[每日信息流] 2025-11-01

# 每日安全资讯（2025-11-01）

- Tenable Blog
  - [ ] [Cybersecurity Snapshot: Top Guidance for Improving AI Risk Management, Governance and Readiness](https://www.tenable.com/blog/cybersecurity-snapshot-ai-governance-ai-risk-management-ai-employee-training-ai-policy-ai-cyberrisk-10-31-2025)
- 奇安信攻防社区
  - [ ] [【病毒分析】MEDUSA LOCKER勒索windows版本分析](https://forum.butian.net/share/4601)
- obaby@mars
  - [ ] [瘾](https://h4ck.org.cn/2025/10/21903)
- Private Feed for M09Ic
  - [ ] [bolucat released 202510311935 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202510311935)
  - [ ] [PrefectHQ released 3.5.0 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.5.0)
  - [ ] [freqtrade released 2025.10 at freqtrade/freqtrade](https://github.com/freqtrade/freqtrade/releases/tag/2025.10)
  - [ ] [wabzsy starred robfig/cron](https://github.com/robfig/cron)
  - [ ] [lz520520 starred namename333/idapromcp_333](https://github.com/namename333/idapromcp_333)
  - [ ] [niudaii starred phodal/understand-prompt](https://github.com/phodal/understand-prompt)
  - [ ] [esrrhs starred pbnjay/grate](https://github.com/pbnjay/grate)
  - [ ] [PrefectHQ released 3.4.26.dev6 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.4.26.dev6)
  - [ ] [gh0stkey starred gurucomputing/headscale-ui](https://github.com/gurucomputing/headscale-ui)
  - [ ] [uknowsec starred namename333/idapromcp_333](https://github.com/namename333/idapromcp_333)
  - [ ] [gh0stkey starred slobys/headscale](https://github.com/slobys/headscale)
  - [ ] [0xbug starred mcw0/PoC](https://github.com/mcw0/PoC)
  - [ ] [pydantic released v1.9.1 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v1.9.1)
- Recent Commits to cve:main
  - [ ] [Update Fri Oct 31 11:49:51 UTC 2025](https://github.com/trickest/cve/commit/33eef7f94f8eefd74a9182d9076a862719077fdc)
- 安全客-有思想的安全新媒体
  - [ ] [Magecart团伙“剑齿虎”刷卡器通过恶意插件渗透WooCommerce，并将其有效载荷隐藏在伪造的PNG图片中](https://www.anquanke.com/post/id/312947)
  - [ ] [安全威胁“幻影乌鸦”被披露：126个恶意npm包通过隐藏依赖项窃取开发者令牌与敏感信息](https://www.anquanke.com/post/id/312950)
  - [ ] [攻击组织实施网络间谍活动：Airstalk恶意软件劫持VMware AirWatch MDM API以构建隐秘C2信道](https://www.anquanke.com/post/id/312953)
  - [ ] [Progress公司为其MOVEit Transfer的AS2模块发布补丁，修复高危漏洞 (CVE-2025-10932)](https://www.anquanke.com/post/id/312957)
  - [ ] [身份安全公司ConductorOne完成7900万美元融资，致力于革新现代化身份安全管理方案](https://www.anquanke.com/post/id/312961)
  - [ ] [OpenAI官方证实：GPT-5处理心理与情感困扰的能力已获显著优化](https://www.anquanke.com/post/id/312964)
  - [ ] [Chromium内核浏览器Blink渲染引擎中存在高危漏洞，可致攻击者在数秒内引发浏览器崩溃](https://www.anquanke.com/post/id/312968)
  - [ ] [360助力石家庄市教育行业网络安全运营中心启航，共筑教育安全新防线](https://www.anquanke.com/post/id/312971)
  - [ ] [新型窃密木马Lampion采用ClickFix攻击手法，可静默窃取用户登录凭据](https://www.anquanke.com/post/id/312981)
  - [ ] [RediShell远程代码执行漏洞致使8,500余个Redis实例面临代码执行攻击风险](https://www.anquanke.com/post/id/312986)
  - [ ] [开源！可信MCP，AICC机密计算新升级！](https://www.anquanke.com/post/id/312944)
- Doonsec's feed
  - [ ] [flutter框架抓包方法](https://mp.weixin.qq.com/s?__biz=MzkyNDU2MDk4NQ==&mid=2247484219&idx=1&sn=3d5c5e4c6f542709854e157e4fe0d470)
  - [ ] [一文读懂什么是HSTS？](https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247487648&idx=1&sn=5a7aba272d9dfe85c9e88a8d367d40ac)
  - [ ] [谷歌亚马逊为何帮以色列 “打掩护”？秘密暗号深藏数据通报玄机](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183243&idx=1&sn=8cb5bbaa3d4897944f296e38ee63daf6)
  - [ ] [想让XSS漏洞斩获翻倍？这组Payload利器不容错过！](https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797278&idx=1&sn=5b3a0d787068a4ce564d4930fde67613)
  - [ ] [Windows服务器也能搭建高端节点线路！Sing-box GUI 全流程图文教程](https://mp.weixin.qq.com/s?__biz=MzkyNzYzNTQ2Nw==&mid=2247485475&idx=1&sn=6d222d4d79f413721ff9a4d01e2f92d5)
  - [ ] [大模型安全测评基准综述研究](https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484506&idx=1&sn=0d524fc11b0ed66e50872ed66c48523d)
  - [ ] [中汽数据：基于分层检测架构与动态演进机制车联网车载信息安全入侵检测范式研究](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628227&idx=1&sn=629f052e96013f771dbec3f448124b85)
  - [ ] [上汽通用五菱：智能网联汽车CAN总线信息安全测试方法](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628227&idx=2&sn=b88e3f368e570091cdb79f5a6ed8ddbe)
  - [ ] [智能网联汽车 SOME/IP 在线实战培训课程 2025](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628227&idx=3&sn=96fbd5c08884eb3f0adf05f4082a8011)
  - [ ] [2026年1月1日实施新的网络安全法：增加AI内容，加大处罚力度。](https://mp.weixin.qq.com/s?__biz=MzU5MTIxNzg0Ng==&mid=2247488307&idx=1&sn=246bd03fd008b7f48cddeaec15284e5d)
  - [ ] [意大利间谍软件公司公开证实了其网络武器曝光一事，称因软件版本过期导致](https://mp.weixin.qq.com/s?__biz=MzkwNDg1NTU0Mg==&mid=2247484403&idx=1&sn=c799f59c4e5b2bc955415f41dcd57282)
  - [ ] [近期热门攻击  安全事件 APT动向](https://mp.weixin.qq.com/s?__biz=MzIxNDg5ODQxMg==&mid=2247483776&idx=1&sn=77cd574418180a525d2df4fa7f456190)
  - [ ] [Google Play商店生态观察：2000万下载背后，400万用户失控的治理困境与根源剖析](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496925&idx=1&sn=89042a19cd97cd4f3868aff52dfe069b)
  - [ ] [【神兵利器】Ai全自动化渗透测试工具 | AiScan-N带你开启智能安全的新时代！](https://mp.weixin.qq.com/s?__biz=Mzg2ODY3NDYxNA==&mid=2247486594&idx=1&sn=ad542da6bc27d132bce6006e3b61805a)
  - [ ] [【连载】红蓝对抗-攻防演练-WEB安全渗透测试：密码安全概述](https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484821&idx=1&sn=988e87be3d4bd8475ee9778d9c897d73)
  - [ ] [一次 order by 注入 left join 绕过](https://mp.weixin.qq.com/s?__biz=MzkwMzQyMTg5OA==&mid=2247488843&idx=1&sn=ac6c3336f4a1b02417d7787606a09021)
  - [ ] [2025年《网络安全法》新旧法对比表](https://mp.weixin.qq.com/s?__biz=Mzk4ODI4MDEzNQ==&mid=2247483977&idx=1&sn=95286225f89c52f4043cea52cbf581cb)
  - [ ] [小红薯rce](https://mp.weixin.qq.com/s?__biz=Mzg4MDcyMDkxNQ==&mid=2247483755&idx=1&sn=abb1d39ce574168cdfd03117ac36308d)
  - [ ] [【资讯】国家数据局综合司印发《关于在国家数据基础设施建设先行先试中加强场景应用的实施方案》](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247557847&idx=1&sn=a2344066b839f9cc250e4859f7d0ef54)
  - [ ] [【资讯】全国网安标委就《网络安全标准实践指南——数据库联网安全要求（征求意见稿）》公开征求意见](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247557847&idx=2&sn=7a4fea9e176f06645a2ae919d22269bf)
  - [ ] [【资讯】湖南省政府印发《湖南省贯彻落实国务院“人工智能+”行动的实施方案》](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247557847&idx=3&sn=4f53f3ac37d795b96fb01a5bd2241105)
  - [ ] [【资讯】德州市大数据局印发《德州市公共数据资源授权运营管理办法》](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247557847&idx=4&sn=893c31a50152a87d78391b93680e6bf7)
  - [ ] [最新！最全！第十一届“美亚杯”大赛指南来了](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651446624&idx=1&sn=b5719fab4bc1478f60a99b672d109c5b)
  - [ ] [紫狐 Rootkit: 撤回了一个 shell](https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491541&idx=1&sn=2a7236445f959028d9cb0069af0b0dfa)
  - [ ] [突然发现，经济下行，大家都开始不装了](https://mp.weixin.qq.com/s?__biz=MzkxNTY3MTE5MA==&mid=2247485588&idx=1&sn=db34e7983af0dd0600b83ddac1961d34)
  - [ ] [edusrc逻辑越权与任意文件下载挖掘](https://mp.weixin.qq.com/s?__biz=Mzk1NzgzMjkxOQ==&mid=2247485792&idx=1&sn=a51f9989a1f2732eb524cc9bcf6301a3)
  - [ ] [盘古石手机取证已完成 HarmonyOSxa06适配](https://mp.weixin.qq.com/s?__biz=Mzg3MjE1NjQ0NA==&mid=2247514885&idx=1&sn=fa1c0e1109a1492f52039a54e9e40712)
  - [ ] [南美，我们来了！HackProve携手阿里云国际，海外安全众测登陆南美](https://mp.weixin.qq.com/s?__biz=MzU0MDI1MjUxMg==&mid=2247534852&idx=1&sn=6a1c560559d3e02eae4939c0f28059b7)
  - [ ] [别被“银狐Pro”骗了，它连2018年的杀软都绕不过](https://mp.weixin.qq.com/s?__biz=MzYyNTIwNTcyOA==&mid=2247483730&idx=1&sn=55b92925575220d3d0e35150de118532)
  - [ ] [拦截猫、Para 翻译终生版限量开售！还有 2 款大促才折扣的热门工具](https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492744&idx=1&sn=5a1b9874103e2ac44931ebe5043b537d)
  - [ ] [ChatGPT最新推出的Atlas浏览器，可被“伪装 URL”欺骗执行隐藏命令!](https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517595&idx=1&sn=9628bd2043cfe954a1654440847047bd)
  - [ ] [数据库的9种类型，来看看你知道几种？](https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247517862&idx=1&sn=a3e187e207cd5d56365a0a7fc8eb6296)
  - [ ] [原创—忧今叹世，诗词解忧，三首](https://mp.weixin.qq.com/s?__biz=Mzg4NzAwNzA4NA==&mid=2247485376&idx=1&sn=4105019abb8cf2106464b85d0acbb216)
  - [ ] [携手香港，共筑安全未来——CertiK亮相2025香港金融科技周](https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247504727&idx=1&sn=e43dfac64de0a649f974656d6a981c4e)
  - [ ] [内推 | 字节跳动SDLC安全专家岗火热招聘中](https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497740&idx=1&sn=49d8f090ca58ae105bcedc85f7444baf)
  - [ ] [Java代码审计[上]-(RuoYi_V4.2)若依管理系统](https://mp.weixin.qq.com/s?__biz=MzIxMDAwNzM3MQ==&mid=2247522204&idx=1&sn=9680ded8378c889f466b12d2aeef6880)
  - [ ] [智能体元年，金融+AI的攻与守](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932861&idx=1&sn=38e4a5a98a63d549995ddc675041ad94)
  - [ ] [AI快讯：OpenAI发布安全研究智能体，建行大模型落地347个业务场景](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932861&idx=2&sn=3885075db058b079d259c085e97a0683)
  - [ ] [55万！江西银行AI办公助手应用场景采购项目](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932861&idx=3&sn=145868e7978e21f3f59d2f5ac83a6553)
  - [ ] [【安全圈】一地人社局办公电脑中毒，紧急提醒](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072509&idx=1&sn=1bc63a8dab876b30df72ab984487298b)
  - [ ] [【安全圈】新“Brash”漏洞：单个恶意 URL 即可在数秒内使 Chromium 系列浏览器瘫痪](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072509&idx=2&sn=d3f8121beda67518cdde70e636d390d5)
  - [ ] [【安全圈】Akira 勒索软件组织声称入侵 Apache OpenOffice](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072509&idx=3&sn=bbdf2d9740d8da196a53fc62f735ee78)
  - [ ] [【安全圈】Qilin勒索组织再袭日本Super Value超市遭攻击内部员工数据泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072509&idx=4&sn=0cf7506bb689826ecc1b4f25cfd116bf)
  - [ ] [DLL劫持快速挖掘入门教程](https://mp.weixin.qq.com/s?__biz=MzIyMDAwMjkzNg==&mid=2247513748&idx=1&sn=cfecfc968d771b137b292d36b0334416)
  - [ ] [再获国字号荣誉！渊亭科技获国家专精特新重点“小巨人”企业称号](https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660192809&idx=1&sn=2c5284631724bcabf9b16ca972824462)
  - [ ] [每日安全动态推送(25/10/31)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960243&idx=1&sn=368135d0fe07b731b331fd58024f3353)
  - [ ] [关于发布《国资国企在线监管安全运营分中心建设运营管理办法（试行）》的通知](https://mp.weixin.qq.com/s?__biz=MzkxMzAzMjU0OA==&mid=2247553483&idx=1&sn=1a04cfcf5cbf079fad7d500e0f495515)
  - [ ] [数字经济背景下重新构想全球南方人工智能劳动力的未来](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622049&idx=1&sn=89c39c5cdddde0565a0e4c3862067fda)
  - [ ] [美国政府效率部牵头改革美国军用无人机项目，简化采购流程、扩大本土生产](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622049&idx=2&sn=f62616bac325426ac60ad9eb677098dc)
  - [ ] [工信部：2025 年第三季度下架 76 款 App、民众“一键解绑” 历史互联网应用账号超 2.6 亿次](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247543184&idx=1&sn=ded631f3bb915f538a5861bc7ff6c854)
  - [ ] [LingJing(灵境)桌面级靶场平台新增sqli-labs(MSSQL)靶机](https://mp.weixin.qq.com/s?__biz=MzkzOTY0NTMxNg==&mid=2247484278&idx=1&sn=56ab61a79ee13ce38f9919c49a906b1f)
  - [ ] [11月班开课倒计时|CISP-DSG数据安全认证为你的职业赋能](https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247525561&idx=1&sn=e9937b5945faba2f415db13474543cce)
  - [ ] [威胁情报共享：账号泄露后登录行为追踪及IPV6攻击防范](https://mp.weixin.qq.com/s?__biz=Mzg2MjgwMzIxMA==&mid=2247485757&idx=1&sn=6ebf061406ea9f906b35e12a92df89f2)
  - [ ] [鸿蒙(HarmonyOS)应用安全检测分析工具V5.0](https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247498981&idx=1&sn=f0886963d294c4299d8dda5271fd3768)
  - [ ] [Android App抓包防护与绕过技术](https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247498981&idx=2&sn=cee86db8f16c3ac4ee97d11a68809e38)
  - [ ] [OpenAI发布基于GPT-5的自主漏洞修复AI Agent](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329712&idx=1&sn=49bb0e9917b02f6732864538cad4cce2)
  - [ ] [Blink渲染引擎漏洞可在60秒内导致Chromium内核浏览器崩溃，PoC已公开](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329712&idx=2&sn=1bbf917bb5b075e9ea9222ad64819470)
  - [ ] [FreeBuf热门电台精选集第十四期](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329712&idx=3&sn=7ec641a10c780b9ae82fec83704b3ec6)
  - [ ] [RediShell RCE漏洞导致全球8500多个Redis实例面临代码执行攻击风险](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329712&idx=4&sn=5ffb7573bc284b41f18ccddc7dcc511a)
  - [ ] [复旦大学、清华大学等 | 超越漏洞扫描：一种功能性变更驱动的远程软件版本识别方法](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247494247&idx=1&sn=d4177459c870a0c51a257b1b630593ad)
  - [ ] [密钥治理之道：从策略设计到实战落地，构筑密码应用的坚固防线](https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247493192&idx=1&sn=19077d2ac47be222f0adb39608578d3d)
  - [ ] [一周回顾｜49条人命和180亿巨额损失：网络安全的沉重一课](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629610&idx=1&sn=979f6a003be24e8165bb8d348f5b52f7)
  - [ ] [OpenAI安全框架被提示注入攻击轻松突破，奇安信：AI安全须“三位一体”](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629610&idx=2&sn=e2d16a249ad1870a16b36bd20bb1f7bc)
  - [ ] [小红书RCE漏洞？](https://mp.weixin.qq.com/s?__biz=MzkzODQzNTU2NA==&mid=2247486563&idx=1&sn=c04c32714a87a31aa3fe58fbaf719e4b)
  - [ ] [TikTok逆向分析X-Bogus、X-Gnarly、msToken](https://mp.weixin.qq.com/s?__biz=Mzg5MjYyNTgxMQ==&mid=2247484089&idx=1&sn=65a99066a0d2d42a626f287cfb0b0f6b)
  - [ ] [警惕！供水、储油、储粮等多类关基工控设施的设置遭到篡改](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515150&idx=1&sn=603853284ecde3d5eac6361382ab2966)
  - [ ] [美国网络靶场发展演进过程和趋势特点分析](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515150&idx=2&sn=8fd68ee497f845f08c8159ddda4374af)
  - [ ] [这些密码使用坏习惯，你中招了吗？国家安全部提示牢记三条“密码生存法则”](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649174973&idx=1&sn=987abd4a24877c4592540ce1731b72bb)
  - [ ] [数据出境安全管理政策问答（2025年10月）](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649174973&idx=2&sn=0b7318d2bf39e68f4f434d33b17dec6a)
  - [ ] [专题·网络靶场 | 以人工智能技术赋能网络靶场能力与体系建设](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252235&idx=1&sn=f28c60462328813f92e0f4a5d96084af)
  - [ ] [通知 | 五部门印发《深化智慧城市发展推进全域数字化转型行动计划》](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252235&idx=2&sn=f5ed1a4f7f3f16f2e6c70f806a90f5b8)
  - [ ] [通知 | 国家数据局印发《关于在国家数据基础设施建设先行先试中加强场景应用的实施方案》](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252235&idx=3&sn=35b93da735edcadc041a6ef5d9bf8eb8)
  - [ ] [通知 | 网安标委就国家标准《数据安全技术 数据安全保护要求（征求意见稿）》公开征求意见（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252235&idx=4&sn=8651aac965038f1c0c10ecbad72f4148)
  - [ ] [一图读懂 | 《中华人民共和国网络安全法》十四处重大修改](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252235&idx=5&sn=3717fd86f3c4187211b2dd31b1bab479)
  - [ ] [关于举办2025年江西省“振兴杯”信息与软件行业密码技术应用员职业技能竞赛的通知](https://mp.weixin.qq.com/s?__biz=MzUzNTk2NTIyNw==&mid=2247491824&idx=1&sn=4acb6dc4a16129810ffe631e984a483a)
  - [ ] [BUGBANK平台邀你参加先知安全沙龙 - 西安站~11月15日开启](https://mp.weixin.qq.com/s?__biz=MzAxODg1MDMwOQ==&mid=2247508515&idx=1&sn=4dd00cd848e0b76f4ecbc732b16e010b)
  - [ ] [不联网内网：等保测评不可少，定级不能“一刀切”的定1级](https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTIzMQ==&mid=2247497902&idx=1&sn=44bedf3d7fb925696c3a17bb47f3bb23)
  - [ ] [新《网络安全法》表决通过](https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTIzMQ==&mid=2247497902&idx=2&sn=db30f8ca1b6345e24fecc72498491eff)
  - [ ] [【重要通知】关于开展2025年全国行业职业技能竞赛——第二届全国网络安全行业职业技能大赛广东赛区选拔赛的通知](https://mp.weixin.qq.com/s?__biz=MzUzNTI2MzU0OQ==&mid=2247497718&idx=1&sn=c3f6aa83207edfa0e9e2ff9edb7b41f2)
  - [ ] [360斩获IDC报告三类“大满贯”，引领智能安全新范式](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582740&idx=1&sn=9ec80e3eb81c71af61c01f8c43475cac)
  - [ ] [获香港特区政府致谢！360为构建“粤港澳大湾区网络安全共同体”贡献力量](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582740&idx=2&sn=8fae1d7d5bda7d71b691df7fd9f688ca)
  - [ ] [征求意见稿丨国家标准《数据安全技术 数据安全保护要求》（附下载）](https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247535453&idx=1&sn=342c6ef1d98f301d0d923d82444f2d21)
  - [ ] [荐读丨基于机器学习的物联网入侵检测关键技术研究](https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247535453&idx=2&sn=748b06d2a665afbb89290e7e12e1b85b)
  - [ ] [VmProtect.3.0.0beta分析之虚拟机流程](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603005&idx=1&sn=697ec2842a8fcd98b5ac6730d2981497)
  - [ ] [谷歌沉默以对，Chromium漏洞曝光！数十亿用户面临浏览器崩溃风险](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603005&idx=2&sn=40181b69e27466e402c789292a095783)
  - [ ] [2025大厂技术岗实时更新！企业新增职位汇总](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603005&idx=3&sn=40bc0d4797cbfb360bac1b970255a08f)
  - [ ] [速通秘籍来咯！VMProtect虚拟机逆向入门](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603005&idx=4&sn=429278874545a95543b98a466b69ad01)
  - [ ] [漏洞预警 | Docker Compose OCI 路径遍历漏洞可导致远程命令执行 (CVE-2025-62725)](https://mp.weixin.qq.com/s?__biz=Mzk3NTE5NTI0OQ==&mid=2247484673&idx=1&sn=8ccbf6bb1560e3619382567f55d3191a)
  - [ ] [BSSRC助力｜先知安全沙龙 - 西安站 11月15日开启！](https://mp.weixin.qq.com/s?__biz=MzkyODIwNDI3NA==&mid=2247486255&idx=1&sn=3936905fbd4d3cd1d5f7bb50797865d8)
  - [ ] [百家｜张美波：直击灵魂！一文读懂网络安全ROI](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247645855&idx=1&sn=9d8e184162e1933cb38782ebdbe11f45)
  - [ ] [腾讯云、腾讯研究院、Gartner联合发布《企业级智能体产业落地研究报告》，「附下载链接」](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247645855&idx=2&sn=33df938ff03667378ceb3547d106e85d)
  - [ ] [在Z｜安言咨询补贴150/天诚招咨询顾问岗实习生](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247645855&idx=3&sn=daccb9b8e228cb2172e8fe207bfea3c9)
  - [ ] [免费赠送 | 诸子云星球福利大放送 · 综合网安报告合集](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247645855&idx=4&sn=4fcc1e116aae669c643a607cd3aa7efd)
  - [ ] [美战略轰炸机三度迫近与俄货机现身：委内瑞拉的「古巴导弹危机」时刻？](https://mp.weixin.qq.com/s?__biz=Mzk0NjIzOTgzNw==&mid=2247500545&idx=1&sn=7dd3eacc631d06900fda4c16c9357e7a)
  - [ ] [每周蓝军技术推送（2025.10.25-10.31）](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494494&idx=1&sn=2daea75c8c7cdc73c69eacf5b94b39fa)
  - [ ] [神奇的order by注入——第二篇](https://mp.weixin.qq.com/s?__biz=MzUzNDMyNjI3Mg==&mid=2247487728&idx=1&sn=060b8a7767bd61f46fbf8280f80a00df)
  - [ ] [重磅亮相 | 珞安科技受邀参加第六届炼化企业创新发展大会](https://mp.weixin.qq.com/s?__biz=MzU2NjI5NzY1OA==&mid=2247513941&idx=1&sn=be1254a5c3c155cad3916bb2730e831c)
  - [ ] [上云后怕不安全？这篇云安全配置科普，企业必看！](https://mp.weixin.qq.com/s?__biz=MzU0NDkyNTQ2OA==&mid=2247486276&idx=1&sn=30ecdcccc4bdc888de49e10b5e273049)
  - [ ] [Yakit MITM 实战：如何打通国密双向认证的“证书关卡”？](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528811&idx=1&sn=0ce5940631587eb1ffc9cc158ad087c2)
  - [ ] [【cyberstrikelab】PT-4](https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247488390&idx=1&sn=d1192c4b038c66688464055a41053c69)
  - [ ] [CISA和NSA分享如何保护微软 Exchange 服务器](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524314&idx=1&sn=2ea2b06eca0631b008e170460b6c4c39)
  - [ ] [10个npm包被指窃取 Windows、macOS 和 Linux 系统上的开发者凭据](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524314&idx=2&sn=81cae6998a39f2153ed18d7cc065303b)
  - [ ] [通杀脚本（续）](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498486&idx=1&sn=bd0b64ace20b95b4e597b9fdddcf1d4f)
  - [ ] [【高危漏洞预警】Microsoft Windows SMB Server身份认证绕过漏洞CVE-2025-58726](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490929&idx=1&sn=b5563b8061a9a2847499ca24cd09ffe8)
  - [ ] [一分钟说说如何找到劣迹方面的数据](https://mp.weixin.qq.com/s?__biz=MzkxNDYxMjM5OA==&mid=2247485920&idx=1&sn=7be8d634afa8ca75afd637d36325be02)
  - [ ] [【情报】美国在巴基斯坦资助的机构和项目](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152770&idx=1&sn=a69bfb8c9a26e239245d12be9ad5dee1)
  - [ ] [小红书翻译模型RCE- LLM幻觉](https://mp.weixin.qq.com/s?__biz=Mzk0NDM5MjczMw==&mid=2247484533&idx=1&sn=028aabc74d89dd98cb51234b1a20f11e)
  - [ ] [腾讯发布大模型思考早停算法SpecExit，效果无损，端到端加速2.5倍！](https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649796334&idx=1&sn=c5741686d4324fc48f67305d8ee7e835)
  - [ ] [Windows远程桌面的奇技淫巧](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556654&idx=1&sn=e57387998f398bcaeb59d8540623ba40)
  - [ ] [【免费领】CISSP认证考试权威参考题库（850多道）](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556654&idx=2&sn=16482016ad69d74ed90dd12d08a89009)
  - [ ] [技术闲谈之汽车网络安全](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247562038&idx=1&sn=f68d58c1cab1f20047abe488a12633e7)
  - [ ] [突发！荷兰安世向中国断供晶圆！](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247562038&idx=2&sn=97693d18936c91e72f5c05669852f237)
  - [ ] [甘李药业信息技术部总监确认「MediSec 大会」分享：以“三位一体”固防线，制药企业的安全运营标准化实践之路](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247562038&idx=3&sn=8bf050d73432e8159cc3adc689291bb4)
  - [ ] [附PPT下载 | 恩智浦：软件定义、功能安全及信息安全在全新汽车以太网解决方案中的同步实现](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247562038&idx=4&sn=9ae11f1a80f8b98d0a8c3b3d0f483780)
  - [ ] [数据投毒考验人工智能安全性](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247602017&idx=1&sn=0b2f888f8ea6aeffb47497c895dd9617)
  - [ ] [这70款移动应用违法违规收集使用个人信息](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247602017&idx=2&sn=0e72b8bef686ab5436981702daf55cff)
  - [ ] [十月三大攻击事件，造成2600万美金损失](https://mp.weixin.qq.com/s?__biz=MzkyMzI2NzIyMw==&mid=2247490170&idx=1&sn=def30845c463257cbf63d853141fefa9)
  - [ ] [信安世纪协办通明湖论坛商用密码分论坛，分享商密生态融合应用实践](https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650665581&idx=1&sn=a98560c2b0baf575bcede943a936807b)
  - [ ] [【工信动态】工业和信息化部召开第十二次中小企业圆桌会议](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649255639&idx=1&sn=edc48f066bb1b38f11660ad8832052de)
  - [ ] [APT-C-60（伪猎者）的近期活动分析与技术演进](https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247507448&idx=1&sn=b765092ea558b1f0b1cfc6b07c4d5bf8)
  - [ ] [微信 x TSRC专项众测冲刺｜百万奖池火力全开！单洞赏金最高12万！](https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207512&idx=1&sn=7e8519fe3f20d872006d48853ecc8699)
  - [ ] [ISC2新课程通过策略执行点传授零信任技能](https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247493246&idx=1&sn=bbd2f64a345a4f4aae5b0268076a37ed)
- SecWiki News
  - [ ] [SecWiki News 2025-10-31 Review](http://www.sec-wiki.com/?2025-10-31)
- Sucuri Blog
  - [ ] [Vulnerability & Patch Roundup — October 2025](https://blog.sucuri.net/2025/10/vulnerability-patch-roundup-october-2025.html)
  - [ ] [Denial-of-Service (DoS) Attacks: What They Are, How They Work, and How to Defend Your Site](https://blog.sucuri.net/2025/10/denial-of-service-dos-attacks-what-they-are-how-they-work-and-how-to-defend-your-site.html)
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  - [ ] [开源！可信MCP，AICC机密计算新升级！](https://www.4hou.com/posts/J15l)
  - [ ] [黑客利用基于redtiger的信息窃取工具窃取Discord账户](https://www.4hou.com/posts/mkoA)
  - [ ] [360助力石家庄市教育行业网络安全运营中心启航，共筑教育安全新防线](https://www.4hou.com/posts/Ey4K)
  - [ ] [Q4最后一波福利！CACTER恶意样本活动水果/周边/现金奖励等你来拿](https://www.4hou.com/posts/Dx4Y)
- 罗朝辉（飘飘白云）
  - [ ] [3D城市模型COLLADA数据格式详解](https://blog.csdn.net/kesalin/article/details/154195093)
- Bug Bounty in InfoSec Write-ups on Medium
  - [ ] [Web Cache Deception Attack – A Hidden Threat in Today’s Web Applications](https://infosecwriteups.com/web-cache-deception-attack-a-hidden-threat-in-todays-web-applications-9b7b4b37a3a0?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [#4 RFI: From an External URL Into your Application](https://infosecwriteups.com/4-rfi-from-an-external-url-into-your-application-a5aeb1c5958c?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [How I Made ChatGPT My Personal Hacking Assistant (And Broke Their “AI-Powered” Security)](https://infosecwriteups.com/how-i-made-chatgpt-my-personal-hacking-assistant-and-broke-their-ai-powered-security-ee37d4a725c2?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [How I Hacked JWT Tokens and Became Everyone on the Internet (Temporarily)](https://infosecwriteups.com/how-i-hacked-jwt-tokens-and-became-everyone-on-the-internet-temporarily-1e05f961048d?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [Exposed API Keys and Secrets with AI](https://infosecwriteups.com/exposed-api-keys-and-secrets-d9c08f34ab73?source=rss----7b722bfd1b8d--bug_bounty)
- Horizon3.ai
  - [ ] [CVE-2025-59287](https://horizon3.ai/attack-research/vulnerabilities/cve-2025-59287/)
  - [ ] [The Top 10 CVEs NodeZero® Exploited So Far in 2025](https://horizon3.ai/intelligence/blogs/the-top-10-cves-nodezero-exploited-so-far-in-2025/)
- The Trail of Bits Blog
  - [ ] [The cryptography behind electronic passports](https://blog.trailofbits.com/2025/10/31/the-cryptography-behind-electronic-passports/)
- VMRay
  - [ ] [Advanced Threat Protection (ATP): An Ultimate Guide for Modern SOCs](https://www.vmray.com/advanced-threat-protection-atp/)
- Intigriti
  - [ ] [Intigriti Bug Bytes #229 - October 2025 🚀](https://www.intigriti.com/researchers/blog/bug-bytes/intigriti-bug-bytes-229-october-2025)
- SentinelOne
  - [ ] [The Good, the Bad and the Ugly in Cybersecurity – Week 44](https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-44-7/)
- Malwarebytes
  - [ ] [Update Chrome now: 20 security fixes just landed](https://www.malwarebytes.com/blog/news/2025/10/update-chrome-now-20-security-fixes-just-landed)
- Exploit-DB.com RSS Feed
  - [ ] [[webapps] Flowise 3.0.4 - Remote Code Execution (RCE)](https://www.exploit-db.com/exploits/52440)
- Wallarm
  - [ ] [When APIs Become Attack Paths: What the Q3 2025 ThreatStats Report Tells Us](https://lab.wallarm.com/when-apis-become-attack-paths-q3-2025-threatstats-report/)
- Shostack & Friends Blog
  - [ ] [October Adam's New Thing!](https://shostack.org/blog/oct-ant/)
- rtl-sdr.com
  - [ ] [Demonstrating a Rollback Attack on a Honda via HackRF Portapack and an Aftermarket Security Solution](https://www.rtl-sdr.com/demonstrating-a-rollback-attack-on-a-honda-via-hackrf-portapack-and-an-aftermarket-security-solution/)
- GuidePoint Security
  - [ ] [Cybersecurity Awareness Month: No Tricks, Just Treats – Frighteningly Effective Ways to Scare Off Cyber Ghouls](https://www.guidepointsecurity.com/blog/trick-or-treat-keep-the-cyber-ghouls-away/)
- 安全分析与研究
  - [ ] [银狐黑产组织针对跨境电商从业人员进行钓鱼攻击活动](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494012&idx=1&sn=d97de58a512ea5875f5a2644670b2e9c)
- 奇客Solidot–传递最新科技情报
  - [ ] [特朗普命令美国重启核武器试验](https://www.solidot.org/story?sid=82688)
  - [ ] [Bazzite 秋季更新释出](https://www.solidot.org/story?sid=82687)
  - [ ] [以色列要求 Google 和亚马逊使用秘密的眨眼信号警告外国政府的数据披露要求](https://www.solidot.org/story?sid=82686)
  - [ ] [英国面临禁止汞合金填充物的压力](https://www.solidot.org/story?sid=82685)
  - [ ] [Affinity Studio 成为免费软件](https://www.solidot.org/story?sid=82684)
  - [ ] [数学证明否定宇宙是模拟的](https://www.solidot.org/story?sid=82683)
- 黑鸟
  - [ ] [谷歌亚马逊为何帮以色列 “打掩护”？秘密暗号深藏数据通报玄机](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183243&idx=1&sn=8cb5bbaa3d4897944f296e38ee63daf6)
- 奇安信 CERT
  - [ ] [OpenAI安全框架被提示注入攻击背后：AI安全防护需“三位一体”](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504088&idx=1&sn=c4df39ae84146f5570d503993192341b)
  - [ ] [安全热点周报：黑客劫持企业 XWiki 服务器进行加密货币挖矿](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504088&idx=2&sn=aa72ad42af540628fbb216b15bbe3962)
- 腾讯安全应急响应中心
  - [ ] [微信 x TSRC专项众测冲刺｜百万奖池火力全开！单洞赏金最高12万！](https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207512&idx=1&sn=7e8519fe3f20d872006d48853ecc8699)
- 知道创宇404实验室
  - [ ] [404星链计划 | 新项目收录&版本更新](https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650991026&idx=1&sn=fcc184c60c4ec1160bee52a7eaec1021)
- Hackerman's Hacking Tutorials
  - [ ] [WTF is ... - AI-Native SAST?](https://parsiya.net/blog/wtf-is-ai-native-sast/)
- 丁爸 情报分析师的工具箱
  - [ ] [【情报】美国在巴基斯坦资助的机构和项目](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152770&idx=1&sn=a69bfb8c9a26e239245d12be9ad5dee1)
- 奇安信威胁情报中心
  - [ ] [每周高级威胁情报解读(2025.10.24~10.30)](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247516502&idx=1&sn=aadc73e9c3ea330c9943c51aa7cad5dd)
- 网安志异
  - [ ] [Chris Wysopal讲述的传奇黑客组织L0pht的历史](https://mp.weixin.qq.com/s?__biz=MzAxNzYyNzMyNg==&mid=2664232791&idx=1&sn=141526a0d0e2f406a57ecd251e7cc70b)
- 安全客
  - [ ] [汇丰银行疑遭黑客入侵，美国客户与财务数据或大规模泄露](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789349&idx=1&sn=ca3b391965f147163b621ce8d98e3ca6)
- DataCon大数据安全分析竞赛
  - [ ] [【DataCon报名中】互联网威胁分析赛道你关心的问题都在这里！](https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247489449&idx=2&sn=19f9dd4f3b52eaf4948976251dd2fbe3)
- 安全学术圈
  - [ ] [复旦大学、清华大学等 | 超越漏洞扫描：一种功能性变更驱动的远程软件版本识别方法](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247494247&idx=1&sn=d4177459c870a0c51a257b1b630593ad)
- 安全圈
  - [ ] [【安全圈】一地人社局办公电脑中毒，紧急提醒](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072509&idx=1&sn=1bc63a8dab876b30df72ab984487298b)
  - [ ] [【安全圈】新“Brash”漏洞：单个恶意 URL 即可在数秒内使 Chromium 系列浏览器瘫痪](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072509&idx=2&sn=d3f8121beda67518cdde70e636d390d5)
  - [ ] [【安全圈】Akira 勒索软件组织声称入侵 Apache OpenOffice](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072509&idx=3&sn=bbdf2d9740d8da196a53fc62f735ee78)
  - [ ] [【安全圈】Qilin勒索组织再袭日本Super Value超市遭攻击内部员工数据泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072509&idx=4&sn=0cf7506bb689826ecc1b4f25cfd116bf)
- 数世咨询
  - [ ] [金融业的“安全焦虑”：保险与资管公司集体上调网络安全预算](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540676&idx=1&sn=fee04ac93a196473b6265088710cccbb)
  - [ ] [关于举办网络安全实战化人才培养师资培训的通知](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540676&idx=2&sn=0be07ae07d9636db6a4f9e2c81af85cc)
- 天黑说嘿话
  - [ ] [帆软反序列化漏洞利用工具](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484923&idx=1&sn=82437eab7e32359b428afff693d39597)
- 慢雾科技
  - [ ] [相约香港｜慢雾将亮相香港金融科技周及多场 Web3 行业盛会](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247503582&idx=1&sn=b421c5d3a5c292f8d1e9ffe75e8582a9)
- 中国信息安全
  - [ ] [中国信息安全测评中心主任彭涛：塑造智能时代数据安全治理新范式](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252167&idx=1&sn=d110bad214f28bbf43cda399940c7440)
- 代码卫士
  - [ ] [CISA和NSA分享如何保护微软 Exchange 服务器](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524314&idx=1&sn=2ea2b06eca0631b008e170460b6c4c39)
  - [ ] [10个npm包被指窃取 Windows、macOS 和 Linux 系统上的开发者凭据](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524314&idx=2&sn=81cae6998a39f2153ed18d7cc065303b)
- 微步在线
  - [ ] [获得一封感谢信！发件地：香港](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650184952&idx=1&sn=62b22a070ff68fc70f093ee939c50b5d)
- 安全内参
  - [ ] [警惕！供水、储油、储粮等多类关基工控设施的设置遭到篡改](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515150&idx=1&sn=603853284ecde3d5eac6361382ab2966)
  - [ ] [美国网络靶场发展演进过程和趋势特点分析](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515150&idx=2&sn=8fd68ee497f845f08c8159ddda4374af)
- M01N Team
  - [ ] [每周蓝军技术推送（2025.10.25-10.31）](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494494&idx=1&sn=2daea75c8c7cdc73c69eacf5b94b39fa)
- 看雪学苑
  - [ ] [VmProtect.3.0.0beta分析之虚拟机流程](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603005&idx=1&sn=697ec2842a8fcd98b5ac6730d2981497)
  - [ ] [谷歌沉默以对，Chromium漏洞曝光！数十亿用户面临浏览器崩溃风险](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603005&idx=2&sn=40181b69e27466e402c789292a095783)
  - [ ] [2025大厂技术岗实时更新！企业新增职位汇总](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603005&idx=3&sn=40bc0d4797cbfb360bac1b970255a08f)
  - [ ] [速通秘籍来咯！VMProtect虚拟机逆向入门](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603005&idx=4&sn=429278874545a95543b98a466b69ad01)
- 小米安全中心
  - [ ] [小米汽车守护活动 | 参赛团队公布](https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247518323&idx=1&sn=38b35a93239d8edaea07852dbccb39a3)
- 火绒安全
  - [ ] [【火绒安全周报】网安国际公约签署仪式开幕/瑞典国家电网遭勒索](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527096&idx=1&sn=ecfe68c737736735cf576b23de272bea)
  - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527096&idx=2&sn=1724dddfccd530b91469d69ee51d7adb)
- 极客公园
  - [ ] [让 AI 开口「像人」：最难的不是智能，是「嗓音」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653089690&idx=1&sn=76941f003e37685e690df0edfa473457)
  - [ ] [中国人 2030 年登月目标不动摇；苹果季度营收超千亿美元；微信推「群聊选择性接受重要通知」 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653089681&idx=1&sn=8e47f98a97d4a4df11a7355e34b163a3)
- 威努特安全网络
  - [ ] [加拿大关键基础设施遭黑客破坏，日本电通集团遭攻击|一周特辑](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651136956&idx=1&sn=b57314f33a6fe011dd3ab6adea748c90)
- 深信服千里目安全技术中心
  - [ ] [【漏洞通告】Docker Compose OCI路径遍历漏洞 CVE-2025-62725](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524750&idx=1&sn=d471c01bbc34fe3a5b16da387fd7d3dd)
- 腾讯玄武实验室
  - [ ] [每日安全动态推送(25/10/31)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960243&idx=1&sn=368135d0fe07b731b331fd58024f3353)
- 云鼎实验室
  - [ ] [Google Play商店生态观察：2000万下载背后，400万用户失控的治理困境与根源剖析](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496925&idx=1&sn=89042a19cd97cd4f3868aff52dfe069b)
- 迪哥讲事
  - [ ] [通杀脚本（续）](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498486&idx=1&sn=bd0b64ace20b95b4e597b9fdddcf1d4f)
- 嘶吼专业版
  - [ ] [黑客利用基于redtiger的信息窃取工具窃取Discord账户](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585112&idx=1&sn=5fef7a570ff0919153d6668616fb90bd)
  - [ ] [网络安全法完成修改](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585112&idx=2&sn=b2b66aa369dec5b97f85509e8abb916f)
- Yak Project
  - [ ] [Yakit MITM 实战：如何打通国密双向认证的“证书关卡”？](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528811&idx=1&sn=0ce5940631587eb1ffc9cc158ad087c2)
- 安全牛
  - [ ] [A股主要网络安全上市公司2025年三季度财报摘要](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139207&idx=1&sn=aa68c2a88abd1e7a36dab2bc828a26a0)
  - [ ] [工信部：前三季度我国信息安全产品和服务收入1627亿元，同比增长6.9%；违法违规收集使用个人信息！70款移动应用被点名| 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139207&idx=2&sn=fb0c7023908b39bb1ff205118d2310c6)
- 奇安信病毒响应中心
  - [ ] [每周勒索威胁摘要](https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498550&idx=1&sn=8a5c72b2f2236d73d9b64fa2624403a5)
- Over Security - Cybersecurity news aggregator
  - [ ] [University of Pennsylvania investigating offensive email sent through graduate school system](https://therecord.media/upenn-hacker-email-affirmative)
  - [ ] [Windows 11 tests shared Bluetooth audio support, but only for AI PCs](https://www.bleepingcomputer.com/news/microsoft/windows-11-tests-shared-bluetooth-audio-support-but-only-for-ai-pcs/)
  - [ ] [FCC plans vote to remove cyber regulations installed after theft of Trump info from telecoms](https://therecord.media/fcc-plans-vote-rescind-biden-era-ruling-telecoms-cyber)
  - [ ] [Cybercrime, tra nuove minacce e formazione dei cittadini: la visione della Polizia Postale](https://www.cybersecurity360.it/cybersecurity-nazionale/cybercrime-tra-nuove-minacce-e-formazione-dei-cittadini-la-visione-della-polizia-postale/)
  - [ ] [‘We got hacked’ emails threaten to leak University of Pennsylvania data](https://www.bleepingcomputer.com/news/security/offensive-we-got-hacked-emails-sent-in-penn-security-incident/)
  - [ ] [SBOM 102: How to Operationalize SBOM Data Into Real-Time Vulnerability Management](https://flashpoint.io/blog/sbom-operationalize-vulnerability-management/)
  - [ ] [Chinese hackers scanning, exploiting Cisco ASA firewalls used by governments worldwide](https://therecord.media/chinese-hackers-scan-exploit-firewalls-government)
  - [ ] [Microsoft Edge gets scareware sensor for faster scam detection](https://www.bleepingcomputer.com/news/microsoft/microsoft-edge-gets-scareware-sensor-for-faster-scam-detection/)
  - [ ] [Australia warns of BadCandy infections on unpatched Cisco devices](https://www.bleepingcomputer.com/news/security/australia-warns-of-badcandy-infections-on-unpatched-cisco-devices/)
  - [ ] [CFPB ends probe into Meta’s financial data advertising practices](https://therecord.media/cfpb-meta-probe-advertising)
  - [ ] [Sling TV settles with California for allegedly violating state consumer privacy law](https://therecord.media/sling-tv-california-data-protection-settlement)
  - [ ] [Sintesi riepilogativa delle campagne malevole nella settimana del 25 – 31 ottobre](https://cert-agid.gov.it/news/malware/sintesi-riepilogativa-delle-campagne-malevole-nella-settimana-del-25-31-ottobre/)
  - [ ] [L’immunità dagli attacchi informatici è solo una storia](https://www.cybersecurity360.it/cultura-cyber/limmunita-dagli-attacchi-informatici-e-solo-una-storia/)
  - [ ] [Why password controls still matter in cybersecurity](https://www.bleepingcomputer.com/news/security/why-password-controls-still-matter-in-cybersecurity/)
  - [ ] [Alleged Meduza Stealer malware admins arrested after hacking Russian org](https://www.bleepingcomputer.com/news/security/alleged-meduza-stealer-malware-admins-arrested-after-hacking-russian-org/)
  - [ ] [Three suspected developers of Meduza Stealer malware arrested in Russia](https://therecord.media/meduza-stealer-malware-suspected-developers-arrested-russia)
  - [ ] [CISA: High-severity Linux flaw now exploited by ransomware gangs](https://www.bleepingcomputer.com/news/security/cisa-linux-privilege-escalation-flaw-now-exploited-in-ransomware-attacks/)
  - [ ] [Weaponized Military Documents Deliver Advanced SSH-Tor Backdoor to Defense Sector](https://cyble.com/blog/weaponized-military-documents-deliver-backdoor/)
  - [ ] [Hacktivist Attacks on Critical Infrastructure Surge: Cyble Report](https://cyble.com/blog/hacktivist-attacks-critical-infrastructure-q3-2025/)
  - [ ] [Alleged Conti ransomware gang affiliate appears in Tennessee court after Ireland extradition](https://therecord.media/alleged-conti-ransomware-affiliate-extradited-ireland-tennessee)
  - [ ] [Google says Search AI Mode will know everything about you](https://www.bleepingcomputer.com/news/google/google-says-search-ai-mode-will-know-everything-about-you/)
  - [ ] [Windows zero-day actively exploited to spy on European diplomats](https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-windows-zero-day-to-spy-on-european-diplomats/)
  - [ ] [Il codice generato da IA pone molti rischi di sicurezza](https://www.securityinfo.it/2025/10/31/il-codice-generato-da-ia-pone-molti-rischi-di-sicurezza/)
  - [ ] [Ukrainian extradited from Ireland on Conti ransomware charges](https://www.bleepingcomputer.com/news/security/ukrainian-extradited-from-ireland-on-conti-ransomware-charges/)
  - [ ] [Vulnerabilità in ChatGPT Atlas consente di manipolare la memoria dell’AI: come difendersi](https://www.cybersecurity360.it/news/vulnerabilita-in-chatgpt-atlas-consente-di-manipolare-la-memoria-dellai-come-difendersi/)
  - [ ] [La fiducia come capitale: la conformità a GDPR e NIS 2 diventa un vantaggio competitivo](https://www.cybersecurity360.it/legal/la-fiducia-come-capitale-la-conformita-a-gdpr-e-nis-2-diventa-un-vantaggio-competitivo/)
  - [ ] [Detecting the NPM Supply Chain Compromise Before It Spread](https://www.group-ib.com/blog/detect-npm-supply-chain-attack/)
  - [ ] [Denial-of-Service (DoS) Attacks: What They Are, How They Work, and How to Defend Your Site](https://blog.sucuri.net/2025/10/denial-of-service-dos-attacks-what-they-are-how-they-work-and-how-to-defend-your-site.html)
- 白泽安全实验室
  - [ ] [韩国背景APT-C-60组织部署更新版SpyGlace恶意软件展开攻击活动—每周威胁情报动态第244期（10.24-10.30）](https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492816&idx=1&sn=a5d9bf84cd8a4b306fc66e8d8dccfca3)
- 锦行科技
  - [ ] [再获认可！锦行科技入选2025年广州市“四化”赋能重点平台！](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247494461&idx=1&sn=a8c656a6f3fe396346fba4b09c224638)
- OPPO安全中心
  - [ ] [【年终冲榜马拉松】倒计时30天，OSRC年终盛典蓄势待发](https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494538&idx=1&sn=53f5323040c945f4b09531d1f135aac1)
- Securityinfo.it
  - [ ] [Il codice generato da IA pone molti rischi di sicurezza](https://www.securityinfo.it/2025/10/31/il-codice-generato-da-ia-pone-molti-rischi-di-sicurezza/?utm_source=rss&utm_medium=rss&utm_campaign=il-codice-generato-da-ia-pone-molti-rischi-di-sicurezza)
- 白帽子章华鹏
  - [ ] [2026年安全规划之商业软件供应链治理](https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650238035&idx=1&sn=5ecfb39ad21d563a5028b9eb806fbe12)
- CyberCrime & Doing Time
  - [ ] [Transnational Organized Crime Gang Steals $1 Million from Ontario Couple](https://garwarner.blogspot.com/2025/10/transnational-organized-crime-gang.html)
- ICT Security Magazine
  - [ ] [Architetture critiche: la fragilità nascosta](https://www.ictsecuritymagazine.com/notizie/architetture-critiche/)
- Schneier on Security
  - [ ] [Friday Squid Blogging: Giant Squid at the Smithsonian](https://www.schneier.com/blog/archives/2025/10/friday-squid-blogging-giant-squid-at-the-smithsonian.html)
  - [ ] [Will AI Strengthen or Undermine Democracy?](https://www.schneier.com/blog/archives/2025/10/will-ai-strengthen-or-undermine-democracy.html)
- 360威胁情报中心
  - [ ] [APT-C-60（伪猎者）的近期活动分析与技术演进](https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247507448&idx=1&sn=b765092ea558b1f0b1cfc6b07c4d5bf8)
- Deeplinks
  - [ ] [Once Again, Chat Control Flails After Strong Public Pressure](https://www.eff.org/deeplinks/2025/10/once-again-chat-control-flails-after-strong-public-pressure)
  - [ ] [Opt Out October: Daily Tips to Protect Your Privacy and Security](https://www.eff.org/deeplinks/2025/09/opt-out-october-daily-tips-protect-your-privacy-and-security)
  - [ ] [The Department of Defense Wants Less Proof its Software Works](https://www.eff.org/deeplinks/2025/10/department-defense-wants-less-proof-its-software-works)
- 360数字安全
  - [ ] [360斩获IDC报告三类“大满贯”，引领智能安全新范式](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582740&idx=1&sn=9ec80e3eb81c71af61c01f8c43475cac)
  - [ ] [获香港特区政府致谢！360为构建“粤港澳大湾区网络安全共同体”贡献力量](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582740&idx=2&sn=8fae1d7d5bda7d71b691df7fd9f688ca)
- Daniel Miessler
  - [ ] [When to Use Claude Code Skills vs Commands vs Agents](https://danielmiessler.com/blog/when-to-use-skills-vs-commands-vs-agents?utm_source=rss&utm_medium=feed&utm_campaign=website)
- The Register - Security
  - [ ] [Russia finally bites the cybercrooks it raised, arresting suspected Meduza infostealer devs](https://go.theregister.com/feed/www.theregister.com/2025/10/31/russia_arrests_three_meduza_cyber_suspects/)
  - [ ] [Attackers dig up $11M in Garden Finance crypto exploit](https://go.theregister.com/feed/www.theregister.com/2025/10/31/attackers_dig_up_11m_in/)
  - [ ] [Resilience, not sovereignty, defines OpenStack's next chapter](https://go.theregister.com/feed/www.theregister.com/2025/10/31/resilience_openinfra_summit/)
  - [ ] [NHS left with sick PCs as suppliers resist Windows 11 treatment](https://go.theregister.com/feed/www.theregister.com/2025/10/31/nhs_windows_11_issues/)
  - [ ] [Europe preps Digital Euro to enter circulation in 2029](https://go.theregister.com/feed/www.theregister.com/2025/10/31/digital_euro_approved/)
- TorrentFreak
  - [ ] [IPTV Anti-Piracy Demands Are Bad For ISPs, Spell Disaster for User Privacy & Security](https://torrentfreak.com/iptv-piracy-demands-are-bad-for-isps-disaster-for-user-privacy-security-251030/)
- Security Weekly Podcast Network (Audio)
  - [ ] [AI Cheating?, O, Canada, npms, passkeys, Exchange, Solaris, the amazing Rob Allen - Rob Allen - SWN #525](http://sites.libsyn.com/18678/ai-cheating-o-canada-npms-passkeys-exchange-solaris-the-amazing-rob-allen-rob-allen-swn-525)
- SANS Internet Storm Center, InfoCON: green
  - [ ] [ISC Stormcast For Friday, October 31st, 2025 https://isc.sans.edu/podcastdetail/9680, (Fri, Oct 31st)](https://isc.sans.edu/diary/rss/32438)
- bellingcat
  - [ ] [‘Pattern of Extreme Brutality’: Tear Gas, Pepper Balls Among Weapons Deployed Against Protesters in Illinois](https://www.bellingcat.com/news/2025/10/31/illinois-immigration-protests/)
- The Hacker News
  - [ ] [OpenAI Unveils Aardvark: GPT-5 Agent That Finds and Fixes Code Flaws Automatically](https://thehackernews.com/2025/10/openai-unveils-aardvark-gpt-5-agent.html)
  - [ ] [Nation-State Hackers Deploy New Airstalk Malware in Suspected Supply Chain Attack](https://thehackernews.com/2025/10/nation-state-hackers-deploy-new.html)
  - [ ] [China-Linked Hackers Exploit Windows Shortcut Flaw to Target European Diplomats](https://thehackernews.com/2025/10/china-linked-hackers-exploit-windows.html)
  - [ ] [China-Linked Tick Group Exploits Lanscope Zero-Day to Hijack Corporate Systems](https://thehackernews.com/2025/10/china-linked-tick-group-exploits.html)
  - [ ] [The MSP Cybersecurity Readiness Guide: Turning Security into Growth](https://thehackernews.com/2025/10/the-msp-cybersecurity-readiness-guide.html)
  - [ ] [CISA and NSA Issue Urgent Guidance to Secure WSUS and Microsoft Exchange Servers](https://thehackernews.com/2025/10/cisa-and-nsa-issue-urgent-guidance-to.html)
  - [ ] [Eclipse Foundation Revokes Leaked Open VSX Tokens Following Wiz Discovery](https://thehackernews.com/2025/10/eclipse-foundation-revokes-leaked-open.html)
  - [ ] [CISA Flags VMware Zero-Day Exploited by China-Linked Hackers in Active Attacks](https://thehackernews.com/2025/10/cisa-flags-vmware-zero-day-exploited-by.html)
  - [ ] [A New Security Layer for macOS Takes Aim at Admin Errors Before Hackers Do](https://thehackernews.com/2025/10/a-new-security-layer-for-macos-takes.html)
- Security Affairs
  - [ ] [Old Linux Kernel flaw CVE-2024-1086 resurfaces in ransomware attacks](https://securityaffairs.com/184076/security/old-linux-kernel-flaw-cve-2024-1086-resurfaces-in-ransomware-attacks.html)
  - [ ] [EY Exposes 4TB SQL Server Backup Publicly on Microsoft Azure](https://securityaffairs.com/184062/data-breach/ernst-young-exposes-4tb-sql-server-backup-publicly-on-microsoft-azure.html)
  - [ ] [Suspected Chinese actors compromise U.S. Telecom firm Ribbon Communications](https://securityaffairs.com/184042/intelligence/suspected-chinese-actors-compromise-u-s-telecom-firm-ribbon-communications.html)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[每日信息流] 2025-11-01 #1037

每日安全资讯（2025-11-01）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2025-11-01 #1037

Description

每日安全资讯（2025-11-01）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions