[每日信息流] 2025-09-11

# 每日安全资讯（2025-09-11）

- SecWiki News
- [ ] [SecWiki News 2025-09-10 Review](http://www.sec-wiki.com/?2025-09-10)
- paper - Last paper
- [ ] [智能体网络：利用人工智能智能体构建下一代网络](https://paper.seebug.org/3384/)
- 奇安信攻防社区
- [ ] [攻防渗透集锦JS泄露突破多个后台](https://forum.butian.net/share/4538)
- Taxodium
- [ ] [我的博客设计](https://taxodium.ink/my-blog-design.html)
- CXSECURITY Database RSS Feed - CXSecurity.com
- [ ] [INITCMS v6.2.17 - Stored Cross-Site Scripting](https://cxsecurity.com/issue/WLB-2025090005)
- [ ] [Sales Syntax CMS - Stored Cross-Site Scripting](https://cxsecurity.com/issue/WLB-2025090004)
- GuidePoint Security
- [ ] [GuidePoint Security and CrowdStrike: Turning Partnership into Impact](https://www.guidepointsecurity.com/blog/guidepoint-security-and-crowdstrike-turning-partnership-into-impact/)
- [ ] [Unlock Cybersecurity Transformation with Microsoft ECIF and GuidePoint Security](https://www.guidepointsecurity.com/blog/microsoft-ecif-cybersecurity-transformation/)
- Doonsec's feed
- [ ] [文件上传漏洞](https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247490749&idx=1&sn=693f371b08d8085e8c834c0a29df721b)
- [ ] [用友UFIDA ERP-NC 5.0 多接口存在跨站脚本漏洞(CVE-2025-2709) 附POC](https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489120&idx=1&sn=43bff3d316dd39334d4ec8ffd058cc56)
- [ ] [flask CVE-2023-27524xa0Apache Superset Auth Bypass/sink](https://mp.weixin.qq.com/s?__biz=MzkwOTY3Njg4Nw==&mid=2247484435&idx=1&sn=ce2416defe7b4fdeba59159ff0acf62d)
- [ ] [新加坡科技工程有限公司 | 加密恶意流量特征挖掘研究](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493726&idx=1&sn=3d3a2e1a23b20c9a5917381ba601763b)
- [ ] [鹅厂11年：一份写给高敏感的生存指北](https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649795670&idx=1&sn=6282ee9ac2c63ebbaa972e43c7e7ef6c)
- [ ] [补档：初赛未解——奇怪的加密文件](https://mp.weixin.qq.com/s?__biz=MzkwMDcyMjQxOQ==&mid=2247484516&idx=1&sn=f23d62c4cfd6bd944946d668d9a999e3)
- [ ] [CVE-2025-29927/Code reproduction/sink](https://mp.weixin.qq.com/s?__biz=MzkwOTY3Njg4Nw==&mid=2247484426&idx=1&sn=0c90f96f1f463e321b2a9e844f0c3130)
- [ ] [物联网固件安全(一)：环境搭建与固件获取](https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247501214&idx=1&sn=9a076d4b30855a21aa923a944b375d66)
- [ ] [行业资讯：奇安信《关于2022年股票期权激励计划及2023年股票期权激励计划部分股票期权注销完成的公告》](https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247493750&idx=1&sn=ca6b8db7c3a92593ef582518d4d2a810)
- [ ] [npm投毒预警 | 维护者中招钓鱼邮件](https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247488319&idx=1&sn=b2b658b0afb332852b45d4b79efb8d1e)
- [ ] [ES::Tools | PassAgain - 社工密码生成器](https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247488319&idx=2&sn=f112e0c8aedb60d5d43bce5d2277bcc0)
- [ ] [加入“智车文库”知识星球，千份智能汽车产业报告任意下载！](https://mp.weixin.qq.com/s?__biz=MzkyOTMwMDQ5MQ==&mid=2247520504&idx=1&sn=7c690558a65411f13200dce95750f144)
- [ ] [白泽们祝系统软件与安全实验室全体老师教师节快乐！](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247495914&idx=1&sn=121cb6a303662c75aa5e1b8f18af1afb)
- [ ] [网络安全中的大语言模型：应用、漏洞和防御技术](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655291105&idx=1&sn=0939321f6adf64c7a74be76301172c7a)
- [ ] [人工智能、算力算网 今天上传文件列表](https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655291105&idx=2&sn=f80561717c93f9d2b24d235afb5af0ff)
- [ ] [【资料】飞机、开源情报与大国政治](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151985&idx=1&sn=523f3cb7eac8ce2e29c868754ed2960e)
- [ ] [网络安全网女性项目社群](https://mp.weixin.qq.com/s?__biz=MzkzNDc0MzgyOA==&mid=2247485895&idx=1&sn=b503be4c1606279c70c737032474391e)
- [ ] [AstrBot get_file 任意文件读取漏洞(CVE-2025-48957)](https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492716&idx=1&sn=c750f4c167120bf508ad4457baba51db)
- [ ] [关注 | 工信部等六部门联合部署开展汽车行业网络乱象专项整治行动](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248753&idx=1&sn=2ad5882e5659b922c6954cf2493e2a13)
- [ ] [关注 | 69款App因违法违规收集使用个人信息被通报！](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248753&idx=2&sn=36edb7b25c3801e3d32574dc93a38cd0)
- [ ] [盘点 | 中国互联网联合辟谣平台2025年8月辟谣榜](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248753&idx=3&sn=98a2f3a8358ea17dcf41316556d829cb)
- [ ] [关注 | 2025年8月全国受理网络违法和不良信息举报1946.4万件](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248753&idx=4&sn=36372d69678548f5bfcefaf614dde37b)
- [ ] [【高危AI漏洞预警】MCP Inspector跨站脚本漏洞CVE-2025-58444](https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490717&idx=1&sn=2024009ef9cb8324778c701ae691300e)
- [ ] [ShimCache vs AmCache：Windows关键取证痕迹](https://mp.weixin.qq.com/s?__biz=MzAxODA3NDc3NA==&mid=2247485668&idx=1&sn=d09b16a26ea84931fe79c5eb2125b431)
- [ ] [荣誉殿堂 | 华为网络安全防火墙2025年上半年中国区市场份额第一](https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247506432&idx=1&sn=32321bdc20035c2d9a7d348a560c6291)
- [ ] [网络安全社团招新开启，解锁防黑、反钓鱼硬核技能](https://mp.weixin.qq.com/s?__biz=MzE5MTEyMTg1Nw==&mid=2247484116&idx=1&sn=898f1a6e9599cbea50e83b43dcb95f2c)
- [ ] [大厂 IP 资产监控方案](https://mp.weixin.qq.com/s?__biz=Mzg4MzY3MTgyMw==&mid=2247484087&idx=1&sn=8af61ac925a548ca05c28f77243a3259)
- [ ] [冰盾主动防御更新到 5.1.0](https://mp.weixin.qq.com/s?__biz=Mzg2ODg2MjE3Mg==&mid=2247484057&idx=1&sn=502f454558f07f1e905b20019aad0d75)
- [ ] [“石油王国”最新开源AI大模型杀疯了！数学能力超越OpenAI、DeepSeek等开源模型](https://mp.weixin.qq.com/s?__biz=MzkxMDc1NzU1Ng==&mid=2247484212&idx=1&sn=3e06146a74cb4f3ef6c06573d5cfb9bd)
- [ ] [引领技术革新！启明星辰集团WAAP技术能力获IDC认可](https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651734216&idx=1&sn=dbcdca553676875dd6fe02f0061421f4)
- [ ] [中央网信办召开深化推进网络法治建设座谈会](https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652118232&idx=1&sn=41181c06ea18b2e3793b355d64ba3787)
- [ ] [石破茂辞职后谁可能上任？日本政局与对华战略走向分析](https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247511209&idx=1&sn=d6fc022e75264fb02755304eeb754918)
- [ ] [筑牢“银发”反诈防线——红安全志愿者服务队走进海淀南路北社区开展网络安全科普](https://mp.weixin.qq.com/s?__biz=MzI0NTkwMDY1MA==&mid=2247484794&idx=1&sn=2795837d4f42de25c9236348e9e88287)
- [ ] [【会议活动】“智算云技术和服务发展水平研究”开放课题成果评审会在京顺利召开](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254298&idx=1&sn=34dbdd0cceffe55e40bbc840d067bf37)
- [ ] [城市水管家智慧调度系统的研发与应用入选水务行业信息技术应用创新典型案例](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254298&idx=2&sn=c914518945a9799d3d3227386ed3fa2d)
- [ ] [中国软件评测中心联合新华网启动“人工智能+”创新应用案例征集活动](https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649254298&idx=3&sn=47a3475d9245e8e2165397559912c970)
- [ ] [菲律宾吕宋海峡新军基地启用，需警惕美菲军事合作升级](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562218&idx=1&sn=3575bd8ef90883461779edc9d60565d4)
- [ ] [印尼抗Y风波与中印尼关系：背景动因、外交应对及情报预警启示](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562218&idx=2&sn=53d67fe0b1f9abe8ce3513ffcc007922)
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
- [ ] [TP-Link确认路由器存在未修复零日漏洞](https://www.4hou.com/posts/YZ8p)
- [ ] [黑客借助HexStrike-AI工具可快速利用新型漏洞](https://www.4hou.com/posts/PGyn)
- HackerNoon
- [ ] [Re: Defeating Nondeterminism in LLM Inference, The Future is Predictable](https://hackernoon.com/re-defeating-nondeterminism-in-llm-inference-the-future-is-predictable?source=rss)
- [ ] [Kikimora Announces Launch of Kikimora Agent: Accessible AI-Powered Cybersecurity Platform For SME](https://hackernoon.com/kikimora-announces-launch-of-kikimora-agent-accessible-ai-powered-cybersecurity-platform-for-sme?source=rss)
- [ ] [Origin Summit Unveils Second Wave Of Global Icons Ahead Of Debut During KBW](https://hackernoon.com/origin-summit-unveils-second-wave-of-global-icons-ahead-of-debut-during-kbw?source=rss)
- [ ] [Apex Fusion Strengthens EVM Ecosystem With Nexus And Tenderly Partnership](https://hackernoon.com/apex-fusion-strengthens-evm-ecosystem-with-nexus-and-tenderly-partnership?source=rss)
- [ ] [Cloudbet Launches TI 2025 Playoff Markets With Xtreme Gaming Priced As Favorites](https://hackernoon.com/cloudbet-launches-ti-2025-playoff-markets-with-xtreme-gaming-priced-as-favorites?source=rss)
- [ ] [Exploring Enterprise AI: Rishi Kohli on Connecting Strategic Vision with Tangible Value](https://hackernoon.com/exploring-enterprise-ai-rishi-kohli-on-connecting-strategic-vision-with-tangible-value?source=rss)
- [ ] [How CEO Eric Benz and COO Aleks Nowak Are Redefining Corporate Digital Asset Strategy](https://hackernoon.com/how-ceo-eric-benz-and-coo-aleks-nowak-are-redefining-corporate-digital-asset-strategy?source=rss)
- [ ] [Financial Adaptability: Parvinder Panjeta on Cross-Industry Strategy](https://hackernoon.com/financial-adaptability-parvinder-panjeta-on-cross-industry-strategy?source=rss)
- [ ] [How KuCoin's New Platform Opens Bitcoin Mining to Retail Investors: $50,000 Hardware to $10 Contract](https://hackernoon.com/how-kucoins-new-platform-opens-bitcoin-mining-to-retail-investors-$50000-hardware-to-$10-contract?source=rss)
- [ ] [Falcon Finance Announced $FF And Community Sale On Buidlpad](https://hackernoon.com/falcon-finance-announced-$ff-and-community-sale-on-buidlpad?source=rss)
- [ ] [Crypto Market and Pepeto](https://hackernoon.com/crypto-market-and-pepeto?source=rss)
- [ ] [The HackerNoon Newsletter: From Headlines to Digests: How Agents Personalize the Firehose (9/10/2025)](https://hackernoon.com/9-10-2025-newsletter?source=rss)
- [ ] [Hurry! One Month Left to Win from 15,000 USDT in the Spacecoin Writing Contest](https://hackernoon.com/hurry-one-month-left-to-win-from-15000-usdt-in-the-spacecoin-writing-contest?source=rss)
- [ ] [Will AI Assist or Replace Humans in the Workplace?](https://hackernoon.com/will-ai-assist-or-replace-humans-in-the-workplace?source=rss)
- [ ] [JuCoin Evolves To Ju.com - Where Point, Click, Trade Meets Infinite Possibility](https://hackernoon.com/jucoin-evolves-to-jucom-where-point-click-trade-meets-infinite-possibility?source=rss)
- [ ] [BingX Launches AI Master, The World-First AI Crypto Trading Strategist](https://hackernoon.com/bingx-launches-ai-master-the-world-first-ai-crypto-trading-strategist?source=rss)
- [ ] [Little Pepe vs Pepeto](https://hackernoon.com/little-pepe-vs-pepeto?source=rss)
- [ ] [The Evolution of Econometric Modeling: A Guide to Influential Papers on Panel Data](https://hackernoon.com/the-evolution-of-econometric-modeling-a-guide-to-influential-papers-on-panel-data?source=rss)
- [ ] [Cultural Intelligence as a Core Skill for International Growth](https://hackernoon.com/cultural-intelligence-as-a-core-skill-for-international-growth?source=rss)
- [ ] [Moonlake Lee's Journey with ADHD and the Role of Technology](https://hackernoon.com/moonlake-lees-journey-with-adhd-and-the-role-of-technology?source=rss)
- InfoSec Write-ups - Medium
- [ ] [DeepProbe: Open-Source Memory Forensics with ATT&CK-Mapped Detections](https://infosecwriteups.com/deepprobe-open-source-memory-forensics-with-att-ck-mapped-detections-a1acb663de39?source=rss----7b722bfd1b8d---4)
- [ ] [This Silent Attack Can Hijack Any Website You Trust-Here’s How It Works](https://infosecwriteups.com/this-silent-attack-can-hijack-any-website-you-trust-heres-how-it-works-48f99fda2ef6?source=rss----7b722bfd1b8d---4)
- [ ] [Beyond CVE: Crafting a Comprehensive Vulnerability Intelligence Strategy for Modern Security Teams](https://infosecwriteups.com/beyond-cve-crafting-a-comprehensive-vulnerability-intelligence-strategy-for-modern-security-teams-2a98275cca18?source=rss----7b722bfd1b8d---4)
- [ ] [How I Found an Exposed User Database via an Unprotected API (And How to Prevent It) in a private…](https://infosecwriteups.com/how-i-found-an-exposed-user-database-via-an-unprotected-api-and-how-to-prevent-it-in-a-private-77dd95a1101c?source=rss----7b722bfd1b8d---4)
- [ ] [How i found first account takeover, reported and got the bounty in same day and in same hour.](https://infosecwriteups.com/bismillah-hir-rahman-nir-raheem-9adef82e9718?source=rss----7b722bfd1b8d---4)
- [ ] [A very easy bug anyone can find and ignored by many bug bounty hunters](https://infosecwriteups.com/a-very-easy-bug-anyone-can-find-8d2b11a768c7?source=rss----7b722bfd1b8d---4)
- [ ] [IDOR: How I Could Delete Any Product Image on an E-Commerce Platform](https://infosecwriteups.com/idor-how-i-could-delete-any-product-image-on-an-e-commerce-platform-8998453a50ea?source=rss----7b722bfd1b8d---4)
- [ ] [(My)Reasons Why I failed OSCP: Do Not Make Same Mistakes](https://infosecwriteups.com/my-reasons-why-i-failed-oscp-do-not-make-same-mistakes-b8c1fc26f194?source=rss----7b722bfd1b8d---4)
- [ ] [How I Turned a $4 Microcontroller into a Rubber Ducky](https://infosecwriteups.com/how-i-turned-a-4-microcontroller-into-a-rubber-ducky-65abb8c083bb?source=rss----7b722bfd1b8d---4)
- [ ] [✈️ I Tried Hacking a Flight Booking API — Here’s What I Found (or Didn’t )](https://infosecwriteups.com/%EF%B8%8F-i-tried-hacking-a-flight-booking-api-heres-what-i-found-or-didn-t-bc4391b57d41?source=rss----7b722bfd1b8d---4)
- Trustwave Blog
- [ ] [Not All Cyberattacks Begin with a Phishing Attack, Hack or Exploited Vulnerability](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/not-all-cyberattacks-begin-with-a-phishing-attack-hack-or-exploited-vulnerability/)
- 安全客-有思想的安全新媒体
- [ ] [Salat Stealer通过复杂C2基础设施窃取浏览器凭证](https://www.anquanke.com/post/id/312036)
- [ ] [新型网络攻击滥用DeskSoft软件部署恶意软件，利用RDP访问执行命令](https://www.anquanke.com/post/id/312045)
- [ ] [超越高通和博通：苹果内部芯片接管iPhone连接](https://www.anquanke.com/post/id/312029)
- [ ] [英伟达最新收购：这家AI编程初创公司将重塑开发格局](https://www.anquanke.com/post/id/312024)
- [ ] [西门子SIMATIC虚拟化即服务平台曝严重漏洞（CVE-2025-40804）：网络共享资源无需认证即可访问](https://www.anquanke.com/post/id/311999)
- [ ] [Sophos修复AP6系列无线接入点严重认证绕过漏洞（CVE-2025-10159）](https://www.anquanke.com/post/id/312056)
- [ ] [Hiawatha Web服务器曝严重漏洞：可导致身份认证绕过与远程代码执行](https://www.anquanke.com/post/id/312015)
- [ ] [黑客在供应链攻击中攻陷18个NPM包](https://www.anquanke.com/post/id/312026)
- [ ] [安全防御总“失守”？360大情报告诉你答案](https://www.anquanke.com/post/id/312042)
- [ ] [新型恶意软件家族正劫持暴露的Docker API](https://www.anquanke.com/post/id/312005)
- darkreading
- [ ] [Students Pose Inside Threat to Education Sector](https://www.darkreading.com/insider-threats/students-inside-threat-education-sector)
- [ ] [Chinese Hackers Allegedly Pose as US Lawmaker](https://www.darkreading.com/cybersecurity-operations/chinese-hackers-allegedly-pose-us-lawmaker)
- [ ] [The Quiet Revolution in Kubernetes Security](https://www.darkreading.com/vulnerabilities-threats/quiet-revolution-kubernetes-security)
- [ ] [Dormant macOS Backdoor ChillyHell Resurfaces](https://www.darkreading.com/endpoint-security/dormant-macos-backdoor-chillyhell-resurfaces)
- [ ] [Southeast Asian Scam Centers Face More Financial Sanctions](https://www.darkreading.com/cyber-risk/southeast-asian-scam-centers-financial-sanctions)
- Tenable Blog
- [ ] [Shift from Reactive to Proactive: Leveraging Tenable Exposure Management for MSSP Success](https://www.tenable.com/blog/shift-from-reactive-to-proactive-leveraging-tenable-exposure-management-for-mssp-success)
- [ ] [New Tenable Report: How Complexity and Weak AI Security Put Cloud Environments at Risk](https://www.tenable.com/blog/new-tenable-report-how-insecure-identities-and-weak-ai-security-put-cloud-environments-at-risk)
- Hacking Dream
- [ ] [Hacking Grafana: A Red Teamer's Complete Guide](https://www.hackingdream.net/2025/09/hacking-grafana-red-teamers-complete-guide.html)
- [ ] [Hacking Elasticsearch: A Pentester's Playbook for Discovery to RCE](https://www.hackingdream.net/2025/09/hacking-elasticsearch-pentesters-playbook-for-discovery-to-rce.html)
- Security Blog | Praetorian
- [ ] [The Security Time Capsule: Evolving Beyond Legacy Pen Testing](https://www.praetorian.com/blog/the-security-time-capsule-evolving-beyond-legacy-pen-testing/)
- The Trail of Bits Blog
- [ ] [How Sui Move rethinks flash loan security](https://blog.trailofbits.com/2025/09/10/how-sui-move-rethinks-flash-loan-security/)
- Bug Bounty in InfoSec Write-ups on Medium
- [ ] [IDOR: How I Could Delete Any Product Image on an E-Commerce Platform](https://infosecwriteups.com/idor-how-i-could-delete-any-product-image-on-an-e-commerce-platform-8998453a50ea?source=rss----7b722bfd1b8d--bug_bounty)
- [ ] [How I Found an Exposed User Database via an Unprotected API (And How to Prevent It) in a private…](https://infosecwriteups.com/how-i-found-an-exposed-user-database-via-an-unprotected-api-and-how-to-prevent-it-in-a-private-77dd95a1101c?source=rss----7b722bfd1b8d--bug_bounty)
- [ ] [How i found first account takeover, reported and got the bounty in same day and in same hour.](https://infosecwriteups.com/bismillah-hir-rahman-nir-raheem-9adef82e9718?source=rss----7b722bfd1b8d--bug_bounty)
- [ ] [A very easy bug anyone can find and ignored by many bug bounty hunters](https://infosecwriteups.com/a-very-easy-bug-anyone-can-find-8d2b11a768c7?source=rss----7b722bfd1b8d--bug_bounty)
- [ ] [✈️ I Tried Hacking a Flight Booking API — Here’s What I Found (or Didn’t )](https://infosecwriteups.com/%EF%B8%8F-i-tried-hacking-a-flight-booking-api-heres-what-i-found-or-didn-t-bc4391b57d41?source=rss----7b722bfd1b8d--bug_bounty)
- [ ] [Reflected XSS Vulnerability Bypassing Amazon CloudFront via Safari Browser](https://infosecwriteups.com/reflected-xss-vulnerability-bypassing-amazon-cloudfront-via-safari-browser-5416b5b64be2?source=rss----7b722bfd1b8d--bug_bounty)
- [ ] [What the Shell?| TryHackMe (THM)](https://infosecwriteups.com/what-the-shell-tryhackme-thm-248b5d58f128?source=rss----7b722bfd1b8d--bug_bounty)
- Black Hills Information Security, Inc.
- [ ] [Microsoft Store and WinGet: Security Risks for Corporate Environments](https://www.blackhillsinfosec.com/microsoft-store-and-winget-security-risks/)
- 锦行科技
- [ ] [师恩如塔，山海同明](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247494331&idx=1&sn=c1fed490a3093ce364f09a47cfbcbb3a)
- 奇客Solidot–传递最新科技情报
- [ ] [疫情期间使用的一次性口罩留下了化学定时炸弹](https://www.solidot.org/story?sid=82279)
- [ ] [婴儿的哭泣声会让人的身体发热](https://www.solidot.org/story?sid=82278)
- [ ] [Windows 10 拒绝消失](https://www.solidot.org/story?sid=82277)
- [ ] [更温暖的气候可能会增加添加糖摄入量](https://www.solidot.org/story?sid=82276)
- [ ] [海洋暖化危及食物网关键物种原绿球藻](https://www.solidot.org/story?sid=82275)
- [ ] [任天堂获得召唤物并让召唤物战斗的美国专利](https://www.solidot.org/story?sid=82274)
- [ ] [天文学家在棕矮星发现硅烷](https://www.solidot.org/story?sid=82273)
- [ ] [早期宇宙磁场强度与人脑神经元相当](https://www.solidot.org/story?sid=82272)
- [ ] [美国股市不再有超额收益](https://www.solidot.org/story?sid=82271)
- [ ] [巴基斯坦的大规模监控系统](https://www.solidot.org/story?sid=82270)
- [ ] [微软强制执行重返办公室政策](https://www.solidot.org/story?sid=82269)
- [ ] [苹果发布 iPhone 17 系列手机，推出超薄型号 iPhone Air](https://www.solidot.org/story?sid=82268)
- 吾爱破解论坛
- [ ] [（图作者 | @Aoemax）](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651142914&idx=1&sn=561f0ce42b20ed08a584a4d0c59fbb85)
- 青衣十三楼飞花堂
- [ ] [猫抓插件应用一例](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488606&idx=1&sn=87feccf566432d58e10ef6532df3ce21)
- 信安之路
- [ ] [基础 | 突破内网拿到主机权限后的第一件事儿](https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500166&idx=1&sn=3bd9ec52081af0a3f08ae5f8dce9bc50)
- 丁爸 情报分析师的工具箱
- [ ] [【资料】飞机、开源情报与大国政治](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651151985&idx=1&sn=523f3cb7eac8ce2e29c868754ed2960e)
- Intigriti
- [ ] [How should I scope third-party assets in my bug bounty program?](https://www.intigriti.com/blog/business-insights/how-to-scope-third-party-assets)
- 看雪学苑
- [ ] [《进阶逆向工程实战》：解锁逆向技术的全链路实战能力](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599698&idx=1&sn=941e127fafa3f5856065f80f515360cb)
- [ ] [无痕HOOK 检测及对抗](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599698&idx=2&sn=4348a89ada25c0bea146af251ad39949)
- [ ] [BitLocker 曝两提权漏洞，微软紧急打补丁](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599698&idx=3&sn=8c3b091297949a294055db5203184e05)
- 奇安信威胁情报中心
- [ ] [JavaScript 生态供应链又一暴击 - 最新 npm 精准投毒搞钱活动详析](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247516048&idx=1&sn=d90e7f159231958461f14d282a089d58)
- VAADATA – Ethical Hacking Services
- [ ] [What is CRLF Injection? Exploitations and Security Tips](https://www.vaadata.com/blog/what-is-crlf-injection-exploitations-and-security-tips/)
- 安全内参
- [ ] [知名车企被黑后停产超一周：每天或损失约5000万元利润 中国工厂亦受影响](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514982&idx=1&sn=7da88be36eecd39101eed5e6ad13b431)
- [ ] [网络安全行业需要更少的产品，更好的产品](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514982&idx=2&sn=e55f2e00285af2e5be9820288a75dfd8)
- 雷神众测
- [ ] [雷神众测漏洞周报2025.9.1-2025.9.7](https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503544&idx=1&sn=0d58c30570367608d168ba1a4c35a51f)
- 安全客
- [ ] [网络安全岗位大洗牌，AI正在重塑工作与职业路径](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789033&idx=1&sn=b21035a92b0d518ec9915a0cec17f0b4)
- 代码卫士
- [ ] [微软9月补丁星期二值得关注的漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523980&idx=1&sn=eb82e8a719350c70185abd2a1f39cb79)
- [ ] [Adobe 修复史上最严重的 Magento 漏洞之一](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523980&idx=2&sn=1e726413f895d0c82f9817dde7abb01b)
- 漏洞推送
- [ ] [如何利用vps远程pull镜像](https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485732&idx=1&sn=b692f7c90b39c0fe59121ccd738267c6)
- 安全圈
- [ ] [【安全圈】红海海底光缆断裂致微软Azure服务延迟激增](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071636&idx=1&sn=f56c00ea477c427ca1a7d7afbab64189)
- [ ] [【安全圈】微软在文件资源管理器中引入全新 AI 功能](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071636&idx=2&sn=ef17158c2827c0b921c9d2e120765c75)
- [ ] [【安全圈】Sophos无线AP曝高危漏洞](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071636&idx=3&sn=6ea8b60ef7c7e99ad37f8ddfd4f3f9bf)
- [ ] [【安全圈】微软Office被曝高危漏洞：可远程执行恶意代码](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071636&idx=4&sn=aa84de58c5eab703fb2d2ced31a97af3)
- 网安杂谈
- [ ] [【2026合作伙伴巡礼】中科链安：新型虚拟币犯罪多维度实战化打击治理先锋](https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650889773&idx=1&sn=763bca41f42ace58979ea97730d22a5f)
- 信息安全国家工程研究中心
- [ ] [9.10教师节 | 金钥铸盾育桃李，匠心守护长城固](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247500905&idx=1&sn=02aae0a6d60adb07ff2dc875dc47383f)
- 中国信息安全
- [ ] [CNNVD | 关于社会机构未经授权提供CNNVD证书获取服务的声明](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248752&idx=1&sn=d986cb26083b8424866e7f77028fe78e)
- [ ] [关注 | 国家网信办持续深入整治违规开展互联网新闻信息服务乱象](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248752&idx=2&sn=baab3294b7677413f29a2c3af9cee5b1)
- [ ] [《2025数据安全产业金融应用生态全景图》调研启动](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248752&idx=3&sn=fde1dab8c62eea96ab0f0cf001419809)
- [ ] [聚焦 | 外滩大会AI科创赛三赛道冠军诞生，全球近2万人、8000支队伍参赛](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664248752&idx=4&sn=20678b579e0bc1d2158a4c6cccf8da7b)
- 安全学术圈
- [ ] [新加坡科技工程有限公司 | 加密恶意流量特征挖掘研究](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493726&idx=1&sn=3d3a2e1a23b20c9a5917381ba601763b)
- 补天平台
- [ ] [补天中秋快闪！速来⏳10个漏洞轻松赢礼盒，限时掉落！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509332&idx=1&sn=b5d3da30d85c5ca2e0488489bada74f2)
- [ ] [星推厂商上线 | 限时奖金翻倍，速度冲！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509332&idx=2&sn=5cc22c4a59aeafccdd4ecc6ab689a0ac)
- 默安科技
- [ ] [多领域上榜《2025年中国网络安全市场全景图》 默安科技用AI为安全注入“智”动力](https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247501255&idx=1&sn=53fba4cf369e1f5b958cb3f6acb1305f)
- 数世咨询
- [ ] [日益加剧的压力：CISO被要求对安全事件保持沉默](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540237&idx=1&sn=b6f71eaf4b62bc973ad56fc1e944c665)
- 情报分析师
- [ ] [菲律宾吕宋海峡新军基地启用，需警惕美菲军事合作升级](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562218&idx=1&sn=3575bd8ef90883461779edc9d60565d4)
- [ ] [印尼抗Y风波与中印尼关系：背景动因、外交应对及情报预警启示](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562218&idx=2&sn=53d67fe0b1f9abe8ce3513ffcc007922)
- 国家互联网应急中心CNCERT
- [ ] [网络安全信息与动态周报2025年第36期（9月1日-9月7日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500370&idx=1&sn=90725852a7a3d2430b58ec3eb950ea1a)
- 奇安信 CERT
- [ ] [微软9月补丁日多个产品安全漏洞风险通告：7个紧急漏洞、7个重要漏洞](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503926&idx=1&sn=5c026d832d6bc217ce4a7b5fcd027788)
- 阿里安全响应中心
- [ ] [双十一安全保卫战｜淘天电商反爬专项](https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998055&idx=1&sn=2340b0bc98c1e2bd2799b394dad4d904)
- 极客公园
- [ ] [为了网罗 AI 创新者，上海搞了场万人科创大赛](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653086397&idx=1&sn=4ec86a1b552f106c629a9b8daf775a6d)
- [ ] [5999 元起，苹果发布eSIM、超薄 iPhone；王腾再辟谣离职原因谣言；反恶性补贴，主要外卖平台被约谈｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653086345&idx=1&sn=637605ae83825f5fdd867d0d85011bd6)
- DataCon大数据安全分析竞赛
- [ ] [今日|宜感恩，师恩绵长，桃李芬芳！](https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247489359&idx=1&sn=dfb3daf43291b67f748f03231111fa91)
- 慢雾科技
- [ ] [慢雾(SlowMist) 发布《稳定币反洗钱与合规路径技术研究报告》](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247503205&idx=1&sn=44bbc767786aa1c58b0b71d1240a433b)
- 墨菲安全
- [ ] [NPM仓库超大规模劫持投毒仍在持续，企业应警惕大规模攻击](https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488223&idx=1&sn=e6a5e472a97214abca1dcac50dfb1f76)
- ChaMd5安全团队
- [ ] [智能网联时代，汽车工程师如何构建“攻防兼备” 的安全系统？文末送书](https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247513438&idx=1&sn=777d00ccd5d5e3b0bc7bf60d68afd5d8)
- 网安国际
- [ ] [InForSec祝各位老师节日快乐！](https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652317960&idx=1&sn=01e7fb6634aba404c699ea7b2de38637)
- dotNet安全矩阵
- [ ] [.NET内网实战：通过 Windows 系统服务注册表值实现权限维持](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500555&idx=1&sn=bbc208939adb6bad717dda87541ed43f)
- [ ] [.NET 安全攻防知识交流社区](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500555&idx=2&sn=69fbb61fb41d5342c1bc84d1c5e6cc88)
- [ ] [红队视角下的 IIS 资产速查工具 Sharp4WebManager](https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500555&idx=3&sn=757a68b86d16082acc6ac972ea9a03bb)
- 字节跳动技术团队
- [ ] [字节跳动论文入选 ACM SIGCOMM'25 | 基于 WebRTC 的大规模直播: 助推直播渗透率与观播时长显著增长](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247516613&idx=1&sn=e6bc1d99e2493b870da2494bd04645ef)
- CNVD漏洞平台
- [ ] [Microsoft发布2025年9月安全更新](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496295&idx=1&sn=8a2e7cf0999da238363e4b5b00155a7e)
- MacTalk-池建强的随想录
- [ ] [Claude 这条路在中国企业这里彻底断掉了](https://macshuo.com/?p=1980)
- 表图
- [ ] [网络安全行业需要更少的产品，更好的产品](https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247484830&idx=1&sn=5475a73437a0baaa8fb66bf7e32b1fa3)
- 嘶吼专业版
- [ ] [黑客借助HexStrike-AI工具可快速利用新型漏洞](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584550&idx=1&sn=a123655dde31f91bb09a603de668234d)
- [ ] [TP-Link确认路由器存在未修复零日漏洞](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584550&idx=2&sn=30f0b46bb6738c8c47a83ad35b7630de)
- 安全牛
- [ ] [7个数字身份系统安全能力升级的必要性](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138638&idx=1&sn=972ef19345370c79227db2170757e8a7)
- [ ] [突发！美国FCC宣布撤销中国信通院等多家我国机构测试认证许可；第九届“强网杯”全国网络安全挑战赛正式启动 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138638&idx=2&sn=fc540ee4be71857d0f4cf3612311260b)
- 老范讲故事的博客站
- [ ] [OpenAI公开了GPT5降低幻觉的秘密，像教育孩子一样训练AI。宁愿答“不知道”也绝不瞎猜，这才是真正的进步｜GPT-5 AI Hallucination OpenAI Hallucinations](https://lukefan.com/2025/09/10/openai-gpt5-reducing-ai-hallucinations/)
- M01N Team
- [ ] [HexStrike深度剖析：AI渗透的喧嚣与现实](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494408&idx=1&sn=75d803b630da3e6d4480fecf99c6d438)
- est の 输入 输出和出入
- [ ] [disqus已卸载，手搓了套blog评论系统 - req4cmt](https://blog.est.im/2025/stdout-07)
- 极道
- [ ] [开源方案实现墨水屏75Hz动态流畅显示，护眼设备迎来革新](https://www.jdon.com/81595-epaper-FPGA-75Hz.html)
- [ ] [好消息是人能活到150岁；坏消息是活不过150岁](https://www.jdon.com/81594-150-age.html)
- [ ] [硅谷山洞人惊现！Claude Code宕机，原始码农钻木取代码](https://www.jdon.com/81593-AI-Claude-Code-down.html)
- [ ] [六大Python可视化神器终极对决：看完这篇不再选择困难](https://www.jdon.com/81592-6-python-visualization.html)
- [ ] [端粒酶mRNA减少了DNA损伤，逆转了血管细胞衰老](https://www.jdon.com/81591-mRNA-SIRT1-hTERT.html)
- [ ] [甲骨文股价一飞冲天，背后是AI与数据工程的核动力](https://www.jdon.com/81590-oracle-stock-ai-data.html)
- [ ] [手机直连星链：马斯克保证2年手机全球随时随地刷剧](https://www.jdon.com/81589-mobile-Direct-to-Cell.html)
- [ ] [基因编辑干细胞注入老年猴脑，成功逆转衰老进程](https://www.jdon.com/81588-SRC-FOXO3-age.html)
- 卢昌海个人主页
- [ ] [最新微博：2025 年 9 月 10 日](https://www.changhai.org/articles/miscellaneous/blog/202509.php#latest)
- 夜行人
- [ ] [娱乐至死](http://wwj718.github.io/post/%E8%AF%BB%E4%B9%A6/amusing-ourselves-to-death/)
- TecHug
- [ ] [苹果设备内存安全的完整愿景：内存完整性强化](https://www.techug.com/post/a-complete-vision-for-memory-safety-in-apple-devices/)
- 深信服千里目安全技术中心
- [ ] [微软补丁日安全通告 | 9月份](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524696&idx=1&sn=26ef7d2d397b7aef6c5cde701b9ea9b4)
- [ ] [网络安全信息与动态周报2025年第36期（9月1日-9月7日）](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524696&idx=2&sn=e788dbf451e22b86dd11cba9e589cffb)
- 维基萌
- [ ] [昨天让 AI 以代理模式写代码](https://www.wikimoe.com/post/t2clabnn)
- 61’s life
- [ ] [20250910](https://61.life/2025/0910)
- azhuge233's
- [ ] [服务器监控平台 Beszel 自托管](https://azhuge233.com/%e6%9c%8d%e5%8a%a1%e5%99%a8%e7%9b%91%e6%8e%a7%e5%b9%b3%e5%8f%b0-beszel-%e8%87%aa%e6%89%98%e7%ae%a1/)
- BMPI
- [ ] [我的AI投资助手](https://www.bmpi.dev/self/my-invest-pilot/)
- 游研社
- [ ] [为什么《丝之歌》会成为一款如此「极端」的游戏？](https://www.yystv.cn/p/13174)
- Home - Space Looming
- [ ] [写给编程小白看的 Vibe Debugging 注意事项（1）](https://www.gtdstudy.com/posts/vibe-debugging-tips-for-beginners-1/)
- 木鸟杂记
- [ ] [深入理解大模型 1：Transformer，大模型的基石](https://www.qtmuniao.com/2025/09/10/llm-1-transformer/)
- 运维咖啡吧
- [ ] [久违的暑假｜沿海自驾DAY30 - 隆江](https://blog.ops-coffee.com/r/2025-summer-coastal-road-trip-day30-jieyang-huilai-longjiang.html)
- Elmagnifico's Blog
- [ ] [WIFI模块ARP刷新问题](https://elmagnifico.tech/2025/09/11/ARP/)
- 网安寻路人
- [ ] [域外个人信息匿名化与假名化界定综述](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247507643&idx=1&sn=2e68c2492c1f617f86516bb7933878f9)
- icebreaker
- [ ] [tailwindcss 究竟比 unocss 快多少？](https://icebreaker.top/articles/2025/9/10-tailwindcss-vs-unocss)
- 工劳小报｜工劳快讯
- [ ] [教育行业乱象衰退并存，社保新规加压中小企业｜工劳小报 #68 新闻刊](https://feed.laborinfocn7.com/issue68-news/)

The issue body is a dated checklist of links, but it names no repository file, test, or entry point. It does not define a concrete change or completion criterion, so clarify which artifact should contain these security-news items and what done means before starting.

Written by the indexing model from the issue text.