# 每日安全资讯（2025-09-14） - SecWiki News - [ ] [SecWiki News 2025-09-13 Review](http://www.sec-wiki.com/?2025-09-13) - Doonsec's feed - [ ] [内网穿透|无需域名的十多款内网穿透方案选择](https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487865&idx=1&sn=819064b194168314d0fa3b8b0e392ce6) - [ ] [HTB - SoulMate](https://mp.weixin.qq.com/s?__biz=Mzk1Nzk3MjA5Ng==&mid=2247486557&idx=1&sn=feaa4b78bfee40aaf2dbc025fa77d2ce) - [ ] [多媒体格式转换软件！File Converter！](https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247488435&idx=1&sn=00c899496425e957ed1199053ddbe633) - [ ] [【java代码审计】你来你也行](https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247492168&idx=1&sn=e658c423b5745863533f09944ca61b6a) - [ ] [一文解读MCP和A2A协议](https://mp.weixin.qq.com/s?__biz=MzkzMjcwMTc2OA==&mid=2247483937&idx=1&sn=c1ff99b7ec6b5838a28a050951dc622c) - [ ] [中国科学技术大学 | 基于流间时空关联分析的图神经网络网站指纹识别方法](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493728&idx=1&sn=1d501d50b34701aaa1643008b1c2721f) - [ ] [渗透Tips：Rails的任意文件读取](https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247485289&idx=1&sn=3cf177f40617a03aa89b2d5aabd08492) - [ ] [别让 JDBC 成为后门：DataEase 多处 RCE 漏洞解读与加固清单（CVE-2025-(53004-53006)）](https://mp.weixin.qq.com/s?__biz=MzkwMDcyMjQxOQ==&mid=2247484537&idx=1&sn=160b48e8468b839e4ad419703f5aa3e2) - [ ] [0057.权限提升和 CSRF 绕过允许攻击者无权限更改团队角色](https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647691003&idx=1&sn=02e3c64a3321a03caebb83526af1993a) - [ ] [AI红队，PaloAlto的观点和实践](https://mp.weixin.qq.com/s?__biz=Mzg5NTMxMjQ4OA==&mid=2247486313&idx=1&sn=6814a576d0f6cf66896982a9f6f8ce90) - [ ] [堪萨斯州立大学陈明明课题组PhD招生（网络与系统安全方向，2026 Spring/Fall）](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500691&idx=1&sn=6a9741c4037b26bc45b0e7c07d74b7dc) - [ ] [3000万科研项目，竟然让这家公司直接倒闭](https://mp.weixin.qq.com/s?__biz=MzI1NjQxMzIzMw==&mid=2247498159&idx=1&sn=aecea5a77d8c0b3995d01edec87703da) - [ ] [60页PPT DeepSeek 驱动的企业级 RAG 及 MCP和A2A时代开发新范式](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655291376&idx=1&sn=8c6b0b76d5a1b81951f0eb2e8ff98518) - [ ] [人工智能、算力算网 今天上传文件列表](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655291376&idx=2&sn=e6d93ab2f91c09f0b3488ccc7a27dff5) - [ ] [ETH Zurich 披露 VMSCAPE 漏洞：AMD 与 Intel CPU 存在虚拟化隔离缺陷](https://mp.weixin.qq.com/s?__biz=MzU2MDE2MjU1Mw==&mid=2247486703&idx=1&sn=594fa79e59dbc4e0f2cbb12270ff9b54) - [ ] [安全动态丨网络空间安全动态第285期](https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247521550&idx=1&sn=02b3cb826123328c2a4218164c99e332) - [ ] [每周网络安全简讯 ( 2025年 第37周 )](https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247521550&idx=2&sn=52fde25f0b8dade0534779316750b134) - [ ] [代码审计-PHP专题&原生开发&SQL注入&1day分析构造&正则搜索&语句执行监控&功能定位](https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247485685&idx=1&sn=88fd95d06126e745aa0786d47e56855a) - [ ] [新型 HybridPetya 勒索软件可绕过 UEFI 安全启动](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247502809&idx=1&sn=6573586ff80dbbbdf85a08770286eff9) - [ ] [新的 HTTP/2“MadeYouReset”漏洞可引发大规模 DoS 攻击](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247532718&idx=2&sn=73699dac09767c3b8b381f5b78ebbd30) - [ ] [CVE-2025-57833｜Django SQL 注入漏洞（POC）](https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486170&idx=1&sn=794720918704c683160b7a21be5b7abb) - [ ] [CVE-2025-53772｜Web 部署远程代码执行漏洞](https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486170&idx=2&sn=bb1988be1ba6abd51bd408ef178db488) - [ ] [Vulnhub-Tr0ll3](https://mp.weixin.qq.com/s?__biz=Mzg5MDk4MzkyMA==&mid=2247485043&idx=1&sn=0d014bad5e1c1b2eec75f15d8e500f4f) - [ ] [开源｜如何通过AI挖掘浏览器漏洞](https://mp.weixin.qq.com/s?__biz=MzkyMzI3OTY4Mg==&mid=2247486975&idx=1&sn=7d3b665a5a449a22058dfba09ffceac5) - [ ] [宣传一下](https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519767&idx=1&sn=17c49d55b22aaf4f4772e1c834c25939) - [ ] [平安SRC线下沙龙-9.19](https://mp.weixin.qq.com/s?__biz=MzkwMDQ4MDU2MA==&mid=2247484443&idx=1&sn=4dd4144004df4f6b02a40d0a011424c0) - [ ] [ctftools-all-in-oneV8.4研发进度2、hacker-toolsV6研发进度1](https://mp.weixin.qq.com/s?__biz=MzI1NzUxOTUzMA==&mid=2247486352&idx=1&sn=531e90dffdca4db469e0a310cf495255) - [ ] [敏感信息管理工具-微信｜钉钉｜飞书](https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491400&idx=1&sn=0a65d84194f02d9d5788d25492e59d11) - [ ] [CPU、操作系统、数据库已有99款产品通过测评](https://mp.weixin.qq.com/s?__biz=MzU3MDEwMjk2MQ==&mid=2247485234&idx=1&sn=747f1822db383cf76d7283462981aff5) - [ ] [【攻防实战】记一次攻防实战全流程](https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247503708&idx=1&sn=b29aec591f7fc650a6f0ab729eb1ab42) - [ ] [Microsoft Windows Defender 存在防火墙允许权限提升漏洞](https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096503&idx=1&sn=f994f7e1803d0b49b72c01a675517002) - [ ] [NVIDIA NVDebug工具存在漏洞，攻击者可借此实现系统权限提升](https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096503&idx=2&sn=514494383b92b3a0edbe15d65cf90ab5) - [ ] [走出舒适区的快乐！](https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247491919&idx=1&sn=daf54f4013e20bb037acd591cdf61671) - [ ] [【AI 砺刃，实战攻防】平安SRC白帽子沙龙第十期，重磅来袭！](https://mp.weixin.qq.com/s?__biz=MzIzODAwMTYxNQ==&mid=2652145613&idx=1&sn=8816d88e11726671e63c5ad386e23274) - [ ] [撞大运之getshell](https://mp.weixin.qq.com/s?__biz=MzE5ODc3ODY1NA==&mid=2247483912&idx=1&sn=7a4fb4f03fd4e7d8cf49232961619dc6) - [ ] [互联网幽灵：Carna僵尸网络的秘密普查](https://mp.weixin.qq.com/s?__biz=MzkxMDc0NjM0Mg==&mid=2247484393&idx=1&sn=1770a5ffb066a64dd91585f98b8231e8) - [ ] [软件 | 300款红客专用软件 网络安全](https://mp.weixin.qq.com/s?__biz=MzkxMDc0NjM0Mg==&mid=2247484393&idx=2&sn=9a8179f6102e014030764b03e4540f4a) - [ ] [书籍 | 1000本电子书及学习笔记，重点难点一网打尽](https://mp.weixin.qq.com/s?__biz=MzkxMDc0NjM0Mg==&mid=2247484393&idx=3&sn=a6bebb1d00d3e3e47a13a2bf7a03b974) - [ ] [资料 | 900G红客技术视频教程 网络安全](https://mp.weixin.qq.com/s?__biz=MzkxMDc0NjM0Mg==&mid=2247484393&idx=4&sn=a3e705aa2199161c06a47a06d885077d) - [ ] [邮储银行全面拥抱“AI+”，成立企业级大模型工作组](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932668&idx=1&sn=c37701dcbdde0574e0fd6ac2e90a19aa) - [ ] [170万！东方证券2025年智能投顾服务平台（金融大模型和智能体工坊）采购项目](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932668&idx=2&sn=0b734d58e5409caf59effd8db9abc7fd) - [ ] [火山引擎88万中标国信证券AI智能体运营平台项目](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932668&idx=3&sn=6c4dd25e77ec9b0ff8c0d9bcadce3548) - [ ] [SDL序列课程-第55篇-安全需求-开发接口需求-设计接口需要有身份认证，对来源授权，只允许授权的IP访问](https://mp.weixin.qq.com/s?__biz=Mzk0NzE5NjI0Mg==&mid=2247484900&idx=1&sn=fed7ebe37375fe11627ed88217583799) - [ ] [RCE 漏洞](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498181&idx=1&sn=1f1fa5d85568bd16a7758a1802a0b003) - [ ] [攻防技战术动态一周更新 - 20250908](https://mp.weixin.qq.com/s?__biz=MzkzODc4NjE1OQ==&mid=2247484065&idx=1&sn=398f84e3a893b9f56b87f72db33a5fe0) - [ ] [整合Kali Linux与DeepSeek实现自动化攻击，AI渗透工具Villager下载量破万](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327564&idx=1&sn=1c8547e5342dc8c9f69b9b4645ebfed4) - [ ] [FreeBuf周报 | 微软疑似出现重大网络安全过失；iPhone17史上最重要安全升级](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327564&idx=2&sn=3bab556952bc279dabb2ecdb71c03f1f) - [ ] [新型HybridPetya恶意软件利用UEFI漏洞绕过老旧系统的安全启动机制](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327564&idx=3&sn=fc5c50e3e2eb476c5df7d47b09176a12) - [ ] [100页PPT 企业架构规划设计方案](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655291318&idx=1&sn=37eba1cbcb901e5f418094421dbd4450) - [ ] [网络安全运营运维 今天上传文件列表](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655291318&idx=2&sn=ee258a5593e5204006de9764186b54d7) - [ ] [网络安全知识星球](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655291318&idx=3&sn=93cf40bae084d5d4fab34846ad01f334) - [ ] [美军软件现代化回顾总结之一：支柱](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651621776&idx=1&sn=67b3beb812c7ef396ad6fff24cba745e) - [ ] [补充上篇-forensic部分的bademail-不懂逆向也能分析溯源-想成为蓝中高的都看过来](https://mp.weixin.qq.com/s?__biz=Mzk4ODEwNjkxNg==&mid=2247484071&idx=1&sn=6b7f9c7d4eb2e7484b255075ba8e9047) - [ ] [安全启动（SecureBoot）通识](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247559711&idx=1&sn=645543ca78594cc032f98d7200e45dc1) - [ ] [拆解特斯拉第四代驱动单元](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247559711&idx=2&sn=0b86f7e9b4e0f6b8e13751b7bfd4d032) - [ ] [Dropping-elephant rat恶意样本分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599792&idx=1&sn=9a04f285ae4a2522d6e3bbb89c253224) - [ ] [《进阶逆向工程实战》：解锁逆向技术的全链路实战能力](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599792&idx=2&sn=0396179bba45d91c537bd9f953f78534) - [ ] [在看 | 周报：民警非法倒卖公民个人信息获刑；迪奥（上海）公司未依法履行个人信息保护义务被查处](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643525&idx=1&sn=1778b1fe678b9539c86fc1564a775add) - [ ] [在看 | 厂商：本周热门网络安全产业动态](https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247643525&idx=2&sn=0d8761d24c474d89c5254d097dcf31eb) - [ ] [安全大事件！！！！](https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485327&idx=1&sn=605e0e640586b1207e087e8587f43f19) - [ ] [2024年美国间谍软件公司投资者数量增长近两倍](https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247486790&idx=1&sn=36989d344467c4560ede68af1c588973) - [ ] [以赛育才｜山石网科技术支持2025交通运输网络安全大赛顺利举办](https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661302774&idx=1&sn=e45bd82d272ccb82b175faefb922e805) - [ ] [2025最新保姆级Metasploit安装教程！黑客网安必要掌握的工具之一](https://mp.weixin.qq.com/s?__biz=MzkzMzkyNTQ0Ng==&mid=2247484712&idx=1&sn=02b3b55f63495ebe2555ae7d548744c2) - [ ] [20种渗透测试最常见的攻击手法详细图解！](https://mp.weixin.qq.com/s?__biz=MzkzODU5MTkyNQ==&mid=2247486140&idx=1&sn=bfd82bc3faee53c78c4469f3c5956ceb) - [ ] [【招聘】中国电信集团—北京网络安全技术中心招人](https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247496795&idx=1&sn=b8d856781bf143ebe5eefc7f648539e9) - [ ] [从网络安全角度复盘罗永浩大战西贝莜面](https://mp.weixin.qq.com/s?__biz=MzkzMDY2MDA2Ng==&mid=2247486168&idx=1&sn=22e931c4dbe1476f1a9279eb4a383bf3) - [ ] [“同城约炮”陷阱：23 万背后的诈骗套路剖析](https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247518271&idx=1&sn=1572e61c6e6ebf473fad03e4bf3a2df6) - [ ] [《中华人民共和国网络安全法（修正草案）》征求意见](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649174462&idx=1&sn=e3fad16512742db0ef901209e0d51a47) - [ ] [网络安全法修正草案引热议：加大处罚力度 强化源头治理](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649174462&idx=2&sn=94024b9f7ccb1de0ea0ed98dfb2ce5d5) - [ ] [国家网信办发文征求意见：大型网络平台设立个人信息保护监督委员会](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649174462&idx=3&sn=4e966d55c2c51a4b501678906e23c191) - [ ] [2025 北外滩网络安全论坛 | 昆仑芯：以技术突破推动 AI 算力创新](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664249019&idx=1&sn=73f164877e9b575c1710e96df87b1bbc) - [ ] [专家解读｜健全企业个人信息保护监督委员会制度 构建多元共治的个人信息保护治理体系](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664249019&idx=2&sn=253408926bdded181f01acc074e2c05e) - [ ] [聚焦 | AI如何守护人类健康？2025外滩大会热议医疗AI伦理](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664249019&idx=3&sn=ff3677949bf65b1f258a802a927ec88f) - [ ] [开学季·反诈必修课！大学生必看《一堂反诈课》上线](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664249019&idx=4&sn=d18a78ba4abc58804f49ed5731360f91) - [ ] [【文摘】《然后，我就一个人了》](https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247486088&idx=1&sn=6c2b9ad670dc9e92f5c11f5fe3b5f59f) - [ ] [筑梦网络安全，你的下一站由此启程！——网络安全实验室招新啦](https://mp.weixin.qq.com/s?__biz=Mzg5MzA1MDIzMg==&mid=2247498752&idx=1&sn=853cd6381955aa7bed39b3174d146e1b) - [ ] [php反序列化之字符逃逸题目](https://mp.weixin.qq.com/s?__biz=Mzg5MzUzMDQ1NA==&mid=2247484987&idx=1&sn=33f3dd316e71c3bd41280b0f6b2f727f) - [ ] [国家网络安全宣传周，DeepPhish鼎力相助](https://mp.weixin.qq.com/s?__biz=Mzk2NDA1MjM1OQ==&mid=2247485040&idx=1&sn=ed99c7b6461ccb5d1ebe2e543741bafc) - [ ] [最新协议AnyTLS快速上手，Sing-box搭建AnyTLS节点教程（自签证书版）](https://mp.weixin.qq.com/s?__biz=MzkyNzYzNTQ2Nw==&mid=2247485198&idx=1&sn=3447785746c05495a412fe6ae25da823) - [ ] [【情报】非洲针对华人的暴力事件背后的认知战](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152011&idx=1&sn=7f14f118d918bada356af5b0d07b333b) - [ ] [【培训通知】第15期全国开源情报能力培训班10月广西开班](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152011&idx=2&sn=8d3f5121a492bbdad750a724166bfa0d) - [ ] [【工信动态】智能养老服务机器人结对攻关与场景应用试点项目名单公布 32个项目入围](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254327&idx=1&sn=284ad0167b86cc35380bfbaf391eaa90) - [ ] [7天搞定Claude 3.7 Sonnet免费使用攻略：3个隐藏入口+5个稳定技巧（内附高阶保姆级教程）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510768&idx=1&sn=0eb2f2cdeabbceb2c8217f4b0edaff89) - [ ] [7天精通Claude 3.7镜像！三个秘技五步上手全攻略（无需翻墙直接用）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510768&idx=2&sn=a92e0b6cf5dc7983171e3806e548d9b0) - [ ] [7天零限制体验Claude 3.7 Sonnet的五步隐藏攻略（附稳定长期方案）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510768&idx=3&sn=e52cfd6d8ca6adc6101ee9b05fe90e91) - [ ] [7天免费畅享Claude 3.7 Sonnet的五步终极攻略（内附稳定长期方案）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510768&idx=4&sn=27ce2b5086090817efdebbacc45f4093) - [ ] [7天免费使用Claude 3.7 Sonnet完整攻略！三大绝招助你突破限制（附稳定账号获取方法）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510768&idx=5&sn=af471546dd8ec372db64d21261624f57) - [ ] [7天免费玩转Claude 3.7 Sonnet！三种冷门方法完全攻略（附高阶提示词）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510768&idx=6&sn=6b1a1e71e7c76305df58e4711108895e) - [ ] [7天免费玩转Claude 3.7 Sonnet的3大秘技（小白也能无障碍使用）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510768&idx=7&sn=5b4fd6e552ed3138320b1f2f01da88f7) - [ ] [7天拿下Claude 3.7国内免翻墙账号！三种冷门方法实测对比（附独家稳定方案）。](https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247510768&idx=8&sn=e4391f98d1d9f4e9faa0a9512eee3f1d) - [ ] [产品型公司，怎么突然练起了“PPT”？](https://mp.weixin.qq.com/s?__biz=MzI1NjQxMzIzMw==&mid=2247498152&idx=1&sn=9eb451ad9c99f6fcfc58fd8d749ea53c) - [ ] [一图get！2025国家网络安全宣传周精彩亮点提前揭晓](https://mp.weixin.qq.com/s?__biz=Mzk0MjMxMzg5MQ==&mid=2247492300&idx=1&sn=06b3cc1dadcb6c2cabcbc8ec324a0443) - [ ] [【好靶场逻辑漏洞】优惠卷只能领取一次？你OUT了](https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247486149&idx=1&sn=0b65216060cc21c4de2f7e50c4987166) - [ ] [安全软件宿命之敌：鬼一样的符号链接](https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488677&idx=1&sn=ae6d75573afee67fa236243df5654ae3) - [ ] [好书推荐：助你少走十年弯路](https://mp.weixin.qq.com/s?__biz=Mzg2MjgwMzIxMA==&mid=2247485327&idx=1&sn=94ae7bf3e94338a6d1b3379822cc4bba) - [ ] [篇 55：某安全公司今天能弄黑客，明天就能弄你](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247502809&idx=2&sn=1306af420708db2b2f6009a99f4fc493) - [ ] [Flutter App抓包(原理分析和绕过SSL检测)](https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247498469&idx=1&sn=85457d9b06fa0127c279061fc639efb7) - [ ] [安全研究资料库(2025)](https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247498469&idx=2&sn=fbb0d49eaa5dfb8bc514b5d7364848c3) - [ ] [网络安全法修改了哪些内容？（附详细对照表）](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247519970&idx=1&sn=4446c3662e0678a464a58d274b715b2e) - [ ] [某 oa 1day分析](https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247486082&idx=1&sn=112342e8d2dc8f70634c6df7c9ea37c8) - [ ] [工业网络安全周报-2025年第35期](https://mp.weixin.qq.com/s?__biz=MzU3ODQ4NjA3Mg==&mid=2247567632&idx=1&sn=5707173a4c1a94aefd05469df72ee05c) - [ ] [【红队思路】COM接口processChain断链](https://mp.weixin.qq.com/s?__biz=Mzk0MDczMzYxNw==&mid=2247484561&idx=1&sn=0d08073a657c3b5811fbb86e877685a5) - [ ] [2025智能驾驶智算数据平台发展研究报告](https://mp.weixin.qq.com/s?__biz=MzkyOTMwMDQ5MQ==&mid=2247520507&idx=1&sn=14c7faa355f4c5bb26d3883376a89a01) - [ ] [无问AI-AutoScopeHunter](https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488617&idx=1&sn=877566b052f6f9068027bbd7b9e08669) - [ ] [报名截止9月20日|2025年全国大学生信息安全竞赛安徽省赛](https://mp.weixin.qq.com/s?__biz=MzIyNDA2OTM2Nw==&mid=2247484954&idx=1&sn=d24a996c33481ff28435f679601d8381) - [ ] [存储桶配置不当的漏洞挖掘：以某EDU证书站为例](https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247552019&idx=1&sn=0c36e6520861e7cc80a71fa05eb3d2d8) - [ ] [Super黄：Spec Coding 革命，为什么说 Vibe Coding 已死｜Z Next AI 产品创造营](https://mp.weixin.qq.com/s?__biz=MzkyMDU5NzQ2Mg==&mid=2247489172&idx=1&sn=87c01f76b1add93b435e5af0628bc6d5) - [ ] [我是32岁网络安全工程师，劝告准备学…](https://mp.weixin.qq.com/s?__biz=Mzk0MzcyNjMyNg==&mid=2247485713&idx=1&sn=3b35416111857612f33b0cc57d94f845) - [ ] [某基础软件企业（*ST东通）连续四年虚增收入和利润，违反证券法律法规](https://mp.weixin.qq.com/s?__biz=MzIwNDYzNTYxNQ==&mid=2247503908&idx=1&sn=f5fbf9cdc595682d7eba4e21708be24c) - [ ] [【报告】2024年度网络安全漏洞态势威胁研究报告](https://mp.weixin.qq.com/s?__biz=MzI5MTIwOTQ5MA==&mid=2247488271&idx=1&sn=8ac81a595f8ecf0e990dddfae29f6e4a) - [ ] [CVE-2025-8088 WinRAR 概念验证（PoC 漏洞利用)](https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247487300&idx=1&sn=92e42aed3546e9e6c8b2944f7849128e) - [ ] [2025年人工智能和开源将如何重塑定制软件开发](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652118298&idx=1&sn=a4711ddc75b3f6ee1e8574dd0c331a64) - [ ] [图说重力！再平衡，厉害又美丽！](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652118298&idx=2&sn=9ae4dac045ef7774df7fbfbec3bd68c3) - [ ] [一个专为“隐身”而生的数字窃贼，如何潜入你的内存？](https://mp.weixin.qq.com/s?__biz=MzkwOTg4NDk5NQ==&mid=2247484785&idx=1&sn=fc85e497695ee4b0fe48e50df91a386e) - [ ] [巴赫穆特战役中持久消耗战的作战样式与非国家武装行为体运用](https://mp.weixin.qq.com/s?__biz=MzkyMjY1MTg1MQ==&mid=2247496003&idx=1&sn=8f2bef36f5c6226eb3d72eb15fd1a444) - [ ] [乌军夏季反攻中对梯次配置防御体系的突破战术探析](https://mp.weixin.qq.com/s?__biz=MzkyMjY1MTg1MQ==&mid=2247496003&idx=2&sn=83a5bb5f3be6835c9d29b6d45cc7a325) - [ ] [城镇作战中应急爆炸装置（IED）运用之研究](https://mp.weixin.qq.com/s?__biz=MzkyMjY1MTg1MQ==&mid=2247496003&idx=3&sn=3caf7912deba195dcd066afb34e6aa1c) - [ ] [倒计时3天 | 邀您共议网络安全与人工智能深度融合](https://mp.weixin.qq.com/s?__biz=MzkwMjI2MDQwMA==&mid=2247486918&idx=1&sn=3d8c48a64fc6479f5cd533247b808746) - [ ] [【一周安全资讯0913】2025年国家网络安全宣传周将于9月15日在昆明开幕；黑客组织声称窃取越南全国公民信用数据](https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247507991&idx=1&sn=b054b8477d1ac5f77bbf4dc2fd2990bf) - [ ] [安天AVL SDK反病毒引擎升级通告（20250913）](https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650212438&idx=1&sn=c056826f7c7d3686d9e37efea652fb57) - [ ] [网络安全10大岗位及薪资盘点！](https://mp.weixin.qq.com/s?__biz=MzkyODk0MDY5OA==&mid=2247486332&idx=1&sn=0da40c123f667378edef3d693032d6b8) - [ ] [全球重点地区量子信息产业发展比较研究](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247533483&idx=1&sn=ccf49f224384f17e23d41821673abc74) - [ ] [未来趋势：系统“韧性”（Resilience）设计 | 一文讲清 Security 和 Safety 的区别](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247533483&idx=2&sn=4bb54c400ab1322df8b52737771dcdb2) - [ ] [实战案例 | Edusrc三个985证书站漏洞案例](https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247488373&idx=1&sn=8ac40123ec44e9e4baf489a39a297a61) - [ ] [一次简单的点击，我的账户就被盗了](https://mp.weixin.qq.com/s?__biz=Mzg4NjY3OTQ3NA==&mid=2247487166&idx=1&sn=08381f0486c904bdd55ef8e6b643f713) - bunnie's blog - [ ] [Use the Force (Feedback) to Solder Small Things](https://www.bunniestudios.com/blog/2025/use-the-force-feedback-to-solder-small-things/) - Private Feed for M09Ic - [ ] [bolucat released 202509132028 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202509132028) - [ ] [joaoviictorti starred go-restruct/restruct](https://github.com/go-restruct/restruct) - [ ] [killeven starred pardeike/Harmony](https://github.com/pardeike/Harmony) - [ ] [Rvn0xsy starred Pennyw0rth/NetExec](https://github.com/Pennyw0rth/NetExec) - [ ] [niudaii starred index-tts/index-tts](https://github.com/index-tts/index-tts) - [ ] [Ridter starred wbopan/cui](https://github.com/wbopan/cui) - Sucuri Blog - [ ] [Choosing the Best CMS for Your Needs](https://blog.sucuri.net/2025/09/choosing-the-best-cms-for-your-needs.html) - Recent Commits to cve:main - [ ] [Update Sat Sep 13 11:37:49 UTC 2025](https://github.com/trickest/cve/commit/d9d8cd10616d906b3002fb41fa80dce56d9384aa) - Bug Bounty in InfoSec Write-ups on Medium - [ ] [“Day 25: The Cloud Heist — How a Forgotten Webhook Tester Gave Me the Keys to AWS”](https://infosecwriteups.com/day-25-the-cloud-heist-how-a-forgotten-webhook-tester-gave-me-the-keys-to-aws-0e2876b515a8?source=rss----7b722bfd1b8d--bug_bounty) - [ ] [9. The Secret Power of Google Dorking](https://infosecwriteups.com/9-the-secret-power-of-google-dorking-736325566220?source=rss----7b722bfd1b8d--bug_bounty) - [ ] [Subdomain Discovery and Enumeration: From Noise to Valuable Targets](https://infosecwriteups.com/subdomain-discovery-and-enumeration-from-noise-to-valuable-targets-bbc42b644b74?source=rss----7b722bfd1b8d--bug_bounty) - [ ] [Keys to the Kingdom: How I Hacked a Fortune 500 Company Through Their Mobile App](https://infosecwriteups.com/keys-to-the-kingdom-how-i-hacked-a-fortune-500-company-through-their-mobile-app-e26debedd3f3?source=rss----7b722bfd1b8d--bug_bounty) - [ ] [The $1000 Critical Bug: Unauthorised Access Leading to Support Admin Panel Takeover](https://infosecwriteups.com/the-1000-critical-bug-unauthorised-access-leading-to-support-admin-panel-takeover-572d687566cd?source=rss----7b722bfd1b8d--bug_bounty) - [ ] [This Clickjacking Bug Was Worth $140 – Here’s How](https://infosecwriteups.com/this-clickjacking-bug-was-worth-140-heres-how-8da607927f62?source=rss----7b722bfd1b8d--bug_bounty) - [ ] [14. How to Write a Perfect Vulnerability Report](https://infosecwriteups.com/14-how-to-write-a-perfect-vulnerability-report-f07c8a02fc45?source=rss----7b722bfd1b8d--bug_bounty) - 明天的乌云 - [ ] [做更好的信息阅读](https://blog.xlab.app/p/b0488ed1/) - daniel.haxx.se - [ ] [Developer of the year](https://daniel.haxx.se/blog/2025/09/13/developer-of-the-year/) - 博客园 - 渗透测试中心 - [ ] [铸网-2025”山东省工业互联网网络安全职业技能竞赛wp（职工组） - 渗透测试中心](https://www.cnblogs.com/backlion/p/19089846) - [ ] [2025江苏省第三届数据安全技术应用职业技能竞赛初赛WP - 渗透测试中心](https://www.cnblogs.com/backlion/p/19089845) - [ ] [2025浙江省信息通信业职业技能竞赛-数据安全管理员竞赛-决赛wp - 渗透测试中心](https://www.cnblogs.com/backlion/p/19089843) - [ ] [2025年浙江省信息通信业职业技能竞赛-数据安全管理员竞赛-初赛WriteUp - 渗透测试中心](https://www.cnblogs.com/backlion/p/19089841) - [ ] [2025第三届“陇剑杯”网络安全大赛初赛-夺旗闯关赛wp - 渗透测试中心](https://www.cnblogs.com/backlion/p/19089665) - 黑海洋 - Wiki - [ ] [中国防火长城（GFW）最大规模的内部文件泄露](https://blog.upx8.com/4848) - 奇客Solidot–传递最新科技情报 - [ ] [互联网档案馆保存的网页数即将突破 1 万亿](https://www.solidot.org/story?sid=82303) - [ ] [尼泊尔 Z 世代抗议中的技术力量](https://www.solidot.org/story?sid=82302) - [ ] [Proton Mail 应网络安全机构要求关闭了记者账户](https://www.solidot.org/story?sid=82301) - 看雪学苑 - [ ] [Dropping-elephant rat恶意样本分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599792&idx=1&sn=9a04f285ae4a2522d6e3bbb89c253224) - [ ] [《进阶逆向工程实战》：解锁逆向技术的全链路实战能力](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599792&idx=2&sn=0396179bba45d91c537bd9f953f78534) - 丁爸 情报分析师的工具箱 - [ ] [【情报】非洲针对华人的暴力事件背后的认知战](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152011&idx=1&sn=7f14f118d918bada356af5b0d07b333b) - [ ] [【培训通知】第15期全国开源情报能力培训班10月广西开班](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651152011&idx=2&sn=8d3f5121a492bbdad750a724166bfa0d) - 安全研究GoSSIP - [ ] [堪萨斯州立大学陈明明课题组PhD招生（网络与系统安全方向，2026 Spring/Fall）](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500691&idx=1&sn=6a9741c4037b26bc45b0e7c07d74b7dc) - 天黑说嘿话 - [ ] [2025年企业勒索病毒演练指南](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484598&idx=1&sn=77f066e8a07e88ee8b833215fd48716d) - 网安杂谈 - [ ] [【2026合作伙伴巡礼】天鉴科技：立足取证，服务实战](https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650889782&idx=1&sn=6c743b5c46f9a23d120f8e9630db3b4c) - 极客公园 - [ ] [在端侧 AI 时代正式到来之前，联想想先做好硬件「杀手锏」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653086532&idx=1&sn=c40fc1b21cb3d3ec5c04c5d55ce856aa) - [ ] [iPhone 17 Air 在华发售延期；罗永浩直播回应西贝；《流浪地球》第三部剧本完稿，共计十五万字｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653086531&idx=1&sn=0e78cf88637c8f1730b1fb3e9ccfbe1d) - 安全学术圈 - [ ] [中国科学技术大学 | 基于流间时空关联分析的图神经网络网站指纹识别方法](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493728&idx=1&sn=1d501d50b34701aaa1643008b1c2721f) - 白帽100安全攻防实验室 - [ ] [WMCTF2025 翩然而至](https://mp.weixin.qq.com/s?__biz=MzIxMDYyNTk3Nw==&mid=2247515223&idx=1&sn=b4f9bd7fcb277b86d426a8be32a93995) - 阿里安全响应中心 - [ ] [圆满收官！AI安全全球挑战赛比赛榜单发布](https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998095&idx=1&sn=3b28fb50a9f715994ace25c288c8559b) - 嘶吼专业版 - [ ] [黑客传灯者TNT：聚火传灯，跨界共生](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584587&idx=1&sn=8fa988b010919e153ce063cca40b4035) - 安全圈 - [ ] [【安全圈】iPhone17预售，苹果官网崩了](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071692&idx=1&sn=6613f07df2c50c0667795c117aa14c07) - [ ] [【安全圈】房产公司职工出售客户信息逾万条，31人涉嫌犯罪落网](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071692&idx=2&sn=c370f9fffac3ce9a8618a87903f0443c) - [ ] [【安全圈】学生黑客成英国校园网络安全最大威胁，只为寻求刺激、出名](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071692&idx=3&sn=c51fde054fe510a76ad2b087bb64ac1c) - 吴鲁加 - [ ] [我也说说西贝](https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247485728&idx=1&sn=f70a60df504e1d2f754e317da5dac2ab) - 中国信息安全 - [ ] [2025 北外滩网络安全论坛 | 昆仑芯：以技术突破推动 AI 算力创新](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664249019&idx=1&sn=73f164877e9b575c1710e96df87b1bbc) - [ ] [专家解读｜健全企业个人信息保护监督委员会制度 构建多元共治的个人信息保护治理体系](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664249019&idx=2&sn=253408926bdded181f01acc074e2c05e) - [ ] [聚焦 | AI如何守护人类健康？2025外滩大会热议医疗AI伦理](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664249019&idx=3&sn=ff3677949bf65b1f258a802a927ec88f) - [ ] [开学季·反诈必修课！大学生必看《一堂反诈课》上线](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664249019&idx=4&sn=d18a78ba4abc58804f49ed5731360f91) - 迪哥讲事 - [ ] [RCE 漏洞](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498181&idx=1&sn=1f1fa5d85568bd16a7758a1802a0b003) - Over Security - Cybersecurity news aggregator - [ ] [Ransomware Tool Matrix Update: Community Reports](https://blog.bushidotoken.net/2025/09/ransomware-tool-matrix-update-community.html) - [ ] [Geedge & MESA Leak: Analyzing the Great Firewall’s Largest Document Leak](https://gfw.report/blog/geedge_and_mesa_leak/en/) - [ ] [Here’s the tech powering ICE’s deportation crackdown](https://techcrunch.com/2025/09/13/heres-the-tech-powering-ices-deportation-crackdown/) - [ ] [Choosing the Best CMS for Your Needs](https://blog.sucuri.net/2025/09/choosing-the-best-cms-for-your-needs.html) - ICT Security Magazine - [ ] [Client-Side Scanning: l’arma a doppio taglio della cybersecurity](https://www.ictsecuritymagazine.com/notizie/client-side-scanning/) - Troy Hunt's Blog - [ ] [Weekly Update 469](https://www.troyhunt.com/weekly-update-469/) - Active Directory & Azure AD/Entra ID Security - [ ] [Active Directory Security Tip #1: Active Directory Admins](https://adsecurity.org/?p=4577) - Security Affairs - [ ] [FBI warns of Salesforce attacks by UNC6040 and UNC6395 groups](https://securityaffairs.com/182159/cyber-crime/fbi-warns-of-salesforce-attacks-by-unc6040-and-unc6395-groups.html) - [ ] [HybridPetya ransomware bypasses UEFI Secure Boot echoing Petya/NotPetya](https://securityaffairs.com/182149/malware/hybridpetya-ransomware-bypasses-uefi-secure-boot-echoing-petya-notpetya.html) - TorrentFreak - [ ] [Internet Society: Italy’s “Piracy Shield” Failures Are a Warning Against “Blunt” Piracy Blocking](https://torrentfreak.com/internet-society-italys-piracy-shield-failures-are-a-warning-against-blunt-piracy-blocking/) - The Hacker News - [ ] [FBI Warns of UNC6040 and UNC6395 Targeting Salesforce Platforms in Data Theft Attacks](https://thehackernews.com/2025/09/fbi-warns-of-unc6040-and-unc6395.html) - CyberCrime & Doing Time - [ ] [Attorney Generals go after Bitcoin ATMs for supporting Fraud](https://garwarner.blogspot.com/2025/09/attorney-generals-go-after-bitcoin-atms.html)
每日安全资讯（2025-09-14）