Posts of last few hours

基础软硬件智能化漏洞治理生态创新技术交流活动成功举办
点击蓝字 关注我们2026年9月15日下午，由国家信息安全漏洞库（CNNVD）、中国信息产业商会信息安全产业分
https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651465495&idx=1&sn=f775470ca9be9c78534a5c30fb10db95
Самая дорогая и критическая технология планеты. Печать на пределе физики закрепила абсолютную власть нидерландской монополии над кремнием
Отрасль вошла в эпоху, где следующий шаг вперёд зависит от одного поставщика.
https://www.securitylab.ru/news/577430.php
【长亭AI安全·网安周进行时】9奖齐发！漏洞治理见真章，AI成果树标杆
护航 AI 时代的漏洞治理体系
https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651390745&idx=1&sn=02b45b9edf89fc3991d74fd99820cb83
NSA以巨额薪酬吸引早期成员重返黑客部门TAO
美国国家安全局（NSA）正以编制升格、预算加码与高薪回流并行的方式，把已解散近十年的精锐网络渗透单位。
https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247487172&idx=1&sn=9c1616d4ff9eeb9bf23da491a234dd23
Google Chrome 153 Update Fixes 42 Security Flaws, Including 3 Critical Ones

Google has released an important Chrome 153 security update that fixes 42 vulnerabilities across the browser, including three bugs rated Critical. The Stable channel is moving to 153.0.8010.47/.48 for Windows and macOS and 153.0.8010.47 for Linux, with the update rolling out gradually over the coming days and weeks. CVE-2026-91721 is a use-after-free vulnerability in Chrome’s […]

The post Google Chrome 153 Update Fixes 42 Security Flaws, Including 3 Critical Ones appeared first on Cyber Security News.

https://cybersecuritynews.com/google-chrome-fixes-42-flaws/
JVN: QNDにおける複数の脆弱性
クオリティソフト株式会社が提供するQNDには、複数の脆弱性が存在します。
https://jvn.jp/jp/JVN95825631/
JVN: XikeStor製Layer3スイッチのコンフィグレーションデータダウンロード機能における認証欠如の脆弱性
XikeStor製Layer3スイッチは、認証なしにコンフィグレーションデータをダウンロード可能です。
https://jvn.jp/jp/JVN45281119/
【深度研判】荷兰及多国拟扩大情报权并以我为“显见对手”，欧洲对我反间谍制度化风险
荷兰拟议的新情报法，真正改变的不是某几项技术手段，而是欧洲对外部“安全风险”的识别方式：调查重心正从具体个人
https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650569677&idx=2&sn=f45b1ad142777b236509c21103ee87b6
【开源调查】美国国家安全局开始招募心理学家，NSA为什么开始给自己“看心理医生”？
美国国家安全局最近招聘的心理学家，不是坐在审讯室里研究“怎样让人开口”，也不是替特工分析童年阴影，而是要研究一
https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650569677&idx=1&sn=39e35ce0d4089f0e7a1eae781dd650c4
Cisco邮件网关9.8分漏洞被在野利用：一封邮件直接拿root，没有任何绕过的余地
bithoven v0.1.0
New releaseSep 16, 2026Type-safe, imperative programming language that compiles to native Bitcoin Sc
https://buaq.net/go-442731.html
Zine#58 - 用合理的排版引导讀者閱讀、值得熬夜的事情都值得早起
用合理的排版引导讀者閱讀、值得熬夜的事情都值得早起目錄News | ArticleCool BitTutorial | ResourceCode RelatedAI RelatedTool | Lib
https://buaq.net/go-442735.html
speakeasy v2.0.0b8
New releaseSep 16, 2026Windows malware emulation framework that executes binaries, drivers, and shel
https://buaq.net/go-442732.html
第23届中国网络安全年会暨国家网络安全宣传周网络安全协同防御论坛在济南召开
https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247502172&idx=1&sn=0be5cb636b6a68c6e32684f746cb496e
vpod v0.8.4
What is a vpod ?A vpod is a lightweight, portable sandbox that gives an untrusted process an inst
https://buaq.net/go-442722.html
SpringBoot Actuator 泄露挖掘实战：从 /env 到 heapdump
一个只暴露静态页面的服务，因为默认配置开启了 Actuator，最终翻出了云厂商的 AccessKey 和注册中心的明文密码。这篇记录完整的挖掘链路，以及过程中踩过的几个关键坑。
https://xz.aliyun.com/news/92675
Cyber Op Targets South Korean Media & Automotive Sectors
A likely North Korean advanced persistent threat (APT) group used a previously undocumented Linux espionage toolkit to compromise load balancers, gain access to communications, and further exploit networks.
https://www.darkreading.com/cyberattacks-data-breaches/cyber-south-korean-media-automotive
Followership, CyberSecurity Leadership, and Judgement as a Defining Skill - Kenyada Meadows - BSW #465
Sep 16, 2026The overwhelming majority of people, across the full span oftheir professional lives, o
https://buaq.net/go-442733.html
SDL3 移植到 HarmonyOS / OpenHarmony
广泛用于游戏和应用、提供跨平台软硬件抽象层的 SDL3 库已移植到华为的 HarmonyOS / OpenHarmony 操作系统。游戏工作室 Outfit7 资助了 Ryan "Iccu
https://buaq.net/go-442725.html
AI helps scammers build convincing antivirus renewal pages
Antivirus renewal scams often begin with a message claiming that your subscription has automa
https://buaq.net/go-442717.html

Managed ad