[每日信息流] 2025-11-14

# 每日安全资讯（2025-11-14）

- SecWiki News
  - [ ] [SecWiki News 2025-11-13 Review](http://www.sec-wiki.com/?2025-11-13)
- Doonsec's feed
  - [ ] [2025 公认最值得去的互联网大厂](https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247545783&idx=1&sn=f6325635d6671bb23da300036480af97)
  - [ ] [每天一个网络知识：什么是三层交换机？](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247532183&idx=1&sn=4bad1bf7e93cb593940f43e0f2503e35)
  - [ ] [天地伟业Easy7 downloadWordRecord接口存在任意文件读取漏洞 附POC](https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489507&idx=1&sn=d24ab1dbbf9f0f9362a6f2afcdfe17b9)
  - [ ] [快速以太网与千兆以太网，有何本质区别？](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649472085&idx=1&sn=2c6937f9cc40583d5de70c3bb8fcaeff)
  - [ ] [AI侧信道攻击：当“元数据”泄露你的秘密对话](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247492239&idx=1&sn=5e3cf975eb16b7b6e5df7f961160d420)
  - [ ] [【高危漏洞预警】东方通TongWeb ejbserver远程代码执行漏洞](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490987&idx=1&sn=9a17f809b161cebad9fffd1da3961112)
  - [ ] [我做为深二代的绝望：“创业史”（大学生必看）](https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247539608&idx=1&sn=5288906d9b2fd7bd3b01f13b062fbce6)
  - [ ] [一种CET绕过方法](https://mp.weixin.qq.com/s?__biz=MzkxOTMzNzgxOA==&mid=2247483780&idx=1&sn=a34031669b9a8514fc987f60bad66171)
  - [ ] [用Ai做自动化渗透测试对CTF题目进行解密|CTF网络安全大赛](https://mp.weixin.qq.com/s?__biz=Mzg2ODY3NDYxNA==&mid=2247486619&idx=1&sn=21e0ee188906bad707c3fc6bc15d2785)
  - [ ] [Vulnhub靶场之Chronos](https://mp.weixin.qq.com/s?__biz=Mzg3MjgxMzkzMg==&mid=2247485242&idx=1&sn=b3e1cfd52a88aed79b46a8f05e5e6573)
  - [ ] [信号处理基础（频率、增益、滤波）](https://mp.weixin.qq.com/s?__biz=MzU5OTU3NDEzOQ==&mid=2247493319&idx=1&sn=211659ce6ad063faf2fdb2fbd91412e1)
  - [ ] [全球影视业迎来“成人内容安全规范”革命：六大国际制作公司联合成立行业联盟](https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489783&idx=1&sn=997717d35597fabc442b32da2f273f52)
  - [ ] [震惊！我用一个脚本干掉了手写Ansible剧本的痛苦！](https://mp.weixin.qq.com/s?__biz=MjM5OTc5MjM4Nw==&mid=2457389406&idx=1&sn=fa676e60cde657555cf0925b577e75db)
  - [ ] [神秘网站“平壤文件”PyongyangPapers监控朝鲜制裁，目前发现已成关闭状态。](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650563125&idx=1&sn=cc4b8ee841465f356ec6abc68536ebf3)
  - [ ] [以色列8200部队及其全球网络安全渗透与合作分析](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247512213&idx=1&sn=b6f585bef2e8c52136721709a8199120)
  - [ ] [月球背面的复制者](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488772&idx=1&sn=be743b1f6594361dc6a6361cd6f54a29)
  - [ ] [攻击方视角-检验自研NIDS入侵检测能力](https://mp.weixin.qq.com/s?__biz=MzA5NzEwOTUzMw==&mid=2447979984&idx=1&sn=19ef6ee1220e1714fc9bf6f119502fff)
  - [ ] [【连载】红蓝对抗-攻防演练-WEB安全渗透测试：XSS跨站脚本攻击漏洞（二）](https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484848&idx=1&sn=5045a798d5cceaa24256a99799cb5b86)
  - [ ] [APT跟踪 重大攻击事件 数据泄露 网空热点 国家黑客](https://mp.weixin.qq.com/s?__biz=MzIxNDg5ODQxMg==&mid=2247483786&idx=1&sn=7229a1b58e6e61eecfc37227d1c8211e)
  - [ ] [【资料】连环杀手与FBI的犯罪心理侧写](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152944&idx=1&sn=a709e05281815a445083a1a01993470d)
  - [ ] [Mimikatz 绕过检测详细过程](https://mp.weixin.qq.com/s?__biz=MzkyMjI3MzU3MA==&mid=2247485011&idx=1&sn=31063ed3ee631bbfe8559257ba4508b5)
  - [ ] [网络安全卓越验证示范中心发布“国际AI+抗DDoS攻击产品研究分析报告（2025年）”](https://mp.weixin.qq.com/s?__biz=MzkxNzE4NDk3OA==&mid=2247487435&idx=1&sn=bc0069312f92ff2770a7f91c07d8152d)
  - [ ] [【证书和报告信息】中兴通讯股份有限公司-5G专网安全系统](https://mp.weixin.qq.com/s?__biz=Mzg5MzQ5NjQyNw==&mid=2247486371&idx=2&sn=dc6685a367ca98a1bdb43cdba1b5e915)
  - [ ] [【证书信息】北京边界无限科技有限公司-实时应用自我防护(RASP)平台](https://mp.weixin.qq.com/s?__biz=Mzg5MzQ5NjQyNw==&mid=2247486371&idx=3&sn=15dce7280f90e932f18969a172e7860a)
  - [ ] [失业金到手了](https://mp.weixin.qq.com/s?__biz=MzI5Nzc3NDEyNA==&mid=2247486043&idx=1&sn=6be5b682c4ce2c55f6c62149286114ea)
  - [ ] [美团开源 LongCat-Audio-Codec，高效语音编解码器助力实时交互落地](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781705&idx=1&sn=e321d06b8d14b9b78fa1e4345aeec22d)
  - [ ] [美团 LongCat 团队发布全模态一站式评测基准UNO-Bench：揭示单模态与全模态能力的组合规律](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781705&idx=2&sn=e537023b96d0e70c4bb17f73407d9761)
  - [ ] [报名&赠书｜NeurIPS 2025美团论文精选及分享会](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781705&idx=3&sn=4b0b9536577600021e7d64b647977083)
  - [ ] [倒计时2天！直播预约→“美亚杯” 第十一届中国电子数据取证大赛巅峰对决即将上演](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651447373&idx=1&sn=c99c63cc44b2ec3ad1cbd9f7f4201c32)
  - [ ] [GRC及领导力快速课程：解读网络风险，驾驭框架和标准](https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247493350&idx=1&sn=eb17d7194b84a97194b5160a2feb28e0)
  - [ ] [中央网信办严打一批涉学术论文买卖违法违规账号](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247543251&idx=1&sn=8d1a2a23120961fa615ff03ae85b8960)
  - [ ] [使用ClickHouse的S3队列引擎构建迷你流式数据湖](https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908754&idx=1&sn=ac27e10f1f7969b3e6aff49bfbeb29ba)
  - [ ] [关于举办第十九届全国大学生信息安全竞赛（创新实践能力赛）暨第三届“长城杯”网数智安全大赛（防护赛）的通知](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253314&idx=1&sn=841ff1e2bb488c610688c39827eb6e9d)
  - [ ] [CNNVD | 关于微软多个安全漏洞的通报](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253314&idx=2&sn=bc04651b2917327c7550323318e60ac8)
  - [ ] [专家解读 | 深化数字合作共识，共促全球普惠发展](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253314&idx=3&sn=74771833b4939245189f60499c329d8a)
  - [ ] [行业 | 智能网联数据安全合规审计AI平台创新发布，引领智能网联汽车数据要素产业应用健康发展](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253314&idx=4&sn=ac198612745d91ffc0b940ff545d0dc3)
  - [ ] [盘点 | 中国互联网联合辟谣平台2025年10月辟谣榜](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253314&idx=5&sn=0f8c646c9e3c63fc6ea5d061f2b035f6)
  - [ ] [落云安全·内部圈子：POC、红队与源码的研究共同体](https://mp.weixin.qq.com/s?__biz=MzE5ODEwNDM4MA==&mid=2247484241&idx=1&sn=585236988187708d216cf474110d78e7)
  - [ ] [网联清算有限公司诚招安全人才｜总第63期](https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492263&idx=1&sn=e6c5b17c2f7cfe07e8ae3aa028183d5d)
  - [ ] [贵州银行响应央行要求，采购AI换脸欺诈识别服务](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932923&idx=1&sn=53b4dff04b8ecd60816ac06c21dcc8a4)
  - [ ] [AI快讯：中信百信银行智能风控引入百度伐谋，阿里秘密启动千问APP对标ChatGPT](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932923&idx=2&sn=4be72ed3c94a798674f590c9ecf9c6a9)
  - [ ] [宁银理财2025年问数智能体项目供应商征集](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932923&idx=3&sn=e1a1f19aac7aa9e56271f8e485e10c76)
  - [ ] [百度单一来源！重庆农商银行AI中台智能体应用开发项目](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932923&idx=4&sn=7c9a52123bd713e26692db7a6598f17e)
  - [ ] [【安全圈】OpenAI Sora 2 漏洞通过音频转录暴露系统提示](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072716&idx=1&sn=38412a9178d6f38b8c9329d74034513f)
  - [ ] [【安全圈】英国维多利亚时代影像档案数据库泄露 三十万用户信息外泄](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072716&idx=2&sn=4d2cfdd051c402c0c08574ad0e560685)
  - [ ] [【安全圈】DarkComet 木马伪装成比特币钱包卷土重来](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072716&idx=3&sn=a6fcc9e1e2956adbcf169ff65ec0f86d)
  - [ ] [【安全圈】CISA 将 WatchGuard Fireware 高危漏洞列入已被利用漏洞目录](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072716&idx=4&sn=ef6a80b1a03ac75d4f0170b9932d19c1)
  - [ ] [2026年CISSP开班计划来啦！这些资料请收好！测试题+电子习题+知识点摘要](https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247525715&idx=1&sn=386282566ca56141f8a13c5b279e5b3a)
  - [ ] [安全意识 | 定位信息泄露竟让整个小区被钓鱼攻击](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247646634&idx=1&sn=28d1ab2969a33201023f8447d4c282f0)
  - [ ] [《腾讯云游戏安全直播圆满落幕！亿级 DAU 防护秘籍限时领》](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247646634&idx=2&sn=27691158d2c3671d0cda3ee13b52d2f6)
  - [ ] [欧洲委员会试图禁止华为进入成员国移动网络](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247646634&idx=3&sn=7bd1c3abcee280d18491e6eef597890e)
- Tenable Blog
  - [ ] [How Rapid AI Adoption Is Creating an Exposure Gap](https://www.tenable.com/blog/how-rapid-ai-adoption-is-creating-an-exposure-gap)
- Recent Commits to cve:main
  - [ ] [Update Thu Nov 13 11:30:33 UTC 2025](https://github.com/trickest/cve/commit/ce0e9c5a03b4d309c38d9bf5ea761a7877523465)
- CXSECURITY Database RSS Feed - CXSecurity.com
  - [ ] [Logitech Streamlabs Desktop 1.19.6 (overlay) CPU Exhaustion](https://cxsecurity.com/issue/WLB-2025110011)
  - [ ] [is-localhost-ip 2.0.0 - SSRF via Restrictions bypass](https://cxsecurity.com/issue/WLB-2025110010)
  - [ ] [moew.government.bg Cross-site scripting (reflected)](https://cxsecurity.com/issue/WLB-2025110009)
- paper - Last paper
  - [ ] [基于 SHAP 归因指纹增强物联网入侵检测的对抗鲁棒性](https://paper.seebug.org/3411/)
- Private Feed for M09Ic
  - [ ] [mgeeky starred denoland/deno](https://github.com/denoland/deno)
  - [ ] [liamg starred chzyer/readline](https://github.com/chzyer/readline)
  - [ ] [bolucat released 202511131935 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202511131935)
  - [ ] [Ascotbe starred index-tts/index-tts](https://github.com/index-tts/index-tts)
  - [ ] [mitre-attack released v18.1 at mitre-attack/attack-stix-data](https://github.com/mitre-attack/attack-stix-data/releases/tag/v18.1)
  - [ ] [pydantic released v1.16.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v1.16.0)
  - [ ] [mgeeky starred sparfenyuk/mcp-proxy](https://github.com/sparfenyuk/mcp-proxy)
  - [ ] [DVKunion starred wx-chevalier/Auth-Notes](https://github.com/wx-chevalier/Auth-Notes)
  - [ ] [pathwaycom released v0.27.0 at pathwaycom/pathway](https://github.com/pathwaycom/pathway/releases/tag/v0.27.0)
  - [ ] [PrefectHQ released 3.6.2.dev1 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.6.2.dev1)
  - [ ] [safedv starred dk0m/ZeroCrumb](https://github.com/dk0m/ZeroCrumb)
  - [ ] [mgeeky starred droidrun/droidrun](https://github.com/droidrun/droidrun)
  - [ ] [niudaii starred masterqiu01/cross-file-obfuscator](https://github.com/masterqiu01/cross-file-obfuscator)
  - [ ] [imroc released v3.56.0 at imroc/req](https://github.com/imroc/req/releases/tag/v3.56.0)
  - [ ] [Rvn0xsy starred projectdiscovery/naabu](https://github.com/projectdiscovery/naabu)
  - [ ] [LloydLabs starred openrdap/rdap](https://github.com/openrdap/rdap)
  - [ ] [FunnyWolf starred Ed1s0nZ/CyberStrikeAI](https://github.com/Ed1s0nZ/CyberStrikeAI)
  - [ ] [pydantic released v1.15.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v1.15.0)
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  - [ ] [NuGet平台现恶意包 暗藏破坏有效载荷](https://www.4hou.com/posts/VW69)
  - [ ] [国家网络安全通报中心发布新一批重点防范境外恶意网址和恶意IP](https://www.4hou.com/posts/0MQG)
- Sucuri Blog
  - [ ] [How to Fix the ERR_TOO_MANY_REDIRECTS Error](https://blog.sucuri.net/2025/11/how-to-fix-the-err_too_many_redirects-error.html)
- ongoing by Tim Bray
  - [ ] [Kendzior Case-Study](https://www.tbray.org/ongoing/When/202x/2025/11/13/Kendzior-Case-Study)
- 奇安信攻防社区
  - [ ] [记一次登录框0-1渗透突破](https://forum.butian.net/share/4644)
- Google Online Security Blog
  - [ ] [Rust in Android: move fast and fix things](http://security.googleblog.com/2025/11/rust-in-android-move-fast-fix-things.html)
- obaby@mars
  - [ ] [未获取商用授权?! — 这很百度](https://h4ck.org.cn/2025/11/21985)
- Y4tacker:Hacking The World!
  - [ ] [东方通TongWeb最新反序列化利用分析](https://y4tacker.github.io/2025/11/13/year/2025/11/%E4%B8%9C%E6%96%B9%E9%80%9ATongWeb%E6%9C%80%E6%96%B0%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%88%A9%E7%94%A8%E5%88%86%E6%9E%90/)
- Zdziarski
  - [ ] [A Legal Classification for Large Language Models](https://www.zdziarski.com/blog/?p=13628)
- Cerbero Blog
  - [ ] [AD1 Format Package](https://blog.cerbero.io/ad1-format-package/)
- GuidePoint Security
  - [ ] [The Security Operations Gap: More Tools, Slower Responses, and the Promise of AI](https://www.guidepointsecurity.com/blog/the-security-operations-gap-and-the-promise-of-ai/)
- Horizon3.ai
  - [ ] [CVE-2025-9316, CVE-2025-11700](https://horizon3.ai/attack-research/vulnerabilities/n-able-n-central-vulnerabilities-cve-2025-9316-cve-2025-11700/)
  - [ ] [CVE-2025-12480](https://horizon3.ai/attack-research/vulnerabilities/cve-2025-12480/)
- Blog - Atredis Partners
  - [ ] [Drawbot: Let’s Hack Something Cute!](https://www.atredis.com/blog/2025/9/30/drawbot-lets-hack-something-cute)
- NVISO Labs
  - [ ] [Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery](https://blog.nviso.eu/2025/11/13/contagious-interview-actors-now-utilize-json-storage-services-for-malware-delivery/)
- Malwarebytes
  - [ ] [1 million victims, 17,500 fake sites: Google takes on toll-fee scammers](https://www.malwarebytes.com/blog/news/2025/11/1-million-victims-17500-fake-sites-google-takes-on-toll-fee-scammers)
  - [ ] [Are you paying more than other people? NY cracks down on surveillance pricing](https://www.malwarebytes.com/blog/news/2025/11/are-you-paying-more-than-other-people-ny-cracks-down-on-surveillance-pricing)
  - [ ] [We opened a fake invoice and fell down a retro XWorm-shaped wormhole](https://www.malwarebytes.com/blog/threats/2025/11/we-opened-a-fake-invoice-and-fell-down-a-retro-xworm-shaped-wormhole)
- The Trail of Bits Blog
  - [ ] [Building checksec without boundaries with Checksec Anywhere](https://blog.trailofbits.com/2025/11/13/building-checksec-without-boundaries-with-checksec-anywhere/)
- Binary Ninja
  - [ ] [Binary Ninja 5.2 (Io)](https://binary.ninja/2025/11/13/binary-ninja-5.2-io.html)
- daniel.haxx.se
  - [ ] [Parsing integers in C](https://daniel.haxx.se/blog/2025/11/13/parsing-integers-in-c/)
- Wallarm
  - [ ] [OWASP Top 10 Business Logic Abuse: What You Need to Know](https://lab.wallarm.com/owasp-top-10-business-logic-abuse-what-you-need-to-know/)
- HackerNews
  - [ ] [英国维多利亚时期影像库遭数据泄露](https://hackernews.cc/archives/61534)
  - [ ] [SAP 修复19项安全漏洞，含 SQL Anywhere Monitor 硬编码凭证高危风险](https://hackernews.cc/archives/61530)
  - [ ] [德国极右翼分子因涉嫌运营暗网平台被捕](https://hackernews.cc/archives/61528)
  - [ ] [美国打击东南亚电诈窝点，同步制裁缅甸武装团伙](https://hackernews.cc/archives/61526)
  - [ ] [亚马逊披露黑客利用 Cisco ISE 和 Citrix NetScaler  零日漏洞的新型攻击](https://hackernews.cc/archives/61524)
  - [ ] [谷歌推出“隐私 A I计算”，在设备级隐私保护下实现安全 AI 处理](https://hackernews.cc/archives/61521)
- 奇客Solidot–传递最新科技情报
  - [ ] [Valve 宣布 Linux 游戏机 Steam Machine](https://www.solidot.org/story?sid=82792)
- 安全分析与研究
  - [ ] [针对某集团的红队钓鱼样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494277&idx=1&sn=ab520498eeec36cc18b3dda6e5c8379a)
- 腾讯玄武实验室
  - [ ] [每日安全动态推送(25/11/13)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960258&idx=1&sn=2dd48f54ed5a1834deeed1436c532e78)
- 奇安信 CERT
  - [ ] [【已复现】Windows 任务主机进程权限提升漏洞(CVE-2025-60710)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504145&idx=1&sn=e87ffc546abe4fc51baa1e751a82f076)
- 微步在线研究响应中心
  - [ ] [漏洞通告 | TongWeb应用服务器 ejbserver 远程代码执行漏洞](https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507962&idx=1&sn=f08e1364ea4ba789e5f7b77d4c5f9195)
- 先进攻防
  - [ ] [使用ClickHouse的S3队列引擎构建迷你流式数据湖](https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908754&idx=1&sn=ac27e10f1f7969b3e6aff49bfbeb29ba)
- 黑鸟
  - [ ] [全球采购和招标平台网站GlobalTenders](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183636&idx=1&sn=1ee01e2f491b4b41468e0c8299dcece1)
- 安全内参
  - [ ] [英国关基保护法案启动立法程序：亮点初解析](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515199&idx=1&sn=4899ad51aac4222293c4e9c050a6a5c6)
  - [ ] [美国政府仍在遴选美国网络司令部和国家安全局最高领导人](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515199&idx=2&sn=ede11d73ef05cfd80efe7bbebff60492)
- 代码卫士
  - [ ] [中国信通院首期软件成分分析 (SCA) 工具检测能力测试结果发布，奇安信开源卫士夺魁！](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524386&idx=1&sn=c74e43401086f8a32228f7654350b1ab)
  - [ ] [Gartner预测：3年后8成企业将遭软件供应链攻击，代码安全成为新风口](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524386&idx=2&sn=a9198fc5867f34500fff6b821d833f4c)
- 看雪学苑
  - [ ] [看雪科技荣获2025“网安智谷”网络安全创新创业大赛二等奖](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604124&idx=1&sn=4cf3c9cb6c5f9a7d63ec741b695f8e2a)
  - [ ] [Android 加固技术回忆录： 一代TX加固完整分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604124&idx=2&sn=fb9b7eb9cd47706ba5b8a38dce10ded7)
  - [ ] [安全通告：Chrome V8引擎发现高危漏洞，官方发布修复更新](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604124&idx=3&sn=23593b87e2f899c70583a2e18866e9b8)
- 长亭安全应急响应中心
  - [ ] [【原创0day】东方通应用服务器 EJB 反序列化远程代码执行漏洞安全通告](https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492984&idx=1&sn=427515004ded06320d11eb8ca7d04914)
- 二道情报贩子
  - [ ] [全球影视业迎来“成人内容安全规范”革命：六大国际制作公司联合成立行业联盟](https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489783&idx=1&sn=997717d35597fabc442b32da2f273f52)
- 威努特安全网络
  - [ ] [公安部发布六项网络安全等级保护新标准](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651137761&idx=1&sn=e3cccd04bc7eb7dd95a13f29d32bd453)
- 安全圈
  - [ ] [【安全圈】OpenAI Sora 2 漏洞通过音频转录暴露系统提示](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072716&idx=1&sn=38412a9178d6f38b8c9329d74034513f)
  - [ ] [【安全圈】英国维多利亚时代影像档案数据库泄露 三十万用户信息外泄](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072716&idx=2&sn=4d2cfdd051c402c0c08574ad0e560685)
  - [ ] [【安全圈】DarkComet 木马伪装成比特币钱包卷土重来](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072716&idx=3&sn=a6fcc9e1e2956adbcf169ff65ec0f86d)
  - [ ] [【安全圈】CISA 将 WatchGuard Fireware 高危漏洞列入已被利用漏洞目录](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072716&idx=4&sn=ef6a80b1a03ac75d4f0170b9932d19c1)
- 丁爸 情报分析师的工具箱
  - [ ] [【资料】连环杀手与FBI的犯罪心理侧写](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152944&idx=1&sn=a709e05281815a445083a1a01993470d)
- 中国信息安全
  - [ ] [关于举办第十九届全国大学生信息安全竞赛（创新实践能力赛）暨第三届“长城杯”网数智安全大赛（防护赛）的通知](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253314&idx=1&sn=841ff1e2bb488c610688c39827eb6e9d)
  - [ ] [CNNVD | 关于微软多个安全漏洞的通报](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253314&idx=2&sn=bc04651b2917327c7550323318e60ac8)
  - [ ] [专家解读 | 深化数字合作共识，共促全球普惠发展](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253314&idx=3&sn=74771833b4939245189f60499c329d8a)
  - [ ] [行业 | 智能网联数据安全合规审计AI平台创新发布，引领智能网联汽车数据要素产业应用健康发展](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253314&idx=4&sn=ac198612745d91ffc0b940ff545d0dc3)
  - [ ] [盘点 | 中国互联网联合辟谣平台2025年10月辟谣榜](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253314&idx=5&sn=0f8c646c9e3c63fc6ea5d061f2b035f6)
- 安全牛
  - [ ] [俄罗斯以反无人机为由对入境SIM卡实施24小时"冷却期"：中央企业10月网络安全态势 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139309&idx=1&sn=0a5e3a5964e1595215f282dba38410da)
  - [ ] [《AI时代勒索软件威胁与防护技术应用指南》报告启动推文](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139309&idx=2&sn=5a692e204c3dd3c73473049c260365b3)
- 青藤云安全
  - [ ] [双项入选！青藤云安全获任数据安全标准与赛事两大核心工作组成员单位](https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850856&idx=1&sn=3cd426d1c41e68a244393a9c7a47029e)
- 数世咨询
  - [ ] [中国软件评测中心联合数世咨询发布：《2025中国数据安全企业全景图》](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540813&idx=1&sn=4f578ce069d137c322819e47827be516)
- 补天平台
  - [ ] [欢迎「金蝶软件」入驻补天专属SRC！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509695&idx=1&sn=3b431bb50fa75e8e06193a69f40dfd27)
- 微步在线
  - [ ] [NDR，第三次入选！](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650185128&idx=1&sn=d5b371bbe679cc604ed2d0421e86d139)
- 极客公园
  - [ ] [王小川、任永亮等都在！听「最有料的人」聊 AI ！](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653090776&idx=1&sn=221591a2205f2ffdb4659e7206f07836)
  - [ ] [从 NBA 到奥运会，全球顶级赛事为何都选择阿里 AI ？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653090757&idx=1&sn=1336195b23f5e22cec36a13fe686d198)
- 天黑说嘿话
  - [ ] [银狐钓鱼邮件（真实案例）](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485097&idx=1&sn=053ac199fcac6330b5e3a357f06a2dae)
- 火绒安全
  - [ ] [【硬核拆解】“捉迷藏”式云控推广产业链](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527544&idx=1&sn=667f53b0e2d7fa4087daa1de9317ea0c)
  - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527544&idx=2&sn=06db428c4e960cc004f5dd7b5af8fe35)
- 美团技术团队
  - [ ] [美团开源 LongCat-Audio-Codec，高效语音编解码器助力实时交互落地](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781705&idx=1&sn=e321d06b8d14b9b78fa1e4345aeec22d)
  - [ ] [美团 LongCat 团队发布全模态一站式评测基准UNO-Bench：揭示单模态与全模态能力的组合规律](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781705&idx=2&sn=e537023b96d0e70c4bb17f73407d9761)
  - [ ] [报名&赠书｜NeurIPS 2025美团论文精选及分享会](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651781705&idx=3&sn=4b0b9536577600021e7d64b647977083)
- 威胁猎人Threat Hunter
  - [ ] [暗流第1期｜数字炼金术：揭秘信用卡盗刷背后的黑色产业链](https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247501940&idx=1&sn=e2cb735ea86e4818b80d440f0a10c0ac)
- 嘶吼专业版
  - [ ] [NuGet平台现恶意包 暗藏破坏有效载荷](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585297&idx=1&sn=41af620a9973438ab6e3941632446589)
  - [ ] [国家网络安全通报中心发布新一批重点防范境外恶意网址和恶意IP](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585297&idx=2&sn=4b7e2e5b953372411ac25d056735d962)
- IT Service Management News
  - [ ] [ACN: Guida per la gestione degli incidenti](http://blog.cesaregallotti.it/2025/11/acn-guida-per-la-gestione-degli.html)
- 迪哥讲事
  - [ ] [如何通过搜索JS文件找到一些有价值的漏洞](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498563&idx=1&sn=a7db785c1e15e5cc01dc9aff8975e4bf)
- 赛博昆仑CERT
  - [ ] [【复现】TongWeb ejbserver反序列化漏洞风险通告](https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484960&idx=1&sn=bb4bce6fbb24e6c7d577576a1950346a)
- 安全419
  - [ ] [何为可信数据空间 网安企业的机会在哪里？](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247551443&idx=1&sn=d2512ba3edaeb33ccc018a8cf0c27b09)
  - [ ] [不止是工具，更是平台：小薇智能体的开放性设计与智能编排](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247551443&idx=2&sn=bb659189b10730c6bbd5a8f99bf044bb)
- TrustedSec
  - [ ] [Helpful Hints for Writing (and Editing) Cybersecurity Reports](https://trustedsec.com/blog/helpful-hints-for-writing-and-editing-cybersecurity-reports)
- Have I Been Pwned latest breaches
  - [ ] [Operation Endgame 3.0 - 2,046,030 breached accounts](https://haveibeenpwned.com/Breach/OperationEndgame3)
- 字节跳动技术团队
  - [ ] [全新升级，全面开放，限时免费！一图读懂 SOLO 正式版](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247517414&idx=1&sn=7866376f89a66bb57a980d3f9a272ffc)
- Securityinfo.it
  - [ ] [Crescono le truffe ai danni dei consumatori, preoccupano quelle basate su IA. Il report di Bitdefender](https://www.securityinfo.it/2025/11/13/crescono-le-truffe-ai-danni-dei-consumatori-preoccupano-quelle-basate-su-ia-il-report-di-bitdefender/?utm_source=rss&utm_medium=rss&utm_campaign=crescono-le-truffe-ai-danni-dei-consumatori-preoccupano-quelle-basate-su-ia-il-report-di-bitdefender)
- ICT Security Magazine
  - [ ] [Blockchain Forensics: oltre le criptovalute – tracciamento NFT e indagini DeFi](https://www.ictsecuritymagazine.com/articoli/blockchain-forensics/)
  - [ ] [NIS2, DORA e CER: navigare la convergenza normativa europea sulla cybersecurity](https://www.ictsecuritymagazine.com/notizie/convergenza-normativa/)
- Tails - News
  - [ ] [Tails 7.2](https://tails.net/news/version_7.2/)
- SANS Internet Storm Center, InfoCON: green
  - [ ] [Formbook Delivered Through Multiple Scripts, (Thu, Nov 13th)](https://isc.sans.edu/diary/rss/32480)
  - [ ] [ISC Stormcast For Thursday, November 13th, 2025 https://isc.sans.edu/podcastdetail/9698, (Thu, Nov 13th)](https://isc.sans.edu/diary/rss/32476)
- 白泽安全实验室
  - [ ] [新型商用级安卓间谍软件“LANDFALL”曝光](https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492825&idx=1&sn=17cceabf259771097d0fd7acd771f5ef)
- Schneier on Security
  - [ ] [Book Review: The Business of Secrets](https://www.schneier.com/blog/archives/2025/11/book-review-the-business-of-secrets.html)
- Instapaper: Unread
  - [ ] [The Evidence Locker - A DFIR Image Compendium](https://www.stark4n6.com/2025/11/the-evidence-locker-dfir-image.html)
  - [ ] [4n6img - The Go-to Database of Verified Forensic Images to Practice & Research](https://www.reddit.com/r/computerforensics/comments/1ov9it2/4n6img_the_goto_database_of_verified_forensic/)
  - [ ] [Which Versions of iOS Are Supported, and Why “It Depends” Is The Best Answer](https://blog.elcomsoft.com/2025/11/which-versions-of-ios-are-supported-and-why-it-depends-is-the-best-answer/)
  - [ ] [File Formats](http://windowsir.blogspot.com/2025/11/file-formats.html)
- Tor Project blog
  - [ ] [New Release: Tails 7.2](https://blog.torproject.org/new-release-tails-7_2/)
- Graham Cluley
  - [ ] [Smashing Security podcast #443: Tinder’s camera roll and the Buffett deepfake](https://grahamcluley.com/smashing-security-podcast-443/)
- Krebs on Security
  - [ ] [Google Sues to Disrupt Chinese SMS Phishing Triad](https://krebsonsecurity.com/2025/11/google-sues-to-disrupt-chinese-sms-phishing-triad/)
- The Hacker News
  - [ ] [Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests' Payment Data](https://thehackernews.com/2025/11/russian-hackers-create-4300-fake-travel.html)
  - [ ] [Fake Chrome Extension “Safery” Steals Ethereum Wallet Seed Phrases Using Sui Blockchain](https://thehackernews.com/2025/11/fake-chrome-extension-safery-steals.html)
  - [ ] [When Attacks Come Faster Than Patches: Why 2026 Will be the Year of Machine-Speed Security](https://thehackernews.com/2025/11/when-attacks-come-faster-than-patches.html)
  - [ ] [Operation Endgame Dismantles Rhadamanthys, Venom RAT, and Elysium Botnet in Global Crackdown](https://thehackernews.com/2025/11/operation-endgame-dismantles.html)
  - [ ] [ThreatsDay Bulletin: Cisco 0-Days, AI Bug Bounties, Crypto Heists, State-Linked Leaks and 20 More Stories](https://thehackernews.com/2025/11/threatsday-bulletin-cisco-0-days-ai-bug.html)
  - [ ] [CISA Flags Critical WatchGuard Fireware Flaw Exposing 54,000 Fireboxes to No-Login Attacks](https://thehackernews.com/2025/11/cisa-flags-critical-watchguard-fireware.html)
  - [ ] [Over 67,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack](https://thehackernews.com/2025/11/over-46000-fake-npm-packages-flood.html)
- The Register - Security
  - [ ] [Chinese spies told Claude to break into about 30 critical orgs. Some attacks succeeded](https://go.theregister.com/feed/www.theregister.com/2025/11/13/chinese_spies_claude_attacks/)
  - [ ] [Ransomed CTO falls on sword, refuses to pay extortion demand](https://go.theregister.com/feed/www.theregister.com/2025/11/13/ransomed_cto_refuses_extortion_demand/)
  - [ ] [Ubuntu 25.10's Rusty sudo holes quickly welded shut](https://go.theregister.com/feed/www.theregister.com/2025/11/13/ubuntu_rust_sudo_hole/)
  - [ ] [Extra, extra, read all about it: Washington Post clobbered in Clop caper](https://go.theregister.com/feed/www.theregister.com/2025/11/13/washington_post_clop/)
  - [ ] [Rhadamanthys malware admin rattled as cops seize a thousand-plus servers](https://go.theregister.com/feed/www.theregister.com/2025/11/13/rhadamanthys_takedown/)
  - [ ] [NHS supplier ends probe into ransomware attack that contributed to patient death](https://go.theregister.com/feed/www.theregister.com/2025/11/13/synnovis_qilin_investigation/)
- Security Affairs
  - [ ] [Chrome extension “Safery” steals Ethereum wallet seed phrases](https://securityaffairs.com/184585/malware/chrome-extension-safery-steals-ethereum-wallet-seed-phrases.html)
  - [ ] [A new round of Europol’s Operation Endgame dismantled Rhadamanthys, Venom RAT, and Elysium botnet](https://securityaffairs.com/184581/cyber-crime/a-new-round-of-europols-operation-endgame-dismantled-rhadamanthys-venom-rat-and-elysium-botnet.html)
  - [ ] [U.S. CISA adds WatchGuard Firebox, Microsoft Windows, and Gladinet Triofox flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/184573/security/u-s-cisa-adds-watchguard-firebox-microsoft-windows-and-gladinet-triofox-flaws-to-its-known-exploited-vulnerabilities-catalog.html)
  - [ ] [Amazon alerts: advanced threat actor exploits Cisco ISE & Citrix NetScaler zero-days](https://securityaffairs.com/184561/hacking/amazon-alerts-advanced-threat-actor-exploits-cisco-ise-citrix-netscaler-zero-days.html)
- Deeplinks
  - [ ] [Lawmakers Want to Ban VPNs—And They Have No Idea What They're Doing](https://www.eff.org/deeplinks/2025/11/lawmakers-want-ban-vpns-and-they-have-no-idea-what-theyre-doing)
  - [ ] [🔔 Ring's Face Scan Plan | EFFector 37.16](https://www.eff.org/deeplinks/2025/11/rings-face-scan-plan-effector-3716)
- Trend Micro Research, News and Perspectives
  - [ ] [Increase in Lumma Stealer Activity Coincides with Use of Adaptive Browser Fingerprinting Tactics](https://www.trendmicro.com/en_us/research/25/k/lumma-stealer-browser-fingerprinting.html)
- TorrentFreak
  - [ ] [Happy Fire Stick Crackdown Malware Armageddon Month](https://torrentfreak.com/happy-fire-stick-crackdown-malware-armageddon-month-251113/)
- NetSPI
  - [ ] [Why Security Leaders Can’t Ignore macOS Anymore](https://www.netspi.com/blog/executive-blog/breach-and-attack-simulation/why-security-leaders-cant-ignore-macos-anymore/)
- Jack Hacks
  - [ ] [Flare-On 12: NTFSM - Solving a Finite State Machine with Binary Ninja](https://jhalon.github.io/flare-on-12-ntfsm/)
- Security Weekly Podcast Network (Audio)
  - [ ] [Going Around EDR - PSW #900](http://sites.libsyn.com/18678/going-around-edr-psw-900)
- 网安寻路人
  - [ ] [敏感个人信息的界定和范围出现实质性变化了吗？（《个人信息安全规范》修订思考之五）](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247508005&idx=1&sn=75edf9130a927540085ca166ef02468d)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[每日信息流] 2025-11-14 #1051

每日安全资讯（2025-11-14）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2025-11-14 #1051

Description

每日安全资讯（2025-11-14）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions