[每日信息流] 2026-02-03 #1137
Description
每日安全资讯（2026-02-03）
- SecWiki News
- A Few Thoughts on Cryptographic Engineering
- 安全客-有思想的安全新媒体
- 明修栈道，暗度陈仓：TA584组织投放“傲娇僵尸程序”并利用隐形注册表项实施攻击
- 苹果为十年前iPhone推出史无前例的安全更新，标志着老旧设备支持策略生变
- 太空探索技术公司的大胆布局：星链数据中心卫星如何重塑云计算经济格局
- 飞塔单点登录配置漏洞暴露企业认证系统核心安全隐患
- 签名盗用：“幻影窃取者”借虚假敦豪物流发票攻陷Java应用
- Moltbook AI平台曝出高危漏洞，致邮箱地址、登录令牌及API密钥泄露
- 工业控制系统监控与数据采集漏洞引发拒绝服务攻击，或对工业生产运营造成中断影响
- “修复”实为陷阱：ConsentFix钓鱼攻击借Azure CLI绕过多重身份验证
- 虚拟专用网络与虚假更新：谷歌捣毁大型IPIDEA代理网络
- IIS服务器遭猛攻：UAT-8099组织部署区域锁定“BadIIS”恶意软件及Linux变体
- Microsoft Security Blog
- Tenable Blog
- 奇安信攻防社区
- Private Feed for M09Ic
- Teach2Breach forked Teach2Breach/WarbirdExamples from DownWithUp/WarbirdExamples
- Teach2Breach starred DownWithUp/WarbirdExamples
- joaoviictorti starred ekzhang/bore
- mgeeky starred RainbowDynamix/GhostKatz
- Teach2Breach forked Teach2Breach/CVE-2026-21509 from kimstars/Ashwesker-CVE-2026-21509
- Fplyth0ner-Combie starred elastic/protections-artifacts
- zema1 contributed to ReaJason/MemShellParty
- pmiaowu starred anthropics/skills
- gh0stkey starred chain00x/WMPFDebugger-arm
- PrefectHQ released 3.6.16.dev4 at PrefectHQ/prefect
- 0xbug starred langchain-ai/langchain-mcp-adapters
- ManassehZhou forked ManassehZhou/tailscale from tailscale/tailscale
- gh0stkey starred j178/prek
- Rvn0xsy starred FlowiseAI/Flowise
- Ridter starred jxroot/ZeroPulse
- timwhitez starred badlogic/pi-mono
- FunnyWolf starred vstorm-co/full-stack-fastapi-nextjs-llm-template
- wh0amitz starred n-WN/SubgroupX
- gh0stkey starred adityatelange/frida-ui
- Y4er starred RedTeamPentesting/keycred
- Light Cube
- Recent Commits to cve:main
- CXSECURITY Database RSS Feed - CXSecurity.com
- 美团技术团队
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
- Cerbero Blog
- Malware-Traffic-Analysis.net - Blog Entries
- Reverse Engineering
- /r/ReverseEngineering's Weekly Questions Thread
- Defeating a 40-year-old copy protection dongle
- InstaCloud - Cloud Storage using Instagram's API
- AI agents are good enough for GameCube reverse-engineering
- Claude Code skill that automates Android APK decompilation and API endpoint extraction
- Recompiled APK crashes - Null context or signature verification issue?
- Malwarebytes
- Robin Verton - it-security and software engineering
- Exploit-DB.com RSS Feed
- daniel.haxx.se
- Security Café
- JonLuca's Blog
- 黑海洋Wiki | Web开发工具包 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台
- 奇客Solidot–传递最新科技情报
- 安全分析与研究
- 腾讯玄武实验室
- 黑鸟
- 青衣十三楼飞花堂
- 安全内参
- 代码卫士
- 安全客
- 天黑说嘿话
- RapidDNS
- 虎符智库
- 威努特安全网络
- 丁爸 情报分析师的工具箱
- 安全圈
- 网络空间安全科学学报
- 慢雾科技
- 中国信息安全
- 火绒安全
- 电子物证
- 安全牛
- 看雪学苑
- 极客公园
- 嘶吼专业版
- 数世咨询
- 字节跳动技术团队
- 表图
- 吾爱破解论坛
- 迪哥讲事
- Over Security - Cybersecurity news aggregator
- New GlassWorm attack targets macOS via compromised OpenVSX extensions
- The Business of Being First After a Data Breach
- Russian hackers exploit recently patched Microsoft Office bug in attacks
- Netherlands latest European country to mull social media ban for children
- Malicious MoltBot skills used to push password-stealing malware
- Mozilla announces switch to disable all Firefox AI features
- Microsoft: January update shutdown bug affects more Windows PCs
- Grave falla in Moltbook: l’incubo cyber degli agenti è realtà
- Auto aziendali e monitoraggio dei lavoratori: il Garante privacy dice stop
- Please Don’t Feed the Scattered Lapsus Shiny Hunters
- Abusato il sistema di update eScan per inviare malware multistage
- CTM360 Report Warns of Global Surge in Fake High-Yield Investment Scams
- Notepad++ update feature hijacked by Chinese state hackers for months
- Privacy Benchmark Cisco 2026: cosa dice e perché il confronto con le PMI italiane è aperto
- Notepad++ hijacked by suspected state-sponsored hackers
- Panera Bread breach impacts 5.1 million accounts, not 14 million customers
- Spyware maker is hijacking diplomatic efforts to limit commercial hacking, civil society warns
- Hackers attempt to extort parents after school refuses to pay ransom fee
- Drone sightings have doubled near UK military bases, warns British government
- Desperate Perth Renters Targeted by Rising Australian Housing Scam
- Microsoft fixes bug causing password sign-in option to disappear
- Rischio cyber: il ruolo degli amministratori nella NIS 2, fra obblighi e responsabilità
- Data Privacy Framework, i controlli obbligatori per i trasferimenti dati: ecco le nuove FAQ
- Designing a GitLab CI/CD pipeline for IaC
- NationStates confirms data breach, shuts down game site
- Digital Forensics nell’Industrial Internet of Things (IIoT): opportunità, limiti, prospettive
- NETRESEC Network Security Blog
- DEF CON Announcements!
- 360数字安全
- Qualys Security Blog
- 悬镜安全
- Securityinfo.it
- CNVD漏洞平台
- ICT Security Magazine
- 希潭实验室
- The Hacker News
- Researchers Find 341 Malicious ClawHub Skills Stealing Data from OpenClaw Users
- OpenClaw Bug Enables One-Click Remote Code Execution via Malicious Link
- Microsoft Begins NTLM Phase-Out With Three-Stage Plan to Move Windows to Kerberos
- ⚡ Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New Threats
- Securing the Mid-Market Across the Complete Threat Lifecycle
- Notepad++ Official Update Mechanism Hijacked to Deliver Malware to Select Users
- eScan Antivirus Update Servers Compromised to Deliver Multi-Stage Malware
- Open VSX Supply Chain Attack Used Compromised Dev Account to Spread GlassWorm
- Tor Project blog
- SANS Internet Storm Center, InfoCON: green
- The Register - Security
- Notepad++ hijacking blamed on Chinese Lotus Blossom crew behind Chrysalis backdoor
- StopICE hacked to send alarming text messages, admins accuse border patrol agent of sabotage
- Russia-linked APT28 attackers already abusing new Microsoft Office zero-day
- McDonald's is not lovin' your bigmac, happymeal, and mcnuggets passwords
- OpenClaw patches one-click RCE as security Whac-A-Mole continues
- Notepad++ update service hijacked in targeted state-linked attack
- Infrastructure cyberattacks are suddenly in fashion. We can buck the trend
- Why native cloud security falls short
- Schneier on Security
- NetSPI
- TorrentFreak
- Security Affairs
- MoltBot Skills exploited to distribute 400+ malware packages in days
- Panera Bread breach affected 5.1 Million accounts, HIBP Confirms
- Hackers exploit unsecured MongoDB instances to wipe data and demand ransom
- SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 82
- Nation-state hack exploited hosting infrastructure to hijack Notepad++ updates
- Security Affairs newsletter Round 561 by Pierluigi Paganini – INTERNATIONAL EDITION
- netsecstudents: Subreddit for students studying Network Security and its related subjects
- Social Engineering
- Technical Information Security Content & Discussion
- Deep Web
- Your Open Hacker Community
- Information Security
- Security Weekly Podcast Network (Audio)