[原创]某预启动对漏驱驱动加载方式的拦截
[原创]某预启动对漏驱驱动加载方式的拦截
2026-10-13 归档
今日共收录 1460 条安全情报，包含 709 个 CVE，466 篇安全通告，以及 13 篇研究论文。
← 返回归档列表关于内置后门功能的恶意软件“荐片播放器”大规模传播的风险提示
关于内置后门功能的恶意软件“荐片播放器”大规模传播的风险提示
[原创] Android PIN 解锁全链路：Gatekeeper · TEE · KeyMint 与 FBE 密钥解封
[原创] Android PIN 解锁全链路：Gatekeeper · TEE · KeyMint 与 FBE 密钥解封
[原创][JS逆向]某新能源网站逆向分析
[原创][JS逆向]某新能源网站逆向分析
[原创]C++ 虚表全解剖：从对象内存布局到 glibc IO 攻击链路
[原创]C++ 虚表全解剖：从对象内存布局到 glibc IO 攻击链路
ISC Stormcast For Monday, October 12th, 2026 https://isc.sans.edu/podcastdetail/10132, (Mon, Oct 12th)
ISC Stormcast For Monday, October 12th, 2026 https://isc.sans.edu/podcastdetail/10132, (Mon, Oct 12th)
[原创] 去平坦化不是唯一解：用 Unicorn 本地执行还原一个全平坦化的 native 签名
[原创] 去平坦化不是唯一解：用 Unicorn 本地执行还原一个全平坦化的 native 签名
[原创]关于Rust红队武器开发，高级内存驻留，绕过edr/av等
[原创]关于Rust红队武器开发，高级内存驻留，绕过edr/av等
[转帖]IntelChecker V3.3 ~ Cookie,Wallet, tdata Checker
[转帖]IntelChecker V3.3 ~ Cookie,Wallet, tdata Checker
12th October – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 12th October, please download our Threat Intelligence Bulle
Auditing the auditor: Unmasking Apex Accelerator
REF8801 exposes how Apex Accelerator combines convincing Web3 services with malicious npm packages, attacker-controlled
ISC Stormcast For Tuesday, October 13th, 2026 https://isc.sans.edu/podcastdetail/10134, (Tue, Oct 13th)
ISC Stormcast For Tuesday, October 13th, 2026 https://isc.sans.edu/podcastdetail/10134, (Tue, Oct 13th)
Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies
Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad acto
Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
The personal AI agents rollout is going about as smoothly as expected: Amazon now blocks Meta's Muse because it doesn't
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access
IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion
The all-stock deal brings Elisity’s least-privilege access technology into IonQ’s security portfolio. The post IonQ to A
Canonical Websites Disrupted in Second DDoS Attack This Year
The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal. The post Canonica
Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
Oleg Korniev was a leader of YMCO, a sophisticated network of money mules that helped hackers move funds outside the US.
iRhythm Data Breach Impacts at Least 360,000 People
Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone num
Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
Beginning February 2027, all newly issued certificates will have a 64-day validity period by default. The post Let’s Enc