每日安全资讯（2026-10-19）

• Private Feed for M09Ic
  • anthropics released v2.1.303 at anthropics/claude-code
  • bolucat released 202610182224 at bolucat/Archive
  • timwhitez contributed to timwhitez/AutoRE-CLI
  • pydantic released v1.2.0 at pydantic/monty
  • esrrhs contributed to esrrhs/fakecc
  • timwhitez starred zgsfsec/Full-Chain-Sentinel-System
  • wuhan005 contributed to sayrud/sayrud
  • zeroclaw-labs released v0.8.6 at zeroclaw-labs/zeroclaw
• Doonsec's feed
  • 第一把用人工智能全流程生成的3D打印手枪
  • 手机归属地离线查询
  • AI挖漏洞项目ARTEX，密码重置漏洞与命令执行漏洞分析复现
  • 【一个人的SOC】(07) 数据可靠性——源健康/同步死信/对账差异三层聚合
  • 跨工具数据流污染与污点分析
  • 新能源场站解惑 | 有日志审计+入侵检测，为啥还要装网络安全监测？态势感知又是什么
  • 触屏 MacBook Pro 月底亮相，最快 11 月 6 日开卖
  • Teloa 社区版 0.2.2 发布：构建自己的 AI 团队
  • 2026年第十二届“美亚杯”案情资料解读
  • 印第安纳大学 Bloomington｜系统与安全方向全奖博士招生（2027 Fall）
  • GitHub星数疯涨的10款AI安全工具：全部开源免费，最后一款新手必备
  • 【工具更新】EasyShell v2.8.3 & MoreLian v1.2.4 & CyberStrickAI二开版1.0 小小全家桶现在终于齐活啦
  • 收到重阳短信
  • 终于讲清楚了，Kali Linux 从入门到进阶：14大类，108款工具万字全解析
  • 以赛砺技xa0逐梦网安|网络空间安全协会期待与您相聚！
  • 有关ai时代漏洞挖掘的探讨
  • 已经Agent时代了，你必须知道怎么让你的AI停的下来+做的清楚
  • 低分飘过 CISP-PTE：7 道实操题，和考后才明白的几件事
• SecWiki News
  • SecWiki News 2026-10-18 Review
• Cybernews News
  • Ukrainian drones hit VK data center and Ozon warehouse near St. Petersburg
  • China moves to tighten controls on AI exports, citing national security risks
  • Elon Musk says AI and robots are the only way to fix US debt
• Der Flounder
  • Exporting Managed Client data on macOS Golden Gate
• ArthurChiao's Blog
  • When AI Amplifies the Upstream: An Organizational Shift Underway (2026)
• Objective-See's Blog
  • Heartbreaker 💔
• Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
  • ai-pentest-agent
  • hosts v3.16.123
  • ghidra-llm-pipeline
  • cve-intel
  • semantic_firewall
  • hashcat — Updated!
  • NaSuno
  • Sandboxie v1.18.8
  • remove-ai-watermarks v0.46.0
  • wifit3 v0.5.0
  • DFIRHub
• CCC Event Blog
  • 40C3 - Bildungsurlaub
• Reverse Engineering
  • PS2 games statically recompiled to WebAssembly
  • [TP-Link Deco XE75 Pro V3] Two years after CCS'24 / Black Hat '24, TP-Link only bumped the RSA key size — Port 20001 -> tmpsvr still gives Arbitrary Root File Write (0xC456) & RCE on 2026 Firmware 1.5.0](https://www.reddit.com/r/ReverseEngineering/comments/1x98de1/tplink_deco_xe75_pro_v3_two_years_after_ccs24/)
  • One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos and Linux
  • Reverse engineering my JBL Wave Buds 2 earbuds firmware (BES1306, CRC-only OTA, no image signing, hidden factory console)
  • Inside the Intel 8087 chip: floating-point addition and subtraction
  • Browse 228k stripped functions and their call trees, (static files only)
  • nmp (new media player) - reverse engineered Android Media player (older AIMP 2.71.559). The Java files and C++ source code have been restored.
  • PyGhidra + Python + Local LLMs: Turning the Model into a Compiler, Not an Assembler
  • MG8 2026 Developer mode password
  • Vegas PRo
  • Aristois and REA
• 奇客Solidot–传递最新科技情报
  • 指纹显示秦始皇兵马俑的制作者有男有女有儿童
  • 退休教授因阻止 Uber Eats 机器人送货被捕
  • 内核开发者递交代码无需声明是否 AI 辅助编写
  • Meta 新增条款允许其抓取客户内容并用于训练 AI
• 白帽Wiki - 一个简单的wiki
  • [2026]ClaudeCode 2.1.30x版本风控-Anthropic的追踪中转站的技术 x2
• Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
  • A Portfolio of Personally Identifiable Email Address Accounts from the Exploit.in Cybercrime-Friendly Forum Community - An Analysis
• 黑鸟
  • 第一把用人工智能全流程生成的3D打印手枪
• 安全客
  • 3.5万次请求、翻找泄露密钥：失控AI智能体围猎高德地图，运营者却毫不知情
• 青衣十三楼飞花堂
  • 收到重阳短信
• 我的安全视界观
  • 影子端点专项扫描：AI "用进"安全的一次实践
• 天御攻防实验室
  • a16z举办AI网络研究员晚宴
• 非尝咸鱼贩
  • 在尼科西亚“速通”南北塞浦路斯
• 安全研究GoSSIP
  • 印第安纳大学 Bloomington｜系统与安全方向全奖博士招生（2027 Fall）
• 安全圈
  • 【安全圈】Skyticket 旅行预订网站遭黑客攻击，6140 名平台用户信用卡信息外泄
  • 【安全圈】OpenCode披露安全漏洞，控制台用户第三方API密钥或遭泄露
  • 【安全圈】伪造的 Arch Linux 软件包以 root 权限推送恶意软件
• 极客公园
  • 造物 100 #10｜百万众筹的和弦合成器、52kHz 超声波去污笔、能打电话的奥特曼 AI 玩具
  • DeepSeek 新模型上线，价格更低能力更强；传华为将推新品牌「星芒」主打性价比；天文学家发现第一颗绿色恒星｜极客早知道
• 火绒安全
  • 重阳节 | 九九登高望 岁岁又重阳
  • 诚邀渠道合作伙伴共启新征程
• 丁爸 情报分析师的工具箱
  • 【工具】开源免费视频分析平台-rebucca
  • 【开源报告】美军徒步行军组织与实施研究
• 迪哥讲事
  • 有关ai时代漏洞挖掘的探讨
• Over Security
  • Leadec Targeted by Anubis: 4 TB of Allegedly Stolen Data and an Initial $6 Million Ransom Demand
  • Plex vulnerabilities being exploited in the wild to drop a cryptominer
  • How To Vet An MCP Server Before Your AI Agent Uses It
  • Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root
  • Europe's 24-Hour Hack Reporting Rule, Tested On France's Fridges
  • L’Italia non protegge gli hacker etici
  • Gîtes de France - 117,574 breached accounts
• IntelTechniques by Michael Bazzell
  • Drive Specifications Matter (Complete)
• 安全分析与研究
  • 跨工具数据流污染与污点分析
• Have I Been Pwned latest breaches
  • Gîtes de France - 117,574 breached accounts
• SANS Internet Storm Center, InfoCON: green
  • Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)
• ICT Security Magazine
  • Cybersecurity awareness, vulnerabilità e phishing: limiti metodologici e implicazioni dello studio
• KitPloit - PenTest Tools!
  • ai-pentest-agent
  • hosts v3.16.123
  • ghidra-llm-pipeline
  • cve-intel
  • semantic_firewall
  • hashcat — Updated!
  • NaSuno
  • Sandboxie v1.18.8
  • remove-ai-watermarks v0.46.0
  • wifit3 v0.5.0
  • DFIRHub
• The Hacker News
  • ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
• TorrentFreak
  • Chinese Court Jails Aiyifan Operator, U.S. Judge Won’t Transfer Pirate Site’s Domains
• Security Affairs
  • SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 4
  • Rust-Based CikaBika Bot Turns Discord into a Command Center
  • SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 119
  • Security Affairs newsletter Round 600 by Pierluigi Paganini – INTERNATIONAL EDITION
• Deep Web
  • Am I smoked?
  • Skin chems
  • How do I find people? r/deep
  • Dread Forum Down?
  • Anyone getting this? from dark.fail link
• 网安寻路人
  • 人工智能技术出口管理的分级逻辑：禁止与限制