This commit is contained in:
ubuntu-master committed 2025-10-09 18:00:02 +08:00
1 parent e94517ecbb
commit fa5515fa79
1 file changed
+50 -1
+50 -1
View File
@@ -3,7 +3,7 @@
> 本文由AI自动生成,基于对安全相关仓库、CVE和最新安全研究成果的自动化分析。
>
> 更新时间:2025-10-09 14:01:32
> 更新时间:2025-10-09 16:55:12
<!-- more -->
@@ -52,6 +52,18 @@
* [黑客声称 Discord 漏洞暴露了 550 万用户的数据](https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247493641&idx=1&sn=9e2f937f4fe70c30d8a4e843bdc3e894)
* [RediShell:Redis 中存在严重远程代码执行漏洞 CVE-2025-49844,CVSS 评分为 10](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247503256&idx=1&sn=54783c8765dfe863900f7ee99d297f69)
* [通过 SSH 代理命令注入换行符进行利用(CVE-2025-61984)](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247503256&idx=3&sn=5dede13d1a062c1ed0c32c6a2c7d4bc2)
* [在野利用Oracle E-Business Suite 未授权远程代码执行漏洞CVE-2025-61882](https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494883&idx=1&sn=bde1c2fcd68d07a81055c8c334d3958d)
* [双重警报!黑客扮谷歌 HR 钓 Gmail,Linux Sudo 高危漏洞已遭利用](https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247536492&idx=1&sn=fa01c5f39d30ede858e78d89e4f4d666)
* [警惕!特斯拉车载漏洞可被攻,攻击者能拿 Root 权限](https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247536492&idx=4&sn=e133e6f030feef0869e39ce8db6cea34)
* [CVE-2025-49844(RediShell)](https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247488038&idx=1&sn=e0c023d89990045e83714e7f4f83954b)
* [漏洞通告Redis Lua 脚本引擎远程代码执行漏洞CVE-2025-49844](https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501641&idx=2&sn=f943767480a974bacb07ac4def818bbd)
* [漏洞通告Oracle E-Business Suite 远程代码执行漏洞CVE-2025-61882](https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501641&idx=3&sn=10617ea62412e61f383972af9d2b7b45)
* [漏洞挖掘文档: TURN服务器泄露利用](https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247488951&idx=1&sn=3709416ce1b8100a9106c5c59681b6a6)
* [2025年度(第二期)CNNVD漏洞奖励评选结果公告](https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463686&idx=1&sn=eb59daf277b64dcb43fcd76ccb768896)
* [CNNVD关于Redis资源管理错误漏洞的通报](https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463686&idx=2&sn=1a9bc6453a6cf8a876bf113f064ed4b5)
* [已复现Oracle E-Business Suite 远程代码执行漏洞CVE-2025-61882安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503984&idx=1&sn=d2a61919ec6319bb86febfc82438f0de)
* [漏洞预警 Intellian Aptus Web 卫星控制系统 libagent.cgi 命令执行漏洞](https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492342&idx=1&sn=0a8c6e44a940652f6a8fc916ddc51707)
* [SRC多个高校访客预约系统存在安全漏洞](https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247490238&idx=1&sn=b977465de25ccbbfd675751601ebe764)
### 🔬 安全研究
@@ -69,6 +81,10 @@
* [倒计时4天!第四届中国研究生网络安全创新大赛报名即将截止](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247494495&idx=2&sn=d36ae69ab3028ab51968394a528745ec)
* [粤黔数字安全研究院联合赛宁网安共建“安全靶场综合体”](https://mp.weixin.qq.com/s?__biz=MzA4Mjk5NjU3MA==&mid=2455490205&idx=1&sn=62152b4b6829e0102313ea6ef259dd37)
* [中孚信息赋能信息支援部队保密培训,以硬核技术筑牢国防信息安全防线](https://mp.weixin.qq.com/s?__biz=MzAxMjE1MDY0NA==&mid=2247512307&idx=1&sn=bb7a321948c59258318477aada5f13ae)
* [汽车信息安全技术的现状与对策研究](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247627774&idx=3&sn=5b05cbe4593679c6aa22a0a35ea93134)
* [目次 | 《信息安全研究》第11卷2025年第10期](https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664996583&idx=1&sn=b604f4ea9c484cd42a4142396fb398e5)
* [栈迁移学习与分析](https://mp.weixin.qq.com/s?__biz=Mzk4ODEwMzE3NA==&mid=2247486158&idx=1&sn=da9c27f7d0e445fb5df85d274e169812)
* [美国研究团队开发专门保护无人机的实时网络防御系统](https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247490758&idx=1&sn=408c60b89660aac019a7ea310f4d8856)
### 🎯 威胁情报
@@ -86,6 +102,8 @@
* [朝鲜VS美国APT武器库终极对决:谁才是真正的“数字霸主”?](https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486859&idx=1&sn=2cd8bb11e281b62eec6ac09f12e64b6b)
* [深入观察:一名技术娴熟黑客的实战手法](https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247503256&idx=2&sn=ef38f8113d33a0567e4f499c0498b773)
* [安全警报!红帽遭攻击:570GB核心开发库泄露](https://mp.weixin.qq.com/s?__biz=MzAwMTg3MDQzOA==&mid=2247512182&idx=1&sn=6bf4dab759e343f717641402530351aa)
* [朝鲜黑客专偷富豪加密货币!啤酒巨头被 “麒麟” 勒索致瘫痪](https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247536492&idx=2&sn=7cd95b9081e07a6b0d365372400fb6ed)
* [黑客入门教程从零基础入门到精通,看完这一篇就够了!](https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247487353&idx=1&sn=4aa7779e08d01fb723805186fc74a854)
### 🛠️ 安全工具
@@ -99,6 +117,11 @@
* [喜报|双赛斩获佳绩 彰显数智测试网络安全硬实力](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247494495&idx=3&sn=4c017af76da9503713d98f4c52387de5)
* [老板让你做App测试,还在摇头说不会?](https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247489878&idx=1&sn=290c3b7fa174d7257bff352d567ca910)
* [高效渗透!Web资产存活快速验证工具](https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650612636&idx=4&sn=c77d941e5fa309a7253559279579a6bd)
* [渗透必备!New 自动化加解密 Tools,下载链接拿走](https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247536492&idx=5&sn=43366e0d578bf272847fc81e59c0f026)
* [基于LSTM网络的车载CAN总线异常检测研究](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247627774&idx=1&sn=d15d079020a3bd011b039e17f947d253)
* [AI开发助手=大规模风险自动化?](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540452&idx=1&sn=89ac290030841efeca8587cd1f229e35)
* [节后报喜 | 谷安天下同月连获三家金融机构信赖 ——xa0IT审计专业实力再获市场验证](https://mp.weixin.qq.com/s?__biz=MzU4NDExNDQwNA==&mid=2247490437&idx=1&sn=970338f5015531d3f40be07f131fcfab)
* [新型工具EDR-Freeze曝光:借助Windows错误报告系统 从用户模式中实现安全软件规避](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584820&idx=1&sn=da434f3425b5eeb869ca175a28f07ec4)
### 📚 最佳实践
@@ -112,6 +135,11 @@
* [开源安全管理平台wazuh-文件完整性监控FIM](https://mp.weixin.qq.com/s?__biz=MjM5NDMwMjEwMg==&mid=2451852336&idx=1&sn=28b2d336254b4ac0669b4ef6ed258017)
* [前沿 | 跨境数据安全传输的探索与实践](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664250415&idx=2&sn=a585aa644e8ee2501a56246a4ddeff3c)
* [AI 提示工程完整指南](https://mp.weixin.qq.com/s?__biz=Mzk0NjY3NjE4Ng==&mid=2247485729&idx=1&sn=4b1c6d85d8238ac1c2d05f53cbbd00e2)
* [2025最新版Kali实战教程](https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247490648&idx=1&sn=a43fb7216a9b8a9341d1af35585374e4)
* [暗网监控怎么搞?CISO 指南来支招](https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247536492&idx=3&sn=d69ac141bed006ed56e883e62fae5569)
* [一体化融媒体平台网络安全建设和面临的网络安全挑战](https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486941&idx=1&sn=695605fc7150fc70db1924f9970390a1)
* [国家能源局关于发布智能电网国家科技重大专项2026年度公开项目申报指南的通知](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247533964&idx=2&sn=7ef645491cac80ccac19e17e4043ed52)
* [山石方案|金融公有云VPC边界安全防护解决方案](https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661303248&idx=2&sn=895f4bfd4d9a1ab7a86c1bdfcfeacf9f)
### 🍉 吃瓜新闻
@@ -130,6 +158,10 @@
* [记录一次师傅带我越权导致的信息泄露](https://mp.weixin.qq.com/s?__biz=MzE5MTMwODY0NQ==&mid=2247483777&idx=1&sn=bb8bdd8e46ab4034818186a9211dc672)
* [网安牛马如何解决客户的数据安全问题?(场景一)](https://mp.weixin.qq.com/s?__biz=MzkwOTczNzIxNQ==&mid=2247487125&idx=1&sn=7607053a5c5293e062da2a2c96c79462)
* [可信安全 云服务用户数据保护能力评估通过名单&证书信息](https://mp.weixin.qq.com/s?__biz=Mzk0MjM1MDg2Mg==&mid=2247507812&idx=1&sn=3a98de331a3a1ac355bc8f79cb97ba60)
* [能源行业数据安全研讨会顺利举办](https://mp.weixin.qq.com/s?__biz=MzUyMzA1MTM2NA==&mid=2247499442&idx=1&sn=bb0678f9cb5c46738c0c793999c09c82)
* [中国工程院院士邬贺铨:AI驱动数实融合 数据要素成关键](https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247533964&idx=1&sn=2f1bcd05b1e1197b06dbf4811dcb60bd)
* [业界动态国家数据局发布《关于举办2025年“数据要素×”大赛全国总决赛的通知》](https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664996583&idx=2&sn=09fbf1b3252fab54f74e7cf5b1ebf922)
* [黑客借虚假Microsoft Teams安装程序植入Oyster后门入侵企业网络](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584820&idx=2&sn=2e766e9848df09fbf6a84608cf734e8c)
### 📌 其他
@@ -215,6 +247,23 @@
* [为什么网安人越老越香?3 个核心逻辑 + 1 条捷径,新人也能快速积累经验](https://mp.weixin.qq.com/s?__biz=MzkzNzk5MjEyNg==&mid=2247486084&idx=1&sn=2251b2d862dacc006db64b189120343a)
* [做完这30个网安项目,你直接成网安大佬](https://mp.weixin.qq.com/s?__biz=MzkyODk0MDY5OA==&mid=2247487112&idx=1&sn=ca3346dcf5cd4ec24e2d399642ef4a9a)
* [国家级认证再添重磅!默安科技跻身重点 “小巨人”,彰显硬核科创实力](https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247501373&idx=1&sn=6547d3630469cb92db13191b65d0e0fa)
* [RWA领域战略合作|永信至诚与商汤科技在香港签约,以“AI + 安全”赋能全球数字资产产业发展](https://mp.weixin.qq.com/s?__biz=MzAwNDUyMjk4MQ==&mid=2454832328&idx=1&sn=ae38d470550f930f95aa579ec792c773)
* [智能网联汽车 SOME/IP 在线实战培训课程 2025](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247627774&idx=2&sn=0ff1990303c983f874e6843f30bfcd5a)
* [网络安全信息与动态周报2025年第39期(9月22日-9月28日)](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500695&idx=1&sn=e84cdd2049765e18bda5d1a3daf639fb)
* [湘江论 “安” 缺你不可!补天长沙站议题征集倒计时9天!速来投稿!](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509404&idx=1&sn=ad1cac820bdfb45518e495916e302cdb)
* [单洞最高12万!百万奖池等你来拿!|微信、腾讯云、混元联合TSRC众测开启](https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207485&idx=1&sn=3fe5feb93300b4b84e9e0b50965cf381)
* [安全简讯(2025.10.09)](https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501641&idx=1&sn=1dd13c948b79493bf193efb06c7b1fc8)
* [Spring Bean多线程并发安全性](https://mp.weixin.qq.com/s?__biz=MzE5MTQzMzg5MA==&mid=2247484113&idx=1&sn=29d58decd7facdc596ae98c77c26242d)
* [业界动态网安市场周度监测(2025-10-09)](https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664996583&idx=3&sn=b7062d904166bf9817f9f51c62401034)
* [想学网安?不会有人还不知道吧…](https://mp.weixin.qq.com/s?__biz=Mzk0MzcyNjMyNg==&mid=2247486537&idx=1&sn=ab2ca45f425322b16843cf8a4cce1e8f)
* [2025-9月Solar应急响应公益月赛排名及官方题解](https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247504378&idx=1&sn=5b8d8c1d7f97a05cf03799e3da4c900f)
* [团队科研成果分享-59](https://mp.weixin.qq.com/s?__biz=MzI1MTQwMjYwNA==&mid=2247502819&idx=1&sn=51d69a86521db88324e18cfc1046862d)
* [每周文章分享-231](https://mp.weixin.qq.com/s?__biz=MzI1MTQwMjYwNA==&mid=2247502819&idx=2&sn=25ac55d03e917abeca35745581ce385d)
* [AI赋能实战网络靶场:你的防御体系,准备好迎接“智能对手”了吗?](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138894&idx=1&sn=af7595ae8cb3a5ebbeffc6d96b99d48c)
* [2025年10月起多项政策法规及标准开始施行;为“给领导添堵”竟当“内鬼”!国安部披露 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138894&idx=2&sn=838495d6d3eb699e99291820b13deaab)
* [入境先停网一天!俄罗斯发布外国 SIM 卡断网令](https://mp.weixin.qq.com/s?__biz=Mzk2ODExMjEyNA==&mid=2247486621&idx=1&sn=9e3e5de14f6c5a197435713f1289638b)
* [告别抖动,极致稳定:山石网科ASIC防火墙,保障小包高性能业务平稳运行](https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661303248&idx=1&sn=7c0d6533e1ffca67fb780b755c915fea)
* [平航Link+您身边的“取证管家”](https://mp.weixin.qq.com/s?__biz=MzI0OTEyMTk5OQ==&mid=2247495185&idx=1&sn=875a483fce8bc559fc04a44b736fdec5)
## 安全分析
(2025-10-09)