# 每日安全资讯（2026-05-24） - SecWiki News - [ ] [SecWiki News 2026-05-23 Review](http://www.sec-wiki.com/?2026-05-23) - Private Feed for M09Ic - [ ] [bolucat released 202605232120 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202605232120) - [ ] [4ra1n starred Tencent/VulnGym](https://github.com/Tencent/VulnGym) - [ ] [esrrhs contributed to esrrhs/fakelua](https://github.com/esrrhs/fakelua/pull/117) - [ ] [huoji120 starred sunblaze-ucb/cybergym](https://github.com/sunblaze-ucb/cybergym) - [ ] [killeven starred code-yeongyu/oh-my-openagent](https://github.com/code-yeongyu/oh-my-openagent) - [ ] [kyxiaxiang starred ReaJason/MemShellParty](https://github.com/ReaJason/MemShellParty) - [ ] [anthropics released v2.1.150 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.150) - [ ] [pydantic released v2.0.0b3 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v2.0.0b3) - [ ] [PrefectHQ released 3.7.2 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.7.2) - Doonsec's feed - [ ] [AutoPentestAI：MoE 架构 + 100+ 工具，AI 自动执行完整渗透测试](https://mp.weixin.qq.com/s/uKDQlIGHUbrxsppPyd2bqQ) - [ ] [勒索病毒解密工具](https://mp.weixin.qq.com/s/BrQDvhtcu3qsQoeumZs8zA) - [ ] [亚马逊、脸书、ICE 与 FBI 共享西雅图警方运营的秘密情报共享网络](https://mp.weixin.qq.com/s/AkoZlYXYG5uvvGEgIrC47Q) - [ ] [【会议活动】百余家养老机构将现场观摩 供需对接为养老服务机器人落地按下“加速键”—2026智能养老服务机器人应用大赛即将启幕](https://mp.weixin.qq.com/s/eG7YH4Tsw6ndyM2SsK1lWA) - [ ] [【倒计时2天】科技温暖夕阳，智能养老服务机器人迈向应用新阶段](https://mp.weixin.qq.com/s/RB119-gbX4RDCf9rcWInxg) - [ ] [【AI安全】AI悄悄删库？这个硬核拦截器终于曝光了](https://mp.weixin.qq.com/s/2mrrCTIHC1q7UUTG95vpaA) - [ ] [【课程】图片拍摄地点分析方法与技术14-15（含视频）](https://mp.weixin.qq.com/s/CdP_yttcjPkn280qBr-Yqw) - [ ] [Codex用上DeepSeek](https://mp.weixin.qq.com/s/ABaHbVf1KJkHeHPzuFMZDA) - [ ] [什么是CSC？](https://mp.weixin.qq.com/s/6D2D8V4EvNz_fZBljQ0yyg) - [ ] [她，深耕网络安全、计算机博士、香港警司，我国第 4 位女航天员。](https://mp.weixin.qq.com/s/nnXPor64PQmYcSfc7avVMA) - [ ] [做风险评估的7个致命误区，90%的企业中招](https://mp.weixin.qq.com/s/n6bqn1Tqn2rWx96P_6wF4Q) - [ ] [学习使用人大金仓Kingbase数据库](https://mp.weixin.qq.com/s/-flp9CGxDGYP_ekFOFu7-A) - [ ] [若依及其二开系统的渗透测试指南](https://mp.weixin.qq.com/s/aq2lp-xKk5SoS0YRj3jWIA) - [ ] [PLC逻辑代码漏洞的严重性及隐蔽性分析](https://mp.weixin.qq.com/s/BNz1GsAIqR8lxl6vHtjW9w) - [ ] [黑客的正确学习顺序，千万别盲目自学！](https://mp.weixin.qq.com/s/89Y5wrFcRKywSUH77dbi5A) - [ ] [华为员工：经历身边的人猝死，真的很震撼。前一秒还在聊天，后一秒人就没了](https://mp.weixin.qq.com/s/GvXOXxgYpaHv2wc_RnTy8w) - [ ] [利用“反直觉”阅读理解网安市场文章](https://mp.weixin.qq.com/s/hAwyqZ3QBX-9H0tZ6CwDgQ) - [ ] [我干啥都听领导的](https://mp.weixin.qq.com/s/IYZmuqVwFVh1NF4TGQXeGQ) - [ ] [招新 | 2026年团队纳新计划正式启动！](https://mp.weixin.qq.com/s/DQ28pe1Q4YYsYDvmCiOnIw) - [ ] [三重勒索 美国Change Healthcare的真正损失高达200亿元](https://mp.weixin.qq.com/s/nDppC7VPYXviOIQ1UzBQjA) - [ ] [今天在一家披萨连锁店看到的](https://mp.weixin.qq.com/s/QszoQV2HSRpknizfTdHzHw) - [ ] [搭载第六代英特尔奔腾处理器的ThinkPad 14s简直就是工科大学生天花板笔记本，你认同吗？](https://mp.weixin.qq.com/s/Fi4Pwb7jRyKn4IsOPODUig) - [ ] [告别还是被逐？美国家情报总监图尔西·加巴德辞职的背后真相！](https://mp.weixin.qq.com/s/F_54b9Aa7U2_fIZvKxtckA) - [ ] [免费可商用！国产开源 ChatBI 一站式企业数据中台，支持 MySQL、DM8、Doris 数据集成ETL、Text2SQL 分析](https://mp.weixin.qq.com/s/0q7NuTVSsT_4MQnFdlyLaA) - [ ] [在看 | 周报：屏南农信社因数据安全及案防违规被罚65万；江苏银行北京分行因五项违规被央行处罚](https://mp.weixin.qq.com/s/eetVFIuvzWaXQoLB1wReOw) - [ ] [在看 | 厂商：本周热门网络安全产业动态](https://mp.weixin.qq.com/s/oabBetK5CXrod5vW7Xh9fA) - [ ] [PowerShell 脚本库绕过杀毒软件](https://mp.weixin.qq.com/s/Sl80xPZw_qt-QOcIJlG0RA) - [ ] [论文一直投不中？退稿十几次，大牛帮修改选刊投稿返修后，被拒的5篇SCI全中了！](https://mp.weixin.qq.com/s/UjpeVSdwEQLaS-qFADKQ_g) - [ ] [北京农商银行加速大模型布局，全年调用量达32万次](https://mp.weixin.qq.com/s/m0YRD6wZJd5asXT5_-ot4g) - [ ] [30万！浙商资产行业研究报告生成智能体项目](https://mp.weixin.qq.com/s/7OOnPSUpCc5FHngaiWWbIw) - [ ] [【安全圈】荷兰查封一家托管公司的800台服务器，该公司涉嫌参与网络攻击](https://mp.weixin.qq.com/s/PlEdiE6KxMtFUmSxMNu0qA) - [ ] [【安全圈】美国前高管承认协助技术支持诈骗犯](https://mp.weixin.qq.com/s/kbIeI-kraoxojimllcDkmQ) - [ ] [【安全圈】趋势科技警告称，Apex One 零日漏洞已被利用](https://mp.weixin.qq.com/s/8HV7g9Os5K8mSy96YrYufg) - [ ] [Chrome安全漏洞或使攻击者能够远程执行代码](https://mp.weixin.qq.com/s/z4wthxePisDjY6eYFtHmZg) - [ ] [Microsoft Defender零日漏洞已在野外遭积极利用](https://mp.weixin.qq.com/s/mzawD-_crDMa0Awmk-i8eQ) - [ ] [国汽战略院执行院长郑亚莉：AI重绘汽车产业价值曲线与产品定义](https://mp.weixin.qq.com/s/x6DWZe7SMcVnMqitMJeJSQ) - [ ] [关于Shannon的版本迭代，增强适配性](https://mp.weixin.qq.com/s/JaBDhMg0oRa9RI69emz-fg) - [ ] [没预算做安全整治？6个开源安全工具实测，我们正在用](https://mp.weixin.qq.com/s/WLLEjfj_I78E3YZQLfMZUQ) - [ ] [网络IP地址速查工具表](https://mp.weixin.qq.com/s/jQ1Ag3K2KgKOOh4YNiCNDg) - [ ] [Claude Mythos Preview首月发现超万个0Day漏洞](https://mp.weixin.qq.com/s/2vlzln_L0sEBs-sH66rzSw) - [ ] [汽车ECU软件安全更新技术详解：从基本要求到实现流程](https://mp.weixin.qq.com/s/g2I9h_ygbkKKwXlMvA8GlQ) - [ ] [联想签名驱动被黑客用来终止安全进程](https://mp.weixin.qq.com/s/4Wb5HYz757Dy7eJMstA-mA) - [ ] [AUTOSAR OS模块深度解析：从任务调度到中断管理的核心技术](https://mp.weixin.qq.com/s/_c1r0X4Qv_DobVpoghkFEQ) - [ ] [GitHub 4000个私有仓库被窃取；Claude Code深度链接解析漏洞可被武器化 | FreeBuf周报](https://mp.weixin.qq.com/s/js1AYhWtrLBCmo7CJGADKw) - [ ] [PANDA 2026 官宣定档深圳：全球硬件安全年度盛会重磅回归](https://mp.weixin.qq.com/s/cOr_wCHxFk0ekZZgSF1gtA) - [ ] [2026腾讯游戏安全竞赛决赛安卓客户端安全分析](https://mp.weixin.qq.com/s/Vn6k_9-eSCQskYzHwrmLhw) - [ ] [红队实战手册：车企全场景攻防拆解](https://mp.weixin.qq.com/s/xv52Ei6DMTSJV1Yuaq-KQg) - [ ] [网络安全保姆级规划，我看谁学不会。](https://mp.weixin.qq.com/s/zE0_sP9ZjkZu-y3NlxYcCQ) - [ ] [曝光一个抖音学免杀的骗子](https://mp.weixin.qq.com/s/GRO7XqXHM2ZYxRTmp76KYQ) - [ ] [公安部拟明确刑事案件电子数据取证中获取密码等特殊程序](https://mp.weixin.qq.com/s/-nmHoodOCp6yMPcbk7KmMA) - [ ] [专家解读丨从技术规则到数字程序法——评《公安机关电子数据取证规则（征求意见稿）》](https://mp.weixin.qq.com/s/E--7q5p7e9DCE3nnNLEwhA) - [ ] [Codex CLI + MoonBridge + FreeLLMAP+I+cc switch：一套零成本的 AI 编程助手搭建方案](https://mp.weixin.qq.com/s/CTNtwv4P8XzyGmzae2TLOQ) - [ ] [底薪](https://mp.weixin.qq.com/s/vDixwQpuX2rHdkcEE3qhQQ) - [ ] [萤火虫与满天星](https://mp.weixin.qq.com/s/QSfgE-pgAXCDwKprkX6dLQ) - [ ] [别让你的OpenClaw，只是个“高级摆件”](https://mp.weixin.qq.com/s/V3K9RYMh_WrC9F5PuxwvlA) - [ ] [同事钓的这是什么鱼](https://mp.weixin.qq.com/s/fp-IICXYFXybMmFkcvzvfA) - [ ] [通关这【十大靶场】，你就是下一个网安大佬](https://mp.weixin.qq.com/s/gj0PXJGUOoYRUPuO9iAvrA) - [ ] [网安 200 条 Kali 命令合集，新手必备！！](https://mp.weixin.qq.com/s/O4lO8D6j5STgpUqfRvHJBg) - [ ] [免费代发招聘57期：北京 安全运营高级工程师 && 渗透测试工程师](https://mp.weixin.qq.com/s/FHFKu8GYjxpVcmy2SQeJbw) - [ ] [周小川：AI在金融业的发展会超过岗位智能化](https://mp.weixin.qq.com/s/Lo4eRAdYI7cdy_X-tAWGhw) - [ ] [原创—养生几则](https://mp.weixin.qq.com/s/9itlCZ3Bm4wDHysiij-Gew) - [ ] [公安部《公安机关电子数据取证规则（征求意见稿）》公开征求意见](https://mp.weixin.qq.com/s/55GbWdcMOAQoZePPK5Bmnw) - [ ] [证监会等八部门联合印发《综合整治非法跨境证券期货基金经营活动实施方案》](https://mp.weixin.qq.com/s/eMCtap4e-VB2BIoLyBe25w) - [ ] [上亿组个人信息被明码标价 央视披露“开盒”黑产链条细节](https://mp.weixin.qq.com/s/cxW_BGPyupNH1Nvg26LPNw) - [ ] [58公里变101公里？73人因“作弊神器”落网](https://mp.weixin.qq.com/s/Q_zlqmu4kUwYiDzBvnYicQ) - [ ] [深度学习理论的船舶网络安全分析研究](https://mp.weixin.qq.com/s/X8bZQ1tDcyJ_z_QrQ3cpVQ) - [ ] [智能船舶网络安全与系统防护专项培训课程 2026](https://mp.weixin.qq.com/s/spaGbv2mmN0bQgqhSwjQMw) - [ ] [船舶导航系统无线网络技术IEEE802.11i安全加密技术](https://mp.weixin.qq.com/s/kS_2chDDvZEZO1ebBb_SJA) - [ ] [网安的实习面试后，要不要问结果?怎么问结果?](https://mp.weixin.qq.com/s/JLSvDdUFkj896alVCCawtg) - [ ] [安全热点周报 | 一周网络安全大事件盘点（2026/05/18-2026/05/22）](https://mp.weixin.qq.com/s/FGz0Leo96g9vwrVwBYrLrg) - [ ] [0成本、无需服务器，搭建 NodeCrypt 网页端对端加密聊天系统](https://mp.weixin.qq.com/s/7MQPoL2ogmm5GT5S9UMKOQ) - [ ] [安全天书课程来袭｜助力实战免杀钓鱼](https://mp.weixin.qq.com/s/vWjfBrN0ryEANyIrXoqy6w) - [ ] [攻击云服务提供商：关于控制平面入侵与多租户隔离攻击的交互式教科书](https://mp.weixin.qq.com/s/aRsqvt6lLgijnZe21Hf6Yw) - [ ] [重点关注！2026年上海市工程系列数字技术专业高级职称评审工作启动](https://mp.weixin.qq.com/s/r6UPNV6r99u-DyZQJ5fe3w) - [ ] [2026年上海市工程系列数字技术专业密码工程方向工程师职称评审工作启动](https://mp.weixin.qq.com/s/NpsPadRc4ivk8nV-HfPdIA) - [ ] [记录-2026-05-23 demo 3](https://mp.weixin.qq.com/s/U_vbMNRxwo1NHfrnck0dWQ) - [ ] [兼顾创新与安全：美国人工智能行政命令草案提出建立前沿AI安全部署框架](https://mp.weixin.qq.com/s/S2HqUG26eVMKv8t9ICxcGg) - [ ] [Almerys 医疗支付数据泄露事件经过，第三方支付平台背后的身份数据风险](https://mp.weixin.qq.com/s/ZI7jB2zFhP3gbAyahcQb-w) - [ ] [家里没网，可能是光纤断了](https://mp.weixin.qq.com/s/q0gJnRdvfk8MAVHN0ZSyJA) - [ ] [【实战】针对在某次医疗项目中关于C/S架构系统的渗透测试小TIPS 附工具](https://mp.weixin.qq.com/s/p08Rn6eYLB9SWWUE8gMYKg) - [ ] [奥特曼开始大杀特杀](https://mp.weixin.qq.com/s/FNXpIJ_mjHP0t1wtqFVWWg) - [ ] [免费饭票：kiro反代Claude Code 零成本白嫖搭建](https://mp.weixin.qq.com/s/M77dHCs77c2bli5UNRRwlw) - [ ] [工业网络安全周报-2026年第20期](https://mp.weixin.qq.com/s/mFSTNHGDuIryjorSYUscAQ) - [ ] [【网警说·普法】普法宣传系列短片《越界》第二集](https://mp.weixin.qq.com/s/4Fi3ibQH4_-gXdK4LEO_8w) - [ ] [愚人节不愚人！LAB52曝朝鲜APT“复活节兔子”，用PDF投毒专盯全球科技圈](https://mp.weixin.qq.com/s/yvWTM6xSHeB1IPmbhNkwJQ) - [ ] [广发银行发布人工智能类岗位](https://mp.weixin.qq.com/s/qVIl-DzRpH1HUUkWK7YexA) - [ ] [[SRC]漏洞显现](https://mp.weixin.qq.com/s/WbVDivZkzkQUdncwApaozg) - [ ] [【电子取证篇】《公安机关电子数据取证规则（征求意见稿）》规则变化与法评](https://mp.weixin.qq.com/s/lcpYNUJctRMcXepiDSqp4A) - [ ] [记一次从SQL注入到CS上线](https://mp.weixin.qq.com/s/berzNgMu5OWHwFoWJfUG5w) - [ ] [StubZero：谷歌云生产环境中的RCE漏洞](https://mp.weixin.qq.com/s/8EmKtZsBbKTpkeE4OWZmyw) - [ ] [深信服实习，渗透测试，二面面经(网络安全)](https://mp.weixin.qq.com/s/VCG_bqZraE7R16FSVNNm4g) - [ ] [安天AVL SDK反病毒引擎升级通告（20260523）](https://mp.weixin.qq.com/s/otdXOWoOvisIWQbSQI4wFg) - [ ] [一个韭菜的自我修养](https://mp.weixin.qq.com/s/m_it90Zp-MtmOLmYySEXkA) - [ ] [AI中转站怎么测-模型掺水与供应链投毒技术测试版](https://mp.weixin.qq.com/s/4N99DhQ7KKoAq__3fiX7UA) - [ ] [SRC 每日漏洞复现学习系列（第 8 篇）：反射型 XSS 漏洞详解与报告模板](https://mp.weixin.qq.com/s/ZQwt43XOwi5RVr9VUa_oFA) - [ ] [舆情 | 2026年6月舆情风险研判](https://mp.weixin.qq.com/s/Nrw2mdktrVtrLvtcLXWSkg) - [ ] [意外的 C2:借道 VS Code Dev Tunnels 实现远程访问](https://mp.weixin.qq.com/s/dDg75NqJIuIv4FHQd_nwKA) - [ ] [新型 Evilginx 前端：降低 token 窃取与复用的门槛](https://mp.weixin.qq.com/s/SDe1SqzXZZDMC89FpOJlRQ) - [ ] [网安原创文章推荐【2026/5/22】](https://mp.weixin.qq.com/s/mCCJfUi1bmYtspNkh0FJ3w) - [ ] [摊牌了，我们是给创业者当技术后盾的](https://mp.weixin.qq.com/s/zWAsmpDEH1X9vQbRqBnbqw) - [ ] [初识智能体——智能体应用的协作模式](https://mp.weixin.qq.com/s/KlJipL_D5eG7M1NmG-eRDA) - [ ] [从古早的PPTP到如今的云原生网格，VPN的技术演进早已跳出“加密隧道”的简单窠臼](https://mp.weixin.qq.com/s/qxwOI8npAnGcwMHgQkESqQ) - [ ] [HTTP头部注入（下）](https://mp.weixin.qq.com/s/Bntzpw9YLAYfm3wCpPcZWQ) - [ ] [【转载】从JDBC MySQL不出网攻击到spring临时文件利用](https://mp.weixin.qq.com/s/8oqToAK4G9sJ7VOI5atPEQ) - [ ] [2026攻防演练考核加码，攻击面收敛全攻略](https://mp.weixin.qq.com/s/UZyhH0-98BBsaL1pipdDPQ) - [ ] [零基础转行网络安全！通俗拆解行业岗位、能力要求与发展路径](https://mp.weixin.qq.com/s/EHBIAKhailkIKxRQBbTaCQ) - [ ] [【研究报告】智能化战争视阈下美军“地狱景观”作战构想落地与无人装备保障评估研究报告](https://mp.weixin.qq.com/s/9e4y_9WcIb4ZTqJry8QA2w) - [ ] [【研究报告】典型无人智战场景剖析、应对策略及对“绝对决心”等战例的实证研究](https://mp.weixin.qq.com/s/esdXpjnNjvR-0LHECBkDbw) - [ ] [【研究报告】美军联合作战概念开发中的赋能手段、运行机理与案例验证研究](https://mp.weixin.qq.com/s/T5QzSZEvtQeQH2Q0B3KAqA) - [ ] [【研究报告】美空军数据链作战力量体系建设与演进研究](https://mp.weixin.qq.com/s/cBS5TPi0lYxfxFNmuoyCVg) - [ ] [【研究报告】大国竞争视阈下美军智能化电磁频谱攻击集群发展脉络与作战效能评估报告](https://mp.weixin.qq.com/s/1tOUx4adhd62TUqEoi8dzg) - [ ] [【会员下载】以机器速度作战：人工智能与美国陆军在战争法下的反击——第二部分](https://mp.weixin.qq.com/s/mlpF8a5mGXT1sywBGEaI_w) - [ ] [【会员下载】对俄罗斯“沙赫德136”导弹在乌克兰部署情况的月度分析](https://mp.weixin.qq.com/s/Qx43UAXoVsriP7RG1XK8ug) - [ ] [【会员下载】大规模可消耗无人系统对美国军事转型（2022-2030）的战略意义](https://mp.weixin.qq.com/s/ZHUHdrVioEarohiGqq-Cyg) - [ ] [Android Smali代码合并工具V1.1](https://mp.weixin.qq.com/s/4Uk3zEPuI1Tok1eC6BKbQQ) - [ ] [赛欧思一周资讯分类汇总(2026-05-18 ~ 2026-05-23)](https://mp.weixin.qq.com/s/8TENJcI2OAWY_ymgjPu3aQ) - [ ] [好文 | 迷思与事实：Nmap vs Masscan vs Rustscan](https://mp.weixin.qq.com/s/u1GHZS9hBmJso18tzRrT0g) - [ ] [我扒了马维斯实测：1000万Token白送，最大坑是权限](https://mp.weixin.qq.com/s/u8K6PEh7A9xOuZ3Ph_uNfg) - [ ] [安全圈的狼来了：那些\"高危\"漏洞为何最终用不上](https://mp.weixin.qq.com/s/yQhU6JcXX6NLGVx7X9pfGg) - [ ] [Telegram协议设计致命缺陷：可以实现无视代理追踪](https://mp.weixin.qq.com/s/LEQH9U4Bs8kqM6w2p8hQAg) - [ ] [kn-live-dbg：一个形似调试器的Windows内核级 live debugging 神器](https://mp.weixin.qq.com/s/j0B3oZnrUKAUHVskg61V_g) - [ ] [MQTT微信小程序5.2 支持电池接入 (完全开源)](https://mp.weixin.qq.com/s/c6Slb-9SRy-Je5KrqNeeOw) - [ ] [GopherTrunk：纯Go实现的集群无线电扫描器，一次支持P25/DMR/TETRA/NXDN等全部主流协议](https://mp.weixin.qq.com/s/w9G4lSarwer_djb0eVOHpA) - [ ] [从技术规则到数字程序法——评《公安机关电子数据取证规则（征求意见稿）》](https://mp.weixin.qq.com/s/99UUmKR98xmm-_VGXJS6BQ) - CXSECURITY Database RSS Feed - CXSecurity.com - [ ] [Frigate NVR 0.16.3 Remote Code Execution](https://cxsecurity.com/issue/WLB-2026050020) - [ ] [Linux nf_tables 6.19.3 Local Privilege Escalation](https://cxsecurity.com/issue/WLB-2026050019) - [ ] [ThingsBoard IoT Platform 4.2.0 Server-Side Request Forgery (SSRF)](https://cxsecurity.com/issue/WLB-2026050018) - [ ] [Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500 / CVE-2026-46300)](https://cxsecurity.com/issue/WLB-2026050017) - [ ] [SUSE Manager 4.3.15 Code Execution](https://cxsecurity.com/issue/WLB-2026050016) - Recent Commits to cve:main - [ ] [Update Sat May 23 11:50:52 UTC 2026](https://github.com/trickest/cve/commit/0f0fa410fbc65bde6482a2d3afd674d313e91ead) - Bug Bounty in InfoSec Write-ups on Medium - [ ] [SSRF in APIs: How a Single URL Parameter Can Expose Internal Systems](https://infosecwriteups.com/ssrf-in-apis-how-a-single-url-parameter-can-expose-internal-systems-63128bff63a4?source=rss----7b722bfd1b8d--bug_bounty) - [ ] [A Simple Session Management Bug Every Beginner Bug Hunter Should Test.](https://infosecwriteups.com/a-simple-session-management-bug-every-beginner-bug-hunter-should-test-72d346e4deee?source=rss----7b722bfd1b8d--bug_bounty) - [ ] [Recon Isn’t Just Technical — It’s Psychological](https://infosecwriteups.com/recon-isnt-just-technical-it-s-psychological-0bc51a58487b?source=rss----7b722bfd1b8d--bug_bounty) - [ ] [Finding & Exploiting Exposed Google API Keys for Bug $Bounties](https://infosecwriteups.com/finding-exploiting-exposed-google-api-keys-for-bug-bounties-5ce6685a4927?source=rss----7b722bfd1b8d--bug_bounty) - Didier Stevens - [ ] [Update: search-for-compression.py Version 0.0.7](https://blog.didierstevens.com/2026/05/23/update-search-for-compression-py-version-0-0-7/) - Reverse Engineering - [ ] [Open-source reverse engineering of PerimeterX (HUMAN Security) Web SDK — pure-algo cookie generators, dual-site live HTTP 200, 10-chapter methodology](https://www.reddit.com/r/ReverseEngineering/comments/1tlm933/opensource_reverse_engineering_of_perimeterx/) - 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台 - [ ] [苹果在Q1首次荣登全球智能手机市场榜首](https://blog.upx8.com/%E8%8B%B9%E6%9E%9C%E5%9C%A8Q1%E9%A6%96%E6%AC%A1%E8%8D%A3%E7%99%BB%E5%85%A8%E7%90%83%E6%99%BA%E8%83%BD%E6%89%8B%E6%9C%BA%E5%B8%82%E5%9C%BA%E6%A6%9C%E9%A6%96) - [ ] [微软支付2.5亿美元了结动视暴雪股东诉讼](https://blog.upx8.com/%E5%BE%AE%E8%BD%AF%E6%94%AF%E4%BB%982-5%E4%BA%BF%E7%BE%8E%E5%85%83%E4%BA%86%E7%BB%93%E5%8A%A8%E8%A7%86%E6%9A%B4%E9%9B%AA%E8%82%A1%E4%B8%9C%E8%AF%89%E8%AE%BC) - [ ] [Windows本地AI升级，llama.cpp支持多后端，一键跑GGUF无审查模型](https://blog.upx8.com/Windows-AI-llama-cpp-GGUF) - [ ] [8G 显存逆天了！RTX3070 成功跑 Qwen3.6-35B 多模态AI大模型！部署教程（优化脚本）](https://blog.upx8.com/8G-RTX3070-Qwen3-6-35B-AI) - [ ] [老虎国际：未有“拒不配合监管”等言论](https://blog.upx8.com/%E8%80%81%E8%99%8E%E5%9B%BD%E9%99%85-%E6%9C%AA%E6%9C%89-%E6%8B%92%E4%B8%8D%E9%85%8D%E5%90%88%E7%9B%91%E7%AE%A1-%E7%AD%89%E8%A8%80%E8%AE%BA) - [ ] [苹果、华为618降价抢份额，业内称手机涨价潮还在后面](https://blog.upx8.com/%E8%8B%B9%E6%9E%9C-%E5%8D%8E%E4%B8%BA618%E9%99%8D%E4%BB%B7%E6%8A%A2%E4%BB%BD%E9%A2%9D-%E4%B8%9A%E5%86%85%E7%A7%B0%E6%89%8B%E6%9C%BA%E6%B6%A8%E4%BB%B7%E6%BD%AE%E8%BF%98%E5%9C%A8%E5%90%8E%E9%9D%A2) - [ ] [山西石灰窑发生一氧化碳中毒事件一死五伤](https://blog.upx8.com/%E5%B1%B1%E8%A5%BF%E7%9F%B3%E7%81%B0%E7%AA%91%E5%8F%91%E7%94%9F%E4%B8%80%E6%B0%A7%E5%8C%96%E7%A2%B3%E4%B8%AD%E6%AF%92%E4%BA%8B%E4%BB%B6%E4%B8%80%E6%AD%BB%E4%BA%94%E4%BC%A4) - [ ] [中国公布2025年全国1%人口抽样调查主要数据](https://blog.upx8.com/%E4%B8%AD%E5%9B%BD%E5%85%AC%E5%B8%832025%E5%B9%B4%E5%85%A8%E5%9B%BD1-%E4%BA%BA%E5%8F%A3%E6%8A%BD%E6%A0%B7%E8%B0%83%E6%9F%A5%E4%B8%BB%E8%A6%81%E6%95%B0%E6%8D%AE) - [ ] [🖼 美国五角大楼公布第二批涉UFO档案](https://blog.upx8.com/%E7%BE%8E%E5%9B%BD%E4%BA%94%E8%A7%92%E5%A4%A7%E6%A5%BC%E5%85%AC%E5%B8%83%E7%AC%AC%E4%BA%8C%E6%89%B9%E6%B6%89UFO%E6%A1%A3%E6%A1%88) - 奇客Solidot–传递最新科技情报 - [ ] [扎克伯格为监视员工的做法辩护](https://www.solidot.org/story?sid=84379) - [ ] [《无畏契约》反作弊工具会限制作弊者使用 DMA 外挂](https://www.solidot.org/story?sid=84378) - 黑鸟 - [ ] [亚马逊、脸书、ICE 与 FBI 共享西雅图警方运营的秘密情报共享网络](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186804&idx=1&sn=3ce20a98dff1476c724eac45677fac29) - Shostack & Friends Blog - [ ] [Remembering Peter Neumann](https://shostack.org/blog/remembering-peter-neumann/) - 安全圈 - [ ] [【安全圈】荷兰查封一家托管公司的800台服务器，该公司涉嫌参与网络攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076796&idx=1&sn=754fe62e703923730522d4192a32f6d6) - [ ] [【安全圈】美国前高管承认协助技术支持诈骗犯](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076796&idx=2&sn=97bf66c9659513363d30285e19b3e903) - [ ] [【安全圈】趋势科技警告称，Apex One 零日漏洞已被利用](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076796&idx=3&sn=957360c8847377bd11e2714149619033) - 看雪学苑 - [ ] [PANDA 2026 官宣定档深圳：全球硬件安全年度盛会重磅回归](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458615450&idx=1&sn=10c330347e262210615048ea8ed2da29) - [ ] [2026腾讯游戏安全竞赛决赛安卓客户端安全分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458615450&idx=2&sn=5b372737248ca9dbc68c515e055e3636) - 极客公园 - [ ] [一家垂类 AI 创企的自救：当通用模型开始吃掉一切](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653107067&idx=1&sn=cfb65da844005c91eb377824933f5cc7) - [ ] [DeepSeek-V4-Pro API 永久降价；iPhone 17 系列中国激活 3000 万；五角大楼再曝外星人文件｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653107059&idx=1&sn=0e756c0537330b447ff7f8d8ccb27fa1) - 丁爸 情报分析师的工具箱 - [ ] [【课程】图片拍摄地点分析方法与技术14-15（含视频）](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651155922&idx=1&sn=eae47985e9306e11c928e628b902c603) - OnionSec - [ ] [利用“反直觉”阅读理解网安市场文章](https://mp.weixin.qq.com/s?__biz=MzUyMTUwMzI3Ng==&mid=2247485782&idx=1&sn=df99dfb5e903e6ed623844c950210e37) - SANS Internet Storm Center, InfoCON: green - [ ] [An Example of Stack String in High Level Language, (Sat, May 23rd)](https://isc.sans.edu/diary/rss/33008) - Over Security - [ ] [UK Cybercrime Journal: Inside the Cl0p attack on South Staffs Water](https://blog.bushidotoken.net/2026/05/uk-cybercrime-journal-inside-cl0p.html) - [ ] [Laravel Lang packages hijacked to deploy credential-stealing malware](https://www.bleepingcomputer.com/news/security/laravel-lang-packages-hijacked-to-deploy-credential-stealing-malware/) - [ ] [These special phone and app features can help protect you from spyware](https://techcrunch.com/2026/05/23/you-dont-have-to-click-anything-to-get-hacked-anymore-heres-how-to-fight-back/) - [ ] [Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes](https://www.bleepingcomputer.com/news/legal/italy-disrupts-cinemagoal-piracy-app-that-stole-streaming-auth-codes/) - The Hacker News - [ ] [npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks](https://thehackernews.com/2026/05/npm-adds-2fa-gated-publishing-and.html) - [ ] [Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware](https://thehackernews.com/2026/05/packagist-supply-chain-attack-infects-8.html) - [ ] [Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software](https://thehackernews.com/2026/05/claude-mythos-ai-finds-10000-high.html) - [ ] [Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer](https://thehackernews.com/2026/05/laravel-lang-php-packages-compromised.html) - [ ] [LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root](https://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.html) - [ ] [Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV](https://thehackernews.com/2026/05/drupal-core-sql-injection-bug-actively.html) - Security Affairs - [ ] [CVE-2026-9082: Drupal’s Highly Critical SQL Injection Flaw Is Already Under Active Attack](https://securityaffairs.com/192557/security/cve-2026-9082-drupals-highly-critical-sql-injection-flaw-is-already-under-active-attack.html) - [ ] [Why pure extortion is replacing traditional ransomware](https://securityaffairs.com/192550/cyber-crime/why-pure-extortion-is-replacing-traditional-ransomware.html) - [ ] [Ghostwriter Is Back, Using a Ukrainian Learning Platform as Bait to Hit Government Targets](https://securityaffairs.com/192538/apt/ghostwriter-is-back-using-a-ukrainian-learning-platform-as-bait-to-hit-government-targets.html) - www.theregister.com - Articles - [ ] [Dirty Frag, Copy Fail, Fragnesia: The start of a worrisome Linux security trend](https://www.theregister.com/security/2026/05/23/dirty-frag-copy-fail-fragnesia-the-start-of-a-worrisome-linux-security-trend/5244742) - Deep Web - [ ] [What’s the best marketplace ?](https://www.reddit.com/r/deepweb/comments/1tlhw6l/whats_the_best_marketplace/) - Technical Information Security Content & Discussion - [ ] [Pardon MIE?: how Mythos did not bypass Apple MIE](https://www.reddit.com/r/netsec/comments/1tl9tfc/pardon_mie_how_mythos_did_not_bypass_apple_mie/) - Information Security - [ ] [AI Is Turning Phishing Into a Scalable Threat Model](https://www.reddit.com/r/Information_Security/comments/1tlfsww/ai_is_turning_phishing_into_a_scalable_threat/) - netsecstudents: Subreddit for students studying Network Security and its related subjects - [ ] [Looking for the cybersecurity study buddy](https://www.reddit.com/r/netsecstudents/comments/1tlowmb/looking_for_the_cybersecurity_study_buddy/) - Your Open Hacker Community - [ ] [[ Removed by Reddit ]](https://www.reddit.com/r/HowToHack/comments/1tlp3et/removed_by_reddit/) - [ ] [I need help to make sure someone isnt on my computer](https://www.reddit.com/r/HowToHack/comments/1tlflca/i_need_help_to_make_sure_someone_isnt_on_my/) - [ ] [How to get cookies from dicloak browser](https://www.reddit.com/r/HowToHack/comments/1tlhpcn/how_to_get_cookies_from_dicloak_browser/) - [ ] [found harasser's IP address, is there anything I can do with it to find them?](https://www.reddit.com/r/HowToHack/comments/1tlhgak/found_harassers_ip_address_is_there_anything_i/) - Blackhat Library: Hacking techniques and research - [ ] [infostealers just spawned a 5,000+ repo GitHub supply chain attack](https://www.reddit.com/r/blackhat/comments/1tlhsl8/infostealers_just_spawned_a_5000_repo_github/) - Daniel Miessler - [ ] [Could Suddenly-Great Open Source AI Crash the US Economy?](https://danielmiessler.com/blog/could-open-source-ai-crash-the-us-economy?utm_source=rss&utm_medium=feed&utm_campaign=website)
每日安全资讯（2026-05-24）