[每日信息流] 2025-11-07 #1043
Description
每日安全资讯（2025-11-07）
- Private Feed for M09Ic
- kpcyrd contributed to kpcyrd/rebuilderd
- mgeeky starred microsoft/data-formulator
- bolucat released 202511061936 at bolucat/Archive
- kpcyrd starred johannesst/rebuilderd-setup-tutorial
- jar-analyzer released 5.10 at jar-analyzer/jar-analyzer
- mgeeky starred MorDavid/DonPwner
- niudaii starred tmc/langchaingo
- Chuyu-Team released v1.1.9-Beta4 at Chuyu-Team/YY-Thunks
- gh0stkey starred masterqiu01/cross-file-obfuscator
- Rvn0xsy forked Rvn0xsy/astrbot_plugin_n8n from Wanxp/astrbot_plugin_n8n
- PrefectHQ released 3.5.1.dev3 at PrefectHQ/prefect
- DVKunion starred Ne0nd0g/merlin
- safedv starred ReversecLabs/C3
- gh0stkey starred glowingjade/obsidian-smart-composer
- niudaii starred x-cmd/x-cmd
- whwlsfb starred 666ghj/BettaFish
- Ascotbe starred 666ghj/BettaFish
- niudaii starred jiansiting/CVE-2025-59287
- gh0stkey starred KasperskyLab/hrtng
- pydantic released v1.11.1 at pydantic/pydantic-ai
- Tenable Blog
- paper - Last paper
- Der Flounder
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
- 奇安信攻防社区
- Recent Commits to cve:main
- Trustwave Blog
- Doonsec's feed
- AI 大模型已从网络攻击辅助工具升级为核心攻击武器
- 【高危漏洞预警】Django SQL注入漏洞CVE-2025-64459)
- 云服务-AK/SK利用&元数据凭证接管
- Malicious use of login verification codes in iPhones
- 2025 Distinguished Paper Award(NDSS)-ReDAN
- 匿名追踪
- 情报显示俄军方高层访朝，有迹象表明朝正在为派遣军队做准备。
- 美日稀土供应链协议对我影响及应对策略分析
- 从扒官网到捡源码：我的 “瞎猫撞上死耗子” 式渗透
- CTF出题人亲授！双视角碾压Web安全
- 三十而励 融智跃迁～祝福天融信30岁生日快乐U0001f9e1🤞🥂
- Less-8 GET-Blind-Boolean Based-Single Quotes
- 每周论文分享-7
- 公示！全国先进社会组织！
- 明天继续阳线
- 从“空白页”到突破口：渗透测试中的信息发现七种思路
- 活该你能挖到洞
- 漏洞就藏在“乱码”里：赏金猎人的字符编码破译术
- 北京市商用密码学习讲堂（第二十二期）成功举办
- 2025年人工智能产业及赋能新型工业化创新任务揭榜挂帅工作启动
- 专家解读 | 范科峰：强化标准引领，推动城市全域数字化转型高质量发展
- 谷歌：AI恶意软件是网络安全行业的转折点
- 刚换的新 Mac，软件运行却十分卡顿？很多人都忽略了这一点……
- JCG Q30 Pro涨价太离谱，劝退
- 【研判黑科技】这是一款容易“上瘾”的AI聊天研判黑科技，今天拿到试用后已经停不下来啦！
- 【翻译】Part 1: 使用AI 进行交易到底靠不靠谱？
- 从“十五五”规划看我国6G的发展
- 解读︱新修改的网络安全法有何丰富内涵？
- AI并没有让网络安全创业变得更容易
- 免费赠送 | 青少年安全意识科普素材（第一期）
- 免费赠送 | 诸子云星球福利大放送 · AI安全报告合集
- 什么是蜜罐和沙箱？
- 有关单位未按规定发布漏洞信息被处罚
- 国家网信办发布第十四批深度合成服务算法备案信息
- 第八届虹桥国际经济论坛“智能制造助力中国式现代化——全球智能制造2030：共创未来”分论坛成功举办
- 行业资讯：迪普科技员工持股平台减持2.78亿，这次受益的是员工
- 零碳园区建设加速，赛迪认证助力企业抢占绿色先机
- 三季度报告：深信服第三季度净利润为1.47亿，前三季度累计净利润-0.81亿
- 网安原创文章推荐【2025/11/5】
- 网安原创文章推荐【2025/11/4】
- 黑客利用OneDrive.exe的DLL侧载漏洞执行恶意代码
- Windows云文件功能中的驱动程序漏洞被黑客利用，成功提升系统权限
- 2025 年 20 款最佳代码分析工具
- 代码质量差的代价：可维护性如何影响你的利润
- 美国警察，开始“刷脸”
- 最新监管重点来了，直播行业进入“合规突围战”
- SecWiki News
- 一个被知识诅咒的人
- obaby@mars
- Microsoft Security Blog
- Cerbero Blog
- ElcomSoft blog
- GuidePoint Security
- Malwarebytes
- CCC Event Blog
- 安全分析与研究
- 黑鸟
- 威努特安全网络
- 黑海洋 - Wiki
- 奇客Solidot–传递最新科技情报
- HackerNews
- 安全内参
- 丁爸 情报分析师的工具箱
- 代码卫士
- 吾爱破解论坛
- 慢雾科技
- 看雪学苑
- 二道情报贩子
- 安全圈
- 中国信息安全
- 网安杂谈
- 极客公园
- 补天平台
- 安全学术圈
- 默安科技
- 专注安管平台
- 谛听ditecting
- 数世咨询
- 吴鲁加
- 火绒安全
- 迪哥讲事
- 360数字安全
- Over Security - Cybersecurity news aggregator
- AI-Slop ransomware test sneaks on to VS Code marketplace
- Ed tech company fined $5.1 million for poor data security practices leading to hack
- Nevada government declined to pay ransom, says cyberattack traced to breach in May
- How a ransomware gang encrypted Nevada government's systems
- Remember, remember the fifth of November
- Italian political consultant says he was targeted with Paragon spyware
- EU Parliament committee votes to advance controversial Europol data sharing proposal
- Italian communications executive reveals he was targeted with Paragon spyware
- L’era dei malware AI-driven è iniziata: ecco i rischi cyber per aziende e PMI
- Intelligenza artificiale nel settore Finance: rischi e accorgimenti del “journey to AI”
- LockBit 5.0 Analysis: Technical Deep Dive into the RaaS Giant’s Latest Upgrade
- Continuous Purple Teaming: Turning Red-Blue Rivalry into Real Defense
- Speedrunning the Cyber Kill Chain
- ClickFix malware attacks evolve with multi-OS support, video tutorials
- Critical Cisco UCCX flaw lets attackers run commands as root
- Appalti nel settore cyber, premi a chi sceglie le soluzioni di Paesi NATO e terzi. Tra questi anche Israele
- Russia’s Sandworm hackers deploying wipers against Ukraine’s grain industry
- Prevenire la minaccia cyber nel settore sanitario: le raccomandazioni di ACN
- Crittografia post quantistica: la sfida da affrontare
- Do robots dream of secure networking? Teaching cybersecurity to AI systems
- The Top-5 Technology Requirements for Fraud Prevention in Financial Services
- Sandworm hackers use data wipers to disrupt Ukraine's grain sector
- ANY.RUN Wins Trailblazing Threat Intelligence at the 2025 Top InfoSec Innovators Awards
- Videosorveglianza urbana: pochi giorni e i filmati spariscono, ma la privacy non è un alibi
- Manufacturing security summit: la NIS 2 è la risposta ai cyber attacchi in aumento
- Phishing Campaigns “I Paid Twice” Targeting Booking.com Hotels and Customers
- Cloudflare Scrubs Aisuru Botnet from Top Domains List
- 凌晨一点零三分
- NETRESEC Network Security Blog
- Arturo Di Corinto
- 嘶吼专业版
- ICT Security Magazine
- SANS Internet Storm Center, InfoCON: green
- Have I Been Pwned latest breaches
- TrustedSec
- Securityinfo.it
- 白帽子章华鹏
- Schneier on Security
- T00ls安全
- IT Service Management News
- The Hacker News
- Trojanized ESET Installers Drop Kalambur Backdoor in Phishing Attacks on Ukraine
- Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362
- From Tabletop to Turnkey: Building Cyber Resilience in Financial Services
- ThreatsDay Bulletin: AI Tools in Malware, Botnets, GDI Flaws, Election Attacks & More
- Bitdefender Named a Representative Vendor in the 2025 Gartner® Market Guide for Managed Detection and Response
- Hackers Weaponize Windows Hyper-V to Hide Linux VM and Evade EDR Detection
- SonicWall Confirms State-Sponsored Hackers Behind September Cloud Backup Breach
- Security Weekly Podcast Network (Audio)
- 恒脑与AI
- Krebs on Security
- 安全牛
- Security Affairs
- 纽创信安
- TaoSecurity Blog
- Deeplinks
- The Register - Security
- Gootloader malware back for the attack, serves up ransomware
- Cisco warns of 'new attack variant' battering firewalls under exploit for 6 months
- You'll never guess what the most common passwords are. Oh, wait, yes you will
- SonicWall fingers state-backed cyber crew for September firewall breach
- Malware-pwned laptop gifts cybercriminals Nikkei's Slack
- Why UK businesses are paying ICO millions for password mistakes you're probably making right now
- Graham Cluley
- TorrentFreak