更隐蔽的白利用：基于执行追踪的可注入点与代码空洞自动化挖掘
更隐蔽的白利用：基于执行追踪的可注入点与代码空洞自动化挖掘
2026-06-06 归档
今日共收录 1443 条安全情报，包含 665 个 CVE，387 篇安全通告，以及 120 篇研究论文。
← 返回归档列表AGENT-MINER：攻击通用 AI 智能体与自动化风险挖掘
AGENT-MINER：攻击通用 AI 智能体与自动化风险挖掘
协同作战：甲方视角的体系化 AI 渗透实践
协同作战：甲方视角的体系化 AI 渗透实践
LLMDYara：面向恶意文件检测的可解释 YARA 规则自动生成系统
LLMDYara：面向恶意文件检测的可解释 YARA 规则自动生成系统
[原创]浅析libFairGuard.so保护方案
[原创]浅析libFairGuard.so保护方案
[原创]某企业加固dex vmp简单分析
[原创]某企业加固dex vmp简单分析
[原创]使用AI分析还原TikTok X-Gnarly,X-Bogus
[原创]使用AI分析还原TikTok X-Gnarly,X-Bogus
[原创]某APP设备风控分析及绕过
[原创]某APP设备风控分析及绕过
[原创]逆向时长两年半的ai实习生: large-text-viewer-mcp
[原创]逆向时长两年半的ai实习生: large-text-viewer-mcp
[原创]某旅行 App 基于 LR 劫持的 ARM64 控制流混淆逆向分析
[原创]某旅行 App 基于 LR 劫持的 ARM64 控制流混淆逆向分析
Reporting from Vegas: Networking, AI, and good boys
Joe’s on-the-ground report from Cisco Live U.S. is here, complete with therapy dog pictures and tips on handling confere
The Evil MSI Background is Back!, (Fri, Jun 5th)
A few months ago, I wrote a diary about a payload that was embedded into a JPEG picture. It was a MSI-branded background
ISC Stormcast For Friday, June 5th, 2026 https://isc.sans.edu/podcastdetail/9960, (Fri, Jun 5th)
ISC Stormcast For Friday, June 5th, 2026 https://isc.sans.edu/podcastdetail/9960, (Fri, Jun 5th)
Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps
Arabic-speaking users have emerged as the target of a new Android spyware codenamed Asin, according to findings from ESE
New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Framework
Cybersecurity researchers have discovered a previously unreported threat cluster dubbed OP-512 (where "OP" stands for "o
Only 10% of SOCs Say They’re Getting Excellent Value From AI. Here’s What the Second Wave Has to Deliver
Eighteen months ago, the AI SOC was a marketing line. Today it's a budget item. The category has crossed over from inter
FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins
Security researchers and the FBI are warning that a wave of FIFA-themed fraud is already hitting World Cup 2026 fans, da
OWASP Incubator Project Helps Developers Find and Fix Vulnerable Dependencies in Seconds
CVE Lite CLI is a free, open-source command line tool that scans your projects in seconds and tells you exactly which in
Hackers Leak DentaQuest Information Impacting 2.6 Million
The ShinyHunters extortion group leaked roughly 234 GB of data allegedly stolen from the dental benefits administrator.
Chrome 149 Patches 429 Vulnerabilities
Over 100 bugs are critical or high-severity, mainly use-after-free and insufficient validation of untrusted input flaws.