[每日信息流] 2025-12-20

# 每日安全资讯（2025-12-20）

- Doonsec's feed
  - [ ] [Tor 匿名网络的“美国印记”：政府招标项目资金占比从53%降到35%](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451184312&idx=1&sn=c555fe3244d85515ad22a896402d459b)
  - [ ] [什么？瞎逛也能捡到高危漏洞？](https://mp.weixin.qq.com/s?__biz=Mzk4ODMxODQyMQ==&mid=2247483835&idx=1&sn=22362148fdb8ae6c7b24f012228d1bb4)
  - [ ] [区块链Layer 1与Layer 2钱包安全风险全景分析](https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247515792&idx=1&sn=e3b669cf74550d60427830b85d708216)
  - [ ] [【漏洞预警】Apache Airflow Providers Edge3权限提升漏洞(CVE-2025-67895)](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491153&idx=1&sn=41256cbdf79b54780d80dae55103bfc4)
  - [ ] [windows提权方法一览，管理员看完连夜改行卖炒粉。。。](https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247493232&idx=1&sn=6bd1ef97eeb82d13b3e68bd3c90e634f)
  - [ ] [【招聘】蔚来招人啦～](https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247487341&idx=1&sn=5ffa2d732723d663ca98504280665837)
  - [ ] [黑龙江省委书记许勤到包联企业安天调研](https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650213338&idx=1&sn=c3612741675969dc7c8b237b70bf52af)
  - [ ] [美国2026年网络安全战略转型深度解析](https://mp.weixin.qq.com/s?__biz=MzI1NjQxMzIzMw==&mid=2247498272&idx=1&sn=9736d71704b9500dc200d774c83450d0)
  - [ ] [Termux-X：移动安全与极客的终极武器——在指尖免ROOT运行Kali NetHunter](https://mp.weixin.qq.com/s?__biz=MzkzODk4ODc2Ng==&mid=2247484487&idx=1&sn=0a2c0275cfcf79ef6e1b12ba0fb1cd6b)
  - [ ] [Kali Nethunter 生态智能化升级：AI赋能移动渗透测试新体验](https://mp.weixin.qq.com/s?__biz=MzkzODk4ODc2Ng==&mid=2247484487&idx=2&sn=8982d319494aadb21b89d05957c23c7b)
  - [ ] [每日课程更新](https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247508755&idx=1&sn=6db9dcb31e1e2af88b04ae01b909bbf7)
  - [ ] [疑似海莲花APT组织白加黑攻击样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494869&idx=1&sn=ae278536e08f0ffb2e3924501e7de9c4)
  - [ ] [具身智能安全入侵，证据何寻？美亚柏科前沿揭秘“数字痕迹”取证新突破](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651449626&idx=1&sn=085297bcafe46dff449894cb400b5da7)
  - [ ] [技术分享 | 巧用云取证工作站：破解“数证杯”难题，高效重构服务器网站](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651449626&idx=2&sn=3fd73df8c2b6026858402918b154c605)
  - [ ] [【协会风采】副会长单位：中铁二十二局集团第三工程有限公司](https://mp.weixin.qq.com/s?__biz=MjM5NTU4NjgzMg==&mid=2651449626&idx=3&sn=4af89878b953c8912f9aa384ab121998)
  - [ ] [《未成年人网络保护通识》编写推进会在北京召开](https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649403472&idx=1&sn=b3faf9158ffa4add66928ff73d049811)
  - [ ] [OWASP发布2026智能体应用十大安全风险！](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247522831&idx=1&sn=b7c887a5486f8537c8382c30ee5d625c)
  - [ ] [席位有限！智能体技术沙龙火热报名中！](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247522831&idx=2&sn=fee35718fb042305c6771d023343a1b2)
  - [ ] [CVE-2025-55182 React2Shell 深入详解](https://mp.weixin.qq.com/s?__biz=MzAxODg2MDU0MA==&mid=2247483896&idx=1&sn=e85b3d3de4f6ac511c5777725718b9ee)
  - [ ] [基于AI的集成全网安全文章知识库](https://mp.weixin.qq.com/s?__biz=MzAxODg2MDU0MA==&mid=2247483896&idx=2&sn=aec1e929dace282cf93cc92627259566)
  - [ ] [中识云平台 sys_user_list 信息泄露漏洞](https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493587&idx=1&sn=8d998b1629d8a4bd038e8b3ac220e7b7)
  - [ ] [免费白嫖永久VPS服务器，一个脚本就可以搭建免费节点（全程图文操作讲解，附问题解决）](https://mp.weixin.qq.com/s?__biz=MzkyNzYzNTQ2Nw==&mid=2247485854&idx=1&sn=67adfbb809632f1490da1c54704e644a)
  - [ ] [第五届“鹏城杯”联邦网络靶场协同攻防演练初赛write up](https://mp.weixin.qq.com/s?__biz=MzU4NjcxMTY3Mg==&mid=2247490569&idx=1&sn=56529a32d5ca65e613b52a891894736b)
  - [ ] [现在的年轻人为撒这么有钱！这些卖零食的地方每天都爆满排队的。](https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247525658&idx=1&sn=c29cc0860627a48ddfb855b014aab41f)
  - [ ] [数据安全与渗透测试：保卫金库与测试门锁](https://mp.weixin.qq.com/s?__biz=Mzk0NTc2MTMxNQ==&mid=2247485125&idx=1&sn=16a690766c146855573a996aa70bb8e5)
  - [ ] [【大话工控安全】工业控制系统行业知识：电力行业通信安全标准IEC62351（GB/T 25320）概览](https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247485877&idx=1&sn=167c45bc7f6bbc2a83f9b72a87e689e1)
  - [ ] [墨菲SCA落地实践](https://mp.weixin.qq.com/s?__biz=Mzg4ODU4ODYzOQ==&mid=2247485131&idx=1&sn=6d8df5b785b9b810bbfd702589774a34)
  - [ ] [HackMyVm靶场之birdeye](https://mp.weixin.qq.com/s?__biz=Mzg3MjgxMzkzMg==&mid=2247486244&idx=1&sn=310a47a8fe068485df1c54cbec011fc5)
  - [ ] [IoT安全 | 无人机安全攻防 (六)：MAVLink协议欺骗与状态劫持](https://mp.weixin.qq.com/s?__biz=MzkyODMxMjQ3OQ==&mid=2247486714&idx=1&sn=996e3c7dd0494b675de6c4e982b96984)
  - [ ] [Gogs远程命令注入漏洞(CVE-2025-8110)复现](https://mp.weixin.qq.com/s?__biz=MzkxOTMxNzYxNA==&mid=2247491079&idx=1&sn=43b2ca325a050456ad588f0e4dc30c55)
  - [ ] [开发计划：新增被动代理扫描功能](https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247485596&idx=1&sn=55091560b621a304df049218dcf0c006)
  - [ ] [网络暴力真的好可怕！各位师傅别做键盘侠！](https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247525651&idx=1&sn=6b69132216684a1d3561e0db280a403e)
  - [ ] [【AI安全】揭秘！Gemini 越狱提示词的终极写法](https://mp.weixin.qq.com/s?__biz=MzkxNzU2NDgxNQ==&mid=2247484328&idx=1&sn=d9bd39af63eca51122387bf80b8bd188)
  - [ ] [2025补天白帽黑客盛典暨湾区网络安全人才基地发布会隆重召开](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247630254&idx=1&sn=64cce0644e69a49247d98d0fcddadf90)
  - [ ] [湾区网络安全人才基地正式成立](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247630254&idx=2&sn=eec1ad9fb0e403f6a96e835f96a8d636)
  - [ ] [白帽人才生态：16万\"数字守护者\"绘就网络安全新图景](https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247630254&idx=3&sn=c7351b594497fd9199ce5d6a8f18f173)
  - [ ] [OWASP Agentic AI Top 10 攻击预警!](https://mp.weixin.qq.com/s?__biz=MzkxNzU2NDgxNQ==&mid=2247484319&idx=1&sn=e920cf901b22ae792995eeb658951fe6)
  - [ ] [双 12 特惠倒计时！Mac 新用户必装的 4 款高效神器，快入手！](https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492813&idx=1&sn=9985176b3332c65ccea1377afe81b064)
  - [ ] [APT | 海莲花组织Rust特马攻击活动分析](https://mp.weixin.qq.com/s?__biz=MzkzNjIwMzM5Nw==&mid=2247490461&idx=1&sn=bc02cc2078bd0a08101dd321dfe1c7aa)
  - [ ] [前沿阵地高阶硬货版（放价优惠中）](https://mp.weixin.qq.com/s?__biz=MzA3MTM0NTQzNA==&mid=2455780524&idx=1&sn=afd48c7799ccdbe56cef2e3ff8822068)
  - [ ] [揭秘！智慧城市领域20+无人机巡检AI视频算法，引爆万亿低空经济](https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454943522&idx=1&sn=24c34180cfd53a9e913d5234973d92c8)
  - [ ] [Apache Commons Text曝高危漏洞：攻击者可远程执行任意代码](https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096710&idx=1&sn=722b450510090b66f4ff07d79a70e43a)
  - [ ] [Node.js库曝高危漏洞：Windows系统面临远程代码执行攻击风险](https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096710&idx=2&sn=7bcfecec21d7271821f4d56f748b3696)
  - [ ] [新的UEFI漏洞使得对ASRock、华硕、技嘉、MSI主板的早期启动DMA攻击成为可能](https://mp.weixin.qq.com/s?__biz=Mzg4ODI5MzAzMw==&mid=2247483965&idx=1&sn=cc617bbd698f9dfb0b5750f59a9bbf7c)
  - [ ] [小白安卓刷机日记](https://mp.weixin.qq.com/s?__biz=MzkwMzQyMTg5OA==&mid=2247488938&idx=1&sn=a6ec3eb1623a3cbff558b06f8202be6c)
  - [ ] [福布斯聚焦CertiK Skynet报告：稳定币竞争迈入“安全性优先”的机构级阶段](https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247504883&idx=1&sn=1854ef44220acf55940ae5849b473713)
  - [ ] [【安全圈】朝鲜黑客2025年窃取20.2亿美元加密货币，占全球总量近六成](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073282&idx=1&sn=91415bf0bcc9249cb8b9cf669cf7ca62)
  - [ ] [【安全圈】华硕内置恶意代码漏洞遭活跃利用，被CISA列入高危漏洞目录](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073282&idx=2&sn=3334a1f8d9dc4e659cf6933449d3e6eb)
  - [ ] [【安全圈】DIG AI：犯罪组织与恐怖分子正在利用不受监管的暗网AI助手](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073282&idx=3&sn=8522b1bc11989e91c8c7f5fb94f5c39b)
  - [ ] [【安全圈】奇安信 X 实验室重磅披露：“ Kimwolf ”僵尸网络操控全球超 180 万台安卓设备](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073282&idx=4&sn=faa0d5b43d2515733c22c381ed05a1fd)
  - [ ] [亏1.17亿也要冲上市！AI数字员工企业金智维拟赴港IPO，累计服务240+银行](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653933252&idx=1&sn=eab2aaaa4e7807617878b1a9159c840b)
  - [ ] [AI快讯：Visa已完成数百宗AI交易，阿里或将推出“千问智学”APP](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653933252&idx=2&sn=90e2d9849a8cd7e0fc7a9008d56de8d8)
  - [ ] [科大讯飞340万中！重庆银行数字人系统2025年优化改造项目](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653933252&idx=3&sn=473fa12f4beb82940ede3d928e74a5a8)
  - [ ] [南京匠师品司法鉴定所2025能力验证获全项“满意”！](https://mp.weixin.qq.com/s?__biz=MzI0OTEyMTk5OQ==&mid=2247495386&idx=1&sn=6bb0ce2cc196c5dc7f0e5a4d1ba91801)
  - [ ] [党建赋能拓市场 市场干将谱新篇 —— 优秀党员叶希达的开拓篇章](https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650642203&idx=1&sn=97299caf9759a4c9dfddd50bd74a43dc)
  - [ ] [记一次完整的OAuth钓鱼攻击实录](https://mp.weixin.qq.com/s?__biz=MzYzNDE4ODczNA==&mid=2247484842&idx=1&sn=78f5afe9ad0cab396377935b41d9f054)
  - [ ] [我的2025年ai native经验](https://mp.weixin.qq.com/s?__biz=MzA4NzA5OTYzNw==&mid=2247484762&idx=1&sn=c2ce10a1af084aa8ac288e72f5df267d)
  - [ ] [2025网络空间安全学术会议召开 华顺信安专家做主题演讲](https://mp.weixin.qq.com/s?__biz=MzUzNjg1OTY3Mg==&mid=2247492506&idx=1&sn=41e0c971521c817bd20f678e50c94a4b)
  - [ ] [AI 成为操作系统：2026 年网安技术范式将会改写？](https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493598&idx=1&sn=e619b4b6edff172223029554f89a2cff)
  - [ ] [漏洞速递 | CVE-2025-13780 pgAdmin RCE漏洞](https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247501683&idx=1&sn=777f7002c33717152250ca88198c2ba7)
  - [ ] [“缓存欺骗第三章第四节”缓存规则中的另一个特殊规则--分隔符差异](https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797546&idx=1&sn=274dd5b22171e84525aaaae31214ed50)
  - [ ] [省委宣传部副部长、省委网信办主任郭力根一行莅临我司考察](https://mp.weixin.qq.com/s?__biz=Mzk0MjMxMzg5MQ==&mid=2247492408&idx=1&sn=231be24e4713ae41662880d2968ccb9a)
  - [ ] [专题·漏洞生态 | 美国对华网络安全战略转向与漏洞攻防体系升级：演进、动向与启示](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255787&idx=1&sn=65f3bff3e24fcb7e8483ab3901c4d504)
  - [ ] [专家解读 | 范科峰：信息清除强制性国家标准发布 为电子产品再流通上好“安全锁”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255787&idx=2&sn=05f869905a54b1e4a4e12f5ac741881d)
  - [ ] [关注 | 国家网信办会同中国证监会深入整治涉资本市场网上虚假不实信息](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255787&idx=3&sn=87397705fbb657443c69db209dce3536)
  - [ ] [通知 | 网安标委发布《网络安全标准实践指南——数据库联网安全要求》（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255787&idx=4&sn=4b1fea27751f8e33eb26409bf9a2f7b6)
  - [ ] [通知 | 《网络安全标准实践指南——网络数据标签标识技术规范（征求意见稿）》公开征求意见](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255787&idx=5&sn=c7561a46c9ed133da7cdeb1d01f2d64b)
  - [ ] [产教融合的“破界之力”——ISC.AI创新百强如何锻造AI时代的复合安全人才](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255787&idx=6&sn=04675767d4d5e823bd866ec3afb2351d)
  - [ ] [超级CSO研修班 |潘蓉 ：AI 安全管理体系构建—ISO42001 落地与工程化实践解析](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247649490&idx=1&sn=f122a60b25219415a2722e37d9490f11)
  - [ ] [上海市人工智能安全产业未来发展企业座谈会第二场在普陀举办](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247649490&idx=2&sn=8af5c15ddb82c6475513334da2e7c256)
  - [ ] [免费赠送 | 企业办公安全意识培训科普素材第七期）](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247649490&idx=3&sn=08b94b8296d382b28dbf7839511a1024)
  - [ ] [为了管好IP我上了一套开源的IP管理系统phpIPAM](https://mp.weixin.qq.com/s?__biz=MjM5NDMwMjEwMg==&mid=2451852481&idx=1&sn=1fd731daf6badb6951970fb1958dda9d)
  - [ ] [每周网络安全简讯 ( 2025年 第51周 )](https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247522165&idx=1&sn=b41da384b9359d38a144823433c88eb5)
  - [ ] [安全动态丨网络空间安全动态第312期](https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247522165&idx=2&sn=db0b54cca667a6c8e1548f097a061ad6)
  - [ ] [《科学》公布2025年度十大突破！中国多项成果入选](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622311&idx=1&sn=8ee41c1e2647f5e28fc368aa0ad02529)
  - [ ] [欧洲议会、欧盟理事会和欧盟委员会签署关于2026年欧盟立法优先事项的联合声明](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622311&idx=2&sn=18956f3f27fd3a687244b280f6d340a9)
  - [ ] [观天者数据站发布：机场气象数据查询下载与雷达反解析能力上线](https://mp.weixin.qq.com/s?__biz=MzI2MDQ0ODIzNg==&mid=2247485247&idx=1&sn=e46acec4d7720632284424767518b9a9)
  - [ ] [某链商被黑致超13亿元资产被盗，监管机构责令安全整改并赔偿受害用户](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515353&idx=1&sn=ce6fcf287f791c42d0decfc22f6075a9)
  - [ ] [德国学者提出触碰红线的七种国家网络行动“危险信号”](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515353&idx=2&sn=a20dcba62d984aa94ffc335a94e7f9e7)
  - [ ] [密评与等保测评的核心差异解析：从定义到实施的全面对比](https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTIzMQ==&mid=2247498146&idx=1&sn=21affa30bc529e628a5661ff7b581204)
  - [ ] [等保测评初次启动：流程拆解与材料准备全指南](https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTIzMQ==&mid=2247498146&idx=2&sn=a44f9922dfd7952fc4c23e27cb6b0582)
  - [ ] [产品上新！捷普网关数据防泄漏系统正式发布！](https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247507373&idx=1&sn=bfcda4fde29d8028c88564aa2dc414d5)
  - [ ] [回看往期ISC2网络研讨会，提升网络安全技能并获取CPE学分](https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247493447&idx=1&sn=245e1429615972a31893eb4c0ebc1f77)
  - [ ] [2025年AI安全重大事件盘点：技术失控与监管升级的博弈之年](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247583425&idx=1&sn=24c1e968e22a6195b5dc8729af3e1072)
  - [ ] [黑客可入侵调制解调器，控制汽车仪表盘](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524697&idx=1&sn=859874b28c699cba937a7edf009d7623)
  - [ ] [慧与提醒注意 OneView 软件中的满分 RCE 漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524697&idx=2&sn=2293ce91b3c44d394de4fe120df687b6)
  - [ ] [党管密码・融合创新丨信安世纪深度参与密码“丰”会2025暨首届商用密码行业党建论坛](https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650665805&idx=1&sn=6e43ad502f10f571a57b027c92cf7aa7)
  - [ ] [实力认证 双榜题名｜公司获评福建省互联网综合实力前50家企业及福建省网络安全领军企业](https://mp.weixin.qq.com/s?__biz=MjM5NTc2NDM4MQ==&mid=2650842988&idx=1&sn=90666b702aaaa5b833bacc5b632683a8)
  - [ ] [图形化渗透测试辅助工具AuxTools | 更新-5.8.0](https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247518123&idx=1&sn=fa04d7bf84b73dbacab9c740adf4a913)
  - [ ] [HSM和TEE比较](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247564751&idx=1&sn=a64ac081fd6ba71ef8b3a043c3b213ff)
  - [ ] [重磅嘉宾 | ZF采埃孚网络安全经理确认出席「AutoSec Europe 第二届欧洲汽车网络安全与数据安全峰会」！](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247564751&idx=2&sn=5a037a3dd2ff20774f3196f508ba89f0)
  - [ ] [吉利智驾合并进展：千里智驾首席科学家 “ 袁平一 ” 将离职](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247564751&idx=3&sn=a20530b4b296d3472346012f5ee07193)
  - [ ] [eSIM产业爆发背后，紫光同芯的“中国方案”](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247564751&idx=4&sn=9e876c1c3a37ceb4e0ff7f20a50f39ee)
  - [ ] [朝鲜黑客2025年窃取20.2亿美元加密货币，占全球总量近六成](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332591&idx=1&sn=da8d1e0e76f9ef8bd503707e3997c4f9)
  - [ ] [OpenAI发布GPT-5.2-Codex：显著提升智能编程与漏洞检测能力](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332591&idx=2&sn=60fa10702b10bd9bc1ef732d6ef37e7a)
  - [ ] [BugTrace-AI：基于人工智能的渗透测试工具，可检测潜在漏洞](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332591&idx=3&sn=30a66b97e06324151d758d47d470b0f7)
  - [ ] [流行Node.js库曝严重漏洞，可致Windows系统遭受RCE攻击](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332591&idx=4&sn=a486ec2b0db73841f35fc4c06655a3f9)
  - [ ] [让我当CISO我会怎么做？](https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650238304&idx=1&sn=dbee186ece857ed08989880ecb09bbf7)
  - [ ] [聚AI英才 铸网安维港 | 启明星辰圆满支撑中国移动香港有限公司SecAI邀请赛](https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651735319&idx=1&sn=e682579d1e727a55110a30b61741ccf0)
  - [ ] [强叔侃墙 | 病毒大军防不胜防？别慌，你的“专业驯毒师”已上线！](https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247506954&idx=1&sn=c86b51b46246c946ef396072c2971361)
  - [ ] [Geoserver综合漏洞图形化利用工具](https://mp.weixin.qq.com/s?__biz=MzUzNDczNjQ2OQ==&mid=2247486021&idx=1&sn=31e22c82a8bc5bd2214d58479134d841)
  - [ ] [每周蓝军技术推送（2025.12.13-12.19）](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494561&idx=1&sn=7cd33971b11a7d402f3c377238f09de4)
  - [ ] [TikTok 内部信曝美国方案：字节跳动仍保留电商、广告业务，新合资公司仅负责数据安全](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247543406&idx=1&sn=f871cff3d7fd6061cb9d7bff62f1f77d)
  - [ ] [Python 的 map 函数](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649473027&idx=1&sn=d55093b97e2ab301cb19873f7ac30d25)
  - [ ] [TD路由器固件分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605737&idx=1&sn=ce9af549667ae62113de5e65263d618a)
  - [ ] [2025 最后一波高薪机会！网络安全/逆向开发/Android 岗速投](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605737&idx=2&sn=9fbf6cd126ec8ecdd75e91434dd8a89b)
  - [ ] [CISA将华硕恶意代码漏洞列入KEV名单](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605737&idx=3&sn=67acf1dbcec50f71ad78b37fa004a8d6)
  - [ ] [数据安全无免责区，人员少技术弱不是挡箭牌！](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175346&idx=1&sn=6cc06fbd95f02b2c4c2a44796551415d)
  - [ ] [《网络安全标准实践指南——数据库联网安全要求》发布](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175346&idx=2&sn=af26bb226fb862da769f478bf99c85e0)
  - [ ] [国家网信办会同中国证监会深入整治涉资本市场网上虚假不实信息](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175346&idx=3&sn=d3033d38cfc6740035ff92ef3865b3aa)
  - [ ] [《网络安全标准实践指南——网络数据标签标识技术规范（征求意见稿）》公开征求意见](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175346&idx=4&sn=547c45020775e9cf362671814f5b63bc)
  - [ ] [appsx｜V1.2.8 支持 JS 混淆解析和优化未授权漏洞扫描逻辑](https://mp.weixin.qq.com/s?__biz=Mzk3NTc2NDk2MQ==&mid=2247483976&idx=1&sn=fa58ba78113a1cac3408fa7c18f3e735)
  - [ ] [双喜临门！中资网安顺利通过国家高新技术企业及北京市“专精特新”中小企业双证复审](https://mp.weixin.qq.com/s?__biz=MzkxMzAzMjU0OA==&mid=2247553634&idx=1&sn=4c83a09d5c20ce32f42ccc5d8a66d67b)
  - [ ] [不止是推荐，是定义未来！2026中国自动化产业年会评选推荐即将结束](https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247536782&idx=1&sn=939b548ce9a32ab7dea4b881a90fb7ec)
- Private Feed for M09Ic
  - [ ] [anthropics released v2.0.74 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.0.74)
  - [ ] [mgeeky starred BaffledJimmy/NebulaPOC](https://github.com/BaffledJimmy/NebulaPOC)
  - [ ] [bolucat released 202512191938 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202512191938)
  - [ ] [kpcyrd starred kpcyrd/djb2](https://github.com/kpcyrd/djb2)
  - [ ] [Ridter starred andrivet/ADVobfuscator](https://github.com/andrivet/ADVobfuscator)
  - [ ] [Ridter forked Ridter/next-ai-draw-io from DayuanJiang/next-ai-draw-io](https://github.com/Ridter/next-ai-draw-io)
  - [ ] [zema1 starred indygreg/apple-platform-rs](https://github.com/indygreg/apple-platform-rs)
  - [ ] [wabzsy starred astral-sh/uv](https://github.com/astral-sh/uv)
  - [ ] [uknowsec starred 0xfnzero/four-trading-sdk](https://github.com/0xfnzero/four-trading-sdk)
  - [ ] [Ridter forked Ridter/prompt-optimizer from linshenkx/prompt-optimizer](https://github.com/Ridter/prompt-optimizer)
  - [ ] [agentscope-ai released v1.0.10 at agentscope-ai/agentscope](https://github.com/agentscope-ai/agentscope/releases/tag/v1.0.10)
  - [ ] [gh0stkey starred i486/VxKex](https://github.com/i486/VxKex)
  - [ ] [WAY29 starred tak-bro/aicommit2](https://github.com/tak-bro/aicommit2)
  - [ ] [lz520520 starred mark3labs/mcp-go](https://github.com/mark3labs/mcp-go)
  - [ ] [Rvn0xsy starred Dreace/ChinaHolidayAPI](https://github.com/Dreace/ChinaHolidayAPI)
  - [ ] [Ridter starred ricardojoserf/SAMDump](https://github.com/ricardojoserf/SAMDump)
  - [ ] [su18 starred mrexodia/ida-pro-mcp](https://github.com/mrexodia/ida-pro-mcp)
  - [ ] [phra contributed to RogueMaster/flipperzero-firmware-wPlugins](https://github.com/RogueMaster/flipperzero-firmware-wPlugins/pull/1154)
  - [ ] [Ridter starred schollz/croc](https://github.com/schollz/croc)
  - [ ] [gh0stkey starred obsproject/obs-studio](https://github.com/obsproject/obs-studio)
  - [ ] [Rvn0xsy starred hezhizheng/go-wxpush](https://github.com/hezhizheng/go-wxpush)
- LevelBlue Blog
  - [ ] [A Year in Review: Taking a Look Back at LevelBlue SpiderLabs’ 2025 Predictions](https://levelblue.com/blogs/levelblue-blog/a-year-in-review-taking-a-look-back-at-levelblue-spiderlabs-2025-predictions/)
- paper - Last paper
  - [ ] [React2Shell 漏洞利用分析报告](https://paper.seebug.org/3437/)
  - [ ] [面向企业安全的机器学习民主化：一种自持续攻击检测框架](https://paper.seebug.org/3436/)
  - [ ] [QEMU v10 适配 AFL：架构变更与 MIPS 延迟槽 Bug 分析](https://paper.seebug.org/3434/)
- SecWiki News
  - [ ] [SecWiki News 2025-12-19 Review](http://www.sec-wiki.com/?2025-12-19)
- 安全客-有思想的安全新媒体
  - [ ] [CVE-2025-37164（CVSS 评分 10.0）：未验证身份即可远程执行代码，HPE OneView 漏洞或致数据中心遭完全控制](https://www.anquanke.com/post/id/313860)
  - [ ] [零日漏洞预警：黑客利用 SonicWall SMA1000 系列漏洞链，实现未验证身份的最高权限远程代码执行](https://www.anquanke.com/post/id/313863)
  - [ ] [RTO challan 诈骗事件解析：虚假交通罚单 + 恶意 VPN 组合攻击的盗刷原理](https://www.anquanke.com/post/id/313869)
  - [ ] [百亿美元转向：OpenAI 洽谈亚马逊巨额融资 —— 但暗藏硅谷式附加条件](https://www.anquanke.com/post/id/313874)
  - [ ] [开发者的胜利：社区强烈反对后，GitHub 推迟自托管运行器收费计划](https://www.anquanke.com/post/id/313856)
  - [ ] [2025 年 Chrome 零日漏洞遭在野利用：全面深度分析](https://www.anquanke.com/post/id/313877)
  - [ ] [Kubernetes 安全预警：Headlamp 漏洞（CVE-2025-14269）致未授权用户可劫持 Helm 集群](https://www.anquanke.com/post/id/313879)
  - [ ] [启动初期攻击：华擎、华硕、微星主板存在 UEFI 漏洞，攻击者可通过 PCIe 绕过操作系统安全机制](https://www.anquanke.com/post/id/313882)
  - [ ] [YouTube 幽灵网络：GachiLoader 新型恶意软件潜藏于热门视频链接](https://www.anquanke.com/post/id/313887)
  - [ ] [金狼安卓僵尸网络攻陷全球 180 万台安卓设备](https://www.anquanke.com/post/id/313849)
  - [ ] [利润仅$200？Anthropic 最新研究揭示 AI 自动挖掘 0-day 的真实经济账](https://www.anquanke.com/post/id/313896)
  - [ ] [小白也能轻松上手！一招解决IP被封杀难题](https://www.anquanke.com/post/id/311754)
  - [ ] [安全与效率的平衡术：安全空间](https://www.anquanke.com/post/id/312117)
- Recent Commits to cve:main
  - [ ] [Update Fri Dec 19 11:37:06 UTC 2025](https://github.com/trickest/cve/commit/cdece31f32e45fc02e38c84205cddea6a8025ddd)
- 先知安全技术社区
  - [ ] [2025鹏程杯PWN除了vm全解](https://xz.aliyun.com/news/90899)
  - [ ] [帆软export/excelSQL注入漏洞分析](https://xz.aliyun.com/news/90898)
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  - [ ] [Fortinet携手NVIDIA 为AI数据中心打造隔离式基础设施加速方案](https://www.4hou.com/posts/7Mg8)
  - [ ] [第八届科技创新促进经济发展论坛在厦门举行](https://www.4hou.com/posts/5MOq)
- Tenable Blog
  - [ ] [Cybersecurity Snapshot: Cyber Pros Emerge as Bold AI Adopters, While AI Changes Data Security Game, CSA Reports Say](https://www.tenable.com/blog/cybersecurity-snapshot-ai-prompt-injection-attacks-ai-data-security-responsible-ai-12-19-2025)
- Filippo Valsorda
  - [ ] [Building a Transparent Keyserver](https://words.filippo.io/keyserver-tlog/)
- Horizon3.ai
  - [ ] [CVE-2025-14611](https://horizon3.ai/attack-research/vulnerabilities/cve-2025-14611/)
- Didier Stevens
  - [ ] [Update: pecheck.py Version 0.7.19](https://blog.didierstevens.com/2025/12/19/update-pecheck-py-version-0-7-19/)
- GuidePoint Security
  - [ ] [The New Security Advantage: AI-Powered Analysis on Consolidated Platforms](https://www.guidepointsecurity.com/blog/new-security-advantage-ai-powered-analysis-on-consolidated-platforms/)
- The Trail of Bits Blog
  - [ ] [Can chatbots craft correct code?](https://blog.trailofbits.com/2025/12/19/can-chatbots-craft-correct-code/)
- Securelist
  - [ ] [Cloud Atlas activity in the first half of 2025: what changed](https://securelist.com/cloud-atlas-h1-2025-campaign/118517/)
  - [ ] [Yet another DCOM object for lateral movement](https://securelist.com/lateral-movement-via-dcom-abusing-control-panel/118232/)
- CCC Event Blog
  - [ ] [39C3: Turnhallen – die preisgünstige Übernachtungsalternative](https://events.ccc.de/2025/12/19/39c3-gym/)
  - [ ] [39C3: Lightning Talks](https://events.ccc.de/2025/12/19/39c3-lightning-talks/)
- Bug Bounty in InfoSec Write-ups on Medium
  - [ ] [One “Harmless” Parameter, Full Account Takeover — My Favorite Bug Bounty Find](https://infosecwriteups.com/one-harmless-parameter-full-account-takeover-my-favorite-bug-bounty-find-1e4c9cf7c17d?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [Buried in JavaScript: How One Comment Led Me to a Production API Key](https://infosecwriteups.com/buried-in-javascript-how-one-comment-led-me-to-a-production-api-key-65a33b1644bb?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [You’re Fuzzing All Wrong: FFUF & Virtual Host Fuzzing](https://infosecwriteups.com/youre-fuzzing-all-wrong-ffuf-virtual-host-fuzzing-99e82643935a?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [From Brute-Force to Bounty: My $200 and Double XSS Win on Acronis](https://infosecwriteups.com/from-brute-force-to-bounty-my-200-and-double-xss-win-on-acronis-4fc7c7ccff39?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [Don’t Just Patch; Predict: How I Used Dark Web Chatter to Find a Vulnerability Before It Was…](https://infosecwriteups.com/dont-just-patch-predict-how-i-used-dark-web-chatter-to-find-a-vulnerability-before-it-was-bc46d89f79f6?source=rss----7b722bfd1b8d--bug_bounty)
