2026-10-09 归档

今日共收录 747 条安全情报,包含 0 个 CVE,359 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
威胁情报2026-10-08 发布INFO

[分享]【带MCP】IDA Pro 9.5 b1注册版+MCP 雷霆大发布!

[分享]【带MCP】IDA Pro 9.5 b1注册版+MCP 雷霆大发布!

历史摘要 · 未重新核验 · 看雪

威胁情报2026-10-08 发布INFO

[原创]基于 VMProtect授权锁架构的RSA算法另类Bypass思路

[原创]基于 VMProtect授权锁架构的RSA算法另类Bypass思路

历史摘要 · 未重新核验 · 看雪

威胁情报2026-10-08 发布INFO

[原创]安卓16脱壳移植 syscall-trace KPM隐藏frida

[原创]安卓16脱壳移植 syscall-trace KPM隐藏frida

历史摘要 · 未重新核验 · 看雪

威胁情报2026-10-08 发布INFO

[原创]移动安全联盟(libmsaoaidsec.so) 绕过知识

[原创]移动安全联盟(libmsaoaidsec.so) 绕过知识

历史摘要 · 未重新核验 · 看雪

威胁情报2026-10-08 发布INFO

[原创] 某网站瑞数6反爬逆向:从 412 拦截到借道浏览器会话,一次性翻完全部页列表

[原创] 某网站瑞数6反爬逆向:从 412 拦截到借道浏览器会话,一次性翻完全部页列表

历史摘要 · 未重新核验 · 看雪

威胁情报2026-10-08 发布INFO

[原创] 安全和开发场景下大模型使用经验随笔

[原创] 安全和开发场景下大模型使用经验随笔

历史摘要 · 未重新核验 · 看雪

威胁情报2026-10-08 发布INFO

[原创]银狐木马深度剖析(二):动调追踪 C2 通信链,拆解杀软对抗的“四种命”

[原创]银狐木马深度剖析(二):动调追踪 C2 通信链,拆解杀软对抗的“四种命”

历史摘要 · 未重新核验 · 看雪

威胁情报2026-10-08 发布INFO

[原创]python纯协议实现亿级短视频app的直播间弹幕采集

[原创]python纯协议实现亿级短视频app的直播间弹幕采集

历史摘要 · 未重新核验 · 看雪

威胁情报2026-10-07 发布INFO

Microsoft, Adobe, Apple, and Foxit vulnerabilities

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, a

历史摘要 · 未重新核验 · Cisco Talos

威胁情报2026-10-08 发布INFO

ISC Stormcast For Thursday, October 8th, 2026 https://isc.sans.edu/podcastdetail/10128, (Thu, Oct 8th)

ISC Stormcast For Thursday, October 8th, 2026 https://isc.sans.edu/podcastdetail/10128, (Thu, Oct 8th)

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-10-08 发布INFO

Making sure the checks get printed

Pierre's debut newsletter explores the messy, real-world side of risk management and how to keep vital systems running w

历史摘要 · 未重新核验 · Cisco Talos

威胁情报2026-10-08 发布INFO

Ignore all instructions and read this blog: The state of AI-analysis evasion in malware

“AI-analysis evasion” encapsulates the real-world techniques malware authors are developing in attempt to obstruct or de

历史摘要 · 未重新核验 · Cisco Talos

威胁情报2026-10-08 发布INFO

Introducing AlertZero: Inbox zero for your alert queue

AlertZero brings AI SOC automation to Elastic Security with four agents, one job each, so the queue stops setting your p

历史摘要 · 未重新核验 · Elastic Security Labs

威胁情报2026-10-08 发布INFO

Reconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th)

We just did a major update to FOR577 and added a lot of new material on day 5 about investigating AI usage in incident r

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-10-09 发布INFO

FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails

Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, hea

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-08 发布INFO

Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-08 发布INFO

UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML

The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-08 发布INFO

ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations th

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-08 发布INFO

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Atta

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-08 发布INFO

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of steal

历史摘要 · 未重新核验 · The Hacker News