[每日信息流] 2026-01-12

# 每日安全资讯（2026-01-12）

- SecWiki News
  - [ ] [SecWiki News 2026-01-11 Review](http://www.sec-wiki.com/?2026-01-11)
- Private Feed for M09Ic
  - [ ] [xxDark forked xxDark/Velocity from PaperMC/Velocity](https://github.com/xxDark/Velocity)
  - [ ] [bolucat released 202601111936 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202601111936)
  - [ ] [ReaJason released v2.4.2 at ReaJason/MemShellParty](https://github.com/ReaJason/MemShellParty/releases/tag/v2.4.2)
  - [ ] [joaoviictorti starred taiki-e/cargo-hack](https://github.com/taiki-e/cargo-hack)
  - [ ] [wh0amitz starred mchklt/CVE-2025-30406](https://github.com/mchklt/CVE-2025-30406)
  - [ ] [WAY29 starred millylee/anyrouter-check-in](https://github.com/millylee/anyrouter-check-in)
  - [ ] [su18 starred SecurityCrux/secrux](https://github.com/SecurityCrux/secrux)
  - [ ] [FunnyWolf starred hcengineering/platform](https://github.com/hcengineering/platform)
  - [ ] [l3yx released v0.2.7 at l3yx/intentlang](https://github.com/l3yx/intentlang/releases/tag/v0.2.7)
  - [ ] [kyxiaxiang starred Neo23x0/yarGen-Go](https://github.com/Neo23x0/yarGen-Go)
  - [ ] [spf13 starred rustmailer/bichon](https://github.com/rustmailer/bichon)
  - [ ] [niudaii starred github/spec-kit](https://github.com/github/spec-kit)
  - [ ] [WAY29 starred Piebald-AI/tweakcc](https://github.com/Piebald-AI/tweakcc)
  - [ ] [l3yx released v0.2.6 at l3yx/intentlang](https://github.com/l3yx/intentlang/releases/tag/v0.2.6)
  - [ ] [anthropics released v2.1.4 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.4)
- Recent Commits to cve:main
  - [ ] [Update Sun Jan 11 11:34:32 UTC 2026](https://github.com/trickest/cve/commit/a5fc74151c19941f2075f06a381982a4354e30fc)
- 先知安全技术社区
  - [ ] [利用控制面板COM对象实现内网横向移动的新型DCOM攻击技术](https://xz.aliyun.com/news/91110)
- Doonsec's feed
  - [ ] [【Web逆向】Yakit热加载之file.ReadFile+js.Run调用本地js加解密Vulinbox靶场CryptoJS.AES(CBC)](https://mp.weixin.qq.com/s/VBw6mTwWgf1Ff2cvgkizxQ)
  - [ ] [【红队】一个高速的隐蔽隧道工具](https://mp.weixin.qq.com/s/WLi94l-orx4tx52HrPqgGw)
  - [ ] [2026 年该挖什么漏洞](https://mp.weixin.qq.com/s/U4gV259Ib4GImp-eqJq5Uw)
  - [ ] [【已复现】IDA-PRO-MCP 远程代码执行漏洞（CVE-2025-67117）](https://mp.weixin.qq.com/s/8s-CXV14Bs_RAJQ5xjVJnQ)
  - [ ] [网安Ai框架CAI与机器狗结合可进行近源渗透](https://mp.weixin.qq.com/s/Ea1vHr1xCKbcpDWaTP07ZQ)
  - [ ] [【Android取证篇】实用 APK 分析模板：溯源链路与研判分析汇总（转载）](https://mp.weixin.qq.com/s/3xBspxVdP2HNwQra_aBVQw)
  - [ ] [齐鲁师范学院2025级网络安全新生技能竞赛 WriteUP](https://mp.weixin.qq.com/s/yVXaLnxyQXHZ3cZCPN3xtA)
  - [ ] [网络空间武器效能漫谈（二）](https://mp.weixin.qq.com/s/KufZzeemdiZgHYtLGhh88A)
  - [ ] [美元，石油，AI（货币、能源、生产力）](https://mp.weixin.qq.com/s/REcFH1LSyJ-mrQcx5Tu3bg)
  - [ ] [排查电脑木马后门](https://mp.weixin.qq.com/s/z7axcuiTkB7Xcr8uDFYr7g)
  - [ ] [EasyTools渗透测试工具箱V2.0.9更新(新增mysql、sqlserver等诸多数据库连接、优化便携发包等功能)](https://mp.weixin.qq.com/s/vdwMbOmEynAegQMWSVm0AA)
  - [ ] [某天坑厂员工猝死，别真把公司当\"家\"](https://mp.weixin.qq.com/s/OdFNR4rQtS-WGEROLy5QTw)
  - [ ] [0115.意外泄露高危 ASP.NET 漏洞：一次咖啡休息如何导致他人个人身份信息泄露（以及 600 美元赏金）](https://mp.weixin.qq.com/s/L6E-CNUjVMlv0V43mVHKCw)
  - [ ] [因式分解练习题](https://mp.weixin.qq.com/s/mJJCMH5pWeJ_V8EWnOtrXw)
  - [ ] [某985证书站三重绕过挖掘SQL](https://mp.weixin.qq.com/s/-IivJLaX8UOcKsTvF4nkIw)
  - [ ] [无形杀器：美军声波武器突袭委内瑞拉，鼻血呕血背后的致命共振真相](https://mp.weixin.qq.com/s/XqY-KKwqK9CBdJfapZ4Qgw)
  - [ ] [[ 黑客群组增长技能]深入了解软件逆向工程的核心概念—2026](https://mp.weixin.qq.com/s/0OH7UOZcXqIBMidk36xmlA)
  - [ ] [红队指纹识别工具 - MUKI?tab=readme-ov-file](https://mp.weixin.qq.com/s/7o_gVdoKK1dBmdKESroSJA)
  - [ ] [光荣当选2025“最美基层民警”，他们这样说](https://mp.weixin.qq.com/s/AAwMhn5D0W6UJkQ_QMbSFA)
  - [ ] [记某次渗透中order by排序注入](https://mp.weixin.qq.com/s/DR_0sQYIhNakD780YNPPHQ)
  - [ ] [网络安全中常见的“人为错误”有哪些？(类型、成因与对策)](https://mp.weixin.qq.com/s/qzTQQduqIpN9lN80hoOmyw)
  - [ ] [攻防演练中的快速打点思路小结](https://mp.weixin.qq.com/s/an4MjarYJI7eZIBuVntD8Q)
  - [ ] [活该你能挖到洞](https://mp.weixin.qq.com/s/HPevkzdUchVL2lVI_7BEqg)
  - [ ] [安全锐见：传统防火墙在人工智能时代已经过时](https://mp.weixin.qq.com/s/xy6hI92Cbh7lNvuML5PkPw)
  - [ ] [Springkill新作-ai java代审（非市面垃圾版）](https://mp.weixin.qq.com/s/tq_YYeMS0Nsk-fhYKCTLBw)
  - [ ] [渗透测试登录框的实战思路](https://mp.weixin.qq.com/s/Lt5-Kmu8qhxm3iFeyvc9Fw)
  - [ ] [资料共享 | 《2025银行保险机构数据安全合规落地最佳实践》](https://mp.weixin.qq.com/s/jIgRc8QAkNxtHERym9LOnQ)
  - [ ] [高危漏洞威胁情报合集 (2026-01-11）](https://mp.weixin.qq.com/s/vz1WAaS17dhkSz6TsxaNfg)
  - [ ] [《XXE xa0introduce/simple bypass 实战图文》](https://mp.weixin.qq.com/s/PbXCkQ80nAlyxj6JUtIBxw)
  - [ ] [AI驱动的IoT固件安全分析：从上传到报告，全流程自动化](https://mp.weixin.qq.com/s/NN_cghz3sPzdqELowm8GTg)
  - [ ] [伪装成LetsVPN安装程序银狐最新攻击样本分析](https://mp.weixin.qq.com/s/mJWQczFH25H2-pv7_6lWJw)
  - [ ] [在Kali-Linux如何破解kdb文件](https://mp.weixin.qq.com/s/NzN5LWBksMegaf4iA8hRFQ)
  - [ ] [【安全圈】2025年中国十大宕机事件](https://mp.weixin.qq.com/s/9vQql0aW3LczkWyhtEhbmg)
  - [ ] [盲从国民级导航软件，小心“违章走错路”：高德地图你该优化了](https://mp.weixin.qq.com/s/Cc0H2FIHp2hgDHI7IyaTLQ)
  - [ ] [人类能否设计出可靠的实用保障措施来对抗超级人工智能智能体](https://mp.weixin.qq.com/s/yowEdGB0Ja-9h9jkqgbYIw)
  - [ ] [网安原创文章推荐【2026/1/10】](https://mp.weixin.qq.com/s/hDQ1DJMGYLXyYq5K4dIqBQ)
  - [ ] [吉林银行大模型建设规划“1+1+N”体系，已就AI技术开发服务招标](https://mp.weixin.qq.com/s/STv4dl_8TLAvPzP_t6Y1yw)
  - [ ] [润和软件715.8万中！南京银行AI算力设备采购项目](https://mp.weixin.qq.com/s/wcQindGNKtQ4Z5lZE6zaKw)
- Blog | AppSec Labs
  - [ ] [AI-Driven Penetration Testing For Evolving Threats: A CISO Guide](https://appsec-labs.com/ai-driven-penetration-testing-for-evolving-threats-a-ciso-guide/)
- Malware-Traffic-Analysis.net - Blog Entries
  - [ ] [2026-01-10: Ten days of scans and probes and web traffic hitting my web server](https://www.malware-traffic-analysis.net/2026/01/10/index.html)
- nikic's blog
  - [ ] [LLVM: The bad parts](https://www.npopov.com/2026/01/11/LLVM-The-bad-parts.html)
- 奇客Solidot–传递最新科技情报
  - [ ] [伊朗断网三天](https://www.solidot.org/story?sid=83275)
- 黑鸟
  - [ ] [网安Ai框架CAI与机器狗结合可进行近源渗透](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451184783&idx=1&sn=bf4319f551f7c78d488e27136e8320a6)
- 皮相
  - [ ] [卫浴铝合金置物架的粘合固定](https://mp.weixin.qq.com/s?__biz=MzI0NDA5MDYyNA==&mid=2648257317&idx=1&sn=f1e15d7bd33822ff2162f78b7fd0c24f)
- 威努特安全网络
  - [ ] [一文了解IACS船载系统和设备网络韧性统一要求UR E27](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651139469&idx=1&sn=1624561309a0ac6f43bbeb42eda20e10)
- 青衣十三楼飞花堂
  - [ ] [因式分解练习题](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488951&idx=1&sn=9a69cd7ebf3b4425ca73567ded76baf5)
- 二道情报贩子
  - [ ] [无形杀器：美军声波武器突袭委内瑞拉，鼻血呕血背后的致命共振真相](https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489958&idx=1&sn=7f1b2d3030463e1ca1dbfaf164e74e1a)
- 安全分析与研究
  - [ ] [伪装成LetsVPN安装程序银狐最新攻击样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247495322&idx=1&sn=e3fac8f2e09db31d6ae38c940c776f75)
- 吾爱破解论坛
  - [ ] [某短视频指纹和纯算 sig3 逆向分析](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143477&idx=1&sn=1b3920382e039bdba49d844aa0b0dd05)
- 安全圈
  - [ ] [【安全圈】BreachForums论坛数据库32.4万个账户泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073661&idx=1&sn=47a2ea7b05c99c8d23e9b8e6fb8ab229)
  - [ ] [【安全圈】Meta澄清Instagram“密码重置风暴”非发生数据泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073661&idx=2&sn=23f8372e701cf483b7cf976c0b207268)
  - [ ] [【安全圈】恶性 Chrome 扩展盗窃用户信息](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073661&idx=3&sn=b285a1738ee7ba582e9647f76afac35a)
- 丁爸 情报分析师的工具箱
  - [ ] [【资料】美国退出的66个国际组织](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651153735&idx=1&sn=447e5ebde9a4259d2dd9107ec1725e79)
  - [ ] [【培训】第16期开源情报能力培训班1月北京开班](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651153735&idx=2&sn=802325f7244d9629783a99c05ecb5d38)
- 极客公园
  - [ ] [20 周年版 iPhone 爆料：直屏+曲面玻璃；何小鹏：未来五年全力推进全球化；黄仁勋：「AI 末日论」对社会毫无益处 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653097006&idx=1&sn=ef31fb39df05b47939a5f028ea7833ea)
- 电子物证
  - [ ] [内存取证](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048892&idx=1&sn=bf7b3df8f15ddf4b7717f990b4374c6b)
  - [ ] [【电子数据审查与海量数据质证】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048892&idx=2&sn=e7558bb1cf839b2eac3e81c38a613688)
- IT Service Management News
  - [ ] [SA 8000:2026 - Standard per il lavoro dignitoso](http://blog.cesaregallotti.it/2026/01/sa-80002026-standard-per-il-lavoro.html)
- Over Security - Cybersecurity news aggregator
  - [ ] [California bans data broker reselling health data of millions](https://www.bleepingcomputer.com/news/legal/california-bans-data-broker-reselling-health-data-of-millions/)
  - [ ] [Instagram denies breach amid claims of 17 million account data leak](https://www.bleepingcomputer.com/news/security/instagram-denies-breach-amid-claims-of-17-million-account-data-leak/)
  - [ ] [Instagram - 6,215,150 breached accounts](https://haveibeenpwned.com/Breach/Instagram)
  - [ ] [Filtering Cisco API Output](https://www.adainese.it/blog/2026/01/11/filtering-cisco-api-output/)
  - [ ] [Info Sec Unplugged – CISO e vCISO](https://roccosicilia.com/2026/01/11/info-sec-unplugged-ciso-e-vciso/)
  - [ ] [Detecting Vectored Exception Handling Squared in an EDR](https://fluxsec.red/detecting-vectored-exception-handling-malware-rust-edr-windows-kernel)
  - [ ] [Microsoft is retiring 'Send to Kindle' in Word](https://www.bleepingcomputer.com/news/microsoft/microsoft-is-retiring-send-to-kindle-in-word/)
- Have I Been Pwned latest breaches
  - [ ] [Instagram - 6,215,150 breached accounts](https://haveibeenpwned.com/Breach/Instagram)
- SANS Internet Storm Center, InfoCON: green
  - [ ] [YARA-X 1.11.0 Release: Hash Function Warnings, (Sun, Jan 11th)](https://isc.sans.edu/diary/rss/32616)
- cavallette
  - [ ] [Newsletter Autistici/Inventati  01-2026](https://cavallette.noblogs.org/2026/01/10025)
- The Register - Security
  - [ ] [Meta admits to Instagram password reset mess, denies data leak](https://go.theregister.com/feed/www.theregister.com/2026/01/11/infosec_news_in_brief/)
- Full Disclosure
  - [ ] [Defense in depth -- the Microsoft way (part 95): the (shared)	"Start Menu" is dispensable](https://seclists.org/fulldisclosure/2026/Jan/18)
  - [ ] [Re: Multiple Security Misconfigurations and Customer	Enumeration Exposure in Convercent Whistleblowing Platform	(EQS Group)](https://seclists.org/fulldisclosure/2026/Jan/17)
  - [ ] [RIOT OS 2026.01-devel-317 Stack-Based Buffer Overflow in RIOT ethos Serial Frame Parser](https://seclists.org/fulldisclosure/2026/Jan/16)
  - [ ] [RIOT OS 2026.01-devel-317 Stack-Based Buffer Overflow in tapslip6 Utility via Unbounded Device Path Construction](https://seclists.org/fulldisclosure/2026/Jan/15)
  - [ ] [TinyOS 2.1.2 Stack-Based Buffer Overflow in mcp2200gpio](https://seclists.org/fulldisclosure/2026/Jan/14)
  - [ ] [TinyOS 2.1.2 printfUART Global Buffer Overflow via Unbounded	Format Expansion](https://seclists.org/fulldisclosure/2026/Jan/13)
- Security Affairs
  - [ ] [The ideals of Aaron Swartz in an age of control](https://securityaffairs.com/186792/security/the-ideals-of-aaron-swartz-in-an-age-of-control.html)
  - [ ] [SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 79](https://securityaffairs.com/186786/breaking-news/security-affairs-malware-newsletter-round-79.html)
  - [ ] [Security Affairs newsletter Round 558 by Pierluigi Paganini – INTERNATIONAL EDITION](https://securityaffairs.com/186776/breaking-news/security-affairs-newsletter-round-558-by-pierluigi-paganini-international-edition.html)
- 网安寻路人
  - [ ] [从单点到全链条：互联网应用个人信息保护的新规制逻辑与治理创新](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247508057&idx=1&sn=4ba88cd98341af2db0ea597cf3a3809c)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[每日信息流] 2026-01-12 #1112

每日安全资讯（2026-01-12）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2026-01-12 #1112

Description

每日安全资讯（2026-01-12）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions