[每日信息流] 2025-12-22

# 每日安全资讯（2025-12-22）

- SecWiki News
  - [ ] [SecWiki News 2025-12-21 Review](http://www.sec-wiki.com/?2025-12-21)
- Doonsec's feed
  - [ ] [AI魔改OpenWrt系统(第7周)](https://mp.weixin.qq.com/s?__biz=MzU4MTgxNDc2MQ==&mid=2247486556&idx=1&sn=4e2f258c375add9256ed4a9c6c15752f)
  - [ ] [详解MagicDot漏洞及其利用手段](https://mp.weixin.qq.com/s?__biz=Mzk3NTM5MDA5MA==&mid=2247483837&idx=1&sn=fc345fd3a9bd0e97fab43e22a6021d0b)
  - [ ] [Azure AD Pentest Part 1](https://mp.weixin.qq.com/s?__biz=MzkyODI1MTgyNA==&mid=2247485222&idx=1&sn=81ec2c20eb88155a392b6f12084058d2)
  - [ ] [美国导弹防御体系中精密授时服务的作用及发射前破坏策略分析](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451184355&idx=1&sn=e6cf5b9b84552d7dd2955fc56418c85f)
  - [ ] [某大学数据泄露：开发阶段的数据安全，真的不重要吗？](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247492380&idx=1&sn=ae0e2436d74d3686b0cb238534d0be1b)
  - [ ] [javaweb笔记1](https://mp.weixin.qq.com/s?__biz=MzkzODYzNzQ5MQ==&mid=2247486591&idx=1&sn=608078a952712790ad9b27ee405badee)
  - [ ] [初中数论趣题](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488901&idx=1&sn=42a738f7d16b9ff50e2cfcd1c7dd12d9)
  - [ ] [分享的图片、视频、链接](https://mp.weixin.qq.com/s?__biz=MzU0MTA3OTU5Ng==&mid=2247571324&idx=1&sn=4c42d6f5c0b9cf2624073cd10000899a)
  - [ ] [奇安信为什么可以做到巅峰？](https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247493467&idx=1&sn=f2ce489bd378cba214986cb9cc230984)
  - [ ] [Sentinel：应急响应自动化分析工具](https://mp.weixin.qq.com/s?__biz=MzkxMDE5NTIyMA==&mid=2247485379&idx=1&sn=53cc456ebcec371cf6a9416b5088f903)
  - [ ] [冬至暖团圆，网安“饺”好运——这份安全“暖心包”请查收](https://mp.weixin.qq.com/s?__biz=MzU0MTA3OTU5Ng==&mid=2247571389&idx=1&sn=15d174f72ca8aa401a605702fdd35d73)
  - [ ] [冬至网络“防冻”指南：别让不法分子给你“加料”](https://mp.weixin.qq.com/s?__biz=MzU0MTA3OTU5Ng==&mid=2247571389&idx=2&sn=53032c45412ccf63b5dd3fb46285c2e1)
  - [ ] [CN某广电威胁情报](https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247488629&idx=1&sn=9007f58cad749217f2662bedd385bdce)
  - [ ] [移动安全 | 某APP逆向工程分析记录](https://mp.weixin.qq.com/s?__biz=Mzk1NzM3NTMyOA==&mid=2247484030&idx=1&sn=f5a0394a2fed9f6dd18a75831f28bba0)
  - [ ] [凌日网络与安全团队在重庆市大学生信息安全竞赛与“古剑山”第三届全国大学生网络攻防大赛获奖](https://mp.weixin.qq.com/s?__biz=MzkxNjcyMTc0NQ==&mid=2247484814&idx=1&sn=a136a3213990a8aadc8575242a8ff0f7)
  - [ ] [【大话工控安全】工业控制系统行业知识：电力行业通信安全标准IEC62351（GB/T 25320）-PART2](https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247485879&idx=1&sn=ec551ba97e443831b527e562c5b921af)
  - [ ] [推荐一本书--《AI驱动的企业安全：架构、方法论与实践》](https://mp.weixin.qq.com/s?__biz=Mzg4MzYwMTU0Mw==&mid=2247485008&idx=1&sn=2a9ef8260367f87f8764eee3b684b77e)
  - [ ] [小记一下Hexo Anzhiyu主题数学公式Katex和pjax冲突问题](https://mp.weixin.qq.com/s?__biz=MzE5MTEzNzcwNg==&mid=2247485289&idx=1&sn=cd478eef57ca4ded03dfaf3ab4977cf6)
  - [ ] [Music Scraper: NAS音乐刮削神器，发烧友快快搞起来！](https://mp.weixin.qq.com/s?__biz=MzA4MjkzMTcxMg==&mid=2449048409&idx=1&sn=e7772e0247d4220f7d35ebec23fd5846)
  - [ ] [没活了，随便发点CTF WP吧](https://mp.weixin.qq.com/s?__biz=MzAwNTc5MTMyNg==&mid=2247500666&idx=1&sn=fababf53540656681c3ec5e072d54864)
  - [ ] [Recorded Future发布2025年威胁情报现状报告](https://mp.weixin.qq.com/s?__biz=MzkzMTY0MDgzNg==&mid=2247485247&idx=1&sn=01ca5523fb7dce2a7ce057fb96ccb0ac)
  - [ ] [点赞！国产企业AIoT物联网平台，支持百万级设备连接、物模型、规则引擎、OTA升级、Web可视化大屏](https://mp.weixin.qq.com/s?__biz=MjM5OTA4MzA0MA==&mid=2454943607&idx=1&sn=dda60d2341f372745e70c8cc0ce23084)
  - [ ] [江苏银行大模型信贷审查辅助服务入选省级创新应用，审批能力预计提升40%](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653933259&idx=1&sn=7cd39f6a65a3da8b53556237f971f18e)
  - [ ] [498万！天津银行AI智算基础建设-GPU资源池采购项目](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653933259&idx=2&sn=68ccf2e3efc503e3ac61a276aa3c65fc)
  - [ ] [广电五舟395.8万中！AI算力服务器及配套服务采购项目](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653933259&idx=3&sn=7c7500af8d5bed0a324a01730cf134bd)
  - [ ] [云上攻防｜打穿某地区智慧停车小程序](https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247525695&idx=1&sn=eb9959a668733040b70d7407904805ab)
  - [ ] [RansomHouse 通过多层数据处理升级加密技术](https://mp.weixin.qq.com/s?__biz=MzIxNDg5ODQxMg==&mid=2247483823&idx=1&sn=c8db4a3192f877b27105fcb65cf14b01)
  - [ ] [34岁年薪40W，蔚来和小鹏新Offer(70W+)，该不该跳？](https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247546484&idx=1&sn=dce83dd59d63834c1f6afa707e9a76cf)
  - [ ] [大疆网络安全T2薪资](https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247546484&idx=2&sn=66e4b1bc0fe4ae0b86e52bbbaf58d389)
  - [ ] [基于人工智能的海上自主水面船舶（MASS）网络安全系统研发与验证](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247629636&idx=1&sn=5fd9b9f3539da4a7334bda3a74a0e0c2)
  - [ ] [智能船舶网络安全与系统防护专项培训课程 2025](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247629636&idx=2&sn=17248dcefed2f5ceec8b2ae03ca96f0e)
  - [ ] [国际港口协会（IAPH）：海运供应链新兴技术网络弹性指南](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247629636&idx=3&sn=900b304f41679694e478d1860d6fef23)
  - [ ] [网安原创文章推荐【2025/12/20】](https://mp.weixin.qq.com/s?__biz=MzAxNzg3NzMyNQ==&mid=2247491951&idx=1&sn=df593958767a8240bb30a4d8949afd70)
  - [ ] [算力网络 控制器技术要求；智算安全可信行业观察](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655295657&idx=1&sn=42fb99a23dcd29bc492c4bed6402f5d8)
  - [ ] [CISSP复习题及答案解析-人员安全与风险管理](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655295657&idx=2&sn=172621134597427d7cda70f526e63ea5)
  - [ ] [冬至阳生，网安护航——在最长夜守护最长情的温暖](https://mp.weixin.qq.com/s?__biz=MzU0MTA3OTU5Ng==&mid=2247571273&idx=1&sn=4ec43116307b1c30b422525ce43f0c45)
  - [ ] [110毫秒的真相：亚马逊如何利用\"延迟\"捕获朝鲜间谍](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332681&idx=1&sn=f3b4d860ef790d55652eb5a4aeca8e97)
  - [ ] [DIG AI：犯罪组织与恐怖分子正在利用不受监管的暗网AI助手](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332681&idx=2&sn=c9c48d08190ed841125a77a380a8f452)
  - [ ] [每周PDF资源：Gemini AI安全性与红队报告；大模型双向隐私授权；红蓝对抗常见技战法；容器镜像瘦身指南；安全开发手册](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332681&idx=3&sn=5ae93097478b752f1fe82cb989d67ef3)
  - [ ] [别只看电影里的黑客！你也可以试试 Kali Linux](https://mp.weixin.qq.com/s?__biz=MzkwOTU5Mjk5MA==&mid=2247486874&idx=1&sn=43f328f3625e3828650040f2260d587f)
  - [ ] [MiaoMeow:一个萌芽阶段的Linux远程管理工具](https://mp.weixin.qq.com/s?__biz=MzE5MTc1MTI2Mg==&mid=2247483692&idx=1&sn=74f533cf0bda899f3d31e7442aaf9a1c)
  - [ ] [GitHub上所有CVE漏洞利用合集-并持续更新](https://mp.weixin.qq.com/s?__biz=MzUzNDczNjQ2OQ==&mid=2247486028&idx=1&sn=7895f3743c1c751042ae9de2e50f7e1d)
  - [ ] [Python 的 filter 函数](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649473043&idx=1&sn=eaa1066f39759a6359ae17941fb9f5d3)
- Recent Commits to cve:main
  - [ ] [Update Sun Dec 21 11:24:46 UTC 2025](https://github.com/trickest/cve/commit/d089803534603481908774ead3da7a985305d327)
- CXSECURITY Database RSS Feed - CXSecurity.com
  - [ ] [openSIS Community Edition 8.0 SQL Injection](https://cxsecurity.com/issue/WLB-2025120022)
  - [ ] [cmkoo - SQL Injection](https://cxsecurity.com/issue/WLB-2025120021)
  - [ ] [HEUR.Backdoor.Win32.Poison.gen / Arbitrary Code Execution](https://cxsecurity.com/issue/WLB-2025120020)
  - [ ] [Backdoor.Win32.ControlTotal.t / Insecure Credential Storage / MVID-2025-0702](https://cxsecurity.com/issue/WLB-2025120019)
- Private Feed for M09Ic
  - [ ] [bolucat released 202512211935 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202512211935)
  - [ ] [CHYbeta starred CyberSecurityUP/NeuroSploit](https://github.com/CyberSecurityUP/NeuroSploit)
  - [ ] [Ridter starred exo-explore/exo](https://github.com/exo-explore/exo)
  - [ ] [gh0stkey starred cage1016/alfred-devtoys](https://github.com/cage1016/alfred-devtoys)
  - [ ] [ourren starred JarryShaw/darc](https://github.com/JarryShaw/darc)
  - [ ] [niudaii starred productdevbook/port-killer](https://github.com/productdevbook/port-killer)
  - [ ] [CHYbeta starred FunnyWolf/agentic-soc-platform](https://github.com/FunnyWolf/agentic-soc-platform)
  - [ ] [WAY29 starred argonui/SCED](https://github.com/argonui/SCED)
  - [ ] [mgeeky starred we-promise/sure](https://github.com/we-promise/sure)
- Y4tacker:Hacking The World!
  - [ ] [浅析帆软前台表达式注入&WAF-Bypass](https://y4tacker.github.io/2025/12/21/year/2025/12/%E6%B5%85%E6%9E%90%E5%B8%86%E8%BD%AF%E5%89%8D%E5%8F%B0%E8%A1%A8%E8%BE%BE%E5%BC%8F%E6%B3%A8%E5%85%A5/)
- 奇客Solidot–传递最新科技情报
  - [ ] [AI 公司对 AGI 的警告是为了掩盖对权力的争夺](https://www.solidot.org/story?sid=83113)
- 安全分析与研究
  - [ ] [SideWinder APT组织针对我国军工某次攻击活动分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494916&idx=1&sn=bdfac71c13063f80c2e2563eacb0fb43)
- 黑海洋Wiki | Web开发工具包 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台
  - [ ] [Cloudflare部署的导航项目](https://blog.upx8.com/4927)
- 黑鸟
  - [ ] [美国导弹防御体系中精密授时服务的作用及发射前破坏策略分析](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451184355&idx=1&sn=e6cf5b9b84552d7dd2955fc56418c85f)
- 锦行科技
  - [ ] [冬至已至，春归有期](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247494506&idx=1&sn=94629ac27181bed9849d128fd8da2dc7)
- 天御攻防实验室
  - [ ] [传奇黑客 ｜ 马拉加病毒作者之谜](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486636&idx=1&sn=657976d33a6a228a8f0b555271120744)
- 丁爸 情报分析师的工具箱
  - [ ] [【情报知识】战术、战役、战略情报/间谍](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651153360&idx=1&sn=7837ef471e6b4affe2c147750122536c)
  - [ ] [【培训】第16期开源情报能力培训班1月北京开班](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651153360&idx=2&sn=adb3688b7a496f3d750d4a22b8d6073e)
- 威努特安全网络
  - [ ] [威努特DeepSeek一体机助力企业打造AI管理新范式](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651138729&idx=1&sn=1fccbeaf236453ad16ceae2eda79ada6)
- 安全圈
  - [ ] [【安全圈】某国企海外子公司疑遭数据泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073315&idx=1&sn=19f4504f34fde82fdf1315b4ab2cb8e4)
  - [ ] [【安全圈】服务器瘫痪近200小时！原因竟是...](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073315&idx=2&sn=706e0e6eafd4b6180c04bc8c27a6ab1e)
  - [ ] [【安全圈】朝鲜黑客2025年盗走20.2亿美元加密货币](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073315&idx=3&sn=b51ec4cafcc0665769f9e7345bca48d6)
- 信息安全国家工程研究中心
  - [ ] [【二十四节气】冬至 | 黄钟应律好风催，阴伏阳升淑气回。](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247502494&idx=1&sn=517d752e84f9e1a4e91ae5e6544d091a)
- 极客公园
  - [ ] [明年手机 PC 全线涨价，这个锅，AI 必须得背](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653095201&idx=1&sn=e1c447388143568f68f16e52816d5e8c)
  - [ ] [马斯克转发宇树机器人伴舞王力宏视频；内存涨价将致明年PC涨价15-20%；美法院将重审App Store垄断指控 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653095200&idx=1&sn=4dd2f36221c8105be485f008d729de5d)
- 情报分析师
  - [ ] [魔鬼藏在细节里，情报分析如何战胜认知偏见！](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650564535&idx=1&sn=87cf06c32f75b5783fc6297c04cdf2d4)
- 火绒安全
  - [ ] [冬至 | 冬至大如年 护网永周全](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247528984&idx=1&sn=7122a5f1766a3761671c3b2a51a272a3)
  - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247528984&idx=2&sn=3b7f3ac28e6878c0aa96e19682127842)
- 电子物证
  - [ ] [【Word、Excel 与压缩包（含伪加密）解密】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048848&idx=1&sn=896c39adf669183c994518a29181228c)
  - [ ] [【快速解锁 iTunes 备份文件密码】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048848&idx=2&sn=3f8665069cdfc0a8def94e963baaecab)
- 41group
  - [ ] [MiaoMeow:一个萌芽阶段的Linux远程管理工具](https://mp.weixin.qq.com/s?__biz=Mzk0ODUxNzgyOQ==&mid=2247484271&idx=1&sn=bc955daef9ff3a564cbd0e30f7912f85)
- 迪哥讲事
  - [ ] [意想不到的账号信息泄露](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498825&idx=1&sn=9b836ed5406f6120db5c636ffb3a4d3a)
- T00ls安全
  - [ ] [T00ls祝福所有朋友2025🔯冬至快乐❄❄❄⛄⛄⛄](https://mp.weixin.qq.com/s?__biz=Mzg3NzYzODU5NQ==&mid=2247485575&idx=1&sn=d3a312682fbf05039821848596667edb)
- The Hacker News
  - [ ] [Iranian Infy APT Resurfaces with New Malware Activity After Years of Silence](https://thehackernews.com/2025/12/iranian-infy-apt-resurfaces-with-new.html)
- TorrentFreak
  - [ ] [Video Game Giants Suddenly Have RuTracker in their Crosshairs Again](https://torrentfreak.com/video-game-giants-suddenly-have-rutracker-in-their-crosshairs-251221/)
- Security Affairs
  - [ ] [SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 76](https://securityaffairs.com/185939/malware/security-affairs-malware-newsletter-round-76.html)
  - [ ] [Security Affairs newsletter Round 555 by Pierluigi Paganini – INTERNATIONAL EDITION](https://securityaffairs.com/185930/breaking-news/security-affairs-newsletter-round-555-by-pierluigi-paganini-international-edition.html)
  - [ ] [Massive Android botnet Kimwolf infects millions, strikes with DDoS](https://securityaffairs.com/185921/malware/massive-android-botnet-kimwolf-infects-millions-strikes-with-ddos.html)
- The Register - Security
  - [ ] [Google sends Dark Web Report to its dead services graveyard](https://go.theregister.com/feed/www.theregister.com/2025/12/21/infosec_news_in_brief/)
  - [ ] [NIST tried to pull the pin on NTP servers after blackout caused atomic clock drift](https://go.theregister.com/feed/www.theregister.com/2025/12/21/nist_ntp_outage_warning/)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[每日信息流] 2025-12-22 #1090

每日安全资讯（2025-12-22）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2025-12-22 #1090

Description

每日安全资讯（2025-12-22）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions