GOT/PLT 惰性绑定与 setuid 程序导入函数劫持
GOT/PLT 惰性绑定与 setuid 程序导入函数劫持
2026-08-11 归档
今日共收录 1506 条安全情报，包含 770 个 CVE，368 篇安全通告，以及 83 篇研究论文。
← 返回归档列表[原创]hitcon-2017-babyfirst-revenge （看雪ctf版）writeup
[原创]hitcon-2017-babyfirst-revenge （看雪ctf版）writeup
Directus 文件导入 SSRF：官方只修了一半，剩下 4 个盲区
Directus 文件导入 SSRF：官方只修了一半，剩下 4 个盲区
【AI安全】Agent 执行时间窗风险：TOCTOU 点击劫持分析
【AI安全】Agent 执行时间窗风险：TOCTOU 点击劫持分析
[原创]代码虚拟化面对AI时代的冲击即将彻底被击溃
[原创]代码虚拟化面对AI时代的冲击即将彻底被击溃
ISC Stormcast For Monday, August 10th, 2026 https://isc.sans.edu/podcastdetail/10044, (Mon, Aug 10th)
ISC Stormcast For Monday, August 10th, 2026 https://isc.sans.edu/podcastdetail/10044, (Mon, Aug 10th)
[求助]某红薯x-mini-mua算法unidbg问题
[求助]某红薯x-mini-mua算法unidbg问题
[公告] 含踩楼活动 | 2026 KCTF 攻击方规则发布！8月10日12点，正式开赛
[公告] 含踩楼活动 | 2026 KCTF 攻击方规则发布！8月10日12点，正式开赛
[原创] 我把散装逆向经验压成了一套 Agent 作战系统：r0crawl_skills 全面介绍
[原创] 我把散装逆向经验压成了一套 Agent 作战系统：r0crawl_skills 全面介绍
10th August – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 10th August, please download our Threat Intelligence Bullet
AI and API Manager
AI and API Manager
ISC Stormcast For Tuesday, August 11th, 2026 https://isc.sans.edu/podcastdetail/10046, (Tue, Aug 11th)
ISC Stormcast For Tuesday, August 11th, 2026 https://isc.sans.edu/podcastdetail/10046, (Tue, Aug 11th)
Scans for Solana (Surfpool?) Endpoints, (Mon, Aug 10th)
Solana is a crypto platform known for speed. Developers like it to develop distributed applications or to implement cryp
Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development
AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabiliti
Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development
North Korea's state hackers are no longer content to type prompts into public chatbots. One of the country's main espion
TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore
The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once agai
Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro (
OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns
The current GPT-5.6-Sol has been assigned a ‘high’ cybersecurity threshold, but Astra could reach the maximum ‘critical’
Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC
Remote, unauthenticated attackers could exploit the bugs to cause a denial-of-service (DoS) condition. The post Cisco Wa
‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad
An AI agent executes instructions that an attacker has planted in the log or alert that records a blocked request word f