网络安全信息与动态周报-2026年第22期
网络安全信息与动态周报-2026年第22期
2026-07-15 归档
今日共收录 995 条安全情报，包含 81 个 CVE，528 篇安全通告，以及 87 篇研究论文。
← 返回归档列表利用 PEP 517 构建后端钩子在 Python 依赖安装期执行任意代码
利用 PEP 517 构建后端钩子在 Python 依赖安装期执行任意代码
当反向代理成了跳板：Varnish VCL 注入与 SSRF 内网穿透实战
当反向代理成了跳板：Varnish VCL 注入与 SSRF 内网穿透实战
herdr Agent主导:自动化逆向5款安卓检测器,内核级绕过实战
herdr Agent主导:自动化逆向5款安卓检测器,内核级绕过实战
[原创]某品牌电动牙刷小程序"越权控制"逆向
[原创]某品牌电动牙刷小程序"越权控制"逆向
防得最狠的地方往往最不值钱--xx总结
防得最狠的地方往往最不值钱--xx总结
[原创]一加ACE5至尊版 kernel 6.6.89尝试利用GhostLock / IonStack 进行root提权
[原创]一加ACE5至尊版 kernel 6.6.89尝试利用GhostLock / IonStack 进行root提权
[原创]基于 GLM-5.2 的 X-Gnarly (332位) 纯算还原分析
[原创]基于 GLM-5.2 的 X-Gnarly (332位) 纯算还原分析
[原创]某企业壳底层对抗与内核级脱壳机定制实战记录
[原创]某企业壳底层对抗与内核级脱壳机定制实战记录
AI Security Report 2026
For years, the cyber security industry tracked AI as a force multiplier: something that made existing attack techniques
ISC Stormcast For Tuesday, July 14th, 2026 https://isc.sans.edu/podcastdetail/10006, (Tue, Jul 14th)
ISC Stormcast For Tuesday, July 14th, 2026 https://isc.sans.edu/podcastdetail/10006, (Tue, Jul 14th)
CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks
Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that's capable of harvesting
“Sentry” 反调试和环境检测的一个开源项目
“Sentry” 反调试和环境检测的一个开源项目
[原创]无需解密页帧中的进程结构来获取真实CR3
[原创]无需解密页帧中的进程结构来获取真实CR3
[原创]基于VT EPT的无痕断点无痕hook原理及其应用
[原创]基于VT EPT的无痕断点无痕hook原理及其应用
[Video] Where protection starts: Cisco Talos Intelligence Integrations
Every day, defenders make high-consequence decisions with incomplete information. Learn how Cisco Talos Intelligence Int
The serpent’s tongue: Luring the Python out of its den
This blog examines the full lifecycle of a Python package, from hosting on repositories such as PyPI or custom web serve
ISC Stormcast For Wednesday, July 15th, 2026 https://isc.sans.edu/podcastdetail/10008, (Wed, Jul 15th)
ISC Stormcast For Wednesday, July 15th, 2026 https://isc.sans.edu/podcastdetail/10008, (Wed, Jul 15th)
Recent DShield SIEM Update, (Tue, Jul 14th)
The last update to the DShield SIEM [4] was in Sep 2025 which contained some minor tweaks. This update currently is usin
Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack
Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already