Repository navigation
[每日信息流] 2026-09-23 #1373
Description
每日安全资讯（2026-09-23）
- Private Feed for M09Ic
- strands-agents released harness-cli/v0.1.1 at strands-agents/harness-sdk
- bolucat released 202609222307 at bolucat/Archive
- mgeeky starred tensorflow/playground
- spf13 starred wassermanproductions/blockout
- strands-agents released python/v1.57.0 at strands-agents/harness-sdk
- anthropics released v2.1.280 at anthropics/claude-code
- spf13 forked spf13/kit from kenn-io/kit
- esrrhs starred Netease-Games-AI-Lab-Guangzhou/realikun
- chainreactors released v1.0.0-rc5 at chainreactors/cyber-harness
- WAY29 starred open-telemetry/opentelemetry-go-compile-instrumentation
- niudaii starred abue-ammar/tinycast
- timwhitez starred MiniMax-AI/minimax-code
- mgeeky starred boydhacks/ntlmscout
- niudaii starred getpaseo/paseo
- pydantic released v2.47.0 at pydantic/pydantic-ai
- SecWiki News
- Doonsec's feed
- 字节半年营收8000亿，快追上阿里腾讯总和了，但我更怕另一件事
- 当黑客交给AI Agent干活：拿下每个目标仅需 25 美元
- 我用AI辅助挖了三个月SRC，聊聊哪些环节真能省时间
- 10月17日专题会议：系统安全与基础设施防御学术会议
- 共鉴网安学术力量｜2026年度《网络空间安全科学学报》优秀论文投票正式开启
- 王小洪在全国公安机关视频会议上强调 深入学习贯彻习近平总书记重要回信精神 坚决扛牢守百姓幸福护家国平安重任
- 长鑫存储上海技术岗，月薪税前5.7W，年终奖4个月，算下来税前年薪91W+，加上补贴奖金妥妥破百万。
- 【已复现】CVE-2026-65660 Microsoft SharePoint 远程代码执行漏洞
- 院士领航、产研协同：首届中国网络空间安全大会在合肥举办
- 关注 | “两高”联合发布依法惩治网络食品安全犯罪典型案例
- 守护智能时代网络安全——2026年国家网络安全宣传周综述
- 通报 | CNCERT通报2026年人工智能大模型安全众测活动典型漏洞风险
- 遇见、速聊、kim……这31款App涉诈情况突出！
- 关注 | 北京交通APP、猎聘、新浪财经……这82款App违法违规收集使用个人信息被通报！
- 点击“关闭”，反而触发更多弹窗？关个APP广告咋这么难
- Qiko3.0 全行业征集首测用户!
- 一大波AI+新品发布，速来！
- 分享的图片、视频、链接
- 喜迎中秋，欢度国庆AiScan-N 集成200+ 安全能力的工作台！零基础也能上手从聊天到脱壳|CTF网络安全大赛|搭配本地大模型可无需访问互联网
- Hacking Articles
- obaby 𝐢𝐧⃝ void
- Recent Commits to cve:main
- ElcomSoft blog
- Microsoft Security Blog
- Horizon3
- Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- LOLRMM
- antidbg
- EntraTrace
- osiris
- java-html-sanitizer v20260921.1
- paperweight v0.7.0
- PrivescCheck v2026.09.21-1
- libsrtp v2.8.1
- mailcow-dockerized v2026-09
- emba v2.0.4-summer_edition
- mvt v2026.9.21
- MSRKit
- PureRAT-msbuild.exe--C2-Extraction--Net-Evasion-Analysis
- pentest-harness
- shannon v3.3.0
- dbeaver v26.2.1
- Argus
- Podroid v1.2.9
- zitadel v4.18.0
- secretive v4.0.0
- AADOutsider-py
- OneDrive-UDC2
- ai-ctf
- radioguard
- BigDiskBuster
- njsscan v1.0.1
- kviklet v0.9.0
- ship-safe v10.1.0
- Mobile-Security-Framework-MobSF v4.5.3
- opensoho v0.15.2
- kube-monkey v0.7.0
- aquaman v0.15.0
- Lenny Zeltser
- Reverse Engineering
- Malwarebytes
- 奇客Solidot–传递最新科技情报
- Panda's Blog
- HackerNews
- 腾讯玄武实验室
- 微步在线研究响应中心
- 威努特安全网络
- 雷神众测
- Shostack & Friends Blog
- 黑鸟
- 安全内参
- 安全分析与研究
- 代码卫士
- 奇安信 CERT
- 中国信息安全
- 微步在线
- 数世咨询
- 长亭科技
- 白帽100安全攻防实验室
- 默安科技
- 看雪学苑
- 安全圈
- 安全客
- 安全牛
- 极客公园
- 火绒安全
- 复旦白泽战队
- 奇安信威胁情报中心
- 慢雾科技
- 美团安全应急响应中心
- 云鼎实验室
- 字节跳动技术团队
- 吴鲁加
- 字节跳动安全中心
- OnionSec
- 情报分析师
- T00ls安全
- 美团技术团队
- Over Security
- Rogue external MFA providers can steal passwords during logins
- Sweden fines Miljödata $183,000 over breach affecting 2.2 million
- Chinese hackers exploit multiple technologies to steal govt data
- Process Parameter Poisoning: Inside a Novel EDR Evasion Technique
- Canadian regulator opens probe of IDScan for allegedly violating data privacy laws
- ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach
- New ClosedQuorum Windows malware uses AI for attack decisions
- Reducing shadow IT visibility gaps with Wazuh
- Check Point warns of Management Server zero-day exploited in attacks
- Two arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals
- Cyber Asset Management: perché la resilienza inizia dalla conoscenza degli asset
- Automazione nella cyber security: quando non fidarsi della macchina diventa un rischio
- EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts
- Supervisione indipendente e sicurezza dei sistemi di AI: cosa cambia con l’ordine esecutivo della California
- PAYLOAD, il ransomware che trasforma Active Directory in strumento d’attacco
- AI is set to help cyber attackers much more than defenders, says UK official
- D-Link warns of max severity zero-day bug in DIR-822A routers
- Webinar tomorrow: Inside real-world Google Workspace breaches
- Russia's internet shutdowns disrupt warnings about incoming drone attacks
- CSuite Targets US and EU Organizations with Device-Code Phishing and Remote Access
- Incogni Unlimited cancella i dati personali dal web
- New Windows Defender zero-day blocks Microsoft antivirus updates
- Introducing CAIRN: Frontier tracking for AI-integrated malware
- The Closed Quorum: Inside the first reported autonomous AI C2 implant
- LimeLeads - 17,838,396 breached accounts
- Rapporto CRIF 2026: il cybercrime non ruba più solo credenziali, costruisce identità digitali
- CISA orders feds to patch Zyxel flaw exploited for data theft
- Google Faces €403 Million GDPR Fine Over Location Tracking
- Belgian Sports Federations Hit by Cyberattacks, Data Under Investigation
- EU Cybersecurity Response Hampered by Critical Information Gaps
- India’s DoT Warns Citizens Over SIM Fraud and IMEI Tampering
- August 2026 Cyber Attacks Statistics
- August 2026 Cyber Attacks Statistics Infographic
- Piano ispettivo del Garante privacy: dalle nuove tecnologie ai data breach, le priorità per le imprese
- An Italian Phishing Campaign Delivering an iOS Exploit Chain
- Soggetti vulnerabili e GDPR: i limiti di anonimato e riservatezza nei servizi di ascolto
- D3Lab
- ICT Security Magazine
- Daniel Miessler
- The Hacker News
- Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
- WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
- Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials
- Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises
- Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
- Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
- AI Agents Are Rewriting the Rules of Lateral Movement
- New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups
- DORA Year Two: Can Your SOC Actually See the Attack?
- New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
- SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
- Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal
- SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing
- One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
- WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session
- Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access
- Instapaper: Unread
- AutisticiInventati is gone, and it proved who really controls the internet
- Cybersicurezza, startup italiana sfrutta l’AI per trovare le frodi tributarie. Ma un reato si può predire
- IoT Forensics on the Rise Extracting More Apple Watch, Apple TV 4K Devices
- DORA, la filiera sotto esame cosa deve verificare il CdA
- Rapporto CRIF 2026 il cybercrime non ruba più solo credenziali, costruisce identità digitali
- Cybersecurity in sanità quando un attacco mette a rischio le cure
- The Hacker Myth Why Real Cyber Operations Rarely Look Like Movies
- SANS Internet Storm Center, InfoCON: green
- Schneier on Security
- Have I Been Pwned latest breaches
- KitPloit - PenTest Tools!
- LOLRMM
- antidbg
- EntraTrace
- osiris
- java-html-sanitizer v20260921.1
- paperweight v0.7.0
- PrivescCheck v2026.09.21-1
- libsrtp v2.8.1
- mailcow-dockerized v2026-09
- emba v2.0.4-summer_edition
- mvt v2026.9.21
- MSRKit
- PureRAT-msbuild.exe--C2-Extraction--Net-Evasion-Analysis
- pentest-harness
- shannon v3.3.0
- dbeaver v26.2.1
- Argus
- Podroid v1.2.9
- zitadel v4.18.0
- secretive v4.0.0
- AADOutsider-py
- OneDrive-UDC2
- ai-ctf
- radioguard
- BigDiskBuster
- njsscan v1.0.1
- kviklet v0.9.0
- ship-safe v10.1.0
- Mobile-Security-Framework-MobSF v4.5.3
- opensoho v0.15.2
- kube-monkey v0.7.0
- aquaman v0.15.0
- Blackhat Library: Hacking techniques and research
- www.theregister.com - Articles
- Windows CLOSEDQUORUM malware uses AI models to autonomously select post-compromise actions
- ShinyHunters claims FBI hack: 'This is NOT financially motivated'
- NightmareEclipse's latest zero-day leaves Microsoft Defender stuck in the past
- Z.ai says sorry for slurping up your code, open sources ZCode
- UK cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites
- Who signed off on that AI agent? Nobody? Thought so.
- TorrentFreak
- Full Disclosure
- Code Security Review tool
- HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)
- CFP No cON Name 2k26 - Palma, Mallorca - Spain
- CVE-2026-17613: Penpot cross-team file takeover via import-binfile (unpatched in 2.17.2)
- CVE-2026-44756: Pre-Auth RCE in SAP EPP Processing (ICM, Web Dispatcher, disp+work)
- [0day-rubbish] TigerGraph Community Edition 4.2.4 Default credentials plus GSQL TO_CSV arbitrary file write to SSH code execution (9.8)
- [0day-rubbish] Teltonika RutOS 00.07.06.21 Authenticated ipsec.lua logread command injection with reflected output (8.8)
- APPLE-SA-09-14-2026-10 Xcode 27
- APPLE-SA-09-14-2026-9 Safari 27
- APPLE-SA-09-14-2026-8 visionOS 27
- APPLE-SA-09-14-2026-7 watchOS 27
- APPLE-SA-09-14-2026-6 tvOS 27
- APPLE-SA-09-14-2026-5 macOS Sequoia 15.8
- APPLE-SA-09-14-2026-4 macOS Tahoe 26.7
- APPLE-SA-09-14-2026-3 macOS Golden Gate 27
- Tor Project blog
- Security Affairs
- Check Point Fixes a New Actively Exploited Critical Security Flaw
- Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day
- Public PoC Exposes Critical Veeam Agent Privilege Escalation
- U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog
- Contagious Interview: 30,000 devices infected by a fake job interview
- NetSPI
- Security Weekly Podcast Network (Audio)
Activity