[每日信息流] 2025-10-15

# 每日安全资讯（2025-10-15）

- Doonsec's feed
  - [ ] [成为一名合格的CISO，需要具备哪些知识与能力？](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247492121&idx=1&sn=0bf0261f3aa5f1522b1f86c00901a8ef)
  - [ ] [普华科技-PowerPMS File.ashx接口存在SQL注入漏洞 附POC](https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489335&idx=1&sn=58a0f3a1e7452202827c2138bd5d2098)
  - [ ] [IATF 16949: 2016 标准详解与实施（42）7.4 沟通](https://mp.weixin.qq.com/s?__biz=MzA5OTEyNzc1Nw==&mid=2247487028&idx=1&sn=fc0a1dd9b7ee632a5b2c5550f341ef8e)
  - [ ] [DevGuru靶场“闯关记”：新手如何一步步解锁Root权限密码？](https://mp.weixin.qq.com/s?__biz=Mzk3NTEyMzQzOA==&mid=2247487329&idx=1&sn=bd20de68e500067c42ff21e8dbedd7ab)
  - [ ] [下一代威胁情报平台「\"Nextrap\"」](https://mp.weixin.qq.com/s?__biz=MzUyNzk1NjA5MQ==&mid=2247483955&idx=1&sn=d24d24b59b7201229d17aea018fccd09)
  - [ ] [论文研读与思考|xa0EURASIP:DP&AI——差分隐私和人工智能结合的潜力、挑战和未来发展方向](https://mp.weixin.qq.com/s?__biz=MzU4NjcxMTY3Mg==&mid=2247484592&idx=1&sn=8cf0fc2b1e9ac2d79350f66573b63608)
  - [ ] [如何快速挖掘低微漏洞-项目挖掘总结版](https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247494500&idx=1&sn=2da7aa0d40075b462eb27695f2da9e83)
  - [ ] [[译苑雅集Vol. 3]2025年诺贝尔经济学奖得主是如何解释创新驱动经济增长的？](https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247484866&idx=1&sn=fc044703f5fe5eb48de1b20aced4c4f1)
  - [ ] [G.O.S.S.I.P 阅读推荐 2025-10-14 来自大作业的SOSP论文](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500809&idx=1&sn=dc8683d87033d1ab0e3d5a2ca0f6e816)
  - [ ] [使用 Overpass Turbo 查找监控摄像头](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451182999&idx=1&sn=fc4ccadbc4c3e1cae415aebb764965af)
  - [ ] [新兴社交媒体平台上OSINT调查工具及技术](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562424&idx=1&sn=71f8db4eb5863f00c23a61b9204654ae)
  - [ ] [当石油成为武器，我炼油厂为何成了美伊的“头号目标”？](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562424&idx=2&sn=99534bac61db43382ac27a4960fc3fd3)
  - [ ] [院士沈昌祥：构建安全可信数据空间促进数字经济高质量发展](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601797&idx=1&sn=e5a47b04785b3b078ccdc53ddd4ace5a)
  - [ ] [“美女博主”诱导、策反我境内100余名人员！国安部披露](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601797&idx=2&sn=647ae28fc3ea66afd698d2070444cae6)
  - [ ] [国家互联网信息办公室关于发布第二十批境内区块链信息服务备案编号的公告](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637619&idx=3&sn=a46bb6b4fbadbe7299ef22324bc1ca8e)
  - [ ] [泄露22万余人个人信息，知名医学检测机构被罚2700万元](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637619&idx=4&sn=bca74acbdbb3ccfdc56c565652d9c767)
  - [ ] [记录一次金融众测水洞500元](https://mp.weixin.qq.com/s?__biz=MzE5MTMwODY0NQ==&mid=2247483797&idx=1&sn=5742292930f8488440c8f56704ad77f7)
  - [ ] [【高危漏洞预警】用友U8Cloud pubsmsservlet远程代码执行漏洞](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490851&idx=1&sn=ea8d0e7cf87c12577f522e83a3bea1b2)
  - [ ] [【资料】从初学者到专业黑客需要学习哪些课程？](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152464&idx=1&sn=7abc6f857efbe8927b49ea8c3d56a4d7)
  - [ ] [西班牙警方破获最活跃的网络犯罪网络之一 GXC 团队](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533076&idx=1&sn=d257cbffde8ca0bdd3aa17eef8ec238b)
  - [ ] [零日攻击后微软限制 Edge 中的 IE 模式访问](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533076&idx=2&sn=f76cce0617b65c17ae2be4c8029992f4)
  - [ ] [一次简单的小程序挖掘，出洞是如此简单！](https://mp.weixin.qq.com/s?__biz=Mzk4ODMxODQyMQ==&mid=2247483745&idx=1&sn=3bf71a25a71aba36c8b19632dbfa8f63)
  - [ ] [拆穿安卓程序的 “小秘密”：函数栈帧带你入门逆向世界](https://mp.weixin.qq.com/s?__biz=Mzk0ODU4NjIzNA==&mid=2247485049&idx=1&sn=5a9119b851b1324e7cdbdfa4abf24a67)
  - [ ] [【WP】NewStar CTF 2025 Week1&Week2 之WEB方向题解](https://mp.weixin.qq.com/s?__biz=Mzk0NDYwOTcxNg==&mid=2247486327&idx=1&sn=e2f526c7609b5edb788ce332bed04b38)
  - [ ] [“美亚杯”专属产品试用通道开启！助你高效备赛！（填问卷送取证专刊）](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651446058&idx=1&sn=f8fd5e05db3f8d14cd7a5de2d8146d41)
  - [ ] [中国信通院余晓晖：推动“人工智能+政务”深度融合 赋能政务领域数智转型升级](https://mp.weixin.qq.com/s?__biz=Mzg2MTU5ODQ2Mg==&mid=2247507521&idx=1&sn=82c370145cb8ebfb069455ba48f1ddef)
  - [ ] [Qoder + ADB Supabase ：5分钟GET超火AI手办生图APP](https://mp.weixin.qq.com/s?__biz=MzkyMDY4MTc2Ng==&mid=2247484335&idx=1&sn=08d428aa977a269115c8af52735474ec)
  - [ ] [腾讯云全栈安全能力亮剑国家网安周，筑牢数字时代“智能防线”](https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247528135&idx=1&sn=076ad5e36af76cebaf19874b65faeb89)
  - [ ] [战火重燃！第二届腾讯云安全RASP挑战赛邀您来战！](https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247528135&idx=2&sn=615abb331b67e005e4c33dc12bc211e7)
  - [ ] [数据孤岛不再难突破？苏商银行AI信贷审计助手试运行](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932792&idx=1&sn=f86e1b41a7ff61884320262a98596d16)
  - [ ] [广西北部湾银行2025年AI服务器（中低端AI推理服务器）项目招标](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932792&idx=2&sn=11568638eba34d43c196a155034d30f1)
  - [ ] [深擎中标，星环、百度候选！中信证券AI驱动的衍生品服务应用采购项目](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932792&idx=3&sn=72dca6191c5a6fdbdda50da76f2dc623)
  - [ ] [工具推荐：向杀毒软件注入恶意代码](https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488645&idx=1&sn=11da73fb4a29f3f7d78709482ecdcaa4)
  - [ ] [AI+机器人组合的Web渗透核心功能(渗透一条龙，无需任何技术，新手即可简单操作)](https://mp.weixin.qq.com/s?__biz=MzAxNTQwMjAzOA==&mid=2452515001&idx=1&sn=bc56daf3c00c8acf1bf4b68cc4f746e4)
  - [ ] [Oracle E-Business Suite RCE 漏洞将敏感数据暴露给黑客，无需身份验证](https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096569&idx=1&sn=535160e4b6f8b5e7d1d4c41338e7fb28)
  - [ ] [黑客利用 Microsoft Edge Internet Explorer 模式访问用户的设备](https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096569&idx=2&sn=13013fc3172fb89593ae3448d8976fb0)
  - [ ] [消息称澳洲航空 Qantas 旗下 570 万客户数据已遭黑客泄露，因公司拒绝支付赎金](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247543103&idx=1&sn=57ac4c5d095d77e29e19bd60a47b9b50)
  - [ ] [实测5669个样本！Qwen3Guard能防住90%越狱攻击，但遇到\"变态样本\"只剩36%？](https://mp.weixin.qq.com/s?__biz=MjM5ODY2MDAzMQ==&mid=2247484861&idx=1&sn=8babcc07d09178c8560be0d4558a9ccc)
  - [ ] [使用 GNU Radio 解调原始 AM 无线信号](https://mp.weixin.qq.com/s?__biz=MzU5OTU3NDEzOQ==&mid=2247493246&idx=1&sn=036a9643aeabd946ae0a87cc5581a81b)
  - [ ] [侧信道攻防](https://mp.weixin.qq.com/s?__biz=MzAwNTUzNjE3OQ==&mid=2649560084&idx=1&sn=2aad69e8276cc36b804f9099f96af6d5)
  - [ ] [历史上第一位计算机程序员](https://mp.weixin.qq.com/s?__biz=MzkxMDQ3MTYxMA==&mid=2247484217&idx=1&sn=5fe4024ddaa7176b5f094244bf7c0724)
  - [ ] [【招聘信息】安全服务工程师（驻场）](https://mp.weixin.qq.com/s?__biz=MzkwMDU5NTE0OQ==&mid=2247488693&idx=1&sn=b98b1b561a278737d638fd6f1b317bdf)
  - [ ] [基础设施建设部署之中](https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247491968&idx=1&sn=fb1220000ae097d3721933dd532cfab1)
  - [ ] [Okta 警告称，随着AI Agent部署的增长，信任差距将加剧](https://mp.weixin.qq.com/s?__biz=MzI1NjQxMzIzMw==&mid=2247498160&idx=1&sn=4e423bcdd4625adbd7e4b4af1e107a3e)
  - [ ] [重构威胁分析流程：基于Golang与DeepSeek的自研AI智能体实践](https://mp.weixin.qq.com/s?__biz=Mzg5MzMyNDAzNg==&mid=2247483986&idx=1&sn=c39ad60cca926941a16ade9a3aab081b)
  - [ ] [【安全圈】Gcore成功防御6Tbps超大规模DDoS攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072213&idx=1&sn=291b236fef0955c4f149e4c3b6479be7)
  - [ ] [【安全圈】微软加强 Edge 浏览器 IE 模式安全，防止零日漏洞被滥用](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072213&idx=2&sn=e7a794345d050c9883b48c25239d09f4)
  - [ ] [【安全圈】Invoicely数据库泄露事件：18万份发票与个人信息疑似外泄](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072213&idx=3&sn=41447b4ce783a41cf1f5c3b1bd69942d)
  - [ ] [【安全圈】npm、PyPI、RubyGems 爆出新型供应链攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072213&idx=4&sn=5bbe033454cf09e1d7ff2798b1eeccd7)
  - [ ] [估值缩水超300亿，应用安全独角兽Snyk的IPO可能破灭u200b](https://mp.weixin.qq.com/s?__biz=MzkzMTY0MDgzNg==&mid=2247485081&idx=1&sn=df2f0d8acaad4eac74c7cd29c5275948)
  - [ ] [Windows10停服敲响警钟！鸿蒙生态×亚信安全筑牢终端安全防线](https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650625682&idx=1&sn=0748688a42d1d3ac9fc23b1f66d1b478)
  - [ ] [赛迪最新报告：奇安信位居中国网络安全准入市场第一](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629387&idx=1&sn=a75ec36f21e0c6e11f5cd1c88247cf43)
  - [ ] [250份文档毒翻大模型、“乱说话”误导公众，奇安信：防护刻不容缓](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629387&idx=2&sn=c50c933df7721b7d93c671d0571c3110)
  - [ ] [【已复现】用友U8 Cloud存在远程代码执行漏洞](https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490604&idx=1&sn=047564815f61553688e31305b9e5789d)
  - [ ] [网络安全信息与动态周报2025年第40期（9月29日-10月5日）](https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490604&idx=2&sn=0fce8b7d9b14621563404d2cd2c8c72a)
  - [ ] [网络安全信息与动态周报2025年第39期（9月22日-9月28日）](https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490604&idx=3&sn=a6f9b0689dfcd2e1d586a91258590910)
  - [ ] [OpenAI安全护栏破绽百出，简单提示注入即可绕过](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328717&idx=1&sn=33062e6f74193fb45931ed0000ff2daf)
  - [ ] [直播预告｜大模型与智能体时代，如何筑牢安全底座？10月15日腾讯安全视频号开讲！](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328717&idx=2&sn=0097d5c57088bb436f7b0e6b13df243c)
  - [ ] [AMD安全加密虚拟化技术严重漏洞，致加密虚拟机可被完全攻破](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328717&idx=3&sn=cef6d2e68c8b9dda3bb0e925eee5d2c4)
  - [ ] [攻击者利用Discord通过npm、PyPI和Ruby软件包构建隐蔽C2通道](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328717&idx=4&sn=87b25375604d746ea25464abac06bf11)
  - [ ] [重庆大学 | MDADroid：一种通过构建功能-API映射的新型恶意软件检测方法](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493958&idx=1&sn=1401c0597f3c6c0bcfae5bd663c7e3e7)
  - [ ] [关于征集人工智能微型计算机和耳机智能化分级2项国家标准化指导性技术文件参编单位和起草专家的通知](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254935&idx=1&sn=d3cbd3be4e9ba07a57ee43db131d3707)
  - [ ] [【会议活动】中关村论坛系列活动——2025数字创新大会会议通知](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254935&idx=2&sn=682b69e4ef383f8ecdb474bb0c3a5030)
  - [ ] [信创数智技术服务能力评估结果公告（持续更新）](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254935&idx=3&sn=19976ea5be08f1ca57c1bc59d06622f4)
  - [ ] [风从边疆来，旗向朝阳升！启明星辰集团党委举行“同升一面旗，共筑边疆情”主题活动](https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651734681&idx=1&sn=c87875121c24da18c75de8a83523a45f)
  - [ ] [安全大佬的成长故事－信息安全100人（20)](https://mp.weixin.qq.com/s?__biz=Mzk5MDM2NzQ2Mg==&mid=2247483806&idx=1&sn=2f59d5b1d11f9f729b21b45d0baef02a)
  - [ ] [没规划！！就别学网络安全。我话就撂这了！！](https://mp.weixin.qq.com/s?__biz=MzE5ODkzMzQxNQ==&mid=2247483805&idx=1&sn=9684fd1e39ef722ab27f6bea84acc31e)
  - [ ] [生成式人工智能的数据安全风险及回应型治理策略](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649174777&idx=1&sn=f6accee9b61d0be1e1cd0c0548650650)
  - [ ] [北京市网信办严处一批发布不实信息“自媒体”账号](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649174777&idx=2&sn=5b1161a05a46c55d675fc3c6cef1a67c)
  - [ ] [聊聊离地攻击：黑客不带刀了，用系统自带的工具攻击你](https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247485584&idx=1&sn=6d2646c748d7d23c20946046b77929c6)
  - [ ] [【活动预告】10月18日ISC2北京分会线下技术分享会，诚邀ISC2会员和行业同仁参会](https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247493209&idx=1&sn=087f3cc76f2cf77ed9b0890eca407026)
  - [ ] [热点速览 | 每周网安大事件（20250929-20251012）](https://mp.weixin.qq.com/s?__biz=MzkxMzAzMjU0OA==&mid=2247553315&idx=1&sn=d84816cb1da83006ab13327f6d1d3edb)
  - [ ] [SDC2025 精彩议题预告 | 大模型供应链安全的熵增效应：风险挖掘与熵减策略](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601957&idx=1&sn=710a5278ab680a3f8bcbbebd8ced9927)
  - [ ] [使用NMI中断检测无模块驱动](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601957&idx=2&sn=0e44d185666f6582ab92542e05a6cf9f)
  - [ ] [Invoicely 数据库泄露事件曝光：18万条敏感记录外泄](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601957&idx=3&sn=fa70a587765e1d9270576b88fc990b59)
  - [ ] [倒计时9天！SDC2025圆桌会谈：AI智能体与未来安全](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601957&idx=4&sn=e35299ce6c470c616a7c7e71de812e02)
  - [ ] [Oracle 紧急修复 E-Business Suite 中的新 0day](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524175&idx=1&sn=c2eb0803c0ca4694950604fde5b7811c)
  - [ ] [微软 Edge 浏览器的 IE 模式被用于 0day 攻击](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524175&idx=2&sn=c73e1971f3cd10cc4d2672211cd10b9a)
  - [ ] [实战必备！分享两款超好用的国密算法加解密工具](https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247486178&idx=1&sn=482521cd14ffcf50b53d45e90ebaa80c)
  - [ ] [CTF-威胁检测与网络流量分析](https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247486178&idx=2&sn=1b28736037ec30c138e3d0709c921ff6)
  - [ ] [一次很大众的渗透测试过程](https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247486178&idx=3&sn=7b45cc418fa716944bf985f398e47cf7)
  - [ ] [AI如何成为顶尖安全专家？](https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850773&idx=1&sn=ef1acad2d46a24dd6f5ca2096ca78925)
  - [ ] [专题·反电诈 | 基于屏幕共享诈骗协同防控体系的探索研究](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250935&idx=1&sn=c29e2c850e958f91c881eb6462ece538)
  - [ ] [专家解读｜面向时代需要 厘清部署思路 探索人工智能时代电子政务发展新范式](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250935&idx=2&sn=98d91f64d1de1cac3e677ec0aa2297ec)
  - [ ] [前沿 | 人工智能全球治理将迈向多边化与法治化新阶段](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250935&idx=3&sn=59ecf063612d9f555a3739e2a3e55ff2)
  - [ ] [评论 | 坚决刹住“AI换装”亵渎军警形象这股歪风](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250935&idx=4&sn=9a8ed59c007556836cbf193219ed9d66)
  - [ ] [【论文速读】|AutoPentester：基于LLM智能体的自动化渗透测试框架](https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247497113&idx=1&sn=1ca20d083c62cbb86246f853745967ec)
  - [ ] [学黑客网安必备这4个靶场，小白也能用上！边学边练，再不实战就晚了！](https://mp.weixin.qq.com/s?__biz=MzkzODU5MTkyNQ==&mid=2247486780&idx=1&sn=361071e1862b2554e28b9f3e46a12827)
  - [ ] [CEO主导威胁情报库建设 实现从被动防御到主动风险管理转型](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247550916&idx=1&sn=cb9bf124550b8ff002d320237db37a76)
  - [ ] [【1014】重保演习每日情报汇总](https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487846&idx=1&sn=f34c0ea70bc3a2a968a8f974e7ac0dde)
  - [ ] [关于标定（XCP）和它的解锁](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247560706&idx=1&sn=0ec5827a2bcb30d068401cab69b4fb58)
  - [ ] [AUTOSAR功能安全之内存分区与实现](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247560706&idx=2&sn=c003cca6d8588ae4e737d24dc2805006)
  - [ ] [提升漏洞挖掘效率：AI在小程序安全中的实战应用](https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247487077&idx=1&sn=9adc7a4be4b7635f11145dd8271a8042)
  - [ ] [直播预告｜大模型与智能体时代：安全底座的重构与云生态的协同进化](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247644306&idx=1&sn=0b6269347bab883301cbf5c261606fdd)
  - [ ] [知识星球 | 2025年“专项网安”全网报告合集](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247644306&idx=2&sn=30b42dc3030faac3beb49b036d10ef5d)
  - [ ] [免费赠送 | 2025国家网络安全宣传周 · 政务机关安全意识资料合集](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247644306&idx=3&sn=5981e1c1cc166146c433fbaeba8a83ee)
  - [ ] [组组组合拳艰难渗透](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556511&idx=1&sn=461c4155b18f5d2d4da0eae56b88c356)
  - [ ] [【免费领】网安人必存！大佬整理的二进制安全最全重点笔记](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556511&idx=2&sn=748a7b8b8073cdb8c2c1e6d4b95ef910)
  - [ ] [天唯科技(第五批)成功入选珠海市省级中小企业数字化转型城市试点数字化产品清单](https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247504920&idx=1&sn=d1e8cfadbb2707db140e64f7aeee680d)
  - [ ] [欧洲为何难以摆脱对美武器的依赖](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651621963&idx=1&sn=50ee0c974057f49ddd14cdc4c358ddad)
  - [ ] [美国摩根大通公司宣布1.5万亿美元计划，投资对美国国家经济安全和韧性至关重要的行业](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651621963&idx=2&sn=b4d585174e3f35c521d40744ee5ee2e7)
  - [ ] [出洞的高效方法u200bu200b](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498411&idx=1&sn=eec6ed5402cb91b536d7ed5dcb78ad11)
  - [ ] [从追赶到自研：360打造“中国版MAPP体系”应对情报“断供”挑战](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582387&idx=1&sn=3984b0a20b7bc1aab66d16dfc4ea6342)
  - [ ] [360携手全国多所合作院校共启开学季，深化产教融合培育新质人才](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582387&idx=2&sn=c4195bb56e6776b34164240b6649592c)
  - [ ] [GR朋友圈对标游学之走进观安信息：在AI的安全战场，GR如何成为“关键变量”](https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247509517&idx=1&sn=f04e2e8d6ad247cd83a9f9946544ac87)
  - [ ] [MSRPC渗透测试指南：Windows网络服务的隐秘通道](https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247492610&idx=1&sn=1bbea39ff65de6d74996c249fab0a155)
  - [ ] [一分钟看懂，三分钟看透：“安小龙”给安服“急诊科医生”装了“CT全景扫描仪”](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601797&idx=3&sn=b643a4ce6cbca71ded922531ab387d50)
  - [ ] [国内安全厂商应对大模型新风险的主要措施](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138950&idx=1&sn=507039f894e24f7850e3d8366141252a)
  - [ ] [新版反不正当竞争法明日起实施，“流量劫持”、“数据窃密”等行为将被严惩；重点防范！新一批境外恶意网址和恶意IP正式通报 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138950&idx=2&sn=2578513acf5304985e575de2a18d1b8a)
  - [ ] [邪修突破统一认证小技巧](https://mp.weixin.qq.com/s?__biz=Mzk2NDcwNjU2MQ==&mid=2247483988&idx=1&sn=5877afab48b5a1451b3dd4c178dd14b7)
  - [ ] [百度大模型安全护栏获vivo最佳安全技术合作伙伴](https://mp.weixin.qq.com/s?__biz=MjM5MTAwNzUzNQ==&mid=2650511562&idx=1&sn=ed30ddb1aaf4c277b606238a5b0a8bb8)
  - [ ] [联合国全球AI治理对话揭示全球权力转移](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247520444&idx=1&sn=adc7fb69365e2f80a69e70fe6aa0bfb4)
- Tenable Blog
  - [ ] [Microsoft’s October 2025 Patch Tuesday Addresses 167 CVEs (CVE-2025-24990, CVE-2025-59230)](https://www.tenable.com/blog/microsofts-october-2025-patch-tuesday-addresses-167-cves-cve-2025-24990-cve-2025-59230)
