[每日信息流] 2025-11-04

# 每日安全资讯（2025-11-04）

- SecWiki News
  - [ ] [SecWiki News 2025-11-03 Review](http://www.sec-wiki.com/?2025-11-03)
- Armin Ronacher's Thoughts and Writings
  - [ ] [Absurd Workflows: Durable Execution With Just Postgres](https://lucumr.pocoo.org/2025/11/3/absurd-workflows/)
- Doonsec's feed
  - [ ] [通过黑客技术使用德州扑克洗牌机作弊技术完整视频【中文字幕】](https://mp.weixin.qq.com/s?__biz=MzkwNDg1NTU0Mg==&mid=2247484411&idx=1&sn=7652c782e6892c35dc4ede58a61382d8)
  - [ ] [05 宇宙的十二种假说：量子世界的三种解释](https://mp.weixin.qq.com/s?__biz=Mzk5MDgzMDExMg==&mid=2247484578&idx=1&sn=aaf1952532a1de366667b92b9642ff67)
  - [ ] [网络安全从业者必看：2025年最流行的编程语言与学习价值](https://mp.weixin.qq.com/s?__biz=Mzk0NTc2MTMxNQ==&mid=2247485019&idx=1&sn=1dd2cd57027ae01a3cbbf00d592a9dfd)
  - [ ] [继续防守](https://mp.weixin.qq.com/s?__biz=MzkzMjIwMDY4Nw==&mid=2247486312&idx=1&sn=37cc32d52fe0af524f5ca503b3fd90a8)
  - [ ] [同享人力资源管理系统PeiXun.asmx接口存在SQL注入漏洞 附POC](https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489463&idx=1&sn=0f7ee91993801ca90365e208ebb93f30)
  - [ ] [“黄金入场券”变“卖身契”：美国网络安全人才计划为何面临崩盘？](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183438&idx=1&sn=0ab28c25ca27efa4c48232148a2d768b)
  - [ ] [丝滑的三要素信息泄露](https://mp.weixin.qq.com/s?__biz=Mzg2MjU2MjY4Mw==&mid=2247485274&idx=1&sn=790ea427ae7e33537280191024ff79e3)
  - [ ] [Fastjson原生反序列化](https://mp.weixin.qq.com/s?__biz=Mzg3MDY0NjA5MQ==&mid=2247484664&idx=1&sn=a7d81d79af0ab7b7376b45dc62139493)
  - [ ] [Z0Scan设计与实现：通用插件与分布式扫描新思路](https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486985&idx=1&sn=a1575b1c47b57b9f5081cd7ff1608417)
  - [ ] [DNS 被“动手脚”，全网都可能被带偏：这是如何做到的？](https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247492697&idx=1&sn=ee36847ea6e542685130d42539baa54a)
  - [ ] [对国防软件建设中项目制与招投标模式的反思](https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484508&idx=1&sn=0b807bd32a3eefe2fa33358775cc0c51)
  - [ ] [浅谈网络安全中的“两高一弱”](https://mp.weixin.qq.com/s?__biz=MzA3NDMyNDM0NQ==&mid=2247485236&idx=1&sn=bcecbc8e722acd9d708e2f4a7f4c6f54)
  - [ ] [昭告矣,其实此公众号小编,具操纵时空之能.](https://mp.weixin.qq.com/s?__biz=MzkxNDYxMjM5OA==&mid=2247485934&idx=1&sn=2ec0a96fe302a68ec3faa4fde63c7b0f)
  - [ ] [这可能是最早的2025【全年】攻防演练复盘](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650184987&idx=1&sn=617704c6a3dd62af97dda63b896c7880)
  - [ ] [2025第二届“数证杯”电子取证大赛WP-手机取证部分](https://mp.weixin.qq.com/s?__biz=Mzk4ODk4NDEyOA==&mid=2247484685&idx=1&sn=3fd401789166658b481900cc34e9d0fa)
  - [ ] [每天一个小知识：Git](https://mp.weixin.qq.com/s?__biz=MzE5ODEwMzczMw==&mid=2247483786&idx=1&sn=bef99f14142c2b1d6e97abdbf06138a0)
  - [ ] [朝鲜Kimsuky APT组织针对韩国最新攻击活动分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494082&idx=1&sn=2a67f61ad84c79b158b3c051fc2ded84)
  - [ ] [CertiK《2025 Skynet数字资产财库（DAT）报告》（附报告全文链接）](https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247504741&idx=1&sn=0b50616ad8fa9c3f64dd70e90acc1886)
  - [ ] [安全日志到 ATT&CK 洞察：利用 LLMs 进行高级威胁理解和认知特征推断](https://mp.weixin.qq.com/s?__biz=Mzk4ODI4MDEzNQ==&mid=2247483984&idx=1&sn=6e9128f8113898156a1b59b7447a0c06)
  - [ ] [高级代码审计AI系统-----AuditLuma](https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247493038&idx=1&sn=ae2bbc9227e50919633b950afa262b6b)
  - [ ] [自动化检测 Swagger API 接口未授权访问漏洞工具 - SwaggerHound](https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486637&idx=1&sn=dbd8f8e92bdc4a375a39b1a5964a0d9e)
  - [ ] [【连载】红蓝对抗-攻防演练-WEB安全渗透测试：SQL注入漏洞深度解析（三）](https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484836&idx=1&sn=e518b281f7cd728a8779d4b86cc1f195)
  - [ ] [Balancer V2攻击事件初步分析](https://mp.weixin.qq.com/s?__biz=MzkyMzI2NzIyMw==&mid=2247490177&idx=1&sn=482e7cb00f65283008feac9e5853f3df)
  - [ ] [专题·网络靶场 | 助力构建实战化网安人才培育新范式](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252414&idx=1&sn=ceed228a9d2750b1e1c3c507a77a23c4)
  - [ ] [预约报名 | 破局黑产：守护亿级DAU游戏的安全实战密码](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252414&idx=2&sn=b59c8acf15c068eb08d450fb88938a88)
  - [ ] [专家解读 | 胡坚波：以数据赋能“五个更加”为引领，系统推进城市全域数字化转型](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252414&idx=3&sn=4eb4ec114a8ab69d63976b8c48ae439b)
  - [ ] [专家观点 | 加快建设自主可控的科学数据体系](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252414&idx=4&sn=da5ffd5a8dc81c168158f571da602ded)
  - [ ] [注意 | 你是如何被诈骗团伙盯上的？](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664252414&idx=5&sn=fd73a3c2fcb106c2fbc6fe920312d13a)
  - [ ] [G.O.S.S.I.P 阅读推荐 2025-11-03 互联网上SSH密钥与客户端安全性大检查](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500920&idx=1&sn=fe89e307b4f43636bde5dc8a11dc577c)
  - [ ] [合规视角下数据要素的分类分级管理机制研究](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649174977&idx=1&sn=b37e7643a8d43fe2d8829782d97a0ab7)
