[每日信息流] 2026-01-06 #1105
Description
每日安全资讯（2026-01-06）
- SecWiki News
- 奇安信攻防社区
- 先知安全技术社区
- Recent Commits to cve:main
- obaby@mars
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
- LevelBlue Blog
- Private Feed for M09Ic
- mgeeky starred jenish-sojitra/JSAnalyzer
- bolucat released 202601051941 at bolucat/Archive
- jar-analyzer released 5.12 at jar-analyzer/jar-analyzer
- joaoviictorti starred thecybersandeep/adbauditor
- niudaii starred nickscamara/open-deep-research
- Rvn0xsy starred anthropics/skills
- airbus-seclab released v4.6.0 at airbus-seclab/soxy
- mgeeky starred dis0rder0x00/DbgNexum
- timwhitez starred litespeedtech/lsquic
- Rvn0xsy starred gh0stkey/FuncExporter
- safedv starred klezVirus/inceptor
- PrefectHQ released 3.6.10.dev2 at PrefectHQ/prefect
- WAY29 starred eastxiaodong/ace-tool
- panjf2000 contributed to redis/redis
- gh0stkey starred Pennyw0rth/NetExec
- Ridter starred dis0rder0x00/DbgNexum
- gh0stkey starred xaitax/Chrome-App-Bound-Encryption-Decryption
- wuhan005 starred moeru-ai/airi
- joaoviictorti starred dtolnay/proc-macro2
- Rvn0xsy starred journey-ad/gemini-watermark-remover
- ElcomSoft blog
- Filippo Valsorda
- Horizon3.ai
- Toooold
- Bug Bounty in InfoSec Write-ups on Medium
- Bug Bounty Burnout Almost Killed My Motivation — Then This Logic Flaw Paid Me
- From Low to Medium - How a simple email injection earned me some $$$
- Cache Key Injection: Chaining Cache-Poisoning and CRLF Using an Unkeyed Parameter
- Key to the Kingdom: How I Found API Secrets Hiding in Plain Sight in JavaScript Files
- Cache Clash: How CDN Misconfigurations Let Me Hijack Thousands of User Sessions
- Malwarebytes
- HackerNews
- 奇客Solidot–传递最新科技情报
- 安全分析与研究
- 雷神众测
- 黑鸟
- 威努特安全网络
- 安全客
- 代码卫士
- 360漏洞云
- 安全内参
- 青山青吖
- 腾讯安全应急响应中心
- 奇安信 CERT
- 天黑说嘿话
- 吾爱破解论坛
- 中国信息安全
- 安全学术圈
- 安全圈
- 360Quake空间测绘
- 信息安全国家工程研究中心
- 看雪学苑
- 网安杂谈
- 数世咨询
- 安全牛
- 小米安全中心
- 极客公园
- 嘶吼专业版
- 阿里安全响应中心
- 情报分析师
- 火绒安全
- 威胁猎人Threat Hunter
- IntelTechniques Blog
- 360数字安全
- Securityinfo.it
- Over Security - Cybersecurity news aggregator
- Coupang, una violazione dati con terremoto al seguito: quale lezione dalla Corea del Sud
- Cloud file-sharing sites targeted for corporate data theft attacks
- ClickFix attack uses fake Windows BSOD screens to push malware
- Russian hackers target European hospitality industry with ‘blue screen of death’ malware
- US broadband provider Brightspeed investigates breach claims
- Hacktivist deletes white supremacist websites live on stage during hacker conference
- Justice Department Announces Actions to Combat Two Russian State-Sponsored Cyber Criminal Hacking Groups
- Exploit test (con ghostcat)
- VSCode IDE forks expose users to "recommended extension" attacks
- Analysis of PPPP “encryption”
- Cyberattack forces British high school to close
- Operazione Absolute Resolve per catturare Maduro: autopsia di una decapitazione strategica in ambiente multi-dominio
- Agentic AI Is an Identity Problem and CISOs Will Be Accountable for the Outcome
- Ledger customers impacted by third-party Global-e data breach
- EU looking ‘very seriously’ at taking action against X over Grok
- NordVPN denies breach claims, says attackers have "dummy data"
- Governance del rischio nei luoghi di lavoro e spettacolo: ecco perché serve una black box
- Nel 2026 sempre più attacchi autonomi AI-driven e deepfake: le previsioni di sicurezza di ClearSkies
- L’importanza dell’immutabilità assoluta nello storage di backup
- Il nuovo reato di deepfake: quando il diritto penale diventa l’ultima difesa dell’incertezza
- The DocuSign Impersonation Wave with Real-Time Customizable LogoKit
- Grave vulnerabilità nei chip Bluetooth Airoha: molti i marchi colpiti
- CNVD漏洞平台
- Schneier on Security
- SANS Internet Storm Center, InfoCON: green
- The Hacker News
- Russia-Aligned Hackers Abuse Viber to Target Ukrainian Military and Government
- Kimwolf Android Botnet Infects Over 2 Million Devices via Exposed ADB and Proxy Networks
- ⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & More
- The State of Cybersecurity in 2025: Key Segments, Insights, and Innovations
- Bitfinex Hack Convict Ilya Lichtenstein Released Early Under U.S. First Step Act
- New VVS Stealer Malware Targets Discord Accounts via Obfuscated Python Code
- Instapaper: Unread
- Gli attacchi informatici più devastanti del 2025
- Tracciare gli utenti su WhatsApp usando le ricevute di consegna
- AI giuridica perché i LLM non capiscono (ancora) le leggi e cosa serve per renderli affidabili
- The Worst Hacks of 2025
- Examining the IconCache database
- Introducing Elcomsoft Quick Triage
- All-In-One Password Recovery Pro 2025
- Security Affairs
- Russia-linked APT UAC-0184 uses Viber to spy on Ukrainian military in 2025
- Kimwolf botnet leverages residential proxies to hijack 2M+ Android devices
- The cybercriminal behind the 2016 Bitfinex hack has been released from prison early thanks to Trump’s 2018 First Step Act
- VVS Stealer, a new python malware steals Discord credentials
- Sedgwick discloses data breach after TridentLocker ransomware attack
- Daniel Miessler
- TorrentFreak
- The Register - Security
- Security Weekly Podcast Network (Audio)
- 网安寻路人