[每日信息流] 2024-11-08

# 每日安全资讯（2024-11-08）

- SecWiki News
  - [ ] [SecWiki News 2024-11-07 Review](http://www.sec-wiki.com/?2024-11-07)
- Security Boulevard
  - [ ] [Highlights from the InCyber Montreal Forum](https://securityboulevard.com/2024/11/highlights-from-the-incyber-montreal-forum/)
  - [ ] [DEF CON 32 – QuickShell Sharing Is Caring About RCE Attack Chain On QuickShare – Or Yair, Shmuel Cohen](https://securityboulevard.com/2024/11/def-con-32-quickshell-sharing-is-caring-about-rce-attack-chain-on-quickshare-or-yair-shmuel-cohen/)
  - [ ] [The Future of Work: Understanding AI Agents and Digital Coworkers](https://securityboulevard.com/2024/11/the-future-of-work-understanding-ai-agents-and-digital-coworkers/)
  - [ ] [The Global Effort to Maintain Supply Chain Security | Part Two](https://securityboulevard.com/2024/11/the-global-effort-to-maintain-supply-chain-security-part-two/)
  - [ ] [Randall Munroe’s XKCD ‘Probabilistic Uncertainty’](https://securityboulevard.com/2024/11/randall-munroes-xkcd-probabilistic-uncertainty/)
  - [ ] [Bot Attacks Are Coming to Town: How to Safeguard Your Customers’ Holiday Travel](https://securityboulevard.com/2024/11/bot-attacks-are-coming-to-town-how-to-safeguard-your-customers-holiday-travel/)
  - [ ] [Fortinet Extends Generative AI Reach Across Portfolio](https://securityboulevard.com/2024/11/fortinet-extends-generative-ai-reach-across-portfolio/)
  - [ ] [The Story of BIX, a Specialized AI Agent for Cybersecurity, Built with NVIDIA AI](https://securityboulevard.com/2024/11/the-story-of-bix-a-specialized-ai-agent-for-cybersecurity-built-with-nvidia-ai/)
  - [ ] [DEF CON 32 – Windows Downdate: Downgrade Attacks Using Windows Updates](https://securityboulevard.com/2024/11/def-con-32-windows-downdate-downgrade-attacks-using-windows-updates/)
  - [ ] [CVE-2024-38213: From Crumbs to Full Compromise in a Stealthy Cyber Attack](https://securityboulevard.com/2024/11/cve-2024-38213-from-crumbs-to-full-compromise-in-a-stealthy-cyber-attack/)
- Doonsec's feed
  - [ ] [【网安公益自学资源】2024.11.7（更新牛逼CTF安全课程+配套资料）](https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247536098&idx=1&sn=e43050b1ad85b6683c39f74109219564)
  - [ ] [第107篇：国*攻防比赛中一个多层嵌套的java内存马的反混淆解密分析过程](https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247487175&idx=1&sn=669b8da526480ecf6e25e97b143d0ba8)
  - [ ] [「漏洞复现」快递微信小程序系统 httpRequest 任意文件读取漏洞](https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485967&idx=1&sn=5a936d865874c1e2d229ae517527a9a2)
  - [ ] [L1：第二关：玩转书生「多模态对话」和「AI搜索」产品](https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650889245&idx=1&sn=2c5847d82dada9ee157cff53a66e8f86)
  - [ ] [开源情报|国际动态|浅析特朗普上任后对华科技政策倾向](https://mp.weixin.qq.com/s?__biz=Mzg2NTcyNjU4Nw==&mid=2247485633&idx=1&sn=70b2761a772cc1c9e2558f02ab4b50f1)
  - [ ] [用友U8 Cloud uapbd.refdef.query接口存在SQL注入漏洞 附POC](https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487712&idx=1&sn=c689a918835d8fd979a54c56110824f5)
  - [ ] [Nacos从快速发现到漏洞利用，没想到如此简单？](https://mp.weixin.qq.com/s?__biz=Mzg5NDU3NDA3OQ==&mid=2247490706&idx=1&sn=9000b39b5cf76ad0b2c04e1c6d61a3a8)
  - [ ] [现在,安全为什么都爱谈治理？](https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247491571&idx=1&sn=3f8ea34e60e08d67510da26b3f8f77c9)
  - [ ] [预告 | “实数融合 链创未来” 中小企业数字化“链式”转型活动将于11月15日召开](https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247591414&idx=1&sn=46f63da8eec457495e15937202579173)
  - [ ] [用嘴渗透？手把手教你使用大模型搭建自动渗透机器人](https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247503724&idx=1&sn=6c0c358e90a6ef04b5a4f026ea17f054)
  - [ ] [【重要通知】第四届“网鼎杯”网络安全大赛决赛阶段赛事活动通知](https://mp.weixin.qq.com/s?__biz=MzU1MTE1MjU5Nw==&mid=2247485349&idx=1&sn=ccb679c85fc5ccdee420d99041006381)
  - [ ] [又一款新的红队资产收集工具！！](https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247492564&idx=1&sn=4e64080457a91a0055cc44f3b6bc8d46)
  - [ ] [房东直卖-北七家3居变4居，理想楼层、朝向 、户型，精装修！](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485155&idx=1&sn=6f95f013e3e7ffe9c4eaae48d317166d)
  - [ ] [特朗普将如何改写网络安全政策？拜登遗产面临考验！](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485155&idx=2&sn=5996027c6c9c66b5f26e5b9cbdcdbaba)
  - [ ] [宣布了！特朗普赢得大选！会如何影响我们？](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485155&idx=3&sn=c1377a3cceebaf6ce030fd92b0071d01)
  - [ ] [【干货】笑傲职场的独家经验（1）](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485155&idx=4&sn=81eab0b60acfc3c115c5796101af6e10)
  - [ ] [【干货原创】实网攻防演习常态化，会带来什么变化01](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485155&idx=5&sn=9258853eb6c56887c3056145fa448fe0)
  - [ ] [【干货原创】K12教育，鲜为人知的模式秘密](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485155&idx=6&sn=ad8abc8a07a6903af98b96b7049daa20)
  - [ ] [原创文章目录](https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485155&idx=7&sn=e0f2c46794e8a0b84db571b887fc590b)
  - [ ] [首份数字广州规划正式出炉](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247631933&idx=1&sn=283e3353246a444a567f6d8540d7b1da)
  - [ ] [2024人工智能十大前沿技术趋势展望发布](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247631933&idx=2&sn=b1903ee30e27d8393b9ca34a3836169f)
  - [ ] [海外报告｜美国陆军统一数据参考架构](https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247631933&idx=3&sn=ace21118b41627e86ee21021ae2e4bb4)
  - [ ] [美国知名军工芯片厂商因勒索攻击损失超1.5亿元](https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489944&idx=1&sn=d3fc4c4c5cf93abeb6dea0b9095b82a0)
  - [ ] [网络安全/信息安全专业的实习同学必读](https://mp.weixin.qq.com/s?__biz=MzU5NzQ3NzIwMA==&mid=2247486117&idx=1&sn=6a0965bc44d575b18d86278c6ce9e2f4)
  - [ ] [有关漏洞挖掘的一些总结](https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516769&idx=1&sn=ce9e6b53923a5ca91aa19e5a4f68b6c1)
  - [ ] [CISSP考试经验分享（全流程详解）](https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516769&idx=2&sn=9a0b7c55dbc3a53060a8b6f49dce8034)
  - [ ] [红队安全攻防知识库](https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516769&idx=3&sn=6239cf80d41ffe68a20ca9311d3a5985)
  - [ ] [登陆页面的20种渗透思路](https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247492972&idx=1&sn=be8a02b2abce301363b0841082b495db)
  - [ ] [好消息！“美亚杯”中国电子数据取证大赛Qiko+智能体上线](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651426020&idx=1&sn=dff37f92364d69a7cb66f82f826075bf)
  - [ ] [国投智能（美亚柏科）参与厦门市应急管理协会专题座谈会](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651426020&idx=2&sn=66cc50b8e5a0a6d8e17ab7e40b01b20e)
  - [ ] [逃逸六十甲子 （2）·财运通关篇](https://mp.weixin.qq.com/s?__biz=Mzg2MzU0NTI3Nw==&mid=2247484440&idx=1&sn=098bb54d47e763749f8ffc34b7179d33)
  - [ ] [u200b玩转无人机攻防](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247615512&idx=1&sn=8f54216e2334ed1acb9f193ff9f46453)
  - [ ] [中国船级社CCS：船舶网络安全指南2024](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247615512&idx=2&sn=2c440ff661182a6c155d64a1f4560991)
  - [ ] [卡车系统网络安全](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247615512&idx=3&sn=0d5f594085d51052d0a93fda9674a192)
  - [ ] [【免杀工具】MSF流量免杀后续](https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247484713&idx=1&sn=36d3831a7d8db5c045f8ea3e64d3ad7b)
  - [ ] [数据安全检查测评报告参考模板](https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247487115&idx=1&sn=101acf63ab7ef63f796b8a19272bc326)
  - [ ] [web 页面转化成 mac 独立程序](https://mp.weixin.qq.com/s?__biz=Mzg5NzY5NjM5Mg==&mid=2247484935&idx=1&sn=e7800dba94d0d798b65363d85b7bfd8b)
  - [ ] [中央第十五巡视组启动网信办巡视工作，强化网络安全责任](https://mp.weixin.qq.com/s?__biz=Mzg2NjkxNzA0Ng==&mid=2247484835&idx=1&sn=57fee7d4d5d66a788bd1caeb4b5598ed)
  - [ ] [网络安全新篇章：13项国家标准引领产业升级](https://mp.weixin.qq.com/s?__biz=Mzg2NjkxNzA0Ng==&mid=2247484835&idx=2&sn=bcb67440086fd98d763ac0f195a85cd5)
  - [ ] [康保县网络安全大行动：强化责任，筑牢数字防线](https://mp.weixin.qq.com/s?__biz=Mzg2NjkxNzA0Ng==&mid=2247484835&idx=3&sn=5409a0a8c41a91ef2f7ec243024930db)
  - [ ] [【报名】MARS TALK 香港科技大学站｜未来产业探索：新技术、新趋势](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651779557&idx=1&sn=e6dd46f2d1de330da987f8e6bc2f3b4f)
  - [ ] [G.O.S.S.I.P 阅读推荐 2024-11-07 区域化的艺术](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499120&idx=1&sn=ab2c4c9491fcf2ebc01864b25d89167d)
  - [ ] [我希望的圣诞礼物是反射 DLL 注入](https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247484999&idx=1&sn=d27928cc0dd801edcb5fa5c626bbf8b5)
  - [ ] [全国智能计算标准化工作组智能计算标准测试验证计划正式启动](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649247820&idx=1&sn=519631c7fed15dc4356b5dac25a94ebb)
  - [ ] [关注 | 国家卫生健康委统计信息中心关于开展2024年度国家医疗健康信息互联互通标准化成熟度测评工作的通知](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649247820&idx=2&sn=754e4faa587f2626287fde5513988b35)
  - [ ] [移动取证软件：为什么 Belkasoft X 应该是您的首选工具](https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504277&idx=1&sn=7d7f25de99230ecc531b039a793b93cd)
  - [ ] [因收集敏感用户数据韩国对 Meta 处以罚款](https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504277&idx=2&sn=a60767fc19b68e425c7587c8657577f8)
  - [ ] [摩托车零售商泄露了 130 万条客户记录](https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504277&idx=3&sn=09931a05705325ad9ab4fedc5f2dd296)
  - [ ] [默认 iOS 设置使已锁定的 iPhone 容易受到攻击](https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504277&idx=4&sn=f07cc94211053f370564339d97026230)
  - [ ] [施耐德电气服务器40GB数据泄露，黑客索要87万！](https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504277&idx=5&sn=a7b1f4c363f3abe16bc02020c240584d)
  - [ ] [论坛报名 | 第26届中国国际高交会网络安全前沿技术产业发展论坛](https://mp.weixin.qq.com/s?__biz=MzU0Mzk0NDQyOA==&mid=2247520430&idx=1&sn=9e4734794b6657679ec1f3d0c49b0ed0)
  - [ ] [勒索软件防御权威指南](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486069&idx=1&sn=9881eb3697f4f186ba329cd9a842eefe)
  - [ ] [对话数字未来 | 亚信安全亮相2024大湾区网络安全大会](https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650619643&idx=1&sn=b1a1cd7512892e350e2540a40f0c4c80)
  - [ ] [加拿大命令TikTok关闭在加业务](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247514197&idx=1&sn=c2cc95e6b6f8081577015c534f2538c8)
  - [ ] [特朗普当选会对美国AI监管带来什么影响？](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247514197&idx=2&sn=bf157fbbd5c5e754f024f40883ea4f93)
  - [ ] [安芯神甲®️获网络安全关键设备和网络安全专用产品安全认证](https://mp.weixin.qq.com/s?__biz=MzU1Njk1NTYzOA==&mid=2247491378&idx=1&sn=9424b0e6d74fb50f8c249ecc126e9ee4)
  - [ ] [数据安全合规神器 | 高效、安全、低成本的金融数据安全治理实践](https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247525439&idx=1&sn=aa54bde1704ae646468b8ef3c4e281ab)
  - [ ] [黑客可以随意访问EA公司7亿用户账号](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651306371&idx=1&sn=f6092c9d7074ad7defab93cdf4c4960d)
- Trustwave Blog
  - [ ] [Analyzing Play and LockBit: The Top Ransomware Threats Facing Retailers](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/analyzing-play-and-lockbit-the-top-ransomware-threats-facing-retailers/)
- 安全客-有思想的安全新媒体
  - [ ] [正式发布！360深度参编终端安全国家标准](https://www.anquanke.com/post/id/301642)
  - [ ] [AI 如何改变网络风险量化](https://www.anquanke.com/post/id/301639)
  - [ ] [美国足协披露数据安全事件](https://www.anquanke.com/post/id/301636)
  - [ ] [Schneider Electric 在报告黑客索赔后调查安全“事件”](https://www.anquanke.com/post/id/301633)
  - [ ] [Coinbase、比特币矿业股在特朗普获胜后飙升](https://www.anquanke.com/post/id/301627)
  - [ ] [CVE-2024-20418 (CVSS 10)： 思科 URWB 接入点存在远程接管漏洞](https://www.anquanke.com/post/id/301624)
  - [ ] [VEILDrive 攻击利用微软服务逃避检测并传播恶意软件](https://www.anquanke.com/post/id/301621)
  - [ ] [IntelBroker 声称在 BreachForums 上出售诺基亚的源代码](https://www.anquanke.com/post/id/301618)
  - [ ] [Memorial Hospital and Manor 遭受勒索软件攻击](https://www.anquanke.com/post/id/301615)
  - [ ] [Gartner发现人工智能辅助攻击是连续第三季度的头号网络威胁](https://www.anquanke.com/post/id/301612)
- Private Feed for M09Ic
  - [ ] [lz520520 starred mstorsjo/llvm-mingw](https://github.com/mstorsjo/llvm-mingw)
  - [ ] [lz520520 starred 61bcdefg/Hikari-LLVM15-Core](https://github.com/61bcdefg/Hikari-LLVM15-Core)
  - [ ] [4ra1n released 4.0 at jar-analyzer/jar-analyzer](https://github.com/jar-analyzer/jar-analyzer/releases/tag/4.0)
  - [ ] [wh0amitz starred simondotsh/DirSync](https://github.com/simondotsh/DirSync)
  - [ ] [killeven starred RalfHacker/CVE-2024-26229-exploit](https://github.com/RalfHacker/CVE-2024-26229-exploit)
  - [ ] [DVKunion started following lifupan](https://github.com/lifupan)
  - [ ] [HuYlllc pushed to dev in chainreactors/malice-network](https://github.com/chainreactors/malice-network/compare/52715fdae4...9d8c89cb77)
  - [ ] [lz520520 starred KomiMoe/Arkari](https://github.com/KomiMoe/Arkari)
  - [ ] [phith0n started following Ar3h](https://github.com/Ar3h)
  - [ ] [huoji120 starred airbus-cert/Winshark](https://github.com/airbus-cert/Winshark)
  - [ ] [lz520520 starred 0xlane/ollvm-rust](https://github.com/0xlane/ollvm-rust)
  - [ ] [phith0n starred Ar3h/web-chains](https://github.com/Ar3h/web-chains)
  - [ ] [zer0yu starred chroma-core/chroma](https://github.com/chroma-core/chroma)
  - [ ] [zer0yu starred howmp/reality](https://github.com/howmp/reality)
  - [ ] [DVKunion starred kpcyrd/rshijack](https://github.com/kpcyrd/rshijack)
  - [ ] [zer0yu started following Chanzi-keji](https://github.com/Chanzi-keji)
  - [ ] [zer0yu started following yux1azhengye](https://github.com/yux1azhengye)
  - [ ] [zer0yu starred huiyadanli/RevokeMsgPatcher](https://github.com/huiyadanli/RevokeMsgPatcher)
  - [ ] [gh0stkey starred P4nda0s/LazyIDA](https://github.com/P4nda0s/LazyIDA)
  - [ ] [4ra1n created a repository Java-Chains/java-chains.github.io](https://github.com/Java-Chains/java-chains.github.io//)
  - [ ] [gh0stkey starred eeeeeeeeee-code/e0e1-wx](https://github.com/eeeeeeeeee-code/e0e1-wx)
  - [ ] [gh0stkey starred nu0y4/KillWxapkg](https://github.com/nu0y4/KillWxapkg)
  - [ ] [boy-hack starred zmh-program/chatnio](https://github.com/zmh-program/chatnio)
  - [ ] [DVKunion starred wg/wrk](https://github.com/wg/wrk)
- Jiajun的技术笔记
  - [ ] [自动升级Docker容器](https://jiajunhuang.com/articles/2024_11_07-auto_upgrade_docker.md.html)
- Sucuri Blog
  - [ ] [2024 Credit Card Theft Season Arrives](https://blog.sucuri.net/2024/11/2024-credit-card-theft-season-arrives.html)
- 奇安信攻防社区
  - [ ] [某订货系统文件上传漏洞分析](https://forum.butian.net/share/3835)
- Tenable Blog
  - [ ] [Context Is King: From Vulnerability Management to Exposure Management](https://www.tenable.com/blog/context-is-king-from-vulnerability-management-to-exposure-management)
- 一个被知识诅咒的人
  - [ ] [【Python】深入理解Python装饰器链：创建组合装饰器的原理与应用](https://blog.csdn.net/nokiaguy/article/details/143449570)
  - [ ] [【人工智能】图神经网络（GNN）的原理与实现：Python与PyTorch Geometric在社交网络与化学分子建模中的应用](https://blog.csdn.net/nokiaguy/article/details/143449503)
  - [ ] [《Python OpenCV从菜鸟到高手》——零基础进阶，开启图像处理与计算机视觉的大门！](https://blog.csdn.net/nokiaguy/article/details/143574491)
- Files ≈ Packet Storm
  - [ ] [Red Hat Security Advisory 2024-8690-03](https://packetstormsecurity.com/files/182541/RHSA-2024-8690-03.txt)
  - [ ] [WordPress Meetup 0.1 Authentication Bypass](https://packetstormsecurity.com/files/182540/wpmeetup01-bypass.txt)
  - [ ] [CyberPanel upgrademysqlstatus Arbitrary Command Execution](https://packetstormsecurity.com/files/182539/cyberpanel-exec.txt)
  - [ ] [Ubuntu Security Notice USN-7088-4](https://packetstormsecurity.com/files/182538/USN-7088-4.txt)
  - [ ] [Ubuntu Security Notice USN-7095-1](https://packetstormsecurity.com/files/182537/USN-7095-1.txt)
  - [ ] [Ubuntu Security Notice USN-7089-3](https://packetstormsecurity.com/files/182536/USN-7089-3.txt)
  - [ ] [TestRail CLI FieldsParser eval Injection](https://packetstormsecurity.com/files/182535/testrailcli-inject.txt)
  - [ ] [Red Hat Security Advisory 2024-8977-03](https://packetstormsecurity.com/files/182534/RHSA-2024-8977-03.txt)
  - [ ] [Red Hat Security Advisory 2024-8694-03](https://packetstormsecurity.com/files/182533/RHSA-2024-8694-03.txt)
- Recent Commits to cve:main
  - [ ] [Update Thu Nov  7 22:26:47 UTC 2024](https://github.com/trickest/cve/commit/49321d7cc223cea22a4d17c92942d775dd93dd95)
  - [ ] [Update Thu Nov  7 14:29:30 UTC 2024](https://github.com/trickest/cve/commit/2115b2e23ff8c8230d825959a8edf84d143050de)
  - [ ] [Update Thu Nov  7 06:27:42 UTC 2024](https://github.com/trickest/cve/commit/fa25d2dc7e53bf3394932172fd25574a81ebb748)
- Perception Point
  - [ ] [Evasive ZIP Concatenation: Trojan Targets Windows Users](https://perception-point.io/blog/evasive-concatenated-zip-trojan-targets-windows-users/)
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  - [ ] [经纬信安与中国信通院联合起草通信行业标准实施，彰显企业实力与责任](https://www.4hou.com/posts/nlNY)
  - [ ] [11月11日起！13项网络安全国家标准开始实施](https://www.4hou.com/posts/kgOr)
  - [ ] [亚马逊查获使用恶意远程桌面操作以窃取数据的域名](https://www.4hou.com/posts/KGAz)
  - [ ] [元支点与伟仕佳杰在京达成战略合作签约](https://www.4hou.com/posts/l0M7)
- Payatu
  - [ ] [Editing and Patching React Native Applications](https://payatu.com/blog/editing-and-patching-react-native-applications/)
- Hexacorn
  - [ ] [Beating the dead horse, only to inject it some more…](https://www.hexacorn.com/blog/2024/11/07/beating-the-dead-horse-only-to-inject-it-some-more/)
- Inside Stormshield
  - [ ] [Stormshield se met aux couleurs d’Halloween](https://stories.stormshield.com/stormshield-se-met-aux-couleurs-dhalloween/)
- VMRay
  - [ ] [Detection Highlights – October 2024: Detecting self-deleting malware using ADS, event log evasion, and upgraded YARA rules](https://www.vmray.com/detection-highlights-october-2024-detecting-self-deleting-malware-using-ads-event-log-evasion-and-upgraded-yara-rules/)
- Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
  - [ ] [Yavor Kolev, Bulgaria, The City of Troyan and The Dipshits That Ruled Everyone and Everything - A True First-Account Personal of Their True Story](https://ddanchev.blogspot.com/2024/11/yavor-kolev-bulgaria-city-of-troyan-and.html)
  - [ ] [Представям Ви Двете "Пачаври" Който Ми Оkраха "Къщата"](https://ddanchev.blogspot.com/2024/06/k.html)
  - [ ] [Специални Поздрави За Всички Който "Го Правят" В България](https://ddanchev.blogspot.com/2024/06/blog-post.html)
- Malwarebytes
  - [ ] [Air fryers are the latest surveillance threat you didn&#8217;t consider](https://www.malwarebytes.com/blog/news/2024/11/air-fryers-are-the-latest-surveillance-threat-you-didnt-consider)
  - [ ] [Malwarebytes acquires AzireVPN to fuel additional VPN features and functionalities](https://www.malwarebytes.com/blog/personal/2024/11/malwarebytes-acquires-azirevpn-to-fuel-additional-vpn-features-and-functionalities)
  - [ ] [Large eBay malvertising campaign leads to scams](https://www.malwarebytes.com/blog/scams/2024/11/large-ebay-malvertising-campaign-leads-to-scams)
- blog.avast.com EN
  - [ ] [Smishing: The elephant in the room](https://blog.avast.com/smishing-elephant-in-the-room)
- Reverse Engineering
  - [ ] [Under the microscope: Ecco the Dolphin — Defender of the Future](https://www.reddit.com/r/ReverseEngineering/comments/1glxw4z/under_the_microscope_ecco_the_dolphin_defender_of/)
  - [ ] [Win32.Trojan.Japaneno - A full Malware Analysis.](https://www.reddit.com/r/ReverseEngineering/comments/1gm2ezs/win32trojanjapaneno_a_full_malware_analysis/)
  - [ ] [Open Source Modular LLM Reverse Engineering, Red Teaming, and Vulnerability Research Framework.](https://www.reddit.com/r/ReverseEngineering/comments/1gljo9d/open_source_modular_llm_reverse_engineering_red/)
  - [ ] [GitHub - Moonkicker64/RVHook: RISC-V inline hook library for Linux](https://www.reddit.com/r/ReverseEngineering/comments/1glo1se/github_moonkicker64rvhook_riscv_inline_hook/)
- daniel.haxx.se
  - [ ] [Rock-solid curl](https://daniel.haxx.se/blog/2024/11/07/rock-solid-curl/)
- Wallarm
  - [ ] [AI-Powered APIs: Expanding Capabilities and Attack Surfaces](https://lab.wallarm.com/ai-powered-apis-expanding-capabilities-attack-surfaces/)
- 安全牛
  - [ ] [明朝万达安鹏：能和业务紧密结合的才是好的敏感数据安全管理平台](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133254&idx=1&sn=2cfc356184bdea5002cb5a67af199fba&chksm=bd15a5958a622c83d8ab42a9b1da76273d7585b1a675b92227d487293b69537bb98304073897&scene=58&subscene=0#rd)
  - [ ] [高通芯片组曝严重安全缺陷，或影响数百万Android设备；警惕"ClickFix"新型钓鱼手法，利用虚假消息实施跨平台攻击|牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133254&idx=2&sn=ef0185217233d40db9c8bab2626ae962&chksm=bd15a5958a622c83e3676669fee1d05057d9cf39bd3a9a7daff5f5fff9f53767a066f9c58027&scene=58&subscene=0#rd)
- 奇客Solidot–传递最新科技情报
  - [ ] [Linux Man pages 维护者获得赞助恢复工作](https://www.solidot.org/story?sid=79710)
  - [ ] [法官裁决 Google 没有义务向礼品卡诈骗受害者退款](https://www.solidot.org/story?sid=79709)
  - [ ] [2024 年将是平均气温比工业化前水平高出 1.5 摄氏度的第一年](https://www.solidot.org/story?sid=79708)
  - [ ] [Windows 记事本引入生成式 AI 功能](https://www.solidot.org/story?sid=79707)
  - [ ] [失聪的雄蚊失去了交配的兴趣](https://www.solidot.org/story?sid=79706)
  - [ ] [GIMP 项目计划在 GIMP 3.0 正式发布一年内推出 3.2](https://www.solidot.org/story?sid=79704)
  - [ ] [澳大利亚提议禁止 16 岁以下儿童使用社交媒体](https://www.solidot.org/story?sid=79703)
  - [ ] [OpenAI 收购了域名 Chat.com](https://www.solidot.org/story?sid=79702)
  - [ ] [加拿大禁止 TikTok 在其境内运营](https://www.solidot.org/story?sid=79701)
  - [ ] [英特尔因 13-14 代酷睿 CPU 电压不稳问题被起诉](https://www.solidot.org/story?sid=79700)
- FreeBuf网络安全行业门户
  - [ ] [FreeBuf早报 | 加拿大命令TikTok关闭业务；乌克兰手机用户遭遇GPS欺骗](https://www.freebuf.com/articles/414734.html)
  - [ ] [黑客可以随意访问EA公司7亿用户账号](https://www.freebuf.com/news/414675.html)
  - [ ] [谷歌云将在2025年底强制实施多因素身份验证](https://www.freebuf.com/news/414654.html)
- 黑海洋 - WIKI
  - [ ] [Cloudflare Worker利用反向代理来加速web站点](https://www.upx8.com/4393)
  - [ ] [全自动 Cloudflare IP 优选工具](https://www.upx8.com/4392)
  - [ ] [免费eSIM号码全球流量卡 无实名0月租 注册送4.98+美元：Roamless](https://www.upx8.com/4391)
- 腾讯玄武实验室
  - [ ] [每日安全动态推送(24/11/7)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651959886&idx=1&sn=08895258f691895722e76249b3bf13ed&chksm=8baed2d1bcd95bc789e49998fa67a43e4f9b26f9af7d062b55d5032ad1cf32dac78c0a8ee08f&scene=58&subscene=0#rd)
- 信息时代的犯罪侦查
  - [ ] [《虚拟币硬件钱包使用攻略及实战指南》，信息获取、资产固定...一册搞定！（限量200份）](https://mp.weixin.qq.com/s?__biz=MzAxNTA4NDAwOQ==&mid=2650737013&idx=1&sn=ffe60929e2b3d551ac9845adcc582f23&chksm=8382d9f3b4f550e5a12eb835fe1538b3b210266ca41c188e03511c097306a23a6b3a47385b15&scene=58&subscene=0#rd)
- 看雪学苑
  - [ ] [野蛮fuzz：深入了解代码覆盖率](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458580640&idx=1&sn=1eba6d8ad523182558303607a323a166&chksm=b18dc62a86fa4f3ceed7d13264bd41b363c4a6f881a0123640c92cf720e97a3087fb1509d97b&scene=58&subscene=0#rd)
  - [ ] [黑客可随意访问EA公司7亿用户账号](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458580640&idx=2&sn=5ca2397613f547a58c295211a4c8613f&chksm=b18dc62a86fa4f3c5243f687e03fd6a3714ca105d96b75eddbb8b337c8b21b6f5a0c1a096c51&scene=58&subscene=0#rd)
  - [ ] [预付全款！看雪课程讲师招募中](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458580640&idx=3&sn=c41a9edc9b184555a8ed30cb54a74fe5&chksm=b18dc62a86fa4f3c53351c12860de5ff25c3cbf8e0b46d894791759c098a2d6f6cb9ae41d829&scene=58&subscene=0#rd)
- 丁爸 情报分析师的工具箱
  - [ ] [【福利】虚拟币硬件钱包使用攻略及实战指南免费送（限量200份）](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651147653&idx=1&sn=8a2882fe8bdc8307765a906eb94e25c1&chksm=f1af3abfc6d8b3a931e2d9072833abac493357cc15529e403597bb644c2e508ba1b3632d67ea&scene=58&subscene=0#rd)
  - [ ] [【转载】特朗普的报复名单](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651147653&idx=2&sn=12d26eea03c10f83b6f0f2818b380e69&chksm=f1af3abfc6d8b3a921e6ba52f6a9cf7ebae19cffba5520f19f0fcd4fc8073fa2288ab12ab1b5&scene=58&subscene=0#rd)
- 威努特安全网络
  - [ ] [安全隐患层出不穷，移动存储介质防护该从何入手？](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651128399&idx=1&sn=46cf86ff17734b54110d972c4dd2f091&chksm=80e718ffb79091e9edf458636b1eaa30564f9f131ad2f8260434edaeede99f895e649dde36ae&scene=58&subscene=0#rd)
- Black Hills Information Security
  - [ ] [What Is Penetration Testing?](https://www.blackhillsinfosec.com/what-is-penetration-testing/)
- 代码卫士
  - [ ] [思科满分漏洞可使黑客以root身份运行任意命令](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521416&idx=1&sn=dd174cdf4dec9fc76bae7be5c63bbd68&chksm=ea94a5e2dde32cf4e638ee3f72a13942731f386460354ea9e67337c58ebd9209a77a4d9c6b27&scene=58&subscene=0#rd)
  - [ ] [或因第三方数据遭泄露，诺基亚源代码被盗](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521416&idx=2&sn=af708336e0629a268e35f7a6fb2a263b&chksm=ea94a5e2dde32cf42b8c6a54fd4ed91ef2b6774cb8ed0fcd2bf03dc9e905b49db2852250582f&scene=58&subscene=0#rd)
- 吾爱破解论坛
  - [ ] [双十一开放注册微信抽奖活动，再送40个账号注册码或300论坛币，周日下午两点开奖，详见：【开放注册公告】吾爱破解论坛2024年11月11日光棍节开放注册公告。

PS：上次参加完活动的同学这次参加需要重新分享上传。](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141423&idx=1&sn=dcba76c0d2b2d4070de74c1b2a7d0741&chksm=bd50a57b8a272c6d895c4c809c83c1f2e52ddadaf153272278f271e41f8d6fc5066d0a57985f&scene=58&subscene=0#rd)
- DataCon大数据安全分析竞赛
  - [ ] [五大赛道全新升级！DataCon2024大数据安全分析竞赛报名火热进行中](https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247488531&idx=1&sn=7b836713e1cea6d83c1ed28d6f07c7a4&chksm=fe5d0c93c92a85858b9a58a6e39a8a5eaca108340c996a3c7c62e72566f6506a8ce76bb974a1&scene=58&subscene=0#rd)
- 安全圈
  - [ ] [【安全圈】Windows 10 将于明年 10 月停止支持 对你我有何影响](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065766&idx=1&sn=20737c81521c2b60c2ae6e68bd85cf08&chksm=f36e63a6c419eab0559b56523c0815b5e760666eb51eaa8a0579237fda5bd619c529c56f24fe&scene=58&subscene=0#rd)
  - [ ] [【安全圈】谷歌云将在2025年底强制实施多因素身份验证](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065766&idx=2&sn=60b2502195278b934474b1c4a7fc49bd&chksm=f36e63a6c419eab08fb88d51ccdbf0cb4bfe5081e8ccfe502ee69577918cb1ada38f8721c993&scene=58&subscene=0#rd)
  - [ ] [【安全圈】黑客可以随意访问EA公司7亿用户账号](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065766&idx=3&sn=bcdf6497f31db93acd068fb24f76e293&chksm=f36e63a6c419eab04b707515e3ec637038e1f931dd74f1640728e7904bece00c01cfe82fde69&scene=58&subscene=0#rd)
  - [ ] [【安全圈】Schneider Electric 在报告黑客索赔后调查安全“事件”](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065766&idx=4&sn=792c2e0aa0defbba125b9aeffcfd1210&chksm=f36e63a6c419eab0a561defb5b66ec4b27a9cf4821a910f2d64455a2cb15fdd063a65f35cf94&scene=58&subscene=0#rd)
- 安全内参
  - [ ] [美国知名军工芯片厂商因勒索攻击损失超1.5亿元](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513013&idx=1&sn=17982ba54e626b3eeef51e2b3851489d&chksm=ebfaf495dc8d7d8371770d3305021ed6c8d777bb1e03cbc6af5e02e57fc82d7980b196b28845&scene=58&subscene=0#rd)
  - [ ] [德国立法保护白帽黑客行为，此前欧美已有多国修法实施](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513013&idx=2&sn=450c1f72db1c251886cc4595bbeecf3b&chksm=ebfaf495dc8d7d8363911bf1ae82b7c78615053e5f3660004b0d4ad709480b1bfd308bce2fe7&scene=58&subscene=0#rd)
- 安全研究GoSSIP
  - [ ] [G.O.S.S.I.P 阅读推荐 2024-11-07 区域化的艺术](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499120&idx=1&sn=ab2c4c9491fcf2ebc01864b25d89167d&chksm=c063d3a9f7145abf5581b31a4542980a9189f11e853accfb2c8a8541dc0ee69320fbfe074254&scene=58&subscene=0#rd)
- 中国信息安全
  - [ ] [论坛·原创 | 《联合国打击网络犯罪公约》“刑事定罪”部分的缺憾与展望](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229123&idx=1&sn=3332241fc9e09ce3a958541e226ffea2&chksm=8b59ebfabc2e62ec5cb85beee6a3f74217bd23e7d7062998410f3956aa170d7c06724234020a&scene=58&subscene=0#rd)
  - [ ] [专家解读 | 推动数据产业健康发展](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229123&idx=2&sn=7b0278f227e4491e387543ff65d10eb3&chksm=8b59ebfabc2e62ec786569311960d6a4cdde7a75f7341239e024d307d45853dd14cab7d9a6cd&scene=58&subscene=0#rd)
  - [ ] [关注 | 中美两国执法部门联合处置一起跨国电信网络诈骗案件](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229123&idx=3&sn=d399eaa3d5f9915262e6f326064d2802&chksm=8b59ebfabc2e62ec92a6927e5fa1629ad71aef50a06b69a80ad238a352a7b50d8c7a60e3c8af&scene=58&subscene=0#rd)
  - [ ] [发布 | 中国信通院发布《新通话安全技术研究报告（2024年）》（附下载）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229123&idx=4&sn=fad680d9f896cd1ddea7c873a20a5780&chksm=8b59ebfabc2e62ecba537a21ed64eda2fe553a1fdbb1d20fa4159b23500001f15c3fc5ea5bdc&scene=58&subscene=0#rd)
  - [ ] [中消协：不明链接跳转何时休](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229123&idx=5&sn=463fbe474396541039febf3d72d79c1a&chksm=8b59ebfabc2e62ec0541c54a6e279c16424e5c9f34f5209d2ba5fcd26c97f90893543b4ad4ea&scene=58&subscene=0#rd)
  - [ ] [评论 | 立法为人工智能行业发展系上“保险绳”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229123&idx=6&sn=56fd5df1a2b40e9ceb9afa4aabfd858a&chksm=8b59ebfabc2e62ec465a995826761d99e07b7b1e915fa915dbe456d26119c5bed9edbcde23cd&scene=58&subscene=0#rd)
  - [ ] [评论 | 营造安全有序的网络消费环境](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229123&idx=7&sn=7f9995cd25ae1b1c3bf5e9ab0b8290db&chksm=8b59ebfabc2e62ec314149f5d877790474c16f4fcc6cb71a58e67de939f8d0c0fd1125bdac23&scene=58&subscene=0#rd)
- 安全学术圈
  - [ ] [北京航天航空大学| TIMiner：从社交数据中自动提取和分析分类的网络威胁情报](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491363&idx=1&sn=016f19fb9aff072510b7bcdf6c025c98&chksm=fe2ee0a8c95969be6be0ff7bc1b9f59b3905f5c81f7bb32566bdb369d8757655eb7fb2eff06f&scene=58&subscene=0#rd)
- dotNet安全矩阵
  - [ ] [双十一狂欢，.NET安全矩阵星球优惠来袭！](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496522&idx=1&sn=34d37f71a9aa50679be9f86ccfe02d9a&chksm=fa595da7cd2ed4b15beed5d8b27f119d2f107cbaaae93e7ccc26cca4c8aa0602b960d8ff3406&scene=58&subscene=0#rd)
  - [ ] [.NET 一款替代cmd.exe的交互式命令渗透工具](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496522&idx=2&sn=d1996219da8131e0f09c42ac96a9980c&chksm=fa595da7cd2ed4b19cc8523110097c67c53db4555d863872fe77b87b1165bb7b72e0731ba261&scene=58&subscene=0#rd)
  - [ ] [.NET 10月红队武器库18款工具汇总](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496522&idx=3&sn=ae3376e3684aee24c2adffeb28dd7288&chksm=fa595da7cd2ed4b155552207e1161b97f44f693b8a6ef8d2047c81742ee105869d2c5244e28a&scene=58&subscene=0#rd)
- 微步在线
  - [ ] [是时候给杀毒和EDR“松绑”了](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182521&idx=1&sn=9b0730f7f820bf4782910456741fa7c8&chksm=f44868c5c33fe1d3a20e7754031a9985a96241de3910ef4ebf38d12aabf7a365edf83e1336cb&scene=58&subscene=0#rd)
- 数世咨询
  - [ ] [直播预约 | 全民反诈在行动：金融机构如何应对电信网络诈骗？](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247522284&idx=1&sn=155f6d5713859f8b3ea2fc6083cfaeb1&chksm=c144e551f6336c479d56c0a16dea79025975ff22eef44ff6b999add7e76d5494600216e58b23&scene=58&subscene=0#rd)
  - [ ] [业界动态 | 元支点与伟仕佳杰达成战略合作](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247522284&idx=2&sn=841a1aa5117bc29f9892fc8f2ddc1a6c&chksm=c144e551f6336c47f036de461243fe7f1067a993c01267fc73d139444c33b3f7158b72d43fad&scene=58&subscene=0#rd)
- 青藤云安全
  - [ ] [青藤深度参编的终端安全国家标准正式发布](https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650849636&idx=1&sn=0d5b9c5e188a46182ab6fb9f20708a8f&chksm=80dba2c1b7ac2bd71d63e19fc7fac1aaa584ec043b6eac1a048dbb2f7cdbabbab432e2465921&scene=58&subscene=0#rd)
- ChaMd5安全团队
  - [ ] [2024第四届“网鼎杯”玄武组 writeup](https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247511462&idx=1&sn=fbec02845f714c4abb26286e28205046&chksm=e89d857edfea0c6805b9e1172551d6c7f80a8251aab14bc8ff3298b829000c15d4f619b4ba97&scene=58&subscene=0#rd)
- 复旦白泽战队
  - [ ] [立冬已至，天冷记得加衣哦](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247491558&idx=1&sn=fa48461104e74025933e3a62d00d4757&chksm=fdeb9b98ca9c128e2f9a6be9c1e1c5ac6a7dfb7a0fdba9b367d9de1bd364c1658abafa337e1c&scene=58&subscene=0#rd)
- 嘶吼专业版
  - [ ] [亚马逊查获使用恶意远程桌面操作以窃取数据的域名](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579442&idx=1&sn=9691f3b6e34457b97376c459eecf0717&chksm=e9146708de63ee1edb018a8b3c5cad4590cff5e439a713880fd5c7017da2b9a182d95198a0e8&scene=58&subscene=0#rd)
  - [ ] [11月11日起！13项网络安全国家标准开始实施](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579442&idx=2&sn=eaee4397f0d6c25e48bd7413c68b0e54&chksm=e9146708de63ee1e3d7043fedc8bf5d981bb8e0cd0215a5c7cfda275f0d7899a6b3f2f99f84d&scene=58&subscene=0#rd)
- 火绒安全
  - [ ] [文末有礼 丨 跨版本更新！火绒安全5.0正式支持升级6.0版本](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247520398&idx=1&sn=206c8ff271d10bd3a7a1190da9e28948&chksm=eb704eb1dc07c7a7ec96d53fc48e461501183c32813a0907ae7821ebf19d7a36d8e260cb1bab&scene=58&subscene=0#rd)
- 深信服千里目安全技术中心
  - [ ] [【漏洞通告】Google Chrome Serial释放重引用漏洞(CVE-2024-10827)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523827&idx=1&sn=a926b2cc9de4cc0c3453404c3f6a5324&chksm=ce4616e3f9319ff5ff6983e8a22f17859ff07cad09a170c5648c9d7b0fce795ac301966aa60e&scene=58&subscene=0#rd)
- 极客公园
  - [ ] [特斯拉不再做的「科技日」，被小鹏玩明白了](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653062506&idx=1&sn=1d686d2f4d054c51545f7ab6bb520549&chksm=7e57f8dc492071caab18d1d8996b724dc0d1f181510b646c1deda1ed6cc68a8b20e06463e718&scene=58&subscene=0#rd)
  - [ ] [美国大选后特斯拉股价大涨 15%；中国微短剧市场规模超 500 亿元；小鹏汇天飞行汽车 12 月正式启动预售 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653062493&idx=1&sn=4c3721a78c0008f45ec4717146d309e9&chksm=7e57f8eb492071fd154a25e14414bb61f6942e5eb0e573b414ba7f570f1ce13823f4ffd3747b&scene=58&subscene=0#rd)
- 情报分析师
  - [ ] [懂王上台后可能要报复的重点人员名单明细（附下载）](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650557190&idx=1&sn=0f35170a225a8a1716b5438121752b4e&chksm=8711654db066ec5bbce4b27ecb9083982ed3aa67ec631621bd8e1f85e02164b6c8928f0a118a&scene=58&subscene=0#rd)
  - [ ] [《虚拟币硬件钱包使用攻略及实战指南》，信息获取、资产固定...一册搞定！（限量200份）](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650557190&idx=2&sn=82d924ddf6789e2b2c232475c9d4b8b3&chksm=8711654db066ec5b13622483948f278c9e4ab6e132930e4b46d3711e7d4491d56642997286b0&scene=58&subscene=0#rd)
- 360数字安全
  - [ ] [360教育行业屡获大单，力抗国家级黑客与勒索双重威胁！](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247576350&idx=1&sn=5c853fbcab682df98446f1a701599886&chksm=9f8d3b16a8fab20095d81df48e8486a972cbc1a839f892a5dfd3ac68ab2732b3af0043debec3&scene=58&subscene=0#rd)
- 威胁猎人Threat Hunter
  - [ ] [黑产交易风险监测模块：从复杂无序的黑产交易市场中快速定位业务风险](https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247498232&idx=1&sn=c8730bb42a2c4f02462eb4e6a19e8271&chksm=eb12dfc3dc6556d5d18702da1a6e2a744051b275e65465b24d892c5fd27e46deb45efb766a24&scene=58&subscene=0#rd)
- 字节跳动技术团队
  - [ ] [豆包招聘速递｜豆包大模型 LLM 团队热招中](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247511228&idx=1&sn=35bcfc112f88703fae721a8a8774cac0&chksm=e9d3675edea4ee486bca65f6d9cce1a275c4abf4c75afe43913d02e5479618048e6186774799&scene=58&subscene=0#rd)
- 山石网科安全技术研究院
  - [ ] [山石网科荣获车联网科技创新数据与网络安全卓越奖](https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247508692&idx=1&sn=991ede08f2baee280fa27e82702090ef&chksm=fa52776acd25fe7c0fa93d01a183d9d5f8516c3673548b741b71ae663ed60b2af3532c97fec0&scene=58&subscene=0#rd)
- LuxSci
  - [ ] [Leveraging PHI Data: Advanced Strategies for Personalized Engagement](https://luxsci.com/blog/leveraging-phi-data-advanced-strategies-for-personalized-engagement.html)
- 迪哥讲事
  - [ ] [推荐几个安全圈必备武器库](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496291&idx=1&sn=c3a139db4a75444db688ce1615ea42e1&chksm=e8a5f800dfd271167c0e4ef1e8451f3190069c869366a4a0c751426155b559d5c8d9fb417a41&scene=58&subscene=0#rd)
- 安全419
  - [ ] [案例征集 | 金融行业高风险严监管 企业需要怎样的安全保障？](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247544756&idx=1&sn=fe789ec05b0bb702c30fcd1eec4c3167&chksm=f9ebf119ce9c780f0392e838b99df7215e940c54d95af488eb6facd9cd579ac79a178c3aec17&scene=58&subscene=0#rd)
  - [ ] [标准解读 | 绿盟科技参与制定的两项软件供应链安全国家标准正式实施](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247544756&idx=2&sn=501cd4b3bbb391e4f0915beeb8399c17&chksm=f9ebf119ce9c780fd6c2fc08039ff48c6cd96497583b3e89594a2650d1625a9160750c27ce44&scene=58&subscene=0#rd)
  - [ ] [定档11月16日 OWASP北京安全技术论坛即将召开](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247544756&idx=3&sn=8eba303aef963a8f50e2d7e2771254b4&chksm=f9ebf119ce9c780f7dc71ed7c4ac4e7de257f616a77b96035f010df4249c5a8cde1404f0e944&scene=58&subscene=0#rd)
- 白泽安全实验室
  - [ ] [黑客攻击利用Microsoft服务逃避检测并分发恶意软件](https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492397&idx=1&sn=f400943848445bec8918963d7406cc5a&chksm=e90dc907de7a40119c3af319323eb613d24b94e267a657b2fbae6156887fa45507759172dc52&scene=58&subscene=0#rd)
- Qualys Security Blog
  - [ ] [Elevate Your Container Security with QScanner in 2025](https://blog.qualys.com/category/product-tech)
- Have I Been Pwned latest breaches
  - [ ] [Earth 2 - 420,961 breached accounts](https://haveibeenpwned.com/PwnedWebsites#Earth2)
- IT Service Management News
  - [ ] [Dossieraggi](http://blog.cesaregallotti.it/2024/11/dossieraggi.html)
- Securityinfo.it
  - [ ] [Phishing, breach e trojan bancari: Acronis condivide il rapporto sulle minacce più recenti](https://www.securityinfo.it/2024/11/07/phishing-breach-e-trojan-bancari-acronis-condivide-il-rapporto-sulle-minacce-piu-recenti/?utm_source=rss&utm_medium=rss&utm_campaign=phishing-breach-e-trojan-bancari-acronis-condivide-il-rapporto-sulle-minacce-piu-recenti)
- SANS Internet Storm Center, InfoCON: green
  - [ ] [Steam Account Checker Poisoned with Infostealer, (Thu, Nov 7th)](https://isc.sans.edu/diary/rss/31420)
  - [ ] [ISC Stormcast For Thursday, November 7th, 2024 https://isc.sans.edu/podcastdetail/9212, (Thu, Nov 7th)](https://isc.sans.edu/diary/rss/31418)
- Schneier on Security
  - [ ] [Prompt Injection Defenses Against LLM Cyberattacks](https://www.schneier.com/blog/archives/2024/11/prompt-injection-defenses-against-llm-cyberattacks.html)
  - [ ] [Subverting LLM Coders](https://www.schneier.com/blog/archives/2024/11/subverting-llm-coders.html)
- ICT Security Magazine
  - [ ] [Supply Chain Security: Il caso di Avio S.p.A.](https://www.ictsecuritymagazine.com/articoli/supply-chain-security-2/)
- The Hacker News
  - [ ] [North Korean Hackers Target Crypto Firms with Hidden Risk Malware on macOS](https://thehackernews.com/2024/11/north-korean-hackers-target-crypto.html)
  - [ ] [A Hacker's Guide to Password Cracking](https://thehackernews.com/2024/11/a-hackers-guide-to-password-cracking.html)
  - [ ] [5 Most Common Malware Techniques in 2024](https://thehackernews.com/2024/11/5-most-common-malware-techniques-in-2024.html)
  - [ ] [SteelFox and Rhadamanthys Malware Use Copyright Scams, Driver Exploits to Target Victims](https://thehackernews.com/2024/11/steelfox-and-rhadamanthys-malware-use.html)
  - [ ] [China-Aligned MirrorFace Hackers Target EU Diplomats with World Expo 2025 Bait](https://thehackernews.com/2024/11/china-aligned-mirrorface-hackers-target.html)
  - [ ] [Cisco Releases Patch for Critical URWB Vulnerability in Industrial Wireless Systems](https://thehackernews.com/2024/11/cisco-releases-patch-for-critical-urwb.html)
  - [ ] [Malicious PyPI Package ‘Fabrice’ Found Stealing AWS Keys from Thousands of Developers](https://thehackernews.com/2024/11/malicious-pypi-package-fabrice-found.html)
  - [ ] [Canada Orders TikTok to Shut Down Canadian Operations Over Security Concerns](https://thehackernews.com/2024/11/canada-orders-tiktok-to-shut-down.html)
- Over Security - Cybersecurity news aggregator
  - [ ] [North Korea allegedly targeting crypto businesses with Mac-focused malware](https://therecord.media/north-korea-bluenoroff-mac-malware-crypto-industry)
  - [ ] [North Korean hackers use new macOS malware against crypto firms](https://www.bleepingcomputer.com/news/security/north-korean-hackers-use-new-macos-malware-against-crypto-firms/)
  - [ ] [2024 Credit Card Theft Season Arrives](https://blog.sucuri.net/2024/11/2024-credit-card-theft-season-arrives.html)
  - [ ] [CISA warns of critical Palo Alto Networks bug exploited in attacks](https://www.bleepingcomputer.com/news/security/cisa-warns-of-critical-palo-alto-networks-bug-exploited-in-attacks/)
  - [ ] [Nokia says hackers leaked third-party app source code](https://www.bleepingcomputer.com/news/security/nokia-says-hackers-leaked-third-party-app-source-code/)
  - [ ] [Hacker says they banned ‘thousands’ of Call of Duty gamers by abusing anti-cheat flaw](https://techcrunch.com/2024/11/07/hacker-says-they-banned-thousands-of-call-of-duty-gamers-by-abusing-anti-cheat-flaw/)
  - [ ] [Ukrainian military’s anti-drone GPS spoofing spills into civilians’ phones](https://therecord.media/ukraine-anti-drone-gps-spoofing-affects-civilian-mobile-phones)
  - [ ] [Canada orders TikTok to shut down over national risk concerns](https://www.bleepingcomputer.com/news/security/canada-orders-tiktok-to-shut-down-over-national-risk-concerns/)
  - [ ] [Canada to force TikTok to dissolve its business in the country](https://therecord.media/canada-forces-tiktok-to-dissolve-business-operations)
  - [ ] [HPE warns of critical RCE flaws in Aruba Networking access points](https://www.bleepingcomputer.com/news/security/hpe-warns-of-critical-rce-flaws-in-aruba-networking-access-points/)
  - [ ] [China-linked hackers tasked with Japanese targets pursue them through Europe](https://therecord.media/china-linked-hackers-tasked-with-japanese-targets-pursue-through-europe)
  - [ ] [Critical Zero-Click Vulnerability in Synology NAS Devices Needs Urgent Patching](https://cyble.com/blog/critical-zero-click-vulnerability-in-synology-nas-devices-needs-urgent-patching/)
  - [ ] [AMEXTROLL Android Banking Trojan Spotted In The Wild - Cyble](https://cyble.com/blog/amextroll-android-banking-trojan-spotted-in-the-wild/)
  - [ ] [Critical Bug in Cisco’s URWB Exposes Systems to Root Privilege Command Injection](https://cyble.com/blog/critical-bug-in-ciscos-urwb-exposes-systems-to-root-privilege-command-injection/)
  - [ ] [Unwrapping the emerging Interlock ransomware attack](https://blog.talosintelligence.com/emerging-interlock-ransomware/)
  - [ ] [Fusion Fireside #5: The Art of Fusion with Jake Norwood](https://www.threatfabric.com/blogs/fusion-fireside-5-the-art-of-fusion-with-jake-norwood)
  - [ ] [AsyncRAT’s Infection Tactics via Open Directories: Technical Analysis](https://any.run/cybersecurity-blog/asyncrat-open-directories-infection-analysis/)
  - [ ] [Phishing, breach e trojan bancari: Acronis condivide il rapporto sulle minacce più recenti](https://www.securityinfo.it/2024/11/07/phishing-breach-e-trojan-bancari-acronis-condivide-il-rapporto-sulle-minacce-piu-recenti/)
  - [ ] [Earth 2 - 420,961 breached accounts](https://haveibeenpwned.com/PwnedWebsites#Earth2)
- Graham Cluley
  - [ ] [Smashing Security podcast #392: Pasta spies and private eyes, and are you applying for a ghost job?](https://grahamcluley.com/smashing-security-podcast-392/)
- Tor Project blog
  - [ ] [Get the latest from Tor, join us for State of the Onion 2024](https://blog.torproject.org/state-of-the-onion-2024/)
- TorrentFreak
  - [ ] [Cloudflare to EU: Anti-Piracy Measures Shouldn’t Harm Privacy and Security](https://torrentfreak.com/cloudflare-to-eu-anti-piracy-measures-shouldnt-harm-privacy-and-security-241107/)
- Deep Web
  - [ ] [How to access Hidden Answers?](https://www.reddit.com/r/deepweb/comments/1gltisn/how_to_access_hidden_answers/)
- Information Security
  - [ ] [The Phishing Simulation Illusion: Why Your Security Training Isn’t as Effective as You Think](https://www.reddit.com/r/Information_Security/comments/1glts7u/the_phishing_simulation_illusion_why_your/)
- netsecstudents: Subreddit for students studying Network Security and its related subjects
  - [ ] [Thinkbook or Hp spectre](https://www.reddit.com/r/netsecstudents/comments/1gm2p3k/thinkbook_or_hp_spectre/)
- Your Open Hacker Community
  - [ ] [Help with executing GC2-sheet](https://www.reddit.com/r/HowToHack/comments/1gldjya/help_with_executing_gc2sheet/)
  - [ ] [Help](https://www.reddit.com/r/HowToHack/comments/1glo7yj/help/)
  - [ ] [I need insight.](https://www.reddit.com/r/HowToHack/comments/1gle5pa/i_need_insight/)
- Computer Forensics
  - [ ] [Anyone else following the Delphi Murder trial and the forensics. Examiner not understanding the data](https://www.reddit.com/r/computerforensics/comments/1glv6s3/anyone_else_following_the_delphi_murder_trial_and/)
  - [ ] [What is the metal shield on the SoC called? Trying to find a tool to remove it.](https://www.reddit.com/r/computerforensics/comments/1gm1lui/what_is_the_metal_shield_on_the_soc_called_trying/)
  - [ ] [Win32.Trojan.Japaneno - A full Malware Analysis.](https://www.reddit.com/r/computerforensics/comments/1gm2f3h/win32trojanjapaneno_a_full_malware_analysis/)
  - [ ] [Help identifying what's up with the data on this disk](https://www.reddit.com/r/computerforensics/comments/1gm0meb/help_identifying_whats_up_with_the_data_on_this/)
  - [ ] [Practice Images to load directly into Autopsy?](https://www.reddit.com/r/computerforensics/comments/1gm2poy/practice_images_to_load_directly_into_autopsy/)
  - [ ] [Are your forensic tools showing you all the data in your investigations? Free webinar with a seasoned Digital Forensics Lab Director](https://www.reddit.com/r/computerforensics/comments/1gln075/are_your_forensic_tools_showing_you_all_the_data/)
  - [ ] [Cellebrite UFED Timeline Shows Messages Missing from 'Analyzed Data' – Seeking Insights on Inconsistencies](https://www.reddit.com/r/computerforensics/comments/1glks20/cellebrite_ufed_timeline_shows_messages_missing/)
- The Register - Security
  - [ ] [Don't open that 'copyright infringement' email attachment – it's an infostealer](https://go.theregister.com/feed/www.theregister.com/2024/11/07/fake_copyright_email_malware/)
  - [ ] [Cisco scores a perfect CVSS 10 with critical flaw in its wireless system](https://go.theregister.com/feed/www.theregister.com/2024/11/07/cisco_uiws_flaw/)
  - [ ] [Officials warn of Russia's tech-for-troops deal with North Korea amid Ukraine conflict](https://go.theregister.com/feed/www.theregister.com/2024/11/07/russia_tech_transfer_north_korea/)
- Full Disclosure
  - [ ] [Unsafe eval() in TestRail CLI](https://seclists.org/fulldisclosure/2024/Nov/2)
- Social Engineering
  - [ ] [It has begun](https://www.reddit.com/r/SocialEngineering/comments/1gm2waw/it_has_begun/)
- Deeplinks
  - [ ] [EFF to Court: Reject X’s Effort to Revive a Speech-Chilling Lawsuit Against a Nonprofit](https://www.eff.org/deeplinks/2024/11/eff-court-reject-xs-effort-revive-speech-chilling-lawsuit-against-nonprofit)
- Security Affairs
  - [ ] [U.S. CISA adds Palo Alto Expedition, Android, CyberPanel and Nostromo nhttpd bugs to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/170673/security/u-s-cisa-adds-palo-alto-expedition-android-cyberpanel-and-nostromo-nhttpd-bugs-to-its-known-exploited-vulnerabilities-catalog.html)
  - [ ] [DPRK-linked BlueNoroff used macOS malware with novel persistence](https://securityaffairs.com/170659/malware/bluenoroff-apt-macos-malware.html)
  - [ ] [Canada ordered ByteDance to shut down TikTok operations in the country over security concerns](https://securityaffairs.com/170653/security/canada-ordered-bytedance-to-shut-down-tiktok-operations.html)
  - [ ] [Critical bug in Cisco UWRB access points allows attackers to run commands as root](https://securityaffairs.com/170646/security/cisco-uwrb-crirical-flaw.html)
- Palo Alto Networks Blog
  - [ ] [Strata Cloud Manager: One Interface, Complete Network Security Control](https://www.paloaltonetworks.com/blog/2024/11/strata-cloud-manager-one-interface-complete-network-security-control/)
- 网安寻路人
  - [ ] [美国司法部关于“防止受关注国家或涵盖人员访问美国敏感个人数据和政府相关数据的规定”的分析](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247505390&idx=1&sn=71217cc14df5d7d387161c6182d9f143&chksm=97e96804a09ee112b8a63d07744f0e827b7a50a1e5a1c945e5384a25aec431710e4666caad47&scene=58&subscene=0#rd)
- Security Weekly Podcast Network (Audio)
  - [ ] [Cybersecurity For Schools - Kayne McGladrey - PSW #850](http://sites.libsyn.com/18678/cybersecurity-for-schools-kayne-mcgladrey-psw-850)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[每日信息流] 2024-11-08 #703

每日安全资讯（2024-11-08）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2024-11-08 #703

Description

每日安全资讯（2024-11-08）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions