提示词泄露前后暗藏玄机\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494054&idx=1&sn=9122e0562bcad42ee707e0879b945aa1&chksm=c18429b7f6f3a0a16b65fc9b18ee5c979853c462ea1f43800abab53c6e5bc3e5d73dc9c1c540&scene=58&subscene=0#rd\"\n },\n \"360数字安全\": {\n \"大年初二 | 金蛇迎春，福“巳”绵延\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579270&idx=1&sn=07b4d333a5b2f57048e51d6aa8cc4224&chksm=9f8d268ea8faaf982879ec311f767c0e01c96d6b31f504cb5edd372b41e9ddedf3659c61e603&scene=58&subscene=0#rd\"\n },\n \"Full Disclosure\": {\n \"Quorum onQ OS - 6.0.0.5.2064 | Reflected Cross Site Scripting\\t(XSS) | CVE-2024-44449\": \"https://seclists.org/fulldisclosure/2025/Jan/23\",\n \"Deepseek writes textbook insecure code in 2025-01-28\": \"https://seclists.org/fulldisclosure/2025/Jan/22\",\n \"Text injection on https://www.google.com/sorry/index via ?q parameter (no XSS)\": \"https://seclists.org/fulldisclosure/2025/Jan/21\"\n },\n \"Securityinfo.it\": {\n \"Privacy dei dati: la maggior parte degli utenti teme una violazione\": \"https://www.securityinfo.it/2025/01/30/privacy-dei-dati-la-maggior-parte-degli-utenti-teme-una-violazione/?utm_source=rss&utm_medium=rss&utm_campaign=privacy-dei-dati-la-maggior-parte-degli-utenti-teme-una-violazione\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #733: Test Kitchen building cloud tools with cursor\": \"https://www.hecfblog.com/2025/01/daily-blog-733-test-kitchen-building.html\"\n },\n \"Have I Been Pwned latest breaches\": {\n \"Speedio (unverified) - 27,501,041 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Speedio\"\n },\n \"The Hacker News\": {\n \"Google: Over 57 Nation-State Threat Groups Using AI for Cyber Operations\": \"https://thehackernews.com/2025/01/google-over-57-nation-state-threat.html\",\n \"Authorities Seize Domains of Popular Hacking Forums in Major Cybercrime Crackdown\": \"https://thehackernews.com/2025/01/authorities-seize-domains-of-popular.html\",\n \"Lightning AI Studio Vulnerability Allowed RCE via Hidden URL Parameter\": \"https://thehackernews.com/2025/01/lightning-ai-studio-vulnerability.html\",\n \"SOC Analysts - Reimagining Their Role Using AI\": \"https://thehackernews.com/2025/01/soc-analysts-reimagining-their-role.html\",\n \"DeepSeek AI Database Exposed: Over 1 Million Log Lines, Secret Keys Leaked\": \"https://thehackernews.com/2025/01/deepseek-ai-database-exposed-over-1.html\",\n \"Unpatched PHP Voyager Flaws Leave Servers Open to One-Click RCE Exploits\": \"https://thehackernews.com/2025/01/unpatched-php-voyager-flaws-leave.html\",\n \"New Aquabot Botnet Exploits CVE-2024-41710 in Mitel Phones for DDoS Attacks\": \"https://thehackernews.com/2025/01/new-aquabot-botnet-exploits-cve-2024.html\"\n },\n \"Deeplinks\": {\n \"Executive Order to the State Department Sideswipes Freedom Tools, Threatens Censorship Resistance, Privacy, and Anonymity of Millions\": \"https://www.eff.org/deeplinks/2025/01/executive-order-state-department-sideswipes-freedom-tools-threatens-censorship\",\n \"The Internet Never Forgets: Fighting the Memory Hole\": \"https://www.eff.org/deeplinks/2025/01/internet-never-forgets-fighting-memory-hole\",\n \"Protect Your Privacy on Bumble\": \"https://www.eff.org/deeplinks/2025/01/protect-your-privacy-bumble\"\n },\n \"Security Affairs\": {\n \"DeepSeek database exposed highly sensitive information\": \"https://securityaffairs.com/173666/data-breach/deepseek-db-exposed-highly-sensitive-information.html\",\n \"TeamViewer fixed a vulnerability in Windows client and host applications\": \"https://securityaffairs.com/173658/security/teamviewer-windows-client-flaw.html\",\n \"Operation Talent: An international law enforcement operation seized Cracked, Nulled and other cybercrime websites\": \"https://securityaffairs.com/173651/cyber-crime/operation-talent-seized-cracked-nulled-cybercrime-websites.html\",\n \"PHP package Voyager flaws expose to one-click RCE exploits\": \"https://securityaffairs.com/173646/hacking/php-package-voyager-flaws.html\",\n \"Italy’s Data Protection Authority Garante requested information from Deepseek\": \"https://securityaffairs.com/173637/digital-id/italys-garante-requested-information-from-deepseek.html\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Backdoor found in two healthcare patient monitors, linked to IP in China\": \"https://www.bleepingcomputer.com/news/security/backdoor-found-in-two-healthcare-patient-monitors-linked-to-ip-in-china/\",\n \"Lawmakers push for guardrails, deadline on cyber military study\": \"https://therecord.media/lawmakers-push-for-guardrails-deadline-cyber-force-study\",\n \"Google blocked 2.36 million risky Android apps from Play Store in 2024\": \"https://www.bleepingcomputer.com/news/security/google-blocked-236-million-risky-android-apps-from-play-store-in-2024/\",\n \"States with laws requiring data brokers to register are ramping up enforcement\": \"https://therecord.media/state-data-broker-registry-laws-fines-warnings\",\n \"Gabbard grilled over Snowden comments during Senate confirmation hearing\": \"https://therecord.media/gabbard-grilled-over-snowden-comments-senate-confirmation-hearing\",\n \"US Justice Department says cybercrime forum allegedly affected 17 million Americans\": \"https://techcrunch.com/2025/01/30/us-justice-department-says-cybercrime-forum-allegedly-affected-17-million-americans/\",\n \"Defeating Future Threats Starts Today\": \"https://blog.talosintelligence.com/defeating-future-threats-starts-today/\",\n \"Ransomware attack disrupts New York blood donation giant\": \"https://www.bleepingcomputer.com/news/security/ransomware-attack-disrupts-new-york-blood-donation-giant/\",\n \"Infrastructure Laundering: Blending in with the Cloud\": \"https://krebsonsecurity.com/2025/01/infrastructure-laundering-blending-in-with-the-cloud/\",\n \"Ransomware attack on New York Blood Center forces workarounds, drive cancellations\": \"https://therecord.media/ransomware-attack-new-york-blood-center-forces-workarounds\",\n \"DeepSeek exposes database with over 1 million chat records\": \"https://www.bleepingcomputer.com/news/security/deepseek-exposes-database-with-over-1-million-chat-records/\",\n \"International police coalition takes down two prolific cybercrime and hacking forums\": \"https://techcrunch.com/2025/01/30/international-police-coalition-takes-down-two-prolific-cybercrime-and-hacking-forums/\",\n \"Police take down two large cybercrime forums, arrest suspects\": \"https://therecord.media/cybercrime-forums-cracked-nulled-takedowns-arrests\",\n \"Major GitHub outage affects pull requests and other services\": \"https://www.bleepingcomputer.com/news/technology/major-github-outage-affects-pull-requests-and-other-services/\",\n \"The Advantages of Cloud-Based Remote Desktop versus RDP over VPN\": \"https://www.bleepingcomputer.com/news/security/the-advantages-of-cloud-based-remote-desktop-versus-rdp-over-vpn/\",\n \"(Un)Happy Trails\": \"https://bfore.ai/unhappy-trails-travel-related-scams-and-what-travel-vendors-can-do-to-protect-their-customers/\",\n \"New Syncjacking attack hijacks devices using Chrome extensions\": \"https://www.bleepingcomputer.com/news/security/new-syncjacking-attack-hijacks-devices-using-chrome-extensions/\",\n \"bedevil: Dynamic Linker Patching\": \"http://localhost:1313/posts/bedevil_dynamic_linker_patching/\",\n \"Hack.lu: In-Depth Study of Linux Rootkits: Evolution, Detection, and Defense\": \"http://localhost:1313/talks/hack.lu_rootkits_2024/\",\n \"Hack.lu: The Gist of Hundreds of Incident Response Cases\": \"http://localhost:1313/talks/hack.lu_gist_2024/\",\n \"Reptile's Custom Kernel-Module Launcher\": \"http://localhost:1313/posts/reptile_launcher/\",\n \"BSides Munich: /proc for Security Analysts\": \"http://localhost:1313/talks/bsides_munich_2024/\",\n \"DeepSec: RAT Builders - How to catch them all\": \"http://localhost:1313/talks/deepsec_2024/\",\n \"Shell Script Compiler (shc)\": \"http://localhost:1313/posts/shell_script_compiler/\",\n \"Today I Learned - setfacl\": \"http://localhost:1313/posts/today_i_learned_setfacl/\",\n \"Analysis of Python's .pth files as a persistence mechanism\": \"http://localhost:1313/posts/publish_python_pth_extension/\",\n \"Tear Down The Castle - Part 1\": \"http://localhost:1313/posts/tear_down_castle_part_one/\",\n \"Oh my .. ! - Suspicious network traffic detected including Ransomware\": \"http://localhost:1313/posts/suspicious_network_traffic_ransomware/\",\n \"Tear Down The Castle - Part 2\": \"http://localhost:1313/posts/tear_down_castle_part_two/\",\n \"Follow-Up: Alibaba’s Qwen2.5-VL Model is Also Vulnerable to Prompt Attacks\": \"https://www.kelacyber.com/blog/follow-up-alibabas-qwen2-5-vl-model-is-also-vulnerable-to-prompt-attacks/\",\n \"Police seizes Cracked and Nulled hacking forum servers, arrests suspects\": \"https://www.bleepingcomputer.com/news/security/police-seizes-cracked-and-nulled-hacking-forum-servers-arrests-suspects/\",\n \"Microsoft lifts Windows 11 update block for PCs with gaming issues\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-lifts-windows-11-update-block-for-pcs-with-gaming-issues/\",\n \"Common OAuth Vulnerabilities\": \"https://blog.doyensec.com/2025/01/30/oauth-common-vulnerabilities.html\",\n \"DeepSeek’s Growing Influence Sparks a Surge in Frauds and Phishing Attacks\": \"https://cyble.com/blog/deepseeks-growing-influence-sparks-a-surge-in-frauds-and-phishing-attacks/\",\n \"Time Bandit ChatGPT jailbreak bypasses safeguards on sensitive topics\": \"https://www.bleepingcomputer.com/news/security/time-bandit-chatgpt-jailbreak-bypasses-safeguards-on-sensitive-topics/\",\n \"Comunicare per proteggere: strategie e strumenti per implementare i requisiti ISO 27001\": \"https://www.cybersecurity360.it/legal/comunicare-per-proteggere-strategie-e-strumenti-per-implementare-i-requisiti-iso-27001/\",\n \"Bilanciare i rischi di security beneficiando di tecnologie di AI: fra opportunità e rischi\": \"https://www.cybersecurity360.it/news/bilanciare-i-rischi-di-security-beneficiando-di-tecnologie-di-ai-fra-opportunita-e-rischi/\",\n \"DeepSeek: i timori per la privacy e la cyber security\": \"https://www.cybersecurity360.it/cultura-cyber/deepseek-i-timori-per-la-privacy-e-la-cyber-security/\",\n \"DeepSeek, serve cautela: ci sono pericoli per la sicurezza\": \"https://www.cybersecurity360.it/news/deepseek-usarlo-con-cautela-ci-sono-pericoli-per-la-sicurezza/\",\n \"Smishing a tema Poste Italiane: i dettagli e come difendersi\": \"https://www.cybersecurity360.it/news/smishing-a-tema-poste-italiane-i-dettagli-e-come-difendersi/\",\n \"Più cyber attacchi nel 2024. E nel 2025 il trend non si fermerà\": \"https://www.cybersecurity360.it/outlook/piu-cyber-attacchi-nel-2024-e-nel-2025-il-trend-non-si-fermera/\",\n \"I cyber rischi in azienda che (anche) gli italiani non comprendono\": \"https://www.cybersecurity360.it/news/i-cyber-rischi-in-azienda-che-anche-gli-italiani-non-comprendono/\",\n \"Le chat WhatsApp sono corrispondenza da tutelare: i paletti privacy della Cassazione\": \"https://www.cybersecurity360.it/news/le-chat-whatsapp-sono-corrispondenza-da-tutelare-i-paletti-privacy-della-cassazione/\",\n \"Decentraleyes potenzia la privacy online: vantaggi e limiti\": \"https://www.cybersecurity360.it/soluzioni-aziendali/decentraleyes-potenzia-la-privacy-online-vantaggi-e-limiti/\",\n \"Il controllo del dipendente da parte del datore di lavoro: le sfide per la privacy\": \"https://www.cybersecurity360.it/legal/privacy-dati-personali/il-controllo-del-dipendente-da-parte-del-datore-di-lavoro-le-sfide-per-la-privacy/\",\n \"Talos IR trends Q4 2024: Web shell usage and exploitation of public-facing applications spike\": \"https://blog.talosintelligence.com/talos-ir-trends-q4-2024/\",\n \"UK, US Introduce “Content Credentials” Labeling to Counter Deepfakes, Misinformation in the Age of AI\": \"https://cyble.com/blog/uk-us-introduce-content-credentials-labeling/\",\n \"Speedio (unverified) - 27,501,041 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Speedio\",\n \"ICS Vulnerability Report: Cyble Urges Critical mySCADA Fixes\": \"https://cyble.com/blog/ics-vulnerability-report-cyble-urges-critical-myscada-fixes/\"\n },\n \"Social Engineering\": {\n \"\\\"Humans Aren’t the Weakest Link, They’re the Strongest Layer in Cybersecurity\\\"\": \"https://www.reddit.com/r/SocialEngineering/comments/1idqop9/humans_arent_the_weakest_link_theyre_the/\",\n \"How to better at socialising?\": \"https://www.reddit.com/r/SocialEngineering/comments/1idam33/how_to_better_at_socialising/\"\n },\n \"Schneier on Security\": {\n \"Fake Reddit and WeTransfer Sites are Pushing Malware\": \"https://www.schneier.com/blog/archives/2025/01/fake-reddit-and-wetransfer-sites-are-pushing-malware.html\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"The Slow Death of OCSP\": \"https://www.reddit.com/r/netsec/comments/1idvdv5/the_slow_death_of_ocsp/\",\n \"Practising Heap Exploitation: Using House Of Force Technique with Practicals\": \"https://www.reddit.com/r/netsec/comments/1idm8tr/practising_heap_exploitation_using_house_of_force/\",\n \"WebAssembly and security: a review\": \"https://www.reddit.com/r/netsec/comments/1idnsqk/webassembly_and_security_a_review/\",\n \"A short Introduction to BloodHound Custom Queries\": \"https://www.reddit.com/r/netsec/comments/1idlm4q/a_short_introduction_to_bloodhound_custom_queries/\",\n \"CVE-2024-46506: Unauthenticated RCE in NetAlertx\": \"https://www.reddit.com/r/netsec/comments/1idsuzx/cve202446506_unauthenticated_rce_in_netalertx/\"\n },\n \"Graham Cluley\": {\n \"Smashing Security podcast #402: Hackers get hacked, the British Museum IT shutdown, and social media kidnaps\": \"https://grahamcluley.com/smashing-security-podcast-402-hackers-get-hacked-the-british-museum-it-shutdown-and-social-media-kidnaps/\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"GCP Red Teaming / Pentesting Certifications\": \"https://www.reddit.com/r/netsecstudents/comments/1idjlk4/gcp_red_teaming_pentesting_certifications/\"\n },\n \"Krebs on Security\": {\n \"Infrastructure Laundering: Blending in with the Cloud\": \"https://krebsonsecurity.com/2025/01/infrastructure-laundering-blending-in-with-the-cloud/\"\n },\n \"Krypt3ia\": {\n \"Threat Report: Risks and Considerations of Storing Corporate Security Telemetry in EDR Vendor Cloud Instances\": \"https://krypt3ia.wordpress.com/2025/01/30/threat-report-risks-and-considerations-of-storing-corporate-security-telemetry-in-edr-vendor-cloud-instances/\",\n \"Krypt3ia Daily Cyber Threat Intelligence (CTI) Digest\": \"https://krypt3ia.wordpress.com/2025/01/30/krypt3ia-daily-cyber-threat-intelligence-cti-digest-6/\"\n },\n \"Your Open Hacker Community\": {\n \"Everything is hacked 😊\": \"https://www.reddit.com/r/HowToHack/comments/1ie17ff/everything_is_hacked/\",\n \"Phones that are open to connecting via Bluetooth\": \"https://www.reddit.com/r/HowToHack/comments/1idms17/phones_that_are_open_to_connecting_via_bluetooth/\",\n \"Most Effective learning path to Reverse engineer network server of old games?\": \"https://www.reddit.com/r/HowToHack/comments/1ids89n/most_effective_learning_path_to_reverse_engineer/\",\n \"Is there any website I can use to convert a large amount of passwords into Hashes (in batch)?\": \"https://www.reddit.com/r/HowToHack/comments/1idu982/is_there_any_website_i_can_use_to_convert_a_large/\",\n \"Finding an array of class instances using Cheat Engine?\": \"https://www.reddit.com/r/HowToHack/comments/1idh9ob/finding_an_array_of_class_instances_using_cheat/\",\n \"Free course\": \"https://www.reddit.com/r/HowToHack/comments/1idm5ny/free_course/\",\n \"Cheat engine?\": \"https://www.reddit.com/r/HowToHack/comments/1idu18m/cheat_engine/\",\n \"Who has dark web AI?\": \"https://www.reddit.com/r/HowToHack/comments/1idtmsb/who_has_dark_web_ai/\",\n \"Question\": \"https://www.reddit.com/r/HowToHack/comments/1ide7pg/question/\",\n \"I want to hack like elliot from mister robot\": \"https://www.reddit.com/r/HowToHack/comments/1idwvv2/i_want_to_hack_like_elliot_from_mister_robot/\",\n \"Tips for Copying and Pasting from Apps That Restrict It\": \"https://www.reddit.com/r/HowToHack/comments/1idg62q/tips_for_copying_and_pasting_from_apps_that/\",\n \"Can I duplicate a SIM card?\": \"https://www.reddit.com/r/HowToHack/comments/1idihtl/can_i_duplicate_a_sim_card/\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"PCAPs or It Didn't Happen: Exposing an Old Netgear Vulnerability Still Active in 2025 [Guest Diary], (Thu, Jan 30th)\": \"https://isc.sans.edu/diary/rss/31638\",\n \"ISC Stormcast For Thursday, January 30th, 2025 https://isc.sans.edu/podcastdetail/9302, (Thu, Jan 30th)\": \"https://isc.sans.edu/diary/rss/31636\"\n },\n \"Deep Web\": {\n \"My friend stumbled upon these while gliding at dark web.\": \"https://www.reddit.com/r/deepweb/comments/1idlmuj/my_friend_stumbled_upon_these_while_gliding_at/\"\n },\n \"Information Security\": {\n \"Change Healthcare data breach – how to protect yourself\": \"https://www.reddit.com/r/Information_Security/comments/1idnbgn/change_healthcare_data_breach_how_to_protect/\",\n \"College Survey on AI-Enhanced Phishing and Cybersecurity Training Effectiveness\": \"https://www.reddit.com/r/Information_Security/comments/1idq592/college_survey_on_aienhanced_phishing_and/\",\n \"CIS standards for CyberArk\": \"https://www.reddit.com/r/Information_Security/comments/1idn856/cis_standards_for_cyberark/\",\n \"What is SHEIN doing to our data?\": \"https://www.reddit.com/r/Information_Security/comments/1idgkn6/what_is_shein_doing_to_our_data/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Cred Vaults, Cheap AI, and Hacking Devices - Matt Bishop - PSW #859\": \"http://sites.libsyn.com/18678/cred-vaults-cheap-ai-and-hacking-devices-matt-bishop-psw-859\"\n }\n}"}}, "archive/daily/2025/2025-01-30.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747322.5893686, "n": 52870, "h": "87e2ec07ba952618", "c": "# 每日安全资讯（2025-01-30）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-01-29 Review](http://www.sec-wiki.com/?2025-01-29)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [OpenPanel 0.3.4 Command Injection](https://cxsecurity.com/issue/WLB-2025010034)\n - [ ] [MySchool System - Multiple Vulnerabilities](https://cxsecurity.com/issue/WLB-2025010033)\n - [ ] [NEXT-EMP v1.0-Copyright © 2024. All rights reserved. File Upload-FU and Remote Code Execution-RCE](https://cxsecurity.com/issue/WLB-2025010032)\n- Trustwave Blog\n - [ ] [Inside APT34 (OilRig): Tools, Techniques, and Global Cyber Threats](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/inside-apt34-oilrig-tools-techniques-and-global-cyber-threats/)\n- Recent Commits to cve:main\n - [ ] [Update Wed Jan 29 20:28:19 UTC 2025](https://github.com/trickest/cve/commit/2a9a6c5e8dfdef652b3351b8c7c20cddc3b7958c)\n - [ ] [Update Wed Jan 29 12:26:44 UTC 2025](https://github.com/trickest/cve/commit/023d47466c3dfcf89301b51bd1f75e5ac6af45d2)\n - [ ] [Update Wed Jan 29 04:20:44 UTC 2025](https://github.com/trickest/cve/commit/9bbcd187c35f8f8562d789c9c6a09501e13902b6)\n- Security Boulevard\n - [ ] [Alibaba’s Qwen 2.5-Max: The AI Marathoner Outpacing DeepSeek and Catching OpenAI’s Shadow](https://securityboulevard.com/2025/01/alibabas-qwen-2-5-max-the-ai-marathoner-outpacing-deepseek-and-catching-openais-shadow/)\n - [ ] [Introducing WAF Rule Tester: Test with Confidence, Deploy without Fear | Impart Security](https://securityboulevard.com/2025/01/introducing-waf-rule-tester-test-with-confidence-deploy-without-fear-impart-security/)\n - [ ] [DEF CON 32 – Tough Adversary Don’t Blame Sun Tzu](https://securityboulevard.com/2025/01/def-con-32-tough-adversary-dont-blame-sun-tzu/)\n - [ ] [The OWASP NHI Top 10 and AI risk: What you need to know](https://securityboulevard.com/2025/01/the-owasp-nhi-top-10-and-ai-risk-what-you-need-to-know/)\n - [ ] [API Security Is At the Center of OpenAI vs. DeepSeek Allegations](https://securityboulevard.com/2025/01/api-security-is-at-the-center-of-openai-vs-deepseek-allegations/)\n - [ ] [Randall Munroe’s XKCD ‘Muons’](https://securityboulevard.com/2025/01/randall-munroes-xkcd-muons/)\n - [ ] [SLAP/FLOP: Apple Silicon’s ‘Son of Spectre’ Critical Flaws](https://securityboulevard.com/2025/01/slap-flop-apple-silicon-richixbw/)\n - [ ] [Our Digital Footprints are Breadcrumbs for Mapping our Personal Behavior](https://securityboulevard.com/2025/01/our-digital-footprints-are-breadcrumbs-for-mapping-our-personal-behavior/)\n - [ ] [How to Find Old Accounts for Deletion](https://securityboulevard.com/2025/01/how-to-find-old-accounts-for-deletion/)\n - [ ] [Codefinger Ransomware: Detection and Mitigation Using MixMode](https://securityboulevard.com/2025/01/codefinger-ransomware-detection-and-mitigation-using-mixmode/)\n- Der Flounder\n - [ ] [Managing Apple Intelligence features on macOS Sequoia 15.3](https://derflounder.wordpress.com/2025/01/29/managing-apple-intelligence-features-on-macos-sequoia-15-3/)\n- InfoSec Write-ups - Medium\n - [ ] [5 Things You Should Understand Before Jumping into Bug Bounty](https://infosecwriteups.com/5-things-you-should-understand-before-jumping-into-bug-bounty-813cd960c6bc?source=rss----7b722bfd1b8d---4)\n - [ ] [Exploiting XSS To Steal Cookies](https://infosecwriteups.com/exploiting-xss-to-steal-cookies-f0aebdcd815b?source=rss----7b722bfd1b8d---4)\n - [ ] [How I Found a Ticket Booking Bug That Allowed Me to Travel Almost for Free in TNSTC](https://infosecwriteups.com/how-i-found-a-ticket-booking-bug-that-allowed-me-to-travel-almost-for-free-in-tnstc-2c7aa23aebf6?source=rss----7b722bfd1b8d---4)\n- Hacking Articles\n - [ ] [Credential Dumping: AD User Comment](https://www.hackingarticles.in/credential-dumping-ad-user-comment/)\n- Insinuator.net\n - [ ] [Jigsaw RDPuzzle: Piecing Attacker Actions Together](https://insinuator.net/2025/01/jigsaw-rdpuzzle/)\n- Google Online Security Blog\n - [ ] [How we kept the Google Play & Android app ecosystems safe in 2024](http://security.googleblog.com/2025/01/how-we-kept-google-play-android-app-ecosystem-safe-2024.html)\n - [ ] [How we estimate the risk from prompt injection attacks on AI systems](http://security.googleblog.com/2025/01/how-we-estimate-risk-from-prompt.html)\n- Doonsec's feed\n - [ ] [青萍安全祝大家新年快乐！！！](https://mp.weixin.qq.com/s?__biz=MzkxMzY0MzAxMw==&mid=2247487278&idx=1&sn=78ec559025c718883b9f1b1f674ba5f5)\n - [ ] [仅此一次，春节七折嗷！](https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486501&idx=1&sn=51fe604005374bcbfff2b9f235d97286)\n - [ ] [[收费公开课] 前后端分离渗透和三个突破口](https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486501&idx=2&sn=303abdda447ab10baa18016a0ae9460a)\n - [ ] [原创工具|Venom-JWT渗透工具 - 针对JWT漏洞和密钥爆破服务渗透测试](https://mp.weixin.qq.com/s?__biz=Mzk0ODc1MjYyNA==&mid=2247483866&idx=1&sn=b4a7b1a90b8624e68c8e4106eccd2de9)\n - [ ] [大年初一，巳巳如意！](https://mp.weixin.qq.com/s?__biz=MzkzMjQ4NTQwNw==&mid=2247483835&idx=1&sn=b593aa19e5825e5a2c3f5e1fd7546734)\n - [ ] [[注意保密] 新年红包雨：领取 1888$ 年度极致福利](https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506610&idx=1&sn=891e78f2c8c413caa518b343114d9503)\n - [ ] [黑客组织Handala宣称攻破以色列国安系统 4TB机密数据遭泄露](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494609&idx=1&sn=10c34cea93492cfefbb71eea5f87901a)\n - [ ] [Urkc安全红包封面上线啦！](https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247487269&idx=1&sn=0d4c70352cf47f5360f202a395b166b6)\n - [ ] [【实操】利用Deepseek传承和弘扬传统文化](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148736&idx=1&sn=39a0df253f09d26a6151599d1e8bfb20)\n - [ ] [【培训】Osint开源情报练习 #002](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148736&idx=2&sn=ebee4c79a769e10968179969c634d83a)\n - [ ] [AISS大模型安全社区-2025 Roadmap](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494053&idx=1&sn=6449e25c9c3754c833fdd7ba5435ad70)\n - [ ] [2025新春致谢 | 金蛇纳福启新程](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589299&idx=1&sn=5e38768a37484f2f38cd5b8da65a095b)\n - [ ] [Windows 11 24H2 上的进程镂空技术](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247486790&idx=1&sn=c0d73c1ebaa8ed6fd5ec7a87a43b25eb)\n - [ ] [德国数据保护机构《标准数据保护模式》中译文](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247506191&idx=1&sn=5c306df3d480ebc5a37d4e207d432f24)\n - [ ] [新年零食大礼包抽奖开奖](https://mp.weixin.qq.com/s?__biz=Mzg4NDg2NTM3NQ==&mid=2247484712&idx=1&sn=fd70a0465dbf9e30c615379a6bdda89d)\n - [ ] [【卫星图像】金正恩考察朝鲜核物质生产基地和核武器研究所](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559318&idx=1&sn=f93bc65cb4cf2587b134129cbdca5205)\n - [ ] [美日韩“抱团”：三国首次会谈聚焦朝鲜核威胁](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559318&idx=2&sn=eef1bccee4db52de82349056e07e8aca)\n - [ ] [致情报分析师公众号全体粉丝](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559318&idx=3&sn=be997ee6361433a289ec6c156aca06a7)\n - [ ] [Ghosten Player：全平台视频播放器，云盘/本地/IPTV资源一网打尽，支持TV和刮削！](https://mp.weixin.qq.com/s?__biz=MzA4MjkzMTcxMg==&mid=2449046775&idx=1&sn=403d11271cef923ea84dfc9005eed22e)\n - [ ] [“巳巳”如意｜蛇年大吉u200b](https://mp.weixin.qq.com/s?__biz=MzU4MTg1NzAzMA==&mid=2247490620&idx=1&sn=48ea11f22a243fbf8b403f5347af6b4b)\n - [ ] [收藏 | dotNet安全矩阵 2024 年度安全防御绕过阶段文章和工具汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498553&idx=1&sn=1d8935d674697bc89a84b1b07dd7573a)\n - [ ] [.NET 内网攻防实战电子报刊](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498553&idx=2&sn=2eabd584fcc38d4a3de34cbc21b247b8)\n - [ ] [收藏 | dotNet安全矩阵 2024 年度外网入口打点阶段文章和工具汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498553&idx=3&sn=11f8acaa352ccc07f18420479c442a8b)\n - [ ] [【新春福利免费开放】【20250129更新】GrayLog开源日志管理平台技术文章合集【共80篇】](https://mp.weixin.qq.com/s?__biz=MzU2MjU1OTE0MA==&mid=2247499654&idx=1&sn=1717caf72330209a0d7860dac066d9aa)\n - [ ] [ISO 45001: 2018 标准详解与实施（10）6.1.2 危险源辨识及风险和机遇的评价](https://mp.weixin.qq.com/s?__biz=MzA5OTEyNzc1Nw==&mid=2247486046&idx=1&sn=e0752fe57f13f49404b464a8a5d23bf8)\n - [ ] [中亚新位置：美国到底是“机遇”还是“陷阱”？](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505009&idx=1&sn=a675523c007664b3ded75ff213872283)\n - [ ] [曼德海峡危机：胡塞武装如何搅动全球贸易与地缘政治的“一池春水”？](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505009&idx=2&sn=30bc5ffc5afc9a5458d174a81224a804)\n - [ ] [DeepSeek遭受美国大规模黑客DDOS攻击！该如何应对？](https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247483894&idx=1&sn=a0a2746ea96e1c4da9caa325f9851abd)\n - [ ] [蛇年快乐！](https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538527&idx=1&sn=a6a982145ee51f2707a9b7d2914c057c)\n - [ ] [花指令——新春快乐版](https://mp.weixin.qq.com/s?__biz=MzkyNTYwOTMyNA==&mid=2247485009&idx=1&sn=71e8f9c7d9658e891eb9aa14140fac0c)\n - [ ] [我让DeepSeek锐评下网络安全行业现状，它的回答......](https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247486228&idx=1&sn=710163f3aca52010a4b552bf987a7b69)\n - [ ] [复旦白泽给大家拜年啦！祝大家蛇年大吉，巳巳如意，Paper如潮成果丰！](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247492844&idx=1&sn=a8d82e9664fd92535652abde94911226)\n - [ ] [记一次SRC利用github搜索拿下中危漏洞](https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547532&idx=1&sn=a25d3179451f39184a2c2306e222d2f5)\n - [ ] [新年快乐 | 渊亭科技祝您巳巳如意，蛇年大吉！](https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660190405&idx=1&sn=b33a770adf5ed142dc3ac8c2afba90ef)\n - [ ] [揭露俄罗斯APT新手段：Gamaredon首次使用安卓间谍软件骨骼间谍（BoneSpy）和伪装侦察（PlainGnome）](https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485657&idx=1&sn=1c6e5658064e3bb16435047e39a9f311)\n - [ ] [中医学论文大纲完善与落实指南：让你的论文架构更清晰！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=1&sn=592a8a23a41a09fc0c7f61488411d5d8)\n - [ ] [中医学论文搜集文献攻略：10分钟搞定一个月找不全的经典文献库！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=2&sn=9e44f435954053a0a3863c6ca466f2c8)\n - [ ] [终于搞懂了！新手如何玩转新闻学论文的文献综述写作攻略，快速上手！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=3&sn=86c1867c8e4f63023a0328e127fc79fb)\n - [ ] [终于掌握水产养殖学论文搜集文献秘诀！完整指南公开！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=4&sn=050db58f55d66a155a674ae62fbc198d)\n - [ ] [终于知道日语论文搜集文献这门道，超实用版硬核干货！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=5&sn=1dd216f434bb52375a8b6847836147b5)\n - [ ] [重磅揭秘：内行人才懂的林业技术论文文献综述写作高阶指南！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=6&sn=d4792364daac44d36e9ee0fe60f8a44a)\n - [ ] [专家带路：农业工程论文选题高分技巧，快速锁定黄金选题！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=7&sn=f8f67fececd526ee35399b356da849e1)\n - [ ] [专家级企业管理论文搜集文献内部秘籍：外企高级经理人都在偷学的全流程技巧。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=8&sn=5ff567d0085a3894e4c0033cd8301bb9)\n - [ ] [红队和 Web 黑盒审计的侦察脚本](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527357&idx=1&sn=c83b93750bea91d42a144b5a5739a263)\n - [ ] [滥用 Windows fork API 和 OneDrive.exe 进程来注入恶意 shellcode](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527357&idx=2&sn=cb567e9fa5f939b386410eaa2208192b)\n - [ ] [零日漏洞正在推动 Fortinet 防火墙攻击（CVE-2024-55591 已确认）](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527357&idx=3&sn=a9547ba6b29ff579585ca08ae6e20652)\n - [ ] [好的伴侣可以减少一半人间疾苦，合适的工作更是这样](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247488193&idx=1&sn=98fb524ba32bd4acb817ce28aedc8a4d)\n - [ ] [夜鹰(NightHawk)C2工具被泄露了？](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490232&idx=1&sn=71a4e338358972fe51261cbc15ddcc02)\n - [ ] [万象更新 共启新程｜四叶草安全祝您鸿运当头](https://mp.weixin.qq.com/s?__biz=MjM5MTI2NDQzNg==&mid=2654552292&idx=1&sn=94bfca6ee6e6469f09475331d9ec1dff)\n - [ ] [新春伊始，红日安全启航！愿与您共同筑牢数字防线，共同迈向更安全的明天！🔒🌱](https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851765&idx=1&sn=568da818c7d56ee694372f7ca3d04ddc)\n - [ ] [暗网情报5则：VPN权限出售-CNN马来西亚遭勒索](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507140&idx=1&sn=39e2cd4ca4a8b2405576bcc343bea2c6)\n - [ ] [5th域安全微讯早报【20250129】025期](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507140&idx=2&sn=e324fe0e8dc2c445cc103295d565424b)\n - [ ] [有人急了。。。DeepSeek。。。线上服务受到大规模恶意攻击。。。](https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247504835&idx=1&sn=145feae85263084b1b6d5bd7b36c7877)\n - [ ] [新型“Sneaky 2FA”钓鱼工具包瞄准微软365账户，绕过双重认证（2FA）窃取凭证](https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900162&idx=1&sn=f1cd9351fa6107901ed7fa81fb279643)\n - [ ] [大年初一 | 开源网安祝福大家事业蒸蒸日上，生活阖家美满](https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247514013&idx=1&sn=5833bcc742d0d3e15ef6b74df78cc868)\n - [ ] [碳泽信息祝您新春快乐，巳巳如意！](https://mp.weixin.qq.com/s?__biz=Mzk0ODI4MDI4Nw==&mid=2247494627&idx=1&sn=ffc67d2a6efe5b59293eda6175d3226f)\n - [ ] [【2025春节】解题领红包活动开始喽，解出就送论坛币！](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141655&idx=1&sn=d21717226e40032625a74a2d00255e23)\n - [ ] [巳巳如意 | 蛇年大吉](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313207&idx=1&sn=6fbe79faad8cf2aedae18f3523b11c63)\n - [ ] [《信息安全研究》恭祝大家新春快乐！](https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664992974&idx=1&sn=9cd2cb9e2b233b74a40604ea67942fa7)\n - [ ] [大年初一丨安天智甲给您拜年了](https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650209897&idx=1&sn=6bfd5ddbc7574bf32992f11997f69d3d)\n - [ ] [大年初一，拜大年](https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650464736&idx=1&sn=bc114265d19b16cd3c45f4cc8b871012)\n - [ ] [联想全球安全实验室恭祝大家新春快乐！](https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247491548&idx=1&sn=73c8dbc0a4131745e3e798eaa6404d16)\n - [ ] [大年初一 蛇来运转](https://mp.weixin.qq.com/s?__biz=Mzg2MTU5ODQ2Mg==&mid=2247507173&idx=1&sn=3b4749529f6bca97d5553cb65fdec622)\n - [ ] [数字取证之证据识别u200c](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264820&idx=1&sn=c47fa7a58ac994934f15782210c4718b)\n - [ ] [网安原创文章推荐【2025/1/28】](https://mp.weixin.qq.com/s?__biz=MzAxNzg3NzMyNQ==&mid=2247489519&idx=1&sn=b63ac6606b1606adc9ec3fbf28433922)\n - [ ] [大年初一到，财来福星照！新的一年，祝大家巳巳如意，蛇年行大运。](https://mp.weixin.qq.com/s?__biz=MzkyNDUxNTQ2Mw==&mid=2247485819&idx=1&sn=a9119ee1b24d286f56cda649c53d5870)\n - [ ] [大年初一 | 祥蛇纳福，“巳巳”如意](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579267&idx=1&sn=b6b08865f0534077a40f3e336e85bd3f)\n - [ ] [SQLite数据库注入攻击技术研究](https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037456&idx=1&sn=26b186946b56da6148be861444022c93)\n - [ ] [春节](https://mp.weixin.qq.com/s?__biz=MzUyMjAyODU1NA==&mid=2247491946&idx=1&sn=960238aa34a57daeb943121fa63418f3)\n - [ ] [新年好运签 | 统一云防御：统一防护管理，筑牢网络边界](https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870831&idx=1&sn=f2dffa473f8078bccfce2ac7f3814c1d)\n - [ ] [春节|安赛祝大家新年快乐！](https://mp.weixin.qq.com/s?__biz=MzI3MzA2MTk3Mw==&mid=2657788240&idx=1&sn=8d0ec3ec282dc8d43159d7636218278b)\n - [ ] [新春快乐｜安势信息祝大家蛇年大吉！](https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491507&idx=1&sn=51f24fc4ce62cb89254184ab41c5d934)\n - [ ] [初一｜身体健康，万事如意！](https://mp.weixin.qq.com/s?__biz=MzU1MzE3Njg2Mw==&mid=2247510392&idx=1&sn=23b6d35cb71d82c23d562ba42b1e0694)\n - [ ] [2024年公众号优质文章汇总](https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485613&idx=1&sn=2ea4aed4c2413869c00fb53f76d1fae5)\n - [ ] [正月初一 | 一帆风顺 元启新程](https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506080&idx=1&sn=de989f72a1c24a6013bc32834fd66539)\n - [ ] [捷普焕新领先产品全系列](https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506080&idx=2&sn=ddbcbdccb66e8f94303cf95a7dd9420e)\n - [ ] [【焕新领先】 捷普态势感知系统](https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506080&idx=3&sn=5e87f69e3e89d5d4d0e72e5e973c9f0a)\n - [ ] [粤港澳大湾区网络安全协会祝您新年快乐！](https://mp.weixin.qq.com/s?__biz=MzkwOTUyODE5Mg==&mid=2247485770&idx=1&sn=8c67f414c1d5363770af6d0c2d909922)\n - [ ] [关于网络安全指标的思考](https://mp.weixin.qq.com/s?__biz=MzkwOTUyODE5Mg==&mid=2247485770&idx=2&sn=83e45c1783b1612d8163d9544c9f6b47)\n - [ ] [众安天下祝您新春快乐、蛇年大吉！](https://mp.weixin.qq.com/s?__biz=MzIyOTUzODY5Ng==&mid=2247504322&idx=1&sn=5e6878918dcc0b4c304704e423a7a2c3)\n - [ ] [天工实验室祝大家蛇年大吉，万事如意！](https://mp.weixin.qq.com/s?__biz=Mzk0OTU2ODQ4Mw==&mid=2247486754&idx=1&sn=62aa67a56b66db75099aae8ea64ceef9)\n - [ ] [渗透测试 | 某学校授权渗透测试评估](https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487347&idx=1&sn=ecfde99bcc6735f0141a9b575a90c556)\n - [ ] [有度安全给大家拜年啦！灵蛇启新元，初一福泽绵](https://mp.weixin.qq.com/s?__biz=Mzg3NTEyMzU4OA==&mid=2247513467&idx=1&sn=c5f15ab42712064a3075e44a9bc4d911)\n - [ ] [元春始风华，万象启新朝。深圳市网安计算机网络安全培训中心恭祝您福启新岁，万事顺遂。](https://mp.weixin.qq.com/s?__biz=Mzg3MDYzMjAyNA==&mid=2247486206&idx=1&sn=c7d7d28fb1d2de4e50c094c384bd700e)\n - [ ] [大年初一：福满新岁](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624760&idx=1&sn=7d6fdaf5776b133489f8cbfd0cf87135)\n - [ ] [新春快乐，万事如意](https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247498914&idx=1&sn=9db465eba52da2dd54e90fb40b843bf6)\n - [ ] [拜年啦：恭贺新禧，蛇年大吉！](https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247540150&idx=1&sn=c11b523ae88eb1cdd1b00c2e2e1e7f4b)\n - [ ] [安领可信给您拜年啦！](https://mp.weixin.qq.com/s?__biz=MzUxNjUwNDU4OQ==&mid=2247483953&idx=1&sn=661f7bc51d8046599be7e71f46852275)\n - [ ] [大年初一 汉华信安给您拜年了](https://mp.weixin.qq.com/s?__biz=Mzg5ODYyMTI2NA==&mid=2247484582&idx=1&sn=e4a8c83e259a25f4a962bab36d0c0afd)\n - [ ] [正月初一拜大年！亚信安全祝大家蛇年顺遂，蛇蛇如意](https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620958&idx=1&sn=1a539d599c8fa0167941d6bccc946ec9)\n - [ ] [大年初一 一帆风顺](https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135288&idx=1&sn=c8bf1121cab73be169ecaa119f5d9d5b)\n - [ ] [慢雾科技祝大家新春快乐，“巳巳”如意！](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501035&idx=1&sn=59e84e7659d99a54b6501ec2191845d8)\n - [ ] [新年快乐 | 渊亭防务祝您巳巳如意，蛇年大吉！](https://mp.weixin.qq.com/s?__biz=Mzg2NTYyODgyNg==&mid=2247504626&idx=1&sn=947b971cf92a530af5d4af7a9f40378b)\n - [ ] [初一 | 鞭炮声声辞旧岁，新衣新貌贺新年！](https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497078&idx=1&sn=93f0e2203558c5d2186205dae47e4ab0)\n - [ ] [墨云科技 ｜ 金蛇献瑞，谨贺新年](https://mp.weixin.qq.com/s?__biz=MzU5ODE2NDA3NA==&mid=2247496753&idx=1&sn=101bd162fb27a6b210c95d36ff4756c7)\n - [ ] [磐石安科技｜恭贺蛇年大吉！](https://mp.weixin.qq.com/s?__biz=MzkwNDI0MjkzOA==&mid=2247485840&idx=1&sn=e5045c1d16e658ef82f838d19add009a)\n - [ ] [正月初一 | 安泰如意](https://mp.weixin.qq.com/s?__biz=Mzg2NDU3Mzc5OA==&mid=2247489779&idx=1&sn=76fc6dae86e231c41efea62f0565ac21)\n - [ ] [大年初一 | 金蛇献瑞迎新春，岁月悠悠送吉祥](https://mp.weixin.qq.com/s?__biz=Mzk0MDQ5MTQ4NA==&mid=2247487427&idx=1&sn=eeef20b9473215312b0e39159d148a5b)\n - [ ] [拜年啦](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553215&idx=1&sn=9e310bac7fb47a94b16a9da14e538d01)\n - [ ] [大年初一丨新春启航，万事如意](https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650277649&idx=1&sn=f1b0ac4ba8a25aeb6f61b973093d555f)\n - [ ] [春节｜瑞蛇迎春，共赴新程](https://mp.weixin.qq.com/s?__biz=MzkxODczNjA4NQ==&mid=2247494021&idx=1&sn=55cd58add868195168feda1b08a0a2f1)\n - [ ] [初一 | 大年初一 万事胜意](https://mp.weixin.qq.com/s?__biz=MzU1OTc2MzE2Mg==&mid=2247489329&idx=1&sn=d001254620cb5ccdcf51cb5a9a73670e)\n - [ ] [祝大家新年蛇年大吉，健康喜乐](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494577&idx=1&sn=4d5a9964a63a52fe6cdd3febc7abd292)\n - [ ] [苹果修补了 2025 年首个被利用的 iOS 0day(CVE-2025-24085)](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494577&idx=2&sn=2a3b9a9481760f2c54d584ed72cf307c)\n - [ ] [春节 | 灵蛇迎春，福运满屋](https://mp.weixin.qq.com/s?__biz=MzU3MDA0MTE2Mg==&mid=2247492564&idx=1&sn=44253e74476868913d0de1065716dfad)\n - [ ] [梅苑安全携带小猫祝大家蛇年快乐](https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484530&idx=1&sn=8610d601d8d5bd24528dc1545e83c1a5)\n - [ ] [红队移动端评估测试工具](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489192&idx=1&sn=f92f78566f73bdbcee373ac7834d1396)\n - [ ] [不足挂齿](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489192&idx=2&sn=4597cbd9bbf1d814a4d86c26bfb77eed)\n - [ ] [范渊新年献词：以韧性回应时代，以AI引领未来](https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650624573&idx=1&sn=bde5fc48268dbc7566e0b36ca5ea68e8)\n - [ ] [【初一】新岁启封，同赴新程](https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650624573&idx=2&sn=c4581b248078cb6ff6f9d465754da975)\n - [ ] [像 C2 一样使用 VSCode - 红队风格](https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504777&idx=1&sn=6a7bb7db4890f89678a69854ecbce461)\n - [ ] [InForSec祝网络安全华人学者春节愉快！](https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652317463&idx=1&sn=3b304079c535abddffd4968cd9d1c718)\n - [ ] [蛇年大吉](https://mp.weixin.qq.com/s?__biz=MzI2Mzc4ODc1NQ==&mid=2247489583&idx=1&sn=e98d28ca40b57b5b32aac53edfeb1946)\n - [ ] [【贺蛇年】初一纳福 网安启途](https://mp.weixin.qq.com/s?__biz=MzAxMjE1MDY0NA==&mid=2247508841&idx=1&sn=8c7d1aeb8c2b6827bcde2b323e04027e)\n - [ ] [别搞](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496843&idx=1&sn=12979bae2be8a2d90496e7c79e8bb831)\n - [ ] [国自然中标真不难！十年评审专家1v1精修本子，中标率提升58%](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496843&idx=2&sn=d9858f7695b5db1be02e2d9887ab97d1)\n - [ ] [【大年初一】喜迎蛇年 瑞气呈祥](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649249641&idx=1&sn=7a41d8aceeeb227acfb93b534968da9c)\n - [ ] [迎新年，启新篇｜任子行祝您新春快乐、蛇年行大运](https://mp.weixin.qq.com/s?__biz=MzI0NjAyMjU4MA==&mid=2649595765&idx=1&sn=fd65317a7df2cda280b10b05734a7e1d)\n - [ ] [新年伊始，华为星河AI融合SASE解决方案祝您“SASE”过群雄，一鸣惊人！](https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505875&idx=1&sn=d3e7db45fae8f8b023d025df3a110d88)\n - [ ] [初一 | 新春纳福](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493740&idx=1&sn=3a548b5f7979b125fbee60be48b4bfe1)\n - [ ] [【2025】新年快乐](https://mp.weixin.qq.com/s?__biz=MzUwOTc3MTQyNg==&mid=2247491386&idx=1&sn=81b68fc009fb3bb698df452f0490aebb)\n - [ ] [分享图片](https://mp.weixin.qq.com/s?__biz=MzI3Njc1MjcxMg==&mid=2247494394&idx=1&sn=46b470b30f34d28b91b7446c0432ba7f)\n - [ ] [巳巳如意 生生不息丨云天安全祝您新春快乐](https://mp.weixin.qq.com/s?__biz=MzI2NDYzNjY0Mg==&mid=2247501216&idx=1&sn=1bb93c2c50c51f4ba008c8c002e163e1)\n - [ ] [Mac下破解激活JetBrains产品](https://mp.weixin.qq.com/s?__biz=Mzg5OTgzMzA1OA==&mid=2247483872&idx=1&sn=8fa59f27c9706af7c69ee722c4016785)\n - [ ] [正月初一｜金蛇迎春 巳巳如意](https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247506758&idx=1&sn=b9e384ec8963ccca8fe2773ebbb9023c)\n - [ ] [魔方安全祝你蛇来运转，前程螣螣](https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649292206&idx=1&sn=3f87066febd3b789c0e7db2baf1fd1f9)\n - [ ] [灵蛇启新元 初一福泽绵](https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247520421&idx=1&sn=9d1cb6d9e4d36868892fdffebe8001f7)\n - [ ] [瑞蛇迎春，共筑网安新未来！](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247635828&idx=1&sn=dc1ea39348bc6420d3d24e3cbd1814d2)\n - [ ] [大年初一|蛇年顺遂，事事如意！](https://mp.weixin.qq.com/s?__biz=MzU2NzUxMTM0Nw==&mid=2247513467&idx=1&sn=976f6d8db01ae07c788cd029211a3ee6)\n - [ ] [山石网科·AI汇东方｜正月初一，蛇年大吉](https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661298278&idx=1&sn=48cdce5c730da12f4ee90406ada0f6f5)\n - [ ] [拜大年|蛇跃新程 云科同行！](https://mp.weixin.qq.com/s?__biz=Mzg2NTk3NjczNQ==&mid=2247485633&idx=1&sn=8b101c6e5ac782199e1104c0e13efbc4)\n - [ ] [恭贺新春 | 金盾信安祝您新春快乐，蛇年大吉！](https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448682671&idx=1&sn=5bdff851e304d4dbeff7833d0318a678)\n - [ ] [迎新春 过新年 御盾安全给大家拜年啦！](https://mp.weixin.qq.com/s?__biz=MzU4ODgxMjE0Mw==&mid=2247486347&idx=1&sn=858139f172118c4bb834d05bf953cc4f)\n - [ ] [蛇年到，福气绕，元支点给您拜年啦！](https://mp.weixin.qq.com/s?__biz=MzI4MDE2MzA4Mw==&mid=2667651078&idx=1&sn=747dc83ae36cc0ea5c1b93eb4bdbaf25)\n - [ ] [极验给大家拜年了！](https://mp.weixin.qq.com/s?__biz=MzI2MDE5MTQxNg==&mid=2649723247&idx=1&sn=589cd5ffbdc64554e70c473143cb5c8e)\n - [ ] [一元复始 万象更新，能信安祝您及家人新春大吉 万事如意！](https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490788&idx=1&sn=4ecf028f6de13d48505acb287263846e)\n - [ ] [初一 | 恭贺新春，蛇年大吉！](https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247523802&idx=1&sn=6d75fb5fa444f7b8b4309bb64caadaf9)\n - [ ] [金蛇纳福 | 大年初一，网安拜大年！](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235919&idx=1&sn=a091ebd91146a52049677eef87b7cfa1)\n - [ ] [蛇年大吉 恭贺新春](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235919&idx=2&sn=1b8c628b25f0a25746c47876084b1c61)\n - [ ] [祥蛇贺岁！2025，祝您蛇年顺遂、巳巳如意](https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247533748&idx=1&sn=2d4e5d8e231d87a0691bbaaf7bf882f2)\n - [ ] [祥蛇献瑞，国泰家康丨永信至诚祝您新春快乐！](https://mp.weixin.qq.com/s?__biz=MzAwNDUyMjk4MQ==&mid=2454829244&idx=1&sn=15d13b997ed8a1d2b6de05f8f19815f0)\n - [ ] [洞察2025年网络安全产业趋势](https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489844&idx=1&sn=36f1c90e8bd6d4b656b0d844e9d34e9f)\n - [ ] [新年快乐，巳巳如意！](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247491864&idx=1&sn=bdd69466a0fca637b7efccc408def11e)\n - [ ] [蛇跃新程，矢安科技祝您新的一年“巳巳如意”！](https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247516821&idx=1&sn=b60521f8bd702c0158be36308c378c7f)\n - [ ] [拜大年，心向暖阳，愿邮件安全顺遂无忧](https://mp.weixin.qq.com/s?__biz=MzA5NjMyMDEwNg==&mid=2649286360&idx=1&sn=010f5320070eb627541f94e272efd09b)\n - [ ] [初一 | 拜大年](https://mp.weixin.qq.com/s?__biz=MzI5NjA4NjA3OA==&mid=2652102063&idx=1&sn=3c51fdc8f0addd6ae0cfb25d2b458ea3)\n - [ ] [新春快乐，蛇年吉祥，祝公众号的朋友们身体健康，工作顺利！](https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247515082&idx=1&sn=47788096ca6fa4a1ecb947344b4af31a)\n - [ ] [恭贺新春](https://mp.weixin.qq.com/s?__biz=MzU3NTQwNDYyNA==&mid=2247488573&idx=1&sn=0d50fb0a6590fdc5c74cdc1b072da0d9)\n - [ ] [医疗行业数据安全风险评估实践指南（一）](https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247493571&idx=1&sn=5bb28d26963d363a5d4590d66a8df87b)\n - [ ] [乙巳春节｜新岁启封 万象更新](https://mp.weixin.qq.com/s?__biz=MjM5NjU0NDQ1Ng==&mid=2671019617&idx=1&sn=629fac95808c3f7da16dfa3856f5403c)\n - [ ] [蛇年至，万象新，安易科技祝您新年快乐！](https://mp.weixin.qq.com/s?__biz=MzkwMTI3ODUxOQ==&mid=2247485207&idx=1&sn=b324e11004c245d1addc71c420ae24b2)\n - [ ] [拜大年 | 竹爆声声辞旧岁，烟花朵朵迎新春。知白学院给您拜年啦~](https://mp.weixin.qq.com/s?__biz=MzUzNDg0NTc1NA==&mid=2247510555&idx=1&sn=adf528e69e77da7e1ade94a1037f657a)\n - [ ] [贺新春！](https://mp.weixin.qq.com/s?__biz=MzUxODY3MDExMA==&mid=2247490118&idx=1&sn=41ce7f2bb938c7cb6e68ae48ea0bed1b)\n - [ ] [新年祝福](https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247487719&idx=1&sn=cdab963d88b8a7a93f57e02822946c95)\n - [ ] [船山信安给各位师傅们拜年啦！](https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518508&idx=1&sn=0bcd7cdfb692d548afb9fc3e4e0aabd8)\n - [ ] [新年记](https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486261&idx=1&sn=a99fd42137a2c3a4e337746ba8d1c4d7)\n - [ ] [安全客祝您蛇来运转，福满乾坤！](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787812&idx=1&sn=db21fb03c585e8434fd2aa509fe447b4)\n - [ ] [【新年快乐】菜狗安全祝师傅们新年快乐(内含抽奖)](https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247485729&idx=1&sn=a0b793b557e83bc2f4e8ab3baff70b5b)\n - [ ] [HackingClub祝您巳巳如意，前程螣螣！](https://mp.weixin.qq.com/s?__biz=MzkxMzE4MTc5Ng==&mid=2247499518&idx=1&sn=d9ce9cfedb17f3e247b95cd20c211551)\n - [ ] [内生安全联盟恭祝大家新春快乐，万事大吉！](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247528904&idx=1&sn=4e192436cfabe37848d9c0a532aeaba5)\n - [ ] [🐱网安招财喵喵新春祝福～](https://mp.weixin.qq.com/s?__biz=MzkzNjE5NjQ4Mw==&mid=2247543340&idx=1&sn=ee9b97e42573764b723f01e86b6ece2b)\n - [ ] [大学生网络安全尖锋训练营给您拜年](https://mp.weixin.qq.com/s?__biz=MzUzODkwMDMxNA==&mid=2247574850&idx=1&sn=88a610b92fc3393da2255798f8ed2153)\n - [ ] [《网信自主创新调研报告》编委会给您拜年](https://mp.weixin.qq.com/s?__biz=MzkxMzI3MzMwMQ==&mid=2247530977&idx=1&sn=d05ad11631bf7f2d2c27a0398c17cfe2)\n - [ ] [暗魂攻防实验室祝各位蛇年大吉](https://mp.weixin.qq.com/s?__biz=MzkyMjE1NzQ2MA==&mid=2247489711&idx=1&sn=0ebcd1f0d28d56eff0d0744371744710)\n - [ ] [惊喜放送丨辞旧迎新除烦恼，万巳如意好运来,火绒祝您新春大吉！](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247522008&idx=1&sn=72eb4a612f06bf7c8a597e0f7dc088e1)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247522008&idx=2&sn=9adee9b586588ae9a54e6a2b1cba98ec)\n - [ ] [灵蛇迎春 瑞气盈门｜美创科技祝您新岁安康，蛇来运转](https://mp.weixin.qq.com/s?__biz=MzA3NDE0NDUyNA==&mid=2650805046&idx=1&sn=744a4d22945a4c2a5c8ccfa9f48e6457)\n - [ ] [迪普科技祝您新年快乐丨金蛇献瑞展宏图 续写网安新篇章](https://mp.weixin.qq.com/s?__biz=MzA4NzE5MzkzNA==&mid=2650370747&idx=1&sn=4d579b58e19a18bfbdb857b1fc747993)\n - [ ] [骇极安全](https://mp.weixin.qq.com/s?__biz=MzIwNTU1NjYwNA==&mid=2247488014&idx=1&sn=d62058ec064d318cd051237797748ebf)\n - [ ] [网安守夜人祝大家新年快乐](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486255&idx=1&sn=cbfd1798a20828ea6d7687536ae8f243)\n - [ ] [杂感四则](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114260&idx=1&sn=e7c060b972419b42cb2ed3ff9bd69084)\n - [ ] [春节 | 密织数据安全网，祥启蛇年好运章](https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247569445&idx=1&sn=81d7230341be2c2bc815d4771fe32884)\n - [ ] [攻防靶场(54)：从LFI到RCE](https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247496095&idx=1&sn=4bba7300e436e3e9e1eb11a361c42c25)\n- Blogs dade\n - [ ] [Lessons in Everything](https://0xda.de/blog/2025/01/lessons-in-everything/)\n- hn security\n - [ ] [CVE-2024-49138 Windows CLFS heap-based buffer overflow analysis – Part 2](https://security.humanativaspa.it/cve-2024-49138-windows-clfs-heap-based-buffer-overflow-analysis-part-2/)\n - [ ] [CVE-2024-49138 Windows CLFS heap-based buffer overflow analysis – Part 1](https://security.humanativaspa.it/cve-2024-49138-windows-clfs-heap-based-buffer-overflow-analysis-part-1/)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [5 Things You Should Understand Before Jumping into Bug Bounty](https://infosecwriteups.com/5-things-you-should-understand-before-jumping-into-bug-bounty-813cd960c6bc?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Exploiting XSS To Steal Cookies](https://infosecwriteups.com/exploiting-xss-to-steal-cookies-f0aebdcd815b?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [How I Found a Ticket Booking Bug That Allowed Me to Travel Almost for Free in TNSTC](https://infosecwriteups.com/how-i-found-a-ticket-booking-bug-that-allowed-me-to-travel-almost-for-free-in-tnstc-2c7aa23aebf6?source=rss----7b722bfd1b8d--bug_bounty)\n- GuidePoint Security\n - [ ] [Ongoing report: Babuk2 (Babuk-Bjorka)](https://www.guidepointsecurity.com/blog/ongoing-report-babuk2-babuk-bjorka/)\n- Securelist\n - [ ] [Threat predictions for industrial enterprises 2025](https://securelist.com/industrial-threat-predictions-2025/115327/)\n- Horizon3.ai\n - [ ] [Fireside Chat: Horizon3.ai and North Carolina’s Electric Cooperatives](https://www.horizon3.ai/intelligence/webinars/fireside-chat-horizon3-ai-and-north-carolinas-electric-cooperatives/)\n- Malware-Traffic-Analysis.net - Blog Entries\n - [ ] [2025-01-28: Malwre infection from web inject activity](https://www.malware-traffic-analysis.net/2025/01/28/index.html)\n- Twitter @bytehx\n - [ ] [Re @yeswehack Thanks !](https://x.com/bytehx343/status/1884630328339472481)\n - [ ] [Re @CristiVlad25 @yeswehack :-)](https://x.com/bytehx343/status/1884599250329411751)\n - [ ] [Re @_justYnot @Hacker0x01 Thanks!](https://x.com/bytehx343/status/1884599038978515142)\n - [ ] [Re @A_Atef200 @yeswehack No. This is private and I am sure that it won’t be duped:)](https://x.com/bytehx343/status/1884597418005860707)\n - [ ] [Yay, I was awarded a $$$ bounty on @Hacker0x01! https://hackerone.com/bytehx #TogetherWeHitHarder](https://x.com/bytehx343/status/1884583738790793420)\n - [ ] [Just got a reward for a high vulnerability submitted on @yeswehack -- Information Disclosure (CWE-200). https://yeswehack.com/hunters/bytehx #YesWeRHa...](https://x.com/bytehx343/status/1884583581504491599)\n - [ ] [Just got a reward for a vulnerability submitted on @yeswehack -- Acceptance of Extraneous Untrusted Data With Trusted Data - Cache Poisoning (CWE-349)...](https://x.com/bytehx343/status/1884583503851114555)\n- Malwarebytes\n - [ ] [These are the 10 worst PIN codes](https://www.malwarebytes.com/blog/news/2025/01/these-are-the-10-worst-pin-codes)\n- NVISO Labs\n - [ ] [Backups & DRP in the ransomware era](https://blog.nviso.eu/2025/01/29/backups-drp-in-the-ransomware-era/)\n- daniel.haxx.se\n - [ ] [A 1337 curl author](https://daniel.haxx.se/blog/2025/01/29/a-1337-curl-author/)\n- Reverse Engineering\n - [ ] [How To Avoid Malware Rabbitholes](https://www.reddit.com/r/ReverseEngineering/comments/1id52rn/how_to_avoid_malware_rabbitholes/)\n - [ ] [Got bored, reversed the WMI. Made a novel virus that never touches the filesystem](https://www.reddit.com/r/ReverseEngineering/comments/1icgfua/got_bored_reversed_the_wmi_made_a_novel_virus/)\n - [ ] [ScatterBrain: Unmasking the Shadow of PoisonPlug's Obfuscator](https://www.reddit.com/r/ReverseEngineering/comments/1id0io4/scatterbrain_unmasking_the_shadow_of_poisonplugs/)\n - [ ] [CVE-2024-49138 Windows CLFS heap-based buffer overflow analysis](https://www.reddit.com/r/ReverseEngineering/comments/1icpgh4/cve202449138_windows_clfs_heapbased_buffer/)\n - [ ] [Bypass login on app. Company went out of business meaning no new users can access the underwater drone as the servers are offline. Can somebody figure out a bypass hack?](https://www.reddit.com/r/ReverseEngineering/comments/1ich60h/bypass_login_on_app_company_went_out_of_business/)\n- Wallarm\n - [ ] [API Security Is At the Center of OpenAI vs. DeepSeek Allegations](https://lab.wallarm.com/api-security-is-at-the-center-of-openai-vs-deepseek-allegations/)\n- Security Blog | Praetorian\n - [ ] [Introducing Nosey Parker Explorer](https://www.praetorian.com/blog/announcing-nosey-parker-explorer/)\n- 奇客Solidot–传递最新科技情报\n - [ ] [Meta 短暂禁止用户发表任何涉及 Linux 的帖子](https://www.solidot.org/story?sid=80447)\n - [ ] [腾讯游戏《三角洲行动》被发现会修改用户 CPU 调度和性能释放策略](https://www.solidot.org/story?sid=80446)\n - [ ] [心脏病是美国的第一死因](https://www.solidot.org/story?sid=80445)\n - [ ] [公共图书馆能给人们的生活带来积极影响](https://www.solidot.org/story?sid=80444)\n- 锦行科技\n - [ ] [初一 | 新春纳福](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493740&idx=1&sn=3a548b5f7979b125fbee60be48b4bfe1&chksm=979a13c9a0ed9adf401fe111940f754c8f3d4bbb1467acb1bb58f95ea4f559e1018fe247674a&scene=58&subscene=0#rd)\n- 看雪学苑\n - [ ] [2025新春致谢 | 金蛇纳福启新程](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589299&idx=1&sn=5e38768a37484f2f38cd5b8da65a095b&chksm=b18c28f986fba1effd30be735d8e492f5a4fe38d1f279119a9b59d2195d68332dff4b59e864c&scene=58&subscene=0#rd)\n- 安全分析与研究\n - [ ] [夜鹰(NightHawk)C2工具被泄露了？](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490232&idx=1&sn=71a4e338358972fe51261cbc15ddcc02&chksm=902fb590a7583c8670bf284d9d8eb2fb2c3d7608c5cccf3c64a743f4b24808388990b8b5fde4&scene=58&subscene=0#rd)\n- 红日安全\n - [ ] [新春伊始，红日安全启航！愿与您共同筑牢数字防线，共同迈向更安全的明天！🔒🌱](https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851765&idx=1&sn=568da818c7d56ee694372f7ca3d04ddc&chksm=f3e4e9f6c49360e020e5c1183896432b1d52e3c9e96fa7577bb40590a7280b1b5987a521a472&scene=58&subscene=0#rd)\n- 丁爸 情报分析师的工具箱\n - [ ] [【实操】利用Deepseek传承和弘扬传统文化](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148736&idx=1&sn=39a0df253f09d26a6151599d1e8bfb20&chksm=f1af26fac6d8afec1e52db48f994cfe77da1b04b5a1e5aeba491a41f83b5e2b01795b8074105&scene=58&subscene=0#rd)\n - [ ] [【培训】Osint开源情报练习 #002](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148736&idx=2&sn=ebee4c79a769e10968179969c634d83a&chksm=f1af26fac6d8afec43791f1e2d2945b5e030bab5b7a6d0c003eff48d2af4aa4bbae72ead9e03&scene=58&subscene=0#rd)\n- 慢雾科技\n - [ ] [慢雾科技祝大家新春快乐，“巳巳”如意！](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501035&idx=1&sn=59e84e7659d99a54b6501ec2191845d8&chksm=fddeba6ccaa9337aee73dbfd92a4188959c61acfe765c21c5ddde16c0ddbf61b542525b2bbc8&scene=58&subscene=0#rd)\n- M01N Team\n - [ ] [AISS大模型安全社区-2025 Roadmap](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494053&idx=1&sn=6449e25c9c3754c833fdd7ba5435ad70&chksm=c18429b4f6f3a0a25365b3e0d1423573d757fa269aad736ed5aca48ff4b82b278fd73ac03340&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [DeepSeek 的爆红，指出了当下 AI 最大困境](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073010&idx=1&sn=0abd27208a3082b3453f5cb1aa2a1ab7&chksm=7e57d3c449205ad2fcb7960a04020f5000e8f59242b70aada742aaba7fa36482c27141e654d4&scene=58&subscene=0#rd)\n - [ ] [宇树领衔，众多黑科技登台蛇年春晚；奥特曼回应 DeepSeek 爆火；抖音李亮评论雷军、余承东直播被封 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653072999&idx=1&sn=525ce0f5f5685483f05d575f2d13d51a&chksm=7e57d3d149205ac723fd927a03f590113df2731c5a2fb9d3feff18b23c03ac35ce5defcab466&scene=58&subscene=0#rd)\n- 威胁猎人Threat Hunter\n - [ ] [新春快乐，万事如意](https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247498914&idx=1&sn=9db465eba52da2dd54e90fb40b843bf6&chksm=eb12da99dc65538f376b96cbd2513fdc29cf6fe94ebdbc01455265051e5acf045c037033aa2e&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [【卫星图像】金正恩考察朝鲜核物质生产基地和核武器研究所](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559318&idx=1&sn=f93bc65cb4cf2587b134129cbdca5205&chksm=87117d1db066f40b7f81de93f98091616065d1f49efc6490b8269d09dd1a64ad7d16306602e7&scene=58&subscene=0#rd)\n - [ ] [美日韩“抱团”：三国首次会谈聚焦朝鲜核威胁](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559318&idx=2&sn=eef1bccee4db52de82349056e07e8aca&chksm=87117d1db066f40baf7629cdca97055daa3255b4dc91b397b5d2faef1aef45223fe2f07d2f2c&scene=58&subscene=0#rd)\n - [ ] [致情报分析师公众号全体粉丝](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559318&idx=3&sn=be997ee6361433a289ec6c156aca06a7&chksm=87117d1db066f40ba93fbe99241b3d494eac47afa160be5539c9518622515394ac57f674c92c&scene=58&subscene=0#rd)\n- 吾爱破解论坛\n - [ ] [【2025春节】解题领红包活动开始喽，解出就送论坛币！](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141655&idx=1&sn=d21717226e40032625a74a2d00255e23&chksm=bd50a6438a272f55f2e9c7890cabd2ec30b2ec5b946b2dcb7f37c96667f152909cb765fc17fe&scene=58&subscene=0#rd)\n- 网安国际\n - [ ] [InForSec祝网络安全华人学者春节愉快！](https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652317463&idx=1&sn=3b304079c535abddffd4968cd9d1c718&chksm=8bc4ba99bcb3338f81946371b05c0e130ac7d9cc318f370bedd27002d8321e4fea3c011ad947&scene=58&subscene=0#rd)\n- Krypt3ia\n - [ ] [Krypt3ia Daily Cyber Threat Intelligence (CTI) Digest](https://krypt3ia.wordpress.com/2025/01/29/krypt3ia-daily-cyber-threat-intelligence-cti-digest-5/)\n- bellingcat\n - [ ] [M23 Rebels Consolidate Control over Key City in DR Congo](https://www.bellingcat.com/news/2025/01/29/m23-rebels-goma-congo-fighting-clashes-drc-kivu-control/)\n- 复旦白泽战队\n - [ ] [复旦白泽给大家拜年啦！祝大家蛇年大吉，巳巳如意，Paper如潮成果丰！](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247492844&idx=1&sn=a8d82e9664fd92535652abde94911226&chksm=fde86092ca9fe9849b18549438906f871544b38d9a54c8b9d40cfb6fc03b23c01305a77b6ea7&scene=58&subscene=0#rd)\n- 360数字安全\n - [ ] [大年初一 | 祥蛇纳福，“巳巳”如意](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579267&idx=1&sn=b6b08865f0534077a40f3e336e85bd3f&chksm=9f8d268ba8faaf9d3bdee0d2df3318bb871d372d6f84665b079f0fbac45e747586f5fad7522e&scene=58&subscene=0#rd)\n- 迪哥讲事\n - [ ] [寻找隐藏参数的利器](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496975&idx=1&sn=41875f4fcd79a42421188feb25e23889&chksm=e8a5ff6cdfd2767a4c19aa1cb2ccd7bc363b29d6b2c7cc49beb5a3dcf261222c0dec0d6efac2&scene=58&subscene=0#rd)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Hackers are hijacking WordPress sites to push Windows and Mac malware](https://techcrunch.com/2025/01/29/hackers-are-hijacking-wordpress-sites-to-push-windows-and-mac-malware/)\n - [ ] [South Africa’s government-run weather service knocked offline by cyberattack](https://therecord.media/south-african-weather-service-cyberattack)\n - [ ] [FBI seizes Cracked.io, Nulled.to hacking forums in Operation Talent](https://www.bleepingcomputer.com/news/security/fbi-seizes-crackedio-nulledto-hacking-forums-in-operation-talent/)\n - [ ] [Laravel admin package Voyager vulnerable to one-click RCE flaw](https://www.bleepingcomputer.com/news/security/laravel-admin-package-voyager-vulnerable-to-one-click-rce-flaw/)\n - [ ] [Italian regulator asks DeepSeek for information about data collection](https://therecord.media/italian-regulator-deepseek-info-collection)\n - [ ] [Microsoft investigates Microsoft 365 outage affecting users, admins](https://www.bleepingcomputer.com/news/microsoft/microsoft-investigates-microsoft-365-outage-affecting-users-admins/)\n - [ ] [L’IA generativa unifica le interfacce di gestione e migliora la cybersecurity](https://www.securityinfo.it/2025/01/29/lia-generativa-unifica-le-interfacce-di-gestione-e-migliora-la-cybersecurity/)\n - [ ] [Industry groups call on Congress to enact federal data privacy law](https://therecord.media/industry-groups-congress-data-privacy)\n - [ ] [Poland accuses Russia of recruiting Polish citizens online for election meddling](https://therecord.media/poland-accuses-russia-of-recruiting-citizens-online-for-election-meddling)\n - [ ] [FBI seizes domains for Cracked.io, Nulled.to hacking forums](https://www.bleepingcomputer.com/news/security/fbi-seizes-domains-for-crackedio-nulledto-hacking-forums/)\n - [ ] [Whatsup Gold, Observium and Offis vulnerabilities](https://blog.talosintelligence.com/whatsup-gold-and-offis-vulnerabilities-2/)\n - [ ] [Windows 11's Start menu is getting iPhone and Android integration](https://www.bleepingcomputer.com/news/microsoft/windows-11s-start-menu-is-getting-iphone-and-android-integration/)\n - [ ] [UK engineering giant Smiths Group investigating 'unauthorised access' to network](https://therecord.media/smiths-group-uk-cybersecurity-incident)\n - [ ] [Maryland healthcare network forced to shut down IT systems after ransomware attack](https://therecord.media/maryland-healthcare-ransomware-frederick-health)\n - [ ] [Uncover Hidden Browsing Threats: Get a Free Risk Assessment for GenAI, Identity, Web, and SaaS Risks](https://www.bleepingcomputer.com/news/security/uncover-hidden-browsing-threats-get-a-free-risk-assessment-for-genai-identity-web-and-saas-risks/)\n - [ ] [Texas AG warns Kia about sharing driver information with data brokers](https://therecord.media/texas-warns-kia-about-sharing-driver-info-to-data-brokers)\n - [ ] [Hackers exploit critical unpatched flaw in Zyxel CPE devices](https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-unpatched-flaw-in-zyxel-cpe-devices/)\n - [ ] [January Windows 10 preview update force installs new Outlook](https://www.bleepingcomputer.com/news/microsoft/january-windows-10-preview-update-force-installs-new-outlook/)\n - [ ] [Sweden’s elite armed police used helicopter to board suspected sabotage ship](https://therecord.media/sweden-vezhen-ship-armed-police-boarded-helicopter)\n - [ ] [New ICS Vulnerabilities Discovered in Schneider Electric and B&R Automation Systems](https://cyble.com/blog/cisa-release-advisories-for-new-ics-vulnerabilities/)\n - [ ] [Windows 11 KB5050094 update fixes bugs causing audio issues](https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5050094-update-fixes-bugs-causing-audio-issues/)\n - [ ] [Australia’s Health Sector Receives $6.4 Million Cybersecurity Boost with New Threat Information-Sharing Network](https://cyble.com/blog/australia-health-cyber-sharing-network/)\n - [ ] [Threat predictions for industrial enterprises 2025](https://securelist.com/industrial-threat-predictions-2025/115327/)\n - [ ] [3 Major Cyber Attacks in January 2025](https://any.run/cybersecurity-blog/cyber-attacks-january-2025/)\n - [ ] [PlushDaemon: un nuovo gruppo APT cinese colpisce la Corea del Sud. Il report di ESET](https://www.securityinfo.it/2025/01/29/plushdaemon-un-nuovo-gruppo-apt-cinese-colpisce-la-corea-del-sud-il-report-di-eset/)\n - [ ] [CVE-2024-49138 Windows CLFS heap-based buffer overflow analysis – Part 1](https://security.humanativaspa.it/cve-2024-49138-windows-clfs-heap-based-buffer-overflow-analysis-part-1/)\n - [ ] [CVE-2024-49138 Windows CLFS heap-based buffer overflow analysis – Part 2](https://security.humanativaspa.it/cve-2024-49138-windows-clfs-heap-based-buffer-overflow-analysis-part-2/)\n - [ ] [Report: Almost half of state consumer privacy laws fail to protect individuals’ data](https://therecord.media/state-consumer-privacy-laws-failing-to-protect-data)\n - [ ] [MGM agrees to pay $45 million to victims of 2019 data breach and 2023 ransomware attack](https://therecord.media/mgm-agrees-45-million-payment-data-breach-ransomware-victims)\n- Schneier on Security\n - [ ] [ExxonMobil Lobbyist Caught Hacking Climate Activists](https://www.schneier.com/blog/archives/2025/01/exxonmobil-lobbyist-caught-hacking-climate-activists.html)\n- Securityinfo.it\n - [ ] [L’IA generativa unifica le interfacce di gestione e migliora la cybersecurity](https://www.securityinfo.it/2025/01/29/lia-generativa-unifica-le-interfacce-di-gestione-e-migliora-la-cybersecurity/?utm_source=rss&utm_medium=rss&utm_campaign=lia-generativa-unifica-le-interfacce-di-gestione-e-migliora-la-cybersecurity)\n - [ ] [PlushDaemon: un nuovo gruppo APT cinese colpisce la Corea del Sud. Il report di ESET](https://www.securityinfo.it/2025/01/29/plushdaemon-un-nuovo-gruppo-apt-cinese-colpisce-la-corea-del-sud-il-report-di-eset/?utm_source=rss&utm_medium=rss&utm_campaign=plushdaemon-un-nuovo-gruppo-apt-cinese-colpisce-la-corea-del-sud-il-report-di-eset)\n- Your Open Hacker Community\n - [ ] [So You Want To Work in Cyber Security?](https://www.reddit.com/r/HowToHack/comments/1id21do/so_you_want_to_work_in_cyber_security/)\n - [ ] [Im (almost) 16 and want to learn ethical hacking, any advice?](https://www.reddit.com/r/HowToHack/comments/1icxorh/im_almost_16_and_want_to_learn_ethical_hacking/)\n - [ ] [Is there any way I can get a list of hashes?](https://www.reddit.com/r/HowToHack/comments/1id61ki/is_there_any_way_i_can_get_a_list_of_hashes/)\n - [ ] [Any advice to start?](https://www.reddit.com/r/HowToHack/comments/1iczrw1/any_advice_to_start/)\n - [ ] [Trap phone](https://www.reddit.com/r/HowToHack/comments/1id7boc/trap_phone/)\n - [ ] [What is a fraud?](https://www.reddit.com/r/HowToHack/comments/1id20l8/what_is_a_fraud/)\n - [ ] [What should I move onto?](https://www.reddit.com/r/HowToHack/comments/1icpms1/what_should_i_move_onto/)\n - [ ] [How to find dark web site links](https://www.reddit.com/r/HowToHack/comments/1id0bl8/how_to_find_dark_web_site_links/)\n - [ ] [Im turning 17 this year, and i have already started learning ethical hacking since 2020, and i have taken some paid courses and completed those and currently im just training in ctf and htb, i need to learn more in hacking, any recommendations?](https://www.reddit.com/r/HowToHack/comments/1icov3b/im_turning_17_this_year_and_i_have_already/)\n - [ ] [So basically I want to learn how to hack into my old social media where do I start](https://www.reddit.com/r/HowToHack/comments/1icvut2/so_basically_i_want_to_learn_how_to_hack_into_my/)\n - [ ] [noob questions 2: from nmap to metasploit](https://www.reddit.com/r/HowToHack/comments/1icju15/noob_questions_2_from_nmap_to_metasploit/)\n - [ ] [How to crack a phone pass](https://www.reddit.com/r/HowToHack/comments/1icqs7v/how_to_crack_a_phone_pass/)\n - [ ] [Where do i get flipper zero here in india?](https://www.reddit.com/r/HowToHack/comments/1icooi1/where_do_i_get_flipper_zero_here_in_india/)\n - [ ] [Hi I'm 14 and wanna be a ethical hacker and I'm wondering where to start?](https://www.reddit.com/r/HowToHack/comments/1iclkz2/hi_im_14_and_wanna_be_a_ethical_hacker_and_im/)\n - [ ] [Help](https://www.reddit.com/r/HowToHack/comments/1icjzs0/help/)\n - [ ] [What is the best hacking software to send attacks (2025)](https://www.reddit.com/r/HowToHack/comments/1ick00s/what_is_the_best_hacking_software_to_send_attacks/)\n- Blackhat Library: Hacking techniques and research\n - [ ] [my midjourney api didn't make it, but it still works](https://www.reddit.com/r/blackhat/comments/1id406q/my_midjourney_api_didnt_make_it_but_it_still_works/)\n - [ ] [LinkedIn Accounts provider?](https://www.reddit.com/r/blackhat/comments/1icha04/linkedin_accounts_provider/)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [From PowerShell to a Python Obfuscation Race!, (Wed, Jan 29th)](https://isc.sans.edu/diary/rss/31634)\n - [ ] [ISC Stormcast For Wednesday, January 29th, 2025 https://isc.sans.edu/podcastdetail/9300, (Wed, Jan 29th)](https://isc.sans.edu/diary/rss/31632)\n- Social Engineering\n - [ ] [When someone tells a story, what kind of questions can you ask which shows your engaged?](https://www.reddit.com/r/SocialEngineering/comments/1id7wix/when_someone_tells_a_story_what_kind_of_questions/)\n- Deep Web\n - [ ] [Onion link lisk shutdown](https://www.reddit.com/r/deepweb/comments/1icjy0g/onion_link_lisk_shutdown/)\n - [ ] [experienced/long-term deep web users, what kind of life do y’all live?](https://www.reddit.com/r/deepweb/comments/1icqrs3/experiencedlongterm_deep_web_users_what_kind_of/)\n - [ ] [Hackers](https://www.reddit.com/r/deepweb/comments/1icl028/hackers/)\n- Security Affairs\n - [ ] [U.S. CISA adds Apple products’ flaw to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/173622/hacking/us-cisa-adds-apple-products-flaw-known-exploited-vulnerabilities-catalog.html)\n - [ ] [Aquabot variant v3 targets Mitel SIP phones](https://securityaffairs.com/173607/breaking-news/aquabot-variant-v3-targets-mitel-sip-phones.html)\n - [ ] [Critical remote code execution bug found in Cacti framework](https://securityaffairs.com/173597/security/critical-rce-cacti-framework.html)\n - [ ] [Attackers actively exploit a critical zero-day in Zyxel CPE Series devices](https://securityaffairs.com/173589/hacking/zyxel-cpe-series-devices-cve-2024-40891-exploited.html)\n - [ ] [Attackers exploit SimpleHelp RMM Software flaws for initial access](https://securityaffairs.com/173578/security/attackers-exploit-simplehelp-rmm-software-flaws.html)\n- The Hacker News\n - [ ] [Lazarus Group Uses React-Based Admin Panel to Control Global Cyber Attacks](https://thehackernews.com/2025/01/lazarus-group-uses-react-based-admin.html)\n - [ ] [AI in Cybersecurity: What's Effective and What’s Not – Insights from 200 Experts](https://thehackernews.com/2025/01/ai-in-cybersecurity-whats-effective-and.html)\n - [ ] [New SLAP & FLOP Attacks Expose Apple M-Series Chips to Speculative Execution Exploits](https://thehackernews.com/2025/01/new-slap-flop-attacks-expose-apple-m.html)\n - [ ] [How Interlock Ransomware Infects Healthcare Organizations](https://thehackernews.com/2025/01/how-interlock-ransomware-infects.html)\n - [ ] [Critical Cacti Security Flaw (CVE-2025-22604) Enables Remote Code Execution](https://thehackernews.com/2025/01/critical-cacti-security-flaw-cve-2025.html)\n - [ ] [UAC-0063 Expands Cyber Attacks to European Embassies Using Stolen Documents](https://thehackernews.com/2025/01/uac-0063-expands-cyber-attacks-to.html)\n - [ ] [Broadcom Warns of High-Severity SQL Injection Flaw in VMware Avi Load Balancer](https://thehackernews.com/2025/01/broadcom-warns-of-high-severity-sql.html)\n - [ ] [Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability](https://thehackernews.com/2025/01/zyxel-cpe-devices-face-active.html)\n- Technical Information Security Content & Discussion\n - [ ] [CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI)](https://www.reddit.com/r/netsec/comments/1id0ccq/cve202446507_yeti_platform_serverside_template/)\n - [ ] [CVE-2024-49138 Windows CLFS heap-based buffer overflow analysis](https://www.reddit.com/r/netsec/comments/1icpgd8/cve202449138_windows_clfs_heapbased_buffer/)\n- Computer Forensics\n - [ ] [Richard Green's Updated Report for Karen Read Trial 2:27 Hos long to die](https://www.reddit.com/r/computerforensics/comments/1iczkut/richard_greens_updated_report_for_karen_read/)\n - [ ] [ASHATA Mini Body Camera](https://www.reddit.com/r/computerforensics/comments/1id7w7p/ashata_mini_body_camera/)\n - [ ] [BCFE / Digital Forensics Career Entry Question](https://www.reddit.com/r/computerforensics/comments/1icw0q0/bcfe_digital_forensics_career_entry_question/)\n - [ ] [BREW Help](https://www.reddit.com/r/computerforensics/comments/1iclcjn/brew_help/)\n - [ ] [FBI didn’t need to crack Tor or Bitcoin to catch Ulbricht—his old forum posts did the job. If you want to see how small OPSEC mistakes can be fatal, we broke it all down](https://www.reddit.com/r/computerforensics/comments/1icpd7d/fbi_didnt_need_to_crack_tor_or_bitcoin_to_catch/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [So You Want To Work in Cyber Security?](https://www.reddit.com/r/netsecstudents/comments/1iczqhp/so_you_want_to_work_in_cyber_security/)\n - [ ] [How to get into Soc](https://www.reddit.com/r/netsecstudents/comments/1icxb62/how_to_get_into_soc/)\n- Graham Cluley\n - [ ] [Ex-worker arrested after ‘shutdown’ of British Museum computer systems](https://www.bitdefender.com/en-us/blog/hotforsecurity/ex-worker-arrested-after-shutdown-of-british-museum-computer-systems)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #732: Multiple Identity Provider Disorder](https://www.hecfblog.com/2025/01/daily-blog-732-multiple-identity.html)\n- Security Weekly Podcast Network (Audio)\n - [ ] [AI in 2025: The Shifting Regulatory Landscape For Artificial Intelligence - BSW #380](http://sites.libsyn.com/18678/ai-in-2025-the-shifting-regulatory-landscape-for-artificial-intelligence-bsw-380)\n- Daniel Miessler\n - [ ] [AI Novels Are Coming](https://danielmiessler.com/blog/ai-novels)\n- Dark Space Blogspot\n - [ ] [Storie Di Collassi Di Fondi, Banche e Società (Trading e Investimenti)](http://darkwhite666.blogspot.com/2025/01/storie-di-collassi-di-fondi-banche-e.html)\n"}, "f0b1848824d586bd6beb799d88837259782d25ea": {"t": 1785772242.5400515, "n": 52870, "h": "87e2ec07ba952618", "c": "# 每日安全资讯（2025-01-30）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-01-29 Review](http://www.sec-wiki.com/?2025-01-29)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [OpenPanel 0.3.4 Command Injection](https://cxsecurity.com/issue/WLB-2025010034)\n - [ ] [MySchool System - Multiple Vulnerabilities](https://cxsecurity.com/issue/WLB-2025010033)\n - [ ] [NEXT-EMP v1.0-Copyright © 2024. All rights reserved. File Upload-FU and Remote Code Execution-RCE](https://cxsecurity.com/issue/WLB-2025010032)\n- Trustwave Blog\n - [ ] [Inside APT34 (OilRig): Tools, Techniques, and Global Cyber Threats](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/inside-apt34-oilrig-tools-techniques-and-global-cyber-threats/)\n- Recent Commits to cve:main\n - [ ] [Update Wed Jan 29 20:28:19 UTC 2025](https://github.com/trickest/cve/commit/2a9a6c5e8dfdef652b3351b8c7c20cddc3b7958c)\n - [ ] [Update Wed Jan 29 12:26:44 UTC 2025](https://github.com/trickest/cve/commit/023d47466c3dfcf89301b51bd1f75e5ac6af45d2)\n - [ ] [Update Wed Jan 29 04:20:44 UTC 2025](https://github.com/trickest/cve/commit/9bbcd187c35f8f8562d789c9c6a09501e13902b6)\n- Security Boulevard\n - [ ] [Alibaba’s Qwen 2.5-Max: The AI Marathoner Outpacing DeepSeek and Catching OpenAI’s Shadow](https://securityboulevard.com/2025/01/alibabas-qwen-2-5-max-the-ai-marathoner-outpacing-deepseek-and-catching-openais-shadow/)\n - [ ] [Introducing WAF Rule Tester: Test with Confidence, Deploy without Fear | Impart Security](https://securityboulevard.com/2025/01/introducing-waf-rule-tester-test-with-confidence-deploy-without-fear-impart-security/)\n - [ ] [DEF CON 32 – Tough Adversary Don’t Blame Sun Tzu](https://securityboulevard.com/2025/01/def-con-32-tough-adversary-dont-blame-sun-tzu/)\n - [ ] [The OWASP NHI Top 10 and AI risk: What you need to know](https://securityboulevard.com/2025/01/the-owasp-nhi-top-10-and-ai-risk-what-you-need-to-know/)\n - [ ] [API Security Is At the Center of OpenAI vs. DeepSeek Allegations](https://securityboulevard.com/2025/01/api-security-is-at-the-center-of-openai-vs-deepseek-allegations/)\n - [ ] [Randall Munroe’s XKCD ‘Muons’](https://securityboulevard.com/2025/01/randall-munroes-xkcd-muons/)\n - [ ] [SLAP/FLOP: Apple Silicon’s ‘Son of Spectre’ Critical Flaws](https://securityboulevard.com/2025/01/slap-flop-apple-silicon-richixbw/)\n - [ ] [Our Digital Footprints are Breadcrumbs for Mapping our Personal Behavior](https://securityboulevard.com/2025/01/our-digital-footprints-are-breadcrumbs-for-mapping-our-personal-behavior/)\n - [ ] [How to Find Old Accounts for Deletion](https://securityboulevard.com/2025/01/how-to-find-old-accounts-for-deletion/)\n - [ ] [Codefinger Ransomware: Detection and Mitigation Using MixMode](https://securityboulevard.com/2025/01/codefinger-ransomware-detection-and-mitigation-using-mixmode/)\n- Der Flounder\n - [ ] [Managing Apple Intelligence features on macOS Sequoia 15.3](https://derflounder.wordpress.com/2025/01/29/managing-apple-intelligence-features-on-macos-sequoia-15-3/)\n- InfoSec Write-ups - Medium\n - [ ] [5 Things You Should Understand Before Jumping into Bug Bounty](https://infosecwriteups.com/5-things-you-should-understand-before-jumping-into-bug-bounty-813cd960c6bc?source=rss----7b722bfd1b8d---4)\n - [ ] [Exploiting XSS To Steal Cookies](https://infosecwriteups.com/exploiting-xss-to-steal-cookies-f0aebdcd815b?source=rss----7b722bfd1b8d---4)\n - [ ] [How I Found a Ticket Booking Bug That Allowed Me to Travel Almost for Free in TNSTC](https://infosecwriteups.com/how-i-found-a-ticket-booking-bug-that-allowed-me-to-travel-almost-for-free-in-tnstc-2c7aa23aebf6?source=rss----7b722bfd1b8d---4)\n- Hacking Articles\n - [ ] [Credential Dumping: AD User Comment](https://www.hackingarticles.in/credential-dumping-ad-user-comment/)\n- Insinuator.net\n - [ ] [Jigsaw RDPuzzle: Piecing Attacker Actions Together](https://insinuator.net/2025/01/jigsaw-rdpuzzle/)\n- Google Online Security Blog\n - [ ] [How we kept the Google Play & Android app ecosystems safe in 2024](http://security.googleblog.com/2025/01/how-we-kept-google-play-android-app-ecosystem-safe-2024.html)\n - [ ] [How we estimate the risk from prompt injection attacks on AI systems](http://security.googleblog.com/2025/01/how-we-estimate-risk-from-prompt.html)\n- Doonsec's feed\n - [ ] [青萍安全祝大家新年快乐！！！](https://mp.weixin.qq.com/s?__biz=MzkxMzY0MzAxMw==&mid=2247487278&idx=1&sn=78ec559025c718883b9f1b1f674ba5f5)\n - [ ] [仅此一次，春节七折嗷！](https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486501&idx=1&sn=51fe604005374bcbfff2b9f235d97286)\n - [ ] [[收费公开课] 前后端分离渗透和三个突破口](https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486501&idx=2&sn=303abdda447ab10baa18016a0ae9460a)\n - [ ] [原创工具|Venom-JWT渗透工具 - 针对JWT漏洞和密钥爆破服务渗透测试](https://mp.weixin.qq.com/s?__biz=Mzk0ODc1MjYyNA==&mid=2247483866&idx=1&sn=b4a7b1a90b8624e68c8e4106eccd2de9)\n - [ ] [大年初一，巳巳如意！](https://mp.weixin.qq.com/s?__biz=MzkzMjQ4NTQwNw==&mid=2247483835&idx=1&sn=b593aa19e5825e5a2c3f5e1fd7546734)\n - [ ] [[注意保密] 新年红包雨：领取 1888$ 年度极致福利](https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506610&idx=1&sn=891e78f2c8c413caa518b343114d9503)\n - [ ] [黑客组织Handala宣称攻破以色列国安系统 4TB机密数据遭泄露](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494609&idx=1&sn=10c34cea93492cfefbb71eea5f87901a)\n - [ ] [Urkc安全红包封面上线啦！](https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247487269&idx=1&sn=0d4c70352cf47f5360f202a395b166b6)\n - [ ] [【实操】利用Deepseek传承和弘扬传统文化](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148736&idx=1&sn=39a0df253f09d26a6151599d1e8bfb20)\n - [ ] [【培训】Osint开源情报练习 #002](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148736&idx=2&sn=ebee4c79a769e10968179969c634d83a)\n - [ ] [AISS大模型安全社区-2025 Roadmap](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494053&idx=1&sn=6449e25c9c3754c833fdd7ba5435ad70)\n - [ ] [2025新春致谢 | 金蛇纳福启新程](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589299&idx=1&sn=5e38768a37484f2f38cd5b8da65a095b)\n - [ ] [Windows 11 24H2 上的进程镂空技术](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247486790&idx=1&sn=c0d73c1ebaa8ed6fd5ec7a87a43b25eb)\n - [ ] [德国数据保护机构《标准数据保护模式》中译文](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247506191&idx=1&sn=5c306df3d480ebc5a37d4e207d432f24)\n - [ ] [新年零食大礼包抽奖开奖](https://mp.weixin.qq.com/s?__biz=Mzg4NDg2NTM3NQ==&mid=2247484712&idx=1&sn=fd70a0465dbf9e30c615379a6bdda89d)\n - [ ] [【卫星图像】金正恩考察朝鲜核物质生产基地和核武器研究所](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559318&idx=1&sn=f93bc65cb4cf2587b134129cbdca5205)\n - [ ] [美日韩“抱团”：三国首次会谈聚焦朝鲜核威胁](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559318&idx=2&sn=eef1bccee4db52de82349056e07e8aca)\n - [ ] [致情报分析师公众号全体粉丝](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559318&idx=3&sn=be997ee6361433a289ec6c156aca06a7)\n - [ ] [Ghosten Player：全平台视频播放器，云盘/本地/IPTV资源一网打尽，支持TV和刮削！](https://mp.weixin.qq.com/s?__biz=MzA4MjkzMTcxMg==&mid=2449046775&idx=1&sn=403d11271cef923ea84dfc9005eed22e)\n - [ ] [“巳巳”如意｜蛇年大吉u200b](https://mp.weixin.qq.com/s?__biz=MzU4MTg1NzAzMA==&mid=2247490620&idx=1&sn=48ea11f22a243fbf8b403f5347af6b4b)\n - [ ] [收藏 | dotNet安全矩阵 2024 年度安全防御绕过阶段文章和工具汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498553&idx=1&sn=1d8935d674697bc89a84b1b07dd7573a)\n - [ ] [.NET 内网攻防实战电子报刊](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498553&idx=2&sn=2eabd584fcc38d4a3de34cbc21b247b8)\n - [ ] [收藏 | dotNet安全矩阵 2024 年度外网入口打点阶段文章和工具汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498553&idx=3&sn=11f8acaa352ccc07f18420479c442a8b)\n - [ ] [【新春福利免费开放】【20250129更新】GrayLog开源日志管理平台技术文章合集【共80篇】](https://mp.weixin.qq.com/s?__biz=MzU2MjU1OTE0MA==&mid=2247499654&idx=1&sn=1717caf72330209a0d7860dac066d9aa)\n - [ ] [ISO 45001: 2018 标准详解与实施（10）6.1.2 危险源辨识及风险和机遇的评价](https://mp.weixin.qq.com/s?__biz=MzA5OTEyNzc1Nw==&mid=2247486046&idx=1&sn=e0752fe57f13f49404b464a8a5d23bf8)\n - [ ] [中亚新位置：美国到底是“机遇”还是“陷阱”？](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505009&idx=1&sn=a675523c007664b3ded75ff213872283)\n - [ ] [曼德海峡危机：胡塞武装如何搅动全球贸易与地缘政治的“一池春水”？](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505009&idx=2&sn=30bc5ffc5afc9a5458d174a81224a804)\n - [ ] [DeepSeek遭受美国大规模黑客DDOS攻击！该如何应对？](https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247483894&idx=1&sn=a0a2746ea96e1c4da9caa325f9851abd)\n - [ ] [蛇年快乐！](https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538527&idx=1&sn=a6a982145ee51f2707a9b7d2914c057c)\n - [ ] [花指令——新春快乐版](https://mp.weixin.qq.com/s?__biz=MzkyNTYwOTMyNA==&mid=2247485009&idx=1&sn=71e8f9c7d9658e891eb9aa14140fac0c)\n - [ ] [我让DeepSeek锐评下网络安全行业现状，它的回答......](https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247486228&idx=1&sn=710163f3aca52010a4b552bf987a7b69)\n - [ ] [复旦白泽给大家拜年啦！祝大家蛇年大吉，巳巳如意，Paper如潮成果丰！](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247492844&idx=1&sn=a8d82e9664fd92535652abde94911226)\n - [ ] [记一次SRC利用github搜索拿下中危漏洞](https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547532&idx=1&sn=a25d3179451f39184a2c2306e222d2f5)\n - [ ] [新年快乐 | 渊亭科技祝您巳巳如意，蛇年大吉！](https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660190405&idx=1&sn=b33a770adf5ed142dc3ac8c2afba90ef)\n - [ ] [揭露俄罗斯APT新手段：Gamaredon首次使用安卓间谍软件骨骼间谍（BoneSpy）和伪装侦察（PlainGnome）](https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485657&idx=1&sn=1c6e5658064e3bb16435047e39a9f311)\n - [ ] [中医学论文大纲完善与落实指南：让你的论文架构更清晰！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=1&sn=592a8a23a41a09fc0c7f61488411d5d8)\n - [ ] [中医学论文搜集文献攻略：10分钟搞定一个月找不全的经典文献库！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=2&sn=9e44f435954053a0a3863c6ca466f2c8)\n - [ ] [终于搞懂了！新手如何玩转新闻学论文的文献综述写作攻略，快速上手！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=3&sn=86c1867c8e4f63023a0328e127fc79fb)\n - [ ] [终于掌握水产养殖学论文搜集文献秘诀！完整指南公开！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=4&sn=050db58f55d66a155a674ae62fbc198d)\n - [ ] [终于知道日语论文搜集文献这门道，超实用版硬核干货！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=5&sn=1dd216f434bb52375a8b6847836147b5)\n - [ ] [重磅揭秘：内行人才懂的林业技术论文文献综述写作高阶指南！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=6&sn=d4792364daac44d36e9ee0fe60f8a44a)\n - [ ] [专家带路：农业工程论文选题高分技巧，快速锁定黄金选题！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=7&sn=f8f67fececd526ee35399b356da849e1)\n - [ ] [专家级企业管理论文搜集文献内部秘籍：外企高级经理人都在偷学的全流程技巧。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493256&idx=8&sn=5ff567d0085a3894e4c0033cd8301bb9)\n - [ ] [红队和 Web 黑盒审计的侦察脚本](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527357&idx=1&sn=c83b93750bea91d42a144b5a5739a263)\n - [ ] [滥用 Windows fork API 和 OneDrive.exe 进程来注入恶意 shellcode](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527357&idx=2&sn=cb567e9fa5f939b386410eaa2208192b)\n - [ ] [零日漏洞正在推动 Fortinet 防火墙攻击（CVE-2024-55591 已确认）](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527357&idx=3&sn=a9547ba6b29ff579585ca08ae6e20652)\n - [ ] [好的伴侣可以减少一半人间疾苦，合适的工作更是这样](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247488193&idx=1&sn=98fb524ba32bd4acb817ce28aedc8a4d)\n - [ ] [夜鹰(NightHawk)C2工具被泄露了？](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490232&idx=1&sn=71a4e338358972fe51261cbc15ddcc02)\n - [ ] [万象更新 共启新程｜四叶草安全祝您鸿运当头](https://mp.weixin.qq.com/s?__biz=MjM5MTI2NDQzNg==&mid=2654552292&idx=1&sn=94bfca6ee6e6469f09475331d9ec1dff)\n - [ ] [新春伊始，红日安全启航！愿与您共同筑牢数字防线，共同迈向更安全的明天！🔒🌱](https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851765&idx=1&sn=568da818c7d56ee694372f7ca3d04ddc)\n - [ ] [暗网情报5则：VPN权限出售-CNN马来西亚遭勒索](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507140&idx=1&sn=39e2cd4ca4a8b2405576bcc343bea2c6)\n - [ ] [5th域安全微讯早报【20250129】025期](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507140&idx=2&sn=e324fe0e8dc2c445cc103295d565424b)\n - [ ] [有人急了。。。DeepSeek。。。线上服务受到大规模恶意攻击。。。](https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247504835&idx=1&sn=145feae85263084b1b6d5bd7b36c7877)\n - [ ] [新型“Sneaky 2FA”钓鱼工具包瞄准微软365账户，绕过双重认证（2FA）窃取凭证](https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900162&idx=1&sn=f1cd9351fa6107901ed7fa81fb279643)\n - [ ] [大年初一 | 开源网安祝福大家事业蒸蒸日上，生活阖家美满](https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247514013&idx=1&sn=5833bcc742d0d3e15ef6b74df78cc868)\n - [ ] [碳泽信息祝您新春快乐，巳巳如意！](https://mp.weixin.qq.com/s?__biz=Mzk0ODI4MDI4Nw==&mid=2247494627&idx=1&sn=ffc67d2a6efe5b59293eda6175d3226f)\n - [ ] [【2025春节】解题领红包活动开始喽，解出就送论坛币！](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141655&idx=1&sn=d21717226e40032625a74a2d00255e23)\n - [ ] [巳巳如意 | 蛇年大吉](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313207&idx=1&sn=6fbe79faad8cf2aedae18f3523b11c63)\n - [ ] [《信息安全研究》恭祝大家新春快乐！](https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664992974&idx=1&sn=9cd2cb9e2b233b74a40604ea67942fa7)\n - [ ] [大年初一丨安天智甲给您拜年了](https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650209897&idx=1&sn=6bfd5ddbc7574bf32992f11997f69d3d)\n - [ ] [大年初一，拜大年](https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650464736&idx=1&sn=bc114265d19b16cd3c45f4cc8b871012)\n - [ ] [联想全球安全实验室恭祝大家新春快乐！](https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247491548&idx=1&sn=73c8dbc0a4131745e3e798eaa6404d16)\n - [ ] [大年初一 蛇来运转](https://mp.weixin.qq.com/s?__biz=Mzg2MTU5ODQ2Mg==&mid=2247507173&idx=1&sn=3b4749529f6bca97d5553cb65fdec622)\n - [ ] [数字取证之证据识别u200c](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264820&idx=1&sn=c47fa7a58ac994934f15782210c4718b)\n - [ ] [网安原创文章推荐【2025/1/28】](https://mp.weixin.qq.com/s?__biz=MzAxNzg3NzMyNQ==&mid=2247489519&idx=1&sn=b63ac6606b1606adc9ec3fbf28433922)\n - [ ] [大年初一到，财来福星照！新的一年，祝大家巳巳如意，蛇年行大运。](https://mp.weixin.qq.com/s?__biz=MzkyNDUxNTQ2Mw==&mid=2247485819&idx=1&sn=a9119ee1b24d286f56cda649c53d5870)\n - [ ] [大年初一 | 祥蛇纳福，“巳巳”如意](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579267&idx=1&sn=b6b08865f0534077a40f3e336e85bd3f)\n - [ ] [SQLite数据库注入攻击技术研究](https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037456&idx=1&sn=26b186946b56da6148be861444022c93)\n - [ ] [春节](https://mp.weixin.qq.com/s?__biz=MzUyMjAyODU1NA==&mid=2247491946&idx=1&sn=960238aa34a57daeb943121fa63418f3)\n - [ ] [新年好运签 | 统一云防御：统一防护管理，筑牢网络边界](https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870831&idx=1&sn=f2dffa473f8078bccfce2ac7f3814c1d)\n - [ ] [春节|安赛祝大家新年快乐！](https://mp.weixin.qq.com/s?__biz=MzI3MzA2MTk3Mw==&mid=2657788240&idx=1&sn=8d0ec3ec282dc8d43159d7636218278b)\n - [ ] [新春快乐｜安势信息祝大家蛇年大吉！](https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491507&idx=1&sn=51f24fc4ce62cb89254184ab41c5d934)\n - [ ] [初一｜身体健康，万事如意！](https://mp.weixin.qq.com/s?__biz=MzU1MzE3Njg2Mw==&mid=2247510392&idx=1&sn=23b6d35cb71d82c23d562ba42b1e0694)\n - [ ] [2024年公众号优质文章汇总](https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485613&idx=1&sn=2ea4aed4c2413869c00fb53f76d1fae5)\n - [ ] [正月初一 | 一帆风顺 元启新程](https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506080&idx=1&sn=de989f72a1c24a6013bc32834fd66539)\n - [ ] [捷普焕新领先产品全系列](https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506080&idx=2&sn=ddbcbdccb66e8f94303cf95a7dd9420e)\n - [ ] [【焕新领先】 捷普态势感知系统](https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506080&idx=3&sn=5e87f69e3e89d5d4d0e72e5e973c9f0a)\n - [ ] [粤港澳大湾区网络安全协会祝您新年快乐！](https://mp.weixin.qq.com/s?__biz=MzkwOTUyODE5Mg==&mid=2247485770&idx=1&sn=8c67f414c1d5363770af6d0c2d909922)\n - [ ] [关于网络安全指标的思考](https://mp.weixin.qq.com/s?__biz=MzkwOTUyODE5Mg==&mid=2247485770&idx=2&sn=83e45c1783b1612d8163d9544c9f6b47)\n - [ ] [众安天下祝您新春快乐、蛇年大吉！](https://mp.weixin.qq.com/s?__biz=MzIyOTUzODY5Ng==&mid=2247504322&idx=1&sn=5e6878918dcc0b4c304704e423a7a2c3)\n - [ ] [天工实验室祝大家蛇年大吉，万事如意！](https://mp.weixin.qq.com/s?__biz=Mzk0OTU2ODQ4Mw==&mid=2247486754&idx=1&sn=62aa67a56b66db75099aae8ea64ceef9)\n - [ ] [渗透测试 | 某学校授权渗透测试评估](https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487347&idx=1&sn=ecfde99bcc6735f0141a9b575a90c556)\n - [ ] [有度安全给大家拜年啦！灵蛇启新元，初一福泽绵](https://mp.weixin.qq.com/s?__biz=Mzg3NTEyMzU4OA==&mid=2247513467&idx=1&sn=c5f15ab42712064a3075e44a9bc4d911)\n - [ ] [元春始风华，万象启新朝。深圳市网安计算机网络安全培训中心恭祝您福启新岁，万事顺遂。](https://mp.weixin.qq.com/s?__biz=Mzg3MDYzMjAyNA==&mid=2247486206&idx=1&sn=c7d7d28fb1d2de4e50c094c384bd700e)\n - [ ] [大年初一：福满新岁](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624760&idx=1&sn=7d6fdaf5776b133489f8cbfd0cf87135)\n - [ ] [新春快乐，万事如意](https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247498914&idx=1&sn=9db465eba52da2dd54e90fb40b843bf6)\n - [ ] [拜年啦：恭贺新禧，蛇年大吉！](https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247540150&idx=1&sn=c11b523ae88eb1cdd1b00c2e2e1e7f4b)\n - [ ] [安领可信给您拜年啦！](https://mp.weixin.qq.com/s?__biz=MzUxNjUwNDU4OQ==&mid=2247483953&idx=1&sn=661f7bc51d8046599be7e71f46852275)\n - [ ] [大年初一 汉华信安给您拜年了](https://mp.weixin.qq.com/s?__biz=Mzg5ODYyMTI2NA==&mid=2247484582&idx=1&sn=e4a8c83e259a25f4a962bab36d0c0afd)\n - [ ] [正月初一拜大年！亚信安全祝大家蛇年顺遂，蛇蛇如意](https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620958&idx=1&sn=1a539d599c8fa0167941d6bccc946ec9)\n - [ ] [大年初一 一帆风顺](https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135288&idx=1&sn=c8bf1121cab73be169ecaa119f5d9d5b)\n - [ ] [慢雾科技祝大家新春快乐，“巳巳”如意！](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501035&idx=1&sn=59e84e7659d99a54b6501ec2191845d8)\n - [ ] [新年快乐 | 渊亭防务祝您巳巳如意，蛇年大吉！](https://mp.weixin.qq.com/s?__biz=Mzg2NTYyODgyNg==&mid=2247504626&idx=1&sn=947b971cf92a530af5d4af7a9f40378b)\n - [ ] [初一 | 鞭炮声声辞旧岁，新衣新貌贺新年！](https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497078&idx=1&sn=93f0e2203558c5d2186205dae47e4ab0)\n - [ ] [墨云科技 ｜ 金蛇献瑞，谨贺新年](https://mp.weixin.qq.com/s?__biz=MzU5ODE2NDA3NA==&mid=2247496753&idx=1&sn=101bd162fb27a6b210c95d36ff4756c7)\n - [ ] [磐石安科技｜恭贺蛇年大吉！](https://mp.weixin.qq.com/s?__biz=MzkwNDI0MjkzOA==&mid=2247485840&idx=1&sn=e5045c1d16e658ef82f838d19add009a)\n - [ ] [正月初一 | 安泰如意](https://mp.weixin.qq.com/s?__biz=Mzg2NDU3Mzc5OA==&mid=2247489779&idx=1&sn=76fc6dae86e231c41efea62f0565ac21)\n - [ ] [大年初一 | 金蛇献瑞迎新春，岁月悠悠送吉祥](https://mp.weixin.qq.com/s?__biz=Mzk0MDQ5MTQ4NA==&mid=2247487427&idx=1&sn=eeef20b9473215312b0e39159d148a5b)\n - [ ] [拜年啦](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553215&idx=1&sn=9e310bac7fb47a94b16a9da14e538d01)\n - [ ] [大年初一丨新春启航，万事如意](https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650277649&idx=1&sn=f1b0ac4ba8a25aeb6f61b973093d555f)\n - [ ] [春节｜瑞蛇迎春，共赴新程](https://mp.weixin.qq.com/s?__biz=MzkxODczNjA4NQ==&mid=2247494021&idx=1&sn=55cd58add868195168feda1b08a0a2f1)\n - [ ] [初一 | 大年初一 万事胜意](https://mp.weixin.qq.com/s?__biz=MzU1OTc2MzE2Mg==&mid=2247489329&idx=1&sn=d001254620cb5ccdcf51cb5a9a73670e)\n - [ ] [祝大家新年蛇年大吉，健康喜乐](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494577&idx=1&sn=4d5a9964a63a52fe6cdd3febc7abd292)\n - [ ] [苹果修补了 2025 年首个被利用的 iOS 0day(CVE-2025-24085)](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494577&idx=2&sn=2a3b9a9481760f2c54d584ed72cf307c)\n - [ ] [春节 | 灵蛇迎春，福运满屋](https://mp.weixin.qq.com/s?__biz=MzU3MDA0MTE2Mg==&mid=2247492564&idx=1&sn=44253e74476868913d0de1065716dfad)\n - [ ] [梅苑安全携带小猫祝大家蛇年快乐](https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484530&idx=1&sn=8610d601d8d5bd24528dc1545e83c1a5)\n - [ ] [红队移动端评估测试工具](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489192&idx=1&sn=f92f78566f73bdbcee373ac7834d1396)\n - [ ] [不足挂齿](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489192&idx=2&sn=4597cbd9bbf1d814a4d86c26bfb77eed)\n - [ ] [范渊新年献词：以韧性回应时代，以AI引领未来](https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650624573&idx=1&sn=bde5fc48268dbc7566e0b36ca5ea68e8)\n - [ ] [【初一】新岁启封，同赴新程](https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650624573&idx=2&sn=c4581b248078cb6ff6f9d465754da975)\n - [ ] [像 C2 一样使用 VSCode - 红队风格](https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504777&idx=1&sn=6a7bb7db4890f89678a69854ecbce461)\n - [ ] [InForSec祝网络安全华人学者春节愉快！](https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652317463&idx=1&sn=3b304079c535abddffd4968cd9d1c718)\n - [ ] [蛇年大吉](https://mp.weixin.qq.com/s?__biz=MzI2Mzc4ODc1NQ==&mid=2247489583&idx=1&sn=e98d28ca40b57b5b32aac53edfeb1946)\n - [ ] [【贺蛇年】初一纳福 网安启途](https://mp.weixin.qq.com/s?__biz=MzAxMjE1MDY0NA==&mid=2247508841&idx=1&sn=8c7d1aeb8c2b6827bcde2b323e04027e)\n - [ ] [别搞](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496843&idx=1&sn=12979bae2be8a2d90496e7c79e8bb831)\n - [ ] [国自然中标真不难！十年评审专家1v1精修本子，中标率提升58%](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496843&idx=2&sn=d9858f7695b5db1be02e2d9887ab97d1)\n - [ ] [【大年初一】喜迎蛇年 瑞气呈祥](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649249641&idx=1&sn=7a41d8aceeeb227acfb93b534968da9c)\n - [ ] [迎新年，启新篇｜任子行祝您新春快乐、蛇年行大运](https://mp.weixin.qq.com/s?__biz=MzI0NjAyMjU4MA==&mid=2649595765&idx=1&sn=fd65317a7df2cda280b10b05734a7e1d)\n - [ ] [新年伊始，华为星河AI融合SASE解决方案祝您“SASE”过群雄，一鸣惊人！](https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505875&idx=1&sn=d3e7db45fae8f8b023d025df3a110d88)\n - [ ] [初一 | 新春纳福](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493740&idx=1&sn=3a548b5f7979b125fbee60be48b4bfe1)\n - [ ] [【2025】新年快乐](https://mp.weixin.qq.com/s?__biz=MzUwOTc3MTQyNg==&mid=2247491386&idx=1&sn=81b68fc009fb3bb698df452f0490aebb)\n - [ ] [分享图片](https://mp.weixin.qq.com/s?__biz=MzI3Njc1MjcxMg==&mid=2247494394&idx=1&sn=46b470b30f34d28b91b7446c0432ba7f)\n - [ ] [巳巳如意 生生不息丨云天安全祝您新春快乐](https://mp.weixin.qq.com/s?__biz=MzI2NDYzNjY0Mg==&mid=2247501216&idx=1&sn=1bb93c2c50c51f4ba008c8c002e163e1)\n - [ ] [Mac下破解激活JetBrains产品](https://mp.weixin.qq.com/s?__biz=Mzg5OTgzMzA1OA==&mid=2247483872&idx=1&sn=8fa59f27c9706af7c69ee722c4016785)\n - [ ] [正月初一｜金蛇迎春 巳巳如意](https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247506758&idx=1&sn=b9e384ec8963ccca8fe2773ebbb9023c)\n - [ ] [魔方安全祝你蛇来运转，前程螣螣](https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649292206&idx=1&sn=3f87066febd3b789c0e7db2baf1fd1f9)\n - [ ] [灵蛇启新元 初一福泽绵](https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247520421&idx=1&sn=9d1cb6d9e4d36868892fdffebe8001f7)\n - [ ] [瑞蛇迎春，共筑网安新未来！](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247635828&idx=1&sn=dc1ea39348bc6420d3d24e3cbd1814d2)\n - [ ] [大年初一|蛇年顺遂，事事如意！](https://mp.weixin.qq.com/s?__biz=MzU2NzUxMTM0Nw==&mid=2247513467&idx=1&sn=976f6d8db01ae07c788cd029211a3ee6)\n - [ ] [山石网科·AI汇东方｜正月初一，蛇年大吉](https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661298278&idx=1&sn=48cdce5c730da12f4ee90406ada0f6f5)\n - [ ] [拜大年|蛇跃新程 云科同行！](https://mp.weixin.qq.com/s?__biz=Mzg2NTk3NjczNQ==&mid=2247485633&idx=1&sn=8b101c6e5ac782199e1104c0e13efbc4)\n - [ ] [恭贺新春 | 金盾信安祝您新春快乐，蛇年大吉！](https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448682671&idx=1&sn=5bdff851e304d4dbeff7833d0318a678)\n - [ ] [迎新春 过新年 御盾安全给大家拜年啦！](https://mp.weixin.qq.com/s?__biz=MzU4ODgxMjE0Mw==&mid=2247486347&idx=1&sn=858139f172118c4bb834d05bf953cc4f)\n - [ ] [蛇年到，福气绕，元支点给您拜年啦！](https://mp.weixin.qq.com/s?__biz=MzI4MDE2MzA4Mw==&mid=2667651078&idx=1&sn=747dc83ae36cc0ea5c1b93eb4bdbaf25)\n - [ ] [极验给大家拜年了！](https://mp.weixin.qq.com/s?__biz=MzI2MDE5MTQxNg==&mid=2649723247&idx=1&sn=589cd5ffbdc64554e70c473143cb5c8e)\n - [ ] [一元复始 万象更新，能信安祝您及家人新春大吉 万事如意！](https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490788&idx=1&sn=4ecf028f6de13d48505acb287263846e)\n - [ ] [初一 | 恭贺新春，蛇年大吉！](https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247523802&idx=1&sn=6d75fb5fa444f7b8b4309bb64caadaf9)\n - [ ] [金蛇纳福 | 大年初一，网安拜大年！](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235919&idx=1&sn=a091ebd91146a52049677eef87b7cfa1)\n - [ ] [蛇年大吉 恭贺新春](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235919&idx=2&sn=1b8c628b25f0a25746c47876084b1c61)\n - [ ] [祥蛇贺岁！2025，祝您蛇年顺遂、巳巳如意](https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247533748&idx=1&sn=2d4e5d8e231d87a0691bbaaf7bf882f2)\n - [ ] [祥蛇献瑞，国泰家康丨永信至诚祝您新春快乐！](https://mp.weixin.qq.com/s?__biz=MzAwNDUyMjk4MQ==&mid=2454829244&idx=1&sn=15d13b997ed8a1d2b6de05f8f19815f0)\n - [ ] [洞察2025年网络安全产业趋势](https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489844&idx=1&sn=36f1c90e8bd6d4b656b0d844e9d34e9f)\n - [ ] [新年快乐，巳巳如意！](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247491864&idx=1&sn=bdd69466a0fca637b7efccc408def11e)\n - [ ] [蛇跃新程，矢安科技祝您新的一年“巳巳如意”！](https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247516821&idx=1&sn=b60521f8bd702c0158be36308c378c7f)\n - [ ] [拜大年，心向暖阳，愿邮件安全顺遂无忧](https://mp.weixin.qq.com/s?__biz=MzA5NjMyMDEwNg==&mid=2649286360&idx=1&sn=010f5320070eb627541f94e272efd09b)\n - [ ] [初一 | 拜大年](https://mp.weixin.qq.com/s?__biz=MzI5NjA4NjA3OA==&mid=2652102063&idx=1&sn=3c51fdc8f0addd6ae0cfb25d2b458ea3)\n - [ ] [新春快乐，蛇年吉祥，祝公众号的朋友们身体健康，工作顺利！](https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247515082&idx=1&sn=47788096ca6fa4a1ecb947344b4af31a)\n - [ ] [恭贺新春](https://mp.weixin.qq.com/s?__biz=MzU3NTQwNDYyNA==&mid=2247488573&idx=1&sn=0d50fb0a6590fdc5c74cdc1b072da0d9)\n - [ ] [医疗行业数据安全风险评估实践指南（一）](https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247493571&idx=1&sn=5bb28d26963d363a5d4590d66a8df87b)\n - [ ] [乙巳春节｜新岁启封 万象更新](https://mp.weixin.qq.com/s?__biz=MjM5NjU0NDQ1Ng==&mid=2671019617&idx=1&sn=629fac95808c3f7da16dfa3856f5403c)\n - [ ] [蛇年至，万象新，安易科技祝您新年快乐！](https://mp.weixin.qq.com/s?__biz=MzkwMTI3ODUxOQ==&mid=2247485207&idx=1&sn=b324e11004c245d1addc71c420ae24b2)\n - [ ] [拜大年 | 竹爆声声辞旧岁，烟花朵朵迎新春。知白学院给您拜年啦~](https://mp.weixin.qq.com/s?__biz=MzUzNDg0NTc1NA==&mid=2247510555&idx=1&sn=adf528e69e77da7e1ade94a1037f657a)\n - [ ] [贺新春！](https://mp.weixin.qq.com/s?__biz=MzUxODY3MDExMA==&mid=2247490118&idx=1&sn=41ce7f2bb938c7cb6e68ae48ea0bed1b)\n - [ ] [新年祝福](https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247487719&idx=1&sn=cdab963d88b8a7a93f57e02822946c95)\n - [ ] [船山信安给各位师傅们拜年啦！](https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518508&idx=1&sn=0bcd7cdfb692d548afb9fc3e4e0aabd8)\n - [ ] [新年记](https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486261&idx=1&sn=a99fd42137a2c3a4e337746ba8d1c4d7)\n - [ ] [安全客祝您蛇来运转，福满乾坤！](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787812&idx=1&sn=db21fb03c585e8434fd2aa509fe447b4)\n - [ ] [【新年快乐】菜狗安全祝师傅们新年快乐(内含抽奖)](https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247485729&idx=1&sn=a0b793b557e83bc2f4e8ab3baff70b5b)\n - [ ] [HackingClub祝您巳巳如意，前程螣螣！](https://mp.weixin.qq.com/s?__biz=MzkxMzE4MTc5Ng==&mid=2247499518&idx=1&sn=d9ce9cfedb17f3e247b95cd20c211551)\n - [ ] [内生安全联盟恭祝大家新春快乐，万事大吉！](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247528904&idx=1&sn=4e192436cfabe37848d9c0a532aeaba5)\n - [ ] [🐱网安招财喵喵新春祝福～](https://mp.weixin.qq.com/s?__biz=MzkzNjE5NjQ4Mw==&mid=2247543340&idx=1&sn=ee9b97e42573764b723f01e86b6ece2b)\n - [ ] [大学生网络安全尖锋训练营给您拜年](https://mp.weixin.qq.com/s?__biz=MzUzODkwMDMxNA==&mid=2247574850&idx=1&sn=88a610b92fc3393da2255798f8ed2153)\n - [ ] [《网信自主创新调研报告》编委会给您拜年](https://mp.weixin.qq.com/s?__biz=MzkxMzI3MzMwMQ==&mid=2247530977&idx=1&sn=d05ad11631bf7f2d2c27a0398c17cfe2)\n - [ ] [暗魂攻防实验室祝各位蛇年大吉](https://mp.weixin.qq.com/s?__biz=MzkyMjE1NzQ2MA==&mid=2247489711&idx=1&sn=0ebcd1f0d28d56eff0d0744371744710)\n - [ ] [惊喜放送丨辞旧迎新除烦恼，万巳如意好运来,火绒祝您新春大吉！](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247522008&idx=1&sn=72eb4a612f06bf7c8a597e0f7dc088e1)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247522008&idx=2&sn=9adee9b586588ae9a54e6a2b1cba98ec)\n - [ ] [灵蛇迎春 瑞气盈门｜美创科技祝您新岁安康，蛇来运转](https://mp.weixin.qq.com/s?__biz=MzA3NDE0NDUyNA==&mid=2650805046&idx=1&sn=744a4d22945a4c2a5c8ccfa9f48e6457)\n - [ ] [迪普科技祝您新年快乐丨金蛇献瑞展宏图 续写网安新篇章](https://mp.weixin.qq.com/s?__biz=MzA4NzE5MzkzNA==&mid=2650370747&idx=1&sn=4d579b58e19a18bfbdb857b1fc747993)\n - [ ] [骇极安全](https://mp.weixin.qq.com/s?__biz=MzIwNTU1NjYwNA==&mid=2247488014&idx=1&sn=d62058ec064d318cd051237797748ebf)\n - [ ] [网安守夜人祝大家新年快乐](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486255&idx=1&sn=cbfd1798a20828ea6d7687536ae8f243)\n - [ ] [杂感四则](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114260&idx=1&sn=e7c060b972419b42cb2ed3ff9bd69084)\n - [ ] [春节 | 密织数据安全网，祥启蛇年好运章](https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247569445&idx=1&sn=81d7230341be2c2bc815d4771fe32884)\n - [ ] [攻防靶场(54)：从LFI到RCE](https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247496095&idx=1&sn=4bba7300e436e3e9e1eb11a361c42c25)\n- Blogs dade\n - [ ] [Lessons in Everything](https://0xda.de/blog/2025/01/lessons-in-everything/)\n- hn security\n - [ ] [CVE-2024-49138 Windows CLFS heap-based buffer overflow analysis – Part 2](https://security.humanativaspa.it/cve-2024-49138-windows-clfs-heap-based-buffer-overflow-analysis-part-2/)\n - [ ] [CVE-2024-49138 Windows CLFS heap-based buffer overflow analysis – Part 1](https://security.humanativaspa.it/cve-2024-49138-windows-clfs-heap-based-buffer-overflow-analysis-part-1/)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [5 Things You Should Understand Before Jumping into Bug Bounty](https://infosecwriteups.com/5-things-you-should-understand-before-jumping-into-bug-bounty-813cd960c6bc?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Exploiting XSS To Steal Cookies](https://infosecwriteups.com/exploiting-xss-to-steal-cookies-f0aebdcd815b?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [How I Found a Ticket Booking Bug That Allowed Me to Travel Almost for Free in TNSTC](https://infosecwriteups.com/how-i-found-a-ticket-booking-bug-that-allowed-me-to-travel-almost-for-free-in-tnstc-2c7aa23aebf6?source=rss----7b722bfd1b8d--bug_bounty)\n- GuidePoint Security\n - [ ] [Ongoing report: Babuk2 (Babuk-Bjorka)](https://www.guidepointsecurity.com/blog/ongoing-report-babuk2-babuk-bjorka/)\n- Securelist\n - [ ] [Threat predictions for industrial enterprises 2025](https://securelist.com/industrial-threat-predictions-2025/115327/)\n- Horizon3.ai\n - [ ] [Fireside Chat: Horizon3.ai and North Carolina’s Electric Cooperatives](https://www.horizon3.ai/intelligence/webinars/fireside-chat-horizon3-ai-and-north-carolinas-electric-cooperatives/)\n- Malware-Traffic-Analysis.net - Blog Entries\n - [ ] [2025-01-28: Malwre infection from web inject activity](https://www.malware-traffic-analysis.net/2025/01/28/index.html)\n- Twitter @bytehx\n - [ ] [Re @yeswehack Thanks !](https://x.com/bytehx343/status/1884630328339472481)\n - [ ] [Re @CristiVlad25 @yeswehack :-)](https://x.com/bytehx343/status/1884599250329411751)\n - [ ] [Re @_justYnot @Hacker0x01 Thanks!](https://x.com/bytehx343/status/1884599038978515142)\n - [ ] [Re @A_Atef200 @yeswehack No. This is private and I am sure that it won’t be duped:)](https://x.com/bytehx343/status/1884597418005860707)\n - [ ] [Yay, I was awarded a $$$ bounty on @Hacker0x01! https://hackerone.com/bytehx #TogetherWeHitHarder](https://x.com/bytehx343/status/1884583738790793420)\n - [ ] [Just got a reward for a high vulnerability submitted on @yeswehack -- Information Disclosure (CWE-200). https://yeswehack.com/hunters/bytehx #YesWeRHa...](https://x.com/bytehx343/status/1884583581504491599)\n - [ ] [Just got a reward for a vulnerability submitted on @yeswehack -- Acceptance of Extraneous Untrusted Data With Trusted Data - Cache Poisoning (CWE-349)...](https://x.com/bytehx343/status/1884583503851114555)\n- Malwarebytes\n - [ ] [These are the 10 worst PIN codes](https://www.malwarebytes.com/blog/news/2025/01/these-are-the-10-worst-pin-codes)\n- NVISO Labs\n - [ ] [Backups & DRP in the ransomware era](https://blog.nviso.eu/2025/01/29/backups-drp-in-the-ransomware-era/)\n- daniel.haxx.se\n - [ ] [A 1337 curl author](https://daniel.haxx.se/blog/2025/01/29/a-1337-curl-author/)\n- Reverse Engineering\n - [ ] [How To Avoid Malware Rabbitholes](https://www.reddit.com/r/ReverseEngineering/comments/1id52rn/how_to_avoid_malware_rabbitholes/)\n - [ ] [Got bored, reversed the WMI. Made a novel virus that never touches the filesystem](https://www.reddit.com/r/ReverseEngineering/comments/1icgfua/got_bored_reversed_the_wmi_made_a_novel_virus/)\n - [ ] [ScatterBrain: Unmasking the Shadow of PoisonPlug's Obfuscator](https://www.reddit.com/r/ReverseEngineering/comments/1id0io4/scatterbrain_unmasking_the_shadow_of_poisonplugs/)\n - [ ] [CVE-2024-49138 Windows CLFS heap-based buffer overflow analysis](https://www.reddit.com/r/ReverseEngineering/comments/1icpgh4/cve202449138_windows_clfs_heapbased_buffer/)\n - [ ] [Bypass login on app. Company went out of business meaning no new users can access the underwater drone as the servers are offline. Can somebody figure out a bypass hack?](https://www.reddit.com/r/ReverseEngineering/comments/1ich60h/bypass_login_on_app_company_went_out_of_business/)\n- Wallarm\n - [ ] [API Security Is At the Center of OpenAI vs. DeepSeek Allegations](https://lab.wallarm.com/api-security-is-at-the-center-of-openai-vs-deepseek-allegations/)\n- Security Blog | Praetorian\n - [ ] [Introducing Nosey Parker Explorer](https://www.praetorian.com/blog/announcing-nosey-parker-explorer/)\n- 奇客Solidot–传递最新科技情报\n - [ ] [Meta 短暂禁止用户发表任何涉及 Linux 的帖子](https://www.solidot.org/story?sid=80447)\n - [ ] [腾讯游戏《三角洲行动》被发现会修改用户 CPU 调度和性能释放策略](https://www.solidot.org/story?sid=80446)\n - [ ] [心脏病是美国的第一死因](https://www.solidot.org/story?sid=80445)\n - [ ] [公共图书馆能给人们的生活带来积极影响](https://www.solidot.org/story?sid=80444)\n- 锦行科技\n - [ ] [初一 | 新春纳福](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493740&idx=1&sn=3a548b5f7979b125fbee60be48b4bfe1&chksm=979a13c9a0ed9adf401fe111940f754c8f3d4bbb1467acb1bb58f95ea4f559e1018fe247674a&scene=58&subscene=0#rd)\n- 看雪学苑\n - [ ] [2025新春致谢 | 金蛇纳福启新程](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589299&idx=1&sn=5e38768a37484f2f38cd5b8da65a095b&chksm=b18c28f986fba1effd30be735d8e492f5a4fe38d1f279119a9b59d2195d68332dff4b59e864c&scene=58&subscene=0#rd)\n- 安全分析与研究\n - [ ] [夜鹰(NightHawk)C2工具被泄露了？](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490232&idx=1&sn=71a4e338358972fe51261cbc15ddcc02&chksm=902fb590a7583c8670bf284d9d8eb2fb2c3d7608c5cccf3c64a743f4b24808388990b8b5fde4&scene=58&subscene=0#rd)\n- 红日安全\n - [ ] [新春伊始，红日安全启航！愿与您共同筑牢数字防线，共同迈向更安全的明天！🔒🌱](https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851765&idx=1&sn=568da818c7d56ee694372f7ca3d04ddc&chksm=f3e4e9f6c49360e020e5c1183896432b1d52e3c9e96fa7577bb40590a7280b1b5987a521a472&scene=58&subscene=0#rd)\n- 丁爸 情报分析师的工具箱\n - [ ] [【实操】利用Deepseek传承和弘扬传统文化](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148736&idx=1&sn=39a0df253f09d26a6151599d1e8bfb20&chksm=f1af26fac6d8afec1e52db48f994cfe77da1b04b5a1e5aeba491a41f83b5e2b01795b8074105&scene=58&subscene=0#rd)\n - [ ] [【培训】Osint开源情报练习 #002](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148736&idx=2&sn=ebee4c79a769e10968179969c634d83a&chksm=f1af26fac6d8afec43791f1e2d2945b5e030bab5b7a6d0c003eff48d2af4aa4bbae72ead9e03&scene=58&subscene=0#rd)\n- 慢雾科技\n - [ ] [慢雾科技祝大家新春快乐，“巳巳”如意！](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501035&idx=1&sn=59e84e7659d99a54b6501ec2191845d8&chksm=fddeba6ccaa9337aee73dbfd92a4188959c61acfe765c21c5ddde16c0ddbf61b542525b2bbc8&scene=58&subscene=0#rd)\n- M01N Team\n - [ ] [AISS大模型安全社区-2025 Roadmap](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494053&idx=1&sn=6449e25c9c3754c833fdd7ba5435ad70&chksm=c18429b4f6f3a0a25365b3e0d1423573d757fa269aad736ed5aca48ff4b82b278fd73ac03340&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [DeepSeek 的爆红，指出了当下 AI 最大困境](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073010&idx=1&sn=0abd27208a3082b3453f5cb1aa2a1ab7&chksm=7e57d3c449205ad2fcb7960a04020f5000e8f59242b70aada742aaba7fa36482c27141e654d4&scene=58&subscene=0#rd)\n - [ ] [宇树领衔，众多黑科技登台蛇年春晚；奥特曼回应 DeepSeek 爆火；抖音李亮评论雷军、余承东直播被封 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653072999&idx=1&sn=525ce0f5f5685483f05d575f2d13d51a&chksm=7e57d3d149205ac723fd927a03f590113df2731c5a2fb9d3feff18b23c03ac35ce5defcab466&scene=58&subscene=0#rd)\n- 威胁猎人Threat Hunter\n - [ ] [新春快乐，万事如意](https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247498914&idx=1&sn=9db465eba52da2dd54e90fb40b843bf6&chksm=eb12da99dc65538f376b96cbd2513fdc29cf6fe94ebdbc01455265051e5acf045c037033aa2e&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [【卫星图像】金正恩考察朝鲜核物质生产基地和核武器研究所](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559318&idx=1&sn=f93bc65cb4cf2587b134129cbdca5205&chksm=87117d1db066f40b7f81de93f98091616065d1f49efc6490b8269d09dd1a64ad7d16306602e7&scene=58&subscene=0#rd)\n - [ ] [美日韩“抱团”：三国首次会谈聚焦朝鲜核威胁](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559318&idx=2&sn=eef1bccee4db52de82349056e07e8aca&chksm=87117d1db066f40baf7629cdca97055daa3255b4dc91b397b5d2faef1aef45223fe2f07d2f2c&scene=58&subscene=0#rd)\n - [ ] [致情报分析师公众号全体粉丝](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559318&idx=3&sn=be997ee6361433a289ec6c156aca06a7&chksm=87117d1db066f40ba93fbe99241b3d494eac47afa160be5539c9518622515394ac57f674c92c&scene=58&subscene=0#rd)\n- 吾爱破解论坛\n - [ ] [【2025春节】解题领红包活动开始喽，解出就送论坛币！](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141655&idx=1&sn=d21717226e40032625a74a2d00255e23&chksm=bd50a6438a272f55f2e9c7890cabd2ec30b2ec5b946b2dcb7f37c96667f152909cb765fc17fe&scene=58&subscene=0#rd)\n- 网安国际\n - [ ] [InForSec祝网络安全华人学者春节愉快！](https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652317463&idx=1&sn=3b304079c535abddffd4968cd9d1c718&chksm=8bc4ba99bcb3338f81946371b05c0e130ac7d9cc318f370bedd27002d8321e4fea3c011ad947&scene=58&subscene=0#rd)\n- Krypt3ia\n - [ ] [Krypt3ia Daily Cyber Threat Intelligence (CTI) Digest](https://krypt3ia.wordpress.com/2025/01/29/krypt3ia-daily-cyber-threat-intelligence-cti-digest-5/)\n- bellingcat\n - [ ] [M23 Rebels Consolidate Control over Key City in DR Congo](https://www.bellingcat.com/news/2025/01/29/m23-rebels-goma-congo-fighting-clashes-drc-kivu-control/)\n- 复旦白泽战队\n - [ ] [复旦白泽给大家拜年啦！祝大家蛇年大吉，巳巳如意，Paper如潮成果丰！](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247492844&idx=1&sn=a8d82e9664fd92535652abde94911226&chksm=fde86092ca9fe9849b18549438906f871544b38d9a54c8b9d40cfb6fc03b23c01305a77b6ea7&scene=58&subscene=0#rd)\n- 360数字安全\n - [ ] [大年初一 | 祥蛇纳福，“巳巳”如意](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579267&idx=1&sn=b6b08865f0534077a40f3e336e85bd3f&chksm=9f8d268ba8faaf9d3bdee0d2df3318bb871d372d6f84665b079f0fbac45e747586f5fad7522e&scene=58&subscene=0#rd)\n- 迪哥讲事\n - [ ] [寻找隐藏参数的利器](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496975&idx=1&sn=41875f4fcd79a42421188feb25e23889&chksm=e8a5ff6cdfd2767a4c19aa1cb2ccd7bc363b29d6b2c7cc49beb5a3dcf261222c0dec0d6efac2&scene=58&subscene=0#rd)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Hackers are hijacking WordPress sites to push Windows and Mac malware](https://techcrunch.com/2025/01/29/hackers-are-hijacking-wordpress-sites-to-push-windows-and-mac-malware/)\n - [ ] [South Africa’s government-run weather service knocked offline by cyberattack](https://therecord.media/south-african-weather-service-cyberattack)\n - [ ] [FBI seizes Cracked.io, Nulled.to hacking forums in Operation Talent](https://www.bleepingcomputer.com/news/security/fbi-seizes-crackedio-nulledto-hacking-forums-in-operation-talent/)\n - [ ] [Laravel admin package Voyager vulnerable to one-click RCE flaw](https://www.bleepingcomputer.com/news/security/laravel-admin-package-voyager-vulnerable-to-one-click-rce-flaw/)\n - [ ] [Italian regulator asks DeepSeek for information about data collection](https://therecord.media/italian-regulator-deepseek-info-collection)\n - [ ] [Microsoft investigates Microsoft 365 outage affecting users, admins](https://www.bleepingcomputer.com/news/microsoft/microsoft-investigates-microsoft-365-outage-affecting-users-admins/)\n - [ ] [L’IA generativa unifica le interfacce di gestione e migliora la cybersecurity](https://www.securityinfo.it/2025/01/29/lia-generativa-unifica-le-interfacce-di-gestione-e-migliora-la-cybersecurity/)\n - [ ] [Industry groups call on Congress to enact federal data privacy law](https://therecord.media/industry-groups-congress-data-privacy)\n - [ ] [Poland accuses Russia of recruiting Polish citizens online for election meddling](https://therecord.media/poland-accuses-russia-of-recruiting-citizens-online-for-election-meddling)\n - [ ] [FBI seizes domains for Cracked.io, Nulled.to hacking forums](https://www.bleepingcomputer.com/news/security/fbi-seizes-domains-for-crackedio-nulledto-hacking-forums/)\n - [ ] [Whatsup Gold, Observium and Offis vulnerabilities](https://blog.talosintelligence.com/whatsup-gold-and-offis-vulnerabilities-2/)\n - [ ] [Windows 11's Start menu is getting iPhone and Android integration](https://www.bleepingcomputer.com/news/microsoft/windows-11s-start-menu-is-getting-iphone-and-android-integration/)\n - [ ] [UK engineering giant Smiths Group investigating 'unauthorised access' to network](https://therecord.media/smiths-group-uk-cybersecurity-incident)\n - [ ] [Maryland healthcare network forced to shut down IT systems after ransomware attack](https://therecord.media/maryland-healthcare-ransomware-frederick-health)\n - [ ] [Uncover Hidden Browsing Threats: Get a Free Risk Assessment for GenAI, Identity, Web, and SaaS Risks](https://www.bleepingcomputer.com/news/security/uncover-hidden-browsing-threats-get-a-free-risk-assessment-for-genai-identity-web-and-saas-risks/)\n - [ ] [Texas AG warns Kia about sharing driver information with data brokers](https://therecord.media/texas-warns-kia-about-sharing-driver-info-to-data-brokers)\n - [ ] [Hackers exploit critical unpatched flaw in Zyxel CPE devices](https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-unpatched-flaw-in-zyxel-cpe-devices/)\n - [ ] [January Windows 10 preview update force installs new Outlook](https://www.bleepingcomputer.com/news/microsoft/january-windows-10-preview-update-force-installs-new-outlook/)\n - [ ] [Sweden’s elite armed police used helicopter to board suspected sabotage ship](https://therecord.media/sweden-vezhen-ship-armed-police-boarded-helicopter)\n - [ ] [New ICS Vulnerabilities Discovered in Schneider Electric and B&R Automation Systems](https://cyble.com/blog/cisa-release-advisories-for-new-ics-vulnerabilities/)\n - [ ] [Windows 11 KB5050094 update fixes bugs causing audio issues](https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5050094-update-fixes-bugs-causing-audio-issues/)\n - [ ] [Australia’s Health Sector Receives $6.4 Million Cybersecurity Boost with New Threat Information-Sharing Network](https://cyble.com/blog/australia-health-cyber-sharing-network/)\n - [ ] [Threat predictions for industrial enterprises 2025](https://securelist.com/industrial-threat-predictions-2025/115327/)\n - [ ] [3 Major Cyber Attacks in January 2025](https://any.run/cybersecurity-blog/cyber-attacks-january-2025/)\n - [ ] [PlushDaemon: un nuovo gruppo APT cinese colpisce la Corea del Sud. Il report di ESET](https://www.securityinfo.it/2025/01/29/plushdaemon-un-nuovo-gruppo-apt-cinese-colpisce-la-corea-del-sud-il-report-di-eset/)\n - [ ] [CVE-2024-49138 Windows CLFS heap-based buffer overflow analysis – Part 1](https://security.humanativaspa.it/cve-2024-49138-windows-clfs-heap-based-buffer-overflow-analysis-part-1/)\n - [ ] [CVE-2024-49138 Windows CLFS heap-based buffer overflow analysis – Part 2](https://security.humanativaspa.it/cve-2024-49138-windows-clfs-heap-based-buffer-overflow-analysis-part-2/)\n - [ ] [Report: Almost half of state consumer privacy laws fail to protect individuals’ data](https://therecord.media/state-consumer-privacy-laws-failing-to-protect-data)\n - [ ] [MGM agrees to pay $45 million to victims of 2019 data breach and 2023 ransomware attack](https://therecord.media/mgm-agrees-45-million-payment-data-breach-ransomware-victims)\n- Schneier on Security\n - [ ] [ExxonMobil Lobbyist Caught Hacking Climate Activists](https://www.schneier.com/blog/archives/2025/01/exxonmobil-lobbyist-caught-hacking-climate-activists.html)\n- Securityinfo.it\n - [ ] [L’IA generativa unifica le interfacce di gestione e migliora la cybersecurity](https://www.securityinfo.it/2025/01/29/lia-generativa-unifica-le-interfacce-di-gestione-e-migliora-la-cybersecurity/?utm_source=rss&utm_medium=rss&utm_campaign=lia-generativa-unifica-le-interfacce-di-gestione-e-migliora-la-cybersecurity)\n - [ ] [PlushDaemon: un nuovo gruppo APT cinese colpisce la Corea del Sud. Il report di ESET](https://www.securityinfo.it/2025/01/29/plushdaemon-un-nuovo-gruppo-apt-cinese-colpisce-la-corea-del-sud-il-report-di-eset/?utm_source=rss&utm_medium=rss&utm_campaign=plushdaemon-un-nuovo-gruppo-apt-cinese-colpisce-la-corea-del-sud-il-report-di-eset)\n- Your Open Hacker Community\n - [ ] [So You Want To Work in Cyber Security?](https://www.reddit.com/r/HowToHack/comments/1id21do/so_you_want_to_work_in_cyber_security/)\n - [ ] [Im (almost) 16 and want to learn ethical hacking, any advice?](https://www.reddit.com/r/HowToHack/comments/1icxorh/im_almost_16_and_want_to_learn_ethical_hacking/)\n - [ ] [Is there any way I can get a list of hashes?](https://www.reddit.com/r/HowToHack/comments/1id61ki/is_there_any_way_i_can_get_a_list_of_hashes/)\n - [ ] [Any advice to start?](https://www.reddit.com/r/HowToHack/comments/1iczrw1/any_advice_to_start/)\n - [ ] [Trap phone](https://www.reddit.com/r/HowToHack/comments/1id7boc/trap_phone/)\n - [ ] [What is a fraud?](https://www.reddit.com/r/HowToHack/comments/1id20l8/what_is_a_fraud/)\n - [ ] [What should I move onto?](https://www.reddit.com/r/HowToHack/comments/1icpms1/what_should_i_move_onto/)\n - [ ] [How to find dark web site links](https://www.reddit.com/r/HowToHack/comments/1id0bl8/how_to_find_dark_web_site_links/)\n - [ ] [Im turning 17 this year, and i have already started learning ethical hacking since 2020, and i have taken some paid courses and completed those and currently im just training in ctf and htb, i need to learn more in hacking, any recommendations?](https://www.reddit.com/r/HowToHack/comments/1icov3b/im_turning_17_this_year_and_i_have_already/)\n - [ ] [So basically I want to learn how to hack into my old social media where do I start](https://www.reddit.com/r/HowToHack/comments/1icvut2/so_basically_i_want_to_learn_how_to_hack_into_my/)\n - [ ] [noob questions 2: from nmap to metasploit](https://www.reddit.com/r/HowToHack/comments/1icju15/noob_questions_2_from_nmap_to_metasploit/)\n - [ ] [How to crack a phone pass](https://www.reddit.com/r/HowToHack/comments/1icqs7v/how_to_crack_a_phone_pass/)\n - [ ] [Where do i get flipper zero here in india?](https://www.reddit.com/r/HowToHack/comments/1icooi1/where_do_i_get_flipper_zero_here_in_india/)\n - [ ] [Hi I'm 14 and wanna be a ethical hacker and I'm wondering where to start?](https://www.reddit.com/r/HowToHack/comments/1iclkz2/hi_im_14_and_wanna_be_a_ethical_hacker_and_im/)\n - [ ] [Help](https://www.reddit.com/r/HowToHack/comments/1icjzs0/help/)\n - [ ] [What is the best hacking software to send attacks (2025)](https://www.reddit.com/r/HowToHack/comments/1ick00s/what_is_the_best_hacking_software_to_send_attacks/)\n- Blackhat Library: Hacking techniques and research\n - [ ] [my midjourney api didn't make it, but it still works](https://www.reddit.com/r/blackhat/comments/1id406q/my_midjourney_api_didnt_make_it_but_it_still_works/)\n - [ ] [LinkedIn Accounts provider?](https://www.reddit.com/r/blackhat/comments/1icha04/linkedin_accounts_provider/)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [From PowerShell to a Python Obfuscation Race!, (Wed, Jan 29th)](https://isc.sans.edu/diary/rss/31634)\n - [ ] [ISC Stormcast For Wednesday, January 29th, 2025 https://isc.sans.edu/podcastdetail/9300, (Wed, Jan 29th)](https://isc.sans.edu/diary/rss/31632)\n- Social Engineering\n - [ ] [When someone tells a story, what kind of questions can you ask which shows your engaged?](https://www.reddit.com/r/SocialEngineering/comments/1id7wix/when_someone_tells_a_story_what_kind_of_questions/)\n- Deep Web\n - [ ] [Onion link lisk shutdown](https://www.reddit.com/r/deepweb/comments/1icjy0g/onion_link_lisk_shutdown/)\n - [ ] [experienced/long-term deep web users, what kind of life do y’all live?](https://www.reddit.com/r/deepweb/comments/1icqrs3/experiencedlongterm_deep_web_users_what_kind_of/)\n - [ ] [Hackers](https://www.reddit.com/r/deepweb/comments/1icl028/hackers/)\n- Security Affairs\n - [ ] [U.S. CISA adds Apple products’ flaw to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/173622/hacking/us-cisa-adds-apple-products-flaw-known-exploited-vulnerabilities-catalog.html)\n - [ ] [Aquabot variant v3 targets Mitel SIP phones](https://securityaffairs.com/173607/breaking-news/aquabot-variant-v3-targets-mitel-sip-phones.html)\n - [ ] [Critical remote code execution bug found in Cacti framework](https://securityaffairs.com/173597/security/critical-rce-cacti-framework.html)\n - [ ] [Attackers actively exploit a critical zero-day in Zyxel CPE Series devices](https://securityaffairs.com/173589/hacking/zyxel-cpe-series-devices-cve-2024-40891-exploited.html)\n - [ ] [Attackers exploit SimpleHelp RMM Software flaws for initial access](https://securityaffairs.com/173578/security/attackers-exploit-simplehelp-rmm-software-flaws.html)\n- The Hacker News\n - [ ] [Lazarus Group Uses React-Based Admin Panel to Control Global Cyber Attacks](https://thehackernews.com/2025/01/lazarus-group-uses-react-based-admin.html)\n - [ ] [AI in Cybersecurity: What's Effective and What’s Not – Insights from 200 Experts](https://thehackernews.com/2025/01/ai-in-cybersecurity-whats-effective-and.html)\n - [ ] [New SLAP & FLOP Attacks Expose Apple M-Series Chips to Speculative Execution Exploits](https://thehackernews.com/2025/01/new-slap-flop-attacks-expose-apple-m.html)\n - [ ] [How Interlock Ransomware Infects Healthcare Organizations](https://thehackernews.com/2025/01/how-interlock-ransomware-infects.html)\n - [ ] [Critical Cacti Security Flaw (CVE-2025-22604) Enables Remote Code Execution](https://thehackernews.com/2025/01/critical-cacti-security-flaw-cve-2025.html)\n - [ ] [UAC-0063 Expands Cyber Attacks to European Embassies Using Stolen Documents](https://thehackernews.com/2025/01/uac-0063-expands-cyber-attacks-to.html)\n - [ ] [Broadcom Warns of High-Severity SQL Injection Flaw in VMware Avi Load Balancer](https://thehackernews.com/2025/01/broadcom-warns-of-high-severity-sql.html)\n - [ ] [Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability](https://thehackernews.com/2025/01/zyxel-cpe-devices-face-active.html)\n- Technical Information Security Content & Discussion\n - [ ] [CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI)](https://www.reddit.com/r/netsec/comments/1id0ccq/cve202446507_yeti_platform_serverside_template/)\n - [ ] [CVE-2024-49138 Windows CLFS heap-based buffer overflow analysis](https://www.reddit.com/r/netsec/comments/1icpgd8/cve202449138_windows_clfs_heapbased_buffer/)\n- Computer Forensics\n - [ ] [Richard Green's Updated Report for Karen Read Trial 2:27 Hos long to die](https://www.reddit.com/r/computerforensics/comments/1iczkut/richard_greens_updated_report_for_karen_read/)\n - [ ] [ASHATA Mini Body Camera](https://www.reddit.com/r/computerforensics/comments/1id7w7p/ashata_mini_body_camera/)\n - [ ] [BCFE / Digital Forensics Career Entry Question](https://www.reddit.com/r/computerforensics/comments/1icw0q0/bcfe_digital_forensics_career_entry_question/)\n - [ ] [BREW Help](https://www.reddit.com/r/computerforensics/comments/1iclcjn/brew_help/)\n - [ ] [FBI didn’t need to crack Tor or Bitcoin to catch Ulbricht—his old forum posts did the job. If you want to see how small OPSEC mistakes can be fatal, we broke it all down](https://www.reddit.com/r/computerforensics/comments/1icpd7d/fbi_didnt_need_to_crack_tor_or_bitcoin_to_catch/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [So You Want To Work in Cyber Security?](https://www.reddit.com/r/netsecstudents/comments/1iczqhp/so_you_want_to_work_in_cyber_security/)\n - [ ] [How to get into Soc](https://www.reddit.com/r/netsecstudents/comments/1icxb62/how_to_get_into_soc/)\n- Graham Cluley\n - [ ] [Ex-worker arrested after ‘shutdown’ of British Museum computer systems](https://www.bitdefender.com/en-us/blog/hotforsecurity/ex-worker-arrested-after-shutdown-of-british-museum-computer-systems)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #732: Multiple Identity Provider Disorder](https://www.hecfblog.com/2025/01/daily-blog-732-multiple-identity.html)\n- Security Weekly Podcast Network (Audio)\n - [ ] [AI in 2025: The Shifting Regulatory Landscape For Artificial Intelligence - BSW #380](http://sites.libsyn.com/18678/ai-in-2025-the-shifting-regulatory-landscape-for-artificial-intelligence-bsw-380)\n- Daniel Miessler\n - [ ] [AI Novels Are Coming](https://danielmiessler.com/blog/ai-novels)\n- Dark Space Blogspot\n - [ ] [Storie Di Collassi Di Fondi, Banche e Società (Trading e Investimenti)](http://darkwhite666.blogspot.com/2025/01/storie-di-collassi-di-fondi-banche-e.html)\n"}}, "archive/tmp/2026-01-15.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747322.832829, "n": 32344, "h": "1e50d61885f20966", "c": "{\n \"paper - Last paper\": {\n \"基于大语言模型的特征级对抗攻击：针对安卓恶意软件检测器\": \"https://paper.seebug.org/3450/\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2026-01-14 Review\": \"http://www.sec-wiki.com/?2026-01-14\"\n },\n \"Microsoft Security Blog\": {\n \"Microsoft named a Leader in IDC MarketScape for Unified AI Governance Platforms\": \"https://www.microsoft.com/en-us/security/blog/2026/01/14/microsoft-named-a-leader-in-idc-marketscape-for-unified-ai-governance-platforms/\",\n \"Inside RedVDS: How a single virtual desktop provider fueled worldwide cybercriminal operations\": \"https://www.microsoft.com/en-us/security/blog/2026/01/14/inside-redvds-how-a-single-virtual-desktop-provider-fueled-worldwide-cybercriminal-operations/\"\n },\n \"Doonsec's feed\": {\n \"星链在伊朗：卫星互联网在电子战中的技术分析\": \"https://mp.weixin.qq.com/s/mZkjATxViB9FM54lnWyt-Q\",\n \"【接口漏洞第六章第一节】你以为前端参数可控就安全了？聊聊服务器端参数污染\": \"https://mp.weixin.qq.com/s/urblBuPWzhxefl75bq_Cpw\",\n \"各个数据库sql注入及waf绕过\": \"https://mp.weixin.qq.com/s/CDVqIqe-pphdlTJjZmv-xA\",\n \"拒绝信息差，全网最全渗透测试靶场推荐【2026最新版】\": \"https://mp.weixin.qq.com/s/UAx7xScTIOdWsnKscjKLtw\",\n \"T-Tech技术回放 | 戴国浩解读：大模型推理效率的核心博弈\": \"https://mp.weixin.qq.com/s/hCawqU1L4wSwLueFDR1KeA\",\n \"Agentic AI ！供应链安全“无人驾驶”时代\": \"https://mp.weixin.qq.com/s/TrDza5m99GKX9EmI-jZqFw\",\n \"每日课程更新\": \"https://mp.weixin.qq.com/s/lrOZmw4xwwlnEiIxpI099w\",\n \"【免杀】bypass 测试\": \"https://mp.weixin.qq.com/s/boXq2h-FatPa46fARgcKAw\",\n \"吃瓜！携程被立案调查为哪般？\": \"https://mp.weixin.qq.com/s/9y8nFICb0NSGbV5Q5vPFig\",\n \"追踪诈骗虚拟货币团伙 渗透内部,世上没有免费的午餐\": \"https://mp.weixin.qq.com/s/TqjqSF5fqWuRWW0UDXnxNA\",\n \"【APP测试】allsafe靶场\": \"https://mp.weixin.qq.com/s/61EiUVVl21l7nR-NFUq_Hw\",\n \"高危漏洞威胁情报合集 (2026-01-14）\": \"https://mp.weixin.qq.com/s/OuRt_afnVoQ21XrCIabGYQ\",\n \"【AI安全】Agentic AI 降临！软件供应链安全进入“无人驾驶”时代\": \"https://mp.weixin.qq.com/s/CbvP-9CvJo4AvIhIiP5vvA\",\n \"最新！又一行业数据安全管理办法面向社会征集建议\": \"https://mp.weixin.qq.com/s/S7PDXh2XYguGVETjq-KLyg\",\n \"喜报！赛博研究院收到上海市通信管理局的感谢信\": \"https://mp.weixin.qq.com/s/EgJ6FhmUpkkdqxT_EfDI9Q\",\n \"星链--轨道上的特洛伊木马\": \"https://mp.weixin.qq.com/s/aZyVp2ORuikgV7TRUYCsJg\",\n \"【大话工控安全】工业控制系统行业知识：电力行业天然气发电场景\": \"https://mp.weixin.qq.com/s/XcioTKcbmTBq-mqHoxGUUg\",\n \"一文看懂：网络安全中那些“听起来很玄”的安全模型\": \"https://mp.weixin.qq.com/s/4cMkFsfOk8O9905nVPpGqw\",\n \"反垄断？\": \"https://mp.weixin.qq.com/s/hbWf1lpMEsHqlwQ-IPhtPg\",\n \"关键的FortiSIEM漏洞允许攻击者通过TCP数据包执行任意命令\": \"https://mp.weixin.qq.com/s/QnyzSIVUuNWYE15IivvDkA\",\n \"tarzan-cms：snakeyaml反序列化(ScriptEngineManager利用链)\": \"https://mp.weixin.qq.com/s/xc-kXLgLE0UPB6qPIsPJyw\",\n \"WebDAV+frp内网穿透工具实现像访问本地硬盘一样访问远程NAS\": \"https://mp.weixin.qq.com/s/08ebn1aR50JIG4hArDzu9w\",\n \"边上网边学英语？Ries 外语学习插件，让 AI 帮你营造学习环境\": \"https://mp.weixin.qq.com/s/QcIhbeWzwVtP2X3DRi3AFg\",\n \"日均不到 1.05 元！也许是苹果最具性价比的产品……\": \"https://mp.weixin.qq.com/s/KWmh8QGQ9uJiDGshy1RccQ\",\n \"APT | “金眼狗”组织水坑网站攻击活动\": \"https://mp.weixin.qq.com/s/HTpBduTnQK5wSJ1i_RA3jw\",\n \"【漏洞通告】Apache Struts XML外部实体注入漏洞（CVE-2025-68493）\": \"https://mp.weixin.qq.com/s/kF0D21R7rvIFKCqRdbIg9w\",\n \"微软补丁日安全通告|1月份\": \"https://mp.weixin.qq.com/s/YtlwJnxSBjjRBJIvmeYzqw\",\n \"网络安全信息与动态周报2026年第2期（1月5日-1月11日）\": \"https://mp.weixin.qq.com/s/hCUNb9P9TwNg-kOgp5ehcg\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"n8n Workflow Expression Remote Code Execution\": \"https://cxsecurity.com/issue/WLB-2026010008\"\n },\n \"Armin Ronacher's Thoughts and Writings\": {\n \"Porting MiniJinja to Go With an Agent\": \"https://lucumr.pocoo.org/2026/1/14/minijinja-go-port/\"\n },\n \"Tenable Blog\": {\n \"CVE-2025-64155: Exploit Code Released for Critical Fortinet FortiSIEM Command Injection Vulnerability\": \"https://www.tenable.com/blog/cve-2025-64155-exploit-code-released-for-critical-fortinet-fortisiem-command-injection\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Wed Jan 14 11:12:18 UTC 2026\": \"https://github.com/trickest/cve/commit/0fd5103c1c8297766c9ae244917eafd05ec09dc6\"\n },\n \"奇安信攻防社区\": {\n \"深度实例分析：攻防视角下的AI框架组件中的注入漏洞\": \"https://forum.butian.net/share/4713\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"盘点2025年改变网络安全游戏规则的七大网络安全关键词\": \"https://www.4hou.com/posts/vwnM\",\n \"BreachForums黑客论坛再遭数据泄露 用户数据库被公之于众\": \"https://www.4hou.com/posts/pn4m\"\n },\n \"LevelBlue Blog\": {\n \"Identity & Beyond: 2026 Incident Response Predictions\": \"https://levelblue.com/blogs/levelblue-blog/identity-and-beyond-2026-incident-response-predictions/\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"双重严重：Ruckus IoT控制器因硬编码密钥泄露面临root权限远程代码执行\": \"https://www.anquanke.com/post/id/314315\",\n \"攻击者借助伪造PDF将合法远程监控管理工具武器化\": \"https://www.anquanke.com/post/id/314309\",\n \"蜜罐陷阱(HoneyTrap)——抵御越狱攻击的全新大语言模型防御框架\": \"https://www.anquanke.com/post/id/314328\",\n \"高危漏洞CVE-2025-52694：研华设备存在 SQL 注入，可导致 IoT设备被完全攻陷\": \"https://www.anquanke.com/post/id/314324\",\n \"n8n供应链攻击：滥用社区节点窃取OAuth令牌\": \"https://www.anquanke.com/post/id/314316\",\n \"高危警报：Moxa交换机存在OpenSSH远程代码执行漏洞（CVSS 9.8）\": \"https://www.anquanke.com/post/id/314327\",\n \"ValleyRAT_S2病毒攻击组织：投放隐匿恶意软件，窃取金融敏感信息\": \"https://www.anquanke.com/post/id/314334\",\n \"苹果确认谷歌 Gemini 将为 Siri 提供技术支持，强调隐私仍是核心优先级\": \"https://www.anquanke.com/post/id/314310\",\n \"行业热度褪去：戴尔坦言“AI PC”叙事未获消费者认可\": \"https://www.anquanke.com/post/id/314306\",\n \"2026 年Meta战略转向：押注闭源 AI，加码核能投资争夺行业主导权\": \"https://www.anquanke.com/post/id/314304\"\n },\n \"ElcomSoft blog\": {\n \"Web Browser Forensics in Digital Triage\": \"https://blog.elcomsoft.com/2026/01/web-browser-forensics-in-digital-triage/\"\n },\n \"ongoing by Tim Bray\": {\n \"Losing 1½ Million Lines of Go\": \"https://www.tbray.org/ongoing/When/202x/2026/01/14/Unicode-Properties\"\n },\n \"Horizon3.ai\": {\n \"CVE-2025-37164\": \"https://horizon3.ai/attack-research/vulnerabilities/cve-2025-37164/\",\n \"From Patch Tuesday to Pentest Wednesday®: When Proving Compliance Becomes Cyber Resilience\": \"https://horizon3.ai/intelligence/blogs/patch-tuesday-to-pentest-wednesday-cyber-resilience/\"\n },\n \"LevelBlue SpiderLabs Blog\": {\n \"Preparing for the AI Job Market: A Security Professional's Roadmap\": \"https://levelblue.com/blogs/spiderlabs-blog/preparing-for-the-ai-job-market-a-security-professionals-roadmap/\"\n },\n \"Reverse Engineering\": {\n \"Game Reverse Engineering - One Hit Kills Hack\": \"https://www.reddit.com/r/ReverseEngineering/comments/1qclj71/game_reverse_engineering_one_hit_kills_hack/\",\n \"FileDumper v1.0.1 - Simple Memory Forensic Dumper for Windows (Python 2 + memorpy) – Built with Grok in a Late-Night Session\": \"https://www.reddit.com/r/ReverseEngineering/comments/1qcxt37/filedumper_v101_simple_memory_forensic_dumper_for/\"\n },\n \"Malwarebytes\": {\n \"Phishing scammers are posting fake “account restricted” comments on LinkedIn\": \"https://www.malwarebytes.com/blog/news/2026/01/phishing-scammers-are-posting-fake-account-restricted-comments-on-linkedin\",\n \"Online shoppers at risk as Magecart skimming hits major payment networks\": \"https://www.malwarebytes.com/blog/news/2026/01/online-shoppers-at-risk-as-magecart-skimming-hits-major-payment-networks\",\n \"How real software downloads can hide remote backdoors\": \"https://www.malwarebytes.com/blog/threat-intel/2026/01/how-real-software-downloads-can-hide-remote-backdoors\"\n },\n \"Intigriti\": {\n \"Reflecting on 2025, shaping 2026. A fireside chat with Intigriti leadership\": \"https://www.intigriti.com/blog/business-insights/a-fireside-chat-with-intigriti-leadership\"\n },\n \"rtl-sdr.com\": {\n \"New Upcoming Crowdfunded SDRs from Wavelet Lab: xSDR and sSDR\": \"https://www.rtl-sdr.com/new-upcoming-crowdfunded-sdrs-from-wavelet-lab-xsdr-and-ssdr/\",\n \"Tech Minds: Testing Out A New Signals Intelligence Tool Called Intercept\": \"https://www.rtl-sdr.com/tech-minds-testing-out-a-new-signals-intelligence-tool-called-intercept/\"\n },\n \"HackerNews\": {\n \"能源巨头披露数据泄露事件，客户完整数据遭窃\": \"https://hackernews.cc/archives/62264\",\n \"韩国大型企业教元集团疑遭勒索软件攻击\": \"https://hackernews.cc/archives/62260\",\n \"荷兰一黑客因其入侵港口系统协助毒品走私被判 7 年\": \"https://hackernews.cc/archives/62258\",\n \"比利时 AZ Monica 医院遭网络攻击，被迫关闭服务器、取消手术并转移危重病人\": \"https://hackernews.cc/archives/62255\",\n \"新型高级 Linux 恶意软件 VoidLink 瞄准云和容器环境\": \"https://hackernews.cc/archives/62252\"\n },\n \"Shostack & Friends Blog\": {\n \"Threat Modeling Essentials at Archimedes 2026 Healthcare Security Week\": \"https://shostack.org/blog/threat-modeling-essentials-archimedes-2026-hcsw/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"伊朗如何关闭互联网\": \"https://www.solidot.org/story?sid=83308\",\n \"安全研究员发现针对云服务器的 Linux 恶意程序\": \"https://www.solidot.org/story?sid=83307\",\n \"《呆伯特》作者 Scott Adams 因癌症去世\": \"https://www.solidot.org/story?sid=83306\",\n \"内存短缺冲击 AI PC\": \"https://www.solidot.org/story?sid=83305\",\n \"伊朗断网六天\": \"https://www.solidot.org/story?sid=83304\",\n \"北极野火数量在上升\": \"https://www.solidot.org/story?sid=83303\",\n \"美国附条件解禁对华 AI 半导体出口\": \"https://www.solidot.org/story?sid=83302\",\n \"美国五角大楼发现有设备与哈瓦那综合症相关\": \"https://www.solidot.org/story?sid=83301\",\n \"Chrome/Chromium 恢复支持 JPEG-XL 图像\": \"https://www.solidot.org/story?sid=83300\",\n \"Wine 11.0 释出\": \"https://www.solidot.org/story?sid=83299\",\n \"一加 CEO 刘作虎被台湾通缉\": \"https://www.solidot.org/story?sid=83298\"\n },\n \"Black Hills Information Security, Inc.\": {\n \"Finding the Right Penetration Testing Company\": \"https://www.blackhillsinfosec.com/finding-the-right-penetration-testing-company/\"\n },\n \"黑海洋Wiki | Web开发工具包 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台\": {\n \"巴菲特再发警示：AI的危险不亚于核武器\": \"https://blog.upx8.com/%E5%B7%B4%E8%8F%B2%E7%89%B9%E5%86%8D%E5%8F%91%E8%AD%A6%E7%A4%BA-AI%E7%9A%84%E5%8D%B1%E9%99%A9%E4%B8%8D%E4%BA%9A%E4%BA%8E%E6%A0%B8%E6%AD%A6%E5%99%A8\",\n \"英伟达的最新应用更新包含了 DLSS 4.5\": \"https://blog.upx8.com/%E8%8B%B1%E4%BC%9F%E8%BE%BE%E7%9A%84%E6%9C%80%E6%96%B0%E5%BA%94%E7%94%A8%E6%9B%B4%E6%96%B0%E5%8C%85%E5%90%AB%E4%BA%86-DLSS-4-5\",\n \"美国将暂停办理对75个国家的所有签证\": \"https://blog.upx8.com/%E7%BE%8E%E5%9B%BD%E5%B0%86%E6%9A%82%E5%81%9C%E5%8A%9E%E7%90%86%E5%AF%B975%E4%B8%AA%E5%9B%BD%E5%AE%B6%E7%9A%84%E6%89%80%E6%9C%89%E7%AD%BE%E8%AF%81\"\n },\n \"安全分析与研究\": {\n \"伪装成WPS银狐最新攻击样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247495361&idx=1&sn=f7e930b509de28bf6a10314a6b56a299\"\n },\n \"黑鸟\": {\n \"星链在伊朗：卫星互联网在电子战中的技术分析\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451184808&idx=1&sn=8ec8a713ac6debef2612864072c425ef\"\n },\n \"安全内参\": {\n \"泄露近60万患者健康信息，地方医疗检测机构赔偿超1500万元\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515460&idx=1&sn=91b596850f995a77bce822a38c95ed89\",\n \"美国防部认证并推广三大零信任网络安全解决方案\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515460&idx=2&sn=0f0132fb9f0e0d4da137a1829d99b306\"\n },\n \"代码卫士\": {\n \"微软2026年1月补丁星期二值得关注的漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524868&idx=1&sn=511dcdb0c6fcd3cd07ef7783b225bcf4\",\n \"OpenSSH 严重漏洞可导致 Moxa 以太网交换机易受RCE攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524868&idx=2&sn=734a45fb6b2c137eff46cd0261228384\"\n },\n \"青山青吖\": {\n \"从3929开始，本轮走到哪里了？（20260114） | 黄金\": \"https://mp.weixin.qq.com/s?__biz=MzI5NzAzMDg0NA==&mid=2650698625&idx=1&sn=1fbee190037b35801120cabafe8a7a59\"\n },\n \"天黑说嘿话\": {\n \"从古代故事看网络安全：那些藏在历史里的攻击原理\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485958&idx=1&sn=c2757e446af30c077f6eb0751e4d1d28\"\n },\n \"阿里云应急响应\": {\n \"云上安全态势报告-2025年12月\": \"https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486395&idx=1&sn=795c556703cf84d206867b39239411f6\"\n },\n \"二道情报贩子\": {\n \"网红和OnlyFans模特申请O-1签证的现象日益增多：“这就是现在的美国梦”\": \"https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489976&idx=1&sn=01dd38ea027b52cb6e879764bec7b7bf\"\n },\n \"DataCon大数据安全分析竞赛\": {\n \"【论文分享】从混乱到清晰：面向安全分析的综合性JavaScript反混淆\": \"https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247489500&idx=1&sn=ed64944685ed6d4a478c52f6d98b379a\"\n },\n \"奇安信 CERT\": {\n \"微软1月补丁日多个产品安全漏洞风险通告：1个在野利用、8个紧急漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504481&idx=1&sn=4a9739d375bee82302c907aab53accbd\"\n },\n \"网安杂谈\": {\n \"网安杂谈知识记录本2026.1.14\": \"https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650889928&idx=1&sn=3e295b73f42008cb01388c93e65c9c9f\"\n },\n \"中国信息安全\": {\n \"前沿 | 智能体安全风险评估与防御技术综述\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257467&idx=1&sn=096e97bdb53fa85a49ee926a8f5e3efe\",\n \"CNNVD | 关于Apache Struts安全漏洞的通报\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257467&idx=2&sn=39a85214b1acf94004aeefa1206d4efe\",\n \"专家解读 | 从我国电子政务十年建设成效看“十五五”电子政务发展趋势\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257467&idx=3&sn=8bb67cb6da57720269bcc00a8b24e279\",\n \"观点 | 人工智能全球治理的伦理建构\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257467&idx=4&sn=688c5eae0fe5b65d3c4770a890582cca\"\n },\n \"全频带阻塞干扰\": {\n \"特勤局手册 | 一位情报局技术行动专家的自白\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648959054&idx=1&sn=8cb7eda15272483aac9692b0520aaec7\"\n },\n \"绿盟科技CERT\": {\n \"【安全更新】微软1月安全更新多个产品高危漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489476&idx=1&sn=3520c03b51e279ce544a362114c705d2\"\n },\n \"安全圈\": {\n \"【安全圈】男子 3 个月内 25 次入侵美国最高法院电子文件系统，将出庭认罪\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073709&idx=2&sn=bdcf4fd4004c144accb7db47b946bbd6\",\n \"【安全圈】微软桌面窗口管理器0Day漏洞遭野外利用\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073709&idx=3&sn=28e46901cfcbe9c4eaf461852c6db800\",\n \"【安全圈】恶意Chrome扩展程序伪装交易工具窃取MEXC交易所API密钥\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073709&idx=4&sn=3fa972269a967909f36a43433f24760d\"\n },\n \"极客公园\": {\n \"冲进 CES 中央馆 C 位，追觅的速度有多快？\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653097164&idx=1&sn=113bcd585190f7d1c50ee85b08e64817\",\n \"首个实时世界模型发布：视频媒介的「交互」时代开始了\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653097149&idx=1&sn=07025d73af36b5e369c9993225aabbfd\",\n \"美国政府正式批准英伟达 H200 芯片对华出口；死了么 App 官宣改名；DeepSeek 梁文峰发新论文透露 V4 架构 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653097134&idx=1&sn=1a7205cc7b77c41f1eb585bb0a4cb0ef\"\n },\n \"安全牛\": {\n \"别再让“人力防火墙”打脸了! 2026年，你的员工到底是防线还是“漏勺”？\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140119&idx=1&sn=724dc578379e192aaf5c1103224dba8c\",\n \"【邀请函】破阵阁・网安淬锋公开赛邀您参加！现金奖、京东卡、证书已就位！\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140119&idx=2&sn=ba6cbd92253ca66db06c2f938e071ef6\"\n },\n \"数世咨询\": {\n \"《全球数据泄露态势月度报告》（2025年12月）\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541470&idx=1&sn=d03c94281651f1e49de2cfdccdd35714\"\n },\n \"吾爱破解论坛\": {\n \"404 那只猫，现在手机也能好好“圈”了\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143492&idx=1&sn=2b35e3524c10a82beb0003f7a79173c5\"\n },\n \"复旦白泽战队\": {\n \"成果分享 | 智能体漏洞检测 [ASE'25, Security'25/26, BlackHat EU]\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247497514&idx=1&sn=7ed15683104dc3efaac59deb8bb680ba\"\n },\n \"看雪学苑\": {\n \"ιldb 脚本 —— 你才叫 lldb，我叫 \\\"约塔 ldb\\\"\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608141&idx=1&sn=c8dad55246b2999ac66dab20f2b48fba\",\n \"周五20点直播 | 想挖IoT漏洞？这个Tenda 0day案例你不能错过\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608141&idx=2&sn=c19b6cf882e4ef220bac802d3136a28b\",\n \"恶意Chrome扩展伪装交易工具窃取MEXC交易所API密钥\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608141&idx=3&sn=f0d641262020efb1748e5902daad1ad9\"\n },\n \"XCTF联赛\": {\n \"报名启动 | 2026年第九届中国高校智能机器人创意大赛-软件系统安全赛正式开启报名！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247516124&idx=1&sn=3a34dd1b0d5299645ca6e6db869f8257\"\n },\n \"火绒安全\": {\n \"银狐后门——Python库压缩包篡改与Chrome伪装攻击分析\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247529934&idx=1&sn=031d0fb53916be60af61124b52ebd09c\",\n \"2026-01微软漏洞通告\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247529934&idx=2&sn=1ca685ecb422e7ac54f77133cfce709a\",\n \"火绒小问答 ——「个人版」功能使用类top问题解答\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247529934&idx=3&sn=65221b0853ca2f6fa25d451984799b74\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247529934&idx=4&sn=f15716c49b89154812150cec614bc86e\"\n },\n \"国家互联网应急中心CNCERT\": {\n \"网络安全信息与动态周报2026年第2期（1月5日-1月11日）\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501122&idx=1&sn=ba1f83c7be92459ef8a2df695003df02\"\n },\n \"嘶吼专业版\": {\n \"盘点2025年改变网络安全游戏规则的十大网络安全关键词\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586351&idx=1&sn=5f0e6aad4aff9731621a20cbb897371f\",\n \"BreachForums黑客论坛再遭数据泄露 用户数据库被公之于众\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586351&idx=2&sn=11becc430925420c4c99947d7ee4a860\"\n },\n \"情报分析师\": {\n \"情景分析法——情报分析师手中的\\\"水晶球\\\"\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650566329&idx=1&sn=17ae69cdf5987c80a65effb2cbb9ea39\",\n \"G7密谋“去我化”关键矿产链\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650566329&idx=2&sn=1932df9e378ea18430b67656260653ba\"\n },\n \"恒脑与AI\": {\n \"境外组织正用250份“毒数据”污染全球AI\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247497318&idx=1&sn=22e9e659048f27843a16029f77baf84a\"\n },\n \"迪哥讲事\": {\n \"通过设置验证码为0来绕过双因子验证机制\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498926&idx=1&sn=cb178579033fbeb6204ca599c8390c37\"\n },\n \"深信服千里目安全技术中心\": {\n \"【漏洞通告】Apache Struts XML外部实体注入漏洞（CVE-2025-68493）\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524963&idx=1&sn=bdc6b135d8846c856337ff22dcefe3f0\",\n \"微软补丁日安全通告|1月份\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524963&idx=2&sn=1a1864c3e8fb782ac655ae67376f28b8\",\n \"网络安全信息与动态周报2026年第2期（1月5日-1月11日）\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524963&idx=3&sn=2f09512e9d17dd10a7f833e3d4ffd28a\"\n },\n \"字节跳动技术团队\": {\n \"火山引擎日志服务-AI时代的数据存储分析底座\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247517962&idx=1&sn=931e2c5cebbe272ce3ba186307a457a9\"\n },\n \"ICT Security Magazine\": {\n \"Analisi forense di modelli AI/ML: audit, rilevamento bias e manomissioni\": \"https://www.ictsecuritymagazine.com/articoli/analisi-forense-ai/\"\n },\n \"悬镜安全\": {\n \"灵脉IAST 5.4 | AI漏洞治理 X 业务逻辑漏洞检测\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647797602&idx=1&sn=1fabd021b6f8a2d023b859a39731989f\"\n },\n \"Schneier on Security\": {\n \"Hacking Wheelchairs over Bluetooth\": \"https://www.schneier.com/blog/archives/2026/01/hacking-wheelchairs-over-bluetooth.html\",\n \"Upcoming Speaking Engagements\": \"https://www.schneier.com/blog/archives/2026/01/upcoming-speaking-engagements-52.html\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"OpenAI's hidden ChatGPT Translate tool takes on Google Translate\": \"https://www.bleepingcomputer.com/news/artificial-intelligence/openais-hidden-chatgpt-translate-tool-takes-on-google-translate/\",\n \"South Korean giant Kyowon confirms data theft in ransomware attack\": \"https://www.bleepingcomputer.com/news/security/south-korean-giant-kyowon-confirms-data-theft-in-ransomware-attack/\",\n \"Microsoft disrupts RedVDS cybercrime platform behind $40 million in scam losses\": \"https://therecord.media/microsoft-redvds-cybercrime-scam\",\n \"France fines Free Mobile €42 million over 2024 data breach incident\": \"https://www.bleepingcomputer.com/news/security/france-fines-free-mobile-42-million-over-2024-data-breach-incident/\",\n \"Exploit code public for critical FortiSIEM command injection flaw\": \"https://www.bleepingcomputer.com/news/security/exploit-code-public-for-critical-fortisiem-command-injection-flaw/\",\n \"California AG to probe Musk’s Grok for nonconsensual deepfakes\": \"https://therecord.media/california-grok-deepfakes-investigation\",\n \"Verizon Wireless outage puts phones in SOS mode without cell service\": \"https://www.bleepingcomputer.com/news/mobile/verizon-wireless-outage-puts-phones-in-sos-mode-without-cell-service/\",\n \"“La tua tessera sanitaria è in scadenza”, ma è phishing: come difendersi\": \"https://www.cybersecurity360.it/nuove-minacce/la-tua-tessera-sanitaria-e-in-scadenza-ma-e-phishing-come-difendersi/\",\n \"French data regulator fines telco subsidiaries $48 million over data breach\": \"https://therecord.media/france-data-regulator-fine\",\n \"Ugandan officials turn off internet on eve of national elections\": \"https://therecord.media/uganda-internet-shutdown-elections\",\n \"From Telegram to Takedown: The Fall of NoName057’s Cyber PsyOp\": \"https://mrtiepolo.medium.com/from-telegram-to-takedown-the-fall-of-noname057s-cyber-psyop-16ecfb0e2665\",\n \"Western cyber agencies warn about threats to industrial operational technology\": \"https://therecord.media/cyber-agencies-warn-of-industrial-system-threats\",\n \"Poland says it repelled major cyberattack on power grid, blames Russia\": \"https://therecord.media/poland-cyberattack-grid-russia\",\n \"Microsoft updates Windows DLL that triggered security alerts\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-updates-windows-dll-that-triggered-security-alerts/\",\n \"Update: Scope of the Avosina Healthcare Solutions Data Breach Clarified\": \"https://www.suspectfile.com/update-scope-of-the-avosina-healthcare-solutions-data-breach-clarified/\",\n \"Patch Tuesday di gennaio 2026: Microsoft corregge due zero-day, di cui una già sfruttata\": \"https://www.cybersecurity360.it/news/patch-tuesday-di-gennaio-2026-microsoft-corregge-due-zero-day-di-cui-una-gia-sfruttata/\",\n \"Ukraine appoints digital chief as defense minister to drive military reform\": \"https://therecord.media/ukraine-digital-chief-transformation\",\n \"Microsoft smantella RedVDS: sotto i fari la convergenza tra cloud abusato, GenAI e crimine\": \"https://www.cybersecurity360.it/news/microsoft-smantella-redvds-sotto-i-fari-la-convergenza-tra-cloud-abusato-ia-generativa-e-criminalita/\",\n \"ConsentFix debrief: Insights from the new OAuth phishing attack\": \"https://www.bleepingcomputer.com/news/security/consentfix-debrief-insights-from-the-new-oauth-phishing-attack/\",\n \"Reprompt attack let hackers hijack Microsoft Copilot sessions\": \"https://www.bleepingcomputer.com/news/security/reprompt-attack-let-hackers-hijack-microsoft-copilot-sessions/\",\n \"Federal agencies ordered to patch Microsoft Desktop Windows Manager bug\": \"https://therecord.media/desktop-windows-manager-vulnerability-added-to-cisa-list\",\n \"Cyberattack forces Belgian hospital to transfer critical care patients\": \"https://therecord.media/belgium-hospital-cyberattack-antwerp-az-monica\",\n \"Cloud marketplace Pax8 accidentally exposes data on 1,800 MSP partners\": \"https://www.bleepingcomputer.com/news/security/cloud-marketplace-pax8-accidentally-exposes-data-on-1-800-msp-partners/\",\n \"Victorian Department of Education says hackers stole students’ data\": \"https://www.bleepingcomputer.com/news/security/victorian-department-of-education-notifies-parents-of-data-breach/\",\n \"Brushstrokes and breaches with Terryn Valikodath\": \"https://blog.talosintelligence.com/brushstrokes-and-breaches-with-terryn-valikodath/\",\n \"“Truman Show”: la truffa finanziaria che crea una realtà sintetica per ingannare le vittime\": \"https://www.securityinfo.it/2026/01/14/truman-show-la-truffa-finanziaria-che-crea-una-realta-sintetica-per-ingannare-le-vittime/\",\n \"Comunicazione quantistica: la nuova frontiera della sicurezza digitale europea\": \"https://www.guerredirete.it/comunicazione-quantistica-la-nuova-frontiera-della-sicurezza-digitale-europea/\",\n \"Microsoft: Windows 365 update blocks access to Cloud PC sessions\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-365-update-blocks-access-to-cloud-pc-sessions/\",\n \"Cyber security 2026, perché la tecnologia non è più la risposta: i dati del World Economic Forum\": \"https://www.cybersecurity360.it/news/cyber-security-2026-perche-la-tecnologia-non-e-piu-la-risposta-i-dati-del-wef/\",\n \"German Manufacturing Under Phishing Attacks: Tracking a Stealthy AsyncRATCampaign\": \"https://any.run/cybersecurity-blog/german-manufacture-attack/\",\n \"Monroe University says 2024 data breach affects 320,000 people\": \"https://www.bleepingcomputer.com/news/security/monroe-university-says-2024-data-breach-affects-320-000-people/\",\n \"Leveraging Landlock telemetry for Linux detection engineering\": \"https://blog.sekoia.io/leveraging-landlock-telemetry-for-linux-detection-engineering/\",\n \"Così l’IA e il Quantum computing cambieranno la cyber security\": \"https://www.cybersecurity360.it/outlook/cosi-lia-e-il-quantum-computing-cambieranno-la-cyber-security/\",\n \"Patch Tuesday, January 2026 Edition\": \"https://krebsonsecurity.com/2026/01/patch-tuesday-january-2026-edition/\",\n \"California privacy agency appoints surveillance expert to board\": \"https://therecord.media/ccpa-appoints-new-board-member\",\n \"Malware Intercepts Googlebot via IP-Verified Conditional Logic\": \"https://blog.sucuri.net/2026/01/malware-intercepts-googlebot-via-ip-verified-conditional-logic.html\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"Infection repeatedly adds scheduled tasks and increases traffic to the same C2 domain, (Wed, Jan 14th)\": \"https://isc.sans.edu/diary/rss/32628\",\n \"ISC Stormcast For Wednesday, January 14th, 2026 https://isc.sans.edu/podcastdetail/9766, (Wed, Jan 14th)\": \"https://isc.sans.edu/diary/rss/32626\"\n },\n \"Securityinfo.it\": {\n \"“Truman Show”: la truffa finanziaria che crea una realtà sintetica per ingannare le vittime\": \"https://www.securityinfo.it/2026/01/14/truman-show-la-truffa-finanziaria-che-crea-una-realta-sintetica-per-ingannare-le-vittime/?utm_source=rss&utm_medium=rss&utm_campaign=truman-show-la-truffa-finanziaria-che-crea-una-realta-sintetica-per-ingannare-le-vittime\"\n },\n \"Security Affairs\": {\n \"CERT-UA reports PLUGGYAPE cyberattacks on defense forces\": \"https://securityaffairs.com/186910/intelligence/cert-ua-reports-pluggyape-cyberattacks-on-defense-forces.html\",\n \"Fortinet fixed two critical flaws in FortiFone and FortiSIEM\": \"https://securityaffairs.com/186902/security/fortinet-fixed-two-critical-flaws-in-fortifone-and-fortisiem.html\",\n \"U.S. CISA adds a flaw in Microsoft Windows to its Known Exploited Vulnerabilities catalog\": \"https://securityaffairs.com/186898/security/u-s-cisa-adds-a-flaw-in-microsoft-windows-to-its-known-exploited-vulnerabilities-catalog.html\",\n \"Microsoft Patch Tuesday security updates for January 2026 fixed actively exploited zero-day\": \"https://securityaffairs.com/186888/hacking/microsoft-patch-tuesday-security-updates-for-january-2026-fixed-actively-exploited-zero-day.html\"\n },\n \"The Hacker News\": {\n \"Researchers Null-Route Over 550 Kimwolf and Aisuru Botnet Command Servers\": \"https://thehackernews.com/2026/01/kimwolf-botnet-infected-over-2-million.html\",\n \"AI Agents Are Becoming Privilege Escalation Paths\": \"https://thehackernews.com/2026/01/ai-agents-are-becoming-privilege.html\",\n \"Hackers Exploit c-ares DLL Side-Loading to Bypass Security and Deploy Malware\": \"https://thehackernews.com/2026/01/hackers-exploit-c-ares-dll-side-loading.html\",\n \"Fortinet Fixes Critical FortiSIEM Flaw Allowing Unauthenticated Remote Code Execution\": \"https://thehackernews.com/2026/01/fortinet-fixes-critical-fortisiem-flaw.html\",\n \"New Research: 64% of 3rd-Party Applications Access Sensitive Data Without Justification\": \"https://thehackernews.com/2026/01/new-research-64-of-3rd-party.html\",\n \"Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited\": \"https://thehackernews.com/2026/01/microsoft-fixes-114-windows-flaws-in.html\",\n \"Critical Node.js Vulnerability Can Cause Server Crashes via async_hooks Stack Overflow\": \"https://thehackernews.com/2026/01/critical-nodejs-vulnerability-can-cause.html\",\n \"PLUGGYAPE Malware Uses Signal and WhatsApp to Target Ukrainian Defense Forces\": \"https://thehackernews.com/2026/01/pluggyape-malware-uses-signal-and.html\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"Breachforums\": \"https://www.reddit.com/r/blackhat/comments/1qcp7nc/breachforums/\",\n \"Where do you buy your equipment?\": \"https://www.reddit.com/r/blackhat/comments/1qcigpo/where_do_you_buy_your_equipment/\",\n \"Looking for tool that generate spammy backlinks\": \"https://www.reddit.com/r/blackhat/comments/1qcen6f/looking_for_tool_that_generate_spammy_backlinks/\"\n },\n \"Deep Web\": {\n \"Helpp !\": \"https://www.reddit.com/r/deepweb/comments/1qciwkd/helpp/\"\n },\n \"Information Security\": {\n \"German Manufacturing Under Phishing Attacks: Tracking a Stealthy AsyncRAT Campaign\": \"https://www.reddit.com/r/Information_Security/comments/1qcvu0p/german_manufacturing_under_phishing_attacks/\",\n \"Ransomware surged 126% in 2025. Recovery is where most teams struggled.\": \"https://www.reddit.com/r/Information_Security/comments/1qcp1uz/ransomware_surged_126_in_2025_recovery_is_where/\",\n \"Data loss isn’t always caused by hackers, it’s often the result of human actions.\": \"https://www.reddit.com/r/Information_Security/comments/1qckfiu/data_loss_isnt_always_caused_by_hackers_its_often/\"\n },\n \"Deeplinks\": {\n \"So, You’ve Hit an Age Gate. What Now?\": \"https://www.eff.org/deeplinks/2026/01/so-youve-hit-age-gate-what-now\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Multiple XSS in Meta Conversion API Gateway Leading to Zero-Click Account Takeover\": \"https://www.reddit.com/r/netsec/comments/1qcpsp9/multiple_xss_in_meta_conversion_api_gateway/\",\n \"I'm The Captain Now: Hijacking a global ocean supply chain network\": \"https://www.reddit.com/r/netsec/comments/1qcpxu6/im_the_captain_now_hijacking_a_global_ocean/\",\n \"Bad Vibes: Comparing the Secure Coding Capabilities of Popular Coding Agents\": \"https://www.reddit.com/r/netsec/comments/1qcmri9/bad_vibes_comparing_the_secure_coding/\",\n \"Fortinet Forticlient EMS RCE CVE-2025-59922 and one IMG tag to rule them all\": \"https://www.reddit.com/r/netsec/comments/1qciz0v/fortinet_forticlient_ems_rce_cve202559922_and_one/\",\n \"Go Big or GO HOME!\": \"https://www.reddit.com/r/netsec/comments/1qcuong/go_big_or_go_home/\"\n },\n \"Computer Forensics\": {\n \"Digital Forensics resources for university exam\": \"https://www.reddit.com/r/computerforensics/comments/1qcsw4l/digital_forensics_resources_for_university_exam/\",\n \"When do digital images stop being trustworthy forensic evidence?\": \"https://www.reddit.com/r/computerforensics/comments/1qco9bp/when_do_digital_images_stop_being_trustworthy/\",\n \"CRU WriteBlocking Validation Utility\": \"https://www.reddit.com/r/computerforensics/comments/1qcdefo/cru_writeblocking_validation_utility/\"\n },\n \"Krebs on Security\": {\n \"Patch Tuesday, January 2026 Edition\": \"https://krebsonsecurity.com/2026/01/patch-tuesday-january-2026-edition/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"The Future Of Proactive Security Before Building an AI Enabled Enterprise - Erik Nost - BSW #430\": \"http://sites.libsyn.com/18678/the-future-of-proactive-security-before-building-an-ai-enabled-enterprise-erik-nost-bsw-430\"\n },\n \"Your Open Hacker Community\": {\n \"Hardware Exploration Alternative ways to trigger boot on a Tecno Pova 2 (MT6769Z) without using PWR pads\": \"https://www.reddit.com/r/HowToHack/comments/1qceevd/hardware_exploration_alternative_ways_to_trigger/\",\n \"How to see someones Private Instagram account\": \"https://www.reddit.com/r/HowToHack/comments/1qcyahk/how_to_see_someones_private_instagram_account/\"\n },\n \"360数字安全\": {\n \"AI如何重塑安全？360安全智能体的年度答卷\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247584573&idx=1&sn=1d7d0ef1673f28a9506e016622dae5c1\"\n }\n}"}, "afb242bb141100302c07928a7a1899a0a7ab95bf": {"t": 1785772237.9485154, "n": 32344, "h": "1e50d61885f20966", "c": "{\n \"paper - Last paper\": {\n \"基于大语言模型的特征级对抗攻击：针对安卓恶意软件检测器\": \"https://paper.seebug.org/3450/\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2026-01-14 Review\": \"http://www.sec-wiki.com/?2026-01-14\"\n },\n \"Microsoft Security Blog\": {\n \"Microsoft named a Leader in IDC MarketScape for Unified AI Governance Platforms\": \"https://www.microsoft.com/en-us/security/blog/2026/01/14/microsoft-named-a-leader-in-idc-marketscape-for-unified-ai-governance-platforms/\",\n \"Inside RedVDS: How a single virtual desktop provider fueled worldwide cybercriminal operations\": \"https://www.microsoft.com/en-us/security/blog/2026/01/14/inside-redvds-how-a-single-virtual-desktop-provider-fueled-worldwide-cybercriminal-operations/\"\n },\n \"Doonsec's feed\": {\n \"星链在伊朗：卫星互联网在电子战中的技术分析\": \"https://mp.weixin.qq.com/s/mZkjATxViB9FM54lnWyt-Q\",\n \"【接口漏洞第六章第一节】你以为前端参数可控就安全了？聊聊服务器端参数污染\": \"https://mp.weixin.qq.com/s/urblBuPWzhxefl75bq_Cpw\",\n \"各个数据库sql注入及waf绕过\": \"https://mp.weixin.qq.com/s/CDVqIqe-pphdlTJjZmv-xA\",\n \"拒绝信息差，全网最全渗透测试靶场推荐【2026最新版】\": \"https://mp.weixin.qq.com/s/UAx7xScTIOdWsnKscjKLtw\",\n \"T-Tech技术回放 | 戴国浩解读：大模型推理效率的核心博弈\": \"https://mp.weixin.qq.com/s/hCawqU1L4wSwLueFDR1KeA\",\n \"Agentic AI ！供应链安全“无人驾驶”时代\": \"https://mp.weixin.qq.com/s/TrDza5m99GKX9EmI-jZqFw\",\n \"每日课程更新\": \"https://mp.weixin.qq.com/s/lrOZmw4xwwlnEiIxpI099w\",\n \"【免杀】bypass 测试\": \"https://mp.weixin.qq.com/s/boXq2h-FatPa46fARgcKAw\",\n \"吃瓜！携程被立案调查为哪般？\": \"https://mp.weixin.qq.com/s/9y8nFICb0NSGbV5Q5vPFig\",\n \"追踪诈骗虚拟货币团伙 渗透内部,世上没有免费的午餐\": \"https://mp.weixin.qq.com/s/TqjqSF5fqWuRWW0UDXnxNA\",\n \"【APP测试】allsafe靶场\": \"https://mp.weixin.qq.com/s/61EiUVVl21l7nR-NFUq_Hw\",\n \"高危漏洞威胁情报合集 (2026-01-14）\": \"https://mp.weixin.qq.com/s/OuRt_afnVoQ21XrCIabGYQ\",\n \"【AI安全】Agentic AI 降临！软件供应链安全进入“无人驾驶”时代\": \"https://mp.weixin.qq.com/s/CbvP-9CvJo4AvIhIiP5vvA\",\n \"最新！又一行业数据安全管理办法面向社会征集建议\": \"https://mp.weixin.qq.com/s/S7PDXh2XYguGVETjq-KLyg\",\n \"喜报！赛博研究院收到上海市通信管理局的感谢信\": \"https://mp.weixin.qq.com/s/EgJ6FhmUpkkdqxT_EfDI9Q\",\n \"星链--轨道上的特洛伊木马\": \"https://mp.weixin.qq.com/s/aZyVp2ORuikgV7TRUYCsJg\",\n \"【大话工控安全】工业控制系统行业知识：电力行业天然气发电场景\": \"https://mp.weixin.qq.com/s/XcioTKcbmTBq-mqHoxGUUg\",\n \"一文看懂：网络安全中那些“听起来很玄”的安全模型\": \"https://mp.weixin.qq.com/s/4cMkFsfOk8O9905nVPpGqw\",\n \"反垄断？\": \"https://mp.weixin.qq.com/s/hbWf1lpMEsHqlwQ-IPhtPg\",\n \"关键的FortiSIEM漏洞允许攻击者通过TCP数据包执行任意命令\": \"https://mp.weixin.qq.com/s/QnyzSIVUuNWYE15IivvDkA\",\n \"tarzan-cms：snakeyaml反序列化(ScriptEngineManager利用链)\": \"https://mp.weixin.qq.com/s/xc-kXLgLE0UPB6qPIsPJyw\",\n \"WebDAV+frp内网穿透工具实现像访问本地硬盘一样访问远程NAS\": \"https://mp.weixin.qq.com/s/08ebn1aR50JIG4hArDzu9w\",\n \"边上网边学英语？Ries 外语学习插件，让 AI 帮你营造学习环境\": \"https://mp.weixin.qq.com/s/QcIhbeWzwVtP2X3DRi3AFg\",\n \"日均不到 1.05 元！也许是苹果最具性价比的产品……\": \"https://mp.weixin.qq.com/s/KWmh8QGQ9uJiDGshy1RccQ\",\n \"APT | “金眼狗”组织水坑网站攻击活动\": \"https://mp.weixin.qq.com/s/HTpBduTnQK5wSJ1i_RA3jw\",\n \"【漏洞通告】Apache Struts XML外部实体注入漏洞（CVE-2025-68493）\": \"https://mp.weixin.qq.com/s/kF0D21R7rvIFKCqRdbIg9w\",\n \"微软补丁日安全通告|1月份\": \"https://mp.weixin.qq.com/s/YtlwJnxSBjjRBJIvmeYzqw\",\n \"网络安全信息与动态周报2026年第2期（1月5日-1月11日）\": \"https://mp.weixin.qq.com/s/hCUNb9P9TwNg-kOgp5ehcg\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"n8n Workflow Expression Remote Code Execution\": \"https://cxsecurity.com/issue/WLB-2026010008\"\n },\n \"Armin Ronacher's Thoughts and Writings\": {\n \"Porting MiniJinja to Go With an Agent\": \"https://lucumr.pocoo.org/2026/1/14/minijinja-go-port/\"\n },\n \"Tenable Blog\": {\n \"CVE-2025-64155: Exploit Code Released for Critical Fortinet FortiSIEM Command Injection Vulnerability\": \"https://www.tenable.com/blog/cve-2025-64155-exploit-code-released-for-critical-fortinet-fortisiem-command-injection\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Wed Jan 14 11:12:18 UTC 2026\": \"https://github.com/trickest/cve/commit/0fd5103c1c8297766c9ae244917eafd05ec09dc6\"\n },\n \"奇安信攻防社区\": {\n \"深度实例分析：攻防视角下的AI框架组件中的注入漏洞\": \"https://forum.butian.net/share/4713\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"盘点2025年改变网络安全游戏规则的七大网络安全关键词\": \"https://www.4hou.com/posts/vwnM\",\n \"BreachForums黑客论坛再遭数据泄露 用户数据库被公之于众\": \"https://www.4hou.com/posts/pn4m\"\n },\n \"LevelBlue Blog\": {\n \"Identity & Beyond: 2026 Incident Response Predictions\": \"https://levelblue.com/blogs/levelblue-blog/identity-and-beyond-2026-incident-response-predictions/\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"双重严重：Ruckus IoT控制器因硬编码密钥泄露面临root权限远程代码执行\": \"https://www.anquanke.com/post/id/314315\",\n \"攻击者借助伪造PDF将合法远程监控管理工具武器化\": \"https://www.anquanke.com/post/id/314309\",\n \"蜜罐陷阱(HoneyTrap)——抵御越狱攻击的全新大语言模型防御框架\": \"https://www.anquanke.com/post/id/314328\",\n \"高危漏洞CVE-2025-52694：研华设备存在 SQL 注入，可导致 IoT设备被完全攻陷\": \"https://www.anquanke.com/post/id/314324\",\n \"n8n供应链攻击：滥用社区节点窃取OAuth令牌\": \"https://www.anquanke.com/post/id/314316\",\n \"高危警报：Moxa交换机存在OpenSSH远程代码执行漏洞（CVSS 9.8）\": \"https://www.anquanke.com/post/id/314327\",\n \"ValleyRAT_S2病毒攻击组织：投放隐匿恶意软件，窃取金融敏感信息\": \"https://www.anquanke.com/post/id/314334\",\n \"苹果确认谷歌 Gemini 将为 Siri 提供技术支持，强调隐私仍是核心优先级\": \"https://www.anquanke.com/post/id/314310\",\n \"行业热度褪去：戴尔坦言“AI PC”叙事未获消费者认可\": \"https://www.anquanke.com/post/id/314306\",\n \"2026 年Meta战略转向：押注闭源 AI，加码核能投资争夺行业主导权\": \"https://www.anquanke.com/post/id/314304\"\n },\n \"ElcomSoft blog\": {\n \"Web Browser Forensics in Digital Triage\": \"https://blog.elcomsoft.com/2026/01/web-browser-forensics-in-digital-triage/\"\n },\n \"ongoing by Tim Bray\": {\n \"Losing 1½ Million Lines of Go\": \"https://www.tbray.org/ongoing/When/202x/2026/01/14/Unicode-Properties\"\n },\n \"Horizon3.ai\": {\n \"CVE-2025-37164\": \"https://horizon3.ai/attack-research/vulnerabilities/cve-2025-37164/\",\n \"From Patch Tuesday to Pentest Wednesday®: When Proving Compliance Becomes Cyber Resilience\": \"https://horizon3.ai/intelligence/blogs/patch-tuesday-to-pentest-wednesday-cyber-resilience/\"\n },\n \"LevelBlue SpiderLabs Blog\": {\n \"Preparing for the AI Job Market: A Security Professional's Roadmap\": \"https://levelblue.com/blogs/spiderlabs-blog/preparing-for-the-ai-job-market-a-security-professionals-roadmap/\"\n },\n \"Reverse Engineering\": {\n \"Game Reverse Engineering - One Hit Kills Hack\": \"https://www.reddit.com/r/ReverseEngineering/comments/1qclj71/game_reverse_engineering_one_hit_kills_hack/\",\n \"FileDumper v1.0.1 - Simple Memory Forensic Dumper for Windows (Python 2 + memorpy) – Built with Grok in a Late-Night Session\": \"https://www.reddit.com/r/ReverseEngineering/comments/1qcxt37/filedumper_v101_simple_memory_forensic_dumper_for/\"\n },\n \"Malwarebytes\": {\n \"Phishing scammers are posting fake “account restricted” comments on LinkedIn\": \"https://www.malwarebytes.com/blog/news/2026/01/phishing-scammers-are-posting-fake-account-restricted-comments-on-linkedin\",\n \"Online shoppers at risk as Magecart skimming hits major payment networks\": \"https://www.malwarebytes.com/blog/news/2026/01/online-shoppers-at-risk-as-magecart-skimming-hits-major-payment-networks\",\n \"How real software downloads can hide remote backdoors\": \"https://www.malwarebytes.com/blog/threat-intel/2026/01/how-real-software-downloads-can-hide-remote-backdoors\"\n },\n \"Intigriti\": {\n \"Reflecting on 2025, shaping 2026. A fireside chat with Intigriti leadership\": \"https://www.intigriti.com/blog/business-insights/a-fireside-chat-with-intigriti-leadership\"\n },\n \"rtl-sdr.com\": {\n \"New Upcoming Crowdfunded SDRs from Wavelet Lab: xSDR and sSDR\": \"https://www.rtl-sdr.com/new-upcoming-crowdfunded-sdrs-from-wavelet-lab-xsdr-and-ssdr/\",\n \"Tech Minds: Testing Out A New Signals Intelligence Tool Called Intercept\": \"https://www.rtl-sdr.com/tech-minds-testing-out-a-new-signals-intelligence-tool-called-intercept/\"\n },\n \"HackerNews\": {\n \"能源巨头披露数据泄露事件，客户完整数据遭窃\": \"https://hackernews.cc/archives/62264\",\n \"韩国大型企业教元集团疑遭勒索软件攻击\": \"https://hackernews.cc/archives/62260\",\n \"荷兰一黑客因其入侵港口系统协助毒品走私被判 7 年\": \"https://hackernews.cc/archives/62258\",\n \"比利时 AZ Monica 医院遭网络攻击，被迫关闭服务器、取消手术并转移危重病人\": \"https://hackernews.cc/archives/62255\",\n \"新型高级 Linux 恶意软件 VoidLink 瞄准云和容器环境\": \"https://hackernews.cc/archives/62252\"\n },\n \"Shostack & Friends Blog\": {\n \"Threat Modeling Essentials at Archimedes 2026 Healthcare Security Week\": \"https://shostack.org/blog/threat-modeling-essentials-archimedes-2026-hcsw/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"伊朗如何关闭互联网\": \"https://www.solidot.org/story?sid=83308\",\n \"安全研究员发现针对云服务器的 Linux 恶意程序\": \"https://www.solidot.org/story?sid=83307\",\n \"《呆伯特》作者 Scott Adams 因癌症去世\": \"https://www.solidot.org/story?sid=83306\",\n \"内存短缺冲击 AI PC\": \"https://www.solidot.org/story?sid=83305\",\n \"伊朗断网六天\": \"https://www.solidot.org/story?sid=83304\",\n \"北极野火数量在上升\": \"https://www.solidot.org/story?sid=83303\",\n \"美国附条件解禁对华 AI 半导体出口\": \"https://www.solidot.org/story?sid=83302\",\n \"美国五角大楼发现有设备与哈瓦那综合症相关\": \"https://www.solidot.org/story?sid=83301\",\n \"Chrome/Chromium 恢复支持 JPEG-XL 图像\": \"https://www.solidot.org/story?sid=83300\",\n \"Wine 11.0 释出\": \"https://www.solidot.org/story?sid=83299\",\n \"一加 CEO 刘作虎被台湾通缉\": \"https://www.solidot.org/story?sid=83298\"\n },\n \"Black Hills Information Security, Inc.\": {\n \"Finding the Right Penetration Testing Company\": \"https://www.blackhillsinfosec.com/finding-the-right-penetration-testing-company/\"\n },\n \"黑海洋Wiki | Web开发工具包 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台\": {\n \"巴菲特再发警示：AI的危险不亚于核武器\": \"https://blog.upx8.com/%E5%B7%B4%E8%8F%B2%E7%89%B9%E5%86%8D%E5%8F%91%E8%AD%A6%E7%A4%BA-AI%E7%9A%84%E5%8D%B1%E9%99%A9%E4%B8%8D%E4%BA%9A%E4%BA%8E%E6%A0%B8%E6%AD%A6%E5%99%A8\",\n \"英伟达的最新应用更新包含了 DLSS 4.5\": \"https://blog.upx8.com/%E8%8B%B1%E4%BC%9F%E8%BE%BE%E7%9A%84%E6%9C%80%E6%96%B0%E5%BA%94%E7%94%A8%E6%9B%B4%E6%96%B0%E5%8C%85%E5%90%AB%E4%BA%86-DLSS-4-5\",\n \"美国将暂停办理对75个国家的所有签证\": \"https://blog.upx8.com/%E7%BE%8E%E5%9B%BD%E5%B0%86%E6%9A%82%E5%81%9C%E5%8A%9E%E7%90%86%E5%AF%B975%E4%B8%AA%E5%9B%BD%E5%AE%B6%E7%9A%84%E6%89%80%E6%9C%89%E7%AD%BE%E8%AF%81\"\n },\n \"安全分析与研究\": {\n \"伪装成WPS银狐最新攻击样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247495361&idx=1&sn=f7e930b509de28bf6a10314a6b56a299\"\n },\n \"黑鸟\": {\n \"星链在伊朗：卫星互联网在电子战中的技术分析\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451184808&idx=1&sn=8ec8a713ac6debef2612864072c425ef\"\n },\n \"安全内参\": {\n \"泄露近60万患者健康信息，地方医疗检测机构赔偿超1500万元\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515460&idx=1&sn=91b596850f995a77bce822a38c95ed89\",\n \"美国防部认证并推广三大零信任网络安全解决方案\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515460&idx=2&sn=0f0132fb9f0e0d4da137a1829d99b306\"\n },\n \"代码卫士\": {\n \"微软2026年1月补丁星期二值得关注的漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524868&idx=1&sn=511dcdb0c6fcd3cd07ef7783b225bcf4\",\n \"OpenSSH 严重漏洞可导致 Moxa 以太网交换机易受RCE攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524868&idx=2&sn=734a45fb6b2c137eff46cd0261228384\"\n },\n \"青山青吖\": {\n \"从3929开始，本轮走到哪里了？（20260114） | 黄金\": \"https://mp.weixin.qq.com/s?__biz=MzI5NzAzMDg0NA==&mid=2650698625&idx=1&sn=1fbee190037b35801120cabafe8a7a59\"\n },\n \"天黑说嘿话\": {\n \"从古代故事看网络安全：那些藏在历史里的攻击原理\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485958&idx=1&sn=c2757e446af30c077f6eb0751e4d1d28\"\n },\n \"阿里云应急响应\": {\n \"云上安全态势报告-2025年12月\": \"https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486395&idx=1&sn=795c556703cf84d206867b39239411f6\"\n },\n \"二道情报贩子\": {\n \"网红和OnlyFans模特申请O-1签证的现象日益增多：“这就是现在的美国梦”\": \"https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489976&idx=1&sn=01dd38ea027b52cb6e879764bec7b7bf\"\n },\n \"DataCon大数据安全分析竞赛\": {\n \"【论文分享】从混乱到清晰：面向安全分析的综合性JavaScript反混淆\": \"https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247489500&idx=1&sn=ed64944685ed6d4a478c52f6d98b379a\"\n },\n \"奇安信 CERT\": {\n \"微软1月补丁日多个产品安全漏洞风险通告：1个在野利用、8个紧急漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504481&idx=1&sn=4a9739d375bee82302c907aab53accbd\"\n },\n \"网安杂谈\": {\n \"网安杂谈知识记录本2026.1.14\": \"https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650889928&idx=1&sn=3e295b73f42008cb01388c93e65c9c9f\"\n },\n \"中国信息安全\": {\n \"前沿 | 智能体安全风险评估与防御技术综述\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257467&idx=1&sn=096e97bdb53fa85a49ee926a8f5e3efe\",\n \"CNNVD | 关于Apache Struts安全漏洞的通报\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257467&idx=2&sn=39a85214b1acf94004aeefa1206d4efe\",\n \"专家解读 | 从我国电子政务十年建设成效看“十五五”电子政务发展趋势\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257467&idx=3&sn=8bb67cb6da57720269bcc00a8b24e279\",\n \"观点 | 人工智能全球治理的伦理建构\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257467&idx=4&sn=688c5eae0fe5b65d3c4770a890582cca\"\n },\n \"全频带阻塞干扰\": {\n \"特勤局手册 | 一位情报局技术行动专家的自白\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648959054&idx=1&sn=8cb7eda15272483aac9692b0520aaec7\"\n },\n \"绿盟科技CERT\": {\n \"【安全更新】微软1月安全更新多个产品高危漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489476&idx=1&sn=3520c03b51e279ce544a362114c705d2\"\n },\n \"安全圈\": {\n \"【安全圈】男子 3 个月内 25 次入侵美国最高法院电子文件系统，将出庭认罪\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073709&idx=2&sn=bdcf4fd4004c144accb7db47b946bbd6\",\n \"【安全圈】微软桌面窗口管理器0Day漏洞遭野外利用\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073709&idx=3&sn=28e46901cfcbe9c4eaf461852c6db800\",\n \"【安全圈】恶意Chrome扩展程序伪装交易工具窃取MEXC交易所API密钥\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073709&idx=4&sn=3fa972269a967909f36a43433f24760d\"\n },\n \"极客公园\": {\n \"冲进 CES 中央馆 C 位，追觅的速度有多快？\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653097164&idx=1&sn=113bcd585190f7d1c50ee85b08e64817\",\n \"首个实时世界模型发布：视频媒介的「交互」时代开始了\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653097149&idx=1&sn=07025d73af36b5e369c9993225aabbfd\",\n \"美国政府正式批准英伟达 H200 芯片对华出口；死了么 App 官宣改名；DeepSeek 梁文峰发新论文透露 V4 架构 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653097134&idx=1&sn=1a7205cc7b77c41f1eb585bb0a4cb0ef\"\n },\n \"安全牛\": {\n \"别再让“人力防火墙”打脸了! 2026年，你的员工到底是防线还是“漏勺”？\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140119&idx=1&sn=724dc578379e192aaf5c1103224dba8c\",\n \"【邀请函】破阵阁・网安淬锋公开赛邀您参加！现金奖、京东卡、证书已就位！\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140119&idx=2&sn=ba6cbd92253ca66db06c2f938e071ef6\"\n },\n \"数世咨询\": {\n \"《全球数据泄露态势月度报告》（2025年12月）\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541470&idx=1&sn=d03c94281651f1e49de2cfdccdd35714\"\n },\n \"吾爱破解论坛\": {\n \"404 那只猫，现在手机也能好好“圈”了\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143492&idx=1&sn=2b35e3524c10a82beb0003f7a79173c5\"\n },\n \"复旦白泽战队\": {\n \"成果分享 | 智能体漏洞检测 [ASE'25, Security'25/26, BlackHat EU]\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247497514&idx=1&sn=7ed15683104dc3efaac59deb8bb680ba\"\n },\n \"看雪学苑\": {\n \"ιldb 脚本 —— 你才叫 lldb，我叫 \\\"约塔 ldb\\\"\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608141&idx=1&sn=c8dad55246b2999ac66dab20f2b48fba\",\n \"周五20点直播 | 想挖IoT漏洞？这个Tenda 0day案例你不能错过\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608141&idx=2&sn=c19b6cf882e4ef220bac802d3136a28b\",\n \"恶意Chrome扩展伪装交易工具窃取MEXC交易所API密钥\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608141&idx=3&sn=f0d641262020efb1748e5902daad1ad9\"\n },\n \"XCTF联赛\": {\n \"报名启动 | 2026年第九届中国高校智能机器人创意大赛-软件系统安全赛正式开启报名！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247516124&idx=1&sn=3a34dd1b0d5299645ca6e6db869f8257\"\n },\n \"火绒安全\": {\n \"银狐后门——Python库压缩包篡改与Chrome伪装攻击分析\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247529934&idx=1&sn=031d0fb53916be60af61124b52ebd09c\",\n \"2026-01微软漏洞通告\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247529934&idx=2&sn=1ca685ecb422e7ac54f77133cfce709a\",\n \"火绒小问答 ——「个人版」功能使用类top问题解答\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247529934&idx=3&sn=65221b0853ca2f6fa25d451984799b74\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247529934&idx=4&sn=f15716c49b89154812150cec614bc86e\"\n },\n \"国家互联网应急中心CNCERT\": {\n \"网络安全信息与动态周报2026年第2期（1月5日-1月11日）\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501122&idx=1&sn=ba1f83c7be92459ef8a2df695003df02\"\n },\n \"嘶吼专业版\": {\n \"盘点2025年改变网络安全游戏规则的十大网络安全关键词\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586351&idx=1&sn=5f0e6aad4aff9731621a20cbb897371f\",\n \"BreachForums黑客论坛再遭数据泄露 用户数据库被公之于众\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586351&idx=2&sn=11becc430925420c4c99947d7ee4a860\"\n },\n \"情报分析师\": {\n \"情景分析法——情报分析师手中的\\\"水晶球\\\"\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650566329&idx=1&sn=17ae69cdf5987c80a65effb2cbb9ea39\",\n \"G7密谋“去我化”关键矿产链\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650566329&idx=2&sn=1932df9e378ea18430b67656260653ba\"\n },\n \"恒脑与AI\": {\n \"境外组织正用250份“毒数据”污染全球AI\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247497318&idx=1&sn=22e9e659048f27843a16029f77baf84a\"\n },\n \"迪哥讲事\": {\n \"通过设置验证码为0来绕过双因子验证机制\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498926&idx=1&sn=cb178579033fbeb6204ca599c8390c37\"\n },\n \"深信服千里目安全技术中心\": {\n \"【漏洞通告】Apache Struts XML外部实体注入漏洞（CVE-2025-68493）\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524963&idx=1&sn=bdc6b135d8846c856337ff22dcefe3f0\",\n \"微软补丁日安全通告|1月份\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524963&idx=2&sn=1a1864c3e8fb782ac655ae67376f28b8\",\n \"网络安全信息与动态周报2026年第2期（1月5日-1月11日）\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524963&idx=3&sn=2f09512e9d17dd10a7f833e3d4ffd28a\"\n },\n \"字节跳动技术团队\": {\n \"火山引擎日志服务-AI时代的数据存储分析底座\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247517962&idx=1&sn=931e2c5cebbe272ce3ba186307a457a9\"\n },\n \"ICT Security Magazine\": {\n \"Analisi forense di modelli AI/ML: audit, rilevamento bias e manomissioni\": \"https://www.ictsecuritymagazine.com/articoli/analisi-forense-ai/\"\n },\n \"悬镜安全\": {\n \"灵脉IAST 5.4 | AI漏洞治理 X 业务逻辑漏洞检测\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647797602&idx=1&sn=1fabd021b6f8a2d023b859a39731989f\"\n },\n \"Schneier on Security\": {\n \"Hacking Wheelchairs over Bluetooth\": \"https://www.schneier.com/blog/archives/2026/01/hacking-wheelchairs-over-bluetooth.html\",\n \"Upcoming Speaking Engagements\": \"https://www.schneier.com/blog/archives/2026/01/upcoming-speaking-engagements-52.html\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"OpenAI's hidden ChatGPT Translate tool takes on Google Translate\": \"https://www.bleepingcomputer.com/news/artificial-intelligence/openais-hidden-chatgpt-translate-tool-takes-on-google-translate/\",\n \"South Korean giant Kyowon confirms data theft in ransomware attack\": \"https://www.bleepingcomputer.com/news/security/south-korean-giant-kyowon-confirms-data-theft-in-ransomware-attack/\",\n \"Microsoft disrupts RedVDS cybercrime platform behind $40 million in scam losses\": \"https://therecord.media/microsoft-redvds-cybercrime-scam\",\n \"France fines Free Mobile €42 million over 2024 data breach incident\": \"https://www.bleepingcomputer.com/news/security/france-fines-free-mobile-42-million-over-2024-data-breach-incident/\",\n \"Exploit code public for critical FortiSIEM command injection flaw\": \"https://www.bleepingcomputer.com/news/security/exploit-code-public-for-critical-fortisiem-command-injection-flaw/\",\n \"California AG to probe Musk’s Grok for nonconsensual deepfakes\": \"https://therecord.media/california-grok-deepfakes-investigation\",\n \"Verizon Wireless outage puts phones in SOS mode without cell service\": \"https://www.bleepingcomputer.com/news/mobile/verizon-wireless-outage-puts-phones-in-sos-mode-without-cell-service/\",\n \"“La tua tessera sanitaria è in scadenza”, ma è phishing: come difendersi\": \"https://www.cybersecurity360.it/nuove-minacce/la-tua-tessera-sanitaria-e-in-scadenza-ma-e-phishing-come-difendersi/\",\n \"French data regulator fines telco subsidiaries $48 million over data breach\": \"https://therecord.media/france-data-regulator-fine\",\n \"Ugandan officials turn off internet on eve of national elections\": \"https://therecord.media/uganda-internet-shutdown-elections\",\n \"From Telegram to Takedown: The Fall of NoName057’s Cyber PsyOp\": \"https://mrtiepolo.medium.com/from-telegram-to-takedown-the-fall-of-noname057s-cyber-psyop-16ecfb0e2665\",\n \"Western cyber agencies warn about threats to industrial operational technology\": \"https://therecord.media/cyber-agencies-warn-of-industrial-system-threats\",\n \"Poland says it repelled major cyberattack on power grid, blames Russia\": \"https://therecord.media/poland-cyberattack-grid-russia\",\n \"Microsoft updates Windows DLL that triggered security alerts\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-updates-windows-dll-that-triggered-security-alerts/\",\n \"Update: Scope of the Avosina Healthcare Solutions Data Breach Clarified\": \"https://www.suspectfile.com/update-scope-of-the-avosina-healthcare-solutions-data-breach-clarified/\",\n \"Patch Tuesday di gennaio 2026: Microsoft corregge due zero-day, di cui una già sfruttata\": \"https://www.cybersecurity360.it/news/patch-tuesday-di-gennaio-2026-microsoft-corregge-due-zero-day-di-cui-una-gia-sfruttata/\",\n \"Ukraine appoints digital chief as defense minister to drive military reform\": \"https://therecord.media/ukraine-digital-chief-transformation\",\n \"Microsoft smantella RedVDS: sotto i fari la convergenza tra cloud abusato, GenAI e crimine\": \"https://www.cybersecurity360.it/news/microsoft-smantella-redvds-sotto-i-fari-la-convergenza-tra-cloud-abusato-ia-generativa-e-criminalita/\",\n \"ConsentFix debrief: Insights from the new OAuth phishing attack\": \"https://www.bleepingcomputer.com/news/security/consentfix-debrief-insights-from-the-new-oauth-phishing-attack/\",\n \"Reprompt attack let hackers hijack Microsoft Copilot sessions\": \"https://www.bleepingcomputer.com/news/security/reprompt-attack-let-hackers-hijack-microsoft-copilot-sessions/\",\n \"Federal agencies ordered to patch Microsoft Desktop Windows Manager bug\": \"https://therecord.media/desktop-windows-manager-vulnerability-added-to-cisa-list\",\n \"Cyberattack forces Belgian hospital to transfer critical care patients\": \"https://therecord.media/belgium-hospital-cyberattack-antwerp-az-monica\",\n \"Cloud marketplace Pax8 accidentally exposes data on 1,800 MSP partners\": \"https://www.bleepingcomputer.com/news/security/cloud-marketplace-pax8-accidentally-exposes-data-on-1-800-msp-partners/\",\n \"Victorian Department of Education says hackers stole students’ data\": \"https://www.bleepingcomputer.com/news/security/victorian-department-of-education-notifies-parents-of-data-breach/\",\n \"Brushstrokes and breaches with Terryn Valikodath\": \"https://blog.talosintelligence.com/brushstrokes-and-breaches-with-terryn-valikodath/\",\n \"“Truman Show”: la truffa finanziaria che crea una realtà sintetica per ingannare le vittime\": \"https://www.securityinfo.it/2026/01/14/truman-show-la-truffa-finanziaria-che-crea-una-realta-sintetica-per-ingannare-le-vittime/\",\n \"Comunicazione quantistica: la nuova frontiera della sicurezza digitale europea\": \"https://www.guerredirete.it/comunicazione-quantistica-la-nuova-frontiera-della-sicurezza-digitale-europea/\",\n \"Microsoft: Windows 365 update blocks access to Cloud PC sessions\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-365-update-blocks-access-to-cloud-pc-sessions/\",\n \"Cyber security 2026, perché la tecnologia non è più la risposta: i dati del World Economic Forum\": \"https://www.cybersecurity360.it/news/cyber-security-2026-perche-la-tecnologia-non-e-piu-la-risposta-i-dati-del-wef/\",\n \"German Manufacturing Under Phishing Attacks: Tracking a Stealthy AsyncRATCampaign\": \"https://any.run/cybersecurity-blog/german-manufacture-attack/\",\n \"Monroe University says 2024 data breach affects 320,000 people\": \"https://www.bleepingcomputer.com/news/security/monroe-university-says-2024-data-breach-affects-320-000-people/\",\n \"Leveraging Landlock telemetry for Linux detection engineering\": \"https://blog.sekoia.io/leveraging-landlock-telemetry-for-linux-detection-engineering/\",\n \"Così l’IA e il Quantum computing cambieranno la cyber security\": \"https://www.cybersecurity360.it/outlook/cosi-lia-e-il-quantum-computing-cambieranno-la-cyber-security/\",\n \"Patch Tuesday, January 2026 Edition\": \"https://krebsonsecurity.com/2026/01/patch-tuesday-january-2026-edition/\",\n \"California privacy agency appoints surveillance expert to board\": \"https://therecord.media/ccpa-appoints-new-board-member\",\n \"Malware Intercepts Googlebot via IP-Verified Conditional Logic\": \"https://blog.sucuri.net/2026/01/malware-intercepts-googlebot-via-ip-verified-conditional-logic.html\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"Infection repeatedly adds scheduled tasks and increases traffic to the same C2 domain, (Wed, Jan 14th)\": \"https://isc.sans.edu/diary/rss/32628\",\n \"ISC Stormcast For Wednesday, January 14th, 2026 https://isc.sans.edu/podcastdetail/9766, (Wed, Jan 14th)\": \"https://isc.sans.edu/diary/rss/32626\"\n },\n \"Securityinfo.it\": {\n \"“Truman Show”: la truffa finanziaria che crea una realtà sintetica per ingannare le vittime\": \"https://www.securityinfo.it/2026/01/14/truman-show-la-truffa-finanziaria-che-crea-una-realta-sintetica-per-ingannare-le-vittime/?utm_source=rss&utm_medium=rss&utm_campaign=truman-show-la-truffa-finanziaria-che-crea-una-realta-sintetica-per-ingannare-le-vittime\"\n },\n \"Security Affairs\": {\n \"CERT-UA reports PLUGGYAPE cyberattacks on defense forces\": \"https://securityaffairs.com/186910/intelligence/cert-ua-reports-pluggyape-cyberattacks-on-defense-forces.html\",\n \"Fortinet fixed two critical flaws in FortiFone and FortiSIEM\": \"https://securityaffairs.com/186902/security/fortinet-fixed-two-critical-flaws-in-fortifone-and-fortisiem.html\",\n \"U.S. CISA adds a flaw in Microsoft Windows to its Known Exploited Vulnerabilities catalog\": \"https://securityaffairs.com/186898/security/u-s-cisa-adds-a-flaw-in-microsoft-windows-to-its-known-exploited-vulnerabilities-catalog.html\",\n \"Microsoft Patch Tuesday security updates for January 2026 fixed actively exploited zero-day\": \"https://securityaffairs.com/186888/hacking/microsoft-patch-tuesday-security-updates-for-january-2026-fixed-actively-exploited-zero-day.html\"\n },\n \"The Hacker News\": {\n \"Researchers Null-Route Over 550 Kimwolf and Aisuru Botnet Command Servers\": \"https://thehackernews.com/2026/01/kimwolf-botnet-infected-over-2-million.html\",\n \"AI Agents Are Becoming Privilege Escalation Paths\": \"https://thehackernews.com/2026/01/ai-agents-are-becoming-privilege.html\",\n \"Hackers Exploit c-ares DLL Side-Loading to Bypass Security and Deploy Malware\": \"https://thehackernews.com/2026/01/hackers-exploit-c-ares-dll-side-loading.html\",\n \"Fortinet Fixes Critical FortiSIEM Flaw Allowing Unauthenticated Remote Code Execution\": \"https://thehackernews.com/2026/01/fortinet-fixes-critical-fortisiem-flaw.html\",\n \"New Research: 64% of 3rd-Party Applications Access Sensitive Data Without Justification\": \"https://thehackernews.com/2026/01/new-research-64-of-3rd-party.html\",\n \"Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited\": \"https://thehackernews.com/2026/01/microsoft-fixes-114-windows-flaws-in.html\",\n \"Critical Node.js Vulnerability Can Cause Server Crashes via async_hooks Stack Overflow\": \"https://thehackernews.com/2026/01/critical-nodejs-vulnerability-can-cause.html\",\n \"PLUGGYAPE Malware Uses Signal and WhatsApp to Target Ukrainian Defense Forces\": \"https://thehackernews.com/2026/01/pluggyape-malware-uses-signal-and.html\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"Breachforums\": \"https://www.reddit.com/r/blackhat/comments/1qcp7nc/breachforums/\",\n \"Where do you buy your equipment?\": \"https://www.reddit.com/r/blackhat/comments/1qcigpo/where_do_you_buy_your_equipment/\",\n \"Looking for tool that generate spammy backlinks\": \"https://www.reddit.com/r/blackhat/comments/1qcen6f/looking_for_tool_that_generate_spammy_backlinks/\"\n },\n \"Deep Web\": {\n \"Helpp !\": \"https://www.reddit.com/r/deepweb/comments/1qciwkd/helpp/\"\n },\n \"Information Security\": {\n \"German Manufacturing Under Phishing Attacks: Tracking a Stealthy AsyncRAT Campaign\": \"https://www.reddit.com/r/Information_Security/comments/1qcvu0p/german_manufacturing_under_phishing_attacks/\",\n \"Ransomware surged 126% in 2025. Recovery is where most teams struggled.\": \"https://www.reddit.com/r/Information_Security/comments/1qcp1uz/ransomware_surged_126_in_2025_recovery_is_where/\",\n \"Data loss isn’t always caused by hackers, it’s often the result of human actions.\": \"https://www.reddit.com/r/Information_Security/comments/1qckfiu/data_loss_isnt_always_caused_by_hackers_its_often/\"\n },\n \"Deeplinks\": {\n \"So, You’ve Hit an Age Gate. What Now?\": \"https://www.eff.org/deeplinks/2026/01/so-youve-hit-age-gate-what-now\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Multiple XSS in Meta Conversion API Gateway Leading to Zero-Click Account Takeover\": \"https://www.reddit.com/r/netsec/comments/1qcpsp9/multiple_xss_in_meta_conversion_api_gateway/\",\n \"I'm The Captain Now: Hijacking a global ocean supply chain network\": \"https://www.reddit.com/r/netsec/comments/1qcpxu6/im_the_captain_now_hijacking_a_global_ocean/\",\n \"Bad Vibes: Comparing the Secure Coding Capabilities of Popular Coding Agents\": \"https://www.reddit.com/r/netsec/comments/1qcmri9/bad_vibes_comparing_the_secure_coding/\",\n \"Fortinet Forticlient EMS RCE CVE-2025-59922 and one IMG tag to rule them all\": \"https://www.reddit.com/r/netsec/comments/1qciz0v/fortinet_forticlient_ems_rce_cve202559922_and_one/\",\n \"Go Big or GO HOME!\": \"https://www.reddit.com/r/netsec/comments/1qcuong/go_big_or_go_home/\"\n },\n \"Computer Forensics\": {\n \"Digital Forensics resources for university exam\": \"https://www.reddit.com/r/computerforensics/comments/1qcsw4l/digital_forensics_resources_for_university_exam/\",\n \"When do digital images stop being trustworthy forensic evidence?\": \"https://www.reddit.com/r/computerforensics/comments/1qco9bp/when_do_digital_images_stop_being_trustworthy/\",\n \"CRU WriteBlocking Validation Utility\": \"https://www.reddit.com/r/computerforensics/comments/1qcdefo/cru_writeblocking_validation_utility/\"\n },\n \"Krebs on Security\": {\n \"Patch Tuesday, January 2026 Edition\": \"https://krebsonsecurity.com/2026/01/patch-tuesday-january-2026-edition/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"The Future Of Proactive Security Before Building an AI Enabled Enterprise - Erik Nost - BSW #430\": \"http://sites.libsyn.com/18678/the-future-of-proactive-security-before-building-an-ai-enabled-enterprise-erik-nost-bsw-430\"\n },\n \"Your Open Hacker Community\": {\n \"Hardware Exploration Alternative ways to trigger boot on a Tecno Pova 2 (MT6769Z) without using PWR pads\": \"https://www.reddit.com/r/HowToHack/comments/1qceevd/hardware_exploration_alternative_ways_to_trigger/\",\n \"How to see someones Private Instagram account\": \"https://www.reddit.com/r/HowToHack/comments/1qcyahk/how_to_see_someones_private_instagram_account/\"\n },\n \"360数字安全\": {\n \"AI如何重塑安全？360安全智能体的年度答卷\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247584573&idx=1&sn=1d7d0ef1673f28a9506e016622dae5c1\"\n }\n}"}}, "archive/daily/2025/2025-11-03.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747323.600499, "n": 12480, "h": "86b94109fb24899d", "c": "# 每日安全资讯（2025-11-03）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-11-02 Review](http://www.sec-wiki.com/?2025-11-02)\n- Recent Commits to cve:main\n - [ ] [Update Sun Nov 2 11:31:45 UTC 2025](https://github.com/trickest/cve/commit/b8c57a022449afaf29a3bc2baab6ab9e45047b8e)\n- Taxodium\n - [ ] [关于 \"Give footnotes the boot\" 的思考](https://taxodium.ink/on-give-footnotes-the-boot.html)\n - [ ] [Zine#44 - 善意、远离手机、阅读、万圣节主题](https://taxodium.ink/44.html)\n- Doonsec's feed\n - [ ] [Rocke Group 最新挖矿变种通过 IDEA 破解项目传播](https://mp.weixin.qq.com/s?__biz=Mzg4NzkwMDA5NQ==&mid=2247484993&idx=1&sn=77578605fa3d1bec54ea9eaf3292e5c5)\n - [ ] [做低位消费防守](https://mp.weixin.qq.com/s?__biz=MzkzMjIwMDY4Nw==&mid=2247486308&idx=1&sn=8fb79d39afb8fa7231b6c9dd5c949e2f)\n - [ ] [可能是今年值得一看的泄露数据之一](https://mp.weixin.qq.com/s?__biz=MzkxNDYxMjM5OA==&mid=2247485926&idx=1&sn=cccbbfc0888337529936808f3fc9bcbc)\n - [ ] [从 DeepSeek-OCR 看 OCR 技术革新对电子数据取证应用](https://mp.weixin.qq.com/s?__biz=MzI1NDMxOTkyNw==&mid=2247486253&idx=1&sn=65948108739ce555608fb9979e0a8dab)\n - [ ] [2025 Reqable+Yakit 抓安卓知乎数据包~~](https://mp.weixin.qq.com/s?__biz=Mzg5Mjg5MjU0MQ==&mid=2247483830&idx=1&sn=6cfbc2f3876d8d51b44d7c1f2625f170)\n - [ ] [别把桌面当防线：Docker Desktop 的 Engine API 未授权访问（CVE-2025-9074）](https://mp.weixin.qq.com/s?__biz=MzkwMDcyMjQxOQ==&mid=2247484732&idx=1&sn=d28f22d90bc94e947dd883499c7ba723)\n - [ ] [2025 年年底实战视角：腾讯云 WAF XSS 绕过技术的分类逻辑与实现原理](https://mp.weixin.qq.com/s?__biz=MzkwOTY3Njg4Nw==&mid=2247484449&idx=1&sn=0490515ca3b976530e27f46dc5fd0d16)\n - [ ] [【工具】MDUT-轻量级数据库管理工具](https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247488436&idx=1&sn=659520bf69ece7c64b8ce4259177b7c2)\n - [ ] [从控股公司下手挖掘漏洞的骚思路](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498494&idx=1&sn=bac97ff85c737b657923306d701e70b5)\n - [ ] [网站安全监测与分析平台 - Libra](https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486635&idx=1&sn=eb47fa2170e2a4e191c6f469ed27c557)\n - [ ] [Linux应急响应：我的时间线排查法分享](https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486829&idx=1&sn=6971dff8d230692d8744ad95d2bc66be)\n - [ ] [转载:94年任职国企，信息安全工程师，已购房，喜欢音乐&钢琴，情绪稳定的小姐姐想脱单｜一起奔向更好的生活～](https://mp.weixin.qq.com/s?__biz=Mzg4Mjg5MjMxOA==&mid=2247484028&idx=1&sn=29505d218b76d3245078ebe9555f31e5)\n - [ ] [天幕行动：Tor 行动的目标是俄罗斯和白俄罗斯的军队](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533385&idx=1&sn=d546f4b1025d9ebedf310855053c5ad1)\n - [ ] [04 宇宙的十二种假说：我们或许身在模拟中](https://mp.weixin.qq.com/s?__biz=Mzk5MDgzMDExMg==&mid=2247484573&idx=1&sn=7da00df822b5b8ec63fa5528cbeb8474)\n - [ ] [XXE漏洞前置知识](https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247490915&idx=1&sn=0644988af352918c6e44fa7872bf16ea)\n - [ ] [！！！！！！！](https://mp.weixin.qq.com/s?__biz=MzIyMDkxMTk4MQ==&mid=2247484124&idx=1&sn=2135930cd2704a2b79c0188ffb169db3)\n - [ ] [2025第二届“数证杯”电子取证大赛WP-计算机取证部分](https://mp.weixin.qq.com/s?__biz=Mzk4ODk4NDEyOA==&mid=2247484646&idx=1&sn=35263437e31d6505279091580f1e9df1)\n - [ ] [【攻防实战】通达OA文件上传联动Cobalt Strike打穿三层内网(下)](https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247504627&idx=1&sn=cddf03762b4341b0017947565ff18bf0)\n - [ ] [人工智能正塑造新治理范式](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637866&idx=1&sn=a44bfb5a14d45e56c0104ecdf3772d04)\n - [ ] [2025年全国行业职业技能竞赛——第二届全国网络安全行业职业技能大赛正式启动](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637866&idx=2&sn=82c86b302d683c926a8575756dfb902f)\n - [ ] [Agent Session Smuggling：恶意AI如何劫持受害者Agent](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637866&idx=3&sn=30678c411950e30a0f8e07c33ee33bb5)\n - [ ] [《2025年暴露管理指数》深度解读：高危漏洞激增20%](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637866&idx=4&sn=4e23302e960340ceb71edeeaa4dcccac)\n - [ ] [俄罗斯海军软件及内部敏感数据泄露【约250GB可完整下载】](https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247487479&idx=1&sn=163e2472218c70161dd0a93facc30e1d)\n - [ ] [CSS注入：仅用CSS进行攻击（第一部分）](https://mp.weixin.qq.com/s?__biz=MzkzNzM1MTcwMA==&mid=2247490367&idx=1&sn=df44b25376eefe34ed8664f221baab38)\n - [ ] [攻破 GitLab: 攻击和防御自托管 CI/CD 环境](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247491003&idx=1&sn=893f79db9297391a2a9f3d3477649457)\n - [ ] [打靶日记 DIGITALWORLD.LOCAL: BRAVERY](https://mp.weixin.qq.com/s?__biz=Mzk1Nzc0MzY3NA==&mid=2247487955&idx=1&sn=539dab8ce42e2150fe5509265638a741)\n - [ ] [CrowdStrike业务详细介绍](https://mp.weixin.qq.com/s?__biz=MzIyMjYzNDgzMg==&mid=2247487705&idx=1&sn=a0244911a5224b4095a84366067ed178)\n - [ ] [记edusrc某高危漏洞的简单挖掘](https://mp.weixin.qq.com/s?__biz=Mzk1NzgzMjkxOQ==&mid=2247485816&idx=1&sn=0df6eb6ed0a0296152aff918aff4ef3a)\n - [ ] [远离赌博！德州扑克洗牌机漏洞可操控赌局](https://mp.weixin.qq.com/s?__biz=MzkwNDg1NTU0Mg==&mid=2247484407&idx=1&sn=1e5e0ba7047b044c7a194eb1be3281cf)\n - [ ] [WebSocket漏洞挖掘新手指南：轻松发现隐藏的XSS](https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797284&idx=1&sn=a6e02f657b19a94cebcceae764c71630)\n - [ ] [每天一个网络知识：可变长度子网掩码 VLSM](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247532087&idx=1&sn=d37eb37fe2274d827bface382e2a3276)\n - [ ] [2025Dozer招新赛wp](https://mp.weixin.qq.com/s?__biz=MzI4MTIxMzkxMg==&mid=2247485833&idx=1&sn=9f7c48027ecec8c694df02e71729f855)\n - [ ] [8万元，国产信创私有化部署，破解县域无人机AI巡检平台落地难题](https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454941157&idx=1&sn=b63f67eb0f573b247f47059347b9e407)\n - [ ] [信安工程师学习笔记（15）恶意代码防范技术原理（下）](https://mp.weixin.qq.com/s?__biz=MzI5MTIwOTQ5MA==&mid=2247488862&idx=1&sn=754d0d3817df0376737cfa8213f31c0b)\n - [ ] [美联储会议：AI与支付核心观点](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932871&idx=1&sn=e1d0f4fe2759ed52704739d35def7c1a)\n - [ ] [火山引擎、科大讯飞、安硕信息、中关村科金中标广西北部湾银行大模型应用平台项目](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932871&idx=2&sn=8f369391e4240b6503d72ca0a8cf3170)\n - [ ] [【安全圈】武汉科技公司被黑，黑客自学成才盗转4万！](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072545&idx=1&sn=0899603988a8ad82871a9c835cd68590)\n - [ ] [【安全圈】潜伏十年的 Linux 高危漏洞正被勒索软件利用，影响Ubuntu等系统](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072545&idx=2&sn=c81c7308a4677ee750540927bea32d33)\n - [ ] [【安全圈】黑客利用Windows零日漏洞攻击欧洲多国外交部门，微软未修补](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072545&idx=3&sn=b377ffd060e2d116ea5dc3583fc232c6)\n - [ ] [银狐黑产组织伪装成WPS钓鱼网站最新高级样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494056&idx=1&sn=7aec8460f6266dae1fa9031b761d6923)\n - [ ] [Ghost HTTP 方法：HTTP 动词变异如何绕过现代 WAF 跨中间件层](https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247508008&idx=1&sn=253537743d188d802c0ebc4e2cfd5208)\n - [ ] [2025年四川警察学院电子数据取证分析大比武——数据处理](https://mp.weixin.qq.com/s?__biz=MzYyNTgyMjY2NQ==&mid=2247484111&idx=1&sn=dd2f740c567b96e48f9f0a2eb4050acc)\n - [ ] [智汇信师，网安争锋——青少年CTF练习平台成功协办第二届“电协杯”网络安全大赛](https://mp.weixin.qq.com/s?__biz=MzU3MzEwMTQ3NQ==&mid=2247508181&idx=1&sn=81b573c13d8155f0983b3fde5cc72c69)\n - [ ] [Solar安全洞察 | 10月勒索态势月报：一个默认密码引发的系统雪崩](https://mp.weixin.qq.com/s?__biz=MzU3MzEwMTQ3NQ==&mid=2247508181&idx=2&sn=7eafd613b380e497a5cd68b642b6ab08)\n- Zdziarski\n - [ ] [The AI Learning Plateau](https://www.zdziarski.com/blog/?p=13538)\n- 博客园 - 飘渺红尘✨\n - [ ] [CSPT漏洞浅析 - 飘渺红尘✨](https://www.cnblogs.com/piaomiaohongchen/p/19148914)\n- 安全分析与研究\n - [ ] [银狐黑产组织伪装成WPS钓鱼网站最新高级样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494056&idx=1&sn=7aec8460f6266dae1fa9031b761d6923)\n- 奇客Solidot–传递最新科技情报\n - [ ] [APT 打包工具将要求 Rust 编译器](https://www.solidot.org/story?sid=82698)\n - [ ] [NASA 寻找载入登月的替代方案](https://www.solidot.org/story?sid=82697)\n - [ ] [Steam 用户中 Linux 比例超过 3%](https://www.solidot.org/story?sid=82696)\n- 威努特安全网络\n - [ ] [正式实施!《水利重要数据安全保护要求》解读+下载](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651136968&idx=1&sn=16084ba186bba951358036b8edafe072)\n- 黑鸟\n - [ ] [专用于敏感信息处理的正则表达式合集网站](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183428&idx=1&sn=46bd97ce6baff7b15440b748e3e5f713)\n- 天黑说嘿话\n - [ ] [2025数证杯初赛writeup](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484997&idx=1&sn=b51a8644f065e7e24a077ae5541746d6)\n- 二道情报贩子\n - [ ] [2025编程语言排行](https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489717&idx=1&sn=25b1d25719d14e74889c4f6e8c1dd93c)\n- 安全圈\n - [ ] [【安全圈】武汉科技公司被黑，黑客自学成才盗转4万！](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072545&idx=1&sn=0899603988a8ad82871a9c835cd68590)\n - [ ] [【安全圈】潜伏十年的 Linux 高危漏洞正被勒索软件利用，影响Ubuntu等系统](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072545&idx=2&sn=c81c7308a4677ee750540927bea32d33)\n - [ ] [【安全圈】黑客利用Windows零日漏洞攻击欧洲多国外交部门，微软未修补](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072545&idx=3&sn=b377ffd060e2d116ea5dc3583fc232c6)\n- 电子物证\n - [ ] [【揭秘Windows11取证痕迹的变化】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048741&idx=1&sn=250d50784a2909fc46054a8110604295)\n - [ ] [干货分享：常见远程连接工具取证分析](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048741&idx=2&sn=f0bb6283adbe7a81774cac49ece83354)\n- 极客公园\n - [ ] [苹果，一赚「解」千愁](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653089883&idx=1&sn=b93313d12a5a9c03ea3109d88de418d8)\n - [ ] [每天都和 AI 聊天，你可能已经是个「神经病」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653089848&idx=1&sn=ddb7c5791a4eed3a965c8ddcc9319945)\n - [ ] [特斯拉Cybercab实车曝光，部分量产；何小鹏谈雷军竞争：未来更期待对手是小米；黄仁勋完成10亿美元股票出售 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653089864&idx=1&sn=99a6c25329537648b83163e9a4f125e2)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Penn hacker claims to have stolen 1.2 million donor records in data breach](https://www.bleepingcomputer.com/news/security/university-of-pennsylvania-hacker-claims-1.2-million-donor-data-breach/)\n - [ ] [OpenAI is going Meta route, as it considers memory-based ads on ChatGPT](https://www.bleepingcomputer.com/news/artificial-intelligence/openai-is-going-meta-route-as-it-considers-memory-based-ads-on-chatgpt/)\n - [ ] [Open VSX rotates access tokens used in supply-chain malware attack](https://www.bleepingcomputer.com/news/security/open-vsx-rotates-tokens-used-in-supply-chain-malware-attack/)\n - [ ] [Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody](https://krebsonsecurity.com/2025/11/alleged-jabber-zeus-coder-mricq-in-u-s-custody/)\n - [ ] [DetectionStream: Introducing the Sigma Training Platform](https://kostas-ts.medium.com/detectionstream-introducing-the-sigma-training-platform-574721f18f45)\n - [ ] [Guerre di Rete - OpenAI, giù la maschera e verso l'IPO](https://guerredirete.substack.com/p/guerre-di-rete-openai-giu-la-maschera)\n - [ ] [Info Sec Unplugged [1d] – DR e Cyber recovery (puntata speciale)](https://roccosicilia.com/2025/11/02/info-sec-unplugged-1d-dr-e-cyber-recovery-puntata-speciale/)\n - [ ] [Google confirms AI search will have ads, but they may look different](https://www.bleepingcomputer.com/news/google/google-confirms-ai-search-will-have-ads-but-they-may-look-different/)\n - [ ] [Using Ghidriff to look at heap buffer overflow example](https://fluxsec.red/using-ghidriff-to-examine-heap-buffer-overflow)\n - [ ] [Release Notes: ANY.RUN & ThreatQ Integration, 3,000+ New Rules, and Expanded Detection Coverage](https://any.run/cybersecurity-blog/release-notes-october-2025/)\n - [ ] [China-linked hackers exploited Lanscope flaw as a zero-day in attacks](https://www.bleepingcomputer.com/news/security/china-linked-hackers-exploited-lanscope-flaw-as-a-zero-day-in-attacks/)\n - [ ] [Windows 11 Build 26220.7051 released with “Ask Copilot” feature](https://www.bleepingcomputer.com/news/microsoft/windows-11-build-262207051-released-with-ask-copilot-feature/)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Scans for Port 8530/8531 (TCP). Likely related to WSUS Vulnerability CVE-2025-59287, (Sun, Nov 2nd)](https://isc.sans.edu/diary/rss/32440)\n- Security Affairs\n - [ ] [SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 69](https://securityaffairs.com/184123/malware/security-affairs-malware-newsletter-round-69.html)\n - [ ] [Security Affairs newsletter Round 548 by Pierluigi Paganini – INTERNATIONAL EDITION](https://securityaffairs.com/184115/uncategorized/security-affairs-newsletter-round-548-by-pierluigi-paganini-international-edition.html)\n - [ ] [Ukrainian extradited to US over Conti ransomware involvement](https://securityaffairs.com/184106/security/ukrainian-extradited-to-us-over-conti-ransomware-involvement.html)\n- Krebs on Security\n - [ ] [Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody](https://krebsonsecurity.com/2025/11/alleged-jabber-zeus-coder-mricq-in-u-s-custody/)\n- blackMORE Ops\n - [ ] [yt-dlp Commands for Subtitles, Codec & Folder](https://www.blackmoreops.com/yt-dlp-commands-for-subtitles-codec/)\n"}, "7597f06ddaa55c18a52fdd05c9b1526d9c261f66": {"t": 1785772249.9610245, "n": 12480, "h": "86b94109fb24899d", "c": "# 每日安全资讯（2025-11-03）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-11-02 Review](http://www.sec-wiki.com/?2025-11-02)\n- Recent Commits to cve:main\n - [ ] [Update Sun Nov 2 11:31:45 UTC 2025](https://github.com/trickest/cve/commit/b8c57a022449afaf29a3bc2baab6ab9e45047b8e)\n- Taxodium\n - [ ] [关于 \"Give footnotes the boot\" 的思考](https://taxodium.ink/on-give-footnotes-the-boot.html)\n - [ ] [Zine#44 - 善意、远离手机、阅读、万圣节主题](https://taxodium.ink/44.html)\n- Doonsec's feed\n - [ ] [Rocke Group 最新挖矿变种通过 IDEA 破解项目传播](https://mp.weixin.qq.com/s?__biz=Mzg4NzkwMDA5NQ==&mid=2247484993&idx=1&sn=77578605fa3d1bec54ea9eaf3292e5c5)\n - [ ] [做低位消费防守](https://mp.weixin.qq.com/s?__biz=MzkzMjIwMDY4Nw==&mid=2247486308&idx=1&sn=8fb79d39afb8fa7231b6c9dd5c949e2f)\n - [ ] [可能是今年值得一看的泄露数据之一](https://mp.weixin.qq.com/s?__biz=MzkxNDYxMjM5OA==&mid=2247485926&idx=1&sn=cccbbfc0888337529936808f3fc9bcbc)\n - [ ] [从 DeepSeek-OCR 看 OCR 技术革新对电子数据取证应用](https://mp.weixin.qq.com/s?__biz=MzI1NDMxOTkyNw==&mid=2247486253&idx=1&sn=65948108739ce555608fb9979e0a8dab)\n - [ ] [2025 Reqable+Yakit 抓安卓知乎数据包~~](https://mp.weixin.qq.com/s?__biz=Mzg5Mjg5MjU0MQ==&mid=2247483830&idx=1&sn=6cfbc2f3876d8d51b44d7c1f2625f170)\n - [ ] [别把桌面当防线：Docker Desktop 的 Engine API 未授权访问（CVE-2025-9074）](https://mp.weixin.qq.com/s?__biz=MzkwMDcyMjQxOQ==&mid=2247484732&idx=1&sn=d28f22d90bc94e947dd883499c7ba723)\n - [ ] [2025 年年底实战视角：腾讯云 WAF XSS 绕过技术的分类逻辑与实现原理](https://mp.weixin.qq.com/s?__biz=MzkwOTY3Njg4Nw==&mid=2247484449&idx=1&sn=0490515ca3b976530e27f46dc5fd0d16)\n - [ ] [【工具】MDUT-轻量级数据库管理工具](https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247488436&idx=1&sn=659520bf69ece7c64b8ce4259177b7c2)\n - [ ] [从控股公司下手挖掘漏洞的骚思路](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498494&idx=1&sn=bac97ff85c737b657923306d701e70b5)\n - [ ] [网站安全监测与分析平台 - Libra](https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486635&idx=1&sn=eb47fa2170e2a4e191c6f469ed27c557)\n - [ ] [Linux应急响应：我的时间线排查法分享](https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486829&idx=1&sn=6971dff8d230692d8744ad95d2bc66be)\n - [ ] [转载:94年任职国企，信息安全工程师，已购房，喜欢音乐&钢琴，情绪稳定的小姐姐想脱单｜一起奔向更好的生活～](https://mp.weixin.qq.com/s?__biz=Mzg4Mjg5MjMxOA==&mid=2247484028&idx=1&sn=29505d218b76d3245078ebe9555f31e5)\n - [ ] [天幕行动：Tor 行动的目标是俄罗斯和白俄罗斯的军队](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533385&idx=1&sn=d546f4b1025d9ebedf310855053c5ad1)\n - [ ] [04 宇宙的十二种假说：我们或许身在模拟中](https://mp.weixin.qq.com/s?__biz=Mzk5MDgzMDExMg==&mid=2247484573&idx=1&sn=7da00df822b5b8ec63fa5528cbeb8474)\n - [ ] [XXE漏洞前置知识](https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247490915&idx=1&sn=0644988af352918c6e44fa7872bf16ea)\n - [ ] [！！！！！！！](https://mp.weixin.qq.com/s?__biz=MzIyMDkxMTk4MQ==&mid=2247484124&idx=1&sn=2135930cd2704a2b79c0188ffb169db3)\n - [ ] [2025第二届“数证杯”电子取证大赛WP-计算机取证部分](https://mp.weixin.qq.com/s?__biz=Mzk4ODk4NDEyOA==&mid=2247484646&idx=1&sn=35263437e31d6505279091580f1e9df1)\n - [ ] [【攻防实战】通达OA文件上传联动Cobalt Strike打穿三层内网(下)](https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247504627&idx=1&sn=cddf03762b4341b0017947565ff18bf0)\n - [ ] [人工智能正塑造新治理范式](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637866&idx=1&sn=a44bfb5a14d45e56c0104ecdf3772d04)\n - [ ] [2025年全国行业职业技能竞赛——第二届全国网络安全行业职业技能大赛正式启动](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637866&idx=2&sn=82c86b302d683c926a8575756dfb902f)\n - [ ] [Agent Session Smuggling：恶意AI如何劫持受害者Agent](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637866&idx=3&sn=30678c411950e30a0f8e07c33ee33bb5)\n - [ ] [《2025年暴露管理指数》深度解读：高危漏洞激增20%](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637866&idx=4&sn=4e23302e960340ceb71edeeaa4dcccac)\n - [ ] [俄罗斯海军软件及内部敏感数据泄露【约250GB可完整下载】](https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247487479&idx=1&sn=163e2472218c70161dd0a93facc30e1d)\n - [ ] [CSS注入：仅用CSS进行攻击（第一部分）](https://mp.weixin.qq.com/s?__biz=MzkzNzM1MTcwMA==&mid=2247490367&idx=1&sn=df44b25376eefe34ed8664f221baab38)\n - [ ] [攻破 GitLab: 攻击和防御自托管 CI/CD 环境](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247491003&idx=1&sn=893f79db9297391a2a9f3d3477649457)\n - [ ] [打靶日记 DIGITALWORLD.LOCAL: BRAVERY](https://mp.weixin.qq.com/s?__biz=Mzk1Nzc0MzY3NA==&mid=2247487955&idx=1&sn=539dab8ce42e2150fe5509265638a741)\n - [ ] [CrowdStrike业务详细介绍](https://mp.weixin.qq.com/s?__biz=MzIyMjYzNDgzMg==&mid=2247487705&idx=1&sn=a0244911a5224b4095a84366067ed178)\n - [ ] [记edusrc某高危漏洞的简单挖掘](https://mp.weixin.qq.com/s?__biz=Mzk1NzgzMjkxOQ==&mid=2247485816&idx=1&sn=0df6eb6ed0a0296152aff918aff4ef3a)\n - [ ] [远离赌博！德州扑克洗牌机漏洞可操控赌局](https://mp.weixin.qq.com/s?__biz=MzkwNDg1NTU0Mg==&mid=2247484407&idx=1&sn=1e5e0ba7047b044c7a194eb1be3281cf)\n - [ ] [WebSocket漏洞挖掘新手指南：轻松发现隐藏的XSS](https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797284&idx=1&sn=a6e02f657b19a94cebcceae764c71630)\n - [ ] [每天一个网络知识：可变长度子网掩码 VLSM](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247532087&idx=1&sn=d37eb37fe2274d827bface382e2a3276)\n - [ ] [2025Dozer招新赛wp](https://mp.weixin.qq.com/s?__biz=MzI4MTIxMzkxMg==&mid=2247485833&idx=1&sn=9f7c48027ecec8c694df02e71729f855)\n - [ ] [8万元，国产信创私有化部署，破解县域无人机AI巡检平台落地难题](https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454941157&idx=1&sn=b63f67eb0f573b247f47059347b9e407)\n - [ ] [信安工程师学习笔记（15）恶意代码防范技术原理（下）](https://mp.weixin.qq.com/s?__biz=MzI5MTIwOTQ5MA==&mid=2247488862&idx=1&sn=754d0d3817df0376737cfa8213f31c0b)\n - [ ] [美联储会议：AI与支付核心观点](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932871&idx=1&sn=e1d0f4fe2759ed52704739d35def7c1a)\n - [ ] [火山引擎、科大讯飞、安硕信息、中关村科金中标广西北部湾银行大模型应用平台项目](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932871&idx=2&sn=8f369391e4240b6503d72ca0a8cf3170)\n - [ ] [【安全圈】武汉科技公司被黑，黑客自学成才盗转4万！](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072545&idx=1&sn=0899603988a8ad82871a9c835cd68590)\n - [ ] [【安全圈】潜伏十年的 Linux 高危漏洞正被勒索软件利用，影响Ubuntu等系统](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072545&idx=2&sn=c81c7308a4677ee750540927bea32d33)\n - [ ] [【安全圈】黑客利用Windows零日漏洞攻击欧洲多国外交部门，微软未修补](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072545&idx=3&sn=b377ffd060e2d116ea5dc3583fc232c6)\n - [ ] [银狐黑产组织伪装成WPS钓鱼网站最新高级样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494056&idx=1&sn=7aec8460f6266dae1fa9031b761d6923)\n - [ ] [Ghost HTTP 方法：HTTP 动词变异如何绕过现代 WAF 跨中间件层](https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247508008&idx=1&sn=253537743d188d802c0ebc4e2cfd5208)\n - [ ] [2025年四川警察学院电子数据取证分析大比武——数据处理](https://mp.weixin.qq.com/s?__biz=MzYyNTgyMjY2NQ==&mid=2247484111&idx=1&sn=dd2f740c567b96e48f9f0a2eb4050acc)\n - [ ] [智汇信师，网安争锋——青少年CTF练习平台成功协办第二届“电协杯”网络安全大赛](https://mp.weixin.qq.com/s?__biz=MzU3MzEwMTQ3NQ==&mid=2247508181&idx=1&sn=81b573c13d8155f0983b3fde5cc72c69)\n - [ ] [Solar安全洞察 | 10月勒索态势月报：一个默认密码引发的系统雪崩](https://mp.weixin.qq.com/s?__biz=MzU3MzEwMTQ3NQ==&mid=2247508181&idx=2&sn=7eafd613b380e497a5cd68b642b6ab08)\n- Zdziarski\n - [ ] [The AI Learning Plateau](https://www.zdziarski.com/blog/?p=13538)\n- 博客园 - 飘渺红尘✨\n - [ ] [CSPT漏洞浅析 - 飘渺红尘✨](https://www.cnblogs.com/piaomiaohongchen/p/19148914)\n- 安全分析与研究\n - [ ] [银狐黑产组织伪装成WPS钓鱼网站最新高级样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494056&idx=1&sn=7aec8460f6266dae1fa9031b761d6923)\n- 奇客Solidot–传递最新科技情报\n - [ ] [APT 打包工具将要求 Rust 编译器](https://www.solidot.org/story?sid=82698)\n - [ ] [NASA 寻找载入登月的替代方案](https://www.solidot.org/story?sid=82697)\n - [ ] [Steam 用户中 Linux 比例超过 3%](https://www.solidot.org/story?sid=82696)\n- 威努特安全网络\n - [ ] [正式实施!《水利重要数据安全保护要求》解读+下载](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651136968&idx=1&sn=16084ba186bba951358036b8edafe072)\n- 黑鸟\n - [ ] [专用于敏感信息处理的正则表达式合集网站](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183428&idx=1&sn=46bd97ce6baff7b15440b748e3e5f713)\n- 天黑说嘿话\n - [ ] [2025数证杯初赛writeup](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484997&idx=1&sn=b51a8644f065e7e24a077ae5541746d6)\n- 二道情报贩子\n - [ ] [2025编程语言排行](https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489717&idx=1&sn=25b1d25719d14e74889c4f6e8c1dd93c)\n- 安全圈\n - [ ] [【安全圈】武汉科技公司被黑，黑客自学成才盗转4万！](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072545&idx=1&sn=0899603988a8ad82871a9c835cd68590)\n - [ ] [【安全圈】潜伏十年的 Linux 高危漏洞正被勒索软件利用，影响Ubuntu等系统](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072545&idx=2&sn=c81c7308a4677ee750540927bea32d33)\n - [ ] [【安全圈】黑客利用Windows零日漏洞攻击欧洲多国外交部门，微软未修补](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072545&idx=3&sn=b377ffd060e2d116ea5dc3583fc232c6)\n- 电子物证\n - [ ] [【揭秘Windows11取证痕迹的变化】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048741&idx=1&sn=250d50784a2909fc46054a8110604295)\n - [ ] [干货分享：常见远程连接工具取证分析](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048741&idx=2&sn=f0bb6283adbe7a81774cac49ece83354)\n- 极客公园\n - [ ] [苹果，一赚「解」千愁](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653089883&idx=1&sn=b93313d12a5a9c03ea3109d88de418d8)\n - [ ] [每天都和 AI 聊天，你可能已经是个「神经病」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653089848&idx=1&sn=ddb7c5791a4eed3a965c8ddcc9319945)\n - [ ] [特斯拉Cybercab实车曝光，部分量产；何小鹏谈雷军竞争：未来更期待对手是小米；黄仁勋完成10亿美元股票出售 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653089864&idx=1&sn=99a6c25329537648b83163e9a4f125e2)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Penn hacker claims to have stolen 1.2 million donor records in data breach](https://www.bleepingcomputer.com/news/security/university-of-pennsylvania-hacker-claims-1.2-million-donor-data-breach/)\n - [ ] [OpenAI is going Meta route, as it considers memory-based ads on ChatGPT](https://www.bleepingcomputer.com/news/artificial-intelligence/openai-is-going-meta-route-as-it-considers-memory-based-ads-on-chatgpt/)\n - [ ] [Open VSX rotates access tokens used in supply-chain malware attack](https://www.bleepingcomputer.com/news/security/open-vsx-rotates-tokens-used-in-supply-chain-malware-attack/)\n - [ ] [Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody](https://krebsonsecurity.com/2025/11/alleged-jabber-zeus-coder-mricq-in-u-s-custody/)\n - [ ] [DetectionStream: Introducing the Sigma Training Platform](https://kostas-ts.medium.com/detectionstream-introducing-the-sigma-training-platform-574721f18f45)\n - [ ] [Guerre di Rete - OpenAI, giù la maschera e verso l'IPO](https://guerredirete.substack.com/p/guerre-di-rete-openai-giu-la-maschera)\n - [ ] [Info Sec Unplugged [1d] – DR e Cyber recovery (puntata speciale)](https://roccosicilia.com/2025/11/02/info-sec-unplugged-1d-dr-e-cyber-recovery-puntata-speciale/)\n - [ ] [Google confirms AI search will have ads, but they may look different](https://www.bleepingcomputer.com/news/google/google-confirms-ai-search-will-have-ads-but-they-may-look-different/)\n - [ ] [Using Ghidriff to look at heap buffer overflow example](https://fluxsec.red/using-ghidriff-to-examine-heap-buffer-overflow)\n - [ ] [Release Notes: ANY.RUN & ThreatQ Integration, 3,000+ New Rules, and Expanded Detection Coverage](https://any.run/cybersecurity-blog/release-notes-october-2025/)\n - [ ] [China-linked hackers exploited Lanscope flaw as a zero-day in attacks](https://www.bleepingcomputer.com/news/security/china-linked-hackers-exploited-lanscope-flaw-as-a-zero-day-in-attacks/)\n - [ ] [Windows 11 Build 26220.7051 released with “Ask Copilot” feature](https://www.bleepingcomputer.com/news/microsoft/windows-11-build-262207051-released-with-ask-copilot-feature/)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Scans for Port 8530/8531 (TCP). Likely related to WSUS Vulnerability CVE-2025-59287, (Sun, Nov 2nd)](https://isc.sans.edu/diary/rss/32440)\n- Security Affairs\n - [ ] [SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 69](https://securityaffairs.com/184123/malware/security-affairs-malware-newsletter-round-69.html)\n - [ ] [Security Affairs newsletter Round 548 by Pierluigi Paganini – INTERNATIONAL EDITION](https://securityaffairs.com/184115/uncategorized/security-affairs-newsletter-round-548-by-pierluigi-paganini-international-edition.html)\n - [ ] [Ukrainian extradited to US over Conti ransomware involvement](https://securityaffairs.com/184106/security/ukrainian-extradited-to-us-over-conti-ransomware-involvement.html)\n- Krebs on Security\n - [ ] [Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody](https://krebsonsecurity.com/2025/11/alleged-jabber-zeus-coder-mricq-in-u-s-custody/)\n- blackMORE Ops\n - [ ] [yt-dlp Commands for Subtitles, Codec & Folder](https://www.blackmoreops.com/yt-dlp-commands-for-subtitles-codec/)\n"}}, "archive/daily/2025/2025-05-02.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747323.8357465, "n": 48945, "h": "524a6f27e3339cd0", "c": "# 每日安全资讯（2025-05-02）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-05-01 Review](http://www.sec-wiki.com/?2025-05-01)\n- Trustwave Blog\n - [ ] [Trustwave Takes Home SC Trust Award for Best Managed Security Service](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/trustwave-takes-home-sc-trust-award-for-best-managed-security-service/)\n- Taxodium\n - [ ] [三十岁的日常](https://taxodium.ink//30-years-old.html)\n- Security Boulevard\n - [ ] [Tonic.ai product updates: May 2025](https://securityboulevard.com/2025/05/tonic-ai-product-updates-may-2025/?utm_source=rss&utm_medium=rss&utm_campaign=tonic-ai-product-updates-may-2025)\n - [ ] [Application-Layer Visibility and Security | Contrast ADR vs Traditional Tools | Contrast Security](https://securityboulevard.com/2025/05/application-layer-visibility-and-security-contrast-adr-vs-traditional-tools-contrast-security/?utm_source=rss&utm_medium=rss&utm_campaign=application-layer-visibility-and-security-contrast-adr-vs-traditional-tools-contrast-security)\n - [ ] [BSidesLV24 – Ground Truth – AI In The Human Loop: GenAI In Security Service Delivery](https://securityboulevard.com/2025/05/bsideslv24-ground-truth-ai-in-the-human-loop-genai-in-security-service-delivery/?utm_source=rss&utm_medium=rss&utm_campaign=bsideslv24-ground-truth-ai-in-the-human-loop-genai-in-security-service-delivery)\n - [ ] [The organizational structure of ransomware threat actor groups is evolving before our eyes](https://securityboulevard.com/2025/05/the-organizational-structure-of-ransomware-threat-actor-groups-is-evolving-before-our-eyes/?utm_source=rss&utm_medium=rss&utm_campaign=the-organizational-structure-of-ransomware-threat-actor-groups-is-evolving-before-our-eyes)\n - [ ] [Kubernetes Resource Optimization & Best Practices with Goldilocks](https://securityboulevard.com/2025/05/kubernetes-resource-optimization-best-practices-with-goldilocks/?utm_source=rss&utm_medium=rss&utm_campaign=kubernetes-resource-optimization-best-practices-with-goldilocks)\n - [ ] [The Rise of AI-Driven Cyberattacks: Accelerated Threats Demand Predictive and Real-Time Defenses](https://securityboulevard.com/2025/05/the-rise-of-ai-driven-cyberattacks-accelerated-threats-demand-predictive-and-real-time-defenses/?utm_source=rss&utm_medium=rss&utm_campaign=the-rise-of-ai-driven-cyberattacks-accelerated-threats-demand-predictive-and-real-time-defenses)\n - [ ] [Vulnerability Management: A Race Against Time & Complexity](https://securityboulevard.com/2025/05/vulnerability-management-a-race-against-time-complexity-2/?utm_source=rss&utm_medium=rss&utm_campaign=vulnerability-management-a-race-against-time-complexity-2)\n - [ ] [Report Exposes Soft Security Underbelly of Mobile Computing](https://securityboulevard.com/2025/05/report-exposes-soft-security-underbelly-of-mobile-computing/?utm_source=rss&utm_medium=rss&utm_campaign=report-exposes-soft-security-underbelly-of-mobile-computing)\n - [ ] [BSidesLV24 – Ground Truth – I Won’t Allow My Child To Have A Smartphone: Why Smart Parents Make Not So Smart Children](https://securityboulevard.com/2025/05/bsideslv24-ground-truth-i-wont-allow-my-child-to-have-a-smartphone-why-smart-parents-make-not-so-smart-children/?utm_source=rss&utm_medium=rss&utm_campaign=bsideslv24-ground-truth-i-wont-allow-my-child-to-have-a-smartphone-why-smart-parents-make-not-so-smart-children)\n- Recent Commits to cve:main\n - [ ] [Update Thu May 1 16:03:25 UTC 2025](https://github.com/trickest/cve/commit/a33b0984c0892a54c0c0e962312be3827c226b7f)\n- Microsoft Security Blog\n - [ ] [Analyzing CVE-2025-31191: A macOS security-scoped bookmarks-based sandbox escape](https://www.microsoft.com/en-us/security/blog/2025/05/01/analyzing-cve-2025-31191-a-macos-security-scoped-bookmarks-based-sandbox-escape/)\n - [ ] [Pushing passkeys forward: Microsoft’s latest updates for simpler, safer sign-ins](https://www.microsoft.com/en-us/security/blog/2025/05/01/pushing-passkeys-forward-microsofts-latest-updates-for-simpler-safer-sign-ins/)\n- C-skills\n - [ ] [QUIC trickery](https://c-skills.blogspot.com/2025/05/quic-trickery.html)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [Inventio Lite 4 SQL Injection](https://cxsecurity.com/issue/WLB-2025050009)\n - [ ] [Webenlive CMS - Blind SQL Injection Vulnerability](https://cxsecurity.com/issue/WLB-2025050008)\n - [ ] [unzip-stream 0.3.1 Arbitrary File Write](https://cxsecurity.com/issue/WLB-2025050007)\n - [ ] [AssamLook CMS - Blind SQL Injection Vulnerabilities](https://cxsecurity.com/issue/WLB-2025050006)\n - [ ] [Rejola IT Services - Blind SQL Injection Vulnerability](https://cxsecurity.com/issue/WLB-2025050005)\n - [ ] [Microsoft Windows .XRM-MS File / NTLM Hash Disclosure (Spoofing)](https://cxsecurity.com/issue/WLB-2025050004)\n - [ ] [Zabbix 7.0.0 SQL Injection](https://cxsecurity.com/issue/WLB-2025050003)\n - [ ] [Viper Online - Blind SQL Injection Vulnerability](https://cxsecurity.com/issue/WLB-2025050002)\n - [ ] [Smart Manager 8.27.0 Post-Authenticated SQL Injection](https://cxsecurity.com/issue/WLB-2025050001)\n- InfoSec Write-ups - Medium\n - [ ] [From JS File to Jackpot: How I Found API Keys and Secrets Hidden in Production Code](https://infosecwriteups.com/from-js-file-to-jackpot-how-i-found-api-keys-and-secrets-hidden-in-production-code-87af8750b751?source=rss----7b722bfd1b8d---4)\n - [ ] [Bypassing OTP: Unlocking Vulnerabilities & Securing Your App](https://infosecwriteups.com/bypassing-otp-unlocking-vulnerabilities-securing-your-app-a5eac4727515?source=rss----7b722bfd1b8d---4)\n - [ ] [9 Security Threats in Generative AI Agents](https://infosecwriteups.com/9-security-threats-in-generative-ai-agents-8485aed6efe7?source=rss----7b722bfd1b8d---4)\n - [ ] [Lab: Finding and exploiting an unused API endpoint](https://infosecwriteups.com/lab-finding-and-exploiting-an-unused-api-endpoint-79fa6744f21e?source=rss----7b722bfd1b8d---4)\n - [ ] [Exposing Money Mule Networks on Telegram](https://infosecwriteups.com/exposing-money-mule-networks-on-telegram-381a687e0128?source=rss----7b722bfd1b8d---4)\n - [ ] [$500 Bounty: Hijacking HackerOne via window.opener](https://infosecwriteups.com/500-bounty-hijacking-hackerone-via-window-opener-e16700108e12?source=rss----7b722bfd1b8d---4)\n - [ ] [How I bypassed an IP block… without changing my IP?](https://infosecwriteups.com/how-i-bypassed-an-ip-block-without-changing-my-ip-e8082a43957b?source=rss----7b722bfd1b8d---4)\n - [ ] [Natas2 — Wargames solutions writeup](https://infosecwriteups.com/natas2-wargames-solutions-writeup-2b2946358259?source=rss----7b722bfd1b8d---4)\n - [ ] [Natas1 — Wargames solutions writeup](https://infosecwriteups.com/natas1-wargames-solutions-writeup-1fa5a8c2464a?source=rss----7b722bfd1b8d---4)\n - [ ] [Natas0 — Wargames solution writeup](https://infosecwriteups.com/natas0-wargames-solution-writeup-98a7385828c4?source=rss----7b722bfd1b8d---4)\n- Doonsec's feed\n - [ ] [随笔 | 身份安全的下一个十年（2）](https://mp.weixin.qq.com/s?__biz=MzI1NjQxMzIzMw==&mid=2247497652&idx=1&sn=fec775fc13374ed937280ea6c01e58c5)\n - [ ] [2025版最新黑客最常用的10款黑客工具，零基础入门到精通，收藏这篇就够了](https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247485442&idx=1&sn=6e3eaa6a27ea3efe5da595f5bbf53551)\n - [ ] [年报全出，网络安全行业营收继续萎缩，去年Q4同比下降14.1%，今年Q1下降1.5%](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485789&idx=1&sn=167fe61e86d6bcc16f14f508fc8ef596)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485789&idx=2&sn=167a542699aeedc8179c23e42ce0f82c)\n - [ ] [【干货】笑傲职场的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485789&idx=3&sn=c60fbbf7384cada95f5ad6a73d77a17e)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485789&idx=4&sn=9a975fd2112698ce0172819d891dcb4e)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485789&idx=5&sn=6a8d8a8d3bd1490c3c153234fab0a611)\n - [ ] [2025阳光招生北京升学“大变革”：从“拼娃”到“拼家长”](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485789&idx=6&sn=ed90cbad2592037f0b69a303e500213b)\n - [ ] [【智能法治论坛】分论坛六|人工智能价值对齐与科技向善](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247552089&idx=1&sn=f80407db3f462fd1162d21fcec24ec84)\n - [ ] [数据需“法治”不是“人治”，以往做法不对](https://mp.weixin.qq.com/s?__biz=MzA3OTg3Mjg3NA==&mid=2456976715&idx=1&sn=d85dbc7ddd77dba761e26ac2478a8289)\n - [ ] [追求十全十美，价值性越来越小](https://mp.weixin.qq.com/s?__biz=MzA3OTg3Mjg3NA==&mid=2456976715&idx=2&sn=ef7cb8bd4c55a49c061ca91efa280388)\n - [ ] [资源选择应该有的思路，切勿盲目](https://mp.weixin.qq.com/s?__biz=MzA3OTg3Mjg3NA==&mid=2456976715&idx=3&sn=de1bbf06165904ef73c584f821d5333c)\n - [ ] [网络安全行业，价值导向，并不完全正确](https://mp.weixin.qq.com/s?__biz=MzA3OTg3Mjg3NA==&mid=2456976715&idx=4&sn=068a64b58f3068a023b2de8694a1829a)\n - [ ] [视频 | 百支战队逐鹿榕城！回顾第二届“长城杯”总决赛精彩瞬间](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664241991&idx=1&sn=98a9a01a7b01af1b76fb849c1d004e16)\n - [ ] [视频 | 高校学子遇上网络攻防，看这场大赛如何淬炼“数字青春”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664241991&idx=2&sn=c6ac7e8d83ace3873a57454540165893)\n - [ ] [黑客组织宣称入侵TikTok，逾90万用户凭证遭泄露](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320001&idx=3&sn=375c7ce71e526ca689a06821c3da3208)\n - [ ] [漏洞管理中的四大常见误区及改进方案](https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610476&idx=2&sn=8ae8a8c200c3ebe2674ec8fff081acc7)\n - [ ] [记一次爱加密企业版脱壳与反调试绕过](https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610476&idx=3&sn=2e912076294907d5b15a88e23ee16438)\n - [ ] [微信小程序自动化辅助渗透工具e0e1-wx更新！V2.0](https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610476&idx=4&sn=83b027814ade19f2610cdd1dab8f26a6)\n - [ ] [五一期间大学生必看的5大网络“保命”技巧](https://mp.weixin.qq.com/s?__biz=MzkwNjY1Mzc0Nw==&mid=2247488527&idx=1&sn=cec398b8739dc55ff3a440333cdcce8d)\n - [ ] [Edu证书站 | 某票据系统JS提取未授权通杀](https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486887&idx=1&sn=7df58bc88b76e12f2cffbe71b8e81bec)\n - [ ] [关于个人信息保护，5月1日起施行](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=1&sn=041492df1b4f961d36249dafb5f28b19)\n - [ ] [《个人信息保护合规审计管理办法》答记者问](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=2&sn=52d8c5c7d638e26c2ad44c35e517ebf6)\n - [ ] [专家解读｜出台《个人信息保护合规审计管理办法》 为数字经济持续健康发展保驾护航](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=3&sn=dc0d24f1785a8382338c3c29105d7986)\n - [ ] [专家解读｜开展个人信息保护合规审计 提升数据安全治理监管能力](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=4&sn=1ff54f6a83e671e1eb97d20e7a7198bf)\n - [ ] [专家解读｜建立健全个人信息保护合规审计制度 筑牢维护个人信息安全铜壁铁墙](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=5&sn=eee61626353332deab460353e88bc4fd)\n - [ ] [园区交换机和数据中心交换机有啥区别？](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247530222&idx=1&sn=924b49930fbda8b9ce741746ba1a1a90)\n - [ ] [xss-labs level11 - level20](https://mp.weixin.qq.com/s?__biz=MzkzNTcwOTgxMQ==&mid=2247485853&idx=1&sn=3bc3414c1f9dac495e3c2f4ae801854a)\n - [ ] [300页PPT DeepSeek+：政务办公创新突围](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655277583&idx=1&sn=ad2a8a7c4e7b857e6e647fc4eebd6d07)\n - [ ] [五一专享](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497537&idx=1&sn=c2adab46e30e58a538c50eee9208bc6e)\n - [ ] [SRC舔狗日常](https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519244&idx=1&sn=3ceea522f528f8d5d338cd7b33c57e47)\n - [ ] [假期专享，节后删](https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519244&idx=2&sn=411d04e4c176387cf225ab4e28fd9a12)\n - [ ] [【太空安全】波兰航天局网络攻击内幕](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498568&idx=1&sn=4d8fedcec406eee393530b8570d1c130)\n - [ ] [墨云科技 | 致敬每一位美好生活建设者](https://mp.weixin.qq.com/s?__biz=MzU5ODE2NDA3NA==&mid=2247496933&idx=1&sn=efa22536fe6beb321ff34afe14d02c6d)\n - [ ] [【Pwned Labs】AWS S3 Enumeration Basics：AWS S3 枚举基础知识](https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247486235&idx=1&sn=a99c7118d485c3167b712587d99cb270)\n - [ ] [筑牢网络安全屏障——神州希望助力三亚市政协开展网络安全应急演练](https://mp.weixin.qq.com/s?__biz=MzA4Mzg1ODMwMg==&mid=2650725431&idx=1&sn=63e15f4978d2c974b97003cfa9db15d2)\n - [ ] [羡慕财阀每一天](https://mp.weixin.qq.com/s?__biz=Mzg5NDE2MDQ3Mg==&mid=2247484800&idx=1&sn=2d79d1c0ec00e9730d74ab19b8602228)\n - [ ] [WebDeveloper 流量分析、sudo提权，靶场通关WP](https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247484911&idx=1&sn=051df93011860575415dc01afcd3868b)\n - [ ] [国家数据局局长刘烈宏在第八届数字中国建设峰会上的致辞｜全文](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635669&idx=1&sn=d72677d594cfaad9d222faa444a53b62)\n - [ ] [陕西省密码应用与安全性评估政策宣讲和制度要求工作会议成功召开](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635669&idx=2&sn=5fffe10d46c4d96990a3f344b0a1201b)\n - [ ] [中央网信办部署开展“清朗·整治AI技术滥用”专项行动](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247530915&idx=1&sn=8dc8150cf0456675848d49f71f2cab45)\n - [ ] [通知 | 七部门联合印发《终端设备直连卫星服务管理规定》（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664241957&idx=1&sn=3d94e7ee3fe07aef14206937b726c32d)\n - [ ] [6项网络安全国家标准获批发布](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649172760&idx=1&sn=b15756deb5f7fa2ca4f9ea066dac7b9f)\n - [ ] [【安全圈】苹果隔空播放(AirPlay)协议存在可蠕虫的远程代码执行漏洞 可批量感染大量设备](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=1&sn=15d70e792b5f5150cebe5632890b1182)\n - [ ] [【安全圈】系统考古，Windows 7登录延迟30秒之谜破解：纯色背景竟成元凶](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=2&sn=6f118ec9b12b5035558c92a8cc8c4191)\n - [ ] [【安全圈】纳德拉表示微软现在有30%的代码是由AI进行编写的](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=3&sn=f653ab54d4ebda66b18ce3477f6e7256)\n - [ ] [【安全圈】互联网论坛4Chan被攻击后透露攻击细节 同时声称缺乏资金进行必要维护](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=4&sn=4cf472d902ce7b9372191105abc8f602)\n - [ ] [假期不好过，一行代码导致8000美元损失的事故分析](https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491499&idx=1&sn=a051304be8001d2d3ad3786ab429794f)\n - [ ] [专家解读｜系统规范合规审计 保护个人信息安全](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=6&sn=240fe3ef04f043b38c8378906c3ed44e)\n - [ ] [专家解读｜促进与规范合规审计 提升个人信息保护水平](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=7&sn=0ff7618d4538c2e4bc3c6280e5e938d4)\n - [ ] [海报丨跟着泰小宣廊小评学《个人信息保护合规审计管理办法》](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=8&sn=bdb41d0595d3b59a2be27565214a732d)\n - [ ] [火绒安全2024年终端安全洞察报告](https://mp.weixin.qq.com/s?__biz=MzI5MTIwOTQ5MA==&mid=2247487917&idx=1&sn=78eb83d577176d4daa369806431e7414)\n - [ ] [微软30%代码由AI编写，“机器程序员”成趋势](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932050&idx=1&sn=fbbb934f4efbe2684da737bec6768bb2)\n - [ ] [90万!上海临床研究中心AI数字图像分析平台系统](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932050&idx=2&sn=8c024e63de14cac7082835a387581390)\n - [ ] [以生态力量激发白帽价值 | 斗象受邀出席第二届武汉网络安全创新论坛](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320001&idx=1&sn=5fecb921ae37eea18208ad94b77f69cf)\n - [ ] [AI在安全运营中的实际应用；MCP技术与应用价值探讨 | FB甲方群话题讨论](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320001&idx=2&sn=b1599da3b37e3a616958ab4f91e6be88)\n - [ ] [汽车中为什么会使用ROS操作系统？](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247554529&idx=1&sn=63b2c1f8c09f8f8846a483b1c6e68585)\n - [ ] [深入解析自动驾驶车联网技术及其应用场景](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247554529&idx=2&sn=8af351f0b10d4b5e2999589c176f61c0)\n - [ ] [议题征集｜看雪·第九届安全开发者峰会（SDC 2025）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593263&idx=1&sn=b3503a7dded4e013a4cc644bedbabb48)\n - [ ] [Frida 版 xposed](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593263&idx=2&sn=d9364732d7a20730c91f30f0f3e211b6)\n - [ ] [为Cherry Studio修改数据目录（二）](https://mp.weixin.qq.com/s?__biz=MjM5NDcxMDQzNA==&mid=2247489616&idx=1&sn=f580ec2c56bb69c81e64486c74022d8f)\n - [ ] [《人工智能气象应用服务办法》发布](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649172760&idx=2&sn=474d80080147d083c30973587bb2483f)\n - [ ] [《可信数据空间 技术架构》技术文件发布](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649172760&idx=4&sn=3b92a67ca7825578df75589f13b4417a)\n - [ ] [Docker+Android emu镜像的制作方法](https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247498020&idx=1&sn=614667ded3ab71081df0805402e57dfb)\n - [ ] [与俄罗斯相关的 APT29 利用 GRAPELOADER 恶意软件攻击欧洲外交机构](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498944&idx=1&sn=07c1fe9798dd41630c3098751b15151b)\n - [ ] [后量子密码学对汽车安全的影响——案例研究](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623996&idx=1&sn=6f717f7a41916e0b4c5082740d785535)\n - [ ] [智能网联汽车量子通信技术及其安全应用标准领航研究 2023.12](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623996&idx=2&sn=d9047353d4423f58f5436f257acee116)\n - [ ] [汽车系统的后量子安全无线更新 - NXP, DENSO](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623996&idx=3&sn=f00e9df744caa838a9fc3d64a219aacd)\n - [ ] [好久不见的更新汇报+会员专属五一抽奖](https://mp.weixin.qq.com/s?__biz=MzkzMTY0OTM5Mw==&mid=2247487048&idx=1&sn=0ce4c0644e2b37e9958bf3729fc07006)\n - [ ] [微信账号被封怎么办？详细教大家如何正确填写用途和申请解封原因指南](https://mp.weixin.qq.com/s?__biz=MzI2OTk4MTA3Ng==&mid=2247497205&idx=1&sn=33c320d6779db4bee9d1b08bcda7250b)\n - [ ] [快手账号被永久封禁，还可以解除限制吗？今天教你正确的申诉方法。](https://mp.weixin.qq.com/s?__biz=MzI2OTk4MTA3Ng==&mid=2247497205&idx=2&sn=28062d04bf0c9ec0675a9691084999a8)\n - [ ] [夜莺告警：5分钟明白对万台网络设备设置告警规则的最佳实践](https://mp.weixin.qq.com/s?__biz=MzIzNjU5NDE2MA==&mid=2247490619&idx=1&sn=1513897777a5ecb1211084e757f48fec)\n - [ ] [超便宜港卡攻略：50买卡+6元保号一年，Clubsim详细购买指南](https://mp.weixin.qq.com/s?__biz=MzkyNzYzNTQ2Nw==&mid=2247484578&idx=1&sn=c2c58076c2c9ae8d3930bf05178cf2c4)\n - [ ] [每周网络安全简讯 ( 2025年 第18周 )](https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247521375&idx=1&sn=ffded6692b89d4187ad73f79d58b38a6)\n - [ ] [安全动态丨网络空间安全动态第257期](https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247521375&idx=2&sn=ba5396b56195f40bae76b26e79cb39ae)\n - [ ] [智能网联供应链安全：不容懈怠的风险透视与体系良策](https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247521375&idx=3&sn=ef6070d3d4d7068a31b8e3fd6b83c493)\n - [ ] [聚合生态 共赢未来｜合作伙伴代表团走进山石网科硅谷研发中心](https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661300480&idx=1&sn=270d1c9540644367e72852a22971314b)\n - [ ] [2025 RSAC｜AI-SOC重塑未来企业安全运维](https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661300480&idx=2&sn=ed928def316d0411c3c43e8cdd497402)\n - [ ] [FSRC探索季副本变动公告（福利加码！）](https://mp.weixin.qq.com/s?__biz=MzI2ODY3MzcyMA==&mid=2247505993&idx=1&sn=c562cccb5df6ce255ba8763e5e58445a)\n - [ ] [五一怎么安排呢](https://mp.weixin.qq.com/s?__biz=MzU2MDYxNDQ4Ng==&mid=2247484465&idx=1&sn=cf0f3aa3028f66aa615c186cd5e8d0ce)\n - [ ] [从IBM《2025年X-Force威胁情报指数报告》看安全文化的必要性](https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247485090&idx=1&sn=9c09928204556d838f61e484cd2758c1)\n - [ ] [API接口深度发现的动态爬虫实现(2. 测试报告)](https://mp.weixin.qq.com/s?__biz=MzkyNjM0MjQ2Mw==&mid=2247483759&idx=1&sn=85e08c132a59048972571177c671cc4e)\n - [ ] [【情报】CVE出现罕见的10.0评分漏洞，SAP NetWeaver存在RCE漏洞](https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485752&idx=1&sn=d991fdc2d13d3fc422d3148704ff225a)\n - [ ] [喜迎五一，节日快乐！](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651620879&idx=1&sn=318ab38e29378b59ea79cd95124f564a)\n - [ ] [CraftCMS 存在前台命令执行漏洞 (CVE-2025-32432)](https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489679&idx=1&sn=550fcfaa03734416bba06a439cf8a9fc)\n - [ ] [什么是双频路由器和多频合一？](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649467794&idx=1&sn=3143200f7439622a16d2c3a534abf553)\n - [ ] [混沌代理：劫持 NodeJS 的 Jenkins 代理](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529482&idx=1&sn=ec82af51a2a7471211bc8f353e2c10a5)\n - [ ] [AirPlay 协议中易受蠕虫攻击的零点击远程代码执行 (RCE) 漏洞使 Apple 和 IoT 设备面临风险](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529482&idx=2&sn=662fdb70e9617d5c291c3f9e1734d2f4)\n - [ ] [台湾地区水雷作战运用及对我启示](https://mp.weixin.qq.com/s?__biz=MzkyMjY1MTg1MQ==&mid=2247493767&idx=1&sn=507f14c4556693550dada1eb9df1505d)\n - [ ] [【美军译粹】《和平解决：重塑美国对台防御战略》（美CSBA最新报告）](https://mp.weixin.qq.com/s?__biz=MzkyMjY1MTg1MQ==&mid=2247493767&idx=2&sn=143e898bc6734d0063047294d0d3d152)\n - [ ] [美海军陆战队发布后勤条令《MCTP 3-40B：战术后勤》（2025版）](https://mp.weixin.qq.com/s?__biz=MzkyMjY1MTg1MQ==&mid=2247493767&idx=3&sn=49761da729e8be64ed0853ec961cb2a6)\n - [ ] [美空军发布首个人工智能条令《AFDN 25-1 人工智能》（2025版）](https://mp.weixin.qq.com/s?__biz=MzkyMjY1MTg1MQ==&mid=2247493767&idx=4&sn=7af6df24caa6261cec7b7c70a56b96e8)\n - [ ] [挖洞日记 | Js中的奇妙旅行](https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247549681&idx=1&sn=cf8497c59172b7ad61e8bfb4d8fdda34)\n - [ ] [25年HW最后一批!初级、中级、高级大量招人](https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247549681&idx=2&sn=f1ad9b14289fdc30875f38e4df20a759)\n - [ ] [web选手入门pwn(25)——eazy_heap](https://mp.weixin.qq.com/s?__biz=MzUzNDMyNjI3Mg==&mid=2247487428&idx=1&sn=96832deaf35f2380e14f51b14d21e5c0)\n - [ ] [三天速成！如何利用Claude写医学论文的五步精进攻略（含实操步骤详解）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=1&sn=091cd6c76612bb882893ce151545e901)\n - [ ] [三天完成高质量论文！用Claude写论文的五步精准操作指南（附实操演示）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=2&sn=fc381ddfa1d9b4e423b423108072c267)\n - [ ] [三天掌握：用Claude写论文模板的五步实战指南！（附高效提示词框架）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=3&sn=aa0dcf4e6ce62cacbe9f44c8940a3947)\n - [ ] [三天掌握Claude论文写作全攻略！5步流程让你轻松完成高质量学术文章（含实操演示）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=4&sn=593b9163ad2283719c566fb06673ff1a)\n - [ ] [三天掌握Claude论文写作全流程指南！（附7步精准提示词技巧）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=5&sn=7424871c548bb183c0e285516acb7eee)\n - [ ] [三天掌握Claude喂数据写论文全攻略！（5步精准操作法）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=6&sn=59c3d02d5eb7dcee4828002b90f902ba)\n - [ ] [三天掌握Claude写教学论文全流程实操指南（内含7步精准提示词公式）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=7&sn=97317c6a7c640e1b7b44a1a77ff23317)\n - [ ] [三天掌握Claude写论文背景完整攻略（内含7步精准提示词）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=8&sn=a9daa79afa906d75af1f6f157695cc02)\n - [ ] [安帝速递｜【工业网络安全月报2025年-04月】](https://mp.weixin.qq.com/s?__biz=MzU3ODQ4NjA3Mg==&mid=2247567330&idx=1&sn=50a9a3d03d49ac4d2c1376a8bf2bc03f)\n - [ ] [紧急！朝鲜Kimsuky组织利用BlueKeep漏洞，疯狂攻击日韩！](https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486087&idx=1&sn=247be08e59f1f83dd714ecf5dd76e900)\n - [ ] [模型新贵对决：Qwen3、小米 MiMo、DeepSeek Prover V2 谁将改写游戏规则](https://mp.weixin.qq.com/s?__biz=MzkyMDY4MTc2Ng==&mid=2247484268&idx=1&sn=c1ab6f0c92102bae9c2612fbbce870a7)\n - [ ] [10天掌握Claude 3.7国内无墙三大秘技！任意时间畅玩顶级AI（内含隐藏入口）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=1&sn=cb33ada7f6b1020a5d684a6397e7c656)\n - [ ] [30分钟搞定Claude 3.7账号全攻略！三大方法七步上手教程（内附稳定可靠渠道）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=2&sn=0e1d0f655ea99a8ee9dbad09dd078c52)\n - [ ] [3天掌握Claude 3.7国内无墙五步秘籍！零限制畅享AI新境界（附独家稳定资源）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=3&sn=715364986c9f2d3f3d97fb687bfaa63b)\n - [ ] [3天掌握Claude 3.7账号无障碍使用的5步终极方案（内含稀缺资源）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=4&sn=deba1d08ed41a0e8c0a2027f03b3d83e)\n - [ ] [5天内掌握Claude 3.7 Sonnet免费使用的三大秘籍！（附高级破解方案）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=5&sn=bc7f79ec2749661538e483fd1cadd7af)\n - [ ] [5天掌握Claude 3.7低价获取秘籍：三种方案对比与七步实操指南（内附稳定可靠渠道）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=6&sn=14080a1cabb725f2cf248fd7806ea603)\n - [ ] [7天免费使用Claude 3.7 Sonnet的5个隐藏技巧（附详细教程）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=7&sn=f93d77024114ad3a90df5400c52edab5)\n - [ ] [7天免费体验Claude 3.7 Sonnet完全指南（三个实用技巧+一键直达方法）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=8&sn=562fb34230d664a03be472c41e7adb81)\n - [ ] [tcpdump + wireshark 联动 frida，实现APP无感抓取HTTPS数据包](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490658&idx=1&sn=717984da28fb5b9c293216e5d17cac5f)\n - [ ] [安全小工具大集合：三款神器帮你揪出网站中的敏感信息！被动式信息泄漏检测插件！](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490658&idx=2&sn=68272be788d9b7d4481927b4231a5156)\n - [ ] [开源软件安全管理方案](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490658&idx=3&sn=0fd1ebef118f01225bb2d1c624ce2a4b)\n - [ ] [有意向学技术的师傅们 请直接添加这个微信](https://mp.weixin.qq.com/s?__biz=MzkyMDY1MDI3OA==&mid=2247483971&idx=1&sn=ca77bd776fb98eb51abc9d14f5cf1343)\n - [ ] [可信数据空间、低空经济...安恒信息在数字中国收获多项肯定](https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650627738&idx=1&sn=99030571adcbde28ef95fd8162c864b0)\n - [ ] [祝大家五一快乐](https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484717&idx=1&sn=1b3d884194b84a979b0aaa91fcf13b29)\n - [ ] [Rust的ls程序-2](https://mp.weixin.qq.com/s?__biz=Mzk0MTQxOTA3Ng==&mid=2247489527&idx=1&sn=64b5beeaa15980c0ea7d97e6e5fb5d8a)\n - [ ] [虚拟机本地存储热迁移为什么会失败](https://mp.weixin.qq.com/s?__biz=MzUyOTkzMjk1Ng==&mid=2247486302&idx=1&sn=9c3c129a0fa821d120164103757e96f5)\n - [ ] [喜报丨江西神舟信息安全评估中心有限公司攻防支撑部荣获“江西省工人先锋号”称号](https://mp.weixin.qq.com/s?__biz=MzUzNTk2NTIyNw==&mid=2247490802&idx=1&sn=edc174170d57716777664709c624ad33)\n - [ ] [祝白帽师傅们劳动节快乐](https://mp.weixin.qq.com/s?__biz=MzkzOTIyMzYyMg==&mid=2247495224&idx=1&sn=a7ea52bcd7b76cd403fad130b1f65e40)\n - [ ] [网络安全知识库五一特惠活动：新会员立减30元！](https://mp.weixin.qq.com/s?__biz=MzkzNjQwOTc4MQ==&mid=2247490555&idx=1&sn=16c9c5e7d93caa079d8b21fb8778cc2f)\n - [ ] [T00ls祝各位五一劳动节快乐](https://mp.weixin.qq.com/s?__biz=Mzg3NzYzODU5NQ==&mid=2247485150&idx=1&sn=0e444544aff8dc9a1e5a33bba7ad2c5a)\n - [ ] [五一快乐｜致敬每一个奋斗的你✨](https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484828&idx=1&sn=5ba050abe0c669025993a015088a9844)\n - [ ] [机房=厕所](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498943&idx=1&sn=58770e9540c673bdd250c814da126173)\n - [ ] [1v1论文辅导！985/211专业对口导师手把手全程辅导！](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498943&idx=2&sn=20e9e3428fe033ab1dc2a8a7c185fb94)\n - [ ] [2025年如何破解3389？](https://mp.weixin.qq.com/s?__biz=Mzg3MDcxNTkyMA==&mid=2247484566&idx=1&sn=9e8c7d44836ec0b85bf416e06493fba4)\n - [ ] [IDA 技巧（127）函数](https://mp.weixin.qq.com/s?__biz=MzI1Mjk2MTM1OQ==&mid=2247485551&idx=1&sn=a6dff6f6b604e649f46aa4fa89429988)\n - [ ] [福建省委书记、省人大常委会主任周祖翼会见齐向东](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626677&idx=1&sn=73044e948f3951778931890d20892aa6)\n - [ ] [摩根大通首席信息安全官在RSA大会前发出警告](https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499714&idx=1&sn=8e18f53cf4dcc31b4455ab8ba02a8c15)\n - [ ] [DeFiVulnLabs靶场全系列详解（三十三）ecRecover函数还原签名的地址为0导致可绕过签名转账](https://mp.weixin.qq.com/s?__biz=MzkwMTc2MDE3OA==&mid=2247486603&idx=1&sn=cf6bb1c83a57cea882d6e6f71709e862)\n - [ ] [医疗企业被处罚背后的安全问题](https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489226&idx=1&sn=1ca4b91834a09b86ea1d0341c550dc01)\n - [ ] [面临困境的漏洞管理生态系统](https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484713&idx=1&sn=c4477dd9b0ca46b1ae12b8c2c19dd399)\n - [ ] [网安护航，五一无忧](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493999&idx=1&sn=367d3720ca8604ca4920239bec17b1a6)\n - [ ] [假期出行多注意，网络安全10条提示记心里](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115460&idx=1&sn=92f5f34fe3e569c69534a8d252014118)\n - [ ] [继续谈客户端 SYN-SYN/ACK-RST 问题](https://mp.weixin.qq.com/s?__biz=MzA5NTUxODA0OA==&mid=2247493403&idx=1&sn=f5cdad776060570445604a5005c74530)\n - [ ] [【五一快乐】岁月不负耕耘，匠心必有回响](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788520&idx=1&sn=b24342bf900ab163a57b4fccd6964427)\n - [ ] [联想全球安全实验室恭祝大家劳动节快乐！](https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247491979&idx=1&sn=7ca8254f01f24e2bc07265c384cde180)\n - [ ] [Dear 「YAKer」，五一快乐！](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528127&idx=1&sn=dddf096600b47026d0cf72245124c3b3)\n - [ ] [三未信安祝您五一劳动节快乐！](https://mp.weixin.qq.com/s?__biz=MzA5ODk0ODM5Nw==&mid=2650331416&idx=1&sn=35641f6cfffc6249a19001663581f3a9)\n - [ ] [漏洞挖掘展锋芒，五一佳节乐无疆——360漏洞云祝您五一劳动节快乐](https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503663&idx=1&sn=bcc78eeb0df6d8f28972e7a1b672eea8)\n - [ ] [漏洞挖掘铸辉煌，五一安康乐满堂——360众测祝您五一劳动节快乐](https://mp.weixin.qq.com/s?__biz=MzkwODM0MTgyNQ==&mid=2247489555&idx=1&sn=26d41fdb1cf22a34a78bcc50863c1854)\n - [ ] [劳动最光荣，致敬网安人——HackingClub祝您劳动节快乐](https://mp.weixin.qq.com/s?__biz=MzkxMzE4MTc5Ng==&mid=2247499609&idx=1&sn=e06a6bec38cddc7cfbd6a74740136cc7)\n - [ ] [五一劳动节，致敬不凡，致敬平凡！](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247599609&idx=1&sn=ae5271b087b161a5e091b77f76a6d62e)\n - [ ] [权威解答 | 《终端设备直连卫星服务管理规定》答记者问](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664241957&idx=2&sn=e6d1ecb78a930c146adee00cd93046cc)\n - [ ] [一次从注册功能隐藏到发现的sql注入漏洞](https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492100&idx=1&sn=18b45884d06bcca22ae4c74964f66c3d)\n - [ ] [成为黑客 需要掌握哪些知识？](https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497249&idx=1&sn=1528d54d9853a8ed30e298b92b2e807a)\n - [ ] [你的网站老被塞“小纸条”？教你两招！](https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497249&idx=2&sn=3ff64e97a10572c3441cdcd14f1e75cf)\n - [ ] [这个五一，让自动化系统值守——您的假期由我们守护！](https://mp.weixin.qq.com/s?__biz=Mzk0ODI4MDI4Nw==&mid=2247494636&idx=1&sn=adb45fb255e23267313e8bb150b93e7d)\n - [ ] [四川某大学教材订购系统存在任意用户密码找回](https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486872&idx=1&sn=256202bd0fd33ab1c509071f3200756f)\n - [ ] [Dear「YAKer」，五一快乐！](https://mp.weixin.qq.com/s?__biz=MzIwMzI1MDg2Mg==&mid=2649945542&idx=1&sn=445559ecc6a82b7dc1537a2bdf141b68)\n - [ ] [劳动节｜致敬不凡 致敬平凡](https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247507943&idx=1&sn=44e6f32104fb94c555c5b341fc3b19d8)\n - [ ] [全国装备制造业数字供应链平台应用成效——第八届数字中国建设峰会工业互联网产业生态大会成果发布](https://mp.weixin.qq.com/s?__biz=MzkyMDMwNTkwNg==&mid=2247487544&idx=1&sn=54fcdb90a796115dd9e12086384c6ba8)\n - [ ] [技术攻坚破万难，五一喜乐共腾欢——360众包祝您五一劳动节快乐](https://mp.weixin.qq.com/s?__biz=MzkzNjIyNjM1OA==&mid=2247485096&idx=1&sn=dee8d77d7b219b8b63036e5ac9a1220c)\n - [ ] [【重拳出击】中央网信办部署开展“清朗·整治AI技术滥用”专项行动](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498562&idx=1&sn=7717822e38e6f8a93da34c7bf9a0db37)\n - [ ] [vLLM 的 Mooncake 存在严重 RCE 漏洞（10)](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498562&idx=2&sn=627b2b4f0bf40d30aa0679f5febc511c)\n - [ ] [你收到通知了吗？苹果向全球间谍软件攻击的新受害者发出警报](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247509548&idx=1&sn=f65dd6d8f2a5e9da890d6d12637cc221)\n - [ ] [微软远程桌面惊现\\\"口令时光机\\\"：旧口令为何能永久通行？](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247509548&idx=2&sn=d602794e7e990f5bf109d59b3eb8d661)\n - [ ] [【暗网快讯】20250501期](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247509548&idx=3&sn=8cf2536736cb0834a92ca21006a2d554)\n - [ ] [5th域安全微讯早报【20250501】104期](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247509548&idx=4&sn=55d4ce7ca72eced1aac461a9b2009ec7)\n - [ ] [网络安全大模型](https://mp.weixin.qq.com/s?__biz=MzI1NzUxOTUzMA==&mid=2247485969&idx=1&sn=f86beebf5c48923bd25636c30abff614)\n - [ ] [致敬每一位劳动者！](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664241922&idx=1&sn=393bcda965c61c90aa793e08ea28cec7)\n - [ ] [今日实施生效！关于个保审计的十问十答](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518327&idx=1&sn=401b4f0d1ae34217b9a45247171105dd)\n - [ ] [赛博研究院祝您五一劳动节快乐！](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518327&idx=2&sn=db7d8c90ac49fbe9502c25a485efab8c)\n - [ ] [深入解析 Win11 24H2 KB5055627 预览更新：本地 AI 功能详解、关键修复与测试建议](https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900490&idx=1&sn=d81015ce03e8b6d8d500a4d3e87b7609)\n - [ ] [当AI学会“欺骗”自己：揭秘MCP协议如何成为攻防战场的新焦点](https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487806&idx=1&sn=6c424b8cfd23de0cf6b5d31ec535b263)\n - [ ] [致敬每一份耕耘，赞美每一份坚守 | 五一劳动节快乐](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247530915&idx=2&sn=c2d0d3c9cce2aab8fc2fa2b29862bc10)\n - [ ] [向劳动者致敬！赛查查祝大家五一劳动节快乐！](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247492334&idx=1&sn=9bb4d35993721af9fab904056990afe7)\n - [ ] [能信安科技：向劳动者致敬！](https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491082&idx=1&sn=0c642b674b4fb808f3d1485e282132a2)\n - [ ] [腾讯内部工位曝光，被全公司围观的工位竟长这样！](https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649793103&idx=1&sn=4eef1e16b2064da949cfddbd62820880)\n - [ ] [内部小圈子重大升级：新增内部圈子知识库+五一30元优惠价](https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489781&idx=1&sn=6c044ed8adfbb418b8a7b1266b25f1bd)\n - [ ] [劳 动 最 光 荣 ！](https://mp.weixin.qq.com/s?__biz=MzI5NjA4NjA3OA==&mid=2652102497&idx=1&sn=f8212cf549d255b1e8f340f0a6bd009d)\n - [ ] [五一快乐 | 向每一位劳动者致敬](https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649818925&idx=1&sn=d9b9efed00333317a10bfd13f1fea7ad)\n - [ ] [赛宁网安 | 筑牢安全防线，致敬劳动荣光!](https://mp.weixin.qq.com/s?__biz=MzA4Mjk5NjU3MA==&mid=2455488917&idx=1&sn=a082b0d2ce22b7c1609753a145e4b3a0)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [From JS File to Jackpot: How I Found API Keys and Secrets Hidden in Production Code](https://infosecwriteups.com/from-js-file-to-jackpot-how-i-found-api-keys-and-secrets-hidden-in-production-code-87af8750b751?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Lab: Finding and exploiting an unused API endpoint](https://infosecwriteups.com/lab-finding-and-exploiting-an-unused-api-endpoint-79fa6744f21e?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [$500 Bounty: Hijacking HackerOne via window.opener](https://infosecwriteups.com/500-bounty-hijacking-hackerone-via-window-opener-e16700108e12?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [How I bypassed an IP block… without changing my IP?](https://infosecwriteups.com/how-i-bypassed-an-ip-block-without-changing-my-ip-e8082a43957b?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Non-Serializable Object Stored in Session](https://infosecwriteups.com/non-serializable-object-stored-in-session-d7233431cb6?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Mastering RCE: How I Exploit Remote Code Execution Bugs Like a Pro](https://infosecwriteups.com/mastering-rce-how-i-exploit-remote-code-execution-bugs-like-a-pro-ddcc816552bf?source=rss----7b722bfd1b8d--bug_bounty)\n- The Trail of Bits Blog\n - [ ] [Making PyPI's test suite 81% faster](https://blog.trailofbits.com/2025/05/01/making-pypis-test-suite-81-faster/)\n- Reverse Engineering\n - [ ] [/r/ReverseEngineering's Triannual Hiring Thread](https://www.reddit.com/r/ReverseEngineering/comments/1kc2kl6/rreverseengineerings_triannual_hiring_thread/)\n - [ ] [How I Found Malware in a BeamNG Mod](https://www.reddit.com/r/ReverseEngineering/comments/1kc7bwk/how_i_found_malware_in_a_beamng_mod/)\n - [ ] [Pwning the Ladybird browser](https://www.reddit.com/r/ReverseEngineering/comments/1kcauwj/pwning_the_ladybird_browser/)\n - [ ] [CVE-2025-21756: Attack of the Vsock](https://www.reddit.com/r/ReverseEngineering/comments/1kc7d3y/cve202521756_attack_of_the_vsock/)\n- Didier Stevens\n - [ ] [Overview of Content Published in April](https://blog.didierstevens.com/2025/05/01/overview-of-content-published-in-april-9/)\n- Malwarebytes\n - [ ] [Apple AirPlay SDK devices at risk of takeover—make sure you update](https://www.malwarebytes.com/blog/news/2025/05/apple-airplay-sdk-devices-at-risk-of-takeover-make-sure-you-update)\n - [ ] [The 3 biggest cybersecurity threats to small businesses](https://www.malwarebytes.com/blog/news/2025/05/the-3-biggest-cybersecurity-threats-to-small-businesses)\n - [ ] [Zero-day attacks on browsers and smartphones drop, says Google](https://www.malwarebytes.com/blog/news/2025/05/zero-day-attacks-on-browsers-and-smartphones-drop-says-google)\n- Exploit-DB.com RSS Feed\n - [ ] [[local] Microsoft - NTLM Hash Disclosure Spoofing (library-ms)](https://www.exploit-db.com/exploits/52280)\n - [ ] [[local] ZTE ZXV10 H201L - RCE via authentication bypass](https://www.exploit-db.com/exploits/52279)\n - [ ] [[local] Daikin Security Gateway 14 - Remote Password Reset](https://www.exploit-db.com/exploits/52278)\n - [ ] [[local] Microsoft Windows - XRM-MS File NTLM Information Disclosure Spoofing](https://www.exploit-db.com/exploits/52277)\n- CCC Event Blog\n - [ ] [Chaos Singularity 2025](https://events.ccc.de/2025/05/01/cosin-2025/)\n- rtl-sdr.com\n - [ ] [RTL-SDR Provides Vital Information during Portugal & Spain Blackout](https://www.rtl-sdr.com/rtl-sdr-provides-vital-information-during-portugal-spain-blackout/)\n- 奇客Solidot–传递最新科技情报\n - [ ] [Redis 8 再次切换到开源许可证 AGPLv3](https://www.solidot.org/story?sid=81200)\n - [ ] [测试兆芯 KX-7000 系列 CPU](https://www.solidot.org/story?sid=81199)\n - [ ] [微软 CEO 声称该公司三成新代码是用 AI 写的](https://www.solidot.org/story?sid=81198)\n - [ ] [任天堂之后 Xbox 游戏也将提高至 80 美元](https://www.solidot.org/story?sid=81197)\n - [ ] [多邻国使用 AI 将课程数量翻了一番](https://www.solidot.org/story?sid=81196)\n - [ ] [ESA 发射 Biomass 卫星测量全球森林的碳储量](https://www.solidot.org/story?sid=81195)\n - [ ] [维基百科将使用 AI 帮助编辑处理事务](https://www.solidot.org/story?sid=81194)\n- 锦行科技\n - [ ] [网安护航，五一无忧](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493999&idx=1&sn=367d3720ca8604ca4920239bec17b1a6&subscene=0)\n- 看雪学苑\n - [ ] [议题征集｜看雪·第九届安全开发者峰会（SDC 2025）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593263&idx=1&sn=b3503a7dded4e013a4cc644bedbabb48&subscene=0)\n - [ ] [Frida 版 xposed](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593263&idx=2&sn=d9364732d7a20730c91f30f0f3e211b6&subscene=0)\n- 安全客\n - [ ] [【五一快乐】岁月不负耕耘，匠心必有回响](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788520&idx=1&sn=b24342bf900ab163a57b4fccd6964427&subscene=0)\n- 威努特安全网络\n - [ ] [威努特五一假期业务保障通知](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651132747&idx=1&sn=01d46fd0c0fe77aa2bb9dd5222865865&subscene=0)\n- dotNet安全矩阵\n - [ ] [.NET 内网实战：通过 TcpListener 实现任意端口转发](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499571&idx=1&sn=e571092a871e8751009675d4b779c1cb&subscene=0)\n - [ ] [.NET 安全攻防知识交流社区](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499571&idx=2&sn=39dad6b8b3daa182740d0c9df93244d4&subscene=0)\n - [ ] [红队视角下通过 .NET 动态构造 IL 实现免杀的WebShell](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499571&idx=3&sn=fab6bbb9a101c7009c8549bab4e64850&subscene=0)\n- 信息安全国家工程研究中心\n - [ ] [5·1劳动节 | 为劳动者喝彩！](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247499461&idx=1&sn=99c8dad8928370899d8a56dfc0fe9480&subscene=0)\n- 安全内参\n - [ ] [未履行网络安全与数据安全保护义务，上海多家互联网医疗企业被处罚通报](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514287&idx=1&sn=21f528f6c13c5388e6e212ec2c5a437b&subscene=0)\n- 中国信息安全\n - [ ] [致敬每一位劳动者！](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664241922&idx=1&sn=393bcda965c61c90aa793e08ea28cec7&subscene=0)\n- 安全圈\n - [ ] [【安全圈】苹果隔空播放(AirPlay)协议存在可蠕虫的远程代码执行漏洞 可批量感染大量设备](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=1&sn=15d70e792b5f5150cebe5632890b1182&subscene=0)\n - [ ] [【安全圈】系统考古，Windows 7登录延迟30秒之谜破解：纯色背景竟成元凶](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=2&sn=6f118ec9b12b5035558c92a8cc8c4191&subscene=0)\n - [ ] [【安全圈】纳德拉表示微软现在有30%的代码是由AI进行编写的](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=3&sn=f653ab54d4ebda66b18ce3477f6e7256&subscene=0)\n - [ ] [【安全圈】互联网论坛4Chan被攻击后透露攻击细节 同时声称缺乏资金进行必要维护](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=4&sn=4cf472d902ce7b9372191105abc8f602&subscene=0)\n- 360漏洞云\n - [ ] [漏洞挖掘展锋芒，五一佳节乐无疆——360漏洞云祝您五一劳动节快乐](https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503663&idx=1&sn=bcc78eeb0df6d8f28972e7a1b672eea8&subscene=0)\n- 极客公园\n - [ ] [DeepSeek 发布 Prover-V2 模型；小米首个推理大模型开源；饿了么宣布超百亿补贴加入外卖战局 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653078621&idx=1&sn=b817a1c6c6e1e7610728d96bc135d318&subscene=0)\n- 李姐姐的扫描器\n - [ ] [API接口深度发现的动态爬虫实现(2. 测试报告)](https://mp.weixin.qq.com/s?__biz=MzkyNjM0MjQ2Mw==&mid=2247483759&idx=1&sn=85e08c132a59048972571177c671cc4e&subscene=0)\n- 吾爱破解论坛\n - [ ] [（图作者 | @Aoemax）](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651142541&idx=1&sn=d5e4e1d9851ebb77653be76efeba50ce&subscene=0)\n- Yak Project\n - [ ] [Dear 「YAKer」，五一快乐！](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528127&idx=1&sn=dddf096600b47026d0cf72245124c3b3&subscene=0)\n- TrustedSec\n - [ ] [Why the WAF](https://trustedsec.com/blog/why-the-waf)\n- 迪哥讲事\n - [ ] [五一专享](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497537&idx=1&sn=c2adab46e30e58a538c50eee9208bc6e&subscene=0)\n- ICT Security Magazine\n - [ ] [Budgeting per la sicurezza informatica: responsabilità del CISO](https://www.ictsecuritymagazine.com/notizie/budgeting-ciso/)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Steganography Analysis With pngdump.py: Bitstreams, (Thu, May 1st)](https://isc.sans.edu/diary/rss/31904)\n - [ ] [ISC Stormcast For Thursday, May 1st, 2025 https://isc.sans.edu/podcastdetail/9432, (Thu, May 1st)](https://isc.sans.edu/diary/rss/31914)\n- Have I Been Pwned latest breaches\n - [ ] [TehetségKapu - 54,357 breached accounts](https://haveibeenpwned.com/PwnedWebsites#TehetsegKapu)\n- Schneier on Security\n - [ ] [US as a Surveillance State](https://www.schneier.com/blog/archives/2025/05/us-as-a-surveillance-state.html)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Hacker 'NullBulge' pleads guilty to stealing Disney's Slack data](https://www.bleepingcomputer.com/news/security/hacker-nullbulge-pleads-guilty-to-stealing-disneys-slack-data/)\n - [ ] [More than 100,000 impacted by December data breach at Ascension Health](https://therecord.media/ascension-health-data-breach-impacts-over-100000)\n - [ ] [Defense contractors to pay $8.4 million over charges of failing to meet federal cyber standards](https://therecord.media/defense-contractors-settle-with-dod-false-claims-act)\n - [ ] [Nefilim ransomware suspect extradited from Spain to US](https://therecord.media/nefilim-ransomware-extradited-spain)\n - [ ] [Pro-Russia hacktivists bombard Dutch public orgs with DDoS attacks](https://www.bleepingcomputer.com/news/security/pro-russia-hacktivists-bombard-dutch-public-orgs-with-ddos-attacks/)\n - [ ] [North Korean IT worker scam is now a threat to all companies, cybersecurity experts say](https://therecord.media/north-korean-it-worker-scam-expands-rsa)\n - [ ] [Ukrainian extradited to US for Nefilim ransomware attacks](https://www.bleepingcomputer.com/news/security/ukrainian-extradited-to-us-for-nefilim-ransomware-attacks/)\n - [ ] [Harrods the next UK retailer targeted in a cyberattack](https://www.bleepingcomputer.com/news/security/harrods-the-next-uk-retailer-targeted-in-a-cyberattack/)\n - [ ] [Understanding the challenges of securing an NGO](https://blog.talosintelligence.com/understanding-the-challenges-of-securing-an-ngo/)\n - [ ] [Malicious PyPI packages abuse Gmail, websockets to hijack systems](https://www.bleepingcomputer.com/news/security/malicious-pypi-packages-abuse-gmail-websockets-to-hijack-systems/)\n - [ ] [Apple notifies victims in 100 countries of likely spyware targeting](https://therecord.media/apple-spyware-victims-notified-countries)\n - [ ] [British intelligence facing ‘oversight crisis’ from government interference](https://therecord.media/british-intelligence-oversight-crisis-parliament-committee)\n - [ ] [Poland’s state registry temporarily blocked by cyber incident](https://therecord.media/poland-pesel-system-state-registry-cyber-incident)\n - [ ] [British Library avoids investigation over ransomware attack, praised again for response](https://therecord.media/british-library-no-ico-investigation-ransomware-attack)\n - [ ] [State-of-the-art phishing: MFA bypass](https://blog.talosintelligence.com/state-of-the-art-phishing-mfa-bypass/)\n - [ ] [TehetségKapu - 54,357 breached accounts](https://haveibeenpwned.com/PwnedWebsites#TehetsegKapu)\n - [ ] [Guerre di Rete - Lavoro e automazione, chip e sorveglianza - il recap del mese](https://guerredirete.substack.com/p/guerre-di-rete-lavoro-e-automazione)\n - [ ] [Vulnerability & Patch Roundup — April 2025](https://blog.sucuri.net/2025/04/vulnerability-patch-roundup-april-2025.html)\n - [ ] [Hackers abuse IPv6 networking feature to hijack software updates](https://www.bleepingcomputer.com/news/security/hackers-abuse-ipv6-networking-feature-to-hijack-software-updates/)\n- The Hacker News\n - [ ] [Fake Security Plugin on WordPress Enables Remote Admin Access for Attackers](https://thehackernews.com/2025/05/fake-security-plugin-on-wordpress.html)\n - [ ] [Why top SOC teams are shifting to Network Detection and Response](https://thehackernews.com/2025/05/why-top-soc-teams-are-shifting-to.html)\n - [ ] [Claude AI Exploited to Operate 100+ Fake Political Personas in Global Influence Campaign](https://thehackernews.com/2025/05/claude-ai-exploited-to-operate-100-fake.html)\n - [ ] [New Research Reveals: 95% of AppSec Fixes Don’t Reduce Risk](https://thehackernews.com/2025/05/new-research-reveals-95-of-appsec-fixes.html)\n - [ ] [DarkWatchman, Sheriff Malware Hit Russia and Ukraine with Stealth and Nation-Grade Tactics](https://thehackernews.com/2025/05/darkwatchman-sheriff-malware-hit-russia.html)\n - [ ] [Commvault Confirms Hackers Exploited CVE-2025-3928 as Zero-Day in Azure Breach](https://thehackernews.com/2025/05/commvault-confirms-hackers-exploited.html)\n - [ ] [SonicWall Confirms Active Exploitation of Flaws Affecting Multiple Appliance Models](https://thehackernews.com/2025/05/sonicwall-confirms-active-exploitation.html)\n- Troy Hunt's Blog\n - [ ] [Welcoming The Gambia National CSIRT to Have I Been Pwned](https://www.troyhunt.com/welcoming-the-gambia-national-csirt-to-have-i-been-pwned/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [Upcoming beta-test exam: Certnexus CSSD](https://www.reddit.com/r/netsecstudents/comments/1kchzjj/upcoming_betatest_exam_certnexus_cssd/)\n- 360数字安全\n - [ ] [劳动节快乐 | 致敬数字安全时代守护者](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580448&idx=1&sn=94f1f5cf1d75decc68a57c423a1a2d61&subscene=0)\n- Deeplinks\n - [ ] [Washington’s Right to Repair Bill Heads to the Governor](https://www.eff.org/deeplinks/2025/05/washingtons-right-repair-bill-heads-governor)\n - [ ] [Ninth Circuit Hands Users A Big Win: Californians Can Sue Out-of-State Corporations That Violate State Privacy Laws](https://www.eff.org/deeplinks/2025/05/ninth-circuit-hands-users-big-win-californians-can-sue-out-state-corporations)\n- Security Affairs\n - [ ] [Pro-Russia hacktivist group NoName057(16) is targeting Dutch organizations](https://securityaffairs.com/177312/hacktivism/pro-russia-hacktivist-group-noname05716-is-targeting-dutch-organizations.html)\n - [ ] [FBI shared a list of phishing domains associated with the LabHost PhaaS platform](https://securityaffairs.com/177293/cyber-crime/fbi-shared-a-list-of-phishing-domains-associated-with-the-labhost-phaas-platform.html)\n - [ ] [Canadian electric utility Nova Scotia Power and parent company Emera suffered a cyberattack](https://securityaffairs.com/177281/hacking/canadian-electric-utility-nova-scotia-power-and-parent-company-emera-suffered-a-cyberattack.html)\n - [ ] [Two SonicWall SMA100 flaws actively exploited in the wild](https://securityaffairs.com/177278/security/two-sonicwall-sma100-flaws-actively-exploited-in-the-wild.html)\n - [ ] [Hive0117 group targets Russian firms with new variant of DarkWatchman malware](https://securityaffairs.com/177268/cyber-crime/hive0117-targets-russian-firms-with-darkwatchman-malware.html)\n- Tor Project blog\n - [ ] [New Release: Tails 6.15](https://blog.torproject.org/new-release-tails-6_15/)\n - [ ] [Arti 1.4.3 is released: Prometheus metrics support, inital work on Counter Galois Onion and congestion control.](https://blog.torproject.org/arti_1_4_3_released/)\n- Blackhat Library: Hacking techniques and research\n - [ ] [What to do with LOGs](https://www.reddit.com/r/blackhat/comments/1kcfbxq/what_to_do_with_logs/)\n - [ ] [Coordinated spoof campaign traced to offshore scam farm — looking to escalate countermeasures (not mitigation)](https://www.reddit.com/r/blackhat/comments/1kc2cnc/coordinated_spoof_campaign_traced_to_offshore/)\n- Technical Information Security Content & Discussion\n - [ ] [Inside the Latest Espionage Campaign of Nebulous Mantis](https://www.reddit.com/r/netsec/comments/1kc2cae/inside_the_latest_espionage_campaign_of_nebulous/)\n- Full Disclosure\n - [ ] [Microsoft Windows .XRM-MS File / NTLM Information Disclosure\tSpoofing](https://seclists.org/fulldisclosure/2025/May/0)\n- Your Open Hacker Community\n - [ ] [Help Request for a password protected PDF.](https://www.reddit.com/r/HowToHack/comments/1kcbt9n/help_request_for_a_password_protected_pdf/)\n - [ ] [Got a hanshow nebular aldi what now](https://www.reddit.com/r/HowToHack/comments/1kcg3rs/got_a_hanshow_nebular_aldi_what_now/)\n - [ ] [I need to regain admin](https://www.reddit.com/r/HowToHack/comments/1kcf0kj/i_need_to_regain_admin/)\n - [ ] [Is there Is there any way that I can change the date of a Gmail I'm going to send?](https://www.reddit.com/r/HowToHack/comments/1kc4h27/is_there_is_there_any_way_that_i_can_change_the/)\n - [ ] [Need some help hacking someone](https://www.reddit.com/r/HowToHack/comments/1kc8jsd/need_some_help_hacking_someone/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [AI Tips, Tricks, and Traps! - PSW #872](http://sites.libsyn.com/18678/ai-tips-tricks-and-traps-psw-872)\n"}, "ca1c425e0f3ed6d82e7b670a20580557b03101d0": {"t": 1785772253.8451881, "n": 48945, "h": "524a6f27e3339cd0", "c": "# 每日安全资讯（2025-05-02）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-05-01 Review](http://www.sec-wiki.com/?2025-05-01)\n- Trustwave Blog\n - [ ] [Trustwave Takes Home SC Trust Award for Best Managed Security Service](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/trustwave-takes-home-sc-trust-award-for-best-managed-security-service/)\n- Taxodium\n - [ ] [三十岁的日常](https://taxodium.ink//30-years-old.html)\n- Security Boulevard\n - [ ] [Tonic.ai product updates: May 2025](https://securityboulevard.com/2025/05/tonic-ai-product-updates-may-2025/?utm_source=rss&utm_medium=rss&utm_campaign=tonic-ai-product-updates-may-2025)\n - [ ] [Application-Layer Visibility and Security | Contrast ADR vs Traditional Tools | Contrast Security](https://securityboulevard.com/2025/05/application-layer-visibility-and-security-contrast-adr-vs-traditional-tools-contrast-security/?utm_source=rss&utm_medium=rss&utm_campaign=application-layer-visibility-and-security-contrast-adr-vs-traditional-tools-contrast-security)\n - [ ] [BSidesLV24 – Ground Truth – AI In The Human Loop: GenAI In Security Service Delivery](https://securityboulevard.com/2025/05/bsideslv24-ground-truth-ai-in-the-human-loop-genai-in-security-service-delivery/?utm_source=rss&utm_medium=rss&utm_campaign=bsideslv24-ground-truth-ai-in-the-human-loop-genai-in-security-service-delivery)\n - [ ] [The organizational structure of ransomware threat actor groups is evolving before our eyes](https://securityboulevard.com/2025/05/the-organizational-structure-of-ransomware-threat-actor-groups-is-evolving-before-our-eyes/?utm_source=rss&utm_medium=rss&utm_campaign=the-organizational-structure-of-ransomware-threat-actor-groups-is-evolving-before-our-eyes)\n - [ ] [Kubernetes Resource Optimization & Best Practices with Goldilocks](https://securityboulevard.com/2025/05/kubernetes-resource-optimization-best-practices-with-goldilocks/?utm_source=rss&utm_medium=rss&utm_campaign=kubernetes-resource-optimization-best-practices-with-goldilocks)\n - [ ] [The Rise of AI-Driven Cyberattacks: Accelerated Threats Demand Predictive and Real-Time Defenses](https://securityboulevard.com/2025/05/the-rise-of-ai-driven-cyberattacks-accelerated-threats-demand-predictive-and-real-time-defenses/?utm_source=rss&utm_medium=rss&utm_campaign=the-rise-of-ai-driven-cyberattacks-accelerated-threats-demand-predictive-and-real-time-defenses)\n - [ ] [Vulnerability Management: A Race Against Time & Complexity](https://securityboulevard.com/2025/05/vulnerability-management-a-race-against-time-complexity-2/?utm_source=rss&utm_medium=rss&utm_campaign=vulnerability-management-a-race-against-time-complexity-2)\n - [ ] [Report Exposes Soft Security Underbelly of Mobile Computing](https://securityboulevard.com/2025/05/report-exposes-soft-security-underbelly-of-mobile-computing/?utm_source=rss&utm_medium=rss&utm_campaign=report-exposes-soft-security-underbelly-of-mobile-computing)\n - [ ] [BSidesLV24 – Ground Truth – I Won’t Allow My Child To Have A Smartphone: Why Smart Parents Make Not So Smart Children](https://securityboulevard.com/2025/05/bsideslv24-ground-truth-i-wont-allow-my-child-to-have-a-smartphone-why-smart-parents-make-not-so-smart-children/?utm_source=rss&utm_medium=rss&utm_campaign=bsideslv24-ground-truth-i-wont-allow-my-child-to-have-a-smartphone-why-smart-parents-make-not-so-smart-children)\n- Recent Commits to cve:main\n - [ ] [Update Thu May 1 16:03:25 UTC 2025](https://github.com/trickest/cve/commit/a33b0984c0892a54c0c0e962312be3827c226b7f)\n- Microsoft Security Blog\n - [ ] [Analyzing CVE-2025-31191: A macOS security-scoped bookmarks-based sandbox escape](https://www.microsoft.com/en-us/security/blog/2025/05/01/analyzing-cve-2025-31191-a-macos-security-scoped-bookmarks-based-sandbox-escape/)\n - [ ] [Pushing passkeys forward: Microsoft’s latest updates for simpler, safer sign-ins](https://www.microsoft.com/en-us/security/blog/2025/05/01/pushing-passkeys-forward-microsofts-latest-updates-for-simpler-safer-sign-ins/)\n- C-skills\n - [ ] [QUIC trickery](https://c-skills.blogspot.com/2025/05/quic-trickery.html)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [Inventio Lite 4 SQL Injection](https://cxsecurity.com/issue/WLB-2025050009)\n - [ ] [Webenlive CMS - Blind SQL Injection Vulnerability](https://cxsecurity.com/issue/WLB-2025050008)\n - [ ] [unzip-stream 0.3.1 Arbitrary File Write](https://cxsecurity.com/issue/WLB-2025050007)\n - [ ] [AssamLook CMS - Blind SQL Injection Vulnerabilities](https://cxsecurity.com/issue/WLB-2025050006)\n - [ ] [Rejola IT Services - Blind SQL Injection Vulnerability](https://cxsecurity.com/issue/WLB-2025050005)\n - [ ] [Microsoft Windows .XRM-MS File / NTLM Hash Disclosure (Spoofing)](https://cxsecurity.com/issue/WLB-2025050004)\n - [ ] [Zabbix 7.0.0 SQL Injection](https://cxsecurity.com/issue/WLB-2025050003)\n - [ ] [Viper Online - Blind SQL Injection Vulnerability](https://cxsecurity.com/issue/WLB-2025050002)\n - [ ] [Smart Manager 8.27.0 Post-Authenticated SQL Injection](https://cxsecurity.com/issue/WLB-2025050001)\n- InfoSec Write-ups - Medium\n - [ ] [From JS File to Jackpot: How I Found API Keys and Secrets Hidden in Production Code](https://infosecwriteups.com/from-js-file-to-jackpot-how-i-found-api-keys-and-secrets-hidden-in-production-code-87af8750b751?source=rss----7b722bfd1b8d---4)\n - [ ] [Bypassing OTP: Unlocking Vulnerabilities & Securing Your App](https://infosecwriteups.com/bypassing-otp-unlocking-vulnerabilities-securing-your-app-a5eac4727515?source=rss----7b722bfd1b8d---4)\n - [ ] [9 Security Threats in Generative AI Agents](https://infosecwriteups.com/9-security-threats-in-generative-ai-agents-8485aed6efe7?source=rss----7b722bfd1b8d---4)\n - [ ] [Lab: Finding and exploiting an unused API endpoint](https://infosecwriteups.com/lab-finding-and-exploiting-an-unused-api-endpoint-79fa6744f21e?source=rss----7b722bfd1b8d---4)\n - [ ] [Exposing Money Mule Networks on Telegram](https://infosecwriteups.com/exposing-money-mule-networks-on-telegram-381a687e0128?source=rss----7b722bfd1b8d---4)\n - [ ] [$500 Bounty: Hijacking HackerOne via window.opener](https://infosecwriteups.com/500-bounty-hijacking-hackerone-via-window-opener-e16700108e12?source=rss----7b722bfd1b8d---4)\n - [ ] [How I bypassed an IP block… without changing my IP?](https://infosecwriteups.com/how-i-bypassed-an-ip-block-without-changing-my-ip-e8082a43957b?source=rss----7b722bfd1b8d---4)\n - [ ] [Natas2 — Wargames solutions writeup](https://infosecwriteups.com/natas2-wargames-solutions-writeup-2b2946358259?source=rss----7b722bfd1b8d---4)\n - [ ] [Natas1 — Wargames solutions writeup](https://infosecwriteups.com/natas1-wargames-solutions-writeup-1fa5a8c2464a?source=rss----7b722bfd1b8d---4)\n - [ ] [Natas0 — Wargames solution writeup](https://infosecwriteups.com/natas0-wargames-solution-writeup-98a7385828c4?source=rss----7b722bfd1b8d---4)\n- Doonsec's feed\n - [ ] [随笔 | 身份安全的下一个十年（2）](https://mp.weixin.qq.com/s?__biz=MzI1NjQxMzIzMw==&mid=2247497652&idx=1&sn=fec775fc13374ed937280ea6c01e58c5)\n - [ ] [2025版最新黑客最常用的10款黑客工具，零基础入门到精通，收藏这篇就够了](https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247485442&idx=1&sn=6e3eaa6a27ea3efe5da595f5bbf53551)\n - [ ] [年报全出，网络安全行业营收继续萎缩，去年Q4同比下降14.1%，今年Q1下降1.5%](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485789&idx=1&sn=167fe61e86d6bcc16f14f508fc8ef596)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485789&idx=2&sn=167a542699aeedc8179c23e42ce0f82c)\n - [ ] [【干货】笑傲职场的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485789&idx=3&sn=c60fbbf7384cada95f5ad6a73d77a17e)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485789&idx=4&sn=9a975fd2112698ce0172819d891dcb4e)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485789&idx=5&sn=6a8d8a8d3bd1490c3c153234fab0a611)\n - [ ] [2025阳光招生北京升学“大变革”：从“拼娃”到“拼家长”](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485789&idx=6&sn=ed90cbad2592037f0b69a303e500213b)\n - [ ] [【智能法治论坛】分论坛六|人工智能价值对齐与科技向善](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247552089&idx=1&sn=f80407db3f462fd1162d21fcec24ec84)\n - [ ] [数据需“法治”不是“人治”，以往做法不对](https://mp.weixin.qq.com/s?__biz=MzA3OTg3Mjg3NA==&mid=2456976715&idx=1&sn=d85dbc7ddd77dba761e26ac2478a8289)\n - [ ] [追求十全十美，价值性越来越小](https://mp.weixin.qq.com/s?__biz=MzA3OTg3Mjg3NA==&mid=2456976715&idx=2&sn=ef7cb8bd4c55a49c061ca91efa280388)\n - [ ] [资源选择应该有的思路，切勿盲目](https://mp.weixin.qq.com/s?__biz=MzA3OTg3Mjg3NA==&mid=2456976715&idx=3&sn=de1bbf06165904ef73c584f821d5333c)\n - [ ] [网络安全行业，价值导向，并不完全正确](https://mp.weixin.qq.com/s?__biz=MzA3OTg3Mjg3NA==&mid=2456976715&idx=4&sn=068a64b58f3068a023b2de8694a1829a)\n - [ ] [视频 | 百支战队逐鹿榕城！回顾第二届“长城杯”总决赛精彩瞬间](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664241991&idx=1&sn=98a9a01a7b01af1b76fb849c1d004e16)\n - [ ] [视频 | 高校学子遇上网络攻防，看这场大赛如何淬炼“数字青春”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664241991&idx=2&sn=c6ac7e8d83ace3873a57454540165893)\n - [ ] [黑客组织宣称入侵TikTok，逾90万用户凭证遭泄露](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320001&idx=3&sn=375c7ce71e526ca689a06821c3da3208)\n - [ ] [漏洞管理中的四大常见误区及改进方案](https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610476&idx=2&sn=8ae8a8c200c3ebe2674ec8fff081acc7)\n - [ ] [记一次爱加密企业版脱壳与反调试绕过](https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610476&idx=3&sn=2e912076294907d5b15a88e23ee16438)\n - [ ] [微信小程序自动化辅助渗透工具e0e1-wx更新！V2.0](https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610476&idx=4&sn=83b027814ade19f2610cdd1dab8f26a6)\n - [ ] [五一期间大学生必看的5大网络“保命”技巧](https://mp.weixin.qq.com/s?__biz=MzkwNjY1Mzc0Nw==&mid=2247488527&idx=1&sn=cec398b8739dc55ff3a440333cdcce8d)\n - [ ] [Edu证书站 | 某票据系统JS提取未授权通杀](https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486887&idx=1&sn=7df58bc88b76e12f2cffbe71b8e81bec)\n - [ ] [关于个人信息保护，5月1日起施行](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=1&sn=041492df1b4f961d36249dafb5f28b19)\n - [ ] [《个人信息保护合规审计管理办法》答记者问](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=2&sn=52d8c5c7d638e26c2ad44c35e517ebf6)\n - [ ] [专家解读｜出台《个人信息保护合规审计管理办法》 为数字经济持续健康发展保驾护航](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=3&sn=dc0d24f1785a8382338c3c29105d7986)\n - [ ] [专家解读｜开展个人信息保护合规审计 提升数据安全治理监管能力](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=4&sn=1ff54f6a83e671e1eb97d20e7a7198bf)\n - [ ] [专家解读｜建立健全个人信息保护合规审计制度 筑牢维护个人信息安全铜壁铁墙](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=5&sn=eee61626353332deab460353e88bc4fd)\n - [ ] [园区交换机和数据中心交换机有啥区别？](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247530222&idx=1&sn=924b49930fbda8b9ce741746ba1a1a90)\n - [ ] [xss-labs level11 - level20](https://mp.weixin.qq.com/s?__biz=MzkzNTcwOTgxMQ==&mid=2247485853&idx=1&sn=3bc3414c1f9dac495e3c2f4ae801854a)\n - [ ] [300页PPT DeepSeek+：政务办公创新突围](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655277583&idx=1&sn=ad2a8a7c4e7b857e6e647fc4eebd6d07)\n - [ ] [五一专享](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497537&idx=1&sn=c2adab46e30e58a538c50eee9208bc6e)\n - [ ] [SRC舔狗日常](https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519244&idx=1&sn=3ceea522f528f8d5d338cd7b33c57e47)\n - [ ] [假期专享，节后删](https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519244&idx=2&sn=411d04e4c176387cf225ab4e28fd9a12)\n - [ ] [【太空安全】波兰航天局网络攻击内幕](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498568&idx=1&sn=4d8fedcec406eee393530b8570d1c130)\n - [ ] [墨云科技 | 致敬每一位美好生活建设者](https://mp.weixin.qq.com/s?__biz=MzU5ODE2NDA3NA==&mid=2247496933&idx=1&sn=efa22536fe6beb321ff34afe14d02c6d)\n - [ ] [【Pwned Labs】AWS S3 Enumeration Basics：AWS S3 枚举基础知识](https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247486235&idx=1&sn=a99c7118d485c3167b712587d99cb270)\n - [ ] [筑牢网络安全屏障——神州希望助力三亚市政协开展网络安全应急演练](https://mp.weixin.qq.com/s?__biz=MzA4Mzg1ODMwMg==&mid=2650725431&idx=1&sn=63e15f4978d2c974b97003cfa9db15d2)\n - [ ] [羡慕财阀每一天](https://mp.weixin.qq.com/s?__biz=Mzg5NDE2MDQ3Mg==&mid=2247484800&idx=1&sn=2d79d1c0ec00e9730d74ab19b8602228)\n - [ ] [WebDeveloper 流量分析、sudo提权，靶场通关WP](https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247484911&idx=1&sn=051df93011860575415dc01afcd3868b)\n - [ ] [国家数据局局长刘烈宏在第八届数字中国建设峰会上的致辞｜全文](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635669&idx=1&sn=d72677d594cfaad9d222faa444a53b62)\n - [ ] [陕西省密码应用与安全性评估政策宣讲和制度要求工作会议成功召开](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635669&idx=2&sn=5fffe10d46c4d96990a3f344b0a1201b)\n - [ ] [中央网信办部署开展“清朗·整治AI技术滥用”专项行动](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247530915&idx=1&sn=8dc8150cf0456675848d49f71f2cab45)\n - [ ] [通知 | 七部门联合印发《终端设备直连卫星服务管理规定》（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664241957&idx=1&sn=3d94e7ee3fe07aef14206937b726c32d)\n - [ ] [6项网络安全国家标准获批发布](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649172760&idx=1&sn=b15756deb5f7fa2ca4f9ea066dac7b9f)\n - [ ] [【安全圈】苹果隔空播放(AirPlay)协议存在可蠕虫的远程代码执行漏洞 可批量感染大量设备](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=1&sn=15d70e792b5f5150cebe5632890b1182)\n - [ ] [【安全圈】系统考古，Windows 7登录延迟30秒之谜破解：纯色背景竟成元凶](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=2&sn=6f118ec9b12b5035558c92a8cc8c4191)\n - [ ] [【安全圈】纳德拉表示微软现在有30%的代码是由AI进行编写的](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=3&sn=f653ab54d4ebda66b18ce3477f6e7256)\n - [ ] [【安全圈】互联网论坛4Chan被攻击后透露攻击细节 同时声称缺乏资金进行必要维护](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=4&sn=4cf472d902ce7b9372191105abc8f602)\n - [ ] [假期不好过，一行代码导致8000美元损失的事故分析](https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491499&idx=1&sn=a051304be8001d2d3ad3786ab429794f)\n - [ ] [专家解读｜系统规范合规审计 保护个人信息安全](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=6&sn=240fe3ef04f043b38c8378906c3ed44e)\n - [ ] [专家解读｜促进与规范合规审计 提升个人信息保护水平](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=7&sn=0ff7618d4538c2e4bc3c6280e5e938d4)\n - [ ] [海报丨跟着泰小宣廊小评学《个人信息保护合规审计管理办法》](https://mp.weixin.qq.com/s?__biz=Mzg3OTU5NDQ3Ng==&mid=2247491869&idx=8&sn=bdb41d0595d3b59a2be27565214a732d)\n - [ ] [火绒安全2024年终端安全洞察报告](https://mp.weixin.qq.com/s?__biz=MzI5MTIwOTQ5MA==&mid=2247487917&idx=1&sn=78eb83d577176d4daa369806431e7414)\n - [ ] [微软30%代码由AI编写，“机器程序员”成趋势](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932050&idx=1&sn=fbbb934f4efbe2684da737bec6768bb2)\n - [ ] [90万!上海临床研究中心AI数字图像分析平台系统](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932050&idx=2&sn=8c024e63de14cac7082835a387581390)\n - [ ] [以生态力量激发白帽价值 | 斗象受邀出席第二届武汉网络安全创新论坛](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320001&idx=1&sn=5fecb921ae37eea18208ad94b77f69cf)\n - [ ] [AI在安全运营中的实际应用；MCP技术与应用价值探讨 | FB甲方群话题讨论](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320001&idx=2&sn=b1599da3b37e3a616958ab4f91e6be88)\n - [ ] [汽车中为什么会使用ROS操作系统？](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247554529&idx=1&sn=63b2c1f8c09f8f8846a483b1c6e68585)\n - [ ] [深入解析自动驾驶车联网技术及其应用场景](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247554529&idx=2&sn=8af351f0b10d4b5e2999589c176f61c0)\n - [ ] [议题征集｜看雪·第九届安全开发者峰会（SDC 2025）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593263&idx=1&sn=b3503a7dded4e013a4cc644bedbabb48)\n - [ ] [Frida 版 xposed](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593263&idx=2&sn=d9364732d7a20730c91f30f0f3e211b6)\n - [ ] [为Cherry Studio修改数据目录（二）](https://mp.weixin.qq.com/s?__biz=MjM5NDcxMDQzNA==&mid=2247489616&idx=1&sn=f580ec2c56bb69c81e64486c74022d8f)\n - [ ] [《人工智能气象应用服务办法》发布](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649172760&idx=2&sn=474d80080147d083c30973587bb2483f)\n - [ ] [《可信数据空间 技术架构》技术文件发布](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649172760&idx=4&sn=3b92a67ca7825578df75589f13b4417a)\n - [ ] [Docker+Android emu镜像的制作方法](https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247498020&idx=1&sn=614667ded3ab71081df0805402e57dfb)\n - [ ] [与俄罗斯相关的 APT29 利用 GRAPELOADER 恶意软件攻击欧洲外交机构](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498944&idx=1&sn=07c1fe9798dd41630c3098751b15151b)\n - [ ] [后量子密码学对汽车安全的影响——案例研究](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623996&idx=1&sn=6f717f7a41916e0b4c5082740d785535)\n - [ ] [智能网联汽车量子通信技术及其安全应用标准领航研究 2023.12](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623996&idx=2&sn=d9047353d4423f58f5436f257acee116)\n - [ ] [汽车系统的后量子安全无线更新 - NXP, DENSO](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623996&idx=3&sn=f00e9df744caa838a9fc3d64a219aacd)\n - [ ] [好久不见的更新汇报+会员专属五一抽奖](https://mp.weixin.qq.com/s?__biz=MzkzMTY0OTM5Mw==&mid=2247487048&idx=1&sn=0ce4c0644e2b37e9958bf3729fc07006)\n - [ ] [微信账号被封怎么办？详细教大家如何正确填写用途和申请解封原因指南](https://mp.weixin.qq.com/s?__biz=MzI2OTk4MTA3Ng==&mid=2247497205&idx=1&sn=33c320d6779db4bee9d1b08bcda7250b)\n - [ ] [快手账号被永久封禁，还可以解除限制吗？今天教你正确的申诉方法。](https://mp.weixin.qq.com/s?__biz=MzI2OTk4MTA3Ng==&mid=2247497205&idx=2&sn=28062d04bf0c9ec0675a9691084999a8)\n - [ ] [夜莺告警：5分钟明白对万台网络设备设置告警规则的最佳实践](https://mp.weixin.qq.com/s?__biz=MzIzNjU5NDE2MA==&mid=2247490619&idx=1&sn=1513897777a5ecb1211084e757f48fec)\n - [ ] [超便宜港卡攻略：50买卡+6元保号一年，Clubsim详细购买指南](https://mp.weixin.qq.com/s?__biz=MzkyNzYzNTQ2Nw==&mid=2247484578&idx=1&sn=c2c58076c2c9ae8d3930bf05178cf2c4)\n - [ ] [每周网络安全简讯 ( 2025年 第18周 )](https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247521375&idx=1&sn=ffded6692b89d4187ad73f79d58b38a6)\n - [ ] [安全动态丨网络空间安全动态第257期](https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247521375&idx=2&sn=ba5396b56195f40bae76b26e79cb39ae)\n - [ ] [智能网联供应链安全：不容懈怠的风险透视与体系良策](https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247521375&idx=3&sn=ef6070d3d4d7068a31b8e3fd6b83c493)\n - [ ] [聚合生态 共赢未来｜合作伙伴代表团走进山石网科硅谷研发中心](https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661300480&idx=1&sn=270d1c9540644367e72852a22971314b)\n - [ ] [2025 RSAC｜AI-SOC重塑未来企业安全运维](https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661300480&idx=2&sn=ed928def316d0411c3c43e8cdd497402)\n - [ ] [FSRC探索季副本变动公告（福利加码！）](https://mp.weixin.qq.com/s?__biz=MzI2ODY3MzcyMA==&mid=2247505993&idx=1&sn=c562cccb5df6ce255ba8763e5e58445a)\n - [ ] [五一怎么安排呢](https://mp.weixin.qq.com/s?__biz=MzU2MDYxNDQ4Ng==&mid=2247484465&idx=1&sn=cf0f3aa3028f66aa615c186cd5e8d0ce)\n - [ ] [从IBM《2025年X-Force威胁情报指数报告》看安全文化的必要性](https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247485090&idx=1&sn=9c09928204556d838f61e484cd2758c1)\n - [ ] [API接口深度发现的动态爬虫实现(2. 测试报告)](https://mp.weixin.qq.com/s?__biz=MzkyNjM0MjQ2Mw==&mid=2247483759&idx=1&sn=85e08c132a59048972571177c671cc4e)\n - [ ] [【情报】CVE出现罕见的10.0评分漏洞，SAP NetWeaver存在RCE漏洞](https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485752&idx=1&sn=d991fdc2d13d3fc422d3148704ff225a)\n - [ ] [喜迎五一，节日快乐！](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651620879&idx=1&sn=318ab38e29378b59ea79cd95124f564a)\n - [ ] [CraftCMS 存在前台命令执行漏洞 (CVE-2025-32432)](https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489679&idx=1&sn=550fcfaa03734416bba06a439cf8a9fc)\n - [ ] [什么是双频路由器和多频合一？](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649467794&idx=1&sn=3143200f7439622a16d2c3a534abf553)\n - [ ] [混沌代理：劫持 NodeJS 的 Jenkins 代理](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529482&idx=1&sn=ec82af51a2a7471211bc8f353e2c10a5)\n - [ ] [AirPlay 协议中易受蠕虫攻击的零点击远程代码执行 (RCE) 漏洞使 Apple 和 IoT 设备面临风险](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529482&idx=2&sn=662fdb70e9617d5c291c3f9e1734d2f4)\n - [ ] [台湾地区水雷作战运用及对我启示](https://mp.weixin.qq.com/s?__biz=MzkyMjY1MTg1MQ==&mid=2247493767&idx=1&sn=507f14c4556693550dada1eb9df1505d)\n - [ ] [【美军译粹】《和平解决：重塑美国对台防御战略》（美CSBA最新报告）](https://mp.weixin.qq.com/s?__biz=MzkyMjY1MTg1MQ==&mid=2247493767&idx=2&sn=143e898bc6734d0063047294d0d3d152)\n - [ ] [美海军陆战队发布后勤条令《MCTP 3-40B：战术后勤》（2025版）](https://mp.weixin.qq.com/s?__biz=MzkyMjY1MTg1MQ==&mid=2247493767&idx=3&sn=49761da729e8be64ed0853ec961cb2a6)\n - [ ] [美空军发布首个人工智能条令《AFDN 25-1 人工智能》（2025版）](https://mp.weixin.qq.com/s?__biz=MzkyMjY1MTg1MQ==&mid=2247493767&idx=4&sn=7af6df24caa6261cec7b7c70a56b96e8)\n - [ ] [挖洞日记 | Js中的奇妙旅行](https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247549681&idx=1&sn=cf8497c59172b7ad61e8bfb4d8fdda34)\n - [ ] [25年HW最后一批!初级、中级、高级大量招人](https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247549681&idx=2&sn=f1ad9b14289fdc30875f38e4df20a759)\n - [ ] [web选手入门pwn(25)——eazy_heap](https://mp.weixin.qq.com/s?__biz=MzUzNDMyNjI3Mg==&mid=2247487428&idx=1&sn=96832deaf35f2380e14f51b14d21e5c0)\n - [ ] [三天速成！如何利用Claude写医学论文的五步精进攻略（含实操步骤详解）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=1&sn=091cd6c76612bb882893ce151545e901)\n - [ ] [三天完成高质量论文！用Claude写论文的五步精准操作指南（附实操演示）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=2&sn=fc381ddfa1d9b4e423b423108072c267)\n - [ ] [三天掌握：用Claude写论文模板的五步实战指南！（附高效提示词框架）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=3&sn=aa0dcf4e6ce62cacbe9f44c8940a3947)\n - [ ] [三天掌握Claude论文写作全攻略！5步流程让你轻松完成高质量学术文章（含实操演示）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=4&sn=593b9163ad2283719c566fb06673ff1a)\n - [ ] [三天掌握Claude论文写作全流程指南！（附7步精准提示词技巧）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=5&sn=7424871c548bb183c0e285516acb7eee)\n - [ ] [三天掌握Claude喂数据写论文全攻略！（5步精准操作法）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=6&sn=59c3d02d5eb7dcee4828002b90f902ba)\n - [ ] [三天掌握Claude写教学论文全流程实操指南（内含7步精准提示词公式）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=7&sn=97317c6a7c640e1b7b44a1a77ff23317)\n - [ ] [三天掌握Claude写论文背景完整攻略（内含7步精准提示词）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499215&idx=8&sn=a9daa79afa906d75af1f6f157695cc02)\n - [ ] [安帝速递｜【工业网络安全月报2025年-04月】](https://mp.weixin.qq.com/s?__biz=MzU3ODQ4NjA3Mg==&mid=2247567330&idx=1&sn=50a9a3d03d49ac4d2c1376a8bf2bc03f)\n - [ ] [紧急！朝鲜Kimsuky组织利用BlueKeep漏洞，疯狂攻击日韩！](https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486087&idx=1&sn=247be08e59f1f83dd714ecf5dd76e900)\n - [ ] [模型新贵对决：Qwen3、小米 MiMo、DeepSeek Prover V2 谁将改写游戏规则](https://mp.weixin.qq.com/s?__biz=MzkyMDY4MTc2Ng==&mid=2247484268&idx=1&sn=c1ab6f0c92102bae9c2612fbbce870a7)\n - [ ] [10天掌握Claude 3.7国内无墙三大秘技！任意时间畅玩顶级AI（内含隐藏入口）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=1&sn=cb33ada7f6b1020a5d684a6397e7c656)\n - [ ] [30分钟搞定Claude 3.7账号全攻略！三大方法七步上手教程（内附稳定可靠渠道）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=2&sn=0e1d0f655ea99a8ee9dbad09dd078c52)\n - [ ] [3天掌握Claude 3.7国内无墙五步秘籍！零限制畅享AI新境界（附独家稳定资源）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=3&sn=715364986c9f2d3f3d97fb687bfaa63b)\n - [ ] [3天掌握Claude 3.7账号无障碍使用的5步终极方案（内含稀缺资源）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=4&sn=deba1d08ed41a0e8c0a2027f03b3d83e)\n - [ ] [5天内掌握Claude 3.7 Sonnet免费使用的三大秘籍！（附高级破解方案）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=5&sn=bc7f79ec2749661538e483fd1cadd7af)\n - [ ] [5天掌握Claude 3.7低价获取秘籍：三种方案对比与七步实操指南（内附稳定可靠渠道）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=6&sn=14080a1cabb725f2cf248fd7806ea603)\n - [ ] [7天免费使用Claude 3.7 Sonnet的5个隐藏技巧（附详细教程）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=7&sn=f93d77024114ad3a90df5400c52edab5)\n - [ ] [7天免费体验Claude 3.7 Sonnet完全指南（三个实用技巧+一键直达方法）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247499507&idx=8&sn=562fb34230d664a03be472c41e7adb81)\n - [ ] [tcpdump + wireshark 联动 frida，实现APP无感抓取HTTPS数据包](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490658&idx=1&sn=717984da28fb5b9c293216e5d17cac5f)\n - [ ] [安全小工具大集合：三款神器帮你揪出网站中的敏感信息！被动式信息泄漏检测插件！](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490658&idx=2&sn=68272be788d9b7d4481927b4231a5156)\n - [ ] [开源软件安全管理方案](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490658&idx=3&sn=0fd1ebef118f01225bb2d1c624ce2a4b)\n - [ ] [有意向学技术的师傅们 请直接添加这个微信](https://mp.weixin.qq.com/s?__biz=MzkyMDY1MDI3OA==&mid=2247483971&idx=1&sn=ca77bd776fb98eb51abc9d14f5cf1343)\n - [ ] [可信数据空间、低空经济...安恒信息在数字中国收获多项肯定](https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650627738&idx=1&sn=99030571adcbde28ef95fd8162c864b0)\n - [ ] [祝大家五一快乐](https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484717&idx=1&sn=1b3d884194b84a979b0aaa91fcf13b29)\n - [ ] [Rust的ls程序-2](https://mp.weixin.qq.com/s?__biz=Mzk0MTQxOTA3Ng==&mid=2247489527&idx=1&sn=64b5beeaa15980c0ea7d97e6e5fb5d8a)\n - [ ] [虚拟机本地存储热迁移为什么会失败](https://mp.weixin.qq.com/s?__biz=MzUyOTkzMjk1Ng==&mid=2247486302&idx=1&sn=9c3c129a0fa821d120164103757e96f5)\n - [ ] [喜报丨江西神舟信息安全评估中心有限公司攻防支撑部荣获“江西省工人先锋号”称号](https://mp.weixin.qq.com/s?__biz=MzUzNTk2NTIyNw==&mid=2247490802&idx=1&sn=edc174170d57716777664709c624ad33)\n - [ ] [祝白帽师傅们劳动节快乐](https://mp.weixin.qq.com/s?__biz=MzkzOTIyMzYyMg==&mid=2247495224&idx=1&sn=a7ea52bcd7b76cd403fad130b1f65e40)\n - [ ] [网络安全知识库五一特惠活动：新会员立减30元！](https://mp.weixin.qq.com/s?__biz=MzkzNjQwOTc4MQ==&mid=2247490555&idx=1&sn=16c9c5e7d93caa079d8b21fb8778cc2f)\n - [ ] [T00ls祝各位五一劳动节快乐](https://mp.weixin.qq.com/s?__biz=Mzg3NzYzODU5NQ==&mid=2247485150&idx=1&sn=0e444544aff8dc9a1e5a33bba7ad2c5a)\n - [ ] [五一快乐｜致敬每一个奋斗的你✨](https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484828&idx=1&sn=5ba050abe0c669025993a015088a9844)\n - [ ] [机房=厕所](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498943&idx=1&sn=58770e9540c673bdd250c814da126173)\n - [ ] [1v1论文辅导！985/211专业对口导师手把手全程辅导！](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498943&idx=2&sn=20e9e3428fe033ab1dc2a8a7c185fb94)\n - [ ] [2025年如何破解3389？](https://mp.weixin.qq.com/s?__biz=Mzg3MDcxNTkyMA==&mid=2247484566&idx=1&sn=9e8c7d44836ec0b85bf416e06493fba4)\n - [ ] [IDA 技巧（127）函数](https://mp.weixin.qq.com/s?__biz=MzI1Mjk2MTM1OQ==&mid=2247485551&idx=1&sn=a6dff6f6b604e649f46aa4fa89429988)\n - [ ] [福建省委书记、省人大常委会主任周祖翼会见齐向东](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626677&idx=1&sn=73044e948f3951778931890d20892aa6)\n - [ ] [摩根大通首席信息安全官在RSA大会前发出警告](https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499714&idx=1&sn=8e18f53cf4dcc31b4455ab8ba02a8c15)\n - [ ] [DeFiVulnLabs靶场全系列详解（三十三）ecRecover函数还原签名的地址为0导致可绕过签名转账](https://mp.weixin.qq.com/s?__biz=MzkwMTc2MDE3OA==&mid=2247486603&idx=1&sn=cf6bb1c83a57cea882d6e6f71709e862)\n - [ ] [医疗企业被处罚背后的安全问题](https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489226&idx=1&sn=1ca4b91834a09b86ea1d0341c550dc01)\n - [ ] [面临困境的漏洞管理生态系统](https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484713&idx=1&sn=c4477dd9b0ca46b1ae12b8c2c19dd399)\n - [ ] [网安护航，五一无忧](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493999&idx=1&sn=367d3720ca8604ca4920239bec17b1a6)\n - [ ] [假期出行多注意，网络安全10条提示记心里](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115460&idx=1&sn=92f5f34fe3e569c69534a8d252014118)\n - [ ] [继续谈客户端 SYN-SYN/ACK-RST 问题](https://mp.weixin.qq.com/s?__biz=MzA5NTUxODA0OA==&mid=2247493403&idx=1&sn=f5cdad776060570445604a5005c74530)\n - [ ] [【五一快乐】岁月不负耕耘，匠心必有回响](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788520&idx=1&sn=b24342bf900ab163a57b4fccd6964427)\n - [ ] [联想全球安全实验室恭祝大家劳动节快乐！](https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247491979&idx=1&sn=7ca8254f01f24e2bc07265c384cde180)\n - [ ] [Dear 「YAKer」，五一快乐！](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528127&idx=1&sn=dddf096600b47026d0cf72245124c3b3)\n - [ ] [三未信安祝您五一劳动节快乐！](https://mp.weixin.qq.com/s?__biz=MzA5ODk0ODM5Nw==&mid=2650331416&idx=1&sn=35641f6cfffc6249a19001663581f3a9)\n - [ ] [漏洞挖掘展锋芒，五一佳节乐无疆——360漏洞云祝您五一劳动节快乐](https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503663&idx=1&sn=bcc78eeb0df6d8f28972e7a1b672eea8)\n - [ ] [漏洞挖掘铸辉煌，五一安康乐满堂——360众测祝您五一劳动节快乐](https://mp.weixin.qq.com/s?__biz=MzkwODM0MTgyNQ==&mid=2247489555&idx=1&sn=26d41fdb1cf22a34a78bcc50863c1854)\n - [ ] [劳动最光荣，致敬网安人——HackingClub祝您劳动节快乐](https://mp.weixin.qq.com/s?__biz=MzkxMzE4MTc5Ng==&mid=2247499609&idx=1&sn=e06a6bec38cddc7cfbd6a74740136cc7)\n - [ ] [五一劳动节，致敬不凡，致敬平凡！](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247599609&idx=1&sn=ae5271b087b161a5e091b77f76a6d62e)\n - [ ] [权威解答 | 《终端设备直连卫星服务管理规定》答记者问](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664241957&idx=2&sn=e6d1ecb78a930c146adee00cd93046cc)\n - [ ] [一次从注册功能隐藏到发现的sql注入漏洞](https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492100&idx=1&sn=18b45884d06bcca22ae4c74964f66c3d)\n - [ ] [成为黑客 需要掌握哪些知识？](https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497249&idx=1&sn=1528d54d9853a8ed30e298b92b2e807a)\n - [ ] [你的网站老被塞“小纸条”？教你两招！](https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497249&idx=2&sn=3ff64e97a10572c3441cdcd14f1e75cf)\n - [ ] [这个五一，让自动化系统值守——您的假期由我们守护！](https://mp.weixin.qq.com/s?__biz=Mzk0ODI4MDI4Nw==&mid=2247494636&idx=1&sn=adb45fb255e23267313e8bb150b93e7d)\n - [ ] [四川某大学教材订购系统存在任意用户密码找回](https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486872&idx=1&sn=256202bd0fd33ab1c509071f3200756f)\n - [ ] [Dear「YAKer」，五一快乐！](https://mp.weixin.qq.com/s?__biz=MzIwMzI1MDg2Mg==&mid=2649945542&idx=1&sn=445559ecc6a82b7dc1537a2bdf141b68)\n - [ ] [劳动节｜致敬不凡 致敬平凡](https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247507943&idx=1&sn=44e6f32104fb94c555c5b341fc3b19d8)\n - [ ] [全国装备制造业数字供应链平台应用成效——第八届数字中国建设峰会工业互联网产业生态大会成果发布](https://mp.weixin.qq.com/s?__biz=MzkyMDMwNTkwNg==&mid=2247487544&idx=1&sn=54fcdb90a796115dd9e12086384c6ba8)\n - [ ] [技术攻坚破万难，五一喜乐共腾欢——360众包祝您五一劳动节快乐](https://mp.weixin.qq.com/s?__biz=MzkzNjIyNjM1OA==&mid=2247485096&idx=1&sn=dee8d77d7b219b8b63036e5ac9a1220c)\n - [ ] [【重拳出击】中央网信办部署开展“清朗·整治AI技术滥用”专项行动](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498562&idx=1&sn=7717822e38e6f8a93da34c7bf9a0db37)\n - [ ] [vLLM 的 Mooncake 存在严重 RCE 漏洞（10)](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498562&idx=2&sn=627b2b4f0bf40d30aa0679f5febc511c)\n - [ ] [你收到通知了吗？苹果向全球间谍软件攻击的新受害者发出警报](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247509548&idx=1&sn=f65dd6d8f2a5e9da890d6d12637cc221)\n - [ ] [微软远程桌面惊现\\\"口令时光机\\\"：旧口令为何能永久通行？](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247509548&idx=2&sn=d602794e7e990f5bf109d59b3eb8d661)\n - [ ] [【暗网快讯】20250501期](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247509548&idx=3&sn=8cf2536736cb0834a92ca21006a2d554)\n - [ ] [5th域安全微讯早报【20250501】104期](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247509548&idx=4&sn=55d4ce7ca72eced1aac461a9b2009ec7)\n - [ ] [网络安全大模型](https://mp.weixin.qq.com/s?__biz=MzI1NzUxOTUzMA==&mid=2247485969&idx=1&sn=f86beebf5c48923bd25636c30abff614)\n - [ ] [致敬每一位劳动者！](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664241922&idx=1&sn=393bcda965c61c90aa793e08ea28cec7)\n - [ ] [今日实施生效！关于个保审计的十问十答](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518327&idx=1&sn=401b4f0d1ae34217b9a45247171105dd)\n - [ ] [赛博研究院祝您五一劳动节快乐！](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518327&idx=2&sn=db7d8c90ac49fbe9502c25a485efab8c)\n - [ ] [深入解析 Win11 24H2 KB5055627 预览更新：本地 AI 功能详解、关键修复与测试建议](https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900490&idx=1&sn=d81015ce03e8b6d8d500a4d3e87b7609)\n - [ ] [当AI学会“欺骗”自己：揭秘MCP协议如何成为攻防战场的新焦点](https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487806&idx=1&sn=6c424b8cfd23de0cf6b5d31ec535b263)\n - [ ] [致敬每一份耕耘，赞美每一份坚守 | 五一劳动节快乐](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247530915&idx=2&sn=c2d0d3c9cce2aab8fc2fa2b29862bc10)\n - [ ] [向劳动者致敬！赛查查祝大家五一劳动节快乐！](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247492334&idx=1&sn=9bb4d35993721af9fab904056990afe7)\n - [ ] [能信安科技：向劳动者致敬！](https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491082&idx=1&sn=0c642b674b4fb808f3d1485e282132a2)\n - [ ] [腾讯内部工位曝光，被全公司围观的工位竟长这样！](https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649793103&idx=1&sn=4eef1e16b2064da949cfddbd62820880)\n - [ ] [内部小圈子重大升级：新增内部圈子知识库+五一30元优惠价](https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489781&idx=1&sn=6c044ed8adfbb418b8a7b1266b25f1bd)\n - [ ] [劳 动 最 光 荣 ！](https://mp.weixin.qq.com/s?__biz=MzI5NjA4NjA3OA==&mid=2652102497&idx=1&sn=f8212cf549d255b1e8f340f0a6bd009d)\n - [ ] [五一快乐 | 向每一位劳动者致敬](https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649818925&idx=1&sn=d9b9efed00333317a10bfd13f1fea7ad)\n - [ ] [赛宁网安 | 筑牢安全防线，致敬劳动荣光!](https://mp.weixin.qq.com/s?__biz=MzA4Mjk5NjU3MA==&mid=2455488917&idx=1&sn=a082b0d2ce22b7c1609753a145e4b3a0)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [From JS File to Jackpot: How I Found API Keys and Secrets Hidden in Production Code](https://infosecwriteups.com/from-js-file-to-jackpot-how-i-found-api-keys-and-secrets-hidden-in-production-code-87af8750b751?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Lab: Finding and exploiting an unused API endpoint](https://infosecwriteups.com/lab-finding-and-exploiting-an-unused-api-endpoint-79fa6744f21e?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [$500 Bounty: Hijacking HackerOne via window.opener](https://infosecwriteups.com/500-bounty-hijacking-hackerone-via-window-opener-e16700108e12?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [How I bypassed an IP block… without changing my IP?](https://infosecwriteups.com/how-i-bypassed-an-ip-block-without-changing-my-ip-e8082a43957b?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Non-Serializable Object Stored in Session](https://infosecwriteups.com/non-serializable-object-stored-in-session-d7233431cb6?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Mastering RCE: How I Exploit Remote Code Execution Bugs Like a Pro](https://infosecwriteups.com/mastering-rce-how-i-exploit-remote-code-execution-bugs-like-a-pro-ddcc816552bf?source=rss----7b722bfd1b8d--bug_bounty)\n- The Trail of Bits Blog\n - [ ] [Making PyPI's test suite 81% faster](https://blog.trailofbits.com/2025/05/01/making-pypis-test-suite-81-faster/)\n- Reverse Engineering\n - [ ] [/r/ReverseEngineering's Triannual Hiring Thread](https://www.reddit.com/r/ReverseEngineering/comments/1kc2kl6/rreverseengineerings_triannual_hiring_thread/)\n - [ ] [How I Found Malware in a BeamNG Mod](https://www.reddit.com/r/ReverseEngineering/comments/1kc7bwk/how_i_found_malware_in_a_beamng_mod/)\n - [ ] [Pwning the Ladybird browser](https://www.reddit.com/r/ReverseEngineering/comments/1kcauwj/pwning_the_ladybird_browser/)\n - [ ] [CVE-2025-21756: Attack of the Vsock](https://www.reddit.com/r/ReverseEngineering/comments/1kc7d3y/cve202521756_attack_of_the_vsock/)\n- Didier Stevens\n - [ ] [Overview of Content Published in April](https://blog.didierstevens.com/2025/05/01/overview-of-content-published-in-april-9/)\n- Malwarebytes\n - [ ] [Apple AirPlay SDK devices at risk of takeover—make sure you update](https://www.malwarebytes.com/blog/news/2025/05/apple-airplay-sdk-devices-at-risk-of-takeover-make-sure-you-update)\n - [ ] [The 3 biggest cybersecurity threats to small businesses](https://www.malwarebytes.com/blog/news/2025/05/the-3-biggest-cybersecurity-threats-to-small-businesses)\n - [ ] [Zero-day attacks on browsers and smartphones drop, says Google](https://www.malwarebytes.com/blog/news/2025/05/zero-day-attacks-on-browsers-and-smartphones-drop-says-google)\n- Exploit-DB.com RSS Feed\n - [ ] [[local] Microsoft - NTLM Hash Disclosure Spoofing (library-ms)](https://www.exploit-db.com/exploits/52280)\n - [ ] [[local] ZTE ZXV10 H201L - RCE via authentication bypass](https://www.exploit-db.com/exploits/52279)\n - [ ] [[local] Daikin Security Gateway 14 - Remote Password Reset](https://www.exploit-db.com/exploits/52278)\n - [ ] [[local] Microsoft Windows - XRM-MS File NTLM Information Disclosure Spoofing](https://www.exploit-db.com/exploits/52277)\n- CCC Event Blog\n - [ ] [Chaos Singularity 2025](https://events.ccc.de/2025/05/01/cosin-2025/)\n- rtl-sdr.com\n - [ ] [RTL-SDR Provides Vital Information during Portugal & Spain Blackout](https://www.rtl-sdr.com/rtl-sdr-provides-vital-information-during-portugal-spain-blackout/)\n- 奇客Solidot–传递最新科技情报\n - [ ] [Redis 8 再次切换到开源许可证 AGPLv3](https://www.solidot.org/story?sid=81200)\n - [ ] [测试兆芯 KX-7000 系列 CPU](https://www.solidot.org/story?sid=81199)\n - [ ] [微软 CEO 声称该公司三成新代码是用 AI 写的](https://www.solidot.org/story?sid=81198)\n - [ ] [任天堂之后 Xbox 游戏也将提高至 80 美元](https://www.solidot.org/story?sid=81197)\n - [ ] [多邻国使用 AI 将课程数量翻了一番](https://www.solidot.org/story?sid=81196)\n - [ ] [ESA 发射 Biomass 卫星测量全球森林的碳储量](https://www.solidot.org/story?sid=81195)\n - [ ] [维基百科将使用 AI 帮助编辑处理事务](https://www.solidot.org/story?sid=81194)\n- 锦行科技\n - [ ] [网安护航，五一无忧](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493999&idx=1&sn=367d3720ca8604ca4920239bec17b1a6&subscene=0)\n- 看雪学苑\n - [ ] [议题征集｜看雪·第九届安全开发者峰会（SDC 2025）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593263&idx=1&sn=b3503a7dded4e013a4cc644bedbabb48&subscene=0)\n - [ ] [Frida 版 xposed](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593263&idx=2&sn=d9364732d7a20730c91f30f0f3e211b6&subscene=0)\n- 安全客\n - [ ] [【五一快乐】岁月不负耕耘，匠心必有回响](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788520&idx=1&sn=b24342bf900ab163a57b4fccd6964427&subscene=0)\n- 威努特安全网络\n - [ ] [威努特五一假期业务保障通知](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651132747&idx=1&sn=01d46fd0c0fe77aa2bb9dd5222865865&subscene=0)\n- dotNet安全矩阵\n - [ ] [.NET 内网实战：通过 TcpListener 实现任意端口转发](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499571&idx=1&sn=e571092a871e8751009675d4b779c1cb&subscene=0)\n - [ ] [.NET 安全攻防知识交流社区](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499571&idx=2&sn=39dad6b8b3daa182740d0c9df93244d4&subscene=0)\n - [ ] [红队视角下通过 .NET 动态构造 IL 实现免杀的WebShell](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499571&idx=3&sn=fab6bbb9a101c7009c8549bab4e64850&subscene=0)\n- 信息安全国家工程研究中心\n - [ ] [5·1劳动节 | 为劳动者喝彩！](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247499461&idx=1&sn=99c8dad8928370899d8a56dfc0fe9480&subscene=0)\n- 安全内参\n - [ ] [未履行网络安全与数据安全保护义务，上海多家互联网医疗企业被处罚通报](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514287&idx=1&sn=21f528f6c13c5388e6e212ec2c5a437b&subscene=0)\n- 中国信息安全\n - [ ] [致敬每一位劳动者！](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664241922&idx=1&sn=393bcda965c61c90aa793e08ea28cec7&subscene=0)\n- 安全圈\n - [ ] [【安全圈】苹果隔空播放(AirPlay)协议存在可蠕虫的远程代码执行漏洞 可批量感染大量设备](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=1&sn=15d70e792b5f5150cebe5632890b1182&subscene=0)\n - [ ] [【安全圈】系统考古，Windows 7登录延迟30秒之谜破解：纯色背景竟成元凶](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=2&sn=6f118ec9b12b5035558c92a8cc8c4191&subscene=0)\n - [ ] [【安全圈】纳德拉表示微软现在有30%的代码是由AI进行编写的](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=3&sn=f653ab54d4ebda66b18ce3477f6e7256&subscene=0)\n - [ ] [【安全圈】互联网论坛4Chan被攻击后透露攻击细节 同时声称缺乏资金进行必要维护](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=4&sn=4cf472d902ce7b9372191105abc8f602&subscene=0)\n- 360漏洞云\n - [ ] [漏洞挖掘展锋芒，五一佳节乐无疆——360漏洞云祝您五一劳动节快乐](https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503663&idx=1&sn=bcc78eeb0df6d8f28972e7a1b672eea8&subscene=0)\n- 极客公园\n - [ ] [DeepSeek 发布 Prover-V2 模型；小米首个推理大模型开源；饿了么宣布超百亿补贴加入外卖战局 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653078621&idx=1&sn=b817a1c6c6e1e7610728d96bc135d318&subscene=0)\n- 李姐姐的扫描器\n - [ ] [API接口深度发现的动态爬虫实现(2. 测试报告)](https://mp.weixin.qq.com/s?__biz=MzkyNjM0MjQ2Mw==&mid=2247483759&idx=1&sn=85e08c132a59048972571177c671cc4e&subscene=0)\n- 吾爱破解论坛\n - [ ] [（图作者 | @Aoemax）](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651142541&idx=1&sn=d5e4e1d9851ebb77653be76efeba50ce&subscene=0)\n- Yak Project\n - [ ] [Dear 「YAKer」，五一快乐！](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528127&idx=1&sn=dddf096600b47026d0cf72245124c3b3&subscene=0)\n- TrustedSec\n - [ ] [Why the WAF](https://trustedsec.com/blog/why-the-waf)\n- 迪哥讲事\n - [ ] [五一专享](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497537&idx=1&sn=c2adab46e30e58a538c50eee9208bc6e&subscene=0)\n- ICT Security Magazine\n - [ ] [Budgeting per la sicurezza informatica: responsabilità del CISO](https://www.ictsecuritymagazine.com/notizie/budgeting-ciso/)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Steganography Analysis With pngdump.py: Bitstreams, (Thu, May 1st)](https://isc.sans.edu/diary/rss/31904)\n - [ ] [ISC Stormcast For Thursday, May 1st, 2025 https://isc.sans.edu/podcastdetail/9432, (Thu, May 1st)](https://isc.sans.edu/diary/rss/31914)\n- Have I Been Pwned latest breaches\n - [ ] [TehetségKapu - 54,357 breached accounts](https://haveibeenpwned.com/PwnedWebsites#TehetsegKapu)\n- Schneier on Security\n - [ ] [US as a Surveillance State](https://www.schneier.com/blog/archives/2025/05/us-as-a-surveillance-state.html)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Hacker 'NullBulge' pleads guilty to stealing Disney's Slack data](https://www.bleepingcomputer.com/news/security/hacker-nullbulge-pleads-guilty-to-stealing-disneys-slack-data/)\n - [ ] [More than 100,000 impacted by December data breach at Ascension Health](https://therecord.media/ascension-health-data-breach-impacts-over-100000)\n - [ ] [Defense contractors to pay $8.4 million over charges of failing to meet federal cyber standards](https://therecord.media/defense-contractors-settle-with-dod-false-claims-act)\n - [ ] [Nefilim ransomware suspect extradited from Spain to US](https://therecord.media/nefilim-ransomware-extradited-spain)\n - [ ] [Pro-Russia hacktivists bombard Dutch public orgs with DDoS attacks](https://www.bleepingcomputer.com/news/security/pro-russia-hacktivists-bombard-dutch-public-orgs-with-ddos-attacks/)\n - [ ] [North Korean IT worker scam is now a threat to all companies, cybersecurity experts say](https://therecord.media/north-korean-it-worker-scam-expands-rsa)\n - [ ] [Ukrainian extradited to US for Nefilim ransomware attacks](https://www.bleepingcomputer.com/news/security/ukrainian-extradited-to-us-for-nefilim-ransomware-attacks/)\n - [ ] [Harrods the next UK retailer targeted in a cyberattack](https://www.bleepingcomputer.com/news/security/harrods-the-next-uk-retailer-targeted-in-a-cyberattack/)\n - [ ] [Understanding the challenges of securing an NGO](https://blog.talosintelligence.com/understanding-the-challenges-of-securing-an-ngo/)\n - [ ] [Malicious PyPI packages abuse Gmail, websockets to hijack systems](https://www.bleepingcomputer.com/news/security/malicious-pypi-packages-abuse-gmail-websockets-to-hijack-systems/)\n - [ ] [Apple notifies victims in 100 countries of likely spyware targeting](https://therecord.media/apple-spyware-victims-notified-countries)\n - [ ] [British intelligence facing ‘oversight crisis’ from government interference](https://therecord.media/british-intelligence-oversight-crisis-parliament-committee)\n - [ ] [Poland’s state registry temporarily blocked by cyber incident](https://therecord.media/poland-pesel-system-state-registry-cyber-incident)\n - [ ] [British Library avoids investigation over ransomware attack, praised again for response](https://therecord.media/british-library-no-ico-investigation-ransomware-attack)\n - [ ] [State-of-the-art phishing: MFA bypass](https://blog.talosintelligence.com/state-of-the-art-phishing-mfa-bypass/)\n - [ ] [TehetségKapu - 54,357 breached accounts](https://haveibeenpwned.com/PwnedWebsites#TehetsegKapu)\n - [ ] [Guerre di Rete - Lavoro e automazione, chip e sorveglianza - il recap del mese](https://guerredirete.substack.com/p/guerre-di-rete-lavoro-e-automazione)\n - [ ] [Vulnerability & Patch Roundup — April 2025](https://blog.sucuri.net/2025/04/vulnerability-patch-roundup-april-2025.html)\n - [ ] [Hackers abuse IPv6 networking feature to hijack software updates](https://www.bleepingcomputer.com/news/security/hackers-abuse-ipv6-networking-feature-to-hijack-software-updates/)\n- The Hacker News\n - [ ] [Fake Security Plugin on WordPress Enables Remote Admin Access for Attackers](https://thehackernews.com/2025/05/fake-security-plugin-on-wordpress.html)\n - [ ] [Why top SOC teams are shifting to Network Detection and Response](https://thehackernews.com/2025/05/why-top-soc-teams-are-shifting-to.html)\n - [ ] [Claude AI Exploited to Operate 100+ Fake Political Personas in Global Influence Campaign](https://thehackernews.com/2025/05/claude-ai-exploited-to-operate-100-fake.html)\n - [ ] [New Research Reveals: 95% of AppSec Fixes Don’t Reduce Risk](https://thehackernews.com/2025/05/new-research-reveals-95-of-appsec-fixes.html)\n - [ ] [DarkWatchman, Sheriff Malware Hit Russia and Ukraine with Stealth and Nation-Grade Tactics](https://thehackernews.com/2025/05/darkwatchman-sheriff-malware-hit-russia.html)\n - [ ] [Commvault Confirms Hackers Exploited CVE-2025-3928 as Zero-Day in Azure Breach](https://thehackernews.com/2025/05/commvault-confirms-hackers-exploited.html)\n - [ ] [SonicWall Confirms Active Exploitation of Flaws Affecting Multiple Appliance Models](https://thehackernews.com/2025/05/sonicwall-confirms-active-exploitation.html)\n- Troy Hunt's Blog\n - [ ] [Welcoming The Gambia National CSIRT to Have I Been Pwned](https://www.troyhunt.com/welcoming-the-gambia-national-csirt-to-have-i-been-pwned/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [Upcoming beta-test exam: Certnexus CSSD](https://www.reddit.com/r/netsecstudents/comments/1kchzjj/upcoming_betatest_exam_certnexus_cssd/)\n- 360数字安全\n - [ ] [劳动节快乐 | 致敬数字安全时代守护者](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580448&idx=1&sn=94f1f5cf1d75decc68a57c423a1a2d61&subscene=0)\n- Deeplinks\n - [ ] [Washington’s Right to Repair Bill Heads to the Governor](https://www.eff.org/deeplinks/2025/05/washingtons-right-repair-bill-heads-governor)\n - [ ] [Ninth Circuit Hands Users A Big Win: Californians Can Sue Out-of-State Corporations That Violate State Privacy Laws](https://www.eff.org/deeplinks/2025/05/ninth-circuit-hands-users-big-win-californians-can-sue-out-state-corporations)\n- Security Affairs\n - [ ] [Pro-Russia hacktivist group NoName057(16) is targeting Dutch organizations](https://securityaffairs.com/177312/hacktivism/pro-russia-hacktivist-group-noname05716-is-targeting-dutch-organizations.html)\n - [ ] [FBI shared a list of phishing domains associated with the LabHost PhaaS platform](https://securityaffairs.com/177293/cyber-crime/fbi-shared-a-list-of-phishing-domains-associated-with-the-labhost-phaas-platform.html)\n - [ ] [Canadian electric utility Nova Scotia Power and parent company Emera suffered a cyberattack](https://securityaffairs.com/177281/hacking/canadian-electric-utility-nova-scotia-power-and-parent-company-emera-suffered-a-cyberattack.html)\n - [ ] [Two SonicWall SMA100 flaws actively exploited in the wild](https://securityaffairs.com/177278/security/two-sonicwall-sma100-flaws-actively-exploited-in-the-wild.html)\n - [ ] [Hive0117 group targets Russian firms with new variant of DarkWatchman malware](https://securityaffairs.com/177268/cyber-crime/hive0117-targets-russian-firms-with-darkwatchman-malware.html)\n- Tor Project blog\n - [ ] [New Release: Tails 6.15](https://blog.torproject.org/new-release-tails-6_15/)\n - [ ] [Arti 1.4.3 is released: Prometheus metrics support, inital work on Counter Galois Onion and congestion control.](https://blog.torproject.org/arti_1_4_3_released/)\n- Blackhat Library: Hacking techniques and research\n - [ ] [What to do with LOGs](https://www.reddit.com/r/blackhat/comments/1kcfbxq/what_to_do_with_logs/)\n - [ ] [Coordinated spoof campaign traced to offshore scam farm — looking to escalate countermeasures (not mitigation)](https://www.reddit.com/r/blackhat/comments/1kc2cnc/coordinated_spoof_campaign_traced_to_offshore/)\n- Technical Information Security Content & Discussion\n - [ ] [Inside the Latest Espionage Campaign of Nebulous Mantis](https://www.reddit.com/r/netsec/comments/1kc2cae/inside_the_latest_espionage_campaign_of_nebulous/)\n- Full Disclosure\n - [ ] [Microsoft Windows .XRM-MS File / NTLM Information Disclosure\tSpoofing](https://seclists.org/fulldisclosure/2025/May/0)\n- Your Open Hacker Community\n - [ ] [Help Request for a password protected PDF.](https://www.reddit.com/r/HowToHack/comments/1kcbt9n/help_request_for_a_password_protected_pdf/)\n - [ ] [Got a hanshow nebular aldi what now](https://www.reddit.com/r/HowToHack/comments/1kcg3rs/got_a_hanshow_nebular_aldi_what_now/)\n - [ ] [I need to regain admin](https://www.reddit.com/r/HowToHack/comments/1kcf0kj/i_need_to_regain_admin/)\n - [ ] [Is there Is there any way that I can change the date of a Gmail I'm going to send?](https://www.reddit.com/r/HowToHack/comments/1kc4h27/is_there_is_there_any_way_that_i_can_change_the/)\n - [ ] [Need some help hacking someone](https://www.reddit.com/r/HowToHack/comments/1kc8jsd/need_some_help_hacking_someone/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [AI Tips, Tricks, and Traps! - PSW #872](http://sites.libsyn.com/18678/ai-tips-tricks-and-traps-psw-872)\n"}}, "archive/daily/2025/2025-03-22.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747324.5248647, "n": 60468, "h": "d222e12ea82de4b8", "c": "# 每日安全资讯（2025-03-22）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-03-21 Review](http://www.sec-wiki.com/?2025-03-21)\n- Verne in GitHub\n - [ ] [RAG 简介](https://blog.einverne.info/post/2025/03/rag.html)\n- 奇安信攻防社区\n - [ ] [探索SQL注入中数学函数的应用：绕过过滤、\"算\"出数据](https://forum.butian.net/share/4210)\n- Tenable Blog\n - [ ] [Cybersecurity Snapshot: Tenable Highlights Risks of AI Use in the Cloud, as UK’s NCSC Offers Tips for Post-Quantum Cryptography Adoption](https://www.tenable.com/blog/cybersecurity-snapshot-tenable-highlights-risks-of-ai-use-in-the-cloud-as-uks-ncsc-offers-tips)\n- Recent Commits to cve:main\n - [ ] [Update Fri Mar 21 16:19:01 UTC 2025](https://github.com/trickest/cve/commit/b75fcd7c5b3da31490874f18cb61770725f6a365)\n- Trustwave Blog\n - [ ] [The Energy Industry’s Hidden Risks: Espionage, Sabotage, and Insider Threats](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/the-energy-industrys-hidden-risks-espionage-sabotage-and-insider-threats/)\n- 一个被知识诅咒的人\n - [ ] [【人工智能】LM Studio 的 GPU 加速：释放大模型推理潜能的极致优化](https://blog.csdn.net/nokiaguy/article/details/146426756)\n - [ ] [【人工智能】Ollama 的 API 操作指南：打造个性化大模型服务](https://blog.csdn.net/nokiaguy/article/details/146426734)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [隐私保护没有旁观者，梆梆安全助力企业构筑数字时代的信任防线](https://www.4hou.com/posts/om0Y)\n - [ ] [趋势洞察 | 鸿蒙应用安全新纪元：移动应用加固技术发展趋势洞察](https://www.4hou.com/posts/gyGk)\n - [ ] [“鉴真”获昆明反诈中心推荐，教你五步远离AI诈骗！](https://www.4hou.com/posts/vwz8)\n - [ ] [“鉴真”上线“贵港警事”，一键识破假视频/假图片！](https://www.4hou.com/posts/rpv2)\n - [ ] [我国首个AI生成内容标识办法发布，国投智能参与起草](https://www.4hou.com/posts/qor7)\n - [ ] [PHP XXE 注入漏洞允许攻击者访问配置文件和私钥](https://www.4hou.com/posts/jBVy)\n- Jiajun的技术笔记\n - [ ] [Replace docker with podman](https://jiajunhuang.com/articles/2025_03_21-podman.md.html)\n- InfoSec Write-ups - Medium\n - [ ] [Understanding the Psychology of Bug Bounty Triage Teams — Why Some Bugs Get Marked as Duplicates…](https://infosecwriteups.com/understanding-the-psychology-of-bug-bounty-triage-teams-why-some-bugs-get-marked-as-duplicates-cab9195c6f58?source=rss----7b722bfd1b8d---4)\n - [ ] [Phase I — Implement free Microsoft IAM Services for Cloud-only Identities](https://infosecwriteups.com/phase-i-implement-free-microsoft-iam-services-for-cloud-only-identities-e25706ada193?source=rss----7b722bfd1b8d---4)\n - [ ] [Vanilla PowerShell Reverse Shell Using ICMP](https://infosecwriteups.com/vanilla-powershell-reverse-shell-using-icmp-42b0d5697d9b?source=rss----7b722bfd1b8d---4)\n - [ ] [Get $5000: GitHub Dorks & Leaks](https://infosecwriteups.com/get-5000-github-dorks-leaks-b26728099d38?source=rss----7b722bfd1b8d---4)\n - [ ] [How to Route Traffic from WSL to Burp Suite on Windows: A Step-by-Step Guide](https://infosecwriteups.com/how-to-route-traffic-from-wsl-to-burp-suite-on-windows-a-step-by-step-guide-38d58f65b21a?source=rss----7b722bfd1b8d---4)\n - [ ] [What Are Black-Box LLMs, and Why Are They a Growing Concern in API-Based AI Models?](https://infosecwriteups.com/what-are-black-box-llms-and-why-are-they-a-growing-concern-in-api-based-ai-models-a95a48b67896?source=rss----7b722bfd1b8d---4)\n - [ ] [The Hidden Risk in AI-Generated Code: A Silent Backdoor](https://infosecwriteups.com/the-hidden-risk-in-ai-generated-code-a-silent-backdoor-7dc3c1279cb6?source=rss----7b722bfd1b8d---4)\n - [ ] [$50K Bounty Just for GitHub Access Token exposure](https://infosecwriteups.com/50k-bounty-just-for-github-access-token-exposure-d92dcc34eb4d?source=rss----7b722bfd1b8d---4)\n - [ ] [$200+ Bug Bounty Payouts: Exploiting Content Providers with SQL Injection](https://infosecwriteups.com/200-bug-bounty-payouts-exploiting-content-providers-with-sql-injection-abd287179b61?source=rss----7b722bfd1b8d---4)\n - [ ] [Adversarial AI Digest — 20 March, 2025](https://infosecwriteups.com/adversarial-ai-digest-20-march-2025-2e3cde5c34bb?source=rss----7b722bfd1b8d---4)\n- 安全客-有思想的安全新媒体\n - [ ] [DCMTK三大安全漏洞曝光！中科固源Wisdom模糊自定义漏洞挖掘产品推动医疗信息安全升级](https://www.anquanke.com/post/id/305296)\n - [ ] [中科固源基于覆盖引导的 Fuzzing 神器登场，开源模糊测试迎来新技术迭代](https://www.anquanke.com/post/id/305294)\n - [ ] [CVE-2025-23120 ：Veeam Backup & Replication 严重 RCE 漏洞已修复，尽快修补！](https://www.anquanke.com/post/id/305287)\n - [ ] [Tenable 警告称 DeepSeek AI 模型易遭破解用于生成恶意软件](https://www.anquanke.com/post/id/305284)\n - [ ] [大模型如何挖洞| 15期字节跳动安全范儿沙龙开启](https://www.anquanke.com/post/id/305280)\n - [ ] [谷歌以 320 亿美元收购 Wiz，云安全中立性引发广泛担忧](https://www.anquanke.com/post/id/305276)\n - [ ] [恶意软件行动 “DollyWay”：全球超 2 万个 WordPress 网站惨遭攻陷](https://www.anquanke.com/post/id/305273)\n - [ ] [Babuk 勒索软件组织宣称对电信公司 Orange 发起攻击](https://www.anquanke.com/post/id/305271)\n - [ ] [CISA 将 Edimax IC-7100 IP Camera、NAKIVO 和 SAP NetWeaver AS Java 纳入已知被利用漏洞库](https://www.anquanke.com/post/id/305266)\n - [ ] [IBM AIX 漏洞可致攻击者执行任意命令](https://www.anquanke.com/post/id/305258)\n - [ ] [Cisco Smart Licensing Utility 遭黑客利用多重漏洞入侵](https://www.anquanke.com/post/id/305255)\n - [ ] [新型隐写恶意软件利用 JPEG 文件来传播信息窃取程序](https://www.anquanke.com/post/id/305252)\n - [ ] [360赋能政务“一网统管”新突破！安全运营效率提升150%](https://www.anquanke.com/post/id/305246)\n- Twitter @Nicolas Krassas\n - [ ] [Global Jira targeting conducted by HellCat as Ascom confirms breach https://www.scworld.com/brief/global-jira-targeting-conducted-by-hellcat-as-ascom-...](https://x.com/Dinosn/status/1903163918186315815)\n - [ ] [Personal data revealed in released JFK files https://www.malwarebytes.com/blog/news/2025/03/personal-data-revealed-in-released-jfk-files](https://x.com/Dinosn/status/1903163720399806688)\n - [ ] [Fake Semrush ads used to steal SEO professionals’ Google accounts https://www.bleepingcomputer.com/news/security/fake-semrush-ads-used-to-steal-seo-p...](https://x.com/Dinosn/status/1903163679669116981)\n - [ ] [Checkpoint ZoneAlarm Driver Flaw Exposes Users to Credential Theft https://hackread.com/checkpoint-zonealarm-driver-flaw-user-credential-theft/](https://x.com/Dinosn/status/1903163639919517778)\n - [ ] [Microsoft: Exchange Online bug mistakenly quarantines user emails https://www.bleepingcomputer.com/news/microsoft/microsoft-exchange-online-bug-mistak...](https://x.com/Dinosn/status/1903163609909432496)\n - [ ] [Suspected Chinese-linked hackers set sights on Taiwan https://www.scworld.com/brief/suspected-chinese-linked-hackers-set-sights-on-taiwan](https://x.com/Dinosn/status/1903130084292141234)\n - [ ] [GitHub Action supply chain attack less impactful than thought https://www.scworld.com/brief/github-action-supply-chain-attack-less-impactful-than-thou...](https://x.com/Dinosn/status/1903128947136623100)\n - [ ] [Data breach refuted by Baidu after user info leak https://www.scworld.com/brief/data-breach-refuted-by-baidu-after-user-info-leak](https://x.com/Dinosn/status/1903128530268930050)\n - [ ] [History of NULL Pointer Dereferences on macOS https://afine.com/history-of-null-pointer-dereferences-on-macos/](https://x.com/Dinosn/status/1903128109831889315)\n - [ ] [US removes sanctions against Tornado Cash crypto mixer https://www.bleepingcomputer.com/news/security/us-removes-sanctions-against-tornado-cash-crypto...](https://x.com/Dinosn/status/1903127734886244391)\n - [ ] [Former NFL, Michigan Assistant Coach Matt Weiss Charged With Hacking for Athletes’ Intimate Photos https://www.securityweek.com/former-nfl-michigan-a...](https://x.com/Dinosn/status/1903100274396344728)\n - [ ] [Ransomware Group Claims Attacks on Ascom, Jaguar Land Rover https://www.securityweek.com/ransomware-group-claims-attacks-on-ascom-jaguar-land-rover/](https://x.com/Dinosn/status/1903100239923343779)\n - [ ] [Kaspersky Links Head Mare to Twelve, Targeting Russian Entities via Shared C2 Servers https://thehackernews.com/2025/03/kaspersky-links-head-mare-to-t...](https://x.com/Dinosn/status/1903098079458292040)\n - [ ] [Chinese I-Soon Hackers Hit 7 Organizations in Operation FishMedley https://www.securityweek.com/chinese-i-soon-hackers-hit-7-organizations-in-operatio...](https://x.com/Dinosn/status/1903097954610672042)\n - [ ] [The Good, the Bad and the Ugly in Cybersecurity – Week 12 https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-12-6/](https://x.com/Dinosn/status/1903097852114387061)\n - [ ] [New Attacks Exploit Year-Old ServiceNow Flaws – Israel Hit Hardest https://hackread.com/attacks-exploit-servicenow-flaws-israel-hit-hardest/](https://x.com/Dinosn/status/1903097401428128023)\n - [ ] [UAT-5918 Targets Taiwan's Critical Infrastructure Using Web Shells and Open-Source Tools https://thehackernews.com/2025/03/uat-5918-targets-taiwans-cr...](https://x.com/Dinosn/status/1903097252530278785)\n - [ ] [Steam pulls game demo infecting Windows with info-stealing malware https://www.bleepingcomputer.com/news/security/steam-pulls-game-demo-infecting-wind...](https://x.com/Dinosn/status/1903097213095420399)\n - [ ] [Medusa Ransomware Uses Malicious Driver to Disable Anti-Malware with Stolen Certificates https://thehackernews.com/2025/03/medusa-ransomware-uses-mali...](https://x.com/Dinosn/status/1903097175808106523)\n - [ ] [RT roddux: I find myself repeating this a bit, so fuck it, here's how to get into an unprivileged namespace on Ubuntu 24.04/24.10. PSA: linux is stupi...](https://x.com/Dinosn/status/1903170911865541071)\n- Security Boulevard\n - [ ] [How do I ensure secure authentication for NHIs in an IAM system?](https://securityboulevard.com/2025/03/how-do-i-ensure-secure-authentication-for-nhis-in-an-iam-system/?utm_source=rss&utm_medium=rss&utm_campaign=how-do-i-ensure-secure-authentication-for-nhis-in-an-iam-system)\n - [ ] [What role do NHIs play in modern identity and access management?](https://securityboulevard.com/2025/03/what-role-do-nhis-play-in-modern-identity-and-access-management/?utm_source=rss&utm_medium=rss&utm_campaign=what-role-do-nhis-play-in-modern-identity-and-access-management)\n - [ ] [How can legacy IAM systems be updated to support NHIs?](https://securityboulevard.com/2025/03/how-can-legacy-iam-systems-be-updated-to-support-nhis/?utm_source=rss&utm_medium=rss&utm_campaign=how-can-legacy-iam-systems-be-updated-to-support-nhis)\n - [ ] [DEF CON 32 – Recon Village – Pushing the Limits of Mass DNS Scanning](https://securityboulevard.com/2025/03/def-con-32-recon-village-pushing-the-limits-of-mass-dns-scanning/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-recon-village-pushing-the-limits-of-mass-dns-scanning)\n - [ ] [A Pragmatic Approach to Effective Security](https://securityboulevard.com/2025/03/a-pragmatic-approach-to-effective-security/?utm_source=rss&utm_medium=rss&utm_campaign=a-pragmatic-approach-to-effective-security)\n - [ ] [Ex-Michigan, Ravens Football Coach Charged with Hacking Athlete Accounts](https://securityboulevard.com/2025/03/ex-michigan-ravens-football-coach-charged-with-hacking-athlete-accounts/?utm_source=rss&utm_medium=rss&utm_campaign=ex-michigan-ravens-football-coach-charged-with-hacking-athlete-accounts)\n - [ ] [Securing Your Supply Chain from Phishing Attacks](https://securityboulevard.com/2025/03/securing-your-supply-chain-from-phishing-attacks/?utm_source=rss&utm_medium=rss&utm_campaign=securing-your-supply-chain-from-phishing-attacks)\n - [ ] [DEF CON 32 – Recon Village – GeoINT Mastery: A Pixel Is Worth A Thousand Words](https://securityboulevard.com/2025/03/def-con-32-recon-village-geoint-mastery-a-pixel-is-worth-a-thousand-words/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-recon-village-geoint-mastery-a-pixel-is-worth-a-thousand-words)\n - [ ] [A Peek on Cloud Security: JSSI 2025](https://securityboulevard.com/2025/03/a-peek-on-cloud-security-jssi-2025/?utm_source=rss&utm_medium=rss&utm_campaign=a-peek-on-cloud-security-jssi-2025)\n - [ ] [Cybersecurity Snapshot: Tenable Highlights Risks of AI Use in the Cloud, as UK’s NCSC Offers Tips for Post-Quantum Cryptography Adoption](https://securityboulevard.com/2025/03/cybersecurity-snapshot-tenable-highlights-risks-of-ai-use-in-the-cloud-as-uks-ncsc-offers-tips-for-post-quantum-cryptography-adoption/?utm_source=rss&utm_medium=rss&utm_campaign=cybersecurity-snapshot-tenable-highlights-risks-of-ai-use-in-the-cloud-as-uks-ncsc-offers-tips-for-post-quantum-cryptography-adoption)\n- Planet Classpath\n - [ ] [Tom Tromey: Faster Faster GDB Startup](https://tromey.com/blog/?p=1111)\n- Der Flounder\n - [ ] [Jamf Pro Classic API computer inventory endpoint deprecated as of Jamf Pro 11.15.0](https://derflounder.wordpress.com/2025/03/21/jamf-pro-classic-api-computer-inventory-endpoint-deprecated-as-of-jamf-pro-11-15-0/)\n- Doonsec's feed\n - [ ] [Ragflow知识库的解析过程](https://mp.weixin.qq.com/s?__biz=MjM5NDcxMDQzNA==&mid=2247489495&idx=1&sn=e6f3bd160db7dd654e909e852aaa98e5)\n - [ ] [首席信息安全官的新选择：从传统SOC到AI原生SOC的转变](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485762&idx=1&sn=92f4f792cdacc81092cd7ed50acbb904)\n - [ ] [【干货】笑傲职场的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485762&idx=2&sn=26fd99901ca4339e2696b41fce066730)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485762&idx=3&sn=2d6e24eee88356c9c3751d4a40122d31)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485762&idx=4&sn=fee409e0ccf49053eeb5273ee161d3c0)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485762&idx=5&sn=1a6d989c75eb265833b9544c582b35c7)\n - [ ] [网络安全人士必知的密码提取工具Mimikatz](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490665&idx=1&sn=dbe421cf478406e343273007f983f03a)\n - [ ] [UCTC CTF 2024高校新生网安赛](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490665&idx=2&sn=7af8ce95f66c56a0cc5beebdc533d19d)\n - [ ] [实战中的WebService利⽤⽅法](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497303&idx=1&sn=a7882d85efe77247e7792676ac930773)\n - [ ] [CDN常见面试点](https://mp.weixin.qq.com/s?__biz=MzkwNjY1Mzc0Nw==&mid=2247487895&idx=1&sn=448ad19bd31fe4fcb34da7f803dab342)\n - [ ] [免杀BypassAV小白入门指南](https://mp.weixin.qq.com/s?__biz=MzkxODc0Mzk4OQ==&mid=2247484679&idx=1&sn=c4175b2414da564d7400796f1d094035)\n - [ ] [飞天诚信闪耀欧洲零售和电子商务商户支付大会MPE 2025](https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649876839&idx=1&sn=72d8ae77ed35312ca13b1564e90ab1df)\n - [ ] [国家互联网信息办公室、公安部联合公布《人脸识别技术应用安全管理办法》](https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649401507&idx=1&sn=550bfd1f6590c439d24624c2e8c079aa)\n - [ ] [人脸识别技术应用安全管理办法](https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064044&idx=1&sn=8394c0f7164ff4e860d93d2ae1f2a8e2)\n - [ ] [《人脸识别技术应用安全管理办法》答记者问](https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649401507&idx=3&sn=ec48fd42c250ecb21750ef0050070871)\n - [ ] [Databasetools：非常灵活的一款数据库提权工具](https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484814&idx=1&sn=a2e4ef4d25615af1445a0ae52d376b0a)\n - [ ] [malicious-devfile-registry ：在Gitlab中利用CVE-2024-0402](https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484814&idx=2&sn=d370c68ff4ae64de4cd6d6bbb4ddf60c)\n - [ ] [Z1sec推出了最靠谱的网络安全1对1课程](https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484814&idx=3&sn=c6291ed43202de695c790bc63cb55499)\n - [ ] [2025 HW招聘，大甲方](https://mp.weixin.qq.com/s?__biz=Mzg5NTY3NTMxMQ==&mid=2247484565&idx=1&sn=6c14cf2395ab8e803fdc1b0663f828e4)\n - [ ] [浅谈护网如何面试签约：避坑指南与血泪教训](https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484244&idx=1&sn=2994f21fbf763c2fa8d3c6a632410582)\n - [ ] [成年人大都是辛苦的，区别在于是否体面](https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485305&idx=1&sn=576bce2d1539dfa57948b993050cded2)\n - [ ] [针对LNK文件的PE嵌入隐写工具](https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497138&idx=1&sn=50690b7887ea4235283e8e73479d7dbc)\n - [ ] [Cobalt Strike 4.11 更新修复内容一览](https://mp.weixin.qq.com/s?__biz=Mzg4NTUwMzM1Ng==&mid=2247513263&idx=1&sn=ef6c686baeb84b355e203481a609efa3)\n - [ ] [Keep SRC x 火线安全助力「奇御」AI.安全技术沙龙 · 3月29日北京开启！](https://mp.weixin.qq.com/s?__biz=MzU4MjEwNzMzMg==&mid=2247494712&idx=1&sn=bc114525af9db0ee01ca051185175f61)\n - [ ] [疯狂攫取千亿资金！中国黑产最新手段，分分钟把你的信用卡变成他们的提款机！](https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247511839&idx=1&sn=67699dc738f1e379bf0a77b0b4ce2d21)\n - [ ] [招人，老板不差钱，速度来一起办公](https://mp.weixin.qq.com/s?__biz=MzU0ODg2MDA0NQ==&mid=2247486372&idx=1&sn=41e5e5b7c51bdf3ee91c386f7bd19a79)\n - [ ] [【漏洞预警】Mattermost MFA绕过漏洞 (CVE-2025-25068)](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489817&idx=1&sn=575c88c1fa41080d156d78747a403a00)\n - [ ] [华为星河AI融合SASE解决方案新升级，携手伙伴共赢千行万业新未来](https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247506015&idx=1&sn=26b9b09bab5407bd9d4d1ef509c48467)\n - [ ] [16届蓝桥杯省赛行不行？来“模拟”1次，就知道了](https://mp.weixin.qq.com/s?__biz=MzkwODM4NDM5OA==&mid=2247519821&idx=1&sn=d93ae523ef6f1f2d972eabd348290dcf)\n - [ ] [【备赛16届蓝桥杯】历年真题及题解 - 01串的熵](https://mp.weixin.qq.com/s?__biz=MzkwODM4NDM5OA==&mid=2247519821&idx=2&sn=7cf0bfcab4d2286e875279325a713487)\n - [ ] [信息安全漏洞周报【第014期】](https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064050&idx=1&sn=e5cfd0999539184202ac68f658f7a870)\n - [ ] [新定级备案模板明确数据安全纳入等级保护体系](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114892&idx=1&sn=2a3c14fefe37d4ddbf5bc1cedab86328)\n - [ ] [【免费试用】从录屏到录制，云勘黑科技让固证网站“活”起来！](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651441766&idx=1&sn=f27b16208dd60e6cd643cf86d7dfb12e)\n - [ ] [警务大数据分析与建模高级培训，提升执法效能新引擎](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651441766&idx=2&sn=a51f2609f941584f9d1427af36b8ea1e)\n - [ ] [新定级备案模板明确数据纳入等级保护体系，等保2.0更进一步](https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247498800&idx=1&sn=def6a890e7093672266792112803edc1)\n - [ ] [国家密码管理局关于《电子认证服务使用密码管理办法（征求意见稿）》公开征求意见的通知](https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485255&idx=1&sn=d8d18c459eba120502cb2c90d049790d)\n - [ ] [限时免费！360智榜样网络安全预科班，仅剩30席，带你弯道超车进网安圈！](https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649818880&idx=1&sn=f13a21ee251fa4045c3fe7a501d3d5d7)\n - [ ] [预警！你的AI大模型又要被别人删除了](https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649871207&idx=1&sn=d927204b6a0625eed1c16df3363df5c5)\n - [ ] [免费入会 | 会员购多款优惠上新，购 Office 送腾讯视频、爱奇艺月卡](https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492296&idx=1&sn=e8e89eba6b473afa13873fedadc0ea80)\n - [ ] [稍息_1981-1984年的中国](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488120&idx=1&sn=7457ad63b2dcf17cc781e61a0cc13d43)\n - [ ] [盗版免杀？我直接399上车正版！还带一对一解疑+彩蛋](https://mp.weixin.qq.com/s?__biz=Mzg5OTg1MDk0Mw==&mid=2247485538&idx=1&sn=1bc27a7b1b53032c80e8a6186c540743)\n - [ ] [感染型病毒风险提醒：官方渠道或成传播链之一](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524676&idx=1&sn=2f83b7d6ad5122172a6c2c851394cee3)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524676&idx=2&sn=9963349c2405d99e24e545323e48c360)\n - [ ] [渗透测试神器之漏洞利用代理工具Empire](https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484348&idx=1&sn=e2703f4bd969e744f6d6b0d9b2d9e13a)\n - [ ] [Cobalt Strike 4.11 更新内容一览](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487813&idx=1&sn=af9ae7bf8bd7911576cc2bd5052149ef)\n - [ ] [万能门店小程序管理系统 dopagefxcount SQL注入漏洞](https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490850&idx=1&sn=e76fe3973b2336d62ac834665ec2cdb4)\n - [ ] [工具推荐——LeakSearch](https://mp.weixin.qq.com/s?__biz=MzI3OTM3OTAyNw==&mid=2247485991&idx=1&sn=ec87b2d1e3924f4d9011e9e84be31488)\n - [ ] [分享的图片、视频、链接](https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247544742&idx=1&sn=6ef41aafb884571fbafd4a609a228034)\n - [ ] [从零到英雄 | (06 ) 威胁行为者如何获得初步立足点](https://mp.weixin.qq.com/s?__biz=MzA3MTM0NTQzNA==&mid=2455780201&idx=1&sn=3fd75e89bc70c03008d74ce9bb16de43)\n - [ ] [Smartadmin 系统代码审计](https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489286&idx=1&sn=84919497aadd75b27b5068b29c3370e7)\n - [ ] [50PPT DeepSeek技术溯源及前沿探索](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655271710&idx=1&sn=20aced4b0ce038d41872076842348eca)\n - [ ] [别到处乱加人 乱咬人](https://mp.weixin.qq.com/s?__biz=MzkzNTQwNjQ4OA==&mid=2247484110&idx=1&sn=d71ab06762019efe7dcb9f1beb73618b)\n - [ ] [这款开源神器！！一键穿透内网！](https://mp.weixin.qq.com/s?__biz=MzkxOTIzNDgwMQ==&mid=2247484522&idx=1&sn=c27794360fc33ecbee026ad332496b34)\n - [ ] [开盒么？暴你户口本的那种！](https://mp.weixin.qq.com/s?__biz=MjM5MDA3MzI0MA==&mid=2650091359&idx=1&sn=2cfa155febccd9b7ea1121561425acb6)\n - [ ] [这个世界为什么会有贫穷存在？](https://mp.weixin.qq.com/s?__biz=Mzg5NDE2MDQ3Mg==&mid=2247484487&idx=1&sn=1e38fdd5fc401586e779b643e4d2194b)\n - [ ] [2025国家护网广东战区｜蓝队防守岗急招！进群报名，安排面试](https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486646&idx=1&sn=bea37054d19f4714aaacd5ef5b0850d8)\n - [ ] [《论语别裁》第02章 为政（01） 孔子不谈政治](https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247501073&idx=1&sn=15775efc62e3624656e9025cf0891854)\n - [ ] [GLPI 中的预认证 SQL 注入到 RCE（CVE-2025-24799/CVE-2025-24801）](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528683&idx=1&sn=2120705cacf11ce8965ac57f3a6b68f5)\n - [ ] [喜报|《网络空间安全科学学报》荣获集团公司科技期刊能力建设提升奖](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505265&idx=1&sn=4cb7a274d6bb47832a20a252b840fe61)\n - [ ] [“各退一步”](https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247485003&idx=1&sn=e8e822c70f033c3560204c658f488e29)\n - [ ] [CISP学习笔记百题解析(一)](https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485956&idx=1&sn=760d10b51efb577d44ff3eae9c8ac143)\n - [ ] [用deepseek学习提供Be对抗思路](https://mp.weixin.qq.com/s?__biz=MzU3NDY1NTYyOQ==&mid=2247486058&idx=1&sn=0865fcfc6f2f03fa266d2ce9d6cae697)\n - [ ] [信安世纪出席广西高校密码技术应用研讨会，共探密码人才培养实践](https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650664087&idx=1&sn=56f951b08737b24125ea9620ab072fdc)\n - [ ] [带你解锁编码新世界！--随波逐流CTF编码工具使用教程72 --汉字笔画码密码](https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247489950&idx=1&sn=0118a92adb67462be57ba861fe7a48dd)\n - [ ] [【技术探索】WebAssembly安全研究：浏览器攻击面的新趋势与模糊测试实践](https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526600&idx=1&sn=5bb6284101e45eaa086df795f42331fd)\n - [ ] [英国国防领域的军事智能变革](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619958&idx=1&sn=afb5560e03d9f1ac39016f85eaa06a1b)\n - [ ] [美国总统特朗普签署行政令，提高美国矿产产量](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619958&idx=2&sn=9282fbbedda1325e03369e32c088cbbe)\n - [ ] [【安全圈】印孚瑟斯公司同意在 2023 年数据泄露事件后支付 1750 万美元的和解金](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068609&idx=1&sn=11eba4b8e73b9bc267b72636596e9c48)\n - [ ] [【安全圈】Babuk 勒索软件组织宣称对电信公司 Orange 发起攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068609&idx=2&sn=e2acbc74f11b8df506c8839530471007)\n - [ ] [【安全圈】恶意软件行动 “DollyWay”：全球超 2 万个 WordPress 网站惨遭攻陷](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068609&idx=3&sn=692113a4a87a7354cfada6702accfb8d)\n - [ ] [喂给AI的数据，正在反向“开盒”你的企业？](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580053&idx=1&sn=0d866163ae16728ef4b4fe72d014f325)\n - [ ] [360入选2024年度移动互联网APP产品安全漏洞治理优秀案例](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580053&idx=2&sn=f0326cff16ca89a3e6e4c10841b54946)\n - [ ] [字节跳动开源多模态 AI 代理 TARS](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247496920&idx=1&sn=67f91eed7989d2ce588d392e22badfa4)\n - [ ] [风险研究 | AI 安全警钟响起：Manus AI 漏洞暴露的背后真相](https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496213&idx=1&sn=6a854c286f0cea1f3e5bea8feec61654)\n - [ ] [被网络安全耽误的游戏公司卡巴斯基的2024mdr和ir报告中英文双语](https://mp.weixin.qq.com/s?__biz=MzkxMzU4ODU2MQ==&mid=2247484201&idx=1&sn=e6ff9dfe40de907ae2552d9fe1287898)\n - [ ] [携手国家级平台共建防线，盛邦安全获CNNVD漏洞库权威认证](https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650277881&idx=1&sn=102cc0320f7027e82f03573ff2f16045)\n - [ ] [等保测评取消打分《网络安全等级测评报告模版（2025版）》重大变更](https://mp.weixin.qq.com/s?__biz=MzU1ODM1Njc1Ng==&mid=2247498281&idx=1&sn=217e6fd5d2198f05d536a5079c0a8fed)\n - [ ] [无声杀机，企业高管应如何对抗窃听威胁](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247637939&idx=1&sn=eca861e05266645bdd92d3c7503f0728)\n - [ ] [诸子云｜甲方 ：cursor类ai如何避免员工泄密？大模型能否替代外包？](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247637939&idx=2&sn=1675cbe301082e97b526cf6d18ff67b0)\n - [ ] [十六载砺剑铸盾，护航数字中国每一程--祝贺江南信安成立十六周年](https://mp.weixin.qq.com/s?__biz=MzA4MTE0MTEwNQ==&mid=2668670172&idx=1&sn=dacdedeec016e44f074233ddc4b52142)\n - [ ] [安全资讯汇总：2025.3.17-2025.3.21](https://mp.weixin.qq.com/s?__biz=MzA4MTE0MTEwNQ==&mid=2668670172&idx=2&sn=a4f94071cd7a02b9c987dd83ef26848e)\n - [ ] [靶场历险记-stapler-1（全方面突破边界+提权）](https://mp.weixin.qq.com/s?__biz=Mzk1NzQwNjQ4Ng==&mid=2247485610&idx=1&sn=3b7b396fe53d385a72058e3795bc4e23)\n - [ ] [Veeam 修复Backup & Replication 中的严重RCE漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522555&idx=1&sn=46e012bb1770fd23ba35da839b60f669)\n - [ ] [太多软件供应链防御指南看不过来？专家提炼出三大要点](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522555&idx=2&sn=4914b44d0db56efd08db5896225d4f59)\n - [ ] [【开源情报—从入门到精通教程】搜索引擎篇](https://mp.weixin.qq.com/s?__biz=MzkxMTA3MDk3NA==&mid=2247487409&idx=1&sn=8a0cda064e0f0301b0dba85f2ac0b35d)\n - [ ] [应对安全工具泛滥的六个策略](https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490310&idx=1&sn=5ee3bf1bba520edbaea150d9dada2e9a)\n - [ ] [从“开盒”事件到471.6亿条数据被泄露，数据安全再敲警钟](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625860&idx=1&sn=76e1b957bed0e7914499a482ced88541)\n - [ ] [公安部公布严厉打击侵犯公民个人信息犯罪10起典型案例](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625860&idx=2&sn=272354e07bf25d2dd8d3a16b3b29c946)\n - [ ] [《打工人破防实录：今天上班赚的还不够买颗烂橘子？》](https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487440&idx=1&sn=11ddd1474ec83b39d08ec12b5a152922)\n - [ ] [量子安全丨全球量子安全产业发展展望（附下载）](https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247532572&idx=1&sn=b2d291906d9dbbb86f044f597c6d3274)\n - [ ] [发布丨网络安全标准实践指南——人工智能生成合成内容标识 服务提供者编码规则（附下载）](https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247532572&idx=2&sn=c80be1f884e8e55295e822dadd82e9fc)\n - [ ] [解析稳定率达99.99%！合合信息“大模型加速器2.0”助力AI打破“幻觉”](https://mp.weixin.qq.com/s?__biz=MzAxMzg0NjY2NA==&mid=2247493220&idx=1&sn=128f4967606d76b8a31f4156126c7c4c)\n - [ ] [发布 | 国家网信办、公安部联合公布《人脸识别技术应用安全管理办法》（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=1&sn=4b3a88fcc92fd87e05385c08cb6109f0)\n - [ ] [通知 | 国家密码管理局就《电子认证服务使用密码管理办法（征求意见稿）》公开征求意见（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=2&sn=9620c4dd871e41cca0cfc081a4edaafe)\n - [ ] [关注 | 《促进和规范数据跨境流动规定》实施一周年 数据出境安全管理工作取得积极成效](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=3&sn=c1303974d537bbf88f557fa678525075)\n - [ ] [通知 | 网安标委就《网络安全技术 信息安全管理体系审核和认证机构要求（征求意见稿）》等3项国家标准征求意见（附下载）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=4&sn=9e9d94ca600921e07370dd0d31fdfa0f)\n - [ ] [权威解答 | 《人脸识别技术应用安全管理办法》答记者问](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=5&sn=e3cfd4a94017ce679b506f2a89ae75b2)\n - [ ] [关注 | 未成年人“开盒”引发轩然大波，数据安全何去何从？](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=6&sn=81ad0a63787594efc6e07b8c74e2b1cd)\n - [ ] [国际 | 欧盟《数字身份条例》的内容与特色](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=7&sn=3414faa92440fafb737e0eef571606da)\n - [ ] [Cisco智能许可工具漏洞遭利用，内置后门账户曝光](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316826&idx=1&sn=68a582db0aaeae73798dfecdb67bf96b)\n - [ ] [研究人员利用AI越狱技术大量窃取Chrome信息](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316826&idx=2&sn=7ed4c4d16da49e4ad3d6e55d601c719f)\n - [ ] [Veeam与IBM发布备份和AIX系统高危漏洞补丁](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316826&idx=3&sn=0cc4af02352183b198b12bda854a860a)\n - [ ] [公私合作：网络安全行业增长与成熟的催化剂](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316826&idx=4&sn=1ac6cf340ab9e6c266a204890f13f033)\n - [ ] [AI应用狂欢背后：你的Deepseek模型真的安全吗？](https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247504431&idx=1&sn=b7f25827d5163e49b4cf04aab94b6abc)\n - [ ] [《没有实力切勿评价》的SRC事件:向来如此，便对么？](https://mp.weixin.qq.com/s?__biz=MzU2MDkzMTk3Mg==&mid=2247485408&idx=1&sn=d515c8cbde30ac7253fe0cd8913f5d17)\n - [ ] [SOC 2认证全攻略：从零到合规的高效路径](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541744&idx=1&sn=553cc0e39da744c45fc4d51eba950573)\n - [ ] [渊亭科技入选「2024央国企数字化厂商全景报告」](https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660190938&idx=1&sn=36009aee016852ce7fc10a907751cbe7)\n - [ ] [网安周讯 | “人肉开盒”黑灰产曝光，300元购买户籍信息（三月第3期）](https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247524173&idx=1&sn=5942e26e1288a02579eaa33b98ae2755)\n - [ ] [“人肉开盒”事件引发隐私忧虑，我们应该如何保护个人信息安全？](https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247524173&idx=2&sn=e2cb8bd6e3d05c18e13ade9b19ef393c)\n - [ ] [AI大模型攻防安全 | 第15期安全范儿沙龙开启](https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070962&idx=1&sn=dce2b9bfb7bb52a27f921bf5558877f5)\n - [ ] [从创新引擎到战争机器：美国军工复合体进入\\\"硅谷时代\\\"](https://mp.weixin.qq.com/s?__biz=Mzg3MDczNjcyNA==&mid=2247489069&idx=1&sn=fb023e44f78f031c9d4b9ddf86ec3ce0)\n - [ ] [每周蓝军技术推送（2025.3.15-3.21）](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494131&idx=1&sn=aa94cb73ced850f1e464174fa37dd817)\n- Orange Cyberdefense\n - [ ] [Leakymetry: Circumventing GLPI Authentication](https://sensepost.com/blog/2025/leakymetry-circumventing-glpi-authentication/)\n- NVISO Labs\n - [ ] [How to hunt & defend against Business Email Compromise (BEC)](https://blog.nviso.eu/2025/03/21/how-to-hunt-defend-against-business-email-compromise-bec/)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [Understanding the Psychology of Bug Bounty Triage Teams — Why Some Bugs Get Marked as Duplicates…](https://infosecwriteups.com/understanding-the-psychology-of-bug-bounty-triage-teams-why-some-bugs-get-marked-as-duplicates-cab9195c6f58?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Get $5000: GitHub Dorks & Leaks](https://infosecwriteups.com/get-5000-github-dorks-leaks-b26728099d38?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [How to Route Traffic from WSL to Burp Suite on Windows: A Step-by-Step Guide](https://infosecwriteups.com/how-to-route-traffic-from-wsl-to-burp-suite-on-windows-a-step-by-step-guide-38d58f65b21a?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [$50K Bounty Just for GitHub Access Token exposure](https://infosecwriteups.com/50k-bounty-just-for-github-access-token-exposure-d92dcc34eb4d?source=rss----7b722bfd1b8d--bug_bounty)\n- Malwarebytes\n - [ ] [Personal data revealed in released JFK files](https://www.malwarebytes.com/blog/news/2025/03/personal-data-revealed-in-released-jfk-files)\n- Securelist\n - [ ] [Threat landscape for industrial automation systems in Q4 2024](https://securelist.com/ics-cert-q4-2024-report/115944/)\n- SentinelOne\n - [ ] [The Good, the Bad and the Ugly in Cybersecurity – Week 12](https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-12-6/)\n - [ ] [When Python Is Poisoned | How Runtime Security Stops the tj-actions Attack](https://www.sentinelone.com/blog/when-python-is-poisoned-how-runtime-security-stops-the-tj-actions-attack/)\n- Horizon3.ai\n - [ ] [Critical or Clickbait: GitHub Actions and Apache Tomcat RCE Vulnerabilities 2025](https://www.horizon3.ai/attack-research/attack-blogs/critical-or-clickbait-github-actions-and-apache-tomcat-rce-vulnerabilities-2025/)\n- Reverse Engineering\n - [ ] [tmp.0ut Volume 4](https://www.reddit.com/r/ReverseEngineering/comments/1jgn22v/tmp0ut_volume_4/)\n - [ ] [History of NULL Pointer Dereferences on macOS](https://www.reddit.com/r/ReverseEngineering/comments/1jgh2bf/history_of_null_pointer_dereferences_on_macos/)\n - [ ] [Lightweight Time Travel Analysis with Frida](https://www.reddit.com/r/ReverseEngineering/comments/1jgijdv/lightweight_time_travel_analysis_with_frida/)\n - [ ] [Last barrier destroyed, or compromise of Fuse Encryption Key for Intel Security Fuses](https://www.reddit.com/r/ReverseEngineering/comments/1jg5ewa/last_barrier_destroyed_or_compromise_of_fuse/)\n - [ ] [Recording Android App Execution Traces with Time Travel Analysis](https://www.reddit.com/r/ReverseEngineering/comments/1jgim9t/recording_android_app_execution_traces_with_time/)\n- Exploit-DB.com RSS Feed\n - [ ] [[webapps] Jasmin Ransomware - SQL Injection Login Bypass](https://www.exploit-db.com/exploits/52091)\n- FreeBuf网络安全行业门户\n - [ ] [Coinbase成为近期GitHub Actions供应链攻击的主要目标](https://www.freebuf.com/articles/es/425442.html)\n- 安全牛\n - [ ] [现代DAST+SAST：开启安全测试的新纪元](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135582&idx=1&sn=fa16eaae871b6da584af770b506a89ab&chksm=bd15ae8d8a62279b30337a6d01a0b57dc6e3e15b7759586095201d982263ad461315599df965&scene=58&subscene=0#rd)\n - [ ] [国家互联网信息办公室、公安部联合公布《人脸识别技术应用安全管理办法》；​IBM AIX曝满分高危漏洞，可导致系统完全沦陷 |牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135582&idx=2&sn=ac32564a4acce1bf67c2f14f346fd876&chksm=bd15ae8d8a62279bb919422313fa40df59f4553e4d7f990d6118c3391231f83835a4a6751909&scene=58&subscene=0#rd)\n- HackerNews\n - [ ] [黑客利用思科智能许可工具漏洞](https://hackernews.cc/archives/57981)\n - [ ] [HellCat 黑客在全球范围内掀起针对 Jira 的攻击狂潮](https://hackernews.cc/archives/57976)\n - [ ] [恐吓软件与钓鱼手段相结合，攻击目标转向 macOS 用户](https://hackernews.cc/archives/57968)\n - [ ] [六国政府或使用 Paragon 间谍软件入侵 WhatsApp 并收集数据](https://hackernews.cc/archives/57966)\n - [ ] [Veeam 和 IBM 发布补丁，修复 Backup 和 AIX 系统中的高风险漏洞](https://hackernews.cc/archives/57963)\n - [ ] [YouTube 游戏外挂传播 Arcane 盗取器恶意软件](https://hackernews.cc/archives/57961)\n- 奇客Solidot–传递最新科技情报\n - [ ] [微软开发新功能向用户解释硬件性能问题](https://www.solidot.org/story?sid=80852)\n - [ ] [学生太多课堂时间花在笔记本电脑上](https://www.solidot.org/story?sid=80851)\n - [ ] [英伟达 GTC 峰会凸显中美 AI 加速分裂](https://www.solidot.org/story?sid=80850)\n - [ ] [浙江大学物理学家制造出最小的 LED 显示屏](https://www.solidot.org/story?sid=80849)\n - [ ] [Calibre 8.0 释出](https://www.solidot.org/story?sid=80848)\n - [ ] [Gmail 引入 AI 驱动的搜索](https://www.solidot.org/story?sid=80847)\n - [ ] [英伟达在 GTC 会议期间用流动餐车卖 2000 张显卡](https://www.solidot.org/story?sid=80846)\n - [ ] [海豹能感知其血液中的氧含量而避免溺水](https://www.solidot.org/story?sid=80845)\n - [ ] [自由开源软件基础设施面临来自 AI 公司的攻击](https://www.solidot.org/story?sid=80844)\n - [ ] [婴儿能编码短暂的海马体记忆](https://www.solidot.org/story?sid=80843)\n - [ ] [2023/24 年海洋表面温度大幅上升](https://www.solidot.org/story?sid=80842)\n- 腾讯玄武实验室\n - [ ] [每日安全动态推送(25/3/21)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960054&idx=1&sn=4dfe1e034d5606be9f8c6f6bcb6bf210&chksm=8baed269bcd95b7fee67c4be09f29b4286b6e72c293fa183b7a03d138e31bc068df655adbc9c&scene=58&subscene=0#rd)\n- 安全分析与研究\n - [ ] [分享一款恶意软件C2追踪工具](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491188&idx=1&sn=a26af75c36126503ead27bbbbdcbe5b6&chksm=902fb15ca758384afb7827fb93213f47c044c738885efe10bb8e8ef5fadca7f583fd66b139bb&scene=58&subscene=0#rd)\n- 安全客\n - [ ] [对抗性AI防御打击金融欺诈：生成对抗网络的应用与挑战](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788213&idx=1&sn=11e2a296ff1e9218e921ee29fe5103fb&chksm=8893bf5abfe4364c87e3c5bf8ac286ae144ae43edb78ef9d36d4f64ae6e9502b20da7ed17292&scene=58&subscene=0#rd)\n- 技可达工作室\n - [ ] [用deepseek学习提供Be对抗思路](https://mp.weixin.qq.com/s?__biz=MzU3NDY1NTYyOQ==&mid=2247486058&idx=1&sn=0865fcfc6f2f03fa266d2ce9d6cae697&chksm=fd2e5788ca59de9eec31e5ea7982e792d7490ead96bc7e0624cd443c3784423b06d1c83b44a8&scene=58&subscene=0#rd)\n- 虎符智库\n - [ ] [从传统SOC转向AI原生SOC：首席信息安全官的新选择](https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493052&idx=1&sn=180a8175dfb4986172be30de19e3a3bb&chksm=971d88bea06a01a8f3b06853fb267e8406bac01fc1507a2bd0f70aa105dafbdca92c0fe569d1&scene=58&subscene=0#rd)\n- 安全学术圈\n - [ ] [行业会议 | 第六届网络空间安全前沿论坛](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491817&idx=1&sn=55a90803b3b748b9aa7093b961abea0d&chksm=fe2d1f62c95a96744ad3b09a8411af25a0ead40a4d3c8f9e84cb94c13edb355e74d427e0997a&scene=58&subscene=0#rd)\n- 威努特安全网络\n - [ ] [美国银行数据泄露，瑞士电信IT基础设施遭攻击|一周特辑](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131804&idx=1&sn=28f4ab09c449347639e98be0f2550cfb&chksm=80e7152cb7909c3a3e6d8e5f42c3917ee1c7b7bfd162b183873ab2f1103a063603a91ab1924f&scene=58&subscene=0#rd)\n- 代码卫士\n - [ ] [Veeam 修复Backup & Replication 中的严重RCE漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522555&idx=1&sn=46e012bb1770fd23ba35da839b60f669&chksm=ea94a991dde32087103cc41735938435faba038d9213a40c0d5778cc6a30e8d7541a8aed1d9b&scene=58&subscene=0#rd)\n - [ ] [太多软件供应链防御指南看不过来？专家提炼出三大要点](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522555&idx=2&sn=4914b44d0db56efd08db5896225d4f59&chksm=ea94a991dde32087ff24b28610efaba5296a45b54c096a9f67aa649a978dd1e68315715d288c&scene=58&subscene=0#rd)\n- 奇安信病毒响应中心\n - [ ] [每周勒索威胁摘要](https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498382&idx=1&sn=0e50781be016321eca2f01c6310900ee&chksm=ec698aa6db1e03b0c2cd3d93cfa984274a28168809aaa15fdc5a23e1cb8b989941fe9a17e25f&scene=58&subscene=0#rd)\n- 看雪学苑\n - [ ] [Hyper-v虚拟磁盘驱动vhdmp.sys漏洞汇总分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590984&idx=1&sn=c31273097426c0de80490922a0abe551&chksm=b18c2f8286fba694bf529bc37a0820cf419f1d29aab3881739da68477bc62e1f71151ce59c06&scene=58&subscene=0#rd)\n - [ ] [​Veeam 备份服务器现重大漏洞，速更新补丁！](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590984&idx=2&sn=b1db17b5fcaa1c4c3fc72ffc5ce6ecf5&chksm=b18c2f8286fba6941ab6105f712225167b1d0fbc683889fe28f7005fd280a1a5a1d1910c2f13&scene=58&subscene=0#rd)\n - [ ] [岗位更新：职位空缺，快来和我们一起“搞钱”](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590984&idx=3&sn=9f59094c1ef76637db0526146c8d3d6f&chksm=b18c2f8286fba69434481d211ab2ae6fbac2ba1d278ebe1c96cb7a7548aecbf16ecff70da7d3&scene=58&subscene=0#rd)\n - [ ] [更新小节：syscallfuzz | 系统0day安全-Windows平台漏洞挖掘（第5期）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590984&idx=4&sn=2044b458d80ee0788c018e803e567e04&chksm=b18c2f8286fba694e564da0d5533bd62c3ba613b2578311a499c92ee9844005979547e166d4f&scene=58&subscene=0#rd)\n- 中国信息安全\n - [ ] [发布 | 国家网信办、公安部联合公布《人脸识别技术应用安全管理办法》（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=1&sn=4b3a88fcc92fd87e05385c08cb6109f0&chksm=8b580de2bc2f84f4170325d56d3931bf7bafa71a1b5a2ee7c71c86b73eedf651dc641ffb84c7&scene=58&subscene=0#rd)\n - [ ] [通知 | 国家密码管理局就《电子认证服务使用密码管理办法（征求意见稿）》公开征求意见（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=2&sn=9620c4dd871e41cca0cfc081a4edaafe&chksm=8b580de2bc2f84f45af1bebcaec942c30683c4924cc9b695403af74d34dbebfaa52b78a99aae&scene=58&subscene=0#rd)\n - [ ] [关注 | 《促进和规范数据跨境流动规定》实施一周年 数据出境安全管理工作取得积极成效](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=3&sn=c1303974d537bbf88f557fa678525075&chksm=8b580de2bc2f84f4c843a7754b0a48d21fc0f04bb6496c52904846a90be36587944fd27c9b24&scene=58&subscene=0#rd)\n - [ ] [通知 | 网安标委就《网络安全技术 信息安全管理体系审核和认证机构要求（征求意见稿）》等3项国家标准征求意见（附下载）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=4&sn=9e9d94ca600921e07370dd0d31fdfa0f&chksm=8b580de2bc2f84f4ef0a509cb946db248a7b62b7f1f35f3541f9e8a929048160131fc7244edd&scene=58&subscene=0#rd)\n - [ ] [权威解答 | 《人脸识别技术应用安全管理办法》答记者问](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=5&sn=e3cfd4a94017ce679b506f2a89ae75b2&chksm=8b580de2bc2f84f480649e0610c3525b43e44d2a690058f24f3b2e0440905a4de0f0cabba3a2&scene=58&subscene=0#rd)\n - [ ] [关注 | 未成年人“开盒”引发轩然大波，数据安全何去何从？](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=6&sn=81ad0a63787594efc6e07b8c74e2b1cd&chksm=8b580de2bc2f84f4fe26ef5c1b0d00aa36777a03a21cd51426ec3f1490495d0d6de02e80dd4f&scene=58&subscene=0#rd)\n - [ ] [国际 | 欧盟《数字身份条例》的内容与特色](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=7&sn=3414faa92440fafb737e0eef571606da&chksm=8b580de2bc2f84f4b2f00d16e27fc1393a82f1b9fb54c67a2f590a17844f1d69cf0222b17f50&scene=58&subscene=0#rd)\n- 网安杂谈\n - [ ] [推荐下国产AI编程工具Trae](https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650889549&idx=1&sn=c40ced9170c39247bbab95f44532a651&chksm=812ea168b659287e3be21b3a09339401e1e9f1a3ff14002e587b232c0f8e72da4a32edd00ed0&scene=58&subscene=0#rd)\n- M01N Team\n - [ ] [每周蓝军技术推送（2025.3.15-3.21）](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494131&idx=1&sn=aa94cb73ced850f1e464174fa37dd817&chksm=c18429e2f6f3a0f4afc82a7468bd3fb059ae03d49a5c7f4f8831f6887b7987ba305af0960f63&scene=58&subscene=0#rd)\n- 火线安全平台\n - [ ] [Keep SRC x 火线安全助力「奇御」AI.安全技术沙龙 · 3月29日北京开启！](https://mp.weixin.qq.com/s?__biz=MzU4MjEwNzMzMg==&mid=2247494712&idx=1&sn=bc114525af9db0ee01ca051185175f61&chksm=fdbfc593cac84c85850d815454289276da22ed8f7968ab561428569ec074f7223c4300ce91c7&scene=58&subscene=0#rd)\n- 网络空间安全科学学报\n - [ ] [喜报|《网络空间安全科学学报》荣获集团公司科技期刊能力建设提升奖](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505265&idx=1&sn=4cb7a274d6bb47832a20a252b840fe61&chksm=e9bfc1cfdec848d91f1c5ab2f77141d9157051c0a5dd2a26e47787470a43ed31440e34bbc282&scene=58&subscene=0#rd)\n- 慢雾科技\n - [ ] [智能合约安全审计入门篇 —— Deploy Different Contracts to the Same Address](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501562&idx=1&sn=93d8d0ddf96b4f6586b29a2cb32207d8&chksm=fddeb87dcaa9316b0fa19e3c9fcfecc53eb37d8b0541fa52f98f22a52440458426b7b9b657c4&scene=58&subscene=0#rd)\n- 奇安信威胁情报中心\n - [ ] [每周高级威胁情报解读(2025.03.14~03.20)](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247514535&idx=1&sn=06374a7a1ffc2af5278a15cfdaded7cc&chksm=ea664ed0dd11c7c67610489f581299add2ff27d49a041817e11e30d6c7b4625c20a07bc6417b&scene=58&subscene=0#rd)\n- dotNet安全矩阵\n - [ ] [.NET 内网实战绕过，通过劫持 Windows 注册表启动白名单进程实现绕过UAC](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499229&idx=1&sn=54718513a0fbb69ea6f0ee01d49803ff&chksm=fa595330cd2eda26c8f53f63e92892972fbbc3e2d62fddb7808581825c02c58cbd8804d1b119&scene=58&subscene=0#rd)\n - [ ] [简历直达CSO | 蚂蚁国际招聘基础设施安全、移动端安全、Web3安全等岗位！](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499229&idx=2&sn=2a61a44f908f9a1eccd405f78f94a4ae&chksm=fa595330cd2eda26bffbc2238e500ae19ea0fc6ce683640a8169713e8b55de919e48940286cc&scene=58&subscene=0#rd)\n - [ ] [国内最专业、最全面的 [ .NET 代码审计 ] 体系化学习交流社区](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499229&idx=3&sn=04978d31d038539568bf0c829b8d7afe&chksm=fa595330cd2eda267fd19d13d072e93dbb589e374e15de920369aed1f150af763908d2d85af5&scene=58&subscene=0#rd)\n- 数世咨询\n - [ ] [不是所有削减都平等：安全预算决策对风险存在差异化影响](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538225&idx=1&sn=9501829772260a475790dc701321e90f&chksm=c144248cf633ad9a89dceba63199ad7ad7bb951b74c467f5d23322810c2849839b6f456c5647&scene=58&subscene=0#rd)\n- 字节跳动安全中心\n - [ ] [大模型如何挖漏洞 | 正在直播](https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494619&idx=1&sn=36c118acb8150acbc0137a85d7d564b5&chksm=fa9d108dcdea999bd1d8335ffb1c37c12f0433cb8e01f00e980ec38b7310f4579889451d3dc6&scene=58&subscene=0#rd)\n- 安全内参\n - [ ] [香港通过保护关基设施条例，运营者不更新系统可罚款500万港元](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514032&idx=1&sn=d994cfb7c416e61dd7e850ef84b4b5b0&chksm=ebfaf090dc8d7986d7974f85b7afe218d2fa81dc1578eb3e892090cd1abb0de5afe45645f01a&scene=58&subscene=0#rd)\n - [ ] [美国网络司令部举办史上最大规模的“网络卫士”演习](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514032&idx=2&sn=c04911d532430ace62dfc0752477b358&chksm=ebfaf090dc8d798626272a47cf3fdf27e34c9c3e2c4877e2021b2417f4b9f8cf7a6389acea11&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [AI 功能延期被指虚假宣传，苹果面临集体诉讼；刘亦菲成为鸿蒙智行智界品牌大使；我国实现全球首例无线植入式脑机接口 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653076128&idx=1&sn=1d906e9b6edab944abdf909d7e588157&chksm=7e57c71649204e00cffe1f6f299c83ae6e64b47402512d2cabc16998d049ab1a9e188b84f92a&scene=58&subscene=0#rd)\n- 全频带阻塞干扰\n - [ ] [情报分析师必读 | 轻信AI带来的认知假象](https://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648958560&idx=1&sn=c7dd3daa9cc9b74ed7f89bea573fae66&chksm=f09ef11fc7e97809ef2bd9cb137b417d7f99fbd93bd99698642625703b2e21ad10829ab31e1b&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [掌握关键！人物调查的必备步骤与策略](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560387&idx=1&sn=f443af9014fda04b72120470dd383d75&chksm=871179c8b066f0ded713dd4804bd7eb43a51b6831682d4656b7c9c20d4206f12359b2402a93e&scene=58&subscene=0#rd)\n - [ ] [【人物调研】美国驻华临时代办武安妮](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560387&idx=2&sn=b211178d9b2e11432c16308752216b6a&chksm=871179c8b066f0de66e97a3ebe4a9781aa14eca238d83bf12c46ac1a17ce925a2b7968987b28&scene=58&subscene=0#rd)\n- Tide安全团队\n - [ ] [Jeecg漏洞总结及tscan poc分享](https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247520591&idx=1&sn=09408e28e3286c2cfd405487e0f3950c&chksm=ce5db32ef92a3a38ecd1ca641509b925c3cede747f10949b7f398cfcf43d62fe17914bea2224&scene=58&subscene=0#rd)\n- 嘶吼专业版\n - [ ] [开源DeepSOC，开放DeepSec，为网络安全运营的全面FSD做好准备](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581623&idx=1&sn=0da1aef778da582c9bbc7d1c4535dd88&chksm=e9146f8dde63e69bc83c958d7438527d26eef77725f1b8c1fd913ff4a0dadf732708c408ed29&scene=58&subscene=0#rd)\n - [ ] [PHP XXE 注入漏洞允许攻击者访问配置文件和私钥](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581623&idx=2&sn=ed65317702ca19322ce299614071d10d&chksm=e9146f8dde63e69b12b35daead3fc81c3829490c492b5f9ff856c0d6c35ae6f601360d08dae6&scene=58&subscene=0#rd)\n- 火绒安全\n - [ ] [感染型病毒风险提醒：官方渠道或成传播链之一](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524676&idx=1&sn=2f83b7d6ad5122172a6c2c851394cee3&chksm=eb70bf7bdc07366d91d59892ddd3d62a08588e6576f72f86856e3fbb6a93f7cf78f0d7b823ed&scene=58&subscene=0#rd)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524676&idx=2&sn=9963349c2405d99e24e545323e48c360&chksm=eb70bf7bdc07366d34b421b11aab7fe129457449ff6048708234d89dadf29f8865a56df3a95a&scene=58&subscene=0#rd)\n- ChaBug\n - [ ] [招人，老板不差钱，速度来一起办公](https://mp.weixin.qq.com/s?__biz=MzU0ODg2MDA0NQ==&mid=2247486372&idx=1&sn=41e5e5b7c51bdf3ee91c386f7bd19a79&chksm=fbb9f246ccce7b50e4b30676970a7f54449c46ca7182651884d2e3254b772aca5b0888698159&scene=58&subscene=0#rd)\n- 默安玄甲实验室\n - [ ] [【大模型与安全】第一弹：AI防口误指南之LLM输出安全实践](https://mp.weixin.qq.com/s?__biz=MzkzNjI2MzgzOA==&mid=2247485175&idx=1&sn=50e2b6b0212cd5d85f914e35484961cc&chksm=c2a02f06f5d7a610bbbffb1d1ef3842dbf499be76a2bd8feaa6e41e86f566a8d97ce264b8f25&scene=58&subscene=0#rd)\n- 字节跳动技术团队\n - [ ] [字节跳动 Top Seed 研究实习生专项启动](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513932&idx=1&sn=68be79bc72292e7436e5581bf7265db7&chksm=e9d37caedea4f5b8db9f9985be91dc1935d738342954b9af6fcb8d61ca2b24469ca8031499f9&scene=58&subscene=0#rd)\n- TrustedSec\n - [ ] [Trimarc Joins TrustedSec: Strengthening Our Commitment to Security](https://trustedsec.com/blog/trimarc-joins-trustedsec-strengthening-our-commitment-to-security)\n- 安全圈\n - [ ] [【安全圈】印孚瑟斯公司同意在 2023 年数据泄露事件后支付 1750 万美元的和解金](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068609&idx=1&sn=11eba4b8e73b9bc267b72636596e9c48&chksm=f36e7741c419fe57745a4ca06b27be0336d9dd5571fe7dbf6a0ba6769be5546cfcce28f5c82c&scene=58&subscene=0#rd)\n - [ ] [【安全圈】Babuk 勒索软件组织宣称对电信公司 Orange 发起攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068609&idx=2&sn=e2acbc74f11b8df506c8839530471007&chksm=f36e7741c419fe579136591756f4a10fcf5ea2a2296c4b4fe9408274f33c94f6ccc1bde3e96c&scene=58&subscene=0#rd)\n - [ ] [【安全圈】恶意软件行动 “DollyWay”：全球超 2 万个 WordPress 网站惨遭攻陷](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068609&idx=3&sn=692113a4a87a7354cfada6702accfb8d&chksm=f36e7741c419fe574e72f00d2dcb4791d33e786e2ff6190d4675de86694d150dbf1f935bbf16&scene=58&subscene=0#rd)\n- 补天平台\n - [ ] [打响人生第一洞 | 新人福利任务持续进行！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247507609&idx=1&sn=48921b97701356a4a8163df651b8a680&chksm=eaf996d5dd8e1fc332ae4776505407034d8703cc3952540a0e4927c3c1f0875dd377e31a3133&scene=58&subscene=0#rd)\n- DARKNAVY\n - [ ] [攻防速写｜击穿DJI大疆控制设备的致命漏洞](https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247487369&idx=1&sn=b754e9f1af1f02a3c96b2fb0518ee9b4&chksm=c1f44b41f683c257fd54a43948a876f4f2b71fb342562094c67414d5db5e4309e134f0d57a03&scene=58&subscene=0#rd)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Coinbase was primary target of recent GitHub Actions breaches](https://www.bleepingcomputer.com/news/security/coinbase-was-primary-target-of-recent-github-actions-breaches/)\n - [ ] [Valve removes video game demo suspected of being malware](https://techcrunch.com/2025/03/21/valve-removes-video-game-demo-suspected-of-being-malware/)\n - [ ] [Oracle denies breach after hacker claims theft of 6 million data records](https://www.bleepingcomputer.com/news/security/oracle-denies-data-breach-after-hacker-claims-theft-of-6-million-data-records/)\n - [ ] [Arrests in Tap-to-Pay Scheme Powered by Phishing](https://krebsonsecurity.com/2025/03/arrests-in-tap-to-pay-scheme-powered-by-phishing/)\n - [ ] [Data center, verso una regolamentazione ad hoc: lo stato dell’arte](https://www.cybersecurity360.it/news/data-center-verso-una-regolamentazione-ad-hoc-lo-stato-dellarte/)\n - [ ] [Clearview AI settles class-action privacy lawsuit worth an estimated $50 million](https://therecord.media/clearview-ai-illinois-class-action-lawsuit-settlement)\n - [ ] [Trump order on information sharing appears to have implications for DOGE and beyond](https://therecord.media/trump-executive-order-information-silos-data-sharing-doge)\n - [ ] [Fake Semrush ads used to steal SEO professionals’ Google accounts](https://www.bleepingcomputer.com/news/security/fake-semrush-ads-used-to-steal-seo-professionals-google-accounts/)\n - [ ] [Microsoft: Exchange Online bug mistakenly quarantines user emails](https://www.bleepingcomputer.com/news/microsoft/microsoft-exchange-online-bug-mistakenly-quarantines-user-emails/)\n - [ ] [Il confine tra sicurezza e privacy: il Garante sanziona il monitoraggio GPS della flotta aziendale](https://www.cybersecurity360.it/news/il-confine-tra-sicurezza-e-privacy-il-garante-sanziona-il-monitoraggio-gps-della-flotta-aziendale/)\n - [ ] [US Treasury removes sanctions on Tornado Cash after appellate court loss](https://therecord.media/treasury-drops-tornado-cash-sanctions)\n - [ ] [Europol, l’IA è catalizzatore del crimine organizzato: nuove sfide per la sicurezza europea](https://www.cybersecurity360.it/news/europol-lia-e-catalizzatore-del-crimine-organizzato-nuove-sfide-per-la-sicurezza-europea/)\n - [ ] [US removes sanctions against Tornado Cash crypto mixer](https://www.bleepingcomputer.com/news/security/us-removes-sanctions-against-tornado-cash-crypto-mixer/)\n - [ ] [Falla nei controller Bmc di Ami permette di dirottare e bloccare i server: come proteggersi](https://www.cybersecurity360.it/news/falla-critica-mi-megarac-controller-bmc-di-ami/)\n - [ ] [Dsa: Agcom spiega come presentare un reclamo](https://www.cybersecurity360.it/legal/agcom-dsa-procedura-per-presentare-ricorsi/)\n - [ ] [UE: Google e Apple violano il Dma. Che succede ora](https://www.cybersecurity360.it/legal/ue-google-e-apple-violano-il-dma-che-succede-ora/)\n - [ ] [Sintesi riepilogativa delle campagne malevole nella settimana del 15 – 21 marzo](https://cert-agid.gov.it/news/sintesi-riepilogativa-delle-campagne-malevole-nella-settimana-del-15-21-marzo/)\n - [ ] [Il ransomware Medusa usa un driver malevolo per bloccare le difese EDR](https://www.securityinfo.it/2025/03/21/il-ransomware-medusa-usa-un-driver-malevolo-per-bloccare-le-difese-edr/)\n - [ ] [Steam pulls game demo infecting Windows with info-stealing malware](https://www.bleepingcomputer.com/news/security/steam-pulls-game-demo-infecting-windows-with-info-stealing-malware/)\n - [ ] [Russian zero-day seller is offering up to $4 million for Telegram exploits](https://techcrunch.com/2025/03/21/russian-zero-day-seller-is-offering-up-to-4-million-for-telegram-exploits/)\n - [ ] [Cyber sicurezza dei grandi eventi: sfida complessa tra IT, OT e minacce AI](https://www.cybersecurity360.it/soluzioni-aziendali/cyber-sicurezza-dei-grandi-eventi-sfida-complessa-tra-it-ot-e-minacce-ai/)\n - [ ] [Underground Market Exploits and Active Threats: Key Takeaways from the Weekly Vulnerability Insights Report](https://cyble.com/blog/cyble-weekly-vulnerability-insights-report/)\n - [ ] [ICS Vulnerability Report: Solar Energy, Cardiology Fixes Urged by Cyble](https://cyble.com/blog/ics-vulnerability-report-solar-fixes-urged-by-cyble/)\n - [ ] [Threat landscape for industrial automation systems in Q4 2024](https://securelist.com/ics-cert-q4-2024-report/115944/)\n - [ ] [Il machine learning nella cyber security: opportunità e rischi](https://www.cybersecurity360.it/cultura-cyber/il-machine-learning-nella-cyber-security-opportunita-e-rischi/)\n - [ ] [Penetration testing, una volta ogni tanto non basta più: serve un approccio continuativo](https://www.securityinfo.it/2025/03/21/penetration-testing-una-volta-ogni-tanto-non-basta-piu-serve-un-approccio-continuativo/)\n- Securityinfo.it\n - [ ] [Il ransomware Medusa usa un driver malevolo per bloccare le difese EDR](https://www.securityinfo.it/2025/03/21/il-ransomware-medusa-usa-un-driver-malevolo-per-bloccare-le-difese-edr/?utm_source=rss&utm_medium=rss&utm_campaign=il-ransomware-medusa-usa-un-driver-malevolo-per-bloccare-le-difese-edr)\n - [ ] [Penetration testing, una volta ogni tanto non basta più: serve un approccio continuativo](https://www.securityinfo.it/2025/03/21/penetration-testing-una-volta-ogni-tanto-non-basta-piu-serve-un-approccio-continuativo/?utm_source=rss&utm_medium=rss&utm_campaign=penetration-testing-una-volta-ogni-tanto-non-basta-piu-serve-un-approccio-continuativo)\n- 360数字安全\n - [ ] [喂给AI的数据，正在反向“开盒”你的企业？](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580053&idx=1&sn=0d866163ae16728ef4b4fe72d014f325&chksm=9f8d299da8faa08b9c6608bdfb75336a4e14cc1d831aadac3eb0b623b77b201970c313ba227e&scene=58&subscene=0#rd)\n - [ ] [360入选2024年度移动互联网APP产品安全漏洞治理优秀案例](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580053&idx=2&sn=f0326cff16ca89a3e6e4c10841b54946&chksm=9f8d299da8faa08bc0d94656d2ec8f010c4bcb09a694e915e87d46d997c35b426f935996f8f2&scene=58&subscene=0#rd)\n- 娜璋AI安全之家\n - [ ] [[网络安全] 滥用Azure内置Contributor角色横向移动至Azure VM](https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247501692&idx=1&sn=2c49756c4248a9af1d3451b18bc92e17&chksm=cfcf77b1f8b8fea7ea4d433ea901b90dcfa69ee6a4e54dad395a6f1623fa26a57bbfcafb036f&scene=58&subscene=0#rd)\n- NetSPI\n - [ ] [Internal vs. External Penetration Testing: What You Need to Know](https://www.netspi.com/blog/executive-blog/penetration-testing-as-a-service/internal-vs-external-penetration-testing/)\n- 悬镜安全\n - [ ] [SBOM风险预警 | 恶意NPM组件开展木马投毒攻击，目标针对国内泛互企业](https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647796137&idx=1&sn=3513f79e1818d691d517425f88a4aeeb&chksm=8770a1feb00728e8b526a75b671b2059bc1ded343762061675ca26223281ff9733e616ef3015&scene=58&subscene=0#rd)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #783: Automating rpm checks](https://www.hecfblog.com/2025/03/daily-blog-783-automating-rpm-checks.html)\n- 迪哥讲事\n - [ ] [实战中的WebService利⽤⽅法](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497303&idx=1&sn=a7882d85efe77247e7792676ac930773&chksm=e8a5fc34dfd27522c3aec2bd16b5812c54beb1f8585cb240976003e26c12f27d48374ff401ec&scene=58&subscene=0#rd)\n- ICT Security Magazine\n - [ ] [Cyber Mafia: dal Crimine Tradizionale alla Criminalità Digitale](https://www.ictsecuritymagazine.com/articoli/cyber-mafia-crimine-digitale/)\n - [ ] [Misurare e rendere affidabile un sistema di AI](https://www.ictsecuritymagazine.com/articoli/misurare-ai/)\n- Troy Hunt's Blog\n - [ ] [Weekly Update 444](https://www.troyhunt.com/weekly-update-444/)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [ISC Stormcast For Friday, March 21st, 2025 https://isc.sans.edu/podcastdetail/9374, (Fri, Mar 21st)](https://isc.sans.edu/diary/rss/31788)\n- Schneier on Security\n - [ ] [Friday Squid Blogging: A New Explanation of Squid Camouflage](https://www.schneier.com/blog/archives/2025/03/friday-squid-blogging-a-new-explanation-of-squid-camouflage.html)\n - [ ] [My Writings Are in the LibGen AI Training Corpus](https://www.schneier.com/blog/archives/2025/03/my-writings-are-in-the-libgen-ai-training-corpus.html)\n - [ ] [NCSC Releases Post-Quantum Cryptography Timeline](https://www.schneier.com/blog/archives/2025/03/ncsc-releases-post-quantum-cryptography-timeline.html)\n- 长亭科技\n - [ ] [【长亭科技X头部人工智能公司】“AI”X“Security”=风险管理的∞大](https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651389053&idx=1&sn=e7187928426fa55b4160997fbcc7f53e&chksm=8d398df5ba4e04e362a81a3a9d646a135392214e46388f0279f0043d643e5932cb8b6e62246f&scene=58&subscene=0#rd)\n- The Hacker News\n - [ ] [UAT-5918 Targets Taiwan's Critical Infrastructure Using Web Shells and Open-Source Tools](https://thehackernews.com/2025/03/uat-5918-targets-taiwans-critical.html)\n - [ ] [Medusa Ransomware Uses Malicious Driver to Disable Anti-Malware with Stolen Certificates](https://thehackernews.com/2025/03/medusa-ransomware-uses-malicious-driver.html)\n - [ ] [10 Critical Network Pentest Findings IT Teams Overlook](https://thehackernews.com/2025/03/10-critical-network-pentest-findings-it.html)\n - [ ] [China-Linked APT Aquatic Panda: 10-Month Campaign, 7 Global Targets, 5 Malware Families](https://thehackernews.com/2025/03/china-linked-apt-aquatic-panda-10-month.html)\n - [ ] [Kaspersky Links Head Mare to Twelve, Targeting Russian Entities via Shared C2 Servers](https://thehackernews.com/2025/03/kaspersky-links-head-mare-to-twelve.html)\n - [ ] [Ongoing Cyber Attacks Exploit Critical Vulnerabilities in Cisco Smart Licensing Utility](https://thehackernews.com/2025/03/ongoing-cyber-attacks-exploit-critical.html)\n- BorderGate\n - [ ] [VXLAN’s](https://www.bordergate.co.uk/vxlans/)\n- Security Affairs\n - [ ] [RansomHub affiliate uses custom backdoor Betruger](https://securityaffairs.com/175701/cyber-crime/ransomhub-affiliate-uses-custom-backdoor-betruger.html)\n - [ ] [Cisco Smart Licensing Utility flaws actively exploited in the wild](https://securityaffairs.com/175692/security/cisco-smart-licensing-utility-flaws-actively-exploited-in-the-wild.html)\n- Technical Information Security Content & Discussion\n - [ ] [Palo Alto Cortex XDR bypass (CVE-2024-8690)](https://www.reddit.com/r/netsec/comments/1jgra20/palo_alto_cortex_xdr_bypass_cve20248690/)\n- Computer Forensics\n - [ ] [A Structured DFIR Learning Path with Free Case Files & Assessment](https://www.reddit.com/r/computerforensics/comments/1jgpxi3/a_structured_dfir_learning_path_with_free_case/)\n - [ ] [Looking for a Digital Forensics Dataset for Fine-Tuning an LLM + Scraping Issues with ANY.RUN](https://www.reddit.com/r/computerforensics/comments/1jgqgfn/looking_for_a_digital_forensics_dataset_for/)\n- Blackhat Library: Hacking techniques and research\n - [ ] [What type of Malware did Scam Sandwich use here](https://www.reddit.com/r/blackhat/comments/1jg7pk6/what_type_of_malware_did_scam_sandwich_use_here/)\n - [ ] [I need your opinion about CyberSources](https://www.reddit.com/r/blackhat/comments/1jgl71f/i_need_your_opinion_about_cybersources/)\n- Krebs on Security\n - [ ] [Arrests in Tap-to-Pay Scheme Powered by Phishing](https://krebsonsecurity.com/2025/03/arrests-in-tap-to-pay-scheme-powered-by-phishing/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [Network/ Network Security jobs in Australia](https://www.reddit.com/r/netsecstudents/comments/1jgdy6n/network_network_security_jobs_in_australia/)\n- Deeplinks\n - [ ] [A Win for Encryption: France Rejects Backdoor Mandate](https://www.eff.org/deeplinks/2025/03/win-encryption-france-rejects-backdoor-mandate)\n - [ ] [New USPTO Memo Makes Fighting Patent Trolls Even Harder](https://www.eff.org/deeplinks/2025/03/new-uspto-memo-makes-fighting-patent-trolls-even-harder)\n- Social Engineering\n - [ ] [Manipulation Community](https://www.reddit.com/r/SocialEngineering/comments/1jgazyc/manipulation_community/)\n- Your Open Hacker Community\n - [ ] [Would it be possible to trace this scam?](https://www.reddit.com/r/HowToHack/comments/1jgh1ec/would_it_be_possible_to_trace_this_scam/)\n - [ ] [Automation from Pen to Cloud](https://www.reddit.com/r/HowToHack/comments/1jgit68/automation_from_pen_to_cloud/)\n - [ ] [Spoofcard Solution](https://www.reddit.com/r/HowToHack/comments/1jg63yo/spoofcard_solution/)\n - [ ] [Manipulating packets to join game server](https://www.reddit.com/r/HowToHack/comments/1jgbax6/manipulating_packets_to_join_game_server/)\n- Penetration testing Archives - MDSec\n - [ ] [Red Teaming with ServiceNow](https://www.mdsec.co.uk/2025/03/red-teaming-with-servicenow/)\n- Deep Web\n - [ ] [There's No Way This \"Hitman for Hire\" Website Is Real...Right?💀Darknet Diaries Ep. 156: Kill List](https://www.reddit.com/r/deepweb/comments/1jgv3mi/theres_no_way_this_hitman_for_hire_website_is/)\n - [ ] [Curious](https://www.reddit.com/r/deepweb/comments/1jglt9f/curious/)\n - [ ] [List of sites](https://www.reddit.com/r/deepweb/comments/1jg7s11/list_of_sites/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [Orange Drop Caps, apps, Veeam, jobs, Heathrow, vpentest, Aaran Leyland, and More... - SWN #461](http://sites.libsyn.com/18678/orange-drop-caps-apps-veeam-jobs-heathrow-vpentest-aaran-leyland-and-more-swn-461)\n"}, "6478721cf73c4a0f1be3daff07dd7786d1b298ac": {"t": 1785772250.3476021, "n": 60468, "h": "d222e12ea82de4b8", "c": "# 每日安全资讯（2025-03-22）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-03-21 Review](http://www.sec-wiki.com/?2025-03-21)\n- Verne in GitHub\n - [ ] [RAG 简介](https://blog.einverne.info/post/2025/03/rag.html)\n- 奇安信攻防社区\n - [ ] [探索SQL注入中数学函数的应用：绕过过滤、\"算\"出数据](https://forum.butian.net/share/4210)\n- Tenable Blog\n - [ ] [Cybersecurity Snapshot: Tenable Highlights Risks of AI Use in the Cloud, as UK’s NCSC Offers Tips for Post-Quantum Cryptography Adoption](https://www.tenable.com/blog/cybersecurity-snapshot-tenable-highlights-risks-of-ai-use-in-the-cloud-as-uks-ncsc-offers-tips)\n- Recent Commits to cve:main\n - [ ] [Update Fri Mar 21 16:19:01 UTC 2025](https://github.com/trickest/cve/commit/b75fcd7c5b3da31490874f18cb61770725f6a365)\n- Trustwave Blog\n - [ ] [The Energy Industry’s Hidden Risks: Espionage, Sabotage, and Insider Threats](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/the-energy-industrys-hidden-risks-espionage-sabotage-and-insider-threats/)\n- 一个被知识诅咒的人\n - [ ] [【人工智能】LM Studio 的 GPU 加速：释放大模型推理潜能的极致优化](https://blog.csdn.net/nokiaguy/article/details/146426756)\n - [ ] [【人工智能】Ollama 的 API 操作指南：打造个性化大模型服务](https://blog.csdn.net/nokiaguy/article/details/146426734)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [隐私保护没有旁观者，梆梆安全助力企业构筑数字时代的信任防线](https://www.4hou.com/posts/om0Y)\n - [ ] [趋势洞察 | 鸿蒙应用安全新纪元：移动应用加固技术发展趋势洞察](https://www.4hou.com/posts/gyGk)\n - [ ] [“鉴真”获昆明反诈中心推荐，教你五步远离AI诈骗！](https://www.4hou.com/posts/vwz8)\n - [ ] [“鉴真”上线“贵港警事”，一键识破假视频/假图片！](https://www.4hou.com/posts/rpv2)\n - [ ] [我国首个AI生成内容标识办法发布，国投智能参与起草](https://www.4hou.com/posts/qor7)\n - [ ] [PHP XXE 注入漏洞允许攻击者访问配置文件和私钥](https://www.4hou.com/posts/jBVy)\n- Jiajun的技术笔记\n - [ ] [Replace docker with podman](https://jiajunhuang.com/articles/2025_03_21-podman.md.html)\n- InfoSec Write-ups - Medium\n - [ ] [Understanding the Psychology of Bug Bounty Triage Teams — Why Some Bugs Get Marked as Duplicates…](https://infosecwriteups.com/understanding-the-psychology-of-bug-bounty-triage-teams-why-some-bugs-get-marked-as-duplicates-cab9195c6f58?source=rss----7b722bfd1b8d---4)\n - [ ] [Phase I — Implement free Microsoft IAM Services for Cloud-only Identities](https://infosecwriteups.com/phase-i-implement-free-microsoft-iam-services-for-cloud-only-identities-e25706ada193?source=rss----7b722bfd1b8d---4)\n - [ ] [Vanilla PowerShell Reverse Shell Using ICMP](https://infosecwriteups.com/vanilla-powershell-reverse-shell-using-icmp-42b0d5697d9b?source=rss----7b722bfd1b8d---4)\n - [ ] [Get $5000: GitHub Dorks & Leaks](https://infosecwriteups.com/get-5000-github-dorks-leaks-b26728099d38?source=rss----7b722bfd1b8d---4)\n - [ ] [How to Route Traffic from WSL to Burp Suite on Windows: A Step-by-Step Guide](https://infosecwriteups.com/how-to-route-traffic-from-wsl-to-burp-suite-on-windows-a-step-by-step-guide-38d58f65b21a?source=rss----7b722bfd1b8d---4)\n - [ ] [What Are Black-Box LLMs, and Why Are They a Growing Concern in API-Based AI Models?](https://infosecwriteups.com/what-are-black-box-llms-and-why-are-they-a-growing-concern-in-api-based-ai-models-a95a48b67896?source=rss----7b722bfd1b8d---4)\n - [ ] [The Hidden Risk in AI-Generated Code: A Silent Backdoor](https://infosecwriteups.com/the-hidden-risk-in-ai-generated-code-a-silent-backdoor-7dc3c1279cb6?source=rss----7b722bfd1b8d---4)\n - [ ] [$50K Bounty Just for GitHub Access Token exposure](https://infosecwriteups.com/50k-bounty-just-for-github-access-token-exposure-d92dcc34eb4d?source=rss----7b722bfd1b8d---4)\n - [ ] [$200+ Bug Bounty Payouts: Exploiting Content Providers with SQL Injection](https://infosecwriteups.com/200-bug-bounty-payouts-exploiting-content-providers-with-sql-injection-abd287179b61?source=rss----7b722bfd1b8d---4)\n - [ ] [Adversarial AI Digest — 20 March, 2025](https://infosecwriteups.com/adversarial-ai-digest-20-march-2025-2e3cde5c34bb?source=rss----7b722bfd1b8d---4)\n- 安全客-有思想的安全新媒体\n - [ ] [DCMTK三大安全漏洞曝光！中科固源Wisdom模糊自定义漏洞挖掘产品推动医疗信息安全升级](https://www.anquanke.com/post/id/305296)\n - [ ] [中科固源基于覆盖引导的 Fuzzing 神器登场，开源模糊测试迎来新技术迭代](https://www.anquanke.com/post/id/305294)\n - [ ] [CVE-2025-23120 ：Veeam Backup & Replication 严重 RCE 漏洞已修复，尽快修补！](https://www.anquanke.com/post/id/305287)\n - [ ] [Tenable 警告称 DeepSeek AI 模型易遭破解用于生成恶意软件](https://www.anquanke.com/post/id/305284)\n - [ ] [大模型如何挖洞| 15期字节跳动安全范儿沙龙开启](https://www.anquanke.com/post/id/305280)\n - [ ] [谷歌以 320 亿美元收购 Wiz，云安全中立性引发广泛担忧](https://www.anquanke.com/post/id/305276)\n - [ ] [恶意软件行动 “DollyWay”：全球超 2 万个 WordPress 网站惨遭攻陷](https://www.anquanke.com/post/id/305273)\n - [ ] [Babuk 勒索软件组织宣称对电信公司 Orange 发起攻击](https://www.anquanke.com/post/id/305271)\n - [ ] [CISA 将 Edimax IC-7100 IP Camera、NAKIVO 和 SAP NetWeaver AS Java 纳入已知被利用漏洞库](https://www.anquanke.com/post/id/305266)\n - [ ] [IBM AIX 漏洞可致攻击者执行任意命令](https://www.anquanke.com/post/id/305258)\n - [ ] [Cisco Smart Licensing Utility 遭黑客利用多重漏洞入侵](https://www.anquanke.com/post/id/305255)\n - [ ] [新型隐写恶意软件利用 JPEG 文件来传播信息窃取程序](https://www.anquanke.com/post/id/305252)\n - [ ] [360赋能政务“一网统管”新突破！安全运营效率提升150%](https://www.anquanke.com/post/id/305246)\n- Twitter @Nicolas Krassas\n - [ ] [Global Jira targeting conducted by HellCat as Ascom confirms breach https://www.scworld.com/brief/global-jira-targeting-conducted-by-hellcat-as-ascom-...](https://x.com/Dinosn/status/1903163918186315815)\n - [ ] [Personal data revealed in released JFK files https://www.malwarebytes.com/blog/news/2025/03/personal-data-revealed-in-released-jfk-files](https://x.com/Dinosn/status/1903163720399806688)\n - [ ] [Fake Semrush ads used to steal SEO professionals’ Google accounts https://www.bleepingcomputer.com/news/security/fake-semrush-ads-used-to-steal-seo-p...](https://x.com/Dinosn/status/1903163679669116981)\n - [ ] [Checkpoint ZoneAlarm Driver Flaw Exposes Users to Credential Theft https://hackread.com/checkpoint-zonealarm-driver-flaw-user-credential-theft/](https://x.com/Dinosn/status/1903163639919517778)\n - [ ] [Microsoft: Exchange Online bug mistakenly quarantines user emails https://www.bleepingcomputer.com/news/microsoft/microsoft-exchange-online-bug-mistak...](https://x.com/Dinosn/status/1903163609909432496)\n - [ ] [Suspected Chinese-linked hackers set sights on Taiwan https://www.scworld.com/brief/suspected-chinese-linked-hackers-set-sights-on-taiwan](https://x.com/Dinosn/status/1903130084292141234)\n - [ ] [GitHub Action supply chain attack less impactful than thought https://www.scworld.com/brief/github-action-supply-chain-attack-less-impactful-than-thou...](https://x.com/Dinosn/status/1903128947136623100)\n - [ ] [Data breach refuted by Baidu after user info leak https://www.scworld.com/brief/data-breach-refuted-by-baidu-after-user-info-leak](https://x.com/Dinosn/status/1903128530268930050)\n - [ ] [History of NULL Pointer Dereferences on macOS https://afine.com/history-of-null-pointer-dereferences-on-macos/](https://x.com/Dinosn/status/1903128109831889315)\n - [ ] [US removes sanctions against Tornado Cash crypto mixer https://www.bleepingcomputer.com/news/security/us-removes-sanctions-against-tornado-cash-crypto...](https://x.com/Dinosn/status/1903127734886244391)\n - [ ] [Former NFL, Michigan Assistant Coach Matt Weiss Charged With Hacking for Athletes’ Intimate Photos https://www.securityweek.com/former-nfl-michigan-a...](https://x.com/Dinosn/status/1903100274396344728)\n - [ ] [Ransomware Group Claims Attacks on Ascom, Jaguar Land Rover https://www.securityweek.com/ransomware-group-claims-attacks-on-ascom-jaguar-land-rover/](https://x.com/Dinosn/status/1903100239923343779)\n - [ ] [Kaspersky Links Head Mare to Twelve, Targeting Russian Entities via Shared C2 Servers https://thehackernews.com/2025/03/kaspersky-links-head-mare-to-t...](https://x.com/Dinosn/status/1903098079458292040)\n - [ ] [Chinese I-Soon Hackers Hit 7 Organizations in Operation FishMedley https://www.securityweek.com/chinese-i-soon-hackers-hit-7-organizations-in-operatio...](https://x.com/Dinosn/status/1903097954610672042)\n - [ ] [The Good, the Bad and the Ugly in Cybersecurity – Week 12 https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-12-6/](https://x.com/Dinosn/status/1903097852114387061)\n - [ ] [New Attacks Exploit Year-Old ServiceNow Flaws – Israel Hit Hardest https://hackread.com/attacks-exploit-servicenow-flaws-israel-hit-hardest/](https://x.com/Dinosn/status/1903097401428128023)\n - [ ] [UAT-5918 Targets Taiwan's Critical Infrastructure Using Web Shells and Open-Source Tools https://thehackernews.com/2025/03/uat-5918-targets-taiwans-cr...](https://x.com/Dinosn/status/1903097252530278785)\n - [ ] [Steam pulls game demo infecting Windows with info-stealing malware https://www.bleepingcomputer.com/news/security/steam-pulls-game-demo-infecting-wind...](https://x.com/Dinosn/status/1903097213095420399)\n - [ ] [Medusa Ransomware Uses Malicious Driver to Disable Anti-Malware with Stolen Certificates https://thehackernews.com/2025/03/medusa-ransomware-uses-mali...](https://x.com/Dinosn/status/1903097175808106523)\n - [ ] [RT roddux: I find myself repeating this a bit, so fuck it, here's how to get into an unprivileged namespace on Ubuntu 24.04/24.10. PSA: linux is stupi...](https://x.com/Dinosn/status/1903170911865541071)\n- Security Boulevard\n - [ ] [How do I ensure secure authentication for NHIs in an IAM system?](https://securityboulevard.com/2025/03/how-do-i-ensure-secure-authentication-for-nhis-in-an-iam-system/?utm_source=rss&utm_medium=rss&utm_campaign=how-do-i-ensure-secure-authentication-for-nhis-in-an-iam-system)\n - [ ] [What role do NHIs play in modern identity and access management?](https://securityboulevard.com/2025/03/what-role-do-nhis-play-in-modern-identity-and-access-management/?utm_source=rss&utm_medium=rss&utm_campaign=what-role-do-nhis-play-in-modern-identity-and-access-management)\n - [ ] [How can legacy IAM systems be updated to support NHIs?](https://securityboulevard.com/2025/03/how-can-legacy-iam-systems-be-updated-to-support-nhis/?utm_source=rss&utm_medium=rss&utm_campaign=how-can-legacy-iam-systems-be-updated-to-support-nhis)\n - [ ] [DEF CON 32 – Recon Village – Pushing the Limits of Mass DNS Scanning](https://securityboulevard.com/2025/03/def-con-32-recon-village-pushing-the-limits-of-mass-dns-scanning/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-recon-village-pushing-the-limits-of-mass-dns-scanning)\n - [ ] [A Pragmatic Approach to Effective Security](https://securityboulevard.com/2025/03/a-pragmatic-approach-to-effective-security/?utm_source=rss&utm_medium=rss&utm_campaign=a-pragmatic-approach-to-effective-security)\n - [ ] [Ex-Michigan, Ravens Football Coach Charged with Hacking Athlete Accounts](https://securityboulevard.com/2025/03/ex-michigan-ravens-football-coach-charged-with-hacking-athlete-accounts/?utm_source=rss&utm_medium=rss&utm_campaign=ex-michigan-ravens-football-coach-charged-with-hacking-athlete-accounts)\n - [ ] [Securing Your Supply Chain from Phishing Attacks](https://securityboulevard.com/2025/03/securing-your-supply-chain-from-phishing-attacks/?utm_source=rss&utm_medium=rss&utm_campaign=securing-your-supply-chain-from-phishing-attacks)\n - [ ] [DEF CON 32 – Recon Village – GeoINT Mastery: A Pixel Is Worth A Thousand Words](https://securityboulevard.com/2025/03/def-con-32-recon-village-geoint-mastery-a-pixel-is-worth-a-thousand-words/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-recon-village-geoint-mastery-a-pixel-is-worth-a-thousand-words)\n - [ ] [A Peek on Cloud Security: JSSI 2025](https://securityboulevard.com/2025/03/a-peek-on-cloud-security-jssi-2025/?utm_source=rss&utm_medium=rss&utm_campaign=a-peek-on-cloud-security-jssi-2025)\n - [ ] [Cybersecurity Snapshot: Tenable Highlights Risks of AI Use in the Cloud, as UK’s NCSC Offers Tips for Post-Quantum Cryptography Adoption](https://securityboulevard.com/2025/03/cybersecurity-snapshot-tenable-highlights-risks-of-ai-use-in-the-cloud-as-uks-ncsc-offers-tips-for-post-quantum-cryptography-adoption/?utm_source=rss&utm_medium=rss&utm_campaign=cybersecurity-snapshot-tenable-highlights-risks-of-ai-use-in-the-cloud-as-uks-ncsc-offers-tips-for-post-quantum-cryptography-adoption)\n- Planet Classpath\n - [ ] [Tom Tromey: Faster Faster GDB Startup](https://tromey.com/blog/?p=1111)\n- Der Flounder\n - [ ] [Jamf Pro Classic API computer inventory endpoint deprecated as of Jamf Pro 11.15.0](https://derflounder.wordpress.com/2025/03/21/jamf-pro-classic-api-computer-inventory-endpoint-deprecated-as-of-jamf-pro-11-15-0/)\n- Doonsec's feed\n - [ ] [Ragflow知识库的解析过程](https://mp.weixin.qq.com/s?__biz=MjM5NDcxMDQzNA==&mid=2247489495&idx=1&sn=e6f3bd160db7dd654e909e852aaa98e5)\n - [ ] [首席信息安全官的新选择：从传统SOC到AI原生SOC的转变](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485762&idx=1&sn=92f4f792cdacc81092cd7ed50acbb904)\n - [ ] [【干货】笑傲职场的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485762&idx=2&sn=26fd99901ca4339e2696b41fce066730)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485762&idx=3&sn=2d6e24eee88356c9c3751d4a40122d31)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485762&idx=4&sn=fee409e0ccf49053eeb5273ee161d3c0)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485762&idx=5&sn=1a6d989c75eb265833b9544c582b35c7)\n - [ ] [网络安全人士必知的密码提取工具Mimikatz](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490665&idx=1&sn=dbe421cf478406e343273007f983f03a)\n - [ ] [UCTC CTF 2024高校新生网安赛](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490665&idx=2&sn=7af8ce95f66c56a0cc5beebdc533d19d)\n - [ ] [实战中的WebService利⽤⽅法](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497303&idx=1&sn=a7882d85efe77247e7792676ac930773)\n - [ ] [CDN常见面试点](https://mp.weixin.qq.com/s?__biz=MzkwNjY1Mzc0Nw==&mid=2247487895&idx=1&sn=448ad19bd31fe4fcb34da7f803dab342)\n - [ ] [免杀BypassAV小白入门指南](https://mp.weixin.qq.com/s?__biz=MzkxODc0Mzk4OQ==&mid=2247484679&idx=1&sn=c4175b2414da564d7400796f1d094035)\n - [ ] [飞天诚信闪耀欧洲零售和电子商务商户支付大会MPE 2025](https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649876839&idx=1&sn=72d8ae77ed35312ca13b1564e90ab1df)\n - [ ] [国家互联网信息办公室、公安部联合公布《人脸识别技术应用安全管理办法》](https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649401507&idx=1&sn=550bfd1f6590c439d24624c2e8c079aa)\n - [ ] [人脸识别技术应用安全管理办法](https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064044&idx=1&sn=8394c0f7164ff4e860d93d2ae1f2a8e2)\n - [ ] [《人脸识别技术应用安全管理办法》答记者问](https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649401507&idx=3&sn=ec48fd42c250ecb21750ef0050070871)\n - [ ] [Databasetools：非常灵活的一款数据库提权工具](https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484814&idx=1&sn=a2e4ef4d25615af1445a0ae52d376b0a)\n - [ ] [malicious-devfile-registry ：在Gitlab中利用CVE-2024-0402](https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484814&idx=2&sn=d370c68ff4ae64de4cd6d6bbb4ddf60c)\n - [ ] [Z1sec推出了最靠谱的网络安全1对1课程](https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484814&idx=3&sn=c6291ed43202de695c790bc63cb55499)\n - [ ] [2025 HW招聘，大甲方](https://mp.weixin.qq.com/s?__biz=Mzg5NTY3NTMxMQ==&mid=2247484565&idx=1&sn=6c14cf2395ab8e803fdc1b0663f828e4)\n - [ ] [浅谈护网如何面试签约：避坑指南与血泪教训](https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484244&idx=1&sn=2994f21fbf763c2fa8d3c6a632410582)\n - [ ] [成年人大都是辛苦的，区别在于是否体面](https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485305&idx=1&sn=576bce2d1539dfa57948b993050cded2)\n - [ ] [针对LNK文件的PE嵌入隐写工具](https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497138&idx=1&sn=50690b7887ea4235283e8e73479d7dbc)\n - [ ] [Cobalt Strike 4.11 更新修复内容一览](https://mp.weixin.qq.com/s?__biz=Mzg4NTUwMzM1Ng==&mid=2247513263&idx=1&sn=ef6c686baeb84b355e203481a609efa3)\n - [ ] [Keep SRC x 火线安全助力「奇御」AI.安全技术沙龙 · 3月29日北京开启！](https://mp.weixin.qq.com/s?__biz=MzU4MjEwNzMzMg==&mid=2247494712&idx=1&sn=bc114525af9db0ee01ca051185175f61)\n - [ ] [疯狂攫取千亿资金！中国黑产最新手段，分分钟把你的信用卡变成他们的提款机！](https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247511839&idx=1&sn=67699dc738f1e379bf0a77b0b4ce2d21)\n - [ ] [招人，老板不差钱，速度来一起办公](https://mp.weixin.qq.com/s?__biz=MzU0ODg2MDA0NQ==&mid=2247486372&idx=1&sn=41e5e5b7c51bdf3ee91c386f7bd19a79)\n - [ ] [【漏洞预警】Mattermost MFA绕过漏洞 (CVE-2025-25068)](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489817&idx=1&sn=575c88c1fa41080d156d78747a403a00)\n - [ ] [华为星河AI融合SASE解决方案新升级，携手伙伴共赢千行万业新未来](https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247506015&idx=1&sn=26b9b09bab5407bd9d4d1ef509c48467)\n - [ ] [16届蓝桥杯省赛行不行？来“模拟”1次，就知道了](https://mp.weixin.qq.com/s?__biz=MzkwODM4NDM5OA==&mid=2247519821&idx=1&sn=d93ae523ef6f1f2d972eabd348290dcf)\n - [ ] [【备赛16届蓝桥杯】历年真题及题解 - 01串的熵](https://mp.weixin.qq.com/s?__biz=MzkwODM4NDM5OA==&mid=2247519821&idx=2&sn=7cf0bfcab4d2286e875279325a713487)\n - [ ] [信息安全漏洞周报【第014期】](https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064050&idx=1&sn=e5cfd0999539184202ac68f658f7a870)\n - [ ] [新定级备案模板明确数据安全纳入等级保护体系](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114892&idx=1&sn=2a3c14fefe37d4ddbf5bc1cedab86328)\n - [ ] [【免费试用】从录屏到录制，云勘黑科技让固证网站“活”起来！](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651441766&idx=1&sn=f27b16208dd60e6cd643cf86d7dfb12e)\n - [ ] [警务大数据分析与建模高级培训，提升执法效能新引擎](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651441766&idx=2&sn=a51f2609f941584f9d1427af36b8ea1e)\n - [ ] [新定级备案模板明确数据纳入等级保护体系，等保2.0更进一步](https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247498800&idx=1&sn=def6a890e7093672266792112803edc1)\n - [ ] [国家密码管理局关于《电子认证服务使用密码管理办法（征求意见稿）》公开征求意见的通知](https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485255&idx=1&sn=d8d18c459eba120502cb2c90d049790d)\n - [ ] [限时免费！360智榜样网络安全预科班，仅剩30席，带你弯道超车进网安圈！](https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649818880&idx=1&sn=f13a21ee251fa4045c3fe7a501d3d5d7)\n - [ ] [预警！你的AI大模型又要被别人删除了](https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649871207&idx=1&sn=d927204b6a0625eed1c16df3363df5c5)\n - [ ] [免费入会 | 会员购多款优惠上新，购 Office 送腾讯视频、爱奇艺月卡](https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492296&idx=1&sn=e8e89eba6b473afa13873fedadc0ea80)\n - [ ] [稍息_1981-1984年的中国](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488120&idx=1&sn=7457ad63b2dcf17cc781e61a0cc13d43)\n - [ ] [盗版免杀？我直接399上车正版！还带一对一解疑+彩蛋](https://mp.weixin.qq.com/s?__biz=Mzg5OTg1MDk0Mw==&mid=2247485538&idx=1&sn=1bc27a7b1b53032c80e8a6186c540743)\n - [ ] [感染型病毒风险提醒：官方渠道或成传播链之一](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524676&idx=1&sn=2f83b7d6ad5122172a6c2c851394cee3)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524676&idx=2&sn=9963349c2405d99e24e545323e48c360)\n - [ ] [渗透测试神器之漏洞利用代理工具Empire](https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484348&idx=1&sn=e2703f4bd969e744f6d6b0d9b2d9e13a)\n - [ ] [Cobalt Strike 4.11 更新内容一览](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487813&idx=1&sn=af9ae7bf8bd7911576cc2bd5052149ef)\n - [ ] [万能门店小程序管理系统 dopagefxcount SQL注入漏洞](https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490850&idx=1&sn=e76fe3973b2336d62ac834665ec2cdb4)\n - [ ] [工具推荐——LeakSearch](https://mp.weixin.qq.com/s?__biz=MzI3OTM3OTAyNw==&mid=2247485991&idx=1&sn=ec87b2d1e3924f4d9011e9e84be31488)\n - [ ] [分享的图片、视频、链接](https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247544742&idx=1&sn=6ef41aafb884571fbafd4a609a228034)\n - [ ] [从零到英雄 | (06 ) 威胁行为者如何获得初步立足点](https://mp.weixin.qq.com/s?__biz=MzA3MTM0NTQzNA==&mid=2455780201&idx=1&sn=3fd75e89bc70c03008d74ce9bb16de43)\n - [ ] [Smartadmin 系统代码审计](https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489286&idx=1&sn=84919497aadd75b27b5068b29c3370e7)\n - [ ] [50PPT DeepSeek技术溯源及前沿探索](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655271710&idx=1&sn=20aced4b0ce038d41872076842348eca)\n - [ ] [别到处乱加人 乱咬人](https://mp.weixin.qq.com/s?__biz=MzkzNTQwNjQ4OA==&mid=2247484110&idx=1&sn=d71ab06762019efe7dcb9f1beb73618b)\n - [ ] [这款开源神器！！一键穿透内网！](https://mp.weixin.qq.com/s?__biz=MzkxOTIzNDgwMQ==&mid=2247484522&idx=1&sn=c27794360fc33ecbee026ad332496b34)\n - [ ] [开盒么？暴你户口本的那种！](https://mp.weixin.qq.com/s?__biz=MjM5MDA3MzI0MA==&mid=2650091359&idx=1&sn=2cfa155febccd9b7ea1121561425acb6)\n - [ ] [这个世界为什么会有贫穷存在？](https://mp.weixin.qq.com/s?__biz=Mzg5NDE2MDQ3Mg==&mid=2247484487&idx=1&sn=1e38fdd5fc401586e779b643e4d2194b)\n - [ ] [2025国家护网广东战区｜蓝队防守岗急招！进群报名，安排面试](https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486646&idx=1&sn=bea37054d19f4714aaacd5ef5b0850d8)\n - [ ] [《论语别裁》第02章 为政（01） 孔子不谈政治](https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247501073&idx=1&sn=15775efc62e3624656e9025cf0891854)\n - [ ] [GLPI 中的预认证 SQL 注入到 RCE（CVE-2025-24799/CVE-2025-24801）](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528683&idx=1&sn=2120705cacf11ce8965ac57f3a6b68f5)\n - [ ] [喜报|《网络空间安全科学学报》荣获集团公司科技期刊能力建设提升奖](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505265&idx=1&sn=4cb7a274d6bb47832a20a252b840fe61)\n - [ ] [“各退一步”](https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247485003&idx=1&sn=e8e822c70f033c3560204c658f488e29)\n - [ ] [CISP学习笔记百题解析(一)](https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485956&idx=1&sn=760d10b51efb577d44ff3eae9c8ac143)\n - [ ] [用deepseek学习提供Be对抗思路](https://mp.weixin.qq.com/s?__biz=MzU3NDY1NTYyOQ==&mid=2247486058&idx=1&sn=0865fcfc6f2f03fa266d2ce9d6cae697)\n - [ ] [信安世纪出席广西高校密码技术应用研讨会，共探密码人才培养实践](https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650664087&idx=1&sn=56f951b08737b24125ea9620ab072fdc)\n - [ ] [带你解锁编码新世界！--随波逐流CTF编码工具使用教程72 --汉字笔画码密码](https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247489950&idx=1&sn=0118a92adb67462be57ba861fe7a48dd)\n - [ ] [【技术探索】WebAssembly安全研究：浏览器攻击面的新趋势与模糊测试实践](https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526600&idx=1&sn=5bb6284101e45eaa086df795f42331fd)\n - [ ] [英国国防领域的军事智能变革](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619958&idx=1&sn=afb5560e03d9f1ac39016f85eaa06a1b)\n - [ ] [美国总统特朗普签署行政令，提高美国矿产产量](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619958&idx=2&sn=9282fbbedda1325e03369e32c088cbbe)\n - [ ] [【安全圈】印孚瑟斯公司同意在 2023 年数据泄露事件后支付 1750 万美元的和解金](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068609&idx=1&sn=11eba4b8e73b9bc267b72636596e9c48)\n - [ ] [【安全圈】Babuk 勒索软件组织宣称对电信公司 Orange 发起攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068609&idx=2&sn=e2acbc74f11b8df506c8839530471007)\n - [ ] [【安全圈】恶意软件行动 “DollyWay”：全球超 2 万个 WordPress 网站惨遭攻陷](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068609&idx=3&sn=692113a4a87a7354cfada6702accfb8d)\n - [ ] [喂给AI的数据，正在反向“开盒”你的企业？](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580053&idx=1&sn=0d866163ae16728ef4b4fe72d014f325)\n - [ ] [360入选2024年度移动互联网APP产品安全漏洞治理优秀案例](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580053&idx=2&sn=f0326cff16ca89a3e6e4c10841b54946)\n - [ ] [字节跳动开源多模态 AI 代理 TARS](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247496920&idx=1&sn=67f91eed7989d2ce588d392e22badfa4)\n - [ ] [风险研究 | AI 安全警钟响起：Manus AI 漏洞暴露的背后真相](https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496213&idx=1&sn=6a854c286f0cea1f3e5bea8feec61654)\n - [ ] [被网络安全耽误的游戏公司卡巴斯基的2024mdr和ir报告中英文双语](https://mp.weixin.qq.com/s?__biz=MzkxMzU4ODU2MQ==&mid=2247484201&idx=1&sn=e6ff9dfe40de907ae2552d9fe1287898)\n - [ ] [携手国家级平台共建防线，盛邦安全获CNNVD漏洞库权威认证](https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650277881&idx=1&sn=102cc0320f7027e82f03573ff2f16045)\n - [ ] [等保测评取消打分《网络安全等级测评报告模版（2025版）》重大变更](https://mp.weixin.qq.com/s?__biz=MzU1ODM1Njc1Ng==&mid=2247498281&idx=1&sn=217e6fd5d2198f05d536a5079c0a8fed)\n - [ ] [无声杀机，企业高管应如何对抗窃听威胁](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247637939&idx=1&sn=eca861e05266645bdd92d3c7503f0728)\n - [ ] [诸子云｜甲方 ：cursor类ai如何避免员工泄密？大模型能否替代外包？](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247637939&idx=2&sn=1675cbe301082e97b526cf6d18ff67b0)\n - [ ] [十六载砺剑铸盾，护航数字中国每一程--祝贺江南信安成立十六周年](https://mp.weixin.qq.com/s?__biz=MzA4MTE0MTEwNQ==&mid=2668670172&idx=1&sn=dacdedeec016e44f074233ddc4b52142)\n - [ ] [安全资讯汇总：2025.3.17-2025.3.21](https://mp.weixin.qq.com/s?__biz=MzA4MTE0MTEwNQ==&mid=2668670172&idx=2&sn=a4f94071cd7a02b9c987dd83ef26848e)\n - [ ] [靶场历险记-stapler-1（全方面突破边界+提权）](https://mp.weixin.qq.com/s?__biz=Mzk1NzQwNjQ4Ng==&mid=2247485610&idx=1&sn=3b7b396fe53d385a72058e3795bc4e23)\n - [ ] [Veeam 修复Backup & Replication 中的严重RCE漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522555&idx=1&sn=46e012bb1770fd23ba35da839b60f669)\n - [ ] [太多软件供应链防御指南看不过来？专家提炼出三大要点](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522555&idx=2&sn=4914b44d0db56efd08db5896225d4f59)\n - [ ] [【开源情报—从入门到精通教程】搜索引擎篇](https://mp.weixin.qq.com/s?__biz=MzkxMTA3MDk3NA==&mid=2247487409&idx=1&sn=8a0cda064e0f0301b0dba85f2ac0b35d)\n - [ ] [应对安全工具泛滥的六个策略](https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490310&idx=1&sn=5ee3bf1bba520edbaea150d9dada2e9a)\n - [ ] [从“开盒”事件到471.6亿条数据被泄露，数据安全再敲警钟](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625860&idx=1&sn=76e1b957bed0e7914499a482ced88541)\n - [ ] [公安部公布严厉打击侵犯公民个人信息犯罪10起典型案例](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625860&idx=2&sn=272354e07bf25d2dd8d3a16b3b29c946)\n - [ ] [《打工人破防实录：今天上班赚的还不够买颗烂橘子？》](https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487440&idx=1&sn=11ddd1474ec83b39d08ec12b5a152922)\n - [ ] [量子安全丨全球量子安全产业发展展望（附下载）](https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247532572&idx=1&sn=b2d291906d9dbbb86f044f597c6d3274)\n - [ ] [发布丨网络安全标准实践指南——人工智能生成合成内容标识 服务提供者编码规则（附下载）](https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247532572&idx=2&sn=c80be1f884e8e55295e822dadd82e9fc)\n - [ ] [解析稳定率达99.99%！合合信息“大模型加速器2.0”助力AI打破“幻觉”](https://mp.weixin.qq.com/s?__biz=MzAxMzg0NjY2NA==&mid=2247493220&idx=1&sn=128f4967606d76b8a31f4156126c7c4c)\n - [ ] [发布 | 国家网信办、公安部联合公布《人脸识别技术应用安全管理办法》（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=1&sn=4b3a88fcc92fd87e05385c08cb6109f0)\n - [ ] [通知 | 国家密码管理局就《电子认证服务使用密码管理办法（征求意见稿）》公开征求意见（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=2&sn=9620c4dd871e41cca0cfc081a4edaafe)\n - [ ] [关注 | 《促进和规范数据跨境流动规定》实施一周年 数据出境安全管理工作取得积极成效](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=3&sn=c1303974d537bbf88f557fa678525075)\n - [ ] [通知 | 网安标委就《网络安全技术 信息安全管理体系审核和认证机构要求（征求意见稿）》等3项国家标准征求意见（附下载）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=4&sn=9e9d94ca600921e07370dd0d31fdfa0f)\n - [ ] [权威解答 | 《人脸识别技术应用安全管理办法》答记者问](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=5&sn=e3cfd4a94017ce679b506f2a89ae75b2)\n - [ ] [关注 | 未成年人“开盒”引发轩然大波，数据安全何去何从？](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=6&sn=81ad0a63787594efc6e07b8c74e2b1cd)\n - [ ] [国际 | 欧盟《数字身份条例》的内容与特色](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=7&sn=3414faa92440fafb737e0eef571606da)\n - [ ] [Cisco智能许可工具漏洞遭利用，内置后门账户曝光](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316826&idx=1&sn=68a582db0aaeae73798dfecdb67bf96b)\n - [ ] [研究人员利用AI越狱技术大量窃取Chrome信息](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316826&idx=2&sn=7ed4c4d16da49e4ad3d6e55d601c719f)\n - [ ] [Veeam与IBM发布备份和AIX系统高危漏洞补丁](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316826&idx=3&sn=0cc4af02352183b198b12bda854a860a)\n - [ ] [公私合作：网络安全行业增长与成熟的催化剂](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316826&idx=4&sn=1ac6cf340ab9e6c266a204890f13f033)\n - [ ] [AI应用狂欢背后：你的Deepseek模型真的安全吗？](https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247504431&idx=1&sn=b7f25827d5163e49b4cf04aab94b6abc)\n - [ ] [《没有实力切勿评价》的SRC事件:向来如此，便对么？](https://mp.weixin.qq.com/s?__biz=MzU2MDkzMTk3Mg==&mid=2247485408&idx=1&sn=d515c8cbde30ac7253fe0cd8913f5d17)\n - [ ] [SOC 2认证全攻略：从零到合规的高效路径](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541744&idx=1&sn=553cc0e39da744c45fc4d51eba950573)\n - [ ] [渊亭科技入选「2024央国企数字化厂商全景报告」](https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660190938&idx=1&sn=36009aee016852ce7fc10a907751cbe7)\n - [ ] [网安周讯 | “人肉开盒”黑灰产曝光，300元购买户籍信息（三月第3期）](https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247524173&idx=1&sn=5942e26e1288a02579eaa33b98ae2755)\n - [ ] [“人肉开盒”事件引发隐私忧虑，我们应该如何保护个人信息安全？](https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247524173&idx=2&sn=e2cb8bd6e3d05c18e13ade9b19ef393c)\n - [ ] [AI大模型攻防安全 | 第15期安全范儿沙龙开启](https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070962&idx=1&sn=dce2b9bfb7bb52a27f921bf5558877f5)\n - [ ] [从创新引擎到战争机器：美国军工复合体进入\\\"硅谷时代\\\"](https://mp.weixin.qq.com/s?__biz=Mzg3MDczNjcyNA==&mid=2247489069&idx=1&sn=fb023e44f78f031c9d4b9ddf86ec3ce0)\n - [ ] [每周蓝军技术推送（2025.3.15-3.21）](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494131&idx=1&sn=aa94cb73ced850f1e464174fa37dd817)\n- Orange Cyberdefense\n - [ ] [Leakymetry: Circumventing GLPI Authentication](https://sensepost.com/blog/2025/leakymetry-circumventing-glpi-authentication/)\n- NVISO Labs\n - [ ] [How to hunt & defend against Business Email Compromise (BEC)](https://blog.nviso.eu/2025/03/21/how-to-hunt-defend-against-business-email-compromise-bec/)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [Understanding the Psychology of Bug Bounty Triage Teams — Why Some Bugs Get Marked as Duplicates…](https://infosecwriteups.com/understanding-the-psychology-of-bug-bounty-triage-teams-why-some-bugs-get-marked-as-duplicates-cab9195c6f58?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Get $5000: GitHub Dorks & Leaks](https://infosecwriteups.com/get-5000-github-dorks-leaks-b26728099d38?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [How to Route Traffic from WSL to Burp Suite on Windows: A Step-by-Step Guide](https://infosecwriteups.com/how-to-route-traffic-from-wsl-to-burp-suite-on-windows-a-step-by-step-guide-38d58f65b21a?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [$50K Bounty Just for GitHub Access Token exposure](https://infosecwriteups.com/50k-bounty-just-for-github-access-token-exposure-d92dcc34eb4d?source=rss----7b722bfd1b8d--bug_bounty)\n- Malwarebytes\n - [ ] [Personal data revealed in released JFK files](https://www.malwarebytes.com/blog/news/2025/03/personal-data-revealed-in-released-jfk-files)\n- Securelist\n - [ ] [Threat landscape for industrial automation systems in Q4 2024](https://securelist.com/ics-cert-q4-2024-report/115944/)\n- SentinelOne\n - [ ] [The Good, the Bad and the Ugly in Cybersecurity – Week 12](https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-12-6/)\n - [ ] [When Python Is Poisoned | How Runtime Security Stops the tj-actions Attack](https://www.sentinelone.com/blog/when-python-is-poisoned-how-runtime-security-stops-the-tj-actions-attack/)\n- Horizon3.ai\n - [ ] [Critical or Clickbait: GitHub Actions and Apache Tomcat RCE Vulnerabilities 2025](https://www.horizon3.ai/attack-research/attack-blogs/critical-or-clickbait-github-actions-and-apache-tomcat-rce-vulnerabilities-2025/)\n- Reverse Engineering\n - [ ] [tmp.0ut Volume 4](https://www.reddit.com/r/ReverseEngineering/comments/1jgn22v/tmp0ut_volume_4/)\n - [ ] [History of NULL Pointer Dereferences on macOS](https://www.reddit.com/r/ReverseEngineering/comments/1jgh2bf/history_of_null_pointer_dereferences_on_macos/)\n - [ ] [Lightweight Time Travel Analysis with Frida](https://www.reddit.com/r/ReverseEngineering/comments/1jgijdv/lightweight_time_travel_analysis_with_frida/)\n - [ ] [Last barrier destroyed, or compromise of Fuse Encryption Key for Intel Security Fuses](https://www.reddit.com/r/ReverseEngineering/comments/1jg5ewa/last_barrier_destroyed_or_compromise_of_fuse/)\n - [ ] [Recording Android App Execution Traces with Time Travel Analysis](https://www.reddit.com/r/ReverseEngineering/comments/1jgim9t/recording_android_app_execution_traces_with_time/)\n- Exploit-DB.com RSS Feed\n - [ ] [[webapps] Jasmin Ransomware - SQL Injection Login Bypass](https://www.exploit-db.com/exploits/52091)\n- FreeBuf网络安全行业门户\n - [ ] [Coinbase成为近期GitHub Actions供应链攻击的主要目标](https://www.freebuf.com/articles/es/425442.html)\n- 安全牛\n - [ ] [现代DAST+SAST：开启安全测试的新纪元](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135582&idx=1&sn=fa16eaae871b6da584af770b506a89ab&chksm=bd15ae8d8a62279b30337a6d01a0b57dc6e3e15b7759586095201d982263ad461315599df965&scene=58&subscene=0#rd)\n - [ ] [国家互联网信息办公室、公安部联合公布《人脸识别技术应用安全管理办法》；​IBM AIX曝满分高危漏洞，可导致系统完全沦陷 |牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135582&idx=2&sn=ac32564a4acce1bf67c2f14f346fd876&chksm=bd15ae8d8a62279bb919422313fa40df59f4553e4d7f990d6118c3391231f83835a4a6751909&scene=58&subscene=0#rd)\n- HackerNews\n - [ ] [黑客利用思科智能许可工具漏洞](https://hackernews.cc/archives/57981)\n - [ ] [HellCat 黑客在全球范围内掀起针对 Jira 的攻击狂潮](https://hackernews.cc/archives/57976)\n - [ ] [恐吓软件与钓鱼手段相结合，攻击目标转向 macOS 用户](https://hackernews.cc/archives/57968)\n - [ ] [六国政府或使用 Paragon 间谍软件入侵 WhatsApp 并收集数据](https://hackernews.cc/archives/57966)\n - [ ] [Veeam 和 IBM 发布补丁，修复 Backup 和 AIX 系统中的高风险漏洞](https://hackernews.cc/archives/57963)\n - [ ] [YouTube 游戏外挂传播 Arcane 盗取器恶意软件](https://hackernews.cc/archives/57961)\n- 奇客Solidot–传递最新科技情报\n - [ ] [微软开发新功能向用户解释硬件性能问题](https://www.solidot.org/story?sid=80852)\n - [ ] [学生太多课堂时间花在笔记本电脑上](https://www.solidot.org/story?sid=80851)\n - [ ] [英伟达 GTC 峰会凸显中美 AI 加速分裂](https://www.solidot.org/story?sid=80850)\n - [ ] [浙江大学物理学家制造出最小的 LED 显示屏](https://www.solidot.org/story?sid=80849)\n - [ ] [Calibre 8.0 释出](https://www.solidot.org/story?sid=80848)\n - [ ] [Gmail 引入 AI 驱动的搜索](https://www.solidot.org/story?sid=80847)\n - [ ] [英伟达在 GTC 会议期间用流动餐车卖 2000 张显卡](https://www.solidot.org/story?sid=80846)\n - [ ] [海豹能感知其血液中的氧含量而避免溺水](https://www.solidot.org/story?sid=80845)\n - [ ] [自由开源软件基础设施面临来自 AI 公司的攻击](https://www.solidot.org/story?sid=80844)\n - [ ] [婴儿能编码短暂的海马体记忆](https://www.solidot.org/story?sid=80843)\n - [ ] [2023/24 年海洋表面温度大幅上升](https://www.solidot.org/story?sid=80842)\n- 腾讯玄武实验室\n - [ ] [每日安全动态推送(25/3/21)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960054&idx=1&sn=4dfe1e034d5606be9f8c6f6bcb6bf210&chksm=8baed269bcd95b7fee67c4be09f29b4286b6e72c293fa183b7a03d138e31bc068df655adbc9c&scene=58&subscene=0#rd)\n- 安全分析与研究\n - [ ] [分享一款恶意软件C2追踪工具](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491188&idx=1&sn=a26af75c36126503ead27bbbbdcbe5b6&chksm=902fb15ca758384afb7827fb93213f47c044c738885efe10bb8e8ef5fadca7f583fd66b139bb&scene=58&subscene=0#rd)\n- 安全客\n - [ ] [对抗性AI防御打击金融欺诈：生成对抗网络的应用与挑战](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788213&idx=1&sn=11e2a296ff1e9218e921ee29fe5103fb&chksm=8893bf5abfe4364c87e3c5bf8ac286ae144ae43edb78ef9d36d4f64ae6e9502b20da7ed17292&scene=58&subscene=0#rd)\n- 技可达工作室\n - [ ] [用deepseek学习提供Be对抗思路](https://mp.weixin.qq.com/s?__biz=MzU3NDY1NTYyOQ==&mid=2247486058&idx=1&sn=0865fcfc6f2f03fa266d2ce9d6cae697&chksm=fd2e5788ca59de9eec31e5ea7982e792d7490ead96bc7e0624cd443c3784423b06d1c83b44a8&scene=58&subscene=0#rd)\n- 虎符智库\n - [ ] [从传统SOC转向AI原生SOC：首席信息安全官的新选择](https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493052&idx=1&sn=180a8175dfb4986172be30de19e3a3bb&chksm=971d88bea06a01a8f3b06853fb267e8406bac01fc1507a2bd0f70aa105dafbdca92c0fe569d1&scene=58&subscene=0#rd)\n- 安全学术圈\n - [ ] [行业会议 | 第六届网络空间安全前沿论坛](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491817&idx=1&sn=55a90803b3b748b9aa7093b961abea0d&chksm=fe2d1f62c95a96744ad3b09a8411af25a0ead40a4d3c8f9e84cb94c13edb355e74d427e0997a&scene=58&subscene=0#rd)\n- 威努特安全网络\n - [ ] [美国银行数据泄露，瑞士电信IT基础设施遭攻击|一周特辑](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131804&idx=1&sn=28f4ab09c449347639e98be0f2550cfb&chksm=80e7152cb7909c3a3e6d8e5f42c3917ee1c7b7bfd162b183873ab2f1103a063603a91ab1924f&scene=58&subscene=0#rd)\n- 代码卫士\n - [ ] [Veeam 修复Backup & Replication 中的严重RCE漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522555&idx=1&sn=46e012bb1770fd23ba35da839b60f669&chksm=ea94a991dde32087103cc41735938435faba038d9213a40c0d5778cc6a30e8d7541a8aed1d9b&scene=58&subscene=0#rd)\n - [ ] [太多软件供应链防御指南看不过来？专家提炼出三大要点](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522555&idx=2&sn=4914b44d0db56efd08db5896225d4f59&chksm=ea94a991dde32087ff24b28610efaba5296a45b54c096a9f67aa649a978dd1e68315715d288c&scene=58&subscene=0#rd)\n- 奇安信病毒响应中心\n - [ ] [每周勒索威胁摘要](https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498382&idx=1&sn=0e50781be016321eca2f01c6310900ee&chksm=ec698aa6db1e03b0c2cd3d93cfa984274a28168809aaa15fdc5a23e1cb8b989941fe9a17e25f&scene=58&subscene=0#rd)\n- 看雪学苑\n - [ ] [Hyper-v虚拟磁盘驱动vhdmp.sys漏洞汇总分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590984&idx=1&sn=c31273097426c0de80490922a0abe551&chksm=b18c2f8286fba694bf529bc37a0820cf419f1d29aab3881739da68477bc62e1f71151ce59c06&scene=58&subscene=0#rd)\n - [ ] [​Veeam 备份服务器现重大漏洞，速更新补丁！](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590984&idx=2&sn=b1db17b5fcaa1c4c3fc72ffc5ce6ecf5&chksm=b18c2f8286fba6941ab6105f712225167b1d0fbc683889fe28f7005fd280a1a5a1d1910c2f13&scene=58&subscene=0#rd)\n - [ ] [岗位更新：职位空缺，快来和我们一起“搞钱”](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590984&idx=3&sn=9f59094c1ef76637db0526146c8d3d6f&chksm=b18c2f8286fba69434481d211ab2ae6fbac2ba1d278ebe1c96cb7a7548aecbf16ecff70da7d3&scene=58&subscene=0#rd)\n - [ ] [更新小节：syscallfuzz | 系统0day安全-Windows平台漏洞挖掘（第5期）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590984&idx=4&sn=2044b458d80ee0788c018e803e567e04&chksm=b18c2f8286fba694e564da0d5533bd62c3ba613b2578311a499c92ee9844005979547e166d4f&scene=58&subscene=0#rd)\n- 中国信息安全\n - [ ] [发布 | 国家网信办、公安部联合公布《人脸识别技术应用安全管理办法》（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=1&sn=4b3a88fcc92fd87e05385c08cb6109f0&chksm=8b580de2bc2f84f4170325d56d3931bf7bafa71a1b5a2ee7c71c86b73eedf651dc641ffb84c7&scene=58&subscene=0#rd)\n - [ ] [通知 | 国家密码管理局就《电子认证服务使用密码管理办法（征求意见稿）》公开征求意见（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=2&sn=9620c4dd871e41cca0cfc081a4edaafe&chksm=8b580de2bc2f84f45af1bebcaec942c30683c4924cc9b695403af74d34dbebfaa52b78a99aae&scene=58&subscene=0#rd)\n - [ ] [关注 | 《促进和规范数据跨境流动规定》实施一周年 数据出境安全管理工作取得积极成效](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=3&sn=c1303974d537bbf88f557fa678525075&chksm=8b580de2bc2f84f4c843a7754b0a48d21fc0f04bb6496c52904846a90be36587944fd27c9b24&scene=58&subscene=0#rd)\n - [ ] [通知 | 网安标委就《网络安全技术 信息安全管理体系审核和认证机构要求（征求意见稿）》等3项国家标准征求意见（附下载）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=4&sn=9e9d94ca600921e07370dd0d31fdfa0f&chksm=8b580de2bc2f84f4ef0a509cb946db248a7b62b7f1f35f3541f9e8a929048160131fc7244edd&scene=58&subscene=0#rd)\n - [ ] [权威解答 | 《人脸识别技术应用安全管理办法》答记者问](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=5&sn=e3cfd4a94017ce679b506f2a89ae75b2&chksm=8b580de2bc2f84f480649e0610c3525b43e44d2a690058f24f3b2e0440905a4de0f0cabba3a2&scene=58&subscene=0#rd)\n - [ ] [关注 | 未成年人“开盒”引发轩然大波，数据安全何去何从？](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=6&sn=81ad0a63787594efc6e07b8c74e2b1cd&chksm=8b580de2bc2f84f4fe26ef5c1b0d00aa36777a03a21cd51426ec3f1490495d0d6de02e80dd4f&scene=58&subscene=0#rd)\n - [ ] [国际 | 欧盟《数字身份条例》的内容与特色](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238875&idx=7&sn=3414faa92440fafb737e0eef571606da&chksm=8b580de2bc2f84f4b2f00d16e27fc1393a82f1b9fb54c67a2f590a17844f1d69cf0222b17f50&scene=58&subscene=0#rd)\n- 网安杂谈\n - [ ] [推荐下国产AI编程工具Trae](https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650889549&idx=1&sn=c40ced9170c39247bbab95f44532a651&chksm=812ea168b659287e3be21b3a09339401e1e9f1a3ff14002e587b232c0f8e72da4a32edd00ed0&scene=58&subscene=0#rd)\n- M01N Team\n - [ ] [每周蓝军技术推送（2025.3.15-3.21）](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494131&idx=1&sn=aa94cb73ced850f1e464174fa37dd817&chksm=c18429e2f6f3a0f4afc82a7468bd3fb059ae03d49a5c7f4f8831f6887b7987ba305af0960f63&scene=58&subscene=0#rd)\n- 火线安全平台\n - [ ] [Keep SRC x 火线安全助力「奇御」AI.安全技术沙龙 · 3月29日北京开启！](https://mp.weixin.qq.com/s?__biz=MzU4MjEwNzMzMg==&mid=2247494712&idx=1&sn=bc114525af9db0ee01ca051185175f61&chksm=fdbfc593cac84c85850d815454289276da22ed8f7968ab561428569ec074f7223c4300ce91c7&scene=58&subscene=0#rd)\n- 网络空间安全科学学报\n - [ ] [喜报|《网络空间安全科学学报》荣获集团公司科技期刊能力建设提升奖](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505265&idx=1&sn=4cb7a274d6bb47832a20a252b840fe61&chksm=e9bfc1cfdec848d91f1c5ab2f77141d9157051c0a5dd2a26e47787470a43ed31440e34bbc282&scene=58&subscene=0#rd)\n- 慢雾科技\n - [ ] [智能合约安全审计入门篇 —— Deploy Different Contracts to the Same Address](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501562&idx=1&sn=93d8d0ddf96b4f6586b29a2cb32207d8&chksm=fddeb87dcaa9316b0fa19e3c9fcfecc53eb37d8b0541fa52f98f22a52440458426b7b9b657c4&scene=58&subscene=0#rd)\n- 奇安信威胁情报中心\n - [ ] [每周高级威胁情报解读(2025.03.14~03.20)](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247514535&idx=1&sn=06374a7a1ffc2af5278a15cfdaded7cc&chksm=ea664ed0dd11c7c67610489f581299add2ff27d49a041817e11e30d6c7b4625c20a07bc6417b&scene=58&subscene=0#rd)\n- dotNet安全矩阵\n - [ ] [.NET 内网实战绕过，通过劫持 Windows 注册表启动白名单进程实现绕过UAC](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499229&idx=1&sn=54718513a0fbb69ea6f0ee01d49803ff&chksm=fa595330cd2eda26c8f53f63e92892972fbbc3e2d62fddb7808581825c02c58cbd8804d1b119&scene=58&subscene=0#rd)\n - [ ] [简历直达CSO | 蚂蚁国际招聘基础设施安全、移动端安全、Web3安全等岗位！](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499229&idx=2&sn=2a61a44f908f9a1eccd405f78f94a4ae&chksm=fa595330cd2eda26bffbc2238e500ae19ea0fc6ce683640a8169713e8b55de919e48940286cc&scene=58&subscene=0#rd)\n - [ ] [国内最专业、最全面的 [ .NET 代码审计 ] 体系化学习交流社区](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499229&idx=3&sn=04978d31d038539568bf0c829b8d7afe&chksm=fa595330cd2eda267fd19d13d072e93dbb589e374e15de920369aed1f150af763908d2d85af5&scene=58&subscene=0#rd)\n- 数世咨询\n - [ ] [不是所有削减都平等：安全预算决策对风险存在差异化影响](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538225&idx=1&sn=9501829772260a475790dc701321e90f&chksm=c144248cf633ad9a89dceba63199ad7ad7bb951b74c467f5d23322810c2849839b6f456c5647&scene=58&subscene=0#rd)\n- 字节跳动安全中心\n - [ ] [大模型如何挖漏洞 | 正在直播](https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494619&idx=1&sn=36c118acb8150acbc0137a85d7d564b5&chksm=fa9d108dcdea999bd1d8335ffb1c37c12f0433cb8e01f00e980ec38b7310f4579889451d3dc6&scene=58&subscene=0#rd)\n- 安全内参\n - [ ] [香港通过保护关基设施条例，运营者不更新系统可罚款500万港元](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514032&idx=1&sn=d994cfb7c416e61dd7e850ef84b4b5b0&chksm=ebfaf090dc8d7986d7974f85b7afe218d2fa81dc1578eb3e892090cd1abb0de5afe45645f01a&scene=58&subscene=0#rd)\n - [ ] [美国网络司令部举办史上最大规模的“网络卫士”演习](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514032&idx=2&sn=c04911d532430ace62dfc0752477b358&chksm=ebfaf090dc8d798626272a47cf3fdf27e34c9c3e2c4877e2021b2417f4b9f8cf7a6389acea11&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [AI 功能延期被指虚假宣传，苹果面临集体诉讼；刘亦菲成为鸿蒙智行智界品牌大使；我国实现全球首例无线植入式脑机接口 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653076128&idx=1&sn=1d906e9b6edab944abdf909d7e588157&chksm=7e57c71649204e00cffe1f6f299c83ae6e64b47402512d2cabc16998d049ab1a9e188b84f92a&scene=58&subscene=0#rd)\n- 全频带阻塞干扰\n - [ ] [情报分析师必读 | 轻信AI带来的认知假象](https://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648958560&idx=1&sn=c7dd3daa9cc9b74ed7f89bea573fae66&chksm=f09ef11fc7e97809ef2bd9cb137b417d7f99fbd93bd99698642625703b2e21ad10829ab31e1b&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [掌握关键！人物调查的必备步骤与策略](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560387&idx=1&sn=f443af9014fda04b72120470dd383d75&chksm=871179c8b066f0ded713dd4804bd7eb43a51b6831682d4656b7c9c20d4206f12359b2402a93e&scene=58&subscene=0#rd)\n - [ ] [【人物调研】美国驻华临时代办武安妮](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560387&idx=2&sn=b211178d9b2e11432c16308752216b6a&chksm=871179c8b066f0de66e97a3ebe4a9781aa14eca238d83bf12c46ac1a17ce925a2b7968987b28&scene=58&subscene=0#rd)\n- Tide安全团队\n - [ ] [Jeecg漏洞总结及tscan poc分享](https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247520591&idx=1&sn=09408e28e3286c2cfd405487e0f3950c&chksm=ce5db32ef92a3a38ecd1ca641509b925c3cede747f10949b7f398cfcf43d62fe17914bea2224&scene=58&subscene=0#rd)\n- 嘶吼专业版\n - [ ] [开源DeepSOC，开放DeepSec，为网络安全运营的全面FSD做好准备](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581623&idx=1&sn=0da1aef778da582c9bbc7d1c4535dd88&chksm=e9146f8dde63e69bc83c958d7438527d26eef77725f1b8c1fd913ff4a0dadf732708c408ed29&scene=58&subscene=0#rd)\n - [ ] [PHP XXE 注入漏洞允许攻击者访问配置文件和私钥](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581623&idx=2&sn=ed65317702ca19322ce299614071d10d&chksm=e9146f8dde63e69b12b35daead3fc81c3829490c492b5f9ff856c0d6c35ae6f601360d08dae6&scene=58&subscene=0#rd)\n- 火绒安全\n - [ ] [感染型病毒风险提醒：官方渠道或成传播链之一](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524676&idx=1&sn=2f83b7d6ad5122172a6c2c851394cee3&chksm=eb70bf7bdc07366d91d59892ddd3d62a08588e6576f72f86856e3fbb6a93f7cf78f0d7b823ed&scene=58&subscene=0#rd)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524676&idx=2&sn=9963349c2405d99e24e545323e48c360&chksm=eb70bf7bdc07366d34b421b11aab7fe129457449ff6048708234d89dadf29f8865a56df3a95a&scene=58&subscene=0#rd)\n- ChaBug\n - [ ] [招人，老板不差钱，速度来一起办公](https://mp.weixin.qq.com/s?__biz=MzU0ODg2MDA0NQ==&mid=2247486372&idx=1&sn=41e5e5b7c51bdf3ee91c386f7bd19a79&chksm=fbb9f246ccce7b50e4b30676970a7f54449c46ca7182651884d2e3254b772aca5b0888698159&scene=58&subscene=0#rd)\n- 默安玄甲实验室\n - [ ] [【大模型与安全】第一弹：AI防口误指南之LLM输出安全实践](https://mp.weixin.qq.com/s?__biz=MzkzNjI2MzgzOA==&mid=2247485175&idx=1&sn=50e2b6b0212cd5d85f914e35484961cc&chksm=c2a02f06f5d7a610bbbffb1d1ef3842dbf499be76a2bd8feaa6e41e86f566a8d97ce264b8f25&scene=58&subscene=0#rd)\n- 字节跳动技术团队\n - [ ] [字节跳动 Top Seed 研究实习生专项启动](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513932&idx=1&sn=68be79bc72292e7436e5581bf7265db7&chksm=e9d37caedea4f5b8db9f9985be91dc1935d738342954b9af6fcb8d61ca2b24469ca8031499f9&scene=58&subscene=0#rd)\n- TrustedSec\n - [ ] [Trimarc Joins TrustedSec: Strengthening Our Commitment to Security](https://trustedsec.com/blog/trimarc-joins-trustedsec-strengthening-our-commitment-to-security)\n- 安全圈\n - [ ] [【安全圈】印孚瑟斯公司同意在 2023 年数据泄露事件后支付 1750 万美元的和解金](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068609&idx=1&sn=11eba4b8e73b9bc267b72636596e9c48&chksm=f36e7741c419fe57745a4ca06b27be0336d9dd5571fe7dbf6a0ba6769be5546cfcce28f5c82c&scene=58&subscene=0#rd)\n - [ ] [【安全圈】Babuk 勒索软件组织宣称对电信公司 Orange 发起攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068609&idx=2&sn=e2acbc74f11b8df506c8839530471007&chksm=f36e7741c419fe579136591756f4a10fcf5ea2a2296c4b4fe9408274f33c94f6ccc1bde3e96c&scene=58&subscene=0#rd)\n - [ ] [【安全圈】恶意软件行动 “DollyWay”：全球超 2 万个 WordPress 网站惨遭攻陷](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068609&idx=3&sn=692113a4a87a7354cfada6702accfb8d&chksm=f36e7741c419fe574e72f00d2dcb4791d33e786e2ff6190d4675de86694d150dbf1f935bbf16&scene=58&subscene=0#rd)\n- 补天平台\n - [ ] [打响人生第一洞 | 新人福利任务持续进行！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247507609&idx=1&sn=48921b97701356a4a8163df651b8a680&chksm=eaf996d5dd8e1fc332ae4776505407034d8703cc3952540a0e4927c3c1f0875dd377e31a3133&scene=58&subscene=0#rd)\n- DARKNAVY\n - [ ] [攻防速写｜击穿DJI大疆控制设备的致命漏洞](https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247487369&idx=1&sn=b754e9f1af1f02a3c96b2fb0518ee9b4&chksm=c1f44b41f683c257fd54a43948a876f4f2b71fb342562094c67414d5db5e4309e134f0d57a03&scene=58&subscene=0#rd)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Coinbase was primary target of recent GitHub Actions breaches](https://www.bleepingcomputer.com/news/security/coinbase-was-primary-target-of-recent-github-actions-breaches/)\n - [ ] [Valve removes video game demo suspected of being malware](https://techcrunch.com/2025/03/21/valve-removes-video-game-demo-suspected-of-being-malware/)\n - [ ] [Oracle denies breach after hacker claims theft of 6 million data records](https://www.bleepingcomputer.com/news/security/oracle-denies-data-breach-after-hacker-claims-theft-of-6-million-data-records/)\n - [ ] [Arrests in Tap-to-Pay Scheme Powered by Phishing](https://krebsonsecurity.com/2025/03/arrests-in-tap-to-pay-scheme-powered-by-phishing/)\n - [ ] [Data center, verso una regolamentazione ad hoc: lo stato dell’arte](https://www.cybersecurity360.it/news/data-center-verso-una-regolamentazione-ad-hoc-lo-stato-dellarte/)\n - [ ] [Clearview AI settles class-action privacy lawsuit worth an estimated $50 million](https://therecord.media/clearview-ai-illinois-class-action-lawsuit-settlement)\n - [ ] [Trump order on information sharing appears to have implications for DOGE and beyond](https://therecord.media/trump-executive-order-information-silos-data-sharing-doge)\n - [ ] [Fake Semrush ads used to steal SEO professionals’ Google accounts](https://www.bleepingcomputer.com/news/security/fake-semrush-ads-used-to-steal-seo-professionals-google-accounts/)\n - [ ] [Microsoft: Exchange Online bug mistakenly quarantines user emails](https://www.bleepingcomputer.com/news/microsoft/microsoft-exchange-online-bug-mistakenly-quarantines-user-emails/)\n - [ ] [Il confine tra sicurezza e privacy: il Garante sanziona il monitoraggio GPS della flotta aziendale](https://www.cybersecurity360.it/news/il-confine-tra-sicurezza-e-privacy-il-garante-sanziona-il-monitoraggio-gps-della-flotta-aziendale/)\n - [ ] [US Treasury removes sanctions on Tornado Cash after appellate court loss](https://therecord.media/treasury-drops-tornado-cash-sanctions)\n - [ ] [Europol, l’IA è catalizzatore del crimine organizzato: nuove sfide per la sicurezza europea](https://www.cybersecurity360.it/news/europol-lia-e-catalizzatore-del-crimine-organizzato-nuove-sfide-per-la-sicurezza-europea/)\n - [ ] [US removes sanctions against Tornado Cash crypto mixer](https://www.bleepingcomputer.com/news/security/us-removes-sanctions-against-tornado-cash-crypto-mixer/)\n - [ ] [Falla nei controller Bmc di Ami permette di dirottare e bloccare i server: come proteggersi](https://www.cybersecurity360.it/news/falla-critica-mi-megarac-controller-bmc-di-ami/)\n - [ ] [Dsa: Agcom spiega come presentare un reclamo](https://www.cybersecurity360.it/legal/agcom-dsa-procedura-per-presentare-ricorsi/)\n - [ ] [UE: Google e Apple violano il Dma. Che succede ora](https://www.cybersecurity360.it/legal/ue-google-e-apple-violano-il-dma-che-succede-ora/)\n - [ ] [Sintesi riepilogativa delle campagne malevole nella settimana del 15 – 21 marzo](https://cert-agid.gov.it/news/sintesi-riepilogativa-delle-campagne-malevole-nella-settimana-del-15-21-marzo/)\n - [ ] [Il ransomware Medusa usa un driver malevolo per bloccare le difese EDR](https://www.securityinfo.it/2025/03/21/il-ransomware-medusa-usa-un-driver-malevolo-per-bloccare-le-difese-edr/)\n - [ ] [Steam pulls game demo infecting Windows with info-stealing malware](https://www.bleepingcomputer.com/news/security/steam-pulls-game-demo-infecting-windows-with-info-stealing-malware/)\n - [ ] [Russian zero-day seller is offering up to $4 million for Telegram exploits](https://techcrunch.com/2025/03/21/russian-zero-day-seller-is-offering-up-to-4-million-for-telegram-exploits/)\n - [ ] [Cyber sicurezza dei grandi eventi: sfida complessa tra IT, OT e minacce AI](https://www.cybersecurity360.it/soluzioni-aziendali/cyber-sicurezza-dei-grandi-eventi-sfida-complessa-tra-it-ot-e-minacce-ai/)\n - [ ] [Underground Market Exploits and Active Threats: Key Takeaways from the Weekly Vulnerability Insights Report](https://cyble.com/blog/cyble-weekly-vulnerability-insights-report/)\n - [ ] [ICS Vulnerability Report: Solar Energy, Cardiology Fixes Urged by Cyble](https://cyble.com/blog/ics-vulnerability-report-solar-fixes-urged-by-cyble/)\n - [ ] [Threat landscape for industrial automation systems in Q4 2024](https://securelist.com/ics-cert-q4-2024-report/115944/)\n - [ ] [Il machine learning nella cyber security: opportunità e rischi](https://www.cybersecurity360.it/cultura-cyber/il-machine-learning-nella-cyber-security-opportunita-e-rischi/)\n - [ ] [Penetration testing, una volta ogni tanto non basta più: serve un approccio continuativo](https://www.securityinfo.it/2025/03/21/penetration-testing-una-volta-ogni-tanto-non-basta-piu-serve-un-approccio-continuativo/)\n- Securityinfo.it\n - [ ] [Il ransomware Medusa usa un driver malevolo per bloccare le difese EDR](https://www.securityinfo.it/2025/03/21/il-ransomware-medusa-usa-un-driver-malevolo-per-bloccare-le-difese-edr/?utm_source=rss&utm_medium=rss&utm_campaign=il-ransomware-medusa-usa-un-driver-malevolo-per-bloccare-le-difese-edr)\n - [ ] [Penetration testing, una volta ogni tanto non basta più: serve un approccio continuativo](https://www.securityinfo.it/2025/03/21/penetration-testing-una-volta-ogni-tanto-non-basta-piu-serve-un-approccio-continuativo/?utm_source=rss&utm_medium=rss&utm_campaign=penetration-testing-una-volta-ogni-tanto-non-basta-piu-serve-un-approccio-continuativo)\n- 360数字安全\n - [ ] [喂给AI的数据，正在反向“开盒”你的企业？](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580053&idx=1&sn=0d866163ae16728ef4b4fe72d014f325&chksm=9f8d299da8faa08b9c6608bdfb75336a4e14cc1d831aadac3eb0b623b77b201970c313ba227e&scene=58&subscene=0#rd)\n - [ ] [360入选2024年度移动互联网APP产品安全漏洞治理优秀案例](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580053&idx=2&sn=f0326cff16ca89a3e6e4c10841b54946&chksm=9f8d299da8faa08bc0d94656d2ec8f010c4bcb09a694e915e87d46d997c35b426f935996f8f2&scene=58&subscene=0#rd)\n- 娜璋AI安全之家\n - [ ] [[网络安全] 滥用Azure内置Contributor角色横向移动至Azure VM](https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247501692&idx=1&sn=2c49756c4248a9af1d3451b18bc92e17&chksm=cfcf77b1f8b8fea7ea4d433ea901b90dcfa69ee6a4e54dad395a6f1623fa26a57bbfcafb036f&scene=58&subscene=0#rd)\n- NetSPI\n - [ ] [Internal vs. External Penetration Testing: What You Need to Know](https://www.netspi.com/blog/executive-blog/penetration-testing-as-a-service/internal-vs-external-penetration-testing/)\n- 悬镜安全\n - [ ] [SBOM风险预警 | 恶意NPM组件开展木马投毒攻击，目标针对国内泛互企业](https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647796137&idx=1&sn=3513f79e1818d691d517425f88a4aeeb&chksm=8770a1feb00728e8b526a75b671b2059bc1ded343762061675ca26223281ff9733e616ef3015&scene=58&subscene=0#rd)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #783: Automating rpm checks](https://www.hecfblog.com/2025/03/daily-blog-783-automating-rpm-checks.html)\n- 迪哥讲事\n - [ ] [实战中的WebService利⽤⽅法](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497303&idx=1&sn=a7882d85efe77247e7792676ac930773&chksm=e8a5fc34dfd27522c3aec2bd16b5812c54beb1f8585cb240976003e26c12f27d48374ff401ec&scene=58&subscene=0#rd)\n- ICT Security Magazine\n - [ ] [Cyber Mafia: dal Crimine Tradizionale alla Criminalità Digitale](https://www.ictsecuritymagazine.com/articoli/cyber-mafia-crimine-digitale/)\n - [ ] [Misurare e rendere affidabile un sistema di AI](https://www.ictsecuritymagazine.com/articoli/misurare-ai/)\n- Troy Hunt's Blog\n - [ ] [Weekly Update 444](https://www.troyhunt.com/weekly-update-444/)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [ISC Stormcast For Friday, March 21st, 2025 https://isc.sans.edu/podcastdetail/9374, (Fri, Mar 21st)](https://isc.sans.edu/diary/rss/31788)\n- Schneier on Security\n - [ ] [Friday Squid Blogging: A New Explanation of Squid Camouflage](https://www.schneier.com/blog/archives/2025/03/friday-squid-blogging-a-new-explanation-of-squid-camouflage.html)\n - [ ] [My Writings Are in the LibGen AI Training Corpus](https://www.schneier.com/blog/archives/2025/03/my-writings-are-in-the-libgen-ai-training-corpus.html)\n - [ ] [NCSC Releases Post-Quantum Cryptography Timeline](https://www.schneier.com/blog/archives/2025/03/ncsc-releases-post-quantum-cryptography-timeline.html)\n- 长亭科技\n - [ ] [【长亭科技X头部人工智能公司】“AI”X“Security”=风险管理的∞大](https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651389053&idx=1&sn=e7187928426fa55b4160997fbcc7f53e&chksm=8d398df5ba4e04e362a81a3a9d646a135392214e46388f0279f0043d643e5932cb8b6e62246f&scene=58&subscene=0#rd)\n- The Hacker News\n - [ ] [UAT-5918 Targets Taiwan's Critical Infrastructure Using Web Shells and Open-Source Tools](https://thehackernews.com/2025/03/uat-5918-targets-taiwans-critical.html)\n - [ ] [Medusa Ransomware Uses Malicious Driver to Disable Anti-Malware with Stolen Certificates](https://thehackernews.com/2025/03/medusa-ransomware-uses-malicious-driver.html)\n - [ ] [10 Critical Network Pentest Findings IT Teams Overlook](https://thehackernews.com/2025/03/10-critical-network-pentest-findings-it.html)\n - [ ] [China-Linked APT Aquatic Panda: 10-Month Campaign, 7 Global Targets, 5 Malware Families](https://thehackernews.com/2025/03/china-linked-apt-aquatic-panda-10-month.html)\n - [ ] [Kaspersky Links Head Mare to Twelve, Targeting Russian Entities via Shared C2 Servers](https://thehackernews.com/2025/03/kaspersky-links-head-mare-to-twelve.html)\n - [ ] [Ongoing Cyber Attacks Exploit Critical Vulnerabilities in Cisco Smart Licensing Utility](https://thehackernews.com/2025/03/ongoing-cyber-attacks-exploit-critical.html)\n- BorderGate\n - [ ] [VXLAN’s](https://www.bordergate.co.uk/vxlans/)\n- Security Affairs\n - [ ] [RansomHub affiliate uses custom backdoor Betruger](https://securityaffairs.com/175701/cyber-crime/ransomhub-affiliate-uses-custom-backdoor-betruger.html)\n - [ ] [Cisco Smart Licensing Utility flaws actively exploited in the wild](https://securityaffairs.com/175692/security/cisco-smart-licensing-utility-flaws-actively-exploited-in-the-wild.html)\n- Technical Information Security Content & Discussion\n - [ ] [Palo Alto Cortex XDR bypass (CVE-2024-8690)](https://www.reddit.com/r/netsec/comments/1jgra20/palo_alto_cortex_xdr_bypass_cve20248690/)\n- Computer Forensics\n - [ ] [A Structured DFIR Learning Path with Free Case Files & Assessment](https://www.reddit.com/r/computerforensics/comments/1jgpxi3/a_structured_dfir_learning_path_with_free_case/)\n - [ ] [Looking for a Digital Forensics Dataset for Fine-Tuning an LLM + Scraping Issues with ANY.RUN](https://www.reddit.com/r/computerforensics/comments/1jgqgfn/looking_for_a_digital_forensics_dataset_for/)\n- Blackhat Library: Hacking techniques and research\n - [ ] [What type of Malware did Scam Sandwich use here](https://www.reddit.com/r/blackhat/comments/1jg7pk6/what_type_of_malware_did_scam_sandwich_use_here/)\n - [ ] [I need your opinion about CyberSources](https://www.reddit.com/r/blackhat/comments/1jgl71f/i_need_your_opinion_about_cybersources/)\n- Krebs on Security\n - [ ] [Arrests in Tap-to-Pay Scheme Powered by Phishing](https://krebsonsecurity.com/2025/03/arrests-in-tap-to-pay-scheme-powered-by-phishing/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [Network/ Network Security jobs in Australia](https://www.reddit.com/r/netsecstudents/comments/1jgdy6n/network_network_security_jobs_in_australia/)\n- Deeplinks\n - [ ] [A Win for Encryption: France Rejects Backdoor Mandate](https://www.eff.org/deeplinks/2025/03/win-encryption-france-rejects-backdoor-mandate)\n - [ ] [New USPTO Memo Makes Fighting Patent Trolls Even Harder](https://www.eff.org/deeplinks/2025/03/new-uspto-memo-makes-fighting-patent-trolls-even-harder)\n- Social Engineering\n - [ ] [Manipulation Community](https://www.reddit.com/r/SocialEngineering/comments/1jgazyc/manipulation_community/)\n- Your Open Hacker Community\n - [ ] [Would it be possible to trace this scam?](https://www.reddit.com/r/HowToHack/comments/1jgh1ec/would_it_be_possible_to_trace_this_scam/)\n - [ ] [Automation from Pen to Cloud](https://www.reddit.com/r/HowToHack/comments/1jgit68/automation_from_pen_to_cloud/)\n - [ ] [Spoofcard Solution](https://www.reddit.com/r/HowToHack/comments/1jg63yo/spoofcard_solution/)\n - [ ] [Manipulating packets to join game server](https://www.reddit.com/r/HowToHack/comments/1jgbax6/manipulating_packets_to_join_game_server/)\n- Penetration testing Archives - MDSec\n - [ ] [Red Teaming with ServiceNow](https://www.mdsec.co.uk/2025/03/red-teaming-with-servicenow/)\n- Deep Web\n - [ ] [There's No Way This \"Hitman for Hire\" Website Is Real...Right?💀Darknet Diaries Ep. 156: Kill List](https://www.reddit.com/r/deepweb/comments/1jgv3mi/theres_no_way_this_hitman_for_hire_website_is/)\n - [ ] [Curious](https://www.reddit.com/r/deepweb/comments/1jglt9f/curious/)\n - [ ] [List of sites](https://www.reddit.com/r/deepweb/comments/1jg7s11/list_of_sites/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [Orange Drop Caps, apps, Veeam, jobs, Heathrow, vpentest, Aaran Leyland, and More... - SWN #461](http://sites.libsyn.com/18678/orange-drop-caps-apps-veeam-jobs-heathrow-vpentest-aaran-leyland-and-more-swn-461)\n"}}, "archive/daily/2025/2025-02-04.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747324.5357404, "n": 43435, "h": "2624404442406741", "c": "# 每日安全资讯（2025-02-04）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-02-03 Review](http://www.sec-wiki.com/?2025-02-03)\n- Security Boulevard\n - [ ] [Orca Security Adds Additional CNAPP Deployment Options](https://securityboulevard.com/2025/02/orca-security-adds-additional-cnapp-deployment-options/)\n - [ ] [Meet Rule Architect: Your AI-Powered WAF Rule Expert | Impart Security](https://securityboulevard.com/2025/02/meet-rule-architect-your-ai-powered-waf-rule-expert-impart-security/)\n - [ ] [CISA/FDA Warn: Chinese Patient Monitors Have BAD Bugs](https://securityboulevard.com/2025/02/contec-epsimed-china-fda-cisa-richixbw/)\n - [ ] [Randall Munroe’s XKCD ‘AlphaMove’](https://securityboulevard.com/2025/02/randall-munroes-xkcd-alphamove/)\n - [ ] [HIPAA Cybersecurity Requirements and Best Practices](https://securityboulevard.com/2025/02/hipaa-cybersecurity-requirements-and-best-practices/)\n - [ ] [How to create realistic test data for PostgreSQL](https://securityboulevard.com/2025/02/how-to-create-realistic-test-data-for-postgresql/)\n - [ ] [Mockaroo and Tonic: Partners in mock data generation](https://securityboulevard.com/2025/02/mockaroo-and-tonic-partners-in-mock-data-generation/)\n - [ ] [Why I joined Tonic: A product manager’s perspective](https://securityboulevard.com/2025/02/why-i-joined-tonic-a-product-managers-perspective/)\n - [ ] [The Secret to Your Artifactory: Inside The Attacker Kill-Chain](https://securityboulevard.com/2025/02/the-secret-to-your-artifactory-inside-the-attacker-kill-chain/)\n - [ ] [DEF CON 32 – Exposing Attacks Hiding In The Sheer Noise Of False Positives](https://securityboulevard.com/2025/02/def-con-32-exposing-attacks-hiding-in-the-sheer-noise-of-false-positives/)\n- Recent Commits to cve:main\n - [ ] [Update Mon Feb 3 20:25:45 UTC 2025](https://github.com/trickest/cve/commit/547eaddf6f9cd1e8e42627d796880a8f88ae171a)\n - [ ] [Update Mon Feb 3 12:25:21 UTC 2025](https://github.com/trickest/cve/commit/c19a224cde37606b534e629bf1ee9e3a4e6f38b4)\n - [ ] [Update Mon Feb 3 04:22:25 UTC 2025](https://github.com/trickest/cve/commit/364e032b264aaf1c882aaefa99178147eb6b841a)\n- InfoSec Write-ups - Medium\n - [ ] [HTB POV: Formal Writeup](https://infosecwriteups.com/htb-pov-formal-writeup-f2a5978f3af1?source=rss----7b722bfd1b8d---4)\n - [ ] [TNSTC(Tamil Nadu State Transport Corporation) data breach — an interesting bug that allowed me to…](https://infosecwriteups.com/tnstc-tamil-nadu-state-transport-corporation-data-breach-an-interesting-bug-that-allowed-me-to-83008c4f51c1?source=rss----7b722bfd1b8d---4)\n - [ ] [Windows PrivEsc : Bypassing Windows UAC AND Windows Access Tokens](https://infosecwriteups.com/windows-privesc-bypassing-windows-uac-and-windows-access-tokens-341b824381ce?source=rss----7b722bfd1b8d---4)\n - [ ] [How to Supercharge Ethical Hacking with DeepSeek: A Step-by-Step Guide for Cybersecurity Pros](https://infosecwriteups.com/how-to-supercharge-ethical-hacking-with-deepseek-a-step-by-step-guide-for-cybersecurity-pros-28752c1ef0a9?source=rss----7b722bfd1b8d---4)\n - [ ] [The Sticker Shop TryHackMe Writeup](https://infosecwriteups.com/the-sticker-shop-tryhackme-writeup-fd43104a17a2?source=rss----7b722bfd1b8d---4)\n- Doonsec's feed\n - [ ] [06x函数50-55](https://mp.weixin.qq.com/s?__biz=MzA3NDE0NTY0OQ==&mid=2247484328&idx=1&sn=56cb7fa45a42211cef760c64219cfe6d)\n - [ ] [靶场系列之Kioptix Level 4](https://mp.weixin.qq.com/s?__biz=Mzk1NzIzNjM0OQ==&mid=2247484082&idx=1&sn=8ae9a5e59b4672dd6ca406e270e8bd72)\n - [ ] [【Win11抓不到密码?】| 内存匹配规则的添加！！](https://mp.weixin.qq.com/s?__biz=Mzk1NzM5MTI2Mg==&mid=2247484433&idx=1&sn=c880bb48a013ff14e3bab913ecbfe043)\n - [ ] [渗透测试与Linux管理系统化](https://mp.weixin.qq.com/s?__biz=Mzk1Nzc0MzY3NA==&mid=2247483802&idx=1&sn=5d2ed26dce664d4671ea49803c0b5721)\n - [ ] [openEuler 24.03 操作系统上部署 DeepSeek-R1:671B 大模型训练使用GPU显卡NVIDIA A100](https://mp.weixin.qq.com/s?__biz=Mzg2MjYxODQ4Mw==&mid=2247485001&idx=1&sn=7cafb2cadfaa1242093af5dd79f1f9b4)\n - [ ] [【burpsuite靶场-服务端4】命令注入漏洞](https://mp.weixin.qq.com/s?__biz=MzkzMDg1MzIwNA==&mid=2247487335&idx=1&sn=c230b1063e5abc07d7a340d33329a10e)\n - [ ] [一键直达，告别中转！AutoRedirector 插件让你的浏览体验飞起来！](https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486485&idx=1&sn=0708e0ba9aaae6b483cf7006497b904d)\n - [ ] [2025年网络安全态势感知的主要趋势和挑战](https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518539&idx=1&sn=a6be0023f68c6a11448c70df2384b293)\n - [ ] [世界需要一个能谋善断的AI（七）数字分身：生理永生与数字永生的思考](https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492313&idx=1&sn=c436d968a908073fb49f919afe55128d)\n - [ ] [Unity游戏开发学习笔记](https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260521&idx=1&sn=0ab4effac06bb65dab6afa3ebf32e1b7)\n - [ ] [大模型基础](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655265044&idx=1&sn=7801ee77daf09eae3fe05c448a3a2c43)\n - [ ] [日产聆风电动汽车(Leaf-EV)-2018款本地拒绝服务漏洞](https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484330&idx=1&sn=8558bf04848af41f0e0f56123fc3ae5d)\n - [ ] [列目录引起的信息泄露获取1w5赏金](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497023&idx=1&sn=f4dad5920e40978a4ba8d4c41549b151)\n - [ ] [特斯拉电动汽车越狱](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620379&idx=1&sn=0d4d48f552a8acea197682a3d291f961)\n - [ ] [智慧护航：量产落地的盖瑞特入侵检测系统，确保智能网联汽车安全](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620379&idx=2&sn=5d7fd1071b30851066c47559fe48c00f)\n - [ ] [单芯片舱驾&舱控跨域融合技术方案在线培训课](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620379&idx=3&sn=6703784580243fe5c19338db1ccf0fc1)\n - [ ] [联发科发布公告CVE-2025-20633可能导致远程代码执行](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494738&idx=1&sn=f776c6f5b2c8fbd315f6a6fbb4e83658)\n - [ ] [G.O.S.S.I.P 2025 新春总动员（1）：疯狂的PDF](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499652&idx=1&sn=589b1778aa04f72cdc07c947be4bc17c)\n - [ ] [SecWiki周刊（第570期）](https://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=2651053429&idx=1&sn=31d3160a718b707ff1494a94ccb17e05)\n - [ ] [SecWiki周刊（第569期）](https://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=2651053429&idx=2&sn=52ca024a6e40c3b8bfa8aee1ae304c03)\n - [ ] [SecWiki周刊（第568期）](https://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=2651053429&idx=3&sn=a8270fb531eb9042a816850e48c609e2)\n - [ ] [SecWiki周刊（第567期）](https://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=2651053429&idx=4&sn=1a33c07c70777c6b4ee1ff6913533e0d)\n - [ ] [大年初六 | 辞旧迎新，送穷迎福](https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247516498&idx=1&sn=e9790d235440fdc1e5d82fbb21a2ff57)\n - [ ] [小白也能懂的DeepSeek本地安装教程](https://mp.weixin.qq.com/s?__biz=MzU5NzQ3NzIwMA==&mid=2247486425&idx=1&sn=d5a313dd4ffa06ab7ccd8e37ca614892)\n - [ ] [海外虚拟信用卡之BinPay](https://mp.weixin.qq.com/s?__biz=MzkyNzYzNTQ2Nw==&mid=2247484119&idx=1&sn=ba45102f59a34f18e8ced5e0639b48b9)\n - [ ] [白嫖DeepSeek R1 -腾讯云部署将免费进行到底！](https://mp.weixin.qq.com/s?__biz=MjM5Nzk3MjMzMA==&mid=2650570216&idx=1&sn=4dded799de34c8aad693320a5562dccc)\n - [ ] [Topert4|内容计划|已有内容|10小时后删除](https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247490468&idx=1&sn=7e879727a18c30ea764c2f7f090ccfab)\n - [ ] [1月份，到访奇安信的两大车企巨头！](https://mp.weixin.qq.com/s?__biz=MzkzMzcxNTQyNw==&mid=2247485600&idx=1&sn=1080d72650a49581ed39b353de1b2693)\n - [ ] [服务崩溃，DeepSeek该给金主一个贴金的机会](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485511&idx=1&sn=4df6a88c69aee53ffdd181cc712e7f41)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485511&idx=4&sn=68b99bc3a3d9c0166c11be378b838cac)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485511&idx=5&sn=66af2d055dd3946c55837e742af38e56)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485511&idx=6&sn=881293b43a52e8b558223c554ddebcbf)\n - [ ] [秦安：伟大的战略反攻已经开始，灵动之蛇年，中国人民就靠真功夫](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476470&idx=1&sn=f6505f40fe1a4a811cd9320a2365b123)\n - [ ] [秦安：初一，美国动手了，安全和道德问题，以小人之心量君子之腹](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476470&idx=2&sn=e3248c99757c48d1753daab3678c4bb3)\n - [ ] [这么强的渗透神器，你真的舍得不试试？](https://mp.weixin.qq.com/s?__biz=Mzg5OTg1MDk0Mw==&mid=2247485506&idx=1&sn=b0b0b4fac01f448f36a415fb860eeb81)\n - [ ] [企业信息安全建设：你的数据防线真的固若金汤吗？](https://mp.weixin.qq.com/s?__biz=MzI5MjEyOTE4MA==&mid=2648520049&idx=1&sn=2ebb6422e7ffeffd0e9e501bd6ec2c7f)\n - [ ] [ISO 45001: 2018 标准详解与实施（14）7.1 资源](https://mp.weixin.qq.com/s?__biz=MzA5OTEyNzc1Nw==&mid=2247486063&idx=1&sn=377991c5d6f47b70bc76fd3db40d4292)\n - [ ] [【资料】生成式人工智能下的世界](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148842&idx=1&sn=a98ad85e918a855004f545cb00b2141b)\n - [ ] [智能网联汽车多域电子电气架构会如何发展？](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247549671&idx=1&sn=7043300bc8465aca13f85f5610eadd9f)\n - [ ] [CAN总线不加终端电阻会咋样？](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247549671&idx=2&sn=1ccdb8a902fad33f54ae970878279444)\n - [ ] [星火年鉴 | 工业互联网标识智库2024年度热文盘点，你最pick哪一篇？](https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247592465&idx=1&sn=c1802084a4d36089406dfe91c03545c7)\n - [ ] [浅析代码重定位技术](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589301&idx=1&sn=f8b5a4c4740123d4431ccb68a9063f17)\n - [ ] [实用干货！无人机安全攻防入门，速来报名](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589301&idx=2&sn=cd340085d0abd8a5fc5233d9ec93603f)\n - [ ] [实施数据加密策略：保护云中敏感数据的关键要素（一）](https://mp.weixin.qq.com/s?__biz=MzkyMzU2NjQyNA==&mid=2247483943&idx=1&sn=30651b48ba2470ae7cf394536e6f42db)\n - [ ] [【文末抽奖】奉天安全团队招人啦](https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247485016&idx=1&sn=eacd6f2faccf3347f92496544b099c41)\n - [ ] [本地部署DeepSeek R1辅助CTF解题详解](https://mp.weixin.qq.com/s?__biz=Mzg2MjgwMzIxMA==&mid=2247484868&idx=1&sn=ed0f3277300e13861180e709a4818013)\n - [ ] [【计划】2025，开工大吉及年度工作计划](https://mp.weixin.qq.com/s?__biz=MzU5MTM4MTIxMA==&mid=2247485508&idx=1&sn=21554b6361dcb2d065befb222b6da092)\n - [ ] [【培训通知】2025年第一期专业反窃密技术操作培训班开班通知](https://mp.weixin.qq.com/s?__biz=MzU5MTM4MTIxMA==&mid=2247485508&idx=2&sn=c4e543ce0de16f5562006bd36c2e639c)\n - [ ] [官方合并计划](https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247490462&idx=1&sn=470daf7ca3006edac1301cf05389d26f)\n - [ ] [EDR专题学习-对抗EDR](https://mp.weixin.qq.com/s?__biz=Mzg5MDg3OTc0OA==&mid=2247489431&idx=1&sn=d3225f3d2e727cbd4b4c992fe9f989d0)\n - [ ] [2025年，网络安全学习路线来袭，顺序千万别搞反！](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247570695&idx=1&sn=1673575e8dc90594ba01e57b3cb359af)\n - [ ] [违法获取网购订单中的个人信息，8人被判侵犯公民个人信息罪](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931485&idx=1&sn=daf542fd9764c57a700fa306a231902d)\n - [ ] [中国电信申请网元验证方法专利，保证SRv6网络安全不受影响](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931485&idx=2&sn=9867cd25ac6ce0b727806848e5b8060f)\n - [ ] [DeepSeek一键部署与DeepSeek免费14元额度羊毛福利](https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247485061&idx=1&sn=41e34f22538f3d7766dfffadea89f948)\n - [ ] [人工智能将如何改变劳动力市场：哪些职业将消失，哪些职业将继续存在](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494733&idx=1&sn=9f39bc986bcee5287ab657f30bef435c)\n - [ ] [2022-2024年间-美国对华芯片出口管制规则的梳理分析](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247506447&idx=1&sn=0a423985369639ab65ad56e3f60aef66)\n - [ ] [基于转换模型的安全属性验证](https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247493616&idx=1&sn=9211f1b45c30a302935f15077cc8b115)\n - [ ] [8000字34张图史诗级介绍同轴电缆、双绞线、光纤等线缆，超级详细！](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649464777&idx=1&sn=32b2badc3ecfeef46c9f362629a4682c)\n - [ ] [【吃瓜】《科普文章被网暴》《支持红客，打击霉离贱汉奸走狗！》DeepSeek乱象频发](https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488860&idx=1&sn=41c835917e4191a5051118f4df625334)\n - [ ] [网络钓鱼与社交工程：如何保护自己免受心理攻击——从受害者画像到防御体系构建](https://mp.weixin.qq.com/s?__biz=Mzk1NzI5MTc0Nw==&mid=2247484721&idx=1&sn=9b57ddd6ef8e9d09eb6c25c6bd0f2b22)\n - [ ] [探索 HPE Insight Remote Support 中的最新 CVE](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527501&idx=1&sn=5f839664fa63bb4e792aa22a18e78ce0)\n - [ ] [dde-api-proxy：Deepin D-Bus 代理服务中的身份验证绕过（CVE-2025-23222）](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527501&idx=2&sn=737f8a4b724e5ff7d00edcdeb03128cb)\n - [ ] [Android Web攻击表面](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527501&idx=3&sn=5f9225bd5a2a555eeb1bfa1f39dd010b)\n - [ ] [[民族之悲哀] DeepSeek 正在成为行业败类、无知黑心者的炒作敛财“傀儡”](https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506662&idx=1&sn=85cd5ef3832b2cd3e8770a6265aa290c)\n - [ ] [美国为何对 DeepSeek 如此“上心”？一场科技博弈的真相](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559440&idx=1&sn=a71dae9b931ab06febdba6081a3e1c26)\n - [ ] [美国联邦调查局“变天”？特朗普全面清洗大动作曝光](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559440&idx=2&sn=ac91eaccfce9275a6fd64aed2388e1a6)\n - [ ] [专家解读 | 推动个人信息出境个人信息保护认证制度落地 促进个人信息高效便利安全跨境流动](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=1&sn=d246a29f11e44289e30c16ad02323ea2)\n - [ ] [征订｜欢迎订阅2025年《中国信息安全》杂志](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=2&sn=4edccca64682f8f41e9b56497807eb00)\n - [ ] [专家解读 | 提升数据流通安全治理能力 促进数据流通开发利用](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=3&sn=4b74cb1e75a739f80043e4d79c6f19a5)\n - [ ] [国际 | 日本推进人工智能立法兼顾双重性](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=4&sn=f8a6890f42bfbbbee12fcb55f0fde756)\n - [ ] [评论 | 铲除“反防沉迷产业链”，撑起“数字晴空”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=5&sn=64e31032d2a327b33ad9368ee8790d3f)\n - [ ] [微软惊现「零点击」核弹级漏洞！打开邮件就中招？](https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488439&idx=1&sn=98793685608a483e27976abf658cb08f)\n - [ ] [Linux通用应急响应脚本](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489197&idx=1&sn=5884ffe11accd736ab98ef2136c649bb)\n - [ ] [前途光明](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489197&idx=2&sn=ae88a87de118a9c320d0c5b5821c056e)\n - [ ] [网安工作者被骂罕见，红客才是行业主导！](https://mp.weixin.qq.com/s?__biz=MzkyNTQ0OTYxOQ==&mid=2247484019&idx=1&sn=bcf60352216bd1de85eabb90f627c3d3)\n - [ ] [“杉菜”再见，大S离世原因](https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247543667&idx=1&sn=ae1deeaf06d309925fe3bfbadf32878d)\n - [ ] [恶意样本静态分析-上](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490311&idx=1&sn=3ddb48128acc2772763bd99ba4cf850a)\n - [ ] [APT狩猎工具](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490311&idx=2&sn=411e5b869e7b4425b9b6ce4d386e170a)\n - [ ] [网络钓鱼工具资源库](https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488641&idx=1&sn=ce3b46fb8a2c5727264f28a851167f8c)\n - [ ] [Docker 入门指南：10个核心命令助你快速上手容器化](https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485645&idx=1&sn=1bd9d8741680f01bc152d9608e3391fb)\n - [ ] [用DeepSeek学习区块链量化](https://mp.weixin.qq.com/s?__biz=MzU3NDY1NTYyOQ==&mid=2247486034&idx=1&sn=c8655d5eb94f15ce10b24ee79ebb2821)\n - [ ] [掌握艺术设计学论文文献收集全指南，让文献不再难搞。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=1&sn=ea25f2184ac90e4708490138156b2621)\n - [ ] [掌握影视摄影与制作论文文献搜集内部攻略，助你写出高分必备指南！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=2&sn=822a6781edeeaf9e98aaeb1434eff4ad)\n - [ ] [掌握硬核技巧：电子商务论文文献搜集全攻略，再也不愁找不到高质量文献了！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=3&sn=8b6a73f7d723ccca32e7506256455a9c)\n - [ ] [掌握云计算与大数据论文选题技巧，导师都说靠谱的秘诀指南！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=4&sn=efa511efbec97d70ba6bd3f53083017b)\n - [ ] [掌握这份电子商务论文初稿生成指南，一天搞定毕业论文！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=5&sn=831b7e600453447ad06a62b31b3aef2a)\n - [ ] [掌握这份诉讼法学论文文献搜集高阶攻略，提升你的学术创新力！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=6&sn=5e1ea103b527981dab1ba28838f2d973)\n - [ ] [掌握这份AI版社会保障论文写作大纲高阶脚本指南，一周完整论文不是梦！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=7&sn=cf40d9551ecccbb1c21543955cd555a9)\n - [ ] [掌握这份ChatGPT物理化学论文选题指南，让论文写作从此不愁！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=8&sn=e677fc46b82e5dd576a4dd1503d89713)\n - [ ] [谷歌称黑客正滥用Gemini AI来增强攻击能力](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313430&idx=1&sn=4afd94e32a04c49dcc25f593341c2fd5)\n - [ ] [2025年AI网络安全预测](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313430&idx=2&sn=7388f9c978f61ad866c97f57c21abe6f)\n - [ ] [Meta确认90名用户遭WhatsApp零点击间谍软件攻击](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313430&idx=3&sn=e5f4cbdc2013e8fc276d774eeeb951ae)\n - [ ] [微软披露macOS漏洞CVE-2024-44243，允许安装Rootkit](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313430&idx=4&sn=6e74cf5e7a16522cf7f639a52c3789c7)\n - [ ] [漏洞挖掘 | 基于mssql数据库的sql注入](https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547538&idx=1&sn=2de25baa764188f0bd83a351248a40c5)\n - [ ] [通过计算机视觉帮助发现隐藏的漏洞](https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615413&idx=1&sn=363d6567bfa41a8f33e272e1185da50a)\n - [ ] [AI驱动API漏洞激增1205%，企业安全面临空前挑战！](https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485686&idx=1&sn=6ad3015e97dc52bd69dc9921b81a5f9c)\n - [ ] [大算力之路，生命不选GPU](https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247492308&idx=1&sn=775c682a9974e1a355dc8b8b2a206a11)\n - [ ] [想用 DeepSeek？这里能用，扫码还送 14 元体验金](https://mp.weixin.qq.com/s?__biz=MzkyNzUzMjM1NQ==&mid=2247484777&idx=1&sn=0acdb741af24de7e3f86557afa0a53be)\n - [ ] [【2025春节】解题领红包活动排行榜（初六 2/3）](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141670&idx=1&sn=de73fb9cf91c717915c2bd5adcde0c09)\n - [ ] [Stratovirt 的 RISC-V 虚拟化支持（五）：BootLoader 和设备树](https://mp.weixin.qq.com/s?__biz=MzA5NDQzODQ3MQ==&mid=2648194570&idx=1&sn=c848bb41f340e4869973a3e8eb22c5e8)\n - [ ] [标签巨头 Avery 称网站遭黑客攻击，信用卡信息被窃](https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492132&idx=1&sn=13d6fe7fec657cd4cb7b5191b4e4ef8a)\n - [ ] [一次区块链的安全研究](https://mp.weixin.qq.com/s?__biz=MzkyNDU2MDk4NQ==&mid=2247484034&idx=1&sn=ecdb621b08c7137bfb1cb1bd900cf5f9)\n - [ ] [DeepSeek接入个人知识库，一般电脑也能飞速跑，确实可以封神了！](https://mp.weixin.qq.com/s?__biz=MzkyMzg4MTY4Ng==&mid=2247484596&idx=1&sn=5e1a1f6c02555974e75a31c95e629591)\n - [ ] [全网最全、最详细的 Linux 进程间通信方式讲解来了，你不容错过！](https://mp.weixin.qq.com/s?__biz=MzI1NzI5NDM4Mw==&mid=2247498590&idx=1&sn=3ee93d415c16a3700b965bd1c5ddbfe1)\n - [ ] [500 美元的漏洞：Censys 搜索如何引导我获得快速漏洞赏金](https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504845&idx=1&sn=8c8fa9f474d370a021e30aa8209268ac)\n - [ ] [码住！一次把CISP认证说清楚](https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247487899&idx=1&sn=f5087c557ca623669bc4a1ad49138032)\n - [ ] [一次性把中东关系讲清楚：中东地区的情报战略](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505221&idx=1&sn=b0a5ccbab53fc8198452223d8cb6eb62)\n - [ ] [特朗普“重返中亚”：经济与能源的“双重奏”](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505221&idx=2&sn=a237923be240db67501e67e018240b6e)\n - [ ] [万物随春醒 云堤护网宁](https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247532981&idx=1&sn=a02ca7b9dd52b7b11881079f1e0485aa)\n - [ ] [Active Directory Domain Services 权限提升漏洞 (CVE-2025-21293)](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487001&idx=1&sn=eaae88e6f2b15e26732ca6b90fb5ca69)\n - [ ] [Flask代码审计从思路到实战](https://mp.weixin.qq.com/s?__biz=MzkyNTUyNDMyOA==&mid=2247487699&idx=1&sn=34f12cfc82af827d58e8d758143316bf)\n - [ ] [OSCP考试必备：最全实战命令手册](https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247486694&idx=1&sn=1cdf7df2384a0e643d3f364d5e3040f1)\n - [ ] [麻省理工科技评论：2025年AI五大趋势](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247516971&idx=1&sn=65365df101260e7ccf5f42018c654110)\n - [ ] [立春｜春之启幕 万物生晖](https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247506764&idx=1&sn=ce887174eaa79679513bf66138d1fe3b)\n - [ ] [内网横向渗透之Windows连接技巧](https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037466&idx=1&sn=fd456a13dbe3d7a82884d0b43cb51f82)\n - [ ] [今日立春](https://mp.weixin.qq.com/s?__biz=Mzg3NTU3NTY0Nw==&mid=2247489552&idx=1&sn=7bf9b6c74a63b3620493157b380a8849)\n - [ ] [大年初六 银蛇报春](https://mp.weixin.qq.com/s?__biz=Mzg2MTU5ODQ2Mg==&mid=2247507178&idx=1&sn=d90f00dc663f73a9b5d1e9b926920bc3)\n - [ ] [数字取证之法律遵从性u200c](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655265046&idx=1&sn=37f22293698b7e90fd4cc49c08fbc426)\n - [ ] [网安原创文章推荐【2025/2/2】](https://mp.weixin.qq.com/s?__biz=MzAxNzg3NzMyNQ==&mid=2247489552&idx=1&sn=4cdba465482fcd99df63ffa4bf4ac236)\n - [ ] [以色列间谍无需点击即可入侵 WhatsApp](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494727&idx=1&sn=92a7f62638a9a6dc5e71a39655e2b9f1)\n - [ ] [大年初六 | 金蛇昂首，“巳”如破竹](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579301&idx=1&sn=35ed47abf0879798ddd2a03509c33f87)\n - [ ] [老板让我节后研究一下deepseek](https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247492302&idx=1&sn=bd877522ae6488d1ff49f8325ab6b720)\n - [ ] [程序员注定被淘汰](https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247492302&idx=2&sn=0144e48c3daefe11282c0145291f06d4)\n - [ ] [大年初六丨安天镇关给您拜年了](https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650209932&idx=1&sn=ffcf5ae2b2a579a036936f3d466c4a18)\n- Horizon3.ai\n - [ ] [Securing Financial Services: From Promises to Proof with NodeZero®](https://www.horizon3.ai/intelligence/blogs/securing-financial-services-from-promises-to-proof-with-nodezero/)\n- SentinelOne\n - [ ] [macOS FlexibleFerret | Further Variants of DPRK Malware Family Unearthed](https://www.sentinelone.com/blog/macos-flexibleferret-further-variants-of-dprk-malware-family-unearthed/)\n- Malwarebytes\n - [ ] [WhatsApp says Paragon is spying on specific users](https://www.malwarebytes.com/blog/news/2025/02/whatsapp-says-paragon-is-spying-on-specific-users)\n - [ ] [A week in security (January 27 – February 2)](https://www.malwarebytes.com/blog/news/2025/02/a-week-in-security-january-27-february-2-2)\n- Twitter @bytehx\n - [ ] [RT Jayesh Madnani: 🚀 Unspoken Bug Bounty Rules – From many years of failures & experience! 🕵️‍♂️ Got a similar bug across multiple assets b...](https://x.com/bytehx343/status/1886462043009769629)\n - [ ] [Re @l33tdawg @Verichains Congrats man🎉🎉🎉🎉](https://x.com/bytehx343/status/1886368068483649594)\n - [ ] [RT yso: Just uploaded my Bluetooth security testing slides! 📡 Also, Škoda disclosed a vulnerability I reported—they fixed & rewarded it fast! �...](https://x.com/bytehx343/status/1886367495373848670)\n- glzjin\n - [ ] [懒猫微服外挂ProxmoxVE启动方法说明](https://www.zhaoj.in/read-9077.html)\n- Webroot Blog\n - [ ] [MDR for MSPs: Navigating EDR compatibility](https://www.webroot.com/blog/2025/02/03/mdr-for-msps-navigating-edr-compatibility/)\n- Publications | Outflank\n - [ ] [Secure Enclaves for Offensive Operations (Part I)](https://www.outflank.nl/blog/2025/02/03/secure-enclaves-for-offensive-operations-part-i/)\n- daniel.haxx.se\n - [ ] [European Open Source Achievement Award](https://daniel.haxx.se/blog/2025/02/03/european-open-source-achievement-award/)\n- Reverse Engineering\n - [ ] [/r/ReverseEngineering's Weekly Questions Thread](https://www.reddit.com/r/ReverseEngineering/comments/1igk62y/rreverseengineerings_weekly_questions_thread/)\n - [ ] [Lifting Binaries, Part 0: Devirtualizing VMProtect and Themida: It’s Just Flattening?](https://www.reddit.com/r/ReverseEngineering/comments/1igx34h/lifting_binaries_part_0_devirtualizing_vmprotect/)\n - [ ] [Disassembling a binary: linear sweep and recursive traversal](https://www.reddit.com/r/ReverseEngineering/comments/1ih3ga3/disassembling_a_binary_linear_sweep_and_recursive/)\n - [ ] [Is there a way to reverse Agile.NET compiled library for NinjaTrader 8?](https://www.reddit.com/r/ReverseEngineering/comments/1iguky3/is_there_a_way_to_reverse_agilenet_compiled/)\n - [ ] [AMD: Microcode Signature Verification Vulnerability](https://www.reddit.com/r/ReverseEngineering/comments/1ih3ez3/amd_microcode_signature_verification_vulnerability/)\n- FreeBuf网络安全行业门户\n - [ ] [2024年768个CVE漏洞被利用，较2023年增长20%](https://www.freebuf.com/vuls/421042.html)\n - [ ] [Shiro CVE-2023-34478 路径规范化不一致](https://www.freebuf.com/vuls/421037.html)\n - [ ] [思科研究发现DeepSeek R1极易受有害提示影响](https://www.freebuf.com/articles/421045.html)\n - [ ] [俄语系邪恶黑客团伙操纵10余种高度专业化的社交媒体诈骗](https://www.freebuf.com/articles/network/421044.html)\n - [ ] [恶意软件冒充DeepSeek AI工具在PyPI上传播](https://www.freebuf.com/articles/421046.html)\n - [ ] [疯狂邪恶团伙利用StealC、AMOS和Angel Drainer恶意软件瞄准加密货币](https://www.freebuf.com/articles/network/421028.html)\n- 杨龙\n - [ ] [nginx restart failed:nginx: [alert] OPENSSL_init_ssl() failed (SSL: error:12800067:DSO support routines::could not load the shared library:filename(/snap/certbot/4325/usr/lib/x86_64-linux-gnu/ossl-modules/fips.so): /snap/certbot/4325/usr/lib/x86_64-linux-gnu/ossl-modules/fips.so: cannot open shared object file: No such file or directory error:12800067:DSO support routines::could not load the shared library error:07880025:common libcrypto routines::reason(37):name=fips error:0700006D:configuration file routines::module initialization error:module=providers, value=provider_sect retcode=-1 ) 解决办法](https://www.yanglong.pro/nginx-restart-failednginx-alert-openssl_init_ssl-failed-ssl-error12800067dso-support-routinescould-not-load-the-shared-libraryfilename-snap-certbot-4325-usr-lib-x86_64-linux-gnu-ossl-mod/)\n- Twitter @James Kettle\n - [ ] [The panel has cast their votes and I'm writing up the results now, hoping to publish tomorrow. Looks like an outstanding top ten this year, and ranks ...](https://x.com/albinowax/status/1886375935445774503)\n- 吾爱破解论坛\n - [ ] [【2025春节】解题领红包活动排行榜（初六 2/3）](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141670&idx=1&sn=de73fb9cf91c717915c2bd5adcde0c09&chksm=bd50a6728a272f64da4372a71de026e82781be975527fbb78c174055dc84299836178249ac7f&scene=58&subscene=0#rd)\n- 锦行科技\n - [ ] [初六 | 六六大顺](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493743&idx=1&sn=9735ef44726404099d144253792e54d8&chksm=979a13caa0ed9adca648632b3a4495d3f5749a8ff6f4e170b279b471ff7b6675f7382d149206&scene=58&subscene=0#rd)\n- 奇客Solidot–传递最新科技情报\n - [ ] [天文学家发现一巨型射电星系](https://www.solidot.org/story?sid=80466)\n - [ ] [过去四十年海洋表面变暖速度翻了两番](https://www.solidot.org/story?sid=80465)\n - [ ] [Ubuntu 的开发讨论平台将从 IRC 迁移到 Matrix](https://www.solidot.org/story?sid=80464)\n- 看雪学苑\n - [ ] [浅析代码重定位技术](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589301&idx=1&sn=f8b5a4c4740123d4431ccb68a9063f17&chksm=b18c28ff86fba1e99cd342a44cbdef0919f382e909a6181f50378ef9f83b9e5a90ed2a4eba53&scene=58&subscene=0#rd)\n - [ ] [实用干货！无人机安全攻防入门，速来报名](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589301&idx=2&sn=cd340085d0abd8a5fc5233d9ec93603f&chksm=b18c28ff86fba1e99daf5639ca2271fc027a1fdf2e613c62c6759c1135458a9f9e5e21bb30f4&scene=58&subscene=0#rd)\n- 安全分析与研究\n - [ ] [恶意样本静态分析-上](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490311&idx=1&sn=3ddb48128acc2772763bd99ba4cf850a&chksm=902fb42fa7583d39df80656526a79ff7e90160bdaf250c3ef5570920f6290bc7d172804eeeec&scene=58&subscene=0#rd)\n - [ ] [APT狩猎工具](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490311&idx=2&sn=411e5b869e7b4425b9b6ce4d386e170a&chksm=902fb42fa7583d3998df7212df242d3ded6c932acd3b4b8a1fc90df1dcdea22ff764a30d9c03&scene=58&subscene=0#rd)\n- 安全研究GoSSIP\n - [ ] [G.O.S.S.I.P 2025 新春总动员（1）：疯狂的PDF](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499652&idx=1&sn=589b1778aa04f72cdc07c947be4bc17c&chksm=c063d15df714584b9680831e04f60a8d775211b89366d6125e8a337aa07a891760a5f272c4ba&scene=58&subscene=0#rd)\n- 丁爸 情报分析师的工具箱\n - [ ] [【资料】生成式人工智能下的世界](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148842&idx=1&sn=a98ad85e918a855004f545cb00b2141b&chksm=f1af2510c6d8ac063ffdd7fa3fe1058b652280fbd2ae894b93c5781e7646424e70472f15f631&scene=58&subscene=0#rd)\n- Black Hills Information Security\n - [ ] [Introducing ORBIT, Scan Targets and Clients at Scale](https://www.blackhillsinfosec.com/introducing-orbit-scan-targets-and-clients-at-scale/)\n- 中国信息安全\n - [ ] [专家解读 | 推动个人信息出境个人信息保护认证制度落地 促进个人信息高效便利安全跨境流动](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=1&sn=d246a29f11e44289e30c16ad02323ea2&chksm=8b580158bc2f884ee870cf909293f550b4c6d68f752798b4305df99158a937ae96c708b46913&scene=58&subscene=0#rd)\n - [ ] [征订｜欢迎订阅2025年《中国信息安全》杂志](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=2&sn=4edccca64682f8f41e9b56497807eb00&chksm=8b580158bc2f884e1eadb1ba8edd1fc7ee1b96d216203155cb5d91797f95b1378359e3428734&scene=58&subscene=0#rd)\n - [ ] [专家解读 | 提升数据流通安全治理能力 促进数据流通开发利用](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=3&sn=4b74cb1e75a739f80043e4d79c6f19a5&chksm=8b580158bc2f884ec910feed597fb437cb51a6951c0f1ae66fb67ec4ab7d0b6a18b58f8fdeb4&scene=58&subscene=0#rd)\n - [ ] [国际 | 日本推进人工智能立法兼顾双重性](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=4&sn=f8a6890f42bfbbbee12fcb55f0fde756&chksm=8b580158bc2f884ee7d8be0d3b95af42bf87dc525ebe931098d6678ae4a3721ef29ebeda5c6c&scene=58&subscene=0#rd)\n - [ ] [评论 | 铲除“反防沉迷产业链”，撑起“数字晴空”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=5&sn=64e31032d2a327b33ad9368ee8790d3f&chksm=8b580158bc2f884ebdeeb7ed2b4c3494060fcc77a43367fd6ea18e1cc4f062d3772f1dd9519e&scene=58&subscene=0#rd)\n- 技可达工作室\n - [ ] [用DeepSeek学习区块链量化](https://mp.weixin.qq.com/s?__biz=MzU3NDY1NTYyOQ==&mid=2247486034&idx=1&sn=c8655d5eb94f15ce10b24ee79ebb2821&chksm=fd2e57b0ca59dea622a62f1323974973b15d0a21a3b284bbaa3832d5fe729c6a28a0bc1f8571&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [美国为何对 DeepSeek 如此“上心”？一场科技博弈的真相](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559440&idx=1&sn=a71dae9b931ab06febdba6081a3e1c26&chksm=87117d9bb066f48de68a68083afd89c401fc25c0148c8c7d276322a69401f9f0519b30a3fd15&scene=58&subscene=0#rd)\n - [ ] [美国联邦调查局“变天”？特朗普全面清洗大动作曝光](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559440&idx=2&sn=ac91eaccfce9275a6fd64aed2388e1a6&chksm=87117d9bb066f48d6b4f6c684a3bf0af5da9b279e4674d5c1dc38c70d86f10fae55b46bf64a4&scene=58&subscene=0#rd)\n- dotNet安全矩阵\n - [ ] [限时福利 | 2024 年度隧道代理、数据外发、痕迹清理阶段文章和工具汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498677&idx=1&sn=8a4dcac147d84f3f1bd3ccb37a8d5e9e&chksm=fa595558cd2edc4e632bbfa5ccf31a9f66ee0d13161c10d466ac3487177f072458ac51f42af0&scene=58&subscene=0#rd)\n - [ ] [总结 | 2024 年度内网实战攻防电子报刊 34 篇文章内容汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498677&idx=2&sn=b973bed512a412529ca496db03a70cb7&chksm=fa595558cd2edc4e0635075a22a66da8311fced2fb3f09b46376c516d06ca1bdf5713c5374f3&scene=58&subscene=0#rd)\n - [ ] [2024 年度本地权限操作阶段文章和工具汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498677&idx=3&sn=7bf0c0bc3fdbee0fcbac31d78562ff0f&chksm=fa595558cd2edc4ee958c938fecfe4b37a180940e3b19ba4c06ca3aac6292817262680e954c3&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [为什么说大模型，补上了搜索的最后一块短板](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073232&idx=1&sn=2e8dd2550e1834a9affa554d120ca22e&chksm=7e57d2e649205bf04b6221d8162c87808b7db4914fb54ed96ff7894c4dbdf9ae2fc3b60d5446&scene=58&subscene=0#rd)\n - [ ] [微信视频美颜「仅自己可见」，官方：都能看见；《哪吒 2》破30亿冲击票房冠军；水上机器人救回 3 位溺水者 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073231&idx=1&sn=075c62ad2e8d854da64c1ed036e2bb36&chksm=7e57d2f949205befef103e65c9db8965a3a3a773976308faabe56e0234093ebad38383430fe8&scene=58&subscene=0#rd)\n- 360数字安全\n - [ ] [大年初六 | 金蛇昂首，“巳”如破竹](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579301&idx=1&sn=35ed47abf0879798ddd2a03509c33f87&chksm=9f8d26ada8faafbbbb8a81d52e8929c1dfdcf019590ce3e3b1fffe2c997372f76abc89f2a72f&scene=58&subscene=0#rd)\n- 信息安全国家工程研究中心\n - [ ] [【二十四节气】立春 | 冬去春来万物生](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498793&idx=1&sn=441c9d8c6db5d81afa624f8430127389&chksm=feb67d3ac9c1f42c15e947ca936857e5d5c64261d37496ee03b940a94c66338e2c99840b5e5d&scene=58&subscene=0#rd)\n- Securityinfo.it\n - [ ] [Meta smantella una campagna di spionaggio su WhatsApp](https://www.securityinfo.it/2025/02/03/meta-smantella-una-campagna-di-spionaggio-su-whatsapp/?utm_source=rss&utm_medium=rss&utm_campaign=meta-smantella-una-campagna-di-spionaggio-su-whatsapp)\n - [ ] [CERT-AGID 25 – 31 gennaio: attacchi contro funzionari governativi e rappresentanti di ambasciate](https://www.securityinfo.it/2025/02/03/cert-agid-25-31-gennaio-attacchi-funzionari-governativi-rappresentanti-ambasciate/?utm_source=rss&utm_medium=rss&utm_campaign=cert-agid-25-31-gennaio-attacchi-funzionari-governativi-rappresentanti-ambasciate)\n- ICT Security Magazine\n - [ ] [E-Identity ed eIDAS 2.0: l’evoluzione dell’identità digitale europea](https://www.ictsecuritymagazine.com/notizie/e-identity-e-eidas-2-0/)\n- Have I Been Pwned latest breaches\n - [ ] [1win - 96,166,543 breached accounts](https://haveibeenpwned.com/PwnedWebsites#1win)\n - [ ] [DragonNest - 511,290 breached accounts](https://haveibeenpwned.com/PwnedWebsites#DragonNest)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Crypto Wallet Scam, (Mon, Feb 3rd)](https://isc.sans.edu/diary/rss/31646)\n - [ ] [ISC Stormcast For Monday, February 3rd, 2025 https://isc.sans.edu/podcastdetail/9306, (Mon, Feb 3rd)](https://isc.sans.edu/diary/rss/31644)\n- Schneier on Security\n - [ ] [Journalists and Civil Society Members Using WhatsApp Targeted by Paragon Spyware](https://www.schneier.com/blog/archives/2025/02/journalists-and-civil-society-members-using-whatsapp-targeted-by-paragon-spyware.html)\n- Krypt3ia\n - [ ] [Corporate Panopticon: How Big Tech Became the New Surveillance State](https://krypt3ia.wordpress.com/2025/02/03/corporate-panopticon-how-big-tech-became-the-new-surveillance-state/)\n - [ ] [Modern Moscow Rules: Counter-Surveillance in the Digital & Physical World](https://krypt3ia.wordpress.com/2025/02/03/modern-moscow-rules-counter-surveillance-in-the-digital-physical-world/)\n - [ ] [Krypt3ia Daily Cyber Threat Intelligence (CTI) Digest](https://krypt3ia.wordpress.com/2025/02/03/krypt3ia-daily-cyber-threat-intelligence-cti-digest-8/)\n- Over Security - Cybersecurity news aggregator\n - [ ] [‘Yes, this is real’: hackers targeting high-profile X accounts blur fact and fiction](https://therecord.media/hackers-x-accounts-security-crypto)\n - [ ] [Amazon Redshift gets new default settings to prevent data breaches](https://www.bleepingcomputer.com/news/security/amazon-redshift-gets-new-default-settings-to-prevent-data-breaches/)\n - [ ] [Woman nabbed by Thai police on alleged link to $182 million romance scam](https://therecord.media/arrest-thai-police-woman-romance-scam)\n - [ ] [Australia sanctions ‘Terrorgram’ white supremacist online group](https://therecord.media/australia-sanctions-terrorgram-online-hate-group)\n - [ ] [Canadian charged in two crypto platform thefts totaling $65 million](https://therecord.media/indictment-canadian-two-cryptocurrency-platform-hacks)\n - [ ] [Google fixes Android kernel zero-day exploited in attacks](https://www.bleepingcomputer.com/news/security/google-fixes-android-kernel-zero-day-exploited-in-attacks/)\n - [ ] [Journalist targeted on WhatsApp by Paragon spyware: “I feel violated”](https://techcrunch.com/2025/02/03/journalist-targeted-on-whatsapp-by-paragon-spyware-i-feel-violated/)\n - [ ] [Canadian charged with stealing $65 million using DeFI crypto exploits](https://www.bleepingcomputer.com/news/security/canadian-charged-with-stealing-65-million-using-defi-crypto-exploits/)\n - [ ] [Casio UK online store hacked to steal customer credit cards](https://www.bleepingcomputer.com/news/security/casio-uk-online-store-hacked-to-steal-customer-credit-cards/)\n - [ ] [Mississippi electric utility warns 20,000 residents of data breach](https://therecord.media/mississippii-electric-utility-residents-breach)\n - [ ] [1win - 96,166,543 breached accounts](https://haveibeenpwned.com/PwnedWebsites#1win)\n - [ ] [Kazakhstan to audit foreign ministry after suspected Russia-linked cyberattack](https://therecord.media/kazakhstan-foreign-ministry-cyberattack-russia)\n - [ ] [Microsoft kills off Defender 'Privacy Protection' VPN feature](https://www.bleepingcomputer.com/news/microsoft/microsoft-kills-off-defender-privacy-protection-vpn-feature/)\n - [ ] [DeepSeek AI tools impersonated by infostealer malware on PyPI](https://www.bleepingcomputer.com/news/security/deepseek-ai-tools-impersonated-by-infostealer-malware-on-pypi/)\n - [ ] [Telemarketing e trattamento illecito dei dati: la sanzione privacy a E.On sia monito per tutti](https://www.cybersecurity360.it/news/sanzione-eon-garante-privacy/)\n - [ ] [Japanese sportswear company Mizuno confirms data breach after 2024 ransomware claims](https://therecord.media/mizuno-data-breach-notification)\n - [ ] [AI Act, scattano i primi divieti: chi rischia le sanzioni e le prossime tappe](https://www.cybersecurity360.it/news/ai-act-scattano-i-primi-divieti-chi-rischia-le-sanzioni-e-le-prossime-tappe/)\n - [ ] [Analysis of an advanced malicious Chrome extension](https://palant.info/2025/02/03/analysis-of-an-advanced-malicious-chrome-extension/)\n - [ ] [Sweden releases suspected ship, says cable break ‘clearly’ not sabotage](https://therecord.media/sweden-releases-ship-suspected-cable-sabotage)\n - [ ] [Cyble Sensors Detect Attacks on Apache OFBiz, Palo Alto Networks](https://cyble.com/blog/cyble-sensors-detect-attacks-on-palo-alto-networks/)\n - [ ] [Vidar muta ancora: payload variabile e offuscamento più raffinato per questa nuova ondata](https://cert-agid.gov.it/news/vidar-muta-ancora-payload-variabile-e-offuscamento-piu-raffinato-per-questa-nuova-ondata/)\n - [ ] [Russian hackers suspected of compromising British PM’s personal email account](https://therecord.media/keir-starmer-email-hack-russia-suspected)\n - [ ] [Apple Issues Security Updates for iOS, macOS, watchOS, and More—Patch Now!](https://cyble.com/blog/apple-fixes-cve-2025-24085-security-update/)\n - [ ] [Trump elimina i vincoli all’IA: i rischi cyber e privacy e le questioni etiche](https://www.cybersecurity360.it/cultura-cyber/trump-elimina-i-vincoli-allia-i-rischi-cyber-e-privacy-e-le-questioni-etiche/)\n - [ ] [Meta smantella una campagna di spionaggio su WhatsApp](https://www.securityinfo.it/2025/02/03/meta-smantella-una-campagna-di-spionaggio-su-whatsapp/)\n - [ ] [PyPI adds project archiving system to stop malicious updates](https://www.bleepingcomputer.com/news/security/pypi-adds-project-archiving-system-to-stop-malicious-updates/)\n - [ ] [Vulnerabilità in Cisco Webex Chat, a rischio dati aziendali riservati: come mitigarla](https://www.cybersecurity360.it/news/vulnerabilita-in-cisco-webex-chat-a-rischio-dati-aziendali-riservati-come-mitigarla/)\n - [ ] [CERT-AGID 25 – 31 gennaio: attacchi contro funzionari governativi e rappresentanti di ambasciate](https://www.securityinfo.it/2025/02/03/cert-agid-25-31-gennaio-attacchi-funzionari-governativi-rappresentanti-ambasciate/)\n - [ ] [DragonNest - 511,290 breached accounts](https://haveibeenpwned.com/PwnedWebsites#DragonNest)\n- Posts By SpecterOps Team Members - Medium\n - [ ] [Further Adventures With CMPivot — Client Coercion](https://posts.specterops.io/further-adventures-with-cmpivot-client-coercion-38b878b740ac?source=rss----f05f8696e3cc---4)\n- TG Soft Software House - News\n - [ ] [Phishing: i tentativi di furto credenziali e/o dati maggiormente diffusi nel mese di FEBBRAIO 2025...](http://www.tgsoft.it/italy/news_archivio.asp?id=1609)\n- 迪哥讲事\n - [ ] [列目录引起的信息泄露获取1w5赏金](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497023&idx=1&sn=f4dad5920e40978a4ba8d4c41549b151&chksm=e8a5ff5cdfd2764a24279a9dc8a829590dbe024450bedf43308c4ac21ef5ed933c146156054e&scene=58&subscene=0#rd)\n- Security Affairs\n - [ ] [Web Skimmer found on at least 17 websites, including Casio UK](https://securityaffairs.com/173797/malware/web-skimmer-casio-uks-site.html)\n - [ ] [Crazy Evil gang runs over 10 highly specialized social media scams](https://securityaffairs.com/173784/cyber-crime/crazy-evil-runs-10-social-media-scams.html)\n - [ ] [Elon Musk ’s DOGE team granted ‘full access’ to sensitive Treasury systems. What are the risks?](https://securityaffairs.com/173776/security/elon-musk-s-doge-granted-full-access-to-sensitive-treasury-systems.html)\n - [ ] [Texas is the first state to ban DeepSeek on government devices](https://securityaffairs.com/173764/laws-and-regulations/texas-bans-deepseek-and-rednote-govt-devices.html)\n - [ ] [Law enforcement seized the domains of HeartSender cybercrime marketplaces](https://securityaffairs.com/173750/cyber-crime/heartsender-cybercrime-marketplaces-seized.html)\n- Technical Information Security Content & Discussion\n - [ ] [How Attackers Can Bypass OPA Gatekeeper in Kubernetes Due to Rego Flaws](https://www.reddit.com/r/netsec/comments/1igvgbh/how_attackers_can_bypass_opa_gatekeeper_in/)\n- Computer Forensics\n - [ ] [Sigma Rule Repo](https://www.reddit.com/r/computerforensics/comments/1igy288/sigma_rule_repo/)\n- Your Open Hacker Community\n - [ ] [How do you know what xss payload to use](https://www.reddit.com/r/HowToHack/comments/1igybrw/how_do_you_know_what_xss_payload_to_use/)\n - [ ] [What is the best wordlist?](https://www.reddit.com/r/HowToHack/comments/1ih2ewh/what_is_the_best_wordlist/)\n - [ ] [Game Save Hack](https://www.reddit.com/r/HowToHack/comments/1ih2139/game_save_hack/)\n - [ ] [Need Help Setting Up a Proxy Server for HTTP Custom with Custom Payload on OMV (Debian)](https://www.reddit.com/r/HowToHack/comments/1igprcu/need_help_setting_up_a_proxy_server_for_http/)\n - [ ] [Hacking an android device.](https://www.reddit.com/r/HowToHack/comments/1igtb54/hacking_an_android_device/)\n - [ ] [SunNxt movies download](https://www.reddit.com/r/HowToHack/comments/1igmnwu/sunnxt_movies_download/)\n - [ ] [Hey new guy, I have a question Does anyone have anything that is in url form that i can send my friends that will crash a chromebook.](https://www.reddit.com/r/HowToHack/comments/1igz5tg/hey_new_guy_i_have_a_question_does_anyone_have/)\n - [ ] [Tizen os](https://www.reddit.com/r/HowToHack/comments/1igjoy4/tizen_os/)\n - [ ] [how to find a password](https://www.reddit.com/r/HowToHack/comments/1igjfkf/how_to_find_a_password/)\n- The Hacker News\n - [ ] [768 CVEs Exploited in 2024, Reflecting a 20% Increase from 639 in 2023](https://thehackernews.com/2025/02/768-cves-exploited-in-2024-reflecting.html)\n - [ ] [PyPI Introduces Archival Status to Alert Users About Unmaintained Python Packages](https://thehackernews.com/2025/02/pypi-introduces-archival-status-to.html)\n - [ ] [⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 February]](https://thehackernews.com/2025/02/thn-weekly-recap-top-cybersecurity.html)\n - [ ] [Coyote Malware Expands Reach: Now Targets 1,030 Sites and 73 Financial Institutions](https://thehackernews.com/2025/02/coyote-malware-expands-reach-now.html)\n - [ ] [What Is Attack Surface Management?](https://thehackernews.com/2025/02/what-is-attack-surface-management.html)\n - [ ] [Crazy Evil Gang Targets Crypto with StealC, AMOS, and Angel Drainer Malware](https://thehackernews.com/2025/02/crazy-evil-gang-targets-crypto-with.html)\n- Deeplinks\n - [ ] [Open Licensing Promotes Culture and Learning. That's Why EFF Is Upgrading its Creative Commons Licenses.](https://www.eff.org/deeplinks/2025/02/open-licensing-promotes-culture-and-learning-thats-why-eff-upgrading-its-creative)\n- Home\n - [ ] [Exploit Development: Investigating Kernel Mode Shadow Stacks on Windows](https://connormcgarr.github.io/km-shadow-stacks/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [The Growth of Women in Cybersecurity Has Slowed - Why, and What Can We Do About It? - Lynn Dohm - ESW #392](http://sites.libsyn.com/18678/the-growth-of-women-in-cybersecurity-has-slowed-why-and-what-can-we-do-about-it-lynn-dohm-esw-392)\n"}, "4bd192058410de3bc7bf1f93b96e47f696cea927": {"t": 1785772259.2330956, "n": 43435, "h": "2624404442406741", "c": "# 每日安全资讯（2025-02-04）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-02-03 Review](http://www.sec-wiki.com/?2025-02-03)\n- Security Boulevard\n - [ ] [Orca Security Adds Additional CNAPP Deployment Options](https://securityboulevard.com/2025/02/orca-security-adds-additional-cnapp-deployment-options/)\n - [ ] [Meet Rule Architect: Your AI-Powered WAF Rule Expert | Impart Security](https://securityboulevard.com/2025/02/meet-rule-architect-your-ai-powered-waf-rule-expert-impart-security/)\n - [ ] [CISA/FDA Warn: Chinese Patient Monitors Have BAD Bugs](https://securityboulevard.com/2025/02/contec-epsimed-china-fda-cisa-richixbw/)\n - [ ] [Randall Munroe’s XKCD ‘AlphaMove’](https://securityboulevard.com/2025/02/randall-munroes-xkcd-alphamove/)\n - [ ] [HIPAA Cybersecurity Requirements and Best Practices](https://securityboulevard.com/2025/02/hipaa-cybersecurity-requirements-and-best-practices/)\n - [ ] [How to create realistic test data for PostgreSQL](https://securityboulevard.com/2025/02/how-to-create-realistic-test-data-for-postgresql/)\n - [ ] [Mockaroo and Tonic: Partners in mock data generation](https://securityboulevard.com/2025/02/mockaroo-and-tonic-partners-in-mock-data-generation/)\n - [ ] [Why I joined Tonic: A product manager’s perspective](https://securityboulevard.com/2025/02/why-i-joined-tonic-a-product-managers-perspective/)\n - [ ] [The Secret to Your Artifactory: Inside The Attacker Kill-Chain](https://securityboulevard.com/2025/02/the-secret-to-your-artifactory-inside-the-attacker-kill-chain/)\n - [ ] [DEF CON 32 – Exposing Attacks Hiding In The Sheer Noise Of False Positives](https://securityboulevard.com/2025/02/def-con-32-exposing-attacks-hiding-in-the-sheer-noise-of-false-positives/)\n- Recent Commits to cve:main\n - [ ] [Update Mon Feb 3 20:25:45 UTC 2025](https://github.com/trickest/cve/commit/547eaddf6f9cd1e8e42627d796880a8f88ae171a)\n - [ ] [Update Mon Feb 3 12:25:21 UTC 2025](https://github.com/trickest/cve/commit/c19a224cde37606b534e629bf1ee9e3a4e6f38b4)\n - [ ] [Update Mon Feb 3 04:22:25 UTC 2025](https://github.com/trickest/cve/commit/364e032b264aaf1c882aaefa99178147eb6b841a)\n- InfoSec Write-ups - Medium\n - [ ] [HTB POV: Formal Writeup](https://infosecwriteups.com/htb-pov-formal-writeup-f2a5978f3af1?source=rss----7b722bfd1b8d---4)\n - [ ] [TNSTC(Tamil Nadu State Transport Corporation) data breach — an interesting bug that allowed me to…](https://infosecwriteups.com/tnstc-tamil-nadu-state-transport-corporation-data-breach-an-interesting-bug-that-allowed-me-to-83008c4f51c1?source=rss----7b722bfd1b8d---4)\n - [ ] [Windows PrivEsc : Bypassing Windows UAC AND Windows Access Tokens](https://infosecwriteups.com/windows-privesc-bypassing-windows-uac-and-windows-access-tokens-341b824381ce?source=rss----7b722bfd1b8d---4)\n - [ ] [How to Supercharge Ethical Hacking with DeepSeek: A Step-by-Step Guide for Cybersecurity Pros](https://infosecwriteups.com/how-to-supercharge-ethical-hacking-with-deepseek-a-step-by-step-guide-for-cybersecurity-pros-28752c1ef0a9?source=rss----7b722bfd1b8d---4)\n - [ ] [The Sticker Shop TryHackMe Writeup](https://infosecwriteups.com/the-sticker-shop-tryhackme-writeup-fd43104a17a2?source=rss----7b722bfd1b8d---4)\n- Doonsec's feed\n - [ ] [06x函数50-55](https://mp.weixin.qq.com/s?__biz=MzA3NDE0NTY0OQ==&mid=2247484328&idx=1&sn=56cb7fa45a42211cef760c64219cfe6d)\n - [ ] [靶场系列之Kioptix Level 4](https://mp.weixin.qq.com/s?__biz=Mzk1NzIzNjM0OQ==&mid=2247484082&idx=1&sn=8ae9a5e59b4672dd6ca406e270e8bd72)\n - [ ] [【Win11抓不到密码?】| 内存匹配规则的添加！！](https://mp.weixin.qq.com/s?__biz=Mzk1NzM5MTI2Mg==&mid=2247484433&idx=1&sn=c880bb48a013ff14e3bab913ecbfe043)\n - [ ] [渗透测试与Linux管理系统化](https://mp.weixin.qq.com/s?__biz=Mzk1Nzc0MzY3NA==&mid=2247483802&idx=1&sn=5d2ed26dce664d4671ea49803c0b5721)\n - [ ] [openEuler 24.03 操作系统上部署 DeepSeek-R1:671B 大模型训练使用GPU显卡NVIDIA A100](https://mp.weixin.qq.com/s?__biz=Mzg2MjYxODQ4Mw==&mid=2247485001&idx=1&sn=7cafb2cadfaa1242093af5dd79f1f9b4)\n - [ ] [【burpsuite靶场-服务端4】命令注入漏洞](https://mp.weixin.qq.com/s?__biz=MzkzMDg1MzIwNA==&mid=2247487335&idx=1&sn=c230b1063e5abc07d7a340d33329a10e)\n - [ ] [一键直达，告别中转！AutoRedirector 插件让你的浏览体验飞起来！](https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486485&idx=1&sn=0708e0ba9aaae6b483cf7006497b904d)\n - [ ] [2025年网络安全态势感知的主要趋势和挑战](https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518539&idx=1&sn=a6be0023f68c6a11448c70df2384b293)\n - [ ] [世界需要一个能谋善断的AI（七）数字分身：生理永生与数字永生的思考](https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492313&idx=1&sn=c436d968a908073fb49f919afe55128d)\n - [ ] [Unity游戏开发学习笔记](https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260521&idx=1&sn=0ab4effac06bb65dab6afa3ebf32e1b7)\n - [ ] [大模型基础](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655265044&idx=1&sn=7801ee77daf09eae3fe05c448a3a2c43)\n - [ ] [日产聆风电动汽车(Leaf-EV)-2018款本地拒绝服务漏洞](https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484330&idx=1&sn=8558bf04848af41f0e0f56123fc3ae5d)\n - [ ] [列目录引起的信息泄露获取1w5赏金](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497023&idx=1&sn=f4dad5920e40978a4ba8d4c41549b151)\n - [ ] [特斯拉电动汽车越狱](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620379&idx=1&sn=0d4d48f552a8acea197682a3d291f961)\n - [ ] [智慧护航：量产落地的盖瑞特入侵检测系统，确保智能网联汽车安全](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620379&idx=2&sn=5d7fd1071b30851066c47559fe48c00f)\n - [ ] [单芯片舱驾&舱控跨域融合技术方案在线培训课](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620379&idx=3&sn=6703784580243fe5c19338db1ccf0fc1)\n - [ ] [联发科发布公告CVE-2025-20633可能导致远程代码执行](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494738&idx=1&sn=f776c6f5b2c8fbd315f6a6fbb4e83658)\n - [ ] [G.O.S.S.I.P 2025 新春总动员（1）：疯狂的PDF](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499652&idx=1&sn=589b1778aa04f72cdc07c947be4bc17c)\n - [ ] [SecWiki周刊（第570期）](https://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=2651053429&idx=1&sn=31d3160a718b707ff1494a94ccb17e05)\n - [ ] [SecWiki周刊（第569期）](https://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=2651053429&idx=2&sn=52ca024a6e40c3b8bfa8aee1ae304c03)\n - [ ] [SecWiki周刊（第568期）](https://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=2651053429&idx=3&sn=a8270fb531eb9042a816850e48c609e2)\n - [ ] [SecWiki周刊（第567期）](https://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=2651053429&idx=4&sn=1a33c07c70777c6b4ee1ff6913533e0d)\n - [ ] [大年初六 | 辞旧迎新，送穷迎福](https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247516498&idx=1&sn=e9790d235440fdc1e5d82fbb21a2ff57)\n - [ ] [小白也能懂的DeepSeek本地安装教程](https://mp.weixin.qq.com/s?__biz=MzU5NzQ3NzIwMA==&mid=2247486425&idx=1&sn=d5a313dd4ffa06ab7ccd8e37ca614892)\n - [ ] [海外虚拟信用卡之BinPay](https://mp.weixin.qq.com/s?__biz=MzkyNzYzNTQ2Nw==&mid=2247484119&idx=1&sn=ba45102f59a34f18e8ced5e0639b48b9)\n - [ ] [白嫖DeepSeek R1 -腾讯云部署将免费进行到底！](https://mp.weixin.qq.com/s?__biz=MjM5Nzk3MjMzMA==&mid=2650570216&idx=1&sn=4dded799de34c8aad693320a5562dccc)\n - [ ] [Topert4|内容计划|已有内容|10小时后删除](https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247490468&idx=1&sn=7e879727a18c30ea764c2f7f090ccfab)\n - [ ] [1月份，到访奇安信的两大车企巨头！](https://mp.weixin.qq.com/s?__biz=MzkzMzcxNTQyNw==&mid=2247485600&idx=1&sn=1080d72650a49581ed39b353de1b2693)\n - [ ] [服务崩溃，DeepSeek该给金主一个贴金的机会](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485511&idx=1&sn=4df6a88c69aee53ffdd181cc712e7f41)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485511&idx=4&sn=68b99bc3a3d9c0166c11be378b838cac)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485511&idx=5&sn=66af2d055dd3946c55837e742af38e56)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485511&idx=6&sn=881293b43a52e8b558223c554ddebcbf)\n - [ ] [秦安：伟大的战略反攻已经开始，灵动之蛇年，中国人民就靠真功夫](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476470&idx=1&sn=f6505f40fe1a4a811cd9320a2365b123)\n - [ ] [秦安：初一，美国动手了，安全和道德问题，以小人之心量君子之腹](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476470&idx=2&sn=e3248c99757c48d1753daab3678c4bb3)\n - [ ] [这么强的渗透神器，你真的舍得不试试？](https://mp.weixin.qq.com/s?__biz=Mzg5OTg1MDk0Mw==&mid=2247485506&idx=1&sn=b0b0b4fac01f448f36a415fb860eeb81)\n - [ ] [企业信息安全建设：你的数据防线真的固若金汤吗？](https://mp.weixin.qq.com/s?__biz=MzI5MjEyOTE4MA==&mid=2648520049&idx=1&sn=2ebb6422e7ffeffd0e9e501bd6ec2c7f)\n - [ ] [ISO 45001: 2018 标准详解与实施（14）7.1 资源](https://mp.weixin.qq.com/s?__biz=MzA5OTEyNzc1Nw==&mid=2247486063&idx=1&sn=377991c5d6f47b70bc76fd3db40d4292)\n - [ ] [【资料】生成式人工智能下的世界](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148842&idx=1&sn=a98ad85e918a855004f545cb00b2141b)\n - [ ] [智能网联汽车多域电子电气架构会如何发展？](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247549671&idx=1&sn=7043300bc8465aca13f85f5610eadd9f)\n - [ ] [CAN总线不加终端电阻会咋样？](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247549671&idx=2&sn=1ccdb8a902fad33f54ae970878279444)\n - [ ] [星火年鉴 | 工业互联网标识智库2024年度热文盘点，你最pick哪一篇？](https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247592465&idx=1&sn=c1802084a4d36089406dfe91c03545c7)\n - [ ] [浅析代码重定位技术](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589301&idx=1&sn=f8b5a4c4740123d4431ccb68a9063f17)\n - [ ] [实用干货！无人机安全攻防入门，速来报名](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589301&idx=2&sn=cd340085d0abd8a5fc5233d9ec93603f)\n - [ ] [实施数据加密策略：保护云中敏感数据的关键要素（一）](https://mp.weixin.qq.com/s?__biz=MzkyMzU2NjQyNA==&mid=2247483943&idx=1&sn=30651b48ba2470ae7cf394536e6f42db)\n - [ ] [【文末抽奖】奉天安全团队招人啦](https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247485016&idx=1&sn=eacd6f2faccf3347f92496544b099c41)\n - [ ] [本地部署DeepSeek R1辅助CTF解题详解](https://mp.weixin.qq.com/s?__biz=Mzg2MjgwMzIxMA==&mid=2247484868&idx=1&sn=ed0f3277300e13861180e709a4818013)\n - [ ] [【计划】2025，开工大吉及年度工作计划](https://mp.weixin.qq.com/s?__biz=MzU5MTM4MTIxMA==&mid=2247485508&idx=1&sn=21554b6361dcb2d065befb222b6da092)\n - [ ] [【培训通知】2025年第一期专业反窃密技术操作培训班开班通知](https://mp.weixin.qq.com/s?__biz=MzU5MTM4MTIxMA==&mid=2247485508&idx=2&sn=c4e543ce0de16f5562006bd36c2e639c)\n - [ ] [官方合并计划](https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247490462&idx=1&sn=470daf7ca3006edac1301cf05389d26f)\n - [ ] [EDR专题学习-对抗EDR](https://mp.weixin.qq.com/s?__biz=Mzg5MDg3OTc0OA==&mid=2247489431&idx=1&sn=d3225f3d2e727cbd4b4c992fe9f989d0)\n - [ ] [2025年，网络安全学习路线来袭，顺序千万别搞反！](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247570695&idx=1&sn=1673575e8dc90594ba01e57b3cb359af)\n - [ ] [违法获取网购订单中的个人信息，8人被判侵犯公民个人信息罪](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931485&idx=1&sn=daf542fd9764c57a700fa306a231902d)\n - [ ] [中国电信申请网元验证方法专利，保证SRv6网络安全不受影响](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931485&idx=2&sn=9867cd25ac6ce0b727806848e5b8060f)\n - [ ] [DeepSeek一键部署与DeepSeek免费14元额度羊毛福利](https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247485061&idx=1&sn=41e34f22538f3d7766dfffadea89f948)\n - [ ] [人工智能将如何改变劳动力市场：哪些职业将消失，哪些职业将继续存在](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494733&idx=1&sn=9f39bc986bcee5287ab657f30bef435c)\n - [ ] [2022-2024年间-美国对华芯片出口管制规则的梳理分析](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247506447&idx=1&sn=0a423985369639ab65ad56e3f60aef66)\n - [ ] [基于转换模型的安全属性验证](https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247493616&idx=1&sn=9211f1b45c30a302935f15077cc8b115)\n - [ ] [8000字34张图史诗级介绍同轴电缆、双绞线、光纤等线缆，超级详细！](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649464777&idx=1&sn=32b2badc3ecfeef46c9f362629a4682c)\n - [ ] [【吃瓜】《科普文章被网暴》《支持红客，打击霉离贱汉奸走狗！》DeepSeek乱象频发](https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488860&idx=1&sn=41c835917e4191a5051118f4df625334)\n - [ ] [网络钓鱼与社交工程：如何保护自己免受心理攻击——从受害者画像到防御体系构建](https://mp.weixin.qq.com/s?__biz=Mzk1NzI5MTc0Nw==&mid=2247484721&idx=1&sn=9b57ddd6ef8e9d09eb6c25c6bd0f2b22)\n - [ ] [探索 HPE Insight Remote Support 中的最新 CVE](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527501&idx=1&sn=5f839664fa63bb4e792aa22a18e78ce0)\n - [ ] [dde-api-proxy：Deepin D-Bus 代理服务中的身份验证绕过（CVE-2025-23222）](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527501&idx=2&sn=737f8a4b724e5ff7d00edcdeb03128cb)\n - [ ] [Android Web攻击表面](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527501&idx=3&sn=5f9225bd5a2a555eeb1bfa1f39dd010b)\n - [ ] [[民族之悲哀] DeepSeek 正在成为行业败类、无知黑心者的炒作敛财“傀儡”](https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506662&idx=1&sn=85cd5ef3832b2cd3e8770a6265aa290c)\n - [ ] [美国为何对 DeepSeek 如此“上心”？一场科技博弈的真相](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559440&idx=1&sn=a71dae9b931ab06febdba6081a3e1c26)\n - [ ] [美国联邦调查局“变天”？特朗普全面清洗大动作曝光](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559440&idx=2&sn=ac91eaccfce9275a6fd64aed2388e1a6)\n - [ ] [专家解读 | 推动个人信息出境个人信息保护认证制度落地 促进个人信息高效便利安全跨境流动](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=1&sn=d246a29f11e44289e30c16ad02323ea2)\n - [ ] [征订｜欢迎订阅2025年《中国信息安全》杂志](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=2&sn=4edccca64682f8f41e9b56497807eb00)\n - [ ] [专家解读 | 提升数据流通安全治理能力 促进数据流通开发利用](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=3&sn=4b74cb1e75a739f80043e4d79c6f19a5)\n - [ ] [国际 | 日本推进人工智能立法兼顾双重性](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=4&sn=f8a6890f42bfbbbee12fcb55f0fde756)\n - [ ] [评论 | 铲除“反防沉迷产业链”，撑起“数字晴空”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=5&sn=64e31032d2a327b33ad9368ee8790d3f)\n - [ ] [微软惊现「零点击」核弹级漏洞！打开邮件就中招？](https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488439&idx=1&sn=98793685608a483e27976abf658cb08f)\n - [ ] [Linux通用应急响应脚本](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489197&idx=1&sn=5884ffe11accd736ab98ef2136c649bb)\n - [ ] [前途光明](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489197&idx=2&sn=ae88a87de118a9c320d0c5b5821c056e)\n - [ ] [网安工作者被骂罕见，红客才是行业主导！](https://mp.weixin.qq.com/s?__biz=MzkyNTQ0OTYxOQ==&mid=2247484019&idx=1&sn=bcf60352216bd1de85eabb90f627c3d3)\n - [ ] [“杉菜”再见，大S离世原因](https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247543667&idx=1&sn=ae1deeaf06d309925fe3bfbadf32878d)\n - [ ] [恶意样本静态分析-上](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490311&idx=1&sn=3ddb48128acc2772763bd99ba4cf850a)\n - [ ] [APT狩猎工具](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490311&idx=2&sn=411e5b869e7b4425b9b6ce4d386e170a)\n - [ ] [网络钓鱼工具资源库](https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488641&idx=1&sn=ce3b46fb8a2c5727264f28a851167f8c)\n - [ ] [Docker 入门指南：10个核心命令助你快速上手容器化](https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485645&idx=1&sn=1bd9d8741680f01bc152d9608e3391fb)\n - [ ] [用DeepSeek学习区块链量化](https://mp.weixin.qq.com/s?__biz=MzU3NDY1NTYyOQ==&mid=2247486034&idx=1&sn=c8655d5eb94f15ce10b24ee79ebb2821)\n - [ ] [掌握艺术设计学论文文献收集全指南，让文献不再难搞。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=1&sn=ea25f2184ac90e4708490138156b2621)\n - [ ] [掌握影视摄影与制作论文文献搜集内部攻略，助你写出高分必备指南！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=2&sn=822a6781edeeaf9e98aaeb1434eff4ad)\n - [ ] [掌握硬核技巧：电子商务论文文献搜集全攻略，再也不愁找不到高质量文献了！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=3&sn=8b6a73f7d723ccca32e7506256455a9c)\n - [ ] [掌握云计算与大数据论文选题技巧，导师都说靠谱的秘诀指南！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=4&sn=efa511efbec97d70ba6bd3f53083017b)\n - [ ] [掌握这份电子商务论文初稿生成指南，一天搞定毕业论文！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=5&sn=831b7e600453447ad06a62b31b3aef2a)\n - [ ] [掌握这份诉讼法学论文文献搜集高阶攻略，提升你的学术创新力！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=6&sn=5e1ea103b527981dab1ba28838f2d973)\n - [ ] [掌握这份AI版社会保障论文写作大纲高阶脚本指南，一周完整论文不是梦！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=7&sn=cf40d9551ecccbb1c21543955cd555a9)\n - [ ] [掌握这份ChatGPT物理化学论文选题指南，让论文写作从此不愁！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493259&idx=8&sn=e677fc46b82e5dd576a4dd1503d89713)\n - [ ] [谷歌称黑客正滥用Gemini AI来增强攻击能力](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313430&idx=1&sn=4afd94e32a04c49dcc25f593341c2fd5)\n - [ ] [2025年AI网络安全预测](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313430&idx=2&sn=7388f9c978f61ad866c97f57c21abe6f)\n - [ ] [Meta确认90名用户遭WhatsApp零点击间谍软件攻击](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313430&idx=3&sn=e5f4cbdc2013e8fc276d774eeeb951ae)\n - [ ] [微软披露macOS漏洞CVE-2024-44243，允许安装Rootkit](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313430&idx=4&sn=6e74cf5e7a16522cf7f639a52c3789c7)\n - [ ] [漏洞挖掘 | 基于mssql数据库的sql注入](https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547538&idx=1&sn=2de25baa764188f0bd83a351248a40c5)\n - [ ] [通过计算机视觉帮助发现隐藏的漏洞](https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615413&idx=1&sn=363d6567bfa41a8f33e272e1185da50a)\n - [ ] [AI驱动API漏洞激增1205%，企业安全面临空前挑战！](https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485686&idx=1&sn=6ad3015e97dc52bd69dc9921b81a5f9c)\n - [ ] [大算力之路，生命不选GPU](https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247492308&idx=1&sn=775c682a9974e1a355dc8b8b2a206a11)\n - [ ] [想用 DeepSeek？这里能用，扫码还送 14 元体验金](https://mp.weixin.qq.com/s?__biz=MzkyNzUzMjM1NQ==&mid=2247484777&idx=1&sn=0acdb741af24de7e3f86557afa0a53be)\n - [ ] [【2025春节】解题领红包活动排行榜（初六 2/3）](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141670&idx=1&sn=de73fb9cf91c717915c2bd5adcde0c09)\n - [ ] [Stratovirt 的 RISC-V 虚拟化支持（五）：BootLoader 和设备树](https://mp.weixin.qq.com/s?__biz=MzA5NDQzODQ3MQ==&mid=2648194570&idx=1&sn=c848bb41f340e4869973a3e8eb22c5e8)\n - [ ] [标签巨头 Avery 称网站遭黑客攻击，信用卡信息被窃](https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492132&idx=1&sn=13d6fe7fec657cd4cb7b5191b4e4ef8a)\n - [ ] [一次区块链的安全研究](https://mp.weixin.qq.com/s?__biz=MzkyNDU2MDk4NQ==&mid=2247484034&idx=1&sn=ecdb621b08c7137bfb1cb1bd900cf5f9)\n - [ ] [DeepSeek接入个人知识库，一般电脑也能飞速跑，确实可以封神了！](https://mp.weixin.qq.com/s?__biz=MzkyMzg4MTY4Ng==&mid=2247484596&idx=1&sn=5e1a1f6c02555974e75a31c95e629591)\n - [ ] [全网最全、最详细的 Linux 进程间通信方式讲解来了，你不容错过！](https://mp.weixin.qq.com/s?__biz=MzI1NzI5NDM4Mw==&mid=2247498590&idx=1&sn=3ee93d415c16a3700b965bd1c5ddbfe1)\n - [ ] [500 美元的漏洞：Censys 搜索如何引导我获得快速漏洞赏金](https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504845&idx=1&sn=8c8fa9f474d370a021e30aa8209268ac)\n - [ ] [码住！一次把CISP认证说清楚](https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247487899&idx=1&sn=f5087c557ca623669bc4a1ad49138032)\n - [ ] [一次性把中东关系讲清楚：中东地区的情报战略](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505221&idx=1&sn=b0a5ccbab53fc8198452223d8cb6eb62)\n - [ ] [特朗普“重返中亚”：经济与能源的“双重奏”](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505221&idx=2&sn=a237923be240db67501e67e018240b6e)\n - [ ] [万物随春醒 云堤护网宁](https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247532981&idx=1&sn=a02ca7b9dd52b7b11881079f1e0485aa)\n - [ ] [Active Directory Domain Services 权限提升漏洞 (CVE-2025-21293)](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487001&idx=1&sn=eaae88e6f2b15e26732ca6b90fb5ca69)\n - [ ] [Flask代码审计从思路到实战](https://mp.weixin.qq.com/s?__biz=MzkyNTUyNDMyOA==&mid=2247487699&idx=1&sn=34f12cfc82af827d58e8d758143316bf)\n - [ ] [OSCP考试必备：最全实战命令手册](https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247486694&idx=1&sn=1cdf7df2384a0e643d3f364d5e3040f1)\n - [ ] [麻省理工科技评论：2025年AI五大趋势](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247516971&idx=1&sn=65365df101260e7ccf5f42018c654110)\n - [ ] [立春｜春之启幕 万物生晖](https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247506764&idx=1&sn=ce887174eaa79679513bf66138d1fe3b)\n - [ ] [内网横向渗透之Windows连接技巧](https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037466&idx=1&sn=fd456a13dbe3d7a82884d0b43cb51f82)\n - [ ] [今日立春](https://mp.weixin.qq.com/s?__biz=Mzg3NTU3NTY0Nw==&mid=2247489552&idx=1&sn=7bf9b6c74a63b3620493157b380a8849)\n - [ ] [大年初六 银蛇报春](https://mp.weixin.qq.com/s?__biz=Mzg2MTU5ODQ2Mg==&mid=2247507178&idx=1&sn=d90f00dc663f73a9b5d1e9b926920bc3)\n - [ ] [数字取证之法律遵从性u200c](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655265046&idx=1&sn=37f22293698b7e90fd4cc49c08fbc426)\n - [ ] [网安原创文章推荐【2025/2/2】](https://mp.weixin.qq.com/s?__biz=MzAxNzg3NzMyNQ==&mid=2247489552&idx=1&sn=4cdba465482fcd99df63ffa4bf4ac236)\n - [ ] [以色列间谍无需点击即可入侵 WhatsApp](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494727&idx=1&sn=92a7f62638a9a6dc5e71a39655e2b9f1)\n - [ ] [大年初六 | 金蛇昂首，“巳”如破竹](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579301&idx=1&sn=35ed47abf0879798ddd2a03509c33f87)\n - [ ] [老板让我节后研究一下deepseek](https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247492302&idx=1&sn=bd877522ae6488d1ff49f8325ab6b720)\n - [ ] [程序员注定被淘汰](https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247492302&idx=2&sn=0144e48c3daefe11282c0145291f06d4)\n - [ ] [大年初六丨安天镇关给您拜年了](https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650209932&idx=1&sn=ffcf5ae2b2a579a036936f3d466c4a18)\n- Horizon3.ai\n - [ ] [Securing Financial Services: From Promises to Proof with NodeZero®](https://www.horizon3.ai/intelligence/blogs/securing-financial-services-from-promises-to-proof-with-nodezero/)\n- SentinelOne\n - [ ] [macOS FlexibleFerret | Further Variants of DPRK Malware Family Unearthed](https://www.sentinelone.com/blog/macos-flexibleferret-further-variants-of-dprk-malware-family-unearthed/)\n- Malwarebytes\n - [ ] [WhatsApp says Paragon is spying on specific users](https://www.malwarebytes.com/blog/news/2025/02/whatsapp-says-paragon-is-spying-on-specific-users)\n - [ ] [A week in security (January 27 – February 2)](https://www.malwarebytes.com/blog/news/2025/02/a-week-in-security-january-27-february-2-2)\n- Twitter @bytehx\n - [ ] [RT Jayesh Madnani: 🚀 Unspoken Bug Bounty Rules – From many years of failures & experience! 🕵️‍♂️ Got a similar bug across multiple assets b...](https://x.com/bytehx343/status/1886462043009769629)\n - [ ] [Re @l33tdawg @Verichains Congrats man🎉🎉🎉🎉](https://x.com/bytehx343/status/1886368068483649594)\n - [ ] [RT yso: Just uploaded my Bluetooth security testing slides! 📡 Also, Škoda disclosed a vulnerability I reported—they fixed & rewarded it fast! �...](https://x.com/bytehx343/status/1886367495373848670)\n- glzjin\n - [ ] [懒猫微服外挂ProxmoxVE启动方法说明](https://www.zhaoj.in/read-9077.html)\n- Webroot Blog\n - [ ] [MDR for MSPs: Navigating EDR compatibility](https://www.webroot.com/blog/2025/02/03/mdr-for-msps-navigating-edr-compatibility/)\n- Publications | Outflank\n - [ ] [Secure Enclaves for Offensive Operations (Part I)](https://www.outflank.nl/blog/2025/02/03/secure-enclaves-for-offensive-operations-part-i/)\n- daniel.haxx.se\n - [ ] [European Open Source Achievement Award](https://daniel.haxx.se/blog/2025/02/03/european-open-source-achievement-award/)\n- Reverse Engineering\n - [ ] [/r/ReverseEngineering's Weekly Questions Thread](https://www.reddit.com/r/ReverseEngineering/comments/1igk62y/rreverseengineerings_weekly_questions_thread/)\n - [ ] [Lifting Binaries, Part 0: Devirtualizing VMProtect and Themida: It’s Just Flattening?](https://www.reddit.com/r/ReverseEngineering/comments/1igx34h/lifting_binaries_part_0_devirtualizing_vmprotect/)\n - [ ] [Disassembling a binary: linear sweep and recursive traversal](https://www.reddit.com/r/ReverseEngineering/comments/1ih3ga3/disassembling_a_binary_linear_sweep_and_recursive/)\n - [ ] [Is there a way to reverse Agile.NET compiled library for NinjaTrader 8?](https://www.reddit.com/r/ReverseEngineering/comments/1iguky3/is_there_a_way_to_reverse_agilenet_compiled/)\n - [ ] [AMD: Microcode Signature Verification Vulnerability](https://www.reddit.com/r/ReverseEngineering/comments/1ih3ez3/amd_microcode_signature_verification_vulnerability/)\n- FreeBuf网络安全行业门户\n - [ ] [2024年768个CVE漏洞被利用，较2023年增长20%](https://www.freebuf.com/vuls/421042.html)\n - [ ] [Shiro CVE-2023-34478 路径规范化不一致](https://www.freebuf.com/vuls/421037.html)\n - [ ] [思科研究发现DeepSeek R1极易受有害提示影响](https://www.freebuf.com/articles/421045.html)\n - [ ] [俄语系邪恶黑客团伙操纵10余种高度专业化的社交媒体诈骗](https://www.freebuf.com/articles/network/421044.html)\n - [ ] [恶意软件冒充DeepSeek AI工具在PyPI上传播](https://www.freebuf.com/articles/421046.html)\n - [ ] [疯狂邪恶团伙利用StealC、AMOS和Angel Drainer恶意软件瞄准加密货币](https://www.freebuf.com/articles/network/421028.html)\n- 杨龙\n - [ ] [nginx restart failed:nginx: [alert] OPENSSL_init_ssl() failed (SSL: error:12800067:DSO support routines::could not load the shared library:filename(/snap/certbot/4325/usr/lib/x86_64-linux-gnu/ossl-modules/fips.so): /snap/certbot/4325/usr/lib/x86_64-linux-gnu/ossl-modules/fips.so: cannot open shared object file: No such file or directory error:12800067:DSO support routines::could not load the shared library error:07880025:common libcrypto routines::reason(37):name=fips error:0700006D:configuration file routines::module initialization error:module=providers, value=provider_sect retcode=-1 ) 解决办法](https://www.yanglong.pro/nginx-restart-failednginx-alert-openssl_init_ssl-failed-ssl-error12800067dso-support-routinescould-not-load-the-shared-libraryfilename-snap-certbot-4325-usr-lib-x86_64-linux-gnu-ossl-mod/)\n- Twitter @James Kettle\n - [ ] [The panel has cast their votes and I'm writing up the results now, hoping to publish tomorrow. Looks like an outstanding top ten this year, and ranks ...](https://x.com/albinowax/status/1886375935445774503)\n- 吾爱破解论坛\n - [ ] [【2025春节】解题领红包活动排行榜（初六 2/3）](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141670&idx=1&sn=de73fb9cf91c717915c2bd5adcde0c09&chksm=bd50a6728a272f64da4372a71de026e82781be975527fbb78c174055dc84299836178249ac7f&scene=58&subscene=0#rd)\n- 锦行科技\n - [ ] [初六 | 六六大顺](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493743&idx=1&sn=9735ef44726404099d144253792e54d8&chksm=979a13caa0ed9adca648632b3a4495d3f5749a8ff6f4e170b279b471ff7b6675f7382d149206&scene=58&subscene=0#rd)\n- 奇客Solidot–传递最新科技情报\n - [ ] [天文学家发现一巨型射电星系](https://www.solidot.org/story?sid=80466)\n - [ ] [过去四十年海洋表面变暖速度翻了两番](https://www.solidot.org/story?sid=80465)\n - [ ] [Ubuntu 的开发讨论平台将从 IRC 迁移到 Matrix](https://www.solidot.org/story?sid=80464)\n- 看雪学苑\n - [ ] [浅析代码重定位技术](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589301&idx=1&sn=f8b5a4c4740123d4431ccb68a9063f17&chksm=b18c28ff86fba1e99cd342a44cbdef0919f382e909a6181f50378ef9f83b9e5a90ed2a4eba53&scene=58&subscene=0#rd)\n - [ ] [实用干货！无人机安全攻防入门，速来报名](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589301&idx=2&sn=cd340085d0abd8a5fc5233d9ec93603f&chksm=b18c28ff86fba1e99daf5639ca2271fc027a1fdf2e613c62c6759c1135458a9f9e5e21bb30f4&scene=58&subscene=0#rd)\n- 安全分析与研究\n - [ ] [恶意样本静态分析-上](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490311&idx=1&sn=3ddb48128acc2772763bd99ba4cf850a&chksm=902fb42fa7583d39df80656526a79ff7e90160bdaf250c3ef5570920f6290bc7d172804eeeec&scene=58&subscene=0#rd)\n - [ ] [APT狩猎工具](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490311&idx=2&sn=411e5b869e7b4425b9b6ce4d386e170a&chksm=902fb42fa7583d3998df7212df242d3ded6c932acd3b4b8a1fc90df1dcdea22ff764a30d9c03&scene=58&subscene=0#rd)\n- 安全研究GoSSIP\n - [ ] [G.O.S.S.I.P 2025 新春总动员（1）：疯狂的PDF](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499652&idx=1&sn=589b1778aa04f72cdc07c947be4bc17c&chksm=c063d15df714584b9680831e04f60a8d775211b89366d6125e8a337aa07a891760a5f272c4ba&scene=58&subscene=0#rd)\n- 丁爸 情报分析师的工具箱\n - [ ] [【资料】生成式人工智能下的世界](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148842&idx=1&sn=a98ad85e918a855004f545cb00b2141b&chksm=f1af2510c6d8ac063ffdd7fa3fe1058b652280fbd2ae894b93c5781e7646424e70472f15f631&scene=58&subscene=0#rd)\n- Black Hills Information Security\n - [ ] [Introducing ORBIT, Scan Targets and Clients at Scale](https://www.blackhillsinfosec.com/introducing-orbit-scan-targets-and-clients-at-scale/)\n- 中国信息安全\n - [ ] [专家解读 | 推动个人信息出境个人信息保护认证制度落地 促进个人信息高效便利安全跨境流动](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=1&sn=d246a29f11e44289e30c16ad02323ea2&chksm=8b580158bc2f884ee870cf909293f550b4c6d68f752798b4305df99158a937ae96c708b46913&scene=58&subscene=0#rd)\n - [ ] [征订｜欢迎订阅2025年《中国信息安全》杂志](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=2&sn=4edccca64682f8f41e9b56497807eb00&chksm=8b580158bc2f884e1eadb1ba8edd1fc7ee1b96d216203155cb5d91797f95b1378359e3428734&scene=58&subscene=0#rd)\n - [ ] [专家解读 | 提升数据流通安全治理能力 促进数据流通开发利用](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=3&sn=4b74cb1e75a739f80043e4d79c6f19a5&chksm=8b580158bc2f884ec910feed597fb437cb51a6951c0f1ae66fb67ec4ab7d0b6a18b58f8fdeb4&scene=58&subscene=0#rd)\n - [ ] [国际 | 日本推进人工智能立法兼顾双重性](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=4&sn=f8a6890f42bfbbbee12fcb55f0fde756&chksm=8b580158bc2f884ee7d8be0d3b95af42bf87dc525ebe931098d6678ae4a3721ef29ebeda5c6c&scene=58&subscene=0#rd)\n - [ ] [评论 | 铲除“反防沉迷产业链”，撑起“数字晴空”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235937&idx=5&sn=64e31032d2a327b33ad9368ee8790d3f&chksm=8b580158bc2f884ebdeeb7ed2b4c3494060fcc77a43367fd6ea18e1cc4f062d3772f1dd9519e&scene=58&subscene=0#rd)\n- 技可达工作室\n - [ ] [用DeepSeek学习区块链量化](https://mp.weixin.qq.com/s?__biz=MzU3NDY1NTYyOQ==&mid=2247486034&idx=1&sn=c8655d5eb94f15ce10b24ee79ebb2821&chksm=fd2e57b0ca59dea622a62f1323974973b15d0a21a3b284bbaa3832d5fe729c6a28a0bc1f8571&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [美国为何对 DeepSeek 如此“上心”？一场科技博弈的真相](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559440&idx=1&sn=a71dae9b931ab06febdba6081a3e1c26&chksm=87117d9bb066f48de68a68083afd89c401fc25c0148c8c7d276322a69401f9f0519b30a3fd15&scene=58&subscene=0#rd)\n - [ ] [美国联邦调查局“变天”？特朗普全面清洗大动作曝光](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559440&idx=2&sn=ac91eaccfce9275a6fd64aed2388e1a6&chksm=87117d9bb066f48d6b4f6c684a3bf0af5da9b279e4674d5c1dc38c70d86f10fae55b46bf64a4&scene=58&subscene=0#rd)\n- dotNet安全矩阵\n - [ ] [限时福利 | 2024 年度隧道代理、数据外发、痕迹清理阶段文章和工具汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498677&idx=1&sn=8a4dcac147d84f3f1bd3ccb37a8d5e9e&chksm=fa595558cd2edc4e632bbfa5ccf31a9f66ee0d13161c10d466ac3487177f072458ac51f42af0&scene=58&subscene=0#rd)\n - [ ] [总结 | 2024 年度内网实战攻防电子报刊 34 篇文章内容汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498677&idx=2&sn=b973bed512a412529ca496db03a70cb7&chksm=fa595558cd2edc4e0635075a22a66da8311fced2fb3f09b46376c516d06ca1bdf5713c5374f3&scene=58&subscene=0#rd)\n - [ ] [2024 年度本地权限操作阶段文章和工具汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498677&idx=3&sn=7bf0c0bc3fdbee0fcbac31d78562ff0f&chksm=fa595558cd2edc4ee958c938fecfe4b37a180940e3b19ba4c06ca3aac6292817262680e954c3&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [为什么说大模型，补上了搜索的最后一块短板](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073232&idx=1&sn=2e8dd2550e1834a9affa554d120ca22e&chksm=7e57d2e649205bf04b6221d8162c87808b7db4914fb54ed96ff7894c4dbdf9ae2fc3b60d5446&scene=58&subscene=0#rd)\n - [ ] [微信视频美颜「仅自己可见」，官方：都能看见；《哪吒 2》破30亿冲击票房冠军；水上机器人救回 3 位溺水者 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073231&idx=1&sn=075c62ad2e8d854da64c1ed036e2bb36&chksm=7e57d2f949205befef103e65c9db8965a3a3a773976308faabe56e0234093ebad38383430fe8&scene=58&subscene=0#rd)\n- 360数字安全\n - [ ] [大年初六 | 金蛇昂首，“巳”如破竹](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579301&idx=1&sn=35ed47abf0879798ddd2a03509c33f87&chksm=9f8d26ada8faafbbbb8a81d52e8929c1dfdcf019590ce3e3b1fffe2c997372f76abc89f2a72f&scene=58&subscene=0#rd)\n- 信息安全国家工程研究中心\n - [ ] [【二十四节气】立春 | 冬去春来万物生](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498793&idx=1&sn=441c9d8c6db5d81afa624f8430127389&chksm=feb67d3ac9c1f42c15e947ca936857e5d5c64261d37496ee03b940a94c66338e2c99840b5e5d&scene=58&subscene=0#rd)\n- Securityinfo.it\n - [ ] [Meta smantella una campagna di spionaggio su WhatsApp](https://www.securityinfo.it/2025/02/03/meta-smantella-una-campagna-di-spionaggio-su-whatsapp/?utm_source=rss&utm_medium=rss&utm_campaign=meta-smantella-una-campagna-di-spionaggio-su-whatsapp)\n - [ ] [CERT-AGID 25 – 31 gennaio: attacchi contro funzionari governativi e rappresentanti di ambasciate](https://www.securityinfo.it/2025/02/03/cert-agid-25-31-gennaio-attacchi-funzionari-governativi-rappresentanti-ambasciate/?utm_source=rss&utm_medium=rss&utm_campaign=cert-agid-25-31-gennaio-attacchi-funzionari-governativi-rappresentanti-ambasciate)\n- ICT Security Magazine\n - [ ] [E-Identity ed eIDAS 2.0: l’evoluzione dell’identità digitale europea](https://www.ictsecuritymagazine.com/notizie/e-identity-e-eidas-2-0/)\n- Have I Been Pwned latest breaches\n - [ ] [1win - 96,166,543 breached accounts](https://haveibeenpwned.com/PwnedWebsites#1win)\n - [ ] [DragonNest - 511,290 breached accounts](https://haveibeenpwned.com/PwnedWebsites#DragonNest)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Crypto Wallet Scam, (Mon, Feb 3rd)](https://isc.sans.edu/diary/rss/31646)\n - [ ] [ISC Stormcast For Monday, February 3rd, 2025 https://isc.sans.edu/podcastdetail/9306, (Mon, Feb 3rd)](https://isc.sans.edu/diary/rss/31644)\n- Schneier on Security\n - [ ] [Journalists and Civil Society Members Using WhatsApp Targeted by Paragon Spyware](https://www.schneier.com/blog/archives/2025/02/journalists-and-civil-society-members-using-whatsapp-targeted-by-paragon-spyware.html)\n- Krypt3ia\n - [ ] [Corporate Panopticon: How Big Tech Became the New Surveillance State](https://krypt3ia.wordpress.com/2025/02/03/corporate-panopticon-how-big-tech-became-the-new-surveillance-state/)\n - [ ] [Modern Moscow Rules: Counter-Surveillance in the Digital & Physical World](https://krypt3ia.wordpress.com/2025/02/03/modern-moscow-rules-counter-surveillance-in-the-digital-physical-world/)\n - [ ] [Krypt3ia Daily Cyber Threat Intelligence (CTI) Digest](https://krypt3ia.wordpress.com/2025/02/03/krypt3ia-daily-cyber-threat-intelligence-cti-digest-8/)\n- Over Security - Cybersecurity news aggregator\n - [ ] [‘Yes, this is real’: hackers targeting high-profile X accounts blur fact and fiction](https://therecord.media/hackers-x-accounts-security-crypto)\n - [ ] [Amazon Redshift gets new default settings to prevent data breaches](https://www.bleepingcomputer.com/news/security/amazon-redshift-gets-new-default-settings-to-prevent-data-breaches/)\n - [ ] [Woman nabbed by Thai police on alleged link to $182 million romance scam](https://therecord.media/arrest-thai-police-woman-romance-scam)\n - [ ] [Australia sanctions ‘Terrorgram’ white supremacist online group](https://therecord.media/australia-sanctions-terrorgram-online-hate-group)\n - [ ] [Canadian charged in two crypto platform thefts totaling $65 million](https://therecord.media/indictment-canadian-two-cryptocurrency-platform-hacks)\n - [ ] [Google fixes Android kernel zero-day exploited in attacks](https://www.bleepingcomputer.com/news/security/google-fixes-android-kernel-zero-day-exploited-in-attacks/)\n - [ ] [Journalist targeted on WhatsApp by Paragon spyware: “I feel violated”](https://techcrunch.com/2025/02/03/journalist-targeted-on-whatsapp-by-paragon-spyware-i-feel-violated/)\n - [ ] [Canadian charged with stealing $65 million using DeFI crypto exploits](https://www.bleepingcomputer.com/news/security/canadian-charged-with-stealing-65-million-using-defi-crypto-exploits/)\n - [ ] [Casio UK online store hacked to steal customer credit cards](https://www.bleepingcomputer.com/news/security/casio-uk-online-store-hacked-to-steal-customer-credit-cards/)\n - [ ] [Mississippi electric utility warns 20,000 residents of data breach](https://therecord.media/mississippii-electric-utility-residents-breach)\n - [ ] [1win - 96,166,543 breached accounts](https://haveibeenpwned.com/PwnedWebsites#1win)\n - [ ] [Kazakhstan to audit foreign ministry after suspected Russia-linked cyberattack](https://therecord.media/kazakhstan-foreign-ministry-cyberattack-russia)\n - [ ] [Microsoft kills off Defender 'Privacy Protection' VPN feature](https://www.bleepingcomputer.com/news/microsoft/microsoft-kills-off-defender-privacy-protection-vpn-feature/)\n - [ ] [DeepSeek AI tools impersonated by infostealer malware on PyPI](https://www.bleepingcomputer.com/news/security/deepseek-ai-tools-impersonated-by-infostealer-malware-on-pypi/)\n - [ ] [Telemarketing e trattamento illecito dei dati: la sanzione privacy a E.On sia monito per tutti](https://www.cybersecurity360.it/news/sanzione-eon-garante-privacy/)\n - [ ] [Japanese sportswear company Mizuno confirms data breach after 2024 ransomware claims](https://therecord.media/mizuno-data-breach-notification)\n - [ ] [AI Act, scattano i primi divieti: chi rischia le sanzioni e le prossime tappe](https://www.cybersecurity360.it/news/ai-act-scattano-i-primi-divieti-chi-rischia-le-sanzioni-e-le-prossime-tappe/)\n - [ ] [Analysis of an advanced malicious Chrome extension](https://palant.info/2025/02/03/analysis-of-an-advanced-malicious-chrome-extension/)\n - [ ] [Sweden releases suspected ship, says cable break ‘clearly’ not sabotage](https://therecord.media/sweden-releases-ship-suspected-cable-sabotage)\n - [ ] [Cyble Sensors Detect Attacks on Apache OFBiz, Palo Alto Networks](https://cyble.com/blog/cyble-sensors-detect-attacks-on-palo-alto-networks/)\n - [ ] [Vidar muta ancora: payload variabile e offuscamento più raffinato per questa nuova ondata](https://cert-agid.gov.it/news/vidar-muta-ancora-payload-variabile-e-offuscamento-piu-raffinato-per-questa-nuova-ondata/)\n - [ ] [Russian hackers suspected of compromising British PM’s personal email account](https://therecord.media/keir-starmer-email-hack-russia-suspected)\n - [ ] [Apple Issues Security Updates for iOS, macOS, watchOS, and More—Patch Now!](https://cyble.com/blog/apple-fixes-cve-2025-24085-security-update/)\n - [ ] [Trump elimina i vincoli all’IA: i rischi cyber e privacy e le questioni etiche](https://www.cybersecurity360.it/cultura-cyber/trump-elimina-i-vincoli-allia-i-rischi-cyber-e-privacy-e-le-questioni-etiche/)\n - [ ] [Meta smantella una campagna di spionaggio su WhatsApp](https://www.securityinfo.it/2025/02/03/meta-smantella-una-campagna-di-spionaggio-su-whatsapp/)\n - [ ] [PyPI adds project archiving system to stop malicious updates](https://www.bleepingcomputer.com/news/security/pypi-adds-project-archiving-system-to-stop-malicious-updates/)\n - [ ] [Vulnerabilità in Cisco Webex Chat, a rischio dati aziendali riservati: come mitigarla](https://www.cybersecurity360.it/news/vulnerabilita-in-cisco-webex-chat-a-rischio-dati-aziendali-riservati-come-mitigarla/)\n - [ ] [CERT-AGID 25 – 31 gennaio: attacchi contro funzionari governativi e rappresentanti di ambasciate](https://www.securityinfo.it/2025/02/03/cert-agid-25-31-gennaio-attacchi-funzionari-governativi-rappresentanti-ambasciate/)\n - [ ] [DragonNest - 511,290 breached accounts](https://haveibeenpwned.com/PwnedWebsites#DragonNest)\n- Posts By SpecterOps Team Members - Medium\n - [ ] [Further Adventures With CMPivot — Client Coercion](https://posts.specterops.io/further-adventures-with-cmpivot-client-coercion-38b878b740ac?source=rss----f05f8696e3cc---4)\n- TG Soft Software House - News\n - [ ] [Phishing: i tentativi di furto credenziali e/o dati maggiormente diffusi nel mese di FEBBRAIO 2025...](http://www.tgsoft.it/italy/news_archivio.asp?id=1609)\n- 迪哥讲事\n - [ ] [列目录引起的信息泄露获取1w5赏金](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497023&idx=1&sn=f4dad5920e40978a4ba8d4c41549b151&chksm=e8a5ff5cdfd2764a24279a9dc8a829590dbe024450bedf43308c4ac21ef5ed933c146156054e&scene=58&subscene=0#rd)\n- Security Affairs\n - [ ] [Web Skimmer found on at least 17 websites, including Casio UK](https://securityaffairs.com/173797/malware/web-skimmer-casio-uks-site.html)\n - [ ] [Crazy Evil gang runs over 10 highly specialized social media scams](https://securityaffairs.com/173784/cyber-crime/crazy-evil-runs-10-social-media-scams.html)\n - [ ] [Elon Musk ’s DOGE team granted ‘full access’ to sensitive Treasury systems. What are the risks?](https://securityaffairs.com/173776/security/elon-musk-s-doge-granted-full-access-to-sensitive-treasury-systems.html)\n - [ ] [Texas is the first state to ban DeepSeek on government devices](https://securityaffairs.com/173764/laws-and-regulations/texas-bans-deepseek-and-rednote-govt-devices.html)\n - [ ] [Law enforcement seized the domains of HeartSender cybercrime marketplaces](https://securityaffairs.com/173750/cyber-crime/heartsender-cybercrime-marketplaces-seized.html)\n- Technical Information Security Content & Discussion\n - [ ] [How Attackers Can Bypass OPA Gatekeeper in Kubernetes Due to Rego Flaws](https://www.reddit.com/r/netsec/comments/1igvgbh/how_attackers_can_bypass_opa_gatekeeper_in/)\n- Computer Forensics\n - [ ] [Sigma Rule Repo](https://www.reddit.com/r/computerforensics/comments/1igy288/sigma_rule_repo/)\n- Your Open Hacker Community\n - [ ] [How do you know what xss payload to use](https://www.reddit.com/r/HowToHack/comments/1igybrw/how_do_you_know_what_xss_payload_to_use/)\n - [ ] [What is the best wordlist?](https://www.reddit.com/r/HowToHack/comments/1ih2ewh/what_is_the_best_wordlist/)\n - [ ] [Game Save Hack](https://www.reddit.com/r/HowToHack/comments/1ih2139/game_save_hack/)\n - [ ] [Need Help Setting Up a Proxy Server for HTTP Custom with Custom Payload on OMV (Debian)](https://www.reddit.com/r/HowToHack/comments/1igprcu/need_help_setting_up_a_proxy_server_for_http/)\n - [ ] [Hacking an android device.](https://www.reddit.com/r/HowToHack/comments/1igtb54/hacking_an_android_device/)\n - [ ] [SunNxt movies download](https://www.reddit.com/r/HowToHack/comments/1igmnwu/sunnxt_movies_download/)\n - [ ] [Hey new guy, I have a question Does anyone have anything that is in url form that i can send my friends that will crash a chromebook.](https://www.reddit.com/r/HowToHack/comments/1igz5tg/hey_new_guy_i_have_a_question_does_anyone_have/)\n - [ ] [Tizen os](https://www.reddit.com/r/HowToHack/comments/1igjoy4/tizen_os/)\n - [ ] [how to find a password](https://www.reddit.com/r/HowToHack/comments/1igjfkf/how_to_find_a_password/)\n- The Hacker News\n - [ ] [768 CVEs Exploited in 2024, Reflecting a 20% Increase from 639 in 2023](https://thehackernews.com/2025/02/768-cves-exploited-in-2024-reflecting.html)\n - [ ] [PyPI Introduces Archival Status to Alert Users About Unmaintained Python Packages](https://thehackernews.com/2025/02/pypi-introduces-archival-status-to.html)\n - [ ] [⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 February]](https://thehackernews.com/2025/02/thn-weekly-recap-top-cybersecurity.html)\n - [ ] [Coyote Malware Expands Reach: Now Targets 1,030 Sites and 73 Financial Institutions](https://thehackernews.com/2025/02/coyote-malware-expands-reach-now.html)\n - [ ] [What Is Attack Surface Management?](https://thehackernews.com/2025/02/what-is-attack-surface-management.html)\n - [ ] [Crazy Evil Gang Targets Crypto with StealC, AMOS, and Angel Drainer Malware](https://thehackernews.com/2025/02/crazy-evil-gang-targets-crypto-with.html)\n- Deeplinks\n - [ ] [Open Licensing Promotes Culture and Learning. That's Why EFF Is Upgrading its Creative Commons Licenses.](https://www.eff.org/deeplinks/2025/02/open-licensing-promotes-culture-and-learning-thats-why-eff-upgrading-its-creative)\n- Home\n - [ ] [Exploit Development: Investigating Kernel Mode Shadow Stacks on Windows](https://connormcgarr.github.io/km-shadow-stacks/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [The Growth of Women in Cybersecurity Has Slowed - Why, and What Can We Do About It? - Lynn Dohm - ESW #392](http://sites.libsyn.com/18678/the-growth-of-women-in-cybersecurity-has-slowed-why-and-what-can-we-do-about-it-lynn-dohm-esw-392)\n"}}, "archive/daily/2025/2025-02-19.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747324.7714992, "n": 60613, "h": "a4395bfba86842f5", "c": "# 每日安全资讯（2025-02-19）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-02-18 Review](http://www.sec-wiki.com/?2025-02-18)\n- 安全客-有思想的安全新媒体\n - [ ] [微软推出修复华硕蓝屏问题的 BIOS 更新](https://www.anquanke.com/post/id/304455)\n - [ ] [马斯克与 OpenAI 的交锋：收购提案遇冷，立场分歧引争议](https://www.anquanke.com/post/id/304451)\n - [ ] [保护投资者，重塑市场信任：ESMA 就加密员工指导方针征求意见](https://www.anquanke.com/post/id/304441)\n - [ ] [AMD 多款嵌入式处理器现安全隐患，官方建议升级固件防范](https://www.anquanke.com/post/id/304437)\n - [ ] [Juniper Networks多款产品现严重身份验证绕过漏洞（CVE-2025-21589），速升级软件修复](https://www.anquanke.com/post/id/304433)\n - [ ] [2025全球网络安全政策法律趋势：AI、数据安全等成焦点！](https://www.anquanke.com/post/id/304429)\n - [ ] [LibreOffice 严重漏洞：或致系统被写入文件及数据泄露，需更新版本](https://www.anquanke.com/post/id/304422)\n - [ ] [微软曝光：针对 macOS 的 XCSSET 恶意软件盗窃加密货币](https://www.anquanke.com/post/id/304417)\n - [ ] [警惕！X 平台将 Signal.me 链接标记为恶意，屏蔽行为引猜测](https://www.anquanke.com/post/id/304411)\n - [ ] [XCSSET 恶意软件新变种来袭，目标直指 macOS 开发者与用户](https://www.anquanke.com/post/id/304407)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [微软：黑客在设备代码钓鱼攻击中窃取电子邮件](https://www.4hou.com/posts/wxxX)\n - [ ] [「深蓝洞察」2024年度最难以阻挡的攻防趋势](https://www.4hou.com/posts/l00j)\n- paper - Last paper\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗?](https://paper.seebug.org/3282/)\n - [ ] [如何为大型语言模型植入后门：创建“BadSeek”，一个狡猾的开源编码模型](https://paper.seebug.org/3281/)\n - [ ] [本地化 AI 审计工具落地小试牛刀](https://paper.seebug.org/3280/)\n- obaby@mars\n - [ ] [伏地魔？](https://h4ck.org.cn/2025/02/19333)\n- Recent Commits to cve:main\n - [ ] [Update Tue Feb 18 20:30:07 UTC 2025](https://github.com/trickest/cve/commit/990fe6ceaadcf34085f84750a0369bb2e8f78373)\n - [ ] [Update Tue Feb 18 12:31:05 UTC 2025](https://github.com/trickest/cve/commit/ae962b44913a77b1cb0c16a3051b880d5a8cc752)\n - [ ] [Update Tue Feb 18 04:27:55 UTC 2025](https://github.com/trickest/cve/commit/bd07eabc7259ff38bd175b80cef43bcb121a4c5d)\n- 奇安信攻防社区\n - [ ] [掌握Tornado隐秘漏洞：构建内存马，实现命令执行](https://forum.butian.net/share/4148)\n- Security Boulevard\n - [ ] [US Military, Defense Contractors Infected with Infostealers: Hudson Rock](https://securityboulevard.com/2025/02/us-military-defense-contractors-infected-with-infostealers-hudson-rock/)\n - [ ] [PCI DSS 4: 6.4.3/11.6.1 – A Guide to SAQ A-EP Compliance using Feroot PaymentGuard AI](https://securityboulevard.com/2025/02/pci-dss-4-6-4-3-11-6-1-a-guide-to-saq-a-ep-compliance-using-feroot-paymentguard-ai/)\n - [ ] [Randall Munroe’s XKCD ‘Hardwood’](https://securityboulevard.com/2025/02/randall-munroes-xkcd-hardwood/)\n - [ ] [DEF CON 32 – Manufacturing Lessons Learned, Lessons Taught](https://securityboulevard.com/2025/02/def-con-32-manufacturing-lessons-learned-lessons-taught/)\n - [ ] [Learn & Avoid Social Engineering Scams in 2025](https://securityboulevard.com/2025/02/learn-avoid-social-engineering-scams-in-2025/)\n - [ ] [Inside Amazon GuardDuty: What the Logs Reveal About Cloud Security](https://securityboulevard.com/2025/02/inside-amazon-guardduty-what-the-logs-reveal-about-cloud-security/)\n - [ ] [Intruder Enhances Free Vulnerability Intelligence Platform ‘Intel’ with AI-Generated CVE Descriptions](https://securityboulevard.com/2025/02/intruder-enhances-free-vulnerability-intelligence-platform-intel-with-ai-generated-cve-descriptions/)\n - [ ] [Cybersecurity in 2025: AI, Attack Surfaces and the Shift to Cyber Resilience](https://securityboulevard.com/2025/02/cybersecurity-in-2025-ai-attack-surfaces-and-the-shift-to-cyber-resilience/)\n - [ ] [Cybersecurity Predictions for 2025: Platforms, Convergence and the Future of Risk Management](https://securityboulevard.com/2025/02/cybersecurity-in-2025-platforms-convergence-and-the-future-of-risk-management/)\n - [ ] [GRIT’s 2025 Report: Ransomware Group Dynamics and Case Studies](https://securityboulevard.com/2025/02/grits-2025-report-ransomware-group-dynamics-and-case-studies/)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [WordPress Plugin A/B Image Optimizer 3.3 Arbitrary File Download](https://cxsecurity.com/issue/WLB-2025020009)\n - [ ] [OpenSSH 9.9p1 Denial of Service / Man-In-The-Middle](https://cxsecurity.com/issue/WLB-2025020008)\n- InfoSec Write-ups - Medium\n - [ ] [VulnLab Trusted | Maverick Got Your Trusted Baby](https://infosecwriteups.com/vulnlab-trusted-maverick-got-your-trusted-baby-71420c15273e?source=rss----7b722bfd1b8d---4)\n - [ ] [I Pasted a Simple HTML Code on BookMyShow… and Got ₹1000 for It!](https://infosecwriteups.com/i-pasted-a-simple-html-code-on-bookmyshow-and-got-1000-for-it-26313f0e2115?source=rss----7b722bfd1b8d---4)\n - [ ] [HTMLI to ATO leads to $$$ bounty](https://infosecwriteups.com/htmli-to-ato-leads-to-bounty-9725cb23a67c?source=rss----7b722bfd1b8d---4)\n - [ ] [Simulating Phishing Attacks with Gophish: A Comprehensive Guide](https://infosecwriteups.com/simulating-phishing-attacks-with-gophish-a-comprehensive-guide-3f4b709f76b6?source=rss----7b722bfd1b8d---4)\n - [ ] [How I Bypassed BookMyShow’s OTP Limit with Just a Space & Got ₹1000 for It!](https://infosecwriteups.com/how-i-bypassed-bookmyshows-otp-limit-with-just-a-space-got-1000-for-it-70eab29fb6aa?source=rss----7b722bfd1b8d---4)\n - [ ] [Zoho Account Takeover: How a Single Click Can Lead to Full Control over your Zoho account](https://infosecwriteups.com/zoho-account-takeover-how-a-single-click-can-lead-to-full-control-over-your-zoho-account-cd6f0c245272?source=rss----7b722bfd1b8d---4)\n - [ ] [Why You Need a Digital Garden (How to Start Guide)](https://infosecwriteups.com/why-you-need-a-digital-garden-how-to-start-guide-a1f30f818c75?source=rss----7b722bfd1b8d---4)\n - [ ] [No email verification leads to an Oauth account takeover.](https://infosecwriteups.com/no-email-verification-leads-to-an-oauth-account-takeover-02eb30496939?source=rss----7b722bfd1b8d---4)\n- Trustwave Blog\n - [ ] [Building a Sustainable PCI DSS 4.0 Compliance Culture](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/building-a-sustainable-pci-dss-4.0-compliance-culture/)\n- Microsoft Security Blog\n - [ ] [​​Join us for the end-to-end Microsoft RSAC 2025 Conference experience](https://www.microsoft.com/en-us/security/blog/2025/02/18/join-us-for-the-end-to-end-microsoft-rsac-2025-conference-experience/)\n- Doonsec's feed\n - [ ] [Windows 二进制文件模糊测试的艺术](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487223&idx=1&sn=9aa6e3fe0de698f9ceb8d051c0aaa3ff)\n - [ ] [秦安：打江山马克思主义，守江山马斯克方法，首先从中国股市做起](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476925&idx=1&sn=01d93d4dadce125e24ad3724abb6353b)\n - [ ] [张志坤：重新规划安排中欧班列，应早为之计](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476925&idx=2&sn=1899256b96824a441fd19512224c1fad)\n - [ ] [漏洞预警 用友 UFIDA NC portal/pt/office/checkekey 接口存在 SQL 注入漏洞](https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488037&idx=1&sn=e95060073c6bd35b738e6465d0b60b50)\n - [ ] [【工具分享】提取微信聊天记录，导出可视化文档永久保存，（还可训练成个人AI）](https://mp.weixin.qq.com/s?__biz=MzA3MzgwMzYyMA==&mid=2452890317&idx=1&sn=3caa34536c488d3876b6b147d2930a5c)\n - [ ] [进京证 啥时候能取消呢？](https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491125&idx=1&sn=c9bd12a613875b317037512d8a476b9d)\n - [ ] [获取JA3指纹](https://mp.weixin.qq.com/s?__biz=MzA4NjQxMDcxNA==&mid=2709355324&idx=1&sn=e5a03aadddae69088e13b89a35140a48)\n - [ ] [DeepSeek+DeepResearch：应用实践](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655266852&idx=1&sn=38ea338b89b098cf63b856a2f414cd8e)\n - [ ] [《怒吼的战场：凌晨1点17分的WiFi攻防战以失败告终》](https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484556&idx=1&sn=12c872fd27ffe88bc241f1dd3eeec777)\n - [ ] [某Q出现校验异常](https://mp.weixin.qq.com/s?__biz=Mzg2NDcwNjkzNw==&mid=2247487199&idx=1&sn=a1a273098fc6300a58ffe6a67c537327)\n - [ ] [构建智能反爬防御体系：从多终端攻防到AI驱动的实时风控策略](https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484585&idx=1&sn=1c762308451b7ff7e8dd0e2ec8da3630)\n - [ ] [马斯克放大招，宣称\\\"已超越DeepSeek\\\"](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=1&sn=b1af6bf06c963951bd1efe6120474e8f)\n - [ ] [国家数据局发布第二批公共数据应用示范场景建设清单](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=2&sn=8ddddc8b5ecc47757dc85c7a57236175)\n - [ ] [首批70名公务员已上岗，工作效率最高提升100倍！多地政务系统接入…网友：混日子的要下岗了](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=3&sn=e58ce6090e46fb39801d533d4dd1c6ee)\n - [ ] [ChatGPT Operator 遭提示注入攻击，泄露用户隐私数据](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=1&sn=a008bd32d4ac4e5ba959a13e6714c501)\n - [ ] [美国会拟立法：将太空系统作为关基设施进行保护](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=5&sn=fc96f1404b4ccf2689471b3893cd11e5)\n - [ ] [网络安全人士必知的指纹探测技术](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490447&idx=1&sn=c76f4f8d6bc8c35d6bfa414da48951d4)\n - [ ] [合规引领，助力企业“扬帆出海” | “杨数浦”品牌沙龙第三期精彩回顾](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247517311&idx=1&sn=27626dc4110c4ebc078a1013dc60579f)\n - [ ] [国货正当红！国货之光软件优惠庆典 6 折起](https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492205&idx=1&sn=88bbac3ffda3b659cfce532265a3f0c3)\n - [ ] [【漏洞预警】ChurchCRM系统中通过EditEventTypes.php文件的newCountName参数进行SQL注入漏洞](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489623&idx=1&sn=0eb82923c11d936eda41661733bab356)\n - [ ] [DeepSeek本地部署安全隐患问题，建议紧急排查](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489623&idx=2&sn=1892455a5ca464abf6bafa8a8b182a37)\n - [ ] [DNS投毒与利用](https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488726&idx=1&sn=17db9da06b19b3ba1cd01d7dd63f6d01)\n - [ ] [DeepSeek 引爆！AI 智能体 商业应用全景图：万亿市场新赛道开启！](https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484148&idx=1&sn=b7ab4ffaac68b0d6fe269e8573046c09)\n - [ ] [MWC 2025 | 华为星河AI融合SASE最新案例精选，3月3日与您相约巴塞罗那！](https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505890&idx=1&sn=a912c683b5aebb4d0c610bc25d467199)\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗？](https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487304&idx=2&sn=242893b8bf6c59a594f746e2bb5fa1fb)\n - [ ] [SRC专项知识库](https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518592&idx=2&sn=047c56c3573a6a30f3e5ceeb8bcae850)\n - [ ] [【待确认】疑似解决微信小程序devtools无法全局搜索问题？](https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484391&idx=1&sn=ea11c8d30ad0c916d24a4f289610a955)\n - [ ] [如何使用MSSQL CLR组件绕过EDR](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527921&idx=1&sn=76f38448f0b318e4f4f82e935e6128b7)\n - [ ] [无休止的漏洞：macOS 漏洞被利用九次](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527921&idx=2&sn=15dd9f4e59983a9c588916d3058ae171)\n - [ ] [AboutSQLRecorder是一个能够实时记录SQL语句的工具，方便代码审计时对SQL注入的实时关注](https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496521&idx=1&sn=e1dcb02f0d4846b88555054e2ef84719)\n - [ ] [【漏洞预警】Cisco Meeting Management客户端-服务器权限提升漏洞](https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484334&idx=1&sn=f4599ad3ed50659f274d2b35c7589312)\n - [ ] [常见WEB漏洞—SQL 注入](https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247488289&idx=1&sn=4adfd4de8707c7989afa203de3cd49f2)\n - [ ] [2025网安公司避坑互助墙--内部吐槽墙](https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247487372&idx=1&sn=779e647e788030ce94c9885eb5a35752)\n - [ ] [Deepseek真的能搞定安全运营？](https://mp.weixin.qq.com/s?__biz=Mzg5NTMxMjQ4OA==&mid=2247485648&idx=1&sn=35fa7f43468584d6ea0f0671b4f85497)\n - [ ] [《论语别裁》第01章 学而（01）语文的变与不变](https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247500817&idx=1&sn=f442b82b587f4fb37bfd705baccb2b38)\n - [ ] [Tips | 提取java应用内存从而直接获取明文密码和配置信息的方法](https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487304&idx=1&sn=2be4a08b7a4c875f17816f8c7c6b0e6f)\n - [ ] [《内网安全攻防渗透测试实战指南》笔记之权限提升分析与防御](https://mp.weixin.qq.com/s?__biz=MzkzNjQwOTc4MQ==&mid=2247490399&idx=1&sn=a786f6dd8f07344cff4940f72b75c8ae)\n - [ ] [反反rootkit--覆盖驱动与隐藏线程](https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488462&idx=1&sn=9cfb75421975bffdfe049b3e6df12b67)\n - [ ] [【各大培训机构】网络安全圈最硬核投票来了！](https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211340&idx=1&sn=b960a0001604e507aeddba440fbcb312)\n - [ ] [网络安全行情这么差？oscp十多个证书也弥补不了学历的弱势吗？](https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538747&idx=1&sn=56e22e4c93b198237411b0f2f211c16f)\n - [ ] [常行AI+安全方案：减少大模型部署风险，助力企业智能革新](https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247502972&idx=1&sn=80f9f7d77c81336634fd3e7763a28da8)\n - [ ] [[网络安全]HVV面试面经](https://mp.weixin.qq.com/s?__biz=MzkwOTUzMDk4OA==&mid=2247483793&idx=1&sn=c4d35af48992977eb8b7db6febf5181a)\n - [ ] [全国政协推动人工智能更好服务“四个面向”专题组座谈会在奇安信召开 全国政协副主席陈武率课题组参加](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625170&idx=1&sn=c7c9ce3e42ff91f8caec4631c2dbfca6)\n - [ ] [95015应急响应报告：内部违规是网安事件罪魁祸首](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625170&idx=2&sn=bb8dc3eaf025dc789cd7440977078139)\n - [ ] [SRC实战系列-记某次大学漏洞挖掘经过](https://mp.weixin.qq.com/s?__biz=MzkxMzQyMzUwMg==&mid=2247486443&idx=1&sn=9bf618a3a424cefc958f0ca4a7a0c934)\n - [ ] [OSINT信息收集工具 - chiasmodon](https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486075&idx=1&sn=468f3470d7602f73a3d4df0bf0c51acb)\n - [ ] [SecWiki周刊（第572期）](https://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=2651053441&idx=1&sn=629cf305baee3944d86b7985ac0f61a9)\n - [ ] [XCSSET恶意软件卷土重来，剑指macOS用户与开发者](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=2&sn=0fda5989ef936d6dea0b0956d4fbbbf1)\n - [ ] [黑客滥用Microsoft Teams会议邀请窃取用户权限](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=3&sn=5319bd4c3b4b6bd974e10791184e93e2)\n - [ ] [网络攻击者借助SharpHide改良版，加大注册表检测难度](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=4&sn=1f8b1a860ab6290b3aa06a8c839c25f3)\n - [ ] [2025年1月涉国内数据泄露事件汇总](https://mp.weixin.qq.com/s?__biz=Mzg4NzQ4MzA4Ng==&mid=2247485268&idx=1&sn=8724d38ebcfdd0697c212e18d90a34a3)\n - [ ] [【安全圈】短视频平台“封号圈”乱象猖獗，IP查询如何助力防范](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=1&sn=77b78d28e626bb57cf51f82d0c472aa6)\n - [ ] [【安全圈】俄罗斯黑客利用 7-Zip 零日漏洞攻击乌克兰](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=2&sn=634853ba2d9852cc240a7d5d46ce82c5)\n - [ ] [【安全圈】微软发现用于加密货币盗窃的 XCSSET macOS 恶意软件变种](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=3&sn=b875bcdbb815582bbc7966d6ebc3a164)\n - [ ] [【安全圈】马斯克与 OpenAI 的交锋：收购提案遇冷，立场分歧引争议](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=4&sn=38c4e0921e00478f77d52173d75865fa)\n - [ ] [TimelineSec助力顺丰SRC第三届白帽技术沙龙活动，预约已开启！](https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497142&idx=1&sn=3f5b46d1df2a8f6f8bec1b43e632f71f)\n - [ ] [XPSRC助力|顺丰SRC第三届白帽技术沙龙预约开启！](https://mp.weixin.qq.com/s?__biz=MzkzNTY5MTQ1NA==&mid=2247484065&idx=1&sn=81bf7598983b7b2094d08d4fa6f19fff)\n - [ ] [启明星辰发布大模型应用安全“新三件套”，奠基“后DeepSeek智能时代”的安全基石](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=1&sn=5b672ecff51556db43509b5c84cb09dd)\n - [ ] [专家解读 | 出台《个人信息保护合规审计管理办法》 为数字经济持续健康发展保驾护航](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=2&sn=19ef83d5756ac4b267766ce1434e8a5b)\n - [ ] [前沿 | 排他性思路违背全球AI发展潮流](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=3&sn=536c842056b617da26b3a83cf09b195d)\n - [ ] [评论 | 算法更透明 公众更安心](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=4&sn=25460fdc26dd1f8b0aea2a356f01bf64)\n - [ ] [关注 | 用行动落实打击电诈的共同意愿](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=5&sn=6a708c7814d057322cbf80593342a4f1)\n - [ ] [观点 | MCN机构要走规范化发展之路](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=6&sn=4558e8136659bdfcaf2dde736f38b77e)\n - [ ] [评论 | 营造有利于青少年成长成才的良好信息环境](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=7&sn=eb5a761b2a5d240d86a28fdccf3b8a63)\n - [ ] [为什么运营商“沉迷”做总包、总集？](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=1&sn=cd835808ada01d35850bdcc5c59611eb)\n - [ ] [北七家-未来科学城,3居变4居豪装,理想楼层/户型/朝向](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=2&sn=fa2cefbe0f44ae8f576af68d7c075e80)\n - [ ] [【0.9元】德银重磅：中国鲸吞世界！全文和翻译！](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=3&sn=f452879eebc1ec28ccd0516533798c3d)\n - [ ] [【干货】笑傲职场的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=4&sn=614d3e17ec92cd87c0d610fbf4fb17fa)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=5&sn=0a8eeadf2aaa25d2d65ee6acc2806427)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=6&sn=a4a15902985ab471b071ee9426d451ea)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=7&sn=38e7919f220cac38a2494162456e2095)\n - [ ] [Merlin后渗透利用框架之Merlin Agent远控木马剖析](https://mp.weixin.qq.com/s?__biz=MzAwNDUzNDExMQ==&mid=2247485192&idx=1&sn=751f75626f62cc4463141c4cefa3b97f)\n - [ ] [继上次ollama自由后，又一次自由……](https://mp.weixin.qq.com/s?__biz=MzAxMDQxODk4NQ==&mid=2247484364&idx=1&sn=6e261738ce559083feb198bd1fcef489)\n - [ ] [顺丰SRC第三届白帽技术沙龙预约开启！](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541606&idx=1&sn=012be792517f5ee11d9feac39ffe3b74)\n - [ ] [等保测评||达梦数据库作业指导书](https://mp.weixin.qq.com/s?__biz=MzIwNDYzNTYxNQ==&mid=2247502632&idx=1&sn=97e84602de7606f21d45a215ee2f52bc)\n - [ ] [美国政府：开发人员应停止制造“不可原谅的”缓冲溢出漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=1&sn=f4ba8096e5c48add46aab6c9f0f9b6db)\n - [ ] [VeraCore 两个0day漏洞被用于实施供应链攻击](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=2&sn=9b28d0ae22a8aee011365d83bbe3e244)\n - [ ] [超级CSO研修班 | 杜跃进：未来安全的核心是能力](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636358&idx=1&sn=87ce38dc5d636b8975a99ca7305f711d)\n - [ ] [LockBit死而不僵，仍不断有“帮凶”落网](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636358&idx=2&sn=a82d0bc18938a4a50fd92369e0d58673)\n - [ ] [韩国暂停DeepSeek下载，称其侵犯隐私](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636358&idx=3&sn=32666d76e53892b54705fb8386f4bc8b)\n - [ ] [【资讯】山东省大数据局印发《山东省公共数据开放工作细则》](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247549835&idx=1&sn=4301f3fc724332d16aaeff001f9b5b2d)\n - [ ] [【资讯】云南省通管局印发《云南省电信领域数据安全风险评估实施细则（试行）》](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247549835&idx=2&sn=eb917c98028b4f355c0ac073a9c23a7f)\n - [ ] [【资讯】绍兴市政府办公室印发《绍兴市加快制造业数字化转型行动方案》](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247549835&idx=3&sn=b8dc9888890b753dbb2f5c2a66f5e1b2)\n - [ ] [国家公共数据资源登记平台将于3月1日正式上线试运行](https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448683184&idx=1&sn=c8520840f07b17a90a9b3252d5c70ae0)\n - [ ] [Grok-3正式发布！马斯克：“地球上最聪明的AI”](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247550522&idx=1&sn=d74d75abf3ff7ca922176ac61326b9fb)\n - [ ] [AutoSec年会专家确认 | F5：全球多云环境下的合规遵从和统一安全治理](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247550522&idx=2&sn=5b6c7862384ae75a6909c706728520ba)\n - [ ] [独家首发，免费｜Trae 从入门到实践，开启 AI 编码新征程！](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513387&idx=1&sn=ce7672590c2cd60a22e9b620dcbdcfca)\n - [ ] [DeepSeek重构智能运维和安全运营](https://mp.weixin.qq.com/s?__biz=MzA4Mzg1ODIzMw==&mid=2653545935&idx=1&sn=7e68e08b429b85ade74986b62e3d22dd)\n - [ ] [BSSRC助力 | 顺丰SRC第三届白帽技术沙龙预约开启！](https://mp.weixin.qq.com/s?__biz=MzkyODIwNDI3NA==&mid=2247486170&idx=1&sn=9287f9f60bd2d701fe1d1d4ba26f3f42)\n - [ ] [AI聊天还能用，但下载按钮灰了！韩国给DeepSeek划下\\\"红线\\\"](https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488538&idx=1&sn=7d2b1822bf137d6a59722d0ff454db32)\n - [ ] [学术前沿 | 华南师范大学密码学与信息安全团队：白盒密码实现的侧信道分析技术综述](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505072&idx=1&sn=9f910b3ab2a5ccd60b3e071af3e4aaa7)\n - [ ] [官方机构提示仿冒DeepSeek手机木马病毒肆虐！梆梆安全为您的移动应用保驾护航！](https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135338&idx=1&sn=94642b4d6d742c855af4c615b6c2c399)\n - [ ] [企业级EDR实施技术指南：十大关键要素深度解析](https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489351&idx=1&sn=3da833b6858ec815c4acd2bffbdb5f69)\n - [ ] [雨水｜甘雨时降 万物以嘉](https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135338&idx=2&sn=33cd10d5c79ebcefca7db1364a627025)\n - [ ] [大模型背景下生成式AI带来的网络安全威胁应对](https://mp.weixin.qq.com/s?__biz=Mzg2MDY0MjQwMw==&mid=2247494317&idx=1&sn=e67cb658cf43995bd5c239ca54c97c7f)\n - [ ] [旅行APP流程分析（TCP+protobuf）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=1&sn=e1354617c606204a98db2a1960b7647d)\n - [ ] [立即预约！顺丰SRC第三届白帽技术沙龙即将开启](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=2&sn=278b59f239fe65d5cfe07f93ecaa636e)\n - [ ] [ChatGPT Operator 遭提示注入攻击](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=3&sn=a005da20fc0a49c5e16d1ada1109ad46)\n - [ ] [《科学数据安全分类分级指南》等5项国家标准发布](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931568&idx=1&sn=717c83d99ebeb4b1ad0806e4de9f8f6d)\n - [ ] [韩国称DeepSeek与字节跳动共享数据？我外交部回应；美国国防部一承包商和一大型金融机构虚拟专用网络疑被攻破 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=1&sn=265652c42964cda677cb67cdd3409cb8)\n - [ ] [应对高级勒索软件攻击，你需要关注这7项技术手段](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=2&sn=47591d1505f32bcf70149d3a92cd8961)\n - [ ] [勒索软件攻击加速：从潜伏到“打砸抢”式入侵 企业防御面临新挑战](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247546921&idx=1&sn=2545d75b63623d7a78c2e5e708fcab02)\n - [ ] [深度测评 | AI引领安全运营提升用户使用感受及分析处置能力](https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247506691&idx=1&sn=06af6565c9541f1ac54a40b8ee0ad97a)\n - [ ] [突破 | 中国电信安全天地一体化网络安全领域研究成果入选国际顶级期刊](https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247533100&idx=1&sn=8561e9f4008f89b213c2c57003b546ab)\n - [ ] [Grok-3“最聪明AI”来了！为您整理发布会重点及当下明星AI产品](https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496639&idx=1&sn=ebd1da91dd9c3743289106d6c491a062)\n - [ ] [获奖公布 | 网安加社区元宵灯谜竞猜活动获奖名单公布！](https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247523961&idx=1&sn=ce71c7021d7bd63e842ff1d81f521961)\n - [ ] [培训招募中！CISAW灾难备份与恢复](https://mp.weixin.qq.com/s?__biz=MzU0Mzk0NDQyOA==&mid=2247521403&idx=1&sn=06480e6a0ed6208d43b642e1dc74569c)\n - [ ] [飞天诚信、小米等入选北京市商业秘密保护示范基地](https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649876752&idx=1&sn=79b42426d9a8bc2fde0c44947ad71d77)\n - [ ] [论文速递 | 智能网联汽车网络信息安全综述](https://mp.weixin.qq.com/s?__biz=Mzg5NDczNDc4NA==&mid=2247495478&idx=1&sn=ca8a1aaa0f4f8a0953c8f5688edc8439)\n - [ ] [甲方乙方视角剖析：信安通用三认证，如何抉择才不亏](https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247516067&idx=1&sn=858499704f81840848f3c78c36fd8bd1)\n - [ ] [职场人的精神brunch|说几个对数据安全从业者友好的证书](https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247516067&idx=2&sn=97de123527d3b7627ea1ac87be96da4b)\n - [ ] [埃隆·马斯克的政府网站漏洞曝光，黑客留下嘲讽信息](https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486178&idx=1&sn=0582e8fd5a1c4aa57ec6fab589ffa06d)\n - [ ] [解锁高能，秒变渗透高手](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553681&idx=1&sn=a2dd04fdc8069d3d7cbd47d8fa276169)\n - [ ] [【免费领】近400页！SQL注入攻击与防御策略大全](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553681&idx=2&sn=a454fa2b8c0f9b1231f8e5d45959d0c1)\n - [ ] [敢挑战吗？蚂蚁国际要的就是你！](https://mp.weixin.qq.com/s?__biz=MzI3NDEzNzIxMg==&mid=2650492397&idx=1&sn=0c4d95bf831194932a3c8e4ec57c721e)\n - [ ] [走向卓越丨2025，对您的未来许下承诺](https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492403&idx=1&sn=f7a256cfeab0b700ae77b9b52b57c6ec)\n - [ ] [网络安全动态 - 2025.02.18](https://mp.weixin.qq.com/s?__biz=MzU1MzEzMzAxMA==&mid=2247499921&idx=1&sn=dd53eca4974397a099fb2c0461221fc0)\n - [ ] [【渗透测试Top10漏洞详解·萌新友好版（上）】黑客最爱的5大漏洞竟是这些？](https://mp.weixin.qq.com/s?__biz=Mzk1NzI5MTc0Nw==&mid=2247485048&idx=1&sn=70c9a4aed11e2474656cc9141ff44488)\n - [ ] [360SRC助力 | 顺丰SRC第三届白帽技术沙龙预约开启！](https://mp.weixin.qq.com/s?__biz=MzkzOTIyMzYyMg==&mid=2247494998&idx=1&sn=c28dfd53a667692becafd42ff90f0bdd)\n - [ ] [好书推荐 | 数字化转型安全根基，硬件安全攻防实战指南](https://mp.weixin.qq.com/s?__biz=MzkzOTIyMzYyMg==&mid=2247494998&idx=2&sn=b6655366fc7c96b81815be8bcaa35e43)\n - [ ] [「招聘」长亭科技-内推码](https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486890&idx=1&sn=aa3d1c7a1d959391c51f401ce54ff9a0)\n - [ ] [【知道创宇404实验室】本地化 AI 审计工具落地小试牛刀](https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870976&idx=1&sn=532f0cf3ec728a9abfa1fecbfab03268)\n - [ ] [“新春第一课”，DeepSeek席卷政务系统](https://mp.weixin.qq.com/s?__biz=MzI3MDY0Nzg1Nw==&mid=2247489502&idx=1&sn=49c20331256f1c7843ca92f5abe15275)\n - [ ] [AI 与隐私悖论：在数据浪潮中寻找平衡](https://mp.weixin.qq.com/s?__biz=MzI3MDY0Nzg1Nw==&mid=2247489502&idx=2&sn=1159e25e2a14b93fc07abf733c9adf0d)\n - [ ] [互联网和人工智能会影响我们的记忆吗？科学怎么说？](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619275&idx=1&sn=49f6b6b8186ed70e29dbf21fc0a55d00)\n - [ ] [美国xAI公司发布AI模型Grok 3，部分功能性能超越OpenAI、DeepSeek相关模型](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619275&idx=2&sn=df636eefa3f94db514cc271d09c8267a)\n - [ ] [海外研究｜国外人工智能热点安全技术发展情况研究](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597829&idx=1&sn=7caaef0c1a1f694359e7dbe9673b2136)\n - [ ] [特色专题 | 基于混沌映射和NFSR的16比特动态S盒构造方法](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597829&idx=2&sn=935bc30bbc576877560381a3ad325e24)\n - [ ] [默安科技两度荣膺“浙江省软件核心竞争力企业”](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597829&idx=3&sn=f63629da6856652881dd72f692d1e269)\n - [ ] [雷神众测漏洞周报2024.2.10-2024.2.16](https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503318&idx=1&sn=b5b13cfc554a840876a561de454e8f7e)\n - [ ] [“硅基生命”的崛起，碳基生命的挑战：AI的伦理与安全边界](https://mp.weixin.qq.com/s?__biz=MzkwMTM5MDUxMA==&mid=2247504042&idx=1&sn=e60dd68fdcb43ee4273cbd208b5ce8f1)\n - [ ] [SEAMFUZZ：灰盒模糊测试的学习种子自适应突变策略](https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247486942&idx=1&sn=d249d0aa9047c41d34cb0da0cb74053b)\n - [ ] [AI 重塑国家安全格局：机遇与挑战并存](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247529179&idx=1&sn=f0a1963cefd524f87ea8286a30cfd630)\n - [ ] [科技动态｜英国发布全球首个人工智能安全标准](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247529179&idx=2&sn=a530a0a4bf56c6d58569f6d015816c9d)\n - [ ] [益生菌能提高运动成绩吗？](https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485851&idx=1&sn=ea0ba6fa83bc28e5ae13ca0fd8eb82b3)\n - [ ] [点击劫持与双击劫持](https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485479&idx=1&sn=6086c9a3c256df6bb971fc5a86f652e4)\n - [ ] [《2025Hvv 行动集训营，紧跟热点潮流，带你 1 个月突破网络安全防线，实现薪资逆袭！ 》](https://mp.weixin.qq.com/s?__biz=Mzg3MTUyNjkwNA==&mid=2247484287&idx=1&sn=ebf831861225afe20f3c6990e6173bff)\n - [ ] [2025数字中国创新大赛·数字安全赛道时空数据安全赛题等你来战！](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247491931&idx=1&sn=8748a773257b0ff5b9d92455e3a96528)\n - [ ] [报名即将截止 | “网谷杯”信创应用软件网络安全攻防大赛](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247491931&idx=2&sn=81b4c20f905b01e807d5a520de212ca2)\n - [ ] [解锁安全研究新姿势：DeepSeek 本地部署指南](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247492941&idx=1&sn=476fc818f0028dad0a4bff3c74c59c09)\n - [ ] [如何借力AI促进网络安全文化建设？](https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247484821&idx=1&sn=576dcd8f20191c91171e92b96396f667)\n - [ ] [为何数学会出现虚数i这无意义的符号？](https://mp.weixin.qq.com/s?__biz=MzIxNTM3NDE2Nw==&mid=2247490341&idx=1&sn=9d16eefe20cca638ffb901bcf8d4253f)\n - [ ] [美俄会谈结束俄乌战争，为何要选在沙特进行？](https://mp.weixin.qq.com/s?__biz=MzkxMTA3MDk3NA==&mid=2247487198&idx=1&sn=920bc7bd62ab08726141df8a37133eeb)\n - [ ] [微信接入DeepSeek！可惜87%的IT人还不会高效利用它...](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571133&idx=1&sn=4cb9c4b4b7bca014e94cf6c93bee83b0)\n - [ ] [一款Windows GUI界面的渗透测试工具箱-V1.1（更新）](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571133&idx=2&sn=2b97b09c38d3658ada05deddb2b56617)\n - [ ] [『CTF』密码学-一道LFSR](https://mp.weixin.qq.com/s?__biz=Mzg4NTA0MzgxNQ==&mid=2247489904&idx=1&sn=1c0472deec7bd1db7d35ca3ec02216cf)\n - [ ] [国家安全部提醒：这些随处可见的设备，也可能有风险！](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170858&idx=1&sn=24cbb4ccb5e3ed8603ee8f469b55a71a)\n - [ ] [马斯克口中“最聪明AI”，Grok 3正式发布](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170858&idx=2&sn=0eef501df2b4e2e40f8767f11fe65453)\n - [ ] [【2025春节】解题领红包之番外篇writeup](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141800&idx=1&sn=ce4fbd9d5e88415d4d773b2501fe657d)\n - [ ] [DeepSeek浪潮之下，安全暗礁逐渐显现](https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650465264&idx=1&sn=e64e6f0cc1955816c5cda713594ab2c3)\n - [ ] [预约开启！BUGBANK助力顺丰SRC第三届白帽技术沙龙](https://mp.weixin.qq.com/s?__biz=MzAxODg1MDMwOQ==&mid=2247507752&idx=1&sn=f2713e90546e22c6cdfc33eb6e40b103)\n - [ ] [揭晓｜2025年网络安全十项发展趋势预测](https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247486831&idx=1&sn=edd41385bacb72e6f559fd94dd323098)\n - [ ] [冰雪同梦 网安铸盾丨迪普科技助力2025亚冬会圆满完成](https://mp.weixin.qq.com/s?__biz=MzA4NzE5MzkzNA==&mid=2650371663&idx=1&sn=5978913cf66a2bce8e6d23a890b999ba)\n - [ ] [【渗透干货】Apache Tomcat弱口令批量检测利用工具](https://mp.weixin.qq.com/s?__biz=MzIxOTk0ODY0NQ==&mid=2247485428&idx=1&sn=1d21795f59bb1a32ba9f23da0a4a7781)\n - [ ] [安全简讯（2025.02.18）](https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500752&idx=1&sn=aee35d6ecb95122bbaa6dd9b86ee7c72)\n - [ ] [网安行业互助文档，又来了](https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500642&idx=1&sn=c2b2eb6863906fe6e431165b2b9ab48c)\n - [ ] [【靶场手记】JARBAS：细节决定攻击链，boot2root的重要拼图](https://mp.weixin.qq.com/s?__biz=MzUyMTE0MDQ0OA==&mid=2247494122&idx=1&sn=49888cf816741a3e5dadb6e96373c763)\n - [ ] [新媒体人必备神器！一键发布公众号文章不是梦](https://mp.weixin.qq.com/s?__biz=Mzg2MTc0NTYyNg==&mid=2247486911&idx=1&sn=efd65ddc3598f81bb149766952fa9ba8)\n- GuidePoint Security\n - [ ] [GRIT’s 2025 Report: Ransomware Group Dynamics and Case Studies](https://www.guidepointsecurity.com/blog/grit-2025-ransomware-group-dynamics-and-case-studies-understanding-the-threat-landscape/)\n- SpiderLabs Blog\n - [ ] [The Rise of Email Marketing Platforms for Business Email Compromise Attacks](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/the-rise-of-email-marketing-platforms-for-business-email-compromise-attacks/)\n- Horizon3.ai\n - [ ] [Fireside Chat: Horizon3.ai and Jerome’s Furniture](https://www.horizon3.ai/intelligence/webinars/fireside-chat-horizon3-ai-and-jeromes-furniture/)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [I Pasted a Simple HTML Code on BookMyShow… and Got ₹1000 for It!](https://infosecwriteups.com/i-pasted-a-simple-html-code-on-bookmyshow-and-got-1000-for-it-26313f0e2115?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [HTMLI to ATO leads to $$$ bounty](https://infosecwriteups.com/htmli-to-ato-leads-to-bounty-9725cb23a67c?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [How I Bypassed BookMyShow’s OTP Limit with Just a Space & Got ₹1000 for It!](https://infosecwriteups.com/how-i-bypassed-bookmyshows-otp-limit-with-just-a-space-got-1000-for-it-70eab29fb6aa?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Zoho Account Takeover: How a Single Click Can Lead to Full Control over your Zoho account](https://infosecwriteups.com/zoho-account-takeover-how-a-single-click-can-lead-to-full-control-over-your-zoho-account-cd6f0c245272?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [No email verification leads to an Oauth account takeover.](https://infosecwriteups.com/no-email-verification-leads-to-an-oauth-account-takeover-02eb30496939?source=rss----7b722bfd1b8d--bug_bounty)\n- Malwarebytes\n - [ ] [Hard drives containing sensitive medical data found in flea market](https://www.malwarebytes.com/blog/news/2025/02/hard-drives-containing-sensitive-medical-data-found-in-flea-market)\n- Securelist\n - [ ] [StaryDobry ruins New Year’s Eve, delivering miner instead of presents](https://securelist.com/starydobry-campaign-spreads-xmrig-miner-via-torrents/115509/)\n- Reverse Engineering\n - [ ] [ImHex - A Binary Data Reverse Engineering Toolkit | New v1.37.X Release with HiDPI support and tons of other UX improvements](https://www.reddit.com/r/ReverseEngineering/comments/1isddf7/imhex_a_binary_data_reverse_engineering_toolkit/)\n - [ ] [A HuggingFace space for testing the LLM4Decompile 9B V2 model for refining Ghidra decompiler output](https://www.reddit.com/r/ReverseEngineering/comments/1isegar/a_huggingface_space_for_testing_the_llm4decompile/)\n - [ ] [Z x86_64 Linux Anti-Anti-Debugger: Bypass Anti-Debugging in Protected Binaries with User-Supplied LD_PRELOAD Libraries](https://www.reddit.com/r/ReverseEngineering/comments/1isnvsn/z_x86_64_linux_antiantidebugger_bypass/)\n - [ ] [Everyday Ghidra: How Platform Choice Influences Ghidra’s Binary Analysis](https://www.reddit.com/r/ReverseEngineering/comments/1isfze3/everyday_ghidra_how_platform_choice_influences/)\n - [ ] [An introduction to LLVM IR](https://www.reddit.com/r/ReverseEngineering/comments/1is7rzo/an_introduction_to_llvm_ir/)\n - [ ] [Arechclient2 (sectopRAT) Analysis – A Highly Obfuscated .NET RAT with Malicious Chrome Extension](https://www.reddit.com/r/ReverseEngineering/comments/1isaavt/arechclient2_sectoprat_analysis_a_highly/)\n- daniel.haxx.se\n - [ ] [Changing every line three times](https://daniel.haxx.se/blog/2025/02/18/changing-every-line-three-times/)\n- Twitter @James Kettle\n - [ ] [Re @Freyxfi Nah it's a lot of work, I'd rather be doing research. I do maintain a playlist of all our research though. https://www.youtube.com/playlis...](https://x.com/albinowax/status/1891867917760778324)\n - [ ] [Re You can find the show notes & links at https://www.scworld.com/podcast-show/application-security-weekly](https://x.com/albinowax/status/1891861901803430192)\n - [ ] [Catch the inside story on the Top Ten Web Hacking Techniques in my interview with the Application Security Weekly podcast https://youtu.be/8XEK3NkbKOA](https://x.com/albinowax/status/1891861705652645990)\n- rtl-sdr.com\n - [ ] [ESPARGOS: An ESP32 Phased Array for Seeing WiFi](https://www.rtl-sdr.com/espargos-an-esp32-phased-array-for-seeing-wifi/)\n - [ ] [Saveitforparts: Listening in on Russian Soldiers Hijacking US Military Satellites](https://www.rtl-sdr.com/saveitforparts-listening-in-on-russian-soldiers-hijacking-us-military-satellites/)\n- FreeBuf网络安全行业门户\n - [ ] [OpenSSH曝高危漏洞，可引发中间人攻击与DoS攻击](https://www.freebuf.com/vuls/422180.html)\n - [ ] [CVE-2016-4437（Shiro-550）漏洞简述](https://www.freebuf.com/vuls/422102.html)\n - [ ] [短视频平台“封号圈”乱象猖獗，IP查询如何助力防范](https://www.freebuf.com/news/422099.html)\n - [ ] [FreeBuf早报 | Palo Alto防火墙又被黑；微软投资7亿美元提升波兰网络安全](https://www.freebuf.com/news/422094.html)\n - [ ] [【黄金圆环】在研发领域的实践分享](https://www.freebuf.com/news/422069.html)\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗?](https://www.freebuf.com/sectool/422066.html)\n - [ ] [XCSSET信息窃取恶意软件卷土重来，针对macOS用户和开发者](https://www.freebuf.com/articles/422056.html)\n - [ ] [网络犯罪分子利用图片标签中的Onerror事件窃取支付信息](https://www.freebuf.com/articles/web/422085.html)\n - [ ] [当AI邂逅日志海：从骨感现实到无限可能](https://www.freebuf.com/news/422038.html)\n- Dhole Moments\n - [ ] [Reviewing the Cryptography Used by Signal](https://soatok.blog/2025/02/18/reviewing-the-cryptography-used-by-signal/)\n- 绿盟科技技术博客\n - [ ] [绿盟威胁情报周报（2025.02.10-2025.02.16）](https://blog.nsfocus.net/2025-02-10-2025-02-16/)\n- Shostack & Friends Blog\n - [ ] [A New Hope for Threat Modeling, on The CyberTuesday Podcast](https://shostack.org/blog/cybertuesday-podcast/)\n- 安全牛\n - [ ] [韩国称DeepSeek与字节跳动共享数据？我外交部回应；美国国防部一承包商和一大型金融机构虚拟专用网络疑被攻破 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=1&sn=265652c42964cda677cb67cdd3409cb8&chksm=bd15ac5d8a62254b382f53aeb16d3d10305ac645ba976317dd34d61c48682f2becea57e4d15f&scene=58&subscene=0#rd)\n - [ ] [应对高级勒索软件攻击，你需要关注这7项技术手段](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=2&sn=47591d1505f32bcf70149d3a92cd8961&chksm=bd15ac5d8a62254bdb882276f5ca5888b7b5e98968aadee2365824f305a7ca4b025fc91140ea&scene=58&subscene=0#rd)\n- 奇客Solidot–传递最新科技情报\n - [ ] [美国白领工人的工作面临风险](https://www.solidot.org/story?sid=80583)\n - [ ] [为什么吃饱之后仍然想吃甜食](https://www.solidot.org/story?sid=80582)\n - [ ] [OpenSUSE Tumbleweed 使用的 MAC 切换到 SELinux](https://www.solidot.org/story?sid=80581)\n - [ ] [青少年可能不适合断食](https://www.solidot.org/story?sid=80580)\n - [ ] [日本政府将重新发展核电](https://www.solidot.org/story?sid=80579)\n- 腾讯玄武实验室\n - [ ] [每日安全动态推送(25/2/18)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960026&idx=1&sn=a6b3b18c68a2a23dfb2c6854255e463f&chksm=8baed245bcd95b532bedc5b2e1788d0577db0211a5ed16b23d4e95cc7134302a9a803a17dfad&scene=58&subscene=0#rd)\n- 雷神众测\n - [ ] [雷神众测漏洞周报2024.2.10-2024.2.16](https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503318&idx=1&sn=b5b13cfc554a840876a561de454e8f7e&chksm=f2585ea5c52fd7b368ebc5c86a95e6425d2a601f7df5519e543aa82f70e7d68e5de1882a350e&scene=58&subscene=0#rd)\n- 看雪学苑\n - [ ] [旅行APP流程分析（TCP+protobuf）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=1&sn=e1354617c606204a98db2a1960b7647d&chksm=b18c2aaa86fba3bc25d1d7e3d341a334fb0b35e4f4b63591cdb6b0749c7030212ba278bab9c5&scene=58&subscene=0#rd)\n - [ ] [立即预约！顺丰SRC第三届白帽技术沙龙即将开启](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=2&sn=278b59f239fe65d5cfe07f93ecaa636e&chksm=b18c2aaa86fba3bcedd2b8d75f3dfa777e55c1a4767c45b6a015e7d97213b67b22e727e8ac68&scene=58&subscene=0#rd)\n - [ ] [ChatGPT Operator 遭提示注入攻击](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=3&sn=a005da20fc0a49c5e16d1ada1109ad46&chksm=b18c2aaa86fba3bc13efec4f0ade8cc48cb172e9486d09bd97b185c29dea9d667a9327beb034&scene=58&subscene=0#rd)\n- 吾爱破解论坛\n - [ ] [【2025春节】解题领红包之番外篇writeup](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141800&idx=1&sn=ce4fbd9d5e88415d4d773b2501fe657d&chksm=bd50a6fc8a272fea1d4e9755a365a519da26d3cd87eed14b4e0059d95b6951e0538608dced32&scene=58&subscene=0#rd)\n- 安全分析与研究\n - [ ] [TransparentTribe(透明部落) APT组织CrimsonRAT远控样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490574&idx=1&sn=01ffe4798637dd2465d3d3b7171b4aaa&chksm=902fb326a7583a30c4e61dde6527c7b77143024a1e40892601805568b72d1d1f9e9bb791b8f8&scene=58&subscene=0#rd)\n- 威努特安全网络\n - [ ] [威努特海上平台智算中心，助力海上油田智能化转型](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131173&idx=1&sn=ecda2cfd067a5213307b305e9e0616eb&chksm=80e71795b7909e835093c15ff3f9333b9413af6dd919217c768e638a49f1469eb115225f1425&scene=58&subscene=0#rd)\n- 暗影安全\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗？](https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165657&idx=1&sn=c6c0514ec5ae2bdece02b895469bacf8&chksm=f1d4d3bcc6a35aaa19cb47abfe0f407db4b4c97464d6c69e5de1ea2656b2044891a291847f6e&scene=58&subscene=0#rd)\n- 信安之路\n - [ ] [高效检测 SQL 注入漏洞，自动化实战经验分享](https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499808&idx=1&sn=1c6724f7a6565b221b60843413d36b8a&chksm=ec1df008db6a791e8fc2c1cc0d8c4d81737f1e79e1f95761924835b7161ff5f21f80c0724268&scene=58&subscene=0#rd)\n- ChaMd5安全团队\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗？](https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247511991&idx=1&sn=c40bb92defdfa8105881c5b26bec8c78&chksm=e89d876fdfea0e79ef69c60bce53d83d5cb023fdb5364f481f6ded6ab799ba1431fd8b880d11&scene=58&subscene=0#rd)\n- 安全内参\n - [ ] [新一轮勒索潮来了？超级勒索软件组织宣布攻陷47家企业](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513762&idx=1&sn=62912b605c08b523f4aa7e56733c954a&chksm=ebfaf182dc8d78945f71786a16c4ac7b798ea5e0444b31a8c9f9a73e58423bc65c0660459848&scene=58&subscene=0#rd)\n - [ ] [美国会拟立法：将太空系统作为关基设施进行保护](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513762&idx=2&sn=7915c55f55994f07201c25420d94731a&chksm=ebfaf182dc8d7894dada7eb2437159773a0c1e0a7ca77d79cdf630a59ca3b0dae9d500cd6078&scene=58&subscene=0#rd)\n- 安全实践\n - [ ] [2025开始资产配置，年终一起复盘](https://mp.weixin.qq.com/s?__biz=MzI5NzAzMDg0NA==&mid=2650698012&idx=1&sn=6bd707b9f86353bd96b581568133c700&chksm=f4b194cfc3c61dd9ef8285010597b71b0b7f6d17abf7c2c1896399a9c4fc9f728e59a79dde68&scene=58&subscene=0#rd)\n- Hacking就是好玩\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗？](https://mp.weixin.qq.com/s?__biz=MzU2NzcwNTY3Mg==&mid=2247485334&idx=1&sn=688a9c353d4c7b1232685404fc6ae399&chksm=fc986eb1cbefe7a78b8711640338b4f926f4cf1ef350bdf53fd64b8bcaf18e241a4417302a6a&scene=58&subscene=0#rd)\n- dotNet安全矩阵\n - [ ] [.NET 通过代码审计发现某 OA 系统全局性权限访问绕过漏洞](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498952&idx=1&sn=a08ebc1ce872683b07a16218dbcbc8e9&chksm=fa595225cd2edb33e2e0624ce93a8e1ad168afdaa762794a6062913e3d523289e1c16b3749af&scene=58&subscene=0#rd)\n - [ ] [.NET 安全攻防知识交流社区](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498952&idx=2&sn=a49e296419efabfbbbd89e3d51b8f18c&chksm=fa595225cd2edb334d39bed36f3d337a32ffcc250236a2dbf423b8eb4df9f9a9bcf4b275fc4b&scene=58&subscene=0#rd)\n - [ ] [一款通过调用Windows系统白名单文件执行PowerShell命令的工具](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498952&idx=3&sn=0bc91a522aca2f82d80edd2ae8742b71&chksm=fa595225cd2edb334536e258879a68a047f596ceb038b58f5a2df7ca33fb7642059e0b39c1a6&scene=58&subscene=0#rd)\n- 信息安全国家工程研究中心\n - [ ] [雨水 | 春雨滋养万物昌](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498870&idx=1&sn=2f2a11a83b3ebffd73e6da5f2b1e1fc2&chksm=feb67d65c9c1f47370aadc92070d2f9e422b734e3eb6674caf2c682c8b9110bccd4d0d9ca823&scene=58&subscene=0#rd)\n- 安全圈\n - [ ] [【安全圈】短视频平台“封号圈”乱象猖獗，IP查询如何助力防范](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=1&sn=77b78d28e626bb57cf51f82d0c472aa6&chksm=f36e7462c419fd74ab3906ce860f6440680390728f5808049a4037668b474c84037d2686cce6&scene=58&subscene=0#rd)\n - [ ] [【安全圈】俄罗斯黑客利用 7-Zip 零日漏洞攻击乌克兰](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=2&sn=634853ba2d9852cc240a7d5d46ce82c5&chksm=f36e7462c419fd74d29690ade86cd94c8f1353765e594a85d6f64779b2262b4aad515e3ff40c&scene=58&subscene=0#rd)\n - [ ] [【安全圈】微软发现用于加密货币盗窃的 XCSSET macOS 恶意软件变种](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=3&sn=b875bcdbb815582bbc7966d6ebc3a164&chksm=f36e7462c419fd74485e8ebdb3defa2fd94bb38ffe4cb647dd2e95a725273325e9a817afdddb&scene=58&subscene=0#rd)\n - [ ] [【安全圈】马斯克与 OpenAI 的交锋：收购提案遇冷，立场分歧引争议](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=4&sn=38c4e0921e00478f77d52173d75865fa&chksm=f36e7462c419fd743b5d8bf833ed7ec62a44e52917a3582cb5cd430619c335622558e4ec296b&scene=58&subscene=0#rd)\n- 数世咨询\n - [ ] [《全球数据泄露态势月度报告》（2025年1月）| 附下载地址](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247536793&idx=1&sn=cfd0b0c45c95f14ab3bb11106fcca468&chksm=c1442224f633ab32c95ea0c4ff07909c8342e3cd1c98d6b062e4db40bfaed538284513e50aab&scene=58&subscene=0#rd)\n- 知道创宇404实验室\n - [ ] [原创 Paper | 本地化 AI 审计工具落地小试牛刀](https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990663&idx=1&sn=d3612bcdf320efdc783e5740d519c69d&chksm=8079aa75b70e2363a96c1c2318ebdea7a8fda22f5029416d80c2a7cc641c0ee2e3d263c0c79b&scene=58&subscene=0#rd)\n- 安全学术圈\n - [ ] [特拉维夫大学 | FlowPic：一种通用的加密流量分类与应用识别表示方法](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491689&idx=1&sn=17687d1be26ab151a1e6d49e00a734e0&chksm=fe2d1fe2c95a96f4eddee949c7d9d669df8708caae70eb5e9a9a18eecf15d90eca0995d9c83a&scene=58&subscene=0#rd)\n- 代码卫士\n - [ ] [美国政府：开发人员应停止制造“不可原谅的”缓冲溢出漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=1&sn=f4ba8096e5c48add46aab6c9f0f9b6db&chksm=ea94a6bbdde32fad212f6cefd231e991e6b3aa181b89c3c4f8942edda2b8c87b959349dba3ab&scene=58&subscene=0#rd)\n - [ ] [VeraCore 两个0day漏洞被用于实施供应链攻击](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=2&sn=9b28d0ae22a8aee011365d83bbe3e244&chksm=ea94a6bbdde32fad583ad06bb5abe8c191b454c50e40661e1fbba804d5ae0e3a6d9cc4164ad8&scene=58&subscene=0#rd)\n- 微步在线\n - [ ] [突破千亿美元！CrowdStrike的顶级理解](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183152&idx=1&sn=c8baea3e5fbf8adbb58445304f3160fc&chksm=f4486e4cc33fe75a6889fd4400798823026225a843573abb95eeaf128a8025fb1257177f52cb&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [Grok3 来了，马斯克笑了，网站崩溃了](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073974&idx=1&sn=4f0cc225c27656ce2828992ef9f4579f&chksm=7e57cf8049204696cef80385843a3db30affa86ff2e1bb75b1f5dd335558ecf86ab9850e55b9&scene=58&subscene=0#rd)\n - [ ] [「9块9」 的中国 AI 耳机，疯狂收割老外](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073960&idx=1&sn=5c2319c04fa976eb3be557d768a9a010&chksm=7e57cf9e49204688c19df3ddedef1a50b0aceff13682d3a08edbe326dc7321389a3bde5b05f6&scene=58&subscene=0#rd)\n - [ ] [小米YU7续航820公里；OpenAI或发GPT-4.5狙击马斯克；DeepMind研究副总裁加盟字节跳动 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073947&idx=1&sn=459dcc6086a85c978352f0a5817f9305&chksm=7e57cfad492046bb7d901f0b9384f60e84bba68ff84cb391e50729b8e74d214a945b03eb56b3&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [马斯克Grok 3接入X平台：一场没有硝烟的“数据战争”，我们将如何突围？](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559771&idx=1&sn=7a1aa6dd145b6db21d216b962b96a900&chksm=87117b50b066f246e0ad0554e7d64caf1b6dfc17b0a9ce11e89802c0db324b1b567de7575e71&scene=58&subscene=0#rd)\n - [ ] [美国国务院全球人员名单数据分析与战略意图研判](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559771&idx=2&sn=5534a2140a7da0a950900b4c9dc705cb&chksm=87117b50b066f246924f5603e181a8b8b71e60e6e2d327882b25419e10813998b03f1a16b4d7&scene=58&subscene=0#rd)\n- 复旦白泽战队\n - [ ] [解锁安全研究新姿势：DeepSeek 本地部署指南](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247492941&idx=1&sn=476fc818f0028dad0a4bff3c74c59c09&chksm=fde86133ca9fe825e7b72423b6c538f0e2ac47d59a591854a3719f3d3b29f0c18e1347588af4&scene=58&subscene=0#rd)\n- 黑伞安全\n - [ ] [Run-llama/LlamaIndex 大模型框架提示词注入构造 sqli实现任意文件创建](https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489678&idx=1&sn=9039652d59a286b1904c7a3d68373f84&chksm=fb0295d6cc751cc001a871a2a515f11801be690b4da1548c74df06b4f971d46e06b94c132649&scene=58&subscene=0#rd)\n- 字节跳动技术团队\n - [ ] [独家首发，免费｜Trae 从入门到实践，开启 AI 编码新征程！](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513387&idx=1&sn=ce7672590c2cd60a22e9b620dcbdcfca&chksm=e9d37ec9dea4f7df39b5549782a0921ba94ce44b12aa184545d0e3be013b25b248d26446a04a&scene=58&subscene=0#rd)\n- 嘶吼专业版\n - [ ] [微软：黑客在设备代码钓鱼攻击中窃取电子邮件](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581190&idx=1&sn=4b0c5a0975729f23cbf0196d260df3cb&chksm=e9146e3cde63e72a6c68e3717252770ba4af7ddcd656d81e0e3220c3b6f769d7346e61b51764&scene=58&subscene=0#rd)\n - [ ] [中电安科|万事俱备，“职”等你来](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581190&idx=2&sn=23364da2fcdaabf3085192e999914d3a&chksm=e9146e3cde63e72ab1879f639dac35c0342e56bcff89c1ecee9b871e13927b415ddb571ad129&scene=58&subscene=0#rd)\n- 安全攻防团队\n - [ ] [腾讯云安全中心推出2025年1月必修安全漏洞清单](https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485049&idx=1&sn=2c3c26e2c4796c0f8af116747bc1187b&chksm=c2b1040ff5c68d1908d6d0b9c78e0d0ecc9ac81fef4dbf443c42b396962becfe491f85323aaa&scene=58&subscene=0#rd)\n- 渊龙Sec安全团队\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗？](https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485650&idx=1&sn=e20f3b5b3a27549b0f3549d813888c73&chksm=cfa49329f8d31a3f78eb1f422f41cb3c59ddc0d1b1539512d0abd1cbe344b61d6a114a7069a9&scene=58&subscene=0#rd)\n- 网络空间安全科学学报\n - [ ] [学术前沿 | 华南师范大学密码学与信息安全团队：白盒密码实现的侧信道分析技术综述](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505072&idx=1&sn=9f910b3ab2a5ccd60b3e071af3e4aaa7&chksm=e9bfc00edec84918e630b82f33309725ee168e285f72dac4e7a8adc24e86647dac879c47ccc1&scene=58&subscene=0#rd)\n- DEF CON Announcements!\n - [ ] [Franklin Project Hackers' Almanack from DEF CON 32!](https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20Hackers'%20Almanack.pdf)\n- TrustedSec\n - [ ] [Getting Started Using LLMs in Application Testing With an MVP](https://trustedsec.com/blog/getting-started-using-llms-in-application-testing-with-an-mvp)\n- Over Security - Cybersecurity news aggregator\n - [ ] [WinRAR 7.10 boosts Windows privacy by stripping MoTW data](https://www.bleepingcomputer.com/news/security/winrar-710-boosts-windows-privacy-by-stripping-motw-data/)\n - [ ] [Managed healthcare defense contractor to pay $11 million over alleged cyber failings](https://therecord.media/managed-health-tricare-false-claims)\n - [ ] [Cracked Garry’s Mod, BeamNG.drive games infect gamers with miners](https://www.bleepingcomputer.com/news/security/cracked-garrys-mod-beamngdrive-games-infect-gamers-with-miners/)\n - [ ] [Hackers use ‘sophisticated’ macOS malware to steal cryptocurrency, Microsoft says](https://therecord.media/hackers-use-macos-malware-to-steal-crypto)\n - [ ] [Venture capital giant Insight Partners hit by cyberattack](https://www.bleepingcomputer.com/news/security/venture-capital-giant-insight-partners-hit-by-cyberattack/)\n - [ ] [Microsoft reminds admins to prepare for WSUS driver sync deprecation](https://www.bleepingcomputer.com/news/microsoft/microsoft-reminds-admins-to-prepare-for-wsus-driver-sync-deprecation/)\n - [ ] [How Phished Data Turns into Apple & Google Wallets](https://krebsonsecurity.com/2025/02/how-phished-data-turns-into-apple-google-wallets/)\n - [ ] [Chinese hackers abuse Microsoft APP-v tool to evade antivirus](https://www.bleepingcomputer.com/news/security/chinese-hackers-abuse-microsoft-app-v-tool-to-evade-antivirus/)\n - [ ] [Ecuador's legislature says hackers attempted to access confidential information](https://therecord.media/ecuador-national-assembly-cyberattack)\n - [ ] [The people in Elon Musk’s DOGE universe](https://techcrunch.com/2025/02/18/the-people-in-elon-musk-doge-universe/)\n - [ ] [Hackers planted a Steam game with malware to steal gamers’ passwords](https://techcrunch.com/2025/02/18/hackers-planted-a-steam-game-with-malware-to-steal-gamers-passwords/)\n - [ ] [Juniper patches critical auth bypass in Session Smart routers](https://www.bleepingcomputer.com/news/security/juniper-patches-critical-auth-bypass-in-session-smart-routers/)\n - [ ] [New OpenSSH flaws expose SSH servers to MiTM and DoS attacks](https://www.bleepingcomputer.com/news/security/new-openssh-flaws-expose-ssh-servers-to-mitm-and-dos-attacks/)\n - [ ] [Cyberattack likely to have ‘material impact’ on media giant Lee Enterprises’ bottom line](https://therecord.media/cyberattack-lee-enterprises-news-media)\n - [ ] [Your Ultimate Guide to Online Brand Protection](https://bfore.ai/your-ultimate-guide-to-online-brand-protection/)\n - [ ] [Tulsi Gabbard ai vertici della National Intelligence: come cambia la cyber dei Servizi USA](https://www.cybersecurity360.it/news/tulsi-gabbard-ai-vertici-della-national-intelligence-come-cambia-la-cyber-dei-servizi-usa/)\n - [ ] [Compliance Isn’t Security: Why a Checklist Won’t Stop Cyberattacks](https://www.bleepingcomputer.com/news/security/compliance-isnt-security-why-a-checklist-wont-stop-cyberattacks/)\n - [ ] [L’ascesa di DeepSeek, la sfida della protezione di dati e AI nelle aziende](https://www.cybersecurity360.it/soluzioni-aziendali/lascesa-di-deepseek-la-sfida-della-protezione-di-dati-e-ai-nelle-aziende/)\n - [ ] [Dati personali pseudonimizzati e anonimi, la CNIL chiarisce bene la differenza](https://www.cybersecurity360.it/news/dati-personali-pseudonimizzati-e-anonimi-la-cnil-chiarisce-bene-la-differenza/)\n - [ ] [BforeAI Triumphs at CPX EMEA 2025 Innovation Sandbox Competition: Leading Preemptive Cyber Defense innovator secures top award](https://bfore.ai/bforeai-triumphs-at-cpx-emea-2025-innovation-sandbox-competition/)\n - [ ] [CERT-In Issues Critical Warning on Adobe Software Security Flaws](https://cyble.com/blog/cert-in-issues-critical-software-security-flaws/)\n - [ ] [CVE-2022-31631: High-Risk PHP Vulnerability Demands Immediate Patch](https://cyble.com/blog/cve-2022-31631-vulnerability-immediate-patch/)\n - [ ] [Lee Enterprises newspaper disruptions caused by ransomware attack](https://www.bleepingcomputer.com/news/security/lee-enterprises-newspaper-disruptions-caused-by-ransomware-attack/)\n - [ ] [Zhong Stealer Analysis: New Malware Targeting Fintech and Cryptocurrency](https://any.run/cybersecurity-blog/zhong-stealer-malware-analysis/)\n - [ ] [Quando l’“altro dipendente” diventa terzo: le responsabilità privacy nelle organizzazioni](https://www.cybersecurity360.it/legal/privacy-dati-personali/quando-laltro-dipendente-diventa-terzo-le-responsabilita-privacy-nelle-organizzazioni/)\n - [ ] [StaryDobry ruins New Year’s Eve, delivering miner instead of presents](https://securelist.com/starydobry-campaign-spreads-xmrig-miner-via-torrents/115509/)\n - [ ] [whoAMI, l’attacco di name confusion che sfrutta un errore di configurazione di AWS](https://www.securityinfo.it/2025/02/18/whoami-lattacco-di-name-confusion-che-sfrutta-un-errore-di-configurazione-di-aws/)\n - [ ] [Phishing sui motori di ricerca, l’esca è un PDF dannoso usato per rubare dati finanziari](https://www.cybersecurity360.it/news/phishing-sui-motori-di-ricerca-lesca-e-un-pdf-dannoso-usato-per-rubare-dati-finanziari/)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #752: Windows hello challenge part 3 fingerprints](https://www.hecfblog.com/2025/02/daily-blog-752-windows-hello-challenge.html)\n- Securityinfo.it\n - [ ] [whoAMI, l’attacco di name confusion che sfrutta un errore di configurazione di AWS](https://www.securityinfo.it/2025/02/18/whoami-lattacco-di-name-confusion-che-sfrutta-un-errore-di-configurazione-di-aws/?utm_source=rss&utm_medium=rss&utm_campaign=whoami-lattacco-di-name-confusion-che-sfrutta-un-errore-di-configurazione-di-aws)\n- 青藤智库\n - [ ] [企业级EDR实施技术指南：十大关键要素深度解析](https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489351&idx=1&sn=3da833b6858ec815c4acd2bffbdb5f69&chksm=fa58b57ccd2f3c6ab2cc18d4bf8ba912d182435ffce285f01c61664847b774308bde51ba5161&scene=58&subscene=0#rd)\n- ICT Security Magazine\n - [ ] [Il Divieto di TikTok, una panoramica approfondita](https://www.ictsecuritymagazine.com/articoli/divieto-di-tiktok/)\n - [ ] [Paragon: la vicenda dello spyware Graphite, i chiarimenti del Garante Privacy e il ruolo dell’ACN](https://www.ictsecuritymagazine.com/notizie/paragon-spyware-cyber/)\n - [ ] [Data Loss Prevention: Cause della perdita dei dati](https://www.ictsecuritymagazine.com/articoli/data-loss-cause/)\n- Full Disclosure\n - [ ] [Re: Netgear Router Administrative Web Interface Lacks Transport Encryption By Default](https://seclists.org/fulldisclosure/2025/Feb/14)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [https://SecTemplates.com - simplified, free open-source templates to enable engineering and smaller security teams to bootstrap security capabilities for their organizations, (Tue, Feb 18th)](https://isc.sans.edu/diary/rss/31696)\n - [ ] [ISC Stormcast For Tuesday, February 18th, 2025 https://isc.sans.edu/podcastdetail/9328, (Tue, Feb 18th)](https://isc.sans.edu/diary/rss/31694)\n - [ ] [ModelScan - Protection Against Model Serialization Attacks, (Mon, Feb 17th)](https://isc.sans.edu/diary/rss/31692)\n- 迪哥讲事\n - [ ] [Src第六期：稳住！别浪~](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497153&idx=1&sn=4d60c3c89eae0138d75f829c8f433627&chksm=e8a5ffa2dfd276b4b72173a26423b9e4b16176518083fc9c8188c76ec87d102ec8c7bf8b5b0d&scene=58&subscene=0#rd)\n- Security Affairs\n - [ ] [Juniper Networks fixed a critical flaw in Session Smart Routers](https://securityaffairs.com/174365/security/juniper-networks-fixed-a-critical-flaw-in-session-smart-routers.html)\n - [ ] [China-linked APT group Winnti targets Japanese organizations since March 2024](https://securityaffairs.com/174353/apt/china-linked-apt-group-winnti-targets-japanese-orgs.html)\n - [ ] [Xerox VersaLink C7025 Multifunction printer flaws may expose Windows Active Directory credentials to attackers](https://securityaffairs.com/174342/hacking/xerox-versalink-c7025-multifunction-printer-flaws.html)\n - [ ] [New XCSSET macOS malware variant used in limited attacks](https://securityaffairs.com/174333/malware/apple-macos-malware-xcsset-limited-attacks.html)\n- Graham Cluley\n - [ ] [The AI Fix #38: AI proves time travel is impossible (but still can’t draw fingers)](https://grahamcluley.com/the-ai-fix-38/)\n - [ ] [Got a Microsoft Teams invite? Storm-2372 gang exploit device codes in global phishing attacks](https://www.tripwire.com/state-of-security/microsoft-teams-storm-2372-exploit-device-codes)\n- Computer Forensics\n - [ ] [iOS WhatsAPP Database Encrypted](https://www.reddit.com/r/computerforensics/comments/1ism8na/ios_whatsapp_database_encrypted/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [Cloud platform recommendation as a test bed](https://www.reddit.com/r/netsecstudents/comments/1isk2bt/cloud_platform_recommendation_as_a_test_bed/)\n - [ ] [airtel fiber/airfiber portforwarding](https://www.reddit.com/r/netsecstudents/comments/1isil01/airtel_fiberairfiber_portforwarding/)\n - [ ] [I want to learn some skills or knowledge on this field but I have no idea where to start.](https://www.reddit.com/r/netsecstudents/comments/1isf9x0/i_want_to_learn_some_skills_or_knowledge_on_this/)\n - [ ] [How to Prepare for Cisco 700-240 Certification?](https://www.reddit.com/r/netsecstudents/comments/1ischo1/how_to_prepare_for_cisco_700240_certification/)\n- Krebs on Security\n - [ ] [How Phished Data Turns into Apple & Google Wallets](https://krebsonsecurity.com/2025/02/how-phished-data-turns-into-apple-google-wallets/)\n- FuzzWiki\n - [ ] [SEAMFUZZ：灰盒模糊测试的学习种子自适应突变策略](https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247486942&idx=1&sn=d249d0aa9047c41d34cb0da0cb74053b&chksm=fbd9a662ccae2f741e774425250e2a2894e7b3796ce123e69795798288442b9c5d04647a4069&scene=58&subscene=0#rd)\n- The Hacker News\n - [ ] [New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now](https://thehackernews.com/2025/02/new-openssh-flaws-enable-man-in-middle.html)\n - [ ] [Chinese Hackers Exploit MAVInject.exe to Evade Detection in Targeted Cyber Attacks](https://thehackernews.com/2025/02/chinese-hackers-exploit-mavinjectexe-to.html)\n - [ ] [New FrigidStealer Malware Targets macOS Users via Fake Browser Updates](https://thehackernews.com/2025/02/new-frigidstealer-malware-targets-macos.html)\n - [ ] [Debunking the AI Hype: Inside Real Hacker Tactics](https://thehackernews.com/2025/02/debunking-ai-hype-inside-real-hacker.html)\n - [ ] [Juniper Session Smart Routers Vulnerability Could Let Attackers Bypass Authentication](https://thehackernews.com/2025/02/juniper-session-smart-routers.html)\n - [ ] [Winnti APT41 Targets Japanese Firms in RevivalStone Cyber Espionage Campaign](https://thehackernews.com/2025/02/winnti-apt41-targets-japanese-firms-in.html)\n - [ ] [New Xerox Printer Flaws Could Let Attackers Capture Windows Active Directory Credentials](https://thehackernews.com/2025/02/new-xerox-printer-flaws-could-let.html)\n - [ ] [Cybercriminals Exploit Onerror Event in Image Tags to Deploy Payment Skimmers](https://thehackernews.com/2025/02/cybercriminals-exploit-onerror-event-in.html)\n- Technical Information Security Content & Discussion\n - [ ] [Everyday Ghidra: How Platform Choice Influences Ghidra’s Binary Analysis](https://www.reddit.com/r/netsec/comments/1isfypx/everyday_ghidra_how_platform_choice_influences/)\n - [ ] [Microsoft Edge Developer VM Remote Code Execution](https://www.reddit.com/r/netsec/comments/1isdwc6/microsoft_edge_developer_vm_remote_code_execution/)\n - [ ] [Arechclient2 (sectopRAT) Analysis – A Highly Obfuscated .NET RAT with Malicious Chrome Extension](https://www.reddit.com/r/netsec/comments/1isaca7/arechclient2_sectoprat_analysis_a_highly/)\n - [ ] [Passkey Raider: Burp Suite Extension for Pentesting Passkey (Pentest & Bug Bounty)](https://www.reddit.com/r/netsec/comments/1isbbvt/passkey_raider_burp_suite_extension_for/)\n- 恒脑与AI\n - [ ] [Grok-3“最聪明AI”来了！为您整理发布会重点及当下明星AI产品](https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496639&idx=1&sn=ebd1da91dd9c3743289106d6c491a062&chksm=e9fd6e2ede8ae738fb0088894c8e55e6a60eb4d8e4b9be65a7d9ecff32aec34c273b1800fa11&scene=58&subscene=0#rd)\n- Schneier on Security\n - [ ] [Story About Medical Device Security](https://www.schneier.com/blog/archives/2025/02/story-about-medical-device-security.html)\n- Your Open Hacker Community\n - [ ] [pentest / hacking courses+certification](https://www.reddit.com/r/HowToHack/comments/1isighp/pentest_hacking_coursescertification/)\n - [ ] [QuasarRAT exclusion on client side](https://www.reddit.com/r/HowToHack/comments/1is9bok/quasarrat_exclusion_on_client_side/)\n - [ ] [Can anyone help me to remove password from my pdf](https://www.reddit.com/r/HowToHack/comments/1isgixr/can_anyone_help_me_to_remove_password_from_my_pdf/)\n - [ ] [Scammed](https://www.reddit.com/r/HowToHack/comments/1is9bh3/scammed/)\n - [ ] [Am I hacked?](https://www.reddit.com/r/HowToHack/comments/1is2w86/am_i_hacked/)\n - [ ] [Hacking Old Roblox Account](https://www.reddit.com/r/HowToHack/comments/1is3dot/hacking_old_roblox_account/)\n- RedTeam\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗？](https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484156&idx=1&sn=19bb941c4a3c27e1a5239ddad80eeb2c&chksm=c006ca0cf771431a2a1a1311e6c489deec495226828e73bf98de345a40c1df31c0df51a4ff07&scene=58&subscene=0#rd)\n- Security Weekly Podcast Network (Audio)\n - [ ] [AI Threat Intelligence, AI Hacking, Data Breaches, Zhong, DOGE, and more - SWN #452](http://sites.libsyn.com/18678/ai-threat-intelligence-ai-hacking-data-breaches-zhong-doge-and-more-swn-452)\n - [ ] [Top 10 Web Hacking Techniques of 2024 - James Kettle - ASW #318](http://sites.libsyn.com/18678/top-10-web-hacking-techniques-of-2024-james-kettle-asw-318)\n"}, "0a13ddc8259d653c92b07b532114ad8f586e1397": {"t": 1785772249.0330036, "n": 60613, "h": "a4395bfba86842f5", "c": "# 每日安全资讯（2025-02-19）\n\n- SecWiki News\n - [ ] [SecWiki News 2025-02-18 Review](http://www.sec-wiki.com/?2025-02-18)\n- 安全客-有思想的安全新媒体\n - [ ] [微软推出修复华硕蓝屏问题的 BIOS 更新](https://www.anquanke.com/post/id/304455)\n - [ ] [马斯克与 OpenAI 的交锋：收购提案遇冷，立场分歧引争议](https://www.anquanke.com/post/id/304451)\n - [ ] [保护投资者，重塑市场信任：ESMA 就加密员工指导方针征求意见](https://www.anquanke.com/post/id/304441)\n - [ ] [AMD 多款嵌入式处理器现安全隐患，官方建议升级固件防范](https://www.anquanke.com/post/id/304437)\n - [ ] [Juniper Networks多款产品现严重身份验证绕过漏洞（CVE-2025-21589），速升级软件修复](https://www.anquanke.com/post/id/304433)\n - [ ] [2025全球网络安全政策法律趋势：AI、数据安全等成焦点！](https://www.anquanke.com/post/id/304429)\n - [ ] [LibreOffice 严重漏洞：或致系统被写入文件及数据泄露，需更新版本](https://www.anquanke.com/post/id/304422)\n - [ ] [微软曝光：针对 macOS 的 XCSSET 恶意软件盗窃加密货币](https://www.anquanke.com/post/id/304417)\n - [ ] [警惕！X 平台将 Signal.me 链接标记为恶意，屏蔽行为引猜测](https://www.anquanke.com/post/id/304411)\n - [ ] [XCSSET 恶意软件新变种来袭，目标直指 macOS 开发者与用户](https://www.anquanke.com/post/id/304407)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [微软：黑客在设备代码钓鱼攻击中窃取电子邮件](https://www.4hou.com/posts/wxxX)\n - [ ] [「深蓝洞察」2024年度最难以阻挡的攻防趋势](https://www.4hou.com/posts/l00j)\n- paper - Last paper\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗?](https://paper.seebug.org/3282/)\n - [ ] [如何为大型语言模型植入后门：创建“BadSeek”，一个狡猾的开源编码模型](https://paper.seebug.org/3281/)\n - [ ] [本地化 AI 审计工具落地小试牛刀](https://paper.seebug.org/3280/)\n- obaby@mars\n - [ ] [伏地魔？](https://h4ck.org.cn/2025/02/19333)\n- Recent Commits to cve:main\n - [ ] [Update Tue Feb 18 20:30:07 UTC 2025](https://github.com/trickest/cve/commit/990fe6ceaadcf34085f84750a0369bb2e8f78373)\n - [ ] [Update Tue Feb 18 12:31:05 UTC 2025](https://github.com/trickest/cve/commit/ae962b44913a77b1cb0c16a3051b880d5a8cc752)\n - [ ] [Update Tue Feb 18 04:27:55 UTC 2025](https://github.com/trickest/cve/commit/bd07eabc7259ff38bd175b80cef43bcb121a4c5d)\n- 奇安信攻防社区\n - [ ] [掌握Tornado隐秘漏洞：构建内存马，实现命令执行](https://forum.butian.net/share/4148)\n- Security Boulevard\n - [ ] [US Military, Defense Contractors Infected with Infostealers: Hudson Rock](https://securityboulevard.com/2025/02/us-military-defense-contractors-infected-with-infostealers-hudson-rock/)\n - [ ] [PCI DSS 4: 6.4.3/11.6.1 – A Guide to SAQ A-EP Compliance using Feroot PaymentGuard AI](https://securityboulevard.com/2025/02/pci-dss-4-6-4-3-11-6-1-a-guide-to-saq-a-ep-compliance-using-feroot-paymentguard-ai/)\n - [ ] [Randall Munroe’s XKCD ‘Hardwood’](https://securityboulevard.com/2025/02/randall-munroes-xkcd-hardwood/)\n - [ ] [DEF CON 32 – Manufacturing Lessons Learned, Lessons Taught](https://securityboulevard.com/2025/02/def-con-32-manufacturing-lessons-learned-lessons-taught/)\n - [ ] [Learn & Avoid Social Engineering Scams in 2025](https://securityboulevard.com/2025/02/learn-avoid-social-engineering-scams-in-2025/)\n - [ ] [Inside Amazon GuardDuty: What the Logs Reveal About Cloud Security](https://securityboulevard.com/2025/02/inside-amazon-guardduty-what-the-logs-reveal-about-cloud-security/)\n - [ ] [Intruder Enhances Free Vulnerability Intelligence Platform ‘Intel’ with AI-Generated CVE Descriptions](https://securityboulevard.com/2025/02/intruder-enhances-free-vulnerability-intelligence-platform-intel-with-ai-generated-cve-descriptions/)\n - [ ] [Cybersecurity in 2025: AI, Attack Surfaces and the Shift to Cyber Resilience](https://securityboulevard.com/2025/02/cybersecurity-in-2025-ai-attack-surfaces-and-the-shift-to-cyber-resilience/)\n - [ ] [Cybersecurity Predictions for 2025: Platforms, Convergence and the Future of Risk Management](https://securityboulevard.com/2025/02/cybersecurity-in-2025-platforms-convergence-and-the-future-of-risk-management/)\n - [ ] [GRIT’s 2025 Report: Ransomware Group Dynamics and Case Studies](https://securityboulevard.com/2025/02/grits-2025-report-ransomware-group-dynamics-and-case-studies/)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [WordPress Plugin A/B Image Optimizer 3.3 Arbitrary File Download](https://cxsecurity.com/issue/WLB-2025020009)\n - [ ] [OpenSSH 9.9p1 Denial of Service / Man-In-The-Middle](https://cxsecurity.com/issue/WLB-2025020008)\n- InfoSec Write-ups - Medium\n - [ ] [VulnLab Trusted | Maverick Got Your Trusted Baby](https://infosecwriteups.com/vulnlab-trusted-maverick-got-your-trusted-baby-71420c15273e?source=rss----7b722bfd1b8d---4)\n - [ ] [I Pasted a Simple HTML Code on BookMyShow… and Got ₹1000 for It!](https://infosecwriteups.com/i-pasted-a-simple-html-code-on-bookmyshow-and-got-1000-for-it-26313f0e2115?source=rss----7b722bfd1b8d---4)\n - [ ] [HTMLI to ATO leads to $$$ bounty](https://infosecwriteups.com/htmli-to-ato-leads-to-bounty-9725cb23a67c?source=rss----7b722bfd1b8d---4)\n - [ ] [Simulating Phishing Attacks with Gophish: A Comprehensive Guide](https://infosecwriteups.com/simulating-phishing-attacks-with-gophish-a-comprehensive-guide-3f4b709f76b6?source=rss----7b722bfd1b8d---4)\n - [ ] [How I Bypassed BookMyShow’s OTP Limit with Just a Space & Got ₹1000 for It!](https://infosecwriteups.com/how-i-bypassed-bookmyshows-otp-limit-with-just-a-space-got-1000-for-it-70eab29fb6aa?source=rss----7b722bfd1b8d---4)\n - [ ] [Zoho Account Takeover: How a Single Click Can Lead to Full Control over your Zoho account](https://infosecwriteups.com/zoho-account-takeover-how-a-single-click-can-lead-to-full-control-over-your-zoho-account-cd6f0c245272?source=rss----7b722bfd1b8d---4)\n - [ ] [Why You Need a Digital Garden (How to Start Guide)](https://infosecwriteups.com/why-you-need-a-digital-garden-how-to-start-guide-a1f30f818c75?source=rss----7b722bfd1b8d---4)\n - [ ] [No email verification leads to an Oauth account takeover.](https://infosecwriteups.com/no-email-verification-leads-to-an-oauth-account-takeover-02eb30496939?source=rss----7b722bfd1b8d---4)\n- Trustwave Blog\n - [ ] [Building a Sustainable PCI DSS 4.0 Compliance Culture](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/building-a-sustainable-pci-dss-4.0-compliance-culture/)\n- Microsoft Security Blog\n - [ ] [​​Join us for the end-to-end Microsoft RSAC 2025 Conference experience](https://www.microsoft.com/en-us/security/blog/2025/02/18/join-us-for-the-end-to-end-microsoft-rsac-2025-conference-experience/)\n- Doonsec's feed\n - [ ] [Windows 二进制文件模糊测试的艺术](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487223&idx=1&sn=9aa6e3fe0de698f9ceb8d051c0aaa3ff)\n - [ ] [秦安：打江山马克思主义，守江山马斯克方法，首先从中国股市做起](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476925&idx=1&sn=01d93d4dadce125e24ad3724abb6353b)\n - [ ] [张志坤：重新规划安排中欧班列，应早为之计](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476925&idx=2&sn=1899256b96824a441fd19512224c1fad)\n - [ ] [漏洞预警 用友 UFIDA NC portal/pt/office/checkekey 接口存在 SQL 注入漏洞](https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488037&idx=1&sn=e95060073c6bd35b738e6465d0b60b50)\n - [ ] [【工具分享】提取微信聊天记录，导出可视化文档永久保存，（还可训练成个人AI）](https://mp.weixin.qq.com/s?__biz=MzA3MzgwMzYyMA==&mid=2452890317&idx=1&sn=3caa34536c488d3876b6b147d2930a5c)\n - [ ] [进京证 啥时候能取消呢？](https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491125&idx=1&sn=c9bd12a613875b317037512d8a476b9d)\n - [ ] [获取JA3指纹](https://mp.weixin.qq.com/s?__biz=MzA4NjQxMDcxNA==&mid=2709355324&idx=1&sn=e5a03aadddae69088e13b89a35140a48)\n - [ ] [DeepSeek+DeepResearch：应用实践](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655266852&idx=1&sn=38ea338b89b098cf63b856a2f414cd8e)\n - [ ] [《怒吼的战场：凌晨1点17分的WiFi攻防战以失败告终》](https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484556&idx=1&sn=12c872fd27ffe88bc241f1dd3eeec777)\n - [ ] [某Q出现校验异常](https://mp.weixin.qq.com/s?__biz=Mzg2NDcwNjkzNw==&mid=2247487199&idx=1&sn=a1a273098fc6300a58ffe6a67c537327)\n - [ ] [构建智能反爬防御体系：从多终端攻防到AI驱动的实时风控策略](https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484585&idx=1&sn=1c762308451b7ff7e8dd0e2ec8da3630)\n - [ ] [马斯克放大招，宣称\\\"已超越DeepSeek\\\"](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=1&sn=b1af6bf06c963951bd1efe6120474e8f)\n - [ ] [国家数据局发布第二批公共数据应用示范场景建设清单](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=2&sn=8ddddc8b5ecc47757dc85c7a57236175)\n - [ ] [首批70名公务员已上岗，工作效率最高提升100倍！多地政务系统接入…网友：混日子的要下岗了](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=3&sn=e58ce6090e46fb39801d533d4dd1c6ee)\n - [ ] [ChatGPT Operator 遭提示注入攻击，泄露用户隐私数据](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=1&sn=a008bd32d4ac4e5ba959a13e6714c501)\n - [ ] [美国会拟立法：将太空系统作为关基设施进行保护](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634473&idx=5&sn=fc96f1404b4ccf2689471b3893cd11e5)\n - [ ] [网络安全人士必知的指纹探测技术](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490447&idx=1&sn=c76f4f8d6bc8c35d6bfa414da48951d4)\n - [ ] [合规引领，助力企业“扬帆出海” | “杨数浦”品牌沙龙第三期精彩回顾](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247517311&idx=1&sn=27626dc4110c4ebc078a1013dc60579f)\n - [ ] [国货正当红！国货之光软件优惠庆典 6 折起](https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492205&idx=1&sn=88bbac3ffda3b659cfce532265a3f0c3)\n - [ ] [【漏洞预警】ChurchCRM系统中通过EditEventTypes.php文件的newCountName参数进行SQL注入漏洞](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489623&idx=1&sn=0eb82923c11d936eda41661733bab356)\n - [ ] [DeepSeek本地部署安全隐患问题，建议紧急排查](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489623&idx=2&sn=1892455a5ca464abf6bafa8a8b182a37)\n - [ ] [DNS投毒与利用](https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488726&idx=1&sn=17db9da06b19b3ba1cd01d7dd63f6d01)\n - [ ] [DeepSeek 引爆！AI 智能体 商业应用全景图：万亿市场新赛道开启！](https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484148&idx=1&sn=b7ab4ffaac68b0d6fe269e8573046c09)\n - [ ] [MWC 2025 | 华为星河AI融合SASE最新案例精选，3月3日与您相约巴塞罗那！](https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505890&idx=1&sn=a912c683b5aebb4d0c610bc25d467199)\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗？](https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487304&idx=2&sn=242893b8bf6c59a594f746e2bb5fa1fb)\n - [ ] [SRC专项知识库](https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518592&idx=2&sn=047c56c3573a6a30f3e5ceeb8bcae850)\n - [ ] [【待确认】疑似解决微信小程序devtools无法全局搜索问题？](https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484391&idx=1&sn=ea11c8d30ad0c916d24a4f289610a955)\n - [ ] [如何使用MSSQL CLR组件绕过EDR](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527921&idx=1&sn=76f38448f0b318e4f4f82e935e6128b7)\n - [ ] [无休止的漏洞：macOS 漏洞被利用九次](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527921&idx=2&sn=15dd9f4e59983a9c588916d3058ae171)\n - [ ] [AboutSQLRecorder是一个能够实时记录SQL语句的工具，方便代码审计时对SQL注入的实时关注](https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496521&idx=1&sn=e1dcb02f0d4846b88555054e2ef84719)\n - [ ] [【漏洞预警】Cisco Meeting Management客户端-服务器权限提升漏洞](https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484334&idx=1&sn=f4599ad3ed50659f274d2b35c7589312)\n - [ ] [常见WEB漏洞—SQL 注入](https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247488289&idx=1&sn=4adfd4de8707c7989afa203de3cd49f2)\n - [ ] [2025网安公司避坑互助墙--内部吐槽墙](https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247487372&idx=1&sn=779e647e788030ce94c9885eb5a35752)\n - [ ] [Deepseek真的能搞定安全运营？](https://mp.weixin.qq.com/s?__biz=Mzg5NTMxMjQ4OA==&mid=2247485648&idx=1&sn=35fa7f43468584d6ea0f0671b4f85497)\n - [ ] [《论语别裁》第01章 学而（01）语文的变与不变](https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247500817&idx=1&sn=f442b82b587f4fb37bfd705baccb2b38)\n - [ ] [Tips | 提取java应用内存从而直接获取明文密码和配置信息的方法](https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487304&idx=1&sn=2be4a08b7a4c875f17816f8c7c6b0e6f)\n - [ ] [《内网安全攻防渗透测试实战指南》笔记之权限提升分析与防御](https://mp.weixin.qq.com/s?__biz=MzkzNjQwOTc4MQ==&mid=2247490399&idx=1&sn=a786f6dd8f07344cff4940f72b75c8ae)\n - [ ] [反反rootkit--覆盖驱动与隐藏线程](https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488462&idx=1&sn=9cfb75421975bffdfe049b3e6df12b67)\n - [ ] [【各大培训机构】网络安全圈最硬核投票来了！](https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211340&idx=1&sn=b960a0001604e507aeddba440fbcb312)\n - [ ] [网络安全行情这么差？oscp十多个证书也弥补不了学历的弱势吗？](https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538747&idx=1&sn=56e22e4c93b198237411b0f2f211c16f)\n - [ ] [常行AI+安全方案：减少大模型部署风险，助力企业智能革新](https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247502972&idx=1&sn=80f9f7d77c81336634fd3e7763a28da8)\n - [ ] [[网络安全]HVV面试面经](https://mp.weixin.qq.com/s?__biz=MzkwOTUzMDk4OA==&mid=2247483793&idx=1&sn=c4d35af48992977eb8b7db6febf5181a)\n - [ ] [全国政协推动人工智能更好服务“四个面向”专题组座谈会在奇安信召开 全国政协副主席陈武率课题组参加](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625170&idx=1&sn=c7c9ce3e42ff91f8caec4631c2dbfca6)\n - [ ] [95015应急响应报告：内部违规是网安事件罪魁祸首](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625170&idx=2&sn=bb8dc3eaf025dc789cd7440977078139)\n - [ ] [SRC实战系列-记某次大学漏洞挖掘经过](https://mp.weixin.qq.com/s?__biz=MzkxMzQyMzUwMg==&mid=2247486443&idx=1&sn=9bf618a3a424cefc958f0ca4a7a0c934)\n - [ ] [OSINT信息收集工具 - chiasmodon](https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486075&idx=1&sn=468f3470d7602f73a3d4df0bf0c51acb)\n - [ ] [SecWiki周刊（第572期）](https://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=2651053441&idx=1&sn=629cf305baee3944d86b7985ac0f61a9)\n - [ ] [XCSSET恶意软件卷土重来，剑指macOS用户与开发者](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=2&sn=0fda5989ef936d6dea0b0956d4fbbbf1)\n - [ ] [黑客滥用Microsoft Teams会议邀请窃取用户权限](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=3&sn=5319bd4c3b4b6bd974e10791184e93e2)\n - [ ] [网络攻击者借助SharpHide改良版，加大注册表检测难度](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=4&sn=1f8b1a860ab6290b3aa06a8c839c25f3)\n - [ ] [2025年1月涉国内数据泄露事件汇总](https://mp.weixin.qq.com/s?__biz=Mzg4NzQ4MzA4Ng==&mid=2247485268&idx=1&sn=8724d38ebcfdd0697c212e18d90a34a3)\n - [ ] [【安全圈】短视频平台“封号圈”乱象猖獗，IP查询如何助力防范](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=1&sn=77b78d28e626bb57cf51f82d0c472aa6)\n - [ ] [【安全圈】俄罗斯黑客利用 7-Zip 零日漏洞攻击乌克兰](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=2&sn=634853ba2d9852cc240a7d5d46ce82c5)\n - [ ] [【安全圈】微软发现用于加密货币盗窃的 XCSSET macOS 恶意软件变种](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=3&sn=b875bcdbb815582bbc7966d6ebc3a164)\n - [ ] [【安全圈】马斯克与 OpenAI 的交锋：收购提案遇冷，立场分歧引争议](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=4&sn=38c4e0921e00478f77d52173d75865fa)\n - [ ] [TimelineSec助力顺丰SRC第三届白帽技术沙龙活动，预约已开启！](https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497142&idx=1&sn=3f5b46d1df2a8f6f8bec1b43e632f71f)\n - [ ] [XPSRC助力|顺丰SRC第三届白帽技术沙龙预约开启！](https://mp.weixin.qq.com/s?__biz=MzkzNTY5MTQ1NA==&mid=2247484065&idx=1&sn=81bf7598983b7b2094d08d4fa6f19fff)\n - [ ] [启明星辰发布大模型应用安全“新三件套”，奠基“后DeepSeek智能时代”的安全基石](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=1&sn=5b672ecff51556db43509b5c84cb09dd)\n - [ ] [专家解读 | 出台《个人信息保护合规审计管理办法》 为数字经济持续健康发展保驾护航](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=2&sn=19ef83d5756ac4b267766ce1434e8a5b)\n - [ ] [前沿 | 排他性思路违背全球AI发展潮流](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=3&sn=536c842056b617da26b3a83cf09b195d)\n - [ ] [评论 | 算法更透明 公众更安心](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=4&sn=25460fdc26dd1f8b0aea2a356f01bf64)\n - [ ] [关注 | 用行动落实打击电诈的共同意愿](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=5&sn=6a708c7814d057322cbf80593342a4f1)\n - [ ] [观点 | MCN机构要走规范化发展之路](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=6&sn=4558e8136659bdfcaf2dde736f38b77e)\n - [ ] [评论 | 营造有利于青少年成长成才的良好信息环境](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236989&idx=7&sn=eb5a761b2a5d240d86a28fdccf3b8a63)\n - [ ] [为什么运营商“沉迷”做总包、总集？](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=1&sn=cd835808ada01d35850bdcc5c59611eb)\n - [ ] [北七家-未来科学城,3居变4居豪装,理想楼层/户型/朝向](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=2&sn=fa2cefbe0f44ae8f576af68d7c075e80)\n - [ ] [【0.9元】德银重磅：中国鲸吞世界！全文和翻译！](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=3&sn=f452879eebc1ec28ccd0516533798c3d)\n - [ ] [【干货】笑傲职场的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=4&sn=614d3e17ec92cd87c0d610fbf4fb17fa)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=5&sn=0a8eeadf2aaa25d2d65ee6acc2806427)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=6&sn=a4a15902985ab471b071ee9426d451ea)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485626&idx=7&sn=38e7919f220cac38a2494162456e2095)\n - [ ] [Merlin后渗透利用框架之Merlin Agent远控木马剖析](https://mp.weixin.qq.com/s?__biz=MzAwNDUzNDExMQ==&mid=2247485192&idx=1&sn=751f75626f62cc4463141c4cefa3b97f)\n - [ ] [继上次ollama自由后，又一次自由……](https://mp.weixin.qq.com/s?__biz=MzAxMDQxODk4NQ==&mid=2247484364&idx=1&sn=6e261738ce559083feb198bd1fcef489)\n - [ ] [顺丰SRC第三届白帽技术沙龙预约开启！](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541606&idx=1&sn=012be792517f5ee11d9feac39ffe3b74)\n - [ ] [等保测评||达梦数据库作业指导书](https://mp.weixin.qq.com/s?__biz=MzIwNDYzNTYxNQ==&mid=2247502632&idx=1&sn=97e84602de7606f21d45a215ee2f52bc)\n - [ ] [美国政府：开发人员应停止制造“不可原谅的”缓冲溢出漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=1&sn=f4ba8096e5c48add46aab6c9f0f9b6db)\n - [ ] [VeraCore 两个0day漏洞被用于实施供应链攻击](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=2&sn=9b28d0ae22a8aee011365d83bbe3e244)\n - [ ] [超级CSO研修班 | 杜跃进：未来安全的核心是能力](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636358&idx=1&sn=87ce38dc5d636b8975a99ca7305f711d)\n - [ ] [LockBit死而不僵，仍不断有“帮凶”落网](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636358&idx=2&sn=a82d0bc18938a4a50fd92369e0d58673)\n - [ ] [韩国暂停DeepSeek下载，称其侵犯隐私](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636358&idx=3&sn=32666d76e53892b54705fb8386f4bc8b)\n - [ ] [【资讯】山东省大数据局印发《山东省公共数据开放工作细则》](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247549835&idx=1&sn=4301f3fc724332d16aaeff001f9b5b2d)\n - [ ] [【资讯】云南省通管局印发《云南省电信领域数据安全风险评估实施细则（试行）》](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247549835&idx=2&sn=eb917c98028b4f355c0ac073a9c23a7f)\n - [ ] [【资讯】绍兴市政府办公室印发《绍兴市加快制造业数字化转型行动方案》](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247549835&idx=3&sn=b8dc9888890b753dbb2f5c2a66f5e1b2)\n - [ ] [国家公共数据资源登记平台将于3月1日正式上线试运行](https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448683184&idx=1&sn=c8520840f07b17a90a9b3252d5c70ae0)\n - [ ] [Grok-3正式发布！马斯克：“地球上最聪明的AI”](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247550522&idx=1&sn=d74d75abf3ff7ca922176ac61326b9fb)\n - [ ] [AutoSec年会专家确认 | F5：全球多云环境下的合规遵从和统一安全治理](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247550522&idx=2&sn=5b6c7862384ae75a6909c706728520ba)\n - [ ] [独家首发，免费｜Trae 从入门到实践，开启 AI 编码新征程！](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513387&idx=1&sn=ce7672590c2cd60a22e9b620dcbdcfca)\n - [ ] [DeepSeek重构智能运维和安全运营](https://mp.weixin.qq.com/s?__biz=MzA4Mzg1ODIzMw==&mid=2653545935&idx=1&sn=7e68e08b429b85ade74986b62e3d22dd)\n - [ ] [BSSRC助力 | 顺丰SRC第三届白帽技术沙龙预约开启！](https://mp.weixin.qq.com/s?__biz=MzkyODIwNDI3NA==&mid=2247486170&idx=1&sn=9287f9f60bd2d701fe1d1d4ba26f3f42)\n - [ ] [AI聊天还能用，但下载按钮灰了！韩国给DeepSeek划下\\\"红线\\\"](https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488538&idx=1&sn=7d2b1822bf137d6a59722d0ff454db32)\n - [ ] [学术前沿 | 华南师范大学密码学与信息安全团队：白盒密码实现的侧信道分析技术综述](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505072&idx=1&sn=9f910b3ab2a5ccd60b3e071af3e4aaa7)\n - [ ] [官方机构提示仿冒DeepSeek手机木马病毒肆虐！梆梆安全为您的移动应用保驾护航！](https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135338&idx=1&sn=94642b4d6d742c855af4c615b6c2c399)\n - [ ] [企业级EDR实施技术指南：十大关键要素深度解析](https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489351&idx=1&sn=3da833b6858ec815c4acd2bffbdb5f69)\n - [ ] [雨水｜甘雨时降 万物以嘉](https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135338&idx=2&sn=33cd10d5c79ebcefca7db1364a627025)\n - [ ] [大模型背景下生成式AI带来的网络安全威胁应对](https://mp.weixin.qq.com/s?__biz=Mzg2MDY0MjQwMw==&mid=2247494317&idx=1&sn=e67cb658cf43995bd5c239ca54c97c7f)\n - [ ] [旅行APP流程分析（TCP+protobuf）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=1&sn=e1354617c606204a98db2a1960b7647d)\n - [ ] [立即预约！顺丰SRC第三届白帽技术沙龙即将开启](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=2&sn=278b59f239fe65d5cfe07f93ecaa636e)\n - [ ] [ChatGPT Operator 遭提示注入攻击](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=3&sn=a005da20fc0a49c5e16d1ada1109ad46)\n - [ ] [《科学数据安全分类分级指南》等5项国家标准发布](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931568&idx=1&sn=717c83d99ebeb4b1ad0806e4de9f8f6d)\n - [ ] [韩国称DeepSeek与字节跳动共享数据？我外交部回应；美国国防部一承包商和一大型金融机构虚拟专用网络疑被攻破 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=1&sn=265652c42964cda677cb67cdd3409cb8)\n - [ ] [应对高级勒索软件攻击，你需要关注这7项技术手段](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=2&sn=47591d1505f32bcf70149d3a92cd8961)\n - [ ] [勒索软件攻击加速：从潜伏到“打砸抢”式入侵 企业防御面临新挑战](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247546921&idx=1&sn=2545d75b63623d7a78c2e5e708fcab02)\n - [ ] [深度测评 | AI引领安全运营提升用户使用感受及分析处置能力](https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247506691&idx=1&sn=06af6565c9541f1ac54a40b8ee0ad97a)\n - [ ] [突破 | 中国电信安全天地一体化网络安全领域研究成果入选国际顶级期刊](https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247533100&idx=1&sn=8561e9f4008f89b213c2c57003b546ab)\n - [ ] [Grok-3“最聪明AI”来了！为您整理发布会重点及当下明星AI产品](https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496639&idx=1&sn=ebd1da91dd9c3743289106d6c491a062)\n - [ ] [获奖公布 | 网安加社区元宵灯谜竞猜活动获奖名单公布！](https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247523961&idx=1&sn=ce71c7021d7bd63e842ff1d81f521961)\n - [ ] [培训招募中！CISAW灾难备份与恢复](https://mp.weixin.qq.com/s?__biz=MzU0Mzk0NDQyOA==&mid=2247521403&idx=1&sn=06480e6a0ed6208d43b642e1dc74569c)\n - [ ] [飞天诚信、小米等入选北京市商业秘密保护示范基地](https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649876752&idx=1&sn=79b42426d9a8bc2fde0c44947ad71d77)\n - [ ] [论文速递 | 智能网联汽车网络信息安全综述](https://mp.weixin.qq.com/s?__biz=Mzg5NDczNDc4NA==&mid=2247495478&idx=1&sn=ca8a1aaa0f4f8a0953c8f5688edc8439)\n - [ ] [甲方乙方视角剖析：信安通用三认证，如何抉择才不亏](https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247516067&idx=1&sn=858499704f81840848f3c78c36fd8bd1)\n - [ ] [职场人的精神brunch|说几个对数据安全从业者友好的证书](https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247516067&idx=2&sn=97de123527d3b7627ea1ac87be96da4b)\n - [ ] [埃隆·马斯克的政府网站漏洞曝光，黑客留下嘲讽信息](https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486178&idx=1&sn=0582e8fd5a1c4aa57ec6fab589ffa06d)\n - [ ] [解锁高能，秒变渗透高手](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553681&idx=1&sn=a2dd04fdc8069d3d7cbd47d8fa276169)\n - [ ] [【免费领】近400页！SQL注入攻击与防御策略大全](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553681&idx=2&sn=a454fa2b8c0f9b1231f8e5d45959d0c1)\n - [ ] [敢挑战吗？蚂蚁国际要的就是你！](https://mp.weixin.qq.com/s?__biz=MzI3NDEzNzIxMg==&mid=2650492397&idx=1&sn=0c4d95bf831194932a3c8e4ec57c721e)\n - [ ] [走向卓越丨2025，对您的未来许下承诺](https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492403&idx=1&sn=f7a256cfeab0b700ae77b9b52b57c6ec)\n - [ ] [网络安全动态 - 2025.02.18](https://mp.weixin.qq.com/s?__biz=MzU1MzEzMzAxMA==&mid=2247499921&idx=1&sn=dd53eca4974397a099fb2c0461221fc0)\n - [ ] [【渗透测试Top10漏洞详解·萌新友好版（上）】黑客最爱的5大漏洞竟是这些？](https://mp.weixin.qq.com/s?__biz=Mzk1NzI5MTc0Nw==&mid=2247485048&idx=1&sn=70c9a4aed11e2474656cc9141ff44488)\n - [ ] [360SRC助力 | 顺丰SRC第三届白帽技术沙龙预约开启！](https://mp.weixin.qq.com/s?__biz=MzkzOTIyMzYyMg==&mid=2247494998&idx=1&sn=c28dfd53a667692becafd42ff90f0bdd)\n - [ ] [好书推荐 | 数字化转型安全根基，硬件安全攻防实战指南](https://mp.weixin.qq.com/s?__biz=MzkzOTIyMzYyMg==&mid=2247494998&idx=2&sn=b6655366fc7c96b81815be8bcaa35e43)\n - [ ] [「招聘」长亭科技-内推码](https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486890&idx=1&sn=aa3d1c7a1d959391c51f401ce54ff9a0)\n - [ ] [【知道创宇404实验室】本地化 AI 审计工具落地小试牛刀](https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870976&idx=1&sn=532f0cf3ec728a9abfa1fecbfab03268)\n - [ ] [“新春第一课”，DeepSeek席卷政务系统](https://mp.weixin.qq.com/s?__biz=MzI3MDY0Nzg1Nw==&mid=2247489502&idx=1&sn=49c20331256f1c7843ca92f5abe15275)\n - [ ] [AI 与隐私悖论：在数据浪潮中寻找平衡](https://mp.weixin.qq.com/s?__biz=MzI3MDY0Nzg1Nw==&mid=2247489502&idx=2&sn=1159e25e2a14b93fc07abf733c9adf0d)\n - [ ] [互联网和人工智能会影响我们的记忆吗？科学怎么说？](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619275&idx=1&sn=49f6b6b8186ed70e29dbf21fc0a55d00)\n - [ ] [美国xAI公司发布AI模型Grok 3，部分功能性能超越OpenAI、DeepSeek相关模型](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619275&idx=2&sn=df636eefa3f94db514cc271d09c8267a)\n - [ ] [海外研究｜国外人工智能热点安全技术发展情况研究](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597829&idx=1&sn=7caaef0c1a1f694359e7dbe9673b2136)\n - [ ] [特色专题 | 基于混沌映射和NFSR的16比特动态S盒构造方法](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597829&idx=2&sn=935bc30bbc576877560381a3ad325e24)\n - [ ] [默安科技两度荣膺“浙江省软件核心竞争力企业”](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597829&idx=3&sn=f63629da6856652881dd72f692d1e269)\n - [ ] [雷神众测漏洞周报2024.2.10-2024.2.16](https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503318&idx=1&sn=b5b13cfc554a840876a561de454e8f7e)\n - [ ] [“硅基生命”的崛起，碳基生命的挑战：AI的伦理与安全边界](https://mp.weixin.qq.com/s?__biz=MzkwMTM5MDUxMA==&mid=2247504042&idx=1&sn=e60dd68fdcb43ee4273cbd208b5ce8f1)\n - [ ] [SEAMFUZZ：灰盒模糊测试的学习种子自适应突变策略](https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247486942&idx=1&sn=d249d0aa9047c41d34cb0da0cb74053b)\n - [ ] [AI 重塑国家安全格局：机遇与挑战并存](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247529179&idx=1&sn=f0a1963cefd524f87ea8286a30cfd630)\n - [ ] [科技动态｜英国发布全球首个人工智能安全标准](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247529179&idx=2&sn=a530a0a4bf56c6d58569f6d015816c9d)\n - [ ] [益生菌能提高运动成绩吗？](https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485851&idx=1&sn=ea0ba6fa83bc28e5ae13ca0fd8eb82b3)\n - [ ] [点击劫持与双击劫持](https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485479&idx=1&sn=6086c9a3c256df6bb971fc5a86f652e4)\n - [ ] [《2025Hvv 行动集训营，紧跟热点潮流，带你 1 个月突破网络安全防线，实现薪资逆袭！ 》](https://mp.weixin.qq.com/s?__biz=Mzg3MTUyNjkwNA==&mid=2247484287&idx=1&sn=ebf831861225afe20f3c6990e6173bff)\n - [ ] [2025数字中国创新大赛·数字安全赛道时空数据安全赛题等你来战！](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247491931&idx=1&sn=8748a773257b0ff5b9d92455e3a96528)\n - [ ] [报名即将截止 | “网谷杯”信创应用软件网络安全攻防大赛](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247491931&idx=2&sn=81b4c20f905b01e807d5a520de212ca2)\n - [ ] [解锁安全研究新姿势：DeepSeek 本地部署指南](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247492941&idx=1&sn=476fc818f0028dad0a4bff3c74c59c09)\n - [ ] [如何借力AI促进网络安全文化建设？](https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247484821&idx=1&sn=576dcd8f20191c91171e92b96396f667)\n - [ ] [为何数学会出现虚数i这无意义的符号？](https://mp.weixin.qq.com/s?__biz=MzIxNTM3NDE2Nw==&mid=2247490341&idx=1&sn=9d16eefe20cca638ffb901bcf8d4253f)\n - [ ] [美俄会谈结束俄乌战争，为何要选在沙特进行？](https://mp.weixin.qq.com/s?__biz=MzkxMTA3MDk3NA==&mid=2247487198&idx=1&sn=920bc7bd62ab08726141df8a37133eeb)\n - [ ] [微信接入DeepSeek！可惜87%的IT人还不会高效利用它...](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571133&idx=1&sn=4cb9c4b4b7bca014e94cf6c93bee83b0)\n - [ ] [一款Windows GUI界面的渗透测试工具箱-V1.1（更新）](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571133&idx=2&sn=2b97b09c38d3658ada05deddb2b56617)\n - [ ] [『CTF』密码学-一道LFSR](https://mp.weixin.qq.com/s?__biz=Mzg4NTA0MzgxNQ==&mid=2247489904&idx=1&sn=1c0472deec7bd1db7d35ca3ec02216cf)\n - [ ] [国家安全部提醒：这些随处可见的设备，也可能有风险！](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170858&idx=1&sn=24cbb4ccb5e3ed8603ee8f469b55a71a)\n - [ ] [马斯克口中“最聪明AI”，Grok 3正式发布](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170858&idx=2&sn=0eef501df2b4e2e40f8767f11fe65453)\n - [ ] [【2025春节】解题领红包之番外篇writeup](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141800&idx=1&sn=ce4fbd9d5e88415d4d773b2501fe657d)\n - [ ] [DeepSeek浪潮之下，安全暗礁逐渐显现](https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650465264&idx=1&sn=e64e6f0cc1955816c5cda713594ab2c3)\n - [ ] [预约开启！BUGBANK助力顺丰SRC第三届白帽技术沙龙](https://mp.weixin.qq.com/s?__biz=MzAxODg1MDMwOQ==&mid=2247507752&idx=1&sn=f2713e90546e22c6cdfc33eb6e40b103)\n - [ ] [揭晓｜2025年网络安全十项发展趋势预测](https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247486831&idx=1&sn=edd41385bacb72e6f559fd94dd323098)\n - [ ] [冰雪同梦 网安铸盾丨迪普科技助力2025亚冬会圆满完成](https://mp.weixin.qq.com/s?__biz=MzA4NzE5MzkzNA==&mid=2650371663&idx=1&sn=5978913cf66a2bce8e6d23a890b999ba)\n - [ ] [【渗透干货】Apache Tomcat弱口令批量检测利用工具](https://mp.weixin.qq.com/s?__biz=MzIxOTk0ODY0NQ==&mid=2247485428&idx=1&sn=1d21795f59bb1a32ba9f23da0a4a7781)\n - [ ] [安全简讯（2025.02.18）](https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500752&idx=1&sn=aee35d6ecb95122bbaa6dd9b86ee7c72)\n - [ ] [网安行业互助文档，又来了](https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500642&idx=1&sn=c2b2eb6863906fe6e431165b2b9ab48c)\n - [ ] [【靶场手记】JARBAS：细节决定攻击链，boot2root的重要拼图](https://mp.weixin.qq.com/s?__biz=MzUyMTE0MDQ0OA==&mid=2247494122&idx=1&sn=49888cf816741a3e5dadb6e96373c763)\n - [ ] [新媒体人必备神器！一键发布公众号文章不是梦](https://mp.weixin.qq.com/s?__biz=Mzg2MTc0NTYyNg==&mid=2247486911&idx=1&sn=efd65ddc3598f81bb149766952fa9ba8)\n- GuidePoint Security\n - [ ] [GRIT’s 2025 Report: Ransomware Group Dynamics and Case Studies](https://www.guidepointsecurity.com/blog/grit-2025-ransomware-group-dynamics-and-case-studies-understanding-the-threat-landscape/)\n- SpiderLabs Blog\n - [ ] [The Rise of Email Marketing Platforms for Business Email Compromise Attacks](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/the-rise-of-email-marketing-platforms-for-business-email-compromise-attacks/)\n- Horizon3.ai\n - [ ] [Fireside Chat: Horizon3.ai and Jerome’s Furniture](https://www.horizon3.ai/intelligence/webinars/fireside-chat-horizon3-ai-and-jeromes-furniture/)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [I Pasted a Simple HTML Code on BookMyShow… and Got ₹1000 for It!](https://infosecwriteups.com/i-pasted-a-simple-html-code-on-bookmyshow-and-got-1000-for-it-26313f0e2115?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [HTMLI to ATO leads to $$$ bounty](https://infosecwriteups.com/htmli-to-ato-leads-to-bounty-9725cb23a67c?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [How I Bypassed BookMyShow’s OTP Limit with Just a Space & Got ₹1000 for It!](https://infosecwriteups.com/how-i-bypassed-bookmyshows-otp-limit-with-just-a-space-got-1000-for-it-70eab29fb6aa?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Zoho Account Takeover: How a Single Click Can Lead to Full Control over your Zoho account](https://infosecwriteups.com/zoho-account-takeover-how-a-single-click-can-lead-to-full-control-over-your-zoho-account-cd6f0c245272?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [No email verification leads to an Oauth account takeover.](https://infosecwriteups.com/no-email-verification-leads-to-an-oauth-account-takeover-02eb30496939?source=rss----7b722bfd1b8d--bug_bounty)\n- Malwarebytes\n - [ ] [Hard drives containing sensitive medical data found in flea market](https://www.malwarebytes.com/blog/news/2025/02/hard-drives-containing-sensitive-medical-data-found-in-flea-market)\n- Securelist\n - [ ] [StaryDobry ruins New Year’s Eve, delivering miner instead of presents](https://securelist.com/starydobry-campaign-spreads-xmrig-miner-via-torrents/115509/)\n- Reverse Engineering\n - [ ] [ImHex - A Binary Data Reverse Engineering Toolkit | New v1.37.X Release with HiDPI support and tons of other UX improvements](https://www.reddit.com/r/ReverseEngineering/comments/1isddf7/imhex_a_binary_data_reverse_engineering_toolkit/)\n - [ ] [A HuggingFace space for testing the LLM4Decompile 9B V2 model for refining Ghidra decompiler output](https://www.reddit.com/r/ReverseEngineering/comments/1isegar/a_huggingface_space_for_testing_the_llm4decompile/)\n - [ ] [Z x86_64 Linux Anti-Anti-Debugger: Bypass Anti-Debugging in Protected Binaries with User-Supplied LD_PRELOAD Libraries](https://www.reddit.com/r/ReverseEngineering/comments/1isnvsn/z_x86_64_linux_antiantidebugger_bypass/)\n - [ ] [Everyday Ghidra: How Platform Choice Influences Ghidra’s Binary Analysis](https://www.reddit.com/r/ReverseEngineering/comments/1isfze3/everyday_ghidra_how_platform_choice_influences/)\n - [ ] [An introduction to LLVM IR](https://www.reddit.com/r/ReverseEngineering/comments/1is7rzo/an_introduction_to_llvm_ir/)\n - [ ] [Arechclient2 (sectopRAT) Analysis – A Highly Obfuscated .NET RAT with Malicious Chrome Extension](https://www.reddit.com/r/ReverseEngineering/comments/1isaavt/arechclient2_sectoprat_analysis_a_highly/)\n- daniel.haxx.se\n - [ ] [Changing every line three times](https://daniel.haxx.se/blog/2025/02/18/changing-every-line-three-times/)\n- Twitter @James Kettle\n - [ ] [Re @Freyxfi Nah it's a lot of work, I'd rather be doing research. I do maintain a playlist of all our research though. https://www.youtube.com/playlis...](https://x.com/albinowax/status/1891867917760778324)\n - [ ] [Re You can find the show notes & links at https://www.scworld.com/podcast-show/application-security-weekly](https://x.com/albinowax/status/1891861901803430192)\n - [ ] [Catch the inside story on the Top Ten Web Hacking Techniques in my interview with the Application Security Weekly podcast https://youtu.be/8XEK3NkbKOA](https://x.com/albinowax/status/1891861705652645990)\n- rtl-sdr.com\n - [ ] [ESPARGOS: An ESP32 Phased Array for Seeing WiFi](https://www.rtl-sdr.com/espargos-an-esp32-phased-array-for-seeing-wifi/)\n - [ ] [Saveitforparts: Listening in on Russian Soldiers Hijacking US Military Satellites](https://www.rtl-sdr.com/saveitforparts-listening-in-on-russian-soldiers-hijacking-us-military-satellites/)\n- FreeBuf网络安全行业门户\n - [ ] [OpenSSH曝高危漏洞，可引发中间人攻击与DoS攻击](https://www.freebuf.com/vuls/422180.html)\n - [ ] [CVE-2016-4437（Shiro-550）漏洞简述](https://www.freebuf.com/vuls/422102.html)\n - [ ] [短视频平台“封号圈”乱象猖獗，IP查询如何助力防范](https://www.freebuf.com/news/422099.html)\n - [ ] [FreeBuf早报 | Palo Alto防火墙又被黑；微软投资7亿美元提升波兰网络安全](https://www.freebuf.com/news/422094.html)\n - [ ] [【黄金圆环】在研发领域的实践分享](https://www.freebuf.com/news/422069.html)\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗?](https://www.freebuf.com/sectool/422066.html)\n - [ ] [XCSSET信息窃取恶意软件卷土重来，针对macOS用户和开发者](https://www.freebuf.com/articles/422056.html)\n - [ ] [网络犯罪分子利用图片标签中的Onerror事件窃取支付信息](https://www.freebuf.com/articles/web/422085.html)\n - [ ] [当AI邂逅日志海：从骨感现实到无限可能](https://www.freebuf.com/news/422038.html)\n- Dhole Moments\n - [ ] [Reviewing the Cryptography Used by Signal](https://soatok.blog/2025/02/18/reviewing-the-cryptography-used-by-signal/)\n- 绿盟科技技术博客\n - [ ] [绿盟威胁情报周报（2025.02.10-2025.02.16）](https://blog.nsfocus.net/2025-02-10-2025-02-16/)\n- Shostack & Friends Blog\n - [ ] [A New Hope for Threat Modeling, on The CyberTuesday Podcast](https://shostack.org/blog/cybertuesday-podcast/)\n- 安全牛\n - [ ] [韩国称DeepSeek与字节跳动共享数据？我外交部回应；美国国防部一承包商和一大型金融机构虚拟专用网络疑被攻破 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=1&sn=265652c42964cda677cb67cdd3409cb8&chksm=bd15ac5d8a62254b382f53aeb16d3d10305ac645ba976317dd34d61c48682f2becea57e4d15f&scene=58&subscene=0#rd)\n - [ ] [应对高级勒索软件攻击，你需要关注这7项技术手段](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135118&idx=2&sn=47591d1505f32bcf70149d3a92cd8961&chksm=bd15ac5d8a62254bdb882276f5ca5888b7b5e98968aadee2365824f305a7ca4b025fc91140ea&scene=58&subscene=0#rd)\n- 奇客Solidot–传递最新科技情报\n - [ ] [美国白领工人的工作面临风险](https://www.solidot.org/story?sid=80583)\n - [ ] [为什么吃饱之后仍然想吃甜食](https://www.solidot.org/story?sid=80582)\n - [ ] [OpenSUSE Tumbleweed 使用的 MAC 切换到 SELinux](https://www.solidot.org/story?sid=80581)\n - [ ] [青少年可能不适合断食](https://www.solidot.org/story?sid=80580)\n - [ ] [日本政府将重新发展核电](https://www.solidot.org/story?sid=80579)\n- 腾讯玄武实验室\n - [ ] [每日安全动态推送(25/2/18)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960026&idx=1&sn=a6b3b18c68a2a23dfb2c6854255e463f&chksm=8baed245bcd95b532bedc5b2e1788d0577db0211a5ed16b23d4e95cc7134302a9a803a17dfad&scene=58&subscene=0#rd)\n- 雷神众测\n - [ ] [雷神众测漏洞周报2024.2.10-2024.2.16](https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503318&idx=1&sn=b5b13cfc554a840876a561de454e8f7e&chksm=f2585ea5c52fd7b368ebc5c86a95e6425d2a601f7df5519e543aa82f70e7d68e5de1882a350e&scene=58&subscene=0#rd)\n- 看雪学苑\n - [ ] [旅行APP流程分析（TCP+protobuf）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=1&sn=e1354617c606204a98db2a1960b7647d&chksm=b18c2aaa86fba3bc25d1d7e3d341a334fb0b35e4f4b63591cdb6b0749c7030212ba278bab9c5&scene=58&subscene=0#rd)\n - [ ] [立即预约！顺丰SRC第三届白帽技术沙龙即将开启](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=2&sn=278b59f239fe65d5cfe07f93ecaa636e&chksm=b18c2aaa86fba3bcedd2b8d75f3dfa777e55c1a4767c45b6a015e7d97213b67b22e727e8ac68&scene=58&subscene=0#rd)\n - [ ] [ChatGPT Operator 遭提示注入攻击](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589728&idx=3&sn=a005da20fc0a49c5e16d1ada1109ad46&chksm=b18c2aaa86fba3bc13efec4f0ade8cc48cb172e9486d09bd97b185c29dea9d667a9327beb034&scene=58&subscene=0#rd)\n- 吾爱破解论坛\n - [ ] [【2025春节】解题领红包之番外篇writeup](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141800&idx=1&sn=ce4fbd9d5e88415d4d773b2501fe657d&chksm=bd50a6fc8a272fea1d4e9755a365a519da26d3cd87eed14b4e0059d95b6951e0538608dced32&scene=58&subscene=0#rd)\n- 安全分析与研究\n - [ ] [TransparentTribe(透明部落) APT组织CrimsonRAT远控样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490574&idx=1&sn=01ffe4798637dd2465d3d3b7171b4aaa&chksm=902fb326a7583a30c4e61dde6527c7b77143024a1e40892601805568b72d1d1f9e9bb791b8f8&scene=58&subscene=0#rd)\n- 威努特安全网络\n - [ ] [威努特海上平台智算中心，助力海上油田智能化转型](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131173&idx=1&sn=ecda2cfd067a5213307b305e9e0616eb&chksm=80e71795b7909e835093c15ff3f9333b9413af6dd919217c768e638a49f1469eb115225f1425&scene=58&subscene=0#rd)\n- 暗影安全\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗？](https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165657&idx=1&sn=c6c0514ec5ae2bdece02b895469bacf8&chksm=f1d4d3bcc6a35aaa19cb47abfe0f407db4b4c97464d6c69e5de1ea2656b2044891a291847f6e&scene=58&subscene=0#rd)\n- 信安之路\n - [ ] [高效检测 SQL 注入漏洞，自动化实战经验分享](https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499808&idx=1&sn=1c6724f7a6565b221b60843413d36b8a&chksm=ec1df008db6a791e8fc2c1cc0d8c4d81737f1e79e1f95761924835b7161ff5f21f80c0724268&scene=58&subscene=0#rd)\n- ChaMd5安全团队\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗？](https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247511991&idx=1&sn=c40bb92defdfa8105881c5b26bec8c78&chksm=e89d876fdfea0e79ef69c60bce53d83d5cb023fdb5364f481f6ded6ab799ba1431fd8b880d11&scene=58&subscene=0#rd)\n- 安全内参\n - [ ] [新一轮勒索潮来了？超级勒索软件组织宣布攻陷47家企业](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513762&idx=1&sn=62912b605c08b523f4aa7e56733c954a&chksm=ebfaf182dc8d78945f71786a16c4ac7b798ea5e0444b31a8c9f9a73e58423bc65c0660459848&scene=58&subscene=0#rd)\n - [ ] [美国会拟立法：将太空系统作为关基设施进行保护](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513762&idx=2&sn=7915c55f55994f07201c25420d94731a&chksm=ebfaf182dc8d7894dada7eb2437159773a0c1e0a7ca77d79cdf630a59ca3b0dae9d500cd6078&scene=58&subscene=0#rd)\n- 安全实践\n - [ ] [2025开始资产配置，年终一起复盘](https://mp.weixin.qq.com/s?__biz=MzI5NzAzMDg0NA==&mid=2650698012&idx=1&sn=6bd707b9f86353bd96b581568133c700&chksm=f4b194cfc3c61dd9ef8285010597b71b0b7f6d17abf7c2c1896399a9c4fc9f728e59a79dde68&scene=58&subscene=0#rd)\n- Hacking就是好玩\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗？](https://mp.weixin.qq.com/s?__biz=MzU2NzcwNTY3Mg==&mid=2247485334&idx=1&sn=688a9c353d4c7b1232685404fc6ae399&chksm=fc986eb1cbefe7a78b8711640338b4f926f4cf1ef350bdf53fd64b8bcaf18e241a4417302a6a&scene=58&subscene=0#rd)\n- dotNet安全矩阵\n - [ ] [.NET 通过代码审计发现某 OA 系统全局性权限访问绕过漏洞](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498952&idx=1&sn=a08ebc1ce872683b07a16218dbcbc8e9&chksm=fa595225cd2edb33e2e0624ce93a8e1ad168afdaa762794a6062913e3d523289e1c16b3749af&scene=58&subscene=0#rd)\n - [ ] [.NET 安全攻防知识交流社区](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498952&idx=2&sn=a49e296419efabfbbbd89e3d51b8f18c&chksm=fa595225cd2edb334d39bed36f3d337a32ffcc250236a2dbf423b8eb4df9f9a9bcf4b275fc4b&scene=58&subscene=0#rd)\n - [ ] [一款通过调用Windows系统白名单文件执行PowerShell命令的工具](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498952&idx=3&sn=0bc91a522aca2f82d80edd2ae8742b71&chksm=fa595225cd2edb334536e258879a68a047f596ceb038b58f5a2df7ca33fb7642059e0b39c1a6&scene=58&subscene=0#rd)\n- 信息安全国家工程研究中心\n - [ ] [雨水 | 春雨滋养万物昌](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498870&idx=1&sn=2f2a11a83b3ebffd73e6da5f2b1e1fc2&chksm=feb67d65c9c1f47370aadc92070d2f9e422b734e3eb6674caf2c682c8b9110bccd4d0d9ca823&scene=58&subscene=0#rd)\n- 安全圈\n - [ ] [【安全圈】短视频平台“封号圈”乱象猖獗，IP查询如何助力防范](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=1&sn=77b78d28e626bb57cf51f82d0c472aa6&chksm=f36e7462c419fd74ab3906ce860f6440680390728f5808049a4037668b474c84037d2686cce6&scene=58&subscene=0#rd)\n - [ ] [【安全圈】俄罗斯黑客利用 7-Zip 零日漏洞攻击乌克兰](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=2&sn=634853ba2d9852cc240a7d5d46ce82c5&chksm=f36e7462c419fd74d29690ade86cd94c8f1353765e594a85d6f64779b2262b4aad515e3ff40c&scene=58&subscene=0#rd)\n - [ ] [【安全圈】微软发现用于加密货币盗窃的 XCSSET macOS 恶意软件变种](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=3&sn=b875bcdbb815582bbc7966d6ebc3a164&chksm=f36e7462c419fd74485e8ebdb3defa2fd94bb38ffe4cb647dd2e95a725273325e9a817afdddb&scene=58&subscene=0#rd)\n - [ ] [【安全圈】马斯克与 OpenAI 的交锋：收购提案遇冷，立场分歧引争议](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=4&sn=38c4e0921e00478f77d52173d75865fa&chksm=f36e7462c419fd743b5d8bf833ed7ec62a44e52917a3582cb5cd430619c335622558e4ec296b&scene=58&subscene=0#rd)\n- 数世咨询\n - [ ] [《全球数据泄露态势月度报告》（2025年1月）| 附下载地址](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247536793&idx=1&sn=cfd0b0c45c95f14ab3bb11106fcca468&chksm=c1442224f633ab32c95ea0c4ff07909c8342e3cd1c98d6b062e4db40bfaed538284513e50aab&scene=58&subscene=0#rd)\n- 知道创宇404实验室\n - [ ] [原创 Paper | 本地化 AI 审计工具落地小试牛刀](https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990663&idx=1&sn=d3612bcdf320efdc783e5740d519c69d&chksm=8079aa75b70e2363a96c1c2318ebdea7a8fda22f5029416d80c2a7cc641c0ee2e3d263c0c79b&scene=58&subscene=0#rd)\n- 安全学术圈\n - [ ] [特拉维夫大学 | FlowPic：一种通用的加密流量分类与应用识别表示方法](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491689&idx=1&sn=17687d1be26ab151a1e6d49e00a734e0&chksm=fe2d1fe2c95a96f4eddee949c7d9d669df8708caae70eb5e9a9a18eecf15d90eca0995d9c83a&scene=58&subscene=0#rd)\n- 代码卫士\n - [ ] [美国政府：开发人员应停止制造“不可原谅的”缓冲溢出漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=1&sn=f4ba8096e5c48add46aab6c9f0f9b6db&chksm=ea94a6bbdde32fad212f6cefd231e991e6b3aa181b89c3c4f8942edda2b8c87b959349dba3ab&scene=58&subscene=0#rd)\n - [ ] [VeraCore 两个0day漏洞被用于实施供应链攻击](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=2&sn=9b28d0ae22a8aee011365d83bbe3e244&chksm=ea94a6bbdde32fad583ad06bb5abe8c191b454c50e40661e1fbba804d5ae0e3a6d9cc4164ad8&scene=58&subscene=0#rd)\n- 微步在线\n - [ ] [突破千亿美元！CrowdStrike的顶级理解](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183152&idx=1&sn=c8baea3e5fbf8adbb58445304f3160fc&chksm=f4486e4cc33fe75a6889fd4400798823026225a843573abb95eeaf128a8025fb1257177f52cb&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [Grok3 来了，马斯克笑了，网站崩溃了](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073974&idx=1&sn=4f0cc225c27656ce2828992ef9f4579f&chksm=7e57cf8049204696cef80385843a3db30affa86ff2e1bb75b1f5dd335558ecf86ab9850e55b9&scene=58&subscene=0#rd)\n - [ ] [「9块9」 的中国 AI 耳机，疯狂收割老外](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073960&idx=1&sn=5c2319c04fa976eb3be557d768a9a010&chksm=7e57cf9e49204688c19df3ddedef1a50b0aceff13682d3a08edbe326dc7321389a3bde5b05f6&scene=58&subscene=0#rd)\n - [ ] [小米YU7续航820公里；OpenAI或发GPT-4.5狙击马斯克；DeepMind研究副总裁加盟字节跳动 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073947&idx=1&sn=459dcc6086a85c978352f0a5817f9305&chksm=7e57cfad492046bb7d901f0b9384f60e84bba68ff84cb391e50729b8e74d214a945b03eb56b3&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [马斯克Grok 3接入X平台：一场没有硝烟的“数据战争”，我们将如何突围？](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559771&idx=1&sn=7a1aa6dd145b6db21d216b962b96a900&chksm=87117b50b066f246e0ad0554e7d64caf1b6dfc17b0a9ce11e89802c0db324b1b567de7575e71&scene=58&subscene=0#rd)\n - [ ] [美国国务院全球人员名单数据分析与战略意图研判](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559771&idx=2&sn=5534a2140a7da0a950900b4c9dc705cb&chksm=87117b50b066f246924f5603e181a8b8b71e60e6e2d327882b25419e10813998b03f1a16b4d7&scene=58&subscene=0#rd)\n- 复旦白泽战队\n - [ ] [解锁安全研究新姿势：DeepSeek 本地部署指南](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247492941&idx=1&sn=476fc818f0028dad0a4bff3c74c59c09&chksm=fde86133ca9fe825e7b72423b6c538f0e2ac47d59a591854a3719f3d3b29f0c18e1347588af4&scene=58&subscene=0#rd)\n- 黑伞安全\n - [ ] [Run-llama/LlamaIndex 大模型框架提示词注入构造 sqli实现任意文件创建](https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489678&idx=1&sn=9039652d59a286b1904c7a3d68373f84&chksm=fb0295d6cc751cc001a871a2a515f11801be690b4da1548c74df06b4f971d46e06b94c132649&scene=58&subscene=0#rd)\n- 字节跳动技术团队\n - [ ] [独家首发，免费｜Trae 从入门到实践，开启 AI 编码新征程！](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513387&idx=1&sn=ce7672590c2cd60a22e9b620dcbdcfca&chksm=e9d37ec9dea4f7df39b5549782a0921ba94ce44b12aa184545d0e3be013b25b248d26446a04a&scene=58&subscene=0#rd)\n- 嘶吼专业版\n - [ ] [微软：黑客在设备代码钓鱼攻击中窃取电子邮件](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581190&idx=1&sn=4b0c5a0975729f23cbf0196d260df3cb&chksm=e9146e3cde63e72a6c68e3717252770ba4af7ddcd656d81e0e3220c3b6f769d7346e61b51764&scene=58&subscene=0#rd)\n - [ ] [中电安科|万事俱备，“职”等你来](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581190&idx=2&sn=23364da2fcdaabf3085192e999914d3a&chksm=e9146e3cde63e72ab1879f639dac35c0342e56bcff89c1ecee9b871e13927b415ddb571ad129&scene=58&subscene=0#rd)\n- 安全攻防团队\n - [ ] [腾讯云安全中心推出2025年1月必修安全漏洞清单](https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485049&idx=1&sn=2c3c26e2c4796c0f8af116747bc1187b&chksm=c2b1040ff5c68d1908d6d0b9c78e0d0ecc9ac81fef4dbf443c42b396962becfe491f85323aaa&scene=58&subscene=0#rd)\n- 渊龙Sec安全团队\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗？](https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485650&idx=1&sn=e20f3b5b3a27549b0f3549d813888c73&chksm=cfa49329f8d31a3f78eb1f422f41cb3c59ddc0d1b1539512d0abd1cbe344b61d6a114a7069a9&scene=58&subscene=0#rd)\n- 网络空间安全科学学报\n - [ ] [学术前沿 | 华南师范大学密码学与信息安全团队：白盒密码实现的侧信道分析技术综述](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505072&idx=1&sn=9f910b3ab2a5ccd60b3e071af3e4aaa7&chksm=e9bfc00edec84918e630b82f33309725ee168e285f72dac4e7a8adc24e86647dac879c47ccc1&scene=58&subscene=0#rd)\n- DEF CON Announcements!\n - [ ] [Franklin Project Hackers' Almanack from DEF CON 32!](https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20Hackers'%20Almanack.pdf)\n- TrustedSec\n - [ ] [Getting Started Using LLMs in Application Testing With an MVP](https://trustedsec.com/blog/getting-started-using-llms-in-application-testing-with-an-mvp)\n- Over Security - Cybersecurity news aggregator\n - [ ] [WinRAR 7.10 boosts Windows privacy by stripping MoTW data](https://www.bleepingcomputer.com/news/security/winrar-710-boosts-windows-privacy-by-stripping-motw-data/)\n - [ ] [Managed healthcare defense contractor to pay $11 million over alleged cyber failings](https://therecord.media/managed-health-tricare-false-claims)\n - [ ] [Cracked Garry’s Mod, BeamNG.drive games infect gamers with miners](https://www.bleepingcomputer.com/news/security/cracked-garrys-mod-beamngdrive-games-infect-gamers-with-miners/)\n - [ ] [Hackers use ‘sophisticated’ macOS malware to steal cryptocurrency, Microsoft says](https://therecord.media/hackers-use-macos-malware-to-steal-crypto)\n - [ ] [Venture capital giant Insight Partners hit by cyberattack](https://www.bleepingcomputer.com/news/security/venture-capital-giant-insight-partners-hit-by-cyberattack/)\n - [ ] [Microsoft reminds admins to prepare for WSUS driver sync deprecation](https://www.bleepingcomputer.com/news/microsoft/microsoft-reminds-admins-to-prepare-for-wsus-driver-sync-deprecation/)\n - [ ] [How Phished Data Turns into Apple & Google Wallets](https://krebsonsecurity.com/2025/02/how-phished-data-turns-into-apple-google-wallets/)\n - [ ] [Chinese hackers abuse Microsoft APP-v tool to evade antivirus](https://www.bleepingcomputer.com/news/security/chinese-hackers-abuse-microsoft-app-v-tool-to-evade-antivirus/)\n - [ ] [Ecuador's legislature says hackers attempted to access confidential information](https://therecord.media/ecuador-national-assembly-cyberattack)\n - [ ] [The people in Elon Musk’s DOGE universe](https://techcrunch.com/2025/02/18/the-people-in-elon-musk-doge-universe/)\n - [ ] [Hackers planted a Steam game with malware to steal gamers’ passwords](https://techcrunch.com/2025/02/18/hackers-planted-a-steam-game-with-malware-to-steal-gamers-passwords/)\n - [ ] [Juniper patches critical auth bypass in Session Smart routers](https://www.bleepingcomputer.com/news/security/juniper-patches-critical-auth-bypass-in-session-smart-routers/)\n - [ ] [New OpenSSH flaws expose SSH servers to MiTM and DoS attacks](https://www.bleepingcomputer.com/news/security/new-openssh-flaws-expose-ssh-servers-to-mitm-and-dos-attacks/)\n - [ ] [Cyberattack likely to have ‘material impact’ on media giant Lee Enterprises’ bottom line](https://therecord.media/cyberattack-lee-enterprises-news-media)\n - [ ] [Your Ultimate Guide to Online Brand Protection](https://bfore.ai/your-ultimate-guide-to-online-brand-protection/)\n - [ ] [Tulsi Gabbard ai vertici della National Intelligence: come cambia la cyber dei Servizi USA](https://www.cybersecurity360.it/news/tulsi-gabbard-ai-vertici-della-national-intelligence-come-cambia-la-cyber-dei-servizi-usa/)\n - [ ] [Compliance Isn’t Security: Why a Checklist Won’t Stop Cyberattacks](https://www.bleepingcomputer.com/news/security/compliance-isnt-security-why-a-checklist-wont-stop-cyberattacks/)\n - [ ] [L’ascesa di DeepSeek, la sfida della protezione di dati e AI nelle aziende](https://www.cybersecurity360.it/soluzioni-aziendali/lascesa-di-deepseek-la-sfida-della-protezione-di-dati-e-ai-nelle-aziende/)\n - [ ] [Dati personali pseudonimizzati e anonimi, la CNIL chiarisce bene la differenza](https://www.cybersecurity360.it/news/dati-personali-pseudonimizzati-e-anonimi-la-cnil-chiarisce-bene-la-differenza/)\n - [ ] [BforeAI Triumphs at CPX EMEA 2025 Innovation Sandbox Competition: Leading Preemptive Cyber Defense innovator secures top award](https://bfore.ai/bforeai-triumphs-at-cpx-emea-2025-innovation-sandbox-competition/)\n - [ ] [CERT-In Issues Critical Warning on Adobe Software Security Flaws](https://cyble.com/blog/cert-in-issues-critical-software-security-flaws/)\n - [ ] [CVE-2022-31631: High-Risk PHP Vulnerability Demands Immediate Patch](https://cyble.com/blog/cve-2022-31631-vulnerability-immediate-patch/)\n - [ ] [Lee Enterprises newspaper disruptions caused by ransomware attack](https://www.bleepingcomputer.com/news/security/lee-enterprises-newspaper-disruptions-caused-by-ransomware-attack/)\n - [ ] [Zhong Stealer Analysis: New Malware Targeting Fintech and Cryptocurrency](https://any.run/cybersecurity-blog/zhong-stealer-malware-analysis/)\n - [ ] [Quando l’“altro dipendente” diventa terzo: le responsabilità privacy nelle organizzazioni](https://www.cybersecurity360.it/legal/privacy-dati-personali/quando-laltro-dipendente-diventa-terzo-le-responsabilita-privacy-nelle-organizzazioni/)\n - [ ] [StaryDobry ruins New Year’s Eve, delivering miner instead of presents](https://securelist.com/starydobry-campaign-spreads-xmrig-miner-via-torrents/115509/)\n - [ ] [whoAMI, l’attacco di name confusion che sfrutta un errore di configurazione di AWS](https://www.securityinfo.it/2025/02/18/whoami-lattacco-di-name-confusion-che-sfrutta-un-errore-di-configurazione-di-aws/)\n - [ ] [Phishing sui motori di ricerca, l’esca è un PDF dannoso usato per rubare dati finanziari](https://www.cybersecurity360.it/news/phishing-sui-motori-di-ricerca-lesca-e-un-pdf-dannoso-usato-per-rubare-dati-finanziari/)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #752: Windows hello challenge part 3 fingerprints](https://www.hecfblog.com/2025/02/daily-blog-752-windows-hello-challenge.html)\n- Securityinfo.it\n - [ ] [whoAMI, l’attacco di name confusion che sfrutta un errore di configurazione di AWS](https://www.securityinfo.it/2025/02/18/whoami-lattacco-di-name-confusion-che-sfrutta-un-errore-di-configurazione-di-aws/?utm_source=rss&utm_medium=rss&utm_campaign=whoami-lattacco-di-name-confusion-che-sfrutta-un-errore-di-configurazione-di-aws)\n- 青藤智库\n - [ ] [企业级EDR实施技术指南：十大关键要素深度解析](https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489351&idx=1&sn=3da833b6858ec815c4acd2bffbdb5f69&chksm=fa58b57ccd2f3c6ab2cc18d4bf8ba912d182435ffce285f01c61664847b774308bde51ba5161&scene=58&subscene=0#rd)\n- ICT Security Magazine\n - [ ] [Il Divieto di TikTok, una panoramica approfondita](https://www.ictsecuritymagazine.com/articoli/divieto-di-tiktok/)\n - [ ] [Paragon: la vicenda dello spyware Graphite, i chiarimenti del Garante Privacy e il ruolo dell’ACN](https://www.ictsecuritymagazine.com/notizie/paragon-spyware-cyber/)\n - [ ] [Data Loss Prevention: Cause della perdita dei dati](https://www.ictsecuritymagazine.com/articoli/data-loss-cause/)\n- Full Disclosure\n - [ ] [Re: Netgear Router Administrative Web Interface Lacks Transport Encryption By Default](https://seclists.org/fulldisclosure/2025/Feb/14)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [https://SecTemplates.com - simplified, free open-source templates to enable engineering and smaller security teams to bootstrap security capabilities for their organizations, (Tue, Feb 18th)](https://isc.sans.edu/diary/rss/31696)\n - [ ] [ISC Stormcast For Tuesday, February 18th, 2025 https://isc.sans.edu/podcastdetail/9328, (Tue, Feb 18th)](https://isc.sans.edu/diary/rss/31694)\n - [ ] [ModelScan - Protection Against Model Serialization Attacks, (Mon, Feb 17th)](https://isc.sans.edu/diary/rss/31692)\n- 迪哥讲事\n - [ ] [Src第六期：稳住！别浪~](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497153&idx=1&sn=4d60c3c89eae0138d75f829c8f433627&chksm=e8a5ffa2dfd276b4b72173a26423b9e4b16176518083fc9c8188c76ec87d102ec8c7bf8b5b0d&scene=58&subscene=0#rd)\n- Security Affairs\n - [ ] [Juniper Networks fixed a critical flaw in Session Smart Routers](https://securityaffairs.com/174365/security/juniper-networks-fixed-a-critical-flaw-in-session-smart-routers.html)\n - [ ] [China-linked APT group Winnti targets Japanese organizations since March 2024](https://securityaffairs.com/174353/apt/china-linked-apt-group-winnti-targets-japanese-orgs.html)\n - [ ] [Xerox VersaLink C7025 Multifunction printer flaws may expose Windows Active Directory credentials to attackers](https://securityaffairs.com/174342/hacking/xerox-versalink-c7025-multifunction-printer-flaws.html)\n - [ ] [New XCSSET macOS malware variant used in limited attacks](https://securityaffairs.com/174333/malware/apple-macos-malware-xcsset-limited-attacks.html)\n- Graham Cluley\n - [ ] [The AI Fix #38: AI proves time travel is impossible (but still can’t draw fingers)](https://grahamcluley.com/the-ai-fix-38/)\n - [ ] [Got a Microsoft Teams invite? Storm-2372 gang exploit device codes in global phishing attacks](https://www.tripwire.com/state-of-security/microsoft-teams-storm-2372-exploit-device-codes)\n- Computer Forensics\n - [ ] [iOS WhatsAPP Database Encrypted](https://www.reddit.com/r/computerforensics/comments/1ism8na/ios_whatsapp_database_encrypted/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [Cloud platform recommendation as a test bed](https://www.reddit.com/r/netsecstudents/comments/1isk2bt/cloud_platform_recommendation_as_a_test_bed/)\n - [ ] [airtel fiber/airfiber portforwarding](https://www.reddit.com/r/netsecstudents/comments/1isil01/airtel_fiberairfiber_portforwarding/)\n - [ ] [I want to learn some skills or knowledge on this field but I have no idea where to start.](https://www.reddit.com/r/netsecstudents/comments/1isf9x0/i_want_to_learn_some_skills_or_knowledge_on_this/)\n - [ ] [How to Prepare for Cisco 700-240 Certification?](https://www.reddit.com/r/netsecstudents/comments/1ischo1/how_to_prepare_for_cisco_700240_certification/)\n- Krebs on Security\n - [ ] [How Phished Data Turns into Apple & Google Wallets](https://krebsonsecurity.com/2025/02/how-phished-data-turns-into-apple-google-wallets/)\n- FuzzWiki\n - [ ] [SEAMFUZZ：灰盒模糊测试的学习种子自适应突变策略](https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247486942&idx=1&sn=d249d0aa9047c41d34cb0da0cb74053b&chksm=fbd9a662ccae2f741e774425250e2a2894e7b3796ce123e69795798288442b9c5d04647a4069&scene=58&subscene=0#rd)\n- The Hacker News\n - [ ] [New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now](https://thehackernews.com/2025/02/new-openssh-flaws-enable-man-in-middle.html)\n - [ ] [Chinese Hackers Exploit MAVInject.exe to Evade Detection in Targeted Cyber Attacks](https://thehackernews.com/2025/02/chinese-hackers-exploit-mavinjectexe-to.html)\n - [ ] [New FrigidStealer Malware Targets macOS Users via Fake Browser Updates](https://thehackernews.com/2025/02/new-frigidstealer-malware-targets-macos.html)\n - [ ] [Debunking the AI Hype: Inside Real Hacker Tactics](https://thehackernews.com/2025/02/debunking-ai-hype-inside-real-hacker.html)\n - [ ] [Juniper Session Smart Routers Vulnerability Could Let Attackers Bypass Authentication](https://thehackernews.com/2025/02/juniper-session-smart-routers.html)\n - [ ] [Winnti APT41 Targets Japanese Firms in RevivalStone Cyber Espionage Campaign](https://thehackernews.com/2025/02/winnti-apt41-targets-japanese-firms-in.html)\n - [ ] [New Xerox Printer Flaws Could Let Attackers Capture Windows Active Directory Credentials](https://thehackernews.com/2025/02/new-xerox-printer-flaws-could-let.html)\n - [ ] [Cybercriminals Exploit Onerror Event in Image Tags to Deploy Payment Skimmers](https://thehackernews.com/2025/02/cybercriminals-exploit-onerror-event-in.html)\n- Technical Information Security Content & Discussion\n - [ ] [Everyday Ghidra: How Platform Choice Influences Ghidra’s Binary Analysis](https://www.reddit.com/r/netsec/comments/1isfypx/everyday_ghidra_how_platform_choice_influences/)\n - [ ] [Microsoft Edge Developer VM Remote Code Execution](https://www.reddit.com/r/netsec/comments/1isdwc6/microsoft_edge_developer_vm_remote_code_execution/)\n - [ ] [Arechclient2 (sectopRAT) Analysis – A Highly Obfuscated .NET RAT with Malicious Chrome Extension](https://www.reddit.com/r/netsec/comments/1isaca7/arechclient2_sectoprat_analysis_a_highly/)\n - [ ] [Passkey Raider: Burp Suite Extension for Pentesting Passkey (Pentest & Bug Bounty)](https://www.reddit.com/r/netsec/comments/1isbbvt/passkey_raider_burp_suite_extension_for/)\n- 恒脑与AI\n - [ ] [Grok-3“最聪明AI”来了！为您整理发布会重点及当下明星AI产品](https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496639&idx=1&sn=ebd1da91dd9c3743289106d6c491a062&chksm=e9fd6e2ede8ae738fb0088894c8e55e6a60eb4d8e4b9be65a7d9ecff32aec34c273b1800fa11&scene=58&subscene=0#rd)\n- Schneier on Security\n - [ ] [Story About Medical Device Security](https://www.schneier.com/blog/archives/2025/02/story-about-medical-device-security.html)\n- Your Open Hacker Community\n - [ ] [pentest / hacking courses+certification](https://www.reddit.com/r/HowToHack/comments/1isighp/pentest_hacking_coursescertification/)\n - [ ] [QuasarRAT exclusion on client side](https://www.reddit.com/r/HowToHack/comments/1is9bok/quasarrat_exclusion_on_client_side/)\n - [ ] [Can anyone help me to remove password from my pdf](https://www.reddit.com/r/HowToHack/comments/1isgixr/can_anyone_help_me_to_remove_password_from_my_pdf/)\n - [ ] [Scammed](https://www.reddit.com/r/HowToHack/comments/1is9bh3/scammed/)\n - [ ] [Am I hacked?](https://www.reddit.com/r/HowToHack/comments/1is2w86/am_i_hacked/)\n - [ ] [Hacking Old Roblox Account](https://www.reddit.com/r/HowToHack/comments/1is3dot/hacking_old_roblox_account/)\n- RedTeam\n - [ ] [DeepSeek本地化部署有风险！快来看看你中招了吗？](https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484156&idx=1&sn=19bb941c4a3c27e1a5239ddad80eeb2c&chksm=c006ca0cf771431a2a1a1311e6c489deec495226828e73bf98de345a40c1df31c0df51a4ff07&scene=58&subscene=0#rd)\n- Security Weekly Podcast Network (Audio)\n - [ ] [AI Threat Intelligence, AI Hacking, Data Breaches, Zhong, DOGE, and more - SWN #452](http://sites.libsyn.com/18678/ai-threat-intelligence-ai-hacking-data-breaches-zhong-doge-and-more-swn-452)\n - [ ] [Top 10 Web Hacking Techniques of 2024 - James Kettle - ASW #318](http://sites.libsyn.com/18678/top-10-web-hacking-techniques-of-2024-james-kettle-asw-318)\n"}}, "archive/daily/2025/2025-05-30.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747324.8072176, "n": 40250, "h": "dabfb13ddb72cf44", "c": "# 每日安全资讯（2025-05-30）\n\n- 奇安信攻防社区\n - [ ] [记一次帮丈母娘破解APP，满满的全是思路](https://forum.butian.net/share/4382)\n- Der Flounder\n - [ ] [Displaying DDM-deployed settings on macOS Sequoia](https://derflounder.wordpress.com/2025/05/29/displaying-ddm-deployed-settings-on-macos-sequoia/)\n- C0reFast记事本\n - [ ] [在三条指令内实现闰年判断](https://www.ichenfu.com/2025/05/29/a-leap-year-check-in-three-instructions/)\n- SecWiki News\n - [ ] [SecWiki News 2025-05-29 Review](http://www.sec-wiki.com/?2025-05-29)\n- Verne in GitHub\n - [ ] [Novita AI 面向 AI 开发者的 GPU 云平台](https://blog.einverne.info/post/2025/05/novita-ai-model-gpu-cloud.html)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [Campcodes Online Hospital Management System 1.0 SQL Injection](https://cxsecurity.com/issue/WLB-2025050055)\n - [ ] [ZTE ZXV10 H201L RCE via authentication bypass](https://cxsecurity.com/issue/WLB-2025050054)\n - [ ] [Invision Community 5.0.6 Remote Code Execution (RCE)](https://cxsecurity.com/issue/WLB-2025050053)\n - [ ] [UJCMS 9.6.3 User Enumeration via IDOR](https://cxsecurity.com/issue/WLB-2025050052)\n- Trustwave Blog\n - [ ] [Preventing Supply Chain Cyberattacks: Lessons from the Marks & Spencer Breach](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/preventing-supply-chain-cyberattacks-lessons-from-the-marks-spencer-breach/)\n- Tenable Blog\n - [ ] [Getting Ahead of AI Risk: What Comes Next for Tenable](https://www.tenable.com/blog/getting-ahead-of-ai-risk-what-comes-next-for-tenable)\n- 安全客-有思想的安全新媒体\n - [ ] [WordPress TI WooCommerce Wishlist 插件漏洞使 100,000+ 网站遭受网络攻击](https://www.anquanke.com/post/id/307980)\n - [ ] [Xenserver虚拟机工具for Windows漏洞让攻击者执行任意代码](https://www.anquanke.com/post/id/307977)\n - [ ] [PumaBot恶意软件瞄准Linux物联网设备](https://www.anquanke.com/post/id/307974)\n - [ ] [僵尸网络入侵 9,000 多台华硕路由器，添加持续 SSH 后门](https://www.anquanke.com/post/id/307971)\n - [ ] [新的 PumaBot 僵尸网络利用强制 SSH 凭据入侵设备](https://www.anquanke.com/post/id/307967)\n - [ ] [APT41 恶意软件滥用谷歌日历进行隐蔽的 C2 通信](https://www.anquanke.com/post/id/307963)\n - [ ] [Mimo 回归： CVE-2025-32432 在加密挖掘和代理软件活动中被利用](https://www.anquanke.com/post/id/307959)\n - [ ] [GitHub 成为全欧洲恶意软件交付的首选平台](https://www.anquanke.com/post/id/307956)\n - [ ] [俄勒冈州成为第二个禁止出售精确地理位置数据的州](https://www.anquanke.com/post/id/307952)\n - [ ] [警企协同共育先锋！360反涉网犯罪训练营第六期圆满收官！](https://www.anquanke.com/post/id/307941)\n - [ ] [360 MCP 生态安全风险治理实践与思考](https://www.anquanke.com/post/id/307934)\n- 90Sec - 最新话题\n - [ ] [90sec还在啊，回忆。。。](https://forum.90sec.com/t/topic/2504)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [网络犯罪分子利用假冒KeePass密码管理器进行ESXi勒索软件攻击](https://www.4hou.com/posts/QX80)\n- Recent Commits to cve:main\n - [ ] [Update Thu May 29 16:05:14 UTC 2025](https://github.com/trickest/cve/commit/be90f6209a98823918aa318fd983f78f2e01ad72)\n- paper - Last paper\n - [ ] [根除隐形威胁：检测、利用及修复跨 GitHub 的路径遍历漏洞](https://paper.seebug.org/3324/)\n- Security Boulevard\n - [ ] [Victoria’s Secret Hit By ‘Security Incident’ After Attacks on UK Retailers](https://securityboulevard.com/2025/05/victorias-secret-hit-by-security-incident-after-attacks-on-uk-retailers/?utm_source=rss&utm_medium=rss&utm_campaign=victorias-secret-hit-by-security-incident-after-attacks-on-uk-retailers)\n - [ ] [What Is MCP? The New Protocol Reshaping AI Agent Security](https://securityboulevard.com/2025/05/what-is-mcp-the-new-protocol-reshaping-ai-agent-security/?utm_source=rss&utm_medium=rss&utm_campaign=what-is-mcp-the-new-protocol-reshaping-ai-agent-security)\n - [ ] [CISA’s New SOAR Guidance Shows Where Automation Must Go Next](https://securityboulevard.com/2025/05/cisas-new-soar-guidance-shows-where-automation-must-go-next/?utm_source=rss&utm_medium=rss&utm_campaign=cisas-new-soar-guidance-shows-where-automation-must-go-next)\n - [ ] [CISO’s open letter on third-party software risk is a call to action](https://securityboulevard.com/2025/05/cisos-open-letter-on-third-party-software-risk-is-a-call-to-action/?utm_source=rss&utm_medium=rss&utm_campaign=cisos-open-letter-on-third-party-software-risk-is-a-call-to-action)\n - [ ] [Emulating the Unyielding Scattered Spider](https://securityboulevard.com/2025/05/emulating-the-unyielding-scattered-spider/?utm_source=rss&utm_medium=rss&utm_campaign=emulating-the-unyielding-scattered-spider)\n - [ ] [BSidesLV24 – PasswordsCon – We Removed Passwords, Now What?](https://securityboulevard.com/2025/05/bsideslv24-passwordscon-we-removed-passwords-now-what/?utm_source=rss&utm_medium=rss&utm_campaign=bsideslv24-passwordscon-we-removed-passwords-now-what)\n - [ ] [LogonBox SSPR 2.4.12 – Now Available](https://securityboulevard.com/2025/05/logonbox-sspr-2-4-12-now-available/?utm_source=rss&utm_medium=rss&utm_campaign=logonbox-sspr-2-4-12-now-available)\n - [ ] [Survey Surfaces Scope of Identity and Access Management Challenges](https://securityboulevard.com/2025/05/survey-surfaces-scope-of-identity-and-access-management-challenges/?utm_source=rss&utm_medium=rss&utm_campaign=survey-surfaces-scope-of-identity-and-access-management-challenges)\n - [ ] [Why Zscaler’s Acquisition of Red Canary Matters to Your Cybersecurity Strategy](https://securityboulevard.com/2025/05/why-zscalers-acquisition-of-red-canary-matters-to-your-cybersecurity-strategy/?utm_source=rss&utm_medium=rss&utm_campaign=why-zscalers-acquisition-of-red-canary-matters-to-your-cybersecurity-strategy)\n - [ ] [From bottleneck to business enabler: making PKI work for digital transformation](https://securityboulevard.com/2025/05/from-bottleneck-to-business-enabler-making-pki-work-for-digital-transformation/?utm_source=rss&utm_medium=rss&utm_campaign=from-bottleneck-to-business-enabler-making-pki-work-for-digital-transformation)\n- Microsoft Security Blog\n - [ ] [Defending against evolving identity attack techniques](https://www.microsoft.com/en-us/security/blog/2025/05/29/defending-against-evolving-identity-attack-techniques/)\n - [ ] [How to deploy AI safely](https://www.microsoft.com/en-us/security/blog/2025/05/29/how-to-deploy-ai-safely/)\n- InfoSec Write-ups - Medium\n - [ ] [GitHub Recon: The Underrated Technique to Discover High-Impact Leaks in Bug Bounty](https://infosecwriteups.com/github-recon-the-underrated-technique-to-discover-high-impact-leaks-in-bug-bounty-c4069894389a?source=rss----7b722bfd1b8d---4)\n - [ ] [Uncovering Amazon S3 Bucket Vulnerabilities: A Comprehensive Guide for Ethical Hackers](https://infosecwriteups.com/uncovering-amazon-s3-bucket-vulnerabilities-a-comprehensive-guide-for-ethical-hackers-0fc903ac21d0?source=rss----7b722bfd1b8d---4)\n - [ ] [Logic Flaw: Deleting HackerOne Team Reports Without Access Rights](https://infosecwriteups.com/logic-flaw-deleting-hackerone-team-reports-without-access-rights-1c4755a23af8?source=rss----7b722bfd1b8d---4)\n - [ ] [AI-Powered SQLMap: Smarter SQL Injection Testing Guide](https://infosecwriteups.com/ai-powered-sqlmap-smarter-sql-injection-testing-guide-5c5f59b99b4e?source=rss----7b722bfd1b8d---4)\n - [ ] [Bypassing Windows Defender & AVs with an LNK Exploit to Gain a Reverse Shell](https://infosecwriteups.com/bypassing-windows-defender-avs-with-an-lnk-exploit-to-gain-a-reverse-shell-09244fcefb10?source=rss----7b722bfd1b8d---4)\n - [ ] [This One Hacker Trick Got Me Access to an Admin Dashboard ️](https://infosecwriteups.com/this-one-hacker-trick-got-me-access-to-an-admin-dashboard-%EF%B8%8F-d9f0b6d633a0?source=rss----7b722bfd1b8d---4)\n - [ ] [Cracking JWTs: A Bug Bounty Hunting Guide [Part 1]](https://infosecwriteups.com/cracking-jwts-a-bug-bounty-hunting-guide-99d6c21d78c9?source=rss----7b722bfd1b8d---4)\n - [ ] [ChatGPT Jailbreaking: A Sneaky Loophole That Exposes Ethical Gaps](https://infosecwriteups.com/chatgpt-jailbreaking-a-sneaky-loophole-that-exposes-ethical-gaps-1f3dcf015bf6?source=rss----7b722bfd1b8d---4)\n - [ ] [Broken Access Control: The Quiet Killer in Web Applications](https://infosecwriteups.com/broken-access-control-the-quiet-killer-in-web-applications-79cb85f72cd8?source=rss----7b722bfd1b8d---4)\n - [ ] [Walkthrough — Assessment Methodologies: Enumeration CTF 1](https://infosecwriteups.com/walkthrough-assessment-methodologies-enumeration-ctf-1-90df505c3db5?source=rss----7b722bfd1b8d---4)\n- Doonsec's feed\n - [ ] [生成式AI应用分析报告（上）：深度合成服务现状](https://mp.weixin.qq.com/s?__biz=MzA3NDM4NTk4NA==&mid=2452946751&idx=1&sn=cdc3e4595e026e10bb06aed4b7296001)\n - [ ] [安全的本质是代码质量](https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484480&idx=1&sn=e1a98bbf0faa7bec4a2d297bfa633177)\n - [ ] [PHP_webshell免杀-绕过主流引擎通杀方案](https://mp.weixin.qq.com/s?__biz=MzkzNTcwOTgxMQ==&mid=2247486059&idx=1&sn=3705476c4651a2b9b4079fa3d91bfa01)\n - [ ] [Panalog大数据日志审计系统sprog_upstatus.php存在SQL注入漏洞](https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485861&idx=1&sn=05f3030231f775fe4410e25733c538c0)\n - [ ] [【端午放“粽”】｜网络安全热门证书+限时特惠来袭+转发免费抽书！](https://mp.weixin.qq.com/s?__biz=MzkyNTQzNzA3Nw==&mid=2247487088&idx=1&sn=c893b207a54818ee52f3a2e5098a08b9)\n - [ ] [【工具推荐】API安全检测自动化工具](https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519413&idx=1&sn=414164aead343aa1255b8204078b4c9e)\n - [ ] [工信部等三部门印发《电子信息制造业数字化转型实施方案》](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636000&idx=1&sn=2ddc077eb88d9d0e6d3d8c877eb02dc0)\n - [ ] [2025商用密码应用安全性评估技术交流会议通知](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636000&idx=2&sn=d5e76428873faed959d5299441aa728d)\n - [ ] [关注 | 工信部通报49款侵害用户权益行为的APP（SDK）（附清单）](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636000&idx=3&sn=937ed02f80b2c472f22ece6e5d12d28d)\n - [ ] [专家解读 | 国家网络身份认证公共服务筑牢数字安全屏障](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636000&idx=4&sn=37dc8a040a1c51633b75c8e51df75025)\n - [ ] [海南某网络科技公司数据泄露被罚5万元](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636000&idx=5&sn=4793498aff310020d509b8006785ede4)\n - [ ] [大语言模型安全测评技术科普：全面了解与应对潜在风险](https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484305&idx=1&sn=3857c3334f24b0779a9431d6c086373e)\n - [ ] [WEP协议安全解析：设计缺陷与破解原理](https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488276&idx=1&sn=3216179394df806b294abdada343b9fd)\n - [ ] [红蓝对抗挑战赛（个人赛）](https://mp.weixin.qq.com/s?__biz=MzkxMDc0MTc5Mw==&mid=2247483842&idx=1&sn=5816687f68c018fb7053e7dda4fb32c3)\n - [ ] [很想睡你，更想爱你。](https://mp.weixin.qq.com/s?__biz=Mzg4NDkwMDAyMQ==&mid=2247487704&idx=1&sn=7f0453e163b2779d3ec9014e9af9ff9f)\n - [ ] [第五届全国电子取证大赛 FIC决赛](https://mp.weixin.qq.com/s?__biz=MzU2NTY2MDAyMw==&mid=2247485391&idx=1&sn=352af07323d0db90a3c3be329186e9ef)\n - [ ] [500亿，珠海超级国资诞生](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485892&idx=1&sn=a053bf84b2fe21e64228e37ff80984fb)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485892&idx=2&sn=9904b4d79c3ff373804267482e76404c)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485892&idx=3&sn=0fa4b2d6b8b81e63cc412a6a192e1c80)\n - [ ] [【干货】笑傲职场的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485892&idx=4&sn=8c4535446da153353261aa4ec36cb957)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485892&idx=5&sn=835bde86e3122aaa037c7ab2a6bb2497)\n - [ ] [HG0991B助力新疆某地攻防演练圆满成功](https://mp.weixin.qq.com/s?__biz=MzU0NTU5NTA4NQ==&mid=2247491702&idx=1&sn=305b6b7c27aae87cbb14257150b7d307)\n - [ ] [AI安全 | Prompt越狱手册第一版发布](https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488204&idx=1&sn=639b6397821e6f1cff561ce82e8797b9)\n - [ ] [Windows PE文件格式详解（二）](https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484515&idx=1&sn=ae4f2137a5dff756f04a5c81cca0b415)\n - [ ] [被黑分析｜Cork Protocol 遭攻击，损失超千万美元](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247502322&idx=1&sn=5a8e01e119eb3ed9a98712f1149be4f5)\n - [ ] [全栈开发+跨端架构+AI：滴滴开源项目XIAOJUSURVEY入驻北大软微课堂](https://mp.weixin.qq.com/s?__biz=MzU1ODEzNjI2NA==&mid=2247573949&idx=1&sn=6513b73c47e667c655132927f99371ed)\n - [ ] [BCS2025国际关键信息基础设施网络安全论坛将于6月6日澳门开幕](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247627034&idx=1&sn=24b747ec0896e89e50489eb5c44a8d03)\n - [ ] [BCS2025分论坛议程重磅公布 扫码报名参与现场活动](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247627034&idx=2&sn=9b10a4bf7698a19a3710c2ec839ad025)\n - [ ] [2025大模型翻译技术及产业应用蓝皮书](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655280785&idx=1&sn=6e6739c7e18209188f3ba829c715d173)\n - [ ] [打不过就卷技战法](https://mp.weixin.qq.com/s?__biz=MzkzMzcxNTQyNw==&mid=2247487920&idx=1&sn=69028c5831ef6affe0ab7d4423d4db0a)\n - [ ] [LDAP 枚举在 2025 年红队行动中仍然可行](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488594&idx=1&sn=fb5f7cc74d49a8aa54be4870f30a186c)\n - [ ] [安全不打烊 | 锦岳智慧 \\\"端午节” 安全保障](https://mp.weixin.qq.com/s?__biz=MzkxMzQwNDcxNg==&mid=2247487201&idx=1&sn=1399eb06dbffd948b029e5ded3310651)\n - [ ] [网络安全等级保护测评高风险判定实施指引(试行)发布](https://mp.weixin.qq.com/s?__biz=MzU1ODM1Njc1Ng==&mid=2247498368&idx=1&sn=2214798ef567e2b4de5c0cd84ad6919a)\n - [ ] [图形化工具箱 - LaunchBox](https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486384&idx=1&sn=a049a6da67196a8f21b0469089bebb12)\n - [ ] [电脑开荒必备！这 4 款神器让 Win 系统效率飙升，618 特惠别错过](https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492414&idx=1&sn=f6a29b1317273c36e8d1edea30471d8f)\n - [ ] [培训通知 | 2025年数据安全工程师暨数据安全技术（高级）培训班（第一期）报名开启！](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518618&idx=1&sn=6e9333f046c9767fd0468e908e502c82)\n - [ ] [“偷”信息、乱弹窗……49款APP被通报！](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518618&idx=2&sn=87a302dfdcdb5b62b043ebe34bd39d11)\n - [ ] [AI让你变懒：30秒的事，非用它花1分钟？](https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491588&idx=1&sn=4553e192fe6a88797e905c746bb2c2b9)\n - [ ] [【活动】618风控专项，单个奖励最高4w+！](https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727845600&idx=1&sn=6cb05bfaef7a81ff9c0c128f5f082c6f)\n - [ ] [聚焦课标建设，共探高职安全课程建设新路径](https://mp.weixin.qq.com/s?__biz=MzU1NTYxMjA5MA==&mid=2247505833&idx=1&sn=99f9e65e2e9799125808fd04a9f22f3e)\n - [ ] [【安全圈】微软OneDrive文件选择器漏洞曝光：网站可窃取用户全部云存储数据](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069879&idx=1&sn=2b0d058ac337d26093a5ae849717e3dd)\n- Cerbero Blog\n - [ ] [HFS+ File System](https://blog.cerbero.io/hfs-file-system/)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [GitHub Recon: The Underrated Technique to Discover High-Impact Leaks in Bug Bounty](https://infosecwriteups.com/github-recon-the-underrated-technique-to-discover-high-impact-leaks-in-bug-bounty-c4069894389a?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Uncovering Amazon S3 Bucket Vulnerabilities: A Comprehensive Guide for Ethical Hackers](https://infosecwriteups.com/uncovering-amazon-s3-bucket-vulnerabilities-a-comprehensive-guide-for-ethical-hackers-0fc903ac21d0?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Logic Flaw: Deleting HackerOne Team Reports Without Access Rights](https://infosecwriteups.com/logic-flaw-deleting-hackerone-team-reports-without-access-rights-1c4755a23af8?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Bypassing Windows Defender & AVs with an LNK Exploit to Gain a Reverse Shell](https://infosecwriteups.com/bypassing-windows-defender-avs-with-an-lnk-exploit-to-gain-a-reverse-shell-09244fcefb10?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Cracking JWTs: A Bug Bounty Hunting Guide [Part 1]](https://infosecwriteups.com/cracking-jwts-a-bug-bounty-hunting-guide-99d6c21d78c9?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [ChatGPT Jailbreaking: A Sneaky Loophole That Exposes Ethical Gaps](https://infosecwriteups.com/chatgpt-jailbreaking-a-sneaky-loophole-that-exposes-ethical-gaps-1f3dcf015bf6?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Broken Access Control: The Quiet Killer in Web Applications](https://infosecwriteups.com/broken-access-control-the-quiet-killer-in-web-applications-79cb85f72cd8?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Unsafe Redirects = Unlimited Ride: How Open Redirect Led Me to Internal Dashboards](https://infosecwriteups.com/unsafe-redirects-unlimited-ride-how-open-redirect-led-me-to-internal-dashboards-c371e1aa9fbc?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [I Tried 10 Recon Tools for 7 Days — Here’s What Actually Found Bugs](https://infosecwriteups.com/i-tried-10-recon-tools-for-7-days-heres-what-actually-found-bugs-9013b4cd2396?source=rss----7b722bfd1b8d--bug_bounty)\n- Horizon3.ai\n - [ ] [CVE-2025-20188](https://horizon3.ai/attack-research/vulnerabilities/cve-2025-20188/)\n - [ ] [Cisco IOS XE WLC Arbitrary File Upload Vulnerability (CVE-2025-20188) Analysis](https://horizon3.ai/attack-research/attack-blogs/cisco-ios-xe-wlc-arbitrary-file-upload-vulnerability-cve-2025-20188-analysis/)\n- GuidePoint Security\n - [ ] [How Mature Is Your Identity and Access Management Program?](https://www.guidepointsecurity.com/blog/how-mature-is-your-identity-and-access-management-program/)\n- The Trail of Bits Blog\n - [ ] [The Custodial Stablecoin Rekt Test](https://blog.trailofbits.com/2025/05/29/the-custodial-stablecoin-rekt-test/)\n- Didier Stevens\n - [ ] [Quickpost: Airplanes & Radiation](https://blog.didierstevens.com/2025/05/29/quickpost-airplanes-radiation/)\n - [ ] [Update: process-binary-file.py Version 0.0.11](https://blog.didierstevens.com/2025/05/29/update-process-binary-file-py-version-0-0-11/)\n- Malwarebytes\n - [ ] [Porn sites probed for allegedly failing to prevent minors from accessing content](https://www.malwarebytes.com/blog/news/2025/05/porn-sites-probed-for-allegedly-failing-to-prevent-minors-from-accessing-content)\n - [ ] [Take back control of your browser—Malwarebytes Browser Guard now blocks search hijacking attempts](https://www.malwarebytes.com/blog/product/2025/05/take-back-control-of-your-browsermalwarebytes-browser-guard-will-now-block-search-hijacking-attempts)\n- SentinelOne\n - [ ] [Update on May 29 Outage](https://www.sentinelone.com/blog/update-on-may-29-outage/)\n- PortSwigger Blog\n - [ ] [Meet Burp Suite DAST: Your questions answered](https://portswigger.net/blog/meet-burp-suite-dast-your-questions-answered)\n- daniel.haxx.se\n - [ ] [Decomplexification](https://daniel.haxx.se/blog/2025/05/29/decomplexification/)\n- Exploit-DB.com RSS Feed\n - [ ] [[webapps] Campcodes Online Hospital Management System 1.0 - SQL Injection](https://www.exploit-db.com/exploits/52312)\n - [ ] [[remote] SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal](https://www.exploit-db.com/exploits/52311)\n - [ ] [[remote] Windows File Explorer Windows 11 (23H2) - NTLM Hash Disclosure](https://www.exploit-db.com/exploits/52310)\n - [ ] [[remote] Automic Agent 24.3.0 HF4 - Privilege Escalation](https://www.exploit-db.com/exploits/52309)\n - [ ] [[remote] Fortra GoAnywhere MFT 7.4.1 - Authentication Bypass](https://www.exploit-db.com/exploits/52308)\n - [ ] [[webapps] WordPress Digits Plugin 8.4.6.1 - Authentication Bypass via OTP Bruteforcing](https://www.exploit-db.com/exploits/52307)\n- Offensive OSINT\n - [ ] [Offensive OSINT s05e09 - Open Source Surveillance - Anomaly detection](https://www.offensiveosint.io/offensive-osint-s05e09-open-source-surveillance-anomaly-detection/)\n- Security Blog | Praetorian\n - [ ] [Hardware Hacking a Nicotine Vape](https://www.praetorian.com/blog/hardware-hacking-a-nicotine-vape/)\n- 体验盒子\n - [ ] [AutoGen Studio 容器化部署与维护指南](https://www.uedbox.com/post/119359/)\n- 奇客Solidot–传递最新科技情报\n - [ ] [惠普将停止在中国制造销往北美的产品](https://www.solidot.org/story?sid=81430)\n - [ ] [通过饮料摄入糖比食用糖对健康危害更大](https://www.solidot.org/story?sid=81429)\n - [ ] [天问二号将执行小行星取样任务](https://www.solidot.org/story?sid=81428)\n - [ ] [组合使用两种抗衰老药物延长小鼠寿命三成](https://www.solidot.org/story?sid=81427)\n - [ ] [微软向第三方应用开放 Windows Update](https://www.solidot.org/story?sid=81426)\n - [ ] [日本邮政推出数字地址](https://www.solidot.org/story?sid=81425)\n - [ ] [甲骨文通过 GitHub 上发布 VirtualBox 源代码](https://www.solidot.org/story?sid=81424)\n - [ ] [数千华硕路由器感染了难以清除的后门](https://www.solidot.org/story?sid=81423)\n - [ ] [苹果操作系统将用年份标识版本号](https://www.solidot.org/story?sid=81422)\n - [ ] [为什么我们遵守规则？](https://www.solidot.org/story?sid=81421)\n - [ ] [美国将撤销中国留学生签证](https://www.solidot.org/story?sid=81420)\n- 威努特安全网络\n - [ ] [解读 | 公安部《网络安全等级保护测评高风险判定实施指引》](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651133212&idx=1&sn=f2153983de97faadfb95182c8693279c)\n- Twitter @James Kettle\n - [ ] [RT Gareth Heyes \\u2028: Crafty JavaScript-context XSS vector using ondevicemotion, setTimeout, and URIError spoofing to trigger alert(1) now added to ...](https://x.com/albinowax/status/1928137940129005787)\n - [ ] [This release also fixes a false positive in the time-based code execution check - sorry about that. Thanks to everyone who reported it!](https://x.com/albinowax/status/1928049545449001302)\n- Wallarm\n - [ ] [CISO Spotlight: Mike Wilkes on Building Resilience in an Evolving Threat Landscape](https://lab.wallarm.com/ciso-spotlight-mike-wilkes-building-resilience-evolving-threat-landscape/)\n- 看雪学苑\n - [ ] [Google CTF 2023 - v8box](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458594737&idx=1&sn=d889136869e79b65ea2b383c9ead7cf6)\n - [ ] [外出充电需警惕！ChoiceJacking 攻击来袭，安卓、苹果手机无一幸免](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458594737&idx=2&sn=d5d5937dd797ac639b98d6ed8f484849)\n - [ ] [还等什么？30小时入门CTF，速来学](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458594737&idx=3&sn=baf69116556c6244831995827e7f034d)\n- 安全内参\n - [ ] [美军工巨头押注AI赋能网络攻击，超21亿元收购漏洞利用厂商](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514445&idx=1&sn=6f6043b769f9bed3eb4ff2904556f776)\n - [ ] [BCS2025分论坛议程全部公布，扫码报名参与现场活动](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514445&idx=2&sn=90f8b34a7ccff3c948e3d87ca444e793)\n- 代码卫士\n - [ ] [看我如何通过 OpenAI o3 挖到 Linux 内核远程 0day](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523149&idx=1&sn=0298267a08369cc3ea9bdbdec81eb788)\n- HackerNews\n - [ ] [僵尸网络入侵 9000 多台华硕路由器，添加持久 SSH 后门](https://hackernews.cc/archives/59011)\n - [ ] [​​Etsy 与 TikTok Shop 重大数据泄露致 160 万客户邮箱信息外流​](https://hackernews.cc/archives/59007)\n- dotNet安全矩阵\n - [ ] [WebShell 对抗进化，规避w3wp进程树监测，黑屏之下绕过 cmd.exe 调用链静默执行](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499761&idx=1&sn=24fcfa2debbc5369d0428c47b4efdbdd)\n - [ ] [报名学习 | 国内最专业、最全面的 [ .NET 代码审计 ] 体系化视频学习课程](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499761&idx=2&sn=52794cd17c05b52f24f2fa9ccaff28ab)\n - [ ] [.NET 某文本编辑器老版本文件名设计缺陷实现文件上传](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499761&idx=3&sn=fabc0c59ad56835a7af740e37ed7eac1)\n- 电子物证\n - [ ] [【第一批全国检察技术专家养成记：那些鲜为人知的工作经历】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048456&idx=1&sn=6a420546a148da5e42e6d6451f69339a)\n - [ ] [【可信时间戳证据如何提交给法院？】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048456&idx=2&sn=6472867d42ce994ad2b5934305f089e4)\n- 丁爸 情报分析师的工具箱\n - [ ] [【资料】生物战历史](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651150151&idx=1&sn=97b98791deefba1b4eb1bd96b74645a9)\n- 安全学术圈\n - [ ] [纽约州立大学石溪分校 | 模糊的指纹：Web 应用程序指纹识别的性能提升](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247492331&idx=1&sn=b298304a8eaf635891de43ca36b66ed6)\n- 腾讯玄武实验室\n - [ ] [每日安全动态推送(25/5/29)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960109&idx=1&sn=f350021ce950e0fdb24259929394655e)\n- 极客公园\n - [ ] [还在等快递？这届 618 别人已经收货了](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653080398&idx=1&sn=125601ba512b9aa6d5befd4a2405302f)\n - [ ] [测评 | 从实验室到茶水间，可量产万元全尺寸具身机器人全网首测](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653080367&idx=1&sn=5435898ca49ac0ad09f82a6e7b4511dd)\n - [ ] [DeepSeek R1模型升级，编程暴强；小鹏M03顶配上市，12.98万起；iOS或更名iOS 26 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653080336&idx=1&sn=850ddff921705dd45cd1acdd63111d40)\n- 数世咨询\n - [ ] [探秘1110亿美元云安全市场：并购、扩张与未来战略方向](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538978&idx=1&sn=710a8e6965fa799753a2311121e613d7)\n - [ ] [直播预约：第十届“创客中国”网络安全中小企业创新创业大赛启动仪式](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538978&idx=2&sn=45a4d1448170c6a0b5e92332f3cc1f5f)\n - [ ] [倒计时2天 | 第十届“创客中国”网络安全中小企业创新创业大赛](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538978&idx=3&sn=24831e2c770347e02b3950915c9c1558)\n- 安全实践\n - [ ] [20250529 | 黄金3500点调整浪形](https://mp.weixin.qq.com/s?__biz=MzI5NzAzMDg0NA==&mid=2650698289&idx=1&sn=b96e1c08c77ca1e9a6732f054155008d)\n- 情报分析师\n - [ ] [美国反情报体系深入研究——一场看不见的战争](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650561117&idx=1&sn=5300129783cd83027c3977dcf04f81d1)\n- 慢雾科技\n - [ ] [被黑分析｜Cork Protocol 遭攻击，损失超千万美元](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247502322&idx=1&sn=5a8e01e119eb3ed9a98712f1149be4f5)\n- 谛听ditecting\n - [ ] [谛听 | Patty: 基于模式序列的未知工业控制协议语义分析](https://mp.weixin.qq.com/s?__biz=MzU3MzQyOTU0Nw==&mid=2247495815&idx=1&sn=9469e6d8c261974ef212e70f53930b05)\n- 美团安全应急响应中心\n - [ ] [报名 | 美团技术沙龙【AI+安全：智能技术在安全领域的应用探索】](https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493889&idx=1&sn=4701431171173014d00aef3e7050372d)\n- 信息安全国家工程研究中心\n - [ ] [国务院、中央军委公布实施《重要军工设施保护条例》，要求落实网络安全和数据安全保护责任](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247499884&idx=1&sn=d31bf80d8bb70f5548c7b116c11c8e2c)\n- 字节跳动安全中心\n - [ ] [ByteSRC全域众测｜3倍积分！送Apple全家桶！](https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494846&idx=1&sn=857c151800e2959a3229210102fd193a)\n- 中国信息安全\n - [ ] [专题·网安人才评价体系 | 网络安全人才专业能力全面评价体系分析](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664243266&idx=1&sn=53e88fa106fcdad0db066999bf41b1f9)\n - [ ] [关注 | 工信部通报49款侵害用户权益行为的APP（SDK）（附清单）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664243266&idx=2&sn=059c8da60364a2de6b156471cf2d2043)\n - [ ] [专家解读 | 国家网络身份认证公共服务筑牢数字安全屏障](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664243266&idx=3&sn=14f94c1876577c556a1af92d0f52a06f)\n- NOVASEC\n - [ ] [Fortity SCA 审计规则更新](https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490486&idx=1&sn=11a3f2ad05bde41fd968564271a3003d)\n- 安全圈\n - [ ] [【安全圈】微软OneDrive文件选择器漏洞曝光：网站可窃取用户全部云存储数据](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069879&idx=1&sn=2b0d058ac337d26093a5ae849717e3dd)\n - [ ] [【安全圈】僵尸网络入侵 9,000 多台华硕路由器，添加持续 SSH 后门](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069879&idx=2&sn=abf9e6d63b21d2585d9f6b3c0cb32256)\n - [ ] [【安全圈】PumaBot恶意软件瞄准Linux物联网设备](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069879&idx=3&sn=b0a9e08b3f0746f8950bd9293c8b600b)\n - [ ] [【安全圈】WordPress TI WooCommerce Wishlist 插件漏洞使 100,000+ 网站遭受网络攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069879&idx=4&sn=457158cecc79f277656b8bad13f79e3f)\n- TrustedSec\n - [ ] [Apples, Pears, and Oranges: Not All Pentest Firms Are the Same](https://trustedsec.com/blog/apples-pears-and-oranges-not-all-pentest-firms-are-the-same)\n- 迪哥讲事\n - [ ] [字越少,事越大](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497661&idx=1&sn=dab553cc79407bbc5c60fd7d2bde7fc9)\n- 360数字安全\n - [ ] [360 斩获国家级信息安全服务最高级别资质 树立行业服务标杆](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580667&idx=1&sn=1e8db6376f56c0f6e2df645421706428)\n- 山石网科安全技术研究院\n - [ ] [通过WinGet和微软子域名劫持PC Manager的潜在风险](https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512282&idx=1&sn=e1b0f46129153389fe182fe970b3a0a8)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Diagnosing Toyota TPMS sensors with rtl_433](https://r-c-y.net/posts/tpms/)\n - [ ] [ConnectWise says nation-state attack targeted multiple ScreenConnect customers](https://therecord.media/connectwise-nation-state-attack-targeted-some-customers)\n - [ ] [ConnectWise breached in cyberattack linked to nation-state hackers](https://www.bleepingcomputer.com/news/security/connectwise-breached-in-cyberattack-linked-to-nation-state-hackers/)\n - [ ] [A new author has appeared](https://blog.talosintelligence.com/a-new-author-has-appeared/)\n - [ ] [US government sanctions tech company involved in cyber scams](https://techcrunch.com/2025/05/29/us-government-sanctions-tech-company-involved-in-cyber-scams/)\n - [ ] [Data breach con 184 milioni di dati esposti coinvolge Google, Microsoft e Facebook: come proteggersi](https://www.cybersecurity360.it/news/data-breach-con-184-milioni-di-dati-esposti-coinvolge-google-microsoft-e-facebook-come-proteggersi/)\n - [ ] [Southeast Asian provider of ‘infrastructure laundering’ for scams is sanctioned by US](https://therecord.media/southeast-asian-provider-of-scam-infrastructure-sanctioned)\n - [ ] [Threat actors abuse Google Apps Script in evasive phishing attacks](https://www.bleepingcomputer.com/news/security/threat-actors-abuse-google-apps-script-in-evasive-phishing-attacks/)\n - [ ] [Apple Safari exposes users to fullscreen browser-in-the-middle attacks](https://www.bleepingcomputer.com/news/security/apple-safari-exposes-users-to-fullscreen-browser-in-the-middle-attacks/)\n - [ ] [Exploring the LockBit Panel Breach – What Logs and Chats Reveal About Ransomware-as-a-Service](https://labs.yarix.com/2025/05/exploring-the-lockbit-panel-breach-what-logs-and-chats-reveal-about-ransomware-as-a-service/)\n - [ ] [US sanctions firm linked to cyber scams behind $200 million in losses](https://www.bleepingcomputer.com/news/security/us-sanctions-company-linked-to-hundreds-of-thousands-of-cyber-scam-sites/)\n - [ ] [Cybercriminals exploit AI hype to spread ransomware, malware](https://www.bleepingcomputer.com/news/security/cybercriminals-exploit-ai-hype-to-spread-ransomware-malware/)\n - [ ] [Attackers are mapping your attack surface—are you?](https://www.bleepingcomputer.com/news/security/attackers-are-mapping-your-attack-surface-are-you/)\n - [ ] [Victoria’s Secret website down as company investigates security incident](https://therecord.media/victorias-secret-website-down-security-incident)\n - [ ] [China-linked hackers exploit Google Calendar in cyberattacks on governments](https://therecord.media/china-linked-apt41-exploits-google-calendar-in-cyberattacks)\n - [ ] [Fake Bitdefender website used to spread infostealer malware](https://therecord.media/fake-bitdefender-website-venomrat-infostealer)\n - [ ] [UK military to establish new Cyber and Electromagnetic Command](https://therecord.media/uk-military-new-cyber-electromagnetic-command)\n - [ ] [Guida VPN: come funzionano e quale scegliere per la massima sicurezza online](https://www.cybersecurity360.it/cultura-cyber/guida-vpn-come-funziona-e-quale-scegliere/)\n - [ ] [Victoria’s Secret takes down website after security incident](https://www.bleepingcomputer.com/news/security/victorias-secret-takes-down-website-after-security-incident/)\n - [ ] [Threat Report: Phishing Tactics Targeting the Travel and Hospitality Sector](https://bfore.ai/phishing-tactics-targeting-travel-and-hospitality-sector-threat-report/)\n - [ ] [Come vedere il Mondiale per Club: in chiaro, streaming e con VPN](https://www.cybersecurity360.it/cybersecurity-nazionale/come-vedere-il-mondiale-per-club-in-chiaro-streaming-e-con-vpn/)\n - [ ] [Cybercriminals camouflaging threats as AI tool installers](https://blog.talosintelligence.com/fake-ai-tool-installers/)\n - [ ] [Microsoft: Windows 11 might fail to start after installing KB5058405](https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-11-might-fail-to-start-after-installing-kb5058405/)\n - [ ] [Data broker LexisNexis discloses data breach affecting 364,000 people](https://www.bleepingcomputer.com/news/security/data-broker-lexisnexis-discloses-data-breach-affecting-364-000-people/)\n - [ ] [DORA in pratica: sviluppi regolatori e norme tecniche di attuazione](https://www.cybersecurity360.it/legal/dora-in-pratica-sviluppi-regolatori-e-norme-tecniche-di-attuazione/)\n - [ ] [AsyncRAT colpisce l’Italia con la steganografia: la nuova campagna malspam](https://www.cybersecurity360.it/news/asyncrat-colpisce-litalia-con-la-steganografia-la-nuova-campagna-malspam/)\n - [ ] [What Motivates Website Malware Attacks?](https://blog.sucuri.net/2025/05/what-motivates-website-malware-attacks.html)\n - [ ] [Instagram Lures, Microsoft Spoofs, and SIM Swaps: A Mid-May Phishing Breakdown](https://pixmsecurity.com/blog/blog/instagram-lures-microsoft-spoofs-and-sim-swaps-a-mid-may-phishing-breakdown/)\n- 火绒安全\n - [ ] [“粽”奖啦丨祝大家端午安康，“粽”享好时光~](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525627&idx=1&sn=1b8f7a961515e76d45d09a545c9342b9)\n - [ ] [端午期间火绒将持续为您护航~](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525627&idx=2&sn=788b232905604868b6e4e1dc937705fe)\n- NetSPI\n - [ ] [CVE-2025-23009 & CVE-2025-23010: Elevating Privileges with SonicWall NetExtender](https://www.netspi.com/blog/technical-blog/red-teaming/elevating-privileges-with-sonicwall-netextender/)\n- 嘶吼专业版\n - [ ] [网络犯罪分子利用假冒KeePass密码管理器进行ESXi勒索软件攻击](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582615&idx=1&sn=c23e3a2f9c250b7302f7dec9db84ef3c)\n- ICT Security Magazine\n - [ ] [DragonForce Exploits: Ransomware-as-a-Service](https://www.ictsecuritymagazine.com/articoli/dragonforce-exploits/)\n - [ ] [Penetration Testing: norme, standard e impatti economici nell’era della Cyber Resilience](https://www.ictsecuritymagazine.com/notizie/penetration-testing-norme-standard-e-impatti-economici-nellera-della-cyber-resilience/)\n - [ ] [La sovranità digitale tra sicurezza nazionale e diritti fondamentali](https://www.ictsecuritymagazine.com/articoli/sovranita-digitale-sicurezza-nazionale/)\n- 字节跳动技术团队\n - [ ] [“寻找地表最强 Trae Agent”征文活动火热开启！iPhone16 等你来拿！](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247514694&idx=1&sn=7ef303e593c36f1e2e8e10344ebd02fa)\n- 360漏洞云\n - [ ] [“粽”享礼金，挖洞必“粽”，端午0DAY竞渡挑战赛开启！](https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503765&idx=1&sn=c91971d705c969009f7e9fd460725ad0)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [ISC Stormcast For Thursday, May 29th, 2025 https://isc.sans.edu/podcastdetail/9470, (Thu, May 29th)](https://isc.sans.edu/diary/rss/31992)\n - [ ] [Alternate Data Streams ? Adversary Defense Evasion and Detection [Guest Diary], (Wed, May 28th)](https://isc.sans.edu/diary/rss/31990)\n- Schneier on Security\n - [ ] [Friday Squid Blogging: NGC 1068 Is the “Squid Galaxy”](https://www.schneier.com/blog/archives/2025/05/friday-squid-blogging-ngc-1068-is-the-squid-galaxy.html)\n - [ ] [Surveillance Via Smart Toothbrush](https://www.schneier.com/blog/archives/2025/05/surveillance-via-smart-toothbrush.html)\n- Tor Project blog\n - [ ] [New Release: Tails 6.16](https://blog.torproject.org/new-release-tails-6_16/)\n- Technical Information Security Content & Discussion\n - [ ] [Deguard: turning a T480 into a coreboot laptop (10-min talk + live demo)](https://www.reddit.com/r/netsec/comments/1ky7bng/deguard_turning_a_t480_into_a_coreboot_laptop/)\n- The Hacker News\n - [ ] [Cybercriminals Target AI Users with Malware-Loaded Installers Posing as Popular Tools](https://thehackernews.com/2025/05/cybercriminals-target-ai-users-with.html)\n - [ ] [New Windows RAT Evades Detection for Weeks Using Corrupted DOS and PE Headers](https://thehackernews.com/2025/05/new-windows-rat-evades-detection-for.html)\n - [ ] [DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer Endpoints](https://thehackernews.com/2025/05/dragonforce-exploits-simplehelp-flaws.html)\n - [ ] [Chinese APT41 Exploits Google Calendar for Malware Command-and-Control Operations](https://thehackernews.com/2025/05/chinese-apt41-exploits-google-calendar.html)\n - [ ] [Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist Plugin](https://thehackernews.com/2025/05/over-100000-wordpress-sites-at-risk.html)\n- Deep Web\n - [ ] [How to get cheap Monero?](https://www.reddit.com/r/deepweb/comments/1kyigo6/how_to_get_cheap_monero/)\n - [ ] [Help](https://www.reddit.com/r/deepweb/comments/1kydjfn/help/)\n- Social Engineering\n - [ ] [The Fake Charmer Everyone Loves](https://www.reddit.com/r/SocialEngineering/comments/1kykfla/the_fake_charmer_everyone_loves/)\n - [ ] [How Can We Build Digital Exploitation Awareness?](https://www.reddit.com/r/SocialEngineering/comments/1kyetgu/how_can_we_build_digital_exploitation_awareness/)\n - [ ] [What does ‘social engineering’ mean to you?](https://www.reddit.com/r/SocialEngineering/comments/1kycwlb/what_does_social_engineering_mean_to_you/)\n - [ ] [How can someone's actions be used to psychoanalyse them?](https://www.reddit.com/r/SocialEngineering/comments/1ky8jv2/how_can_someones_actions_be_used_to_psychoanalyse/)\n- Security Affairs\n - [ ] [Victoria’s Secret ‘s website offline following a cyberattack](https://securityaffairs.com/178432/hacking/victorias-secrets-website-offline-following-a-cyberattack.html)\n - [ ] [China-linked APT41 used Google Calendar as C2 to control its TOUGHPROGRESS malware](https://securityaffairs.com/178424/apt/china-linked-apt41-used-google-calendar-as-c2-to-control-its-toughprogress-malware.html)\n - [ ] [New AyySSHush botnet compromised over 9,000 ASUS routers, adding a persistent SSH backdoor.](https://securityaffairs.com/178413/malware/new-ayysshush-botnet-compromised-over-9000-asus-routers-adding-a-persistent-ssh-backdoor.html)\n- Information Security\n - [ ] [Porch cam](https://www.reddit.com/r/Information_Security/comments/1kyhwt3/porch_cam/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [Final Year Thesis on Securing Enterprise Networks with SDN + ML — Feeling Overwhelmed, Seeking Advice](https://www.reddit.com/r/netsecstudents/comments/1kyfitk/final_year_thesis_on_securing_enterprise_networks/)\n - [ ] [Why do so many IP reputation systems rely only on blocklists or GeoIP? What’s missing?](https://www.reddit.com/r/netsecstudents/comments/1kyix9d/why_do_so_many_ip_reputation_systems_rely_only_on/)\n - [ ] [L0p4-Toolkit is a toolset for penetration testing and ethical hacking.](https://www.reddit.com/r/netsecstudents/comments/1ky6kvh/l0p4toolkit_is_a_toolset_for_penetration_testing/)\n - [ ] [I’m 24 with a non-tech degree (BA in History), but I know Java and Android dev — is OSCP (PEN-200) realistic for someone like me?](https://www.reddit.com/r/netsecstudents/comments/1ky5gs0/im_24_with_a_nontech_degree_ba_in_history_but_i/)\n- RedTeam\n - [ ] [安全的本质是代码质量](https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484480&idx=1&sn=e1a98bbf0faa7bec4a2d297bfa633177)\n- Your Open Hacker Community\n - [ ] [Best channel hopping for multiple Wifi Cards](https://www.reddit.com/r/HowToHack/comments/1kylgm0/best_channel_hopping_for_multiple_wifi_cards/)\n - [ ] [Google nexus 5 Kali nethunter](https://www.reddit.com/r/HowToHack/comments/1kyl0gm/google_nexus_5_kali_nethunter/)\n - [ ] [New to Cybersecurity & asked to pentest a web app (Black Box)](https://www.reddit.com/r/HowToHack/comments/1ky7nva/new_to_cybersecurity_asked_to_pentest_a_web_app/)\n - [ ] [Which file system to use for a kali vm on a usb?](https://www.reddit.com/r/HowToHack/comments/1ky72ac/which_file_system_to_use_for_a_kali_vm_on_a_usb/)\n - [ ] [How to get into lost gmail account](https://www.reddit.com/r/HowToHack/comments/1kyoe83/how_to_get_into_lost_gmail_account/)\n - [ ] [URGENT NEED HELP: I am not a hacker, but I need help to know if Google Docs can be \"hacked\" or somehow edited](https://www.reddit.com/r/HowToHack/comments/1kyndvx/urgent_need_help_i_am_not_a_hacker_but_i_need/)\n - [ ] [Catching debit card frauders](https://www.reddit.com/r/HowToHack/comments/1kygvcs/catching_debit_card_frauders/)\n - [ ] [How to actually hack](https://www.reddit.com/r/HowToHack/comments/1kyd3wj/how_to_actually_hack/)\n - [ ] [weird question](https://www.reddit.com/r/HowToHack/comments/1ky2g0h/weird_question/)\n- Deeplinks\n - [ ] [California’s Cities and Counties Must Step Up Their Privacy Game. A.B. 1337 Can Do That.](https://www.eff.org/deeplinks/2025/05/californias-cities-and-counties-must-step-their-privacy-game-ab-1337-can-do)\n- Computer Forensics\n - [ ] [NIST National Software Reference Library (NSRL) is posting download links for all freely acquired software in their collection](https://www.reddit.com/r/computerforensics/comments/1kyjuwi/nist_national_software_reference_library_nsrl_is/)\n - [ ] [New Triage Focused iOS tool](https://www.reddit.com/r/computerforensics/comments/1ky9sqp/new_triage_focused_ios_tool/)\n- Daniel Miessler\n - [ ] [We Can't Really Affect AI Security](https://danielmiessler.com/blog/ai-security)\n- Security Weekly Podcast Network (Audio)\n - [ ] [It's A Trap! - PSW #876](http://sites.libsyn.com/18678/its-a-trap-psw-876)\n"}, "d88b895302fa8d1d456f5be06fb1c3ef66271048": {"t": 1785772240.9907541, "n": 40250, "h": "dabfb13ddb72cf44", "c": "# 每日安全资讯（2025-05-30）\n\n- 奇安信攻防社区\n - [ ] [记一次帮丈母娘破解APP，满满的全是思路](https://forum.butian.net/share/4382)\n- Der Flounder\n - [ ] [Displaying DDM-deployed settings on macOS Sequoia](https://derflounder.wordpress.com/2025/05/29/displaying-ddm-deployed-settings-on-macos-sequoia/)\n- C0reFast记事本\n - [ ] [在三条指令内实现闰年判断](https://www.ichenfu.com/2025/05/29/a-leap-year-check-in-three-instructions/)\n- SecWiki News\n - [ ] [SecWiki News 2025-05-29 Review](http://www.sec-wiki.com/?2025-05-29)\n- Verne in GitHub\n - [ ] [Novita AI 面向 AI 开发者的 GPU 云平台](https://blog.einverne.info/post/2025/05/novita-ai-model-gpu-cloud.html)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [Campcodes Online Hospital Management System 1.0 SQL Injection](https://cxsecurity.com/issue/WLB-2025050055)\n - [ ] [ZTE ZXV10 H201L RCE via authentication bypass](https://cxsecurity.com/issue/WLB-2025050054)\n - [ ] [Invision Community 5.0.6 Remote Code Execution (RCE)](https://cxsecurity.com/issue/WLB-2025050053)\n - [ ] [UJCMS 9.6.3 User Enumeration via IDOR](https://cxsecurity.com/issue/WLB-2025050052)\n- Trustwave Blog\n - [ ] [Preventing Supply Chain Cyberattacks: Lessons from the Marks & Spencer Breach](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/preventing-supply-chain-cyberattacks-lessons-from-the-marks-spencer-breach/)\n- Tenable Blog\n - [ ] [Getting Ahead of AI Risk: What Comes Next for Tenable](https://www.tenable.com/blog/getting-ahead-of-ai-risk-what-comes-next-for-tenable)\n- 安全客-有思想的安全新媒体\n - [ ] [WordPress TI WooCommerce Wishlist 插件漏洞使 100,000+ 网站遭受网络攻击](https://www.anquanke.com/post/id/307980)\n - [ ] [Xenserver虚拟机工具for Windows漏洞让攻击者执行任意代码](https://www.anquanke.com/post/id/307977)\n - [ ] [PumaBot恶意软件瞄准Linux物联网设备](https://www.anquanke.com/post/id/307974)\n - [ ] [僵尸网络入侵 9,000 多台华硕路由器，添加持续 SSH 后门](https://www.anquanke.com/post/id/307971)\n - [ ] [新的 PumaBot 僵尸网络利用强制 SSH 凭据入侵设备](https://www.anquanke.com/post/id/307967)\n - [ ] [APT41 恶意软件滥用谷歌日历进行隐蔽的 C2 通信](https://www.anquanke.com/post/id/307963)\n - [ ] [Mimo 回归： CVE-2025-32432 在加密挖掘和代理软件活动中被利用](https://www.anquanke.com/post/id/307959)\n - [ ] [GitHub 成为全欧洲恶意软件交付的首选平台](https://www.anquanke.com/post/id/307956)\n - [ ] [俄勒冈州成为第二个禁止出售精确地理位置数据的州](https://www.anquanke.com/post/id/307952)\n - [ ] [警企协同共育先锋！360反涉网犯罪训练营第六期圆满收官！](https://www.anquanke.com/post/id/307941)\n - [ ] [360 MCP 生态安全风险治理实践与思考](https://www.anquanke.com/post/id/307934)\n- 90Sec - 最新话题\n - [ ] [90sec还在啊，回忆。。。](https://forum.90sec.com/t/topic/2504)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [网络犯罪分子利用假冒KeePass密码管理器进行ESXi勒索软件攻击](https://www.4hou.com/posts/QX80)\n- Recent Commits to cve:main\n - [ ] [Update Thu May 29 16:05:14 UTC 2025](https://github.com/trickest/cve/commit/be90f6209a98823918aa318fd983f78f2e01ad72)\n- paper - Last paper\n - [ ] [根除隐形威胁：检测、利用及修复跨 GitHub 的路径遍历漏洞](https://paper.seebug.org/3324/)\n- Security Boulevard\n - [ ] [Victoria’s Secret Hit By ‘Security Incident’ After Attacks on UK Retailers](https://securityboulevard.com/2025/05/victorias-secret-hit-by-security-incident-after-attacks-on-uk-retailers/?utm_source=rss&utm_medium=rss&utm_campaign=victorias-secret-hit-by-security-incident-after-attacks-on-uk-retailers)\n - [ ] [What Is MCP? The New Protocol Reshaping AI Agent Security](https://securityboulevard.com/2025/05/what-is-mcp-the-new-protocol-reshaping-ai-agent-security/?utm_source=rss&utm_medium=rss&utm_campaign=what-is-mcp-the-new-protocol-reshaping-ai-agent-security)\n - [ ] [CISA’s New SOAR Guidance Shows Where Automation Must Go Next](https://securityboulevard.com/2025/05/cisas-new-soar-guidance-shows-where-automation-must-go-next/?utm_source=rss&utm_medium=rss&utm_campaign=cisas-new-soar-guidance-shows-where-automation-must-go-next)\n - [ ] [CISO’s open letter on third-party software risk is a call to action](https://securityboulevard.com/2025/05/cisos-open-letter-on-third-party-software-risk-is-a-call-to-action/?utm_source=rss&utm_medium=rss&utm_campaign=cisos-open-letter-on-third-party-software-risk-is-a-call-to-action)\n - [ ] [Emulating the Unyielding Scattered Spider](https://securityboulevard.com/2025/05/emulating-the-unyielding-scattered-spider/?utm_source=rss&utm_medium=rss&utm_campaign=emulating-the-unyielding-scattered-spider)\n - [ ] [BSidesLV24 – PasswordsCon – We Removed Passwords, Now What?](https://securityboulevard.com/2025/05/bsideslv24-passwordscon-we-removed-passwords-now-what/?utm_source=rss&utm_medium=rss&utm_campaign=bsideslv24-passwordscon-we-removed-passwords-now-what)\n - [ ] [LogonBox SSPR 2.4.12 – Now Available](https://securityboulevard.com/2025/05/logonbox-sspr-2-4-12-now-available/?utm_source=rss&utm_medium=rss&utm_campaign=logonbox-sspr-2-4-12-now-available)\n - [ ] [Survey Surfaces Scope of Identity and Access Management Challenges](https://securityboulevard.com/2025/05/survey-surfaces-scope-of-identity-and-access-management-challenges/?utm_source=rss&utm_medium=rss&utm_campaign=survey-surfaces-scope-of-identity-and-access-management-challenges)\n - [ ] [Why Zscaler’s Acquisition of Red Canary Matters to Your Cybersecurity Strategy](https://securityboulevard.com/2025/05/why-zscalers-acquisition-of-red-canary-matters-to-your-cybersecurity-strategy/?utm_source=rss&utm_medium=rss&utm_campaign=why-zscalers-acquisition-of-red-canary-matters-to-your-cybersecurity-strategy)\n - [ ] [From bottleneck to business enabler: making PKI work for digital transformation](https://securityboulevard.com/2025/05/from-bottleneck-to-business-enabler-making-pki-work-for-digital-transformation/?utm_source=rss&utm_medium=rss&utm_campaign=from-bottleneck-to-business-enabler-making-pki-work-for-digital-transformation)\n- Microsoft Security Blog\n - [ ] [Defending against evolving identity attack techniques](https://www.microsoft.com/en-us/security/blog/2025/05/29/defending-against-evolving-identity-attack-techniques/)\n - [ ] [How to deploy AI safely](https://www.microsoft.com/en-us/security/blog/2025/05/29/how-to-deploy-ai-safely/)\n- InfoSec Write-ups - Medium\n - [ ] [GitHub Recon: The Underrated Technique to Discover High-Impact Leaks in Bug Bounty](https://infosecwriteups.com/github-recon-the-underrated-technique-to-discover-high-impact-leaks-in-bug-bounty-c4069894389a?source=rss----7b722bfd1b8d---4)\n - [ ] [Uncovering Amazon S3 Bucket Vulnerabilities: A Comprehensive Guide for Ethical Hackers](https://infosecwriteups.com/uncovering-amazon-s3-bucket-vulnerabilities-a-comprehensive-guide-for-ethical-hackers-0fc903ac21d0?source=rss----7b722bfd1b8d---4)\n - [ ] [Logic Flaw: Deleting HackerOne Team Reports Without Access Rights](https://infosecwriteups.com/logic-flaw-deleting-hackerone-team-reports-without-access-rights-1c4755a23af8?source=rss----7b722bfd1b8d---4)\n - [ ] [AI-Powered SQLMap: Smarter SQL Injection Testing Guide](https://infosecwriteups.com/ai-powered-sqlmap-smarter-sql-injection-testing-guide-5c5f59b99b4e?source=rss----7b722bfd1b8d---4)\n - [ ] [Bypassing Windows Defender & AVs with an LNK Exploit to Gain a Reverse Shell](https://infosecwriteups.com/bypassing-windows-defender-avs-with-an-lnk-exploit-to-gain-a-reverse-shell-09244fcefb10?source=rss----7b722bfd1b8d---4)\n - [ ] [This One Hacker Trick Got Me Access to an Admin Dashboard ️](https://infosecwriteups.com/this-one-hacker-trick-got-me-access-to-an-admin-dashboard-%EF%B8%8F-d9f0b6d633a0?source=rss----7b722bfd1b8d---4)\n - [ ] [Cracking JWTs: A Bug Bounty Hunting Guide [Part 1]](https://infosecwriteups.com/cracking-jwts-a-bug-bounty-hunting-guide-99d6c21d78c9?source=rss----7b722bfd1b8d---4)\n - [ ] [ChatGPT Jailbreaking: A Sneaky Loophole That Exposes Ethical Gaps](https://infosecwriteups.com/chatgpt-jailbreaking-a-sneaky-loophole-that-exposes-ethical-gaps-1f3dcf015bf6?source=rss----7b722bfd1b8d---4)\n - [ ] [Broken Access Control: The Quiet Killer in Web Applications](https://infosecwriteups.com/broken-access-control-the-quiet-killer-in-web-applications-79cb85f72cd8?source=rss----7b722bfd1b8d---4)\n - [ ] [Walkthrough — Assessment Methodologies: Enumeration CTF 1](https://infosecwriteups.com/walkthrough-assessment-methodologies-enumeration-ctf-1-90df505c3db5?source=rss----7b722bfd1b8d---4)\n- Doonsec's feed\n - [ ] [生成式AI应用分析报告（上）：深度合成服务现状](https://mp.weixin.qq.com/s?__biz=MzA3NDM4NTk4NA==&mid=2452946751&idx=1&sn=cdc3e4595e026e10bb06aed4b7296001)\n - [ ] [安全的本质是代码质量](https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484480&idx=1&sn=e1a98bbf0faa7bec4a2d297bfa633177)\n - [ ] [PHP_webshell免杀-绕过主流引擎通杀方案](https://mp.weixin.qq.com/s?__biz=MzkzNTcwOTgxMQ==&mid=2247486059&idx=1&sn=3705476c4651a2b9b4079fa3d91bfa01)\n - [ ] [Panalog大数据日志审计系统sprog_upstatus.php存在SQL注入漏洞](https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485861&idx=1&sn=05f3030231f775fe4410e25733c538c0)\n - [ ] [【端午放“粽”】｜网络安全热门证书+限时特惠来袭+转发免费抽书！](https://mp.weixin.qq.com/s?__biz=MzkyNTQzNzA3Nw==&mid=2247487088&idx=1&sn=c893b207a54818ee52f3a2e5098a08b9)\n - [ ] [【工具推荐】API安全检测自动化工具](https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519413&idx=1&sn=414164aead343aa1255b8204078b4c9e)\n - [ ] [工信部等三部门印发《电子信息制造业数字化转型实施方案》](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636000&idx=1&sn=2ddc077eb88d9d0e6d3d8c877eb02dc0)\n - [ ] [2025商用密码应用安全性评估技术交流会议通知](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636000&idx=2&sn=d5e76428873faed959d5299441aa728d)\n - [ ] [关注 | 工信部通报49款侵害用户权益行为的APP（SDK）（附清单）](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636000&idx=3&sn=937ed02f80b2c472f22ece6e5d12d28d)\n - [ ] [专家解读 | 国家网络身份认证公共服务筑牢数字安全屏障](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636000&idx=4&sn=37dc8a040a1c51633b75c8e51df75025)\n - [ ] [海南某网络科技公司数据泄露被罚5万元](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636000&idx=5&sn=4793498aff310020d509b8006785ede4)\n - [ ] [大语言模型安全测评技术科普：全面了解与应对潜在风险](https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484305&idx=1&sn=3857c3334f24b0779a9431d6c086373e)\n - [ ] [WEP协议安全解析：设计缺陷与破解原理](https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488276&idx=1&sn=3216179394df806b294abdada343b9fd)\n - [ ] [红蓝对抗挑战赛（个人赛）](https://mp.weixin.qq.com/s?__biz=MzkxMDc0MTc5Mw==&mid=2247483842&idx=1&sn=5816687f68c018fb7053e7dda4fb32c3)\n - [ ] [很想睡你，更想爱你。](https://mp.weixin.qq.com/s?__biz=Mzg4NDkwMDAyMQ==&mid=2247487704&idx=1&sn=7f0453e163b2779d3ec9014e9af9ff9f)\n - [ ] [第五届全国电子取证大赛 FIC决赛](https://mp.weixin.qq.com/s?__biz=MzU2NTY2MDAyMw==&mid=2247485391&idx=1&sn=352af07323d0db90a3c3be329186e9ef)\n - [ ] [500亿，珠海超级国资诞生](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485892&idx=1&sn=a053bf84b2fe21e64228e37ff80984fb)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485892&idx=2&sn=9904b4d79c3ff373804267482e76404c)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485892&idx=3&sn=0fa4b2d6b8b81e63cc412a6a192e1c80)\n - [ ] [【干货】笑傲职场的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485892&idx=4&sn=8c4535446da153353261aa4ec36cb957)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485892&idx=5&sn=835bde86e3122aaa037c7ab2a6bb2497)\n - [ ] [HG0991B助力新疆某地攻防演练圆满成功](https://mp.weixin.qq.com/s?__biz=MzU0NTU5NTA4NQ==&mid=2247491702&idx=1&sn=305b6b7c27aae87cbb14257150b7d307)\n - [ ] [AI安全 | Prompt越狱手册第一版发布](https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488204&idx=1&sn=639b6397821e6f1cff561ce82e8797b9)\n - [ ] [Windows PE文件格式详解（二）](https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484515&idx=1&sn=ae4f2137a5dff756f04a5c81cca0b415)\n - [ ] [被黑分析｜Cork Protocol 遭攻击，损失超千万美元](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247502322&idx=1&sn=5a8e01e119eb3ed9a98712f1149be4f5)\n - [ ] [全栈开发+跨端架构+AI：滴滴开源项目XIAOJUSURVEY入驻北大软微课堂](https://mp.weixin.qq.com/s?__biz=MzU1ODEzNjI2NA==&mid=2247573949&idx=1&sn=6513b73c47e667c655132927f99371ed)\n - [ ] [BCS2025国际关键信息基础设施网络安全论坛将于6月6日澳门开幕](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247627034&idx=1&sn=24b747ec0896e89e50489eb5c44a8d03)\n - [ ] [BCS2025分论坛议程重磅公布 扫码报名参与现场活动](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247627034&idx=2&sn=9b10a4bf7698a19a3710c2ec839ad025)\n - [ ] [2025大模型翻译技术及产业应用蓝皮书](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655280785&idx=1&sn=6e6739c7e18209188f3ba829c715d173)\n - [ ] [打不过就卷技战法](https://mp.weixin.qq.com/s?__biz=MzkzMzcxNTQyNw==&mid=2247487920&idx=1&sn=69028c5831ef6affe0ab7d4423d4db0a)\n - [ ] [LDAP 枚举在 2025 年红队行动中仍然可行](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488594&idx=1&sn=fb5f7cc74d49a8aa54be4870f30a186c)\n - [ ] [安全不打烊 | 锦岳智慧 \\\"端午节” 安全保障](https://mp.weixin.qq.com/s?__biz=MzkxMzQwNDcxNg==&mid=2247487201&idx=1&sn=1399eb06dbffd948b029e5ded3310651)\n - [ ] [网络安全等级保护测评高风险判定实施指引(试行)发布](https://mp.weixin.qq.com/s?__biz=MzU1ODM1Njc1Ng==&mid=2247498368&idx=1&sn=2214798ef567e2b4de5c0cd84ad6919a)\n - [ ] [图形化工具箱 - LaunchBox](https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486384&idx=1&sn=a049a6da67196a8f21b0469089bebb12)\n - [ ] [电脑开荒必备！这 4 款神器让 Win 系统效率飙升，618 特惠别错过](https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492414&idx=1&sn=f6a29b1317273c36e8d1edea30471d8f)\n - [ ] [培训通知 | 2025年数据安全工程师暨数据安全技术（高级）培训班（第一期）报名开启！](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518618&idx=1&sn=6e9333f046c9767fd0468e908e502c82)\n - [ ] [“偷”信息、乱弹窗……49款APP被通报！](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518618&idx=2&sn=87a302dfdcdb5b62b043ebe34bd39d11)\n - [ ] [AI让你变懒：30秒的事，非用它花1分钟？](https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491588&idx=1&sn=4553e192fe6a88797e905c746bb2c2b9)\n - [ ] [【活动】618风控专项，单个奖励最高4w+！](https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727845600&idx=1&sn=6cb05bfaef7a81ff9c0c128f5f082c6f)\n - [ ] [聚焦课标建设，共探高职安全课程建设新路径](https://mp.weixin.qq.com/s?__biz=MzU1NTYxMjA5MA==&mid=2247505833&idx=1&sn=99f9e65e2e9799125808fd04a9f22f3e)\n - [ ] [【安全圈】微软OneDrive文件选择器漏洞曝光：网站可窃取用户全部云存储数据](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069879&idx=1&sn=2b0d058ac337d26093a5ae849717e3dd)\n- Cerbero Blog\n - [ ] [HFS+ File System](https://blog.cerbero.io/hfs-file-system/)\n- Bug Bounty in InfoSec Write-ups on Medium\n - [ ] [GitHub Recon: The Underrated Technique to Discover High-Impact Leaks in Bug Bounty](https://infosecwriteups.com/github-recon-the-underrated-technique-to-discover-high-impact-leaks-in-bug-bounty-c4069894389a?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Uncovering Amazon S3 Bucket Vulnerabilities: A Comprehensive Guide for Ethical Hackers](https://infosecwriteups.com/uncovering-amazon-s3-bucket-vulnerabilities-a-comprehensive-guide-for-ethical-hackers-0fc903ac21d0?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Logic Flaw: Deleting HackerOne Team Reports Without Access Rights](https://infosecwriteups.com/logic-flaw-deleting-hackerone-team-reports-without-access-rights-1c4755a23af8?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Bypassing Windows Defender & AVs with an LNK Exploit to Gain a Reverse Shell](https://infosecwriteups.com/bypassing-windows-defender-avs-with-an-lnk-exploit-to-gain-a-reverse-shell-09244fcefb10?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Cracking JWTs: A Bug Bounty Hunting Guide [Part 1]](https://infosecwriteups.com/cracking-jwts-a-bug-bounty-hunting-guide-99d6c21d78c9?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [ChatGPT Jailbreaking: A Sneaky Loophole That Exposes Ethical Gaps](https://infosecwriteups.com/chatgpt-jailbreaking-a-sneaky-loophole-that-exposes-ethical-gaps-1f3dcf015bf6?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Broken Access Control: The Quiet Killer in Web Applications](https://infosecwriteups.com/broken-access-control-the-quiet-killer-in-web-applications-79cb85f72cd8?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [Unsafe Redirects = Unlimited Ride: How Open Redirect Led Me to Internal Dashboards](https://infosecwriteups.com/unsafe-redirects-unlimited-ride-how-open-redirect-led-me-to-internal-dashboards-c371e1aa9fbc?source=rss----7b722bfd1b8d--bug_bounty)\n - [ ] [I Tried 10 Recon Tools for 7 Days — Here’s What Actually Found Bugs](https://infosecwriteups.com/i-tried-10-recon-tools-for-7-days-heres-what-actually-found-bugs-9013b4cd2396?source=rss----7b722bfd1b8d--bug_bounty)\n- Horizon3.ai\n - [ ] [CVE-2025-20188](https://horizon3.ai/attack-research/vulnerabilities/cve-2025-20188/)\n - [ ] [Cisco IOS XE WLC Arbitrary File Upload Vulnerability (CVE-2025-20188) Analysis](https://horizon3.ai/attack-research/attack-blogs/cisco-ios-xe-wlc-arbitrary-file-upload-vulnerability-cve-2025-20188-analysis/)\n- GuidePoint Security\n - [ ] [How Mature Is Your Identity and Access Management Program?](https://www.guidepointsecurity.com/blog/how-mature-is-your-identity-and-access-management-program/)\n- The Trail of Bits Blog\n - [ ] [The Custodial Stablecoin Rekt Test](https://blog.trailofbits.com/2025/05/29/the-custodial-stablecoin-rekt-test/)\n- Didier Stevens\n - [ ] [Quickpost: Airplanes & Radiation](https://blog.didierstevens.com/2025/05/29/quickpost-airplanes-radiation/)\n - [ ] [Update: process-binary-file.py Version 0.0.11](https://blog.didierstevens.com/2025/05/29/update-process-binary-file-py-version-0-0-11/)\n- Malwarebytes\n - [ ] [Porn sites probed for allegedly failing to prevent minors from accessing content](https://www.malwarebytes.com/blog/news/2025/05/porn-sites-probed-for-allegedly-failing-to-prevent-minors-from-accessing-content)\n - [ ] [Take back control of your browser—Malwarebytes Browser Guard now blocks search hijacking attempts](https://www.malwarebytes.com/blog/product/2025/05/take-back-control-of-your-browsermalwarebytes-browser-guard-will-now-block-search-hijacking-attempts)\n- SentinelOne\n - [ ] [Update on May 29 Outage](https://www.sentinelone.com/blog/update-on-may-29-outage/)\n- PortSwigger Blog\n - [ ] [Meet Burp Suite DAST: Your questions answered](https://portswigger.net/blog/meet-burp-suite-dast-your-questions-answered)\n- daniel.haxx.se\n - [ ] [Decomplexification](https://daniel.haxx.se/blog/2025/05/29/decomplexification/)\n- Exploit-DB.com RSS Feed\n - [ ] [[webapps] Campcodes Online Hospital Management System 1.0 - SQL Injection](https://www.exploit-db.com/exploits/52312)\n - [ ] [[remote] SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal](https://www.exploit-db.com/exploits/52311)\n - [ ] [[remote] Windows File Explorer Windows 11 (23H2) - NTLM Hash Disclosure](https://www.exploit-db.com/exploits/52310)\n - [ ] [[remote] Automic Agent 24.3.0 HF4 - Privilege Escalation](https://www.exploit-db.com/exploits/52309)\n - [ ] [[remote] Fortra GoAnywhere MFT 7.4.1 - Authentication Bypass](https://www.exploit-db.com/exploits/52308)\n - [ ] [[webapps] WordPress Digits Plugin 8.4.6.1 - Authentication Bypass via OTP Bruteforcing](https://www.exploit-db.com/exploits/52307)\n- Offensive OSINT\n - [ ] [Offensive OSINT s05e09 - Open Source Surveillance - Anomaly detection](https://www.offensiveosint.io/offensive-osint-s05e09-open-source-surveillance-anomaly-detection/)\n- Security Blog | Praetorian\n - [ ] [Hardware Hacking a Nicotine Vape](https://www.praetorian.com/blog/hardware-hacking-a-nicotine-vape/)\n- 体验盒子\n - [ ] [AutoGen Studio 容器化部署与维护指南](https://www.uedbox.com/post/119359/)\n- 奇客Solidot–传递最新科技情报\n - [ ] [惠普将停止在中国制造销往北美的产品](https://www.solidot.org/story?sid=81430)\n - [ ] [通过饮料摄入糖比食用糖对健康危害更大](https://www.solidot.org/story?sid=81429)\n - [ ] [天问二号将执行小行星取样任务](https://www.solidot.org/story?sid=81428)\n - [ ] [组合使用两种抗衰老药物延长小鼠寿命三成](https://www.solidot.org/story?sid=81427)\n - [ ] [微软向第三方应用开放 Windows Update](https://www.solidot.org/story?sid=81426)\n - [ ] [日本邮政推出数字地址](https://www.solidot.org/story?sid=81425)\n - [ ] [甲骨文通过 GitHub 上发布 VirtualBox 源代码](https://www.solidot.org/story?sid=81424)\n - [ ] [数千华硕路由器感染了难以清除的后门](https://www.solidot.org/story?sid=81423)\n - [ ] [苹果操作系统将用年份标识版本号](https://www.solidot.org/story?sid=81422)\n - [ ] [为什么我们遵守规则？](https://www.solidot.org/story?sid=81421)\n - [ ] [美国将撤销中国留学生签证](https://www.solidot.org/story?sid=81420)\n- 威努特安全网络\n - [ ] [解读 | 公安部《网络安全等级保护测评高风险判定实施指引》](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651133212&idx=1&sn=f2153983de97faadfb95182c8693279c)\n- Twitter @James Kettle\n - [ ] [RT Gareth Heyes \\u2028: Crafty JavaScript-context XSS vector using ondevicemotion, setTimeout, and URIError spoofing to trigger alert(1) now added to ...](https://x.com/albinowax/status/1928137940129005787)\n - [ ] [This release also fixes a false positive in the time-based code execution check - sorry about that. Thanks to everyone who reported it!](https://x.com/albinowax/status/1928049545449001302)\n- Wallarm\n - [ ] [CISO Spotlight: Mike Wilkes on Building Resilience in an Evolving Threat Landscape](https://lab.wallarm.com/ciso-spotlight-mike-wilkes-building-resilience-evolving-threat-landscape/)\n- 看雪学苑\n - [ ] [Google CTF 2023 - v8box](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458594737&idx=1&sn=d889136869e79b65ea2b383c9ead7cf6)\n - [ ] [外出充电需警惕！ChoiceJacking 攻击来袭，安卓、苹果手机无一幸免](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458594737&idx=2&sn=d5d5937dd797ac639b98d6ed8f484849)\n - [ ] [还等什么？30小时入门CTF，速来学](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458594737&idx=3&sn=baf69116556c6244831995827e7f034d)\n- 安全内参\n - [ ] [美军工巨头押注AI赋能网络攻击，超21亿元收购漏洞利用厂商](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514445&idx=1&sn=6f6043b769f9bed3eb4ff2904556f776)\n - [ ] [BCS2025分论坛议程全部公布，扫码报名参与现场活动](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514445&idx=2&sn=90f8b34a7ccff3c948e3d87ca444e793)\n- 代码卫士\n - [ ] [看我如何通过 OpenAI o3 挖到 Linux 内核远程 0day](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523149&idx=1&sn=0298267a08369cc3ea9bdbdec81eb788)\n- HackerNews\n - [ ] [僵尸网络入侵 9000 多台华硕路由器，添加持久 SSH 后门](https://hackernews.cc/archives/59011)\n - [ ] [​​Etsy 与 TikTok Shop 重大数据泄露致 160 万客户邮箱信息外流​](https://hackernews.cc/archives/59007)\n- dotNet安全矩阵\n - [ ] [WebShell 对抗进化，规避w3wp进程树监测，黑屏之下绕过 cmd.exe 调用链静默执行](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499761&idx=1&sn=24fcfa2debbc5369d0428c47b4efdbdd)\n - [ ] [报名学习 | 国内最专业、最全面的 [ .NET 代码审计 ] 体系化视频学习课程](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499761&idx=2&sn=52794cd17c05b52f24f2fa9ccaff28ab)\n - [ ] [.NET 某文本编辑器老版本文件名设计缺陷实现文件上传](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499761&idx=3&sn=fabc0c59ad56835a7af740e37ed7eac1)\n- 电子物证\n - [ ] [【第一批全国检察技术专家养成记：那些鲜为人知的工作经历】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048456&idx=1&sn=6a420546a148da5e42e6d6451f69339a)\n - [ ] [【可信时间戳证据如何提交给法院？】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048456&idx=2&sn=6472867d42ce994ad2b5934305f089e4)\n- 丁爸 情报分析师的工具箱\n - [ ] [【资料】生物战历史](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651150151&idx=1&sn=97b98791deefba1b4eb1bd96b74645a9)\n- 安全学术圈\n - [ ] [纽约州立大学石溪分校 | 模糊的指纹：Web 应用程序指纹识别的性能提升](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247492331&idx=1&sn=b298304a8eaf635891de43ca36b66ed6)\n- 腾讯玄武实验室\n - [ ] [每日安全动态推送(25/5/29)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960109&idx=1&sn=f350021ce950e0fdb24259929394655e)\n- 极客公园\n - [ ] [还在等快递？这届 618 别人已经收货了](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653080398&idx=1&sn=125601ba512b9aa6d5befd4a2405302f)\n - [ ] [测评 | 从实验室到茶水间，可量产万元全尺寸具身机器人全网首测](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653080367&idx=1&sn=5435898ca49ac0ad09f82a6e7b4511dd)\n - [ ] [DeepSeek R1模型升级，编程暴强；小鹏M03顶配上市，12.98万起；iOS或更名iOS 26 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653080336&idx=1&sn=850ddff921705dd45cd1acdd63111d40)\n- 数世咨询\n - [ ] [探秘1110亿美元云安全市场：并购、扩张与未来战略方向](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538978&idx=1&sn=710a8e6965fa799753a2311121e613d7)\n - [ ] [直播预约：第十届“创客中国”网络安全中小企业创新创业大赛启动仪式](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538978&idx=2&sn=45a4d1448170c6a0b5e92332f3cc1f5f)\n - [ ] [倒计时2天 | 第十届“创客中国”网络安全中小企业创新创业大赛](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538978&idx=3&sn=24831e2c770347e02b3950915c9c1558)\n- 安全实践\n - [ ] [20250529 | 黄金3500点调整浪形](https://mp.weixin.qq.com/s?__biz=MzI5NzAzMDg0NA==&mid=2650698289&idx=1&sn=b96e1c08c77ca1e9a6732f054155008d)\n- 情报分析师\n - [ ] [美国反情报体系深入研究——一场看不见的战争](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650561117&idx=1&sn=5300129783cd83027c3977dcf04f81d1)\n- 慢雾科技\n - [ ] [被黑分析｜Cork Protocol 遭攻击，损失超千万美元](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247502322&idx=1&sn=5a8e01e119eb3ed9a98712f1149be4f5)\n- 谛听ditecting\n - [ ] [谛听 | Patty: 基于模式序列的未知工业控制协议语义分析](https://mp.weixin.qq.com/s?__biz=MzU3MzQyOTU0Nw==&mid=2247495815&idx=1&sn=9469e6d8c261974ef212e70f53930b05)\n- 美团安全应急响应中心\n - [ ] [报名 | 美团技术沙龙【AI+安全：智能技术在安全领域的应用探索】](https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493889&idx=1&sn=4701431171173014d00aef3e7050372d)\n- 信息安全国家工程研究中心\n - [ ] [国务院、中央军委公布实施《重要军工设施保护条例》，要求落实网络安全和数据安全保护责任](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247499884&idx=1&sn=d31bf80d8bb70f5548c7b116c11c8e2c)\n- 字节跳动安全中心\n - [ ] [ByteSRC全域众测｜3倍积分！送Apple全家桶！](https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494846&idx=1&sn=857c151800e2959a3229210102fd193a)\n- 中国信息安全\n - [ ] [专题·网安人才评价体系 | 网络安全人才专业能力全面评价体系分析](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664243266&idx=1&sn=53e88fa106fcdad0db066999bf41b1f9)\n - [ ] [关注 | 工信部通报49款侵害用户权益行为的APP（SDK）（附清单）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664243266&idx=2&sn=059c8da60364a2de6b156471cf2d2043)\n - [ ] [专家解读 | 国家网络身份认证公共服务筑牢数字安全屏障](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664243266&idx=3&sn=14f94c1876577c556a1af92d0f52a06f)\n- NOVASEC\n - [ ] [Fortity SCA 审计规则更新](https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490486&idx=1&sn=11a3f2ad05bde41fd968564271a3003d)\n- 安全圈\n - [ ] [【安全圈】微软OneDrive文件选择器漏洞曝光：网站可窃取用户全部云存储数据](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069879&idx=1&sn=2b0d058ac337d26093a5ae849717e3dd)\n - [ ] [【安全圈】僵尸网络入侵 9,000 多台华硕路由器，添加持续 SSH 后门](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069879&idx=2&sn=abf9e6d63b21d2585d9f6b3c0cb32256)\n - [ ] [【安全圈】PumaBot恶意软件瞄准Linux物联网设备](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069879&idx=3&sn=b0a9e08b3f0746f8950bd9293c8b600b)\n - [ ] [【安全圈】WordPress TI WooCommerce Wishlist 插件漏洞使 100,000+ 网站遭受网络攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069879&idx=4&sn=457158cecc79f277656b8bad13f79e3f)\n- TrustedSec\n - [ ] [Apples, Pears, and Oranges: Not All Pentest Firms Are the Same](https://trustedsec.com/blog/apples-pears-and-oranges-not-all-pentest-firms-are-the-same)\n- 迪哥讲事\n - [ ] [字越少,事越大](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497661&idx=1&sn=dab553cc79407bbc5c60fd7d2bde7fc9)\n- 360数字安全\n - [ ] [360 斩获国家级信息安全服务最高级别资质 树立行业服务标杆](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580667&idx=1&sn=1e8db6376f56c0f6e2df645421706428)\n- 山石网科安全技术研究院\n - [ ] [通过WinGet和微软子域名劫持PC Manager的潜在风险](https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512282&idx=1&sn=e1b0f46129153389fe182fe970b3a0a8)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Diagnosing Toyota TPMS sensors with rtl_433](https://r-c-y.net/posts/tpms/)\n - [ ] [ConnectWise says nation-state attack targeted multiple ScreenConnect customers](https://therecord.media/connectwise-nation-state-attack-targeted-some-customers)\n - [ ] [ConnectWise breached in cyberattack linked to nation-state hackers](https://www.bleepingcomputer.com/news/security/connectwise-breached-in-cyberattack-linked-to-nation-state-hackers/)\n - [ ] [A new author has appeared](https://blog.talosintelligence.com/a-new-author-has-appeared/)\n - [ ] [US government sanctions tech company involved in cyber scams](https://techcrunch.com/2025/05/29/us-government-sanctions-tech-company-involved-in-cyber-scams/)\n - [ ] [Data breach con 184 milioni di dati esposti coinvolge Google, Microsoft e Facebook: come proteggersi](https://www.cybersecurity360.it/news/data-breach-con-184-milioni-di-dati-esposti-coinvolge-google-microsoft-e-facebook-come-proteggersi/)\n - [ ] [Southeast Asian provider of ‘infrastructure laundering’ for scams is sanctioned by US](https://therecord.media/southeast-asian-provider-of-scam-infrastructure-sanctioned)\n - [ ] [Threat actors abuse Google Apps Script in evasive phishing attacks](https://www.bleepingcomputer.com/news/security/threat-actors-abuse-google-apps-script-in-evasive-phishing-attacks/)\n - [ ] [Apple Safari exposes users to fullscreen browser-in-the-middle attacks](https://www.bleepingcomputer.com/news/security/apple-safari-exposes-users-to-fullscreen-browser-in-the-middle-attacks/)\n - [ ] [Exploring the LockBit Panel Breach – What Logs and Chats Reveal About Ransomware-as-a-Service](https://labs.yarix.com/2025/05/exploring-the-lockbit-panel-breach-what-logs-and-chats-reveal-about-ransomware-as-a-service/)\n - [ ] [US sanctions firm linked to cyber scams behind $200 million in losses](https://www.bleepingcomputer.com/news/security/us-sanctions-company-linked-to-hundreds-of-thousands-of-cyber-scam-sites/)\n - [ ] [Cybercriminals exploit AI hype to spread ransomware, malware](https://www.bleepingcomputer.com/news/security/cybercriminals-exploit-ai-hype-to-spread-ransomware-malware/)\n - [ ] [Attackers are mapping your attack surface—are you?](https://www.bleepingcomputer.com/news/security/attackers-are-mapping-your-attack-surface-are-you/)\n - [ ] [Victoria’s Secret website down as company investigates security incident](https://therecord.media/victorias-secret-website-down-security-incident)\n - [ ] [China-linked hackers exploit Google Calendar in cyberattacks on governments](https://therecord.media/china-linked-apt41-exploits-google-calendar-in-cyberattacks)\n - [ ] [Fake Bitdefender website used to spread infostealer malware](https://therecord.media/fake-bitdefender-website-venomrat-infostealer)\n - [ ] [UK military to establish new Cyber and Electromagnetic Command](https://therecord.media/uk-military-new-cyber-electromagnetic-command)\n - [ ] [Guida VPN: come funzionano e quale scegliere per la massima sicurezza online](https://www.cybersecurity360.it/cultura-cyber/guida-vpn-come-funziona-e-quale-scegliere/)\n - [ ] [Victoria’s Secret takes down website after security incident](https://www.bleepingcomputer.com/news/security/victorias-secret-takes-down-website-after-security-incident/)\n - [ ] [Threat Report: Phishing Tactics Targeting the Travel and Hospitality Sector](https://bfore.ai/phishing-tactics-targeting-travel-and-hospitality-sector-threat-report/)\n - [ ] [Come vedere il Mondiale per Club: in chiaro, streaming e con VPN](https://www.cybersecurity360.it/cybersecurity-nazionale/come-vedere-il-mondiale-per-club-in-chiaro-streaming-e-con-vpn/)\n - [ ] [Cybercriminals camouflaging threats as AI tool installers](https://blog.talosintelligence.com/fake-ai-tool-installers/)\n - [ ] [Microsoft: Windows 11 might fail to start after installing KB5058405](https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-11-might-fail-to-start-after-installing-kb5058405/)\n - [ ] [Data broker LexisNexis discloses data breach affecting 364,000 people](https://www.bleepingcomputer.com/news/security/data-broker-lexisnexis-discloses-data-breach-affecting-364-000-people/)\n - [ ] [DORA in pratica: sviluppi regolatori e norme tecniche di attuazione](https://www.cybersecurity360.it/legal/dora-in-pratica-sviluppi-regolatori-e-norme-tecniche-di-attuazione/)\n - [ ] [AsyncRAT colpisce l’Italia con la steganografia: la nuova campagna malspam](https://www.cybersecurity360.it/news/asyncrat-colpisce-litalia-con-la-steganografia-la-nuova-campagna-malspam/)\n - [ ] [What Motivates Website Malware Attacks?](https://blog.sucuri.net/2025/05/what-motivates-website-malware-attacks.html)\n - [ ] [Instagram Lures, Microsoft Spoofs, and SIM Swaps: A Mid-May Phishing Breakdown](https://pixmsecurity.com/blog/blog/instagram-lures-microsoft-spoofs-and-sim-swaps-a-mid-may-phishing-breakdown/)\n- 火绒安全\n - [ ] [“粽”奖啦丨祝大家端午安康，“粽”享好时光~](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525627&idx=1&sn=1b8f7a961515e76d45d09a545c9342b9)\n - [ ] [端午期间火绒将持续为您护航~](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525627&idx=2&sn=788b232905604868b6e4e1dc937705fe)\n- NetSPI\n - [ ] [CVE-2025-23009 & CVE-2025-23010: Elevating Privileges with SonicWall NetExtender](https://www.netspi.com/blog/technical-blog/red-teaming/elevating-privileges-with-sonicwall-netextender/)\n- 嘶吼专业版\n - [ ] [网络犯罪分子利用假冒KeePass密码管理器进行ESXi勒索软件攻击](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582615&idx=1&sn=c23e3a2f9c250b7302f7dec9db84ef3c)\n- ICT Security Magazine\n - [ ] [DragonForce Exploits: Ransomware-as-a-Service](https://www.ictsecuritymagazine.com/articoli/dragonforce-exploits/)\n - [ ] [Penetration Testing: norme, standard e impatti economici nell’era della Cyber Resilience](https://www.ictsecuritymagazine.com/notizie/penetration-testing-norme-standard-e-impatti-economici-nellera-della-cyber-resilience/)\n - [ ] [La sovranità digitale tra sicurezza nazionale e diritti fondamentali](https://www.ictsecuritymagazine.com/articoli/sovranita-digitale-sicurezza-nazionale/)\n- 字节跳动技术团队\n - [ ] [“寻找地表最强 Trae Agent”征文活动火热开启！iPhone16 等你来拿！](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247514694&idx=1&sn=7ef303e593c36f1e2e8e10344ebd02fa)\n- 360漏洞云\n - [ ] [“粽”享礼金，挖洞必“粽”，端午0DAY竞渡挑战赛开启！](https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503765&idx=1&sn=c91971d705c969009f7e9fd460725ad0)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [ISC Stormcast For Thursday, May 29th, 2025 https://isc.sans.edu/podcastdetail/9470, (Thu, May 29th)](https://isc.sans.edu/diary/rss/31992)\n - [ ] [Alternate Data Streams ? Adversary Defense Evasion and Detection [Guest Diary], (Wed, May 28th)](https://isc.sans.edu/diary/rss/31990)\n- Schneier on Security\n - [ ] [Friday Squid Blogging: NGC 1068 Is the “Squid Galaxy”](https://www.schneier.com/blog/archives/2025/05/friday-squid-blogging-ngc-1068-is-the-squid-galaxy.html)\n - [ ] [Surveillance Via Smart Toothbrush](https://www.schneier.com/blog/archives/2025/05/surveillance-via-smart-toothbrush.html)\n- Tor Project blog\n - [ ] [New Release: Tails 6.16](https://blog.torproject.org/new-release-tails-6_16/)\n- Technical Information Security Content & Discussion\n - [ ] [Deguard: turning a T480 into a coreboot laptop (10-min talk + live demo)](https://www.reddit.com/r/netsec/comments/1ky7bng/deguard_turning_a_t480_into_a_coreboot_laptop/)\n- The Hacker News\n - [ ] [Cybercriminals Target AI Users with Malware-Loaded Installers Posing as Popular Tools](https://thehackernews.com/2025/05/cybercriminals-target-ai-users-with.html)\n - [ ] [New Windows RAT Evades Detection for Weeks Using Corrupted DOS and PE Headers](https://thehackernews.com/2025/05/new-windows-rat-evades-detection-for.html)\n - [ ] [DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer Endpoints](https://thehackernews.com/2025/05/dragonforce-exploits-simplehelp-flaws.html)\n - [ ] [Chinese APT41 Exploits Google Calendar for Malware Command-and-Control Operations](https://thehackernews.com/2025/05/chinese-apt41-exploits-google-calendar.html)\n - [ ] [Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist Plugin](https://thehackernews.com/2025/05/over-100000-wordpress-sites-at-risk.html)\n- Deep Web\n - [ ] [How to get cheap Monero?](https://www.reddit.com/r/deepweb/comments/1kyigo6/how_to_get_cheap_monero/)\n - [ ] [Help](https://www.reddit.com/r/deepweb/comments/1kydjfn/help/)\n- Social Engineering\n - [ ] [The Fake Charmer Everyone Loves](https://www.reddit.com/r/SocialEngineering/comments/1kykfla/the_fake_charmer_everyone_loves/)\n - [ ] [How Can We Build Digital Exploitation Awareness?](https://www.reddit.com/r/SocialEngineering/comments/1kyetgu/how_can_we_build_digital_exploitation_awareness/)\n - [ ] [What does ‘social engineering’ mean to you?](https://www.reddit.com/r/SocialEngineering/comments/1kycwlb/what_does_social_engineering_mean_to_you/)\n - [ ] [How can someone's actions be used to psychoanalyse them?](https://www.reddit.com/r/SocialEngineering/comments/1ky8jv2/how_can_someones_actions_be_used_to_psychoanalyse/)\n- Security Affairs\n - [ ] [Victoria’s Secret ‘s website offline following a cyberattack](https://securityaffairs.com/178432/hacking/victorias-secrets-website-offline-following-a-cyberattack.html)\n - [ ] [China-linked APT41 used Google Calendar as C2 to control its TOUGHPROGRESS malware](https://securityaffairs.com/178424/apt/china-linked-apt41-used-google-calendar-as-c2-to-control-its-toughprogress-malware.html)\n - [ ] [New AyySSHush botnet compromised over 9,000 ASUS routers, adding a persistent SSH backdoor.](https://securityaffairs.com/178413/malware/new-ayysshush-botnet-compromised-over-9000-asus-routers-adding-a-persistent-ssh-backdoor.html)\n- Information Security\n - [ ] [Porch cam](https://www.reddit.com/r/Information_Security/comments/1kyhwt3/porch_cam/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [Final Year Thesis on Securing Enterprise Networks with SDN + ML — Feeling Overwhelmed, Seeking Advice](https://www.reddit.com/r/netsecstudents/comments/1kyfitk/final_year_thesis_on_securing_enterprise_networks/)\n - [ ] [Why do so many IP reputation systems rely only on blocklists or GeoIP? What’s missing?](https://www.reddit.com/r/netsecstudents/comments/1kyix9d/why_do_so_many_ip_reputation_systems_rely_only_on/)\n - [ ] [L0p4-Toolkit is a toolset for penetration testing and ethical hacking.](https://www.reddit.com/r/netsecstudents/comments/1ky6kvh/l0p4toolkit_is_a_toolset_for_penetration_testing/)\n - [ ] [I’m 24 with a non-tech degree (BA in History), but I know Java and Android dev — is OSCP (PEN-200) realistic for someone like me?](https://www.reddit.com/r/netsecstudents/comments/1ky5gs0/im_24_with_a_nontech_degree_ba_in_history_but_i/)\n- RedTeam\n - [ ] [安全的本质是代码质量](https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484480&idx=1&sn=e1a98bbf0faa7bec4a2d297bfa633177)\n- Your Open Hacker Community\n - [ ] [Best channel hopping for multiple Wifi Cards](https://www.reddit.com/r/HowToHack/comments/1kylgm0/best_channel_hopping_for_multiple_wifi_cards/)\n - [ ] [Google nexus 5 Kali nethunter](https://www.reddit.com/r/HowToHack/comments/1kyl0gm/google_nexus_5_kali_nethunter/)\n - [ ] [New to Cybersecurity & asked to pentest a web app (Black Box)](https://www.reddit.com/r/HowToHack/comments/1ky7nva/new_to_cybersecurity_asked_to_pentest_a_web_app/)\n - [ ] [Which file system to use for a kali vm on a usb?](https://www.reddit.com/r/HowToHack/comments/1ky72ac/which_file_system_to_use_for_a_kali_vm_on_a_usb/)\n - [ ] [How to get into lost gmail account](https://www.reddit.com/r/HowToHack/comments/1kyoe83/how_to_get_into_lost_gmail_account/)\n - [ ] [URGENT NEED HELP: I am not a hacker, but I need help to know if Google Docs can be \"hacked\" or somehow edited](https://www.reddit.com/r/HowToHack/comments/1kyndvx/urgent_need_help_i_am_not_a_hacker_but_i_need/)\n - [ ] [Catching debit card frauders](https://www.reddit.com/r/HowToHack/comments/1kygvcs/catching_debit_card_frauders/)\n - [ ] [How to actually hack](https://www.reddit.com/r/HowToHack/comments/1kyd3wj/how_to_actually_hack/)\n - [ ] [weird question](https://www.reddit.com/r/HowToHack/comments/1ky2g0h/weird_question/)\n- Deeplinks\n - [ ] [California’s Cities and Counties Must Step Up Their Privacy Game. A.B. 1337 Can Do That.](https://www.eff.org/deeplinks/2025/05/californias-cities-and-counties-must-step-their-privacy-game-ab-1337-can-do)\n- Computer Forensics\n - [ ] [NIST National Software Reference Library (NSRL) is posting download links for all freely acquired software in their collection](https://www.reddit.com/r/computerforensics/comments/1kyjuwi/nist_national_software_reference_library_nsrl_is/)\n - [ ] [New Triage Focused iOS tool](https://www.reddit.com/r/computerforensics/comments/1ky9sqp/new_triage_focused_ios_tool/)\n- Daniel Miessler\n - [ ] [We Can't Really Affect AI Security](https://danielmiessler.com/blog/ai-security)\n- Security Weekly Podcast Network (Audio)\n - [ ] [It's A Trap! - PSW #876](http://sites.libsyn.com/18678/its-a-trap-psw-876)\n"}}, "archive/tmp/2025-03-19.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747325.9279764, "n": 52505, "h": "684f83cc8bfffbc6", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-03-18 Review\": \"http://www.sec-wiki.com/?2025-03-18\"\n },\n \"奇安信攻防社区\": {\n \"基于SimpleXMLElement class的免杀webshell\": \"https://forum.butian.net/share/4207\"\n },\n \"Jiajun的技术笔记\": {\n \"Using xmonad with xfce4\": \"https://jiajunhuang.com/articles/2025_03_18-xmonad_xfce4.md.html\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Tue Mar 18 16:18:08 UTC 2025\": \"https://github.com/trickest/cve/commit/1a4b6a257e22cb178f860f7b4843958d75988f98\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"YouTube 惊现 DCRat 恶意软件，登录凭据或面临盗取危机\": \"https://www.4hou.com/posts/9j7J\"\n },\n \"Security Boulevard\": {\n \"Recon Village – Maltego Community Workshop: OSINT & Custom Transforms\": \"https://securityboulevard.com/2025/03/recon-village-maltego-community-workshop-osint-custom-transforms/?utm_source=rss&utm_medium=rss&utm_campaign=recon-village-maltego-community-workshop-osint-custom-transforms\",\n \"What is Infrastructure Intelligence?\": \"https://securityboulevard.com/2025/03/what-is-infrastructure-intelligence/?utm_source=rss&utm_medium=rss&utm_campaign=what-is-infrastructure-intelligence\",\n \"Randall Munroe’s XKCD ‘Water Balloons’\": \"https://securityboulevard.com/2025/03/randall-munroes-xkcd-water-balloons/?utm_source=rss&utm_medium=rss&utm_campaign=randall-munroes-xkcd-water-balloons\",\n \"How to Stop Expired Secrets from Disrupting Your Operations\": \"https://securityboulevard.com/2025/03/how-to-stop-expired-secrets-from-disrupting-your-operations/?utm_source=rss&utm_medium=rss&utm_campaign=how-to-stop-expired-secrets-from-disrupting-your-operations\",\n \"DEF CON 32 – Recon Village – The Art Of Pivoting In OSINT Investigations\": \"https://securityboulevard.com/2025/03/def-con-32-recon-village-the-art-of-pivoting-in-osint-investigations/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-recon-village-the-art-of-pivoting-in-osint-investigations\",\n \"Veriti Recognized in Forrester’s 2025 UVM Landscape Report\": \"https://securityboulevard.com/2025/03/veriti-recognized-in-forresters-2025-uvm-landscape-report/?utm_source=rss&utm_medium=rss&utm_campaign=veriti-recognized-in-forresters-2025-uvm-landscape-report\",\n \"Google Agrees to Acquire Wiz in $30B Deal\": \"https://securityboulevard.com/2025/03/google-agrees-to-acquire-wiz-in-30b-deal/?utm_source=rss&utm_medium=rss&utm_campaign=google-agrees-to-acquire-wiz-in-30b-deal\",\n \"SquareX Launches “Year of Browser Bugs” (YOBB) to Expose Critical Security Blind Spots\": \"https://securityboulevard.com/2025/03/squarex-launches-year-of-browser-bugs-yobb-to-expose-critical-security-blind-spots/?utm_source=rss&utm_medium=rss&utm_campaign=squarex-launches-year-of-browser-bugs-yobb-to-expose-critical-security-blind-spots\",\n \"Prompt Security Adds Ability to Restrict Access to Data Generated by LLMs\": \"https://securityboulevard.com/2025/03/prompt-security-adds-ability-to-restrict-access-to-data-generated-by-llms/?utm_source=rss&utm_medium=rss&utm_campaign=prompt-security-adds-ability-to-restrict-access-to-data-generated-by-llms\",\n \"ADR for PCI DSS 4.0 Compliance | Contrast Security\": \"https://securityboulevard.com/2025/03/adr-for-pci-dss-4-0-compliance-contrast-security/?utm_source=rss&utm_medium=rss&utm_campaign=adr-for-pci-dss-4-0-compliance-contrast-security\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"THM — Billing\": \"https://infosecwriteups.com/thm-billing-70be3fe3d151?source=rss----7b722bfd1b8d---4\",\n \"How To Discover Hidden Endpoints️‍♂️\": \"https://infosecwriteups.com/how-to-discover-hidden-endpoints-%EF%B8%8F-%EF%B8%8F-cc4c82c8a886?source=rss----7b722bfd1b8d---4\",\n \"CRLF Injection: Guide to Finding & Exploiting Vulnerabilities\": \"https://infosecwriteups.com/crlf-injection-guide-to-finding-exploiting-vulnerabilities-ec2d55805cc4?source=rss----7b722bfd1b8d---4\",\n \"Overwork, Burnout and the Toll on Mental Health in Cybersecurity\": \"https://infosecwriteups.com/overwork-burnout-and-the-toll-on-mental-health-in-cybersecurity-e68a8877211f?source=rss----7b722bfd1b8d---4\",\n \"TryHackMe Ignite Room Walkthrough: Exploiting Fuel CMS 1.4.1 RCE\": \"https://infosecwriteups.com/tryhackme-ignite-room-walkthrough-exploiting-fuel-cms-1-4-1-rce-8ae1e8659c64?source=rss----7b722bfd1b8d---4\",\n \"Think You Can Hack a Kubernetes Cluster? Here’s What to Look For.\": \"https://infosecwriteups.com/think-you-can-hack-a-kubernetes-cluster-heres-what-to-look-for-f644c43b280d?source=rss----7b722bfd1b8d---4\",\n \"API Security 101: Securing GraphQL and REST Endpoints Like a Pro\": \"https://infosecwriteups.com/api-security-101-securing-graphql-and-rest-endpoints-like-a-pro-1f819bfe15f9?source=rss----7b722bfd1b8d---4\",\n \"Tuesday Morning Threat Report: March 18, 2025\": \"https://infosecwriteups.com/tuesday-morning-threat-report-march-18-2025-ef4e2cc6dfed?source=rss----7b722bfd1b8d---4\",\n \"Building A Pattern-based XSS Recon Tool\": \"https://infosecwriteups.com/building-a-basic-xss-reconnaissance-tool-0ff6042074d7?source=rss----7b722bfd1b8d---4\",\n \"What Really Happens on the Dark Web?\": \"https://infosecwriteups.com/what-really-happens-on-the-dark-web-f700e7680461?source=rss----7b722bfd1b8d---4\"\n },\n \"obaby@mars\": {\n \"春风无力百花残\": \"https://h4ck.org.cn/2025/03/19849\"\n },\n \"一个被知识诅咒的人\": {\n \"【人工智能】引爆AI新纪元：DeepSeek R1 如何通过强化学习革新推理能力\": \"https://blog.csdn.net/nokiaguy/article/details/146338257\",\n \"【人工智能】本地AI的巅峰对决：LM Studio vs. Ollama 在大模型部署中的技术对比与选择指南\": \"https://blog.csdn.net/nokiaguy/article/details/146338236\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"AI大模型攻防安全 | 第15期安全范儿技术沙龙开启\": \"https://www.anquanke.com/post/id/305147\",\n \"PHP 遭多重安全漏洞 “围攻”，应用程序风险骤增\": \"https://www.anquanke.com/post/id/305142\",\n \"软件供应链风险攀升，人工智能和加密货币沦为黑客目标\": \"https://www.anquanke.com/post/id/305140\",\n \"PoC 代码一经发布， Apache Tomcat 新漏洞便被威胁行为者迅速利用\": \"https://www.anquanke.com/post/id/305138\",\n \"Wazuh SIEM 平台漏洞可致使恶意代码远程执行\": \"https://www.anquanke.com/post/id/305136\",\n \"微软安全更新：56 处漏洞修复，7 个零日危机化解\": \"https://www.anquanke.com/post/id/305131\",\n \"Apache Tomcat 漏洞在公开披露仅30小时后便遭疯狂利用\": \"https://www.anquanke.com/post/id/305128\",\n \"黑客利用 CVE-2024-27564 漏洞一周内攻击 ChatGPT 超万次\": \"https://www.anquanke.com/post/id/305125\",\n \"MassJacker Clipper 恶意软件攻击安装盗版软件的用户\": \"https://www.anquanke.com/post/id/305122\",\n \"浅析新型网络犯罪DeepSeek AI实战应用\": \"https://www.anquanke.com/post/id/305102\",\n \"攻击者利用 CSS 进行难以被察觉的网络钓鱼活动\": \"https://www.anquanke.com/post/id/305109\",\n \"针对 GitHub Action 的供应链攻击造成大规模机密信息泄露\": \"https://www.anquanke.com/post/id/305101\",\n \"GitHub 大规模供应链攻击：2.3 万个代码库沦陷，恶意代码广泛传播\": \"https://www.anquanke.com/post/id/305095\",\n \"国家网络安全通报中心再通报！Ollama私有化部署DeepSeek暗藏“裸奔”危机\": \"https://www.anquanke.com/post/id/305090\"\n },\n \"Doonsec's feed\": {\n \"你的AI工具安全吗？黑客如何利用AI热潮疯狂敛财？\": \"https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484676&idx=1&sn=93e275bd0061822018ad8042ec703bc3\",\n \"吃瓜，这是我在ZoomEye交流群里能看到的吗？（狗头）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484676&idx=2&sn=c3903baece07f14078f063d103897251\",\n \"有受虐倾向，你就来网安\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484696&idx=1&sn=17f8fd23b906d3d2980c9d127c27339c\",\n \"人民日报：以人工智能赋能高质量发展\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635071&idx=1&sn=cba588172e268b8451dde84e570ee925\",\n \"新法解读：关于涉密信息系统保密管理的规定\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635071&idx=2&sn=ecc4cd0d2cd4a7834ab848371af195f4\",\n \"信息工程大学2025年人才引进公告\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635071&idx=3&sn=f2a562fc22ffcc5724ca54e4ee386bc0\",\n \"重大威胁！发现一批境外恶意网址和恶意IP\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635071&idx=4&sn=62c169098587c59dba2277d2e0f99020\",\n \"泄露650万用户数据，这家IT巨头赔偿超1.2亿元\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635071&idx=5&sn=e73ee1ba496201b3f6845565861df2e3\",\n \"2025 CISCN&CCB Half-Final WP\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MTg1MDY4MQ==&mid=2247487308&idx=1&sn=58ded47969223626e9937b5ccf93d3a8\",\n \"HTB靶机 - Heal\": \"https://mp.weixin.qq.com/s?__biz=Mzk1Nzk3MjA5Ng==&mid=2247484223&idx=1&sn=4d462164f00e04da7b9cdba1de4bea93\",\n \"【突发】Wiz确认卖了！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTUzODkxMw==&mid=2247484311&idx=1&sn=c6c2d8380b8657d7b2bcc69b8f0df028\",\n \"大学生求找工作倒欠2w\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486190&idx=1&sn=2d2f4d957f08e0106d936cfcd9c91460\",\n \"听说你很懂旁路由？来做个题\": \"https://mp.weixin.qq.com/s?__biz=MzU4MTgxNDc2MQ==&mid=2247486118&idx=1&sn=33a74ae72d458587e012e3ad41fc5fd2\",\n \"重庆两家单位遭境外网络攻击被网信办约谈\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490648&idx=1&sn=cd90fdc93eb51afa205554a75145cd8e\",\n \"【漏洞预警】MongoDB BSON缓冲区溢出漏洞 (CVE-2025-0755)\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489799&idx=1&sn=1cb0fef30c653dde429246b6a21a0eb8\",\n \"【资料】美国军力（2024）\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651149469&idx=1&sn=23a694d915fddb28cc311a8b587cf561\",\n \"用友NC-Cloud系统getStaffInfo接口存在SQL注入漏洞 漏洞预警\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488206&idx=1&sn=2dec6859f4829ffb1d7ef81960168081\",\n \"AI工具｜ChatExcel AI 通过聊天即可处理Excel和数据分析（北大出品）\": \"https://mp.weixin.qq.com/s?__biz=MzkyMDY4MTc2Ng==&mid=2247484066&idx=1&sn=88c0518a36596d2b9ec9c3b868692438\",\n \"未来邮件新玩法：AI助理让收件箱不再爆炸！\": \"https://mp.weixin.qq.com/s?__biz=MzkxMjY3MTI4Mg==&mid=2247484747&idx=1&sn=07b4bc134958533af9be433f8a996dd6\",\n \"避雷避雷\": \"https://mp.weixin.qq.com/s?__biz=MzkyMDUzMzY1MA==&mid=2247499694&idx=1&sn=5734f2fb763ca3ddbb98f24061a8dc86\",\n \"Wazuh RCE漏洞CVE-2025-24016\": \"https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483872&idx=1&sn=31b810718d480ba119f67d3e1712ba07\",\n \"大语言模型红队测试：全面的分步指南\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483823&idx=1&sn=10384908ebba7c3ceef13498d7cba52d\",\n \"Burp Suite插件 利用AI进行XSS自动化绕过\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497129&idx=1&sn=21be101641a3216b11d1b66af9e5fc1a\",\n \"分享的图片、视频、链接\": \"https://mp.weixin.qq.com/s?__biz=MzA3MTM0NTQzNA==&mid=2455780194&idx=1&sn=da7b8c684ebdfc1d16acaa2fbce86115\",\n \"ctftools-all-in-oneV7.8研发进度2\": \"https://mp.weixin.qq.com/s?__biz=MzI1NzUxOTUzMA==&mid=2247485915&idx=1&sn=3bf06f24a29ac1e97bd8684fd3477660\",\n \"GitHub Actions 组件投毒风险频发，数千开源项目受到影响\": \"https://mp.weixin.qq.com/s?__biz=MzkxMDMxMjgxMg==&mid=2247485098&idx=1&sn=259fc758422773dad1a9af4e3efd4f0b\",\n \"2025最新Typora破解版下载（Windows+Mac）\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDAzMDM2OQ==&mid=2247483948&idx=1&sn=2252970163ee94331a7a88cb3f27e7ed\",\n \"SRC挖掘之302跳转登录劫持\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497289&idx=1&sn=6e285d3b0b960cc668a56a776a5dc7b7\",\n \"2025年将制定这些人工智能标准（测试评估、安全治理、研发运营等）\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655271093&idx=1&sn=9f5aeea1723bf72b40146af161d600c5\",\n \"window、ubantu、系统文件\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDAzMDM2OQ==&mid=2247483941&idx=1&sn=511165dac7933e720119e196aa81f5d1\",\n \"craxpro安全实验室招人啦\": \"https://mp.weixin.qq.com/s?__biz=MzkyMDY1MDI3OA==&mid=2247483859&idx=1&sn=6a5d081cbed08d9bf9715ed5d61f6266\",\n \"模型上新！体验文心大模型4.5卓越性能，文心快码邀您探索\": \"https://mp.weixin.qq.com/s?__biz=MjM5MTAwNzUzNQ==&mid=2650511266&idx=1&sn=ebf171893f1bb03abb52a2ee54306133\",\n \"qt介绍及资料分享\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDAzMDM2OQ==&mid=2247483937&idx=1&sn=b7149d0958be3565f87415a4252a7ab7\",\n \"G.O.S.S.I.P 安全事件 2025-03-18 乐鑫“后门”事件？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499921&idx=1&sn=1de3eb0a0a58c1a05fa8d6ce901163f2\",\n \"快手-安全工程师招聘\": \"https://mp.weixin.qq.com/s?__biz=MzU5NzQ3NzIwMA==&mid=2247486477&idx=1&sn=76adbc5523a446a36ebceac641365142\",\n \"分享图片\": \"https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247486689&idx=1&sn=10a10aecc372be43c586ea565a2d5202\",\n \"免费下载 怪物猎人：世界 v15.22.00 豪华中文联机版 全DLC 打包XG器\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDAzMDM2OQ==&mid=2247483925&idx=1&sn=d0352aa9eca03f4cd054a6066913e3b4\",\n \"让新手迅速掌握的Claude论文写作进阶全攻略，七天速上手。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=1&sn=c97f42dbe4382da1cb54913afb95122a\",\n \"深度揭秘：用Claude高效完成文献综述的终极进阶指南！\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=2&sn=7ab690fa3884a5cb7d4c15a7f9ef2c79\",\n \"新手必看：Claude写论文从入门到精通的完整指南，让写作效率飙升200%！\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=3&sn=4ced2b8ac2e1385c8553018a92aed4b9\",\n \"学术小白也能懂：Claude论文写作高效攻略，独家内部技巧首次揭秘！\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=4&sn=29ca66d6bd42c767c355a92eb1468232\",\n \"硬核！Claude写论文内部高阶攻略，新手照做就能出高分！\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=5&sn=f8f019fa9aeaab4b0e64437b3833997b\",\n \"掌握Claude论文审稿的内部秘籍：让你的论文达到顶刊水平！\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=6&sn=ae13d118e34e07ce4d222fa4dff126ab\",\n \"掌握Claude论文写作内部操作法：零基础博士生也在用的实时润色黑科技！\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=7&sn=dc9427f280f7fe16a0dd82ed1bd5f7d8\",\n \"最强Claude论文润色秘技，新手也能玩转高阶写作技巧。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=8&sn=61e962d398e2b7e7c0258fa7fbce023f\",\n \"针对跨境电商的钓鱼邮件分析\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTQzNTI4Ng==&mid=2247484125&idx=1&sn=18b885cbdc387928d9c85d87ecb2f221\",\n \"可信AI云服务——云上大模型用户数据保护专题研讨会通知\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjM1MDg2Mg==&mid=2247503160&idx=1&sn=e849f374a2d70437a897b3515146153f\",\n \"第十八届全国大学生信息安全竞赛暨第二届“长城杯”铁人三项赛半决赛 WP by 圣地亚哥皮蛋\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc1OTYyNA==&mid=2450788194&idx=1&sn=12404228e940c97760f5720edec8d6f5\",\n \"《论语别裁》第01章 学而（29） 《三国演义》的幕后功劳\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247501052&idx=1&sn=70ebc9eb3cf64593febb3c205f271922\",\n \"360受邀出席重庆“校企共用”行动启动会 打造全国产教融合“重庆样板”\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579992&idx=1&sn=d690807cd32b151a36d3f0a736d53267\",\n \"maven在idea上搭建\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzI0MjgzMQ==&mid=2247484643&idx=1&sn=84662aa5494f55ea84c2dd3913ce8bdb\",\n \"党建引领绿意浓 植此青绿树未来\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTk2NTIyNw==&mid=2247490706&idx=1&sn=d43dab182928482a62d4a1d08d5ac73d\",\n \"漏洞盒子商城上线｜挖洞战袍，限量预售！\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766761&idx=1&sn=cff7fce88b4f8e509c5f82223fd2e3f6\",\n \"送几个星球优惠券，手慢无！！！\": \"https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492403&idx=1&sn=c9a70fc80983b116598a623ee2fdfd6f\",\n \"【报名开启 | 安全沙龙·东莞站】AI驱动安全新场景：走进头部新零售企业，揭秘实战应用！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247486035&idx=1&sn=4940696aa2df1404293c5466a6f2c70a\",\n \"突发！2170亿！云安全独角兽或将被收购\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247486035&idx=2&sn=de2b169e6f3956a0474624494056df9d\",\n \"带你解锁编码新世界！--随波逐流CTF编码工具使用教程70 --块排序压缩BWT密码\": \"https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247489946&idx=1&sn=aa93ffb252a288771566baa9f9415dc3\",\n \"华为中国合作伙伴大会2025 | AI加持云网安一体，携手MSP共赢千行万业新未来分论坛议程抢先看\": \"https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505984&idx=1&sn=569c043b77e11af824b38afce50f7844\",\n \"车载系统固件逆向分析\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247497658&idx=1&sn=be9fb0eb35826b5b5f29497c9a40641f\",\n \"FEITIAN @RetailTech Japan 2025\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649876828&idx=1&sn=8690f908fc0f287a2ae8c9930ebc8773\",\n \"关于宏思电子：五问DeepSeek\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649876828&idx=2&sn=58903f1f50868ef6efe629f0d531e71c\",\n \"500种野菜野外识别速查图鉴\": \"https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247493518&idx=1&sn=f6593fd2fc57b2ad3f88a66e28edf48d\",\n \"【安全圈】Telegram CEO 暂时离开法国，刑事调查仍在进行中\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=1&sn=115d0e1f205867e30e417c8478cf3d73\",\n \"【安全圈】Apache Tomcat 漏洞在公开披露后仅 30 小时就被积极利用\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=2&sn=a11b6f875b76d50d5ffce23fbd07880f\",\n \"【安全圈】SANS 研究所警告新型云原生勒索软件攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=3&sn=090726d7d1004579b28e56c214ce8f0d\",\n \"【安全圈】PHP 遭多重安全漏洞 “围攻”，应用程序风险骤增\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=4&sn=2c40ebea61f1937556e695b2be5f2873\",\n \"云取证工作站应需而“升”，精准直击远程勘验难题！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651441584&idx=1&sn=459be8d8553bd36063ba24fd5ab917b7\",\n \"3月20日持续开讲！DeepSeek专题系列讲座火热进行中\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651441584&idx=2&sn=abcd13dbedc427169817b90656469f85\",\n \"蔚来、宁德时代重大战略合作\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247552664&idx=1&sn=e60b4a561fe87288371976dd09a30375\",\n \"AutoCable演讲嘉宾确认 | 国家电线电缆质量检验检测中心：车载以太网线缆的发展趋势及测试\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247552664&idx=2&sn=1246ff7b5d4ba532030125e23945e988\",\n \"展商风采 | 成功实现车辆型式批准(VTA)而所需的网络安全工程战略: 深度防御\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247552664&idx=3&sn=df71a2830a9cb2f3b790891bd02569cd\",\n \"极验动态 | 助力《解放日报》权威报道！破解AI水军黑产链\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDE5MTQxNg==&mid=2649723388&idx=1&sn=5446ab640543dc174d83ecf425baba33\",\n \"截至3月31日丨无忧考试，就用CISSP安心保障\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492510&idx=1&sn=a0b284d7f543d319c00f03d5d52b5fa4\",\n \"破解AI模型部署难题！渊亭科技获AI模型推理技术新专利\": \"https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660190924&idx=1&sn=c6105125d15a7d1fcadb61f593dcf6c2\",\n \"GB T 44774-2024 汽车信息安全应急响应管理规范-市场监督总局、国标委\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247622501&idx=1&sn=f6ef3f7f6f1441d1ce7bfe98be8ccd61\",\n \"GB_T 44778-2024 汽车诊断接口信息安全技术要求及试验方法\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247622501&idx=2&sn=3ddadae7908a4aa204dab4b80af5fb16\",\n \"GB/T44464—2024 汽车数据通用要求 2024-08-23实施\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247622501&idx=3&sn=fb5dc549cc38f36979899d20ecc986e6\",\n \"StilachiRAT 分析：从系统侦察到加密货币盗窃\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247496717&idx=1&sn=78d362f0bb30303fe7ee3743ee6d889e\",\n \"3·15晚会网安盘点：6000%利率的贷款、信息黑洞、AI骚扰电话、抽奖千层套路……\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247637810&idx=1&sn=74b4217913ab0ddc8f38bc59740d00a4\",\n \"CSO说安全 | 张天力：智能安全运营体系探索—分布式多智能体在漏洞修复中的应用与实践\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247637810&idx=2&sn=ec91d03b3b9d56b89bd17e92d40d0285\",\n \"2300万个机密信息在GitHub上泄露，但开发人员仍选择硬编码密码\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247637810&idx=3&sn=95570ba19c6d9334754f79dfea747b82\",\n \"如何打造出一个安全的架构 —— 一位来自阿里云资深架构师的实践经验分享\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTQ2MjI5OA==&mid=2664092233&idx=1&sn=6b9a3b40aaf88e18ead81e2817f66929\",\n \"网络拓扑图你真的会画吗？从类型到实战技巧全解析\": \"https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247516940&idx=1&sn=4399786f6f8416c0a5d6d0ca9d7acd07\",\n \"大模型如何挖漏洞 | 攻防视角下的AI安全\": \"https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494581&idx=1&sn=ad0145d6eed35548fb11eb39f7e438aa\",\n \"SRC漏洞挖掘之越权漏洞挖掘实战指南\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484232&idx=1&sn=00bc01f6b175e96b6f09c2fdbf3ef5d0\",\n \"智能扫描助力节碳超13万吨，合合信息旗下扫描全能王“指尖减碳”写就绿色诗篇\": \"https://mp.weixin.qq.com/s?__biz=MzAxMzg0NjY2NA==&mid=2247493210&idx=1&sn=fc6d648bfec05e26d670871518ac1808\",\n \"【直播预告】“大模型加速器2.0”版本即将开箱！破解AI“幻觉”难题\": \"https://mp.weixin.qq.com/s?__biz=MzAxMzg0NjY2NA==&mid=2247493210&idx=2&sn=c28791b874478aa37cfec89db5bca776\",\n \"一两拨千金，奇安信助力某大型油田新能源电力监控系统稳健落地\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625761&idx=1&sn=3428c2c77c136f1ade40f4b8d1a75d2d\",\n \"网络攻击新时代：OpenAI Agent首次自主完成钓鱼攻击\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625761&idx=2&sn=86916200ef88f5ef63c6e40734393c71\",\n \"为大模型构建运行安全和业务安全防线\": \"https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650210574&idx=1&sn=1ac454dc2b5e99b8c1ebaaddfd718712\"\n },\n \"Microsoft Security Blog\": {\n \"AI innovation requires AI security: Hear what’s new at Microsoft Secure\": \"https://techcommunity.microsoft.com/blog/microsoft-security-blog/ai-innovation-requires-ai-security-hear-what%E2%80%99s-new-at-microsoft-secure/4394130\"\n },\n \"Horizon3.ai\": {\n \"Fireside Chat: Horizon3.ai and Adaptic LLC\": \"https://www.horizon3.ai/intelligence/webinars/fireside-chat-horizon3-ai-and-adaptic-llc/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"How To Discover Hidden Endpoints️‍♂️\": \"https://infosecwriteups.com/how-to-discover-hidden-endpoints-%EF%B8%8F-%EF%B8%8F-cc4c82c8a886?source=rss----7b722bfd1b8d--bug_bounty\",\n \"CRLF Injection: Guide to Finding & Exploiting Vulnerabilities\": \"https://infosecwriteups.com/crlf-injection-guide-to-finding-exploiting-vulnerabilities-ec2d55805cc4?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"GuidePoint Security\": {\n \"Rethinking Risk: ICS & OT Security with Purdue 2.0 and GRC\": \"https://www.guidepointsecurity.com/blog/rethinking-risk-ics-ot-security-with-purdue-2-0-and-grc/\"\n },\n \"Malwarebytes\": {\n \"AMOS and Lumma stealers actively spread to Reddit users\": \"https://www.malwarebytes.com/blog/scams/2025/03/amos-and-lumma-stealers-actively-spread-to-reddit-users\",\n \"Amazon disables option to store Echo voice recordings on your device\": \"https://www.malwarebytes.com/blog/news/2025/03/amazon-disables-option-to-store-echo-voice-recordings-on-your-device\"\n },\n \"Reverse Engineering\": {\n \"The Last Of Us PSARC files\": \"https://www.reddit.com/r/ReverseEngineering/comments/1je1aq8/the_last_of_us_psarc_files/\",\n \"Something From Nothing - Breaking AES encrypted firmwares\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jdzqs1/something_from_nothing_breaking_aes_encrypted/\"\n },\n \"CCC Event Blog\": {\n \"Erstes InselChaos: Einladung & Call for Participation\": \"https://events.ccc.de/2025/03/18/inselchaos-einladung/\"\n },\n \"PortSwigger Research\": {\n \"SAML roulette: the hacker always wins\": \"https://portswigger.net/research/saml-roulette-the-hacker-always-wins\"\n },\n \"Exploit-DB.com RSS Feed\": {\n \"[webapps] Chamilo LMS 1.11.24 - Remote Code Execution (RCE)\": \"https://www.exploit-db.com/exploits/52083\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"新型“规则文件后门”攻击：黑客通过AI代码编辑器注入恶意代码\": \"https://www.freebuf.com/vuls/424987.html\",\n \"FreeBuf早报 | 知名头部安全厂商押注AI/数据赋能安全；应对未来量子安全威胁\": \"https://www.freebuf.com/news/424946.html\",\n \"ChatGPT SSRF漏洞迅速成为热门攻击向量（含PoC视频）\": \"https://www.freebuf.com/vuls/424995.html\",\n \"解读GBT 22240-2020 《信息安全技术 网络安全等级保护定级指南》\": \"https://www.freebuf.com/articles/compliance/354806.html\",\n \"隐秘的StilachiRAT窃取数据并可能实现横向移动\": \"https://www.freebuf.com/articles/system/424960.html\",\n \"CVE-2024-27564漏洞被利用攻击ChatGPT，一周内攻击次数超万次\": \"https://www.freebuf.com/vuls/424845.html\",\n \"Cloudflare推出后量子加密技术，抵御量子计算机攻击\": \"https://www.freebuf.com/articles/es/424967.html\",\n \"谷歌以320亿美元收购Wiz，加速AI时代云安全与多云战略\": \"https://www.freebuf.com/articles/network/424966.html\",\n \"微软警告：新型RAT木马StilachiRAT窃取凭证与加密钱包\": \"https://www.freebuf.com/articles/system/424919.html\",\n \"Cobalt Strike 4.11发布：增强规避能力，提供开箱即用的防御突破工具\": \"https://www.freebuf.com/sectool/424949.html\",\n \"本地部署deepseek风险？部署工具ollama任意文件读取漏洞超详细分析\": \"https://www.freebuf.com/vuls/424855.html\",\n \"已公开利用的 Linux 内核高危漏洞：CVE-2024-36904\": \"https://www.freebuf.com/vuls/424945.html\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"欧洲科技公司呼吁欧盟推动购买欧洲科技产品\": \"https://www.solidot.org/story?sid=80821\",\n \"人类的脑力已经越过峰值？\": \"https://www.solidot.org/story?sid=80820\",\n \"周五是否应该成为新的周六？\": \"https://www.solidot.org/story?sid=80819\",\n \"哈佛对年收入 20 万美元以内家庭免除学费\": \"https://www.solidot.org/story?sid=80818\",\n \"百度副总裁的未成年女儿被指参与开盒\": \"https://www.solidot.org/story?sid=80817\",\n \"Google 在 AI 训练数据集的版权问题上与 OpenAI 意见一致\": \"https://www.solidot.org/story?sid=80816\",\n \"特斯拉二手车价格下跌\": \"https://www.solidot.org/story?sid=80815\",\n \"华为计划在 Windows 授权过期后转向 Linux\": \"https://www.solidot.org/story?sid=80814\",\n \"网信办等发布《人工智能生成合成内容标识办法》\": \"https://www.solidot.org/story?sid=80813\",\n \"GIMP 3.0 释出\": \"https://www.solidot.org/story?sid=80812\"\n },\n \"HackerNews\": {\n \"思科修复 IOS XR 拒绝服务漏洞，可使路由器 BGP 进程崩溃\": \"https://hackernews.cc/archives/57894\",\n \"OKX 暂停 DEX 聚合器服务以阻止 Lazarus 黑客洗钱活动\": \"https://hackernews.cc/archives/57890\",\n \"微软发现新远程访问特洛伊木马，用于加密货币盗窃和侦察\": \"https://hackernews.cc/archives/57888\",\n \"GitHub Action 被攻破，23000 多个仓库的 CI/CD 秘密面临风险\": \"https://hackernews.cc/archives/57886\",\n \"网络犯罪分子利用 CSS 规避垃圾邮件过滤器并追踪电子邮件用户行为\": \"https://hackernews.cc/archives/57884\",\n \"未修复的 Edimax 摄像头漏洞自去年起遭利用进行 Mirai 僵尸网络攻击\": \"https://hackernews.cc/archives/57882\",\n \"Apache Tomcat 漏洞在公开披露仅 30 小时后遭积极利用\": \"https://hackernews.cc/archives/57880\"\n },\n \"锦行科技\": {\n \"锦行科技再携手，成功协办第二届“长城杯”铁人三项赛（广东赛区）！\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493959&idx=1&sn=65d063277fb398d543c65efd3dbced33&chksm=979a12e2a0ed9bf4b73409f768f57e324a8d6d2c1c1bf7153c604a24f009a68324fc0e706802&scene=58&subscene=0#rd\"\n },\n \"安全分析与研究\": {\n \"银狐票根类最新样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491157&idx=1&sn=47a6019cdb8995c2d4618ee435d25a2b&chksm=902fb17da758386b09b8cead2cd838b6f825e0caae7529b1aecac208355575a87f4e65bb6694&scene=58&subscene=0#rd\"\n },\n \"知道创宇404实验室\": {\n \"知道创宇404实验室实习岗位招聘中\": \"https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990830&idx=1&sn=84e6b285079fcf017ef2ec11f9df9084&chksm=8079aadcb70e23ca2abf1fe5effdcd2c3f62f2c66450a808820d6022da5f5d8b0f39abc2a852&scene=58&subscene=0#rd\"\n },\n \"代码卫士\": {\n \"超100家汽车经销商网站遭供应链攻击，传播ClickFix恶意代码\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522522&idx=1&sn=dc611fe0b97413fee866ae5bee4f0944&chksm=ea94a9b0dde320a6ddbbb58fdb071d8a595e847080fe8d55c8d609c43939883ce8e3410ab95b&scene=58&subscene=0#rd\",\n \"热门 GitHub Action 遭供应链攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522522&idx=2&sn=537ee03d1ec2c6a00123cba4ab057fb0&chksm=ea94a9b0dde320a6118b2e810d28bca4965b66597ce0fcf6ddf87d872a8268d4c4918e6f88bf&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"一个msi样本的分析\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590893&idx=1&sn=29094c4974245bf648dcc15839484de9&chksm=b18c2e2786fba73185b77cc914791d4fd786feb070fd803342afb9ec5525b9df8eb0556ecfde&scene=58&subscene=0#rd\",\n \"Apache Tomcat漏洞在被公开披露30小时后就被黑客用来展开攻击\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590893&idx=2&sn=af328a87e3b03b7ab64985167f61aadc&chksm=b18c2e2786fba731c9fd24a85ac66edc22f20580eb8cf8f4f8e6726836d9de793298bba21684&scene=58&subscene=0#rd\",\n \"限时4折！（含章节试看）Frida 编译调试、框架学习及定制开发\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590893&idx=3&sn=3aebbb589c687c714e9ea1165694553c&chksm=b18c2e2786fba7314b3f627f4b3d90673e04a3885826101019dbb1d90112b61533dd67b3abed&scene=58&subscene=0#rd\"\n },\n \"网络安全研究宅基地\": {\n \"以“毒云藤”为例：“台独”势力网络间谍活动解析\": \"https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247497232&idx=1&sn=195d95daebc80da85c655a658dbe66d2&chksm=f9ed9aafce9a13b9467e4a767be6bcdf3f5812a370dc2ba4c5267819b56aa99297d171a3b815&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"《全球数据泄露态势月度报告》（2025年2月）| 附下载地址\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538155&idx=1&sn=6e0c83500b32eac3560d12f4479dbd6f&chksm=c1442756f633ae40b180adbdb55a7c107384293966f00a85ccaee4df180be74fe9280f6ce6c5&scene=58&subscene=0#rd\",\n \"一图读懂强制性国家标准GB 45438-2025《网络安全技术 人工智能生成合成内容标识方法》\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538155&idx=2&sn=2591bfaa2c83e13b1581a3b5877f927f&chksm=c1442756f633ae40797c7b70bf324a32f922993b5a6720387fd612bd2f75a1afdd300ca97f05&scene=58&subscene=0#rd\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 安全事件 2025-03-18 乐鑫“后门”事件？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499921&idx=1&sn=1de3eb0a0a58c1a05fa8d6ce901163f2&chksm=c063ee48f714675e0fb7d79f224668e7b05c140090651c42c381aee2518a866d02301e674933&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"泄露650万用户数据，这家IT巨头赔偿超1.2亿元\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514007&idx=1&sn=0b2ac85e6205db15581ec2925d58f612&chksm=ebfaf0b7dc8d79a19b09f296028d4b7c3407e4edf38ca425706f005aa850327e21cc3df2caef&scene=58&subscene=0#rd\",\n \"国家网络安全通报中心发布重点防范境外恶意网址和恶意IP (五)\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514007&idx=2&sn=6483ae834cbd18974d1fc17ba207fff6&chksm=ebfaf0b7dc8d79a19c6ce14bce94488efd68c03159ea92f860da9e2011369b550ff54748b248&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】Telegram CEO 暂时离开法国，刑事调查仍在进行中\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=1&sn=115d0e1f205867e30e417c8478cf3d73&chksm=f36e7686c419ff9022792ea30bf3d1dccf7f46c3406f5fe6b5bb23f24c9ade86a0f7c2410367&scene=58&subscene=0#rd\",\n \"【安全圈】Apache Tomcat 漏洞在公开披露后仅 30 小时就被积极利用\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=2&sn=a11b6f875b76d50d5ffce23fbd07880f&chksm=f36e7686c419ff906a9bb292a69dbf5f6c4b7dcf6bda81db3ae13ddc0d5f53cfc22d1f541977&scene=58&subscene=0#rd\",\n \"【安全圈】SANS 研究所警告新型云原生勒索软件攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=3&sn=090726d7d1004579b28e56c214ce8f0d&chksm=f36e7686c419ff903a3cdca30e9a9124e140e7caeecf34a6bd1e91cd37d0ec484a7705a33fec&scene=58&subscene=0#rd\",\n \"【安全圈】PHP 遭多重安全漏洞 “围攻”，应用程序风险骤增\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=4&sn=2c40ebea61f1937556e695b2be5f2873&chksm=f36e7686c419ff90e224cfc0527bf8094f545ccfac663b9591a26199291ac165402523d02161&scene=58&subscene=0#rd\"\n },\n \"中国信息安全\": {\n \"“职”等你来！《中国信息安全》杂志社招聘啦！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238601&idx=1&sn=177ff992650cf8371d0b5d72f5e3739d&chksm=8b580cf0bc2f85e6469b64a220fee9f63671b16dfe078c67b6899859ce77a4dbe854cc73fea3&scene=58&subscene=0#rd\",\n \"专家解读 | 构建AIGC安全治理的“中国范式”\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238601&idx=2&sn=8d7c28f33a03c65a04c858ce6cf3f3d5&chksm=8b580cf0bc2f85e684cf8613f43fb8aa40a6897ca674ce46571ff4e9a74505f61638f1833426&scene=58&subscene=0#rd\",\n \"关注 | 工信部部署做好2025年信息通信业安全生产和网络运行安全工作\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238601&idx=3&sn=ab3a22d6d13099310e4a42317dc58e42&chksm=8b580cf0bc2f85e6dcd5fb51e0e050f76831560235dff6a43558c9d8ad1ba82a8b126f18e2c3&scene=58&subscene=0#rd\",\n \"关注 | 新一批重点防范境外恶意网址和恶意IP公布！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238601&idx=4&sn=171413a1509bf7cf77f8192cc549f331&chksm=8b580cf0bc2f85e6c4da6675cbf4040e15422117bec770e97b90bf387ce9b18d0425b2a4a761&scene=58&subscene=0#rd\",\n \"发布 | 2项网络安全国家标准获批发布\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238601&idx=5&sn=d4f056e781e7e27e157a7f4e69bd5fb4&chksm=8b580cf0bc2f85e6ec4490d628246234ad2317df2ef413c355d7383078f456c1a7d4151f445a&scene=58&subscene=0#rd\",\n \"国际 | 欧美围绕《数字市场法案》展开激烈交锋 双方或陷入“攻讦—辩护”拉锯战\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238601&idx=6&sn=26e231ba5df2988f78269ee8bb7a57f9&chksm=8b580cf0bc2f85e683e2cb712461bd29aaf98e6f82fc46a04950a75d28abdfa80aa39dec2bf7&scene=58&subscene=0#rd\",\n \"一图读懂 | 《关键信息基础设施安全保护条例》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238601&idx=7&sn=fc54f38de5082217f6c927b73cc5ed50&chksm=8b580cf0bc2f85e670c34e39621543f98846b2353ac1b3b28ead9c9981375f531440710bd864&scene=58&subscene=0#rd\"\n },\n \"安全牛\": {\n \"打破对CISO角色的七大误解\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135526&idx=1&sn=da0cb6963a73def4175964d6780646d7&chksm=bd15aef58a6227e314bbf864b8ad7299ef9859a7e7fa09dbf7da0702495ceab00f9336d0904f&scene=58&subscene=0#rd\",\n \"国家网络安全通报中心提醒：重点防范10个境外恶意网址；热门GitHub Action遭遇供应链攻击，2.3万代码库受影响 |牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135526&idx=2&sn=a32d66a38e62bed59affe27ff6229e26&chksm=bd15aef58a6227e349303d8b750487a745545ec1f2048c676fe15f2134444b54780d0f451f3e&scene=58&subscene=0#rd\"\n },\n \"补天平台\": {\n \"三重福利同时开启 | 万元赏金+电脑等豪华礼品速来解锁！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247507563&idx=1&sn=9bdeb81e95feeee4ba677a90b44ec8cc&chksm=eaf99627dd8e1f310dedc79ec1a8aeda371bd9de581e7fcda09ed734987f14ac7b99fd3149c0&scene=58&subscene=0#rd\"\n },\n \"网安杂谈\": {\n \"友情转发：智驾汽车电子数据取证与分析培训班正在报名 | 中汽研主办弘德网协办\": \"https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650889538&idx=1&sn=c1d017dd983ba624c6976ec8929e5d0b&chksm=812ea167b65928714461f44f851c01999e226d2ac95ed92dc6f67716d9ca77f4de96ae8012cf&scene=58&subscene=0#rd\"\n },\n \"青藤云安全\": {\n \"重磅！微隔离系统评价标准发布，助力企业精准选型\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850069&idx=1&sn=1c859157b10d3456d4b7520437f391f0&chksm=80dba0b0b7ac29a6f62fb1c2d371e8ee5653bc4f5f1978d8dc2bc3da56438250bb27fbafb60c&scene=58&subscene=0#rd\"\n },\n \"百度安全应急响应中心\": {\n \"模型上新！体验文心大模型4.5卓越性能，文心快码邀您探索\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODc0MTIwMw==&mid=2652542544&idx=1&sn=47e0e802aff3ffcf77a88d517ce0ad88&chksm=8bcbb26cbcbc3b7a12c2b48594027112a4b52f252a8a407e197dc9db65b4d9cec764be83d0cf&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"充电 5 分钟、续航 400 公里，比亚迪甩出终结燃油车时代的「王炸」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075920&idx=1&sn=3ad6f6c765bdbc1f726207ddfbc1ca44&chksm=7e57c46649204d70d7d5009414b65b2e9992a4e36174441eb682cee92d5edb38f56eafafe0ff&scene=58&subscene=0#rd\",\n \"DeepSeek 们为什么选择飞书？\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075920&idx=2&sn=18fdf8989d8caf51278a92bd95f505f5&chksm=7e57c46649204d70f142212cd41d5e9b02ebf1f064b408b7f5ea02a42d7494bc86f7d2e7ea6a&scene=58&subscene=0#rd\",\n \"独家丨字节大模型全员会，朱文佳和吴永辉一起聊了方向、组织和开源\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075906&idx=1&sn=7870f9bd67a6c97b92c6b1d7ee81e078&chksm=7e57c47449204d622145a4bc1d3ea9bdbe649be20fceca3ad87d523797ad3aabd43821c3825f&scene=58&subscene=0#rd\",\n \"小米 SU7 Ultra 抵达纽北赛道；比亚迪发布兆瓦闪充：5 分钟充 400 公里；AMD 「苏妈」访北京至少一周｜极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075884&idx=1&sn=24a87d652292c39070b7f1fd4f587aed&chksm=7e57c41a49204d0c95c750307b82322481a0dcd3f30c3a05f25bb22e0d1ffbd3df4a3e887bba&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"俄外交官被欧驱逐，大使馆屋顶天线藏何密？间谍活动惊爆内幕！\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560340&idx=1&sn=a87feea6a63d09efce47b347bb5c2372&chksm=8711791fb066f009059991f6c890cf1b4c03231b4b9c16ad989fde68542079bd050cd137918e&scene=58&subscene=0#rd\",\n \"美国60家企业预赴越：从经济布局到地缘战略的深度“围堵”\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560340&idx=2&sn=218c32c9dd7e722dd1155c21054779ed&chksm=8711791fb066f009cbe94c5d2b82822a8c83536d0454530b37bde57aba2e2fb855a626001242&scene=58&subscene=0#rd\"\n },\n \"复旦白泽战队\": {\n \"初春踏浪圣迭戈：NDSS'25 之行见闻录\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247493473&idx=1&sn=7de3ad584c03943ec29a64edcc14ec73&chksm=fde8631fca9fea092afa5477941d0af8e520315fea1335b54db8bfda425b49907e3bf2171080&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \"新书特惠｜《.NET安全攻防指南》重磅来袭！\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499182&idx=1&sn=4f8acadbd6fb16ebe53d6a4745eb32a0&chksm=fa595343cd2eda55d5e00c8a0d9567d67886afecb934969d10870e1d7b11256285156354fd0e&scene=58&subscene=0#rd\",\n \".NET 内网攻防实战电子报刊\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499182&idx=2&sn=79eacd504645a715e95390d79ce76fb5&chksm=fa595343cd2eda554887e2316599f0e34c1f28366a2561f1926c95a3d473672ebc67ecd2b4cc&scene=58&subscene=0#rd\",\n \"Sharp4TaskRun 实现任务计划隐藏与权限维持\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499182&idx=3&sn=0862321105957906466fad05d3677d41&chksm=fa595343cd2eda550ad94d280fe1130c3c1add35d617773f3407f37db0cb52c7d582841e4c56&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"YouTube 惊现 DCRat 恶意软件，登录凭据或面临盗取危机\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581554&idx=1&sn=3b33f36408f116d4e61f4e44318a0f3d&chksm=e9146f48de63e65edff41d9c0a8cc4914ae4a4a57b856cef78775dd706577fad6ac2c8056188&scene=58&subscene=0#rd\"\n },\n \"百度安全实验室\": {\n \"模型上新！体验文心大模型4.5卓越性能，文心快码邀您探索\": \"https://mp.weixin.qq.com/s?__biz=MzA3NTQ3ODI0NA==&mid=2247487731&idx=1&sn=da86d36d635bb71d86dd2675d7716d5d&chksm=9f6eb578a8193c6ec5cfed79f5cb9950920fbc0437dddc4f6c9a666e05e82cae11cfffbf105d&scene=58&subscene=0#rd\"\n },\n \"吴鲁加\": {\n \"很会提供情绪价值的习惯养成 App 是什么样的\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247485244&idx=1&sn=b19642c548c8b21bf9d859cceada2aeb&chksm=c01a8a0df76d031b0c7f0e23a224c1e6b46c216ef72b57726101ca4bdd4e1d53603fb4a4a5d3&scene=58&subscene=0#rd\"\n },\n \"字节跳动技术团队\": {\n \"DeepSeek + Function Call：基于 Eino 的“计划——执行”多智能体范式实战\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513832&idx=1&sn=f957cb8368f29a10e4104cd0c0969479&chksm=e9d37d0adea4f41c383721114d9ee0725be648e98a99e0cbff3700d2a748435d631244131234&scene=58&subscene=0#rd\"\n },\n \"360数字安全\": {\n \"360受邀出席重庆“校企共用”行动启动会 打造全国产教融合“重庆样板”\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579992&idx=1&sn=d690807cd32b151a36d3f0a736d53267&chksm=9f8d2950a8faa046e09e44c4a94aa1bd40bf07ad1dce75afdcfb17705c9c646757372cd2676e&scene=58&subscene=0#rd\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #780: Self validating linux executables\": \"https://www.hecfblog.com/2025/03/daily-blog-780-self-validating-linux.html\"\n },\n \"ICT Security Magazine\": {\n \"Cybersecurity globale: l’Italia tra le eccellenze mondiali secondo il Global Cybersecurity Index 2024\": \"https://www.ictsecuritymagazine.com/articoli/cybersecurity-globale-italia/\",\n \"8 Sfide Critiche per la Cybersecurity nelle Reti 5G\": \"https://www.ictsecuritymagazine.com/articoli/cybersecurity-reti-5g/\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Sperm donation giant California Cryobank warns of a data breach\": \"https://www.bleepingcomputer.com/news/security/sperm-donation-giant-california-cryobank-warns-of-a-data-breach/\",\n \"Cyberwarfare tra Cina e Taiwan: il Ministero della Sicurezza Cinese smaschera l'”esercito informatico” di Taipei\": \"https://www.insicurezzadigitale.com/cyberwarfare-tra-cina-e-taiwan-il-ministero-della-sicurezza-cinese-smaschera-lesercito-informatico-di-taipei/\",\n \"Poisoned Windows shortcuts found to be a favorite of Chinese, Russian, N. Korean state hackers\": \"https://therecord.media/windows-lnk-files-nation-state-hacking-campaigns\",\n \"GitHub Action hack likely led to another in cascading supply chain attack\": \"https://www.bleepingcomputer.com/news/security/github-action-hack-likely-led-to-another-in-cascading-supply-chain-attack/\",\n \"Western Alliance Bank notifies 21,899 customers of data breach\": \"https://www.bleepingcomputer.com/news/security/western-alliance-bank-notifies-21-899-customers-of-data-breach/\",\n \"What Is Cyber Deterrence? Your Questions Answered\": \"https://bfore.ai/what-is-cyber-deterrence-your-questions-answered/\",\n \"Municipalities in four states are struggling with cyberattacks limiting services\": \"https://therecord.media/municipalities-struggling-cyberattacks-services\",\n \"Western Alliance Bank says nearly 22,000 impacted by file transfer software breach\": \"https://therecord.media/western-alliance-bank-data-breach\",\n \"Malicious Android 'Vapor' apps on Google Play installed 60 million times\": \"https://www.bleepingcomputer.com/news/security/malicious-android-vapor-apps-on-google-play-installed-60-million-times/\",\n \"Microsoft identifies new RAT targeting cryptocurrency wallets and more\": \"https://therecord.media/stilachirat-new-remote-access-trojan-crypto-wallets\",\n \"New Windows zero-day exploited by 11 state hacking groups since 2017\": \"https://www.bleepingcomputer.com/news/security/new-windows-zero-day-exploited-by-11-state-hacking-groups-since-2017/\",\n \"Google to purchase Wiz for $32 billion in cloud security play\": \"https://www.bleepingcomputer.com/news/security/google-to-purchase-wiz-for-32-billion-in-cloud-security-play/\",\n \"Critical AMI MegaRAC bug can let attackers hijack, brick servers\": \"https://www.bleepingcomputer.com/news/security/critical-ami-megarac-bug-can-let-attackers-hijack-brick-servers/\",\n \"Tomcat sotto attacco: grave bug sfruttato dopo 30 ore dalla pubblicazione\": \"https://www.securityinfo.it/2025/03/18/tomcat-sotto-attacco-grave-bug-sfruttato-dopo-30-ore-dalla-pubblicazione/\",\n \"China identifies Taiwanese hackers allegedly behind cyberattacks and espionage\": \"https://therecord.media/china-taiwan-hacks-identify-cyber\",\n \"Software compliance: semplificare è la parola d’ordine\": \"https://www.cybersecurity360.it/soluzioni-aziendali/software-compliance-semplificare-e-la-parola-dordine/\",\n \"Campagna di phishing mirata a UniPd: circa 200 credenziali compromesse\": \"https://cert-agid.gov.it/news/campagna-di-phishing-mirata-a-unipd-circa-200-credenziali-compromesse/\",\n \"Blockchain gaming platform WEMIX hacked to steal $6.1 million\": \"https://www.bleepingcomputer.com/news/security/blockchain-gaming-platform-wemix-hacked-to-steal-61-million/\",\n \"Google buys cloud security provider Wiz for $32 billion\": \"https://therecord.media/google-buys-cloud-security-provider-wiz\",\n \"SQLi, XSS, and SSRF: Breaking Down Zimbra’s Latest Security Threats\": \"https://cyble.com/blog/breaking-down-zimbras-latest-security-threats/\",\n \"IT Vulnerability Report: Cyble Urges Fixes for Apple, PHP Flaws\": \"https://cyble.com/blog/it-vulnerability-report-for-apple-php-flaws/\",\n \"Flashpoint 2025 Global Threat Intelligence Report: Stay Ahead of Emerging Threats\": \"https://flashpoint.io/blog/flashpoint-global-threat-intelligence-report-gtir-2025/\",\n \"Backup automatico: una soluzione essenziale per le aziende\": \"https://www.cybersecurity360.it/soluzioni-aziendali/backup-automatico-soluzioni-aziende/\",\n \"Software cybersecurity: strategie e soluzioni a confronto\": \"https://www.cybersecurity360.it/soluzioni-aziendali/software-cybersecurity-strategie-soluzioni/\",\n \"La sfida della mobilità: sfruttare i dati sulle flotte garantendone la massima protezione\": \"https://www.cybersecurity360.it/soluzioni-aziendali/la-sfida-della-mobilita-sfruttare-i-dati-sulle-flotte-garantendone-la-massima-protezione/\",\n \"Expose Android Malware in Seconds: ANY.RUN Sandbox Now Supports Real-Time APK Analysis\": \"https://any.run/cybersecurity-blog/android-malware-analysis/\",\n \"La trappola invisibile: CSS manipolati per aggirare filtri antispam e tracciare utenti\": \"https://www.cybersecurity360.it/news/la-trappola-invisibile-css-manipolati-per-aggirare-filtri-antispam-e-tracciare-utenti/\",\n \"Integrare GDPR e NIS 2: perché la cyber security è la naturale evoluzione della privacy\": \"https://www.cybersecurity360.it/legal/privacy-dati-personali/integrare-gdpr-e-nis-2-perche-la-cyber-security-e-la-naturale-evoluzione-della-privacy/\",\n \"!exploitable Episode Three - Devfile Adventures\": \"https://blog.doyensec.com/2025/03/18/exploitable-gitlab.html\",\n \"ClearFake’s New Widespread Variant: Increased Web3 Exploitation for Malware Delivery\": \"https://blog.sekoia.io/clearfakes-new-widespread-variant-increased-web3-exploitation-for-malware-delivery/\",\n \"Bypassing Web Filters Part 3: Domain Fronting\": \"https://blog.compass-security.com/2025/03/bypassing-web-filters-part-3-domain-fronting/\",\n \"A Taxing Problem: Seasonal IRS and Tax Scams Report\": \"https://bfore.ai/a-taxing-problem-seasonal-irs-and-tax-scams-report/\"\n },\n \"TrustedSec\": {\n \"Are Attackers \\\"Passing Though\\\" Your Azure App Proxy?\": \"https://trustedsec.com/blog/are-attackers-passing-through-your-azure-app-proxy\"\n },\n \"Securityinfo.it\": {\n \"Tomcat sotto attacco: grave bug sfruttato dopo 30 ore dalla pubblicazione\": \"https://www.securityinfo.it/2025/03/18/tomcat-sotto-attacco-grave-bug-sfruttato-dopo-30-ore-dalla-pubblicazione/?utm_source=rss&utm_medium=rss&utm_campaign=tomcat-sotto-attacco-grave-bug-sfruttato-dopo-30-ore-dalla-pubblicazione\"\n },\n \"迪哥讲事\": {\n \"SRC挖掘之302跳转登录劫持\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497289&idx=1&sn=6e285d3b0b960cc668a56a776a5dc7b7&chksm=e8a5fc2adfd2753ca105a16f1d0977f16094fa379f0671022713257990432c213adeebf9783b&scene=58&subscene=0#rd\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"Python Bot Delivered Through DLL Side-Loading, (Tue, Mar 18th)\": \"https://isc.sans.edu/diary/rss/31778\",\n \"ISC Stormcast For Tuesday, March 18th, 2025 https://isc.sans.edu/podcastdetail/9368, (Tue, Mar 18th)\": \"https://isc.sans.edu/diary/rss/31776\"\n },\n \"Schneier on Security\": {\n \"Is Security Human Factors Research Skewed Towards Western Ideas and Habits?\": \"https://www.schneier.com/blog/archives/2025/03/is-security-human-factors-research-skewed-towards-western-ideas-and-habits.html\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"Anonymous Email\": \"https://www.reddit.com/r/blackhat/comments/1jegror/anonymous_email/\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"SAML roulette: the hacker always wins\": \"https://www.reddit.com/r/netsec/comments/1je8f1h/saml_roulette_the_hacker_always_wins/\",\n \"Learn how an out-of-bounds write vulnerability in the Linux kernel can be exploited to achieve an LPE (CVE-2025-0927)\": \"https://www.reddit.com/r/netsec/comments/1je3w9o/learn_how_an_outofbounds_write_vulnerability_in/\",\n \"Local Privilege Escalation via Unquoted Search Path in Plantronics Hub\": \"https://www.reddit.com/r/netsec/comments/1je6j64/local_privilege_escalation_via_unquoted_search/\",\n \"Compromised tj-actions/changed-files GitHub Action: A look at publicly leaked secrets\": \"https://www.reddit.com/r/netsec/comments/1jec56b/compromised_tjactionschangedfiles_github_action_a/\",\n \"Arbitrary File Write CVE-2024-0402 in GitLab (Exploit)\": \"https://www.reddit.com/r/netsec/comments/1je4j6r/arbitrary_file_write_cve20240402_in_gitlab_exploit/\",\n \"CEF Debugger Enabled in Google Web Designer | Google Bug Hunters\": \"https://www.reddit.com/r/netsec/comments/1je4tfc/cef_debugger_enabled_in_google_web_designer/\"\n },\n \"Security Affairs\": {\n \"Nation-state actors and cybercrime gangs abuse malicious .lnk files for espionage and data theft\": \"https://securityaffairs.com/175569/apt/nation-state-actors-and-cybercrime-gangs-abuse-malicious-lnk-files-for-espionage-and-data-theft.html\",\n \"ChatGPT SSRF bug quickly becomes a favorite attack vector\": \"https://securityaffairs.com/175560/hacking/chatgpt-ssrf-bug-quickly-becomes-a-favorite-attack-vector.html\",\n \"GitHub Action tj-actions/changed-files was compromised in supply chain attack\": \"https://securityaffairs.com/175547/hacking/github-action-tj-actions-changed-files-was-compromised.html\",\n \"New StilachiRAT uses sophisticated techniques to avoid detection\": \"https://securityaffairs.com/175530/malware/stilachirat-uses-sophisticated-techniques-to-avoid-detection.html\"\n },\n \"The Hacker News\": {\n \"New ‘Rules File Backdoor’ Attack Lets Hackers Inject Malicious Code via AI Code Editors\": \"https://thehackernews.com/2025/03/new-rules-file-backdoor-attack-lets.html\",\n \"Unpatched Windows Zero-Day Flaw Exploited by 11 State-Sponsored Threat Groups Since 2017\": \"https://thehackernews.com/2025/03/unpatched-windows-zero-day-flaw.html\",\n \"Google Acquires Wiz for $32 Billion in Its Biggest Deal Ever to Boost Cloud Security\": \"https://thehackernews.com/2025/03/google-acquires-wiz-for-32-billion-in.html\",\n \"New Critical AMI BMC Vulnerability Enables Remote Server Takeover and Bricking\": \"https://thehackernews.com/2025/03/new-critical-ami-bmc-vulnerability.html\",\n \"How to Improve Okta Security in Four Steps\": \"https://thehackernews.com/2025/03/how-to-improve-okta-security-in-four.html\",\n \"New Ad Fraud Campaign Exploits 331 Apps with 60M+ Downloads for Phishing and Intrusive Ads\": \"https://thehackernews.com/2025/03/new-ad-fraud-campaign-exploits-331-apps.html\",\n \"China-Linked MirrorFace Deploys ANEL and AsyncRAT in New Cyber Espionage Operation\": \"https://thehackernews.com/2025/03/china-linked-mirrorface-deploys-anel.html\",\n \"BADBOX 2.0 Botnet Infects 1 Million Android Devices for Ad Fraud and Proxy Abuse\": \"https://thehackernews.com/2025/03/badbox-20-botnet-infects-1-million.html\",\n \"Microsoft Warns of StilachiRAT: A Stealthy RAT Targeting Credentials and Crypto Wallets\": \"https://thehackernews.com/2025/03/microsoft-warns-of-stilachirat-stealthy.html\"\n },\n \"Information Security\": {\n \"Seeking Cybersecurity Decision-Makers for a 1-Minute, Anonymous Survey 💻 🌐 ✍\": \"https://www.reddit.com/r/Information_Security/comments/1je5pl3/seeking_cybersecurity_decisionmakers_for_a/\"\n },\n \"Computer Forensics\": {\n \"Packer Overview\": \"https://www.reddit.com/r/computerforensics/comments/1jef9bd/packer_overview/\",\n \"Starting my forensics journey\": \"https://www.reddit.com/r/computerforensics/comments/1jecr2v/starting_my_forensics_journey/\",\n \"Email Forensics - Tool for corrupt PSTs\": \"https://www.reddit.com/r/computerforensics/comments/1je17ze/email_forensics_tool_for_corrupt_psts/\",\n \"Will I make it? (brutal honest replies)\": \"https://www.reddit.com/r/computerforensics/comments/1jdzwvk/will_i_make_it_brutal_honest_replies/\"\n },\n \"Your Open Hacker Community\": {\n \"About Networking\": \"https://www.reddit.com/r/HowToHack/comments/1jeaakh/about_networking/\",\n \"Fisher-Price Laugh & Learn Mix & Learn DJ Table\": \"https://www.reddit.com/r/HowToHack/comments/1jehs6w/fisherprice_laugh_learn_mix_learn_dj_table/\",\n \"Tango\": \"https://www.reddit.com/r/HowToHack/comments/1jebzmx/tango/\",\n \"Someone hacked me\": \"https://www.reddit.com/r/HowToHack/comments/1jeda73/someone_hacked_me/\",\n \"HACK ACCOUNT TIKTOK\": \"https://www.reddit.com/r/HowToHack/comments/1jeekff/hack_account_tiktok/\",\n \"How to get crunch\": \"https://www.reddit.com/r/HowToHack/comments/1je03s2/how_to_get_crunch/\",\n \"How to login using facebook with python something similar to like \\\"instagrapi\\\" and \\\"instaloader\\\" for instagram without use of selenium.\": \"https://www.reddit.com/r/HowToHack/comments/1je2aua/how_to_login_using_facebook_with_python_something/\",\n \"can you hack a snapchat account?\": \"https://www.reddit.com/r/HowToHack/comments/1je0bgr/can_you_hack_a_snapchat_account/\",\n \"How do I learn\": \"https://www.reddit.com/r/HowToHack/comments/1jdzoxo/how_do_i_learn/\"\n },\n \"Social Engineering\": {\n \"Self-disclosure factors: what makes people share their thoughts and feelings?\": \"https://www.reddit.com/r/SocialEngineering/comments/1je33pf/selfdisclosure_factors_what_makes_people_share/\",\n \"How to manipulate people by impersonating a bank employee: analyzing vulnerabilities in a real-world\": \"https://www.reddit.com/r/SocialEngineering/comments/1je0nya/how_to_manipulate_people_by_impersonating_a_bank/\"\n },\n \"Graham Cluley\": {\n \"The AI Fix #42: AIs with anxiety, and why AIs don’t know what happened\": \"https://grahamcluley.com/the-ai-fix-42/\",\n \"Mandatory Coinbase wallet migration? It’s a phishing scam!\": \"https://www.bitdefender.com/en-us/blog/hotforsecurity/mandatory-coinbase-wallet-migration-its-a-phishing-scam\"\n },\n \"网安寻路人\": {\n \"欧盟《健康数据空间条例》正式版本（全文翻译）\": \"https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247506931&idx=1&sn=f0a999b1355514cd0d2089f258c28a0a&chksm=97e96619a09eef0f4cf369360a5c504d504c18d7c47e1e9ee5b439fc57cc90fe5b63eea08437&scene=58&subscene=0#rd\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Angry Iguana, Squid Bot, Bruted, 0Auth, Dragon Medical, Clippy 2.0, CISA, Josh Marpet - SWN #460\": \"http://sites.libsyn.com/18678/angry-iguana-squid-bot-bruted-0auth-dragon-medical-clippy-20-cisa-josh-marpet-swn-460\",\n \"Redlining the Smart Contract Top 10 - Shashank . - ASW #322\": \"http://sites.libsyn.com/18678/redlining-the-smart-contract-top-10-shashank-asw-322\"\n }\n}"}, "0dff8a8494e9ccdac8a19bfd4aabc677fe7952cf": {"t": 1785772253.0487194, "n": 52505, "h": "684f83cc8bfffbc6", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-03-18 Review\": \"http://www.sec-wiki.com/?2025-03-18\"\n },\n \"奇安信攻防社区\": {\n \"基于SimpleXMLElement class的免杀webshell\": \"https://forum.butian.net/share/4207\"\n },\n \"Jiajun的技术笔记\": {\n \"Using xmonad with xfce4\": \"https://jiajunhuang.com/articles/2025_03_18-xmonad_xfce4.md.html\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Tue Mar 18 16:18:08 UTC 2025\": \"https://github.com/trickest/cve/commit/1a4b6a257e22cb178f860f7b4843958d75988f98\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"YouTube 惊现 DCRat 恶意软件，登录凭据或面临盗取危机\": \"https://www.4hou.com/posts/9j7J\"\n },\n \"Security Boulevard\": {\n \"Recon Village – Maltego Community Workshop: OSINT & Custom Transforms\": \"https://securityboulevard.com/2025/03/recon-village-maltego-community-workshop-osint-custom-transforms/?utm_source=rss&utm_medium=rss&utm_campaign=recon-village-maltego-community-workshop-osint-custom-transforms\",\n \"What is Infrastructure Intelligence?\": \"https://securityboulevard.com/2025/03/what-is-infrastructure-intelligence/?utm_source=rss&utm_medium=rss&utm_campaign=what-is-infrastructure-intelligence\",\n \"Randall Munroe’s XKCD ‘Water Balloons’\": \"https://securityboulevard.com/2025/03/randall-munroes-xkcd-water-balloons/?utm_source=rss&utm_medium=rss&utm_campaign=randall-munroes-xkcd-water-balloons\",\n \"How to Stop Expired Secrets from Disrupting Your Operations\": \"https://securityboulevard.com/2025/03/how-to-stop-expired-secrets-from-disrupting-your-operations/?utm_source=rss&utm_medium=rss&utm_campaign=how-to-stop-expired-secrets-from-disrupting-your-operations\",\n \"DEF CON 32 – Recon Village – The Art Of Pivoting In OSINT Investigations\": \"https://securityboulevard.com/2025/03/def-con-32-recon-village-the-art-of-pivoting-in-osint-investigations/?utm_source=rss&utm_medium=rss&utm_campaign=def-con-32-recon-village-the-art-of-pivoting-in-osint-investigations\",\n \"Veriti Recognized in Forrester’s 2025 UVM Landscape Report\": \"https://securityboulevard.com/2025/03/veriti-recognized-in-forresters-2025-uvm-landscape-report/?utm_source=rss&utm_medium=rss&utm_campaign=veriti-recognized-in-forresters-2025-uvm-landscape-report\",\n \"Google Agrees to Acquire Wiz in $30B Deal\": \"https://securityboulevard.com/2025/03/google-agrees-to-acquire-wiz-in-30b-deal/?utm_source=rss&utm_medium=rss&utm_campaign=google-agrees-to-acquire-wiz-in-30b-deal\",\n \"SquareX Launches “Year of Browser Bugs” (YOBB) to Expose Critical Security Blind Spots\": \"https://securityboulevard.com/2025/03/squarex-launches-year-of-browser-bugs-yobb-to-expose-critical-security-blind-spots/?utm_source=rss&utm_medium=rss&utm_campaign=squarex-launches-year-of-browser-bugs-yobb-to-expose-critical-security-blind-spots\",\n \"Prompt Security Adds Ability to Restrict Access to Data Generated by LLMs\": \"https://securityboulevard.com/2025/03/prompt-security-adds-ability-to-restrict-access-to-data-generated-by-llms/?utm_source=rss&utm_medium=rss&utm_campaign=prompt-security-adds-ability-to-restrict-access-to-data-generated-by-llms\",\n \"ADR for PCI DSS 4.0 Compliance | Contrast Security\": \"https://securityboulevard.com/2025/03/adr-for-pci-dss-4-0-compliance-contrast-security/?utm_source=rss&utm_medium=rss&utm_campaign=adr-for-pci-dss-4-0-compliance-contrast-security\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"THM — Billing\": \"https://infosecwriteups.com/thm-billing-70be3fe3d151?source=rss----7b722bfd1b8d---4\",\n \"How To Discover Hidden Endpoints️‍♂️\": \"https://infosecwriteups.com/how-to-discover-hidden-endpoints-%EF%B8%8F-%EF%B8%8F-cc4c82c8a886?source=rss----7b722bfd1b8d---4\",\n \"CRLF Injection: Guide to Finding & Exploiting Vulnerabilities\": \"https://infosecwriteups.com/crlf-injection-guide-to-finding-exploiting-vulnerabilities-ec2d55805cc4?source=rss----7b722bfd1b8d---4\",\n \"Overwork, Burnout and the Toll on Mental Health in Cybersecurity\": \"https://infosecwriteups.com/overwork-burnout-and-the-toll-on-mental-health-in-cybersecurity-e68a8877211f?source=rss----7b722bfd1b8d---4\",\n \"TryHackMe Ignite Room Walkthrough: Exploiting Fuel CMS 1.4.1 RCE\": \"https://infosecwriteups.com/tryhackme-ignite-room-walkthrough-exploiting-fuel-cms-1-4-1-rce-8ae1e8659c64?source=rss----7b722bfd1b8d---4\",\n \"Think You Can Hack a Kubernetes Cluster? Here’s What to Look For.\": \"https://infosecwriteups.com/think-you-can-hack-a-kubernetes-cluster-heres-what-to-look-for-f644c43b280d?source=rss----7b722bfd1b8d---4\",\n \"API Security 101: Securing GraphQL and REST Endpoints Like a Pro\": \"https://infosecwriteups.com/api-security-101-securing-graphql-and-rest-endpoints-like-a-pro-1f819bfe15f9?source=rss----7b722bfd1b8d---4\",\n \"Tuesday Morning Threat Report: March 18, 2025\": \"https://infosecwriteups.com/tuesday-morning-threat-report-march-18-2025-ef4e2cc6dfed?source=rss----7b722bfd1b8d---4\",\n \"Building A Pattern-based XSS Recon Tool\": \"https://infosecwriteups.com/building-a-basic-xss-reconnaissance-tool-0ff6042074d7?source=rss----7b722bfd1b8d---4\",\n \"What Really Happens on the Dark Web?\": \"https://infosecwriteups.com/what-really-happens-on-the-dark-web-f700e7680461?source=rss----7b722bfd1b8d---4\"\n },\n \"obaby@mars\": {\n \"春风无力百花残\": \"https://h4ck.org.cn/2025/03/19849\"\n },\n \"一个被知识诅咒的人\": {\n \"【人工智能】引爆AI新纪元：DeepSeek R1 如何通过强化学习革新推理能力\": \"https://blog.csdn.net/nokiaguy/article/details/146338257\",\n \"【人工智能】本地AI的巅峰对决：LM Studio vs. Ollama 在大模型部署中的技术对比与选择指南\": \"https://blog.csdn.net/nokiaguy/article/details/146338236\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"AI大模型攻防安全 | 第15期安全范儿技术沙龙开启\": \"https://www.anquanke.com/post/id/305147\",\n \"PHP 遭多重安全漏洞 “围攻”，应用程序风险骤增\": \"https://www.anquanke.com/post/id/305142\",\n \"软件供应链风险攀升，人工智能和加密货币沦为黑客目标\": \"https://www.anquanke.com/post/id/305140\",\n \"PoC 代码一经发布， Apache Tomcat 新漏洞便被威胁行为者迅速利用\": \"https://www.anquanke.com/post/id/305138\",\n \"Wazuh SIEM 平台漏洞可致使恶意代码远程执行\": \"https://www.anquanke.com/post/id/305136\",\n \"微软安全更新：56 处漏洞修复，7 个零日危机化解\": \"https://www.anquanke.com/post/id/305131\",\n \"Apache Tomcat 漏洞在公开披露仅30小时后便遭疯狂利用\": \"https://www.anquanke.com/post/id/305128\",\n \"黑客利用 CVE-2024-27564 漏洞一周内攻击 ChatGPT 超万次\": \"https://www.anquanke.com/post/id/305125\",\n \"MassJacker Clipper 恶意软件攻击安装盗版软件的用户\": \"https://www.anquanke.com/post/id/305122\",\n \"浅析新型网络犯罪DeepSeek AI实战应用\": \"https://www.anquanke.com/post/id/305102\",\n \"攻击者利用 CSS 进行难以被察觉的网络钓鱼活动\": \"https://www.anquanke.com/post/id/305109\",\n \"针对 GitHub Action 的供应链攻击造成大规模机密信息泄露\": \"https://www.anquanke.com/post/id/305101\",\n \"GitHub 大规模供应链攻击：2.3 万个代码库沦陷，恶意代码广泛传播\": \"https://www.anquanke.com/post/id/305095\",\n \"国家网络安全通报中心再通报！Ollama私有化部署DeepSeek暗藏“裸奔”危机\": \"https://www.anquanke.com/post/id/305090\"\n },\n \"Doonsec's feed\": {\n \"你的AI工具安全吗？黑客如何利用AI热潮疯狂敛财？\": \"https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484676&idx=1&sn=93e275bd0061822018ad8042ec703bc3\",\n \"吃瓜，这是我在ZoomEye交流群里能看到的吗？（狗头）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484676&idx=2&sn=c3903baece07f14078f063d103897251\",\n \"有受虐倾向，你就来网安\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484696&idx=1&sn=17f8fd23b906d3d2980c9d127c27339c\",\n \"人民日报：以人工智能赋能高质量发展\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635071&idx=1&sn=cba588172e268b8451dde84e570ee925\",\n \"新法解读：关于涉密信息系统保密管理的规定\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635071&idx=2&sn=ecc4cd0d2cd4a7834ab848371af195f4\",\n \"信息工程大学2025年人才引进公告\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635071&idx=3&sn=f2a562fc22ffcc5724ca54e4ee386bc0\",\n \"重大威胁！发现一批境外恶意网址和恶意IP\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635071&idx=4&sn=62c169098587c59dba2277d2e0f99020\",\n \"泄露650万用户数据，这家IT巨头赔偿超1.2亿元\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635071&idx=5&sn=e73ee1ba496201b3f6845565861df2e3\",\n \"2025 CISCN&CCB Half-Final WP\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MTg1MDY4MQ==&mid=2247487308&idx=1&sn=58ded47969223626e9937b5ccf93d3a8\",\n \"HTB靶机 - Heal\": \"https://mp.weixin.qq.com/s?__biz=Mzk1Nzk3MjA5Ng==&mid=2247484223&idx=1&sn=4d462164f00e04da7b9cdba1de4bea93\",\n \"【突发】Wiz确认卖了！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTUzODkxMw==&mid=2247484311&idx=1&sn=c6c2d8380b8657d7b2bcc69b8f0df028\",\n \"大学生求找工作倒欠2w\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486190&idx=1&sn=2d2f4d957f08e0106d936cfcd9c91460\",\n \"听说你很懂旁路由？来做个题\": \"https://mp.weixin.qq.com/s?__biz=MzU4MTgxNDc2MQ==&mid=2247486118&idx=1&sn=33a74ae72d458587e012e3ad41fc5fd2\",\n \"重庆两家单位遭境外网络攻击被网信办约谈\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490648&idx=1&sn=cd90fdc93eb51afa205554a75145cd8e\",\n \"【漏洞预警】MongoDB BSON缓冲区溢出漏洞 (CVE-2025-0755)\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489799&idx=1&sn=1cb0fef30c653dde429246b6a21a0eb8\",\n \"【资料】美国军力（2024）\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651149469&idx=1&sn=23a694d915fddb28cc311a8b587cf561\",\n \"用友NC-Cloud系统getStaffInfo接口存在SQL注入漏洞 漏洞预警\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488206&idx=1&sn=2dec6859f4829ffb1d7ef81960168081\",\n \"AI工具｜ChatExcel AI 通过聊天即可处理Excel和数据分析（北大出品）\": \"https://mp.weixin.qq.com/s?__biz=MzkyMDY4MTc2Ng==&mid=2247484066&idx=1&sn=88c0518a36596d2b9ec9c3b868692438\",\n \"未来邮件新玩法：AI助理让收件箱不再爆炸！\": \"https://mp.weixin.qq.com/s?__biz=MzkxMjY3MTI4Mg==&mid=2247484747&idx=1&sn=07b4bc134958533af9be433f8a996dd6\",\n \"避雷避雷\": \"https://mp.weixin.qq.com/s?__biz=MzkyMDUzMzY1MA==&mid=2247499694&idx=1&sn=5734f2fb763ca3ddbb98f24061a8dc86\",\n \"Wazuh RCE漏洞CVE-2025-24016\": \"https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483872&idx=1&sn=31b810718d480ba119f67d3e1712ba07\",\n \"大语言模型红队测试：全面的分步指南\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483823&idx=1&sn=10384908ebba7c3ceef13498d7cba52d\",\n \"Burp Suite插件 利用AI进行XSS自动化绕过\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497129&idx=1&sn=21be101641a3216b11d1b66af9e5fc1a\",\n \"分享的图片、视频、链接\": \"https://mp.weixin.qq.com/s?__biz=MzA3MTM0NTQzNA==&mid=2455780194&idx=1&sn=da7b8c684ebdfc1d16acaa2fbce86115\",\n \"ctftools-all-in-oneV7.8研发进度2\": \"https://mp.weixin.qq.com/s?__biz=MzI1NzUxOTUzMA==&mid=2247485915&idx=1&sn=3bf06f24a29ac1e97bd8684fd3477660\",\n \"GitHub Actions 组件投毒风险频发，数千开源项目受到影响\": \"https://mp.weixin.qq.com/s?__biz=MzkxMDMxMjgxMg==&mid=2247485098&idx=1&sn=259fc758422773dad1a9af4e3efd4f0b\",\n \"2025最新Typora破解版下载（Windows+Mac）\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDAzMDM2OQ==&mid=2247483948&idx=1&sn=2252970163ee94331a7a88cb3f27e7ed\",\n \"SRC挖掘之302跳转登录劫持\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497289&idx=1&sn=6e285d3b0b960cc668a56a776a5dc7b7\",\n \"2025年将制定这些人工智能标准（测试评估、安全治理、研发运营等）\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655271093&idx=1&sn=9f5aeea1723bf72b40146af161d600c5\",\n \"window、ubantu、系统文件\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDAzMDM2OQ==&mid=2247483941&idx=1&sn=511165dac7933e720119e196aa81f5d1\",\n \"craxpro安全实验室招人啦\": \"https://mp.weixin.qq.com/s?__biz=MzkyMDY1MDI3OA==&mid=2247483859&idx=1&sn=6a5d081cbed08d9bf9715ed5d61f6266\",\n \"模型上新！体验文心大模型4.5卓越性能，文心快码邀您探索\": \"https://mp.weixin.qq.com/s?__biz=MjM5MTAwNzUzNQ==&mid=2650511266&idx=1&sn=ebf171893f1bb03abb52a2ee54306133\",\n \"qt介绍及资料分享\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDAzMDM2OQ==&mid=2247483937&idx=1&sn=b7149d0958be3565f87415a4252a7ab7\",\n \"G.O.S.S.I.P 安全事件 2025-03-18 乐鑫“后门”事件？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499921&idx=1&sn=1de3eb0a0a58c1a05fa8d6ce901163f2\",\n \"快手-安全工程师招聘\": \"https://mp.weixin.qq.com/s?__biz=MzU5NzQ3NzIwMA==&mid=2247486477&idx=1&sn=76adbc5523a446a36ebceac641365142\",\n \"分享图片\": \"https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247486689&idx=1&sn=10a10aecc372be43c586ea565a2d5202\",\n \"免费下载 怪物猎人：世界 v15.22.00 豪华中文联机版 全DLC 打包XG器\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDAzMDM2OQ==&mid=2247483925&idx=1&sn=d0352aa9eca03f4cd054a6066913e3b4\",\n \"让新手迅速掌握的Claude论文写作进阶全攻略，七天速上手。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=1&sn=c97f42dbe4382da1cb54913afb95122a\",\n \"深度揭秘：用Claude高效完成文献综述的终极进阶指南！\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=2&sn=7ab690fa3884a5cb7d4c15a7f9ef2c79\",\n \"新手必看：Claude写论文从入门到精通的完整指南，让写作效率飙升200%！\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=3&sn=4ced2b8ac2e1385c8553018a92aed4b9\",\n \"学术小白也能懂：Claude论文写作高效攻略，独家内部技巧首次揭秘！\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=4&sn=29ca66d6bd42c767c355a92eb1468232\",\n \"硬核！Claude写论文内部高阶攻略，新手照做就能出高分！\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=5&sn=f8f019fa9aeaab4b0e64437b3833997b\",\n \"掌握Claude论文审稿的内部秘籍：让你的论文达到顶刊水平！\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=6&sn=ae13d118e34e07ce4d222fa4dff126ab\",\n \"掌握Claude论文写作内部操作法：零基础博士生也在用的实时润色黑科技！\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=7&sn=dc9427f280f7fe16a0dd82ed1bd5f7d8\",\n \"最强Claude论文润色秘技，新手也能玩转高阶写作技巧。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247494783&idx=8&sn=61e962d398e2b7e7c0258fa7fbce023f\",\n \"针对跨境电商的钓鱼邮件分析\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTQzNTI4Ng==&mid=2247484125&idx=1&sn=18b885cbdc387928d9c85d87ecb2f221\",\n \"可信AI云服务——云上大模型用户数据保护专题研讨会通知\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjM1MDg2Mg==&mid=2247503160&idx=1&sn=e849f374a2d70437a897b3515146153f\",\n \"第十八届全国大学生信息安全竞赛暨第二届“长城杯”铁人三项赛半决赛 WP by 圣地亚哥皮蛋\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc1OTYyNA==&mid=2450788194&idx=1&sn=12404228e940c97760f5720edec8d6f5\",\n \"《论语别裁》第01章 学而（29） 《三国演义》的幕后功劳\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247501052&idx=1&sn=70ebc9eb3cf64593febb3c205f271922\",\n \"360受邀出席重庆“校企共用”行动启动会 打造全国产教融合“重庆样板”\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579992&idx=1&sn=d690807cd32b151a36d3f0a736d53267\",\n \"maven在idea上搭建\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzI0MjgzMQ==&mid=2247484643&idx=1&sn=84662aa5494f55ea84c2dd3913ce8bdb\",\n \"党建引领绿意浓 植此青绿树未来\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTk2NTIyNw==&mid=2247490706&idx=1&sn=d43dab182928482a62d4a1d08d5ac73d\",\n \"漏洞盒子商城上线｜挖洞战袍，限量预售！\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766761&idx=1&sn=cff7fce88b4f8e509c5f82223fd2e3f6\",\n \"送几个星球优惠券，手慢无！！！\": \"https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492403&idx=1&sn=c9a70fc80983b116598a623ee2fdfd6f\",\n \"【报名开启 | 安全沙龙·东莞站】AI驱动安全新场景：走进头部新零售企业，揭秘实战应用！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247486035&idx=1&sn=4940696aa2df1404293c5466a6f2c70a\",\n \"突发！2170亿！云安全独角兽或将被收购\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247486035&idx=2&sn=de2b169e6f3956a0474624494056df9d\",\n \"带你解锁编码新世界！--随波逐流CTF编码工具使用教程70 --块排序压缩BWT密码\": \"https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247489946&idx=1&sn=aa93ffb252a288771566baa9f9415dc3\",\n \"华为中国合作伙伴大会2025 | AI加持云网安一体，携手MSP共赢千行万业新未来分论坛议程抢先看\": \"https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505984&idx=1&sn=569c043b77e11af824b38afce50f7844\",\n \"车载系统固件逆向分析\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247497658&idx=1&sn=be9fb0eb35826b5b5f29497c9a40641f\",\n \"FEITIAN @RetailTech Japan 2025\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649876828&idx=1&sn=8690f908fc0f287a2ae8c9930ebc8773\",\n \"关于宏思电子：五问DeepSeek\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649876828&idx=2&sn=58903f1f50868ef6efe629f0d531e71c\",\n \"500种野菜野外识别速查图鉴\": \"https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247493518&idx=1&sn=f6593fd2fc57b2ad3f88a66e28edf48d\",\n \"【安全圈】Telegram CEO 暂时离开法国，刑事调查仍在进行中\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=1&sn=115d0e1f205867e30e417c8478cf3d73\",\n \"【安全圈】Apache Tomcat 漏洞在公开披露后仅 30 小时就被积极利用\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=2&sn=a11b6f875b76d50d5ffce23fbd07880f\",\n \"【安全圈】SANS 研究所警告新型云原生勒索软件攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=3&sn=090726d7d1004579b28e56c214ce8f0d\",\n \"【安全圈】PHP 遭多重安全漏洞 “围攻”，应用程序风险骤增\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=4&sn=2c40ebea61f1937556e695b2be5f2873\",\n \"云取证工作站应需而“升”，精准直击远程勘验难题！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651441584&idx=1&sn=459be8d8553bd36063ba24fd5ab917b7\",\n \"3月20日持续开讲！DeepSeek专题系列讲座火热进行中\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651441584&idx=2&sn=abcd13dbedc427169817b90656469f85\",\n \"蔚来、宁德时代重大战略合作\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247552664&idx=1&sn=e60b4a561fe87288371976dd09a30375\",\n \"AutoCable演讲嘉宾确认 | 国家电线电缆质量检验检测中心：车载以太网线缆的发展趋势及测试\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247552664&idx=2&sn=1246ff7b5d4ba532030125e23945e988\",\n \"展商风采 | 成功实现车辆型式批准(VTA)而所需的网络安全工程战略: 深度防御\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247552664&idx=3&sn=df71a2830a9cb2f3b790891bd02569cd\",\n \"极验动态 | 助力《解放日报》权威报道！破解AI水军黑产链\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDE5MTQxNg==&mid=2649723388&idx=1&sn=5446ab640543dc174d83ecf425baba33\",\n \"截至3月31日丨无忧考试，就用CISSP安心保障\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492510&idx=1&sn=a0b284d7f543d319c00f03d5d52b5fa4\",\n \"破解AI模型部署难题！渊亭科技获AI模型推理技术新专利\": \"https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660190924&idx=1&sn=c6105125d15a7d1fcadb61f593dcf6c2\",\n \"GB T 44774-2024 汽车信息安全应急响应管理规范-市场监督总局、国标委\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247622501&idx=1&sn=f6ef3f7f6f1441d1ce7bfe98be8ccd61\",\n \"GB_T 44778-2024 汽车诊断接口信息安全技术要求及试验方法\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247622501&idx=2&sn=3ddadae7908a4aa204dab4b80af5fb16\",\n \"GB/T44464—2024 汽车数据通用要求 2024-08-23实施\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247622501&idx=3&sn=fb5dc549cc38f36979899d20ecc986e6\",\n \"StilachiRAT 分析：从系统侦察到加密货币盗窃\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247496717&idx=1&sn=78d362f0bb30303fe7ee3743ee6d889e\",\n \"3·15晚会网安盘点：6000%利率的贷款、信息黑洞、AI骚扰电话、抽奖千层套路……\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247637810&idx=1&sn=74b4217913ab0ddc8f38bc59740d00a4\",\n \"CSO说安全 | 张天力：智能安全运营体系探索—分布式多智能体在漏洞修复中的应用与实践\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247637810&idx=2&sn=ec91d03b3b9d56b89bd17e92d40d0285\",\n \"2300万个机密信息在GitHub上泄露，但开发人员仍选择硬编码密码\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247637810&idx=3&sn=95570ba19c6d9334754f79dfea747b82\",\n \"如何打造出一个安全的架构 —— 一位来自阿里云资深架构师的实践经验分享\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTQ2MjI5OA==&mid=2664092233&idx=1&sn=6b9a3b40aaf88e18ead81e2817f66929\",\n \"网络拓扑图你真的会画吗？从类型到实战技巧全解析\": \"https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247516940&idx=1&sn=4399786f6f8416c0a5d6d0ca9d7acd07\",\n \"大模型如何挖漏洞 | 攻防视角下的AI安全\": \"https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494581&idx=1&sn=ad0145d6eed35548fb11eb39f7e438aa\",\n \"SRC漏洞挖掘之越权漏洞挖掘实战指南\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484232&idx=1&sn=00bc01f6b175e96b6f09c2fdbf3ef5d0\",\n \"智能扫描助力节碳超13万吨，合合信息旗下扫描全能王“指尖减碳”写就绿色诗篇\": \"https://mp.weixin.qq.com/s?__biz=MzAxMzg0NjY2NA==&mid=2247493210&idx=1&sn=fc6d648bfec05e26d670871518ac1808\",\n \"【直播预告】“大模型加速器2.0”版本即将开箱！破解AI“幻觉”难题\": \"https://mp.weixin.qq.com/s?__biz=MzAxMzg0NjY2NA==&mid=2247493210&idx=2&sn=c28791b874478aa37cfec89db5bca776\",\n \"一两拨千金，奇安信助力某大型油田新能源电力监控系统稳健落地\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625761&idx=1&sn=3428c2c77c136f1ade40f4b8d1a75d2d\",\n \"网络攻击新时代：OpenAI Agent首次自主完成钓鱼攻击\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625761&idx=2&sn=86916200ef88f5ef63c6e40734393c71\",\n \"为大模型构建运行安全和业务安全防线\": \"https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650210574&idx=1&sn=1ac454dc2b5e99b8c1ebaaddfd718712\"\n },\n \"Microsoft Security Blog\": {\n \"AI innovation requires AI security: Hear what’s new at Microsoft Secure\": \"https://techcommunity.microsoft.com/blog/microsoft-security-blog/ai-innovation-requires-ai-security-hear-what%E2%80%99s-new-at-microsoft-secure/4394130\"\n },\n \"Horizon3.ai\": {\n \"Fireside Chat: Horizon3.ai and Adaptic LLC\": \"https://www.horizon3.ai/intelligence/webinars/fireside-chat-horizon3-ai-and-adaptic-llc/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"How To Discover Hidden Endpoints️‍♂️\": \"https://infosecwriteups.com/how-to-discover-hidden-endpoints-%EF%B8%8F-%EF%B8%8F-cc4c82c8a886?source=rss----7b722bfd1b8d--bug_bounty\",\n \"CRLF Injection: Guide to Finding & Exploiting Vulnerabilities\": \"https://infosecwriteups.com/crlf-injection-guide-to-finding-exploiting-vulnerabilities-ec2d55805cc4?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"GuidePoint Security\": {\n \"Rethinking Risk: ICS & OT Security with Purdue 2.0 and GRC\": \"https://www.guidepointsecurity.com/blog/rethinking-risk-ics-ot-security-with-purdue-2-0-and-grc/\"\n },\n \"Malwarebytes\": {\n \"AMOS and Lumma stealers actively spread to Reddit users\": \"https://www.malwarebytes.com/blog/scams/2025/03/amos-and-lumma-stealers-actively-spread-to-reddit-users\",\n \"Amazon disables option to store Echo voice recordings on your device\": \"https://www.malwarebytes.com/blog/news/2025/03/amazon-disables-option-to-store-echo-voice-recordings-on-your-device\"\n },\n \"Reverse Engineering\": {\n \"The Last Of Us PSARC files\": \"https://www.reddit.com/r/ReverseEngineering/comments/1je1aq8/the_last_of_us_psarc_files/\",\n \"Something From Nothing - Breaking AES encrypted firmwares\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jdzqs1/something_from_nothing_breaking_aes_encrypted/\"\n },\n \"CCC Event Blog\": {\n \"Erstes InselChaos: Einladung & Call for Participation\": \"https://events.ccc.de/2025/03/18/inselchaos-einladung/\"\n },\n \"PortSwigger Research\": {\n \"SAML roulette: the hacker always wins\": \"https://portswigger.net/research/saml-roulette-the-hacker-always-wins\"\n },\n \"Exploit-DB.com RSS Feed\": {\n \"[webapps] Chamilo LMS 1.11.24 - Remote Code Execution (RCE)\": \"https://www.exploit-db.com/exploits/52083\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"新型“规则文件后门”攻击：黑客通过AI代码编辑器注入恶意代码\": \"https://www.freebuf.com/vuls/424987.html\",\n \"FreeBuf早报 | 知名头部安全厂商押注AI/数据赋能安全；应对未来量子安全威胁\": \"https://www.freebuf.com/news/424946.html\",\n \"ChatGPT SSRF漏洞迅速成为热门攻击向量（含PoC视频）\": \"https://www.freebuf.com/vuls/424995.html\",\n \"解读GBT 22240-2020 《信息安全技术 网络安全等级保护定级指南》\": \"https://www.freebuf.com/articles/compliance/354806.html\",\n \"隐秘的StilachiRAT窃取数据并可能实现横向移动\": \"https://www.freebuf.com/articles/system/424960.html\",\n \"CVE-2024-27564漏洞被利用攻击ChatGPT，一周内攻击次数超万次\": \"https://www.freebuf.com/vuls/424845.html\",\n \"Cloudflare推出后量子加密技术，抵御量子计算机攻击\": \"https://www.freebuf.com/articles/es/424967.html\",\n \"谷歌以320亿美元收购Wiz，加速AI时代云安全与多云战略\": \"https://www.freebuf.com/articles/network/424966.html\",\n \"微软警告：新型RAT木马StilachiRAT窃取凭证与加密钱包\": \"https://www.freebuf.com/articles/system/424919.html\",\n \"Cobalt Strike 4.11发布：增强规避能力，提供开箱即用的防御突破工具\": \"https://www.freebuf.com/sectool/424949.html\",\n \"本地部署deepseek风险？部署工具ollama任意文件读取漏洞超详细分析\": \"https://www.freebuf.com/vuls/424855.html\",\n \"已公开利用的 Linux 内核高危漏洞：CVE-2024-36904\": \"https://www.freebuf.com/vuls/424945.html\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"欧洲科技公司呼吁欧盟推动购买欧洲科技产品\": \"https://www.solidot.org/story?sid=80821\",\n \"人类的脑力已经越过峰值？\": \"https://www.solidot.org/story?sid=80820\",\n \"周五是否应该成为新的周六？\": \"https://www.solidot.org/story?sid=80819\",\n \"哈佛对年收入 20 万美元以内家庭免除学费\": \"https://www.solidot.org/story?sid=80818\",\n \"百度副总裁的未成年女儿被指参与开盒\": \"https://www.solidot.org/story?sid=80817\",\n \"Google 在 AI 训练数据集的版权问题上与 OpenAI 意见一致\": \"https://www.solidot.org/story?sid=80816\",\n \"特斯拉二手车价格下跌\": \"https://www.solidot.org/story?sid=80815\",\n \"华为计划在 Windows 授权过期后转向 Linux\": \"https://www.solidot.org/story?sid=80814\",\n \"网信办等发布《人工智能生成合成内容标识办法》\": \"https://www.solidot.org/story?sid=80813\",\n \"GIMP 3.0 释出\": \"https://www.solidot.org/story?sid=80812\"\n },\n \"HackerNews\": {\n \"思科修复 IOS XR 拒绝服务漏洞，可使路由器 BGP 进程崩溃\": \"https://hackernews.cc/archives/57894\",\n \"OKX 暂停 DEX 聚合器服务以阻止 Lazarus 黑客洗钱活动\": \"https://hackernews.cc/archives/57890\",\n \"微软发现新远程访问特洛伊木马，用于加密货币盗窃和侦察\": \"https://hackernews.cc/archives/57888\",\n \"GitHub Action 被攻破，23000 多个仓库的 CI/CD 秘密面临风险\": \"https://hackernews.cc/archives/57886\",\n \"网络犯罪分子利用 CSS 规避垃圾邮件过滤器并追踪电子邮件用户行为\": \"https://hackernews.cc/archives/57884\",\n \"未修复的 Edimax 摄像头漏洞自去年起遭利用进行 Mirai 僵尸网络攻击\": \"https://hackernews.cc/archives/57882\",\n \"Apache Tomcat 漏洞在公开披露仅 30 小时后遭积极利用\": \"https://hackernews.cc/archives/57880\"\n },\n \"锦行科技\": {\n \"锦行科技再携手，成功协办第二届“长城杯”铁人三项赛（广东赛区）！\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493959&idx=1&sn=65d063277fb398d543c65efd3dbced33&chksm=979a12e2a0ed9bf4b73409f768f57e324a8d6d2c1c1bf7153c604a24f009a68324fc0e706802&scene=58&subscene=0#rd\"\n },\n \"安全分析与研究\": {\n \"银狐票根类最新样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491157&idx=1&sn=47a6019cdb8995c2d4618ee435d25a2b&chksm=902fb17da758386b09b8cead2cd838b6f825e0caae7529b1aecac208355575a87f4e65bb6694&scene=58&subscene=0#rd\"\n },\n \"知道创宇404实验室\": {\n \"知道创宇404实验室实习岗位招聘中\": \"https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990830&idx=1&sn=84e6b285079fcf017ef2ec11f9df9084&chksm=8079aadcb70e23ca2abf1fe5effdcd2c3f62f2c66450a808820d6022da5f5d8b0f39abc2a852&scene=58&subscene=0#rd\"\n },\n \"代码卫士\": {\n \"超100家汽车经销商网站遭供应链攻击，传播ClickFix恶意代码\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522522&idx=1&sn=dc611fe0b97413fee866ae5bee4f0944&chksm=ea94a9b0dde320a6ddbbb58fdb071d8a595e847080fe8d55c8d609c43939883ce8e3410ab95b&scene=58&subscene=0#rd\",\n \"热门 GitHub Action 遭供应链攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522522&idx=2&sn=537ee03d1ec2c6a00123cba4ab057fb0&chksm=ea94a9b0dde320a6118b2e810d28bca4965b66597ce0fcf6ddf87d872a8268d4c4918e6f88bf&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"一个msi样本的分析\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590893&idx=1&sn=29094c4974245bf648dcc15839484de9&chksm=b18c2e2786fba73185b77cc914791d4fd786feb070fd803342afb9ec5525b9df8eb0556ecfde&scene=58&subscene=0#rd\",\n \"Apache Tomcat漏洞在被公开披露30小时后就被黑客用来展开攻击\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590893&idx=2&sn=af328a87e3b03b7ab64985167f61aadc&chksm=b18c2e2786fba731c9fd24a85ac66edc22f20580eb8cf8f4f8e6726836d9de793298bba21684&scene=58&subscene=0#rd\",\n \"限时4折！（含章节试看）Frida 编译调试、框架学习及定制开发\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590893&idx=3&sn=3aebbb589c687c714e9ea1165694553c&chksm=b18c2e2786fba7314b3f627f4b3d90673e04a3885826101019dbb1d90112b61533dd67b3abed&scene=58&subscene=0#rd\"\n },\n \"网络安全研究宅基地\": {\n \"以“毒云藤”为例：“台独”势力网络间谍活动解析\": \"https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247497232&idx=1&sn=195d95daebc80da85c655a658dbe66d2&chksm=f9ed9aafce9a13b9467e4a767be6bcdf3f5812a370dc2ba4c5267819b56aa99297d171a3b815&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"《全球数据泄露态势月度报告》（2025年2月）| 附下载地址\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538155&idx=1&sn=6e0c83500b32eac3560d12f4479dbd6f&chksm=c1442756f633ae40b180adbdb55a7c107384293966f00a85ccaee4df180be74fe9280f6ce6c5&scene=58&subscene=0#rd\",\n \"一图读懂强制性国家标准GB 45438-2025《网络安全技术 人工智能生成合成内容标识方法》\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538155&idx=2&sn=2591bfaa2c83e13b1581a3b5877f927f&chksm=c1442756f633ae40797c7b70bf324a32f922993b5a6720387fd612bd2f75a1afdd300ca97f05&scene=58&subscene=0#rd\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 安全事件 2025-03-18 乐鑫“后门”事件？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499921&idx=1&sn=1de3eb0a0a58c1a05fa8d6ce901163f2&chksm=c063ee48f714675e0fb7d79f224668e7b05c140090651c42c381aee2518a866d02301e674933&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"泄露650万用户数据，这家IT巨头赔偿超1.2亿元\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514007&idx=1&sn=0b2ac85e6205db15581ec2925d58f612&chksm=ebfaf0b7dc8d79a19b09f296028d4b7c3407e4edf38ca425706f005aa850327e21cc3df2caef&scene=58&subscene=0#rd\",\n \"国家网络安全通报中心发布重点防范境外恶意网址和恶意IP (五)\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514007&idx=2&sn=6483ae834cbd18974d1fc17ba207fff6&chksm=ebfaf0b7dc8d79a19c6ce14bce94488efd68c03159ea92f860da9e2011369b550ff54748b248&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】Telegram CEO 暂时离开法国，刑事调查仍在进行中\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=1&sn=115d0e1f205867e30e417c8478cf3d73&chksm=f36e7686c419ff9022792ea30bf3d1dccf7f46c3406f5fe6b5bb23f24c9ade86a0f7c2410367&scene=58&subscene=0#rd\",\n \"【安全圈】Apache Tomcat 漏洞在公开披露后仅 30 小时就被积极利用\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=2&sn=a11b6f875b76d50d5ffce23fbd07880f&chksm=f36e7686c419ff906a9bb292a69dbf5f6c4b7dcf6bda81db3ae13ddc0d5f53cfc22d1f541977&scene=58&subscene=0#rd\",\n \"【安全圈】SANS 研究所警告新型云原生勒索软件攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=3&sn=090726d7d1004579b28e56c214ce8f0d&chksm=f36e7686c419ff903a3cdca30e9a9124e140e7caeecf34a6bd1e91cd37d0ec484a7705a33fec&scene=58&subscene=0#rd\",\n \"【安全圈】PHP 遭多重安全漏洞 “围攻”，应用程序风险骤增\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=4&sn=2c40ebea61f1937556e695b2be5f2873&chksm=f36e7686c419ff90e224cfc0527bf8094f545ccfac663b9591a26199291ac165402523d02161&scene=58&subscene=0#rd\"\n },\n \"中国信息安全\": {\n \"“职”等你来！《中国信息安全》杂志社招聘啦！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238601&idx=1&sn=177ff992650cf8371d0b5d72f5e3739d&chksm=8b580cf0bc2f85e6469b64a220fee9f63671b16dfe078c67b6899859ce77a4dbe854cc73fea3&scene=58&subscene=0#rd\",\n \"专家解读 | 构建AIGC安全治理的“中国范式”\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238601&idx=2&sn=8d7c28f33a03c65a04c858ce6cf3f3d5&chksm=8b580cf0bc2f85e684cf8613f43fb8aa40a6897ca674ce46571ff4e9a74505f61638f1833426&scene=58&subscene=0#rd\",\n \"关注 | 工信部部署做好2025年信息通信业安全生产和网络运行安全工作\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238601&idx=3&sn=ab3a22d6d13099310e4a42317dc58e42&chksm=8b580cf0bc2f85e6dcd5fb51e0e050f76831560235dff6a43558c9d8ad1ba82a8b126f18e2c3&scene=58&subscene=0#rd\",\n \"关注 | 新一批重点防范境外恶意网址和恶意IP公布！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238601&idx=4&sn=171413a1509bf7cf77f8192cc549f331&chksm=8b580cf0bc2f85e6c4da6675cbf4040e15422117bec770e97b90bf387ce9b18d0425b2a4a761&scene=58&subscene=0#rd\",\n \"发布 | 2项网络安全国家标准获批发布\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238601&idx=5&sn=d4f056e781e7e27e157a7f4e69bd5fb4&chksm=8b580cf0bc2f85e6ec4490d628246234ad2317df2ef413c355d7383078f456c1a7d4151f445a&scene=58&subscene=0#rd\",\n \"国际 | 欧美围绕《数字市场法案》展开激烈交锋 双方或陷入“攻讦—辩护”拉锯战\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238601&idx=6&sn=26e231ba5df2988f78269ee8bb7a57f9&chksm=8b580cf0bc2f85e683e2cb712461bd29aaf98e6f82fc46a04950a75d28abdfa80aa39dec2bf7&scene=58&subscene=0#rd\",\n \"一图读懂 | 《关键信息基础设施安全保护条例》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238601&idx=7&sn=fc54f38de5082217f6c927b73cc5ed50&chksm=8b580cf0bc2f85e670c34e39621543f98846b2353ac1b3b28ead9c9981375f531440710bd864&scene=58&subscene=0#rd\"\n },\n \"安全牛\": {\n \"打破对CISO角色的七大误解\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135526&idx=1&sn=da0cb6963a73def4175964d6780646d7&chksm=bd15aef58a6227e314bbf864b8ad7299ef9859a7e7fa09dbf7da0702495ceab00f9336d0904f&scene=58&subscene=0#rd\",\n \"国家网络安全通报中心提醒：重点防范10个境外恶意网址；热门GitHub Action遭遇供应链攻击，2.3万代码库受影响 |牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135526&idx=2&sn=a32d66a38e62bed59affe27ff6229e26&chksm=bd15aef58a6227e349303d8b750487a745545ec1f2048c676fe15f2134444b54780d0f451f3e&scene=58&subscene=0#rd\"\n },\n \"补天平台\": {\n \"三重福利同时开启 | 万元赏金+电脑等豪华礼品速来解锁！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247507563&idx=1&sn=9bdeb81e95feeee4ba677a90b44ec8cc&chksm=eaf99627dd8e1f310dedc79ec1a8aeda371bd9de581e7fcda09ed734987f14ac7b99fd3149c0&scene=58&subscene=0#rd\"\n },\n \"网安杂谈\": {\n \"友情转发：智驾汽车电子数据取证与分析培训班正在报名 | 中汽研主办弘德网协办\": \"https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650889538&idx=1&sn=c1d017dd983ba624c6976ec8929e5d0b&chksm=812ea167b65928714461f44f851c01999e226d2ac95ed92dc6f67716d9ca77f4de96ae8012cf&scene=58&subscene=0#rd\"\n },\n \"青藤云安全\": {\n \"重磅！微隔离系统评价标准发布，助力企业精准选型\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850069&idx=1&sn=1c859157b10d3456d4b7520437f391f0&chksm=80dba0b0b7ac29a6f62fb1c2d371e8ee5653bc4f5f1978d8dc2bc3da56438250bb27fbafb60c&scene=58&subscene=0#rd\"\n },\n \"百度安全应急响应中心\": {\n \"模型上新！体验文心大模型4.5卓越性能，文心快码邀您探索\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODc0MTIwMw==&mid=2652542544&idx=1&sn=47e0e802aff3ffcf77a88d517ce0ad88&chksm=8bcbb26cbcbc3b7a12c2b48594027112a4b52f252a8a407e197dc9db65b4d9cec764be83d0cf&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"充电 5 分钟、续航 400 公里，比亚迪甩出终结燃油车时代的「王炸」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075920&idx=1&sn=3ad6f6c765bdbc1f726207ddfbc1ca44&chksm=7e57c46649204d70d7d5009414b65b2e9992a4e36174441eb682cee92d5edb38f56eafafe0ff&scene=58&subscene=0#rd\",\n \"DeepSeek 们为什么选择飞书？\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075920&idx=2&sn=18fdf8989d8caf51278a92bd95f505f5&chksm=7e57c46649204d70f142212cd41d5e9b02ebf1f064b408b7f5ea02a42d7494bc86f7d2e7ea6a&scene=58&subscene=0#rd\",\n \"独家丨字节大模型全员会，朱文佳和吴永辉一起聊了方向、组织和开源\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075906&idx=1&sn=7870f9bd67a6c97b92c6b1d7ee81e078&chksm=7e57c47449204d622145a4bc1d3ea9bdbe649be20fceca3ad87d523797ad3aabd43821c3825f&scene=58&subscene=0#rd\",\n \"小米 SU7 Ultra 抵达纽北赛道；比亚迪发布兆瓦闪充：5 分钟充 400 公里；AMD 「苏妈」访北京至少一周｜极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075884&idx=1&sn=24a87d652292c39070b7f1fd4f587aed&chksm=7e57c41a49204d0c95c750307b82322481a0dcd3f30c3a05f25bb22e0d1ffbd3df4a3e887bba&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"俄外交官被欧驱逐，大使馆屋顶天线藏何密？间谍活动惊爆内幕！\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560340&idx=1&sn=a87feea6a63d09efce47b347bb5c2372&chksm=8711791fb066f009059991f6c890cf1b4c03231b4b9c16ad989fde68542079bd050cd137918e&scene=58&subscene=0#rd\",\n \"美国60家企业预赴越：从经济布局到地缘战略的深度“围堵”\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560340&idx=2&sn=218c32c9dd7e722dd1155c21054779ed&chksm=8711791fb066f009cbe94c5d2b82822a8c83536d0454530b37bde57aba2e2fb855a626001242&scene=58&subscene=0#rd\"\n },\n \"复旦白泽战队\": {\n \"初春踏浪圣迭戈：NDSS'25 之行见闻录\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247493473&idx=1&sn=7de3ad584c03943ec29a64edcc14ec73&chksm=fde8631fca9fea092afa5477941d0af8e520315fea1335b54db8bfda425b49907e3bf2171080&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \"新书特惠｜《.NET安全攻防指南》重磅来袭！\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499182&idx=1&sn=4f8acadbd6fb16ebe53d6a4745eb32a0&chksm=fa595343cd2eda55d5e00c8a0d9567d67886afecb934969d10870e1d7b11256285156354fd0e&scene=58&subscene=0#rd\",\n \".NET 内网攻防实战电子报刊\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499182&idx=2&sn=79eacd504645a715e95390d79ce76fb5&chksm=fa595343cd2eda554887e2316599f0e34c1f28366a2561f1926c95a3d473672ebc67ecd2b4cc&scene=58&subscene=0#rd\",\n \"Sharp4TaskRun 实现任务计划隐藏与权限维持\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499182&idx=3&sn=0862321105957906466fad05d3677d41&chksm=fa595343cd2eda550ad94d280fe1130c3c1add35d617773f3407f37db0cb52c7d582841e4c56&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"YouTube 惊现 DCRat 恶意软件，登录凭据或面临盗取危机\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581554&idx=1&sn=3b33f36408f116d4e61f4e44318a0f3d&chksm=e9146f48de63e65edff41d9c0a8cc4914ae4a4a57b856cef78775dd706577fad6ac2c8056188&scene=58&subscene=0#rd\"\n },\n \"百度安全实验室\": {\n \"模型上新！体验文心大模型4.5卓越性能，文心快码邀您探索\": \"https://mp.weixin.qq.com/s?__biz=MzA3NTQ3ODI0NA==&mid=2247487731&idx=1&sn=da86d36d635bb71d86dd2675d7716d5d&chksm=9f6eb578a8193c6ec5cfed79f5cb9950920fbc0437dddc4f6c9a666e05e82cae11cfffbf105d&scene=58&subscene=0#rd\"\n },\n \"吴鲁加\": {\n \"很会提供情绪价值的习惯养成 App 是什么样的\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247485244&idx=1&sn=b19642c548c8b21bf9d859cceada2aeb&chksm=c01a8a0df76d031b0c7f0e23a224c1e6b46c216ef72b57726101ca4bdd4e1d53603fb4a4a5d3&scene=58&subscene=0#rd\"\n },\n \"字节跳动技术团队\": {\n \"DeepSeek + Function Call：基于 Eino 的“计划——执行”多智能体范式实战\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513832&idx=1&sn=f957cb8368f29a10e4104cd0c0969479&chksm=e9d37d0adea4f41c383721114d9ee0725be648e98a99e0cbff3700d2a748435d631244131234&scene=58&subscene=0#rd\"\n },\n \"360数字安全\": {\n \"360受邀出席重庆“校企共用”行动启动会 打造全国产教融合“重庆样板”\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579992&idx=1&sn=d690807cd32b151a36d3f0a736d53267&chksm=9f8d2950a8faa046e09e44c4a94aa1bd40bf07ad1dce75afdcfb17705c9c646757372cd2676e&scene=58&subscene=0#rd\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #780: Self validating linux executables\": \"https://www.hecfblog.com/2025/03/daily-blog-780-self-validating-linux.html\"\n },\n \"ICT Security Magazine\": {\n \"Cybersecurity globale: l’Italia tra le eccellenze mondiali secondo il Global Cybersecurity Index 2024\": \"https://www.ictsecuritymagazine.com/articoli/cybersecurity-globale-italia/\",\n \"8 Sfide Critiche per la Cybersecurity nelle Reti 5G\": \"https://www.ictsecuritymagazine.com/articoli/cybersecurity-reti-5g/\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Sperm donation giant California Cryobank warns of a data breach\": \"https://www.bleepingcomputer.com/news/security/sperm-donation-giant-california-cryobank-warns-of-a-data-breach/\",\n \"Cyberwarfare tra Cina e Taiwan: il Ministero della Sicurezza Cinese smaschera l'”esercito informatico” di Taipei\": \"https://www.insicurezzadigitale.com/cyberwarfare-tra-cina-e-taiwan-il-ministero-della-sicurezza-cinese-smaschera-lesercito-informatico-di-taipei/\",\n \"Poisoned Windows shortcuts found to be a favorite of Chinese, Russian, N. Korean state hackers\": \"https://therecord.media/windows-lnk-files-nation-state-hacking-campaigns\",\n \"GitHub Action hack likely led to another in cascading supply chain attack\": \"https://www.bleepingcomputer.com/news/security/github-action-hack-likely-led-to-another-in-cascading-supply-chain-attack/\",\n \"Western Alliance Bank notifies 21,899 customers of data breach\": \"https://www.bleepingcomputer.com/news/security/western-alliance-bank-notifies-21-899-customers-of-data-breach/\",\n \"What Is Cyber Deterrence? Your Questions Answered\": \"https://bfore.ai/what-is-cyber-deterrence-your-questions-answered/\",\n \"Municipalities in four states are struggling with cyberattacks limiting services\": \"https://therecord.media/municipalities-struggling-cyberattacks-services\",\n \"Western Alliance Bank says nearly 22,000 impacted by file transfer software breach\": \"https://therecord.media/western-alliance-bank-data-breach\",\n \"Malicious Android 'Vapor' apps on Google Play installed 60 million times\": \"https://www.bleepingcomputer.com/news/security/malicious-android-vapor-apps-on-google-play-installed-60-million-times/\",\n \"Microsoft identifies new RAT targeting cryptocurrency wallets and more\": \"https://therecord.media/stilachirat-new-remote-access-trojan-crypto-wallets\",\n \"New Windows zero-day exploited by 11 state hacking groups since 2017\": \"https://www.bleepingcomputer.com/news/security/new-windows-zero-day-exploited-by-11-state-hacking-groups-since-2017/\",\n \"Google to purchase Wiz for $32 billion in cloud security play\": \"https://www.bleepingcomputer.com/news/security/google-to-purchase-wiz-for-32-billion-in-cloud-security-play/\",\n \"Critical AMI MegaRAC bug can let attackers hijack, brick servers\": \"https://www.bleepingcomputer.com/news/security/critical-ami-megarac-bug-can-let-attackers-hijack-brick-servers/\",\n \"Tomcat sotto attacco: grave bug sfruttato dopo 30 ore dalla pubblicazione\": \"https://www.securityinfo.it/2025/03/18/tomcat-sotto-attacco-grave-bug-sfruttato-dopo-30-ore-dalla-pubblicazione/\",\n \"China identifies Taiwanese hackers allegedly behind cyberattacks and espionage\": \"https://therecord.media/china-taiwan-hacks-identify-cyber\",\n \"Software compliance: semplificare è la parola d’ordine\": \"https://www.cybersecurity360.it/soluzioni-aziendali/software-compliance-semplificare-e-la-parola-dordine/\",\n \"Campagna di phishing mirata a UniPd: circa 200 credenziali compromesse\": \"https://cert-agid.gov.it/news/campagna-di-phishing-mirata-a-unipd-circa-200-credenziali-compromesse/\",\n \"Blockchain gaming platform WEMIX hacked to steal $6.1 million\": \"https://www.bleepingcomputer.com/news/security/blockchain-gaming-platform-wemix-hacked-to-steal-61-million/\",\n \"Google buys cloud security provider Wiz for $32 billion\": \"https://therecord.media/google-buys-cloud-security-provider-wiz\",\n \"SQLi, XSS, and SSRF: Breaking Down Zimbra’s Latest Security Threats\": \"https://cyble.com/blog/breaking-down-zimbras-latest-security-threats/\",\n \"IT Vulnerability Report: Cyble Urges Fixes for Apple, PHP Flaws\": \"https://cyble.com/blog/it-vulnerability-report-for-apple-php-flaws/\",\n \"Flashpoint 2025 Global Threat Intelligence Report: Stay Ahead of Emerging Threats\": \"https://flashpoint.io/blog/flashpoint-global-threat-intelligence-report-gtir-2025/\",\n \"Backup automatico: una soluzione essenziale per le aziende\": \"https://www.cybersecurity360.it/soluzioni-aziendali/backup-automatico-soluzioni-aziende/\",\n \"Software cybersecurity: strategie e soluzioni a confronto\": \"https://www.cybersecurity360.it/soluzioni-aziendali/software-cybersecurity-strategie-soluzioni/\",\n \"La sfida della mobilità: sfruttare i dati sulle flotte garantendone la massima protezione\": \"https://www.cybersecurity360.it/soluzioni-aziendali/la-sfida-della-mobilita-sfruttare-i-dati-sulle-flotte-garantendone-la-massima-protezione/\",\n \"Expose Android Malware in Seconds: ANY.RUN Sandbox Now Supports Real-Time APK Analysis\": \"https://any.run/cybersecurity-blog/android-malware-analysis/\",\n \"La trappola invisibile: CSS manipolati per aggirare filtri antispam e tracciare utenti\": \"https://www.cybersecurity360.it/news/la-trappola-invisibile-css-manipolati-per-aggirare-filtri-antispam-e-tracciare-utenti/\",\n \"Integrare GDPR e NIS 2: perché la cyber security è la naturale evoluzione della privacy\": \"https://www.cybersecurity360.it/legal/privacy-dati-personali/integrare-gdpr-e-nis-2-perche-la-cyber-security-e-la-naturale-evoluzione-della-privacy/\",\n \"!exploitable Episode Three - Devfile Adventures\": \"https://blog.doyensec.com/2025/03/18/exploitable-gitlab.html\",\n \"ClearFake’s New Widespread Variant: Increased Web3 Exploitation for Malware Delivery\": \"https://blog.sekoia.io/clearfakes-new-widespread-variant-increased-web3-exploitation-for-malware-delivery/\",\n \"Bypassing Web Filters Part 3: Domain Fronting\": \"https://blog.compass-security.com/2025/03/bypassing-web-filters-part-3-domain-fronting/\",\n \"A Taxing Problem: Seasonal IRS and Tax Scams Report\": \"https://bfore.ai/a-taxing-problem-seasonal-irs-and-tax-scams-report/\"\n },\n \"TrustedSec\": {\n \"Are Attackers \\\"Passing Though\\\" Your Azure App Proxy?\": \"https://trustedsec.com/blog/are-attackers-passing-through-your-azure-app-proxy\"\n },\n \"Securityinfo.it\": {\n \"Tomcat sotto attacco: grave bug sfruttato dopo 30 ore dalla pubblicazione\": \"https://www.securityinfo.it/2025/03/18/tomcat-sotto-attacco-grave-bug-sfruttato-dopo-30-ore-dalla-pubblicazione/?utm_source=rss&utm_medium=rss&utm_campaign=tomcat-sotto-attacco-grave-bug-sfruttato-dopo-30-ore-dalla-pubblicazione\"\n },\n \"迪哥讲事\": {\n \"SRC挖掘之302跳转登录劫持\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497289&idx=1&sn=6e285d3b0b960cc668a56a776a5dc7b7&chksm=e8a5fc2adfd2753ca105a16f1d0977f16094fa379f0671022713257990432c213adeebf9783b&scene=58&subscene=0#rd\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"Python Bot Delivered Through DLL Side-Loading, (Tue, Mar 18th)\": \"https://isc.sans.edu/diary/rss/31778\",\n \"ISC Stormcast For Tuesday, March 18th, 2025 https://isc.sans.edu/podcastdetail/9368, (Tue, Mar 18th)\": \"https://isc.sans.edu/diary/rss/31776\"\n },\n \"Schneier on Security\": {\n \"Is Security Human Factors Research Skewed Towards Western Ideas and Habits?\": \"https://www.schneier.com/blog/archives/2025/03/is-security-human-factors-research-skewed-towards-western-ideas-and-habits.html\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"Anonymous Email\": \"https://www.reddit.com/r/blackhat/comments/1jegror/anonymous_email/\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"SAML roulette: the hacker always wins\": \"https://www.reddit.com/r/netsec/comments/1je8f1h/saml_roulette_the_hacker_always_wins/\",\n \"Learn how an out-of-bounds write vulnerability in the Linux kernel can be exploited to achieve an LPE (CVE-2025-0927)\": \"https://www.reddit.com/r/netsec/comments/1je3w9o/learn_how_an_outofbounds_write_vulnerability_in/\",\n \"Local Privilege Escalation via Unquoted Search Path in Plantronics Hub\": \"https://www.reddit.com/r/netsec/comments/1je6j64/local_privilege_escalation_via_unquoted_search/\",\n \"Compromised tj-actions/changed-files GitHub Action: A look at publicly leaked secrets\": \"https://www.reddit.com/r/netsec/comments/1jec56b/compromised_tjactionschangedfiles_github_action_a/\",\n \"Arbitrary File Write CVE-2024-0402 in GitLab (Exploit)\": \"https://www.reddit.com/r/netsec/comments/1je4j6r/arbitrary_file_write_cve20240402_in_gitlab_exploit/\",\n \"CEF Debugger Enabled in Google Web Designer | Google Bug Hunters\": \"https://www.reddit.com/r/netsec/comments/1je4tfc/cef_debugger_enabled_in_google_web_designer/\"\n },\n \"Security Affairs\": {\n \"Nation-state actors and cybercrime gangs abuse malicious .lnk files for espionage and data theft\": \"https://securityaffairs.com/175569/apt/nation-state-actors-and-cybercrime-gangs-abuse-malicious-lnk-files-for-espionage-and-data-theft.html\",\n \"ChatGPT SSRF bug quickly becomes a favorite attack vector\": \"https://securityaffairs.com/175560/hacking/chatgpt-ssrf-bug-quickly-becomes-a-favorite-attack-vector.html\",\n \"GitHub Action tj-actions/changed-files was compromised in supply chain attack\": \"https://securityaffairs.com/175547/hacking/github-action-tj-actions-changed-files-was-compromised.html\",\n \"New StilachiRAT uses sophisticated techniques to avoid detection\": \"https://securityaffairs.com/175530/malware/stilachirat-uses-sophisticated-techniques-to-avoid-detection.html\"\n },\n \"The Hacker News\": {\n \"New ‘Rules File Backdoor’ Attack Lets Hackers Inject Malicious Code via AI Code Editors\": \"https://thehackernews.com/2025/03/new-rules-file-backdoor-attack-lets.html\",\n \"Unpatched Windows Zero-Day Flaw Exploited by 11 State-Sponsored Threat Groups Since 2017\": \"https://thehackernews.com/2025/03/unpatched-windows-zero-day-flaw.html\",\n \"Google Acquires Wiz for $32 Billion in Its Biggest Deal Ever to Boost Cloud Security\": \"https://thehackernews.com/2025/03/google-acquires-wiz-for-32-billion-in.html\",\n \"New Critical AMI BMC Vulnerability Enables Remote Server Takeover and Bricking\": \"https://thehackernews.com/2025/03/new-critical-ami-bmc-vulnerability.html\",\n \"How to Improve Okta Security in Four Steps\": \"https://thehackernews.com/2025/03/how-to-improve-okta-security-in-four.html\",\n \"New Ad Fraud Campaign Exploits 331 Apps with 60M+ Downloads for Phishing and Intrusive Ads\": \"https://thehackernews.com/2025/03/new-ad-fraud-campaign-exploits-331-apps.html\",\n \"China-Linked MirrorFace Deploys ANEL and AsyncRAT in New Cyber Espionage Operation\": \"https://thehackernews.com/2025/03/china-linked-mirrorface-deploys-anel.html\",\n \"BADBOX 2.0 Botnet Infects 1 Million Android Devices for Ad Fraud and Proxy Abuse\": \"https://thehackernews.com/2025/03/badbox-20-botnet-infects-1-million.html\",\n \"Microsoft Warns of StilachiRAT: A Stealthy RAT Targeting Credentials and Crypto Wallets\": \"https://thehackernews.com/2025/03/microsoft-warns-of-stilachirat-stealthy.html\"\n },\n \"Information Security\": {\n \"Seeking Cybersecurity Decision-Makers for a 1-Minute, Anonymous Survey 💻 🌐 ✍\": \"https://www.reddit.com/r/Information_Security/comments/1je5pl3/seeking_cybersecurity_decisionmakers_for_a/\"\n },\n \"Computer Forensics\": {\n \"Packer Overview\": \"https://www.reddit.com/r/computerforensics/comments/1jef9bd/packer_overview/\",\n \"Starting my forensics journey\": \"https://www.reddit.com/r/computerforensics/comments/1jecr2v/starting_my_forensics_journey/\",\n \"Email Forensics - Tool for corrupt PSTs\": \"https://www.reddit.com/r/computerforensics/comments/1je17ze/email_forensics_tool_for_corrupt_psts/\",\n \"Will I make it? (brutal honest replies)\": \"https://www.reddit.com/r/computerforensics/comments/1jdzwvk/will_i_make_it_brutal_honest_replies/\"\n },\n \"Your Open Hacker Community\": {\n \"About Networking\": \"https://www.reddit.com/r/HowToHack/comments/1jeaakh/about_networking/\",\n \"Fisher-Price Laugh & Learn Mix & Learn DJ Table\": \"https://www.reddit.com/r/HowToHack/comments/1jehs6w/fisherprice_laugh_learn_mix_learn_dj_table/\",\n \"Tango\": \"https://www.reddit.com/r/HowToHack/comments/1jebzmx/tango/\",\n \"Someone hacked me\": \"https://www.reddit.com/r/HowToHack/comments/1jeda73/someone_hacked_me/\",\n \"HACK ACCOUNT TIKTOK\": \"https://www.reddit.com/r/HowToHack/comments/1jeekff/hack_account_tiktok/\",\n \"How to get crunch\": \"https://www.reddit.com/r/HowToHack/comments/1je03s2/how_to_get_crunch/\",\n \"How to login using facebook with python something similar to like \\\"instagrapi\\\" and \\\"instaloader\\\" for instagram without use of selenium.\": \"https://www.reddit.com/r/HowToHack/comments/1je2aua/how_to_login_using_facebook_with_python_something/\",\n \"can you hack a snapchat account?\": \"https://www.reddit.com/r/HowToHack/comments/1je0bgr/can_you_hack_a_snapchat_account/\",\n \"How do I learn\": \"https://www.reddit.com/r/HowToHack/comments/1jdzoxo/how_do_i_learn/\"\n },\n \"Social Engineering\": {\n \"Self-disclosure factors: what makes people share their thoughts and feelings?\": \"https://www.reddit.com/r/SocialEngineering/comments/1je33pf/selfdisclosure_factors_what_makes_people_share/\",\n \"How to manipulate people by impersonating a bank employee: analyzing vulnerabilities in a real-world\": \"https://www.reddit.com/r/SocialEngineering/comments/1je0nya/how_to_manipulate_people_by_impersonating_a_bank/\"\n },\n \"Graham Cluley\": {\n \"The AI Fix #42: AIs with anxiety, and why AIs don’t know what happened\": \"https://grahamcluley.com/the-ai-fix-42/\",\n \"Mandatory Coinbase wallet migration? It’s a phishing scam!\": \"https://www.bitdefender.com/en-us/blog/hotforsecurity/mandatory-coinbase-wallet-migration-its-a-phishing-scam\"\n },\n \"网安寻路人\": {\n \"欧盟《健康数据空间条例》正式版本（全文翻译）\": \"https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247506931&idx=1&sn=f0a999b1355514cd0d2089f258c28a0a&chksm=97e96619a09eef0f4cf369360a5c504d504c18d7c47e1e9ee5b439fc57cc90fe5b63eea08437&scene=58&subscene=0#rd\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Angry Iguana, Squid Bot, Bruted, 0Auth, Dragon Medical, Clippy 2.0, CISA, Josh Marpet - SWN #460\": \"http://sites.libsyn.com/18678/angry-iguana-squid-bot-bruted-0auth-dragon-medical-clippy-20-cisa-josh-marpet-swn-460\",\n \"Redlining the Smart Contract Top 10 - Shashank . - ASW #322\": \"http://sites.libsyn.com/18678/redlining-the-smart-contract-top-10-shashank-asw-322\"\n }\n}"}}, "archive/tmp/2025-09-27.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747325.991182, "n": 37993, "h": "303599668152478a", "c": "{\n \"奇安信攻防社区\": {\n \"红队攻防 | 外网打点不靠0day组合拳拿下目标系统\": \"https://forum.butian.net/share/4573\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2025-09-26 Review\": \"http://www.sec-wiki.com/?2025-09-26\"\n },\n \"paper - Last paper\": {\n \"哥德尔测试：大型语言模型能否解决简单猜想？\": \"https://paper.seebug.org/3392/\"\n },\n \"Trustwave Blog\": {\n \"9 Little-Known Facts About Managed Detection and Response (MDR)\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/9-little-known-facts-about-managed-detection-and-response/\"\n },\n \"博客\": {\n \"logitech m185 wireless mouse scroll wheel NOT working properly\": \"https://dyrnq.com/logitech-m185-wireless-mouse-scroll-wheel-not-working-properly/\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"第六届国际反病毒大会在津召开，梆梆安全参编《移动互联网应用安全统计分析报告（2025）》正式发布\": \"https://www.4hou.com/posts/2X0J\",\n \"CACTER 揭秘：10% 员工引发 73% 邮件泄露，到底怎么防？\": \"https://www.4hou.com/posts/33Ar\",\n \"Cloudflare抵御创纪录DDoS攻击：峰值达22.2 Tbps、106亿PPS\": \"https://www.4hou.com/posts/W1GW\",\n \"npm供应链攻击“Shai-Hulud”持续发酵：187款npm包遭攻陷 含自传播恶意载荷\": \"https://www.4hou.com/posts/mk5p\"\n },\n \"Der Flounder\": {\n \"Suppressing the Software Update Complete screen with a configuration profile on macOS Tahoe\": \"https://derflounder.wordpress.com/2025/09/26/suppressing-the-software-update-complete-screen-with-a-configuration-profile-on-macos-tahoe/\"\n },\n \"先知安全技术社区\": {\n \"AdaptixC2通信机制与流量解密分析(listener_gophertcp)\": \"https://xz.aliyun.com/news/19028\"\n },\n \"Tenable Blog\": {\n \"Cybersecurity Snapshot: CISA Highlights Vulnerability Management Importance in Breach Analysis, as Orgs Are Urged To Patch Cisco Zero-Days\": \"https://www.tenable.com/blog/cybersecurity-snapshot-cisa-highlights-vulnerability-management-importance-in-breach-analysis\"\n },\n \"obaby@mars\": {\n \"遥远的两公里\": \"https://h4ck.org.cn/2025/09/21726\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Fri Sep 26 11:28:23 UTC 2025\": \"https://github.com/trickest/cve/commit/f7a8eb81a4b03fc1af1e0a944c0a74948248e2e1\"\n },\n \"Doonsec's feed\": {\n \"Sim Studio image接口存在任意文件读取漏洞CVE-2025-9805 附POC\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489272&idx=1&sn=fe19907b1ac2ab04a67854e703846d11\",\n \"0061.通过 Web 缓存欺骗泄露敏感数据\": \"https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647691041&idx=1&sn=920cff6aeaee13b9aff2c72cad4c3830\",\n \"谁能应对现在朝鲜网络战一片大不好的形势\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDYxMjM5OA==&mid=2247485824&idx=1&sn=a1577dce5f2856dc79938020b4513b91\",\n \"WGCLOUD存在默认账号密码admin/111111 附POC\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzYzMTE5OA==&mid=2247484396&idx=1&sn=a8f2c28abe260f1f3594dc50e17f5ad7\",\n \"使用polardbx数据库成功部署RuoYi系统\": \"https://mp.weixin.qq.com/s?__biz=MzU3MDEwMjk2MQ==&mid=2247485262&idx=1&sn=684ac5d9664af7d18fb661b52836295c\",\n \"目录索引、目录穿越漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247490905&idx=1&sn=bd00002f4135e34aa27f79b5a5030478\",\n \"上新日 | Mac 动态壁纸就用 Backdrop，还有系统监控工具 Sensei 上架！\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492678&idx=1&sn=c4238edbac24973c13983b0cc630b1cb\",\n \"三汇网关管理系统 8-1-1userAdd 任意用户创建漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492865&idx=1&sn=8148c29bae271489c0a8951297df2a43\",\n \"借一个如流企业版账号\": \"https://mp.weixin.qq.com/s?__biz=Mzk0OTUxNjc2NA==&mid=2247483953&idx=1&sn=d2030e9c3d194a3f3834efa8036d7212\",\n \"色情泛滥，BOSS直聘也头大！\": \"https://mp.weixin.qq.com/s?__biz=MzU2MjU2MzI3MA==&mid=2247484957&idx=1&sn=87f5ac49cd5bd6c7b30fd975d01a48c0\",\n \"这个开源项目正在改变SSL证书管理方式，你可能还不知道！\": \"https://mp.weixin.qq.com/s?__biz=MzU2MjU2MzI3MA==&mid=2247484957&idx=2&sn=00298ec03ae73416a6de9ec0f8813448\",\n \"加拿大新不伦瑞克大学 | IoT-PRIDS：利用数据包表示进行物联网入侵检测\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493819&idx=1&sn=e17b64cab004281f134a121f71f89bc6\",\n \"9月26日｜以合规为笔，绘就中小微企安全蓝图—第四届“创新·智能”网安大会第四天精彩\": \"https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247517725&idx=1&sn=14c3957e82fc781d1ca4e0b7e58a9b71\",\n \"老板让你做App测试，还在摇头说不会？App渗透逆向课程来袭！文末抽月饼！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MzMzNTUzMA==&mid=2247486216&idx=1&sn=7b18ccc5f090a3f74e1c2e2739fe3d8e\",\n \"UEditor之.Net getshell\": \"https://mp.weixin.qq.com/s?__biz=MzkxODg3MTU4NA==&mid=2247484287&idx=1&sn=89152fbc8345a556eac19af0ddac2b62\",\n \"西宁网警发布，西宁市某单位的关键业务信息系统遭受网络攻击，26台服务器感染勒索病毒，导致系统瘫痪；给我们带来哪些启示？\": \"https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484777&idx=1&sn=cc1b1929f0fe371ff84c1ca1ed98dbb2\",\n \"两大运营商双奖落袋！盛邦安全携中国移动、中国联通深耕5G安全赛道，AI技术成破局关键\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650279039&idx=1&sn=33a320c15f0077c386d9496de3036ba2\",\n \"西宁某关键业务信息系统遭攻击！26台服务器感染勒索病毒\": \"https://mp.weixin.qq.com/s?__biz=MzU1ODM1Njc1Ng==&mid=2247498397&idx=1&sn=553bda3ce1cc1c8ecdea5457e7058cb6\",\n \"砥砺翱翔凌云志 扬帆奋进谱新篇\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247538018&idx=1&sn=8222be34b4dfce9fd5770c0ec9d8118c\",\n \"开箱即用，老板最想要的开源工业IoT物联网平台，适配MQTT、DTU、西门子PLC、欧姆龙Modbus，3D可视化组态大屏\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454940019&idx=1&sn=babfe7483fbe3154a582ee9134297070\",\n \"安全运营中心（SOC）的告警降噪\": \"https://mp.weixin.qq.com/s?__biz=MzI4NzA1Nzg5OA==&mid=2247486136&idx=1&sn=4a1c5a4a0b346980db3dd6f5126445e1\",\n \"朝鲜黑客使用新的 AkdoorTea 后门攻击全球加密货币开发人员\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDg3MTM3Nw==&mid=2247484634&idx=1&sn=de8a37d99631e5ce7aa5f9722675eb53\",\n \"航海行业网络安全正悄然撞向冰山\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643980&idx=1&sn=f1a027521cfefbf1e44b9c949946d4d2\",\n \"阿里云与Omdia联合发布AI安全报告，引领构建全新AI安全范式\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643980&idx=2&sn=8bc95127d2f5bdf2f320cd260133760e\",\n \"知识星球 | 2025年“安全科技”全网报告合集\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643980&idx=3&sn=983bb18828759b873386ce0af85a93fb\",\n \"免费赠送 | 2025国家网络安全宣传周 · 企业高管安全意识资料合集\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643980&idx=4&sn=ba3536375d0598b4795c29eed2b30217\",\n \"荣誉殿堂 | 广东移动与华为星河AI网络安全联合项目荣获ICT中国（2025）优秀案例与解决方案一等奖\": \"https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247506504&idx=1&sn=0348341417d47b098e2e990b04baf25a\",\n \"网络安全靠人民，网络安全为人民——江苏国保积极支撑2025网络安全宣传周\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTQ4NTI0OA==&mid=2247487731&idx=1&sn=fc2921394d1f7dbb66410f50f5d6b7a3\",\n \"安全小知识-第五期-SSL/TLS ：构建可靠的数据传输保护\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Njk1NDg5NQ==&mid=2247483966&idx=1&sn=5cf03c2dae82b339b7aaa52266f913e1\",\n \"信息安全漏洞周报【第041期】\": \"https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064357&idx=1&sn=f7bc7fc7e9366c6ce1f58a0697e995f1\",\n \"新一轮通过国密局技术评审的48家密评机构名单公示\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247579660&idx=1&sn=82567b2223796cbd92477c2212ec66a0\",\n \"26台服务器被锁，西北某关键业务信息系统遭攻击\": \"https://mp.weixin.qq.com/s?__biz=MzA4NDA3ODc3OQ==&mid=3045898261&idx=1&sn=c91a4fca66402179898fcd3e2bb1d587\",\n \"省下千万营销费，腾讯云天御破局快消黑产困局\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247528008&idx=1&sn=011bb690c78336be820e10acdca236ce\",\n \"【高危漏洞预警】GitLab多款产品代码执行漏洞CVE-2025-9642\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490796&idx=1&sn=455ec8870282730b204e1a6b44397321\",\n \"北京大学：智能网联汽车的车载网络攻防技术研究进展\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247627591&idx=1&sn=cc0f69b6f44ec69006516d25774166c3\",\n \"中央计算平台集成与OTA合规实战培训课程 2025\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247627591&idx=2&sn=a33358d57b3599568b1a41c7f5c2fefc\",\n \"中汽科技：智能网联汽车信息安全测试研究\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247627591&idx=3&sn=754bdc6c51d4e7d34deeed0f0d0650c6\",\n \"【安全圈】浙江网安成功侦破无人机飞控破解案，两名嫌疑人落网\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=1&sn=2e25c4c3bf00d8aa24e9fa90e7f21c77\",\n \"【安全圈】武功警方成功捣毁跨区域侵犯公民个人信息犯罪团伙，156人落网\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=2&sn=d50c598040d806a8d2ff7ee53304402d\",\n \"【安全圈】Cloudflare CDN 节点 0day 漏洞现身暗网，引发全球安全担忧\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=3&sn=de5284fc89ef7ff00ef7724fb32e0f7f\",\n \"【安全圈】萧山警方跨省出击，成功打掉“银狐”木马开发团伙\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=4&sn=ea7e1ab21e5e7045e0fca7975cf51caf\",\n \"自动驾驶汽车功能安全与网络安全的融合\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247560216&idx=1&sn=17ffb9bbfff96cf7f5b1e132674bba23\",\n \"华夏银行AI落地五大领域，人力降本超千万\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932721&idx=1&sn=7469f6fdf783eecd67b9457d1b767c4f\",\n \"AI快讯：支付行业专属大模型发布，谷歌发布新一代具身AI模型\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932721&idx=2&sn=83d8707e1146fc6e735b8a2ab5b16880\",\n \"23.3万！天津银行反洗钱系统增设智慧尽调AI小助手项目\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932721&idx=3&sn=aa79505811f3a9403ade8635ee2377eb\",\n \"京北方200640元中标中国银行青海省分行RPA特色场景一期建设项目\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932721&idx=4&sn=cdf9ee8c63728385d45ad65115d086ff\",\n \"情报分析的核心方法\": \"https://mp.weixin.qq.com/s?__biz=MzkxMDIwMTMxMw==&mid=2247494903&idx=1&sn=662e54e18409f17fb35c98c16fb58537\",\n \"启明星辰出席第40次全国计算机安全学术交流会，解码大模型应用安全新蓝图\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651734452&idx=1&sn=35c0db9630c4aee6f8573554a85c8e57\",\n \"标准引领！启明星辰集团深度参编《政务大模型应用安全规范》\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651734452&idx=2&sn=039e355e37f75e24aaa4fc1e1dcafc0f\",\n \"【黑产手记 | 我如何用一份桌面明文文件，入侵一家企业的安全系统？】\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MzA4NTM0OA==&mid=2247493968&idx=1&sn=d7df4c00819649d016b9d0a12ff56375\",\n \"天唯家人庆生啦！7-9 月寿星欢聚，这场生日会藏满心意\": \"https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247504764&idx=1&sn=d13167c5c3e476202b48eb018405146e\",\n \"博世追加裁员1.3万人！\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247560214&idx=1&sn=82c818586e98ad544e8b6dd96d4b4b34\",\n \"技术分享｜透过iOS 26，探寻iOS安全机制升级对取证工作的影响\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MjE1NjQ0NA==&mid=2247514814&idx=1&sn=0e184767695c25ff946e83aeb42c67cd\",\n \"用AI改造SOAR！斗象SOC产品系列全新嵌入AI-SOAR Agent\": \"https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495094&idx=1&sn=7ca2017184bf16675194cf170f3e5524\",\n \"通过 Windows 快捷方式 (LNK) 绕过 Web 标记 (MoTW)：LNK 踩踏技术\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247532883&idx=1&sn=7f380faf23bb5070cad16eca8cd54c6c\",\n \"细说当白帽的这些坑，不信你没踩过\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649769430&idx=1&sn=135119eb5da9785376aee21eed172a23\",\n \"网安职业的五大残酷现实；暗网监控实战指南 | 2025网安行业优质播客精选集⑩\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328148&idx=2&sn=c6a9a035584e974f0730e8a80cddc049\",\n \"AI对抗AI：微软成功拦截利用LLM生成混淆代码的网络钓鱼攻击\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328148&idx=1&sn=3a6225c9e9eeea7d34b1aa1cca289b2c\",\n \"思科两大0day漏洞同时曝光：ASA/FTD设备VPN缺陷可导致Root权限远程代码执行\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328148&idx=3&sn=3160acb4fb312738f62cc4538cc32cd1\",\n \"NVIDIA修复Megatron-LM AI框架中的高危代码注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328148&idx=4&sn=448221c674e1bd99361e90dd14d67bbc\",\n \"奇安信受邀出席2025民营经济创新发展大会，以AI与安全双擎助力陕西高质量发展\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629203&idx=1&sn=3f790e00bd2a83aac709b67f32099d63\",\n \"奇安信入选安全牛《私有云泛主机安全》重点推荐厂商\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629203&idx=2&sn=ba4489584bad9767c54f10acbaa398be\",\n \"发布 | 七部门联合印发《关于“人工智能+交通运输”的实施意见》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=1&sn=de2126240c2451163b5ec03fe6d58aba\",\n \"专家解读｜以内容标识化解治理困境，筑牢“人工智能+”行动安全底座\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=2&sn=afd8856e754c68f4513804f138d3f6c8\",\n \"专家观点 | 防范人工智能法律风险\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=3&sn=d52f00dc6ac19199d371ff47430070b4\",\n \"国际 | 加拿大数据隐私法律规制\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=4&sn=440e11f041e6f62c8c77b2bf0f827edb\",\n \"一图读懂 | 《“人工智能+交通运输”实施意见》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=5&sn=a5c5eb6e9f17c14821a15035fd70624c\",\n \"节前预警: 勒索双雄高度活跃！360构建全链路防御体系助力政企机构无忧值守\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582290&idx=1&sn=71b008b9057282b1c0b1d85d77b5ce0d\",\n \"共启教育数字化黄金时代！360启动“联创共营”伙伴招募计划\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582290&idx=2&sn=3ebd0e581a5f638356f5d6e2765a5bf4\",\n \"【成功复现】SimStudioAI服务端请求伪造漏洞(CVE-2025-9805)\": \"https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503623&idx=1&sn=a0a03137b9df5313e408854649c12b78\",\n \"【BUGBANK平台倾情助力】聚焦可信AI安全！SDC2025 议题重磅揭晓\": \"https://mp.weixin.qq.com/s?__biz=MzAxODg1MDMwOQ==&mid=2247508417&idx=1&sn=90e4034ff91bb9e96224df5b6845e1e5\",\n \"获取CISSP认证，加固您的网络安全职业“护城河”\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247493162&idx=1&sn=02102196fbfc330eee0cfacbd265ff90\",\n \"速修复！思科ASA 两个0day漏洞已遭利用，列入 CISA KEV 清单\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524078&idx=1&sn=a668c49a8bfda90e1da60201307dc79b\",\n \"Salesforce 修复严重的 ForceLeaked 漏洞，通过AI提示注入暴露 CRM 数据\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524078&idx=2&sn=e6d2b91dedf49a963971709b2ead7110\",\n \"记一次组合拳之SPEL(重在思路分享+payload)\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247523267&idx=1&sn=3cf4b4e90097e67581f0dd823f1d51a7\",\n \"[图文]用一种新方法帮助你去理解人工智能的思维方式\": \"https://mp.weixin.qq.com/s?__biz=MzkwMjQyNjAxMA==&mid=2247485613&idx=1&sn=c281613b523bac9cba076b7185c470d6\",\n \"前端限制？黑客是如何绕过付费限制的-实战漏洞案例讲解\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NTYwNzY3NQ==&mid=2247483908&idx=1&sn=ecd2a878ca523f458155f26b67f453f3\",\n \"北京网络安全政策密集落地！企业如何合规破局？这份指南请收好\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDkyNTQ2OA==&mid=2247486240&idx=1&sn=30e9eac45f65074d6de58ac5c75fb487\",\n \"高度认可！亚信安全荣膺成都世运会“精彩世运 感谢有您”荣誉\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650625445&idx=1&sn=5b7ea33c44a866b0ce473351c3e0206d\",\n \"MS08067实验室助力中国工商银行成功举办2025网络安全攻防实战专项培训活动\": \"https://mp.weixin.qq.com/s?__biz=MzU1NjgzOTAyMg==&mid=2247524739&idx=1&sn=f8742ec5d8d304d4f4c365796f54a031\",\n \"“AI与网络安全”课程 : 999元学双技\": \"https://mp.weixin.qq.com/s?__biz=MzU1NjgzOTAyMg==&mid=2247524739&idx=2&sn=bf6eb2fa06588622fcff60cad7c003e2\",\n \"36.3万亿美元交易量背后：USDT 被黑灰产利用的六大犯罪新路径\": \"https://mp.weixin.qq.com/s?__biz=MzkyMzI2NzIyMw==&mid=2247489984&idx=1&sn=31ff9fb2f2a097461f5b619f14e8b5aa\",\n \"每周蓝军技术推送（2025.9.20-9.26）\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494429&idx=1&sn=a4d6c8748f2e1b79bee3773f41805003\",\n \"筑牢安全基底，护航数智未来 | CCS2025成都网络安全技术交流活动圆满结束\": \"https://mp.weixin.qq.com/s?__biz=MzkwMjI2MDQwMA==&mid=2247487117&idx=1&sn=1e6e3e50d679708352e466ebefe6c7ea\",\n \"守护金融视界，筑牢视频安全防线 | 慧盾银行视频监控系统安全解决方案\": \"https://mp.weixin.qq.com/s?__biz=MzI2NDcwOTgzOA==&mid=2247493617&idx=1&sn=f2989f2d121a54dad5cb89f42deb8663\",\n \"跨境数据传输新规，这三类数据绝对不能出国！\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjAyMjU4MA==&mid=2649597507&idx=1&sn=aae81a2c4205eb246b0934ffc6690a3d\",\n \"智能时代·可信安全 | 百度安全，即将亮相第九届安全开发者峰会（SDC2025）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=1&sn=2daa95bac4c45ab0f8a4a7faea32c970\",\n \"Overt安全风控检测工具深度解析\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=2&sn=76d957f6d2e21664926a6c93851cd539\",\n \"Chromium 浏览器面临新威胁，黑客可悄无声息装恶意扩展\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=3&sn=9294d5bf1846ee0907acf1f7b09a7ef1\",\n \"2025大厂技术岗实时更新！企业新增职位汇总\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=4&sn=8a9f192670b97914bc3b67912d88606f\",\n \"每周网络安全简讯 ( 2025年 第39周 )\": \"https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247521566&idx=1&sn=f9b005254b5c9fefe5826ee85e4a9181\",\n \"安全动态丨网络空间安全动态第287期\": \"https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247521566&idx=2&sn=93da63ec07285d90c1586495c5d81a80\",\n \"喜报丨中国电子信息产业发展研究院入选“2025年AMI智库入库单位”，1项成果入选“中国特色新型智库建设十周年回顾特色案例”\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254536&idx=1&sn=83db212d10143d45ae51ccbf3716f8bc\",\n \"【邀请加入】《中小企业服务 服务机构 服务工具通用要求》团体标准参编单位征集启动！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254536&idx=2&sn=7e08e194b5a575969071f1b76362755f\",\n \"【数字政府优秀案例联播】广西壮族自治区：医疗救助返贫监测\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254536&idx=3&sn=59a6540543e340a330ceb1f5d1267e0c\",\n \"小米法务重拳出击：部分车主无端遭受网络攻击，已对 92 个恶意侵权账号提起诉讼并协助车主维权 35 起\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247543039&idx=1&sn=c2f1ab28304bab7ae29a46f41656f17c\",\n \"2项数据安全国家标准发布（可下载）\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjUzOTQ0NQ==&mid=2247521623&idx=1&sn=4b506667d1d861fec0108b35dfee9a8a\",\n \"三人非法爬取知名平台8亿条核心数据 检察官亲历性审查破解“核损”难\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601651&idx=1&sn=7af0132fb2fcbe4d5149d31dc8fbd8fd\",\n \"天融信在全国计算机安全学术交流会上探讨智能体安全，再获“优秀论文”及“特别贡献奖”\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601651&idx=2&sn=e36d6b30dc2bd1dd30dda7ecb099cb48\",\n \"自主可信计算与数据流通基础设施安全论坛在京成功举办\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601651&idx=3&sn=23944de9716be8098a49a167d24a1b9b\",\n \"微信开发工程师总结的20条C++性能陷阱与实用特性，读起来很过瘾\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649795793&idx=1&sn=2d1c95da6bef1ff5b89cc7eaa2241e30\",\n \"每日安全动态推送(25/9/26)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960227&idx=1&sn=b480c32ba0d546f93714b1740c43c2b0\",\n \"00后黑客落网！曾运营大型僵尸网络，频繁攻击腾讯游戏、DeepSeek、X平台\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207428&idx=1&sn=69d9a6d43e2f41fe1bbe6f5205b69607\",\n \"DevSecOps-多研发模式安全进击\": \"https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247493128&idx=1&sn=237a56474fa1e73005596d8b85b03775\",\n \"渗透测试JS接口Fuzz场景研究\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498316&idx=1&sn=59d1d7e00eaf8323d7a7f1b89a05ec76\",\n \"人工智能产业及赋能新型工业化大会｜观安信息：以AI SOC驱动安全运营智能化\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247509470&idx=1&sn=c6f3d7158784d117017b9d24112a1bf1\",\n \"荣获认证丨华清信安荣获网络安全技术支撑单位\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDEwMDc1Nw==&mid=2651055470&idx=1&sn=89a3c6252291517bb33d7d4e2efcb339\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"Authorization Bypass: The Simple SSO Mistake\": \"https://infosecwriteups.com/authorization-bypass-the-simple-sso-mistake-c8bd261b961c?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Tooling via Browser Automation\": \"https://infosecwriteups.com/tooling-via-browser-automation-5336b17c5497?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Terrier Cyber Quest 2025 — Brief Write-up\": \"https://infosecwriteups.com/terrier-cyber-quest-2025-brief-write-up-b001310d025c?source=rss----7b722bfd1b8d--bug_bounty\",\n \"“The Registration Flaw That Almost Got Missed: Hunting Weak Authentication Links”\": \"https://infosecwriteups.com/the-registration-flaw-that-almost-got-missed-hunting-weak-authentication-links-75337daa6bf9?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"SpiderLabs Blog\": {\n \"REDCap: Multiple Cross-Site Scripting (XSS) Vulnerabilities\": \"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/redcap-multiple-cross-site-scripting-xss-vulnerabilities/\"\n },\n \"GuidePoint Security\": {\n \"The 4 Levels of Risk Register Maturity\": \"https://www.guidepointsecurity.com/blog/the-4-levels-of-risk-register-maturity/\"\n },\n \"Project Zero\": {\n \"Pointer leaks through pointer-keyed data structures\": \"https://googleprojectzero.blogspot.com/2025/09/pointer-leaks-through-pointer-keyed.html\"\n },\n \"Malwarebytes\": {\n \"Hackers threaten parents: Get nursery to pay ransom or we leak your child’s data\": \"https://www.malwarebytes.com/blog/news/2025/09/hackers-threaten-parents-get-nursery-to-pay-ransom-or-we-leak-your-childs-data\",\n \"Google and Flo to pay $56 million after misusing users’ health data\": \"https://www.malwarebytes.com/blog/news/2025/09/google-and-flo-to-pay-56-million-after-misusing-users-health-data\",\n \"Neon App pays users to record their phone calls, sells data for AI training\": \"https://www.malwarebytes.com/blog/news/2025/09/neon-app-pays-users-to-record-their-phone-calls-sells-data-for-ai-training\"\n },\n \"SentinelOne\": {\n \"The Good, the Bad and the Ugly in Cybersecurity – Week 39\": \"https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-39-7/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"在笔记本电脑上模拟宇宙\": \"https://www.solidot.org/story?sid=82428\",\n \"ROG Xbox Ally X 售价 1000 美元\": \"https://www.solidot.org/story?sid=82427\",\n \"OpenAI 准备建造的数据中心消耗的电力相当于纽约和圣迭戈\": \"https://www.solidot.org/story?sid=82426\",\n \"微软禁止以色列国防部使用它的某些云服务\": \"https://www.solidot.org/story?sid=82425\",\n \"对 117 岁寿星的 DNA 研究揭示了长寿的线索\": \"https://www.solidot.org/story?sid=82423\",\n \"中国学者《科学》论文接受率为北美同行 1/4\": \"https://www.solidot.org/story?sid=82422\"\n },\n \"HackerNews\": {\n \"Vane Viper 为恶意软件与广告欺诈提供支持\": \"https://hackernews.cc/archives/60957\",\n \"Salesforce 修复严重 ForcedLeak 漏洞\": \"https://hackernews.cc/archives/60954\",\n \"与越南威胁行为者相关的钓鱼攻击活动升级\": \"https://hackernews.cc/archives/60952\",\n \"英国零售商 Co-op 因网络攻击营收减少约 2.75 亿美元\": \"https://hackernews.cc/archives/60950\",\n \"沃尔沃北美公司供应商遭勒索\": \"https://hackernews.cc/archives/60948\",\n \"美国马里兰州交通遭网络攻击，勒索团伙要价30枚比特币\": \"https://hackernews.cc/archives/60946\"\n },\n \"腾讯玄武实验室\": {\n \"每日安全动态推送(25/9/26)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960227&idx=1&sn=b480c32ba0d546f93714b1740c43c2b0\"\n },\n \"安全客\": {\n \"美国战争部全面升级网络防御：从静态防护到动态实战\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789098&idx=1&sn=fc06f21f9ebd718acac25891c2ed29e8\"\n },\n \"看雪学苑\": {\n \"智能时代·可信安全 | 百度安全，即将亮相第九届安全开发者峰会（SDC2025）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=1&sn=2daa95bac4c45ab0f8a4a7faea32c970\",\n \"Overt安全风控检测工具深度解析\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=2&sn=76d957f6d2e21664926a6c93851cd539\",\n \"Chromium 浏览器面临新威胁，黑客可悄无声息装恶意扩展\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=3&sn=9294d5bf1846ee0907acf1f7b09a7ef1\",\n \"2025大厂技术岗实时更新！企业新增职位汇总\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=4&sn=8a9f192670b97914bc3b67912d88606f\"\n },\n \"天御攻防实验室\": {\n \"美国国防部有24.5万网络安全人员\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486534&idx=1&sn=8f4ac53410b7515714fbe209393e74aa\"\n },\n \"dotNet安全矩阵\": {\n \".NET内网实战：通过劫持 JIT 内存编译执行ShellCode\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500693&idx=1&sn=7239a31ac4decc690842ee9d3e7d030e\",\n \"[ .NET 安全代码审计 ] 从零基础到高阶实战，开启漏洞赏金之路\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500693&idx=2&sn=d76a91844c2376e4dda8f83efa57fb27\",\n \".NET内网实战： 通过LNK 文件实现目标权限持久化\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500693&idx=3&sn=880e6f3a67ff4ec59fcd982b7174fa90\"\n },\n \"奇安信威胁情报中心\": {\n \"奇安信威胁情报MCP V2.0全新升级：洞察“幕后黑手”，威胁行为体画像功能全面上线！\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247516188&idx=1&sn=b759c8c9646fb7d067d093f7745b7a0f\",\n \"每周高级威胁情报解读(2025.09.19~09.25)\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247516188&idx=2&sn=e9b8f85fe0093fc134fe26b494bdc8c3\"\n },\n \"代码卫士\": {\n \"速修复！思科ASA 两个0day漏洞已遭利用，列入 CISA KEV 清单\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524078&idx=1&sn=a668c49a8bfda90e1da60201307dc79b\",\n \"Salesforce 修复严重的 ForceLeaked 漏洞，通过AI提示注入暴露 CRM 数据\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524078&idx=2&sn=e6d2b91dedf49a963971709b2ead7110\"\n },\n \"安全学术圈\": {\n \"加拿大新不伦瑞克大学 | IoT-PRIDS：利用数据包表示进行物联网入侵检测\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493819&idx=1&sn=e17b64cab004281f134a121f71f89bc6\"\n },\n \"虎符智库\": {\n \"网络安全的AI Agent革命：从工具之战到生命级的生态博弈\": \"https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493490&idx=1&sn=5fe77d9f9bf6a4302a67094153bfd77d\"\n },\n \"安全内参\": {\n \"国内知名地图软件厂商8亿条核心数据遭非法爬取\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515053&idx=1&sn=dbdf90f9dfa35613ebe719eca5a98c87\"\n },\n \"奇安信病毒响应中心\": {\n \"每周勒索威胁摘要\": \"https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498542&idx=1&sn=ad750077893bb3dc716922db789dffaa\"\n },\n \"安全圈\": {\n \"【安全圈】浙江网安成功侦破无人机飞控破解案，两名嫌疑人落网\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=1&sn=2e25c4c3bf00d8aa24e9fa90e7f21c77\",\n \"【安全圈】武功警方成功捣毁跨区域侵犯公民个人信息犯罪团伙，156人落网\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=2&sn=d50c598040d806a8d2ff7ee53304402d\",\n \"【安全圈】Cloudflare CDN 节点 0day 漏洞现身暗网，引发全球安全担忧\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=3&sn=de5284fc89ef7ff00ef7724fb32e0f7f\",\n \"【安全圈】萧山警方跨省出击，成功打掉“银狐”木马开发团伙\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=4&sn=ea7e1ab21e5e7045e0fca7975cf51caf\"\n },\n \"中国信息安全\": {\n \"发布 | 七部门联合印发《关于“人工智能+交通运输”的实施意见》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=1&sn=de2126240c2451163b5ec03fe6d58aba\",\n \"专家解读｜以内容标识化解治理困境，筑牢“人工智能+”行动安全底座\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=2&sn=afd8856e754c68f4513804f138d3f6c8\",\n \"专家观点 | 防范人工智能法律风险\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=3&sn=d52f00dc6ac19199d371ff47430070b4\",\n \"国际 | 加拿大数据隐私法律规制\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=4&sn=440e11f041e6f62c8c77b2bf0f827edb\",\n \"一图读懂 | 《“人工智能+交通运输”实施意见》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=5&sn=a5c5eb6e9f17c14821a15035fd70624c\"\n },\n \"数世咨询\": {\n \"AI正在改变网络安全初级岗位招聘 — 技能缺口的性质也在重塑\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540383&idx=1&sn=c8089dcfd37c8ebe090e3bc8b9761448\",\n \"直播预告 | 绿盟科技大模型安全创新秋季成果发布\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540383&idx=2&sn=5ee91c953351fa36245f33c7d38d9675\"\n },\n \"天黑说嘿话\": {\n \"CodeQL代码审计初探\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484659&idx=1&sn=d662852223dc842595ea6b7d534f50c6\"\n },\n \"腾讯安全应急响应中心\": {\n \"00后黑客落网！曾运营大型僵尸网络，频繁攻击腾讯游戏、DeepSeek、X平台\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207428&idx=1&sn=69d9a6d43e2f41fe1bbe6f5205b69607\"\n },\n \"M01N Team\": {\n \"每周蓝军技术推送（2025.9.20-9.26）\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494429&idx=1&sn=a4d6c8748f2e1b79bee3773f41805003\"\n },\n \"情报分析师\": {\n \"情报分析师教你从身体语言解读人心\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562251&idx=1&sn=2823b2d4f5786fc5afcaf652e544d09c\",\n \"尼泊尔首位女总理卡尔基上任，中尼关系未来走向如何？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562251&idx=2&sn=903c950a2e179ad20457808c9c46eb1d\"\n },\n \"极客公园\": {\n \"168 元一年的「小红卡」，是小红书打破本地生活红海的钥匙\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653087441&idx=1&sn=d8805f53f951b34cee0e4a0adac8e6d4\",\n \"透视阿里云产品生态团队：AI 落地的「关键通道」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653087422&idx=1&sn=58c4d375370cce2b09363ab6a18875a5\",\n \"小米 17 系列发布，4499 起；追觅「库里南」图片曝光；YU7 Max 成「百万最速」车 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653087390&idx=1&sn=278c514d7b50d3f9009193ad50d557fc\"\n },\n \"嘶吼专业版\": {\n \"NPM供应链攻击“Shai-Hulud”持续发酵：187款NPM包遭攻陷 含自传播恶意载荷\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584747&idx=1&sn=08d7d48ba9f44226ba8dc4a66532e17e\",\n \"最新DDoS攻击创纪录：峰值达22.2 Tbps、106亿PPS\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584747&idx=2&sn=d9f364b5e50395a02737d94d65b9c40f\"\n },\n \"微步在线\": {\n \"微步官方IP形象正式发布！\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650184753&idx=1&sn=fcb6887d083c22f7493998afeaa25d57\"\n },\n \"斗象智能安全\": {\n \"用AI改造SOAR！斗象SOC产品系列全新嵌入AI-SOAR Agent\": \"https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495094&idx=1&sn=7ca2017184bf16675194cf170f3e5524\"\n },\n \"火绒安全\": {\n \"【火绒安全周报】谷歌紧急修复被利用的零日漏洞/19岁黑客被指控面临最高95年徒刑\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247526870&idx=1&sn=4b3d64f4d2e067c054bf4f27cb1653e5\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247526870&idx=2&sn=014de5e9afcdd11a9790e14f8d2b0321\"\n },\n \"阿里安全响应中心\": {\n \"阿里云与Omdia联合发布AI安全报告，引领构建全新AI安全范式\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998141&idx=1&sn=3e6b6a44237527b08573511f29ed9167\"\n },\n \"迪哥讲事\": {\n \"渗透测试JS接口Fuzz场景研究\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498316&idx=1&sn=59d1d7e00eaf8323d7a7f1b89a05ec76\"\n },\n \"IT Service Management News\": {\n \"La legge italiana sull'intelligenza artificiale\": \"http://blog.cesaregallotti.it/2025/09/la-legge-italiana-sullintelligenza_26.html\"\n },\n \"ICT Security Magazine\": {\n \"Cybersecurity e AI Act: come l’UE regolamenta l’intelligenza artificiale sul lavoro\": \"https://www.ictsecuritymagazine.com/articoli/ai-act/\"\n },\n \"Yak Project\": {\n \"指针处理太难啃？看 IRify 如何一步步搞定突破口！\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528677&idx=1&sn=eed9c8a275d803ee22aa9bb82638df7e\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Microsoft’s new AI feature will organize your photos automatically\": \"https://www.bleepingcomputer.com/news/microsoft/microsofts-new-ai-feature-will-organize-your-photos-automatically/\",\n \"Ransomware attack on Ohio county impacts over 45,000 residents, employees\": \"https://therecord.media/ohio-ransomware-attack-impacts-45000\",\n \"US investors to take over TikTok operations in the country\": \"https://www.bleepingcomputer.com/news/government/us-investors-to-take-over-tiktok-operations-in-the-country/\",\n \"Smantellata una delle maggiori Sim farm mai scoperte: un rischio per la sicurezza nazionale\": \"https://www.cybersecurity360.it/nuove-minacce/smantellata-una-delle-maggiori-sim-farm-mai-scoperte-un-rischio-per-la-sicurezza-nazionale/\",\n \"Microsoft shares temp fix for Outlook encrypted email errors\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-shares-temp-fix-for-outlook-encrypted-email-errors/\",\n \"Microsoft-Israele, stop all’uso di AI e cloud per sorvegliare i palestinesi: gli impatti geopolitici\": \"https://www.cybersecurity360.it/cybersecurity-nazionale/microsoft-contro-israele-stop-alluso-di-ai-e-cloud-per-sorvegliare-i-palestinesi-gli-impatti-geopolitici/\",\n \"Microsoft Edge to block malicious sideloaded extensions\": \"https://www.bleepingcomputer.com/news/security/microsoft-edge-to-block-malicious-sideloaded-extensions/\",\n \"Quando la PA confonde pubblicità con trasparenza: rischi elevati per i nostri dati online\": \"https://www.cybersecurity360.it/legal/privacy-dati-personali/quando-la-pa-confonde-pubblicita-con-trasparenza-rischi-elevati-per-i-nostri-dati-online/\",\n \"The hidden cyber risks of deploying generative AI\": \"https://www.bleepingcomputer.com/news/security/the-hidden-cyber-risks-of-deploying-generative-ai/\",\n \"Africa cybercrime crackdown includes hundreds of arrests, Interpol says\": \"https://therecord.media/africa-cyber-fraud-crackdown-ghana-senegal-cote-divoire-angola-interpol\",\n \"DMA sotto assedio: la richiesta di Apple e il futuro della regolazione digitale\": \"https://www.cybersecurity360.it/legal/dma-sotto-assedio-la-richiesta-di-apple-e-il-futuro-della-regolazione-digitale/\",\n \"Diritto di accesso, il ritardo nella risposta costa 100mila euro a una banca\": \"https://www.cybersecurity360.it/news/diritto-di-accesso-il-ritardo-nella-risposta-costa-100mila-euro-a-una-banca/\",\n \"Più convinti che sicuri?\": \"https://www.cybersecurity360.it/cultura-cyber/piu-convinti-che-sicuri/\",\n \"Teens arrested by Dutch police reportedly suspected of spying for Russia\": \"https://therecord.media/teens-arrested-netherlands-reportedly-suspected-cyber-espionage-russia\",\n \"Sintesi riepilogativa delle campagne malevole nella settimana del 20 – 26 settembre\": \"https://cert-agid.gov.it/news/sintesi-riepilogativa-delle-campagne-malevole-nella-settimana-del-20-26-settembre/\",\n \"Maximum severity GoAnywhere MFT flaw exploited as zero day\": \"https://www.bleepingcomputer.com/news/security/maximum-severity-goanywhere-mft-flaw-exploited-as-zero-day/\",\n \"Microsoft releases the final Windows 10 22H2 preview update\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-the-final-windows-10-22h2-preview-update/\",\n \"As fraud surges, UK prepares to replace its broken reporting service\": \"https://therecord.media/uk-action-fraud-replacement-report-fraud\",\n \"I servizi segreti USA smantellano server con 100.000 SIM. Ma era davvero un piano terroristico?\": \"https://www.cybersecurity360.it/news/i-servizi-segreti-usa-smantellano-server-con-100-000-sim-ma-era-davvero-un-piano-terroristico/\",\n \"Framework nazionale cyber in azione: metodologia di contestualizzazione ispirata al NIST CSF 2.0\": \"https://www.cybersecurity360.it/legal/fncdp-2-1-in-azione-la-metodologia-di-contestualizzazione-ispirata-al-nist-csf-2-0/\",\n \"Australia Ransomware Landscape 2025: Rich Targets Attract Ransomware Groups\": \"https://cyble.com/blog/ransomware-groups-targets-australia-and-new-zealand/\",\n \"Troubleshooting WordPress: How to Fix the White Screen of Death (WSoD)\": \"https://blog.sucuri.net/2025/09/troubleshooting-wordpress-how-to-fix-the-white-screen-of-death.html\"\n },\n \"表图\": {\n \"被算法奴役的社会和跳大神的萨满\": \"https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247484841&idx=1&sn=4e21e64e29a6dde9b161534daed8d5c2\"\n },\n \"悬镜安全\": {\n \"ASPM重磅升级｜GB/T 43698-2024 合规治理驱动数字供应链体系化建设\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647796958&idx=1&sn=6dc27358a68a7e975aa5b2113b9f38bc\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"New tool: convert-ts-bash-history.py, (Fri, Sep 26th)\": \"https://isc.sans.edu/diary/rss/32324\",\n \"ISC Stormcast For Friday, September 26th, 2025 https://isc.sans.edu/podcastdetail/9630, (Fri, Sep 26th)\": \"https://isc.sans.edu/diary/rss/32322\"\n },\n \"Schneier on Security\": {\n \"Friday Squid Blogging: Jigging for Squid\": \"https://www.schneier.com/blog/archives/2025/09/friday-squid-blogging-jigging-for-squid.html\",\n \"Digital Threat Modeling Under Authoritarianism\": \"https://www.schneier.com/blog/archives/2025/09/digital-threat-modeling-under-authoritarianism.html\"\n },\n \"白帽子章华鹏\": {\n \"关于做好26年企业安全规划\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650237790&idx=1&sn=b9f4488a84713fd594674e888b7c5341\"\n },\n \"360数字安全\": {\n \"节前预警: 勒索双雄高度活跃！360构建全链路防御体系助力政企机构无忧值守\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582290&idx=1&sn=71b008b9057282b1c0b1d85d77b5ce0d\",\n \"共启教育数字化黄金时代！360启动“联创共营”伙伴招募计划\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582290&idx=2&sn=3ebd0e581a5f638356f5d6e2765a5bf4\"\n },\n \"Security Affairs\": {\n \"Microsoft uncovers new variant of XCSSET macOS malware in targeted attacks\": \"https://securityaffairs.com/182662/malware/microsoft-uncovers-new-variant-of-xcsset-macos-malware-in-targeted-attacks.html\",\n \"Hackers exploit Fortra GoAnywhere flaw before public alert\": \"https://securityaffairs.com/182647/hacking/hackers-exploit-fortra-goanywhere-flaw-before-public-alert.html\",\n \"UK NCSC warns that attackers exploited Cisco firewall zero-days to deploy RayInitiator and LINE VIPER malware\": \"https://securityaffairs.com/182639/hacking/uk-ncsc-warns-that-attackers-exploited-cisco-firewall-zero-days-to-deploy-rayinitiator-and-line-viper-malware.html\",\n \"Google warns of Brickstorm backdoor targeting U.S. legal and tech sectors\": \"https://securityaffairs.com/182609/malware/google-warns-of-brickstorm-backdoor-targeting-u-s-legal-and-tech-sectors.html\"\n },\n \"君哥的体历\": {\n \"金融系统数据脱敏、环境隔离、链路加密与BYOD管控的合规实践与落地平衡｜总第300周\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492227&idx=1&sn=67d3a20c15c77fcf8730416559d731cb\"\n },\n \"The Hacker News\": {\n \"Researchers Expose SVG and PureRAT Phishing Threats Targeting Ukraine and Vietnam\": \"https://thehackernews.com/2025/09/researchers-expose-svg-and-purerat.html\",\n \"New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks\": \"https://thehackernews.com/2025/09/new-coldriver-malware-campaign-joins-bo.html\",\n \"Crash Tests for Security: Why BAS Is Proof of Defense, Not Assumptions\": \"https://thehackernews.com/2025/09/crash-tests-for-security-why-bas-is.html\",\n \"Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure\": \"https://thehackernews.com/2025/09/fortra-goanywhere-cvss-10-flaw.html\",\n \"New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module\": \"https://thehackernews.com/2025/09/new-macos-xcsset-variant-targets.html\",\n \"Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER Malware\": \"https://thehackernews.com/2025/09/cisco-asa-firewall-zero-day-exploits.html\"\n },\n \"Deeplinks\": {\n \"Fair Use Protects Everyone—Even the Disney Corporation\": \"https://www.eff.org/deeplinks/2025/09/fair-use-protects-everyone-even-disney-corporation\",\n \"The Abortion Hotline Meta Wants to Go Dark\": \"https://www.eff.org/deeplinks/2025/09/silencing-abortion-providers-meta\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Riker's Curse, River City, EDR-Freeze, MCP, WordPress, GitHub, Josh Marpet, and More. - SWN #515\": \"http://sites.libsyn.com/18678/rikers-curse-river-city-edr-freeze-mcp-wordpress-github-josh-marpet-and-more-swn-515\"\n }\n}"}, "dd83d5c909b744a81255c98da3058f1dd004254e": {"t": 1785772246.2815619, "n": 37993, "h": "303599668152478a", "c": "{\n \"奇安信攻防社区\": {\n \"红队攻防 | 外网打点不靠0day组合拳拿下目标系统\": \"https://forum.butian.net/share/4573\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2025-09-26 Review\": \"http://www.sec-wiki.com/?2025-09-26\"\n },\n \"paper - Last paper\": {\n \"哥德尔测试：大型语言模型能否解决简单猜想？\": \"https://paper.seebug.org/3392/\"\n },\n \"Trustwave Blog\": {\n \"9 Little-Known Facts About Managed Detection and Response (MDR)\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/9-little-known-facts-about-managed-detection-and-response/\"\n },\n \"博客\": {\n \"logitech m185 wireless mouse scroll wheel NOT working properly\": \"https://dyrnq.com/logitech-m185-wireless-mouse-scroll-wheel-not-working-properly/\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"第六届国际反病毒大会在津召开，梆梆安全参编《移动互联网应用安全统计分析报告（2025）》正式发布\": \"https://www.4hou.com/posts/2X0J\",\n \"CACTER 揭秘：10% 员工引发 73% 邮件泄露，到底怎么防？\": \"https://www.4hou.com/posts/33Ar\",\n \"Cloudflare抵御创纪录DDoS攻击：峰值达22.2 Tbps、106亿PPS\": \"https://www.4hou.com/posts/W1GW\",\n \"npm供应链攻击“Shai-Hulud”持续发酵：187款npm包遭攻陷 含自传播恶意载荷\": \"https://www.4hou.com/posts/mk5p\"\n },\n \"Der Flounder\": {\n \"Suppressing the Software Update Complete screen with a configuration profile on macOS Tahoe\": \"https://derflounder.wordpress.com/2025/09/26/suppressing-the-software-update-complete-screen-with-a-configuration-profile-on-macos-tahoe/\"\n },\n \"先知安全技术社区\": {\n \"AdaptixC2通信机制与流量解密分析(listener_gophertcp)\": \"https://xz.aliyun.com/news/19028\"\n },\n \"Tenable Blog\": {\n \"Cybersecurity Snapshot: CISA Highlights Vulnerability Management Importance in Breach Analysis, as Orgs Are Urged To Patch Cisco Zero-Days\": \"https://www.tenable.com/blog/cybersecurity-snapshot-cisa-highlights-vulnerability-management-importance-in-breach-analysis\"\n },\n \"obaby@mars\": {\n \"遥远的两公里\": \"https://h4ck.org.cn/2025/09/21726\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Fri Sep 26 11:28:23 UTC 2025\": \"https://github.com/trickest/cve/commit/f7a8eb81a4b03fc1af1e0a944c0a74948248e2e1\"\n },\n \"Doonsec's feed\": {\n \"Sim Studio image接口存在任意文件读取漏洞CVE-2025-9805 附POC\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489272&idx=1&sn=fe19907b1ac2ab04a67854e703846d11\",\n \"0061.通过 Web 缓存欺骗泄露敏感数据\": \"https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647691041&idx=1&sn=920cff6aeaee13b9aff2c72cad4c3830\",\n \"谁能应对现在朝鲜网络战一片大不好的形势\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDYxMjM5OA==&mid=2247485824&idx=1&sn=a1577dce5f2856dc79938020b4513b91\",\n \"WGCLOUD存在默认账号密码admin/111111 附POC\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzYzMTE5OA==&mid=2247484396&idx=1&sn=a8f2c28abe260f1f3594dc50e17f5ad7\",\n \"使用polardbx数据库成功部署RuoYi系统\": \"https://mp.weixin.qq.com/s?__biz=MzU3MDEwMjk2MQ==&mid=2247485262&idx=1&sn=684ac5d9664af7d18fb661b52836295c\",\n \"目录索引、目录穿越漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247490905&idx=1&sn=bd00002f4135e34aa27f79b5a5030478\",\n \"上新日 | Mac 动态壁纸就用 Backdrop，还有系统监控工具 Sensei 上架！\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492678&idx=1&sn=c4238edbac24973c13983b0cc630b1cb\",\n \"三汇网关管理系统 8-1-1userAdd 任意用户创建漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492865&idx=1&sn=8148c29bae271489c0a8951297df2a43\",\n \"借一个如流企业版账号\": \"https://mp.weixin.qq.com/s?__biz=Mzk0OTUxNjc2NA==&mid=2247483953&idx=1&sn=d2030e9c3d194a3f3834efa8036d7212\",\n \"色情泛滥，BOSS直聘也头大！\": \"https://mp.weixin.qq.com/s?__biz=MzU2MjU2MzI3MA==&mid=2247484957&idx=1&sn=87f5ac49cd5bd6c7b30fd975d01a48c0\",\n \"这个开源项目正在改变SSL证书管理方式，你可能还不知道！\": \"https://mp.weixin.qq.com/s?__biz=MzU2MjU2MzI3MA==&mid=2247484957&idx=2&sn=00298ec03ae73416a6de9ec0f8813448\",\n \"加拿大新不伦瑞克大学 | IoT-PRIDS：利用数据包表示进行物联网入侵检测\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493819&idx=1&sn=e17b64cab004281f134a121f71f89bc6\",\n \"9月26日｜以合规为笔，绘就中小微企安全蓝图—第四届“创新·智能”网安大会第四天精彩\": \"https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247517725&idx=1&sn=14c3957e82fc781d1ca4e0b7e58a9b71\",\n \"老板让你做App测试，还在摇头说不会？App渗透逆向课程来袭！文末抽月饼！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MzMzNTUzMA==&mid=2247486216&idx=1&sn=7b18ccc5f090a3f74e1c2e2739fe3d8e\",\n \"UEditor之.Net getshell\": \"https://mp.weixin.qq.com/s?__biz=MzkxODg3MTU4NA==&mid=2247484287&idx=1&sn=89152fbc8345a556eac19af0ddac2b62\",\n \"西宁网警发布，西宁市某单位的关键业务信息系统遭受网络攻击，26台服务器感染勒索病毒，导致系统瘫痪；给我们带来哪些启示？\": \"https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484777&idx=1&sn=cc1b1929f0fe371ff84c1ca1ed98dbb2\",\n \"两大运营商双奖落袋！盛邦安全携中国移动、中国联通深耕5G安全赛道，AI技术成破局关键\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650279039&idx=1&sn=33a320c15f0077c386d9496de3036ba2\",\n \"西宁某关键业务信息系统遭攻击！26台服务器感染勒索病毒\": \"https://mp.weixin.qq.com/s?__biz=MzU1ODM1Njc1Ng==&mid=2247498397&idx=1&sn=553bda3ce1cc1c8ecdea5457e7058cb6\",\n \"砥砺翱翔凌云志 扬帆奋进谱新篇\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247538018&idx=1&sn=8222be34b4dfce9fd5770c0ec9d8118c\",\n \"开箱即用，老板最想要的开源工业IoT物联网平台，适配MQTT、DTU、西门子PLC、欧姆龙Modbus，3D可视化组态大屏\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454940019&idx=1&sn=babfe7483fbe3154a582ee9134297070\",\n \"安全运营中心（SOC）的告警降噪\": \"https://mp.weixin.qq.com/s?__biz=MzI4NzA1Nzg5OA==&mid=2247486136&idx=1&sn=4a1c5a4a0b346980db3dd6f5126445e1\",\n \"朝鲜黑客使用新的 AkdoorTea 后门攻击全球加密货币开发人员\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDg3MTM3Nw==&mid=2247484634&idx=1&sn=de8a37d99631e5ce7aa5f9722675eb53\",\n \"航海行业网络安全正悄然撞向冰山\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643980&idx=1&sn=f1a027521cfefbf1e44b9c949946d4d2\",\n \"阿里云与Omdia联合发布AI安全报告，引领构建全新AI安全范式\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643980&idx=2&sn=8bc95127d2f5bdf2f320cd260133760e\",\n \"知识星球 | 2025年“安全科技”全网报告合集\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643980&idx=3&sn=983bb18828759b873386ce0af85a93fb\",\n \"免费赠送 | 2025国家网络安全宣传周 · 企业高管安全意识资料合集\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643980&idx=4&sn=ba3536375d0598b4795c29eed2b30217\",\n \"荣誉殿堂 | 广东移动与华为星河AI网络安全联合项目荣获ICT中国（2025）优秀案例与解决方案一等奖\": \"https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247506504&idx=1&sn=0348341417d47b098e2e990b04baf25a\",\n \"网络安全靠人民，网络安全为人民——江苏国保积极支撑2025网络安全宣传周\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTQ4NTI0OA==&mid=2247487731&idx=1&sn=fc2921394d1f7dbb66410f50f5d6b7a3\",\n \"安全小知识-第五期-SSL/TLS ：构建可靠的数据传输保护\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Njk1NDg5NQ==&mid=2247483966&idx=1&sn=5cf03c2dae82b339b7aaa52266f913e1\",\n \"信息安全漏洞周报【第041期】\": \"https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064357&idx=1&sn=f7bc7fc7e9366c6ce1f58a0697e995f1\",\n \"新一轮通过国密局技术评审的48家密评机构名单公示\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247579660&idx=1&sn=82567b2223796cbd92477c2212ec66a0\",\n \"26台服务器被锁，西北某关键业务信息系统遭攻击\": \"https://mp.weixin.qq.com/s?__biz=MzA4NDA3ODc3OQ==&mid=3045898261&idx=1&sn=c91a4fca66402179898fcd3e2bb1d587\",\n \"省下千万营销费，腾讯云天御破局快消黑产困局\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247528008&idx=1&sn=011bb690c78336be820e10acdca236ce\",\n \"【高危漏洞预警】GitLab多款产品代码执行漏洞CVE-2025-9642\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490796&idx=1&sn=455ec8870282730b204e1a6b44397321\",\n \"北京大学：智能网联汽车的车载网络攻防技术研究进展\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247627591&idx=1&sn=cc0f69b6f44ec69006516d25774166c3\",\n \"中央计算平台集成与OTA合规实战培训课程 2025\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247627591&idx=2&sn=a33358d57b3599568b1a41c7f5c2fefc\",\n \"中汽科技：智能网联汽车信息安全测试研究\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247627591&idx=3&sn=754bdc6c51d4e7d34deeed0f0d0650c6\",\n \"【安全圈】浙江网安成功侦破无人机飞控破解案，两名嫌疑人落网\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=1&sn=2e25c4c3bf00d8aa24e9fa90e7f21c77\",\n \"【安全圈】武功警方成功捣毁跨区域侵犯公民个人信息犯罪团伙，156人落网\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=2&sn=d50c598040d806a8d2ff7ee53304402d\",\n \"【安全圈】Cloudflare CDN 节点 0day 漏洞现身暗网，引发全球安全担忧\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=3&sn=de5284fc89ef7ff00ef7724fb32e0f7f\",\n \"【安全圈】萧山警方跨省出击，成功打掉“银狐”木马开发团伙\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=4&sn=ea7e1ab21e5e7045e0fca7975cf51caf\",\n \"自动驾驶汽车功能安全与网络安全的融合\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247560216&idx=1&sn=17ffb9bbfff96cf7f5b1e132674bba23\",\n \"华夏银行AI落地五大领域，人力降本超千万\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932721&idx=1&sn=7469f6fdf783eecd67b9457d1b767c4f\",\n \"AI快讯：支付行业专属大模型发布，谷歌发布新一代具身AI模型\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932721&idx=2&sn=83d8707e1146fc6e735b8a2ab5b16880\",\n \"23.3万！天津银行反洗钱系统增设智慧尽调AI小助手项目\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932721&idx=3&sn=aa79505811f3a9403ade8635ee2377eb\",\n \"京北方200640元中标中国银行青海省分行RPA特色场景一期建设项目\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932721&idx=4&sn=cdf9ee8c63728385d45ad65115d086ff\",\n \"情报分析的核心方法\": \"https://mp.weixin.qq.com/s?__biz=MzkxMDIwMTMxMw==&mid=2247494903&idx=1&sn=662e54e18409f17fb35c98c16fb58537\",\n \"启明星辰出席第40次全国计算机安全学术交流会，解码大模型应用安全新蓝图\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651734452&idx=1&sn=35c0db9630c4aee6f8573554a85c8e57\",\n \"标准引领！启明星辰集团深度参编《政务大模型应用安全规范》\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651734452&idx=2&sn=039e355e37f75e24aaa4fc1e1dcafc0f\",\n \"【黑产手记 | 我如何用一份桌面明文文件，入侵一家企业的安全系统？】\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MzA4NTM0OA==&mid=2247493968&idx=1&sn=d7df4c00819649d016b9d0a12ff56375\",\n \"天唯家人庆生啦！7-9 月寿星欢聚，这场生日会藏满心意\": \"https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247504764&idx=1&sn=d13167c5c3e476202b48eb018405146e\",\n \"博世追加裁员1.3万人！\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247560214&idx=1&sn=82c818586e98ad544e8b6dd96d4b4b34\",\n \"技术分享｜透过iOS 26，探寻iOS安全机制升级对取证工作的影响\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MjE1NjQ0NA==&mid=2247514814&idx=1&sn=0e184767695c25ff946e83aeb42c67cd\",\n \"用AI改造SOAR！斗象SOC产品系列全新嵌入AI-SOAR Agent\": \"https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495094&idx=1&sn=7ca2017184bf16675194cf170f3e5524\",\n \"通过 Windows 快捷方式 (LNK) 绕过 Web 标记 (MoTW)：LNK 踩踏技术\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247532883&idx=1&sn=7f380faf23bb5070cad16eca8cd54c6c\",\n \"细说当白帽的这些坑，不信你没踩过\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649769430&idx=1&sn=135119eb5da9785376aee21eed172a23\",\n \"网安职业的五大残酷现实；暗网监控实战指南 | 2025网安行业优质播客精选集⑩\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328148&idx=2&sn=c6a9a035584e974f0730e8a80cddc049\",\n \"AI对抗AI：微软成功拦截利用LLM生成混淆代码的网络钓鱼攻击\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328148&idx=1&sn=3a6225c9e9eeea7d34b1aa1cca289b2c\",\n \"思科两大0day漏洞同时曝光：ASA/FTD设备VPN缺陷可导致Root权限远程代码执行\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328148&idx=3&sn=3160acb4fb312738f62cc4538cc32cd1\",\n \"NVIDIA修复Megatron-LM AI框架中的高危代码注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328148&idx=4&sn=448221c674e1bd99361e90dd14d67bbc\",\n \"奇安信受邀出席2025民营经济创新发展大会，以AI与安全双擎助力陕西高质量发展\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629203&idx=1&sn=3f790e00bd2a83aac709b67f32099d63\",\n \"奇安信入选安全牛《私有云泛主机安全》重点推荐厂商\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629203&idx=2&sn=ba4489584bad9767c54f10acbaa398be\",\n \"发布 | 七部门联合印发《关于“人工智能+交通运输”的实施意见》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=1&sn=de2126240c2451163b5ec03fe6d58aba\",\n \"专家解读｜以内容标识化解治理困境，筑牢“人工智能+”行动安全底座\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=2&sn=afd8856e754c68f4513804f138d3f6c8\",\n \"专家观点 | 防范人工智能法律风险\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=3&sn=d52f00dc6ac19199d371ff47430070b4\",\n \"国际 | 加拿大数据隐私法律规制\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=4&sn=440e11f041e6f62c8c77b2bf0f827edb\",\n \"一图读懂 | 《“人工智能+交通运输”实施意见》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=5&sn=a5c5eb6e9f17c14821a15035fd70624c\",\n \"节前预警: 勒索双雄高度活跃！360构建全链路防御体系助力政企机构无忧值守\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582290&idx=1&sn=71b008b9057282b1c0b1d85d77b5ce0d\",\n \"共启教育数字化黄金时代！360启动“联创共营”伙伴招募计划\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582290&idx=2&sn=3ebd0e581a5f638356f5d6e2765a5bf4\",\n \"【成功复现】SimStudioAI服务端请求伪造漏洞(CVE-2025-9805)\": \"https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503623&idx=1&sn=a0a03137b9df5313e408854649c12b78\",\n \"【BUGBANK平台倾情助力】聚焦可信AI安全！SDC2025 议题重磅揭晓\": \"https://mp.weixin.qq.com/s?__biz=MzAxODg1MDMwOQ==&mid=2247508417&idx=1&sn=90e4034ff91bb9e96224df5b6845e1e5\",\n \"获取CISSP认证，加固您的网络安全职业“护城河”\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247493162&idx=1&sn=02102196fbfc330eee0cfacbd265ff90\",\n \"速修复！思科ASA 两个0day漏洞已遭利用，列入 CISA KEV 清单\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524078&idx=1&sn=a668c49a8bfda90e1da60201307dc79b\",\n \"Salesforce 修复严重的 ForceLeaked 漏洞，通过AI提示注入暴露 CRM 数据\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524078&idx=2&sn=e6d2b91dedf49a963971709b2ead7110\",\n \"记一次组合拳之SPEL(重在思路分享+payload)\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247523267&idx=1&sn=3cf4b4e90097e67581f0dd823f1d51a7\",\n \"[图文]用一种新方法帮助你去理解人工智能的思维方式\": \"https://mp.weixin.qq.com/s?__biz=MzkwMjQyNjAxMA==&mid=2247485613&idx=1&sn=c281613b523bac9cba076b7185c470d6\",\n \"前端限制？黑客是如何绕过付费限制的-实战漏洞案例讲解\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NTYwNzY3NQ==&mid=2247483908&idx=1&sn=ecd2a878ca523f458155f26b67f453f3\",\n \"北京网络安全政策密集落地！企业如何合规破局？这份指南请收好\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDkyNTQ2OA==&mid=2247486240&idx=1&sn=30e9eac45f65074d6de58ac5c75fb487\",\n \"高度认可！亚信安全荣膺成都世运会“精彩世运 感谢有您”荣誉\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650625445&idx=1&sn=5b7ea33c44a866b0ce473351c3e0206d\",\n \"MS08067实验室助力中国工商银行成功举办2025网络安全攻防实战专项培训活动\": \"https://mp.weixin.qq.com/s?__biz=MzU1NjgzOTAyMg==&mid=2247524739&idx=1&sn=f8742ec5d8d304d4f4c365796f54a031\",\n \"“AI与网络安全”课程 : 999元学双技\": \"https://mp.weixin.qq.com/s?__biz=MzU1NjgzOTAyMg==&mid=2247524739&idx=2&sn=bf6eb2fa06588622fcff60cad7c003e2\",\n \"36.3万亿美元交易量背后：USDT 被黑灰产利用的六大犯罪新路径\": \"https://mp.weixin.qq.com/s?__biz=MzkyMzI2NzIyMw==&mid=2247489984&idx=1&sn=31ff9fb2f2a097461f5b619f14e8b5aa\",\n \"每周蓝军技术推送（2025.9.20-9.26）\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494429&idx=1&sn=a4d6c8748f2e1b79bee3773f41805003\",\n \"筑牢安全基底，护航数智未来 | CCS2025成都网络安全技术交流活动圆满结束\": \"https://mp.weixin.qq.com/s?__biz=MzkwMjI2MDQwMA==&mid=2247487117&idx=1&sn=1e6e3e50d679708352e466ebefe6c7ea\",\n \"守护金融视界，筑牢视频安全防线 | 慧盾银行视频监控系统安全解决方案\": \"https://mp.weixin.qq.com/s?__biz=MzI2NDcwOTgzOA==&mid=2247493617&idx=1&sn=f2989f2d121a54dad5cb89f42deb8663\",\n \"跨境数据传输新规，这三类数据绝对不能出国！\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjAyMjU4MA==&mid=2649597507&idx=1&sn=aae81a2c4205eb246b0934ffc6690a3d\",\n \"智能时代·可信安全 | 百度安全，即将亮相第九届安全开发者峰会（SDC2025）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=1&sn=2daa95bac4c45ab0f8a4a7faea32c970\",\n \"Overt安全风控检测工具深度解析\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=2&sn=76d957f6d2e21664926a6c93851cd539\",\n \"Chromium 浏览器面临新威胁，黑客可悄无声息装恶意扩展\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=3&sn=9294d5bf1846ee0907acf1f7b09a7ef1\",\n \"2025大厂技术岗实时更新！企业新增职位汇总\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=4&sn=8a9f192670b97914bc3b67912d88606f\",\n \"每周网络安全简讯 ( 2025年 第39周 )\": \"https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247521566&idx=1&sn=f9b005254b5c9fefe5826ee85e4a9181\",\n \"安全动态丨网络空间安全动态第287期\": \"https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247521566&idx=2&sn=93da63ec07285d90c1586495c5d81a80\",\n \"喜报丨中国电子信息产业发展研究院入选“2025年AMI智库入库单位”，1项成果入选“中国特色新型智库建设十周年回顾特色案例”\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254536&idx=1&sn=83db212d10143d45ae51ccbf3716f8bc\",\n \"【邀请加入】《中小企业服务 服务机构 服务工具通用要求》团体标准参编单位征集启动！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254536&idx=2&sn=7e08e194b5a575969071f1b76362755f\",\n \"【数字政府优秀案例联播】广西壮族自治区：医疗救助返贫监测\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254536&idx=3&sn=59a6540543e340a330ceb1f5d1267e0c\",\n \"小米法务重拳出击：部分车主无端遭受网络攻击，已对 92 个恶意侵权账号提起诉讼并协助车主维权 35 起\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247543039&idx=1&sn=c2f1ab28304bab7ae29a46f41656f17c\",\n \"2项数据安全国家标准发布（可下载）\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjUzOTQ0NQ==&mid=2247521623&idx=1&sn=4b506667d1d861fec0108b35dfee9a8a\",\n \"三人非法爬取知名平台8亿条核心数据 检察官亲历性审查破解“核损”难\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601651&idx=1&sn=7af0132fb2fcbe4d5149d31dc8fbd8fd\",\n \"天融信在全国计算机安全学术交流会上探讨智能体安全，再获“优秀论文”及“特别贡献奖”\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601651&idx=2&sn=e36d6b30dc2bd1dd30dda7ecb099cb48\",\n \"自主可信计算与数据流通基础设施安全论坛在京成功举办\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601651&idx=3&sn=23944de9716be8098a49a167d24a1b9b\",\n \"微信开发工程师总结的20条C++性能陷阱与实用特性，读起来很过瘾\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649795793&idx=1&sn=2d1c95da6bef1ff5b89cc7eaa2241e30\",\n \"每日安全动态推送(25/9/26)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960227&idx=1&sn=b480c32ba0d546f93714b1740c43c2b0\",\n \"00后黑客落网！曾运营大型僵尸网络，频繁攻击腾讯游戏、DeepSeek、X平台\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207428&idx=1&sn=69d9a6d43e2f41fe1bbe6f5205b69607\",\n \"DevSecOps-多研发模式安全进击\": \"https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247493128&idx=1&sn=237a56474fa1e73005596d8b85b03775\",\n \"渗透测试JS接口Fuzz场景研究\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498316&idx=1&sn=59d1d7e00eaf8323d7a7f1b89a05ec76\",\n \"人工智能产业及赋能新型工业化大会｜观安信息：以AI SOC驱动安全运营智能化\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247509470&idx=1&sn=c6f3d7158784d117017b9d24112a1bf1\",\n \"荣获认证丨华清信安荣获网络安全技术支撑单位\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDEwMDc1Nw==&mid=2651055470&idx=1&sn=89a3c6252291517bb33d7d4e2efcb339\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"Authorization Bypass: The Simple SSO Mistake\": \"https://infosecwriteups.com/authorization-bypass-the-simple-sso-mistake-c8bd261b961c?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Tooling via Browser Automation\": \"https://infosecwriteups.com/tooling-via-browser-automation-5336b17c5497?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Terrier Cyber Quest 2025 — Brief Write-up\": \"https://infosecwriteups.com/terrier-cyber-quest-2025-brief-write-up-b001310d025c?source=rss----7b722bfd1b8d--bug_bounty\",\n \"“The Registration Flaw That Almost Got Missed: Hunting Weak Authentication Links”\": \"https://infosecwriteups.com/the-registration-flaw-that-almost-got-missed-hunting-weak-authentication-links-75337daa6bf9?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"SpiderLabs Blog\": {\n \"REDCap: Multiple Cross-Site Scripting (XSS) Vulnerabilities\": \"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/redcap-multiple-cross-site-scripting-xss-vulnerabilities/\"\n },\n \"GuidePoint Security\": {\n \"The 4 Levels of Risk Register Maturity\": \"https://www.guidepointsecurity.com/blog/the-4-levels-of-risk-register-maturity/\"\n },\n \"Project Zero\": {\n \"Pointer leaks through pointer-keyed data structures\": \"https://googleprojectzero.blogspot.com/2025/09/pointer-leaks-through-pointer-keyed.html\"\n },\n \"Malwarebytes\": {\n \"Hackers threaten parents: Get nursery to pay ransom or we leak your child’s data\": \"https://www.malwarebytes.com/blog/news/2025/09/hackers-threaten-parents-get-nursery-to-pay-ransom-or-we-leak-your-childs-data\",\n \"Google and Flo to pay $56 million after misusing users’ health data\": \"https://www.malwarebytes.com/blog/news/2025/09/google-and-flo-to-pay-56-million-after-misusing-users-health-data\",\n \"Neon App pays users to record their phone calls, sells data for AI training\": \"https://www.malwarebytes.com/blog/news/2025/09/neon-app-pays-users-to-record-their-phone-calls-sells-data-for-ai-training\"\n },\n \"SentinelOne\": {\n \"The Good, the Bad and the Ugly in Cybersecurity – Week 39\": \"https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-39-7/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"在笔记本电脑上模拟宇宙\": \"https://www.solidot.org/story?sid=82428\",\n \"ROG Xbox Ally X 售价 1000 美元\": \"https://www.solidot.org/story?sid=82427\",\n \"OpenAI 准备建造的数据中心消耗的电力相当于纽约和圣迭戈\": \"https://www.solidot.org/story?sid=82426\",\n \"微软禁止以色列国防部使用它的某些云服务\": \"https://www.solidot.org/story?sid=82425\",\n \"对 117 岁寿星的 DNA 研究揭示了长寿的线索\": \"https://www.solidot.org/story?sid=82423\",\n \"中国学者《科学》论文接受率为北美同行 1/4\": \"https://www.solidot.org/story?sid=82422\"\n },\n \"HackerNews\": {\n \"Vane Viper 为恶意软件与广告欺诈提供支持\": \"https://hackernews.cc/archives/60957\",\n \"Salesforce 修复严重 ForcedLeak 漏洞\": \"https://hackernews.cc/archives/60954\",\n \"与越南威胁行为者相关的钓鱼攻击活动升级\": \"https://hackernews.cc/archives/60952\",\n \"英国零售商 Co-op 因网络攻击营收减少约 2.75 亿美元\": \"https://hackernews.cc/archives/60950\",\n \"沃尔沃北美公司供应商遭勒索\": \"https://hackernews.cc/archives/60948\",\n \"美国马里兰州交通遭网络攻击，勒索团伙要价30枚比特币\": \"https://hackernews.cc/archives/60946\"\n },\n \"腾讯玄武实验室\": {\n \"每日安全动态推送(25/9/26)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960227&idx=1&sn=b480c32ba0d546f93714b1740c43c2b0\"\n },\n \"安全客\": {\n \"美国战争部全面升级网络防御：从静态防护到动态实战\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789098&idx=1&sn=fc06f21f9ebd718acac25891c2ed29e8\"\n },\n \"看雪学苑\": {\n \"智能时代·可信安全 | 百度安全，即将亮相第九届安全开发者峰会（SDC2025）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=1&sn=2daa95bac4c45ab0f8a4a7faea32c970\",\n \"Overt安全风控检测工具深度解析\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=2&sn=76d957f6d2e21664926a6c93851cd539\",\n \"Chromium 浏览器面临新威胁，黑客可悄无声息装恶意扩展\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=3&sn=9294d5bf1846ee0907acf1f7b09a7ef1\",\n \"2025大厂技术岗实时更新！企业新增职位汇总\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601197&idx=4&sn=8a9f192670b97914bc3b67912d88606f\"\n },\n \"天御攻防实验室\": {\n \"美国国防部有24.5万网络安全人员\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486534&idx=1&sn=8f4ac53410b7515714fbe209393e74aa\"\n },\n \"dotNet安全矩阵\": {\n \".NET内网实战：通过劫持 JIT 内存编译执行ShellCode\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500693&idx=1&sn=7239a31ac4decc690842ee9d3e7d030e\",\n \"[ .NET 安全代码审计 ] 从零基础到高阶实战，开启漏洞赏金之路\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500693&idx=2&sn=d76a91844c2376e4dda8f83efa57fb27\",\n \".NET内网实战： 通过LNK 文件实现目标权限持久化\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500693&idx=3&sn=880e6f3a67ff4ec59fcd982b7174fa90\"\n },\n \"奇安信威胁情报中心\": {\n \"奇安信威胁情报MCP V2.0全新升级：洞察“幕后黑手”，威胁行为体画像功能全面上线！\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247516188&idx=1&sn=b759c8c9646fb7d067d093f7745b7a0f\",\n \"每周高级威胁情报解读(2025.09.19~09.25)\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247516188&idx=2&sn=e9b8f85fe0093fc134fe26b494bdc8c3\"\n },\n \"代码卫士\": {\n \"速修复！思科ASA 两个0day漏洞已遭利用，列入 CISA KEV 清单\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524078&idx=1&sn=a668c49a8bfda90e1da60201307dc79b\",\n \"Salesforce 修复严重的 ForceLeaked 漏洞，通过AI提示注入暴露 CRM 数据\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524078&idx=2&sn=e6d2b91dedf49a963971709b2ead7110\"\n },\n \"安全学术圈\": {\n \"加拿大新不伦瑞克大学 | IoT-PRIDS：利用数据包表示进行物联网入侵检测\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493819&idx=1&sn=e17b64cab004281f134a121f71f89bc6\"\n },\n \"虎符智库\": {\n \"网络安全的AI Agent革命：从工具之战到生命级的生态博弈\": \"https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493490&idx=1&sn=5fe77d9f9bf6a4302a67094153bfd77d\"\n },\n \"安全内参\": {\n \"国内知名地图软件厂商8亿条核心数据遭非法爬取\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515053&idx=1&sn=dbdf90f9dfa35613ebe719eca5a98c87\"\n },\n \"奇安信病毒响应中心\": {\n \"每周勒索威胁摘要\": \"https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498542&idx=1&sn=ad750077893bb3dc716922db789dffaa\"\n },\n \"安全圈\": {\n \"【安全圈】浙江网安成功侦破无人机飞控破解案，两名嫌疑人落网\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=1&sn=2e25c4c3bf00d8aa24e9fa90e7f21c77\",\n \"【安全圈】武功警方成功捣毁跨区域侵犯公民个人信息犯罪团伙，156人落网\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=2&sn=d50c598040d806a8d2ff7ee53304402d\",\n \"【安全圈】Cloudflare CDN 节点 0day 漏洞现身暗网，引发全球安全担忧\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=3&sn=de5284fc89ef7ff00ef7724fb32e0f7f\",\n \"【安全圈】萧山警方跨省出击，成功打掉“银狐”木马开发团伙\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=4&sn=ea7e1ab21e5e7045e0fca7975cf51caf\"\n },\n \"中国信息安全\": {\n \"发布 | 七部门联合印发《关于“人工智能+交通运输”的实施意见》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=1&sn=de2126240c2451163b5ec03fe6d58aba\",\n \"专家解读｜以内容标识化解治理困境，筑牢“人工智能+”行动安全底座\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=2&sn=afd8856e754c68f4513804f138d3f6c8\",\n \"专家观点 | 防范人工智能法律风险\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=3&sn=d52f00dc6ac19199d371ff47430070b4\",\n \"国际 | 加拿大数据隐私法律规制\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=4&sn=440e11f041e6f62c8c77b2bf0f827edb\",\n \"一图读懂 | 《“人工智能+交通运输”实施意见》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250157&idx=5&sn=a5c5eb6e9f17c14821a15035fd70624c\"\n },\n \"数世咨询\": {\n \"AI正在改变网络安全初级岗位招聘 — 技能缺口的性质也在重塑\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540383&idx=1&sn=c8089dcfd37c8ebe090e3bc8b9761448\",\n \"直播预告 | 绿盟科技大模型安全创新秋季成果发布\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540383&idx=2&sn=5ee91c953351fa36245f33c7d38d9675\"\n },\n \"天黑说嘿话\": {\n \"CodeQL代码审计初探\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484659&idx=1&sn=d662852223dc842595ea6b7d534f50c6\"\n },\n \"腾讯安全应急响应中心\": {\n \"00后黑客落网！曾运营大型僵尸网络，频繁攻击腾讯游戏、DeepSeek、X平台\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207428&idx=1&sn=69d9a6d43e2f41fe1bbe6f5205b69607\"\n },\n \"M01N Team\": {\n \"每周蓝军技术推送（2025.9.20-9.26）\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494429&idx=1&sn=a4d6c8748f2e1b79bee3773f41805003\"\n },\n \"情报分析师\": {\n \"情报分析师教你从身体语言解读人心\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562251&idx=1&sn=2823b2d4f5786fc5afcaf652e544d09c\",\n \"尼泊尔首位女总理卡尔基上任，中尼关系未来走向如何？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562251&idx=2&sn=903c950a2e179ad20457808c9c46eb1d\"\n },\n \"极客公园\": {\n \"168 元一年的「小红卡」，是小红书打破本地生活红海的钥匙\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653087441&idx=1&sn=d8805f53f951b34cee0e4a0adac8e6d4\",\n \"透视阿里云产品生态团队：AI 落地的「关键通道」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653087422&idx=1&sn=58c4d375370cce2b09363ab6a18875a5\",\n \"小米 17 系列发布，4499 起；追觅「库里南」图片曝光；YU7 Max 成「百万最速」车 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653087390&idx=1&sn=278c514d7b50d3f9009193ad50d557fc\"\n },\n \"嘶吼专业版\": {\n \"NPM供应链攻击“Shai-Hulud”持续发酵：187款NPM包遭攻陷 含自传播恶意载荷\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584747&idx=1&sn=08d7d48ba9f44226ba8dc4a66532e17e\",\n \"最新DDoS攻击创纪录：峰值达22.2 Tbps、106亿PPS\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584747&idx=2&sn=d9f364b5e50395a02737d94d65b9c40f\"\n },\n \"微步在线\": {\n \"微步官方IP形象正式发布！\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650184753&idx=1&sn=fcb6887d083c22f7493998afeaa25d57\"\n },\n \"斗象智能安全\": {\n \"用AI改造SOAR！斗象SOC产品系列全新嵌入AI-SOAR Agent\": \"https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495094&idx=1&sn=7ca2017184bf16675194cf170f3e5524\"\n },\n \"火绒安全\": {\n \"【火绒安全周报】谷歌紧急修复被利用的零日漏洞/19岁黑客被指控面临最高95年徒刑\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247526870&idx=1&sn=4b3d64f4d2e067c054bf4f27cb1653e5\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247526870&idx=2&sn=014de5e9afcdd11a9790e14f8d2b0321\"\n },\n \"阿里安全响应中心\": {\n \"阿里云与Omdia联合发布AI安全报告，引领构建全新AI安全范式\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998141&idx=1&sn=3e6b6a44237527b08573511f29ed9167\"\n },\n \"迪哥讲事\": {\n \"渗透测试JS接口Fuzz场景研究\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498316&idx=1&sn=59d1d7e00eaf8323d7a7f1b89a05ec76\"\n },\n \"IT Service Management News\": {\n \"La legge italiana sull'intelligenza artificiale\": \"http://blog.cesaregallotti.it/2025/09/la-legge-italiana-sullintelligenza_26.html\"\n },\n \"ICT Security Magazine\": {\n \"Cybersecurity e AI Act: come l’UE regolamenta l’intelligenza artificiale sul lavoro\": \"https://www.ictsecuritymagazine.com/articoli/ai-act/\"\n },\n \"Yak Project\": {\n \"指针处理太难啃？看 IRify 如何一步步搞定突破口！\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528677&idx=1&sn=eed9c8a275d803ee22aa9bb82638df7e\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Microsoft’s new AI feature will organize your photos automatically\": \"https://www.bleepingcomputer.com/news/microsoft/microsofts-new-ai-feature-will-organize-your-photos-automatically/\",\n \"Ransomware attack on Ohio county impacts over 45,000 residents, employees\": \"https://therecord.media/ohio-ransomware-attack-impacts-45000\",\n \"US investors to take over TikTok operations in the country\": \"https://www.bleepingcomputer.com/news/government/us-investors-to-take-over-tiktok-operations-in-the-country/\",\n \"Smantellata una delle maggiori Sim farm mai scoperte: un rischio per la sicurezza nazionale\": \"https://www.cybersecurity360.it/nuove-minacce/smantellata-una-delle-maggiori-sim-farm-mai-scoperte-un-rischio-per-la-sicurezza-nazionale/\",\n \"Microsoft shares temp fix for Outlook encrypted email errors\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-shares-temp-fix-for-outlook-encrypted-email-errors/\",\n \"Microsoft-Israele, stop all’uso di AI e cloud per sorvegliare i palestinesi: gli impatti geopolitici\": \"https://www.cybersecurity360.it/cybersecurity-nazionale/microsoft-contro-israele-stop-alluso-di-ai-e-cloud-per-sorvegliare-i-palestinesi-gli-impatti-geopolitici/\",\n \"Microsoft Edge to block malicious sideloaded extensions\": \"https://www.bleepingcomputer.com/news/security/microsoft-edge-to-block-malicious-sideloaded-extensions/\",\n \"Quando la PA confonde pubblicità con trasparenza: rischi elevati per i nostri dati online\": \"https://www.cybersecurity360.it/legal/privacy-dati-personali/quando-la-pa-confonde-pubblicita-con-trasparenza-rischi-elevati-per-i-nostri-dati-online/\",\n \"The hidden cyber risks of deploying generative AI\": \"https://www.bleepingcomputer.com/news/security/the-hidden-cyber-risks-of-deploying-generative-ai/\",\n \"Africa cybercrime crackdown includes hundreds of arrests, Interpol says\": \"https://therecord.media/africa-cyber-fraud-crackdown-ghana-senegal-cote-divoire-angola-interpol\",\n \"DMA sotto assedio: la richiesta di Apple e il futuro della regolazione digitale\": \"https://www.cybersecurity360.it/legal/dma-sotto-assedio-la-richiesta-di-apple-e-il-futuro-della-regolazione-digitale/\",\n \"Diritto di accesso, il ritardo nella risposta costa 100mila euro a una banca\": \"https://www.cybersecurity360.it/news/diritto-di-accesso-il-ritardo-nella-risposta-costa-100mila-euro-a-una-banca/\",\n \"Più convinti che sicuri?\": \"https://www.cybersecurity360.it/cultura-cyber/piu-convinti-che-sicuri/\",\n \"Teens arrested by Dutch police reportedly suspected of spying for Russia\": \"https://therecord.media/teens-arrested-netherlands-reportedly-suspected-cyber-espionage-russia\",\n \"Sintesi riepilogativa delle campagne malevole nella settimana del 20 – 26 settembre\": \"https://cert-agid.gov.it/news/sintesi-riepilogativa-delle-campagne-malevole-nella-settimana-del-20-26-settembre/\",\n \"Maximum severity GoAnywhere MFT flaw exploited as zero day\": \"https://www.bleepingcomputer.com/news/security/maximum-severity-goanywhere-mft-flaw-exploited-as-zero-day/\",\n \"Microsoft releases the final Windows 10 22H2 preview update\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-the-final-windows-10-22h2-preview-update/\",\n \"As fraud surges, UK prepares to replace its broken reporting service\": \"https://therecord.media/uk-action-fraud-replacement-report-fraud\",\n \"I servizi segreti USA smantellano server con 100.000 SIM. Ma era davvero un piano terroristico?\": \"https://www.cybersecurity360.it/news/i-servizi-segreti-usa-smantellano-server-con-100-000-sim-ma-era-davvero-un-piano-terroristico/\",\n \"Framework nazionale cyber in azione: metodologia di contestualizzazione ispirata al NIST CSF 2.0\": \"https://www.cybersecurity360.it/legal/fncdp-2-1-in-azione-la-metodologia-di-contestualizzazione-ispirata-al-nist-csf-2-0/\",\n \"Australia Ransomware Landscape 2025: Rich Targets Attract Ransomware Groups\": \"https://cyble.com/blog/ransomware-groups-targets-australia-and-new-zealand/\",\n \"Troubleshooting WordPress: How to Fix the White Screen of Death (WSoD)\": \"https://blog.sucuri.net/2025/09/troubleshooting-wordpress-how-to-fix-the-white-screen-of-death.html\"\n },\n \"表图\": {\n \"被算法奴役的社会和跳大神的萨满\": \"https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247484841&idx=1&sn=4e21e64e29a6dde9b161534daed8d5c2\"\n },\n \"悬镜安全\": {\n \"ASPM重磅升级｜GB/T 43698-2024 合规治理驱动数字供应链体系化建设\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647796958&idx=1&sn=6dc27358a68a7e975aa5b2113b9f38bc\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"New tool: convert-ts-bash-history.py, (Fri, Sep 26th)\": \"https://isc.sans.edu/diary/rss/32324\",\n \"ISC Stormcast For Friday, September 26th, 2025 https://isc.sans.edu/podcastdetail/9630, (Fri, Sep 26th)\": \"https://isc.sans.edu/diary/rss/32322\"\n },\n \"Schneier on Security\": {\n \"Friday Squid Blogging: Jigging for Squid\": \"https://www.schneier.com/blog/archives/2025/09/friday-squid-blogging-jigging-for-squid.html\",\n \"Digital Threat Modeling Under Authoritarianism\": \"https://www.schneier.com/blog/archives/2025/09/digital-threat-modeling-under-authoritarianism.html\"\n },\n \"白帽子章华鹏\": {\n \"关于做好26年企业安全规划\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650237790&idx=1&sn=b9f4488a84713fd594674e888b7c5341\"\n },\n \"360数字安全\": {\n \"节前预警: 勒索双雄高度活跃！360构建全链路防御体系助力政企机构无忧值守\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582290&idx=1&sn=71b008b9057282b1c0b1d85d77b5ce0d\",\n \"共启教育数字化黄金时代！360启动“联创共营”伙伴招募计划\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582290&idx=2&sn=3ebd0e581a5f638356f5d6e2765a5bf4\"\n },\n \"Security Affairs\": {\n \"Microsoft uncovers new variant of XCSSET macOS malware in targeted attacks\": \"https://securityaffairs.com/182662/malware/microsoft-uncovers-new-variant-of-xcsset-macos-malware-in-targeted-attacks.html\",\n \"Hackers exploit Fortra GoAnywhere flaw before public alert\": \"https://securityaffairs.com/182647/hacking/hackers-exploit-fortra-goanywhere-flaw-before-public-alert.html\",\n \"UK NCSC warns that attackers exploited Cisco firewall zero-days to deploy RayInitiator and LINE VIPER malware\": \"https://securityaffairs.com/182639/hacking/uk-ncsc-warns-that-attackers-exploited-cisco-firewall-zero-days-to-deploy-rayinitiator-and-line-viper-malware.html\",\n \"Google warns of Brickstorm backdoor targeting U.S. legal and tech sectors\": \"https://securityaffairs.com/182609/malware/google-warns-of-brickstorm-backdoor-targeting-u-s-legal-and-tech-sectors.html\"\n },\n \"君哥的体历\": {\n \"金融系统数据脱敏、环境隔离、链路加密与BYOD管控的合规实践与落地平衡｜总第300周\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492227&idx=1&sn=67d3a20c15c77fcf8730416559d731cb\"\n },\n \"The Hacker News\": {\n \"Researchers Expose SVG and PureRAT Phishing Threats Targeting Ukraine and Vietnam\": \"https://thehackernews.com/2025/09/researchers-expose-svg-and-purerat.html\",\n \"New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks\": \"https://thehackernews.com/2025/09/new-coldriver-malware-campaign-joins-bo.html\",\n \"Crash Tests for Security: Why BAS Is Proof of Defense, Not Assumptions\": \"https://thehackernews.com/2025/09/crash-tests-for-security-why-bas-is.html\",\n \"Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure\": \"https://thehackernews.com/2025/09/fortra-goanywhere-cvss-10-flaw.html\",\n \"New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module\": \"https://thehackernews.com/2025/09/new-macos-xcsset-variant-targets.html\",\n \"Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER Malware\": \"https://thehackernews.com/2025/09/cisco-asa-firewall-zero-day-exploits.html\"\n },\n \"Deeplinks\": {\n \"Fair Use Protects Everyone—Even the Disney Corporation\": \"https://www.eff.org/deeplinks/2025/09/fair-use-protects-everyone-even-disney-corporation\",\n \"The Abortion Hotline Meta Wants to Go Dark\": \"https://www.eff.org/deeplinks/2025/09/silencing-abortion-providers-meta\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Riker's Curse, River City, EDR-Freeze, MCP, WordPress, GitHub, Josh Marpet, and More. - SWN #515\": \"http://sites.libsyn.com/18678/rikers-curse-river-city-edr-freeze-mcp-wordpress-github-josh-marpet-and-more-swn-515\"\n }\n}"}}, "archive/tmp/2025-02-07.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747326.0011117, "n": 49304, "h": "2d63d8c8e083dcc2", "c": "{\n \"A Few Thoughts on Cryptographic Engineering\": {\n \"How to prove false statements? (Part 2)\": \"https://blog.cryptographyengineering.com/2025/02/06/how-to-prove-false-statements-part-2/\"\n },\n \"Security Boulevard\": {\n \"BTS #45 – Understanding Firmware Vulnerabilities in Network Appliances\": \"https://securityboulevard.com/2025/02/bts-45-understanding-firmware-vulnerabilities-in-network-appliances/\",\n \"Five Must-Know Insights for Credential Monitoring\": \"https://securityboulevard.com/2025/02/five-must-know-insights-for-credential-monitoring/\",\n \"DEF CON 32 – Got 99 Problems But Prompt Injection Ain’t Pineapple\": \"https://securityboulevard.com/2025/02/def-con-32-got-99-problems-but-prompt-injection-aint-pineapple/\",\n \"Invisible Threats: The Rise of AI-Powered Steganography Attacks\": \"https://securityboulevard.com/2025/02/invisible-threats-the-rise-of-ai-powered-steganography-attacks/\",\n \"4 Data-Driven Takeaways from Kasada’s 2025 Account Takeover Trends Report\": \"https://securityboulevard.com/2025/02/4-data-driven-takeaways-from-kasadas-2025-account-takeover-trends-report/\",\n \"https://www.comicagile.net/comic/hire/\": \"https://securityboulevard.com/2025/02/https-www-comicagile-net-comic-hire/\",\n \"AMD Processors Vulnerable to Malicious Microcode\": \"https://securityboulevard.com/2025/02/amd-processors-vulnerable-to-malicious-microcode/\",\n \"Cyber security training for executives: Why and how to build it\": \"https://securityboulevard.com/2025/02/cyber-security-training-for-executives-why-and-how-to-build-it/\",\n \"DEF CON 32 – How We Built Our REDACTED THING This Year\": \"https://securityboulevard.com/2025/02/def-con-32-how-we-built-our-redacted-thing-this-year/\",\n \"Qualys TotalAppSec Strengthens Application Risk Management\": \"https://securityboulevard.com/2025/02/qualys-totalappsec-strengthens-application-risk-management/\"\n },\n \"博客\": {\n \"learn scala-lang\": \"https://dyrnq.com/learn-scala-lang/\"\n },\n \"Trustwave Blog\": {\n \"Will the UK's Ransomware Proposal Work? Trustwave Weighs in on the Potential Impact\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/will-the-uks-ransomware-proposal-work-trustwave-weighs-in-on-the-potential-impact/\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Thu Feb 6 20:22:23 UTC 2025\": \"https://github.com/trickest/cve/commit/dddf859513d562bc50d33a54dfca2b82b73f97fd\",\n \"Update Thu Feb 6 12:25:25 UTC 2025\": \"https://github.com/trickest/cve/commit/2eafd76b7ae41527f30348649a4ed6633abb9398\",\n \"Update Thu Feb 6 04:25:12 UTC 2025\": \"https://github.com/trickest/cve/commit/e2faa574b2286f1f153c3e429c62be0dbaa88dc8\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"PYPI添加了项目归档系统以阻止恶意更新\": \"https://www.4hou.com/posts/LGGv\"\n },\n \"安全脉搏\": {\n \"pgAdmin后台命令执行漏洞（CVE-2023-5002）分析\": \"https://www.secpulse.com/archives/205142.html\",\n \"从靶场到实战：双一流高校多个高危漏洞\": \"https://www.secpulse.com/archives/205871.html\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2025-02-06 Review\": \"http://www.sec-wiki.com/?2025-02-06\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"How to Secure Your Spring Boot Application\": \"https://infosecwriteups.com/how-to-secure-your-spring-boot-application-73bca2206113?source=rss----7b722bfd1b8d---4\",\n \"Hack The Box — UnderPass Walkthrough\": \"https://infosecwriteups.com/hack-the-box-underpass-walkthrough-2d4f493b7db0?source=rss----7b722bfd1b8d---4\",\n \"TryHackMe — Intro to Docker: Writeup/Walkthrough\": \"https://infosecwriteups.com/tryhackme-intro-to-docker-writeup-walkthrough-d8702f84f1c4?source=rss----7b722bfd1b8d---4\",\n \"Moniker Link (CVE-2024–21413) | TryHackMe Walkthrough by Mark de Moras\": \"https://infosecwriteups.com/moniker-link-cve-2024-21413-tryhackme-walkthrough-by-mark-de-moras-88dd08399f34?source=rss----7b722bfd1b8d---4\",\n \"Easy Way to Find Exposed Sensitive API Keys in JS Files\": \"https://infosecwriteups.com/easy-way-to-find-exposed-sensitive-api-keys-in-js-files-d9f9fccb18bb?source=rss----7b722bfd1b8d---4\"\n },\n \"一个被知识诅咒的人\": {\n \"【人工智能】使用Python实现图像风格迁移：理论、算法与实践\": \"https://blog.csdn.net/nokiaguy/article/details/145482849\",\n \"Python与容器编排：使用Kubernetes和Python管理集群的终极指南\": \"https://blog.csdn.net/nokiaguy/article/details/145482828\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"CISA命令机构修补攻击中利用的Linux内核漏洞\": \"https://www.anquanke.com/post/id/303900\",\n \"CISA将Microsoft .NET和Apache OFBiz错误标记为在攻击中被利用\": \"https://www.anquanke.com/post/id/303897\",\n \"再拓联营联运教育伙伴！360携手智榜样发力新质人才培养\": \"https://www.anquanke.com/post/id/303892\",\n \"Microsoft脚本更新可引导媒体以修复BlackLotus BootKit\": \"https://www.anquanke.com/post/id/303889\",\n \"CISA在联邦企业目录中添加了四个漏洞\": \"https://www.anquanke.com/post/id/303886\",\n \"美国CISA将Linux内核缺陷添加到其已知利用漏洞目录中\": \"https://www.anquanke.com/post/id/303883\",\n \"“SparkCat” 恶意软件攻击：安卓与 iOS 用户受威胁，超 24.2 万次下载\": \"https://www.anquanke.com/post/id/303878\",\n \"三星在Galaxy S25手机中引入量子防护技术\": \"https://www.anquanke.com/post/id/303875\",\n \"赛门铁克修补了严重安全漏洞-CVE-2025-24503（CVSSv 4 9.3）\": \"https://www.anquanke.com/post/id/303872\",\n \"DeepSeek漏洞凸显了集中式人工智能漏洞\": \"https://www.anquanke.com/post/id/303869\",\n \"Google Play、Apple App Store应用程序被发现窃取加密钱包\": \"https://www.anquanke.com/post/id/303863\"\n },\n \"Twitter @Nicolas Krassas\": {\n \"Critical Cisco ISE bug can let attackers run commands as root https://www.bleepingcomputer.com/news/security/critical-cisco-ise-bug-can-let-attackers-...\": \"https://x.com/Dinosn/status/1887564949058125838\",\n \"New Lazarus Group campaign targets cryptocurrency wallets https://www.scworld.com/brief/new-lazarus-group-campaign-targets-cryptocurrency-wallets\": \"https://x.com/Dinosn/status/1887564848197673275\",\n \"UN civil aviation agency breach toll confirmed, Arab aviation org compromised https://www.scworld.com/brief/un-civil-aviation-agency-breach-toll-confi...\": \"https://x.com/Dinosn/status/1887564727942799720\",\n \"CISA Adds Five Known Exploited Vulnerabilities to Catalog https://www.cisa.gov/news-events/alerts/2025/02/06/cisa-adds-five-known-exploited-vulnerabil...\": \"https://x.com/Dinosn/status/1887564435020988482\",\n \"Windows Telephony Services: 2025 Patch Diffing & Analysis Part 1 https://blog.securelayer7.net/windows-telephony-services-2025-patch-diffing-and-analy...\": \"https://x.com/Dinosn/status/1887503422783414345\",\n \"ScatterBrain: Unmasking the Shadow of PoisonPlug's Obfuscator https://www.reddit.com/r/ReverseEngineering/comments/1iiz1ps/scatterbrain_unmasking_the_...\": \"https://x.com/Dinosn/status/1887494665328599452\",\n \"North Korean APT Kimsuky Uses forceCopy Malware to Steal Browser-Stored Credentials https://thehackernews.com/2025/02/north-korean-apt-kimsuky-uses-ln...\": \"https://x.com/Dinosn/status/1887492014201032745\",\n \"Bring Your Own Trusted Binary (BYOTB) – BSides Edition https://labs.jumpsec.com/bring-your-own-trusted-binary-byotb-bsides-edition/\": \"https://x.com/Dinosn/status/1887471585210040812\",\n \"Notorious hacker behind 40+ cyberattacks on strategic organizations arrested https://securityaffairs.com/173932/cyber-crime/spanish-police-arrested-no...\": \"https://x.com/Dinosn/status/1887470982043930791\",\n \"Cisco Patches Critical ISE Vulnerabilities Enabling Root CmdExec and PrivEsc https://thehackernews.com/2025/02/cisco-patches-critical-ise.html\": \"https://x.com/Dinosn/status/1887433857051275553\",\n \"Arch Linux on WSL 2: Microsoft Confirms Official Support https://securityonline.info/arch-linux-on-wsl-2-microsoft-confirms-official-support/\": \"https://x.com/Dinosn/status/1887424433339474181\",\n \"Hackers spoof Microsoft ADFS login pages to steal credentials https://www.bleepingcomputer.com/news/security/hackers-spoof-microsoft-adfs-login-pages-...\": \"https://x.com/Dinosn/status/1887345306536120512\",\n \"DOGE latest: Citrix supremo has 'read-only' access to US Treasury payment system https://go.theregister.com/feed/www.theregister.com/2025/02/05/tom_kr...\": \"https://x.com/Dinosn/status/1887345175535444258\",\n \"T3SF: Technical Tabletop Exercises Simulation Framework https://meterpreter.org/t3sf-technical-tabletop-exercises-simulation-framework/\": \"https://x.com/Dinosn/status/1887344929870856626\",\n \"Security Flaws Discovered in Apache Cassandra: Unauthorized Access, Privilege Escalation, and JMX Credential Theft https://securityonline.info/securit...\": \"https://x.com/Dinosn/status/1887344770277654847\",\n \"$50 for Your Data: NOVA Stealer Sold as Malware-as-a-Service https://securityonline.info/50-for-your-data-nova-stealer-sold-as-malware-as-a-service/\": \"https://x.com/Dinosn/status/1887344648051470682\",\n \"Kubernetes Policy Enforcement at Risk: OPA Gatekeeper Bypass Exposes Security Flaws https://securityonline.info/kubernetes-policy-enforcement-at-risk-...\": \"https://x.com/Dinosn/status/1887344567046816112\",\n \"Zyxel Routers Under Attack: Default Credentials (CVE-2025-0890) and Code Injection (CVE-2024-40891), No Patch! https://securityonline.info/zyxel-route...\": \"https://x.com/Dinosn/status/1887344501485674950\",\n \"XE Group Exploits Zero-Day Vulnerabilities in VeraCore – CVE-2024-57968 & CVE-2025-25181 https://securityonline.info/xe-group-exploits-zero-day-vulne...\": \"https://x.com/Dinosn/status/1887344420036514204\",\n \"CVE-2025-20124 (CVSS 9.9) & CVE-2025-20125 (CVSS 9.1): Cisco Patches Critical Flaws in Identity Services Engine https://securityonline.info/cve-2025-2...\": \"https://x.com/Dinosn/status/1887344311689256994\"\n },\n \"Sucuri Blog\": {\n \"Google Tag Manager Skimmer Steals Credit Card Info From Magento Site\": \"https://blog.sucuri.net/2025/02/google-tag-manager-skimmer-steals-credit-card-info-from-magento-site.html\"\n },\n \"Doonsec's feed\": {\n \"Netflix新王炸黑客美剧！《零日风暴》原型竟是红客对美绝密反击？\": \"https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538594&idx=1&sn=83ed47269d8f285f8541db966d465f88\",\n \"免费使用所有Github大模型，包括deepseek-r1、GPT-4 Turbo！\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486519&idx=1&sn=edc5ff84c7170333257be8c1edca3507\",\n \"域名托管到 Cloudflare，白嫖 CDN 和 HTTPS 服务\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NzY0NDY5NQ==&mid=2247483802&idx=1&sn=65c0077bbd8ca7ff5da3baaa41cdd83f\",\n \"启明星辰ADLab：安全人视角的DeepSeek洞察与思考\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODUyOA==&mid=2247492006&idx=1&sn=c1dbc4d7ca66753e044c51ad92a21976\",\n \"知足，天地宽；知止，心自欢。\": \"https://mp.weixin.qq.com/s?__biz=Mzg2MjgwMzIxMA==&mid=2247484924&idx=1&sn=e7fb85c75eebf0bccad5235807978ee9\",\n \"没想到，“漏洞”竟然比“脆弱性”小太太太太多！\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492400&idx=1&sn=5c7dc308f10f7c382d3ed8bb0be0ba5f\",\n \"付费阅读：《风险建模：全新安全思考与建设规划指南》源PPT，持续更新中......\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492400&idx=2&sn=be27be184f1c8083bb9113b54ec49183\",\n \"XX满血版？先别急着充钱！\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzU4ODU2MQ==&mid=2247484071&idx=1&sn=ada764b4d19f7b15c79f46614a488b75\",\n \"实战缓冲区溢出漏洞攻击：从信息收集到成功提权\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDE3NDUwNg==&mid=2247483957&idx=1&sn=2ad699a3f2895d566eab7c2bb52f925e\",\n \"广告追踪暗藏玄机，90%的人都不知道自己被监视的真相\": \"https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489940&idx=1&sn=92797dfa8a15aa6240b834bd87d57085\",\n \"零时科技 || IonicMoney 攻击事件分析\": \"https://mp.weixin.qq.com/s?__biz=MzU1OTc2MzE2Mg==&mid=2247489376&idx=1&sn=d7bdbbec348f88c6c5324d77d99aafe3\",\n \"文首扫码下载 5份算力相关报告\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655265252&idx=1&sn=b11d31554d0bfde7db825b70f558468b\",\n \"网络安全人才框架战略2024\": \"https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247493639&idx=1&sn=f652f82ac2cc0b83256f117e1c6b1149\",\n \"【漏洞预警】libxml2代码执行漏洞(CVE-2022-49043)\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489535&idx=1&sn=b3da75dbb9a3a6cd24e4da4308d06cca\",\n \"【资料4篇】OSINT与反恐\": \"https://mp.weixin.qq.com/s?__biz=MzkxMDIwMTMxMw==&mid=2247494569&idx=1&sn=f40e29ee90fcb0b2419a095f52b31ee8\",\n \"年初抽象之王X\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485397&idx=1&sn=c37bb0ef10f7c9330a3ebb1f809a9f73\",\n \"BloodHound 自定义查询简介\": \"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487056&idx=1&sn=5013e23613dace9189a1eddf613a9590\",\n \"BloodHound Active Directory 自动化渗透测试\": \"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487056&idx=2&sn=280c56df1963316cc48cfb74229b3bc3\",\n \"云安全-s3对象存储攻防\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497041&idx=1&sn=c2296b486d8c497fc59465db612190e9\",\n \"HVV实战课程与超值福利\": \"https://mp.weixin.qq.com/s?__biz=MzkyMDY5OTg5OA==&mid=2247493381&idx=1&sn=bacc6fa41203d864fe4f84936591daa1\",\n \"利用空闲电脑搭建内网sftp服务器\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487274&idx=1&sn=d507b3a1bb8e345f3e4c608a06d18e52\",\n \"仅50美元，30分钟训练！斯坦福与华盛顿大学开源AI推理模型S1，性能比肩顶级大模型\": \"https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485657&idx=1&sn=d2cbc4a476da8fda59f3912f9c183d9b\",\n \"恶意样本静态分析-下\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490352&idx=1&sn=7a485e1264bc2f1a221a0822e46ac1c3\",\n \"打靶日记Kioptix Level 3（脏牛提权）\": \"https://mp.weixin.qq.com/s?__biz=Mzk1Nzc0MzY3NA==&mid=2247483879&idx=1&sn=4792551bfb735dc518a7ab0c54062444\",\n \"【刘农TV】所谓“红客工具包”真实的面纱\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484276&idx=1&sn=b957a2f8c6416d2b0a980669da4ce5ff\",\n \"G.O.S.S.I.P 2025 新春总动员（3）：世界上第一个计算机程序\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499675&idx=1&sn=fb738542c9b22d64ab6c87cf802aa5d7\",\n \"微软 Sysinternals 工具中的0 day\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094732&idx=1&sn=a9f3a093110578ac913b9402460ac841\",\n \"能让你跟明星“换脸”的软件，侵权吗？\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094732&idx=2&sn=ec4687d8e15ae11286cec168ce168e12\",\n \"可视化使用deepseek，顺带解决回答撤回的问题\": \"https://mp.weixin.qq.com/s?__biz=MzkwODQyMjgwNg==&mid=2247485509&idx=1&sn=1b7b7266c54fb3cb937e82c1d16ff7db\",\n \"要看清所有东西，先要往后退！！！\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491083&idx=1&sn=541f3b905e94c0373eec7df3f5598203\",\n \"思科修补启用 Root CmdExec 和 PrivEsc 的关键 ISE 漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490217&idx=1&sn=507f8b70b295803eb96f084dd6f0b379\",\n \"HTB_Cat(思路)\": \"https://mp.weixin.qq.com/s?__biz=MzkxMjYyMjA3Mg==&mid=2247485396&idx=1&sn=87356740064eca47baf980b1b66c3f75\",\n \"密钥派生最佳实践\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485782&idx=1&sn=a845bbba42038c19e8e4db8861751e10\",\n \"知识星球持续更新\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485782&idx=2&sn=727cc6c00c99ecf1119559ed38f05a57\",\n \"告别无效备考！PMP 备考这 4 个方法你一定要知道\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247521505&idx=1&sn=a97f288974f587a6240221cdf65afbd6\",\n \"探索软件定义汽车的安全攻击面\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620564&idx=1&sn=09bb5a62d2f586609e3226092a516006\",\n \"面向未来的软件定义汽车网络安全策略\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620564&idx=2&sn=e6526931c668e467e7bcc55e16829bda\",\n \"面向软件定义车辆的E/E架构技术&市场分析报告2025\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620564&idx=3&sn=d2e5be143a89350650dcd0e54d1120e0\",\n \"多项入选！360标杆项目获评工信部2024年网络安全技术应用典型案例\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579315&idx=1&sn=104e0c81bebee7585c98e5d53c5dabcc\",\n \"《牛马魔神》变异成安全小说\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486266&idx=1&sn=9b986b6fc493ba758073a4873ca18ed4\",\n \"AI时代渐行渐近，理解背后的逻辑，才能更好地适应这个时代！\": \"https://mp.weixin.qq.com/s?__biz=MzA3OTg3Mjg3NA==&mid=2456976658&idx=1&sn=ad1b7042efe8b107abbe958f08e31201\",\n \"思科发现DeepSeek R1极易受到有害提示的影响\": \"https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484618&idx=1&sn=2ead0f5e3defde819c661d7d530821b5\",\n \"揭秘最为知名的黑客工具之一：Shodan（探索未知的网络疆域）\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166964&idx=1&sn=c60a3c7fffa114125991bb9575661edd\",\n \"7-Zip零日漏洞在俄乌战争中被利用\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166964&idx=2&sn=983c68b88d2253701787315bd8a0d7b8\",\n \"Go 模块镜像三年多来一直向开发者提供带后门程序\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166964&idx=3&sn=30015a05034b15e55c9a2f6c9ef55b9e\",\n \"研究人员以不到50美元的成本创建了OpenAI o1“推理”模型的开源竞争对手。\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494923&idx=1&sn=e94b98cec87e5f890b8f1f0358872932\",\n \"150元搞定国产开源 AI 机器人，乐鑫ESP32+豆包、DeepSeek、OpenAI 、通义千问\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454936806&idx=1&sn=a915fb3d97a62bb78378dfb0b5a07339\",\n \"DeepSeek到底强在哪？\": \"https://mp.weixin.qq.com/s?__biz=MjM5MDA3MzI0MA==&mid=2650091315&idx=1&sn=3faf018537e1c4287629615050537407\",\n \"带挖2分钟即出高危，百万赏金猎人手把手教你「白嫖」漏洞！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313611&idx=1&sn=fbf2b63c67773103862ba5354d21830d\",\n \"2024年勒索赎金总额超8亿美元，下降35%\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313611&idx=2&sn=b1f64a222afe20f8840d67d2bd813747\",\n \"思科披露两个严重的身份服务引擎漏洞\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313611&idx=3&sn=763b74488aea13f582afe4569f509ecb\",\n \"“走红”的烦恼：DeepSeek成了网络犯罪分子的“新猎物”\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313611&idx=4&sn=cc3dddaec656f4de976cf4aae6a44228\",\n \"2024网安亏损榜大揭秘:TOP10企业亏惨了！\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485520&idx=1&sn=773e3b138dcefba482668fb5c8cb71f2\",\n \"【干货原创】实网攻防演习常态化，会带来什么变化01\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485520&idx=4&sn=f31515e7a93a81f9dd9b6b896afa4d6d\",\n \"【干货原创】K12教育，鲜为人知的模式秘密\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485520&idx=5&sn=360ce8d3ece1d5769cb077aeb8611fa4\",\n \"原创文章目录\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485520&idx=6&sn=05171a07fabaef8098bfccae17626a66\",\n \"2024年勒索软件赎金支付额大幅下降 35%：受害者拒向黑客妥协\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541487&idx=1&sn=01bd4b27b7bdda514f008c29c5e4bfc8\",\n \"【安全圈】PyPI 上的信息窃取恶意软件冒充了 DeepSeek AI 工具\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=1&sn=87a028f93da64d77ab88febfae2b2d56\",\n \"【安全圈】2024 年勒索软件支付额下降 35%，总额达 813,550,000 美元\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=2&sn=20f95ef580e0ec24f8d83012372886ab\",\n \"【安全圈】恶意 Go 软件包利用模块镜像缓存实现持久远程访问\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=3&sn=0a2ed43f7e7eb5e16bbf8a4cf07d0964\",\n \"【安全圈】研究人员发现新方法防御 AI 模型的通用越狱攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=4&sn=027c0126ec6f44288fe766c11d208124\",\n \"收藏 | 120个防火墙术语大全\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NDY0NTM2Nw==&mid=2247492253&idx=1&sn=39a1e77d8aa539e1d236d8580490e715\",\n \"ZoomEye接入DeepSeek后全球用户使用活跃度显著提升\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870925&idx=1&sn=ea9239ed92128feef62ae802217e1541\",\n \"网络领导力计划召集：网络安全中的女性\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492353&idx=1&sn=e909f629d87ee1d02904864f7867e6b9\",\n \"因开展数据处理活动时未按规定加强风险监测等，中行被罚\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931497&idx=1&sn=5fa30c9bd82fbf017e1448abebcccc6f\",\n \"商用密码标准研究院征集新一代商用密码算法\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931497&idx=2&sn=909dee64f7ca1528c5662b19daad1055\",\n \"模拟几种拒绝服务攻击\": \"https://mp.weixin.qq.com/s?__biz=MzAxNTg1MDYxNA==&mid=2247489370&idx=1&sn=e7e615c371e12444ff30d8eb4d7f3c78\",\n \"征稿启事 | 《中国信息安全》杂志2025年重点选题公布\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236109&idx=1&sn=b00af9135046cb4342d36c3db3fc46cc\"\n },\n \"Twitter @bytehx\": {\n \"Re @drak3hft7 @yeswehack Congrats man!\": \"https://x.com/bytehx343/status/1887520441218322455\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"Easy Way to Find Exposed Sensitive API Keys in JS Files\": \"https://infosecwriteups.com/easy-way-to-find-exposed-sensitive-api-keys-in-js-files-d9f9fccb18bb?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Reverse Engineering\": {\n \"Ghidra 11.3 has been released!\": \"https://www.reddit.com/r/ReverseEngineering/comments/1ij0j59/ghidra_113_has_been_released/\",\n \"Llama's Paradox - Delving deep into Llama.cpp and exploiting Llama.cpp's Heap Maze, from Heap-Overflow to Remote-Code Execution.\": \"https://www.reddit.com/r/ReverseEngineering/comments/1ijetp6/llamas_paradox_delving_deep_into_llamacpp_and/\",\n \"Byfron Anticheat Engineer Nemi Interview\": \"https://www.reddit.com/r/ReverseEngineering/comments/1ijf6hr/byfron_anticheat_engineer_nemi_interview/\",\n \"ScatterBrain: Unmasking the Shadow of PoisonPlug's Obfuscator\": \"https://www.reddit.com/r/ReverseEngineering/comments/1iiz1ps/scatterbrain_unmasking_the_shadow_of_poisonplugs/\"\n },\n \"Malwarebytes\": {\n \"New scams could abuse brief USPS suspension of inbound packages from China, Hong Kong\": \"https://www.malwarebytes.com/blog/news/2025/02/new-scams-could-abuse-brief-usps-suspension-of-inbound-packages-from-china-hong-kong\",\n \"University site cloned to evade ad detection distributes fake Cisco installer\": \"https://www.malwarebytes.com/blog/cybercrime/2025/02/university-site-cloned-to-evade-ad-detection-distributes-fake-cisco-installer\"\n },\n \"吾爱破解论坛\": {\n \"【2025春节】解题领红包活动 排行榜TOP图（初九 2/6）\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141690&idx=1&sn=f45ab511f67b160197d5b5a3b9d6691a&chksm=bd50a66e8a272f787ee3cefdcf37fc2e15d841d3005707dc4d4592d1b5d3f43cc366185c6e1c&scene=58&subscene=0#rd\"\n },\n \"安全牛\": {\n \"2025年网安人需要掌握的10项技能\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135004&idx=1&sn=ba8ea95e8b9bc3c7994103bfdd95e825&chksm=bd15accf8a6225d97ae60310f4e31fd9d52387a81148a01bb78e7d5f6bf91e1276c6915ac0a1&scene=58&subscene=0#rd\",\n \"Elon Musk团队操作引发美国政府数据安全危机与网络安全漏洞担忧；2024 网安（亏损）TOP 10 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135004&idx=2&sn=c7edbd6741477e964cbf32f7a36b481c&chksm=bd15accf8a6225d93290b88cd648c6600766748e242afc021eb41721345d332dee91f46226e3&scene=58&subscene=0#rd\"\n },\n \"腾讯玄武实验室\": {\n \"每日安全动态推送(25/2/6)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960011&idx=1&sn=0283493c88850486c899a9a7d71275d5&chksm=8baed254bcd95b4253dc3bc8d17ffa1f9029bc09dbd9f08db9ca4a0cc32246cc67bfe130f71f&scene=58&subscene=0#rd\"\n },\n \"Black Hills Information Security\": {\n \"John Strand’s 5 Phase Plan For Starting in Computer Security\": \"https://www.blackhillsinfosec.com/john-strands-5-phase-plan/\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"CISA将Microsoft Outlook、Sophos XG Firewall等漏洞列入已知被利用漏洞目录\": \"https://www.freebuf.com/news/421183.html\",\n \"DeepSeek-R1大模型在安全分析中过半越狱攻击失败，暴露重大安全隐患\": \"https://www.freebuf.com/news/421179.html\",\n \"FreeBuf早报 | DeepSeek遭网攻为大模型安全敲警钟；严重思科漏洞允许远程执行命令\": \"https://www.freebuf.com/news/421160.html\",\n \"Zyxel多款旧DSL设备存在2个零日漏洞，无修复措施\": \"https://www.freebuf.com/news/421152.html\",\n \"“走红”的烦恼：DeepSeek成为网络犯罪分子新目标\": \"https://www.freebuf.com/articles/421148.html\",\n \"思科披露两个严重的身份服务引擎漏洞\": \"https://www.freebuf.com/articles/421143.html\",\n \"网络安全运营人员外包的困境挑战\": \"https://www.freebuf.com/articles/neopoints/421140.html\"\n },\n \"安全分析与研究\": {\n \"恶意样本静态分析-下\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490352&idx=1&sn=7a485e1264bc2f1a221a0822e46ac1c3&chksm=902fb418a7583d0e021ea3afdf35da7f40f854e0da47ef6a24f9439945d149739776e4429fc3&scene=58&subscene=0#rd\"\n },\n \"丁爸 情报分析师的工具箱\": {\n \"【资料】美国国土安全部生成式人工智能部署手册\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148869&idx=1&sn=3eb79c7b6c4ec7a21dd483f975f0cd5b&chksm=f1af257fc6d8ac69d5596bc66e4f19da02274ec2526aa69efca3c3cf3440c270b2038b7497b6&scene=58&subscene=0#rd\",\n \"【资料】生成式人工智能和开放数据：指南和最佳实践\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148869&idx=2&sn=e31554327835c696b4cbf80e609a7800&chksm=f1af257fc6d8ac69876c69f2e873b1d5a6f041315816781b5b4c191e99fe5f2466c3cf3cd98a&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"警惕！DeepSeek爆火引山寨潮，超两千仿冒域名潜藏风险\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513650&idx=1&sn=dc24fd555056860003945b1591774bf5&chksm=ebfaf112dc8d78049d6d2856742340b9d6b5d717af829124238f6bdb5f99cfcfd7d0c045561a&scene=58&subscene=0#rd\",\n \"重磅！我国启动抗量子加密算法征集活动\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513650&idx=2&sn=187d868e3d8b42ebdf6bbe899d0c3f7c&chksm=ebfaf112dc8d780407ee15220ec7b4952723f63861264ee4a92a69a37879ee59c5d47a6ff1a1&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \"数据外发传输，通过 Sharp4AutoDeploy 自动化搭建代码审计环境和数据传输通道\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498762&idx=1&sn=129bcfb638a65164fddfcc7ea0bc9edd&chksm=fa5952e7cd2edbf19ad4da1947c3dadcefe4881a01886a0453a484f26aa659cf858d37145fa1&scene=58&subscene=0#rd\",\n \"国内最专业、最全面的 [ .NET 代码审计 ] 体系化学习交流社区\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498762&idx=2&sn=01e4042140a61c12ebc8206785c1697a&chksm=fa5952e7cd2edbf1d4667af1d2d8d9579f76a4a989633836f37a0c7e5cecfcb860b9a3f8054b&scene=58&subscene=0#rd\",\n \"2025 持续防范 GitHub 投毒，分析 Visual Studio 隐藏文件\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498762&idx=3&sn=3e2e284d8f779eab6c66039588873f5b&chksm=fa5952e7cd2edbf1e496e7e68248d5da1e4a9b9984300a94b366274c7e029523d9d5db3ee3ab&scene=58&subscene=0#rd\"\n },\n \"侠易龙门阵\": {\n \"火树银花不夜天，打铁花是属于中国人的浪漫\": \"https://mp.weixin.qq.com/s?__biz=MzIxODYyNjczNA==&mid=2247483898&idx=1&sn=1a130c505f7abeecbfc6c541c7673c2d&chksm=97e6ee3ba091672da6678be08779356c5b1f811e025fd6679ec0e9e546192ad29cc89ee0ef6e&scene=58&subscene=0#rd\"\n },\n \"威努特安全网络\": {\n \"助力智慧医疗：威努特云桌面解决方案全面赋能医院信息化升级\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651130913&idx=1&sn=e210438ac23508ac6904964267887ba1&chksm=80e71691b7909f87383138672a330773adcf357df1989edba031c839cb16af7f027cb26284b7&scene=58&subscene=0#rd\",\n \"AI驱动安全？AI驱动攻击？\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651130896&idx=1&sn=56f5061d64574605a7ad3cfddd8f5388&chksm=80e716a0b7909fb62b48eb3c1c40894c389de8c832c4551259d6f723e772afe0f0d90fe76bb9&scene=58&subscene=0#rd\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"研究人员提出一种超低成本的 AI 训练方法\": \"https://www.solidot.org/story?sid=80489\",\n \"北极气温上周日超过平均水平 20 摄氏度\": \"https://www.solidot.org/story?sid=80488\",\n \"苹果面临反垄断调查\": \"https://www.solidot.org/story?sid=80487\",\n \"OpenWrt 24.10 释出\": \"https://www.solidot.org/story?sid=80486\",\n \"iPhone 在华销量大幅下挫\": \"https://www.solidot.org/story?sid=80485\",\n \"本田与日产合并谈判破裂\": \"https://www.solidot.org/story?sid=80484\",\n \"DeepSeek 使用了中移动的基础设施\": \"https://www.solidot.org/story?sid=80483\",\n \"研究称早上幸福感最高\": \"https://www.solidot.org/story?sid=80482\",\n \"美国冻结对外援助打击全世界的研究项目\": \"https://www.solidot.org/story?sid=80481\",\n \"AMD 数据中心收入首次超过英特尔\": \"https://www.solidot.org/story?sid=80480\"\n },\n \"看雪学苑\": {\n \"重磅新课来袭！Android逆向内核攻防实战进阶\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589327&idx=1&sn=2aef91298bedb613705f20846e3d3c10&chksm=b18c280586fba113927b3368ea98c1f8d88a1fa72538f398dbae295bc9a6b50229c6ccbd9bb4&scene=58&subscene=0#rd\",\n \"[SHCTF]easyLogin 出题小记\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589327&idx=2&sn=163feb4414326003fc3f84b95ee8b8f6&chksm=b18c280586fba11395ed4f42ce23bd939ce52fd80208ef328b6c4ceb597e9f41b69b9776a33d&scene=58&subscene=0#rd\",\n \"DeepSeek 被盯上！揭露假网站、恶意软件、虚假投资骗局...\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589327&idx=3&sn=5382ebc44dc11d400662237938827abb&chksm=b18c280586fba11393e53147645ff53de42f8adb151f03b8267814193a3a3b26d55f24987082&scene=58&subscene=0#rd\"\n },\n \"网络空间安全科学学报\": {\n \"《网络空间安全科学学报》2024年工作回顾\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247504995&idx=1&sn=6a6568248e28f63602d5da17bd31a070&chksm=e9bfc0dddec849cb8ad241a0263cd055296b1d68cec05022a619cfa852c562b5b89940b5a327&scene=58&subscene=0#rd\"\n },\n \"中国信息安全\": {\n \"征稿启事 | 《中国信息安全》杂志2025年重点选题公布\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236109&idx=1&sn=b00af9135046cb4342d36c3db3fc46cc&chksm=8b5806b4bc2f8fa267b6355905e7a1813339066e110ab597508b7fbb34d08a0586db256e8918&scene=58&subscene=0#rd\",\n \"专家解读 | 构建数据安全治理新格局 促进公共数据开发利用\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236109&idx=2&sn=a578ea848a9d6ef9682be966d7f39985&chksm=8b5806b4bc2f8fa2b9c787ec55dc67b0f1ff60ce2b2df8377327e20c8a4d66835ef704109fb9&scene=58&subscene=0#rd\",\n \"专家观点 | 叶青：坚持全面依法治国 推进网络暴力治理现代化\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236109&idx=3&sn=73394d8c6895c72911158a0753cf584d&chksm=8b5806b4bc2f8fa2058d1ca1bad75b9753f584eb094095e05d185f9153f07c9ac2f9b750a91e&scene=58&subscene=0#rd\",\n \"国际 | TikTok案凸显美在数据主权问题上的双重标准\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236109&idx=4&sn=2d59faa090ffe544cd367bcd062bfd0f&chksm=8b5806b4bc2f8fa2985ae83be49d13e957c08f4da0910bca5c78ed4344c5a641e3e33ef4c2aa&scene=58&subscene=0#rd\",\n \"前沿 | 我国生成式人工智能的发展现状与趋势\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236109&idx=5&sn=1d2f7ccaf43de6626bbfacc477bf5d4a&chksm=8b5806b4bc2f8fa2264ec200889d43c6e51dfae1b5577b658fd11dff7fb97b948fa474f94c26&scene=58&subscene=0#rd\",\n \"评论 | AIGC让创作者不再过度依赖算法\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236109&idx=6&sn=03df3090791224e927813829c2f54301&chksm=8b5806b4bc2f8fa2b225bec581c8abcda71910cbfbbd26fa0803ae8e297c0137850e35ce2e54&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"中情局一封未分类邮件：大量涉我事务特工名单外流？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559497&idx=1&sn=6e94703c9601ae17af5bfeeb29ff5879&chksm=87117a42b066f354424ecd0b4c7f26270fe24ddd88496e9d6c50859a31952c74f86b991b7db9&scene=58&subscene=0#rd\",\n \"美政府8000+网页被“抹去”，“信息大清洗”背后有何隐情？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559497&idx=2&sn=1e76ccdbeae00a6fc7c9da1e3ba5c1b4&chksm=87117a42b066f35414ff01570b62e576e5d03756e24567c7d65bf8cda4026c253466e201386e&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"全年收入超 8600 亿！华为如何用 5 年时间重回巅峰？\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073367&idx=1&sn=356c0917d8d26e8ec7358508daca3d27&chksm=7e57d26149205b77a78924931598bcd6020e4addb562aa2851320700f769db1fb3f4f0e26f8c&scene=58&subscene=0#rd\",\n \"英伟达、英特尔和 AMD， 联手投出一家「芯片独角兽」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073350&idx=1&sn=87329333acb6ba156fc9cd3998ee3895&chksm=7e57d27049205b66177e5773bc54f529bb60a496a344e96504795255210f65d91e79b5d2bc41&scene=58&subscene=0#rd\",\n \"OpenAI 开放 AI 搜索，所有人可用；特斯拉发布史上最大优惠；华为小艺接入 DeepSeek | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073349&idx=1&sn=c427ffca27eb6e91277f62403ead3108&chksm=7e57d27349205b6593a3e2895b0fecfcf99e7bc14d38f01cbd96cca788a32bf1a97c927decb6&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"【急聘】蚂蚁安全天穹光年实验室，招人啦~~\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581021&idx=1&sn=eb90cf355aaba3e8809155b58d785198&chksm=e9146d67de63e47151e38f582e9e25e78f8a79d16dd144aa5d31b9b82509c282718d387f8657&scene=58&subscene=0#rd\",\n \"PYPI添加了项目归档系统以阻止恶意更新\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581021&idx=2&sn=40a6f0da873c44dbb0408de5145244d0&chksm=e9146d67de63e471041fad7ab6bc2c565b09947e3bb53e3049db5bcaf709891415e4e851d953&scene=58&subscene=0#rd\"\n },\n \"安全学术圈\": {\n \"加州大学伯克利分校 | 通过域名前置实现抗阻塞通信\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491642&idx=1&sn=862f015bc435bb15f184a4f73fac7e7b&chksm=fe2d1fb1c95a96a7a9e4631413068786abb2c6a300123a1dac0c89289178b877cad43749fff3&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】PyPI 上的信息窃取恶意软件冒充了 DeepSeek AI 工具\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=1&sn=87a028f93da64d77ab88febfae2b2d56&chksm=f36e7b15c419f203e33e3b5abaadef4379c831d462ff19e8c519765b1a304ea1988195bb7e96&scene=58&subscene=0#rd\",\n \"【安全圈】2024 年勒索软件支付额下降 35%，总额达 813,550,000 美元\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=2&sn=20f95ef580e0ec24f8d83012372886ab&chksm=f36e7b15c419f203f586cf30ca0c54553a28544e8acc44fe0983b15fa75ddfe6127b985bdebf&scene=58&subscene=0#rd\",\n \"【安全圈】恶意 Go 软件包利用模块镜像缓存实现持久远程访问\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=3&sn=0a2ed43f7e7eb5e16bbf8a4cf07d0964&chksm=f36e7b15c419f203eac3d6b64bb2979cf5ca88e1b8c3229b9bf761bcc51256b3052176063e90&scene=58&subscene=0#rd\",\n \"【安全圈】研究人员发现新方法防御 AI 模型的通用越狱攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=4&sn=027c0126ec6f44288fe766c11d208124&chksm=f36e7b15c419f20345dae8c76fd939a1638e36abef0ed5208d33d6a1f2e08fface283528ac0b&scene=58&subscene=0#rd\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 2025 新春总动员（3）：世界上第一个计算机程序\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499675&idx=1&sn=fb738542c9b22d64ab6c87cf802aa5d7&chksm=c063d142f7145854186c858e444bdb69ebaf141e6c2bf869f8814054f43b64dcf8a63d09419c&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"CISO进入董事会，地位再次上升\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247535220&idx=1&sn=3338494448a114e5d96e7c774e04fb2b&chksm=c14438c9f633b1df696e5851a50107d20bbe16ed91091633329c9b6fc0f66105fb566444fbc1&scene=58&subscene=0#rd\",\n \"【事件分析】DeepSeek遭受大量境外网络攻击详细完整分析\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247535220&idx=2&sn=af665dff821641583006abf1d7d5d6d6&chksm=c14438c9f633b1df4a7d869e4537ed8b2640ac24ce5a777eca1d2ea106e4b6646b518f5a1ad1&scene=58&subscene=0#rd\"\n },\n \"TrustedSec\": {\n \"The Hidden Trap in the PCI DSS SAQ A Changes\": \"https://trustedsec.com/blog/the-hidden-trap-in-the-pci-dss-saq-a-changes\"\n },\n \"迪哥讲事\": {\n \"云安全-s3对象存储攻防\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497041&idx=1&sn=c2296b486d8c497fc59465db612190e9&chksm=e8a5ff32dfd27624e39206df0ebaff7624d3a6adeb16f2a251eb13eae9d820beab56351de9e6&scene=58&subscene=0#rd\"\n },\n \"Yak Project\": {\n \"这，这就，上班了？？\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247527616&idx=1&sn=9ab8fd0f165712ad0639b1ec53bc5597&chksm=c2d11064f5a699722d79ec2518dc9fcc9c730958cac4b0080536e72e8a5690df2afb25df37d8&scene=58&subscene=0#rd\"\n },\n \"ICT Security Magazine\": {\n \"Generative AI: Evoluzione, Funzionamento e Impatto sulla Trasformazione Digitale\": \"https://www.ictsecuritymagazine.com/articoli/generative-ai/\"\n },\n \"白帽子章华鹏\": {\n \"作为创业者，DeepSeek爆火给我的七点启示\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650236980&idx=1&sn=9a63ec92faa16e76aa6a63480b3633f6&chksm=f04ad288c73d5b9e6584ad61ef0f762b03d30fe689c202e3345b2a9dc04fa021eae68ce885be&scene=58&subscene=0#rd\"\n },\n \"Securityinfo.it\": {\n \"Silent Lynx: il gruppo APT torna all’attacco contro Kyrgyzstan e Turkmenistan\": \"https://www.securityinfo.it/2025/02/06/silent-lynx-il-gruppo-apt-torna-allattacco-contro-kyrgyzstan-e-turkmenistan/?utm_source=rss&utm_medium=rss&utm_campaign=silent-lynx-il-gruppo-apt-torna-allattacco-contro-kyrgyzstan-e-turkmenistan\"\n },\n \"360数字安全\": {\n \"多项入选！360标杆项目获评工信部2024年网络安全技术应用典型案例\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579315&idx=1&sn=104e0c81bebee7585c98e5d53c5dabcc&chksm=9f8d26bba8faafadb87f0d137fb8be934dce442af7b5e5cd5538b10b6bff1be642b946c0860c&scene=58&subscene=0#rd\"\n },\n \"微步在线\": {\n \"微步获评国家网络威胁信息汇聚共享技术平台“突出贡献支撑单位”\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183116&idx=1&sn=2a93e9117ddba9ed6c273b8b90adf94d&chksm=f4486e70c33fe76607126a90755b53983e96afb2e1c071104480561e8adcd3242fc9f49f9b44&scene=58&subscene=0#rd\"\n },\n \"Have I Been Pwned latest breaches\": {\n \"Thermomix Recipe World Forum - 3,123,439 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Thermomix\",\n \"Hakko Corporation - 9,665 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Hakko\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Google Tag Manager Skimmer Steals Credit Card Info From Magento Site\": \"https://blog.sucuri.net/2025/02/google-tag-manager-skimmer-steals-credit-card-info-from-magento-site.html\",\n \"Lawmakers push for DeepSeek ban from federal devices over China concerns\": \"https://therecord.media/lawmakers-push-for-deepseek-ban\",\n \"Ransomware Attack on Rural Health Services, Inc.: Medusa Threatens to Leak Sensitive Patient Data\": \"https://www.suspectfile.com/ransomware-attack-on-rural-health-services-inc-medusa-threatens-to-leak-sensitive-patient-data/\",\n \"Lawsuit against automatic license plate reader cameras can move forward, judge says\": \"https://therecord.media/lawsuit-against-automatic-license-plate-reader-moves-forward\",\n \"Experts Flag Security, Privacy Risks in DeepSeek AI App\": \"https://krebsonsecurity.com/2025/02/experts-flag-security-privacy-risks-in-deepseek-ai-app/\",\n \"Thermomix Recipe World Forum - 3,123,439 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Thermomix\",\n \"Microsoft says attackers use exposed ASP.NET keys to deploy malware\": \"https://www.bleepingcomputer.com/news/security/microsoft-says-attackers-use-exposed-aspnet-keys-to-deploy-malware/\",\n \"Changing the tide: Reflections on threat data from 2024\": \"https://blog.talosintelligence.com/changing-the-tide-reflections-on-threat-data-from-2024/\",\n \"Kimsuky hackers use new custom RDP Wrapper for remote access\": \"https://www.bleepingcomputer.com/news/security/kimsuky-hackers-use-new-custom-rdp-wrapper-for-remote-access/\",\n \"Spyware maker Paragon terminates contract with Italian government: media reports\": \"https://techcrunch.com/2025/02/06/spyware-maker-paragon-terminates-contract-with-italian-government-media-reports/\",\n \"Critical RCE bug in Microsoft Outlook now exploited in attacks\": \"https://www.bleepingcomputer.com/news/security/critical-rce-bug-in-microsoft-outlook-now-exploited-in-attacks/\",\n \"Hackers exploit SimpleHelp RMM flaws to deploy Sliver malware\": \"https://www.bleepingcomputer.com/news/security/hackers-exploit-simplehelp-rmm-flaws-to-deploy-sliver-malware/\",\n \"SimpleHelp RMM flaws exploited to breach corporate networks\": \"https://www.bleepingcomputer.com/news/security/simplehelp-rmm-flaws-exploited-to-breach-corporate-networks/\",\n \"Treasury agrees to block additional DOGE staff from accessing sensitive payment systems\": \"https://therecord.media/treasury-agrees-block-doge-access\",\n \"Protecting the Big Game: A Threat Assessment for Super Bowl LIX\": \"https://flashpoint.io/blog/protecting-the-big-game-a-threat-assessment-for-super-bowl-lix/\",\n \"VPN aziendali: proteggere e connettere le aziende\": \"https://www.cybersecurity360.it/soluzioni-aziendali/vpn-aziendali-proteggere-e-connettere-le-aziende/\",\n \"Critical Cisco ISE bug can let attackers run commands as root\": \"https://www.bleepingcomputer.com/news/security/critical-cisco-ise-bug-can-let-attackers-run-commands-as-root/\",\n \"Russia uses messaging apps to recruit terrorists, Ukraine's police says\": \"https://therecord.media/russia-uses-messaging-apps-to-recruit-terrorists\",\n \"Programmi di pulizia per PC: utili anche per le aziende\": \"https://www.cybersecurity360.it/soluzioni-aziendali/programmi-pulizia-pc/\",\n \"DDoS attacks reportedly behind DayZ and Arma network outages\": \"https://www.bleepingcomputer.com/news/security/ddos-attacks-reportedly-behind-dayz-and-arma-network-outages/\",\n \"IMI reports ‘unauthorized’ cyber activity in latest incident affecting UK engineering firms\": \"https://therecord.media/imi-uk-engineering-company-reports-cyber-incident\",\n \"Sicurezza in rete: strategie e soluzioni al servizio delle aziende\": \"https://www.cybersecurity360.it/soluzioni-aziendali/sicurezza-rete-soluzioni/\",\n \"Silent Lynx: il gruppo APT torna all’attacco contro Kyrgyzstan e Turkmenistan\": \"https://www.securityinfo.it/2025/02/06/silent-lynx-il-gruppo-apt-torna-allattacco-contro-kyrgyzstan-e-turkmenistan/\",\n \"Garantire la resilienza aziendale: i 3 pilastri per una corretta postura cyber\": \"https://www.cybersecurity360.it/soluzioni-aziendali/garantire-la-resilienza-aziendale-i-3-pilastri-per-una-corretta-postura-cyber/\",\n \"Cybersecurity: come mettere in sicurezza le aziende\": \"https://www.cybersecurity360.it/soluzioni-aziendali/cybersecurity-come-mettere-in-sicurezza-le-aziende/\",\n \"British engineering firm IMI discloses breach, shares no details\": \"https://www.bleepingcomputer.com/news/security/british-engineering-firm-imi-discloses-breach-shares-no-details/\",\n \"Endpoint security: cos’è e come si applica alla sicurezza informatica\": \"https://www.cybersecurity360.it/soluzioni-aziendali/software-endpoint-security/\",\n \"Instant URL Analysis: Use Safebrowsing via ANY.RUN’s Extension\": \"https://any.run/cybersecurity-blog/safebrowsing-extension/\",\n \"CISA Issues Nine Critical Industrial Control Systems Advisories, Addressing Vulnerabilities in Key Equipment\": \"https://cyble.com/blog/cisa-new-industrial-control-systems-advisories/\",\n \"ZTNA Zero Trust Network Access: cos’è e quali sono le migliori soluzioni\": \"https://www.cybersecurity360.it/soluzioni-aziendali/ztna-zero-trust-network-access-soluzioni/\",\n \"Take my money: OCR crypto stealers in Google Play and App Store\": \"https://securelist.com/sparkcat-stealer-in-app-store-and-google-play-2/115385/\",\n \"Google Cloud Platform Data Destruction via Cloud Build\": \"https://blog.talosintelligence.com/gcp-data-destruction-via-cloud-build/\",\n \"DPO: chi, come e perché può controllare la sua attività\": \"https://www.cybersecurity360.it/legal/privacy-dati-personali/dpo-chi-come-e-perche-puo-controllare-la-sua-attivita/\",\n \"Five Eyes Cyber Agencies Share New Security Guidelines for Edge Device Manufacturers\": \"https://cyble.com/blog/new-security-guidelines-edge-device-manufacturers/\",\n \"Così aggirano l’MFA in Active Directory Federation Services: rischi e contromisure\": \"https://www.cybersecurity360.it/news/cosi-aggirano-lmfa-in-active-directory-federation-services-rischi-e-contromisure/\",\n \"SIEM: quale scegliere e perché è fondamentale per la sicurezza dell’azienda\": \"https://www.cybersecurity360.it/soluzioni-aziendali/siem-quale-scegliere/\",\n \"CSPM: 5 soluzioni per garantire maggiore sicurezza su cloud\": \"https://www.cybersecurity360.it/soluzioni-aziendali/cspm-quale-scegliere/\",\n \"1-15 November 2024 Cyber Attacks Timeline\": \"https://www.hackmageddon.com/2025/02/06/1-15-november-2024-cyber-attacks-timeline/\",\n \"New Microsoft script updates Windows media with bootkit malware fixes\": \"https://www.bleepingcomputer.com/news/microsoft/new-microsoft-script-updates-windows-media-with-bootkit-malware-fixes/\",\n \"February 2025 Zero-Day Threat Intelligence\": \"https://pixmsecurity.com/blog/blog/february-2025-zero-day-threat-intelligence/\",\n \"Hakko Corporation - 9,665 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Hakko\",\n \"Italy says Paragon spyware targeted victims in dozens of European countries\": \"https://therecord.media/italy-paragon-spyware-targeted-european-victims-whatsapp\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #740: USN V4 Data Ranges\": \"https://www.hecfblog.com/2025/02/daily-blog-740-usn-v4-data-ranges.html\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"The Unbreakable Multi-Layer Anti-Debugging System, (Thu, Feb 6th)\": \"https://isc.sans.edu/diary/rss/31658\",\n \"ISC Stormcast For Thursday, February 6th, 2025 https://isc.sans.edu/podcastdetail/9312, (Thu, Feb 6th)\": \"https://isc.sans.edu/diary/rss/31656\"\n },\n \"Schneier on Security\": {\n \"AIs and Robots Should Sound Robotic\": \"https://www.schneier.com/blog/archives/2025/02/ais-and-robots-should-sound-robotic.html\"\n },\n \"Tor Project blog\": {\n \"New Release: Tails 6.12\": \"https://blog.torproject.org/new-release-tails-6-12/\"\n },\n \"Graham Cluley\": {\n \"Thailand cuts power and internet to areas of Myanmar to disrupt scam gangs\": \"https://www.bitdefender.com/en-us/blog/hotforsecurity/thailand-cuts-power-and-internet-to-areas-of-myanmar-to-disrupt-scam-gangs\",\n \"Smashing Security podcast #403: Coinbase crypto heists, QR codes, and ransomware in the classroom\": \"https://grahamcluley.com/smashing-security-podcast-403/\"\n },\n \"Your Open Hacker Community\": {\n \"what would you choose?\": \"https://www.reddit.com/r/HowToHack/comments/1ijbhc4/what_would_you_choose/\",\n \"SQLi dumper error\": \"https://www.reddit.com/r/HowToHack/comments/1ij2d4d/sqli_dumper_error/\",\n \"ISP Spoofing\": \"https://www.reddit.com/r/HowToHack/comments/1ij122z/isp_spoofing/\",\n \"Is my employer hacking my personal devices & private accounts? How can i prove it and protect myself? - I know I think it sounds crazy too!\": \"https://www.reddit.com/r/HowToHack/comments/1ijcdym/is_my_employer_hacking_my_personal_devices/\",\n \"Wifi sniffer connected with wireshark?\": \"https://www.reddit.com/r/HowToHack/comments/1ijaewx/wifi_sniffer_connected_with_wireshark/\"\n },\n \"Security Affairs\": {\n \"U.S. CISA adds Microsoft Outlook, Sophos XG Firewall, and other flaws to its Known Exploited Vulnerabilities catalog\": \"https://securityaffairs.com/173949/hacking/u-s-cisa-adds-microsoft-outlook-sophos-xg-firewall-and-other-flaws-to-its-known-exploited-vulnerabilities-catalog.html\",\n \"Cisco addressed two critical flaws in its Identity Services Engine (ISE)\": \"https://securityaffairs.com/173946/security/cisco-addressed-critical-flaws-in-identity-services-engine.html\",\n \"Notorious hacker behind 40+ cyberattacks on strategic organizations arrested\": \"https://securityaffairs.com/173932/cyber-crime/spanish-police-arrested-notorious-hacker.html\",\n \"Lazarus APT targets crypto wallets using cross-platform JavaScript stealer\": \"https://securityaffairs.com/173902/apt/lazarus-cross-platform-javascript-stealer-crypto-wallets.html\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Starting a Cybersecurity Blog of tools and resources?\": \"https://www.reddit.com/r/netsecstudents/comments/1ija40m/starting_a_cybersecurity_blog_of_tools_and/\"\n },\n \"The Hacker News\": {\n \"Fake Google Chrome Sites Distribute ValleyRAT Malware via DLL Hijacking\": \"https://thehackernews.com/2025/02/fake-google-chrome-sites-distribute.html\",\n \"Ransomware Extortion Drops to $813.5M in 2024, Down from $1.25B in 2023\": \"https://thehackernews.com/2025/02/ransomware-extortion-drops-to-8135m-in.html\",\n \"SparkCat Malware Uses OCR to Extract Crypto Wallet Recovery Phrases from Images\": \"https://thehackernews.com/2025/02/sparkcat-malware-uses-ocr-to-extract.html\",\n \"The Evolving Role of PAM in Cybersecurity Leadership Agendas for 2025\": \"https://thehackernews.com/2025/02/the-evolving-role-of-pam-in.html\",\n \"North Korean APT Kimsuky Uses forceCopy Malware to Steal Browser-Stored Credentials\": \"https://thehackernews.com/2025/02/north-korean-apt-kimsuky-uses-lnk-files.html\",\n \"Top 3 Ransomware Threats Active in 2025\": \"https://thehackernews.com/2025/02/top-3-ransomware-threats-active-in-2025.html\",\n \"Cisco Patches Critical ISE Vulnerabilities Enabling Root CmdExec and PrivEsc\": \"https://thehackernews.com/2025/02/cisco-patches-critical-ise.html\"\n },\n \"Krebs on Security\": {\n \"Experts Flag Security, Privacy Risks in DeepSeek AI App\": \"https://krebsonsecurity.com/2025/02/experts-flag-security-privacy-risks-in-deepseek-ai-app/\"\n },\n \"Deeplinks\": {\n \"EFF Applauds Little Rock, AR for Cancelling ShotSpotter Contract\": \"https://www.eff.org/deeplinks/2025/02/eff-applauds-little-rock-ak-cancelling-shotspotter-contract\",\n \"Protecting Free Speech in Texas: We Need To Stop SB 336\": \"https://www.eff.org/deeplinks/2025/02/protecting-free-speech-texas-we-need-stop-sb-336\",\n \"Closing the Gap in Encryption on Mobile\": \"https://www.eff.org/deeplinks/2025/02/closing-gap-encryption-mobile\"\n },\n \"Computer Forensics\": {\n \"DFE exam advice\": \"https://www.reddit.com/r/computerforensics/comments/1ij5eyg/dfe_exam_advice/\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"How to prove false statements? (Part 2)\": \"https://www.reddit.com/r/netsec/comments/1ijfupo/how_to_prove_false_statements_part_2/\",\n \"ArgFuscator.net - generate obfuscated command lines\": \"https://www.reddit.com/r/netsec/comments/1ijcd62/argfuscatornet_generate_obfuscated_command_lines/\"\n },\n \"网安寻路人\": {\n \"2025年美国BIS《AI扩散框架》解析：VEU认证要求规定\": \"https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247506470&idx=1&sn=98291786e3516a5c1734af59b367363a&chksm=97e967cca09eeedab692c376726c96f4777dcbaabc99f3228afffb3f77c8e69ab84a87dfd09f&scene=58&subscene=0#rd\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Deepseek, AMD, and Forgotten Buckets - PSW #860\": \"http://sites.libsyn.com/18678/deepseek-amd-and-forgotten-buckets-psw-860\"\n }\n}"}, "2a9d2f731b47beb37fbbf40ea8cfbe95f9cb4b95": {"t": 1785772237.911094, "n": 49304, "h": "2d63d8c8e083dcc2", "c": "{\n \"A Few Thoughts on Cryptographic Engineering\": {\n \"How to prove false statements? (Part 2)\": \"https://blog.cryptographyengineering.com/2025/02/06/how-to-prove-false-statements-part-2/\"\n },\n \"Security Boulevard\": {\n \"BTS #45 – Understanding Firmware Vulnerabilities in Network Appliances\": \"https://securityboulevard.com/2025/02/bts-45-understanding-firmware-vulnerabilities-in-network-appliances/\",\n \"Five Must-Know Insights for Credential Monitoring\": \"https://securityboulevard.com/2025/02/five-must-know-insights-for-credential-monitoring/\",\n \"DEF CON 32 – Got 99 Problems But Prompt Injection Ain’t Pineapple\": \"https://securityboulevard.com/2025/02/def-con-32-got-99-problems-but-prompt-injection-aint-pineapple/\",\n \"Invisible Threats: The Rise of AI-Powered Steganography Attacks\": \"https://securityboulevard.com/2025/02/invisible-threats-the-rise-of-ai-powered-steganography-attacks/\",\n \"4 Data-Driven Takeaways from Kasada’s 2025 Account Takeover Trends Report\": \"https://securityboulevard.com/2025/02/4-data-driven-takeaways-from-kasadas-2025-account-takeover-trends-report/\",\n \"https://www.comicagile.net/comic/hire/\": \"https://securityboulevard.com/2025/02/https-www-comicagile-net-comic-hire/\",\n \"AMD Processors Vulnerable to Malicious Microcode\": \"https://securityboulevard.com/2025/02/amd-processors-vulnerable-to-malicious-microcode/\",\n \"Cyber security training for executives: Why and how to build it\": \"https://securityboulevard.com/2025/02/cyber-security-training-for-executives-why-and-how-to-build-it/\",\n \"DEF CON 32 – How We Built Our REDACTED THING This Year\": \"https://securityboulevard.com/2025/02/def-con-32-how-we-built-our-redacted-thing-this-year/\",\n \"Qualys TotalAppSec Strengthens Application Risk Management\": \"https://securityboulevard.com/2025/02/qualys-totalappsec-strengthens-application-risk-management/\"\n },\n \"博客\": {\n \"learn scala-lang\": \"https://dyrnq.com/learn-scala-lang/\"\n },\n \"Trustwave Blog\": {\n \"Will the UK's Ransomware Proposal Work? Trustwave Weighs in on the Potential Impact\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/will-the-uks-ransomware-proposal-work-trustwave-weighs-in-on-the-potential-impact/\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Thu Feb 6 20:22:23 UTC 2025\": \"https://github.com/trickest/cve/commit/dddf859513d562bc50d33a54dfca2b82b73f97fd\",\n \"Update Thu Feb 6 12:25:25 UTC 2025\": \"https://github.com/trickest/cve/commit/2eafd76b7ae41527f30348649a4ed6633abb9398\",\n \"Update Thu Feb 6 04:25:12 UTC 2025\": \"https://github.com/trickest/cve/commit/e2faa574b2286f1f153c3e429c62be0dbaa88dc8\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"PYPI添加了项目归档系统以阻止恶意更新\": \"https://www.4hou.com/posts/LGGv\"\n },\n \"安全脉搏\": {\n \"pgAdmin后台命令执行漏洞（CVE-2023-5002）分析\": \"https://www.secpulse.com/archives/205142.html\",\n \"从靶场到实战：双一流高校多个高危漏洞\": \"https://www.secpulse.com/archives/205871.html\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2025-02-06 Review\": \"http://www.sec-wiki.com/?2025-02-06\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"How to Secure Your Spring Boot Application\": \"https://infosecwriteups.com/how-to-secure-your-spring-boot-application-73bca2206113?source=rss----7b722bfd1b8d---4\",\n \"Hack The Box — UnderPass Walkthrough\": \"https://infosecwriteups.com/hack-the-box-underpass-walkthrough-2d4f493b7db0?source=rss----7b722bfd1b8d---4\",\n \"TryHackMe — Intro to Docker: Writeup/Walkthrough\": \"https://infosecwriteups.com/tryhackme-intro-to-docker-writeup-walkthrough-d8702f84f1c4?source=rss----7b722bfd1b8d---4\",\n \"Moniker Link (CVE-2024–21413) | TryHackMe Walkthrough by Mark de Moras\": \"https://infosecwriteups.com/moniker-link-cve-2024-21413-tryhackme-walkthrough-by-mark-de-moras-88dd08399f34?source=rss----7b722bfd1b8d---4\",\n \"Easy Way to Find Exposed Sensitive API Keys in JS Files\": \"https://infosecwriteups.com/easy-way-to-find-exposed-sensitive-api-keys-in-js-files-d9f9fccb18bb?source=rss----7b722bfd1b8d---4\"\n },\n \"一个被知识诅咒的人\": {\n \"【人工智能】使用Python实现图像风格迁移：理论、算法与实践\": \"https://blog.csdn.net/nokiaguy/article/details/145482849\",\n \"Python与容器编排：使用Kubernetes和Python管理集群的终极指南\": \"https://blog.csdn.net/nokiaguy/article/details/145482828\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"CISA命令机构修补攻击中利用的Linux内核漏洞\": \"https://www.anquanke.com/post/id/303900\",\n \"CISA将Microsoft .NET和Apache OFBiz错误标记为在攻击中被利用\": \"https://www.anquanke.com/post/id/303897\",\n \"再拓联营联运教育伙伴！360携手智榜样发力新质人才培养\": \"https://www.anquanke.com/post/id/303892\",\n \"Microsoft脚本更新可引导媒体以修复BlackLotus BootKit\": \"https://www.anquanke.com/post/id/303889\",\n \"CISA在联邦企业目录中添加了四个漏洞\": \"https://www.anquanke.com/post/id/303886\",\n \"美国CISA将Linux内核缺陷添加到其已知利用漏洞目录中\": \"https://www.anquanke.com/post/id/303883\",\n \"“SparkCat” 恶意软件攻击：安卓与 iOS 用户受威胁，超 24.2 万次下载\": \"https://www.anquanke.com/post/id/303878\",\n \"三星在Galaxy S25手机中引入量子防护技术\": \"https://www.anquanke.com/post/id/303875\",\n \"赛门铁克修补了严重安全漏洞-CVE-2025-24503（CVSSv 4 9.3）\": \"https://www.anquanke.com/post/id/303872\",\n \"DeepSeek漏洞凸显了集中式人工智能漏洞\": \"https://www.anquanke.com/post/id/303869\",\n \"Google Play、Apple App Store应用程序被发现窃取加密钱包\": \"https://www.anquanke.com/post/id/303863\"\n },\n \"Twitter @Nicolas Krassas\": {\n \"Critical Cisco ISE bug can let attackers run commands as root https://www.bleepingcomputer.com/news/security/critical-cisco-ise-bug-can-let-attackers-...\": \"https://x.com/Dinosn/status/1887564949058125838\",\n \"New Lazarus Group campaign targets cryptocurrency wallets https://www.scworld.com/brief/new-lazarus-group-campaign-targets-cryptocurrency-wallets\": \"https://x.com/Dinosn/status/1887564848197673275\",\n \"UN civil aviation agency breach toll confirmed, Arab aviation org compromised https://www.scworld.com/brief/un-civil-aviation-agency-breach-toll-confi...\": \"https://x.com/Dinosn/status/1887564727942799720\",\n \"CISA Adds Five Known Exploited Vulnerabilities to Catalog https://www.cisa.gov/news-events/alerts/2025/02/06/cisa-adds-five-known-exploited-vulnerabil...\": \"https://x.com/Dinosn/status/1887564435020988482\",\n \"Windows Telephony Services: 2025 Patch Diffing & Analysis Part 1 https://blog.securelayer7.net/windows-telephony-services-2025-patch-diffing-and-analy...\": \"https://x.com/Dinosn/status/1887503422783414345\",\n \"ScatterBrain: Unmasking the Shadow of PoisonPlug's Obfuscator https://www.reddit.com/r/ReverseEngineering/comments/1iiz1ps/scatterbrain_unmasking_the_...\": \"https://x.com/Dinosn/status/1887494665328599452\",\n \"North Korean APT Kimsuky Uses forceCopy Malware to Steal Browser-Stored Credentials https://thehackernews.com/2025/02/north-korean-apt-kimsuky-uses-ln...\": \"https://x.com/Dinosn/status/1887492014201032745\",\n \"Bring Your Own Trusted Binary (BYOTB) – BSides Edition https://labs.jumpsec.com/bring-your-own-trusted-binary-byotb-bsides-edition/\": \"https://x.com/Dinosn/status/1887471585210040812\",\n \"Notorious hacker behind 40+ cyberattacks on strategic organizations arrested https://securityaffairs.com/173932/cyber-crime/spanish-police-arrested-no...\": \"https://x.com/Dinosn/status/1887470982043930791\",\n \"Cisco Patches Critical ISE Vulnerabilities Enabling Root CmdExec and PrivEsc https://thehackernews.com/2025/02/cisco-patches-critical-ise.html\": \"https://x.com/Dinosn/status/1887433857051275553\",\n \"Arch Linux on WSL 2: Microsoft Confirms Official Support https://securityonline.info/arch-linux-on-wsl-2-microsoft-confirms-official-support/\": \"https://x.com/Dinosn/status/1887424433339474181\",\n \"Hackers spoof Microsoft ADFS login pages to steal credentials https://www.bleepingcomputer.com/news/security/hackers-spoof-microsoft-adfs-login-pages-...\": \"https://x.com/Dinosn/status/1887345306536120512\",\n \"DOGE latest: Citrix supremo has 'read-only' access to US Treasury payment system https://go.theregister.com/feed/www.theregister.com/2025/02/05/tom_kr...\": \"https://x.com/Dinosn/status/1887345175535444258\",\n \"T3SF: Technical Tabletop Exercises Simulation Framework https://meterpreter.org/t3sf-technical-tabletop-exercises-simulation-framework/\": \"https://x.com/Dinosn/status/1887344929870856626\",\n \"Security Flaws Discovered in Apache Cassandra: Unauthorized Access, Privilege Escalation, and JMX Credential Theft https://securityonline.info/securit...\": \"https://x.com/Dinosn/status/1887344770277654847\",\n \"$50 for Your Data: NOVA Stealer Sold as Malware-as-a-Service https://securityonline.info/50-for-your-data-nova-stealer-sold-as-malware-as-a-service/\": \"https://x.com/Dinosn/status/1887344648051470682\",\n \"Kubernetes Policy Enforcement at Risk: OPA Gatekeeper Bypass Exposes Security Flaws https://securityonline.info/kubernetes-policy-enforcement-at-risk-...\": \"https://x.com/Dinosn/status/1887344567046816112\",\n \"Zyxel Routers Under Attack: Default Credentials (CVE-2025-0890) and Code Injection (CVE-2024-40891), No Patch! https://securityonline.info/zyxel-route...\": \"https://x.com/Dinosn/status/1887344501485674950\",\n \"XE Group Exploits Zero-Day Vulnerabilities in VeraCore – CVE-2024-57968 & CVE-2025-25181 https://securityonline.info/xe-group-exploits-zero-day-vulne...\": \"https://x.com/Dinosn/status/1887344420036514204\",\n \"CVE-2025-20124 (CVSS 9.9) & CVE-2025-20125 (CVSS 9.1): Cisco Patches Critical Flaws in Identity Services Engine https://securityonline.info/cve-2025-2...\": \"https://x.com/Dinosn/status/1887344311689256994\"\n },\n \"Sucuri Blog\": {\n \"Google Tag Manager Skimmer Steals Credit Card Info From Magento Site\": \"https://blog.sucuri.net/2025/02/google-tag-manager-skimmer-steals-credit-card-info-from-magento-site.html\"\n },\n \"Doonsec's feed\": {\n \"Netflix新王炸黑客美剧！《零日风暴》原型竟是红客对美绝密反击？\": \"https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538594&idx=1&sn=83ed47269d8f285f8541db966d465f88\",\n \"免费使用所有Github大模型，包括deepseek-r1、GPT-4 Turbo！\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486519&idx=1&sn=edc5ff84c7170333257be8c1edca3507\",\n \"域名托管到 Cloudflare，白嫖 CDN 和 HTTPS 服务\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NzY0NDY5NQ==&mid=2247483802&idx=1&sn=65c0077bbd8ca7ff5da3baaa41cdd83f\",\n \"启明星辰ADLab：安全人视角的DeepSeek洞察与思考\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODUyOA==&mid=2247492006&idx=1&sn=c1dbc4d7ca66753e044c51ad92a21976\",\n \"知足，天地宽；知止，心自欢。\": \"https://mp.weixin.qq.com/s?__biz=Mzg2MjgwMzIxMA==&mid=2247484924&idx=1&sn=e7fb85c75eebf0bccad5235807978ee9\",\n \"没想到，“漏洞”竟然比“脆弱性”小太太太太多！\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492400&idx=1&sn=5c7dc308f10f7c382d3ed8bb0be0ba5f\",\n \"付费阅读：《风险建模：全新安全思考与建设规划指南》源PPT，持续更新中......\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492400&idx=2&sn=be27be184f1c8083bb9113b54ec49183\",\n \"XX满血版？先别急着充钱！\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzU4ODU2MQ==&mid=2247484071&idx=1&sn=ada764b4d19f7b15c79f46614a488b75\",\n \"实战缓冲区溢出漏洞攻击：从信息收集到成功提权\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDE3NDUwNg==&mid=2247483957&idx=1&sn=2ad699a3f2895d566eab7c2bb52f925e\",\n \"广告追踪暗藏玄机，90%的人都不知道自己被监视的真相\": \"https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489940&idx=1&sn=92797dfa8a15aa6240b834bd87d57085\",\n \"零时科技 || IonicMoney 攻击事件分析\": \"https://mp.weixin.qq.com/s?__biz=MzU1OTc2MzE2Mg==&mid=2247489376&idx=1&sn=d7bdbbec348f88c6c5324d77d99aafe3\",\n \"文首扫码下载 5份算力相关报告\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655265252&idx=1&sn=b11d31554d0bfde7db825b70f558468b\",\n \"网络安全人才框架战略2024\": \"https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247493639&idx=1&sn=f652f82ac2cc0b83256f117e1c6b1149\",\n \"【漏洞预警】libxml2代码执行漏洞(CVE-2022-49043)\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489535&idx=1&sn=b3da75dbb9a3a6cd24e4da4308d06cca\",\n \"【资料4篇】OSINT与反恐\": \"https://mp.weixin.qq.com/s?__biz=MzkxMDIwMTMxMw==&mid=2247494569&idx=1&sn=f40e29ee90fcb0b2419a095f52b31ee8\",\n \"年初抽象之王X\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485397&idx=1&sn=c37bb0ef10f7c9330a3ebb1f809a9f73\",\n \"BloodHound 自定义查询简介\": \"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487056&idx=1&sn=5013e23613dace9189a1eddf613a9590\",\n \"BloodHound Active Directory 自动化渗透测试\": \"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487056&idx=2&sn=280c56df1963316cc48cfb74229b3bc3\",\n \"云安全-s3对象存储攻防\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497041&idx=1&sn=c2296b486d8c497fc59465db612190e9\",\n \"HVV实战课程与超值福利\": \"https://mp.weixin.qq.com/s?__biz=MzkyMDY5OTg5OA==&mid=2247493381&idx=1&sn=bacc6fa41203d864fe4f84936591daa1\",\n \"利用空闲电脑搭建内网sftp服务器\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487274&idx=1&sn=d507b3a1bb8e345f3e4c608a06d18e52\",\n \"仅50美元，30分钟训练！斯坦福与华盛顿大学开源AI推理模型S1，性能比肩顶级大模型\": \"https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485657&idx=1&sn=d2cbc4a476da8fda59f3912f9c183d9b\",\n \"恶意样本静态分析-下\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490352&idx=1&sn=7a485e1264bc2f1a221a0822e46ac1c3\",\n \"打靶日记Kioptix Level 3（脏牛提权）\": \"https://mp.weixin.qq.com/s?__biz=Mzk1Nzc0MzY3NA==&mid=2247483879&idx=1&sn=4792551bfb735dc518a7ab0c54062444\",\n \"【刘农TV】所谓“红客工具包”真实的面纱\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484276&idx=1&sn=b957a2f8c6416d2b0a980669da4ce5ff\",\n \"G.O.S.S.I.P 2025 新春总动员（3）：世界上第一个计算机程序\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499675&idx=1&sn=fb738542c9b22d64ab6c87cf802aa5d7\",\n \"微软 Sysinternals 工具中的0 day\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094732&idx=1&sn=a9f3a093110578ac913b9402460ac841\",\n \"能让你跟明星“换脸”的软件，侵权吗？\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094732&idx=2&sn=ec4687d8e15ae11286cec168ce168e12\",\n \"可视化使用deepseek，顺带解决回答撤回的问题\": \"https://mp.weixin.qq.com/s?__biz=MzkwODQyMjgwNg==&mid=2247485509&idx=1&sn=1b7b7266c54fb3cb937e82c1d16ff7db\",\n \"要看清所有东西，先要往后退！！！\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491083&idx=1&sn=541f3b905e94c0373eec7df3f5598203\",\n \"思科修补启用 Root CmdExec 和 PrivEsc 的关键 ISE 漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490217&idx=1&sn=507f8b70b295803eb96f084dd6f0b379\",\n \"HTB_Cat(思路)\": \"https://mp.weixin.qq.com/s?__biz=MzkxMjYyMjA3Mg==&mid=2247485396&idx=1&sn=87356740064eca47baf980b1b66c3f75\",\n \"密钥派生最佳实践\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485782&idx=1&sn=a845bbba42038c19e8e4db8861751e10\",\n \"知识星球持续更新\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485782&idx=2&sn=727cc6c00c99ecf1119559ed38f05a57\",\n \"告别无效备考！PMP 备考这 4 个方法你一定要知道\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247521505&idx=1&sn=a97f288974f587a6240221cdf65afbd6\",\n \"探索软件定义汽车的安全攻击面\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620564&idx=1&sn=09bb5a62d2f586609e3226092a516006\",\n \"面向未来的软件定义汽车网络安全策略\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620564&idx=2&sn=e6526931c668e467e7bcc55e16829bda\",\n \"面向软件定义车辆的E/E架构技术&市场分析报告2025\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620564&idx=3&sn=d2e5be143a89350650dcd0e54d1120e0\",\n \"多项入选！360标杆项目获评工信部2024年网络安全技术应用典型案例\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579315&idx=1&sn=104e0c81bebee7585c98e5d53c5dabcc\",\n \"《牛马魔神》变异成安全小说\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486266&idx=1&sn=9b986b6fc493ba758073a4873ca18ed4\",\n \"AI时代渐行渐近，理解背后的逻辑，才能更好地适应这个时代！\": \"https://mp.weixin.qq.com/s?__biz=MzA3OTg3Mjg3NA==&mid=2456976658&idx=1&sn=ad1b7042efe8b107abbe958f08e31201\",\n \"思科发现DeepSeek R1极易受到有害提示的影响\": \"https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484618&idx=1&sn=2ead0f5e3defde819c661d7d530821b5\",\n \"揭秘最为知名的黑客工具之一：Shodan（探索未知的网络疆域）\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166964&idx=1&sn=c60a3c7fffa114125991bb9575661edd\",\n \"7-Zip零日漏洞在俄乌战争中被利用\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166964&idx=2&sn=983c68b88d2253701787315bd8a0d7b8\",\n \"Go 模块镜像三年多来一直向开发者提供带后门程序\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166964&idx=3&sn=30015a05034b15e55c9a2f6c9ef55b9e\",\n \"研究人员以不到50美元的成本创建了OpenAI o1“推理”模型的开源竞争对手。\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494923&idx=1&sn=e94b98cec87e5f890b8f1f0358872932\",\n \"150元搞定国产开源 AI 机器人，乐鑫ESP32+豆包、DeepSeek、OpenAI 、通义千问\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454936806&idx=1&sn=a915fb3d97a62bb78378dfb0b5a07339\",\n \"DeepSeek到底强在哪？\": \"https://mp.weixin.qq.com/s?__biz=MjM5MDA3MzI0MA==&mid=2650091315&idx=1&sn=3faf018537e1c4287629615050537407\",\n \"带挖2分钟即出高危，百万赏金猎人手把手教你「白嫖」漏洞！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313611&idx=1&sn=fbf2b63c67773103862ba5354d21830d\",\n \"2024年勒索赎金总额超8亿美元，下降35%\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313611&idx=2&sn=b1f64a222afe20f8840d67d2bd813747\",\n \"思科披露两个严重的身份服务引擎漏洞\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313611&idx=3&sn=763b74488aea13f582afe4569f509ecb\",\n \"“走红”的烦恼：DeepSeek成了网络犯罪分子的“新猎物”\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313611&idx=4&sn=cc3dddaec656f4de976cf4aae6a44228\",\n \"2024网安亏损榜大揭秘:TOP10企业亏惨了！\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485520&idx=1&sn=773e3b138dcefba482668fb5c8cb71f2\",\n \"【干货原创】实网攻防演习常态化，会带来什么变化01\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485520&idx=4&sn=f31515e7a93a81f9dd9b6b896afa4d6d\",\n \"【干货原创】K12教育，鲜为人知的模式秘密\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485520&idx=5&sn=360ce8d3ece1d5769cb077aeb8611fa4\",\n \"原创文章目录\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485520&idx=6&sn=05171a07fabaef8098bfccae17626a66\",\n \"2024年勒索软件赎金支付额大幅下降 35%：受害者拒向黑客妥协\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541487&idx=1&sn=01bd4b27b7bdda514f008c29c5e4bfc8\",\n \"【安全圈】PyPI 上的信息窃取恶意软件冒充了 DeepSeek AI 工具\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=1&sn=87a028f93da64d77ab88febfae2b2d56\",\n \"【安全圈】2024 年勒索软件支付额下降 35%，总额达 813,550,000 美元\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=2&sn=20f95ef580e0ec24f8d83012372886ab\",\n \"【安全圈】恶意 Go 软件包利用模块镜像缓存实现持久远程访问\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=3&sn=0a2ed43f7e7eb5e16bbf8a4cf07d0964\",\n \"【安全圈】研究人员发现新方法防御 AI 模型的通用越狱攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=4&sn=027c0126ec6f44288fe766c11d208124\",\n \"收藏 | 120个防火墙术语大全\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NDY0NTM2Nw==&mid=2247492253&idx=1&sn=39a1e77d8aa539e1d236d8580490e715\",\n \"ZoomEye接入DeepSeek后全球用户使用活跃度显著提升\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870925&idx=1&sn=ea9239ed92128feef62ae802217e1541\",\n \"网络领导力计划召集：网络安全中的女性\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492353&idx=1&sn=e909f629d87ee1d02904864f7867e6b9\",\n \"因开展数据处理活动时未按规定加强风险监测等，中行被罚\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931497&idx=1&sn=5fa30c9bd82fbf017e1448abebcccc6f\",\n \"商用密码标准研究院征集新一代商用密码算法\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931497&idx=2&sn=909dee64f7ca1528c5662b19daad1055\",\n \"模拟几种拒绝服务攻击\": \"https://mp.weixin.qq.com/s?__biz=MzAxNTg1MDYxNA==&mid=2247489370&idx=1&sn=e7e615c371e12444ff30d8eb4d7f3c78\",\n \"征稿启事 | 《中国信息安全》杂志2025年重点选题公布\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236109&idx=1&sn=b00af9135046cb4342d36c3db3fc46cc\"\n },\n \"Twitter @bytehx\": {\n \"Re @drak3hft7 @yeswehack Congrats man!\": \"https://x.com/bytehx343/status/1887520441218322455\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"Easy Way to Find Exposed Sensitive API Keys in JS Files\": \"https://infosecwriteups.com/easy-way-to-find-exposed-sensitive-api-keys-in-js-files-d9f9fccb18bb?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Reverse Engineering\": {\n \"Ghidra 11.3 has been released!\": \"https://www.reddit.com/r/ReverseEngineering/comments/1ij0j59/ghidra_113_has_been_released/\",\n \"Llama's Paradox - Delving deep into Llama.cpp and exploiting Llama.cpp's Heap Maze, from Heap-Overflow to Remote-Code Execution.\": \"https://www.reddit.com/r/ReverseEngineering/comments/1ijetp6/llamas_paradox_delving_deep_into_llamacpp_and/\",\n \"Byfron Anticheat Engineer Nemi Interview\": \"https://www.reddit.com/r/ReverseEngineering/comments/1ijf6hr/byfron_anticheat_engineer_nemi_interview/\",\n \"ScatterBrain: Unmasking the Shadow of PoisonPlug's Obfuscator\": \"https://www.reddit.com/r/ReverseEngineering/comments/1iiz1ps/scatterbrain_unmasking_the_shadow_of_poisonplugs/\"\n },\n \"Malwarebytes\": {\n \"New scams could abuse brief USPS suspension of inbound packages from China, Hong Kong\": \"https://www.malwarebytes.com/blog/news/2025/02/new-scams-could-abuse-brief-usps-suspension-of-inbound-packages-from-china-hong-kong\",\n \"University site cloned to evade ad detection distributes fake Cisco installer\": \"https://www.malwarebytes.com/blog/cybercrime/2025/02/university-site-cloned-to-evade-ad-detection-distributes-fake-cisco-installer\"\n },\n \"吾爱破解论坛\": {\n \"【2025春节】解题领红包活动 排行榜TOP图（初九 2/6）\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141690&idx=1&sn=f45ab511f67b160197d5b5a3b9d6691a&chksm=bd50a66e8a272f787ee3cefdcf37fc2e15d841d3005707dc4d4592d1b5d3f43cc366185c6e1c&scene=58&subscene=0#rd\"\n },\n \"安全牛\": {\n \"2025年网安人需要掌握的10项技能\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135004&idx=1&sn=ba8ea95e8b9bc3c7994103bfdd95e825&chksm=bd15accf8a6225d97ae60310f4e31fd9d52387a81148a01bb78e7d5f6bf91e1276c6915ac0a1&scene=58&subscene=0#rd\",\n \"Elon Musk团队操作引发美国政府数据安全危机与网络安全漏洞担忧；2024 网安（亏损）TOP 10 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135004&idx=2&sn=c7edbd6741477e964cbf32f7a36b481c&chksm=bd15accf8a6225d93290b88cd648c6600766748e242afc021eb41721345d332dee91f46226e3&scene=58&subscene=0#rd\"\n },\n \"腾讯玄武实验室\": {\n \"每日安全动态推送(25/2/6)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960011&idx=1&sn=0283493c88850486c899a9a7d71275d5&chksm=8baed254bcd95b4253dc3bc8d17ffa1f9029bc09dbd9f08db9ca4a0cc32246cc67bfe130f71f&scene=58&subscene=0#rd\"\n },\n \"Black Hills Information Security\": {\n \"John Strand’s 5 Phase Plan For Starting in Computer Security\": \"https://www.blackhillsinfosec.com/john-strands-5-phase-plan/\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"CISA将Microsoft Outlook、Sophos XG Firewall等漏洞列入已知被利用漏洞目录\": \"https://www.freebuf.com/news/421183.html\",\n \"DeepSeek-R1大模型在安全分析中过半越狱攻击失败，暴露重大安全隐患\": \"https://www.freebuf.com/news/421179.html\",\n \"FreeBuf早报 | DeepSeek遭网攻为大模型安全敲警钟；严重思科漏洞允许远程执行命令\": \"https://www.freebuf.com/news/421160.html\",\n \"Zyxel多款旧DSL设备存在2个零日漏洞，无修复措施\": \"https://www.freebuf.com/news/421152.html\",\n \"“走红”的烦恼：DeepSeek成为网络犯罪分子新目标\": \"https://www.freebuf.com/articles/421148.html\",\n \"思科披露两个严重的身份服务引擎漏洞\": \"https://www.freebuf.com/articles/421143.html\",\n \"网络安全运营人员外包的困境挑战\": \"https://www.freebuf.com/articles/neopoints/421140.html\"\n },\n \"安全分析与研究\": {\n \"恶意样本静态分析-下\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490352&idx=1&sn=7a485e1264bc2f1a221a0822e46ac1c3&chksm=902fb418a7583d0e021ea3afdf35da7f40f854e0da47ef6a24f9439945d149739776e4429fc3&scene=58&subscene=0#rd\"\n },\n \"丁爸 情报分析师的工具箱\": {\n \"【资料】美国国土安全部生成式人工智能部署手册\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148869&idx=1&sn=3eb79c7b6c4ec7a21dd483f975f0cd5b&chksm=f1af257fc6d8ac69d5596bc66e4f19da02274ec2526aa69efca3c3cf3440c270b2038b7497b6&scene=58&subscene=0#rd\",\n \"【资料】生成式人工智能和开放数据：指南和最佳实践\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148869&idx=2&sn=e31554327835c696b4cbf80e609a7800&chksm=f1af257fc6d8ac69876c69f2e873b1d5a6f041315816781b5b4c191e99fe5f2466c3cf3cd98a&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"警惕！DeepSeek爆火引山寨潮，超两千仿冒域名潜藏风险\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513650&idx=1&sn=dc24fd555056860003945b1591774bf5&chksm=ebfaf112dc8d78049d6d2856742340b9d6b5d717af829124238f6bdb5f99cfcfd7d0c045561a&scene=58&subscene=0#rd\",\n \"重磅！我国启动抗量子加密算法征集活动\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513650&idx=2&sn=187d868e3d8b42ebdf6bbe899d0c3f7c&chksm=ebfaf112dc8d780407ee15220ec7b4952723f63861264ee4a92a69a37879ee59c5d47a6ff1a1&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \"数据外发传输，通过 Sharp4AutoDeploy 自动化搭建代码审计环境和数据传输通道\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498762&idx=1&sn=129bcfb638a65164fddfcc7ea0bc9edd&chksm=fa5952e7cd2edbf19ad4da1947c3dadcefe4881a01886a0453a484f26aa659cf858d37145fa1&scene=58&subscene=0#rd\",\n \"国内最专业、最全面的 [ .NET 代码审计 ] 体系化学习交流社区\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498762&idx=2&sn=01e4042140a61c12ebc8206785c1697a&chksm=fa5952e7cd2edbf1d4667af1d2d8d9579f76a4a989633836f37a0c7e5cecfcb860b9a3f8054b&scene=58&subscene=0#rd\",\n \"2025 持续防范 GitHub 投毒，分析 Visual Studio 隐藏文件\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498762&idx=3&sn=3e2e284d8f779eab6c66039588873f5b&chksm=fa5952e7cd2edbf1e496e7e68248d5da1e4a9b9984300a94b366274c7e029523d9d5db3ee3ab&scene=58&subscene=0#rd\"\n },\n \"侠易龙门阵\": {\n \"火树银花不夜天，打铁花是属于中国人的浪漫\": \"https://mp.weixin.qq.com/s?__biz=MzIxODYyNjczNA==&mid=2247483898&idx=1&sn=1a130c505f7abeecbfc6c541c7673c2d&chksm=97e6ee3ba091672da6678be08779356c5b1f811e025fd6679ec0e9e546192ad29cc89ee0ef6e&scene=58&subscene=0#rd\"\n },\n \"威努特安全网络\": {\n \"助力智慧医疗：威努特云桌面解决方案全面赋能医院信息化升级\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651130913&idx=1&sn=e210438ac23508ac6904964267887ba1&chksm=80e71691b7909f87383138672a330773adcf357df1989edba031c839cb16af7f027cb26284b7&scene=58&subscene=0#rd\",\n \"AI驱动安全？AI驱动攻击？\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651130896&idx=1&sn=56f5061d64574605a7ad3cfddd8f5388&chksm=80e716a0b7909fb62b48eb3c1c40894c389de8c832c4551259d6f723e772afe0f0d90fe76bb9&scene=58&subscene=0#rd\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"研究人员提出一种超低成本的 AI 训练方法\": \"https://www.solidot.org/story?sid=80489\",\n \"北极气温上周日超过平均水平 20 摄氏度\": \"https://www.solidot.org/story?sid=80488\",\n \"苹果面临反垄断调查\": \"https://www.solidot.org/story?sid=80487\",\n \"OpenWrt 24.10 释出\": \"https://www.solidot.org/story?sid=80486\",\n \"iPhone 在华销量大幅下挫\": \"https://www.solidot.org/story?sid=80485\",\n \"本田与日产合并谈判破裂\": \"https://www.solidot.org/story?sid=80484\",\n \"DeepSeek 使用了中移动的基础设施\": \"https://www.solidot.org/story?sid=80483\",\n \"研究称早上幸福感最高\": \"https://www.solidot.org/story?sid=80482\",\n \"美国冻结对外援助打击全世界的研究项目\": \"https://www.solidot.org/story?sid=80481\",\n \"AMD 数据中心收入首次超过英特尔\": \"https://www.solidot.org/story?sid=80480\"\n },\n \"看雪学苑\": {\n \"重磅新课来袭！Android逆向内核攻防实战进阶\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589327&idx=1&sn=2aef91298bedb613705f20846e3d3c10&chksm=b18c280586fba113927b3368ea98c1f8d88a1fa72538f398dbae295bc9a6b50229c6ccbd9bb4&scene=58&subscene=0#rd\",\n \"[SHCTF]easyLogin 出题小记\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589327&idx=2&sn=163feb4414326003fc3f84b95ee8b8f6&chksm=b18c280586fba11395ed4f42ce23bd939ce52fd80208ef328b6c4ceb597e9f41b69b9776a33d&scene=58&subscene=0#rd\",\n \"DeepSeek 被盯上！揭露假网站、恶意软件、虚假投资骗局...\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589327&idx=3&sn=5382ebc44dc11d400662237938827abb&chksm=b18c280586fba11393e53147645ff53de42f8adb151f03b8267814193a3a3b26d55f24987082&scene=58&subscene=0#rd\"\n },\n \"网络空间安全科学学报\": {\n \"《网络空间安全科学学报》2024年工作回顾\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247504995&idx=1&sn=6a6568248e28f63602d5da17bd31a070&chksm=e9bfc0dddec849cb8ad241a0263cd055296b1d68cec05022a619cfa852c562b5b89940b5a327&scene=58&subscene=0#rd\"\n },\n \"中国信息安全\": {\n \"征稿启事 | 《中国信息安全》杂志2025年重点选题公布\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236109&idx=1&sn=b00af9135046cb4342d36c3db3fc46cc&chksm=8b5806b4bc2f8fa267b6355905e7a1813339066e110ab597508b7fbb34d08a0586db256e8918&scene=58&subscene=0#rd\",\n \"专家解读 | 构建数据安全治理新格局 促进公共数据开发利用\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236109&idx=2&sn=a578ea848a9d6ef9682be966d7f39985&chksm=8b5806b4bc2f8fa2b9c787ec55dc67b0f1ff60ce2b2df8377327e20c8a4d66835ef704109fb9&scene=58&subscene=0#rd\",\n \"专家观点 | 叶青：坚持全面依法治国 推进网络暴力治理现代化\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236109&idx=3&sn=73394d8c6895c72911158a0753cf584d&chksm=8b5806b4bc2f8fa2058d1ca1bad75b9753f584eb094095e05d185f9153f07c9ac2f9b750a91e&scene=58&subscene=0#rd\",\n \"国际 | TikTok案凸显美在数据主权问题上的双重标准\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236109&idx=4&sn=2d59faa090ffe544cd367bcd062bfd0f&chksm=8b5806b4bc2f8fa2985ae83be49d13e957c08f4da0910bca5c78ed4344c5a641e3e33ef4c2aa&scene=58&subscene=0#rd\",\n \"前沿 | 我国生成式人工智能的发展现状与趋势\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236109&idx=5&sn=1d2f7ccaf43de6626bbfacc477bf5d4a&chksm=8b5806b4bc2f8fa2264ec200889d43c6e51dfae1b5577b658fd11dff7fb97b948fa474f94c26&scene=58&subscene=0#rd\",\n \"评论 | AIGC让创作者不再过度依赖算法\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236109&idx=6&sn=03df3090791224e927813829c2f54301&chksm=8b5806b4bc2f8fa2b225bec581c8abcda71910cbfbbd26fa0803ae8e297c0137850e35ce2e54&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"中情局一封未分类邮件：大量涉我事务特工名单外流？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559497&idx=1&sn=6e94703c9601ae17af5bfeeb29ff5879&chksm=87117a42b066f354424ecd0b4c7f26270fe24ddd88496e9d6c50859a31952c74f86b991b7db9&scene=58&subscene=0#rd\",\n \"美政府8000+网页被“抹去”，“信息大清洗”背后有何隐情？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559497&idx=2&sn=1e76ccdbeae00a6fc7c9da1e3ba5c1b4&chksm=87117a42b066f35414ff01570b62e576e5d03756e24567c7d65bf8cda4026c253466e201386e&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"全年收入超 8600 亿！华为如何用 5 年时间重回巅峰？\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073367&idx=1&sn=356c0917d8d26e8ec7358508daca3d27&chksm=7e57d26149205b77a78924931598bcd6020e4addb562aa2851320700f769db1fb3f4f0e26f8c&scene=58&subscene=0#rd\",\n \"英伟达、英特尔和 AMD， 联手投出一家「芯片独角兽」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073350&idx=1&sn=87329333acb6ba156fc9cd3998ee3895&chksm=7e57d27049205b66177e5773bc54f529bb60a496a344e96504795255210f65d91e79b5d2bc41&scene=58&subscene=0#rd\",\n \"OpenAI 开放 AI 搜索，所有人可用；特斯拉发布史上最大优惠；华为小艺接入 DeepSeek | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073349&idx=1&sn=c427ffca27eb6e91277f62403ead3108&chksm=7e57d27349205b6593a3e2895b0fecfcf99e7bc14d38f01cbd96cca788a32bf1a97c927decb6&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"【急聘】蚂蚁安全天穹光年实验室，招人啦~~\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581021&idx=1&sn=eb90cf355aaba3e8809155b58d785198&chksm=e9146d67de63e47151e38f582e9e25e78f8a79d16dd144aa5d31b9b82509c282718d387f8657&scene=58&subscene=0#rd\",\n \"PYPI添加了项目归档系统以阻止恶意更新\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581021&idx=2&sn=40a6f0da873c44dbb0408de5145244d0&chksm=e9146d67de63e471041fad7ab6bc2c565b09947e3bb53e3049db5bcaf709891415e4e851d953&scene=58&subscene=0#rd\"\n },\n \"安全学术圈\": {\n \"加州大学伯克利分校 | 通过域名前置实现抗阻塞通信\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491642&idx=1&sn=862f015bc435bb15f184a4f73fac7e7b&chksm=fe2d1fb1c95a96a7a9e4631413068786abb2c6a300123a1dac0c89289178b877cad43749fff3&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】PyPI 上的信息窃取恶意软件冒充了 DeepSeek AI 工具\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=1&sn=87a028f93da64d77ab88febfae2b2d56&chksm=f36e7b15c419f203e33e3b5abaadef4379c831d462ff19e8c519765b1a304ea1988195bb7e96&scene=58&subscene=0#rd\",\n \"【安全圈】2024 年勒索软件支付额下降 35%，总额达 813,550,000 美元\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=2&sn=20f95ef580e0ec24f8d83012372886ab&chksm=f36e7b15c419f203f586cf30ca0c54553a28544e8acc44fe0983b15fa75ddfe6127b985bdebf&scene=58&subscene=0#rd\",\n \"【安全圈】恶意 Go 软件包利用模块镜像缓存实现持久远程访问\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=3&sn=0a2ed43f7e7eb5e16bbf8a4cf07d0964&chksm=f36e7b15c419f203eac3d6b64bb2979cf5ca88e1b8c3229b9bf761bcc51256b3052176063e90&scene=58&subscene=0#rd\",\n \"【安全圈】研究人员发现新方法防御 AI 模型的通用越狱攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067669&idx=4&sn=027c0126ec6f44288fe766c11d208124&chksm=f36e7b15c419f20345dae8c76fd939a1638e36abef0ed5208d33d6a1f2e08fface283528ac0b&scene=58&subscene=0#rd\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 2025 新春总动员（3）：世界上第一个计算机程序\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499675&idx=1&sn=fb738542c9b22d64ab6c87cf802aa5d7&chksm=c063d142f7145854186c858e444bdb69ebaf141e6c2bf869f8814054f43b64dcf8a63d09419c&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"CISO进入董事会，地位再次上升\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247535220&idx=1&sn=3338494448a114e5d96e7c774e04fb2b&chksm=c14438c9f633b1df696e5851a50107d20bbe16ed91091633329c9b6fc0f66105fb566444fbc1&scene=58&subscene=0#rd\",\n \"【事件分析】DeepSeek遭受大量境外网络攻击详细完整分析\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247535220&idx=2&sn=af665dff821641583006abf1d7d5d6d6&chksm=c14438c9f633b1df4a7d869e4537ed8b2640ac24ce5a777eca1d2ea106e4b6646b518f5a1ad1&scene=58&subscene=0#rd\"\n },\n \"TrustedSec\": {\n \"The Hidden Trap in the PCI DSS SAQ A Changes\": \"https://trustedsec.com/blog/the-hidden-trap-in-the-pci-dss-saq-a-changes\"\n },\n \"迪哥讲事\": {\n \"云安全-s3对象存储攻防\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497041&idx=1&sn=c2296b486d8c497fc59465db612190e9&chksm=e8a5ff32dfd27624e39206df0ebaff7624d3a6adeb16f2a251eb13eae9d820beab56351de9e6&scene=58&subscene=0#rd\"\n },\n \"Yak Project\": {\n \"这，这就，上班了？？\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247527616&idx=1&sn=9ab8fd0f165712ad0639b1ec53bc5597&chksm=c2d11064f5a699722d79ec2518dc9fcc9c730958cac4b0080536e72e8a5690df2afb25df37d8&scene=58&subscene=0#rd\"\n },\n \"ICT Security Magazine\": {\n \"Generative AI: Evoluzione, Funzionamento e Impatto sulla Trasformazione Digitale\": \"https://www.ictsecuritymagazine.com/articoli/generative-ai/\"\n },\n \"白帽子章华鹏\": {\n \"作为创业者，DeepSeek爆火给我的七点启示\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650236980&idx=1&sn=9a63ec92faa16e76aa6a63480b3633f6&chksm=f04ad288c73d5b9e6584ad61ef0f762b03d30fe689c202e3345b2a9dc04fa021eae68ce885be&scene=58&subscene=0#rd\"\n },\n \"Securityinfo.it\": {\n \"Silent Lynx: il gruppo APT torna all’attacco contro Kyrgyzstan e Turkmenistan\": \"https://www.securityinfo.it/2025/02/06/silent-lynx-il-gruppo-apt-torna-allattacco-contro-kyrgyzstan-e-turkmenistan/?utm_source=rss&utm_medium=rss&utm_campaign=silent-lynx-il-gruppo-apt-torna-allattacco-contro-kyrgyzstan-e-turkmenistan\"\n },\n \"360数字安全\": {\n \"多项入选！360标杆项目获评工信部2024年网络安全技术应用典型案例\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579315&idx=1&sn=104e0c81bebee7585c98e5d53c5dabcc&chksm=9f8d26bba8faafadb87f0d137fb8be934dce442af7b5e5cd5538b10b6bff1be642b946c0860c&scene=58&subscene=0#rd\"\n },\n \"微步在线\": {\n \"微步获评国家网络威胁信息汇聚共享技术平台“突出贡献支撑单位”\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183116&idx=1&sn=2a93e9117ddba9ed6c273b8b90adf94d&chksm=f4486e70c33fe76607126a90755b53983e96afb2e1c071104480561e8adcd3242fc9f49f9b44&scene=58&subscene=0#rd\"\n },\n \"Have I Been Pwned latest breaches\": {\n \"Thermomix Recipe World Forum - 3,123,439 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Thermomix\",\n \"Hakko Corporation - 9,665 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Hakko\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Google Tag Manager Skimmer Steals Credit Card Info From Magento Site\": \"https://blog.sucuri.net/2025/02/google-tag-manager-skimmer-steals-credit-card-info-from-magento-site.html\",\n \"Lawmakers push for DeepSeek ban from federal devices over China concerns\": \"https://therecord.media/lawmakers-push-for-deepseek-ban\",\n \"Ransomware Attack on Rural Health Services, Inc.: Medusa Threatens to Leak Sensitive Patient Data\": \"https://www.suspectfile.com/ransomware-attack-on-rural-health-services-inc-medusa-threatens-to-leak-sensitive-patient-data/\",\n \"Lawsuit against automatic license plate reader cameras can move forward, judge says\": \"https://therecord.media/lawsuit-against-automatic-license-plate-reader-moves-forward\",\n \"Experts Flag Security, Privacy Risks in DeepSeek AI App\": \"https://krebsonsecurity.com/2025/02/experts-flag-security-privacy-risks-in-deepseek-ai-app/\",\n \"Thermomix Recipe World Forum - 3,123,439 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Thermomix\",\n \"Microsoft says attackers use exposed ASP.NET keys to deploy malware\": \"https://www.bleepingcomputer.com/news/security/microsoft-says-attackers-use-exposed-aspnet-keys-to-deploy-malware/\",\n \"Changing the tide: Reflections on threat data from 2024\": \"https://blog.talosintelligence.com/changing-the-tide-reflections-on-threat-data-from-2024/\",\n \"Kimsuky hackers use new custom RDP Wrapper for remote access\": \"https://www.bleepingcomputer.com/news/security/kimsuky-hackers-use-new-custom-rdp-wrapper-for-remote-access/\",\n \"Spyware maker Paragon terminates contract with Italian government: media reports\": \"https://techcrunch.com/2025/02/06/spyware-maker-paragon-terminates-contract-with-italian-government-media-reports/\",\n \"Critical RCE bug in Microsoft Outlook now exploited in attacks\": \"https://www.bleepingcomputer.com/news/security/critical-rce-bug-in-microsoft-outlook-now-exploited-in-attacks/\",\n \"Hackers exploit SimpleHelp RMM flaws to deploy Sliver malware\": \"https://www.bleepingcomputer.com/news/security/hackers-exploit-simplehelp-rmm-flaws-to-deploy-sliver-malware/\",\n \"SimpleHelp RMM flaws exploited to breach corporate networks\": \"https://www.bleepingcomputer.com/news/security/simplehelp-rmm-flaws-exploited-to-breach-corporate-networks/\",\n \"Treasury agrees to block additional DOGE staff from accessing sensitive payment systems\": \"https://therecord.media/treasury-agrees-block-doge-access\",\n \"Protecting the Big Game: A Threat Assessment for Super Bowl LIX\": \"https://flashpoint.io/blog/protecting-the-big-game-a-threat-assessment-for-super-bowl-lix/\",\n \"VPN aziendali: proteggere e connettere le aziende\": \"https://www.cybersecurity360.it/soluzioni-aziendali/vpn-aziendali-proteggere-e-connettere-le-aziende/\",\n \"Critical Cisco ISE bug can let attackers run commands as root\": \"https://www.bleepingcomputer.com/news/security/critical-cisco-ise-bug-can-let-attackers-run-commands-as-root/\",\n \"Russia uses messaging apps to recruit terrorists, Ukraine's police says\": \"https://therecord.media/russia-uses-messaging-apps-to-recruit-terrorists\",\n \"Programmi di pulizia per PC: utili anche per le aziende\": \"https://www.cybersecurity360.it/soluzioni-aziendali/programmi-pulizia-pc/\",\n \"DDoS attacks reportedly behind DayZ and Arma network outages\": \"https://www.bleepingcomputer.com/news/security/ddos-attacks-reportedly-behind-dayz-and-arma-network-outages/\",\n \"IMI reports ‘unauthorized’ cyber activity in latest incident affecting UK engineering firms\": \"https://therecord.media/imi-uk-engineering-company-reports-cyber-incident\",\n \"Sicurezza in rete: strategie e soluzioni al servizio delle aziende\": \"https://www.cybersecurity360.it/soluzioni-aziendali/sicurezza-rete-soluzioni/\",\n \"Silent Lynx: il gruppo APT torna all’attacco contro Kyrgyzstan e Turkmenistan\": \"https://www.securityinfo.it/2025/02/06/silent-lynx-il-gruppo-apt-torna-allattacco-contro-kyrgyzstan-e-turkmenistan/\",\n \"Garantire la resilienza aziendale: i 3 pilastri per una corretta postura cyber\": \"https://www.cybersecurity360.it/soluzioni-aziendali/garantire-la-resilienza-aziendale-i-3-pilastri-per-una-corretta-postura-cyber/\",\n \"Cybersecurity: come mettere in sicurezza le aziende\": \"https://www.cybersecurity360.it/soluzioni-aziendali/cybersecurity-come-mettere-in-sicurezza-le-aziende/\",\n \"British engineering firm IMI discloses breach, shares no details\": \"https://www.bleepingcomputer.com/news/security/british-engineering-firm-imi-discloses-breach-shares-no-details/\",\n \"Endpoint security: cos’è e come si applica alla sicurezza informatica\": \"https://www.cybersecurity360.it/soluzioni-aziendali/software-endpoint-security/\",\n \"Instant URL Analysis: Use Safebrowsing via ANY.RUN’s Extension\": \"https://any.run/cybersecurity-blog/safebrowsing-extension/\",\n \"CISA Issues Nine Critical Industrial Control Systems Advisories, Addressing Vulnerabilities in Key Equipment\": \"https://cyble.com/blog/cisa-new-industrial-control-systems-advisories/\",\n \"ZTNA Zero Trust Network Access: cos’è e quali sono le migliori soluzioni\": \"https://www.cybersecurity360.it/soluzioni-aziendali/ztna-zero-trust-network-access-soluzioni/\",\n \"Take my money: OCR crypto stealers in Google Play and App Store\": \"https://securelist.com/sparkcat-stealer-in-app-store-and-google-play-2/115385/\",\n \"Google Cloud Platform Data Destruction via Cloud Build\": \"https://blog.talosintelligence.com/gcp-data-destruction-via-cloud-build/\",\n \"DPO: chi, come e perché può controllare la sua attività\": \"https://www.cybersecurity360.it/legal/privacy-dati-personali/dpo-chi-come-e-perche-puo-controllare-la-sua-attivita/\",\n \"Five Eyes Cyber Agencies Share New Security Guidelines for Edge Device Manufacturers\": \"https://cyble.com/blog/new-security-guidelines-edge-device-manufacturers/\",\n \"Così aggirano l’MFA in Active Directory Federation Services: rischi e contromisure\": \"https://www.cybersecurity360.it/news/cosi-aggirano-lmfa-in-active-directory-federation-services-rischi-e-contromisure/\",\n \"SIEM: quale scegliere e perché è fondamentale per la sicurezza dell’azienda\": \"https://www.cybersecurity360.it/soluzioni-aziendali/siem-quale-scegliere/\",\n \"CSPM: 5 soluzioni per garantire maggiore sicurezza su cloud\": \"https://www.cybersecurity360.it/soluzioni-aziendali/cspm-quale-scegliere/\",\n \"1-15 November 2024 Cyber Attacks Timeline\": \"https://www.hackmageddon.com/2025/02/06/1-15-november-2024-cyber-attacks-timeline/\",\n \"New Microsoft script updates Windows media with bootkit malware fixes\": \"https://www.bleepingcomputer.com/news/microsoft/new-microsoft-script-updates-windows-media-with-bootkit-malware-fixes/\",\n \"February 2025 Zero-Day Threat Intelligence\": \"https://pixmsecurity.com/blog/blog/february-2025-zero-day-threat-intelligence/\",\n \"Hakko Corporation - 9,665 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Hakko\",\n \"Italy says Paragon spyware targeted victims in dozens of European countries\": \"https://therecord.media/italy-paragon-spyware-targeted-european-victims-whatsapp\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #740: USN V4 Data Ranges\": \"https://www.hecfblog.com/2025/02/daily-blog-740-usn-v4-data-ranges.html\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"The Unbreakable Multi-Layer Anti-Debugging System, (Thu, Feb 6th)\": \"https://isc.sans.edu/diary/rss/31658\",\n \"ISC Stormcast For Thursday, February 6th, 2025 https://isc.sans.edu/podcastdetail/9312, (Thu, Feb 6th)\": \"https://isc.sans.edu/diary/rss/31656\"\n },\n \"Schneier on Security\": {\n \"AIs and Robots Should Sound Robotic\": \"https://www.schneier.com/blog/archives/2025/02/ais-and-robots-should-sound-robotic.html\"\n },\n \"Tor Project blog\": {\n \"New Release: Tails 6.12\": \"https://blog.torproject.org/new-release-tails-6-12/\"\n },\n \"Graham Cluley\": {\n \"Thailand cuts power and internet to areas of Myanmar to disrupt scam gangs\": \"https://www.bitdefender.com/en-us/blog/hotforsecurity/thailand-cuts-power-and-internet-to-areas-of-myanmar-to-disrupt-scam-gangs\",\n \"Smashing Security podcast #403: Coinbase crypto heists, QR codes, and ransomware in the classroom\": \"https://grahamcluley.com/smashing-security-podcast-403/\"\n },\n \"Your Open Hacker Community\": {\n \"what would you choose?\": \"https://www.reddit.com/r/HowToHack/comments/1ijbhc4/what_would_you_choose/\",\n \"SQLi dumper error\": \"https://www.reddit.com/r/HowToHack/comments/1ij2d4d/sqli_dumper_error/\",\n \"ISP Spoofing\": \"https://www.reddit.com/r/HowToHack/comments/1ij122z/isp_spoofing/\",\n \"Is my employer hacking my personal devices & private accounts? How can i prove it and protect myself? - I know I think it sounds crazy too!\": \"https://www.reddit.com/r/HowToHack/comments/1ijcdym/is_my_employer_hacking_my_personal_devices/\",\n \"Wifi sniffer connected with wireshark?\": \"https://www.reddit.com/r/HowToHack/comments/1ijaewx/wifi_sniffer_connected_with_wireshark/\"\n },\n \"Security Affairs\": {\n \"U.S. CISA adds Microsoft Outlook, Sophos XG Firewall, and other flaws to its Known Exploited Vulnerabilities catalog\": \"https://securityaffairs.com/173949/hacking/u-s-cisa-adds-microsoft-outlook-sophos-xg-firewall-and-other-flaws-to-its-known-exploited-vulnerabilities-catalog.html\",\n \"Cisco addressed two critical flaws in its Identity Services Engine (ISE)\": \"https://securityaffairs.com/173946/security/cisco-addressed-critical-flaws-in-identity-services-engine.html\",\n \"Notorious hacker behind 40+ cyberattacks on strategic organizations arrested\": \"https://securityaffairs.com/173932/cyber-crime/spanish-police-arrested-notorious-hacker.html\",\n \"Lazarus APT targets crypto wallets using cross-platform JavaScript stealer\": \"https://securityaffairs.com/173902/apt/lazarus-cross-platform-javascript-stealer-crypto-wallets.html\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Starting a Cybersecurity Blog of tools and resources?\": \"https://www.reddit.com/r/netsecstudents/comments/1ija40m/starting_a_cybersecurity_blog_of_tools_and/\"\n },\n \"The Hacker News\": {\n \"Fake Google Chrome Sites Distribute ValleyRAT Malware via DLL Hijacking\": \"https://thehackernews.com/2025/02/fake-google-chrome-sites-distribute.html\",\n \"Ransomware Extortion Drops to $813.5M in 2024, Down from $1.25B in 2023\": \"https://thehackernews.com/2025/02/ransomware-extortion-drops-to-8135m-in.html\",\n \"SparkCat Malware Uses OCR to Extract Crypto Wallet Recovery Phrases from Images\": \"https://thehackernews.com/2025/02/sparkcat-malware-uses-ocr-to-extract.html\",\n \"The Evolving Role of PAM in Cybersecurity Leadership Agendas for 2025\": \"https://thehackernews.com/2025/02/the-evolving-role-of-pam-in.html\",\n \"North Korean APT Kimsuky Uses forceCopy Malware to Steal Browser-Stored Credentials\": \"https://thehackernews.com/2025/02/north-korean-apt-kimsuky-uses-lnk-files.html\",\n \"Top 3 Ransomware Threats Active in 2025\": \"https://thehackernews.com/2025/02/top-3-ransomware-threats-active-in-2025.html\",\n \"Cisco Patches Critical ISE Vulnerabilities Enabling Root CmdExec and PrivEsc\": \"https://thehackernews.com/2025/02/cisco-patches-critical-ise.html\"\n },\n \"Krebs on Security\": {\n \"Experts Flag Security, Privacy Risks in DeepSeek AI App\": \"https://krebsonsecurity.com/2025/02/experts-flag-security-privacy-risks-in-deepseek-ai-app/\"\n },\n \"Deeplinks\": {\n \"EFF Applauds Little Rock, AR for Cancelling ShotSpotter Contract\": \"https://www.eff.org/deeplinks/2025/02/eff-applauds-little-rock-ak-cancelling-shotspotter-contract\",\n \"Protecting Free Speech in Texas: We Need To Stop SB 336\": \"https://www.eff.org/deeplinks/2025/02/protecting-free-speech-texas-we-need-stop-sb-336\",\n \"Closing the Gap in Encryption on Mobile\": \"https://www.eff.org/deeplinks/2025/02/closing-gap-encryption-mobile\"\n },\n \"Computer Forensics\": {\n \"DFE exam advice\": \"https://www.reddit.com/r/computerforensics/comments/1ij5eyg/dfe_exam_advice/\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"How to prove false statements? (Part 2)\": \"https://www.reddit.com/r/netsec/comments/1ijfupo/how_to_prove_false_statements_part_2/\",\n \"ArgFuscator.net - generate obfuscated command lines\": \"https://www.reddit.com/r/netsec/comments/1ijcd62/argfuscatornet_generate_obfuscated_command_lines/\"\n },\n \"网安寻路人\": {\n \"2025年美国BIS《AI扩散框架》解析：VEU认证要求规定\": \"https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247506470&idx=1&sn=98291786e3516a5c1734af59b367363a&chksm=97e967cca09eeedab692c376726c96f4777dcbaabc99f3228afffb3f77c8e69ab84a87dfd09f&scene=58&subscene=0#rd\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Deepseek, AMD, and Forgotten Buckets - PSW #860\": \"http://sites.libsyn.com/18678/deepseek-amd-and-forgotten-buckets-psw-860\"\n }\n}"}}, "archive/tmp/2024-12-10.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747327.696112, "n": 49443, "h": "6e5efb4f9f5ea0fb", "c": "{\n \"Taxodium\": {\n \"Weekly#19\": \"https://taxodium.ink/19.html\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"Omada Identity Cross Site Scripting\": \"https://cxsecurity.com/issue/WLB-2024120014\",\n \"Powered By DEV INFOTECH - Sql Injection\": \"https://cxsecurity.com/issue/WLB-2024120013\",\n \"Powered By DEV INFOTECH - Blind Sql Injection Vulnerability\": \"https://cxsecurity.com/issue/WLB-2024120012\"\n },\n \"paper - Last paper\": {\n \"Unveiling Dark Internet Service Providers: Bulletproof Hosting\": \"https://paper.seebug.org/3249/\"\n },\n \"Trustwave Blog\": {\n \"Enhancing Cybersecurity in Higher Education: Trustwave and Curtin University's Collaborative Journey\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/enhancing-cybersecurity-in-higher-education-trustwave-and-curtin-universitys-collaborative-journey/\"\n },\n \"奇安信攻防社区\": {\n \"解读 2024 年高通 GPU 漏洞细节及利用技术\": \"https://forum.butian.net/share/3936\",\n \"glibc堆all-in-one\": \"https://forum.butian.net/share/3919\"\n },\n \"Security Boulevard\": {\n \"DEF CON 32 – Compromising Electronic Logger & Creating Truck2Truck Worm\": \"https://securityboulevard.com/2024/12/def-con-32-compromising-electronic-logger-creating-truck2truck-worm/\",\n \"Surviving the Weekly CVE Review Gauntlet\": \"https://securityboulevard.com/2024/12/surviving-the-weekly-cve-review-gauntlet/\",\n \"31 of the Top MSSPs Use D3 for SOC Automation: Here’s Why\": \"https://securityboulevard.com/2024/12/31-of-the-top-mssps-use-d3-for-soc-automation-heres-why/\",\n \"Shared Intel Q&A: A thriving ecosystem now supports AWS ‘shared responsibility’ security model\": \"https://securityboulevard.com/2024/12/shared-intel-qa-a-thriving-ecosystem-now-supports-aws-shared-responsibility-security-model/\",\n \"Randall Munroe’s XKCD ‘Infinite Armada Chess’\": \"https://securityboulevard.com/2024/12/randall-munroes-xkcd-infinite-armada-chess/\",\n \"The Future of Cybersecurity Marketing: AI-Driven Strategies for 2025 and Beyond\": \"https://securityboulevard.com/2024/12/the-future-of-cybersecurity-marketing-ai-driven-strategies-for-2025-and-beyond/\",\n \"DEF CON 32 – Prime Cuts from Hacker History: 40 Years of 31337 – Cult Of The Dead Cow And Friends\": \"https://securityboulevard.com/2024/12/def-con-32-prime-cuts-from-hacker-history-40-years-of-31337-cult-of-the-dead-cow-and-friends/\",\n \"Auto Creating Reminders from Email Messages\": \"https://securityboulevard.com/2024/12/auto-creating-reminders-from-email-messages/\",\n \"Certificate Management Best Practices to Stay Cyber-Secure This Holiday Season\": \"https://securityboulevard.com/2024/12/certificate-management-best-practices-to-stay-cyber-secure-this-holiday-season/\",\n \"35 more Semgrep rules: infrastructure, supply chain, and Ruby\": \"https://securityboulevard.com/2024/12/35-more-semgrep-rules-infrastructure-supply-chain-and-ruby/\"\n },\n \"Tenable Blog\": {\n \"Data Security in Healthcare: How Tenable Cloud Security Can Help\": \"https://www.tenable.com/blog/data-security-in-healthcare-how-tenable-cloud-security-can-help\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2024-12-09 Review\": \"http://www.sec-wiki.com/?2024-12-09\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Mon Dec 9 22:30:47 UTC 2024\": \"https://github.com/trickest/cve/commit/a8a6dd3c4d0c9b88c40221b91ab590ca8b56bce4\",\n \"Update Mon Dec 9 14:19:20 UTC 2024\": \"https://github.com/trickest/cve/commit/156133d407d5f4307899555b81fae75e9822f4c4\",\n \"Update Mon Dec 9 06:27:28 UTC 2024\": \"https://github.com/trickest/cve/commit/06c7320c9656605f4a602fae88dffbe53aad0352\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"年关将至，这些单位用360安全大模型交上安全运营高分成绩单\": \"https://www.anquanke.com/post/id/302547\",\n \"需要采取紧急行动：ABB ASPECT 漏洞使建筑物面临网络攻击\": \"https://www.anquanke.com/post/id/302544\",\n \"CVE-2024-55563： 交易中继干扰漏洞对比特币闪电网络构成威胁\": \"https://www.anquanke.com/post/id/302541\",\n \"罗马尼亚选举系统在总统投票前遭受 8.5 万次攻击\": \"https://www.anquanke.com/post/id/302538\",\n \"CVE-2024-12209 (CVSS 9.8)： WP Umbrella 插件漏洞导致 30,000 个网站遭入侵\": \"https://www.anquanke.com/post/id/302535\",\n \"卡达诺基金会 X 账户遭黑客攻击，发布诈骗链接后又被删除\": \"https://www.anquanke.com/post/id/302532\",\n \"艺术家损失 13.5 万美元后，布鲁克林检察官关闭了 40 个 NFT 诈骗网站\": \"https://www.anquanke.com/post/id/302529\",\n \"DDoSecrets 推出大型 “泄密资料库 ”搜索引擎，收录数百万份泄密文件\": \"https://www.anquanke.com/post/id/302526\",\n \"Ultralytics 人工智能库遭受供应链攻击： 6000 万次下载遭到破坏\": \"https://www.anquanke.com/post/id/302523\",\n \"谷歌在 2024 年 12 月的 Pixel 安全更新中修复了严重的 RCE 漏洞\": \"https://www.anquanke.com/post/id/302520\"\n },\n \"obaby@mars\": {\n \"白月光\": \"https://h4ck.org.cn/2024/12/18750\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"黑客利用 ProjectSend 漏洞对暴露的服务器进行后门处理\": \"https://www.4hou.com/posts/pnBX\"\n },\n \"Doonsec's feed\": {\n \"如何寻找隐藏的参数\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496545&idx=1&sn=f5fa3d991b8bce754f69af9bce39e422\",\n \"英伟达被立案调查！\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247490941&idx=1&sn=73455c051824ebc90c3bea2782228ee9\",\n \"渗透测试人员的 Burp Suite：HackBar\": \"https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247485872&idx=1&sn=2603f14c6fdd1c0d01adb361b18ffc13\",\n \"【漏洞预警】SoftLab Integrate Google Drive身份认证绕过漏洞(CVE-2023-32117)\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489283&idx=1&sn=29b9004e3fdc168434fc378d44504590\",\n \"【漏洞情报】海信智能公交企业管理系统AdjustWorkHours.aspx SQL注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489283&idx=2&sn=5c93a143e811b95e8b77abdcb97f6599\",\n \"怕死版mimikatz\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTQxOTA3Ng==&mid=2247489254&idx=1&sn=603f1690af6ae7c789ee9af31d92b617\",\n \"【报名】标识第一课——工业互联网标识人才培训（北京站）火热招生中\": \"https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247591727&idx=1&sn=6fc30be794ee3f883d6fe2aaa6f18fbe\",\n \"推荐一款功能炸裂的自动解密被加密的报文工具\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247487437&idx=1&sn=760662c393573034d470e82196824aa7\",\n \"个人网盘领域首个获批！百度网盘获颁“个人信息保护认证证书”\": \"https://mp.weixin.qq.com/s?__biz=MzA3NTQ3ODI0NA==&mid=2247487561&idx=1&sn=0d28bcd208722939779526f54ba08165\",\n \"国城杯 · 2024 WriteUp\": \"https://mp.weixin.qq.com/s?__biz=MzIyMjkzMzY4Ng==&mid=2247510233&idx=1&sn=017f4e232d8452c53d7e2f476a466267\",\n \"「漏洞复现」Mitel MiCollab 企业协作平台 任意文件读取漏洞(CVE-2024-41713)\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486288&idx=1&sn=1bb852514919b1b26bddd263e28d5501\",\n \"“金析为证”：公安部技术监督委员会批准发布4项行业标准\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MzEwMDAyNw==&mid=2247485188&idx=1&sn=794fda7eb572dc6f84cc502cf102193e\",\n \"Burp插件编写简易教程 - 外部联动Katana爬虫\": \"https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485549&idx=1&sn=b24ef54a14cd3d1ed9e838b4a846b561\",\n \"量子安全技术蓝皮书2024\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247616670&idx=1&sn=14ba65406032ec83449205c146d775ca\",\n \"智能网联汽车量子通信技术及其安全应用标准领航研究 2023.12\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247616670&idx=2&sn=f4ebe340ad77093272f4c05edeb02178\",\n \"后量子密码学对汽车安全的影响——案例研究\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247616670&idx=3&sn=dba380b9172d578b250f8510e4497014\",\n \"G.O.S.S.I.P 阅读推荐 2024-12-09 上古游戏点石成金\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499372&idx=1&sn=b723d2be54a413cae106a3d24c6d624c\",\n \"完成第700场演出，一组剧照重温舞剧《永不消逝的电波》精彩\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632858&idx=1&sn=9b8a40a90e5184d27e38fa8b24e51500\",\n \"后量子密码｜AWS 发布 PQC 迁移“前进计划”\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632858&idx=2&sn=105279942915fd24b1992ccabc5793a9\",\n \"专家解读 | 可信数据空间：促进民航新质生产力建设\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632858&idx=3&sn=a0252fbf56cbf7971714b9afafa35cf6\",\n \"某AI产品违规生成法律法规禁止信息，遭地方网信办关停服务并整改\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513257&idx=1&sn=9e69872c15f0b7ab65754a15235d08f7\",\n \"黄殿中院士：智能时代网络空间认知安全新观察\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=2&sn=9a9104dcc54d53c78ad711af395dff3e\",\n \"Splunk 客户高峰会--北京站（2025.01.09 / 周四）\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247540969&idx=1&sn=47a3ca7bff30a926d29192da8e5a6bbe\",\n \"2024 国城杯 WP\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODc2NTg1OA==&mid=2247491363&idx=1&sn=b3fbc5447b916b64151188da46996dad\",\n \"工具集：Dawn Launcher【工具容器】\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247484867&idx=1&sn=555b1722488f2dcc9ce26896f522e458\",\n \"Zabbix SQL 注入漏洞（CVE-2024-42327）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NzM4NzI1MA==&mid=2247486212&idx=1&sn=a25394ea5d523773aa1771aebc8872fc\",\n \"“何以杨数浦”数字经济合规发展系列沙龙正式启动！\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247515874&idx=1&sn=2928a7cf39797d6e6ec8841d6efb7905\",\n \"《2024年度上海市网络安全产业创新攻关成果目录》发布啦\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247515874&idx=2&sn=0a944cb7d4ea74e08407bf27bcb5d3c8\",\n \"Hackerone report：通过 X-Forwarded-For 报头绕过 IP 限制\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTc4ODM5OA==&mid=2247485466&idx=1&sn=7b79e87f504c9cfaf0cce9c1aab5359f\",\n \"04【邮件安全】如何防护预览&劫持类附件风险\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTUyMTI2MQ==&mid=2247484716&idx=1&sn=6903a2af0030c051776b20273ba0458c\",\n \"数证杯决赛-团体赛（服务器）\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTcyNDg1OA==&mid=2247484222&idx=1&sn=02c6962269acc1003fab837a13e95424\",\n \"IP知识百科 | SASE？啥西？SASE热词轻松学！\": \"https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505664&idx=1&sn=7632f619bf8ddfe1177643a98c542342\",\n \"制造业面临的8大网络安全威胁\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490079&idx=1&sn=bfbcdb1e84475850521f37ed33f02b03\",\n \"以太坊攻击马拉松 祝你好运 - 祝你狩猎愉快！\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525557&idx=1&sn=e11c2ab341504521d914a0944bedf765\",\n \"CVE-2024-55563：交易中继干扰漏洞对比特币闪电网络构成威胁\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525557&idx=2&sn=780285b5a5a94ef626071a57bc2412e1\",\n \"隐侠必备网安利器之 Chrome 扩展（隐蔽身份篇 · 一） 大揭秘，不可错过！\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247514214&idx=1&sn=cc613f0da9ceaa175895d0bbd7113ea5\",\n \"漏洞马拉松2024 | 积分赛阶段冲刺ing，半区见真章！\": \"https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070792&idx=1&sn=12d743d033becec5fcc0920e17922d86\",\n \"金盾信安 | 网络和数据领域资讯第38期(2024.12.3-2024.12.9)\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448680502&idx=1&sn=321e55ae994e5c8e6d534f29ce93bdd3\",\n \"权威推荐！AI助力启明星辰NDR实现智能安全再升级\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651729759&idx=1&sn=065c091fd2437235981d9e6835385d8d\",\n \"SRC挖掘-验证码攻防问题总结分享\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247518596&idx=1&sn=b8f5c4c7744bd9a24cbfd7b6dc8362d9\",\n \"央视报道 | “登录态”？公安网安查处新型侵犯公民个人信息案\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094241&idx=1&sn=a9e47e2e261f2d4d8735f6307a28a621\",\n \"最强大的Android间谍软件曝光，可提取信息、密码和执行shell命令\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094241&idx=2&sn=ffebda2bff5fc391363ae248eb8be9d4\",\n \"24级网络安全新生赛WP\": \"https://mp.weixin.qq.com/s?__biz=MzU3MDU5NTA1MQ==&mid=2247499635&idx=1&sn=0b539e8f9e4b689d53a3c73d68f5eeb4\",\n \"SQL注入学习记录\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NzM4OTQ5NQ==&mid=2247484954&idx=1&sn=362865deeff0f3a6b60f8406f9b71269\",\n \"腾讯云首届金融安全峰会圆满举办，让安全价值看得见\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309257&idx=1&sn=3244d5450bb861dca23f9e25753e0faf\",\n \"Gartner 发布首份《身份验证魔力象限报告》\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309257&idx=2&sn=5c0d2c52971ee4d4a78f71744fb9d884\",\n \"关于举办移动互联网安全工程师（CAPPSEC）培训班的通知\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309257&idx=3&sn=3a9ea295caaee20889a3a80aa72997a8\",\n \"SCA-Goat：一款包含大量安全缺陷的SAC应用程序靶场环境\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309257&idx=4&sn=1f69c0666c38c62ce5047a87dd482517\",\n \"持续领先丨盛邦安全荣登《网络安全企业100强》\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650277187&idx=1&sn=b4ff40c0e268a18e66898288393fceaa\",\n \"第78期 | GPTSecurity周报\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495309&idx=1&sn=2fb82edc0049fa284cc481cf7bf47b1d\",\n \"【安全圈】罗马尼亚实锤“俄利用TikTok干扰大选”？\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=1&sn=7d30d5e05512a097527518e65b5d4a47\",\n \"【安全圈】安装国内某些税务申报软件的机器升级到Windows 11 24H2版后会蓝屏死机\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=2&sn=d5fede1d86a1b698f39f53972f7be353\",\n \"【安全圈】以虚假视频会议为诱饵，攻击者瞄准了Web3公司员工\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=3&sn=03588703ad0844e131c2d12ea5375e40\",\n \"【安全圈】需要采取紧急行动：ABB ASPECT 漏洞使建筑物面临网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=4&sn=6f910eee1c20ed718fdf7c754fd840e1\",\n \"别考错了！CISA/CISSP/CISM适合对象的区别\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247519907&idx=1&sn=099b58cd30b895995aeac369464e0c08\",\n \"CISP 2025年课程安排看这里！\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247519907&idx=2&sn=442c2904f15ed9f743a172ec7134cbc7\",\n \"SIAM™ Professional免费培训|DevOps系列课程享双12优惠\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247519907&idx=3&sn=222c281674b9a12d7c451d6508da7005\",\n \"速览 | 谷安2024年10月攻防考试成绩公布！欲报从速\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247519907&idx=4&sn=27923cc9d5e2803c458dfe5c68da8703\",\n \"周鸿祎：360安全大模型将向“一带一路”友邻国家开放共享\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577471&idx=1&sn=14be24acd47dba66bd105aa3790e5c53\",\n \"助力人才强国战略，360以实战人才为核心打造产教融合新业态\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577471&idx=2&sn=16c3698586f9efb50ac8ceff99fecdd6\",\n \"百家｜张美波：网络安全经济学\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247632681&idx=1&sn=d40f39269a4fe966e61f9bc2e55b1514\",\n \"以色列的间谍软件Pegasus正在无孔不入\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247632681&idx=2&sn=c56933c3e0209e2ae60610191c3a7a10\",\n \"冲冲冲💪\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493000&idx=1&sn=ed482aa3f3b72131fa630122b113c346\",\n \"中央网信办秘书局党支部与网安协会党支部联合举办党建与业务融合学习交流会\": \"https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649401044&idx=1&sn=cbed847aca70cfaba5c0979b30d13b08\",\n \"物联网安全合规做得太差，美国多个联邦机构遭批评\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513257&idx=2&sn=1d05333b962906f1c19d82b57a98309c\",\n \"齐向东：用标准迎战大模型时代的安全挑战\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247623193&idx=1&sn=357a72e2c863a7f7771d4e982266e2bd\",\n \"DataCon2024|大模型“说胡话”该怎么破？Ta们寻找了破解之道\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247623193&idx=2&sn=f6c24feef88c95e3fe8b5664e1ef2104\",\n \"安全卫士 | 魔方安全漏洞周报\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291910&idx=1&sn=cce3441e3c4e73b5d7381cac3619dd88\",\n \"用友NC /portal/pt/task/process SQL注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489592&idx=1&sn=d4b5b3b2d49bb277a97a0f4f1ade1c30\",\n \"关注丨2项网络安全国家标准获批发布\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247530437&idx=1&sn=8001d41a5b0350a95cf9a50ce7e3f787\",\n \"大咖话安全丨余少华院士：我国网络通信新的重大风险与挑战思考\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247530437&idx=2&sn=5bb653f6b28f2ff75c3f7a210d0125f1\",\n \"助力安全价值显性化，腾讯云举办首届金融安全峰会\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526082&idx=1&sn=ee55f5a2197c52a890b29e4b7f059321\",\n \"嘉宾观点 | “看得见”的金融云安全建设\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526082&idx=2&sn=e2779d80c1c79eb2074809e12418a7bf\",\n \"工具推荐-js爬取工具\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488045&idx=1&sn=0b59d57030fcb1ef0f99bc1c0fe375c4\",\n \"钓鱼网页散播银狐木马，远控后门威胁终端安全\": \"https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247504176&idx=1&sn=27f99ecb6ba3c497677bde65758089d4\",\n \"科创引领，校企同行—合合信息与同济大学计算机科学与技术学院举行捐赠仪式\": \"https://mp.weixin.qq.com/s?__biz=MzAxMzg0NjY2NA==&mid=2247492910&idx=1&sn=83aa8f2cff89c0e9b013498e7152b157\",\n \"倒计时2天！“CCF-CV企业交流会—走进合合信息”开启直播预约！一起听大咖讲解AI视觉安全“黑科技”！\": \"https://mp.weixin.qq.com/s?__biz=MzAxMzg0NjY2NA==&mid=2247492910&idx=2&sn=062328804fc095e9ea606a9b7e2bbda6\",\n \"万亿级农信社通过软件成分分析工具精准把控风险，强基固本保障金融科技发展\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247513619&idx=1&sn=5ba889a8416bf714c340472d17a73804\",\n \"一图读懂《智能网联汽车道路测试与示范应用管理规范》\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247513619&idx=2&sn=5bc62616e9dba4cbe3f5889603c6da17\",\n \"人社部能力建设中心主办！开源情报分析技术培训班邀您共聚厦门\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651430329&idx=1&sn=c87f4c4a6fa3db589efde27401473c9f\",\n \"每周网安资讯（12.3-12.9）|Oracle等厂商的多款产品存在漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505295&idx=1&sn=c7dccc68315c50474f6e877a45a1b391\",\n \"漏洞提交通道关闭通知\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MzUxOTc2MQ==&mid=2247484788&idx=1&sn=dedff1df112f5ec319e5b27f37b31f7a\",\n \"全球视野 | 国际网安快讯（第40期）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=1&sn=ebdea6dbaae16e3f7ca829dce2f58238\",\n \"聚焦 | 第八届“一带一路”园区建设国际合作峰会首次网络安全国际合作专题论坛在京举办\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=3&sn=9ed7aa5dcf60b42a52239381f96913be\",\n \"专家解读 | 坚持“六位一体” 立体化推进可信数据空间建设\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=4&sn=8236a5d914c530c1a19fe278be26d564\",\n \"专家解读 | 《全球数据跨境流动合作倡议》：焦点之问与中国答案\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=5&sn=455a713cc61401ad9a4faf254fda80d2\",\n \"评论 | 未成年人用网“一刀切”换不来一劳永逸\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=6&sn=1ee91cd47f332f0b82f4e9233537e9af\",\n \"注意 | 警惕！网站暗链的隐秘威胁\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=7&sn=2b70e3d1949c94969594515626881334\",\n \"CNVD漏洞周报2024年第49期\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495571&idx=1&sn=0c222901aba75215f7b034c9a02775e8\",\n \"上周关注度较高的产品安全漏洞(20241202-20241208)\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495571&idx=2&sn=464e8fb82cad6f465f8242e841ab2260\",\n \"简讯丨信安世纪获评工信部商用密码应用产业促进联盟“信息报送优秀单位”\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650662326&idx=1&sn=34266ab8662dbcc8b57961f3446958ae\",\n \"Ultralytics AI模型正被劫持用于部署挖矿机\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521726&idx=1&sn=6242710e1abb2954dfd85acd30c4ffb1\",\n \"SonicWall 修复Secure Access Gateway 中的6个漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521726&idx=2&sn=4020dbda138c28b7da91666b33eb120a\",\n \"【开源情报工具】根据用户名提供邮箱和电话号码\": \"https://mp.weixin.qq.com/s?__biz=MzkxMTA3MDk3NA==&mid=2247486865&idx=1&sn=07f4e5f115abb5cbc993a91a37d0bbff\",\n \"强网杯S8初赛 PWN 赛题解析\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585618&idx=1&sn=2829f550700528e99809f3cd53994b6d\",\n \"Linux pwn 探索篇\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585618&idx=2&sn=24e847a05b8141292f6dee8100388e19\",\n \"安全热点周报：新的 Windows 零日漏洞暴露 NTLM 凭据，已获得非官方补丁\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502580&idx=1&sn=6c73b0ed8291424bf945a368d40498c1\",\n \"X情报社区漏洞奖励计划收录扩大！提供本地环境再享额外20%奖金加成！\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjA4MjMyMw==&mid=2647789831&idx=1&sn=012815bf3c53ef1a6060c1dc35d847b9\",\n \"TimelineSec助力2024漏洞马拉松活动，史无前例反爬专项单个奖励最高5w！\": \"https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247496891&idx=1&sn=9c8fd99b9ddc86cb7f57bee467702ab5\",\n \"火山引擎veImageX助力谱时智能云深耕照片直播赛道\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512202&idx=1&sn=79727c02dc9c3dd3c3d6c668c5d95c5e\",\n \"见证无限可能！火山引擎冬季 Force 大会开发者论坛来袭\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512202&idx=2&sn=73814a49bc3d3b62dc7f2528d46458b9\",\n \"Linux之父都“不明觉赞”的一个内核优化与修复历程\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649787849&idx=1&sn=f41ae07f735af72fadc19c45f090c2b1\",\n \"腾讯及中国人民大学联合研究成果入选ACM MM2024\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649787849&idx=2&sn=431f7f57f9b37c8834ce9f752aecd67c\",\n \"【SQLi_Labs】Basic Challenges\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247494614&idx=1&sn=69f63bc6e42c3b4dcdacc0d82c3da344\",\n \"开源前哨 · 热点情报速览（2024.12.3-2024.12.9）\": \"https://mp.weixin.qq.com/s?__biz=Mzg2Nzg0NDkwMw==&mid=2247493086&idx=1&sn=0009c53e4c4c60324564123edbc4f386\",\n \"珞安科技实力入选2025年—2027年度四川省通信管理局网络和数据安全技术支撑单位\": \"https://mp.weixin.qq.com/s?__biz=MzU2NjI5NzY1OA==&mid=2247511653&idx=1&sn=5e30da77806da06f9b266811072795a7\"\n },\n \"一个被知识诅咒的人\": {\n \"【Python】深入探讨Python中的属性访问控制：用@property实现动态属性的艺术\": \"https://blog.csdn.net/nokiaguy/article/details/144345996\",\n \"Python中的多态性：基于ABC模块的接口设计与实现\": \"https://blog.csdn.net/nokiaguy/article/details/144345838\"\n },\n \"Blogs dade\": {\n \"Weekly Retro 2024-W49\": \"https://0xda.de/blog/2024/12/weekly-retro-2024-w49/\"\n },\n \"hasherezade's 1001 nights\": {\n \"Protected: Flare-On 11 – Task 7\": \"https://hshrzd.wordpress.com/2024/12/09/flare-on-11-task-7/\"\n },\n \"Trail of Bits Blog\": {\n \"35 more Semgrep rules: infrastructure, supply chain, and Ruby\": \"https://blog.trailofbits.com/2024/12/09/35-more-semgrep-rules-infrastructure-supply-chain-and-ruby/\"\n },\n \"Securelist\": {\n \"Story of the Year: global IT outages and supply chain attacks\": \"https://securelist.com/ksb-story-of-the-year-2024/114883/\"\n },\n \"Toooold\": {\n \"The missing knowledge snippets of AI\": \"https://toooold.com/2024/12/09/understand-this.html\"\n },\n \"Malwarebytes\": {\n \"Encrypted messaging service intercepted, 2.3 million messages read by law enforcement\": \"https://www.malwarebytes.com/blog/news/2024/12/encrypted-messaging-service-intercepted-2-3-million-messages-read-by-law-enforcement\",\n \"A week in security (December 2 – December 8)\": \"https://www.malwarebytes.com/blog/news/2024/12/a-week-in-security-december-2-december-8-2\"\n },\n \"Reverse Engineering\": {\n \"/r/ReverseEngineering's Weekly Questions Thread\": \"https://www.reddit.com/r/ReverseEngineering/comments/1ha4wn0/rreverseengineerings_weekly_questions_thread/\",\n \"hrtng - IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations\": \"https://www.reddit.com/r/ReverseEngineering/comments/1ha9bd5/hrtng_ida_pro_plugin_with_a_rich_set_of_features/\",\n \"New dog, old tricks: DaMAgeCard attack targets memory directly thru SD card reader\": \"https://www.reddit.com/r/ReverseEngineering/comments/1haie3d/new_dog_old_tricks_damagecard_attack_targets/\",\n \"Announcing Fibratus 2.3.0 - Adversary tradecraft detection, protection, and hunting\": \"https://www.reddit.com/r/ReverseEngineering/comments/1haevp3/announcing_fibratus_230_adversary_tradecraft/\"\n },\n \"Microsoft Security Response Center\": {\n \"Mitigating NTLM Relay Attacks by Default\": \"https://msrc.microsoft.com/blog/2024/12/mitigating-ntlm-relay-attacks-by-default/\"\n },\n \"Sandfly Security Blog RSS Feed\": {\n \"Default User SSH Authorized Key Risks on Linux\": \"https://sandflysecurity.com/blog/default-user-ssh-authorized-key-risks-on-linux/\"\n },\n \"Webroot Blog\": {\n \"Top 5 reasons MSPs choose OpenText MDR\": \"https://www.webroot.com/blog/2024/12/09/top-5-reasons-msps-choose-opentext-mdr/\"\n },\n \"Checkmarx\": {\n \"Malicious NPM Package Exploits React Native Documentation Example\": \"https://checkmarx.com/blog/malicious-npm-package-exploits-react-native-documentation-example/\"\n },\n \"Dhole Moments\": {\n \"Ideas and Execution\": \"https://soatok.blog/2024/12/09/ideas-and-execution/\"\n },\n \"体验盒子\": {\n \"如何知道移动应用程序是否是使用 Flutter 制作的？\": \"https://www.uedbox.com/post/69899/\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"腾讯云首届金融安全峰会圆满举办，让安全价值看得见\": \"https://www.freebuf.com/articles/417280.html\",\n \"FreeBuf早报 | 普通用户手机发现间谍软件Pegasus；软件供应链巨头被勒索软件入侵\": \"https://www.freebuf.com/news/417247.html\",\n \"通过二维码实现命令与控制操作的新方法\": \"https://www.freebuf.com/news/417227.html\",\n \"2024半年度国内外网安龙头公司业绩对比\": \"https://www.freebuf.com/news/417217.html\",\n \"Gartner 发布首份《身份验证魔力象限报告》\": \"https://www.freebuf.com/articles/neopoints/417194.html\",\n \"以虚假视频会议为诱饵，攻击者瞄准了Web3公司员工\": \"https://www.freebuf.com/news/417193.html\",\n \"罗马尼亚实锤“俄利用TikTok干扰大选”？\": \"https://www.freebuf.com/news/417184.html\"\n },\n \"安全牛\": {\n \"从勒索软件到APT：揭开制造业面临的8大网络安全威胁\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133887&idx=1&sn=1b3543929a156d58fd3a9502004cc7ce&chksm=bd15a76c8a622e7aa699f4d38a6742fa582715f6a5a880b7807d44a5dd793df64c3cf99d80c7&scene=58&subscene=0#rd\",\n \"劫持其他APT组织基础设施实施攻击，APT组织新战术曝光；罗克韦尔自动化软件曝多个严重漏洞，可被利用执行远程代码 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133887&idx=2&sn=5e64b53a72121f42601f459acb55f305&chksm=bd15a76c8a622e7a7bbfa541d6ae401b0d481ab229de33253da125d2bbfd20dada28b8730503&scene=58&subscene=0#rd\"\n },\n \"黑海洋 - IT技术知识库\": {\n \"SquareX “一次性浏览器” 以防止信息泄露\": \"https://www.upx8.com/4551\",\n \"Pandora Helper-开源ChatGPT Plus/Claude Pro账号共享服务\": \"https://www.upx8.com/4550\",\n \"微软开源图片到3D模型生成模型-TRELLIS\": \"https://www.upx8.com/4549\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"摄入超加工食品会导致肌肉储存更多脂肪\": \"https://www.solidot.org/story?sid=79999\",\n \"Google 延长 Pixel 6 和 7 的软件更新两年\": \"https://www.solidot.org/story?sid=79998\",\n \"广电总局限制 AI 魔改\": \"https://www.solidot.org/story?sid=79997\",\n \"itch.io 因 AI 举报被下线\": \"https://www.solidot.org/story?sid=79996\",\n \"史蒂芬五重星系正接受冲击波的洗礼\": \"https://www.solidot.org/story?sid=79995\",\n \"百度上线公文助手 AI\": \"https://www.solidot.org/story?sid=79994\",\n \"安装中国税务申报和政府应用的 PC 升级 Windows 11 24H2 可能会遭遇蓝屏死机\": \"https://www.solidot.org/story?sid=79993\",\n \"Marvell 市值超过英特尔\": \"https://www.solidot.org/story?sid=79992\",\n \"新加坡中小学生数理学力在 TIMSS 中排名第一\": \"https://www.solidot.org/story?sid=79991\",\n \"比特币矿场购买德州风电场然后退出电网\": \"https://www.solidot.org/story?sid=79990\"\n },\n \"安全分析与研究\": {\n \"伪装成ToDesk安装程序加载后门盗取数字货币\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247489656&idx=1&sn=b2693f2eecfd194407c52a70a20646ab&chksm=902fb750a7583e465c5ec31f000f5f3d8bf101a39b8b8704794a8cb29233ffbd4c8b3fd6b903&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"某AI产品违规生成法律法规禁止信息，遭地方网信办关停服务并整改\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513257&idx=1&sn=9e69872c15f0b7ab65754a15235d08f7&chksm=ebfaf389dc8d7a9f3cc0443b48f463849d85186f88f59e4a1f44fb9247789ab1150c0d254d62&scene=58&subscene=0#rd\",\n \"物联网安全合规做得太差，美国多个联邦机构遭批评\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513257&idx=2&sn=1d05333b962906f1c19d82b57a98309c&chksm=ebfaf389dc8d7a9f0aa09b35526de72c1409921742417e064eeb6c68844e61a0eaaa5cc6fd2f&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"强网杯S8初赛 PWN 赛题解析\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585618&idx=1&sn=2829f550700528e99809f3cd53994b6d&chksm=b18c3a9886fbb38e3db37f1738d486bb7a2f7262894cfed8e22cda8a0631fd6b919fa3e8ca95&scene=58&subscene=0#rd\",\n \"Linux pwn 探索篇\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585618&idx=2&sn=24e847a05b8141292f6dee8100388e19&chksm=b18c3a9886fbb38ef5e7485b70edb2f13850ae2a1d7cda06671b0e3f625221aaa171a13018eb&scene=58&subscene=0#rd\"\n },\n \"安全客\": {\n \"AI+军事：美防务公司将从战场收集数据训练AI模型\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787578&idx=1&sn=45f7ac3d09b57206a73485ddf7018382&chksm=8893bcd5bfe435c3d627c1414bbfbda61704354abcc718a0365e3b30582f7e2ed64f2fdcd0ae&scene=58&subscene=0#rd\"\n },\n \"代码卫士\": {\n \"Ultralytics AI模型正被劫持用于部署挖矿机\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521726&idx=1&sn=6242710e1abb2954dfd85acd30c4ffb1&chksm=ea94a4d4dde32dc29ca6a54533f86e3b41a2b1e42f56e3e15323ea820f86fb4b47b6ee550e8b&scene=58&subscene=0#rd\",\n \"SonicWall 修复Secure Access Gateway 中的6个漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521726&idx=2&sn=4020dbda138c28b7da91666b33eb120a&chksm=ea94a4d4dde32dc25a0dcbe4bb417dad621e9d9ab1c701a92e4cccf1dda90fcc8f7fc0d1eea9&scene=58&subscene=0#rd\"\n },\n \"暗影安全\": {\n \"极高可视化程度的供给面检查工具\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165655&idx=1&sn=bcf1c0abd900cc99ecb03efadee5d003&chksm=f1d4d3b2c6a35aa4d189bb730b874e550bdee8ad1720531a26fbf2a4aa3a4946ef8d60d522f1&scene=58&subscene=0#rd\"\n },\n \"天御攻防实验室\": {\n \"亚马逊云服务（AWS）如何生产威胁情报（一）\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486155&idx=1&sn=60fe469355ff2f4d8d5026fdaeb99b30&chksm=fb04c9a3cc7340b54754d887fa53cbddc2427a1ea8d871b144469c1e0d5566f60cd139a9d553&scene=58&subscene=0#rd\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 阅读推荐 2024-12-09 上古游戏点石成金\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499372&idx=1&sn=b723d2be54a413cae106a3d24c6d624c&chksm=c063d0b5f71459a3bed08a8fe5f4ee555991a8fda0e2b97214d7402b01e1b6f5844677df8135&scene=58&subscene=0#rd\"\n },\n \"君哥的体历\": {\n \"绝知此事要躬行——落地实践视角下的安全有效性验证\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491683&idx=1&sn=3e0bbe136527cfeca2d4248065dd975a&chksm=ea484a24dd3fc33259dfb569335750f5d7f903a030d26f7973bc80ec732d03ee8b2e59f04077&scene=58&subscene=0#rd\"\n },\n \"微步在线\": {\n \"预告 | 信创终端威胁，一“触”即防\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182727&idx=1&sn=bdc394ef4b173aa66a233c624512f50a&chksm=f4486ffbc33fe6edd74e4118c0a1c48a924a4a906629679c8134e161a0cec68033207ac308c8&scene=58&subscene=0#rd\"\n },\n \"中国信息安全\": {\n \"全球视野 | 国际网安快讯（第40期）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=1&sn=ebdea6dbaae16e3f7ca829dce2f58238&chksm=8b59f1cabc2e78dc522061b1afb0eb1b0c2127b1ed299680953db81e6a23b34a9b55f12f0114&scene=58&subscene=0#rd\",\n \"黄殿中院士：智能时代网络空间认知安全新观察\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=2&sn=9a9104dcc54d53c78ad711af395dff3e&chksm=8b59f1cabc2e78dc35c863a43e27e19f964a5b8a7a5d9bdb78e35419f66fe7d37c4bf737f069&scene=58&subscene=0#rd\",\n \"聚焦 | 第八届“一带一路”园区建设国际合作峰会首次网络安全国际合作专题论坛在京举办\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=3&sn=9ed7aa5dcf60b42a52239381f96913be&chksm=8b59f1cabc2e78dc8cd08a5f4fc1f15f94dadef8d4cf3c487acb8aaeabfe0472cbac8a9c4e35&scene=58&subscene=0#rd\",\n \"专家解读 | 坚持“六位一体” 立体化推进可信数据空间建设\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=4&sn=8236a5d914c530c1a19fe278be26d564&chksm=8b59f1cabc2e78dcc1ccabc945a4550fcb7cac6076ebd77219d0e5476f6df2ab6313f5af0b01&scene=58&subscene=0#rd\",\n \"专家解读 | 《全球数据跨境流动合作倡议》：焦点之问与中国答案\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=5&sn=455a713cc61401ad9a4faf254fda80d2&chksm=8b59f1cabc2e78dc9121311b15a8713dc1b36e7a7c486bf3d15c96ee143b8877868cc0a8ad91&scene=58&subscene=0#rd\",\n \"评论 | 未成年人用网“一刀切”换不来一劳永逸\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=6&sn=1ee91cd47f332f0b82f4e9233537e9af&chksm=8b59f1cabc2e78dc505eef11e9cc2ad1b9d9748941998cc262e36621bc2a2af13d337e8249f5&scene=58&subscene=0#rd\",\n \"注意 | 警惕！网站暗链的隐秘威胁\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=7&sn=2b70e3d1949c94969594515626881334&chksm=8b59f1cabc2e78dc9fcb1c1507c385b7395a6c10230ab0751a35a3d93218bc1234a81814d203&scene=58&subscene=0#rd\"\n },\n \"leveryd\": {\n \"简单点，让“绕WAF”简单点\": \"https://mp.weixin.qq.com/s?__biz=MzkyMDIxMjE5MA==&mid=2247485472&idx=1&sn=50ee57741fbf263ab768b1b56c57ac58&chksm=c1970f91f6e08687992f09348b2e101724b21662edcc2a4c43395a093cb5c6d6793828d197e3&scene=58&subscene=0#rd\"\n },\n \"默安科技\": {\n \"“链”上发力，默安科技软件供应链安全实力再获认可\": \"https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247499661&idx=1&sn=2915c6338af61391998c7496470e6388&chksm=e93b08afde4c81b9ca75967245dfbc579024742022d15c8e3698b1310dd4c5327f463bb8efac&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"谷歌，暗搓搓发了一个「游戏版 sora」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653068380&idx=1&sn=c9c626cb15d9769a4249e2fe7ea1790a&chksm=7e57e1ea492068fc8e5a05b0ef9fb8b954af17f111bbddabc2495ee2a25995aa4a0c8f924d61&scene=58&subscene=0#rd\",\n \"主打一个回忆杀！老友们，快回极客公园 IF 2025 看看！\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653068380&idx=2&sn=50eede1d5e9ad200146c2b1973db2fe0&chksm=7e57e1ea492068fce11eb1865a82c9e1040b4847328fc1adbc2a5e9c0b53f36d056103118473&scene=58&subscene=0#rd\",\n \"第一批 AI 员工，即将入职电商公司\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653068279&idx=1&sn=dfc14f635ae1a41d3068d513580250b1&chksm=7e57e64149206f57d015f60c5867a916a3f46b74cb6e590651bd6ba1d0b1cca1f8b8490b3a43&scene=58&subscene=0#rd\",\n \"马云现身蚂蚁集团，寄语未来 20 年；小米考虑支持苹果手表、耳机；特斯拉低价小车明年亮相 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653068256&idx=1&sn=029976eeb48b454958ba97a7f79d017c&chksm=7e57e65649206f40e2e756a56f4638a79ed3103ba6603c3a22c127502787b7d3fdf83931c506&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"黑客利用 ProjectSend 漏洞对暴露的服务器进行后门处理\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580114&idx=1&sn=fa181017da36db2d6d5598cb97f6ec10&chksm=e91469e8de63e0fe2c1a9542280afc7bb19ad4f3b5fb1026fcfc02ef039eebb5daa59df0e88e&scene=58&subscene=0#rd\",\n \"安全动态回顾|2项网络安全国家标准获批发布 罗马尼亚选举系统遭受超过85000次网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580114&idx=2&sn=c6406ef0575cf54d1f396adb68dc3c81&chksm=e91469e8de63e0fe51b53e84e288310b32b87bf5b28b8409ae76b55f87e8cc971675ad1400e2&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"2024叙利亚局势中的认知战分析研判\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650558135&idx=1&sn=ec3bbe2cc05ceec98ba8a5a543881f0e&chksm=871160fcb066e9ea72317fd5316a2ca5d1bf596794f81e7c847705a7c490dcda9576a29c03ee&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \".NET 一款快速收集本地文件密码的工具\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497359&idx=1&sn=8f2d4dd6efede3454c57d652e720427e&chksm=fa595862cd2ed1743829da921ba3da718b0cc8e91b369f061a66e4ac7a0aa98c27a15b57eb2c&scene=58&subscene=0#rd\",\n \"最专业的 [ .NET 代码审计 ] 体系化学习社区\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497359&idx=2&sn=d265e18a386fea16f697be68f174ead4&chksm=fa595862cd2ed17472c77bb924e91b89408cec2b9b0d5223c8abc7983360b46d762e53ae7158&scene=58&subscene=0#rd\",\n \".NET 一键删除系统日志命令行版本的工具\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497359&idx=3&sn=18af7d178c62923fea8e2e9138dad51a&chksm=fa595862cd2ed17477df75d5d8cc01613e76a65f63aa8d9fca3f8c7b48a9aa7e5b84b45cff61&scene=58&subscene=0#rd\"\n },\n \"字节跳动技术团队\": {\n \"火山引擎veImageX助力谱时智能云深耕照片直播赛道\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512202&idx=1&sn=79727c02dc9c3dd3c3d6c668c5d95c5e&chksm=e9d37b68dea4f27e7d3187ecb139a03119e8568706e0a6b52cb8f898f476b938541b5e4a60c9&scene=58&subscene=0#rd\",\n \"见证无限可能！火山引擎冬季 Force 大会开发者论坛来袭\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512202&idx=2&sn=73814a49bc3d3b62dc7f2528d46458b9&chksm=e9d37b68dea4f27e6f64f1a323a67002693f5291b1781afa2b24fb19912db7beeefd95a65b26&scene=58&subscene=0#rd\"\n },\n \"威努特安全网络\": {\n \"威努特数据安全解决方案：护航汽车制造，守护安全底线\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651129472&idx=1&sn=855706b2417632c15396fcb16ef1ff00&chksm=80e71c30b79095267f8c2a32e75bd0e2e2a106fde73a9759258c3c828e93e11b15422fcf8262&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"7 个不容忽视的开源安全工具\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247530686&idx=1&sn=fa1d246d60639c8e63ecde03f04f7b2b&chksm=c1440a03f63383157e8f05404772e74b8731b5df2e08950640cfc947074101d0218813a71144&scene=58&subscene=0#rd\",\n \"全面防护：AI驱动持续安全验证，灵活应对万变攻击\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247530686&idx=2&sn=a0087e732b60c3c448073aa749ca8d2d&chksm=c1440a03f6338315df39b649d00316725e92a8fd75f5bba1e50c567806c222e5baaaefd3add4&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】罗马尼亚实锤“俄利用TikTok干扰大选”？\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=1&sn=7d30d5e05512a097527518e65b5d4a47&chksm=f36e7ea9c419f7bf2441b5e32566b33200b4d25cbef93e2e3dc6eec99240fdcf71af8a1f8431&scene=58&subscene=0#rd\",\n \"【安全圈】安装国内某些税务申报软件的机器升级到Windows 11 24H2版后会蓝屏死机\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=2&sn=d5fede1d86a1b698f39f53972f7be353&chksm=f36e7ea9c419f7bfcfe8e5fb1cca5dc1741d0ffc44d398cd3d5d2b0a9ca07919efcff55ec1d8&scene=58&subscene=0#rd\",\n \"【安全圈】以虚假视频会议为诱饵，攻击者瞄准了Web3公司员工\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=3&sn=03588703ad0844e131c2d12ea5375e40&chksm=f36e7ea9c419f7bfc98d519d3e5ad1c113755986ebb59a6df124e6fdfd39b6c95c471eaaabad&scene=58&subscene=0#rd\",\n \"【安全圈】需要采取紧急行动：ABB ASPECT 漏洞使建筑物面临网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=4&sn=6f910eee1c20ed718fdf7c754fd840e1&chksm=f36e7ea9c419f7bff05e335235f5475598b068e6dabeebb56b12bd1c608f6af50d94bb06833e&scene=58&subscene=0#rd\"\n },\n \"迪哥讲事\": {\n \"如何寻找隐藏的参数\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496545&idx=1&sn=f5fa3d991b8bce754f69af9bce39e422&chksm=e8a5f902dfd2701461874bad2052b169d16ebf8b9e5b93da084d310d16b7007fe020a89e827d&scene=58&subscene=0#rd\"\n },\n \"ICT Security Magazine\": {\n \"Cybersecurity trends 2026: il futuro della Sicurezza Digitale nell’Era dell’IA\": \"https://www.ictsecuritymagazine.com/notizie/cybersecurity-trends-2026/\",\n \"Ingegneria della Sicurezza applicata ai Sistemi Spaziali: affrontare le minacce cyber nel nuovo contesto globale\": \"https://www.ictsecuritymagazine.com/articoli/sicurezza-sistemi-spaziali/\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Ransomware attack hits leading heart surgery device maker\": \"https://www.bleepingcomputer.com/news/security/ransomware-attack-hits-leading-heart-surgery-device-maker/\",\n \"OpenWrt Sysupgrade flaw let hackers push malicious firmware images\": \"https://www.bleepingcomputer.com/news/security/openwrt-sysupgrade-flaw-let-hackers-push-malicious-firmware-images/\",\n \"US subsidiaries of Japanese water treatment company, green tea maker hit with ransomware\": \"https://therecord.media/us-subsidiaries-japanese-water-treatment\",\n \"La tragedia di Brianna Ghey: il lato oscuro di Internet\": \"https://www.insicurezzadigitale.com/la-tragedia-di-brianna-ghey-il-lato-oscuro-di-internet/\",\n \"Ubisoft fixes Windows 11 24H2 conflicts causing game crashes\": \"https://www.bleepingcomputer.com/news/microsoft/ubisoft-fixes-windows-11-24h2-conflicts-causing-game-crashes/\",\n \"Radiant links $50 million crypto heist to North Korean hackers\": \"https://www.bleepingcomputer.com/news/security/radiant-links-50-million-crypto-heist-to-north-korean-hackers/\",\n \"MC LR Router and GoCast unpatched vulnerabilities\": \"https://blog.talosintelligence.com/mc-lr-router-and-gocast-zero-day-vulnerabilities-2/\",\n \"Russia disrupts internet access in multiple regions to test ‘sovereign internet’\": \"https://therecord.media/russia-disrupts-internet-access-in-multiple-regions-runet\",\n \"Medical device company says shipping processes disrupted by ransomware attack\": \"https://therecord.media/artivion-medical-device-company-cyberattack-notice-sec\",\n \"Homeland Security veteran being interviewed for Trump administration cyber role\": \"https://therecord.media/dhs-interview-brian-harrell-trump\",\n \"Outdated Google Workspace Sync blocks Windows 11 24H2 upgrades\": \"https://www.bleepingcomputer.com/news/microsoft/outdated-google-workspace-sync-blocks-windows-11-24h2-upgrades/\",\n \"Ukraine says Russian hackers are targeting country’s defense contractors\": \"https://techcrunch.com/2024/12/09/ukraine-says-russian-hackers-are-targeting-countrys-defense-contractors/\",\n \"Cybercrime gang arrested after turning Airbnbs into fraud centers\": \"https://www.bleepingcomputer.com/news/security/cybercrime-gang-arrested-after-turning-airbnbs-into-fraud-centers/\",\n \"Romanian energy supplier Electrica hit by ransomware attack\": \"https://www.bleepingcomputer.com/news/security/romanian-energy-supplier-electrica-hit-by-ransomware-attack/\",\n \"Suspected Russian hackers target Ukrainian defense enterprises in new espionage campaign\": \"https://therecord.media/suspected-russian-hackers-target-ukrainian-enterprises-espionage\",\n \"Key electricity distributor in Romania warns of ‘cyber attack in progress’\": \"https://therecord.media/electric-distributor-cyberattack-romania\",\n \"WhatsApp fixes bug that let users bypass ‘View Once’ privacy feature\": \"https://techcrunch.com/2024/12/09/whatsapp-fixes-bug-that-let-users-bypass-view-once-privacy-feature/\",\n \"Ladies.com - 118,809 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Ladies\",\n \"Senior Dating - 765,517 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#SeniorDating\",\n \"Cyble’s Weekly Vulnerability Report: Critical Flaws in Major Software Including Progress Software, QNAP, and 7-Zip\": \"https://cyble.com/blog/cyble-weekly-vulnerability-report/\",\n \"Threat Intelligence - Vulnerability insights\": \"https://www.certego.net/blog/whitepaper-novembre-2024-threat-intelligence-insights/\",\n \"Privacy web: Google si conferma lo strumento di tracciamento più usato\": \"https://www.securityinfo.it/2024/12/09/privacy-web-google-si-conferma-lo-strumento-di-tracciamento-piu-usato/\",\n \"Using LinkedIn and Python to simplify Phishing targeting\": \"https://catchingphish.com/posts/f/using-linkedin-and-python-to-simplify-phishing-targeting\",\n \"Vulnerabilità nei prodotti Zyxel, ProjectSend e CyberPanel\": \"https://www.securityinfo.it/2024/12/09/vulnerabilita-nei-prodotti-di-zyxel-projectsend-e-cyberpanel/\",\n \"QNAP NAS Vulnerabilities Exposed: What You Need to Know to Stay Secure\": \"https://cyble.com/blog/qnap-nas-vulnerabilities-exposed/\",\n \"Story of the Year: global IT outages and supply chain attacks\": \"https://securelist.com/ksb-story-of-the-year-2024/114883/\",\n \"CERT-AGID 30 novembre – 6 dicembre: il phishing colpisce Intesa Sanpaolo\": \"https://www.securityinfo.it/2024/12/09/cert-agid-30-novembre-6-dicembre-il-phishing-colpisce-intesa-sanpaolo/\",\n \"QR codes bypass browser isolation for malicious C2 communication\": \"https://www.bleepingcomputer.com/news/security/qr-codes-bypass-browser-isolation-for-malicious-c2-communication/\",\n \"Top 10 Cyber Threats of 2024\": \"https://blog.bushidotoken.net/2024/12/top-10-cyber-threats-of-2024.html\"\n },\n \"Securityinfo.it\": {\n \"Privacy web: Google si conferma lo strumento di tracciamento più usato\": \"https://www.securityinfo.it/2024/12/09/privacy-web-google-si-conferma-lo-strumento-di-tracciamento-piu-usato/?utm_source=rss&utm_medium=rss&utm_campaign=privacy-web-google-si-conferma-lo-strumento-di-tracciamento-piu-usato\",\n \"Vulnerabilità nei prodotti Zyxel, ProjectSend e CyberPanel\": \"https://www.securityinfo.it/2024/12/09/vulnerabilita-nei-prodotti-di-zyxel-projectsend-e-cyberpanel/?utm_source=rss&utm_medium=rss&utm_campaign=vulnerabilita-nei-prodotti-di-zyxel-projectsend-e-cyberpanel\",\n \"CERT-AGID 30 novembre – 6 dicembre: il phishing colpisce Intesa Sanpaolo\": \"https://www.securityinfo.it/2024/12/09/cert-agid-30-novembre-6-dicembre-il-phishing-colpisce-intesa-sanpaolo/?utm_source=rss&utm_medium=rss&utm_campaign=cert-agid-30-novembre-6-dicembre-il-phishing-colpisce-intesa-sanpaolo\"\n },\n \"360数字安全\": {\n \"周鸿祎：360安全大模型将向“一带一路”友邻国家开放共享\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577471&idx=1&sn=14be24acd47dba66bd105aa3790e5c53&chksm=9f8d3f77a8fab661143c2273e6329fa5d3e28b2082e3d29c38e4a2b7f2ae12847b4adef7fc43&scene=58&subscene=0#rd\",\n \"助力人才强国战略，360以实战人才为核心打造产教融合新业态\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577471&idx=2&sn=16c3698586f9efb50ac8ceff99fecdd6&chksm=9f8d3f77a8fab661600570635b747d97ff695722004e41d9525ec2d4ab865f0a4045cc7e5a45&scene=58&subscene=0#rd\"\n },\n \"绿盟科技研究通讯\": {\n \"全球云上数据泄露风险分析简报 （第三期）：云盘误配置与API漏洞致高校信息泄露，影响7亿账户\": \"https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498096&idx=1&sn=60b0f557103ef67e7cf9159778b928d8&chksm=e84c5fafdf3bd6b900c1a3366bb5bf4596df0f45680ccc8b16e4d250e452104e9c80d3e53b3c&scene=58&subscene=0#rd\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"CURLing for Crypto on Honeypots, (Mon, Dec 9th)\": \"https://isc.sans.edu/diary/rss/31502\",\n \"ISC Stormcast For Monday, December 9th, 2024 https://isc.sans.edu/podcastdetail/9246, (Mon, Dec 9th)\": \"https://isc.sans.edu/diary/rss/31504\"\n },\n \"Schneier on Security\": {\n \"Trust Issues in AI\": \"https://www.schneier.com/blog/archives/2024/12/trust-issues-in-ai.html\"\n },\n \"Have I Been Pwned latest breaches\": {\n \"Senior Dating - 765,517 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#SeniorDating\",\n \"Ladies.com - 118,809 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Ladies\"\n },\n \"BorderGate\": {\n \"Bluetooth Low Energy\": \"https://www.bordergate.co.uk/bluetooth-low-energy/\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"First GPT for Infostealer intelligence is dropping tomorrow for free\": \"https://www.reddit.com/r/blackhat/comments/1ha7lua/first_gpt_for_infostealer_intelligence_is/\",\n \"Botnet and c2\": \"https://www.reddit.com/r/blackhat/comments/1ha3r9c/botnet_and_c2/\"\n },\n \"Computer Forensics\": {\n \"Updated Info on Cell Tower Forensic Class\": \"https://www.reddit.com/r/computerforensics/comments/1haelyn/updated_info_on_cell_tower_forensic_class/\",\n \"NCFI January 2025 Courses\": \"https://www.reddit.com/r/computerforensics/comments/1hadpl3/ncfi_january_2025_courses/\"\n },\n \"Your Open Hacker Community\": {\n \"Looking for IG brutes in bulk\": \"https://www.reddit.com/r/HowToHack/comments/1hakih9/looking_for_ig_brutes_in_bulk/\",\n \"how can i make a combolist\": \"https://www.reddit.com/r/HowToHack/comments/1hak3jl/how_can_i_make_a_combolist/\",\n \"how to recover files from phone after reset\": \"https://www.reddit.com/r/HowToHack/comments/1hahz6e/how_to_recover_files_from_phone_after_reset/\",\n \"can I create my own app in metaspoilt-framework ?\": \"https://www.reddit.com/r/HowToHack/comments/1hagxdd/can_i_create_my_own_app_in_metaspoiltframework/\",\n \"What's this ip address?\": \"https://www.reddit.com/r/HowToHack/comments/1ha9hdf/whats_this_ip_address/\",\n \"I need to learn how to place a Trojan on a loptop\": \"https://www.reddit.com/r/HowToHack/comments/1haaah8/i_need_to_learn_how_to_place_a_trojan_on_a_loptop/\",\n \"Can a Zip bomb be made with any file type?\": \"https://www.reddit.com/r/HowToHack/comments/1h9zphv/can_a_zip_bomb_be_made_with_any_file_type/\",\n \"I got hacked but i got his email idk what to do with it\": \"https://www.reddit.com/r/HowToHack/comments/1h9xhqr/i_got_hacked_but_i_got_his_email_idk_what_to_do/\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Compromising OpenWrt Supply Chain via Truncated SHA-256 Collision and Command Injection\": \"https://www.reddit.com/r/netsec/comments/1ha68y0/compromising_openwrt_supply_chain_via_truncated/\",\n \"From XSS Vulnerability to Full Admin Access\": \"https://www.reddit.com/r/netsec/comments/1ha3czp/from_xss_vulnerability_to_full_admin_access/\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Cousera course\": \"https://www.reddit.com/r/netsecstudents/comments/1haeiu8/cousera_course/\",\n \"Go Report [a vulnerability] Card - Writeup\": \"https://www.reddit.com/r/netsecstudents/comments/1ha6vsg/go_report_a_vulnerability_card_writeup/\"\n },\n \"The Hacker News\": {\n \"Black Basta Ransomware Evolves with Email Bombing, QR Codes, and Social Engineering\": \"https://thehackernews.com/2024/12/black-basta-ransomware-evolves-with.html\",\n \"⚡ THN Recap: Top Cybersecurity Threats, Tools and Tips (Dec 2 - 8)\": \"https://thehackernews.com/2024/12/thn-recap-top-cybersecurity-threats_9.html\",\n \"Researchers Uncover Prompt Injection Vulnerabilities in DeepSeek and Claude AI\": \"https://thehackernews.com/2024/12/researchers-uncover-prompt-injection.html\",\n \"Seven Bolt-Ons to Make Your Entra ID More Secure for Critical Sessions\": \"https://thehackernews.com/2024/12/seven-bolt-ons-to-make-your-entra-id.html\",\n \"Socks5Systemz Botnet Powers Illegal Proxy Service with 85,000+ Hacked Devices\": \"https://thehackernews.com/2024/12/socks5systemz-botnet-powers-illegal.html\"\n },\n \"Social Engineering\": {\n \"How to have charisma?\": \"https://www.reddit.com/r/SocialEngineering/comments/1ha65n2/how_to_have_charisma/\"\n },\n \"Security Affairs\": {\n \"Deloitte denied its systems were hacked by Brain Cipher ransomware group\": \"https://securityaffairs.com/171827/uncategorized/deloitte-denied-its-systems-were-hacked-by-brain-cipher-ransomware-group.html\",\n \"Mandiant devised a technique to bypass browser isolation using QR codes\": \"https://securityaffairs.com/171809/hacking/bypass-browser-isolation-using-qr-codes.html\",\n \"2023 Anna Jaques Hospital data breach impacted over 310,000 people\": \"https://securityaffairs.com/171801/data-breach/anna-jaques-hospital-data-breach.html\"\n }\n}"}, "9a9b63909c149b441f31cde50889416eba31d8a0": {"t": 1785772246.0192676, "n": 49443, "h": "6e5efb4f9f5ea0fb", "c": "{\n \"Taxodium\": {\n \"Weekly#19\": \"https://taxodium.ink/19.html\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"Omada Identity Cross Site Scripting\": \"https://cxsecurity.com/issue/WLB-2024120014\",\n \"Powered By DEV INFOTECH - Sql Injection\": \"https://cxsecurity.com/issue/WLB-2024120013\",\n \"Powered By DEV INFOTECH - Blind Sql Injection Vulnerability\": \"https://cxsecurity.com/issue/WLB-2024120012\"\n },\n \"paper - Last paper\": {\n \"Unveiling Dark Internet Service Providers: Bulletproof Hosting\": \"https://paper.seebug.org/3249/\"\n },\n \"Trustwave Blog\": {\n \"Enhancing Cybersecurity in Higher Education: Trustwave and Curtin University's Collaborative Journey\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/enhancing-cybersecurity-in-higher-education-trustwave-and-curtin-universitys-collaborative-journey/\"\n },\n \"奇安信攻防社区\": {\n \"解读 2024 年高通 GPU 漏洞细节及利用技术\": \"https://forum.butian.net/share/3936\",\n \"glibc堆all-in-one\": \"https://forum.butian.net/share/3919\"\n },\n \"Security Boulevard\": {\n \"DEF CON 32 – Compromising Electronic Logger & Creating Truck2Truck Worm\": \"https://securityboulevard.com/2024/12/def-con-32-compromising-electronic-logger-creating-truck2truck-worm/\",\n \"Surviving the Weekly CVE Review Gauntlet\": \"https://securityboulevard.com/2024/12/surviving-the-weekly-cve-review-gauntlet/\",\n \"31 of the Top MSSPs Use D3 for SOC Automation: Here’s Why\": \"https://securityboulevard.com/2024/12/31-of-the-top-mssps-use-d3-for-soc-automation-heres-why/\",\n \"Shared Intel Q&A: A thriving ecosystem now supports AWS ‘shared responsibility’ security model\": \"https://securityboulevard.com/2024/12/shared-intel-qa-a-thriving-ecosystem-now-supports-aws-shared-responsibility-security-model/\",\n \"Randall Munroe’s XKCD ‘Infinite Armada Chess’\": \"https://securityboulevard.com/2024/12/randall-munroes-xkcd-infinite-armada-chess/\",\n \"The Future of Cybersecurity Marketing: AI-Driven Strategies for 2025 and Beyond\": \"https://securityboulevard.com/2024/12/the-future-of-cybersecurity-marketing-ai-driven-strategies-for-2025-and-beyond/\",\n \"DEF CON 32 – Prime Cuts from Hacker History: 40 Years of 31337 – Cult Of The Dead Cow And Friends\": \"https://securityboulevard.com/2024/12/def-con-32-prime-cuts-from-hacker-history-40-years-of-31337-cult-of-the-dead-cow-and-friends/\",\n \"Auto Creating Reminders from Email Messages\": \"https://securityboulevard.com/2024/12/auto-creating-reminders-from-email-messages/\",\n \"Certificate Management Best Practices to Stay Cyber-Secure This Holiday Season\": \"https://securityboulevard.com/2024/12/certificate-management-best-practices-to-stay-cyber-secure-this-holiday-season/\",\n \"35 more Semgrep rules: infrastructure, supply chain, and Ruby\": \"https://securityboulevard.com/2024/12/35-more-semgrep-rules-infrastructure-supply-chain-and-ruby/\"\n },\n \"Tenable Blog\": {\n \"Data Security in Healthcare: How Tenable Cloud Security Can Help\": \"https://www.tenable.com/blog/data-security-in-healthcare-how-tenable-cloud-security-can-help\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2024-12-09 Review\": \"http://www.sec-wiki.com/?2024-12-09\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Mon Dec 9 22:30:47 UTC 2024\": \"https://github.com/trickest/cve/commit/a8a6dd3c4d0c9b88c40221b91ab590ca8b56bce4\",\n \"Update Mon Dec 9 14:19:20 UTC 2024\": \"https://github.com/trickest/cve/commit/156133d407d5f4307899555b81fae75e9822f4c4\",\n \"Update Mon Dec 9 06:27:28 UTC 2024\": \"https://github.com/trickest/cve/commit/06c7320c9656605f4a602fae88dffbe53aad0352\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"年关将至，这些单位用360安全大模型交上安全运营高分成绩单\": \"https://www.anquanke.com/post/id/302547\",\n \"需要采取紧急行动：ABB ASPECT 漏洞使建筑物面临网络攻击\": \"https://www.anquanke.com/post/id/302544\",\n \"CVE-2024-55563： 交易中继干扰漏洞对比特币闪电网络构成威胁\": \"https://www.anquanke.com/post/id/302541\",\n \"罗马尼亚选举系统在总统投票前遭受 8.5 万次攻击\": \"https://www.anquanke.com/post/id/302538\",\n \"CVE-2024-12209 (CVSS 9.8)： WP Umbrella 插件漏洞导致 30,000 个网站遭入侵\": \"https://www.anquanke.com/post/id/302535\",\n \"卡达诺基金会 X 账户遭黑客攻击，发布诈骗链接后又被删除\": \"https://www.anquanke.com/post/id/302532\",\n \"艺术家损失 13.5 万美元后，布鲁克林检察官关闭了 40 个 NFT 诈骗网站\": \"https://www.anquanke.com/post/id/302529\",\n \"DDoSecrets 推出大型 “泄密资料库 ”搜索引擎，收录数百万份泄密文件\": \"https://www.anquanke.com/post/id/302526\",\n \"Ultralytics 人工智能库遭受供应链攻击： 6000 万次下载遭到破坏\": \"https://www.anquanke.com/post/id/302523\",\n \"谷歌在 2024 年 12 月的 Pixel 安全更新中修复了严重的 RCE 漏洞\": \"https://www.anquanke.com/post/id/302520\"\n },\n \"obaby@mars\": {\n \"白月光\": \"https://h4ck.org.cn/2024/12/18750\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"黑客利用 ProjectSend 漏洞对暴露的服务器进行后门处理\": \"https://www.4hou.com/posts/pnBX\"\n },\n \"Doonsec's feed\": {\n \"如何寻找隐藏的参数\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496545&idx=1&sn=f5fa3d991b8bce754f69af9bce39e422\",\n \"英伟达被立案调查！\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247490941&idx=1&sn=73455c051824ebc90c3bea2782228ee9\",\n \"渗透测试人员的 Burp Suite：HackBar\": \"https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247485872&idx=1&sn=2603f14c6fdd1c0d01adb361b18ffc13\",\n \"【漏洞预警】SoftLab Integrate Google Drive身份认证绕过漏洞(CVE-2023-32117)\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489283&idx=1&sn=29b9004e3fdc168434fc378d44504590\",\n \"【漏洞情报】海信智能公交企业管理系统AdjustWorkHours.aspx SQL注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489283&idx=2&sn=5c93a143e811b95e8b77abdcb97f6599\",\n \"怕死版mimikatz\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTQxOTA3Ng==&mid=2247489254&idx=1&sn=603f1690af6ae7c789ee9af31d92b617\",\n \"【报名】标识第一课——工业互联网标识人才培训（北京站）火热招生中\": \"https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247591727&idx=1&sn=6fc30be794ee3f883d6fe2aaa6f18fbe\",\n \"推荐一款功能炸裂的自动解密被加密的报文工具\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247487437&idx=1&sn=760662c393573034d470e82196824aa7\",\n \"个人网盘领域首个获批！百度网盘获颁“个人信息保护认证证书”\": \"https://mp.weixin.qq.com/s?__biz=MzA3NTQ3ODI0NA==&mid=2247487561&idx=1&sn=0d28bcd208722939779526f54ba08165\",\n \"国城杯 · 2024 WriteUp\": \"https://mp.weixin.qq.com/s?__biz=MzIyMjkzMzY4Ng==&mid=2247510233&idx=1&sn=017f4e232d8452c53d7e2f476a466267\",\n \"「漏洞复现」Mitel MiCollab 企业协作平台 任意文件读取漏洞(CVE-2024-41713)\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486288&idx=1&sn=1bb852514919b1b26bddd263e28d5501\",\n \"“金析为证”：公安部技术监督委员会批准发布4项行业标准\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MzEwMDAyNw==&mid=2247485188&idx=1&sn=794fda7eb572dc6f84cc502cf102193e\",\n \"Burp插件编写简易教程 - 外部联动Katana爬虫\": \"https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485549&idx=1&sn=b24ef54a14cd3d1ed9e838b4a846b561\",\n \"量子安全技术蓝皮书2024\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247616670&idx=1&sn=14ba65406032ec83449205c146d775ca\",\n \"智能网联汽车量子通信技术及其安全应用标准领航研究 2023.12\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247616670&idx=2&sn=f4ebe340ad77093272f4c05edeb02178\",\n \"后量子密码学对汽车安全的影响——案例研究\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247616670&idx=3&sn=dba380b9172d578b250f8510e4497014\",\n \"G.O.S.S.I.P 阅读推荐 2024-12-09 上古游戏点石成金\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499372&idx=1&sn=b723d2be54a413cae106a3d24c6d624c\",\n \"完成第700场演出，一组剧照重温舞剧《永不消逝的电波》精彩\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632858&idx=1&sn=9b8a40a90e5184d27e38fa8b24e51500\",\n \"后量子密码｜AWS 发布 PQC 迁移“前进计划”\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632858&idx=2&sn=105279942915fd24b1992ccabc5793a9\",\n \"专家解读 | 可信数据空间：促进民航新质生产力建设\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632858&idx=3&sn=a0252fbf56cbf7971714b9afafa35cf6\",\n \"某AI产品违规生成法律法规禁止信息，遭地方网信办关停服务并整改\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513257&idx=1&sn=9e69872c15f0b7ab65754a15235d08f7\",\n \"黄殿中院士：智能时代网络空间认知安全新观察\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=2&sn=9a9104dcc54d53c78ad711af395dff3e\",\n \"Splunk 客户高峰会--北京站（2025.01.09 / 周四）\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247540969&idx=1&sn=47a3ca7bff30a926d29192da8e5a6bbe\",\n \"2024 国城杯 WP\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODc2NTg1OA==&mid=2247491363&idx=1&sn=b3fbc5447b916b64151188da46996dad\",\n \"工具集：Dawn Launcher【工具容器】\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247484867&idx=1&sn=555b1722488f2dcc9ce26896f522e458\",\n \"Zabbix SQL 注入漏洞（CVE-2024-42327）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NzM4NzI1MA==&mid=2247486212&idx=1&sn=a25394ea5d523773aa1771aebc8872fc\",\n \"“何以杨数浦”数字经济合规发展系列沙龙正式启动！\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247515874&idx=1&sn=2928a7cf39797d6e6ec8841d6efb7905\",\n \"《2024年度上海市网络安全产业创新攻关成果目录》发布啦\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247515874&idx=2&sn=0a944cb7d4ea74e08407bf27bcb5d3c8\",\n \"Hackerone report：通过 X-Forwarded-For 报头绕过 IP 限制\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTc4ODM5OA==&mid=2247485466&idx=1&sn=7b79e87f504c9cfaf0cce9c1aab5359f\",\n \"04【邮件安全】如何防护预览&劫持类附件风险\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTUyMTI2MQ==&mid=2247484716&idx=1&sn=6903a2af0030c051776b20273ba0458c\",\n \"数证杯决赛-团体赛（服务器）\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTcyNDg1OA==&mid=2247484222&idx=1&sn=02c6962269acc1003fab837a13e95424\",\n \"IP知识百科 | SASE？啥西？SASE热词轻松学！\": \"https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505664&idx=1&sn=7632f619bf8ddfe1177643a98c542342\",\n \"制造业面临的8大网络安全威胁\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490079&idx=1&sn=bfbcdb1e84475850521f37ed33f02b03\",\n \"以太坊攻击马拉松 祝你好运 - 祝你狩猎愉快！\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525557&idx=1&sn=e11c2ab341504521d914a0944bedf765\",\n \"CVE-2024-55563：交易中继干扰漏洞对比特币闪电网络构成威胁\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525557&idx=2&sn=780285b5a5a94ef626071a57bc2412e1\",\n \"隐侠必备网安利器之 Chrome 扩展（隐蔽身份篇 · 一） 大揭秘，不可错过！\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247514214&idx=1&sn=cc613f0da9ceaa175895d0bbd7113ea5\",\n \"漏洞马拉松2024 | 积分赛阶段冲刺ing，半区见真章！\": \"https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070792&idx=1&sn=12d743d033becec5fcc0920e17922d86\",\n \"金盾信安 | 网络和数据领域资讯第38期(2024.12.3-2024.12.9)\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448680502&idx=1&sn=321e55ae994e5c8e6d534f29ce93bdd3\",\n \"权威推荐！AI助力启明星辰NDR实现智能安全再升级\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651729759&idx=1&sn=065c091fd2437235981d9e6835385d8d\",\n \"SRC挖掘-验证码攻防问题总结分享\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247518596&idx=1&sn=b8f5c4c7744bd9a24cbfd7b6dc8362d9\",\n \"央视报道 | “登录态”？公安网安查处新型侵犯公民个人信息案\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094241&idx=1&sn=a9e47e2e261f2d4d8735f6307a28a621\",\n \"最强大的Android间谍软件曝光，可提取信息、密码和执行shell命令\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094241&idx=2&sn=ffebda2bff5fc391363ae248eb8be9d4\",\n \"24级网络安全新生赛WP\": \"https://mp.weixin.qq.com/s?__biz=MzU3MDU5NTA1MQ==&mid=2247499635&idx=1&sn=0b539e8f9e4b689d53a3c73d68f5eeb4\",\n \"SQL注入学习记录\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NzM4OTQ5NQ==&mid=2247484954&idx=1&sn=362865deeff0f3a6b60f8406f9b71269\",\n \"腾讯云首届金融安全峰会圆满举办，让安全价值看得见\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309257&idx=1&sn=3244d5450bb861dca23f9e25753e0faf\",\n \"Gartner 发布首份《身份验证魔力象限报告》\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309257&idx=2&sn=5c0d2c52971ee4d4a78f71744fb9d884\",\n \"关于举办移动互联网安全工程师（CAPPSEC）培训班的通知\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309257&idx=3&sn=3a9ea295caaee20889a3a80aa72997a8\",\n \"SCA-Goat：一款包含大量安全缺陷的SAC应用程序靶场环境\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309257&idx=4&sn=1f69c0666c38c62ce5047a87dd482517\",\n \"持续领先丨盛邦安全荣登《网络安全企业100强》\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650277187&idx=1&sn=b4ff40c0e268a18e66898288393fceaa\",\n \"第78期 | GPTSecurity周报\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495309&idx=1&sn=2fb82edc0049fa284cc481cf7bf47b1d\",\n \"【安全圈】罗马尼亚实锤“俄利用TikTok干扰大选”？\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=1&sn=7d30d5e05512a097527518e65b5d4a47\",\n \"【安全圈】安装国内某些税务申报软件的机器升级到Windows 11 24H2版后会蓝屏死机\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=2&sn=d5fede1d86a1b698f39f53972f7be353\",\n \"【安全圈】以虚假视频会议为诱饵，攻击者瞄准了Web3公司员工\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=3&sn=03588703ad0844e131c2d12ea5375e40\",\n \"【安全圈】需要采取紧急行动：ABB ASPECT 漏洞使建筑物面临网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=4&sn=6f910eee1c20ed718fdf7c754fd840e1\",\n \"别考错了！CISA/CISSP/CISM适合对象的区别\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247519907&idx=1&sn=099b58cd30b895995aeac369464e0c08\",\n \"CISP 2025年课程安排看这里！\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247519907&idx=2&sn=442c2904f15ed9f743a172ec7134cbc7\",\n \"SIAM™ Professional免费培训|DevOps系列课程享双12优惠\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247519907&idx=3&sn=222c281674b9a12d7c451d6508da7005\",\n \"速览 | 谷安2024年10月攻防考试成绩公布！欲报从速\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247519907&idx=4&sn=27923cc9d5e2803c458dfe5c68da8703\",\n \"周鸿祎：360安全大模型将向“一带一路”友邻国家开放共享\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577471&idx=1&sn=14be24acd47dba66bd105aa3790e5c53\",\n \"助力人才强国战略，360以实战人才为核心打造产教融合新业态\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577471&idx=2&sn=16c3698586f9efb50ac8ceff99fecdd6\",\n \"百家｜张美波：网络安全经济学\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247632681&idx=1&sn=d40f39269a4fe966e61f9bc2e55b1514\",\n \"以色列的间谍软件Pegasus正在无孔不入\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247632681&idx=2&sn=c56933c3e0209e2ae60610191c3a7a10\",\n \"冲冲冲💪\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493000&idx=1&sn=ed482aa3f3b72131fa630122b113c346\",\n \"中央网信办秘书局党支部与网安协会党支部联合举办党建与业务融合学习交流会\": \"https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649401044&idx=1&sn=cbed847aca70cfaba5c0979b30d13b08\",\n \"物联网安全合规做得太差，美国多个联邦机构遭批评\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513257&idx=2&sn=1d05333b962906f1c19d82b57a98309c\",\n \"齐向东：用标准迎战大模型时代的安全挑战\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247623193&idx=1&sn=357a72e2c863a7f7771d4e982266e2bd\",\n \"DataCon2024|大模型“说胡话”该怎么破？Ta们寻找了破解之道\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247623193&idx=2&sn=f6c24feef88c95e3fe8b5664e1ef2104\",\n \"安全卫士 | 魔方安全漏洞周报\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291910&idx=1&sn=cce3441e3c4e73b5d7381cac3619dd88\",\n \"用友NC /portal/pt/task/process SQL注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489592&idx=1&sn=d4b5b3b2d49bb277a97a0f4f1ade1c30\",\n \"关注丨2项网络安全国家标准获批发布\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247530437&idx=1&sn=8001d41a5b0350a95cf9a50ce7e3f787\",\n \"大咖话安全丨余少华院士：我国网络通信新的重大风险与挑战思考\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247530437&idx=2&sn=5bb653f6b28f2ff75c3f7a210d0125f1\",\n \"助力安全价值显性化，腾讯云举办首届金融安全峰会\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526082&idx=1&sn=ee55f5a2197c52a890b29e4b7f059321\",\n \"嘉宾观点 | “看得见”的金融云安全建设\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526082&idx=2&sn=e2779d80c1c79eb2074809e12418a7bf\",\n \"工具推荐-js爬取工具\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488045&idx=1&sn=0b59d57030fcb1ef0f99bc1c0fe375c4\",\n \"钓鱼网页散播银狐木马，远控后门威胁终端安全\": \"https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247504176&idx=1&sn=27f99ecb6ba3c497677bde65758089d4\",\n \"科创引领，校企同行—合合信息与同济大学计算机科学与技术学院举行捐赠仪式\": \"https://mp.weixin.qq.com/s?__biz=MzAxMzg0NjY2NA==&mid=2247492910&idx=1&sn=83aa8f2cff89c0e9b013498e7152b157\",\n \"倒计时2天！“CCF-CV企业交流会—走进合合信息”开启直播预约！一起听大咖讲解AI视觉安全“黑科技”！\": \"https://mp.weixin.qq.com/s?__biz=MzAxMzg0NjY2NA==&mid=2247492910&idx=2&sn=062328804fc095e9ea606a9b7e2bbda6\",\n \"万亿级农信社通过软件成分分析工具精准把控风险，强基固本保障金融科技发展\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247513619&idx=1&sn=5ba889a8416bf714c340472d17a73804\",\n \"一图读懂《智能网联汽车道路测试与示范应用管理规范》\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247513619&idx=2&sn=5bc62616e9dba4cbe3f5889603c6da17\",\n \"人社部能力建设中心主办！开源情报分析技术培训班邀您共聚厦门\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651430329&idx=1&sn=c87f4c4a6fa3db589efde27401473c9f\",\n \"每周网安资讯（12.3-12.9）|Oracle等厂商的多款产品存在漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505295&idx=1&sn=c7dccc68315c50474f6e877a45a1b391\",\n \"漏洞提交通道关闭通知\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MzUxOTc2MQ==&mid=2247484788&idx=1&sn=dedff1df112f5ec319e5b27f37b31f7a\",\n \"全球视野 | 国际网安快讯（第40期）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=1&sn=ebdea6dbaae16e3f7ca829dce2f58238\",\n \"聚焦 | 第八届“一带一路”园区建设国际合作峰会首次网络安全国际合作专题论坛在京举办\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=3&sn=9ed7aa5dcf60b42a52239381f96913be\",\n \"专家解读 | 坚持“六位一体” 立体化推进可信数据空间建设\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=4&sn=8236a5d914c530c1a19fe278be26d564\",\n \"专家解读 | 《全球数据跨境流动合作倡议》：焦点之问与中国答案\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=5&sn=455a713cc61401ad9a4faf254fda80d2\",\n \"评论 | 未成年人用网“一刀切”换不来一劳永逸\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=6&sn=1ee91cd47f332f0b82f4e9233537e9af\",\n \"注意 | 警惕！网站暗链的隐秘威胁\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=7&sn=2b70e3d1949c94969594515626881334\",\n \"CNVD漏洞周报2024年第49期\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495571&idx=1&sn=0c222901aba75215f7b034c9a02775e8\",\n \"上周关注度较高的产品安全漏洞(20241202-20241208)\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495571&idx=2&sn=464e8fb82cad6f465f8242e841ab2260\",\n \"简讯丨信安世纪获评工信部商用密码应用产业促进联盟“信息报送优秀单位”\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650662326&idx=1&sn=34266ab8662dbcc8b57961f3446958ae\",\n \"Ultralytics AI模型正被劫持用于部署挖矿机\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521726&idx=1&sn=6242710e1abb2954dfd85acd30c4ffb1\",\n \"SonicWall 修复Secure Access Gateway 中的6个漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521726&idx=2&sn=4020dbda138c28b7da91666b33eb120a\",\n \"【开源情报工具】根据用户名提供邮箱和电话号码\": \"https://mp.weixin.qq.com/s?__biz=MzkxMTA3MDk3NA==&mid=2247486865&idx=1&sn=07f4e5f115abb5cbc993a91a37d0bbff\",\n \"强网杯S8初赛 PWN 赛题解析\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585618&idx=1&sn=2829f550700528e99809f3cd53994b6d\",\n \"Linux pwn 探索篇\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585618&idx=2&sn=24e847a05b8141292f6dee8100388e19\",\n \"安全热点周报：新的 Windows 零日漏洞暴露 NTLM 凭据，已获得非官方补丁\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502580&idx=1&sn=6c73b0ed8291424bf945a368d40498c1\",\n \"X情报社区漏洞奖励计划收录扩大！提供本地环境再享额外20%奖金加成！\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjA4MjMyMw==&mid=2647789831&idx=1&sn=012815bf3c53ef1a6060c1dc35d847b9\",\n \"TimelineSec助力2024漏洞马拉松活动，史无前例反爬专项单个奖励最高5w！\": \"https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247496891&idx=1&sn=9c8fd99b9ddc86cb7f57bee467702ab5\",\n \"火山引擎veImageX助力谱时智能云深耕照片直播赛道\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512202&idx=1&sn=79727c02dc9c3dd3c3d6c668c5d95c5e\",\n \"见证无限可能！火山引擎冬季 Force 大会开发者论坛来袭\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512202&idx=2&sn=73814a49bc3d3b62dc7f2528d46458b9\",\n \"Linux之父都“不明觉赞”的一个内核优化与修复历程\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649787849&idx=1&sn=f41ae07f735af72fadc19c45f090c2b1\",\n \"腾讯及中国人民大学联合研究成果入选ACM MM2024\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649787849&idx=2&sn=431f7f57f9b37c8834ce9f752aecd67c\",\n \"【SQLi_Labs】Basic Challenges\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247494614&idx=1&sn=69f63bc6e42c3b4dcdacc0d82c3da344\",\n \"开源前哨 · 热点情报速览（2024.12.3-2024.12.9）\": \"https://mp.weixin.qq.com/s?__biz=Mzg2Nzg0NDkwMw==&mid=2247493086&idx=1&sn=0009c53e4c4c60324564123edbc4f386\",\n \"珞安科技实力入选2025年—2027年度四川省通信管理局网络和数据安全技术支撑单位\": \"https://mp.weixin.qq.com/s?__biz=MzU2NjI5NzY1OA==&mid=2247511653&idx=1&sn=5e30da77806da06f9b266811072795a7\"\n },\n \"一个被知识诅咒的人\": {\n \"【Python】深入探讨Python中的属性访问控制：用@property实现动态属性的艺术\": \"https://blog.csdn.net/nokiaguy/article/details/144345996\",\n \"Python中的多态性：基于ABC模块的接口设计与实现\": \"https://blog.csdn.net/nokiaguy/article/details/144345838\"\n },\n \"Blogs dade\": {\n \"Weekly Retro 2024-W49\": \"https://0xda.de/blog/2024/12/weekly-retro-2024-w49/\"\n },\n \"hasherezade's 1001 nights\": {\n \"Protected: Flare-On 11 – Task 7\": \"https://hshrzd.wordpress.com/2024/12/09/flare-on-11-task-7/\"\n },\n \"Trail of Bits Blog\": {\n \"35 more Semgrep rules: infrastructure, supply chain, and Ruby\": \"https://blog.trailofbits.com/2024/12/09/35-more-semgrep-rules-infrastructure-supply-chain-and-ruby/\"\n },\n \"Securelist\": {\n \"Story of the Year: global IT outages and supply chain attacks\": \"https://securelist.com/ksb-story-of-the-year-2024/114883/\"\n },\n \"Toooold\": {\n \"The missing knowledge snippets of AI\": \"https://toooold.com/2024/12/09/understand-this.html\"\n },\n \"Malwarebytes\": {\n \"Encrypted messaging service intercepted, 2.3 million messages read by law enforcement\": \"https://www.malwarebytes.com/blog/news/2024/12/encrypted-messaging-service-intercepted-2-3-million-messages-read-by-law-enforcement\",\n \"A week in security (December 2 – December 8)\": \"https://www.malwarebytes.com/blog/news/2024/12/a-week-in-security-december-2-december-8-2\"\n },\n \"Reverse Engineering\": {\n \"/r/ReverseEngineering's Weekly Questions Thread\": \"https://www.reddit.com/r/ReverseEngineering/comments/1ha4wn0/rreverseengineerings_weekly_questions_thread/\",\n \"hrtng - IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations\": \"https://www.reddit.com/r/ReverseEngineering/comments/1ha9bd5/hrtng_ida_pro_plugin_with_a_rich_set_of_features/\",\n \"New dog, old tricks: DaMAgeCard attack targets memory directly thru SD card reader\": \"https://www.reddit.com/r/ReverseEngineering/comments/1haie3d/new_dog_old_tricks_damagecard_attack_targets/\",\n \"Announcing Fibratus 2.3.0 - Adversary tradecraft detection, protection, and hunting\": \"https://www.reddit.com/r/ReverseEngineering/comments/1haevp3/announcing_fibratus_230_adversary_tradecraft/\"\n },\n \"Microsoft Security Response Center\": {\n \"Mitigating NTLM Relay Attacks by Default\": \"https://msrc.microsoft.com/blog/2024/12/mitigating-ntlm-relay-attacks-by-default/\"\n },\n \"Sandfly Security Blog RSS Feed\": {\n \"Default User SSH Authorized Key Risks on Linux\": \"https://sandflysecurity.com/blog/default-user-ssh-authorized-key-risks-on-linux/\"\n },\n \"Webroot Blog\": {\n \"Top 5 reasons MSPs choose OpenText MDR\": \"https://www.webroot.com/blog/2024/12/09/top-5-reasons-msps-choose-opentext-mdr/\"\n },\n \"Checkmarx\": {\n \"Malicious NPM Package Exploits React Native Documentation Example\": \"https://checkmarx.com/blog/malicious-npm-package-exploits-react-native-documentation-example/\"\n },\n \"Dhole Moments\": {\n \"Ideas and Execution\": \"https://soatok.blog/2024/12/09/ideas-and-execution/\"\n },\n \"体验盒子\": {\n \"如何知道移动应用程序是否是使用 Flutter 制作的？\": \"https://www.uedbox.com/post/69899/\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"腾讯云首届金融安全峰会圆满举办，让安全价值看得见\": \"https://www.freebuf.com/articles/417280.html\",\n \"FreeBuf早报 | 普通用户手机发现间谍软件Pegasus；软件供应链巨头被勒索软件入侵\": \"https://www.freebuf.com/news/417247.html\",\n \"通过二维码实现命令与控制操作的新方法\": \"https://www.freebuf.com/news/417227.html\",\n \"2024半年度国内外网安龙头公司业绩对比\": \"https://www.freebuf.com/news/417217.html\",\n \"Gartner 发布首份《身份验证魔力象限报告》\": \"https://www.freebuf.com/articles/neopoints/417194.html\",\n \"以虚假视频会议为诱饵，攻击者瞄准了Web3公司员工\": \"https://www.freebuf.com/news/417193.html\",\n \"罗马尼亚实锤“俄利用TikTok干扰大选”？\": \"https://www.freebuf.com/news/417184.html\"\n },\n \"安全牛\": {\n \"从勒索软件到APT：揭开制造业面临的8大网络安全威胁\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133887&idx=1&sn=1b3543929a156d58fd3a9502004cc7ce&chksm=bd15a76c8a622e7aa699f4d38a6742fa582715f6a5a880b7807d44a5dd793df64c3cf99d80c7&scene=58&subscene=0#rd\",\n \"劫持其他APT组织基础设施实施攻击，APT组织新战术曝光；罗克韦尔自动化软件曝多个严重漏洞，可被利用执行远程代码 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133887&idx=2&sn=5e64b53a72121f42601f459acb55f305&chksm=bd15a76c8a622e7a7bbfa541d6ae401b0d481ab229de33253da125d2bbfd20dada28b8730503&scene=58&subscene=0#rd\"\n },\n \"黑海洋 - IT技术知识库\": {\n \"SquareX “一次性浏览器” 以防止信息泄露\": \"https://www.upx8.com/4551\",\n \"Pandora Helper-开源ChatGPT Plus/Claude Pro账号共享服务\": \"https://www.upx8.com/4550\",\n \"微软开源图片到3D模型生成模型-TRELLIS\": \"https://www.upx8.com/4549\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"摄入超加工食品会导致肌肉储存更多脂肪\": \"https://www.solidot.org/story?sid=79999\",\n \"Google 延长 Pixel 6 和 7 的软件更新两年\": \"https://www.solidot.org/story?sid=79998\",\n \"广电总局限制 AI 魔改\": \"https://www.solidot.org/story?sid=79997\",\n \"itch.io 因 AI 举报被下线\": \"https://www.solidot.org/story?sid=79996\",\n \"史蒂芬五重星系正接受冲击波的洗礼\": \"https://www.solidot.org/story?sid=79995\",\n \"百度上线公文助手 AI\": \"https://www.solidot.org/story?sid=79994\",\n \"安装中国税务申报和政府应用的 PC 升级 Windows 11 24H2 可能会遭遇蓝屏死机\": \"https://www.solidot.org/story?sid=79993\",\n \"Marvell 市值超过英特尔\": \"https://www.solidot.org/story?sid=79992\",\n \"新加坡中小学生数理学力在 TIMSS 中排名第一\": \"https://www.solidot.org/story?sid=79991\",\n \"比特币矿场购买德州风电场然后退出电网\": \"https://www.solidot.org/story?sid=79990\"\n },\n \"安全分析与研究\": {\n \"伪装成ToDesk安装程序加载后门盗取数字货币\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247489656&idx=1&sn=b2693f2eecfd194407c52a70a20646ab&chksm=902fb750a7583e465c5ec31f000f5f3d8bf101a39b8b8704794a8cb29233ffbd4c8b3fd6b903&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"某AI产品违规生成法律法规禁止信息，遭地方网信办关停服务并整改\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513257&idx=1&sn=9e69872c15f0b7ab65754a15235d08f7&chksm=ebfaf389dc8d7a9f3cc0443b48f463849d85186f88f59e4a1f44fb9247789ab1150c0d254d62&scene=58&subscene=0#rd\",\n \"物联网安全合规做得太差，美国多个联邦机构遭批评\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513257&idx=2&sn=1d05333b962906f1c19d82b57a98309c&chksm=ebfaf389dc8d7a9f0aa09b35526de72c1409921742417e064eeb6c68844e61a0eaaa5cc6fd2f&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"强网杯S8初赛 PWN 赛题解析\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585618&idx=1&sn=2829f550700528e99809f3cd53994b6d&chksm=b18c3a9886fbb38e3db37f1738d486bb7a2f7262894cfed8e22cda8a0631fd6b919fa3e8ca95&scene=58&subscene=0#rd\",\n \"Linux pwn 探索篇\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585618&idx=2&sn=24e847a05b8141292f6dee8100388e19&chksm=b18c3a9886fbb38ef5e7485b70edb2f13850ae2a1d7cda06671b0e3f625221aaa171a13018eb&scene=58&subscene=0#rd\"\n },\n \"安全客\": {\n \"AI+军事：美防务公司将从战场收集数据训练AI模型\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787578&idx=1&sn=45f7ac3d09b57206a73485ddf7018382&chksm=8893bcd5bfe435c3d627c1414bbfbda61704354abcc718a0365e3b30582f7e2ed64f2fdcd0ae&scene=58&subscene=0#rd\"\n },\n \"代码卫士\": {\n \"Ultralytics AI模型正被劫持用于部署挖矿机\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521726&idx=1&sn=6242710e1abb2954dfd85acd30c4ffb1&chksm=ea94a4d4dde32dc29ca6a54533f86e3b41a2b1e42f56e3e15323ea820f86fb4b47b6ee550e8b&scene=58&subscene=0#rd\",\n \"SonicWall 修复Secure Access Gateway 中的6个漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521726&idx=2&sn=4020dbda138c28b7da91666b33eb120a&chksm=ea94a4d4dde32dc25a0dcbe4bb417dad621e9d9ab1c701a92e4cccf1dda90fcc8f7fc0d1eea9&scene=58&subscene=0#rd\"\n },\n \"暗影安全\": {\n \"极高可视化程度的供给面检查工具\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165655&idx=1&sn=bcf1c0abd900cc99ecb03efadee5d003&chksm=f1d4d3b2c6a35aa4d189bb730b874e550bdee8ad1720531a26fbf2a4aa3a4946ef8d60d522f1&scene=58&subscene=0#rd\"\n },\n \"天御攻防实验室\": {\n \"亚马逊云服务（AWS）如何生产威胁情报（一）\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486155&idx=1&sn=60fe469355ff2f4d8d5026fdaeb99b30&chksm=fb04c9a3cc7340b54754d887fa53cbddc2427a1ea8d871b144469c1e0d5566f60cd139a9d553&scene=58&subscene=0#rd\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 阅读推荐 2024-12-09 上古游戏点石成金\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499372&idx=1&sn=b723d2be54a413cae106a3d24c6d624c&chksm=c063d0b5f71459a3bed08a8fe5f4ee555991a8fda0e2b97214d7402b01e1b6f5844677df8135&scene=58&subscene=0#rd\"\n },\n \"君哥的体历\": {\n \"绝知此事要躬行——落地实践视角下的安全有效性验证\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491683&idx=1&sn=3e0bbe136527cfeca2d4248065dd975a&chksm=ea484a24dd3fc33259dfb569335750f5d7f903a030d26f7973bc80ec732d03ee8b2e59f04077&scene=58&subscene=0#rd\"\n },\n \"微步在线\": {\n \"预告 | 信创终端威胁，一“触”即防\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182727&idx=1&sn=bdc394ef4b173aa66a233c624512f50a&chksm=f4486ffbc33fe6edd74e4118c0a1c48a924a4a906629679c8134e161a0cec68033207ac308c8&scene=58&subscene=0#rd\"\n },\n \"中国信息安全\": {\n \"全球视野 | 国际网安快讯（第40期）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=1&sn=ebdea6dbaae16e3f7ca829dce2f58238&chksm=8b59f1cabc2e78dc522061b1afb0eb1b0c2127b1ed299680953db81e6a23b34a9b55f12f0114&scene=58&subscene=0#rd\",\n \"黄殿中院士：智能时代网络空间认知安全新观察\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=2&sn=9a9104dcc54d53c78ad711af395dff3e&chksm=8b59f1cabc2e78dc35c863a43e27e19f964a5b8a7a5d9bdb78e35419f66fe7d37c4bf737f069&scene=58&subscene=0#rd\",\n \"聚焦 | 第八届“一带一路”园区建设国际合作峰会首次网络安全国际合作专题论坛在京举办\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=3&sn=9ed7aa5dcf60b42a52239381f96913be&chksm=8b59f1cabc2e78dc8cd08a5f4fc1f15f94dadef8d4cf3c487acb8aaeabfe0472cbac8a9c4e35&scene=58&subscene=0#rd\",\n \"专家解读 | 坚持“六位一体” 立体化推进可信数据空间建设\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=4&sn=8236a5d914c530c1a19fe278be26d564&chksm=8b59f1cabc2e78dcc1ccabc945a4550fcb7cac6076ebd77219d0e5476f6df2ab6313f5af0b01&scene=58&subscene=0#rd\",\n \"专家解读 | 《全球数据跨境流动合作倡议》：焦点之问与中国答案\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=5&sn=455a713cc61401ad9a4faf254fda80d2&chksm=8b59f1cabc2e78dc9121311b15a8713dc1b36e7a7c486bf3d15c96ee143b8877868cc0a8ad91&scene=58&subscene=0#rd\",\n \"评论 | 未成年人用网“一刀切”换不来一劳永逸\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=6&sn=1ee91cd47f332f0b82f4e9233537e9af&chksm=8b59f1cabc2e78dc505eef11e9cc2ad1b9d9748941998cc262e36621bc2a2af13d337e8249f5&scene=58&subscene=0#rd\",\n \"注意 | 警惕！网站暗链的隐秘威胁\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231731&idx=7&sn=2b70e3d1949c94969594515626881334&chksm=8b59f1cabc2e78dc9fcb1c1507c385b7395a6c10230ab0751a35a3d93218bc1234a81814d203&scene=58&subscene=0#rd\"\n },\n \"leveryd\": {\n \"简单点，让“绕WAF”简单点\": \"https://mp.weixin.qq.com/s?__biz=MzkyMDIxMjE5MA==&mid=2247485472&idx=1&sn=50ee57741fbf263ab768b1b56c57ac58&chksm=c1970f91f6e08687992f09348b2e101724b21662edcc2a4c43395a093cb5c6d6793828d197e3&scene=58&subscene=0#rd\"\n },\n \"默安科技\": {\n \"“链”上发力，默安科技软件供应链安全实力再获认可\": \"https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247499661&idx=1&sn=2915c6338af61391998c7496470e6388&chksm=e93b08afde4c81b9ca75967245dfbc579024742022d15c8e3698b1310dd4c5327f463bb8efac&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"谷歌，暗搓搓发了一个「游戏版 sora」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653068380&idx=1&sn=c9c626cb15d9769a4249e2fe7ea1790a&chksm=7e57e1ea492068fc8e5a05b0ef9fb8b954af17f111bbddabc2495ee2a25995aa4a0c8f924d61&scene=58&subscene=0#rd\",\n \"主打一个回忆杀！老友们，快回极客公园 IF 2025 看看！\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653068380&idx=2&sn=50eede1d5e9ad200146c2b1973db2fe0&chksm=7e57e1ea492068fce11eb1865a82c9e1040b4847328fc1adbc2a5e9c0b53f36d056103118473&scene=58&subscene=0#rd\",\n \"第一批 AI 员工，即将入职电商公司\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653068279&idx=1&sn=dfc14f635ae1a41d3068d513580250b1&chksm=7e57e64149206f57d015f60c5867a916a3f46b74cb6e590651bd6ba1d0b1cca1f8b8490b3a43&scene=58&subscene=0#rd\",\n \"马云现身蚂蚁集团，寄语未来 20 年；小米考虑支持苹果手表、耳机；特斯拉低价小车明年亮相 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653068256&idx=1&sn=029976eeb48b454958ba97a7f79d017c&chksm=7e57e65649206f40e2e756a56f4638a79ed3103ba6603c3a22c127502787b7d3fdf83931c506&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"黑客利用 ProjectSend 漏洞对暴露的服务器进行后门处理\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580114&idx=1&sn=fa181017da36db2d6d5598cb97f6ec10&chksm=e91469e8de63e0fe2c1a9542280afc7bb19ad4f3b5fb1026fcfc02ef039eebb5daa59df0e88e&scene=58&subscene=0#rd\",\n \"安全动态回顾|2项网络安全国家标准获批发布 罗马尼亚选举系统遭受超过85000次网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580114&idx=2&sn=c6406ef0575cf54d1f396adb68dc3c81&chksm=e91469e8de63e0fe51b53e84e288310b32b87bf5b28b8409ae76b55f87e8cc971675ad1400e2&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"2024叙利亚局势中的认知战分析研判\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650558135&idx=1&sn=ec3bbe2cc05ceec98ba8a5a543881f0e&chksm=871160fcb066e9ea72317fd5316a2ca5d1bf596794f81e7c847705a7c490dcda9576a29c03ee&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \".NET 一款快速收集本地文件密码的工具\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497359&idx=1&sn=8f2d4dd6efede3454c57d652e720427e&chksm=fa595862cd2ed1743829da921ba3da718b0cc8e91b369f061a66e4ac7a0aa98c27a15b57eb2c&scene=58&subscene=0#rd\",\n \"最专业的 [ .NET 代码审计 ] 体系化学习社区\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497359&idx=2&sn=d265e18a386fea16f697be68f174ead4&chksm=fa595862cd2ed17472c77bb924e91b89408cec2b9b0d5223c8abc7983360b46d762e53ae7158&scene=58&subscene=0#rd\",\n \".NET 一键删除系统日志命令行版本的工具\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497359&idx=3&sn=18af7d178c62923fea8e2e9138dad51a&chksm=fa595862cd2ed17477df75d5d8cc01613e76a65f63aa8d9fca3f8c7b48a9aa7e5b84b45cff61&scene=58&subscene=0#rd\"\n },\n \"字节跳动技术团队\": {\n \"火山引擎veImageX助力谱时智能云深耕照片直播赛道\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512202&idx=1&sn=79727c02dc9c3dd3c3d6c668c5d95c5e&chksm=e9d37b68dea4f27e7d3187ecb139a03119e8568706e0a6b52cb8f898f476b938541b5e4a60c9&scene=58&subscene=0#rd\",\n \"见证无限可能！火山引擎冬季 Force 大会开发者论坛来袭\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512202&idx=2&sn=73814a49bc3d3b62dc7f2528d46458b9&chksm=e9d37b68dea4f27e6f64f1a323a67002693f5291b1781afa2b24fb19912db7beeefd95a65b26&scene=58&subscene=0#rd\"\n },\n \"威努特安全网络\": {\n \"威努特数据安全解决方案：护航汽车制造，守护安全底线\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651129472&idx=1&sn=855706b2417632c15396fcb16ef1ff00&chksm=80e71c30b79095267f8c2a32e75bd0e2e2a106fde73a9759258c3c828e93e11b15422fcf8262&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"7 个不容忽视的开源安全工具\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247530686&idx=1&sn=fa1d246d60639c8e63ecde03f04f7b2b&chksm=c1440a03f63383157e8f05404772e74b8731b5df2e08950640cfc947074101d0218813a71144&scene=58&subscene=0#rd\",\n \"全面防护：AI驱动持续安全验证，灵活应对万变攻击\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247530686&idx=2&sn=a0087e732b60c3c448073aa749ca8d2d&chksm=c1440a03f6338315df39b649d00316725e92a8fd75f5bba1e50c567806c222e5baaaefd3add4&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】罗马尼亚实锤“俄利用TikTok干扰大选”？\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=1&sn=7d30d5e05512a097527518e65b5d4a47&chksm=f36e7ea9c419f7bf2441b5e32566b33200b4d25cbef93e2e3dc6eec99240fdcf71af8a1f8431&scene=58&subscene=0#rd\",\n \"【安全圈】安装国内某些税务申报软件的机器升级到Windows 11 24H2版后会蓝屏死机\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=2&sn=d5fede1d86a1b698f39f53972f7be353&chksm=f36e7ea9c419f7bfcfe8e5fb1cca5dc1741d0ffc44d398cd3d5d2b0a9ca07919efcff55ec1d8&scene=58&subscene=0#rd\",\n \"【安全圈】以虚假视频会议为诱饵，攻击者瞄准了Web3公司员工\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=3&sn=03588703ad0844e131c2d12ea5375e40&chksm=f36e7ea9c419f7bfc98d519d3e5ad1c113755986ebb59a6df124e6fdfd39b6c95c471eaaabad&scene=58&subscene=0#rd\",\n \"【安全圈】需要采取紧急行动：ABB ASPECT 漏洞使建筑物面临网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=4&sn=6f910eee1c20ed718fdf7c754fd840e1&chksm=f36e7ea9c419f7bff05e335235f5475598b068e6dabeebb56b12bd1c608f6af50d94bb06833e&scene=58&subscene=0#rd\"\n },\n \"迪哥讲事\": {\n \"如何寻找隐藏的参数\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496545&idx=1&sn=f5fa3d991b8bce754f69af9bce39e422&chksm=e8a5f902dfd2701461874bad2052b169d16ebf8b9e5b93da084d310d16b7007fe020a89e827d&scene=58&subscene=0#rd\"\n },\n \"ICT Security Magazine\": {\n \"Cybersecurity trends 2026: il futuro della Sicurezza Digitale nell’Era dell’IA\": \"https://www.ictsecuritymagazine.com/notizie/cybersecurity-trends-2026/\",\n \"Ingegneria della Sicurezza applicata ai Sistemi Spaziali: affrontare le minacce cyber nel nuovo contesto globale\": \"https://www.ictsecuritymagazine.com/articoli/sicurezza-sistemi-spaziali/\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Ransomware attack hits leading heart surgery device maker\": \"https://www.bleepingcomputer.com/news/security/ransomware-attack-hits-leading-heart-surgery-device-maker/\",\n \"OpenWrt Sysupgrade flaw let hackers push malicious firmware images\": \"https://www.bleepingcomputer.com/news/security/openwrt-sysupgrade-flaw-let-hackers-push-malicious-firmware-images/\",\n \"US subsidiaries of Japanese water treatment company, green tea maker hit with ransomware\": \"https://therecord.media/us-subsidiaries-japanese-water-treatment\",\n \"La tragedia di Brianna Ghey: il lato oscuro di Internet\": \"https://www.insicurezzadigitale.com/la-tragedia-di-brianna-ghey-il-lato-oscuro-di-internet/\",\n \"Ubisoft fixes Windows 11 24H2 conflicts causing game crashes\": \"https://www.bleepingcomputer.com/news/microsoft/ubisoft-fixes-windows-11-24h2-conflicts-causing-game-crashes/\",\n \"Radiant links $50 million crypto heist to North Korean hackers\": \"https://www.bleepingcomputer.com/news/security/radiant-links-50-million-crypto-heist-to-north-korean-hackers/\",\n \"MC LR Router and GoCast unpatched vulnerabilities\": \"https://blog.talosintelligence.com/mc-lr-router-and-gocast-zero-day-vulnerabilities-2/\",\n \"Russia disrupts internet access in multiple regions to test ‘sovereign internet’\": \"https://therecord.media/russia-disrupts-internet-access-in-multiple-regions-runet\",\n \"Medical device company says shipping processes disrupted by ransomware attack\": \"https://therecord.media/artivion-medical-device-company-cyberattack-notice-sec\",\n \"Homeland Security veteran being interviewed for Trump administration cyber role\": \"https://therecord.media/dhs-interview-brian-harrell-trump\",\n \"Outdated Google Workspace Sync blocks Windows 11 24H2 upgrades\": \"https://www.bleepingcomputer.com/news/microsoft/outdated-google-workspace-sync-blocks-windows-11-24h2-upgrades/\",\n \"Ukraine says Russian hackers are targeting country’s defense contractors\": \"https://techcrunch.com/2024/12/09/ukraine-says-russian-hackers-are-targeting-countrys-defense-contractors/\",\n \"Cybercrime gang arrested after turning Airbnbs into fraud centers\": \"https://www.bleepingcomputer.com/news/security/cybercrime-gang-arrested-after-turning-airbnbs-into-fraud-centers/\",\n \"Romanian energy supplier Electrica hit by ransomware attack\": \"https://www.bleepingcomputer.com/news/security/romanian-energy-supplier-electrica-hit-by-ransomware-attack/\",\n \"Suspected Russian hackers target Ukrainian defense enterprises in new espionage campaign\": \"https://therecord.media/suspected-russian-hackers-target-ukrainian-enterprises-espionage\",\n \"Key electricity distributor in Romania warns of ‘cyber attack in progress’\": \"https://therecord.media/electric-distributor-cyberattack-romania\",\n \"WhatsApp fixes bug that let users bypass ‘View Once’ privacy feature\": \"https://techcrunch.com/2024/12/09/whatsapp-fixes-bug-that-let-users-bypass-view-once-privacy-feature/\",\n \"Ladies.com - 118,809 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Ladies\",\n \"Senior Dating - 765,517 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#SeniorDating\",\n \"Cyble’s Weekly Vulnerability Report: Critical Flaws in Major Software Including Progress Software, QNAP, and 7-Zip\": \"https://cyble.com/blog/cyble-weekly-vulnerability-report/\",\n \"Threat Intelligence - Vulnerability insights\": \"https://www.certego.net/blog/whitepaper-novembre-2024-threat-intelligence-insights/\",\n \"Privacy web: Google si conferma lo strumento di tracciamento più usato\": \"https://www.securityinfo.it/2024/12/09/privacy-web-google-si-conferma-lo-strumento-di-tracciamento-piu-usato/\",\n \"Using LinkedIn and Python to simplify Phishing targeting\": \"https://catchingphish.com/posts/f/using-linkedin-and-python-to-simplify-phishing-targeting\",\n \"Vulnerabilità nei prodotti Zyxel, ProjectSend e CyberPanel\": \"https://www.securityinfo.it/2024/12/09/vulnerabilita-nei-prodotti-di-zyxel-projectsend-e-cyberpanel/\",\n \"QNAP NAS Vulnerabilities Exposed: What You Need to Know to Stay Secure\": \"https://cyble.com/blog/qnap-nas-vulnerabilities-exposed/\",\n \"Story of the Year: global IT outages and supply chain attacks\": \"https://securelist.com/ksb-story-of-the-year-2024/114883/\",\n \"CERT-AGID 30 novembre – 6 dicembre: il phishing colpisce Intesa Sanpaolo\": \"https://www.securityinfo.it/2024/12/09/cert-agid-30-novembre-6-dicembre-il-phishing-colpisce-intesa-sanpaolo/\",\n \"QR codes bypass browser isolation for malicious C2 communication\": \"https://www.bleepingcomputer.com/news/security/qr-codes-bypass-browser-isolation-for-malicious-c2-communication/\",\n \"Top 10 Cyber Threats of 2024\": \"https://blog.bushidotoken.net/2024/12/top-10-cyber-threats-of-2024.html\"\n },\n \"Securityinfo.it\": {\n \"Privacy web: Google si conferma lo strumento di tracciamento più usato\": \"https://www.securityinfo.it/2024/12/09/privacy-web-google-si-conferma-lo-strumento-di-tracciamento-piu-usato/?utm_source=rss&utm_medium=rss&utm_campaign=privacy-web-google-si-conferma-lo-strumento-di-tracciamento-piu-usato\",\n \"Vulnerabilità nei prodotti Zyxel, ProjectSend e CyberPanel\": \"https://www.securityinfo.it/2024/12/09/vulnerabilita-nei-prodotti-di-zyxel-projectsend-e-cyberpanel/?utm_source=rss&utm_medium=rss&utm_campaign=vulnerabilita-nei-prodotti-di-zyxel-projectsend-e-cyberpanel\",\n \"CERT-AGID 30 novembre – 6 dicembre: il phishing colpisce Intesa Sanpaolo\": \"https://www.securityinfo.it/2024/12/09/cert-agid-30-novembre-6-dicembre-il-phishing-colpisce-intesa-sanpaolo/?utm_source=rss&utm_medium=rss&utm_campaign=cert-agid-30-novembre-6-dicembre-il-phishing-colpisce-intesa-sanpaolo\"\n },\n \"360数字安全\": {\n \"周鸿祎：360安全大模型将向“一带一路”友邻国家开放共享\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577471&idx=1&sn=14be24acd47dba66bd105aa3790e5c53&chksm=9f8d3f77a8fab661143c2273e6329fa5d3e28b2082e3d29c38e4a2b7f2ae12847b4adef7fc43&scene=58&subscene=0#rd\",\n \"助力人才强国战略，360以实战人才为核心打造产教融合新业态\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577471&idx=2&sn=16c3698586f9efb50ac8ceff99fecdd6&chksm=9f8d3f77a8fab661600570635b747d97ff695722004e41d9525ec2d4ab865f0a4045cc7e5a45&scene=58&subscene=0#rd\"\n },\n \"绿盟科技研究通讯\": {\n \"全球云上数据泄露风险分析简报 （第三期）：云盘误配置与API漏洞致高校信息泄露，影响7亿账户\": \"https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498096&idx=1&sn=60b0f557103ef67e7cf9159778b928d8&chksm=e84c5fafdf3bd6b900c1a3366bb5bf4596df0f45680ccc8b16e4d250e452104e9c80d3e53b3c&scene=58&subscene=0#rd\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"CURLing for Crypto on Honeypots, (Mon, Dec 9th)\": \"https://isc.sans.edu/diary/rss/31502\",\n \"ISC Stormcast For Monday, December 9th, 2024 https://isc.sans.edu/podcastdetail/9246, (Mon, Dec 9th)\": \"https://isc.sans.edu/diary/rss/31504\"\n },\n \"Schneier on Security\": {\n \"Trust Issues in AI\": \"https://www.schneier.com/blog/archives/2024/12/trust-issues-in-ai.html\"\n },\n \"Have I Been Pwned latest breaches\": {\n \"Senior Dating - 765,517 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#SeniorDating\",\n \"Ladies.com - 118,809 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Ladies\"\n },\n \"BorderGate\": {\n \"Bluetooth Low Energy\": \"https://www.bordergate.co.uk/bluetooth-low-energy/\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"First GPT for Infostealer intelligence is dropping tomorrow for free\": \"https://www.reddit.com/r/blackhat/comments/1ha7lua/first_gpt_for_infostealer_intelligence_is/\",\n \"Botnet and c2\": \"https://www.reddit.com/r/blackhat/comments/1ha3r9c/botnet_and_c2/\"\n },\n \"Computer Forensics\": {\n \"Updated Info on Cell Tower Forensic Class\": \"https://www.reddit.com/r/computerforensics/comments/1haelyn/updated_info_on_cell_tower_forensic_class/\",\n \"NCFI January 2025 Courses\": \"https://www.reddit.com/r/computerforensics/comments/1hadpl3/ncfi_january_2025_courses/\"\n },\n \"Your Open Hacker Community\": {\n \"Looking for IG brutes in bulk\": \"https://www.reddit.com/r/HowToHack/comments/1hakih9/looking_for_ig_brutes_in_bulk/\",\n \"how can i make a combolist\": \"https://www.reddit.com/r/HowToHack/comments/1hak3jl/how_can_i_make_a_combolist/\",\n \"how to recover files from phone after reset\": \"https://www.reddit.com/r/HowToHack/comments/1hahz6e/how_to_recover_files_from_phone_after_reset/\",\n \"can I create my own app in metaspoilt-framework ?\": \"https://www.reddit.com/r/HowToHack/comments/1hagxdd/can_i_create_my_own_app_in_metaspoiltframework/\",\n \"What's this ip address?\": \"https://www.reddit.com/r/HowToHack/comments/1ha9hdf/whats_this_ip_address/\",\n \"I need to learn how to place a Trojan on a loptop\": \"https://www.reddit.com/r/HowToHack/comments/1haaah8/i_need_to_learn_how_to_place_a_trojan_on_a_loptop/\",\n \"Can a Zip bomb be made with any file type?\": \"https://www.reddit.com/r/HowToHack/comments/1h9zphv/can_a_zip_bomb_be_made_with_any_file_type/\",\n \"I got hacked but i got his email idk what to do with it\": \"https://www.reddit.com/r/HowToHack/comments/1h9xhqr/i_got_hacked_but_i_got_his_email_idk_what_to_do/\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Compromising OpenWrt Supply Chain via Truncated SHA-256 Collision and Command Injection\": \"https://www.reddit.com/r/netsec/comments/1ha68y0/compromising_openwrt_supply_chain_via_truncated/\",\n \"From XSS Vulnerability to Full Admin Access\": \"https://www.reddit.com/r/netsec/comments/1ha3czp/from_xss_vulnerability_to_full_admin_access/\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Cousera course\": \"https://www.reddit.com/r/netsecstudents/comments/1haeiu8/cousera_course/\",\n \"Go Report [a vulnerability] Card - Writeup\": \"https://www.reddit.com/r/netsecstudents/comments/1ha6vsg/go_report_a_vulnerability_card_writeup/\"\n },\n \"The Hacker News\": {\n \"Black Basta Ransomware Evolves with Email Bombing, QR Codes, and Social Engineering\": \"https://thehackernews.com/2024/12/black-basta-ransomware-evolves-with.html\",\n \"⚡ THN Recap: Top Cybersecurity Threats, Tools and Tips (Dec 2 - 8)\": \"https://thehackernews.com/2024/12/thn-recap-top-cybersecurity-threats_9.html\",\n \"Researchers Uncover Prompt Injection Vulnerabilities in DeepSeek and Claude AI\": \"https://thehackernews.com/2024/12/researchers-uncover-prompt-injection.html\",\n \"Seven Bolt-Ons to Make Your Entra ID More Secure for Critical Sessions\": \"https://thehackernews.com/2024/12/seven-bolt-ons-to-make-your-entra-id.html\",\n \"Socks5Systemz Botnet Powers Illegal Proxy Service with 85,000+ Hacked Devices\": \"https://thehackernews.com/2024/12/socks5systemz-botnet-powers-illegal.html\"\n },\n \"Social Engineering\": {\n \"How to have charisma?\": \"https://www.reddit.com/r/SocialEngineering/comments/1ha65n2/how_to_have_charisma/\"\n },\n \"Security Affairs\": {\n \"Deloitte denied its systems were hacked by Brain Cipher ransomware group\": \"https://securityaffairs.com/171827/uncategorized/deloitte-denied-its-systems-were-hacked-by-brain-cipher-ransomware-group.html\",\n \"Mandiant devised a technique to bypass browser isolation using QR codes\": \"https://securityaffairs.com/171809/hacking/bypass-browser-isolation-using-qr-codes.html\",\n \"2023 Anna Jaques Hospital data breach impacted over 310,000 people\": \"https://securityaffairs.com/171801/data-breach/anna-jaques-hospital-data-breach.html\"\n }\n}"}}, "archive/tmp/2026-03-20.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747328.3145666, "n": 42386, "h": "821bc7f9185c6c23", "c": "{\n \"安全客-有思想的安全新媒体\": {\n \"科技云报到：“龙虾”OpenClaw狂欢之下，需要一针清醒剂\": \"https://www.anquanke.com/post/id/315195\",\n \"瑞数信息入选IDC两大AI安全报告，防御OpenClaw小龙虾裸奔危机\": \"https://www.anquanke.com/post/id/315209\",\n \"2026首届汽车安全白帽黑客大会圆满收官，共筑车联网安全新生态\": \"https://www.anquanke.com/post/id/315197\"\n },\n \"Verne in GitHub\": {\n \"我 Vibe Coding 了一个日本看房神器：BukkenAI\": \"https://blog.einverne.info/post/2026/03/bukkenai-ai-powered-japan-real-estate-neighborhood-analysis.html\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2026-03-19 Review\": \"http://www.sec-wiki.com/?2026-03-19\"\n },\n \"obaby 𝐢‍𝐧⃝ void\": {\n \"🦞龙虾初体验\": \"https://zhongxiaojie.cn/2026/03/610/\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Thu Mar 19 11:10:26 UTC 2026\": \"https://github.com/trickest/cve/commit/914d1ac1fc9bad5883226b80f128773bb1b1837a\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"2026首届汽车安全白帽黑客大会圆满收官，共筑车联网安全新生态\": \"https://www.4hou.com/posts/VW8o\",\n \"2026职场AI观察：禁而不止的影子代理，正在埋下企业数据安全隐患\": \"https://www.4hou.com/posts/PG26\",\n \"嘶吼安全动态｜官方辟谣“七部门AI安全治理三年行动计划” 新型iPhone攻击工具“DarkSword”曝光\": \"https://www.4hou.com/posts/RX4w\",\n \"假招聘真投毒！ Next.js 面试题暗藏后门实施入侵\": \"https://www.4hou.com/posts/rpJW\",\n \"警惕！“养虾”邮件攻击｜一封邮件就让AI沦为黑客\": \"https://www.4hou.com/posts/QX35\"\n },\n \"Microsoft Security Blog\": {\n \"New tools and guidance: Announcing Zero Trust for AI\": \"https://www.microsoft.com/en-us/security/blog/2026/03/19/new-tools-and-guidance-announcing-zero-trust-for-ai/\",\n \"When tax season becomes cyberattack season: Phishing and malware campaigns using tax-related lures\": \"https://www.microsoft.com/en-us/security/blog/2026/03/19/when-tax-season-becomes-cyberattack-season-phishing-and-malware-campaigns-using-tax-related-lures/\"\n },\n \"Tenable Blog\": {\n \"Bolster your defenses and close the code-to-cloud gap with Tenable and OX\": \"https://www.tenable.com/blog/tenable-ox-cnapp-appsec-integration\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"Escaping the Sandbox: How a Simple Python Path Flaw Led to Host RCE\": \"https://infosecwriteups.com/escaping-the-sandbox-how-a-simple-python-path-flaw-led-to-host-rce-817d39c95f86?source=rss----7b722bfd1b8d---4\",\n \"My Complete Bug Bounty Hunting Workflow Every Command I Use, Step by Step\": \"https://infosecwriteups.com/my-complete-bug-bounty-hunting-workflow-every-command-i-use-step-by-step-68484276471f?source=rss----7b722bfd1b8d---4\",\n \"OffSec Proving Grounds — Potato\": \"https://infosecwriteups.com/offsec-proving-grounds-potato-b080d38b4bed?source=rss----7b722bfd1b8d---4\",\n \"WiFi Pentesting Series— Breaking WEP\": \"https://infosecwriteups.com/wifi-pentesting-series-breaking-wep-dd1597db2e5e?source=rss----7b722bfd1b8d---4\",\n \"When Old Breaches Meet New Code: Why Historical Leaks Still Matter\": \"https://infosecwriteups.com/when-old-breaches-meet-new-code-why-historical-leaks-still-matter-b4e6eb8ac607?source=rss----7b722bfd1b8d---4\",\n \"Proving Grounds — Practice — XposedAPI\": \"https://infosecwriteups.com/proving-grounds-practice-xposedapi-770d48008e3a?source=rss----7b722bfd1b8d---4\",\n \"I Found a Critical SSRF Vulnerability That Could Have Exposed an Entire Server Here’s How\": \"https://infosecwriteups.com/i-found-a-critical-ssrf-vulnerability-that-could-have-exposed-an-entire-server-heres-how-0a69c2ba2dee?source=rss----7b722bfd1b8d---4\",\n \"Blog TryHackMe Box Writeup\": \"https://infosecwriteups.com/blog-tryhackme-box-writeup-55b5abe7e28d?source=rss----7b722bfd1b8d---4\"\n },\n \"Doonsec's feed\": {\n \"哥你搞了AI之后越来越忙了\": \"https://mp.weixin.qq.com/s/5AekB7yyc3lnbRsslccBxQ\",\n \"攻击路径(11)：堡垒机还是别放互联网了\": \"https://mp.weixin.qq.com/s/36vudabGRIY07Rf6-eYXWw\",\n \"内网网络审计工具箱（大牛蛙版）\": \"https://mp.weixin.qq.com/s/t9cQvfSBRXTBfo3RGt8h8w\",\n \"H6-5-逆向工程（Ghidra）关于从零开始掌握Ghidra逆向自学篇\": \"https://mp.weixin.qq.com/s/E5SRwA1mLt1s03bY50XzHA\",\n \"H6-4-逆向工程（Ghidra）知识星球关于进阶黑客技能需要长期维护的基础部分今日闭环。并对外开放！\": \"https://mp.weixin.qq.com/s/phUMIgaWUoONWf7G9ZRQNw\",\n \"据传字母站裁员30%\": \"https://mp.weixin.qq.com/s/Xx66YWb4DlisptcIMjIjMg\",\n \"RSAC 2026创新沙盒 | Token Security：机器优先身份安全理念的倡导者\": \"https://mp.weixin.qq.com/s/nEy16eNSFJ1Xh1tOGU_AAw\",\n \"沙箱检测与绕过：反调试、虚拟机检测与父进程伪造实战\": \"https://mp.weixin.qq.com/s/S2pqJ_09tgFiMYS-J1U8OQ\",\n \"通过互联网大善人Cloudflare挂载你的恶意载荷\": \"https://mp.weixin.qq.com/s/z-rd4S0K8CbPd9EhyeoNbA\",\n \"Upload Labs 第10关：点空格点绕过文件上传限制\": \"https://mp.weixin.qq.com/s/fUq5uTDSyF1l3h2IW-B7fw\",\n \"xx信-CTF面试题\": \"https://mp.weixin.qq.com/s/2ODQTXobX4xD05Wsfsb_2g\",\n \"利用QR技术隐写shellcode\": \"https://mp.weixin.qq.com/s/2oXJSocJ8U5G-scJrRWZdg\",\n \"利用TG收集网页钓鱼信息\": \"https://mp.weixin.qq.com/s/nIIJq464YlRndqsrSIdnpg\",\n \"论文研读与思考|DPMRS:基于字典分区的高效精准多关键词排序搜索方案在云计算中的应用\": \"https://mp.weixin.qq.com/s/nP29OEMxww8_cWNf8fda8w\",\n \"Windows RCE漏洞EXP - CVE-2025-29969\": \"https://mp.weixin.qq.com/s/xfPLqb_R5_9Xs24QNDWILw\",\n \"只讲干货 | 中国网络安全行业全景深度剖析\": \"https://mp.weixin.qq.com/s/XVgwR105ntNlFLwMqIQIZg\",\n \"安全运营 Agent 的演进：从规则告警到 AI 自动研判\": \"https://mp.weixin.qq.com/s/Pp-tC87LCQFPKuUwTW1SLQ\",\n \"震惊！多模态大模型存在“反射弧超长”死穴\": \"https://mp.weixin.qq.com/s/gXvJ0tz9CtBo71bEd0dxTg\",\n \"G.O.S.S.I.P 阅读推荐 2026-03-19 蓝牙重配对攻击\": \"https://mp.weixin.qq.com/s/EcT4lvE2Oq5o57NM4TuAsA\",\n \"红队打点利器：太极内网渗透工具(资产梳理与密码喷洒)\": \"https://mp.weixin.qq.com/s/SeKMoJ6vvHZUSsRuI6wfNQ\",\n \"站在巨人的JB上之VMP初窥\": \"https://mp.weixin.qq.com/s/CzUM8MwatjFWjaKbQONzDw\",\n \"AI武器化、零点击攻击与8亿美金大劫案（近期大瓜汇总）\": \"https://mp.weixin.qq.com/s/5oTKeQ9jgMHMoDFnRM_6gA\",\n \"SQLMap加强版Tamper脚本集合\": \"https://mp.weixin.qq.com/s/wZShGLWpbmMc9QBDJea8qQ\",\n \"挖了半年SRC颗粒无收\": \"https://mp.weixin.qq.com/s/o5ps2-VGcNwCJvfABxOsdg\",\n \"威胁情报日报 2026-03-19\": \"https://mp.weixin.qq.com/s/A2pzVdbCMKqo0RwZfG-KUg\",\n \"2026年全球事件响应报告总结\": \"https://mp.weixin.qq.com/s/ZG7S1iGhPZH3cXohJveItw\",\n \"她，95后，小米MiMo掌舵人，北大才女带队干翻全球AI巨头\": \"https://mp.weixin.qq.com/s/Y9wfpjMTvDWWXv8ltYlOcw\",\n \"Windows | 利用Lua加载StealC v2窃密攻击活动分析\": \"https://mp.weixin.qq.com/s/sKHq_epYhO2UDeX4f4wpXA\",\n \"拆解iOS应用逆向实战中的反调试与反篡改\": \"https://mp.weixin.qq.com/s/H3qSYgdR7TN-S8mvIW8Smg\",\n \"WgpSec助力顺丰SRC第四届白帽技术沙龙，干货抽奖全都有！\": \"https://mp.weixin.qq.com/s/YetQLXeaoKDR9C_kAyZGbw\",\n \"【资讯】吉林省政数局印发《吉林省公共数据资源登记管理实施细则（试行）》\": \"https://mp.weixin.qq.com/s/dPR4O2u8gAUxr73dpvD9XQ\",\n \"【资讯】东莞市政数局印发《东莞市关于深化“一网通办2.0”建设 加快数智赋能政务服务效能提升的工作方案》\": \"https://mp.weixin.qq.com/s/5TKCO5qmb6xsRhuS9lNAsg\",\n \"有没有比JavaScript更好的编程语言？\": \"https://mp.weixin.qq.com/s/uAptJyukionl_EPDwWqVAw\",\n \"江苏徐州邳州的梁龙涛，说白了还是太有实力\": \"https://mp.weixin.qq.com/s/_710n8WHj9LeLQWuUdI2vA\",\n \"Vitalik：安全 = 意图对齐\": \"https://mp.weixin.qq.com/s/irdAZe2HMhRFKnmOA73KYw\",\n \"快手编译优化实践：C++编译优化助力业务性能平均提升10%，Propeller优化方案合入LLVM社区\": \"https://mp.weixin.qq.com/s/nyk6vNp59UWM_j5haV_Zug\",\n \"“鸿蒙系统”遇上“原生安全”：看奇安信天擎如何构筑国产PC可信底座\": \"https://mp.weixin.qq.com/s/a2DY1a0QQAM9xKFOgdxNFQ\",\n \"2026“天枢杯”青少年人工智能安全创新大赛——北京东城区专题培训会成功举办\": \"https://mp.weixin.qq.com/s/co7KLCZOb7Y4E1nQRb6B7Q\",\n \"AI串联漏洞攻陷招聘平台，伪装特朗普索要数据权限\": \"https://mp.weixin.qq.com/s/WPmHCoDfS-cPTRrP-6gnZQ\",\n \"【先进安服分享】安全服务转型：从割裂到飞轮\": \"https://mp.weixin.qq.com/s/1weNLtCl9LoS1ATjGVUmUQ\",\n \"首届 PolarisCTF 招新赛正式启幕\": \"https://mp.weixin.qq.com/s/8bMTTJ6qdO5oeLDmiHX7FQ\",\n \"情报速递 | 黑客在暗网论坛曝光知名网安公司Knownsec数百兆内部文件\": \"https://mp.weixin.qq.com/s/e26tuPgdNSo46DPtN1fm1A\",\n \"CVE-2026-2441：Chrome CSSFontFeatureValuesMap 释放后重用漏洞解析\": \"https://mp.weixin.qq.com/s/MWInOqfmcoFngNO9YRbAxg\",\n \"“网络洲际导弹”泄露！数亿台iPhone可被静默入侵窃取所有数据\": \"https://mp.weixin.qq.com/s/k31UFAznVBRJrx48GlAa1g\",\n \"创建OpenClaw“龙虾教师”技能辅导小学生\": \"https://mp.weixin.qq.com/s/7Qwbvru0-En_kqlL9mtV5A\",\n \"EasyClaw 作为国内首款“零配置、高隐私、全平台”的OpenClaw龙虾AI桌面助手，全栈AI Agent、全场景私人助理\": \"https://mp.weixin.qq.com/s/kW1CUQIE2fYuJRoY5PB_UA\",\n \"国家安全部发文！暗网为何被称为“罪恶的深渊”\": \"https://mp.weixin.qq.com/s/sL1E6PjgC_avch3pShvPxg\",\n \"Apple WebKit 漏洞使恶意网页内容可在 iOS 和 macOS 上绕过安全机制\": \"https://mp.weixin.qq.com/s/BH45coP-O-dw1zl85ZHSjA\",\n \"严重的 Telnetd 漏洞允许远程攻击者通过 23 端口执行任意代码\": \"https://mp.weixin.qq.com/s/_AbUh_jcUJIxKeIOGfNKqw\",\n \"WaterPlum 在 VSCode 供应链攻击中释放“StoatWaffle”恶意软件\": \"https://mp.weixin.qq.com/s/XN6oBrdLnXR6SmYq2VHVww\",\n \"【工信动态】夯基础、育动能 现代化产业体系加快构建\": \"https://mp.weixin.qq.com/s/blFStpvz99CMQOaEwRB4Rg\",\n \"【赛迪热点】2026赛迪论坛报名通道今日开启！\": \"https://mp.weixin.qq.com/s/Yw24jut2j4ZSOMZajrua1g\",\n \"美国网络安全和基础设施安全局 (CISA) 警告：微软 SharePoint 漏洞已被攻击者利用\": \"https://mp.weixin.qq.com/s/m2Sp7S3Zkkb1hyTo-yVMbg\",\n \"普华永道：金融机构AI投资回报已达10%-15%，大规模推广AI仍有困难\": \"https://mp.weixin.qq.com/s/FNh_H7g_M4C3qFjbptCDFA\",\n \"AI快讯：Meta AI智能体失控致数据裸奔，马化腾首谈腾讯“养虾”\": \"https://mp.weixin.qq.com/s/3sfUbd8jhheSGuhPfaznfQ\",\n \"预算250万，安硕信息204万最高价中！中行上海市分行风险管理智能化助手-大模型应用集成项目\": \"https://mp.weixin.qq.com/s/akicKdD_g5RSywAtulEe4Q\",\n \"【安全圈】iOS18 爆高危漏洞！不升危险，升级变卡\": \"https://mp.weixin.qq.com/s/SUK6JyTGy9WswTehEibpJw\",\n \"【安全圈】Aura 公司证实数据泄露，90 万营销联系人信息遭曝光\": \"https://mp.weixin.qq.com/s/xn4wCt3wKjxZOFRY6zn3uQ\",\n \"【安全圈】CVE-2026-3888：Ubuntu 桌面版 24.04+ 易受提权漏洞攻击\": \"https://mp.weixin.qq.com/s/7ynSFvfJvzkViHbjPd9pxA\",\n \"盒子助力 | 顺丰SRC第四届白帽技术沙龙直播预约，干货抽奖全都有！\": \"https://mp.weixin.qq.com/s/4J2fSwP37kWym8IEG1R42w\",\n \"跟着红队笔记打靶:KioptrixVM3\": \"https://mp.weixin.qq.com/s/2GDW7gbfSE5CUKpojPDNwg\",\n \"OpenClaw安全风险追根刨底：风险是随能力一同生成的\": \"https://mp.weixin.qq.com/s/Ac2IzVxvqsvrgIbizkd-hw\",\n \"OpenClaw爆火！CDG助力企业规范“龙虾”治理，守护数据安全\": \"https://mp.weixin.qq.com/s/FIX4f9eppX0ned5G7pzGaQ\",\n \"拒绝“玩具化”：企业级 AI Agent 走向生产环境，IT 架构需要跨越哪几道坎？\": \"https://mp.weixin.qq.com/s/cY95xWMaIucy4RLoicXNmA\",\n \"天唯招聘 | 职场牛人召集令，职等你来！\": \"https://mp.weixin.qq.com/s/k_HlIs3K_d5F54TR9vj4YA\",\n \"特朗普政府2026网络安全战略与影响解析\": \"https://mp.weixin.qq.com/s/9WOwWPnPlzIX9n0TpYLbog\",\n \"步骤详解：领取免费的ISC2培训课程及考试\": \"https://mp.weixin.qq.com/s/KXX_KCm6n96oM1VHTiuZMA\",\n \"黑客渗透测试之2FA绕过钓鱼神器：Evilginx2\": \"https://mp.weixin.qq.com/s/ayC_OW1EoZEiv9mbtbA7Mw\",\n \"联邦专家痛批微软云是“一坨屎”，结果转头就给过了：揭秘美国政府“安全演戏”内幕\": \"https://mp.weixin.qq.com/s/J8OtEGw3QHKsFM_8zLTzaw\",\n \"远程运维的“定时炸弹”：四家厂商的 IP KVM 被曝严重漏洞\": \"https://mp.weixin.qq.com/s/YfGcNBnrT3rUtYqHYuB-mg\",\n \"OpenClaw适用哪些企业场景？私有or公有？如何安全养“龙虾”？\": \"https://mp.weixin.qq.com/s/1oKDZhhCnObJ0BRSEJW4hA\",\n \"当AI成为“员工”，谁来管？亿格云战略升级，发布云枢AI统一治理平台\": \"https://mp.weixin.qq.com/s/U-v7f1qyvTjvfjy2tY8rxg\",\n \"免费赠送 | 青少年安全意识科普素材（第十九期）\": \"https://mp.weixin.qq.com/s/BsL1pcEjwSlPty_1wfSn6Q\",\n \"【Net_AISec_hunter】基于 Wails + cursor 红队自动化 .NET 白盒漏洞挖掘工具\": \"https://mp.weixin.qq.com/s/RcAaRQND2ixd6CtQl27g4A\",\n \"信安世纪BOMIS受益所有人信息系统安全互联加密方案，筑牢反洗钱安全防线\": \"https://mp.weixin.qq.com/s/Fm8Ts1O9KuUL4a4uksVtfw\",\n \"工业互联网安全专辑 | 捷普工控安全集中管理系统\": \"https://mp.weixin.qq.com/s/2NLZ_W7Hax40Qz4h2oWVGg\",\n \"工业互联网安全专辑 | 捷普工控日志收集与分析系统\": \"https://mp.weixin.qq.com/s/G4NBwJk-h5TJuIsWnJ7vVA\",\n \"网安原创文章推荐【2026/3/18】\": \"https://mp.weixin.qq.com/s/kiaaobVtB8BmfZyunYSfGQ\",\n \"内推 | 玄弋安全驻场安全运营岗火热招聘中\": \"https://mp.weixin.qq.com/s/WrWOFGxBHgGFZzobcOmwvg\"\n },\n \"Insinuator.net\": {\n \"Assessing Endpoint Protection: Our Approach to EDR/XDR and Supplements Evaluation\": \"https://insinuator.net/2026/03/assessing-endpoint-protection-our-approach-to-edr-xdr-and-supplements-evaluation/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"Escaping the Sandbox: How a Simple Python Path Flaw Led to Host RCE\": \"https://infosecwriteups.com/escaping-the-sandbox-how-a-simple-python-path-flaw-led-to-host-rce-817d39c95f86?source=rss----7b722bfd1b8d--bug_bounty\",\n \"My Complete Bug Bounty Hunting Workflow Every Command I Use, Step by Step\": \"https://infosecwriteups.com/my-complete-bug-bounty-hunting-workflow-every-command-i-use-step-by-step-68484276471f?source=rss----7b722bfd1b8d--bug_bounty\",\n \"When Old Breaches Meet New Code: Why Historical Leaks Still Matter\": \"https://infosecwriteups.com/when-old-breaches-meet-new-code-why-historical-leaks-still-matter-b4e6eb8ac607?source=rss----7b722bfd1b8d--bug_bounty\",\n \"I Found a Critical SSRF Vulnerability That Could Have Exposed an Entire Server Here’s How\": \"https://infosecwriteups.com/i-found-a-critical-ssrf-vulnerability-that-could-have-exposed-an-entire-server-heres-how-0a69c2ba2dee?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Horizon3.ai\": {\n \"Horizon3.ai’s NodeZero®, the World’s Most Experienced AI Hacker, Drives 102% ARR Growth\": \"https://horizon3.ai/news/press-release/horizon3-arr-growth-nodezero/\"\n },\n \"Inside Stormshield\": {\n \"Rencontre avec des professionnels de l’éducation\": \"https://stories.stormshield.com/rencontre-avec-des-professionnels-de-leducation/\"\n },\n \"Malware-Traffic-Analysis.net - Blog Entries\": {\n \"2026-03-17: Seven days of scans and probes and web traffic hitting my web server\": \"https://www.malware-traffic-analysis.net/2026/03/17/index.html\"\n },\n \"Malwarebytes\": {\n \"A DarkSword hangs over unpatched iPhones\": \"https://www.malwarebytes.com/blog/mobile/2026/03/a-darksword-hangs-over-unpatched-iphones\",\n \"Your tax forms sell for $20 on the dark web\": \"https://www.malwarebytes.com/blog/privacy/2026/03/your-tax-forms-sell-for-20-on-the-dark-web\"\n },\n \"Offensive Security Blog: Latest Trends in Hacking | Praetorian\": {\n \"CVE-2026-3630: Critical Buffer Overflow in Delta Electronics COMMGR2 Enables Remote Code Execution\": \"https://www.praetorian.com/blog/cve-2026-3630/\"\n },\n \"绿盟科技技术博客\": {\n \"对《互联网应用程序个人信息收集使用规定（征求意见稿）》的学习浅析\": \"https://blog.nsfocus.net/%e5%af%b9%e3%80%8a%e4%ba%92%e8%81%94%e7%bd%91%e5%ba%94%e7%94%a8%e7%a8%8b%e5%ba%8f%e4%b8%aa%e4%ba%ba%e4%bf%a1%e6%81%af%e6%94%b6%e9%9b%86%e4%bd%bf%e7%94%a8%e8%a7%84%e5%ae%9a%ef%bc%88%e5%be%81%e6%b1%82/\",\n \"RSAC 2026创新沙盒 | Humanix：面向人的社会工程攻击检测与响应\": \"https://blog.nsfocus.net/rsac-2026%e5%88%9b%e6%96%b0%e6%b2%99%e7%9b%92-humanix%ef%bc%9a%e9%9d%a2%e5%90%91%e4%ba%ba%e7%9a%84%e7%a4%be%e4%bc%9a%e5%b7%a5%e7%a8%8b%e6%94%bb%e5%87%bb%e6%a3%80%e6%b5%8b%e4%b8%8e%e5%93%8d%e5%ba%94/\",\n \"RSAC 2026创新沙盒 | Clearly AI：打造AI赋能的自动化软件安全平台\": \"https://blog.nsfocus.net/rsac-2026%e5%88%9b%e6%96%b0%e6%b2%99%e7%9b%92-clearly-ai%ef%bc%9a%e6%89%93%e9%80%a0ai%e8%b5%8b%e8%83%bd%e7%9a%84%e8%87%aa%e5%8a%a8%e5%8c%96%e8%bd%af%e4%bb%b6%e5%ae%89%e5%85%a8%e5%b9%b3%e5%8f%b0/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"新能源危机迫使政府重新考虑对化石燃料的依赖\": \"https://www.solidot.org/story?sid=83813\",\n \"内存条和传统 DIMM 插槽可能将消失\": \"https://www.solidot.org/story?sid=83812\",\n \"社媒使用降低个人幸福感\": \"https://www.solidot.org/story?sid=83811\",\n \"居家办公有助于提高生育率\": \"https://www.solidot.org/story?sid=83810\",\n \"Firefox v149 将内置 VPN\": \"https://www.solidot.org/story?sid=83809\",\n \"美国私人太空公司计划捕捉小行星\": \"https://www.solidot.org/story?sid=83808\",\n \"GNOME 50 释出\": \"https://www.solidot.org/story?sid=83807\",\n \"2026 年图灵奖授予了两位量子信息理论的奠基人\": \"https://www.solidot.org/story?sid=83806\",\n \"Meta 将于 6 月 15 日关闭 VR 社交网络 Horizo​​n Worlds\": \"https://www.solidot.org/story?sid=83805\"\n },\n \"黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台\": {\n \"TP-Link的中国创始人寻求获得特朗普金卡\": \"https://blog.upx8.com/TP-Link%E7%9A%84%E4%B8%AD%E5%9B%BD%E5%88%9B%E5%A7%8B%E4%BA%BA%E5%AF%BB%E6%B1%82%E8%8E%B7%E5%BE%97%E7%89%B9%E6%9C%97%E6%99%AE%E9%87%91%E5%8D%A1\"\n },\n \"腾讯玄武实验室\": {\n \"每日安全动态推送(26/3/19)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960404&idx=1&sn=74f50c909929cc66f80760454e887963\"\n },\n \"安全分析与研究\": {\n \"Windows Defender对抗——攻破Windows内置防线\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247496571&idx=1&sn=9bfa9b2a75c95d41896dfeaf3eb04421\"\n },\n \"黑鸟\": {\n \"通过攻陷合法网站传播的新型iOS漏洞利用工具包DarkSword\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451185849&idx=1&sn=90f390064e47068e7f7b5a5c0eef796c\"\n },\n \"威努特安全网络\": {\n \"古巴遭遇全国大停电！如何筑牢电力安全防线？\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651141036&idx=1&sn=f24d7875348303b12dbf24396e9d2692\"\n },\n \"代码卫士\": {\n \"Ubunntu 高危漏洞可导致攻击者获得根权限\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525508&idx=1&sn=2833d5727c1faf94104890b325bb6d75\",\n \"IP KVM 中存在9个严重漏洞，可用于获得未认证root访问权限\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525508&idx=2&sn=64b8a410384155e1fa92afa41950ba05\"\n },\n \"虎符智库\": {\n \"特朗普政府2026网络安全战略与影响解析\": \"https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493739&idx=1&sn=e8e67c9be6e5f5dc6f004c3016fb045e\"\n },\n \"看雪学苑\": {\n \"AI静态分析，内核模块隐藏 Frida 特征，绕过linker私有结构遍历崩溃链\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612335&idx=1&sn=ca23336eef45a4993cc6e5b191e62a61\",\n \"直播预约 | 顺丰SRC第四届白帽技术沙龙，干货抽奖全都有！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612335&idx=2&sn=e2a25d958fadaad92956a11de1977d7c\",\n \"Mac用户注意：新攻击借ChatGPT之名，诱你亲手“安装”恶意软件\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612335&idx=3&sn=25c139304f7633801d34a58d3f3b6b37\"\n },\n \"CT Stack 安全社区\": {\n \"MiniMax-M2.7 震撼发布：Monkey Code 首发免费提供，编程能力大幅提升！\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247500231&idx=1&sn=a6cf09424a6db6d970bf0b2c188139dc\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 阅读推荐 2026-03-19 蓝牙重配对攻击\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501518&idx=1&sn=f7ad7cb7ff6af741f33035bf24832a16\"\n },\n \"吾爱破解论坛\": {\n \"2026解题领红包基本完成(少MCP和Win高级, 但很有梗)\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143773&idx=1&sn=0dd95b85bffd6c929bb32e28fd8ee121\"\n },\n \"奇安信 CERT\": {\n \"今日（2026年3月19日）OpenClaw 最新安全动态总结\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504795&idx=1&sn=7a7b7010d2726c150fb8023cee90c11e\"\n },\n \"信息安全国家工程研究中心\": {\n \"今年政府工作报告中出现的“网络安全”元素\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247503212&idx=1&sn=83f75fbf6f65aa5bcff173cfd21b105a\"\n },\n \"安全学术圈\": {\n \"中国科学院信息工程研究所 | 基于大语言模型的API参数安全规则生成与API误用检测\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247495163&idx=1&sn=4cfc8079192ebcc8de2fd692a0d2c5b8\"\n },\n \"安全圈\": {\n \"【安全圈】iOS18 爆高危漏洞！不升危险，升级变卡\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074879&idx=1&sn=a99f5ab259944d0f68ee8f470256a869\",\n \"【安全圈】Aura 公司证实数据泄露，90 万营销联系人信息遭曝光\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074879&idx=2&sn=143311d48cdc9eb9cf658d5d5a45979d\",\n \"【安全圈】CVE-2026-3888：Ubuntu 桌面版 24.04+ 易受提权漏洞攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074879&idx=3&sn=f2683ea27641f32a563e177c417115b9\"\n },\n \"信安之路\": {\n \"挖洞前一定要看这个！\": \"https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500452&idx=1&sn=e1e5407fc1d3199252887e55cc7d0168\"\n },\n \"奇安信威胁情报中心\": {\n \"OpenClaw热潮之下，Lua窃密软件精心伪装乘虚而入\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518045&idx=1&sn=d4755b4c8717a7be0e9f295adc8aabe3\"\n },\n \"中国信息安全\": {\n \"专题·原创 | 以法治引领网络强国建设与产业高质量发展\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260437&idx=1&sn=eafd4bfb5d47574d99ba225eaec6e6b5\",\n \"国家安全部：揭秘“暗网”真面目！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260437&idx=2&sn=feab299538e9213541a526f5d098ebf6\",\n \"专家解读 | 建立数据产权制度的经济逻辑\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260437&idx=3&sn=4a6ad59a593fcae947343787a270159a\",\n \"行业 | 蚂蚁数科发布“龙虾卫士”，护航OpenClaw智能体安全落地\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260437&idx=4&sn=fc4c409a96a22ea81f6b11bfa5ab6cbe\",\n \"观点 | 进一步加强网络生态治理\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260437&idx=5&sn=9512370b83d5990af96d9db4657e6de1\"\n },\n \"天黑说嘿话\": {\n \"春节加餐：Anthropic首个公开的Skills构建指南来了！\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486030&idx=1&sn=222011b50677ccfbcd4efb6f52fa1e72\"\n },\n \"补天平台\": {\n \"上线通知 | 大家一直在等的京东卡来啦！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510427&idx=1&sn=cc73b66d8ef4294e639cc66b9c3bd5cb\"\n },\n \"青藤云安全\": {\n \"AI教科书级防御，化解一场真实攻击\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650851038&idx=1&sn=7b3e63664b310a65957347373d521fe2\"\n },\n \"数世咨询\": {\n \"运营定义价值：安全行业的范式变换\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542164&idx=1&sn=79e8a0f549299e26e8df81a24cf7a8fc\",\n \"RSAC 2026创新沙盒 | Clearly AI：打造AI赋能的自动化软件安全平台\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542164&idx=2&sn=8a038364563ffe361c2ca13cf4e65198\"\n },\n \"字节跳动安全中心\": {\n \"春日焕新｜全线业务加倍奖励、伯乐&新人礼&团队礼安排！\": \"https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496099&idx=1&sn=b67fd2d5fbfc7f617a1ccf55d1ac3c3c\"\n },\n \"中通安全应急响应中心\": {\n \"Q1收官战！2倍积分+累挖奖励，师傅冲就完了！\": \"https://mp.weixin.qq.com/s?__biz=MzUyMTcwNTY3Mg==&mid=2247486640&idx=1&sn=41693eb7337b7aa9513c666a181c81cf\"\n },\n \"安全牛\": {\n \"安全边界已消亡？AI+SaaS 时代下，数据安全规则迎来根本性重塑\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140772&idx=1&sn=2082eb176695ab8998f6977d2b1cbc8e\",\n \"北京启动“清朗京华·AI向善”专项行动 重点整治五类涉AI领域网络乱象；OpenAI 发布 GPT-5.4 mini/nano 小模型| 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140772&idx=2&sn=4249ac229892c810d55428810678f3dc\"\n },\n \"极客公园\": {\n \"改造 100 多年的影视行业，需要的不止是好模型\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653101660&idx=1&sn=ac6d90d1d3295083ec925e8a597dab75\",\n \"858 亿砸 AI，腾讯杀入「AI 战争」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653101647&idx=1&sn=fd7c9fe43b79686afae8db6e0276b6f7\",\n \"黄仁勋：OpenClaw 是人类史上最成功开源项目；苹果智能家居硬件负责人离职加入 Oura；日本 AI 模型被指套壳 Deepseek | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653101603&idx=1&sn=9fdc7fab4836f7346cefc5d4f83a58e9\"\n },\n \"火绒安全\": {\n \"抽奖啦 | 叮～你的放松福利已送达，速来参与！\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531500&idx=1&sn=7a95b94f30ff51e3f3103d194e512127\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531500&idx=2&sn=fa8e8075113a7acb8c01755ec1d5aae9\"\n },\n \"嘶吼专业版\": {\n \"2026职场AI观察：禁而不止的影子代理，正在埋下企业数据安全隐患\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587241&idx=1&sn=4f0fc6896ac8f25ecb52e8921498111c\",\n \"假招聘真投毒！Next.js面试题暗藏后门实施入侵\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587241&idx=2&sn=e5713c13b81cc2f21c338918846af0c3\",\n \"倒计时2天！《2026网络安全产业图谱》调研进入收尾阶段\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587241&idx=3&sn=d510ff76aba1e9fa210cf3668e0218b7\",\n \"嘶吼安全动态｜官方辟谣“七部门AI安全治理三年行动计划” 新型iPhone攻击工具“DarkSword”曝光\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587241&idx=4&sn=159b54c49a86908259b52b606aa887b5\"\n },\n \"阿里安全响应中心\": {\n \"直击阿里CTF2026：当AI成为“攻防新变量”，安全竞赛的底层逻辑正在重构\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998728&idx=1&sn=b83e26c74940e3bb39c2c4a68f3e1654\"\n },\n \"软件安全与逆向分析\": {\n \"拆解iOS应用逆向实战中的反调试与反篡改\": \"https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485071&idx=1&sn=ed0907e603198e77e3eca08dfce80a9a\"\n },\n \"复旦白泽战队\": {\n \"你的手机AI助手越“聪明”，隐私风险越大？主流厂商智能体测评（1）\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247498103&idx=1&sn=8e7a31d7ebd9b78822682b3a3615dbc5\"\n },\n \"斗象智能安全\": {\n \"企业级Vibe Coding安全中枢，斗象AISCC「安全中转网关」已就位！\": \"https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495312&idx=1&sn=82e44694fb57705e374bda5a4648bcd4\"\n },\n \"墨菲安全\": {\n \"墨菲安全正式发布AI原生企业安全治理平台SGP\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488335&idx=1&sn=3d29e55c5d25193a1f15e9f895cbfd00\"\n },\n \"ChaMd5安全团队\": {\n \"直播预约 | 顺丰SRC第四届白帽技术沙龙，干货抽奖全都有！\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247514226&idx=1&sn=f5622bcec7e137580b4b1f63c6187dc3\"\n },\n \"情报分析师\": {\n \"当摩萨德的特工坐在你对面时，他问的第一句话是什么？从美伊冲突看人力情报的科学与艺术\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567093&idx=1&sn=e2dd252c856a45802572f0ae27d1fdb0\"\n },\n \"美团技术团队\": {\n \"美团 BI 在指标平台和分析引擎上的探索和实践\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651782375&idx=1&sn=9fa8942b14abb27fb85b9fe2ca0ae957\"\n },\n \"TrustedSec\": {\n \"Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found\": \"https://trustedsec.com/blog/full-disclosure-a-third-and-fourth-azure-sign-in-log-bypass-found\"\n },\n \"迪哥讲事\": {\n \"xss绕过思路\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499190&idx=1&sn=e989bea221288b094d4e45e4df1205fd\"\n },\n \"bellingcat\": {\n \"How Wildlife Traffickers Are Using Coded Language to Sell Protected Animals On Facebook\": \"https://www.bellingcat.com/news/2026/03/19/how-wildlife-traffickers-are-using-coded-language-to-sell-protected-animals-on-facebook/\"\n },\n \"Securityinfo.it\": {\n \"La cybersecurity OT in Italia tra maturità limitata e pressioni normative\": \"https://www.securityinfo.it/2026/03/19/la-cybersecurity-ot-in-italia-tra-maturita-limitata-e-pressioni-normative/?utm_source=rss&utm_medium=rss&utm_campaign=la-cybersecurity-ot-in-italia-tra-maturita-limitata-e-pressioni-normative\"\n },\n \"ICT Security Magazine\": {\n \"Peter Thiel, Palantir e l’algoritmo dell’Apocalisse: quando l’Anticristo è nel codice\": \"https://www.ictsecuritymagazine.com/notizie/peter-thiel-palantir-codice/\",\n \"Perché i jammer nelle carceri sono inefficaci (e pericolosi)\": \"https://www.ictsecuritymagazine.com/articoli/jammer-nelle-carceri/\"\n },\n \"安全行者老霍\": {\n \"近期AI 安全相关公司介绍\": \"https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486153&idx=1&sn=8e7fd850b79a1bf87655da0f1cef9674\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"ISC Stormcast For Thursday, March 19th, 2026 https://isc.sans.edu/podcastdetail/9856, (Thu, Mar 19th)\": \"https://isc.sans.edu/diary/rss/32812\",\n \"Interesting Message Stored in Cowrie Logs, (Wed, Mar 18th)\": \"https://isc.sans.edu/diary/rss/32810\"\n },\n \"Future of Tech and Security: Strategy & Innovation with Raffy\": {\n \"SIEM Is Not Dead. It Just Stopped Moving Fast Enough.\": \"https://raffy.ch/blog/2026/03/19/siem-is-not-dead-it-just-stopped-moving-fast-enough/\"\n },\n \"IT Service Management News\": {\n \"Bozza di linee guida per il CRA\": \"http://blog.cesaregallotti.it/2026/03/bozza-di-linee-guida-per-il-cra.html\",\n \"Wiki AI Security del Clusit\": \"http://blog.cesaregallotti.it/2026/03/wiki-ai-security-del-clusit.html\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Navia discloses data breach impacting 2.7 million people\": \"https://www.bleepingcomputer.com/news/security/navia-discloses-data-breach-impacting-27-million-people/\",\n \"New ‘PolyShell’ flaw allows unauthenticated RCE on Magento e-stores\": \"https://www.bleepingcomputer.com/news/security/new-polyshell-flaw-allows-unauthenticated-rce-on-magento-e-stores/\",\n \"You have to invite them in\": \"https://blog.talosintelligence.com/you-have-to-invite-them-in/\",\n \"Iran-Aligned Militias Signal Expanded Regional Risk Amid US–Israel–Iran Conflict\": \"https://flashpoint.io/blog/iran-aligned-militias-regional-risk-us-israel-iran-conflict/\",\n \"DarkSword, l’exploit kit che ha violato gli iPhone di mezzo mondo per rubare dati riservati\": \"https://www.cybersecurity360.it/news/darksword-lexploit-kit-che-ha-violato-gli-iphone-di-mezzo-mondo-per-rubare-dati-riservati/\",\n \"US intel chiefs urge lawmakers to extend Section 702 surveillance power without changes\": \"https://therecord.media/us-intel-chiefs-urge-lawmakers-to-extend-section-702\",\n \"Bitrefill blames North Korean Lazarus group for cyberattack\": \"https://www.bleepingcomputer.com/news/security/bitrefill-blames-north-korean-lazarus-group-for-cyberattack/\",\n \"New Android malware hiding in streaming apps to spy on users’ personal notes\": \"https://therecord.media/malware-streaming-apps-android\",\n \"FBI seizes Handala data leak site after Stryker cyberattack\": \"https://www.bleepingcomputer.com/news/security/fbi-seizes-handala-data-leak-site-after-stryker-cyberattack/\",\n \"FBI seizes pro-Iranian hacking group’s websites after destructive Stryker hack\": \"https://techcrunch.com/2026/03/19/fbi-seizes-pro-iranian-hacking-groups-websites-after-destructive-stryker-hack/\",\n \"FBI, CISA warn on Microsoft Intune risks after Iran-linked cyberattack on Stryker\": \"https://therecord.media/fbi-cisa-warn-of-microsoft-intune-risks-stryker\",\n \"La cybersecurity OT in Italia tra maturità limitata e pressioni normative\": \"https://www.securityinfo.it/2026/03/19/la-cybersecurity-ot-in-italia-tra-maturita-limitata-e-pressioni-normative/\",\n \"White House pours cold water on cyber ‘letters of marque’ speculation\": \"https://therecord.media/offensive-cyber-white-house-hacking\",\n \"Russian hackers exploit Zimbra flaw in Ukrainian govt attacks\": \"https://www.bleepingcomputer.com/news/security/russian-apt28-military-hackers-exploit-zimbra-flaw-in-ukrainian-govt-attacks/\",\n \"Risolto bug Bluetooth di Windows 11: cosa insegna sulla sicurezza del wireless aziendale\": \"https://www.cybersecurity360.it/news/risolto-bug-bluetooth-di-windows-11-cosa-insegna-sulla-sicurezza-del-wireless-aziendale/\",\n \"Ransomware attack on UMMC: Medusa claims 1 TB of exfiltrated data as new details emerge\": \"https://www.suspectfile.com/ransomware-attack-on-ummc-medusa-claims-1-tb-of-exfiltrated-data-as-new-details-emerge/\",\n \"7 Ways to Prevent Privilege Escalation via Password Resets\": \"https://www.bleepingcomputer.com/news/security/7-ways-to-prevent-privilege-escalation-via-password-resets/\",\n \"Interlock ransomware gang exploited Cisco firewall zero-day weeks before disclosure: Amazon\": \"https://therecord.media/cisco-ransomware-interlock-firewalls\",\n \"Faraday bag, a cosa servono per la privacy e la sicurezza su smartphone (e a cosa no)\": \"https://www.cybersecurity360.it/cultura-cyber/faraday-bag-a-cosa-servono-per-la-privacy-su-smartphone-e-a-cosa-no/\",\n \"Ready for macOS Threats: Expanding Your SOC’s Cross-Platform Analysis with ANY.RUN\": \"https://any.run/cybersecurity-blog/anyrun-macos-sandbox/\",\n \"Max severity Ubiquiti UniFi flaw may allow account takeover\": \"https://www.bleepingcomputer.com/news/security/ubiquiti-warns-of-unifi-flaw-that-may-enable-account-takeover/\",\n \"Russian hackers exploit Zimbra flaw to breach Ukrainian maritime agency\": \"https://therecord.media/russia-hackers-ukraine-zimbra-breach\",\n \"Exploiting a PHP Object Injection in Profile Builder Pro in the era of AI\": \"https://blog.sicuranext.com/exploiting-a-php-object-injection-in-profile-builder-pro-in-the-era-of-ai/\",\n \"Apple Patches WebKit Vulnerability CVE-2026-20643 Across iOS, macOS\": \"https://thecyberexpress.com/webkit-vulnerability-fixed-in-apple-update/\",\n \"Interlock Ransomware Leveraged Cisco FMC Zero-Day 36 Days Before Patch, Amazon Reveals\": \"https://thecyberexpress.com/interlock-fmc-cve-2026-20131/\",\n \"CISA urges US orgs to secure Microsoft Intune systems after Stryker breach\": \"https://www.bleepingcomputer.com/news/security/cisa-warns-businesses-to-secure-microsoft-intune-systems-after-stryker-breach/\",\n \"Oltre la trasmissione sicura: acceleratori crittografici per proteggere i dati in uso\": \"https://www.cybersecurity360.it/soluzioni-aziendali/oltre-la-trasmissione-sicura-acceleratori-crittografici-per-proteggere-i-dati-in-uso/\",\n \"Inside Russia’s Shift to Credential-Based Intrusions: What CISOs Need to Know in 2026\": \"https://cyble.com/blog/russia-credential-based-intrusions-cisos/\",\n \"Critical Microsoft SharePoint flaw now exploited in attacks\": \"https://www.bleepingcomputer.com/news/microsoft/critical-microsoft-sharepoint-flaw-now-exploited-in-attacks/\",\n \"New ‘Perseus’ Android malware checks user notes for secrets\": \"https://www.bleepingcomputer.com/news/security/new-perseus-android-malware-checks-user-notes-for-secrets/\",\n \"China Sits at the Top of America’s Cyber Threat List\": \"https://thecyberexpress.com/china-top-cyber-threat-for-us/\",\n \"Everyday tools, extraordinary crimes: the ransomware exfiltration playbook\": \"https://blog.talosintelligence.com/everyday-tools-extraordinary-crimes-the-ransomware-exfiltration-playbook/\",\n \"Perseus: DTO malware that takes notes\": \"https://www.threatfabric.com/blogs/perseus-dto-malware-that-takes-notes\",\n \"LLM in guerra: il Pentagono aprirà alle aziende la possibilità di training AI con dati riservati\": \"https://www.cybersecurity360.it/cybersecurity-nazionale/llm-in-guerra-il-pentagono-aprira-alle-aziende-la-possibilita-di-traininig-dellai-con-dati-riservati/\",\n \"Multiple Threat Actors Exploiting a Six-Vulnerability iOS Exploit Kit Dubbed “DarkSword”\": \"https://thecyberexpress.com/ios-exploit-kit-dubbed-darksword/\",\n \"Hasta la vista, Hastalamuerte: An Overview of The Gentlemen’s TTPs\": \"https://www.group-ib.com/blog/hastalamuerte-gentlemen-raas-ttps/\",\n \"CISA Urges Endpoint Management Hardening After Stryker Cyberattack\": \"https://thecyberexpress.com/endpoint-management-systems-cisa/\",\n \"DarkSword: exploit chain iOS tra zero-day, spyware e cybercrime finanziario\": \"https://www.securityinfo.it/2026/03/18/darksword-exploit-chain-ios-tra-zero-day-spyware-e-cybercrime-finanziario/\"\n },\n \"Schneier on Security\": {\n \"Hacking a Robot Vacuum\": \"https://www.schneier.com/blog/archives/2026/03/hacking-a-robot-vacuum.html\"\n },\n \"Full Disclosure\": {\n \"snap-confine + systemd-tmpfiles = root (CVE-2026-3888)\": \"https://seclists.org/fulldisclosure/2026/Mar/11\",\n \"APPLE-SA-03-17-2026-1 Background Security Improvements for iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1, and macOS 26.3.2\": \"https://seclists.org/fulldisclosure/2026/Mar/10\",\n \"SEC Consult SA-20260318-0 :: Multiple Privilege Escalation Vulnerabilities in Arturia Software Center MacOS\": \"https://seclists.org/fulldisclosure/2026/Mar/9\",\n \"SEC Consult SA-20260317-0 :: Multiple vulnerabilities in PEGA Infinity platform\": \"https://seclists.org/fulldisclosure/2026/Mar/8\"\n },\n \"360数字安全\": {\n \"独家！OpenClaw之父确认漏洞，360为所有“养虾人”筑牢安全防线\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585474&idx=1&sn=53b14b545cacdccc7581fa98e01cf5e1\",\n \"360预警：Sorry勒索病毒集中开火，专挑中小型企业“偷家”\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585474&idx=2&sn=a20aa84529cb5bc8ec7c5ff305641d5f\"\n },\n \"The Hacker News\": {\n \"Speagle Malware Hijacks Cobra DocGuard to Steal Data via Compromised Servers\": \"https://thehackernews.com/2026/03/speagle-malware-hijacks-cobra-docguard.html\",\n \"54 EDR Killers Use BYOVD to Exploit 34 Signed Vulnerable Drivers and Disable Security\": \"https://thehackernews.com/2026/03/54-edr-killers-use-byovd-to-exploit-34.html\",\n \"ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More\": \"https://thehackernews.com/2026/03/threatsday-bulletin-fortigate-raas.html\",\n \"New Perseus Android Banking Malware Monitors Notes Apps to Extract Sensitive Data\": \"https://thehackernews.com/2026/03/new-perseus-android-banking-malware.html\",\n \"How Ceros Gives Security Teams Visibility and Control in Claude Code\": \"https://thehackernews.com/2026/03/how-ceros-gives-security-teams.html\",\n \"DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover\": \"https://thehackernews.com/2026/03/darksword-ios-exploit-kit-uses-6-flaws.html\",\n \"CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero-Day Hit in Ransomware Attacks\": \"https://thehackernews.com/2026/03/cisa-warns-of-zimbra-sharepoint-flaw.html\"\n },\n \"Security Affairs\": {\n \"Critical Ubiquiti UniFi UniFi security flaw allows potential account hijacking\": \"https://securityaffairs.com/189689/security/critical-ubiquiti-unifi-unifi-security-flaw-allows-potential-account-hijacking.html\",\n \"U.S. CISA adds a flaw in Cisco FMC and Cisco SCC Firewall Management to its Known Exploited Vulnerabilities catalog\": \"https://securityaffairs.com/189682/security/u-s-cisa-adds-a-flaw-in-cisco-fmc-and-cisco-scc-firewall-management-to-its-known-exploited-vulnerabilities-catalog.html\",\n \"Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025-66376\": \"https://securityaffairs.com/189673/security/russian-apt-targets-ukraine-via-zimbra-xss-flaw-cve-2025-66376.html\",\n \"DarkSword emerges as powerful iOS exploit tool in global attacks\": \"https://securityaffairs.com/189662/hacking/darksword-emerges-as-powerful-ios-exploit-tool-in-global-attacks.html\",\n \"Interlock group exploiting the CISCO FMC flaw CVE-2026-20131 36 days before disclosure\": \"https://securityaffairs.com/189636/malware/interlock-group-exploiting-the-cisco-fmc-flaw-cve-2026-20131-36-days-before-disclosure.html\",\n \"Russia establishes Vienna as key western spy hub targeting NATO\": \"https://securityaffairs.com/189653/intelligence/russia-establishes-vienna-as-key-western-spy-hub-targeting-nato.html\"\n },\n \"GRAHAM CLULEY\": {\n \"Smashing Security podcast #459: This clever scam nearly hijacked a tech CEO’s Apple ID\": \"https://grahamcluley.com/smashing-security-podcast-459/\"\n },\n \"DEFION Research Labs\": {\n \"Ruckus Unleashed: Multiple vulnerabilities exploited\": \"/en/research-labs/ruckus-unleashed-multiple-vulnerabilities-exploited\",\n \"Pwn2Own Automotive 2024: Hacking the Autel MaxiCharger\": \"/en/research-labs/pwn2own-automotive-2024-hacking-the-autel-maxicharger\",\n \"Pwn2Own Automotive 2024: Hacking the JuiceBox 40\": \"/en/research-labs/pwn2own-automotive-2024-hacking-the-juicebox-40\",\n \"Pwn2Own Automotive 2024: Hacking the ChargePoint Home Flex (and their cloud...)\": \"/en/research-labs/pwn2own-automotive-2024-hacking-the-chargepoint-home-flex-and-their-cloud\",\n \"DoNex/DarkRace Ransomware Decryptor\": \"/en/research-labs/donex-darkrace-ransomware-decryptor\",\n \"CVE-2024-20693: Windows cached code signature manipulation\": \"/en/research-labs/cve-2024-20693-windows-cached-code-signature-manipulation\",\n \"Bringing process injection into view(s): exploiting all macOS apps using nib files\": \"/en/research-labs/bringing-process-injection-into-view-s-exploiting-all-macos-apps-using-nib-files\",\n \"Don’t Talk All at Once! Elevating Privileges on macOS by Audit Token Spoofing\": \"/en/research-labs/don-t-talk-all-at-once-elevating-privileges-on-macos-by-audit-token-spoofing\",\n \"Getting SYSTEM on Windows in style\": \"/en/research-labs/getting-system-on-windows-in-style\",\n \"Technical analysis of the Genesis Market\": \"/en/research-labs/technical-analysis-of-the-genesis-market\",\n \"Bad things come in large packages: .pkg signature verification bypass on macOS\": \"/en/research-labs/bad-things-come-in-large-packages-pkg-signature-verification-bypass-on-macos\",\n \"Pwn2Own Miami 2022: ICONICS GENESIS64 Arbitrary Code Execution\": \"/en/research-labs/pwn2own-miami-2022-iconics-genesis64-arbitrary-code-execution\",\n \"Pwn2Own Miami 2022: Unified Automation C++ Demo Server DoS\": \"/en/research-labs/pwn2own-miami-2022-unified-automation-c-demo-server-dos\",\n \"Pwn2Own Miami 2022: AVEVA Edge Arbitrary Code Execution\": \"/en/research-labs/pwn2own-miami-2022-aveva-edge-arbitrary-code-execution\",\n \"Process injection: breaking all macOS security layers with a single vulnerability\": \"/en/research-labs/process-injection-breaking-all-macos-security-layers-with-a-single-vulnerability\",\n \"Pwn2Own Miami 2022: Inductive Automation Ignition Remote Code Execution\": \"/en/research-labs/pwn2own-miami-2022-inductive-automation-ignition-remote-code-execution\",\n \"Pwn2Own Miami 2022: OPC UA .NET Standard Trusted Application Check Bypass\": \"/en/research-labs/pwn2own-miami-2022-opc-ua-net-standard-trusted-application-check-bypass\",\n \"CoronaCheck App TLS certificate vulnerabilities\": \"/en/research-labs/coronacheck-app-tls-certificate-vulnerabilities\",\n \"Sandbox escape + privilege escalation in StorePrivilegedTaskService\": \"/en/research-labs/sandbox-escape-privilege-escalation-in-storeprivilegedtaskservice\",\n \"Proctorio Chrome extension Universal Cross-Site Scripting\": \"/en/research-labs/proctorio-chrome-extension-universal-cross-site-scripting\",\n \"Zoom RCE from Pwn2Own 2021\": \"/en/research-labs/zoom-rce-from-pwn2own-2021\",\n \"Adobe Acrobat privilege escalation\": \"/en/research-labs/adobe-acrobat-privilege-escalation\",\n \"iOS VPN support: 3 different bugs\": \"/en/research-labs/ios-vpn-support-3-different-bugs\",\n \"Sign in with Apple - authentication bypass\": \"/en/research-labs/sign-in-with-apple-authentication-bypass\",\n \"Jenkins - authentication bypass\": \"/en/research-labs/jenkins-authentication-bypass\",\n \"DNS rebinding for HTTPS\": \"/en/research-labs/dns-rebinding-for-https\",\n \"Spring Security - insufficient cryptographic randomness\": \"/en/research-labs/spring-security-insufficient-cryptographic-randomness\",\n \"XenServer - path traversal leading to authentication bypass\": \"/en/research-labs/xenserver-path-traversal-leading-to-authentication-bypass\",\n \"Volkswagen Auto Group MIB infotainment system - unauthenticated remote code execution as root\": \"/en/research-labs/volkswagen-auto-group-mib-infotainment-system-unauthenticated-remote-code-execution-as-root\",\n \"NAPALM - command execution on NAPLM controller from host\": \"/en/research-labs/napalm-command-execution-on-naplm-controller-from-host\",\n \"MySQL Connector/J - Unexpected deserialisation of Java objects\": \"/en/research-labs/mysql-connector-j-unexpected-deserialisation-of-java-objects\",\n \"Ansible - command execution on Ansible controller from host\": \"/en/research-labs/ansible-command-execution-on-ansible-controller-from-host\",\n \"Observium - unauthenticated remote code execution\": \"/en/research-labs/observium-unauthenticated-remote-code-execution\",\n \"cSRP/srpforjava - obtaining of hashed passwords\": \"/en/research-labs/csrp-srpforjava-obtaining-of-hashed-passwords\",\n \"StartEncrypt - obtaining valid SSL certificates for unauthorized domains\": \"/en/research-labs/startencrypt-obtaining-valid-ssl-certificates-for-unauthorized-domains\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Hacking IP KVMs & Reversing with Radare2 - Sergi Àlvarez - PSW #918\": \"http://sites.libsyn.com/18678/hacking-ip-kvms-reversing-with-radare2-sergi-lvarez-psw-918\"\n }\n}"}, "ba28d7a4bb041517b1af5f3e63799f6fcb063991": {"t": 1785772243.877921, "n": 42386, "h": "821bc7f9185c6c23", "c": "{\n \"安全客-有思想的安全新媒体\": {\n \"科技云报到：“龙虾”OpenClaw狂欢之下，需要一针清醒剂\": \"https://www.anquanke.com/post/id/315195\",\n \"瑞数信息入选IDC两大AI安全报告，防御OpenClaw小龙虾裸奔危机\": \"https://www.anquanke.com/post/id/315209\",\n \"2026首届汽车安全白帽黑客大会圆满收官，共筑车联网安全新生态\": \"https://www.anquanke.com/post/id/315197\"\n },\n \"Verne in GitHub\": {\n \"我 Vibe Coding 了一个日本看房神器：BukkenAI\": \"https://blog.einverne.info/post/2026/03/bukkenai-ai-powered-japan-real-estate-neighborhood-analysis.html\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2026-03-19 Review\": \"http://www.sec-wiki.com/?2026-03-19\"\n },\n \"obaby 𝐢‍𝐧⃝ void\": {\n \"🦞龙虾初体验\": \"https://zhongxiaojie.cn/2026/03/610/\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Thu Mar 19 11:10:26 UTC 2026\": \"https://github.com/trickest/cve/commit/914d1ac1fc9bad5883226b80f128773bb1b1837a\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"2026首届汽车安全白帽黑客大会圆满收官，共筑车联网安全新生态\": \"https://www.4hou.com/posts/VW8o\",\n \"2026职场AI观察：禁而不止的影子代理，正在埋下企业数据安全隐患\": \"https://www.4hou.com/posts/PG26\",\n \"嘶吼安全动态｜官方辟谣“七部门AI安全治理三年行动计划” 新型iPhone攻击工具“DarkSword”曝光\": \"https://www.4hou.com/posts/RX4w\",\n \"假招聘真投毒！ Next.js 面试题暗藏后门实施入侵\": \"https://www.4hou.com/posts/rpJW\",\n \"警惕！“养虾”邮件攻击｜一封邮件就让AI沦为黑客\": \"https://www.4hou.com/posts/QX35\"\n },\n \"Microsoft Security Blog\": {\n \"New tools and guidance: Announcing Zero Trust for AI\": \"https://www.microsoft.com/en-us/security/blog/2026/03/19/new-tools-and-guidance-announcing-zero-trust-for-ai/\",\n \"When tax season becomes cyberattack season: Phishing and malware campaigns using tax-related lures\": \"https://www.microsoft.com/en-us/security/blog/2026/03/19/when-tax-season-becomes-cyberattack-season-phishing-and-malware-campaigns-using-tax-related-lures/\"\n },\n \"Tenable Blog\": {\n \"Bolster your defenses and close the code-to-cloud gap with Tenable and OX\": \"https://www.tenable.com/blog/tenable-ox-cnapp-appsec-integration\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"Escaping the Sandbox: How a Simple Python Path Flaw Led to Host RCE\": \"https://infosecwriteups.com/escaping-the-sandbox-how-a-simple-python-path-flaw-led-to-host-rce-817d39c95f86?source=rss----7b722bfd1b8d---4\",\n \"My Complete Bug Bounty Hunting Workflow Every Command I Use, Step by Step\": \"https://infosecwriteups.com/my-complete-bug-bounty-hunting-workflow-every-command-i-use-step-by-step-68484276471f?source=rss----7b722bfd1b8d---4\",\n \"OffSec Proving Grounds — Potato\": \"https://infosecwriteups.com/offsec-proving-grounds-potato-b080d38b4bed?source=rss----7b722bfd1b8d---4\",\n \"WiFi Pentesting Series— Breaking WEP\": \"https://infosecwriteups.com/wifi-pentesting-series-breaking-wep-dd1597db2e5e?source=rss----7b722bfd1b8d---4\",\n \"When Old Breaches Meet New Code: Why Historical Leaks Still Matter\": \"https://infosecwriteups.com/when-old-breaches-meet-new-code-why-historical-leaks-still-matter-b4e6eb8ac607?source=rss----7b722bfd1b8d---4\",\n \"Proving Grounds — Practice — XposedAPI\": \"https://infosecwriteups.com/proving-grounds-practice-xposedapi-770d48008e3a?source=rss----7b722bfd1b8d---4\",\n \"I Found a Critical SSRF Vulnerability That Could Have Exposed an Entire Server Here’s How\": \"https://infosecwriteups.com/i-found-a-critical-ssrf-vulnerability-that-could-have-exposed-an-entire-server-heres-how-0a69c2ba2dee?source=rss----7b722bfd1b8d---4\",\n \"Blog TryHackMe Box Writeup\": \"https://infosecwriteups.com/blog-tryhackme-box-writeup-55b5abe7e28d?source=rss----7b722bfd1b8d---4\"\n },\n \"Doonsec's feed\": {\n \"哥你搞了AI之后越来越忙了\": \"https://mp.weixin.qq.com/s/5AekB7yyc3lnbRsslccBxQ\",\n \"攻击路径(11)：堡垒机还是别放互联网了\": \"https://mp.weixin.qq.com/s/36vudabGRIY07Rf6-eYXWw\",\n \"内网网络审计工具箱（大牛蛙版）\": \"https://mp.weixin.qq.com/s/t9cQvfSBRXTBfo3RGt8h8w\",\n \"H6-5-逆向工程（Ghidra）关于从零开始掌握Ghidra逆向自学篇\": \"https://mp.weixin.qq.com/s/E5SRwA1mLt1s03bY50XzHA\",\n \"H6-4-逆向工程（Ghidra）知识星球关于进阶黑客技能需要长期维护的基础部分今日闭环。并对外开放！\": \"https://mp.weixin.qq.com/s/phUMIgaWUoONWf7G9ZRQNw\",\n \"据传字母站裁员30%\": \"https://mp.weixin.qq.com/s/Xx66YWb4DlisptcIMjIjMg\",\n \"RSAC 2026创新沙盒 | Token Security：机器优先身份安全理念的倡导者\": \"https://mp.weixin.qq.com/s/nEy16eNSFJ1Xh1tOGU_AAw\",\n \"沙箱检测与绕过：反调试、虚拟机检测与父进程伪造实战\": \"https://mp.weixin.qq.com/s/S2pqJ_09tgFiMYS-J1U8OQ\",\n \"通过互联网大善人Cloudflare挂载你的恶意载荷\": \"https://mp.weixin.qq.com/s/z-rd4S0K8CbPd9EhyeoNbA\",\n \"Upload Labs 第10关：点空格点绕过文件上传限制\": \"https://mp.weixin.qq.com/s/fUq5uTDSyF1l3h2IW-B7fw\",\n \"xx信-CTF面试题\": \"https://mp.weixin.qq.com/s/2ODQTXobX4xD05Wsfsb_2g\",\n \"利用QR技术隐写shellcode\": \"https://mp.weixin.qq.com/s/2oXJSocJ8U5G-scJrRWZdg\",\n \"利用TG收集网页钓鱼信息\": \"https://mp.weixin.qq.com/s/nIIJq464YlRndqsrSIdnpg\",\n \"论文研读与思考|DPMRS:基于字典分区的高效精准多关键词排序搜索方案在云计算中的应用\": \"https://mp.weixin.qq.com/s/nP29OEMxww8_cWNf8fda8w\",\n \"Windows RCE漏洞EXP - CVE-2025-29969\": \"https://mp.weixin.qq.com/s/xfPLqb_R5_9Xs24QNDWILw\",\n \"只讲干货 | 中国网络安全行业全景深度剖析\": \"https://mp.weixin.qq.com/s/XVgwR105ntNlFLwMqIQIZg\",\n \"安全运营 Agent 的演进：从规则告警到 AI 自动研判\": \"https://mp.weixin.qq.com/s/Pp-tC87LCQFPKuUwTW1SLQ\",\n \"震惊！多模态大模型存在“反射弧超长”死穴\": \"https://mp.weixin.qq.com/s/gXvJ0tz9CtBo71bEd0dxTg\",\n \"G.O.S.S.I.P 阅读推荐 2026-03-19 蓝牙重配对攻击\": \"https://mp.weixin.qq.com/s/EcT4lvE2Oq5o57NM4TuAsA\",\n \"红队打点利器：太极内网渗透工具(资产梳理与密码喷洒)\": \"https://mp.weixin.qq.com/s/SeKMoJ6vvHZUSsRuI6wfNQ\",\n \"站在巨人的JB上之VMP初窥\": \"https://mp.weixin.qq.com/s/CzUM8MwatjFWjaKbQONzDw\",\n \"AI武器化、零点击攻击与8亿美金大劫案（近期大瓜汇总）\": \"https://mp.weixin.qq.com/s/5oTKeQ9jgMHMoDFnRM_6gA\",\n \"SQLMap加强版Tamper脚本集合\": \"https://mp.weixin.qq.com/s/wZShGLWpbmMc9QBDJea8qQ\",\n \"挖了半年SRC颗粒无收\": \"https://mp.weixin.qq.com/s/o5ps2-VGcNwCJvfABxOsdg\",\n \"威胁情报日报 2026-03-19\": \"https://mp.weixin.qq.com/s/A2pzVdbCMKqo0RwZfG-KUg\",\n \"2026年全球事件响应报告总结\": \"https://mp.weixin.qq.com/s/ZG7S1iGhPZH3cXohJveItw\",\n \"她，95后，小米MiMo掌舵人，北大才女带队干翻全球AI巨头\": \"https://mp.weixin.qq.com/s/Y9wfpjMTvDWWXv8ltYlOcw\",\n \"Windows | 利用Lua加载StealC v2窃密攻击活动分析\": \"https://mp.weixin.qq.com/s/sKHq_epYhO2UDeX4f4wpXA\",\n \"拆解iOS应用逆向实战中的反调试与反篡改\": \"https://mp.weixin.qq.com/s/H3qSYgdR7TN-S8mvIW8Smg\",\n \"WgpSec助力顺丰SRC第四届白帽技术沙龙，干货抽奖全都有！\": \"https://mp.weixin.qq.com/s/YetQLXeaoKDR9C_kAyZGbw\",\n \"【资讯】吉林省政数局印发《吉林省公共数据资源登记管理实施细则（试行）》\": \"https://mp.weixin.qq.com/s/dPR4O2u8gAUxr73dpvD9XQ\",\n \"【资讯】东莞市政数局印发《东莞市关于深化“一网通办2.0”建设 加快数智赋能政务服务效能提升的工作方案》\": \"https://mp.weixin.qq.com/s/5TKCO5qmb6xsRhuS9lNAsg\",\n \"有没有比JavaScript更好的编程语言？\": \"https://mp.weixin.qq.com/s/uAptJyukionl_EPDwWqVAw\",\n \"江苏徐州邳州的梁龙涛，说白了还是太有实力\": \"https://mp.weixin.qq.com/s/_710n8WHj9LeLQWuUdI2vA\",\n \"Vitalik：安全 = 意图对齐\": \"https://mp.weixin.qq.com/s/irdAZe2HMhRFKnmOA73KYw\",\n \"快手编译优化实践：C++编译优化助力业务性能平均提升10%，Propeller优化方案合入LLVM社区\": \"https://mp.weixin.qq.com/s/nyk6vNp59UWM_j5haV_Zug\",\n \"“鸿蒙系统”遇上“原生安全”：看奇安信天擎如何构筑国产PC可信底座\": \"https://mp.weixin.qq.com/s/a2DY1a0QQAM9xKFOgdxNFQ\",\n \"2026“天枢杯”青少年人工智能安全创新大赛——北京东城区专题培训会成功举办\": \"https://mp.weixin.qq.com/s/co7KLCZOb7Y4E1nQRb6B7Q\",\n \"AI串联漏洞攻陷招聘平台，伪装特朗普索要数据权限\": \"https://mp.weixin.qq.com/s/WPmHCoDfS-cPTRrP-6gnZQ\",\n \"【先进安服分享】安全服务转型：从割裂到飞轮\": \"https://mp.weixin.qq.com/s/1weNLtCl9LoS1ATjGVUmUQ\",\n \"首届 PolarisCTF 招新赛正式启幕\": \"https://mp.weixin.qq.com/s/8bMTTJ6qdO5oeLDmiHX7FQ\",\n \"情报速递 | 黑客在暗网论坛曝光知名网安公司Knownsec数百兆内部文件\": \"https://mp.weixin.qq.com/s/e26tuPgdNSo46DPtN1fm1A\",\n \"CVE-2026-2441：Chrome CSSFontFeatureValuesMap 释放后重用漏洞解析\": \"https://mp.weixin.qq.com/s/MWInOqfmcoFngNO9YRbAxg\",\n \"“网络洲际导弹”泄露！数亿台iPhone可被静默入侵窃取所有数据\": \"https://mp.weixin.qq.com/s/k31UFAznVBRJrx48GlAa1g\",\n \"创建OpenClaw“龙虾教师”技能辅导小学生\": \"https://mp.weixin.qq.com/s/7Qwbvru0-En_kqlL9mtV5A\",\n \"EasyClaw 作为国内首款“零配置、高隐私、全平台”的OpenClaw龙虾AI桌面助手，全栈AI Agent、全场景私人助理\": \"https://mp.weixin.qq.com/s/kW1CUQIE2fYuJRoY5PB_UA\",\n \"国家安全部发文！暗网为何被称为“罪恶的深渊”\": \"https://mp.weixin.qq.com/s/sL1E6PjgC_avch3pShvPxg\",\n \"Apple WebKit 漏洞使恶意网页内容可在 iOS 和 macOS 上绕过安全机制\": \"https://mp.weixin.qq.com/s/BH45coP-O-dw1zl85ZHSjA\",\n \"严重的 Telnetd 漏洞允许远程攻击者通过 23 端口执行任意代码\": \"https://mp.weixin.qq.com/s/_AbUh_jcUJIxKeIOGfNKqw\",\n \"WaterPlum 在 VSCode 供应链攻击中释放“StoatWaffle”恶意软件\": \"https://mp.weixin.qq.com/s/XN6oBrdLnXR6SmYq2VHVww\",\n \"【工信动态】夯基础、育动能 现代化产业体系加快构建\": \"https://mp.weixin.qq.com/s/blFStpvz99CMQOaEwRB4Rg\",\n \"【赛迪热点】2026赛迪论坛报名通道今日开启！\": \"https://mp.weixin.qq.com/s/Yw24jut2j4ZSOMZajrua1g\",\n \"美国网络安全和基础设施安全局 (CISA) 警告：微软 SharePoint 漏洞已被攻击者利用\": \"https://mp.weixin.qq.com/s/m2Sp7S3Zkkb1hyTo-yVMbg\",\n \"普华永道：金融机构AI投资回报已达10%-15%，大规模推广AI仍有困难\": \"https://mp.weixin.qq.com/s/FNh_H7g_M4C3qFjbptCDFA\",\n \"AI快讯：Meta AI智能体失控致数据裸奔，马化腾首谈腾讯“养虾”\": \"https://mp.weixin.qq.com/s/3sfUbd8jhheSGuhPfaznfQ\",\n \"预算250万，安硕信息204万最高价中！中行上海市分行风险管理智能化助手-大模型应用集成项目\": \"https://mp.weixin.qq.com/s/akicKdD_g5RSywAtulEe4Q\",\n \"【安全圈】iOS18 爆高危漏洞！不升危险，升级变卡\": \"https://mp.weixin.qq.com/s/SUK6JyTGy9WswTehEibpJw\",\n \"【安全圈】Aura 公司证实数据泄露，90 万营销联系人信息遭曝光\": \"https://mp.weixin.qq.com/s/xn4wCt3wKjxZOFRY6zn3uQ\",\n \"【安全圈】CVE-2026-3888：Ubuntu 桌面版 24.04+ 易受提权漏洞攻击\": \"https://mp.weixin.qq.com/s/7ynSFvfJvzkViHbjPd9pxA\",\n \"盒子助力 | 顺丰SRC第四届白帽技术沙龙直播预约，干货抽奖全都有！\": \"https://mp.weixin.qq.com/s/4J2fSwP37kWym8IEG1R42w\",\n \"跟着红队笔记打靶:KioptrixVM3\": \"https://mp.weixin.qq.com/s/2GDW7gbfSE5CUKpojPDNwg\",\n \"OpenClaw安全风险追根刨底：风险是随能力一同生成的\": \"https://mp.weixin.qq.com/s/Ac2IzVxvqsvrgIbizkd-hw\",\n \"OpenClaw爆火！CDG助力企业规范“龙虾”治理，守护数据安全\": \"https://mp.weixin.qq.com/s/FIX4f9eppX0ned5G7pzGaQ\",\n \"拒绝“玩具化”：企业级 AI Agent 走向生产环境，IT 架构需要跨越哪几道坎？\": \"https://mp.weixin.qq.com/s/cY95xWMaIucy4RLoicXNmA\",\n \"天唯招聘 | 职场牛人召集令，职等你来！\": \"https://mp.weixin.qq.com/s/k_HlIs3K_d5F54TR9vj4YA\",\n \"特朗普政府2026网络安全战略与影响解析\": \"https://mp.weixin.qq.com/s/9WOwWPnPlzIX9n0TpYLbog\",\n \"步骤详解：领取免费的ISC2培训课程及考试\": \"https://mp.weixin.qq.com/s/KXX_KCm6n96oM1VHTiuZMA\",\n \"黑客渗透测试之2FA绕过钓鱼神器：Evilginx2\": \"https://mp.weixin.qq.com/s/ayC_OW1EoZEiv9mbtbA7Mw\",\n \"联邦专家痛批微软云是“一坨屎”，结果转头就给过了：揭秘美国政府“安全演戏”内幕\": \"https://mp.weixin.qq.com/s/J8OtEGw3QHKsFM_8zLTzaw\",\n \"远程运维的“定时炸弹”：四家厂商的 IP KVM 被曝严重漏洞\": \"https://mp.weixin.qq.com/s/YfGcNBnrT3rUtYqHYuB-mg\",\n \"OpenClaw适用哪些企业场景？私有or公有？如何安全养“龙虾”？\": \"https://mp.weixin.qq.com/s/1oKDZhhCnObJ0BRSEJW4hA\",\n \"当AI成为“员工”，谁来管？亿格云战略升级，发布云枢AI统一治理平台\": \"https://mp.weixin.qq.com/s/U-v7f1qyvTjvfjy2tY8rxg\",\n \"免费赠送 | 青少年安全意识科普素材（第十九期）\": \"https://mp.weixin.qq.com/s/BsL1pcEjwSlPty_1wfSn6Q\",\n \"【Net_AISec_hunter】基于 Wails + cursor 红队自动化 .NET 白盒漏洞挖掘工具\": \"https://mp.weixin.qq.com/s/RcAaRQND2ixd6CtQl27g4A\",\n \"信安世纪BOMIS受益所有人信息系统安全互联加密方案，筑牢反洗钱安全防线\": \"https://mp.weixin.qq.com/s/Fm8Ts1O9KuUL4a4uksVtfw\",\n \"工业互联网安全专辑 | 捷普工控安全集中管理系统\": \"https://mp.weixin.qq.com/s/2NLZ_W7Hax40Qz4h2oWVGg\",\n \"工业互联网安全专辑 | 捷普工控日志收集与分析系统\": \"https://mp.weixin.qq.com/s/G4NBwJk-h5TJuIsWnJ7vVA\",\n \"网安原创文章推荐【2026/3/18】\": \"https://mp.weixin.qq.com/s/kiaaobVtB8BmfZyunYSfGQ\",\n \"内推 | 玄弋安全驻场安全运营岗火热招聘中\": \"https://mp.weixin.qq.com/s/WrWOFGxBHgGFZzobcOmwvg\"\n },\n \"Insinuator.net\": {\n \"Assessing Endpoint Protection: Our Approach to EDR/XDR and Supplements Evaluation\": \"https://insinuator.net/2026/03/assessing-endpoint-protection-our-approach-to-edr-xdr-and-supplements-evaluation/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"Escaping the Sandbox: How a Simple Python Path Flaw Led to Host RCE\": \"https://infosecwriteups.com/escaping-the-sandbox-how-a-simple-python-path-flaw-led-to-host-rce-817d39c95f86?source=rss----7b722bfd1b8d--bug_bounty\",\n \"My Complete Bug Bounty Hunting Workflow Every Command I Use, Step by Step\": \"https://infosecwriteups.com/my-complete-bug-bounty-hunting-workflow-every-command-i-use-step-by-step-68484276471f?source=rss----7b722bfd1b8d--bug_bounty\",\n \"When Old Breaches Meet New Code: Why Historical Leaks Still Matter\": \"https://infosecwriteups.com/when-old-breaches-meet-new-code-why-historical-leaks-still-matter-b4e6eb8ac607?source=rss----7b722bfd1b8d--bug_bounty\",\n \"I Found a Critical SSRF Vulnerability That Could Have Exposed an Entire Server Here’s How\": \"https://infosecwriteups.com/i-found-a-critical-ssrf-vulnerability-that-could-have-exposed-an-entire-server-heres-how-0a69c2ba2dee?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Horizon3.ai\": {\n \"Horizon3.ai’s NodeZero®, the World’s Most Experienced AI Hacker, Drives 102% ARR Growth\": \"https://horizon3.ai/news/press-release/horizon3-arr-growth-nodezero/\"\n },\n \"Inside Stormshield\": {\n \"Rencontre avec des professionnels de l’éducation\": \"https://stories.stormshield.com/rencontre-avec-des-professionnels-de-leducation/\"\n },\n \"Malware-Traffic-Analysis.net - Blog Entries\": {\n \"2026-03-17: Seven days of scans and probes and web traffic hitting my web server\": \"https://www.malware-traffic-analysis.net/2026/03/17/index.html\"\n },\n \"Malwarebytes\": {\n \"A DarkSword hangs over unpatched iPhones\": \"https://www.malwarebytes.com/blog/mobile/2026/03/a-darksword-hangs-over-unpatched-iphones\",\n \"Your tax forms sell for $20 on the dark web\": \"https://www.malwarebytes.com/blog/privacy/2026/03/your-tax-forms-sell-for-20-on-the-dark-web\"\n },\n \"Offensive Security Blog: Latest Trends in Hacking | Praetorian\": {\n \"CVE-2026-3630: Critical Buffer Overflow in Delta Electronics COMMGR2 Enables Remote Code Execution\": \"https://www.praetorian.com/blog/cve-2026-3630/\"\n },\n \"绿盟科技技术博客\": {\n \"对《互联网应用程序个人信息收集使用规定（征求意见稿）》的学习浅析\": \"https://blog.nsfocus.net/%e5%af%b9%e3%80%8a%e4%ba%92%e8%81%94%e7%bd%91%e5%ba%94%e7%94%a8%e7%a8%8b%e5%ba%8f%e4%b8%aa%e4%ba%ba%e4%bf%a1%e6%81%af%e6%94%b6%e9%9b%86%e4%bd%bf%e7%94%a8%e8%a7%84%e5%ae%9a%ef%bc%88%e5%be%81%e6%b1%82/\",\n \"RSAC 2026创新沙盒 | Humanix：面向人的社会工程攻击检测与响应\": \"https://blog.nsfocus.net/rsac-2026%e5%88%9b%e6%96%b0%e6%b2%99%e7%9b%92-humanix%ef%bc%9a%e9%9d%a2%e5%90%91%e4%ba%ba%e7%9a%84%e7%a4%be%e4%bc%9a%e5%b7%a5%e7%a8%8b%e6%94%bb%e5%87%bb%e6%a3%80%e6%b5%8b%e4%b8%8e%e5%93%8d%e5%ba%94/\",\n \"RSAC 2026创新沙盒 | Clearly AI：打造AI赋能的自动化软件安全平台\": \"https://blog.nsfocus.net/rsac-2026%e5%88%9b%e6%96%b0%e6%b2%99%e7%9b%92-clearly-ai%ef%bc%9a%e6%89%93%e9%80%a0ai%e8%b5%8b%e8%83%bd%e7%9a%84%e8%87%aa%e5%8a%a8%e5%8c%96%e8%bd%af%e4%bb%b6%e5%ae%89%e5%85%a8%e5%b9%b3%e5%8f%b0/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"新能源危机迫使政府重新考虑对化石燃料的依赖\": \"https://www.solidot.org/story?sid=83813\",\n \"内存条和传统 DIMM 插槽可能将消失\": \"https://www.solidot.org/story?sid=83812\",\n \"社媒使用降低个人幸福感\": \"https://www.solidot.org/story?sid=83811\",\n \"居家办公有助于提高生育率\": \"https://www.solidot.org/story?sid=83810\",\n \"Firefox v149 将内置 VPN\": \"https://www.solidot.org/story?sid=83809\",\n \"美国私人太空公司计划捕捉小行星\": \"https://www.solidot.org/story?sid=83808\",\n \"GNOME 50 释出\": \"https://www.solidot.org/story?sid=83807\",\n \"2026 年图灵奖授予了两位量子信息理论的奠基人\": \"https://www.solidot.org/story?sid=83806\",\n \"Meta 将于 6 月 15 日关闭 VR 社交网络 Horizo​​n Worlds\": \"https://www.solidot.org/story?sid=83805\"\n },\n \"黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台\": {\n \"TP-Link的中国创始人寻求获得特朗普金卡\": \"https://blog.upx8.com/TP-Link%E7%9A%84%E4%B8%AD%E5%9B%BD%E5%88%9B%E5%A7%8B%E4%BA%BA%E5%AF%BB%E6%B1%82%E8%8E%B7%E5%BE%97%E7%89%B9%E6%9C%97%E6%99%AE%E9%87%91%E5%8D%A1\"\n },\n \"腾讯玄武实验室\": {\n \"每日安全动态推送(26/3/19)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960404&idx=1&sn=74f50c909929cc66f80760454e887963\"\n },\n \"安全分析与研究\": {\n \"Windows Defender对抗——攻破Windows内置防线\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247496571&idx=1&sn=9bfa9b2a75c95d41896dfeaf3eb04421\"\n },\n \"黑鸟\": {\n \"通过攻陷合法网站传播的新型iOS漏洞利用工具包DarkSword\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451185849&idx=1&sn=90f390064e47068e7f7b5a5c0eef796c\"\n },\n \"威努特安全网络\": {\n \"古巴遭遇全国大停电！如何筑牢电力安全防线？\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651141036&idx=1&sn=f24d7875348303b12dbf24396e9d2692\"\n },\n \"代码卫士\": {\n \"Ubunntu 高危漏洞可导致攻击者获得根权限\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525508&idx=1&sn=2833d5727c1faf94104890b325bb6d75\",\n \"IP KVM 中存在9个严重漏洞，可用于获得未认证root访问权限\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525508&idx=2&sn=64b8a410384155e1fa92afa41950ba05\"\n },\n \"虎符智库\": {\n \"特朗普政府2026网络安全战略与影响解析\": \"https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493739&idx=1&sn=e8e67c9be6e5f5dc6f004c3016fb045e\"\n },\n \"看雪学苑\": {\n \"AI静态分析，内核模块隐藏 Frida 特征，绕过linker私有结构遍历崩溃链\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612335&idx=1&sn=ca23336eef45a4993cc6e5b191e62a61\",\n \"直播预约 | 顺丰SRC第四届白帽技术沙龙，干货抽奖全都有！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612335&idx=2&sn=e2a25d958fadaad92956a11de1977d7c\",\n \"Mac用户注意：新攻击借ChatGPT之名，诱你亲手“安装”恶意软件\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612335&idx=3&sn=25c139304f7633801d34a58d3f3b6b37\"\n },\n \"CT Stack 安全社区\": {\n \"MiniMax-M2.7 震撼发布：Monkey Code 首发免费提供，编程能力大幅提升！\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247500231&idx=1&sn=a6cf09424a6db6d970bf0b2c188139dc\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 阅读推荐 2026-03-19 蓝牙重配对攻击\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501518&idx=1&sn=f7ad7cb7ff6af741f33035bf24832a16\"\n },\n \"吾爱破解论坛\": {\n \"2026解题领红包基本完成(少MCP和Win高级, 但很有梗)\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143773&idx=1&sn=0dd95b85bffd6c929bb32e28fd8ee121\"\n },\n \"奇安信 CERT\": {\n \"今日（2026年3月19日）OpenClaw 最新安全动态总结\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504795&idx=1&sn=7a7b7010d2726c150fb8023cee90c11e\"\n },\n \"信息安全国家工程研究中心\": {\n \"今年政府工作报告中出现的“网络安全”元素\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247503212&idx=1&sn=83f75fbf6f65aa5bcff173cfd21b105a\"\n },\n \"安全学术圈\": {\n \"中国科学院信息工程研究所 | 基于大语言模型的API参数安全规则生成与API误用检测\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247495163&idx=1&sn=4cfc8079192ebcc8de2fd692a0d2c5b8\"\n },\n \"安全圈\": {\n \"【安全圈】iOS18 爆高危漏洞！不升危险，升级变卡\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074879&idx=1&sn=a99f5ab259944d0f68ee8f470256a869\",\n \"【安全圈】Aura 公司证实数据泄露，90 万营销联系人信息遭曝光\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074879&idx=2&sn=143311d48cdc9eb9cf658d5d5a45979d\",\n \"【安全圈】CVE-2026-3888：Ubuntu 桌面版 24.04+ 易受提权漏洞攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074879&idx=3&sn=f2683ea27641f32a563e177c417115b9\"\n },\n \"信安之路\": {\n \"挖洞前一定要看这个！\": \"https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500452&idx=1&sn=e1e5407fc1d3199252887e55cc7d0168\"\n },\n \"奇安信威胁情报中心\": {\n \"OpenClaw热潮之下，Lua窃密软件精心伪装乘虚而入\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518045&idx=1&sn=d4755b4c8717a7be0e9f295adc8aabe3\"\n },\n \"中国信息安全\": {\n \"专题·原创 | 以法治引领网络强国建设与产业高质量发展\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260437&idx=1&sn=eafd4bfb5d47574d99ba225eaec6e6b5\",\n \"国家安全部：揭秘“暗网”真面目！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260437&idx=2&sn=feab299538e9213541a526f5d098ebf6\",\n \"专家解读 | 建立数据产权制度的经济逻辑\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260437&idx=3&sn=4a6ad59a593fcae947343787a270159a\",\n \"行业 | 蚂蚁数科发布“龙虾卫士”，护航OpenClaw智能体安全落地\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260437&idx=4&sn=fc4c409a96a22ea81f6b11bfa5ab6cbe\",\n \"观点 | 进一步加强网络生态治理\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260437&idx=5&sn=9512370b83d5990af96d9db4657e6de1\"\n },\n \"天黑说嘿话\": {\n \"春节加餐：Anthropic首个公开的Skills构建指南来了！\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486030&idx=1&sn=222011b50677ccfbcd4efb6f52fa1e72\"\n },\n \"补天平台\": {\n \"上线通知 | 大家一直在等的京东卡来啦！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510427&idx=1&sn=cc73b66d8ef4294e639cc66b9c3bd5cb\"\n },\n \"青藤云安全\": {\n \"AI教科书级防御，化解一场真实攻击\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650851038&idx=1&sn=7b3e63664b310a65957347373d521fe2\"\n },\n \"数世咨询\": {\n \"运营定义价值：安全行业的范式变换\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542164&idx=1&sn=79e8a0f549299e26e8df81a24cf7a8fc\",\n \"RSAC 2026创新沙盒 | Clearly AI：打造AI赋能的自动化软件安全平台\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542164&idx=2&sn=8a038364563ffe361c2ca13cf4e65198\"\n },\n \"字节跳动安全中心\": {\n \"春日焕新｜全线业务加倍奖励、伯乐&新人礼&团队礼安排！\": \"https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496099&idx=1&sn=b67fd2d5fbfc7f617a1ccf55d1ac3c3c\"\n },\n \"中通安全应急响应中心\": {\n \"Q1收官战！2倍积分+累挖奖励，师傅冲就完了！\": \"https://mp.weixin.qq.com/s?__biz=MzUyMTcwNTY3Mg==&mid=2247486640&idx=1&sn=41693eb7337b7aa9513c666a181c81cf\"\n },\n \"安全牛\": {\n \"安全边界已消亡？AI+SaaS 时代下，数据安全规则迎来根本性重塑\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140772&idx=1&sn=2082eb176695ab8998f6977d2b1cbc8e\",\n \"北京启动“清朗京华·AI向善”专项行动 重点整治五类涉AI领域网络乱象；OpenAI 发布 GPT-5.4 mini/nano 小模型| 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140772&idx=2&sn=4249ac229892c810d55428810678f3dc\"\n },\n \"极客公园\": {\n \"改造 100 多年的影视行业，需要的不止是好模型\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653101660&idx=1&sn=ac6d90d1d3295083ec925e8a597dab75\",\n \"858 亿砸 AI，腾讯杀入「AI 战争」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653101647&idx=1&sn=fd7c9fe43b79686afae8db6e0276b6f7\",\n \"黄仁勋：OpenClaw 是人类史上最成功开源项目；苹果智能家居硬件负责人离职加入 Oura；日本 AI 模型被指套壳 Deepseek | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653101603&idx=1&sn=9fdc7fab4836f7346cefc5d4f83a58e9\"\n },\n \"火绒安全\": {\n \"抽奖啦 | 叮～你的放松福利已送达，速来参与！\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531500&idx=1&sn=7a95b94f30ff51e3f3103d194e512127\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531500&idx=2&sn=fa8e8075113a7acb8c01755ec1d5aae9\"\n },\n \"嘶吼专业版\": {\n \"2026职场AI观察：禁而不止的影子代理，正在埋下企业数据安全隐患\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587241&idx=1&sn=4f0fc6896ac8f25ecb52e8921498111c\",\n \"假招聘真投毒！Next.js面试题暗藏后门实施入侵\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587241&idx=2&sn=e5713c13b81cc2f21c338918846af0c3\",\n \"倒计时2天！《2026网络安全产业图谱》调研进入收尾阶段\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587241&idx=3&sn=d510ff76aba1e9fa210cf3668e0218b7\",\n \"嘶吼安全动态｜官方辟谣“七部门AI安全治理三年行动计划” 新型iPhone攻击工具“DarkSword”曝光\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587241&idx=4&sn=159b54c49a86908259b52b606aa887b5\"\n },\n \"阿里安全响应中心\": {\n \"直击阿里CTF2026：当AI成为“攻防新变量”，安全竞赛的底层逻辑正在重构\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998728&idx=1&sn=b83e26c74940e3bb39c2c4a68f3e1654\"\n },\n \"软件安全与逆向分析\": {\n \"拆解iOS应用逆向实战中的反调试与反篡改\": \"https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485071&idx=1&sn=ed0907e603198e77e3eca08dfce80a9a\"\n },\n \"复旦白泽战队\": {\n \"你的手机AI助手越“聪明”，隐私风险越大？主流厂商智能体测评（1）\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247498103&idx=1&sn=8e7a31d7ebd9b78822682b3a3615dbc5\"\n },\n \"斗象智能安全\": {\n \"企业级Vibe Coding安全中枢，斗象AISCC「安全中转网关」已就位！\": \"https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495312&idx=1&sn=82e44694fb57705e374bda5a4648bcd4\"\n },\n \"墨菲安全\": {\n \"墨菲安全正式发布AI原生企业安全治理平台SGP\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488335&idx=1&sn=3d29e55c5d25193a1f15e9f895cbfd00\"\n },\n \"ChaMd5安全团队\": {\n \"直播预约 | 顺丰SRC第四届白帽技术沙龙，干货抽奖全都有！\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247514226&idx=1&sn=f5622bcec7e137580b4b1f63c6187dc3\"\n },\n \"情报分析师\": {\n \"当摩萨德的特工坐在你对面时，他问的第一句话是什么？从美伊冲突看人力情报的科学与艺术\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567093&idx=1&sn=e2dd252c856a45802572f0ae27d1fdb0\"\n },\n \"美团技术团队\": {\n \"美团 BI 在指标平台和分析引擎上的探索和实践\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651782375&idx=1&sn=9fa8942b14abb27fb85b9fe2ca0ae957\"\n },\n \"TrustedSec\": {\n \"Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found\": \"https://trustedsec.com/blog/full-disclosure-a-third-and-fourth-azure-sign-in-log-bypass-found\"\n },\n \"迪哥讲事\": {\n \"xss绕过思路\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499190&idx=1&sn=e989bea221288b094d4e45e4df1205fd\"\n },\n \"bellingcat\": {\n \"How Wildlife Traffickers Are Using Coded Language to Sell Protected Animals On Facebook\": \"https://www.bellingcat.com/news/2026/03/19/how-wildlife-traffickers-are-using-coded-language-to-sell-protected-animals-on-facebook/\"\n },\n \"Securityinfo.it\": {\n \"La cybersecurity OT in Italia tra maturità limitata e pressioni normative\": \"https://www.securityinfo.it/2026/03/19/la-cybersecurity-ot-in-italia-tra-maturita-limitata-e-pressioni-normative/?utm_source=rss&utm_medium=rss&utm_campaign=la-cybersecurity-ot-in-italia-tra-maturita-limitata-e-pressioni-normative\"\n },\n \"ICT Security Magazine\": {\n \"Peter Thiel, Palantir e l’algoritmo dell’Apocalisse: quando l’Anticristo è nel codice\": \"https://www.ictsecuritymagazine.com/notizie/peter-thiel-palantir-codice/\",\n \"Perché i jammer nelle carceri sono inefficaci (e pericolosi)\": \"https://www.ictsecuritymagazine.com/articoli/jammer-nelle-carceri/\"\n },\n \"安全行者老霍\": {\n \"近期AI 安全相关公司介绍\": \"https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486153&idx=1&sn=8e7fd850b79a1bf87655da0f1cef9674\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"ISC Stormcast For Thursday, March 19th, 2026 https://isc.sans.edu/podcastdetail/9856, (Thu, Mar 19th)\": \"https://isc.sans.edu/diary/rss/32812\",\n \"Interesting Message Stored in Cowrie Logs, (Wed, Mar 18th)\": \"https://isc.sans.edu/diary/rss/32810\"\n },\n \"Future of Tech and Security: Strategy & Innovation with Raffy\": {\n \"SIEM Is Not Dead. It Just Stopped Moving Fast Enough.\": \"https://raffy.ch/blog/2026/03/19/siem-is-not-dead-it-just-stopped-moving-fast-enough/\"\n },\n \"IT Service Management News\": {\n \"Bozza di linee guida per il CRA\": \"http://blog.cesaregallotti.it/2026/03/bozza-di-linee-guida-per-il-cra.html\",\n \"Wiki AI Security del Clusit\": \"http://blog.cesaregallotti.it/2026/03/wiki-ai-security-del-clusit.html\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Navia discloses data breach impacting 2.7 million people\": \"https://www.bleepingcomputer.com/news/security/navia-discloses-data-breach-impacting-27-million-people/\",\n \"New ‘PolyShell’ flaw allows unauthenticated RCE on Magento e-stores\": \"https://www.bleepingcomputer.com/news/security/new-polyshell-flaw-allows-unauthenticated-rce-on-magento-e-stores/\",\n \"You have to invite them in\": \"https://blog.talosintelligence.com/you-have-to-invite-them-in/\",\n \"Iran-Aligned Militias Signal Expanded Regional Risk Amid US–Israel–Iran Conflict\": \"https://flashpoint.io/blog/iran-aligned-militias-regional-risk-us-israel-iran-conflict/\",\n \"DarkSword, l’exploit kit che ha violato gli iPhone di mezzo mondo per rubare dati riservati\": \"https://www.cybersecurity360.it/news/darksword-lexploit-kit-che-ha-violato-gli-iphone-di-mezzo-mondo-per-rubare-dati-riservati/\",\n \"US intel chiefs urge lawmakers to extend Section 702 surveillance power without changes\": \"https://therecord.media/us-intel-chiefs-urge-lawmakers-to-extend-section-702\",\n \"Bitrefill blames North Korean Lazarus group for cyberattack\": \"https://www.bleepingcomputer.com/news/security/bitrefill-blames-north-korean-lazarus-group-for-cyberattack/\",\n \"New Android malware hiding in streaming apps to spy on users’ personal notes\": \"https://therecord.media/malware-streaming-apps-android\",\n \"FBI seizes Handala data leak site after Stryker cyberattack\": \"https://www.bleepingcomputer.com/news/security/fbi-seizes-handala-data-leak-site-after-stryker-cyberattack/\",\n \"FBI seizes pro-Iranian hacking group’s websites after destructive Stryker hack\": \"https://techcrunch.com/2026/03/19/fbi-seizes-pro-iranian-hacking-groups-websites-after-destructive-stryker-hack/\",\n \"FBI, CISA warn on Microsoft Intune risks after Iran-linked cyberattack on Stryker\": \"https://therecord.media/fbi-cisa-warn-of-microsoft-intune-risks-stryker\",\n \"La cybersecurity OT in Italia tra maturità limitata e pressioni normative\": \"https://www.securityinfo.it/2026/03/19/la-cybersecurity-ot-in-italia-tra-maturita-limitata-e-pressioni-normative/\",\n \"White House pours cold water on cyber ‘letters of marque’ speculation\": \"https://therecord.media/offensive-cyber-white-house-hacking\",\n \"Russian hackers exploit Zimbra flaw in Ukrainian govt attacks\": \"https://www.bleepingcomputer.com/news/security/russian-apt28-military-hackers-exploit-zimbra-flaw-in-ukrainian-govt-attacks/\",\n \"Risolto bug Bluetooth di Windows 11: cosa insegna sulla sicurezza del wireless aziendale\": \"https://www.cybersecurity360.it/news/risolto-bug-bluetooth-di-windows-11-cosa-insegna-sulla-sicurezza-del-wireless-aziendale/\",\n \"Ransomware attack on UMMC: Medusa claims 1 TB of exfiltrated data as new details emerge\": \"https://www.suspectfile.com/ransomware-attack-on-ummc-medusa-claims-1-tb-of-exfiltrated-data-as-new-details-emerge/\",\n \"7 Ways to Prevent Privilege Escalation via Password Resets\": \"https://www.bleepingcomputer.com/news/security/7-ways-to-prevent-privilege-escalation-via-password-resets/\",\n \"Interlock ransomware gang exploited Cisco firewall zero-day weeks before disclosure: Amazon\": \"https://therecord.media/cisco-ransomware-interlock-firewalls\",\n \"Faraday bag, a cosa servono per la privacy e la sicurezza su smartphone (e a cosa no)\": \"https://www.cybersecurity360.it/cultura-cyber/faraday-bag-a-cosa-servono-per-la-privacy-su-smartphone-e-a-cosa-no/\",\n \"Ready for macOS Threats: Expanding Your SOC’s Cross-Platform Analysis with ANY.RUN\": \"https://any.run/cybersecurity-blog/anyrun-macos-sandbox/\",\n \"Max severity Ubiquiti UniFi flaw may allow account takeover\": \"https://www.bleepingcomputer.com/news/security/ubiquiti-warns-of-unifi-flaw-that-may-enable-account-takeover/\",\n \"Russian hackers exploit Zimbra flaw to breach Ukrainian maritime agency\": \"https://therecord.media/russia-hackers-ukraine-zimbra-breach\",\n \"Exploiting a PHP Object Injection in Profile Builder Pro in the era of AI\": \"https://blog.sicuranext.com/exploiting-a-php-object-injection-in-profile-builder-pro-in-the-era-of-ai/\",\n \"Apple Patches WebKit Vulnerability CVE-2026-20643 Across iOS, macOS\": \"https://thecyberexpress.com/webkit-vulnerability-fixed-in-apple-update/\",\n \"Interlock Ransomware Leveraged Cisco FMC Zero-Day 36 Days Before Patch, Amazon Reveals\": \"https://thecyberexpress.com/interlock-fmc-cve-2026-20131/\",\n \"CISA urges US orgs to secure Microsoft Intune systems after Stryker breach\": \"https://www.bleepingcomputer.com/news/security/cisa-warns-businesses-to-secure-microsoft-intune-systems-after-stryker-breach/\",\n \"Oltre la trasmissione sicura: acceleratori crittografici per proteggere i dati in uso\": \"https://www.cybersecurity360.it/soluzioni-aziendali/oltre-la-trasmissione-sicura-acceleratori-crittografici-per-proteggere-i-dati-in-uso/\",\n \"Inside Russia’s Shift to Credential-Based Intrusions: What CISOs Need to Know in 2026\": \"https://cyble.com/blog/russia-credential-based-intrusions-cisos/\",\n \"Critical Microsoft SharePoint flaw now exploited in attacks\": \"https://www.bleepingcomputer.com/news/microsoft/critical-microsoft-sharepoint-flaw-now-exploited-in-attacks/\",\n \"New ‘Perseus’ Android malware checks user notes for secrets\": \"https://www.bleepingcomputer.com/news/security/new-perseus-android-malware-checks-user-notes-for-secrets/\",\n \"China Sits at the Top of America’s Cyber Threat List\": \"https://thecyberexpress.com/china-top-cyber-threat-for-us/\",\n \"Everyday tools, extraordinary crimes: the ransomware exfiltration playbook\": \"https://blog.talosintelligence.com/everyday-tools-extraordinary-crimes-the-ransomware-exfiltration-playbook/\",\n \"Perseus: DTO malware that takes notes\": \"https://www.threatfabric.com/blogs/perseus-dto-malware-that-takes-notes\",\n \"LLM in guerra: il Pentagono aprirà alle aziende la possibilità di training AI con dati riservati\": \"https://www.cybersecurity360.it/cybersecurity-nazionale/llm-in-guerra-il-pentagono-aprira-alle-aziende-la-possibilita-di-traininig-dellai-con-dati-riservati/\",\n \"Multiple Threat Actors Exploiting a Six-Vulnerability iOS Exploit Kit Dubbed “DarkSword”\": \"https://thecyberexpress.com/ios-exploit-kit-dubbed-darksword/\",\n \"Hasta la vista, Hastalamuerte: An Overview of The Gentlemen’s TTPs\": \"https://www.group-ib.com/blog/hastalamuerte-gentlemen-raas-ttps/\",\n \"CISA Urges Endpoint Management Hardening After Stryker Cyberattack\": \"https://thecyberexpress.com/endpoint-management-systems-cisa/\",\n \"DarkSword: exploit chain iOS tra zero-day, spyware e cybercrime finanziario\": \"https://www.securityinfo.it/2026/03/18/darksword-exploit-chain-ios-tra-zero-day-spyware-e-cybercrime-finanziario/\"\n },\n \"Schneier on Security\": {\n \"Hacking a Robot Vacuum\": \"https://www.schneier.com/blog/archives/2026/03/hacking-a-robot-vacuum.html\"\n },\n \"Full Disclosure\": {\n \"snap-confine + systemd-tmpfiles = root (CVE-2026-3888)\": \"https://seclists.org/fulldisclosure/2026/Mar/11\",\n \"APPLE-SA-03-17-2026-1 Background Security Improvements for iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1, and macOS 26.3.2\": \"https://seclists.org/fulldisclosure/2026/Mar/10\",\n \"SEC Consult SA-20260318-0 :: Multiple Privilege Escalation Vulnerabilities in Arturia Software Center MacOS\": \"https://seclists.org/fulldisclosure/2026/Mar/9\",\n \"SEC Consult SA-20260317-0 :: Multiple vulnerabilities in PEGA Infinity platform\": \"https://seclists.org/fulldisclosure/2026/Mar/8\"\n },\n \"360数字安全\": {\n \"独家！OpenClaw之父确认漏洞，360为所有“养虾人”筑牢安全防线\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585474&idx=1&sn=53b14b545cacdccc7581fa98e01cf5e1\",\n \"360预警：Sorry勒索病毒集中开火，专挑中小型企业“偷家”\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585474&idx=2&sn=a20aa84529cb5bc8ec7c5ff305641d5f\"\n },\n \"The Hacker News\": {\n \"Speagle Malware Hijacks Cobra DocGuard to Steal Data via Compromised Servers\": \"https://thehackernews.com/2026/03/speagle-malware-hijacks-cobra-docguard.html\",\n \"54 EDR Killers Use BYOVD to Exploit 34 Signed Vulnerable Drivers and Disable Security\": \"https://thehackernews.com/2026/03/54-edr-killers-use-byovd-to-exploit-34.html\",\n \"ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More\": \"https://thehackernews.com/2026/03/threatsday-bulletin-fortigate-raas.html\",\n \"New Perseus Android Banking Malware Monitors Notes Apps to Extract Sensitive Data\": \"https://thehackernews.com/2026/03/new-perseus-android-banking-malware.html\",\n \"How Ceros Gives Security Teams Visibility and Control in Claude Code\": \"https://thehackernews.com/2026/03/how-ceros-gives-security-teams.html\",\n \"DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover\": \"https://thehackernews.com/2026/03/darksword-ios-exploit-kit-uses-6-flaws.html\",\n \"CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero-Day Hit in Ransomware Attacks\": \"https://thehackernews.com/2026/03/cisa-warns-of-zimbra-sharepoint-flaw.html\"\n },\n \"Security Affairs\": {\n \"Critical Ubiquiti UniFi UniFi security flaw allows potential account hijacking\": \"https://securityaffairs.com/189689/security/critical-ubiquiti-unifi-unifi-security-flaw-allows-potential-account-hijacking.html\",\n \"U.S. CISA adds a flaw in Cisco FMC and Cisco SCC Firewall Management to its Known Exploited Vulnerabilities catalog\": \"https://securityaffairs.com/189682/security/u-s-cisa-adds-a-flaw-in-cisco-fmc-and-cisco-scc-firewall-management-to-its-known-exploited-vulnerabilities-catalog.html\",\n \"Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025-66376\": \"https://securityaffairs.com/189673/security/russian-apt-targets-ukraine-via-zimbra-xss-flaw-cve-2025-66376.html\",\n \"DarkSword emerges as powerful iOS exploit tool in global attacks\": \"https://securityaffairs.com/189662/hacking/darksword-emerges-as-powerful-ios-exploit-tool-in-global-attacks.html\",\n \"Interlock group exploiting the CISCO FMC flaw CVE-2026-20131 36 days before disclosure\": \"https://securityaffairs.com/189636/malware/interlock-group-exploiting-the-cisco-fmc-flaw-cve-2026-20131-36-days-before-disclosure.html\",\n \"Russia establishes Vienna as key western spy hub targeting NATO\": \"https://securityaffairs.com/189653/intelligence/russia-establishes-vienna-as-key-western-spy-hub-targeting-nato.html\"\n },\n \"GRAHAM CLULEY\": {\n \"Smashing Security podcast #459: This clever scam nearly hijacked a tech CEO’s Apple ID\": \"https://grahamcluley.com/smashing-security-podcast-459/\"\n },\n \"DEFION Research Labs\": {\n \"Ruckus Unleashed: Multiple vulnerabilities exploited\": \"/en/research-labs/ruckus-unleashed-multiple-vulnerabilities-exploited\",\n \"Pwn2Own Automotive 2024: Hacking the Autel MaxiCharger\": \"/en/research-labs/pwn2own-automotive-2024-hacking-the-autel-maxicharger\",\n \"Pwn2Own Automotive 2024: Hacking the JuiceBox 40\": \"/en/research-labs/pwn2own-automotive-2024-hacking-the-juicebox-40\",\n \"Pwn2Own Automotive 2024: Hacking the ChargePoint Home Flex (and their cloud...)\": \"/en/research-labs/pwn2own-automotive-2024-hacking-the-chargepoint-home-flex-and-their-cloud\",\n \"DoNex/DarkRace Ransomware Decryptor\": \"/en/research-labs/donex-darkrace-ransomware-decryptor\",\n \"CVE-2024-20693: Windows cached code signature manipulation\": \"/en/research-labs/cve-2024-20693-windows-cached-code-signature-manipulation\",\n \"Bringing process injection into view(s): exploiting all macOS apps using nib files\": \"/en/research-labs/bringing-process-injection-into-view-s-exploiting-all-macos-apps-using-nib-files\",\n \"Don’t Talk All at Once! Elevating Privileges on macOS by Audit Token Spoofing\": \"/en/research-labs/don-t-talk-all-at-once-elevating-privileges-on-macos-by-audit-token-spoofing\",\n \"Getting SYSTEM on Windows in style\": \"/en/research-labs/getting-system-on-windows-in-style\",\n \"Technical analysis of the Genesis Market\": \"/en/research-labs/technical-analysis-of-the-genesis-market\",\n \"Bad things come in large packages: .pkg signature verification bypass on macOS\": \"/en/research-labs/bad-things-come-in-large-packages-pkg-signature-verification-bypass-on-macos\",\n \"Pwn2Own Miami 2022: ICONICS GENESIS64 Arbitrary Code Execution\": \"/en/research-labs/pwn2own-miami-2022-iconics-genesis64-arbitrary-code-execution\",\n \"Pwn2Own Miami 2022: Unified Automation C++ Demo Server DoS\": \"/en/research-labs/pwn2own-miami-2022-unified-automation-c-demo-server-dos\",\n \"Pwn2Own Miami 2022: AVEVA Edge Arbitrary Code Execution\": \"/en/research-labs/pwn2own-miami-2022-aveva-edge-arbitrary-code-execution\",\n \"Process injection: breaking all macOS security layers with a single vulnerability\": \"/en/research-labs/process-injection-breaking-all-macos-security-layers-with-a-single-vulnerability\",\n \"Pwn2Own Miami 2022: Inductive Automation Ignition Remote Code Execution\": \"/en/research-labs/pwn2own-miami-2022-inductive-automation-ignition-remote-code-execution\",\n \"Pwn2Own Miami 2022: OPC UA .NET Standard Trusted Application Check Bypass\": \"/en/research-labs/pwn2own-miami-2022-opc-ua-net-standard-trusted-application-check-bypass\",\n \"CoronaCheck App TLS certificate vulnerabilities\": \"/en/research-labs/coronacheck-app-tls-certificate-vulnerabilities\",\n \"Sandbox escape + privilege escalation in StorePrivilegedTaskService\": \"/en/research-labs/sandbox-escape-privilege-escalation-in-storeprivilegedtaskservice\",\n \"Proctorio Chrome extension Universal Cross-Site Scripting\": \"/en/research-labs/proctorio-chrome-extension-universal-cross-site-scripting\",\n \"Zoom RCE from Pwn2Own 2021\": \"/en/research-labs/zoom-rce-from-pwn2own-2021\",\n \"Adobe Acrobat privilege escalation\": \"/en/research-labs/adobe-acrobat-privilege-escalation\",\n \"iOS VPN support: 3 different bugs\": \"/en/research-labs/ios-vpn-support-3-different-bugs\",\n \"Sign in with Apple - authentication bypass\": \"/en/research-labs/sign-in-with-apple-authentication-bypass\",\n \"Jenkins - authentication bypass\": \"/en/research-labs/jenkins-authentication-bypass\",\n \"DNS rebinding for HTTPS\": \"/en/research-labs/dns-rebinding-for-https\",\n \"Spring Security - insufficient cryptographic randomness\": \"/en/research-labs/spring-security-insufficient-cryptographic-randomness\",\n \"XenServer - path traversal leading to authentication bypass\": \"/en/research-labs/xenserver-path-traversal-leading-to-authentication-bypass\",\n \"Volkswagen Auto Group MIB infotainment system - unauthenticated remote code execution as root\": \"/en/research-labs/volkswagen-auto-group-mib-infotainment-system-unauthenticated-remote-code-execution-as-root\",\n \"NAPALM - command execution on NAPLM controller from host\": \"/en/research-labs/napalm-command-execution-on-naplm-controller-from-host\",\n \"MySQL Connector/J - Unexpected deserialisation of Java objects\": \"/en/research-labs/mysql-connector-j-unexpected-deserialisation-of-java-objects\",\n \"Ansible - command execution on Ansible controller from host\": \"/en/research-labs/ansible-command-execution-on-ansible-controller-from-host\",\n \"Observium - unauthenticated remote code execution\": \"/en/research-labs/observium-unauthenticated-remote-code-execution\",\n \"cSRP/srpforjava - obtaining of hashed passwords\": \"/en/research-labs/csrp-srpforjava-obtaining-of-hashed-passwords\",\n \"StartEncrypt - obtaining valid SSL certificates for unauthorized domains\": \"/en/research-labs/startencrypt-obtaining-valid-ssl-certificates-for-unauthorized-domains\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Hacking IP KVMs & Reversing with Radare2 - Sergi Àlvarez - PSW #918\": \"http://sites.libsyn.com/18678/hacking-ip-kvms-reversing-with-radare2-sergi-lvarez-psw-918\"\n }\n}"}}, "archive/tmp/2025-03-27.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747328.3688233, "n": 50620, "h": "1f75d48a985ae3b4", "c": "{\n \"安全客-有思想的安全新媒体\": {\n \"御辰：论攻击面管理在高校信息化建设中的重要性\": \"https://www.anquanke.com/post/id/302908\",\n \"PolarDB分布式版V2.0：安全可靠的集中分布式一体化数据库管理软件\": \"https://www.anquanke.com/post/id/303161\",\n \"中科固源Cybellum 在智能网联汽车安全领域的应用与实操——解锁汽车安全新能力\": \"https://www.anquanke.com/post/id/305497\",\n \"开发者必备的安全利器：0day漏洞挖掘利器-模糊测试\": \"https://www.anquanke.com/post/id/305495\",\n \"深度剖析：用 Scapy 解读 TCP 握手挥手，详细实操步骤 + 序列号变化深度剖析\": \"https://www.anquanke.com/post/id/305581\",\n \"重磅！微软新型 AI 代理强势应对网络钓鱼、补丁修复及警报疲劳挑战\": \"https://www.anquanke.com/post/id/305507\",\n \"警惕！VMware Tools for Windows 漏洞可使攻击者绕过身份验证\": \"https://www.anquanke.com/post/id/305504\",\n \"紧急警报：Chrome 严重漏洞或致攻击者执行任意代码\": \"https://www.anquanke.com/post/id/305483\",\n \"WordPress 插件漏洞使超20万个网站面临代码执行攻击威胁\": \"https://www.anquanke.com/post/id/305467\",\n \"Ingress NGINX 现远程代码执行漏洞，攻击者或借此全面接管集群\": \"https://www.anquanke.com/post/id/305447\",\n \"本地部署AI信息安全框架：保障AI系统安全的关键举措\": \"https://www.anquanke.com/post/id/305420\",\n \"警惕！多阶段信息窃取型恶意软件 SnakeKeylogger 攻击个人与企业以窃取登录信息\": \"https://www.anquanke.com/post/id/305441\",\n \"黑客借浏览器扩展程序和合法工具传播恶意软件以绕过安全控制\": \"https://www.anquanke.com/post/id/305436\",\n \"警惕！Android 恶意软件攻击活动利用 .NET MAUI 逃避检测\": \"https://www.anquanke.com/post/id/305433\",\n \"新型网络钓鱼活动攻击 Mac 用户以窃取用户登录凭据\": \"https://www.anquanke.com/post/id/305431\",\n \"开发人员警惕！勒索软件FreeFix投毒供应链 致软件生态安全告急\": \"https://www.anquanke.com/post/id/305422\"\n },\n \"奇安信攻防社区\": {\n \"CVE-2024-25600 WordPress Bricks Builder远程代码执行漏洞分析\": \"https://forum.butian.net/share/4117\"\n },\n \"Tenable Blog\": {\n \"Who's Afraid of AI Risk in Cloud Environments?\": \"https://www.tenable.com/blog/whos-afraid-of-ai-risk-in-cloud-environments\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2025-03-26 Review\": \"http://www.sec-wiki.com/?2025-03-26\"\n },\n \"安全脉搏\": {\n \"ApoorvCTF Rust语言逆向实战\": \"https://www.secpulse.com/archives/205975.html\",\n \"路由器安全研究：D-Link DIR-823G v1.02 B05 复现与利用思路\": \"https://www.secpulse.com/archives/206007.html\"\n },\n \"Trustwave Blog\": {\n \"2025 Healthcare Cybersecurity Threats: Insights from the Trustwave Risk Radar Report\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/2025-healthcare-cybersecurity-threats-insights-from-the-trustwave-risk-radar-report/\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Wed Mar 26 16:10:26 UTC 2025\": \"https://github.com/trickest/cve/commit/b075b746211efc28e7e095663ec4017ddaa7d79c\"\n },\n \"Google Online Security Blog\": {\n \"Titan Security Keys now available in more countries\": \"http://security.googleblog.com/2025/03/titan-security-keys-now-available-in.html\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"Bypassing file upload filter using .htaccess file(CTF)\": \"https://infosecwriteups.com/bypassing-file-upload-filter-using-htaccess-file-ctf-ca06d7e9ebd7?source=rss----7b722bfd1b8d---4\",\n \"Pentesting for Biotech: Simulating a Cyberattack on Your Genomic Data\": \"https://infosecwriteups.com/pentesting-for-biotech-simulating-a-cyberattack-on-your-genomic-data-e056c170d055?source=rss----7b722bfd1b8d---4\",\n \"Next.js CVE-2025–29927: Tryhackme Writeup\": \"https://infosecwriteups.com/next-js-cve-2025-29927-tryhackme-writeup-68d5cc6859a3?source=rss----7b722bfd1b8d---4\",\n \"How Hackers Abuse XML-RPC to Launch Bruteforce and DDoS Attacks\": \"https://infosecwriteups.com/how-hackers-abuse-xml-rpc-to-launch-bruteforce-and-ddos-attacks-40be5b310960?source=rss----7b722bfd1b8d---4\",\n \"Intercept VulnLab| RBCD & Another word For ESC7\": \"https://infosecwriteups.com/intercept-vulnlab-rbcd-another-word-for-esc7-4fbd254b6006?source=rss----7b722bfd1b8d---4\",\n \"Cloud Jacking: How Simple Mistakes Are Spilling Your Data Across the Internet\": \"https://infosecwriteups.com/cloud-jacking-how-simple-mistakes-are-spilling-your-data-across-the-internet-7ecb33ffdc0a?source=rss----7b722bfd1b8d---4\"\n },\n \"Doonsec's feed\": {\n \"为什么越来越多的IT技术人员转行网络安全？\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247484314&idx=1&sn=c5379861f993b9068168d48d6addf56e\",\n \"vite 任意文件读取漏洞 CVE-2025-30208\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491303&idx=1&sn=7241c22dc3795d24d626afb4f0081efc\",\n \"网络防环协议STP、RSTP、MSTP全网最全对比\": \"https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247528906&idx=1&sn=1f76047310d125afee406541daa6a4cf\",\n \"【风险提示】天融信关于Vite任意文件读取漏洞(CVE-2025-30208)的风险提示\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496690&idx=1&sn=6010f3a0a91bb3e0546c20a0e004fdd1\",\n \"网络空间安全专业该如何自救、入门\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484885&idx=1&sn=b429ad2f1682538026c3aeda6671ffc0\",\n \"Burp靶场-HTTP走私请求\": \"https://mp.weixin.qq.com/s?__biz=Mzk1Nzk3MjA5Ng==&mid=2247484299&idx=1&sn=7aadfcfe66f9309023e19d0e3f279d72\",\n \"对DogsVsCats例子的调优模型训练过程\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDcxMDQzNA==&mid=2247489517&idx=1&sn=6b92f17d7256f3639285b6a6752f014a\",\n \"告别单点故障：Linux系统下实现高效的Bonding链路聚合\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTc5MjM4Nw==&mid=2457388171&idx=1&sn=6403bcdab4048004a3f8743b2ba164c5\",\n \"安全研究团队的价值\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484377&idx=1&sn=52ec181039e185d4206b4f6ca1ee059d\",\n \"【HTB】Cap靶机渗透\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247487143&idx=1&sn=a40e853750f4f12cf02eb8cd4f655130\",\n \"2025新蓝海市场！网络安全乙方企业商机观察之 《个人信息保护合规审计管理办法》落地实操+销售思路\": \"https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247539227&idx=1&sn=1ea36ea307ab2e46e021ac0019cc926f\",\n \"高危逻辑漏洞-Web3+Web2前端结合的ABI任意调用实现链上交易免gas\": \"https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486182&idx=1&sn=2add35c4bee30176cb7ea2ab9814d136\",\n \"【漏洞预警】Ingress NGINX Controller远程代码执行漏洞(CVE-2025-1974)\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489841&idx=1&sn=b68a9fe9310ef672f507eb4ac000b605\",\n \"T1016 - 系统网络配置发现\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483859&idx=1&sn=5f162dc0c6591786d4ce3461732db3a0\",\n \"【fscan插件】| 用gokrb5构建fscan插件（一）\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzM5MTI2Mg==&mid=2247484699&idx=1&sn=339a02d6f79f25ff9ce0a6b29c7bd3a4\",\n \"Linux提权漏洞CVE-2025-27591\": \"https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485167&idx=1&sn=e589a6e71a843af60fa3c86007e6177a\",\n \"Craft V3 中文版正式发布！颜值与生产力并重的全能笔记工具来了！\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzY0Mzg2OQ==&mid=2247486465&idx=1&sn=115b3ec0a6500c1fdccddd9cb9d737a8\",\n \"Perplexity新增GPT-4.5和Claude 3.7模型\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzY0Mzg2OQ==&mid=2247486465&idx=2&sn=3980affc4a63f6f7894e6c235e3edda6\",\n \"Python in Excel高级分析：一键RFM分析\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzY0Mzg2OQ==&mid=2247486465&idx=3&sn=f059f6219aa5b8bdb005c76a656f4187\",\n \"【漏洞速递】Google Chrome 沙箱逃逸漏洞(CVE-2025-2783)\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDYwMDcyNQ==&mid=2247488956&idx=1&sn=7ff677c108fa9acc0c1135eb61a08aab\",\n \"FOXCMS黔狐内容管理系统index.html接口存在远程代码执行漏洞CVE-2025-29306 漏洞预警\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488251&idx=1&sn=9dd825fbac48298618f53dbb722f73ec\",\n \"G.O.S.S.I.P 阅读推荐 2025-03-26 电子邮件也能用来走私？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499940&idx=1&sn=4306723a4da6f037c97c2dff446cd24e\",\n \"90页PPT 从技术突破到场景落地：大模型发展图谱与DeepSeek创新应用\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655272188&idx=1&sn=6f7130c0238d629bde6d3b9783788825\",\n \"hvv 笔试小技巧\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Nzg2MDA0MA==&mid=2247484695&idx=1&sn=2c85166c9933068d2bf3f7bc1f24283a\",\n \"SDL序列课程-第38篇-安全需求-登录注册需求-HTTPS安全通道在登录过程中的应用\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NzE5NjI0Mg==&mid=2247484706&idx=1&sn=848f26862f54fd23835f64679bf83ec3\",\n \"泛微e-office sms_page.php sql注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490919&idx=1&sn=c84be81cd4eca3e6d0506b51eb86c646\",\n \"当我们在谈论大模型辅助编程时，我们在谈论什么（二）之MCP\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzQ5OTQ0Mw==&mid=2247483708&idx=1&sn=d16afa0920cd307ff9d61abce26b4b70\",\n \"CTF AWD/AWDP Web方向 Fix Patch 学习文档\": \"https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484637&idx=1&sn=27713a92634a0cbebf86333c867f03c0\",\n \"HTB-Codify靶机：代码编辑器的便利成为黑客的跳板 — 现代Web开发中的致命沙盒逃逸\": \"https://mp.weixin.qq.com/s?__biz=MzkwMzYyNzQ1NA==&mid=2247484704&idx=1&sn=08a5479a80affe53cc96e83dc7925f5d\",\n \"极氪汽车开源合规体系建设实践分享\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623008&idx=1&sn=2d4770de0393961377ffa2b9e8171e37\",\n \"软件定义汽车（SDV）培训课程通知 2025\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623008&idx=2&sn=1f3b553772370c945ef567b78e63a71c\",\n \"汽车企业信息安全挑战与应对策略\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623008&idx=3&sn=df13b63fe63d726987b56a8d63302b5a\",\n \"在ChatGPT中挖掘XSS漏洞实现任意账户接管\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518881&idx=1&sn=6abd5222d13c67e835b43771eb3d7f18\",\n \"一名合格红队的成长之路\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518881&idx=2&sn=87d81a62e332746169a4e0fbe97e65d5\",\n \"Src实战-垂直越权任意添加用户\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497323&idx=1&sn=eeb54bafcf04ab6832e57b46b1e43ff4\",\n \"现代 Windows 内核条件竞争 - Windows 11 (x64)\": \"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487861&idx=1&sn=ac3fc33d562f3709ea7ef78eb39c07fd\",\n \"【已复现】Ingress NGINX Controller 远程代码执行漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492754&idx=1&sn=9f437f4b0b3d4edced726f996430121a\",\n \"【已复现】Ingress NGINX Controller 远程代码执行漏洞(CVE-2025-1974)安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503229&idx=1&sn=5f984b9cab97f883a7b92dad91e49ce4\",\n \"【已复现】Vite 任意文件读取漏洞(CVE-2025-30208)安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503229&idx=2&sn=c5328659e9a3f009109e9af22c442b32\",\n \"LockBit 4.0发布，与LockBit 3.0有何不同\": \"https://mp.weixin.qq.com/s?__biz=MzkzMTY0MDgzNg==&mid=2247484207&idx=1&sn=1bb97e77bd8b28956ad550ca0c26ecc5\",\n \"安芯网盾获工信部科技成果登记证书！\": \"https://mp.weixin.qq.com/s?__biz=MzU1Njk1NTYzOA==&mid=2247491564&idx=1&sn=52040f0226d457870433a40b3857b2bb\",\n \"顶尖CISO是如何打造企业核心网络安全文化的\": \"https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247484951&idx=1&sn=a4b1a7becce292f3b3fac558b5b35edb\",\n \"利用捕获的 COM 对象进行无文件横向移动\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528744&idx=1&sn=81f5e638de0c61ffbbdabf27a19a2ce6\",\n \"CVE-2025-0693：AWS IAM 用户枚举\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528744&idx=2&sn=d98a71a758a0d2f757cd35589c6d55b6\",\n \"从零到一AI 加持下的APP 开发\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NzY5NjM5Mg==&mid=2247485070&idx=1&sn=e6d2eff10849d84d6bb6e87efe52342a\",\n \"【漏洞工具】某路由器Golang图形化跨平台利用工具\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247501222&idx=1&sn=c67ffa9d6f898a97be73218b7cc8d19e\",\n \"《论语别裁》第02章 为政（06） 圣人也势利吗？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247501222&idx=2&sn=900b5c4477f8a375f7339ccf6fde9857\",\n \"微软Security Copilot官方指南文档中英文双语版\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzU4ODU2MQ==&mid=2247484232&idx=1&sn=58dd3634b3a409d053947b520e618a7e\",\n \"面试官逼问“如何防社工库”，我当场用人脸识别抓了他开房记录！\": \"https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247501014&idx=1&sn=216c0c3adbbd062fd7a8dad7fb69ac58\",\n \"本周网络安全大事件（2025 年 3 月 17 日至 23 日）\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489037&idx=1&sn=a4c0afad7eb9d92eb9b0bb50399bb629\",\n \"工业和信息化部关于印发《工业互联网安全分类分级管理办法》的通知，全文公布\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDYzNTYxNQ==&mid=2247502756&idx=1&sn=4ee7a7fb887c9c5aebaadc1ade23ffb5\",\n \"网站裸奔？文件上传！！！\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDQ2ODU4NQ==&mid=2247483754&idx=1&sn=ccb3d542a47ccb03accf44b6277af88c\",\n \"一图读懂||工业互联网安全分类分级管理办法\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDYzNTYxNQ==&mid=2247502751&idx=1&sn=9418532bacfff927d29b9abf1b22d752\",\n \"打靶日记 SickOs 1.2\": \"https://mp.weixin.qq.com/s?__biz=Mzk1Nzc0MzY3NA==&mid=2247484798&idx=1&sn=e8683c5cd99cba8b9024d52f3013d4f2\"\n },\n \"安全通告\": {\n \"安全通告 - 华为PC产品存在认证绕过漏洞\": \"//www.huawei.com/cn/psirt/security-advisories/2025/huawei-sa-20250325-01-pc-cn\"\n },\n \"Security Boulevard\": {\n \"Legit Announces New Vulnerability Prevention Capabilities\": \"https://securityboulevard.com/2025/03/legit-announces-new-vulnerability-prevention-capabilities/?utm_source=rss&utm_medium=rss&utm_campaign=legit-announces-new-vulnerability-prevention-capabilities\",\n \"How can I align our NHI management with GDPR and other standards?\": \"https://securityboulevard.com/2025/03/how-can-i-align-our-nhi-management-with-gdpr-and-other-standards/?utm_source=rss&utm_medium=rss&utm_campaign=how-can-i-align-our-nhi-management-with-gdpr-and-other-standards\",\n \"Which frameworks assist in ensuring compliance for NHIs?\": \"https://securityboulevard.com/2025/03/which-frameworks-assist-in-ensuring-compliance-for-nhis/?utm_source=rss&utm_medium=rss&utm_campaign=which-frameworks-assist-in-ensuring-compliance-for-nhis\",\n \"Generative AI: threat or opportunity? It depends on your adaptive speed!\": \"https://securityboulevard.com/2025/03/generative-ai-threat-or-opportunity-it-depends-on-your-adaptive-speed/?utm_source=rss&utm_medium=rss&utm_campaign=generative-ai-threat-or-opportunity-it-depends-on-your-adaptive-speed\",\n \"Broadcom Extends Scope of VMware vDefend Cybersecurity Platform\": \"https://securityboulevard.com/2025/03/broadcom-extends-scope-of-vmware-vdefend-cybersecurity-platform/?utm_source=rss&utm_medium=rss&utm_campaign=broadcom-extends-scope-of-vmware-vdefend-cybersecurity-platform\",\n \"MailChimp Under Attack: How Cybercriminals Are Exploiting Email Marketing Platforms\": \"https://securityboulevard.com/2025/03/mailchimp-under-attack-how-cybercriminals-are-exploiting-email-marketing-platforms/?utm_source=rss&utm_medium=rss&utm_campaign=mailchimp-under-attack-how-cybercriminals-are-exploiting-email-marketing-platforms\",\n \"BSidesLV24 – IATC – Difficult Conversations\": \"https://securityboulevard.com/2025/03/bsideslv24-iatc-difficult-conversations/?utm_source=rss&utm_medium=rss&utm_campaign=bsideslv24-iatc-difficult-conversations\",\n \"ADAMnetworks Licensed Technology Partner (LTP) Program\": \"https://securityboulevard.com/2025/03/adamnetworks-licensed-technology-partner-ltp-program/?utm_source=rss&utm_medium=rss&utm_campaign=adamnetworks-licensed-technology-partner-ltp-program\",\n \"Snow White — Beware the Bad Apple in the Torrent\": \"https://securityboulevard.com/2025/03/snow-white-beware-the-bad-apple-in-the-torrent/?utm_source=rss&utm_medium=rss&utm_campaign=snow-white-beware-the-bad-apple-in-the-torrent\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"第八届西湖论剑·中国杭州网络安全技能大赛决赛预告：AI赋能网安战场，智能攻防剑指巅峰！\": \"https://www.4hou.com/posts/xyBB\",\n \"SpyX 数据泄露，涉及近 200 万用户隐私\": \"https://www.4hou.com/posts/kgl6\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"How Hackers Abuse XML-RPC to Launch Bruteforce and DDoS Attacks\": \"https://infosecwriteups.com/how-hackers-abuse-xml-rpc-to-launch-bruteforce-and-ddos-attacks-40be5b310960?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Horizon3.ai\": {\n \"CVE-2025-1974\": \"https://www.horizon3.ai/attack-research/vulnerabilities/cve-2025-1974/\",\n \"Horizon3.ai Releases 2025 Cybersecurity Insights Report: Key Findings from Over 50,000 NodeZero® Pentests\": \"https://www.businesswire.com/news/home/20250326589938/en/Horizon3.ai-Releases-2025-Cybersecurity-Insights-Report-Key-Findings-from-Over-50000-NodeZero-Pentests#new_tab\",\n \"The State of Cybersecurity in 2025: Data-Driven Insights from Over 50,000 NodeZero® Pentests\": \"https://www.horizon3.ai/downloads/research/annual-insights-report-the-state-of-cybersecurity-in-2025/\"\n },\n \"Malwarebytes\": {\n \"Security expert Troy Hunt hit by phishing attack\": \"https://www.malwarebytes.com/blog/news/2025/03/security-expert-troy-hunt-hit-by-phishing-attack\",\n \"Booking.com phish uses fake CAPTCHAs to trick hotel staff into downloading malware\": \"https://www.malwarebytes.com/blog/news/2025/03/fake-booking-com-phish-uses-fake-captchas-to-trick-hotel-staff-into-downloading-malware\",\n \"DeepSeek users targeted with fake sponsored Google ads that deliver malware\": \"https://www.malwarebytes.com/blog/news/2025/03/deepseek-users-targeted-with-fake-sponsored-google-ads-that-deliver-malware\"\n },\n \"Project Zero\": {\n \"Blasting Past Webp\": \"https://googleprojectzero.blogspot.com/2025/03/blasting-past-webp.html\"\n },\n \"Malware-Traffic-Analysis.net - Blog Entries\": {\n \"2025-03-26: SmartApeSG traffic for fake browser update leads to NetSupport RAT and StealC\": \"https://www.malware-traffic-analysis.net/2025/03/26/index.html\"\n },\n \"Exploit-DB.com RSS Feed\": {\n \"[local] NVIDIA Container Toolkit 1.16.1 - Time-of-check Time-of-Use (TOCTOU)\": \"https://www.exploit-db.com/exploits/52095\"\n },\n \"Reverse Engineering\": {\n \"MCP Server for IDA Pro\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jkd7j9/mcp_server_for_ida_pro/\",\n \"Llama's Paradox - Delving deep into Llama.cpp and exploiting Llama.cpp's Heap Maze, from Heap-Overflow to Remote-Code Execution\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jkauzw/llamas_paradox_delving_deep_into_llamacpp_and/\",\n \"eDBG: Unleash Android Debugging with eBPF, Defying Anti-Debugging Barriers\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jkiar1/edbg_unleash_android_debugging_with_ebpf_defying/\",\n \"Inside Windows' Default Browser Protection\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jjzjya/inside_windows_default_browser_protection/\",\n \"Evil CrackMe: Xtreme difficulty\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jk19dc/evil_crackme_xtreme_difficulty/\"\n },\n \"Wallarm\": {\n \"AI Agents and API Security: The Hidden Risks Lurking in Your Business Logic\": \"https://lab.wallarm.com/ai-agents-api-security-hidden-risks-business-logic/\"\n },\n \"text/plain\": {\n \"Spring Break\": \"https://textslashplain.com/2025/03/26/spring-break/\"\n },\n \"Security Blog | Praetorian\": {\n \"CodeQLEAKED – Public Secrets Exposure Leads to Supply Chain Attack on GitHub CodeQL\": \"https://www.praetorian.com/blog/codeqleaked-public-secrets-exposure-leads-to-supply-chain-attack-on-github-codeql/\"\n },\n \"SpiderLabs Blog\": {\n \"2025 Trustwave Risk Radar Report: Healthcare Sector: Key Risks and Defensive Measures\": \"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/2025-trustwave-risk-radar-report-healthcare-sector-key-risks-and-defensive-measures/\"\n },\n \"Twitter @James Kettle\": {\n \"Just submitted my talk proposal to Black Hat USA! This research was an especially wild ride and is causing some full spectrum chaos. Can't wait to sha...\": \"https://x.com/albinowax/status/1904881491840057852\"\n },\n \"Shostack & Friends Blog\": {\n \"Introducing the DEF CON 32 Hackers' Almanack\": \"https://shostack.org/blog/def-con-almanack/\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"FreeBuf 早报 | Chrome零日漏洞遭利用；新Windows零日漏洞泄露NTLM哈希值\": \"https://www.freebuf.com/news/425795.html\",\n \"Kubernetes ：k8s一主两从集群搭建—实现全纪录\": \"https://www.freebuf.com/articles/container/418863.html\",\n \"Kubernetes HPA 实战：Pod水平自动伸缩—实现全纪录\": \"https://www.freebuf.com/articles/container/418864.html\",\n \"Ant Design 的 CSS-in-JS 实现与最佳实践\": \"https://www.freebuf.com/articles/others-articles/419315.html\",\n \"加密货币盗窃案主犯\\\"Wiz\\\"落网 涉案金额达2.43亿美元\": \"https://www.freebuf.com/news/425807.html\"\n },\n \"安全牛\": {\n \"AI 融入软件供应链，安全实践正在重新定义\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135800&idx=1&sn=2808ac8c44e274c360b52e2ac586fff6&chksm=bd15afeb8a6226fdd799989c7c90d13dd282f77a331063e3ddd29c8f2152055399218f1ce027&scene=58&subscene=0#rd\",\n \"中消协提示：谨防“免密支付”盗刷漏洞；Kubernetes“噩梦”：Ingress NGINX控制器漏洞威胁6500个集群|牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135800&idx=2&sn=2d44a7244307ff61986d8b4e8a871ec6&chksm=bd15afeb8a6226fddedd8869139a1fb4e0052c0c4142a3f400c67c2ae9395e4a47bd901ef458&scene=58&subscene=0#rd\"\n },\n \"黑海洋 - Wiki\": {\n \"中国蚁剑之反制上线CS\": \"https://blog.upx8.com/4710\",\n \"Telegram接入DeepSeek\": \"https://blog.upx8.com/4709\",\n \"大模型微调数据集哪里找?\": \"https://blog.upx8.com/4707\",\n \"知乎直答改版增加个人知识库支持等重要功能\": \"https://blog.upx8.com/4706\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"比亚迪 2024 年销售收入超过特斯拉\": \"https://www.solidot.org/story?sid=80892\",\n \"火星发现长链有机分子\": \"https://www.solidot.org/story?sid=80891\",\n \"年轻一代的消费者更爱内容创作者而非传统电视电影\": \"https://www.solidot.org/story?sid=80889\",\n \"近半加拿大家庭完全停止消费有线电视\": \"https://www.solidot.org/story?sid=80888\",\n \"Infinite Reality 以 2.07 亿美元收购 Napster\": \"https://www.solidot.org/story?sid=80887\",\n \"H5N1 禽流感在英国传播到绵羊\": \"https://www.solidot.org/story?sid=80886\",\n \"火星东半球被认为蕴含丰富的冰\": \"https://www.solidot.org/story?sid=80885\",\n \"交通噪音会触发鸟类的路怒症\": \"https://www.solidot.org/story?sid=80884\",\n \"东京法庭下令解散统一教会\": \"https://www.solidot.org/story?sid=80883\",\n \"Game Informer 杂志复活\": \"https://www.solidot.org/story?sid=80882\"\n },\n \"腾讯玄武实验室\": {\n \"每日安全动态推送(25/3/26)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960057&idx=1&sn=c22617f8da987a4697f32034a91f430b&chksm=8baed266bcd95b70583b959815c26c920fa0f6de29c35421d03b99c42843ff80fb566eb11963&scene=58&subscene=0#rd\"\n },\n \"安全分析与研究\": {\n \"RansomHub勒索病毒黑客组织Betruger后门样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491251&idx=1&sn=2b8f1040a0a823c78f8716b81f42cc1a&chksm=902fb19ba758388d1ef74d4a40dc8e50f9a90820f50da5133e55d78afb9e6e9e01a9118f6af7&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"用户态视角理解内核ROP利用：快速从shell到root的进阶\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591109&idx=1&sn=5f837ef004d759dc9732db72c9a88028&chksm=b18c2f0f86fba6190cd56f9020a99f3ec4a43f2d489aaa096b7383973e48944127aa805f382c&scene=58&subscene=0#rd\",\n \"人脸识别技术应用迎来 “紧箍咒”，《安全管理办法》6月1日正式施行\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591109&idx=2&sn=5103d5cab38d73c0316f32cfc492163f&chksm=b18c2f0f86fba619aa6b46e1d4d6b2259491c2c80aaaf97f8add80d85c352c6f1f0e77addc19&scene=58&subscene=0#rd\",\n \"本周更新啦！【2025春季班】看雪安卓高级研修班（月薪一万计划）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591109&idx=3&sn=118a582a77f268f5c7ba69d71d5ed28d&chksm=b18c2f0f86fba61941a4381b3c9fe6ad0328e8a591e9a811f6c35150ce7cdf32c8f82dbe1ba5&scene=58&subscene=0#rd\"\n },\n \"微步在线研究响应中心\": {\n \"在野！谷歌Chrome沙箱逃逸漏洞， 被APT高度武器化\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507736&idx=1&sn=1b6ad4565d22c8799d1f26db65dc05bd&chksm=cfcabc0cf8bd351ad950bbfe57e9cb4bcde555d02d83cb3bece5acd72d9fb05d08f9e647b9a7&scene=58&subscene=0#rd\"\n },\n \"HackerNews\": {\n \"美国联邦调查局警告：当心免费在线文档转换工具\": \"https://hackernews.cc/archives/58049\",\n \"Broadcom 警告 VMware Windows 工具存在身份验证绕过漏洞\": \"https://hackernews.cc/archives/58046\"\n },\n \"丁爸 情报分析师的工具箱\": {\n \"【工具】文章内容如何变成流程图\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651149535&idx=1&sn=04724f40e87729dca82637c5953cd576&chksm=f1af23e5c6d8aaf36b865f10cf42eea91b287a3266415a0d5d11493575d9bb8c951c27558191&scene=58&subscene=0#rd\"\n },\n \"长亭安全应急响应中心\": {\n \"【已复现】Ingress NGINX Controller 远程代码执行漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492754&idx=1&sn=9f437f4b0b3d4edced726f996430121a&chksm=96f7fbffa18072e9a669fdc2a0a68f41899e3e1bb28780574e8a9d52db2f65c673c19ae2fa98&scene=58&subscene=0#rd\"\n },\n \"安全客\": {\n \"本地部署AI信息安全框架：保障AI系统安全的关键举措\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788227&idx=1&sn=53a06416038a2da77b05fc7362453e3e&chksm=8893bf2cbfe4363aa888e8d21f387c0979b3795d43682cbae0d82122497519848a049fecb6b5&scene=58&subscene=0#rd\"\n },\n \"吾爱破解论坛\": {\n \"IDA 9.1 & IDA 8.5 算法分析\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651142083&idx=1&sn=1fb2b734c134f9f16c9014f63c456578&chksm=bd50a7978a272e81c8e751012ef5e111d2ed5f468bd8e25c1fd19455f4e7f1dab1059e7cbc16&scene=58&subscene=0#rd\"\n },\n \"绿盟科技CERT\": {\n \"【处置手册】Next.js中间件权限绕过漏洞（CVE-2025-29927）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489140&idx=1&sn=005ca73eac41c7c2b4d4cfd7fdb27989&chksm=c2c6417ff5b1c869c97d858ad5662a530cbb866b0b9cc70f278f36020e2cbb915fb8b52bd8ae&scene=58&subscene=0#rd\"\n },\n \"虎符智库\": {\n \"史上最大收购重塑投资理念，网安企业价值或将整体面临重估？\": \"https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493091&idx=1&sn=3f5f94cc9efd0e0729480724821094c4&chksm=971d88e1a06a01f78a858a4397387cf5f1c971f123837093aefb7cb6c9f9d6af3c194e103b34&scene=58&subscene=0#rd\"\n },\n \"奇安信 CERT\": {\n \"【已发现在野利用】Google Chrome沙箱逃逸漏洞(CVE-2025-2783)安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503212&idx=1&sn=0b14bc32a6c2846c590bae64986309cc&chksm=fe79e9f4c90e60e20bc345c610a1a75e79dca3b5c7fe389c1d8c5f06560d38051e7ca12d8378&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"微软安全如何做AI Agent？Security Copilot新增11款Agent解析\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514065&idx=1&sn=ee324ead02f0d56b0c613b92462f7e89&chksm=ebfaf0f1dc8d79e7ead50f8471ae52b2d8c9e153b54ed903d4de4d5c0987c28ff1e336a7d9ad&scene=58&subscene=0#rd\",\n \"工信部印发《工业互联网安全分类分级管理办法》\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514065&idx=2&sn=91a1c723e600f02c57146b5cc8153e3d&chksm=ebfaf0f1dc8d79e78bcc619366ec7192b9cd0aa5742017900dc6689a30500a81f839e0362c9a&scene=58&subscene=0#rd\"\n },\n \"天御攻防实验室\": {\n \"NSA的零日漏洞使用策略\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486325&idx=1&sn=b007e2a16f16a368992e9a04becefb3d&chksm=fb04c81dcc73410b989b4cc614e455803aa48f6f21978d65381410aa3b32f39e2e8ec797b473&scene=58&subscene=0#rd\"\n },\n \"ChaMd5安全团队\": {\n \"NCTF 2024 writeup by Mini-Venom\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247512365&idx=1&sn=d8206ef2ca8a71b0fe3b46db8670300b&chksm=e89d99f5dfea10e338fce71acbccc9741d88762833e8aef0eda581aca85798f9ecff0824fae5&scene=58&subscene=0#rd\"\n },\n \"信安之路\": {\n \"京东云薅羊毛，新用户 49 一年云主机\": \"https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499839&idx=1&sn=b3883149d4d7fbf55ec1a014affb18ac&chksm=ec1df017db6a790105b74adcdb4e79088973db71195baf6fcd4fd4b273e44ba8cb09e8b85e54&scene=58&subscene=0#rd\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 阅读推荐 2025-03-26 电子邮件也能用来走私？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499940&idx=1&sn=4306723a4da6f037c97c2dff446cd24e&chksm=c063ee7df714676b8c32c62a8ea23a70ec286f97371a2edcb51b3703d78b24c7d73d22b63b10&scene=58&subscene=0#rd\"\n },\n \"中国信息安全\": {\n \"通知 | 《工业互联网安全分类分级管理办法》全文公布\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664239089&idx=1&sn=9691d200b749a3bfa415fc843e2122ac&chksm=8b580d08bc2f841e9269f7babdf9f138d5c5b5da0b01c9b907758b7e3d9dd1c52fd51b83cfd6&scene=58&subscene=0#rd\",\n \"刘烈宏：以高质量数据促进人工智能发展，国家数据局将开展四方面工作\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664239089&idx=2&sn=cadc4393be93c6ad6997653ae4709a8b&chksm=8b580d08bc2f841eb0bb908c930e745d1e98399906eca3697d44f180e2abc4b2e823725e0867&scene=58&subscene=0#rd\",\n \"发布 | 中国网络安全产业联盟发布《美情报机构针对全球移动智能终端实施的监听窃密活动》（附下载）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664239089&idx=3&sn=a5af84fa104cb686a3ef5598632421cb&chksm=8b580d08bc2f841e22739bf357abf8fd4fbcf478ba77dca78f85c9b2f1326eaba8753ce33f15&scene=58&subscene=0#rd\",\n \"外交部：敦促美方立即停止利用全球供应链实施恶意网络活动\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664239089&idx=4&sn=cc55be9203a8e3df3e4cc9954b531d4c&chksm=8b580d08bc2f841e8f0288370d3d0609b0e770a7a85c5a6cddcff804d462df53ab6b5628b3ea&scene=58&subscene=0#rd\",\n \"前沿 | 从DeepSeek看人工智能自主创新的战略价值\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664239089&idx=5&sn=c3167f184c11fd76338d0ff9edd8cb24&chksm=8b580d08bc2f841ec217a505e7c0b28ed6c6762bd44835d6db91ba2cb77dc3b4ee50b8637b5e&scene=58&subscene=0#rd\",\n \"中消协提示：警惕手机“免密支付”风险\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664239089&idx=6&sn=95202c48117d73a7eeaca712421883a1&chksm=8b580d08bc2f841ed87489fa7560ed5c42846014f8950dc7a7a950f2bd8144f9a5fc98cc3d47&scene=58&subscene=0#rd\",\n \"一图读懂 | 《工业互联网安全分类分级管理办法》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664239089&idx=7&sn=b478699dfa4e864e65df116d00c5a36b&chksm=8b580d08bc2f841e52ef9dff2d4acae180a9986f4bf56e729a6f466a3b0799559a817535fd7b&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"【一图读懂】工信部最新《工业互联网安全分类分级管理办法》\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538305&idx=1&sn=1d27dd3e56cf9b6f5d65a4f49e4e5c51&chksm=c144243cf633ad2a0ea9509e92b94f00bed31243fac151d0816ef6d3919eac4e7888280f33ae&scene=58&subscene=0#rd\",\n \"【行业动态】奇安投资完成新一期产业基金设立，继续布局深耕网信安全赛道\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538305&idx=2&sn=2a31bf50e386ac617703eb89066e60d0&chksm=c144243cf633ad2a8b97bec4d4258c0410541b50f1fad90abbeb8bfe32edf71f657a879ff810&scene=58&subscene=0#rd\"\n },\n \"绿盟科技技术博客\": {\n \"Next.js中间件权限绕过漏洞 （CVE-2025-29927）\": \"https://blog.nsfocus.net/cve-2025-29927-2/\"\n },\n \"极客公园\": {\n \"全球狂卖 427 万辆，比亚迪给友商上了一堂「成本课」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653076455&idx=1&sn=55c017ea4546ada74b4f25237d1ea39c&chksm=7e57c65149204f47e9fa9ce26ba26895b95d4ed9642502e1855746aa892230ec50cbcd814757&scene=58&subscene=0#rd\",\n \"谷歌发布新版 Gemini，横扫各大榜单；苹果订购 10 亿美元英伟达 AI系统；雷军回武大拍摄 YU7 宣传片 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653076453&idx=1&sn=f1e48695c26bb45c548272c4614a5ab2&chksm=7e57c65349204f454e80c49d85484874a133d3c1deb430762198fb47bbf874f3e5a4b4900a96&scene=58&subscene=0#rd\"\n },\n \"补天平台\": {\n \"Offer直通、Switch大奖挑战赛！补天沙龙西安站亮点抢先看！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247508034&idx=1&sn=b9525fff6d6d3e8707fe8eae0fe44ac1&chksm=eaf9e80edd8e6118427dd8f830f548d80a710c25e7ba6818e2101ddedc3e64b59ad1716080fd&scene=58&subscene=0#rd\"\n },\n \"电子物证\": {\n \"【案例】数字取证案例\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048376&idx=1&sn=c72ac193b2b57c553ac1503c86ae0d37&chksm=80d08649b7a70f5f2483dc4f23e7f3c87d93a6ff594cb6a35045a319de59dd80409ff4e7bde9&scene=58&subscene=0#rd\",\n \"【AI“偷”走你的声音怎么办？】\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048376&idx=2&sn=fa429d3dfae6b07f426d59d164b13213&chksm=80d08649b7a70f5fe335241c8bbc41a2a2f1d513fa93e456506b6a5a58bd3cb9ec07bdae4523&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】谷歌Chrome在线安装程序出现错误导致Windows 10/11安装都提示无法运行\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068734&idx=1&sn=aebdb296528675a6a493184d27a934ca&chksm=f36e773ec419fe28fa8d03fdfea57ab1556dda3f7a8d0d625b6a4aef030ba55ae262e89df6dc&scene=58&subscene=0#rd\",\n \"【安全圈】Cloudflare推出AI迷宫用于应对AI爬虫，以AI治AI师夷长技以制夷\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068734&idx=2&sn=6a5d6235acc1f51c79a8fb7ef27228c1&chksm=f36e773ec419fe281ce1a3a7c114d20a85e1b76d31c6c1b261e0854ad610619755f7fe5c1647&scene=58&subscene=0#rd\",\n \"【安全圈】Cloudflare R2服务中断事件：密码轮换错误引发全球故障\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068734&idx=3&sn=220c79f57ed0b4b35447382b8a841b04&chksm=f36e773ec419fe28a09c50dd68223b0c7a7cedb8f1746b4f86eb074d84ba9d1f0b5296edd18b&scene=58&subscene=0#rd\",\n \"【安全圈】国际刑警“红牌行动”收获：非洲多国联手破获特大跨国网络犯罪集团\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068734&idx=4&sn=ff1d7e4d1ccc2fc3dcca73d0d047fd5e&chksm=f36e773ec419fe28f59e4c7b86398777905f27fe054d747f97bf9fb6f53aacbb5b4d2386cffe&scene=58&subscene=0#rd\"\n },\n \"天融信阿尔法实验室\": {\n \"【风险提示】天融信关于Vite任意文件读取漏洞(CVE-2025-30208)的风险提示\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496690&idx=1&sn=6010f3a0a91bb3e0546c20a0e004fdd1&chksm=ce96beccf9e137dac784e2601bb16241d8829eb676aae1a6aba6227f08cfdb300ab086d1a6fa&scene=58&subscene=0#rd\"\n },\n \"深信服千里目安全技术中心\": {\n \"Google Chrome 沙箱逃逸漏洞(CVE-2025-2783)\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524111&idx=1&sn=09d5d3dd317a20c1cec8733f787b4520&chksm=ce46141ff9319d09540d9b68bf6d65b4f01b6eb9fe895c471ba92960c8eb1c46e2002d023c4a&scene=58&subscene=0#rd\"\n },\n \"Beacon Tower Lab\": {\n \"漏洞预警 | Next.js 中间件鉴权绕过漏洞 (CVE-2025-29927)\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487069&idx=1&sn=d79bf576f44253634e79f89adf4dc837&chksm=c22296a4f5551fb206bdfc5cd48995e8e6e2de51e7c02bbf332ab359d163bc98802ad54824a2&scene=58&subscene=0#rd\"\n },\n \"字节跳动安全中心\": {\n \"PPT来了 | AI攻防安全实践干货\": \"https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494652&idx=1&sn=907d06905877e4c7a46b26f6ea72ccfc&chksm=fa9d10aacdea99bc673fa64a73b33f14eb69912db5e4381336536a3ac318c84570fd4cea790f&scene=58&subscene=0#rd\"\n },\n \"默安科技\": {\n \"默安科技矩子AI驾驶舱重磅发布 开启AI原生安全运营新时代\": \"https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247500615&idx=1&sn=f78d2c4a96e73be2a5676885fbbe09ce&chksm=e93b3465de4cbd737962004397991c696082e78e5d8a4e23150b1344a6b69a85ba357a40c859&scene=58&subscene=0#rd\"\n },\n \"慢雾科技\": {\n \"慢雾：深入探讨 EIP-7702 与最佳实践\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501575&idx=1&sn=41fc35103ea1edaff8c8ee077b09c121&chksm=fddeb980caa930968352cff8880a5710b1bf9c7eabc6b4d3e4cce9a83e3d1a20eff4e579305c&scene=58&subscene=0#rd\"\n },\n \"国家互联网应急中心CNCERT\": {\n \"网络安全信息与动态周报2025年第12期（3月17日-3月23日）\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499723&idx=1&sn=2b1048e223720c6fdd34e5611f7a4cb4&chksm=973acca9a04d45bfa537d251642d4c2de677e61ac125cdf1ec0ec31a109eecc08e99e905d29f&scene=58&subscene=0#rd\"\n },\n \"GobySec\": {\n \"Vite开发服务器漏洞预警！启动即裸奔,低门槛攻击可致系统数据泄露\": \"https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545731&idx=1&sn=e6c11f0be3ece715ea375cd373086b13&chksm=eb84d823dcf3513522edb395d85ad8adb6f946eeaf5c65e058109cceeafaeea1f795e60123ff&scene=58&subscene=0#rd\"\n },\n \"ICT Security Magazine\": {\n \"IMSI Catcher: cos’è e come funziona\": \"https://www.ictsecuritymagazine.com/articoli/imsi-catcher/\"\n },\n \"代码卫士\": {\n \"博通：注意 Vmware Windows Tools 中的认证绕过漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522590&idx=1&sn=ee578730b1733ca26a369770366c3b00&chksm=ea94a874dde321621c61902e3f2a06600d7b26506c458661c5ca08a93507ffca99fe28a26c7d&scene=58&subscene=0#rd\",\n \"谷歌紧急修复已遭利用的0day\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522590&idx=2&sn=ee575193ee5fe0995b313a95a46890ee&chksm=ea94a874dde32162af6eae13f89ada50332950da90c99d60c106b45836f1993c80d8cd996cbe&scene=58&subscene=0#rd\"\n },\n \"Securityinfo.it\": {\n \"Windows 11: l’ultimo update interrompe il ripristino del sistema con Veeam Recovery Media\": \"https://www.securityinfo.it/2025/03/26/windows-11-lultimo-update-interrompe-il-ripristino-del-sistema-con-veeam-recovery-media/?utm_source=rss&utm_medium=rss&utm_campaign=windows-11-lultimo-update-interrompe-il-ripristino-del-sistema-con-veeam-recovery-media\"\n },\n \"DataCon大数据安全分析竞赛\": {\n \"DataCon24漏洞赛道冠军分享：vuln_wp——大模型赋能的漏洞自动化分析全解析\": \"https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247489217&idx=1&sn=a32a6e0c14c025e0663591226b8b83f9&chksm=fe5d0e41c92a8757dce02d28d059dcdd0d58d648be6c7dc516a67e9eac79119f102ce889c15e&scene=58&subscene=0#rd\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Oracle customers confirm data stolen in alleged cloud breach is valid\": \"https://www.bleepingcomputer.com/news/security/oracle-customers-confirm-data-stolen-in-alleged-cloud-breach-is-valid/\",\n \"StreamElements discloses third-party data breach after hacker leaks data\": \"https://www.bleepingcomputer.com/news/security/streamelements-discloses-third-party-data-breach-after-hacker-leaks-data/\",\n \"Intel chiefs again say they did not share classified info amid new questions on war chats\": \"https://therecord.media/intel-chiefs-again-say-they-did-not-share-classified-info-house-hearing\",\n \"New 'Atlantis AIO' automates credential stuffing on 140 services\": \"https://www.bleepingcomputer.com/news/security/new-atlantis-aio-automates-credential-stuffing-on-140-services/\",\n \"Chinese ‘FamousSparrow’ hackers back from the dead and targeting North America, researchers say\": \"https://therecord.media/china-famous-sparrow-back-eset\",\n \"New York's cyber chief on keeping cities and states safe from cyberattacks\": \"https://therecord.media/new-york-cyber-chief-on-keeping-cities-states-safe\",\n \"Smishing a tema INPS, documenti rubati in vendita nel dark web: quali conseguenze\": \"https://www.cybersecurity360.it/news/smishing-a-tema-inps-documenti-rubati-in-vendita-nel-dark-web-quali-conseguenze/\",\n \"Tagli alla cyber security negli Usa: l’impatto delle nuove politiche di Trump\": \"https://www.cybersecurity360.it/cybersecurity-nazionale/tagli-alla-cyber-security-negli-usa-limpatto-delle-nuove-politiche-di-trump/\",\n \"Claude is testing ChatGPT-like Deep Research feature Compass\": \"https://www.bleepingcomputer.com/news/artificial-intelligence/claude-is-testing-chatgpt-like-deep-research-feature-compass/\",\n \"The 7 technology trends that could replace passwords\": \"https://www.bleepingcomputer.com/news/security/the-7-technology-trends-that-could-replace-passwords/\",\n \"Austria uncovers alleged Russian disinformation campaign spreading lies about Ukraine\": \"https://therecord.media/austria-uncovers-russian-disinfo-campaign\",\n \"Defense contractor to pay $4.6 million over third-party provider’s security weakness\": \"https://therecord.media/defense-contractor-to-pay-millions-over-cyber-practices\",\n \"Microsoft fixes printing issues caused by January Windows updates\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-printing-issues-caused-by-january-windows-updates/\",\n \"Google ha rimosso 180 app dal Play Store, per difenderci dalla truffa “Vapor”: di cosa si tratta\": \"https://www.cybersecurity360.it/news/google-ha-rimosso-180-app-dal-play-store-per-difenderci-dalla-truffa-vapor-di-cosa-si-tratta/\",\n \"RedCurl cyberspies create ransomware to encrypt Hyper-V servers\": \"https://www.bleepingcomputer.com/news/security/redcurl-cyberspies-create-ransomware-to-encrypt-hyper-v-servers/\",\n \"Windows 11: l’ultimo update interrompe il ripristino del sistema con Veeam Recovery Media\": \"https://www.securityinfo.it/2025/03/26/windows-11-lultimo-update-interrompe-il-ripristino-del-sistema-con-veeam-recovery-media/\",\n \"New npm attack poisons local packages with backdoors\": \"https://www.bleepingcomputer.com/news/security/new-npm-attack-poisons-local-packages-with-backdoors/\",\n \"Microsoft: Recent Windows updates cause Remote Desktop issues\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-recent-windows-updates-cause-remote-desktop-issues/\",\n \"UK warns of emerging threat from ‘sadistic’ online ‘Com networks’ of teenage boys\": \"https://therecord.media/uk-threat-com-sadistic-teenager\",\n \"La resilienza cyber nel mondo finanziario nel 2024\": \"https://www.cybersecurity360.it/outlook/la-resilienza-cyber-nel-mondo-finanziario-nel-2024/\",\n \"La Cina progredisce sui chip e sfida le restrizioni\": \"https://www.guerredirete.it/la-cina-progredisce-sui-chip-e-sfida-le-restrizioni/\",\n \"Dati sanitari per propaganda elettorale: il Garante ribadisce l’illiceità del trattamento\": \"https://www.cybersecurity360.it/legal/dati-sanitari-per-propaganda-elettorale-il-garante-ribadisce-lilliceita-deltrattamento/\",\n \"Unmasking the Classiscam in Central Asia\": \"https://www.group-ib.com/blog/unmasking-the-classiscam-in-central-asia/\",\n \"Windows 11 update breaks Veeam recovery, causes connection errors\": \"https://www.bleepingcomputer.com/news/microsoft/windows-11-update-breaks-veeam-recovery-causes-connection-errors/\",\n \"Be Smart, Work Less\": \"https://bfore.ai/a-founders-pov-be-smart-work-less/\",\n \"Google fixes Chrome zero-day exploited in espionage campaign\": \"https://www.bleepingcomputer.com/news/security/google-fixes-chrome-zero-day-exploited-in-espionage-campaign/\"\n },\n \"Posts By SpecterOps Team Members - Medium\": {\n \"Do You Own Your Permissions, or Do Your Permissions Own You?\": \"https://posts.specterops.io/do-you-own-your-permissions-or-do-your-permissions-own-you-c829a91f5e45?source=rss----f05f8696e3cc---4\"\n },\n \"360数字安全\": {\n \"360与广旅集团达成合作 共建两大中心！\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580114&idx=1&sn=aa554f928335541f44d0283a0beede0d&chksm=9f8d29daa8faa0cc53948e2ae8b04bfee23fe95565b16ce491ffb2e486a92d0c3cc81c83afed&scene=58&subscene=0#rd\",\n \"上海市普陀区政协调研360 政企协同共筑数字安全产业新高地\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580114&idx=2&sn=980cd6b8c1c705220567c5a01ebfddfe&chksm=9f8d29daa8faa0ccfe5bc98d6756fe04252f3e2344f4207e33efc1f31d6eae432068dab9d26a&scene=58&subscene=0#rd\"\n },\n \"The Grey Corner\": {\n \"GCP Service Command and Control HTTP traffic forwarding\": \"/2025/03/26/gcp-service-C2-forwarding.html\"\n },\n \"DARKNAVY\": {\n \"攻防速写｜我们拆了一台Starlink星链终端\": \"https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247488049&idx=1&sn=ed04d1fa11d49c8f9bae235320afe492&chksm=c1f456f9f683dfef80084ece3e5d886b5d3c9baaa50b71e7b35448b0347daaea5ffecafb466c&scene=58&subscene=0#rd\"\n },\n \"Schneier on Security\": {\n \"AI Data Poisoning\": \"https://www.schneier.com/blog/archives/2025/03/ai-data-poisoning.html\"\n },\n \"The Hacker News\": {\n \"New SparrowDoor Backdoor Variants Found in Attacks on U.S. and Mexican Organizations\": \"https://thehackernews.com/2025/03/new-sparrowdoor-backdoor-variants-found.html\",\n \"EncryptHub Exploits Windows Zero-Day to Deploy Rhadamanthys and StealC Malware\": \"https://thehackernews.com/2025/03/encrypthub-exploits-windows-zero-day-to.html\",\n \"RedCurl Shifts from Espionage to Ransomware with First-Ever QWCrypt Deployment\": \"https://thehackernews.com/2025/03/redcurl-shifts-from-espionage-to.html\",\n \"Malicious npm Package Modifies Local 'ethers' Library to Launch Reverse Shell Attacks\": \"https://thehackernews.com/2025/03/malicious-npm-package-modifies-local.html\",\n \"Sparring in the Cyber Ring: Using Automated Pentesting to Build Resilience\": \"https://thehackernews.com/2025/03/sparring-in-cyber-ring-using-automated.html\",\n \"Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks\": \"https://thehackernews.com/2025/03/zero-day-alert-google-releases-chrome.html\",\n \"How PAM Mitigates Insider Threats: Preventing Data Breaches, Privilege Misuse, and More\": \"https://thehackernews.com/2025/03/how-pam-mitigates-insider-threats.html\",\n \"Hackers Using E-Crime Tool Atlantis AIO for Credential Stuffing on 140+ Platforms\": \"https://thehackernews.com/2025/03/hackers-using-e-crime-tool-atlantis-aio.html\",\n \"New Security Flaws Found in VMware Tools and CrushFTP — High Risk, No Workaround\": \"https://thehackernews.com/2025/03/new-security-flaws-found-in-vmware.html\"\n },\n \"迪哥讲事\": {\n \"Src实战-垂直越权任意添加用户\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497323&idx=1&sn=eeb54bafcf04ab6832e57b46b1e43ff4&chksm=e8a5fc08dfd2751e525246e68c87385df72c6d08d9011c9f4050ffdbd43623bc9799c4e62919&scene=58&subscene=0#rd\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"ISC Stormcast For Wednesday, March 26th, 2025 https://isc.sans.edu/podcastdetail/9380, (Wed, Mar 26th)\": \"https://isc.sans.edu/diary/rss/31802\",\n \"[Guest Diary] Leveraging CNNs and Entropy-Based Feature Selection to Identify Potential Malware Artifacts of Interest, (Wed, Mar 26th)\": \"https://isc.sans.edu/diary/rss/31790\"\n },\n \"嘶吼专业版\": {\n \"SpyX 数据泄露，涉及近 200 万用户隐私\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581673&idx=1&sn=d4569671f9b94c30bd66d5612d60d8a6&chksm=e9146fd3de63e6c500443c8c6df413c6cdd11d0ce3ba1b69340cf127b09e568b10410583914f&scene=58&subscene=0#rd\",\n \"一图读懂《工业互联网安全分类分级管理办法》\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581673&idx=2&sn=ed293e8251b833d3bbef882371e3898e&chksm=e9146fd3de63e6c5fb3a64b7df9afed8530275187e10aef67411f4cc5723a11b34185bbfe316&scene=58&subscene=0#rd\"\n },\n \"Deep Web\": {\n \"Links\": \"https://www.reddit.com/r/deepweb/comments/1jkh6bq/links/\",\n \"Crypto question\": \"https://www.reddit.com/r/deepweb/comments/1jkbrlb/crypto_question/\"\n },\n \"RedTeam\": {\n \"安全研究团队的价值\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484377&idx=1&sn=52ec181039e185d4206b4f6ca1ee059d&chksm=c006cb29f771423f0996d63587d397f3975fab6038285adb5c07c41f63a4c73decc28c037c36&scene=58&subscene=0#rd\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Built a simple SAML testing tool - free, no signup required\": \"https://www.reddit.com/r/netsecstudents/comments/1jk8jgm/built_a_simple_saml_testing_tool_free_no_signup/\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Behind the Schenes of a Chinese Phishing-As-A-Service: Lucid\": \"https://www.reddit.com/r/netsec/comments/1jkiitu/behind_the_schenes_of_a_chinese/\",\n \"CodeQLEAKED – Public Secrets Exposure Leads to Potential Supply Chain Attack on GitHub CodeQL\": \"https://www.reddit.com/r/netsec/comments/1jkfjub/codeqleaked_public_secrets_exposure_leads_to/\",\n \"Llama's Paradox - Delving deep into Llama.cpp and exploiting Llama.cpp's Heap Maze, from Heap-Overflow to Remote-Code Execution\": \"https://www.reddit.com/r/netsec/comments/1jkg6po/llamas_paradox_delving_deep_into_llamacpp_and/\",\n \"Next.js and the corrupt middleware: the authorizing artifact\": \"https://www.reddit.com/r/netsec/comments/1jk0js7/nextjs_and_the_corrupt_middleware_the_authorizing/\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"\\\"vibe coding\\\" website same.dev was hacked and leaked some interesting user prompt data.\": \"https://www.reddit.com/r/blackhat/comments/1jkny6y/vibe_coding_website_samedev_was_hacked_and_leaked/\",\n \"Question/asking for help\": \"https://www.reddit.com/r/blackhat/comments/1jk4r4k/questionasking_for_help/\",\n \"Seeking Doxbin and telegram help\": \"https://www.reddit.com/r/blackhat/comments/1jk7hfc/seeking_doxbin_and_telegram_help/\",\n \"Does “Inspect Element” show passwords?\": \"https://www.reddit.com/r/blackhat/comments/1jk31d5/does_inspect_element_show_passwords/\"\n },\n \"Information Security\": {\n \"Motorola moto g play 2024 Smartphone, Android 14 Operating System, Termux, And cryptsetup: Linux Unified Key Setup (LUKS) Encryption/Decryption And The ext4 Filesystem Without Using root Access, Without Using proot-distro, And Without Using QEMU\": \"https://www.reddit.com/r/Information_Security/comments/1jklduz/motorola_moto_g_play_2024_smartphone_android_14/\"\n },\n \"Deeplinks\": {\n \"A New Tool to Detect Cellular Spying | EFFector 37.3\": \"https://www.eff.org/deeplinks/2025/03/new-tool-detect-cellular-spying-effector-373\",\n \"How to Delete Your 23andMe Data\": \"https://www.eff.org/deeplinks/2025/03/how-delete-your-23andme-data\"\n },\n \"Computer Forensics\": {\n \"Tools need to stop offering cloud collection sources if it doesn't work. What actually works for social media preservation/searching?\": \"https://www.reddit.com/r/computerforensics/comments/1jkpd12/tools_need_to_stop_offering_cloud_collection/\",\n \"New Purview\": \"https://www.reddit.com/r/computerforensics/comments/1jkjtqn/new_purview/\"\n },\n \"Security Affairs\": {\n \"New ReaderUpdate malware variants target macOS users\": \"https://securityaffairs.com/175891/malware/readerupdate-malware-variants-targets-macos.html\",\n \"BlackLock Ransomware Targeted by Cybersecurity Firm\": \"https://securityaffairs.com/175877/cyber-crime/blacklock-ransomware-targeted-by-cybersecurity-firm.html\",\n \"Google fixed the first actively exploited Chrome zero-day since the start of the year\": \"https://securityaffairs.com/175862/hacking/google-fixed-first-chrome-zero-day-in-2025.html\",\n \"Authentication bypass CVE-2025-22230 impacts VMware Windows Tools\": \"https://securityaffairs.com/175858/security/authentication-bypass-cve-2025-22230-in-vmware-tools-for-windows.html\"\n },\n \"dotNet安全矩阵\": {\n \"对抗逆向分析，通过 Sharp4NetVbsObfuscator 混淆 .NET 程序集和 VBS 脚本\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499267&idx=1&sn=faec3a94f85046337648c32b09f51ef3&chksm=fa5950eecd2ed9f8f5da8275611c561389aba8fdf2480d917698f44aceff1428e1a03cacd391&scene=58&subscene=0#rd\",\n \"新书速递 |《.NET安全攻防指南》上下册重磅来袭！\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499267&idx=2&sn=1462cf23c9a8568cc80705d2d3a1a69e&chksm=fa5950eecd2ed9f8c2caf6814f80d7ac0c5ed0ae176335adba61cd20bffbdc81cf9c36b92c01&scene=58&subscene=0#rd\",\n \"国内最专业、最全面的 [ .NET 代码审计 ] 体系化学习交流社区\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499267&idx=3&sn=888ba4c939a2dc61e94521c29164a287&chksm=fa5950eecd2ed9f8572daf9da0277bf97574de9d720961fa8fb4f088d60885204828b7ea62cc&scene=58&subscene=0#rd\"\n },\n \"Your Open Hacker Community\": {\n \"I finally learned some SSH basics!\": \"https://www.reddit.com/r/HowToHack/comments/1jkpqdj/i_finally_learned_some_ssh_basics/\",\n \"Hacking with little information\": \"https://www.reddit.com/r/HowToHack/comments/1jkmkhs/hacking_with_little_information/\",\n \"Penetration test on ip cctv\": \"https://www.reddit.com/r/HowToHack/comments/1jkjuqv/penetration_test_on_ip_cctv/\",\n \"Linux basics for hackers\": \"https://www.reddit.com/r/HowToHack/comments/1jk29cs/linux_basics_for_hackers/\",\n \"can i have some help in cs2 hacking?\": \"https://www.reddit.com/r/HowToHack/comments/1jkcfq5/can_i_have_some_help_in_cs2_hacking/\",\n \"Need help with SSL unpinning\": \"https://www.reddit.com/r/HowToHack/comments/1jkawy1/need_help_with_ssl_unpinning/\",\n \"Ethical cheating?\": \"https://www.reddit.com/r/HowToHack/comments/1jk7qbd/ethical_cheating/\"\n },\n \"字节跳动技术团队\": {\n \"重构智能设备管理范式：火山引擎端智能解决方案上新，多重 AI 服务即刻享用！\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513998&idx=1&sn=2b108c61604282ae5a61db4d11105f46&chksm=e9d37c6cdea4f57a0141402555f221a9b4c8bb3c304102c466c21d22c60c6a45791b19051c5a&scene=58&subscene=0#rd\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"The Pace of Investments Requires Better Risk Management, Boards Challenged, & More - BSW #388\": \"http://sites.libsyn.com/18678/the-pace-of-investments-requires-better-risk-management-boards-challenged-more-bsw-388\"\n }\n}"}, "fc731ddec3522924240aca4ed33bec45bb52f51b": {"t": 1785772249.8343682, "n": 50620, "h": "1f75d48a985ae3b4", "c": "{\n \"安全客-有思想的安全新媒体\": {\n \"御辰：论攻击面管理在高校信息化建设中的重要性\": \"https://www.anquanke.com/post/id/302908\",\n \"PolarDB分布式版V2.0：安全可靠的集中分布式一体化数据库管理软件\": \"https://www.anquanke.com/post/id/303161\",\n \"中科固源Cybellum 在智能网联汽车安全领域的应用与实操——解锁汽车安全新能力\": \"https://www.anquanke.com/post/id/305497\",\n \"开发者必备的安全利器：0day漏洞挖掘利器-模糊测试\": \"https://www.anquanke.com/post/id/305495\",\n \"深度剖析：用 Scapy 解读 TCP 握手挥手，详细实操步骤 + 序列号变化深度剖析\": \"https://www.anquanke.com/post/id/305581\",\n \"重磅！微软新型 AI 代理强势应对网络钓鱼、补丁修复及警报疲劳挑战\": \"https://www.anquanke.com/post/id/305507\",\n \"警惕！VMware Tools for Windows 漏洞可使攻击者绕过身份验证\": \"https://www.anquanke.com/post/id/305504\",\n \"紧急警报：Chrome 严重漏洞或致攻击者执行任意代码\": \"https://www.anquanke.com/post/id/305483\",\n \"WordPress 插件漏洞使超20万个网站面临代码执行攻击威胁\": \"https://www.anquanke.com/post/id/305467\",\n \"Ingress NGINX 现远程代码执行漏洞，攻击者或借此全面接管集群\": \"https://www.anquanke.com/post/id/305447\",\n \"本地部署AI信息安全框架：保障AI系统安全的关键举措\": \"https://www.anquanke.com/post/id/305420\",\n \"警惕！多阶段信息窃取型恶意软件 SnakeKeylogger 攻击个人与企业以窃取登录信息\": \"https://www.anquanke.com/post/id/305441\",\n \"黑客借浏览器扩展程序和合法工具传播恶意软件以绕过安全控制\": \"https://www.anquanke.com/post/id/305436\",\n \"警惕！Android 恶意软件攻击活动利用 .NET MAUI 逃避检测\": \"https://www.anquanke.com/post/id/305433\",\n \"新型网络钓鱼活动攻击 Mac 用户以窃取用户登录凭据\": \"https://www.anquanke.com/post/id/305431\",\n \"开发人员警惕！勒索软件FreeFix投毒供应链 致软件生态安全告急\": \"https://www.anquanke.com/post/id/305422\"\n },\n \"奇安信攻防社区\": {\n \"CVE-2024-25600 WordPress Bricks Builder远程代码执行漏洞分析\": \"https://forum.butian.net/share/4117\"\n },\n \"Tenable Blog\": {\n \"Who's Afraid of AI Risk in Cloud Environments?\": \"https://www.tenable.com/blog/whos-afraid-of-ai-risk-in-cloud-environments\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2025-03-26 Review\": \"http://www.sec-wiki.com/?2025-03-26\"\n },\n \"安全脉搏\": {\n \"ApoorvCTF Rust语言逆向实战\": \"https://www.secpulse.com/archives/205975.html\",\n \"路由器安全研究：D-Link DIR-823G v1.02 B05 复现与利用思路\": \"https://www.secpulse.com/archives/206007.html\"\n },\n \"Trustwave Blog\": {\n \"2025 Healthcare Cybersecurity Threats: Insights from the Trustwave Risk Radar Report\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/2025-healthcare-cybersecurity-threats-insights-from-the-trustwave-risk-radar-report/\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Wed Mar 26 16:10:26 UTC 2025\": \"https://github.com/trickest/cve/commit/b075b746211efc28e7e095663ec4017ddaa7d79c\"\n },\n \"Google Online Security Blog\": {\n \"Titan Security Keys now available in more countries\": \"http://security.googleblog.com/2025/03/titan-security-keys-now-available-in.html\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"Bypassing file upload filter using .htaccess file(CTF)\": \"https://infosecwriteups.com/bypassing-file-upload-filter-using-htaccess-file-ctf-ca06d7e9ebd7?source=rss----7b722bfd1b8d---4\",\n \"Pentesting for Biotech: Simulating a Cyberattack on Your Genomic Data\": \"https://infosecwriteups.com/pentesting-for-biotech-simulating-a-cyberattack-on-your-genomic-data-e056c170d055?source=rss----7b722bfd1b8d---4\",\n \"Next.js CVE-2025–29927: Tryhackme Writeup\": \"https://infosecwriteups.com/next-js-cve-2025-29927-tryhackme-writeup-68d5cc6859a3?source=rss----7b722bfd1b8d---4\",\n \"How Hackers Abuse XML-RPC to Launch Bruteforce and DDoS Attacks\": \"https://infosecwriteups.com/how-hackers-abuse-xml-rpc-to-launch-bruteforce-and-ddos-attacks-40be5b310960?source=rss----7b722bfd1b8d---4\",\n \"Intercept VulnLab| RBCD & Another word For ESC7\": \"https://infosecwriteups.com/intercept-vulnlab-rbcd-another-word-for-esc7-4fbd254b6006?source=rss----7b722bfd1b8d---4\",\n \"Cloud Jacking: How Simple Mistakes Are Spilling Your Data Across the Internet\": \"https://infosecwriteups.com/cloud-jacking-how-simple-mistakes-are-spilling-your-data-across-the-internet-7ecb33ffdc0a?source=rss----7b722bfd1b8d---4\"\n },\n \"Doonsec's feed\": {\n \"为什么越来越多的IT技术人员转行网络安全？\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247484314&idx=1&sn=c5379861f993b9068168d48d6addf56e\",\n \"vite 任意文件读取漏洞 CVE-2025-30208\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491303&idx=1&sn=7241c22dc3795d24d626afb4f0081efc\",\n \"网络防环协议STP、RSTP、MSTP全网最全对比\": \"https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247528906&idx=1&sn=1f76047310d125afee406541daa6a4cf\",\n \"【风险提示】天融信关于Vite任意文件读取漏洞(CVE-2025-30208)的风险提示\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496690&idx=1&sn=6010f3a0a91bb3e0546c20a0e004fdd1\",\n \"网络空间安全专业该如何自救、入门\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484885&idx=1&sn=b429ad2f1682538026c3aeda6671ffc0\",\n \"Burp靶场-HTTP走私请求\": \"https://mp.weixin.qq.com/s?__biz=Mzk1Nzk3MjA5Ng==&mid=2247484299&idx=1&sn=7aadfcfe66f9309023e19d0e3f279d72\",\n \"对DogsVsCats例子的调优模型训练过程\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDcxMDQzNA==&mid=2247489517&idx=1&sn=6b92f17d7256f3639285b6a6752f014a\",\n \"告别单点故障：Linux系统下实现高效的Bonding链路聚合\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTc5MjM4Nw==&mid=2457388171&idx=1&sn=6403bcdab4048004a3f8743b2ba164c5\",\n \"安全研究团队的价值\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484377&idx=1&sn=52ec181039e185d4206b4f6ca1ee059d\",\n \"【HTB】Cap靶机渗透\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247487143&idx=1&sn=a40e853750f4f12cf02eb8cd4f655130\",\n \"2025新蓝海市场！网络安全乙方企业商机观察之 《个人信息保护合规审计管理办法》落地实操+销售思路\": \"https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247539227&idx=1&sn=1ea36ea307ab2e46e021ac0019cc926f\",\n \"高危逻辑漏洞-Web3+Web2前端结合的ABI任意调用实现链上交易免gas\": \"https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486182&idx=1&sn=2add35c4bee30176cb7ea2ab9814d136\",\n \"【漏洞预警】Ingress NGINX Controller远程代码执行漏洞(CVE-2025-1974)\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489841&idx=1&sn=b68a9fe9310ef672f507eb4ac000b605\",\n \"T1016 - 系统网络配置发现\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483859&idx=1&sn=5f162dc0c6591786d4ce3461732db3a0\",\n \"【fscan插件】| 用gokrb5构建fscan插件（一）\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzM5MTI2Mg==&mid=2247484699&idx=1&sn=339a02d6f79f25ff9ce0a6b29c7bd3a4\",\n \"Linux提权漏洞CVE-2025-27591\": \"https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485167&idx=1&sn=e589a6e71a843af60fa3c86007e6177a\",\n \"Craft V3 中文版正式发布！颜值与生产力并重的全能笔记工具来了！\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzY0Mzg2OQ==&mid=2247486465&idx=1&sn=115b3ec0a6500c1fdccddd9cb9d737a8\",\n \"Perplexity新增GPT-4.5和Claude 3.7模型\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzY0Mzg2OQ==&mid=2247486465&idx=2&sn=3980affc4a63f6f7894e6c235e3edda6\",\n \"Python in Excel高级分析：一键RFM分析\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzY0Mzg2OQ==&mid=2247486465&idx=3&sn=f059f6219aa5b8bdb005c76a656f4187\",\n \"【漏洞速递】Google Chrome 沙箱逃逸漏洞(CVE-2025-2783)\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDYwMDcyNQ==&mid=2247488956&idx=1&sn=7ff677c108fa9acc0c1135eb61a08aab\",\n \"FOXCMS黔狐内容管理系统index.html接口存在远程代码执行漏洞CVE-2025-29306 漏洞预警\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488251&idx=1&sn=9dd825fbac48298618f53dbb722f73ec\",\n \"G.O.S.S.I.P 阅读推荐 2025-03-26 电子邮件也能用来走私？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499940&idx=1&sn=4306723a4da6f037c97c2dff446cd24e\",\n \"90页PPT 从技术突破到场景落地：大模型发展图谱与DeepSeek创新应用\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655272188&idx=1&sn=6f7130c0238d629bde6d3b9783788825\",\n \"hvv 笔试小技巧\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Nzg2MDA0MA==&mid=2247484695&idx=1&sn=2c85166c9933068d2bf3f7bc1f24283a\",\n \"SDL序列课程-第38篇-安全需求-登录注册需求-HTTPS安全通道在登录过程中的应用\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NzE5NjI0Mg==&mid=2247484706&idx=1&sn=848f26862f54fd23835f64679bf83ec3\",\n \"泛微e-office sms_page.php sql注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490919&idx=1&sn=c84be81cd4eca3e6d0506b51eb86c646\",\n \"当我们在谈论大模型辅助编程时，我们在谈论什么（二）之MCP\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzQ5OTQ0Mw==&mid=2247483708&idx=1&sn=d16afa0920cd307ff9d61abce26b4b70\",\n \"CTF AWD/AWDP Web方向 Fix Patch 学习文档\": \"https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484637&idx=1&sn=27713a92634a0cbebf86333c867f03c0\",\n \"HTB-Codify靶机：代码编辑器的便利成为黑客的跳板 — 现代Web开发中的致命沙盒逃逸\": \"https://mp.weixin.qq.com/s?__biz=MzkwMzYyNzQ1NA==&mid=2247484704&idx=1&sn=08a5479a80affe53cc96e83dc7925f5d\",\n \"极氪汽车开源合规体系建设实践分享\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623008&idx=1&sn=2d4770de0393961377ffa2b9e8171e37\",\n \"软件定义汽车（SDV）培训课程通知 2025\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623008&idx=2&sn=1f3b553772370c945ef567b78e63a71c\",\n \"汽车企业信息安全挑战与应对策略\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623008&idx=3&sn=df13b63fe63d726987b56a8d63302b5a\",\n \"在ChatGPT中挖掘XSS漏洞实现任意账户接管\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518881&idx=1&sn=6abd5222d13c67e835b43771eb3d7f18\",\n \"一名合格红队的成长之路\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518881&idx=2&sn=87d81a62e332746169a4e0fbe97e65d5\",\n \"Src实战-垂直越权任意添加用户\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497323&idx=1&sn=eeb54bafcf04ab6832e57b46b1e43ff4\",\n \"现代 Windows 内核条件竞争 - Windows 11 (x64)\": \"https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487861&idx=1&sn=ac3fc33d562f3709ea7ef78eb39c07fd\",\n \"【已复现】Ingress NGINX Controller 远程代码执行漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492754&idx=1&sn=9f437f4b0b3d4edced726f996430121a\",\n \"【已复现】Ingress NGINX Controller 远程代码执行漏洞(CVE-2025-1974)安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503229&idx=1&sn=5f984b9cab97f883a7b92dad91e49ce4\",\n \"【已复现】Vite 任意文件读取漏洞(CVE-2025-30208)安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503229&idx=2&sn=c5328659e9a3f009109e9af22c442b32\",\n \"LockBit 4.0发布，与LockBit 3.0有何不同\": \"https://mp.weixin.qq.com/s?__biz=MzkzMTY0MDgzNg==&mid=2247484207&idx=1&sn=1bb97e77bd8b28956ad550ca0c26ecc5\",\n \"安芯网盾获工信部科技成果登记证书！\": \"https://mp.weixin.qq.com/s?__biz=MzU1Njk1NTYzOA==&mid=2247491564&idx=1&sn=52040f0226d457870433a40b3857b2bb\",\n \"顶尖CISO是如何打造企业核心网络安全文化的\": \"https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247484951&idx=1&sn=a4b1a7becce292f3b3fac558b5b35edb\",\n \"利用捕获的 COM 对象进行无文件横向移动\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528744&idx=1&sn=81f5e638de0c61ffbbdabf27a19a2ce6\",\n \"CVE-2025-0693：AWS IAM 用户枚举\": \"https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528744&idx=2&sn=d98a71a758a0d2f757cd35589c6d55b6\",\n \"从零到一AI 加持下的APP 开发\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NzY5NjM5Mg==&mid=2247485070&idx=1&sn=e6d2eff10849d84d6bb6e87efe52342a\",\n \"【漏洞工具】某路由器Golang图形化跨平台利用工具\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247501222&idx=1&sn=c67ffa9d6f898a97be73218b7cc8d19e\",\n \"《论语别裁》第02章 为政（06） 圣人也势利吗？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247501222&idx=2&sn=900b5c4477f8a375f7339ccf6fde9857\",\n \"微软Security Copilot官方指南文档中英文双语版\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzU4ODU2MQ==&mid=2247484232&idx=1&sn=58dd3634b3a409d053947b520e618a7e\",\n \"面试官逼问“如何防社工库”，我当场用人脸识别抓了他开房记录！\": \"https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247501014&idx=1&sn=216c0c3adbbd062fd7a8dad7fb69ac58\",\n \"本周网络安全大事件（2025 年 3 月 17 日至 23 日）\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489037&idx=1&sn=a4c0afad7eb9d92eb9b0bb50399bb629\",\n \"工业和信息化部关于印发《工业互联网安全分类分级管理办法》的通知，全文公布\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDYzNTYxNQ==&mid=2247502756&idx=1&sn=4ee7a7fb887c9c5aebaadc1ade23ffb5\",\n \"网站裸奔？文件上传！！！\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDQ2ODU4NQ==&mid=2247483754&idx=1&sn=ccb3d542a47ccb03accf44b6277af88c\",\n \"一图读懂||工业互联网安全分类分级管理办法\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDYzNTYxNQ==&mid=2247502751&idx=1&sn=9418532bacfff927d29b9abf1b22d752\",\n \"打靶日记 SickOs 1.2\": \"https://mp.weixin.qq.com/s?__biz=Mzk1Nzc0MzY3NA==&mid=2247484798&idx=1&sn=e8683c5cd99cba8b9024d52f3013d4f2\"\n },\n \"安全通告\": {\n \"安全通告 - 华为PC产品存在认证绕过漏洞\": \"//www.huawei.com/cn/psirt/security-advisories/2025/huawei-sa-20250325-01-pc-cn\"\n },\n \"Security Boulevard\": {\n \"Legit Announces New Vulnerability Prevention Capabilities\": \"https://securityboulevard.com/2025/03/legit-announces-new-vulnerability-prevention-capabilities/?utm_source=rss&utm_medium=rss&utm_campaign=legit-announces-new-vulnerability-prevention-capabilities\",\n \"How can I align our NHI management with GDPR and other standards?\": \"https://securityboulevard.com/2025/03/how-can-i-align-our-nhi-management-with-gdpr-and-other-standards/?utm_source=rss&utm_medium=rss&utm_campaign=how-can-i-align-our-nhi-management-with-gdpr-and-other-standards\",\n \"Which frameworks assist in ensuring compliance for NHIs?\": \"https://securityboulevard.com/2025/03/which-frameworks-assist-in-ensuring-compliance-for-nhis/?utm_source=rss&utm_medium=rss&utm_campaign=which-frameworks-assist-in-ensuring-compliance-for-nhis\",\n \"Generative AI: threat or opportunity? It depends on your adaptive speed!\": \"https://securityboulevard.com/2025/03/generative-ai-threat-or-opportunity-it-depends-on-your-adaptive-speed/?utm_source=rss&utm_medium=rss&utm_campaign=generative-ai-threat-or-opportunity-it-depends-on-your-adaptive-speed\",\n \"Broadcom Extends Scope of VMware vDefend Cybersecurity Platform\": \"https://securityboulevard.com/2025/03/broadcom-extends-scope-of-vmware-vdefend-cybersecurity-platform/?utm_source=rss&utm_medium=rss&utm_campaign=broadcom-extends-scope-of-vmware-vdefend-cybersecurity-platform\",\n \"MailChimp Under Attack: How Cybercriminals Are Exploiting Email Marketing Platforms\": \"https://securityboulevard.com/2025/03/mailchimp-under-attack-how-cybercriminals-are-exploiting-email-marketing-platforms/?utm_source=rss&utm_medium=rss&utm_campaign=mailchimp-under-attack-how-cybercriminals-are-exploiting-email-marketing-platforms\",\n \"BSidesLV24 – IATC – Difficult Conversations\": \"https://securityboulevard.com/2025/03/bsideslv24-iatc-difficult-conversations/?utm_source=rss&utm_medium=rss&utm_campaign=bsideslv24-iatc-difficult-conversations\",\n \"ADAMnetworks Licensed Technology Partner (LTP) Program\": \"https://securityboulevard.com/2025/03/adamnetworks-licensed-technology-partner-ltp-program/?utm_source=rss&utm_medium=rss&utm_campaign=adamnetworks-licensed-technology-partner-ltp-program\",\n \"Snow White — Beware the Bad Apple in the Torrent\": \"https://securityboulevard.com/2025/03/snow-white-beware-the-bad-apple-in-the-torrent/?utm_source=rss&utm_medium=rss&utm_campaign=snow-white-beware-the-bad-apple-in-the-torrent\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"第八届西湖论剑·中国杭州网络安全技能大赛决赛预告：AI赋能网安战场，智能攻防剑指巅峰！\": \"https://www.4hou.com/posts/xyBB\",\n \"SpyX 数据泄露，涉及近 200 万用户隐私\": \"https://www.4hou.com/posts/kgl6\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"How Hackers Abuse XML-RPC to Launch Bruteforce and DDoS Attacks\": \"https://infosecwriteups.com/how-hackers-abuse-xml-rpc-to-launch-bruteforce-and-ddos-attacks-40be5b310960?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Horizon3.ai\": {\n \"CVE-2025-1974\": \"https://www.horizon3.ai/attack-research/vulnerabilities/cve-2025-1974/\",\n \"Horizon3.ai Releases 2025 Cybersecurity Insights Report: Key Findings from Over 50,000 NodeZero® Pentests\": \"https://www.businesswire.com/news/home/20250326589938/en/Horizon3.ai-Releases-2025-Cybersecurity-Insights-Report-Key-Findings-from-Over-50000-NodeZero-Pentests#new_tab\",\n \"The State of Cybersecurity in 2025: Data-Driven Insights from Over 50,000 NodeZero® Pentests\": \"https://www.horizon3.ai/downloads/research/annual-insights-report-the-state-of-cybersecurity-in-2025/\"\n },\n \"Malwarebytes\": {\n \"Security expert Troy Hunt hit by phishing attack\": \"https://www.malwarebytes.com/blog/news/2025/03/security-expert-troy-hunt-hit-by-phishing-attack\",\n \"Booking.com phish uses fake CAPTCHAs to trick hotel staff into downloading malware\": \"https://www.malwarebytes.com/blog/news/2025/03/fake-booking-com-phish-uses-fake-captchas-to-trick-hotel-staff-into-downloading-malware\",\n \"DeepSeek users targeted with fake sponsored Google ads that deliver malware\": \"https://www.malwarebytes.com/blog/news/2025/03/deepseek-users-targeted-with-fake-sponsored-google-ads-that-deliver-malware\"\n },\n \"Project Zero\": {\n \"Blasting Past Webp\": \"https://googleprojectzero.blogspot.com/2025/03/blasting-past-webp.html\"\n },\n \"Malware-Traffic-Analysis.net - Blog Entries\": {\n \"2025-03-26: SmartApeSG traffic for fake browser update leads to NetSupport RAT and StealC\": \"https://www.malware-traffic-analysis.net/2025/03/26/index.html\"\n },\n \"Exploit-DB.com RSS Feed\": {\n \"[local] NVIDIA Container Toolkit 1.16.1 - Time-of-check Time-of-Use (TOCTOU)\": \"https://www.exploit-db.com/exploits/52095\"\n },\n \"Reverse Engineering\": {\n \"MCP Server for IDA Pro\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jkd7j9/mcp_server_for_ida_pro/\",\n \"Llama's Paradox - Delving deep into Llama.cpp and exploiting Llama.cpp's Heap Maze, from Heap-Overflow to Remote-Code Execution\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jkauzw/llamas_paradox_delving_deep_into_llamacpp_and/\",\n \"eDBG: Unleash Android Debugging with eBPF, Defying Anti-Debugging Barriers\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jkiar1/edbg_unleash_android_debugging_with_ebpf_defying/\",\n \"Inside Windows' Default Browser Protection\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jjzjya/inside_windows_default_browser_protection/\",\n \"Evil CrackMe: Xtreme difficulty\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jk19dc/evil_crackme_xtreme_difficulty/\"\n },\n \"Wallarm\": {\n \"AI Agents and API Security: The Hidden Risks Lurking in Your Business Logic\": \"https://lab.wallarm.com/ai-agents-api-security-hidden-risks-business-logic/\"\n },\n \"text/plain\": {\n \"Spring Break\": \"https://textslashplain.com/2025/03/26/spring-break/\"\n },\n \"Security Blog | Praetorian\": {\n \"CodeQLEAKED – Public Secrets Exposure Leads to Supply Chain Attack on GitHub CodeQL\": \"https://www.praetorian.com/blog/codeqleaked-public-secrets-exposure-leads-to-supply-chain-attack-on-github-codeql/\"\n },\n \"SpiderLabs Blog\": {\n \"2025 Trustwave Risk Radar Report: Healthcare Sector: Key Risks and Defensive Measures\": \"https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/2025-trustwave-risk-radar-report-healthcare-sector-key-risks-and-defensive-measures/\"\n },\n \"Twitter @James Kettle\": {\n \"Just submitted my talk proposal to Black Hat USA! This research was an especially wild ride and is causing some full spectrum chaos. Can't wait to sha...\": \"https://x.com/albinowax/status/1904881491840057852\"\n },\n \"Shostack & Friends Blog\": {\n \"Introducing the DEF CON 32 Hackers' Almanack\": \"https://shostack.org/blog/def-con-almanack/\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"FreeBuf 早报 | Chrome零日漏洞遭利用；新Windows零日漏洞泄露NTLM哈希值\": \"https://www.freebuf.com/news/425795.html\",\n \"Kubernetes ：k8s一主两从集群搭建—实现全纪录\": \"https://www.freebuf.com/articles/container/418863.html\",\n \"Kubernetes HPA 实战：Pod水平自动伸缩—实现全纪录\": \"https://www.freebuf.com/articles/container/418864.html\",\n \"Ant Design 的 CSS-in-JS 实现与最佳实践\": \"https://www.freebuf.com/articles/others-articles/419315.html\",\n \"加密货币盗窃案主犯\\\"Wiz\\\"落网 涉案金额达2.43亿美元\": \"https://www.freebuf.com/news/425807.html\"\n },\n \"安全牛\": {\n \"AI 融入软件供应链，安全实践正在重新定义\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135800&idx=1&sn=2808ac8c44e274c360b52e2ac586fff6&chksm=bd15afeb8a6226fdd799989c7c90d13dd282f77a331063e3ddd29c8f2152055399218f1ce027&scene=58&subscene=0#rd\",\n \"中消协提示：谨防“免密支付”盗刷漏洞；Kubernetes“噩梦”：Ingress NGINX控制器漏洞威胁6500个集群|牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135800&idx=2&sn=2d44a7244307ff61986d8b4e8a871ec6&chksm=bd15afeb8a6226fddedd8869139a1fb4e0052c0c4142a3f400c67c2ae9395e4a47bd901ef458&scene=58&subscene=0#rd\"\n },\n \"黑海洋 - Wiki\": {\n \"中国蚁剑之反制上线CS\": \"https://blog.upx8.com/4710\",\n \"Telegram接入DeepSeek\": \"https://blog.upx8.com/4709\",\n \"大模型微调数据集哪里找?\": \"https://blog.upx8.com/4707\",\n \"知乎直答改版增加个人知识库支持等重要功能\": \"https://blog.upx8.com/4706\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"比亚迪 2024 年销售收入超过特斯拉\": \"https://www.solidot.org/story?sid=80892\",\n \"火星发现长链有机分子\": \"https://www.solidot.org/story?sid=80891\",\n \"年轻一代的消费者更爱内容创作者而非传统电视电影\": \"https://www.solidot.org/story?sid=80889\",\n \"近半加拿大家庭完全停止消费有线电视\": \"https://www.solidot.org/story?sid=80888\",\n \"Infinite Reality 以 2.07 亿美元收购 Napster\": \"https://www.solidot.org/story?sid=80887\",\n \"H5N1 禽流感在英国传播到绵羊\": \"https://www.solidot.org/story?sid=80886\",\n \"火星东半球被认为蕴含丰富的冰\": \"https://www.solidot.org/story?sid=80885\",\n \"交通噪音会触发鸟类的路怒症\": \"https://www.solidot.org/story?sid=80884\",\n \"东京法庭下令解散统一教会\": \"https://www.solidot.org/story?sid=80883\",\n \"Game Informer 杂志复活\": \"https://www.solidot.org/story?sid=80882\"\n },\n \"腾讯玄武实验室\": {\n \"每日安全动态推送(25/3/26)\": \"https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960057&idx=1&sn=c22617f8da987a4697f32034a91f430b&chksm=8baed266bcd95b70583b959815c26c920fa0f6de29c35421d03b99c42843ff80fb566eb11963&scene=58&subscene=0#rd\"\n },\n \"安全分析与研究\": {\n \"RansomHub勒索病毒黑客组织Betruger后门样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491251&idx=1&sn=2b8f1040a0a823c78f8716b81f42cc1a&chksm=902fb19ba758388d1ef74d4a40dc8e50f9a90820f50da5133e55d78afb9e6e9e01a9118f6af7&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"用户态视角理解内核ROP利用：快速从shell到root的进阶\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591109&idx=1&sn=5f837ef004d759dc9732db72c9a88028&chksm=b18c2f0f86fba6190cd56f9020a99f3ec4a43f2d489aaa096b7383973e48944127aa805f382c&scene=58&subscene=0#rd\",\n \"人脸识别技术应用迎来 “紧箍咒”，《安全管理办法》6月1日正式施行\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591109&idx=2&sn=5103d5cab38d73c0316f32cfc492163f&chksm=b18c2f0f86fba619aa6b46e1d4d6b2259491c2c80aaaf97f8add80d85c352c6f1f0e77addc19&scene=58&subscene=0#rd\",\n \"本周更新啦！【2025春季班】看雪安卓高级研修班（月薪一万计划）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591109&idx=3&sn=118a582a77f268f5c7ba69d71d5ed28d&chksm=b18c2f0f86fba61941a4381b3c9fe6ad0328e8a591e9a811f6c35150ce7cdf32c8f82dbe1ba5&scene=58&subscene=0#rd\"\n },\n \"微步在线研究响应中心\": {\n \"在野！谷歌Chrome沙箱逃逸漏洞， 被APT高度武器化\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507736&idx=1&sn=1b6ad4565d22c8799d1f26db65dc05bd&chksm=cfcabc0cf8bd351ad950bbfe57e9cb4bcde555d02d83cb3bece5acd72d9fb05d08f9e647b9a7&scene=58&subscene=0#rd\"\n },\n \"HackerNews\": {\n \"美国联邦调查局警告：当心免费在线文档转换工具\": \"https://hackernews.cc/archives/58049\",\n \"Broadcom 警告 VMware Windows 工具存在身份验证绕过漏洞\": \"https://hackernews.cc/archives/58046\"\n },\n \"丁爸 情报分析师的工具箱\": {\n \"【工具】文章内容如何变成流程图\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651149535&idx=1&sn=04724f40e87729dca82637c5953cd576&chksm=f1af23e5c6d8aaf36b865f10cf42eea91b287a3266415a0d5d11493575d9bb8c951c27558191&scene=58&subscene=0#rd\"\n },\n \"长亭安全应急响应中心\": {\n \"【已复现】Ingress NGINX Controller 远程代码执行漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492754&idx=1&sn=9f437f4b0b3d4edced726f996430121a&chksm=96f7fbffa18072e9a669fdc2a0a68f41899e3e1bb28780574e8a9d52db2f65c673c19ae2fa98&scene=58&subscene=0#rd\"\n },\n \"安全客\": {\n \"本地部署AI信息安全框架：保障AI系统安全的关键举措\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788227&idx=1&sn=53a06416038a2da77b05fc7362453e3e&chksm=8893bf2cbfe4363aa888e8d21f387c0979b3795d43682cbae0d82122497519848a049fecb6b5&scene=58&subscene=0#rd\"\n },\n \"吾爱破解论坛\": {\n \"IDA 9.1 & IDA 8.5 算法分析\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651142083&idx=1&sn=1fb2b734c134f9f16c9014f63c456578&chksm=bd50a7978a272e81c8e751012ef5e111d2ed5f468bd8e25c1fd19455f4e7f1dab1059e7cbc16&scene=58&subscene=0#rd\"\n },\n \"绿盟科技CERT\": {\n \"【处置手册】Next.js中间件权限绕过漏洞（CVE-2025-29927）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489140&idx=1&sn=005ca73eac41c7c2b4d4cfd7fdb27989&chksm=c2c6417ff5b1c869c97d858ad5662a530cbb866b0b9cc70f278f36020e2cbb915fb8b52bd8ae&scene=58&subscene=0#rd\"\n },\n \"虎符智库\": {\n \"史上最大收购重塑投资理念，网安企业价值或将整体面临重估？\": \"https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493091&idx=1&sn=3f5f94cc9efd0e0729480724821094c4&chksm=971d88e1a06a01f78a858a4397387cf5f1c971f123837093aefb7cb6c9f9d6af3c194e103b34&scene=58&subscene=0#rd\"\n },\n \"奇安信 CERT\": {\n \"【已发现在野利用】Google Chrome沙箱逃逸漏洞(CVE-2025-2783)安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503212&idx=1&sn=0b14bc32a6c2846c590bae64986309cc&chksm=fe79e9f4c90e60e20bc345c610a1a75e79dca3b5c7fe389c1d8c5f06560d38051e7ca12d8378&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"微软安全如何做AI Agent？Security Copilot新增11款Agent解析\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514065&idx=1&sn=ee324ead02f0d56b0c613b92462f7e89&chksm=ebfaf0f1dc8d79e7ead50f8471ae52b2d8c9e153b54ed903d4de4d5c0987c28ff1e336a7d9ad&scene=58&subscene=0#rd\",\n \"工信部印发《工业互联网安全分类分级管理办法》\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514065&idx=2&sn=91a1c723e600f02c57146b5cc8153e3d&chksm=ebfaf0f1dc8d79e78bcc619366ec7192b9cd0aa5742017900dc6689a30500a81f839e0362c9a&scene=58&subscene=0#rd\"\n },\n \"天御攻防实验室\": {\n \"NSA的零日漏洞使用策略\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486325&idx=1&sn=b007e2a16f16a368992e9a04becefb3d&chksm=fb04c81dcc73410b989b4cc614e455803aa48f6f21978d65381410aa3b32f39e2e8ec797b473&scene=58&subscene=0#rd\"\n },\n \"ChaMd5安全团队\": {\n \"NCTF 2024 writeup by Mini-Venom\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247512365&idx=1&sn=d8206ef2ca8a71b0fe3b46db8670300b&chksm=e89d99f5dfea10e338fce71acbccc9741d88762833e8aef0eda581aca85798f9ecff0824fae5&scene=58&subscene=0#rd\"\n },\n \"信安之路\": {\n \"京东云薅羊毛，新用户 49 一年云主机\": \"https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499839&idx=1&sn=b3883149d4d7fbf55ec1a014affb18ac&chksm=ec1df017db6a790105b74adcdb4e79088973db71195baf6fcd4fd4b273e44ba8cb09e8b85e54&scene=58&subscene=0#rd\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 阅读推荐 2025-03-26 电子邮件也能用来走私？\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499940&idx=1&sn=4306723a4da6f037c97c2dff446cd24e&chksm=c063ee7df714676b8c32c62a8ea23a70ec286f97371a2edcb51b3703d78b24c7d73d22b63b10&scene=58&subscene=0#rd\"\n },\n \"中国信息安全\": {\n \"通知 | 《工业互联网安全分类分级管理办法》全文公布\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664239089&idx=1&sn=9691d200b749a3bfa415fc843e2122ac&chksm=8b580d08bc2f841e9269f7babdf9f138d5c5b5da0b01c9b907758b7e3d9dd1c52fd51b83cfd6&scene=58&subscene=0#rd\",\n \"刘烈宏：以高质量数据促进人工智能发展，国家数据局将开展四方面工作\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664239089&idx=2&sn=cadc4393be93c6ad6997653ae4709a8b&chksm=8b580d08bc2f841eb0bb908c930e745d1e98399906eca3697d44f180e2abc4b2e823725e0867&scene=58&subscene=0#rd\",\n \"发布 | 中国网络安全产业联盟发布《美情报机构针对全球移动智能终端实施的监听窃密活动》（附下载）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664239089&idx=3&sn=a5af84fa104cb686a3ef5598632421cb&chksm=8b580d08bc2f841e22739bf357abf8fd4fbcf478ba77dca78f85c9b2f1326eaba8753ce33f15&scene=58&subscene=0#rd\",\n \"外交部：敦促美方立即停止利用全球供应链实施恶意网络活动\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664239089&idx=4&sn=cc55be9203a8e3df3e4cc9954b531d4c&chksm=8b580d08bc2f841e8f0288370d3d0609b0e770a7a85c5a6cddcff804d462df53ab6b5628b3ea&scene=58&subscene=0#rd\",\n \"前沿 | 从DeepSeek看人工智能自主创新的战略价值\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664239089&idx=5&sn=c3167f184c11fd76338d0ff9edd8cb24&chksm=8b580d08bc2f841ec217a505e7c0b28ed6c6762bd44835d6db91ba2cb77dc3b4ee50b8637b5e&scene=58&subscene=0#rd\",\n \"中消协提示：警惕手机“免密支付”风险\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664239089&idx=6&sn=95202c48117d73a7eeaca712421883a1&chksm=8b580d08bc2f841ed87489fa7560ed5c42846014f8950dc7a7a950f2bd8144f9a5fc98cc3d47&scene=58&subscene=0#rd\",\n \"一图读懂 | 《工业互联网安全分类分级管理办法》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664239089&idx=7&sn=b478699dfa4e864e65df116d00c5a36b&chksm=8b580d08bc2f841e52ef9dff2d4acae180a9986f4bf56e729a6f466a3b0799559a817535fd7b&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"【一图读懂】工信部最新《工业互联网安全分类分级管理办法》\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538305&idx=1&sn=1d27dd3e56cf9b6f5d65a4f49e4e5c51&chksm=c144243cf633ad2a0ea9509e92b94f00bed31243fac151d0816ef6d3919eac4e7888280f33ae&scene=58&subscene=0#rd\",\n \"【行业动态】奇安投资完成新一期产业基金设立，继续布局深耕网信安全赛道\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538305&idx=2&sn=2a31bf50e386ac617703eb89066e60d0&chksm=c144243cf633ad2a8b97bec4d4258c0410541b50f1fad90abbeb8bfe32edf71f657a879ff810&scene=58&subscene=0#rd\"\n },\n \"绿盟科技技术博客\": {\n \"Next.js中间件权限绕过漏洞 （CVE-2025-29927）\": \"https://blog.nsfocus.net/cve-2025-29927-2/\"\n },\n \"极客公园\": {\n \"全球狂卖 427 万辆，比亚迪给友商上了一堂「成本课」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653076455&idx=1&sn=55c017ea4546ada74b4f25237d1ea39c&chksm=7e57c65149204f47e9fa9ce26ba26895b95d4ed9642502e1855746aa892230ec50cbcd814757&scene=58&subscene=0#rd\",\n \"谷歌发布新版 Gemini，横扫各大榜单；苹果订购 10 亿美元英伟达 AI系统；雷军回武大拍摄 YU7 宣传片 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653076453&idx=1&sn=f1e48695c26bb45c548272c4614a5ab2&chksm=7e57c65349204f454e80c49d85484874a133d3c1deb430762198fb47bbf874f3e5a4b4900a96&scene=58&subscene=0#rd\"\n },\n \"补天平台\": {\n \"Offer直通、Switch大奖挑战赛！补天沙龙西安站亮点抢先看！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247508034&idx=1&sn=b9525fff6d6d3e8707fe8eae0fe44ac1&chksm=eaf9e80edd8e6118427dd8f830f548d80a710c25e7ba6818e2101ddedc3e64b59ad1716080fd&scene=58&subscene=0#rd\"\n },\n \"电子物证\": {\n \"【案例】数字取证案例\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048376&idx=1&sn=c72ac193b2b57c553ac1503c86ae0d37&chksm=80d08649b7a70f5f2483dc4f23e7f3c87d93a6ff594cb6a35045a319de59dd80409ff4e7bde9&scene=58&subscene=0#rd\",\n \"【AI“偷”走你的声音怎么办？】\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048376&idx=2&sn=fa429d3dfae6b07f426d59d164b13213&chksm=80d08649b7a70f5fe335241c8bbc41a2a2f1d513fa93e456506b6a5a58bd3cb9ec07bdae4523&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】谷歌Chrome在线安装程序出现错误导致Windows 10/11安装都提示无法运行\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068734&idx=1&sn=aebdb296528675a6a493184d27a934ca&chksm=f36e773ec419fe28fa8d03fdfea57ab1556dda3f7a8d0d625b6a4aef030ba55ae262e89df6dc&scene=58&subscene=0#rd\",\n \"【安全圈】Cloudflare推出AI迷宫用于应对AI爬虫，以AI治AI师夷长技以制夷\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068734&idx=2&sn=6a5d6235acc1f51c79a8fb7ef27228c1&chksm=f36e773ec419fe281ce1a3a7c114d20a85e1b76d31c6c1b261e0854ad610619755f7fe5c1647&scene=58&subscene=0#rd\",\n \"【安全圈】Cloudflare R2服务中断事件：密码轮换错误引发全球故障\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068734&idx=3&sn=220c79f57ed0b4b35447382b8a841b04&chksm=f36e773ec419fe28a09c50dd68223b0c7a7cedb8f1746b4f86eb074d84ba9d1f0b5296edd18b&scene=58&subscene=0#rd\",\n \"【安全圈】国际刑警“红牌行动”收获：非洲多国联手破获特大跨国网络犯罪集团\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068734&idx=4&sn=ff1d7e4d1ccc2fc3dcca73d0d047fd5e&chksm=f36e773ec419fe28f59e4c7b86398777905f27fe054d747f97bf9fb6f53aacbb5b4d2386cffe&scene=58&subscene=0#rd\"\n },\n \"天融信阿尔法实验室\": {\n \"【风险提示】天融信关于Vite任意文件读取漏洞(CVE-2025-30208)的风险提示\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496690&idx=1&sn=6010f3a0a91bb3e0546c20a0e004fdd1&chksm=ce96beccf9e137dac784e2601bb16241d8829eb676aae1a6aba6227f08cfdb300ab086d1a6fa&scene=58&subscene=0#rd\"\n },\n \"深信服千里目安全技术中心\": {\n \"Google Chrome 沙箱逃逸漏洞(CVE-2025-2783)\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524111&idx=1&sn=09d5d3dd317a20c1cec8733f787b4520&chksm=ce46141ff9319d09540d9b68bf6d65b4f01b6eb9fe895c471ba92960c8eb1c46e2002d023c4a&scene=58&subscene=0#rd\"\n },\n \"Beacon Tower Lab\": {\n \"漏洞预警 | Next.js 中间件鉴权绕过漏洞 (CVE-2025-29927)\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487069&idx=1&sn=d79bf576f44253634e79f89adf4dc837&chksm=c22296a4f5551fb206bdfc5cd48995e8e6e2de51e7c02bbf332ab359d163bc98802ad54824a2&scene=58&subscene=0#rd\"\n },\n \"字节跳动安全中心\": {\n \"PPT来了 | AI攻防安全实践干货\": \"https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494652&idx=1&sn=907d06905877e4c7a46b26f6ea72ccfc&chksm=fa9d10aacdea99bc673fa64a73b33f14eb69912db5e4381336536a3ac318c84570fd4cea790f&scene=58&subscene=0#rd\"\n },\n \"默安科技\": {\n \"默安科技矩子AI驾驶舱重磅发布 开启AI原生安全运营新时代\": \"https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247500615&idx=1&sn=f78d2c4a96e73be2a5676885fbbe09ce&chksm=e93b3465de4cbd737962004397991c696082e78e5d8a4e23150b1344a6b69a85ba357a40c859&scene=58&subscene=0#rd\"\n },\n \"慢雾科技\": {\n \"慢雾：深入探讨 EIP-7702 与最佳实践\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501575&idx=1&sn=41fc35103ea1edaff8c8ee077b09c121&chksm=fddeb980caa930968352cff8880a5710b1bf9c7eabc6b4d3e4cce9a83e3d1a20eff4e579305c&scene=58&subscene=0#rd\"\n },\n \"国家互联网应急中心CNCERT\": {\n \"网络安全信息与动态周报2025年第12期（3月17日-3月23日）\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499723&idx=1&sn=2b1048e223720c6fdd34e5611f7a4cb4&chksm=973acca9a04d45bfa537d251642d4c2de677e61ac125cdf1ec0ec31a109eecc08e99e905d29f&scene=58&subscene=0#rd\"\n },\n \"GobySec\": {\n \"Vite开发服务器漏洞预警！启动即裸奔,低门槛攻击可致系统数据泄露\": \"https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545731&idx=1&sn=e6c11f0be3ece715ea375cd373086b13&chksm=eb84d823dcf3513522edb395d85ad8adb6f946eeaf5c65e058109cceeafaeea1f795e60123ff&scene=58&subscene=0#rd\"\n },\n \"ICT Security Magazine\": {\n \"IMSI Catcher: cos’è e come funziona\": \"https://www.ictsecuritymagazine.com/articoli/imsi-catcher/\"\n },\n \"代码卫士\": {\n \"博通：注意 Vmware Windows Tools 中的认证绕过漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522590&idx=1&sn=ee578730b1733ca26a369770366c3b00&chksm=ea94a874dde321621c61902e3f2a06600d7b26506c458661c5ca08a93507ffca99fe28a26c7d&scene=58&subscene=0#rd\",\n \"谷歌紧急修复已遭利用的0day\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522590&idx=2&sn=ee575193ee5fe0995b313a95a46890ee&chksm=ea94a874dde32162af6eae13f89ada50332950da90c99d60c106b45836f1993c80d8cd996cbe&scene=58&subscene=0#rd\"\n },\n \"Securityinfo.it\": {\n \"Windows 11: l’ultimo update interrompe il ripristino del sistema con Veeam Recovery Media\": \"https://www.securityinfo.it/2025/03/26/windows-11-lultimo-update-interrompe-il-ripristino-del-sistema-con-veeam-recovery-media/?utm_source=rss&utm_medium=rss&utm_campaign=windows-11-lultimo-update-interrompe-il-ripristino-del-sistema-con-veeam-recovery-media\"\n },\n \"DataCon大数据安全分析竞赛\": {\n \"DataCon24漏洞赛道冠军分享：vuln_wp——大模型赋能的漏洞自动化分析全解析\": \"https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247489217&idx=1&sn=a32a6e0c14c025e0663591226b8b83f9&chksm=fe5d0e41c92a8757dce02d28d059dcdd0d58d648be6c7dc516a67e9eac79119f102ce889c15e&scene=58&subscene=0#rd\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Oracle customers confirm data stolen in alleged cloud breach is valid\": \"https://www.bleepingcomputer.com/news/security/oracle-customers-confirm-data-stolen-in-alleged-cloud-breach-is-valid/\",\n \"StreamElements discloses third-party data breach after hacker leaks data\": \"https://www.bleepingcomputer.com/news/security/streamelements-discloses-third-party-data-breach-after-hacker-leaks-data/\",\n \"Intel chiefs again say they did not share classified info amid new questions on war chats\": \"https://therecord.media/intel-chiefs-again-say-they-did-not-share-classified-info-house-hearing\",\n \"New 'Atlantis AIO' automates credential stuffing on 140 services\": \"https://www.bleepingcomputer.com/news/security/new-atlantis-aio-automates-credential-stuffing-on-140-services/\",\n \"Chinese ‘FamousSparrow’ hackers back from the dead and targeting North America, researchers say\": \"https://therecord.media/china-famous-sparrow-back-eset\",\n \"New York's cyber chief on keeping cities and states safe from cyberattacks\": \"https://therecord.media/new-york-cyber-chief-on-keeping-cities-states-safe\",\n \"Smishing a tema INPS, documenti rubati in vendita nel dark web: quali conseguenze\": \"https://www.cybersecurity360.it/news/smishing-a-tema-inps-documenti-rubati-in-vendita-nel-dark-web-quali-conseguenze/\",\n \"Tagli alla cyber security negli Usa: l’impatto delle nuove politiche di Trump\": \"https://www.cybersecurity360.it/cybersecurity-nazionale/tagli-alla-cyber-security-negli-usa-limpatto-delle-nuove-politiche-di-trump/\",\n \"Claude is testing ChatGPT-like Deep Research feature Compass\": \"https://www.bleepingcomputer.com/news/artificial-intelligence/claude-is-testing-chatgpt-like-deep-research-feature-compass/\",\n \"The 7 technology trends that could replace passwords\": \"https://www.bleepingcomputer.com/news/security/the-7-technology-trends-that-could-replace-passwords/\",\n \"Austria uncovers alleged Russian disinformation campaign spreading lies about Ukraine\": \"https://therecord.media/austria-uncovers-russian-disinfo-campaign\",\n \"Defense contractor to pay $4.6 million over third-party provider’s security weakness\": \"https://therecord.media/defense-contractor-to-pay-millions-over-cyber-practices\",\n \"Microsoft fixes printing issues caused by January Windows updates\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-printing-issues-caused-by-january-windows-updates/\",\n \"Google ha rimosso 180 app dal Play Store, per difenderci dalla truffa “Vapor”: di cosa si tratta\": \"https://www.cybersecurity360.it/news/google-ha-rimosso-180-app-dal-play-store-per-difenderci-dalla-truffa-vapor-di-cosa-si-tratta/\",\n \"RedCurl cyberspies create ransomware to encrypt Hyper-V servers\": \"https://www.bleepingcomputer.com/news/security/redcurl-cyberspies-create-ransomware-to-encrypt-hyper-v-servers/\",\n \"Windows 11: l’ultimo update interrompe il ripristino del sistema con Veeam Recovery Media\": \"https://www.securityinfo.it/2025/03/26/windows-11-lultimo-update-interrompe-il-ripristino-del-sistema-con-veeam-recovery-media/\",\n \"New npm attack poisons local packages with backdoors\": \"https://www.bleepingcomputer.com/news/security/new-npm-attack-poisons-local-packages-with-backdoors/\",\n \"Microsoft: Recent Windows updates cause Remote Desktop issues\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-recent-windows-updates-cause-remote-desktop-issues/\",\n \"UK warns of emerging threat from ‘sadistic’ online ‘Com networks’ of teenage boys\": \"https://therecord.media/uk-threat-com-sadistic-teenager\",\n \"La resilienza cyber nel mondo finanziario nel 2024\": \"https://www.cybersecurity360.it/outlook/la-resilienza-cyber-nel-mondo-finanziario-nel-2024/\",\n \"La Cina progredisce sui chip e sfida le restrizioni\": \"https://www.guerredirete.it/la-cina-progredisce-sui-chip-e-sfida-le-restrizioni/\",\n \"Dati sanitari per propaganda elettorale: il Garante ribadisce l’illiceità del trattamento\": \"https://www.cybersecurity360.it/legal/dati-sanitari-per-propaganda-elettorale-il-garante-ribadisce-lilliceita-deltrattamento/\",\n \"Unmasking the Classiscam in Central Asia\": \"https://www.group-ib.com/blog/unmasking-the-classiscam-in-central-asia/\",\n \"Windows 11 update breaks Veeam recovery, causes connection errors\": \"https://www.bleepingcomputer.com/news/microsoft/windows-11-update-breaks-veeam-recovery-causes-connection-errors/\",\n \"Be Smart, Work Less\": \"https://bfore.ai/a-founders-pov-be-smart-work-less/\",\n \"Google fixes Chrome zero-day exploited in espionage campaign\": \"https://www.bleepingcomputer.com/news/security/google-fixes-chrome-zero-day-exploited-in-espionage-campaign/\"\n },\n \"Posts By SpecterOps Team Members - Medium\": {\n \"Do You Own Your Permissions, or Do Your Permissions Own You?\": \"https://posts.specterops.io/do-you-own-your-permissions-or-do-your-permissions-own-you-c829a91f5e45?source=rss----f05f8696e3cc---4\"\n },\n \"360数字安全\": {\n \"360与广旅集团达成合作 共建两大中心！\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580114&idx=1&sn=aa554f928335541f44d0283a0beede0d&chksm=9f8d29daa8faa0cc53948e2ae8b04bfee23fe95565b16ce491ffb2e486a92d0c3cc81c83afed&scene=58&subscene=0#rd\",\n \"上海市普陀区政协调研360 政企协同共筑数字安全产业新高地\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580114&idx=2&sn=980cd6b8c1c705220567c5a01ebfddfe&chksm=9f8d29daa8faa0ccfe5bc98d6756fe04252f3e2344f4207e33efc1f31d6eae432068dab9d26a&scene=58&subscene=0#rd\"\n },\n \"The Grey Corner\": {\n \"GCP Service Command and Control HTTP traffic forwarding\": \"/2025/03/26/gcp-service-C2-forwarding.html\"\n },\n \"DARKNAVY\": {\n \"攻防速写｜我们拆了一台Starlink星链终端\": \"https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247488049&idx=1&sn=ed04d1fa11d49c8f9bae235320afe492&chksm=c1f456f9f683dfef80084ece3e5d886b5d3c9baaa50b71e7b35448b0347daaea5ffecafb466c&scene=58&subscene=0#rd\"\n },\n \"Schneier on Security\": {\n \"AI Data Poisoning\": \"https://www.schneier.com/blog/archives/2025/03/ai-data-poisoning.html\"\n },\n \"The Hacker News\": {\n \"New SparrowDoor Backdoor Variants Found in Attacks on U.S. and Mexican Organizations\": \"https://thehackernews.com/2025/03/new-sparrowdoor-backdoor-variants-found.html\",\n \"EncryptHub Exploits Windows Zero-Day to Deploy Rhadamanthys and StealC Malware\": \"https://thehackernews.com/2025/03/encrypthub-exploits-windows-zero-day-to.html\",\n \"RedCurl Shifts from Espionage to Ransomware with First-Ever QWCrypt Deployment\": \"https://thehackernews.com/2025/03/redcurl-shifts-from-espionage-to.html\",\n \"Malicious npm Package Modifies Local 'ethers' Library to Launch Reverse Shell Attacks\": \"https://thehackernews.com/2025/03/malicious-npm-package-modifies-local.html\",\n \"Sparring in the Cyber Ring: Using Automated Pentesting to Build Resilience\": \"https://thehackernews.com/2025/03/sparring-in-cyber-ring-using-automated.html\",\n \"Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks\": \"https://thehackernews.com/2025/03/zero-day-alert-google-releases-chrome.html\",\n \"How PAM Mitigates Insider Threats: Preventing Data Breaches, Privilege Misuse, and More\": \"https://thehackernews.com/2025/03/how-pam-mitigates-insider-threats.html\",\n \"Hackers Using E-Crime Tool Atlantis AIO for Credential Stuffing on 140+ Platforms\": \"https://thehackernews.com/2025/03/hackers-using-e-crime-tool-atlantis-aio.html\",\n \"New Security Flaws Found in VMware Tools and CrushFTP — High Risk, No Workaround\": \"https://thehackernews.com/2025/03/new-security-flaws-found-in-vmware.html\"\n },\n \"迪哥讲事\": {\n \"Src实战-垂直越权任意添加用户\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497323&idx=1&sn=eeb54bafcf04ab6832e57b46b1e43ff4&chksm=e8a5fc08dfd2751e525246e68c87385df72c6d08d9011c9f4050ffdbd43623bc9799c4e62919&scene=58&subscene=0#rd\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"ISC Stormcast For Wednesday, March 26th, 2025 https://isc.sans.edu/podcastdetail/9380, (Wed, Mar 26th)\": \"https://isc.sans.edu/diary/rss/31802\",\n \"[Guest Diary] Leveraging CNNs and Entropy-Based Feature Selection to Identify Potential Malware Artifacts of Interest, (Wed, Mar 26th)\": \"https://isc.sans.edu/diary/rss/31790\"\n },\n \"嘶吼专业版\": {\n \"SpyX 数据泄露，涉及近 200 万用户隐私\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581673&idx=1&sn=d4569671f9b94c30bd66d5612d60d8a6&chksm=e9146fd3de63e6c500443c8c6df413c6cdd11d0ce3ba1b69340cf127b09e568b10410583914f&scene=58&subscene=0#rd\",\n \"一图读懂《工业互联网安全分类分级管理办法》\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581673&idx=2&sn=ed293e8251b833d3bbef882371e3898e&chksm=e9146fd3de63e6c5fb3a64b7df9afed8530275187e10aef67411f4cc5723a11b34185bbfe316&scene=58&subscene=0#rd\"\n },\n \"Deep Web\": {\n \"Links\": \"https://www.reddit.com/r/deepweb/comments/1jkh6bq/links/\",\n \"Crypto question\": \"https://www.reddit.com/r/deepweb/comments/1jkbrlb/crypto_question/\"\n },\n \"RedTeam\": {\n \"安全研究团队的价值\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484377&idx=1&sn=52ec181039e185d4206b4f6ca1ee059d&chksm=c006cb29f771423f0996d63587d397f3975fab6038285adb5c07c41f63a4c73decc28c037c36&scene=58&subscene=0#rd\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Built a simple SAML testing tool - free, no signup required\": \"https://www.reddit.com/r/netsecstudents/comments/1jk8jgm/built_a_simple_saml_testing_tool_free_no_signup/\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Behind the Schenes of a Chinese Phishing-As-A-Service: Lucid\": \"https://www.reddit.com/r/netsec/comments/1jkiitu/behind_the_schenes_of_a_chinese/\",\n \"CodeQLEAKED – Public Secrets Exposure Leads to Potential Supply Chain Attack on GitHub CodeQL\": \"https://www.reddit.com/r/netsec/comments/1jkfjub/codeqleaked_public_secrets_exposure_leads_to/\",\n \"Llama's Paradox - Delving deep into Llama.cpp and exploiting Llama.cpp's Heap Maze, from Heap-Overflow to Remote-Code Execution\": \"https://www.reddit.com/r/netsec/comments/1jkg6po/llamas_paradox_delving_deep_into_llamacpp_and/\",\n \"Next.js and the corrupt middleware: the authorizing artifact\": \"https://www.reddit.com/r/netsec/comments/1jk0js7/nextjs_and_the_corrupt_middleware_the_authorizing/\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"\\\"vibe coding\\\" website same.dev was hacked and leaked some interesting user prompt data.\": \"https://www.reddit.com/r/blackhat/comments/1jkny6y/vibe_coding_website_samedev_was_hacked_and_leaked/\",\n \"Question/asking for help\": \"https://www.reddit.com/r/blackhat/comments/1jk4r4k/questionasking_for_help/\",\n \"Seeking Doxbin and telegram help\": \"https://www.reddit.com/r/blackhat/comments/1jk7hfc/seeking_doxbin_and_telegram_help/\",\n \"Does “Inspect Element” show passwords?\": \"https://www.reddit.com/r/blackhat/comments/1jk31d5/does_inspect_element_show_passwords/\"\n },\n \"Information Security\": {\n \"Motorola moto g play 2024 Smartphone, Android 14 Operating System, Termux, And cryptsetup: Linux Unified Key Setup (LUKS) Encryption/Decryption And The ext4 Filesystem Without Using root Access, Without Using proot-distro, And Without Using QEMU\": \"https://www.reddit.com/r/Information_Security/comments/1jklduz/motorola_moto_g_play_2024_smartphone_android_14/\"\n },\n \"Deeplinks\": {\n \"A New Tool to Detect Cellular Spying | EFFector 37.3\": \"https://www.eff.org/deeplinks/2025/03/new-tool-detect-cellular-spying-effector-373\",\n \"How to Delete Your 23andMe Data\": \"https://www.eff.org/deeplinks/2025/03/how-delete-your-23andme-data\"\n },\n \"Computer Forensics\": {\n \"Tools need to stop offering cloud collection sources if it doesn't work. What actually works for social media preservation/searching?\": \"https://www.reddit.com/r/computerforensics/comments/1jkpd12/tools_need_to_stop_offering_cloud_collection/\",\n \"New Purview\": \"https://www.reddit.com/r/computerforensics/comments/1jkjtqn/new_purview/\"\n },\n \"Security Affairs\": {\n \"New ReaderUpdate malware variants target macOS users\": \"https://securityaffairs.com/175891/malware/readerupdate-malware-variants-targets-macos.html\",\n \"BlackLock Ransomware Targeted by Cybersecurity Firm\": \"https://securityaffairs.com/175877/cyber-crime/blacklock-ransomware-targeted-by-cybersecurity-firm.html\",\n \"Google fixed the first actively exploited Chrome zero-day since the start of the year\": \"https://securityaffairs.com/175862/hacking/google-fixed-first-chrome-zero-day-in-2025.html\",\n \"Authentication bypass CVE-2025-22230 impacts VMware Windows Tools\": \"https://securityaffairs.com/175858/security/authentication-bypass-cve-2025-22230-in-vmware-tools-for-windows.html\"\n },\n \"dotNet安全矩阵\": {\n \"对抗逆向分析，通过 Sharp4NetVbsObfuscator 混淆 .NET 程序集和 VBS 脚本\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499267&idx=1&sn=faec3a94f85046337648c32b09f51ef3&chksm=fa5950eecd2ed9f8f5da8275611c561389aba8fdf2480d917698f44aceff1428e1a03cacd391&scene=58&subscene=0#rd\",\n \"新书速递 |《.NET安全攻防指南》上下册重磅来袭！\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499267&idx=2&sn=1462cf23c9a8568cc80705d2d3a1a69e&chksm=fa5950eecd2ed9f8c2caf6814f80d7ac0c5ed0ae176335adba61cd20bffbdc81cf9c36b92c01&scene=58&subscene=0#rd\",\n \"国内最专业、最全面的 [ .NET 代码审计 ] 体系化学习交流社区\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499267&idx=3&sn=888ba4c939a2dc61e94521c29164a287&chksm=fa5950eecd2ed9f8572daf9da0277bf97574de9d720961fa8fb4f088d60885204828b7ea62cc&scene=58&subscene=0#rd\"\n },\n \"Your Open Hacker Community\": {\n \"I finally learned some SSH basics!\": \"https://www.reddit.com/r/HowToHack/comments/1jkpqdj/i_finally_learned_some_ssh_basics/\",\n \"Hacking with little information\": \"https://www.reddit.com/r/HowToHack/comments/1jkmkhs/hacking_with_little_information/\",\n \"Penetration test on ip cctv\": \"https://www.reddit.com/r/HowToHack/comments/1jkjuqv/penetration_test_on_ip_cctv/\",\n \"Linux basics for hackers\": \"https://www.reddit.com/r/HowToHack/comments/1jk29cs/linux_basics_for_hackers/\",\n \"can i have some help in cs2 hacking?\": \"https://www.reddit.com/r/HowToHack/comments/1jkcfq5/can_i_have_some_help_in_cs2_hacking/\",\n \"Need help with SSL unpinning\": \"https://www.reddit.com/r/HowToHack/comments/1jkawy1/need_help_with_ssl_unpinning/\",\n \"Ethical cheating?\": \"https://www.reddit.com/r/HowToHack/comments/1jk7qbd/ethical_cheating/\"\n },\n \"字节跳动技术团队\": {\n \"重构智能设备管理范式：火山引擎端智能解决方案上新，多重 AI 服务即刻享用！\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513998&idx=1&sn=2b108c61604282ae5a61db4d11105f46&chksm=e9d37c6cdea4f57a0141402555f221a9b4c8bb3c304102c466c21d22c60c6a45791b19051c5a&scene=58&subscene=0#rd\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"The Pace of Investments Requires Better Risk Management, Boards Challenged, & More - BSW #388\": \"http://sites.libsyn.com/18678/the-pace-of-investments-requires-better-risk-management-boards-challenged-more-bsw-388\"\n }\n}"}}, "archive/daily/2025/2025-09-05.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747341.0073552, "n": 36508, "h": "d459bdb558f387ec", "c": "# 每日安全资讯（2025-09-05）\n\n- 安全客-有思想的安全新媒体\n - [ ] [“攻界智汇·技破万防”第十五期「度安讲」技术沙龙&极客之夜喊你集结！](https://www.anquanke.com/post/id/311870)\n- Taxodium\n - [ ] [日常#1 - 最近买的书、死神来了、空洞骑士、娃娃菜、博客改动、多邻国](https://taxodium.ink/nichijou-1.html)\n- paper - Last paper\n - [ ] [从 CVE 条目到可验证的漏洞利用：一个自动化的多智能体框架用于重现 CVE 漏洞](https://paper.seebug.org/3382/)\n- 奇安信攻防社区\n - [ ] [大模型投毒-训练、微调、供应链与RAG解析](https://forum.butian.net/share/4521)\n- Recent Commits to cve:main\n - [ ] [Update Thu Sep 4 17:25:34 UTC 2025](https://github.com/trickest/cve/commit/1bdad43665fd207f9d1e53745afb046ad96a20e7)\n- obaby@mars\n - [ ] [木鱼与金鱼](https://h4ck.org.cn/2025/09/21473)\n- Tenable Blog\n - [ ] [Identity-First Security: Mitigating the Cloud’s Greatest Risk Vector](https://www.tenable.com/blog/identity-first-security-mitigating-the-clouds-greatest-risk-vector)\n- SecWiki News\n - [ ] [SecWiki News 2025-09-04 Review](http://www.sec-wiki.com/?2025-09-04)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告（0720-0802）](https://www.4hou.com/posts/OGxN)\n - [ ] [美亚法度事业部成立！国投智能股份加速“AI+执法”赛道布局](https://www.4hou.com/posts/rp46)\n - [ ] [PromptLock勒索软件利用人工智能加密和窃取数据](https://www.4hou.com/posts/xyMr)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [GeoVision ASManager Windows Application 6.1.2.0 Remote Code Execution](https://cxsecurity.com/issue/WLB-2025090003)\n - [ ] [WordPress Plugin WP Publications < = 1.2 - Admin+ Stored XSS](https://cxsecurity.com/issue/WLB-2025090002)\n - [ ] [BarbarBaba 1.0 time-based blind sql injection](https://cxsecurity.com/issue/WLB-2025090001)\n- Trustwave Blog\n - [ ] [Chinese-Sponsored Threat Actors Attacks Spur International Security Advisory](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/chinese-sponsored-threat-actors-attacks-spur-international-security-advisory/)\n- Doonsec's feed\n - [ ] [【资料】朝鲜的导弹发展历史](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151885&idx=1&sn=0d791d870f0b41e69156bb71846836da)\n - [ ] [MetaCRM美特crm系统download-new.jsp接口存在任意文件读取漏洞 附POC](https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489044&idx=1&sn=6314169b063e10268f684c022991de6f)\n - [ ] [某盘rce简单点评](https://mp.weixin.qq.com/s?__biz=MzkyMDc0NDEzOA==&mid=2247483877&idx=1&sn=9fd4cbe0f29574618f7a07a46a4b9211)\n - [ ] [高丰度低浓铀（HALEU）：从核技术小众概念到AI时代核心战略物资](https://mp.weixin.qq.com/s?__biz=MzkxMTA3MDk3NA==&mid=2247487968&idx=1&sn=56930b3f2e2fefb6c3b56cf009bd1e85)\n - [ ] [旧瓶装新酒-迷幻的草台世界](https://mp.weixin.qq.com/s?__biz=MzU2MDYxNDQ4Ng==&mid=2247484544&idx=1&sn=20f720f077f1e8fe2b2efada3033e935)\n - [ ] [TrueNAS_SCALE存储设备实验](https://mp.weixin.qq.com/s?__biz=MzI0NTI4NjEwOQ==&mid=2247485023&idx=1&sn=c453657c11185829f1e4b04fa193332d)\n - [ ] [检测风险软件（Riskware）的安全价值——有效对抗混合执行体攻击（反病毒引擎篇）](https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650212378&idx=1&sn=2b0bf111a3136492adb9a546936be3ae)\n - [ ] [2025年互联网公司上半年营收利润排行](https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247545527&idx=1&sn=dd81be5453d197646a1c96663d4c5585)\n - [ ] [某东SRC专项活动踩坑](https://mp.weixin.qq.com/s?__biz=Mzg4Nzg2MDA0MA==&mid=2247484757&idx=1&sn=befcbb1180bb4998b62147bc39cab01f)\n - [ ] [一封钓鱼邮件，能让能源基础设施陷入瘫痪？](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491943&idx=1&sn=2411e4f9da9f93bc790333b374752abb)\n - [ ] [【高危漏洞预警】百度网盘Windows客户端远程命令执行漏洞](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490698&idx=1&sn=1af7a1c354e94ddcfad22bea3202b7b6)\n - [ ] [【高危漏洞预警】XWiki路径遍历漏洞(CVE-2025-55747-CVE-2025-55748](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490698&idx=2&sn=17d43602dfc42418fa0c5304ffc032d4)\n - [ ] [《懂不懂社工库开创鼻祖的含金量》(狗头保命)](https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247486051&idx=1&sn=26c92cc3ed7101d07ba1383a07fa25c6)\n - [ ] [全球三大网络安全巨头同时被黑](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514954&idx=1&sn=db454fd1560860cfb6a2c719f50e9b40)\n - [ ] [Zip密码破解工具 -- ZipCracker](https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486901&idx=1&sn=7b022ee5fa14fc77cb981e2141273594)\n - [ ] [100页 前沿人工智能风险管理框架实践：风险分析技术报告](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290761&idx=1&sn=26050f0cb561f08bcf17e3567ad2303d)\n - [ ] [人工智能、算力算网 今天上传文件列表](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290761&idx=2&sn=9256f1988ceb49d7bc0db012817fab3c)\n - [ ] [6月共97人获取NISP二级证书](https://mp.weixin.qq.com/s?__biz=MzkwNDI0MjkzOA==&mid=2247486249&idx=1&sn=6edfeaf1707d25c05af1f8f34f474441)\n - [ ] [神经元的权重游戏：为什么你的选择塑造了你](https://mp.weixin.qq.com/s?__biz=MzA4NzA5OTYzNw==&mid=2247484649&idx=1&sn=d6e460d9c6ae4253239d07d9223ef2e3)\n - [ ] [别天天想着留后门了：前员工恶意报复公司网络获刑4年](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643198&idx=1&sn=05d21a7cb9cc190d04f1ec7fa423be58)\n - [ ] [免费赠送丨网络安全意识：宣传讲义6篇](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643198&idx=2&sn=354289f2d1559403bbf48349546a9485)\n - [ ] [看完九三阅兵，网络安全的含金量还在上升](https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247524901&idx=1&sn=111561839e68da7fcbc5728519eafe29)\n - [ ] [【招聘】电信集团北京网络安全技术中心招人啦～](https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247487236&idx=1&sn=41e734a39f82d2882ba956c7f1fea28b)\n - [ ] [华为2025欧洲汽车行业安全与隐私合规遵从指南](https://mp.weixin.qq.com/s?__biz=MzkyOTMwMDQ5MQ==&mid=2247520454&idx=1&sn=cd9d588068eac1fbd43db294437f78cc)\n - [ ] [北信源参与老挝共建人工智能及反诈平台](https://mp.weixin.qq.com/s?__biz=MzA5MTM1MjMzNA==&mid=2653426744&idx=1&sn=405cf57f7c2e42d24334e805cbd1e285)\n - [ ] [推免报名 | 欢迎报名华东师范大学密码学院！](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500645&idx=1&sn=2f9e3e209b2b1d800ad2836e36f5ecc0)\n - [ ] [报名 | 清华美团数字生活研究院学术论坛——大模型：前沿理论与产业变革](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781386&idx=1&sn=f5c9294a9c6da17b46a786d1723efabd)\n - [ ] [将 AI 融入工作流：滴滴前端工程师的研发效率提升笔记](https://mp.weixin.qq.com/s?__biz=MzU1ODEzNjI2NA==&mid=2247574704&idx=1&sn=f501b660c017f951c6c79089f630d4ee)\n - [ ] [2025年中国网络安全年会（暨国家网络安全宣传周网络安全协同防御分论坛）正式启动报名！](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500351&idx=1&sn=40bd141c37155ae91cd7ee222c691d35)\n - [ ] [Linux操作系统底层原理：进程创建、等待与终止](https://mp.weixin.qq.com/s?__biz=MzU2MjU2MzI3MA==&mid=2247484846&idx=1&sn=672aad2abc152eddd3d596e58743df2a)\n - [ ] [老链新看——CommonsCollections链](https://mp.weixin.qq.com/s?__biz=MzUzNDMyNjI3Mg==&mid=2247487636&idx=1&sn=2fc58a852c1698737c5f9aac91e57b0b)\n - [ ] [2025年中国网络安全年会学术分论坛会议正式启动报名](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500350&idx=1&sn=769779621f7fbe81737dd01194d7e372)\n - [ ] [十万奖励、中秋礼盒！双十一保卫战召唤你来参与](https://mp.weixin.qq.com/s?__biz=MzI3NDEzNzIxMg==&mid=2650493110&idx=1&sn=821dc6ee3d0a131892215024146a8004)\n - [ ] [flowable流程引擎JDK 8-21 全版本内存马注入](https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247522996&idx=2&sn=008651508d1ca92022db04df2161eda4)\n - [ ] [某漏洞复现](https://mp.weixin.qq.com/s?__biz=MzkxNzY0MzE2NQ==&mid=2247484054&idx=1&sn=716a3a3b5b38a2d8648bea6a640d4e3c)\n - [ ] [2025年度湖北省科学技术奖复评通过项目(网络空间安全领域)](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493718&idx=1&sn=06d6fc754c9afc29bbc8e17c8416e6cb)\n - [ ] [TimelineSec助力腾讯安全南京站沙龙，与大咖共探AI攻防！](https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497692&idx=1&sn=08a6fee8d4f3387361c9a42588de5398)\n - [ ] [你的AI“体检”了吗？开源AI红队测试平台，一键自查三大风险](https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649795637&idx=1&sn=5fddb7e18ac14e45ef1f2e56db38fa67)\n - [ ] [创维半年财报透视：创新品类加力破局，彩电抢占高端消费升级潮](https://mp.weixin.qq.com/s?__biz=MzU2MjU2MzI3MA==&mid=2247484844&idx=1&sn=81b1d973d76828ba04c9e3442a904cda)\n - [ ] [直播报名丨深信服托管云，如何破解二级医院的信息化困局？](https://mp.weixin.qq.com/s?__biz=MjM5MTAzNjYyMA==&mid=2650602232&idx=1&sn=d1bdf965cd280e83d450a5519e108179)\n - [ ] [如何成为一名黑客？分享零基础自学黑客的正确路线，让你学起来事半功倍！](https://mp.weixin.qq.com/s?__biz=MzkxNDU0MTUyNw==&mid=2247493608&idx=1&sn=a46be6acb26f7b9f33a47a6c46910668)\n - [ ] [捷豹路虎称生产系统因网络攻击遭“严重破坏”](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523957&idx=1&sn=ce7e15637dae38208a5589d732409044)\n - [ ] [倒计时1天！中原数据大讲堂（第二讲）明天开讲](https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448690241&idx=1&sn=5277ab0e6ccec88aeac2b1158af03296)\n - [ ] [国家密码管理局发布《国家密码管理局商用密码行政检查事项清单》](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601289&idx=2&sn=86ba165b6836ad0129cec59ffdf193f8)\n - [ ] [数据跨境合规标准来了！聚焦智能软硬件高频业务场景与应对方案](https://mp.weixin.qq.com/s?__biz=Mzg4MTcyMTc5Nw==&mid=2247488602&idx=1&sn=f1aceeb93606ccad1f9d50b9171e20ed)\n - [ ] [【工具分享】CVE Push Service | 自动化高危漏洞情报推送](https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486585&idx=1&sn=5638bc0b244deb27780b2c6bd9a1fddc)\n - [ ] [铸数字长城，护无形疆土：致敬新时代的网络强国守护者](https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247504018&idx=1&sn=14f5005969f321fa2036699bd756ad03)\n - [ ] [经纬信安上榜《2025中国网络安全市场年报》“优秀标的企业”](https://mp.weixin.qq.com/s?__biz=MzIwNzE2MDc5Mg==&mid=2649267806&idx=1&sn=23f9a2353a69b021b2f7809e228c60f4)\n - [ ] [零基础入门SRC斩获6W赏金！新手小白如何避免\\\"听不懂、跟不上、挖不到\\\"](https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247494474&idx=1&sn=01c84b640d6b9492e6ebd814342e778b)\n - [ ] [提示词注入攻击可使AI驱动的网络安全工具反噬自身](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327146&idx=3&sn=1a2bdae52c80d54eacf77dd3ccaf4052)\n - [ ] [1.1.1.1 DNS服务误发TLS证书事件：攻击者可解密用户流量](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327146&idx=4&sn=35796f321e7470b435f38da4d5100a55)\n - [ ] [Windsurf MCP 集成安全控制将用户置于风险](https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247485147&idx=1&sn=a3d646d1153c858ae5d3649f8c5b8d03)\n - [ ] [美国空军未来网络战略：以商用技术达成六大目标，聚集作战效能和战斗人员体验](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247513573&idx=1&sn=4b52a7b22547b4e7a0235f9fd03335c7)\n - [ ] [论坛·原创 | 美国技术壁垒战略对我国科技发展的影响与对策](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=1&sn=eb898e9c7612272479601106b96c5cdd)\n - [ ] [专家观点 | 人工智能赋能科学研究要防范“机器幻觉”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=2&sn=b8953f6ef052f140a208cf49cf5c2060)\n - [ ] [前沿 | 联邦学习：兼顾数据价值释放与隐私权利保护](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=3&sn=a483634534686233a48d6037578abbeb)\n - [ ] [观点 | 网络暴力信息的风险预防与治理](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=4&sn=2e3504eea41bb844a13fa633b62dfe28)\n - [ ] [超5万终端、业务覆盖全球，某家电巨头如何弥补终端安全管理短板？](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628887&idx=1&sn=3f9a8ccd15b488bb160481d16b494288)\n - [ ] [开学了！奇安信集团新一届卓越工程师正式入企实践](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628887&idx=2&sn=4f6b7d07ecdd4358c89f7b66eeba60ae)\n - [ ] [奇安信助力陕西省国资智慧监管，与陕数集团签约](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628887&idx=3&sn=4b1416966873306328ebf139c0c3cb5a)\n - [ ] [s1ngularity追踪：Nx供应链攻击中的战术与反思](https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484864&idx=1&sn=b7e52feed5a2b6245dfb2f82e9c8bf2b)\n - [ ] [“安全重构·智启未来”第十六期「度安讲」 技术沙龙来了！](https://mp.weixin.qq.com/s?__biz=MzA4ODc0MTIwMw==&mid=2652543037&idx=1&sn=c00819ea92f588285fc1ba0d6947db8a)\n - [ ] [2025南亚东南亚数字合作大会: 360发布“网数模一体化”Agentic SOC](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581917&idx=2&sn=cf1f21f153b61e5b9f877598b63df410)\n - [ ] [谷歌因未经用户同意在 Gmail 插入广告被法国罚款 3.25 亿欧元](https://mp.weixin.qq.com/s?__biz=MzkxMjY3MTI4Mg==&mid=2247485248&idx=1&sn=015c8836e6e30563f9669eb5cdea5c26)\n - [ ] [新品发布倒计时｜大模型深度赋能，效率源AI助力线索挖掘更便捷！](https://mp.weixin.qq.com/s?__biz=MjM5ODQ3NjAwNQ==&mid=2650554477&idx=1&sn=a93a0ffef80408c7a56075fa19bf4652)\n - [ ] [网络工程师想要转行，有没有啥建议？](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247531659&idx=1&sn=aa577d4563c1ed101dcf21912cdfabef)\n - [ ] [习近平在纪念中国人民抗日战争暨世界反法西斯战争胜利80周年大会上发表重要讲话](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254218&idx=1&sn=267d4653f9d3df4014cb8a3c8cf20510)\n - [ ] [【工信动态】工信部圆满完成纪念中国人民抗日战争暨世界反法西斯战争胜利80周年大会无线电安全、信息通信服务和网络安全保障任务](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254218&idx=2&sn=d1033a160996593797156a30c59d8545)\n - [ ] [【赛迪热点】2025无人智能系统测评与生态创新大会圆满召开——强化智能标准引领、构建综合检测体系，促进行业生态规范化新征程](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254218&idx=3&sn=04d5ef3c96013db510b7a1d0277ef394)\n - [ ] [团队宣传片来啦！](https://mp.weixin.qq.com/s?__biz=MzkxNjcyMTc0NQ==&mid=2247484544&idx=1&sn=cc110d471592c2916fff24fbaece002c)\n - [ ] [代码/PPT已更新完结！《安卓软件开发与逆向分析》：赠PDF算法书+全套项目源码包](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599343&idx=3&sn=06d4fd47b1eb50703882e32ad7d9290d)\n - [ ] [赛宁网安实力上榜《2025中国网络安全市场100强》](https://mp.weixin.qq.com/s?__biz=MzA4Mjk5NjU3MA==&mid=2455490050&idx=1&sn=70fbe57514995cfe74d6d7b9683ae019)\n - [ ] [VLDB2025 | Magnus: 字节跳动面向大规模机器学习的数据管理方案](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247516514&idx=1&sn=7d72f64b15055ccafeb7feba85da4b55)\n - [ ] [欧洲学者分析AI大模型在网络安全自动化领域的应用前景](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514954&idx=2&sn=cd5f336855ddff4795a830117f25e072)\n - [ ] [内网渗透全景实战！ATT&CK Lab13 重磅上线](https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523746&idx=1&sn=05546b1bc987a28fd6d84a3bc1873780)\n - [ ] [弹性网络虚拟化Java实现一单路径映射v2s数据结构分析](https://mp.weixin.qq.com/s?__biz=MzU3MzAzMzk3OA==&mid=2247485179&idx=1&sn=336be6dd58e26cdb76924238ebdf5df3)\n - [ ] [从删库到跑路：我的Python全栈踩坑实录](https://mp.weixin.qq.com/s?__biz=Mzg3ODAzNjg5OA==&mid=2247485401&idx=1&sn=2dc6e42f780c7ba8ce429b0b6931fd1d)\n - [ ] [【助力过中项】04-0-项目成本管理](https://mp.weixin.qq.com/s?__biz=MzUxNDg3ODY2MQ==&mid=2247485491&idx=1&sn=b34106ab16b414d818535ac691064270)\n - [ ] [【助力过中项】04-1-规划成本管理](https://mp.weixin.qq.com/s?__biz=MzUxNDg3ODY2MQ==&mid=2247485491&idx=2&sn=2a63009742d826fab6824db4b1a03736)\n - [ ] [【助力过中项】04-2-估算成本](https://mp.weixin.qq.com/s?__biz=MzUxNDg3ODY2MQ==&mid=2247485491&idx=3&sn=b4ce77f1bc9c7c1113eb6a1f8371dead)\n - [ ] [【助力过中项】04-3-制定预算](https://mp.weixin.qq.com/s?__biz=MzUxNDg3ODY2MQ==&mid=2247485491&idx=4&sn=9b40b7d256798fda2d1581994a8702b4)\n - [ ] [【助力过中项】04-4-控制成本](https://mp.weixin.qq.com/s?__biz=MzUxNDg3ODY2MQ==&mid=2247485491&idx=5&sn=d384080c19df85476db185545f1e6be2)\n - [ ] [Vulnhub-BillyMadison](https://mp.weixin.qq.com/s?__biz=Mzg5MDk4MzkyMA==&mid=2247484945&idx=1&sn=efd73a7961cd64f5052b26db105c241f)\n - [ ] [【论文速读】| SoK：大语言模型生成的文本网络钓鱼活动的生成、特征和检测的端到端分析](https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496970&idx=1&sn=054efda08b640f422f1d0120f5b92fd4)\n - [ ] [安全公司曝光微软 VS Code 市场漏洞，黑客可冒充已移除项目](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247542944&idx=1&sn=d6542ae81fd4ce81a37c9b15db52711f)\n - [ ] [铭记历史荣光，共筑安全长城——梆梆安全党支部组织观看抗战胜利80周年大阅兵直播党日活动纪实](https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651136194&idx=1&sn=ad6f1006d2226d48cf4029d10dae4c59)\n - [ ] [梆梆安全首批入驻“数字深圳联合创新中心”，以创新安全能力，赋能城市数字未来](https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651136194&idx=2&sn=5b592a69e29407d153f4665f2b86346a)\n - [ ] [电脑健康也能AI“算命”？腾讯iOA这个新功能绝了！](https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247527870&idx=1&sn=117a3015998ae3b976a645e5597a9221)\n - [ ] [破解供数用数流动难题 可信数据空间多维构建提速](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601289&idx=1&sn=e216de1d8fc2a0e6123f6f5e027dea6a)\n - [ ] [天融信李雪莹受邀观礼九三阅兵：守护网络空间安全是我们共同的使命](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601289&idx=3&sn=c55e2338ccfdcd625b2c9bba0489a8f9)\n - [ ] [【网页逆向】QQ-music-新vmp(一期sign)](https://mp.weixin.qq.com/s?__biz=MzU4MDY4ODU2MA==&mid=2247486785&idx=1&sn=de92fe21fa7420cd4cf9289f49492596)\n - [ ] [腾讯安全沙龙（南京站）硬核来袭｜与大咖共探AI攻防，挑战30万LLMWAF大奖](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496653&idx=1&sn=25b28df6b70e5e1e51f07b8a2aa4b3b8)\n - [ ] [漏洞预警/通知千千万，几张图让你知道谁家更权威](https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247484293&idx=1&sn=ca98698b4382e60ecca7865398c2b622)\n - [ ] [擎画数字安全新图景：中网信安云端授课，赋能西北网安人才战略新高地](https://mp.weixin.qq.com/s?__biz=MzA3Nzk3NTA4Nw==&mid=2247517695&idx=1&sn=f0b2dfd2dd2cf17808100c291ff87421)\n - [ ] [锻造网安尖兵！网络安全实训在中国民用航空飞行学院火热开启](https://mp.weixin.qq.com/s?__biz=MzA3Nzk3NTA4Nw==&mid=2247517695&idx=2&sn=c3ea0f516a870bcdf73a73520a072729)\n- The Trail of Bits Blog\n - [ ] [Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more](https://blog.trailofbits.com/2025/09/03/subverting-code-integrity-checks-to-locally-backdoor-signal-1password-slack-and-more/)\n- Malwarebytes\n - [ ] [Roblox introduces age checks to use communication features](https://www.malwarebytes.com/blog/news/2025/09/roblox-introduces-age-checks-to-use-communication-features)\n - [ ] [Give your PC a fresh start: New free tools to boost your PC’s speed, security, and peace of mind](https://www.malwarebytes.com/blog/product/2025/09/give-your-pc-a-fresh-start-new-free-tools-to-boost-your-pcs-speed-security-and-peace-of-mind)\n - [ ] [TP-Link warns of botnet infecting routers and targeting Microsoft 365 accounts](https://www.malwarebytes.com/blog/news/2025/09/tp-link-warns-of-botnet-infecting-routers-and-targeting-microsoft-365-accounts)\n - [ ] [Popular Android VPN apps found to have security flaws and China links](https://www.malwarebytes.com/blog/news/2025/09/popular-android-vpn-apps-found-to-have-security-flaws-and-china-links)\n - [ ] [No we didn’t warn all Gmail users about imminent digital doom, says Google](https://www.malwarebytes.com/blog/news/2025/09/no-we-didnt-warn-all-gmail-users-about-imminent-doom-says-google)\n- Horizon3.ai\n - [ ] [Endpoint Security Effectiveness: From Assumption to Proof](https://horizon3.ai/intelligence/blogs/endpoint-security-effectiveness-from-assumption-to-proof/)\n - [ ] [Proof, Not Promises: Redefining Cybersecurity for the Defense Industrial Base](https://event.on24.com/wcc/r/5061004/029F087442C90F31F828281D2DD41335)\n- PortSwigger Blog\n - [ ] [Watch the webinar: Scale secure coverage without scaling headcount](https://portswigger.net/blog/watch-the-webinar-scale-secure-coverage-without-scaling-headcount)\n- bishopfox.com\n - [ ] [Demystifying 5G Security: Understanding the Registration Protocol](https://bishopfox.com/blog/demystifying-5g-security-understanding-the-registration-protocol)\n- Wallarm\n - [ ] [Reflecting on Wallarm’s Journey: Growth, Resilience, and What Comes Next](https://lab.wallarm.com/reflecting-wallarms-journey-growth-resilience-what-comes-next/)\n- 奇客Solidot–传递最新科技情报\n - [ ] [Atlassian 以 6.1 亿美元收购 Browser Company](https://www.solidot.org/story?sid=82229)\n - [ ] [美国失业人数超过招聘人数](https://www.solidot.org/story?sid=82228)\n - [ ] [Fina Root CA 签发了三张 1.1.1.1 证书](https://www.solidot.org/story?sid=82227)\n - [ ] [《空洞骑士：丝之歌》上线，各大游戏平台服务器全部崩溃](https://www.solidot.org/story?sid=82226)\n - [ ] [森林砍伐让亚马孙雨林旱季降雨减少](https://www.solidot.org/story?sid=82225)\n - [ ] [瑞士发布了完整开源的大模型 Apertus](https://www.solidot.org/story?sid=82224)\n - [ ] [研究预测地球碳封存能力上限为 1.46 万亿吨](https://www.solidot.org/story?sid=82223)\n - [ ] [美国撤销台积电南京工厂的优待措施](https://www.solidot.org/story?sid=82222)\n - [ ] [照亮微塑料的细菌](https://www.solidot.org/story?sid=82221)\n - [ ] [太阳耀斑温度比以前认为的高出 6.5 倍](https://www.solidot.org/story?sid=82220)\n- HackerNews\n - [ ] [大型 IPTV 盗版网络曝光：涉 1100 多个域名，威胁主流娱乐平台](https://hackernews.cc/archives/60637)\n - [ ] [隐秘钓鱼骗局瞄准 PayPal 用户](https://hackernews.cc/archives/60634)\n - [ ] [CISA 警告：黑客正积极利用 TP-Link 与 WhatsApp 漏洞发起攻击](https://hackernews.cc/archives/60631)\n- vivo千镜\n - [ ] [vivo牵头制定的端侧大模型安全标准正式发布，自研技术积淀铸就行业安全共识](https://mp.weixin.qq.com/s?__biz=MzI0Njg4NzE3MQ==&mid=2247492204&idx=1&sn=d1c312086355c1c139544189de0061b5)\n- 绿盟科技技术博客\n - [ ] [Gitblit身份验证绕过漏洞(CVE-2024-28080)](https://blog.nsfocus.net/cve-2024-28080/)\n - [ ] [H2O-3 JDBC反序列化漏洞（CVE-2025-6507）](https://blog.nsfocus.net/h2o-3-jdbc/)\n- 安全内参\n - [ ] [全球三大网络安全巨头同时被黑](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514954&idx=1&sn=db454fd1560860cfb6a2c719f50e9b40)\n - [ ] [欧洲学者分析AI大模型在网络安全自动化领域的应用前景](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514954&idx=2&sn=cd5f336855ddff4795a830117f25e072)\n- rtl-sdr.com\n - [ ] [Decoding ADS-C with a Cheap Aliexpress LNB and SDRplay RSP1B](https://www.rtl-sdr.com/decoding-ads-c-with-a-cheap-aliexpress-lnb-and-sdrplay-rsp1b/)\n - [ ] [rtl_tcp_echo: Record and Replay IQ Streams with a Transparent rtl_tcp Proxy](https://www.rtl-sdr.com/rtl_tcp_echo-record-and-replay-iq-streams-with-a-transparent-rtl_tcp-proxy/)\n- 腾讯安全应急响应中心\n - [ ] [你的AI“体检”了吗？开源AI红队测试平台，一键自查三大风险](https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207345&idx=1&sn=35e45484b1e9eedf9c2931a690644b97)\n- 我的安全视界观\n - [ ] [SDL 89/100问：如何推动业务方修复开源组件漏洞？](https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487152&idx=1&sn=41d92752469e0ed30ae939b7c15ed6e1)\n- dotNet安全矩阵\n - [ ] [[80]个反序列化漏洞全景系列 (1) | 一个大多数人都容易忽视的 Ysoserial.Net 使用误区](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500505&idx=1&sn=d33d0d67d6079717ef63bbbb14705154)\n - [ ] [[80]个反序列化漏洞全景合集 (2) | 回答一个 .NET 反序列化漏洞载荷的问题](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500505&idx=2&sn=86d160d643980a64da27a602a03f49b7)\n - [ ] [[80]个反序列化漏洞全景合集 (3) | 介绍一个 ViewState 反序列化不常见的知识点](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500505&idx=3&sn=5cdb8db7e9b012effddfdd3f7d2e1f51)\n- 威努特安全网络\n - [ ] [新版《国家密码管理局商用密码行政检查事项清单》生效](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651135371&idx=1&sn=491fd44f74f90985bc88d1404850288c)\n- 安全研究GoSSIP\n - [ ] [推免报名 | 欢迎报名华东师范大学密码学院！](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500645&idx=1&sn=2f9e3e209b2b1d800ad2836e36f5ecc0)\n- 奇安信 CERT\n - [ ] [【已复现】XWiki 路径遍历漏洞(CVE-2025-55747、CVE-2025-55748)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503904&idx=2&sn=de6650b160170287c76cea1d44a1a5cf)\n- 安全圈\n - [ ] [【安全圈】公安机关依法打击非法破解无人机飞行控制系统黑客违法犯罪](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071536&idx=1&sn=e4c650933d18930a12d63a92918b43c4)\n - [ ] [【安全圈】微软承认 Win11 兼容性问题：TLS 1.3 导致 IIS Express 验证故障](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071536&idx=2&sn=a510936da763db6a1000b078f06aa2c4)\n - [ ] [【安全圈】安全公司曝光微软 VS Code 市场漏洞，黑客可冒充已移除项目](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071536&idx=3&sn=3693502529619e5f62dcd33606707e69)\n- 看雪学苑\n - [ ] [2025 KCTF | 第十题《涅磐，亦是新生》设计思路及解析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599343&idx=1&sn=dad1e259ee7a160b913731f9d84c50ac)\n - [ ] [HexStrike AI安全工具遭滥用，零日漏洞攻击时间缩短至10分钟](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599343&idx=2&sn=0f8f48f36ca1da8eebf8aa0a4d440213)\n - [ ] [代码/PPT已更新完结！《安卓软件开发与逆向分析》：赠PDF算法书+全套项目源码包](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599343&idx=3&sn=06d4fd47b1eb50703882e32ad7d9290d)\n - [ ] [一年四季都能穿！看雪2025周边T恤：用技术诠释安全态度](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599343&idx=4&sn=0d51ab445f53e2c955edfb7d3e59614c)\n- 安全学术圈\n - [ ] [2025年度湖北省科学技术奖复评通过项目(网络空间安全领域)](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493718&idx=1&sn=06d6fc754c9afc29bbc8e17c8416e6cb)\n- 数世咨询\n - [ ] [为什么88%的CISO在零信任实施中“崩溃”？](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540208&idx=1&sn=d0608242e2d35b927a3ae4d7ae1bd772)\n- 腾讯安全威胁情报中心\n - [ ] [H2O-3 远程代码执行漏洞简报（CVE-2025-5662）](https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510819&idx=1&sn=4a5488a7fad0c527df3a6f46d6726ed7)\n- 信息安全国家工程研究中心\n - [ ] [国家密码管理局公告(第52号)丨《国家密码管理局商用密码行政检查事项清单》发布](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247500880&idx=1&sn=87190177421c45eba04ca4f9b69bb5db)\n- 吾爱破解论坛\n - [ ] [【PC样本分析】某多多上steamcdk激活码的操作分析](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651142835&idx=1&sn=502b8333d3db86da16fe1ddf5ecd60ff)\n- 信安之路\n - [ ] [技巧 | web 缓存中毒是怎么一回事儿](https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500129&idx=1&sn=24cc237d1ea313f52c23a26594c13ecd)\n- 安全牛\n - [ ] [《AI赋能主动防御技术应用指南（2025版）》报告发布（附下载二维码）](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138583&idx=1&sn=e3c0c2a5828aab6a7ba86740413167a2)\n - [ ] [特别关注 | 《国家密码管理局商用密码行政检查事项清单》发布](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138583&idx=2&sn=84b5003ccb39453cef3b69bf11c2fd17)\n - [ ] [ChatGPT突发全球性宕机事故，或由前端系统异常导致；抖音安全中心公告:严厉打击AI滥用等欺诈行为 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138583&idx=3&sn=cce3362a39922de19bd2538e86bdf42b)\n- 奇安信威胁情报中心\n - [ ] [黄金暴涨下的网络暗战：UTG-Q-010组织供应链攻击直插香港金融心脏](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247515949&idx=1&sn=9f574b014a89e7d4faf9d6e1990c83d3)\n- 字节跳动安全中心\n - [ ] [教你打造一款 AI 安全助手 | 安全 MCP 的实践指南](https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495558&idx=1&sn=cbd3d1328f428f2a171c4906b10132a0)\n- 嘶吼专业版\n - [ ] [PromptLock勒索软件利用人工智能加密和窃取数据](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584489&idx=1&sn=e705430fede3746b888d699fae5ecfb8)\n- 百度安全应急响应中心\n - [ ] [“安全重构·智启未来”第十六期「度安讲」 技术沙龙来了！](https://mp.weixin.qq.com/s?__biz=MzA4ODc0MTIwMw==&mid=2652543037&idx=1&sn=c00819ea92f588285fc1ba0d6947db8a)\n- 极客公园\n - [ ] [传 DeepSeek AI 代理新模型年底发布；马斯克「金色擎天柱」首曝；比亚迪不回应销量下调传闻 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653086127&idx=1&sn=1d3810546c36e58e86374b2c3c28978b)\n - [ ] [24999 元！华为推了一个「最大」的 Mate！](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653086109&idx=1&sn=d9ecea5c1600238fdbf28a034a5d516d)\n - [ ] [「一句话生成爆款视频」，这款 AI 流量神器有点东西｜AI 上新](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653086096&idx=1&sn=5e3f8fe6eacf8ed882654d2ccac38747)\n - [ ] [传特斯拉ModelYL日均订单过万；苹果联手谷歌，整合Gemini；优必选获2.5亿，全球最大人形机器人订单 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653086068&idx=1&sn=6f64399c7d89024c2422dc6a4916d769)\n- 情报分析师\n - [ ] [2025年巴基斯坦俾路支解放军（BLA）动态及地缘安全态势全景分析](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562187&idx=1&sn=d85e34afa9fecd7e3e13515c649f7b1e)\n- 网安杂谈\n - [ ] [【2026合作伙伴巡礼】与您分享平航Telegram取证一站式解决方案！](https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650889712&idx=1&sn=d3b9dfd48e42da58ac4313ad7cd3b01f)\n- 阿里安全响应中心\n - [ ] [特别奖励揭晓｜18家SRC邀您加入双11安全保卫战](https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998022&idx=1&sn=0a1373dbe50709375c20d48fc4b4ee63)\n- 美团技术团队\n - [ ] [报名 | 清华美团数字生活研究院学术论坛——大模型：前沿理论与产业变革](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781386&idx=1&sn=f5c9294a9c6da17b46a786d1723efabd)\n- OPPO安全中心\n - [ ] [【中秋好礼、翻倍奖励、新人加成】OSRC邀你共同加入双十一保卫战](https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494444&idx=1&sn=4079fa6372c3b717260d632583051366)\n- 云鼎实验室\n - [ ] [腾讯安全沙龙（南京站）硬核来袭｜与大咖共探AI攻防，挑战30万LLMWAF大奖](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496653&idx=1&sn=25b28df6b70e5e1e51f07b8a2aa4b3b8)\n- 字节跳动技术团队\n - [ ] [VLDB2025 | Magnus: 字节跳动面向大规模机器学习的数据管理方案](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247516514&idx=1&sn=7d72f64b15055ccafeb7feba85da4b55)\n- 代码卫士\n - [ ] [捷豹路虎称生产系统因网络攻击遭“严重破坏”](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523957&idx=1&sn=ce7e15637dae38208a5589d732409044)\n - [ ] [Frostbyte10：威胁全球供应链的10个严重漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523957&idx=2&sn=288b0d14a657b13c7f1a6b14705a44e8)\n- 360数字安全\n - [ ] [微软漏洞情报“断供”危机何解？360大情报体系领航破局](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581917&idx=1&sn=0f8138df75c200e73c0e9a01dcdef347)\n - [ ] [2025南亚东南亚数字合作大会: 360发布“网数模一体化”Agentic SOC](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581917&idx=2&sn=cf1f21f153b61e5b9f877598b63df410)\n- 国家互联网应急中心CNCERT\n - [ ] [网络安全信息与动态周报2025年第35期（8月25日-8月31日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500347&idx=1&sn=83afa5c921752de8b7ff16af0b30ba44)\n- DEF CON Announcements!\n - [ ] [DEF CON Bahrain Call for Demo Labs!](https://defcon.org/html/defcon-bahrain/dc-bahrain-index.html)\n - [ ] [Thanks for a Fantastic DEF CON](https://defcon.org/html/defcon-33/dc-33-news.html#goodbye)\n- 悬镜安全\n - [ ] [五年霸榜｜悬镜安全持续引领《2025年中国网络安全市场全景图》DevSecOps开发安全赛道](https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647796915&idx=1&sn=2d20ead31c0234cbeafc8c44ac1933ae)\n- TrustedSec\n - [ ] [HIPAA Protected Health Information - When Health Information Isn’t Protected](https://trustedsec.com/blog/hipaa-protected-health-information-when-health-information-isnt-protected)\n- ICT Security Magazine\n - [ ] [Ethical hacking e CTF: formazione della prossima generazione di professionisti della cybersecurity](https://www.ictsecuritymagazine.com/articoli/ethical-hacking/)\n- 放之\n - [ ] [从删库到跑路：我的Python全栈踩坑实录](https://mp.weixin.qq.com/s?__biz=Mzg3ODAzNjg5OA==&mid=2247485401&idx=1&sn=2dc6e42f780c7ba8ce429b0b6931fd1d)\n- 迪哥讲事\n - [ ] [有趣的逻辑缺陷到后台登录](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498143&idx=1&sn=d0c6280a672ca1304055ffc4ee46b58f)\n- Future of Tech and Security: Strategy & Innovation with Raffy\n - [ ] [Go-to-Market Strategies for Small Security Companies](https://raffy.ch/blog/2025/09/04/go-to-market-strategies-for-small-security-companies/)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [ISC Stormcast For Thursday, September 4th, 2025 https://isc.sans.edu/podcastdetail/9598, (Thu, Sep 4th)](https://isc.sans.edu/diary/rss/32258)\n- Schneier on Security\n - [ ] [Generative AI as a Cybercrime Assistant](https://www.schneier.com/blog/archives/2025/09/generative-ai-as-a-cybercrime-assistant.html)\n- 补天平台\n - [ ] [2025中秋礼盒开箱 | hack the moon，一场代码与月亮的浪漫相遇](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509199&idx=1&sn=596eec6e4658c9955222e707af373ef5)\n - [ ] [战神榜9月榜单福利！现金大奖，等你来战！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509199&idx=2&sn=0928bd0bccf9d55f4afc94297cc08cb3)\n- 中国信息安全\n - [ ] [论坛·原创 | 美国技术壁垒战略对我国科技发展的影响与对策](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=1&sn=eb898e9c7612272479601106b96c5cdd)\n - [ ] [专家观点 | 人工智能赋能科学研究要防范“机器幻觉”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=2&sn=b8953f6ef052f140a208cf49cf5c2060)\n - [ ] [前沿 | 联邦学习：兼顾数据价值释放与隐私权利保护](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=3&sn=a483634534686233a48d6037578abbeb)\n - [ ] [观点 | 网络暴力信息的风险预防与治理](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=4&sn=2e3504eea41bb844a13fa633b62dfe28)\n- The Hacker News\n - [ ] [Russian APT28 Deploys “NotDoor” Outlook Backdoor Against Companies in NATO Countries](https://thehackernews.com/2025/09/russian-apt28-deploys-notdoor-outlook.html)\n - [ ] [GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module](https://thehackernews.com/2025/09/ghostredirector-hacks-65-windows.html)\n - [ ] [Cybercriminals Exploit X’s Grok AI to Bypass Ad Protections and Spread Malware to Millions](https://thehackernews.com/2025/09/cybercriminals-exploit-xs-grok-ai-to.html)\n - [ ] [Simple Steps for Attack Surface Reduction](https://thehackernews.com/2025/08/simple-steps-for-attack-surface.html)\n - [ ] [Google Fined $379 Million by French Regulator for Cookie Consent Violations](https://thehackernews.com/2025/09/google-fined-379-million-by-french.html)\n - [ ] [CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited](https://thehackernews.com/2025/09/cisa-flags-tp-link-router-flaws-cve.html)\n- Silent Signal Techblog\n - [ ] [Exploit development for IBM i](https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Hackers exploited Sitecore zero-day flaw to deploy backdoors](https://www.bleepingcomputer.com/news/security/hackers-exploited-sitecore-zero-day-flaw-to-deploy-backdoors/)\n - [ ] [Chess.com says 4,500 people had data stolen during June breach](https://therecord.media/chess-platform-data-breach-file-transfer-tool)\n - [ ] [From summer camp to grind season](https://blog.talosintelligence.com/from-summer-camp-to-grind-season/)\n - [ ] [Texas sues PowerSchool over breach exposing 62M students, 880k Texans](https://www.bleepingcomputer.com/news/security/texas-sues-powerschool-after-massive-data-breach-hit-62-million-students/)\n - [ ] [Chess.com discloses recent data breach via file transfer app](https://www.bleepingcomputer.com/news/security/chesscom-discloses-recent-data-breach-via-file-transfer-app/)\n - [ ] [Texas sues PowerSchool for breach exposing the data of students and teachers](https://therecord.media/powerschool-data-breach-texas-lawsuit-ken-paxton)\n - [ ] [Google hit with $425 million verdict in privacy class action suit](https://therecord.media/google-hit-with-425-million-privacy-class-action-verdict)\n - [ ] [Ukraine’s cyber chief on Russian hackers’ shifting tactics, US cyber aid](https://therecord.media/ukraine-cyber-chief-on-russia-hacks-us-aid)\n - [ ] [New TP-Link zero-day surfaces as CISA warns other flaws are exploited](https://www.bleepingcomputer.com/news/security/new-tp-link-zero-day-surfaces-as-cisa-warns-other-flaws-are-exploited/)\n - [ ] [6 browser-based attacks all security teams should be ready for in 2025](https://www.bleepingcomputer.com/news/security/6-browser-based-attacks-all-security-teams-should-be-ready-for-in-2025/)\n - [ ] [France slaps Google with €325M fine for violating cookie regulations](https://www.bleepingcomputer.com/news/security/france-slaps-google-with-325m-fine-for-violating-cookie-regulations/)\n - [ ] [Torna lo smishing a tema INPS: così rubano documenti e identità digitali](https://www.cybersecurity360.it/nuove-minacce/torna-lo-smishing-a-tema-inps-cosi-rubano-documenti-e-identita-digitali/)\n - [ ] [Pseudonimizzazione dati: la “sentenza Deloitte” della CGUE che cambia le regole compliance](https://www.cybersecurity360.it/news/pseudonimizzazione-dati-la-sentenza-deloitte-della-cgue-che-cambia-le-regole-compliance/)\n - [ ] [Shein, Google hit with fines from French data protection regulator over cookie practices](https://therecord.media/shein-google-fines-advertising-cookies-france-cnil)\n - [ ] [Tire giant Bridgestone confirms cyberattack impacts manufacturing](https://www.bleepingcomputer.com/news/security/tire-giant-bridgestone-confirms-cyberattack-impacts-manufacturing/)\n - [ ] [Czech cyber agency warns against using services and products that send data to China](https://therecord.media/czech-nukib-warns-against-products-sending-data-china)\n - [ ] [Microsoft says recent Windows updates cause app install issues](https://www.bleepingcomputer.com/news/microsoft/microsoft-says-recent-windows-updates-cause-app-install-issues-due-to-unexpected-admin-UAC-prompts/)\n - [ ] [Release Notes: Fresh Connectors, SDK Update, and 2,200+ New Detection Rules](https://any.run/cybersecurity-blog/release-notes-august-2025/)\n - [ ] [Il ritorno di Salt Typhoon, attacchi a reti Tlc e settori critici: come mitigare l’impatto](https://www.cybersecurity360.it/nuove-minacce/il-ritorno-di-salt-typhoon-attacchi-a-reti-tlc-e-settori-critici-come-mitigare-limpatto/)\n - [ ] [Decreto Difesa: due proposte di legge per affrontare la guerra cyber](https://www.cybersecurity360.it/cybersecurity-nazionale/decreto-difesa-due-proposte-di-legge-per-affrontare-la-guerra-cyber/)\n - [ ] [Cyber security: il decalogo Clusit per proteggere dati, infrastrutture e la nostra libertà](https://www.cybersecurity360.it/cybersecurity-nazionale/cyber-security-il-decalogo-clusit-per-proteggere-dati-infrastrutture-e-la-nostra-liberta/)\n - [ ] [European Court rejects challenge to EU-US data transfer agreement](https://therecord.media/european-court-rejects-challenge-us-eu-data-transfer-agreement)\n- Deeplinks\n - [ ] [California Lawmakers: Support S.B. 524 to Rein in AI Written Police Reports](https://www.eff.org/deeplinks/2025/09/california-lamakers-support-sb-524-rein-ai-written-police-reports)\n - [ ] [EFF Awards Spotlight ✨ Erie Meyer](https://www.eff.org/deeplinks/2025/08/eff-awards-spotlight-erie-meyer)\n - [ ] [From Libraries to Schools: Why Organizations Should Install Privacy Badger](https://www.eff.org/deeplinks/2025/09/libraries-schools-why-organizations-should-install-privacy-badger)\n - [ ] [Verifying Trust in Digital ID Is Still Incomplete](https://www.eff.org/deeplinks/2025/09/verifying-trust-digital-id-still-incomplete)\n- Security Affairs\n - [ ] [$10M reward for Russia’s FSB officers accused of hacking US Critical infrastructure](https://securityaffairs.com/181904/cyber-warfare-2/10m-reward-for-russias-fsb-officers-accused-of-hacking-us-critical-infrastructure.html)\n - [ ] [Severe Hikvision HikCentral product flaws: What You Need to Know](https://securityaffairs.com/181896/hacking/severe-hikvision-hikcentral-product-flaws-what-you-need-to-know.html)\n - [ ] [U.S. CISA adds TP-Link Archer C7(EU) and TL-WR841N flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/181886/hacking/u-s-cisa-adds-tp-link-archer-c7eu-and-tl-wr841n-flaws-to-its-known-exploited-vulnerabilities-catalog.html)\n- Security Weekly Podcast Network (Audio)\n - [ ] [Lasagna DoS, AI Slop, Hacker Ultimatums - PSW #890](http://sites.libsyn.com/18678/lasagna-dos-ai-slop-hacker-ultimatums-psw-890)\n- Dark Space Blogspot\n - [ ] [Rendite Sostenibili e Non? Fuffaguru, Interesse Composto e Valore Atteso](http://darkwhite666.blogspot.com/2025/09/rendite-sostenibili-e-non-fuffaguru.html)\n"}, "c4b1b0255cfd5f527b3c350d40e93f5929b76382": {"t": 1785772236.6768432, "n": 36508, "h": "d459bdb558f387ec", "c": "# 每日安全资讯（2025-09-05）\n\n- 安全客-有思想的安全新媒体\n - [ ] [“攻界智汇·技破万防”第十五期「度安讲」技术沙龙&极客之夜喊你集结！](https://www.anquanke.com/post/id/311870)\n- Taxodium\n - [ ] [日常#1 - 最近买的书、死神来了、空洞骑士、娃娃菜、博客改动、多邻国](https://taxodium.ink/nichijou-1.html)\n- paper - Last paper\n - [ ] [从 CVE 条目到可验证的漏洞利用：一个自动化的多智能体框架用于重现 CVE 漏洞](https://paper.seebug.org/3382/)\n- 奇安信攻防社区\n - [ ] [大模型投毒-训练、微调、供应链与RAG解析](https://forum.butian.net/share/4521)\n- Recent Commits to cve:main\n - [ ] [Update Thu Sep 4 17:25:34 UTC 2025](https://github.com/trickest/cve/commit/1bdad43665fd207f9d1e53745afb046ad96a20e7)\n- obaby@mars\n - [ ] [木鱼与金鱼](https://h4ck.org.cn/2025/09/21473)\n- Tenable Blog\n - [ ] [Identity-First Security: Mitigating the Cloud’s Greatest Risk Vector](https://www.tenable.com/blog/identity-first-security-mitigating-the-clouds-greatest-risk-vector)\n- SecWiki News\n - [ ] [SecWiki News 2025-09-04 Review](http://www.sec-wiki.com/?2025-09-04)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告（0720-0802）](https://www.4hou.com/posts/OGxN)\n - [ ] [美亚法度事业部成立！国投智能股份加速“AI+执法”赛道布局](https://www.4hou.com/posts/rp46)\n - [ ] [PromptLock勒索软件利用人工智能加密和窃取数据](https://www.4hou.com/posts/xyMr)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [GeoVision ASManager Windows Application 6.1.2.0 Remote Code Execution](https://cxsecurity.com/issue/WLB-2025090003)\n - [ ] [WordPress Plugin WP Publications < = 1.2 - Admin+ Stored XSS](https://cxsecurity.com/issue/WLB-2025090002)\n - [ ] [BarbarBaba 1.0 time-based blind sql injection](https://cxsecurity.com/issue/WLB-2025090001)\n- Trustwave Blog\n - [ ] [Chinese-Sponsored Threat Actors Attacks Spur International Security Advisory](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/chinese-sponsored-threat-actors-attacks-spur-international-security-advisory/)\n- Doonsec's feed\n - [ ] [【资料】朝鲜的导弹发展历史](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151885&idx=1&sn=0d791d870f0b41e69156bb71846836da)\n - [ ] [MetaCRM美特crm系统download-new.jsp接口存在任意文件读取漏洞 附POC](https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489044&idx=1&sn=6314169b063e10268f684c022991de6f)\n - [ ] [某盘rce简单点评](https://mp.weixin.qq.com/s?__biz=MzkyMDc0NDEzOA==&mid=2247483877&idx=1&sn=9fd4cbe0f29574618f7a07a46a4b9211)\n - [ ] [高丰度低浓铀（HALEU）：从核技术小众概念到AI时代核心战略物资](https://mp.weixin.qq.com/s?__biz=MzkxMTA3MDk3NA==&mid=2247487968&idx=1&sn=56930b3f2e2fefb6c3b56cf009bd1e85)\n - [ ] [旧瓶装新酒-迷幻的草台世界](https://mp.weixin.qq.com/s?__biz=MzU2MDYxNDQ4Ng==&mid=2247484544&idx=1&sn=20f720f077f1e8fe2b2efada3033e935)\n - [ ] [TrueNAS_SCALE存储设备实验](https://mp.weixin.qq.com/s?__biz=MzI0NTI4NjEwOQ==&mid=2247485023&idx=1&sn=c453657c11185829f1e4b04fa193332d)\n - [ ] [检测风险软件（Riskware）的安全价值——有效对抗混合执行体攻击（反病毒引擎篇）](https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650212378&idx=1&sn=2b0bf111a3136492adb9a546936be3ae)\n - [ ] [2025年互联网公司上半年营收利润排行](https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247545527&idx=1&sn=dd81be5453d197646a1c96663d4c5585)\n - [ ] [某东SRC专项活动踩坑](https://mp.weixin.qq.com/s?__biz=Mzg4Nzg2MDA0MA==&mid=2247484757&idx=1&sn=befcbb1180bb4998b62147bc39cab01f)\n - [ ] [一封钓鱼邮件，能让能源基础设施陷入瘫痪？](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491943&idx=1&sn=2411e4f9da9f93bc790333b374752abb)\n - [ ] [【高危漏洞预警】百度网盘Windows客户端远程命令执行漏洞](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490698&idx=1&sn=1af7a1c354e94ddcfad22bea3202b7b6)\n - [ ] [【高危漏洞预警】XWiki路径遍历漏洞(CVE-2025-55747-CVE-2025-55748](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490698&idx=2&sn=17d43602dfc42418fa0c5304ffc032d4)\n - [ ] [《懂不懂社工库开创鼻祖的含金量》(狗头保命)](https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247486051&idx=1&sn=26c92cc3ed7101d07ba1383a07fa25c6)\n - [ ] [全球三大网络安全巨头同时被黑](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514954&idx=1&sn=db454fd1560860cfb6a2c719f50e9b40)\n - [ ] [Zip密码破解工具 -- ZipCracker](https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486901&idx=1&sn=7b022ee5fa14fc77cb981e2141273594)\n - [ ] [100页 前沿人工智能风险管理框架实践：风险分析技术报告](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290761&idx=1&sn=26050f0cb561f08bcf17e3567ad2303d)\n - [ ] [人工智能、算力算网 今天上传文件列表](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655290761&idx=2&sn=9256f1988ceb49d7bc0db012817fab3c)\n - [ ] [6月共97人获取NISP二级证书](https://mp.weixin.qq.com/s?__biz=MzkwNDI0MjkzOA==&mid=2247486249&idx=1&sn=6edfeaf1707d25c05af1f8f34f474441)\n - [ ] [神经元的权重游戏：为什么你的选择塑造了你](https://mp.weixin.qq.com/s?__biz=MzA4NzA5OTYzNw==&mid=2247484649&idx=1&sn=d6e460d9c6ae4253239d07d9223ef2e3)\n - [ ] [别天天想着留后门了：前员工恶意报复公司网络获刑4年](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643198&idx=1&sn=05d21a7cb9cc190d04f1ec7fa423be58)\n - [ ] [免费赠送丨网络安全意识：宣传讲义6篇](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643198&idx=2&sn=354289f2d1559403bbf48349546a9485)\n - [ ] [看完九三阅兵，网络安全的含金量还在上升](https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247524901&idx=1&sn=111561839e68da7fcbc5728519eafe29)\n - [ ] [【招聘】电信集团北京网络安全技术中心招人啦～](https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247487236&idx=1&sn=41e734a39f82d2882ba956c7f1fea28b)\n - [ ] [华为2025欧洲汽车行业安全与隐私合规遵从指南](https://mp.weixin.qq.com/s?__biz=MzkyOTMwMDQ5MQ==&mid=2247520454&idx=1&sn=cd9d588068eac1fbd43db294437f78cc)\n - [ ] [北信源参与老挝共建人工智能及反诈平台](https://mp.weixin.qq.com/s?__biz=MzA5MTM1MjMzNA==&mid=2653426744&idx=1&sn=405cf57f7c2e42d24334e805cbd1e285)\n - [ ] [推免报名 | 欢迎报名华东师范大学密码学院！](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500645&idx=1&sn=2f9e3e209b2b1d800ad2836e36f5ecc0)\n - [ ] [报名 | 清华美团数字生活研究院学术论坛——大模型：前沿理论与产业变革](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781386&idx=1&sn=f5c9294a9c6da17b46a786d1723efabd)\n - [ ] [将 AI 融入工作流：滴滴前端工程师的研发效率提升笔记](https://mp.weixin.qq.com/s?__biz=MzU1ODEzNjI2NA==&mid=2247574704&idx=1&sn=f501b660c017f951c6c79089f630d4ee)\n - [ ] [2025年中国网络安全年会（暨国家网络安全宣传周网络安全协同防御分论坛）正式启动报名！](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500351&idx=1&sn=40bd141c37155ae91cd7ee222c691d35)\n - [ ] [Linux操作系统底层原理：进程创建、等待与终止](https://mp.weixin.qq.com/s?__biz=MzU2MjU2MzI3MA==&mid=2247484846&idx=1&sn=672aad2abc152eddd3d596e58743df2a)\n - [ ] [老链新看——CommonsCollections链](https://mp.weixin.qq.com/s?__biz=MzUzNDMyNjI3Mg==&mid=2247487636&idx=1&sn=2fc58a852c1698737c5f9aac91e57b0b)\n - [ ] [2025年中国网络安全年会学术分论坛会议正式启动报名](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500350&idx=1&sn=769779621f7fbe81737dd01194d7e372)\n - [ ] [十万奖励、中秋礼盒！双十一保卫战召唤你来参与](https://mp.weixin.qq.com/s?__biz=MzI3NDEzNzIxMg==&mid=2650493110&idx=1&sn=821dc6ee3d0a131892215024146a8004)\n - [ ] [flowable流程引擎JDK 8-21 全版本内存马注入](https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247522996&idx=2&sn=008651508d1ca92022db04df2161eda4)\n - [ ] [某漏洞复现](https://mp.weixin.qq.com/s?__biz=MzkxNzY0MzE2NQ==&mid=2247484054&idx=1&sn=716a3a3b5b38a2d8648bea6a640d4e3c)\n - [ ] [2025年度湖北省科学技术奖复评通过项目(网络空间安全领域)](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493718&idx=1&sn=06d6fc754c9afc29bbc8e17c8416e6cb)\n - [ ] [TimelineSec助力腾讯安全南京站沙龙，与大咖共探AI攻防！](https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497692&idx=1&sn=08a6fee8d4f3387361c9a42588de5398)\n - [ ] [你的AI“体检”了吗？开源AI红队测试平台，一键自查三大风险](https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649795637&idx=1&sn=5fddb7e18ac14e45ef1f2e56db38fa67)\n - [ ] [创维半年财报透视：创新品类加力破局，彩电抢占高端消费升级潮](https://mp.weixin.qq.com/s?__biz=MzU2MjU2MzI3MA==&mid=2247484844&idx=1&sn=81b1d973d76828ba04c9e3442a904cda)\n - [ ] [直播报名丨深信服托管云，如何破解二级医院的信息化困局？](https://mp.weixin.qq.com/s?__biz=MjM5MTAzNjYyMA==&mid=2650602232&idx=1&sn=d1bdf965cd280e83d450a5519e108179)\n - [ ] [如何成为一名黑客？分享零基础自学黑客的正确路线，让你学起来事半功倍！](https://mp.weixin.qq.com/s?__biz=MzkxNDU0MTUyNw==&mid=2247493608&idx=1&sn=a46be6acb26f7b9f33a47a6c46910668)\n - [ ] [捷豹路虎称生产系统因网络攻击遭“严重破坏”](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523957&idx=1&sn=ce7e15637dae38208a5589d732409044)\n - [ ] [倒计时1天！中原数据大讲堂（第二讲）明天开讲](https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448690241&idx=1&sn=5277ab0e6ccec88aeac2b1158af03296)\n - [ ] [国家密码管理局发布《国家密码管理局商用密码行政检查事项清单》](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601289&idx=2&sn=86ba165b6836ad0129cec59ffdf193f8)\n - [ ] [数据跨境合规标准来了！聚焦智能软硬件高频业务场景与应对方案](https://mp.weixin.qq.com/s?__biz=Mzg4MTcyMTc5Nw==&mid=2247488602&idx=1&sn=f1aceeb93606ccad1f9d50b9171e20ed)\n - [ ] [【工具分享】CVE Push Service | 自动化高危漏洞情报推送](https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486585&idx=1&sn=5638bc0b244deb27780b2c6bd9a1fddc)\n - [ ] [铸数字长城，护无形疆土：致敬新时代的网络强国守护者](https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247504018&idx=1&sn=14f5005969f321fa2036699bd756ad03)\n - [ ] [经纬信安上榜《2025中国网络安全市场年报》“优秀标的企业”](https://mp.weixin.qq.com/s?__biz=MzIwNzE2MDc5Mg==&mid=2649267806&idx=1&sn=23f9a2353a69b021b2f7809e228c60f4)\n - [ ] [零基础入门SRC斩获6W赏金！新手小白如何避免\\\"听不懂、跟不上、挖不到\\\"](https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247494474&idx=1&sn=01c84b640d6b9492e6ebd814342e778b)\n - [ ] [提示词注入攻击可使AI驱动的网络安全工具反噬自身](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327146&idx=3&sn=1a2bdae52c80d54eacf77dd3ccaf4052)\n - [ ] [1.1.1.1 DNS服务误发TLS证书事件：攻击者可解密用户流量](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327146&idx=4&sn=35796f321e7470b435f38da4d5100a55)\n - [ ] [Windsurf MCP 集成安全控制将用户置于风险](https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247485147&idx=1&sn=a3d646d1153c858ae5d3649f8c5b8d03)\n - [ ] [美国空军未来网络战略：以商用技术达成六大目标，聚集作战效能和战斗人员体验](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247513573&idx=1&sn=4b52a7b22547b4e7a0235f9fd03335c7)\n - [ ] [论坛·原创 | 美国技术壁垒战略对我国科技发展的影响与对策](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=1&sn=eb898e9c7612272479601106b96c5cdd)\n - [ ] [专家观点 | 人工智能赋能科学研究要防范“机器幻觉”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=2&sn=b8953f6ef052f140a208cf49cf5c2060)\n - [ ] [前沿 | 联邦学习：兼顾数据价值释放与隐私权利保护](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=3&sn=a483634534686233a48d6037578abbeb)\n - [ ] [观点 | 网络暴力信息的风险预防与治理](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=4&sn=2e3504eea41bb844a13fa633b62dfe28)\n - [ ] [超5万终端、业务覆盖全球，某家电巨头如何弥补终端安全管理短板？](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628887&idx=1&sn=3f9a8ccd15b488bb160481d16b494288)\n - [ ] [开学了！奇安信集团新一届卓越工程师正式入企实践](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628887&idx=2&sn=4f6b7d07ecdd4358c89f7b66eeba60ae)\n - [ ] [奇安信助力陕西省国资智慧监管，与陕数集团签约](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628887&idx=3&sn=4b1416966873306328ebf139c0c3cb5a)\n - [ ] [s1ngularity追踪：Nx供应链攻击中的战术与反思](https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484864&idx=1&sn=b7e52feed5a2b6245dfb2f82e9c8bf2b)\n - [ ] [“安全重构·智启未来”第十六期「度安讲」 技术沙龙来了！](https://mp.weixin.qq.com/s?__biz=MzA4ODc0MTIwMw==&mid=2652543037&idx=1&sn=c00819ea92f588285fc1ba0d6947db8a)\n - [ ] [2025南亚东南亚数字合作大会: 360发布“网数模一体化”Agentic SOC](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581917&idx=2&sn=cf1f21f153b61e5b9f877598b63df410)\n - [ ] [谷歌因未经用户同意在 Gmail 插入广告被法国罚款 3.25 亿欧元](https://mp.weixin.qq.com/s?__biz=MzkxMjY3MTI4Mg==&mid=2247485248&idx=1&sn=015c8836e6e30563f9669eb5cdea5c26)\n - [ ] [新品发布倒计时｜大模型深度赋能，效率源AI助力线索挖掘更便捷！](https://mp.weixin.qq.com/s?__biz=MjM5ODQ3NjAwNQ==&mid=2650554477&idx=1&sn=a93a0ffef80408c7a56075fa19bf4652)\n - [ ] [网络工程师想要转行，有没有啥建议？](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247531659&idx=1&sn=aa577d4563c1ed101dcf21912cdfabef)\n - [ ] [习近平在纪念中国人民抗日战争暨世界反法西斯战争胜利80周年大会上发表重要讲话](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254218&idx=1&sn=267d4653f9d3df4014cb8a3c8cf20510)\n - [ ] [【工信动态】工信部圆满完成纪念中国人民抗日战争暨世界反法西斯战争胜利80周年大会无线电安全、信息通信服务和网络安全保障任务](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254218&idx=2&sn=d1033a160996593797156a30c59d8545)\n - [ ] [【赛迪热点】2025无人智能系统测评与生态创新大会圆满召开——强化智能标准引领、构建综合检测体系，促进行业生态规范化新征程](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254218&idx=3&sn=04d5ef3c96013db510b7a1d0277ef394)\n - [ ] [团队宣传片来啦！](https://mp.weixin.qq.com/s?__biz=MzkxNjcyMTc0NQ==&mid=2247484544&idx=1&sn=cc110d471592c2916fff24fbaece002c)\n - [ ] [代码/PPT已更新完结！《安卓软件开发与逆向分析》：赠PDF算法书+全套项目源码包](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599343&idx=3&sn=06d4fd47b1eb50703882e32ad7d9290d)\n - [ ] [赛宁网安实力上榜《2025中国网络安全市场100强》](https://mp.weixin.qq.com/s?__biz=MzA4Mjk5NjU3MA==&mid=2455490050&idx=1&sn=70fbe57514995cfe74d6d7b9683ae019)\n - [ ] [VLDB2025 | Magnus: 字节跳动面向大规模机器学习的数据管理方案](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247516514&idx=1&sn=7d72f64b15055ccafeb7feba85da4b55)\n - [ ] [欧洲学者分析AI大模型在网络安全自动化领域的应用前景](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514954&idx=2&sn=cd5f336855ddff4795a830117f25e072)\n - [ ] [内网渗透全景实战！ATT&CK Lab13 重磅上线](https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523746&idx=1&sn=05546b1bc987a28fd6d84a3bc1873780)\n - [ ] [弹性网络虚拟化Java实现一单路径映射v2s数据结构分析](https://mp.weixin.qq.com/s?__biz=MzU3MzAzMzk3OA==&mid=2247485179&idx=1&sn=336be6dd58e26cdb76924238ebdf5df3)\n - [ ] [从删库到跑路：我的Python全栈踩坑实录](https://mp.weixin.qq.com/s?__biz=Mzg3ODAzNjg5OA==&mid=2247485401&idx=1&sn=2dc6e42f780c7ba8ce429b0b6931fd1d)\n - [ ] [【助力过中项】04-0-项目成本管理](https://mp.weixin.qq.com/s?__biz=MzUxNDg3ODY2MQ==&mid=2247485491&idx=1&sn=b34106ab16b414d818535ac691064270)\n - [ ] [【助力过中项】04-1-规划成本管理](https://mp.weixin.qq.com/s?__biz=MzUxNDg3ODY2MQ==&mid=2247485491&idx=2&sn=2a63009742d826fab6824db4b1a03736)\n - [ ] [【助力过中项】04-2-估算成本](https://mp.weixin.qq.com/s?__biz=MzUxNDg3ODY2MQ==&mid=2247485491&idx=3&sn=b4ce77f1bc9c7c1113eb6a1f8371dead)\n - [ ] [【助力过中项】04-3-制定预算](https://mp.weixin.qq.com/s?__biz=MzUxNDg3ODY2MQ==&mid=2247485491&idx=4&sn=9b40b7d256798fda2d1581994a8702b4)\n - [ ] [【助力过中项】04-4-控制成本](https://mp.weixin.qq.com/s?__biz=MzUxNDg3ODY2MQ==&mid=2247485491&idx=5&sn=d384080c19df85476db185545f1e6be2)\n - [ ] [Vulnhub-BillyMadison](https://mp.weixin.qq.com/s?__biz=Mzg5MDk4MzkyMA==&mid=2247484945&idx=1&sn=efd73a7961cd64f5052b26db105c241f)\n - [ ] [【论文速读】| SoK：大语言模型生成的文本网络钓鱼活动的生成、特征和检测的端到端分析](https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496970&idx=1&sn=054efda08b640f422f1d0120f5b92fd4)\n - [ ] [安全公司曝光微软 VS Code 市场漏洞，黑客可冒充已移除项目](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247542944&idx=1&sn=d6542ae81fd4ce81a37c9b15db52711f)\n - [ ] [铭记历史荣光，共筑安全长城——梆梆安全党支部组织观看抗战胜利80周年大阅兵直播党日活动纪实](https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651136194&idx=1&sn=ad6f1006d2226d48cf4029d10dae4c59)\n - [ ] [梆梆安全首批入驻“数字深圳联合创新中心”，以创新安全能力，赋能城市数字未来](https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651136194&idx=2&sn=5b592a69e29407d153f4665f2b86346a)\n - [ ] [电脑健康也能AI“算命”？腾讯iOA这个新功能绝了！](https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247527870&idx=1&sn=117a3015998ae3b976a645e5597a9221)\n - [ ] [破解供数用数流动难题 可信数据空间多维构建提速](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601289&idx=1&sn=e216de1d8fc2a0e6123f6f5e027dea6a)\n - [ ] [天融信李雪莹受邀观礼九三阅兵：守护网络空间安全是我们共同的使命](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601289&idx=3&sn=c55e2338ccfdcd625b2c9bba0489a8f9)\n - [ ] [【网页逆向】QQ-music-新vmp(一期sign)](https://mp.weixin.qq.com/s?__biz=MzU4MDY4ODU2MA==&mid=2247486785&idx=1&sn=de92fe21fa7420cd4cf9289f49492596)\n - [ ] [腾讯安全沙龙（南京站）硬核来袭｜与大咖共探AI攻防，挑战30万LLMWAF大奖](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496653&idx=1&sn=25b28df6b70e5e1e51f07b8a2aa4b3b8)\n - [ ] [漏洞预警/通知千千万，几张图让你知道谁家更权威](https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247484293&idx=1&sn=ca98698b4382e60ecca7865398c2b622)\n - [ ] [擎画数字安全新图景：中网信安云端授课，赋能西北网安人才战略新高地](https://mp.weixin.qq.com/s?__biz=MzA3Nzk3NTA4Nw==&mid=2247517695&idx=1&sn=f0b2dfd2dd2cf17808100c291ff87421)\n - [ ] [锻造网安尖兵！网络安全实训在中国民用航空飞行学院火热开启](https://mp.weixin.qq.com/s?__biz=MzA3Nzk3NTA4Nw==&mid=2247517695&idx=2&sn=c3ea0f516a870bcdf73a73520a072729)\n- The Trail of Bits Blog\n - [ ] [Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more](https://blog.trailofbits.com/2025/09/03/subverting-code-integrity-checks-to-locally-backdoor-signal-1password-slack-and-more/)\n- Malwarebytes\n - [ ] [Roblox introduces age checks to use communication features](https://www.malwarebytes.com/blog/news/2025/09/roblox-introduces-age-checks-to-use-communication-features)\n - [ ] [Give your PC a fresh start: New free tools to boost your PC’s speed, security, and peace of mind](https://www.malwarebytes.com/blog/product/2025/09/give-your-pc-a-fresh-start-new-free-tools-to-boost-your-pcs-speed-security-and-peace-of-mind)\n - [ ] [TP-Link warns of botnet infecting routers and targeting Microsoft 365 accounts](https://www.malwarebytes.com/blog/news/2025/09/tp-link-warns-of-botnet-infecting-routers-and-targeting-microsoft-365-accounts)\n - [ ] [Popular Android VPN apps found to have security flaws and China links](https://www.malwarebytes.com/blog/news/2025/09/popular-android-vpn-apps-found-to-have-security-flaws-and-china-links)\n - [ ] [No we didn’t warn all Gmail users about imminent digital doom, says Google](https://www.malwarebytes.com/blog/news/2025/09/no-we-didnt-warn-all-gmail-users-about-imminent-doom-says-google)\n- Horizon3.ai\n - [ ] [Endpoint Security Effectiveness: From Assumption to Proof](https://horizon3.ai/intelligence/blogs/endpoint-security-effectiveness-from-assumption-to-proof/)\n - [ ] [Proof, Not Promises: Redefining Cybersecurity for the Defense Industrial Base](https://event.on24.com/wcc/r/5061004/029F087442C90F31F828281D2DD41335)\n- PortSwigger Blog\n - [ ] [Watch the webinar: Scale secure coverage without scaling headcount](https://portswigger.net/blog/watch-the-webinar-scale-secure-coverage-without-scaling-headcount)\n- bishopfox.com\n - [ ] [Demystifying 5G Security: Understanding the Registration Protocol](https://bishopfox.com/blog/demystifying-5g-security-understanding-the-registration-protocol)\n- Wallarm\n - [ ] [Reflecting on Wallarm’s Journey: Growth, Resilience, and What Comes Next](https://lab.wallarm.com/reflecting-wallarms-journey-growth-resilience-what-comes-next/)\n- 奇客Solidot–传递最新科技情报\n - [ ] [Atlassian 以 6.1 亿美元收购 Browser Company](https://www.solidot.org/story?sid=82229)\n - [ ] [美国失业人数超过招聘人数](https://www.solidot.org/story?sid=82228)\n - [ ] [Fina Root CA 签发了三张 1.1.1.1 证书](https://www.solidot.org/story?sid=82227)\n - [ ] [《空洞骑士：丝之歌》上线，各大游戏平台服务器全部崩溃](https://www.solidot.org/story?sid=82226)\n - [ ] [森林砍伐让亚马孙雨林旱季降雨减少](https://www.solidot.org/story?sid=82225)\n - [ ] [瑞士发布了完整开源的大模型 Apertus](https://www.solidot.org/story?sid=82224)\n - [ ] [研究预测地球碳封存能力上限为 1.46 万亿吨](https://www.solidot.org/story?sid=82223)\n - [ ] [美国撤销台积电南京工厂的优待措施](https://www.solidot.org/story?sid=82222)\n - [ ] [照亮微塑料的细菌](https://www.solidot.org/story?sid=82221)\n - [ ] [太阳耀斑温度比以前认为的高出 6.5 倍](https://www.solidot.org/story?sid=82220)\n- HackerNews\n - [ ] [大型 IPTV 盗版网络曝光：涉 1100 多个域名，威胁主流娱乐平台](https://hackernews.cc/archives/60637)\n - [ ] [隐秘钓鱼骗局瞄准 PayPal 用户](https://hackernews.cc/archives/60634)\n - [ ] [CISA 警告：黑客正积极利用 TP-Link 与 WhatsApp 漏洞发起攻击](https://hackernews.cc/archives/60631)\n- vivo千镜\n - [ ] [vivo牵头制定的端侧大模型安全标准正式发布，自研技术积淀铸就行业安全共识](https://mp.weixin.qq.com/s?__biz=MzI0Njg4NzE3MQ==&mid=2247492204&idx=1&sn=d1c312086355c1c139544189de0061b5)\n- 绿盟科技技术博客\n - [ ] [Gitblit身份验证绕过漏洞(CVE-2024-28080)](https://blog.nsfocus.net/cve-2024-28080/)\n - [ ] [H2O-3 JDBC反序列化漏洞（CVE-2025-6507）](https://blog.nsfocus.net/h2o-3-jdbc/)\n- 安全内参\n - [ ] [全球三大网络安全巨头同时被黑](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514954&idx=1&sn=db454fd1560860cfb6a2c719f50e9b40)\n - [ ] [欧洲学者分析AI大模型在网络安全自动化领域的应用前景](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514954&idx=2&sn=cd5f336855ddff4795a830117f25e072)\n- rtl-sdr.com\n - [ ] [Decoding ADS-C with a Cheap Aliexpress LNB and SDRplay RSP1B](https://www.rtl-sdr.com/decoding-ads-c-with-a-cheap-aliexpress-lnb-and-sdrplay-rsp1b/)\n - [ ] [rtl_tcp_echo: Record and Replay IQ Streams with a Transparent rtl_tcp Proxy](https://www.rtl-sdr.com/rtl_tcp_echo-record-and-replay-iq-streams-with-a-transparent-rtl_tcp-proxy/)\n- 腾讯安全应急响应中心\n - [ ] [你的AI“体检”了吗？开源AI红队测试平台，一键自查三大风险](https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207345&idx=1&sn=35e45484b1e9eedf9c2931a690644b97)\n- 我的安全视界观\n - [ ] [SDL 89/100问：如何推动业务方修复开源组件漏洞？](https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487152&idx=1&sn=41d92752469e0ed30ae939b7c15ed6e1)\n- dotNet安全矩阵\n - [ ] [[80]个反序列化漏洞全景系列 (1) | 一个大多数人都容易忽视的 Ysoserial.Net 使用误区](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500505&idx=1&sn=d33d0d67d6079717ef63bbbb14705154)\n - [ ] [[80]个反序列化漏洞全景合集 (2) | 回答一个 .NET 反序列化漏洞载荷的问题](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500505&idx=2&sn=86d160d643980a64da27a602a03f49b7)\n - [ ] [[80]个反序列化漏洞全景合集 (3) | 介绍一个 ViewState 反序列化不常见的知识点](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500505&idx=3&sn=5cdb8db7e9b012effddfdd3f7d2e1f51)\n- 威努特安全网络\n - [ ] [新版《国家密码管理局商用密码行政检查事项清单》生效](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651135371&idx=1&sn=491fd44f74f90985bc88d1404850288c)\n- 安全研究GoSSIP\n - [ ] [推免报名 | 欢迎报名华东师范大学密码学院！](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500645&idx=1&sn=2f9e3e209b2b1d800ad2836e36f5ecc0)\n- 奇安信 CERT\n - [ ] [【已复现】XWiki 路径遍历漏洞(CVE-2025-55747、CVE-2025-55748)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503904&idx=2&sn=de6650b160170287c76cea1d44a1a5cf)\n- 安全圈\n - [ ] [【安全圈】公安机关依法打击非法破解无人机飞行控制系统黑客违法犯罪](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071536&idx=1&sn=e4c650933d18930a12d63a92918b43c4)\n - [ ] [【安全圈】微软承认 Win11 兼容性问题：TLS 1.3 导致 IIS Express 验证故障](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071536&idx=2&sn=a510936da763db6a1000b078f06aa2c4)\n - [ ] [【安全圈】安全公司曝光微软 VS Code 市场漏洞，黑客可冒充已移除项目](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071536&idx=3&sn=3693502529619e5f62dcd33606707e69)\n- 看雪学苑\n - [ ] [2025 KCTF | 第十题《涅磐，亦是新生》设计思路及解析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599343&idx=1&sn=dad1e259ee7a160b913731f9d84c50ac)\n - [ ] [HexStrike AI安全工具遭滥用，零日漏洞攻击时间缩短至10分钟](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599343&idx=2&sn=0f8f48f36ca1da8eebf8aa0a4d440213)\n - [ ] [代码/PPT已更新完结！《安卓软件开发与逆向分析》：赠PDF算法书+全套项目源码包](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599343&idx=3&sn=06d4fd47b1eb50703882e32ad7d9290d)\n - [ ] [一年四季都能穿！看雪2025周边T恤：用技术诠释安全态度](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599343&idx=4&sn=0d51ab445f53e2c955edfb7d3e59614c)\n- 安全学术圈\n - [ ] [2025年度湖北省科学技术奖复评通过项目(网络空间安全领域)](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493718&idx=1&sn=06d6fc754c9afc29bbc8e17c8416e6cb)\n- 数世咨询\n - [ ] [为什么88%的CISO在零信任实施中“崩溃”？](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540208&idx=1&sn=d0608242e2d35b927a3ae4d7ae1bd772)\n- 腾讯安全威胁情报中心\n - [ ] [H2O-3 远程代码执行漏洞简报（CVE-2025-5662）](https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510819&idx=1&sn=4a5488a7fad0c527df3a6f46d6726ed7)\n- 信息安全国家工程研究中心\n - [ ] [国家密码管理局公告(第52号)丨《国家密码管理局商用密码行政检查事项清单》发布](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247500880&idx=1&sn=87190177421c45eba04ca4f9b69bb5db)\n- 吾爱破解论坛\n - [ ] [【PC样本分析】某多多上steamcdk激活码的操作分析](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651142835&idx=1&sn=502b8333d3db86da16fe1ddf5ecd60ff)\n- 信安之路\n - [ ] [技巧 | web 缓存中毒是怎么一回事儿](https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500129&idx=1&sn=24cc237d1ea313f52c23a26594c13ecd)\n- 安全牛\n - [ ] [《AI赋能主动防御技术应用指南（2025版）》报告发布（附下载二维码）](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138583&idx=1&sn=e3c0c2a5828aab6a7ba86740413167a2)\n - [ ] [特别关注 | 《国家密码管理局商用密码行政检查事项清单》发布](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138583&idx=2&sn=84b5003ccb39453cef3b69bf11c2fd17)\n - [ ] [ChatGPT突发全球性宕机事故，或由前端系统异常导致；抖音安全中心公告:严厉打击AI滥用等欺诈行为 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138583&idx=3&sn=cce3362a39922de19bd2538e86bdf42b)\n- 奇安信威胁情报中心\n - [ ] [黄金暴涨下的网络暗战：UTG-Q-010组织供应链攻击直插香港金融心脏](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247515949&idx=1&sn=9f574b014a89e7d4faf9d6e1990c83d3)\n- 字节跳动安全中心\n - [ ] [教你打造一款 AI 安全助手 | 安全 MCP 的实践指南](https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495558&idx=1&sn=cbd3d1328f428f2a171c4906b10132a0)\n- 嘶吼专业版\n - [ ] [PromptLock勒索软件利用人工智能加密和窃取数据](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584489&idx=1&sn=e705430fede3746b888d699fae5ecfb8)\n- 百度安全应急响应中心\n - [ ] [“安全重构·智启未来”第十六期「度安讲」 技术沙龙来了！](https://mp.weixin.qq.com/s?__biz=MzA4ODc0MTIwMw==&mid=2652543037&idx=1&sn=c00819ea92f588285fc1ba0d6947db8a)\n- 极客公园\n - [ ] [传 DeepSeek AI 代理新模型年底发布；马斯克「金色擎天柱」首曝；比亚迪不回应销量下调传闻 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653086127&idx=1&sn=1d3810546c36e58e86374b2c3c28978b)\n - [ ] [24999 元！华为推了一个「最大」的 Mate！](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653086109&idx=1&sn=d9ecea5c1600238fdbf28a034a5d516d)\n - [ ] [「一句话生成爆款视频」，这款 AI 流量神器有点东西｜AI 上新](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653086096&idx=1&sn=5e3f8fe6eacf8ed882654d2ccac38747)\n - [ ] [传特斯拉ModelYL日均订单过万；苹果联手谷歌，整合Gemini；优必选获2.5亿，全球最大人形机器人订单 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653086068&idx=1&sn=6f64399c7d89024c2422dc6a4916d769)\n- 情报分析师\n - [ ] [2025年巴基斯坦俾路支解放军（BLA）动态及地缘安全态势全景分析](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562187&idx=1&sn=d85e34afa9fecd7e3e13515c649f7b1e)\n- 网安杂谈\n - [ ] [【2026合作伙伴巡礼】与您分享平航Telegram取证一站式解决方案！](https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650889712&idx=1&sn=d3b9dfd48e42da58ac4313ad7cd3b01f)\n- 阿里安全响应中心\n - [ ] [特别奖励揭晓｜18家SRC邀您加入双11安全保卫战](https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998022&idx=1&sn=0a1373dbe50709375c20d48fc4b4ee63)\n- 美团技术团队\n - [ ] [报名 | 清华美团数字生活研究院学术论坛——大模型：前沿理论与产业变革](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781386&idx=1&sn=f5c9294a9c6da17b46a786d1723efabd)\n- OPPO安全中心\n - [ ] [【中秋好礼、翻倍奖励、新人加成】OSRC邀你共同加入双十一保卫战](https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494444&idx=1&sn=4079fa6372c3b717260d632583051366)\n- 云鼎实验室\n - [ ] [腾讯安全沙龙（南京站）硬核来袭｜与大咖共探AI攻防，挑战30万LLMWAF大奖](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496653&idx=1&sn=25b28df6b70e5e1e51f07b8a2aa4b3b8)\n- 字节跳动技术团队\n - [ ] [VLDB2025 | Magnus: 字节跳动面向大规模机器学习的数据管理方案](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247516514&idx=1&sn=7d72f64b15055ccafeb7feba85da4b55)\n- 代码卫士\n - [ ] [捷豹路虎称生产系统因网络攻击遭“严重破坏”](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523957&idx=1&sn=ce7e15637dae38208a5589d732409044)\n - [ ] [Frostbyte10：威胁全球供应链的10个严重漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523957&idx=2&sn=288b0d14a657b13c7f1a6b14705a44e8)\n- 360数字安全\n - [ ] [微软漏洞情报“断供”危机何解？360大情报体系领航破局](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581917&idx=1&sn=0f8138df75c200e73c0e9a01dcdef347)\n - [ ] [2025南亚东南亚数字合作大会: 360发布“网数模一体化”Agentic SOC](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581917&idx=2&sn=cf1f21f153b61e5b9f877598b63df410)\n- 国家互联网应急中心CNCERT\n - [ ] [网络安全信息与动态周报2025年第35期（8月25日-8月31日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500347&idx=1&sn=83afa5c921752de8b7ff16af0b30ba44)\n- DEF CON Announcements!\n - [ ] [DEF CON Bahrain Call for Demo Labs!](https://defcon.org/html/defcon-bahrain/dc-bahrain-index.html)\n - [ ] [Thanks for a Fantastic DEF CON](https://defcon.org/html/defcon-33/dc-33-news.html#goodbye)\n- 悬镜安全\n - [ ] [五年霸榜｜悬镜安全持续引领《2025年中国网络安全市场全景图》DevSecOps开发安全赛道](https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647796915&idx=1&sn=2d20ead31c0234cbeafc8c44ac1933ae)\n- TrustedSec\n - [ ] [HIPAA Protected Health Information - When Health Information Isn’t Protected](https://trustedsec.com/blog/hipaa-protected-health-information-when-health-information-isnt-protected)\n- ICT Security Magazine\n - [ ] [Ethical hacking e CTF: formazione della prossima generazione di professionisti della cybersecurity](https://www.ictsecuritymagazine.com/articoli/ethical-hacking/)\n- 放之\n - [ ] [从删库到跑路：我的Python全栈踩坑实录](https://mp.weixin.qq.com/s?__biz=Mzg3ODAzNjg5OA==&mid=2247485401&idx=1&sn=2dc6e42f780c7ba8ce429b0b6931fd1d)\n- 迪哥讲事\n - [ ] [有趣的逻辑缺陷到后台登录](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498143&idx=1&sn=d0c6280a672ca1304055ffc4ee46b58f)\n- Future of Tech and Security: Strategy & Innovation with Raffy\n - [ ] [Go-to-Market Strategies for Small Security Companies](https://raffy.ch/blog/2025/09/04/go-to-market-strategies-for-small-security-companies/)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [ISC Stormcast For Thursday, September 4th, 2025 https://isc.sans.edu/podcastdetail/9598, (Thu, Sep 4th)](https://isc.sans.edu/diary/rss/32258)\n- Schneier on Security\n - [ ] [Generative AI as a Cybercrime Assistant](https://www.schneier.com/blog/archives/2025/09/generative-ai-as-a-cybercrime-assistant.html)\n- 补天平台\n - [ ] [2025中秋礼盒开箱 | hack the moon，一场代码与月亮的浪漫相遇](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509199&idx=1&sn=596eec6e4658c9955222e707af373ef5)\n - [ ] [战神榜9月榜单福利！现金大奖，等你来战！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509199&idx=2&sn=0928bd0bccf9d55f4afc94297cc08cb3)\n- 中国信息安全\n - [ ] [论坛·原创 | 美国技术壁垒战略对我国科技发展的影响与对策](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=1&sn=eb898e9c7612272479601106b96c5cdd)\n - [ ] [专家观点 | 人工智能赋能科学研究要防范“机器幻觉”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=2&sn=b8953f6ef052f140a208cf49cf5c2060)\n - [ ] [前沿 | 联邦学习：兼顾数据价值释放与隐私权利保护](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=3&sn=a483634534686233a48d6037578abbeb)\n - [ ] [观点 | 网络暴力信息的风险预防与治理](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248531&idx=4&sn=2e3504eea41bb844a13fa633b62dfe28)\n- The Hacker News\n - [ ] [Russian APT28 Deploys “NotDoor” Outlook Backdoor Against Companies in NATO Countries](https://thehackernews.com/2025/09/russian-apt28-deploys-notdoor-outlook.html)\n - [ ] [GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module](https://thehackernews.com/2025/09/ghostredirector-hacks-65-windows.html)\n - [ ] [Cybercriminals Exploit X’s Grok AI to Bypass Ad Protections and Spread Malware to Millions](https://thehackernews.com/2025/09/cybercriminals-exploit-xs-grok-ai-to.html)\n - [ ] [Simple Steps for Attack Surface Reduction](https://thehackernews.com/2025/08/simple-steps-for-attack-surface.html)\n - [ ] [Google Fined $379 Million by French Regulator for Cookie Consent Violations](https://thehackernews.com/2025/09/google-fined-379-million-by-french.html)\n - [ ] [CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited](https://thehackernews.com/2025/09/cisa-flags-tp-link-router-flaws-cve.html)\n- Silent Signal Techblog\n - [ ] [Exploit development for IBM i](https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Hackers exploited Sitecore zero-day flaw to deploy backdoors](https://www.bleepingcomputer.com/news/security/hackers-exploited-sitecore-zero-day-flaw-to-deploy-backdoors/)\n - [ ] [Chess.com says 4,500 people had data stolen during June breach](https://therecord.media/chess-platform-data-breach-file-transfer-tool)\n - [ ] [From summer camp to grind season](https://blog.talosintelligence.com/from-summer-camp-to-grind-season/)\n - [ ] [Texas sues PowerSchool over breach exposing 62M students, 880k Texans](https://www.bleepingcomputer.com/news/security/texas-sues-powerschool-after-massive-data-breach-hit-62-million-students/)\n - [ ] [Chess.com discloses recent data breach via file transfer app](https://www.bleepingcomputer.com/news/security/chesscom-discloses-recent-data-breach-via-file-transfer-app/)\n - [ ] [Texas sues PowerSchool for breach exposing the data of students and teachers](https://therecord.media/powerschool-data-breach-texas-lawsuit-ken-paxton)\n - [ ] [Google hit with $425 million verdict in privacy class action suit](https://therecord.media/google-hit-with-425-million-privacy-class-action-verdict)\n - [ ] [Ukraine’s cyber chief on Russian hackers’ shifting tactics, US cyber aid](https://therecord.media/ukraine-cyber-chief-on-russia-hacks-us-aid)\n - [ ] [New TP-Link zero-day surfaces as CISA warns other flaws are exploited](https://www.bleepingcomputer.com/news/security/new-tp-link-zero-day-surfaces-as-cisa-warns-other-flaws-are-exploited/)\n - [ ] [6 browser-based attacks all security teams should be ready for in 2025](https://www.bleepingcomputer.com/news/security/6-browser-based-attacks-all-security-teams-should-be-ready-for-in-2025/)\n - [ ] [France slaps Google with €325M fine for violating cookie regulations](https://www.bleepingcomputer.com/news/security/france-slaps-google-with-325m-fine-for-violating-cookie-regulations/)\n - [ ] [Torna lo smishing a tema INPS: così rubano documenti e identità digitali](https://www.cybersecurity360.it/nuove-minacce/torna-lo-smishing-a-tema-inps-cosi-rubano-documenti-e-identita-digitali/)\n - [ ] [Pseudonimizzazione dati: la “sentenza Deloitte” della CGUE che cambia le regole compliance](https://www.cybersecurity360.it/news/pseudonimizzazione-dati-la-sentenza-deloitte-della-cgue-che-cambia-le-regole-compliance/)\n - [ ] [Shein, Google hit with fines from French data protection regulator over cookie practices](https://therecord.media/shein-google-fines-advertising-cookies-france-cnil)\n - [ ] [Tire giant Bridgestone confirms cyberattack impacts manufacturing](https://www.bleepingcomputer.com/news/security/tire-giant-bridgestone-confirms-cyberattack-impacts-manufacturing/)\n - [ ] [Czech cyber agency warns against using services and products that send data to China](https://therecord.media/czech-nukib-warns-against-products-sending-data-china)\n - [ ] [Microsoft says recent Windows updates cause app install issues](https://www.bleepingcomputer.com/news/microsoft/microsoft-says-recent-windows-updates-cause-app-install-issues-due-to-unexpected-admin-UAC-prompts/)\n - [ ] [Release Notes: Fresh Connectors, SDK Update, and 2,200+ New Detection Rules](https://any.run/cybersecurity-blog/release-notes-august-2025/)\n - [ ] [Il ritorno di Salt Typhoon, attacchi a reti Tlc e settori critici: come mitigare l’impatto](https://www.cybersecurity360.it/nuove-minacce/il-ritorno-di-salt-typhoon-attacchi-a-reti-tlc-e-settori-critici-come-mitigare-limpatto/)\n - [ ] [Decreto Difesa: due proposte di legge per affrontare la guerra cyber](https://www.cybersecurity360.it/cybersecurity-nazionale/decreto-difesa-due-proposte-di-legge-per-affrontare-la-guerra-cyber/)\n - [ ] [Cyber security: il decalogo Clusit per proteggere dati, infrastrutture e la nostra libertà](https://www.cybersecurity360.it/cybersecurity-nazionale/cyber-security-il-decalogo-clusit-per-proteggere-dati-infrastrutture-e-la-nostra-liberta/)\n - [ ] [European Court rejects challenge to EU-US data transfer agreement](https://therecord.media/european-court-rejects-challenge-us-eu-data-transfer-agreement)\n- Deeplinks\n - [ ] [California Lawmakers: Support S.B. 524 to Rein in AI Written Police Reports](https://www.eff.org/deeplinks/2025/09/california-lamakers-support-sb-524-rein-ai-written-police-reports)\n - [ ] [EFF Awards Spotlight ✨ Erie Meyer](https://www.eff.org/deeplinks/2025/08/eff-awards-spotlight-erie-meyer)\n - [ ] [From Libraries to Schools: Why Organizations Should Install Privacy Badger](https://www.eff.org/deeplinks/2025/09/libraries-schools-why-organizations-should-install-privacy-badger)\n - [ ] [Verifying Trust in Digital ID Is Still Incomplete](https://www.eff.org/deeplinks/2025/09/verifying-trust-digital-id-still-incomplete)\n- Security Affairs\n - [ ] [$10M reward for Russia’s FSB officers accused of hacking US Critical infrastructure](https://securityaffairs.com/181904/cyber-warfare-2/10m-reward-for-russias-fsb-officers-accused-of-hacking-us-critical-infrastructure.html)\n - [ ] [Severe Hikvision HikCentral product flaws: What You Need to Know](https://securityaffairs.com/181896/hacking/severe-hikvision-hikcentral-product-flaws-what-you-need-to-know.html)\n - [ ] [U.S. CISA adds TP-Link Archer C7(EU) and TL-WR841N flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/181886/hacking/u-s-cisa-adds-tp-link-archer-c7eu-and-tl-wr841n-flaws-to-its-known-exploited-vulnerabilities-catalog.html)\n- Security Weekly Podcast Network (Audio)\n - [ ] [Lasagna DoS, AI Slop, Hacker Ultimatums - PSW #890](http://sites.libsyn.com/18678/lasagna-dos-ai-slop-hacker-ultimatums-psw-890)\n- Dark Space Blogspot\n - [ ] [Rendite Sostenibili e Non? Fuffaguru, Interesse Composto e Valore Atteso](http://darkwhite666.blogspot.com/2025/09/rendite-sostenibili-e-non-fuffaguru.html)\n"}}, "archive/tmp/2025-07-12.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747342.438394, "n": 44743, "h": "bcaca3fe40ee486b", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-07-11 Review\": \"http://www.sec-wiki.com/?2025-07-11\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"C-Based Automated Login Analyzer with CSRF Token Extraction for SSO bmi.ir Systems\": \"https://cxsecurity.com/issue/WLB-2025070013\",\n \"Discourse 3.2.x Anonymous Cache Poisoning\": \"https://cxsecurity.com/issue/WLB-2025070012\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"Wing FTP Server危险远程代码执行漏洞（CVE-2025-47812）正被积极利用\": \"https://www.anquanke.com/post/id/309891\",\n \"新版 macOS.ZuRu 木马伪装为 Termius 应用渗透系统\": \"https://www.anquanke.com/post/id/309897\",\n \"OpenAI推出人工智能浏览器：集成ChatGPT革新网页浏览，挑战Chrome地位\": \"https://www.anquanke.com/post/id/309900\",\n \"DoNot APT扩展至欧洲：通过Google Drive钓鱼攻击外务部，传播LoptikMod恶意软件\": \"https://www.anquanke.com/post/id/309905\",\n \"Windows 11现使用JScript9Legacy引擎以增强安全性\": \"https://www.anquanke.com/post/id/309909\",\n \"SureForms WordPress插件漏洞（CVE-2025-6691）：未授权任意文件删除可导致网站被接管，20万个站点面临风险\": \"https://www.anquanke.com/post/id/309908\",\n \"严重的mcp-remote漏洞可实现远程代码执行，影响超43.7万次下载量的相关软件\": \"https://www.anquanke.com/post/id/309915\",\n \"微软 Exchange Online 服务故障–数百万用户无法访问邮箱\": \"https://www.anquanke.com/post/id/309912\",\n \"ChatGPT遭诱导泄露Windows家庭版、专业版及企业版密钥\": \"https://www.anquanke.com/post/id/309931\",\n \"新型PerfektBlue攻击曝光：数百万辆汽车面临远程黑客攻击风险\": \"https://www.anquanke.com/post/id/309920\",\n \"当AI智能体学会“欺骗”，我们如何自保？火山的MCP安全答卷\": \"https://www.anquanke.com/post/id/309933\"\n },\n \"Tenable Blog\": {\n \"Cybersecurity Snapshot: AI Security Field Gets Boost from New CSA Framework and from SANS - OWASP Partnership\": \"https://www.tenable.com/blog/cybersecurity-snapshot-ai-security-framework-ai-security-controls-07-11-2025\"\n },\n \"奇安信攻防社区\": {\n \"fastjson1.2.80 in Springtboot实网利用记录\": \"https://forum.butian.net/share/4427\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"《2025年Q2移动应用安全风险报告》披露，超七成APP涉隐私违规，违规收集、超范围收集、强制推送仍为重灾区\": \"https://www.4hou.com/posts/ArzO\",\n \"超实用！Exchange 与O365防护全攻略：用CACTER堵住 99%的邮件威胁\": \"https://www.4hou.com/posts/rprE\",\n \"【附下载】重庆信通设计院：数据要素赋能倍加，150+跨领域融合应用典型案例\": \"https://www.4hou.com/posts/zADY\",\n \"英迈因SafePay勒索软件攻击导致服务中断\": \"https://www.4hou.com/posts/vwMX\"\n },\n \"Sucuri Blog\": {\n \"Stealthy PHP Malware Uses ZIP Archive to Redirect WordPress Visitors\": \"https://blog.sucuri.net/2025/07/stealthy-php-malware-uses-zip-archive-to-redirect-wordpress-visitors.html\"\n },\n \"Doonsec's feed\": {\n \"7.11hvv情报\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490413&idx=1&sn=84b0b561c4ff4f2e51a807f7d423ad9a\",\n \"史上最贵AI，马斯克的Grok-4实测\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486006&idx=1&sn=25eab5f555a05571a7a9b59e1bf7c6cd\",\n \"网安裁员排行榜！！网安公司成绩单4\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486006&idx=2&sn=78037e3bea84111ec782556aecbf9371\",\n \"【干货原创】实网攻防演习常态化，会带来什么变化01\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486006&idx=3&sn=875f77919a23d2821fd36d2c5607d546\",\n \"【干货】笑傲“网安职场”的独家经验（1）\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486006&idx=4&sn=4cf3be591b6487141188cc7e7499b0b7\",\n \"原创文章目录\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486006&idx=5&sn=c0babb8c8c3f0226717e7208c7190558\",\n \"CSA最近推出的“AI驱动安全专家”认证，到底有啥用?\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247493156&idx=1&sn=3acdf9b4ca9256ac7b9a3c68670d532a\",\n \"最近身边的朋友不断在学习用AI 进行编程\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491779&idx=1&sn=d6da00f3b9a009b2aa049d15dc2ec649\",\n \"123456当密码？！麦当劳AI招聘工具McHire漏洞导致6400万求职者数据泄露\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485271&idx=1&sn=9bd6f0e52177bd802a736f7c9ed39a53\",\n \"【资料】7.10全球每日动态-机遇与风险\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151057&idx=1&sn=8cf51ea55c8b7f3e0825369320a6ddb3\",\n \"【招聘】美团安全团队~诚聘情报领域精英人才\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151057&idx=2&sn=a26806079bb2c3b6e49e52f3e443b3d1\",\n \"五步玩转Claude4使用攻略！（全程无需翻墙，附高阶秘籍）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=1&sn=3c39b7ee1f05ed608f467f28223a3e40\",\n \"五步Claude4账号申请详细指南！（稳定使用不被封）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=2&sn=2461d3ddea9f3cef15262681f34ab392\",\n \"五分钟搞定Claude账号申请！三步骤零门槛操作指南（含国内直连方案）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=3&sn=8edf942cb374c7a58f4a41d2746b445c\",\n \"五天内掌握Claude 4实测完全指南！三步进阶玩法让你效率飙升！（附高级Prompt秘籍）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=4&sn=fe34e12d5039bd3fa2675c7b9c122541\",\n \"五招解决Claude4账号被封难题！实测有效的应对攻略（含内部高级方案）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=5&sn=67c8548a8e1a0ad891db6927880b1ba0\",\n \"新手必备：Claude4使用高阶技巧指南（附一键上手方法，无需翻墙）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=6&sn=e12fab0c74011ae322775bd43824190e\",\n \"新手Claude4怎么用全攻略！3天掌握Claude4的高效实操指南（含隐藏功能说明）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=7&sn=ed747756743ae8354e3e0de1feadf6b9\",\n \"一键获取Claude共用账号的五步进阶指南！（包含稳定可靠的内部渠道）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=8&sn=38b768f80c22c614c8655a53dfb7050b\",\n \"0046.从图片上传到账户接管——真实渗透测试中上传、存储和 CORS 漏洞的串联\": \"https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690866&idx=1&sn=4a721e43a083294d91530414cbf72330\",\n \"随笔 | 数据安全的下一个十年（3）\": \"https://mp.weixin.qq.com/s?__biz=MzI1NjQxMzIzMw==&mid=2247497772&idx=1&sn=565eb338a85f50be891c499908499fed\",\n \"大模型训练数据安全研究报告\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655286516&idx=1&sn=50a0b078ea9a4ba61e258b7b35d5a45b\",\n \"人工智能、算力算网 今天上传文件列表\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655286516&idx=2&sn=b4ec126afea9ee9202f75d353a0c9097\",\n \"【重磅发布】[随波逐流]二维码识别工具 V2.0 震撼上线！自动定位 + 多引擎解码，复杂场景扫码成功率提升3倍\": \"https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247490846&idx=1&sn=47cd3cf8a8a0810caa50bf48f71c781f\",\n \"MAC恶意软件的艺术【卷Ⅰ】Part1-Chapter2 持久化\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzkwMDA5NQ==&mid=2247484947&idx=1&sn=f00dd2acd9f5fb9da1014f5b79df0d8c\",\n \"超越范围思考：高级 CORS 利用技术\": \"https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247489269&idx=1&sn=aadbbe7f73a98efeca46138e65d5f67e\",\n \"奇安信领跑“AI+安全”赛道，成权威报告覆盖最广厂商\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628280&idx=1&sn=fec28a487b1fb8e41932f99b41c0779c\",\n \"内蒙古自治区政务服务与数据管理局与奇安信集团签署战略合作框架协议\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628280&idx=2&sn=acac9d6098ee8a2f07324432190fca1c\",\n \"每周安全资讯（2025.7.5-7.11）\": \"https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247487015&idx=1&sn=30c1557bc0f12ea4ecd77364beef26c1\",\n \"SoFixer用于修复从内存中 dump 下来的So文件\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488449&idx=1&sn=a6d3ed4434559b5693ff37f34f76acfb\",\n \"2025-7-11日漏洞情报汇总\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247490620&idx=1&sn=24772cd1ce3d8e6c26f1f7468208eb76\",\n \"Hw篇\": \"https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499698&idx=1&sn=6c21d751058e819d8e5fdee43ed54a98\",\n \"sci论文润色机构怎么选？这家老牌润色机构录用率超96.7%！\": \"https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499698&idx=2&sn=bec2994952d9b24e4ae66d088f77a80a\",\n \"六月重磅更新：微软 Copilot Studio 功能全览，打造更聪明、更高效的智能代理\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzY0Mzg2OQ==&mid=2247487078&idx=1&sn=e58f291271c3363af9d166849bca841f\",\n \"周总结\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzM2MjM0OQ==&mid=2247498005&idx=1&sn=02665dfcf60f9a5fdbd77b288eff494c\",\n \"HTB 第八赛季Voleur靶机：SMB泄漏/WSL备份/直捣域控\": \"https://mp.weixin.qq.com/s?__biz=MzkwMzYyNzQ1NA==&mid=2247485754&idx=1&sn=62576740b3e02f2d5c133024b5133a35\",\n \"私有化部署，企业级开源 3D 数字孪生低代码平台，IoT 物联网可视化Web 大屏交付必备\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454938906&idx=1&sn=b1e4dffa77426798f8e82a44af83b0bb\",\n \"新型变种木马正在伪装成Termius入侵系统\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488581&idx=1&sn=4b7c8f544c0bdff17406669eb2dd5f01\",\n \"通报！又有三款AI应用涉违法违规收集个人信息\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932419&idx=1&sn=05d15f20fe216e10f2b56b8bfeeb1cb5\",\n \"AI快讯：企业微信发布多项AI新能力，智谱拟改为在香港上市\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932419&idx=2&sn=39eea380601d7e209df03940e3ef4513\",\n \"957.9万！中国联通打造“联通通通助手”智能体产品\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932419&idx=3&sn=4d57556b8d0b19da11d2054297e351f9\",\n \"【资讯】市场监管总局、工信部印发《计量支撑产业新质生产力发展行动方案（2025—2030年）》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554064&idx=1&sn=421a1aae74d2cccfd37bb09977901197\",\n \"【资讯】上海市数据局、上海市财政局印发《上海市城市数字化转型专项资金管理办法》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554064&idx=2&sn=883edc477e54952f96bd1afef520fe31\",\n \"【资讯】湖北省政府办公厅印发《湖北省加快推进中小企业数字化转型专项行动方案》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554064&idx=3&sn=e90be23e47f9a1c185309c53b9088217\",\n \"【资讯】辽宁省政府办公厅印发《辽宁省数字政府建设实施方案（2025—2027年）》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554064&idx=4&sn=e4e091c27f18a15a8b3793b90f723232\",\n \"【资讯】广州市南沙区政府办公室印发《广州市南沙区促进人工智能产业高质量发展扶持办法》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554064&idx=5&sn=e78f09a51b155ecc142ad63649fc36af\",\n \"金砖国家领导人关于人工智能全球治理的声明\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245456&idx=1&sn=cdd19f6cb3a9fbd49291f468206c4378\",\n \"前沿 | 中国半导体产业链的现状、困境与应对\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245456&idx=2&sn=140ec7f5035af92868c74bc42f027f21\",\n \"老乡鸡、杨国福、斗鱼……这68款移动应用违法违规收集使用个人信息被通报！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245456&idx=3&sn=6774273dc3612ab5a70f306469a26aff\",\n \"专家观点 | AI时代，未成年人保护也要更“智能”\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245456&idx=4&sn=27c266cb8606e9a2caba7113c2956825\",\n \"国际 | 域外人脸识别法律制度概览\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245456&idx=5&sn=bcccada46189a2c2d3686d30e0f940bd\",\n \"漏洞预警｜银河麒麟桌面操作系统V10本地提权漏洞（CNNVD-2025-28344653/KVE-2025-0603)\": \"https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517301&idx=1&sn=9d85a91e393af6ddcb3b5ea522d72c76\",\n \"新品限时 7 折 | 无需来回跳转，在当前页面预览链接内容！浏览器拓展 NoTab 上架\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492513&idx=1&sn=de666d29713d016ed3b073b6f491481b\",\n \"专业网络安全培训讲师教育与评价（PCTE2-2）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247494013&idx=1&sn=b8bed335b180c18635ecf81e348e0f0b\",\n \"130 亿资金去向成谜：鑫慷嘉 DGCX 骗局崩盘始末\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247502681&idx=1&sn=b16d2d3d09e5b4eaff4d6c712e0441b1\",\n \"【会议活动】原材料工业数字化转型专家委员会成立大会暨第一次全体工作会议在京召开\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649252971&idx=1&sn=253b096c68f2996230c0d89446fcd9b0\",\n \"【安全圈】ChatGPT 被绕过守护机制，泄露 Windows 产品密钥事件概述\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070608&idx=1&sn=4e5dc281a4812d0a3f756ec67d0bc633\",\n \"【安全圈】巴基斯坦黑客组织“透明部族”对印度国防部门发起基于 Linux 的网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070608&idx=2&sn=aca93fdcf40d3797bd0cf6a902675aa5\",\n \"【安全圈】Microsoft Exchange Online 全球宕机，数百万用户无法访问邮箱\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070608&idx=3&sn=8c4c3895b10ed5d582755fd06f7f4b21\",\n \"【安全圈】俄罗斯篮球运动员在法国被捕 涉嫌参与大规模勒索软件攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070608&idx=4&sn=0dc2ffd661b6b8058ebf2d9da05d39c3\",\n \"安世加企业出海合规线上沙龙-制造业（07.25 / 周五 / 线上）\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247542672&idx=1&sn=c8627745127f5304e475862f138c91a1\",\n \"动态 | 安世加企业出海合规线上沙龙-互联网行业成功举办（线上）\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247542672&idx=2&sn=f31a609a2b6ca5926a97aacf5ea451c0\",\n \"彻底搞懂LangGraph：构建强大的Multi-Agent多智能体应用的LangChain新利器 【1】\": \"https://mp.weixin.qq.com/s?__biz=MzIyMDAwMjkzNg==&mid=2247513612&idx=1&sn=d2442950da92db2138d1784f164456f2\",\n \"ClickHouse近实时数据计算查询技巧\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908553&idx=1&sn=f828341d657c9e71d1be122b29a91fb8\",\n \"聚焦透明度、版权、安全与保障，欧盟公布《通用AI实践准则》最终版\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247519208&idx=1&sn=1f6528d2dbab36fbb5ae450edc852624\",\n \"省下300刀/月！手把手教你打造不输Grok-4的Cisco排障AI\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MjI0MDAyMg==&mid=2247488713&idx=1&sn=7d08678d78a5a884bffa36f43887e17e\",\n \"新时代新安全——构建一体化可信数据空间\": \"https://mp.weixin.qq.com/s?__biz=MzUxODY3MDExMA==&mid=2247490366&idx=1&sn=297221b16617c1c02815ef589064c342\",\n \"ISC.AI创新沙盒大赛高校创新热度竞速榜出炉：全国战区“含AI量”集体爆发！\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649819597&idx=1&sn=60a97e66e2f5f1a7978f05108c572285\",\n \"蓝牙漏洞PerfektBlue 可用于实现RCE，影响多家汽车厂商\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523555&idx=1&sn=caf9ee84b43c4fc81ee51bfbe2c7d11d\",\n \"开源项目mcp-remote 中存在严重漏洞可导致RCE\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523555&idx=2&sn=04a84283c9d2100a95736c652525dcd8\",\n \"半导体巨头AMD新型漏洞影响多款CPU，计时攻击可导致数据泄露\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324803&idx=1&sn=c3170ccca7509e132f790f5050e51312\",\n \"暑期大学生自救指南\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324803&idx=2&sn=aa3163d1abb4b260db7f6cee0eea2a39\",\n \"Linux内核NFT子系统曝高危\\\\\\\"双重释放\\\\\\\"漏洞可致本地提权\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324803&idx=3&sn=a328e0d32ba8414355872528a04b0823\",\n \"麦当劳AI招聘工具漏洞导致6400万求职者数据泄露\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324803&idx=4&sn=f6f6b55650aaba7bab0138c6e9c8c663\",\n \"ICML 2025 | 从语言到视觉，自回归模型VARSR开启图像超分新范式\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NzU4MDM0MQ==&mid=2247496762&idx=1&sn=3d3647e651bba98d65fd4e51ecbff991\",\n \"六月末至七月初，多所高校师生走进四叶草安全，开启了一场场干货满满的学习实践之旅。\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDAwNzM3MQ==&mid=2247521206&idx=1&sn=221921f9646d0cef7ac027694a7e1d2a\",\n \"每周安全速递³⁴⁹ | Aeza集团因托管勒索软件和信息窃取服务器而受到制裁\": \"https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247496959&idx=1&sn=0928b9cec58bdbfa072a64a92b951bc9\",\n \"【1CPE】ISC2 Webinar丨云检测和响应的最佳实践： 从多云攻击中汲取现实世界的经验教训\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492929&idx=1&sn=e6baa47ba891a6a32114db6c17797638\",\n \"冷瓜热吃 | 苕皮哥2.0\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484539&idx=1&sn=6d704b66b008a059a2806a3b37061d90\",\n \"麦当劳AI招聘助手暴露了约6400万条应聘者个人数据\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514676&idx=1&sn=ba2fc3721acfb3ebbc58acb4a6d08524\",\n \"大疆无人机军用固件厂商被黑客攻击，俄军无人机集体瘫痪\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514676&idx=2&sn=a0166550c66384f299208ac03f21dbf1\",\n \"电子邮件原来并不简单！\": \"https://mp.weixin.qq.com/s?__biz=MzkxMjY3MTI4Mg==&mid=2247485105&idx=1&sn=54e0e665bcf5cf56905630ff47b2d5c1\",\n \"等保测评备案能被撤销吗\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTIzMQ==&mid=2247497524&idx=1&sn=121bac72834ace872d39c906ad85d1c6\",\n \"墨云VackBAS入选安全牛《入侵与攻击模拟BAS应用指南（2025版）》报告\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODE2NDA3NA==&mid=2247497006&idx=1&sn=550e0a69e6a68298edd84f0bcc906f88\",\n \"内网（特别是物理隔离局域网）需要做等保吗？\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTIzMQ==&mid=2247497524&idx=2&sn=39c2a91535e17d4a118ebdc319ecdcfc\",\n \"周鸿祎上合数字经济论坛演讲：开放协作共筑全球数字经济安全屏障\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581197&idx=1&sn=4a018c1b177f9acb4b5b21cca06ee5de\",\n \"破局新质人才培育！360与毕节职院共筑贵州产业升级人才基座\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581197&idx=2&sn=42991271598f8926ee0418c648fc9cba\",\n \"会议预告 | 2025年第十二届密码与安全前瞻性论坛会议通知（第一轮）\": \"https://mp.weixin.qq.com/s?__biz=MzI1MjAyMTg1Ng==&mid=2650471547&idx=1&sn=9934935cf870148a10703f432cbb960a\",\n \"每周蓝军技术推送（2025.7.5-7.11）\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494280&idx=1&sn=9a569a013e2592e48c372fb74a369fec\",\n \"见人下菜？网安厂商如何保护高净值客户免受网络攻击？\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247641570&idx=1&sn=f0a44b1b5acfe9863e17dd13ac2e818f\",\n \"重磅发布 | 可信数据空间企业调研：需求、挑战与建议\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247641570&idx=2&sn=5555ec13411975dde75bdfca547cfa61\",\n \"诸子云｜甲方：网络空间安全专业的主要应用场景是什么？有哪些压制指定Wi-Fi SSID的网络设备？\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247641570&idx=3&sn=6d4e11378f26e4871ace0ec76833d114\",\n \"国家发明专利丨AI驱动的大规模数据生成方法\": \"https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660191994&idx=1&sn=622ee95409e6941e019eb739e6629c33\",\n \"你的网络安全吗？忽视这6点，下一个被攻陷的可能就是你！\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492771&idx=1&sn=4e414e9c35bf3da72b296d7d0d178be9\",\n \"服务器端原型污染：安全的黑盒检测\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483992&idx=1&sn=cbe726eeb0a99e1ccf93acbd787a8f12\",\n \"浅谈SHE与HSM\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247556764&idx=1&sn=7a6dbe0ed6cd56111ded669d006d046f\",\n \"8月1日强制实施u2002|u2002一文读懂欧盟CE-RED无线设备新规\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247556764&idx=2&sn=f82eb36888176657b0e02eda3e9a9cc3\",\n \"从Top20开源组件漏洞浅谈开源安全治理困境\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488451&idx=1&sn=a4ca5878e9febbc5fb079a6dbd862c55\",\n \"07-11-攻防演练之请防守方重点关注威胁情报样本信息\": \"https://mp.weixin.qq.com/s?__biz=MzIyNDg2MDQ4Ng==&mid=2247487379&idx=1&sn=ce4b51d6f5bde1eb21c21261933e49fc\",\n \"实力认证 |珞安科技荣获2025中国网络安全「能源行业」优秀解决方案\": \"https://mp.weixin.qq.com/s?__biz=MzU2NjI5NzY1OA==&mid=2247513315&idx=1&sn=ba3db6843c69050d50b40f33c1dc761c\",\n \"【已复现】契约锁电子签章系统存在远程代码执行漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490470&idx=1&sn=76647e3cbc939582e3fa73101fc442f4\",\n \"邀请函 | 中原数据大讲堂（第一讲）7月15日正式开讲，欢迎报名！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448689469&idx=1&sn=7fadfae3e91fe012d1c64c442e8586b0\",\n \"《移动互联网应用服务用户权益保护合规管理指南》发布\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448689469&idx=2&sn=f85ca8fdeeef898a0261f48d2b56af27\",\n \"LLVM 基本块VMP保护之简易虚拟机示例实现\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597083&idx=1&sn=33594cedc77582e326864bc91855f9ec\",\n \"这波招聘逆天了！京东/光年AI/小溪流科技2025最新职位，简历砸过来～\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597083&idx=2&sn=bbaa614c84506105a293502a352b80ef\",\n \"PerfektBlue漏洞危及梅赛德斯、大众和斯柯达等多款汽车信息娱乐系统\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597083&idx=3&sn=5ed9d81521495a3efbc2a3afe6aedaf8\",\n \"信安世纪与神州数码达成战略合作，共筑数字安全新生态\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650665051&idx=1&sn=d443eb9d512dc3722e0f9114adefb717\",\n \"敏捷交换机很牛，它比传统交换机强在哪里？\": \"https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247531097&idx=1&sn=63e8c1f3f9700e89bf8832a0b704ee40\",\n \"【0711】重保演习每日情报汇总\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487627&idx=1&sn=e3409969828a70b2f51249d9e9256542\",\n \"【天穹】HVV专题：典型HVV样本总结与IOC收集（第二期）\": \"https://mp.weixin.qq.com/s?__biz=Mzg4OTU4MjQ4Mg==&mid=2247488722&idx=1&sn=cd18bb3e125792d1630283eeecb90727\",\n \"红队渗透，兜里都揣着哪些证书？\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247524304&idx=1&sn=be4b2dfd62ed6fade59b02eef4e72b0a\",\n \"公开课预告|构建可信赖的AI：从理解到实践\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247524304&idx=2&sn=ada251f1c60eaa8e862b033bfa05f17a\",\n \"【新！】CNNVD通报微软多个安全漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247547154&idx=1&sn=ed18dc2a48d5baf054db84d47279fb1b\",\n \"《大学生就业相关模板合集》\": \"https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247493951&idx=1&sn=f8428d4b307d83be22bf7df480214b9d\",\n \"ATT&CK实战靶场 Lab11 震撼上线！真枪实战等你来战！\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523735&idx=1&sn=31194064b4d30893fe1c84b208efcf0f\",\n \"腾讯太极团队实现DeepSeek模型业内H20最高性能15800+ tokens/s\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649794504&idx=1&sn=61c088b33c96f106db0479f45fa23cc7\",\n \"守护“工业命脉”！启明星辰护航火电企业5G专网安全防护升级\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651733716&idx=1&sn=ef457fd2b7de64e13439fa100581dd04\",\n \"群友的智齿 | 昨天划水，看到一个群友说拿下了\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247489655&idx=1&sn=e9c4f4e3cc09b5d7018dc9b00c1408d5\",\n \"烽火狼烟丨暗网数据及攻击威胁情报分析周报（07/07-07/11）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NjMxNTgyOQ==&mid=2247484680&idx=1&sn=c62abbf6aa1dab84f4075cb0a7fff0c6\",\n \"网络安全信息与动态周报2025年第27期（6月30日-7月6日）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NjMxNTgyOQ==&mid=2247484680&idx=2&sn=39b21f9933c107d15171eacfad0baa77\",\n \"Scan-X 4.0：AI赋能的被动扫描工具，自动化渗透测试迈入智能时代\": \"https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247493289&idx=1&sn=7bb226bdb998d3fe606c1d8678ca44ec\",\n \"网络安全动态 - 2025.07.11\": \"https://mp.weixin.qq.com/s?__biz=MzU1MzEzMzAxMA==&mid=2247500115&idx=1&sn=d00ba76094833b77b684a4aeec498ac6\",\n \"深度丨冯登国院士、黄欣沂教授等：人工智能安全与隐私综述\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247533932&idx=1&sn=45e5cc46732c825d5d7dbe118560cf62\",\n \"荐读丨默克CISO：如何做好全球6万员工的安全意识培训\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247533932&idx=2&sn=19037e4aa8529feb9f4d2aefc1b9fc43\",\n \"JS逆向-绕过无限debugger\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247521435&idx=1&sn=34523754451f3768d20e19b6cbec4cc0\",\n \"信息诈骗威胁全球近半数移动用户 运营商须构建防御体系\": \"https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247548915&idx=1&sn=1975d7bc78e7b0a9752056b848d39829\",\n \"法律法规｜一图读懂《国家安全法》\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247508606&idx=1&sn=229c681d663c3f3762564d37d0f58d13\",\n \"7大类27项，海云安实力入选中国信通院第三期《数字安全护航技术能力全景图》\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjY2NTM0MA==&mid=2247492607&idx=1&sn=9ff5b9c360727f2abbfb029c09a095a5\",\n \"从 “按键精灵” 到 AI 作弊，SLG 的攻防大战！\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTg2NjYxOA==&mid=2650743806&idx=1&sn=110590ea8e00353ebf339dbebc22ada1\"\n },\n \"Hexacorn\": {\n \"Beyond good ol’ Run key, Part 149\": \"https://www.hexacorn.com/blog/2025/07/11/beyond-good-ol-run-key-part-149/\"\n },\n \"ADD / XOR / ROL\": {\n \"Understand Neural Nets better, post 5 of N -- Code Assistant shootout\": \"http://addxorrol.blogspot.com/2025/07/understand-neural-nets-better-post-5-of.html\"\n },\n \"SentinelOne\": {\n \"The Good, the Bad and the Ugly in Cybersecurity – Week 28\": \"https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-28-7/\"\n },\n \"daniel.haxx.se\": {\n \"Cybersecurity Risk Assessment Request\": \"https://daniel.haxx.se/blog/2025/07/11/cybersecurity-risk-assessment-request/\"\n },\n \"Happy Hacking!\": {\n \"HEVD – Race Condition – Windows 10 Pro – SMEP, kCFG, kASLR protections\": \"https://xavibel.com/2025/07/11/hevd-race-condition-windows-10-pro-smep-kcfg-kaslr-protections/\"\n },\n \"安全分析与研究\": {\n \"银狐最新注入型免杀样本详细分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247492719&idx=1&sn=84d971b1af78b2d5abe28ea1827e4774\"\n },\n \"HackerNews\": {\n \"俄罗斯篮球运动员因涉勒索软件案在法国被捕​\": \"https://hackernews.cc/archives/59717\",\n \"​​奔驰、大众、斯柯达中招！蓝牙漏洞可一键操控车载系统​\": \"https://hackernews.cc/archives/59714\",\n \"德国法院裁定 Meta 追踪技术违反欧盟隐私法\": \"https://hackernews.cc/archives/59711\",\n \"芝加哥知名电台遭黑客攻击，财务数据及合同外泄​\": \"https://hackernews.cc/archives/59707\",\n \"日本新日铁旗下 IT 公司遇零日攻击，用户数据泄露​\": \"https://hackernews.cc/archives/59705\",\n \"​​英国法院判 ICO 胜诉，TikTok 1270 万英镑罚单临近落地​\": \"https://hackernews.cc/archives/59703\",\n \"零售巨头连环遭袭案告破，四名青少年黑客落网\": \"https://hackernews.cc/archives/59701\",\n \"黑客假借游戏与 AI 之名，通过社交平台向加密货币用户投放恶意软件\": \"https://hackernews.cc/archives/59698\"\n },\n \"看雪学苑\": {\n \"LLVM 基本块VMP保护之简易虚拟机示例实现\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597083&idx=1&sn=33594cedc77582e326864bc91855f9ec\",\n \"这波招聘逆天了！京东/光年AI/小溪流科技2025最新职位，简历砸过来～\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597083&idx=2&sn=bbaa614c84506105a293502a352b80ef\",\n \"PerfektBlue漏洞危及梅赛德斯、大众和斯柯达等多款汽车信息娱乐系统\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597083&idx=3&sn=5ed9d81521495a3efbc2a3afe6aedaf8\"\n },\n \"先进攻防\": {\n \"以攻促防 - 探究如何发现、应对和演进专业红队技术\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908548&idx=1&sn=d09c8f8739fcb564ae2395853d3d33a7\"\n },\n \"红日安全\": {\n \"2025-07-11 HW情报分享（四）\": \"https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851857&idx=1&sn=d281612b2cb999c2a93b6df5837bbb0e\"\n },\n \"威努特安全网络\": {\n \"麦当劳泄露求职者数据，新漏洞威胁大众等汽车品牌安全|一周特辑\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651134313&idx=1&sn=1c8d8e158614cebc484d9e9c60110620\"\n },\n \"代码卫士\": {\n \"蓝牙漏洞PerfektBlue 可用于实现RCE，影响多家汽车厂商\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523555&idx=1&sn=caf9ee84b43c4fc81ee51bfbe2c7d11d\",\n \"开源项目mcp-remote 中存在严重漏洞可导致RCE\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523555&idx=2&sn=04a84283c9d2100a95736c652525dcd8\"\n },\n \"安全客\": {\n \"数十亿手机可被监听，eSIM漏洞牵动全球通信生态\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788781&idx=1&sn=148a363ff5ef9b1e0e3fddf8321a100e\"\n },\n \"长亭安全应急响应中心\": {\n \"【已复现】契约锁电子签章系统 pdfverifier 远程代码执行漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492877&idx=1&sn=f6c804a45992dbfc7e82c40884909de9\"\n },\n \"绿盟科技研究通讯\": {\n \"绿盟虚拟汽车靶场（三）：MQTT云服务攻防\": \"https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498900&idx=1&sn=46ba27718717f7c78727872301162089\"\n },\n \"安全内参\": {\n \"麦当劳AI招聘助手暴露了约6400万条应聘者个人数据\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514676&idx=1&sn=ba2fc3721acfb3ebbc58acb4a6d08524\",\n \"大疆无人机军用固件厂商被黑客攻击，俄军无人机集体瘫痪\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514676&idx=2&sn=a0166550c66384f299208ac03f21dbf1\"\n },\n \"奇安信病毒响应中心\": {\n \"每周勒索威胁摘要\": \"https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498510&idx=1&sn=a2bf239a777b76a2a8570c46d0f003fd\"\n },\n \"奇安信威胁情报中心\": {\n \"摩诃草（APT-Q-36）仿冒高校域名实施窃密行动\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247515318&idx=1&sn=d819efde9332a98af4c85316f2948b95\",\n \"每周高级威胁情报解读(2025.07.04~07.10)\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247515318&idx=2&sn=ad007880e6cc2e260e12d8b420bab8ac\"\n },\n \"吾爱破解论坛\": {\n \"【开放注册公告】吾爱破解论坛2025年7月21日暑假开放注册公告\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651142767&idx=1&sn=0a26835f2b52cb33700351503588c1e9\"\n },\n \"dotNet安全矩阵\": {\n \"绕过 .NET 身份认证，自动化伪造.ASPXAUTH Cookie票据\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500060&idx=1&sn=77be73cb6b26198f1a83853546b40f5a\",\n \".NET 内网攻防实战电子报刊\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500060&idx=2&sn=c5a957029f4ce1fe39a66fe6f58e7a4a\",\n \".NET Emit 技术打造免杀 WebShell 突破安全壁垒\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500060&idx=3&sn=8db32929de16f7dd8e98e8f18b4476be\"\n },\n \"数世咨询\": {\n \"AMD 警告：全新“瞬态调度器攻击”波及广泛 CPU 芯片\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247539557&idx=1&sn=648655a10bf7fe6053ada20f3ef26f58\",\n \"重磅发布 | 可信数据空间企业调研：需求、挑战与建议\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247539557&idx=2&sn=f14a59bf4e871f509c3f3ce376e1f3a5\"\n },\n \"M01N Team\": {\n \"每周蓝军技术推送（2025.7.5-7.11）\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494280&idx=1&sn=9a569a013e2592e48c372fb74a369fec\"\n },\n \"Tide安全团队\": {\n \"JS逆向-绕过无限debugger\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247521435&idx=1&sn=34523754451f3768d20e19b6cbec4cc0\"\n },\n \"嘶吼专业版\": {\n \"腾讯云Web应用防火墙｜秒级拦截千万级DDoS攻击，实现业务0中断\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583789&idx=1&sn=8454ac0e34a2c6f4c464c0fc09230956\",\n \"XCon2025官宣定档！无界场议题征集，热力启动！！\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583789&idx=2&sn=68f59221b0cb6a18e704bfc501a2c98c\",\n \"IT巨头英迈因SafePay勒索软件攻击导致服务中断\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583789&idx=3&sn=c1d912d8a72f0c81eb9e6350165d253d\"\n },\n \"安全牛\": {\n \"安全产业该如何跟进工业互联网的发展红利\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137717&idx=1&sn=10be2ac449d640b414075eed16b9b718\",\n \"“地表最强AI模型”Grok 4发布，认为其在所有学术领域都达到博士水平；新型跨平台木马针对我国及东南亚地区展开攻击 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137717&idx=2&sn=ca6e7a78962f0146320c941ee98430e1\"\n },\n \"XCTF联赛\": {\n \"L3HCTF 2025 | 倒计时1天！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247515679&idx=1&sn=b7074e00ece0dfa2db30f303583e3807\"\n },\n \"极客公园\": {\n \"罗马仕中层曝问题充电宝内幕；传 OpenAI 计划推出浏览器产品；邓紫棋首部科幻小说预售 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653082541&idx=1&sn=51a47eb058d2808b8e0f67f6af295396\"\n },\n \"NOVASEC\": {\n \"X-SAST 已开源审计UI并发布AI过滤模块\": \"https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490673&idx=1&sn=1935675cec6561f05fb98f260073dbb2\",\n \"【代码】hypnus：Rust 内存混淆与执行流伪装\": \"https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490673&idx=2&sn=0b9b090474321a9f793d677c2e614b7e\"\n },\n \"火绒安全\": {\n \"【火绒安全周报】境外势力入侵校园广播妄图蛊惑学生/黑客利用红队工具Shellter传播窃密木马\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525980&idx=1&sn=cb150bd517e323ef93e0394ee039bbf4\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525980&idx=2&sn=7bd7c955dfe4e7a9eb27bec127184eb4\"\n },\n \"慢雾科技\": {\n \"130 亿资金去向成谜：鑫慷嘉 DGCX 骗局崩盘始末\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247502681&idx=1&sn=b16d2d3d09e5b4eaff4d6c712e0441b1\"\n },\n \"DEF CON Announcements!\": {\n \"DEF CON is Coming to Bahrain!\": \"https://defcon.org/html/defcon-bahrain/dc-bahrain-index.html\"\n },\n \"安全学术圈\": {\n \"纳亚赖布尔国际信息技术研究所 | 利用高效特征选择方法对Tor流量进行分类\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247492932&idx=1&sn=d4651f45e1f99b6be4371867203e2986\"\n },\n \"悬镜安全\": {\n \"热点供应链投毒预警 | 捕获恶意PY包伪装NetworkX开展投毒攻击事件\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647796754&idx=1&sn=4a9db3dd11627b11cc0aa53ec8eb54f1\"\n },\n \"腾讯安全威胁情报中心\": {\n \"银狐情报共享第1期 ｜ Att&CK视角下的最新活跃技战术分享\": \"https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510497&idx=1&sn=6dfe9eed213f19e3d304132f1e46c3f5\"\n },\n \"Yak Project\": {\n \"Yakit MITM 劫持，国密通信“破壁人”!\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528391&idx=1&sn=8dd7d583340530129b3c90e626e20e51\"\n },\n \"迪哥讲事\": {\n \"如何在移动端抓包-上\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497855&idx=1&sn=f13de17a56e3db0ba08ffcc2a4a0b1a6\"\n },\n \"情报分析师\": {\n \"美国通过第三国转运关键矿物：我如何应对与博弈分析\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650561762&idx=1&sn=58ad85cea5152a906f7f6517ae234ca4\",\n \"领导钟爱的情报分析报告长啥样？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650561762&idx=2&sn=c436277c4fa321cfdbf782d401f77286\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Stealthy PHP Malware Uses ZIP Archive to Redirect WordPress Visitors\": \"https://blog.sucuri.net/2025/07/stealthy-php-malware-uses-zip-archive-to-redirect-wordpress-visitors.html\",\n \"Albemarle latest Virginia county hit with ransomware\": \"https://therecord.media/albemarle-virginia-ransomware-attack\",\n \"'123456' password exposed chats for 64 million McDonald’s job applicants\": \"https://www.bleepingcomputer.com/news/security/123456-password-exposed-chats-for-64-million-mcdonalds-job-applicants/\",\n \"Can an ‘ethical’ spyware maker justify providing its tech to ICE?\": \"https://techcrunch.com/2025/07/11/can-an-ethical-spyware-maker-provide-its-tech-to-ice/\",\n \"'123456' password exposed info for 64 million McDonald’s job applicants\": \"https://www.bleepingcomputer.com/news/security/123456-password-exposed-info-for-64-million-mcdonalds-job-applicants/\",\n \"Exploits for pre-auth Fortinet FortiWeb RCE flaw released, patch now\": \"https://www.bleepingcomputer.com/news/security/exploits-for-pre-auth-fortinet-fortiweb-rce-flaw-released-patch-now/\",\n \"WordPress Gravity Forms developer hacked to push backdoored plugins\": \"https://www.bleepingcomputer.com/news/security/wordpress-gravity-forms-developer-hacked-to-push-backdoored-plugins/\",\n \"Airline executive agrees to dismiss litigation around alleged hack-for-hire scheme\": \"https://therecord.media/airline-exec-agrees-to-dismiss-hack-for-hire-lawsuit\",\n \"Hacker returns cryptocurrency stolen from GMX exchange after $5 million bounty payment\": \"https://therecord.media/hacker-returns-stolen-gmx-bounty\",\n \"NVIDIA issues guidance to defend GDDR6 GPUs against Rowhammer attacks\": \"https://www.bleepingcomputer.com/news/security/nvidia-issues-guidance-to-defend-gddr6-gpus-against-rowhammer/\",\n \"The zero-day that could've compromised every Cursor and Windsurf user\": \"https://www.bleepingcomputer.com/news/security/the-zero-day-that-couldve-compromised-every-cursor-and-windsurf-user/\",\n \"CISA orders agencies to immediately patch Citrix Bleed 2, saying bug poses ‘unacceptable risk’\": \"https://therecord.media/cisa-orders-agencies-patch-citrix-bleed-2\",\n \"Vulnerabilità in BlueSDK, milioni di veicoli a rischio di attacco\": \"https://www.securityinfo.it/2025/07/11/vulnerabilita-in-bluesdk-milioni-di-veicoli-a-rischio-di-attacco/\",\n \"CISA tags Citrix Bleed 2 as exploited, gives agencies a day to patch\": \"https://www.bleepingcomputer.com/news/security/cisa-tags-citrix-bleed-2-as-exploited-gives-agencies-a-day-to-patch/\",\n \"AI chatbot’s simple ‘123456’ password risked exposing personal data of millions of McDonald’s job applicants\": \"https://techcrunch.com/2025/07/11/ai-chatbots-simple-123456-password-risked-exposing-personal-data-of-millions-of-mcdonalds-job-applicants/\",\n \"Supply chain: più sicurezza oggi, meno scuse per domani\": \"https://www.cybersecurity360.it/nuove-minacce/supply-chain-piu-sicurezza-oggi-meno-scuse-per-domani/\",\n \"Sviluppatori nel mirino di ZuRu: il malware si nasconde nelle app legittime per macOS\": \"https://www.cybersecurity360.it/news/sviluppatori-nel-mirino-di-zuru-il-malware-si-nasconde-nelle-app-legittime-per-macos/\",\n \"How I made $64k from deleted files — a bug bounty story\": \"https://medium.com/@sharon.brizinov/how-i-made-64k-from-deleted-files-a-bug-bounty-story-c5bd3a6f5f9b\",\n \"Stratascale\": \"https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot\",\n \"Indonesia extradites Russian accused of selling personal data on Telegram\": \"https://therecord.media/indonesia-extradites-russian-telegram-sale\",\n \"Sintesi riepilogativa delle campagne malevole nella settimana del 5 – 11 luglio\": \"https://cert-agid.gov.it/news/sintesi-riepilogativa-delle-campagne-malevole-nella-settimana-del-5-11-luglio/\",\n \"From Click to Compromise: Unveiling the Sophisticated Attack of DoNot APT Group on Southern European Government Entities\": \"https://www.trellix.com/blogs/research/from-click-to-compromise-unveiling-the-sophisticated-attack-of-donot-apt-group-on-southern-european-government-entities/\",\n \"DeepSeek a threat to national security, warns Czech cyber agency\": \"https://therecord.media/deepseek-security-czech-cyber-agency-warning\",\n \"Spain awards Huawei contracts to manage intelligence agency wiretaps\": \"https://therecord.media/spain-awards-contracts-huawei-intelligence-agency-wiretaps\",\n \"La nuova identità digitale in Cina: una svolta radicale nella sorveglianza\": \"https://www.cybersecurity360.it/news/la-nuova-identita-digitale-in-cina-una-svolta-radicale-nella-sorveglianza/\",\n \"Four arrested in UK over M&S, Co-op, Harrods cyberattacks\": \"https://www.bleepingcomputer.com/news/security/four-arrested-in-uk-over-mands-co-op-harrods-cyberattacks/\",\n \"Editori europei contro il Garante privacy: i modelli consent or pay sono legittimi e indispensabili\": \"https://www.cybersecurity360.it/news/editori-europei-contro-il-garante-privacy-i-modelli-consent-or-pay-sono-legittimi-e-indispensabili/\",\n \"Valutazione d’impatto del trasferimento dati: ecco le regole operative della CNIL\": \"https://www.cybersecurity360.it/news/valutazione-dimpatto-del-trasferimento-dati-ecco-le-regole-operative-della-cnil/\",\n \"Eve, Mallory, Trent: i personaggi che hanno reso comprensibile la storia della sicurezza digitale\": \"https://www.cybersecurity360.it/cultura-cyber/eve-mallory-trent-i-personaggi-che-hanno-reso-comprensibile-la-storia-della-sicurezza-digitale/\",\n \"CSIRT-RER: servizi di cyber security per la protezione degli Enti pubblici\": \"https://www.cybersecurity360.it/soluzioni-aziendali/csirt-rer-servizi-di-cyber-security-per-la-protezione-degli-enti-pubblici/\",\n \"Cyber Security expert, Difesa, Legioni e Milizie.\": \"https://roccosicilia.com/2025/07/11/cyber-security-expert-difesa-legioni-e-milizie/\",\n \"Hacktivist Attacks on Critical Infrastructure Grow as New Groups Emerge\": \"https://cyble.com/blog/hacktivists-attacks-on-critical-infrastructure/\"\n },\n \"Securityinfo.it\": {\n \"Vulnerabilità in BlueSDK, milioni di veicoli a rischio di attacco\": \"https://www.securityinfo.it/2025/07/11/vulnerabilita-in-bluesdk-milioni-di-veicoli-a-rischio-di-attacco/?utm_source=rss&utm_medium=rss&utm_campaign=vulnerabilita-in-bluesdk-milioni-di-veicoli-a-rischio-di-attacco\"\n },\n \"ICT Security Magazine\": {\n \"Flutter Entertainment vittima di compromissione critica: 800.000 utenti esposti\": \"https://www.ictsecuritymagazine.com/notizie/flutter-entertainment/\",\n \"Cybercrime: nel Regno Unito arrestati presunti hacker, attacchi da 440 Milioni a M&S, Co-op e Harrods\": \"https://www.ictsecuritymagazine.com/notizie/cybercrime-retail/\",\n \"Cyber attacco a Qantas Airlines e il rischio di terze parti: circa 5,7 milioni di clienti unici sono stati compromessi\": \"https://www.ictsecuritymagazine.com/notizie/qantas-airlines-attacco/\",\n \"La gang ransomware Hunter International: perché regalano le chiavi per decrittare\": \"https://www.ictsecuritymagazine.com/articoli/hunter-international/\"\n },\n \"FuzzWiki\": {\n \"ECFuzz：面向大规模系统配置项设置的高效模糊测试\": \"https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247487247&idx=1&sn=03519244b9dbe93a53151e11eed98210\"\n },\n \"360数字安全\": {\n \"周鸿祎上合数字经济论坛演讲：开放协作共筑全球数字经济安全屏障\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581197&idx=1&sn=4a018c1b177f9acb4b5b21cca06ee5de\",\n \"破局新质人才培育！360与毕节职院共筑贵州产业升级人才基座\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581197&idx=2&sn=42991271598f8926ee0418c648fc9cba\"\n },\n \"白帽子章华鹏\": {\n \"升职加薪攻略之企业安全做好工作规划\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650237265&idx=1&sn=213740dcc23a1cc60b2e835da9e79599\"\n },\n \"黑伞安全\": {\n \"【已复现】契约锁电子签章系统 pdfverifier 远程代码执行漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489860&idx=1&sn=a10a66519fd9c578f8c2792f582bdf19\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"ISC Stormcast For Friday, July 11th, 2025 https://isc.sans.edu/podcastdetail/9522, (Fri, Jul 11th)\": \"https://isc.sans.edu/diary/rss/32098\"\n },\n \"Schneier on Security\": {\n \"Squid Dominated the Oceans in the Late Cretaceous\": \"https://www.schneier.com/blog/archives/2025/07/squid-dominated-the-oceans-in-the-late-cretaceous.html\",\n \"Tradecraft in the Information Age\": \"https://www.schneier.com/blog/archives/2025/07/tradecraft-in-the-information-age.html\"\n },\n \"Beacon Tower Lab\": {\n \"【0711】重保演习每日情报汇总\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487627&idx=1&sn=e3409969828a70b2f51249d9e9256542\"\n },\n \"Full Disclosure\": {\n \"SAP NetWeaver S/4HANA - ABAP Code Execution via Internal\\tFunction\": \"https://seclists.org/fulldisclosure/2025/Jul/12\"\n },\n \"The Hacker News\": {\n \"Fortinet Releases Patch for Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257)\": \"https://thehackernews.com/2025/07/fortinet-releases-patch-for-critical.html\",\n \"PerfektBlue Bluetooth Vulnerabilities Expose Millions of Vehicles to Remote Code Execution\": \"https://thehackernews.com/2025/07/perfektblue-bluetooth-vulnerabilities.html\",\n \"Securing Data in the AI Era\": \"https://thehackernews.com/2025/07/securing-data-in-ai-era.html\",\n \"Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild\": \"https://thehackernews.com/2025/07/critical-wing-ftp-server-vulnerability.html\",\n \"Iranian-Backed Pay2Key Ransomware Resurfaces with 80% Profit Share for Cybercriminals\": \"https://thehackernews.com/2025/07/iranian-backed-pay2key-ransomware.html\",\n \"CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target Enterprises\": \"https://thehackernews.com/2025/07/cisa-adds-citrix-netscaler-cve-2025.html\"\n },\n \"Graham Cluley\": {\n \"Russian basketball player arrested in ransomware case despite being “useless with computers”\": \"https://www.bitdefender.com/en-us/blog/hotforsecurity/russian-basketball-player-arrested-in-ransomware-case-despite-being-useless-with-computers\",\n \"Paddy Power and BetFair have suffered a data breach\": \"https://grahamcluley.com/paddy-power-and-betfair-have-suffered-a-data-breach/\"\n },\n \"Security Affairs\": {\n \"Athlete or Hacker? Russian basketball player accused in U.S. ransomware case\": \"https://securityaffairs.com/179831/uncategorized/athlete-or-hacker-russian-basketball-player-accused-in-u-s-ransomware-case.html\",\n \"U.S. CISA adds Citrix NetScaler ADC and Gateway flaw to its Known Exploited Vulnerabilities catalog\": \"https://securityaffairs.com/179813/hacking/u-s-cisa-adds-citrix-netscaler-adc-and-gateway-flaw-to-its-known-exploited-vulnerabilities-catalog.html\"\n },\n \"Deep Web\": {\n \"Dread down?\": \"https://www.reddit.com/r/deepweb/comments/1lx4xby/dread_down/\",\n \"Music leak forums\": \"https://www.reddit.com/r/deepweb/comments/1lwv2c3/music_leak_forums/\"\n },\n \"Information Security\": {\n \"Ayuda acceder a facebook\": \"https://www.reddit.com/r/Information_Security/comments/1lxlcr2/ayuda_acceder_a_facebook/\",\n \"Information security starts at the browser—filter the web, protect your data\": \"https://www.reddit.com/r/Information_Security/comments/1lwynp2/information_security_starts_at_the_browserfilter/\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector (CVE-2025-25257) - watchTowr Labs\": \"https://www.reddit.com/r/netsec/comments/1lx360q/preauth_sql_injection_to_rce_fortinet_fortiweb/\",\n \"Bypassing Meta's Llama Firewall: A Case Study in Prompt Injection Vulnerabilities\": \"https://www.reddit.com/r/netsec/comments/1lx8ijw/bypassing_metas_llama_firewall_a_case_study_in/\",\n \"FortiWeb Pre-Auth RCE (CVE-2025-25257)\": \"https://www.reddit.com/r/netsec/comments/1lx6koo/fortiweb_preauth_rce_cve202525257/\",\n \"ZeroSeige - Live PvP Terminal Hack Battle\": \"https://www.reddit.com/r/netsec/comments/1lxk07t/zeroseige_live_pvp_terminal_hack_battle/\",\n \"Two critical credential vulnerabilities have been found in Kaseya's RapidFire Tools Network Detective\": \"https://www.reddit.com/r/netsec/comments/1lwxsyz/two_critical_credential_vulnerabilities_have_been/\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Prospective Student CompSci/CyberSec\": \"https://www.reddit.com/r/netsecstudents/comments/1lwws3l/prospective_student_compscicybersec/\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"Casino slot machines\": \"https://www.reddit.com/r/blackhat/comments/1lxjv4q/casino_slot_machines/\",\n \"log parser toolkit\": \"https://www.reddit.com/r/blackhat/comments/1lwv8by/log_parser_toolkit/\"\n },\n \"Your Open Hacker Community\": {\n \"How I hacked hackers at LeHack event 2025\": \"https://www.reddit.com/r/HowToHack/comments/1lx0ch5/how_i_hacked_hackers_at_lehack_event_2025/\",\n \"Is v2ray core a spyware?\": \"https://www.reddit.com/r/HowToHack/comments/1lxhdqu/is_v2ray_core_a_spyware/\",\n \"I don’t know where to begin.\": \"https://www.reddit.com/r/HowToHack/comments/1lxb2ij/i_dont_know_where_to_begin/\",\n \"I am a new hacker learning new stuff can someone teach me the basics of hacking?\": \"https://www.reddit.com/r/HowToHack/comments/1lxge4l/i_am_a_new_hacker_learning_new_stuff_can_someone/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Tapjacking, ZuChe, PerfektBlue, McHacking, OT in the IT, Add Ons, Josh Marpet... - SWN #493\": \"http://sites.libsyn.com/18678/tapjacking-zuche-perfektblue-mchacking-ot-in-the-it-add-ons-josh-marpet-swn-493\"\n }\n}"}, "8c89f772d3c61a4c47a289c03b671c2a2dcd2e62": {"t": 1785772255.4289377, "n": 44743, "h": "bcaca3fe40ee486b", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-07-11 Review\": \"http://www.sec-wiki.com/?2025-07-11\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"C-Based Automated Login Analyzer with CSRF Token Extraction for SSO bmi.ir Systems\": \"https://cxsecurity.com/issue/WLB-2025070013\",\n \"Discourse 3.2.x Anonymous Cache Poisoning\": \"https://cxsecurity.com/issue/WLB-2025070012\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"Wing FTP Server危险远程代码执行漏洞（CVE-2025-47812）正被积极利用\": \"https://www.anquanke.com/post/id/309891\",\n \"新版 macOS.ZuRu 木马伪装为 Termius 应用渗透系统\": \"https://www.anquanke.com/post/id/309897\",\n \"OpenAI推出人工智能浏览器：集成ChatGPT革新网页浏览，挑战Chrome地位\": \"https://www.anquanke.com/post/id/309900\",\n \"DoNot APT扩展至欧洲：通过Google Drive钓鱼攻击外务部，传播LoptikMod恶意软件\": \"https://www.anquanke.com/post/id/309905\",\n \"Windows 11现使用JScript9Legacy引擎以增强安全性\": \"https://www.anquanke.com/post/id/309909\",\n \"SureForms WordPress插件漏洞（CVE-2025-6691）：未授权任意文件删除可导致网站被接管，20万个站点面临风险\": \"https://www.anquanke.com/post/id/309908\",\n \"严重的mcp-remote漏洞可实现远程代码执行，影响超43.7万次下载量的相关软件\": \"https://www.anquanke.com/post/id/309915\",\n \"微软 Exchange Online 服务故障–数百万用户无法访问邮箱\": \"https://www.anquanke.com/post/id/309912\",\n \"ChatGPT遭诱导泄露Windows家庭版、专业版及企业版密钥\": \"https://www.anquanke.com/post/id/309931\",\n \"新型PerfektBlue攻击曝光：数百万辆汽车面临远程黑客攻击风险\": \"https://www.anquanke.com/post/id/309920\",\n \"当AI智能体学会“欺骗”，我们如何自保？火山的MCP安全答卷\": \"https://www.anquanke.com/post/id/309933\"\n },\n \"Tenable Blog\": {\n \"Cybersecurity Snapshot: AI Security Field Gets Boost from New CSA Framework and from SANS - OWASP Partnership\": \"https://www.tenable.com/blog/cybersecurity-snapshot-ai-security-framework-ai-security-controls-07-11-2025\"\n },\n \"奇安信攻防社区\": {\n \"fastjson1.2.80 in Springtboot实网利用记录\": \"https://forum.butian.net/share/4427\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"《2025年Q2移动应用安全风险报告》披露，超七成APP涉隐私违规，违规收集、超范围收集、强制推送仍为重灾区\": \"https://www.4hou.com/posts/ArzO\",\n \"超实用！Exchange 与O365防护全攻略：用CACTER堵住 99%的邮件威胁\": \"https://www.4hou.com/posts/rprE\",\n \"【附下载】重庆信通设计院：数据要素赋能倍加，150+跨领域融合应用典型案例\": \"https://www.4hou.com/posts/zADY\",\n \"英迈因SafePay勒索软件攻击导致服务中断\": \"https://www.4hou.com/posts/vwMX\"\n },\n \"Sucuri Blog\": {\n \"Stealthy PHP Malware Uses ZIP Archive to Redirect WordPress Visitors\": \"https://blog.sucuri.net/2025/07/stealthy-php-malware-uses-zip-archive-to-redirect-wordpress-visitors.html\"\n },\n \"Doonsec's feed\": {\n \"7.11hvv情报\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490413&idx=1&sn=84b0b561c4ff4f2e51a807f7d423ad9a\",\n \"史上最贵AI，马斯克的Grok-4实测\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486006&idx=1&sn=25eab5f555a05571a7a9b59e1bf7c6cd\",\n \"网安裁员排行榜！！网安公司成绩单4\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486006&idx=2&sn=78037e3bea84111ec782556aecbf9371\",\n \"【干货原创】实网攻防演习常态化，会带来什么变化01\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486006&idx=3&sn=875f77919a23d2821fd36d2c5607d546\",\n \"【干货】笑傲“网安职场”的独家经验（1）\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486006&idx=4&sn=4cf3be591b6487141188cc7e7499b0b7\",\n \"原创文章目录\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247486006&idx=5&sn=c0babb8c8c3f0226717e7208c7190558\",\n \"CSA最近推出的“AI驱动安全专家”认证，到底有啥用?\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247493156&idx=1&sn=3acdf9b4ca9256ac7b9a3c68670d532a\",\n \"最近身边的朋友不断在学习用AI 进行编程\": \"https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491779&idx=1&sn=d6da00f3b9a009b2aa049d15dc2ec649\",\n \"123456当密码？！麦当劳AI招聘工具McHire漏洞导致6400万求职者数据泄露\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485271&idx=1&sn=9bd6f0e52177bd802a736f7c9ed39a53\",\n \"【资料】7.10全球每日动态-机遇与风险\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151057&idx=1&sn=8cf51ea55c8b7f3e0825369320a6ddb3\",\n \"【招聘】美团安全团队~诚聘情报领域精英人才\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151057&idx=2&sn=a26806079bb2c3b6e49e52f3e443b3d1\",\n \"五步玩转Claude4使用攻略！（全程无需翻墙，附高阶秘籍）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=1&sn=3c39b7ee1f05ed608f467f28223a3e40\",\n \"五步Claude4账号申请详细指南！（稳定使用不被封）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=2&sn=2461d3ddea9f3cef15262681f34ab392\",\n \"五分钟搞定Claude账号申请！三步骤零门槛操作指南（含国内直连方案）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=3&sn=8edf942cb374c7a58f4a41d2746b445c\",\n \"五天内掌握Claude 4实测完全指南！三步进阶玩法让你效率飙升！（附高级Prompt秘籍）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=4&sn=fe34e12d5039bd3fa2675c7b9c122541\",\n \"五招解决Claude4账号被封难题！实测有效的应对攻略（含内部高级方案）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=5&sn=67c8548a8e1a0ad891db6927880b1ba0\",\n \"新手必备：Claude4使用高阶技巧指南（附一键上手方法，无需翻墙）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=6&sn=e12fab0c74011ae322775bd43824190e\",\n \"新手Claude4怎么用全攻略！3天掌握Claude4的高效实操指南（含隐藏功能说明）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=7&sn=ed747756743ae8354e3e0de1feadf6b9\",\n \"一键获取Claude共用账号的五步进阶指南！（包含稳定可靠的内部渠道）。\": \"https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247508381&idx=8&sn=38b768f80c22c614c8655a53dfb7050b\",\n \"0046.从图片上传到账户接管——真实渗透测试中上传、存储和 CORS 漏洞的串联\": \"https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690866&idx=1&sn=4a721e43a083294d91530414cbf72330\",\n \"随笔 | 数据安全的下一个十年（3）\": \"https://mp.weixin.qq.com/s?__biz=MzI1NjQxMzIzMw==&mid=2247497772&idx=1&sn=565eb338a85f50be891c499908499fed\",\n \"大模型训练数据安全研究报告\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655286516&idx=1&sn=50a0b078ea9a4ba61e258b7b35d5a45b\",\n \"人工智能、算力算网 今天上传文件列表\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655286516&idx=2&sn=b4ec126afea9ee9202f75d353a0c9097\",\n \"【重磅发布】[随波逐流]二维码识别工具 V2.0 震撼上线！自动定位 + 多引擎解码，复杂场景扫码成功率提升3倍\": \"https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247490846&idx=1&sn=47cd3cf8a8a0810caa50bf48f71c781f\",\n \"MAC恶意软件的艺术【卷Ⅰ】Part1-Chapter2 持久化\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzkwMDA5NQ==&mid=2247484947&idx=1&sn=f00dd2acd9f5fb9da1014f5b79df0d8c\",\n \"超越范围思考：高级 CORS 利用技术\": \"https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247489269&idx=1&sn=aadbbe7f73a98efeca46138e65d5f67e\",\n \"奇安信领跑“AI+安全”赛道，成权威报告覆盖最广厂商\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628280&idx=1&sn=fec28a487b1fb8e41932f99b41c0779c\",\n \"内蒙古自治区政务服务与数据管理局与奇安信集团签署战略合作框架协议\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628280&idx=2&sn=acac9d6098ee8a2f07324432190fca1c\",\n \"每周安全资讯（2025.7.5-7.11）\": \"https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247487015&idx=1&sn=30c1557bc0f12ea4ecd77364beef26c1\",\n \"SoFixer用于修复从内存中 dump 下来的So文件\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488449&idx=1&sn=a6d3ed4434559b5693ff37f34f76acfb\",\n \"2025-7-11日漏洞情报汇总\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247490620&idx=1&sn=24772cd1ce3d8e6c26f1f7468208eb76\",\n \"Hw篇\": \"https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499698&idx=1&sn=6c21d751058e819d8e5fdee43ed54a98\",\n \"sci论文润色机构怎么选？这家老牌润色机构录用率超96.7%！\": \"https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499698&idx=2&sn=bec2994952d9b24e4ae66d088f77a80a\",\n \"六月重磅更新：微软 Copilot Studio 功能全览，打造更聪明、更高效的智能代理\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzY0Mzg2OQ==&mid=2247487078&idx=1&sn=e58f291271c3363af9d166849bca841f\",\n \"周总结\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzM2MjM0OQ==&mid=2247498005&idx=1&sn=02665dfcf60f9a5fdbd77b288eff494c\",\n \"HTB 第八赛季Voleur靶机：SMB泄漏/WSL备份/直捣域控\": \"https://mp.weixin.qq.com/s?__biz=MzkwMzYyNzQ1NA==&mid=2247485754&idx=1&sn=62576740b3e02f2d5c133024b5133a35\",\n \"私有化部署，企业级开源 3D 数字孪生低代码平台，IoT 物联网可视化Web 大屏交付必备\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454938906&idx=1&sn=b1e4dffa77426798f8e82a44af83b0bb\",\n \"新型变种木马正在伪装成Termius入侵系统\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488581&idx=1&sn=4b7c8f544c0bdff17406669eb2dd5f01\",\n \"通报！又有三款AI应用涉违法违规收集个人信息\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932419&idx=1&sn=05d15f20fe216e10f2b56b8bfeeb1cb5\",\n \"AI快讯：企业微信发布多项AI新能力，智谱拟改为在香港上市\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932419&idx=2&sn=39eea380601d7e209df03940e3ef4513\",\n \"957.9万！中国联通打造“联通通通助手”智能体产品\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932419&idx=3&sn=4d57556b8d0b19da11d2054297e351f9\",\n \"【资讯】市场监管总局、工信部印发《计量支撑产业新质生产力发展行动方案（2025—2030年）》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554064&idx=1&sn=421a1aae74d2cccfd37bb09977901197\",\n \"【资讯】上海市数据局、上海市财政局印发《上海市城市数字化转型专项资金管理办法》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554064&idx=2&sn=883edc477e54952f96bd1afef520fe31\",\n \"【资讯】湖北省政府办公厅印发《湖北省加快推进中小企业数字化转型专项行动方案》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554064&idx=3&sn=e90be23e47f9a1c185309c53b9088217\",\n \"【资讯】辽宁省政府办公厅印发《辽宁省数字政府建设实施方案（2025—2027年）》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554064&idx=4&sn=e4e091c27f18a15a8b3793b90f723232\",\n \"【资讯】广州市南沙区政府办公室印发《广州市南沙区促进人工智能产业高质量发展扶持办法》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554064&idx=5&sn=e78f09a51b155ecc142ad63649fc36af\",\n \"金砖国家领导人关于人工智能全球治理的声明\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245456&idx=1&sn=cdd19f6cb3a9fbd49291f468206c4378\",\n \"前沿 | 中国半导体产业链的现状、困境与应对\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245456&idx=2&sn=140ec7f5035af92868c74bc42f027f21\",\n \"老乡鸡、杨国福、斗鱼……这68款移动应用违法违规收集使用个人信息被通报！\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245456&idx=3&sn=6774273dc3612ab5a70f306469a26aff\",\n \"专家观点 | AI时代，未成年人保护也要更“智能”\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245456&idx=4&sn=27c266cb8606e9a2caba7113c2956825\",\n \"国际 | 域外人脸识别法律制度概览\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245456&idx=5&sn=bcccada46189a2c2d3686d30e0f940bd\",\n \"漏洞预警｜银河麒麟桌面操作系统V10本地提权漏洞（CNNVD-2025-28344653/KVE-2025-0603)\": \"https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517301&idx=1&sn=9d85a91e393af6ddcb3b5ea522d72c76\",\n \"新品限时 7 折 | 无需来回跳转，在当前页面预览链接内容！浏览器拓展 NoTab 上架\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492513&idx=1&sn=de666d29713d016ed3b073b6f491481b\",\n \"专业网络安全培训讲师教育与评价（PCTE2-2）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247494013&idx=1&sn=b8bed335b180c18635ecf81e348e0f0b\",\n \"130 亿资金去向成谜：鑫慷嘉 DGCX 骗局崩盘始末\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247502681&idx=1&sn=b16d2d3d09e5b4eaff4d6c712e0441b1\",\n \"【会议活动】原材料工业数字化转型专家委员会成立大会暨第一次全体工作会议在京召开\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649252971&idx=1&sn=253b096c68f2996230c0d89446fcd9b0\",\n \"【安全圈】ChatGPT 被绕过守护机制，泄露 Windows 产品密钥事件概述\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070608&idx=1&sn=4e5dc281a4812d0a3f756ec67d0bc633\",\n \"【安全圈】巴基斯坦黑客组织“透明部族”对印度国防部门发起基于 Linux 的网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070608&idx=2&sn=aca93fdcf40d3797bd0cf6a902675aa5\",\n \"【安全圈】Microsoft Exchange Online 全球宕机，数百万用户无法访问邮箱\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070608&idx=3&sn=8c4c3895b10ed5d582755fd06f7f4b21\",\n \"【安全圈】俄罗斯篮球运动员在法国被捕 涉嫌参与大规模勒索软件攻击\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070608&idx=4&sn=0dc2ffd661b6b8058ebf2d9da05d39c3\",\n \"安世加企业出海合规线上沙龙-制造业（07.25 / 周五 / 线上）\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247542672&idx=1&sn=c8627745127f5304e475862f138c91a1\",\n \"动态 | 安世加企业出海合规线上沙龙-互联网行业成功举办（线上）\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247542672&idx=2&sn=f31a609a2b6ca5926a97aacf5ea451c0\",\n \"彻底搞懂LangGraph：构建强大的Multi-Agent多智能体应用的LangChain新利器 【1】\": \"https://mp.weixin.qq.com/s?__biz=MzIyMDAwMjkzNg==&mid=2247513612&idx=1&sn=d2442950da92db2138d1784f164456f2\",\n \"ClickHouse近实时数据计算查询技巧\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908553&idx=1&sn=f828341d657c9e71d1be122b29a91fb8\",\n \"聚焦透明度、版权、安全与保障，欧盟公布《通用AI实践准则》最终版\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247519208&idx=1&sn=1f6528d2dbab36fbb5ae450edc852624\",\n \"省下300刀/月！手把手教你打造不输Grok-4的Cisco排障AI\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MjI0MDAyMg==&mid=2247488713&idx=1&sn=7d08678d78a5a884bffa36f43887e17e\",\n \"新时代新安全——构建一体化可信数据空间\": \"https://mp.weixin.qq.com/s?__biz=MzUxODY3MDExMA==&mid=2247490366&idx=1&sn=297221b16617c1c02815ef589064c342\",\n \"ISC.AI创新沙盒大赛高校创新热度竞速榜出炉：全国战区“含AI量”集体爆发！\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649819597&idx=1&sn=60a97e66e2f5f1a7978f05108c572285\",\n \"蓝牙漏洞PerfektBlue 可用于实现RCE，影响多家汽车厂商\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523555&idx=1&sn=caf9ee84b43c4fc81ee51bfbe2c7d11d\",\n \"开源项目mcp-remote 中存在严重漏洞可导致RCE\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523555&idx=2&sn=04a84283c9d2100a95736c652525dcd8\",\n \"半导体巨头AMD新型漏洞影响多款CPU，计时攻击可导致数据泄露\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324803&idx=1&sn=c3170ccca7509e132f790f5050e51312\",\n \"暑期大学生自救指南\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324803&idx=2&sn=aa3163d1abb4b260db7f6cee0eea2a39\",\n \"Linux内核NFT子系统曝高危\\\\\\\"双重释放\\\\\\\"漏洞可致本地提权\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324803&idx=3&sn=a328e0d32ba8414355872528a04b0823\",\n \"麦当劳AI招聘工具漏洞导致6400万求职者数据泄露\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324803&idx=4&sn=f6f6b55650aaba7bab0138c6e9c8c663\",\n \"ICML 2025 | 从语言到视觉，自回归模型VARSR开启图像超分新范式\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NzU4MDM0MQ==&mid=2247496762&idx=1&sn=3d3647e651bba98d65fd4e51ecbff991\",\n \"六月末至七月初，多所高校师生走进四叶草安全，开启了一场场干货满满的学习实践之旅。\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDAwNzM3MQ==&mid=2247521206&idx=1&sn=221921f9646d0cef7ac027694a7e1d2a\",\n \"每周安全速递³⁴⁹ | Aeza集团因托管勒索软件和信息窃取服务器而受到制裁\": \"https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247496959&idx=1&sn=0928b9cec58bdbfa072a64a92b951bc9\",\n \"【1CPE】ISC2 Webinar丨云检测和响应的最佳实践： 从多云攻击中汲取现实世界的经验教训\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492929&idx=1&sn=e6baa47ba891a6a32114db6c17797638\",\n \"冷瓜热吃 | 苕皮哥2.0\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484539&idx=1&sn=6d704b66b008a059a2806a3b37061d90\",\n \"麦当劳AI招聘助手暴露了约6400万条应聘者个人数据\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514676&idx=1&sn=ba2fc3721acfb3ebbc58acb4a6d08524\",\n \"大疆无人机军用固件厂商被黑客攻击，俄军无人机集体瘫痪\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514676&idx=2&sn=a0166550c66384f299208ac03f21dbf1\",\n \"电子邮件原来并不简单！\": \"https://mp.weixin.qq.com/s?__biz=MzkxMjY3MTI4Mg==&mid=2247485105&idx=1&sn=54e0e665bcf5cf56905630ff47b2d5c1\",\n \"等保测评备案能被撤销吗\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTIzMQ==&mid=2247497524&idx=1&sn=121bac72834ace872d39c906ad85d1c6\",\n \"墨云VackBAS入选安全牛《入侵与攻击模拟BAS应用指南（2025版）》报告\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODE2NDA3NA==&mid=2247497006&idx=1&sn=550e0a69e6a68298edd84f0bcc906f88\",\n \"内网（特别是物理隔离局域网）需要做等保吗？\": \"https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTIzMQ==&mid=2247497524&idx=2&sn=39c2a91535e17d4a118ebdc319ecdcfc\",\n \"周鸿祎上合数字经济论坛演讲：开放协作共筑全球数字经济安全屏障\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581197&idx=1&sn=4a018c1b177f9acb4b5b21cca06ee5de\",\n \"破局新质人才培育！360与毕节职院共筑贵州产业升级人才基座\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581197&idx=2&sn=42991271598f8926ee0418c648fc9cba\",\n \"会议预告 | 2025年第十二届密码与安全前瞻性论坛会议通知（第一轮）\": \"https://mp.weixin.qq.com/s?__biz=MzI1MjAyMTg1Ng==&mid=2650471547&idx=1&sn=9934935cf870148a10703f432cbb960a\",\n \"每周蓝军技术推送（2025.7.5-7.11）\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494280&idx=1&sn=9a569a013e2592e48c372fb74a369fec\",\n \"见人下菜？网安厂商如何保护高净值客户免受网络攻击？\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247641570&idx=1&sn=f0a44b1b5acfe9863e17dd13ac2e818f\",\n \"重磅发布 | 可信数据空间企业调研：需求、挑战与建议\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247641570&idx=2&sn=5555ec13411975dde75bdfca547cfa61\",\n \"诸子云｜甲方：网络空间安全专业的主要应用场景是什么？有哪些压制指定Wi-Fi SSID的网络设备？\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247641570&idx=3&sn=6d4e11378f26e4871ace0ec76833d114\",\n \"国家发明专利丨AI驱动的大规模数据生成方法\": \"https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660191994&idx=1&sn=622ee95409e6941e019eb739e6629c33\",\n \"你的网络安全吗？忽视这6点，下一个被攻陷的可能就是你！\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492771&idx=1&sn=4e414e9c35bf3da72b296d7d0d178be9\",\n \"服务器端原型污染：安全的黑盒检测\": \"https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483992&idx=1&sn=cbe726eeb0a99e1ccf93acbd787a8f12\",\n \"浅谈SHE与HSM\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247556764&idx=1&sn=7a6dbe0ed6cd56111ded669d006d046f\",\n \"8月1日强制实施u2002|u2002一文读懂欧盟CE-RED无线设备新规\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247556764&idx=2&sn=f82eb36888176657b0e02eda3e9a9cc3\",\n \"从Top20开源组件漏洞浅谈开源安全治理困境\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488451&idx=1&sn=a4ca5878e9febbc5fb079a6dbd862c55\",\n \"07-11-攻防演练之请防守方重点关注威胁情报样本信息\": \"https://mp.weixin.qq.com/s?__biz=MzIyNDg2MDQ4Ng==&mid=2247487379&idx=1&sn=ce4b51d6f5bde1eb21c21261933e49fc\",\n \"实力认证 |珞安科技荣获2025中国网络安全「能源行业」优秀解决方案\": \"https://mp.weixin.qq.com/s?__biz=MzU2NjI5NzY1OA==&mid=2247513315&idx=1&sn=ba3db6843c69050d50b40f33c1dc761c\",\n \"【已复现】契约锁电子签章系统存在远程代码执行漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490470&idx=1&sn=76647e3cbc939582e3fa73101fc442f4\",\n \"邀请函 | 中原数据大讲堂（第一讲）7月15日正式开讲，欢迎报名！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448689469&idx=1&sn=7fadfae3e91fe012d1c64c442e8586b0\",\n \"《移动互联网应用服务用户权益保护合规管理指南》发布\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448689469&idx=2&sn=f85ca8fdeeef898a0261f48d2b56af27\",\n \"LLVM 基本块VMP保护之简易虚拟机示例实现\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597083&idx=1&sn=33594cedc77582e326864bc91855f9ec\",\n \"这波招聘逆天了！京东/光年AI/小溪流科技2025最新职位，简历砸过来～\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597083&idx=2&sn=bbaa614c84506105a293502a352b80ef\",\n \"PerfektBlue漏洞危及梅赛德斯、大众和斯柯达等多款汽车信息娱乐系统\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597083&idx=3&sn=5ed9d81521495a3efbc2a3afe6aedaf8\",\n \"信安世纪与神州数码达成战略合作，共筑数字安全新生态\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650665051&idx=1&sn=d443eb9d512dc3722e0f9114adefb717\",\n \"敏捷交换机很牛，它比传统交换机强在哪里？\": \"https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247531097&idx=1&sn=63e8c1f3f9700e89bf8832a0b704ee40\",\n \"【0711】重保演习每日情报汇总\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487627&idx=1&sn=e3409969828a70b2f51249d9e9256542\",\n \"【天穹】HVV专题：典型HVV样本总结与IOC收集（第二期）\": \"https://mp.weixin.qq.com/s?__biz=Mzg4OTU4MjQ4Mg==&mid=2247488722&idx=1&sn=cd18bb3e125792d1630283eeecb90727\",\n \"红队渗透，兜里都揣着哪些证书？\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247524304&idx=1&sn=be4b2dfd62ed6fade59b02eef4e72b0a\",\n \"公开课预告|构建可信赖的AI：从理解到实践\": \"https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247524304&idx=2&sn=ada251f1c60eaa8e862b033bfa05f17a\",\n \"【新！】CNNVD通报微软多个安全漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247547154&idx=1&sn=ed18dc2a48d5baf054db84d47279fb1b\",\n \"《大学生就业相关模板合集》\": \"https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247493951&idx=1&sn=f8428d4b307d83be22bf7df480214b9d\",\n \"ATT&CK实战靶场 Lab11 震撼上线！真枪实战等你来战！\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523735&idx=1&sn=31194064b4d30893fe1c84b208efcf0f\",\n \"腾讯太极团队实现DeepSeek模型业内H20最高性能15800+ tokens/s\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649794504&idx=1&sn=61c088b33c96f106db0479f45fa23cc7\",\n \"守护“工业命脉”！启明星辰护航火电企业5G专网安全防护升级\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651733716&idx=1&sn=ef457fd2b7de64e13439fa100581dd04\",\n \"群友的智齿 | 昨天划水，看到一个群友说拿下了\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247489655&idx=1&sn=e9c4f4e3cc09b5d7018dc9b00c1408d5\",\n \"烽火狼烟丨暗网数据及攻击威胁情报分析周报（07/07-07/11）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NjMxNTgyOQ==&mid=2247484680&idx=1&sn=c62abbf6aa1dab84f4075cb0a7fff0c6\",\n \"网络安全信息与动态周报2025年第27期（6月30日-7月6日）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NjMxNTgyOQ==&mid=2247484680&idx=2&sn=39b21f9933c107d15171eacfad0baa77\",\n \"Scan-X 4.0：AI赋能的被动扫描工具，自动化渗透测试迈入智能时代\": \"https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247493289&idx=1&sn=7bb226bdb998d3fe606c1d8678ca44ec\",\n \"网络安全动态 - 2025.07.11\": \"https://mp.weixin.qq.com/s?__biz=MzU1MzEzMzAxMA==&mid=2247500115&idx=1&sn=d00ba76094833b77b684a4aeec498ac6\",\n \"深度丨冯登国院士、黄欣沂教授等：人工智能安全与隐私综述\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247533932&idx=1&sn=45e5cc46732c825d5d7dbe118560cf62\",\n \"荐读丨默克CISO：如何做好全球6万员工的安全意识培训\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247533932&idx=2&sn=19037e4aa8529feb9f4d2aefc1b9fc43\",\n \"JS逆向-绕过无限debugger\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247521435&idx=1&sn=34523754451f3768d20e19b6cbec4cc0\",\n \"信息诈骗威胁全球近半数移动用户 运营商须构建防御体系\": \"https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247548915&idx=1&sn=1975d7bc78e7b0a9752056b848d39829\",\n \"法律法规｜一图读懂《国家安全法》\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247508606&idx=1&sn=229c681d663c3f3762564d37d0f58d13\",\n \"7大类27项，海云安实力入选中国信通院第三期《数字安全护航技术能力全景图》\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjY2NTM0MA==&mid=2247492607&idx=1&sn=9ff5b9c360727f2abbfb029c09a095a5\",\n \"从 “按键精灵” 到 AI 作弊，SLG 的攻防大战！\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTg2NjYxOA==&mid=2650743806&idx=1&sn=110590ea8e00353ebf339dbebc22ada1\"\n },\n \"Hexacorn\": {\n \"Beyond good ol’ Run key, Part 149\": \"https://www.hexacorn.com/blog/2025/07/11/beyond-good-ol-run-key-part-149/\"\n },\n \"ADD / XOR / ROL\": {\n \"Understand Neural Nets better, post 5 of N -- Code Assistant shootout\": \"http://addxorrol.blogspot.com/2025/07/understand-neural-nets-better-post-5-of.html\"\n },\n \"SentinelOne\": {\n \"The Good, the Bad and the Ugly in Cybersecurity – Week 28\": \"https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-28-7/\"\n },\n \"daniel.haxx.se\": {\n \"Cybersecurity Risk Assessment Request\": \"https://daniel.haxx.se/blog/2025/07/11/cybersecurity-risk-assessment-request/\"\n },\n \"Happy Hacking!\": {\n \"HEVD – Race Condition – Windows 10 Pro – SMEP, kCFG, kASLR protections\": \"https://xavibel.com/2025/07/11/hevd-race-condition-windows-10-pro-smep-kcfg-kaslr-protections/\"\n },\n \"安全分析与研究\": {\n \"银狐最新注入型免杀样本详细分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247492719&idx=1&sn=84d971b1af78b2d5abe28ea1827e4774\"\n },\n \"HackerNews\": {\n \"俄罗斯篮球运动员因涉勒索软件案在法国被捕​\": \"https://hackernews.cc/archives/59717\",\n \"​​奔驰、大众、斯柯达中招！蓝牙漏洞可一键操控车载系统​\": \"https://hackernews.cc/archives/59714\",\n \"德国法院裁定 Meta 追踪技术违反欧盟隐私法\": \"https://hackernews.cc/archives/59711\",\n \"芝加哥知名电台遭黑客攻击，财务数据及合同外泄​\": \"https://hackernews.cc/archives/59707\",\n \"日本新日铁旗下 IT 公司遇零日攻击，用户数据泄露​\": \"https://hackernews.cc/archives/59705\",\n \"​​英国法院判 ICO 胜诉，TikTok 1270 万英镑罚单临近落地​\": \"https://hackernews.cc/archives/59703\",\n \"零售巨头连环遭袭案告破，四名青少年黑客落网\": \"https://hackernews.cc/archives/59701\",\n \"黑客假借游戏与 AI 之名，通过社交平台向加密货币用户投放恶意软件\": \"https://hackernews.cc/archives/59698\"\n },\n \"看雪学苑\": {\n \"LLVM 基本块VMP保护之简易虚拟机示例实现\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597083&idx=1&sn=33594cedc77582e326864bc91855f9ec\",\n \"这波招聘逆天了！京东/光年AI/小溪流科技2025最新职位，简历砸过来～\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597083&idx=2&sn=bbaa614c84506105a293502a352b80ef\",\n \"PerfektBlue漏洞危及梅赛德斯、大众和斯柯达等多款汽车信息娱乐系统\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597083&idx=3&sn=5ed9d81521495a3efbc2a3afe6aedaf8\"\n },\n \"先进攻防\": {\n \"以攻促防 - 探究如何发现、应对和演进专业红队技术\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908548&idx=1&sn=d09c8f8739fcb564ae2395853d3d33a7\"\n },\n \"红日安全\": {\n \"2025-07-11 HW情报分享（四）\": \"https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851857&idx=1&sn=d281612b2cb999c2a93b6df5837bbb0e\"\n },\n \"威努特安全网络\": {\n \"麦当劳泄露求职者数据，新漏洞威胁大众等汽车品牌安全|一周特辑\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651134313&idx=1&sn=1c8d8e158614cebc484d9e9c60110620\"\n },\n \"代码卫士\": {\n \"蓝牙漏洞PerfektBlue 可用于实现RCE，影响多家汽车厂商\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523555&idx=1&sn=caf9ee84b43c4fc81ee51bfbe2c7d11d\",\n \"开源项目mcp-remote 中存在严重漏洞可导致RCE\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523555&idx=2&sn=04a84283c9d2100a95736c652525dcd8\"\n },\n \"安全客\": {\n \"数十亿手机可被监听，eSIM漏洞牵动全球通信生态\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788781&idx=1&sn=148a363ff5ef9b1e0e3fddf8321a100e\"\n },\n \"长亭安全应急响应中心\": {\n \"【已复现】契约锁电子签章系统 pdfverifier 远程代码执行漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492877&idx=1&sn=f6c804a45992dbfc7e82c40884909de9\"\n },\n \"绿盟科技研究通讯\": {\n \"绿盟虚拟汽车靶场（三）：MQTT云服务攻防\": \"https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498900&idx=1&sn=46ba27718717f7c78727872301162089\"\n },\n \"安全内参\": {\n \"麦当劳AI招聘助手暴露了约6400万条应聘者个人数据\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514676&idx=1&sn=ba2fc3721acfb3ebbc58acb4a6d08524\",\n \"大疆无人机军用固件厂商被黑客攻击，俄军无人机集体瘫痪\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514676&idx=2&sn=a0166550c66384f299208ac03f21dbf1\"\n },\n \"奇安信病毒响应中心\": {\n \"每周勒索威胁摘要\": \"https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498510&idx=1&sn=a2bf239a777b76a2a8570c46d0f003fd\"\n },\n \"奇安信威胁情报中心\": {\n \"摩诃草（APT-Q-36）仿冒高校域名实施窃密行动\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247515318&idx=1&sn=d819efde9332a98af4c85316f2948b95\",\n \"每周高级威胁情报解读(2025.07.04~07.10)\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247515318&idx=2&sn=ad007880e6cc2e260e12d8b420bab8ac\"\n },\n \"吾爱破解论坛\": {\n \"【开放注册公告】吾爱破解论坛2025年7月21日暑假开放注册公告\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651142767&idx=1&sn=0a26835f2b52cb33700351503588c1e9\"\n },\n \"dotNet安全矩阵\": {\n \"绕过 .NET 身份认证，自动化伪造.ASPXAUTH Cookie票据\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500060&idx=1&sn=77be73cb6b26198f1a83853546b40f5a\",\n \".NET 内网攻防实战电子报刊\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500060&idx=2&sn=c5a957029f4ce1fe39a66fe6f58e7a4a\",\n \".NET Emit 技术打造免杀 WebShell 突破安全壁垒\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500060&idx=3&sn=8db32929de16f7dd8e98e8f18b4476be\"\n },\n \"数世咨询\": {\n \"AMD 警告：全新“瞬态调度器攻击”波及广泛 CPU 芯片\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247539557&idx=1&sn=648655a10bf7fe6053ada20f3ef26f58\",\n \"重磅发布 | 可信数据空间企业调研：需求、挑战与建议\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247539557&idx=2&sn=f14a59bf4e871f509c3f3ce376e1f3a5\"\n },\n \"M01N Team\": {\n \"每周蓝军技术推送（2025.7.5-7.11）\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494280&idx=1&sn=9a569a013e2592e48c372fb74a369fec\"\n },\n \"Tide安全团队\": {\n \"JS逆向-绕过无限debugger\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247521435&idx=1&sn=34523754451f3768d20e19b6cbec4cc0\"\n },\n \"嘶吼专业版\": {\n \"腾讯云Web应用防火墙｜秒级拦截千万级DDoS攻击，实现业务0中断\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583789&idx=1&sn=8454ac0e34a2c6f4c464c0fc09230956\",\n \"XCon2025官宣定档！无界场议题征集，热力启动！！\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583789&idx=2&sn=68f59221b0cb6a18e704bfc501a2c98c\",\n \"IT巨头英迈因SafePay勒索软件攻击导致服务中断\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583789&idx=3&sn=c1d912d8a72f0c81eb9e6350165d253d\"\n },\n \"安全牛\": {\n \"安全产业该如何跟进工业互联网的发展红利\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137717&idx=1&sn=10be2ac449d640b414075eed16b9b718\",\n \"“地表最强AI模型”Grok 4发布，认为其在所有学术领域都达到博士水平；新型跨平台木马针对我国及东南亚地区展开攻击 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137717&idx=2&sn=ca6e7a78962f0146320c941ee98430e1\"\n },\n \"XCTF联赛\": {\n \"L3HCTF 2025 | 倒计时1天！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247515679&idx=1&sn=b7074e00ece0dfa2db30f303583e3807\"\n },\n \"极客公园\": {\n \"罗马仕中层曝问题充电宝内幕；传 OpenAI 计划推出浏览器产品；邓紫棋首部科幻小说预售 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653082541&idx=1&sn=51a47eb058d2808b8e0f67f6af295396\"\n },\n \"NOVASEC\": {\n \"X-SAST 已开源审计UI并发布AI过滤模块\": \"https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490673&idx=1&sn=1935675cec6561f05fb98f260073dbb2\",\n \"【代码】hypnus：Rust 内存混淆与执行流伪装\": \"https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490673&idx=2&sn=0b9b090474321a9f793d677c2e614b7e\"\n },\n \"火绒安全\": {\n \"【火绒安全周报】境外势力入侵校园广播妄图蛊惑学生/黑客利用红队工具Shellter传播窃密木马\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525980&idx=1&sn=cb150bd517e323ef93e0394ee039bbf4\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525980&idx=2&sn=7bd7c955dfe4e7a9eb27bec127184eb4\"\n },\n \"慢雾科技\": {\n \"130 亿资金去向成谜：鑫慷嘉 DGCX 骗局崩盘始末\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247502681&idx=1&sn=b16d2d3d09e5b4eaff4d6c712e0441b1\"\n },\n \"DEF CON Announcements!\": {\n \"DEF CON is Coming to Bahrain!\": \"https://defcon.org/html/defcon-bahrain/dc-bahrain-index.html\"\n },\n \"安全学术圈\": {\n \"纳亚赖布尔国际信息技术研究所 | 利用高效特征选择方法对Tor流量进行分类\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247492932&idx=1&sn=d4651f45e1f99b6be4371867203e2986\"\n },\n \"悬镜安全\": {\n \"热点供应链投毒预警 | 捕获恶意PY包伪装NetworkX开展投毒攻击事件\": \"https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647796754&idx=1&sn=4a9db3dd11627b11cc0aa53ec8eb54f1\"\n },\n \"腾讯安全威胁情报中心\": {\n \"银狐情报共享第1期 ｜ Att&CK视角下的最新活跃技战术分享\": \"https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510497&idx=1&sn=6dfe9eed213f19e3d304132f1e46c3f5\"\n },\n \"Yak Project\": {\n \"Yakit MITM 劫持，国密通信“破壁人”!\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528391&idx=1&sn=8dd7d583340530129b3c90e626e20e51\"\n },\n \"迪哥讲事\": {\n \"如何在移动端抓包-上\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497855&idx=1&sn=f13de17a56e3db0ba08ffcc2a4a0b1a6\"\n },\n \"情报分析师\": {\n \"美国通过第三国转运关键矿物：我如何应对与博弈分析\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650561762&idx=1&sn=58ad85cea5152a906f7f6517ae234ca4\",\n \"领导钟爱的情报分析报告长啥样？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650561762&idx=2&sn=c436277c4fa321cfdbf782d401f77286\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Stealthy PHP Malware Uses ZIP Archive to Redirect WordPress Visitors\": \"https://blog.sucuri.net/2025/07/stealthy-php-malware-uses-zip-archive-to-redirect-wordpress-visitors.html\",\n \"Albemarle latest Virginia county hit with ransomware\": \"https://therecord.media/albemarle-virginia-ransomware-attack\",\n \"'123456' password exposed chats for 64 million McDonald’s job applicants\": \"https://www.bleepingcomputer.com/news/security/123456-password-exposed-chats-for-64-million-mcdonalds-job-applicants/\",\n \"Can an ‘ethical’ spyware maker justify providing its tech to ICE?\": \"https://techcrunch.com/2025/07/11/can-an-ethical-spyware-maker-provide-its-tech-to-ice/\",\n \"'123456' password exposed info for 64 million McDonald’s job applicants\": \"https://www.bleepingcomputer.com/news/security/123456-password-exposed-info-for-64-million-mcdonalds-job-applicants/\",\n \"Exploits for pre-auth Fortinet FortiWeb RCE flaw released, patch now\": \"https://www.bleepingcomputer.com/news/security/exploits-for-pre-auth-fortinet-fortiweb-rce-flaw-released-patch-now/\",\n \"WordPress Gravity Forms developer hacked to push backdoored plugins\": \"https://www.bleepingcomputer.com/news/security/wordpress-gravity-forms-developer-hacked-to-push-backdoored-plugins/\",\n \"Airline executive agrees to dismiss litigation around alleged hack-for-hire scheme\": \"https://therecord.media/airline-exec-agrees-to-dismiss-hack-for-hire-lawsuit\",\n \"Hacker returns cryptocurrency stolen from GMX exchange after $5 million bounty payment\": \"https://therecord.media/hacker-returns-stolen-gmx-bounty\",\n \"NVIDIA issues guidance to defend GDDR6 GPUs against Rowhammer attacks\": \"https://www.bleepingcomputer.com/news/security/nvidia-issues-guidance-to-defend-gddr6-gpus-against-rowhammer/\",\n \"The zero-day that could've compromised every Cursor and Windsurf user\": \"https://www.bleepingcomputer.com/news/security/the-zero-day-that-couldve-compromised-every-cursor-and-windsurf-user/\",\n \"CISA orders agencies to immediately patch Citrix Bleed 2, saying bug poses ‘unacceptable risk’\": \"https://therecord.media/cisa-orders-agencies-patch-citrix-bleed-2\",\n \"Vulnerabilità in BlueSDK, milioni di veicoli a rischio di attacco\": \"https://www.securityinfo.it/2025/07/11/vulnerabilita-in-bluesdk-milioni-di-veicoli-a-rischio-di-attacco/\",\n \"CISA tags Citrix Bleed 2 as exploited, gives agencies a day to patch\": \"https://www.bleepingcomputer.com/news/security/cisa-tags-citrix-bleed-2-as-exploited-gives-agencies-a-day-to-patch/\",\n \"AI chatbot’s simple ‘123456’ password risked exposing personal data of millions of McDonald’s job applicants\": \"https://techcrunch.com/2025/07/11/ai-chatbots-simple-123456-password-risked-exposing-personal-data-of-millions-of-mcdonalds-job-applicants/\",\n \"Supply chain: più sicurezza oggi, meno scuse per domani\": \"https://www.cybersecurity360.it/nuove-minacce/supply-chain-piu-sicurezza-oggi-meno-scuse-per-domani/\",\n \"Sviluppatori nel mirino di ZuRu: il malware si nasconde nelle app legittime per macOS\": \"https://www.cybersecurity360.it/news/sviluppatori-nel-mirino-di-zuru-il-malware-si-nasconde-nelle-app-legittime-per-macos/\",\n \"How I made $64k from deleted files — a bug bounty story\": \"https://medium.com/@sharon.brizinov/how-i-made-64k-from-deleted-files-a-bug-bounty-story-c5bd3a6f5f9b\",\n \"Stratascale\": \"https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot\",\n \"Indonesia extradites Russian accused of selling personal data on Telegram\": \"https://therecord.media/indonesia-extradites-russian-telegram-sale\",\n \"Sintesi riepilogativa delle campagne malevole nella settimana del 5 – 11 luglio\": \"https://cert-agid.gov.it/news/sintesi-riepilogativa-delle-campagne-malevole-nella-settimana-del-5-11-luglio/\",\n \"From Click to Compromise: Unveiling the Sophisticated Attack of DoNot APT Group on Southern European Government Entities\": \"https://www.trellix.com/blogs/research/from-click-to-compromise-unveiling-the-sophisticated-attack-of-donot-apt-group-on-southern-european-government-entities/\",\n \"DeepSeek a threat to national security, warns Czech cyber agency\": \"https://therecord.media/deepseek-security-czech-cyber-agency-warning\",\n \"Spain awards Huawei contracts to manage intelligence agency wiretaps\": \"https://therecord.media/spain-awards-contracts-huawei-intelligence-agency-wiretaps\",\n \"La nuova identità digitale in Cina: una svolta radicale nella sorveglianza\": \"https://www.cybersecurity360.it/news/la-nuova-identita-digitale-in-cina-una-svolta-radicale-nella-sorveglianza/\",\n \"Four arrested in UK over M&S, Co-op, Harrods cyberattacks\": \"https://www.bleepingcomputer.com/news/security/four-arrested-in-uk-over-mands-co-op-harrods-cyberattacks/\",\n \"Editori europei contro il Garante privacy: i modelli consent or pay sono legittimi e indispensabili\": \"https://www.cybersecurity360.it/news/editori-europei-contro-il-garante-privacy-i-modelli-consent-or-pay-sono-legittimi-e-indispensabili/\",\n \"Valutazione d’impatto del trasferimento dati: ecco le regole operative della CNIL\": \"https://www.cybersecurity360.it/news/valutazione-dimpatto-del-trasferimento-dati-ecco-le-regole-operative-della-cnil/\",\n \"Eve, Mallory, Trent: i personaggi che hanno reso comprensibile la storia della sicurezza digitale\": \"https://www.cybersecurity360.it/cultura-cyber/eve-mallory-trent-i-personaggi-che-hanno-reso-comprensibile-la-storia-della-sicurezza-digitale/\",\n \"CSIRT-RER: servizi di cyber security per la protezione degli Enti pubblici\": \"https://www.cybersecurity360.it/soluzioni-aziendali/csirt-rer-servizi-di-cyber-security-per-la-protezione-degli-enti-pubblici/\",\n \"Cyber Security expert, Difesa, Legioni e Milizie.\": \"https://roccosicilia.com/2025/07/11/cyber-security-expert-difesa-legioni-e-milizie/\",\n \"Hacktivist Attacks on Critical Infrastructure Grow as New Groups Emerge\": \"https://cyble.com/blog/hacktivists-attacks-on-critical-infrastructure/\"\n },\n \"Securityinfo.it\": {\n \"Vulnerabilità in BlueSDK, milioni di veicoli a rischio di attacco\": \"https://www.securityinfo.it/2025/07/11/vulnerabilita-in-bluesdk-milioni-di-veicoli-a-rischio-di-attacco/?utm_source=rss&utm_medium=rss&utm_campaign=vulnerabilita-in-bluesdk-milioni-di-veicoli-a-rischio-di-attacco\"\n },\n \"ICT Security Magazine\": {\n \"Flutter Entertainment vittima di compromissione critica: 800.000 utenti esposti\": \"https://www.ictsecuritymagazine.com/notizie/flutter-entertainment/\",\n \"Cybercrime: nel Regno Unito arrestati presunti hacker, attacchi da 440 Milioni a M&S, Co-op e Harrods\": \"https://www.ictsecuritymagazine.com/notizie/cybercrime-retail/\",\n \"Cyber attacco a Qantas Airlines e il rischio di terze parti: circa 5,7 milioni di clienti unici sono stati compromessi\": \"https://www.ictsecuritymagazine.com/notizie/qantas-airlines-attacco/\",\n \"La gang ransomware Hunter International: perché regalano le chiavi per decrittare\": \"https://www.ictsecuritymagazine.com/articoli/hunter-international/\"\n },\n \"FuzzWiki\": {\n \"ECFuzz：面向大规模系统配置项设置的高效模糊测试\": \"https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247487247&idx=1&sn=03519244b9dbe93a53151e11eed98210\"\n },\n \"360数字安全\": {\n \"周鸿祎上合数字经济论坛演讲：开放协作共筑全球数字经济安全屏障\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581197&idx=1&sn=4a018c1b177f9acb4b5b21cca06ee5de\",\n \"破局新质人才培育！360与毕节职院共筑贵州产业升级人才基座\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581197&idx=2&sn=42991271598f8926ee0418c648fc9cba\"\n },\n \"白帽子章华鹏\": {\n \"升职加薪攻略之企业安全做好工作规划\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650237265&idx=1&sn=213740dcc23a1cc60b2e835da9e79599\"\n },\n \"黑伞安全\": {\n \"【已复现】契约锁电子签章系统 pdfverifier 远程代码执行漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489860&idx=1&sn=a10a66519fd9c578f8c2792f582bdf19\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"ISC Stormcast For Friday, July 11th, 2025 https://isc.sans.edu/podcastdetail/9522, (Fri, Jul 11th)\": \"https://isc.sans.edu/diary/rss/32098\"\n },\n \"Schneier on Security\": {\n \"Squid Dominated the Oceans in the Late Cretaceous\": \"https://www.schneier.com/blog/archives/2025/07/squid-dominated-the-oceans-in-the-late-cretaceous.html\",\n \"Tradecraft in the Information Age\": \"https://www.schneier.com/blog/archives/2025/07/tradecraft-in-the-information-age.html\"\n },\n \"Beacon Tower Lab\": {\n \"【0711】重保演习每日情报汇总\": \"https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487627&idx=1&sn=e3409969828a70b2f51249d9e9256542\"\n },\n \"Full Disclosure\": {\n \"SAP NetWeaver S/4HANA - ABAP Code Execution via Internal\\tFunction\": \"https://seclists.org/fulldisclosure/2025/Jul/12\"\n },\n \"The Hacker News\": {\n \"Fortinet Releases Patch for Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257)\": \"https://thehackernews.com/2025/07/fortinet-releases-patch-for-critical.html\",\n \"PerfektBlue Bluetooth Vulnerabilities Expose Millions of Vehicles to Remote Code Execution\": \"https://thehackernews.com/2025/07/perfektblue-bluetooth-vulnerabilities.html\",\n \"Securing Data in the AI Era\": \"https://thehackernews.com/2025/07/securing-data-in-ai-era.html\",\n \"Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild\": \"https://thehackernews.com/2025/07/critical-wing-ftp-server-vulnerability.html\",\n \"Iranian-Backed Pay2Key Ransomware Resurfaces with 80% Profit Share for Cybercriminals\": \"https://thehackernews.com/2025/07/iranian-backed-pay2key-ransomware.html\",\n \"CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target Enterprises\": \"https://thehackernews.com/2025/07/cisa-adds-citrix-netscaler-cve-2025.html\"\n },\n \"Graham Cluley\": {\n \"Russian basketball player arrested in ransomware case despite being “useless with computers”\": \"https://www.bitdefender.com/en-us/blog/hotforsecurity/russian-basketball-player-arrested-in-ransomware-case-despite-being-useless-with-computers\",\n \"Paddy Power and BetFair have suffered a data breach\": \"https://grahamcluley.com/paddy-power-and-betfair-have-suffered-a-data-breach/\"\n },\n \"Security Affairs\": {\n \"Athlete or Hacker? Russian basketball player accused in U.S. ransomware case\": \"https://securityaffairs.com/179831/uncategorized/athlete-or-hacker-russian-basketball-player-accused-in-u-s-ransomware-case.html\",\n \"U.S. CISA adds Citrix NetScaler ADC and Gateway flaw to its Known Exploited Vulnerabilities catalog\": \"https://securityaffairs.com/179813/hacking/u-s-cisa-adds-citrix-netscaler-adc-and-gateway-flaw-to-its-known-exploited-vulnerabilities-catalog.html\"\n },\n \"Deep Web\": {\n \"Dread down?\": \"https://www.reddit.com/r/deepweb/comments/1lx4xby/dread_down/\",\n \"Music leak forums\": \"https://www.reddit.com/r/deepweb/comments/1lwv2c3/music_leak_forums/\"\n },\n \"Information Security\": {\n \"Ayuda acceder a facebook\": \"https://www.reddit.com/r/Information_Security/comments/1lxlcr2/ayuda_acceder_a_facebook/\",\n \"Information security starts at the browser—filter the web, protect your data\": \"https://www.reddit.com/r/Information_Security/comments/1lwynp2/information_security_starts_at_the_browserfilter/\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector (CVE-2025-25257) - watchTowr Labs\": \"https://www.reddit.com/r/netsec/comments/1lx360q/preauth_sql_injection_to_rce_fortinet_fortiweb/\",\n \"Bypassing Meta's Llama Firewall: A Case Study in Prompt Injection Vulnerabilities\": \"https://www.reddit.com/r/netsec/comments/1lx8ijw/bypassing_metas_llama_firewall_a_case_study_in/\",\n \"FortiWeb Pre-Auth RCE (CVE-2025-25257)\": \"https://www.reddit.com/r/netsec/comments/1lx6koo/fortiweb_preauth_rce_cve202525257/\",\n \"ZeroSeige - Live PvP Terminal Hack Battle\": \"https://www.reddit.com/r/netsec/comments/1lxk07t/zeroseige_live_pvp_terminal_hack_battle/\",\n \"Two critical credential vulnerabilities have been found in Kaseya's RapidFire Tools Network Detective\": \"https://www.reddit.com/r/netsec/comments/1lwxsyz/two_critical_credential_vulnerabilities_have_been/\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Prospective Student CompSci/CyberSec\": \"https://www.reddit.com/r/netsecstudents/comments/1lwws3l/prospective_student_compscicybersec/\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"Casino slot machines\": \"https://www.reddit.com/r/blackhat/comments/1lxjv4q/casino_slot_machines/\",\n \"log parser toolkit\": \"https://www.reddit.com/r/blackhat/comments/1lwv8by/log_parser_toolkit/\"\n },\n \"Your Open Hacker Community\": {\n \"How I hacked hackers at LeHack event 2025\": \"https://www.reddit.com/r/HowToHack/comments/1lx0ch5/how_i_hacked_hackers_at_lehack_event_2025/\",\n \"Is v2ray core a spyware?\": \"https://www.reddit.com/r/HowToHack/comments/1lxhdqu/is_v2ray_core_a_spyware/\",\n \"I don’t know where to begin.\": \"https://www.reddit.com/r/HowToHack/comments/1lxb2ij/i_dont_know_where_to_begin/\",\n \"I am a new hacker learning new stuff can someone teach me the basics of hacking?\": \"https://www.reddit.com/r/HowToHack/comments/1lxge4l/i_am_a_new_hacker_learning_new_stuff_can_someone/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Tapjacking, ZuChe, PerfektBlue, McHacking, OT in the IT, Add Ons, Josh Marpet... - SWN #493\": \"http://sites.libsyn.com/18678/tapjacking-zuche-perfektblue-mchacking-ot-in-the-it-add-ons-josh-marpet-swn-493\"\n }\n}"}}, "archive/daily/2025/2025-01-31.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747344.392603, "n": 46832, "h": "332fe154a72d08da", "c": "# 每日安全资讯（2025-01-31）\n\n- Trustwave Blog\n - [ ] [How Trustwave’s Fusion Platform Analyzes Ransomware Tactics in the Energy Sector: A Comprehensive Overview](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/how-trustwaves-fusion-platform-analyzes-ransomware-tactics-in-the-energy-sector-a-comprehensive-overview/)\n- Armin Ronacher's Thoughts and Writings\n - [ ] [How I Use AI: Meet My Promptly Hired Model Intern](http://lucumr.pocoo.org/2025/1/30/how-i-ai)\n- Security Boulevard\n - [ ] [2025 predictions: Security industry](https://securityboulevard.com/2025/01/2025-predictions-security-industry/)\n - [ ] [Preparing for PCI DSS 4.0: How Sonatype SBOM Manager can streamline and accelerate your transition](https://securityboulevard.com/2025/01/preparing-for-pci-dss-4-0-how-sonatype-sbom-manager-can-streamline-and-accelerate-your-transition/)\n - [ ] [Trust in Cloud Security with Effective Secrets Rotation](https://securityboulevard.com/2025/01/trust-in-cloud-security-with-effective-secrets-rotation/)\n - [ ] [Innovative PAM Strategies for Modern Enterprises](https://securityboulevard.com/2025/01/innovative-pam-strategies-for-modern-enterprises/)\n - [ ] [Advancing Cloud Compliance with Proactive Measures](https://securityboulevard.com/2025/01/advancing-cloud-compliance-with-proactive-measures/)\n - [ ] [Hiya AI Phone App Protects Against Deepfakes, Other Scams](https://securityboulevard.com/2025/01/hiya-ai-phone-app-protects-against-deepfakes-other-scams/)\n - [ ] [DEF CON 32 – Color Blasted Badge Making: How Hard Could It Be](https://securityboulevard.com/2025/01/def-con-32-color-blasted-badge-making-how-hard-could-it-be/)\n - [ ] [2025’s Top Five Trends in Identity Verification](https://securityboulevard.com/2025/01/2025s-top-five-trends-in-identity-verification/)\n - [ ] [Next Steps from the PCI Council’s SAQ-A Update: Critical Responsibilities and Opportunities for PSPs](https://securityboulevard.com/2025/01/next-steps-from-the-pci-councils-saq-a-update-critical-responsibilities-and-opportunities-for-psps/)\n - [ ] [Assessing the New SAQ-A Changes: Insights for QSAs](https://securityboulevard.com/2025/01/assessing-the-new-saq-a-changes-insights-for-qsas/)\n- Sukka's Blog\n - [ ] [2024：浏览器从 A 到 Z](https://blog.skk.moe/post/2024-browser-from-a-to-z/)\n- 一个被知识诅咒的人\n - [ ] [【Python】深入探索Python元类：动态生成类与对象的艺术](https://blog.csdn.net/nokiaguy/article/details/145397730)\n - [ ] [【Python】深入理解Python中的装饰器链：创建组合装饰器的技巧与实践](https://blog.csdn.net/nokiaguy/article/details/145397710)\n- InfoSec Write-ups - Medium\n - [ ] [How iPhone Data Can Be Securely Erased?](https://infosecwriteups.com/how-iphone-data-can-be-securely-erased-7b044dbf7919?source=rss----7b722bfd1b8d---4)\n - [ ] [Cutting Off Skynet: Running Local LLMs With Ollama](https://infosecwriteups.com/cutting-off-skynet-running-local-llms-with-ollama-8753e4d1426b?source=rss----7b722bfd1b8d---4)\n- SecWiki News\n - [ ] [SecWiki News 2025-01-30 Review](http://www.sec-wiki.com/?2025-01-30)\n- Recent Commits to cve:main\n - [ ] [Update Thu Jan 30 20:25:02 UTC 2025](https://github.com/trickest/cve/commit/630b95e7243b0245cde3df59fe484976ce30e2ee)\n - [ ] [Update Thu Jan 30 12:18:33 UTC 2025](https://github.com/trickest/cve/commit/6d2f59a5338e9b0f9fda557d99080a0f50fd20af)\n - [ ] [Update Thu Jan 30 04:17:50 UTC 2025](https://github.com/trickest/cve/commit/9cf77fc7fab952fdfcbf1e41b07c41bd3ecd8cd6)\n- bunnie's blog\n - [ ] [Name that Ware, January 2025](https://www.bunniestudios.com/blog/2025/name-that-ware-january-2025/)\n - [ ] [Winner, Name that Ware December 2024](https://www.bunniestudios.com/blog/2025/winner-name-that-ware-december-2024/)\n- gynvael.coldwind//vx.log (en)\n - [ ] [On hackers, hackers, and hilarious misunderstandings](https://gynvael.coldwind.pl/?id=799)\n- Hacking Articles\n - [ ] [AD Recon: Kerberos Username Bruteforce](https://www.hackingarticles.in/ad-recon-kerberos-username-bruteforce/)\n- Doonsec's feed\n - [ ] [秦安：特朗普“半夜清洗”，解雇17名检察长，成三位一体反腐布局](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=1&sn=11cf99bd5faf07695e3ac89ec70c72aa)\n - [ ] [张志坤：巴拿马运河争夺战，真正目标是中国](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=2&sn=4135a1c0538e4e13d4e225ad3de60ac2)\n - [ ] [牟林：关于无人武器作战的战略思考](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=3&sn=c0854894545a61159ff4423409fe77fe)\n - [ ] [牟林：靠征关税致富做得到吗？](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=4&sn=a54df395e2fe825567a13f177b2f1ed2)\n - [ ] [Loggy - Introduce to reverseing golang binary](https://mp.weixin.qq.com/s?__biz=Mzg4NzU4MDE5NQ==&mid=2247484272&idx=1&sn=b38cb2dd664786c222e314a789b7da40)\n - [ ] [byd红客](https://mp.weixin.qq.com/s?__biz=MzkyNTQ0OTYxOQ==&mid=2247483988&idx=1&sn=5b25e95ccbd765424198f50243e7edf7)\n - [ ] [【速报】github 挂了？（世界就是一个巨大的草台班子）](https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485449&idx=1&sn=2e621cb2afe5e511ac88f055da981272)\n - [ ] [Kali下安装与使用BeEF：反射型与存储型XSS攻击、Cookie会话劫持、键盘监听及浏览器操控技巧](https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486453&idx=1&sn=cd3057994dfa4e6a29c9d70b342f9e8a)\n - [ ] [起](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496866&idx=1&sn=50672ddfb00ba89a961f457c1121f0f1)\n - [ ] [（吃瓜）Github疑似遭受ddos攻击](https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484164&idx=1&sn=0e0f18f1790d8e9a2fd97d76ed9ff8eb)\n - [ ] [特朗普“午夜清洗”：17名监察长“下马”，法律争议“炸锅](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505045&idx=1&sn=d3b57f2d70f4497ba9e6bd0d3792b39b)\n - [ ] [印度卫星对接成功：技术存在局限性](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505045&idx=2&sn=1f9e6ca2b9e492d72bd16233e83dcf9c)\n - [ ] [大家一起ddos白宫](https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491639&idx=1&sn=ea6a2bb14d619f5834396d7fe8ebf609)\n - [ ] [研究完威胁分类，才发现我们平时谈的“以威胁为中心”都是假的！](https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492288&idx=1&sn=4a85f9ccfbc35e9f52f817bc25f4ce10)\n - [ ] [世界需要一个能谋善断的AI（三）决策的厚重：人类世界是如何被“选择”塑造的?](https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492288&idx=2&sn=416787d4505f6a7bf562f91bcf9f37cd)\n - [ ] [DeepSeek-R1：通过强化学习激励LLM的推理能力](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264879&idx=1&sn=74c7f7b47fbb79364c8dc55264481f92)\n - [ ] [分享图片](https://mp.weixin.qq.com/s?__biz=MzI3Njc1MjcxMg==&mid=2247494399&idx=1&sn=21a59287adb50dc4b945b2325e795fe4)\n - [ ] [SpiderX-V2.0发布 解锁JS加密新姿势攻防武器](https://mp.weixin.qq.com/s?__biz=MzkxOTU3MDY4MQ==&mid=2247484842&idx=1&sn=29eca64227216346731e46e212de2a92)\n - [ ] [量子计算机时代的汽车系统的嵌入式安全](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620255&idx=1&sn=610c3bff71970b4fbc041a0177ee93fd)\n - [ ] [揭开人工智能在交通网络安全中的神秘面纱](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620255&idx=2&sn=c361a268b2ef526cf5e44433248d1d13)\n - [ ] [车辆网络处理器上的后量子安全启动](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620255&idx=3&sn=ee30d942f28072654d6b335624aea228)\n - [ ] [新年开工啦](https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247484490&idx=1&sn=379870838aa89954061ce91a8fe22392)\n - [ ] [揭秘土耳其“红皮书”：真相还是阴谋？](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559341&idx=1&sn=517465083ba598dcfc9d243a3f11d1c9)\n - [ ] [中亚新位置：美国到底是“机遇”还是“陷阱”？](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559341&idx=2&sn=58f2aa6cb8bf4e2d52982ba4dc461e34)\n - [ ] [深入浅出API测试｜搜集分析与漏洞挖掘实战](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496981&idx=1&sn=1b88708a474086d96cf22a9428c93835)\n - [ ] [网络运维工程师如何高效运维数据中心，记住这6条定律！](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247528027&idx=1&sn=bb96422660e09519af965fecc213d4cf)\n - [ ] [春节假期7个基本网络安全提示](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114269&idx=1&sn=731f251283d6f584e16dd15c5f0f1b4f)\n - [ ] [为什么DDoS攻击如此致命？](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649464754&idx=1&sn=df89b63da565ca06f6419c818442ef13)\n - [ ] [利用DeepSeek进行java代码审计，好用！](https://mp.weixin.qq.com/s?__biz=MzkxNjQyODY5MA==&mid=2247487042&idx=1&sn=256d32002fcf342d7770b39c1d41f695)\n - [ ] [收藏 | dotNet安全矩阵 2024 年度目标权限维持阶段文章和工具汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498569&idx=1&sn=a273094850e815c5dccaf5c9fbb7956f)\n - [ ] [国内最专业、最全面的 [ .NET 代码审计 ] 体系化学习交流社区](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498569&idx=2&sn=efe5abab1b53aa0c37945f18fbfb5043)\n - [ ] [收藏 | dotNet安全矩阵 2024 年度外网入口打点阶段文章和工具汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498569&idx=3&sn=b5363f2569c8b2f819bc9d52cc71cc79)\n - [ ] [2024年，安全厂商为什么这么惨？](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=1&sn=ccf61766565e0badd0172f57ee1728f1)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=4&sn=919cc9d33961ed8e6a35eede596478de)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=5&sn=bf335b4022071ba93823b812090acee6)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=6&sn=3ff7227d97237b358e80b064be4215f2)\n - [ ] [四川大学网安少年班](https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485616&idx=1&sn=5255daa9a5e28be2c73d156eeb167ad5)\n - [ ] [世界经济论坛《2025年全球网络安全展望》报告一览](https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247484780&idx=1&sn=5c29954e85b159e98b2db3467a6f4281)\n - [ ] [【恭贺新春】企业级内网仿真「Thunder」免费开战！通关赢千元现金](https://mp.weixin.qq.com/s?__biz=Mzg5MDc1MjY5Ng==&mid=2247493011&idx=1&sn=324fff14046b3d7b31e4f2827bccacfb)\n - [ ] [AI风险分析 | Grok提示词泄露前后暗藏玄机](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494054&idx=1&sn=9122e0562bcad42ee707e0879b945aa1)\n - [ ] [针对DeepSeek的网络攻击再升级：僵尸网络进场 攻击指令激增上百倍u200b](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513623&idx=1&sn=d0d49c0d4b6e85b4dd8aacd8623ca272)\n - [ ] [Offsec PG靶场-Pelican(OSCP考试)](https://mp.weixin.qq.com/s?__biz=MzU5MjIzMDMzNg==&mid=2247484347&idx=1&sn=0c628f8609fa4badb4f81f1f90b3d305)\n - [ ] [六部门印发｜关于完善数据流通安全治理 更好促进数据要素市场化价值化的实施方案](https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247506759&idx=1&sn=851aa85a7e994c201ed3fa8c930ebe05)\n - [ ] [UbuntuServer24.04上使用NVIDIA GeForce RTX 4060Ti部署并训练DeepSeek R1大模型](https://mp.weixin.qq.com/s?__biz=Mzg2MjYxODQ4Mw==&mid=2247484982&idx=1&sn=226d2daae237f9ead22b087b2611e457)\n - [ ] [干货 | 渗透测试以及checklist模板，附PDF免费下载！](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247570691&idx=1&sn=74eca2607d62024085a1edf27565aeef)\n - [ ] [DeepSeek遭暴力破解 攻击IP均来自美国](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170578&idx=1&sn=c79c88154ac6083c4d178ed4a123665b)\n - [ ] [奇安信：针对DeepSeek的网络攻击再升级! 僵尸网络进场，指令激增上百倍](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170578&idx=2&sn=19ad0e0ac08770adde15936cbc245f61)\n - [ ] [从创新环境看新质生产力发展](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651618932&idx=1&sn=829c061c8fe0ac244f869355102c255f)\n - [ ] [僵尸网络进场，针对 DeepSeek 网络攻击再升级](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624774&idx=1&sn=5c438a523258d18082e4918e22ff51c9)\n - [ ] [惊魂72小时：一场席卷Linux世界的巨大威胁是如何被阻止的](https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489858&idx=1&sn=01a4503fd428692055c9a137cd9bb0a8)\n - [ ] [比特币链上大周期投资指导方案](https://mp.weixin.qq.com/s?__biz=MzI3NTcwNTQ2Mg==&mid=2247487630&idx=1&sn=532f51f67ceab5e41324cbf9a80d0432)\n - [ ] [秒达工具箱：各种开发者必备的工具集合，支持Docker部署](https://mp.weixin.qq.com/s?__biz=MzA4MjkzMTcxMg==&mid=2449046776&idx=1&sn=c7985da37fee0d92ef3585fa526b3ba5)\n - [ ] [DeepSeek 数据库被攻击，国外团队已公开披露漏洞](https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488775&idx=1&sn=2b8f2e1154eb0de5e1422589ee7b4f95)\n - [ ] [旧知新话说“标识”之心意篇：标识助力物流信息可追溯](https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247592366&idx=1&sn=28ab8739af2ccfaae353c286890cde3f)\n - [ ] [DeepSeek 开源免费，大洋彼岸直接急了](https://mp.weixin.qq.com/s?__biz=MzIzNjU5NDE2MA==&mid=2247490177&idx=1&sn=8c3da180f37e24bb83cc20d6168c694a)\n - [ ] [可能这就是你deepseek无法访问的原因——deepseek 漏洞（已修复）](https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485665&idx=1&sn=ce7d065feabad43d7bd144eb57ba1115)\n - [ ] [小日子已经被deepseek折服——日媒：DeepSeek模型以简单方法实现高性能](https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485665&idx=2&sn=3648dc775f70e3d481072e9e72b21a84)\n - [ ] [FtC4Wraiths CTF战队招募令：成为幽灵，掌控战场！](https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247485011&idx=1&sn=eab2c10d8fcd6cc7e3fbdff694b4cd7a)\n - [ ] [【2025-01-30】黑客新闻摘要](https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488390&idx=1&sn=3e958dfb1428d5b530c24db97201ea53)\n - [ ] [DeepSeek因软件供应链安全问题导致严重聊天记录数据泄漏](https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488049&idx=1&sn=377ab6f02bf6685c6ecd606923242cc3)\n - [ ] [（吃瓜）刘农TV之渗透中遇到的神人运维](https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484157&idx=1&sn=597aa22f30bf086e39d157e7ba9082ad)\n - [ ] [DeepSeek 大模型数据泄露被国外安全团队发现](https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491067&idx=1&sn=53535c35ef941d31f4d587b0cbd426e6)\n - [ ] [利用 Unicode 溢出绕过字符阻止列表](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527393&idx=1&sn=c9213875c652ac0318560b3966348226)\n - [ ] [幻影行动：朝鲜的全球数据渗透运动](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527393&idx=2&sn=9923de4ef6d306281ce4fb13f253af1d)\n - [ ] [Operation Talent:FBI 查获 Nulled.to、Cracked.to、Sellix.io 等](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527393&idx=3&sn=2949b5b96b17ce834ae88fc78313dbb7)\n - [ ] [nt-load-order 第二部分 - 你想知道的更多内容](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247486806&idx=1&sn=cb4a4fbf16cf2ff7c0a99333cf155ca8)\n - [ ] [资讯 ｜ DeepSeek被曝数据泄漏](https://mp.weixin.qq.com/s?__biz=Mzg4MDkyMTE4OQ==&mid=2247489001&idx=1&sn=e965d2b7151b3b51e0b48dc264cc7cd2)\n - [ ] [DeepSeek被海外曝出严重聊天记录数据泄漏问题](https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650236959&idx=1&sn=0024f87794598ce60e345aa728e8a771)\n - [ ] [真假](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496860&idx=1&sn=dac3717d63b7496fc260f3d91e4d5ec0)\n - [ ] [越权漏洞实战漏洞报告](https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485094&idx=1&sn=300233e404ea534282f994bd51e38594)\n - [ ] [功能强大的XSS自动化扫描器](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489193&idx=1&sn=08b43c401df76f44cf749c44eb4af9c6)\n - [ ] [有网安需求记得找我](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489193&idx=2&sn=6c2c55bb757aa67cc9f21a6b40c6df40)\n - [ ] [30 - 使用DInvoke和Sliver规避OpenEDR并提升权限](https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615412&idx=1&sn=3c8990ffa72d3496df8110af3260a080)\n - [ ] [代码审计 | 如何获取CVE漏洞编号](https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547534&idx=1&sn=89f840ad1397911a18d5776cb54ed32c)\n - [ ] [俄罗斯APT组织 RomCom 再次出击，针对乌克兰政府和波兰实体的网络攻击升级！](https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485658&idx=1&sn=1811ccb336bf5596bc0376a10ebe3cbe)\n - [ ] [deepseek写的对联，总感觉有点不对劲🐶](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494633&idx=1&sn=644193027ce66213cffde32a42bad868)\n - [ ] [【已修复】DeepSeek数据库暴露，泄露包括聊天记录在内的敏感信息](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494633&idx=2&sn=62ef49860992fd84fbebc9fbae2d8839)\n - [ ] [Wiz研究发现暴露的DeepSeek数据库泄露敏感信息，包括聊天记录](https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487248&idx=1&sn=24a5ae9036da7d03afb83c9dd679255b)\n - [ ] [🐍年好~~嘶嘶嘶](https://mp.weixin.qq.com/s?__biz=MzU4Mzc4MDQyOQ==&mid=2247484414&idx=1&sn=0caae77933f7012d33420541deab9019)\n - [ ] [【2025春节】解题领红包活动开始喽，解出就送论坛币！\\\\n\\\\n第一题送分题有手就行（不需有脑，已有 1376 位会员完成此任务）。\\\\n\\\\n第二题 Windows 初级题 14点整 上线，题目很简单，如果你对逆向分析感兴趣，不妨借此机会自学尝试，让这次活动真正成为你技能提升的阶梯。](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141658&idx=1&sn=11067b00a771b8ee9bd4c4d0da1e8908)\n - [ ] [当DDoS成为DeepSeek的进化催化剂](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247488198&idx=1&sn=294befdcf4fe9033a98c6148815a0ec1)\n - [ ] [初二娘家暖 祥蛇护亲安](https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247520422&idx=1&sn=ca4a601872c8ca514160ea4117463939)\n - [ ] [本地部署 deepseek-r1 模型](https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247484010&idx=1&sn=d298326b0ef79202e6e0093216ebaa82)\n - [ ] [美军对DeepSeek“出手”了！DeepSeek遭恶意攻击，攻击IP均来自美国！](https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525698&idx=1&sn=131f65bb9cab76e179f85720d4c77212)\n - [ ] [大年初二 | 金蛇迎春，福“巳”绵延](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579270&idx=1&sn=07b4d333a5b2f57048e51d6aa8cc4224)\n - [ ] [太丢人了](https://mp.weixin.qq.com/s?__biz=Mzg5NjY4NDg1Nw==&mid=2247483948&idx=1&sn=c78c4f6b64f4e732bb3fcbe3684d3819)\n - [ ] [DeepSeek与其他大模型网络安全领域测评](https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485615&idx=1&sn=2faa9a9f50deaf18f69117424391d9a5)\n - [ ] [多次加密攻击](https://mp.weixin.qq.com/s?__biz=MzI1NzUxOTUzMA==&mid=2247485786&idx=1&sn=ef2f09bcc5eb7ecad5b545295bf5be21)\n - [ ] [2025网络暴露危机报告：45%第三方应用越权访问用户数据](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=1&sn=21db4a4d88530fd63cdb722001dad229)\n - [ ] [Banshee Stealer新变种正借Apple XProtect加密技术躲避杀毒软件](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=2&sn=428f13d4f84f8d084d6730cfab69b9cb)\n - [ ] [上千个恶意域名正在仿冒Reddit和WeTransfer](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=3&sn=e2d553ae7f7a6dab81dc2d0f81f9d42f)\n - [ ] [如何使用LDAPX动态检查和转换LDAP数据包](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=4&sn=d1471190e17067ad31fd0a762ad813d1)\n - [ ] [Redis数据库主从复制RCE影响分析](https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037457&idx=1&sn=32e47044585804b9f31934fb3a7a3f5c)\n - [ ] [大年初二 画蛇添福](https://mp.weixin.qq.com/s?__biz=Mzg2MTU5ODQ2Mg==&mid=2247507174&idx=1&sn=af46b8c1bdd9e12e5913225f518e1e09)\n - [ ] [新年新挑战，红日安全不打烊！携手同行，保障数字世界，迎接无限机遇！💻💼](https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851771&idx=1&sn=e32da143725cb1281d784159a2d92a85)\n - [ ] [数字取证之数据收集u200c](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264859&idx=1&sn=5157da074859752737fca3e1377e830b)\n - [ ] [公众号爆款突破10万+是种什么体验？](https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247492229&idx=1&sn=fb6516c2c50768440203194bf072ef8f)\n - [ ] [网安原创文章推荐【2025/1/29】](https://mp.weixin.qq.com/s?__biz=MzAxNzg3NzMyNQ==&mid=2247489523&idx=1&sn=b774285745567a078a25412d369d42e3)\n - [ ] [Qwen 2.5横空出世：阿里大模型超越DeepSeek-V3](https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247486600&idx=1&sn=8759e5cb59a7ae3a10f4e360ae1343c8)\n - [ ] [DeepSeek已遭美西方全面围剿：各种放大后的问题及恶意舆论接踵而至](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507157&idx=1&sn=705ed2698837c80532fbdcaa33a20411)\n - [ ] [暗网情报6则：阿根廷电信公司数据泄露-260G登录凭证兜售-以色列国家安全部遭黑](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507157&idx=2&sn=32183d1acca665f6055c418febf0b72a)\n - [ ] [5th域安全微讯早报【20250130】026期](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507157&idx=3&sn=678b70aba584829d92026c69f41dad6a)\n - [ ] [DeepSeek与ChatGPT代码审计能力对比与分析](https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247488582&idx=1&sn=48f04da2ac9254f4e9bcaba0a14431a5)\n - [ ] [ScanV、ScanA：监测违规防患，事件安全无虞](https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870840&idx=1&sn=eb6c30950bf84dd86835312726abf657)\n - [ ] [阿里巴巴发布Qwen 2.5系列新模型，宣称超越 DeepSeek-V3](https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485776&idx=1&sn=73a8b2ee13adf483ccc862bea60a6657)\n - [ ] [知识星球持续更新](https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485776&idx=2&sn=6cab966e4a4f99fd7f1a7f60f7177a88)\n - [ ] [大年初二丨安天睿甲给您拜年了](https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650209904&idx=1&sn=2d3424335c5408deda2ab07b51876c54)\n - [ ] [初二 | 愿家人和和美美，吉祥安康！](https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497079&idx=1&sn=081d5bd8e78c90a7d1bcba0e251b48ea)\n - [ ] [记一次绕过阿里云waf与某不知名waf的双waf上传getshell](https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487348&idx=1&sn=2c7a4d59b64392a92053475c8096f285)\n - [ ] [正月初二| 有蛇有得 团团圆圆](https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506081&idx=1&sn=c7bc814576e63a573c12fae1a2f9aefe)\n - [ ] [捷普基础产品线，守护基础设施安全](https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506081&idx=2&sn=95cf7a673991ce095ee9525401f5f855)\n - [ ] [【焕新领先】捷普下一代防火墙](https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506081&idx=3&sn=0776637513dd08e8549e6e036951db3e)\n - [ ] [ISO 45001: 2018 标准详解与实施（11）6.1.3 法律法规要求和其他要求的确定](https://mp.weixin.qq.com/s?__biz=MzA5OTEyNzc1Nw==&mid=2247486050&idx=1&sn=2750be0dbb0d7015b92061bb993add86)\n - [ ] [初二](https://mp.weixin.qq.com/s?__biz=MzUyMjAyODU1NA==&mid=2247491947&idx=1&sn=1d01beee8ad4061189c478e349ef78d7)\n - [ ] [DeepSeek的强大，一句话让AI帮我写了个程序-流量安全分析研判工具](https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247490145&idx=1&sn=a932062265ad24982beeee1706d70d4d)\n - [ ] [大年初二 | 金蛇纳福，好事成双](https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650963505&idx=1&sn=b6d789ba930e09c363ebc1f9444849d6)\n - [ ] [正月初二归家暖！亚信安全祝大家蛇全蛇美，蛇行大运](https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620959&idx=1&sn=7d3ca2f816e618a8e9e764ebd74f3644)\n - [ ] [大年初二 二龙腾飞](https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135289&idx=1&sn=ccfa447f9bf7ccfdf2f578f6b4f71e1d)\n - [ ] [大年初二 | 眉开眼笑回娘家](https://mp.weixin.qq.com/s?__biz=Mzk0MDQ5MTQ4NA==&mid=2247487428&idx=1&sn=7f6bc2eb6c48e2d05a319a51de44f0c3)\n - [ ] [CIO启示录：技术管理如何突破效率天花板](https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247487724&idx=1&sn=992966ac782bfff5f58a78669566cd34)\n - [ ] [2025常见的网络安全服务大全（汇总详解）](https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247517988&idx=1&sn=71db8ddc34dbb5bd2e9fce7b232edaaf)\n - [ ] [初二：好运连连](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624762&idx=1&sn=47241d7f7296e0089b5da756046322f0)\n - [ ] [初二｜燃炮迎春盼福至 网站弹窗鉴虚实](https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247532957&idx=1&sn=9932467d97cae7cd76bdb1790358e7cc)\n - [ ] [【初二】安全一路相随 团聚近在眼前](https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650624574&idx=1&sn=d10e6d1823438874c6e7929eb90b1e97)\n - [ ] [2025年最可能的五种网络攻击，你的企业准备好了吗？](https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247487182&idx=1&sn=3c76f4710e63ed2414babafceda9eec1)\n - [ ] [诸葛亮教你如何应对APT攻击](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496849&idx=1&sn=d3276fd13b7a991e2e1c5cbbb41a3b4c)\n - [ ] [国自然中标真不难！十年评审专家1v1精修你的本子，中标率提升58%](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496849&idx=2&sn=41d0f5a68ff64924994dc39112bf9672)\n - [ ] [初二 | 姻缘美满](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493741&idx=1&sn=e36485b394ed47daf3a04225998efbe1)\n- Flexera Blog - Feed\n - [ ] [Cyber-Resilience regulations are here—is your organization ready?](https://www.flexera.com/blog/security/cyber-resilience-regulations-are-here-is-your-organization-ready/)\n- Twitter @bytehx\n - [ ] [Re @CristiVlad25 @SynackRedTeam Yes!](https://x.com/bytehx343/status/1884928882094268475)\n - [ ] [Thanks @SynackRedTeam](https://x.com/bytehx343/status/1884926738385580064)\n- Trail of Bits Blog\n - [ ] [PyPI now supports archiving projects](https://blog.trailofbits.com/2025/01/30/pypi-now-supports-archiving-projects/)\n- Securelist\n - [ ] [No need to RSVP: a closer look at the Tria stealer campaign](https://securelist.com/tria-stealer-collects-sms-data-from-android-devices/115295/)\n- Project Zero\n - [ ] [Windows Bug Class: Accessing Trapped COM Objects with IDispatch](https://googleprojectzero.blogspot.com/2025/01/windows-bug-class-accessing-trapped-com.html)\n - [ ] [Windows Exploitation Tricks: Trapping Virtual Memory Access (2025 Update)](https://googleprojectzero.blogspot.com/2025/01/windows-exploitation-tricks-trapping.html)\n- Malware-Traffic-Analysis.net - Blog Entries\n - [ ] [2025-01-30: XLoader infection](https://www.malware-traffic-analysis.net/2025/01/30/index.html)\n- Malwarebytes\n - [ ] [Microsoft advertisers phished via malicious Google ads](https://www.malwarebytes.com/blog/cybercrime/2025/01/microsoft-advertisers-phished-via-malicious-google-ads)\n - [ ] [The DeepSeek controversy: Authorities ask where does the data come from and how safe is it?](https://www.malwarebytes.com/blog/news/2025/01/the-deepseek-controversy-authorities-ask-where-the-data-comes-from-and-where-it-goes)\n- Reverse Engineering\n - [ ] [ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries [PDF]](https://www.reddit.com/r/ReverseEngineering/comments/1idxr88/resym_harnessing_llms_to_recover_variable_and/)\n - [ ] [Decompiling 2024: A Year of Resurgance in Decompilation Research](https://www.reddit.com/r/ReverseEngineering/comments/1idb0wg/decompiling_2024_a_year_of_resurgance_in/)\n - [ ] [arm64 PC-relative addressing fun](https://www.reddit.com/r/ReverseEngineering/comments/1idmknl/arm64_pcrelative_addressing_fun/)\n - [ ] [College Survey on AI-Enhanced Phishing and Cybersecurity Training Effectiveness](https://www.reddit.com/r/ReverseEngineering/comments/1idq68v/college_survey_on_aienhanced_phishing_and/)\n- Intigriti\n - [ ] [Power of the collective: Investing in the security researcher community for shared success](https://www.intigriti.com/blog/business-insights/power-of-the-collective-investing-in-the-security-researcher-community-for-shared)\n- Shostack & Friends Blog\n - [ ] [The Birth of the CVE System, on Hackers To Founders](https://shostack.org/blog/hackers-to-founders/)\n - [ ] [Hoarding, Debt and Threat Modeling](https://shostack.org/blog/hoarding-debt-and-threat-modeling/)\n- rtl-sdr.com\n - [ ] [Jeff Geerling Explores the CaribouLite Raspberry Pi Hat](https://www.rtl-sdr.com/jeff-geerling-explores-the-cariboulite-raspberry-pi-hat/)\n - [ ] [The Taylorator: Flooding the Broadcast FM Band with Taylor Swift Songs using a LimeSDR](https://www.rtl-sdr.com/the-taylorator-flooding-the-broadcast-fm-band-with-taylor-swift-songs-using-a-limesdr/)\n - [ ] [Video on the Basics of SDR for Hackers](https://www.rtl-sdr.com/video-on-the-basics-of-sdr-for-hackers/)\n- FreeBuf网络安全行业门户\n - [ ] [DeepSeek AI数据库泄露：超百万条日志和密钥曝光](https://www.freebuf.com/articles/420968.html)\n- 奇客Solidot–传递最新科技情报\n - [ ] [美国版权局称 AI 辅助作品如果包含足够的人类创意可获得版权保护](https://www.solidot.org/story?sid=80451)\n - [ ] [LibreOffice 下载量突破 4 亿](https://www.solidot.org/story?sid=80450)\n - [ ] [Debian 项目停止在 X 上发推](https://www.solidot.org/story?sid=80449)\n - [ ] [Douglas Engelbart 诞辰 100 周年](https://www.solidot.org/story?sid=80448)\n- 安全分析与研究\n - [ ] [Fake CAPTCHA攻击技术](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490238&idx=1&sn=f7929631aed8f88ecb74b428362ec4eb&chksm=902fb596a7583c80a17cb1f35f04930cd0fa4f66251be8f81b04a1801ee9d2f8725ffb4bda0c&scene=58&subscene=0#rd)\n- 锦行科技\n - [ ] [初二 | 姻缘美满](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493741&idx=1&sn=e36485b394ed47daf3a04225998efbe1&chksm=979a13c8a0ed9ade19f74ca917b1703c7b395367c03069fe1b164a21f581251495a707ffdfa8&scene=58&subscene=0#rd)\n- Black Hills Information Security\n - [ ] [Questions From a Beginner Threat Hunter](https://www.blackhillsinfosec.com/questions-from-a-beginner-threat-hunter/)\n- 红日安全\n - [ ] [新年新挑战，红日安全不打烊！携手同行，保障数字世界，迎接无限机遇！💻💼](https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851771&idx=1&sn=e32da143725cb1281d784159a2d92a85&chksm=f3e4e9f8c49360ee9f066a43959bd3732de37e27ca245ce7717817dc356c25315b6e3cd90820&scene=58&subscene=0#rd)\n- 吾爱破解论坛\n - [ ] [【2025春节】解题领红包活动开始喽，解出就送论坛币！\n\n第一题送分题有手就行（不需有脑，已有 1376 位会员完成此任务）。\n\n第二题 Windows 初级题 14点整 上线，题目很简单，如果你对逆向分析感兴趣，不妨借此机会自学尝试，让这次活动真正成为你技能提升的阶梯。](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141658&idx=1&sn=11067b00a771b8ee9bd4c4d0da1e8908&chksm=bd50a64e8a272f589319d04410866e550b8792cd73b49c0eecc8abb4df9996d504f306e3b43c&scene=58&subscene=0#rd)\n- 安全内参\n - [ ] [针对DeepSeek的网络攻击再升级：僵尸网络进场 攻击指令激增上百倍​](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513623&idx=1&sn=d0d49c0d4b6e85b4dd8aacd8623ca272&chksm=ebfaf137dc8d782175c2209f64fe50b91bf2c7ff519b1be99b56d7f5f4f3171fe8cb575f539a&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [我合理怀疑，春晚节目组混进了 B 站的人](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073042&idx=1&sn=e5673315f8ee79ebe9dd7e1d2616c261&chksm=7e57d32449205a32ea25640d2639fcc099fe5048fbdbbc484c363f514ec6a87a0fa0321f07d2&scene=58&subscene=0#rd)\n - [ ] [美国对 DeepSeek 开展国家安全调查；传 DS 训练模型绕过英伟达 CUDA；春节档刷新初一票房纪录 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073041&idx=1&sn=f9ec93124dfcfa3b5d40259ab4c2c990&chksm=7e57d32749205a310d8f135837f52b88af79c3c4cfa6f0101b33a99b48b746b953b3373c0e88&scene=58&subscene=0#rd)\n- 白帽子章华鹏\n - [ ] [DeepSeek被海外曝出严重聊天记录数据泄漏问题](https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650236959&idx=1&sn=0024f87794598ce60e345aa728e8a771&chksm=f04ad2a3c73d5bb52eb2a39504865a355749cee5228d9bcaa1078cab5387d5509791a0eafeb4&scene=58&subscene=0#rd)\n- 墨菲安全\n - [ ] [DeepSeek因软件供应链安全问题导致严重聊天记录数据泄漏](https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488049&idx=1&sn=377ab6f02bf6685c6ecd606923242cc3&chksm=c13d7109f64af81f818a52b31171cec774bb86a531f1405b24c020869c281e0865f573e9c6a6&scene=58&subscene=0#rd)\n- 迪哥讲事\n - [ ] [深入浅出API测试｜搜集分析与漏洞挖掘实战](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496981&idx=1&sn=1b88708a474086d96cf22a9428c93835&chksm=e8a5ff76dfd276605ae35037c735c6cb3cb39f0962d2b476be2284664584944a6e21d112112a&scene=58&subscene=0#rd)\n- bellingcat\n - [ ] [Neo-Nazis Linked to “Terrorist Activities” to Host Budapest Concert](https://www.bellingcat.com/news/2025/01/30/neo-nazis-linked-to-terrorist-activities-to-host-budapest-concert/)\n- M01N Team\n - [ ] [AI风险分析 | Grok提示词泄露前后暗藏玄机](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494054&idx=1&sn=9122e0562bcad42ee707e0879b945aa1&chksm=c18429b7f6f3a0a16b65fc9b18ee5c979853c462ea1f43800abab53c6e5bc3e5d73dc9c1c540&scene=58&subscene=0#rd)\n- 360数字安全\n - [ ] [大年初二 | 金蛇迎春，福“巳”绵延](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579270&idx=1&sn=07b4d333a5b2f57048e51d6aa8cc4224&chksm=9f8d268ea8faaf982879ec311f767c0e01c96d6b31f504cb5edd372b41e9ddedf3659c61e603&scene=58&subscene=0#rd)\n- Full Disclosure\n - [ ] [Quorum onQ OS - 6.0.0.5.2064 | Reflected Cross Site Scripting\t(XSS) | CVE-2024-44449](https://seclists.org/fulldisclosure/2025/Jan/23)\n - [ ] [Deepseek writes textbook insecure code in 2025-01-28](https://seclists.org/fulldisclosure/2025/Jan/22)\n - [ ] [Text injection on https://www.google.com/sorry/index via ?q parameter (no XSS)](https://seclists.org/fulldisclosure/2025/Jan/21)\n- Securityinfo.it\n - [ ] [Privacy dei dati: la maggior parte degli utenti teme una violazione](https://www.securityinfo.it/2025/01/30/privacy-dei-dati-la-maggior-parte-degli-utenti-teme-una-violazione/?utm_source=rss&utm_medium=rss&utm_campaign=privacy-dei-dati-la-maggior-parte-degli-utenti-teme-una-violazione)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #733: Test Kitchen building cloud tools with cursor](https://www.hecfblog.com/2025/01/daily-blog-733-test-kitchen-building.html)\n- Have I Been Pwned latest breaches\n - [ ] [Speedio (unverified) - 27,501,041 breached accounts](https://haveibeenpwned.com/PwnedWebsites#Speedio)\n- The Hacker News\n - [ ] [Google: Over 57 Nation-State Threat Groups Using AI for Cyber Operations](https://thehackernews.com/2025/01/google-over-57-nation-state-threat.html)\n - [ ] [Authorities Seize Domains of Popular Hacking Forums in Major Cybercrime Crackdown](https://thehackernews.com/2025/01/authorities-seize-domains-of-popular.html)\n - [ ] [Lightning AI Studio Vulnerability Allowed RCE via Hidden URL Parameter](https://thehackernews.com/2025/01/lightning-ai-studio-vulnerability.html)\n - [ ] [SOC Analysts - Reimagining Their Role Using AI](https://thehackernews.com/2025/01/soc-analysts-reimagining-their-role.html)\n - [ ] [DeepSeek AI Database Exposed: Over 1 Million Log Lines, Secret Keys Leaked](https://thehackernews.com/2025/01/deepseek-ai-database-exposed-over-1.html)\n - [ ] [Unpatched PHP Voyager Flaws Leave Servers Open to One-Click RCE Exploits](https://thehackernews.com/2025/01/unpatched-php-voyager-flaws-leave.html)\n - [ ] [New Aquabot Botnet Exploits CVE-2024-41710 in Mitel Phones for DDoS Attacks](https://thehackernews.com/2025/01/new-aquabot-botnet-exploits-cve-2024.html)\n- Deeplinks\n - [ ] [Executive Order to the State Department Sideswipes Freedom Tools, Threatens Censorship Resistance, Privacy, and Anonymity of Millions](https://www.eff.org/deeplinks/2025/01/executive-order-state-department-sideswipes-freedom-tools-threatens-censorship)\n - [ ] [The Internet Never Forgets: Fighting the Memory Hole](https://www.eff.org/deeplinks/2025/01/internet-never-forgets-fighting-memory-hole)\n - [ ] [Protect Your Privacy on Bumble](https://www.eff.org/deeplinks/2025/01/protect-your-privacy-bumble)\n- Security Affairs\n - [ ] [DeepSeek database exposed highly sensitive information](https://securityaffairs.com/173666/data-breach/deepseek-db-exposed-highly-sensitive-information.html)\n - [ ] [TeamViewer fixed a vulnerability in Windows client and host applications](https://securityaffairs.com/173658/security/teamviewer-windows-client-flaw.html)\n - [ ] [Operation Talent: An international law enforcement operation seized Cracked, Nulled and other cybercrime websites](https://securityaffairs.com/173651/cyber-crime/operation-talent-seized-cracked-nulled-cybercrime-websites.html)\n - [ ] [PHP package Voyager flaws expose to one-click RCE exploits](https://securityaffairs.com/173646/hacking/php-package-voyager-flaws.html)\n - [ ] [Italy’s Data Protection Authority Garante requested information from Deepseek](https://securityaffairs.com/173637/digital-id/italys-garante-requested-information-from-deepseek.html)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Backdoor found in two healthcare patient monitors, linked to IP in China](https://www.bleepingcomputer.com/news/security/backdoor-found-in-two-healthcare-patient-monitors-linked-to-ip-in-china/)\n - [ ] [Lawmakers push for guardrails, deadline on cyber military study](https://therecord.media/lawmakers-push-for-guardrails-deadline-cyber-force-study)\n - [ ] [Google blocked 2.36 million risky Android apps from Play Store in 2024](https://www.bleepingcomputer.com/news/security/google-blocked-236-million-risky-android-apps-from-play-store-in-2024/)\n - [ ] [States with laws requiring data brokers to register are ramping up enforcement](https://therecord.media/state-data-broker-registry-laws-fines-warnings)\n - [ ] [Gabbard grilled over Snowden comments during Senate confirmation hearing](https://therecord.media/gabbard-grilled-over-snowden-comments-senate-confirmation-hearing)\n - [ ] [US Justice Department says cybercrime forum allegedly affected 17 million Americans](https://techcrunch.com/2025/01/30/us-justice-department-says-cybercrime-forum-allegedly-affected-17-million-americans/)\n - [ ] [Defeating Future Threats Starts Today](https://blog.talosintelligence.com/defeating-future-threats-starts-today/)\n - [ ] [Ransomware attack disrupts New York blood donation giant](https://www.bleepingcomputer.com/news/security/ransomware-attack-disrupts-new-york-blood-donation-giant/)\n - [ ] [Infrastructure Laundering: Blending in with the Cloud](https://krebsonsecurity.com/2025/01/infrastructure-laundering-blending-in-with-the-cloud/)\n - [ ] [Ransomware attack on New York Blood Center forces workarounds, drive cancellations](https://therecord.media/ransomware-attack-new-york-blood-center-forces-workarounds)\n - [ ] [DeepSeek exposes database with over 1 million chat records](https://www.bleepingcomputer.com/news/security/deepseek-exposes-database-with-over-1-million-chat-records/)\n - [ ] [International police coalition takes down two prolific cybercrime and hacking forums](https://techcrunch.com/2025/01/30/international-police-coalition-takes-down-two-prolific-cybercrime-and-hacking-forums/)\n - [ ] [Police take down two large cybercrime forums, arrest suspects](https://therecord.media/cybercrime-forums-cracked-nulled-takedowns-arrests)\n - [ ] [Major GitHub outage affects pull requests and other services](https://www.bleepingcomputer.com/news/technology/major-github-outage-affects-pull-requests-and-other-services/)\n - [ ] [The Advantages of Cloud-Based Remote Desktop versus RDP over VPN](https://www.bleepingcomputer.com/news/security/the-advantages-of-cloud-based-remote-desktop-versus-rdp-over-vpn/)\n - [ ] [(Un)Happy Trails](https://bfore.ai/unhappy-trails-travel-related-scams-and-what-travel-vendors-can-do-to-protect-their-customers/)\n - [ ] [New Syncjacking attack hijacks devices using Chrome extensions](https://www.bleepingcomputer.com/news/security/new-syncjacking-attack-hijacks-devices-using-chrome-extensions/)\n - [ ] [bedevil: Dynamic Linker Patching](http://localhost:1313/posts/bedevil_dynamic_linker_patching/)\n - [ ] [Hack.lu: In-Depth Study of Linux Rootkits: Evolution, Detection, and Defense](http://localhost:1313/talks/hack.lu_rootkits_2024/)\n - [ ] [Hack.lu: The Gist of Hundreds of Incident Response Cases](http://localhost:1313/talks/hack.lu_gist_2024/)\n - [ ] [Reptile's Custom Kernel-Module Launcher](http://localhost:1313/posts/reptile_launcher/)\n - [ ] [BSides Munich: /proc for Security Analysts](http://localhost:1313/talks/bsides_munich_2024/)\n - [ ] [DeepSec: RAT Builders - How to catch them all](http://localhost:1313/talks/deepsec_2024/)\n - [ ] [Shell Script Compiler (shc)](http://localhost:1313/posts/shell_script_compiler/)\n - [ ] [Today I Learned - setfacl](http://localhost:1313/posts/today_i_learned_setfacl/)\n - [ ] [Analysis of Python's .pth files as a persistence mechanism](http://localhost:1313/posts/publish_python_pth_extension/)\n - [ ] [Tear Down The Castle - Part 1](http://localhost:1313/posts/tear_down_castle_part_one/)\n - [ ] [Oh my .. ! - Suspicious network traffic detected including Ransomware](http://localhost:1313/posts/suspicious_network_traffic_ransomware/)\n - [ ] [Tear Down The Castle - Part 2](http://localhost:1313/posts/tear_down_castle_part_two/)\n - [ ] [Follow-Up: Alibaba’s Qwen2.5-VL Model is Also Vulnerable to Prompt Attacks](https://www.kelacyber.com/blog/follow-up-alibabas-qwen2-5-vl-model-is-also-vulnerable-to-prompt-attacks/)\n - [ ] [Police seizes Cracked and Nulled hacking forum servers, arrests suspects](https://www.bleepingcomputer.com/news/security/police-seizes-cracked-and-nulled-hacking-forum-servers-arrests-suspects/)\n - [ ] [Microsoft lifts Windows 11 update block for PCs with gaming issues](https://www.bleepingcomputer.com/news/microsoft/microsoft-lifts-windows-11-update-block-for-pcs-with-gaming-issues/)\n - [ ] [Common OAuth Vulnerabilities](https://blog.doyensec.com/2025/01/30/oauth-common-vulnerabilities.html)\n - [ ] [DeepSeek’s Growing Influence Sparks a Surge in Frauds and Phishing Attacks](https://cyble.com/blog/deepseeks-growing-influence-sparks-a-surge-in-frauds-and-phishing-attacks/)\n - [ ] [Time Bandit ChatGPT jailbreak bypasses safeguards on sensitive topics](https://www.bleepingcomputer.com/news/security/time-bandit-chatgpt-jailbreak-bypasses-safeguards-on-sensitive-topics/)\n - [ ] [Comunicare per proteggere: strategie e strumenti per implementare i requisiti ISO 27001](https://www.cybersecurity360.it/legal/comunicare-per-proteggere-strategie-e-strumenti-per-implementare-i-requisiti-iso-27001/)\n - [ ] [Bilanciare i rischi di security beneficiando di tecnologie di AI: fra opportunità e rischi](https://www.cybersecurity360.it/news/bilanciare-i-rischi-di-security-beneficiando-di-tecnologie-di-ai-fra-opportunita-e-rischi/)\n - [ ] [DeepSeek: i timori per la privacy e la cyber security](https://www.cybersecurity360.it/cultura-cyber/deepseek-i-timori-per-la-privacy-e-la-cyber-security/)\n - [ ] [DeepSeek, serve cautela: ci sono pericoli per la sicurezza](https://www.cybersecurity360.it/news/deepseek-usarlo-con-cautela-ci-sono-pericoli-per-la-sicurezza/)\n - [ ] [Smishing a tema Poste Italiane: i dettagli e come difendersi](https://www.cybersecurity360.it/news/smishing-a-tema-poste-italiane-i-dettagli-e-come-difendersi/)\n - [ ] [Più cyber attacchi nel 2024. E nel 2025 il trend non si fermerà](https://www.cybersecurity360.it/outlook/piu-cyber-attacchi-nel-2024-e-nel-2025-il-trend-non-si-fermera/)\n - [ ] [I cyber rischi in azienda che (anche) gli italiani non comprendono](https://www.cybersecurity360.it/news/i-cyber-rischi-in-azienda-che-anche-gli-italiani-non-comprendono/)\n - [ ] [Le chat WhatsApp sono corrispondenza da tutelare: i paletti privacy della Cassazione](https://www.cybersecurity360.it/news/le-chat-whatsapp-sono-corrispondenza-da-tutelare-i-paletti-privacy-della-cassazione/)\n - [ ] [Decentraleyes potenzia la privacy online: vantaggi e limiti](https://www.cybersecurity360.it/soluzioni-aziendali/decentraleyes-potenzia-la-privacy-online-vantaggi-e-limiti/)\n - [ ] [Il controllo del dipendente da parte del datore di lavoro: le sfide per la privacy](https://www.cybersecurity360.it/legal/privacy-dati-personali/il-controllo-del-dipendente-da-parte-del-datore-di-lavoro-le-sfide-per-la-privacy/)\n - [ ] [Talos IR trends Q4 2024: Web shell usage and exploitation of public-facing applications spike](https://blog.talosintelligence.com/talos-ir-trends-q4-2024/)\n - [ ] [UK, US Introduce “Content Credentials” Labeling to Counter Deepfakes, Misinformation in the Age of AI](https://cyble.com/blog/uk-us-introduce-content-credentials-labeling/)\n - [ ] [Speedio (unverified) - 27,501,041 breached accounts](https://haveibeenpwned.com/PwnedWebsites#Speedio)\n - [ ] [ICS Vulnerability Report: Cyble Urges Critical mySCADA Fixes](https://cyble.com/blog/ics-vulnerability-report-cyble-urges-critical-myscada-fixes/)\n- Social Engineering\n - [ ] [\"Humans Aren’t the Weakest Link, They’re the Strongest Layer in Cybersecurity\"](https://www.reddit.com/r/SocialEngineering/comments/1idqop9/humans_arent_the_weakest_link_theyre_the/)\n - [ ] [How to better at socialising?](https://www.reddit.com/r/SocialEngineering/comments/1idam33/how_to_better_at_socialising/)\n- Schneier on Security\n - [ ] [Fake Reddit and WeTransfer Sites are Pushing Malware](https://www.schneier.com/blog/archives/2025/01/fake-reddit-and-wetransfer-sites-are-pushing-malware.html)\n- Technical Information Security Content & Discussion\n - [ ] [The Slow Death of OCSP](https://www.reddit.com/r/netsec/comments/1idvdv5/the_slow_death_of_ocsp/)\n - [ ] [Practising Heap Exploitation: Using House Of Force Technique with Practicals](https://www.reddit.com/r/netsec/comments/1idm8tr/practising_heap_exploitation_using_house_of_force/)\n - [ ] [WebAssembly and security: a review](https://www.reddit.com/r/netsec/comments/1idnsqk/webassembly_and_security_a_review/)\n - [ ] [A short Introduction to BloodHound Custom Queries](https://www.reddit.com/r/netsec/comments/1idlm4q/a_short_introduction_to_bloodhound_custom_queries/)\n - [ ] [CVE-2024-46506: Unauthenticated RCE in NetAlertx](https://www.reddit.com/r/netsec/comments/1idsuzx/cve202446506_unauthenticated_rce_in_netalertx/)\n- Graham Cluley\n - [ ] [Smashing Security podcast #402: Hackers get hacked, the British Museum IT shutdown, and social media kidnaps](https://grahamcluley.com/smashing-security-podcast-402-hackers-get-hacked-the-british-museum-it-shutdown-and-social-media-kidnaps/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [GCP Red Teaming / Pentesting Certifications](https://www.reddit.com/r/netsecstudents/comments/1idjlk4/gcp_red_teaming_pentesting_certifications/)\n- Krebs on Security\n - [ ] [Infrastructure Laundering: Blending in with the Cloud](https://krebsonsecurity.com/2025/01/infrastructure-laundering-blending-in-with-the-cloud/)\n- Krypt3ia\n - [ ] [Threat Report: Risks and Considerations of Storing Corporate Security Telemetry in EDR Vendor Cloud Instances](https://krypt3ia.wordpress.com/2025/01/30/threat-report-risks-and-considerations-of-storing-corporate-security-telemetry-in-edr-vendor-cloud-instances/)\n - [ ] [Krypt3ia Daily Cyber Threat Intelligence (CTI) Digest](https://krypt3ia.wordpress.com/2025/01/30/krypt3ia-daily-cyber-threat-intelligence-cti-digest-6/)\n- Your Open Hacker Community\n - [ ] [Everything is hacked 😊](https://www.reddit.com/r/HowToHack/comments/1ie17ff/everything_is_hacked/)\n - [ ] [Phones that are open to connecting via Bluetooth](https://www.reddit.com/r/HowToHack/comments/1idms17/phones_that_are_open_to_connecting_via_bluetooth/)\n - [ ] [Most Effective learning path to Reverse engineer network server of old games?](https://www.reddit.com/r/HowToHack/comments/1ids89n/most_effective_learning_path_to_reverse_engineer/)\n - [ ] [Is there any website I can use to convert a large amount of passwords into Hashes (in batch)?](https://www.reddit.com/r/HowToHack/comments/1idu982/is_there_any_website_i_can_use_to_convert_a_large/)\n - [ ] [Finding an array of class instances using Cheat Engine?](https://www.reddit.com/r/HowToHack/comments/1idh9ob/finding_an_array_of_class_instances_using_cheat/)\n - [ ] [Free course](https://www.reddit.com/r/HowToHack/comments/1idm5ny/free_course/)\n - [ ] [Cheat engine?](https://www.reddit.com/r/HowToHack/comments/1idu18m/cheat_engine/)\n - [ ] [Who has dark web AI?](https://www.reddit.com/r/HowToHack/comments/1idtmsb/who_has_dark_web_ai/)\n - [ ] [Question](https://www.reddit.com/r/HowToHack/comments/1ide7pg/question/)\n - [ ] [I want to hack like elliot from mister robot](https://www.reddit.com/r/HowToHack/comments/1idwvv2/i_want_to_hack_like_elliot_from_mister_robot/)\n - [ ] [Tips for Copying and Pasting from Apps That Restrict It](https://www.reddit.com/r/HowToHack/comments/1idg62q/tips_for_copying_and_pasting_from_apps_that/)\n - [ ] [Can I duplicate a SIM card?](https://www.reddit.com/r/HowToHack/comments/1idihtl/can_i_duplicate_a_sim_card/)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [PCAPs or It Didn't Happen: Exposing an Old Netgear Vulnerability Still Active in 2025 [Guest Diary], (Thu, Jan 30th)](https://isc.sans.edu/diary/rss/31638)\n - [ ] [ISC Stormcast For Thursday, January 30th, 2025 https://isc.sans.edu/podcastdetail/9302, (Thu, Jan 30th)](https://isc.sans.edu/diary/rss/31636)\n- Deep Web\n - [ ] [My friend stumbled upon these while gliding at dark web.](https://www.reddit.com/r/deepweb/comments/1idlmuj/my_friend_stumbled_upon_these_while_gliding_at/)\n- Information Security\n - [ ] [Change Healthcare data breach – how to protect yourself](https://www.reddit.com/r/Information_Security/comments/1idnbgn/change_healthcare_data_breach_how_to_protect/)\n - [ ] [College Survey on AI-Enhanced Phishing and Cybersecurity Training Effectiveness](https://www.reddit.com/r/Information_Security/comments/1idq592/college_survey_on_aienhanced_phishing_and/)\n - [ ] [CIS standards for CyberArk](https://www.reddit.com/r/Information_Security/comments/1idn856/cis_standards_for_cyberark/)\n - [ ] [What is SHEIN doing to our data?](https://www.reddit.com/r/Information_Security/comments/1idgkn6/what_is_shein_doing_to_our_data/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [Cred Vaults, Cheap AI, and Hacking Devices - Matt Bishop - PSW #859](http://sites.libsyn.com/18678/cred-vaults-cheap-ai-and-hacking-devices-matt-bishop-psw-859)\n"}, "d7947b8192250ba7dd1cadd76aaeccff298ba8f2": {"t": 1785772241.2159288, "n": 46832, "h": "332fe154a72d08da", "c": "# 每日安全资讯（2025-01-31）\n\n- Trustwave Blog\n - [ ] [How Trustwave’s Fusion Platform Analyzes Ransomware Tactics in the Energy Sector: A Comprehensive Overview](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/how-trustwaves-fusion-platform-analyzes-ransomware-tactics-in-the-energy-sector-a-comprehensive-overview/)\n- Armin Ronacher's Thoughts and Writings\n - [ ] [How I Use AI: Meet My Promptly Hired Model Intern](http://lucumr.pocoo.org/2025/1/30/how-i-ai)\n- Security Boulevard\n - [ ] [2025 predictions: Security industry](https://securityboulevard.com/2025/01/2025-predictions-security-industry/)\n - [ ] [Preparing for PCI DSS 4.0: How Sonatype SBOM Manager can streamline and accelerate your transition](https://securityboulevard.com/2025/01/preparing-for-pci-dss-4-0-how-sonatype-sbom-manager-can-streamline-and-accelerate-your-transition/)\n - [ ] [Trust in Cloud Security with Effective Secrets Rotation](https://securityboulevard.com/2025/01/trust-in-cloud-security-with-effective-secrets-rotation/)\n - [ ] [Innovative PAM Strategies for Modern Enterprises](https://securityboulevard.com/2025/01/innovative-pam-strategies-for-modern-enterprises/)\n - [ ] [Advancing Cloud Compliance with Proactive Measures](https://securityboulevard.com/2025/01/advancing-cloud-compliance-with-proactive-measures/)\n - [ ] [Hiya AI Phone App Protects Against Deepfakes, Other Scams](https://securityboulevard.com/2025/01/hiya-ai-phone-app-protects-against-deepfakes-other-scams/)\n - [ ] [DEF CON 32 – Color Blasted Badge Making: How Hard Could It Be](https://securityboulevard.com/2025/01/def-con-32-color-blasted-badge-making-how-hard-could-it-be/)\n - [ ] [2025’s Top Five Trends in Identity Verification](https://securityboulevard.com/2025/01/2025s-top-five-trends-in-identity-verification/)\n - [ ] [Next Steps from the PCI Council’s SAQ-A Update: Critical Responsibilities and Opportunities for PSPs](https://securityboulevard.com/2025/01/next-steps-from-the-pci-councils-saq-a-update-critical-responsibilities-and-opportunities-for-psps/)\n - [ ] [Assessing the New SAQ-A Changes: Insights for QSAs](https://securityboulevard.com/2025/01/assessing-the-new-saq-a-changes-insights-for-qsas/)\n- Sukka's Blog\n - [ ] [2024：浏览器从 A 到 Z](https://blog.skk.moe/post/2024-browser-from-a-to-z/)\n- 一个被知识诅咒的人\n - [ ] [【Python】深入探索Python元类：动态生成类与对象的艺术](https://blog.csdn.net/nokiaguy/article/details/145397730)\n - [ ] [【Python】深入理解Python中的装饰器链：创建组合装饰器的技巧与实践](https://blog.csdn.net/nokiaguy/article/details/145397710)\n- InfoSec Write-ups - Medium\n - [ ] [How iPhone Data Can Be Securely Erased?](https://infosecwriteups.com/how-iphone-data-can-be-securely-erased-7b044dbf7919?source=rss----7b722bfd1b8d---4)\n - [ ] [Cutting Off Skynet: Running Local LLMs With Ollama](https://infosecwriteups.com/cutting-off-skynet-running-local-llms-with-ollama-8753e4d1426b?source=rss----7b722bfd1b8d---4)\n- SecWiki News\n - [ ] [SecWiki News 2025-01-30 Review](http://www.sec-wiki.com/?2025-01-30)\n- Recent Commits to cve:main\n - [ ] [Update Thu Jan 30 20:25:02 UTC 2025](https://github.com/trickest/cve/commit/630b95e7243b0245cde3df59fe484976ce30e2ee)\n - [ ] [Update Thu Jan 30 12:18:33 UTC 2025](https://github.com/trickest/cve/commit/6d2f59a5338e9b0f9fda557d99080a0f50fd20af)\n - [ ] [Update Thu Jan 30 04:17:50 UTC 2025](https://github.com/trickest/cve/commit/9cf77fc7fab952fdfcbf1e41b07c41bd3ecd8cd6)\n- bunnie's blog\n - [ ] [Name that Ware, January 2025](https://www.bunniestudios.com/blog/2025/name-that-ware-january-2025/)\n - [ ] [Winner, Name that Ware December 2024](https://www.bunniestudios.com/blog/2025/winner-name-that-ware-december-2024/)\n- gynvael.coldwind//vx.log (en)\n - [ ] [On hackers, hackers, and hilarious misunderstandings](https://gynvael.coldwind.pl/?id=799)\n- Hacking Articles\n - [ ] [AD Recon: Kerberos Username Bruteforce](https://www.hackingarticles.in/ad-recon-kerberos-username-bruteforce/)\n- Doonsec's feed\n - [ ] [秦安：特朗普“半夜清洗”，解雇17名检察长，成三位一体反腐布局](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=1&sn=11cf99bd5faf07695e3ac89ec70c72aa)\n - [ ] [张志坤：巴拿马运河争夺战，真正目标是中国](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=2&sn=4135a1c0538e4e13d4e225ad3de60ac2)\n - [ ] [牟林：关于无人武器作战的战略思考](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=3&sn=c0854894545a61159ff4423409fe77fe)\n - [ ] [牟林：靠征关税致富做得到吗？](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476392&idx=4&sn=a54df395e2fe825567a13f177b2f1ed2)\n - [ ] [Loggy - Introduce to reverseing golang binary](https://mp.weixin.qq.com/s?__biz=Mzg4NzU4MDE5NQ==&mid=2247484272&idx=1&sn=b38cb2dd664786c222e314a789b7da40)\n - [ ] [byd红客](https://mp.weixin.qq.com/s?__biz=MzkyNTQ0OTYxOQ==&mid=2247483988&idx=1&sn=5b25e95ccbd765424198f50243e7edf7)\n - [ ] [【速报】github 挂了？（世界就是一个巨大的草台班子）](https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485449&idx=1&sn=2e621cb2afe5e511ac88f055da981272)\n - [ ] [Kali下安装与使用BeEF：反射型与存储型XSS攻击、Cookie会话劫持、键盘监听及浏览器操控技巧](https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486453&idx=1&sn=cd3057994dfa4e6a29c9d70b342f9e8a)\n - [ ] [起](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496866&idx=1&sn=50672ddfb00ba89a961f457c1121f0f1)\n - [ ] [（吃瓜）Github疑似遭受ddos攻击](https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484164&idx=1&sn=0e0f18f1790d8e9a2fd97d76ed9ff8eb)\n - [ ] [特朗普“午夜清洗”：17名监察长“下马”，法律争议“炸锅](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505045&idx=1&sn=d3b57f2d70f4497ba9e6bd0d3792b39b)\n - [ ] [印度卫星对接成功：技术存在局限性](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505045&idx=2&sn=1f9e6ca2b9e492d72bd16233e83dcf9c)\n - [ ] [大家一起ddos白宫](https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491639&idx=1&sn=ea6a2bb14d619f5834396d7fe8ebf609)\n - [ ] [研究完威胁分类，才发现我们平时谈的“以威胁为中心”都是假的！](https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492288&idx=1&sn=4a85f9ccfbc35e9f52f817bc25f4ce10)\n - [ ] [世界需要一个能谋善断的AI（三）决策的厚重：人类世界是如何被“选择”塑造的?](https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492288&idx=2&sn=416787d4505f6a7bf562f91bcf9f37cd)\n - [ ] [DeepSeek-R1：通过强化学习激励LLM的推理能力](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264879&idx=1&sn=74c7f7b47fbb79364c8dc55264481f92)\n - [ ] [分享图片](https://mp.weixin.qq.com/s?__biz=MzI3Njc1MjcxMg==&mid=2247494399&idx=1&sn=21a59287adb50dc4b945b2325e795fe4)\n - [ ] [SpiderX-V2.0发布 解锁JS加密新姿势攻防武器](https://mp.weixin.qq.com/s?__biz=MzkxOTU3MDY4MQ==&mid=2247484842&idx=1&sn=29eca64227216346731e46e212de2a92)\n - [ ] [量子计算机时代的汽车系统的嵌入式安全](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620255&idx=1&sn=610c3bff71970b4fbc041a0177ee93fd)\n - [ ] [揭开人工智能在交通网络安全中的神秘面纱](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620255&idx=2&sn=c361a268b2ef526cf5e44433248d1d13)\n - [ ] [车辆网络处理器上的后量子安全启动](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620255&idx=3&sn=ee30d942f28072654d6b335624aea228)\n - [ ] [新年开工啦](https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247484490&idx=1&sn=379870838aa89954061ce91a8fe22392)\n - [ ] [揭秘土耳其“红皮书”：真相还是阴谋？](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559341&idx=1&sn=517465083ba598dcfc9d243a3f11d1c9)\n - [ ] [中亚新位置：美国到底是“机遇”还是“陷阱”？](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559341&idx=2&sn=58f2aa6cb8bf4e2d52982ba4dc461e34)\n - [ ] [深入浅出API测试｜搜集分析与漏洞挖掘实战](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496981&idx=1&sn=1b88708a474086d96cf22a9428c93835)\n - [ ] [网络运维工程师如何高效运维数据中心，记住这6条定律！](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247528027&idx=1&sn=bb96422660e09519af965fecc213d4cf)\n - [ ] [春节假期7个基本网络安全提示](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114269&idx=1&sn=731f251283d6f584e16dd15c5f0f1b4f)\n - [ ] [为什么DDoS攻击如此致命？](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649464754&idx=1&sn=df89b63da565ca06f6419c818442ef13)\n - [ ] [利用DeepSeek进行java代码审计，好用！](https://mp.weixin.qq.com/s?__biz=MzkxNjQyODY5MA==&mid=2247487042&idx=1&sn=256d32002fcf342d7770b39c1d41f695)\n - [ ] [收藏 | dotNet安全矩阵 2024 年度目标权限维持阶段文章和工具汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498569&idx=1&sn=a273094850e815c5dccaf5c9fbb7956f)\n - [ ] [国内最专业、最全面的 [ .NET 代码审计 ] 体系化学习交流社区](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498569&idx=2&sn=efe5abab1b53aa0c37945f18fbfb5043)\n - [ ] [收藏 | dotNet安全矩阵 2024 年度外网入口打点阶段文章和工具汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498569&idx=3&sn=b5363f2569c8b2f819bc9d52cc71cc79)\n - [ ] [2024年，安全厂商为什么这么惨？](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=1&sn=ccf61766565e0badd0172f57ee1728f1)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=4&sn=919cc9d33961ed8e6a35eede596478de)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=5&sn=bf335b4022071ba93823b812090acee6)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485482&idx=6&sn=3ff7227d97237b358e80b064be4215f2)\n - [ ] [四川大学网安少年班](https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485616&idx=1&sn=5255daa9a5e28be2c73d156eeb167ad5)\n - [ ] [世界经济论坛《2025年全球网络安全展望》报告一览](https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247484780&idx=1&sn=5c29954e85b159e98b2db3467a6f4281)\n - [ ] [【恭贺新春】企业级内网仿真「Thunder」免费开战！通关赢千元现金](https://mp.weixin.qq.com/s?__biz=Mzg5MDc1MjY5Ng==&mid=2247493011&idx=1&sn=324fff14046b3d7b31e4f2827bccacfb)\n - [ ] [AI风险分析 | Grok提示词泄露前后暗藏玄机](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494054&idx=1&sn=9122e0562bcad42ee707e0879b945aa1)\n - [ ] [针对DeepSeek的网络攻击再升级：僵尸网络进场 攻击指令激增上百倍u200b](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513623&idx=1&sn=d0d49c0d4b6e85b4dd8aacd8623ca272)\n - [ ] [Offsec PG靶场-Pelican(OSCP考试)](https://mp.weixin.qq.com/s?__biz=MzU5MjIzMDMzNg==&mid=2247484347&idx=1&sn=0c628f8609fa4badb4f81f1f90b3d305)\n - [ ] [六部门印发｜关于完善数据流通安全治理 更好促进数据要素市场化价值化的实施方案](https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247506759&idx=1&sn=851aa85a7e994c201ed3fa8c930ebe05)\n - [ ] [UbuntuServer24.04上使用NVIDIA GeForce RTX 4060Ti部署并训练DeepSeek R1大模型](https://mp.weixin.qq.com/s?__biz=Mzg2MjYxODQ4Mw==&mid=2247484982&idx=1&sn=226d2daae237f9ead22b087b2611e457)\n - [ ] [干货 | 渗透测试以及checklist模板，附PDF免费下载！](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247570691&idx=1&sn=74eca2607d62024085a1edf27565aeef)\n - [ ] [DeepSeek遭暴力破解 攻击IP均来自美国](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170578&idx=1&sn=c79c88154ac6083c4d178ed4a123665b)\n - [ ] [奇安信：针对DeepSeek的网络攻击再升级! 僵尸网络进场，指令激增上百倍](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170578&idx=2&sn=19ad0e0ac08770adde15936cbc245f61)\n - [ ] [从创新环境看新质生产力发展](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651618932&idx=1&sn=829c061c8fe0ac244f869355102c255f)\n - [ ] [僵尸网络进场，针对 DeepSeek 网络攻击再升级](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624774&idx=1&sn=5c438a523258d18082e4918e22ff51c9)\n - [ ] [惊魂72小时：一场席卷Linux世界的巨大威胁是如何被阻止的](https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489858&idx=1&sn=01a4503fd428692055c9a137cd9bb0a8)\n - [ ] [比特币链上大周期投资指导方案](https://mp.weixin.qq.com/s?__biz=MzI3NTcwNTQ2Mg==&mid=2247487630&idx=1&sn=532f51f67ceab5e41324cbf9a80d0432)\n - [ ] [秒达工具箱：各种开发者必备的工具集合，支持Docker部署](https://mp.weixin.qq.com/s?__biz=MzA4MjkzMTcxMg==&mid=2449046776&idx=1&sn=c7985da37fee0d92ef3585fa526b3ba5)\n - [ ] [DeepSeek 数据库被攻击，国外团队已公开披露漏洞](https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488775&idx=1&sn=2b8f2e1154eb0de5e1422589ee7b4f95)\n - [ ] [旧知新话说“标识”之心意篇：标识助力物流信息可追溯](https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247592366&idx=1&sn=28ab8739af2ccfaae353c286890cde3f)\n - [ ] [DeepSeek 开源免费，大洋彼岸直接急了](https://mp.weixin.qq.com/s?__biz=MzIzNjU5NDE2MA==&mid=2247490177&idx=1&sn=8c3da180f37e24bb83cc20d6168c694a)\n - [ ] [可能这就是你deepseek无法访问的原因——deepseek 漏洞（已修复）](https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485665&idx=1&sn=ce7d065feabad43d7bd144eb57ba1115)\n - [ ] [小日子已经被deepseek折服——日媒：DeepSeek模型以简单方法实现高性能](https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485665&idx=2&sn=3648dc775f70e3d481072e9e72b21a84)\n - [ ] [FtC4Wraiths CTF战队招募令：成为幽灵，掌控战场！](https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247485011&idx=1&sn=eab2c10d8fcd6cc7e3fbdff694b4cd7a)\n - [ ] [【2025-01-30】黑客新闻摘要](https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488390&idx=1&sn=3e958dfb1428d5b530c24db97201ea53)\n - [ ] [DeepSeek因软件供应链安全问题导致严重聊天记录数据泄漏](https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488049&idx=1&sn=377ab6f02bf6685c6ecd606923242cc3)\n - [ ] [（吃瓜）刘农TV之渗透中遇到的神人运维](https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484157&idx=1&sn=597aa22f30bf086e39d157e7ba9082ad)\n - [ ] [DeepSeek 大模型数据泄露被国外安全团队发现](https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491067&idx=1&sn=53535c35ef941d31f4d587b0cbd426e6)\n - [ ] [利用 Unicode 溢出绕过字符阻止列表](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527393&idx=1&sn=c9213875c652ac0318560b3966348226)\n - [ ] [幻影行动：朝鲜的全球数据渗透运动](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527393&idx=2&sn=9923de4ef6d306281ce4fb13f253af1d)\n - [ ] [Operation Talent:FBI 查获 Nulled.to、Cracked.to、Sellix.io 等](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527393&idx=3&sn=2949b5b96b17ce834ae88fc78313dbb7)\n - [ ] [nt-load-order 第二部分 - 你想知道的更多内容](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247486806&idx=1&sn=cb4a4fbf16cf2ff7c0a99333cf155ca8)\n - [ ] [资讯 ｜ DeepSeek被曝数据泄漏](https://mp.weixin.qq.com/s?__biz=Mzg4MDkyMTE4OQ==&mid=2247489001&idx=1&sn=e965d2b7151b3b51e0b48dc264cc7cd2)\n - [ ] [DeepSeek被海外曝出严重聊天记录数据泄漏问题](https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650236959&idx=1&sn=0024f87794598ce60e345aa728e8a771)\n - [ ] [真假](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496860&idx=1&sn=dac3717d63b7496fc260f3d91e4d5ec0)\n - [ ] [越权漏洞实战漏洞报告](https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485094&idx=1&sn=300233e404ea534282f994bd51e38594)\n - [ ] [功能强大的XSS自动化扫描器](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489193&idx=1&sn=08b43c401df76f44cf749c44eb4af9c6)\n - [ ] [有网安需求记得找我](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489193&idx=2&sn=6c2c55bb757aa67cc9f21a6b40c6df40)\n - [ ] [30 - 使用DInvoke和Sliver规避OpenEDR并提升权限](https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615412&idx=1&sn=3c8990ffa72d3496df8110af3260a080)\n - [ ] [代码审计 | 如何获取CVE漏洞编号](https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547534&idx=1&sn=89f840ad1397911a18d5776cb54ed32c)\n - [ ] [俄罗斯APT组织 RomCom 再次出击，针对乌克兰政府和波兰实体的网络攻击升级！](https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485658&idx=1&sn=1811ccb336bf5596bc0376a10ebe3cbe)\n - [ ] [deepseek写的对联，总感觉有点不对劲🐶](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494633&idx=1&sn=644193027ce66213cffde32a42bad868)\n - [ ] [【已修复】DeepSeek数据库暴露，泄露包括聊天记录在内的敏感信息](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494633&idx=2&sn=62ef49860992fd84fbebc9fbae2d8839)\n - [ ] [Wiz研究发现暴露的DeepSeek数据库泄露敏感信息，包括聊天记录](https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487248&idx=1&sn=24a5ae9036da7d03afb83c9dd679255b)\n - [ ] [🐍年好~~嘶嘶嘶](https://mp.weixin.qq.com/s?__biz=MzU4Mzc4MDQyOQ==&mid=2247484414&idx=1&sn=0caae77933f7012d33420541deab9019)\n - [ ] [【2025春节】解题领红包活动开始喽，解出就送论坛币！\\\\n\\\\n第一题送分题有手就行（不需有脑，已有 1376 位会员完成此任务）。\\\\n\\\\n第二题 Windows 初级题 14点整 上线，题目很简单，如果你对逆向分析感兴趣，不妨借此机会自学尝试，让这次活动真正成为你技能提升的阶梯。](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141658&idx=1&sn=11067b00a771b8ee9bd4c4d0da1e8908)\n - [ ] [当DDoS成为DeepSeek的进化催化剂](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247488198&idx=1&sn=294befdcf4fe9033a98c6148815a0ec1)\n - [ ] [初二娘家暖 祥蛇护亲安](https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247520422&idx=1&sn=ca4a601872c8ca514160ea4117463939)\n - [ ] [本地部署 deepseek-r1 模型](https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247484010&idx=1&sn=d298326b0ef79202e6e0093216ebaa82)\n - [ ] [美军对DeepSeek“出手”了！DeepSeek遭恶意攻击，攻击IP均来自美国！](https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525698&idx=1&sn=131f65bb9cab76e179f85720d4c77212)\n - [ ] [大年初二 | 金蛇迎春，福“巳”绵延](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579270&idx=1&sn=07b4d333a5b2f57048e51d6aa8cc4224)\n - [ ] [太丢人了](https://mp.weixin.qq.com/s?__biz=Mzg5NjY4NDg1Nw==&mid=2247483948&idx=1&sn=c78c4f6b64f4e732bb3fcbe3684d3819)\n - [ ] [DeepSeek与其他大模型网络安全领域测评](https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485615&idx=1&sn=2faa9a9f50deaf18f69117424391d9a5)\n - [ ] [多次加密攻击](https://mp.weixin.qq.com/s?__biz=MzI1NzUxOTUzMA==&mid=2247485786&idx=1&sn=ef2f09bcc5eb7ecad5b545295bf5be21)\n - [ ] [2025网络暴露危机报告：45%第三方应用越权访问用户数据](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=1&sn=21db4a4d88530fd63cdb722001dad229)\n - [ ] [Banshee Stealer新变种正借Apple XProtect加密技术躲避杀毒软件](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=2&sn=428f13d4f84f8d084d6730cfab69b9cb)\n - [ ] [上千个恶意域名正在仿冒Reddit和WeTransfer](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=3&sn=e2d553ae7f7a6dab81dc2d0f81f9d42f)\n - [ ] [如何使用LDAPX动态检查和转换LDAP数据包](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313208&idx=4&sn=d1471190e17067ad31fd0a762ad813d1)\n - [ ] [Redis数据库主从复制RCE影响分析](https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037457&idx=1&sn=32e47044585804b9f31934fb3a7a3f5c)\n - [ ] [大年初二 画蛇添福](https://mp.weixin.qq.com/s?__biz=Mzg2MTU5ODQ2Mg==&mid=2247507174&idx=1&sn=af46b8c1bdd9e12e5913225f518e1e09)\n - [ ] [新年新挑战，红日安全不打烊！携手同行，保障数字世界，迎接无限机遇！💻💼](https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851771&idx=1&sn=e32da143725cb1281d784159a2d92a85)\n - [ ] [数字取证之数据收集u200c](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264859&idx=1&sn=5157da074859752737fca3e1377e830b)\n - [ ] [公众号爆款突破10万+是种什么体验？](https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247492229&idx=1&sn=fb6516c2c50768440203194bf072ef8f)\n - [ ] [网安原创文章推荐【2025/1/29】](https://mp.weixin.qq.com/s?__biz=MzAxNzg3NzMyNQ==&mid=2247489523&idx=1&sn=b774285745567a078a25412d369d42e3)\n - [ ] [Qwen 2.5横空出世：阿里大模型超越DeepSeek-V3](https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247486600&idx=1&sn=8759e5cb59a7ae3a10f4e360ae1343c8)\n - [ ] [DeepSeek已遭美西方全面围剿：各种放大后的问题及恶意舆论接踵而至](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507157&idx=1&sn=705ed2698837c80532fbdcaa33a20411)\n - [ ] [暗网情报6则：阿根廷电信公司数据泄露-260G登录凭证兜售-以色列国家安全部遭黑](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507157&idx=2&sn=32183d1acca665f6055c418febf0b72a)\n - [ ] [5th域安全微讯早报【20250130】026期](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507157&idx=3&sn=678b70aba584829d92026c69f41dad6a)\n - [ ] [DeepSeek与ChatGPT代码审计能力对比与分析](https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247488582&idx=1&sn=48f04da2ac9254f4e9bcaba0a14431a5)\n - [ ] [ScanV、ScanA：监测违规防患，事件安全无虞](https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870840&idx=1&sn=eb6c30950bf84dd86835312726abf657)\n - [ ] [阿里巴巴发布Qwen 2.5系列新模型，宣称超越 DeepSeek-V3](https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485776&idx=1&sn=73a8b2ee13adf483ccc862bea60a6657)\n - [ ] [知识星球持续更新](https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485776&idx=2&sn=6cab966e4a4f99fd7f1a7f60f7177a88)\n - [ ] [大年初二丨安天睿甲给您拜年了](https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650209904&idx=1&sn=2d3424335c5408deda2ab07b51876c54)\n - [ ] [初二 | 愿家人和和美美，吉祥安康！](https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497079&idx=1&sn=081d5bd8e78c90a7d1bcba0e251b48ea)\n - [ ] [记一次绕过阿里云waf与某不知名waf的双waf上传getshell](https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487348&idx=1&sn=2c7a4d59b64392a92053475c8096f285)\n - [ ] [正月初二| 有蛇有得 团团圆圆](https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506081&idx=1&sn=c7bc814576e63a573c12fae1a2f9aefe)\n - [ ] [捷普基础产品线，守护基础设施安全](https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506081&idx=2&sn=95cf7a673991ce095ee9525401f5f855)\n - [ ] [【焕新领先】捷普下一代防火墙](https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506081&idx=3&sn=0776637513dd08e8549e6e036951db3e)\n - [ ] [ISO 45001: 2018 标准详解与实施（11）6.1.3 法律法规要求和其他要求的确定](https://mp.weixin.qq.com/s?__biz=MzA5OTEyNzc1Nw==&mid=2247486050&idx=1&sn=2750be0dbb0d7015b92061bb993add86)\n - [ ] [初二](https://mp.weixin.qq.com/s?__biz=MzUyMjAyODU1NA==&mid=2247491947&idx=1&sn=1d01beee8ad4061189c478e349ef78d7)\n - [ ] [DeepSeek的强大，一句话让AI帮我写了个程序-流量安全分析研判工具](https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247490145&idx=1&sn=a932062265ad24982beeee1706d70d4d)\n - [ ] [大年初二 | 金蛇纳福，好事成双](https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650963505&idx=1&sn=b6d789ba930e09c363ebc1f9444849d6)\n - [ ] [正月初二归家暖！亚信安全祝大家蛇全蛇美，蛇行大运](https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620959&idx=1&sn=7d3ca2f816e618a8e9e764ebd74f3644)\n - [ ] [大年初二 二龙腾飞](https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135289&idx=1&sn=ccfa447f9bf7ccfdf2f578f6b4f71e1d)\n - [ ] [大年初二 | 眉开眼笑回娘家](https://mp.weixin.qq.com/s?__biz=Mzk0MDQ5MTQ4NA==&mid=2247487428&idx=1&sn=7f6bc2eb6c48e2d05a319a51de44f0c3)\n - [ ] [CIO启示录：技术管理如何突破效率天花板](https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247487724&idx=1&sn=992966ac782bfff5f58a78669566cd34)\n - [ ] [2025常见的网络安全服务大全（汇总详解）](https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247517988&idx=1&sn=71db8ddc34dbb5bd2e9fce7b232edaaf)\n - [ ] [初二：好运连连](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624762&idx=1&sn=47241d7f7296e0089b5da756046322f0)\n - [ ] [初二｜燃炮迎春盼福至 网站弹窗鉴虚实](https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247532957&idx=1&sn=9932467d97cae7cd76bdb1790358e7cc)\n - [ ] [【初二】安全一路相随 团聚近在眼前](https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650624574&idx=1&sn=d10e6d1823438874c6e7929eb90b1e97)\n - [ ] [2025年最可能的五种网络攻击，你的企业准备好了吗？](https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247487182&idx=1&sn=3c76f4710e63ed2414babafceda9eec1)\n - [ ] [诸葛亮教你如何应对APT攻击](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496849&idx=1&sn=d3276fd13b7a991e2e1c5cbbb41a3b4c)\n - [ ] [国自然中标真不难！十年评审专家1v1精修你的本子，中标率提升58%](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496849&idx=2&sn=41d0f5a68ff64924994dc39112bf9672)\n - [ ] [初二 | 姻缘美满](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493741&idx=1&sn=e36485b394ed47daf3a04225998efbe1)\n- Flexera Blog - Feed\n - [ ] [Cyber-Resilience regulations are here—is your organization ready?](https://www.flexera.com/blog/security/cyber-resilience-regulations-are-here-is-your-organization-ready/)\n- Twitter @bytehx\n - [ ] [Re @CristiVlad25 @SynackRedTeam Yes!](https://x.com/bytehx343/status/1884928882094268475)\n - [ ] [Thanks @SynackRedTeam](https://x.com/bytehx343/status/1884926738385580064)\n- Trail of Bits Blog\n - [ ] [PyPI now supports archiving projects](https://blog.trailofbits.com/2025/01/30/pypi-now-supports-archiving-projects/)\n- Securelist\n - [ ] [No need to RSVP: a closer look at the Tria stealer campaign](https://securelist.com/tria-stealer-collects-sms-data-from-android-devices/115295/)\n- Project Zero\n - [ ] [Windows Bug Class: Accessing Trapped COM Objects with IDispatch](https://googleprojectzero.blogspot.com/2025/01/windows-bug-class-accessing-trapped-com.html)\n - [ ] [Windows Exploitation Tricks: Trapping Virtual Memory Access (2025 Update)](https://googleprojectzero.blogspot.com/2025/01/windows-exploitation-tricks-trapping.html)\n- Malware-Traffic-Analysis.net - Blog Entries\n - [ ] [2025-01-30: XLoader infection](https://www.malware-traffic-analysis.net/2025/01/30/index.html)\n- Malwarebytes\n - [ ] [Microsoft advertisers phished via malicious Google ads](https://www.malwarebytes.com/blog/cybercrime/2025/01/microsoft-advertisers-phished-via-malicious-google-ads)\n - [ ] [The DeepSeek controversy: Authorities ask where does the data come from and how safe is it?](https://www.malwarebytes.com/blog/news/2025/01/the-deepseek-controversy-authorities-ask-where-the-data-comes-from-and-where-it-goes)\n- Reverse Engineering\n - [ ] [ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries [PDF]](https://www.reddit.com/r/ReverseEngineering/comments/1idxr88/resym_harnessing_llms_to_recover_variable_and/)\n - [ ] [Decompiling 2024: A Year of Resurgance in Decompilation Research](https://www.reddit.com/r/ReverseEngineering/comments/1idb0wg/decompiling_2024_a_year_of_resurgance_in/)\n - [ ] [arm64 PC-relative addressing fun](https://www.reddit.com/r/ReverseEngineering/comments/1idmknl/arm64_pcrelative_addressing_fun/)\n - [ ] [College Survey on AI-Enhanced Phishing and Cybersecurity Training Effectiveness](https://www.reddit.com/r/ReverseEngineering/comments/1idq68v/college_survey_on_aienhanced_phishing_and/)\n- Intigriti\n - [ ] [Power of the collective: Investing in the security researcher community for shared success](https://www.intigriti.com/blog/business-insights/power-of-the-collective-investing-in-the-security-researcher-community-for-shared)\n- Shostack & Friends Blog\n - [ ] [The Birth of the CVE System, on Hackers To Founders](https://shostack.org/blog/hackers-to-founders/)\n - [ ] [Hoarding, Debt and Threat Modeling](https://shostack.org/blog/hoarding-debt-and-threat-modeling/)\n- rtl-sdr.com\n - [ ] [Jeff Geerling Explores the CaribouLite Raspberry Pi Hat](https://www.rtl-sdr.com/jeff-geerling-explores-the-cariboulite-raspberry-pi-hat/)\n - [ ] [The Taylorator: Flooding the Broadcast FM Band with Taylor Swift Songs using a LimeSDR](https://www.rtl-sdr.com/the-taylorator-flooding-the-broadcast-fm-band-with-taylor-swift-songs-using-a-limesdr/)\n - [ ] [Video on the Basics of SDR for Hackers](https://www.rtl-sdr.com/video-on-the-basics-of-sdr-for-hackers/)\n- FreeBuf网络安全行业门户\n - [ ] [DeepSeek AI数据库泄露：超百万条日志和密钥曝光](https://www.freebuf.com/articles/420968.html)\n- 奇客Solidot–传递最新科技情报\n - [ ] [美国版权局称 AI 辅助作品如果包含足够的人类创意可获得版权保护](https://www.solidot.org/story?sid=80451)\n - [ ] [LibreOffice 下载量突破 4 亿](https://www.solidot.org/story?sid=80450)\n - [ ] [Debian 项目停止在 X 上发推](https://www.solidot.org/story?sid=80449)\n - [ ] [Douglas Engelbart 诞辰 100 周年](https://www.solidot.org/story?sid=80448)\n- 安全分析与研究\n - [ ] [Fake CAPTCHA攻击技术](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490238&idx=1&sn=f7929631aed8f88ecb74b428362ec4eb&chksm=902fb596a7583c80a17cb1f35f04930cd0fa4f66251be8f81b04a1801ee9d2f8725ffb4bda0c&scene=58&subscene=0#rd)\n- 锦行科技\n - [ ] [初二 | 姻缘美满](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247493741&idx=1&sn=e36485b394ed47daf3a04225998efbe1&chksm=979a13c8a0ed9ade19f74ca917b1703c7b395367c03069fe1b164a21f581251495a707ffdfa8&scene=58&subscene=0#rd)\n- Black Hills Information Security\n - [ ] [Questions From a Beginner Threat Hunter](https://www.blackhillsinfosec.com/questions-from-a-beginner-threat-hunter/)\n- 红日安全\n - [ ] [新年新挑战，红日安全不打烊！携手同行，保障数字世界，迎接无限机遇！💻💼](https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851771&idx=1&sn=e32da143725cb1281d784159a2d92a85&chksm=f3e4e9f8c49360ee9f066a43959bd3732de37e27ca245ce7717817dc356c25315b6e3cd90820&scene=58&subscene=0#rd)\n- 吾爱破解论坛\n - [ ] [【2025春节】解题领红包活动开始喽，解出就送论坛币！\n\n第一题送分题有手就行（不需有脑，已有 1376 位会员完成此任务）。\n\n第二题 Windows 初级题 14点整 上线，题目很简单，如果你对逆向分析感兴趣，不妨借此机会自学尝试，让这次活动真正成为你技能提升的阶梯。](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141658&idx=1&sn=11067b00a771b8ee9bd4c4d0da1e8908&chksm=bd50a64e8a272f589319d04410866e550b8792cd73b49c0eecc8abb4df9996d504f306e3b43c&scene=58&subscene=0#rd)\n- 安全内参\n - [ ] [针对DeepSeek的网络攻击再升级：僵尸网络进场 攻击指令激增上百倍​](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513623&idx=1&sn=d0d49c0d4b6e85b4dd8aacd8623ca272&chksm=ebfaf137dc8d782175c2209f64fe50b91bf2c7ff519b1be99b56d7f5f4f3171fe8cb575f539a&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [我合理怀疑，春晚节目组混进了 B 站的人](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073042&idx=1&sn=e5673315f8ee79ebe9dd7e1d2616c261&chksm=7e57d32449205a32ea25640d2639fcc099fe5048fbdbbc484c363f514ec6a87a0fa0321f07d2&scene=58&subscene=0#rd)\n - [ ] [美国对 DeepSeek 开展国家安全调查；传 DS 训练模型绕过英伟达 CUDA；春节档刷新初一票房纪录 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653073041&idx=1&sn=f9ec93124dfcfa3b5d40259ab4c2c990&chksm=7e57d32749205a310d8f135837f52b88af79c3c4cfa6f0101b33a99b48b746b953b3373c0e88&scene=58&subscene=0#rd)\n- 白帽子章华鹏\n - [ ] [DeepSeek被海外曝出严重聊天记录数据泄漏问题](https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650236959&idx=1&sn=0024f87794598ce60e345aa728e8a771&chksm=f04ad2a3c73d5bb52eb2a39504865a355749cee5228d9bcaa1078cab5387d5509791a0eafeb4&scene=58&subscene=0#rd)\n- 墨菲安全\n - [ ] [DeepSeek因软件供应链安全问题导致严重聊天记录数据泄漏](https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488049&idx=1&sn=377ab6f02bf6685c6ecd606923242cc3&chksm=c13d7109f64af81f818a52b31171cec774bb86a531f1405b24c020869c281e0865f573e9c6a6&scene=58&subscene=0#rd)\n- 迪哥讲事\n - [ ] [深入浅出API测试｜搜集分析与漏洞挖掘实战](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496981&idx=1&sn=1b88708a474086d96cf22a9428c93835&chksm=e8a5ff76dfd276605ae35037c735c6cb3cb39f0962d2b476be2284664584944a6e21d112112a&scene=58&subscene=0#rd)\n- bellingcat\n - [ ] [Neo-Nazis Linked to “Terrorist Activities” to Host Budapest Concert](https://www.bellingcat.com/news/2025/01/30/neo-nazis-linked-to-terrorist-activities-to-host-budapest-concert/)\n- M01N Team\n - [ ] [AI风险分析 | Grok提示词泄露前后暗藏玄机](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494054&idx=1&sn=9122e0562bcad42ee707e0879b945aa1&chksm=c18429b7f6f3a0a16b65fc9b18ee5c979853c462ea1f43800abab53c6e5bc3e5d73dc9c1c540&scene=58&subscene=0#rd)\n- 360数字安全\n - [ ] [大年初二 | 金蛇迎春，福“巳”绵延](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579270&idx=1&sn=07b4d333a5b2f57048e51d6aa8cc4224&chksm=9f8d268ea8faaf982879ec311f767c0e01c96d6b31f504cb5edd372b41e9ddedf3659c61e603&scene=58&subscene=0#rd)\n- Full Disclosure\n - [ ] [Quorum onQ OS - 6.0.0.5.2064 | Reflected Cross Site Scripting\t(XSS) | CVE-2024-44449](https://seclists.org/fulldisclosure/2025/Jan/23)\n - [ ] [Deepseek writes textbook insecure code in 2025-01-28](https://seclists.org/fulldisclosure/2025/Jan/22)\n - [ ] [Text injection on https://www.google.com/sorry/index via ?q parameter (no XSS)](https://seclists.org/fulldisclosure/2025/Jan/21)\n- Securityinfo.it\n - [ ] [Privacy dei dati: la maggior parte degli utenti teme una violazione](https://www.securityinfo.it/2025/01/30/privacy-dei-dati-la-maggior-parte-degli-utenti-teme-una-violazione/?utm_source=rss&utm_medium=rss&utm_campaign=privacy-dei-dati-la-maggior-parte-degli-utenti-teme-una-violazione)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #733: Test Kitchen building cloud tools with cursor](https://www.hecfblog.com/2025/01/daily-blog-733-test-kitchen-building.html)\n- Have I Been Pwned latest breaches\n - [ ] [Speedio (unverified) - 27,501,041 breached accounts](https://haveibeenpwned.com/PwnedWebsites#Speedio)\n- The Hacker News\n - [ ] [Google: Over 57 Nation-State Threat Groups Using AI for Cyber Operations](https://thehackernews.com/2025/01/google-over-57-nation-state-threat.html)\n - [ ] [Authorities Seize Domains of Popular Hacking Forums in Major Cybercrime Crackdown](https://thehackernews.com/2025/01/authorities-seize-domains-of-popular.html)\n - [ ] [Lightning AI Studio Vulnerability Allowed RCE via Hidden URL Parameter](https://thehackernews.com/2025/01/lightning-ai-studio-vulnerability.html)\n - [ ] [SOC Analysts - Reimagining Their Role Using AI](https://thehackernews.com/2025/01/soc-analysts-reimagining-their-role.html)\n - [ ] [DeepSeek AI Database Exposed: Over 1 Million Log Lines, Secret Keys Leaked](https://thehackernews.com/2025/01/deepseek-ai-database-exposed-over-1.html)\n - [ ] [Unpatched PHP Voyager Flaws Leave Servers Open to One-Click RCE Exploits](https://thehackernews.com/2025/01/unpatched-php-voyager-flaws-leave.html)\n - [ ] [New Aquabot Botnet Exploits CVE-2024-41710 in Mitel Phones for DDoS Attacks](https://thehackernews.com/2025/01/new-aquabot-botnet-exploits-cve-2024.html)\n- Deeplinks\n - [ ] [Executive Order to the State Department Sideswipes Freedom Tools, Threatens Censorship Resistance, Privacy, and Anonymity of Millions](https://www.eff.org/deeplinks/2025/01/executive-order-state-department-sideswipes-freedom-tools-threatens-censorship)\n - [ ] [The Internet Never Forgets: Fighting the Memory Hole](https://www.eff.org/deeplinks/2025/01/internet-never-forgets-fighting-memory-hole)\n - [ ] [Protect Your Privacy on Bumble](https://www.eff.org/deeplinks/2025/01/protect-your-privacy-bumble)\n- Security Affairs\n - [ ] [DeepSeek database exposed highly sensitive information](https://securityaffairs.com/173666/data-breach/deepseek-db-exposed-highly-sensitive-information.html)\n - [ ] [TeamViewer fixed a vulnerability in Windows client and host applications](https://securityaffairs.com/173658/security/teamviewer-windows-client-flaw.html)\n - [ ] [Operation Talent: An international law enforcement operation seized Cracked, Nulled and other cybercrime websites](https://securityaffairs.com/173651/cyber-crime/operation-talent-seized-cracked-nulled-cybercrime-websites.html)\n - [ ] [PHP package Voyager flaws expose to one-click RCE exploits](https://securityaffairs.com/173646/hacking/php-package-voyager-flaws.html)\n - [ ] [Italy’s Data Protection Authority Garante requested information from Deepseek](https://securityaffairs.com/173637/digital-id/italys-garante-requested-information-from-deepseek.html)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Backdoor found in two healthcare patient monitors, linked to IP in China](https://www.bleepingcomputer.com/news/security/backdoor-found-in-two-healthcare-patient-monitors-linked-to-ip-in-china/)\n - [ ] [Lawmakers push for guardrails, deadline on cyber military study](https://therecord.media/lawmakers-push-for-guardrails-deadline-cyber-force-study)\n - [ ] [Google blocked 2.36 million risky Android apps from Play Store in 2024](https://www.bleepingcomputer.com/news/security/google-blocked-236-million-risky-android-apps-from-play-store-in-2024/)\n - [ ] [States with laws requiring data brokers to register are ramping up enforcement](https://therecord.media/state-data-broker-registry-laws-fines-warnings)\n - [ ] [Gabbard grilled over Snowden comments during Senate confirmation hearing](https://therecord.media/gabbard-grilled-over-snowden-comments-senate-confirmation-hearing)\n - [ ] [US Justice Department says cybercrime forum allegedly affected 17 million Americans](https://techcrunch.com/2025/01/30/us-justice-department-says-cybercrime-forum-allegedly-affected-17-million-americans/)\n - [ ] [Defeating Future Threats Starts Today](https://blog.talosintelligence.com/defeating-future-threats-starts-today/)\n - [ ] [Ransomware attack disrupts New York blood donation giant](https://www.bleepingcomputer.com/news/security/ransomware-attack-disrupts-new-york-blood-donation-giant/)\n - [ ] [Infrastructure Laundering: Blending in with the Cloud](https://krebsonsecurity.com/2025/01/infrastructure-laundering-blending-in-with-the-cloud/)\n - [ ] [Ransomware attack on New York Blood Center forces workarounds, drive cancellations](https://therecord.media/ransomware-attack-new-york-blood-center-forces-workarounds)\n - [ ] [DeepSeek exposes database with over 1 million chat records](https://www.bleepingcomputer.com/news/security/deepseek-exposes-database-with-over-1-million-chat-records/)\n - [ ] [International police coalition takes down two prolific cybercrime and hacking forums](https://techcrunch.com/2025/01/30/international-police-coalition-takes-down-two-prolific-cybercrime-and-hacking-forums/)\n - [ ] [Police take down two large cybercrime forums, arrest suspects](https://therecord.media/cybercrime-forums-cracked-nulled-takedowns-arrests)\n - [ ] [Major GitHub outage affects pull requests and other services](https://www.bleepingcomputer.com/news/technology/major-github-outage-affects-pull-requests-and-other-services/)\n - [ ] [The Advantages of Cloud-Based Remote Desktop versus RDP over VPN](https://www.bleepingcomputer.com/news/security/the-advantages-of-cloud-based-remote-desktop-versus-rdp-over-vpn/)\n - [ ] [(Un)Happy Trails](https://bfore.ai/unhappy-trails-travel-related-scams-and-what-travel-vendors-can-do-to-protect-their-customers/)\n - [ ] [New Syncjacking attack hijacks devices using Chrome extensions](https://www.bleepingcomputer.com/news/security/new-syncjacking-attack-hijacks-devices-using-chrome-extensions/)\n - [ ] [bedevil: Dynamic Linker Patching](http://localhost:1313/posts/bedevil_dynamic_linker_patching/)\n - [ ] [Hack.lu: In-Depth Study of Linux Rootkits: Evolution, Detection, and Defense](http://localhost:1313/talks/hack.lu_rootkits_2024/)\n - [ ] [Hack.lu: The Gist of Hundreds of Incident Response Cases](http://localhost:1313/talks/hack.lu_gist_2024/)\n - [ ] [Reptile's Custom Kernel-Module Launcher](http://localhost:1313/posts/reptile_launcher/)\n - [ ] [BSides Munich: /proc for Security Analysts](http://localhost:1313/talks/bsides_munich_2024/)\n - [ ] [DeepSec: RAT Builders - How to catch them all](http://localhost:1313/talks/deepsec_2024/)\n - [ ] [Shell Script Compiler (shc)](http://localhost:1313/posts/shell_script_compiler/)\n - [ ] [Today I Learned - setfacl](http://localhost:1313/posts/today_i_learned_setfacl/)\n - [ ] [Analysis of Python's .pth files as a persistence mechanism](http://localhost:1313/posts/publish_python_pth_extension/)\n - [ ] [Tear Down The Castle - Part 1](http://localhost:1313/posts/tear_down_castle_part_one/)\n - [ ] [Oh my .. ! - Suspicious network traffic detected including Ransomware](http://localhost:1313/posts/suspicious_network_traffic_ransomware/)\n - [ ] [Tear Down The Castle - Part 2](http://localhost:1313/posts/tear_down_castle_part_two/)\n - [ ] [Follow-Up: Alibaba’s Qwen2.5-VL Model is Also Vulnerable to Prompt Attacks](https://www.kelacyber.com/blog/follow-up-alibabas-qwen2-5-vl-model-is-also-vulnerable-to-prompt-attacks/)\n - [ ] [Police seizes Cracked and Nulled hacking forum servers, arrests suspects](https://www.bleepingcomputer.com/news/security/police-seizes-cracked-and-nulled-hacking-forum-servers-arrests-suspects/)\n - [ ] [Microsoft lifts Windows 11 update block for PCs with gaming issues](https://www.bleepingcomputer.com/news/microsoft/microsoft-lifts-windows-11-update-block-for-pcs-with-gaming-issues/)\n - [ ] [Common OAuth Vulnerabilities](https://blog.doyensec.com/2025/01/30/oauth-common-vulnerabilities.html)\n - [ ] [DeepSeek’s Growing Influence Sparks a Surge in Frauds and Phishing Attacks](https://cyble.com/blog/deepseeks-growing-influence-sparks-a-surge-in-frauds-and-phishing-attacks/)\n - [ ] [Time Bandit ChatGPT jailbreak bypasses safeguards on sensitive topics](https://www.bleepingcomputer.com/news/security/time-bandit-chatgpt-jailbreak-bypasses-safeguards-on-sensitive-topics/)\n - [ ] [Comunicare per proteggere: strategie e strumenti per implementare i requisiti ISO 27001](https://www.cybersecurity360.it/legal/comunicare-per-proteggere-strategie-e-strumenti-per-implementare-i-requisiti-iso-27001/)\n - [ ] [Bilanciare i rischi di security beneficiando di tecnologie di AI: fra opportunità e rischi](https://www.cybersecurity360.it/news/bilanciare-i-rischi-di-security-beneficiando-di-tecnologie-di-ai-fra-opportunita-e-rischi/)\n - [ ] [DeepSeek: i timori per la privacy e la cyber security](https://www.cybersecurity360.it/cultura-cyber/deepseek-i-timori-per-la-privacy-e-la-cyber-security/)\n - [ ] [DeepSeek, serve cautela: ci sono pericoli per la sicurezza](https://www.cybersecurity360.it/news/deepseek-usarlo-con-cautela-ci-sono-pericoli-per-la-sicurezza/)\n - [ ] [Smishing a tema Poste Italiane: i dettagli e come difendersi](https://www.cybersecurity360.it/news/smishing-a-tema-poste-italiane-i-dettagli-e-come-difendersi/)\n - [ ] [Più cyber attacchi nel 2024. E nel 2025 il trend non si fermerà](https://www.cybersecurity360.it/outlook/piu-cyber-attacchi-nel-2024-e-nel-2025-il-trend-non-si-fermera/)\n - [ ] [I cyber rischi in azienda che (anche) gli italiani non comprendono](https://www.cybersecurity360.it/news/i-cyber-rischi-in-azienda-che-anche-gli-italiani-non-comprendono/)\n - [ ] [Le chat WhatsApp sono corrispondenza da tutelare: i paletti privacy della Cassazione](https://www.cybersecurity360.it/news/le-chat-whatsapp-sono-corrispondenza-da-tutelare-i-paletti-privacy-della-cassazione/)\n - [ ] [Decentraleyes potenzia la privacy online: vantaggi e limiti](https://www.cybersecurity360.it/soluzioni-aziendali/decentraleyes-potenzia-la-privacy-online-vantaggi-e-limiti/)\n - [ ] [Il controllo del dipendente da parte del datore di lavoro: le sfide per la privacy](https://www.cybersecurity360.it/legal/privacy-dati-personali/il-controllo-del-dipendente-da-parte-del-datore-di-lavoro-le-sfide-per-la-privacy/)\n - [ ] [Talos IR trends Q4 2024: Web shell usage and exploitation of public-facing applications spike](https://blog.talosintelligence.com/talos-ir-trends-q4-2024/)\n - [ ] [UK, US Introduce “Content Credentials” Labeling to Counter Deepfakes, Misinformation in the Age of AI](https://cyble.com/blog/uk-us-introduce-content-credentials-labeling/)\n - [ ] [Speedio (unverified) - 27,501,041 breached accounts](https://haveibeenpwned.com/PwnedWebsites#Speedio)\n - [ ] [ICS Vulnerability Report: Cyble Urges Critical mySCADA Fixes](https://cyble.com/blog/ics-vulnerability-report-cyble-urges-critical-myscada-fixes/)\n- Social Engineering\n - [ ] [\"Humans Aren’t the Weakest Link, They’re the Strongest Layer in Cybersecurity\"](https://www.reddit.com/r/SocialEngineering/comments/1idqop9/humans_arent_the_weakest_link_theyre_the/)\n - [ ] [How to better at socialising?](https://www.reddit.com/r/SocialEngineering/comments/1idam33/how_to_better_at_socialising/)\n- Schneier on Security\n - [ ] [Fake Reddit and WeTransfer Sites are Pushing Malware](https://www.schneier.com/blog/archives/2025/01/fake-reddit-and-wetransfer-sites-are-pushing-malware.html)\n- Technical Information Security Content & Discussion\n - [ ] [The Slow Death of OCSP](https://www.reddit.com/r/netsec/comments/1idvdv5/the_slow_death_of_ocsp/)\n - [ ] [Practising Heap Exploitation: Using House Of Force Technique with Practicals](https://www.reddit.com/r/netsec/comments/1idm8tr/practising_heap_exploitation_using_house_of_force/)\n - [ ] [WebAssembly and security: a review](https://www.reddit.com/r/netsec/comments/1idnsqk/webassembly_and_security_a_review/)\n - [ ] [A short Introduction to BloodHound Custom Queries](https://www.reddit.com/r/netsec/comments/1idlm4q/a_short_introduction_to_bloodhound_custom_queries/)\n - [ ] [CVE-2024-46506: Unauthenticated RCE in NetAlertx](https://www.reddit.com/r/netsec/comments/1idsuzx/cve202446506_unauthenticated_rce_in_netalertx/)\n- Graham Cluley\n - [ ] [Smashing Security podcast #402: Hackers get hacked, the British Museum IT shutdown, and social media kidnaps](https://grahamcluley.com/smashing-security-podcast-402-hackers-get-hacked-the-british-museum-it-shutdown-and-social-media-kidnaps/)\n- netsecstudents: Subreddit for students studying Network Security and its related subjects\n - [ ] [GCP Red Teaming / Pentesting Certifications](https://www.reddit.com/r/netsecstudents/comments/1idjlk4/gcp_red_teaming_pentesting_certifications/)\n- Krebs on Security\n - [ ] [Infrastructure Laundering: Blending in with the Cloud](https://krebsonsecurity.com/2025/01/infrastructure-laundering-blending-in-with-the-cloud/)\n- Krypt3ia\n - [ ] [Threat Report: Risks and Considerations of Storing Corporate Security Telemetry in EDR Vendor Cloud Instances](https://krypt3ia.wordpress.com/2025/01/30/threat-report-risks-and-considerations-of-storing-corporate-security-telemetry-in-edr-vendor-cloud-instances/)\n - [ ] [Krypt3ia Daily Cyber Threat Intelligence (CTI) Digest](https://krypt3ia.wordpress.com/2025/01/30/krypt3ia-daily-cyber-threat-intelligence-cti-digest-6/)\n- Your Open Hacker Community\n - [ ] [Everything is hacked 😊](https://www.reddit.com/r/HowToHack/comments/1ie17ff/everything_is_hacked/)\n - [ ] [Phones that are open to connecting via Bluetooth](https://www.reddit.com/r/HowToHack/comments/1idms17/phones_that_are_open_to_connecting_via_bluetooth/)\n - [ ] [Most Effective learning path to Reverse engineer network server of old games?](https://www.reddit.com/r/HowToHack/comments/1ids89n/most_effective_learning_path_to_reverse_engineer/)\n - [ ] [Is there any website I can use to convert a large amount of passwords into Hashes (in batch)?](https://www.reddit.com/r/HowToHack/comments/1idu982/is_there_any_website_i_can_use_to_convert_a_large/)\n - [ ] [Finding an array of class instances using Cheat Engine?](https://www.reddit.com/r/HowToHack/comments/1idh9ob/finding_an_array_of_class_instances_using_cheat/)\n - [ ] [Free course](https://www.reddit.com/r/HowToHack/comments/1idm5ny/free_course/)\n - [ ] [Cheat engine?](https://www.reddit.com/r/HowToHack/comments/1idu18m/cheat_engine/)\n - [ ] [Who has dark web AI?](https://www.reddit.com/r/HowToHack/comments/1idtmsb/who_has_dark_web_ai/)\n - [ ] [Question](https://www.reddit.com/r/HowToHack/comments/1ide7pg/question/)\n - [ ] [I want to hack like elliot from mister robot](https://www.reddit.com/r/HowToHack/comments/1idwvv2/i_want_to_hack_like_elliot_from_mister_robot/)\n - [ ] [Tips for Copying and Pasting from Apps That Restrict It](https://www.reddit.com/r/HowToHack/comments/1idg62q/tips_for_copying_and_pasting_from_apps_that/)\n - [ ] [Can I duplicate a SIM card?](https://www.reddit.com/r/HowToHack/comments/1idihtl/can_i_duplicate_a_sim_card/)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [PCAPs or It Didn't Happen: Exposing an Old Netgear Vulnerability Still Active in 2025 [Guest Diary], (Thu, Jan 30th)](https://isc.sans.edu/diary/rss/31638)\n - [ ] [ISC Stormcast For Thursday, January 30th, 2025 https://isc.sans.edu/podcastdetail/9302, (Thu, Jan 30th)](https://isc.sans.edu/diary/rss/31636)\n- Deep Web\n - [ ] [My friend stumbled upon these while gliding at dark web.](https://www.reddit.com/r/deepweb/comments/1idlmuj/my_friend_stumbled_upon_these_while_gliding_at/)\n- Information Security\n - [ ] [Change Healthcare data breach – how to protect yourself](https://www.reddit.com/r/Information_Security/comments/1idnbgn/change_healthcare_data_breach_how_to_protect/)\n - [ ] [College Survey on AI-Enhanced Phishing and Cybersecurity Training Effectiveness](https://www.reddit.com/r/Information_Security/comments/1idq592/college_survey_on_aienhanced_phishing_and/)\n - [ ] [CIS standards for CyberArk](https://www.reddit.com/r/Information_Security/comments/1idn856/cis_standards_for_cyberark/)\n - [ ] [What is SHEIN doing to our data?](https://www.reddit.com/r/Information_Security/comments/1idgkn6/what_is_shein_doing_to_our_data/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [Cred Vaults, Cheap AI, and Hacking Devices - Matt Bishop - PSW #859](http://sites.libsyn.com/18678/cred-vaults-cheap-ai-and-hacking-devices-matt-bishop-psw-859)\n"}}, "archive/tmp/2025-02-28.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747346.5692432, "n": 58217, "h": "f612dfb843d5ce7a", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-02-27 Review\": \"http://www.sec-wiki.com/?2025-02-27\"\n },\n \"Trustwave Blog\": {\n \"Bridging the Gap: Why IT and OT Convergence is Reshaping Manufacturing\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/bridging-the-gap-why-it-and-ot-convergence-is-reshaping-manufacturing/\"\n },\n \"博客园 - sevck\": {\n \"AI安全-模型用户输入注入 - sevck\": \"https://www.cnblogs.com/sevck/p/18741695\"\n },\n \"奇安信攻防社区\": {\n \"渗透测试JS接口Fuzz场景研究\": \"https://forum.butian.net/share/4163\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"Library-Card-System V 1.0 | Add Picture/Signature - signup.php | Unrestricted File Upload | Found By Maloy Roy Orko\": \"https://cxsecurity.com/issue/WLB-2025020018\",\n \"Needyamin | Library-Card-System 1.0 | card.php?id= SQL Injection | Found By Maloy Roy Orko\": \"https://cxsecurity.com/issue/WLB-2025020017\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"CVE-2025-20029：F5 BIG-IP系统发现命令注入漏洞，概念验证已发布\": \"https://www.anquanke.com/post/id/304828\",\n \"Palo Alto Networks Unit 42 发布了 2025 全球事件响应报告\": \"https://www.anquanke.com/post/id/304825\",\n \"警惕！银狐木马“盯上”DeepSeek本地化部署工具\": \"https://www.anquanke.com/post/id/304817\",\n \"企业安全浏览器领域领导者 Menlo Security 宣布收购 Votiro\": \"https://www.anquanke.com/post/id/304814\",\n \"NVIDIA针对Jetson AGX Orin和IGX Orin发布安全更新，以修复UEFI漏洞（CVE-2024-0148）\": \"https://www.anquanke.com/post/id/304809\",\n \"Bybit遭窃事件：Safe{Wallet}漏洞被利用，14亿美元以太坊被盗\": \"https://www.anquanke.com/post/id/304806\",\n \"CVE-2025-0514：LibreOffice缺陷或致恶意文件意外运行\": \"https://www.anquanke.com/post/id/304803\",\n \"Nozomi 报告显示澳大利亚在全球网络安全攻击排行榜中位列第四\": \"https://www.anquanke.com/post/id/304800\",\n \"勒索软件策略持续演变，MSPs面临严峻挑战\": \"https://www.anquanke.com/post/id/304797\",\n \"趋势科技推出用于主动预防威胁的人工智能模型\": \"https://www.anquanke.com/post/id/304794\"\n },\n \"paper - Last paper\": {\n \"DeepSeek 启示：深度揭秘基于 PTX 的 GPU 底层优化技术\": \"https://paper.seebug.org/3294/\",\n \"银狐突袭！DeepSeek本地化部署暗藏“致命陷阱”\": \"https://paper.seebug.org/3293/\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Thu Feb 27 20:26:17 UTC 2025\": \"https://github.com/trickest/cve/commit/845a3cd045d627b36c38b51bfae429b1bb2e90be\",\n \"Update Thu Feb 27 12:36:56 UTC 2025\": \"https://github.com/trickest/cve/commit/8775b05579bffbc933be959717d524a32dc74c54\",\n \"Update Thu Feb 27 04:38:18 UTC 2025\": \"https://github.com/trickest/cve/commit/aeeabed8b199f0fda558bf160413a7c8f6e3d298\"\n },\n \"ElcomSoft blog\": {\n \"NVIDIA Blackwell is Out: Should You Upgrade?\": \"https://blog.elcomsoft.com/2025/02/nvidia-blackwell-is-out-should-you-upgrade/\"\n },\n \"Security Boulevard\": {\n \"Morpheus: Building Dynamic, Context-Specific Response Playbooks with AI\": \"https://securityboulevard.com/2025/02/morpheus-building-dynamic-context-specific-response-playbooks-with-ai/\",\n \"Optimistic About Future Cybersecurity Trends?\": \"https://securityboulevard.com/2025/02/optimistic-about-future-cybersecurity-trends/\",\n \"Do Powerful Tools Enhance Your Data Security?\": \"https://securityboulevard.com/2025/02/do-powerful-tools-enhance-your-data-security/\",\n \"Is Your NHI Lifecycle Management Capable?\": \"https://securityboulevard.com/2025/02/is-your-nhi-lifecycle-management-capable/\",\n \"CMMC is Here: Simplifying Compliance with Enclaves\": \"https://securityboulevard.com/2025/02/cmmc-is-here-simplifying-compliance-with-enclaves/\",\n \"The Future of Auditing: What to Look for in 2025\": \"https://securityboulevard.com/2025/02/the-future-of-auditing-what-to-look-for-in-2025/\",\n \"Executive Perspectives, Episode 5, Meagan Fitzsimmons\": \"https://securityboulevard.com/2025/02/executive-perspectives-episode-5-meagan-fitzsimmons/\",\n \"“Emergent Misalignment” in LLMs\": \"https://securityboulevard.com/2025/02/emergent-misalignment-in-llms/\",\n \"Comic Agilé – Luxshan Ratnaravi, Mikkel Noe-Nygaard – #327 – Including QA Tasks At Sprint Planning\": \"https://securityboulevard.com/2025/02/comic-agile-luxshan-ratnaravi-mikkel-noe-nygaard-327-including-qa-tasks-at-sprint-planning/\",\n \"What is a Cloud HSM? Understanding Cloud Hardware Security Module (HSM) Advantages Compared with On-Premises HSMs\": \"https://securityboulevard.com/2025/02/what-is-a-cloud-hsm-understanding-cloud-hardware-security-module-hsm-advantages-compared-with-on-premises-hsms/\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"攻击DeepSeek的僵尸网络HailBot的三个变种分析\": \"https://www.4hou.com/posts/ommL\",\n \"2024年活跃勒索攻击组织盘点\": \"https://www.4hou.com/posts/PGlA\",\n \"潜伏8大高危指令！仿冒DeepSeek竟能远程开启VNC监控，你的手机可能成为肉鸡\": \"https://www.4hou.com/posts/W1vE\",\n \"幽灵勒索软件入侵了 70 个国家的组织机构\": \"https://www.4hou.com/posts/yz56\",\n \"名为“StaryDobry”的大规模恶意软件活动爆发\": \"https://www.4hou.com/posts/wx5r\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"Text Manipulation Tools for Linux and Windows\": \"https://infosecwriteups.com/text-manipulation-tools-for-blue-team-7cef34c1e02a?source=rss----7b722bfd1b8d---4\",\n \"JUST CRASHED SYSTEM USING IMAGE AND GOT BOUNTY $ 500\": \"https://infosecwriteups.com/just-crashed-system-using-image-and-got-bounty-500-eb30dc4b85a5?source=rss----7b722bfd1b8d---4\",\n \"How do you install and run LLMs such as deepseek-r1 locally?\": \"https://infosecwriteups.com/how-do-you-install-and-run-llms-such-as-deepseek-r1-locally-2fde58d1e4bf?source=rss----7b722bfd1b8d---4\",\n \"HTB: Cyber Apocalypse 2024 — Pet Companion\": \"https://infosecwriteups.com/htb-cyber-apocalypse-2024-pet-companion-b9c289efc448?source=rss----7b722bfd1b8d---4\",\n \"Spring Boot Is Moving Away from @Autowired – Here’s What You Should Do Instead!\": \"https://infosecwriteups.com/spring-boot-is-moving-away-from-autowired-heres-what-you-should-do-instead-890cd16ca3dd?source=rss----7b722bfd1b8d---4\",\n \"Bypassing AWS S3 Bucket Restrictions: Security Testing Techniques\": \"https://infosecwriteups.com/bypassing-aws-s3-bucket-restrictions-security-testing-techniques-63fe75aa9ff8?source=rss----7b722bfd1b8d---4\",\n \"$100-$20k worth Stored XSS Vulnerability | Hidden Methods\": \"https://infosecwriteups.com/100-20k-worth-stored-xss-vulnerability-hidden-methods-e56fe57437c4?source=rss----7b722bfd1b8d---4\",\n \"$500-$20k worth GraphQL Vulnerabilities | Advanced Tips & Tricks\": \"https://infosecwriteups.com/500-20k-worth-graphql-vulnerabilities-advanced-tips-tricks-74e8f4679b91?source=rss----7b722bfd1b8d---4\",\n \"CVE-2025–1094: PostgreSQL Injection Vulnerability Exploit\": \"https://infosecwriteups.com/cve-2025-1094-postgresql-sql-injection-vulnerability-exploit-2acf37ae399a?source=rss----7b722bfd1b8d---4\",\n \"Finding an easy bug in the profile picture field.\": \"https://infosecwriteups.com/finding-an-easy-bug-in-the-profile-picture-field-122a7aca2b42?source=rss----7b722bfd1b8d---4\"\n },\n \"Doonsec's feed\": {\n \"完善数据流通安全治理机制 促进数据高质量发展\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485724&idx=1&sn=a37a101e19dc53394c2d7a1cdf666882\",\n \"【直卖实拍】北七家3居变4居豪装，理想楼层、户型、朝向\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485724&idx=2&sn=74640bae2948836a9640d7439a87bd06\",\n \"【干货】笑傲职场的独家经验（1）\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485724&idx=3&sn=074796ed19fd76de6158809deeee0a37\",\n \"【干货原创】实网攻防演习常态化，会带来什么变化01\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485724&idx=4&sn=da50c42fe00c36855a77742b4a9677ee\",\n \"【干货原创】K12教育，鲜为人知的模式秘密\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485724&idx=5&sn=fcf6d84e59536cae5065a5747f31f332\",\n \"钓鱼攻击通过PDF文档暗投后门病毒\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524506&idx=1&sn=d74006a215de392a907da006f6e67d8b\",\n \"实战案例分享:微信小程序抓包（简单详细易上手版）\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MTcyMTc5Nw==&mid=2247488493&idx=1&sn=a33b931700102ae3ce9eef7de2021cc8\",\n \"梆梆安全谭阳：API安全防护要做到“端到端”和“全渠道”\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135261&idx=1&sn=bd32624342195ab42741a6317f8caa07\",\n \"黑客的钥匙：无线门禁攻防实战\": \"https://mp.weixin.qq.com/s?__biz=MzU2NjI5NzY1OA==&mid=2247512484&idx=1&sn=c55b4a7c114aca61059c7f3339c0988b\",\n \"轻松学会Java代码审计之实战案例第1天\": \"https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247492751&idx=1&sn=d3af075207eb85ef6477d97344b23081\",\n \"手机App数据包抓包实战\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MzQxODc3NA==&mid=2247484347&idx=1&sn=58d9782ee4c27b6640b342fc612de3e2\",\n \"鄂尔多斯两单位因网络安全问题被网信办约谈\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490510&idx=1&sn=e90e9e749a383d30dd0f660ee021071d\",\n \"亚信安全发布2024年业绩快报：扭亏为盈\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490510&idx=2&sn=95640a24830e5b47978deb7892db8f72\",\n \"某开源OA白名单后缀限制下巧用系统设计getshell\": \"https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247510819&idx=1&sn=2faaa1d3549b8ba60ef736ea081825c7\",\n \"安全简讯（2025.02.27）\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500800&idx=1&sn=551bb30026bf943caada7726d8697fa3\",\n \"【漏洞通告】Veeam Backup Enterprise Manager身份验证绕过漏洞（CVE-2024-29849）\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500800&idx=2&sn=073d9340ae748aba1da028d541fa411d\",\n \"【论文速读】| TrojanWhisper：评估预训练的大语言模型以检测并定位硬件木马\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495992&idx=1&sn=4b4df4fb29cbb3720ecf7022ec37c95b\",\n \"中国信通院“护证计划”正式启动，合合信息入选首批技术支撑单位\": \"https://mp.weixin.qq.com/s?__biz=MzAxMzg0NjY2NA==&mid=2247493182&idx=1&sn=ebec3bb0753f49fed3930eeb4f1b389e\",\n \"【0day漏洞分析】WordPress Yawave插件存在前台SQL注入漏洞(CVE-2025-1648)\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489105&idx=1&sn=224715ee4e240f98617531d910c0e58c\",\n \"AI驱动的安全创新：MCP技术的应用实践\": \"https://mp.weixin.qq.com/s?__biz=MzAxNDk0MDU2MA==&mid=2247484563&idx=1&sn=40a58bb09da26af940bf1958aa28c471\",\n \"内蒙古赤峰市委书记唐毅一行来访奇安信\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625288&idx=1&sn=518e1f36d840f5ccfee8cdd55289f86d\",\n \"超级勒索软件内部攻击技术揭秘：Black Basta泄露数据分析\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625288&idx=2&sn=6ca429e94ffc32c4d447b10a2a41ef13\",\n \"能收集微信、QQ数据？间谍软件LightSpy新增100+指令\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314922&idx=1&sn=92f82cc33129dd76df1348a129bf795e\",\n \"新型Linux恶意软件“Auto-Color”允许黑客彻底远程控制受感染系统\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314922&idx=2&sn=beef994697441390812481edc8ca90ad\",\n \"关于开展2025数字中国创新大赛数字安全赛道数据安全和移动互联网(APP)安全赛事的通知\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314922&idx=3&sn=0c97f2cd9a9e5a442f69cc323b61d403\",\n \"瑞典要求加密通信应用部署后门，Signal强烈反对\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314922&idx=4&sn=5949abecd1519cefe9dc96c372419fa4\",\n \"【安全圈】央视揭露电诈新手段：“手机口”成诈骗分子的“隐形传声筒”\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=1&sn=e269dac5b42a4c742cb4b652259c209e\",\n \"【安全圈】瑞典要求加密通信应用部署后门，Signal强烈反对\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=2&sn=c968a8cc40580623d340d29c9f094df6\",\n \"【安全圈】DISA 透露，2024 年的数据泄露影响了超过 330 万人\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=3&sn=fa7279a82fe96bdb54c1f935fe561090\",\n \"【安全圈】CVE-2025-20029：F5 BIG-IP系统发现命令注入漏洞，概念验证已发布\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=4&sn=39b4a77aebadbd2051b65b5c2aeac879\",\n \"NDSS参会特辑｜Distinguished Paper +1! 白泽记者前线报道\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247493205&idx=1&sn=e30c3acf21a3135b50a9dfe3c8d936c6\",\n \"【活动】关于开展2025数字中国创新大赛数字安全赛道数据安全和移动互联网(APP)安全赛事的通知\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649249976&idx=1&sn=ff2ae9de7a50d428287924d6b50747ea\",\n \"【技术能力】AI Security：智能网联汽车AI安全举隅\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649249976&idx=2&sn=0bb23dee1f13b920ad558a9b6f36eebf\",\n \"【工信动态】中国工程院院士李克强：如何巩固和扩大新能源汽车发展优势？\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649249976&idx=3&sn=b53e3a3b7838dbbc40ce770b9e7d811d\",\n \"“80后死亡率突破5.2%”？AI又开始“胡说八道”了\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636814&idx=1&sn=97117227eea2487abae47624a3548e0a\",\n \"从供应链投毒到算力劫持：探真科技破解 AI 安全三重困局\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636814&idx=2&sn=7fdce689ddd9710a1b13a84422e7efa3\",\n \"你的网恋“纯欲女友”为何能把你迷得不要不要的\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636814&idx=3&sn=eaf8ad52ce20dbc307bf775b75aefa29\",\n \"数据安全分类分级产品选型：五大关键层面深度剖析\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDE0NDUyNA==&mid=2650805340&idx=1&sn=dba4fcd4218cd91061ae9c206e66f0e0\",\n \"腾讯安全市占率领跑！艾瑞咨询最新威胁情报市场报告出炉\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526499&idx=1&sn=d75671234211d361d450f920ad7d6086\",\n \"《一. K线形态》\": \"https://mp.weixin.qq.com/s?__biz=MzI3NTcwNTQ2Mg==&mid=2247487692&idx=1&sn=7c2d665e13677afa82bc92a3c38ac72b\",\n \"关于部分用户不当使用我司产品引发AI大模型安全问题的声明\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649871017&idx=1&sn=1ac39f16ef459fce914523026f7d1ab4\",\n \"国务院印发《国家突发事件总体应急预案》，网络安全、网络数据安全、信息安全事件等归类“事故灾难”\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498956&idx=1&sn=85ff6fd691b533cf237e79c058725194\",\n \"人心中的成见是一座大山。\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDkzMTk3Mg==&mid=2247485376&idx=1&sn=5bdf4c90d735d84312475f42c7908630\",\n \"手机系统一直不更新可能被黑\": \"https://mp.weixin.qq.com/s?__biz=MzA4OTM1MzkwNg==&mid=2652895533&idx=1&sn=4d81702c4caffd87a99a2047c9fc619c\",\n \"专题·漏洞人才培养 | 网络安全实战人才培养的难点和对策\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=1&sn=d7efd3424f1b0073011b56155937fd1e\",\n \"前沿 | 全球数字契约：大变局时代的一次集体行动\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=2&sn=42468e9e03470ad0c6de684ad9a1c61a\",\n \"外交部：人工智能不应也不能沦为维护霸权、追求优势的工具\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=3&sn=981c72dae778b61f65241e039da85d21\",\n \"专家观点 | 推进人工智能立法恰逢其时\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=4&sn=c29da6552740c1769670ec7a96be48bf\",\n \"评论 | 让数据产业引擎动力更强劲\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=5&sn=3dc98be61b9dd366f04688aeab4622ad\",\n \"无线网络的“透视眼”：Airodump-ng实战指南（附独家避坑技巧）\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166995&idx=1&sn=dd0b2dfcb173239cb2c36ad8bf4415f1\",\n \"谷歌密码管理器终于与iOS同步——操作方法如下\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166995&idx=2&sn=4cef08efaf2d0b9dd4cf24139f3115ce\",\n \"朝鲜黑客是如何实现15亿美元的加密货币盗窃案——史上最大规模\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166995&idx=3&sn=9c7aae006c0da4bda0e43b234fc9fece\",\n \"KDD2025｜小红书联合中科大提出1.44M轻量高效AI图像检测模型，超SOTA 4.5个点\": \"https://mp.weixin.qq.com/s?__biz=Mzg4OTc2MzczNg==&mid=2247492193&idx=1&sn=57fee917dfb38469aad296f1ea625184\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524506&idx=2&sn=ec451d5cbc8f8eb3f2b617019a2423dc\",\n \"2025年十大最佳DevOps工具推荐\": \"https://mp.weixin.qq.com/s?__biz=MzU5Njc4NjM3NA==&mid=2247496298&idx=1&sn=200e635e43d6b6c340e6881a6ba425ff\",\n \"FBI确认Bybit被盗15亿美元是朝鲜黑客所为\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541652&idx=1&sn=92e109768cb56588dc949f7649e68cd9\",\n \"从0到1开发AI代码审计系统：如何打造高效代码审计解决方案？\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=1&sn=6ac8b3dbd8132ff9cf556988cbf19973\",\n \"AMSI简介及绕过方法总结\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=2&sn=5303a8192f311d09f00a5e8db0ef8b38\",\n \"“AI 热聊” 视频疯传，引发技术恐慌\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=3&sn=3f815839169e7437ed91a4bd98b17cd8\",\n \"直播预约 | 使用硬件调试器认识ARM64的四大特权级\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=4&sn=687a8700fe48fbeee032399623af2bbf\",\n \"Go红队开发—语法补充\": \"https://mp.weixin.qq.com/s?__biz=MzkxODcyNjk4NQ==&mid=2247487942&idx=1&sn=3c62d06792757993b3088ff7202a7bf1\",\n \"上海华瑞银行被罚，涉信息科技运行和系统开发未有效分离等\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931609&idx=1&sn=2340977f6526829ca1fe0c9d036bb2a8\",\n \"南京银行风险管理部招聘，涉信用风险模型开发和验证岗、市场风险计量岗\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931609&idx=2&sn=2e2efce1af8f41493f685a2669273f3e\",\n \"风云卫×DeepSeek-R1（四）：当AI侦探团遇上“漏洞迷案”\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650465690&idx=1&sn=650234777d3690854a7df522c77a89ff\",\n \"备考CISSP丨2025年4-7月CISSP官方培训计划抢先看\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492443&idx=1&sn=bf2b867474385a2220259be16b43bd91\",\n \"9.9分漏洞或导致2850多台Ivanti设备系统完全受损；三星系统推出业界首款后量子加密芯片S3SSE2A | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135261&idx=2&sn=74d6fa6c49fbd2630c460749eb487fd3\",\n \"针对基于智能卡进行认证的活动目录的攻击\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553954&idx=1&sn=2c60914fe43df7aa2c0e62c64b17e24c\",\n \"【免费领】SQL Server最佳安全配置实操手册（含检测及修复）\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553954&idx=2&sn=1baf7acc960c31c38573b6abd894b9c7\",\n \"2.84亿个账户信息泄露！ 飞天诚信：将“无密码”贯彻到底\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649876767&idx=1&sn=7edfad2f3d0b6b363af359d922c429fa\",\n \"Safe{Wallet}基础设施被注入恶意代码，Bybit遭供应链攻击损失15亿美元\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522342&idx=1&sn=8521c4624968b5c9a8d08e2a8af23490\",\n \"OSCP训练营重磅升级！实战技能+高效课程，备考更轻松\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247516257&idx=1&sn=66c19f879654a1d6baccb729ee02b5e8\",\n \"高效防御SQL注入攻击，表单动态加固了解一下！\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NTk3NjczNQ==&mid=2247485745&idx=1&sn=3c15268c7b78b739fdda3342915d92b8\",\n \"海外研究｜美联邦网络空间安全研发战略计划比较研究\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597937&idx=1&sn=badce6ee465c02350d6597c55d6ed060\",\n \"《网络安全2025：冲刺“十四五”》发布\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597937&idx=2&sn=8f7a4e1ce51edfd479482fa39efdcc2b\",\n \"Yak 在 AI 浪潮中应该如何存活？\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247527752&idx=1&sn=8f4148b9f96cfd513f38ab1ec5762562\",\n \"三种密码破解技术以及如何防御它们\": \"https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488630&idx=1&sn=fb6e72d78fe8dd0a0c003c8b8c7164e4\",\n \"黑客新闻-SOC3.0时代全面到来：AI如何重构网络安全防线？\": \"https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488630&idx=2&sn=c36156723ac118e277e3d93ed80da2ed\",\n \"网络安全动态 - 2025.02.27\": \"https://mp.weixin.qq.com/s?__biz=MzU1MzEzMzAxMA==&mid=2247499935&idx=1&sn=bcfd21ddba75f6187a35154d2e092266\",\n \"LLM应用安全风险演进：OWASP LLM应用Top10风险2023版与2025版对比分析\": \"https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247491670&idx=1&sn=6280c36026f765ffdb60ad563ac7d2a8\",\n \"网络安全态势周报（2月17日-2月23日）2025年第7期\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjM4ODc3OQ==&mid=2247485714&idx=1&sn=47dcf5a6d5d79416c36baf0c928bde15\",\n \"黑客一招教你F12改成绩，免费、19.9元都不需要\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247544458&idx=1&sn=7da004488f27753475b6ad0ae84ae335\",\n \"上海证券交易所招聘网络安全岗、数据安全岗\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247544458&idx=2&sn=f04dd9b419c269e5c9c7b7d42a793447\",\n \"美国印太政策的未来\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619475&idx=1&sn=aecb3987b1f274c4ca9656beb1b4618f\",\n \"英国首相宣布将国防支出增加到GDP的2.5%\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619475&idx=2&sn=58d2204396754557cc15a0047f1f46a1\",\n \"回顾2024年中国网络安全十件大事 | 关于智能网联汽车安全，天融信这样说→\": \"https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650965501&idx=1&sn=5a84bb63195f7a690c0f8274f4bf6953\",\n \"2,500 美元漏洞报告-通过未认领的 Node 包进行远程代码执行 (RCE)\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489731&idx=1&sn=2186b5230165ffa81d5b3f73d659278c\",\n \"Deepseek助力职场办公效能提升课程\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489731&idx=2&sn=5ca1960dec06f12f9eda6b153b6d87cd\",\n \"创宇安全智脑 | NUUO 网络录像机 handle_site_config.php 远程命令执行等67个漏洞可检测\": \"https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490550&idx=1&sn=7bcda616277b8dc37ec062c199225436\",\n \"创新发布 AI to AI 测试｜长亭科技「AIGC安全评估服务」强势来袭\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247486891&idx=1&sn=72fa9b91e119e2811e49ae4aa9880cc0\",\n \"这就是绝对盘感\": \"https://mp.weixin.qq.com/s?__biz=MzIzNzMxMDkxNw==&mid=2247493517&idx=1&sn=941c2670bf9fda9c3f98ca994b8343fd\",\n \"sqlmap最新版命令翻译 （劝退指南）\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571348&idx=1&sn=eb28a5867382b382885dc11bbb970eca\",\n \"K8s 从入门到精通！这篇真绝了！\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571348&idx=2&sn=454a78541628db9f968c8586fe3249dd\",\n \"AI 安全警报！“劫持思维链”攻击，带“偏”大模型\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496715&idx=1&sn=40e0b437daf97524ac82e20ffa754709\",\n \"DeepSeek预测：2025年CISSP考试必考重点！\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247488012&idx=1&sn=7ec2b4a3ea9b37b22427b6fa4036d715\"\n },\n \"Sandfly Security Blog RSS Feed\": {\n \"SSH Lateral Movement Risks on Linux Webinar and White Paper\": \"https://sandflysecurity.com/blog/ssh-lateral-movement-risks-on-linux-webinar-and-white-paper/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"JUST CRASHED SYSTEM USING IMAGE AND GOT BOUNTY $ 500\": \"https://infosecwriteups.com/just-crashed-system-using-image-and-got-bounty-500-eb30dc4b85a5?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Bypassing AWS S3 Bucket Restrictions: Security Testing Techniques\": \"https://infosecwriteups.com/bypassing-aws-s3-bucket-restrictions-security-testing-techniques-63fe75aa9ff8?source=rss----7b722bfd1b8d--bug_bounty\",\n \"$100-$20k worth Stored XSS Vulnerability | Hidden Methods\": \"https://infosecwriteups.com/100-20k-worth-stored-xss-vulnerability-hidden-methods-e56fe57437c4?source=rss----7b722bfd1b8d--bug_bounty\",\n \"$500-$20k worth GraphQL Vulnerabilities | Advanced Tips & Tricks\": \"https://infosecwriteups.com/500-20k-worth-graphql-vulnerabilities-advanced-tips-tricks-74e8f4679b91?source=rss----7b722bfd1b8d--bug_bounty\",\n \"CVE-2025–1094: PostgreSQL Injection Vulnerability Exploit\": \"https://infosecwriteups.com/cve-2025-1094-postgresql-sql-injection-vulnerability-exploit-2acf37ae399a?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Finding an easy bug in the profile picture field.\": \"https://infosecwriteups.com/finding-an-easy-bug-in-the-profile-picture-field-122a7aca2b42?source=rss----7b722bfd1b8d--bug_bounty\",\n \"I Found an XSS vulnerability in QuickRide — Here’s how you can too!\": \"https://infosecwriteups.com/i-found-an-xss-vulnerability-in-quickride-heres-how-you-can-too-9606203d9e53?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Reverse Engineering\": {\n \"Tracking You from a Thousand Miles Away! Turning a Bluetooth Device into an Apple AirTag Without Root Privileges\": \"https://www.reddit.com/r/ReverseEngineering/comments/1izu5j8/tracking_you_from_a_thousand_miles_away_turning_a/\",\n \"Reverse-engineering an encrypted IoT protocol\": \"https://www.reddit.com/r/ReverseEngineering/comments/1iz2y7p/reverseengineering_an_encrypted_iot_protocol/\",\n \"A dive into the Rockchip Bootloader\": \"https://www.reddit.com/r/ReverseEngineering/comments/1iz34px/a_dive_into_the_rockchip_bootloader/\"\n },\n \"Malwarebytes\": {\n \"Countries and companies are fighting at the expense of our data privacy\": \"https://www.malwarebytes.com/blog/news/2025/02/countries-and-companies-are-fighting-at-the-expense-of-our-data-privacy\"\n },\n \"Intigriti\": {\n \"Finance industry: Top vulnerabilities in 2024 and what to watch for in 2025\": \"https://www.intigriti.com/blog/business-insights/finance-industry-top-vulnerabilities-in-2024-and-what-to-watch-for-in-2025\"\n },\n \"Checkmarx\": {\n \"Breaking the Bottleneck: How AppSec Managers Can Reduce Risk Without Slowing Down Development\": \"https://checkmarx.com/blog/breaking-bottleneck-how-appsec-reduce-risk-without-slowing-development/\"\n },\n \"rtl-sdr.com\": {\n \"Creating a Drone Based Synthetic Aperture Radar\": \"https://www.rtl-sdr.com/creating-a-drone-based-synthetic-aperture-radar/\",\n \"An RTL-SDR/LoRa/GPS/RTC/USB-Hub Extension Board for the uConsole\": \"https://www.rtl-sdr.com/an-rtl-sdr-lora-gps-rtc-usb-hub-extension-board-for-the-uconsole/\",\n \"A Handheld Cyberdeck with RTL-SDR\": \"https://www.rtl-sdr.com/a-handheld-cyberdeck-with-rtl-sdr/\"\n },\n \"安全牛\": {\n \"梆梆安全谭阳：API安全防护要做到“端到端”和“全渠道”\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135261&idx=1&sn=bd32624342195ab42741a6317f8caa07&chksm=bd15adce8a6224d88c02a016f230594586f32ceb952129f00383c6abd9a797cddc1eda139f2e&scene=58&subscene=0#rd\",\n \"9.9分漏洞或导致2850多台Ivanti设备系统完全受损；三星系统推出业界首款后量子加密芯片S3SSE2A | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135261&idx=2&sn=74d6fa6c49fbd2630c460749eb487fd3&chksm=bd15adce8a6224d8f352f7e193e568e119a11c3b858b9a9e079e69d1a356958e6c2d3f57eb5a&scene=58&subscene=0#rd\"\n },\n \"HackerNews\": {\n \"“Have I Been Pwned” 平台新增 2.84 亿个被信息窃取恶意软件盗取的账户\": \"https://hackernews.cc/archives/57595\",\n \"澳大利亚试管婴儿巨头 Genea 遭白蚁勒索软件团伙入侵\": \"https://hackernews.cc/archives/57590\",\n \"EncryptHub 黑客组织入侵 618 家机构部署信息窃取木马和勒索软件\": \"https://hackernews.cc/archives/57584\",\n \"安装量达 10 万的 PyPi 软件包多年来一直从 Deezer 盗版音乐\": \"https://hackernews.cc/archives/57582\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"Fish Shell 4.0 释出\": \"https://www.solidot.org/story?sid=80672\",\n \"激素疗法或有助于延缓皮肤衰老\": \"https://www.solidot.org/story?sid=80671\",\n \"Ocean Infinity 重新开始搜寻 MH370\": \"https://www.solidot.org/story?sid=80670\",\n \"暗能量光谱仪发现 2800 个候选黑洞\": \"https://www.solidot.org/story?sid=80669\",\n \"东京推行四天工作制试图平衡工作和生活\": \"https://www.solidot.org/story?sid=80668\",\n \"Firefox 公布使用条款和更新隐私条款\": \"https://www.solidot.org/story?sid=80667\",\n \"Automattic 可能面临集体诉讼\": \"https://www.solidot.org/story?sid=80666\",\n \"中国湿地总面积过去四十年净减少 6 万平方公里\": \"https://www.solidot.org/story?sid=80665\",\n \"极端高温可能进一步加速老年人衰老\": \"https://www.solidot.org/story?sid=80664\",\n \"新发现再次否定了佩托悖论\": \"https://www.solidot.org/story?sid=80663\",\n \"《半条命 3》可能进入到了开发的最后阶段\": \"https://www.solidot.org/story?sid=80662\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"跨国黑客GHOSTR落网，涉90多起数据泄露案件\": \"https://www.freebuf.com/news/423130.html\",\n \"新型Linux后门病毒Auto-color瞄准美国和亚洲系统\": \"https://www.freebuf.com/articles/system/423126.html\",\n \"FreeBuf早报 | Bybit 遭黑客攻击事件溯源；微软合作伙伴中心存在高危漏洞\": \"https://www.freebuf.com/articles/423087.html\",\n \"89%的企业生成式AI使用未被IT部门察觉，暴露数据安全隐患\": \"https://www.freebuf.com/articles/database/423097.html\",\n \"黑客假冒中国台湾税务局传播Winos 4.0恶意软件\": \"https://www.freebuf.com/news/423120.html\",\n \"针对Web3领域求职者：GrassCall恶意软件窃取加密货币钱包\": \"https://www.freebuf.com/articles/423069.html\",\n \"新型攻击“nRootTag”将15亿部iPhone变为免费追踪器\": \"https://www.freebuf.com/vuls/423102.html\"\n },\n \"安全客\": {\n \"Bybit十五亿美元失窃案反转，竟是Safe协议开发者先“中招”\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788128&idx=1&sn=e2dbece6f830a6448fc883a3999332b0&chksm=8893be8fbfe437994387fed462260281a6796e4e62c7c439dc8ed5a3e398cf5ebdd98dc04e3a&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"从0到1开发AI代码审计系统：如何打造高效代码审计解决方案？\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=1&sn=6ac8b3dbd8132ff9cf556988cbf19973&chksm=b18c2b6586fba273159e7313093798e68f16a4497883e7ff8a009df94739566dbc0e7a946cd9&scene=58&subscene=0#rd\",\n \"AMSI简介及绕过方法总结\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=2&sn=5303a8192f311d09f00a5e8db0ef8b38&chksm=b18c2b6586fba273ec05f8faa7549b1333ffdfa2eae97a14b525766ef3df4cb5984c3796b8a4&scene=58&subscene=0#rd\",\n \"“AI 热聊” 视频疯传，引发技术恐慌\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=3&sn=3f815839169e7437ed91a4bd98b17cd8&chksm=b18c2b6586fba2736f2c1228f33818db1bfaed66a9648388dcffd666bf6e2f00adb7cc9d21b9&scene=58&subscene=0#rd\",\n \"直播预约 | 使用硬件调试器认识ARM64的四大特权级\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=4&sn=687a8700fe48fbeee032399623af2bbf&chksm=b18c2b6586fba273c582b91d558bd3e712dc78cc83440f9d88d97763d9ef4a59f44a38018933&scene=58&subscene=0#rd\"\n },\n \"Web安全与前端\": {\n \"去哪儿网安全招聘：反入侵运营专家\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDA4NzAyMQ==&mid=2247483949&idx=1&sn=007998a58ae379c0ee5aaa3f4734b35c&chksm=9768bf2fa01f3639c49805e724c353669ac01274f302adf41a3d440ecdeb51b1d3e6a3eca21f&scene=58&subscene=0#rd\"\n },\n \"知道创宇404实验室\": {\n \"404星链计划 | 一大波项目版本更新\": \"https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990729&idx=1&sn=94dcc820e45ae45ea946896a750a2dd0&chksm=8079aabbb70e23ade1eddc4475e3aee884d362060c6da00c233a3a197867d177e94ae60fc2f6&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \".NET 通过代码审计发现某办公系统逻辑绕过漏洞可泄露管理员账户和密码\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499017&idx=1&sn=c17b802fed118434bf2134310fadc29e&chksm=fa5953e4cd2edaf2ec66ff6e982d6bf1f1641351ca4a8a43050c08709373f498234341967b72&scene=58&subscene=0#rd\",\n \".NET内网实战：通过伪造文件时间戳实现入侵阶段的痕迹清理\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499017&idx=2&sn=121df4bae602a09c7584447b778948d6&chksm=fa5953e4cd2edaf2c82f63e9ae6590e0c96abf05b7bfa471754ca1632322a6820fd0e9daf797&scene=58&subscene=0#rd\",\n \"一招鲜：通过 Windows 屏幕保护程序实现目标权限持久化\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499017&idx=3&sn=725ce5df98701f262561d16a901eecff&chksm=fa5953e4cd2edaf29ed447727fb757465759f13c6111d8623e4269c4b65d5bf88cb76cc83f3c&scene=58&subscene=0#rd\"\n },\n \"Black Hills Information Security\": {\n \"Wi-Fi Forge: Practice Wi-Fi Security Without Hardware\": \"https://www.blackhillsinfosec.com/wifi-forge/\"\n },\n \"腾讯安全威胁情报中心\": {\n \"腾讯安全市占率领跑！艾瑞咨询最新威胁情报市场报告出炉\": \"https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510095&idx=1&sn=b647cd03c99018ca04f3a704796bb1fb&chksm=ec9f713cdbe8f82a1ef164c5f81ce91870bc9d7445ba4c1d7cf0114d9a4d7cfe7107999b9ee5&scene=58&subscene=0#rd\"\n },\n \"奇安信 CERT\": {\n \"【已复现】NAKIVO Backup & Replication任意文件读取漏洞(CVE-2024-48248)安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503053&idx=1&sn=5fed028268e1c246223907f8312cd7ab&chksm=fe79e855c90e6143cede127f668f9ea87228c8bec618e4030297ec513afdda8336db0fed9cb0&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"微软Majorana 1 芯片对量子解密有何意义？\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537720&idx=1&sn=287fb3658e14a3b29ac40e789044003f&chksm=c1442685f633af933c67b3ea91e5ee8af60574887c3fe9157f333744296ea90a84e6ded1eed8&scene=58&subscene=0#rd\",\n \"《网络安全2025：冲刺“十四五”》发布\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537720&idx=2&sn=5b2f7c8e123bbb8404f7e76fc7efbeb4&chksm=c1442685f633af93a8c0008f696a26e34ebc2d5fe1a68787c7bd9a85c8ff28ebf6d41965b092&scene=58&subscene=0#rd\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 阅读推荐 2025-02-27 全世界程序员，团结起来！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499800&idx=1&sn=a0ddcd52f005448d8c6af28861b82333&chksm=c063eec1f71467d74bb40e00a300cdda548cee447eea07b1e0795f5b9c794ec08e3480b1f63d&scene=58&subscene=0#rd\"\n },\n \"红日安全\": {\n \"招hvv上瘾的人 带你快乐赚钱\": \"https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851808&idx=1&sn=7d4d778185bfec73632e35f0ddcbf34e&chksm=f3e4e923c493603511a59055ed4de72073cd6f0a8c8cb8365f0e800e8e2fb8656d3622947f7d&scene=58&subscene=0#rd\"\n },\n \"ChaMd5安全团队\": {\n \"2025第一届“网谷杯” Writeup\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247512128&idx=1&sn=c0b97c8eedff483a5eaa6bbaf00e23fa&chksm=e89d9898dfea118ea3d2a88db4273eca8c9bb710ebff3c08b3adcaaac5eca12abcecef656810&scene=58&subscene=0#rd\"\n },\n \"微步在线\": {\n \"黑客最不想让你看到的，2024年漏洞攻击数据真相\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183236&idx=1&sn=1727469ff3beeb950542f8ae4d57d40b&chksm=f4486df8c33fe4ee0c7b62cb59b891067c87fa74029bd45738251b05b59d16d2e9084b8193d7&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"太劲爆了！美国国家安全局的秘密X爱聊天记录曝光（清晰大图版）\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559964&idx=1&sn=472bfe7ce91c4c5ff7c3488e3b16257e&chksm=87117b97b066f281208faed8df068b32c9ac3fe7de0e3ebe1950d1455dcd1182c08a842841c2&scene=58&subscene=0#rd\",\n \"蒙古国大会背后——中蒙生态与军事的双重较量\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559964&idx=2&sn=243d1c22de622ed18b9b35c98e021d79&chksm=87117b97b066f28189f863d27d1da0fab4f57f85871ba3a3c945e00ee8b9755dab404ad01cec&scene=58&subscene=0#rd\"\n },\n \"代码卫士\": {\n \"Safe{Wallet}基础设施被注入恶意代码，Bybit遭供应链攻击损失15亿美元\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522342&idx=1&sn=8521c4624968b5c9a8d08e2a8af23490&chksm=ea94a94cdde3205ad200f61e3311b075c8589b84e47a3d91b3e17103cbe66dca64d78510faf2&scene=58&subscene=0#rd\"\n },\n \"信息时代的犯罪侦查\": {\n \"隐秘的陷阱：一对夫妇的间谍之路\": \"https://mp.weixin.qq.com/s?__biz=MzAxNTA4NDAwOQ==&mid=2650737023&idx=1&sn=f3929bd91c54d00f7f162b9c5893bf9b&chksm=8382d9f9b4f550efb3998961d077f68da4bfb46cb2a22b31171e35f3c2aeea217d6f2a2d00e6&scene=58&subscene=0#rd\"\n },\n \"信息安全国家工程研究中心\": {\n \"国务院印发《国家突发事件总体应急预案》，网络安全、网络数据安全、信息安全事件等归类“事故灾难”\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498956&idx=1&sn=85ff6fd691b533cf237e79c058725194&chksm=feb67ddfc9c1f4c93e64111817e962ad43fbfb5704eddf817ea4c31d657992297a0369572e1a&scene=58&subscene=0#rd\"\n },\n \"恒脑与AI\": {\n \"AI 安全警报！“劫持思维链”攻击，带“偏”大模型\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496715&idx=1&sn=40e0b437daf97524ac82e20ffa754709&chksm=e9fd699ade8ae08ccfa47e86b0d733b6c93a843aa760d0c47d2a3e65a5d603e0da09a0246fa5&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"52 万的小米 SU7 Ultra，雷军把所有人都干懵了\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653074631&idx=1&sn=f9824515835e9d0c91314215b9913137&chksm=7e57c97149204067f35297fd25df403e6309a04cdac8ae30f07b9970b1a331f2693085fe858c&scene=58&subscene=0#rd\",\n \"诞生 11 年之后，智能音箱鼻祖完成最大升级，直指 ChatGPT\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653074631&idx=2&sn=9ebe1b26a7bf70dc0e00af23a85b8765&chksm=7e57c97149204067077f8c7dea856c175bd8f8d8b5cd54511d511b0540af675bcaefa24ae952&scene=58&subscene=0#rd\",\n \"没想到，我轻松干预了 DeepSeek 的搜索结果\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653074567&idx=1&sn=b0a2b87d5e6f30182a21a62f2998fd42&chksm=7e57c931492040279cfbc6f0bef309054fe33fdde89bb1f3eff7f10ab53fcd337cc71a8d1440&scene=58&subscene=0#rd\",\n \"库克薪酬增至 7461 万美元；传奔驰中国裁员，离职赔偿 N+9；宇树机器人日租近万，40 天回本 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653074517&idx=1&sn=40f71625443aaca4b664b23a462edcb5&chksm=7e57c9e3492040f5b13b62851e03547f45d6a1e1b987af6422c298fae449b9d4443c454a81bc&scene=58&subscene=0#rd\"\n },\n \"慢雾科技\": {\n \"Bybit 近 15 亿美金被盗真相 ：Safe{Wallet} 前端代码被篡改\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501336&idx=1&sn=2ad6eea9d1534aab1a5dea8dd06ea6a3&chksm=fddeb89fcaa9318933e8ac42c616d776ee75398cbaa81d3bb9cda3ea362fa081b3b01393847e&scene=58&subscene=0#rd\",\n \"OKX & SlowMist 联合发布｜Bom 恶意软件席卷上万用户，盗取资产超 182 万美元\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501336&idx=2&sn=fd4597e1846db1f94a777977951fde9a&chksm=fddeb89fcaa93189ff6fa7dfa5c9a0405664cc357827e613dcb6f4d5338d07248640b523eaf0&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】央视揭露电诈新手段：“手机口”成诈骗分子的“隐形传声筒”\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=1&sn=e269dac5b42a4c742cb4b652259c209e&chksm=f36e7513c419fc05f89fb42a37af00265b58a755157aae332832eee15b33a95e723d708cd795&scene=58&subscene=0#rd\",\n \"【安全圈】瑞典要求加密通信应用部署后门，Signal强烈反对\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=2&sn=c968a8cc40580623d340d29c9f094df6&chksm=f36e7513c419fc05956640b018abcd11ea2073c01be81c16118341d006a206aaeae907827c8a&scene=58&subscene=0#rd\",\n \"【安全圈】DISA 透露，2024 年的数据泄露影响了超过 330 万人\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=3&sn=fa7279a82fe96bdb54c1f935fe561090&chksm=f36e7513c419fc05ebbea7454e80a696ef8169c4f0c884e5db896ccfcb34597ff6080c4224b0&scene=58&subscene=0#rd\",\n \"【安全圈】CVE-2025-20029：F5 BIG-IP系统发现命令注入漏洞，概念验证已发布\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=4&sn=39b4a77aebadbd2051b65b5c2aeac879&chksm=f36e7513c419fc05845b92a5fb7cff138e2e09657b7fe582ef29b3781db1761fb8b7d3cfd22a&scene=58&subscene=0#rd\"\n },\n \"Yak Project\": {\n \"Yak 在 AI 浪潮中应该如何存活？\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247527752&idx=1&sn=8f4148b9f96cfd513f38ab1ec5762562&chksm=c2d111ecf5a698fa6b6aae1d1dad7bad45b6e7563889e275191d0c74041eb47391a0a00055b8&scene=58&subscene=0#rd\"\n },\n \"黑伞安全\": {\n \"2,500 美元漏洞报告-通过未认领的 Node 包进行远程代码执行 (RCE)\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489731&idx=1&sn=2186b5230165ffa81d5b3f73d659278c&chksm=fb02959bcc751c8d15bbf41d5159696428c4d9c6d9fa2c6f2e13309b74cf59d2aa80cbe4d426&scene=58&subscene=0#rd\",\n \"Deepseek助力职场办公效能提升课程\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489731&idx=2&sn=5ca1960dec06f12f9eda6b153b6d87cd&chksm=fb02959bcc751c8d8f7ff73ba197f24dae88965e0e4e35b45bc46e8494502ef2f5acdd72c03a&scene=58&subscene=0#rd\"\n },\n \"威胁猎人Threat Hunter\": {\n \"【信贷欺诈】“公积金伪造”骗贷手法分析\": \"https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247499035&idx=1&sn=d11ef99e520f528479f5c5aae50f06e4&chksm=eb12db20dc65523640aa9a9e5ed38fee25c0b62f85314e2018e5be469329ed67322bb17c024f&scene=58&subscene=0#rd\"\n },\n \"中国信息安全\": {\n \"专题·漏洞人才培养 | 网络安全实战人才培养的难点和对策\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=1&sn=d7efd3424f1b0073011b56155937fd1e&chksm=8b580b23bc2f82354fbd0c8555767c4e05518b5ea8eeb32524d1c26203d76b6906aa88a457b6&scene=58&subscene=0#rd\",\n \"前沿 | 全球数字契约：大变局时代的一次集体行动\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=2&sn=42468e9e03470ad0c6de684ad9a1c61a&chksm=8b580b23bc2f82359849a959343ce91d2ccfa2727f26f129559d3b27ed3e51a8738345c44044&scene=58&subscene=0#rd\",\n \"外交部：人工智能不应也不能沦为维护霸权、追求优势的工具\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=3&sn=981c72dae778b61f65241e039da85d21&chksm=8b580b23bc2f82358398f29a4611e868e52bdfb2ace423b585fa400c485dfe325cbc040d2f85&scene=58&subscene=0#rd\",\n \"专家观点 | 推进人工智能立法恰逢其时\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=4&sn=c29da6552740c1769670ec7a96be48bf&chksm=8b580b23bc2f8235f9a36d1a75a4e9230f276ab9954a595e44a7f6cba29eb7e9f84f96ddeefe&scene=58&subscene=0#rd\",\n \"评论 | 让数据产业引擎动力更强劲\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=5&sn=3dc98be61b9dd366f04688aeab4622ad&chksm=8b580b23bc2f82351b8edef8a686623959d09ceb046edad9b2567f5673401f0c5c4e1cb8018c&scene=58&subscene=0#rd\",\n \"观点 | 数字贸易改革背景下的数字信任体系构建\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=6&sn=ff7e2f9fb5299d1b6660158c84ec016e&chksm=8b580b23bc2f82352a2824d064d75d563aa7e6fd70764b193c3a231cc70e51f0d6149cea9a59&scene=58&subscene=0#rd\"\n },\n \"火绒安全\": {\n \"钓鱼攻击通过PDF文档暗投后门病毒\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524506&idx=1&sn=d74006a215de392a907da006f6e67d8b&chksm=eb70bea5dc0737b315d222238d0b2f4abb4114ef928bd7245d962ed1474b2163b423c6ae796b&scene=58&subscene=0#rd\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524506&idx=2&sn=ec451d5cbc8f8eb3f2b617019a2423dc&chksm=eb70bea5dc0737b310c8ec43aebca18b0818ac45c3a0f5cdd852a293530f38a312d548904b2d&scene=58&subscene=0#rd\"\n },\n \"威努特安全网络\": {\n \"基于DeepSeek的智能化安全运营方案\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131303&idx=1&sn=b8fa5cf87508e20629cab3fa5bc3e50e&chksm=80e71717b7909e01c228b60918eb06f057209c7dc4ad43675072a4e4a9b83e6321ce272e73c9&scene=58&subscene=0#rd\"\n },\n \"百度安全实验室\": {\n \"大模型驱动智能合规 | 构建企业个保审计新范式\": \"https://mp.weixin.qq.com/s?__biz=MzA3NTQ3ODI0NA==&mid=2247487721&idx=1&sn=7cacde74f858df7762dff71fc3c8213c&chksm=9f6eb562a8193c743602a8ec7608e762e3e352a9ed75505eaa34856909a491747acbc943f94e&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"名为“StaryDobry”的大规模恶意软件活动爆发\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581330&idx=1&sn=2f615fe50e7ab996210dada939fb633a&chksm=e9146ea8de63e7be64dcd47f2dd2cb712933bac11ab1093b3231ce632bf48eaf2a8c7299d42a&scene=58&subscene=0#rd\",\n \"幽灵勒索软件入侵了 70 个国家的组织机构\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581330&idx=2&sn=d82ee66de86baa524b65ad14355d83a0&chksm=e9146ea8de63e7be0958c15880c0535d96317975e0b811a88454c1faab6049f80e6f86444db1&scene=58&subscene=0#rd\"\n },\n \"复旦白泽战队\": {\n \"NDSS参会特辑｜Distinguished Paper +1! 白泽记者前线报道\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247493205&idx=1&sn=e30c3acf21a3135b50a9dfe3c8d936c6&chksm=fde8622bca9feb3df29b1a52c2ff1875167c03a574ac73eb8cf3a1ead56fce2a756ceff1f14c&scene=58&subscene=0#rd\"\n },\n \"字节跳动技术团队\": {\n \"机票已买，下周回国！| 加入Trae粉丝“接机群”赢Apple Mac mini、Ola Friend耳机\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513590&idx=1&sn=d29aefd8b38a2b9bb74818848c730511&chksm=e9d37e14dea4f7026a7783e96daa2a0522f029bb319e8c9153ce8f8baefe75fe275b760f7d97&scene=58&subscene=0#rd\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Vo1d malware botnet grows to 1.6 million Android TVs worldwide\": \"https://www.bleepingcomputer.com/news/security/vo1d-malware-botnet-grows-to-16-million-android-tvs-worldwide/\",\n \"BlackBasta Leaks: Lessons from the Ascension Health attack\": \"https://blog.bushidotoken.net/2025/02/blackbasta-leaks-lessons-from-ascension.html\",\n \"DOGE’s ‘god-tier’ access to CFPB data opens door to market manipulation, experts say\": \"https://therecord.media/doge-access-cfpb-data-market\",\n \"Hacked, leaked, exposed: Why you should never use stalkerware apps\": \"https://techcrunch.com/2025/02/27/hacked-leaked-exposed-why-you-should-stop-using-stalkerware-apps/\",\n \"Privacy tech firms warn France’s encryption and VPN laws threaten privacy\": \"https://www.bleepingcomputer.com/news/security/privacy-tech-firms-warn-frances-encryption-and-vpn-laws-threaten-privacy/\",\n \"Sellers can get scammed too, and Joe goes off on a rant about imposter syndrome\": \"https://blog.talosintelligence.com/sellers-can-get-scammed-too-and-joe-goes-off-on-a-rant-about-imposter-syndrome/\",\n \"Microsoft names developers behind illicit AI tools used in celebrity deepfake scheme\": \"https://therecord.media/microsoft-names-developers-behind-illicit-ai-used-in-deepfake-scheme\",\n \"Thousands rescued from scam compounds in Myanmar now stuck at Thai border\": \"https://therecord.media/thousands-rescued-from-cyber-scam-compounds-stuck-at-thai-border\",\n \"Microsoft names cybercriminals behind AI deepfake network\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-names-cybercriminals-behind-ai-deepfake-network/\",\n \"Over 49,000 misconfigured building access systems exposed online\": \"https://www.bleepingcomputer.com/news/security/over-49-000-misconfigured-building-access-systems-exposed-online/\",\n \"Gli attacchi ransomware sono quadruplicati nel 2024\": \"https://www.securityinfo.it/2025/02/27/gli-attacchi-ransomware-sono-quadruplicati-nel-2024/\",\n \"Belgium probes if Chinese hackers breached its intelligence service\": \"https://www.bleepingcomputer.com/news/security/belgium-probes-if-chinese-hackers-breached-its-intelligence-service/\",\n \"Inside the Black Basta Leak: How Ransomware Operators Gain Access\": \"https://www.kelacyber.com/blog/black-basta-leak-how-ransomware-operators-gain-access/\",\n \"Smishing INPS: nuova truffa minaccia conseguenze penali\": \"https://cert-agid.gov.it/news/smishing-inps-nuova-truffa-minaccia-conseguenze-penali/\",\n \"XDR: sinergia tecnologica per una cyber security innovativa, personalizzata e potente\": \"https://www.cybersecurity360.it/soluzioni-aziendali/xdr-sinergia-tecnologica-per-una-cyber-security-innovativa-personalizzata-e-potente/\",\n \"Philippine army confirms attack on its networks\": \"https://therecord.media/philippines-army-confirms-hack\",\n \"Suspected Desorden hacker arrested for breaching 90 organizations\": \"https://www.bleepingcomputer.com/news/security/suspected-desorden-hacker-arrested-for-breaching-90-organizations/\",\n \"FBI urges crypto community to avoid laundering funds from Bybit hack\": \"https://therecord.media/fbi-bybit-laundering-crypto-warning\",\n \"FBI says North Korea ‘responsible’ for $1.4 billion Bybit heist\": \"https://techcrunch.com/2025/02/27/fbi-says-north-korea-responsible-for-1-4-billion-bybit-heist/\",\n \"Il mercato della cyber security cresce del 15%, ma le minacce crescono di più\": \"https://www.cybersecurity360.it/news/il-mercato-della-cyber-security-cresce-del-15-ma-le-minacce-crescono-di-piu/\",\n \"Per combattere il rischio frode sono importanti le risorse umane\": \"https://www.cybersecurity360.it/soluzioni-aziendali/per-combattere-il-rischio-frode-sono-importanti-le-risorse-umane/\",\n \"Shadow AI: la minaccia ombra che incombe nelle organizzazioni\": \"https://www.cybersecurity360.it/legal/shadow-ai-la-minaccia-ombra-che-incombe-nelle-organizzazioni/\",\n \"Romanian prosecutors issue charges against pro-Russia candidate in annulled election\": \"https://therecord.media/romania-presidential-candidate-criminal-charges\",\n \"Dynamic Duo: Duolingo Mascot Death Scams Report\": \"https://bfore.ai/dynamic-duo-duolingo-mascot-death-scams-report/\",\n \"Enriching ANY.RUN’s TI Feeds with Unique IOCs: How It Works\": \"https://any.run/cybersecurity-blog/indicators-in-ti-feeds/\",\n \"Intune or Outplayed?\": \"https://catchingphish.com/posts/f/intune-or-outplayed\",\n \"Belgium probes suspected Chinese hack of state security service\": \"https://therecord.media/belgium-investigation-alleged-china-cyber-espionage-vsse\",\n \"Microsoft fixes Outlook drag-and-drop broken by Windows updates\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-outlook-drag-and-drop-broken-by-windows-updates/\",\n \"New CISA Report Warns of Rising ICS Cybersecurity Risks—Top Vendors Affected\": \"https://cyble.com/blog/new-cisa-report-rising-ics-cybersecurity-risks/\",\n \"16-30 November 2024 Cyber Attacks Timeline\": \"https://www.hackmageddon.com/2025/02/27/16-30-november-2024-cyber-attacks-timeline/\",\n \"Lotus Blossom espionage group targets multiple industries with different versions of Sagerunex and hacking tools\": \"https://blog.talosintelligence.com/lotus-blossom-espionage-group/\",\n \"CrowdStrike: ecco le minacce emergenti del 2025\": \"https://www.securityinfo.it/2025/02/27/crowdstrike-report-minacce-2025/\",\n \"FBI confirms Lazarus hackers were behind $1.5B Bybit crypto heist\": \"https://www.bleepingcomputer.com/news/security/fbi-confirms-lazarus-hackers-were-behind-15b-bybit-crypto-heist/\",\n \"Orange Romania - 556,557 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#OrangeRomania\",\n \"U.S. Soldier Charged in AT&T Hack Searched “Can Hacking Be Treason”\": \"https://krebsonsecurity.com/2025/02/u-s-soldier-charged-in-att-hack-searched-can-hacking-be-treason/\",\n \"Southern Water says Black Basta ransomware attack cost £4.5M in expenses\": \"https://www.bleepingcomputer.com/news/security/southern-water-says-black-basta-ransomware-attack-cost-45m-in-expenses/\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #761: Forensic Test Kitchen with more Claude 3.7!\": \"https://www.hecfblog.com/2025/02/daily-blog-761-forensic-test-kitchen.html\"\n },\n \"安全内参\": {\n \"存在网络安全问题，两家单位被约谈整改\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513841&idx=1&sn=c00933ab936585b06d534aa6bae21d87&chksm=ebfaf1d1dc8d78c70bdc3548208328280ac3c8af1ed486588799a289727a8286e20b50de8aa1&scene=58&subscene=0#rd\",\n \"统一全军身份验证和访问，美国防部深化部署零信任架构\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513841&idx=2&sn=fd7ea89ae4845aa6709fe5e5685b8bd1&chksm=ebfaf1d1dc8d78c7d83c1471650a880cd20976600c05283431c4a466f7ff9ad77ff8ee1d2835&scene=58&subscene=0#rd\"\n },\n \"Securityinfo.it\": {\n \"Gli attacchi ransomware sono quadruplicati nel 2024\": \"https://www.securityinfo.it/2025/02/27/gli-attacchi-ransomware-sono-quadruplicati-nel-2024/?utm_source=rss&utm_medium=rss&utm_campaign=gli-attacchi-ransomware-sono-quadruplicati-nel-2024\",\n \"CrowdStrike: ecco le minacce emergenti del 2025\": \"https://www.securityinfo.it/2025/02/27/crowdstrike-report-minacce-2025/?utm_source=rss&utm_medium=rss&utm_campaign=crowdstrike-report-minacce-2025\"\n },\n \"美团技术团队\": {\n \"上下文感知的聚合页广告优化实践\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651779932&idx=1&sn=0da4221704c0cff8b8dabe083db9fb00&chksm=bd122a118a65a307614f01eeb5eb83ff3b89dca179e6732078c801d7c639ad948a878fb47e4b&scene=58&subscene=0#rd\",\n \"美团2025年春季校园招聘全球启动\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651779932&idx=2&sn=554965785e83dd3e87a8e2fcb1a49d22&chksm=bd122a118a65a3079facfde753dceadec3220a7205038a7b18b1eacfaad3efc2ea2a9a60f826&scene=58&subscene=0#rd\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"Njrat Campaign Using Microsoft Dev Tunnels, (Thu, Feb 27th)\": \"https://isc.sans.edu/diary/rss/31724\",\n \"ISC Stormcast For Thursday, February 27th, 2025 https://isc.sans.edu/podcastdetail/9342, (Thu, Feb 27th)\": \"https://isc.sans.edu/diary/rss/31722\"\n },\n \"Have I Been Pwned latest breaches\": {\n \"Spyzie - 518,643 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Spyzie\",\n \"Orange Romania - 556,557 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#OrangeRomania\"\n },\n \"安全分析与研究\": {\n \"GuLoader恶意软件最新攻击链样本详细分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490797&idx=1&sn=f454227e2ef591427376bad3a05a6b26&chksm=902fb3c5a7583ad37df74f272610ce55a3f4fb02e9e9b5e3c6ba03c22979ad02a84daddc3ed1&scene=58&subscene=0#rd\",\n \"Tellyouthepass勒索病毒攻击\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490797&idx=2&sn=67c0293e998b170a7982e267da4172e5&chksm=902fb3c5a7583ad3813c8fd89f8beddde7c2f1742c33eac1ba71b2148adf9e226c5197ed13be&scene=58&subscene=0#rd\"\n },\n \"迪哥讲事\": {\n \"白捡200美元\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497195&idx=1&sn=69427b63d26293f66174607a2f704f1c&chksm=e8a5ff88dfd2769e3caaa03b16cad3790ba2f5085e7527a89427cc24e065168d3975fcb0c548&scene=58&subscene=0#rd\"\n },\n \"ICT Security Magazine\": {\n \"Browser aziendale e SSE: insieme è meglio\": \"https://www.ictsecuritymagazine.com/notizie/browser-aziendale-sse/\",\n \"Cybercrime e spionaggio industriale\": \"https://www.ictsecuritymagazine.com/articoli/spionaggio-industriale/\"\n },\n \"Full Disclosure\": {\n \"SEC Consult SA-20250226-0 :: Multiple vulnerabilities in Siemens A8000 CP-8050 & CP-8031 PLC\": \"https://seclists.org/fulldisclosure/2025/Feb/19\",\n \"Re: MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client\": \"https://seclists.org/fulldisclosure/2025/Feb/18\"\n },\n \"Tor Project blog\": {\n \"A fresh coat for Snowflake: a website refresh to help more people get online\": \"https://blog.torproject.org/snowflake-refresh-to-help-more-people-get-online/\"\n },\n \"Graham Cluley\": {\n \"Warning issued as hackers offer firms fake cybersecurity audits to break into their systems\": \"https://www.tripwire.com/state-of-security/beware-fake-cybersecurity-audits-cybercriminals-use-scams-breach-corporate\",\n \"Smashing Security podcast #406: History’s biggest heist just happened, and online abuse\": \"https://grahamcluley.com/smashing-security-podcast-406/\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Github scam investigation: Thousands of \\\"mods\\\" and \\\"cracks\\\" stealing your data\": \"https://www.reddit.com/r/netsec/comments/1izryuk/github_scam_investigation_thousands_of_mods_and/\",\n \"16 Malicious Chrome extensions infected over 3.2 mln users worldwide.\": \"https://www.reddit.com/r/netsec/comments/1izcoti/16_malicious_chrome_extensions_infected_over_32/\",\n \"How to Find More IDORs - @verylazytech\": \"https://www.reddit.com/r/netsec/comments/1izk1cl/how_to_find_more_idors_verylazytech/\",\n \"Research: Using Stylometry & Topic Modeling to Attribute State-Sponsored Hacktivist Groups\": \"https://www.reddit.com/r/netsec/comments/1izgnfx/research_using_stylometry_topic_modeling_to/\",\n \"Join us in 2 weeks on March 12th at 13:00 GMT-5 for a meetup teamup: Liz Steininger from Least Authority and Pacu from Zcash Community Grants! The two will be presenting \\\"Enhancing Zcash Security: a long-term engagement with Least Authority, the Zcash Ecosystem Security Lead\\\".\": \"https://www.reddit.com/r/netsec/comments/1izjp9w/join_us_in_2_weeks_on_march_12th_at_1300_gmt5_for/\"\n },\n \"Computer Forensics\": {\n \"Cellebrite and Graykey question\": \"https://www.reddit.com/r/computerforensics/comments/1izhppd/cellebrite_and_graykey_question/\",\n \"Exterro FTK Imager\": \"https://www.reddit.com/r/computerforensics/comments/1izq93v/exterro_ftk_imager/\"\n },\n \"Social Engineering\": {\n \"The Art of the Double Bind: How to Create No-Win Situations That Leave Them Trapped\": \"https://www.reddit.com/r/SocialEngineering/comments/1izstdo/the_art_of_the_double_bind_how_to_create_nowin/\"\n },\n \"Information Security\": {\n \"How Cooked Are You? A short tutorial on how to hide sensitive information from your log file\": \"https://www.reddit.com/r/Information_Security/comments/1izp2vq/how_cooked_are_you_a_short_tutorial_on_how_to/\"\n },\n \"The Hacker News\": {\n \"Silver Fox APT Uses Winos 4.0 Malware in Cyber Attacks Against Taiwanese Organizations\": \"https://thehackernews.com/2025/02/silver-fox-apt-uses-winos-40-malware-in.html\",\n \"Space Pirates Targets Russian IT Firms With New LuckyStrike Agent Malware\": \"https://thehackernews.com/2025/02/space-pirates-targets-russian-it-firms.html\",\n \"89% of Enterprise GenAI Usage Is Invisible to Organizations Exposing Critical Security Risks, New Report Reveals\": \"https://thehackernews.com/2025/02/89-of-enterprise-genai-usage-is.html\",\n \"New TgToxic Banking Trojan Variant Evolves with Anti-Analysis Upgrades\": \"https://thehackernews.com/2025/02/new-tgtoxic-banking-trojan-variant.html\",\n \"PolarEdge Botnet Exploits Cisco and Other Flaws to Hijack ASUS, QNAP, and Synology Devices\": \"https://thehackernews.com/2025/02/polaredge-botnet-exploits-cisco-and.html\",\n \"Bybit Hack Traced to Safe{Wallet} Supply Chain Attack Exploited by North Korean Hackers\": \"https://thehackernews.com/2025/02/bybit-hack-traced-to-safewallet-supply.html\"\n },\n \"小陈的Life\": {\n \"AI驱动的安全创新：MCP技术的应用实践\": \"https://mp.weixin.qq.com/s?__biz=MzAxNDk0MDU2MA==&mid=2247484563&idx=1&sn=40a58bb09da26af940bf1958aa28c471&chksm=9b8ae46cacfd6d7ae69627646a9ce89cbe1a440def99da1f715d4a44224ab6d5eb93b201f742&scene=58&subscene=0#rd\"\n },\n \"Deeplinks\": {\n \"Ninth Circuit Correctly Rules That Dating App Isn’t Liable for Matching Users\": \"https://www.eff.org/deeplinks/2025/02/ninth-circuit-correctly-rules-dating-app-isnt-liable-matching-users\",\n \"EFF In Conversation With Ron Deibert on Chasing Shadows\": \"https://www.eff.org/deeplinks/2025/02/eff-conversation-ron-deibert-chasing-shadows\"\n },\n \"Security Affairs\": {\n \"FBI: North Korea-linked TraderTraitor is responsible for $1.5 Billion Bybit hack\": \"https://securityaffairs.com/174735/cyber-crime/fbi-north-korea-responsible-bybit-hack.html\",\n \"Criminal group UAC-0173 targets the Notary Office of Ukraine\": \"https://securityaffairs.com/174723/cyber-crime/uac-0173-targets-the-notary-office-of-ukraine.html\",\n \"Cellebrite blocked Serbia from using its solution because misuse of the equipment for political reasons\": \"https://securityaffairs.com/174707/intelligence/cellebrite-blocked-serbia-from-using-its-solution-because-misuse-of-the-equipment-for-political-reasons.html\",\n \"DragonForce Ransomware group is targeting Saudi Arabia\": \"https://securityaffairs.com/174717/cyber-crime/dragonforce-ransomware-group-is-targeting-saudi-arabia.html\"\n },\n \"Schneier on Security\": {\n \"“Emergent Misalignment” in LLMs\": \"https://www.schneier.com/blog/archives/2025/02/emergent-misalignment-in-llms.html\"\n },\n \"Krebs on Security\": {\n \"U.S. Soldier Charged in AT&T Hack Searched “Can Hacking Be Treason”\": \"https://krebsonsecurity.com/2025/02/u-s-soldier-charged-in-att-hack-searched-can-hacking-be-treason/\"\n },\n \"Your Open Hacker Community\": {\n \"Crack WiFi Passwords Faster by Building Targeted Wordlists (Script Included)\": \"https://www.reddit.com/r/HowToHack/comments/1izdarl/crack_wifi_passwords_faster_by_building_targeted/\",\n \"Haiku inc\": \"https://www.reddit.com/r/HowToHack/comments/1iztpig/haiku_inc/\",\n \"Get Wi-Fi networks\": \"https://www.reddit.com/r/HowToHack/comments/1izo9m6/get_wifi_networks/\",\n \"How can I learn hacking in android?\": \"https://www.reddit.com/r/HowToHack/comments/1izgbsn/how_can_i_learn_hacking_in_android/\",\n \"About Bug Bounty in the Hackerone\": \"https://www.reddit.com/r/HowToHack/comments/1izl1sr/about_bug_bounty_in_the_hackerone/\",\n \"My friend's roblox account got hacked through a link\": \"https://www.reddit.com/r/HowToHack/comments/1izq43r/my_friends_roblox_account_got_hacked_through_a/\",\n \"Outlook Emails\": \"https://www.reddit.com/r/HowToHack/comments/1izd7z1/outlook_emails/\",\n \"[Help] This may be very stupid of my part but i need help getting on a discord account\": \"https://www.reddit.com/r/HowToHack/comments/1izbatz/help_this_may_be_very_stupid_of_my_part_but_i/\",\n \"Help\": \"https://www.reddit.com/r/HowToHack/comments/1iz9oip/help/\",\n \"Does anyone know how to hack?\": \"https://www.reddit.com/r/HowToHack/comments/1izbliu/does_anyone_know_how_to_hack/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Zero Days Are Not Just Fiction - PSW #863\": \"http://sites.libsyn.com/18678/zero-days-are-not-just-fiction-psw-863\"\n },\n \"Dark Space Blogspot\": {\n \"20 Anni Di YouTube: Alcuni Record e Curiosità\": \"http://darkwhite666.blogspot.com/2025/02/20-anni-di-youtube-alcuni-record-e.html\"\n }\n}"}, "a9c4c5bf3ba0a183a3c3b2c34b5f06ef4a0db572": {"t": 1785772239.526976, "n": 58217, "h": "f612dfb843d5ce7a", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-02-27 Review\": \"http://www.sec-wiki.com/?2025-02-27\"\n },\n \"Trustwave Blog\": {\n \"Bridging the Gap: Why IT and OT Convergence is Reshaping Manufacturing\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/bridging-the-gap-why-it-and-ot-convergence-is-reshaping-manufacturing/\"\n },\n \"博客园 - sevck\": {\n \"AI安全-模型用户输入注入 - sevck\": \"https://www.cnblogs.com/sevck/p/18741695\"\n },\n \"奇安信攻防社区\": {\n \"渗透测试JS接口Fuzz场景研究\": \"https://forum.butian.net/share/4163\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"Library-Card-System V 1.0 | Add Picture/Signature - signup.php | Unrestricted File Upload | Found By Maloy Roy Orko\": \"https://cxsecurity.com/issue/WLB-2025020018\",\n \"Needyamin | Library-Card-System 1.0 | card.php?id= SQL Injection | Found By Maloy Roy Orko\": \"https://cxsecurity.com/issue/WLB-2025020017\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"CVE-2025-20029：F5 BIG-IP系统发现命令注入漏洞，概念验证已发布\": \"https://www.anquanke.com/post/id/304828\",\n \"Palo Alto Networks Unit 42 发布了 2025 全球事件响应报告\": \"https://www.anquanke.com/post/id/304825\",\n \"警惕！银狐木马“盯上”DeepSeek本地化部署工具\": \"https://www.anquanke.com/post/id/304817\",\n \"企业安全浏览器领域领导者 Menlo Security 宣布收购 Votiro\": \"https://www.anquanke.com/post/id/304814\",\n \"NVIDIA针对Jetson AGX Orin和IGX Orin发布安全更新，以修复UEFI漏洞（CVE-2024-0148）\": \"https://www.anquanke.com/post/id/304809\",\n \"Bybit遭窃事件：Safe{Wallet}漏洞被利用，14亿美元以太坊被盗\": \"https://www.anquanke.com/post/id/304806\",\n \"CVE-2025-0514：LibreOffice缺陷或致恶意文件意外运行\": \"https://www.anquanke.com/post/id/304803\",\n \"Nozomi 报告显示澳大利亚在全球网络安全攻击排行榜中位列第四\": \"https://www.anquanke.com/post/id/304800\",\n \"勒索软件策略持续演变，MSPs面临严峻挑战\": \"https://www.anquanke.com/post/id/304797\",\n \"趋势科技推出用于主动预防威胁的人工智能模型\": \"https://www.anquanke.com/post/id/304794\"\n },\n \"paper - Last paper\": {\n \"DeepSeek 启示：深度揭秘基于 PTX 的 GPU 底层优化技术\": \"https://paper.seebug.org/3294/\",\n \"银狐突袭！DeepSeek本地化部署暗藏“致命陷阱”\": \"https://paper.seebug.org/3293/\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Thu Feb 27 20:26:17 UTC 2025\": \"https://github.com/trickest/cve/commit/845a3cd045d627b36c38b51bfae429b1bb2e90be\",\n \"Update Thu Feb 27 12:36:56 UTC 2025\": \"https://github.com/trickest/cve/commit/8775b05579bffbc933be959717d524a32dc74c54\",\n \"Update Thu Feb 27 04:38:18 UTC 2025\": \"https://github.com/trickest/cve/commit/aeeabed8b199f0fda558bf160413a7c8f6e3d298\"\n },\n \"ElcomSoft blog\": {\n \"NVIDIA Blackwell is Out: Should You Upgrade?\": \"https://blog.elcomsoft.com/2025/02/nvidia-blackwell-is-out-should-you-upgrade/\"\n },\n \"Security Boulevard\": {\n \"Morpheus: Building Dynamic, Context-Specific Response Playbooks with AI\": \"https://securityboulevard.com/2025/02/morpheus-building-dynamic-context-specific-response-playbooks-with-ai/\",\n \"Optimistic About Future Cybersecurity Trends?\": \"https://securityboulevard.com/2025/02/optimistic-about-future-cybersecurity-trends/\",\n \"Do Powerful Tools Enhance Your Data Security?\": \"https://securityboulevard.com/2025/02/do-powerful-tools-enhance-your-data-security/\",\n \"Is Your NHI Lifecycle Management Capable?\": \"https://securityboulevard.com/2025/02/is-your-nhi-lifecycle-management-capable/\",\n \"CMMC is Here: Simplifying Compliance with Enclaves\": \"https://securityboulevard.com/2025/02/cmmc-is-here-simplifying-compliance-with-enclaves/\",\n \"The Future of Auditing: What to Look for in 2025\": \"https://securityboulevard.com/2025/02/the-future-of-auditing-what-to-look-for-in-2025/\",\n \"Executive Perspectives, Episode 5, Meagan Fitzsimmons\": \"https://securityboulevard.com/2025/02/executive-perspectives-episode-5-meagan-fitzsimmons/\",\n \"“Emergent Misalignment” in LLMs\": \"https://securityboulevard.com/2025/02/emergent-misalignment-in-llms/\",\n \"Comic Agilé – Luxshan Ratnaravi, Mikkel Noe-Nygaard – #327 – Including QA Tasks At Sprint Planning\": \"https://securityboulevard.com/2025/02/comic-agile-luxshan-ratnaravi-mikkel-noe-nygaard-327-including-qa-tasks-at-sprint-planning/\",\n \"What is a Cloud HSM? Understanding Cloud Hardware Security Module (HSM) Advantages Compared with On-Premises HSMs\": \"https://securityboulevard.com/2025/02/what-is-a-cloud-hsm-understanding-cloud-hardware-security-module-hsm-advantages-compared-with-on-premises-hsms/\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"攻击DeepSeek的僵尸网络HailBot的三个变种分析\": \"https://www.4hou.com/posts/ommL\",\n \"2024年活跃勒索攻击组织盘点\": \"https://www.4hou.com/posts/PGlA\",\n \"潜伏8大高危指令！仿冒DeepSeek竟能远程开启VNC监控，你的手机可能成为肉鸡\": \"https://www.4hou.com/posts/W1vE\",\n \"幽灵勒索软件入侵了 70 个国家的组织机构\": \"https://www.4hou.com/posts/yz56\",\n \"名为“StaryDobry”的大规模恶意软件活动爆发\": \"https://www.4hou.com/posts/wx5r\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"Text Manipulation Tools for Linux and Windows\": \"https://infosecwriteups.com/text-manipulation-tools-for-blue-team-7cef34c1e02a?source=rss----7b722bfd1b8d---4\",\n \"JUST CRASHED SYSTEM USING IMAGE AND GOT BOUNTY $ 500\": \"https://infosecwriteups.com/just-crashed-system-using-image-and-got-bounty-500-eb30dc4b85a5?source=rss----7b722bfd1b8d---4\",\n \"How do you install and run LLMs such as deepseek-r1 locally?\": \"https://infosecwriteups.com/how-do-you-install-and-run-llms-such-as-deepseek-r1-locally-2fde58d1e4bf?source=rss----7b722bfd1b8d---4\",\n \"HTB: Cyber Apocalypse 2024 — Pet Companion\": \"https://infosecwriteups.com/htb-cyber-apocalypse-2024-pet-companion-b9c289efc448?source=rss----7b722bfd1b8d---4\",\n \"Spring Boot Is Moving Away from @Autowired – Here’s What You Should Do Instead!\": \"https://infosecwriteups.com/spring-boot-is-moving-away-from-autowired-heres-what-you-should-do-instead-890cd16ca3dd?source=rss----7b722bfd1b8d---4\",\n \"Bypassing AWS S3 Bucket Restrictions: Security Testing Techniques\": \"https://infosecwriteups.com/bypassing-aws-s3-bucket-restrictions-security-testing-techniques-63fe75aa9ff8?source=rss----7b722bfd1b8d---4\",\n \"$100-$20k worth Stored XSS Vulnerability | Hidden Methods\": \"https://infosecwriteups.com/100-20k-worth-stored-xss-vulnerability-hidden-methods-e56fe57437c4?source=rss----7b722bfd1b8d---4\",\n \"$500-$20k worth GraphQL Vulnerabilities | Advanced Tips & Tricks\": \"https://infosecwriteups.com/500-20k-worth-graphql-vulnerabilities-advanced-tips-tricks-74e8f4679b91?source=rss----7b722bfd1b8d---4\",\n \"CVE-2025–1094: PostgreSQL Injection Vulnerability Exploit\": \"https://infosecwriteups.com/cve-2025-1094-postgresql-sql-injection-vulnerability-exploit-2acf37ae399a?source=rss----7b722bfd1b8d---4\",\n \"Finding an easy bug in the profile picture field.\": \"https://infosecwriteups.com/finding-an-easy-bug-in-the-profile-picture-field-122a7aca2b42?source=rss----7b722bfd1b8d---4\"\n },\n \"Doonsec's feed\": {\n \"完善数据流通安全治理机制 促进数据高质量发展\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485724&idx=1&sn=a37a101e19dc53394c2d7a1cdf666882\",\n \"【直卖实拍】北七家3居变4居豪装，理想楼层、户型、朝向\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485724&idx=2&sn=74640bae2948836a9640d7439a87bd06\",\n \"【干货】笑傲职场的独家经验（1）\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485724&idx=3&sn=074796ed19fd76de6158809deeee0a37\",\n \"【干货原创】实网攻防演习常态化，会带来什么变化01\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485724&idx=4&sn=da50c42fe00c36855a77742b4a9677ee\",\n \"【干货原创】K12教育，鲜为人知的模式秘密\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485724&idx=5&sn=fcf6d84e59536cae5065a5747f31f332\",\n \"钓鱼攻击通过PDF文档暗投后门病毒\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524506&idx=1&sn=d74006a215de392a907da006f6e67d8b\",\n \"实战案例分享:微信小程序抓包（简单详细易上手版）\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MTcyMTc5Nw==&mid=2247488493&idx=1&sn=a33b931700102ae3ce9eef7de2021cc8\",\n \"梆梆安全谭阳：API安全防护要做到“端到端”和“全渠道”\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135261&idx=1&sn=bd32624342195ab42741a6317f8caa07\",\n \"黑客的钥匙：无线门禁攻防实战\": \"https://mp.weixin.qq.com/s?__biz=MzU2NjI5NzY1OA==&mid=2247512484&idx=1&sn=c55b4a7c114aca61059c7f3339c0988b\",\n \"轻松学会Java代码审计之实战案例第1天\": \"https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247492751&idx=1&sn=d3af075207eb85ef6477d97344b23081\",\n \"手机App数据包抓包实战\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MzQxODc3NA==&mid=2247484347&idx=1&sn=58d9782ee4c27b6640b342fc612de3e2\",\n \"鄂尔多斯两单位因网络安全问题被网信办约谈\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490510&idx=1&sn=e90e9e749a383d30dd0f660ee021071d\",\n \"亚信安全发布2024年业绩快报：扭亏为盈\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490510&idx=2&sn=95640a24830e5b47978deb7892db8f72\",\n \"某开源OA白名单后缀限制下巧用系统设计getshell\": \"https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247510819&idx=1&sn=2faaa1d3549b8ba60ef736ea081825c7\",\n \"安全简讯（2025.02.27）\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500800&idx=1&sn=551bb30026bf943caada7726d8697fa3\",\n \"【漏洞通告】Veeam Backup Enterprise Manager身份验证绕过漏洞（CVE-2024-29849）\": \"https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500800&idx=2&sn=073d9340ae748aba1da028d541fa411d\",\n \"【论文速读】| TrojanWhisper：评估预训练的大语言模型以检测并定位硬件木马\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495992&idx=1&sn=4b4df4fb29cbb3720ecf7022ec37c95b\",\n \"中国信通院“护证计划”正式启动，合合信息入选首批技术支撑单位\": \"https://mp.weixin.qq.com/s?__biz=MzAxMzg0NjY2NA==&mid=2247493182&idx=1&sn=ebec3bb0753f49fed3930eeb4f1b389e\",\n \"【0day漏洞分析】WordPress Yawave插件存在前台SQL注入漏洞(CVE-2025-1648)\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489105&idx=1&sn=224715ee4e240f98617531d910c0e58c\",\n \"AI驱动的安全创新：MCP技术的应用实践\": \"https://mp.weixin.qq.com/s?__biz=MzAxNDk0MDU2MA==&mid=2247484563&idx=1&sn=40a58bb09da26af940bf1958aa28c471\",\n \"内蒙古赤峰市委书记唐毅一行来访奇安信\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625288&idx=1&sn=518e1f36d840f5ccfee8cdd55289f86d\",\n \"超级勒索软件内部攻击技术揭秘：Black Basta泄露数据分析\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625288&idx=2&sn=6ca429e94ffc32c4d447b10a2a41ef13\",\n \"能收集微信、QQ数据？间谍软件LightSpy新增100+指令\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314922&idx=1&sn=92f82cc33129dd76df1348a129bf795e\",\n \"新型Linux恶意软件“Auto-Color”允许黑客彻底远程控制受感染系统\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314922&idx=2&sn=beef994697441390812481edc8ca90ad\",\n \"关于开展2025数字中国创新大赛数字安全赛道数据安全和移动互联网(APP)安全赛事的通知\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314922&idx=3&sn=0c97f2cd9a9e5a442f69cc323b61d403\",\n \"瑞典要求加密通信应用部署后门，Signal强烈反对\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314922&idx=4&sn=5949abecd1519cefe9dc96c372419fa4\",\n \"【安全圈】央视揭露电诈新手段：“手机口”成诈骗分子的“隐形传声筒”\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=1&sn=e269dac5b42a4c742cb4b652259c209e\",\n \"【安全圈】瑞典要求加密通信应用部署后门，Signal强烈反对\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=2&sn=c968a8cc40580623d340d29c9f094df6\",\n \"【安全圈】DISA 透露，2024 年的数据泄露影响了超过 330 万人\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=3&sn=fa7279a82fe96bdb54c1f935fe561090\",\n \"【安全圈】CVE-2025-20029：F5 BIG-IP系统发现命令注入漏洞，概念验证已发布\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=4&sn=39b4a77aebadbd2051b65b5c2aeac879\",\n \"NDSS参会特辑｜Distinguished Paper +1! 白泽记者前线报道\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247493205&idx=1&sn=e30c3acf21a3135b50a9dfe3c8d936c6\",\n \"【活动】关于开展2025数字中国创新大赛数字安全赛道数据安全和移动互联网(APP)安全赛事的通知\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649249976&idx=1&sn=ff2ae9de7a50d428287924d6b50747ea\",\n \"【技术能力】AI Security：智能网联汽车AI安全举隅\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649249976&idx=2&sn=0bb23dee1f13b920ad558a9b6f36eebf\",\n \"【工信动态】中国工程院院士李克强：如何巩固和扩大新能源汽车发展优势？\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649249976&idx=3&sn=b53e3a3b7838dbbc40ce770b9e7d811d\",\n \"“80后死亡率突破5.2%”？AI又开始“胡说八道”了\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636814&idx=1&sn=97117227eea2487abae47624a3548e0a\",\n \"从供应链投毒到算力劫持：探真科技破解 AI 安全三重困局\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636814&idx=2&sn=7fdce689ddd9710a1b13a84422e7efa3\",\n \"你的网恋“纯欲女友”为何能把你迷得不要不要的\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247636814&idx=3&sn=eaf8ad52ce20dbc307bf775b75aefa29\",\n \"数据安全分类分级产品选型：五大关键层面深度剖析\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDE0NDUyNA==&mid=2650805340&idx=1&sn=dba4fcd4218cd91061ae9c206e66f0e0\",\n \"腾讯安全市占率领跑！艾瑞咨询最新威胁情报市场报告出炉\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526499&idx=1&sn=d75671234211d361d450f920ad7d6086\",\n \"《一. K线形态》\": \"https://mp.weixin.qq.com/s?__biz=MzI3NTcwNTQ2Mg==&mid=2247487692&idx=1&sn=7c2d665e13677afa82bc92a3c38ac72b\",\n \"关于部分用户不当使用我司产品引发AI大模型安全问题的声明\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649871017&idx=1&sn=1ac39f16ef459fce914523026f7d1ab4\",\n \"国务院印发《国家突发事件总体应急预案》，网络安全、网络数据安全、信息安全事件等归类“事故灾难”\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498956&idx=1&sn=85ff6fd691b533cf237e79c058725194\",\n \"人心中的成见是一座大山。\": \"https://mp.weixin.qq.com/s?__biz=MzU2MDkzMTk3Mg==&mid=2247485376&idx=1&sn=5bdf4c90d735d84312475f42c7908630\",\n \"手机系统一直不更新可能被黑\": \"https://mp.weixin.qq.com/s?__biz=MzA4OTM1MzkwNg==&mid=2652895533&idx=1&sn=4d81702c4caffd87a99a2047c9fc619c\",\n \"专题·漏洞人才培养 | 网络安全实战人才培养的难点和对策\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=1&sn=d7efd3424f1b0073011b56155937fd1e\",\n \"前沿 | 全球数字契约：大变局时代的一次集体行动\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=2&sn=42468e9e03470ad0c6de684ad9a1c61a\",\n \"外交部：人工智能不应也不能沦为维护霸权、追求优势的工具\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=3&sn=981c72dae778b61f65241e039da85d21\",\n \"专家观点 | 推进人工智能立法恰逢其时\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=4&sn=c29da6552740c1769670ec7a96be48bf\",\n \"评论 | 让数据产业引擎动力更强劲\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=5&sn=3dc98be61b9dd366f04688aeab4622ad\",\n \"无线网络的“透视眼”：Airodump-ng实战指南（附独家避坑技巧）\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166995&idx=1&sn=dd0b2dfcb173239cb2c36ad8bf4415f1\",\n \"谷歌密码管理器终于与iOS同步——操作方法如下\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166995&idx=2&sn=4cef08efaf2d0b9dd4cf24139f3115ce\",\n \"朝鲜黑客是如何实现15亿美元的加密货币盗窃案——史上最大规模\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166995&idx=3&sn=9c7aae006c0da4bda0e43b234fc9fece\",\n \"KDD2025｜小红书联合中科大提出1.44M轻量高效AI图像检测模型，超SOTA 4.5个点\": \"https://mp.weixin.qq.com/s?__biz=Mzg4OTc2MzczNg==&mid=2247492193&idx=1&sn=57fee917dfb38469aad296f1ea625184\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524506&idx=2&sn=ec451d5cbc8f8eb3f2b617019a2423dc\",\n \"2025年十大最佳DevOps工具推荐\": \"https://mp.weixin.qq.com/s?__biz=MzU5Njc4NjM3NA==&mid=2247496298&idx=1&sn=200e635e43d6b6c340e6881a6ba425ff\",\n \"FBI确认Bybit被盗15亿美元是朝鲜黑客所为\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541652&idx=1&sn=92e109768cb56588dc949f7649e68cd9\",\n \"从0到1开发AI代码审计系统：如何打造高效代码审计解决方案？\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=1&sn=6ac8b3dbd8132ff9cf556988cbf19973\",\n \"AMSI简介及绕过方法总结\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=2&sn=5303a8192f311d09f00a5e8db0ef8b38\",\n \"“AI 热聊” 视频疯传，引发技术恐慌\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=3&sn=3f815839169e7437ed91a4bd98b17cd8\",\n \"直播预约 | 使用硬件调试器认识ARM64的四大特权级\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=4&sn=687a8700fe48fbeee032399623af2bbf\",\n \"Go红队开发—语法补充\": \"https://mp.weixin.qq.com/s?__biz=MzkxODcyNjk4NQ==&mid=2247487942&idx=1&sn=3c62d06792757993b3088ff7202a7bf1\",\n \"上海华瑞银行被罚，涉信息科技运行和系统开发未有效分离等\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931609&idx=1&sn=2340977f6526829ca1fe0c9d036bb2a8\",\n \"南京银行风险管理部招聘，涉信用风险模型开发和验证岗、市场风险计量岗\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931609&idx=2&sn=2e2efce1af8f41493f685a2669273f3e\",\n \"风云卫×DeepSeek-R1（四）：当AI侦探团遇上“漏洞迷案”\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650465690&idx=1&sn=650234777d3690854a7df522c77a89ff\",\n \"备考CISSP丨2025年4-7月CISSP官方培训计划抢先看\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492443&idx=1&sn=bf2b867474385a2220259be16b43bd91\",\n \"9.9分漏洞或导致2850多台Ivanti设备系统完全受损；三星系统推出业界首款后量子加密芯片S3SSE2A | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135261&idx=2&sn=74d6fa6c49fbd2630c460749eb487fd3\",\n \"针对基于智能卡进行认证的活动目录的攻击\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553954&idx=1&sn=2c60914fe43df7aa2c0e62c64b17e24c\",\n \"【免费领】SQL Server最佳安全配置实操手册（含检测及修复）\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553954&idx=2&sn=1baf7acc960c31c38573b6abd894b9c7\",\n \"2.84亿个账户信息泄露！ 飞天诚信：将“无密码”贯彻到底\": \"https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649876767&idx=1&sn=7edfad2f3d0b6b363af359d922c429fa\",\n \"Safe{Wallet}基础设施被注入恶意代码，Bybit遭供应链攻击损失15亿美元\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522342&idx=1&sn=8521c4624968b5c9a8d08e2a8af23490\",\n \"OSCP训练营重磅升级！实战技能+高效课程，备考更轻松\": \"https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247516257&idx=1&sn=66c19f879654a1d6baccb729ee02b5e8\",\n \"高效防御SQL注入攻击，表单动态加固了解一下！\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NTk3NjczNQ==&mid=2247485745&idx=1&sn=3c15268c7b78b739fdda3342915d92b8\",\n \"海外研究｜美联邦网络空间安全研发战略计划比较研究\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597937&idx=1&sn=badce6ee465c02350d6597c55d6ed060\",\n \"《网络安全2025：冲刺“十四五”》发布\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597937&idx=2&sn=8f7a4e1ce51edfd479482fa39efdcc2b\",\n \"Yak 在 AI 浪潮中应该如何存活？\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247527752&idx=1&sn=8f4148b9f96cfd513f38ab1ec5762562\",\n \"三种密码破解技术以及如何防御它们\": \"https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488630&idx=1&sn=fb6e72d78fe8dd0a0c003c8b8c7164e4\",\n \"黑客新闻-SOC3.0时代全面到来：AI如何重构网络安全防线？\": \"https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488630&idx=2&sn=c36156723ac118e277e3d93ed80da2ed\",\n \"网络安全动态 - 2025.02.27\": \"https://mp.weixin.qq.com/s?__biz=MzU1MzEzMzAxMA==&mid=2247499935&idx=1&sn=bcfd21ddba75f6187a35154d2e092266\",\n \"LLM应用安全风险演进：OWASP LLM应用Top10风险2023版与2025版对比分析\": \"https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247491670&idx=1&sn=6280c36026f765ffdb60ad563ac7d2a8\",\n \"网络安全态势周报（2月17日-2月23日）2025年第7期\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjM4ODc3OQ==&mid=2247485714&idx=1&sn=47dcf5a6d5d79416c36baf0c928bde15\",\n \"黑客一招教你F12改成绩，免费、19.9元都不需要\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247544458&idx=1&sn=7da004488f27753475b6ad0ae84ae335\",\n \"上海证券交易所招聘网络安全岗、数据安全岗\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247544458&idx=2&sn=f04dd9b419c269e5c9c7b7d42a793447\",\n \"美国印太政策的未来\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619475&idx=1&sn=aecb3987b1f274c4ca9656beb1b4618f\",\n \"英国首相宣布将国防支出增加到GDP的2.5%\": \"https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651619475&idx=2&sn=58d2204396754557cc15a0047f1f46a1\",\n \"回顾2024年中国网络安全十件大事 | 关于智能网联汽车安全，天融信这样说→\": \"https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650965501&idx=1&sn=5a84bb63195f7a690c0f8274f4bf6953\",\n \"2,500 美元漏洞报告-通过未认领的 Node 包进行远程代码执行 (RCE)\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489731&idx=1&sn=2186b5230165ffa81d5b3f73d659278c\",\n \"Deepseek助力职场办公效能提升课程\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489731&idx=2&sn=5ca1960dec06f12f9eda6b153b6d87cd\",\n \"创宇安全智脑 | NUUO 网络录像机 handle_site_config.php 远程命令执行等67个漏洞可检测\": \"https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490550&idx=1&sn=7bcda616277b8dc37ec062c199225436\",\n \"创新发布 AI to AI 测试｜长亭科技「AIGC安全评估服务」强势来袭\": \"https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247486891&idx=1&sn=72fa9b91e119e2811e49ae4aa9880cc0\",\n \"这就是绝对盘感\": \"https://mp.weixin.qq.com/s?__biz=MzIzNzMxMDkxNw==&mid=2247493517&idx=1&sn=941c2670bf9fda9c3f98ca994b8343fd\",\n \"sqlmap最新版命令翻译 （劝退指南）\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571348&idx=1&sn=eb28a5867382b382885dc11bbb970eca\",\n \"K8s 从入门到精通！这篇真绝了！\": \"https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571348&idx=2&sn=454a78541628db9f968c8586fe3249dd\",\n \"AI 安全警报！“劫持思维链”攻击，带“偏”大模型\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496715&idx=1&sn=40e0b437daf97524ac82e20ffa754709\",\n \"DeepSeek预测：2025年CISSP考试必考重点！\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247488012&idx=1&sn=7ec2b4a3ea9b37b22427b6fa4036d715\"\n },\n \"Sandfly Security Blog RSS Feed\": {\n \"SSH Lateral Movement Risks on Linux Webinar and White Paper\": \"https://sandflysecurity.com/blog/ssh-lateral-movement-risks-on-linux-webinar-and-white-paper/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"JUST CRASHED SYSTEM USING IMAGE AND GOT BOUNTY $ 500\": \"https://infosecwriteups.com/just-crashed-system-using-image-and-got-bounty-500-eb30dc4b85a5?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Bypassing AWS S3 Bucket Restrictions: Security Testing Techniques\": \"https://infosecwriteups.com/bypassing-aws-s3-bucket-restrictions-security-testing-techniques-63fe75aa9ff8?source=rss----7b722bfd1b8d--bug_bounty\",\n \"$100-$20k worth Stored XSS Vulnerability | Hidden Methods\": \"https://infosecwriteups.com/100-20k-worth-stored-xss-vulnerability-hidden-methods-e56fe57437c4?source=rss----7b722bfd1b8d--bug_bounty\",\n \"$500-$20k worth GraphQL Vulnerabilities | Advanced Tips & Tricks\": \"https://infosecwriteups.com/500-20k-worth-graphql-vulnerabilities-advanced-tips-tricks-74e8f4679b91?source=rss----7b722bfd1b8d--bug_bounty\",\n \"CVE-2025–1094: PostgreSQL Injection Vulnerability Exploit\": \"https://infosecwriteups.com/cve-2025-1094-postgresql-sql-injection-vulnerability-exploit-2acf37ae399a?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Finding an easy bug in the profile picture field.\": \"https://infosecwriteups.com/finding-an-easy-bug-in-the-profile-picture-field-122a7aca2b42?source=rss----7b722bfd1b8d--bug_bounty\",\n \"I Found an XSS vulnerability in QuickRide — Here’s how you can too!\": \"https://infosecwriteups.com/i-found-an-xss-vulnerability-in-quickride-heres-how-you-can-too-9606203d9e53?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Reverse Engineering\": {\n \"Tracking You from a Thousand Miles Away! Turning a Bluetooth Device into an Apple AirTag Without Root Privileges\": \"https://www.reddit.com/r/ReverseEngineering/comments/1izu5j8/tracking_you_from_a_thousand_miles_away_turning_a/\",\n \"Reverse-engineering an encrypted IoT protocol\": \"https://www.reddit.com/r/ReverseEngineering/comments/1iz2y7p/reverseengineering_an_encrypted_iot_protocol/\",\n \"A dive into the Rockchip Bootloader\": \"https://www.reddit.com/r/ReverseEngineering/comments/1iz34px/a_dive_into_the_rockchip_bootloader/\"\n },\n \"Malwarebytes\": {\n \"Countries and companies are fighting at the expense of our data privacy\": \"https://www.malwarebytes.com/blog/news/2025/02/countries-and-companies-are-fighting-at-the-expense-of-our-data-privacy\"\n },\n \"Intigriti\": {\n \"Finance industry: Top vulnerabilities in 2024 and what to watch for in 2025\": \"https://www.intigriti.com/blog/business-insights/finance-industry-top-vulnerabilities-in-2024-and-what-to-watch-for-in-2025\"\n },\n \"Checkmarx\": {\n \"Breaking the Bottleneck: How AppSec Managers Can Reduce Risk Without Slowing Down Development\": \"https://checkmarx.com/blog/breaking-bottleneck-how-appsec-reduce-risk-without-slowing-development/\"\n },\n \"rtl-sdr.com\": {\n \"Creating a Drone Based Synthetic Aperture Radar\": \"https://www.rtl-sdr.com/creating-a-drone-based-synthetic-aperture-radar/\",\n \"An RTL-SDR/LoRa/GPS/RTC/USB-Hub Extension Board for the uConsole\": \"https://www.rtl-sdr.com/an-rtl-sdr-lora-gps-rtc-usb-hub-extension-board-for-the-uconsole/\",\n \"A Handheld Cyberdeck with RTL-SDR\": \"https://www.rtl-sdr.com/a-handheld-cyberdeck-with-rtl-sdr/\"\n },\n \"安全牛\": {\n \"梆梆安全谭阳：API安全防护要做到“端到端”和“全渠道”\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135261&idx=1&sn=bd32624342195ab42741a6317f8caa07&chksm=bd15adce8a6224d88c02a016f230594586f32ceb952129f00383c6abd9a797cddc1eda139f2e&scene=58&subscene=0#rd\",\n \"9.9分漏洞或导致2850多台Ivanti设备系统完全受损；三星系统推出业界首款后量子加密芯片S3SSE2A | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135261&idx=2&sn=74d6fa6c49fbd2630c460749eb487fd3&chksm=bd15adce8a6224d8f352f7e193e568e119a11c3b858b9a9e079e69d1a356958e6c2d3f57eb5a&scene=58&subscene=0#rd\"\n },\n \"HackerNews\": {\n \"“Have I Been Pwned” 平台新增 2.84 亿个被信息窃取恶意软件盗取的账户\": \"https://hackernews.cc/archives/57595\",\n \"澳大利亚试管婴儿巨头 Genea 遭白蚁勒索软件团伙入侵\": \"https://hackernews.cc/archives/57590\",\n \"EncryptHub 黑客组织入侵 618 家机构部署信息窃取木马和勒索软件\": \"https://hackernews.cc/archives/57584\",\n \"安装量达 10 万的 PyPi 软件包多年来一直从 Deezer 盗版音乐\": \"https://hackernews.cc/archives/57582\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"Fish Shell 4.0 释出\": \"https://www.solidot.org/story?sid=80672\",\n \"激素疗法或有助于延缓皮肤衰老\": \"https://www.solidot.org/story?sid=80671\",\n \"Ocean Infinity 重新开始搜寻 MH370\": \"https://www.solidot.org/story?sid=80670\",\n \"暗能量光谱仪发现 2800 个候选黑洞\": \"https://www.solidot.org/story?sid=80669\",\n \"东京推行四天工作制试图平衡工作和生活\": \"https://www.solidot.org/story?sid=80668\",\n \"Firefox 公布使用条款和更新隐私条款\": \"https://www.solidot.org/story?sid=80667\",\n \"Automattic 可能面临集体诉讼\": \"https://www.solidot.org/story?sid=80666\",\n \"中国湿地总面积过去四十年净减少 6 万平方公里\": \"https://www.solidot.org/story?sid=80665\",\n \"极端高温可能进一步加速老年人衰老\": \"https://www.solidot.org/story?sid=80664\",\n \"新发现再次否定了佩托悖论\": \"https://www.solidot.org/story?sid=80663\",\n \"《半条命 3》可能进入到了开发的最后阶段\": \"https://www.solidot.org/story?sid=80662\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"跨国黑客GHOSTR落网，涉90多起数据泄露案件\": \"https://www.freebuf.com/news/423130.html\",\n \"新型Linux后门病毒Auto-color瞄准美国和亚洲系统\": \"https://www.freebuf.com/articles/system/423126.html\",\n \"FreeBuf早报 | Bybit 遭黑客攻击事件溯源；微软合作伙伴中心存在高危漏洞\": \"https://www.freebuf.com/articles/423087.html\",\n \"89%的企业生成式AI使用未被IT部门察觉，暴露数据安全隐患\": \"https://www.freebuf.com/articles/database/423097.html\",\n \"黑客假冒中国台湾税务局传播Winos 4.0恶意软件\": \"https://www.freebuf.com/news/423120.html\",\n \"针对Web3领域求职者：GrassCall恶意软件窃取加密货币钱包\": \"https://www.freebuf.com/articles/423069.html\",\n \"新型攻击“nRootTag”将15亿部iPhone变为免费追踪器\": \"https://www.freebuf.com/vuls/423102.html\"\n },\n \"安全客\": {\n \"Bybit十五亿美元失窃案反转，竟是Safe协议开发者先“中招”\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788128&idx=1&sn=e2dbece6f830a6448fc883a3999332b0&chksm=8893be8fbfe437994387fed462260281a6796e4e62c7c439dc8ed5a3e398cf5ebdd98dc04e3a&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"从0到1开发AI代码审计系统：如何打造高效代码审计解决方案？\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=1&sn=6ac8b3dbd8132ff9cf556988cbf19973&chksm=b18c2b6586fba273159e7313093798e68f16a4497883e7ff8a009df94739566dbc0e7a946cd9&scene=58&subscene=0#rd\",\n \"AMSI简介及绕过方法总结\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=2&sn=5303a8192f311d09f00a5e8db0ef8b38&chksm=b18c2b6586fba273ec05f8faa7549b1333ffdfa2eae97a14b525766ef3df4cb5984c3796b8a4&scene=58&subscene=0#rd\",\n \"“AI 热聊” 视频疯传，引发技术恐慌\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=3&sn=3f815839169e7437ed91a4bd98b17cd8&chksm=b18c2b6586fba2736f2c1228f33818db1bfaed66a9648388dcffd666bf6e2f00adb7cc9d21b9&scene=58&subscene=0#rd\",\n \"直播预约 | 使用硬件调试器认识ARM64的四大特权级\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590191&idx=4&sn=687a8700fe48fbeee032399623af2bbf&chksm=b18c2b6586fba273c582b91d558bd3e712dc78cc83440f9d88d97763d9ef4a59f44a38018933&scene=58&subscene=0#rd\"\n },\n \"Web安全与前端\": {\n \"去哪儿网安全招聘：反入侵运营专家\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDA4NzAyMQ==&mid=2247483949&idx=1&sn=007998a58ae379c0ee5aaa3f4734b35c&chksm=9768bf2fa01f3639c49805e724c353669ac01274f302adf41a3d440ecdeb51b1d3e6a3eca21f&scene=58&subscene=0#rd\"\n },\n \"知道创宇404实验室\": {\n \"404星链计划 | 一大波项目版本更新\": \"https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990729&idx=1&sn=94dcc820e45ae45ea946896a750a2dd0&chksm=8079aabbb70e23ade1eddc4475e3aee884d362060c6da00c233a3a197867d177e94ae60fc2f6&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \".NET 通过代码审计发现某办公系统逻辑绕过漏洞可泄露管理员账户和密码\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499017&idx=1&sn=c17b802fed118434bf2134310fadc29e&chksm=fa5953e4cd2edaf2ec66ff6e982d6bf1f1641351ca4a8a43050c08709373f498234341967b72&scene=58&subscene=0#rd\",\n \".NET内网实战：通过伪造文件时间戳实现入侵阶段的痕迹清理\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499017&idx=2&sn=121df4bae602a09c7584447b778948d6&chksm=fa5953e4cd2edaf2c82f63e9ae6590e0c96abf05b7bfa471754ca1632322a6820fd0e9daf797&scene=58&subscene=0#rd\",\n \"一招鲜：通过 Windows 屏幕保护程序实现目标权限持久化\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499017&idx=3&sn=725ce5df98701f262561d16a901eecff&chksm=fa5953e4cd2edaf29ed447727fb757465759f13c6111d8623e4269c4b65d5bf88cb76cc83f3c&scene=58&subscene=0#rd\"\n },\n \"Black Hills Information Security\": {\n \"Wi-Fi Forge: Practice Wi-Fi Security Without Hardware\": \"https://www.blackhillsinfosec.com/wifi-forge/\"\n },\n \"腾讯安全威胁情报中心\": {\n \"腾讯安全市占率领跑！艾瑞咨询最新威胁情报市场报告出炉\": \"https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510095&idx=1&sn=b647cd03c99018ca04f3a704796bb1fb&chksm=ec9f713cdbe8f82a1ef164c5f81ce91870bc9d7445ba4c1d7cf0114d9a4d7cfe7107999b9ee5&scene=58&subscene=0#rd\"\n },\n \"奇安信 CERT\": {\n \"【已复现】NAKIVO Backup & Replication任意文件读取漏洞(CVE-2024-48248)安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503053&idx=1&sn=5fed028268e1c246223907f8312cd7ab&chksm=fe79e855c90e6143cede127f668f9ea87228c8bec618e4030297ec513afdda8336db0fed9cb0&scene=58&subscene=0#rd\"\n },\n \"数世咨询\": {\n \"微软Majorana 1 芯片对量子解密有何意义？\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537720&idx=1&sn=287fb3658e14a3b29ac40e789044003f&chksm=c1442685f633af933c67b3ea91e5ee8af60574887c3fe9157f333744296ea90a84e6ded1eed8&scene=58&subscene=0#rd\",\n \"《网络安全2025：冲刺“十四五”》发布\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537720&idx=2&sn=5b2f7c8e123bbb8404f7e76fc7efbeb4&chksm=c1442685f633af93a8c0008f696a26e34ebc2d5fe1a68787c7bd9a85c8ff28ebf6d41965b092&scene=58&subscene=0#rd\"\n },\n \"安全研究GoSSIP\": {\n \"G.O.S.S.I.P 阅读推荐 2025-02-27 全世界程序员，团结起来！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499800&idx=1&sn=a0ddcd52f005448d8c6af28861b82333&chksm=c063eec1f71467d74bb40e00a300cdda548cee447eea07b1e0795f5b9c794ec08e3480b1f63d&scene=58&subscene=0#rd\"\n },\n \"红日安全\": {\n \"招hvv上瘾的人 带你快乐赚钱\": \"https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851808&idx=1&sn=7d4d778185bfec73632e35f0ddcbf34e&chksm=f3e4e923c493603511a59055ed4de72073cd6f0a8c8cb8365f0e800e8e2fb8656d3622947f7d&scene=58&subscene=0#rd\"\n },\n \"ChaMd5安全团队\": {\n \"2025第一届“网谷杯” Writeup\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247512128&idx=1&sn=c0b97c8eedff483a5eaa6bbaf00e23fa&chksm=e89d9898dfea118ea3d2a88db4273eca8c9bb710ebff3c08b3adcaaac5eca12abcecef656810&scene=58&subscene=0#rd\"\n },\n \"微步在线\": {\n \"黑客最不想让你看到的，2024年漏洞攻击数据真相\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183236&idx=1&sn=1727469ff3beeb950542f8ae4d57d40b&chksm=f4486df8c33fe4ee0c7b62cb59b891067c87fa74029bd45738251b05b59d16d2e9084b8193d7&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"太劲爆了！美国国家安全局的秘密X爱聊天记录曝光（清晰大图版）\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559964&idx=1&sn=472bfe7ce91c4c5ff7c3488e3b16257e&chksm=87117b97b066f281208faed8df068b32c9ac3fe7de0e3ebe1950d1455dcd1182c08a842841c2&scene=58&subscene=0#rd\",\n \"蒙古国大会背后——中蒙生态与军事的双重较量\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559964&idx=2&sn=243d1c22de622ed18b9b35c98e021d79&chksm=87117b97b066f28189f863d27d1da0fab4f57f85871ba3a3c945e00ee8b9755dab404ad01cec&scene=58&subscene=0#rd\"\n },\n \"代码卫士\": {\n \"Safe{Wallet}基础设施被注入恶意代码，Bybit遭供应链攻击损失15亿美元\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522342&idx=1&sn=8521c4624968b5c9a8d08e2a8af23490&chksm=ea94a94cdde3205ad200f61e3311b075c8589b84e47a3d91b3e17103cbe66dca64d78510faf2&scene=58&subscene=0#rd\"\n },\n \"信息时代的犯罪侦查\": {\n \"隐秘的陷阱：一对夫妇的间谍之路\": \"https://mp.weixin.qq.com/s?__biz=MzAxNTA4NDAwOQ==&mid=2650737023&idx=1&sn=f3929bd91c54d00f7f162b9c5893bf9b&chksm=8382d9f9b4f550efb3998961d077f68da4bfb46cb2a22b31171e35f3c2aeea217d6f2a2d00e6&scene=58&subscene=0#rd\"\n },\n \"信息安全国家工程研究中心\": {\n \"国务院印发《国家突发事件总体应急预案》，网络安全、网络数据安全、信息安全事件等归类“事故灾难”\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498956&idx=1&sn=85ff6fd691b533cf237e79c058725194&chksm=feb67ddfc9c1f4c93e64111817e962ad43fbfb5704eddf817ea4c31d657992297a0369572e1a&scene=58&subscene=0#rd\"\n },\n \"恒脑与AI\": {\n \"AI 安全警报！“劫持思维链”攻击，带“偏”大模型\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496715&idx=1&sn=40e0b437daf97524ac82e20ffa754709&chksm=e9fd699ade8ae08ccfa47e86b0d733b6c93a843aa760d0c47d2a3e65a5d603e0da09a0246fa5&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"52 万的小米 SU7 Ultra，雷军把所有人都干懵了\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653074631&idx=1&sn=f9824515835e9d0c91314215b9913137&chksm=7e57c97149204067f35297fd25df403e6309a04cdac8ae30f07b9970b1a331f2693085fe858c&scene=58&subscene=0#rd\",\n \"诞生 11 年之后，智能音箱鼻祖完成最大升级，直指 ChatGPT\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653074631&idx=2&sn=9ebe1b26a7bf70dc0e00af23a85b8765&chksm=7e57c97149204067077f8c7dea856c175bd8f8d8b5cd54511d511b0540af675bcaefa24ae952&scene=58&subscene=0#rd\",\n \"没想到，我轻松干预了 DeepSeek 的搜索结果\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653074567&idx=1&sn=b0a2b87d5e6f30182a21a62f2998fd42&chksm=7e57c931492040279cfbc6f0bef309054fe33fdde89bb1f3eff7f10ab53fcd337cc71a8d1440&scene=58&subscene=0#rd\",\n \"库克薪酬增至 7461 万美元；传奔驰中国裁员，离职赔偿 N+9；宇树机器人日租近万，40 天回本 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653074517&idx=1&sn=40f71625443aaca4b664b23a462edcb5&chksm=7e57c9e3492040f5b13b62851e03547f45d6a1e1b987af6422c298fae449b9d4443c454a81bc&scene=58&subscene=0#rd\"\n },\n \"慢雾科技\": {\n \"Bybit 近 15 亿美金被盗真相 ：Safe{Wallet} 前端代码被篡改\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501336&idx=1&sn=2ad6eea9d1534aab1a5dea8dd06ea6a3&chksm=fddeb89fcaa9318933e8ac42c616d776ee75398cbaa81d3bb9cda3ea362fa081b3b01393847e&scene=58&subscene=0#rd\",\n \"OKX & SlowMist 联合发布｜Bom 恶意软件席卷上万用户，盗取资产超 182 万美元\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501336&idx=2&sn=fd4597e1846db1f94a777977951fde9a&chksm=fddeb89fcaa93189ff6fa7dfa5c9a0405664cc357827e613dcb6f4d5338d07248640b523eaf0&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】央视揭露电诈新手段：“手机口”成诈骗分子的“隐形传声筒”\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=1&sn=e269dac5b42a4c742cb4b652259c209e&chksm=f36e7513c419fc05f89fb42a37af00265b58a755157aae332832eee15b33a95e723d708cd795&scene=58&subscene=0#rd\",\n \"【安全圈】瑞典要求加密通信应用部署后门，Signal强烈反对\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=2&sn=c968a8cc40580623d340d29c9f094df6&chksm=f36e7513c419fc05956640b018abcd11ea2073c01be81c16118341d006a206aaeae907827c8a&scene=58&subscene=0#rd\",\n \"【安全圈】DISA 透露，2024 年的数据泄露影响了超过 330 万人\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=3&sn=fa7279a82fe96bdb54c1f935fe561090&chksm=f36e7513c419fc05ebbea7454e80a696ef8169c4f0c884e5db896ccfcb34597ff6080c4224b0&scene=58&subscene=0#rd\",\n \"【安全圈】CVE-2025-20029：F5 BIG-IP系统发现命令注入漏洞，概念验证已发布\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=4&sn=39b4a77aebadbd2051b65b5c2aeac879&chksm=f36e7513c419fc05845b92a5fb7cff138e2e09657b7fe582ef29b3781db1761fb8b7d3cfd22a&scene=58&subscene=0#rd\"\n },\n \"Yak Project\": {\n \"Yak 在 AI 浪潮中应该如何存活？\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247527752&idx=1&sn=8f4148b9f96cfd513f38ab1ec5762562&chksm=c2d111ecf5a698fa6b6aae1d1dad7bad45b6e7563889e275191d0c74041eb47391a0a00055b8&scene=58&subscene=0#rd\"\n },\n \"黑伞安全\": {\n \"2,500 美元漏洞报告-通过未认领的 Node 包进行远程代码执行 (RCE)\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489731&idx=1&sn=2186b5230165ffa81d5b3f73d659278c&chksm=fb02959bcc751c8d15bbf41d5159696428c4d9c6d9fa2c6f2e13309b74cf59d2aa80cbe4d426&scene=58&subscene=0#rd\",\n \"Deepseek助力职场办公效能提升课程\": \"https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489731&idx=2&sn=5ca1960dec06f12f9eda6b153b6d87cd&chksm=fb02959bcc751c8d8f7ff73ba197f24dae88965e0e4e35b45bc46e8494502ef2f5acdd72c03a&scene=58&subscene=0#rd\"\n },\n \"威胁猎人Threat Hunter\": {\n \"【信贷欺诈】“公积金伪造”骗贷手法分析\": \"https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247499035&idx=1&sn=d11ef99e520f528479f5c5aae50f06e4&chksm=eb12db20dc65523640aa9a9e5ed38fee25c0b62f85314e2018e5be469329ed67322bb17c024f&scene=58&subscene=0#rd\"\n },\n \"中国信息安全\": {\n \"专题·漏洞人才培养 | 网络安全实战人才培养的难点和对策\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=1&sn=d7efd3424f1b0073011b56155937fd1e&chksm=8b580b23bc2f82354fbd0c8555767c4e05518b5ea8eeb32524d1c26203d76b6906aa88a457b6&scene=58&subscene=0#rd\",\n \"前沿 | 全球数字契约：大变局时代的一次集体行动\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=2&sn=42468e9e03470ad0c6de684ad9a1c61a&chksm=8b580b23bc2f82359849a959343ce91d2ccfa2727f26f129559d3b27ed3e51a8738345c44044&scene=58&subscene=0#rd\",\n \"外交部：人工智能不应也不能沦为维护霸权、追求优势的工具\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=3&sn=981c72dae778b61f65241e039da85d21&chksm=8b580b23bc2f82358398f29a4611e868e52bdfb2ace423b585fa400c485dfe325cbc040d2f85&scene=58&subscene=0#rd\",\n \"专家观点 | 推进人工智能立法恰逢其时\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=4&sn=c29da6552740c1769670ec7a96be48bf&chksm=8b580b23bc2f8235f9a36d1a75a4e9230f276ab9954a595e44a7f6cba29eb7e9f84f96ddeefe&scene=58&subscene=0#rd\",\n \"评论 | 让数据产业引擎动力更强劲\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=5&sn=3dc98be61b9dd366f04688aeab4622ad&chksm=8b580b23bc2f82351b8edef8a686623959d09ceb046edad9b2567f5673401f0c5c4e1cb8018c&scene=58&subscene=0#rd\",\n \"观点 | 数字贸易改革背景下的数字信任体系构建\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=6&sn=ff7e2f9fb5299d1b6660158c84ec016e&chksm=8b580b23bc2f82352a2824d064d75d563aa7e6fd70764b193c3a231cc70e51f0d6149cea9a59&scene=58&subscene=0#rd\"\n },\n \"火绒安全\": {\n \"钓鱼攻击通过PDF文档暗投后门病毒\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524506&idx=1&sn=d74006a215de392a907da006f6e67d8b&chksm=eb70bea5dc0737b315d222238d0b2f4abb4114ef928bd7245d962ed1474b2163b423c6ae796b&scene=58&subscene=0#rd\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524506&idx=2&sn=ec451d5cbc8f8eb3f2b617019a2423dc&chksm=eb70bea5dc0737b310c8ec43aebca18b0818ac45c3a0f5cdd852a293530f38a312d548904b2d&scene=58&subscene=0#rd\"\n },\n \"威努特安全网络\": {\n \"基于DeepSeek的智能化安全运营方案\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131303&idx=1&sn=b8fa5cf87508e20629cab3fa5bc3e50e&chksm=80e71717b7909e01c228b60918eb06f057209c7dc4ad43675072a4e4a9b83e6321ce272e73c9&scene=58&subscene=0#rd\"\n },\n \"百度安全实验室\": {\n \"大模型驱动智能合规 | 构建企业个保审计新范式\": \"https://mp.weixin.qq.com/s?__biz=MzA3NTQ3ODI0NA==&mid=2247487721&idx=1&sn=7cacde74f858df7762dff71fc3c8213c&chksm=9f6eb562a8193c743602a8ec7608e762e3e352a9ed75505eaa34856909a491747acbc943f94e&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"名为“StaryDobry”的大规模恶意软件活动爆发\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581330&idx=1&sn=2f615fe50e7ab996210dada939fb633a&chksm=e9146ea8de63e7be64dcd47f2dd2cb712933bac11ab1093b3231ce632bf48eaf2a8c7299d42a&scene=58&subscene=0#rd\",\n \"幽灵勒索软件入侵了 70 个国家的组织机构\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581330&idx=2&sn=d82ee66de86baa524b65ad14355d83a0&chksm=e9146ea8de63e7be0958c15880c0535d96317975e0b811a88454c1faab6049f80e6f86444db1&scene=58&subscene=0#rd\"\n },\n \"复旦白泽战队\": {\n \"NDSS参会特辑｜Distinguished Paper +1! 白泽记者前线报道\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247493205&idx=1&sn=e30c3acf21a3135b50a9dfe3c8d936c6&chksm=fde8622bca9feb3df29b1a52c2ff1875167c03a574ac73eb8cf3a1ead56fce2a756ceff1f14c&scene=58&subscene=0#rd\"\n },\n \"字节跳动技术团队\": {\n \"机票已买，下周回国！| 加入Trae粉丝“接机群”赢Apple Mac mini、Ola Friend耳机\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513590&idx=1&sn=d29aefd8b38a2b9bb74818848c730511&chksm=e9d37e14dea4f7026a7783e96daa2a0522f029bb319e8c9153ce8f8baefe75fe275b760f7d97&scene=58&subscene=0#rd\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Vo1d malware botnet grows to 1.6 million Android TVs worldwide\": \"https://www.bleepingcomputer.com/news/security/vo1d-malware-botnet-grows-to-16-million-android-tvs-worldwide/\",\n \"BlackBasta Leaks: Lessons from the Ascension Health attack\": \"https://blog.bushidotoken.net/2025/02/blackbasta-leaks-lessons-from-ascension.html\",\n \"DOGE’s ‘god-tier’ access to CFPB data opens door to market manipulation, experts say\": \"https://therecord.media/doge-access-cfpb-data-market\",\n \"Hacked, leaked, exposed: Why you should never use stalkerware apps\": \"https://techcrunch.com/2025/02/27/hacked-leaked-exposed-why-you-should-stop-using-stalkerware-apps/\",\n \"Privacy tech firms warn France’s encryption and VPN laws threaten privacy\": \"https://www.bleepingcomputer.com/news/security/privacy-tech-firms-warn-frances-encryption-and-vpn-laws-threaten-privacy/\",\n \"Sellers can get scammed too, and Joe goes off on a rant about imposter syndrome\": \"https://blog.talosintelligence.com/sellers-can-get-scammed-too-and-joe-goes-off-on-a-rant-about-imposter-syndrome/\",\n \"Microsoft names developers behind illicit AI tools used in celebrity deepfake scheme\": \"https://therecord.media/microsoft-names-developers-behind-illicit-ai-used-in-deepfake-scheme\",\n \"Thousands rescued from scam compounds in Myanmar now stuck at Thai border\": \"https://therecord.media/thousands-rescued-from-cyber-scam-compounds-stuck-at-thai-border\",\n \"Microsoft names cybercriminals behind AI deepfake network\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-names-cybercriminals-behind-ai-deepfake-network/\",\n \"Over 49,000 misconfigured building access systems exposed online\": \"https://www.bleepingcomputer.com/news/security/over-49-000-misconfigured-building-access-systems-exposed-online/\",\n \"Gli attacchi ransomware sono quadruplicati nel 2024\": \"https://www.securityinfo.it/2025/02/27/gli-attacchi-ransomware-sono-quadruplicati-nel-2024/\",\n \"Belgium probes if Chinese hackers breached its intelligence service\": \"https://www.bleepingcomputer.com/news/security/belgium-probes-if-chinese-hackers-breached-its-intelligence-service/\",\n \"Inside the Black Basta Leak: How Ransomware Operators Gain Access\": \"https://www.kelacyber.com/blog/black-basta-leak-how-ransomware-operators-gain-access/\",\n \"Smishing INPS: nuova truffa minaccia conseguenze penali\": \"https://cert-agid.gov.it/news/smishing-inps-nuova-truffa-minaccia-conseguenze-penali/\",\n \"XDR: sinergia tecnologica per una cyber security innovativa, personalizzata e potente\": \"https://www.cybersecurity360.it/soluzioni-aziendali/xdr-sinergia-tecnologica-per-una-cyber-security-innovativa-personalizzata-e-potente/\",\n \"Philippine army confirms attack on its networks\": \"https://therecord.media/philippines-army-confirms-hack\",\n \"Suspected Desorden hacker arrested for breaching 90 organizations\": \"https://www.bleepingcomputer.com/news/security/suspected-desorden-hacker-arrested-for-breaching-90-organizations/\",\n \"FBI urges crypto community to avoid laundering funds from Bybit hack\": \"https://therecord.media/fbi-bybit-laundering-crypto-warning\",\n \"FBI says North Korea ‘responsible’ for $1.4 billion Bybit heist\": \"https://techcrunch.com/2025/02/27/fbi-says-north-korea-responsible-for-1-4-billion-bybit-heist/\",\n \"Il mercato della cyber security cresce del 15%, ma le minacce crescono di più\": \"https://www.cybersecurity360.it/news/il-mercato-della-cyber-security-cresce-del-15-ma-le-minacce-crescono-di-piu/\",\n \"Per combattere il rischio frode sono importanti le risorse umane\": \"https://www.cybersecurity360.it/soluzioni-aziendali/per-combattere-il-rischio-frode-sono-importanti-le-risorse-umane/\",\n \"Shadow AI: la minaccia ombra che incombe nelle organizzazioni\": \"https://www.cybersecurity360.it/legal/shadow-ai-la-minaccia-ombra-che-incombe-nelle-organizzazioni/\",\n \"Romanian prosecutors issue charges against pro-Russia candidate in annulled election\": \"https://therecord.media/romania-presidential-candidate-criminal-charges\",\n \"Dynamic Duo: Duolingo Mascot Death Scams Report\": \"https://bfore.ai/dynamic-duo-duolingo-mascot-death-scams-report/\",\n \"Enriching ANY.RUN’s TI Feeds with Unique IOCs: How It Works\": \"https://any.run/cybersecurity-blog/indicators-in-ti-feeds/\",\n \"Intune or Outplayed?\": \"https://catchingphish.com/posts/f/intune-or-outplayed\",\n \"Belgium probes suspected Chinese hack of state security service\": \"https://therecord.media/belgium-investigation-alleged-china-cyber-espionage-vsse\",\n \"Microsoft fixes Outlook drag-and-drop broken by Windows updates\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-outlook-drag-and-drop-broken-by-windows-updates/\",\n \"New CISA Report Warns of Rising ICS Cybersecurity Risks—Top Vendors Affected\": \"https://cyble.com/blog/new-cisa-report-rising-ics-cybersecurity-risks/\",\n \"16-30 November 2024 Cyber Attacks Timeline\": \"https://www.hackmageddon.com/2025/02/27/16-30-november-2024-cyber-attacks-timeline/\",\n \"Lotus Blossom espionage group targets multiple industries with different versions of Sagerunex and hacking tools\": \"https://blog.talosintelligence.com/lotus-blossom-espionage-group/\",\n \"CrowdStrike: ecco le minacce emergenti del 2025\": \"https://www.securityinfo.it/2025/02/27/crowdstrike-report-minacce-2025/\",\n \"FBI confirms Lazarus hackers were behind $1.5B Bybit crypto heist\": \"https://www.bleepingcomputer.com/news/security/fbi-confirms-lazarus-hackers-were-behind-15b-bybit-crypto-heist/\",\n \"Orange Romania - 556,557 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#OrangeRomania\",\n \"U.S. Soldier Charged in AT&T Hack Searched “Can Hacking Be Treason”\": \"https://krebsonsecurity.com/2025/02/u-s-soldier-charged-in-att-hack-searched-can-hacking-be-treason/\",\n \"Southern Water says Black Basta ransomware attack cost £4.5M in expenses\": \"https://www.bleepingcomputer.com/news/security/southern-water-says-black-basta-ransomware-attack-cost-45m-in-expenses/\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #761: Forensic Test Kitchen with more Claude 3.7!\": \"https://www.hecfblog.com/2025/02/daily-blog-761-forensic-test-kitchen.html\"\n },\n \"安全内参\": {\n \"存在网络安全问题，两家单位被约谈整改\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513841&idx=1&sn=c00933ab936585b06d534aa6bae21d87&chksm=ebfaf1d1dc8d78c70bdc3548208328280ac3c8af1ed486588799a289727a8286e20b50de8aa1&scene=58&subscene=0#rd\",\n \"统一全军身份验证和访问，美国防部深化部署零信任架构\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513841&idx=2&sn=fd7ea89ae4845aa6709fe5e5685b8bd1&chksm=ebfaf1d1dc8d78c7d83c1471650a880cd20976600c05283431c4a466f7ff9ad77ff8ee1d2835&scene=58&subscene=0#rd\"\n },\n \"Securityinfo.it\": {\n \"Gli attacchi ransomware sono quadruplicati nel 2024\": \"https://www.securityinfo.it/2025/02/27/gli-attacchi-ransomware-sono-quadruplicati-nel-2024/?utm_source=rss&utm_medium=rss&utm_campaign=gli-attacchi-ransomware-sono-quadruplicati-nel-2024\",\n \"CrowdStrike: ecco le minacce emergenti del 2025\": \"https://www.securityinfo.it/2025/02/27/crowdstrike-report-minacce-2025/?utm_source=rss&utm_medium=rss&utm_campaign=crowdstrike-report-minacce-2025\"\n },\n \"美团技术团队\": {\n \"上下文感知的聚合页广告优化实践\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651779932&idx=1&sn=0da4221704c0cff8b8dabe083db9fb00&chksm=bd122a118a65a307614f01eeb5eb83ff3b89dca179e6732078c801d7c639ad948a878fb47e4b&scene=58&subscene=0#rd\",\n \"美团2025年春季校园招聘全球启动\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651779932&idx=2&sn=554965785e83dd3e87a8e2fcb1a49d22&chksm=bd122a118a65a3079facfde753dceadec3220a7205038a7b18b1eacfaad3efc2ea2a9a60f826&scene=58&subscene=0#rd\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"Njrat Campaign Using Microsoft Dev Tunnels, (Thu, Feb 27th)\": \"https://isc.sans.edu/diary/rss/31724\",\n \"ISC Stormcast For Thursday, February 27th, 2025 https://isc.sans.edu/podcastdetail/9342, (Thu, Feb 27th)\": \"https://isc.sans.edu/diary/rss/31722\"\n },\n \"Have I Been Pwned latest breaches\": {\n \"Spyzie - 518,643 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#Spyzie\",\n \"Orange Romania - 556,557 breached accounts\": \"https://haveibeenpwned.com/PwnedWebsites#OrangeRomania\"\n },\n \"安全分析与研究\": {\n \"GuLoader恶意软件最新攻击链样本详细分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490797&idx=1&sn=f454227e2ef591427376bad3a05a6b26&chksm=902fb3c5a7583ad37df74f272610ce55a3f4fb02e9e9b5e3c6ba03c22979ad02a84daddc3ed1&scene=58&subscene=0#rd\",\n \"Tellyouthepass勒索病毒攻击\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490797&idx=2&sn=67c0293e998b170a7982e267da4172e5&chksm=902fb3c5a7583ad3813c8fd89f8beddde7c2f1742c33eac1ba71b2148adf9e226c5197ed13be&scene=58&subscene=0#rd\"\n },\n \"迪哥讲事\": {\n \"白捡200美元\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497195&idx=1&sn=69427b63d26293f66174607a2f704f1c&chksm=e8a5ff88dfd2769e3caaa03b16cad3790ba2f5085e7527a89427cc24e065168d3975fcb0c548&scene=58&subscene=0#rd\"\n },\n \"ICT Security Magazine\": {\n \"Browser aziendale e SSE: insieme è meglio\": \"https://www.ictsecuritymagazine.com/notizie/browser-aziendale-sse/\",\n \"Cybercrime e spionaggio industriale\": \"https://www.ictsecuritymagazine.com/articoli/spionaggio-industriale/\"\n },\n \"Full Disclosure\": {\n \"SEC Consult SA-20250226-0 :: Multiple vulnerabilities in Siemens A8000 CP-8050 & CP-8031 PLC\": \"https://seclists.org/fulldisclosure/2025/Feb/19\",\n \"Re: MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client\": \"https://seclists.org/fulldisclosure/2025/Feb/18\"\n },\n \"Tor Project blog\": {\n \"A fresh coat for Snowflake: a website refresh to help more people get online\": \"https://blog.torproject.org/snowflake-refresh-to-help-more-people-get-online/\"\n },\n \"Graham Cluley\": {\n \"Warning issued as hackers offer firms fake cybersecurity audits to break into their systems\": \"https://www.tripwire.com/state-of-security/beware-fake-cybersecurity-audits-cybercriminals-use-scams-breach-corporate\",\n \"Smashing Security podcast #406: History’s biggest heist just happened, and online abuse\": \"https://grahamcluley.com/smashing-security-podcast-406/\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Github scam investigation: Thousands of \\\"mods\\\" and \\\"cracks\\\" stealing your data\": \"https://www.reddit.com/r/netsec/comments/1izryuk/github_scam_investigation_thousands_of_mods_and/\",\n \"16 Malicious Chrome extensions infected over 3.2 mln users worldwide.\": \"https://www.reddit.com/r/netsec/comments/1izcoti/16_malicious_chrome_extensions_infected_over_32/\",\n \"How to Find More IDORs - @verylazytech\": \"https://www.reddit.com/r/netsec/comments/1izk1cl/how_to_find_more_idors_verylazytech/\",\n \"Research: Using Stylometry & Topic Modeling to Attribute State-Sponsored Hacktivist Groups\": \"https://www.reddit.com/r/netsec/comments/1izgnfx/research_using_stylometry_topic_modeling_to/\",\n \"Join us in 2 weeks on March 12th at 13:00 GMT-5 for a meetup teamup: Liz Steininger from Least Authority and Pacu from Zcash Community Grants! The two will be presenting \\\"Enhancing Zcash Security: a long-term engagement with Least Authority, the Zcash Ecosystem Security Lead\\\".\": \"https://www.reddit.com/r/netsec/comments/1izjp9w/join_us_in_2_weeks_on_march_12th_at_1300_gmt5_for/\"\n },\n \"Computer Forensics\": {\n \"Cellebrite and Graykey question\": \"https://www.reddit.com/r/computerforensics/comments/1izhppd/cellebrite_and_graykey_question/\",\n \"Exterro FTK Imager\": \"https://www.reddit.com/r/computerforensics/comments/1izq93v/exterro_ftk_imager/\"\n },\n \"Social Engineering\": {\n \"The Art of the Double Bind: How to Create No-Win Situations That Leave Them Trapped\": \"https://www.reddit.com/r/SocialEngineering/comments/1izstdo/the_art_of_the_double_bind_how_to_create_nowin/\"\n },\n \"Information Security\": {\n \"How Cooked Are You? A short tutorial on how to hide sensitive information from your log file\": \"https://www.reddit.com/r/Information_Security/comments/1izp2vq/how_cooked_are_you_a_short_tutorial_on_how_to/\"\n },\n \"The Hacker News\": {\n \"Silver Fox APT Uses Winos 4.0 Malware in Cyber Attacks Against Taiwanese Organizations\": \"https://thehackernews.com/2025/02/silver-fox-apt-uses-winos-40-malware-in.html\",\n \"Space Pirates Targets Russian IT Firms With New LuckyStrike Agent Malware\": \"https://thehackernews.com/2025/02/space-pirates-targets-russian-it-firms.html\",\n \"89% of Enterprise GenAI Usage Is Invisible to Organizations Exposing Critical Security Risks, New Report Reveals\": \"https://thehackernews.com/2025/02/89-of-enterprise-genai-usage-is.html\",\n \"New TgToxic Banking Trojan Variant Evolves with Anti-Analysis Upgrades\": \"https://thehackernews.com/2025/02/new-tgtoxic-banking-trojan-variant.html\",\n \"PolarEdge Botnet Exploits Cisco and Other Flaws to Hijack ASUS, QNAP, and Synology Devices\": \"https://thehackernews.com/2025/02/polaredge-botnet-exploits-cisco-and.html\",\n \"Bybit Hack Traced to Safe{Wallet} Supply Chain Attack Exploited by North Korean Hackers\": \"https://thehackernews.com/2025/02/bybit-hack-traced-to-safewallet-supply.html\"\n },\n \"小陈的Life\": {\n \"AI驱动的安全创新：MCP技术的应用实践\": \"https://mp.weixin.qq.com/s?__biz=MzAxNDk0MDU2MA==&mid=2247484563&idx=1&sn=40a58bb09da26af940bf1958aa28c471&chksm=9b8ae46cacfd6d7ae69627646a9ce89cbe1a440def99da1f715d4a44224ab6d5eb93b201f742&scene=58&subscene=0#rd\"\n },\n \"Deeplinks\": {\n \"Ninth Circuit Correctly Rules That Dating App Isn’t Liable for Matching Users\": \"https://www.eff.org/deeplinks/2025/02/ninth-circuit-correctly-rules-dating-app-isnt-liable-matching-users\",\n \"EFF In Conversation With Ron Deibert on Chasing Shadows\": \"https://www.eff.org/deeplinks/2025/02/eff-conversation-ron-deibert-chasing-shadows\"\n },\n \"Security Affairs\": {\n \"FBI: North Korea-linked TraderTraitor is responsible for $1.5 Billion Bybit hack\": \"https://securityaffairs.com/174735/cyber-crime/fbi-north-korea-responsible-bybit-hack.html\",\n \"Criminal group UAC-0173 targets the Notary Office of Ukraine\": \"https://securityaffairs.com/174723/cyber-crime/uac-0173-targets-the-notary-office-of-ukraine.html\",\n \"Cellebrite blocked Serbia from using its solution because misuse of the equipment for political reasons\": \"https://securityaffairs.com/174707/intelligence/cellebrite-blocked-serbia-from-using-its-solution-because-misuse-of-the-equipment-for-political-reasons.html\",\n \"DragonForce Ransomware group is targeting Saudi Arabia\": \"https://securityaffairs.com/174717/cyber-crime/dragonforce-ransomware-group-is-targeting-saudi-arabia.html\"\n },\n \"Schneier on Security\": {\n \"“Emergent Misalignment” in LLMs\": \"https://www.schneier.com/blog/archives/2025/02/emergent-misalignment-in-llms.html\"\n },\n \"Krebs on Security\": {\n \"U.S. Soldier Charged in AT&T Hack Searched “Can Hacking Be Treason”\": \"https://krebsonsecurity.com/2025/02/u-s-soldier-charged-in-att-hack-searched-can-hacking-be-treason/\"\n },\n \"Your Open Hacker Community\": {\n \"Crack WiFi Passwords Faster by Building Targeted Wordlists (Script Included)\": \"https://www.reddit.com/r/HowToHack/comments/1izdarl/crack_wifi_passwords_faster_by_building_targeted/\",\n \"Haiku inc\": \"https://www.reddit.com/r/HowToHack/comments/1iztpig/haiku_inc/\",\n \"Get Wi-Fi networks\": \"https://www.reddit.com/r/HowToHack/comments/1izo9m6/get_wifi_networks/\",\n \"How can I learn hacking in android?\": \"https://www.reddit.com/r/HowToHack/comments/1izgbsn/how_can_i_learn_hacking_in_android/\",\n \"About Bug Bounty in the Hackerone\": \"https://www.reddit.com/r/HowToHack/comments/1izl1sr/about_bug_bounty_in_the_hackerone/\",\n \"My friend's roblox account got hacked through a link\": \"https://www.reddit.com/r/HowToHack/comments/1izq43r/my_friends_roblox_account_got_hacked_through_a/\",\n \"Outlook Emails\": \"https://www.reddit.com/r/HowToHack/comments/1izd7z1/outlook_emails/\",\n \"[Help] This may be very stupid of my part but i need help getting on a discord account\": \"https://www.reddit.com/r/HowToHack/comments/1izbatz/help_this_may_be_very_stupid_of_my_part_but_i/\",\n \"Help\": \"https://www.reddit.com/r/HowToHack/comments/1iz9oip/help/\",\n \"Does anyone know how to hack?\": \"https://www.reddit.com/r/HowToHack/comments/1izbliu/does_anyone_know_how_to_hack/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Zero Days Are Not Just Fiction - PSW #863\": \"http://sites.libsyn.com/18678/zero-days-are-not-just-fiction-psw-863\"\n },\n \"Dark Space Blogspot\": {\n \"20 Anni Di YouTube: Alcuni Record e Curiosità\": \"http://darkwhite666.blogspot.com/2025/02/20-anni-di-youtube-alcuni-record-e.html\"\n }\n}"}}, "archive/tmp/2025-03-14.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747349.0246496, "n": 49550, "h": "1aecea4013d8d48a", "c": "{\n \"Verne in GitHub\": {\n \"Gemini 2 的原生多模态图片生成\": \"https://blog.einverne.info/post/2025/03/google-gemini-2-native-image-generation.html\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"隐匿在未知角落的 Anubis 恶意软件 为黑客远程命令大开方便之门\": \"https://www.4hou.com/posts/KGkG\"\n },\n \"paper - Last paper\": {\n \"机器学习的逻辑回归模型\": \"https://paper.seebug.org/3303/\"\n },\n \"Twitter @Nicolas Krassas\": {\n \"North Korea’s ScarCruft Deploys KoSpy Malware, Spying on Android Users via Fake Utility Apps https://thehackernews.com/2025/03/north-koreas-scarcruft...\": \"https://x.com/Dinosn/status/1900307857137877305\",\n \"Grafana Flaws Likely Targeted in Broad SSRF Exploitation Campaign https://www.securityweek.com/grafana-flaws-likely-targeted-in-broad-ssrf-exploitatio...\": \"https://x.com/Dinosn/status/1900307027500417384\",\n \"Experts warn of a coordinated surge in the exploitation attempts of SSRF vulnerabilities https://securityaffairs.com/175344/hacking/coordinated-surge-...\": \"https://x.com/Dinosn/status/1900306893878309290\",\n \"Capchan – Solving CAPTCHA with Image Classification https://sensepost.com/blog/2025/capchan-solving-captcha-with-image-classification/\": \"https://x.com/Dinosn/status/1900306755206472182\",\n \"Sign in as anyone: Bypassing SAML SSO authentication with parser differentials https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authe...\": \"https://x.com/Dinosn/status/1900306620317409518\",\n \"Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk https://thehackernews.com/2025/03/meta-warns-of-freetype-vulnerabi...\": \"https://x.com/Dinosn/status/1900306503011115257\",\n \"Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails https://thehackernews.com/2025/03/microsoft-w...\": \"https://x.com/Dinosn/status/1900306349843448081\",\n \"CISA Releases Thirteen Industrial Control Systems Advisories https://www.cisa.gov/news-events/alerts/2025/03/13/cisa-releases-thirteen-industrial-cont...\": \"https://x.com/Dinosn/status/1900306090912301534\",\n \"Google says it's rolling out a fix for stricken Chromecasts https://go.theregister.com/feed/www.theregister.com/2025/03/13/google_chromecast_fix/\": \"https://x.com/Dinosn/status/1900305899593351218\",\n \"Windows Notepad to get AI text summarization in Windows 11 https://www.bleepingcomputer.com/news/microsoft/windows-notepad-to-get-ai-text-summarizatio...\": \"https://x.com/Dinosn/status/1900305834598371771\",\n \"New SuperBlack ransomware exploits Fortinet auth bypass flaws https://www.bleepingcomputer.com/news/security/new-superblack-ransomware-exploits-fortin...\": \"https://x.com/Dinosn/status/1900305779279769880\",\n \"Widespread Fake CAPTCHA Campaign Delivering Malware https://arcticwolf.com/resources/blog/widespread-fake-captcha-campaign-delivering-malware/\": \"https://x.com/Dinosn/status/1900305629136167388\",\n \"Microsoft apologizes for removing VSCode extensions used by millions https://www.bleepingcomputer.com/news/microsoft/microsoft-apologizes-for-removing...\": \"https://x.com/Dinosn/status/1900305570407567360\",\n \"OBSCURE#BAT Malware Highlights Risks of API Hooking https://www.darkreading.com/vulnerabilities-threats/obscurebat-malware-highlights-api-hooking\": \"https://x.com/Dinosn/status/1900305537192927718\",\n \"FBI and CISA Urge Enabling 2FA to Counter Medusa Ransomware https://hackread.com/fbi-cisa-urge-enabling-2fa-counter-medusa-ransomware/\": \"https://x.com/Dinosn/status/1900305511104364790\",\n \"Microsoft says button to restore classic Outlook is broken https://www.bleepingcomputer.com/news/microsoft/microsoft-says-button-to-restore-classic-ou...\": \"https://x.com/Dinosn/status/1900305443680924081\",\n \"GO Simple Tunnel - a simple tunnel written in golang https://github.com/ginuerzh/gost\": \"https://x.com/Dinosn/status/1900183205472288959\",\n \"Head Mare and Twelve join forces to attack Russian entities https://securelist.com/head-mare-twelve-collaboration/115887/\": \"https://x.com/Dinosn/status/1900182863774961764\",\n \"OpenAI Operator Agent Used in Proof-of-Concept Phishing Attack https://www.darkreading.com/threat-intelligence/openai-operator-agent-proof-concept-phi...\": \"https://x.com/Dinosn/status/1900182804354203730\",\n \"Medusa ransomware affiliate tried triple extortion scam – up from the usual double demand https://go.theregister.com/feed/www.theregister.com/2025/03...\": \"https://x.com/Dinosn/status/1900182299775320479\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2025-03-13 Review\": \"http://www.sec-wiki.com/?2025-03-13\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"THM — Anonforce\": \"https://infosecwriteups.com/thm-anonforce-874016c34a0f?source=rss----7b722bfd1b8d---4\",\n \"Escalate and Defend: Linux Kernel Exploit Walkthrough\": \"https://infosecwriteups.com/escalate-and-defend-linux-kernel-exploit-walkthrough-eed9cf0c50ba?source=rss----7b722bfd1b8d---4\",\n \"IDOR — TryHackMe Walkthrough\": \"https://infosecwriteups.com/idor-tryhackme-walkthrough-0a38ddc37694?source=rss----7b722bfd1b8d---4\",\n \"Ultimate List of Free Resources for Bug Bounty Hunters\": \"https://infosecwriteups.com/ultimate-list-of-free-resources-for-bug-bounty-hunters-bfba8deb5a36?source=rss----7b722bfd1b8d---4\",\n \"Creating a CTF Machine with Docker and Docker Compose: A Step-by-Step Guide\": \"https://infosecwriteups.com/creating-a-ctf-machine-with-docker-and-docker-compose-a-step-by-step-guide-b5143576ae28?source=rss----7b722bfd1b8d---4\",\n \"Hacking Swagger UI - 101\": \"https://infosecwriteups.com/hacking-swagger-ui-101-ccbce66ba028?source=rss----7b722bfd1b8d---4\",\n \"How I Earned $500 for Getting Trapped in a Private Facebook Event\": \"https://infosecwriteups.com/how-i-earned-500-for-getting-trapped-in-a-private-facebook-event-d4b7f3fdaacd?source=rss----7b722bfd1b8d---4\"\n },\n \"Trustwave Blog\": {\n \"Challenges for Australian Manufacturers: Insights from the 2025 Trustwave Risk Radar Report\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/challenges-for-australian-manufacturers-insights-from-the-2025-trustwave-risk-radar-report/\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Thu Mar 13 20:24:40 UTC 2025\": \"https://github.com/trickest/cve/commit/dd46a4567472255dbff2966b98631b6fffe949e4\",\n \"Update Thu Mar 13 12:29:12 UTC 2025\": \"https://github.com/trickest/cve/commit/75b45ef9b73d9700391504788da3d8d5a8b25b0b\",\n \"Update Thu Mar 13 04:34:35 UTC 2025\": \"https://github.com/trickest/cve/commit/62579d9ee8179c6a14f11adebdb17ee5546468d6\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"ExHub 的 IDOR 漏洞可致攻击者篡改网站托管配置\": \"https://www.anquanke.com/post/id/305023\",\n \"施乐打印机漏洞可致攻击者从PDA和SMB捕获身份验证数据\": \"https://www.anquanke.com/post/id/305020\",\n \"瞻博网络成功修复 Session Smart Router 关键漏洞\": \"https://www.anquanke.com/post/id/305015\",\n \"Blind Eagle APT-C-36：快速利用补丁漏洞，借知名平台发动网络攻击\": \"https://www.anquanke.com/post/id/305013\",\n \"通过 YouTube 传播的 DCRat 恶意软件正攻击用户以窃取登录凭证\": \"https://www.anquanke.com/post/id/305010\",\n \"不断演变的分布式拒绝服务（DDoS）攻击策略：网络专家剖析社交媒体平台X的遭袭事件\": \"https://www.anquanke.com/post/id/305007\",\n \"新型Anubis恶意软件：可完全躲避检测，让黑客得以执行远程命令\": \"https://www.anquanke.com/post/id/305005\",\n \"Opentext推出人工智能网络安全解决方案抵御威胁\": \"https://www.anquanke.com/post/id/305002\",\n \"Nasuni 与 CrowdStrike 合作，大幅提升威胁检测效能\": \"https://www.anquanke.com/post/id/304997\",\n \"360携手首都在线 拟推动DeepSeek一体机安全与服务落地合作\": \"https://www.anquanke.com/post/id/304995\"\n },\n \"Tenable Blog\": {\n \"DeepSeek Deep Dive Part 1: Creating Malware, Including Keyloggers and Ransomware\": \"https://www.tenable.com/blog/deepseek-deep-dive-part-1-creating-malware-including-keyloggers-and-ransomware\"\n },\n \"奇安信攻防社区\": {\n \"XSS防御-揭秘Unicode溢出与CSP Bypass\": \"https://forum.butian.net/share/4181\"\n },\n \"Security Boulevard\": {\n \"Response to CISA Advisory (AA25-071A): #StopRansomware: Medusa Ransomware\": \"https://securityboulevard.com/2025/03/response-to-cisa-advisory-aa25-071a-stopransomware-medusa-ransomware/?utm_source=rss&utm_medium=rss&utm_campaign=response-to-cisa-advisory-aa25-071a-stopransomware-medusa-ransomware\",\n \"BSides Exeter 2024 – Blue Track – DFIR – Are We There Yet?\": \"https://securityboulevard.com/2025/03/bsides-exeter-2024-blue-track-dfir-are-we-there-yet/?utm_source=rss&utm_medium=rss&utm_campaign=bsides-exeter-2024-blue-track-dfir-are-we-there-yet\",\n \"SafeBreach Coverage for US CERT AA25-071A (Medusa Ransomware)\": \"https://securityboulevard.com/2025/03/safebreach-coverage-for-us-cert-aa25-071a-medusa-ransomware/?utm_source=rss&utm_medium=rss&utm_campaign=safebreach-coverage-for-us-cert-aa25-071a-medusa-ransomware\",\n \"AD Lite Password Auditor Report: Key Insights and Data\": \"https://securityboulevard.com/2025/03/ad-lite-password-auditor-report-key-insights-and-data/?utm_source=rss&utm_medium=rss&utm_campaign=ad-lite-password-auditor-report-key-insights-and-data\",\n \"Randall Munroe’s XKCD ‘Water Damage’\": \"https://securityboulevard.com/2025/03/randall-munroes-xkcd-water-damage/?utm_source=rss&utm_medium=rss&utm_campaign=randall-munroes-xkcd-water-damage\",\n \"Silk Typhoon Targeting IT Supply Chains and Network Devices, Microsoft Reports\": \"https://securityboulevard.com/2025/03/silk-typhoon-targeting-it-supply-chains-and-network-devices-microsoft-reports/?utm_source=rss&utm_medium=rss&utm_campaign=silk-typhoon-targeting-it-supply-chains-and-network-devices-microsoft-reports\",\n \"Moving Past Compensating Controls: The Long-Term Value of Tokenization for PCI DSS\": \"https://securityboulevard.com/2025/03/moving-past-compensating-controls-the-long-term-value-of-tokenization-for-pci-dss/?utm_source=rss&utm_medium=rss&utm_campaign=moving-past-compensating-controls-the-long-term-value-of-tokenization-for-pci-dss\",\n \"Cyberattacks on Water Facilities Are Growing | Aria Cybersecurity\": \"https://securityboulevard.com/2025/03/cyberattacks-on-water-facilities-are-growing-aria-cybersecurity/?utm_source=rss&utm_medium=rss&utm_campaign=cyberattacks-on-water-facilities-are-growing-aria-cybersecurity\",\n \"ICYMI: Interesting Things We Learned at the HIMSS 2025 Conference\": \"https://securityboulevard.com/2025/03/icymi-interesting-things-we-learned-at-the-himss-2025-conference/?utm_source=rss&utm_medium=rss&utm_campaign=icymi-interesting-things-we-learned-at-the-himss-2025-conference\",\n \"PCI DSS SAQ A-EP: Secure Your E-Commerce Payments\": \"https://securityboulevard.com/2025/03/pci-dss-saq-a-ep-secure-your-e-commerce-payments/?utm_source=rss&utm_medium=rss&utm_campaign=pci-dss-saq-a-ep-secure-your-e-commerce-payments\"\n },\n \"一个被知识诅咒的人\": {\n \"【Python】深入解析Python的上下文管理器与资源管理：实现自定义的with语句\": \"https://blog.csdn.net/nokiaguy/article/details/146227757\",\n \"【Python运维】用Python编写云服务监控工具：实时监测和报警\": \"https://blog.csdn.net/nokiaguy/article/details/146227740\"\n },\n \"gynvael.coldwind//vx.log (en)\": {\n \"No, CTRL+D in Linux terminal doesn't send EOF signal\": \"https://gynvael.coldwind.pl/?id=801\"\n },\n \"Orange Cyberdefense\": {\n \"Capchan – Solving CAPTCHA with Image Classification\": \"https://sensepost.com/blog/2025/capchan-solving-captcha-with-image-classification/\"\n },\n \"gynvael.coldwind//vx.log (pl)\": {\n \"Wstęp do programowania i Pythona - zapisy nadal otwarte\": \"https://gynvael.coldwind.pl/?id=802\"\n },\n \"Insinuator.net\": {\n \"CVE-2025-20908: Use of insufficiently random values in Samsung’s Auracast implementation\": \"https://insinuator.net/2025/03/cve-2025-20908-use-of-insufficiently-random-values-in-samsungs-auracast-implementation/\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"WordPress Th Shop Mania Theme 1.4.9 Missing Authorization\": \"https://cxsecurity.com/issue/WLB-2025030018\",\n \"WordPress NextMove Lite 2.17.0 Missing Authorization\": \"https://cxsecurity.com/issue/WLB-2025030017\",\n \"Agile Solutio - Blind Sql Injection Vulnerability\": \"https://cxsecurity.com/issue/WLB-2025030016\",\n \"TENANT LIMITED-1.0-Multiple-SQLi + SQLi Bypass Authentication\": \"https://cxsecurity.com/issue/WLB-2025030015\",\n \"VeeVPN 1.6.1 - 'VeePNService' Unquoted Service Path\": \"https://cxsecurity.com/issue/WLB-2025030014\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"Ultimate List of Free Resources for Bug Bounty Hunters\": \"https://infosecwriteups.com/ultimate-list-of-free-resources-for-bug-bounty-hunters-bfba8deb5a36?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Hacking Swagger UI - 101\": \"https://infosecwriteups.com/hacking-swagger-ui-101-ccbce66ba028?source=rss----7b722bfd1b8d--bug_bounty\",\n \"How I Earned $500 for Getting Trapped in a Private Facebook Event\": \"https://infosecwriteups.com/how-i-earned-500-for-getting-trapped-in-a-private-facebook-event-d4b7f3fdaacd?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Twitter @bytehx\": {\n \"Re @AatankBadb16659 I don't really have secret sauce for this program. I just try to understand all application features and stick for like months. Th...\": \"https://x.com/bytehx343/status/1900225824869277908\"\n },\n \"Securelist\": {\n \"Head Mare and Twelve join forces to attack Russian entities\": \"https://securelist.com/head-mare-twelve-collaboration/115887/\"\n },\n \"Malwarebytes\": {\n \"Don’t let your kids on Roblox if you’re not comfortable, says Roblox CEO\": \"https://www.malwarebytes.com/blog/news/2025/03/dont-let-your-kids-on-roblox-if-youre-worried-says-roblox-ceo\"\n },\n \"Reverse Engineering\": {\n \"Recursion kills: The story behind CVE-2024-8176 / Expat 2.7.0 released, includes security fixes\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jaozjf/recursion_kills_the_story_behind_cve20248176/\",\n \"REVERSING SAMSUNG'S H-ARX HYPERVISOR FRAMEWORK: Part 1\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jap1p6/reversing_samsungs_harx_hypervisor_framework_part/\",\n \"Brushing Up on Hardware Hacking Part 2 - SPI, UART, Pulseview, and Flashrom\": \"https://www.reddit.com/r/ReverseEngineering/comments/1ja9b2e/brushing_up_on_hardware_hacking_part_2_spi_uart/\",\n \"Unraveling Time: A Deep Dive into TTD Instruction Emulation Bugs\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jal0zh/unraveling_time_a_deep_dive_into_ttd_instruction/\"\n },\n \"PortSwigger Blog\": {\n \"Burp Everywhere, All Around the World: Bringing AppSec Enthusiasts Together in 2025\": \"https://portswigger.net/blog/burp-everywhere-all-around-the-world-bringing-appsec-enthusiasts-together-in-2025\"\n },\n \"Intigriti\": {\n \"Access control vulnerability in the retail industry. Cross-Site Scripting (XSS) use case\": \"https://www.intigriti.com/blog/business-insights/access-control-vulnerability-in-the-retail-industry-cross-site-scripting-xss-use\"\n },\n \"Microsoft Security Response Center\": {\n \"Jailbreaking is (mostly) simpler than you think\": \"https://msrc.microsoft.com/blog/2025/03/jailbreaking-is-mostly-simpler-than-you-think/\"\n },\n \"Checkmarx\": {\n \"Secrets detection: A definition\": \"https://checkmarx.com/blog/secrets-detection-a-definition/\"\n },\n \"rtl-sdr.com\": {\n \"Saveitforparts: Snooping on the SatGus Selfie Satellite\": \"https://www.rtl-sdr.com/saveitforparts-snooping-on-the-satgus-selfie-satellite/\",\n \"Khanfar Phosphor: Real-time GPU Accelerated Spectrum Visualization for SDRs\": \"https://www.rtl-sdr.com/khanfar-phosphor-real-time-gpu-accelerated-spectrum-visualization-for-sdrs/\"\n },\n \"安全牛\": {\n \"MFA告急！黑客利用高级技术绕过保护；WebKit零日漏洞被利用开展“极其复杂”定向攻击，苹果紧急修复 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135481&idx=1&sn=d3265ca05fb3478831f69020f9a2c3f0&chksm=bd15ad2a8a62243c41425e7c068635da1e7bf2076baa3e4fa9ff044c5e52aac1c893eca8ef00&scene=58&subscene=0#rd\",\n \"网络安全支出过度缓解术与预算编制要诀\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135481&idx=2&sn=ef4fe534d252a23b81c0ae894715f830&chksm=bd15ad2a8a62243c25ea00a1a047126ea495c85420400ef5f1bd46ad3651162be5de6b7815ed&scene=58&subscene=0#rd\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"人工智能聊天机器人DeepSeek R1可被操纵用于创建恶意软件\": \"https://www.freebuf.com/articles/network/424572.html\",\n \"大模型越狱（通常）比你想象的容易——一种基于伪造对话历史的攻击算法\": \"https://www.freebuf.com/vuls/424360.html\",\n \"CISA警告：苹果WebKit越界写入漏洞已被野外利用\": \"https://www.freebuf.com/vuls/424562.html\",\n \"微信小程序测试技巧总结\": \"https://www.freebuf.com/articles/web/424498.html\",\n \"全美29州逾8.6万名医护人员信息因AWS S3存储桶配置错误遭泄露\": \"https://www.freebuf.com/articles/database/424561.html\",\n \"黑客滥用微软Copilot发动高仿钓鱼攻击\": \"https://www.freebuf.com/news/424552.html\",\n \"FreeBuf早报 | 特朗普提名Sean Plankey掌权CISA；勒索病毒袭美逾300关键机构\": \"https://www.freebuf.com/news/424478.html\",\n \"新手友好，spring内存马学习篇二\": \"https://www.freebuf.com/articles/web/424441.html\"\n },\n \"绿盟科技技术博客\": {\n \"微软3月安全更新多个产品高危漏洞通告\": \"https://blog.nsfocus.net/22-2/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"Google 称 Gemma 3 使用一张 H100 GPU 就能获得与 DeepSeek R1 相当的性能\": \"https://www.solidot.org/story?sid=80783\",\n \"D-Wave 称其量子退火处理器相比超算具有“量子优越性”\": \"https://www.solidot.org/story?sid=80782\",\n \"雄章鱼给雌性注射镇静剂以防止被吃掉\": \"https://www.solidot.org/story?sid=80781\",\n \"棕矮星的质量极限\": \"https://www.solidot.org/story?sid=80780\",\n \"沙特投资基金以 36 亿美元收购 Pokemon Go\": \"https://www.solidot.org/story?sid=80779\",\n \"英特尔任命陈立武为新 CEO\": \"https://www.solidot.org/story?sid=80778\",\n \"全球智能手表销量首次下滑\": \"https://www.solidot.org/story?sid=80777\",\n \"iRobot 警告它可能在 12 个月内倒闭\": \"https://www.solidot.org/story?sid=80776\"\n },\n \"思想花火\": {\n \"招聘｜小米招聘安全合规工程师\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc0MDU1MQ==&mid=2452314013&idx=1&sn=35c28fa8cda208efb50a9a5ce749f163&chksm=b17e52358609db23f47999ffdd4481091ec6c77515aa584fe8ef0b77d8710fe562de30e84fa6&scene=58&subscene=0#rd\"\n },\n \"安全分析与研究\": {\n \"银狐注入型最新样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491041&idx=1&sn=750f19ee7ea154bbe71115d558006a24&chksm=902fb2c9a7583bdfaa46a35cbc1ac1c085c4a513ae15689e5f03bb4f9360e22262f942bb7fff&scene=58&subscene=0#rd\"\n },\n \"Black Hills Information Security\": {\n \"Introducing Orbit\": \"https://www.blackhillsinfosec.com/introducing-orbit/\"\n },\n \"威努特安全网络\": {\n \"提升日志系统范化效率的实践探索\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131602&idx=1&sn=62d2a3e1d65bd2c140ee7b106a72e2d1&chksm=80e71462b7909d74327a90249a2655e2174625f64948ac3a666891481e4e5881271adf92b0a3&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"UEFI Bootkit源码分析\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590760&idx=1&sn=8d19205dd2b2bb12a70df56cca2adcd6&chksm=b18c2ea286fba7b445757b2f58a04e7034651c2ed2a04c18940194d0eb3a73e84178c6ede60f&scene=58&subscene=0#rd\",\n \"Zoom客户端惊现高危漏洞，数百万用户数据或泄露！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590760&idx=2&sn=0a7aeb5d4d57669042d37bf081806d7e&chksm=b18c2ea286fba7b419756a4c459e19762ac07b24d2bd8c3c96a4fe5ffa7a30e4286874880f20&scene=58&subscene=0#rd\",\n \"GDA Pro 企业版：亚洲首款全交互式 Android 反编译器\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590760&idx=3&sn=6360a903ac74b67f538ac36fe43a4ef2&chksm=b18c2ea286fba7b405b4e5dc8f3c0b51ce2e41282a086020b0fee7e93cd26d957b22767837d9&scene=58&subscene=0#rd\",\n \"更新第三章：固件仿真 | 系统0day安全-IOT设备漏洞挖掘（第6期）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590760&idx=4&sn=2cad9940a8a1545f94ff39f7369c4adc&chksm=b18c2ea286fba7b4e3d25f2c14ff96f82d35366d6cb021f77ebd28bf16e740ca6b8a14ff8a5b&scene=58&subscene=0#rd\"\n },\n \"奇安信 CERT\": {\n \"2025 Q1季度你需要关注的高危漏洞合集！\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503162&idx=1&sn=f38c90f903249045d488afc798248811&chksm=fe79e9a2c90e60b4526737d910d2b2bb7a9346ed5a7e385cc6274e5f643507c9f4c615965d35&scene=58&subscene=0#rd\",\n \"ruby-saml 身份认证绕过漏洞(CVE-2025-25291、CVE-2025-25292)安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503162&idx=2&sn=8cdebf57c6043395f1047ecde66a85e1&chksm=fe79e9a2c90e60b4e4da14481800d5a05b9334556a4f6f8f62eeb04669e28aecd293a6207286&scene=58&subscene=0#rd\",\n \"奇安信集团2025年03月补丁库更新通告-第一次更新\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503162&idx=3&sn=f6aec9b2e0fc4b2f7683494717397853&chksm=fe79e9a2c90e60b42bf36e0c9f5e1d25e20c85185101c7669b9daa537252b91184b4bc7bf03b&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"疯狂减人减机构减预算，美国国家网络安全迎来“激变时刻”\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513950&idx=1&sn=3bcd94b91605812c64a86232e8285b80&chksm=ebfaf07edc8d79680311dae10ef75c51b344f1118aebe35abe80b4343beca0687c14c1133cbd&scene=58&subscene=0#rd\",\n \"美国陆军正式发布《陆军统一网络计划2.0》\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513950&idx=2&sn=6460b7d9d24763be20ef8ad616a3fd24&chksm=ebfaf07edc8d796838f2a25056d0e71bd326b780a18aae428e8155935e7b9048b2b46d8f6176&scene=58&subscene=0#rd\"\n },\n \"信安之路\": {\n \"我的首个 AI 智能体，一键关联漏洞 POC ！\": \"https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499815&idx=1&sn=dce5a2af1a71a8f7765ee5a87161a141&chksm=ec1df00fdb6a7919f721d0c66c27ddfb05e61b83d6542df7e2a185a0c3ecd417a34dd87c791b&scene=58&subscene=0#rd\"\n },\n \"代码卫士\": {\n \"英国政府呼吁更强有力的开源供应链安全实践\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522472&idx=1&sn=18c494d9e5b41721aa975e10d533fe49&chksm=ea94a9c2dde320d46789057a9f66a3fb03bfdedde682811ba7450418ef976cd39940608420b4&scene=58&subscene=0#rd\",\n \"Moxa 修复PT 交换机中严重的认证绕过漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522472&idx=2&sn=634e39e2522108a7d73cce0437f95b34&chksm=ea94a9c2dde320d4cca1664a0acf35b1db71939405a13d0836aced66c411095f4704a7aa3dc9&scene=58&subscene=0#rd\"\n },\n \"吾爱破解论坛\": {\n \"【开放注册公告】吾爱破解论坛2025年3月13日十七周年开放注册即将开始 12：00 -- 14：00 和 20：00 -- 22：00。\\n\\n赶不上的定个晚间闹钟吧，新通知会在B站继续发布。\\n\\n推荐使用电脑注册，可以使用论坛的诊断修复工具修复一次，方便提前解决注册中可能会遇到的问题，如果修复后还是不行建议尽快更换设备尝试，不要耽误时间。\\n\\n注册页面会强制10分钟来阅读注册须知，须知中包括了你注册现在和未来可能会遇到的问题，请仔细阅读，否则可能无法注册成功或注册后被清理。\\n\\n另：\\n开放注册期间暂停签到任务、下载论坛附件功能、默认搜索功能、QQ登录绑定等功能（忘记账号密码可以邮箱重置后登陆） 请各位知晓。主要把下载附件的带宽和服务器负载节省下来供用户注册访问使用，等注册结束就恢复了（默认搜索功能根据论坛负载压力预计一周后恢复），请大家谅解。\\n\\n新注册的会员需要注册一天后才可以发帖，以缓解注册压力。\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141923&idx=1&sn=a047ef1032faae54a82b4e6a777b60d6&chksm=bd50a7778a272e61c65e07b7b7fa2b65417abefab6c3fd390164dd856b8b0827a7e817b0128b&scene=58&subscene=0#rd\"\n },\n \"知道创宇404实验室\": {\n \"原创 Paper | 机器学习的逻辑回归模型\": \"https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990775&idx=1&sn=28022e06de8058fe37ec5f698f37f145&chksm=8079aa85b70e239360f904e0e308a1e18d410f4a62e11d77c880a2366aa75b4854196824b2c3&scene=58&subscene=0#rd\"\n },\n \"慢雾科技\": {\n \"香港 Web3 嘉年华 | 慢雾 Hacking Time 邀您共探安全与合规前沿\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501417&idx=1&sn=58a3168409ac471097efef0c5053fbba&chksm=fddeb8eecaa931f8c0cdbf7c6c5cd022b23def23eae97717fe0e7644abca3c6392fd629e8555&scene=58&subscene=0#rd\"\n },\n \"VAADATA – Ethical Hacking Services\": {\n \"What is HTTP Request Smuggling? Exploitations and Security Best Practices\": \"https://www.vaadata.com/blog/what-is-http-request-smuggling-exploitations-and-security-best-practices/\"\n },\n \"数世咨询\": {\n \"SOC 3.0 - AI 赋能的 SOC 演变新趋势\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538016&idx=1&sn=3d53f91139d92fd97008f5ba4038d85f&chksm=c14427ddf633aecbb9bf4ba69c0e4cd4d8aa043cddee5b0cba38990d7df9e1073b4c4101ac5c&scene=58&subscene=0#rd\"\n },\n \"青藤云安全\": {\n \"总说安全防御难搞？你连自家服务器数量都说不清！\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850040&idx=1&sn=46d6a0a1e45dcb828f6910386a535b28&chksm=80dba15db7ac284bf4a7d9410d35a5c51326886ea133757de57af220fa0ad3504bcc0dae81af&scene=58&subscene=0#rd\"\n },\n \"网络空间安全科学学报\": {\n \"综述合辑 | 《网络空间安全科学学报》综述论文（下）\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505245&idx=1&sn=62e53c33c51b44b60df135c464195d1f&chksm=e9bfc1e3dec848f586f510e4342d7f0d56effb3beba3ba8ec30e170a54d1dcc2e5c158f0ae82&scene=58&subscene=0#rd\",\n \"长安常安：第6届网络空间安全前沿论坛正式开启\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505245&idx=2&sn=14e60a92800dd80b4a2a7d104a75db67&chksm=e9bfc1e3dec848f5dd94c4a828a87eef37b136eb9ecd872e490ccb60c53eab1d6332626681f3&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】PHP XXE 注入漏洞让攻击者读取配置文件和私钥\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068467&idx=2&sn=8209e2048ee474d6b91f16029aa9c134&chksm=f36e7633c419ff25d6e98a532a0be210b5f282f06c12a405f3e5a178eeaa0ce3f664e58b2fab&scene=58&subscene=0#rd\",\n \"【安全圈】施乐打印机漏洞使攻击者能够从 LDAP 和 SMB 中获取身份验证数据\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068467&idx=3&sn=a464bcdd8889a7e0e65921296df9fdd8&chksm=f36e7633c419ff25cb190652f57379ceebf2022a9c9068abce3cc38be20fe7f2fbd61fdf65b1&scene=58&subscene=0#rd\",\n \"【安全圈】谷歌警告 Chromecast 用户不要恢复出厂设置\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068467&idx=4&sn=7af960ec5a3791a46142d0250eee6895&chksm=f36e7633c419ff252af8da366999d9ffeb1d55424e357028fc88e29d9745f867fac674cebd45&scene=58&subscene=0#rd\"\n },\n \"中国信息安全\": {\n \"再次集结！第二届“长城杯”铁人三项赛半决赛将在五大赛区开赛\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238220&idx=1&sn=d40517ba5ec65b352f0f170f8887b215&chksm=8b580e75bc2f8763c41254e047ca824aa0a9df6c2627e1fa6a5f42a633a6608c660cabfa965d&scene=58&subscene=0#rd\",\n \"《政府工作报告》（全文）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238220&idx=2&sn=6349db14e0db034b70abf56bd162dc59&chksm=8b580e75bc2f876393ffabb41c5b8c3e4622f8e029c9fb504109426f8570d9233304c539be58&scene=58&subscene=0#rd\",\n \"CNNVD | 关于微软多个安全漏洞的通报\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238220&idx=3&sn=ac6f6d9892b05eabfa11b6103d383753&chksm=8b580e75bc2f8763635869430b4598e1759d531dd6424e8018f4ce4e385d1ab2b7a98c0b7267&scene=58&subscene=0#rd\",\n \"评论 | 维护网络安全与秩序 营造法治化营商环境\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238220&idx=4&sn=49455bcb55d370400fc55c7a55bc3a86&chksm=8b580e75bc2f87631a5b8ac40244b255a9c796eaa2f37092ab722103d15f74fb625c937bf42b&scene=58&subscene=0#rd\",\n \"观点 | 论新型网络犯罪的规制基础\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238220&idx=5&sn=16d56282a67cb519538e5a37226bb4e2&chksm=8b580e75bc2f8763c18413020ff86c4b8e1a0ad02cfd7a294f430c96cdd16e3c21ffc65c94d2&scene=58&subscene=0#rd\",\n \"法治 | 司法利剑斩断网诈“黑手”\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238220&idx=6&sn=e7f62df4d1b895c5d61596e81540b78a&chksm=8b580e75bc2f8763eabb578097d83d3295ab4f389cdc4448de923ee35f2fd86700d816d09456&scene=58&subscene=0#rd\"\n },\n \"微步在线\": {\n \"麻了，2天要装5w个终端！\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183362&idx=1&sn=198ec215d19264089a91a28ba276140d&chksm=f4486d7ec33fe468069a4953756536515e5b885f4e4651a5282f0e903bb15aaf9249221a54bd&scene=58&subscene=0#rd\"\n },\n \"安全学术圈\": {\n \"东南大学 | 通过异常电路检测揭露tor中的恶意同伙\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491786&idx=1&sn=2ec0c7aa9c0e25bcd9fba6b3e761e8be&chksm=fe2d1f41c95a9657a3f5d1fa2210147c75a0d56338e06a8bfcd77863ca520239fa8a2784c0d4&scene=58&subscene=0#rd\"\n },\n \"默安科技\": {\n \"大模型重塑开发安全：默安科技雳鉴产品的智能化创新实践\": \"https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247500463&idx=1&sn=3246f9acb44845b83c93612be1ccdc6d&chksm=e93b358dde4cbc9b47304150543ecf1badce10735d688d6183fc88f3e758e6c8d9cd8245b14e&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \".NET 安全研究新成果：一种绕过 SQL 全局防注入拦截的方法\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499116&idx=1&sn=6976da3cc2c7f725d816ddc949346ec2&chksm=fa595381cd2eda97966e0a05bbe6ec0500b13e111deda84c6ccbee565a11b32b2954149200a5&scene=58&subscene=0#rd\",\n \".NET 内网攻防实战电子报刊\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499116&idx=2&sn=5576571e0fe2c30d6bad51f014cc6a57&chksm=fa595381cd2eda97d610f96e9e98ff6da6aa8685214eab62efadde6c571b803bbc4954768ff0&scene=58&subscene=0#rd\",\n \"通过 Sharp4SessionExec 实现在不同用户会话中执行命令\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499116&idx=3&sn=2d1283a6a06b84f8816eeb6f99277b9e&chksm=fa595381cd2eda97168cd7e690d532ae337b22049afe5a74ff3de2e9a981be6578934ca966f4&scene=58&subscene=0#rd\"\n },\n \"信息安全国家工程研究中心\": {\n \"工程中心参编《关键信息基础设施安全服务能力要求、供应链安全要求、测评估能力要求》团体标准正式发布\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498994&idx=1&sn=61453f2d64c2e43b2e0a3b8d323e2370&chksm=feb67de1c9c1f4f7e23cf417568c7fb112d0fe8c276a494658774bb4f4cfa8fa25adeb70f150&scene=58&subscene=0#rd\"\n },\n \"补天平台\": {\n \"奖金翻倍 | 补天通用开源奖励计划启动！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247507556&idx=1&sn=c4e6e84cc52f7068082242c441a1ab87&chksm=eaf99628dd8e1f3e611874080031366ba8dae4180a373b91643dd84ea83933d681c67989b885&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"小米成为 Ultra，零跑要当「小米」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075662&idx=1&sn=6adf679974f124f5efef7d63e668efa4&chksm=7e57c57849204c6e8c814cb565bc60b5b10d50a2ee78b1f0d8830363b354e4ff0934a2b51916&scene=58&subscene=0#rd\",\n \"​实测新版通义 APP：更好用的个人 AI 助理，需要什么？\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075638&idx=1&sn=f2efd3e4bbaae772cbb3abcd1c162d0c&chksm=7e57c50049204c16e4f244ca2b6d068f9cc5600cf057a631dd81ac0a1e77150da09191f046c5&scene=58&subscene=0#rd\",\n \"谷歌曝两款「机器人 AI 模型」；英特尔任命新 CEO，股价大涨11%；253 亿！《宝可梦 Go》出售 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075593&idx=1&sn=622ac26fc488909947497e3d53d7b5d9&chksm=7e57c53f49204c29d7d518ff2a8ca4bedb6e937db83bec0b5d6b9042302117b78ec1687ca80b&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"解密FBI：为何美国情报机构在\\\"五眼联盟\\\"中出局？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560259&idx=1&sn=21c6bb1c550b0d3227695f5740c36621&chksm=87117948b066f05e579e20978a60eb00574f32efcda53d80f6496cc22d11ff4250ce35366859&scene=58&subscene=0#rd\",\n \"美国对乌克兰情报共享暂停与恢复事件对现代情报战的范式重构\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560259&idx=2&sn=a2b29558f17fbd2bc7f78f239b81b414&chksm=87117948b066f05e86c24d68b95f7fa96777d4d71f155d8b704cbaba5725329e7d6d0864a65c&scene=58&subscene=0#rd\"\n },\n \"火绒安全\": {\n \"Rust后门样本加载与传播方式演变过程分析\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524579&idx=1&sn=4fd63ec101952bc5ae6933d368e97645&chksm=eb70bedcdc0737ca180d0776d6fe82ce5d91d44f3d2e6be5cd8af434140568b75d40c9c55d7d&scene=58&subscene=0#rd\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524579&idx=2&sn=e666b271eb630b7c00f39173fb8391b7&chksm=eb70bedcdc0737ca6062f4c47ce74ab56a38331c39f4decad647b372037530ec0662b4fa3eaa&scene=58&subscene=0#rd\"\n },\n \"百度安全应急响应中心\": {\n \"文心快码全新升级！Comate Zulu开放公测，超多好礼派送中\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODc0MTIwMw==&mid=2652542317&idx=1&sn=054952a479b425b0bdf650752772632c&chksm=8bcbb151bcbc3847a8334139489ccaf050d3911b1ad477aa76449932cf2c78895eb40e0094a0&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"来个Offer||云智研发公司科恩工作室，等你加入！\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581490&idx=1&sn=570a18afe5ef92fd6e29da6570698755&chksm=e9146f08de63e61ebd74b5b0bc0830e514f81b9f80490450691de29a23f0665baf012e0446bb&scene=58&subscene=0#rd\",\n \"隐匿在未知角落的 Anubis 恶意软件 为黑客远程命令大开方便之门\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581490&idx=2&sn=1486ec13c579208f637cdd487c90f63c&chksm=e9146f08de63e61e4e35a4537d264d6f97117f08faf52c853b01094104ed2b86bba62e3b299f&scene=58&subscene=0#rd\"\n },\n \"京东安全应急响应中心\": {\n \"「京麒沙龙第16期」移动安全技术专场，线下约起~\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727844256&idx=1&sn=8baaa83a6686bdc326c5fad97e43ec6c&chksm=80504e28b727c73e87d12f1fd66f796de89dd4e0be4e0b10e0f2ece4800d07e61e14f871249f&scene=58&subscene=0#rd\"\n },\n \"复旦白泽战队\": {\n \"人物访谈｜邬梦莹：自律计划责任感，伴我破浪向远方\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247493373&idx=1&sn=400361e767e8ff8c404872082b99e136&chksm=fde86283ca9feb95abcc005bdc191fc7bb396c7e6ea25357382c6548bf67bc009ab0cd4c7d10&scene=58&subscene=0#rd\"\n },\n \"威胁猎人Threat Hunter\": {\n \"威胁猎人2025年2月安全情报和产品升级汇总\": \"https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247499107&idx=1&sn=df7f55710954cee9a33d89fde2ad172d&chksm=eb12db58dc65524e345b977ae27c1b2098967ac163f7348c8c65ca9e22960c54c0a8cc637e0a&scene=58&subscene=0#rd\"\n },\n \"字节跳动技术团队\": {\n \"Trae x 稀土掘金：与 AI 结伴，编程不孤单，推荐&学习有好礼！\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513705&idx=1&sn=72480171880c2a4d21fb4b15d05c861b&chksm=e9d37d8bdea4f49d783f9a85d8e93c783a3552ccdf26615a7f23de68032ffafa48f8e50780d0&scene=58&subscene=0#rd\"\n },\n \"Yak Project\": {\n \"SyntaxFlow实战CVE漏洞？那很好了\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247527877&idx=1&sn=e2f3cafb8ca5483d93b9636780003d5d&chksm=c2d11161f5a6987783bd107c9c0bca13161e6efde1b5ff480a723a8d0cb559f35d696689751b&scene=58&subscene=0#rd\"\n },\n \"360数字安全\": {\n \"360预警：银狐木马又双叒变异，PDF文件成传播“帮凶”\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579882&idx=1&sn=a75a7b4092402443d76ca2d3eb3a8104&chksm=9f8d28e2a8faa1f4488ad6037308fca9a9dd672447f9635e2f593c04f2d8505caff1415e9825&scene=58&subscene=0#rd\"\n },\n \"Microsoft Security Blog\": {\n \"How MSRC coordinates vulnerability research and disclosure while building community\": \"https://www.microsoft.com/en-us/security/blog/2025/03/13/how-msrc-coordinates-vulnerability-research-and-disclosure-while-building-community/\",\n \"Phishing campaign impersonates Booking .com, delivers a suite of credential-stealing malware\": \"https://www.microsoft.com/en-us/security/blog/2025/03/13/phishing-campaign-impersonates-booking-com-delivers-a-suite-of-credential-stealing-malware/\"\n },\n \"bellingcat\": {\n \"Pitch Wildlife and Environmental investigations to Bellingcat\": \"https://www.bellingcat.com/uncategorized/2025/03/13/pitch-wildlife-and-environmental-investigations-to-bellingcat/\"\n },\n \"ICT Security Magazine\": {\n \"Machine Unlearning: Metodologie di Mitigazione\": \"https://www.ictsecuritymagazine.com/articoli/machine-unlearning/\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Il gruppo Lazarus colpisce ancora: nuova ondata di pacchetti npm dannosi\": \"https://www.cybersecurity360.it/news/il-gruppo-lazarus-colpisce-ancora-nuova-ondata-di-pacchetti-npm-dannosi/\",\n \"Netcraft Launches New Real-time Threat API to Improve and Accelerate Collaboration with Infrastructure Providers\": \"https://www.netcraft.com/news/netcraft-launches-new-real-time-threat-api-to-improve-and-accelerate-collaboration-with-infrastructure-providers/\",\n \"Microsoft apologizes for removing VSCode extensions used by millions\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-apologizes-for-removing-vscode-extensions-used-by-millions/\",\n \"Windows Notepad to get AI text summarization in Windows 11\": \"https://www.bleepingcomputer.com/news/microsoft/windows-notepad-to-get-ai-text-summarization-in-windows-11/\",\n \"New SuperBlack ransomware exploits Fortinet auth bypass flaws\": \"https://www.bleepingcomputer.com/news/security/new-superblack-ransomware-exploits-fortinet-auth-bypass-flaws/\",\n \"European lawmaker says EU is committed to continuing data transfers to US\": \"https://therecord.media/lawmaker-data-transfer-us-mcgrath\",\n \"Miniaudio and Adobe Acrobat Reader vulnerabilities\": \"https://blog.talosintelligence.com/miniaudio-and-adobe-acrobat-reader-vulnerabilities/\",\n \"Patch it up: Old vulnerabilities are everyone’s problems\": \"https://blog.talosintelligence.com/patch-it-up-old-vulnerabilities-are-everyones-problems/\",\n \"Microsoft says button to restore classic Outlook is broken\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-says-button-to-restore-classic-outlook-is-broken/\",\n \"Apple’s Lockdown Mode is good for security — but its notifications are baffling\": \"https://techcrunch.com/2025/03/13/apples-lockdown-mode-is-good-for-security-but-its-notifications-are-baffling/\",\n \"Cloud, dipendenza UE dalle infastrutture USA e subalternità tecnologica: quali impatti\": \"https://www.cybersecurity360.it/legal/privacy-dati-personali/cloud-dipendenza-ue-dalle-infastrutture-usa-e-subalternita-tecnologica-quali-impatti/\",\n \"La Corte d’Appello di Parigi nega al legale il recupero del suo account da Google: quale lezione\": \"https://www.cybersecurity360.it/news/la-corte-dappello-di-parigi-nega-al-legale-il-recupero-del-suo-account-da-google-cosa-impariamo/\",\n \"Booking.com phishing campaign targeting hospitality sector with malware\": \"https://therecord.media/booking-phishing-hotels-malware-campaign\",\n \"Juniper patches bug that let Chinese cyberspies backdoor routers\": \"https://www.bleepingcomputer.com/news/security/juniper-patches-bug-that-let-chinese-cyberspies-backdoor-routers-since-mid-2024/\",\n \"Quantum computing: come il chip Majorana 1 di Microsoft ridefinirà la cyber security\": \"https://www.cybersecurity360.it/cultura-cyber/quantum-computing-come-il-chip-majorana-1-di-microsoft-ridefinira-la-cyber-security/\",\n \"GitLab patches critical authentication bypass vulnerabilities\": \"https://www.bleepingcomputer.com/news/security/gitlab-patches-critical-authentication-bypass-vulnerabilities/\",\n \"Il ransomware Medusa ha colpito oltre 300 infrastrutture critiche\": \"https://www.securityinfo.it/2025/03/13/il-ransomware-medusa-ha-colpito-oltre-300-infrastrutture-critiche/\",\n \"Calls grow for UK to move secret Apple encryption court hearing to public session\": \"https://therecord.media/calls-grow-uk-secret-apple-court-encryption-public\",\n \"ClickFix attack delivers infostealers, RATs in fake Booking.com emails\": \"https://www.bleepingcomputer.com/news/security/clickfix-attack-delivers-infostealers-rats-in-fake-bookingcom-emails/\",\n \"Ukraine seeks to bolster offensive cyber capabilities amid rising threats from Russia\": \"https://therecord.media/ukraine-russia-cyber-offensive-bolster\",\n \"Red Report 2025: Unmasking a 3X Spike in Credential Theft and Debunking the AI Hype\": \"https://www.bleepingcomputer.com/news/security/red-report-2025-unmasking-a-3x-spike-in-credential-theft-and-debunking-the-ai-hype/\",\n \"How to Write an Agent\": \"https://www.evilsocket.net/2025/03/13/How-To-Write-An-Agent/\",\n \"Fake CAPTCHA but make it Email\": \"https://catchingphish.com/posts/f/fake-captcha-but-make-it-email\",\n \"At Ukraine’s major cyber conference, Europe takes center stage over US\": \"https://therecord.media/kyiv-cyber-conference-europe-center-stage-over-us\",\n \"Apple Releases Security Updates and Rapid Security Responses for March 2025\": \"https://cyble.com/blog/apple-releases-security-updates-and-rapid-security-responses-for-march-2025/\",\n \"New Pre-Installed Dev Tools for Deep Sandbox Malware Analysis\": \"https://any.run/cybersecurity-blog/pre-installed-dev-tools/\",\n \"Behavioral Analytics & Scams\": \"https://www.threatfabric.com/blogs/behavioral-analytics-scams\",\n \"Head Mare and Twelve join forces to attack Russian entities\": \"https://securelist.com/head-mare-twelve-collaboration/115887/\",\n \"Abusing with style: Leveraging cascading style sheets for evasion and tracking\": \"https://blog.talosintelligence.com/css-abuse-for-evasion-and-tracking/\",\n \"ENISA’s NIS360 Report Provides a Strategic View of Cybersecurity Maturity Across Critical Sectors\": \"https://cyble.com/blog/enisa-nis2-cybersecurity-maturity-report/\",\n \"Pianificare il disaster recovery: strategie e soluzioni\": \"https://www.cybersecurity360.it/soluzioni-aziendali/disaster-recovery-strategie-soluzioni/\",\n \"ClickFix: The Social Engineering Technique Hackers Use to Manipulate Victims\": \"https://www.group-ib.com/blog/clickfix-the-social-engineering-technique-hackers-use-to-manipulate-victims/\",\n \"Bypassing Web Filters Part 2: Host Header Spoofing\": \"https://blog.compass-security.com/2025/03/bypassing-web-filters-part-2-host-header-spoofing/\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #775: An Azure log entry to look for when a threat actor is in\": \"https://www.hecfblog.com/2025/03/daily-blog-775-azure-log-entry-to-look.html\"\n },\n \"Securityinfo.it\": {\n \"Il ransomware Medusa ha colpito oltre 300 infrastrutture critiche\": \"https://www.securityinfo.it/2025/03/13/il-ransomware-medusa-ha-colpito-oltre-300-infrastrutture-critiche/?utm_source=rss&utm_medium=rss&utm_campaign=il-ransomware-medusa-ha-colpito-oltre-300-infrastrutture-critiche\"\n },\n \"迪哥讲事\": {\n \"某付宝登录js分析\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497269&idx=1&sn=91b4db853c028312be50352cfbb7e8e1&chksm=e8a5fc56dfd27540b74d61952e62a3a9b6261998810d99b42c83e817e0c9c0e7bcaa8e7b9b4e&scene=58&subscene=0#rd\"\n },\n \"Schneier on Security\": {\n \"RIP Mark Klein\": \"https://www.schneier.com/blog/archives/2025/03/rip-mark-klein.html\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"ISC Stormcast For Thursday, March 13th, 2025 https://isc.sans.edu/podcastdetail/9362, (Thu, Mar 13th)\": \"https://isc.sans.edu/diary/rss/31766\",\n \"File Hashes Analysis with Power BI from Data Stored in DShield SIEM, (Wed, Mar 12th)\": \"https://isc.sans.edu/diary/rss/31764\"\n },\n \"FuzzWiki\": {\n \"Halo：通过可能不变量推断的反例引导定向模糊测试\": \"https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247487076&idx=1&sn=dea4ff6f68462138f311feb51584250d&chksm=fbd9a5d8ccae2cce578e8bb6607b6776a0bb64aa0430cce9e6f9c7b0077e4b287912c84aa616&scene=58&subscene=0#rd\"\n },\n \"RedTeam\": {\n \"零信任的现状与未来：从成熟度模型看安全架构的持续演进\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484361&idx=1&sn=285f46c2308985ad0c41bfd9bd21a099&chksm=c006cb39f771422f796db5d388eaa73fc1891bf8f7265fecefb45c67e9f7a51439a5b6867955&scene=58&subscene=0#rd\"\n },\n \"Include Security Research Blog\": {\n \"Memory Corruption in Delphi\": \"https://blog.includesecurity.com/2025/03/memory-corruption-in-delphi/\"\n },\n \"evilsocket\": {\n \"How to Write an Agent\": \"https://www.evilsocket.net/2025/03/13/How-To-Write-An-Agent/\"\n },\n \"The Hacker News\": {\n \"Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails\": \"https://thehackernews.com/2025/03/microsoft-warns-of-clickfix-phishing.html\",\n \"North Korea’s ScarCruft Deploys KoSpy Malware, Spying on Android Users via Fake Utility Apps\": \"https://thehackernews.com/2025/03/north-koreas-scarcruft-deploys-kospy.html\",\n \"GitHub Uncovers New ruby-saml Vulnerabilities Allowing Account Takeover Attacks\": \"https://thehackernews.com/2025/03/github-uncovers-new-ruby-saml.html\",\n \"Future-Proofing Business Continuity: BCDR Trends and Challenges for 2025\": \"https://thehackernews.com/2025/03/bcdr-2025-trends-and-challenges-for-msps-and-it-teams.html\",\n \"Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk\": \"https://thehackernews.com/2025/03/meta-warns-of-freetype-vulnerability.html\",\n \"WARNING: Expiring Root Certificate May Disable Firefox Add-Ons, Security Features, and DRM Playback\": \"https://thehackernews.com/2025/03/warning-expiring-root-certificate-may.html\"\n },\n \"Tor Project blog\": {\n \"Older Tor Browsers Breaking, Update Now!\": \"https://blog.torproject.org/old-tor-browsers-breakage/\",\n \"New Alpha Release: Tor Browser 14.5a4\": \"https://blog.torproject.org/new-alpha-release-tor-browser-145a4/\"\n },\n \"Graham Cluley\": {\n \"Chromecast chaos – 2nd gen devices go belly-up as Google struggles to fix certificate issue\": \"https://www.bitdefender.com/en-us/blog/hotforsecurity/chromecast-chaos-2nd-gen-devices-go-belly-up-as-google-struggles-to-fix-certificate-issue\",\n \"Medusa ransomware: FBI and CISA urge organisations to act now to mitigate threat\": \"https://www.tripwire.com/state-of-security/medusa-ransomware-fbi-and-cisa-urge-organizations-act-now-mitigate-threat\",\n \"Smashing Security podcast #408: A gag order backfires, and a snail mail ransom demand\": \"https://grahamcluley.com/smashing-security-podcast-408/\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"Flipper Blackhat Update\": \"https://www.reddit.com/r/blackhat/comments/1jab3m6/flipper_blackhat_update/\"\n },\n \"Information Security\": {\n \"How to Spot Steganography\": \"https://www.reddit.com/r/Information_Security/comments/1jaesbl/how_to_spot_steganography/\",\n \"Join Online Webinar: SCA or SAST - How They Complement Each Other for Stronger Security?\": \"https://www.reddit.com/r/Information_Security/comments/1ja9ce2/join_online_webinar_sca_or_sast_how_they/\"\n },\n \"Deeplinks\": {\n \"EFF to NSF: AI Action Plan Must Put People First\": \"https://www.eff.org/deeplinks/2025/03/eff-nsf-ai-action-plan-must-put-people-first\",\n \"EFF Thanks Fastly for Donated Tools to Help Keep Our Website Secure\": \"https://www.eff.org/deeplinks/2025/03/eff-thanks-fastly-donated-tools-help-keep-our-website-secure-0\",\n \"EFFecting Change: Is There Hope for Social Media?\": \"https://www.eff.org/deeplinks/2025/03/effecting-change-there-hope-social-media\",\n \"EFF Joins AllOut’s Campaign Calling for Meta to Stop Hate Speech Against LGBTQ+ Community\": \"https://www.eff.org/deeplinks/2025/03/eff-joins-allouts-campaign-calling-meta-stop-hate-speech-against-lgbtq-community\"\n },\n \"Computer Forensics\": {\n \"ZFS\": \"https://www.reddit.com/r/computerforensics/comments/1jad9ea/zfs/\",\n \"Axiom Google Chrome Affiliations\": \"https://www.reddit.com/r/computerforensics/comments/1jam9e3/axiom_google_chrome_affiliations/\",\n \"Finding when the original timestamp was change???\": \"https://www.reddit.com/r/computerforensics/comments/1jaaawk/finding_when_the_original_timestamp_was_change/\"\n },\n \"Security Affairs\": {\n \"GitLab addressed critical auth bypass flaws in CE and EE\": \"https://securityaffairs.com/175370/security/gitlab-addressed-critical-flaws-in-ce-and-ee.html\",\n \"North Korea-linked APT group ScarCruft spotted using new Android spyware KoSpy\": \"https://securityaffairs.com/175357/malware/scarcruft-used-a-new-android-spyware-dubbed-kospy.html\",\n \"Experts warn of a coordinated surge in the exploitation attempts of SSRF vulnerabilities\": \"https://securityaffairs.com/175344/hacking/coordinated-surge-exploitation-attempts-ssrf-vulnerabilities.html\",\n \"Meta warns of actively exploited flaw in FreeType library\": \"https://securityaffairs.com/175337/hacking/meta-warned-actively-exploited-cve-2025-27363.html\",\n \"Medusa ransomware hit over 300 critical infrastructure organizations until February 2025\": \"https://securityaffairs.com/175319/cyber-crime/medusa-ransomware-hit-over-300-critical-infrastructure-organizations-until-february-2025.html\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Cradle.sh Open Source Threat Intelligence Hub\": \"https://www.reddit.com/r/netsec/comments/1jad2e8/cradlesh_open_source_threat_intelligence_hub/\",\n \"Memory Corruption in Delphi\": \"https://www.reddit.com/r/netsec/comments/1janb9v/memory_corruption_in_delphi/\",\n \"Sign in as anyone: Bypassing SAML SSO authentication with parser differentials\": \"https://www.reddit.com/r/netsec/comments/1ja6lxm/sign_in_as_anyone_bypassing_saml_sso/\",\n \"Brushing Up on Hardware Hacking Part 2 - SPI, UART, Pulseview, and Flashrom\": \"https://www.reddit.com/r/netsec/comments/1jaex39/brushing_up_on_hardware_hacking_part_2_spi_uart/\",\n \"New all-in-one monitoring project with leaks, cve db, ransomware info, ddos target, and news\": \"https://www.reddit.com/r/netsec/comments/1ja6gyj/new_allinone_monitoring_project_with_leaks_cve_db/\"\n },\n \"Your Open Hacker Community\": {\n \"Spoof MAC address on MT7902\": \"https://www.reddit.com/r/HowToHack/comments/1jaqm05/spoof_mac_address_on_mt7902/\",\n \"I need help making a VPS...\": \"https://www.reddit.com/r/HowToHack/comments/1ja6v3n/i_need_help_making_a_vps/\",\n \"Any TID writable uhf rfid tags?\": \"https://www.reddit.com/r/HowToHack/comments/1jamvs4/any_tid_writable_uhf_rfid_tags/\",\n \"Email spoofing\": \"https://www.reddit.com/r/HowToHack/comments/1jam2ui/email_spoofing/\",\n \"TikTok Account Hacked\": \"https://www.reddit.com/r/HowToHack/comments/1jankbq/tiktok_account_hacked/\",\n \"iPad stolen and location turned off, also have credit card information from someone who may have changed the security code\": \"https://www.reddit.com/r/HowToHack/comments/1jahb6g/ipad_stolen_and_location_turned_off_also_have/\",\n \"how to kick people off their wifi\": \"https://www.reddit.com/r/HowToHack/comments/1jaf6wc/how_to_kick_people_off_their_wifi/\",\n \"How can I clone cryptographic or anti clone UHF rfid tag?\": \"https://www.reddit.com/r/HowToHack/comments/1ja85k7/how_can_i_clone_cryptographic_or_anti_clone_uhf/\",\n \"Looking for Information on Unlimited eSIMs from a French Operator\": \"https://www.reddit.com/r/HowToHack/comments/1ja5t1w/looking_for_information_on_unlimited_esims_from_a/\",\n \"I want to learn how to gain access to CCTV cameras\": \"https://www.reddit.com/r/HowToHack/comments/1ja7kuo/i_want_to_learn_how_to_gain_access_to_cctv_cameras/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"AI Is Oversharing and Leaking Data - Sounil Yu - PSW #865\": \"http://sites.libsyn.com/18678/ai-is-oversharing-and-leaking-data-sounil-yu-psw-865\"\n }\n}"}, "f759b2eb173a3a12c3db7c9f39284004b89a2520": {"t": 1785772251.9010427, "n": 49550, "h": "1aecea4013d8d48a", "c": "{\n \"Verne in GitHub\": {\n \"Gemini 2 的原生多模态图片生成\": \"https://blog.einverne.info/post/2025/03/google-gemini-2-native-image-generation.html\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"隐匿在未知角落的 Anubis 恶意软件 为黑客远程命令大开方便之门\": \"https://www.4hou.com/posts/KGkG\"\n },\n \"paper - Last paper\": {\n \"机器学习的逻辑回归模型\": \"https://paper.seebug.org/3303/\"\n },\n \"Twitter @Nicolas Krassas\": {\n \"North Korea’s ScarCruft Deploys KoSpy Malware, Spying on Android Users via Fake Utility Apps https://thehackernews.com/2025/03/north-koreas-scarcruft...\": \"https://x.com/Dinosn/status/1900307857137877305\",\n \"Grafana Flaws Likely Targeted in Broad SSRF Exploitation Campaign https://www.securityweek.com/grafana-flaws-likely-targeted-in-broad-ssrf-exploitatio...\": \"https://x.com/Dinosn/status/1900307027500417384\",\n \"Experts warn of a coordinated surge in the exploitation attempts of SSRF vulnerabilities https://securityaffairs.com/175344/hacking/coordinated-surge-...\": \"https://x.com/Dinosn/status/1900306893878309290\",\n \"Capchan – Solving CAPTCHA with Image Classification https://sensepost.com/blog/2025/capchan-solving-captcha-with-image-classification/\": \"https://x.com/Dinosn/status/1900306755206472182\",\n \"Sign in as anyone: Bypassing SAML SSO authentication with parser differentials https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authe...\": \"https://x.com/Dinosn/status/1900306620317409518\",\n \"Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk https://thehackernews.com/2025/03/meta-warns-of-freetype-vulnerabi...\": \"https://x.com/Dinosn/status/1900306503011115257\",\n \"Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails https://thehackernews.com/2025/03/microsoft-w...\": \"https://x.com/Dinosn/status/1900306349843448081\",\n \"CISA Releases Thirteen Industrial Control Systems Advisories https://www.cisa.gov/news-events/alerts/2025/03/13/cisa-releases-thirteen-industrial-cont...\": \"https://x.com/Dinosn/status/1900306090912301534\",\n \"Google says it's rolling out a fix for stricken Chromecasts https://go.theregister.com/feed/www.theregister.com/2025/03/13/google_chromecast_fix/\": \"https://x.com/Dinosn/status/1900305899593351218\",\n \"Windows Notepad to get AI text summarization in Windows 11 https://www.bleepingcomputer.com/news/microsoft/windows-notepad-to-get-ai-text-summarizatio...\": \"https://x.com/Dinosn/status/1900305834598371771\",\n \"New SuperBlack ransomware exploits Fortinet auth bypass flaws https://www.bleepingcomputer.com/news/security/new-superblack-ransomware-exploits-fortin...\": \"https://x.com/Dinosn/status/1900305779279769880\",\n \"Widespread Fake CAPTCHA Campaign Delivering Malware https://arcticwolf.com/resources/blog/widespread-fake-captcha-campaign-delivering-malware/\": \"https://x.com/Dinosn/status/1900305629136167388\",\n \"Microsoft apologizes for removing VSCode extensions used by millions https://www.bleepingcomputer.com/news/microsoft/microsoft-apologizes-for-removing...\": \"https://x.com/Dinosn/status/1900305570407567360\",\n \"OBSCURE#BAT Malware Highlights Risks of API Hooking https://www.darkreading.com/vulnerabilities-threats/obscurebat-malware-highlights-api-hooking\": \"https://x.com/Dinosn/status/1900305537192927718\",\n \"FBI and CISA Urge Enabling 2FA to Counter Medusa Ransomware https://hackread.com/fbi-cisa-urge-enabling-2fa-counter-medusa-ransomware/\": \"https://x.com/Dinosn/status/1900305511104364790\",\n \"Microsoft says button to restore classic Outlook is broken https://www.bleepingcomputer.com/news/microsoft/microsoft-says-button-to-restore-classic-ou...\": \"https://x.com/Dinosn/status/1900305443680924081\",\n \"GO Simple Tunnel - a simple tunnel written in golang https://github.com/ginuerzh/gost\": \"https://x.com/Dinosn/status/1900183205472288959\",\n \"Head Mare and Twelve join forces to attack Russian entities https://securelist.com/head-mare-twelve-collaboration/115887/\": \"https://x.com/Dinosn/status/1900182863774961764\",\n \"OpenAI Operator Agent Used in Proof-of-Concept Phishing Attack https://www.darkreading.com/threat-intelligence/openai-operator-agent-proof-concept-phi...\": \"https://x.com/Dinosn/status/1900182804354203730\",\n \"Medusa ransomware affiliate tried triple extortion scam – up from the usual double demand https://go.theregister.com/feed/www.theregister.com/2025/03...\": \"https://x.com/Dinosn/status/1900182299775320479\"\n },\n \"SecWiki News\": {\n \"SecWiki News 2025-03-13 Review\": \"http://www.sec-wiki.com/?2025-03-13\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"THM — Anonforce\": \"https://infosecwriteups.com/thm-anonforce-874016c34a0f?source=rss----7b722bfd1b8d---4\",\n \"Escalate and Defend: Linux Kernel Exploit Walkthrough\": \"https://infosecwriteups.com/escalate-and-defend-linux-kernel-exploit-walkthrough-eed9cf0c50ba?source=rss----7b722bfd1b8d---4\",\n \"IDOR — TryHackMe Walkthrough\": \"https://infosecwriteups.com/idor-tryhackme-walkthrough-0a38ddc37694?source=rss----7b722bfd1b8d---4\",\n \"Ultimate List of Free Resources for Bug Bounty Hunters\": \"https://infosecwriteups.com/ultimate-list-of-free-resources-for-bug-bounty-hunters-bfba8deb5a36?source=rss----7b722bfd1b8d---4\",\n \"Creating a CTF Machine with Docker and Docker Compose: A Step-by-Step Guide\": \"https://infosecwriteups.com/creating-a-ctf-machine-with-docker-and-docker-compose-a-step-by-step-guide-b5143576ae28?source=rss----7b722bfd1b8d---4\",\n \"Hacking Swagger UI - 101\": \"https://infosecwriteups.com/hacking-swagger-ui-101-ccbce66ba028?source=rss----7b722bfd1b8d---4\",\n \"How I Earned $500 for Getting Trapped in a Private Facebook Event\": \"https://infosecwriteups.com/how-i-earned-500-for-getting-trapped-in-a-private-facebook-event-d4b7f3fdaacd?source=rss----7b722bfd1b8d---4\"\n },\n \"Trustwave Blog\": {\n \"Challenges for Australian Manufacturers: Insights from the 2025 Trustwave Risk Radar Report\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/challenges-for-australian-manufacturers-insights-from-the-2025-trustwave-risk-radar-report/\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Thu Mar 13 20:24:40 UTC 2025\": \"https://github.com/trickest/cve/commit/dd46a4567472255dbff2966b98631b6fffe949e4\",\n \"Update Thu Mar 13 12:29:12 UTC 2025\": \"https://github.com/trickest/cve/commit/75b45ef9b73d9700391504788da3d8d5a8b25b0b\",\n \"Update Thu Mar 13 04:34:35 UTC 2025\": \"https://github.com/trickest/cve/commit/62579d9ee8179c6a14f11adebdb17ee5546468d6\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"ExHub 的 IDOR 漏洞可致攻击者篡改网站托管配置\": \"https://www.anquanke.com/post/id/305023\",\n \"施乐打印机漏洞可致攻击者从PDA和SMB捕获身份验证数据\": \"https://www.anquanke.com/post/id/305020\",\n \"瞻博网络成功修复 Session Smart Router 关键漏洞\": \"https://www.anquanke.com/post/id/305015\",\n \"Blind Eagle APT-C-36：快速利用补丁漏洞，借知名平台发动网络攻击\": \"https://www.anquanke.com/post/id/305013\",\n \"通过 YouTube 传播的 DCRat 恶意软件正攻击用户以窃取登录凭证\": \"https://www.anquanke.com/post/id/305010\",\n \"不断演变的分布式拒绝服务（DDoS）攻击策略：网络专家剖析社交媒体平台X的遭袭事件\": \"https://www.anquanke.com/post/id/305007\",\n \"新型Anubis恶意软件：可完全躲避检测，让黑客得以执行远程命令\": \"https://www.anquanke.com/post/id/305005\",\n \"Opentext推出人工智能网络安全解决方案抵御威胁\": \"https://www.anquanke.com/post/id/305002\",\n \"Nasuni 与 CrowdStrike 合作，大幅提升威胁检测效能\": \"https://www.anquanke.com/post/id/304997\",\n \"360携手首都在线 拟推动DeepSeek一体机安全与服务落地合作\": \"https://www.anquanke.com/post/id/304995\"\n },\n \"Tenable Blog\": {\n \"DeepSeek Deep Dive Part 1: Creating Malware, Including Keyloggers and Ransomware\": \"https://www.tenable.com/blog/deepseek-deep-dive-part-1-creating-malware-including-keyloggers-and-ransomware\"\n },\n \"奇安信攻防社区\": {\n \"XSS防御-揭秘Unicode溢出与CSP Bypass\": \"https://forum.butian.net/share/4181\"\n },\n \"Security Boulevard\": {\n \"Response to CISA Advisory (AA25-071A): #StopRansomware: Medusa Ransomware\": \"https://securityboulevard.com/2025/03/response-to-cisa-advisory-aa25-071a-stopransomware-medusa-ransomware/?utm_source=rss&utm_medium=rss&utm_campaign=response-to-cisa-advisory-aa25-071a-stopransomware-medusa-ransomware\",\n \"BSides Exeter 2024 – Blue Track – DFIR – Are We There Yet?\": \"https://securityboulevard.com/2025/03/bsides-exeter-2024-blue-track-dfir-are-we-there-yet/?utm_source=rss&utm_medium=rss&utm_campaign=bsides-exeter-2024-blue-track-dfir-are-we-there-yet\",\n \"SafeBreach Coverage for US CERT AA25-071A (Medusa Ransomware)\": \"https://securityboulevard.com/2025/03/safebreach-coverage-for-us-cert-aa25-071a-medusa-ransomware/?utm_source=rss&utm_medium=rss&utm_campaign=safebreach-coverage-for-us-cert-aa25-071a-medusa-ransomware\",\n \"AD Lite Password Auditor Report: Key Insights and Data\": \"https://securityboulevard.com/2025/03/ad-lite-password-auditor-report-key-insights-and-data/?utm_source=rss&utm_medium=rss&utm_campaign=ad-lite-password-auditor-report-key-insights-and-data\",\n \"Randall Munroe’s XKCD ‘Water Damage’\": \"https://securityboulevard.com/2025/03/randall-munroes-xkcd-water-damage/?utm_source=rss&utm_medium=rss&utm_campaign=randall-munroes-xkcd-water-damage\",\n \"Silk Typhoon Targeting IT Supply Chains and Network Devices, Microsoft Reports\": \"https://securityboulevard.com/2025/03/silk-typhoon-targeting-it-supply-chains-and-network-devices-microsoft-reports/?utm_source=rss&utm_medium=rss&utm_campaign=silk-typhoon-targeting-it-supply-chains-and-network-devices-microsoft-reports\",\n \"Moving Past Compensating Controls: The Long-Term Value of Tokenization for PCI DSS\": \"https://securityboulevard.com/2025/03/moving-past-compensating-controls-the-long-term-value-of-tokenization-for-pci-dss/?utm_source=rss&utm_medium=rss&utm_campaign=moving-past-compensating-controls-the-long-term-value-of-tokenization-for-pci-dss\",\n \"Cyberattacks on Water Facilities Are Growing | Aria Cybersecurity\": \"https://securityboulevard.com/2025/03/cyberattacks-on-water-facilities-are-growing-aria-cybersecurity/?utm_source=rss&utm_medium=rss&utm_campaign=cyberattacks-on-water-facilities-are-growing-aria-cybersecurity\",\n \"ICYMI: Interesting Things We Learned at the HIMSS 2025 Conference\": \"https://securityboulevard.com/2025/03/icymi-interesting-things-we-learned-at-the-himss-2025-conference/?utm_source=rss&utm_medium=rss&utm_campaign=icymi-interesting-things-we-learned-at-the-himss-2025-conference\",\n \"PCI DSS SAQ A-EP: Secure Your E-Commerce Payments\": \"https://securityboulevard.com/2025/03/pci-dss-saq-a-ep-secure-your-e-commerce-payments/?utm_source=rss&utm_medium=rss&utm_campaign=pci-dss-saq-a-ep-secure-your-e-commerce-payments\"\n },\n \"一个被知识诅咒的人\": {\n \"【Python】深入解析Python的上下文管理器与资源管理：实现自定义的with语句\": \"https://blog.csdn.net/nokiaguy/article/details/146227757\",\n \"【Python运维】用Python编写云服务监控工具：实时监测和报警\": \"https://blog.csdn.net/nokiaguy/article/details/146227740\"\n },\n \"gynvael.coldwind//vx.log (en)\": {\n \"No, CTRL+D in Linux terminal doesn't send EOF signal\": \"https://gynvael.coldwind.pl/?id=801\"\n },\n \"Orange Cyberdefense\": {\n \"Capchan – Solving CAPTCHA with Image Classification\": \"https://sensepost.com/blog/2025/capchan-solving-captcha-with-image-classification/\"\n },\n \"gynvael.coldwind//vx.log (pl)\": {\n \"Wstęp do programowania i Pythona - zapisy nadal otwarte\": \"https://gynvael.coldwind.pl/?id=802\"\n },\n \"Insinuator.net\": {\n \"CVE-2025-20908: Use of insufficiently random values in Samsung’s Auracast implementation\": \"https://insinuator.net/2025/03/cve-2025-20908-use-of-insufficiently-random-values-in-samsungs-auracast-implementation/\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"WordPress Th Shop Mania Theme 1.4.9 Missing Authorization\": \"https://cxsecurity.com/issue/WLB-2025030018\",\n \"WordPress NextMove Lite 2.17.0 Missing Authorization\": \"https://cxsecurity.com/issue/WLB-2025030017\",\n \"Agile Solutio - Blind Sql Injection Vulnerability\": \"https://cxsecurity.com/issue/WLB-2025030016\",\n \"TENANT LIMITED-1.0-Multiple-SQLi + SQLi Bypass Authentication\": \"https://cxsecurity.com/issue/WLB-2025030015\",\n \"VeeVPN 1.6.1 - 'VeePNService' Unquoted Service Path\": \"https://cxsecurity.com/issue/WLB-2025030014\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"Ultimate List of Free Resources for Bug Bounty Hunters\": \"https://infosecwriteups.com/ultimate-list-of-free-resources-for-bug-bounty-hunters-bfba8deb5a36?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Hacking Swagger UI - 101\": \"https://infosecwriteups.com/hacking-swagger-ui-101-ccbce66ba028?source=rss----7b722bfd1b8d--bug_bounty\",\n \"How I Earned $500 for Getting Trapped in a Private Facebook Event\": \"https://infosecwriteups.com/how-i-earned-500-for-getting-trapped-in-a-private-facebook-event-d4b7f3fdaacd?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Twitter @bytehx\": {\n \"Re @AatankBadb16659 I don't really have secret sauce for this program. I just try to understand all application features and stick for like months. Th...\": \"https://x.com/bytehx343/status/1900225824869277908\"\n },\n \"Securelist\": {\n \"Head Mare and Twelve join forces to attack Russian entities\": \"https://securelist.com/head-mare-twelve-collaboration/115887/\"\n },\n \"Malwarebytes\": {\n \"Don’t let your kids on Roblox if you’re not comfortable, says Roblox CEO\": \"https://www.malwarebytes.com/blog/news/2025/03/dont-let-your-kids-on-roblox-if-youre-worried-says-roblox-ceo\"\n },\n \"Reverse Engineering\": {\n \"Recursion kills: The story behind CVE-2024-8176 / Expat 2.7.0 released, includes security fixes\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jaozjf/recursion_kills_the_story_behind_cve20248176/\",\n \"REVERSING SAMSUNG'S H-ARX HYPERVISOR FRAMEWORK: Part 1\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jap1p6/reversing_samsungs_harx_hypervisor_framework_part/\",\n \"Brushing Up on Hardware Hacking Part 2 - SPI, UART, Pulseview, and Flashrom\": \"https://www.reddit.com/r/ReverseEngineering/comments/1ja9b2e/brushing_up_on_hardware_hacking_part_2_spi_uart/\",\n \"Unraveling Time: A Deep Dive into TTD Instruction Emulation Bugs\": \"https://www.reddit.com/r/ReverseEngineering/comments/1jal0zh/unraveling_time_a_deep_dive_into_ttd_instruction/\"\n },\n \"PortSwigger Blog\": {\n \"Burp Everywhere, All Around the World: Bringing AppSec Enthusiasts Together in 2025\": \"https://portswigger.net/blog/burp-everywhere-all-around-the-world-bringing-appsec-enthusiasts-together-in-2025\"\n },\n \"Intigriti\": {\n \"Access control vulnerability in the retail industry. Cross-Site Scripting (XSS) use case\": \"https://www.intigriti.com/blog/business-insights/access-control-vulnerability-in-the-retail-industry-cross-site-scripting-xss-use\"\n },\n \"Microsoft Security Response Center\": {\n \"Jailbreaking is (mostly) simpler than you think\": \"https://msrc.microsoft.com/blog/2025/03/jailbreaking-is-mostly-simpler-than-you-think/\"\n },\n \"Checkmarx\": {\n \"Secrets detection: A definition\": \"https://checkmarx.com/blog/secrets-detection-a-definition/\"\n },\n \"rtl-sdr.com\": {\n \"Saveitforparts: Snooping on the SatGus Selfie Satellite\": \"https://www.rtl-sdr.com/saveitforparts-snooping-on-the-satgus-selfie-satellite/\",\n \"Khanfar Phosphor: Real-time GPU Accelerated Spectrum Visualization for SDRs\": \"https://www.rtl-sdr.com/khanfar-phosphor-real-time-gpu-accelerated-spectrum-visualization-for-sdrs/\"\n },\n \"安全牛\": {\n \"MFA告急！黑客利用高级技术绕过保护；WebKit零日漏洞被利用开展“极其复杂”定向攻击，苹果紧急修复 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135481&idx=1&sn=d3265ca05fb3478831f69020f9a2c3f0&chksm=bd15ad2a8a62243c41425e7c068635da1e7bf2076baa3e4fa9ff044c5e52aac1c893eca8ef00&scene=58&subscene=0#rd\",\n \"网络安全支出过度缓解术与预算编制要诀\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135481&idx=2&sn=ef4fe534d252a23b81c0ae894715f830&chksm=bd15ad2a8a62243c25ea00a1a047126ea495c85420400ef5f1bd46ad3651162be5de6b7815ed&scene=58&subscene=0#rd\"\n },\n \"FreeBuf网络安全行业门户\": {\n \"人工智能聊天机器人DeepSeek R1可被操纵用于创建恶意软件\": \"https://www.freebuf.com/articles/network/424572.html\",\n \"大模型越狱（通常）比你想象的容易——一种基于伪造对话历史的攻击算法\": \"https://www.freebuf.com/vuls/424360.html\",\n \"CISA警告：苹果WebKit越界写入漏洞已被野外利用\": \"https://www.freebuf.com/vuls/424562.html\",\n \"微信小程序测试技巧总结\": \"https://www.freebuf.com/articles/web/424498.html\",\n \"全美29州逾8.6万名医护人员信息因AWS S3存储桶配置错误遭泄露\": \"https://www.freebuf.com/articles/database/424561.html\",\n \"黑客滥用微软Copilot发动高仿钓鱼攻击\": \"https://www.freebuf.com/news/424552.html\",\n \"FreeBuf早报 | 特朗普提名Sean Plankey掌权CISA；勒索病毒袭美逾300关键机构\": \"https://www.freebuf.com/news/424478.html\",\n \"新手友好，spring内存马学习篇二\": \"https://www.freebuf.com/articles/web/424441.html\"\n },\n \"绿盟科技技术博客\": {\n \"微软3月安全更新多个产品高危漏洞通告\": \"https://blog.nsfocus.net/22-2/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"Google 称 Gemma 3 使用一张 H100 GPU 就能获得与 DeepSeek R1 相当的性能\": \"https://www.solidot.org/story?sid=80783\",\n \"D-Wave 称其量子退火处理器相比超算具有“量子优越性”\": \"https://www.solidot.org/story?sid=80782\",\n \"雄章鱼给雌性注射镇静剂以防止被吃掉\": \"https://www.solidot.org/story?sid=80781\",\n \"棕矮星的质量极限\": \"https://www.solidot.org/story?sid=80780\",\n \"沙特投资基金以 36 亿美元收购 Pokemon Go\": \"https://www.solidot.org/story?sid=80779\",\n \"英特尔任命陈立武为新 CEO\": \"https://www.solidot.org/story?sid=80778\",\n \"全球智能手表销量首次下滑\": \"https://www.solidot.org/story?sid=80777\",\n \"iRobot 警告它可能在 12 个月内倒闭\": \"https://www.solidot.org/story?sid=80776\"\n },\n \"思想花火\": {\n \"招聘｜小米招聘安全合规工程师\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc0MDU1MQ==&mid=2452314013&idx=1&sn=35c28fa8cda208efb50a9a5ce749f163&chksm=b17e52358609db23f47999ffdd4481091ec6c77515aa584fe8ef0b77d8710fe562de30e84fa6&scene=58&subscene=0#rd\"\n },\n \"安全分析与研究\": {\n \"银狐注入型最新样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491041&idx=1&sn=750f19ee7ea154bbe71115d558006a24&chksm=902fb2c9a7583bdfaa46a35cbc1ac1c085c4a513ae15689e5f03bb4f9360e22262f942bb7fff&scene=58&subscene=0#rd\"\n },\n \"Black Hills Information Security\": {\n \"Introducing Orbit\": \"https://www.blackhillsinfosec.com/introducing-orbit/\"\n },\n \"威努特安全网络\": {\n \"提升日志系统范化效率的实践探索\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131602&idx=1&sn=62d2a3e1d65bd2c140ee7b106a72e2d1&chksm=80e71462b7909d74327a90249a2655e2174625f64948ac3a666891481e4e5881271adf92b0a3&scene=58&subscene=0#rd\"\n },\n \"看雪学苑\": {\n \"UEFI Bootkit源码分析\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590760&idx=1&sn=8d19205dd2b2bb12a70df56cca2adcd6&chksm=b18c2ea286fba7b445757b2f58a04e7034651c2ed2a04c18940194d0eb3a73e84178c6ede60f&scene=58&subscene=0#rd\",\n \"Zoom客户端惊现高危漏洞，数百万用户数据或泄露！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590760&idx=2&sn=0a7aeb5d4d57669042d37bf081806d7e&chksm=b18c2ea286fba7b419756a4c459e19762ac07b24d2bd8c3c96a4fe5ffa7a30e4286874880f20&scene=58&subscene=0#rd\",\n \"GDA Pro 企业版：亚洲首款全交互式 Android 反编译器\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590760&idx=3&sn=6360a903ac74b67f538ac36fe43a4ef2&chksm=b18c2ea286fba7b405b4e5dc8f3c0b51ce2e41282a086020b0fee7e93cd26d957b22767837d9&scene=58&subscene=0#rd\",\n \"更新第三章：固件仿真 | 系统0day安全-IOT设备漏洞挖掘（第6期）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590760&idx=4&sn=2cad9940a8a1545f94ff39f7369c4adc&chksm=b18c2ea286fba7b4e3d25f2c14ff96f82d35366d6cb021f77ebd28bf16e740ca6b8a14ff8a5b&scene=58&subscene=0#rd\"\n },\n \"奇安信 CERT\": {\n \"2025 Q1季度你需要关注的高危漏洞合集！\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503162&idx=1&sn=f38c90f903249045d488afc798248811&chksm=fe79e9a2c90e60b4526737d910d2b2bb7a9346ed5a7e385cc6274e5f643507c9f4c615965d35&scene=58&subscene=0#rd\",\n \"ruby-saml 身份认证绕过漏洞(CVE-2025-25291、CVE-2025-25292)安全风险通告\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503162&idx=2&sn=8cdebf57c6043395f1047ecde66a85e1&chksm=fe79e9a2c90e60b4e4da14481800d5a05b9334556a4f6f8f62eeb04669e28aecd293a6207286&scene=58&subscene=0#rd\",\n \"奇安信集团2025年03月补丁库更新通告-第一次更新\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503162&idx=3&sn=f6aec9b2e0fc4b2f7683494717397853&chksm=fe79e9a2c90e60b42bf36e0c9f5e1d25e20c85185101c7669b9daa537252b91184b4bc7bf03b&scene=58&subscene=0#rd\"\n },\n \"安全内参\": {\n \"疯狂减人减机构减预算，美国国家网络安全迎来“激变时刻”\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513950&idx=1&sn=3bcd94b91605812c64a86232e8285b80&chksm=ebfaf07edc8d79680311dae10ef75c51b344f1118aebe35abe80b4343beca0687c14c1133cbd&scene=58&subscene=0#rd\",\n \"美国陆军正式发布《陆军统一网络计划2.0》\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513950&idx=2&sn=6460b7d9d24763be20ef8ad616a3fd24&chksm=ebfaf07edc8d796838f2a25056d0e71bd326b780a18aae428e8155935e7b9048b2b46d8f6176&scene=58&subscene=0#rd\"\n },\n \"信安之路\": {\n \"我的首个 AI 智能体，一键关联漏洞 POC ！\": \"https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499815&idx=1&sn=dce5a2af1a71a8f7765ee5a87161a141&chksm=ec1df00fdb6a7919f721d0c66c27ddfb05e61b83d6542df7e2a185a0c3ecd417a34dd87c791b&scene=58&subscene=0#rd\"\n },\n \"代码卫士\": {\n \"英国政府呼吁更强有力的开源供应链安全实践\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522472&idx=1&sn=18c494d9e5b41721aa975e10d533fe49&chksm=ea94a9c2dde320d46789057a9f66a3fb03bfdedde682811ba7450418ef976cd39940608420b4&scene=58&subscene=0#rd\",\n \"Moxa 修复PT 交换机中严重的认证绕过漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522472&idx=2&sn=634e39e2522108a7d73cce0437f95b34&chksm=ea94a9c2dde320d4cca1664a0acf35b1db71939405a13d0836aced66c411095f4704a7aa3dc9&scene=58&subscene=0#rd\"\n },\n \"吾爱破解论坛\": {\n \"【开放注册公告】吾爱破解论坛2025年3月13日十七周年开放注册即将开始 12：00 -- 14：00 和 20：00 -- 22：00。\\n\\n赶不上的定个晚间闹钟吧，新通知会在B站继续发布。\\n\\n推荐使用电脑注册，可以使用论坛的诊断修复工具修复一次，方便提前解决注册中可能会遇到的问题，如果修复后还是不行建议尽快更换设备尝试，不要耽误时间。\\n\\n注册页面会强制10分钟来阅读注册须知，须知中包括了你注册现在和未来可能会遇到的问题，请仔细阅读，否则可能无法注册成功或注册后被清理。\\n\\n另：\\n开放注册期间暂停签到任务、下载论坛附件功能、默认搜索功能、QQ登录绑定等功能（忘记账号密码可以邮箱重置后登陆） 请各位知晓。主要把下载附件的带宽和服务器负载节省下来供用户注册访问使用，等注册结束就恢复了（默认搜索功能根据论坛负载压力预计一周后恢复），请大家谅解。\\n\\n新注册的会员需要注册一天后才可以发帖，以缓解注册压力。\": \"https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141923&idx=1&sn=a047ef1032faae54a82b4e6a777b60d6&chksm=bd50a7778a272e61c65e07b7b7fa2b65417abefab6c3fd390164dd856b8b0827a7e817b0128b&scene=58&subscene=0#rd\"\n },\n \"知道创宇404实验室\": {\n \"原创 Paper | 机器学习的逻辑回归模型\": \"https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990775&idx=1&sn=28022e06de8058fe37ec5f698f37f145&chksm=8079aa85b70e239360f904e0e308a1e18d410f4a62e11d77c880a2366aa75b4854196824b2c3&scene=58&subscene=0#rd\"\n },\n \"慢雾科技\": {\n \"香港 Web3 嘉年华 | 慢雾 Hacking Time 邀您共探安全与合规前沿\": \"https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501417&idx=1&sn=58a3168409ac471097efef0c5053fbba&chksm=fddeb8eecaa931f8c0cdbf7c6c5cd022b23def23eae97717fe0e7644abca3c6392fd629e8555&scene=58&subscene=0#rd\"\n },\n \"VAADATA – Ethical Hacking Services\": {\n \"What is HTTP Request Smuggling? Exploitations and Security Best Practices\": \"https://www.vaadata.com/blog/what-is-http-request-smuggling-exploitations-and-security-best-practices/\"\n },\n \"数世咨询\": {\n \"SOC 3.0 - AI 赋能的 SOC 演变新趋势\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538016&idx=1&sn=3d53f91139d92fd97008f5ba4038d85f&chksm=c14427ddf633aecbb9bf4ba69c0e4cd4d8aa043cddee5b0cba38990d7df9e1073b4c4101ac5c&scene=58&subscene=0#rd\"\n },\n \"青藤云安全\": {\n \"总说安全防御难搞？你连自家服务器数量都说不清！\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850040&idx=1&sn=46d6a0a1e45dcb828f6910386a535b28&chksm=80dba15db7ac284bf4a7d9410d35a5c51326886ea133757de57af220fa0ad3504bcc0dae81af&scene=58&subscene=0#rd\"\n },\n \"网络空间安全科学学报\": {\n \"综述合辑 | 《网络空间安全科学学报》综述论文（下）\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505245&idx=1&sn=62e53c33c51b44b60df135c464195d1f&chksm=e9bfc1e3dec848f586f510e4342d7f0d56effb3beba3ba8ec30e170a54d1dcc2e5c158f0ae82&scene=58&subscene=0#rd\",\n \"长安常安：第6届网络空间安全前沿论坛正式开启\": \"https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247505245&idx=2&sn=14e60a92800dd80b4a2a7d104a75db67&chksm=e9bfc1e3dec848f5dd94c4a828a87eef37b136eb9ecd872e490ccb60c53eab1d6332626681f3&scene=58&subscene=0#rd\"\n },\n \"安全圈\": {\n \"【安全圈】PHP XXE 注入漏洞让攻击者读取配置文件和私钥\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068467&idx=2&sn=8209e2048ee474d6b91f16029aa9c134&chksm=f36e7633c419ff25d6e98a532a0be210b5f282f06c12a405f3e5a178eeaa0ce3f664e58b2fab&scene=58&subscene=0#rd\",\n \"【安全圈】施乐打印机漏洞使攻击者能够从 LDAP 和 SMB 中获取身份验证数据\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068467&idx=3&sn=a464bcdd8889a7e0e65921296df9fdd8&chksm=f36e7633c419ff25cb190652f57379ceebf2022a9c9068abce3cc38be20fe7f2fbd61fdf65b1&scene=58&subscene=0#rd\",\n \"【安全圈】谷歌警告 Chromecast 用户不要恢复出厂设置\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068467&idx=4&sn=7af960ec5a3791a46142d0250eee6895&chksm=f36e7633c419ff252af8da366999d9ffeb1d55424e357028fc88e29d9745f867fac674cebd45&scene=58&subscene=0#rd\"\n },\n \"中国信息安全\": {\n \"再次集结！第二届“长城杯”铁人三项赛半决赛将在五大赛区开赛\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238220&idx=1&sn=d40517ba5ec65b352f0f170f8887b215&chksm=8b580e75bc2f8763c41254e047ca824aa0a9df6c2627e1fa6a5f42a633a6608c660cabfa965d&scene=58&subscene=0#rd\",\n \"《政府工作报告》（全文）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238220&idx=2&sn=6349db14e0db034b70abf56bd162dc59&chksm=8b580e75bc2f876393ffabb41c5b8c3e4622f8e029c9fb504109426f8570d9233304c539be58&scene=58&subscene=0#rd\",\n \"CNNVD | 关于微软多个安全漏洞的通报\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238220&idx=3&sn=ac6f6d9892b05eabfa11b6103d383753&chksm=8b580e75bc2f8763635869430b4598e1759d531dd6424e8018f4ce4e385d1ab2b7a98c0b7267&scene=58&subscene=0#rd\",\n \"评论 | 维护网络安全与秩序 营造法治化营商环境\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238220&idx=4&sn=49455bcb55d370400fc55c7a55bc3a86&chksm=8b580e75bc2f87631a5b8ac40244b255a9c796eaa2f37092ab722103d15f74fb625c937bf42b&scene=58&subscene=0#rd\",\n \"观点 | 论新型网络犯罪的规制基础\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238220&idx=5&sn=16d56282a67cb519538e5a37226bb4e2&chksm=8b580e75bc2f8763c18413020ff86c4b8e1a0ad02cfd7a294f430c96cdd16e3c21ffc65c94d2&scene=58&subscene=0#rd\",\n \"法治 | 司法利剑斩断网诈“黑手”\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238220&idx=6&sn=e7f62df4d1b895c5d61596e81540b78a&chksm=8b580e75bc2f8763eabb578097d83d3295ab4f389cdc4448de923ee35f2fd86700d816d09456&scene=58&subscene=0#rd\"\n },\n \"微步在线\": {\n \"麻了，2天要装5w个终端！\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183362&idx=1&sn=198ec215d19264089a91a28ba276140d&chksm=f4486d7ec33fe468069a4953756536515e5b885f4e4651a5282f0e903bb15aaf9249221a54bd&scene=58&subscene=0#rd\"\n },\n \"安全学术圈\": {\n \"东南大学 | 通过异常电路检测揭露tor中的恶意同伙\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491786&idx=1&sn=2ec0c7aa9c0e25bcd9fba6b3e761e8be&chksm=fe2d1f41c95a9657a3f5d1fa2210147c75a0d56338e06a8bfcd77863ca520239fa8a2784c0d4&scene=58&subscene=0#rd\"\n },\n \"默安科技\": {\n \"大模型重塑开发安全：默安科技雳鉴产品的智能化创新实践\": \"https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247500463&idx=1&sn=3246f9acb44845b83c93612be1ccdc6d&chksm=e93b358dde4cbc9b47304150543ecf1badce10735d688d6183fc88f3e758e6c8d9cd8245b14e&scene=58&subscene=0#rd\"\n },\n \"dotNet安全矩阵\": {\n \".NET 安全研究新成果：一种绕过 SQL 全局防注入拦截的方法\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499116&idx=1&sn=6976da3cc2c7f725d816ddc949346ec2&chksm=fa595381cd2eda97966e0a05bbe6ec0500b13e111deda84c6ccbee565a11b32b2954149200a5&scene=58&subscene=0#rd\",\n \".NET 内网攻防实战电子报刊\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499116&idx=2&sn=5576571e0fe2c30d6bad51f014cc6a57&chksm=fa595381cd2eda97d610f96e9e98ff6da6aa8685214eab62efadde6c571b803bbc4954768ff0&scene=58&subscene=0#rd\",\n \"通过 Sharp4SessionExec 实现在不同用户会话中执行命令\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499116&idx=3&sn=2d1283a6a06b84f8816eeb6f99277b9e&chksm=fa595381cd2eda97168cd7e690d532ae337b22049afe5a74ff3de2e9a981be6578934ca966f4&scene=58&subscene=0#rd\"\n },\n \"信息安全国家工程研究中心\": {\n \"工程中心参编《关键信息基础设施安全服务能力要求、供应链安全要求、测评估能力要求》团体标准正式发布\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498994&idx=1&sn=61453f2d64c2e43b2e0a3b8d323e2370&chksm=feb67de1c9c1f4f7e23cf417568c7fb112d0fe8c276a494658774bb4f4cfa8fa25adeb70f150&scene=58&subscene=0#rd\"\n },\n \"补天平台\": {\n \"奖金翻倍 | 补天通用开源奖励计划启动！\": \"https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247507556&idx=1&sn=c4e6e84cc52f7068082242c441a1ab87&chksm=eaf99628dd8e1f3e611874080031366ba8dae4180a373b91643dd84ea83933d681c67989b885&scene=58&subscene=0#rd\"\n },\n \"极客公园\": {\n \"小米成为 Ultra，零跑要当「小米」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075662&idx=1&sn=6adf679974f124f5efef7d63e668efa4&chksm=7e57c57849204c6e8c814cb565bc60b5b10d50a2ee78b1f0d8830363b354e4ff0934a2b51916&scene=58&subscene=0#rd\",\n \"​实测新版通义 APP：更好用的个人 AI 助理，需要什么？\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075638&idx=1&sn=f2efd3e4bbaae772cbb3abcd1c162d0c&chksm=7e57c50049204c16e4f244ca2b6d068f9cc5600cf057a631dd81ac0a1e77150da09191f046c5&scene=58&subscene=0#rd\",\n \"谷歌曝两款「机器人 AI 模型」；英特尔任命新 CEO，股价大涨11%；253 亿！《宝可梦 Go》出售 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653075593&idx=1&sn=622ac26fc488909947497e3d53d7b5d9&chksm=7e57c53f49204c29d7d518ff2a8ca4bedb6e937db83bec0b5d6b9042302117b78ec1687ca80b&scene=58&subscene=0#rd\"\n },\n \"情报分析师\": {\n \"解密FBI：为何美国情报机构在\\\"五眼联盟\\\"中出局？\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560259&idx=1&sn=21c6bb1c550b0d3227695f5740c36621&chksm=87117948b066f05e579e20978a60eb00574f32efcda53d80f6496cc22d11ff4250ce35366859&scene=58&subscene=0#rd\",\n \"美国对乌克兰情报共享暂停与恢复事件对现代情报战的范式重构\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650560259&idx=2&sn=a2b29558f17fbd2bc7f78f239b81b414&chksm=87117948b066f05e86c24d68b95f7fa96777d4d71f155d8b704cbaba5725329e7d6d0864a65c&scene=58&subscene=0#rd\"\n },\n \"火绒安全\": {\n \"Rust后门样本加载与传播方式演变过程分析\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524579&idx=1&sn=4fd63ec101952bc5ae6933d368e97645&chksm=eb70bedcdc0737ca180d0776d6fe82ce5d91d44f3d2e6be5cd8af434140568b75d40c9c55d7d&scene=58&subscene=0#rd\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524579&idx=2&sn=e666b271eb630b7c00f39173fb8391b7&chksm=eb70bedcdc0737ca6062f4c47ce74ab56a38331c39f4decad647b372037530ec0662b4fa3eaa&scene=58&subscene=0#rd\"\n },\n \"百度安全应急响应中心\": {\n \"文心快码全新升级！Comate Zulu开放公测，超多好礼派送中\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODc0MTIwMw==&mid=2652542317&idx=1&sn=054952a479b425b0bdf650752772632c&chksm=8bcbb151bcbc3847a8334139489ccaf050d3911b1ad477aa76449932cf2c78895eb40e0094a0&scene=58&subscene=0#rd\"\n },\n \"嘶吼专业版\": {\n \"来个Offer||云智研发公司科恩工作室，等你加入！\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581490&idx=1&sn=570a18afe5ef92fd6e29da6570698755&chksm=e9146f08de63e61ebd74b5b0bc0830e514f81b9f80490450691de29a23f0665baf012e0446bb&scene=58&subscene=0#rd\",\n \"隐匿在未知角落的 Anubis 恶意软件 为黑客远程命令大开方便之门\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581490&idx=2&sn=1486ec13c579208f637cdd487c90f63c&chksm=e9146f08de63e61e4e35a4537d264d6f97117f08faf52c853b01094104ed2b86bba62e3b299f&scene=58&subscene=0#rd\"\n },\n \"京东安全应急响应中心\": {\n \"「京麒沙龙第16期」移动安全技术专场，线下约起~\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727844256&idx=1&sn=8baaa83a6686bdc326c5fad97e43ec6c&chksm=80504e28b727c73e87d12f1fd66f796de89dd4e0be4e0b10e0f2ece4800d07e61e14f871249f&scene=58&subscene=0#rd\"\n },\n \"复旦白泽战队\": {\n \"人物访谈｜邬梦莹：自律计划责任感，伴我破浪向远方\": \"https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247493373&idx=1&sn=400361e767e8ff8c404872082b99e136&chksm=fde86283ca9feb95abcc005bdc191fc7bb396c7e6ea25357382c6548bf67bc009ab0cd4c7d10&scene=58&subscene=0#rd\"\n },\n \"威胁猎人Threat Hunter\": {\n \"威胁猎人2025年2月安全情报和产品升级汇总\": \"https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247499107&idx=1&sn=df7f55710954cee9a33d89fde2ad172d&chksm=eb12db58dc65524e345b977ae27c1b2098967ac163f7348c8c65ca9e22960c54c0a8cc637e0a&scene=58&subscene=0#rd\"\n },\n \"字节跳动技术团队\": {\n \"Trae x 稀土掘金：与 AI 结伴，编程不孤单，推荐&学习有好礼！\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247513705&idx=1&sn=72480171880c2a4d21fb4b15d05c861b&chksm=e9d37d8bdea4f49d783f9a85d8e93c783a3552ccdf26615a7f23de68032ffafa48f8e50780d0&scene=58&subscene=0#rd\"\n },\n \"Yak Project\": {\n \"SyntaxFlow实战CVE漏洞？那很好了\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247527877&idx=1&sn=e2f3cafb8ca5483d93b9636780003d5d&chksm=c2d11161f5a6987783bd107c9c0bca13161e6efde1b5ff480a723a8d0cb559f35d696689751b&scene=58&subscene=0#rd\"\n },\n \"360数字安全\": {\n \"360预警：银狐木马又双叒变异，PDF文件成传播“帮凶”\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579882&idx=1&sn=a75a7b4092402443d76ca2d3eb3a8104&chksm=9f8d28e2a8faa1f4488ad6037308fca9a9dd672447f9635e2f593c04f2d8505caff1415e9825&scene=58&subscene=0#rd\"\n },\n \"Microsoft Security Blog\": {\n \"How MSRC coordinates vulnerability research and disclosure while building community\": \"https://www.microsoft.com/en-us/security/blog/2025/03/13/how-msrc-coordinates-vulnerability-research-and-disclosure-while-building-community/\",\n \"Phishing campaign impersonates Booking .com, delivers a suite of credential-stealing malware\": \"https://www.microsoft.com/en-us/security/blog/2025/03/13/phishing-campaign-impersonates-booking-com-delivers-a-suite-of-credential-stealing-malware/\"\n },\n \"bellingcat\": {\n \"Pitch Wildlife and Environmental investigations to Bellingcat\": \"https://www.bellingcat.com/uncategorized/2025/03/13/pitch-wildlife-and-environmental-investigations-to-bellingcat/\"\n },\n \"ICT Security Magazine\": {\n \"Machine Unlearning: Metodologie di Mitigazione\": \"https://www.ictsecuritymagazine.com/articoli/machine-unlearning/\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Il gruppo Lazarus colpisce ancora: nuova ondata di pacchetti npm dannosi\": \"https://www.cybersecurity360.it/news/il-gruppo-lazarus-colpisce-ancora-nuova-ondata-di-pacchetti-npm-dannosi/\",\n \"Netcraft Launches New Real-time Threat API to Improve and Accelerate Collaboration with Infrastructure Providers\": \"https://www.netcraft.com/news/netcraft-launches-new-real-time-threat-api-to-improve-and-accelerate-collaboration-with-infrastructure-providers/\",\n \"Microsoft apologizes for removing VSCode extensions used by millions\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-apologizes-for-removing-vscode-extensions-used-by-millions/\",\n \"Windows Notepad to get AI text summarization in Windows 11\": \"https://www.bleepingcomputer.com/news/microsoft/windows-notepad-to-get-ai-text-summarization-in-windows-11/\",\n \"New SuperBlack ransomware exploits Fortinet auth bypass flaws\": \"https://www.bleepingcomputer.com/news/security/new-superblack-ransomware-exploits-fortinet-auth-bypass-flaws/\",\n \"European lawmaker says EU is committed to continuing data transfers to US\": \"https://therecord.media/lawmaker-data-transfer-us-mcgrath\",\n \"Miniaudio and Adobe Acrobat Reader vulnerabilities\": \"https://blog.talosintelligence.com/miniaudio-and-adobe-acrobat-reader-vulnerabilities/\",\n \"Patch it up: Old vulnerabilities are everyone’s problems\": \"https://blog.talosintelligence.com/patch-it-up-old-vulnerabilities-are-everyones-problems/\",\n \"Microsoft says button to restore classic Outlook is broken\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-says-button-to-restore-classic-outlook-is-broken/\",\n \"Apple’s Lockdown Mode is good for security — but its notifications are baffling\": \"https://techcrunch.com/2025/03/13/apples-lockdown-mode-is-good-for-security-but-its-notifications-are-baffling/\",\n \"Cloud, dipendenza UE dalle infastrutture USA e subalternità tecnologica: quali impatti\": \"https://www.cybersecurity360.it/legal/privacy-dati-personali/cloud-dipendenza-ue-dalle-infastrutture-usa-e-subalternita-tecnologica-quali-impatti/\",\n \"La Corte d’Appello di Parigi nega al legale il recupero del suo account da Google: quale lezione\": \"https://www.cybersecurity360.it/news/la-corte-dappello-di-parigi-nega-al-legale-il-recupero-del-suo-account-da-google-cosa-impariamo/\",\n \"Booking.com phishing campaign targeting hospitality sector with malware\": \"https://therecord.media/booking-phishing-hotels-malware-campaign\",\n \"Juniper patches bug that let Chinese cyberspies backdoor routers\": \"https://www.bleepingcomputer.com/news/security/juniper-patches-bug-that-let-chinese-cyberspies-backdoor-routers-since-mid-2024/\",\n \"Quantum computing: come il chip Majorana 1 di Microsoft ridefinirà la cyber security\": \"https://www.cybersecurity360.it/cultura-cyber/quantum-computing-come-il-chip-majorana-1-di-microsoft-ridefinira-la-cyber-security/\",\n \"GitLab patches critical authentication bypass vulnerabilities\": \"https://www.bleepingcomputer.com/news/security/gitlab-patches-critical-authentication-bypass-vulnerabilities/\",\n \"Il ransomware Medusa ha colpito oltre 300 infrastrutture critiche\": \"https://www.securityinfo.it/2025/03/13/il-ransomware-medusa-ha-colpito-oltre-300-infrastrutture-critiche/\",\n \"Calls grow for UK to move secret Apple encryption court hearing to public session\": \"https://therecord.media/calls-grow-uk-secret-apple-court-encryption-public\",\n \"ClickFix attack delivers infostealers, RATs in fake Booking.com emails\": \"https://www.bleepingcomputer.com/news/security/clickfix-attack-delivers-infostealers-rats-in-fake-bookingcom-emails/\",\n \"Ukraine seeks to bolster offensive cyber capabilities amid rising threats from Russia\": \"https://therecord.media/ukraine-russia-cyber-offensive-bolster\",\n \"Red Report 2025: Unmasking a 3X Spike in Credential Theft and Debunking the AI Hype\": \"https://www.bleepingcomputer.com/news/security/red-report-2025-unmasking-a-3x-spike-in-credential-theft-and-debunking-the-ai-hype/\",\n \"How to Write an Agent\": \"https://www.evilsocket.net/2025/03/13/How-To-Write-An-Agent/\",\n \"Fake CAPTCHA but make it Email\": \"https://catchingphish.com/posts/f/fake-captcha-but-make-it-email\",\n \"At Ukraine’s major cyber conference, Europe takes center stage over US\": \"https://therecord.media/kyiv-cyber-conference-europe-center-stage-over-us\",\n \"Apple Releases Security Updates and Rapid Security Responses for March 2025\": \"https://cyble.com/blog/apple-releases-security-updates-and-rapid-security-responses-for-march-2025/\",\n \"New Pre-Installed Dev Tools for Deep Sandbox Malware Analysis\": \"https://any.run/cybersecurity-blog/pre-installed-dev-tools/\",\n \"Behavioral Analytics & Scams\": \"https://www.threatfabric.com/blogs/behavioral-analytics-scams\",\n \"Head Mare and Twelve join forces to attack Russian entities\": \"https://securelist.com/head-mare-twelve-collaboration/115887/\",\n \"Abusing with style: Leveraging cascading style sheets for evasion and tracking\": \"https://blog.talosintelligence.com/css-abuse-for-evasion-and-tracking/\",\n \"ENISA’s NIS360 Report Provides a Strategic View of Cybersecurity Maturity Across Critical Sectors\": \"https://cyble.com/blog/enisa-nis2-cybersecurity-maturity-report/\",\n \"Pianificare il disaster recovery: strategie e soluzioni\": \"https://www.cybersecurity360.it/soluzioni-aziendali/disaster-recovery-strategie-soluzioni/\",\n \"ClickFix: The Social Engineering Technique Hackers Use to Manipulate Victims\": \"https://www.group-ib.com/blog/clickfix-the-social-engineering-technique-hackers-use-to-manipulate-victims/\",\n \"Bypassing Web Filters Part 2: Host Header Spoofing\": \"https://blog.compass-security.com/2025/03/bypassing-web-filters-part-2-host-header-spoofing/\"\n },\n \"Hacking Exposed Computer Forensics Blog\": {\n \"Daily Blog #775: An Azure log entry to look for when a threat actor is in\": \"https://www.hecfblog.com/2025/03/daily-blog-775-azure-log-entry-to-look.html\"\n },\n \"Securityinfo.it\": {\n \"Il ransomware Medusa ha colpito oltre 300 infrastrutture critiche\": \"https://www.securityinfo.it/2025/03/13/il-ransomware-medusa-ha-colpito-oltre-300-infrastrutture-critiche/?utm_source=rss&utm_medium=rss&utm_campaign=il-ransomware-medusa-ha-colpito-oltre-300-infrastrutture-critiche\"\n },\n \"迪哥讲事\": {\n \"某付宝登录js分析\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497269&idx=1&sn=91b4db853c028312be50352cfbb7e8e1&chksm=e8a5fc56dfd27540b74d61952e62a3a9b6261998810d99b42c83e817e0c9c0e7bcaa8e7b9b4e&scene=58&subscene=0#rd\"\n },\n \"Schneier on Security\": {\n \"RIP Mark Klein\": \"https://www.schneier.com/blog/archives/2025/03/rip-mark-klein.html\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"ISC Stormcast For Thursday, March 13th, 2025 https://isc.sans.edu/podcastdetail/9362, (Thu, Mar 13th)\": \"https://isc.sans.edu/diary/rss/31766\",\n \"File Hashes Analysis with Power BI from Data Stored in DShield SIEM, (Wed, Mar 12th)\": \"https://isc.sans.edu/diary/rss/31764\"\n },\n \"FuzzWiki\": {\n \"Halo：通过可能不变量推断的反例引导定向模糊测试\": \"https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247487076&idx=1&sn=dea4ff6f68462138f311feb51584250d&chksm=fbd9a5d8ccae2cce578e8bb6607b6776a0bb64aa0430cce9e6f9c7b0077e4b287912c84aa616&scene=58&subscene=0#rd\"\n },\n \"RedTeam\": {\n \"零信任的现状与未来：从成熟度模型看安全架构的持续演进\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484361&idx=1&sn=285f46c2308985ad0c41bfd9bd21a099&chksm=c006cb39f771422f796db5d388eaa73fc1891bf8f7265fecefb45c67e9f7a51439a5b6867955&scene=58&subscene=0#rd\"\n },\n \"Include Security Research Blog\": {\n \"Memory Corruption in Delphi\": \"https://blog.includesecurity.com/2025/03/memory-corruption-in-delphi/\"\n },\n \"evilsocket\": {\n \"How to Write an Agent\": \"https://www.evilsocket.net/2025/03/13/How-To-Write-An-Agent/\"\n },\n \"The Hacker News\": {\n \"Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails\": \"https://thehackernews.com/2025/03/microsoft-warns-of-clickfix-phishing.html\",\n \"North Korea’s ScarCruft Deploys KoSpy Malware, Spying on Android Users via Fake Utility Apps\": \"https://thehackernews.com/2025/03/north-koreas-scarcruft-deploys-kospy.html\",\n \"GitHub Uncovers New ruby-saml Vulnerabilities Allowing Account Takeover Attacks\": \"https://thehackernews.com/2025/03/github-uncovers-new-ruby-saml.html\",\n \"Future-Proofing Business Continuity: BCDR Trends and Challenges for 2025\": \"https://thehackernews.com/2025/03/bcdr-2025-trends-and-challenges-for-msps-and-it-teams.html\",\n \"Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk\": \"https://thehackernews.com/2025/03/meta-warns-of-freetype-vulnerability.html\",\n \"WARNING: Expiring Root Certificate May Disable Firefox Add-Ons, Security Features, and DRM Playback\": \"https://thehackernews.com/2025/03/warning-expiring-root-certificate-may.html\"\n },\n \"Tor Project blog\": {\n \"Older Tor Browsers Breaking, Update Now!\": \"https://blog.torproject.org/old-tor-browsers-breakage/\",\n \"New Alpha Release: Tor Browser 14.5a4\": \"https://blog.torproject.org/new-alpha-release-tor-browser-145a4/\"\n },\n \"Graham Cluley\": {\n \"Chromecast chaos – 2nd gen devices go belly-up as Google struggles to fix certificate issue\": \"https://www.bitdefender.com/en-us/blog/hotforsecurity/chromecast-chaos-2nd-gen-devices-go-belly-up-as-google-struggles-to-fix-certificate-issue\",\n \"Medusa ransomware: FBI and CISA urge organisations to act now to mitigate threat\": \"https://www.tripwire.com/state-of-security/medusa-ransomware-fbi-and-cisa-urge-organizations-act-now-mitigate-threat\",\n \"Smashing Security podcast #408: A gag order backfires, and a snail mail ransom demand\": \"https://grahamcluley.com/smashing-security-podcast-408/\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"Flipper Blackhat Update\": \"https://www.reddit.com/r/blackhat/comments/1jab3m6/flipper_blackhat_update/\"\n },\n \"Information Security\": {\n \"How to Spot Steganography\": \"https://www.reddit.com/r/Information_Security/comments/1jaesbl/how_to_spot_steganography/\",\n \"Join Online Webinar: SCA or SAST - How They Complement Each Other for Stronger Security?\": \"https://www.reddit.com/r/Information_Security/comments/1ja9ce2/join_online_webinar_sca_or_sast_how_they/\"\n },\n \"Deeplinks\": {\n \"EFF to NSF: AI Action Plan Must Put People First\": \"https://www.eff.org/deeplinks/2025/03/eff-nsf-ai-action-plan-must-put-people-first\",\n \"EFF Thanks Fastly for Donated Tools to Help Keep Our Website Secure\": \"https://www.eff.org/deeplinks/2025/03/eff-thanks-fastly-donated-tools-help-keep-our-website-secure-0\",\n \"EFFecting Change: Is There Hope for Social Media?\": \"https://www.eff.org/deeplinks/2025/03/effecting-change-there-hope-social-media\",\n \"EFF Joins AllOut’s Campaign Calling for Meta to Stop Hate Speech Against LGBTQ+ Community\": \"https://www.eff.org/deeplinks/2025/03/eff-joins-allouts-campaign-calling-meta-stop-hate-speech-against-lgbtq-community\"\n },\n \"Computer Forensics\": {\n \"ZFS\": \"https://www.reddit.com/r/computerforensics/comments/1jad9ea/zfs/\",\n \"Axiom Google Chrome Affiliations\": \"https://www.reddit.com/r/computerforensics/comments/1jam9e3/axiom_google_chrome_affiliations/\",\n \"Finding when the original timestamp was change???\": \"https://www.reddit.com/r/computerforensics/comments/1jaaawk/finding_when_the_original_timestamp_was_change/\"\n },\n \"Security Affairs\": {\n \"GitLab addressed critical auth bypass flaws in CE and EE\": \"https://securityaffairs.com/175370/security/gitlab-addressed-critical-flaws-in-ce-and-ee.html\",\n \"North Korea-linked APT group ScarCruft spotted using new Android spyware KoSpy\": \"https://securityaffairs.com/175357/malware/scarcruft-used-a-new-android-spyware-dubbed-kospy.html\",\n \"Experts warn of a coordinated surge in the exploitation attempts of SSRF vulnerabilities\": \"https://securityaffairs.com/175344/hacking/coordinated-surge-exploitation-attempts-ssrf-vulnerabilities.html\",\n \"Meta warns of actively exploited flaw in FreeType library\": \"https://securityaffairs.com/175337/hacking/meta-warned-actively-exploited-cve-2025-27363.html\",\n \"Medusa ransomware hit over 300 critical infrastructure organizations until February 2025\": \"https://securityaffairs.com/175319/cyber-crime/medusa-ransomware-hit-over-300-critical-infrastructure-organizations-until-february-2025.html\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Cradle.sh Open Source Threat Intelligence Hub\": \"https://www.reddit.com/r/netsec/comments/1jad2e8/cradlesh_open_source_threat_intelligence_hub/\",\n \"Memory Corruption in Delphi\": \"https://www.reddit.com/r/netsec/comments/1janb9v/memory_corruption_in_delphi/\",\n \"Sign in as anyone: Bypassing SAML SSO authentication with parser differentials\": \"https://www.reddit.com/r/netsec/comments/1ja6lxm/sign_in_as_anyone_bypassing_saml_sso/\",\n \"Brushing Up on Hardware Hacking Part 2 - SPI, UART, Pulseview, and Flashrom\": \"https://www.reddit.com/r/netsec/comments/1jaex39/brushing_up_on_hardware_hacking_part_2_spi_uart/\",\n \"New all-in-one monitoring project with leaks, cve db, ransomware info, ddos target, and news\": \"https://www.reddit.com/r/netsec/comments/1ja6gyj/new_allinone_monitoring_project_with_leaks_cve_db/\"\n },\n \"Your Open Hacker Community\": {\n \"Spoof MAC address on MT7902\": \"https://www.reddit.com/r/HowToHack/comments/1jaqm05/spoof_mac_address_on_mt7902/\",\n \"I need help making a VPS...\": \"https://www.reddit.com/r/HowToHack/comments/1ja6v3n/i_need_help_making_a_vps/\",\n \"Any TID writable uhf rfid tags?\": \"https://www.reddit.com/r/HowToHack/comments/1jamvs4/any_tid_writable_uhf_rfid_tags/\",\n \"Email spoofing\": \"https://www.reddit.com/r/HowToHack/comments/1jam2ui/email_spoofing/\",\n \"TikTok Account Hacked\": \"https://www.reddit.com/r/HowToHack/comments/1jankbq/tiktok_account_hacked/\",\n \"iPad stolen and location turned off, also have credit card information from someone who may have changed the security code\": \"https://www.reddit.com/r/HowToHack/comments/1jahb6g/ipad_stolen_and_location_turned_off_also_have/\",\n \"how to kick people off their wifi\": \"https://www.reddit.com/r/HowToHack/comments/1jaf6wc/how_to_kick_people_off_their_wifi/\",\n \"How can I clone cryptographic or anti clone UHF rfid tag?\": \"https://www.reddit.com/r/HowToHack/comments/1ja85k7/how_can_i_clone_cryptographic_or_anti_clone_uhf/\",\n \"Looking for Information on Unlimited eSIMs from a French Operator\": \"https://www.reddit.com/r/HowToHack/comments/1ja5t1w/looking_for_information_on_unlimited_esims_from_a/\",\n \"I want to learn how to gain access to CCTV cameras\": \"https://www.reddit.com/r/HowToHack/comments/1ja7kuo/i_want_to_learn_how_to_gain_access_to_cctv_cameras/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"AI Is Oversharing and Leaking Data - Sounil Yu - PSW #865\": \"http://sites.libsyn.com/18678/ai-is-oversharing-and-leaking-data-sounil-yu-psw-865\"\n }\n}"}}, "archive/daily/2025/2025-01-23.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747358.060316, "n": 59529, "h": "12de2939d4dce70d", "c": "# 每日安全资讯（2025-01-23）\n\n- 奇安信攻防社区\n - [ ] [2.35版本以下堆沙盒绕过模板总结带例题](https://forum.butian.net/share/4063)\n - [ ] [巧用Chrome-CDP远程调用Debug突破JS逆向](https://forum.butian.net/share/4062)\n- Tenable Blog\n - [ ] [Oracle January 2025 Critical Patch Update Addresses 186 CVEs](https://www.tenable.com/blog/oracle-january-2025-critical-patch-update-addresses-186-cves)\n- Security Boulevard\n - [ ] [UK Mail Check: DMARC Reporting Changes to Know](https://securityboulevard.com/2025/01/uk-mail-check-dmarc-reporting-changes-to-know/)\n - [ ] [DEF CON 32 – The Village Peoples’ Panel What Really Goes On In A Village](https://securityboulevard.com/2025/01/def-con-32-the-village-peoples-panel-what-really-goes-on-in-a-village/)\n - [ ] [Life in the Swimlane with Marian Fehrenbacher, HR Assistant & Office Manager](https://securityboulevard.com/2025/01/life-in-the-swimlane-with-marian-fehrenbacher-hr-assistant-office-manager/)\n - [ ] [Google Cloud Security Threat Horizons Report #11 Is Out!](https://securityboulevard.com/2025/01/google-cloud-security-threat-horizons-report-11-is-out/)\n - [ ] [Randall Munroe’s XKCD ‘Human Altitude’](https://securityboulevard.com/2025/01/randall-munroes-xkcd-human-altitude/)\n - [ ] [Filtered to Perfection: Votiro’s Two-Layer Approach to Cybersecurity](https://securityboulevard.com/2025/01/filtered-to-perfection-votiros-two-layer-approach-to-cybersecurity/)\n - [ ] [Entra Connect Attacker Tradecraft: Part 2](https://securityboulevard.com/2025/01/entra-connect-attacker-tradecraft-part-2/)\n - [ ] [Rethinking Credential Security](https://securityboulevard.com/2025/01/rethinking-credential-security/)\n - [ ] [DEF CON 32 – UDSonCAN Attacks Discovering Safety Critical Risks By Fuzzing](https://securityboulevard.com/2025/01/def-con-32-udsoncan-attacks-discovering-safety-critical-risks-by-fuzzing/)\n - [ ] [How to Handle Secrets at the Command Line [cheat sheet included]](https://securityboulevard.com/2025/01/how-to-handle-secrets-at-the-command-line-cheat-sheet-included/)\n- 安全客-有思想的安全新媒体\n - [ ] [最高级！360获评工信部CAPPVD“三星技术支撑单位”称号](https://www.anquanke.com/post/id/303728)\n - [ ] [cve-2024-12857： AdForest 主题中的关键漏洞允许完全接管帐户，数千网站面临风险](https://www.anquanke.com/post/id/303725)\n - [ ] [新型 Mirai 变种 Murdoc_Botnet 通过物联网漏洞发起 DDoS 攻击](https://www.anquanke.com/post/id/303722)\n - [ ] [2024年，Redline、Vidar和Raccoon恶意软件窃取了10亿个密码](https://www.anquanke.com/post/id/303719)\n - [ ] [CVE-2025-21298 检测： Microsoft Outlook 中的严重零点击 OLE 漏洞会导致远程代码执行](https://www.anquanke.com/post/id/303716)\n - [ ] [Bitbucket 服务因全球大停机而“严重瘫痪”](https://www.anquanke.com/post/id/303713)\n - [ ] [假冒的 Homebrew Google 广告以恶意软件为目标的 Mac 用户](https://www.anquanke.com/post/id/303710)\n - [ ] [Cloudflare 缓解了破纪录的 5.6 Tbps DDoS 攻击](https://www.anquanke.com/post/id/303707)\n - [ ] [”偷偷摸摸的日志“微软欺骗计划避开了双因素安全系统](https://www.anquanke.com/post/id/303704)\n - [ ] [前中情局分析员承认泄露绝密文件罪](https://www.anquanke.com/post/id/303701)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [Cleo LexiCom / VLTrader / Harmony 5.8.0.23 Remote Code Execution](https://cxsecurity.com/issue/WLB-2025010023)\n - [ ] [Ivanti Buffer Overflow Proof of Concept](https://cxsecurity.com/issue/WLB-2025010022)\n - [ ] [LibreNMS Authenticated RCE](https://cxsecurity.com/issue/WLB-2025010021)\n- InfoSec Write-ups - Medium\n - [ ] [Agent Sudo CTF — TryHackMe Writup](https://infosecwriteups.com/agent-sudo-ctf-tryhackme-writup-081d561408de?source=rss----7b722bfd1b8d---4)\n- 安全脉搏\n - [ ] [记一次有点抽象的渗透经历](https://www.secpulse.com/archives/205044.html)\n - [ ] [CVE复现之老洞新探（CVE-2021-3156）](https://www.secpulse.com/archives/205000.html)\n - [ ] [在一次渗透中学会编写Tamper脚本](https://www.secpulse.com/archives/205058.html)\n- Recent Commits to cve:main\n - [ ] [Update Wed Jan 22 20:24:04 UTC 2025](https://github.com/trickest/cve/commit/7d634b304016aab3bf32893e04ac98344c8a90d0)\n - [ ] [Update Wed Jan 22 12:24:00 UTC 2025](https://github.com/trickest/cve/commit/5709cff610e63bf7d61893e46720b8f8ab18d7f3)\n - [ ] [Update Wed Jan 22 04:28:36 UTC 2025](https://github.com/trickest/cve/commit/350528609cf8c384d52a5bb8542ffa105cc6b361)\n- SecWiki News\n - [ ] [SecWiki News 2025-01-22 Review](http://www.sec-wiki.com/?2025-01-22)\n- 一个被知识诅咒的人\n - [ ] [【Python运维】Python与Terraform结合：实现云基础设施的自动化部署](https://blog.csdn.net/nokiaguy/article/details/145305290)\n - [ ] [Python自动化运维：一键掌控服务器的高效之道](https://blog.csdn.net/nokiaguy/article/details/145305263)\n- obaby@mars\n - [ ] [小年 — 这真的就要过年了？](https://h4ck.org.cn/2025/01/19030)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [Otelier 数据泄露导致数百万酒店预订信息泄露](https://www.4hou.com/posts/kgjv)\n - [ ] [守正创新，持续突破！国投智能数字政务业务年终盘点](https://www.4hou.com/posts/mk03)\n - [ ] [Check Point 公司发布《2025 年安全报告》显示，随着网络威胁生态系统日渐成熟，网络攻击次数骤增 44%](https://www.4hou.com/posts/gyDj)\n- Trustwave Blog\n - [ ] [Trustwave SpiderLabs: Ransomware Attacks Against the Energy and Utilities Sector Up 80%](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/trustwave-spiderlabs-ransomware-attacks-against-the-energy-and-utilities-sector-up-80-percent/)\n- Doonsec's feed\n - [ ] [我实验室2篇论文被WWW 2025接收！](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247492834&idx=1&sn=36396f6cc39b8c9b87eead00faf8c111)\n - [ ] [快速上手渗透测试报告写作：从WP到甲方报告的一站式指南](https://mp.weixin.qq.com/s?__biz=MzA3NDE0NTY0OQ==&mid=2247484103&idx=1&sn=285be13254e14304496c192d45c05002)\n - [ ] [美国财政部再对中国一家网络安全公司和一名个人实施制裁](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485452&idx=1&sn=4384fb7ca51f3e1139db829611f6fc43)\n - [ ] [【直卖实拍】北七家3居变4居豪装，理想楼层、户型、朝向](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485452&idx=2&sn=c6375b484d936854df5ada100b9ff24e)\n - [ ] [【干货】笑傲职场的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485452&idx=3&sn=2a8340ae9404ef7ccfe64398b85e2267)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485452&idx=4&sn=fcd594b0e515f7eadff4e4df46c29ba5)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485452&idx=5&sn=a2cf457c4941e1e16638dd4bddd10903)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485452&idx=6&sn=a0bf66a3ff572c1df283577b241ea3cc)\n - [ ] [Windows进阶版安全事件应急响应分析](https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538503&idx=1&sn=823611c94f399812ab24f75ac97ade94)\n - [ ] [云安全(二)：对象存储](https://mp.weixin.qq.com/s?__biz=MzkyMjUzNTM1Mw==&mid=2247486992&idx=1&sn=f553fbcdf572da09cdf767e6c39b230f)\n - [ ] [国内没人讲，国外电动车测评不惯着新势力新能源汽车](https://mp.weixin.qq.com/s?__biz=MzkwMjQyNjAxMA==&mid=2247484825&idx=1&sn=2fdaa5a56346aac19da121b702f3a1fd)\n - [ ] [【漏洞预警】pearProjectApi存在SQL注入漏洞](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489507&idx=1&sn=cdbcc7dac604210a7fa351e96c1bbaa9)\n - [ ] [【漏洞预警】YesWiki 存在经过身份验证的任意文件删除漏洞(CVE-2025-24019)](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489507&idx=2&sn=43309d019012fc2d5146638f21cf4cdb)\n - [ ] [link-tools工具箱](https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486391&idx=1&sn=0f8c045e6dfb3362f22fb8d1a7f32da2)\n - [ ] [抓包分析FTP协议及原理](https://mp.weixin.qq.com/s?__biz=MzAxNTg1MDYxNA==&mid=2247489174&idx=1&sn=6e16fbcc3137f63cf7a73a438af5e7e4)\n - [ ] [浅谈《通信网络安全防护管理办法》](https://mp.weixin.qq.com/s?__biz=MzI4NzA1Nzg5OA==&mid=2247485688&idx=1&sn=2dcf3598a5664123095e9ca1608b8800)\n - [ ] [【技巧】开源情报（OSINT）：套接字理论（Socket Theory）情报分析师如何更好隐藏自己](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148647&idx=1&sn=4df1f367b82341e8c092ea12a7dec4c8)\n - [ ] [强烈推荐|超好用的网安大模型](https://mp.weixin.qq.com/s?__biz=Mzg5NTY3NTMxMQ==&mid=2247484536&idx=1&sn=b056b6036c8dc99ff081f004dc23caff)\n - [ ] [使用 Evilginx 轻松绕过 MFA](https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504689&idx=1&sn=ebe28721272600d656ad2acd2611a716)\n - [ ] [OSINT|值得拥有的TOP5工具](https://mp.weixin.qq.com/s?__biz=MzkxMDIwMTMxMw==&mid=2247494462&idx=1&sn=ed829c96e96e34bcd8db231435dcfe19)\n - [ ] [我要学习 | 本公众号第一次公开课：前端爆破加解密、JS调试分析加密爆破](https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247488005&idx=1&sn=592dae68ea021e9ac446992060cf267c)\n - [ ] [信创已经到关键期--人人必须要知道的政策](https://mp.weixin.qq.com/s?__biz=MzkwNDI0MjkzOA==&mid=2247485838&idx=1&sn=dd4be512901b9a931d6d7681f3b1e5b1)\n - [ ] [ctftools-all-in-oneV7.5](https://mp.weixin.qq.com/s?__biz=MzI1NzUxOTUzMA==&mid=2247485778&idx=1&sn=3b0ff74d522d161b0a91bd13453019f1)\n - [ ] [搞网络安全怎么赚大钱！！！](https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247483972&idx=1&sn=5f01535fafc100416448c9fb3a7162a6)\n - [ ] [红队开发：让自己的Shellcode实现SMC](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490015&idx=1&sn=0cdb71c24b75dcb4bf801925daf80188)\n - [ ] [CTF:Phar反序列化漏洞学习笔记](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490015&idx=2&sn=e906ce0834778a54573549a04e207af6)\n - [ ] [Ansible fetch模块详解：轻松从远程主机抓取文件](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490015&idx=3&sn=2345a568a480fa2af4f3055b4a20e422)\n - [ ] [【工具推荐】URLFinder-x 信息收集工具](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490015&idx=4&sn=e51a2edc4bd80f79155f95e73f56a74e)\n - [ ] [【安全圈】特朗普上任首日，被囚 11 年的丝绸之路创始人获释](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=1&sn=bad8f735186597a7ef0a02f03be5d6e4)\n - [ ] [【安全圈】420万主机暴露，含VPN和路由器](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=2&sn=ce83805d756cb11a77b84cb9413465be)\n - [ ] [【安全圈】2024年近2亿人受影响，美国医疗成重点攻击目标](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=3&sn=126c3fc5cb7d6a7dc18e3e9a213e8170)\n - [ ] [【安全圈】7-Zip 漏洞可让远程攻击者绕过保护并执行任意代码](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=4&sn=2c06e2c2a5011eb86894033a1e6c41fc)\n - [ ] [2025年最新渗透测试虚拟机工具箱汇总](https://mp.weixin.qq.com/s?__biz=MzkyMzg4MTY4Ng==&mid=2247484594&idx=1&sn=585d3369395a3f45ab99f107d28a3463)\n - [ ] [特斯拉电动汽车越狱](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247619987&idx=1&sn=d6821c8b8105f5f77f3461cfbd94e684)\n - [ ] [基于 Linux 的汽车计算机的安全隔离与案例研究](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247619987&idx=2&sn=ee7b65f10a49000391f08bc76432de8a)\n - [ ] [远程车辆控制的关键 - 自动驾驶域控制器 百度](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247619987&idx=3&sn=1387d6e1758c003c565cdbf395dfc69f)\n - [ ] [某攻防演练｜从404页面到接管阿里云](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496928&idx=1&sn=871a0d0002a589ed9b98ae6ed97158f9)\n - [ ] [关于召开宁夏商用密码应用安全性评估业务培训工作会议的预通知](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633960&idx=1&sn=50eb0fb22088f21b070e66f7d7e9584a)\n - [ ] [江苏省数据条例正式发布](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633960&idx=2&sn=bb5de81413dedac432a0b709af22b410)\n - [ ] [《Web3.0数字身份密码安全体系研究（2024年）》正式发布](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633960&idx=3&sn=643e1c6917e0dce418857355ad3c1c9b)\n - [ ] [专家解读 | 魏亮：统筹布局国家数据基础设施，夯实数据要素价值释放基础](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633960&idx=4&sn=134507671490e2845e85db11c3be566d)\n - [ ] [美国IT供应商被黑，导致多地公共服务被迫中断多天](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633960&idx=5&sn=6918146fda0592a974fd01cf1925c11c)\n - [ ] [乘风破浪，行稳致远 —— 新潮信息2024年度盛典圆满落幕](https://mp.weixin.qq.com/s?__biz=MzkwNDcyODgwOQ==&mid=2247486769&idx=1&sn=ec8b1275fbd5a504490eef87766c3aa1)\n - [ ] [安全专家亲测演示：用这个方法，邻居家的WiFi密码一碰就开](https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489766&idx=1&sn=605087abaf5c1f6db011dcd9e668e8b0)\n - [ ] [人间逢小年，祝大家万事皆如愿](https://mp.weixin.qq.com/s?__biz=Mzg4NzQ4MzA4Ng==&mid=2247485185&idx=1&sn=7fd770df097013d9a338a34a41d0bc8c)\n - [ ] [缺乏的不是资源，而是真正的教育](https://mp.weixin.qq.com/s?__biz=MzkwODY2MzMyMA==&mid=2247484531&idx=1&sn=6283dfe0b1f0cd0be19c277bdf2f8076)\n - [ ] [汇编语言基础教程](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490098&idx=1&sn=ed0be305f2c8c9de0fff326bc45f1ce9)\n - [ ] [Remcos RAT远控木马分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490098&idx=2&sn=4a0e7ccccb8b29ea9fb45b2e6470e088)\n - [ ] [CE了解](https://mp.weixin.qq.com/s?__biz=MzkxMjYyMjA3Mg==&mid=2247485392&idx=1&sn=a3204187202136c21f954c939c9d6a3d)\n - [ ] [App对抗系列—Root检测对抗](https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247484886&idx=1&sn=dd4e714506b98b4971ca44a8c838c966)\n - [ ] [【信科动态】蓄势待发 共创辉煌 — 信科共创2025年会圆满举办](https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485220&idx=1&sn=9a2dbc483e538d6cfa865f6dd956dbfd)\n - [ ] [【权威发布】CNNIC最新《中国互联网络发展状况统计报告》发布](https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485220&idx=2&sn=0a2a314bc37a8521c1d2716667929149)\n - [ ] [【数安天地】2025年我国数据领域明确重点任务](https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485220&idx=3&sn=32cb839b2a727c01270ea47e1df58290)\n - [ ] [【AI安全】2024年度人工智能……](https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485220&idx=4&sn=abfa6ea3dca53098a88613093bb4449e)\n - [ ] [【网安前沿】人数超TikTOK！……](https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485220&idx=5&sn=5c373b4d772f9ce5160eed1cb8773743)\n - [ ] [混沌](https://mp.weixin.qq.com/s?__biz=MzIwODc2NjgxNA==&mid=2247484977&idx=1&sn=bfdeaa70d34c3c8a5d24edb80197bdc6)\n - [ ] [带你解锁编码新世界！--随波逐流CTF编码工具使用教程39 --polybius棋盘密码](https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247489560&idx=1&sn=f13a82f3662c6aaff65700a0bb33ad1c)\n - [ ] [Coremail邮箱客户端安装与账户配置（macOS x86版）](https://mp.weixin.qq.com/s?__biz=MzkxMjY3MTI4Mg==&mid=2247484607&idx=1&sn=f63e575f4158cdb39e613b1f7c85eb5a)\n - [ ] [关于公示2025年工业和信息化部移动互联网APP产品安全漏洞专业库支撑单位的通知](https://mp.weixin.qq.com/s?__biz=MzkyMjM4MzY5Ng==&mid=2247486052&idx=1&sn=672267c39bd61c609b8a70aa6fe4dba4)\n - [ ] [支撑单位遴选 | 关于开展2025年工业和信息化部移动互联网APP产品安全漏洞专业库支撑单位遴选工作的通知](https://mp.weixin.qq.com/s?__biz=MzkyMjM4MzY5Ng==&mid=2247486052&idx=2&sn=df504e3f60bd71a5f51f6ddfc79ceac2)\n - [ ] [AI快速上手：新手如何用ChatGPT写好医学影像学文献综述的全攻略！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493247&idx=1&sn=e8b8fb7965bdb36fbd8d60043f77110e)\n - [ ] [AI驱动教育学论文初稿快速生成：核心流程与实战指北！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493247&idx=2&sn=e818116fd4106e8a0f70c6dc696a890e)\n - [ ] [AI驱动下的法语论文文献综述战法：半天高效清空20个刊物的内参秘籍。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493247&idx=3&sn=bd8b3f8df3fabad7af824fd5f9a552ee)\n - [ ] [AI时代：教你玩转小学教育论文大纲的落实与完善攻略。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493247&idx=4&sn=aaae4c45ec27234ca0aed2ae90c7dc4c)\n - [ ] [AI时代：ChatGPT助你一天搞定法语论文大纲完善内部高阶指南！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493247&idx=5&sn=abd5d43185cc32d17ba024114fd783ad)\n - [ ] [安世加实战派沙龙第二期之办公终端安全在北京成功举办(2025.01.11/周六、北京）](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541441&idx=1&sn=b4996a6803ef5cac9358f5c0abc692c7)\n - [ ] [【工具分享】HermeticRansom勒索病毒恢复工具](https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247496544&idx=1&sn=b0532021322be29222853520f63e6c37)\n - [ ] [起床了吗，我要结婚了](https://mp.weixin.qq.com/s?__biz=Mzg4NDg2NTM3NQ==&mid=2247484692&idx=1&sn=c1bd4168ea28a88992c34b9370b2afcc)\n - [ ] [下辈子别做网安了](https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490797&idx=1&sn=f884b6f04d1985bae7bb9a55eb1c2706)\n - [ ] [区块链学习笔记之初探以太坊](https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037431&idx=1&sn=33663e3a850d9c8b658bad904c08ce0a)\n - [ ] [领导者不变，中国厂商全无｜Gartner 访问管理 2024 MQ 发布](https://mp.weixin.qq.com/s?__biz=MzkzNjE5NjQ4Mw==&mid=2247543326&idx=1&sn=8f60ed73ede9f28b5c71d30f94a81e9e)\n - [ ] [DeepSeek+OpenAI Swarm,做Agent的绝配](https://mp.weixin.qq.com/s?__biz=Mzg5NTMxMjQ4OA==&mid=2247485586&idx=1&sn=fa8cd22e23818be8a4f85c034b2653e9)\n - [ ] [《灵根换途：重铸荣耀》](https://mp.weixin.qq.com/s?__biz=MzI1NDU2MzAzNQ==&mid=2247487775&idx=1&sn=bdeb4114b72038469c576c5cd7ef0abf)\n - [ ] [数据经纪商Gravy Analytics遭黑客攻击 数百万用户位置信息泄露](https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251252&idx=1&sn=08c27d24f45df08156ccbb320a916ca7)\n - [ ] [关于调整半决赛入围队伍名单公示](https://mp.weixin.qq.com/s?__biz=MzI1NzQ0NTMxMQ==&mid=2247490073&idx=1&sn=1196e582372868c1cdcdc85590fe6ec2)\n - [ ] [小年 | 小年辞旧岁，新春序幕开](https://mp.weixin.qq.com/s?__biz=MzU3MDA0MTE2Mg==&mid=2247492489&idx=1&sn=f7ae189fc8a91f74ba5b7ca2cd070e3d)\n - [ ] [今日，小年](https://mp.weixin.qq.com/s?__biz=MzkyNDUxNTQ2Mw==&mid=2247485811&idx=1&sn=b6f89d271a02e0fe0ecaa468674cd746)\n - [ ] [美商务部《保障ICT供应链：联网汽车》规则（全文翻译）](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247506068&idx=1&sn=c5502bc907a76a432d06dd4e9098d0ad)\n - [ ] [小年纳福 喜迎新春](https://mp.weixin.qq.com/s?__biz=MzI2NDYzNjY0Mg==&mid=2247501129&idx=1&sn=78727fa4943031118593e6589cac1f03)\n - [ ] [Payloads for LFR/LFD](https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486492&idx=1&sn=2a26b6645da3eac6fb5fd1bb53bb5ba9)\n - [ ] [秋风AI代码审计工具1.0 上线！](https://mp.weixin.qq.com/s?__biz=MzkzMzczODA0OQ==&mid=2247484087&idx=1&sn=946eec98d2649ebae893bd340fc6f023)\n - [ ] [CERT-UA 警告网络诈骗者冒充该机构利用虚假AnyDesk请求控制目标](https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793938&idx=2&sn=8ef11a28a3fa79bc3bd6ed37a79f3e6a)\n - [ ] [《信息安全学报》“智能语音攻防技术”专栏征稿函](https://mp.weixin.qq.com/s?__biz=MzI5ODA1NjE5NQ==&mid=2652014647&idx=1&sn=082ad04011ce661af109ade0f59b2d6f)\n - [ ] [税前年薪50-200万，高层次网络安全人才招聘](https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247505628&idx=1&sn=b6131a18925f1d2c27b52a044ac7c20a)\n - [ ] [江西银行2025年社会招聘网络安全岗](https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247505628&idx=2&sn=48d0b333d0c895679e394c93cb955922)\n - [ ] [年薪50-80万！湖南省密码工程技术研究中心招聘信息安全专业](https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247505628&idx=3&sn=bc981945ca96eb0dd824e4fb8aef48d9)\n - [ ] [3000+网安笔记](https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247505628&idx=4&sn=6bafb661c0c79d06eaea7321bccf9b1d)\n - [ ] [期刊征文 | 暗网抑制前沿进展](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491610&idx=1&sn=8b6c9caf92435cbd9b76b77686619972)\n - [ ] [红包封面第二弹！](https://mp.weixin.qq.com/s?__biz=MzUzMDQ1MTY0MQ==&mid=2247506597&idx=1&sn=e0fb7f14d115e5e6a81cf58be6938690)\n - [ ] [工信部等十四部门联合印发《关于加强极端场景应急通信能力建设的意见》](https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247539969&idx=1&sn=d0b20062f59c4c2627623f4a0110a99a)\n - [ ] [【解读】五问+一图，读懂《关于加强极端场景应急通信能力建设的意见》](https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247539969&idx=2&sn=fc62411ebb093dc6e8ba7a1a293e7968)\n - [ ] [祥和小年至，新岁启新程！](https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497015&idx=1&sn=d54c943e8370d2b504197ce7125a9bd3)\n - [ ] [.NET 安全攻防知识交流社区](https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247490330&idx=2&sn=a8b44c92013aa2897bc50f5869a74a94)\n - [ ] [梅赛德斯—奔驰信息娱乐系统漏洞详细信息披露](https://mp.weixin.qq.com/s?__biz=MzIzNDIxODkyMg==&mid=2650085835&idx=1&sn=55b9b7d447e31ed5e6a7016fc118aba7)\n - [ ] [北方小年|糖瓜祭灶 新年来到](https://mp.weixin.qq.com/s?__biz=MzIzNDIxODkyMg==&mid=2650085835&idx=2&sn=62fa38baa6534b965a3ee784c8c23c5b)\n - [ ] [定制红包封面、蛇年手机壁纸，天融信愿您新的一年福气满屏！](https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650963107&idx=1&sn=9bbaad123506d1da711ab3643c51c8d5)\n - [ ] [小年快乐 | 文末领取励行安全专属红包封面](https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484280&idx=1&sn=2263d238e09a658039a7a2399a3257d9)\n - [ ] [Lazarus组织发起“Operation 99”行动，通过虚假LinkedIn资料瞄准Web3开发者](https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900117&idx=1&sn=147a51e42956ef762d607ad4db560f1b)\n - [ ] [红包封面免费领](https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900116&idx=1&sn=6a902bce7b923dcbb6d636c0bd33e2c7)\n - [ ] [福利！免费商用，1500+组件低代码工业数据连接及可视化平台](https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454936685&idx=1&sn=c2daf9fcc60bce9090096a88fc9bc122)\n - [ ] [转储LSASS内存的强大神器](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489037&idx=1&sn=690f85a085d60322cbdef81ea014958a)\n - [ ] [小事](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489037&idx=2&sn=6baba774e15189c2118e75a96615ba4a)\n - [ ] [Wireshark Troubleshooting 系列合集目录](https://mp.weixin.qq.com/s?__biz=MzA5NTUxODA0OA==&mid=2247493128&idx=1&sn=027c2d79a975850f77ba85e1c7325e23)\n - [ ] [网安之道](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496713&idx=1&sn=f99ce8d0ff597b9725371ec789d1627d)\n - [ ] [国自然中标真不难！十年评审专家1v1精修你的本子，中标率提升58%](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496713&idx=2&sn=5123c0c462454c69a097d5c90b01ac29)\n - [ ] [云计算与零信任架构的结合：实现更高安全性](https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247509854&idx=1&sn=c873f0835b8ef33b4e64f63598b41c66)\n - [ ] [Go shellcode加载器 免杀火绒 360核晶等主流杀软](https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247484753&idx=1&sn=b8aa28771e6ca5e4ac83058d2a8f18cb)\n - [ ] [小年至，归期近；有安全，更团圆。](https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870812&idx=1&sn=422066cfd72bd12d7ff94673d46c0035)\n - [ ] [互联网大厂黑话指南（速成版）](https://mp.weixin.qq.com/s?__biz=MzI1NzI5NDM4Mw==&mid=2247498587&idx=1&sn=f7b972440193d95d234bd9e501fad124)\n - [ ] [十强！威努特斩获2024年网络安全优秀评选三项大奖](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651130654&idx=1&sn=72ece0485d56a8dbc791b20108f0943c)\n - [ ] [MySQL数据误删的恢复分享](https://mp.weixin.qq.com/s?__biz=Mzg3NTU3NTY0Nw==&mid=2247489522&idx=1&sn=b85a0e1b057a832db9ec56399cc6439f)\n - [ ] [先向下扎根，再向上生长](https://mp.weixin.qq.com/s?__biz=MzU4NjY3OTAzMg==&mid=2247514862&idx=1&sn=6c93e8560b7d557a43c0f9b7263d6dd0)\n - [ ] [全球瞭望｜网络安全重大事件精选](https://mp.weixin.qq.com/s?__biz=MzU4NjY3OTAzMg==&mid=2247514862&idx=2&sn=bcdf5e64844202a08a115bfeadb0c886)\n - [ ] [JWT原理及利用](https://mp.weixin.qq.com/s?__biz=Mzg5MDgzOTk2Mg==&mid=2247484651&idx=1&sn=9cd5604806e7af154fa2c88241523b12)\n - [ ] [一些木马反制技巧](https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247510449&idx=1&sn=954231b814fb3c633b2bac2dc12665b3)\n - [ ] [漏洞预警 | 叁拾叁OA SQL注入漏洞](https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492118&idx=2&sn=0cc8d46b2006a58fe76e0aceeec3f5e3)\n - [ ] [工具 | proxypin](https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492118&idx=4&sn=6d72cbe7b6abd76539ff4b90c246e621)\n - [ ] [载誉前行｜天地和兴荣膺CCIA年度先进会员单位](https://mp.weixin.qq.com/s?__biz=MjM5Mzk0MDE2Ng==&mid=2649608840&idx=1&sn=822e24931c6b118b52381dd6a0725082)\n - [ ] [2024年度网络安全漏洞威胁态势研究报告](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264326&idx=2&sn=edd9feb6f1f3d5fb7467e5a4a1bc8ea3)\n - [ ] [网络弹性评价流程](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264326&idx=3&sn=0064271e80a9c395235db44394646be4)\n - [ ] [网络与数据安全治理前沿洞察（2025年第1期）](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264326&idx=4&sn=972c2472a69641e01ab75dec91607976)\n - [ ] [2025年低空经济未来发展趋势分析](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264326&idx=5&sn=c695125ae9234c1bbee0ab30a82644fe)\n - [ ] [GB∕T 44778-2024 汽车诊断接口信息安全技术要求及试验方法](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264326&idx=8&sn=828ad37f9e1fecb482a24e86e66fea7b)\n - [ ] [HSQLDB 安全测试指南](https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487207&idx=2&sn=627d12dc6ee86ec6a128d2c4d24e2024)\n - [ ] [RPA在电力行业中的应用](https://mp.weixin.qq.com/s?__biz=MjM5NTk5Mjc4Mg==&mid=2655222700&idx=1&sn=135b0046a01810bcbeed431638cb4038)\n - [ ] [Any-Reader：把你的VSCode变成摸鱼娱乐中心！](https://mp.weixin.qq.com/s?__biz=MzA4MjkzMTcxMg==&mid=2449046750&idx=1&sn=8520440de7e2c9aa42cf4933b5394a43)\n - [ ] [2024年度漏洞态势大揭秘：你的网络安全防线还稳固吗？（附下载）](https://mp.weixin.qq.com/s?__biz=MzkyODY5ODAyOA==&mid=2247489419&idx=1&sn=27d48e4898f7de1f017a5a7bc5bc6a4e)\n - [ ] [13,000个MikroTik路由器因恶意垃圾邮件和网络攻击被僵尸网络劫持](https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672513&idx=1&sn=955e9169d886553304f98bc40ed4718e)\n - [ ] [暗网情报：高价Rust反向Shell-美ISP和网络设备制造商网络访问权限](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506983&idx=1&sn=2130ab0ccce5bafd3881b7e250b88caa)\n - [ ] [5th域安全微讯早报【20250122】019期](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506983&idx=2&sn=0327ca894b9af92ef9b7122f7e70a205)\n - [ ] [今日直播课程（ISO/IEC 27001），敬请您关注](https://mp.weixin.qq.com/s?__biz=MzA5OTEyNzc1Nw==&mid=2247486014&idx=1&sn=f9a261134b643ac91d42ec2d51189828)\n - [ ] [ISO 14001: 2015 标准详解与实施（20）9.1.1 总则](https://mp.weixin.qq.com/s?__biz=MzA5OTEyNzc1Nw==&mid=2247486014&idx=2&sn=51c00f82998000dfcbb64df3898c9de4)\n - [ ] [“间谍”正在潜入你的手机](https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489786&idx=1&sn=4b1c4df2d56e34fa521c69996bf42e3f)\n - [ ] [黑客团伙IntelBroker声称已窃取HPE内部机密数据 后者表示正在调查](https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247496070&idx=1&sn=2336cc68b4e452a35795193173f98854)\n - [ ] [一图读懂《关于加强极端场景应急通信能力建设的意见》](https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247496070&idx=2&sn=d0fa64e3e92467220eb923a4612e7960)\n - [ ] [【神兵利器】JAVA JMX漏洞综合利用工具](https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247495179&idx=1&sn=0d366655fb6bb139775fc4d4fe333652)\n - [ ] [JBoss 4.x JBossMQ JMS反序列化](https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247495179&idx=2&sn=dce36e9b572732a9fddfa1774bcea24c)\n - [ ] [ViewState反序列化漏洞详解](https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485410&idx=1&sn=c516da4c5bcf9729e270e70dc0c6e61d)\n - [ ] [linux清除了文件没有释放空间](https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485410&idx=2&sn=673b6d7c7ff6b3a511f79a660b138423)\n - [ ] [什么是零信任：安全性、原则和架构](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114149&idx=1&sn=e6c11500191f7d8bb8a004604a2c5561)\n - [ ] [秦安：新华社喜气洋洋点评，小红书需发挥主体作用，接住泼天富贵](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476271&idx=1&sn=580c4508bc163041823038ad9e920e68)\n - [ ] [喜报！炼石荣获中国计算机行业协会网数专委“卓越贡献奖”](https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247568825&idx=1&sn=f8e52c6a4464aec5ef8f1fb39f02e04b)\n - [ ] [如何构建混合云环境下的信息安全策略？](https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247487177&idx=1&sn=809cff24a1b39067a2dbd6d345853a90)\n - [ ] [云安全中的共享责任模型：企业与云服务商的界限](https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247487177&idx=2&sn=7113ff3d04b276d919b4dc008991e0f4)\n - [ ] [TangGo：国产化的综合能手](https://mp.weixin.qq.com/s?__biz=MzkzNzg3NzQxMQ==&mid=2247485695&idx=1&sn=2fc7154d71582d71208ba945e123238a)\n - [ ] [AWS 云安全面试准备：10 个重要的 DevOps 概念](https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484996&idx=1&sn=4615303b13ce5abb344738596185350e)\n - [ ] [新春福利已就位，海量奖品疯狂来袭！](https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247705&idx=1&sn=36ed81f86ac26ed621bcaeea900677ad)\n - [ ] [所有的网站都需要办理ICP备案？](https://mp.weixin.qq.com/s?__biz=MzI4NzA1Nzg5OA==&mid=2247485681&idx=1&sn=fa6e7bd1383473df5734f103139557e7)\n - [ ] [分享图片](https://mp.weixin.qq.com/s?__biz=MzI3Njc1MjcxMg==&mid=2247494307&idx=1&sn=47e335541d5c4fa8e74793af9324e019)\n - [ ] [全新视频系列《实战源码审计》](https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247485719&idx=1&sn=4b3339a03f1b67424f469e8d1b72bdcf)\n - [ ] [OWASP 2025年十大漏洞–被利用/发现的最严重漏洞](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114147&idx=1&sn=257856caede83532d8fbbbbaa718c6be)\n - [ ] [126个Linux内核漏洞可让攻击者利用78个 Linux子系统](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114147&idx=2&sn=0ec2b581bd93714c8ff60c69bcc70f8b)\n - [ ] [工具推荐 | 内网渗透敏感信息搜索神器](https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247493961&idx=1&sn=fd35d4a8a05cae420fa700b36125f0d2)\n - [ ] [网络空间测绘 -- ScopeSentry（V1.5.4）](https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515682&idx=1&sn=7012ed1bd01016412f4a2ac7075c393c)\n - [ ] [第6天：基础入门-抓包技术&HTTPS协议&APP&小程序&PC应用&WEB&转发联动](https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515682&idx=2&sn=b88c75c1bbebb784ce683d00c4f1c092)\n- Twitter @bytehx\n - [ ] [I earned $$$ for my submission on @bugcrowd https://bugcrowd.com/bytehx #ItTakesACrowd](https://x.com/bytehx343/status/1882032367206060197)\n - [ ] [Just got a reward for a vulnerability submitted on @yeswehack -- Acceptance of Extraneous Untrusted Data With Trusted Data - Cache Poisoning (CWE-349)...](https://x.com/bytehx343/status/1882032146376004006)\n - [ ] [Re @_justYnot Happy Birthday 🎉🎊🎉](https://x.com/bytehx343/status/1881888985657770380)\n- SpiderLabs Blog\n - [ ] [Trustwave SpiderLabs 2025 Trustwave Risk Radar Report: Energy and Utilities Sector](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/trustwave-spiderlabs-2025-trustwave-risk-radar-report-energy-and-utilities-sector/)\n- Horizon3.ai\n - [ ] [Identify Cybersecurity Risks at Scale to De-Risk M&A Transactions with Horizon3.ai’s NodeZero® Platform](https://go.horizon3.ai/MandA_UseCase#new_tab)\n - [ ] [Horizon3.ai Expands on Disruptive Value of Autonomous Penetration Testing for Security Teams Worldwide](https://www.businesswire.com/news/home/20250122764892/en/Horizon3.ai-Expands-on-Disruptive-Value-of-Autonomous-Penetration-Testing-for-Security-Teams-Worldwide#new_tab)\n - [ ] [9 Essential Questions to Ask When Evaluating Pentesting Solutions](https://www.horizon3.ai/intelligence/blogs/9-essential-questions-to-ask-when-evaluating-pentesting-solutions/)\n- Malwarebytes\n - [ ] [7-Zip bug could allow a bypass of a Windows security feature. Update now](https://www.malwarebytes.com/blog/news/2025/01/7-zip-bug-could-allow-a-bypass-of-a-windows-security-feature-update-now)\n- PortSwigger Research\n - [ ] [Stealing HttpOnly cookies with the cookie sandwich technique](https://portswigger.net/research/stealing-httponly-cookies-with-the-cookie-sandwich-technique)\n- Intigriti\n - [ ] [Unwavering support: Your bug bounty journey, our priority](https://www.intigriti.com/blog/business-insights/unwavering-support-your-bug-bounty-journey-our-priority)\n- HackerNews\n - [ ] [7-Zip 修复绕过 Windows MoTW 安全警告的漏洞，应立即升级到24.09版](https://hackernews.cc/archives/57033)\n - [ ] [乌克兰计算机应急响应小组警告：假冒 AnyDesk 请求的网络诈骗](https://hackernews.cc/archives/57031)\n - [ ] [PNGPlug 加载器通过假冒软件安装程序传播 ValleyRAT 恶意软件](https://hackernews.cc/archives/57029)\n - [ ] [13000 台 MikroTik 路由器被僵尸网络劫持，用于恶意软件传播和网络攻击](https://hackernews.cc/archives/57027)\n - [ ] [Mirai 变种 Murdoc Botnet 利用 AVTECH IP 摄像头和华为路由器的安全漏洞](https://hackernews.cc/archives/57025)\n- 奇客Solidot–传递最新科技情报\n - [ ] [过去一个世纪男性身高体重增长速度两倍于女性](https://www.solidot.org/story?sid=80399)\n - [ ] [杭州深度求索发布能挑战 OpenAI o1 的推理模型 DeepSeek R1](https://www.solidot.org/story?sid=80398)\n - [ ] [黑猩猩的撒尿行为具有传染性](https://www.solidot.org/story?sid=80397)\n - [ ] [耐药菌在乌克兰扩散](https://www.solidot.org/story?sid=80396)\n - [ ] [中国 2024 年可更新能源装机容量再创记录](https://www.solidot.org/story?sid=80395)\n - [ ] [Wine 10.0 释出](https://www.solidot.org/story?sid=80394)\n - [ ] [TikTok 被指限制反特朗普关键词的搜索](https://www.solidot.org/story?sid=80393)\n - [ ] [IMDb 创始人卸任 CEO 一职](https://www.solidot.org/story?sid=80392)\n - [ ] [特朗普赦免 Ross Ulbricht](https://www.solidot.org/story?sid=80391)\n- 绿盟科技技术博客\n - [ ] [【漏洞通告】Oracle WebLogic Server远程代码执行与拒绝服务漏洞(CVE-2025-21535/CVE-2025-21549)](https://blog.nsfocus.net/cve-20cve-2025-21535-cve-2025-21549/)\n - [ ] [绿盟威胁情报周报（2025.01.13-2025.01.19）](https://blog.nsfocus.net/2025-01-13-2025-01-19/)\n- 体验盒子\n - [ ] [vscode运行flutter项目ios真机](https://www.uedbox.com/post/119313/)\n- 安全牛\n - [ ] [《Agentic AI安全技术应用报告（2025版）》调研启动](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134812&idx=1&sn=560db2a85bcb9df872bc7c83e28d37e0&chksm=bd15ab8f8a6222990be11fb64472a9f9dbdfe32284261408fe230c6c72b2425eabc90345f991&scene=58&subscene=0#rd)\n - [ ] [特朗普推翻拜登人工智能行政命令；警惕！勒索软件团伙滥用微软Teams发起攻击 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134812&idx=2&sn=1644fdd615891c190020e26e48734279&chksm=bd15ab8f8a62229945c2a446ad5f94a740189be7bde929cd002d7b0d2cf230da898fbb608135&scene=58&subscene=0#rd)\n- 威努特安全网络\n - [ ] [十强！威努特斩获2024年网络安全优秀评选三项大奖](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651130654&idx=1&sn=72ece0485d56a8dbc791b20108f0943c&chksm=80e711aeb79098b8a34f63daf9b2d40b35e548f4fb03e44e4e22727512c1edaf44485a832523&scene=58&subscene=0#rd)\n- bishopfox.com\n - [ ] [SonicWall CVE-2024-53704: SSL VPN Session Hijacking](https://bishopfox.com/blog/sonicwall-cve-2024-53704-ssl-vpn-session-hijacking)\n- 奇安信 CERT\n - [ ] [【已复现】Rsync 堆缓冲区溢出漏洞(CVE-2024-12084)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502951&idx=1&sn=09d5b62b3cc3e71fec3a8595f18318a2&chksm=fe79e8ffc90e61e905225d9918798d40f77be91e0a5961c95f1ab8235b4d42623eb0ecca28ad&scene=58&subscene=0#rd)\n - [ ] [Oracle 2025年1月补丁日多产品高危漏洞安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502951&idx=2&sn=21655dd26fe10def4a6c6546fdf240d4&chksm=fe79e8ffc90e61e9fd1b2697f079954e6002507bd3d9fe45bf9331fc3c21481d0b14887ce263&scene=58&subscene=0#rd)\n- 代码卫士\n - [ ] [7-Zip 修复高危的 Windows MoTW 安全告警绕过漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522153&idx=1&sn=b0d2973a6eb87e554fb62b7ddfa10dfb&chksm=ea94a603dde32f1580de59ef6a2b8fb600c6cbb237024a672b5a02660c7fc1f7184f617fce4c&scene=58&subscene=0#rd)\n - [ ] [FTC要求通用停止收集和出售驾驶员数据](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522153&idx=2&sn=2d3b81592eb7e14fd1f16c714fa4e016&chksm=ea94a603dde32f154142371d59146a916e8ef1fa49b42310d2eb5bfe8ad83bb64ef5d322ff3e&scene=58&subscene=0#rd)\n- 安全客\n - [ ] [2024年度网络安全政策法规一览](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787787&idx=1&sn=ee8ea4a11f904302c035eb5170b8891e&chksm=8893bde4bfe434f22e9aa593b236330470621bd35552bc2eb979cb1eb05d055b87e7de1f8bde&scene=58&subscene=0#rd)\n- 安全内参\n - [ ] [这家IT供应商被黑，导致多地公共服务被迫中断多天](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513561&idx=1&sn=2796a6ba28137e2416855e83c1d45e5f&chksm=ebfaf2f9dc8d7bef4177fa9314612f542e0997c62ce65bd62a7a54182dfee525e14ce8e1aa10&scene=58&subscene=0#rd)\n - [ ] [持续贯彻关基安全！美国运安局延长管道网络安全指令有效期](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513561&idx=2&sn=815ef59fe9fe66e6e8be342a53433267&chksm=ebfaf2f9dc8d7befc4b6c6c02e08010a0431501f361b43e8f5d4bfc2c386251fdb1bd8623e09&scene=58&subscene=0#rd)\n- 信安之路\n - [ ] [即使变卖个人资产，也要给大家把工资补上！](https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499756&idx=1&sn=18d3cb30c32fc3d1c30f8f3e453e08a4&chksm=ec1dcfc4db6a46d24a59b9f5b73d6883c46b004ca97f3e0a2819a832775f00a0690175e9ef33&scene=58&subscene=0#rd)\n- FreeBuf网络安全行业门户\n - [ ] [威胁者利用Microsoft Teams语音通话传播勒索软件](https://www.freebuf.com/news/420574.html)\n - [ ] [美国前中央情报局分析师承认泄露国防信息](https://www.freebuf.com/news/420570.html)\n - [ ] [FreeBuf早报 | 特朗普赦免暗网丝绸之路创始人；Microsoft Teams被用于传播勒索软件](https://www.freebuf.com/news/420528.html)\n - [ ] [特朗普签署文件，特赦暗网“丝绸之路”创始人](https://www.freebuf.com/news/420526.html)\n - [ ] [2025 年 AI 网络安全预测](https://www.freebuf.com/news/420517.html)\n - [ ] [勒索软件编年史：从特洛伊到AI多重勒索](https://www.freebuf.com/articles/neopoints/420510.html)\n - [ ] [7-Zip高危漏洞，攻击者可绕过安全机制远程执行代码](https://www.freebuf.com/news/420514.html)\n- 虎符智库\n - [ ] [厚雪翻长坡，平淡不平凡：2024年网安产业发展态势剖析及2025年趋势展望](https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247492937&idx=1&sn=eac85a2e8d53918cee8a65c4ad935830&chksm=971d884ba06a015d1c88f5e338ffa29adba7552fcc1c63dd404cbab21a6a508226f88500bf16&scene=58&subscene=0#rd)\n- 丁爸 情报分析师的工具箱\n - [ ] [【技巧】开源情报（OSINT）：套接字理论（Socket Theory）情报分析师如何更好隐藏自己](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148647&idx=1&sn=4df1f367b82341e8c092ea12a7dec4c8&chksm=f1af265dc6d8af4b44f8d605298e979248080faba260608e5337d953231ea561f4d414f69a65&scene=58&subscene=0#rd)\n- 腾讯安全威胁情报中心\n - [ ] [游戏辅助的隐藏威胁｜传播于游戏论坛的“Catlavan”后门分析报告](https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510023&idx=1&sn=190730a6182da1469a76c29ec479ae13&chksm=ec9f7174dbe8f86290b0ced6fb6032de62bf76e90dabb9f7bbcb0f264b0d177e146f5c205169&scene=58&subscene=0#rd)\n- dotNet安全矩阵\n - [ ] [.NET 通过代码审计发现 ERP 系统中两个任意文件上传漏洞](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498371&idx=1&sn=d7e51b293b5afd36bf501f82d547e678&chksm=fa59546ecd2edd789772877b71ddaf889a171c0baebaed5bc5d84e1dc59ec80a6efff9da250e&scene=58&subscene=0#rd)\n - [ ] [.NET 安全攻防知识交流社区](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498371&idx=2&sn=cbf2bdba768768419faf4c4791dd2c1b&chksm=fa59546ecd2edd78ca9bfcbd53bc87340dd852aad612de53fa03fd221f56cf441ed2ed07d75c&scene=58&subscene=0#rd)\n - [ ] [通过 Sharp4SuoPoc 从原理上复现 Visual Studio 投毒事件](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498371&idx=3&sn=81f6211052fdbd84bfa5f5b833c14bea&chksm=fa59546ecd2edd78667ab8745d36715a39fb789abb78742e20b611f6645859db72e35cbd719d&scene=58&subscene=0#rd)\n- 绿盟科技CERT\n - [ ] [【漏洞通告】Oracle WebLogic Server远程代码执行与拒绝服务漏洞](https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488946&idx=1&sn=64c5620996cc0710ef9e2507f0fc0365&chksm=c2c642b9f5b1cbaf3667d5aae3b668b4e34e0cd89d95893a59c258488748706a1a17b3cd727e&scene=58&subscene=0#rd)\n- 安全学术圈\n - [ ] [期刊征文 | 暗网抑制前沿进展](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491610&idx=1&sn=8b6c9caf92435cbd9b76b77686619972&chksm=fe2d1f91c95a9687a5251b386c368783346127d6aa161b3035246676e5d21f1ba3e728035993&scene=58&subscene=0#rd)\n- 看雪学苑\n - [ ] [XCTF-SUCTF 2025-部分Pwn题解](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589076&idx=1&sn=a4d861f2130373f4a922c1529d1fba78&chksm=b18c271e86fbae08ca00e3c9447214607f5d2bfc89d8578c33474f3e72602833a386405c44e4&scene=58&subscene=0#rd)\n - [ ] [7-Zip高危漏洞曝光！攻击者可绕过安全机制远程执行代码，速升级](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589076&idx=2&sn=d0f764edebe291ce5b96f036fabe1a56&chksm=b18c271e86fbae08b860c61d822fe9c14f3216204f7890876285cf7d58d7086a9d18b2c2002e&scene=58&subscene=0#rd)\n - [ ] [更新5节！系统0day 安全-企业级网络设备固件漏洞挖掘（第7期）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589076&idx=3&sn=07bb4636837dcc2fbabded998321ad6e&chksm=b18c271e86fbae086f08a8628ae493c5626bf7b7941dbf05b7856553b1bd2011fe2f5765c6b1&scene=58&subscene=0#rd)\n- 信息安全国家工程研究中心\n - [ ] [小年纳福，满载祝愿](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498734&idx=1&sn=2d5de0a8283c56deb2559e0af561e376&chksm=feb67afdc9c1f3eb9c541f85173a09a82542709c15edcc23d9d2c392cfb951aaa72acb7894a7&scene=58&subscene=0#rd)\n- 安全圈\n - [ ] [【安全圈】特朗普上任首日，被囚 11 年的丝绸之路创始人获释](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=1&sn=bad8f735186597a7ef0a02f03be5d6e4&chksm=f36e7aa1c419f3b781ca98c7976cd5a7773de11683684d499d776e2d152beb4b6d086497c9b5&scene=58&subscene=0#rd)\n - [ ] [【安全圈】420万主机暴露，含VPN和路由器](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=2&sn=ce83805d756cb11a77b84cb9413465be&chksm=f36e7aa1c419f3b73ed660099b42c7414eb3133abb1020174807cc6d27124906b801371b772d&scene=58&subscene=0#rd)\n - [ ] [【安全圈】2024年近2亿人受影响，美国医疗成重点攻击目标](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=3&sn=126c3fc5cb7d6a7dc18e3e9a213e8170&chksm=f36e7aa1c419f3b73f5070ef02018ac480c01ce4abcf00f26ead2c9550281e5931adb0e75eec&scene=58&subscene=0#rd)\n - [ ] [【安全圈】7-Zip 漏洞可让远程攻击者绕过保护并执行任意代码](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=4&sn=2c06e2c2a5011eb86894033a1e6c41fc&chksm=f36e7aa1c419f3b7663e1033a2b71bafbadf19c12ebb839d8cc5c2a954da81be8f83c2a04925&scene=58&subscene=0#rd)\n- 青衣十三楼飞花堂\n - [ ] [你们可以调戏飞花堂了](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247487930&idx=1&sn=061cb565fbd0b5f0a5d754835656e58f&chksm=fab2d285cdc55b93453c5c4517e23599a8527cb0315540799c22c5ada2b5e5ba6d03d7da885e&scene=58&subscene=0#rd)\n- 威胁棱镜\n - [ ] [2024 年 Any.Run 恶意软件趋势报告](https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247487612&idx=1&sn=09a327bfbe389a1f868570bafd81d159&chksm=c1e9e7b0f69e6ea6aee11492fcd298ab2ea9cbba8c8dde6f81fa56d6591a6932ed53c6fadcab&scene=58&subscene=0#rd)\n- 中国信息安全\n - [ ] [专题·人工智能安全治理 | 人工智能安全治理的中国认知与方案](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235367&idx=1&sn=297855efd370925c872f5757635232be&chksm=8b58039ebc2f8a88688e473f6a44b4c239be99a0ba5386a09e21cf1d002e5dcdd7e2325f74a9&scene=58&subscene=0#rd)\n - [ ] [专家解读 | 魏亮：统筹布局国家数据基础设施，夯实数据要素价值释放基础](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235367&idx=2&sn=25380b016bd022eb3f12db20a0ccfc4e&chksm=8b58039ebc2f8a8869cac9ab3b937000109e1bc8586b3a96741dec89798acb3e5f9040f94935&scene=58&subscene=0#rd)\n - [ ] [专家观点 | 李峥：以合作开启AI“20万亿美元时代”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235367&idx=3&sn=3d746ccbf7a383c1aedc7863ea48df60&chksm=8b58039ebc2f8a880d7e7215965672500409cf64649cd90b5c34904471aa388bcb73103ba0f7&scene=58&subscene=0#rd)\n - [ ] [前沿 | 人工智能赋能网络空间作战](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235367&idx=4&sn=c17951f71c4e1d4580510b7ec0275644&chksm=8b58039ebc2f8a88b47c7a35f7dc8a087f071e32ef0532f12bf4124a44b87ca50bad5d909c41&scene=58&subscene=0#rd)\n - [ ] [国际 | 域外国家网络信息治理制度](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235367&idx=5&sn=6ddc0df87190ccc4b866a5a488ce4fb3&chksm=8b58039ebc2f8a8896afda5e765776e17020efd79d33c784f1366c5562fad84ffa2dff0a63cd&scene=58&subscene=0#rd)\n - [ ] [观点 | 面对深度伪造视频我们可以做什么](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235367&idx=6&sn=1ed425e7056807c6c44ddd42f4cb1512&chksm=8b58039ebc2f8a884bcb07c456537203d4b50492e19be7158c46536ddef4697201d18a32a6b9&scene=58&subscene=0#rd)\n - [ ] [评论 | 打破AI谣言“黑箱”，需要社会共治](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235367&idx=7&sn=2cb7b1348c0399a07373f5b5204e5aff&chksm=8b58039ebc2f8a88d98241c6473a4a5e4f8e0c55edc0ed31581cd87507a5b76f11dd3cadae3c&scene=58&subscene=0#rd)\n- 默安科技\n - [ ] [默安科技2025年春节值守安排](https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247500248&idx=1&sn=f1957f05b1fb0ede1aed87f4c0603dad&chksm=e93b36fade4cbfec2e3df9f97123506b4d13e096ac812e8ba98db9b2fcbc04073fb7839a847c&scene=58&subscene=0#rd)\n- 数世咨询\n - [ ] [2024年美国医疗数据泄露：585起事件波及1.8亿用户](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247534927&idx=1&sn=27a17db142bc885941f8e7cdff24512c&chksm=c1443bf2f633b2e463df61b01cdb06d125f74e36e30588da3656a4be570526cab7b66dfe24ae&scene=58&subscene=0#rd)\n - [ ] [公安部公布8起打击网络黑客犯罪典型案例](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247534927&idx=2&sn=2b32138cf1f6349d72f172a77aa0dd8e&chksm=c1443bf2f633b2e41762afc5662ff5168a1a405414ad7663b499af40bda5558d801e98db35a9&scene=58&subscene=0#rd)\n- 火绒安全\n - [ ] [QQ音乐遭遇“白加黑”利用，网站被劫持推广传奇私服](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247521743&idx=1&sn=7d0d609cffb045d031bdba1a74baee80&chksm=eb704bf0dc07c2e6f4ce1baf70c50eae31af800684d54c7bb88be8c67e11cdd0d9cef32321a1&scene=58&subscene=0#rd)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247521743&idx=2&sn=c4bb1454856772f63647451003483a12&chksm=eb704bf0dc07c2e6695c9ab8933305dc28c4873fdd7326e88f3d667e611aadc0c77505fa29e3&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [加沙真相被掩盖？BBC报道背后的“信息筛选”](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559158&idx=1&sn=6312581755ed3402c281e8b588aed0a5&chksm=87117cfdb066f5eb6185844e09e4da7ee5a256338379f42723a5bb295394a5eabd6bd525c664&scene=58&subscene=0#rd)\n - [ ] [揭露俄罗斯GRU的秘密行动，被指资助阿塔数千万美元](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559158&idx=2&sn=04237d391e688d8663478dec1917a891&chksm=87117cfdb066f5eb62c527d68166b9e7581ef040a0bb3f72b651e477165fb4e85671f8d4eb56&scene=58&subscene=0#rd)\n - [ ] [TikTok禁令：从事件始末到未来走向的深度剖析](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559158&idx=3&sn=330b69e1e87d2e662ee62ac84a2df529&chksm=87117cfdb066f5ebcc303b472a145a703011592673d932403cee104f36e1641206f07c3eba87&scene=58&subscene=0#rd)\n- 腾讯科恩实验室\n - [ ] [游戏辅助的隐藏威胁｜传播于游戏论坛的“Catlavan”后门分析报告](https://mp.weixin.qq.com/s?__biz=MzU1MjgwNzc4Ng==&mid=2247512659&idx=1&sn=ca99588eed415d2fdbdd87c4e666b662&chksm=fbfe8e56cc89074039ffcc9bb0544c3f4285b0fb28a480034307d88019f5b1fa8e610a5e494e&scene=58&subscene=0#rd)\n- 嘶吼专业版\n - [ ] [2024中国网络安全产业势能榜优能企业「电力行业」典型案例展示](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580933&idx=1&sn=200f586bf5e6ebc5b131de6824aa91ce&chksm=e9146d3fde63e429d8233882c021aca40e581dd642e4fb6699b9d5e926f90a92500d920177dd&scene=58&subscene=0#rd)\n - [ ] [Otelier 遭遇网络攻击导致数百万酒店预订信息泄露](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580933&idx=2&sn=0a59602d0f6ce921931618ecc83d85d6&chksm=e9146d3fde63e4290f78a380c4fe948178ab82a46e7ba25bb0f7b2a8e6881c6c448b52c28a91&scene=58&subscene=0#rd)\n- 国家互联网应急中心CNCERT\n - [ ] [网络安全信息与动态周报2025年第3期（1月13日-1月19日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499624&idx=1&sn=8064268553ca5916417015861fb3acd9&chksm=973acc0aa04d451cff471b69b6ae264370dfad346c96825845c4c4e2b621762d5af60277379b&scene=58&subscene=0#rd)\n- 补天平台\n - [ ] [辞暮尔尔，烟火年年 | 补天平台春节放假通知](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247507336&idx=1&sn=8d6c060a3c6485878ea8c3f08e2d93b5&chksm=eaf995c4dd8e1cd240f87a81e954cd8badfa1ee7bc6b8880f5c8f0755698a4140faa0ccf103e&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [新总统山寨币疯狂收割 500 亿美元，只是比特币国家战略一部分？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653072613&idx=1&sn=cb3a3b24855c3b969f4d586c72218f00&chksm=7e57d15349205845d2da4c3b22b0b9fadb97006921d79a96e31455c143851c835443f9164077&scene=58&subscene=0#rd)\n - [ ] [OpenAI+软银5000亿美元投资AI基建；新 ModelY、小米 YU7实车曝光；小红书启用「rednote」｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653072586&idx=1&sn=01f46944418d1ed105a097f841268626&chksm=7e57d17c4920586a12299e2a2473709a61c4b7d1d33e4885d4963adcc8b3f020d715bdcf93c8&scene=58&subscene=0#rd)\n- 360数字安全\n - [ ] [“以模制模”！360大模型安全解决方案获权威机构推荐](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579180&idx=1&sn=9c7924d356a6e97806314b7890ec70d4&chksm=9f8d2624a8faaf320e482da401f346c27512c8d91786d43e0dffb1009c7ebbe4c0274b1fcc5e&scene=58&subscene=0#rd)\n - [ ] [六大行业典型案例！360霸榜2024中国网络安全产业势能榜](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579180&idx=2&sn=9620c63a3e0e81ef64b85953dda3a2d7&chksm=9f8d2624a8faaf322a4f0e24696a63b8d7a266a0ec61b3612dc8b22a492bc005b327a0400fd7&scene=58&subscene=0#rd)\n- Krypt3ia\n - [ ] [Krypt3ia’s Survival Guide for Safe Communications in Today’s Internet and Social Media Landscape](https://krypt3ia.wordpress.com/2025/01/22/krypt3ias-survival-guide-for-safe-communications-in-todays-internet-and-social-media-landscape/)\n - [ ] [Krypt3ia Daily Threat Intel Digest 1.22.25](https://krypt3ia.wordpress.com/2025/01/22/krypt3ia-daily-threat-intel-digest-1-22-25/)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Ransomware in Healthcare: A Comprehensive Subsector Analysis](https://catchingphish.com/posts/f/ransomware-in-healthcare-a-comprehensive-subsector-analysis)\n - [ ] [Critical zero-days impact premium WordPress real estate plugins](https://www.bleepingcomputer.com/news/security/critical-zero-days-impact-premium-wordpress-real-estate-plugins/)\n - [ ] [Cloudflare CDN flaw leaks user location data, even through secure chat apps](https://www.bleepingcomputer.com/news/security/cloudflare-cdn-flaw-leaks-user-location-data-even-through-secure-chat-apps/)\n - [ ] [BreachForums admin to be resentenced after appeals court slams supervised release](https://therecord.media/breachforums-resentenced-supervised-release-admin)\n - [ ] [Telegram captcha tricks you into running malicious PowerShell scripts](https://www.bleepingcomputer.com/news/security/telegram-captcha-tricks-you-into-running-malicious-powershell-scripts/)\n - [ ] [Flashpoint Weekly Vulnerability Insights and Prioritization Report](https://flashpoint.io/blog/flashpoint-weekly-vulnerability-insights-prioritization/)\n - [ ] [China-linked hacker group targets victims in East Asia with malicious VPN installers](https://therecord.media/china-hacker-group-vpns-backdoor)\n - [ ] [Trump pardons Silk Road founder Ross Ulbricht](https://therecord.media/ross-ulbricht-silk-road-pardoned-trump)\n - [ ] [Trump admin tells all Democrats on intelligence oversight board to resign](https://therecord.media/trump-admin-tells-democrats-on-intel-oversight-board-to-resign)\n - [ ] [Cisco warns of denial of service flaw with PoC exploit code](https://www.bleepingcomputer.com/news/security/cisco-warns-of-denial-of-service-flaw-with-poc-exploit-code/)\n - [ ] [Iran and Russia deepen cyber ties with new agreement](https://therecord.media/russia-iran-cyber-ties-agreement)\n - [ ] [PowerSchool hacker claims they stole data of 62 million students](https://www.bleepingcomputer.com/news/security/powerschool-hacker-claims-they-stole-data-of-62-million-students/)\n - [ ] [Come tracciare la sicurezza della software supply chain](https://guerredirete.substack.com/p/come-tracciare-la-sicurezza-della)\n - [ ] [Trump administration fires members of cybersecurity review board in “horribly shortsighted” decision](https://techcrunch.com/2025/01/22/trump-administration-fires-members-of-cybersecurity-review-board-in-horribly-shortsighted-decision/)\n - [ ] [Oh my .. ! - Suspicious network traffic detected including Ransomware](https://dfir.ch/posts/suspicious_network_traffic_ransomware/)\n - [ ] [Conduent confirms cybersecurity incident behind recent outage](https://www.bleepingcomputer.com/news/security/conduent-confirms-cybersecurity-incident-behind-recent-outage/)\n - [ ] [Windows 11 24H2 now also offered to all eligible Windows 10 PCs](https://www.bleepingcomputer.com/news/microsoft/microsoft-expands-windows-11-24h2-rollout-to-eligible-windows-10-pcs/)\n - [ ] [MasterCard DNS Error Went Unnoticed for Years](https://krebsonsecurity.com/2025/01/mastercard-dns-error-went-unnoticed-for-years/)\n - [ ] [Use this AI chatbot prompt to create a password-exclusion list](https://www.bleepingcomputer.com/news/security/use-this-ai-chatbot-prompt-to-create-a-password-exclusion-list/)\n - [ ] [IPany VPN breached in supply-chain attack to push custom malware](https://www.bleepingcomputer.com/news/security/ipany-vpn-breached-in-supply-chain-attack-to-push-custom-malware/)\n - [ ] [Hackers exploit 16 zero-days on first day of Pwn2Own Automotive 2025](https://www.bleepingcomputer.com/news/security/hackers-exploit-16-zero-days-on-first-day-of-pwn2own-automotive-2025/)\n - [ ] [Trump administration removes private sector leaders from all DHS panels, including CSRB](https://therecord.media/trump-dhs-removal-private-sector-members-advisory-boards)\n - [ ] [Questions grow over whether Baltic Sea cable damage was sabotage or accidental](https://therecord.media/finland-eagle-s-tanker-questions-over-alleged-sabotage)\n - [ ] [Targeted supply chain attack against Chrome browser extensions](https://blog.sekoia.io/targeted-supply-chain-attack-against-chrome-browser-extensions/)\n - [ ] [How Threat Intelligence Lookup Helps Enterprises](https://any.run/cybersecurity-blog/how-threat-intelligence-lookup-helps-enterprises/)\n - [ ] [Australian Cyber Security Centre Targets Bulletproof Hosting Providers to Disrupt Cybercrime Networks](https://cyble.com/blog/acsc-highlights-bulletproof-hosting-providers/)\n - [ ] [La battaglia di Lyptsi e l’evoluzione della guerra robotizzata](https://www.guerredirete.it/la-battaglia-di-lyptsi-e-levoluzione-della-guerra-robotizzata/)\n - [ ] [Preventing Phishing Attacks, Before They Catch You](https://www.kelacyber.com/blog/preventing-phishing-attacks-before-they-catch-you/)\n - [ ] [Welhof - 107,292 breached accounts](https://haveibeenpwned.com/PwnedWebsites#Welhof)\n - [ ] [Frame & Optic - 15,678 breached accounts](https://haveibeenpwned.com/PwnedWebsites#FrameAndOptic)\n - [ ] [Denuvo Analysis | Connor-Jay's Blog](https://connorjaydunn.github.io/blog/posts/denuvo-analysis/)\n - [ ] [Cyble Finds Thousands of Security Vendor Credentials on Dark Web](https://cyble.com/blog/thousands-of-security-vendor-credentials-found-on-dark-web/)\n- 迪哥讲事\n - [ ] [某攻防演练｜从404页面到接管阿里云](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496928&idx=1&sn=871a0d0002a589ed9b98ae6ed97158f9&chksm=e8a5fe83dfd27795744d51346215bef2df4e6387a31ad6a46cc7cb07b0d3a71b274a5f895b82&scene=58&subscene=0#rd)\n- ICT Security Magazine\n - [ ] [Eventi Cybersecurity 2025 – Il futuro della sicurezza digitale](https://www.ictsecuritymagazine.com/notizie/eventi-cybersecurity-2025-il-futuro-della-sicurezza-digitale/)\n - [ ] [Anomaly Detection tramite Neural Networks: identificazione di pattern anomali e prevenzione dei cyber attacchi](https://www.ictsecuritymagazine.com/articoli/anomaly-detection-sec/)\n- The Grey Corner\n - [ ] [Accessing the Kubernetes API using captured credentials and HTTP clients](/2025/01/22/accessing-the-kubernetes-api-using-captured.html)\n- Posts By SpecterOps Team Members - Medium\n - [ ] [Entra Connect Attacker Tradecraft: Part 2](https://posts.specterops.io/entra-connect-attacker-tradecraft-part-2-672df0147abc?source=rss----f05f8696e3cc---4)\n- Have I Been Pwned latest breaches\n - [ ] [Frame & Optic - 15,678 breached accounts](https://haveibeenpwned.com/PwnedWebsites#FrameAndOptic)\n - [ ] [Welhof - 107,292 breached accounts](https://haveibeenpwned.com/PwnedWebsites#Welhof)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [ISC Stormcast For Thursday, January 23rd, 2025 https://isc.sans.edu/podcastdetail/9292, (Wed, Jan 22nd)](https://isc.sans.edu/diary/rss/31618)\n - [ ] [Catching CARP: Fishing for Firewall States in PFSync Traffic, (Wed, Jan 22nd)](https://isc.sans.edu/diary/rss/31616)\n - [ ] [ISC Stormcast For Wednesday, January 22nd, 2025 https://isc.sans.edu/podcastdetail/9290, (Wed, Jan 22nd)](https://isc.sans.edu/diary/rss/31614)\n- Schneier on Security\n - [ ] [AI Will Write Complex Laws](https://www.schneier.com/blog/archives/2025/01/ai-will-write-complex-laws.html)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #725: Project adaz testing part 3](https://www.hecfblog.com/2025/01/daily-blog-725-project-adaz-testing.html)\n- Computer Forensics\n - [ ] [RSMF samples](https://www.reddit.com/r/computerforensics/comments/1i7iq8q/rsmf_samples/)\n- The Hacker News\n - [ ] [Trump Terminates DHS Advisory Committee Memberships, Disrupting Cybersecurity Review](https://thehackernews.com/2025/01/trump-terminates-dhs-advisory-committee.html)\n - [ ] [Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet](https://thehackernews.com/2025/01/hackers-exploit-zero-day-in-cnpilot.html)\n - [ ] [Discover Hidden Browsing Threats: Free Risk Assessment for GenAI, Identity, Web, and SaaS Risks](https://thehackernews.com/2025/01/discover-hidden-browsing-threats-free.html)\n - [ ] [President Trump Pardons Silk Road Creator Ross Ulbricht After 11 Years in Prison](https://thehackernews.com/2025/01/president-trump-pardons-silk-road.html)\n - [ ] [PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack](https://thehackernews.com/2025/01/plushdaemon-apt-targets-south-korean.html)\n - [ ] [Oracle Releases January 2025 Patch to Address 318 Flaws Across Major Products](https://thehackernews.com/2025/01/oracle-releases-january-2025-patch-to.html)\n - [ ] [Mirai Botnet Launches Record 5.6 Tbps DDoS Attack with 13,000+ IoT Devices](https://thehackernews.com/2025/01/mirai-botnet-launches-record-56-tbps.html)\n- Krebs on Security\n - [ ] [MasterCard DNS Error Went Unnoticed for Years](https://krebsonsecurity.com/2025/01/mastercard-dns-error-went-unnoticed-for-years/)\n- Information Security\n - [ ] [How to make your own choatic Map function?](https://www.reddit.com/r/Information_Security/comments/1i7lq5h/how_to_make_your_own_choatic_map_function/)\n- Deeplinks\n - [ ] [Texas Is Enforcing Its State Data Privacy Law. So Should Other States.](https://www.eff.org/deeplinks/2025/01/texas-enforcing-its-state-data-privacy-law-so-should-other-states)\n - [ ] [The FTC’s Ban on GM and OnStar Selling Driver Data Is a Good First Step](https://www.eff.org/deeplinks/2025/01/ftcs-ban-gm-and-onstar-selling-driver-behavior-good-first-step)\n - [ ] [VICTORY! Federal Court (Finally) Rules Backdoor Searches of 702 Data Unconstitutional](https://www.eff.org/deeplinks/2025/01/victory-federal-court-finally-rules-backdoor-searches-702-data-unconstitutional)\n - [ ] [Protecting “Free Speech” Can’t Just Be About Targeting Political Opponents](https://www.eff.org/deeplinks/2025/01/protecting-free-speech-cant-just-be-about-targeting-political-opponents)\n- Deep Web\n - [ ] [Trump pardons Ross Ulbricht, fulfilling campaign promise](https://www.reddit.com/r/deepweb/comments/1i6y6ca/trump_pardons_ross_ulbricht_fulfilling_campaign/)\n - [ ] [I just know Ross feels like a million bucks. Just yesterday this man had a whole life sentence, shiiiiit Welcome home tho Ross !](https://www.reddit.com/r/deepweb/comments/1i7eaxs/i_just_know_ross_feels_like_a_million_bucks_just/)\n- BorderGate\n - [ ] [PHP Deserialisation](https://www.bordergate.co.uk/php-deserialisation/)\n- Security Affairs\n - [ ] [Pwn2Own Automotive 2025 Day 1: organizers awarded $382,750 for 16 zero-days](https://securityaffairs.com/173344/hacking/pwn2own-automotive-2025-day-1.html)\n - [ ] [Two ransomware groups abuse Microsoft’s Office 365 platform to gain access to target organizations](https://securityaffairs.com/173328/cyber-crime/ransomware-groups-abuse-microsofts-office-365-platform.html)\n - [ ] [Cloudflare blocked a record-breaking 5.6 Tbps DDoS attack](https://securityaffairs.com/173318/cyber-crime/cloudflare-blocked-record-5-6-tbps-ddos-attack.html)\n - [ ] [A 7-Zip bug allows to bypass the Mark of the Web (MotW) feature](https://securityaffairs.com/173310/hacking/7-zip-flaw-bypass-the-mark-of-the-web-motw.html)\n- 网安寻路人\n - [ ] [美商务部《保障ICT供应链：联网汽车》规则（全文翻译）](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247506068&idx=1&sn=c5502bc907a76a432d06dd4e9098d0ad&chksm=97e9657ea09eec68b79604df8d37e514ee417e337a622644f90cec47ae5279e4ff5696c56c0d&scene=58&subscene=0#rd)\n- Graham Cluley\n - [ ] [Half a million hotel guests at risk after hackers accessed sensitive data](https://www.bitdefender.com/en-us/blog/hotforsecurity/half-a-million-hotel-guests-at-risk-after-hackers-accessed-sensitive-data)\n- Your Open Hacker Community\n - [ ] [I made a hack for AssaultCube with a menu](https://www.reddit.com/r/HowToHack/comments/1i7mzwg/i_made_a_hack_for_assaultcube_with_a_menu/)\n - [ ] [using monitor and managed mode at the same time? (debian trixie, mt7921)](https://www.reddit.com/r/HowToHack/comments/1i7pe1p/using_monitor_and_managed_mode_at_the_same_time/)\n - [ ] [Where do you find enjoyment/interest from hacking/cyber sec](https://www.reddit.com/r/HowToHack/comments/1i7fb4c/where_do_you_find_enjoymentinterest_from/)\n - [ ] [need help making bad usb](https://www.reddit.com/r/HowToHack/comments/1i7klmu/need_help_making_bad_usb/)\n - [ ] [How to solve hcaptcha with solved Token?](https://www.reddit.com/r/HowToHack/comments/1i7h1d0/how_to_solve_hcaptcha_with_solved_token/)\n - [ ] [Directional help](https://www.reddit.com/r/HowToHack/comments/1i7esex/directional_help/)\n - [ ] [what is the difference between opening a new terminal and using tmux to start a new session?](https://www.reddit.com/r/HowToHack/comments/1i776tk/what_is_the_difference_between_opening_a_new/)\n - [ ] [fake email date](https://www.reddit.com/r/HowToHack/comments/1i79d59/fake_email_date/)\n - [ ] [Retrieving my website](https://www.reddit.com/r/HowToHack/comments/1i7edfe/retrieving_my_website/)\n - [ ] [HELP???](https://www.reddit.com/r/HowToHack/comments/1i7fced/help/)\n - [ ] [Notebook capable of brute-forcing 8-10 digit passwords (hashing algorithm doesn’t matter)](https://www.reddit.com/r/HowToHack/comments/1i798i0/notebook_capable_of_bruteforcing_810_digit/)\n - [ ] [i need strategies on how to hack something specific. please message me if you want to or can help](https://www.reddit.com/r/HowToHack/comments/1i76fcl/i_need_strategies_on_how_to_hack_something/)\n - [ ] [Impossible Bully](https://www.reddit.com/r/HowToHack/comments/1i75rsq/impossible_bully/)\n- Technical Information Security Content & Discussion\n - [ ] [Attacks on Maven proxy repositories](https://www.reddit.com/r/netsec/comments/1i7hf2w/attacks_on_maven_proxy_repositories/)\n - [ ] [Stealing HttpOnly cookies with the cookie sandwich technique](https://www.reddit.com/r/netsec/comments/1i7i6k7/stealing_httponly_cookies_with_the_cookie/)\n - [ ] [Pivot into Azure DevOps using stolen sessions](https://www.reddit.com/r/netsec/comments/1i7chgt/pivot_into_azure_devops_using_stolen_sessions/)\n - [ ] [Next.js, cache, and chains: the stale elixir](https://www.reddit.com/r/netsec/comments/1i779q3/nextjs_cache_and_chains_the_stale_elixir/)\n - [ ] [Testing Prompt Injection Attacks with promptmap2](https://www.reddit.com/r/netsec/comments/1i7dcs2/testing_prompt_injection_attacks_with_promptmap2/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [The Future Of The CISO - Jeff Pollard, Jess Burn - BSW #379](http://sites.libsyn.com/18678/the-future-of-the-ciso-jeff-pollard-jess-burn-bsw-379)\n"}, "c65eddf3e4b18efa8b44d11ce46dd66f2c3b9003": {"t": 1785772234.8849895, "n": 59529, "h": "12de2939d4dce70d", "c": "# 每日安全资讯（2025-01-23）\n\n- 奇安信攻防社区\n - [ ] [2.35版本以下堆沙盒绕过模板总结带例题](https://forum.butian.net/share/4063)\n - [ ] [巧用Chrome-CDP远程调用Debug突破JS逆向](https://forum.butian.net/share/4062)\n- Tenable Blog\n - [ ] [Oracle January 2025 Critical Patch Update Addresses 186 CVEs](https://www.tenable.com/blog/oracle-january-2025-critical-patch-update-addresses-186-cves)\n- Security Boulevard\n - [ ] [UK Mail Check: DMARC Reporting Changes to Know](https://securityboulevard.com/2025/01/uk-mail-check-dmarc-reporting-changes-to-know/)\n - [ ] [DEF CON 32 – The Village Peoples’ Panel What Really Goes On In A Village](https://securityboulevard.com/2025/01/def-con-32-the-village-peoples-panel-what-really-goes-on-in-a-village/)\n - [ ] [Life in the Swimlane with Marian Fehrenbacher, HR Assistant & Office Manager](https://securityboulevard.com/2025/01/life-in-the-swimlane-with-marian-fehrenbacher-hr-assistant-office-manager/)\n - [ ] [Google Cloud Security Threat Horizons Report #11 Is Out!](https://securityboulevard.com/2025/01/google-cloud-security-threat-horizons-report-11-is-out/)\n - [ ] [Randall Munroe’s XKCD ‘Human Altitude’](https://securityboulevard.com/2025/01/randall-munroes-xkcd-human-altitude/)\n - [ ] [Filtered to Perfection: Votiro’s Two-Layer Approach to Cybersecurity](https://securityboulevard.com/2025/01/filtered-to-perfection-votiros-two-layer-approach-to-cybersecurity/)\n - [ ] [Entra Connect Attacker Tradecraft: Part 2](https://securityboulevard.com/2025/01/entra-connect-attacker-tradecraft-part-2/)\n - [ ] [Rethinking Credential Security](https://securityboulevard.com/2025/01/rethinking-credential-security/)\n - [ ] [DEF CON 32 – UDSonCAN Attacks Discovering Safety Critical Risks By Fuzzing](https://securityboulevard.com/2025/01/def-con-32-udsoncan-attacks-discovering-safety-critical-risks-by-fuzzing/)\n - [ ] [How to Handle Secrets at the Command Line [cheat sheet included]](https://securityboulevard.com/2025/01/how-to-handle-secrets-at-the-command-line-cheat-sheet-included/)\n- 安全客-有思想的安全新媒体\n - [ ] [最高级！360获评工信部CAPPVD“三星技术支撑单位”称号](https://www.anquanke.com/post/id/303728)\n - [ ] [cve-2024-12857： AdForest 主题中的关键漏洞允许完全接管帐户，数千网站面临风险](https://www.anquanke.com/post/id/303725)\n - [ ] [新型 Mirai 变种 Murdoc_Botnet 通过物联网漏洞发起 DDoS 攻击](https://www.anquanke.com/post/id/303722)\n - [ ] [2024年，Redline、Vidar和Raccoon恶意软件窃取了10亿个密码](https://www.anquanke.com/post/id/303719)\n - [ ] [CVE-2025-21298 检测： Microsoft Outlook 中的严重零点击 OLE 漏洞会导致远程代码执行](https://www.anquanke.com/post/id/303716)\n - [ ] [Bitbucket 服务因全球大停机而“严重瘫痪”](https://www.anquanke.com/post/id/303713)\n - [ ] [假冒的 Homebrew Google 广告以恶意软件为目标的 Mac 用户](https://www.anquanke.com/post/id/303710)\n - [ ] [Cloudflare 缓解了破纪录的 5.6 Tbps DDoS 攻击](https://www.anquanke.com/post/id/303707)\n - [ ] [”偷偷摸摸的日志“微软欺骗计划避开了双因素安全系统](https://www.anquanke.com/post/id/303704)\n - [ ] [前中情局分析员承认泄露绝密文件罪](https://www.anquanke.com/post/id/303701)\n- CXSECURITY Database RSS Feed - CXSecurity.com\n - [ ] [Cleo LexiCom / VLTrader / Harmony 5.8.0.23 Remote Code Execution](https://cxsecurity.com/issue/WLB-2025010023)\n - [ ] [Ivanti Buffer Overflow Proof of Concept](https://cxsecurity.com/issue/WLB-2025010022)\n - [ ] [LibreNMS Authenticated RCE](https://cxsecurity.com/issue/WLB-2025010021)\n- InfoSec Write-ups - Medium\n - [ ] [Agent Sudo CTF — TryHackMe Writup](https://infosecwriteups.com/agent-sudo-ctf-tryhackme-writup-081d561408de?source=rss----7b722bfd1b8d---4)\n- 安全脉搏\n - [ ] [记一次有点抽象的渗透经历](https://www.secpulse.com/archives/205044.html)\n - [ ] [CVE复现之老洞新探（CVE-2021-3156）](https://www.secpulse.com/archives/205000.html)\n - [ ] [在一次渗透中学会编写Tamper脚本](https://www.secpulse.com/archives/205058.html)\n- Recent Commits to cve:main\n - [ ] [Update Wed Jan 22 20:24:04 UTC 2025](https://github.com/trickest/cve/commit/7d634b304016aab3bf32893e04ac98344c8a90d0)\n - [ ] [Update Wed Jan 22 12:24:00 UTC 2025](https://github.com/trickest/cve/commit/5709cff610e63bf7d61893e46720b8f8ab18d7f3)\n - [ ] [Update Wed Jan 22 04:28:36 UTC 2025](https://github.com/trickest/cve/commit/350528609cf8c384d52a5bb8542ffa105cc6b361)\n- SecWiki News\n - [ ] [SecWiki News 2025-01-22 Review](http://www.sec-wiki.com/?2025-01-22)\n- 一个被知识诅咒的人\n - [ ] [【Python运维】Python与Terraform结合：实现云基础设施的自动化部署](https://blog.csdn.net/nokiaguy/article/details/145305290)\n - [ ] [Python自动化运维：一键掌控服务器的高效之道](https://blog.csdn.net/nokiaguy/article/details/145305263)\n- obaby@mars\n - [ ] [小年 — 这真的就要过年了？](https://h4ck.org.cn/2025/01/19030)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [Otelier 数据泄露导致数百万酒店预订信息泄露](https://www.4hou.com/posts/kgjv)\n - [ ] [守正创新，持续突破！国投智能数字政务业务年终盘点](https://www.4hou.com/posts/mk03)\n - [ ] [Check Point 公司发布《2025 年安全报告》显示，随着网络威胁生态系统日渐成熟，网络攻击次数骤增 44%](https://www.4hou.com/posts/gyDj)\n- Trustwave Blog\n - [ ] [Trustwave SpiderLabs: Ransomware Attacks Against the Energy and Utilities Sector Up 80%](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/trustwave-spiderlabs-ransomware-attacks-against-the-energy-and-utilities-sector-up-80-percent/)\n- Doonsec's feed\n - [ ] [我实验室2篇论文被WWW 2025接收！](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247492834&idx=1&sn=36396f6cc39b8c9b87eead00faf8c111)\n - [ ] [快速上手渗透测试报告写作：从WP到甲方报告的一站式指南](https://mp.weixin.qq.com/s?__biz=MzA3NDE0NTY0OQ==&mid=2247484103&idx=1&sn=285be13254e14304496c192d45c05002)\n - [ ] [美国财政部再对中国一家网络安全公司和一名个人实施制裁](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485452&idx=1&sn=4384fb7ca51f3e1139db829611f6fc43)\n - [ ] [【直卖实拍】北七家3居变4居豪装，理想楼层、户型、朝向](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485452&idx=2&sn=c6375b484d936854df5ada100b9ff24e)\n - [ ] [【干货】笑傲职场的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485452&idx=3&sn=2a8340ae9404ef7ccfe64398b85e2267)\n - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485452&idx=4&sn=fcd594b0e515f7eadff4e4df46c29ba5)\n - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485452&idx=5&sn=a2cf457c4941e1e16638dd4bddd10903)\n - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485452&idx=6&sn=a0bf66a3ff572c1df283577b241ea3cc)\n - [ ] [Windows进阶版安全事件应急响应分析](https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538503&idx=1&sn=823611c94f399812ab24f75ac97ade94)\n - [ ] [云安全(二)：对象存储](https://mp.weixin.qq.com/s?__biz=MzkyMjUzNTM1Mw==&mid=2247486992&idx=1&sn=f553fbcdf572da09cdf767e6c39b230f)\n - [ ] [国内没人讲，国外电动车测评不惯着新势力新能源汽车](https://mp.weixin.qq.com/s?__biz=MzkwMjQyNjAxMA==&mid=2247484825&idx=1&sn=2fdaa5a56346aac19da121b702f3a1fd)\n - [ ] [【漏洞预警】pearProjectApi存在SQL注入漏洞](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489507&idx=1&sn=cdbcc7dac604210a7fa351e96c1bbaa9)\n - [ ] [【漏洞预警】YesWiki 存在经过身份验证的任意文件删除漏洞(CVE-2025-24019)](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489507&idx=2&sn=43309d019012fc2d5146638f21cf4cdb)\n - [ ] [link-tools工具箱](https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486391&idx=1&sn=0f8c045e6dfb3362f22fb8d1a7f32da2)\n - [ ] [抓包分析FTP协议及原理](https://mp.weixin.qq.com/s?__biz=MzAxNTg1MDYxNA==&mid=2247489174&idx=1&sn=6e16fbcc3137f63cf7a73a438af5e7e4)\n - [ ] [浅谈《通信网络安全防护管理办法》](https://mp.weixin.qq.com/s?__biz=MzI4NzA1Nzg5OA==&mid=2247485688&idx=1&sn=2dcf3598a5664123095e9ca1608b8800)\n - [ ] [【技巧】开源情报（OSINT）：套接字理论（Socket Theory）情报分析师如何更好隐藏自己](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148647&idx=1&sn=4df1f367b82341e8c092ea12a7dec4c8)\n - [ ] [强烈推荐|超好用的网安大模型](https://mp.weixin.qq.com/s?__biz=Mzg5NTY3NTMxMQ==&mid=2247484536&idx=1&sn=b056b6036c8dc99ff081f004dc23caff)\n - [ ] [使用 Evilginx 轻松绕过 MFA](https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504689&idx=1&sn=ebe28721272600d656ad2acd2611a716)\n - [ ] [OSINT|值得拥有的TOP5工具](https://mp.weixin.qq.com/s?__biz=MzkxMDIwMTMxMw==&mid=2247494462&idx=1&sn=ed829c96e96e34bcd8db231435dcfe19)\n - [ ] [我要学习 | 本公众号第一次公开课：前端爆破加解密、JS调试分析加密爆破](https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247488005&idx=1&sn=592dae68ea021e9ac446992060cf267c)\n - [ ] [信创已经到关键期--人人必须要知道的政策](https://mp.weixin.qq.com/s?__biz=MzkwNDI0MjkzOA==&mid=2247485838&idx=1&sn=dd4be512901b9a931d6d7681f3b1e5b1)\n - [ ] [ctftools-all-in-oneV7.5](https://mp.weixin.qq.com/s?__biz=MzI1NzUxOTUzMA==&mid=2247485778&idx=1&sn=3b0ff74d522d161b0a91bd13453019f1)\n - [ ] [搞网络安全怎么赚大钱！！！](https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247483972&idx=1&sn=5f01535fafc100416448c9fb3a7162a6)\n - [ ] [红队开发：让自己的Shellcode实现SMC](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490015&idx=1&sn=0cdb71c24b75dcb4bf801925daf80188)\n - [ ] [CTF:Phar反序列化漏洞学习笔记](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490015&idx=2&sn=e906ce0834778a54573549a04e207af6)\n - [ ] [Ansible fetch模块详解：轻松从远程主机抓取文件](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490015&idx=3&sn=2345a568a480fa2af4f3055b4a20e422)\n - [ ] [【工具推荐】URLFinder-x 信息收集工具](https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490015&idx=4&sn=e51a2edc4bd80f79155f95e73f56a74e)\n - [ ] [【安全圈】特朗普上任首日，被囚 11 年的丝绸之路创始人获释](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=1&sn=bad8f735186597a7ef0a02f03be5d6e4)\n - [ ] [【安全圈】420万主机暴露，含VPN和路由器](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=2&sn=ce83805d756cb11a77b84cb9413465be)\n - [ ] [【安全圈】2024年近2亿人受影响，美国医疗成重点攻击目标](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=3&sn=126c3fc5cb7d6a7dc18e3e9a213e8170)\n - [ ] [【安全圈】7-Zip 漏洞可让远程攻击者绕过保护并执行任意代码](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=4&sn=2c06e2c2a5011eb86894033a1e6c41fc)\n - [ ] [2025年最新渗透测试虚拟机工具箱汇总](https://mp.weixin.qq.com/s?__biz=MzkyMzg4MTY4Ng==&mid=2247484594&idx=1&sn=585d3369395a3f45ab99f107d28a3463)\n - [ ] [特斯拉电动汽车越狱](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247619987&idx=1&sn=d6821c8b8105f5f77f3461cfbd94e684)\n - [ ] [基于 Linux 的汽车计算机的安全隔离与案例研究](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247619987&idx=2&sn=ee7b65f10a49000391f08bc76432de8a)\n - [ ] [远程车辆控制的关键 - 自动驾驶域控制器 百度](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247619987&idx=3&sn=1387d6e1758c003c565cdbf395dfc69f)\n - [ ] [某攻防演练｜从404页面到接管阿里云](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496928&idx=1&sn=871a0d0002a589ed9b98ae6ed97158f9)\n - [ ] [关于召开宁夏商用密码应用安全性评估业务培训工作会议的预通知](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633960&idx=1&sn=50eb0fb22088f21b070e66f7d7e9584a)\n - [ ] [江苏省数据条例正式发布](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633960&idx=2&sn=bb5de81413dedac432a0b709af22b410)\n - [ ] [《Web3.0数字身份密码安全体系研究（2024年）》正式发布](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633960&idx=3&sn=643e1c6917e0dce418857355ad3c1c9b)\n - [ ] [专家解读 | 魏亮：统筹布局国家数据基础设施，夯实数据要素价值释放基础](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633960&idx=4&sn=134507671490e2845e85db11c3be566d)\n - [ ] [美国IT供应商被黑，导致多地公共服务被迫中断多天](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633960&idx=5&sn=6918146fda0592a974fd01cf1925c11c)\n - [ ] [乘风破浪，行稳致远 —— 新潮信息2024年度盛典圆满落幕](https://mp.weixin.qq.com/s?__biz=MzkwNDcyODgwOQ==&mid=2247486769&idx=1&sn=ec8b1275fbd5a504490eef87766c3aa1)\n - [ ] [安全专家亲测演示：用这个方法，邻居家的WiFi密码一碰就开](https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489766&idx=1&sn=605087abaf5c1f6db011dcd9e668e8b0)\n - [ ] [人间逢小年，祝大家万事皆如愿](https://mp.weixin.qq.com/s?__biz=Mzg4NzQ4MzA4Ng==&mid=2247485185&idx=1&sn=7fd770df097013d9a338a34a41d0bc8c)\n - [ ] [缺乏的不是资源，而是真正的教育](https://mp.weixin.qq.com/s?__biz=MzkwODY2MzMyMA==&mid=2247484531&idx=1&sn=6283dfe0b1f0cd0be19c277bdf2f8076)\n - [ ] [汇编语言基础教程](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490098&idx=1&sn=ed0be305f2c8c9de0fff326bc45f1ce9)\n - [ ] [Remcos RAT远控木马分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247490098&idx=2&sn=4a0e7ccccb8b29ea9fb45b2e6470e088)\n - [ ] [CE了解](https://mp.weixin.qq.com/s?__biz=MzkxMjYyMjA3Mg==&mid=2247485392&idx=1&sn=a3204187202136c21f954c939c9d6a3d)\n - [ ] [App对抗系列—Root检测对抗](https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247484886&idx=1&sn=dd4e714506b98b4971ca44a8c838c966)\n - [ ] [【信科动态】蓄势待发 共创辉煌 — 信科共创2025年会圆满举办](https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485220&idx=1&sn=9a2dbc483e538d6cfa865f6dd956dbfd)\n - [ ] [【权威发布】CNNIC最新《中国互联网络发展状况统计报告》发布](https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485220&idx=2&sn=0a2a314bc37a8521c1d2716667929149)\n - [ ] [【数安天地】2025年我国数据领域明确重点任务](https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485220&idx=3&sn=32cb839b2a727c01270ea47e1df58290)\n - [ ] [【AI安全】2024年度人工智能……](https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485220&idx=4&sn=abfa6ea3dca53098a88613093bb4449e)\n - [ ] [【网安前沿】人数超TikTOK！……](https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485220&idx=5&sn=5c373b4d772f9ce5160eed1cb8773743)\n - [ ] [混沌](https://mp.weixin.qq.com/s?__biz=MzIwODc2NjgxNA==&mid=2247484977&idx=1&sn=bfdeaa70d34c3c8a5d24edb80197bdc6)\n - [ ] [带你解锁编码新世界！--随波逐流CTF编码工具使用教程39 --polybius棋盘密码](https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247489560&idx=1&sn=f13a82f3662c6aaff65700a0bb33ad1c)\n - [ ] [Coremail邮箱客户端安装与账户配置（macOS x86版）](https://mp.weixin.qq.com/s?__biz=MzkxMjY3MTI4Mg==&mid=2247484607&idx=1&sn=f63e575f4158cdb39e613b1f7c85eb5a)\n - [ ] [关于公示2025年工业和信息化部移动互联网APP产品安全漏洞专业库支撑单位的通知](https://mp.weixin.qq.com/s?__biz=MzkyMjM4MzY5Ng==&mid=2247486052&idx=1&sn=672267c39bd61c609b8a70aa6fe4dba4)\n - [ ] [支撑单位遴选 | 关于开展2025年工业和信息化部移动互联网APP产品安全漏洞专业库支撑单位遴选工作的通知](https://mp.weixin.qq.com/s?__biz=MzkyMjM4MzY5Ng==&mid=2247486052&idx=2&sn=df504e3f60bd71a5f51f6ddfc79ceac2)\n - [ ] [AI快速上手：新手如何用ChatGPT写好医学影像学文献综述的全攻略！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493247&idx=1&sn=e8b8fb7965bdb36fbd8d60043f77110e)\n - [ ] [AI驱动教育学论文初稿快速生成：核心流程与实战指北！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493247&idx=2&sn=e818116fd4106e8a0f70c6dc696a890e)\n - [ ] [AI驱动下的法语论文文献综述战法：半天高效清空20个刊物的内参秘籍。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493247&idx=3&sn=bd8b3f8df3fabad7af824fd5f9a552ee)\n - [ ] [AI时代：教你玩转小学教育论文大纲的落实与完善攻略。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493247&idx=4&sn=aaae4c45ec27234ca0aed2ae90c7dc4c)\n - [ ] [AI时代：ChatGPT助你一天搞定法语论文大纲完善内部高阶指南！](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493247&idx=5&sn=abd5d43185cc32d17ba024114fd783ad)\n - [ ] [安世加实战派沙龙第二期之办公终端安全在北京成功举办(2025.01.11/周六、北京）](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541441&idx=1&sn=b4996a6803ef5cac9358f5c0abc692c7)\n - [ ] [【工具分享】HermeticRansom勒索病毒恢复工具](https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247496544&idx=1&sn=b0532021322be29222853520f63e6c37)\n - [ ] [起床了吗，我要结婚了](https://mp.weixin.qq.com/s?__biz=Mzg4NDg2NTM3NQ==&mid=2247484692&idx=1&sn=c1bd4168ea28a88992c34b9370b2afcc)\n - [ ] [下辈子别做网安了](https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490797&idx=1&sn=f884b6f04d1985bae7bb9a55eb1c2706)\n - [ ] [区块链学习笔记之初探以太坊](https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037431&idx=1&sn=33663e3a850d9c8b658bad904c08ce0a)\n - [ ] [领导者不变，中国厂商全无｜Gartner 访问管理 2024 MQ 发布](https://mp.weixin.qq.com/s?__biz=MzkzNjE5NjQ4Mw==&mid=2247543326&idx=1&sn=8f60ed73ede9f28b5c71d30f94a81e9e)\n - [ ] [DeepSeek+OpenAI Swarm,做Agent的绝配](https://mp.weixin.qq.com/s?__biz=Mzg5NTMxMjQ4OA==&mid=2247485586&idx=1&sn=fa8cd22e23818be8a4f85c034b2653e9)\n - [ ] [《灵根换途：重铸荣耀》](https://mp.weixin.qq.com/s?__biz=MzI1NDU2MzAzNQ==&mid=2247487775&idx=1&sn=bdeb4114b72038469c576c5cd7ef0abf)\n - [ ] [数据经纪商Gravy Analytics遭黑客攻击 数百万用户位置信息泄露](https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251252&idx=1&sn=08c27d24f45df08156ccbb320a916ca7)\n - [ ] [关于调整半决赛入围队伍名单公示](https://mp.weixin.qq.com/s?__biz=MzI1NzQ0NTMxMQ==&mid=2247490073&idx=1&sn=1196e582372868c1cdcdc85590fe6ec2)\n - [ ] [小年 | 小年辞旧岁，新春序幕开](https://mp.weixin.qq.com/s?__biz=MzU3MDA0MTE2Mg==&mid=2247492489&idx=1&sn=f7ae189fc8a91f74ba5b7ca2cd070e3d)\n - [ ] [今日，小年](https://mp.weixin.qq.com/s?__biz=MzkyNDUxNTQ2Mw==&mid=2247485811&idx=1&sn=b6f89d271a02e0fe0ecaa468674cd746)\n - [ ] [美商务部《保障ICT供应链：联网汽车》规则（全文翻译）](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247506068&idx=1&sn=c5502bc907a76a432d06dd4e9098d0ad)\n - [ ] [小年纳福 喜迎新春](https://mp.weixin.qq.com/s?__biz=MzI2NDYzNjY0Mg==&mid=2247501129&idx=1&sn=78727fa4943031118593e6589cac1f03)\n - [ ] [Payloads for LFR/LFD](https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486492&idx=1&sn=2a26b6645da3eac6fb5fd1bb53bb5ba9)\n - [ ] [秋风AI代码审计工具1.0 上线！](https://mp.weixin.qq.com/s?__biz=MzkzMzczODA0OQ==&mid=2247484087&idx=1&sn=946eec98d2649ebae893bd340fc6f023)\n - [ ] [CERT-UA 警告网络诈骗者冒充该机构利用虚假AnyDesk请求控制目标](https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793938&idx=2&sn=8ef11a28a3fa79bc3bd6ed37a79f3e6a)\n - [ ] [《信息安全学报》“智能语音攻防技术”专栏征稿函](https://mp.weixin.qq.com/s?__biz=MzI5ODA1NjE5NQ==&mid=2652014647&idx=1&sn=082ad04011ce661af109ade0f59b2d6f)\n - [ ] [税前年薪50-200万，高层次网络安全人才招聘](https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247505628&idx=1&sn=b6131a18925f1d2c27b52a044ac7c20a)\n - [ ] [江西银行2025年社会招聘网络安全岗](https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247505628&idx=2&sn=48d0b333d0c895679e394c93cb955922)\n - [ ] [年薪50-80万！湖南省密码工程技术研究中心招聘信息安全专业](https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247505628&idx=3&sn=bc981945ca96eb0dd824e4fb8aef48d9)\n - [ ] [3000+网安笔记](https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247505628&idx=4&sn=6bafb661c0c79d06eaea7321bccf9b1d)\n - [ ] [期刊征文 | 暗网抑制前沿进展](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491610&idx=1&sn=8b6c9caf92435cbd9b76b77686619972)\n - [ ] [红包封面第二弹！](https://mp.weixin.qq.com/s?__biz=MzUzMDQ1MTY0MQ==&mid=2247506597&idx=1&sn=e0fb7f14d115e5e6a81cf58be6938690)\n - [ ] [工信部等十四部门联合印发《关于加强极端场景应急通信能力建设的意见》](https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247539969&idx=1&sn=d0b20062f59c4c2627623f4a0110a99a)\n - [ ] [【解读】五问+一图，读懂《关于加强极端场景应急通信能力建设的意见》](https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247539969&idx=2&sn=fc62411ebb093dc6e8ba7a1a293e7968)\n - [ ] [祥和小年至，新岁启新程！](https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497015&idx=1&sn=d54c943e8370d2b504197ce7125a9bd3)\n - [ ] [.NET 安全攻防知识交流社区](https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247490330&idx=2&sn=a8b44c92013aa2897bc50f5869a74a94)\n - [ ] [梅赛德斯—奔驰信息娱乐系统漏洞详细信息披露](https://mp.weixin.qq.com/s?__biz=MzIzNDIxODkyMg==&mid=2650085835&idx=1&sn=55b9b7d447e31ed5e6a7016fc118aba7)\n - [ ] [北方小年|糖瓜祭灶 新年来到](https://mp.weixin.qq.com/s?__biz=MzIzNDIxODkyMg==&mid=2650085835&idx=2&sn=62fa38baa6534b965a3ee784c8c23c5b)\n - [ ] [定制红包封面、蛇年手机壁纸，天融信愿您新的一年福气满屏！](https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650963107&idx=1&sn=9bbaad123506d1da711ab3643c51c8d5)\n - [ ] [小年快乐 | 文末领取励行安全专属红包封面](https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484280&idx=1&sn=2263d238e09a658039a7a2399a3257d9)\n - [ ] [Lazarus组织发起“Operation 99”行动，通过虚假LinkedIn资料瞄准Web3开发者](https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900117&idx=1&sn=147a51e42956ef762d607ad4db560f1b)\n - [ ] [红包封面免费领](https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900116&idx=1&sn=6a902bce7b923dcbb6d636c0bd33e2c7)\n - [ ] [福利！免费商用，1500+组件低代码工业数据连接及可视化平台](https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454936685&idx=1&sn=c2daf9fcc60bce9090096a88fc9bc122)\n - [ ] [转储LSASS内存的强大神器](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489037&idx=1&sn=690f85a085d60322cbdef81ea014958a)\n - [ ] [小事](https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489037&idx=2&sn=6baba774e15189c2118e75a96615ba4a)\n - [ ] [Wireshark Troubleshooting 系列合集目录](https://mp.weixin.qq.com/s?__biz=MzA5NTUxODA0OA==&mid=2247493128&idx=1&sn=027c2d79a975850f77ba85e1c7325e23)\n - [ ] [网安之道](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496713&idx=1&sn=f99ce8d0ff597b9725371ec789d1627d)\n - [ ] [国自然中标真不难！十年评审专家1v1精修你的本子，中标率提升58%](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496713&idx=2&sn=5123c0c462454c69a097d5c90b01ac29)\n - [ ] [云计算与零信任架构的结合：实现更高安全性](https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247509854&idx=1&sn=c873f0835b8ef33b4e64f63598b41c66)\n - [ ] [Go shellcode加载器 免杀火绒 360核晶等主流杀软](https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247484753&idx=1&sn=b8aa28771e6ca5e4ac83058d2a8f18cb)\n - [ ] [小年至，归期近；有安全，更团圆。](https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870812&idx=1&sn=422066cfd72bd12d7ff94673d46c0035)\n - [ ] [互联网大厂黑话指南（速成版）](https://mp.weixin.qq.com/s?__biz=MzI1NzI5NDM4Mw==&mid=2247498587&idx=1&sn=f7b972440193d95d234bd9e501fad124)\n - [ ] [十强！威努特斩获2024年网络安全优秀评选三项大奖](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651130654&idx=1&sn=72ece0485d56a8dbc791b20108f0943c)\n - [ ] [MySQL数据误删的恢复分享](https://mp.weixin.qq.com/s?__biz=Mzg3NTU3NTY0Nw==&mid=2247489522&idx=1&sn=b85a0e1b057a832db9ec56399cc6439f)\n - [ ] [先向下扎根，再向上生长](https://mp.weixin.qq.com/s?__biz=MzU4NjY3OTAzMg==&mid=2247514862&idx=1&sn=6c93e8560b7d557a43c0f9b7263d6dd0)\n - [ ] [全球瞭望｜网络安全重大事件精选](https://mp.weixin.qq.com/s?__biz=MzU4NjY3OTAzMg==&mid=2247514862&idx=2&sn=bcdf5e64844202a08a115bfeadb0c886)\n - [ ] [JWT原理及利用](https://mp.weixin.qq.com/s?__biz=Mzg5MDgzOTk2Mg==&mid=2247484651&idx=1&sn=9cd5604806e7af154fa2c88241523b12)\n - [ ] [一些木马反制技巧](https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247510449&idx=1&sn=954231b814fb3c633b2bac2dc12665b3)\n - [ ] [漏洞预警 | 叁拾叁OA SQL注入漏洞](https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492118&idx=2&sn=0cc8d46b2006a58fe76e0aceeec3f5e3)\n - [ ] [工具 | proxypin](https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492118&idx=4&sn=6d72cbe7b6abd76539ff4b90c246e621)\n - [ ] [载誉前行｜天地和兴荣膺CCIA年度先进会员单位](https://mp.weixin.qq.com/s?__biz=MjM5Mzk0MDE2Ng==&mid=2649608840&idx=1&sn=822e24931c6b118b52381dd6a0725082)\n - [ ] [2024年度网络安全漏洞威胁态势研究报告](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264326&idx=2&sn=edd9feb6f1f3d5fb7467e5a4a1bc8ea3)\n - [ ] [网络弹性评价流程](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264326&idx=3&sn=0064271e80a9c395235db44394646be4)\n - [ ] [网络与数据安全治理前沿洞察（2025年第1期）](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264326&idx=4&sn=972c2472a69641e01ab75dec91607976)\n - [ ] [2025年低空经济未来发展趋势分析](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264326&idx=5&sn=c695125ae9234c1bbee0ab30a82644fe)\n - [ ] [GB∕T 44778-2024 汽车诊断接口信息安全技术要求及试验方法](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264326&idx=8&sn=828ad37f9e1fecb482a24e86e66fea7b)\n - [ ] [HSQLDB 安全测试指南](https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487207&idx=2&sn=627d12dc6ee86ec6a128d2c4d24e2024)\n - [ ] [RPA在电力行业中的应用](https://mp.weixin.qq.com/s?__biz=MjM5NTk5Mjc4Mg==&mid=2655222700&idx=1&sn=135b0046a01810bcbeed431638cb4038)\n - [ ] [Any-Reader：把你的VSCode变成摸鱼娱乐中心！](https://mp.weixin.qq.com/s?__biz=MzA4MjkzMTcxMg==&mid=2449046750&idx=1&sn=8520440de7e2c9aa42cf4933b5394a43)\n - [ ] [2024年度漏洞态势大揭秘：你的网络安全防线还稳固吗？（附下载）](https://mp.weixin.qq.com/s?__biz=MzkyODY5ODAyOA==&mid=2247489419&idx=1&sn=27d48e4898f7de1f017a5a7bc5bc6a4e)\n - [ ] [13,000个MikroTik路由器因恶意垃圾邮件和网络攻击被僵尸网络劫持](https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672513&idx=1&sn=955e9169d886553304f98bc40ed4718e)\n - [ ] [暗网情报：高价Rust反向Shell-美ISP和网络设备制造商网络访问权限](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506983&idx=1&sn=2130ab0ccce5bafd3881b7e250b88caa)\n - [ ] [5th域安全微讯早报【20250122】019期](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506983&idx=2&sn=0327ca894b9af92ef9b7122f7e70a205)\n - [ ] [今日直播课程（ISO/IEC 27001），敬请您关注](https://mp.weixin.qq.com/s?__biz=MzA5OTEyNzc1Nw==&mid=2247486014&idx=1&sn=f9a261134b643ac91d42ec2d51189828)\n - [ ] [ISO 14001: 2015 标准详解与实施（20）9.1.1 总则](https://mp.weixin.qq.com/s?__biz=MzA5OTEyNzc1Nw==&mid=2247486014&idx=2&sn=51c00f82998000dfcbb64df3898c9de4)\n - [ ] [“间谍”正在潜入你的手机](https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489786&idx=1&sn=4b1c4df2d56e34fa521c69996bf42e3f)\n - [ ] [黑客团伙IntelBroker声称已窃取HPE内部机密数据 后者表示正在调查](https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247496070&idx=1&sn=2336cc68b4e452a35795193173f98854)\n - [ ] [一图读懂《关于加强极端场景应急通信能力建设的意见》](https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247496070&idx=2&sn=d0fa64e3e92467220eb923a4612e7960)\n - [ ] [【神兵利器】JAVA JMX漏洞综合利用工具](https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247495179&idx=1&sn=0d366655fb6bb139775fc4d4fe333652)\n - [ ] [JBoss 4.x JBossMQ JMS反序列化](https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247495179&idx=2&sn=dce36e9b572732a9fddfa1774bcea24c)\n - [ ] [ViewState反序列化漏洞详解](https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485410&idx=1&sn=c516da4c5bcf9729e270e70dc0c6e61d)\n - [ ] [linux清除了文件没有释放空间](https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485410&idx=2&sn=673b6d7c7ff6b3a511f79a660b138423)\n - [ ] [什么是零信任：安全性、原则和架构](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114149&idx=1&sn=e6c11500191f7d8bb8a004604a2c5561)\n - [ ] [秦安：新华社喜气洋洋点评，小红书需发挥主体作用，接住泼天富贵](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476271&idx=1&sn=580c4508bc163041823038ad9e920e68)\n - [ ] [喜报！炼石荣获中国计算机行业协会网数专委“卓越贡献奖”](https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247568825&idx=1&sn=f8e52c6a4464aec5ef8f1fb39f02e04b)\n - [ ] [如何构建混合云环境下的信息安全策略？](https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247487177&idx=1&sn=809cff24a1b39067a2dbd6d345853a90)\n - [ ] [云安全中的共享责任模型：企业与云服务商的界限](https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247487177&idx=2&sn=7113ff3d04b276d919b4dc008991e0f4)\n - [ ] [TangGo：国产化的综合能手](https://mp.weixin.qq.com/s?__biz=MzkzNzg3NzQxMQ==&mid=2247485695&idx=1&sn=2fc7154d71582d71208ba945e123238a)\n - [ ] [AWS 云安全面试准备：10 个重要的 DevOps 概念](https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484996&idx=1&sn=4615303b13ce5abb344738596185350e)\n - [ ] [新春福利已就位，海量奖品疯狂来袭！](https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247705&idx=1&sn=36ed81f86ac26ed621bcaeea900677ad)\n - [ ] [所有的网站都需要办理ICP备案？](https://mp.weixin.qq.com/s?__biz=MzI4NzA1Nzg5OA==&mid=2247485681&idx=1&sn=fa6e7bd1383473df5734f103139557e7)\n - [ ] [分享图片](https://mp.weixin.qq.com/s?__biz=MzI3Njc1MjcxMg==&mid=2247494307&idx=1&sn=47e335541d5c4fa8e74793af9324e019)\n - [ ] [全新视频系列《实战源码审计》](https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247485719&idx=1&sn=4b3339a03f1b67424f469e8d1b72bdcf)\n - [ ] [OWASP 2025年十大漏洞–被利用/发现的最严重漏洞](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114147&idx=1&sn=257856caede83532d8fbbbbaa718c6be)\n - [ ] [126个Linux内核漏洞可让攻击者利用78个 Linux子系统](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114147&idx=2&sn=0ec2b581bd93714c8ff60c69bcc70f8b)\n - [ ] [工具推荐 | 内网渗透敏感信息搜索神器](https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247493961&idx=1&sn=fd35d4a8a05cae420fa700b36125f0d2)\n - [ ] [网络空间测绘 -- ScopeSentry（V1.5.4）](https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515682&idx=1&sn=7012ed1bd01016412f4a2ac7075c393c)\n - [ ] [第6天：基础入门-抓包技术&HTTPS协议&APP&小程序&PC应用&WEB&转发联动](https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515682&idx=2&sn=b88c75c1bbebb784ce683d00c4f1c092)\n- Twitter @bytehx\n - [ ] [I earned $$$ for my submission on @bugcrowd https://bugcrowd.com/bytehx #ItTakesACrowd](https://x.com/bytehx343/status/1882032367206060197)\n - [ ] [Just got a reward for a vulnerability submitted on @yeswehack -- Acceptance of Extraneous Untrusted Data With Trusted Data - Cache Poisoning (CWE-349)...](https://x.com/bytehx343/status/1882032146376004006)\n - [ ] [Re @_justYnot Happy Birthday 🎉🎊🎉](https://x.com/bytehx343/status/1881888985657770380)\n- SpiderLabs Blog\n - [ ] [Trustwave SpiderLabs 2025 Trustwave Risk Radar Report: Energy and Utilities Sector](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/trustwave-spiderlabs-2025-trustwave-risk-radar-report-energy-and-utilities-sector/)\n- Horizon3.ai\n - [ ] [Identify Cybersecurity Risks at Scale to De-Risk M&A Transactions with Horizon3.ai’s NodeZero® Platform](https://go.horizon3.ai/MandA_UseCase#new_tab)\n - [ ] [Horizon3.ai Expands on Disruptive Value of Autonomous Penetration Testing for Security Teams Worldwide](https://www.businesswire.com/news/home/20250122764892/en/Horizon3.ai-Expands-on-Disruptive-Value-of-Autonomous-Penetration-Testing-for-Security-Teams-Worldwide#new_tab)\n - [ ] [9 Essential Questions to Ask When Evaluating Pentesting Solutions](https://www.horizon3.ai/intelligence/blogs/9-essential-questions-to-ask-when-evaluating-pentesting-solutions/)\n- Malwarebytes\n - [ ] [7-Zip bug could allow a bypass of a Windows security feature. Update now](https://www.malwarebytes.com/blog/news/2025/01/7-zip-bug-could-allow-a-bypass-of-a-windows-security-feature-update-now)\n- PortSwigger Research\n - [ ] [Stealing HttpOnly cookies with the cookie sandwich technique](https://portswigger.net/research/stealing-httponly-cookies-with-the-cookie-sandwich-technique)\n- Intigriti\n - [ ] [Unwavering support: Your bug bounty journey, our priority](https://www.intigriti.com/blog/business-insights/unwavering-support-your-bug-bounty-journey-our-priority)\n- HackerNews\n - [ ] [7-Zip 修复绕过 Windows MoTW 安全警告的漏洞，应立即升级到24.09版](https://hackernews.cc/archives/57033)\n - [ ] [乌克兰计算机应急响应小组警告：假冒 AnyDesk 请求的网络诈骗](https://hackernews.cc/archives/57031)\n - [ ] [PNGPlug 加载器通过假冒软件安装程序传播 ValleyRAT 恶意软件](https://hackernews.cc/archives/57029)\n - [ ] [13000 台 MikroTik 路由器被僵尸网络劫持，用于恶意软件传播和网络攻击](https://hackernews.cc/archives/57027)\n - [ ] [Mirai 变种 Murdoc Botnet 利用 AVTECH IP 摄像头和华为路由器的安全漏洞](https://hackernews.cc/archives/57025)\n- 奇客Solidot–传递最新科技情报\n - [ ] [过去一个世纪男性身高体重增长速度两倍于女性](https://www.solidot.org/story?sid=80399)\n - [ ] [杭州深度求索发布能挑战 OpenAI o1 的推理模型 DeepSeek R1](https://www.solidot.org/story?sid=80398)\n - [ ] [黑猩猩的撒尿行为具有传染性](https://www.solidot.org/story?sid=80397)\n - [ ] [耐药菌在乌克兰扩散](https://www.solidot.org/story?sid=80396)\n - [ ] [中国 2024 年可更新能源装机容量再创记录](https://www.solidot.org/story?sid=80395)\n - [ ] [Wine 10.0 释出](https://www.solidot.org/story?sid=80394)\n - [ ] [TikTok 被指限制反特朗普关键词的搜索](https://www.solidot.org/story?sid=80393)\n - [ ] [IMDb 创始人卸任 CEO 一职](https://www.solidot.org/story?sid=80392)\n - [ ] [特朗普赦免 Ross Ulbricht](https://www.solidot.org/story?sid=80391)\n- 绿盟科技技术博客\n - [ ] [【漏洞通告】Oracle WebLogic Server远程代码执行与拒绝服务漏洞(CVE-2025-21535/CVE-2025-21549)](https://blog.nsfocus.net/cve-20cve-2025-21535-cve-2025-21549/)\n - [ ] [绿盟威胁情报周报（2025.01.13-2025.01.19）](https://blog.nsfocus.net/2025-01-13-2025-01-19/)\n- 体验盒子\n - [ ] [vscode运行flutter项目ios真机](https://www.uedbox.com/post/119313/)\n- 安全牛\n - [ ] [《Agentic AI安全技术应用报告（2025版）》调研启动](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134812&idx=1&sn=560db2a85bcb9df872bc7c83e28d37e0&chksm=bd15ab8f8a6222990be11fb64472a9f9dbdfe32284261408fe230c6c72b2425eabc90345f991&scene=58&subscene=0#rd)\n - [ ] [特朗普推翻拜登人工智能行政命令；警惕！勒索软件团伙滥用微软Teams发起攻击 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134812&idx=2&sn=1644fdd615891c190020e26e48734279&chksm=bd15ab8f8a62229945c2a446ad5f94a740189be7bde929cd002d7b0d2cf230da898fbb608135&scene=58&subscene=0#rd)\n- 威努特安全网络\n - [ ] [十强！威努特斩获2024年网络安全优秀评选三项大奖](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651130654&idx=1&sn=72ece0485d56a8dbc791b20108f0943c&chksm=80e711aeb79098b8a34f63daf9b2d40b35e548f4fb03e44e4e22727512c1edaf44485a832523&scene=58&subscene=0#rd)\n- bishopfox.com\n - [ ] [SonicWall CVE-2024-53704: SSL VPN Session Hijacking](https://bishopfox.com/blog/sonicwall-cve-2024-53704-ssl-vpn-session-hijacking)\n- 奇安信 CERT\n - [ ] [【已复现】Rsync 堆缓冲区溢出漏洞(CVE-2024-12084)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502951&idx=1&sn=09d5b62b3cc3e71fec3a8595f18318a2&chksm=fe79e8ffc90e61e905225d9918798d40f77be91e0a5961c95f1ab8235b4d42623eb0ecca28ad&scene=58&subscene=0#rd)\n - [ ] [Oracle 2025年1月补丁日多产品高危漏洞安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502951&idx=2&sn=21655dd26fe10def4a6c6546fdf240d4&chksm=fe79e8ffc90e61e9fd1b2697f079954e6002507bd3d9fe45bf9331fc3c21481d0b14887ce263&scene=58&subscene=0#rd)\n- 代码卫士\n - [ ] [7-Zip 修复高危的 Windows MoTW 安全告警绕过漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522153&idx=1&sn=b0d2973a6eb87e554fb62b7ddfa10dfb&chksm=ea94a603dde32f1580de59ef6a2b8fb600c6cbb237024a672b5a02660c7fc1f7184f617fce4c&scene=58&subscene=0#rd)\n - [ ] [FTC要求通用停止收集和出售驾驶员数据](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522153&idx=2&sn=2d3b81592eb7e14fd1f16c714fa4e016&chksm=ea94a603dde32f154142371d59146a916e8ef1fa49b42310d2eb5bfe8ad83bb64ef5d322ff3e&scene=58&subscene=0#rd)\n- 安全客\n - [ ] [2024年度网络安全政策法规一览](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787787&idx=1&sn=ee8ea4a11f904302c035eb5170b8891e&chksm=8893bde4bfe434f22e9aa593b236330470621bd35552bc2eb979cb1eb05d055b87e7de1f8bde&scene=58&subscene=0#rd)\n- 安全内参\n - [ ] [这家IT供应商被黑，导致多地公共服务被迫中断多天](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513561&idx=1&sn=2796a6ba28137e2416855e83c1d45e5f&chksm=ebfaf2f9dc8d7bef4177fa9314612f542e0997c62ce65bd62a7a54182dfee525e14ce8e1aa10&scene=58&subscene=0#rd)\n - [ ] [持续贯彻关基安全！美国运安局延长管道网络安全指令有效期](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513561&idx=2&sn=815ef59fe9fe66e6e8be342a53433267&chksm=ebfaf2f9dc8d7befc4b6c6c02e08010a0431501f361b43e8f5d4bfc2c386251fdb1bd8623e09&scene=58&subscene=0#rd)\n- 信安之路\n - [ ] [即使变卖个人资产，也要给大家把工资补上！](https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499756&idx=1&sn=18d3cb30c32fc3d1c30f8f3e453e08a4&chksm=ec1dcfc4db6a46d24a59b9f5b73d6883c46b004ca97f3e0a2819a832775f00a0690175e9ef33&scene=58&subscene=0#rd)\n- FreeBuf网络安全行业门户\n - [ ] [威胁者利用Microsoft Teams语音通话传播勒索软件](https://www.freebuf.com/news/420574.html)\n - [ ] [美国前中央情报局分析师承认泄露国防信息](https://www.freebuf.com/news/420570.html)\n - [ ] [FreeBuf早报 | 特朗普赦免暗网丝绸之路创始人；Microsoft Teams被用于传播勒索软件](https://www.freebuf.com/news/420528.html)\n - [ ] [特朗普签署文件，特赦暗网“丝绸之路”创始人](https://www.freebuf.com/news/420526.html)\n - [ ] [2025 年 AI 网络安全预测](https://www.freebuf.com/news/420517.html)\n - [ ] [勒索软件编年史：从特洛伊到AI多重勒索](https://www.freebuf.com/articles/neopoints/420510.html)\n - [ ] [7-Zip高危漏洞，攻击者可绕过安全机制远程执行代码](https://www.freebuf.com/news/420514.html)\n- 虎符智库\n - [ ] [厚雪翻长坡，平淡不平凡：2024年网安产业发展态势剖析及2025年趋势展望](https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247492937&idx=1&sn=eac85a2e8d53918cee8a65c4ad935830&chksm=971d884ba06a015d1c88f5e338ffa29adba7552fcc1c63dd404cbab21a6a508226f88500bf16&scene=58&subscene=0#rd)\n- 丁爸 情报分析师的工具箱\n - [ ] [【技巧】开源情报（OSINT）：套接字理论（Socket Theory）情报分析师如何更好隐藏自己](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148647&idx=1&sn=4df1f367b82341e8c092ea12a7dec4c8&chksm=f1af265dc6d8af4b44f8d605298e979248080faba260608e5337d953231ea561f4d414f69a65&scene=58&subscene=0#rd)\n- 腾讯安全威胁情报中心\n - [ ] [游戏辅助的隐藏威胁｜传播于游戏论坛的“Catlavan”后门分析报告](https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510023&idx=1&sn=190730a6182da1469a76c29ec479ae13&chksm=ec9f7174dbe8f86290b0ced6fb6032de62bf76e90dabb9f7bbcb0f264b0d177e146f5c205169&scene=58&subscene=0#rd)\n- dotNet安全矩阵\n - [ ] [.NET 通过代码审计发现 ERP 系统中两个任意文件上传漏洞](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498371&idx=1&sn=d7e51b293b5afd36bf501f82d547e678&chksm=fa59546ecd2edd789772877b71ddaf889a171c0baebaed5bc5d84e1dc59ec80a6efff9da250e&scene=58&subscene=0#rd)\n - [ ] [.NET 安全攻防知识交流社区](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498371&idx=2&sn=cbf2bdba768768419faf4c4791dd2c1b&chksm=fa59546ecd2edd78ca9bfcbd53bc87340dd852aad612de53fa03fd221f56cf441ed2ed07d75c&scene=58&subscene=0#rd)\n - [ ] [通过 Sharp4SuoPoc 从原理上复现 Visual Studio 投毒事件](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498371&idx=3&sn=81f6211052fdbd84bfa5f5b833c14bea&chksm=fa59546ecd2edd78667ab8745d36715a39fb789abb78742e20b611f6645859db72e35cbd719d&scene=58&subscene=0#rd)\n- 绿盟科技CERT\n - [ ] [【漏洞通告】Oracle WebLogic Server远程代码执行与拒绝服务漏洞](https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488946&idx=1&sn=64c5620996cc0710ef9e2507f0fc0365&chksm=c2c642b9f5b1cbaf3667d5aae3b668b4e34e0cd89d95893a59c258488748706a1a17b3cd727e&scene=58&subscene=0#rd)\n- 安全学术圈\n - [ ] [期刊征文 | 暗网抑制前沿进展](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491610&idx=1&sn=8b6c9caf92435cbd9b76b77686619972&chksm=fe2d1f91c95a9687a5251b386c368783346127d6aa161b3035246676e5d21f1ba3e728035993&scene=58&subscene=0#rd)\n- 看雪学苑\n - [ ] [XCTF-SUCTF 2025-部分Pwn题解](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589076&idx=1&sn=a4d861f2130373f4a922c1529d1fba78&chksm=b18c271e86fbae08ca00e3c9447214607f5d2bfc89d8578c33474f3e72602833a386405c44e4&scene=58&subscene=0#rd)\n - [ ] [7-Zip高危漏洞曝光！攻击者可绕过安全机制远程执行代码，速升级](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589076&idx=2&sn=d0f764edebe291ce5b96f036fabe1a56&chksm=b18c271e86fbae08b860c61d822fe9c14f3216204f7890876285cf7d58d7086a9d18b2c2002e&scene=58&subscene=0#rd)\n - [ ] [更新5节！系统0day 安全-企业级网络设备固件漏洞挖掘（第7期）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589076&idx=3&sn=07bb4636837dcc2fbabded998321ad6e&chksm=b18c271e86fbae086f08a8628ae493c5626bf7b7941dbf05b7856553b1bd2011fe2f5765c6b1&scene=58&subscene=0#rd)\n- 信息安全国家工程研究中心\n - [ ] [小年纳福，满载祝愿](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498734&idx=1&sn=2d5de0a8283c56deb2559e0af561e376&chksm=feb67afdc9c1f3eb9c541f85173a09a82542709c15edcc23d9d2c392cfb951aaa72acb7894a7&scene=58&subscene=0#rd)\n- 安全圈\n - [ ] [【安全圈】特朗普上任首日，被囚 11 年的丝绸之路创始人获释](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=1&sn=bad8f735186597a7ef0a02f03be5d6e4&chksm=f36e7aa1c419f3b781ca98c7976cd5a7773de11683684d499d776e2d152beb4b6d086497c9b5&scene=58&subscene=0#rd)\n - [ ] [【安全圈】420万主机暴露，含VPN和路由器](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=2&sn=ce83805d756cb11a77b84cb9413465be&chksm=f36e7aa1c419f3b73ed660099b42c7414eb3133abb1020174807cc6d27124906b801371b772d&scene=58&subscene=0#rd)\n - [ ] [【安全圈】2024年近2亿人受影响，美国医疗成重点攻击目标](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=3&sn=126c3fc5cb7d6a7dc18e3e9a213e8170&chksm=f36e7aa1c419f3b73f5070ef02018ac480c01ce4abcf00f26ead2c9550281e5931adb0e75eec&scene=58&subscene=0#rd)\n - [ ] [【安全圈】7-Zip 漏洞可让远程攻击者绕过保护并执行任意代码](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=4&sn=2c06e2c2a5011eb86894033a1e6c41fc&chksm=f36e7aa1c419f3b7663e1033a2b71bafbadf19c12ebb839d8cc5c2a954da81be8f83c2a04925&scene=58&subscene=0#rd)\n- 青衣十三楼飞花堂\n - [ ] [你们可以调戏飞花堂了](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247487930&idx=1&sn=061cb565fbd0b5f0a5d754835656e58f&chksm=fab2d285cdc55b93453c5c4517e23599a8527cb0315540799c22c5ada2b5e5ba6d03d7da885e&scene=58&subscene=0#rd)\n- 威胁棱镜\n - [ ] [2024 年 Any.Run 恶意软件趋势报告](https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247487612&idx=1&sn=09a327bfbe389a1f868570bafd81d159&chksm=c1e9e7b0f69e6ea6aee11492fcd298ab2ea9cbba8c8dde6f81fa56d6591a6932ed53c6fadcab&scene=58&subscene=0#rd)\n- 中国信息安全\n - [ ] [专题·人工智能安全治理 | 人工智能安全治理的中国认知与方案](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235367&idx=1&sn=297855efd370925c872f5757635232be&chksm=8b58039ebc2f8a88688e473f6a44b4c239be99a0ba5386a09e21cf1d002e5dcdd7e2325f74a9&scene=58&subscene=0#rd)\n - [ ] [专家解读 | 魏亮：统筹布局国家数据基础设施，夯实数据要素价值释放基础](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235367&idx=2&sn=25380b016bd022eb3f12db20a0ccfc4e&chksm=8b58039ebc2f8a8869cac9ab3b937000109e1bc8586b3a96741dec89798acb3e5f9040f94935&scene=58&subscene=0#rd)\n - [ ] [专家观点 | 李峥：以合作开启AI“20万亿美元时代”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235367&idx=3&sn=3d746ccbf7a383c1aedc7863ea48df60&chksm=8b58039ebc2f8a880d7e7215965672500409cf64649cd90b5c34904471aa388bcb73103ba0f7&scene=58&subscene=0#rd)\n - [ ] [前沿 | 人工智能赋能网络空间作战](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235367&idx=4&sn=c17951f71c4e1d4580510b7ec0275644&chksm=8b58039ebc2f8a88b47c7a35f7dc8a087f071e32ef0532f12bf4124a44b87ca50bad5d909c41&scene=58&subscene=0#rd)\n - [ ] [国际 | 域外国家网络信息治理制度](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235367&idx=5&sn=6ddc0df87190ccc4b866a5a488ce4fb3&chksm=8b58039ebc2f8a8896afda5e765776e17020efd79d33c784f1366c5562fad84ffa2dff0a63cd&scene=58&subscene=0#rd)\n - [ ] [观点 | 面对深度伪造视频我们可以做什么](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235367&idx=6&sn=1ed425e7056807c6c44ddd42f4cb1512&chksm=8b58039ebc2f8a884bcb07c456537203d4b50492e19be7158c46536ddef4697201d18a32a6b9&scene=58&subscene=0#rd)\n - [ ] [评论 | 打破AI谣言“黑箱”，需要社会共治](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235367&idx=7&sn=2cb7b1348c0399a07373f5b5204e5aff&chksm=8b58039ebc2f8a88d98241c6473a4a5e4f8e0c55edc0ed31581cd87507a5b76f11dd3cadae3c&scene=58&subscene=0#rd)\n- 默安科技\n - [ ] [默安科技2025年春节值守安排](https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247500248&idx=1&sn=f1957f05b1fb0ede1aed87f4c0603dad&chksm=e93b36fade4cbfec2e3df9f97123506b4d13e096ac812e8ba98db9b2fcbc04073fb7839a847c&scene=58&subscene=0#rd)\n- 数世咨询\n - [ ] [2024年美国医疗数据泄露：585起事件波及1.8亿用户](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247534927&idx=1&sn=27a17db142bc885941f8e7cdff24512c&chksm=c1443bf2f633b2e463df61b01cdb06d125f74e36e30588da3656a4be570526cab7b66dfe24ae&scene=58&subscene=0#rd)\n - [ ] [公安部公布8起打击网络黑客犯罪典型案例](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247534927&idx=2&sn=2b32138cf1f6349d72f172a77aa0dd8e&chksm=c1443bf2f633b2e41762afc5662ff5168a1a405414ad7663b499af40bda5558d801e98db35a9&scene=58&subscene=0#rd)\n- 火绒安全\n - [ ] [QQ音乐遭遇“白加黑”利用，网站被劫持推广传奇私服](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247521743&idx=1&sn=7d0d609cffb045d031bdba1a74baee80&chksm=eb704bf0dc07c2e6f4ce1baf70c50eae31af800684d54c7bb88be8c67e11cdd0d9cef32321a1&scene=58&subscene=0#rd)\n - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247521743&idx=2&sn=c4bb1454856772f63647451003483a12&chksm=eb704bf0dc07c2e6695c9ab8933305dc28c4873fdd7326e88f3d667e611aadc0c77505fa29e3&scene=58&subscene=0#rd)\n- 情报分析师\n - [ ] [加沙真相被掩盖？BBC报道背后的“信息筛选”](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559158&idx=1&sn=6312581755ed3402c281e8b588aed0a5&chksm=87117cfdb066f5eb6185844e09e4da7ee5a256338379f42723a5bb295394a5eabd6bd525c664&scene=58&subscene=0#rd)\n - [ ] [揭露俄罗斯GRU的秘密行动，被指资助阿塔数千万美元](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559158&idx=2&sn=04237d391e688d8663478dec1917a891&chksm=87117cfdb066f5eb62c527d68166b9e7581ef040a0bb3f72b651e477165fb4e85671f8d4eb56&scene=58&subscene=0#rd)\n - [ ] [TikTok禁令：从事件始末到未来走向的深度剖析](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559158&idx=3&sn=330b69e1e87d2e662ee62ac84a2df529&chksm=87117cfdb066f5ebcc303b472a145a703011592673d932403cee104f36e1641206f07c3eba87&scene=58&subscene=0#rd)\n- 腾讯科恩实验室\n - [ ] [游戏辅助的隐藏威胁｜传播于游戏论坛的“Catlavan”后门分析报告](https://mp.weixin.qq.com/s?__biz=MzU1MjgwNzc4Ng==&mid=2247512659&idx=1&sn=ca99588eed415d2fdbdd87c4e666b662&chksm=fbfe8e56cc89074039ffcc9bb0544c3f4285b0fb28a480034307d88019f5b1fa8e610a5e494e&scene=58&subscene=0#rd)\n- 嘶吼专业版\n - [ ] [2024中国网络安全产业势能榜优能企业「电力行业」典型案例展示](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580933&idx=1&sn=200f586bf5e6ebc5b131de6824aa91ce&chksm=e9146d3fde63e429d8233882c021aca40e581dd642e4fb6699b9d5e926f90a92500d920177dd&scene=58&subscene=0#rd)\n - [ ] [Otelier 遭遇网络攻击导致数百万酒店预订信息泄露](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580933&idx=2&sn=0a59602d0f6ce921931618ecc83d85d6&chksm=e9146d3fde63e4290f78a380c4fe948178ab82a46e7ba25bb0f7b2a8e6881c6c448b52c28a91&scene=58&subscene=0#rd)\n- 国家互联网应急中心CNCERT\n - [ ] [网络安全信息与动态周报2025年第3期（1月13日-1月19日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499624&idx=1&sn=8064268553ca5916417015861fb3acd9&chksm=973acc0aa04d451cff471b69b6ae264370dfad346c96825845c4c4e2b621762d5af60277379b&scene=58&subscene=0#rd)\n- 补天平台\n - [ ] [辞暮尔尔，烟火年年 | 补天平台春节放假通知](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247507336&idx=1&sn=8d6c060a3c6485878ea8c3f08e2d93b5&chksm=eaf995c4dd8e1cd240f87a81e954cd8badfa1ee7bc6b8880f5c8f0755698a4140faa0ccf103e&scene=58&subscene=0#rd)\n- 极客公园\n - [ ] [新总统山寨币疯狂收割 500 亿美元，只是比特币国家战略一部分？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653072613&idx=1&sn=cb3a3b24855c3b969f4d586c72218f00&chksm=7e57d15349205845d2da4c3b22b0b9fadb97006921d79a96e31455c143851c835443f9164077&scene=58&subscene=0#rd)\n - [ ] [OpenAI+软银5000亿美元投资AI基建；新 ModelY、小米 YU7实车曝光；小红书启用「rednote」｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653072586&idx=1&sn=01f46944418d1ed105a097f841268626&chksm=7e57d17c4920586a12299e2a2473709a61c4b7d1d33e4885d4963adcc8b3f020d715bdcf93c8&scene=58&subscene=0#rd)\n- 360数字安全\n - [ ] [“以模制模”！360大模型安全解决方案获权威机构推荐](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579180&idx=1&sn=9c7924d356a6e97806314b7890ec70d4&chksm=9f8d2624a8faaf320e482da401f346c27512c8d91786d43e0dffb1009c7ebbe4c0274b1fcc5e&scene=58&subscene=0#rd)\n - [ ] [六大行业典型案例！360霸榜2024中国网络安全产业势能榜](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579180&idx=2&sn=9620c63a3e0e81ef64b85953dda3a2d7&chksm=9f8d2624a8faaf322a4f0e24696a63b8d7a266a0ec61b3612dc8b22a492bc005b327a0400fd7&scene=58&subscene=0#rd)\n- Krypt3ia\n - [ ] [Krypt3ia’s Survival Guide for Safe Communications in Today’s Internet and Social Media Landscape](https://krypt3ia.wordpress.com/2025/01/22/krypt3ias-survival-guide-for-safe-communications-in-todays-internet-and-social-media-landscape/)\n - [ ] [Krypt3ia Daily Threat Intel Digest 1.22.25](https://krypt3ia.wordpress.com/2025/01/22/krypt3ia-daily-threat-intel-digest-1-22-25/)\n- Over Security - Cybersecurity news aggregator\n - [ ] [Ransomware in Healthcare: A Comprehensive Subsector Analysis](https://catchingphish.com/posts/f/ransomware-in-healthcare-a-comprehensive-subsector-analysis)\n - [ ] [Critical zero-days impact premium WordPress real estate plugins](https://www.bleepingcomputer.com/news/security/critical-zero-days-impact-premium-wordpress-real-estate-plugins/)\n - [ ] [Cloudflare CDN flaw leaks user location data, even through secure chat apps](https://www.bleepingcomputer.com/news/security/cloudflare-cdn-flaw-leaks-user-location-data-even-through-secure-chat-apps/)\n - [ ] [BreachForums admin to be resentenced after appeals court slams supervised release](https://therecord.media/breachforums-resentenced-supervised-release-admin)\n - [ ] [Telegram captcha tricks you into running malicious PowerShell scripts](https://www.bleepingcomputer.com/news/security/telegram-captcha-tricks-you-into-running-malicious-powershell-scripts/)\n - [ ] [Flashpoint Weekly Vulnerability Insights and Prioritization Report](https://flashpoint.io/blog/flashpoint-weekly-vulnerability-insights-prioritization/)\n - [ ] [China-linked hacker group targets victims in East Asia with malicious VPN installers](https://therecord.media/china-hacker-group-vpns-backdoor)\n - [ ] [Trump pardons Silk Road founder Ross Ulbricht](https://therecord.media/ross-ulbricht-silk-road-pardoned-trump)\n - [ ] [Trump admin tells all Democrats on intelligence oversight board to resign](https://therecord.media/trump-admin-tells-democrats-on-intel-oversight-board-to-resign)\n - [ ] [Cisco warns of denial of service flaw with PoC exploit code](https://www.bleepingcomputer.com/news/security/cisco-warns-of-denial-of-service-flaw-with-poc-exploit-code/)\n - [ ] [Iran and Russia deepen cyber ties with new agreement](https://therecord.media/russia-iran-cyber-ties-agreement)\n - [ ] [PowerSchool hacker claims they stole data of 62 million students](https://www.bleepingcomputer.com/news/security/powerschool-hacker-claims-they-stole-data-of-62-million-students/)\n - [ ] [Come tracciare la sicurezza della software supply chain](https://guerredirete.substack.com/p/come-tracciare-la-sicurezza-della)\n - [ ] [Trump administration fires members of cybersecurity review board in “horribly shortsighted” decision](https://techcrunch.com/2025/01/22/trump-administration-fires-members-of-cybersecurity-review-board-in-horribly-shortsighted-decision/)\n - [ ] [Oh my .. ! - Suspicious network traffic detected including Ransomware](https://dfir.ch/posts/suspicious_network_traffic_ransomware/)\n - [ ] [Conduent confirms cybersecurity incident behind recent outage](https://www.bleepingcomputer.com/news/security/conduent-confirms-cybersecurity-incident-behind-recent-outage/)\n - [ ] [Windows 11 24H2 now also offered to all eligible Windows 10 PCs](https://www.bleepingcomputer.com/news/microsoft/microsoft-expands-windows-11-24h2-rollout-to-eligible-windows-10-pcs/)\n - [ ] [MasterCard DNS Error Went Unnoticed for Years](https://krebsonsecurity.com/2025/01/mastercard-dns-error-went-unnoticed-for-years/)\n - [ ] [Use this AI chatbot prompt to create a password-exclusion list](https://www.bleepingcomputer.com/news/security/use-this-ai-chatbot-prompt-to-create-a-password-exclusion-list/)\n - [ ] [IPany VPN breached in supply-chain attack to push custom malware](https://www.bleepingcomputer.com/news/security/ipany-vpn-breached-in-supply-chain-attack-to-push-custom-malware/)\n - [ ] [Hackers exploit 16 zero-days on first day of Pwn2Own Automotive 2025](https://www.bleepingcomputer.com/news/security/hackers-exploit-16-zero-days-on-first-day-of-pwn2own-automotive-2025/)\n - [ ] [Trump administration removes private sector leaders from all DHS panels, including CSRB](https://therecord.media/trump-dhs-removal-private-sector-members-advisory-boards)\n - [ ] [Questions grow over whether Baltic Sea cable damage was sabotage or accidental](https://therecord.media/finland-eagle-s-tanker-questions-over-alleged-sabotage)\n - [ ] [Targeted supply chain attack against Chrome browser extensions](https://blog.sekoia.io/targeted-supply-chain-attack-against-chrome-browser-extensions/)\n - [ ] [How Threat Intelligence Lookup Helps Enterprises](https://any.run/cybersecurity-blog/how-threat-intelligence-lookup-helps-enterprises/)\n - [ ] [Australian Cyber Security Centre Targets Bulletproof Hosting Providers to Disrupt Cybercrime Networks](https://cyble.com/blog/acsc-highlights-bulletproof-hosting-providers/)\n - [ ] [La battaglia di Lyptsi e l’evoluzione della guerra robotizzata](https://www.guerredirete.it/la-battaglia-di-lyptsi-e-levoluzione-della-guerra-robotizzata/)\n - [ ] [Preventing Phishing Attacks, Before They Catch You](https://www.kelacyber.com/blog/preventing-phishing-attacks-before-they-catch-you/)\n - [ ] [Welhof - 107,292 breached accounts](https://haveibeenpwned.com/PwnedWebsites#Welhof)\n - [ ] [Frame & Optic - 15,678 breached accounts](https://haveibeenpwned.com/PwnedWebsites#FrameAndOptic)\n - [ ] [Denuvo Analysis | Connor-Jay's Blog](https://connorjaydunn.github.io/blog/posts/denuvo-analysis/)\n - [ ] [Cyble Finds Thousands of Security Vendor Credentials on Dark Web](https://cyble.com/blog/thousands-of-security-vendor-credentials-found-on-dark-web/)\n- 迪哥讲事\n - [ ] [某攻防演练｜从404页面到接管阿里云](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496928&idx=1&sn=871a0d0002a589ed9b98ae6ed97158f9&chksm=e8a5fe83dfd27795744d51346215bef2df4e6387a31ad6a46cc7cb07b0d3a71b274a5f895b82&scene=58&subscene=0#rd)\n- ICT Security Magazine\n - [ ] [Eventi Cybersecurity 2025 – Il futuro della sicurezza digitale](https://www.ictsecuritymagazine.com/notizie/eventi-cybersecurity-2025-il-futuro-della-sicurezza-digitale/)\n - [ ] [Anomaly Detection tramite Neural Networks: identificazione di pattern anomali e prevenzione dei cyber attacchi](https://www.ictsecuritymagazine.com/articoli/anomaly-detection-sec/)\n- The Grey Corner\n - [ ] [Accessing the Kubernetes API using captured credentials and HTTP clients](/2025/01/22/accessing-the-kubernetes-api-using-captured.html)\n- Posts By SpecterOps Team Members - Medium\n - [ ] [Entra Connect Attacker Tradecraft: Part 2](https://posts.specterops.io/entra-connect-attacker-tradecraft-part-2-672df0147abc?source=rss----f05f8696e3cc---4)\n- Have I Been Pwned latest breaches\n - [ ] [Frame & Optic - 15,678 breached accounts](https://haveibeenpwned.com/PwnedWebsites#FrameAndOptic)\n - [ ] [Welhof - 107,292 breached accounts](https://haveibeenpwned.com/PwnedWebsites#Welhof)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [ISC Stormcast For Thursday, January 23rd, 2025 https://isc.sans.edu/podcastdetail/9292, (Wed, Jan 22nd)](https://isc.sans.edu/diary/rss/31618)\n - [ ] [Catching CARP: Fishing for Firewall States in PFSync Traffic, (Wed, Jan 22nd)](https://isc.sans.edu/diary/rss/31616)\n - [ ] [ISC Stormcast For Wednesday, January 22nd, 2025 https://isc.sans.edu/podcastdetail/9290, (Wed, Jan 22nd)](https://isc.sans.edu/diary/rss/31614)\n- Schneier on Security\n - [ ] [AI Will Write Complex Laws](https://www.schneier.com/blog/archives/2025/01/ai-will-write-complex-laws.html)\n- Hacking Exposed Computer Forensics Blog\n - [ ] [Daily Blog #725: Project adaz testing part 3](https://www.hecfblog.com/2025/01/daily-blog-725-project-adaz-testing.html)\n- Computer Forensics\n - [ ] [RSMF samples](https://www.reddit.com/r/computerforensics/comments/1i7iq8q/rsmf_samples/)\n- The Hacker News\n - [ ] [Trump Terminates DHS Advisory Committee Memberships, Disrupting Cybersecurity Review](https://thehackernews.com/2025/01/trump-terminates-dhs-advisory-committee.html)\n - [ ] [Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet](https://thehackernews.com/2025/01/hackers-exploit-zero-day-in-cnpilot.html)\n - [ ] [Discover Hidden Browsing Threats: Free Risk Assessment for GenAI, Identity, Web, and SaaS Risks](https://thehackernews.com/2025/01/discover-hidden-browsing-threats-free.html)\n - [ ] [President Trump Pardons Silk Road Creator Ross Ulbricht After 11 Years in Prison](https://thehackernews.com/2025/01/president-trump-pardons-silk-road.html)\n - [ ] [PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack](https://thehackernews.com/2025/01/plushdaemon-apt-targets-south-korean.html)\n - [ ] [Oracle Releases January 2025 Patch to Address 318 Flaws Across Major Products](https://thehackernews.com/2025/01/oracle-releases-january-2025-patch-to.html)\n - [ ] [Mirai Botnet Launches Record 5.6 Tbps DDoS Attack with 13,000+ IoT Devices](https://thehackernews.com/2025/01/mirai-botnet-launches-record-56-tbps.html)\n- Krebs on Security\n - [ ] [MasterCard DNS Error Went Unnoticed for Years](https://krebsonsecurity.com/2025/01/mastercard-dns-error-went-unnoticed-for-years/)\n- Information Security\n - [ ] [How to make your own choatic Map function?](https://www.reddit.com/r/Information_Security/comments/1i7lq5h/how_to_make_your_own_choatic_map_function/)\n- Deeplinks\n - [ ] [Texas Is Enforcing Its State Data Privacy Law. So Should Other States.](https://www.eff.org/deeplinks/2025/01/texas-enforcing-its-state-data-privacy-law-so-should-other-states)\n - [ ] [The FTC’s Ban on GM and OnStar Selling Driver Data Is a Good First Step](https://www.eff.org/deeplinks/2025/01/ftcs-ban-gm-and-onstar-selling-driver-behavior-good-first-step)\n - [ ] [VICTORY! Federal Court (Finally) Rules Backdoor Searches of 702 Data Unconstitutional](https://www.eff.org/deeplinks/2025/01/victory-federal-court-finally-rules-backdoor-searches-702-data-unconstitutional)\n - [ ] [Protecting “Free Speech” Can’t Just Be About Targeting Political Opponents](https://www.eff.org/deeplinks/2025/01/protecting-free-speech-cant-just-be-about-targeting-political-opponents)\n- Deep Web\n - [ ] [Trump pardons Ross Ulbricht, fulfilling campaign promise](https://www.reddit.com/r/deepweb/comments/1i6y6ca/trump_pardons_ross_ulbricht_fulfilling_campaign/)\n - [ ] [I just know Ross feels like a million bucks. Just yesterday this man had a whole life sentence, shiiiiit Welcome home tho Ross !](https://www.reddit.com/r/deepweb/comments/1i7eaxs/i_just_know_ross_feels_like_a_million_bucks_just/)\n- BorderGate\n - [ ] [PHP Deserialisation](https://www.bordergate.co.uk/php-deserialisation/)\n- Security Affairs\n - [ ] [Pwn2Own Automotive 2025 Day 1: organizers awarded $382,750 for 16 zero-days](https://securityaffairs.com/173344/hacking/pwn2own-automotive-2025-day-1.html)\n - [ ] [Two ransomware groups abuse Microsoft’s Office 365 platform to gain access to target organizations](https://securityaffairs.com/173328/cyber-crime/ransomware-groups-abuse-microsofts-office-365-platform.html)\n - [ ] [Cloudflare blocked a record-breaking 5.6 Tbps DDoS attack](https://securityaffairs.com/173318/cyber-crime/cloudflare-blocked-record-5-6-tbps-ddos-attack.html)\n - [ ] [A 7-Zip bug allows to bypass the Mark of the Web (MotW) feature](https://securityaffairs.com/173310/hacking/7-zip-flaw-bypass-the-mark-of-the-web-motw.html)\n- 网安寻路人\n - [ ] [美商务部《保障ICT供应链：联网汽车》规则（全文翻译）](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247506068&idx=1&sn=c5502bc907a76a432d06dd4e9098d0ad&chksm=97e9657ea09eec68b79604df8d37e514ee417e337a622644f90cec47ae5279e4ff5696c56c0d&scene=58&subscene=0#rd)\n- Graham Cluley\n - [ ] [Half a million hotel guests at risk after hackers accessed sensitive data](https://www.bitdefender.com/en-us/blog/hotforsecurity/half-a-million-hotel-guests-at-risk-after-hackers-accessed-sensitive-data)\n- Your Open Hacker Community\n - [ ] [I made a hack for AssaultCube with a menu](https://www.reddit.com/r/HowToHack/comments/1i7mzwg/i_made_a_hack_for_assaultcube_with_a_menu/)\n - [ ] [using monitor and managed mode at the same time? (debian trixie, mt7921)](https://www.reddit.com/r/HowToHack/comments/1i7pe1p/using_monitor_and_managed_mode_at_the_same_time/)\n - [ ] [Where do you find enjoyment/interest from hacking/cyber sec](https://www.reddit.com/r/HowToHack/comments/1i7fb4c/where_do_you_find_enjoymentinterest_from/)\n - [ ] [need help making bad usb](https://www.reddit.com/r/HowToHack/comments/1i7klmu/need_help_making_bad_usb/)\n - [ ] [How to solve hcaptcha with solved Token?](https://www.reddit.com/r/HowToHack/comments/1i7h1d0/how_to_solve_hcaptcha_with_solved_token/)\n - [ ] [Directional help](https://www.reddit.com/r/HowToHack/comments/1i7esex/directional_help/)\n - [ ] [what is the difference between opening a new terminal and using tmux to start a new session?](https://www.reddit.com/r/HowToHack/comments/1i776tk/what_is_the_difference_between_opening_a_new/)\n - [ ] [fake email date](https://www.reddit.com/r/HowToHack/comments/1i79d59/fake_email_date/)\n - [ ] [Retrieving my website](https://www.reddit.com/r/HowToHack/comments/1i7edfe/retrieving_my_website/)\n - [ ] [HELP???](https://www.reddit.com/r/HowToHack/comments/1i7fced/help/)\n - [ ] [Notebook capable of brute-forcing 8-10 digit passwords (hashing algorithm doesn’t matter)](https://www.reddit.com/r/HowToHack/comments/1i798i0/notebook_capable_of_bruteforcing_810_digit/)\n - [ ] [i need strategies on how to hack something specific. please message me if you want to or can help](https://www.reddit.com/r/HowToHack/comments/1i76fcl/i_need_strategies_on_how_to_hack_something/)\n - [ ] [Impossible Bully](https://www.reddit.com/r/HowToHack/comments/1i75rsq/impossible_bully/)\n- Technical Information Security Content & Discussion\n - [ ] [Attacks on Maven proxy repositories](https://www.reddit.com/r/netsec/comments/1i7hf2w/attacks_on_maven_proxy_repositories/)\n - [ ] [Stealing HttpOnly cookies with the cookie sandwich technique](https://www.reddit.com/r/netsec/comments/1i7i6k7/stealing_httponly_cookies_with_the_cookie/)\n - [ ] [Pivot into Azure DevOps using stolen sessions](https://www.reddit.com/r/netsec/comments/1i7chgt/pivot_into_azure_devops_using_stolen_sessions/)\n - [ ] [Next.js, cache, and chains: the stale elixir](https://www.reddit.com/r/netsec/comments/1i779q3/nextjs_cache_and_chains_the_stale_elixir/)\n - [ ] [Testing Prompt Injection Attacks with promptmap2](https://www.reddit.com/r/netsec/comments/1i7dcs2/testing_prompt_injection_attacks_with_promptmap2/)\n- Security Weekly Podcast Network (Audio)\n - [ ] [The Future Of The CISO - Jeff Pollard, Jess Burn - BSW #379](http://sites.libsyn.com/18678/the-future-of-the-ciso-jeff-pollard-jess-burn-bsw-379)\n"}}, "archive/tmp/2025-08-05.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747359.5339775, "n": 50101, "h": "0a94479e73e678bf", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-08-04 Review\": \"http://www.sec-wiki.com/?2025-08-04\"\n },\n \"Armin Ronacher's Thoughts and Writings\": {\n \"In Support Of Shitty Types\": \"https://lucumr.pocoo.org/2025/8/4/shitty-types/\"\n },\n \"先知安全技术社区\": {\n \"CVE-2025-54424 1Panel远程命令执行漏洞详细分析及复现（附验证脚本）\": \"https://xz.aliyun.com/news/18573\"\n },\n \"Taxodium\": {\n \"Blaugust 2025 Reflections #1\": \"https://taxodium.ink//blaugust-2025-reflections-1.html\",\n \"Blaugust 2025 Reflections #0\": \"https://taxodium.ink//blaugust-2025-reflections-0.html\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Mon Aug 4 11:20:52 UTC 2025\": \"https://github.com/trickest/cve/commit/d68dd0d8652e22638e7026fa0cb1c85bcb8d5b2e\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"Linux 内核 6.17 发布：EXT4 文件系统性能提升，助力 AI 与云环境扩展\": \"https://www.anquanke.com/post/id/310843\",\n \"英特尔Nova Lake处理器将于2026年发布：18代家族搭载52核心，正面迎战AMD Zen 6\": \"https://www.anquanke.com/post/id/310846\",\n \"NestJS DevTools 存在严重RCE漏洞（CVE-2025-54782）\": \"https://www.anquanke.com/post/id/310849\",\n \"Cursor 代码编辑器遭遇关键多级权限控制漏洞（CVE-2025-54135 和 CVE-2025-54136）\": \"https://www.anquanke.com/post/id/310852\",\n \"Squid严重漏洞（CVE-2025-54574）：造成RCE以及数据泄露风险\": \"https://www.anquanke.com/post/id/310855\",\n \"新型“Plague” PAM 后门曝光：关键 Linux 系统面临静默凭证窃取风险\": \"https://www.anquanke.com/post/id/310859\",\n \"Akira 勒索软件疑似利用零日漏洞攻击已打补丁的 SonicWall VPN 设备\": \"https://www.anquanke.com/post/id/310863\",\n \"攻击者利用伪造 OAuth 应用和 Tycoon 工具包入侵 Microsoft 365 账户\": \"https://www.anquanke.com/post/id/310868\",\n \"Noma融资1亿美元部署“智能代理AI”安全平台，提升网络防御能力\": \"https://www.anquanke.com/post/id/310840\",\n \"AI 生成的恶意 npm 包攻击 Solana 用户，超 1500 次下载后被下架\": \"https://www.anquanke.com/post/id/310875\"\n },\n \"Trustwave Blog\": {\n \"Understanding Trustwave’s Australia IRAP Assessment Services: A Comprehensive Guide\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/understanding-trustwaves-australia-irap-assessment-services-a-comprehensive-guide/\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"ISC.AI 2025盛幕即启，锁定三大亮点，解锁智能体时代新升级\": \"https://www.4hou.com/posts/33nM\",\n \"Lumma infostealer窃取恶意软件团伙在遭受执法部门打击后卷土重来\": \"https://www.4hou.com/posts/9jox\",\n \"RC2安全保密专项赋能大礼包 • 奉上\": \"https://www.4hou.com/posts/VWxM\",\n \"共享充电宝成窃密新通道！梆梆安全构筑智能终端防护网狙击数据泄露\": \"https://www.4hou.com/posts/YZAK\",\n \"吴世忠院士：大模型安全治理的现状与展望\": \"https://www.4hou.com/posts/XPzW\"\n },\n \"paper - Last paper\": {\n \"迈向多智能体系统的统一量化安全基准测试\": \"https://paper.seebug.org/3349/\"\n },\n \"一个被知识诅咒的人\": {\n \"【人工智能】从零开始构建你的专属AI代理：DIY智能体全面指南\": \"https://blog.csdn.net/nokiaguy/article/details/149903315\",\n \"【人工智能】 AI代理的双刃剑：个性化服务的隐私隐忧\": \"https://blog.csdn.net/nokiaguy/article/details/149903295\",\n \"【人工智能】还在为高昂的AI开发成本发愁？这本书教你如何在个人电脑上引爆DeepSeek的澎湃算力！\": \"https://blog.csdn.net/nokiaguy/article/details/149881030\"\n },\n \"Tenable Blog\": {\n \"How Exposure Management Moves Beyond Vulnerability Scans to A Unified View of Risk\": \"https://www.tenable.com/blog/how-exposure-management-moves-beyond-vulnerability-scans-to-a-unified-view-of-risk\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"Revenant: A Modern, Full-Stack Reverse Shell C2 Framework — From Payload Generation to Victim…\": \"https://infosecwriteups.com/revenant-a-modern-full-stack-reverse-shell-c2-framework-from-payload-generation-to-victim-c73167670619?source=rss----7b722bfd1b8d---4\",\n \"Hack Smarter: Automate Security Testing with LLMs and the CAI Framework\": \"https://infosecwriteups.com/hack-smarter-automate-security-testing-with-llms-and-the-cai-framework-fea6e61c1400?source=rss----7b722bfd1b8d---4\",\n \"Windows Authentication Monitoring\": \"https://infosecwriteups.com/windows-authentication-monitoring-ca3dce7b7526?source=rss----7b722bfd1b8d---4\",\n \"Living Off the Cloud: Abusing Cloud Services for Red Teaming\": \"https://infosecwriteups.com/living-off-the-cloud-abusing-cloud-services-for-red-teaming-bf83fae9acae?source=rss----7b722bfd1b8d---4\",\n \"Exploiting LLM APIs with Excessive Agency [Part 1]\": \"https://infosecwriteups.com/exploiting-llm-apis-with-excessive-agency-part-1-19f0d8c70127?source=rss----7b722bfd1b8d---4\",\n \"Zeek (Bro) Network Analysis: Advanced Tactics\": \"https://infosecwriteups.com/zeek-bro-network-analysis-advanced-tactics-dcbf160b5743?source=rss----7b722bfd1b8d---4\",\n \"“Day 2: Reconnaissance — How I Found My First Real Bug (And How You Can Too)”\": \"https://infosecwriteups.com/day-2-reconnaissance-how-i-found-my-first-real-bug-and-how-you-can-too-dbf81cb44069?source=rss----7b722bfd1b8d---4\",\n \"Clean-Up Fail: How a Forgotten Admin Endpoint Let Me Drop All The Data ️\": \"https://infosecwriteups.com/clean-up-fail-how-a-forgotten-admin-endpoint-let-me-drop-all-the-data-%EF%B8%8F-1e1c376a986a?source=rss----7b722bfd1b8d---4\",\n \"OSCP Linux Privilege Escalation Using Apache2\": \"https://infosecwriteups.com/oscp-linux-privilege-escalation-18c75248be91?source=rss----7b722bfd1b8d---4\",\n \"Package of Problems: How a Frontend NPM Library Leaked Internal API Keys\": \"https://infosecwriteups.com/package-of-problems-how-a-frontend-npm-library-leaked-internal-api-keys-423784602d54?source=rss----7b722bfd1b8d---4\"\n },\n \"Doonsec's feed\": {\n \"吴世忠院士：大模型安全治理的现状与展望\": \"https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247549239&idx=2&sn=bc4a2030631d8998a78e908175675ba2\",\n \"卢森堡电信瘫痪事件背后：供应链安全，正成为关基的“命门”\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491805&idx=1&sn=a474b320eca154f2651609e2d34dc0a5\",\n \"RingQ二开免杀加载器项目详细介绍\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTgzOTg4Mg==&mid=2247485894&idx=1&sn=debdb33e8c9f8cbd180d585e9d7bf6ef\",\n \"东胜物流软件WorkFlowGridSource.aspx接口存在SQL注⼊漏洞 附POC\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488833&idx=1&sn=f8ea1de022b34eaec6b9239fbdf8327c\",\n \"开箱即用的CobaltStrike Beacon源代码\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488562&idx=1&sn=0fd5fff0204704858cb2e6974ee3c63c\",\n \"【工具推荐】TsojanScan\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MDczMzYxNw==&mid=2247484321&idx=1&sn=d7d7b57df4464dda662188818292965d\",\n \"2024年东南亚电信行业大规模网络攻击揭秘：国家级黑客组CL-STA-0969揭秘，专业背后暗藏惊人技术\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486481&idx=1&sn=875b3bb5f19750485b05afa7ae9ab7e8\",\n \"记某次众测捡洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497993&idx=1&sn=fc9641232c44b9b8119119093cd3e336\",\n \"【具身智能】2025长三角（昆山）具身智能产业发展暨开发者大会在昆山成功举办\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649253674&idx=1&sn=5f88f794bf647debb91f8c5e27a288ef\",\n \"【信息技术应用产学协同人才培养行动计划】正式启动，共筑人才自主培养新生态\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649253674&idx=2&sn=7797d37614c80c206671792a12442fde\",\n \"AI 时代，软件测试工程师如何不被替代？\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649253674&idx=3&sn=e8d871f0e7770c98fd5f5377fd159aa5\",\n \"【技术能力】首家医疗行业中间件！东方通企业服务总线率先通过中国软件评测中心医疗互联互通“标准符合性”产品能力测评\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649253674&idx=4&sn=74c2e1beafdcba8dcb529f125e30060a\",\n \"【涨知识】什么是具身智能？\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649253674&idx=5&sn=66681b4ece5070440c77e0bc37f6160f\",\n \"勒索软件 — 定义、预防和删除\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzM0NjcxNw==&mid=2247485596&idx=1&sn=c9a3b93348577cf5f9ebb011bf8a02ec\",\n \"【资料】5篇OSINT资料：含俄罗斯联邦安全局（FSB）多个地面监听站的地理位置\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151342&idx=1&sn=cc0847ecd33179219c74ae58d8e2a8c8\",\n \"【转载】美军在印太地区首次实战部署“暗鹰”高超音速导弹\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151342&idx=2&sn=5be25ab8a7d7fbb08bb21864e46c4f6b\",\n \"与情绪的关系更近一步\": \"https://mp.weixin.qq.com/s?__biz=MzUyMTUwMzI3Ng==&mid=2247485617&idx=1&sn=a8af4b5e095678a1055082000ce04925\",\n \"【AI漏洞复现】Cursor IDE 远程代码执行漏洞（CVE-2025-54135）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494485&idx=1&sn=4ce3b069b4789b766b9043467d6bb061\",\n \"全国网安标委公告‖7项网络安全国家标准获批发布\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDYzNTYxNQ==&mid=2247503773&idx=1&sn=59fd6683c19442b1b72a888f8ac0c711\",\n \"90页 医疗健康大模型伦理与安全白皮书（2025）\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655288448&idx=1&sn=75a6b43d3022cdca099994610e21456c\",\n \"人工智能、算力算网 今天上传文件列表\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655288448&idx=2&sn=bb82137f057e86a6654c7d6c86a58bab\",\n \"Vulnhub-Pinkys-Palace-v3\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MDk4MzkyMA==&mid=2247484724&idx=1&sn=e036057e17ca8c253b660049d92ffe87\",\n \"EDUSRC、CNVD挖洞技巧分享\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247522527&idx=1&sn=ecf480dbc17a0253a95ea2e127c54e3f\",\n \"清华大学 | TrafficFormer: 针对流量数据的有效预训练模型\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493288&idx=1&sn=ae92b5bc38831f35718912f227b3c399\",\n \"【代发】SRC实战：如何入侵牢美国防部军方卫星运营商\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NDU1NTA5MA==&mid=2247484687&idx=1&sn=bf1a95218b16b94155c11229e30263d8\",\n \"[0804] 一周重点情报汇总｜天际友盟情报站\": \"https://mp.weixin.qq.com/s?__biz=MzIwNjQ4OTU3NA==&mid=2247510455&idx=1&sn=443e12bef0b3e957aab0630b18b84c0e\",\n \"半年度报告：迪普科技2025年上半年度报告发布，营收5.5亿，连续三年实现正增长\": \"https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247492808&idx=1&sn=f86194b37b4bb8a466552433bb10f987\",\n \"信息越多，智慧越少\": \"https://mp.weixin.qq.com/s?__biz=MzU5NzQ3NzIwMA==&mid=2247486882&idx=1&sn=8e3187090b87e7ec131553aa1baf25d8\",\n \"XML 外部实体 （XXE） 注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484667&idx=1&sn=eeda4c78d0cd30c870e455b5f4180f12\",\n \"一个功能齐全的工具合集、App届的瑞士军刀！同类软件没有一个能打！\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247488012&idx=1&sn=7fe6bb04582ed4627adcffe5d2a72934\",\n \"网络安全法律法规与监管要求合规汇编\": \"https://mp.weixin.qq.com/s?__biz=MzI5MTEyMDUzMw==&mid=2650046750&idx=1&sn=16edd0a706256d1ca8742cb35392836e\",\n \"对话交易员，从5万到上亿资产，带你了解交易员\\\\\\\"予与\\\\\\\"\": \"https://mp.weixin.qq.com/s?__biz=MzI5MDU1NDk2MA==&mid=2247513152&idx=1&sn=baf10416479aa4861f25277892b0e20c\",\n \"全球瞭望｜网络安全重大事件精选（179期）\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247600838&idx=1&sn=f87613712e296c8c59f56fd63d59615f\",\n \"Webshell免杀技术强特征+加密\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247489689&idx=1&sn=8ee235e7f833d2fc520095ce89b89e23\",\n \"大模型系列：蒸馏、RAG检索增强、微调的区别\": \"https://mp.weixin.qq.com/s?__biz=MzU5MjI1NTY1Mg==&mid=2247485351&idx=1&sn=dd0ad325aaf40c845e7ab2ef78f2370d\",\n \"八载春秋，感恩同行｜庆祝河北镌远公司成立八周年\": \"https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247517333&idx=1&sn=df5b8239177c9c7ba544c3a5fbc4cf68\",\n \"聚焦加密货币犯罪全链条打击与治理！8月7日线上开讲\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651445235&idx=1&sn=00de6c2448ccd9b86cc847a998b07096\",\n \"AI新职业→人工智能训练师（三级/高级工）职业技能等级认定火热进行中！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651445235&idx=2&sn=2890da18c2870c0939b446d5b952a857\",\n \"开源免费 | 点两下就能本地运行 DeepSeek 等大模型，这个「羊驼」真的强！\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492538&idx=1&sn=ee191bae44a771120e0bb4e36f564000\",\n \"成都世运村开村！亚信安全互动展示中心“开门迎客”，备受关注\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650624438&idx=1&sn=2d710d78d782643cffd5801693458718\",\n \"世运飞扬 亚信护航 | 2025年成都世运会倒计时3天！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650624438&idx=2&sn=d4e5a05aa7f7e11f34c8ddb0a86edb34\",\n \"大洞，速修，1Panel 面板 RCE 任意命令执行\": \"https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247491230&idx=1&sn=7deb5f1c86f0c69e2a4df7550c2a7aaf\",\n \"花掉我1分钱巨款的AISecOps 机器人在认真办事吗？\": \"https://mp.weixin.qq.com/s?__biz=MzkyNjM0MjQ2Mw==&mid=2247483789&idx=1&sn=5fd5f7c704070f3421072411c65b9f7f\",\n \"银行报表管理：从RPA迈向AI驱动的智能化升级\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932504&idx=1&sn=ebd0683ca40d0165dbc52dc1136991a8\",\n \"AI快讯：一项AI安全国标发布，高德地图宣布全面AI化\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932504&idx=2&sn=ec1a0596b83906adf0db3faf8df887f9\",\n \"恒丰银行2025年度AI算力服务项目\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932504&idx=3&sn=1b8fc0ce46abfa4915db7f71f7765248\",\n \"【安全圈】AWS封禁事件：开发者十年数据遭“技术性清零”暴露云服务信任危机\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=1&sn=c8adca09dfa4b98083759d23ba8c3ee6\",\n \"【安全圈】严重安全事件：Netflix、Amazon、Disney+ 使用的微软 PlayReady DRM 证书遭泄露\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=2&sn=dff7a1af65688289dbdd855049236b03\",\n \"【安全圈】Microsoft Teams 推出“60 秒静默测试通话”功能，助力 IT 管理员主动评估网络质量\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=3&sn=8e9d0a44978f0facc9e2756fe6871ea1\",\n \"【安全圈】警惕！假冒 Discord / OnlyFans 验证页面传播新型“Epsilon Red”勒索软件\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=4&sn=02a8fe9005afc25f3859ee66250b11ab\",\n \"绿盟科技深度参与2025年网络和数据安全产业论坛\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650470523&idx=1&sn=cd97f2e8e9ebd8d1e79aa11b980824aa\",\n \"【国际视野】美国问责局发布《网络安全法规：行业对协调化影响、进展、挑战与机遇的看法》报告\": \"https://mp.weixin.qq.com/s?__biz=MzIyMjQwMTQ3Ng==&mid=2247491606&idx=1&sn=cf69e36721075c667925a8363663ae8a\",\n \"ISC.AI 2025 倒计时2天！\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649820066&idx=1&sn=59c43bc710eb009c3750938d205d6431\",\n \"ISC.AI 2025盛幕即启，锁定三大亮点，解锁智能体时代新升级\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649820066&idx=2&sn=5112758095d340ae6d71d9c1b83d970f\",\n \"ISC.AI 2025 展区打卡指南新鲜出炉！\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649820066&idx=3&sn=cc4e1b95931fc7bbcef985169c41962b\",\n \"ISC.AI 2025 第三届全国信息安全产教融合共同体发展大会 议程提前看！\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649820066&idx=4&sn=13c281a8dcc5962cf7e654411ddceda5\",\n \"ISC.AI 2025 安全筑基・智能拓界：企业创新协同论坛 议程提前看！\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649820066&idx=5&sn=cfc9e6b5841c9b32bcef753f6994a8f7\",\n \"ISC.AI 2025 安全智能体技术赋能与应用创新论坛 议程提前看！\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649820066&idx=6&sn=762c15f9c97e5e898ccffd3bf094c326\",\n \"ISC.AI 2025 企业级 AI 应用领航者论坛 议程提前看！\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649820066&idx=7&sn=a5c5a2d1b5bfef28e86af55554a25850\",\n \"干货丨新能源基地-常规直流输电系统动态安全风险预警（附PPT）\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247534356&idx=1&sn=27af40b630f3955233d2fb2ee67330e0\",\n \"白皮书丨数字低空安全技术体系白皮书（附下载）\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247534356&idx=2&sn=fbad699f3f627f0f07499be70b8729b2\",\n \"通知 | 工信部等八部门印发《机械工业数字化转型实施方案》（附全文）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=1&sn=dbce928135a011699c4976443dcc44b3\",\n \"关注 | 7项网络安全国家标准获批发布\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=2&sn=16b659641d2727719e7660370954f371\",\n \"天融信：分层防御筑牢硬件资产安全防线，战略级资产防护是关键\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=3&sn=5cf7bcf344eadbaab7f868c204c19b9a\",\n \"关注 | 这5款App，完成个人信息收集使用优化改进\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=4&sn=e7140325b8f39deee80d35d8cbd3058d\",\n \"Python隐藏漏洞通过超14.5万个软件包传播\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325790&idx=2&sn=e76098f68b88c88230f642e4e085c88e\",\n \"Linux内核页表利用技术深度剖析\": \"https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512557&idx=1&sn=c8d4ba7e5951ab779fa6d3ce664b3f10\",\n \"Gartner预测：2026年全球信息安全支出超1.7亿元\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514781&idx=1&sn=91fdf02c37903465f4a9c3207fa1fc48\",\n \"美国防部利用数据分析协助打造战备就绪的网络部队\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514781&idx=2&sn=45b2640497e2e23a6f0313057e8eefe0\",\n \"一条Clickhouse查询语句搞定复杂AI安全分析\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908643&idx=1&sn=15d0ff08d2dc6a026264ddaeb41a0e2c\",\n \"Pwn2Own 爱尔兰大赛目标和奖金公布 WhatsApp 最高100万美元\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523728&idx=1&sn=470aea5565c5a6156a11b8fcf0cec510\",\n \"微软扩展.NET漏洞计划 最高赏金提至$4万\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523728&idx=2&sn=aad4c0c2134f9c42dc0e73f20720114c\",\n \"金盾信安 | 网络和数据领域资讯第69期(2025.7.29-2025.8.4)\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448689763&idx=1&sn=c66b4c690653f1ac94f9731f8447b12f\",\n \"7项网络安全国家标准获批发布\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448689763&idx=2&sn=3895e0fd7922b93c712e5f10bf48e768\",\n \"工业和信息化部通报23款侵害用户权益的APP（SDK）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448689763&idx=3&sn=6fa7f0dc121d2c2f5fc3b8fdd2c21e31\",\n \"ctf搞笑版｜AI靶场乌龙\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDM4NTk4NA==&mid=2452946834&idx=1&sn=b6d29fb29565fc4d2d40ab2fa6f9feed\",\n \"网络安全正在改变金融市场的运作方式，但不会改变人们的思维方式\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247642322&idx=1&sn=d49836b6c7d16a16f436e7d60dc6d0a4\",\n \"免费赠送丨网络安全宣传讲义6篇\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247642322&idx=2&sn=f75bf5bf7b97ea9ac66ab751390662c5\",\n \"每周网安资讯 （7.29-8.4）|攻击者利用虚假应用程序针对Android和iOS用户窃取数据\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506789&idx=1&sn=583ff2a368647f2af2744ccf38319c28\",\n \"百年老企KNP因勒索攻击破产倒闭的背后，竟是因为员工使用了弱密码！\": \"https://mp.weixin.qq.com/s?__biz=MzU2NzMwNTgxNQ==&mid=2247491907&idx=1&sn=e19b84cdbb4299c21f16219182b4c908\",\n \"沃尔沃安全神话破灭，软件漏洞导致刹车失灵\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247557921&idx=1&sn=54e8b81cbf8a279be6f8d5b52806033a\",\n \"车联网渗透测试 | 汽车网络安全的车联网渗透测试执行标准\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247557921&idx=2&sn=ccafb791f27c3b19a5c43b29c2e25977\",\n \"【谈思月度盘点】7月汽车网络安全产业事件金榜Top10\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247557921&idx=3&sn=21ddb425da9a35ebb7a7e9ef20124ef1\",\n \"需求征集 | 谈思汽车安全供需对接通道开启！精准匹配优质安全供应商\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247557921&idx=4&sn=4b7d05199b23c2d10717cca305f9e1f3\",\n \"从认知到实践：AI 友好的 MCP 工具构建指南\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247515760&idx=1&sn=1191e7dcf258f997af25cc4d53fb3727\",\n \"网络安全信息与动态周报2025年第30期（7月21日-7月27日）\": \"https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490511&idx=1&sn=27b47554423d6bb6a21851e6b6a79197\",\n \"突破信息安全红线！英伟达H20芯片被曝安全存疑\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247542807&idx=1&sn=75891c6252fc313182db6f6c65342ed0\",\n \"蛙池AI新功能探秘 | 这次又整了个什么好活？\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649769365&idx=1&sn=499f2c692dc472155a8c2477f4b0423a\",\n \"8月1日起，《关键信息基础设施商用密码使用管理规定》正式实施\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTg0OTAyOQ==&mid=2247486502&idx=1&sn=c41ea317cfb6cad44a26de528fb77f06\",\n \"【资讯】云南省数据局就《云南省公共数据资源授权运营管理办法（试行）（公开征求意见稿）》公开征求意见\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554728&idx=1&sn=1855588a84e5a058ec4e04fc8e0d2333\",\n \"【资讯】武汉市经信局印发《关于印发武汉市促进人工智能产业发展若干政策措施有关条款资金管理办法的通知》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554728&idx=2&sn=2b89d60950dcfeaae701eab20e3ae6df\",\n \"【资讯】怀柔区政数局就《怀柔区数字化转型规划（征求意见稿）》公开征集意见\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554728&idx=3&sn=cb61241dbc2bf05204a8e4881a56ea72\",\n \"智库快讯（第182期）| 欧盟发布《AI 法案》配套指南 美发布《AI行动计划》——AI法律新闻说（七月下）\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTA5NTMzMQ==&mid=2247501750&idx=1&sn=850bd661fede058a494778637d734ac1\",\n \"专业护航｜珞安科技构建石油企业工控系统免疫防御体系\": \"https://mp.weixin.qq.com/s?__biz=MzU2NjI5NzY1OA==&mid=2247513494&idx=1&sn=d4eb38665c584f3b30fa002ba7d7168b\",\n \"隐蔽通讯常见种类介绍\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597880&idx=1&sn=91fa8fdbe75cd055aa1afe2807f98b07\",\n \"黑客用树莓派突破银行防线，4G 模块成 ATM 盗刷 “暗门”\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597880&idx=2&sn=fcccc2411b64aad42e3b8d3c5b070ae7\",\n \"即将完结！欢迎报名：《Frida源码情景分析》\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597880&idx=3&sn=5968f5717ea1ee902ba5b66718544d6a\",\n \"【风险通告】用友U8+渠道管理（高级版）存在文件上传漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490509&idx=2&sn=8a2809861a4968889f3a72a8de2aea59\",\n \"自学网络安全别再迷茫了！小白跟着我整理知识点走就行！\": \"https://mp.weixin.qq.com/s?__biz=MzkzMzkyNTQ0Ng==&mid=2247484356&idx=1&sn=68d6c0795b78ef0d1117df8df78e3fe3\",\n \"多智能体分链协作 驱动安全运营效能跃迁\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651733827&idx=1&sn=1b441073c3d0806f080fd8a22afb6daf\",\n \"安全419 | 7月安全厂商动态：全面拥抱AI智能体时代\": \"https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247549239&idx=1&sn=54f47a126a48830b5e7a4e4796342a12\",\n \"氛围感编程，说干就干用AI手搓一个微信带货小程序\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649795041&idx=1&sn=a83ef6280317007bab906931eaf128a2\",\n \"悟空AI Agent再进化：连斩魔搭社区SWIFT框架RCE 0day漏洞\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207332&idx=1&sn=a07696b69167b990c15901ec87fd310f\",\n \"湖州师范学院更名已正式进入公示期更名为湖州师范大学！\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Mjg5MjMxOA==&mid=2247484010&idx=1&sn=748ecc2f068ae55ebc712b0b249621f0\",\n \"简讯丨湖北省商用密码协会领导一行到访信安珞珈交流\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650665186&idx=1&sn=154ca81816434d4e951d83d719317639\",\n \"黑客自学教程（非常详细）黑客零基础入门到精通，收藏这篇就够了_新手黑客自学教程\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247486948&idx=1&sn=22f42e6d07425b03b1718786b4ec0bda\",\n \"AI泄密警钟！科研员这一操作泄露核心数据，造成不可挽回损失\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492912&idx=1&sn=3982bb3ab42e6ab466e75bfbd7f1d6c1\",\n \"赋能网安教育，锻造精锐师资——2025网络安全高级研修班圆满落幕\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555621&idx=1&sn=36fbe45378280449a31e6ecb6b6d3b59\",\n \"伪装与诱导，体验靶场实战\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555621&idx=2&sn=5a5829ea3439cec4fe5369209b60bd33\",\n \"政企学联动｜3E讲坛圆桌共议金融科技人才生态构建\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247508838&idx=1&sn=887a0d16de3b8518a07945949b4ea4a0\",\n \"全赛道获奖！聚铭网络闪耀第二届雄安未来之城场景汇网络安全技术应用大赛\": \"https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247507771&idx=1&sn=a7da63ce1e7a391f92821908f69f3ddc\",\n \"洞·见 | 20250804\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MDQ5MTQ4NA==&mid=2247487999&idx=1&sn=b9ff3ea82e9d3162d3d546da35a2c601\",\n \"获取ISC2认证，奔赴您期许的未来\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247493016&idx=1&sn=d311cb8ddcb359e25246f4befa5f5749\",\n \"信息支援部队攻防演练首次公开，筑牢“网电长城”须从终端开始\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628521&idx=1&sn=0cb043c33d92ba347ba839971ff773c5\",\n \"实力彰显！奇安信旗下京沪司法鉴定所双双荣获诚信等级A级评定\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628521&idx=2&sn=804e46344c05d700c6cbb50635573e6b\",\n \"以AJ-Report为例从0开始学习Java代码审计\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTIzODg0MA==&mid=2247491540&idx=1&sn=f8ce7fa201b0be601bf0e20fc1b55895\",\n \"CNVD漏洞周报2025年第29期\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496191&idx=1&sn=158df7c86b0123b7fadc5d85fc52e475\",\n \"上周关注度较高的产品安全漏洞(20250728-20250803)\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496191&idx=2&sn=ddf1d3c7eb8db6f80a6d668da3286e34\",\n \"喜报！北信源中标中国银联商密数据防泄露系统建设项目 筑牢数据安全防线\": \"https://mp.weixin.qq.com/s?__biz=MzA5MTM1MjMzNA==&mid=2653426651&idx=1&sn=035b76c7956be2b798f0259976ef8a0d\",\n \"【重要通知】AI安全前沿技术专题交流会8月6日-7日在西电召开，欢迎参会交流！\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652317873&idx=1&sn=27c782da8301140d6abbb937e8922256\",\n \"喜报丨汉华信安荣膺2025网络安全大赛优胜奖，以AI智护数据安全新纪元！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODYyMTI2NA==&mid=2247484677&idx=1&sn=ac4131ea1c7815947e8bbc09ccf23e39\"\n },\n \"Exodus Intelligence\": {\n \"Oops Safari, I think You Spilled Something!\": \"https://blog.exodusintel.com/2025/08/04/oops-safari-i-think-you-spilled-something/\"\n },\n \"Horizon3.ai\": {\n \"Fix What Matters Most: Six New NodeZero® Capabilities That Redefine Risk-Based Vulnerability Management\": \"https://horizon3.ai/intelligence/blogs/fix-what-matters-most-six-new-nodezero-capabilities-that-redefine-risk-based-vulnerability-management/\"\n },\n \"Sandfly Security Blog RSS Feed\": {\n \"Sandfly 5.0.6 Maintenance Release\": \"https://sandflysecurity.com/blog/sandfly-5-0-6-maintenance-release\"\n },\n \"GuidePoint Security\": {\n \"The Secret Life of APIs: Uncovering Hidden Endpoints and More\": \"https://www.guidepointsecurity.com/blog/the-secret-life-of-apis-uncovering-hidden-endpoints-and-more/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"“Day 2: Reconnaissance — How I Found My First Real Bug (And How You Can Too)”\": \"https://infosecwriteups.com/day-2-reconnaissance-how-i-found-my-first-real-bug-and-how-you-can-too-dbf81cb44069?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Clean-Up Fail: How a Forgotten Admin Endpoint Let Me Drop All The Data ️\": \"https://infosecwriteups.com/clean-up-fail-how-a-forgotten-admin-endpoint-let-me-drop-all-the-data-%EF%B8%8F-1e1c376a986a?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Package of Problems: How a Frontend NPM Library Leaked Internal API Keys\": \"https://infosecwriteups.com/package-of-problems-how-a-frontend-npm-library-leaked-internal-api-keys-423784602d54?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Week 7 — Learning Basic Concepts of Cybersecurity\": \"https://infosecwriteups.com/week-7-learning-basic-concepts-of-cybersecurity-09b4170209d1?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Reflected XSS with Some SVG Markup Allowed\": \"https://infosecwriteups.com/reflected-xss-with-some-svg-markup-allowed-65e24224d819?source=rss----7b722bfd1b8d--bug_bounty\",\n \"ANDROID PENTESTING —PART 1— FUNDAMENTALS\": \"https://infosecwriteups.com/android-pentesting-part-1-fundamentals-95f4fd659051?source=rss----7b722bfd1b8d--bug_bounty\",\n \"ANDROID PENTESTING — PART 2 — STATIC ANALYSIS\": \"https://infosecwriteups.com/android-pentesting-part-2-static-analysis-307844a36b50?source=rss----7b722bfd1b8d--bug_bounty\",\n \"How to Find and Exploit Information Disclosure Vulnerabilities Like a Pro\": \"https://infosecwriteups.com/how-to-find-and-exploit-information-disclosure-vulnerabilities-like-a-pro-a9386ef01000?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Malwarebytes\": {\n \"A week in security (July 28 – August 3)\": \"https://www.malwarebytes.com/blog/news/2025/08/a-week-in-security-july-28-august-3\"\n },\n \"MalwareTech\": {\n \"Every Reason Why I Hate AI and You Should Too\": \"https://malwaretech.com/2025/08/every-reason-why-i-hate-ai.html\"\n },\n \"Microsoft Security Response Center\": {\n \"Zero Day Quest: Join the largest hacking event with up to $5 million in total bounty awards\": \"https://msrc.microsoft.com/blog/2025/08/zero-day-quest-join-the-largest-hacking-event-with-up-to-5-million-in-total-bounty-awards/\"\n },\n \"daniel.haxx.se\": {\n \"Even happier eyeballs\": \"https://daniel.haxx.se/blog/2025/08/04/even-happier-eyeballs/\"\n },\n \"Wallarm\": {\n \"Black Hat 2025: Why We Built a Museum Instead of a Booth\": \"https://lab.wallarm.com/black-hat-2025-why-we-built-a-museum-instead-of-a-booth/\"\n },\n \"Reverse Engineering\": {\n \"/r/ReverseEngineering's Weekly Questions Thread\": \"https://www.reddit.com/r/ReverseEngineering/comments/1mh6jpm/rreverseengineerings_weekly_questions_thread/\",\n \"AWS WAF Solver with Image detection\": \"https://www.reddit.com/r/ReverseEngineering/comments/1mh0vg6/aws_waf_solver_with_image_detection/\"\n },\n \"专注APT攻击与防御\": {\n \"第六章——我为什么坚信主动防护运营 (PSecOps) 的内在逻辑\": \"https://micropoor.blogspot.com/2025/08/psecops.html\",\n \"第五章——我为什么坚信分工是创新的前提的内在逻辑\": \"https://micropoor.blogspot.com/2025/08/blog-post.html\"\n },\n \"先进攻防\": {\n \"一条Clickhouse查询语句搞定复杂AI安全分析\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908643&idx=1&sn=15d0ff08d2dc6a026264ddaeb41a0e2c\"\n },\n \"微步在线研究响应中心\": {\n \"漏洞通告 | 1Panel远程命令注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507860&idx=1&sn=ecc26b8161180e4ebc644a0602099118\"\n },\n \"安全客\": {\n \"AI 编程神器Cursor现高危漏洞，一条提示即可RCE\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788902&idx=1&sn=fc500323dda78989fef066dc7fe6ce41\"\n },\n \"看雪学苑\": {\n \"隐蔽通讯常见种类介绍\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597880&idx=1&sn=91fa8fdbe75cd055aa1afe2807f98b07\",\n \"黑客用树莓派突破银行防线，4G 模块成 ATM 盗刷 “暗门”\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597880&idx=2&sn=fcccc2411b64aad42e3b8d3c5b070ae7\",\n \"即将完结！欢迎报名：《Frida源码情景分析》\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597880&idx=3&sn=5968f5717ea1ee902ba5b66718544d6a\"\n },\n \"天黑说嘿话\": {\n \"Akamai 3.0 反混淆笔记\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484546&idx=1&sn=2cdc9fc9b42c005e8c99943b3e57f682\"\n },\n \"安全分析与研究\": {\n \"Patchwork APT组织最新攻击样本与威胁情报\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247493071&idx=1&sn=cb209b8854673f661b9dd569cf8d60f5\"\n },\n \"dotNet安全矩阵\": {\n \"红队快速打包，通过 Sharp4CompressArchive 一键定制化压缩文件\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500229&idx=1&sn=619a7fe282b1affa94844823ec3b28a2\",\n \"国内最专业、最全面的 [ .NET 代码审计 ] 体系化视频学习课程\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500229&idx=2&sn=e76cdf7baa96ea125da919c0d24c89fe\",\n \"Sharp4WebCmd5：一键支持内存加载远程文件和无需依赖 cmd 执行命令\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500229&idx=3&sn=87c2c21803d5e265d0d3b608b9143e51\"\n },\n \"安全内参\": {\n \"Gartner预测：2026年全球信息安全支出超1.7万亿元\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514781&idx=1&sn=91fdf02c37903465f4a9c3207fa1fc48\",\n \"美国防部利用数据分析协助打造战备就绪的网络部队\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514781&idx=2&sn=45b2640497e2e23a6f0313057e8eefe0\"\n },\n \"腾讯安全威胁情报中心\": {\n \"情报每周回顾 2025-08-03\": \"https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510686&idx=1&sn=dd5ddb4ff56e00d81198ea51b63fdae6\"\n },\n \"代码卫士\": {\n \"Pwn2Own 爱尔兰大赛目标和奖金公布 WhatsApp 最高100万美元\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523728&idx=1&sn=470aea5565c5a6156a11b8fcf0cec510\",\n \"微软扩展.NET漏洞计划 最高赏金提至$4万\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523728&idx=2&sn=aad4c0c2134f9c42dc0e73f20720114c\"\n },\n \"安全学术圈\": {\n \"清华大学 | TrafficFormer: 针对流量数据的有效预训练模型\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493288&idx=1&sn=ae92b5bc38831f35718912f227b3c399\"\n },\n \"ChaMd5安全团队\": {\n \"首届CCF智能汽车大赛(CCF IVC 2025) Mini-Venom(第一名)\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247513226&idx=1&sn=c77b5b9e97c2fa7535f5bcbbdb638a29\"\n },\n \"安全圈\": {\n \"【安全圈】AWS封禁事件：开发者十年数据遭“技术性清零”暴露云服务信任危机\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=1&sn=c8adca09dfa4b98083759d23ba8c3ee6\",\n \"【安全圈】严重安全事件：Netflix、Amazon、Disney+ 使用的微软 PlayReady DRM 证书遭泄露\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=2&sn=dff7a1af65688289dbdd855049236b03\",\n \"【安全圈】Microsoft Teams 推出“60 秒静默测试通话”功能，助力 IT 管理员主动评估网络质量\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=3&sn=8e9d0a44978f0facc9e2756fe6871ea1\",\n \"【安全圈】警惕！假冒 Discord / OnlyFans 验证页面传播新型“Epsilon Red”勒索软件\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=4&sn=02a8fe9005afc25f3859ee66250b11ab\"\n },\n \"数世咨询\": {\n \"重塑 SIEM 市场的 4 个主要趋势\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247539756&idx=1&sn=ce05c5a7812a287903e8448c150b17ec\"\n },\n \"RapidDNS\": {\n \"RapidDNS 数据更新服务 2025-08-01 更新\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NDU0ODMxOQ==&mid=2247485813&idx=1&sn=9d8dcc8048b87d53965ca1a3da170b51\"\n },\n \"极客公园\": {\n \"今年 CJ，AI 成了游戏产业的「必答题」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653084081&idx=1&sn=ee0a5a209a95073c522cb7c39b4f9901\",\n \"这个 WAIC 展台旁，围满小朋友\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653084066&idx=1&sn=2fcb2fcc4a2ce2cac58f7c11a45dcb8c\",\n \"a16z ：AI 投资不再看模型性能；中国汽研、理想汽车回应 i8 测试争议；万事达否认向平台施压下架成人游戏 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653084030&idx=1&sn=5e2d4afe74d3dc11fd82a5d75400f7c4\"\n },\n \"NOVASEC\": {\n \"【代码】CobaltStrike Beacon 源代码公开\": \"https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490735&idx=1&sn=7893eb48b005468c8b31653fcb2ed435\"\n },\n \"阿里安全响应中心\": {\n \"速来挑战｜赛道二今日开赛，首周额外奖励发布！\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652997941&idx=1&sn=e2ebbc93cf4aa080ff7183ce770e67b7\"\n },\n \"火绒安全\": {\n \"火绒安全终端防护数据月报（2025-07）\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247526186&idx=1&sn=d218ad69287f976cb21ec44c29c3cf74\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247526186&idx=2&sn=50c16a41cfe2766de1d9c5d4f3c4c2ff\"\n },\n \"威努特安全网络\": {\n \"教育部新规！明确智慧校园建设之道\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651134611&idx=1&sn=0e3d1df445a1d789e1e1d395fa21c3e6\"\n },\n \"陌陌安全\": {\n \"浅谈威胁情报技术\": \"https://mp.weixin.qq.com/s?__biz=MzI2OTYzOTQzNw==&mid=2247488849&idx=1&sn=244b31ed3e540e6adfd90cb19574dc25\"\n },\n \"数据安全与取证\": {\n \"电子数据取证分析师考试来袭，速看通知！\": \"https://mp.weixin.qq.com/s?__biz=MzIyNzU0NjIyMg==&mid=2247488454&idx=1&sn=8f984b1e31c6d7f058ef5425ce51b5d5\"\n },\n \"安全牛\": {\n \"国内外代表性AI Agent原生企业鉴析\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138216&idx=1&sn=f368b70ebc29284a4667e61a362f0c84\",\n \"ChatGPT对话记录可被搜索引擎公开查询？官方承认防护不足；新型Linux后门\\\"瘟疫\\\"可规避所有主流安全工具的检测 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138216&idx=2&sn=111fcdf25f944c6339717d3dbb6be819\"\n },\n \"丁爸 情报分析师的工具箱\": {\n \"【资料】5篇OSINT资料：含俄罗斯联邦安全局（FSB）多个地面监听站的地理位置\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151342&idx=1&sn=cc0847ecd33179219c74ae58d8e2a8c8\",\n \"【转载】美军在印太地区首次实战部署“暗鹰”高超音速导弹\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151342&idx=2&sn=5be25ab8a7d7fbb08bb21864e46c4f6b\"\n },\n \"京东安全应急响应中心\": {\n \"【活动】反爬专项50w奖金池！单个奖励最高4w！\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727849784&idx=1&sn=7f63bbced028da9ed42ce1ded199b509\"\n },\n \"中国信息安全\": {\n \"通知 | 工信部等八部门印发《机械工业数字化转型实施方案》（附全文）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=1&sn=dbce928135a011699c4976443dcc44b3\",\n \"关注 | 7项网络安全国家标准获批发布\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=2&sn=16b659641d2727719e7660370954f371\",\n \"天融信：分层防御筑牢硬件资产安全防线，战略级资产防护是关键\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=3&sn=5cf7bcf344eadbaab7f868c204c19b9a\",\n \"关注 | 这5款App，完成个人信息收集使用优化改进\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=4&sn=e7140325b8f39deee80d35d8cbd3058d\"\n },\n \"吴鲁加\": {\n \"笨办法\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247485644&idx=1&sn=6c3ea0bf431160e825b2d6ecf26e066b\"\n },\n \"CNVD漏洞平台\": {\n \"CNVD漏洞周报2025年第29期\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496191&idx=1&sn=158df7c86b0123b7fadc5d85fc52e475\",\n \"上周关注度较高的产品安全漏洞(20250728-20250803)\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496191&idx=2&sn=ddf1d3c7eb8db6f80a6d668da3286e34\"\n },\n \"嘶吼专业版\": {\n \"Lumma infostealer恶意软件团伙在遭受执法部门打击后卷土重来\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584076&idx=1&sn=c36cf98054ed41bae332fc2784daedc5\",\n \"安全动态回顾|工业和信息化领域人工智能安全治理标准体系发布 网信办就H20算力芯片漏洞后门安全风险约谈英伟达公司\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584076&idx=2&sn=8182a7dc58b0b2aac9a7acf838b6e36d\"\n },\n \"Microsoft Security Blog\": {\n \"Microsoft Entra Suite delivers 131% ROI by unifying identity and network access\": \"https://www.microsoft.com/en-us/security/blog/2025/08/04/microsoft-entra-suite-delivers-131-roi-by-unifying-identity-and-network-access/\"\n },\n \"网安国际\": {\n \"【重要通知】AI安全前沿技术专题交流会8月6日-7日在西电召开，欢迎参会交流！