- SecWiki News
- 奇安信攻防社区
- CXSECURITY Database RSS Feed - CXSecurity.com
- Tenable Blog
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
- Doonsec's feed
- 英国魔菇贩子用假手套骗过指纹追踪，却栽在史上最大暗网扫荡行动上
- 【人物挖掘】美国网络安全和基础设施安全局局长
- Basic GNN Code Learning
- 25年度网安圈最大吃瓜，过于夸张，以至于难辨内容真假。
- 丝滑之swagger未授权到oss存储接管
- 【高危漏洞预警】金和OA BookUpdate.aspx SQL注入漏洞
- 【高危漏洞预警】用友NC OAUserQryServlet反序列化漏洞
- 望月塔 - 资产侦察平台
- “雅努斯计划”背景下，美大型科技公司在台民用核反应堆的战时军事化风险分析
- XSS括号与分号绕过高阶思路解析
- 中美稀土战争如何取胜?
- 内部专用-高级lnk快捷方式新技术
- 火锅小队WRITEUP
- u200bu200b10秒，5000美金：如何“秒破”银行AppPIN码
- 一名合格红队的成长之路
- 活动 | 2025上海企业AI & 数据安全创新实践研讨会
- 网安星播客 | 新形势下网络安全的困境与革新
- 免费赠送 | 诸子云星球福利大放送 · 个信隐私保护报告合集
- 熬过无人问津的日子，才有诗和远方
- 极思|10年进化史-从道理的信徒到人心的行者
- G.O.S.S.I.P 特别推荐 2025-10-21 海边的苹果安全会议：OBTS v8
- 2025强网杯S9WP
- JS逆向入门学习及靶场练习
- 在上海想做等保一级，应该怎么做？
- EDR对抗从入门到入狱之二: 回调机制
- edu证书站挖掘之学员分享案例
- 代码审计还在硬看？IAST动态扫描让甲方代码审计提效三倍！
- 最大化收集Vue框架(SPA类型)下的js
- “星火标识×”贯通应用案例07 | 标识助力线缆行业全链路转型升级
- Java源码，软硬件一体交付，包含大田灌溉、作物监控、虫害识别，轻松搞定智慧农业物联网项目
- DefenderWrite: 利用白名单程序实现任意文件写入
- 【工具分享】AutoCMD+ 安卓自动化工具
- 强推一个永久的攻防演练、渗透攻防知识库
- Powered by China Original！万径安全获国家级“小巨人”称号！
- 我中心首批获得个人信息保护合规审计服务专业机构认证
- 聚焦国改
- 网络安全培训圣经
- 国家授时中心遭受攻击的背后：核心风险与防范
- 专题·网络靶场 | 基于软件定义网络靶场构建的欺骗防御体系
- 专家解读 | 《国家能源局关于加强用户侧涉网安全管理的通知》
- 发布 | 中国移动发布《智慧城市低空应用人工智能安全白皮书》
- 评论 | “授时战”拉响网络空间安全新警报
- 专家解读 | 我国生成式人工智能用户规模实现翻一番
- 记一次edusrc超级简单的rce挖掘
- 数据无影 取证有痕 | 第二届“数证杯”电子数据取证分析大赛启动报名
- 从“策略对抗”到“模型对抗”：朴智平台如何重塑金融风控新范式？
- AWS服务大规模中断，基础设施故障影响全球企业
- Windows SMB漏洞遭野外利用（CVE-2025-33073），可导致权限提升
- 金融监管总局副局长肖远企谈AI与金融
- AI快讯：DeepSeek开源新模型，华为招募全球顶尖AI人才
- 宁波银行个人掌银AI工作台功能测试项目供应商召集
- 南天软件、科大讯飞、泰岳数科中标价公布！长城资管AI大模型应用平台及通用智能体建设采购项目
- 【安全圈】50万IP疯狂轰炸南美RDP服务
- 【安全圈】AWS核心云服务陆续恢复，部分地区仍不稳定
- 【安全圈】设计巨头Canva全球瘫痪数百万用户被迫停工
- 【安全圈】BitLocker启用再惹争议：用户重装系统后3TB数据被锁
- 无印良品等零售巨头被迫临时关停电商：因关键供应商遭勒索攻击
- 美国为破案强令OpenAI交用户数据：AI提示词锁定暗网罪犯
- 【已复现】Linux Kernel本地提权漏洞（CVE-2025-39682）
- Gartner观点：2026年十大战略技术趋势
- 多模态文本智能大模型前沿技术与应用论坛召开，合合信息推出多模态文本智能技术方案
- 启信宝数据透视电影行业“冰与火”：观影人次跌23%，企业数量增25%
- 2025年“互联网之光”博览会“网络安全主题展”报名攻略
- PMP双十一省钱攻略！
- DPO&CISSP只要1w元，这波优惠别家真的比不了
- 每周论文分享-5
- 国家授时中心遭受APT攻击背后：政企安全防护亟需体系化、全链路
- 泄露22万余人个人信息，知名医学检测机构被罚2700万元
- ConnectWise 修复 Automate RMM 工具中的严重漏洞
- Trustwave Blog
- Recent Commits to cve:main
- Private Feed for M09Ic
- github released v0.0.77 at github/spec-kit
- joaoviictorti starred 3a1/Elysium
- bolucat released 202510212035 at bolucat/Archive
- github released v0.0.73 at github/spec-kit
- killeven starred jedisct1/libsodium
- CHYbeta starred allegro/allegro-api
- Ridter forked Ridter/Hikari from KomiMoe/Hikari
- Rvn0xsy starred Meckazin/ChromeKatz
- LoRexxar starred yinkaisheng/Python-UIAutomation-for-Windows
- DVKunion starred mrexodia/ida-pro-mcp
- PrefectHQ released 3.4.25.dev4 at PrefectHQ/prefect
- Ascotbe starred zorgiepoo/Bit-Slicer
- su18 starred 0x7556/wolfshell
- esrrhs starred deepseek-ai/DeepSeek-OCR
- kyxiaxiang starred tandasat/HyperPlatform
- lz520520 forked lz520520/rust-ping from aisk/rust-ping
- Ascotbe starred 42arch/pokemon-dataset-zh
- joaoviictorti starred ekzhang/sshx
- Ridter starred TheWover/donut
- Armin Ronacher's Thoughts and Writings
- Microsoft Security Blog
- 罗朝辉（飘飘白云）
- Cerbero Blog
- Horizon3.ai
- Securelist
- GuidePoint Security
- Malwarebytes
- daniel.haxx.se
- VMRay
- Reverse Engineering
- Wallarm
- Inside Stormshield
- 奇客Solidot–传递最新科技情报
- 看雪学苑
- 绿盟科技CERT
- 威努特安全网络
- 安全分析与研究
- 天黑说嘿话
- 代码卫士
- 天御攻防实验室
- 安全内参
- 丁爸 情报分析师的工具箱
- 安全学术圈
- 中国信息安全
- 安全牛
- 微步在线
- 信息安全国家工程研究中心
- 知道创宇404实验室
- 虎符智库
- Checkmarx
- 情报分析师
- 极客公园
- 数世咨询
- 安全研究GoSSIP
- 墨菲安全
- Beacon Tower Lab
- 嘶吼专业版
- 专注安管平台
- 迪哥讲事
- 安全419
- 纽创信安
- 国家互联网应急中心CNCERT
- 网安国际
- 安全圈
- Over Security - Cybersecurity news aggregator
- Vidar Stealer 2.0 adds multi-threaded data theft, better evasion
- Over 108,000 Patients Affected by Ransomware Attack on Western Orthopaedics in Early September
- TP-Link warns of critical command injection flaw in Omada gateways
- Cursor, Windsurf IDEs riddled with 94+ n-day Chromium vulnerabilities
- CISA confirms hackers exploited Oracle E-Business Suite SSRF flaw
- Synthient Stealer Log Threat Data - 182,962,095 breached accounts
- Google finds Russian state hackers replacing burned malware with new tools
- Hackers exploit 34 zero-days on first day of Pwn2Own Ireland
- Microsoft: Recent Windows updates cause login issues on some PCs
- Russia pressures Apple to make Russian search engines default on locally-sold iPhones
- Russian hackers evolve malware pushed in "I am not a robot" captchas
- Apple alerts exploit developer that his iPhone was targeted with government spyware
- WhatsApp aziendale e privacy: perché serve il consenso per aggiungere dipendenti nei gruppi
- Maximizing gateway security: Beyond the basic configuration
- Conflitti CIO-CISO: quando il budget di sicurezza diventa ostaggio della trasformazione digitale
- Microsoft fixes bug preventing users from opening classic Outlook
- CISA Adds Oracle, Microsoft, Apple, Kentico Bugs to KEV Catalog
- Oltre il rilevamento e la risposta
- Tykit Analysis: New Phishing Kit Stealing Hundreds of Microsoft Accounts in Finance & Construction
- Videocamere di sorveglianza: un buco nero per la security?
- The evolving landscape of email phishing attacks: how threat actors are reusing and refining established techniques
- Reducing abuse of Microsoft 365 Exchange Online’s Direct Send
- Windows 11 KB5070773 emergency update fixes Windows Recovery issues
- Fusion Fireside #13: Insights from the Frontlines of Security with Keith Gordon
- Cyberattacchi: estorsioni e ransomware dietro la metà delle campagne malevole
- PassiveNeuron: a sophisticated campaign targeting servers of high-profile organizations
- La geopolitica nel report Acn di settembre: ritornano gli attacchi hacktivisti filorussi e pro-Hamas
- L’architettura della sicurezza: senza gestione degli asset non c’è cyber security
- Decoding UserAuthenticationMethod in Microsoft 365 audit logs: the bitfield mapping
- bRPC-Web: A Burp Suite Extension for gRPC-Web
- Exposing the Immediate Era Fraud in Singapore
- bellingcat
- TrustedSec
- Securityinfo.it
- ICT Security Magazine
- 360数字安全
- XCTF联赛
- SANS Internet Storm Center, InfoCON: green
- Have I Been Pwned latest breaches
- Troy Hunt's Blog
- Graham Cluley
- Trend Micro Research, News and Perspectives
- The Register - Security
- Restructuring risk operations: building a business-aligned cyber strategy
- Muji's minimalist calm shattered as ransomware takes down logistics partner
- Feds flag active exploitation of patched Windows SMB vuln
- How malware vaccines could stop ransomware's rampage
- Zero Trust Everywhere: a new era in cybersecurity for European organizations
- Anti-fraud body leaks dozens of email addresses in invite mishap
- Security Affairs
- TorrentFreak
- Schneier on Security
- Computer Forensics
- Full Disclosure
- SEC Consult SA-20251021-0 :: Multiple Vulnerabilities in EfficientLab WorkExaminer Professional (CVE-2025-10639, CVE-2025-10640, CVE-2025-10641)
- [SYSS-2025-017]: Verbatim Store 'n' Go Secure Portable HDD (security update v1.0.0.6) - Offline brute-force attack
- [SYSS-2025-016]: Verbatim Store 'n' Go Secure Portable SSD (security update v1.0.0.6) - Offline brute-force attack
- [SYSS-2025-015]: Verbatim Keypad Secure (security update v1.0.0.6) - Offline brute-force attack
- Malvuln - MISP compatible malware vulnerability intelligence feed now live
- BSidesSF 2026 CFP still open until October 28th
- Google Firebase hosting suspension / "malware distribution" bypass
- Information Security
- Technical Information Security Content & Discussion
- Microsoft 365 Copilot - Arbitrary Data Exfiltration Via Mermaid Diagrams
- Stealth BGP Hijacks with uRPF Filtering
- Casting a Net(ty) for Bugs, and Catching a Big One (CVE-2025-59419)
- [Article] Kerberos Security: Attacks and Detection
- CVE-2025-9133: ZYXEL Configuration Exposure via Authorization Bypass
- CVE-2025-8078: ZYXEL Remote Code Execution via CLI Command Injection
- Instapaper: Unread
- The Hacker News
- Meta Rolls Out New Tools to Protect WhatsApp and Messenger Users from Scams
- PolarEdge Targets Cisco, ASUS, QNAP, Synology Routers in Expanding Botnet Campaign
- Securing AI to Benefit from AI
- Google Identifies Three New Russian Malware Families Created by COLDRIVER Hackers
- Hackers Used Snappybee Malware and Citrix Flaw to Breach European Telecom Network
- Deeplinks
- Blackhat Library: Hacking techniques and research
- Your Open Hacker Community
- Deep Web
- Security Weekly Podcast Network (Audio)
- 字节跳动技术团队