[原创]论一种无show情况下从堆到劫持执行流的方法
[原创]论一种无show情况下从堆到劫持执行流的方法
2026-06-23 归档
今日共收录 1003 条安全情报，包含 243 个 CVE，376 篇安全通告，以及 99 篇研究论文。
← 返回归档列表[原创]如何避免窗口被游戏反作弊误杀以及替代方案
[原创]如何避免窗口被游戏反作弊误杀以及替代方案
Android Binder 拦截实战：从源码调试到对抗分析（详）
Android Binder 拦截实战：从源码调试到对抗分析（详）
ISC Stormcast For Monday, June 22nd, 2026 https://isc.sans.edu/podcastdetail/9980, (Mon, Jun 22nd)
ISC Stormcast For Monday, June 22nd, 2026 https://isc.sans.edu/podcastdetail/9980, (Mon, Jun 22nd)
Texas Parks & Wildlife Data Breach Affects 3 Million Individuals
Hackers stole personal information after breaching the systems of a third-party license vendor serving TPWD. The post Te
阿里云先知团队招聘AI攻防安全专家
阿里云先知团队招聘AI攻防安全专家
[原创][开源]OpenSecurity：AI 驱动的多领域安全自动分析 Agent 平台
[原创][开源]OpenSecurity：AI 驱动的多领域安全自动分析 Agent 平台
[原创] Pixel6 16系统降级14
[原创] Pixel6 16系统降级14
[原创]开源-自写调试器 Win32 VEH 硬件CR7 实现读写访问异常
[原创]开源-自写调试器 Win32 VEH 硬件CR7 实现读写访问异常
[原创]Claude Cowork 全自动跑通：海外加固 DexProtector 反 Frida 检测绕过实战
[原创]Claude Cowork 全自动跑通：海外加固 DexProtector 反 Frida 检测绕过实战
22nd June – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 22nd June, please download our Threat Intelligence Bulletin
ISC Stormcast For Tuesday, June 23rd, 2026 https://isc.sans.edu/podcastdetail/9982, (Tue, Jun 23rd)
ISC Stormcast For Tuesday, June 23rd, 2026 https://isc.sans.edu/podcastdetail/9982, (Tue, Jun 23rd)
Webshells Remain Popular, (Mon, Jun 22nd)
Webshells have been popular for a long time. We already covered this topic across multiple diaries[1][2]. I spent some t
OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws
OpenAI on Monday said it's releasing an improved version of its GPT‑5.5‑Cyber model to trusted defenders as part of the
Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic workflow platfo
29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
A heap over-read in the Squid web proxy can leak another user's cleartext HTTP request, including any credentials or ses
New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer
Cybersecurity researchers have disclosed details of a new campaign that delivers CastleStealer by means of a previously
Stop Your Legacy Infrastructure from Hijacking Your AI Agents
Earlier this month, I spoke at the Gartner Security & Risk Management Summit about a blind spot most security programs a
Decades-Old Squid Proxy Flaw ‘Squidbleed’ Can Expose User Data
Squidbleed, discovered with the aid of Claude Mythos Preview, has been described as a Heartbleed-style vulnerability. T
Attackers Exploit Gravity SMTP Plugin Flaw to Harvest Valuable WordPress Data
Vulnerable WordPress plugin iterations leak API keys, secrets, tokens, server information, and other data. The post Atta