[原创]最强逆向大模型GLM-5.3无道德无限制驱动Frida Stalker绕过银行某梆检测
[原创]最强逆向大模型GLM-5.3无道德无限制驱动Frida Stalker绕过银行某梆检测
2026-09-08 归档
今日共收录 1006 条安全情报，包含 268 个 CVE，456 篇安全通告，以及 21 篇研究论文。
← 返回归档列表渗透 Agent 拆机：高分背后，六套框架到底做对了什么
渗透 Agent 拆机：高分背后，六套框架到底做对了什么
IFUNC 重定向:内核还没交权,resolver 已经在跑
IFUNC 重定向:内核还没交权,resolver 已经在跑
[原创] 某 App 抽取壳的内存脱壳与请求签名逆向
[原创] 某 App 抽取壳的内存脱壳与请求签名逆向
[原创] 基于图书管理系统的漏洞复现与代码审计（二）：敏感信息泄露与文件上传
[原创] 基于图书管理系统的漏洞复现与代码审计（二）：敏感信息泄露与文件上传
[原创]某金融App 登录请求逆向实战：从梆梆加固反 Frida 自毁到 Go 业务层明文抓包
[原创]某金融App 登录请求逆向实战：从梆梆加固反 Frida 自毁到 Go 业务层明文抓包
[原创] xpanda-mcp：鸿蒙 App 逆向分析mcp
[原创] xpanda-mcp：鸿蒙 App 逆向分析mcp
[原创]26企鹅ollvm混淆去除
[原创]26企鹅ollvm混淆去除
[原创]Win11 26H1内核异常体系分析与实验：提前接管用户态、内核态异常，实现无痕Hook、进程保护、反调试，附PoC
[原创]Win11 26H1内核异常体系分析与实验：提前接管用户态、内核态异常，实现无痕Hook、进程保护、反调试，附PoC
[原创]Frida 脚本运行时机与Java.perform的原理
[原创]Frida 脚本运行时机与Java.perform的原理
[原创]paytm 商业 RASP Bugsmirror Defender 环境检测分析
[原创]paytm 商业 RASP Bugsmirror Defender 环境检测分析
[原创]unicorn有效的检测方案，以及魔改的对抗方案(unidbg为什么补好了环境却还是不能用)
[原创]unicorn有效的检测方案，以及魔改的对抗方案(unidbg为什么补好了环境却还是不能用)
[原创]C#实现西门子S71200与S71500控制器优化DB块符号访问
[原创]C#实现西门子S71200与S71500控制器优化DB块符号访问
7th September – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 7th Setpember, please download our Threat Intelligence Bull
ISC Stormcast For Tuesday, September 8th, 2026 https://isc.sans.edu/podcastdetail/10084, (Tue, Sep 8th)
ISC Stormcast For Tuesday, September 8th, 2026 https://isc.sans.edu/podcastdetail/10084, (Tue, Sep 8th)
Critical MikroTik Vulnerability - Patch Now, (Sun, Sep 6th)
Mikrotik released a patch late last week for an already-exploited vulnerability. The vulnerability allows an SSH authent
Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft
Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts
Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribu
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote
N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw
Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix