[每日信息流] 2025-11-12

# 每日安全资讯（2025-11-12）

- SecWiki News
  - [ ] [SecWiki News 2025-11-11 Review](http://www.sec-wiki.com/?2025-11-11)
- Doonsec's feed
  - [ ] [OWASP Top 10xa0更新了！](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247492226&idx=1&sn=4a55b33aeefb1845dbb7916b76e7edd7)
  - [ ] [谷歌 Chrome 浏览器的指纹识别技术，一边反追踪一边搞追踪](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183595&idx=1&sn=8598c0f3f34f133f1f4a3de1ca01cf3f)
  - [ ] [【招聘】社招｜快手安全招人啦！](https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247545779&idx=1&sn=f6c4b41ad16cfa448d3606ebbbfa4846)
  - [ ] [【高危漏洞预警】Spring Cloud Gateway表达式注入漏洞CVE-2025-41253](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490971&idx=1&sn=2a5bbec0c03e3bb74c0de423185c0e64)
  - [ ] [第一款ai native的越权扫描产品](https://mp.weixin.qq.com/s?__biz=MzA4NzA5OTYzNw==&mid=2247484696&idx=1&sn=ad193d23a6b896f22179db826ecf92cd)
  - [ ] [段永平 2025 万字访谈录：投资、经营与人生的“本分”哲学](https://mp.weixin.qq.com/s?__biz=MjM5NTk5Mjc4Mg==&mid=2655231537&idx=1&sn=55f444f9fdffad470e31fdd55559de1f)
  - [ ] [东胜物流软件UnBind接口存在SQL注⼊漏洞 附POC](https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489496&idx=1&sn=99a8baf34ce40094a54deb90cbaf7e4d)
  - [ ] [10月-银狐远控IOC清单](https://mp.weixin.qq.com/s?__biz=MzIwNDI2NjAxOQ==&mid=2247483788&idx=1&sn=9faf23c2438121c31bd780657ba68799)
  - [ ] [Vulnhub靶场之funbox10](https://mp.weixin.qq.com/s?__biz=Mzg3MjgxMzkzMg==&mid=2247485191&idx=1&sn=e90b978fbff0a73e8889a99ecc0abaf5)
  - [ ] [网络安全的春天来了？业务有救了！黑客们快点点“举报”！](https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247539593&idx=1&sn=c9efef112c1f22f05d1fe78e51642919)
  - [ ] [网安|副业|成长|day3：分享一些恶意程序的隐藏骚操作](https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485700&idx=1&sn=eb473ab7351efc44b295b1ded06fe9a4)
  - [ ] [单老的一道题让我想起了今年的青创赛娃的作品](https://mp.weixin.qq.com/s?__biz=MzU4MDY1Mjk5Mg==&mid=2247484511&idx=1&sn=1bc7e773c4aca028d89727557715fd93)
  - [ ] [【网警说·安全】抢优惠、拼手速，网络安全必须稳！](https://mp.weixin.qq.com/s?__biz=MzU0MTA3OTU5Ng==&mid=2247569331&idx=1&sn=61aa0bda633ab862079f61d04e39c114)
  - [ ] [双十一指南：新型骗局不用怕，避坑秘籍防住他！](https://mp.weixin.qq.com/s?__biz=MzU0MTA3OTU5Ng==&mid=2247569331&idx=2&sn=b0ba3a0c9b2a19c406ccb25d21fdc55c)
  - [ ] [双十一网安提示：这些 “俗套话”，真能护好你的钱袋子](https://mp.weixin.qq.com/s?__biz=MzU0MTA3OTU5Ng==&mid=2247569331&idx=3&sn=00e5cf4a9e833e819a7d89f2cf778564)
  - [ ] [情报分析师技能：10种数据分析工具](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650563025&idx=1&sn=ac00a69c70621825e031bcc86e0c4a9e)
  - [ ] [特朗普恢复核试验指令事件分析](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650563025&idx=2&sn=93298898167618db0c44904aa3426b0c)
  - [ ] [CyberStrikeAI——xa0AI自主渗透测试平台（内置上百个安全工具）](https://mp.weixin.qq.com/s?__biz=MzE5ODA3NjAzNg==&mid=2247485102&idx=1&sn=f6601fb5cd08096b502fb241a7256ddb)
  - [ ] [好大一条鱼](https://mp.weixin.qq.com/s?__biz=MzkzNDk1ODM1OA==&mid=2247483937&idx=1&sn=ce35a509c515949445b29cf396cd0714)
  - [ ] [Copilot 移花接木技术，拓展到 Outlook 应用](https://mp.weixin.qq.com/s?__biz=MzkxNzY0Mzg2OQ==&mid=2247487937&idx=1&sn=e8fdbbf5ffb163891edb3caf946f474e)
  - [ ] [谷歌发布2026年网络安全预测：大颠覆，大演进](https://mp.weixin.qq.com/s?__biz=MzI1NjQxMzIzMw==&mid=2247498195&idx=1&sn=6bca9882d278de0dedea6eaa8a16fc60)
  - [ ] [依旧 Python](https://mp.weixin.qq.com/s?__biz=Mzk4ODg5MTY3Mw==&mid=2247483924&idx=1&sn=1b8866c88ce9127856953ea74c1753e6)
  - [ ] [【情报】特朗普执政后美国全球使领馆人员变动情况](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152906&idx=1&sn=2104cf0fbcfab9ca253e55693c8471e8)
  - [ ] [【培训】第15期全国开源情报能力培训班下周北京开班](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152906&idx=2&sn=594f467e02aaff6d270d8001b6b79cab)
  - [ ] [用IDA微码(Hex-Rays Microcode)技术反简单CFF](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488766&idx=1&sn=6dc58d35e8a92a4f20368c0e16b48944)
  - [ ] [网络安全社团2025年度纳新圆满结束！](https://mp.weixin.qq.com/s?__biz=MzU3MDU5NTA1MQ==&mid=2247499926&idx=1&sn=71a2d4a0da90e3dab13345a3fd4db2a6)
  - [ ] [【AI羊毛】0.99元薅Kimi高级会员](https://mp.weixin.qq.com/s?__biz=Mzg4NDg2NTM3NQ==&mid=2247485443&idx=1&sn=a349a854ad0e7c618f6486176a09f425)
  - [ ] [电信业务经营者和互联网域名服务提供者是谁？](https://mp.weixin.qq.com/s?__biz=MzI4NzA1Nzg5OA==&mid=2247486237&idx=1&sn=c554dba4206eb03e25479e56c6b9fc4c)
  - [ ] [从通保“小白”到高效交付，如何用1小时省1周](https://mp.weixin.qq.com/s?__biz=MzI4NzA1Nzg5OA==&mid=2247486237&idx=2&sn=4da0e561826b74a92bac65ddcf5b65fc)
  - [ ] [【连载】红蓝对抗-攻防演练-WEB安全渗透测试：跨站请求伪造CSRF](https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484840&idx=1&sn=9267ee16bd996f74d45512c9d581b459)
  - [ ] [25类常见网络安全设备集合：防火墙、EDR、堡垒机、UTM、NGFW、NIDS、HIDS、IPS、IDS、安全网关、蜜罐...](https://mp.weixin.qq.com/s?__biz=Mzk4ODI4MDEzNQ==&mid=2247484003&idx=1&sn=d347f31be5bfee6cf2907e1fe632c909)
  - [ ] [新浪财经专访CertiK创始人顾荣辉：从监管演变到RWA趋势，解读数字资产行业未来](https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247504805&idx=1&sn=4d1916f8a1759225a041cdec09884f1d)
  - [ ] [《别只盯着SQL注入了！这个被低估的漏洞，才是你的赏金“金矿”》](https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797354&idx=1&sn=9af3a8cca6fe8af8e1488b0af7e36d14)
  - [ ] [2025美亚杯案例背景解读](https://mp.weixin.qq.com/s?__biz=Mzg4MTcyMTc5Nw==&mid=2247490008&idx=1&sn=807c92883b549f7b6247ef3025bc8823)
  - [ ] [战果](https://mp.weixin.qq.com/s?__biz=MzkyNDQ5NDM3OA==&mid=2247484019&idx=1&sn=6bc126e2f84794a6b7ece8c536960cf4)
  - [ ] [ChatGPT被研究人员诱导实施自我提示注入攻击](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330233&idx=1&sn=0c45bf2f1655e656758228810095d3c5)
  - [ ] [满分认证！Bitdefender 斩获 AV-Comparatives 2025 企业级APT威胁防护测试冠军](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330233&idx=2&sn=c71c6a1a5afe77c7fea7660f4c910364)
  - [ ] [runc关键漏洞威胁Docker和Kubernetes容器隔离安全](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330233&idx=3&sn=116042e940f4573d54f44b1b2e661f22)
  - [ ] [朝鲜黑客组织将谷歌Find Hub服务武器化为远程数据擦除工具](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330233&idx=4&sn=1765d3ccaf20280dc90f9a4e283e5f3f)
  - [ ] [“网络安全主题展”圆满收官！](https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649403381&idx=1&sn=9784b332571b0ea7a59c693dd5fe8b38)
  - [ ] [mips简单栈溢出](https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247485774&idx=1&sn=5b37a1498a9a0c938f0a2c4a814ad3b3)
  - [ ] [神州希望协助海南海控能源股份有限公司牛路岭分公司开展网络安全应急演练](https://mp.weixin.qq.com/s?__biz=MzA4Mzg1ODMwMg==&mid=2650726174&idx=1&sn=8a48538430e8d8ef669b64f648c5cdd1)
  - [ ] [具身智能论道，共话技术与产业融合 | 第十一期杨 “数” 浦数字沙龙精彩回顾](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247521449&idx=1&sn=1f47ddd119b3db9fbb6a20c637e65550)
  - [ ] [网商银行用AI打败AI，AI安全体系主动免疫准确率超99.99%](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932915&idx=1&sn=04ad1640afcdb858dd771a2cc5109f29)
  - [ ] [AI快讯：火山引擎发布豆包编程模型，腾讯云下线两款模型](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932915&idx=2&sn=dbc3fb0e817792844041346cba49b963)
  - [ ] [建信保险资管机器人流程自动化系统信创改造项目供应商征集](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932915&idx=3&sn=29b7720d85a7a6b1271ff23454a84747)
  - [ ] [联合佳龙35万中标中国银行AI答疑系统应答准确率提升技术支持服务](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932915&idx=4&sn=18c7167f12fc929b9a7a49317e6d4de5)
  - [ ] [【安全圈】Intel 起诉前工程师窃取 18,000 份“绝密”文件](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072684&idx=1&sn=0ff1617fcd1133f8ec07e8e75d14b26c)
  - [ ] [【安全圈】三项严重漏洞允许攻击者突破 Docker、Kubernetes 容器隔离](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072684&idx=2&sn=1e5dc92d90633b2491948fa3e9c91e0e)
  - [ ] [【安全圈】Zoom 多项漏洞可被利用绕过访问控制导致数据泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072684&idx=3&sn=b6950f2c8a2430eae813fb56247c4863)
  - [ ] [【安全圈】朝鲜黑客组织Konni滥用Google Find Hub 实施远程数据清除攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072684&idx=4&sn=7b45c9cea5e249340960c1075733e21d)
  - [ ] [全国首部区块链知识产权存证标准启动编制，欢迎参与起草！](https://mp.weixin.qq.com/s?__biz=MzkzNTQzNTQzMQ==&mid=2247486076&idx=1&sn=655808ca4398c08ad18f8a5ef70ea567)
  - [ ] [高级安全研究员招聘来咯！](https://mp.weixin.qq.com/s?__biz=MzkyNTU4OTc3MA==&mid=2247485523&idx=1&sn=a75af3dc4f4b0961a1773a23ee0f57bc)
  - [ ] [学会这 11 条，你离 Git 大神就不远了！](https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247517879&idx=1&sn=6ebbfcd47d247fd95ee6fda487274b96)
  - [ ] [总行运维中心安全技术岗（网络与应用安全、桌面管理方向）](https://mp.weixin.qq.com/s?__biz=MzAxNDIzODk3Nw==&mid=2247484854&idx=1&sn=5988faf3333d687f6a058d55b2a01873)
  - [ ] [CVE-2025-34041 深挖：深信服EDR命令注入复现与检测要点](https://mp.weixin.qq.com/s?__biz=MzkwMDcyMjQxOQ==&mid=2247484756&idx=1&sn=ede7142b21db448a17230f2605116c65)
  - [ ] [算力安全新边界：盛邦安全乌镇峰会发布“天穹宣言”，密码定义智能微网系统应用空天陆海](https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650279288&idx=1&sn=7fe44b8e9858392ef67ef953d0bd9a69)
  - [ ] [【已复现】Milvus Proxy 身份认证绕过漏洞(CVE-2025-64513)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504138&idx=1&sn=139f49200a7c297b738fff871c805343)
  - [ ] [记一次edu漏洞挖掘/从信息泄露到内网滲透](https://mp.weixin.qq.com/s?__biz=Mzk1NzgzMjkxOQ==&mid=2247486038&idx=1&sn=9cb6015f1335927ac65406980fbb528a)
  - [ ] [很多福布斯AI 50强公司的 GitHub 仓库泄露机密信息](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524359&idx=1&sn=f18cc055bc4baae64ee46cf0d4b05e0d)
  - [ ] [runC 存在多个严重漏洞，Docker 和K8s容器隔离机制面临风险](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524359&idx=2&sn=6daf5f0d15e7847808853efadff34393)
  - [ ] [JavaScript 热门库 expr-eval 易受 RCE 攻击](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524359&idx=3&sn=dca660000a6936def1900d3d5cf13519)
  - [ ] [唯品会安全招聘（内含多个岗位）](https://mp.weixin.qq.com/s?__biz=MzU4NTY4MDEzMw==&mid=2247494115&idx=1&sn=ea106c11efea41b9ca4debc2320ec131)
  - [ ] [荣获媒体行业科技进步奖！中央广播电视总台与启明星辰共建网络安全智能运营平台](https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651734838&idx=1&sn=22db9cacdbb86024934165bd4b8dd3f4)
  - [ ] [【活动预告】ISC2华南分会11月线下活动欢迎您：机器人前沿+AI合规+职场解惑一场面向AI的闭门探讨会](https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247493346&idx=1&sn=a64a6619cc2f9b7e620aab97eb3f4e94)
  - [ ] [干货白皮书《腾讯云游戏安全最佳实践与解决方案》](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247646501&idx=1&sn=2c10509c8496abbb687b7f54ca3f3aef)
  - [ ] [免费赠送 | 防范网络电信诈骗宣传素材（第二期）](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247646501&idx=2&sn=addaaffaf2e917214b2c327570cd7899)
  - [ ] [免费赠送 | 诸子云星球福利大放送 · 个信隐私保护报告合集](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247646501&idx=3&sn=8ccc35c98199b9bfeb4249a3332e7b4c)
  - [ ] [奇安信获得2024年度北京市科学技术进步一等奖](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629730&idx=1&sn=82340158f3066dedde238159febd9ec9)
  - [ ] [奇安信与天津大学签署战略合作协议](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247629730&idx=2&sn=4db7824b417ce97aa89768c253801515)
  - [ ] [（22)安全大佬的成长故事－信息安全100人](https://mp.weixin.qq.com/s?__biz=Mzk5MDM2NzQ2Mg==&mid=2247483904&idx=1&sn=5e4e188a057641483b0bd3ad2ff90d9c)
  - [ ] [CosyVoice 本地部署（macOS）笔记](https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650262274&idx=1&sn=3bdf746358cc4cb41ab7a6f98f4477a5)
  - [ ] [TechWorld黑客马拉松SHOW——AI自主威胁狩猎智能体](https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499210&idx=1&sn=914fee65935921a64ea92df5840365ec)
  - [ ] [让智能体开发如“拼积木”般便利！合合信息携手火山引擎共探大模型落地新范式](https://mp.weixin.qq.com/s?__biz=MzAxMzg0NjY2NA==&mid=2247493674&idx=1&sn=829ab124c9652f835848bf97a88be79c)
  - [ ] [报名启动！平安SRC白帽子安全沙龙深圳站，探索攻防新篇！](https://mp.weixin.qq.com/s?__biz=MzIzODAwMTYxNQ==&mid=2652145663&idx=1&sn=0f097a113c8f51b96fa4e2413f2dfe3c)
  - [ ] [论坛·原创 | 数字加密货币的安全风险、监管困境与治理借鉴](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253011&idx=1&sn=436b90ae6bcd81275e8387dcf9dc6f7e)
  - [ ] [专家解读 | 谢永江：以普惠包容数字合作弥合数智鸿沟](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253011&idx=2&sn=52329cae4a0f9536f8befcd8f44e098c)
  - [ ] [关注 | 最新一批重点防范境外恶意网址和恶意IP发布！](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253011&idx=3&sn=0cd5254a593797e47f37aa9278d58e78)
  - [ ] [双“11”防诈指南：当狂欢遇上陷阱，这3种套路千万小心](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253011&idx=4&sn=6745b9466974f13366daad886b4c6dcf)
  - [ ] [关于举办 2025 年江苏省第七届大学生网络空间安全知识技能大赛决赛通知](https://mp.weixin.qq.com/s?__biz=MzU1NTYxMjA5MA==&mid=2247507144&idx=1&sn=68886441c0a902ec5f89a40f771d8015)
  - [ ] [谷歌发布2026年网络安全预测](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515189&idx=1&sn=f7c02027b4756a0360703c70bb1ef2cf)
  - [ ] [美国防部正式强制实施国防供应商网络安全合规要求](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515189&idx=2&sn=cf2154e7ce46bcbb5bcd348a60b2d8f1)
  - [ ] [双十一福利 | 50个免费试用名额！ASX-A100最新版本V3.3.0发布，AI线索王登场！](https://mp.weixin.qq.com/s?__biz=MjM5ODQ3NjAwNQ==&mid=2650555200&idx=1&sn=cc90e68b1741a17eaf2a3b128ff057d1)
  - [ ] [招聘 | 绿盟科技渗透测试/安全研究方向研发岗位等你来](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494509&idx=1&sn=3293f7f5af9c60d991adb49d27a19d67)
  - [ ] [超市遭黑客攻击一周没能营业，损失超20万元，警方出手！](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247543239&idx=1&sn=fc5b3da83f7d769a86bd49ace4437825)
  - [ ] [市经信局关于开展2025年省级制造业单项冠军企业培育](https://mp.weixin.qq.com/s?__biz=MzA3OTEyODAxMw==&mid=2247510657&idx=1&sn=4df3775556480d6de850f3c2bfa8a027)
  - [ ] [【理事动态】安恒信息湖北公司销售类岗位招聘](https://mp.weixin.qq.com/s?__biz=MzA3OTEyODAxMw==&mid=2247510657&idx=2&sn=0a891be825a2a627a9fcfa18c98da2e6)
  - [ ] [网络安全大模型的路线和方向](https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489472&idx=1&sn=fa483df0415d4f7060c3dc7d65748565)
  - [ ] [人才招聘 | 西交苏州信息安全法学所专职行政助理](https://mp.weixin.qq.com/s?__biz=Mzg5NTA5NTMzMQ==&mid=2247502388&idx=1&sn=36842f72b20bdc165812ca0fca92f61b)
  - [ ] [强网杯S9初赛逆向-解题思路](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604080&idx=1&sn=99200fda1665acfd07753cd6a74b7dfb)
  - [ ] [Zoom曝高危漏洞：攻击者可越权获取会议数据，请立即更新！](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604080&idx=2&sn=e8be2a3e73a6aecb13ebf43dc72aae0e)
  - [ ] [30 小时玩转 CTF！竞赛通关技巧全掌握](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604080&idx=3&sn=351016c632b91751a60d6a8345406dea)
  - [ ] [【工信动态】打破技术壁垒 年轻团队破茧国产机器人灵巧手](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649255761&idx=1&sn=c62848d5f468b895e461e938498e745a)
  - [ ] [36小时，“夺回”某制造企业4万+核心文件！](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582887&idx=1&sn=d4f5628f458de76b40fc2091e5750fbc)
  - [ ] [入选全球人工智能标准实践案例！360大模型安全实力再获国际权威认可](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582887&idx=2&sn=3523b0b018314fe2004539f80347dbed)
  - [ ] [XCP模块与协议介绍](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247562292&idx=1&sn=0e4f45f4fb005f94f11b709ab9ee9955)
  - [ ] [CAN总线缺少终端电阻现象解析](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247562292&idx=2&sn=bad9145921f3cc95a226f86f04f96c2b)
  - [ ] [直播报名（专享福利）|破解工业AI安全困局：如何将合规成本变为核心竞争力？](https://mp.weixin.qq.com/s?__biz=MzkwODE2OTU0NA==&mid=2247493513&idx=1&sn=6e572d1f479a974205441c1407abf3fa)
  - [ ] [解读 | 《网络安全法》修订释放AI治理强信号](https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650626046&idx=1&sn=1464039fb3394b71b5ed8d566520443b)
  - [ ] [会员动态 | 热烈欢迎鹏瑞软件成为协会会员单位!](https://mp.weixin.qq.com/s?__biz=MzU0Mzk0NDQyOA==&mid=2247522853&idx=1&sn=6e08528dcb089e974f216c4e682c04f0)
  - [ ] [科技创新与产业创新深度融合](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622103&idx=1&sn=eeba9d45759c5c25148634c4fdab8b75)
  - [ ] [COP30发布”合规碳市场开放联盟“宣言，完善合规碳市场和碳定价政策](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622103&idx=2&sn=52907462576a816ef8ada91c09660165)
  - [ ] [mapsx｜一款端口扫描｜网段探测｜弱口令爆破工具](https://mp.weixin.qq.com/s?__biz=Mzk3NTc2NDk2MQ==&mid=2247483969&idx=1&sn=271a4777405500610db1c6ef4f4727cb)
  - [ ] [《工业领域政策汇编》2025年11月 第1期](https://mp.weixin.qq.com/s?__biz=MzAwNTc0ODM3Nw==&mid=2247490357&idx=1&sn=e7fb72b40f8dce1e8b1971a61bcb3b6e)
  - [ ] [2025年度“金智奖”参评企业风采展（六）：仰望星空，见证产业中坚力量](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247602182&idx=1&sn=8f6c4c4f7e318dc1c66fa9a8d7cb1c83)
  - [ ] [我科研团队提出原子量子计算新架构](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247602182&idx=2&sn=9a61753e99dae4a978796b7ec6126dc2)
  - [ ] [以技术创新筑牢人工智能安全底线](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247602182&idx=3&sn=98363ac81e87eb00d069851b99580c5f)
  - [ ] [“捉迷藏” 式收割：撕开鲁大师为首系列企业流量劫持黑幕！](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527500&idx=1&sn=a1dcb527bc1dd4e8e58583d51bea05ad)
  - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527500&idx=2&sn=c54c38cd5d6b74406235da777248b6f0)
  - [ ] [CNN识别恶意软件](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556736&idx=1&sn=482edeb61857204085c9695d7e575cc3)
  - [ ] [【免费领】Android系统漏洞实战权威教程](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556736&idx=2&sn=abab1d84614d35c7322963eb98200745)
  - [ ] [双十一别踩雷！快来测测你的安全意识等级～](https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247509733&idx=1&sn=42de7f03c50d1e6001c6b720d915270b)
  - [ ] [政策解读 | 《水利重要数据安全保护要求》11月1日起正式实施](https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247508287&idx=1&sn=bb16f9c226c069c1ea5f51468ad285ca)
  - [ ] [数字化转型与网络安全峰会圆满落幕：共绘珠海数字未来新蓝图](https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247505104&idx=1&sn=ae3a4d306ddb02561a771b9f4309d78e)
  - [ ] [重点防范境外恶意网址和恶意IP（续十三）](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175066&idx=1&sn=f3402e869e47a38e3308c362c18879a0)
  - [ ] [治理违规收集使用个人信息！工信部通报39款APP及SDK](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175066&idx=2&sn=175c7bb66daf4213252d625b1568a80b)
  - [ ] [凝芯聚力行致远·链动未来拓新篇——写在IC China 2025即将召开之际](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175066&idx=3&sn=86f065b6d15f26bfbf275a4cfbd2fef6)
  - [ ] [报名通道开启！2025青岛虚拟现实创新大会来了](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175066&idx=4&sn=32b889f9e0471a8388449c2cdd982599)
  - [ ] [网络安全信息与动态周报2025年第43期（10月20日-10月26日）](https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490614&idx=1&sn=034812a38ac2bb23c169111bb302da23)
  - [ ] [安全简讯（2025.11.11）](https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501767&idx=1&sn=6a75b63fa6c88f0933c53f1e66cd5e94)
  - [ ] [【漏洞通告】Spring Cloud Gateway 表达式注入漏洞(CVE-2025-41253)](https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501767&idx=2&sn=bc024430f0ffdf5f7b6321ee1b553fc9)
  - [ ] [中新赛克亮相苏南制造业年度盛会，AI赋能产品斩获两项大奖](https://mp.weixin.qq.com/s?__biz=Mzk0ODUwNTg0Ng==&mid=2247490686&idx=1&sn=2be78e35e6acf6567deeaed85d6b6941)
  - [ ] [安全小知识-第十期_密码找回逻辑漏洞分析](https://mp.weixin.qq.com/s?__biz=Mzg4Njk1NDg5NQ==&mid=2247483990&idx=1&sn=c9695b6c2db8c93807eeb2a6f485e90a)
- Der Flounder
  - [ ] [Session videos from Jamf Nation User Conference 2025 now available](https://derflounder.wordpress.com/2025/11/11/session-videos-from-jamf-nation-user-conference-2025-now-available/)
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  - [ ] [Balancer协议V2池遭黑客攻击 损失超1.28亿美元](https://www.4hou.com/posts/NG4K)
  - [ ] [警钟再响！工信部通报42款APP及SDK违规，覆盖电商购物、交通出行、金融借贷等多领域主流应用](https://www.4hou.com/posts/1MRo)
  - [ ] [解读网络安全法新规：安全合规、移动生态与AI治理三重挑战之下，企业如何构建“内生安全”？](https://www.4hou.com/posts/2XVP)
- Private Feed for M09Ic
  - [ ] [bolucat released 202511111935 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202511111935)
  - [ ] [mgeeky starred wesmar/kvc](https://github.com/wesmar/kvc)
  - [ ] [FunnyWolf starred langchain-ai/langchain-mcp-adapters](https://github.com/langchain-ai/langchain-mcp-adapters)
  - [ ] [zema1 starred boku7/StringReaper](https://github.com/boku7/StringReaper)
  - [ ] [Ridter starred tpoechtrager/osxcross](https://github.com/tpoechtrager/osxcross)
  - [ ] [timwhitez starred EvilBytecode/ExitPatcher](https://github.com/EvilBytecode/ExitPatcher)
  - [ ] [ring04h starred hashicorp/golang-lru](https://github.com/hashicorp/golang-lru)
  - [ ] [Ridter starred 666ghj/BettaFish](https://github.com/666ghj/BettaFish)
- paper - Last paper
  - [ ] [面向人工智能驱动入侵检测系统的自动化可解释拒绝服务攻击分析](https://paper.seebug.org/3410/)
- 安全客-有思想的安全新媒体
  - [ ] [数据模型驱动：HTTP协议头中的状态转移 —— 基于ZoomEye Dorks的Web资产行为规范分析](https://www.anquanke.com/post/id/313125)
- 一个被知识诅咒的人
  - [ ] [Java与AI的深度交融：深度学习模型部署的Java实践指南](https://blog.csdn.net/nokiaguy/article/details/154612027)
  - [ ] [从零到英雄：Spring Boot 微服务架构全攻略](https://blog.csdn.net/nokiaguy/article/details/154612012)
- Recent Commits to cve:main
  - [ ] [Update Tue Nov 11 11:34:47 UTC 2025](https://github.com/trickest/cve/commit/b35256c44efde9ac53346d00dd9d757d4726ba29)
- Tenable Blog
  - [ ] [Microsoft’s November 2025 Patch Tuesday Addresses 63 CVEs (CVE-2025-62215)](https://www.tenable.com/blog/microsofts-november-2025-patch-tuesday-addresses-63-cves-cve-2025-62215)
- Cerbero Blog
  - [ ] [Memory Challenge 7: DeepDive](https://blog.cerbero.io/memory-challenge-7-deepdive/)
- obaby@mars
  - [ ] [不了了之](https://h4ck.org.cn/2025/11/21957)
- SpiderLabs Blog
  - [ ] [SharpParty: Process Injection in C#](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/sharpparty-process-injection-in-c/)
- blog.avast.com EN
  - [ ] [The Top 10 Holiday Text Scams to Leave on “Read” This Season](https://blog.avast.com/the-top-10-holiday-text-scams-to-leave-on-read-this-season)
- Intigriti
  - [ ] [Hunting for DOM-based XSS vulnerabilities: A complete guide](https://www.intigriti.com/researchers/blog/hacking-tools/exploiting-dom-based-xss-vulnerabilities)
- PortSwigger Research
  - [ ] [Introducing HTTP Anomaly Rank](https://portswigger.net/research/introducing-http-anomaly-rank)
- Checkmarx
  - [ ] [Codemender, Aardvark, and the Rise of Agentic AppSec: What Developers Need to Know](https://checkmarx.com/blog/codemender-aardvark-and-the-rise-of-agentic-appsec-what-developers-need-to-know/)
  - [ ] [Malicious Open-Source Packages: The Imminent AppSec Threat for which Most Enterprises are Underprepared](https://checkmarx.com/blog/malicious-open-source-packages-the-imminent-appsec-threat-for-which-most-enterprises-are-underprepared/)
- Malwarebytes
  - [ ] [Patch now: Samsung zero-day lets attackers take over your phone](https://www.malwarebytes.com/blog/news/2025/11/patch-now-samsung-zero-day-lets-attackers-take-over-your-phone)
  - [ ] [How credentials get stolen in seconds, even with a script-kiddie-level phish](https://www.malwarebytes.com/blog/threat-intel/2025/11/how-credentials-get-stolen-in-seconds-even-with-a-script-kiddie-level-phish)
  - [ ] [Stolen iPhones are locked tight, until scammers phish your Apple ID credentials](https://www.malwarebytes.com/blog/news/2025/11/stolen-iphones-are-locked-tight-until-scammers-phish-your-apple-id-credentials)
- 奇客Solidot–传递最新科技情报
  - [ ] [美国政府考虑禁售普联路由器](https://www.solidot.org/story?sid=82776)
  - [ ] [中国 CO2 排放量连续 18 个月持平或下降](https://www.solidot.org/story?sid=82775)
  - [ ] [加拿大麻疹疫情持续了一年](https://www.solidot.org/story?sid=82774)
  - [ ] [Apple TV 不会推出基于广告的订阅服务，不会收购华纳](https://www.solidot.org/story?sid=82773)
  - [ ] [被 HR 支配的世界](https://www.solidot.org/story?sid=82772)
- rtl-sdr.com
  - [ ] [Talking Sasquach Reviews the uConsole and RTL-SDR Antenna Board Expansion](https://www.rtl-sdr.com/talking-sasquach-reviews-the-uconsole-and-rtl-sdr-antenna-board-expansion/)
  - [ ] [NSA GENESIS: How NSA Spies Snooped on Local RF Bands using Modified Cell Phones with a Built-in SDR](https://www.rtl-sdr.com/nsa-genesis-how-nsa-spies-snooped-on-local-rf-bands-using-modified-cell-phones-with-a-built-in-sdr/)
  - [ ] [Creating a Homemade Portable Raspberry Pi Based RTL-SDR System](https://www.rtl-sdr.com/creating-a-homemade-portable-raspberry-pi-based-rtl-sdr-system/)
- HackerNews
  - [ ] [得克萨斯州起诉 Roblox 在线游戏平台](https://hackernews.cc/archives/61499)
  - [ ] [医疗联盟据称泄露患者健康数据](https://hackernews.cc/archives/61494)
  - [ ] [九个恶意 NuGet 软件包预置延时攻击载荷](https://hackernews.cc/archives/61492)
  - [ ] [三款 VS Code 扩展遭 GlassWorm 恶意软件植入](https://hackernews.cc/archives/61489)
- 安全分析与研究
  - [ ] [人员名单类银狐最新注入型攻击样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494241&idx=1&sn=77f57a7603d4f0e085539be8e8c6ea7a)
- 黑鸟
  - [ ] [谷歌 Chrome 浏览器的指纹识别技术，一边反追踪一边搞追踪](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183595&idx=1&sn=8598c0f3f34f133f1f4a3de1ca01cf3f)
- 雷神众测
  - [ ] [雷神众测漏洞周报2025.11.3-2025.11.9](https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503594&idx=1&sn=91fcc98336c62c1862488511fae73d97)
- 威努特安全网络
  - [ ] [深度解码：国家管网集团信息安全建设方向及落地实践](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651137635&idx=1&sn=fd4da808de366b0ec4c3bd0f1d509e44)
- 奇安信 CERT
  - [ ] [【已复现】Spring Cloud Gateway 表达式注入漏洞(CVE-2025-41253)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504132&idx=1&sn=053b67fe9460b2ac9fcc4ab6164d1c53)
- 青衣十三楼飞花堂
  - [ ] [用IDA微码(Hex-Rays Microcode)技术反简单CFF](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488766&idx=1&sn=6dc58d35e8a92a4f20368c0e16b48944)
- 代码卫士
  - [ ] [很多福布斯AI 50强公司的 GitHub 仓库泄露机密信息](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524359&idx=1&sn=f18cc055bc4baae64ee46cf0d4b05e0d)
  - [ ] [runC 存在多个严重漏洞，Docker 和K8s容器隔离机制面临风险](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524359&idx=2&sn=6daf5f0d15e7847808853efadff34393)
  - [ ] [JavaScript 热门库 expr-eval 易受 RCE 攻击](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524359&idx=3&sn=dca660000a6936def1900d3d5cf13519)
- 看雪学苑
  - [ ] [强网杯S9初赛逆向-解题思路](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604080&idx=1&sn=99200fda1665acfd07753cd6a74b7dfb)
  - [ ] [Zoom曝高危漏洞：攻击者可越权获取会议数据，请立即更新！](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604080&idx=2&sn=e8be2a3e73a6aecb13ebf43dc72aae0e)
  - [ ] [30 小时玩转 CTF！竞赛通关技巧全掌握](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604080&idx=3&sn=351016c632b91751a60d6a8345406dea)
- 安全学术圈
  - [ ] [会议征文 | 安全攻击溯源、推理和调查研讨会（PRISM 2026）](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247494337&idx=1&sn=fba5da05072ae6bf0d32e7312917ce66)
- 软件安全与逆向分析
  - [ ] [双十一学习不停歇，购课送多重福利](https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247484905&idx=1&sn=7b3ed811cfe828c50e5509f5254faf89)
- 吾爱破解论坛
  - [ ] [【开放注册公告】吾爱破解论坛2025年11月11日光棍节开放注册即将开始 12：00 -- 14：00 和 20：00 -- 22：00。

赶不上的定个晚间闹钟吧，新通知会在B站继续发布。

推荐使用电脑注册，可以使用论坛的诊断修复工具修复一次，方便提前解决注册中可能会遇到的问题，如果修复后还是不行建议尽快更换设备尝试，不要耽误时间。

注册页面会强制10分钟来阅读注册须知，须知中包括了你注册现在和未来可能会遇到的问题，包括不活跃请不要注册，论坛会不定期清理不活跃会员，请仔细阅读，否则可能无法注册成功或注册后被清理。

另：
开放注册期间暂停签到任务、下载论坛附件功能、默认搜索功能、QQ登录绑定等功能（忘记账号密码可以邮箱重置后登陆） 请各位知晓。主要把下载附件的带宽和服务器负载节省下来供用户注册访问使用，等注册结束就恢复了（默认搜索功能根据论坛负载压力预计一周后恢复），请大家谅解。

新注册的会员需要注册一天后才可以发帖，以缓解注册压力。](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143164&idx=1&sn=25f6843babd057ccbfca6adae68ce05e)
- 天黑说嘿话
  - [ ] [DLP系列之：数据防泄漏上线后运营思路](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485088&idx=1&sn=6c1b1f37d19d3325575d0dbb6080c7ec)
- 安全内参
  - [ ] [谷歌发布2026年网络安全预测](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515189&idx=1&sn=f7c02027b4756a0360703c70bb1ef2cf)
  - [ ] [美国防部正式强制实施国防供应商网络安全合规要求](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515189&idx=2&sn=cf2154e7ce46bcbb5bcd348a60b2d8f1)
- 二道情报贩子
  - [ ] [最贵教训！10美元本金搭上10万刀手续费！矿池笑纳天降巨款](https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489777&idx=1&sn=855fe4684e4a3f34c16c24c8ad6103a3)
- 丁爸 情报分析师的工具箱
  - [ ] [【情报】特朗普执政后美国全球使领馆人员变动情况](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152906&idx=1&sn=2104cf0fbcfab9ca253e55693c8471e8)
  - [ ] [【培训】第15期全国开源情报能力培训班下周北京开班](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152906&idx=2&sn=594f467e02aaff6d270d8001b6b79cab)
- dotNet安全矩阵
  - [ ] [.NET 环境下的 CSRF 漏洞与防御策略详解](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500902&idx=1&sn=b066c88be376d6aa18b4218946f872e8)
  - [ ] [剖析基于 ping 的休眠技术实现的延迟执行](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500902&idx=2&sn=0ec7e93dbe74b1cb021f81ee8543518e)
- 微步在线
  - [ ] [对抗银狐，今年最该收藏的工具上了！](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650185109&idx=1&sn=c286bb347d1cab66650596f6cfc2fc8c)
- 极客公园
  - [ ] [深度复盘：大疆是如何成为影像领域新巨头的？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653090677&idx=1&sn=2ca5ec6957fb5d507dbf33d1ddeac5f8)
  - [ ] [年产值突破 150 亿，刚毕业的俊男美女涌入「团播」工厂](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653090637&idx=1&sn=616d384956e795152aa1fd9fa99fc5b0)
  - [ ] [马斯克想要 1 万亿，何小鹏只想等一句「牛 P」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653090637&idx=2&sn=af2c690fceedba81ace58411a88cc42c)
  - [ ] [小米汽车10月销量近5万，YU7 超 Model Y；美团AI编程工具开启公测；马化腾王传福成智元机器人受益股东 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653090628&idx=1&sn=5457db3044ed931f829321195611414b)
- M01N Team
  - [ ] [招聘 | 绿盟科技渗透测试/安全研究方向研发岗位等你来](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494509&idx=1&sn=3293f7f5af9c60d991adb49d27a19d67)
- 中国信息安全
  - [ ] [论坛·原创 | 数字加密货币的安全风险、监管困境与治理借鉴](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253011&idx=1&sn=436b90ae6bcd81275e8387dcf9dc6f7e)
  - [ ] [专家解读 | 谢永江：以普惠包容数字合作弥合数智鸿沟](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253011&idx=2&sn=52329cae4a0f9536f8befcd8f44e098c)
  - [ ] [关注 | 最新一批重点防范境外恶意网址和恶意IP发布！](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253011&idx=3&sn=0cd5254a593797e47f37aa9278d58e78)
  - [ ] [双“11”防诈指南：当狂欢遇上陷阱，这3种套路千万小心](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253011&idx=4&sn=6745b9466974f13366daad886b4c6dcf)
- 慢雾科技
  - [ ] [美国打击朝鲜加密资产洗钱网络：多名银行职员及多个金融机构受影响](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247503665&idx=1&sn=e9a28a6e4f9c322141611ccdbce35d1f)
- 火绒安全
  - [ ] [“捉迷藏” 式收割：撕开鲁大师为首系列企业流量劫持黑幕！](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527500&idx=1&sn=a1dcb527bc1dd4e8e58583d51bea05ad)
  - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527500&idx=2&sn=c54c38cd5d6b74406235da777248b6f0)
- 数世咨询
  - [ ] [最新版 | OWASP  TOP10 安全漏洞，新增两大类别](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540780&idx=1&sn=5a138792e01db25a9f60a56f7d0e93b2)
  - [ ] [行业动态 | 世界互联网大会重磅发布国内领先的企业级数据安全与合规课程体系](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540780&idx=2&sn=27b1c7971c01391f1fac1a21bfadb013)
- 嘶吼专业版
  - [ ] [直播预告|互联网暴露面收敛——从风险识别到动态清零的攻防实战](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585241&idx=1&sn=0dbc1ad6a3d9f495eb64c318670c6643)
  - [ ] [Balancer协议V2池遭黑客攻击 损失超1.28亿美元](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585241&idx=2&sn=24b94e688054505dd8fe50ffdd8dd0f2)
- 青藤智库
  - [ ] [网络安全大模型的路线和方向](https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489472&idx=1&sn=fa483df0415d4f7060c3dc7d65748565)
- 360数字安全
  - [ ] [36小时，“夺回”某制造企业4万+核心文件！](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582887&idx=1&sn=d4f5628f458de76b40fc2091e5750fbc)
  - [ ] [入选全球人工智能标准实践案例！360大模型安全实力再获国际权威认可](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582887&idx=2&sn=3523b0b018314fe2004539f80347dbed)
- 迪哥讲事
  - [ ] [记一次登录框的突破](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498550&idx=1&sn=e9208cbebfdb5c5a6808680ba1a8a55e)
- 信息安全国家工程研究中心
  - [ ] [处罚案例 | 某科技公司未及时修复安全漏洞，网警依法处罚](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247501482&idx=1&sn=f55d0e25e328af7fe37fd6a27677190f)
- 安全牛
  - [ ] [《边缘安全访问及SASE技术应用指南》报告发布——重构“云-边”网络安全与访问体验](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139287&idx=1&sn=dc2ae243d3803d460b2705ec8efb0c2e)
  - [ ] [国家网信办通报境外恶意网址:涉美德荷等8国,多个僵尸网络威胁中国；2025年三季度电子邮件威胁趋势报告 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139287&idx=2&sn=28dcdfc45d33992cd98ebef3853e52fb)
- 纽创信安
  - [ ] [OSR新品速递！物联网设备的安全守护者--TrustAnchor](https://mp.weixin.qq.com/s?__biz=MzAwNTczMjAzMg==&mid=2650240353&idx=1&sn=58c04a1b8279afc1fcb04648dea9bda3)
- Over Security - Cybersecurity news aggregator
  - [ ] [Synology fixes BeeStation zero-days demoed at Pwn2Own Ireland](https://www.bleepingcomputer.com/news/security/synology-fixes-beestation-zero-days-demoed-at-pwn2own-ireland/)
  - [ ] [Hackers abuse Triofox antivirus feature to deploy remote access tools](https://www.bleepingcomputer.com/news/security/hackers-abuse-triofox-antivirus-feature-to-deploy-remote-access-tools/)
  - [ ] [70 Clicks in 24 Hours: OneDrive Phish Explodes via Backblaze](https://pixmsecurity.com/blog/blog/70-clicks-in-24-hours-onedrive-phish-explodes-via-backblaze/)
  - [ ] [Microsoft releases KB5068781 — The first Windows 10 extended security update](https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-kb5068781-the-first-windows-10-extended-security-update/)
  - [ ] [Microsoft: Windows 11 23H2 Home and Pro reach end of support](https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-11-23h2-home-and-pro-reach-end-of-support/)
  - [ ] [Microsoft November 2025 Patch Tuesday fixes 1 zero-day, 63 flaws](https://www.bleepingcomputer.com/news/microsoft/microsoft-november-2025-patch-tuesday-fixes-1-zero-day-63-flaws/)
  - [ ] [Obsolescenza tecnologica e cyber security: un rischio che pesa sui bilanci aziendali](https://www.cybersecurity360.it/news/obsolescenza-tecnologica-e-cyber-security-un-rischio-che-pesa-sui-bilanci-aziendali/)
  - [ ] [Windows 11 KB5068861 & KB5068865 cumulative updates released](https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5068861-and-kb5068865-cumulative-updates-released/)
  - [ ] [Microsoft Patch Tuesday for November 2025 — Snort rules and prominent vulnerabilities](https://blog.talosintelligence.com/microsoft-patch-tuesday-november-2025/)
  - [ ] [NIS2: cos’è, quali aziende interessa, obblighi e sanzioni](https://www.cybersecurity360.it/legal/nis2-cose-quali-aziende-interessa-obblighi-e-sanzioni/)
  - [ ] [Microsoft: Emergency Windows 10 update fixes ESU enrollment bug](https://www.bleepingcomputer.com/news/microsoft/microsoft-emergency-windows-10-update-fixes-esu-enrollment-bug/)
  - [ ] [“Bitcoin Queen” gets 11 years in prison for $7.3 billion Bitcoin scam](https://www.bleepingcomputer.com/news/security/bitcoin-queen-gets-11-years-in-prison-for-73-billion-bitcoin-scam/)
  - [ ] [Torna GlassWorm, il primo worm che colpisce le estensioni di VS Code](https://www.securityinfo.it/2025/11/11/torna-glassworm-il-primo-worm-che-colpisce-le-estensioni-di-vs-code/)
  - [ ] [SAP fixes hardcoded credentials flaw in SQL Anywhere Monitor](https://www.bleepingcomputer.com/news/security/sap-fixes-hardcoded-credentials-flaw-in-sql-anywhere-monitor/)
  - [ ] [How a CPU spike led to uncovering a RansomHub ransomware attack](https://www.bleepingcomputer.com/news/security/how-a-cpu-spike-led-to-uncovering-a-ransomhub-ransomware-attack/)
  - [ ] [GlobalLogic warns 10,000 employees of data theft after Oracle breach](https://www.bleepingcomputer.com/news/security/globallogic-warns-10-000-employees-of-data-theft-after-oracle-breach/)
  - [ ] [Il fattore umano nell’MDR](https://www.certego.net/blog/il-fattore-umano-nell-mdr-come-valutare/)
  - [ ] [Campagna di phishing a tema Facebook: falsa segnalazione di violazione Copyright](https://cert-agid.gov.it/news/campagna-di-phishing-a-tema-facebook-falsa-segnalazione-di-violazione-copyright/)
  - [ ] [La resilienza digitale europea: norme, minacce e opportunità per le banche](https://www.cybersecurity360.it/legal/la-resilienza-digitale-europea-norme-minacce-e-opportunita-per-le-banche/)
  - [ ] [Webinar: Modern Patch Management – Strategies to patch faster with less risk](https://www.bleepingcomputer.com/news/security/webinar-modern-patch-management-strategies-to-patch-faster-with-less-risk/)
  - [ ] [Inside the Mind of a Kali NetHunter Developer – A Deep Dive with @yesimxev](https://www.mobile-hacker.com/2025/11/11/inside-the-mind-of-a-kali-nethunter-developer-a-deep-dive-with-yesimxev/)
  - [ ] [Cyber-mafie, la nuova frontiera criminale: dalla coppola al clic](https://www.cybersecurity360.it/cultura-cyber/cyber-mafie-la-nuova-frontiera-criminale-dalla-coppola-al-clic/)
  - [ ] [NIS 2 come sicurezza misurabile: come riconoscere un incidente significativo](https://www.cybersecurity360.it/legal/nis-2-come-sicurezza-misurabile-come-riconoscere-un-incidente-significativo/)
  - [ ] [APT37 hackers abuse Google Find Hub in Android data-wiping attacks](https://www.bleepingcomputer.com/news/security/apt37-hackers-abuse-google-find-hub-in-android-data-wiping-attacks/)
- Qualys Security Blog
  - [ ] [Microsoft Patch Tuesday, November 2025 Security Update Review](https://blog.qualys.com/category/vulnerabilities-threat-research)
- 安全圈
  - [ ] [【安全圈】Intel 起诉前工程师窃取 18,000 份“绝密”文件](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072684&idx=1&sn=0ff1617fcd1133f8ec07e8e75d14b26c)
  - [ ] [【安全圈】三项严重漏洞允许攻击者突破 Docker、Kubernetes 容器隔离](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072684&idx=2&sn=1e5dc92d90633b2491948fa3e9c91e0e)
  - [ ] [【安全圈】Zoom 多项漏洞可被利用绕过访问控制导致数据泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072684&idx=3&sn=b6950f2c8a2430eae813fb56247c4863)
  - [ ] [【安全圈】朝鲜黑客组织Konni滥用Google Find Hub 实施远程数据清除攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072684&idx=4&sn=7b45c9cea5e249340960c1075733e21d)
- 专注安管平台
  - [ ] [Gartner：2025年SIEM（安全信息与事态管理）市场分析](https://mp.weixin.qq.com/s?__biz=MzUyNzMxOTAwMw==&mid=2247485087&idx=1&sn=ebfdc5516d2df161f0f1e745bb554691)
- Securityinfo.it
  - [ ] [Torna GlassWorm, il primo worm che colpisce le estensioni di VS Code](https://www.securityinfo.it/2025/11/11/torna-glassworm-il-primo-worm-che-colpisce-le-estensioni-di-vs-code/?utm_source=rss&utm_medium=rss&utm_campaign=torna-glassworm-il-primo-worm-che-colpisce-le-estensioni-di-vs-code)
- SANS Internet Storm Center, InfoCON: green
  - [ ] [Microsoft Patch Tuesday for November 2025, (Tue, Nov 11th)](https://isc.sans.edu/diary/rss/32468)
  - [ ] [ISC Stormcast For Tuesday, November 11th, 2025 https://isc.sans.edu/podcastdetail/9694, (Tue, Nov 11th)](https://isc.sans.edu/diary/rss/32466)
- ICT Security Magazine
  - [ ] [Le procure distrettuali per i reati informatici: l’architettura investigativa italiana nel contrasto al cybercrime](https://www.ictsecuritymagazine.com/articoli/procure-distrettuali/)
  - [ ] [La cybersecurity spaziale nell’era della guerra ibrida](https://www.ictsecuritymagazine.com/notizie/cybersecurity-spaziale/)
- Security Weekly Podcast Network (Audio)
  - [ ] [Miles, 10/8 time, Lost Phones, Whisper Leak, Quantum Route, AI Galore, Rob Allen... - Rob Allen - SWN #528](http://sites.libsyn.com/18678/miles-108-time-lost-phones-whisper-leak-quantum-route-ai-galore-rob-allen-rob-allen-swn-528)
  - [ ] [Ransomware, Defaults, and Proactive Defenses - Rob Allen - ASW #356](http://sites.libsyn.com/18678/ransomware-defaults-and-proactive-defenses-rob-allen-asw-356)
- The Hacker News
  - [ ] [WhatsApp Malware 'Maverick' Hijacks Browser Sessions to Target Brazil's Biggest Banks](https://thehackernews.com/2025/11/whatsapp-malware-maverick-hijacks.html)
  - [ ] [GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites](https://thehackernews.com/2025/11/gootloader-is-back-using-new-font-trick.html)
  - [ ] [CISO's Expert Guide To AI Supply Chain Attacks](https://thehackernews.com/2025/11/cisos-expert-guide-to-ai-supply-chain.html)
  - [ ] [Researchers Detect Malicious npm Package Targeting GitHub-Owned Repositories](https://thehackernews.com/2025/11/researchers-detect-malicious-npm.html)
  - [ ] [Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers](https://thehackernews.com/2025/11/android-trojan-fantasy-hub-malware.html)
- Graham Cluley
  - [ ] [The AI Fix #76: AI self-awareness, and the death of comedy](https://grahamcluley.com/the-ai-fix-76/)
- TorrentFreak
  - [ ] [Redditor Convicted for Sharing Nude Scenes in Landmark ‘Moral Rights’ Copyright Case](https://torrentfreak.com/redditor-convicted-for-sharing-nude-scenes-in-landmark-moral-rights-copyright-case/)
- The Register - Security
  - [ ] [North Korean spies turn Google's Find Hub into remote-wipe weapon](https://go.theregister.com/feed/www.theregister.com/2025/11/11/north_korean_spies_turn_googles/)
  - [ ] [EU's reforms of GDPR, AI slated by privacy activists for 'playing into Big Tech’s hands'](https://go.theregister.com/feed/www.theregister.com/2025/11/11/eu_leaked_gdpr_ai_reforms/)
  - [ ] [OWASP Top 10: Broken access control still tops app security list](https://go.theregister.com/feed/www.theregister.com/2025/11/11/new_owasp_top_ten_broken/)
  - [ ] [Hitachi-owned GlobalLogic admits data stolen on 10k current and former staff](https://go.theregister.com/feed/www.theregister.com/2025/11/11/hitachiowned_globallogic_admits_data_stolen/)
  - [ ] [UK asks cyberspies to probe whether Chinese buses can be switched off remotely](https://go.theregister.com/feed/www.theregister.com/2025/11/11/uk_probe_china_bus_claim/)
  - [ ] [Cyber insurers paid out over twice as much for UK ransomware attacks last year](https://go.theregister.com/feed/www.theregister.com/2025/11/11/ransomware_surge_fuels_230_increase/)
  - [ ] [UK's Ajax fighting vehicle arrives – years late and still sending crew to hospital](https://go.theregister.com/feed/www.theregister.com/2025/11/11/uks_ajax_fighting_vehicle_late/)
  - [ ] [LLM side-channel attack could allow snoops to guess what you're talking about](https://go.theregister.com/feed/www.theregister.com/2025/11/11/llm_sidechannel_attack_microsoft_researcher/)
- Security Affairs
  - [ ] [SAP fixed a maximum severity flaw in SQL Anywhere Monitor](https://securityaffairs.com/184500/security/sap-fixed-a-maximum-severity-flaw-in-sql-anywhere-monitor.html)
  - [ ] [Fantasy Hub: Russian-sold Android RAT boasts full device espionage as MaaS](https://securityaffairs.com/184488/malware/fantasy-hub-russian-sold-android-rat-boasts-full-device-espionage-as-maas.html)
  - [ ] [North Korea-linked Konni APT used Google Find Hub to erase data and spy on defectors](https://securityaffairs.com/184474/intelligence/north-korea-konni-apt-used-google-find-hub-to-erase-data-and-spy-on-defectors.html)
  - [ ] [U.S. CISA adds Samsung mobile devices flaw to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/184452/hacking/u-s-cisa-adds-samsung-mobile-devices-flaw-to-its-known-exploited-vulnerabilities-catalog.html)
  - [ ] [Critical Triofox bug exploited to run malicious payloads via AV configuration](https://securityaffairs.com/184439/hacking/critical-triofox-bug-exploited-to-run-malicious-payloads-via-av-configuration.html)
- Steflan’s Security Blog
  - [ ] [OffSec Web Expert (OSWE) Review](https://steflan-security.com/offsec-web-expert-oswe-review/?utm_source=rss&utm_medium=rss&utm_campaign=offsec-web-expert-oswe-review)
- Schneier on Security
  - [ ] [Prompt Injection in AI Browsers](https://www.schneier.com/blog/archives/2025/11/prompt-injection-in-ai-browsers.html)
- Tor Project blog
  - [ ] [New Release: Tor Browser 15.0.1](https://blog.torproject.org/new-release-tor-browser-1501/)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[每日信息流] 2025-11-12 #1049

每日安全资讯（2025-11-12）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2025-11-12 #1049

Description

每日安全资讯（2025-11-12）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions