CodeQL 复现 Struts OGNL 注入：Source/Sink 建模、误报剔除与路径验证
CodeQL 复现 Struts OGNL 注入：Source/Sink 建模、误报剔除与路径验证
2026-10-20 归档
今日共收录 730 条安全情报，包含 0 个 CVE，352 篇安全通告，以及 100 篇研究论文。
← 返回归档列表[原创]开源一个自用的云手机方案 xenoid
[原创]开源一个自用的云手机方案 xenoid
关于内置后门功能的恶意软件“荐片播放器”大规模传播的风险提示
关于内置后门功能的恶意软件“荐片播放器”大规模传播的风险提示
[原创]C++ 虚表全解剖：从对象内存布局到 glibc IO 攻击链路
[原创]C++ 虚表全解剖：从对象内存布局到 glibc IO 攻击链路
[原创]从密文SO到Handler语义的对照：两家企业级加固壳的VMP逆向实录
[原创]从密文SO到Handler语义的对照：两家企业级加固壳的VMP逆向实录
Akamai Inference
Akamai Inference
Akamai Agent Sandbox
Akamai Agent Sandbox
[原创]ai自动化逆向环境搭建与实战
[原创]ai自动化逆向环境搭建与实战
[原创]某海外电商app设备指纹收集与加密算法分析
[原创]某海外电商app设备指纹收集与加密算法分析
【汉化全插件】IDA Pro 9.4 绿化便携+美化版 震撼发布！
【汉化全插件】IDA Pro 9.4 绿化便携+美化版 震撼发布！
[原创]不用提取 CDI_Leaf：把 KeyMint TA 变成 RKP 签名 Oracle，实战拿到 Google 签发的 attestation keybox
[原创]不用提取 CDI_Leaf：把 KeyMint TA 变成 RKP 签名 Oracle，实战拿到 Google 签发的 attestation keybox
[原创]利用Fenrir漏洞提取真机keybox rkp实战经验
[原创]利用Fenrir漏洞提取真机keybox rkp实战经验
[原创] Hypervisor : Intel VT 平台 DMA和VT-D对抗
[原创] Hypervisor : Intel VT 平台 DMA和VT-D对抗
[原创]给自己的调试器z0bdbg写了一个专用mcp+仿"codex"的agent可以自动化AI分析
[原创]给自己的调试器z0bdbg写了一个专用mcp+仿"codex"的agent可以自动化AI分析
[原创] 某易最新滑块风控深度逆向实战：OCR 缺口定位与真实轨迹复刻
[原创] 某易最新滑块风控深度逆向实战：OCR 缺口定位与真实轨迹复刻
19th October – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 19th October, please download our Threat Intelligence Bulle
ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue, Oct 20th)
ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue, Oct 20th)
Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware
Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that's being used to dis
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.