关于内置后门功能的恶意软件“荐片播放器”大规模传播的风险提示
关于内置后门功能的恶意软件“荐片播放器”大规模传播的风险提示
2026-10-16 归档
今日共收录 833 条安全情报，包含 0 个 CVE，434 篇安全通告，以及 100 篇研究论文。
← 返回归档列表[原创] Android PIN 解锁全链路：Gatekeeper · TEE · KeyMint 与 FBE 密钥解封
[原创] Android PIN 解锁全链路：Gatekeeper · TEE · KeyMint 与 FBE 密钥解封
[原创]C++ 虚表全解剖：从对象内存布局到 glibc IO 攻击链路
[原创]C++ 虚表全解剖：从对象内存布局到 glibc IO 攻击链路
[原创] 去平坦化不是唯一解：用 Unicorn 本地执行还原一个全平坦化的 native 签名
[原创] 去平坦化不是唯一解：用 Unicorn 本地执行还原一个全平坦化的 native 签名
[原创]从密文SO到Handler语义的对照：两家企业级加固壳的VMP逆向实录
[原创]从密文SO到Handler语义的对照：两家企业级加固壳的VMP逆向实录
[原创] BBA：开源 VA 沙箱，分身进程里直接跑 Frida Gum
[原创] BBA：开源 VA 沙箱，分身进程里直接跑 Frida Gum
Akamai Inference
Akamai Inference
Akamai Agent Sandbox
Akamai Agent Sandbox
ISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138, (Thu, Oct 15th)
ISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138, (Thu, Oct 15th)
Panchan's Mining Island [Guest Diary], (Wed, Oct 14th)
[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program]
# OIOIC 原生编译新一代代码保护方案深度解析
# OIOIC 原生编译新一代代码保护方案深度解析
[原创]ai自动化逆向环境搭建与实战
[原创]ai自动化逆向环境搭建与实战
[原创]某海外电商app设备指纹收集与加密算法分析
[原创]某海外电商app设备指纹收集与加密算法分析
The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
Is the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in the latest T
ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th)
ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th)
Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th)
I believe the cybersecurity industry may be approaching AI security the wrong way.
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And
Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordina
Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations a
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every releas