  - [ ] [Relying on EDR for Exposure Management? Here’s What You Need to Know](https://www.tenable.com/blog/relying-on-edr-for-exposure-management-what-you-need-to-know)
- Private Feed for M09Ic
  - [ ] [mgeeky starred rasta-mouse/LibTP](https://github.com/rasta-mouse/LibTP)
  - [ ] [bolucat released 202510142034 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202510142034)
  - [ ] [github released v0.0.64 at github/spec-kit](https://github.com/github/spec-kit/releases/tag/v0.0.64)
  - [ ] [ourren starred pvz122/PromeFuzz](https://github.com/pvz122/PromeFuzz)
  - [ ] [WAY29 starred Fission-AI/OpenSpec](https://github.com/Fission-AI/OpenSpec)
  - [ ] [github released v0.0.63 at github/spec-kit](https://github.com/github/spec-kit/releases/tag/v0.0.63)
  - [ ] [modelcontextprotocol released v1.3.0 at modelcontextprotocol/registry](https://github.com/modelcontextprotocol/registry/releases/tag/v1.3.0)
  - [ ] [mgeeky starred karpathy/nanochat](https://github.com/karpathy/nanochat)
  - [ ] [pmiaowu starred chainreactors/gogo](https://github.com/chainreactors/gogo)
  - [ ] [gh0stkey starred JimmyZJX/vscode-ripgrep](https://github.com/JimmyZJX/vscode-ripgrep)
  - [ ] [PrefectHQ released 3.4.24.dev3 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.4.24.dev3)
  - [ ] [gh0stkey starred rhysd/hgrep](https://github.com/rhysd/hgrep)
  - [ ] [pmiaowu starred aquasecurity/trivy](https://github.com/aquasecurity/trivy)
- 安全客-有思想的安全新媒体
  - [ ] [Google将“纳蕉”AI编辑器全面融入搜索、NotebookLM与相册，打通三大核心服务以强化AI生态](https://www.anquanke.com/post/id/312588)
  - [ ] [OpenAI视频生成应用Sora上线五日下载量突破百万，增速超越ChatGPT同期](https://www.anquanke.com/post/id/312535)
  - [ ] [Beamglea攻击活动：黑客滥用175个npm软件包与unpkg CDN发起大规模网络钓鱼](https://www.anquanke.com/post/id/312538)
  - [ ] [Service Finder WordPress插件存在认证绕过漏洞，且正被攻击者积极利用](https://www.anquanke.com/post/id/312541)
  - [ ] [攻击者正活跃利用SonicWall SSL VPN设备漏洞，用以部署Akira勒索软件](https://www.anquanke.com/post/id/312545)
  - [ ] [黑客正积极利用Gladinet文件共享软件的零日漏洞发起在野攻击](https://www.anquanke.com/post/id/312552)
  - [ ] [七部门联合印发《实施意见》！360为“人工智能+交通运输”注入AI新动能](https://www.anquanke.com/post/id/312557)
  - [ ] [LLM驱动的“MalTerminal”恶意软件利用 GPT-4 生成勒索程序代码](https://www.anquanke.com/post/id/312562)
  - [ ] [Stealit 恶意软件滥用 Node.js 单文件执行功能，通过伪装的游戏与 VPN 安装包传播](https://www.anquanke.com/post/id/312573)
  - [ ] [Copilot on Windows 现已支持连接邮箱并创建 Office 文档](https://www.anquanke.com/post/id/312579)
  - [ ] [GitHub Copilot 严重漏洞可让攻击者从私有仓库悄然窃取源码](https://www.anquanke.com/post/id/312568)
- Trustwave Blog
  - [ ] [Facing the Storm: Navigating the Complex Challenges of Bot Threats in Web Application and API Security](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/facing-the-storm-navigating-the-complex-challenges-of-bot-threats-in-web-application-and-api-security/)
- 奇安信攻防社区
  - [ ] [实战-SRC从入门到精通超详细分析](https://forum.butian.net/share/4589)
- ElcomSoft blog
  - [ ] [Effective Disk Imaging: Ports, Hubs, and Power](https://blog.elcomsoft.com/2025/10/effective-disk-imaging-ports-hubs-and-power/)
- Microsoft Security Blog
  - [ ] [Microsoft raises the bar: A smarter way to measure AI for cybersecurity](https://www.microsoft.com/en-us/security/blog/2025/10/14/microsoft-raises-the-bar-a-smarter-way-to-measure-ai-for-cybersecurity/)
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  - [ ] [芯片上“突围”，邮件里“守门”！CACTER EDLP 守护国产半导体传输](https://www.4hou.com/posts/GAly)
  - [ ] [【直播预告】AI邮件安全的“破”与“立”](https://www.4hou.com/posts/MXpQ)
  - [ ] [从追赶到自研：360打造“中国版MAPP体系”应对情报“断供”挑战](https://www.4hou.com/posts/KGnr)
  - [ ] [监管利剑高悬，公安部再通报34款APP违法违规，覆盖租车、社交、金融等多高频使用场景！](https://www.4hou.com/posts/DxgB)
  - [ ] [XCSSET macOS恶意软件现新变种 新增浏览器攻击与剪贴板劫持功能](https://www.4hou.com/posts/7MGw)
  - [ ] [国家网络安全通报中心发布重点防范境外恶意网址和恶意IP](https://www.4hou.com/posts/EyjN)
- Recent Commits to cve:main
  - [ ] [Update Tue Oct 14 11:37:04 UTC 2025](https://github.com/trickest/cve/commit/a81358d5969199c7a852db85645b40c756ff2fa7)
- SecWiki News
  - [ ] [SecWiki News 2025-10-14 Review](http://www.sec-wiki.com/?2025-10-14)
- Cerbero Blog
  - [ ] [MSI Format Package](https://blog.cerbero.io/msi-format-package/)
- Sandfly Security Blog RSS Feed
  - [ ] [Agentless EDR and Linux Threats: Sandfly on the Google Cloud Security Podcast](https://sandflysecurity.com/blog/agentless-edr-and-linux-threats-sandfly-on-the-google-cloud-security-podcast)
- Securelist
  - [ ] [Signal in the noise: what hashtags reveal about hacktivism in 2025](https://securelist.com/dfi-meta-hacktivist-report/117708/)
  - [ ] [The king is dead, long live the king! Windows 10 EOL and Windows 11 forensic artifacts](https://securelist.com/forensic-artifacts-in-windows-11/117680/)
- GuidePoint Security
  - [ ] [Cybersecurity Awareness Month: The End of Phishing Attacks? How to Resist One of the Most Popular Cybersecurity Attacks](https://www.guidepointsecurity.com/blog/guidepoint-cam-end-of-phishing/)
- NVISO Labs
  - [ ] [Patching Android ARM64 library initializers for easy Frida instrumentation and debugging](https://blog.nviso.eu/2025/10/14/patching-android-arm64-library-initializers-for-easy-frida-instrumentation-and-debugging/)
- Bug Bounty in InfoSec Write-ups on Medium
  - [ ] [Reflected in the DOM, Escalated to Account Takeover](https://infosecwriteups.com/reflected-in-the-dom-escalated-to-account-takeover-a378659779c0?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [A Bug Hunter’s Guide to CSP Bypasses (Part 1)](https://infosecwriteups.com/a-bug-hunters-guide-to-csp-bypasses-part-1-69b606fd2699?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [How Hackers Find Secrets Hidden in Public Websites](https://infosecwriteups.com/how-hackers-find-secrets-hidden-in-public-websites-513756e90d0f?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [CTF to Bug Bounty: Part 1 of the Beginner’s Series for Aspiring Hunters](https://infosecwriteups.com/ctf-to-bug-bounty-part-1-of-the-beginners-series-for-aspiring-hunters-5ac37af302c4?source=rss----7b722bfd1b8d--bug_bounty)
- Horizon3.ai
  - [ ] [From Patch Tuesday to Pentest Wednesday®: How a Global Chemical Manufacturer De-Risked a $2B Merger](https://horizon3.ai/intelligence/blogs/from-patch-tuesday-to-pentest-wednesday-how-a-global-chemical-manufacturer-de-risked-a-2b-merger/)
  - [ ] [CVE-2025-11371](https://horizon3.ai/attack-research/vulnerabilities/cve-2025-11371/)
- Malwarebytes
  - [ ] [AI-driven scams are preying on Gen Z’s digital lives​](https://www.malwarebytes.com/blog/news/2025/10/ai-driven-scams-are-preying-on-gen-zs-digital-lives)
  - [ ] [Pixel-stealing “Pixnapping” attack targets Android devices](https://www.malwarebytes.com/blog/news/2025/10/pixel-stealing-pixnapping-attack-targets-android-devices)
- VMRay
  - [ ] [September 2025 Detection Highlights: 6 New VTIs, 25+ YARA Rules, and More Malware Insights](https://www.vmray.com/september-2025-detection-highlights-6-new-vtis-25-yara-rules-and-more-malware-insights/)
- rtl-sdr.com
  - [ ] [Our Review of the Vivid Unit GPSDR: A Portable Single Board Computer with Screen and RTL-SDR Expansion Board](https://www.rtl-sdr.com/our-review-of-the-vivid-unit-gpsdr-a-portable-single-board-computer-with-screen-and-rtl-sdr-expansion-board/)
- 奇客Solidot–传递最新科技情报
  - [ ] [x86 生态系统顾问团队过去一年的成果](https://www.solidot.org/story?sid=82544)
  - [ ] [美国 AI 淘金热下制造业疲软](https://www.solidot.org/story?sid=82543)
  - [ ] [日本夏季过去 42 年增加了 3 周](https://www.solidot.org/story?sid=82542)
  - [ ] [教宗督促警惕控制算法的人](https://www.solidot.org/story?sid=82541)
  - [ ] [大部分开放权重模型都来自中国](https://www.solidot.org/story?sid=82540)
  - [ ] [微软终止对 windows 10 的支持](https://www.solidot.org/story?sid=82539)
- HackerNews
  - [ ] [2024年度安全报告：英国遭遇网络攻击数量创历史记录](https://hackernews.cc/archives/61099)
  - [ ] [西蒙医疗 1 月数据泄露事件影响 120 万名患者](https://hackernews.cc/archives/61096)
  - [ ] [微软在零日攻击后限制 Edge 浏览器中的 IE 模式访问权限](https://hackernews.cc/archives/61093)
  - [ ] [攻击者滥用NPM 基础设施 对工业与电子企业发起钓鱼攻击](https://hackernews.cc/archives/61086)
- 安全分析与研究
  - [ ] [重要通造类银狐高级反沙箱样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247493722&idx=1&sn=6af598f404706948f1dbba51367021dc)
- 奇安信 CERT
  - [ ] [【已复现】用友U8Cloud pubsmsservlet 远程代码执行漏洞(QVD-2025-39606)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504012&idx=1&sn=59353c7e20aea17614732506af837f9a)
- 黑鸟
  - [ ] [使用 Overpass Turbo 查找监控摄像头](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451182999&idx=1&sn=fc4ccadbc4c3e1cae415aebb764965af)
- Checkmarx
  - [ ] [Checkmarx Named a Leader for the 7th Time in the 2025 Gartner® Magic Quadrant™ for Application Security Testing](https://checkmarx.com/blog/checkmarx-named-a-leader-for-the-7th-time-in-the-2025-gartner-magic-quadrant-for-application-security-testing/)
- 代码卫士
  - [ ] [Oracle 紧急修复 E-Business Suite 中的新 0day](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524175&idx=1&sn=c2eb0803c0ca4694950604fde5b7811c)
  - [ ] [微软 Edge 浏览器的 IE 模式被用于 0day 攻击](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524175&idx=2&sn=c73e1971f3cd10cc4d2672211cd10b9a)
- 看雪学苑
  - [ ] [SDC2025 精彩议题预告 | 大模型供应链安全的熵增效应：风险挖掘与熵减策略](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601957&idx=1&sn=710a5278ab680a3f8bcbbebd8ced9927)
  - [ ] [使用NMI中断检测无模块驱动](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601957&idx=2&sn=0e44d185666f6582ab92542e05a6cf9f)
  - [ ] [Invoicely 数据库泄露事件曝光：18万条敏感记录外泄](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601957&idx=3&sn=fa70a587765e1d9270576b88fc990b59)
  - [ ] [倒计时9天！SDC2025圆桌会谈：AI智能体与未来安全](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601957&idx=4&sn=e35299ce6c470c616a7c7e71de812e02)
- 威努特安全网络
  - [ ] [标准解读：城市轨道交通网络信息系统安全技术要求](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651136377&idx=1&sn=5064e5f4a86861ad05be3ba609d60e26)
- 天黑说嘿话
  - [ ] [小米汽车自燃，车控系统安全警钟为谁而鸣？](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484699&idx=1&sn=0a0bfb35a936c3a73b68f0184a3135f8)
- 丁爸 情报分析师的工具箱
  - [ ] [【资料】从初学者到专业黑客需要学习哪些课程？](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152464&idx=1&sn=7abc6f857efbe8927b49ea8c3d56a4d7)
- dotNet安全矩阵
  - [ ] [.NET 实战：通过FSharp白名单执行命令绕过防护](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500811&idx=1&sn=dddc293e2f6d5643865d29d82baacb2e)
  - [ ] [「.NET 安全交流社区」完整攻防体系的知识宝库](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500811&idx=2&sn=9a0eb6fbb996cd559349271d5b08f420)
  - [ ] [.NET 调用系统 API 在目标进程中获取屏幕内容](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500811&idx=3&sn=0cde9d51a83ac4de57ae4973fa3d8f1a)
- 长亭安全应急响应中心
  - [ ] [【已复现】用友 U8 Cloud pubsmsservlet 远程代码执行漏洞安全通告](https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492972&idx=1&sn=fca1072ac6d58aac2b7ba59035f874f8)
- 安全圈
  - [ ] [【安全圈】Gcore成功防御6Tbps超大规模DDoS攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072213&idx=1&sn=291b236fef0955c4f149e4c3b6479be7)
  - [ ] [【安全圈】微软加强 Edge 浏览器 IE 模式安全，防止零日漏洞被滥用](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072213&idx=2&sn=e7a794345d050c9883b48c25239d09f4)
  - [ ] [【安全圈】Invoicely数据库泄露事件：18万份发票与个人信息疑似外泄](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072213&idx=3&sn=41447b4ce783a41cf1f5c3b1bd69942d)
  - [ ] [【安全圈】npm、PyPI、RubyGems 爆出新型供应链攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072213&idx=4&sn=5bbe033454cf09e1d7ff2798b1eeccd7)
- 数世咨询
  - [ ] [今日Windows 10正式停服，4种应对方案自救，请查收！](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540490&idx=1&sn=2559c474e87afa5320e712444186c559)
- 安全内参
  - [ ] [越南航空730万条客户个人数据泄露，IT供应链国际化惹的祸？](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515079&idx=1&sn=2eac0ae1c04a1a489e6884166ce176e3)
  - [ ] [乌克兰议会批准成立乌克兰网络部队的法律草案](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515079&idx=2&sn=c5c8d2e21dd2305330bbcc6c7157044f)
- 安全研究GoSSIP
  - [ ] [G.O.S.S.I.P 阅读推荐 2025-10-14 来自大作业的SOSP论文](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500809&idx=1&sn=dc8683d87033d1ab0e3d5a2ca0f6e816)
- 安全学术圈
  - [ ] [重庆大学 | MDADroid：一种通过构建功能-API映射的新型恶意软件检测方法](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493958&idx=1&sn=1401c0597f3c6c0bcfae5bd663c7e3e7)
- 极客公园
  - [ ] [库克抖音带货iPhone 17 Air，22日开售；小米客服回应「SU7门把手」；「丐版」特斯拉明年国内投产|极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653088368&idx=1&sn=a13817951e89ad792f391cce218284e6)
- 青藤云安全
  - [ ] [AI如何成为顶尖安全专家？](https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850773&idx=1&sn=ef1acad2d46a24dd6f5ca2096ca78925)
- 补天平台
  - [ ] [激战正酣！补天专属全年积分挑战赛目前排名公布！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509472&idx=1&sn=8e739a5d73ff2c7930dfd7291135923a)
- 火绒安全
  - [ ] [Windows10 用户请放心，火绒依旧为您提供服务](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247526937&idx=1&sn=6a64714e4db1723579ae2b48d2905071)
  - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247526937&idx=2&sn=aeef7b15a759eae1c0ab2ec51e83451c)
- 中国信息安全
  - [ ] [专题·反电诈 | 基于屏幕共享诈骗协同防控体系的探索研究](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250935&idx=1&sn=c29e2c850e958f91c881eb6462ece538)
  - [ ] [专家解读｜面向时代需要 厘清部署思路 探索人工智能时代电子政务发展新范式](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250935&idx=2&sn=98d91f64d1de1cac3e677ec0aa2297ec)
  - [ ] [前沿 | 人工智能全球治理将迈向多边化与法治化新阶段](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250935&idx=3&sn=59ecf063612d9f555a3739e2a3e55ff2)
  - [ ] [评论 | 坚决刹住“AI换装”亵渎军警形象这股歪风](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250935&idx=4&sn=9a8ed59c007556836cbf193219ed9d66)
- 嘶吼专业版
  - [ ] [XCSSET macOS恶意软件现新变种 新增浏览器攻击与剪贴板劫持功能](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584876&idx=1&sn=beee14185294d4c9b2e7c45b9b5bd06b)
  - [ ] [国家网络安全通报中心发布重点防范境外恶意网址和恶意IP](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584876&idx=2&sn=944f67892da7a8bd309fbc6611b789f7)
- Beacon Tower Lab
  - [ ] [【1014】重保演习每日情报汇总](https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487846&idx=1&sn=f34c0ea70bc3a2a968a8f974e7ac0dde)
- 国家互联网应急中心CNCERT
  - [ ] [CNVD漏洞周报2025年第38、39期](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500711&idx=1&sn=c4f0cdf11921db70ae8cdc3517de24cc)
- 复旦白泽战队
  - [ ] [成果分享｜[USENIX Security 2025] CHAINFUZZ: 精准引爆软件供应链深层漏洞，告别安全警报“狼来了”](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247496088&idx=1&sn=98de3e854e7edc2397851e361cdaad80)
- 迪哥讲事
  - [ ] [出洞的高效方法​​](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498411&idx=1&sn=eec6ed5402cb91b536d7ed5dcb78ad11)
- Qualys Security Blog
  - [ ] [Microsoft Patch Tuesday, October 2025 Security Update Review](https://blog.qualys.com/category/vulnerabilities-threat-research)
- 阿里安全响应中心
  - [ ] [王牌A计划——八月月度奖励](https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998173&idx=1&sn=df62ac624cbcfd9ff4444d0c9325a15e)
- Over Security - Cybersecurity news aggregator
  - [ ] [Patch Tuesday, October 2025 ‘End of 10’ Edition](https://krebsonsecurity.com/2025/10/patch-tuesday-october-2025-end-of-10-edition/)
  - [ ] [Malicious crypto-stealing VSCode extensions resurface on OpenVSX](https://www.bleepingcomputer.com/news/security/malicious-crypto-stealing-vscode-extensions-resurface-on-openvsx/)
  - [ ] [Microsoft Patch Tuesday for October 2025 — Snort rules and prominent vulnerabilities](https://blog.talosintelligence.com/microsoft-patch-tuesday-for-october-2025-snort-rules-and-prominent-vulnerabilities/)
  - [ ] [Indiana city confirms ransomware hackers behind September incident](https://therecord.media/michigan-indiana-city-ransomware)
  - [ ] [Feds sanction Cambodian conglomerate over cyber scams, seize $15 billion from chairman](https://therecord.media/feds-sanction-cambodian-conglomerate-scams-seize-15-billion)
  - [ ] [Florida sues Roku for illegally selling children’s data, including precise geolocation](https://therecord.media/florida-roku-children-data)
  - [ ] [Final Windows 10 Patch Tuesday update rolls out as support ends](https://www.bleepingcomputer.com/news/microsoft/final-windows-10-patch-tuesday-update-rolls-out-as-support-ends/)
  - [ ] [New Android Pixnapping attack steals MFA codes pixel-by-pixel](https://www.bleepingcomputer.com/news/security/new-android-pixnapping-attack-steals-mfa-codes-pixel-by-pixel/)
  - [ ] [Microsoft: Exchange 2016 and 2019 have reached end of support](https://www.bleepingcomputer.com/news/microsoft/microsoft-exchange-2016-and-2019-have-reached-end-of-support/)
  - [ ] [Microsoft October 2025 Patch Tuesday fixes 6 zero-days, 172 flaws](https://www.bleepingcomputer.com/news/microsoft/microsoft-october-2025-patch-tuesday-fixes-6-zero-days-172-flaws/)
  - [ ] [Windows 11 KB5066835 and KB5066793 updates released](https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5066835-and-kb5066793-updates-released/)
  - [ ] [I poteri necessari del CISO: quando l’autorità determina l’efficacia della sicurezza](https://www.cybersecurity360.it/soluzioni-aziendali/i-poteri-necessari-del-ciso-quando-lautorita-determina-lefficacia-della-sicurezza/)
  - [ ] [US seizes $15 billion in crypto from 'pig butchering' kingpin](https://www.bleepingcomputer.com/news/security/us-seizes-15-billion-in-crypto-from-pig-butchering-kingpin/)
  - [ ] [The Alliance That Wasn’t: A Critical Analysis of ReliaQuest’s Q3 2025 Ransomware Report](https://www.suspectfile.com/the-alliance-that-wasnt-a-critical-analysis-of-reliaquests-q3-2025-ransomware-report/)
  - [ ] [Security firms dispute credit for overlapping CVE reports](https://www.bleepingcomputer.com/news/security/security-firms-dispute-credit-for-overlapping-cve-reports/)
  - [ ] [Oracles silently fixes zero-day exploit leaked by ShinyHunters](https://www.bleepingcomputer.com/news/security/oracles-silently-fixes-zero-day-exploit-leaked-by-shinyhunters/)
  - [ ] [Taiwan reports surge in Chinese cyber activity and disinformation efforts](https://therecord.media/taiwan-nsb-report-china-surge-cyberattacks-influence-operations)
  - [ ] [California enacts age verification, chatbot laws](https://therecord.media/california-enacts-age-verification-chatbot-laws)
  - [ ] [Cyber resilience nell’era dell’autonomous IT: come superare l’alert fatigue](https://www.cybersecurity360.it/soluzioni-aziendali/cyber-resilience-nellera-dellautonomous-it-come-superare-lalert-fatigue/)
  - [ ] [Mic-E-Mouse, il mouse che ascolta: quando un sensore ottico diventa un microfono](https://www.cybersecurity360.it/news/mic-e-mouse-il-mouse-che-ascolta-quando-un-sensore-ottico-diventa-un-microfono/)
  - [ ] [Chat control: un tavolo tecnico per contrastare gli abusi sui minori e tutelare le libertà digitali](https://www.cybersecurity360.it/cultura-cyber/chat-control-un-tavolo-tecnico-per-contrastare-gli-abusi-sui-minori-e-tutelare-le-liberta-digitali/)
  - [ ] [Qantas confirms cybercriminals released stolen customer data](https://therecord.media/qantas-cybercriminals-stolen-data)
  - [ ] [Security firms debate CVE credit in overlapping vulnerability reports](https://www.bleepingcomputer.com/news/security/security-firms-debate-cve-credit-in-overlapping-vulnerability-reports/)
  - [ ] [Microsoft warns that Windows 10 reaches end of support today](https://www.bleepingcomputer.com/news/microsoft/microsoft-warns-that-windows-10-reaches-end-of-support-today/)
  - [ ] [When AI Agents Join the Teams: The Hidden Security Shifts No One Expects](https://www.bleepingcomputer.com/news/security/when-ai-agents-join-the-teams-the-hidden-security-shifts-no-one-expects/)
  - [ ] [Phishing sulla verifica del permesso di soggiorno prende di mira i cittadini stranieri in Italia](https://cert-agid.gov.it/news/phishing-sulla-verifica-del-permesso-di-soggiorno-prende-di-mira-i-cittadini-stranieri-in-italia/)
  - [ ] [Secure Boot bypass risk on nearly 200,000 Linux Framework sytems](https://www.bleepingcomputer.com/news/security/secure-boot-bypass-risk-on-nearly-200-000-linux-framework-sytems/)
  - [ ] [GhostBat RAT: Inside the Resurgence of RTO-Themed Android Malware](https://cyble.com/blog/ghostbat-rat-inside-the-resurgence-of-rto-themed-android-malware/)
  - [ ] [Chinese hackers abuse geo-mapping tool for year-long persistence](https://www.bleepingcomputer.com/news/security/chinese-hackers-abuse-geo-mapping-tool-for-year-long-persistence/)
  - [ ] [Signal in the noise: what hashtags reveal about hacktivism in 2025](https://securelist.com/dfi-meta-hacktivist-report/117708/)
  - [ ] [Cyber security, governance e il nuovo ruolo del fattore umano](https://www.cybersecurity360.it/soluzioni-aziendali/cyber-security-governance-e-il-nuovo-ruolo-del-fattore-umano/)
  - [ ] [New Malware Tactics: Cases & Detection Tips for SOCs and MSSPs](https://any.run/cybersecurity-blog/new-malware-tactics/)
  - [ ] [The king is dead, long live the king! Windows 10 EOL and Windows 11 forensic artifacts](https://securelist.com/forensic-artifacts-in-windows-11/117680/)
  - [ ] [Defrosting PolarEdge’s Backdoor](https://blog.sekoia.io/polaredge-backdoor-qnap-cve-2023-20118-analysis/)
  - [ ] [Da Ingecom a Ignition Italia: Exclusive Networks rafforza la sua presenza nel Sud Europa](https://www.securityinfo.it/2025/10/14/da-ingecom-a-ignition-italia-exclusive-networks-rafforza-la-sua-presenza-nel-sud-europa/)
  - [ ] [Apple si oppone alla verifica dell’età per il download delle app](https://www.securityinfo.it/2025/10/14/apple-si-oppone-alla-verifica-delleta-per-il-download-delle-app/)
  - [ ] [Asset management o disordine organizzato: chi non governa, subisce](https://www.cybersecurity360.it/soluzioni-aziendali/asset-management-o-disordine-organizzato-chi-non-governa-subisce/)
  - [ ] [UK hit by record number of ‘nationally significant’ cyberattacks](https://therecord.media/uk-hit-by-record-number-significant-cyberattacks)
- Tails - News
  - [ ] [Tails 7.1](https://tails.net/news/version_7.1/)
- 安全419
  - [ ] [CEO主导威胁情报库建设 实现从被动防御到主动风险管理转型](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247550916&idx=1&sn=cb9bf124550b8ff002d320237db37a76)
- Securityinfo.it
  - [ ] [Da Ingecom a Ignition Italia: Exclusive Networks rafforza la sua presenza nel Sud Europa](https://www.securityinfo.it/2025/10/14/da-ingecom-a-ignition-italia-exclusive-networks-rafforza-la-sua-presenza-nel-sud-europa/?utm_source=rss&utm_medium=rss&utm_campaign=da-ingecom-a-ignition-italia-exclusive-networks-rafforza-la-sua-presenza-nel-sud-europa)
  - [ ] [Apple si oppone alla verifica dell’età per il download delle app](https://www.securityinfo.it/2025/10/14/apple-si-oppone-alla-verifica-delleta-per-il-download-delle-app/?utm_source=rss&utm_medium=rss&utm_campaign=apple-si-oppone-alla-verifica-delleta-per-il-download-delle-app)
- DEF CON Announcements!
  - [ ] [DEF CON Singapore Call for Creators!](https://forms.cloud.microsoft/r/eQgGJPVffy)
- IT Service Management News
  - [ ] [Punto informativo per l'AI Act della Commissione europea](http://blog.cesaregallotti.it/2025/10/punto-informativo-per-lai-act-della.html)
  - [ ] [Pubblicata la ISO/IEC 27701](http://blog.cesaregallotti.it/2025/10/pubblicata-la-isoiec-27701.html)
- 360数字安全
  - [ ] [从追赶到自研：360打造“中国版MAPP体系”应对情报“断供”挑战](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582387&idx=1&sn=3984b0a20b7bc1aab66d16dfc4ea6342)
  - [ ] [360携手全国多所合作院校共启开学季，深化产教融合培育新质人才](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582387&idx=2&sn=c4195bb56e6776b34164240b6649592c)
- JUMPSEC
  - [ ] [Understanding the Colt Attack](https://www.jumpsec.com/guides/understanding-the-colt-attack/)
- 表图
  - [ ] [[译苑雅集Vol. 3]2025年诺贝尔经济学奖得主是如何解释创新驱动经济增长的？](https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247484866&idx=1&sn=fc044703f5fe5eb48de1b20aced4c4f1)
- ICT Security Magazine
  - [ ] [Prompt Injection: la vulnerabilità numero uno che minaccia l’AI mondiale](https://www.ictsecuritymagazine.com/articoli/prompt-injection/)
  - [ ] [Blackout cyber: quando gli hacker spengono la luce alle città](https://www.ictsecuritymagazine.com/notizie/blackout-cyber/)
- Schneier on Security
  - [ ] [Upcoming Speaking Engagements](https://www.schneier.com/blog/archives/2025/10/upcoming-speaking-engagements-49.html)
  - [ ] [The Trump Administration’s Increased Use of Social Media Surveillance](https://www.schneier.com/blog/archives/2025/10/the-trump-administrations-increased-use-of-social-media-surveillance.html)
- Tor Project blog
  - [ ] [New Release: Tails 7.1](https://blog.torproject.org/new-release-tails-7_1/)
  - [ ] [Free the Internet: The Tor Project’s annual fundraiser](https://blog.torproject.org/2025-fundraiser-donations-matched/)
- SANS Internet Storm Center, InfoCON: green
  - [ ] [ISC Stormcast For Wednesday, October 15th, 2025 https://isc.sans.edu/podcastdetail/9656, (Tue, Oct 14th)](https://isc.sans.edu/diary/rss/32370)
  - [ ] [Microsoft Patch Tuesday October 2025, (Tue, Oct 14th)](https://isc.sans.edu/diary/rss/32368)
- The Hacker News
  - [ ] [Chinese Hackers Exploit ArcGIS Server as Backdoor for Over a Year](https://thehackernews.com/2025/10/chinese-hackers-exploit-arcgis-server.html)
  - [ ] [Moving Beyond Awareness: How Threat Hunting Builds Readiness](https://thehackernews.com/2025/10/moving-beyond-awareness-how-threat.html)
  - [ ] [RMPocalypse: Single 8-Byte Write Shatters AMD’s SEV-SNP Confidential Computing](https://thehackernews.com/2025/10/rmpocalypse-single-8-byte-write.html)
  - [ ] [New Pixnapping Android Flaw Lets Rogue Apps Steal 2FA Codes Without Permissions](https://thehackernews.com/2025/10/new-pixnapping-android-flaw-lets-rogue.html)
  - [ ] [What AI Reveals About Web Applications— and Why It Matters](https://thehackernews.com/2025/10/what-ai-reveals-about-web-applications.html)
  - [ ] [npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels](https://thehackernews.com/2025/10/npm-pypi-and-rubygems-packages-found.html)
  - [ ] [Researchers Expose TA585’s MonsterV2 Malware Capabilities and Attack Chain](https://thehackernews.com/2025/10/researchers-expose-ta585s-monsterv2.html)
- Graham Cluley
  - [ ] [The AI Fix #72: The AI hype train, space data centers, and lifelike robot heads](https://grahamcluley.com/the-ai-fix-72/)
- NetSPI
  - [ ] [API Security Testing: The Overlooked Frontline in Application Penetration Testing](https://www.netspi.com/blog/executive-blog/application-pentesting/api-security-testing-the-overlooked-frontline/)
- Security Affairs
  - [ ] [Researchers warn of widespread RDP attacks by 100K-node botnet](https://securityaffairs.com/183389/security/researchers-warn-of-widespread-rdp-attacks-by-100k-node-botnet.html)
  - [ ] [Harvard University hit in Oracle EBS cyberattack, 1.3 TB of data leaked by Cl0p group](https://securityaffairs.com/183379/security/harvard-university-hit-in-oracle-ebs-cyberattack-1-3-tb-of-data-leaked-by-cl0p-group.html)
  - [ ] [UK NCSC Reports 429 cyberattacks in a year, with nationally significant cases more than doubling](https://securityaffairs.com/183372/security/uk-ncsc-reports-429-cyberattacks-in-a-year-with-nationally-significant-cases-more-than-doubling.html)
  - [ ] [Unverified COTS hardware enables persistent attacks in small satellites via SpyChain](https://securityaffairs.com/183303/hacking/unverified-cots-hardware-enables-persistent-attacks-in-small-satellites-via-spychain.html)
  - [ ] [Oracle issued an emergency security update to fix new E-Business Suite flaw CVE-2025-61884](https://securityaffairs.com/183362/security/oracle-issued-an-emergency-security-update-to-fix-new-e-business-suite-flaw-cve-2025-61884.html)
- Deeplinks
  - [ ] [Victory! California Requires Transparency for AI Police Reports](https://www.eff.org/deeplinks/2025/10/victory-california-requires-transparency-ai-police-reports)
  - [ ] [Opt Out October: Daily Tips to Protect Your Privacy and Security](https://www.eff.org/deeplinks/2025/09/opt-out-october-daily-tips-protect-your-privacy-and-security)
- Krebs on Security
  - [ ] [Patch Tuesday, October 2025 ‘End of 10’ Edition](https://krebsonsecurity.com/2025/10/patch-tuesday-october-2025-end-of-10-edition/)
- TorrentFreak
  - [ ] [Grok’s Lack of Piracy Prompt Panic Isn’t Controversial, It’s Reasonable and Rewarding](https://torrentfreak.com/groks-lack-of-piracy-prompt-panic-isnt-controversial-its-reasonable-rewarding-251014/)
- Trend Micro Research, News and Perspectives
  - [ ] [Trend Micro launches new integration with Zscaler to deliver real-time,  Risk-Based Zero Trust Access](https://www.trendmicro.com/en_us/research/25/j/real-time-risk-based-zero-trust.html)
- Full Disclosure
  - [ ] [Security Advisory: Multiple High-Severity Vulnerabilities in Suno.com (JWT Leakage, IDOR, DoS)](https://seclists.org/fulldisclosure/2025/Oct/8)
  - [ ] [[SBA-ADV-20250730-01] CVE-2025-39664: Checkmk Path Traversal](https://seclists.org/fulldisclosure/2025/Oct/7)
  - [ ] [[SBA-ADV-20250724-01] CVE-2025-32919: Checkmk Agent Privilege Escalation via Insecure Temporary Files](https://seclists.org/fulldisclosure/2025/Oct/6)
- The Register - Security
  - [ ] [Asahi breach leaves bitter taste as brewer fears personal data slurped](https://go.theregister.com/feed/www.theregister.com/2025/10/14/asahi_breach_update/)
  - [ ] [Mozilla is recruiting beta testers for a free, baked-in Firefox VPN](https://go.theregister.com/feed/www.theregister.com/2025/10/14/mozilla_firefox_vpn_beta/)
  - [ ] [Oracle rushes out another emergency E-Business Suite patch as Clop fallout widens](https://go.theregister.com/feed/www.theregister.com/2025/10/14/oracle_rushes_out_another_emergency/)
  - [ ] [British govt agents demand action after UK mega-cyberattacks surge 50%](https://go.theregister.com/feed/www.theregister.com/2025/10/14/ncsc_uk_cyberattack_surge/)
  - [ ] [EU biometric border system launch hits inevitable teething problems](https://go.theregister.com/feed/www.theregister.com/2025/10/14/eu_biometric_border_system_launches/)
- Daniel Miessler
  - [ ] [Extending Your Lifespan Through Attention](https://danielmiessler.com/blog/magnifying-time?utm_source=rss&utm_medium=feed&utm_campaign=website)
- Security Weekly Podcast Network (Audio)
  - [ ] [Bikers, Apple, Storm-657, Astaroth, EES, Salesforce, Aaran Leyland, and more... - SWN #520](http://sites.libsyn.com/18678/bikers-apple-storm-657-astaroth-ees-salesforce-aaran-leyland-and-more-swn-520)
  - [ ] [Inside the OWASP GenAI Security Project - Steve Wilson - ASW #352](http://sites.libsyn.com/18678/inside-the-owasp-genai-security-project-steve-wilson-asw-352)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[每日信息流] 2025-10-15 #1018

每日安全资讯（2025-10-15）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2025-10-15 #1018

Description

每日安全资讯（2025-10-15）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions