From c30ecf7a56e04819f9b3db27669f552233ca2575 Mon Sep 17 00:00:00 2001 From: ubuntu-master <204118693@qq.com> Date: Tue, 9 Dec 2025 00:00:02 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- results/2025-12-08.md | 25 ++++++++++++++++++++++++- 1 file changed, 24 insertions(+), 1 deletion(-) diff --git a/results/2025-12-08.md b/results/2025-12-08.md index 1c1cfa5..1af1110 100644 --- a/results/2025-12-08.md +++ b/results/2025-12-08.md @@ -3,7 +3,7 @@ > 本文由AI自动生成，基于对安全相关仓库、CVE和最新安全研究成果的自动化分析。 > -> 更新时间：2025-12-08 20:05:52 +> 更新时间：2025-12-08 22:37:48 @@ -50,6 +50,9 @@ * [网络安全目录遍历漏洞](https://mp.weixin.qq.com/s?__biz=MzU1Mjk3MDY1OA==&mid=2247521493&idx=1&sn=0c0e7615a4c2554999ffc3e0cb2815ec) * [CNCERT：关于React Server Components存在远程代码执行漏洞的安全公告](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515305&idx=2&sn=90c2cfd9ff04c23d553318f6709f52fb) * [从CVE复现看栈溢出漏洞利用](https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556938&idx=1&sn=3e8a4877711b4ec0e4891020d9668c9f) +* [用友NC漏洞剖析，从Nday到1day的攻防实践](https://mp.weixin.qq.com/s?__biz=MzYzNDE4ODczNA==&mid=2247484748&idx=1&sn=dd3ee5b458a51e3ca51e5a9699445484) +* [孚盟云 GetIcon.aspx sql注入漏洞](https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493510&idx=1&sn=eef895948cb685d02f08df3d3ea1bb98) +* [高危lz4-java漏洞可能导致敏感数据泄露（CVE-2025-66566）](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331879&idx=4&sn=334f57f901c649f97da439a2d2093f7d) ### 🔬 安全研究 @@ -82,6 +85,8 @@ * [AI+ID | 现有标识体系对新一代AI的适配性研究](https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247594575&idx=1&sn=47ab5e8a9de3f22d951b65782e3ab495) * [SecOC基础原理详解](https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247563843&idx=2&sn=1fe972734b1eaaa6a964b5e382647c7f) * [Android学习笔记第2课 Kotlin语言、Compose框架及示例代码分析](https://mp.weixin.qq.com/s?__biz=MzYyNTA5MDUyOQ==&mid=2247484011&idx=1&sn=5bf8d592d72170f438db271b7c5269be) +* [介绍位新朋友：N1 PRO，你最强的网络安全技术助手](https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247488371&idx=1&sn=c5f7fa10a0acb440c370da875bb21e8d) +* [高校学生如何更好的开展网络安全研究](https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247488371&idx=2&sn=c4d7eb36e4b2a4bc389afd108acc686a) ### 🎯 威胁情报 @@ -109,6 +114,7 @@ * [搭建自己「威胁情报云平台」上线！一键聚合全球威胁数据，让安全运营更智能！](https://mp.weixin.qq.com/s?__biz=MzAxNTQwMjAzOA==&mid=2452515045&idx=1&sn=2fc01a1cfcad91a28ea039298bc1f2c2) * [30小时教你进阶CTF-密码学：顶尖硕博战队亲授，从古典密码到RSA攻击](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604907&idx=1&sn=8a4116de09a9ee9a46a0d8e5420990dc) * [您的安全态势处于何种水平？快来查看《2025网络威胁防御报告》](https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247493416&idx=1&sn=ecadc1ae03ff60b3e15b113ae37e0106) +* [Lazarus APT组织攻击样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247494677&idx=1&sn=013a77051b2ae1642d5376dd88800736) ### 🛠️ 安全工具 @@ -141,6 +147,8 @@ * [Dscan：全方位自动化攻击面管理与漏洞扫描平台](https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247495877&idx=1&sn=c2107028bbc3080b66ae8458e5184a00) * [AI 代打 CTF？用 Cursor + MCP 打造你的全栈自动化攻防智能体](https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247503033&idx=3&sn=234262b638a2430ee2aa0c36127c89c5) * [关注丨网络关键设备安全检测结果（第23批）](https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247536309&idx=1&sn=65bf3e62295b85ad88e4eb1f2482634d) +* [蓝队 FastMonitor - 网络流量监控与威胁检测工具](https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247493925&idx=1&sn=a952c400c3ee63c8401ff57692745dd1) +* [Next.js发布扫描工具，可检测并修复受React2Shell漏洞影响的应用](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331879&idx=2&sn=cf79186c77bbc4ed43e5bb14b7962893) ### 📚 最佳实践 @@ -211,6 +219,9 @@ * [国家互联网信息办公室关于《网络数据安全风险评估办法（征求意见稿）》公开征求意见的通知](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247502113&idx=1&sn=fb9bd5023bf16a392e226a1be4111351) * [至少148亿元！近三年受害企业支付勒索软件赎金金额创新高](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515305&idx=1&sn=a4e0844de579522efff55249fdcc42a3) * [热点速览 | 每周网安大事件（20251201-20251207）](https://mp.weixin.qq.com/s?__biz=MzkxMzAzMjU0OA==&mid=2247553585&idx=1&sn=0b46c6a3a3708370d220ff30714dc10a) +* [墨西哥 ｜泰国｜巴西 数据泄露一览](https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247488449&idx=1&sn=6789e94a2e3379291ae51b5a9b818c15) +* [《网络数据安全风险评估办法（征求意见稿）》原文及专家解读](https://mp.weixin.qq.com/s?__biz=MzA3NDMyNDM0NQ==&mid=2247485255&idx=1&sn=ae00d51504cf50ea4fe8e390724b3510) +* [2025 年 11 月被投诉钓鱼网站 TOP10 公布，假冒腾讯公司、国家人社部、苹果公司前三](https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247543353&idx=1&sn=6a9f6972c497373a985da438104fe245) ### 📌 其他 @@ -385,6 +396,18 @@ * [美国白宫发布新版《国家安全战略》，强调“西半球优先”](https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651622228&idx=2&sn=dc3f422956816af509c20d3ca8133cbb) * [专家解读｜强化大型网络平台个人信息保护的法治举措——《大型网络平台个人信息保护规定（征求意见稿）》解读](https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247510083&idx=1&sn=f38b44fa64a39ff2ba7527f5cda545c4) * [荣耀时刻｜靖安科技入选浙江省科技新小龙](https://mp.weixin.qq.com/s?__biz=Mzk0NjIzOTgzNw==&mid=2247501079&idx=1&sn=bf8ba99c6f7a2b2a6f91d59f02f86f0a) +* [每日课程更新](https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247508563&idx=1&sn=ea9fad7b2a33d72b35db4960bcf2d68b) +* [兰德观点：AI是否对生产力增长产生影响？](https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247522409&idx=1&sn=1b19f821c37ab3cc1f192c04e5282f19) +* [研发提效的尽头是安全内卷？我们和500家头部客户聊了聊](https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247514225&idx=1&sn=dbd8760049331b47021bbc551e06ade2) +* [AI Coding的红温时刻](https://mp.weixin.qq.com/s?__biz=MzkzMDgyMTM1Ng==&mid=2247485172&idx=1&sn=c126ae7400e9a2b2e8fad077d9cc1598) +* [大话工控安全工业控制系统行业知识：水泥行业](https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247485725&idx=1&sn=6c052989a07dfb764c5991c4a133a990) +* [昨日数学题的部分解答](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488857&idx=1&sn=c8cafbe97df3f14ecb618fc77a23a772) +* [IoT安全 | 无人机安全攻防 一：系统架构与MAVLink协议基石](https://mp.weixin.qq.com/s?__biz=MzkyODMxMjQ3OQ==&mid=2247486449&idx=1&sn=7f0ce2b5355e89d90fad32d9a7a6962a) +* [夸克AI处理发黄图片的效果](https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247495906&idx=1&sn=ccc7becd43f6374746a0660aa191d60c) +* [G.O.S.S.I.P 阅读推荐 2025-12-08 WOOT 2025](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501067&idx=1&sn=75f88214bf37af5c12b06099532c6300) +* [周末开课！信息安全敲门砖Security+双12优惠上车！](https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247525907&idx=1&sn=17895b968adefba914604124ba31a2c2) +* [搞定CISA自学！考试包套餐是真行](https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247525907&idx=2&sn=fa0a22d79c230724188c26b1b5c815da) +* [智能汽车遭远程锁死，俄罗斯数百辆保时捷出现大规模瘫痪](https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331879&idx=3&sn=4e4cf67bc10d4a653dd1f0f54b9b1ffb) ## 安全分析