  - [ ] [“星火标识×”贯通应用案例08 | 标识助力家居行业品质升级](https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247594188&idx=1&sn=cd1517344c17b3cdf356a215122f8b09)
  - [ ] [《APEC人工智能倡议（2026-2030）》正式发布！（附全文翻译）](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247521092&idx=1&sn=056267ab1f4707df8b40159afcd45f04)
  - [ ] [上海通管局下架27款侵害用户权益行为APP](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247521092&idx=2&sn=e2f0f459429aeb6fe74a4dac0a04b6c1)
  - [ ] [网警雷霆出击！这条黑产链的内幕令人胆寒……](https://mp.weixin.qq.com/s?__biz=MzIzMzI1Njg3Mw==&mid=2651930309&idx=1&sn=6738aa30de6e84e69806a692ee45d8ed)
  - [ ] [记一次被做局的实战](https://mp.weixin.qq.com/s?__biz=MzYyNTcyMTE5NQ==&mid=2247483777&idx=1&sn=10a5d730d16aa2e56b164118c3e92e3c)
  - [ ] [2万元，国产信创私有化部署！IoT技术普惠，物联网已跨越鸿沟，开启县域级商用场景的新未来](https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454941187&idx=1&sn=15294493eabed5815284a9cacf137aea)
  - [ ] [dddd持续优化中](https://mp.weixin.qq.com/s?__biz=MzI4MjI2NDI1Ng==&mid=2247485209&idx=1&sn=c194c9ba9b34b10873c0d44362758a7c)
  - [ ] [【高危漏洞预警】JumpServer ConnectionToken权限验证不当漏洞CVE-2025-62712](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490936&idx=1&sn=67fb6a9539fe1317e913e84e6dd29759)
  - [ ] [【暗网漫步】21 个暗网开源情报工具](https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489829&idx=1&sn=d3c07912dc1d44c06194d5ceb81f3883)
  - [ ] [人物xa0|xa0汪锦岐：换位思考经验是安全赋能业务的门道](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247645980&idx=1&sn=86c7f524cdd13e696d13df5f503fcfee)
  - [ ] [免费赠送 | 防范金融财产诈骗宣传资料（第一期）](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247645980&idx=2&sn=d16e16d687a7e1afdcd59edf16ecaa76)
  - [ ] [免费赠送 | 诸子云星球福利大放送 · 网络威胁报告合集](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247645980&idx=3&sn=0dbad0860186ef132d21e6f4a91ce6e4)
  - [ ] [蚂蚁数科余滨：金融AI的升级，需要科技与业务的深度融合](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932873&idx=1&sn=4aab90e3766d1791865800508df1b2fa)
  - [ ] [AI快讯：香港金管局将推出全新AI策略，银联基于通义千问打造金融支付垂域大模型](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932873&idx=2&sn=7218c8ce3e0bb8a841612334c1ee146d)
  - [ ] [京北方、天阳宏业各中2个！国银金租AI专项建设项目（四个子项目）](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932873&idx=3&sn=065011162db774e7b630b8f23948d3f5)
  - [ ] [【安全圈】新型BOF工具利用Microsoft Teams Cookie加密漏洞可访问用户聊天](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072559&idx=1&sn=0d7a0114f06acdd1cc9c2e8f0cd2a305)
  - [ ] [【安全圈】SMILODON 木马通过伪造 PNG 潜入 WooCommerce 执行支付信息窃取](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072559&idx=2&sn=bcf2305f77dbac5bf6b0b49f922f6bfb)
  - [ ] [【安全圈】俄当局逮捕 Meduza Stealer 开发者：政府机构被黑引发连锁打击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072559&idx=3&sn=06e684d4b77d912cdbe9650c72fa7781)
  - [ ] [【安全圈】Hezi Rash黑客组织，两个月内发动350起DDoS攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072559&idx=4&sn=b171d8a2a04f7373c6eae5c6d7d1ae62)
  - [ ] [热点速览 | 每周网安大事件（20251027-20251102）](https://mp.weixin.qq.com/s?__biz=MzkxMzAzMjU0OA==&mid=2247553494&idx=1&sn=bd9e1cafd8e2cdb7a1179664429dc7d0)
  - [ ] [赏金猎人笔记：XSS漏洞的四种高级利用方式](https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797290&idx=1&sn=f782f20396172b96390121a51b649314)
  - [ ] [进博必打卡！蜚语科技携手长亭科技重磅亮相进博会，联合发布“AI+治理”解决方案！](https://mp.weixin.qq.com/s?__biz=MzI5NzI5NzY1MA==&mid=2247491905&idx=1&sn=f598aa0ebe1339502bfa8e29aafb9d46)
  - [ ] [人工智能智能体白皮书：2025年智能体时代来临](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622059&idx=1&sn=2ff6a6772643beead149161e5210b616)
  - [ ] [北约与日本举行首次国防工业合作与能力专题对话](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622059&idx=2&sn=b4147e46e441027e762c38c3cd84854c)
  - [ ] [即将重磅升级！这款黑科技为实战而来！](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651446921&idx=1&sn=caabbd46ea66940f53665d363e2c420e)
  - [ ] [赠！第10th美亚杯题解新鲜出炉，填问卷免费送](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651446921&idx=2&sn=c6a974fff98ed678079aac04dc4abe68)
  - [ ] [草履虫，会进行简单的免杀活动](https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488761&idx=1&sn=3f07b3387533205490a4b47f336714f0)
  - [ ] [逾百万患者病历数据泄露，医疗软件供应商赔偿超1.37亿元](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515154&idx=1&sn=14aabf3e1667910443d931c9736dc2be)
  - [ ] [黑客入侵赌场洗牌机，长期操控赌局作弊](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515154&idx=2&sn=4d2253ebec91da3c719af631d9420837)
  - [ ] [美澳加网安机构发布微软Exchange Server防护\"迟来已久\"的最佳实践](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329758&idx=1&sn=93616da1ca6b0db40ac6dbcde0259298)
  - [ ] [Claude AI漏洞：攻击者可利用代码解释器窃取企业数据](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329758&idx=2&sn=4c9f0a322f8727237074f2e6c888c42c)
  - [ ] [Linux 内核释放后重用漏洞正被用于勒索软件攻击](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329758&idx=3&sn=84df5ebc3b5f2fb929e1a3dec1288c6c)
  - [ ] [新型Agent感知伪装技术利用ChatGPT Atlas浏览器传播虚假内容](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329758&idx=4&sn=911ca65349fc597e176c85f6ec583715)
  - [ ] [网络安全实战：暴力破解工具大全——详细解析了6款常用工具](https://mp.weixin.qq.com/s?__biz=MzkxNDU0MTUyNw==&mid=2247493731&idx=1&sn=da30f875b8820600ec67c3f84eee92b1)
  - [ ] [第120期 | GPTSecurity周报](https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247497274&idx=1&sn=d46df032e32b89b890a3efaa77071216)
  - [ ] [ISC修复 Kea DHCPv4 中的高危DoS 漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524320&idx=1&sn=306dfe01a82660773ae94222e26c6dc8)
  - [ ] [加拿大：黑客篡改水务设施、油气企业的工控系统](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524320&idx=2&sn=408d076eeaba29aff94cf7ff4b0efd37)
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  - [ ] [【附下载】核心变化一表通：网络安全法 25 版 vs 16 版](https://www.4hou.com/posts/MX4B)
  - [ ] [勒索软件受害者付款率创历史新低 仅23%受攻击企业妥协](https://www.4hou.com/posts/omqN)
- 美团技术团队
  - [ ] [LongCat-Flash-Omni 正式发布并开源：开启全模态实时交互时代](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781668&idx=1&sn=8d8f243125c428c697791e3b687ccc58)
  - [ ] [VitaBench：基于复杂生活场景的交互式 Agent 评测基准](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781668&idx=2&sn=c2ed735dc30dd0ffdeb1eb745abcb1ec)
- 奇安信攻防社区
  - [ ] [众测环境下被忽视的“水洞”攻击面](https://forum.butian.net/share/4620)
- Private Feed for M09Ic
  - [ ] [bolucat released 202511031933 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202511031933)
  - [ ] [mgeeky starred BlWasp/PhantomTask](https://github.com/BlWasp/PhantomTask)
  - [ ] [agentscope-ai released v1.0.7 at agentscope-ai/agentscope](https://github.com/agentscope-ai/agentscope/releases/tag/v1.0.7)
  - [ ] [modelcontextprotocol released v1.3.8 at modelcontextprotocol/registry](https://github.com/modelcontextprotocol/registry/releases/tag/v1.3.8)
  - [ ] [niudaii starred kk12-30/Scan-X](https://github.com/kk12-30/Scan-X)
  - [ ] [gh0stkey starred JaimePolop/RExpository](https://github.com/JaimePolop/RExpository)
  - [ ] [timwhitez starred jpillora/go-tcp-proxy](https://github.com/jpillora/go-tcp-proxy)
  - [ ] [ourren starred LetterLiGo/Agent-WebCloak](https://github.com/LetterLiGo/Agent-WebCloak)
  - [ ] [INotGreen starred Hammer1/cozeworkflows](https://github.com/Hammer1/cozeworkflows)
  - [ ] [gh0stkey starred ABckh/zed-java-eclipse-jdtls](https://github.com/ABckh/zed-java-eclipse-jdtls)
  - [ ] [DVKunion starred bytedance/vArmor](https://github.com/bytedance/vArmor)
- Recent Commits to cve:main
  - [ ] [Update Mon Nov  3 11:31:24 UTC 2025](https://github.com/trickest/cve/commit/8ecd9a8db49fd44275ed9c5ff9b34b40b303484a)
- Blogs on STAR Labs
  - [ ] [Breaking Into a Brother (MFC-J1010DW): Three Security Flaws in a Seemingly Innocent Printer](https://starlabs.sg/blog/2025/11-breaking-into-a-brother-mfc-j1010dw/)
- Sandfly Security Blog RSS Feed
  - [ ] [Linux Stealth Rootkit Hunting Video Presentation](https://sandflysecurity.com/blog/linux-stealth-rootkit-hunting-video-presentation)
- Didier Stevens
  - [ ] [Update: cs-parse-traffic.py Version 0.0.6](https://blog.didierstevens.com/2025/11/03/update-cs-parse-traffic-py-version-0-0-6/)
- Malwarebytes
  - [ ] [Attack of the clones: Fake ChatGPT apps are everywhere](https://www.malwarebytes.com/blog/news/2025/11/attack-of-the-clones-fake-chatgpt-apps-are-everywhere)
  - [ ] [Would you sext ChatGPT? (Lock and Code S06E22)](https://www.malwarebytes.com/blog/podcast/2025/11/would-you-sext-chatgpt-lock-and-code-s06e22)
  - [ ] [Malwarebytes aces PCMag Readers’ Choice Awards and AVLab Cybersecurity Foundation tests](https://www.malwarebytes.com/blog/product/2025/11/malwarebytes-aces-pcmag-readers-choice-awards-and-avlab-cybersecurity-foundation-tests)
  - [ ] [A week in security (October 27 &#8211; November 2)](https://www.malwarebytes.com/blog/news/2025/11/a-week-in-security-october-27-november-2)
- Bug Bounty in InfoSec Write-ups on Medium
  - [ ] [How I Used Sequential IDs to Download an Entire Company’s User Database (And The Joker Helped)](https://infosecwriteups.com/how-i-used-sequential-ids-to-download-an-entire-companys-user-database-and-the-joker-helped-2a8dd23127e6?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [Understanding JSON Web Token (JWT) Security](https://infosecwriteups.com/understanding-json-web-token-jwt-security-48c3a9cc96f2?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [Ehxb | Path Traversal Vulnerabilities](https://infosecwriteups.com/ehxb-path-traversal-vulnerabilities-from-discovery-to-automation-569b64ce46ac?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [The Great Tenant Mix-Up: How I Accidentally Became Every Company’s Employee](https://infosecwriteups.com/the-great-tenant-mix-up-how-i-accidentally-became-every-companys-employee-24418d7a6d38?source=rss----7b722bfd1b8d--bug_bounty)
- Intigriti
  - [ ] [At the forefront of ethical hacking: What’s Intigriti’s impact and position?](https://www.intigriti.com/blog/business-insights/at-the-forefront-of-ethical-hacking-what-s-intigriti-s-impact-and-position)
- Project Zero
  - [ ] [Defeating KASLR by Doing Nothing at All](https://googleprojectzero.blogspot.com/2025/11/defeating-kaslr-by-doing-nothing-at-all.html)
- 奇客Solidot–传递最新科技情报
  - [ ] [AI 是否真的影响了工作岗位招聘？](https://www.solidot.org/story?sid=82710)
  - [ ] [美国学者向欧洲申请研究拨款](https://www.solidot.org/story?sid=82709)
  - [ ] [让你闻起来更吸引人的食物](https://www.solidot.org/story?sid=82708)
  - [ ] [报告称波兰语最容易被 AI 理解](https://www.solidot.org/story?sid=82707)
  - [ ] [Jabber Zeus 程序员 ‘MrICQ’被引渡至美国](https://www.solidot.org/story?sid=82706)
  - [ ] [注意力不集中可能是大脑在清理垃圾](https://www.solidot.org/story?sid=82705)
  - [ ] [OpenAI 可能大到无法倒下](https://www.solidot.org/story?sid=82704)
  - [ ] [社交媒体同意遵守澳大利亚对青少年的社媒禁令](https://www.solidot.org/story?sid=82703)
  - [ ] [韩国要求停车场盖太阳能车棚](https://www.solidot.org/story?sid=82702)
  - [ ] [在被禁止收集数据之后厂商远程发送指令让智能吸尘器停止工作](https://www.solidot.org/story?sid=82701)
  - [ ] [微软七个月都未修复的 Windows 0day 正被活跃利用](https://www.solidot.org/story?sid=82700)
  - [ ] [Sam Altman 发现拿回 Roadster 跑车的定金非常难](https://www.solidot.org/story?sid=82699)
- rtl-sdr.com
  - [ ] [Tech Minds: A Review of the Vivid Unit with GPSDR RTL-SDR Module](https://www.rtl-sdr.com/tech-minds-a-review-of-the-vivid-unit-with-gpsdr-rtl-sdr-module/)
- HackerNews
  - [ ] [疑似国家级黑客部署新型  Airstalk  恶意软件，涉嫌供应链攻击](https://hackernews.cc/archives/61362)
  - [ ] [面部识别公司 Clearview AI 在奥地利面临刑事诉讼](https://hackernews.cc/archives/61359)
  - [ ] [俄罗斯逮捕三名 Meduza 窃取器恶意软件疑似开发者](https://hackernews.cc/archives/61357)
  - [ ] [《鬼灭之刃》出版商 Viz Media 谷歌云盘遭入侵](https://hackernews.cc/archives/61355)
  - [ ] [关键基础设施遭网络攻击，加拿大建议启用双重认证](https://hackernews.cc/archives/61353)
  - [ ] [美商务部以国家安全为由，拟禁售 TP-Link 路由器](https://hackernews.cc/archives/61349)
- 黑海洋 - Wiki
  - [ ] [ezBookkeeping：轻量自托管的智能个人记账系统](https://blog.upx8.com/4892)
  - [ ] [图片压缩工具 图压v0.4.1](https://blog.upx8.com/4891)
- 安全分析与研究
  - [ ] [朝鲜Kimsuky APT组织针对韩国最新攻击活动分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494082&idx=1&sn=2a67f61ad84c79b158b3c051fc2ded84)
- 黑鸟
  - [ ] [“黄金入场券”变“卖身契”：美国网络安全人才计划为何面临崩盘？](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183438&idx=1&sn=0ab28c25ca27efa4c48232148a2d768b)
- 安全客
  - [ ] [黑客入侵宾夕法尼亚大学，滥用官方邮箱群发挑衅邮件](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789358&idx=1&sn=9183d04829ee6db0595d0d0151100544)
- 奇安信 CERT
  - [ ] [【已复现】JumpServer ConnectionToken 权限验证不当漏洞(CVE-2025-62712)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504095&idx=1&sn=207d2951854a132a075d599eb74cacd7)
- 看雪学苑
  - [ ] [SDC2025 议题回顾 | 危险游戏：智能驾驶一线攻防实战](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603105&idx=1&sn=dd0f23c875550afb8a66d74bcc7021b3)
  - [ ] [直播预约 | 破局黑产：守护亿级DAU游戏的安全实战密码](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603105&idx=2&sn=55924a6230b6e3d595cfa9cfa57b0b95)
- 微步在线研究响应中心
  - [ ] [已复现 | Redis Lua 远程代码执行漏洞，PoC公开](https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507953&idx=1&sn=a0962b3d31b98a3207e211498969db4f)
- 代码卫士
  - [ ] [ISC修复 Kea DHCPv4 中的高危DoS 漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524320&idx=1&sn=306dfe01a82660773ae94222e26c6dc8)
  - [ ] [加拿大：黑客篡改水务设施、油气企业的工控系统](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524320&idx=2&sn=408d076eeaba29aff94cf7ff4b0efd37)
- 安全内参
  - [ ] [逾百万患者病历数据泄露，医疗软件供应商赔偿超1.37亿元](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515154&idx=1&sn=14aabf3e1667910443d931c9736dc2be)
  - [ ] [黑客入侵赌场洗牌机，长期操控赌局作弊](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515154&idx=2&sn=4d2253ebec91da3c719af631d9420837)
- dotNet安全矩阵
  - [ ] [从外部实体到文件读取：.NET XXE 实战剖析](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500884&idx=1&sn=2c221d41c1fb5305e877c558fee8dc3a)
  - [ ] [.NET 实战攻防电子报刊，从内网基础到高阶实战！](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500884&idx=2&sn=21adf19f1373eea3fbfc8ac57ae201a7)
  - [ ] [.NET 通过 DInvoke 执行 UUID 编码的 Shellcode](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500884&idx=3&sn=d75f5667216ef0efccff455bb13b2c0d)
- 二道情报贩子
  - [ ] [共勉](https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489724&idx=1&sn=e3b3a3275ac3fa41d4c4467ce0609393)
- 丁爸 情报分析师的工具箱
  - [ ] [【情报】美国重点机构邮箱后缀](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152782&idx=1&sn=30d373e69b084712141982eb96ab0558)
- 安全圈
  - [ ] [【安全圈】新型BOF工具利用Microsoft Teams Cookie加密漏洞可访问用户聊天](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072559&idx=1&sn=0d7a0114f06acdd1cc9c2e8f0cd2a305)
  - [ ] [【安全圈】SMILODON 木马通过伪造 PNG 潜入 WooCommerce 执行支付信息窃取](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072559&idx=2&sn=bcf2305f77dbac5bf6b0b49f922f6bfb)
  - [ ] [【安全圈】俄当局逮捕 Meduza Stealer 开发者：政府机构被黑引发连锁打击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072559&idx=3&sn=06e684d4b77d912cdbe9650c72fa7781)
  - [ ] [【安全圈】Hezi Rash黑客组织，两个月内发动350起DDoS攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072559&idx=4&sn=b171d8a2a04f7373c6eae5c6d7d1ae62)
- 安全研究GoSSIP
  - [ ] [G.O.S.S.I.P 阅读推荐 2025-11-03 互联网上SSH密钥与客户端安全性大检查](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500920&idx=1&sn=fe89e307b4f43636bde5dc8a11dc577c)
- 安全学术圈
  - [ ] [西交利物浦大学 | HoneyLLM：基于大语言模型的中交互蜜罐系统](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247494294&idx=1&sn=942a0adaf24ca646a1a790fb2fa22a71)
- 雷神众测
  - [ ] [雷神众测漏洞周报2025.10.27-2025.11.02](https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503587&idx=1&sn=1eeb1f6ec48a5b08eded94f7eef3e282)
- 安全牛
  - [ ] [过去20年全球个人数据累计泄露近580亿条，用户密码是重灾区；微软Azure Local更新引发严重系统故障 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139217&idx=1&sn=0449f84627d42ce4a21cc16bcb6e4106)
  - [ ] [不同规模企业该如何配置适合的泛云主机安全方案](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139217&idx=2&sn=0f3d5cbe0b673ed69396a183db8d224b)
- 火线安全平台
  - [ ] [挖洞挣钱，“双十一”买买买](https://mp.weixin.qq.com/s?__biz=MzU4MjEwNzMzMg==&mid=2247494867&idx=1&sn=57c006c727c4f65400559f11c6d9fcfa)
- 天黑说嘿话
  - [ ] [第二届“数证杯”初赛 服务器 K8S集群重建](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485034&idx=1&sn=4e658704e582d808d1641bfb03392fad)
- DataCon大数据安全分析竞赛
  - [ ] [【报名倒计时2天】模型之争，一“触”即发！](https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247489455&idx=1&sn=2d7ebccd663a0e78141b362b2dd8aecc)
  - [ ] [DataCon2025报名倒计时2天：用数据，守护未来！（文末抽奖）](https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247489455&idx=2&sn=9020e9dc57c08dcc10ed86c55660224c)
- GobySec
  - [ ] [插件分享 |DictBatcher暴力破解字典批量管理与智能口令生成工具](https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545828&idx=1&sn=a0ea1d0e17463c7dd3d611678856e357)
- 补天平台
  - [ ] [秋冬福利季｜速来⏳10个漏洞轻松赢最新款周边！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509532&idx=1&sn=ed79c6207af431e823d899ecdb61f939)
  - [ ] [白帽湘聚，火力全开！补天长沙站报名通道开启！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509532&idx=2&sn=c46dcc4a6aa48751f043f58be4586300)
- 数世咨询
  - [ ] [AI 安全新防线：AI-SPM 会成为大语言模型落地的标准防护吗？](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540692&idx=1&sn=5b1f189cd3ae9baefabb03b4c7962240)
- 极客公园
  - [ ] [豆包，正在悄悄开启「电商新链路」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653089990&idx=1&sn=4f0e0a5428f7d8a5099f70c986aac961)
  - [ ] [Rokid 乐奇联手 BOLON 眼镜：眼镜巨头依视路的中国棋局](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653089987&idx=1&sn=555c3d0bf184f33aa1eb72ef9f40c6c8)
  - [ ] [我体验了一下 AI 时代的「家」：快跑，到处都是 AI](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653089987&idx=2&sn=a656e26398d3ead6bdc9ac8524314f18)
  - [ ] [T1 零封TES 战队，中国战队无缘总决赛舞台；英伟达合作制药巨头打造超级计算机；理想汽车汤靖详解MEGA起火事件｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653089921&idx=1&sn=595f6d0e240582453aeecfc06145dbb8)
- 嘶吼专业版
  - [ ] [勒索软件攻击受害者付款率创历史新低 仅23%企业妥协](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585126&idx=1&sn=9385ee3bf8e2555b92879dba3f03b9a7)
  - [ ] [安全动态回顾|网络安全法完成修改 新型Atroposia恶意软件上线内置本地漏洞扫描功能](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585126&idx=2&sn=2bd8b21d75d17810d18190ddf4ae5231)
- 情报分析师
  - [ ] [从开源情报到人力情报，按难度对情报学科进行排名](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562803&idx=1&sn=bc5abd894626686933c4386a0d454836)
  - [ ] [美日稀土供应链协议对我影响及应对策略分析](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562803&idx=2&sn=0f1d010e44826685a6b83d1f241f25c7)
  - [ ] [2025年10月29日美韩首脑会谈对我影响分析](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562803&idx=3&sn=7d2a271dca85f6e62c21f7b33eb32475)
- 滴滴安全应急响应中心
  - [ ] [DSRC2025年度冲榜活动](https://mp.weixin.qq.com/s?__biz=MzA3Mzk1MDk1NA==&mid=2651908946&idx=1&sn=b22dfbc8fe6ac8b2d8b382368463502b)
- 专注安管平台
  - [ ] [Gartner分析师谈AI Agent和Agentic AI](https://mp.weixin.qq.com/s?__biz=MzUyNzMxOTAwMw==&mid=2247485079&idx=1&sn=86c2df034a23791da7b39aa42cba0fc6)
- 复旦白泽战队
  - [ ] [【ICML25】使用信息瓶颈理论为点云模型进行错误归因，为安全问题构建可解释工具](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247496498&idx=1&sn=20bf10fae7a9ef8e957d7db9702b74d8)
- CNVD漏洞平台
  - [ ] [CNVD漏洞周报2025年第42期](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496464&idx=1&sn=4ae989f66cbc49dad8bf3659e733c8ec)
  - [ ] [上周关注度较高的产品安全漏洞(20251027-20251102)](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496464&idx=2&sn=41f254ee0dadde457d733b7b815fc85a)
- ChaMd5安全团队
  - [ ] [恶意LNK文件分析](https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247513590&idx=1&sn=62f9b7db4634f340714e1a8455bc2000)
- 腾讯安全威胁情报中心
  - [ ] [情报每周回顾 2025-11-3](https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510941&idx=1&sn=88bfea148438fcee65ce5b9b72e4fc77)
- 迪哥讲事
  - [ ] [高阶IDOR思路-二阶IDOR](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498500&idx=1&sn=0c126e53936e01aa5e620bbca01723ab)
- 360数字安全
  - [ ] [563项风险点！360支撑某世界500强集团智能体安全落地](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582741&idx=1&sn=93e679e94638e25c972913a7d6f613ee)
- Microsoft Security Blog
  - [ ] [SesameOp: Novel backdoor uses OpenAI Assistants API for command and control](https://www.microsoft.com/en-us/security/blog/2025/11/03/sesameop-novel-backdoor-uses-openai-assistants-api-for-command-and-control/)
- Virus Bulletin's blog
  - [ ] [In memoriam: David Harley](https://www.virusbulletin.com/blog/2025/11/memoriam-david-harley/)
- Over Security - Cybersecurity news aggregator
  - [ ] [How an ex-L3 Harris Trenchant boss stole and sold cyber exploits to Russia](https://techcrunch.com/2025/11/03/how-an-ex-l3-harris-trenchant-boss-stole-and-sold-cyber-exploits-to-russia/)
  - [ ] [Hacker steals over $120 million from Balancer DeFi crypto protocol](https://www.bleepingcomputer.com/news/cryptocurrency/hacker-steals-over-120-million-from-balancer-defi-crypto-protocol/)
  - [ ] [More than $100 million stolen in exploit of Balancer DeFi protocol](https://therecord.media/crypto-heist-balancer-exploit)
  - [ ] [Fake Solidity VSCode extension on Open VSX backdoors developers](https://www.bleepingcomputer.com/news/security/fake-solidity-vscode-extension-on-open-vsx-backdoors-developers/)
  - [ ] [Lawmakers ask FTC to probe Flock Safety’s cybersecurity practices](https://therecord.media/wyden-letter-ftc-flock-safety-investigate-cybersecurity-practices)
  - [ ] [Cargo theft gets a boost from hackers using remote monitoring tools](https://therecord.media/cargo-theft-hackers-remote-monitoring-tools)
  - [ ] [Building a Proactive Intelligence-Led Physical Security Program with Flashpoint](https://flashpoint.io/blog/flashpoint-echosec-intelligence-led-physical-security/)
  - [ ] [Data breach costs lead to 90% drop in operating profit at South Korean telecom giant](https://therecord.media/data-breach-costs-lead-to-profit-decline-south-korea-telecom)
  - [ ] [Microsoft: SesameOp malware abuses OpenAI Assistants API in attacks](https://www.bleepingcomputer.com/news/security/microsoft-sesameop-malware-abuses-openai-assistants-api-in-attacks/)
  - [ ] [US cybersecurity experts indicted for BlackCat ransomware attacks](https://www.bleepingcomputer.com/news/security/us-cybersecurity-experts-indicted-for-blackcat-ransomware-attacks/)
  - [ ] [Hackers use RMM tools to breach freighters and steal cargo shipments](https://www.bleepingcomputer.com/news/security/hackers-use-rmm-tools-to-breach-freighters-and-steal-cargo-shipments/)
  - [ ] [TP-Link, la proposta USA: divieto di vendita dei router prodotti in Cina](https://www.cybersecurity360.it/nuove-minacce/tp-link-la-proposta-usa-divieto-di-vendita-dei-router-prodotti-in-cina/)
  - [ ] [Threat Intelligence - Vulnerability insights](https://www.certego.net/blog/whitepaper-ottobre-2025-threat-intelligence-insights/)
  - [ ] [Come installare una VPN sul router, guida passo passo](https://www.cybersecurity360.it/cultura-cyber/come-installare-una-vpn-sul-router/)
  - [ ] [Autenticazione e tracciabilità nelle comunicazioni: così si contrasta il vishing](https://www.cybersecurity360.it/news/autenticazione-e-tracciabilita-nelle-comunicazioni-cosi-si-contrasta-il-vishing/)
  - [ ] [Japanese retailer Askul confirms data leak after cyberattack claimed by Russia-linked group](https://therecord.media/askul-confirms-data-breach-ransomware-incident)
  - [ ] [OAuth Device Code Phishing: Azure vs. Google Compared](https://www.bleepingcomputer.com/news/security/oauth-device-code-phishing-azure-vs-google-compared/)
  - [ ] [Microsoft: Patch for WSUS flaw disabled Windows Server hotpatching](https://www.bleepingcomputer.com/news/microsoft/microsoft-patch-for-wsus-flaw-disabled-windows-server-hotpatching/)
  - [ ] [Hackers are attacking Britain’s drinking water suppliers](https://therecord.media/britain-water-supply-cybersecurity-incident-reports-dwi-nis)
  - [ ] [The Week in Vulnerabilities: Cyble Urges Apache, Microsoft Fixes](https://cyble.com/blog/cyble-weekly-vulnerability-report-3/)
  - [ ] [Il 25% dei leader aziendali italiani non comprende l’importanza della cybersecurity](https://www.securityinfo.it/2025/11/03/il-25-dei-leader-aziendali-italiani-non-comprende-limportanza-della-cybersecurity/)
  - [ ] [Risolvere un grave incidente informatico: dall’exploit alla difesa passo-passo](https://www.cybersecurity360.it/nuove-minacce/incident-response-attacco-informatico-difesa-passo-passo/)
  - [ ] [Microsoft: Windows Task Manager won’t quit after KB5067036 update](https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-task-manager-wont-quit-after-kb5067036-update/)
  - [ ] [A practical Cisco NDO multi-site use case: modelling](https://www.adainese.it/blog/2025/11/02/a-practical-cisco-ndo-multi-site-use-case-modelling/)
  - [ ] [CERT-AGID 25–31 ottobre: PagoPA, ministeri e università nel mirino del phishing](https://www.securityinfo.it/2025/11/03/cert-agid-25-31-ottobre-pagopa-ministeri-e-universita-nel-mirino-del-phishing/)
  - [ ] [Deepfake-as-a-Service 2025 – How Voice Cloning and Synthetic Media Fraud Are Changing Enterprise Defenses](https://www.darknet.org.uk/2025/10/deepfake-as-a-service-2025-how-voice-cloning-and-synthetic-media-fraud-are-changing-enterprise-defenses/)
  - [ ] [mcp-scanner – Python MCP Scanner for Prompt-Injection and Insecure Agents](https://www.darknet.org.uk/2025/10/mcp-scanner-python-mcp-scanner-for-prompt-injection-and-insecure-agents/)
- ICT Security Magazine
  - [ ] [Sanzioni cyber: la frammentazione di internet tra geopolitica e controllo digitale](https://www.ictsecuritymagazine.com/notizie/sanzioni-cyber/)
- SEI Blog
  - [ ] [A Model-Based Approach for Software Acquisition](https://www.sei.cmu.edu/blog/a-model-based-approach-for-software-acquisition/?utm_source=blog&utm_medium=rss&utm_campaign=my_site_updates)
- IT Service Management News
  - [ ] [Petri per la sicurezza dei sistemi IA](http://blog.cesaregallotti.it/2025/11/petri-per-la-sicurezza-dei-sistemi-ia.html)
  - [ ] [Implementing regulation 2025/2160 per fornitori eIDAS non qualificati](http://blog.cesaregallotti.it/2025/11/implementing-regulation-20252160-per.html)
- Qualys Security Blog
  - [ ] [Inside an Automotive Giant’s Data Leak — A Cloud Misconfiguration Lesson for AWS Users](https://blog.qualys.com/category/vulnerabilities-threat-research)
- blackMORE Ops
  - [ ] [Install YTPTube on Unraid](https://www.blackmoreops.com/install-ytptube-on-unraid/)
  - [ ] [Install YTPTube on Ubuntu Linux](https://www.blackmoreops.com/install-ytptube-on-ubuntu-linux/)
- Schneier on Security
  - [ ] [AI Summarization Optimization](https://www.schneier.com/blog/archives/2025/11/ai-summarization-optimization.html)
- Troy Hunt's Blog
  - [ ] [Weekly Update 476](https://www.troyhunt.com/weekly-update-476/)
- Instapaper: Unread
  - [ ] [WhatsApp adds passwordless chat backups on iOS and Android](https://www.bleepingcomputer.com/news/security/whatsapp-adds-passwordless-chat-backups-on-ios-and-android/)
  - [ ] [The cryptography behind electronic passports](https://blog.trailofbits.com/2025/10/31/the-cryptography-behind-electronic-passports/)
- The Hacker News
  - [ ] [Malicious VSX Extension "SleepyDuck" Uses Ethereum to Keep Its Command Server Alive](https://thehackernews.com/2025/11/malicious-vsx-extension-sleepyduck-uses.html)
  - [ ] [Cybercriminals Exploit Remote Monitoring Tools to Infiltrate Logistics and Freight Networks](https://thehackernews.com/2025/11/cybercriminals-exploit-remote.html)
  - [ ] [⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More](https://thehackernews.com/2025/11/weekly-recap-lazarus-hits-web3-intelamd.html)
  - [ ] [The Evolution of SOC Operations: How Continuous Exposure Management Transforms Security Operations](https://thehackernews.com/2025/11/the-evolution-of-soc-operations-how.html)
  - [ ] [Researchers Uncover BankBot-YNRK and DeliveryRAT Android Trojans Stealing Financial Data](https://thehackernews.com/2025/11/researchers-uncover-bankbot-ynrk-and.html)
  - [ ] [New HttpTroy Backdoor Poses as VPN Invoice in Targeted Cyberattack on South Korea](https://thehackernews.com/2025/11/new-httptroy-backdoor-poses-as-vpn.html)
- The Register - Security
  - [ ] [MIT Sloan quietly shelves AI ransomware study after researcher calls BS](https://go.theregister.com/feed/www.theregister.com/2025/11/03/mit_sloan_updates_ai_ransomware_paper/)
  - [ ] [Ransomware negotiator, pay thyself!](https://go.theregister.com/feed/www.theregister.com/2025/11/03/rogue_ransomware_negotiators/)
  - [ ] [AWS, Nvidia, CrowdStrike seek security startups to enter the arena](https://go.theregister.com/feed/www.theregister.com/2025/11/03/cybersecurity_startup_accelerator/)
  - [ ] [Cybercrooks team up with organized crime to steal pricey cargo](https://go.theregister.com/feed/www.theregister.com/2025/11/03/cybercriminals_team_up_with_ocgs/)
  - [ ] [Metropolitan Police hails facial recognition tech after record year for arrests](https://go.theregister.com/feed/www.theregister.com/2025/11/03/metropolitan_police_hails_facial_recognition/)
  - [ ] [The race to shore up Europe’s power grids against cyberattacks and sabotage](https://go.theregister.com/feed/www.theregister.com/2025/11/03/europe_power_grid_security/)
- Security Affairs
  - [ ] [Jabber Zeus developer ‘MrICQ’ extradited to US from Italy](https://securityaffairs.com/184158/cyber-crime/jabber-zeus-developer-mricq-extradited-to-us-from-italy.html)
  - [ ] [Chrome 142 Released: Two high-severity V8 flaws fixed, $100K in rewards paid](https://securityaffairs.com/184149/security/chrome-142-released-two-high-severity-v8-flaws-fixed-100k-in-rewards-paid.html)
  - [ ] [Android Apps misusing NFC and HCE to steal payment data on the rise](https://securityaffairs.com/184130/security/android-apps-misusing-nfc-and-hce-to-steal-payment-data-on-the-rise.html)
  - [ ] [Conduent January 2025 breach impacts 10M+ people](https://securityaffairs.com/184128/data-breach/conduent-january-2025-breach-impacts-10m-people.html)
- TorrentFreak
  - [ ] [Warner Bros. Discovery & TNT Sports Target UK Piracy Blocking Injunction](https://torrentfreak.com/warner-bros-discovery-tnt-sports-target-uk-piracy-blocking-injunction-251103/)
- Tor Project blog
  - [ ] [Keeping the internet free together: Join us for State of the Onion 2025](https://blog.torproject.org/state-of-the-onion-2025/)
  - [ ] [Arti 1.7.0 released: Onion service restricted discovery, experimental HTTP proxy, relay development, and more.](https://blog.torproject.org/arti_1_7_0_released/)
- Securityinfo.it
  - [ ] [Il 25% dei leader aziendali italiani non comprende l’importanza della cybersecurity](https://www.securityinfo.it/2025/11/03/il-25-dei-leader-aziendali-italiani-non-comprende-limportanza-della-cybersecurity/?utm_source=rss&utm_medium=rss&utm_campaign=il-25-dei-leader-aziendali-italiani-non-comprende-limportanza-della-cybersecurity)
  - [ ] [CERT-AGID 25–31 ottobre: PagoPA, ministeri e università nel mirino del phishing](https://www.securityinfo.it/2025/11/03/cert-agid-25-31-ottobre-pagopa-ministeri-e-universita-nel-mirino-del-phishing/?utm_source=rss&utm_medium=rss&utm_campaign=cert-agid-25-31-ottobre-pagopa-ministeri-e-universita-nel-mirino-del-phishing)
- SANS Internet Storm Center, InfoCON: green
  - [ ] [XWiki SolrSearch Exploit Attempts (CVE-2025-24893) with link to Chicago Gangs/Rappers, (Mon, Nov 3rd)](https://isc.sans.edu/diary/rss/32444)
  - [ ] [ISC Stormcast For Monday, November 3rd, 2025 https://isc.sans.edu/podcastdetail/9682, (Mon, Nov 3rd)](https://isc.sans.edu/diary/rss/32442)
- Deeplinks
  - [ ] [License Plate Surveillance Logs Reveal Racist Policing Against Romani People](https://www.eff.org/deeplinks/2025/11/license-plate-surveillance-logs-reveal-racist-policing-against-romani-people)
  - [ ] [Application Gatekeeping: An Ever-Expanding Pathway to Internet Censorship](https://www.eff.org/deeplinks/2025/11/application-gatekeeping-ever-expanding-pathway-internet-censorship)
  - [ ] [EFF Stands With Tunisian Media Collective Nawaat](https://www.eff.org/deeplinks/2025/11/eff-stands-tunisian-media-collective-nawaat)
  - [ ] [What EFF Needs in a New Executive Director](https://www.eff.org/deeplinks/2025/11/what-eff-needs-new-executive-director)
- Security Weekly Podcast Network (Audio)
  - [ ] [Transforming Frontline Workflows with Passwordless Access, AI costs, and the News - Joel Burleson-Davis - ESW #431](http://sites.libsyn.com/18678/transforming-frontline-workflows-with-passwordless-access-ai-costs-and-the-news-joel-burleson-davis-esw-431)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[每日信息流] 2025-11-04 #1040

每日安全资讯（2025-11-04）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2025-11-04 #1040

Description

每日安全资讯（2025-11-04）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions