admin/CyberSentinel-AI
1
0 Fork 0
mirror of https://github.com/Hxnxe/CyberSentinel-AI.git synced 2026-10-28 03:10:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

更新

Browse Source
This commit is contained in:
ubuntu-master committed 2025-12-08 18:00:02 +08:00
1 parent 044179d099
commit 6595856292
1 file changed
+151 -14
Download Patch File Download Diff File Expand all files Collapse all files
results/2025-12-08.md
+151 -14
View File
@@ -3,7 +3,7 @@
> 本文由AI自动生成，基于对安全相关仓库、CVE和最新安全研究成果的自动化分析。
>
> 更新时间：2025-12-08 12:56:19
> 更新时间：2025-12-08 17:35:29
<!-- more -->
@@ -11,19 +11,32 @@
### 🔍 漏洞分析
* [Next.js rce注入内存马](https://mp.weixin.qq.com/s?__biz=MzkzMDcxNzg4MA==&mid=2247484806&idx=1&sn=cfa145dc750bf73ee921c4e228eb83fa)
* [漏洞脚本飞企互联FE业务协作平台 attachment 任意文件读取漏洞](https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247487442&idx=1&sn=f8542a6ece7d67bc44d36ed35778e774)
* [黑客如何利用Teams“合法”绕过SPF/DKIM检测？揭秘跨租户攻击盲区](https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447901676&idx=2&sn=c2134fbf7a0464a7f82fd316dc301c46)
* [还在用正则做鉴权？Oracle 这个 0-day 漏洞教做人，Groovy 编译期也能执行代码](https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447901676&idx=3&sn=b9319ee66bb490b24d1709692ad604f9)
* [React2Shell漏洞已被攻击者利用](https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649797091&idx=3&sn=1ae2472bf108cc1efc3f30df801d6dd7)
* [lz4-java 高危漏洞 CVE-2025-66566 在解压缩过程中泄漏未初始化的内存](https://mp.weixin.qq.com/s?__biz=Mzk0NzQ0MjA1OA==&mid=2247486179&idx=1&sn=7ca4c0ad626867fa26e8bf785789d9df)
* [张辽奇谋智御\"两高一弱\"之洞察高危漏洞 严防趁虚而入](https://mp.weixin.qq.com/s?__biz=MzU0MTA3OTU5Ng==&mid=2247570662&idx=1&sn=7b37ef17c1c5b832eaed81e7bd5488ea)
* [安全动态回顾|国家网络安全通报中心：重点防范境外恶意网址和恶意IP 黑客利用WordPress扩展插件高危漏洞发起攻击](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585760&idx=2&sn=fd8c8671593a86c7dedc53e47231c32a)
* [今日零日漏洞内幕：基础设施、镜像和暴露模式](https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533884&idx=1&sn=c4b48a93708c6443df9eac664f44a8bc)
* [浏览器存储桶配置漏洞检测插件 | 更新！](https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650613552&idx=4&sn=30926dc058671a1d894eb0750b24975f)
* [又一个10分漏洞：Apache Tika 存在严重 XXE 漏洞 CVE-2025-66516](https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649797091&idx=2&sn=fb77da3b35bea70c95f2923db55d34c0)
* [网络安全周刊#26：React Server Components中的CVE-2025-55182（React2Shell）漏洞](https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247489601&idx=1&sn=91eb2e93324f79d37a7271e1fcea41d7)
* [React 19 满分漏洞下，雷池 WAF 的“未受影响”，藏着全栈安全的答案](https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247517683&idx=1&sn=1337c9d2807465416b38233df48d9560)
* [雷神众测漏洞周报2025.12.1-2025.12.7](https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503626&idx=1&sn=00df6e88fbbd202d9af6dd8dd566ba33)
* [从机制漏洞到企业级应急响应](https://mp.weixin.qq.com/s?__biz=MzA3MTUxNzQxMQ==&mid=2453886412&idx=1&sn=cc28ee14adeb0b6a0c08a71246900c9a)
* [已复现Apache Tika XXE注入漏洞CVE-2025-66516](https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247495538&idx=1&sn=a71c57042550b1f29ed4173ea0173ded)
* [突破403错误：深入剖析带外SQL注入发现](https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247508551&idx=1&sn=8b841a4b47c6027c73c7e75c258e9a4e)
* [RCE安全（五）](https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247491214&idx=1&sn=5bde0ab06db5202ddb15caa4e43a57d9)
* [CVE-2025-55182-React 服务器组件原型链漏洞分析](https://mp.weixin.qq.com/s?__biz=MzkxNzY0MzE2NQ==&mid=2247484122&idx=1&sn=c3052e34597df2dbf915425a37f6b573)
* [铭飞CMS SQL注入漏洞 xa0附POC](https://mp.weixin.qq.com/s?__biz=Mzk2NDkwMDg3Nw==&mid=2247484031&idx=1&sn=5523eef6b6b18b96f5c02f0efacdf7ca)
* [github，CVE，社区文章，Darkforums合集监控频道](https://mp.weixin.qq.com/s?__biz=MzkwMjIzNTU2Mg==&mid=2247484373&idx=1&sn=3708cb6aaf11221ad8578dc7c65d6680)
* [Java反序列化漏洞黑盒挖掘思路-下篇](https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247489302&idx=1&sn=f46ca3d3db74b589da26a96293bedb27)
* [漏洞预警 | 天锐绿盾审批系统SQL注入漏洞](https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247495169&idx=1&sn=964f33bd92e0ba6a83f5ade6cacf5ce0)
* [漏洞预警 | 友加畅捷管理系统任意文件上传漏洞](https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247495169&idx=2&sn=1747334361ea0078534c2a0cec3b397b)
* [漏洞预警 | 金和OA XXE漏洞](https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247495169&idx=3&sn=180221bdb192f4c77de1fc7d19e80fc1)
* [\"内网底裤收割机！\"——GYscan全能工具箱：容器CVE、弱口令、WebShell一次打包，结果还能一键HTML炫老板！](https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247494250&idx=1&sn=d84fc20ed5ce0521c2d4202cf8e0e295)
* [一款Next.jsRCE漏洞检测工具，这款Chrome扩展让Next.js App Router无处遁形](https://mp.weixin.qq.com/s?__biz=MzYzNjAwMjQ3OQ==&mid=2247484747&idx=1&sn=a7bfbc10d3a3e201f75e47bca47420f6)
* [CNVD漏洞周报2025年第47期](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496556&idx=1&sn=950c38b98041331ffc86f75d2b526067)
* [上周关注度较高的产品安全漏洞20251201-20251207](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496556&idx=2&sn=46f75ba780134844babc057455566d4d)
* [我是如何发现奔驰车中一个关键的 SQL 注入漏洞](https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647691406&idx=1&sn=1d39be885b0a407c627065b49f7a524a)
* [已复现Apache Tika XML外部实体注入漏洞CVE-2025-66516安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504309&idx=1&sn=4d4845766d1d86334361a69319addc8a)
* [协议层安全相关：HTTP请求走私与CTF利用](https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247490978&idx=1&sn=dedc5cfbc36a871003c73d65db659a63)
* [WordPress专题05CVE-2025-11499前台文件上传漏洞 全网首发POC及漏洞分析](https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247485207&idx=1&sn=d3a4f5828ccfbb2f68c39c6ce69f7bcf)
* [ruoyi最新版本4.8.1命令执行链和获取shiro key利用工具](https://mp.weixin.qq.com/s?__biz=MzkxMDcwOTg5Nw==&mid=2247483946&idx=1&sn=1c68e4d6b3ae226e0453e7eb0606206a)
* [漏洞通告XWiki Details Summary宏远程代码执行漏洞CVE-2025-65036](https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501868&idx=2&sn=f6ca712d8c23027a85225fe9097bf45d)
* [启动过程遭入侵：高通骁龙8 Gen3及5G调制解调器曝出高危漏洞](https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247538205&idx=4&sn=b0d1e8cde5822dc3fdcef26f33243a3f)
* [高危漏洞预警Apache Tika XXE漏洞CVE-2025-66516](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491102&idx=1&sn=0946bd92339296e19f40c2c6ba6d787c)
* [无回显RCE漏洞的常见五种突破技术](https://mp.weixin.qq.com/s?__biz=Mzk0OTY2ODE1NA==&mid=2247485736&idx=1&sn=22b9f7343eff8f0ad3d2b73d79f7a136)
* [利用 RESILIENT-CS 提升网络安全风险评估的影响评级并提高其整体效率](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247629282&idx=1&sn=ee2683f513d84d075593a6d92da0712c)
### 🔬 安全研究
@@ -32,6 +45,22 @@
* [可信数据空间下隐私计算技术应用实践与价值研究（2025版）报告发布（附下载二维码）](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139634&idx=1&sn=628ff64d1a312c90402b8e0c760863cf)
* [手法多到冗余！银狐借系统安全机制反杀杀软 | 银狐11月总结](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650185302&idx=1&sn=5bf8c706e1c4c706d4df59c811c569f8)
* [IRF堆叠使用问题分析](https://mp.weixin.qq.com/s?__biz=MzI4NjAzMTk3MA==&mid=2458862775&idx=1&sn=33a217b066cb9527cb49fe6ef5f6a28a)
* [React2Shell 分析总结](https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247487426&idx=1&sn=604c56a16fc1ba11e12f7bb6a2a04b94)
* [定向能武器在舰艇末端反导反无人机作战中的运用研究](https://mp.weixin.qq.com/s?__biz=MzkyMjY1MTg1MQ==&mid=2247497648&idx=1&sn=3c40ea62cb1a2ceeb12d3927551ce54c)
* [CTF 历年参与人数与题目分布趋势分析（2014-2025）](https://mp.weixin.qq.com/s?__biz=MzkzNzk5MjEyNg==&mid=2247487016&idx=1&sn=ce71d21ad7251b855b4a65a8bd74b991)
* [这是一次长期实验：AI 分析币圈 BOT 构建](https://mp.weixin.qq.com/s?__biz=MzkwMTc2MDE3OA==&mid=2247487379&idx=1&sn=3195ad99e44066ef55cebf12a604faf5)
* [无文件、跨平台、防不胜防：深扒 Matrix Push C2 攻击框架的技术底色](https://mp.weixin.qq.com/s?__biz=Mzk1NzM4NzMyMw==&mid=2247485377&idx=3&sn=e2a98915c4c9a892b89ae9bdbb76afa0)
* [一文读懂 L2TP VPN：原理、场景与配置全解析](https://mp.weixin.qq.com/s?__biz=MzkzMjYzMjU3OA==&mid=2247485433&idx=1&sn=7360c691b95bde92a79f50ca618ec41f)
* [数据安全风险分析及典型数据安全风险类型](https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247550100&idx=2&sn=84d7f26fa4fa29986a756d67e4272b9d)
* [一文带你领略Solana的技术吸引力](https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247515681&idx=1&sn=5c7a24252125e06736b00b18d4edf7cd)
* [Rshell - 跨平台多协议C2框架 | 更新原生socks5代理支持！](https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247495816&idx=1&sn=4f28a8fbedb4d2622363436bd1e72d0e)
* [工信部：拟筹建量子信息标准化技术委员会](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247535264&idx=2&sn=ea2b371b452a72048741d56b5ff0cf42)
* [独家2025年美国NSS深度解读及中美关系影响分析（万字逐段解析）](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650563937&idx=1&sn=2d6b6ebe6c61d968c57cbb7e0911ea5c)
* [中汽数据：基于分层检测架构与动态演进机制车联网车载信息安全入侵检测范式研究](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247629282&idx=3&sn=cec34ba5471dd6ceaf5f4d535d5bb9cc)
* [关于开展“保密资质现场审查考试及题库背记方法”培训的通知](https://mp.weixin.qq.com/s?__biz=MjM5MzUyMzM2NA==&mid=2652915022&idx=1&sn=cdb8a98811265fda02251471e4913a92)
* [GJB3206B-2022《技术状态管理》理解与实施（13）](https://mp.weixin.qq.com/s?__biz=MjM5MzUyMzM2NA==&mid=2652915022&idx=2&sn=90cf623a3a99c283f4b9663a574db0ea)
* [做技术的只能糊口，但是除了技术，我们还能做啥？](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247532462&idx=1&sn=5bc47e5b47ca65033fdfea9bebb6b2b4)
* [葡萄牙网络犯罪法重大更新：为安全研究人员设立「避风港」](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247504596&idx=2&sn=b1761c82d3aa674900631960b19564ac)
### 🎯 威胁情报
@@ -41,6 +70,21 @@
* [苹果和谷歌向全球用户发送新一轮网络威胁通知](https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247490445&idx=1&sn=d59ac24df8f9cf2c921271a3935dc537)
* [当 AI 成为安全工程师：Claude Code 自主完成一次挖矿攻击事件响应全记录](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485702&idx=1&sn=cb526c702705a57943eb33b5561fd3cb)
* [eCapture v1.5：支持远程配置更新与事件转发，eCaptureQ 迎来 SQL 过滤文末招聘](https://mp.weixin.qq.com/s?__biz=MzUyMDM0OTY5NA==&mid=2247485234&idx=1&sn=39c8b7a33481026659abe18b855284ff)
* [1208 一周重点情报汇总｜天际友盟情报站](https://mp.weixin.qq.com/s?__biz=MzIwNjQ4OTU3NA==&mid=2247510622&idx=1&sn=40e9bdebd0462e9a9847748a13283a13)
* [机器“聪明”与人“狡黠”：黑客机器人如何用参数污染“突破”顶级WAF](https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650262407&idx=1&sn=d33f6f01cde650339273a99caec2613b)
* [激活企业“主动安全收集”能力，斗象助力架设SRC情报收集门户](https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495259&idx=1&sn=4cdfdae3943a8dc3d9882dd2087e950b)
* [印度 APT 组织 Dropping Elephant玩起 “职场伪装”！借系统工具偷国防机密，巴基斯坦企业要当心](https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247487429&idx=1&sn=6bbae74aeccb606a2cc9b4f0be6d6271)
* [中间人攻击](https://mp.weixin.qq.com/s?__biz=MzkwOTg4NDk5NQ==&mid=2247485155&idx=1&sn=451c36795c0631a9092612e502e42a18)
* [关于组织开展第三届“数信杯”数据安全大赛的通知](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247495350&idx=2&sn=3c0ce1d50beb64bbece36fca55f4868e)
* [应急响应|记一次针对AIR勒索病毒的溯源过程](https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247490313&idx=1&sn=8dab7d5f2158f8368ab0d7df67e4bf01)
* [当黑客开始“正规化”运营：注册公司、买证书，只为给你装个JS后门](https://mp.weixin.qq.com/s?__biz=Mzk1NzM4NzMyMw==&mid=2247485377&idx=1&sn=d58cdf43f59dda658c45cff41690d07f)
* [恶意软件开发系列（三）：反调试技术详解](https://mp.weixin.qq.com/s?__biz=Mzk2NDg3NTc1Mg==&mid=2247485328&idx=1&sn=b04507d325efecdebe16a8b0f64f0262)
* [从技术玩家到安全专家！2025补天白帽黑客盛典报名开启，AI安全攻防盛宴等你来！](https://mp.weixin.qq.com/s?__biz=MzU4MzgwODc3Ng==&mid=2247499792&idx=1&sn=214d70565ae46d38ac8fe833e35241c6)
* [国家安全部披露：有境外间谍在政府机关周边设置恶意Wi-Fi](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175242&idx=1&sn=4aef4aca75454e5a199328163b8bf3ea)
* [网安人一定要知道的四种常见的网络攻击手段](https://mp.weixin.qq.com/s?__biz=Mzk0MzcyNjMyNg==&mid=2247488251&idx=1&sn=6981cc42f18642e2e4d7eb0a413d9387)
* [乌黑客出手！新型恶意软件精准突袭俄航企 + 国防](https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247538205&idx=1&sn=1838efd1f02717fa9ca1b71fd035a15d)
* [Chrome 间谍插件 “隐身” 7 年，430 万用户数据被窃](https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247538205&idx=3&sn=7aa69ca41919961e28422c5883089f9c)
* [情报每周回顾 2025-12-08](https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510979&idx=1&sn=45ad388685922de5e555ad65bb5cc401)
### 🛠️ 安全工具
@@ -51,6 +95,25 @@
* [中国、美国、欧盟，医疗器械软件及网络安全检测法规对比分析](https://mp.weixin.qq.com/s?__biz=MzI3NzUyNjU5Mg==&mid=2247486215&idx=2&sn=65889d730d276a6396d07fe19a43f989)
* [超轻量级xa0AI 网安工具](https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247508637&idx=1&sn=d4c6a949319770bc933cbf377ac9a392)
* [渗透测试遇到抽象js加密之实战逆向](https://mp.weixin.qq.com/s?__biz=MzIxNTg1MjYzOQ==&mid=2247484178&idx=1&sn=b227cfb59adb8765da98c9415aa2fc28)
* [UniMCPSim v2.9 重磅发布：内置 Playground，一键测试任意 MCP Server！](https://mp.weixin.qq.com/s?__biz=Mzg4MjI0MDAyMg==&mid=2247488872&idx=1&sn=859fd4c43b364c9e6da9459c0d2fc075)
* [首批 | 重磅发布北京安普诺信息技术有限公司悬镜安全通过可信AI云 大模型安全扫描产品能力评估](https://mp.weixin.qq.com/s?__biz=Mzk0MjM1MDg2Mg==&mid=2247509279&idx=1&sn=5b2827ca94ed6b9389d6bcc544051bd9)
* [发黄的扫描件如何用PS调色](https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247495898&idx=1&sn=fe0a1cbeb5a6133098d4229dcdf8ef32)
* [网络安全工具-Nmap一](https://mp.weixin.qq.com/s?__biz=Mzg2NzgzNjI2NQ==&mid=2247483821&idx=1&sn=a141446074d78ac6f03e9cfaf4d60406)
* [SSReportTools - 安服/渗透测试报告生成工具 - 2.0版本发布](https://mp.weixin.qq.com/s?__biz=MzI5OTUxMjA3OA==&mid=2247483803&idx=1&sn=4b41c1940bfe2524eb9be3bc91b59e7f)
* [从工具到权杖：AI正在重塑政治](https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247504551&idx=1&sn=9d4e141f80ae4c868b8fdc6a60b11973)
* [RedAgent：AI驱动的全自动渗透测试桌面神器](https://mp.weixin.qq.com/s?__biz=MzkxMDE5NTIyMA==&mid=2247485330&idx=1&sn=7dcfee465baec02ee229fcc8eb846f6e)
* [AI驱动的自主渗透测试平台 CyberStrikeAI](https://mp.weixin.qq.com/s?__biz=MzkzNTgzOTg4Mg==&mid=2247486697&idx=1&sn=9d3dc260aa5c9d8473141b45634f98c7)
* [你还在用 Excel 管 IP 吗？试试这款国产开源工具](https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247487716&idx=1&sn=6e60830c1a6b426f0c633ab18e90ba04)
* [致命精准的渗透测试利器 · 专为红队打造的集成化安全平台](https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247515173&idx=1&sn=1a11a4f6c163eaa274d46b9b4d5a3f98)
* [工具 | Hyacinth](https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247495169&idx=4&sn=d0973414123213c9c10d8a89eb796495)
* [我的2025年常用插件汇总（二）Burpsuite插件](https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247489291&idx=1&sn=95c265c0167a2bb5a3dfc49146beb26d)
* [《借刀杀人:用浏览器内置算法实现 Burp 自动解密》](https://mp.weixin.qq.com/s?__biz=MzkwNTI5ODc3NA==&mid=2247484455&idx=1&sn=cb47906197e5ed93b2c171245e28a610)
* [一款跨平台安全扫描工具-EasyPen](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247575993&idx=1&sn=bf0d0e90179b3a10eca51ae086573ac1)
* [高效运维工具箱：精选10款Linux运维神器](https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247575993&idx=2&sn=cd8ca260883d02ae22e4acbc59703248)
* [渗透神器 AuxTools 更新！5.8.0 图形化辅助更能打](https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247538205&idx=5&sn=52409008bc2105a5fd62eeabfcf47d33)
* [RSC 检测再更新：这次接入了 Metasploit](https://mp.weixin.qq.com/s?__biz=MzIyNDg2MDQ4Ng==&mid=2247487803&idx=1&sn=0fe46ba9c3a9e85eab85c053f75e6b6e)
* [AI应用支出报告：安全工具为何消失在榜单之外？](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541082&idx=1&sn=49a2974af0c9b355b0c89637c446750f)
* [闪石星曜@Java代码审计高阶实战班，第三期招生中，你买到的不仅仅是一套课程......](https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487636&idx=1&sn=f0db4f7af881e2d5f49bd02e16d41c70)
### 📚 最佳实践
@@ -63,6 +126,10 @@
* [护网行动全攻略 2025：从认知到参与，攻防实战能力提升指南](https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247500731&idx=1&sn=11c5589ce7a4b9558597ec8cc37ec31b)
* [纯享笔记：6/ 大模型微调实操指南喂饭级](https://mp.weixin.qq.com/s?__biz=MzU5NzQ3NzIwMA==&mid=2247487393&idx=1&sn=f624838a226b6b752d209af90cd1d43a)
* [行业资讯： 北信源 关于使用部分暂时闲置募集资金进行现金管理的进展公告](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247497249&idx=4&sn=e5df77700592655222f3896400c58c0b)
* [实操指南遭遇勒索蓝屏系统进不去？手把手教你进入PE系统](https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247506723&idx=1&sn=20a6e308a2a2b32814a499f671f1c15d)
* [中国信通院卫斌： 云上人工智能安全防护体系不断迭代升级，护航AI产业健康发展](https://mp.weixin.qq.com/s?__biz=Mzk0MjM1MDg2Mg==&mid=2247509269&idx=1&sn=1db5cbdadea0884d059a8fa7e428b919)
* [专家解读｜实施网络数据安全风险评估办法 加强国家网络数据安全能力建设](https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175242&idx=2&sn=c07d2ca041209dc5fab0331fb1010906)
* [Kubernetesk8s部署文件](https://mp.weixin.qq.com/s?__biz=MzE5MTQzMzg5MA==&mid=2247484313&idx=1&sn=5455d22f2c92ad6be4120d585e4a3032)
### 🍉 吃瓜新闻
@@ -78,6 +145,23 @@
* [行业资讯：国投智能 辟谣 公司控股股东国投智能科技有限公司 在 湖北 设立 中创云科 公司的传闻](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247497249&idx=3&sn=f7f4d5df0107f172ce9e4939aa0edc28)
* [网络安全行业，企业经营困难其实更多的是外因](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247497162&idx=1&sn=a2f6d82b6f0f1ea4a3ef25e0b8c64cb2)
* [网络安全行业，聊一聊企业的负债率为什么要保持在一定的合理水平](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247497162&idx=5&sn=fd63c6bac1ac867bbef22140f847b96d)
* [「彩智科技」获致远互联数千万 A 轮融资，深知可信对规范性知识的大模型幻觉“零容忍”，助力企业AI智能体普及](https://mp.weixin.qq.com/s?__biz=MzkyMDU5NzQ2Mg==&mid=2247489445&idx=1&sn=0d0c89666991909a37e07d700c77dfb2)
* [企业SRC | 针对会员制和优惠券制特殊思考实战](https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247492453&idx=1&sn=a4d4a0ef43213ed43948e5f9ac84927a)
* [勒索情报通告｜LockBit5.0团体勒索深圳某教育科技有限公司](https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517722&idx=1&sn=9f7415535c88d96e1cb896f6b0f5f69b)
* [勒索情报通告 | LockBit5.0团体勒索安庆市某机械制造有限责任公司](https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517722&idx=2&sn=5ea229ed124533041091f477e7d5b7f6)
* [我被黑客入侵了？？？](https://mp.weixin.qq.com/s?__biz=Mzg3ODk1MjI5NQ==&mid=2247484854&idx=1&sn=32545540d61a592f45f047973cea9bb8)
* [行业资讯：永信至诚 奇安创投在减持期内累计减持公司股票5,581,167股，占公司股份总数的3.70%](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247497313&idx=2&sn=22cde8b71c75a5f5bb40fcfe7a02fa11)
* [国家网信办发布《网络数据安全风险评估办法（征求意见稿）》](https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247550100&idx=1&sn=87bdd35bde92339d28d4aea7e69e01be)
* [数据中心物理安全：一道看不见的防线正在重塑行业标准](https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247550100&idx=3&sn=fcbb27185e8df115a5d3fe23958cb551)
* [专家析2025年“安全悖论”：大型科技公司为何守不住“基础防线”？](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247517050&idx=1&sn=36e1df25b9d8712aff96661ac3a0e63d)
* [这么厉害？黑客宣称入侵美卫生与公共服务部并窃取11GB数据](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247517050&idx=3&sn=430d4e12be9072ea2b82cf276d361f20)
* [天威诚信邀您共赴四川省智慧企业创新大会](https://mp.weixin.qq.com/s?__biz=MzU4MzY5MzQ4MQ==&mid=2247542981&idx=1&sn=4cd11ebe1f0f1055b0da42a836e16d2d)
* [亚信安全马红军荣获2025“上证鹰·金质量 优秀企业家奖”](https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650626519&idx=1&sn=ab7e5949d09b2dc4aa64fd9a46766893)
* [勒索巨头LockBit 5.0基础设施遭曝光：服务器IP与域名泄露](https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247525475&idx=1&sn=b010bcba3915e7aa2bbe3710a3200ba4)
* [踩红线必罚！机场集团因生物数据违规被罚 8200 万](https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247538205&idx=2&sn=5fe9f5f70ad7264ef2b29d955845a2af)
* [安全评估将常态化：《网络数据安全风险评估办法（征求意见稿）》公开征求意见（附全文）](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247535264&idx=1&sn=fa7e33c8cdeffc23ac8ab634188b63d0)
* [数据中间商正将医护人员的个人信息置于风险中，使其个人的生活几近透明](https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650260591&idx=1&sn=f82e8f57f529707423160751455f71c8)
* [石梁：心无“小家”， 胸有“大家”——企业家的境界与担当](https://mp.weixin.qq.com/s?__biz=MjM5MzUyMzM2NA==&mid=2652915022&idx=4&sn=8249fe37bb3d571a52746cc9815bb754)
### 📌 其他
@@ -153,6 +237,59 @@
* [AI魔改OpenWrt系统第5周](https://mp.weixin.qq.com/s?__biz=MzU4MTgxNDc2MQ==&mid=2247486515&idx=1&sn=c082b559f64b6a94c67209ff8d88bb43)
* [派出所两名辅警盗用副所长数字证书售卖公民信息，考虑到二人退缴全部赃款，法院酌情对其从轻处罚](https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489807&idx=1&sn=9404aecf1fcca0030bf8ae4029d882c4)
* [宁波银行远程银行消保智能体项目供应商召集](https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653933109&idx=1&sn=974c4b06df77a2ae2ef7571ff16d2db3)
* [ios逆向环境踩坑](https://mp.weixin.qq.com/s?__biz=MzkwNzQwMTA4OQ==&mid=2247483786&idx=1&sn=9782acd4b75b06a1c1959e5bb326d435)
* [嵌套解析器情况下的XSS](https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247484741&idx=1&sn=589a5536938a3e0d3be32ac68e56c63f)
* [如何使用mc钓鱼](https://mp.weixin.qq.com/s?__biz=MzkyNTU3MzA2Mw==&mid=2247483908&idx=1&sn=6fbad1e7d704c872e8da41d505f3e40f)
* [先耍一个小花招让他们少睡几夜好觉哇](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247504732&idx=1&sn=5ebc8e1299b3a924bc42c83ea6f81bae)
* [论文一直投不中？被退稿十几次之后，我终于找到发论文的捷径，半年连发3篇！](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247504732&idx=2&sn=aac88224a5565ad7dd66b5a50490cca8)
* [亿赛通CDG续保活动再度来袭，买赠加码继续！](https://mp.weixin.qq.com/s?__biz=MzA5MjE0OTQzMw==&mid=2666307526&idx=1&sn=b1c1c3c2e1cce24006050618145e8a40)
* [安博通获“上证鹰·金质量”科技创新奖，“AI+算力”赋能数字安全新生态](https://mp.weixin.qq.com/s?__biz=MzIyNTA5Mzc2OA==&mid=2651138645&idx=1&sn=3a2528631b0c2ec7b46056666ebdac19)
* [山石网科亮相2025数智科技生态大会，以“双A战略”与自研芯片实力，共筑数字安全新生态](https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661304482&idx=1&sn=aedfac5c56c062253a9183f98c85f874)
* [双A战略赋能医疗安全丨山石网科亮相安徽医院数智化创新大会](https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661304482&idx=2&sn=3eaeab9a630f012d0e2815e9ce8a0432)
* [吃瓜京东外卖随心囤深夜重大Bug](https://mp.weixin.qq.com/s?__biz=Mzg4NDg2NTM3NQ==&mid=2247485621&idx=1&sn=8a1b06fc195dc7f960de46cb2885dec3)
* [每周网络安全简讯 2025年 第49周](https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247522117&idx=1&sn=33d37271d8c6ff445913f07b563e7755)
* [安全动态丨网络空间安全动态第304期](https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247522117&idx=2&sn=9e26ac970ed14f7ee54b9e647dfb8086)
* [安全预警汉王e脸通 addVisitDeviceAppointmentInfoTest fastison 反序列化](https://mp.weixin.qq.com/s?__biz=Mzk0ODYwNjI1NA==&mid=2247484169&idx=1&sn=25f956365f6ff84f22337678cb0238c8)
* [Radware LLM 防火墙解决方案](https://mp.weixin.qq.com/s?__biz=MjM5ODE0Njk2Nw==&mid=2653021743&idx=1&sn=9aa7a2ec1cdca51b2259d663a871963b)
* [DASCTF 2025 下半年赛writeup](https://mp.weixin.qq.com/s?__biz=MzkyMDcyODYwNw==&mid=2247487819&idx=1&sn=dd3cb865145fd6be0dea87cad466d8cb)
* [安势热招岗位｜你有offer待接收......](https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247492249&idx=1&sn=9a7f3639a9bd951ba7981154d57d2cf3)
* [周刊 I 网安大事回顾（2025.12.1—2025.12.7）](https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247504551&idx=2&sn=6f420463df8471db13dd072a87647f78)
* [信息搜集之边缘资产和隐形资产的发掘](https://mp.weixin.qq.com/s?__biz=MzkxNzIzNDExMA==&mid=2247486795&idx=1&sn=e87482154d7848310bd22cafaa25a997)
* [2025 人工智能 + 行业发展蓝皮书](https://mp.weixin.qq.com/s?__biz=MzkzMjcxOTk4Mg==&mid=2247486425&idx=1&sn=46d69fea1bad0821e2046b15289ba854)
* [提醒一下，网络安全面试就这些题，速存🔥](https://mp.weixin.qq.com/s?__biz=MzkyODk0MDY5OA==&mid=2247488339&idx=1&sn=6660aeefe358273418cad4555a7a0017)
* [Copilot 介绍与常见问题解答](https://mp.weixin.qq.com/s?__biz=MzkxNzY0Mzg2OQ==&mid=2247488105&idx=1&sn=34f62151c2da38238f64ec9876b49583)
* [赛事中标丨山西大学软件工程（网络安全）方向网络安全竞赛设备采购项目](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247495350&idx=1&sn=5c101bec5f28586f41263489ea944832)
* [赛事定档 | 第九届HECTF 2025信息安全挑战赛开赛预告](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247495350&idx=3&sn=92fd9f6b3bdf8da0247269171641c572)
* [物产中大数科承办2025年浙江省网络安全行业职业技能竞赛](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247495350&idx=4&sn=fc7d3506204ab8d3c9db21ac73173096)
* [古剑山第三届全国大学生网络攻防大赛省赛WP](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247495350&idx=5&sn=493b991630c092a66ca4aef2d8f513df)
* [第二届“古剑山”全国大学生网络攻防大赛 PWN&RE wp](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247495350&idx=6&sn=4b6eedb37e8a61cff1f0c0e9c7fe4c92)
* [靶场415第八章：千身幻影，破隙之钥](https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247486880&idx=1&sn=bbcd1cde71c7561252a5ecc74df2dd6f)
* [2025年广州国际汽车展览会展后报告（50页完整版）](https://mp.weixin.qq.com/s?__biz=MzkyOTMwMDQ5MQ==&mid=2247522282&idx=1&sn=a7057a33f76d213b72f8ca939873ca04)
* [紧急预警：npm 再次沦陷！Sha1-Hulud 变种卷土重来，偷不到密钥竟直接“删库”？](https://mp.weixin.qq.com/s?__biz=Mzk1NzM4NzMyMw==&mid=2247485377&idx=2&sn=ed49314efca70662cb228bff8bf5e581)
* [解析\"庄周梦蝶\"](https://mp.weixin.qq.com/s?__biz=MzYzNzA5MzQ3Nw==&mid=2247485419&idx=1&sn=f06dbb5cf6c2bb5e5a961155d32b6f82)
* [这年头还有前端校验getshell？](https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247489265&idx=1&sn=ed46ba8bc49be9ff401df79820a44a72)
* [ESP8266实时显现你的服务器信息](https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247514915&idx=1&sn=9bdca417109d788ff4d8cdc01d0b2d2a)
* [强烈建议尽快搞个软考证！（政策福利）](https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247509503&idx=1&sn=53f3a115c8440bcb6e0dc43134c8d7c6)
* [坚守底线 保持初心](https://mp.weixin.qq.com/s?__biz=MzkyNDU2MDk4NQ==&mid=2247484302&idx=1&sn=1f0fa683d36890b2bba486e51f055ebc)
* [网络“韧性”，你理解对了吗？](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247517050&idx=2&sn=c0ce6ee3002bdd6587997da04bb2dc59)
* [5th域安全微讯早报20251208293期](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247517050&idx=4&sn=7c5d89184283bc61c09d6e9b891781c9)
* [暗网快讯20251208期](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247517050&idx=5&sn=474ea2fb4c1ed54244ae43b5b870f29c)
* [派出所两名辅警盗用副所长数字证书售卖公民信息 牟利11.7万元获刑](https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247499785&idx=1&sn=9ad58dba951c05cb9eb44c42199c6c64)
* [《工业领域政策汇编》2025年12月 第2期](https://mp.weixin.qq.com/s?__biz=MzAwNTc0ODM3Nw==&mid=2247490449&idx=1&sn=460a1826d441f87aaa82495269b7770f)
* [鼎信安全 | 网络安全一周资讯](https://mp.weixin.qq.com/s?__biz=MzIwOTc4MTE4Nw==&mid=2247503223&idx=1&sn=eaffd296a0c35cd71de79113ac70bd21)
* [用科技让合规更简单：史宾格获“AI领航杯”终端算力与隐私保护赛道佳绩](https://mp.weixin.qq.com/s?__biz=MjM5MTAwNzUzNQ==&mid=2650511834&idx=1&sn=1254738e393d9a58fc490ff9d30386de)
* [GDPS2025 必冲 Workshop｜AI 驱动・码力全开！](https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247489170&idx=1&sn=75f4427c5a9d98768b41146fcc4dd817)
* [知识科普| 虚拟币盗窃](https://mp.weixin.qq.com/s?__biz=MzU1OTc2MzE2Mg==&mid=2247490073&idx=1&sn=ed8510159e9db4f04f57df115573a828)
* [安全简讯（2025.12.08）](https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501868&idx=1&sn=c992546b28c8ac016de4de3973d4f2c0)
* [美国新版国家安全战略：颠覆与矛盾并存](https://mp.weixin.qq.com/s?__biz=Mzg2NTYyODgyNg==&mid=2247508962&idx=1&sn=68328e5e72541edf1aa02ac822ec02fa)
* [30条判断，关于2025年全球人工智能发展趋势](https://mp.weixin.qq.com/s?__biz=MzI3NjUzOTQ0NQ==&mid=2247522388&idx=1&sn=2b26a33e56af78c68caeb0e22da2b6d7)
* [130个资源网站，总有一个你用得着！](https://mp.weixin.qq.com/s?__biz=MzIxODQzOTA5Mg==&mid=2247487082&idx=1&sn=88e03e0e45553b234f7f1bd30922a43e)
* [今日分享|GBT30290-2025 北斗卫星定位车辆信息服务系统 第1部分：功能描述](https://mp.weixin.qq.com/s?__biz=MzUyNjk2MDU4MQ==&mid=2247487593&idx=1&sn=ccc2564487bd79f619a3cb2d591f4329)
* [梆梆安全 “金融反诈移动安全方案” 入选2025数字金融服务创新与场景应用优秀案例](https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651136585&idx=1&sn=b56e9efb1d813dcd36120240916db00a)
* [郑州渗透项目/4天/3200](https://mp.weixin.qq.com/s?__biz=MjM5MzI3NzE4NA==&mid=2257484495&idx=1&sn=d0015e06f1aaac3e87ec204c4d36cfb3)
* [汽车行业大模型应用实战培训课程 2025](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247629282&idx=2&sn=1a460a4f2f5113e0e6b26bc1f75e4e02)
* [每周一品手机屏蔽柜](https://mp.weixin.qq.com/s?__biz=MjM5MzUyMzM2NA==&mid=2652915022&idx=3&sn=fdab3c219bb1e4cd3fe05ec6afdb3145)
* [软件下载风险预警，反诈 app 也救不了啊](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247504596&idx=1&sn=ae16d95a12f59fc8ff6089b4540bab72)
## 安全分析