- Malwarebytes
  - [ ] [CISA warns ASUS Live Update backdoor is still exploitable, seven years on](https://www.malwarebytes.com/blog/news/2025/12/cisa-warns-asus-live-update-backdoor-is-still-exploitable-seven-years-on)
- SentinelOne
  - [ ] [The Good, the Bad and the Ugly in Cybersecurity – Week 51](https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-51-8/)
- LevelBlue SpiderLabs Blog
  - [ ] [Holiday Fraud 2025: Gift Card Schemes Exploiting Seasonal Shopping](https://levelblue.com/blogs/spiderlabs-blog/holiday-fraud-2025-gift-card-schemes-exploiting-seasonal-shopping/)
- Wallarm
  - [ ] [CISO Spotlight: Lefteris Tzelepis on Leadership, Strategy, and the Modern Security Mandate](https://lab.wallarm.com/ciso-spotlight-lefteris-tzelepis-leadership-strategy-modern-security-mandate/)
- 奇客Solidot–传递最新科技情报
  - [ ] [ACM 所有出版物开放获取](https://www.solidot.org/story?sid=83099)
- 素十八
  - [ ] [CVE-2025-55182 的利⽤、控制与后利⽤](https://su18.org/post/CVE-2025-55182/)
- 黑鸟
  - [ ] [Tor 匿名网络的“美国印记”：政府招标项目资金占比从53%降到35%](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451184312&idx=1&sn=c555fe3244d85515ad22a896402d459b)
- 吾爱破解论坛
  - [ ] [FlowMouse - 心流鼠标手势 v1.0 已正式上架 Chrome 应用商店！
👉 安装链接：https://chrome.google.com/webstore/detail/fnldhkfidchnjiokpoemdhoejmaojkgp

欢迎体验！如果你喜欢它，请给我们一个五星鼓励；如有任何建议，也欢迎留言反馈。
大家之前反馈的问题与功能建议，我们已在即将发布的 v1.1 中进行了修复与完善，新版本很快就会与大家见面。](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143242&idx=1&sn=9a02adec30d81f1c341467fa773c0939)
- 威努特安全网络
  - [ ] [工信部预警新型僵尸网络、智能体十大安全风险出炉|一周特辑](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651138713&idx=1&sn=f6e1238600d58f4c8b8ae7e15b7b34b7)
- 安全内参
  - [ ] [某链商被黑致超13亿元资产被盗，监管机构责令安全整改并赔偿受害用户](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515353&idx=1&sn=ce6fcf287f791c42d0decfc22f6075a9)
  - [ ] [德国学者提出触碰红线的七种国家网络行动“危险信号”](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515353&idx=2&sn=a20dcba62d984aa94ffc335a94e7f9e7)
- 虎符智库
  - [ ] [AI 成为操作系统：2026 年网安技术范式将会改写？](https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493598&idx=1&sn=e619b4b6edff172223029554f89a2cff)
- 奇安信 CERT
  - [ ] [安全热点周报：苹果修复了两个在“复杂”攻击中被利用的零日漏洞](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504356&idx=1&sn=f5d2d7bd852745af850531ede48f2428)
- 奇安信病毒响应中心
  - [ ] [每周勒索威胁摘要](https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498563&idx=1&sn=67c1afecc70297af56bf41c18180d35c)
- 天黑说嘿话
  - [ ] [【工具分享】Web漏洞扫描工具Arachni](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485836&idx=1&sn=3403ff2db838de4b8ca07ef3f52bb155)
- 代码卫士
  - [ ] [黑客可入侵调制解调器，控制汽车仪表盘](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524697&idx=1&sn=859874b28c699cba937a7edf009d7623)
  - [ ] [慧与提醒注意 OneView 软件中的满分 RCE 漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524697&idx=2&sn=2293ce91b3c44d394de4fe120df687b6)
- 安全客
  - [ ] [AI将单簧管误判为枪支，一所学校紧急封锁](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789535&idx=1&sn=76a7efadb75c5232db551bf8da3a70be)
- 奇安信威胁情报中心
  - [ ] [每周高级威胁情报解读(2025.12.12~12.18)](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247517289&idx=1&sn=f7b637f4f79a7c4ab7f84ec220758ea7)
- HackerNews
  - [ ] [黑客假冒宜家等购物网站，诱骗消费者财务信息](https://hackernews.cc/archives/61975)
  - [ ] [Motors WordPress主题漏洞可能导致网站被完全控制](https://hackernews.cc/archives/61973)
  - [ ] [黑客入侵英国医疗服务技术供应商内部服务器](https://hackernews.cc/archives/61971)
  - [ ] [Kimsuky 通过伪装成快递应用的二维码钓鱼传播 DocSwap 安卓恶意软件](https://hackernews.cc/archives/61969)
  - [ ] [HPE OneView 漏洞被评为CVSS 10.0，允许未经身份验证的远程代码执行](https://hackernews.cc/archives/61967)
  - [ ] [2025 年朝鲜黑客窃取 20.2 亿美元加密货币，蝉联全球盗窃榜首](https://hackernews.cc/archives/61965)
- 中国信息安全
  - [ ] [专题·漏洞生态 | 美国对华网络安全战略转向与漏洞攻防体系升级：演进、动向与启示](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255787&idx=1&sn=65f3bff3e24fcb7e8483ab3901c4d504)
  - [ ] [专家解读 | 范科峰：信息清除强制性国家标准发布 为电子产品再流通上好“安全锁”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255787&idx=2&sn=05f869905a54b1e4a4e12f5ac741881d)
  - [ ] [关注 | 国家网信办会同中国证监会深入整治涉资本市场网上虚假不实信息](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255787&idx=3&sn=87397705fbb657443c69db209dce3536)
  - [ ] [通知 | 网安标委发布《网络安全标准实践指南——数据库联网安全要求》（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255787&idx=4&sn=4b1fea27751f8e33eb26409bf9a2f7b6)
  - [ ] [通知 | 《网络安全标准实践指南——网络数据标签标识技术规范（征求意见稿）》公开征求意见](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255787&idx=5&sn=c7561a46c9ed133da7cdeb1d01f2d64b)
  - [ ] [产教融合的“破界之力”——ISC.AI创新百强如何锻造AI时代的复合安全人才](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255787&idx=6&sn=04675767d4d5e823bd866ec3afb2351d)
- 数世咨询
  - [ ] [所有关基用户请注意！CISA新版AI安全指南出台，再不分离OT网络就晚了！](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541180&idx=1&sn=459c75992e46849921e49e9e0c9006ce)
  - [ ] [数据开始“有身份” |《网络数据标签标识技术规范（征求意见稿）》发布](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541180&idx=2&sn=3a245de18360d69a93c3b037c3fea580)
- M01N Team
  - [ ] [每周蓝军技术推送（2025.12.13-12.19）](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494561&idx=1&sn=7cd33971b11a7d402f3c377238f09de4)
- 安全圈
  - [ ] [【安全圈】朝鲜黑客2025年窃取20.2亿美元加密货币，占全球总量近六成](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073282&idx=1&sn=91415bf0bcc9249cb8b9cf669cf7ca62)
  - [ ] [【安全圈】华硕内置恶意代码漏洞遭活跃利用，被CISA列入高危漏洞目录](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073282&idx=2&sn=3334a1f8d9dc4e659cf6933449d3e6eb)
  - [ ] [【安全圈】DIG AI：犯罪组织与恐怖分子正在利用不受监管的暗网AI助手](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073282&idx=3&sn=8522b1bc11989e91c8c7f5fb94f5c39b)
  - [ ] [【安全圈】奇安信 X 实验室重磅披露：“ Kimwolf ”僵尸网络操控全球超 180 万台安卓设备](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073282&idx=4&sn=faa0d5b43d2515733c22c381ed05a1fd)
- 极客公园
  - [ ] [电商需要的是确定性增长，AI 正在拉平中小商家的竞争起跑线](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653095106&idx=1&sn=f91d36301897e0923ddd9b7dde45846e)
  - [ ] [一句 AI 时代，模糊了多少技术落地的复杂需求](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653095057&idx=1&sn=1a6845fdbc70b12d1311d5336b2954a1)
  - [ ] [OpenAI 上线「应用商店」；小红书被曝发力中长视频；《疯狂动物城 2》打破内地进口片观影人次记录 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653094978&idx=1&sn=33d8968abfa01afe0c771863ded0aef0)
- 安全牛
  - [ ] [AI勒索新剧本曝光：2500万美元蒸发，我们离“数字绑架”还有多远？](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139758&idx=1&sn=98ec682ea4c55b3afc9de065300ef247)
  - [ ] [“数据纠纷”成独立案由！最高法新规如何影响企业合规？；Cloudflare年度报告:全球互联网流量暴增19%| 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139758&idx=2&sn=5aa0f4506d06f5297bbde90dcce1b7a1)
- 恒脑与AI
  - [ ] [兰德报告预测：AI军备竞赛下半场：网络安全防御进入“收益竞赛”时代](https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247497297&idx=1&sn=36132a776479ded42affa9102de54b29)
- 情报分析师
  - [ ] [【卫星谍影】2025年朝鲜核设施的五大开源情报发现](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650564439&idx=1&sn=0a027485f9c6600f011d77468cc73e22)
  - [ ] [【深度研判】美国和东南亚对我海南自贸港的政策态度分析](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650564439&idx=2&sn=9ac503f8d37ab855a355a7a640e77f9e)
- 嘶吼专业版
  - [ ] [黑客借React2Shell漏洞发起EtherRAT恶意软件攻击](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586013&idx=1&sn=0eb362c1a48a9b56edd4bdc1d4ec6887)
  - [ ] [一图读懂 | 强制性国家标准GB 46864-2025《数据安全技术 电子产品信息清除技术要求》](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586013&idx=2&sn=281a88d254bbb1659678464d5e2c7ad4)
- 安全分析与研究
  - [ ] [疑似海莲花APT组织白加黑攻击样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494869&idx=1&sn=ae278536e08f0ffb2e3924501e7de9c4)
- 知道创宇404实验室
  - [ ] [原创 Paper | QEMU v10 适配 AFL：架构变更与 MIPS 延迟槽 Bug 分析](https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650991074&idx=1&sn=591be07cb351437773ef242cc22087a8)
- 国家互联网应急中心CNCERT
  - [ ] [关于汽车数据处理5项安全要求检测情况的通报（第四批）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500970&idx=1&sn=23ce8028a43fd6486255effee6457ad3)
- 火绒安全
  - [ ] [《二进制安全新风向：AI大语言模型协助未知威胁检测与逆向分析》](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247528829&idx=1&sn=61effbac86e9154e0903901e8c20f89e)
  - [ ] [火绒小问答——「企业版」终端部署前的准备](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247528829&idx=2&sn=f460773b11645e23fbc34b646ca4cc8b)
  - [ ] [【火绒安全周报】抚顺一单位被处罚/日企74万条数据失窃](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247528829&idx=3&sn=be74679d64e6d27aab0f83d2ee64a9d5)
  - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247528829&idx=4&sn=7f797d0ab74ad6557b362a607c35ad31)
- 楼兰学习网络安全
  - [ ] [墨菲SCA落地实践](https://mp.weixin.qq.com/s?__biz=Mzg4ODU4ODYzOQ==&mid=2247485131&idx=1&sn=6d8df5b785b9b810bbfd702589774a34)
- 看雪学苑
  - [ ] [TD路由器固件分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605737&idx=1&sn=ce9af549667ae62113de5e65263d618a)
  - [ ] [2025 最后一波高薪机会！网络安全/逆向开发/Android 岗速投](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605737&idx=2&sn=9fbf6cd126ec8ecdd75e91434dd8a89b)
  - [ ] [CISA将华硕恶意代码漏洞列入KEV名单](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605737&idx=3&sn=67acf1dbcec50f71ad78b37fa004a8d6)
- 山石网科安全技术研究院
  - [ ] [“银狐”系木马综合监测与防护报告](https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512779&idx=1&sn=4b615c35a961e7e4555adc8aa9ea167d)
- 迪哥讲事
  - [ ] [任意用户密码重置](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498815&idx=1&sn=0e7e3a692a04a88e8bc5026fd7679330)
- 天御攻防实验室
  - [ ] [NSA网攻中国国家时间中心涉及美国防部一项绝密计划](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486630&idx=1&sn=1880b8637b151cbe38e8a458f47d3245)
- OnionSec
  - [ ] [让IDA与AI IDE协作提高分析效率](https://mp.weixin.qq.com/s?__biz=MzUyMTUwMzI3Ng==&mid=2247485701&idx=1&sn=f52f013def97c43b8396769b95b2edf7)
- 360数字安全
  - [ ] [2025年AI安全重大事件盘点：技术失控与监管升级的博弈之年](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247583425&idx=1&sn=24c1e968e22a6195b5dc8729af3e1072)
- 纽创信安
  - [ ] [喜报！纽创信安荣获央行2024年度金融科技发展奖](https://mp.weixin.qq.com/s?__biz=MzAwNTczMjAzMg==&mid=2650240721&idx=1&sn=73844d909927fa1f43e690eefa983246)
- IntelTechniques Blog
  - [ ] [Book Store Updates](https://inteltechniques.com/blog/2025/12/19/book-store-updates/)
- 360威胁情报中心
  - [ ] [APT-C-36（盲眼鹰）利用Hijackloader开展攻击活动](https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247507733&idx=1&sn=3d730c508c604d313fa8b3a035ba9d44)
- Over Security - Cybersecurity news aggregator
  - [ ] [Hundreds of Cisco customers are vulnerable to new Chinese hacking campaign, researchers say](https://techcrunch.com/2025/12/19/hundreds-of-cisco-customers-are-vulnerable-to-new-chinese-hacking-campaign-researchers-say/)
  - [ ] [Microsoft confirms Teams is down and messages are delayed](https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-teams-is-down-and-messages-are-delayed/)
  - [ ] [DOJ charges gang for ATM hacks using Ploutus malware](https://therecord.media/doj-charges-gang-malware-ploutus)
  - [ ] [Nigeria arrests dev of Microsoft 365 'Raccoon0365' phishing platform](https://www.bleepingcomputer.com/news/security/nigeria-arrests-dev-of-microsoft-365-raccoon0365-phishing-platform/)
  - [ ] [University of Sydney reports data breach affecting over 20,000 staff, affiliates](https://therecord.media/university-of-sydney-reports-data-breach)
  - [ ] [Nigeria arrests suspected RaccoonO365 phishing kit developer on tip from Microsoft, FBI](https://therecord.media/nigeria-raccoon-developer-tip)
  - [ ] [Microsoft 365 accounts targeted in wave of OAuth phishing attacks](https://www.bleepingcomputer.com/news/security/microsoft-365-accounts-targeted-in-wave-of-oauth-phishing-attacks/)
  - [ ] [Denmark summons Russian ambassador over alleged cyberattacks on water utility, elections](https://therecord.media/denmark-summons-russian-ambassador-cyberattack-elections)
  - [ ] [TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering](https://www.evilsocket.net/2025/12/18/TP-Link-Tapo-C200-Hardcoded-Keys-Buffer-Overflows-and-Privacy-in-the-Era-of-AI-Assisted-Reverse-Engineering/)
  - [ ] [Surfacing Threats Before They Scale: Why Primary Source Collection Changes Intelligence](https://flashpoint.io/blog/surfacing-threats-why-primary-source-collection-changes-intelligence/)
  - [ ] [Sintesi riepilogativa delle campagne malevole nella settimana del 13 – 19 dicembre](https://cert-agid.gov.it/news/sintesi-riepilogativa-delle-campagne-malevole-nella-settimana-del-13-19-dicembre/)
  - [ ] [Smart TV manufacturer ordered to stop collecting viewer data while court case proceeds in Texas](https://therecord.media/hisense-ordered-to-stop-data-collection-texas-lawsuit)
  - [ ] [New UEFI flaw enables pre-boot attacks on motherboards from Gigabyte, MSI, ASUS, ASRock](https://www.bleepingcomputer.com/news/security/new-uefi-flaw-enables-pre-boot-attacks-on-motherboards-from-gigabyte-msi-asus-asrock/)
  - [ ] [LLM e ransomware: la minaccia cambia marcia, ma senza cambiamenti radicali](https://www.cybersecurity360.it/news/llm-e-ransomware-la-minaccia-cambia-marcia-ma-senza-cambiamenti-radicali/)
  - [ ] [Una vulnerabilità di ASUS Live Update di sette anni fa viene ancora sfruttata](https://www.securityinfo.it/2025/12/19/una-vulnerabilita-di-asus-live-update-di-sette-anni-fa-viene-ancora-sfruttata/)
  - [ ] [Dismantling Defenses: Trump 2.0 Cyber Year in Review](https://krebsonsecurity.com/2025/12/dismantling-defenses-trump-2-0-cyber-year-in-review/)
  - [ ] [Over 25,000 FortiCloud SSO devices exposed to remote attacks](https://www.bleepingcomputer.com/news/security/over-25-000-forticloud-sso-devices-exposed-to-remote-attacks/)
  - [ ] [NIS2, ACN aggiorna le FAQ: la notifica degli incidenti non si appalta](https://www.cybersecurity360.it/legal/nis2-acn-aggiorna-le-faq-la-notifica-degli-incidenti-non-si-appalta/)
  - [ ] [AI e sregolatezza normativa](https://www.cybersecurity360.it/cultura-cyber/ai-e-sregolatezza-normativa/)
  - [ ] [Senate confirms new Pentagon CIO](https://therecord.media/senate-confirms-new-pentagon-cio)
  - [ ] [Criminal IP and Palo Alto Networks Cortex XSOAR integrate to bring AI-driven exposure intelligence to automated incident response](https://www.bleepingcomputer.com/news/security/criminal-ip-and-palo-alto-networks-cortex-xsoar-integrate-to-bring-ai-driven-exposure-intelligence-to-automated-incident-response/)
  - [ ] [Trump signs defense bill allocating millions for Cyber Command, mandating Pentagon phone security](https://therecord.media/trump-signs-ndaa-cyber-command)
  - [ ] [UK confirms Foreign Office hacked, says ‘low risk’ of impact to individuals](https://therecord.media/uk-foreign-office-hacked-china)
  - [ ] [Stealth in Layers: Unmasking the Loader used in Targeted Email Campaigns](https://cyble.com/blog/stealth-in-layers-unmasking-loader-in-targeted-email-campaigns/)
  - [ ] [Denmark blames Russia for destructive cyberattack on water utility](https://www.bleepingcomputer.com/news/security/denmark-blames-russia-for-destructive-cyberattack-on-water-utility/)
  - [ ] [New critical WatchGuard Firebox firewall flaw exploited in attacks](https://www.bleepingcomputer.com/news/security/watchguard-warns-of-new-rce-flaw-in-firebox-firewalls-exploited-in-attacks/)
  - [ ] [Cloud Atlas activity in the first half of 2025: what changed](https://securelist.com/cloud-atlas-h1-2025-campaign/118517/)
  - [ ] [Come anche le comunità per minori sono esposte a minacce cyber](https://www.guerredirete.it/come-anche-le-comunita-per-minori-sono-esposte-a-minacce-cyber/)
  - [ ] [Quando il dato viaggia chiuso: la non responsabilità del servizio di recapito](https://www.cybersecurity360.it/legal/privacy-dati-personali/quando-il-dato-viaggia-chiuso-la-non-responsabilita-del-servizio-di-recapito/)
  - [ ] [UE pronta alla guerra ibrida, di che si tratta: strumenti e scenari](https://www.cybersecurity360.it/cybersecurity-nazionale/ue-pronta-alla-guerra-ibrida-di-che-si-tratta-strumenti-e-scenari/)
  - [ ] [FTC: Instacart to refund $60M over deceptive subscription tactics](https://www.bleepingcomputer.com/news/legal/instacart-to-refund-60m-over-deceptive-subscription-tactics/)
  - [ ] [I cyber attacchi non vanno in vacanza](https://www.certego.net/blog/i-cyber-attacchi-non-vanno-in-vacanza/)
  - [ ] [India Criminalizes Tampering with Telecommunication Identifiers and Unauthorized Radio Equipment Under the Telecommunications Act](https://cyble.com/blog/telecommunications-act-sim-tampering-cybercrime/)
  - [ ] [Choose Your Fighter: A New Stage in the Evolution of Android SMS Stealers in Uzbekistan](https://www.group-ib.com/blog/mobile-malware-uzbekistan/)
  - [ ] [Yet another DCOM object for lateral movement](https://securelist.com/lateral-movement-via-dcom-abusing-control-panel/118232/)
  - [ ] [How to Protect Your Site From Content Sniffing with HTTP Security Headers](https://blog.sucuri.net/2025/12/how-to-protect-your-site-from-content-sniffing-with-http-security-headers.html)
  - [ ] [Windows 10 OOB update released to fix Message Queuing (MSMQ) issues](https://www.bleepingcomputer.com/news/microsoft/windows-10-oob-update-released-to-fix-message-queuing-msmq-issues/)
- Yak Project
  - [ ] [用 SyntaxFlow 规则“狩猎”逻辑漏洞](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529239&idx=1&sn=a68cf207a58a85fba0bddb5d0973c8b6)
- Qualys Security Blog
  - [ ] [Your Guide to PCI DSS 4.0.1 Web Application & API Controls—and a Simplified Path to Compliance](https://blog.qualys.com/category/product-tech)
- Securityinfo.it
  - [ ] [Una vulnerabilità di ASUS Live Update di sette anni fa viene ancora sfruttata](https://www.securityinfo.it/2025/12/19/una-vulnerabilita-di-asus-live-update-di-sette-anni-fa-viene-ancora-sfruttata/?utm_source=rss&utm_medium=rss&utm_campaign=una-vulnerabilita-di-asus-live-update-di-sette-anni-fa-viene-ancora-sfruttata)
- 悬镜安全
  - [ ] [国家级认可！悬镜安全情报能力斩获CNNVD一级贡献奖](https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647797340&idx=1&sn=02b76f5d9263306a704903cf93d4fb46)
- 白泽安全实验室
  - [ ] [伊朗APT组织MuddyWater利用新型UDP后门发起针对性网络攻击活动—每周威胁情报动态第251期（12.12-12.18）](https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492856&idx=1&sn=19bb7d88f0cd0f9e42a77a915791e9c3)
- ICT Security Magazine
  - [ ] [DORA compliance operativa: implementazione pratica per financial entities e test di resilienza](https://www.ictsecuritymagazine.com/articoli/dora-compliance/)
- T00ls安全
  - [ ] [破局者河图：专攻“疑难杂症”的实战派创业逻辑【T00ls人物专访第二十一期】](https://mp.weixin.qq.com/s?__biz=Mzg3NzYzODU5NQ==&mid=2247485560&idx=1&sn=d8cb0e14f3f3cbc6fd35d6fd62c0060a)
- SANS Internet Storm Center, InfoCON: green
  - [ ] [DLLs &#x26; TLS Callbacks, (Fri, Dec 19th)](https://isc.sans.edu/diary/rss/32580)
  - [ ] [ISC Stormcast For Friday, December 19th, 2025 https://isc.sans.edu/podcastdetail/9746, (Fri, Dec 19th)](https://isc.sans.edu/diary/rss/32586)
- IT Service Management News
  - [ ] [Gli uomini possono fare tutto (Dicembre 2025)](http://blog.cesaregallotti.it/2025/12/gli-uomini-possono-fare-tutto-dicembre.html)
  - [ ] [ETSI EN 304 223 per i requisiti di sicurezza per i sistemi e modelli di IA](http://blog.cesaregallotti.it/2025/12/etsi-en-304-223-per-i-requisiti-di.html)
  - [ ] [Implementing acts per eIDAS](http://blog.cesaregallotti.it/2025/12/implementing-acts-per-eidas.html)
- Schneier on Security
  - [ ] [Friday Squid Blogging: Petting a Squid](https://www.schneier.com/blog/archives/2025/12/friday-squid-blogging-petting-a-squid.html)
  - [ ] [AI Advertising Company Hacked](https://www.schneier.com/blog/archives/2025/12/ai-advertising-company-hacked.html)
- Instapaper: Unread
  - [ ] [New UEFI flaw enables pre-boot attacks on motherboards from Gigabyte, MSI, ASUS, ASRock](https://www.bleepingcomputer.com/news/security/new-uefi-flaw-enables-pre-boot-attacks-on-motherboards-from-gigabyte-msi-asus-asrock/)
  - [ ] [TP-Link Tapo C200 Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering](https://www.evilsocket.net/2025/12/18/TP-Link-Tapo-C200-Hardcoded-Keys-Buffer-Overflows-and-Privacy-in-the-Era-of-AI-Assisted-Reverse-Engineering/)
- Deeplinks
  - [ ] [Online Gaming’s Final Boss: The Copyright Bully](https://www.eff.org/deeplinks/2025/12/online-gamings-final-boss-copyright-bully)
  - [ ] [Speaking Freely: Sami Ben Gharbia](https://www.eff.org/deeplinks/2025/12/speaking-freely-sami-ben-gharbia)
- Krebs on Security
  - [ ] [Dismantling Defenses: Trump 2.0 Cyber Year in Review](https://krebsonsecurity.com/2025/12/dismantling-defenses-trump-2-0-cyber-year-in-review/)
- The Hacker News
  - [ ] [Russia-Linked Hackers Use Microsoft 365 Device Code Phishing for Account Takeovers](https://thehackernews.com/2025/12/russia-linked-hackers-use-microsoft-365.html)
  - [ ] [Cracked Software and YouTube Videos Spread CountLoader and GachiLoader Malware](https://thehackernews.com/2025/12/cracked-software-and-youtube-videos.html)
  - [ ] [WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability](https://thehackernews.com/2025/12/watchguard-warns-of-active-exploitation.html)
  - [ ] [Nigeria Arrests RaccoonO365 Phishing Developer Linked to Microsoft 365 Attacks](https://thehackernews.com/2025/12/nigeria-arrests-raccoono365-phishing.html)
  - [ ] [New UEFI Flaw Enables Early-Boot DMA Attacks on ASRock, ASUS, GIGABYTE, MSI Motherboards](https://thehackernews.com/2025/12/new-uefi-flaw-enables-early-boot-dma.html)
- Security Affairs
  - [ ] [CLOP targets Gladinet CentreStack servers in large-scale extortion campaign](https://securityaffairs.com/185875/cyber-crime/clop-targets-gladinet-centrestack-servers-in-large-scale-extortion-campaign.html)
  - [ ] [ASRock, ASUS, GIGABYTE, MSI Boards vulnerable to pre-boot memory attacks](https://securityaffairs.com/185867/security/asrock-asus-gigabyte-msi-boards-vulnerable-to-pre-boot-memory-attacks.html)
  - [ ] [China-linked APT UAT-9686 is targeting Cisco Secure Email Gateway and Secure Email and Web Manager](https://securityaffairs.com/185861/apt/china-linked-apt-uat-9686-is-targeting-cisco-secure-email-gateway-and-secure-email-and-web-manager.html)
- TorrentFreak
  - [ ] [“Vast” Anti-IPTV Piracy Operation Promised Ahead of AFCON 2025](https://torrentfreak.com/vast-anti-iptv-piracy-operation-promised-ahead-of-afcon-2025-2512219/)
  - [ ] [Crunchyroll Takedown Efforts Target Anime Torrent Client Hayase](https://torrentfreak.com/crunchyroll-takedown-efforts-target-anime-torrent-client-hayase/)
- The Register - Security
  - [ ] [ATM jackpotting gang accused of unleashing Ploutus malware across US](https://go.theregister.com/feed/www.theregister.com/2025/12/19/tren_de_aragua_atm/)
  - [ ] [WatchGuard sounds alarm as critical Firebox flaw comes under active attack](https://go.theregister.com/feed/www.theregister.com/2025/12/19/watchguard_firebox/)
  - [ ] [Sydney Uni data goes walkabout after criminals raid code repo](https://go.theregister.com/feed/www.theregister.com/2025/12/19/sydney_uni_breach/)
  - [ ] [HPE tells customers to patch fast as OneView RCE bug scores a perfect 10](https://go.theregister.com/feed/www.theregister.com/2025/12/19/hpe_oneview_rce_bug/)
  - [ ] [Ministers confirm breach at UK Foreign Office but details remain murky](https://go.theregister.com/feed/www.theregister.com/2025/12/19/uk_foreign_office_hack/)
  - [ ] [Faith in the internet is fading among young Brits](https://go.theregister.com/feed/www.theregister.com/2025/12/19/internet_bad_for_society/)
  - [ ] [AI and cybersecurity: Two sides of the same coin](https://go.theregister.com/feed/www.theregister.com/2025/12/19/ai_cybersecurity_two_sides/)
  - [ ] [China turns on a vast experimental network it says is an heir to ARPANET](https://go.theregister.com/feed/www.theregister.com/2025/12/19/china_environment_for_network_innovation/)
- Security Weekly Podcast Network (Audio)
  - [ ] [Auld Lang Syne, Ghostpairing, Centerstack, WAFS, React2Shell, Crypto, Josh Marpet... - SWN #539](http://sites.libsyn.com/18678/auld-lang-syne-ghostpairing-centerstack-wafs-react2shell-crypto-josh-marpet-swn-539)
- 网安寻路人
  - [ ] [数据角度的“大型网络平台”界定初探](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247508015&idx=1&sn=71596ea93bd587063df90925c97e343f)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[每日信息流] 2025-12-20 #1088

每日安全资讯（2025-12-20）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2025-12-20 #1088

Description

每日安全资讯（2025-12-20）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions