From a85e217b42a063bfdcfafda5998b41f67410bfe5 Mon Sep 17 00:00:00 2001 From: ubuntu-master <204118693@qq.com> Date: Tue, 30 Sep 2025 00:00:01 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- results/2025-09-29.md | 21 ++++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/results/2025-09-29.md b/results/2025-09-29.md index d5792b7..22e3851 100644 --- a/results/2025-09-29.md +++ b/results/2025-09-29.md @@ -3,7 +3,7 @@ > 本文由AI自动生成，基于对安全相关仓库、CVE和最新安全研究成果的自动化分析。 > -> 更新时间：2025-09-29 20:04:46 +> 更新时间：2025-09-29 22:26:09 @@ -53,6 +53,8 @@ * [一次接口文档泄露到站点接管到RCE思路分享](https://mp.weixin.qq.com/s?__biz=MzkwMjMzMDM3Mg==&mid=2247483904&idx=1&sn=fd51644a703ad3a8ac17d9538e9463e2) * [CNVD漏洞周报2025年第37期](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496385&idx=1&sn=a0679c73ea3175bd731b8631456a480c) * [上周关注度较高的产品安全漏洞20250922-20250928](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496385&idx=2&sn=b1f4564d8332222df845ba876c883ff5) +* [高危漏洞预警DataSpider Servista信息泄露漏洞CVE-2025-48006](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490807&idx=1&sn=3d2cb4823b6d7d7cd7ec54b3c757b461) +* [游戏漏洞挖掘](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498328&idx=1&sn=b899bb828d4367f2b99c1de2bef4b7dd) ### 🔬 安全研究 @@ -78,6 +80,8 @@ * [邮件安全技术：TLS-RPT](https://mp.weixin.qq.com/s?__biz=MzkxMjY3MTI4Mg==&mid=2247485407&idx=1&sn=0c8da610ba38a12cfddc576c9d338f05) * [邬江兴院士 | 破击美欧网络弹性铁幕——基于自主知识技术体系的数字生态系统底层驱动范式变革](https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247534932&idx=1&sn=38e668cb61418fd35b9b8d2395acf4ed) * [绿盟可信数据空间技术解读: 可信计算](https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499100&idx=1&sn=4ff1bfe4c5298fc07472e7744c7ef958) +* [关于第四批通过信创数智技术服务能力一级评估的单位的公示](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254738&idx=4&sn=b66451897a6f175722ba44848cc08cf9) +* [公示安徽省密码技术应用员及网络与信息安全管理员（网络安全管理员）职业技能等级认定成绩公示](https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485904&idx=1&sn=6d96f43dddee91afc9402c24cedd2934) ### 🎯 威胁情报 @@ -107,6 +111,9 @@ * [译苑雅集Vol. 1AI 能否修复坏流程？技术 vs 组织惯性的终极辩论](https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247484846&idx=1&sn=0600b4660839f12975e4418580e089b8) * [Vaptcha逆向分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601462&idx=1&sn=1ee2829059d9a82fc6852b4f7bfcaf71) * [近80%的英美爱尔兰网安负责人担心未来一年遭国家黑客组织攻击](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524096&idx=2&sn=c3d91d004d434ade0e64f83a4df0e9b9) +* [主动防勒索病毒解决方案---以诱捕方案，主动抵御东西向威胁](https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247493148&idx=1&sn=b91e7f3b4205ebb15ce863c17cd47bbe) +* [伊朗曝光以色列机密核武，中东棋局中的情报大战与地缘震荡](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247511464&idx=1&sn=e45d560a39678c330f433eb0a96dc5d5) +* [恶意软件攻击的种类](https://mp.weixin.qq.com/s?__biz=Mzk4ODI4MDEzNQ==&mid=2247483920&idx=1&sn=6bd5e55223770c1cc60bf8a14364a92d) ### 🛠️ 安全工具 @@ -131,6 +138,8 @@ * [红队工具红队视角下CobaltStrike后渗透插件更新](https://mp.weixin.qq.com/s?__biz=Mzk0MDczMzYxNw==&mid=2247484614&idx=1&sn=7415a2fd8c8fc25313d2f59f2514f88d) * [智能网联汽车信息安全测试白皮书（2025）](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247627639&idx=1&sn=f834536b2e886c08d68df8bd7575e62b) * [App抓包常用工具和方法](https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247498705&idx=1&sn=b2f78f55b6de4c71dbb92a6ea49397e7) +* [一款高端的网络钓鱼测试工具 -Mip22](https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247514133&idx=1&sn=e11c47c96b3172a9a3d98667c2a9353c) +* [敏感信息管理工具 v2 新增云厂商 OSS 功能](https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491410&idx=1&sn=7a0ac3ec30f9cbd3b129652fdb44be43) ### 📚 最佳实践 @@ -201,6 +210,7 @@ * [内网明文传输到底算不算数据风险？这篇看完你就明白了](https://mp.weixin.qq.com/s?__biz=MzI0NjAyMjU4MA==&mid=2649597547&idx=1&sn=9e81a2a42b8cba058cf194d206cdbd70) * [北京互联网大会｜观安信息双擎驱动：可信数据空间与AI安全护航数字北京](https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247509490&idx=1&sn=8d90949dffc1cc67b995a113a49832db) * [全球瞭望｜网络安全重大事件精选（187期）](https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601669&idx=1&sn=f0e527c72f776f2d3844903ae463c533) +* [网络安全公司招投标所需公司资质一览](https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247492060&idx=1&sn=70ff8f86a30ac5d44c9cd8786ba7030c) ### 📌 其他 @@ -363,6 +373,15 @@ * [美国白宫科技政策办公室就人工智能创新障碍征求公众意见](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651621875&idx=2&sn=5457d138fbc8bf07d59e5ab3d73979aa) * [一键“梳理”世运会网络资产，这个平台你一定要知道！](https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650625561&idx=1&sn=33de3134a46c4dd1033b976460c5cbdc) * [伙伴故事-海蔚蓝从同行到同心，一份基于 “高价值” 的双向奔赴](https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650625561&idx=2&sn=4120550c86985ebc505b95160f423597) +* [Windows内核攻防与红队免杀指北](https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484808&idx=1&sn=f800e0e7dae67e9ae956e671ca3cb088) +* [KerberosI-Kerberos是如何工作的](https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486640&idx=1&sn=a8db29fe43fba33fac124e7cc11da829) +* [VirtualBox虚拟机如何与Vmware虚拟机互相通信](https://mp.weixin.qq.com/s?__biz=MzE5ODEzNDUwMA==&mid=2247485074&idx=1&sn=0fabfff52dc04993e1a1cff46e94c94f) +* [量化之路（三）](https://mp.weixin.qq.com/s?__biz=MzkyMDc0NDEzOA==&mid=2247483944&idx=1&sn=b276dfa0ada3647b83acb43be0928128) +* [大赛活动10月31日截止 ！第四届“鼎信杯”大赛邀您参赛](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254738&idx=1&sn=86996d670ee0863edbad0f3653762b0b) +* [中国评测牵头制定的GB/T 45502-2025《服务机器人信息安全通用要求》国家标准即将实施，赛迪机器人认证为产品安全保驾护航](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254738&idx=2&sn=21f0cc02a13800a82f333c037ac33bbd) +* [碳核查中风险评估必知的五大步骤（上）](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254738&idx=3&sn=bfaf77dc1345856b31ece4a5a16d08b8) +* [解决学习通无法粘贴文字或代码的问题](https://mp.weixin.qq.com/s?__biz=MzkyNTY2Nzk0MQ==&mid=2247483802&idx=1&sn=45d50403d2b25e7ecac33557a12bdc5f) +* [特朗普签署行政令，TikTok在美封禁风波落幕](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247520250&idx=1&sn=00e37392d16162c92047bb5ac6fd63c1) ## 安全分析 (2025-09-29)