网络安全信息与动态周报-2026年第23期
网络安全信息与动态周报-2026年第23期
2026-07-16 归档
今日共收录 1958 条安全情报，包含 992 个 CVE，550 篇安全通告，以及 113 篇研究论文。
← 返回归档列表网络安全信息与动态周报-2026年第22期
网络安全信息与动态周报-2026年第22期
利用 PEP 517 构建后端钩子在 Python 依赖安装期执行任意代码
利用 PEP 517 构建后端钩子在 Python 依赖安装期执行任意代码
当反向代理成了跳板：Varnish VCL 注入与 SSRF 内网穿透实战
当反向代理成了跳板：Varnish VCL 注入与 SSRF 内网穿透实战
herdr Agent主导:自动化逆向5款安卓检测器,内核级绕过实战
herdr Agent主导:自动化逆向5款安卓检测器,内核级绕过实战
[原创]某品牌电动牙刷小程序"越权控制"逆向
[原创]某品牌电动牙刷小程序"越权控制"逆向
防得最狠的地方往往最不值钱--xx总结
防得最狠的地方往往最不值钱--xx总结
[原创]一加ACE5至尊版 kernel 6.6.89尝试利用GhostLock / IonStack 进行root提权
[原创]一加ACE5至尊版 kernel 6.6.89尝试利用GhostLock / IonStack 进行root提权
“Sentry” 反调试和环境检测的一个开源项目
“Sentry” 反调试和环境检测的一个开源项目
[原创]无需解密页帧中的进程结构来获取真实CR3
[原创]无需解密页帧中的进程结构来获取真实CR3
[原创]基于VT EPT的无痕断点无痕hook原理及其应用
[原创]基于VT EPT的无痕断点无痕hook原理及其应用
Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for July 2026, which includes 622 vulnerabilities affecting a range o
ISC Stormcast For Wednesday, July 15th, 2026 https://isc.sans.edu/podcastdetail/10008, (Wed, Jul 15th)
ISC Stormcast For Wednesday, July 15th, 2026 https://isc.sans.edu/podcastdetail/10008, (Wed, Jul 15th)
Recent DShield SIEM Update, (Tue, Jul 14th)
The last update to the DShield SIEM [4] was in Sep 2025 which contained some minor tweaks. This update currently is usin
Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack
Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already
Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads
Any other browser extension that can run a script on claude.ai can still trigger Claude for Chrome tasks aimed at your G
LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts
Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan (RAT) codenamed LabubaR
Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days
Two flaws in Active Directory and SharePoint Server have been exploited as zero-days, and a BitLocker bug was publicly d
Synopsys Finds No Evidence of Data Breach Amid Bosch Hack Claims
The D1R cybercrime group claimed to have stolen valuable data from Synopsys and Bosch, threatening to leak it unless a r
Adobe Patches Critical ColdFusion Vulnerabilities
The ColdFusion security defects could allow attackers to execute arbitrary code or elevate their privileges. The post Ad