2026-05-08 归档

今日共收录 1100 条安全情报,包含 294 个 CVE,452 篇安全通告,以及 61 篇研究论文。

← 返回归档列表
威胁情报2026-05-08 发布INFO

[原创] [全网首创] AI 能抓移动端包了?Claude MCP 实现 Android 全链路流量分析

[原创] [全网首创] AI 能抓移动端包了?Claude MCP 实现 Android 全链路流量分析

历史摘要 · 未重新核验 · 看雪

威胁情报2026-05-08 发布INFO

[原创]unidbg直接调用tiktok so生成签名

[原创]unidbg直接调用tiktok so生成签名

历史摘要 · 未重新核验 · 看雪

威胁情报2026-05-08 发布INFO

[下载]IDA Pro 9.0汉化版本

[下载]IDA Pro 9.0汉化版本

历史摘要 · 未重新核验 · 看雪

威胁情报2026-05-08 发布INFO

[转帖]0基础C/C++逆向32位/64位游戏外挂编写-过保护-驱动开发视频教程

[转帖]0基础C/C++逆向32位/64位游戏外挂编写-过保护-驱动开发视频教程

历史摘要 · 未重新核验 · 看雪

威胁情报2026-05-08 发布INFO

[原创]Android 逆向:JNI 函数地址怎么找?如何绕过防护?

[原创]Android 逆向:JNI 函数地址怎么找?如何绕过防护?

历史摘要 · 未重新核验 · 看雪

威胁情报2026-05-08 发布INFO

[原创]某手游逆向全流程复盘:从 IL2CPP Dump 到 TCP 握手协议还原

[原创]某手游逆向全流程复盘:从 IL2CPP Dump 到 TCP 握手协议还原

历史摘要 · 未重新核验 · 看雪

威胁情报2026-05-08 发布INFO

[分享]分析libmsaoaidsec.so的frida反调试

[分享]分析libmsaoaidsec.so的frida反调试

历史摘要 · 未重新核验 · 看雪

威胁情报2026-05-08 发布INFO

[分享] 全版本 ntoskrnl 任意函数 offset 打包提取/工具

[分享] 全版本 ntoskrnl 任意函数 offset 打包提取/工具

历史摘要 · 未重新核验 · 看雪

威胁情报2026-05-08 发布INFO

[原创]从2026CCB决赛堆题CreditMarket学习Glibc2.39后ptmalloc的机制更新

[原创]从2026CCB决赛堆题CreditMarket学习Glibc2.39后ptmalloc的机制更新

历史摘要 · 未重新核验 · 看雪

威胁情报2026-05-07 发布INFO

Unplug your way to better code

Cybersecurity concepts — logs, packets, DNS exfiltration, and more — are usually intangible, and its practitioners are p

历史摘要 · 未重新核验 · Cisco Talos

威胁情报2026-05-08 发布INFO

ISC Stormcast For Friday, May 8th, 2026 https://isc.sans.edu/podcastdetail/9924, (Fri, May 8th)

ISC Stormcast For Friday, May 8th, 2026 https://isc.sans.edu/podcastdetail/9924, (Fri, May 8th)

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-05-07 发布INFO

Day Zero Readiness: The Operational Gaps That Break Incident Response

Having an incident response retainer, or even a pre-approved external incident response firm, is not the same as being r

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-05-07 发布INFO

PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux

Cybersecurity researchers have discovered three packages on the Python Package Index (PyPI) repository that are designed

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-05-07 发布INFO

vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution

A dozen critical security vulnerabilities have been disclosed in the vm2 Node.js library that could be exploited by bad

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-05-07 发布INFO

Worries About AI’s Risks to Humanity Loom Over the Trial Pitting Musk Against OpenAI’s Leaders

Musk said that he could have founded OpenAI as a for-profit company, just like the other companies he started or took ov

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-07 发布INFO

Boost Security Raises $4 Million for SDLC Defense Platform

The company is expanding its platform’s capabilities with the acquisition of SecureIQx and Korbit.ai. The post Boost Sec

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-07 发布INFO

Claude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking

Mitiga researchers say attackers can silently redirect Claude Code MCP traffic, intercept OAuth tokens, and maintain per

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-07 发布INFO

Chrome 148 Rolls Out With 127 Security Fixes

The fresh browser update resolves critical-severity integer overflow and use-after-free vulnerabilities. The post Chrome

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-07 发布INFO

Attackers Could Exploit AI Vision Models Using Imperceptible Image Changes

Cisco’s AI security researchers have analyzed ways to target vision-language models (VLMs) using pixel-level perturbatio

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-07 发布INFO

Cisco Patches High-Severity Vulnerabilities in Enterprise Products

Successful exploitation of the flaws could lead to code execution, server-side request forgery attacks, and denial-of-se

历史摘要 · 未重新核验 · SecurityWeek