\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652317873&idx=1&sn=27c782da8301140d6abbb937e8922256\"\n },\n \"Securityinfo.it\": {\n \"Cisco svela un nuovo tipo di jailbreak AI: i guardrail non bastano\": \"https://www.securityinfo.it/2025/08/04/cisco-svela-un-nuovo-tipo-di-jailbreak-ai-i-guardrail-non-bastano/?utm_source=rss&utm_medium=rss&utm_campaign=cisco-svela-un-nuovo-tipo-di-jailbreak-ai-i-guardrail-non-bastano\",\n \"CERT-AGID 26 luglio – 1 agosto: SharePoint, MintLoader e 4L4MD4R protagonisti\": \"https://www.securityinfo.it/2025/08/04/cert-agid-26-luglio-1-agosto-sharepoint-mintloader-e-4l4md4r-protagonisti/?utm_source=rss&utm_medium=rss&utm_campaign=cert-agid-26-luglio-1-agosto-sharepoint-mintloader-e-4l4md4r-protagonisti\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Crypto ATMs fueling criminal activity, Treasury warns\": \"https://therecord.media/crypto-atms-fueling-cybercrime\",\n \"Fashion giant Chanel hit in wave of Salesforce data theft attacks\": \"https://www.bleepingcomputer.com/news/security/fashion-giant-chanel-hit-in-wave-of-salesforce-data-theft-attacks/\",\n \"SonicWall urges customers to take VPN devices offline after ransomware campaign\": \"https://therecord.media/sonicwall-possible-zero-day-gen-7-firewalls-ssl-vpn\",\n \"Google says its AI-based bug hunter found 20 security vulnerabilities\": \"https://techcrunch.com/2025/08/04/google-says-its-ai-based-bug-hunter-found-20-security-vulnerabilities/\",\n \"Proton fixes Authenticator bug leaking TOTP secrets in logs\": \"https://www.bleepingcomputer.com/news/security/proton-fixes-authenticator-bug-leaking-totp-secrets-in-logs/\",\n \"Jury ‘sends a message’ on app privacy in ruling against Meta\": \"https://therecord.media/jury-verdict-meta-flo-app-data-privacy-case\",\n \"Microsoft: Outdated Office apps lose access to voice features in January\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-outdated-office-apps-lose-access-to-voice-features-in-january/\",\n \"Perplexity accused of scraping websites that explicitly blocked AI scraping\": \"https://techcrunch.com/2025/08/04/perplexity-accused-of-scraping-websites-that-explicitly-blocked-ai-scraping/\",\n \"Backdoors & Breaches: How Talos is helping humanitarian aid NGOs prepare for cyber attacks\": \"https://blog.talosintelligence.com/backdoors-breaches-how-talos-is-helping-humanitarian-aid-ngos-prepare-for-cyber-attacks/\",\n \"CTM360 spots Malicious ‘ClickTok’ Campaign Targeting TikTok Shop users\": \"https://www.bleepingcomputer.com/news/security/ctm360-spots-malicious-clicktok-campaign-targeting-tiktok-shop-users/\",\n \"Cisco svela un nuovo tipo di jailbreak AI: i guardrail non bastano\": \"https://www.securityinfo.it/2025/08/04/cisco-svela-un-nuovo-tipo-di-jailbreak-ai-i-guardrail-non-bastano/\",\n \"Le migliori VPN per Sky Go Italia: guida per lo streaming senza limiti\": \"https://www.cybersecurity360.it/cultura-cyber/le-migliori-vpn-per-sky-go-italia/\",\n \"New Plague Linux malware stealthily maintains SSH access\": \"https://www.bleepingcomputer.com/news/security/new-plague-malware-backdoors-linux-devices-removes-ssh-session-traces/\",\n \"Hacked Crimean servers reveal information about abducted children, Ukraine says\": \"https://therecord.media/hacked-crimean-servers-abducted-children\",\n \"Sean Cairncross confirmed as national cyber director\": \"https://therecord.media/sean-cairncross-confirmed-oncd\",\n \"Release Notes: QRadar SOAR App, TI Lookup Free Access, and 2,900+ New Detection Rules\": \"https://any.run/cybersecurity-blog/release-notes-july-2025/\",\n \"Scattered Spider Intensifies Cyber Onslaught with New Tactics and Ransomware Deployment\": \"https://cyble.com/blog/scattered-spider-ransomware-in-2025-cyber-alert/\",\n \"Ransomware gangs join attacks targeting Microsoft SharePoint servers\": \"https://www.bleepingcomputer.com/news/security/ransomware-gangs-join-attacks-targeting-microsoft-sharepoint-servers/\",\n \"Le migliori VPN per gli USA 2025: guida completa a sicurezza, streaming e Privacy\": \"https://www.cybersecurity360.it/cybersecurity-nazionale/le-migliori-vpn-per-gli-usa/\",\n \"Panel to create roadmap for establishing US Cyber Force\": \"https://therecord.media/panel-to-create-roadmap-cyber-force\",\n \"Le migliori VPN per la Svizzera, guida completa\": \"https://www.cybersecurity360.it/cultura-cyber/le-migliori-vpn-per-la-svizzera/\",\n \"123456, la password che non ti aspetti e che dice tanto sulla scarsa consapevolezza cyber\": \"https://www.cybersecurity360.it/nuove-minacce/123456-la-password-che-non-ti-aspetti-e-che-dice-tanto-sulla-scarsa-consapevolezza-cyber/\",\n \"Mozilla warns of phishing attacks targeting add-on developers\": \"https://www.bleepingcomputer.com/news/security/mozilla-warns-of-phishing-attacks-targeting-add-on-developers/\",\n \"Qilin Responds to the Accusations: “We Don’t Scam Our Affiliates”\": \"https://www.suspectfile.com/qilin-responds-to-the-accusations-we-dont-scam-our-affiliates/\",\n \"Strategia italiana per le tecnologie quantistiche: le 4 direttrici fondamentali\": \"https://www.cybersecurity360.it/cybersecurity-nazionale/strategia-italiana-per-le-tecnologie-quantistiche-le-4-direttrici-fondamentali/\",\n \"Un comandante per proteggere: il senso profondo della leadership nei sistemi di protezione digitale\": \"https://www.cybersecurity360.it/cultura-cyber/un-comandante-per-proteggere-il-senso-profondo-della-leadership-nei-sistemi-di-protezione-digitale/\",\n \"Videosorveglianza nei negozi, il Garante privacy richiama Confcommercio: cosa impariamo\": \"https://www.cybersecurity360.it/news/videosorveglianza-nei-negozi-il-garante-privacy-richiama-confcommercio-cosa-impariamo/\",\n \"CERT-AGID 26 luglio – 1 agosto: SharePoint, MintLoader e 4L4MD4R protagonisti\": \"https://www.securityinfo.it/2025/08/04/cert-agid-26-luglio-1-agosto-sharepoint-mintloader-e-4l4md4r-protagonisti/\",\n \"NIS 2 e multicompliance: strategie integrate per la cyber security aziendale\": \"https://www.cybersecurity360.it/legal/nis-2-e-multicompliance-strategie-integrate-per-la-cyber-security-aziendale/\"\n },\n \"信息安全国家工程研究中心\": {\n \"吴世忠院士：大模型安全治理的现状与展望\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247500501&idx=1&sn=c1fc28899dcb54770ada829fbec40c92\"\n },\n \"Cyber Division\": {\n \"Dark Web Monitoring: cos’è e come funziona\": \"https://cyberdivision.net/2025/08/04/dark-web-monitoring-cose-e-come-funziona/\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"New Feature: Daily Trends Report, (Mon, Aug 4th)\": \"https://isc.sans.edu/diary/rss/32170\",\n \"ISC Stormcast For Monday, August 4th, 2025 https://isc.sans.edu/podcastdetail/9554, (Mon, Aug 4th)\": \"https://isc.sans.edu/diary/rss/32168\"\n },\n \"Schneier on Security\": {\n \"First Sentencing in Scheme to Help North Koreans Infiltrate US Companies\": \"https://www.schneier.com/blog/archives/2025/08/first-sentencing-in-scheme-to-help-north-koreans-infiltrate-us-companies.html\"\n },\n \"ICT Security Magazine\": {\n \"Truffe sui biglietti dei concerti: siti clone e rivendite illecite minacciano i fan delle grandi star\": \"https://www.ictsecuritymagazine.com/notizie/truffe-concerti/\"\n },\n \"Security Affairs\": {\n \"Hacking group D4rk4rmy claimed the hack of Monte-Carlo Société des Bains de Mer\": \"https://securityaffairs.com/180780/cyber-crime/hacking-group-d4rk4rmy-claimed-the-hack-of-monte-carlo-societe-des-bains-de-mer.html\",\n \"Northwest Radiologists data breach hits 350,000 in Washington\": \"https://securityaffairs.com/180772/data-breach/northwest-radiologists-data-breach-hits-350000-in-washington.html\",\n \"PlayPraetor Android RAT expands rapidly across Spanish and French-speaking regions\": \"https://securityaffairs.com/180760/malware/playpraetor-android-rat-expands-rapidly-across-spanish-and-french-speaking-regions.html\",\n \"Lovense flaws expose emails and allow account takeover\": \"https://securityaffairs.com/180748/breaking-news/lovense-flaws-expose-emails-and-allow-account-takeover.html\",\n \"Nation-state group CL-STA-0969 targeted Southeast Asian telecoms in 2024\": \"https://securityaffairs.com/180737/apt/nation-state-group-cl-sta-0969-targeted-southeast-asian-telecoms-in-2024.html\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Finding vulnerabilities in Claude code\": \"https://www.reddit.com/r/netsec/comments/1mhj0ek/finding_vulnerabilities_in_claude_code/\"\n },\n \"Social Engineering\": {\n \"How does FaceSeek actually work?\": \"https://www.reddit.com/r/SocialEngineering/comments/1mhhrf2/how_does_faceseek_actually_work/\",\n \"Comparison between Myers-Briggs Type Indicator (MBTI) and Mars 360 social classification system\": \"https://www.reddit.com/r/SocialEngineering/comments/1mha9a5/comparison_between_myersbriggs_type_indicator/\"\n },\n \"The Hacker News\": {\n \"NVIDIA Triton Bugs Let Unauthenticated Attackers Execute Code and Hijack AI Servers\": \"https://thehackernews.com/2025/08/nvidia-triton-bugs-let-unauthenticated.html\",\n \"Vietnamese Hackers Use PXA Stealer, Hit 4,000 IPs and Steal 200,000 Passwords Globally\": \"https://thehackernews.com/2025/08/vietnamese-hackers-use-pxa-stealer-hit.html\",\n \"⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More\": \"https://thehackernews.com/2025/08/weekly-recap-vpn-0-day-encryption.html\",\n \"Man-in-the-Middle Attack Prevention Guide\": \"https://thehackernews.com/2025/08/man-in-middle-attack-prevention-guide.html\",\n \"New ‘Plague’ PAM Backdoor Exposes Critical Linux Systems to Silent Credential Theft\": \"https://thehackernews.com/2025/08/new-plague-pam-backdoor-exposes.html\",\n \"The Wild West of Shadow IT\": \"https://thehackernews.com/2025/08/the-wild-west-of-shadow-it.html\",\n \"PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads\": \"https://thehackernews.com/2025/08/playpraetor-android-trojan-infects.html\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Do I need to have a CyberSecurity degree to get into the Cybersecurity field or will CE be just fine?\": \"https://www.reddit.com/r/netsecstudents/comments/1mhocml/do_i_need_to_have_a_cybersecurity_degree_to_get/\",\n \"Lateral Movement – BitLocker\": \"https://www.reddit.com/r/netsecstudents/comments/1mh8qlw/lateral_movement_bitlocker/\",\n \"Exploring an Offbeat AI Idea — Curious Minds Welcome\": \"https://www.reddit.com/r/netsecstudents/comments/1mh0h6d/exploring_an_offbeat_ai_idea_curious_minds_welcome/\"\n },\n \"虎符智库\": {\n \"深度：智能体的安全威胁、漏洞与潜在影响分析\": \"https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493422&idx=1&sn=ff38a0cc321c8fcab27a376c454aa06f\"\n },\n \"李姐姐的扫描器\": {\n \"花掉我1分钱巨款的AISecOps 机器人在认真办事吗？\": \"https://mp.weixin.qq.com/s?__biz=MzkyNjM0MjQ2Mw==&mid=2247483789&idx=1&sn=5fd5f7c704070f3421072411c65b9f7f\"\n },\n \"Computer Forensics\": {\n \"Behind the Book: Threat Hunting macOS with Jaron Bradley\": \"https://www.reddit.com/r/computerforensics/comments/1mhbb38/behind_the_book_threat_hunting_macos_with_jaron/\"\n },\n \"Information Security\": {\n \"Brain food needed for cybersecurity 🍽️🧠\": \"https://www.reddit.com/r/Information_Security/comments/1mhgq8g/brain_food_needed_for_cybersecurity/\",\n \"Looking for Tools/Advice on Network Protocol Fuzzing (PCAP-Based)\": \"https://www.reddit.com/r/Information_Security/comments/1mhmjwn/looking_for_toolsadvice_on_network_protocol/\",\n \"Career advice cybersecurity - moving to ireland from india\": \"https://www.reddit.com/r/Information_Security/comments/1mh33u2/career_advice_cybersecurity_moving_to_ireland/\"\n },\n \"Deeplinks\": {\n \"Digital Rights Are Everyone’s Business, and Yours Can Join the Fight!\": \"https://www.eff.org/deeplinks/2025/08/digital-rights-are-everyones-business-your-team-can-join-fight\",\n \"Data Brokers Are Ignoring Privacy Law. We Deserve Better.\": \"https://www.eff.org/deeplinks/2025/08/data-brokers-are-ignoring-privacy-law-we-deserve-better\"\n },\n \"blackMORE Ops\": {\n \"Best Linux Remote Administration Tools 2025 – Complete Guide\": \"https://www.blackmoreops.com/best-linux-remote-administration-tools-2025/\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"Any genuine telegram hackers here\": \"https://www.reddit.com/r/blackhat/comments/1mhg85i/any_genuine_telegram_hackers_here/\"\n },\n \"Your Open Hacker Community\": {\n \"Can I run Linux on my 8 and 16 gb pendrives?\": \"https://www.reddit.com/r/HowToHack/comments/1mh7dou/can_i_run_linux_on_my_8_and_16_gb_pendrives/\",\n \"How do i inject frida into a split apk?\": \"https://www.reddit.com/r/HowToHack/comments/1mhoec4/how_do_i_inject_frida_into_a_split_apk/\",\n \"Is a bcrypt version:2y hash reversible??\": \"https://www.reddit.com/r/HowToHack/comments/1mh8n4r/is_a_bcrypt_version2y_hash_reversible/\",\n \"Stack Overflows, Heap Overflows, and Existential Dread (SonicWall SMA100 CVE-2025-40596, CVE-2025-40597 and CVE-2025-40598)\": \"https://www.reddit.com/r/HowToHack/comments/1mhig6b/stack_overflows_heap_overflows_and_existential/\",\n \"Downloading files with wget when you can't access directory - files only.\": \"https://www.reddit.com/r/HowToHack/comments/1mhf38p/downloading_files_with_wget_when_you_cant_access/\",\n \"Help me impress my friend through proving him wrong\": \"https://www.reddit.com/r/HowToHack/comments/1mhr896/help_me_impress_my_friend_through_proving_him/\",\n \"Recommend me some Hacking AI\": \"https://www.reddit.com/r/HowToHack/comments/1mhqs0v/recommend_me_some_hacking_ai/\",\n \"Locked Samsung Tablet with Knox\": \"https://www.reddit.com/r/HowToHack/comments/1mhm5t9/locked_samsung_tablet_with_knox/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Weekly Enterprise Security News and Tips on Building Security From Day 1 - Guillaume Ross - ESW #418\": \"http://sites.libsyn.com/18678/weekly-enterprise-security-news-and-tips-on-building-security-from-day-1-guillaume-ross-esw-418\"\n }\n}"}, "4539357c79b9238d7174ae4ee0aaa99e4984221e": {"t": 1785772248.489362, "n": 50101, "h": "0a94479e73e678bf", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-08-04 Review\": \"http://www.sec-wiki.com/?2025-08-04\"\n },\n \"Armin Ronacher's Thoughts and Writings\": {\n \"In Support Of Shitty Types\": \"https://lucumr.pocoo.org/2025/8/4/shitty-types/\"\n },\n \"先知安全技术社区\": {\n \"CVE-2025-54424 1Panel远程命令执行漏洞详细分析及复现（附验证脚本）\": \"https://xz.aliyun.com/news/18573\"\n },\n \"Taxodium\": {\n \"Blaugust 2025 Reflections #1\": \"https://taxodium.ink//blaugust-2025-reflections-1.html\",\n \"Blaugust 2025 Reflections #0\": \"https://taxodium.ink//blaugust-2025-reflections-0.html\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Mon Aug 4 11:20:52 UTC 2025\": \"https://github.com/trickest/cve/commit/d68dd0d8652e22638e7026fa0cb1c85bcb8d5b2e\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"Linux 内核 6.17 发布：EXT4 文件系统性能提升，助力 AI 与云环境扩展\": \"https://www.anquanke.com/post/id/310843\",\n \"英特尔Nova Lake处理器将于2026年发布：18代家族搭载52核心，正面迎战AMD Zen 6\": \"https://www.anquanke.com/post/id/310846\",\n \"NestJS DevTools 存在严重RCE漏洞（CVE-2025-54782）\": \"https://www.anquanke.com/post/id/310849\",\n \"Cursor 代码编辑器遭遇关键多级权限控制漏洞（CVE-2025-54135 和 CVE-2025-54136）\": \"https://www.anquanke.com/post/id/310852\",\n \"Squid严重漏洞（CVE-2025-54574）：造成RCE以及数据泄露风险\": \"https://www.anquanke.com/post/id/310855\",\n \"新型“Plague” PAM 后门曝光：关键 Linux 系统面临静默凭证窃取风险\": \"https://www.anquanke.com/post/id/310859\",\n \"Akira 勒索软件疑似利用零日漏洞攻击已打补丁的 SonicWall VPN 设备\": \"https://www.anquanke.com/post/id/310863\",\n \"攻击者利用伪造 OAuth 应用和 Tycoon 工具包入侵 Microsoft 365 账户\": \"https://www.anquanke.com/post/id/310868\",\n \"Noma融资1亿美元部署“智能代理AI”安全平台，提升网络防御能力\": \"https://www.anquanke.com/post/id/310840\",\n \"AI 生成的恶意 npm 包攻击 Solana 用户，超 1500 次下载后被下架\": \"https://www.anquanke.com/post/id/310875\"\n },\n \"Trustwave Blog\": {\n \"Understanding Trustwave’s Australia IRAP Assessment Services: A Comprehensive Guide\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/understanding-trustwaves-australia-irap-assessment-services-a-comprehensive-guide/\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"ISC.AI 2025盛幕即启，锁定三大亮点，解锁智能体时代新升级\": \"https://www.4hou.com/posts/33nM\",\n \"Lumma infostealer窃取恶意软件团伙在遭受执法部门打击后卷土重来\": \"https://www.4hou.com/posts/9jox\",\n \"RC2安全保密专项赋能大礼包 • 奉上\": \"https://www.4hou.com/posts/VWxM\",\n \"共享充电宝成窃密新通道！梆梆安全构筑智能终端防护网狙击数据泄露\": \"https://www.4hou.com/posts/YZAK\",\n \"吴世忠院士：大模型安全治理的现状与展望\": \"https://www.4hou.com/posts/XPzW\"\n },\n \"paper - Last paper\": {\n \"迈向多智能体系统的统一量化安全基准测试\": \"https://paper.seebug.org/3349/\"\n },\n \"一个被知识诅咒的人\": {\n \"【人工智能】从零开始构建你的专属AI代理：DIY智能体全面指南\": \"https://blog.csdn.net/nokiaguy/article/details/149903315\",\n \"【人工智能】 AI代理的双刃剑：个性化服务的隐私隐忧\": \"https://blog.csdn.net/nokiaguy/article/details/149903295\",\n \"【人工智能】还在为高昂的AI开发成本发愁？这本书教你如何在个人电脑上引爆DeepSeek的澎湃算力！\": \"https://blog.csdn.net/nokiaguy/article/details/149881030\"\n },\n \"Tenable Blog\": {\n \"How Exposure Management Moves Beyond Vulnerability Scans to A Unified View of Risk\": \"https://www.tenable.com/blog/how-exposure-management-moves-beyond-vulnerability-scans-to-a-unified-view-of-risk\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"Revenant: A Modern, Full-Stack Reverse Shell C2 Framework — From Payload Generation to Victim…\": \"https://infosecwriteups.com/revenant-a-modern-full-stack-reverse-shell-c2-framework-from-payload-generation-to-victim-c73167670619?source=rss----7b722bfd1b8d---4\",\n \"Hack Smarter: Automate Security Testing with LLMs and the CAI Framework\": \"https://infosecwriteups.com/hack-smarter-automate-security-testing-with-llms-and-the-cai-framework-fea6e61c1400?source=rss----7b722bfd1b8d---4\",\n \"Windows Authentication Monitoring\": \"https://infosecwriteups.com/windows-authentication-monitoring-ca3dce7b7526?source=rss----7b722bfd1b8d---4\",\n \"Living Off the Cloud: Abusing Cloud Services for Red Teaming\": \"https://infosecwriteups.com/living-off-the-cloud-abusing-cloud-services-for-red-teaming-bf83fae9acae?source=rss----7b722bfd1b8d---4\",\n \"Exploiting LLM APIs with Excessive Agency [Part 1]\": \"https://infosecwriteups.com/exploiting-llm-apis-with-excessive-agency-part-1-19f0d8c70127?source=rss----7b722bfd1b8d---4\",\n \"Zeek (Bro) Network Analysis: Advanced Tactics\": \"https://infosecwriteups.com/zeek-bro-network-analysis-advanced-tactics-dcbf160b5743?source=rss----7b722bfd1b8d---4\",\n \"“Day 2: Reconnaissance — How I Found My First Real Bug (And How You Can Too)”\": \"https://infosecwriteups.com/day-2-reconnaissance-how-i-found-my-first-real-bug-and-how-you-can-too-dbf81cb44069?source=rss----7b722bfd1b8d---4\",\n \"Clean-Up Fail: How a Forgotten Admin Endpoint Let Me Drop All The Data ️\": \"https://infosecwriteups.com/clean-up-fail-how-a-forgotten-admin-endpoint-let-me-drop-all-the-data-%EF%B8%8F-1e1c376a986a?source=rss----7b722bfd1b8d---4\",\n \"OSCP Linux Privilege Escalation Using Apache2\": \"https://infosecwriteups.com/oscp-linux-privilege-escalation-18c75248be91?source=rss----7b722bfd1b8d---4\",\n \"Package of Problems: How a Frontend NPM Library Leaked Internal API Keys\": \"https://infosecwriteups.com/package-of-problems-how-a-frontend-npm-library-leaked-internal-api-keys-423784602d54?source=rss----7b722bfd1b8d---4\"\n },\n \"Doonsec's feed\": {\n \"吴世忠院士：大模型安全治理的现状与展望\": \"https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247549239&idx=2&sn=bc4a2030631d8998a78e908175675ba2\",\n \"卢森堡电信瘫痪事件背后：供应链安全，正成为关基的“命门”\": \"https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491805&idx=1&sn=a474b320eca154f2651609e2d34dc0a5\",\n \"RingQ二开免杀加载器项目详细介绍\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTgzOTg4Mg==&mid=2247485894&idx=1&sn=debdb33e8c9f8cbd180d585e9d7bf6ef\",\n \"东胜物流软件WorkFlowGridSource.aspx接口存在SQL注⼊漏洞 附POC\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488833&idx=1&sn=f8ea1de022b34eaec6b9239fbdf8327c\",\n \"开箱即用的CobaltStrike Beacon源代码\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488562&idx=1&sn=0fd5fff0204704858cb2e6974ee3c63c\",\n \"【工具推荐】TsojanScan\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MDczMzYxNw==&mid=2247484321&idx=1&sn=d7d7b57df4464dda662188818292965d\",\n \"2024年东南亚电信行业大规模网络攻击揭秘：国家级黑客组CL-STA-0969揭秘，专业背后暗藏惊人技术\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486481&idx=1&sn=875b3bb5f19750485b05afa7ae9ab7e8\",\n \"记某次众测捡洞\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497993&idx=1&sn=fc9641232c44b9b8119119093cd3e336\",\n \"【具身智能】2025长三角（昆山）具身智能产业发展暨开发者大会在昆山成功举办\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649253674&idx=1&sn=5f88f794bf647debb91f8c5e27a288ef\",\n \"【信息技术应用产学协同人才培养行动计划】正式启动，共筑人才自主培养新生态\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649253674&idx=2&sn=7797d37614c80c206671792a12442fde\",\n \"AI 时代，软件测试工程师如何不被替代？\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649253674&idx=3&sn=e8d871f0e7770c98fd5f5377fd159aa5\",\n \"【技术能力】首家医疗行业中间件！东方通企业服务总线率先通过中国软件评测中心医疗互联互通“标准符合性”产品能力测评\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649253674&idx=4&sn=74c2e1beafdcba8dcb529f125e30060a\",\n \"【涨知识】什么是具身智能？\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649253674&idx=5&sn=66681b4ece5070440c77e0bc37f6160f\",\n \"勒索软件 — 定义、预防和删除\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzM0NjcxNw==&mid=2247485596&idx=1&sn=c9a3b93348577cf5f9ebb011bf8a02ec\",\n \"【资料】5篇OSINT资料：含俄罗斯联邦安全局（FSB）多个地面监听站的地理位置\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151342&idx=1&sn=cc0847ecd33179219c74ae58d8e2a8c8\",\n \"【转载】美军在印太地区首次实战部署“暗鹰”高超音速导弹\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151342&idx=2&sn=5be25ab8a7d7fbb08bb21864e46c4f6b\",\n \"与情绪的关系更近一步\": \"https://mp.weixin.qq.com/s?__biz=MzUyMTUwMzI3Ng==&mid=2247485617&idx=1&sn=a8af4b5e095678a1055082000ce04925\",\n \"【AI漏洞复现】Cursor IDE 远程代码执行漏洞（CVE-2025-54135）\": \"https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494485&idx=1&sn=4ce3b069b4789b766b9043467d6bb061\",\n \"全国网安标委公告‖7项网络安全国家标准获批发布\": \"https://mp.weixin.qq.com/s?__biz=MzIwNDYzNTYxNQ==&mid=2247503773&idx=1&sn=59fd6683c19442b1b72a888f8ac0c711\",\n \"90页 医疗健康大模型伦理与安全白皮书（2025）\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655288448&idx=1&sn=75a6b43d3022cdca099994610e21456c\",\n \"人工智能、算力算网 今天上传文件列表\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655288448&idx=2&sn=bb82137f057e86a6654c7d6c86a58bab\",\n \"Vulnhub-Pinkys-Palace-v3\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MDk4MzkyMA==&mid=2247484724&idx=1&sn=e036057e17ca8c253b660049d92ffe87\",\n \"EDUSRC、CNVD挖洞技巧分享\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247522527&idx=1&sn=ecf480dbc17a0253a95ea2e127c54e3f\",\n \"清华大学 | TrafficFormer: 针对流量数据的有效预训练模型\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493288&idx=1&sn=ae92b5bc38831f35718912f227b3c399\",\n \"【代发】SRC实战：如何入侵牢美国防部军方卫星运营商\": \"https://mp.weixin.qq.com/s?__biz=Mzk0NDU1NTA5MA==&mid=2247484687&idx=1&sn=bf1a95218b16b94155c11229e30263d8\",\n \"[0804] 一周重点情报汇总｜天际友盟情报站\": \"https://mp.weixin.qq.com/s?__biz=MzIwNjQ4OTU3NA==&mid=2247510455&idx=1&sn=443e12bef0b3e957aab0630b18b84c0e\",\n \"半年度报告：迪普科技2025年上半年度报告发布，营收5.5亿，连续三年实现正增长\": \"https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247492808&idx=1&sn=f86194b37b4bb8a466552433bb10f987\",\n \"信息越多，智慧越少\": \"https://mp.weixin.qq.com/s?__biz=MzU5NzQ3NzIwMA==&mid=2247486882&idx=1&sn=8e3187090b87e7ec131553aa1baf25d8\",\n \"XML 外部实体 （XXE） 注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484667&idx=1&sn=eeda4c78d0cd30c870e455b5f4180f12\",\n \"一个功能齐全的工具合集、App届的瑞士军刀！同类软件没有一个能打！\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247488012&idx=1&sn=7fe6bb04582ed4627adcffe5d2a72934\",\n \"网络安全法律法规与监管要求合规汇编\": \"https://mp.weixin.qq.com/s?__biz=MzI5MTEyMDUzMw==&mid=2650046750&idx=1&sn=16edd0a706256d1ca8742cb35392836e\",\n \"对话交易员，从5万到上亿资产，带你了解交易员\\\\\\\"予与\\\\\\\"\": \"https://mp.weixin.qq.com/s?__biz=MzI5MDU1NDk2MA==&mid=2247513152&idx=1&sn=baf10416479aa4861f25277892b0e20c\",\n \"全球瞭望｜网络安全重大事件精选（179期）\": \"https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247600838&idx=1&sn=f87613712e296c8c59f56fd63d59615f\",\n \"Webshell免杀技术强特征+加密\": \"https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247489689&idx=1&sn=8ee235e7f833d2fc520095ce89b89e23\",\n \"大模型系列：蒸馏、RAG检索增强、微调的区别\": \"https://mp.weixin.qq.com/s?__biz=MzU5MjI1NTY1Mg==&mid=2247485351&idx=1&sn=dd0ad325aaf40c845e7ab2ef78f2370d\",\n \"八载春秋，感恩同行｜庆祝河北镌远公司成立八周年\": \"https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247517333&idx=1&sn=df5b8239177c9c7ba544c3a5fbc4cf68\",\n \"聚焦加密货币犯罪全链条打击与治理！8月7日线上开讲\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651445235&idx=1&sn=00de6c2448ccd9b86cc847a998b07096\",\n \"AI新职业→人工智能训练师（三级/高级工）职业技能等级认定火热进行中！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651445235&idx=2&sn=2890da18c2870c0939b446d5b952a857\",\n \"开源免费 | 点两下就能本地运行 DeepSeek 等大模型，这个「羊驼」真的强！\": \"https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492538&idx=1&sn=ee191bae44a771120e0bb4e36f564000\",\n \"成都世运村开村！亚信安全互动展示中心“开门迎客”，备受关注\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650624438&idx=1&sn=2d710d78d782643cffd5801693458718\",\n \"世运飞扬 亚信护航 | 2025年成都世运会倒计时3天！\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650624438&idx=2&sn=d4e5a05aa7f7e11f34c8ddb0a86edb34\",\n \"大洞，速修，1Panel 面板 RCE 任意命令执行\": \"https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247491230&idx=1&sn=7deb5f1c86f0c69e2a4df7550c2a7aaf\",\n \"花掉我1分钱巨款的AISecOps 机器人在认真办事吗？\": \"https://mp.weixin.qq.com/s?__biz=MzkyNjM0MjQ2Mw==&mid=2247483789&idx=1&sn=5fd5f7c704070f3421072411c65b9f7f\",\n \"银行报表管理：从RPA迈向AI驱动的智能化升级\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932504&idx=1&sn=ebd0683ca40d0165dbc52dc1136991a8\",\n \"AI快讯：一项AI安全国标发布，高德地图宣布全面AI化\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932504&idx=2&sn=ec1a0596b83906adf0db3faf8df887f9\",\n \"恒丰银行2025年度AI算力服务项目\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932504&idx=3&sn=1b8fc0ce46abfa4915db7f71f7765248\",\n \"【安全圈】AWS封禁事件：开发者十年数据遭“技术性清零”暴露云服务信任危机\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=1&sn=c8adca09dfa4b98083759d23ba8c3ee6\",\n \"【安全圈】严重安全事件：Netflix、Amazon、Disney+ 使用的微软 PlayReady DRM 证书遭泄露\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=2&sn=dff7a1af65688289dbdd855049236b03\",\n \"【安全圈】Microsoft Teams 推出“60 秒静默测试通话”功能，助力 IT 管理员主动评估网络质量\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=3&sn=8e9d0a44978f0facc9e2756fe6871ea1\",\n \"【安全圈】警惕！假冒 Discord / OnlyFans 验证页面传播新型“Epsilon Red”勒索软件\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=4&sn=02a8fe9005afc25f3859ee66250b11ab\",\n \"绿盟科技深度参与2025年网络和数据安全产业论坛\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650470523&idx=1&sn=cd97f2e8e9ebd8d1e79aa11b980824aa\",\n \"【国际视野】美国问责局发布《网络安全法规：行业对协调化影响、进展、挑战与机遇的看法》报告\": \"https://mp.weixin.qq.com/s?__biz=MzIyMjQwMTQ3Ng==&mid=2247491606&idx=1&sn=cf69e36721075c667925a8363663ae8a\",\n \"ISC.AI 2025 倒计时2天！\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649820066&idx=1&sn=59c43bc710eb009c3750938d205d6431\",\n \"ISC.AI 2025盛幕即启，锁定三大亮点，解锁智能体时代新升级\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649820066&idx=2&sn=5112758095d340ae6d71d9c1b83d970f\",\n \"ISC.AI 2025 展区打卡指南新鲜出炉！\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649820066&idx=3&sn=cc4e1b95931fc7bbcef985169c41962b\",\n \"ISC.AI 2025 第三届全国信息安全产教融合共同体发展大会 议程提前看！\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649820066&idx=4&sn=13c281a8dcc5962cf7e654411ddceda5\",\n \"ISC.AI 2025 安全筑基・智能拓界：企业创新协同论坛 议程提前看！\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649820066&idx=5&sn=cfc9e6b5841c9b32bcef753f6994a8f7\",\n \"ISC.AI 2025 安全智能体技术赋能与应用创新论坛 议程提前看！\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649820066&idx=6&sn=762c15f9c97e5e898ccffd3bf094c326\",\n \"ISC.AI 2025 企业级 AI 应用领航者论坛 议程提前看！\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649820066&idx=7&sn=a5c5a2d1b5bfef28e86af55554a25850\",\n \"干货丨新能源基地-常规直流输电系统动态安全风险预警（附PPT）\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247534356&idx=1&sn=27af40b630f3955233d2fb2ee67330e0\",\n \"白皮书丨数字低空安全技术体系白皮书（附下载）\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247534356&idx=2&sn=fbad699f3f627f0f07499be70b8729b2\",\n \"通知 | 工信部等八部门印发《机械工业数字化转型实施方案》（附全文）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=1&sn=dbce928135a011699c4976443dcc44b3\",\n \"关注 | 7项网络安全国家标准获批发布\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=2&sn=16b659641d2727719e7660370954f371\",\n \"天融信：分层防御筑牢硬件资产安全防线，战略级资产防护是关键\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=3&sn=5cf7bcf344eadbaab7f868c204c19b9a\",\n \"关注 | 这5款App，完成个人信息收集使用优化改进\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=4&sn=e7140325b8f39deee80d35d8cbd3058d\",\n \"Python隐藏漏洞通过超14.5万个软件包传播\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325790&idx=2&sn=e76098f68b88c88230f642e4e085c88e\",\n \"Linux内核页表利用技术深度剖析\": \"https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512557&idx=1&sn=c8d4ba7e5951ab779fa6d3ce664b3f10\",\n \"Gartner预测：2026年全球信息安全支出超1.7亿元\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514781&idx=1&sn=91fdf02c37903465f4a9c3207fa1fc48\",\n \"美国防部利用数据分析协助打造战备就绪的网络部队\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514781&idx=2&sn=45b2640497e2e23a6f0313057e8eefe0\",\n \"一条Clickhouse查询语句搞定复杂AI安全分析\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908643&idx=1&sn=15d0ff08d2dc6a026264ddaeb41a0e2c\",\n \"Pwn2Own 爱尔兰大赛目标和奖金公布 WhatsApp 最高100万美元\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523728&idx=1&sn=470aea5565c5a6156a11b8fcf0cec510\",\n \"微软扩展.NET漏洞计划 最高赏金提至$4万\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523728&idx=2&sn=aad4c0c2134f9c42dc0e73f20720114c\",\n \"金盾信安 | 网络和数据领域资讯第69期(2025.7.29-2025.8.4)\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448689763&idx=1&sn=c66b4c690653f1ac94f9731f8447b12f\",\n \"7项网络安全国家标准获批发布\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448689763&idx=2&sn=3895e0fd7922b93c712e5f10bf48e768\",\n \"工业和信息化部通报23款侵害用户权益的APP（SDK）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448689763&idx=3&sn=6fa7f0dc121d2c2f5fc3b8fdd2c21e31\",\n \"ctf搞笑版｜AI靶场乌龙\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDM4NTk4NA==&mid=2452946834&idx=1&sn=b6d29fb29565fc4d2d40ab2fa6f9feed\",\n \"网络安全正在改变金融市场的运作方式，但不会改变人们的思维方式\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247642322&idx=1&sn=d49836b6c7d16a16f436e7d60dc6d0a4\",\n \"免费赠送丨网络安全宣传讲义6篇\": \"https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247642322&idx=2&sn=f75bf5bf7b97ea9ac66ab751390662c5\",\n \"每周网安资讯 （7.29-8.4）|攻击者利用虚假应用程序针对Android和iOS用户窃取数据\": \"https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506789&idx=1&sn=583ff2a368647f2af2744ccf38319c28\",\n \"百年老企KNP因勒索攻击破产倒闭的背后，竟是因为员工使用了弱密码！\": \"https://mp.weixin.qq.com/s?__biz=MzU2NzMwNTgxNQ==&mid=2247491907&idx=1&sn=e19b84cdbb4299c21f16219182b4c908\",\n \"沃尔沃安全神话破灭，软件漏洞导致刹车失灵\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247557921&idx=1&sn=54e8b81cbf8a279be6f8d5b52806033a\",\n \"车联网渗透测试 | 汽车网络安全的车联网渗透测试执行标准\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247557921&idx=2&sn=ccafb791f27c3b19a5c43b29c2e25977\",\n \"【谈思月度盘点】7月汽车网络安全产业事件金榜Top10\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247557921&idx=3&sn=21ddb425da9a35ebb7a7e9ef20124ef1\",\n \"需求征集 | 谈思汽车安全供需对接通道开启！精准匹配优质安全供应商\": \"https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247557921&idx=4&sn=4b7d05199b23c2d10717cca305f9e1f3\",\n \"从认知到实践：AI 友好的 MCP 工具构建指南\": \"https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247515760&idx=1&sn=1191e7dcf258f997af25cc4d53fb3727\",\n \"网络安全信息与动态周报2025年第30期（7月21日-7月27日）\": \"https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490511&idx=1&sn=27b47554423d6bb6a21851e6b6a79197\",\n \"突破信息安全红线！英伟达H20芯片被曝安全存疑\": \"https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247542807&idx=1&sn=75891c6252fc313182db6f6c65342ed0\",\n \"蛙池AI新功能探秘 | 这次又整了个什么好活？\": \"https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649769365&idx=1&sn=499f2c692dc472155a8c2477f4b0423a\",\n \"8月1日起，《关键信息基础设施商用密码使用管理规定》正式实施\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTg0OTAyOQ==&mid=2247486502&idx=1&sn=c41ea317cfb6cad44a26de528fb77f06\",\n \"【资讯】云南省数据局就《云南省公共数据资源授权运营管理办法（试行）（公开征求意见稿）》公开征求意见\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554728&idx=1&sn=1855588a84e5a058ec4e04fc8e0d2333\",\n \"【资讯】武汉市经信局印发《关于印发武汉市促进人工智能产业发展若干政策措施有关条款资金管理办法的通知》\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554728&idx=2&sn=2b89d60950dcfeaae701eab20e3ae6df\",\n \"【资讯】怀柔区政数局就《怀柔区数字化转型规划（征求意见稿）》公开征集意见\": \"https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247554728&idx=3&sn=cb61241dbc2bf05204a8e4881a56ea72\",\n \"智库快讯（第182期）| 欧盟发布《AI 法案》配套指南 美发布《AI行动计划》——AI法律新闻说（七月下）\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NTA5NTMzMQ==&mid=2247501750&idx=1&sn=850bd661fede058a494778637d734ac1\",\n \"专业护航｜珞安科技构建石油企业工控系统免疫防御体系\": \"https://mp.weixin.qq.com/s?__biz=MzU2NjI5NzY1OA==&mid=2247513494&idx=1&sn=d4eb38665c584f3b30fa002ba7d7168b\",\n \"隐蔽通讯常见种类介绍\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597880&idx=1&sn=91fa8fdbe75cd055aa1afe2807f98b07\",\n \"黑客用树莓派突破银行防线，4G 模块成 ATM 盗刷 “暗门”\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597880&idx=2&sn=fcccc2411b64aad42e3b8d3c5b070ae7\",\n \"即将完结！欢迎报名：《Frida源码情景分析》\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597880&idx=3&sn=5968f5717ea1ee902ba5b66718544d6a\",\n \"【风险通告】用友U8+渠道管理（高级版）存在文件上传漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490509&idx=2&sn=8a2809861a4968889f3a72a8de2aea59\",\n \"自学网络安全别再迷茫了！小白跟着我整理知识点走就行！\": \"https://mp.weixin.qq.com/s?__biz=MzkzMzkyNTQ0Ng==&mid=2247484356&idx=1&sn=68d6c0795b78ef0d1117df8df78e3fe3\",\n \"多智能体分链协作 驱动安全运营效能跃迁\": \"https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651733827&idx=1&sn=1b441073c3d0806f080fd8a22afb6daf\",\n \"安全419 | 7月安全厂商动态：全面拥抱AI智能体时代\": \"https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247549239&idx=1&sn=54f47a126a48830b5e7a4e4796342a12\",\n \"氛围感编程，说干就干用AI手搓一个微信带货小程序\": \"https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649795041&idx=1&sn=a83ef6280317007bab906931eaf128a2\",\n \"悟空AI Agent再进化：连斩魔搭社区SWIFT框架RCE 0day漏洞\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207332&idx=1&sn=a07696b69167b990c15901ec87fd310f\",\n \"湖州师范学院更名已正式进入公示期更名为湖州师范大学！\": \"https://mp.weixin.qq.com/s?__biz=Mzg4Mjg5MjMxOA==&mid=2247484010&idx=1&sn=748ecc2f068ae55ebc712b0b249621f0\",\n \"简讯丨湖北省商用密码协会领导一行到访信安珞珈交流\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650665186&idx=1&sn=154ca81816434d4e951d83d719317639\",\n \"黑客自学教程（非常详细）黑客零基础入门到精通，收藏这篇就够了_新手黑客自学教程\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247486948&idx=1&sn=22f42e6d07425b03b1718786b4ec0bda\",\n \"AI泄密警钟！科研员这一操作泄露核心数据，造成不可挽回损失\": \"https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492912&idx=1&sn=3982bb3ab42e6ab466e75bfbd7f1d6c1\",\n \"赋能网安教育，锻造精锐师资——2025网络安全高级研修班圆满落幕\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555621&idx=1&sn=36fbe45378280449a31e6ecb6b6d3b59\",\n \"伪装与诱导，体验靶场实战\": \"https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555621&idx=2&sn=5a5829ea3439cec4fe5369209b60bd33\",\n \"政企学联动｜3E讲坛圆桌共议金融科技人才生态构建\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247508838&idx=1&sn=887a0d16de3b8518a07945949b4ea4a0\",\n \"全赛道获奖！聚铭网络闪耀第二届雄安未来之城场景汇网络安全技术应用大赛\": \"https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247507771&idx=1&sn=a7da63ce1e7a391f92821908f69f3ddc\",\n \"洞·见 | 20250804\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MDQ5MTQ4NA==&mid=2247487999&idx=1&sn=b9ff3ea82e9d3162d3d546da35a2c601\",\n \"获取ISC2认证，奔赴您期许的未来\": \"https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247493016&idx=1&sn=d311cb8ddcb359e25246f4befa5f5749\",\n \"信息支援部队攻防演练首次公开，筑牢“网电长城”须从终端开始\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628521&idx=1&sn=0cb043c33d92ba347ba839971ff773c5\",\n \"实力彰显！奇安信旗下京沪司法鉴定所双双荣获诚信等级A级评定\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628521&idx=2&sn=804e46344c05d700c6cbb50635573e6b\",\n \"以AJ-Report为例从0开始学习Java代码审计\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTIzODg0MA==&mid=2247491540&idx=1&sn=f8ce7fa201b0be601bf0e20fc1b55895\",\n \"CNVD漏洞周报2025年第29期\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496191&idx=1&sn=158df7c86b0123b7fadc5d85fc52e475\",\n \"上周关注度较高的产品安全漏洞(20250728-20250803)\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496191&idx=2&sn=ddf1d3c7eb8db6f80a6d668da3286e34\",\n \"喜报！北信源中标中国银联商密数据防泄露系统建设项目 筑牢数据安全防线\": \"https://mp.weixin.qq.com/s?__biz=MzA5MTM1MjMzNA==&mid=2653426651&idx=1&sn=035b76c7956be2b798f0259976ef8a0d\",\n \"【重要通知】AI安全前沿技术专题交流会8月6日-7日在西电召开，欢迎参会交流！\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652317873&idx=1&sn=27c782da8301140d6abbb937e8922256\",\n \"喜报丨汉华信安荣膺2025网络安全大赛优胜奖，以AI智护数据安全新纪元！\": \"https://mp.weixin.qq.com/s?__biz=Mzg5ODYyMTI2NA==&mid=2247484677&idx=1&sn=ac4131ea1c7815947e8bbc09ccf23e39\"\n },\n \"Exodus Intelligence\": {\n \"Oops Safari, I think You Spilled Something!\": \"https://blog.exodusintel.com/2025/08/04/oops-safari-i-think-you-spilled-something/\"\n },\n \"Horizon3.ai\": {\n \"Fix What Matters Most: Six New NodeZero® Capabilities That Redefine Risk-Based Vulnerability Management\": \"https://horizon3.ai/intelligence/blogs/fix-what-matters-most-six-new-nodezero-capabilities-that-redefine-risk-based-vulnerability-management/\"\n },\n \"Sandfly Security Blog RSS Feed\": {\n \"Sandfly 5.0.6 Maintenance Release\": \"https://sandflysecurity.com/blog/sandfly-5-0-6-maintenance-release\"\n },\n \"GuidePoint Security\": {\n \"The Secret Life of APIs: Uncovering Hidden Endpoints and More\": \"https://www.guidepointsecurity.com/blog/the-secret-life-of-apis-uncovering-hidden-endpoints-and-more/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"“Day 2: Reconnaissance — How I Found My First Real Bug (And How You Can Too)”\": \"https://infosecwriteups.com/day-2-reconnaissance-how-i-found-my-first-real-bug-and-how-you-can-too-dbf81cb44069?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Clean-Up Fail: How a Forgotten Admin Endpoint Let Me Drop All The Data ️\": \"https://infosecwriteups.com/clean-up-fail-how-a-forgotten-admin-endpoint-let-me-drop-all-the-data-%EF%B8%8F-1e1c376a986a?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Package of Problems: How a Frontend NPM Library Leaked Internal API Keys\": \"https://infosecwriteups.com/package-of-problems-how-a-frontend-npm-library-leaked-internal-api-keys-423784602d54?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Week 7 — Learning Basic Concepts of Cybersecurity\": \"https://infosecwriteups.com/week-7-learning-basic-concepts-of-cybersecurity-09b4170209d1?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Reflected XSS with Some SVG Markup Allowed\": \"https://infosecwriteups.com/reflected-xss-with-some-svg-markup-allowed-65e24224d819?source=rss----7b722bfd1b8d--bug_bounty\",\n \"ANDROID PENTESTING —PART 1— FUNDAMENTALS\": \"https://infosecwriteups.com/android-pentesting-part-1-fundamentals-95f4fd659051?source=rss----7b722bfd1b8d--bug_bounty\",\n \"ANDROID PENTESTING — PART 2 — STATIC ANALYSIS\": \"https://infosecwriteups.com/android-pentesting-part-2-static-analysis-307844a36b50?source=rss----7b722bfd1b8d--bug_bounty\",\n \"How to Find and Exploit Information Disclosure Vulnerabilities Like a Pro\": \"https://infosecwriteups.com/how-to-find-and-exploit-information-disclosure-vulnerabilities-like-a-pro-a9386ef01000?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Malwarebytes\": {\n \"A week in security (July 28 – August 3)\": \"https://www.malwarebytes.com/blog/news/2025/08/a-week-in-security-july-28-august-3\"\n },\n \"MalwareTech\": {\n \"Every Reason Why I Hate AI and You Should Too\": \"https://malwaretech.com/2025/08/every-reason-why-i-hate-ai.html\"\n },\n \"Microsoft Security Response Center\": {\n \"Zero Day Quest: Join the largest hacking event with up to $5 million in total bounty awards\": \"https://msrc.microsoft.com/blog/2025/08/zero-day-quest-join-the-largest-hacking-event-with-up-to-5-million-in-total-bounty-awards/\"\n },\n \"daniel.haxx.se\": {\n \"Even happier eyeballs\": \"https://daniel.haxx.se/blog/2025/08/04/even-happier-eyeballs/\"\n },\n \"Wallarm\": {\n \"Black Hat 2025: Why We Built a Museum Instead of a Booth\": \"https://lab.wallarm.com/black-hat-2025-why-we-built-a-museum-instead-of-a-booth/\"\n },\n \"Reverse Engineering\": {\n \"/r/ReverseEngineering's Weekly Questions Thread\": \"https://www.reddit.com/r/ReverseEngineering/comments/1mh6jpm/rreverseengineerings_weekly_questions_thread/\",\n \"AWS WAF Solver with Image detection\": \"https://www.reddit.com/r/ReverseEngineering/comments/1mh0vg6/aws_waf_solver_with_image_detection/\"\n },\n \"专注APT攻击与防御\": {\n \"第六章——我为什么坚信主动防护运营 (PSecOps) 的内在逻辑\": \"https://micropoor.blogspot.com/2025/08/psecops.html\",\n \"第五章——我为什么坚信分工是创新的前提的内在逻辑\": \"https://micropoor.blogspot.com/2025/08/blog-post.html\"\n },\n \"先进攻防\": {\n \"一条Clickhouse查询语句搞定复杂AI安全分析\": \"https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908643&idx=1&sn=15d0ff08d2dc6a026264ddaeb41a0e2c\"\n },\n \"微步在线研究响应中心\": {\n \"漏洞通告 | 1Panel远程命令注入漏洞\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507860&idx=1&sn=ecc26b8161180e4ebc644a0602099118\"\n },\n \"安全客\": {\n \"AI 编程神器Cursor现高危漏洞，一条提示即可RCE\": \"https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788902&idx=1&sn=fc500323dda78989fef066dc7fe6ce41\"\n },\n \"看雪学苑\": {\n \"隐蔽通讯常见种类介绍\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597880&idx=1&sn=91fa8fdbe75cd055aa1afe2807f98b07\",\n \"黑客用树莓派突破银行防线，4G 模块成 ATM 盗刷 “暗门”\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597880&idx=2&sn=fcccc2411b64aad42e3b8d3c5b070ae7\",\n \"即将完结！欢迎报名：《Frida源码情景分析》\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597880&idx=3&sn=5968f5717ea1ee902ba5b66718544d6a\"\n },\n \"天黑说嘿话\": {\n \"Akamai 3.0 反混淆笔记\": \"https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484546&idx=1&sn=2cdc9fc9b42c005e8c99943b3e57f682\"\n },\n \"安全分析与研究\": {\n \"Patchwork APT组织最新攻击样本与威胁情报\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247493071&idx=1&sn=cb209b8854673f661b9dd569cf8d60f5\"\n },\n \"dotNet安全矩阵\": {\n \"红队快速打包，通过 Sharp4CompressArchive 一键定制化压缩文件\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500229&idx=1&sn=619a7fe282b1affa94844823ec3b28a2\",\n \"国内最专业、最全面的 [ .NET 代码审计 ] 体系化视频学习课程\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500229&idx=2&sn=e76cdf7baa96ea125da919c0d24c89fe\",\n \"Sharp4WebCmd5：一键支持内存加载远程文件和无需依赖 cmd 执行命令\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500229&idx=3&sn=87c2c21803d5e265d0d3b608b9143e51\"\n },\n \"安全内参\": {\n \"Gartner预测：2026年全球信息安全支出超1.7万亿元\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514781&idx=1&sn=91fdf02c37903465f4a9c3207fa1fc48\",\n \"美国防部利用数据分析协助打造战备就绪的网络部队\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514781&idx=2&sn=45b2640497e2e23a6f0313057e8eefe0\"\n },\n \"腾讯安全威胁情报中心\": {\n \"情报每周回顾 2025-08-03\": \"https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510686&idx=1&sn=dd5ddb4ff56e00d81198ea51b63fdae6\"\n },\n \"代码卫士\": {\n \"Pwn2Own 爱尔兰大赛目标和奖金公布 WhatsApp 最高100万美元\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523728&idx=1&sn=470aea5565c5a6156a11b8fcf0cec510\",\n \"微软扩展.NET漏洞计划 最高赏金提至$4万\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523728&idx=2&sn=aad4c0c2134f9c42dc0e73f20720114c\"\n },\n \"安全学术圈\": {\n \"清华大学 | TrafficFormer: 针对流量数据的有效预训练模型\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493288&idx=1&sn=ae92b5bc38831f35718912f227b3c399\"\n },\n \"ChaMd5安全团队\": {\n \"首届CCF智能汽车大赛(CCF IVC 2025) Mini-Venom(第一名)\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247513226&idx=1&sn=c77b5b9e97c2fa7535f5bcbbdb638a29\"\n },\n \"安全圈\": {\n \"【安全圈】AWS封禁事件：开发者十年数据遭“技术性清零”暴露云服务信任危机\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=1&sn=c8adca09dfa4b98083759d23ba8c3ee6\",\n \"【安全圈】严重安全事件：Netflix、Amazon、Disney+ 使用的微软 PlayReady DRM 证书遭泄露\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=2&sn=dff7a1af65688289dbdd855049236b03\",\n \"【安全圈】Microsoft Teams 推出“60 秒静默测试通话”功能，助力 IT 管理员主动评估网络质量\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=3&sn=8e9d0a44978f0facc9e2756fe6871ea1\",\n \"【安全圈】警惕！假冒 Discord / OnlyFans 验证页面传播新型“Epsilon Red”勒索软件\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070977&idx=4&sn=02a8fe9005afc25f3859ee66250b11ab\"\n },\n \"数世咨询\": {\n \"重塑 SIEM 市场的 4 个主要趋势\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247539756&idx=1&sn=ce05c5a7812a287903e8448c150b17ec\"\n },\n \"RapidDNS\": {\n \"RapidDNS 数据更新服务 2025-08-01 更新\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NDU0ODMxOQ==&mid=2247485813&idx=1&sn=9d8dcc8048b87d53965ca1a3da170b51\"\n },\n \"极客公园\": {\n \"今年 CJ，AI 成了游戏产业的「必答题」\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653084081&idx=1&sn=ee0a5a209a95073c522cb7c39b4f9901\",\n \"这个 WAIC 展台旁，围满小朋友\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653084066&idx=1&sn=2fcb2fcc4a2ce2cac58f7c11a45dcb8c\",\n \"a16z ：AI 投资不再看模型性能；中国汽研、理想汽车回应 i8 测试争议；万事达否认向平台施压下架成人游戏 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653084030&idx=1&sn=5e2d4afe74d3dc11fd82a5d75400f7c4\"\n },\n \"NOVASEC\": {\n \"【代码】CobaltStrike Beacon 源代码公开\": \"https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490735&idx=1&sn=7893eb48b005468c8b31653fcb2ed435\"\n },\n \"阿里安全响应中心\": {\n \"速来挑战｜赛道二今日开赛，首周额外奖励发布！\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652997941&idx=1&sn=e2ebbc93cf4aa080ff7183ce770e67b7\"\n },\n \"火绒安全\": {\n \"火绒安全终端防护数据月报（2025-07）\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247526186&idx=1&sn=d218ad69287f976cb21ec44c29c3cf74\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247526186&idx=2&sn=50c16a41cfe2766de1d9c5d4f3c4c2ff\"\n },\n \"威努特安全网络\": {\n \"教育部新规！明确智慧校园建设之道\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651134611&idx=1&sn=0e3d1df445a1d789e1e1d395fa21c3e6\"\n },\n \"陌陌安全\": {\n \"浅谈威胁情报技术\": \"https://mp.weixin.qq.com/s?__biz=MzI2OTYzOTQzNw==&mid=2247488849&idx=1&sn=244b31ed3e540e6adfd90cb19574dc25\"\n },\n \"数据安全与取证\": {\n \"电子数据取证分析师考试来袭，速看通知！\": \"https://mp.weixin.qq.com/s?__biz=MzIyNzU0NjIyMg==&mid=2247488454&idx=1&sn=8f984b1e31c6d7f058ef5425ce51b5d5\"\n },\n \"安全牛\": {\n \"国内外代表性AI Agent原生企业鉴析\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138216&idx=1&sn=f368b70ebc29284a4667e61a362f0c84\",\n \"ChatGPT对话记录可被搜索引擎公开查询？官方承认防护不足；新型Linux后门\\\"瘟疫\\\"可规避所有主流安全工具的检测 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138216&idx=2&sn=111fcdf25f944c6339717d3dbb6be819\"\n },\n \"丁爸 情报分析师的工具箱\": {\n \"【资料】5篇OSINT资料：含俄罗斯联邦安全局（FSB）多个地面监听站的地理位置\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151342&idx=1&sn=cc0847ecd33179219c74ae58d8e2a8c8\",\n \"【转载】美军在印太地区首次实战部署“暗鹰”高超音速导弹\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151342&idx=2&sn=5be25ab8a7d7fbb08bb21864e46c4f6b\"\n },\n \"京东安全应急响应中心\": {\n \"【活动】反爬专项50w奖金池！单个奖励最高4w！\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727849784&idx=1&sn=7f63bbced028da9ed42ce1ded199b509\"\n },\n \"中国信息安全\": {\n \"通知 | 工信部等八部门印发《机械工业数字化转型实施方案》（附全文）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=1&sn=dbce928135a011699c4976443dcc44b3\",\n \"关注 | 7项网络安全国家标准获批发布\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=2&sn=16b659641d2727719e7660370954f371\",\n \"天融信：分层防御筑牢硬件资产安全防线，战略级资产防护是关键\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=3&sn=5cf7bcf344eadbaab7f868c204c19b9a\",\n \"关注 | 这5款App，完成个人信息收集使用优化改进\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246936&idx=4&sn=e7140325b8f39deee80d35d8cbd3058d\"\n },\n \"吴鲁加\": {\n \"笨办法\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247485644&idx=1&sn=6c3ea0bf431160e825b2d6ecf26e066b\"\n },\n \"CNVD漏洞平台\": {\n \"CNVD漏洞周报2025年第29期\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496191&idx=1&sn=158df7c86b0123b7fadc5d85fc52e475\",\n \"上周关注度较高的产品安全漏洞(20250728-20250803)\": \"https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496191&idx=2&sn=ddf1d3c7eb8db6f80a6d668da3286e34\"\n },\n \"嘶吼专业版\": {\n \"Lumma infostealer恶意软件团伙在遭受执法部门打击后卷土重来\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584076&idx=1&sn=c36cf98054ed41bae332fc2784daedc5\",\n \"安全动态回顾|工业和信息化领域人工智能安全治理标准体系发布 网信办就H20算力芯片漏洞后门安全风险约谈英伟达公司\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584076&idx=2&sn=8182a7dc58b0b2aac9a7acf838b6e36d\"\n },\n \"Microsoft Security Blog\": {\n \"Microsoft Entra Suite delivers 131% ROI by unifying identity and network access\": \"https://www.microsoft.com/en-us/security/blog/2025/08/04/microsoft-entra-suite-delivers-131-roi-by-unifying-identity-and-network-access/\"\n },\n \"网安国际\": {\n \"【重要通知】AI安全前沿技术专题交流会8月6日-7日在西电召开，欢迎参会交流！\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652317873&idx=1&sn=27c782da8301140d6abbb937e8922256\"\n },\n \"Securityinfo.it\": {\n \"Cisco svela un nuovo tipo di jailbreak AI: i guardrail non bastano\": \"https://www.securityinfo.it/2025/08/04/cisco-svela-un-nuovo-tipo-di-jailbreak-ai-i-guardrail-non-bastano/?utm_source=rss&utm_medium=rss&utm_campaign=cisco-svela-un-nuovo-tipo-di-jailbreak-ai-i-guardrail-non-bastano\",\n \"CERT-AGID 26 luglio – 1 agosto: SharePoint, MintLoader e 4L4MD4R protagonisti\": \"https://www.securityinfo.it/2025/08/04/cert-agid-26-luglio-1-agosto-sharepoint-mintloader-e-4l4md4r-protagonisti/?utm_source=rss&utm_medium=rss&utm_campaign=cert-agid-26-luglio-1-agosto-sharepoint-mintloader-e-4l4md4r-protagonisti\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"Crypto ATMs fueling criminal activity, Treasury warns\": \"https://therecord.media/crypto-atms-fueling-cybercrime\",\n \"Fashion giant Chanel hit in wave of Salesforce data theft attacks\": \"https://www.bleepingcomputer.com/news/security/fashion-giant-chanel-hit-in-wave-of-salesforce-data-theft-attacks/\",\n \"SonicWall urges customers to take VPN devices offline after ransomware campaign\": \"https://therecord.media/sonicwall-possible-zero-day-gen-7-firewalls-ssl-vpn\",\n \"Google says its AI-based bug hunter found 20 security vulnerabilities\": \"https://techcrunch.com/2025/08/04/google-says-its-ai-based-bug-hunter-found-20-security-vulnerabilities/\",\n \"Proton fixes Authenticator bug leaking TOTP secrets in logs\": \"https://www.bleepingcomputer.com/news/security/proton-fixes-authenticator-bug-leaking-totp-secrets-in-logs/\",\n \"Jury ‘sends a message’ on app privacy in ruling against Meta\": \"https://therecord.media/jury-verdict-meta-flo-app-data-privacy-case\",\n \"Microsoft: Outdated Office apps lose access to voice features in January\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-outdated-office-apps-lose-access-to-voice-features-in-january/\",\n \"Perplexity accused of scraping websites that explicitly blocked AI scraping\": \"https://techcrunch.com/2025/08/04/perplexity-accused-of-scraping-websites-that-explicitly-blocked-ai-scraping/\",\n \"Backdoors & Breaches: How Talos is helping humanitarian aid NGOs prepare for cyber attacks\": \"https://blog.talosintelligence.com/backdoors-breaches-how-talos-is-helping-humanitarian-aid-ngos-prepare-for-cyber-attacks/\",\n \"CTM360 spots Malicious ‘ClickTok’ Campaign Targeting TikTok Shop users\": \"https://www.bleepingcomputer.com/news/security/ctm360-spots-malicious-clicktok-campaign-targeting-tiktok-shop-users/\",\n \"Cisco svela un nuovo tipo di jailbreak AI: i guardrail non bastano\": \"https://www.securityinfo.it/2025/08/04/cisco-svela-un-nuovo-tipo-di-jailbreak-ai-i-guardrail-non-bastano/\",\n \"Le migliori VPN per Sky Go Italia: guida per lo streaming senza limiti\": \"https://www.cybersecurity360.it/cultura-cyber/le-migliori-vpn-per-sky-go-italia/\",\n \"New Plague Linux malware stealthily maintains SSH access\": \"https://www.bleepingcomputer.com/news/security/new-plague-malware-backdoors-linux-devices-removes-ssh-session-traces/\",\n \"Hacked Crimean servers reveal information about abducted children, Ukraine says\": \"https://therecord.media/hacked-crimean-servers-abducted-children\",\n \"Sean Cairncross confirmed as national cyber director\": \"https://therecord.media/sean-cairncross-confirmed-oncd\",\n \"Release Notes: QRadar SOAR App, TI Lookup Free Access, and 2,900+ New Detection Rules\": \"https://any.run/cybersecurity-blog/release-notes-july-2025/\",\n \"Scattered Spider Intensifies Cyber Onslaught with New Tactics and Ransomware Deployment\": \"https://cyble.com/blog/scattered-spider-ransomware-in-2025-cyber-alert/\",\n \"Ransomware gangs join attacks targeting Microsoft SharePoint servers\": \"https://www.bleepingcomputer.com/news/security/ransomware-gangs-join-attacks-targeting-microsoft-sharepoint-servers/\",\n \"Le migliori VPN per gli USA 2025: guida completa a sicurezza, streaming e Privacy\": \"https://www.cybersecurity360.it/cybersecurity-nazionale/le-migliori-vpn-per-gli-usa/\",\n \"Panel to create roadmap for establishing US Cyber Force\": \"https://therecord.media/panel-to-create-roadmap-cyber-force\",\n \"Le migliori VPN per la Svizzera, guida completa\": \"https://www.cybersecurity360.it/cultura-cyber/le-migliori-vpn-per-la-svizzera/\",\n \"123456, la password che non ti aspetti e che dice tanto sulla scarsa consapevolezza cyber\": \"https://www.cybersecurity360.it/nuove-minacce/123456-la-password-che-non-ti-aspetti-e-che-dice-tanto-sulla-scarsa-consapevolezza-cyber/\",\n \"Mozilla warns of phishing attacks targeting add-on developers\": \"https://www.bleepingcomputer.com/news/security/mozilla-warns-of-phishing-attacks-targeting-add-on-developers/\",\n \"Qilin Responds to the Accusations: “We Don’t Scam Our Affiliates”\": \"https://www.suspectfile.com/qilin-responds-to-the-accusations-we-dont-scam-our-affiliates/\",\n \"Strategia italiana per le tecnologie quantistiche: le 4 direttrici fondamentali\": \"https://www.cybersecurity360.it/cybersecurity-nazionale/strategia-italiana-per-le-tecnologie-quantistiche-le-4-direttrici-fondamentali/\",\n \"Un comandante per proteggere: il senso profondo della leadership nei sistemi di protezione digitale\": \"https://www.cybersecurity360.it/cultura-cyber/un-comandante-per-proteggere-il-senso-profondo-della-leadership-nei-sistemi-di-protezione-digitale/\",\n \"Videosorveglianza nei negozi, il Garante privacy richiama Confcommercio: cosa impariamo\": \"https://www.cybersecurity360.it/news/videosorveglianza-nei-negozi-il-garante-privacy-richiama-confcommercio-cosa-impariamo/\",\n \"CERT-AGID 26 luglio – 1 agosto: SharePoint, MintLoader e 4L4MD4R protagonisti\": \"https://www.securityinfo.it/2025/08/04/cert-agid-26-luglio-1-agosto-sharepoint-mintloader-e-4l4md4r-protagonisti/\",\n \"NIS 2 e multicompliance: strategie integrate per la cyber security aziendale\": \"https://www.cybersecurity360.it/legal/nis-2-e-multicompliance-strategie-integrate-per-la-cyber-security-aziendale/\"\n },\n \"信息安全国家工程研究中心\": {\n \"吴世忠院士：大模型安全治理的现状与展望\": \"https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247500501&idx=1&sn=c1fc28899dcb54770ada829fbec40c92\"\n },\n \"Cyber Division\": {\n \"Dark Web Monitoring: cos’è e come funziona\": \"https://cyberdivision.net/2025/08/04/dark-web-monitoring-cose-e-come-funziona/\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"New Feature: Daily Trends Report, (Mon, Aug 4th)\": \"https://isc.sans.edu/diary/rss/32170\",\n \"ISC Stormcast For Monday, August 4th, 2025 https://isc.sans.edu/podcastdetail/9554, (Mon, Aug 4th)\": \"https://isc.sans.edu/diary/rss/32168\"\n },\n \"Schneier on Security\": {\n \"First Sentencing in Scheme to Help North Koreans Infiltrate US Companies\": \"https://www.schneier.com/blog/archives/2025/08/first-sentencing-in-scheme-to-help-north-koreans-infiltrate-us-companies.html\"\n },\n \"ICT Security Magazine\": {\n \"Truffe sui biglietti dei concerti: siti clone e rivendite illecite minacciano i fan delle grandi star\": \"https://www.ictsecuritymagazine.com/notizie/truffe-concerti/\"\n },\n \"Security Affairs\": {\n \"Hacking group D4rk4rmy claimed the hack of Monte-Carlo Société des Bains de Mer\": \"https://securityaffairs.com/180780/cyber-crime/hacking-group-d4rk4rmy-claimed-the-hack-of-monte-carlo-societe-des-bains-de-mer.html\",\n \"Northwest Radiologists data breach hits 350,000 in Washington\": \"https://securityaffairs.com/180772/data-breach/northwest-radiologists-data-breach-hits-350000-in-washington.html\",\n \"PlayPraetor Android RAT expands rapidly across Spanish and French-speaking regions\": \"https://securityaffairs.com/180760/malware/playpraetor-android-rat-expands-rapidly-across-spanish-and-french-speaking-regions.html\",\n \"Lovense flaws expose emails and allow account takeover\": \"https://securityaffairs.com/180748/breaking-news/lovense-flaws-expose-emails-and-allow-account-takeover.html\",\n \"Nation-state group CL-STA-0969 targeted Southeast Asian telecoms in 2024\": \"https://securityaffairs.com/180737/apt/nation-state-group-cl-sta-0969-targeted-southeast-asian-telecoms-in-2024.html\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Finding vulnerabilities in Claude code\": \"https://www.reddit.com/r/netsec/comments/1mhj0ek/finding_vulnerabilities_in_claude_code/\"\n },\n \"Social Engineering\": {\n \"How does FaceSeek actually work?\": \"https://www.reddit.com/r/SocialEngineering/comments/1mhhrf2/how_does_faceseek_actually_work/\",\n \"Comparison between Myers-Briggs Type Indicator (MBTI) and Mars 360 social classification system\": \"https://www.reddit.com/r/SocialEngineering/comments/1mha9a5/comparison_between_myersbriggs_type_indicator/\"\n },\n \"The Hacker News\": {\n \"NVIDIA Triton Bugs Let Unauthenticated Attackers Execute Code and Hijack AI Servers\": \"https://thehackernews.com/2025/08/nvidia-triton-bugs-let-unauthenticated.html\",\n \"Vietnamese Hackers Use PXA Stealer, Hit 4,000 IPs and Steal 200,000 Passwords Globally\": \"https://thehackernews.com/2025/08/vietnamese-hackers-use-pxa-stealer-hit.html\",\n \"⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More\": \"https://thehackernews.com/2025/08/weekly-recap-vpn-0-day-encryption.html\",\n \"Man-in-the-Middle Attack Prevention Guide\": \"https://thehackernews.com/2025/08/man-in-middle-attack-prevention-guide.html\",\n \"New ‘Plague’ PAM Backdoor Exposes Critical Linux Systems to Silent Credential Theft\": \"https://thehackernews.com/2025/08/new-plague-pam-backdoor-exposes.html\",\n \"The Wild West of Shadow IT\": \"https://thehackernews.com/2025/08/the-wild-west-of-shadow-it.html\",\n \"PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads\": \"https://thehackernews.com/2025/08/playpraetor-android-trojan-infects.html\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Do I need to have a CyberSecurity degree to get into the Cybersecurity field or will CE be just fine?\": \"https://www.reddit.com/r/netsecstudents/comments/1mhocml/do_i_need_to_have_a_cybersecurity_degree_to_get/\",\n \"Lateral Movement – BitLocker\": \"https://www.reddit.com/r/netsecstudents/comments/1mh8qlw/lateral_movement_bitlocker/\",\n \"Exploring an Offbeat AI Idea — Curious Minds Welcome\": \"https://www.reddit.com/r/netsecstudents/comments/1mh0h6d/exploring_an_offbeat_ai_idea_curious_minds_welcome/\"\n },\n \"虎符智库\": {\n \"深度：智能体的安全威胁、漏洞与潜在影响分析\": \"https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493422&idx=1&sn=ff38a0cc321c8fcab27a376c454aa06f\"\n },\n \"李姐姐的扫描器\": {\n \"花掉我1分钱巨款的AISecOps 机器人在认真办事吗？\": \"https://mp.weixin.qq.com/s?__biz=MzkyNjM0MjQ2Mw==&mid=2247483789&idx=1&sn=5fd5f7c704070f3421072411c65b9f7f\"\n },\n \"Computer Forensics\": {\n \"Behind the Book: Threat Hunting macOS with Jaron Bradley\": \"https://www.reddit.com/r/computerforensics/comments/1mhbb38/behind_the_book_threat_hunting_macos_with_jaron/\"\n },\n \"Information Security\": {\n \"Brain food needed for cybersecurity 🍽️🧠\": \"https://www.reddit.com/r/Information_Security/comments/1mhgq8g/brain_food_needed_for_cybersecurity/\",\n \"Looking for Tools/Advice on Network Protocol Fuzzing (PCAP-Based)\": \"https://www.reddit.com/r/Information_Security/comments/1mhmjwn/looking_for_toolsadvice_on_network_protocol/\",\n \"Career advice cybersecurity - moving to ireland from india\": \"https://www.reddit.com/r/Information_Security/comments/1mh33u2/career_advice_cybersecurity_moving_to_ireland/\"\n },\n \"Deeplinks\": {\n \"Digital Rights Are Everyone’s Business, and Yours Can Join the Fight!\": \"https://www.eff.org/deeplinks/2025/08/digital-rights-are-everyones-business-your-team-can-join-fight\",\n \"Data Brokers Are Ignoring Privacy Law. We Deserve Better.\": \"https://www.eff.org/deeplinks/2025/08/data-brokers-are-ignoring-privacy-law-we-deserve-better\"\n },\n \"blackMORE Ops\": {\n \"Best Linux Remote Administration Tools 2025 – Complete Guide\": \"https://www.blackmoreops.com/best-linux-remote-administration-tools-2025/\"\n },\n \"Blackhat Library: Hacking techniques and research\": {\n \"Any genuine telegram hackers here\": \"https://www.reddit.com/r/blackhat/comments/1mhg85i/any_genuine_telegram_hackers_here/\"\n },\n \"Your Open Hacker Community\": {\n \"Can I run Linux on my 8 and 16 gb pendrives?\": \"https://www.reddit.com/r/HowToHack/comments/1mh7dou/can_i_run_linux_on_my_8_and_16_gb_pendrives/\",\n \"How do i inject frida into a split apk?\": \"https://www.reddit.com/r/HowToHack/comments/1mhoec4/how_do_i_inject_frida_into_a_split_apk/\",\n \"Is a bcrypt version:2y hash reversible??\": \"https://www.reddit.com/r/HowToHack/comments/1mh8n4r/is_a_bcrypt_version2y_hash_reversible/\",\n \"Stack Overflows, Heap Overflows, and Existential Dread (SonicWall SMA100 CVE-2025-40596, CVE-2025-40597 and CVE-2025-40598)\": \"https://www.reddit.com/r/HowToHack/comments/1mhig6b/stack_overflows_heap_overflows_and_existential/\",\n \"Downloading files with wget when you can't access directory - files only.\": \"https://www.reddit.com/r/HowToHack/comments/1mhf38p/downloading_files_with_wget_when_you_cant_access/\",\n \"Help me impress my friend through proving him wrong\": \"https://www.reddit.com/r/HowToHack/comments/1mhr896/help_me_impress_my_friend_through_proving_him/\",\n \"Recommend me some Hacking AI\": \"https://www.reddit.com/r/HowToHack/comments/1mhqs0v/recommend_me_some_hacking_ai/\",\n \"Locked Samsung Tablet with Knox\": \"https://www.reddit.com/r/HowToHack/comments/1mhm5t9/locked_samsung_tablet_with_knox/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Weekly Enterprise Security News and Tips on Building Security From Day 1 - Guillaume Ross - ESW #418\": \"http://sites.libsyn.com/18678/weekly-enterprise-security-news-and-tips-on-building-security-from-day-1-guillaume-ross-esw-418\"\n }\n}"}}, "archive/tmp/2026-05-13.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747360.3082438, "n": 27833, "h": "6ce8744d2ade42d4", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2026-05-12 Review\": \"http://www.sec-wiki.com/?2026-05-12\"\n },\n \"Der Flounder\": {\n \"Using pmset to set your Mac to automatically power on when power is available on macOS Tahoe 26.5.0\": \"https://derflounder.wordpress.com/2026/05/12/using-pmset-to-set-your-mac-to-automatically-power-on-when-power-is-available-on-macos-tahoe-26-5-0/\"\n },\n \"博客\": {\n \"What is Google Widevine\": \"https://dyrnq.com/what-is-google-widevine/\"\n },\n \"Tenable Blog\": {\n \"Microsoft’s May 2026 Patch Tuesday Addresses 118 CVEs (CVE-2026-41103)\": \"https://www.tenable.com/blog/microsofts-may-2026-patch-tuesday-addresses-118-cves-cve-2026-41103\"\n },\n \"Microsoft Security Blog\": {\n \"Accelerating detection engineering using AI-assisted synthetic attack logs generation\": \"https://www.microsoft.com/en-us/security/blog/2026/05/12/accelerating-detection-engineering-using-ai-assisted-synthetic-attack-logs-generation/\",\n \"Defense at AI speed: Microsoft’s new multi-model agentic security system tops leading industry benchmark\": \"https://www.microsoft.com/en-us/security/blog/2026/05/12/defense-at-ai-speed-microsofts-new-multi-model-agentic-security-system-tops-leading-industry-benchmark/\",\n \"Defending consumer web properties against modern DDoS attacks\": \"https://www.microsoft.com/en-us/security/blog/2026/05/12/defending-consumer-web-properties-against-modern-ddos-attacks/\",\n \"Undermining the trust boundary: Investigating a stealthy intrusion through third-party compromise\": \"https://www.microsoft.com/en-us/security/blog/2026/05/12/undermining-the-trust-boundary-investigating-a-stealthy-intrusion-through-third-party-compromise/\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Tue May 12 11:39:35 UTC 2026\": \"https://github.com/trickest/cve/commit/b4820345482afaac0fbd931d98c9f68ab0e9ad15\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"科技云报到：智算千亿赛道向何方？一文读懂信通院《2026智能算力服务研究报告》\": \"https://www.anquanke.com/post/id/315489\",\n \"亿格云完成数亿元B轮融资，加码“人+AI”统一安全治理\": \"https://www.anquanke.com/post/id/315487\"\n },\n \"Taxodium\": {\n \"Album#39 - 海马森林 (SEAHORSE FOREST)\": \"https://taxodium.ink/album-39.html\"\n },\n \"Verne in GitHub\": {\n \"codex-lb：用负载均衡的思路管理多个 ChatGPT 账号\": \"https://blog.einverne.info/post/2026/05/codex-lb-chatgpt-account-load-balancer.html\",\n \"socat：比 netcat 更强大的网络瑞士军刀\": \"https://blog.einverne.info/post/2026/05/socat-command-usage.html\",\n \"本地快速切换 Claude Code 和 Codex CLI 账号的几种方案\": \"https://blog.einverne.info/post/2026/05/switch-claude-code-codex-accounts.html\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"Lab Write-up: Linux CLI — Identifying Incorrect File Extensions\": \"https://infosecwriteups.com/lab-write-up-linux-cli-identifying-incorrect-file-extensions-71e03bb908e8?source=rss----7b722bfd1b8d---4\",\n \"AI Models & Data | TryHackMe Write-up\": \"https://infosecwriteups.com/ai-models-data-tryhackme-write-up-c9d70e005bbb?source=rss----7b722bfd1b8d---4\",\n \"Bad USB: The Invisible Hardware Threat\": \"https://infosecwriteups.com/bad-usb-the-invisible-hardware-threat-c1bc8f064405?source=rss----7b722bfd1b8d---4\",\n \"Microsoft Edge Password Exposure: How a Memory Dump Reveals Your Credentials\": \"https://infosecwriteups.com/microsoft-edge-password-exposure-how-a-memory-dump-reveals-your-credentials-c18b1aa7046a?source=rss----7b722bfd1b8d---4\",\n \"Your Wallet Is the Inbox: How Web3 Phishing Attacks Are Targeting Users On-Chain\": \"https://infosecwriteups.com/your-wallet-is-the-new-inbox-how-web3-phishing-attacks-are-targeting-users-on-chain-64dd37f28a52?source=rss----7b722bfd1b8d---4\",\n \"Attack Playbook — Operation DragonRx\": \"https://infosecwriteups.com/attack-playbook-operation-dragonrx-91339316f0df?source=rss----7b722bfd1b8d---4\",\n \"Information disclosure on debug page\\nAPPRENTICE | Lab -02\": \"https://infosecwriteups.com/information-disclosure-on-debug-page-apprentice-lab-02-9d1f09ed7b66?source=rss----7b722bfd1b8d---4\",\n \"Information disclosure in error messages | Lab -01\": \"https://infosecwriteups.com/information-disclosure-in-error-messages-lab-01-588b3d76b76e?source=rss----7b722bfd1b8d---4\"\n },\n \"obaby 𝐢‍𝐧⃝ void\": {\n \"体检以及其他\": \"https://zhongxiaojie.cn/2026/05/1244/\"\n },\n \"先知安全技术社区\": {\n \"【漏洞研究】多层内容解析链引发的 XSS 语义错位绕过及根因分析\": \"https://xz.aliyun.com/news/92125\"\n },\n \"Doonsec's feed\": {\n \"WAVLINK-WN530HG4 live_api.cgi接口存在远程命令执行漏洞 附POC\": \"https://mp.weixin.qq.com/s/A1VK7zrvm93AYwfhl1E1gg\",\n \"LeakDetector：一款自动化敏感信息搜集工具\": \"https://mp.weixin.qq.com/s/TCHaeZ681NHoAXOi4GFLAg\",\n \"中东卫星影像受限：开源情报的失明与破局\": \"https://mp.weixin.qq.com/s/Wo1mP67B7s2I0At_y0PINw\",\n \"SASCTF|广东技术师范大学网络安全攻防竞赛来啦！！\": \"https://mp.weixin.qq.com/s/3qRHh3OT-zXKLH_wEiDSXw\",\n \"【AI安全】Mythos和GPT-5.5-Cyber！AI 的安全主战场\": \"https://mp.weixin.qq.com/s/K8wJiFgCsctcUJT3HJGxIA\",\n \"360发布“龙虾”生态安全报告：23个漏洞覆盖10余款产品，智能体安全风险蔓延全行业\": \"https://mp.weixin.qq.com/s/AKyjmlv4vfperRsGS8njsQ\",\n \"AI正在放大ClickFix与FileFix：下一代网络攻击已经来了\": \"https://mp.weixin.qq.com/s/Cg5x3IvcrmcN4ueYO02O4A\",\n \"网络安全适合当兴趣爱好\": \"https://mp.weixin.qq.com/s/zbEWtfAxBvK7ezGLV3wGJg\",\n \"2026第四届“PGS”电子数据取证（手机）\": \"https://mp.weixin.qq.com/s/VWnV3k29JdYFBACk3EgOCA\",\n \"A²GRC智能体安全免疫模型：Agentic AI时代，企业安全体系如何从“防系统”走向“管智能体”\": \"https://mp.weixin.qq.com/s/wqXbFE2c9UxKloQdiJ-e8w\",\n \"如何在linux上检测恶意软件\": \"https://mp.weixin.qq.com/s/Fz8CWplz7DNncIHDPvIi_w\",\n \"威胁行为者Mr_Rot13积极利用CVE-2026-41940漏洞实施后门部署\": \"https://mp.weixin.qq.com/s/2iUEEejnBxRdQWrwTisEPA\",\n \"Grav CMS 组合拳漏洞| CVE-2026-42613&CVE-2026-42607复现&研究\": \"https://mp.weixin.qq.com/s/fScOkKDIDsdUSyOlYyNkpQ\",\n \"肯定有人对 IPv6 感到失望，随手扔了，哈哈\": \"https://mp.weixin.qq.com/s/HdK5GC4j6KxjICepILl1KQ\",\n \"空密码后台 → SQLite 落地 Webshell → 内核 CVE-2026-31431 root\": \"https://mp.weixin.qq.com/s/c6VZNFWIDw0h_xuK0G45Yw\",\n \"无聊瞎研究日记六\": \"https://mp.weixin.qq.com/s/11DYjLNGskWKjb2eBJTEfQ\",\n \"【2026年护网】网安项目群\": \"https://mp.weixin.qq.com/s/UA1D2O51h4mlRdrxllKmfw\",\n \"论文录用 | NASP实验室2篇论文被SIGCOMM 2026录用\": \"https://mp.weixin.qq.com/s/_2pTCuCuk0R4q5kjDStDJg\",\n \"CertiK《Skynet朝鲜加密威胁报告》：朝鲜黑客造成2025年约60%数字资产失窃，攻击模式转向“线下渗透”\": \"https://mp.weixin.qq.com/s/iVhZKVHJ1tVMLXRcL_AJtg\",\n \"OpenAI推出Daybreak全新网络安全计划\": \"https://mp.weixin.qq.com/s/U1vLm_ZoU-o4I7sLNxcgbA\",\n \"Linux 内核新增紧急开关，填补 0Day 漏洞修复空窗\": \"https://mp.weixin.qq.com/s/HbXkqDe0-vyHhKaNdHLY5Q\",\n \"你的紫队并非真正融合——只是红蓝队共处一室\": \"https://mp.weixin.qq.com/s/J66hp8wS5ZNXruNCwqa7ag\",\n \"黑客利用伪造DeepSeek TUI GitHub仓库传播恶意软件\": \"https://mp.weixin.qq.com/s/jCu1hHqoAA7k8jvZwPsp3w\",\n \"2026盘古石取证初赛（APK取证）\": \"https://mp.weixin.qq.com/s/LzLFYgOPb_G6un2dPZkf5w\",\n \"蚁剑最新高危漏洞分析：为什么一个“终端输出”最后变成了客户端 RCE？\": \"https://mp.weixin.qq.com/s/6lAzHpefcbFDM3s6a2R0gA\",\n \"链锁裂变｜TeamPCP 供应链攻击劫持 guardrails-ai，七模块凭据收割全景分析\": \"https://mp.weixin.qq.com/s/P4LnwNy2wVbLDEk12-3XIw\",\n \"6年网安沉浮：从国内一线厂商安服被裁到央企项目经理上岸的真实成长\": \"https://mp.weixin.qq.com/s/ao3mnjqdJ1D15osJHkAK3A\",\n \"2025年度全国信息安全大事件：从银行系统瘫痪到政务云断线\": \"https://mp.weixin.qq.com/s/Jg4R1lr-nihnc_k7aQVUBw\",\n \"Windows 11 终于「听劝」了：文件大小显示自适应 + 刷新按钮回归首页！\": \"https://mp.weixin.qq.com/s/d-HjnrCBZLFVeKWNQ4UOAA\",\n \"一年一度项目群\": \"https://mp.weixin.qq.com/s/oEAp2mmz8hkGlotFq-3gYw\",\n \"AI会淘汰脚本小子吗？\": \"https://mp.weixin.qq.com/s/55zrGjeUb04c5xDnctIN9Q\",\n \"AI正在重构网络安全行业\": \"https://mp.weixin.qq.com/s/c_QH14bNp22u3OocokOQeA\",\n \"【免杀神器】morphkatz\": \"https://mp.weixin.qq.com/s/ebJ9qpyYRDfZggmW_RVwTQ\",\n \"一款功能强大的Web 漏洞扫描器(11种检测模块)\": \"https://mp.weixin.qq.com/s/MOnAGljdhFGkh7eGBK-Auw\",\n \"【恶意文件通告】关于Hugging Face平台仿冒OpenAI仓库的供应链投毒事件\": \"https://mp.weixin.qq.com/s/1Gz41IktUfVoyT2bzfswxQ\",\n \"【恶意文件通告】Linux多功能病毒分析\": \"https://mp.weixin.qq.com/s/Zq8Yo1-czb-X358CnBuUNA\",\n \"数据投毒、后门操控…你的AI正在悄悄“变坏”@2026白帽世界大会\": \"https://mp.weixin.qq.com/s/ABA71JvAXZaw7LhkoMKsgQ\",\n \"什么是以太全光交换机？\": \"https://mp.weixin.qq.com/s/l-KI5_o2SAXoQR9NvjJUiA\",\n \"前端核心生态 TanStack 被投毒：攻击者没有偷 npm 账号，却借官方 CI 发了 84 个恶意版本\": \"https://mp.weixin.qq.com/s/mW8y5y218EAw_mX1nR7c9g\",\n \"行业资讯： 北信源关于公司股价（ST信源）严重异常波动的公告\": \"https://mp.weixin.qq.com/s/Mch2uslfLlHQo7ytJR0w-g\",\n \"针对 Windows 11 的新型 BitUnlocker 降级攻击可在 5 分钟内访问加密磁盘\": \"https://mp.weixin.qq.com/s/oNRHKr8lkKy8AGrf3bACmg\",\n \"启明星辰×车企研究院共筑智能汽车全域安全生态\": \"https://mp.weixin.qq.com/s/Uz3l6ufoKr3Ix82R4vjbww\",\n \"PHP SOAP 扩展存在严重漏洞，可导致远程代码执行攻击\": \"https://mp.weixin.qq.com/s/wB1Nto61yY1wymP3O27sYg\",\n \"Mini Shai-Hulud 蠕虫式投毒继续扩散，TanStack、Mistral、Squawk 等生态受影响，周下载量超千万\": \"https://mp.weixin.qq.com/s/DLcTz51h5NnIH7mjcxWDjQ\",\n \"盛邦安全参股企业微纳星空科创板IPO申请获受理\": \"https://mp.weixin.qq.com/s/aXWd_Xb2XVw9kAhJn5F5WQ\",\n \"倒计时2天丨大咖论道：AI上了天，谁在地面画靶心?\": \"https://mp.weixin.qq.com/s/0wJxwn-ycKrkX9_D2mtrpQ\",\n \"黑客利用 CVE-2026-41940 漏洞控制 cPanel 和 WHM 服务器\": \"https://mp.weixin.qq.com/s/IBV42dfZcRMquHpYOfTMzQ\",\n \"安全与发展：《智能体规范应用与创新发展实施意见》与《审慎采用指南CAAS》的理解和比较\": \"https://mp.weixin.qq.com/s/lCFnHIh0injhEn9GLGyjag\",\n \"端到端加密要崩？法国议会秘密给情报部门开“幽灵后门”\": \"https://mp.weixin.qq.com/s/9pK4YxAmr8mjdku6H9q5bA\",\n \"【AI-Red攻防学习篇】：从端口到提示词，重构 AI 目标的侦察范式\": \"https://mp.weixin.qq.com/s/Q_u8LYJRq97yoeFXxOdtdg\",\n \"系统停摆，37台手术逼停，需付800比特币，遭勒索攻击医院如何抉择？\": \"https://mp.weixin.qq.com/s/hN6Pd20mvpWhJZoAoBpuwQ\",\n \"谷歌首次发现“AI自主开发”0Day漏洞攻击工具\": \"https://mp.weixin.qq.com/s/lHGi9W1fjnrqwgg4bmkXzA\",\n \"重磅解读｜十五五 6 次点名 “数智化”，和数字化到底差在哪？\": \"https://mp.weixin.qq.com/s/NZFaGA5tPlzk-565HN4QOQ\",\n \"国家数据局出手：高质量数据集，才是AI真正的“硬底座”\": \"https://mp.weixin.qq.com/s/Lw6Ax7rvc0PW1SmZRVLR9Q\",\n \"首次发现！AI生成零日漏洞利用工具并实施网络攻击\": \"https://mp.weixin.qq.com/s/4OWzmOw1oH11TwmlEmq9jw\",\n \"告别静态标签：DarkAtlas发布“六维六层”网络威胁归因模型\": \"https://mp.weixin.qq.com/s/ri_jfjEIVh2JGc7Pi49GqA\",\n \"护航通信安全 江南信安亮相第二十八届北京科博会\": \"https://mp.weixin.qq.com/s/C8H0bEWUg66Im6OSznBTWA\",\n \"【转载】2025年国外网络安全新兴技术进展及发展趋势研究\": \"https://mp.weixin.qq.com/s/CMCP0v-V45TLHVzJP5CSkg\"\n },\n \"Securelist\": {\n \"State of ransomware in 2026\": \"https://securelist.com/state-of-ransomware-in-2026/119761/\"\n },\n \"GuidePoint Security\": {\n \"What Is Contextual Analysis in Cloud Security and Why Does it Matter?\": \"https://www.guidepointsecurity.com/blog/contextual-analysis-in-cloud-security-and-why-it-matters/\"\n },\n \"The Trail of Bits Blog\": {\n \"Go fuzzing was missing half the toolkit. We forked the toolchain to fix it.\": \"https://blog.trailofbits.com/2026/05/12/go-fuzzing-was-missing-half-the-toolkit.-we-forked-the-toolchain-to-fix-it./\"\n },\n \"Malwarebytes\": {\n \"Fake Claude search results lure Mac users into ClickFix attack\": \"https://www.malwarebytes.com/blog/news/2026/05/fake-claude-search-results-lure-mac-users-into-clickfix-attack\",\n \"1 in 8 employees have sold company logins or know someone who has\": \"https://www.malwarebytes.com/blog/news/2026/05/1-in-8-employees-have-sold-company-logins-or-know-someone-who-has\",\n \"Stolen Canvas data was “returned” after hacker agreement, Instructure says\": \"https://www.malwarebytes.com/blog/news/2026/05/stolen-canvas-data-was-returned-after-hacker-agreement-instructure-says\"\n },\n \"PortSwigger Blog\": {\n \"The beast needs a cage: What's next for AppSec post-Mythos\": \"https://portswigger.net/blog/the-beast-needs-a-cage-whats-next-for-appsec-post-mythos\"\n },\n \"Intigriti\": {\n \"NIS2 compliance beyond the April 2026 deadline\": \"https://www.intigriti.com/blog/business-insights/nis2-compliance-beyond-the-april-2026-deadline\"\n },\n \"Wallarm\": {\n \"Extending Security to MCP Servers: Closing a Critical Gap\": \"https://lab.wallarm.com/extend-security-mcp-servers-close-critical-gap/\"\n },\n \"HackerNews\": {\n \"斯柯达数据泄露事件波及在线商店客户\": \"http://0.0.0.0:8080/post/64237\",\n \"新型 GhostLock 工具滥用 Windows API 阻断文件访问\": \"http://0.0.0.0:8080/post/64236\",\n \"Checkmarx 官方 Jenkins 插件包遭入侵，内含信息窃取程序\": \"http://0.0.0.0:8080/post/64235\",\n \"“Crimenetwork” 平台关停后死灰复燃，再遭德国当局捣毁\": \"http://0.0.0.0:8080/post/64234\",\n \"SailPoint 披露 GitHub 代码库遭黑客攻击\": \"http://0.0.0.0:8080/post/64233\"\n },\n \"绿盟科技技术博客\": {\n \"安全与发展：《智能体规范应用与创新发展实施意见》与《审慎采用指南CAAS》的理解和比较\": \"https://blog.nsfocus.net/%e5%ae%89%e5%85%a8%e4%b8%8e%e5%8f%91%e5%b1%95%ef%bc%9a%e3%80%8a%e6%99%ba%e8%83%bd%e4%bd%93%e8%a7%84%e8%8c%83%e5%ba%94%e7%94%a8%e4%b8%8e%e5%88%9b%e6%96%b0%e5%8f%91%e5%b1%95%e5%ae%9e%e6%96%bd%e6%84%8f/\",\n \"2026年国际AI安全报告（七）\": \"https://blog.nsfocus.net/2026%e5%b9%b4%e5%9b%bd%e9%99%85ai%e5%ae%89%e5%85%a8%e6%8a%a5%e5%91%8a%ef%bc%88%e4%b8%83%ef%bc%89/\"\n },\n \"Checkmarx\": {\n \"Two Fronts, One Risk: Securing Yesterday’s Debt and Today’s AI Code\": \"https://checkmarx.com/blog/two-fronts-one-risk-securing-yesterdays-debt-and-todays-ai-code/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"社媒上的毒性\": \"https://www.solidot.org/story?sid=84281\",\n \"土星冰环可能源自其卫星\": \"https://www.solidot.org/story?sid=84280\",\n \"欧盟准备对 TikTok 和 Instagram 的成瘾性设计采取行动\": \"https://www.solidot.org/story?sid=84279\",\n \"研究发现工作时间减少与肥胖率下降相关\": \"https://www.solidot.org/story?sid=84278\",\n \"Digg 再次尝试重启，将转向 AI 新闻聚合\": \"https://www.solidot.org/story?sid=84277\",\n \"Forza Horizon 6 开发商严惩玩泄密版本的玩家\": \"https://www.solidot.org/story?sid=84276\",\n \"印度总理呼吁居家办公以应对中东能源危机\": \"https://www.solidot.org/story?sid=84275\",\n \"Debian 将要求可复现构建\": \"https://www.solidot.org/story?sid=84274\",\n \"Linux Kernel 将停止支持 AMD K5 CPU\": \"https://www.solidot.org/story?sid=84273\",\n \"GitLab 以 AI 为由裁员\": \"https://www.solidot.org/story?sid=84272\"\n },\n \"黑鸟\": {\n \"中东卫星影像受限：开源情报的失明与破局\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186691&idx=1&sn=8b21a9a253123b602ecb2550c93a933c\"\n },\n \"代码卫士\": {\n \"Checkmarx 再遭攻击，Jenkins AST 插件受陷\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525972&idx=1&sn=b93bcffc7c3ad4c106fbd39a4ee2218e\",\n \"Go 流行库 fsnotify 的维护人员访问权限变更，拉响供应链攻击警报\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525972&idx=2&sn=26ec27a2c831c25b913ce2dfb5658469\"\n },\n \"奇安信 CERT\": {\n \"今日（2026年5月12日）热点网络安全漏洞动态\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505729&idx=1&sn=2935cba9e61f3fa04a47c062b529d715\"\n },\n \"威努特安全网络\": {\n \"电力DCS系统密码应用改造：电厂网络安全的关键防线\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651141587&idx=1&sn=750602e50d7dc7cefbcc7e57c8d0591e\"\n },\n \"Shostack & Friends Blog\": {\n \"Black Hat training earlybird pricing ends soon\": \"https://shostack.org/blog/black-hat-early-bird-26/\"\n },\n \"微步在线研究响应中心\": {\n \"从OA进，靠AI横移，半数都是RCE：2026红队攻击彻底变了\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508706&idx=1&sn=0a47dc86458f4a42dc94b1b142c304b4\"\n },\n \"安全内参\": {\n \"首次发现！AI生成零日漏洞利用工具并实施网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515926&idx=1&sn=347bcbc856a812c74954c74e814786f0\",\n \"告别静态标签：DarkAtlas发布“六维六层”网络威胁归因模型\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515926&idx=2&sn=3fbf2a4960913276cacc078572b24fcf\"\n },\n \"中国信息安全\": {\n \"专题·个人信息保护 | 智能体个人信息保护风险及应对路径\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262496&idx=1&sn=f010e1a831c1cb71cdca8d4b7b14e8c5\",\n \"专家解读｜邬贺铨：为智能体发展树立规范、留足空间\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262496&idx=2&sn=d2f594599d152bd730ce100dc50907ae\",\n \"关注 | 网信办整治来源不清、真假难辨、混淆视听等问题，清理短视频52万余个，严惩账号6.8万余个\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262496&idx=3&sn=4c9abf2be35458517086f25a5f0c1bb3\",\n \"行业 | 360发布研究报告：“AI安全时间差”成政企安全防御新变量\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262496&idx=4&sn=4e4b4e6c72d8c88e1ad93eeb95e6db9d\",\n \"评论 | 无人机必须在法治航道上飞行\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262496&idx=5&sn=56e34593904a3c84fe50379fca33d59c\",\n \"关注 | 2026年4月全国受理网络违法和不良信息举报1686.1万件\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262496&idx=6&sn=09f66f0e5c888706bd041c8ef8d63b79\"\n },\n \"安全圈\": {\n \"【安全圈】警惕！你的蓝牙可能正被监听 改一个设置就能有效防护\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076374&idx=1&sn=80e79d8ca786f2b8a4f2a23fe7d5bad4\",\n \"【安全圈】谷歌确认黑客利用 AI 生成零日漏洞攻击 可提升攻击速度\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076374&idx=2&sn=6ddc9b61db17560810d8e2ede885638d\",\n \"【安全圈】“Crimenetwork” 平台关停后死灰复燃，再遭德国当局捣毁\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076374&idx=3&sn=cde7250ec4d43b997cf6a5e4993a5c93\"\n },\n \"看雪学苑\": {\n \"看雪·2026 KCTF 防守方规则出炉！全网火热征题进行中（新增AI赛道）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614891&idx=1&sn=6836c87fff9b825a3d068bb98dd2a8fe\",\n \"基于LLVM的通用自包含化(Shellcode)编译器开发思路\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614891&idx=2&sn=78d6f9684285c9b2f339ab01f3ca37f0\",\n \"安卓惊现零点击核弹漏洞！远程Shell权限被轻易窃取，PoC已公开\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614891&idx=3&sn=0de81f82941d24d10b76da58cb08c893\"\n },\n \"微步在线\": {\n \"近百个恶意版本！TanStack遭遇自动化投毒（含排查脚本）\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650186511&idx=1&sn=c2d9c23d28bbe5cb8587b5fe9c232d42\"\n },\n \"极客公园\": {\n \"谷歌开了一场「读作 Android，写作 Gemini」的硬件发布会\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653106452&idx=1&sn=f2c98af0b8776bacd94a2b3ac5cbcb50\",\n \"AI 为什么一定会成为这代人的全新购物入口\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653106439&idx=1&sn=1415cd4fc753e8c4a0eb4ce95c44c807\",\n \"免费 1500 次背后，商汤在下一盘什么棋\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653106423&idx=1&sn=2c58cabf2c88d292f52868034fed4262\",\n \"OPPO 就母亲节文案发布问责通告；OpenAI 投资 40 亿美元成立新公司加速企业级 AI 落地；Claude 勒索行为源于网络邪恶信息 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653106350&idx=1&sn=9564b5ee413634b42dfd45438d55c02d\"\n },\n \"数世咨询\": {\n \"疯狂迭代：OpenClaw 143 次版本更新，安全体系是如何\\\"被迫\\\"长出来的？\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542838&idx=1&sn=e7d8ee50a09d50c32724bd8c02e4f74d\",\n \"亿格云完成数亿元B轮融资，加码“人+AI”统一安全治理\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542838&idx=2&sn=3e198c8122e19b81e23af1d2d6549e41\",\n \"【高新招聘】网安项目经理/安服驻场实施人员招募中\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542838&idx=3&sn=5767d2ff8ebd7fdbe5ec4c304bd00734\"\n },\n \"阿里安全响应中心\": {\n \"活动改期｜先知安全沙龙 - 北京站 5月30日开启！\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998870&idx=1&sn=a3055f71d8d5efc4384bf843f9ad0f38\"\n },\n \"安全牛\": {\n \"2026 年 SIEM 市场变革：从 “日志归集工具” 迈向网络韧性核心平台\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141315&idx=1&sn=cfb0d8e5e7b762f829ae8465bd85afa2\",\n \"CNVD 发布安全公告：多款智能体技能包暗藏恶意执行风险；亿格云完成数亿元B轮融资，加码“人+AI”统一安全治理 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141315&idx=2&sn=4e120d8c7390291f6bbb0aa7b3fe4117\"\n },\n \"腾讯安全威胁情报中心\": {\n \"链锁裂变｜TeamPCP 供应链攻击劫持 guardrails-ai，七模块凭据收割全景分析\": \"https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247511898&idx=1&sn=55cf5a7445b1796c68e2649152e4d592\"\n },\n \"奇安信威胁情报中心\": {\n \"【原创】某加密IM官网供应链事件，“离岸”爱国者卷土重来\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518784&idx=1&sn=16b5fe101414c690ae21f811f931791d\"\n },\n \"M01N Team\": {\n \"AISS社区｜Top5安全事件与技术案例解析\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247495038&idx=1&sn=bdf03f33bc9acdfd1d516ad02b691d1d\"\n },\n \"火绒安全\": {\n \"技术驱动防护升级 火绒安全核心研发能力持续提升\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532697&idx=1&sn=7093e8a956c010b4c10019e979efc6e5\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532697&idx=2&sn=1f5b473b792afd1c8ce3d3b2ecc0f41b\"\n },\n \"陌陌安全\": {\n \"春日福利暴击！陌陌 Q1 直播抽奖，惊喜好礼等你来薅～\": \"https://mp.weixin.qq.com/s?__biz=MzI2OTYzOTQzNw==&mid=2247489582&idx=1&sn=2806d6b599accc8d2fff29ada330ec60\"\n },\n \"青藤云安全\": {\n \"一张图：说清楚【AI对抗AI】落地实践\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650851276&idx=1&sn=2003983decb069236baf33f2a74139e9\"\n },\n \"表图\": {\n \"五家网络安全头部公司的 2019—2025：活下来了，但还没走出去\": \"https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247485014&idx=1&sn=f58f60dc647c9185da14186efd5d227d\"\n },\n \"安全行者老霍\": {\n \"揭秘AI越狱者：“我见证了人类制造的最糟糕的东西”\": \"https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486674&idx=1&sn=d86088cbc02b2f5efd9188c186092a9f\"\n },\n \"深信服千里目安全技术中心\": {\n \"【恶意文件通告】关于Hugging Face平台仿冒OpenAI仓库的供应链投毒事件\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525577&idx=1&sn=5f71c741c56237738ad5c7cf6519a70f\",\n \"【恶意文件通告】Linux多功能病毒分析\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525577&idx=2&sn=f77ac8f1303ea4b3e5b5dc78b8881b71\"\n },\n \"360数字安全\": {\n \"360发布“龙虾”生态安全报告：23个漏洞覆盖10余款产品，智能体安全风险蔓延全行业\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585949&idx=1&sn=3a9961caf97d6bf505fdaaf76f1c06e4\",\n \"360首提“AI安全时间差” 政企实战进入速度竞争阶段\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585949&idx=2&sn=4a8aeb1fda7f5fd5d9312c37c0ca2d6d\"\n },\n \"墨菲安全\": {\n \"上海线下闭门沙龙：聊AI 和企业安全\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488407&idx=1&sn=ef65e1f6ec3df3be95e2c10cc59618ec\"\n },\n \"软件安全与逆向分析\": {\n \"三大Root框架通杀检测与反检测方法分析\": \"https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485204&idx=1&sn=0cf8c32c11363b3fab82419058605ad5\"\n },\n \"迪哥讲事\": {\n \"权限绕过\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499431&idx=1&sn=0ddec433ea7ac571491c0cb05a89baca\"\n },\n \"情报分析师\": {\n \"7款顶级GEOINT与SOCMINT工具清单\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567818&idx=1&sn=49376dfa63807949c829da09eb01fe27\"\n },\n \"DARKNAVY\": {\n \"我们试着把干掉黑客的AI干掉了｜前瞻对抗\": \"https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247497966&idx=1&sn=495f70acae6c8db7682dbb5439200dac\"\n },\n \"NetSPI\": {\n \"Why Continuous Testing is the New Standard for Modern Security\": \"https://www.netspi.com/blog/executive-blog/netspi-updates/continuous-testing-new-standard-for-modern-security/\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"Microsoft May 2026 Patch Tuesday, (Tue, May 12th)\": \"https://isc.sans.edu/diary/rss/32980\",\n \"ISC Stormcast For Tuesday, May 12th, 2026 https://isc.sans.edu/podcastdetail/9928, (Tue, May 12th)\": \"https://isc.sans.edu/diary/rss/32978\"\n },\n \"Schneier on Security\": {\n \"Copy.Fail Linux Vulnerability\": \"https://www.schneier.com/blog/archives/2026/05/copy-fail-linux-vulnerability.html\"\n },\n \"TrustedSec\": {\n \"Slamming the Door on Quick Assist Tech Support Scams and Abuse\": \"https://trustedsec.com/blog/slamming-the-door-on-quick-assist-tech-support-scams-and-abuse\"\n },\n \"Future of Tech and Security: Strategy & Innovation with Raffy\": {\n \"Next-Gen MDR Has To Become An AI-Native SecOps Control Plane\": \"https://raffy.ch/blog/2026/05/12/next-gen-mdr-has-to-become-an-ai-native-secops-control-plane/\"\n },\n \"ICT Security Magazine\": {\n \"Whistleblowing e NIS2: quando la segnalazione diventa governance\": \"https://www.ictsecuritymagazine.com/articoli/whistleblowing-nis2/\",\n \"AI governance aziendale: i rischi degli agenti autonomi\": \"https://www.ictsecuritymagazine.com/articoli/ai-governance/\"\n },\n \"The Hacker News\": {\n \"New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution\": \"https://thehackernews.com/2026/05/new-exim-bdat-vulnerability-exposes.html\",\n \"RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded\": \"https://thehackernews.com/2026/05/rubygems-suspends-new-signups-after.html\",\n \"New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots\": \"https://thehackernews.com/2026/05/new-trickmo-variant-uses-ton-c2-and.html\",\n \"Webinar: What the Riskiest SOC Alerts Go Unanswered - and How Radiant Security Can Help\": \"https://thehackernews.com/2026/05/webinar-what-riskiest-soc-alerts-go.html\",\n \"Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages\": \"https://thehackernews.com/2026/05/mini-shai-hulud-worm-compromises.html\",\n \"Why Agentic AI Is Security's Next Blind Spot\": \"https://thehackernews.com/2026/05/why-agentic-ai-is-securitys-next-blind.html\",\n \"Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak\": \"https://thehackernews.com/2026/05/instructure-reaches-ransom-agreement.html\",\n \"OpenAI Launches Daybreak for AI-Powered Vulnerability Detection and Patch Validation\": \"https://thehackernews.com/2026/05/openai-launches-daybreak-for-ai-powered.html\",\n \"iOS 26.5 Brings Default End-to-End Encrypted RCS Messaging Between iPhone and Android\": \"https://thehackernews.com/2026/05/ios-265-brings-default-end-to-end.html\"\n },\n \"白帽子章华鹏\": {\n \"上海线下闭门沙龙：聊AI 和企业安全\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650239023&idx=1&sn=ae15b37b46ed397eeaca5006c49f3bd9\"\n },\n \"Have I Been Pwned latest breaches\": {\n \"Cushman & Wakefield - 310,431 breached accounts\": \"https://haveibeenpwned.com/Breach/CushmanWakefield\"\n },\n \"Security Affairs\": {\n \"Hackers accessed BWH Hotels reservation system for months\": \"https://securityaffairs.com/192038/data-breach/hackers-accessed-bwh-hotels-reservation-system-for-months.html\",\n \"The world’s most “Dangerous” AI, Anthropic’s Mythos, found only one flaw in curl\": \"https://securityaffairs.com/192029/hacking/the-worlds-most-dangerous-ai-anthropics-mythos-found-only-one-flaw-in-curl.html\",\n \"Attackers exploit cPanel CVE-2026-41940 to deploy Filemanager Backdoor\": \"https://securityaffairs.com/192013/cyber-crime/attackers-exploit-cpanel-cve-2026-41940-to-deploy-filemanager-backdoor.html\",\n \"WannaCry, the ransomware attack that changed the history of cybersecurity\": \"https://securityaffairs.com/192015/malware/wannacry-the-ransomware-attack-that-changed-the-history-of-cybersecurity.html\",\n \"Android banking Trojan TrickMo evolves using TON network for C2\": \"https://securityaffairs.com/192003/malware/android-banking-trojan-trickmo-evolves-using-ton-network-for-c2.html\"\n },\n \"Krebs on Security\": {\n \"Patch Tuesday, May 2026 Edition\": \"https://krebsonsecurity.com/2026/05/patch-tuesday-may-2026-edition/\"\n },\n \"Deeplinks\": {\n \"Broken Promises: RIP Instagram’s End-to-End Encrypted DMs\": \"https://www.eff.org/deeplinks/2026/05/broken-promises-rip-instagrams-end-end-encrypted-dms\",\n \"Victory! End-to-End Encrypted RCS Comes to Apple and Android Chats\": \"https://www.eff.org/deeplinks/2026/05/victory-end-end-encrypted-rcs-comes-apple-and-android-chats\",\n \"EFF Launches New Offline Campaign for Saudi Wikipedian Osama Khalid\": \"https://www.eff.org/deeplinks/2026/05/eff-launches-new-offline-campaign-saudi-wikipedian-osama-khalid\",\n \"A Hackers Guide to Circumventing Internet Shutdowns\": \"https://www.eff.org/deeplinks/2026/05/hackers-guide-circumventing-internet-shutdowns\"\n },\n \"Tor Project blog\": {\n \"New Release: Tails 7.7.3\": \"https://blog.torproject.org/new-release-tails-7_7_3/\",\n \"Defending the public's right to know\": \"https://blog.torproject.org/Defending-the-right-to-know/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Tomato, JDownloader, TempPCP, Bad Vibes, Dirty Frag, Giedi Prime, Aaran Leyland... - SWN #580\": \"http://sites.libsyn.com/18678/tomato-jdownloader-temppcp-bad-vibes-dirty-frag-giedi-prime-aaran-leyland-swn-580\",\n \"Why Basic Security Practices Still Work - Rob Allen - ASW #382\": \"http://sites.libsyn.com/18678/why-basic-security-practices-still-work-rob-allen-asw-382\"\n },\n \"网安寻路人\": {\n \"机器速度下的攻防失衡：AI 时代网络安全治理逻辑的根本性重构\": \"https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247508504&idx=1&sn=cfae8460469397bdb3d49f3b20f4c02b\"\n }\n}"}, "0a21f905f2f0dfd6b01aa848fe786f37412e1a0f": {"t": 1785772244.6487284, "n": 27833, "h": "6ce8744d2ade42d4", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2026-05-12 Review\": \"http://www.sec-wiki.com/?2026-05-12\"\n },\n \"Der Flounder\": {\n \"Using pmset to set your Mac to automatically power on when power is available on macOS Tahoe 26.5.0\": \"https://derflounder.wordpress.com/2026/05/12/using-pmset-to-set-your-mac-to-automatically-power-on-when-power-is-available-on-macos-tahoe-26-5-0/\"\n },\n \"博客\": {\n \"What is Google Widevine\": \"https://dyrnq.com/what-is-google-widevine/\"\n },\n \"Tenable Blog\": {\n \"Microsoft’s May 2026 Patch Tuesday Addresses 118 CVEs (CVE-2026-41103)\": \"https://www.tenable.com/blog/microsofts-may-2026-patch-tuesday-addresses-118-cves-cve-2026-41103\"\n },\n \"Microsoft Security Blog\": {\n \"Accelerating detection engineering using AI-assisted synthetic attack logs generation\": \"https://www.microsoft.com/en-us/security/blog/2026/05/12/accelerating-detection-engineering-using-ai-assisted-synthetic-attack-logs-generation/\",\n \"Defense at AI speed: Microsoft’s new multi-model agentic security system tops leading industry benchmark\": \"https://www.microsoft.com/en-us/security/blog/2026/05/12/defense-at-ai-speed-microsofts-new-multi-model-agentic-security-system-tops-leading-industry-benchmark/\",\n \"Defending consumer web properties against modern DDoS attacks\": \"https://www.microsoft.com/en-us/security/blog/2026/05/12/defending-consumer-web-properties-against-modern-ddos-attacks/\",\n \"Undermining the trust boundary: Investigating a stealthy intrusion through third-party compromise\": \"https://www.microsoft.com/en-us/security/blog/2026/05/12/undermining-the-trust-boundary-investigating-a-stealthy-intrusion-through-third-party-compromise/\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Tue May 12 11:39:35 UTC 2026\": \"https://github.com/trickest/cve/commit/b4820345482afaac0fbd931d98c9f68ab0e9ad15\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"科技云报到：智算千亿赛道向何方？一文读懂信通院《2026智能算力服务研究报告》\": \"https://www.anquanke.com/post/id/315489\",\n \"亿格云完成数亿元B轮融资，加码“人+AI”统一安全治理\": \"https://www.anquanke.com/post/id/315487\"\n },\n \"Taxodium\": {\n \"Album#39 - 海马森林 (SEAHORSE FOREST)\": \"https://taxodium.ink/album-39.html\"\n },\n \"Verne in GitHub\": {\n \"codex-lb：用负载均衡的思路管理多个 ChatGPT 账号\": \"https://blog.einverne.info/post/2026/05/codex-lb-chatgpt-account-load-balancer.html\",\n \"socat：比 netcat 更强大的网络瑞士军刀\": \"https://blog.einverne.info/post/2026/05/socat-command-usage.html\",\n \"本地快速切换 Claude Code 和 Codex CLI 账号的几种方案\": \"https://blog.einverne.info/post/2026/05/switch-claude-code-codex-accounts.html\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"Lab Write-up: Linux CLI — Identifying Incorrect File Extensions\": \"https://infosecwriteups.com/lab-write-up-linux-cli-identifying-incorrect-file-extensions-71e03bb908e8?source=rss----7b722bfd1b8d---4\",\n \"AI Models & Data | TryHackMe Write-up\": \"https://infosecwriteups.com/ai-models-data-tryhackme-write-up-c9d70e005bbb?source=rss----7b722bfd1b8d---4\",\n \"Bad USB: The Invisible Hardware Threat\": \"https://infosecwriteups.com/bad-usb-the-invisible-hardware-threat-c1bc8f064405?source=rss----7b722bfd1b8d---4\",\n \"Microsoft Edge Password Exposure: How a Memory Dump Reveals Your Credentials\": \"https://infosecwriteups.com/microsoft-edge-password-exposure-how-a-memory-dump-reveals-your-credentials-c18b1aa7046a?source=rss----7b722bfd1b8d---4\",\n \"Your Wallet Is the Inbox: How Web3 Phishing Attacks Are Targeting Users On-Chain\": \"https://infosecwriteups.com/your-wallet-is-the-new-inbox-how-web3-phishing-attacks-are-targeting-users-on-chain-64dd37f28a52?source=rss----7b722bfd1b8d---4\",\n \"Attack Playbook — Operation DragonRx\": \"https://infosecwriteups.com/attack-playbook-operation-dragonrx-91339316f0df?source=rss----7b722bfd1b8d---4\",\n \"Information disclosure on debug page\\nAPPRENTICE | Lab -02\": \"https://infosecwriteups.com/information-disclosure-on-debug-page-apprentice-lab-02-9d1f09ed7b66?source=rss----7b722bfd1b8d---4\",\n \"Information disclosure in error messages | Lab -01\": \"https://infosecwriteups.com/information-disclosure-in-error-messages-lab-01-588b3d76b76e?source=rss----7b722bfd1b8d---4\"\n },\n \"obaby 𝐢‍𝐧⃝ void\": {\n \"体检以及其他\": \"https://zhongxiaojie.cn/2026/05/1244/\"\n },\n \"先知安全技术社区\": {\n \"【漏洞研究】多层内容解析链引发的 XSS 语义错位绕过及根因分析\": \"https://xz.aliyun.com/news/92125\"\n },\n \"Doonsec's feed\": {\n \"WAVLINK-WN530HG4 live_api.cgi接口存在远程命令执行漏洞 附POC\": \"https://mp.weixin.qq.com/s/A1VK7zrvm93AYwfhl1E1gg\",\n \"LeakDetector：一款自动化敏感信息搜集工具\": \"https://mp.weixin.qq.com/s/TCHaeZ681NHoAXOi4GFLAg\",\n \"中东卫星影像受限：开源情报的失明与破局\": \"https://mp.weixin.qq.com/s/Wo1mP67B7s2I0At_y0PINw\",\n \"SASCTF|广东技术师范大学网络安全攻防竞赛来啦！！\": \"https://mp.weixin.qq.com/s/3qRHh3OT-zXKLH_wEiDSXw\",\n \"【AI安全】Mythos和GPT-5.5-Cyber！AI 的安全主战场\": \"https://mp.weixin.qq.com/s/K8wJiFgCsctcUJT3HJGxIA\",\n \"360发布“龙虾”生态安全报告：23个漏洞覆盖10余款产品，智能体安全风险蔓延全行业\": \"https://mp.weixin.qq.com/s/AKyjmlv4vfperRsGS8njsQ\",\n \"AI正在放大ClickFix与FileFix：下一代网络攻击已经来了\": \"https://mp.weixin.qq.com/s/Cg5x3IvcrmcN4ueYO02O4A\",\n \"网络安全适合当兴趣爱好\": \"https://mp.weixin.qq.com/s/zbEWtfAxBvK7ezGLV3wGJg\",\n \"2026第四届“PGS”电子数据取证（手机）\": \"https://mp.weixin.qq.com/s/VWnV3k29JdYFBACk3EgOCA\",\n \"A²GRC智能体安全免疫模型：Agentic AI时代，企业安全体系如何从“防系统”走向“管智能体”\": \"https://mp.weixin.qq.com/s/wqXbFE2c9UxKloQdiJ-e8w\",\n \"如何在linux上检测恶意软件\": \"https://mp.weixin.qq.com/s/Fz8CWplz7DNncIHDPvIi_w\",\n \"威胁行为者Mr_Rot13积极利用CVE-2026-41940漏洞实施后门部署\": \"https://mp.weixin.qq.com/s/2iUEEejnBxRdQWrwTisEPA\",\n \"Grav CMS 组合拳漏洞| CVE-2026-42613&CVE-2026-42607复现&研究\": \"https://mp.weixin.qq.com/s/fScOkKDIDsdUSyOlYyNkpQ\",\n \"肯定有人对 IPv6 感到失望，随手扔了，哈哈\": \"https://mp.weixin.qq.com/s/HdK5GC4j6KxjICepILl1KQ\",\n \"空密码后台 → SQLite 落地 Webshell → 内核 CVE-2026-31431 root\": \"https://mp.weixin.qq.com/s/c6VZNFWIDw0h_xuK0G45Yw\",\n \"无聊瞎研究日记六\": \"https://mp.weixin.qq.com/s/11DYjLNGskWKjb2eBJTEfQ\",\n \"【2026年护网】网安项目群\": \"https://mp.weixin.qq.com/s/UA1D2O51h4mlRdrxllKmfw\",\n \"论文录用 | NASP实验室2篇论文被SIGCOMM 2026录用\": \"https://mp.weixin.qq.com/s/_2pTCuCuk0R4q5kjDStDJg\",\n \"CertiK《Skynet朝鲜加密威胁报告》：朝鲜黑客造成2025年约60%数字资产失窃，攻击模式转向“线下渗透”\": \"https://mp.weixin.qq.com/s/iVhZKVHJ1tVMLXRcL_AJtg\",\n \"OpenAI推出Daybreak全新网络安全计划\": \"https://mp.weixin.qq.com/s/U1vLm_ZoU-o4I7sLNxcgbA\",\n \"Linux 内核新增紧急开关，填补 0Day 漏洞修复空窗\": \"https://mp.weixin.qq.com/s/HbXkqDe0-vyHhKaNdHLY5Q\",\n \"你的紫队并非真正融合——只是红蓝队共处一室\": \"https://mp.weixin.qq.com/s/J66hp8wS5ZNXruNCwqa7ag\",\n \"黑客利用伪造DeepSeek TUI GitHub仓库传播恶意软件\": \"https://mp.weixin.qq.com/s/jCu1hHqoAA7k8jvZwPsp3w\",\n \"2026盘古石取证初赛（APK取证）\": \"https://mp.weixin.qq.com/s/LzLFYgOPb_G6un2dPZkf5w\",\n \"蚁剑最新高危漏洞分析：为什么一个“终端输出”最后变成了客户端 RCE？\": \"https://mp.weixin.qq.com/s/6lAzHpefcbFDM3s6a2R0gA\",\n \"链锁裂变｜TeamPCP 供应链攻击劫持 guardrails-ai，七模块凭据收割全景分析\": \"https://mp.weixin.qq.com/s/P4LnwNy2wVbLDEk12-3XIw\",\n \"6年网安沉浮：从国内一线厂商安服被裁到央企项目经理上岸的真实成长\": \"https://mp.weixin.qq.com/s/ao3mnjqdJ1D15osJHkAK3A\",\n \"2025年度全国信息安全大事件：从银行系统瘫痪到政务云断线\": \"https://mp.weixin.qq.com/s/Jg4R1lr-nihnc_k7aQVUBw\",\n \"Windows 11 终于「听劝」了：文件大小显示自适应 + 刷新按钮回归首页！\": \"https://mp.weixin.qq.com/s/d-HjnrCBZLFVeKWNQ4UOAA\",\n \"一年一度项目群\": \"https://mp.weixin.qq.com/s/oEAp2mmz8hkGlotFq-3gYw\",\n \"AI会淘汰脚本小子吗？\": \"https://mp.weixin.qq.com/s/55zrGjeUb04c5xDnctIN9Q\",\n \"AI正在重构网络安全行业\": \"https://mp.weixin.qq.com/s/c_QH14bNp22u3OocokOQeA\",\n \"【免杀神器】morphkatz\": \"https://mp.weixin.qq.com/s/ebJ9qpyYRDfZggmW_RVwTQ\",\n \"一款功能强大的Web 漏洞扫描器(11种检测模块)\": \"https://mp.weixin.qq.com/s/MOnAGljdhFGkh7eGBK-Auw\",\n \"【恶意文件通告】关于Hugging Face平台仿冒OpenAI仓库的供应链投毒事件\": \"https://mp.weixin.qq.com/s/1Gz41IktUfVoyT2bzfswxQ\",\n \"【恶意文件通告】Linux多功能病毒分析\": \"https://mp.weixin.qq.com/s/Zq8Yo1-czb-X358CnBuUNA\",\n \"数据投毒、后门操控…你的AI正在悄悄“变坏”@2026白帽世界大会\": \"https://mp.weixin.qq.com/s/ABA71JvAXZaw7LhkoMKsgQ\",\n \"什么是以太全光交换机？\": \"https://mp.weixin.qq.com/s/l-KI5_o2SAXoQR9NvjJUiA\",\n \"前端核心生态 TanStack 被投毒：攻击者没有偷 npm 账号，却借官方 CI 发了 84 个恶意版本\": \"https://mp.weixin.qq.com/s/mW8y5y218EAw_mX1nR7c9g\",\n \"行业资讯： 北信源关于公司股价（ST信源）严重异常波动的公告\": \"https://mp.weixin.qq.com/s/Mch2uslfLlHQo7ytJR0w-g\",\n \"针对 Windows 11 的新型 BitUnlocker 降级攻击可在 5 分钟内访问加密磁盘\": \"https://mp.weixin.qq.com/s/oNRHKr8lkKy8AGrf3bACmg\",\n \"启明星辰×车企研究院共筑智能汽车全域安全生态\": \"https://mp.weixin.qq.com/s/Uz3l6ufoKr3Ix82R4vjbww\",\n \"PHP SOAP 扩展存在严重漏洞，可导致远程代码执行攻击\": \"https://mp.weixin.qq.com/s/wB1Nto61yY1wymP3O27sYg\",\n \"Mini Shai-Hulud 蠕虫式投毒继续扩散，TanStack、Mistral、Squawk 等生态受影响，周下载量超千万\": \"https://mp.weixin.qq.com/s/DLcTz51h5NnIH7mjcxWDjQ\",\n \"盛邦安全参股企业微纳星空科创板IPO申请获受理\": \"https://mp.weixin.qq.com/s/aXWd_Xb2XVw9kAhJn5F5WQ\",\n \"倒计时2天丨大咖论道：AI上了天，谁在地面画靶心?\": \"https://mp.weixin.qq.com/s/0wJxwn-ycKrkX9_D2mtrpQ\",\n \"黑客利用 CVE-2026-41940 漏洞控制 cPanel 和 WHM 服务器\": \"https://mp.weixin.qq.com/s/IBV42dfZcRMquHpYOfTMzQ\",\n \"安全与发展：《智能体规范应用与创新发展实施意见》与《审慎采用指南CAAS》的理解和比较\": \"https://mp.weixin.qq.com/s/lCFnHIh0injhEn9GLGyjag\",\n \"端到端加密要崩？法国议会秘密给情报部门开“幽灵后门”\": \"https://mp.weixin.qq.com/s/9pK4YxAmr8mjdku6H9q5bA\",\n \"【AI-Red攻防学习篇】：从端口到提示词，重构 AI 目标的侦察范式\": \"https://mp.weixin.qq.com/s/Q_u8LYJRq97yoeFXxOdtdg\",\n \"系统停摆，37台手术逼停，需付800比特币，遭勒索攻击医院如何抉择？\": \"https://mp.weixin.qq.com/s/hN6Pd20mvpWhJZoAoBpuwQ\",\n \"谷歌首次发现“AI自主开发”0Day漏洞攻击工具\": \"https://mp.weixin.qq.com/s/lHGi9W1fjnrqwgg4bmkXzA\",\n \"重磅解读｜十五五 6 次点名 “数智化”，和数字化到底差在哪？\": \"https://mp.weixin.qq.com/s/NZFaGA5tPlzk-565HN4QOQ\",\n \"国家数据局出手：高质量数据集，才是AI真正的“硬底座”\": \"https://mp.weixin.qq.com/s/Lw6Ax7rvc0PW1SmZRVLR9Q\",\n \"首次发现！AI生成零日漏洞利用工具并实施网络攻击\": \"https://mp.weixin.qq.com/s/4OWzmOw1oH11TwmlEmq9jw\",\n \"告别静态标签：DarkAtlas发布“六维六层”网络威胁归因模型\": \"https://mp.weixin.qq.com/s/ri_jfjEIVh2JGc7Pi49GqA\",\n \"护航通信安全 江南信安亮相第二十八届北京科博会\": \"https://mp.weixin.qq.com/s/C8H0bEWUg66Im6OSznBTWA\",\n \"【转载】2025年国外网络安全新兴技术进展及发展趋势研究\": \"https://mp.weixin.qq.com/s/CMCP0v-V45TLHVzJP5CSkg\"\n },\n \"Securelist\": {\n \"State of ransomware in 2026\": \"https://securelist.com/state-of-ransomware-in-2026/119761/\"\n },\n \"GuidePoint Security\": {\n \"What Is Contextual Analysis in Cloud Security and Why Does it Matter?\": \"https://www.guidepointsecurity.com/blog/contextual-analysis-in-cloud-security-and-why-it-matters/\"\n },\n \"The Trail of Bits Blog\": {\n \"Go fuzzing was missing half the toolkit. We forked the toolchain to fix it.\": \"https://blog.trailofbits.com/2026/05/12/go-fuzzing-was-missing-half-the-toolkit.-we-forked-the-toolchain-to-fix-it./\"\n },\n \"Malwarebytes\": {\n \"Fake Claude search results lure Mac users into ClickFix attack\": \"https://www.malwarebytes.com/blog/news/2026/05/fake-claude-search-results-lure-mac-users-into-clickfix-attack\",\n \"1 in 8 employees have sold company logins or know someone who has\": \"https://www.malwarebytes.com/blog/news/2026/05/1-in-8-employees-have-sold-company-logins-or-know-someone-who-has\",\n \"Stolen Canvas data was “returned” after hacker agreement, Instructure says\": \"https://www.malwarebytes.com/blog/news/2026/05/stolen-canvas-data-was-returned-after-hacker-agreement-instructure-says\"\n },\n \"PortSwigger Blog\": {\n \"The beast needs a cage: What's next for AppSec post-Mythos\": \"https://portswigger.net/blog/the-beast-needs-a-cage-whats-next-for-appsec-post-mythos\"\n },\n \"Intigriti\": {\n \"NIS2 compliance beyond the April 2026 deadline\": \"https://www.intigriti.com/blog/business-insights/nis2-compliance-beyond-the-april-2026-deadline\"\n },\n \"Wallarm\": {\n \"Extending Security to MCP Servers: Closing a Critical Gap\": \"https://lab.wallarm.com/extend-security-mcp-servers-close-critical-gap/\"\n },\n \"HackerNews\": {\n \"斯柯达数据泄露事件波及在线商店客户\": \"http://0.0.0.0:8080/post/64237\",\n \"新型 GhostLock 工具滥用 Windows API 阻断文件访问\": \"http://0.0.0.0:8080/post/64236\",\n \"Checkmarx 官方 Jenkins 插件包遭入侵，内含信息窃取程序\": \"http://0.0.0.0:8080/post/64235\",\n \"“Crimenetwork” 平台关停后死灰复燃，再遭德国当局捣毁\": \"http://0.0.0.0:8080/post/64234\",\n \"SailPoint 披露 GitHub 代码库遭黑客攻击\": \"http://0.0.0.0:8080/post/64233\"\n },\n \"绿盟科技技术博客\": {\n \"安全与发展：《智能体规范应用与创新发展实施意见》与《审慎采用指南CAAS》的理解和比较\": \"https://blog.nsfocus.net/%e5%ae%89%e5%85%a8%e4%b8%8e%e5%8f%91%e5%b1%95%ef%bc%9a%e3%80%8a%e6%99%ba%e8%83%bd%e4%bd%93%e8%a7%84%e8%8c%83%e5%ba%94%e7%94%a8%e4%b8%8e%e5%88%9b%e6%96%b0%e5%8f%91%e5%b1%95%e5%ae%9e%e6%96%bd%e6%84%8f/\",\n \"2026年国际AI安全报告（七）\": \"https://blog.nsfocus.net/2026%e5%b9%b4%e5%9b%bd%e9%99%85ai%e5%ae%89%e5%85%a8%e6%8a%a5%e5%91%8a%ef%bc%88%e4%b8%83%ef%bc%89/\"\n },\n \"Checkmarx\": {\n \"Two Fronts, One Risk: Securing Yesterday’s Debt and Today’s AI Code\": \"https://checkmarx.com/blog/two-fronts-one-risk-securing-yesterdays-debt-and-todays-ai-code/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"社媒上的毒性\": \"https://www.solidot.org/story?sid=84281\",\n \"土星冰环可能源自其卫星\": \"https://www.solidot.org/story?sid=84280\",\n \"欧盟准备对 TikTok 和 Instagram 的成瘾性设计采取行动\": \"https://www.solidot.org/story?sid=84279\",\n \"研究发现工作时间减少与肥胖率下降相关\": \"https://www.solidot.org/story?sid=84278\",\n \"Digg 再次尝试重启，将转向 AI 新闻聚合\": \"https://www.solidot.org/story?sid=84277\",\n \"Forza Horizon 6 开发商严惩玩泄密版本的玩家\": \"https://www.solidot.org/story?sid=84276\",\n \"印度总理呼吁居家办公以应对中东能源危机\": \"https://www.solidot.org/story?sid=84275\",\n \"Debian 将要求可复现构建\": \"https://www.solidot.org/story?sid=84274\",\n \"Linux Kernel 将停止支持 AMD K5 CPU\": \"https://www.solidot.org/story?sid=84273\",\n \"GitLab 以 AI 为由裁员\": \"https://www.solidot.org/story?sid=84272\"\n },\n \"黑鸟\": {\n \"中东卫星影像受限：开源情报的失明与破局\": \"https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186691&idx=1&sn=8b21a9a253123b602ecb2550c93a933c\"\n },\n \"代码卫士\": {\n \"Checkmarx 再遭攻击，Jenkins AST 插件受陷\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525972&idx=1&sn=b93bcffc7c3ad4c106fbd39a4ee2218e\",\n \"Go 流行库 fsnotify 的维护人员访问权限变更，拉响供应链攻击警报\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525972&idx=2&sn=26ec27a2c831c25b913ce2dfb5658469\"\n },\n \"奇安信 CERT\": {\n \"今日（2026年5月12日）热点网络安全漏洞动态\": \"https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505729&idx=1&sn=2935cba9e61f3fa04a47c062b529d715\"\n },\n \"威努特安全网络\": {\n \"电力DCS系统密码应用改造：电厂网络安全的关键防线\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651141587&idx=1&sn=750602e50d7dc7cefbcc7e57c8d0591e\"\n },\n \"Shostack & Friends Blog\": {\n \"Black Hat training earlybird pricing ends soon\": \"https://shostack.org/blog/black-hat-early-bird-26/\"\n },\n \"微步在线研究响应中心\": {\n \"从OA进，靠AI横移，半数都是RCE：2026红队攻击彻底变了\": \"https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508706&idx=1&sn=0a47dc86458f4a42dc94b1b142c304b4\"\n },\n \"安全内参\": {\n \"首次发现！AI生成零日漏洞利用工具并实施网络攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515926&idx=1&sn=347bcbc856a812c74954c74e814786f0\",\n \"告别静态标签：DarkAtlas发布“六维六层”网络威胁归因模型\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515926&idx=2&sn=3fbf2a4960913276cacc078572b24fcf\"\n },\n \"中国信息安全\": {\n \"专题·个人信息保护 | 智能体个人信息保护风险及应对路径\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262496&idx=1&sn=f010e1a831c1cb71cdca8d4b7b14e8c5\",\n \"专家解读｜邬贺铨：为智能体发展树立规范、留足空间\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262496&idx=2&sn=d2f594599d152bd730ce100dc50907ae\",\n \"关注 | 网信办整治来源不清、真假难辨、混淆视听等问题，清理短视频52万余个，严惩账号6.8万余个\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262496&idx=3&sn=4c9abf2be35458517086f25a5f0c1bb3\",\n \"行业 | 360发布研究报告：“AI安全时间差”成政企安全防御新变量\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262496&idx=4&sn=4e4b4e6c72d8c88e1ad93eeb95e6db9d\",\n \"评论 | 无人机必须在法治航道上飞行\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262496&idx=5&sn=56e34593904a3c84fe50379fca33d59c\",\n \"关注 | 2026年4月全国受理网络违法和不良信息举报1686.1万件\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262496&idx=6&sn=09f66f0e5c888706bd041c8ef8d63b79\"\n },\n \"安全圈\": {\n \"【安全圈】警惕！你的蓝牙可能正被监听 改一个设置就能有效防护\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076374&idx=1&sn=80e79d8ca786f2b8a4f2a23fe7d5bad4\",\n \"【安全圈】谷歌确认黑客利用 AI 生成零日漏洞攻击 可提升攻击速度\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076374&idx=2&sn=6ddc9b61db17560810d8e2ede885638d\",\n \"【安全圈】“Crimenetwork” 平台关停后死灰复燃，再遭德国当局捣毁\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076374&idx=3&sn=cde7250ec4d43b997cf6a5e4993a5c93\"\n },\n \"看雪学苑\": {\n \"看雪·2026 KCTF 防守方规则出炉！全网火热征题进行中（新增AI赛道）\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614891&idx=1&sn=6836c87fff9b825a3d068bb98dd2a8fe\",\n \"基于LLVM的通用自包含化(Shellcode)编译器开发思路\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614891&idx=2&sn=78d6f9684285c9b2f339ab01f3ca37f0\",\n \"安卓惊现零点击核弹漏洞！远程Shell权限被轻易窃取，PoC已公开\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614891&idx=3&sn=0de81f82941d24d10b76da58cb08c893\"\n },\n \"微步在线\": {\n \"近百个恶意版本！TanStack遭遇自动化投毒（含排查脚本）\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650186511&idx=1&sn=c2d9c23d28bbe5cb8587b5fe9c232d42\"\n },\n \"极客公园\": {\n \"谷歌开了一场「读作 Android，写作 Gemini」的硬件发布会\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653106452&idx=1&sn=f2c98af0b8776bacd94a2b3ac5cbcb50\",\n \"AI 为什么一定会成为这代人的全新购物入口\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653106439&idx=1&sn=1415cd4fc753e8c4a0eb4ce95c44c807\",\n \"免费 1500 次背后，商汤在下一盘什么棋\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653106423&idx=1&sn=2c58cabf2c88d292f52868034fed4262\",\n \"OPPO 就母亲节文案发布问责通告；OpenAI 投资 40 亿美元成立新公司加速企业级 AI 落地；Claude 勒索行为源于网络邪恶信息 | 极客早知道\": \"https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653106350&idx=1&sn=9564b5ee413634b42dfd45438d55c02d\"\n },\n \"数世咨询\": {\n \"疯狂迭代：OpenClaw 143 次版本更新，安全体系是如何\\\"被迫\\\"长出来的？\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542838&idx=1&sn=e7d8ee50a09d50c32724bd8c02e4f74d\",\n \"亿格云完成数亿元B轮融资，加码“人+AI”统一安全治理\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542838&idx=2&sn=3e198c8122e19b81e23af1d2d6549e41\",\n \"【高新招聘】网安项目经理/安服驻场实施人员招募中\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542838&idx=3&sn=5767d2ff8ebd7fdbe5ec4c304bd00734\"\n },\n \"阿里安全响应中心\": {\n \"活动改期｜先知安全沙龙 - 北京站 5月30日开启！\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998870&idx=1&sn=a3055f71d8d5efc4384bf843f9ad0f38\"\n },\n \"安全牛\": {\n \"2026 年 SIEM 市场变革：从 “日志归集工具” 迈向网络韧性核心平台\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141315&idx=1&sn=cfb0d8e5e7b762f829ae8465bd85afa2\",\n \"CNVD 发布安全公告：多款智能体技能包暗藏恶意执行风险；亿格云完成数亿元B轮融资，加码“人+AI”统一安全治理 | 牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141315&idx=2&sn=4e120d8c7390291f6bbb0aa7b3fe4117\"\n },\n \"腾讯安全威胁情报中心\": {\n \"链锁裂变｜TeamPCP 供应链攻击劫持 guardrails-ai，七模块凭据收割全景分析\": \"https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247511898&idx=1&sn=55cf5a7445b1796c68e2649152e4d592\"\n },\n \"奇安信威胁情报中心\": {\n \"【原创】某加密IM官网供应链事件，“离岸”爱国者卷土重来\": \"https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518784&idx=1&sn=16b5fe101414c690ae21f811f931791d\"\n },\n \"M01N Team\": {\n \"AISS社区｜Top5安全事件与技术案例解析\": \"https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247495038&idx=1&sn=bdf03f33bc9acdfd1d516ad02b691d1d\"\n },\n \"火绒安全\": {\n \"技术驱动防护升级 火绒安全核心研发能力持续提升\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532697&idx=1&sn=7093e8a956c010b4c10019e979efc6e5\",\n \"诚邀渠道合作伙伴共启新征程\": \"https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532697&idx=2&sn=1f5b473b792afd1c8ce3d3b2ecc0f41b\"\n },\n \"陌陌安全\": {\n \"春日福利暴击！陌陌 Q1 直播抽奖，惊喜好礼等你来薅～\": \"https://mp.weixin.qq.com/s?__biz=MzI2OTYzOTQzNw==&mid=2247489582&idx=1&sn=2806d6b599accc8d2fff29ada330ec60\"\n },\n \"青藤云安全\": {\n \"一张图：说清楚【AI对抗AI】落地实践\": \"https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650851276&idx=1&sn=2003983decb069236baf33f2a74139e9\"\n },\n \"表图\": {\n \"五家网络安全头部公司的 2019—2025：活下来了，但还没走出去\": \"https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247485014&idx=1&sn=f58f60dc647c9185da14186efd5d227d\"\n },\n \"安全行者老霍\": {\n \"揭秘AI越狱者：“我见证了人类制造的最糟糕的东西”\": \"https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486674&idx=1&sn=d86088cbc02b2f5efd9188c186092a9f\"\n },\n \"深信服千里目安全技术中心\": {\n \"【恶意文件通告】关于Hugging Face平台仿冒OpenAI仓库的供应链投毒事件\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525577&idx=1&sn=5f71c741c56237738ad5c7cf6519a70f\",\n \"【恶意文件通告】Linux多功能病毒分析\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525577&idx=2&sn=f77ac8f1303ea4b3e5b5dc78b8881b71\"\n },\n \"360数字安全\": {\n \"360发布“龙虾”生态安全报告：23个漏洞覆盖10余款产品，智能体安全风险蔓延全行业\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585949&idx=1&sn=3a9961caf97d6bf505fdaaf76f1c06e4\",\n \"360首提“AI安全时间差” 政企实战进入速度竞争阶段\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585949&idx=2&sn=4a8aeb1fda7f5fd5d9312c37c0ca2d6d\"\n },\n \"墨菲安全\": {\n \"上海线下闭门沙龙：聊AI 和企业安全\": \"https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488407&idx=1&sn=ef65e1f6ec3df3be95e2c10cc59618ec\"\n },\n \"软件安全与逆向分析\": {\n \"三大Root框架通杀检测与反检测方法分析\": \"https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485204&idx=1&sn=0cf8c32c11363b3fab82419058605ad5\"\n },\n \"迪哥讲事\": {\n \"权限绕过\": \"https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499431&idx=1&sn=0ddec433ea7ac571491c0cb05a89baca\"\n },\n \"情报分析师\": {\n \"7款顶级GEOINT与SOCMINT工具清单\": \"https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567818&idx=1&sn=49376dfa63807949c829da09eb01fe27\"\n },\n \"DARKNAVY\": {\n \"我们试着把干掉黑客的AI干掉了｜前瞻对抗\": \"https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247497966&idx=1&sn=495f70acae6c8db7682dbb5439200dac\"\n },\n \"NetSPI\": {\n \"Why Continuous Testing is the New Standard for Modern Security\": \"https://www.netspi.com/blog/executive-blog/netspi-updates/continuous-testing-new-standard-for-modern-security/\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"Microsoft May 2026 Patch Tuesday, (Tue, May 12th)\": \"https://isc.sans.edu/diary/rss/32980\",\n \"ISC Stormcast For Tuesday, May 12th, 2026 https://isc.sans.edu/podcastdetail/9928, (Tue, May 12th)\": \"https://isc.sans.edu/diary/rss/32978\"\n },\n \"Schneier on Security\": {\n \"Copy.Fail Linux Vulnerability\": \"https://www.schneier.com/blog/archives/2026/05/copy-fail-linux-vulnerability.html\"\n },\n \"TrustedSec\": {\n \"Slamming the Door on Quick Assist Tech Support Scams and Abuse\": \"https://trustedsec.com/blog/slamming-the-door-on-quick-assist-tech-support-scams-and-abuse\"\n },\n \"Future of Tech and Security: Strategy & Innovation with Raffy\": {\n \"Next-Gen MDR Has To Become An AI-Native SecOps Control Plane\": \"https://raffy.ch/blog/2026/05/12/next-gen-mdr-has-to-become-an-ai-native-secops-control-plane/\"\n },\n \"ICT Security Magazine\": {\n \"Whistleblowing e NIS2: quando la segnalazione diventa governance\": \"https://www.ictsecuritymagazine.com/articoli/whistleblowing-nis2/\",\n \"AI governance aziendale: i rischi degli agenti autonomi\": \"https://www.ictsecuritymagazine.com/articoli/ai-governance/\"\n },\n \"The Hacker News\": {\n \"New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution\": \"https://thehackernews.com/2026/05/new-exim-bdat-vulnerability-exposes.html\",\n \"RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded\": \"https://thehackernews.com/2026/05/rubygems-suspends-new-signups-after.html\",\n \"New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots\": \"https://thehackernews.com/2026/05/new-trickmo-variant-uses-ton-c2-and.html\",\n \"Webinar: What the Riskiest SOC Alerts Go Unanswered - and How Radiant Security Can Help\": \"https://thehackernews.com/2026/05/webinar-what-riskiest-soc-alerts-go.html\",\n \"Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages\": \"https://thehackernews.com/2026/05/mini-shai-hulud-worm-compromises.html\",\n \"Why Agentic AI Is Security's Next Blind Spot\": \"https://thehackernews.com/2026/05/why-agentic-ai-is-securitys-next-blind.html\",\n \"Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak\": \"https://thehackernews.com/2026/05/instructure-reaches-ransom-agreement.html\",\n \"OpenAI Launches Daybreak for AI-Powered Vulnerability Detection and Patch Validation\": \"https://thehackernews.com/2026/05/openai-launches-daybreak-for-ai-powered.html\",\n \"iOS 26.5 Brings Default End-to-End Encrypted RCS Messaging Between iPhone and Android\": \"https://thehackernews.com/2026/05/ios-265-brings-default-end-to-end.html\"\n },\n \"白帽子章华鹏\": {\n \"上海线下闭门沙龙：聊AI 和企业安全\": \"https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650239023&idx=1&sn=ae15b37b46ed397eeaca5006c49f3bd9\"\n },\n \"Have I Been Pwned latest breaches\": {\n \"Cushman & Wakefield - 310,431 breached accounts\": \"https://haveibeenpwned.com/Breach/CushmanWakefield\"\n },\n \"Security Affairs\": {\n \"Hackers accessed BWH Hotels reservation system for months\": \"https://securityaffairs.com/192038/data-breach/hackers-accessed-bwh-hotels-reservation-system-for-months.html\",\n \"The world’s most “Dangerous” AI, Anthropic’s Mythos, found only one flaw in curl\": \"https://securityaffairs.com/192029/hacking/the-worlds-most-dangerous-ai-anthropics-mythos-found-only-one-flaw-in-curl.html\",\n \"Attackers exploit cPanel CVE-2026-41940 to deploy Filemanager Backdoor\": \"https://securityaffairs.com/192013/cyber-crime/attackers-exploit-cpanel-cve-2026-41940-to-deploy-filemanager-backdoor.html\",\n \"WannaCry, the ransomware attack that changed the history of cybersecurity\": \"https://securityaffairs.com/192015/malware/wannacry-the-ransomware-attack-that-changed-the-history-of-cybersecurity.html\",\n \"Android banking Trojan TrickMo evolves using TON network for C2\": \"https://securityaffairs.com/192003/malware/android-banking-trojan-trickmo-evolves-using-ton-network-for-c2.html\"\n },\n \"Krebs on Security\": {\n \"Patch Tuesday, May 2026 Edition\": \"https://krebsonsecurity.com/2026/05/patch-tuesday-may-2026-edition/\"\n },\n \"Deeplinks\": {\n \"Broken Promises: RIP Instagram’s End-to-End Encrypted DMs\": \"https://www.eff.org/deeplinks/2026/05/broken-promises-rip-instagrams-end-end-encrypted-dms\",\n \"Victory! End-to-End Encrypted RCS Comes to Apple and Android Chats\": \"https://www.eff.org/deeplinks/2026/05/victory-end-end-encrypted-rcs-comes-apple-and-android-chats\",\n \"EFF Launches New Offline Campaign for Saudi Wikipedian Osama Khalid\": \"https://www.eff.org/deeplinks/2026/05/eff-launches-new-offline-campaign-saudi-wikipedian-osama-khalid\",\n \"A Hackers Guide to Circumventing Internet Shutdowns\": \"https://www.eff.org/deeplinks/2026/05/hackers-guide-circumventing-internet-shutdowns\"\n },\n \"Tor Project blog\": {\n \"New Release: Tails 7.7.3\": \"https://blog.torproject.org/new-release-tails-7_7_3/\",\n \"Defending the public's right to know\": \"https://blog.torproject.org/Defending-the-right-to-know/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Tomato, JDownloader, TempPCP, Bad Vibes, Dirty Frag, Giedi Prime, Aaran Leyland... - SWN #580\": \"http://sites.libsyn.com/18678/tomato-jdownloader-temppcp-bad-vibes-dirty-frag-giedi-prime-aaran-leyland-swn-580\",\n \"Why Basic Security Practices Still Work - Rob Allen - ASW #382\": \"http://sites.libsyn.com/18678/why-basic-security-practices-still-work-rob-allen-asw-382\"\n },\n \"网安寻路人\": {\n \"机器速度下的攻防失衡：AI 时代网络安全治理逻辑的根本性重构\": \"https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247508504&idx=1&sn=cfae8460469397bdb3d49f3b20f4c02b\"\n }\n}"}}, "archive/tmp/2025-05-14.json": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747368.8270075, "n": 49927, "h": "1dcbd25c802fa8a0", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-05-13 Review\": \"http://www.sec-wiki.com/?2025-05-13\"\n },\n \"paper - Last paper\": {\n \"通过自信息重写攻击揭示文本水印的弱点\": \"https://paper.seebug.org/3320/\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"美国 CISA 将 TeleMessage TM SGNL 添加到其已知利用漏洞目录中\": \"https://www.anquanke.com/post/id/307345\",\n \"华硕 DriverHub 漏洞可导致恶意网站以管理员权限运行命令\": \"https://www.anquanke.com/post/id/307342\",\n \"匿名黑客窃取美国驱逐航空公司 GlobalX 的航班数据\": \"https://www.anquanke.com/post/id/307339\",\n \"PupkinStealer：小型恶意软件，通过 Telegram 机器人实施大规模盗窃\": \"https://www.anquanke.com/post/id/307336\",\n \"PoC 发布：CVE-2025-31644 漏洞利用通过设备模式命令注入授予 F5 BIG-IP 的 Root 访问权限\": \"https://www.anquanke.com/post/id/307333\",\n \"Gartner 概述了影响全球云计算采用的六大关键趋势\": \"https://www.anquanke.com/post/id/307330\",\n \"Anchorage Digital 收购 Mountain Protocol，USDM 稳定币即将停产\": \"https://www.anquanke.com/post/id/307327\",\n \"ZKsync X 黑客发布虚假 SEC 调查，意图破坏代币\": \"https://www.anquanke.com/post/id/307324\",\n \"PoC 发布：CVE-2025-31258 通过 RemoteViewServices 在 macOS 中实现沙盒逃逸\": \"https://www.anquanke.com/post/id/307321\",\n \"360助力“奥运冠军之城”七台河 培育新质人才\": \"https://www.anquanke.com/post/id/307318\"\n },\n \"Security Boulevard\": {\n \"Feel Supported by Advanced IAM Strategies\": \"https://securityboulevard.com/2025/05/feel-supported-by-advanced-iam-strategies/?utm_source=rss&utm_medium=rss&utm_campaign=feel-supported-by-advanced-iam-strategies\",\n \"Stay Ahead with Proactive Non-Human Identity Management\": \"https://securityboulevard.com/2025/05/stay-ahead-with-proactive-non-human-identity-management/?utm_source=rss&utm_medium=rss&utm_campaign=stay-ahead-with-proactive-non-human-identity-management\",\n \"NHIs Solutions Tailored to Handle Your Needs\": \"https://securityboulevard.com/2025/05/nhis-solutions-tailored-to-handle-your-needs/?utm_source=rss&utm_medium=rss&utm_campaign=nhis-solutions-tailored-to-handle-your-needs\",\n \"Secrets Management That Fits Your Budget\": \"https://securityboulevard.com/2025/05/secrets-management-that-fits-your-budget/?utm_source=rss&utm_medium=rss&utm_campaign=secrets-management-that-fits-your-budget\",\n \"Microsoft’s May 2025 Patch Tuesday Addresses 71 CVEs (CVE-2025-32701, CVE-2025-32706, CVE-2025-30400)\": \"https://securityboulevard.com/2025/05/microsofts-may-2025-patch-tuesday-addresses-71-cves-cve-2025-32701-cve-2025-32706-cve-2025-30400/?utm_source=rss&utm_medium=rss&utm_campaign=microsofts-may-2025-patch-tuesday-addresses-71-cves-cve-2025-32701-cve-2025-32706-cve-2025-30400\",\n \"BSidesLV24 – GroundFloor – Pipeline Pandemonium: How To Hijack The Cloud And Make It Rain Insecurity\": \"https://securityboulevard.com/2025/05/bsideslv24-groundfloor-pipeline-pandemonium-how-to-hijack-the-cloud-and-make-it-rain-insecurity/?utm_source=rss&utm_medium=rss&utm_campaign=bsideslv24-groundfloor-pipeline-pandemonium-how-to-hijack-the-cloud-and-make-it-rain-insecurity\",\n \"Network Security Policy Management (NSPM) in 2025\": \"https://securityboulevard.com/2025/05/network-security-policy-management-nspm-in-2025/?utm_source=rss&utm_medium=rss&utm_campaign=network-security-policy-management-nspm-in-2025\",\n \"The Security Gap JPMorgan Chase’s CISO Didn’t Mention — And Why It’s in Your Browser\": \"https://securityboulevard.com/2025/05/the-security-gap-jpmorgan-chases-ciso-didnt-mention-and-why-its-in-your-browser/?utm_source=rss&utm_medium=rss&utm_campaign=the-security-gap-jpmorgan-chases-ciso-didnt-mention-and-why-its-in-your-browser\",\n \"How to safely change your name without putting your identity at risk\": \"https://securityboulevard.com/2025/05/how-to-safely-change-your-name-without-putting-your-identity-at-risk/?utm_source=rss&utm_medium=rss&utm_campaign=how-to-safely-change-your-name-without-putting-your-identity-at-risk\",\n \"Unified Account Defense: How AI-Powered Layers Stop Bots and Human Fraud—Faster\": \"https://securityboulevard.com/2025/05/unified-account-defense-how-ai-powered-layers-stop-bots-and-human-fraud-faster/?utm_source=rss&utm_medium=rss&utm_campaign=unified-account-defense-how-ai-powered-layers-stop-bots-and-human-fraud-faster\"\n },\n \"Trustwave Blog\": {\n \"From Simulation to Strategy: Evolving Your Red and Purple Teaming Approach\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/from-simulation-to-strategy-evolving-your-red-and-purple-teaming-approach/\"\n },\n \"奇安信攻防社区\": {\n \"Cobalt Strike特征消除第三篇:通过URDL学习RDI\": \"https://forum.butian.net/share/4323\"\n },\n \"Tenable Blog\": {\n \"CVE-2025-4427, CVE-2025-4428: Ivanti Endpoint Manager Mobile (EPMM) Remote Code Execution\": \"https://www.tenable.com/blog/cve-2025-4427-cve-2025-4428-ivanti-endpoint-manager-mobile-epmm-remote-code-execution\",\n \"Microsoft’s May 2025 Patch Tuesday Addresses 71 CVEs (CVE-2025-32701, CVE-2025-32706, CVE-2025-30400)\": \"https://www.tenable.com/blog/microsofts-may-2025-patch-tuesday-addresses-71-cves-cve-2025-32701-cve-2025-32706\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"Design By : RVTECH - Blind Sql Injection Vulnerability\": \"https://cxsecurity.com/issue/WLB-2025050033\",\n \"fengoffice_3.5.1.5 - SQLi\": \"https://cxsecurity.com/issue/WLB-2025050032\",\n \"TP-Link VN020 F3v(T) TT_V6.2.1021) DHCP Stack Buffer Overflow\": \"https://cxsecurity.com/issue/WLB-2025050031\",\n \"Dell EMC iDRAC7/iDRAC8 2.52.52.52 Remote Code Execution\": \"https://cxsecurity.com/issue/WLB-2025050030\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Tue May 13 16:02:10 UTC 2025\": \"https://github.com/trickest/cve/commit/4aa2c06a73bf1ce33f13d1d152cfc707dbdf976d\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"$256 Bounty : XSS via Web Cache Poisoning in Discourse\": \"https://infosecwriteups.com/256-bounty-xss-via-web-cache-poisoning-in-discourse-594d5961555e?source=rss----7b722bfd1b8d---4\",\n \"The $1,000 Recon Trick: One Command That Changed My Hunting Game\": \"https://infosecwriteups.com/the-1-000-recon-trick-one-command-that-changed-my-hunting-game-58527a7f6d7c?source=rss----7b722bfd1b8d---4\",\n \"The Human Firewall: Why Your Employees Are Both Your Greatest Vulnerability and Asset\": \"https://infosecwriteups.com/the-human-firewall-why-your-employees-are-both-your-greatest-vulnerability-and-asset-76a93b879bae?source=rss----7b722bfd1b8d---4\",\n \"DCShadow Attacks: Subverting Active Directory Replication for Stealthy Persistence\": \"https://infosecwriteups.com/dcshadow-attacks-subverting-active-directory-replication-for-stealthy-persistence-92c975661227?source=rss----7b722bfd1b8d---4\",\n \"Part 1: How to Become a Pentester in 2025: Free & Affordable Online Labs\": \"https://infosecwriteups.com/part-1-how-to-become-a-pentester-in-2025-free-affordable-online-labs-940b6bf8061c?source=rss----7b722bfd1b8d---4\",\n \"Logic Flaw: Using Invitation Function to Block Other Accounts\": \"https://infosecwriteups.com/logic-flaw-turning-an-invitation-function-into-a-revenue-blocker-b4523dc46dde?source=rss----7b722bfd1b8d---4\",\n \"Bug Chain: pre-auth takeover to permanent access.\": \"https://infosecwriteups.com/bug-chain-pre-auth-takeover-to-permanent-access-4d92829ed816?source=rss----7b722bfd1b8d---4\",\n \"How I was able to delete a production backend server in my first finding.\": \"https://infosecwriteups.com/how-i-was-able-to-delete-a-production-backend-server-in-my-first-finding-5dcce8aa093c?source=rss----7b722bfd1b8d---4\",\n \"Business logic: I can order anything from your account without paying for it\": \"https://infosecwriteups.com/business-logic-i-can-order-anything-from-your-account-without-paying-for-it-86ef070e01dd?source=rss----7b722bfd1b8d---4\",\n \"OSINT Writeups — MIST Cyber Drill 2025\": \"https://infosecwriteups.com/osint-writeups-mist-cyber-drill-2025-2d1e398a4672?source=rss----7b722bfd1b8d---4\"\n },\n \"Doonsec's feed\": {\n \"【培训】第十四期开源情报能力培训班5月底成都开班\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651149958&idx=1&sn=e49a3bf30e49d95b6fc3de72aa9b14dd\",\n \"【通知】四川警察学院2025年公开招聘博士等高层次人才的公告\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651149958&idx=2&sn=83e7ef05632171c2c51ecae1e95bf8b6\",\n \"手机搭建ipv6代理服务器实现远程访问家庭设备\": \"https://mp.weixin.qq.com/s?__biz=Mzg3NDk1MDczOQ==&mid=2247485094&idx=1&sn=f8a94ef3442a366690b5cf903554d774\",\n \"7-Zip电子取证版丨支持打开E01 L01 AFF，还能计算源盘哈希！\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTUwNjI4Mw==&mid=2247489508&idx=1&sn=09dfe7343ad5cf0385ff4099751cd1e8\",\n \"【逆向百例】02小程序逆向之webview调试动态KEY加密加签\": \"https://mp.weixin.qq.com/s?__biz=MzkyNjY3OTI4Ng==&mid=2247484838&idx=1&sn=3eed2a53e3e6bf23e1fbd5b287b8536b\",\n \"顺景ERP UploadInvtSpFile接口存在任意文件上传漏洞 附POC\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488457&idx=1&sn=ff9daf871fef4edcfdb100b4990e66ea\",\n \"答疑 | edge浏览器查看浏览器Cookie\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488100&idx=1&sn=40e7139e1b2c112b4d921b1d277c3139\",\n \"程序员Commit消息写到头秃？这款插件让你的Git提交信息不再像\\\\\\\"祖传代码\\\\\\\"一样难懂！\": \"https://mp.weixin.qq.com/s?__biz=MzkyMzY0MTk2OA==&mid=2247485892&idx=1&sn=69645a838a99970da1692a4874fe25be\",\n \"手搓一款敏感数据采集工具\": \"https://mp.weixin.qq.com/s?__biz=MzU2MjY2NTg3Mg==&mid=2247486061&idx=1&sn=3d1d54fd8523f909082247fd41c8c04b\",\n \"Athens Go模块代理服务\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NTk4MDk2OQ==&mid=2247484697&idx=1&sn=0102e418f63a35841606b468d5671b41\",\n \"如何通过Shell脚本分析你的“历史命令”？揭秘最常用的终端操作！\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTc5MjM4Nw==&mid=2457388897&idx=1&sn=c04ef53f27a87182e595e463b55d76e9\",\n \"CNVD-2024-22977 金和C6协同管理平台文件上传漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486540&idx=1&sn=eb91ae30cb0ff0124a21f0cc4971d6ae\",\n \"国家中小学智慧教育平台与人工智能融合应用指南；政企行业智能体研究报告\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655278601&idx=1&sn=c82d6e2b8b40c2f877adecf5eb4bcfdb\",\n \"记二次帮学员拿下edu证书站\": \"https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247493399&idx=1&sn=425e84fa877f789598a2e8afdf8320c6\",\n \"一家小VC眼中的：AI投资指北\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485818&idx=1&sn=fc6f941cdac5c6bf99cf9d3cd2537b84\",\n \"【干货原创】实网攻防演习常态化，会带来什么变化01\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485818&idx=2&sn=658474698a5a73117b1dab3870547627\",\n \"【干货】笑傲职场的独家经验（1）\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485818&idx=3&sn=95a51789b9378931c50fb06836a6ddb0\",\n \"【干货原创】K12教育，鲜为人知的模式秘密\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485818&idx=4&sn=c582e8cc84c4e9559a7c90ca1a5eb8cb\",\n \"原创文章目录\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485818&idx=5&sn=89da76a7628bf01633b1c1bb61a99e4f\",\n \"倒计时2天 | “CMAS多智能体协同决策平台”邀您现场体验\": \"https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660191397&idx=1&sn=1bbae41a681b6948d678a4cadae732b7\",\n \"【海外SRC实战】一个支付逻辑漏洞，怒赚 $9000 赏金\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519305&idx=1&sn=191abe19580685bafe70e3ddb0f2ec74\",\n \"一名合格红队的成长之路\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519305&idx=2&sn=88480ec38689934dc73b52b336defd21\",\n \"[ 高级黑客 ] 网络设备原理：交换机、路由器、网络 （2）\": \"https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247491109&idx=1&sn=541ac30533a4f7dbb261e9bf52ed7865\",\n \"Telegram迫于国际压力果断将“汇旺、新币”巨头等“好旺”担保平台清除平台\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzIyODg2OQ==&mid=2247484604&idx=1&sn=302ef442aec09604387c97df69de1df4\",\n \"2025Hvv招聘-欢迎各位师傅！\": \"https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486942&idx=1&sn=35f399b748631783d62dd1fade74b852\",\n \"猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭！\": \"https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486942&idx=2&sn=368c1989a347f75796a39d41037b6173\",\n \"退款狗 \\\\\\\"Sanqian\\\\\\\" 有多远死多远!\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489759&idx=1&sn=273522641302a4290688078fa9dd584d\",\n \"基于Memprocfs和Volatility的可视化内存取证工具 - LovelyMem\": \"https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486341&idx=1&sn=59fd3dc14bee6085ac4c4af9b0ccdc72\",\n \"Java安全-RASP基础讲解&代码Demo\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491036&idx=1&sn=4584caa1b3f8628585f532cc9b6a2ef2\",\n \"客户端漏洞在红蓝对抗中的挖掘与利用\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727845102&idx=1&sn=450421e645d6b694ead1dc90d9a14d79\",\n \"一次渗透从统一登录到全站用户接管\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491036&idx=3&sn=1ff4a927514601f7a78ff2a67bf24ad7\",\n \"大模型安全攻防\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491036&idx=4&sn=c6dc2e6b10d97e409e6288e160d3055e\",\n \"LLM学习笔记：最好的学习方法是带着问题去寻找答案\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491036&idx=5&sn=8900a8c4917a491dcc96237466260284\",\n \"MSF（3）免杀混淆\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzI5NzA3NQ==&mid=2247486788&idx=1&sn=0f619596a2e6f4197bee7ca066657459\",\n \"C2流量隐藏-云函数\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MzYyMjEzMQ==&mid=2247487581&idx=1&sn=9e515bb4602fb8060be4197766d775db\",\n \"AI重构网络安全防线：RSA 2025上厂商展示的AI安全产品\": \"https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247547770&idx=1&sn=d498a98da85b6b6571335068be86e713\",\n \"《大白哥红队攻防课4期》\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDYxMTc0Mg==&mid=2247484353&idx=1&sn=b8cdc2ce0423fb2222902d2d80bc1d74\",\n \"【成功复现】Elestio Memos服务器端请求伪造漏洞(CVE-2025-22952)【SSRF】\": \"https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503247&idx=1&sn=f725ae48a660d6d5f43b8dee2657652b\",\n \"新闻联播｜全国政协召开“以科技创新引领新质生产力发展”专题协商会 齐向东参会并发言\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626822&idx=1&sn=6dcbcd03e5c76db16223e05b668c2161\",\n \"北投集团与奇安信集团举行工作座谈\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626822&idx=2&sn=31f204645cf24d490433cf0edc12a89a\",\n \"奇安信邀您共赴第12届中国国际警用装备博览会\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626822&idx=3&sn=202a6ec486bd686adbd62f54570e3aca\",\n \"你收到了迪奥的短信吗？记者致电官方客服：中国客户信息遭泄漏 ——\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626822&idx=4&sn=f2cf3b7aa2809af543089fba8a4755ff\",\n \"英伟达CEO黄仁勋：AI的下一波浪潮是物理AI\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932121&idx=1&sn=d5ad0c9104db51ac51413b221e71dcf7\",\n \"AI快讯：字节跳动迭代多模态大模型，Manus开放注册，“AI工程师”落地生物制造业\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932121&idx=2&sn=206781301a1f2432ea83a434f809e4be\",\n \"100万！可行性研究报告AI系统建设服务项目\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932121&idx=3&sn=86d7412d3d5698f8cfefc6f84647b513\",\n \"伪装韩国国家安全战略智库的APT37攻击案例分析（Operation.ToyBox Story）\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTQzNTI4Nw==&mid=2247488974&idx=1&sn=8844143b5fff1daa30c9744c69d91289\",\n \"5月15日-17日丨盛邦安全与您相约第十届中国(北京)军博会暨北京国际低空产业博览会\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650278256&idx=1&sn=d79082d2486d4302224f3795f4244381\",\n \"爱奇艺回应违法收集使用个人信息：正与合作方一道认真核查，积极整改\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzQ4MzA4Ng==&mid=2247485795&idx=1&sn=e0a192d95e52101a306b07cad1d3a30c\",\n \"【吃瓜】想问下360这个20万的数据的结论从哪里得来的🤔\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498858&idx=1&sn=99b4b61322ffc85d85348bb0dde4aa8f\",\n \"因未按规定履行网络安全保护义务等，这家银行被罚\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096228&idx=1&sn=3cb6db45d6fbd677617e6533c07025ee\",\n \"VMware Tools 存在允许攻击者篡改文件以触发恶意作漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096228&idx=2&sn=d8e4dbd652645003ab441e031634eb89\",\n \"SQL注入 | 当你细节一点，你就会发现看似没有SQL注入的地方，它其实是有注入的\": \"https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491099&idx=1&sn=217204413c3cd8f679c9032711b942a4\",\n \"【1day】⼤华智慧园区综合管理平台⽂件上传(CNVD2024-35311)\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484574&idx=1&sn=9b5357394109be2207eae4f312292bb0\",\n \"标准解读 |《电信网和互联网数据库审计技术要求与测试方法》\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247508063&idx=1&sn=1ea17c8fe156965d1de549c078bbb06b\",\n \"热点|奢侈品巨头“迪奥”20万中国用户信息泄露，数据安全再拉警报！\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580499&idx=1&sn=766c77bff08c482e93c487b2bbae7b11\",\n \"5月风向标：2025工业互联网大会锁定苏州\": \"https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247593381&idx=1&sn=bf55ae2700af7f90c9724b8e1f61e54e\",\n \"13.75亿美元“和解案”创造历史，科技巨头的数据隐私困局\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518398&idx=1&sn=3457e4af8522b7e32aebdb2eba6ef051\",\n \"快自查！这65款移动应用被通报了\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518398&idx=2&sn=c98c85ae8e519419a9ad37d67c32a18d\",\n \"行业首创！快手开源短视频内容质量评测标准KuaiMod！\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NzU4MDM0MQ==&mid=2247496263&idx=1&sn=d6f7094da1334c941eec65f59822431b\",\n \"【安全圈】迪奥中国确认客户数据泄露事件 官方启动紧急响应机制\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=1&sn=17b1668a50455b656fe87b62a9236a3e\",\n \"【安全圈】黑客组织Anonymous入侵美国遣返航班承包商GlobalX 敏感飞行数据遭泄露\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=2&sn=5420da5c652479f74b871302e863d963\",\n \"【安全圈】Firefox 源代码现已托管在 GitHub 上\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=3&sn=07261f07deabe7076ca81e9b6d8b79d6\",\n \"【安全圈】华硕DriverHub漏洞致高危攻击：恶意网站可获取管理员权限\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=4&sn=2cdeb6fe56f376c6209155e17e0eaa4d\",\n \"C3安全大会荣膺“2025中国上市公司经典品牌案例”\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650622901&idx=1&sn=3c5e98bd28c9b5cc9a50f292b0e0417f\",\n \"新时代的中国国家安全白皮书｜新时代的中国国家安全\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499893&idx=1&sn=30ecd4f3a1e4d4f52d482f63b85ccf3a\",\n \"创新标杆|虎符网络“数据加工可信空间”入选2025中国数谷·西湖论剑大会创新实践案例并做现场分享\": \"https://mp.weixin.qq.com/s?__biz=MzUxODY3MDExMA==&mid=2247490258&idx=1&sn=fd30a98629d880b7fade4ee23554fa15\",\n \"新华社：《新时代的中国国家安全》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115710&idx=1&sn=8d22073ec2b051cb42adf38394326a44\",\n \"创新标杆|虎符网络“数据加工可信空间”入选2025中国数谷·西湖论剑大会创新实践案例\": \"https://mp.weixin.qq.com/s?__biz=MzUxODY3MDExMA==&mid=2247490255&idx=1&sn=bad68ed047045488321b5ae0aeb1ff25\",\n \"非域环境的身份突破\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484450&idx=1&sn=5d4fd9630d101e88af79091de39fc67a\",\n \"太强悍！12款适合网工的杀手级工具！\": \"https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247517108&idx=1&sn=299d9f592551867f8afe1dd61e20b9c4\",\n \"2025全景图权威发布｜梆梆安全连续十二次蝉联榜单，引领移动安全、车联网安全、数据安全等关键领域\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135709&idx=1&sn=7d4f5117d2537ae27cd758e2b53cccbc\",\n \"护网奇谈： 红队工程师手记\": \"https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247494216&idx=1&sn=246e50eac09f4cdb766d5a8f99f1ba89\",\n \"华硕修复严重的DriverHub 漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522987&idx=1&sn=dd6c1684116b2d65b1efe7c80afe5945\",\n \"苹果修复iOS、macOS 平台上的多个严重漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522987&idx=2&sn=3a436a07ce8ab28ad783d9d8705ed72a\",\n \"黑客手段更新：新型ClickFix攻击技术同时针对Windows和Linux系统\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320691&idx=1&sn=c8cf80f5dd03b98a66f72fb75c9e551f\",\n \"华硕DriverHub漏洞允许恶意网站以管理员权限执行命令\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320691&idx=2&sn=de7f2bb1bb8623716a3d0a8af49cf360\",\n \"macOS远程视图服务沙箱逃逸漏洞PoC公开，攻击者可突破系统限制\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320691&idx=3&sn=68ed4c2a830801d5a9cee49cec544119\",\n \"GNU Screen 多漏洞曝光，本地提权与终端劫持风险浮现\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320691&idx=4&sn=e480396e735465420fa34b4a20378a10\",\n \"【勒索防护】Mallox新变种再度来袭，正利用产品漏洞对国内企业实施攻击\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524436&idx=1&sn=e5b469efdad9cfdb0cad7a69c8e92dd7\",\n \"【漏洞通告】F5 BIG-IP Appliance 模式命令执行漏洞(CVE-2025-31644)\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524436&idx=2&sn=7349fe15ed6d5371de2ad7c1fba70c08\",\n \"网络安全信息与动态周报2025年第19期（5月5日-5月11日）\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524436&idx=3&sn=d84f141467ff6d5366c5f8dd1eba77f8\",\n \"车机Android系统安全漏洞深入浅出\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484298&idx=1&sn=cee5e4998f84342eb302370bbdd76d61\",\n \"【限时免费】地狱级挑战「Honeypot」企业级靶场上线！首个“非常困难”评级靶机，敢来应战吗？\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523679&idx=1&sn=e53690ca8a44948c51ee85b26d13c711\",\n \"客户泄露用户数据，软件供应商赔偿超1.4亿元\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514339&idx=1&sn=ff06a5dae1a3d0bd095b2a2c6e9b2664\",\n \"中国客户信息外泄，这家公司主动通知客户\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514339&idx=2&sn=da04fb39296c858b274bf37c5cc66615\",\n \"中国黑客风云录—日本媒体记录中国黑客\": \"https://mp.weixin.qq.com/s?__biz=MzU1NjgzOTAyMg==&mid=2247523778&idx=1&sn=9be0c63067dfb004fcd9e56074092ada\",\n \"6月相约上海，共探商用密码创新蓝海，诚邀您拨冗参会\": \"https://mp.weixin.qq.com/s?__biz=MzU1NjgzOTAyMg==&mid=2247523778&idx=2&sn=47b4e609a5835a7ceeb4a5916db020dc\",\n \"展会邀约 | 丈八网安诚邀您共赴北京军博会！\": \"https://mp.weixin.qq.com/s?__biz=MzkwNzI1NDk0MQ==&mid=2247492835&idx=1&sn=9168ef060e5f90b334573b0a35c19102\",\n \"“防御加密攻击，构筑重要防线”——观成科技荣膺2024年度中国电子学会科学技术进步一等奖\": \"https://mp.weixin.qq.com/s?__biz=MzU2Mjg1NjY4Nw==&mid=2247490561&idx=1&sn=8de73480ce1e9de8e83f17e12aa8b744\"\n },\n \"一个被知识诅咒的人\": {\n \"【人工智能】DeepSeek探秘：解锁超智能AI引擎的奥秘\": \"https://blog.csdn.net/nokiaguy/article/details/147921718\",\n \"【人工智能】AI革命揭秘：大模型开发中的关键突破\": \"https://blog.csdn.net/nokiaguy/article/details/147921565\"\n },\n \"Cerbero Blog\": {\n \"Disk Format Package\": \"https://blog.cerbero.io/disk-format-package/\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"新型 “自带安装程序” EDR 旁路技术被用于勒索软件攻击\": \"https://www.4hou.com/posts/2XN1\",\n \"智能创新 加速前行 | Fortinet发布2025年第一季度财报\": \"https://www.4hou.com/posts/vwv0\",\n \"喜报！CACTER连续十二次入选《中国网络安全行业全景图》\": \"https://www.4hou.com/posts/qon0\",\n \"XCon2025议题启征||未来·皆有AI\": \"https://www.4hou.com/posts/rpo4\"\n },\n \"GuidePoint Security\": {\n \"Bridging the Gap: How a Controls-Focused Cybersecurity Program Aligns SEC Rules with Daily Operations\": \"https://www.guidepointsecurity.com/blog/bridging-the-gap/\"\n },\n \"Sandfly Security Blog RSS Feed\": {\n \"Eliminating Linux Security Blind Spots: Insights from the CISO Series Podcast\": \"https://sandflysecurity.com/blog/insights-from-the-ciso-series-podcast/\"\n },\n \"blog.avast.com EN\": {\n \"How to safely change your name without putting your identity at risk\": \"https://blog.avast.com/how-to-safely-change-your-name\"\n },\n \"VMRay\": {\n \"Malware Detection Techniques: The Complete Guide\": \"https://www.vmray.com/malware-detection-techniques-the-complete-guide/\"\n },\n \"Reverse Engineering\": {\n \"Mario Kart 64 Has Been Decompiled\": \"https://www.reddit.com/r/ReverseEngineering/comments/1klxduc/mario_kart_64_has_been_decompiled/\",\n \"Branch Privilege Injection: Exploiting Branch Predictor Race Conditions\": \"https://www.reddit.com/r/ReverseEngineering/comments/1klwxrc/branch_privilege_injection_exploiting_branch/\",\n \"Multiple Security Issues in Screen\": \"https://www.reddit.com/r/ReverseEngineering/comments/1klk1dq/multiple_security_issues_in_screen/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"$256 Bounty : XSS via Web Cache Poisoning in Discourse\": \"https://infosecwriteups.com/256-bounty-xss-via-web-cache-poisoning-in-discourse-594d5961555e?source=rss----7b722bfd1b8d--bug_bounty\",\n \"The $1,000 Recon Trick: One Command That Changed My Hunting Game\": \"https://infosecwriteups.com/the-1-000-recon-trick-one-command-that-changed-my-hunting-game-58527a7f6d7c?source=rss----7b722bfd1b8d--bug_bounty\",\n \"The Human Firewall: Why Your Employees Are Both Your Greatest Vulnerability and Asset\": \"https://infosecwriteups.com/the-human-firewall-why-your-employees-are-both-your-greatest-vulnerability-and-asset-76a93b879bae?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Logic Flaw: Using Invitation Function to Block Other Accounts\": \"https://infosecwriteups.com/logic-flaw-turning-an-invitation-function-into-a-revenue-blocker-b4523dc46dde?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Bug Chain: pre-auth takeover to permanent access.\": \"https://infosecwriteups.com/bug-chain-pre-auth-takeover-to-permanent-access-4d92829ed816?source=rss----7b722bfd1b8d--bug_bounty\",\n \"How I was able to delete a production backend server in my first finding.\": \"https://infosecwriteups.com/how-i-was-able-to-delete-a-production-backend-server-in-my-first-finding-5dcce8aa093c?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Business logic: I can order anything from your account without paying for it\": \"https://infosecwriteups.com/business-logic-i-can-order-anything-from-your-account-without-paying-for-it-86ef070e01dd?source=rss----7b722bfd1b8d--bug_bounty\",\n \"OSINT Writeups — MIST Cyber Drill 2025\": \"https://infosecwriteups.com/osint-writeups-mist-cyber-drill-2025-2d1e398a4672?source=rss----7b722bfd1b8d--bug_bounty\",\n \"How Hackers Bypass Login Pages with SQL, Logic Flaws, and Headers\": \"https://infosecwriteups.com/how-hackers-bypass-login-pages-with-sql-logic-flaws-and-headers-567a5649e701?source=rss----7b722bfd1b8d--bug_bounty\",\n \"SameSite? SameMess: How I Bypassed Cookie Protections to Hijack Sessions ️‍♂️\": \"https://infosecwriteups.com/samesite-samemess-how-i-bypassed-cookie-protections-to-hijack-sessions-%EF%B8%8F-%EF%B8%8F-20520f4be7ec?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Securelist\": {\n \"Using a Mythic agent to optimize penetration testing\": \"https://securelist.com/agent-for-mythic-c2-with-beacon-object-files/115259/\"\n },\n \"Exploit-DB.com RSS Feed\": {\n \"[local] TP-Link VN020 F3v(T) TT_V6.2.1021) - DHCP Stack Buffer Overflow\": \"https://www.exploit-db.com/exploits/52292\",\n \"[webapps] WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation\": \"https://www.exploit-db.com/exploits/52291\",\n \"[webapps] Kentico Xperience 13.0.178 - Cross Site Scripting (XSS)\": \"https://www.exploit-db.com/exploits/52290\",\n \"[local] RDPGuard 9.9.9 - Privilege Escalation\": \"https://www.exploit-db.com/exploits/52289\"\n },\n \"daniel.haxx.se\": {\n \"1k-0036 means sad eyeballs on my LG\": \"https://daniel.haxx.se/blog/2025/05/13/1k-0036-means-sad-eyeballs-on-my-lg/\"\n },\n \"绿盟科技技术博客\": {\n \"WEB前端逆向在nodejs环境中复用webpack代码\": \"https://blog.nsfocus.net/nodejs/\"\n },\n \"Checkmarx\": {\n \"Always Ready to Run: How CISOs Can Finally Get Ahead of Application Risk\": \"https://checkmarx.com/blog/how-cisos-can-finally-get-ahead-of-application-risk/\",\n \"The Fast and the Frictionless: Tuning AppSec to Boost Your DORA Metrics\": \"https://checkmarx.com/blog/tuning-appsec-to-boost-your-dora-metrics/\"\n },\n \"Shostack & Friends Blog\": {\n \"Andor: Think like a leader\": \"https://shostack.org/blog/think-like-a-leader/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"微软裁员 3%\": \"https://www.solidot.org/story?sid=81284\",\n \"Telegram 封禁被指洗钱高达 84 亿美元的新币担保\": \"https://www.solidot.org/story?sid=81283\",\n \"粘性天然聚合物能清除水中的大多数微塑料\": \"https://www.solidot.org/story?sid=81282\",\n \"Google 测试用 AI Mode 取代 I’m Feeling Lucky 按钮\": \"https://www.solidot.org/story?sid=81281\",\n \"西部数据投资声称能将数据保存 5000 年的德国公司\": \"https://www.solidot.org/story?sid=81280\",\n \"气候危机威胁香蕉\": \"https://www.solidot.org/story?sid=81279\",\n \"Firefox 源代码迁移到 GitHub\": \"https://www.solidot.org/story?sid=81278\",\n \"猫为什么比狗长寿？\": \"https://www.solidot.org/story?sid=81277\",\n \"日产计划裁员两万人\": \"https://www.solidot.org/story?sid=81276\",\n \"英伟达据报上调 GPU MSRP 5-15%\": \"https://www.solidot.org/story?sid=81275\",\n \"木星极光的规模和亮度远超地球\": \"https://www.solidot.org/story?sid=81274\",\n \"6月11日Showcase 2025 北京-火山引擎专场，热招中\": \"https://www.solidot.org/story?sid=81272\"\n },\n \"黑海洋 - Wiki\": {\n \"币圈修罗场生存手册之魔鬼滚仓术\": \"https://blog.upx8.com/4803\"\n },\n \"威努特安全网络\": {\n \"赛迪顾问发布交换机研究报告，威努特获优质厂商推荐\": \"http://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651132970&idx=1&sn=23d84eb98e480fa2a04ed53f757c8c6a\"\n },\n \"安全分析与研究\": {\n \"疑似银狐最新测试样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491951&idx=1&sn=fb499075f2f73a3fec4fcf640377de54&subscene=0\"\n },\n \"网安志异\": {\n \"介绍《Not with a Bug, But with a Sticker》\": \"https://mp.weixin.qq.com/s?__biz=MzAxNzYyNzMyNg==&mid=2664232651&idx=1&sn=8cc66016644bb8a9776f16d4dd22b41c&subscene=0\"\n },\n \"看雪学苑\": {\n \"16小时深度攻破！逆向大牛带你深入混淆技术与 Angr 符号执行实战\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593895&idx=1&sn=f498d98442a44bb31a10eface4b44315&subscene=0\",\n \"plaidctf 2025 sheriff_says 题解\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593895&idx=2&sn=e0fd0d7f2c1f8d1c942a0e90f87e459b&subscene=0\",\n \"天网恢恢！荷兰科研机构遭勒索4.5亿，国际黑客终落网\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593895&idx=3&sn=1f82b14ef1b2e75fa79301b94a00e56c&subscene=0\"\n },\n \"安全内参\": {\n \"客户泄露用户数据，软件供应商赔偿超1.4亿元\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514339&idx=1&sn=ff06a5dae1a3d0bd095b2a2c6e9b2664&subscene=0\",\n \"中国客户信息外泄，这家公司主动通知客户\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514339&idx=2&sn=da04fb39296c858b274bf37c5cc66615&subscene=0\"\n },\n \"HackerNews\": {\n \"华硕 DriverHub 漏洞致用户面临远程代码执行攻击​风险\": \"https://hackernews.cc/archives/58711\",\n \"​​黑客正测试针对 Linux 系统的 ClickFix 攻击​\": \"https://hackernews.cc/archives/58709\",\n \"新报告显示：多数浏览器扩展存在严重的安全风险\": \"https://hackernews.cc/archives/58705\"\n },\n \"数世咨询\": {\n \"最关键的8项网络安全运营指标\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538743&idx=1&sn=64376f0dcad54f4ea7d5df015ff9812e&subscene=0\",\n \"RSAC 2025创新沙盒 | Metalware：专注嵌入式系统固件安全\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538743&idx=2&sn=b518e32c26bae6554dc718e237887eae&subscene=0\"\n },\n \"中国信息安全\": {\n \"发布 | 中央网信办等四部门印发《2025年数字乡村发展工作要点》（附全文）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242475&idx=1&sn=c4deaccf1a79b8058b9c8f21307aae72&subscene=0\",\n \"专家解读 | 郭雳：以高质量网络法治保障网络强国建设\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242475&idx=2&sn=1d115d4ca61989c86a42afdcf2787dbe&subscene=0\",\n \"观点 | 确保人工智能安全、可靠、可控\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242475&idx=3&sn=9313faa104550e8ebec27399fe356081&subscene=0\"\n },\n \"dotNet安全矩阵\": {\n \"红队实战技巧，通过 .NET 控制系统服务无痕关闭 Windows Defender\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499654&idx=1&sn=132868f697338831da421e03355b04e9&subscene=0\",\n \"福利 | 最专业、最全面的 [ .NET 代码审计 ] 体系化学习平台\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499654&idx=2&sn=681845e4345e2ed413a70189d853c904&subscene=0\",\n \"免杀 WebShell，通过 Sharp4AppdShell.aspx 绕过服务端 WAF 的监测和拦截\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499654&idx=3&sn=d6bfd26bbb6d124d442ead2996123429&subscene=0\"\n },\n \"极客公园\": {\n \"营收每年翻倍，用户突破 100 万，这可能是最被低估的「AI硬件」\": \"http://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653079157&idx=1&sn=bf3a989931c963346e1731acc6495aaa\",\n \"上线 10 天卖 2000 万美元，跻身历史第一，它正在创造一个「新赛道」\": \"http://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653079140&idx=1&sn=7384557ca9e64bfb9bdb31a2af812b5d\",\n \"中美达成协议，90 天内关税暂停；Manus 面向所有用户免费开放；传苹果考虑提高 iPhone17 售价 | 极客早知道\": \"http://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653079115&idx=1&sn=20864e91dbde64cb1e0933d83600f4bb\"\n },\n \"专注安管平台\": {\n \"以自动化优先和实战化为设计理念的新一代安全运营平台\": \"https://mp.weixin.qq.com/s?__biz=MzUyNzMxOTAwMw==&mid=2247484862&idx=1&sn=e0006eb7f308c8cb628d462601b8dc0a&subscene=0\"\n },\n \"微步在线\": {\n \"装了EDR，被领导质疑不会用…\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183783&idx=1&sn=c607f705c1a9a4023483065d5a41c387&subscene=0\"\n },\n \"安全学术圈\": {\n \"欧洲通信学院 | BLUFFS：蓝牙前向与未来保密攻击及防御\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247492159&idx=1&sn=75d1a6e9429ac80a586bd579ddf19e12&subscene=0\"\n },\n \"代码卫士\": {\n \"华硕修复严重的DriverHub 漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522987&idx=1&sn=dd6c1684116b2d65b1efe7c80afe5945&subscene=0\",\n \"苹果修复iOS、macOS 平台上的多个严重漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522987&idx=2&sn=3a436a07ce8ab28ad783d9d8705ed72a&subscene=0\"\n },\n \"中通安全应急响应中心\": {\n \"【中通SRC助力】免费使用｜最新企业级VPN组网，私有部署的Tailscale平替，真香！\": \"https://mp.weixin.qq.com/s?__biz=MzUyMTcwNTY3Mg==&mid=2247486327&idx=1&sn=c4537b72c98764c14414125351b93627&subscene=0\"\n },\n \"安全牛\": {\n \"发现网络攻击后立即关闭系统？错！\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136811&idx=1&sn=70eda56a639e30bbe283196dd5738fe2&subscene=0\",\n \"Google因生物识别数据侵权支付创纪录13.75亿美元和解金；华硕驱动管理工具安全漏洞允许恶意网站悄然执行管理员级命令 |牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136811&idx=2&sn=c04c6f207bc50001a9e2c8ec9bd15d46&subscene=0\"\n },\n \"字节跳动安全中心\": {\n \"头条专测｜双倍积分，高危严重单价4-10万元\": \"https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494707&idx=1&sn=be0e1cb64fa99b27ad35e4b0a61030a3&subscene=0\"\n },\n \"京东安全应急响应中心\": {\n \"客户端漏洞在红蓝对抗中的挖掘与利用\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727845102&idx=1&sn=450421e645d6b694ead1dc90d9a14d79&subscene=0\"\n },\n \"安全圈\": {\n \"【安全圈】迪奥中国确认客户数据泄露事件 官方启动紧急响应机制\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=1&sn=17b1668a50455b656fe87b62a9236a3e&subscene=0\",\n \"【安全圈】黑客组织Anonymous入侵美国遣返航班承包商GlobalX 敏感飞行数据遭泄露\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=2&sn=5420da5c652479f74b871302e863d963&subscene=0\",\n \"【安全圈】Firefox 源代码现已托管在 GitHub 上\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=3&sn=07261f07deabe7076ca81e9b6d8b79d6&subscene=0\",\n \"【安全圈】华硕DriverHub漏洞致高危攻击：恶意网站可获取管理员权限\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=4&sn=2cdeb6fe56f376c6209155e17e0eaa4d&subscene=0\"\n },\n \"山石网科安全技术研究院\": {\n \"高危漏洞预警：Apache Tomcat远程代码执行漏洞曝光！\": \"https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512193&idx=1&sn=24be890704a835d114a01064777a9e90&subscene=0\"\n },\n \"RedTeam\": {\n \"非域环境的身份突破\": \"http://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484450&idx=1&sn=5d4fd9630d101e88af79091de39fc67a\"\n },\n \"嘶吼专业版\": {\n \"XCon2025议题启征||未来·皆有AI\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582313&idx=1&sn=59653f87bb8387a71d86b2d85723d9da&subscene=0\",\n \"新型 “自带安装程序” EDR 旁路技术被用于勒索软件攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582313&idx=2&sn=d0b610a572cf2b43215a69ec91d09540&subscene=0\"\n },\n \"Arturo Di Corinto\": {\n \"Sovranità digitale. Cos’è e quali sono le principali minacce al cyberspazio nazionale.\": \"https://dicorinto.it/articoli/recensioni/sovranita-digitale-cose-e-quali-sono-le-principali-minacce-al-cyberspazio-nazionale/\"\n },\n \"Securityinfo.it\": {\n \"Ransomware che infettano la CPU: una nuova, potenziale minaccia\": \"https://www.securityinfo.it/2025/05/13/ransomware-che-infettano-la-cpu-una-nuova-potenziale-minaccia/?utm_source=rss&utm_medium=rss&utm_campaign=ransomware-che-infettano-la-cpu-una-nuova-potenziale-minaccia\"\n },\n \"ICT Security Magazine\": {\n \"Cyber Defense in Depth: un approccio stratificato alla Sicurezza Digitale\": \"https://www.ictsecuritymagazine.com/articoli/cyber-defense-in-depth/\"\n },\n \"迪哥讲事\": {\n \"沈阳深蓝25HW二轮招录启动！\": \"http://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497588&idx=1&sn=5ab68ba3e283089b0505762fb34d4c86\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"May 2025 Phishing Surge: Stealth MFA-Bypass Attacks Target Microsoft & Webmail Users\": \"https://pixmsecurity.com/blog/blog/may-2025-phishing-surge-stealth-mfa-bypass-attacks-target-microsoft-and-webmail-users/\",\n \"SAP patches second zero-day flaw exploited in recent attacks\": \"https://www.bleepingcomputer.com/news/security/sap-patches-second-zero-day-flaw-exploited-in-recent-attacks/\",\n \"Microsoft Patch Tuesday for May 2025 — Snort rules and prominent vulnerabilities\": \"https://blog.talosintelligence.com/microsoft-patch-tuesday-for-may-2025-snort-rules-and-prominent-vulnerabilities/\",\n \"Why a Cyber Incident Is a Threat to Your Business Expansion\": \"https://bfore.ai/why-a-cyber-incident-is-a-threat-to-your-business-expansion/\",\n \"Seven things we learned from WhatsApp vs. NSO Group spyware lawsuit\": \"https://techcrunch.com/2025/05/13/seven-things-we-learned-from-whatsapp-vs-nso-group-spyware-lawsuit/\",\n \"North Korea ramps up cyberspying in Ukraine to assess war risk\": \"https://www.bleepingcomputer.com/news/security/north-korea-ramps-up-cyberspying-in-ukraine-to-assess-war-risk/\",\n \"Twilio denies breach following leak of alleged Steam 2FA codes\": \"https://www.bleepingcomputer.com/news/security/twilio-denies-breach-following-leak-of-alleged-steam-2fa-codes/\",\n \"Ivanti fixes EPMM zero-days chained in code execution attacks\": \"https://www.bleepingcomputer.com/news/security/ivanti-fixes-epmm-zero-days-chained-in-code-execution-attacks/\",\n \"Microsoft May 2025 Patch Tuesday fixes 5 exploited zero-days, 72 flaws\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-may-2025-patch-tuesday-fixes-5-exploited-zero-days-72-flaws/\",\n \"US extradites Kosovo national charged in operating illegal online marketplace\": \"https://therecord.media/us-extradites-kosovo-national-online-marketplace\",\n \"Windows 11 KB5058411 and KB5058405 cumulative updates released\": \"https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5058411-and-kb5058405-cumulative-updates-released/\",\n \"Chinese-speaking hackers disrupt drone supply chains in Taiwan, researchers say\": \"https://therecord.media/chinese-hackers-target-taiwan-military-sector\",\n \"Windows 10 KB5058379 update fixes SgrmBroker errors in Event Viewer\": \"https://www.bleepingcomputer.com/news/microsoft/windows-10-kb5058379-update-fixes-sgrmbroker-errors-in-event-viewer/\",\n \"Android 16 expands 'Advanced Protection' with device-level security\": \"https://www.bleepingcomputer.com/news/security/android-16-expands-advanced-protection-with-device-level-security/\",\n \"Fortinet fixes critical zero-day exploited in FortiVoice attacks\": \"https://www.bleepingcomputer.com/news/security/fortinet-fixes-critical-zero-day-exploited-in-fortivoice-attacks/\",\n \"Vulnerabilità dei data center di AI: anche Stargate a rischio di spionaggio cinese\": \"https://www.cybersecurity360.it/nuove-minacce/vulnerabilita-dei-data-center-di-ai-anche-stargate-a-rischio-di-spionaggio-cinese/\",\n \"Cisco, l’Italia è troppo frammentata e sottovaluta l’impatto cyber dell’AI: ecco cosa serve\": \"https://www.cybersecurity360.it/news/cisco-cybersecurity-readiness-index-2025-italia-arretrata/\",\n \"South Korean researchers uncover another cyber-espionage campaign from the North\": \"https://therecord.media/apt37-scarcruft-cyber-espionage-campaign-south-korea\",\n \"Ivanti warns of critical Neurons for ITSM auth bypass flaw\": \"https://www.bleepingcomputer.com/news/security/ivanti-warns-of-critical-neurons-for-itsm-auth-bypass-flaw/\",\n \"EU launches vulnerability database to tackle cybersecurity threats\": \"https://therecord.media/eu-launches-vulnerability-database\",\n \"New Intel CPU flaws leak sensitive data from privileged memory\": \"https://www.bleepingcomputer.com/news/security/new-intel-cpu-flaws-leak-sensitive-data-from-privileged-memory/\",\n \"Le cyber gang più pericolose del 2025: tecniche e tattiche di attacco\": \"https://www.cybersecurity360.it/nuove-minacce/le-cyber-gang-piu-pericolose-del-2025-tecniche-e-tattiche-di-attacco/\",\n \"Microsoft will update Office apps on Windows 10 until 2028\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-will-update-office-apps-on-windows-10-until-2028/\",\n \"Increase Red Team Operations 10X with Adversarial Exposure Validation\": \"https://www.bleepingcomputer.com/news/security/increase-red-team-operations-10x-with-adversarial-exposure-validation/\",\n \"Australia Records Highest-Ever Data Breaches in 2024, Says OAIC’s Report\": \"https://cyble.com/blog/oaic-reports-highest-data-breaches-2024/\",\n \"Akira, il ransomware a cui piacciono le Pmi\": \"https://www.cybersecurity360.it/nuove-minacce/ransomware/akira-il-ransomware-a-cui-piacciono-le-pmi/\",\n \"M&S says customer data stolen in cyberattack, forces password resets\": \"https://www.bleepingcomputer.com/news/security/mands-says-customer-data-stolen-in-cyberattack-forces-password-resets/\",\n \"Alabama says ‘cybersecurity event’ could disrupt state government services\": \"https://therecord.media/alabama-says-cyber-event-could-cause-disruptions\",\n \"States push WeChat for answers over money laundering allegations\": \"https://therecord.media/states-push-wechat-for-money-laundering-answers\",\n \"Evolution of Tycoon 2FA Defense Evasion Mechanisms: Analysis and Timeline\": \"https://any.run/cybersecurity-blog/tycoon2fa-evasion-analysis/\",\n \"Marks & Spencer confirms customer data stolen in cyberattack\": \"https://therecord.media/marks-spencer-confirms-customer-data-breach\",\n \"North Korean hackers target Ukrainian government in new espionage campaign\": \"https://therecord.media/north-korea-hackers-target-ukraine-to-understand-russian-war-efforts\",\n \"Using a Mythic agent to optimize penetration testing\": \"https://securelist.com/agent-for-mythic-c2-with-beacon-object-files/115259/\",\n \"Redefining IABs: Impacts of compartmentalization on threat tracking and modeling\": \"https://blog.talosintelligence.com/redefining-initial-access-brokers/\",\n \"Defining a new methodology for modeling and tracking compartmentalized threats\": \"https://blog.talosintelligence.com/compartmentalized-threat-modeling/\",\n \"Behavioural Analytics & Mobile Malware: Will They Get Along?\": \"https://www.threatfabric.com/blogs/behavioural-analytics-mobile-malware-will-they-get-along\",\n \"Threat Intelligence - Vulnerability insights\": \"https://www.certego.net/blog/whitepaper-aprile-2025-threat-intelligence-insights/\",\n \"Bypassing BitLocker Encryption: Bitpixie PoC and WinPE Edition\": \"https://blog.compass-security.com/2025/05/bypassing-bitlocker-encryption-bitpixie-poc-and-winpe-edition/\",\n \"Ransomware che infettano la CPU: una nuova, potenziale minaccia\": \"https://www.securityinfo.it/2025/05/13/ransomware-che-infettano-la-cpu-una-nuova-potenziale-minaccia/\",\n \"Il vantaggio competitivo del fornitore conforme: come la NIS 2 premia chi investe in sicurezza\": \"https://www.cybersecurity360.it/legal/il-vantaggio-competitivo-del-fornitore-conforme-come-la-nis-2-premia-chi-investe-in-sicurezza/\"\n },\n \"360数字安全\": {\n \"热点|奢侈品巨头“迪奥”20万中国用户信息泄露，数据安全再拉警报！\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580499&idx=1&sn=766c77bff08c482e93c487b2bbae7b11&subscene=0\"\n },\n \"Schneier on Security\": {\n \"Court Rules Against NSO Group\": \"https://www.schneier.com/blog/archives/2025/05/court-rules-against-nso-group.html\"\n },\n \"赛博回忆录\": {\n \"杜绝焦虑，技术人该如何看待AI\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDAyNjQwNg==&mid=2456099397&idx=1&sn=b412e581ace56b2b79c018c7ab845cde&subscene=0\"\n },\n \"谛听ditecting\": {\n \"谛听 | 印巴冲突：印巴双方工控协议暴露数量减少\": \"https://mp.weixin.qq.com/s?__biz=MzU3MzQyOTU0Nw==&mid=2247495001&idx=1&sn=0c6f1fc9f8e4e38fca80e71b7c4e47b0&subscene=0\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"Microsoft Patch Tuesday: May 2025, (Tue, May 13th)\": \"https://isc.sans.edu/diary/rss/31946\",\n \"ISC Stormcast For Tuesday, May 13th, 2025 https://isc.sans.edu/podcastdetail/9448, (Tue, May 13th)\": \"https://isc.sans.edu/diary/rss/31944\"\n },\n \"Graham Cluley\": {\n \"The AI Fix #50: AI brings dead man back for killer’s trial, and the judge loves it\": \"https://grahamcluley.com/the-ai-fix-50/\",\n \"Two years’ jail for down-on-his-luck man who sold ransomware online\": \"https://www.bitdefender.com/en-us/blog/hotforsecurity/two-years-jail-for-down-on-his-luck-man-who-sold-ransomware-online\"\n },\n \"Security Affairs\": {\n \"How Interlock Ransomware Affects the Defense Industrial Base Supply Chain\": \"https://securityaffairs.com/177792/malware/how-interlock-ransomware-affects-the-defense-industrial-base-supply-chain.html\",\n \"Marks and Spencer confirms data breach after April cyber attack\": \"https://securityaffairs.com/177784/data-breach/marks-and-spencer-confirms-data-breach-after-april-cyber-attack.html\",\n \"Moldovan Police arrested a 45-year-old foreign man participating in ransomware attacks on Dutch companies\": \"https://securityaffairs.com/177772/cyber-crime/moldovan-police-arrested-a-45-year-old-foreign-man-participating-in-ransomware-attacks-on-dutch-companies.html\",\n \"APT group exploited Output Messenger Zero-Day to target Kurdish military operating in Iraq\": \"https://securityaffairs.com/177758/apt/apt-group-exploited-output-messenger-zero-day-to-target-kurdish-military-operating-in-iraq.html\",\n \"Apple released security updates to fix multiple flaws in iOS and macOS\": \"https://securityaffairs.com/177748/security/apple-released-security-updates-to-fix-multiple-flaws-in-ios-and-macos.html\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Azure Managed Identities Abuse: Security Research - Defense strategies\": \"https://www.reddit.com/r/netsec/comments/1kll5as/azure_managed_identities_abuse_security_research/\"\n },\n \"blackMORE Ops RSS Feed\": {\n \"Zero-Day Vulnerability in Output Messenger Exploited by Türkiye Hackers\": \"https://www.blackmoreops.com/2025/05/13/zero-day-vulnerability-output-messenger-exploited-turkiye-hackers/\"\n },\n \"Your Open Hacker Community\": {\n \"Root-Me Challenges and CTF\": \"https://www.reddit.com/r/HowToHack/comments/1klz8uy/rootme_challenges_and_ctf/\",\n \"DEFCON quallifying CTF team, ARESx, is currently recruiting for members\": \"https://www.reddit.com/r/HowToHack/comments/1klwgsu/defcon_quallifying_ctf_team_aresx_is_currently/\",\n \"how do i learn to hack?\": \"https://www.reddit.com/r/HowToHack/comments/1kluub0/how_do_i_learn_to_hack/\",\n \"How to build better projects?\": \"https://www.reddit.com/r/HowToHack/comments/1klcxdg/how_to_build_better_projects/\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Which Path to Choose?\": \"https://www.reddit.com/r/netsecstudents/comments/1kluf0l/which_path_to_choose/\"\n },\n \"Deep Web\": {\n \"Am i fucked?\": \"https://www.reddit.com/r/deepweb/comments/1klg2ak/am_i_fucked/\",\n \"Browsing Dark Web through VM???\": \"https://www.reddit.com/r/deepweb/comments/1km02ca/browsing_dark_web_through_vm/\",\n \"i need dread link\": \"https://www.reddit.com/r/deepweb/comments/1klonmj/i_need_dread_link/\",\n \"Searching for any kind of information\": \"https://www.reddit.com/r/deepweb/comments/1klke3q/searching_for_any_kind_of_information/\"\n },\n \"The Hacker News\": {\n \"China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide\": \"https://thehackernews.com/2025/05/china-linked-apts-exploit-sap-cve-2025.html\",\n \"Malicious PyPI Package Posing as Solana Tool Stole Source Code in 761 Downloads\": \"https://thehackernews.com/2025/05/malicious-pypi-package-posing-as-solana.html\",\n \"Deepfake Defense in the Age of AI\": \"https://thehackernews.com/2025/05/deepfake-defense-in-age-of-ai.html\",\n \"North Korean Konni APT Targets Ukraine with Malware to track Russian Invasion Progress\": \"https://thehackernews.com/2025/05/north-korean-konni-apt-targets-ukraine.html\",\n \"Moldovan Police Arrest Suspect in €4.5M Ransomware Attack on Dutch Research Agency\": \"https://thehackernews.com/2025/05/moldovan-police-arrest-suspect-in-45m.html\",\n \"Türkiye Hackers Exploited Output Messenger Zero-Day to Drop Golang Backdoors on Kurdish Servers\": \"https://thehackernews.com/2025/05/turkiye-hackers-exploited-output.html\"\n },\n \"Social Engineering\": {\n \"Trump Fitting the Mormon Model\": \"https://www.reddit.com/r/SocialEngineering/comments/1klqyc0/trump_fitting_the_mormon_model/\",\n \"Social Engineering The Public | Part 1: 'Trust the Science' (Selective Presentation)\": \"https://www.reddit.com/r/SocialEngineering/comments/1klctcq/social_engineering_the_public_part_1_trust_the/\",\n \"Best ways to scam Pedophiles?\": \"https://www.reddit.com/r/SocialEngineering/comments/1kljwh8/best_ways_to_scam_pedophiles/\"\n },\n \"Information Security\": {\n \"Why is RSA still widely used despite its slower performance compared to modern algorithms?\": \"https://www.reddit.com/r/Information_Security/comments/1kledvy/why_is_rsa_still_widely_used_despite_its_slower/\",\n \"Up gradation about apple’s Security\": \"https://www.reddit.com/r/Information_Security/comments/1klh6tt/up_gradation_about_apples_security/\",\n \"OXY CARE PREVARA\": \"https://www.reddit.com/r/Information_Security/comments/1klknyr/oxy_care_prevara/\",\n \"How do you prioritize risk mitigation when dealing with limited budget and resources?\": \"https://www.reddit.com/r/Information_Security/comments/1kldfje/how_do_you_prioritize_risk_mitigation_when/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Deepfake, South Korea, Moonlander, ChineseAI, FBI, AI damages professional reputation - SWN #476\": \"http://sites.libsyn.com/18678/deepfake-south-korea-moonlander-chineseai-fbi-ai-damages-professional-reputation-swn-476\",\n \"Secure Code Reviews, LLM Coding Assistants, and Trusting Code - Rey Bango, Karim Toubba, Gal Elbaz - ASW #330\": \"http://sites.libsyn.com/18678/secure-code-reviews-llm-coding-assistants-and-trusting-code-rey-bango-karim-toubba-gal-elbaz-asw-330\"\n }\n}"}, "ca74d8f223ac0491511fe4f29359015053ee5f8e": {"t": 1785772250.8911872, "n": 49927, "h": "1dcbd25c802fa8a0", "c": "{\n \"SecWiki News\": {\n \"SecWiki News 2025-05-13 Review\": \"http://www.sec-wiki.com/?2025-05-13\"\n },\n \"paper - Last paper\": {\n \"通过自信息重写攻击揭示文本水印的弱点\": \"https://paper.seebug.org/3320/\"\n },\n \"安全客-有思想的安全新媒体\": {\n \"美国 CISA 将 TeleMessage TM SGNL 添加到其已知利用漏洞目录中\": \"https://www.anquanke.com/post/id/307345\",\n \"华硕 DriverHub 漏洞可导致恶意网站以管理员权限运行命令\": \"https://www.anquanke.com/post/id/307342\",\n \"匿名黑客窃取美国驱逐航空公司 GlobalX 的航班数据\": \"https://www.anquanke.com/post/id/307339\",\n \"PupkinStealer：小型恶意软件，通过 Telegram 机器人实施大规模盗窃\": \"https://www.anquanke.com/post/id/307336\",\n \"PoC 发布：CVE-2025-31644 漏洞利用通过设备模式命令注入授予 F5 BIG-IP 的 Root 访问权限\": \"https://www.anquanke.com/post/id/307333\",\n \"Gartner 概述了影响全球云计算采用的六大关键趋势\": \"https://www.anquanke.com/post/id/307330\",\n \"Anchorage Digital 收购 Mountain Protocol，USDM 稳定币即将停产\": \"https://www.anquanke.com/post/id/307327\",\n \"ZKsync X 黑客发布虚假 SEC 调查，意图破坏代币\": \"https://www.anquanke.com/post/id/307324\",\n \"PoC 发布：CVE-2025-31258 通过 RemoteViewServices 在 macOS 中实现沙盒逃逸\": \"https://www.anquanke.com/post/id/307321\",\n \"360助力“奥运冠军之城”七台河 培育新质人才\": \"https://www.anquanke.com/post/id/307318\"\n },\n \"Security Boulevard\": {\n \"Feel Supported by Advanced IAM Strategies\": \"https://securityboulevard.com/2025/05/feel-supported-by-advanced-iam-strategies/?utm_source=rss&utm_medium=rss&utm_campaign=feel-supported-by-advanced-iam-strategies\",\n \"Stay Ahead with Proactive Non-Human Identity Management\": \"https://securityboulevard.com/2025/05/stay-ahead-with-proactive-non-human-identity-management/?utm_source=rss&utm_medium=rss&utm_campaign=stay-ahead-with-proactive-non-human-identity-management\",\n \"NHIs Solutions Tailored to Handle Your Needs\": \"https://securityboulevard.com/2025/05/nhis-solutions-tailored-to-handle-your-needs/?utm_source=rss&utm_medium=rss&utm_campaign=nhis-solutions-tailored-to-handle-your-needs\",\n \"Secrets Management That Fits Your Budget\": \"https://securityboulevard.com/2025/05/secrets-management-that-fits-your-budget/?utm_source=rss&utm_medium=rss&utm_campaign=secrets-management-that-fits-your-budget\",\n \"Microsoft’s May 2025 Patch Tuesday Addresses 71 CVEs (CVE-2025-32701, CVE-2025-32706, CVE-2025-30400)\": \"https://securityboulevard.com/2025/05/microsofts-may-2025-patch-tuesday-addresses-71-cves-cve-2025-32701-cve-2025-32706-cve-2025-30400/?utm_source=rss&utm_medium=rss&utm_campaign=microsofts-may-2025-patch-tuesday-addresses-71-cves-cve-2025-32701-cve-2025-32706-cve-2025-30400\",\n \"BSidesLV24 – GroundFloor – Pipeline Pandemonium: How To Hijack The Cloud And Make It Rain Insecurity\": \"https://securityboulevard.com/2025/05/bsideslv24-groundfloor-pipeline-pandemonium-how-to-hijack-the-cloud-and-make-it-rain-insecurity/?utm_source=rss&utm_medium=rss&utm_campaign=bsideslv24-groundfloor-pipeline-pandemonium-how-to-hijack-the-cloud-and-make-it-rain-insecurity\",\n \"Network Security Policy Management (NSPM) in 2025\": \"https://securityboulevard.com/2025/05/network-security-policy-management-nspm-in-2025/?utm_source=rss&utm_medium=rss&utm_campaign=network-security-policy-management-nspm-in-2025\",\n \"The Security Gap JPMorgan Chase’s CISO Didn’t Mention — And Why It’s in Your Browser\": \"https://securityboulevard.com/2025/05/the-security-gap-jpmorgan-chases-ciso-didnt-mention-and-why-its-in-your-browser/?utm_source=rss&utm_medium=rss&utm_campaign=the-security-gap-jpmorgan-chases-ciso-didnt-mention-and-why-its-in-your-browser\",\n \"How to safely change your name without putting your identity at risk\": \"https://securityboulevard.com/2025/05/how-to-safely-change-your-name-without-putting-your-identity-at-risk/?utm_source=rss&utm_medium=rss&utm_campaign=how-to-safely-change-your-name-without-putting-your-identity-at-risk\",\n \"Unified Account Defense: How AI-Powered Layers Stop Bots and Human Fraud—Faster\": \"https://securityboulevard.com/2025/05/unified-account-defense-how-ai-powered-layers-stop-bots-and-human-fraud-faster/?utm_source=rss&utm_medium=rss&utm_campaign=unified-account-defense-how-ai-powered-layers-stop-bots-and-human-fraud-faster\"\n },\n \"Trustwave Blog\": {\n \"From Simulation to Strategy: Evolving Your Red and Purple Teaming Approach\": \"https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/from-simulation-to-strategy-evolving-your-red-and-purple-teaming-approach/\"\n },\n \"奇安信攻防社区\": {\n \"Cobalt Strike特征消除第三篇:通过URDL学习RDI\": \"https://forum.butian.net/share/4323\"\n },\n \"Tenable Blog\": {\n \"CVE-2025-4427, CVE-2025-4428: Ivanti Endpoint Manager Mobile (EPMM) Remote Code Execution\": \"https://www.tenable.com/blog/cve-2025-4427-cve-2025-4428-ivanti-endpoint-manager-mobile-epmm-remote-code-execution\",\n \"Microsoft’s May 2025 Patch Tuesday Addresses 71 CVEs (CVE-2025-32701, CVE-2025-32706, CVE-2025-30400)\": \"https://www.tenable.com/blog/microsofts-may-2025-patch-tuesday-addresses-71-cves-cve-2025-32701-cve-2025-32706\"\n },\n \"CXSECURITY Database RSS Feed - CXSecurity.com\": {\n \"Design By : RVTECH - Blind Sql Injection Vulnerability\": \"https://cxsecurity.com/issue/WLB-2025050033\",\n \"fengoffice_3.5.1.5 - SQLi\": \"https://cxsecurity.com/issue/WLB-2025050032\",\n \"TP-Link VN020 F3v(T) TT_V6.2.1021) DHCP Stack Buffer Overflow\": \"https://cxsecurity.com/issue/WLB-2025050031\",\n \"Dell EMC iDRAC7/iDRAC8 2.52.52.52 Remote Code Execution\": \"https://cxsecurity.com/issue/WLB-2025050030\"\n },\n \"Recent Commits to cve:main\": {\n \"Update Tue May 13 16:02:10 UTC 2025\": \"https://github.com/trickest/cve/commit/4aa2c06a73bf1ce33f13d1d152cfc707dbdf976d\"\n },\n \"InfoSec Write-ups - Medium\": {\n \"$256 Bounty : XSS via Web Cache Poisoning in Discourse\": \"https://infosecwriteups.com/256-bounty-xss-via-web-cache-poisoning-in-discourse-594d5961555e?source=rss----7b722bfd1b8d---4\",\n \"The $1,000 Recon Trick: One Command That Changed My Hunting Game\": \"https://infosecwriteups.com/the-1-000-recon-trick-one-command-that-changed-my-hunting-game-58527a7f6d7c?source=rss----7b722bfd1b8d---4\",\n \"The Human Firewall: Why Your Employees Are Both Your Greatest Vulnerability and Asset\": \"https://infosecwriteups.com/the-human-firewall-why-your-employees-are-both-your-greatest-vulnerability-and-asset-76a93b879bae?source=rss----7b722bfd1b8d---4\",\n \"DCShadow Attacks: Subverting Active Directory Replication for Stealthy Persistence\": \"https://infosecwriteups.com/dcshadow-attacks-subverting-active-directory-replication-for-stealthy-persistence-92c975661227?source=rss----7b722bfd1b8d---4\",\n \"Part 1: How to Become a Pentester in 2025: Free & Affordable Online Labs\": \"https://infosecwriteups.com/part-1-how-to-become-a-pentester-in-2025-free-affordable-online-labs-940b6bf8061c?source=rss----7b722bfd1b8d---4\",\n \"Logic Flaw: Using Invitation Function to Block Other Accounts\": \"https://infosecwriteups.com/logic-flaw-turning-an-invitation-function-into-a-revenue-blocker-b4523dc46dde?source=rss----7b722bfd1b8d---4\",\n \"Bug Chain: pre-auth takeover to permanent access.\": \"https://infosecwriteups.com/bug-chain-pre-auth-takeover-to-permanent-access-4d92829ed816?source=rss----7b722bfd1b8d---4\",\n \"How I was able to delete a production backend server in my first finding.\": \"https://infosecwriteups.com/how-i-was-able-to-delete-a-production-backend-server-in-my-first-finding-5dcce8aa093c?source=rss----7b722bfd1b8d---4\",\n \"Business logic: I can order anything from your account without paying for it\": \"https://infosecwriteups.com/business-logic-i-can-order-anything-from-your-account-without-paying-for-it-86ef070e01dd?source=rss----7b722bfd1b8d---4\",\n \"OSINT Writeups — MIST Cyber Drill 2025\": \"https://infosecwriteups.com/osint-writeups-mist-cyber-drill-2025-2d1e398a4672?source=rss----7b722bfd1b8d---4\"\n },\n \"Doonsec's feed\": {\n \"【培训】第十四期开源情报能力培训班5月底成都开班\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651149958&idx=1&sn=e49a3bf30e49d95b6fc3de72aa9b14dd\",\n \"【通知】四川警察学院2025年公开招聘博士等高层次人才的公告\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651149958&idx=2&sn=83e7ef05632171c2c51ecae1e95bf8b6\",\n \"手机搭建ipv6代理服务器实现远程访问家庭设备\": \"https://mp.weixin.qq.com/s?__biz=Mzg3NDk1MDczOQ==&mid=2247485094&idx=1&sn=f8a94ef3442a366690b5cf903554d774\",\n \"7-Zip电子取证版丨支持打开E01 L01 AFF，还能计算源盘哈希！\": \"https://mp.weixin.qq.com/s?__biz=MzI2MTUwNjI4Mw==&mid=2247489508&idx=1&sn=09dfe7343ad5cf0385ff4099751cd1e8\",\n \"【逆向百例】02小程序逆向之webview调试动态KEY加密加签\": \"https://mp.weixin.qq.com/s?__biz=MzkyNjY3OTI4Ng==&mid=2247484838&idx=1&sn=3eed2a53e3e6bf23e1fbd5b287b8536b\",\n \"顺景ERP UploadInvtSpFile接口存在任意文件上传漏洞 附POC\": \"https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488457&idx=1&sn=ff9daf871fef4edcfdb100b4990e66ea\",\n \"答疑 | edge浏览器查看浏览器Cookie\": \"https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488100&idx=1&sn=40e7139e1b2c112b4d921b1d277c3139\",\n \"程序员Commit消息写到头秃？这款插件让你的Git提交信息不再像\\\\\\\"祖传代码\\\\\\\"一样难懂！\": \"https://mp.weixin.qq.com/s?__biz=MzkyMzY0MTk2OA==&mid=2247485892&idx=1&sn=69645a838a99970da1692a4874fe25be\",\n \"手搓一款敏感数据采集工具\": \"https://mp.weixin.qq.com/s?__biz=MzU2MjY2NTg3Mg==&mid=2247486061&idx=1&sn=3d1d54fd8523f909082247fd41c8c04b\",\n \"Athens Go模块代理服务\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NTk4MDk2OQ==&mid=2247484697&idx=1&sn=0102e418f63a35841606b468d5671b41\",\n \"如何通过Shell脚本分析你的“历史命令”？揭秘最常用的终端操作！\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTc5MjM4Nw==&mid=2457388897&idx=1&sn=c04ef53f27a87182e595e463b55d76e9\",\n \"CNVD-2024-22977 金和C6协同管理平台文件上传漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486540&idx=1&sn=eb91ae30cb0ff0124a21f0cc4971d6ae\",\n \"国家中小学智慧教育平台与人工智能融合应用指南；政企行业智能体研究报告\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655278601&idx=1&sn=c82d6e2b8b40c2f877adecf5eb4bcfdb\",\n \"记二次帮学员拿下edu证书站\": \"https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247493399&idx=1&sn=425e84fa877f789598a2e8afdf8320c6\",\n \"一家小VC眼中的：AI投资指北\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485818&idx=1&sn=fc6f941cdac5c6bf99cf9d3cd2537b84\",\n \"【干货原创】实网攻防演习常态化，会带来什么变化01\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485818&idx=2&sn=658474698a5a73117b1dab3870547627\",\n \"【干货】笑傲职场的独家经验（1）\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485818&idx=3&sn=95a51789b9378931c50fb06836a6ddb0\",\n \"【干货原创】K12教育，鲜为人知的模式秘密\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485818&idx=4&sn=c582e8cc84c4e9559a7c90ca1a5eb8cb\",\n \"原创文章目录\": \"https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485818&idx=5&sn=89da76a7628bf01633b1c1bb61a99e4f\",\n \"倒计时2天 | “CMAS多智能体协同决策平台”邀您现场体验\": \"https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660191397&idx=1&sn=1bbae41a681b6948d678a4cadae732b7\",\n \"【海外SRC实战】一个支付逻辑漏洞，怒赚 $9000 赏金\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519305&idx=1&sn=191abe19580685bafe70e3ddb0f2ec74\",\n \"一名合格红队的成长之路\": \"https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519305&idx=2&sn=88480ec38689934dc73b52b336defd21\",\n \"[ 高级黑客 ] 网络设备原理：交换机、路由器、网络 （2）\": \"https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247491109&idx=1&sn=541ac30533a4f7dbb261e9bf52ed7865\",\n \"Telegram迫于国际压力果断将“汇旺、新币”巨头等“好旺”担保平台清除平台\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzIyODg2OQ==&mid=2247484604&idx=1&sn=302ef442aec09604387c97df69de1df4\",\n \"2025Hvv招聘-欢迎各位师傅！\": \"https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486942&idx=1&sn=35f399b748631783d62dd1fade74b852\",\n \"猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭！\": \"https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486942&idx=2&sn=368c1989a347f75796a39d41037b6173\",\n \"退款狗 \\\\\\\"Sanqian\\\\\\\" 有多远死多远!\": \"https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489759&idx=1&sn=273522641302a4290688078fa9dd584d\",\n \"基于Memprocfs和Volatility的可视化内存取证工具 - LovelyMem\": \"https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486341&idx=1&sn=59fd3dc14bee6085ac4c4af9b0ccdc72\",\n \"Java安全-RASP基础讲解&代码Demo\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491036&idx=1&sn=4584caa1b3f8628585f532cc9b6a2ef2\",\n \"客户端漏洞在红蓝对抗中的挖掘与利用\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727845102&idx=1&sn=450421e645d6b694ead1dc90d9a14d79\",\n \"一次渗透从统一登录到全站用户接管\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491036&idx=3&sn=1ff4a927514601f7a78ff2a67bf24ad7\",\n \"大模型安全攻防\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491036&idx=4&sn=c6dc2e6b10d97e409e6288e160d3055e\",\n \"LLM学习笔记：最好的学习方法是带着问题去寻找答案\": \"https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491036&idx=5&sn=8900a8c4917a491dcc96237466260284\",\n \"MSF（3）免杀混淆\": \"https://mp.weixin.qq.com/s?__biz=Mzk1NzI5NzA3NQ==&mid=2247486788&idx=1&sn=0f619596a2e6f4197bee7ca066657459\",\n \"C2流量隐藏-云函数\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MzYyMjEzMQ==&mid=2247487581&idx=1&sn=9e515bb4602fb8060be4197766d775db\",\n \"AI重构网络安全防线：RSA 2025上厂商展示的AI安全产品\": \"https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247547770&idx=1&sn=d498a98da85b6b6571335068be86e713\",\n \"《大白哥红队攻防课4期》\": \"https://mp.weixin.qq.com/s?__biz=MzkxNDYxMTc0Mg==&mid=2247484353&idx=1&sn=b8cdc2ce0423fb2222902d2d80bc1d74\",\n \"【成功复现】Elestio Memos服务器端请求伪造漏洞(CVE-2025-22952)【SSRF】\": \"https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503247&idx=1&sn=f725ae48a660d6d5f43b8dee2657652b\",\n \"新闻联播｜全国政协召开“以科技创新引领新质生产力发展”专题协商会 齐向东参会并发言\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626822&idx=1&sn=6dcbcd03e5c76db16223e05b668c2161\",\n \"北投集团与奇安信集团举行工作座谈\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626822&idx=2&sn=31f204645cf24d490433cf0edc12a89a\",\n \"奇安信邀您共赴第12届中国国际警用装备博览会\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626822&idx=3&sn=202a6ec486bd686adbd62f54570e3aca\",\n \"你收到了迪奥的短信吗？记者致电官方客服：中国客户信息遭泄漏 ——\": \"https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626822&idx=4&sn=f2cf3b7aa2809af543089fba8a4755ff\",\n \"英伟达CEO黄仁勋：AI的下一波浪潮是物理AI\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932121&idx=1&sn=d5ad0c9104db51ac51413b221e71dcf7\",\n \"AI快讯：字节跳动迭代多模态大模型，Manus开放注册，“AI工程师”落地生物制造业\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932121&idx=2&sn=206781301a1f2432ea83a434f809e4be\",\n \"100万！可行性研究报告AI系统建设服务项目\": \"https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932121&idx=3&sn=86d7412d3d5698f8cfefc6f84647b513\",\n \"伪装韩国国家安全战略智库的APT37攻击案例分析（Operation.ToyBox Story）\": \"https://mp.weixin.qq.com/s?__biz=Mzg5OTQzNTI4Nw==&mid=2247488974&idx=1&sn=8844143b5fff1daa30c9744c69d91289\",\n \"5月15日-17日丨盛邦安全与您相约第十届中国(北京)军博会暨北京国际低空产业博览会\": \"https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650278256&idx=1&sn=d79082d2486d4302224f3795f4244381\",\n \"爱奇艺回应违法收集使用个人信息：正与合作方一道认真核查，积极整改\": \"https://mp.weixin.qq.com/s?__biz=Mzg4NzQ4MzA4Ng==&mid=2247485795&idx=1&sn=e0a192d95e52101a306b07cad1d3a30c\",\n \"【吃瓜】想问下360这个20万的数据的结论从哪里得来的🤔\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498858&idx=1&sn=99b4b61322ffc85d85348bb0dde4aa8f\",\n \"因未按规定履行网络安全保护义务等，这家银行被罚\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096228&idx=1&sn=3cb6db45d6fbd677617e6533c07025ee\",\n \"VMware Tools 存在允许攻击者篡改文件以触发恶意作漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096228&idx=2&sn=d8e4dbd652645003ab441e031634eb89\",\n \"SQL注入 | 当你细节一点，你就会发现看似没有SQL注入的地方，它其实是有注入的\": \"https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491099&idx=1&sn=217204413c3cd8f679c9032711b942a4\",\n \"【1day】⼤华智慧园区综合管理平台⽂件上传(CNVD2024-35311)\": \"https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484574&idx=1&sn=9b5357394109be2207eae4f312292bb0\",\n \"标准解读 |《电信网和互联网数据库审计技术要求与测试方法》\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247508063&idx=1&sn=1ea17c8fe156965d1de549c078bbb06b\",\n \"热点|奢侈品巨头“迪奥”20万中国用户信息泄露，数据安全再拉警报！\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580499&idx=1&sn=766c77bff08c482e93c487b2bbae7b11\",\n \"5月风向标：2025工业互联网大会锁定苏州\": \"https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247593381&idx=1&sn=bf55ae2700af7f90c9724b8e1f61e54e\",\n \"13.75亿美元“和解案”创造历史，科技巨头的数据隐私困局\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518398&idx=1&sn=3457e4af8522b7e32aebdb2eba6ef051\",\n \"快自查！这65款移动应用被通报了\": \"https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518398&idx=2&sn=c98c85ae8e519419a9ad37d67c32a18d\",\n \"行业首创！快手开源短视频内容质量评测标准KuaiMod！\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NzU4MDM0MQ==&mid=2247496263&idx=1&sn=d6f7094da1334c941eec65f59822431b\",\n \"【安全圈】迪奥中国确认客户数据泄露事件 官方启动紧急响应机制\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=1&sn=17b1668a50455b656fe87b62a9236a3e\",\n \"【安全圈】黑客组织Anonymous入侵美国遣返航班承包商GlobalX 敏感飞行数据遭泄露\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=2&sn=5420da5c652479f74b871302e863d963\",\n \"【安全圈】Firefox 源代码现已托管在 GitHub 上\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=3&sn=07261f07deabe7076ca81e9b6d8b79d6\",\n \"【安全圈】华硕DriverHub漏洞致高危攻击：恶意网站可获取管理员权限\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=4&sn=2cdeb6fe56f376c6209155e17e0eaa4d\",\n \"C3安全大会荣膺“2025中国上市公司经典品牌案例”\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650622901&idx=1&sn=3c5e98bd28c9b5cc9a50f292b0e0417f\",\n \"新时代的中国国家安全白皮书｜新时代的中国国家安全\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499893&idx=1&sn=30ecd4f3a1e4d4f52d482f63b85ccf3a\",\n \"创新标杆|虎符网络“数据加工可信空间”入选2025中国数谷·西湖论剑大会创新实践案例并做现场分享\": \"https://mp.weixin.qq.com/s?__biz=MzUxODY3MDExMA==&mid=2247490258&idx=1&sn=fd30a98629d880b7fade4ee23554fa15\",\n \"新华社：《新时代的中国国家安全》\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115710&idx=1&sn=8d22073ec2b051cb42adf38394326a44\",\n \"创新标杆|虎符网络“数据加工可信空间”入选2025中国数谷·西湖论剑大会创新实践案例\": \"https://mp.weixin.qq.com/s?__biz=MzUxODY3MDExMA==&mid=2247490255&idx=1&sn=bad68ed047045488321b5ae0aeb1ff25\",\n \"非域环境的身份突破\": \"https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484450&idx=1&sn=5d4fd9630d101e88af79091de39fc67a\",\n \"太强悍！12款适合网工的杀手级工具！\": \"https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247517108&idx=1&sn=299d9f592551867f8afe1dd61e20b9c4\",\n \"2025全景图权威发布｜梆梆安全连续十二次蝉联榜单，引领移动安全、车联网安全、数据安全等关键领域\": \"https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135709&idx=1&sn=7d4f5117d2537ae27cd758e2b53cccbc\",\n \"护网奇谈： 红队工程师手记\": \"https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247494216&idx=1&sn=246e50eac09f4cdb766d5a8f99f1ba89\",\n \"华硕修复严重的DriverHub 漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522987&idx=1&sn=dd6c1684116b2d65b1efe7c80afe5945\",\n \"苹果修复iOS、macOS 平台上的多个严重漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522987&idx=2&sn=3a436a07ce8ab28ad783d9d8705ed72a\",\n \"黑客手段更新：新型ClickFix攻击技术同时针对Windows和Linux系统\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320691&idx=1&sn=c8cf80f5dd03b98a66f72fb75c9e551f\",\n \"华硕DriverHub漏洞允许恶意网站以管理员权限执行命令\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320691&idx=2&sn=de7f2bb1bb8623716a3d0a8af49cf360\",\n \"macOS远程视图服务沙箱逃逸漏洞PoC公开，攻击者可突破系统限制\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320691&idx=3&sn=68ed4c2a830801d5a9cee49cec544119\",\n \"GNU Screen 多漏洞曝光，本地提权与终端劫持风险浮现\": \"https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320691&idx=4&sn=e480396e735465420fa34b4a20378a10\",\n \"【勒索防护】Mallox新变种再度来袭，正利用产品漏洞对国内企业实施攻击\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524436&idx=1&sn=e5b469efdad9cfdb0cad7a69c8e92dd7\",\n \"【漏洞通告】F5 BIG-IP Appliance 模式命令执行漏洞(CVE-2025-31644)\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524436&idx=2&sn=7349fe15ed6d5371de2ad7c1fba70c08\",\n \"网络安全信息与动态周报2025年第19期（5月5日-5月11日）\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524436&idx=3&sn=d84f141467ff6d5366c5f8dd1eba77f8\",\n \"车机Android系统安全漏洞深入浅出\": \"https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484298&idx=1&sn=cee5e4998f84342eb302370bbdd76d61\",\n \"【限时免费】地狱级挑战「Honeypot」企业级靶场上线！首个“非常困难”评级靶机，敢来应战吗？\": \"https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523679&idx=1&sn=e53690ca8a44948c51ee85b26d13c711\",\n \"客户泄露用户数据，软件供应商赔偿超1.4亿元\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514339&idx=1&sn=ff06a5dae1a3d0bd095b2a2c6e9b2664\",\n \"中国客户信息外泄，这家公司主动通知客户\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514339&idx=2&sn=da04fb39296c858b274bf37c5cc66615\",\n \"中国黑客风云录—日本媒体记录中国黑客\": \"https://mp.weixin.qq.com/s?__biz=MzU1NjgzOTAyMg==&mid=2247523778&idx=1&sn=9be0c63067dfb004fcd9e56074092ada\",\n \"6月相约上海，共探商用密码创新蓝海，诚邀您拨冗参会\": \"https://mp.weixin.qq.com/s?__biz=MzU1NjgzOTAyMg==&mid=2247523778&idx=2&sn=47b4e609a5835a7ceeb4a5916db020dc\",\n \"展会邀约 | 丈八网安诚邀您共赴北京军博会！\": \"https://mp.weixin.qq.com/s?__biz=MzkwNzI1NDk0MQ==&mid=2247492835&idx=1&sn=9168ef060e5f90b334573b0a35c19102\",\n \"“防御加密攻击，构筑重要防线”——观成科技荣膺2024年度中国电子学会科学技术进步一等奖\": \"https://mp.weixin.qq.com/s?__biz=MzU2Mjg1NjY4Nw==&mid=2247490561&idx=1&sn=8de73480ce1e9de8e83f17e12aa8b744\"\n },\n \"一个被知识诅咒的人\": {\n \"【人工智能】DeepSeek探秘：解锁超智能AI引擎的奥秘\": \"https://blog.csdn.net/nokiaguy/article/details/147921718\",\n \"【人工智能】AI革命揭秘：大模型开发中的关键突破\": \"https://blog.csdn.net/nokiaguy/article/details/147921565\"\n },\n \"Cerbero Blog\": {\n \"Disk Format Package\": \"https://blog.cerbero.io/disk-format-package/\"\n },\n \"嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\": {\n \"新型 “自带安装程序” EDR 旁路技术被用于勒索软件攻击\": \"https://www.4hou.com/posts/2XN1\",\n \"智能创新 加速前行 | Fortinet发布2025年第一季度财报\": \"https://www.4hou.com/posts/vwv0\",\n \"喜报！CACTER连续十二次入选《中国网络安全行业全景图》\": \"https://www.4hou.com/posts/qon0\",\n \"XCon2025议题启征||未来·皆有AI\": \"https://www.4hou.com/posts/rpo4\"\n },\n \"GuidePoint Security\": {\n \"Bridging the Gap: How a Controls-Focused Cybersecurity Program Aligns SEC Rules with Daily Operations\": \"https://www.guidepointsecurity.com/blog/bridging-the-gap/\"\n },\n \"Sandfly Security Blog RSS Feed\": {\n \"Eliminating Linux Security Blind Spots: Insights from the CISO Series Podcast\": \"https://sandflysecurity.com/blog/insights-from-the-ciso-series-podcast/\"\n },\n \"blog.avast.com EN\": {\n \"How to safely change your name without putting your identity at risk\": \"https://blog.avast.com/how-to-safely-change-your-name\"\n },\n \"VMRay\": {\n \"Malware Detection Techniques: The Complete Guide\": \"https://www.vmray.com/malware-detection-techniques-the-complete-guide/\"\n },\n \"Reverse Engineering\": {\n \"Mario Kart 64 Has Been Decompiled\": \"https://www.reddit.com/r/ReverseEngineering/comments/1klxduc/mario_kart_64_has_been_decompiled/\",\n \"Branch Privilege Injection: Exploiting Branch Predictor Race Conditions\": \"https://www.reddit.com/r/ReverseEngineering/comments/1klwxrc/branch_privilege_injection_exploiting_branch/\",\n \"Multiple Security Issues in Screen\": \"https://www.reddit.com/r/ReverseEngineering/comments/1klk1dq/multiple_security_issues_in_screen/\"\n },\n \"Bug Bounty in InfoSec Write-ups on Medium\": {\n \"$256 Bounty : XSS via Web Cache Poisoning in Discourse\": \"https://infosecwriteups.com/256-bounty-xss-via-web-cache-poisoning-in-discourse-594d5961555e?source=rss----7b722bfd1b8d--bug_bounty\",\n \"The $1,000 Recon Trick: One Command That Changed My Hunting Game\": \"https://infosecwriteups.com/the-1-000-recon-trick-one-command-that-changed-my-hunting-game-58527a7f6d7c?source=rss----7b722bfd1b8d--bug_bounty\",\n \"The Human Firewall: Why Your Employees Are Both Your Greatest Vulnerability and Asset\": \"https://infosecwriteups.com/the-human-firewall-why-your-employees-are-both-your-greatest-vulnerability-and-asset-76a93b879bae?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Logic Flaw: Using Invitation Function to Block Other Accounts\": \"https://infosecwriteups.com/logic-flaw-turning-an-invitation-function-into-a-revenue-blocker-b4523dc46dde?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Bug Chain: pre-auth takeover to permanent access.\": \"https://infosecwriteups.com/bug-chain-pre-auth-takeover-to-permanent-access-4d92829ed816?source=rss----7b722bfd1b8d--bug_bounty\",\n \"How I was able to delete a production backend server in my first finding.\": \"https://infosecwriteups.com/how-i-was-able-to-delete-a-production-backend-server-in-my-first-finding-5dcce8aa093c?source=rss----7b722bfd1b8d--bug_bounty\",\n \"Business logic: I can order anything from your account without paying for it\": \"https://infosecwriteups.com/business-logic-i-can-order-anything-from-your-account-without-paying-for-it-86ef070e01dd?source=rss----7b722bfd1b8d--bug_bounty\",\n \"OSINT Writeups — MIST Cyber Drill 2025\": \"https://infosecwriteups.com/osint-writeups-mist-cyber-drill-2025-2d1e398a4672?source=rss----7b722bfd1b8d--bug_bounty\",\n \"How Hackers Bypass Login Pages with SQL, Logic Flaws, and Headers\": \"https://infosecwriteups.com/how-hackers-bypass-login-pages-with-sql-logic-flaws-and-headers-567a5649e701?source=rss----7b722bfd1b8d--bug_bounty\",\n \"SameSite? SameMess: How I Bypassed Cookie Protections to Hijack Sessions ️‍♂️\": \"https://infosecwriteups.com/samesite-samemess-how-i-bypassed-cookie-protections-to-hijack-sessions-%EF%B8%8F-%EF%B8%8F-20520f4be7ec?source=rss----7b722bfd1b8d--bug_bounty\"\n },\n \"Securelist\": {\n \"Using a Mythic agent to optimize penetration testing\": \"https://securelist.com/agent-for-mythic-c2-with-beacon-object-files/115259/\"\n },\n \"Exploit-DB.com RSS Feed\": {\n \"[local] TP-Link VN020 F3v(T) TT_V6.2.1021) - DHCP Stack Buffer Overflow\": \"https://www.exploit-db.com/exploits/52292\",\n \"[webapps] WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation\": \"https://www.exploit-db.com/exploits/52291\",\n \"[webapps] Kentico Xperience 13.0.178 - Cross Site Scripting (XSS)\": \"https://www.exploit-db.com/exploits/52290\",\n \"[local] RDPGuard 9.9.9 - Privilege Escalation\": \"https://www.exploit-db.com/exploits/52289\"\n },\n \"daniel.haxx.se\": {\n \"1k-0036 means sad eyeballs on my LG\": \"https://daniel.haxx.se/blog/2025/05/13/1k-0036-means-sad-eyeballs-on-my-lg/\"\n },\n \"绿盟科技技术博客\": {\n \"WEB前端逆向在nodejs环境中复用webpack代码\": \"https://blog.nsfocus.net/nodejs/\"\n },\n \"Checkmarx\": {\n \"Always Ready to Run: How CISOs Can Finally Get Ahead of Application Risk\": \"https://checkmarx.com/blog/how-cisos-can-finally-get-ahead-of-application-risk/\",\n \"The Fast and the Frictionless: Tuning AppSec to Boost Your DORA Metrics\": \"https://checkmarx.com/blog/tuning-appsec-to-boost-your-dora-metrics/\"\n },\n \"Shostack & Friends Blog\": {\n \"Andor: Think like a leader\": \"https://shostack.org/blog/think-like-a-leader/\"\n },\n \"奇客Solidot–传递最新科技情报\": {\n \"微软裁员 3%\": \"https://www.solidot.org/story?sid=81284\",\n \"Telegram 封禁被指洗钱高达 84 亿美元的新币担保\": \"https://www.solidot.org/story?sid=81283\",\n \"粘性天然聚合物能清除水中的大多数微塑料\": \"https://www.solidot.org/story?sid=81282\",\n \"Google 测试用 AI Mode 取代 I’m Feeling Lucky 按钮\": \"https://www.solidot.org/story?sid=81281\",\n \"西部数据投资声称能将数据保存 5000 年的德国公司\": \"https://www.solidot.org/story?sid=81280\",\n \"气候危机威胁香蕉\": \"https://www.solidot.org/story?sid=81279\",\n \"Firefox 源代码迁移到 GitHub\": \"https://www.solidot.org/story?sid=81278\",\n \"猫为什么比狗长寿？\": \"https://www.solidot.org/story?sid=81277\",\n \"日产计划裁员两万人\": \"https://www.solidot.org/story?sid=81276\",\n \"英伟达据报上调 GPU MSRP 5-15%\": \"https://www.solidot.org/story?sid=81275\",\n \"木星极光的规模和亮度远超地球\": \"https://www.solidot.org/story?sid=81274\",\n \"6月11日Showcase 2025 北京-火山引擎专场，热招中\": \"https://www.solidot.org/story?sid=81272\"\n },\n \"黑海洋 - Wiki\": {\n \"币圈修罗场生存手册之魔鬼滚仓术\": \"https://blog.upx8.com/4803\"\n },\n \"威努特安全网络\": {\n \"赛迪顾问发布交换机研究报告，威努特获优质厂商推荐\": \"http://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651132970&idx=1&sn=23d84eb98e480fa2a04ed53f757c8c6a\"\n },\n \"安全分析与研究\": {\n \"疑似银狐最新测试样本分析\": \"https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491951&idx=1&sn=fb499075f2f73a3fec4fcf640377de54&subscene=0\"\n },\n \"网安志异\": {\n \"介绍《Not with a Bug, But with a Sticker》\": \"https://mp.weixin.qq.com/s?__biz=MzAxNzYyNzMyNg==&mid=2664232651&idx=1&sn=8cc66016644bb8a9776f16d4dd22b41c&subscene=0\"\n },\n \"看雪学苑\": {\n \"16小时深度攻破！逆向大牛带你深入混淆技术与 Angr 符号执行实战\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593895&idx=1&sn=f498d98442a44bb31a10eface4b44315&subscene=0\",\n \"plaidctf 2025 sheriff_says 题解\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593895&idx=2&sn=e0fd0d7f2c1f8d1c942a0e90f87e459b&subscene=0\",\n \"天网恢恢！荷兰科研机构遭勒索4.5亿，国际黑客终落网\": \"https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593895&idx=3&sn=1f82b14ef1b2e75fa79301b94a00e56c&subscene=0\"\n },\n \"安全内参\": {\n \"客户泄露用户数据，软件供应商赔偿超1.4亿元\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514339&idx=1&sn=ff06a5dae1a3d0bd095b2a2c6e9b2664&subscene=0\",\n \"中国客户信息外泄，这家公司主动通知客户\": \"https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514339&idx=2&sn=da04fb39296c858b274bf37c5cc66615&subscene=0\"\n },\n \"HackerNews\": {\n \"华硕 DriverHub 漏洞致用户面临远程代码执行攻击​风险\": \"https://hackernews.cc/archives/58711\",\n \"​​黑客正测试针对 Linux 系统的 ClickFix 攻击​\": \"https://hackernews.cc/archives/58709\",\n \"新报告显示：多数浏览器扩展存在严重的安全风险\": \"https://hackernews.cc/archives/58705\"\n },\n \"数世咨询\": {\n \"最关键的8项网络安全运营指标\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538743&idx=1&sn=64376f0dcad54f4ea7d5df015ff9812e&subscene=0\",\n \"RSAC 2025创新沙盒 | Metalware：专注嵌入式系统固件安全\": \"https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538743&idx=2&sn=b518e32c26bae6554dc718e237887eae&subscene=0\"\n },\n \"中国信息安全\": {\n \"发布 | 中央网信办等四部门印发《2025年数字乡村发展工作要点》（附全文）\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242475&idx=1&sn=c4deaccf1a79b8058b9c8f21307aae72&subscene=0\",\n \"专家解读 | 郭雳：以高质量网络法治保障网络强国建设\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242475&idx=2&sn=1d115d4ca61989c86a42afdcf2787dbe&subscene=0\",\n \"观点 | 确保人工智能安全、可靠、可控\": \"https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242475&idx=3&sn=9313faa104550e8ebec27399fe356081&subscene=0\"\n },\n \"dotNet安全矩阵\": {\n \"红队实战技巧，通过 .NET 控制系统服务无痕关闭 Windows Defender\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499654&idx=1&sn=132868f697338831da421e03355b04e9&subscene=0\",\n \"福利 | 最专业、最全面的 [ .NET 代码审计 ] 体系化学习平台\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499654&idx=2&sn=681845e4345e2ed413a70189d853c904&subscene=0\",\n \"免杀 WebShell，通过 Sharp4AppdShell.aspx 绕过服务端 WAF 的监测和拦截\": \"https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499654&idx=3&sn=d6bfd26bbb6d124d442ead2996123429&subscene=0\"\n },\n \"极客公园\": {\n \"营收每年翻倍，用户突破 100 万，这可能是最被低估的「AI硬件」\": \"http://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653079157&idx=1&sn=bf3a989931c963346e1731acc6495aaa\",\n \"上线 10 天卖 2000 万美元，跻身历史第一，它正在创造一个「新赛道」\": \"http://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653079140&idx=1&sn=7384557ca9e64bfb9bdb31a2af812b5d\",\n \"中美达成协议，90 天内关税暂停；Manus 面向所有用户免费开放；传苹果考虑提高 iPhone17 售价 | 极客早知道\": \"http://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653079115&idx=1&sn=20864e91dbde64cb1e0933d83600f4bb\"\n },\n \"专注安管平台\": {\n \"以自动化优先和实战化为设计理念的新一代安全运营平台\": \"https://mp.weixin.qq.com/s?__biz=MzUyNzMxOTAwMw==&mid=2247484862&idx=1&sn=e0006eb7f308c8cb628d462601b8dc0a&subscene=0\"\n },\n \"微步在线\": {\n \"装了EDR，被领导质疑不会用…\": \"https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183783&idx=1&sn=c607f705c1a9a4023483065d5a41c387&subscene=0\"\n },\n \"安全学术圈\": {\n \"欧洲通信学院 | BLUFFS：蓝牙前向与未来保密攻击及防御\": \"https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247492159&idx=1&sn=75d1a6e9429ac80a586bd579ddf19e12&subscene=0\"\n },\n \"代码卫士\": {\n \"华硕修复严重的DriverHub 漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522987&idx=1&sn=dd6c1684116b2d65b1efe7c80afe5945&subscene=0\",\n \"苹果修复iOS、macOS 平台上的多个严重漏洞\": \"https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522987&idx=2&sn=3a436a07ce8ab28ad783d9d8705ed72a&subscene=0\"\n },\n \"中通安全应急响应中心\": {\n \"【中通SRC助力】免费使用｜最新企业级VPN组网，私有部署的Tailscale平替，真香！\": \"https://mp.weixin.qq.com/s?__biz=MzUyMTcwNTY3Mg==&mid=2247486327&idx=1&sn=c4537b72c98764c14414125351b93627&subscene=0\"\n },\n \"安全牛\": {\n \"发现网络攻击后立即关闭系统？错！\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136811&idx=1&sn=70eda56a639e30bbe283196dd5738fe2&subscene=0\",\n \"Google因生物识别数据侵权支付创纪录13.75亿美元和解金；华硕驱动管理工具安全漏洞允许恶意网站悄然执行管理员级命令 |牛览\": \"https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136811&idx=2&sn=c04c6f207bc50001a9e2c8ec9bd15d46&subscene=0\"\n },\n \"字节跳动安全中心\": {\n \"头条专测｜双倍积分，高危严重单价4-10万元\": \"https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494707&idx=1&sn=be0e1cb64fa99b27ad35e4b0a61030a3&subscene=0\"\n },\n \"京东安全应急响应中心\": {\n \"客户端漏洞在红蓝对抗中的挖掘与利用\": \"https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727845102&idx=1&sn=450421e645d6b694ead1dc90d9a14d79&subscene=0\"\n },\n \"安全圈\": {\n \"【安全圈】迪奥中国确认客户数据泄露事件 官方启动紧急响应机制\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=1&sn=17b1668a50455b656fe87b62a9236a3e&subscene=0\",\n \"【安全圈】黑客组织Anonymous入侵美国遣返航班承包商GlobalX 敏感飞行数据遭泄露\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=2&sn=5420da5c652479f74b871302e863d963&subscene=0\",\n \"【安全圈】Firefox 源代码现已托管在 GitHub 上\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=3&sn=07261f07deabe7076ca81e9b6d8b79d6&subscene=0\",\n \"【安全圈】华硕DriverHub漏洞致高危攻击：恶意网站可获取管理员权限\": \"https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=4&sn=2cdeb6fe56f376c6209155e17e0eaa4d&subscene=0\"\n },\n \"山石网科安全技术研究院\": {\n \"高危漏洞预警：Apache Tomcat远程代码执行漏洞曝光！\": \"https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512193&idx=1&sn=24be890704a835d114a01064777a9e90&subscene=0\"\n },\n \"RedTeam\": {\n \"非域环境的身份突破\": \"http://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484450&idx=1&sn=5d4fd9630d101e88af79091de39fc67a\"\n },\n \"嘶吼专业版\": {\n \"XCon2025议题启征||未来·皆有AI\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582313&idx=1&sn=59653f87bb8387a71d86b2d85723d9da&subscene=0\",\n \"新型 “自带安装程序” EDR 旁路技术被用于勒索软件攻击\": \"https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582313&idx=2&sn=d0b610a572cf2b43215a69ec91d09540&subscene=0\"\n },\n \"Arturo Di Corinto\": {\n \"Sovranità digitale. Cos’è e quali sono le principali minacce al cyberspazio nazionale.\": \"https://dicorinto.it/articoli/recensioni/sovranita-digitale-cose-e-quali-sono-le-principali-minacce-al-cyberspazio-nazionale/\"\n },\n \"Securityinfo.it\": {\n \"Ransomware che infettano la CPU: una nuova, potenziale minaccia\": \"https://www.securityinfo.it/2025/05/13/ransomware-che-infettano-la-cpu-una-nuova-potenziale-minaccia/?utm_source=rss&utm_medium=rss&utm_campaign=ransomware-che-infettano-la-cpu-una-nuova-potenziale-minaccia\"\n },\n \"ICT Security Magazine\": {\n \"Cyber Defense in Depth: un approccio stratificato alla Sicurezza Digitale\": \"https://www.ictsecuritymagazine.com/articoli/cyber-defense-in-depth/\"\n },\n \"迪哥讲事\": {\n \"沈阳深蓝25HW二轮招录启动！\": \"http://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497588&idx=1&sn=5ab68ba3e283089b0505762fb34d4c86\"\n },\n \"Over Security - Cybersecurity news aggregator\": {\n \"May 2025 Phishing Surge: Stealth MFA-Bypass Attacks Target Microsoft & Webmail Users\": \"https://pixmsecurity.com/blog/blog/may-2025-phishing-surge-stealth-mfa-bypass-attacks-target-microsoft-and-webmail-users/\",\n \"SAP patches second zero-day flaw exploited in recent attacks\": \"https://www.bleepingcomputer.com/news/security/sap-patches-second-zero-day-flaw-exploited-in-recent-attacks/\",\n \"Microsoft Patch Tuesday for May 2025 — Snort rules and prominent vulnerabilities\": \"https://blog.talosintelligence.com/microsoft-patch-tuesday-for-may-2025-snort-rules-and-prominent-vulnerabilities/\",\n \"Why a Cyber Incident Is a Threat to Your Business Expansion\": \"https://bfore.ai/why-a-cyber-incident-is-a-threat-to-your-business-expansion/\",\n \"Seven things we learned from WhatsApp vs. NSO Group spyware lawsuit\": \"https://techcrunch.com/2025/05/13/seven-things-we-learned-from-whatsapp-vs-nso-group-spyware-lawsuit/\",\n \"North Korea ramps up cyberspying in Ukraine to assess war risk\": \"https://www.bleepingcomputer.com/news/security/north-korea-ramps-up-cyberspying-in-ukraine-to-assess-war-risk/\",\n \"Twilio denies breach following leak of alleged Steam 2FA codes\": \"https://www.bleepingcomputer.com/news/security/twilio-denies-breach-following-leak-of-alleged-steam-2fa-codes/\",\n \"Ivanti fixes EPMM zero-days chained in code execution attacks\": \"https://www.bleepingcomputer.com/news/security/ivanti-fixes-epmm-zero-days-chained-in-code-execution-attacks/\",\n \"Microsoft May 2025 Patch Tuesday fixes 5 exploited zero-days, 72 flaws\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-may-2025-patch-tuesday-fixes-5-exploited-zero-days-72-flaws/\",\n \"US extradites Kosovo national charged in operating illegal online marketplace\": \"https://therecord.media/us-extradites-kosovo-national-online-marketplace\",\n \"Windows 11 KB5058411 and KB5058405 cumulative updates released\": \"https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5058411-and-kb5058405-cumulative-updates-released/\",\n \"Chinese-speaking hackers disrupt drone supply chains in Taiwan, researchers say\": \"https://therecord.media/chinese-hackers-target-taiwan-military-sector\",\n \"Windows 10 KB5058379 update fixes SgrmBroker errors in Event Viewer\": \"https://www.bleepingcomputer.com/news/microsoft/windows-10-kb5058379-update-fixes-sgrmbroker-errors-in-event-viewer/\",\n \"Android 16 expands 'Advanced Protection' with device-level security\": \"https://www.bleepingcomputer.com/news/security/android-16-expands-advanced-protection-with-device-level-security/\",\n \"Fortinet fixes critical zero-day exploited in FortiVoice attacks\": \"https://www.bleepingcomputer.com/news/security/fortinet-fixes-critical-zero-day-exploited-in-fortivoice-attacks/\",\n \"Vulnerabilità dei data center di AI: anche Stargate a rischio di spionaggio cinese\": \"https://www.cybersecurity360.it/nuove-minacce/vulnerabilita-dei-data-center-di-ai-anche-stargate-a-rischio-di-spionaggio-cinese/\",\n \"Cisco, l’Italia è troppo frammentata e sottovaluta l’impatto cyber dell’AI: ecco cosa serve\": \"https://www.cybersecurity360.it/news/cisco-cybersecurity-readiness-index-2025-italia-arretrata/\",\n \"South Korean researchers uncover another cyber-espionage campaign from the North\": \"https://therecord.media/apt37-scarcruft-cyber-espionage-campaign-south-korea\",\n \"Ivanti warns of critical Neurons for ITSM auth bypass flaw\": \"https://www.bleepingcomputer.com/news/security/ivanti-warns-of-critical-neurons-for-itsm-auth-bypass-flaw/\",\n \"EU launches vulnerability database to tackle cybersecurity threats\": \"https://therecord.media/eu-launches-vulnerability-database\",\n \"New Intel CPU flaws leak sensitive data from privileged memory\": \"https://www.bleepingcomputer.com/news/security/new-intel-cpu-flaws-leak-sensitive-data-from-privileged-memory/\",\n \"Le cyber gang più pericolose del 2025: tecniche e tattiche di attacco\": \"https://www.cybersecurity360.it/nuove-minacce/le-cyber-gang-piu-pericolose-del-2025-tecniche-e-tattiche-di-attacco/\",\n \"Microsoft will update Office apps on Windows 10 until 2028\": \"https://www.bleepingcomputer.com/news/microsoft/microsoft-will-update-office-apps-on-windows-10-until-2028/\",\n \"Increase Red Team Operations 10X with Adversarial Exposure Validation\": \"https://www.bleepingcomputer.com/news/security/increase-red-team-operations-10x-with-adversarial-exposure-validation/\",\n \"Australia Records Highest-Ever Data Breaches in 2024, Says OAIC’s Report\": \"https://cyble.com/blog/oaic-reports-highest-data-breaches-2024/\",\n \"Akira, il ransomware a cui piacciono le Pmi\": \"https://www.cybersecurity360.it/nuove-minacce/ransomware/akira-il-ransomware-a-cui-piacciono-le-pmi/\",\n \"M&S says customer data stolen in cyberattack, forces password resets\": \"https://www.bleepingcomputer.com/news/security/mands-says-customer-data-stolen-in-cyberattack-forces-password-resets/\",\n \"Alabama says ‘cybersecurity event’ could disrupt state government services\": \"https://therecord.media/alabama-says-cyber-event-could-cause-disruptions\",\n \"States push WeChat for answers over money laundering allegations\": \"https://therecord.media/states-push-wechat-for-money-laundering-answers\",\n \"Evolution of Tycoon 2FA Defense Evasion Mechanisms: Analysis and Timeline\": \"https://any.run/cybersecurity-blog/tycoon2fa-evasion-analysis/\",\n \"Marks & Spencer confirms customer data stolen in cyberattack\": \"https://therecord.media/marks-spencer-confirms-customer-data-breach\",\n \"North Korean hackers target Ukrainian government in new espionage campaign\": \"https://therecord.media/north-korea-hackers-target-ukraine-to-understand-russian-war-efforts\",\n \"Using a Mythic agent to optimize penetration testing\": \"https://securelist.com/agent-for-mythic-c2-with-beacon-object-files/115259/\",\n \"Redefining IABs: Impacts of compartmentalization on threat tracking and modeling\": \"https://blog.talosintelligence.com/redefining-initial-access-brokers/\",\n \"Defining a new methodology for modeling and tracking compartmentalized threats\": \"https://blog.talosintelligence.com/compartmentalized-threat-modeling/\",\n \"Behavioural Analytics & Mobile Malware: Will They Get Along?\": \"https://www.threatfabric.com/blogs/behavioural-analytics-mobile-malware-will-they-get-along\",\n \"Threat Intelligence - Vulnerability insights\": \"https://www.certego.net/blog/whitepaper-aprile-2025-threat-intelligence-insights/\",\n \"Bypassing BitLocker Encryption: Bitpixie PoC and WinPE Edition\": \"https://blog.compass-security.com/2025/05/bypassing-bitlocker-encryption-bitpixie-poc-and-winpe-edition/\",\n \"Ransomware che infettano la CPU: una nuova, potenziale minaccia\": \"https://www.securityinfo.it/2025/05/13/ransomware-che-infettano-la-cpu-una-nuova-potenziale-minaccia/\",\n \"Il vantaggio competitivo del fornitore conforme: come la NIS 2 premia chi investe in sicurezza\": \"https://www.cybersecurity360.it/legal/il-vantaggio-competitivo-del-fornitore-conforme-come-la-nis-2-premia-chi-investe-in-sicurezza/\"\n },\n \"360数字安全\": {\n \"热点|奢侈品巨头“迪奥”20万中国用户信息泄露，数据安全再拉警报！\": \"https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580499&idx=1&sn=766c77bff08c482e93c487b2bbae7b11&subscene=0\"\n },\n \"Schneier on Security\": {\n \"Court Rules Against NSO Group\": \"https://www.schneier.com/blog/archives/2025/05/court-rules-against-nso-group.html\"\n },\n \"赛博回忆录\": {\n \"杜绝焦虑，技术人该如何看待AI\": \"https://mp.weixin.qq.com/s?__biz=MzIxNDAyNjQwNg==&mid=2456099397&idx=1&sn=b412e581ace56b2b79c018c7ab845cde&subscene=0\"\n },\n \"谛听ditecting\": {\n \"谛听 | 印巴冲突：印巴双方工控协议暴露数量减少\": \"https://mp.weixin.qq.com/s?__biz=MzU3MzQyOTU0Nw==&mid=2247495001&idx=1&sn=0c6f1fc9f8e4e38fca80e71b7c4e47b0&subscene=0\"\n },\n \"SANS Internet Storm Center, InfoCON: green\": {\n \"Microsoft Patch Tuesday: May 2025, (Tue, May 13th)\": \"https://isc.sans.edu/diary/rss/31946\",\n \"ISC Stormcast For Tuesday, May 13th, 2025 https://isc.sans.edu/podcastdetail/9448, (Tue, May 13th)\": \"https://isc.sans.edu/diary/rss/31944\"\n },\n \"Graham Cluley\": {\n \"The AI Fix #50: AI brings dead man back for killer’s trial, and the judge loves it\": \"https://grahamcluley.com/the-ai-fix-50/\",\n \"Two years’ jail for down-on-his-luck man who sold ransomware online\": \"https://www.bitdefender.com/en-us/blog/hotforsecurity/two-years-jail-for-down-on-his-luck-man-who-sold-ransomware-online\"\n },\n \"Security Affairs\": {\n \"How Interlock Ransomware Affects the Defense Industrial Base Supply Chain\": \"https://securityaffairs.com/177792/malware/how-interlock-ransomware-affects-the-defense-industrial-base-supply-chain.html\",\n \"Marks and Spencer confirms data breach after April cyber attack\": \"https://securityaffairs.com/177784/data-breach/marks-and-spencer-confirms-data-breach-after-april-cyber-attack.html\",\n \"Moldovan Police arrested a 45-year-old foreign man participating in ransomware attacks on Dutch companies\": \"https://securityaffairs.com/177772/cyber-crime/moldovan-police-arrested-a-45-year-old-foreign-man-participating-in-ransomware-attacks-on-dutch-companies.html\",\n \"APT group exploited Output Messenger Zero-Day to target Kurdish military operating in Iraq\": \"https://securityaffairs.com/177758/apt/apt-group-exploited-output-messenger-zero-day-to-target-kurdish-military-operating-in-iraq.html\",\n \"Apple released security updates to fix multiple flaws in iOS and macOS\": \"https://securityaffairs.com/177748/security/apple-released-security-updates-to-fix-multiple-flaws-in-ios-and-macos.html\"\n },\n \"Technical Information Security Content & Discussion\": {\n \"Azure Managed Identities Abuse: Security Research - Defense strategies\": \"https://www.reddit.com/r/netsec/comments/1kll5as/azure_managed_identities_abuse_security_research/\"\n },\n \"blackMORE Ops RSS Feed\": {\n \"Zero-Day Vulnerability in Output Messenger Exploited by Türkiye Hackers\": \"https://www.blackmoreops.com/2025/05/13/zero-day-vulnerability-output-messenger-exploited-turkiye-hackers/\"\n },\n \"Your Open Hacker Community\": {\n \"Root-Me Challenges and CTF\": \"https://www.reddit.com/r/HowToHack/comments/1klz8uy/rootme_challenges_and_ctf/\",\n \"DEFCON quallifying CTF team, ARESx, is currently recruiting for members\": \"https://www.reddit.com/r/HowToHack/comments/1klwgsu/defcon_quallifying_ctf_team_aresx_is_currently/\",\n \"how do i learn to hack?\": \"https://www.reddit.com/r/HowToHack/comments/1kluub0/how_do_i_learn_to_hack/\",\n \"How to build better projects?\": \"https://www.reddit.com/r/HowToHack/comments/1klcxdg/how_to_build_better_projects/\"\n },\n \"netsecstudents: Subreddit for students studying Network Security and its related subjects\": {\n \"Which Path to Choose?\": \"https://www.reddit.com/r/netsecstudents/comments/1kluf0l/which_path_to_choose/\"\n },\n \"Deep Web\": {\n \"Am i fucked?\": \"https://www.reddit.com/r/deepweb/comments/1klg2ak/am_i_fucked/\",\n \"Browsing Dark Web through VM???\": \"https://www.reddit.com/r/deepweb/comments/1km02ca/browsing_dark_web_through_vm/\",\n \"i need dread link\": \"https://www.reddit.com/r/deepweb/comments/1klonmj/i_need_dread_link/\",\n \"Searching for any kind of information\": \"https://www.reddit.com/r/deepweb/comments/1klke3q/searching_for_any_kind_of_information/\"\n },\n \"The Hacker News\": {\n \"China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide\": \"https://thehackernews.com/2025/05/china-linked-apts-exploit-sap-cve-2025.html\",\n \"Malicious PyPI Package Posing as Solana Tool Stole Source Code in 761 Downloads\": \"https://thehackernews.com/2025/05/malicious-pypi-package-posing-as-solana.html\",\n \"Deepfake Defense in the Age of AI\": \"https://thehackernews.com/2025/05/deepfake-defense-in-age-of-ai.html\",\n \"North Korean Konni APT Targets Ukraine with Malware to track Russian Invasion Progress\": \"https://thehackernews.com/2025/05/north-korean-konni-apt-targets-ukraine.html\",\n \"Moldovan Police Arrest Suspect in €4.5M Ransomware Attack on Dutch Research Agency\": \"https://thehackernews.com/2025/05/moldovan-police-arrest-suspect-in-45m.html\",\n \"Türkiye Hackers Exploited Output Messenger Zero-Day to Drop Golang Backdoors on Kurdish Servers\": \"https://thehackernews.com/2025/05/turkiye-hackers-exploited-output.html\"\n },\n \"Social Engineering\": {\n \"Trump Fitting the Mormon Model\": \"https://www.reddit.com/r/SocialEngineering/comments/1klqyc0/trump_fitting_the_mormon_model/\",\n \"Social Engineering The Public | Part 1: 'Trust the Science' (Selective Presentation)\": \"https://www.reddit.com/r/SocialEngineering/comments/1klctcq/social_engineering_the_public_part_1_trust_the/\",\n \"Best ways to scam Pedophiles?\": \"https://www.reddit.com/r/SocialEngineering/comments/1kljwh8/best_ways_to_scam_pedophiles/\"\n },\n \"Information Security\": {\n \"Why is RSA still widely used despite its slower performance compared to modern algorithms?\": \"https://www.reddit.com/r/Information_Security/comments/1kledvy/why_is_rsa_still_widely_used_despite_its_slower/\",\n \"Up gradation about apple’s Security\": \"https://www.reddit.com/r/Information_Security/comments/1klh6tt/up_gradation_about_apples_security/\",\n \"OXY CARE PREVARA\": \"https://www.reddit.com/r/Information_Security/comments/1klknyr/oxy_care_prevara/\",\n \"How do you prioritize risk mitigation when dealing with limited budget and resources?\": \"https://www.reddit.com/r/Information_Security/comments/1kldfje/how_do_you_prioritize_risk_mitigation_when/\"\n },\n \"Security Weekly Podcast Network (Audio)\": {\n \"Deepfake, South Korea, Moonlander, ChineseAI, FBI, AI damages professional reputation - SWN #476\": \"http://sites.libsyn.com/18678/deepfake-south-korea-moonlander-chineseai-fbi-ai-damages-professional-reputation-swn-476\",\n \"Secure Code Reviews, LLM Coding Assistants, and Trusting Code - Rey Bango, Karim Toubba, Gal Elbaz - ASW #330\": \"http://sites.libsyn.com/18678/secure-code-reviews-llm-coding-assistants-and-trusting-code-rey-bango-karim-toubba-gal-elbaz-asw-330\"\n }\n}"}}, "archive/daily/2025/2025-09-30.md": {"aaf3c5a4e3d85f2d007d181355cfd459b58001ce": {"t": 1785747381.9357657, "n": 28097, "h": "7bfdfc40d10fa78a", "c": "# 每日安全资讯（2025-09-30）\n\n- Armin Ronacher's Thoughts and Writings\n - [ ] [90%](https://lucumr.pocoo.org/2025/9/29/90-percent/)\n- paper - Last paper\n - [ ] [ViSTR-GP：基于视觉-状态张量回归与高斯过程的自动化机器人操作在线网络攻击检测](https://paper.seebug.org/3394/)\n- The DFIR Report\n - [ ] [From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion](https://thedfirreport.com/2025/09/29/from-a-single-click-how-lunar-spider-enabled-a-near-two-month-intrusion/)\n- Trustwave Blog\n - [ ] [Shades of Red: Redefining the Use of Red Flags in Cybersecurity and Insurance](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/shades-of-red-redefining-the-use-of-red-flags-in-cybersecurity-and-insurance/)\n- 奇安信攻防社区\n - [ ] [浅谈Java Web中Word转换器与SSRF](https://forum.butian.net/share/4572)\n- Recent Commits to cve:main\n - [ ] [Update Mon Sep 29 11:21:11 UTC 2025](https://github.com/trickest/cve/commit/d0a595030c091a8706b70a957f165a23a6ee4d54)\n- 安全客-有思想的安全新媒体\n - [ ] [国庆重保+攻防演练大考在即！360大模型安全服务专项方案筑牢AI防线](https://www.anquanke.com/post/id/312460)\n - [ ] [Apache Airflow 存在权限漏洞，可导致只读用户获取敏感信息](https://www.anquanke.com/post/id/312457)\n - [ ] [Meta 旨在打造机器人领域的“Android”，为下一代人形AI提供通用平台](https://www.anquanke.com/post/id/312454)\n - [ ] [Formbricks 存在高危漏洞 (CVE-2025-59934)，攻击者可通过伪造JWT令牌导致未授权的密码重置](https://www.anquanke.com/post/id/312451)\n - [ ] [Notepad++ 中存在DLL劫持漏洞（CVE-2025-56383），可导致任意代码执行，且POC已公开](https://www.anquanke.com/post/id/312448)\n - [ ] [Morte僵尸网络被披露：正利用路由器与企业应用漏洞，迅速扩张其“加载器即服务”活动](https://www.anquanke.com/post/id/312444)\n - [ ] [Akira勒索软件利用SonicWall VPN账户发起急速入侵](https://www.anquanke.com/post/id/312438)\n - [ ] [DarkCloud信息窃取器现新变种：采用VB6混淆技术并新增加密货币钱包窃取功能，威胁显著升级](https://www.anquanke.com/post/id/312435)\n - [ ] [TamperedChef恶意软件兴起：欺诈应用利用经过签名的二进制文件与搜索引擎投毒劫持浏览器](https://www.anquanke.com/post/id/312432)\n - [ ] [谷歌新规强制要求：所有安卓应用须在2025年11月1日前全面支持16KB页面大小](https://www.anquanke.com/post/id/312429)\n- SecWiki News\n - [ ] [SecWiki News 2025-09-29 Review](http://www.sec-wiki.com/?2025-09-29)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [Exchange/M365最新防范攻略！CACTER三步补齐原生防护短板](https://www.4hou.com/posts/l03l)\n - [ ] [【附下载】2025我们身边的 网信安全 典型案例等 官方视频汇编](https://www.4hou.com/posts/kg3x)\n - [ ] [蝉联荣誉！梆梆安全再度获选 “北京市委网信办第二届网络安全技术支撑单位”](https://www.4hou.com/posts/9jKP)\n - [ ] [新型FileFix社工攻击诱导用户安装StealC信息窃取恶意软件](https://www.4hou.com/posts/nl14)\n- 先知安全技术社区\n - [ ] [深入解析LLVM代码混淆技术：从基本块分割到控制流混淆的实现原理](https://xz.aliyun.com/news/19089)\n - [ ] [直接系统调用之从上层API到下层API的旅程](https://xz.aliyun.com/news/19088)\n - [ ] [深入CVE-2025-41243： Spring Cloud Gateway SpEL 从任意属性访问到任意文件下载](https://xz.aliyun.com/news/19087)\n - [ ] [AI安全护栏攻防实战：智能问答与智能开发助手的提示词注入攻击分析](https://xz.aliyun.com/news/19086)\n - [ ] [Rust语言模糊测试实战：cargo-fuzz、afl.rs与honggfuzz完整指南](https://xz.aliyun.com/news/19085)\n - [ ] [ntdll kernel32 模块基址获取新思路](https://xz.aliyun.com/news/19084)\n - [ ] [从JFinal4.5 CMS 接触JAVA代码审计](https://xz.aliyun.com/news/19083)\n - [ ] [用友NCCloudGatewayServlet 反射调用命令执行漏洞](https://xz.aliyun.com/news/19082)\n - [ ] [某次内部行业渗透测试&攻防演练多个系统从资产打点到RCE漏洞](https://xz.aliyun.com/news/19081)\n- ElcomSoft blog\n - [ ] [iPhone 17: the End of PWM Flickering?](https://blog.elcomsoft.com/2025/09/iphone-17-the-end-of-pwm-flickering/)\n- Doonsec's feed\n - [ ] [国庆前惊喜！DeepSeek新模型api大幅降价，开发者福音来了！](https://mp.weixin.qq.com/s?__biz=MzkxMDc1NzU1Ng==&mid=2247484266&idx=1&sn=fe3e549d24e3ba6f7ac97521af9a7618)\n - [ ] [丝滑出洞之全靠大哥赏饭吃](https://mp.weixin.qq.com/s?__biz=Mzg2MjU2MjY4Mw==&mid=2247485222&idx=1&sn=a571b9aa1ae91b099e125661884d0c5e)\n - [ ] [黑客必须掌握的规则？一篇文章看懂什么是计算机协议](https://mp.weixin.qq.com/s?__biz=MzYyNDYwOTIwMA==&mid=2247483717&idx=1&sn=28322fdcdb07cd247529b2348c425cb6)\n - [ ] [Windows下32位汇编学习（二）PE文件解析](https://mp.weixin.qq.com/s?__biz=MzkyODUzMjEzOA==&mid=2247483955&idx=1&sn=085f21bf614641ba52567d3b83a65e2b)\n - [ ] [2025年中非互联网发展与合作论坛“网络安全与数据治理”分论坛在厦门举办](https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649402861&idx=1&sn=acbfde53b20135fbfa521fcf185c1844)\n - [ ] [MOECTF](https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485348&idx=1&sn=a960d5f9b47feec17042a87e70cba9ea)\n - [ ] [网络安全公司招投标所需公司资质一览](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247492060&idx=1&sn=70ff8f86a30ac5d44c9cd8786ba7030c)\n - [ ] [【高危漏洞预警】DataSpider Servista信息泄露漏洞CVE-2025-48006](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490807&idx=1&sn=3d2cb4823b6d7d7cd7ec54b3c757b461)\n - [ ] [Windows内核攻防与红队免杀指北](https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484808&idx=1&sn=f800e0e7dae67e9ae956e671ca3cb088)\n - [ ] [Kerberos(I)-Kerberos是如何工作的](https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486640&idx=1&sn=a8db29fe43fba33fac124e7cc11da829)\n - [ ] [VirtualBox虚拟机如何与Vmware虚拟机互相通信](https://mp.weixin.qq.com/s?__biz=MzE5ODEzNDUwMA==&mid=2247485074&idx=1&sn=0fabfff52dc04993e1a1cff46e94c94f)\n - [ ] [主动防勒索病毒解决方案---以诱捕方案，主动抵御东西向威胁](https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247493148&idx=1&sn=b91e7f3b4205ebb15ce863c17cd47bbe)\n - [ ] [量化之路（三）](https://mp.weixin.qq.com/s?__biz=MzkyMDc0NDEzOA==&mid=2247483944&idx=1&sn=b276dfa0ada3647b83acb43be0928128)\n - [ ] [一款高端的网络钓鱼测试工具 -Mip22](https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247514133&idx=1&sn=e11c47c96b3172a9a3d98667c2a9353c)\n - [ ] [敏感信息管理工具 v2 新增云厂商 OSS 功能](https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491410&idx=1&sn=7a0ac3ec30f9cbd3b129652fdb44be43)\n - [ ] [伊朗曝光以色列机密核武，中东棋局中的情报大战与地缘震荡](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247511464&idx=1&sn=e45d560a39678c330f433eb0a96dc5d5)\n - [ ] [游戏漏洞挖掘](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498328&idx=1&sn=b899bb828d4367f2b99c1de2bef4b7dd)\n - [ ] [【大赛活动】10月31日截止 ！第四届“鼎信杯”大赛邀您参赛](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254738&idx=1&sn=86996d670ee0863edbad0f3653762b0b)\n - [ ] [中国评测牵头制定的GB/T 45502-2025《服务机器人信息安全通用要求》国家标准即将实施，赛迪机器人认证为产品安全保驾护航](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254738&idx=2&sn=21f0cc02a13800a82f333c037ac33bbd)\n - [ ] [碳核查中风险评估必知的五大步骤（上）](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254738&idx=3&sn=bfaf77dc1345856b31ece4a5a16d08b8)\n - [ ] [关于第四批通过信创数智技术服务能力一级评估的单位的公示](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254738&idx=4&sn=b66451897a6f175722ba44848cc08cf9)\n - [ ] [恶意软件攻击的种类](https://mp.weixin.qq.com/s?__biz=Mzk4ODI4MDEzNQ==&mid=2247483920&idx=1&sn=6bd5e55223770c1cc60bf8a14364a92d)\n - [ ] [解决学习通无法粘贴文字或代码的问题](https://mp.weixin.qq.com/s?__biz=MzkyNTY2Nzk0MQ==&mid=2247483802&idx=1&sn=45d50403d2b25e7ecac33557a12bdc5f)\n - [ ] [【公示】安徽省密码技术应用员及网络与信息安全管理员（网络安全管理员）职业技能等级认定成绩公示](https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485904&idx=1&sn=6d96f43dddee91afc9402c24cedd2934)\n - [ ] [特朗普签署行政令，TikTok在美封禁风波落幕](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247520250&idx=1&sn=00e37392d16162c92047bb5ac6fd63c1)\n - [ ] [来看雪SDC偶遇，领贴纸~](https://mp.weixin.qq.com/s?__biz=MzU5OTU3NDEzOQ==&mid=2247493212&idx=1&sn=b7fa9b541298e978cb4c6885183b141b)\n - [ ] [CISO指南：如何监控暗网？](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247644062&idx=1&sn=70940ea51e4fb37cd3c7f352c23b459b)\n - [ ] [知识星球 | 2025年“数字化安全”全网报告合集](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247644062&idx=2&sn=ee272ae80cc564453c39493744e2bd1f)\n - [ ] [免费赠送 | 2025国家网络安全宣传周 · 社区街道安全意识公益科普资料合集](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247644062&idx=3&sn=e455e6c9fa2fc2195d678b648d0d5d84)\n - [ ] [如何克服认知偏差做出更好的决策](https://mp.weixin.qq.com/s?__biz=MzkxMDIwMTMxMw==&mid=2247494921&idx=1&sn=5fe1a88f61e37436647e10892e22fad9)\n - [ ] [MITRE ATLAS 深度解析：AI 安全领域的 “攻防宝典”，从威胁实战到防御体系](https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484885&idx=1&sn=af0c41a33d4b931f272283b41e0ba84b)\n - [ ] [筑牢安全基底，护航数智未来 | CCS2025成都网络安全技术交流活动圆满结束](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247550600&idx=1&sn=47f8459938aa20de9f6a66a7e4ad4450)\n - [ ] [诚邀 | Token2049新加坡，倒计时2天！](https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247504639&idx=1&sn=2530e262d3010255b0fa300920941819)\n - [ ] [英国为捷豹路虎提供 15 亿英镑贷款担保，支持其从黑客攻击中恢复](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247543055&idx=1&sn=81372cfd43b9456fa59bb34387e980e6)\n - [ ] [【安全圈】黑客攻陷美国政府的数百台思科防火墙](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=1&sn=0be2a3a03d0d77758c2cf5a158915b5d)\n - [ ] [【安全圈】Medusa勒索软件团伙声称攻击Comcast，索要120万美元赎金](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=2&sn=95ee59e8e4191715f95507ba2d346d3d)\n - [ ] [【安全圈】英国奢侈品百货Harrods确认数据泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=3&sn=594d659c62257470c227186640294541)\n - [ ] [【安全圈】Windows 堆管理曝严重漏洞：记录大小字段缺陷可致任意读写](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=4&sn=e0ad1a3000c871baa19d7c01952c5fc4)\n- Cerbero Blog\n - [ ] [NSIS Format Package](https://blog.cerbero.io/nsis-format-package/)\n- Sandfly Security Blog RSS Feed\n - [ ] [Leaked Chinese (Korea Targeting) Linux Stealth Rootkit Analysis](https://sandflysecurity.com/blog/leaked-north-korean-linux-stealth-rootkit-analysis)\n - [ ] [Sandfly 5.5.4 - Chinese Rootkit Decloaking](https://sandflysecurity.com/blog/sandfly-5-5-4-north-korean-rootkit-decloaking)\n- NVISO Labs\n - [ ] [You name it, VMware elevates it (CVE-2025-41244)](https://blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/)\n- Malwarebytes\n - [ ] [Amazon pays $2.5B settlement over deceptive Prime subscriptions](https://www.malwarebytes.com/blog/news/2025/09/amazon-pays-2-5b-settlement-over-deceptive-prime-subscriptions)\n - [ ] [Sex offenders, terrorists, drug dealers, exposed in spyware breach](https://www.malwarebytes.com/blog/news/2025/09/sex-offenders-terrorists-drug-dealers-exposed-in-spyware-breach)\n - [ ] [A week in security (September 22 – September 28)](https://www.malwarebytes.com/blog/news/2025/09/a-week-in-security-september-22-september-28)\n- HackerNews\n - [ ] [非洲14国260名网恋诈骗嫌疑人落网](https://hackernews.cc/archives/60993)\n - [ ] [研究人员披露传播 CountLoader 与 PureRAT 的钓鱼威胁](https://hackernews.cc/archives/60991)\n - [ ] [勒索软件攻陷启用 MFA 的 SonicWall VPN 账户](https://hackernews.cc/archives/60989)\n - [ ] [伪造微软 Teams 安装程序传播恶意软件](https://hackernews.cc/archives/60986)\n - [ ] [GoAnywhere MFT 漏洞被作为零日漏洞利用](https://hackernews.cc/archives/60983)\n- 奇客Solidot–传递最新科技情报\n - [ ] [阿富汗断网](https://www.solidot.org/story?sid=82454)\n - [ ] [投资财团以 550 亿美元私有化 EA](https://www.solidot.org/story?sid=82453)\n - [ ] [高糖芒果有助于降低糖尿病风险](https://www.solidot.org/story?sid=82452)\n - [ ] [日本公司研发出基于植物的生鱼片](https://www.solidot.org/story?sid=82451)\n - [ ] [RubyGems 社区发生项目控制权争夺战](https://www.solidot.org/story?sid=82450)\n - [ ] [加州公共和共享充电桩数量比加油站多 68%](https://www.solidot.org/story?sid=82449)\n - [ ] [流浪行星发现有极光](https://www.solidot.org/story?sid=82448)\n - [ ] [瑞士周日公投以微弱多数批准电子身份证](https://www.solidot.org/story?sid=82447)\n - [ ] [F-Droid 发表声明反对 Google 验证应用开发者身份的要求](https://www.solidot.org/story?sid=82446)\n - [ ] [Linux 6.17 释出](https://www.solidot.org/story?sid=82444)\n- Shostack & Friends Blog\n - [ ] [Adam Featured on Inside MedTech Innovation](https://shostack.org/blog/medtech-innovation-podcast/)\n- 安全客\n - [ ] [英国发布《网络安全文化原则》：以文化为枢纽的治理再定位](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789137&idx=1&sn=221f1c7039fe628d9f3209073c496723)\n- 我的安全视界观\n - [ ] [SDL 100/100问：针对内部的高中低危漏洞，给业务部门多长时间修复？](https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487368&idx=1&sn=b9c93c7e24a7dcc6c98eee6c544b43b4)\n- 先进攻防\n - [ ] [利用ClickHouse可刷新物化视图进行主动威胁狩猎](https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908737&idx=1&sn=4adb448e6ab0836f4584c9998561aa7a)\n- 看雪学苑\n - [ ] [Vaptcha逆向分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601462&idx=1&sn=1ee2829059d9a82fc6852b4f7bfcaf71)\n - [ ] [Notepad++ 曝漏洞，攻击者可执行任意代码](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601462&idx=2&sn=807a0f406b4a8af86a726759e5838d0a)\n - [ ] [限时¥399！Android逆向内核攻防实战进阶](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601462&idx=3&sn=920423ed3cde7a996e748020458d2f01)\n- 农夫安全团队\n - [ ] [预告](https://mp.weixin.qq.com/s?__biz=MzI0MzQ4NTI1OA==&mid=2247484874&idx=1&sn=9a672f613a811f1c796378604e5c67c6)\n- 天黑说嘿话\n - [ ] [【运维干货】11 项安全设备核心检查要点，筑牢网络防线！](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484680&idx=1&sn=425fd7806c07b5b9cc5ee12467b3a617)\n- 威努特安全网络\n - [ ] [看威努特如何化解医疗数据存储、管理与安全难题？](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651136234&idx=1&sn=5e8cfab5ef633eaeeafbd962115325ce)\n - [ ] [威努特第二代防火墙：智慧校园的“全能护城河”](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651136219&idx=1&sn=a2091c337c5047f22a06b3741a6e6698)\n- 体验盒子\n - [ ] [Nginx 利用 fail2ban 自动封禁乱扫的 IP](https://www.uedbox.com/post/119731/)\n- 代码卫士\n - [ ] [康耐视工业摄像头存在多个漏洞，无补丁](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524096&idx=1&sn=3be22e18653da9e761f0173796619548)\n - [ ] [近80%的英美爱尔兰网安负责人担心未来一年遭国家黑客组织攻击](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524096&idx=2&sn=c3d91d004d434ade0e64f83a4df0e9b9)\n- dotNet安全矩阵\n - [ ] [.NET 中使用 Windows runas 提升进程权限](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500709&idx=1&sn=58caf24a5a1cd91d4ec115f0bd568b87)\n - [ ] [[ .NET 安全代码审计 ] 从零基础到高阶实战，开启漏洞赏金之路](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500709&idx=2&sn=fae6171fcbb43d871c1d9e536325191e)\n - [ ] [.NET内网实战：通过劫持 JIT 内存编译执行ShellCode](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500709&idx=3&sn=f50e8d88f0ed2bc0847b467edfe6977c)\n- 中国信息安全\n - [ ] [专题·原创 | 关于可信数据空间的实践探索与思考](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250221&idx=1&sn=071c223b624bc03612b90c684d756a7e)\n - [ ] [发布 | 携手构建中非网络空间命运共同体行动计划（2025-2026）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250221&idx=2&sn=118c2345cce6503e1df767857ef9faa3)\n - [ ] [专家解读｜张平：构建安全可信可控的AI新生态](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250221&idx=3&sn=36a47b217642d354a3942c3da152726b)\n - [ ] [前沿 | 人工智能时代呼唤网络安全新范式](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250221&idx=4&sn=05663b45f20d04bbe0a12e4d4cf74d50)\n - [ ] [评论 | 治理网络“李鬼”净化医疗科普](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250221&idx=5&sn=12a1bb19b1cb1225f980a8caeeaf0579)\n- 电子物证\n - [ ] [【加拿大数据隐私法律规制】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048630&idx=1&sn=16f7dd16540a6c1094b31db837bbf03b)\n - [ ] [【完善区块链证据举证责任分配规则　保障在线诉讼公平与效率】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048630&idx=2&sn=97e0c22246ab90230dd07d59a2048621)\n- 慢雾科技\n - [ ] [慢雾 Q3 追踪实录：协助被盗客户冻结/追回超百万美元资金](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247503424&idx=1&sn=503fad659926361eeb2520f296c2c83a)\n- 嘶吼专业版\n - [ ] [新型FileFix社工攻击诱导用户安装StealC信息窃取恶意软件](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584780&idx=1&sn=a1a73f0638f77e746ef045826b25ee6e)\n - [ ] [安全动态回顾|全国网安标委：5项网络安全国家标准公开征集参编单位 新型XCSSET macOS恶意软件变种针对Xcode开发者](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584780&idx=2&sn=dc62801fbb8ee9a526bae837ebe08829)\n- 安全圈\n - [ ] [【安全圈】黑客攻陷美国政府的数百台思科防火墙](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=1&sn=0be2a3a03d0d77758c2cf5a158915b5d)\n - [ ] [【安全圈】Medusa勒索软件团伙声称攻击Comcast，索要120万美元赎金](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=2&sn=95ee59e8e4191715f95507ba2d346d3d)\n - [ ] [【安全圈】英国奢侈品百货Harrods确认数据泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=3&sn=594d659c62257470c227186640294541)\n - [ ] [【安全圈】Windows 堆管理曝严重漏洞：记录大小字段缺陷可致任意读写](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=4&sn=e0ad1a3000c871baa19d7c01952c5fc4)\n- 腾讯安全威胁情报中心\n - [ ] [情报每周回顾 2025-09-28](https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510908&idx=1&sn=45c20b6e7ef405f3bfff16544bc86ede)\n- 安全牛\n - [ ] [《私有云安全资源池技术与应用研究（2025版）》报告发布（附下载二维码）](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138883&idx=1&sn=115b9839e268ea854363d646a7b0bcca)\n - [ ] [英国将为捷豹路虎提供15亿英镑贷款，帮助其应对网络攻击危机；LockBit卷土重来，更加危险的5.0版本已现身 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138883&idx=2&sn=aedf37d4df04320df13a2cda16667ec6)\n- 极客公园\n - [ ] [Seko AI 想要重新定义短片创作这件事](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653087658&idx=1&sn=0fcfe5e31a69005b389ecccaa0f029d6)\n - [ ] [在云栖，我们遇见了最会玩的「AI 原住民」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653087549&idx=1&sn=f803029c7b73c37807399cfcffec4481)\n - [ ] [OpenAI「降配门」发酵，偷换模型遭全网实锤；小米 SU7 在日本首秀；苹果内部测试类 ChatGPT 应用｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653087570&idx=1&sn=5e7d3c7ad96f837e147d759dcc855480)\n- 补天平台\n - [ ] [双节喜相逢 | 补天平台中秋国庆放假通知](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509397&idx=1&sn=630c0f52b7c3d7cc67f7ea3513acbcc4)\n- 字节跳动技术团队\n - [ ] [Kotlin 与 ArkTS 交互性能与效率优化实践](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247516824&idx=1&sn=22a7a69cfe9891296d15a9bd53f74443)\n- 360数字安全\n - [ ] [别人节前熬夜赶工，你靠AI准点收工](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582313&idx=1&sn=88b2b813df83e313305a51a6e66b1f7e)\n - [ ] [AI长城守护数字丝路: 360大模型安全卫士护航中国—东盟博览会](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582313&idx=2&sn=0a6795f6436a848bced755f413db7b36)\n- 数世咨询\n - [ ] [Top 25 MCP 漏洞揭示： AI 代理可被利用的方式](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540397&idx=1&sn=e6451e98f4da9a4e7a5d4c2aab79fd9a)\n- Security Weekly Podcast Network (Audio)\n - [ ] [Live interviews from Oktane 2025: threats, AI in apps, and AI in cybersecurity tools - Brett Winterford, Shiv Ramji, Damon McDougald - ESW #426](http://sites.libsyn.com/18678/live-interviews-from-oktane-2025-threats-ai-in-apps-and-ai-in-cybersecurity-tools-brett-winterford-shiv-ramji-damon-mcdougald-esw-426)\n- 吴鲁加\n - [ ] [你验证过吗？](https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247485749&idx=1&sn=5c29162ef74e0f3bdd349b69845e537a)\n- ICT Security Magazine\n - [ ] [Forum ICT Security 2025 – Due giornate di evento per ridefinire il futuro della sicurezza digitale in Italia](https://www.ictsecuritymagazine.com/notizie/forum-ict-security-2025-evento-sicurezza-digitale-in-italia/)\n - [ ] [SICUREZZA 2025: la cybersecurity protagonista del Security Day](https://www.ictsecuritymagazine.com/notizie/sicurezza-2025-la-cybersecurity-protagonista-del-security-day/)\n - [ ] [Oltre 400 app false rubano le credenziali Facebook: analisi delle minacce mobili 2022-2025](https://www.ictsecuritymagazine.com/notizie/credenziali-facebook/)\n- 表图\n - [ ] [[译苑雅集Vol. 1]AI 能否修复坏流程？技术 vs 组织惯性的终极辩论](https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247484846&idx=1&sn=0600b4660839f12975e4418580e089b8)\n- Securityinfo.it\n - [ ] [Firewall Cisco sotto attacco: una nuova campagna prende di mira i device ASA](https://www.securityinfo.it/2025/09/29/firewall-cisco-sotto-attacco-una-nuova-campagna-prende-di-mira-i-device-asa/?utm_source=rss&utm_medium=rss&utm_campaign=firewall-cisco-sotto-attacco-una-nuova-campagna-prende-di-mira-i-device-asa)\n - [ ] [CERT-AGID 20–26 settembre: phishing, malware e PEC compromesse](https://www.securityinfo.it/2025/09/29/cert-agid-20-26-settembre-phishing-malware-e-pec-compromesse/?utm_source=rss&utm_medium=rss&utm_campaign=cert-agid-20-26-settembre-phishing-malware-e-pec-compromesse)\n- CNVD漏洞平台\n - [ ] [CNVD漏洞周报2025年第37期](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496385&idx=1&sn=a0679c73ea3175bd731b8631456a480c)\n - [ ] [上周关注度较高的产品安全漏洞(20250922-20250928)](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496385&idx=2&sn=b1f4564d8332222df845ba876c883ff5)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Apple Patches Single Vulnerability CVE-2025-43400, (Mon, Sep 29th)](https://isc.sans.edu/diary/rss/32330)\n - [ ] [Increase in Scans for Palo Alto Global Protect Vulnerability (CVE-2024-3400), (Mon, Sep 29th)](https://isc.sans.edu/diary/rss/32328)\n - [ ] [ISC Stormcast For Monday, September 29th, 2025 https://isc.sans.edu/podcastdetail/9632, (Mon, Sep 29th)](https://isc.sans.edu/diary/rss/32326)\n- Troy Hunt's Blog\n - [ ] [Welcoming CERN to Have I Been Pwned](https://www.troyhunt.com/welcoming-cern-to-have-i-been-pwned/)\n- Security Affairs\n - [ ] [UK grants £1.5B loan to Jaguar Land Rover after cyberattack](https://securityaffairs.com/182757/security/uk-grants-1-5b-loan-to-jaguar-land-rover-after-cyberattack.html)\n - [ ] [Harrods alerts customers to new data breach linked to third-party provider](https://securityaffairs.com/182752/data-breach/harrods-alerts-customers-to-new-data-breach-linked-to-third-party-provider.html)\n - [ ] [Akira Ransomware bypasses MFA on SonicWall VPNs](https://securityaffairs.com/182732/cyber-crime/akira-ransomware-bypasses-mfa-on-sonicwall-vpns.html)\n - [ ] [Despite Russian influence, Moldova votes Pro-EU, highlighting future election risks](https://securityaffairs.com/182743/uncategorized/despite-russian-influence-moldova-votes-pro-eu-highlighting-future-election-risks.html)\n - [ ] [Dutch teens arrested for spying on behalf of pro-Russian hackers](https://securityaffairs.com/182724/intelligence/dutch-teens-arrested-for-spying-on-behalf-of-pro-russian-hackers.html)\n- Krypt3ia\n - [ ] [Survivability Over Perfection: A Call for Defense in Depth in the Age of Artificial General Intelligence](https://krypt3ia.wordpress.com/2025/09/29/survivability-over-perfection-a-call-for-defense-in-depth-in-the-age-of-artificial-general-intelligence/)\n - [ ] [SENTRY: A Unified Framework for AI/AGI Risk and Defensive Engineering](https://krypt3ia.wordpress.com/2025/09/29/sentry-a-unified-framework-for-ai-agi-risk-and-defensive-engineering/)\n- Deeplinks\n - [ ] [Towards the 10th Summit of the Americas: Concerns and Recommendations from Civil Society](https://www.eff.org/deeplinks/2025/09/towards-10th-summit-americas-concerns-and-recommendations-civil-society)\n - [ ] [EFF Urges Virgina Court of Appeals to Require Search Warrants to Access ALPR Databases](https://www.eff.org/deeplinks/2025/09/eff-urges-virgina-court-appeals-require-search-warrants-access-alpr-databases)\n - [ ] [Chat Control Is Back on the Menu in the EU. It Still Must Be Stopped](https://www.eff.org/deeplinks/2025/09/chat-control-back-menu-eu-it-still-must-be-stopped-0)\n - [ ] [After Years Behind Bars, Alaa Is Free at Last](https://www.eff.org/deeplinks/2025/09/after-years-behind-bars-alaa-free-last)\n- The Hacker News\n - [ ] [EvilAI Malware Masquerades as AI Tools to Infiltrate Global Organizations](https://thehackernews.com/2025/09/evilai-malware-masquerades-as-ai-tools.html)\n - [ ] [⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & More](https://thehackernews.com/2025/09/weekly-recap-cisco-0-day-record-ddos.html)\n - [ ] [The State of AI in the SOC 2025 - Insights from Recent Study](https://thehackernews.com/2025/09/the-state-of-ai-in-soc-2025-insights.html)\n - [ ] [Microsoft Flags AI-Driven Phishing: LLM-Crafted SVG Files Outsmart Email Security](https://thehackernews.com/2025/09/microsoft-flags-ai-driven-phishing-llm.html)\n - [ ] [First Malicious MCP Server Found Stealing Emails in Rogue Postmark-MCP Package](https://thehackernews.com/2025/09/first-malicious-mcp-server-found.html)\n- Over Security - Cybersecurity news aggregator\n - [ ] [UK convicts \"Bitcoin Queen\" in world’s largest cryptocurrency seizure](https://www.bleepingcomputer.com/news/security/uk-convicts-bitcoin-queen-in-worlds-largest-cryptocurrency-seizure/)\n - [ ] [Chinese scammer pleads guilty after UK seizes nearly $7 billion in bitcoin](https://therecord.media/chinese-scammer-guilty-seizure-uk)\n - [ ] [Japan's largest brewer suspends operations due to cyberattack](https://www.bleepingcomputer.com/news/security/japans-largest-brewer-suspends-operations-due-to-cyberattack/)\n - [ ] [Ransomware gang sought BBC reporter’s help in hacking media giant](https://www.bleepingcomputer.com/news/security/ransomware-gang-sought-bbc-reporters-help-in-hacking-media-giant/)\n - [ ] [European AI company’s ‘reputation reports’ are inaccurate and illegal, watchdog claims](https://therecord.media/reputation-reports-data-broker-noyb-complaint-lithuania)\n - [ ] [UK govt backs JLR with £1.5 billion loan guarantee after cyberattack](https://www.bleepingcomputer.com/news/security/uk-govt-backs-jlr-with-15-billion-loan-guarantee-after-cyberattack/)\n - [ ] [UK government to be guarantor for Jaguar Land Rover loan as it recovers from cyberattack](https://therecord.media/jaguar-land-rover-loan-guarantor-cyberattack)\n - [ ] [Ukraine’s digital chief pushes for AI-first state amid war and cyber threats](https://therecord.media/ukraine-ai-state-digital)\n - [ ] [Brave launches 'Ask Brave' feature to fuse AI with traditional search](https://www.bleepingcomputer.com/news/artificial-intelligence/brave-launches-ask-brave-feature-to-fuse-ai-with-traditional-search/)\n - [ ] [From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion](https://thedfirreport.com/2025/09/29/from-a-single-click-how-lunar-spider-enabled-a-near-two-month-intrusion/)\n - [ ] [Data breach nei firewall Cisco usati da enti governativi Usa: tre linee di riflessione](https://www.cybersecurity360.it/nuove-minacce/data-breach-nei-firewall-cisco-usati-da-enti-governativi-usa-tre-linee-di-riflessione/)\n - [ ] [Finte multe PagoPA: quando il cyber criminale si traveste da poliziotto](https://www.cybersecurity360.it/nuove-minacce/finte-multe-pagopa-quando-il-cyber-criminale-si-traveste-da-poliziotto/)\n - [ ] [Law enforcement is using AI to synthesize evidence. Is the justice system ready for it?](https://therecord.media/law-enforcement-ai-platforms-synthesize-evidence-criminal-cases)\n - [ ] [Harrods suffers new data breach exposing 430,000 customer records](https://www.bleepingcomputer.com/news/security/harrods-suffers-new-data-breach-exposing-430-000-customer-records/)\n - [ ] [ChatGPT tests free trial for paid plans, rolls out cheaper Go in more regions](https://www.bleepingcomputer.com/news/artificial-intelligence/chatgpt-tests-free-trial-for-paid-plans-rolls-out-cheaper-go-in-more-regions/)\n - [ ] [Can We Trust AI To Write Vulnerability Checks? Here's what we found](https://www.bleepingcomputer.com/news/security/can-we-trust-ai-to-write-vulnerability-checks-heres-what-we-found/)\n - [ ] [Moldova’s pro-EU party wins election amid cyberattacks, Kremlin interference](https://therecord.media/moldova-election-pro-eu-party-wins-ddos-incidents-influence-ops)\n - [ ] [Firewall Cisco sotto attacco: una nuova campagna prende di mira i device ASA](https://www.securityinfo.it/2025/09/29/firewall-cisco-sotto-attacco-una-nuova-campagna-prende-di-mira-i-device-asa/)\n - [ ] [OpenAI is routing GPT-4o to safety models when it detects harmful activities](https://www.bleepingcomputer.com/news/artificial-intelligence/openai-is-routing-gpt-4o-to-safety-models-when-it-detects-harmful-activities/)\n - [ ] [Cloud e cyber security nelle PMI: le nuove risorse del Mimit per rafforzare la resilienza digitale](https://www.cybersecurity360.it/cybersecurity-nazionale/cloud-e-cyber-security-nelle-pmi-le-nuove-risorse-del-mimit-per-rafforzare-la-resilienza-digitale/)\n - [ ] [La frode SEO cinese e l’ascesa silenziosa di GhostRedirector](https://www.cybersecurity360.it/nuove-minacce/la-frode-seo-cinese-e-lascesa-silenziosa-di-ghostredirector/)\n - [ ] [Nuova variante del malware XCSSET prende di mira gli sviluppatori Xcode su macOS](https://www.securityinfo.it/2025/09/26/nuova-variante-del-malware-xcsset-prende-di-mira-gli-sviluppatori-xcode-su-macos/)\n - [ ] [Gap analysis e piano di azione per trasformare il Framework nazionale cyber in azione misurabile](https://www.cybersecurity360.it/legal/gap-analysis-e-piano-di-azione-e-milestone-per-trasformare-il-fncdp-2-1-in-azione-misurabile/)\n - [ ] [CERT-AGID 20–26 settembre: phishing, malware e PEC compromesse](https://www.securityinfo.it/2025/09/29/cert-agid-20-26-settembre-phishing-malware-e-pec-compromesse/)\n- Schneier on Security\n - [ ] [Abusing Notion’s AI Agent for Data Theft](https://www.schneier.com/blog/archives/2025/09/abusing-notions-ai-agent-for-data-theft.html)\n- Daniel Miessler\n - [ ] [Do Humans Really Have World Models?](https://danielmiessler.com/blog/humans-dont-have-world-model?utm_source=rss&utm_medium=feed&utm_campaign=website)\n"}, "df557cb01061982b00d02308756c0f66d360c379": {"t": 1785772254.639424, "n": 28097, "h": "7bfdfc40d10fa78a", "c": "# 每日安全资讯（2025-09-30）\n\n- Armin Ronacher's Thoughts and Writings\n - [ ] [90%](https://lucumr.pocoo.org/2025/9/29/90-percent/)\n- paper - Last paper\n - [ ] [ViSTR-GP：基于视觉-状态张量回归与高斯过程的自动化机器人操作在线网络攻击检测](https://paper.seebug.org/3394/)\n- The DFIR Report\n - [ ] [From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion](https://thedfirreport.com/2025/09/29/from-a-single-click-how-lunar-spider-enabled-a-near-two-month-intrusion/)\n- Trustwave Blog\n - [ ] [Shades of Red: Redefining the Use of Red Flags in Cybersecurity and Insurance](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/shades-of-red-redefining-the-use-of-red-flags-in-cybersecurity-and-insurance/)\n- 奇安信攻防社区\n - [ ] [浅谈Java Web中Word转换器与SSRF](https://forum.butian.net/share/4572)\n- Recent Commits to cve:main\n - [ ] [Update Mon Sep 29 11:21:11 UTC 2025](https://github.com/trickest/cve/commit/d0a595030c091a8706b70a957f165a23a6ee4d54)\n- 安全客-有思想的安全新媒体\n - [ ] [国庆重保+攻防演练大考在即！360大模型安全服务专项方案筑牢AI防线](https://www.anquanke.com/post/id/312460)\n - [ ] [Apache Airflow 存在权限漏洞，可导致只读用户获取敏感信息](https://www.anquanke.com/post/id/312457)\n - [ ] [Meta 旨在打造机器人领域的“Android”，为下一代人形AI提供通用平台](https://www.anquanke.com/post/id/312454)\n - [ ] [Formbricks 存在高危漏洞 (CVE-2025-59934)，攻击者可通过伪造JWT令牌导致未授权的密码重置](https://www.anquanke.com/post/id/312451)\n - [ ] [Notepad++ 中存在DLL劫持漏洞（CVE-2025-56383），可导致任意代码执行，且POC已公开](https://www.anquanke.com/post/id/312448)\n - [ ] [Morte僵尸网络被披露：正利用路由器与企业应用漏洞，迅速扩张其“加载器即服务”活动](https://www.anquanke.com/post/id/312444)\n - [ ] [Akira勒索软件利用SonicWall VPN账户发起急速入侵](https://www.anquanke.com/post/id/312438)\n - [ ] [DarkCloud信息窃取器现新变种：采用VB6混淆技术并新增加密货币钱包窃取功能，威胁显著升级](https://www.anquanke.com/post/id/312435)\n - [ ] [TamperedChef恶意软件兴起：欺诈应用利用经过签名的二进制文件与搜索引擎投毒劫持浏览器](https://www.anquanke.com/post/id/312432)\n - [ ] [谷歌新规强制要求：所有安卓应用须在2025年11月1日前全面支持16KB页面大小](https://www.anquanke.com/post/id/312429)\n- SecWiki News\n - [ ] [SecWiki News 2025-09-29 Review](http://www.sec-wiki.com/?2025-09-29)\n- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com\n - [ ] [Exchange/M365最新防范攻略！CACTER三步补齐原生防护短板](https://www.4hou.com/posts/l03l)\n - [ ] [【附下载】2025我们身边的 网信安全 典型案例等 官方视频汇编](https://www.4hou.com/posts/kg3x)\n - [ ] [蝉联荣誉！梆梆安全再度获选 “北京市委网信办第二届网络安全技术支撑单位”](https://www.4hou.com/posts/9jKP)\n - [ ] [新型FileFix社工攻击诱导用户安装StealC信息窃取恶意软件](https://www.4hou.com/posts/nl14)\n- 先知安全技术社区\n - [ ] [深入解析LLVM代码混淆技术：从基本块分割到控制流混淆的实现原理](https://xz.aliyun.com/news/19089)\n - [ ] [直接系统调用之从上层API到下层API的旅程](https://xz.aliyun.com/news/19088)\n - [ ] [深入CVE-2025-41243： Spring Cloud Gateway SpEL 从任意属性访问到任意文件下载](https://xz.aliyun.com/news/19087)\n - [ ] [AI安全护栏攻防实战：智能问答与智能开发助手的提示词注入攻击分析](https://xz.aliyun.com/news/19086)\n - [ ] [Rust语言模糊测试实战：cargo-fuzz、afl.rs与honggfuzz完整指南](https://xz.aliyun.com/news/19085)\n - [ ] [ntdll kernel32 模块基址获取新思路](https://xz.aliyun.com/news/19084)\n - [ ] [从JFinal4.5 CMS 接触JAVA代码审计](https://xz.aliyun.com/news/19083)\n - [ ] [用友NCCloudGatewayServlet 反射调用命令执行漏洞](https://xz.aliyun.com/news/19082)\n - [ ] [某次内部行业渗透测试&攻防演练多个系统从资产打点到RCE漏洞](https://xz.aliyun.com/news/19081)\n- ElcomSoft blog\n - [ ] [iPhone 17: the End of PWM Flickering?](https://blog.elcomsoft.com/2025/09/iphone-17-the-end-of-pwm-flickering/)\n- Doonsec's feed\n - [ ] [国庆前惊喜！DeepSeek新模型api大幅降价，开发者福音来了！](https://mp.weixin.qq.com/s?__biz=MzkxMDc1NzU1Ng==&mid=2247484266&idx=1&sn=fe3e549d24e3ba6f7ac97521af9a7618)\n - [ ] [丝滑出洞之全靠大哥赏饭吃](https://mp.weixin.qq.com/s?__biz=Mzg2MjU2MjY4Mw==&mid=2247485222&idx=1&sn=a571b9aa1ae91b099e125661884d0c5e)\n - [ ] [黑客必须掌握的规则？一篇文章看懂什么是计算机协议](https://mp.weixin.qq.com/s?__biz=MzYyNDYwOTIwMA==&mid=2247483717&idx=1&sn=28322fdcdb07cd247529b2348c425cb6)\n - [ ] [Windows下32位汇编学习（二）PE文件解析](https://mp.weixin.qq.com/s?__biz=MzkyODUzMjEzOA==&mid=2247483955&idx=1&sn=085f21bf614641ba52567d3b83a65e2b)\n - [ ] [2025年中非互联网发展与合作论坛“网络安全与数据治理”分论坛在厦门举办](https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649402861&idx=1&sn=acbfde53b20135fbfa521fcf185c1844)\n - [ ] [MOECTF](https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485348&idx=1&sn=a960d5f9b47feec17042a87e70cba9ea)\n - [ ] [网络安全公司招投标所需公司资质一览](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247492060&idx=1&sn=70ff8f86a30ac5d44c9cd8786ba7030c)\n - [ ] [【高危漏洞预警】DataSpider Servista信息泄露漏洞CVE-2025-48006](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490807&idx=1&sn=3d2cb4823b6d7d7cd7ec54b3c757b461)\n - [ ] [Windows内核攻防与红队免杀指北](https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484808&idx=1&sn=f800e0e7dae67e9ae956e671ca3cb088)\n - [ ] [Kerberos(I)-Kerberos是如何工作的](https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486640&idx=1&sn=a8db29fe43fba33fac124e7cc11da829)\n - [ ] [VirtualBox虚拟机如何与Vmware虚拟机互相通信](https://mp.weixin.qq.com/s?__biz=MzE5ODEzNDUwMA==&mid=2247485074&idx=1&sn=0fabfff52dc04993e1a1cff46e94c94f)\n - [ ] [主动防勒索病毒解决方案---以诱捕方案，主动抵御东西向威胁](https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247493148&idx=1&sn=b91e7f3b4205ebb15ce863c17cd47bbe)\n - [ ] [量化之路（三）](https://mp.weixin.qq.com/s?__biz=MzkyMDc0NDEzOA==&mid=2247483944&idx=1&sn=b276dfa0ada3647b83acb43be0928128)\n - [ ] [一款高端的网络钓鱼测试工具 -Mip22](https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247514133&idx=1&sn=e11c47c96b3172a9a3d98667c2a9353c)\n - [ ] [敏感信息管理工具 v2 新增云厂商 OSS 功能](https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491410&idx=1&sn=7a0ac3ec30f9cbd3b129652fdb44be43)\n - [ ] [伊朗曝光以色列机密核武，中东棋局中的情报大战与地缘震荡](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247511464&idx=1&sn=e45d560a39678c330f433eb0a96dc5d5)\n - [ ] [游戏漏洞挖掘](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498328&idx=1&sn=b899bb828d4367f2b99c1de2bef4b7dd)\n - [ ] [【大赛活动】10月31日截止 ！第四届“鼎信杯”大赛邀您参赛](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254738&idx=1&sn=86996d670ee0863edbad0f3653762b0b)\n - [ ] [中国评测牵头制定的GB/T 45502-2025《服务机器人信息安全通用要求》国家标准即将实施，赛迪机器人认证为产品安全保驾护航](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254738&idx=2&sn=21f0cc02a13800a82f333c037ac33bbd)\n - [ ] [碳核查中风险评估必知的五大步骤（上）](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254738&idx=3&sn=bfaf77dc1345856b31ece4a5a16d08b8)\n - [ ] [关于第四批通过信创数智技术服务能力一级评估的单位的公示](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254738&idx=4&sn=b66451897a6f175722ba44848cc08cf9)\n - [ ] [恶意软件攻击的种类](https://mp.weixin.qq.com/s?__biz=Mzk4ODI4MDEzNQ==&mid=2247483920&idx=1&sn=6bd5e55223770c1cc60bf8a14364a92d)\n - [ ] [解决学习通无法粘贴文字或代码的问题](https://mp.weixin.qq.com/s?__biz=MzkyNTY2Nzk0MQ==&mid=2247483802&idx=1&sn=45d50403d2b25e7ecac33557a12bdc5f)\n - [ ] [【公示】安徽省密码技术应用员及网络与信息安全管理员（网络安全管理员）职业技能等级认定成绩公示](https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485904&idx=1&sn=6d96f43dddee91afc9402c24cedd2934)\n - [ ] [特朗普签署行政令，TikTok在美封禁风波落幕](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247520250&idx=1&sn=00e37392d16162c92047bb5ac6fd63c1)\n - [ ] [来看雪SDC偶遇，领贴纸~](https://mp.weixin.qq.com/s?__biz=MzU5OTU3NDEzOQ==&mid=2247493212&idx=1&sn=b7fa9b541298e978cb4c6885183b141b)\n - [ ] [CISO指南：如何监控暗网？](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247644062&idx=1&sn=70940ea51e4fb37cd3c7f352c23b459b)\n - [ ] [知识星球 | 2025年“数字化安全”全网报告合集](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247644062&idx=2&sn=ee272ae80cc564453c39493744e2bd1f)\n - [ ] [免费赠送 | 2025国家网络安全宣传周 · 社区街道安全意识公益科普资料合集](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247644062&idx=3&sn=e455e6c9fa2fc2195d678b648d0d5d84)\n - [ ] [如何克服认知偏差做出更好的决策](https://mp.weixin.qq.com/s?__biz=MzkxMDIwMTMxMw==&mid=2247494921&idx=1&sn=5fe1a88f61e37436647e10892e22fad9)\n - [ ] [MITRE ATLAS 深度解析：AI 安全领域的 “攻防宝典”，从威胁实战到防御体系](https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484885&idx=1&sn=af0c41a33d4b931f272283b41e0ba84b)\n - [ ] [筑牢安全基底，护航数智未来 | CCS2025成都网络安全技术交流活动圆满结束](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247550600&idx=1&sn=47f8459938aa20de9f6a66a7e4ad4450)\n - [ ] [诚邀 | Token2049新加坡，倒计时2天！](https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247504639&idx=1&sn=2530e262d3010255b0fa300920941819)\n - [ ] [英国为捷豹路虎提供 15 亿英镑贷款担保，支持其从黑客攻击中恢复](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247543055&idx=1&sn=81372cfd43b9456fa59bb34387e980e6)\n - [ ] [【安全圈】黑客攻陷美国政府的数百台思科防火墙](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=1&sn=0be2a3a03d0d77758c2cf5a158915b5d)\n - [ ] [【安全圈】Medusa勒索软件团伙声称攻击Comcast，索要120万美元赎金](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=2&sn=95ee59e8e4191715f95507ba2d346d3d)\n - [ ] [【安全圈】英国奢侈品百货Harrods确认数据泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=3&sn=594d659c62257470c227186640294541)\n - [ ] [【安全圈】Windows 堆管理曝严重漏洞：记录大小字段缺陷可致任意读写](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=4&sn=e0ad1a3000c871baa19d7c01952c5fc4)\n- Cerbero Blog\n - [ ] [NSIS Format Package](https://blog.cerbero.io/nsis-format-package/)\n- Sandfly Security Blog RSS Feed\n - [ ] [Leaked Chinese (Korea Targeting) Linux Stealth Rootkit Analysis](https://sandflysecurity.com/blog/leaked-north-korean-linux-stealth-rootkit-analysis)\n - [ ] [Sandfly 5.5.4 - Chinese Rootkit Decloaking](https://sandflysecurity.com/blog/sandfly-5-5-4-north-korean-rootkit-decloaking)\n- NVISO Labs\n - [ ] [You name it, VMware elevates it (CVE-2025-41244)](https://blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/)\n- Malwarebytes\n - [ ] [Amazon pays $2.5B settlement over deceptive Prime subscriptions](https://www.malwarebytes.com/blog/news/2025/09/amazon-pays-2-5b-settlement-over-deceptive-prime-subscriptions)\n - [ ] [Sex offenders, terrorists, drug dealers, exposed in spyware breach](https://www.malwarebytes.com/blog/news/2025/09/sex-offenders-terrorists-drug-dealers-exposed-in-spyware-breach)\n - [ ] [A week in security (September 22 – September 28)](https://www.malwarebytes.com/blog/news/2025/09/a-week-in-security-september-22-september-28)\n- HackerNews\n - [ ] [非洲14国260名网恋诈骗嫌疑人落网](https://hackernews.cc/archives/60993)\n - [ ] [研究人员披露传播 CountLoader 与 PureRAT 的钓鱼威胁](https://hackernews.cc/archives/60991)\n - [ ] [勒索软件攻陷启用 MFA 的 SonicWall VPN 账户](https://hackernews.cc/archives/60989)\n - [ ] [伪造微软 Teams 安装程序传播恶意软件](https://hackernews.cc/archives/60986)\n - [ ] [GoAnywhere MFT 漏洞被作为零日漏洞利用](https://hackernews.cc/archives/60983)\n- 奇客Solidot–传递最新科技情报\n - [ ] [阿富汗断网](https://www.solidot.org/story?sid=82454)\n - [ ] [投资财团以 550 亿美元私有化 EA](https://www.solidot.org/story?sid=82453)\n - [ ] [高糖芒果有助于降低糖尿病风险](https://www.solidot.org/story?sid=82452)\n - [ ] [日本公司研发出基于植物的生鱼片](https://www.solidot.org/story?sid=82451)\n - [ ] [RubyGems 社区发生项目控制权争夺战](https://www.solidot.org/story?sid=82450)\n - [ ] [加州公共和共享充电桩数量比加油站多 68%](https://www.solidot.org/story?sid=82449)\n - [ ] [流浪行星发现有极光](https://www.solidot.org/story?sid=82448)\n - [ ] [瑞士周日公投以微弱多数批准电子身份证](https://www.solidot.org/story?sid=82447)\n - [ ] [F-Droid 发表声明反对 Google 验证应用开发者身份的要求](https://www.solidot.org/story?sid=82446)\n - [ ] [Linux 6.17 释出](https://www.solidot.org/story?sid=82444)\n- Shostack & Friends Blog\n - [ ] [Adam Featured on Inside MedTech Innovation](https://shostack.org/blog/medtech-innovation-podcast/)\n- 安全客\n - [ ] [英国发布《网络安全文化原则》：以文化为枢纽的治理再定位](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789137&idx=1&sn=221f1c7039fe628d9f3209073c496723)\n- 我的安全视界观\n - [ ] [SDL 100/100问：针对内部的高中低危漏洞，给业务部门多长时间修复？](https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487368&idx=1&sn=b9c93c7e24a7dcc6c98eee6c544b43b4)\n- 先进攻防\n - [ ] [利用ClickHouse可刷新物化视图进行主动威胁狩猎](https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908737&idx=1&sn=4adb448e6ab0836f4584c9998561aa7a)\n- 看雪学苑\n - [ ] [Vaptcha逆向分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601462&idx=1&sn=1ee2829059d9a82fc6852b4f7bfcaf71)\n - [ ] [Notepad++ 曝漏洞，攻击者可执行任意代码](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601462&idx=2&sn=807a0f406b4a8af86a726759e5838d0a)\n - [ ] [限时¥399！Android逆向内核攻防实战进阶](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601462&idx=3&sn=920423ed3cde7a996e748020458d2f01)\n- 农夫安全团队\n - [ ] [预告](https://mp.weixin.qq.com/s?__biz=MzI0MzQ4NTI1OA==&mid=2247484874&idx=1&sn=9a672f613a811f1c796378604e5c67c6)\n- 天黑说嘿话\n - [ ] [【运维干货】11 项安全设备核心检查要点，筑牢网络防线！](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484680&idx=1&sn=425fd7806c07b5b9cc5ee12467b3a617)\n- 威努特安全网络\n - [ ] [看威努特如何化解医疗数据存储、管理与安全难题？](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651136234&idx=1&sn=5e8cfab5ef633eaeeafbd962115325ce)\n - [ ] [威努特第二代防火墙：智慧校园的“全能护城河”](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651136219&idx=1&sn=a2091c337c5047f22a06b3741a6e6698)\n- 体验盒子\n - [ ] [Nginx 利用 fail2ban 自动封禁乱扫的 IP](https://www.uedbox.com/post/119731/)\n- 代码卫士\n - [ ] [康耐视工业摄像头存在多个漏洞，无补丁](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524096&idx=1&sn=3be22e18653da9e761f0173796619548)\n - [ ] [近80%的英美爱尔兰网安负责人担心未来一年遭国家黑客组织攻击](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524096&idx=2&sn=c3d91d004d434ade0e64f83a4df0e9b9)\n- dotNet安全矩阵\n - [ ] [.NET 中使用 Windows runas 提升进程权限](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500709&idx=1&sn=58caf24a5a1cd91d4ec115f0bd568b87)\n - [ ] [[ .NET 安全代码审计 ] 从零基础到高阶实战，开启漏洞赏金之路](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500709&idx=2&sn=fae6171fcbb43d871c1d9e536325191e)\n - [ ] [.NET内网实战：通过劫持 JIT 内存编译执行ShellCode](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500709&idx=3&sn=f50e8d88f0ed2bc0847b467edfe6977c)\n- 中国信息安全\n - [ ] [专题·原创 | 关于可信数据空间的实践探索与思考](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250221&idx=1&sn=071c223b624bc03612b90c684d756a7e)\n - [ ] [发布 | 携手构建中非网络空间命运共同体行动计划（2025-2026）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250221&idx=2&sn=118c2345cce6503e1df767857ef9faa3)\n - [ ] [专家解读｜张平：构建安全可信可控的AI新生态](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250221&idx=3&sn=36a47b217642d354a3942c3da152726b)\n - [ ] [前沿 | 人工智能时代呼唤网络安全新范式](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250221&idx=4&sn=05663b45f20d04bbe0a12e4d4cf74d50)\n - [ ] [评论 | 治理网络“李鬼”净化医疗科普](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250221&idx=5&sn=12a1bb19b1cb1225f980a8caeeaf0579)\n- 电子物证\n - [ ] [【加拿大数据隐私法律规制】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048630&idx=1&sn=16f7dd16540a6c1094b31db837bbf03b)\n - [ ] [【完善区块链证据举证责任分配规则　保障在线诉讼公平与效率】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048630&idx=2&sn=97e0c22246ab90230dd07d59a2048621)\n- 慢雾科技\n - [ ] [慢雾 Q3 追踪实录：协助被盗客户冻结/追回超百万美元资金](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247503424&idx=1&sn=503fad659926361eeb2520f296c2c83a)\n- 嘶吼专业版\n - [ ] [新型FileFix社工攻击诱导用户安装StealC信息窃取恶意软件](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584780&idx=1&sn=a1a73f0638f77e746ef045826b25ee6e)\n - [ ] [安全动态回顾|全国网安标委：5项网络安全国家标准公开征集参编单位 新型XCSSET macOS恶意软件变种针对Xcode开发者](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584780&idx=2&sn=dc62801fbb8ee9a526bae837ebe08829)\n- 安全圈\n - [ ] [【安全圈】黑客攻陷美国政府的数百台思科防火墙](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=1&sn=0be2a3a03d0d77758c2cf5a158915b5d)\n - [ ] [【安全圈】Medusa勒索软件团伙声称攻击Comcast，索要120万美元赎金](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=2&sn=95ee59e8e4191715f95507ba2d346d3d)\n - [ ] [【安全圈】英国奢侈品百货Harrods确认数据泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=3&sn=594d659c62257470c227186640294541)\n - [ ] [【安全圈】Windows 堆管理曝严重漏洞：记录大小字段缺陷可致任意读写](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071952&idx=4&sn=e0ad1a3000c871baa19d7c01952c5fc4)\n- 腾讯安全威胁情报中心\n - [ ] [情报每周回顾 2025-09-28](https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510908&idx=1&sn=45c20b6e7ef405f3bfff16544bc86ede)\n- 安全牛\n - [ ] [《私有云安全资源池技术与应用研究（2025版）》报告发布（附下载二维码）](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138883&idx=1&sn=115b9839e268ea854363d646a7b0bcca)\n - [ ] [英国将为捷豹路虎提供15亿英镑贷款，帮助其应对网络攻击危机；LockBit卷土重来，更加危险的5.0版本已现身 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138883&idx=2&sn=aedf37d4df04320df13a2cda16667ec6)\n- 极客公园\n - [ ] [Seko AI 想要重新定义短片创作这件事](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653087658&idx=1&sn=0fcfe5e31a69005b389ecccaa0f029d6)\n - [ ] [在云栖，我们遇见了最会玩的「AI 原住民」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653087549&idx=1&sn=f803029c7b73c37807399cfcffec4481)\n - [ ] [OpenAI「降配门」发酵，偷换模型遭全网实锤；小米 SU7 在日本首秀；苹果内部测试类 ChatGPT 应用｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653087570&idx=1&sn=5e7d3c7ad96f837e147d759dcc855480)\n- 补天平台\n - [ ] [双节喜相逢 | 补天平台中秋国庆放假通知](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509397&idx=1&sn=630c0f52b7c3d7cc67f7ea3513acbcc4)\n- 字节跳动技术团队\n - [ ] [Kotlin 与 ArkTS 交互性能与效率优化实践](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247516824&idx=1&sn=22a7a69cfe9891296d15a9bd53f74443)\n- 360数字安全\n - [ ] [别人节前熬夜赶工，你靠AI准点收工](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582313&idx=1&sn=88b2b813df83e313305a51a6e66b1f7e)\n - [ ] [AI长城守护数字丝路: 360大模型安全卫士护航中国—东盟博览会](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582313&idx=2&sn=0a6795f6436a848bced755f413db7b36)\n- 数世咨询\n - [ ] [Top 25 MCP 漏洞揭示： AI 代理可被利用的方式](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540397&idx=1&sn=e6451e98f4da9a4e7a5d4c2aab79fd9a)\n- Security Weekly Podcast Network (Audio)\n - [ ] [Live interviews from Oktane 2025: threats, AI in apps, and AI in cybersecurity tools - Brett Winterford, Shiv Ramji, Damon McDougald - ESW #426](http://sites.libsyn.com/18678/live-interviews-from-oktane-2025-threats-ai-in-apps-and-ai-in-cybersecurity-tools-brett-winterford-shiv-ramji-damon-mcdougald-esw-426)\n- 吴鲁加\n - [ ] [你验证过吗？](https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247485749&idx=1&sn=5c29162ef74e0f3bdd349b69845e537a)\n- ICT Security Magazine\n - [ ] [Forum ICT Security 2025 – Due giornate di evento per ridefinire il futuro della sicurezza digitale in Italia](https://www.ictsecuritymagazine.com/notizie/forum-ict-security-2025-evento-sicurezza-digitale-in-italia/)\n - [ ] [SICUREZZA 2025: la cybersecurity protagonista del Security Day](https://www.ictsecuritymagazine.com/notizie/sicurezza-2025-la-cybersecurity-protagonista-del-security-day/)\n - [ ] [Oltre 400 app false rubano le credenziali Facebook: analisi delle minacce mobili 2022-2025](https://www.ictsecuritymagazine.com/notizie/credenziali-facebook/)\n- 表图\n - [ ] [[译苑雅集Vol. 1]AI 能否修复坏流程？技术 vs 组织惯性的终极辩论](https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247484846&idx=1&sn=0600b4660839f12975e4418580e089b8)\n- Securityinfo.it\n - [ ] [Firewall Cisco sotto attacco: una nuova campagna prende di mira i device ASA](https://www.securityinfo.it/2025/09/29/firewall-cisco-sotto-attacco-una-nuova-campagna-prende-di-mira-i-device-asa/?utm_source=rss&utm_medium=rss&utm_campaign=firewall-cisco-sotto-attacco-una-nuova-campagna-prende-di-mira-i-device-asa)\n - [ ] [CERT-AGID 20–26 settembre: phishing, malware e PEC compromesse](https://www.securityinfo.it/2025/09/29/cert-agid-20-26-settembre-phishing-malware-e-pec-compromesse/?utm_source=rss&utm_medium=rss&utm_campaign=cert-agid-20-26-settembre-phishing-malware-e-pec-compromesse)\n- CNVD漏洞平台\n - [ ] [CNVD漏洞周报2025年第37期](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496385&idx=1&sn=a0679c73ea3175bd731b8631456a480c)\n - [ ] [上周关注度较高的产品安全漏洞(20250922-20250928)](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496385&idx=2&sn=b1f4564d8332222df845ba876c883ff5)\n- SANS Internet Storm Center, InfoCON: green\n - [ ] [Apple Patches Single Vulnerability CVE-2025-43400, (Mon, Sep 29th)](https://isc.sans.edu/diary/rss/32330)\n - [ ] [Increase in Scans for Palo Alto Global Protect Vulnerability (CVE-2024-3400), (Mon, Sep 29th)](https://isc.sans.edu/diary/rss/32328)\n - [ ] [ISC Stormcast For Monday, September 29th, 2025 https://isc.sans.edu/podcastdetail/9632, (Mon, Sep 29th)](https://isc.sans.edu/diary/rss/32326)\n- Troy Hunt's Blog\n - [ ] [Welcoming CERN to Have I Been Pwned](https://www.troyhunt.com/welcoming-cern-to-have-i-been-pwned/)\n- Security Affairs\n - [ ] [UK grants £1.5B loan to Jaguar Land Rover after cyberattack](https://securityaffairs.com/182757/security/uk-grants-1-5b-loan-to-jaguar-land-rover-after-cyberattack.html)\n - [ ] [Harrods alerts customers to new data breach linked to third-party provider](https://securityaffairs.com/182752/data-breach/harrods-alerts-customers-to-new-data-breach-linked-to-third-party-provider.html)\n - [ ] [Akira Ransomware bypasses MFA on SonicWall VPNs](https://securityaffairs.com/182732/cyber-crime/akira-ransomware-bypasses-mfa-on-sonicwall-vpns.html)\n - [ ] [Despite Russian influence, Moldova votes Pro-EU, highlighting future election risks](https://securityaffairs.com/182743/uncategorized/despite-russian-influence-moldova-votes-pro-eu-highlighting-future-election-risks.html)\n - [ ] [Dutch teens arrested for spying on behalf of pro-Russian hackers](https://securityaffairs.com/182724/intelligence/dutch-teens-arrested-for-spying-on-behalf-of-pro-russian-hackers.html)\n- Krypt3ia\n - [ ] [Survivability Over Perfection: A Call for Defense in Depth in the Age of Artificial General Intelligence](https://krypt3ia.wordpress.com/2025/09/29/survivability-over-perfection-a-call-for-defense-in-depth-in-the-age-of-artificial-general-intelligence/)\n - [ ] [SENTRY: A Unified Framework for AI/AGI Risk and Defensive Engineering](https://krypt3ia.wordpress.com/2025/09/29/sentry-a-unified-framework-for-ai-agi-risk-and-defensive-engineering/)\n- Deeplinks\n - [ ] [Towards the 10th Summit of the Americas: Concerns and Recommendations from Civil Society](https://www.eff.org/deeplinks/2025/09/towards-10th-summit-americas-concerns-and-recommendations-civil-society)\n - [ ] [EFF Urges Virgina Court of Appeals to Require Search Warrants to Access ALPR Databases](https://www.eff.org/deeplinks/2025/09/eff-urges-virgina-court-appeals-require-search-warrants-access-alpr-databases)\n - [ ] [Chat Control Is Back on the Menu in the EU. It Still Must Be Stopped](https://www.eff.org/deeplinks/2025/09/chat-control-back-menu-eu-it-still-must-be-stopped-0)\n - [ ] [After Years Behind Bars, Alaa Is Free at Last](https://www.eff.org/deeplinks/2025/09/after-years-behind-bars-alaa-free-last)\n- The Hacker News\n - [ ] [EvilAI Malware Masquerades as AI Tools to Infiltrate Global Organizations](https://thehackernews.com/2025/09/evilai-malware-masquerades-as-ai-tools.html)\n - [ ] [⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & More](https://thehackernews.com/2025/09/weekly-recap-cisco-0-day-record-ddos.html)\n - [ ] [The State of AI in the SOC 2025 - Insights from Recent Study](https://thehackernews.com/2025/09/the-state-of-ai-in-soc-2025-insights.html)\n - [ ] [Microsoft Flags AI-Driven Phishing: LLM-Crafted SVG Files Outsmart Email Security](https://thehackernews.com/2025/09/microsoft-flags-ai-driven-phishing-llm.html)\n - [ ] [First Malicious MCP Server Found Stealing Emails in Rogue Postmark-MCP Package](https://thehackernews.com/2025/09/first-malicious-mcp-server-found.html)\n- Over Security - Cybersecurity news aggregator\n - [ ] [UK convicts \"Bitcoin Queen\" in world’s largest cryptocurrency seizure](https://www.bleepingcomputer.com/news/security/uk-convicts-bitcoin-queen-in-worlds-largest-cryptocurrency-seizure/)\n - [ ] [Chinese scammer pleads guilty after UK seizes nearly $7 billion in bitcoin](https://therecord.media/chinese-scammer-guilty-seizure-uk)\n - [ ] [Japan's largest brewer suspends operations due to cyberattack](https://www.bleepingcomputer.com/news/security/japans-largest-brewer-suspends-operations-due-to-cyberattack/)\n - [ ] [Ransomware gang sought BBC reporter’s help in hacking media giant](https://www.bleepingcomputer.com/news/security/ransomware-gang-sought-bbc-reporters-help-in-hacking-media-giant/)\n - [ ] [European AI company’s ‘reputation reports’ are inaccurate and illegal, watchdog claims](https://therecord.media/reputation-reports-data-broker-noyb-complaint-lithuania)\n - [ ] [UK govt backs JLR with £1.5 billion loan guarantee after cyberattack](https://www.bleepingcomputer.com/news/security/uk-govt-backs-jlr-with-15-billion-loan-guarantee-after-cyberattack/)\n - [ ] [UK government to be guarantor for Jaguar Land Rover loan as it recovers from cyberattack](https://therecord.media/jaguar-land-rover-loan-guarantor-cyberattack)\n - [ ] [Ukraine’s digital chief pushes for AI-first state amid war and cyber threats](https://therecord.media/ukraine-ai-state-digital)\n - [ ] [Brave launches 'Ask Brave' feature to fuse AI with traditional search](https://www.bleepingcomputer.com/news/artificial-intelligence/brave-launches-ask-brave-feature-to-fuse-ai-with-traditional-search/)\n - [ ] [From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion](https://thedfirreport.com/2025/09/29/from-a-single-click-how-lunar-spider-enabled-a-near-two-month-intrusion/)\n - [ ] [Data breach nei firewall Cisco usati da enti governativi Usa: tre linee di riflessione](https://www.cybersecurity360.it/nuove-minacce/data-breach-nei-firewall-cisco-usati-da-enti-governativi-usa-tre-linee-di-riflessione/)\n - [ ] [Finte multe PagoPA: quando il cyber criminale si traveste da poliziotto](https://www.cybersecurity360.it/nuove-minacce/finte-multe-pagopa-quando-il-cyber-criminale-si-traveste-da-poliziotto/)\n - [ ] [Law enforcement is using AI to synthesize evidence. Is the justice system ready for it?](https://therecord.media/law-enforcement-ai-platforms-synthesize-evidence-criminal-cases)\n - [ ] [Harrods suffers new data breach exposing 430,000 customer records](https://www.bleepingcomputer.com/news/security/harrods-suffers-new-data-breach-exposing-430-000-customer-records/)\n - [ ] [ChatGPT tests free trial for paid plans, rolls out cheaper Go in more regions](https://www.bleepingcomputer.com/news/artificial-intelligence/chatgpt-tests-free-trial-for-paid-plans-rolls-out-cheaper-go-in-more-regions/)\n - [ ] [Can We Trust AI To Write Vulnerability Checks? Here's what we found](https://www.bleepingcomputer.com/news/security/can-we-trust-ai-to-write-vulnerability-checks-heres-what-we-found/)\n - [ ] [Moldova’s pro-EU party wins election amid cyberattacks, Kremlin interference](https://therecord.media/moldova-election-pro-eu-party-wins-ddos-incidents-influence-ops)\n - [ ] [Firewall Cisco sotto attacco: una nuova campagna prende di mira i device ASA](https://www.securityinfo.it/2025/09/29/firewall-cisco-sotto-attacco-una-nuova-campagna-prende-di-mira-i-device-asa/)\n - [ ] [OpenAI is routing GPT-4o to safety models when it detects harmful activities](https://www.bleepingcomputer.com/news/artificial-intelligence/openai-is-routing-gpt-4o-to-safety-models-when-it-detects-harmful-activities/)\n - [ ] [Cloud e cyber security nelle PMI: le nuove risorse del Mimit per rafforzare la resilienza digitale](https://www.cybersecurity360.it/cybersecurity-nazionale/cloud-e-cyber-security-nelle-pmi-le-nuove-risorse-del-mimit-per-rafforzare-la-resilienza-digitale/)\n - [ ] [La frode SEO cinese e l’ascesa silenziosa di GhostRedirector](https://www.cybersecurity360.it/nuove-minacce/la-frode-seo-cinese-e-lascesa-silenziosa-di-ghostredirector/)\n - [ ] [Nuova variante del malware XCSSET prende di mira gli sviluppatori Xcode su macOS](https://www.securityinfo.it/2025/09/26/nuova-variante-del-malware-xcsset-prende-di-mira-gli-sviluppatori-xcode-su-macos/)\n - [ ] [Gap analysis e piano di azione per trasformare il Framework nazionale cyber in azione misurabile](https://www.cybersecurity360.it/legal/gap-analysis-e-piano-di-azione-e-milestone-per-trasformare-il-fncdp-2-1-in-azione-misurabile/)\n - [ ] [CERT-AGID 20–26 settembre: phishing, malware e PEC compromesse](https://www.securityinfo.it/2025/09/29/cert-agid-20-26-settembre-phishing-malware-e-pec-compromesse/)\n- Schneier on Security\n - [ ] [Abusing Notion’s AI Agent for Data Theft](https://www.schneier.com/blog/archives/2025/09/abusing-notions-ai-agent-for-data-theft.html)\n- Daniel Miessler\n - [ ] [Do Humans Really Have World Models?](https://danielmiessler.com/blog/humans-dont-have-world-model?utm_source=rss&utm_medium=feed&utm_campaign=website)\n"}}}}