Posts of last few hours

情报分析师培训课程（三）情报学科与全源分析（2）
全源分析，顾名思义，是指在形成判断时综合使用来自两个或两个以上搜集门类、两个或两个以上独立来源的信息，并通过明确的规则处理它们之间的印证、冲突与空缺。这个定义平淡无奇，但其中每一个限定词都有讲究。
https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651157684&idx=1&sn=d3bff400fa11ce665c20978b50035b2a
Stop Feeding the SOC Garbage
,  Tuesday, 06 October 2026 06:30:00 (UTC/GMT)
https://buaq.net/go-446606.html
8.8 Million People Affected in Major Denmark Data Breach
The Denmark data breach has
https://buaq.net/go-446596.html
AI加持事件解剖：重排安全建设优先级
安全建设最难的不是技术，是排序。而排序最好的依据，不是别人的最佳实践，是自己每一次被打穿的完整记录。
https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247488112&idx=1&sn=371359380a4ab03750cb2bde66fc23a2
Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account
Unauthorized parties have gained access to the names, addresses, and personal identification numbe
https://buaq.net/go-446580.html
frida-gum
Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project
https://buaq.net/go-446593.html
promptfoo v0.124.0
promptfoo is a CLI and library for evaluating and red-teaming LLM-based apps. S
https://buaq.net/go-446594.html
Wikimedia Foundation: OpenAI agents tried to edit pages and compromise notes tool
Beyond the potential misuses of its services, Wikimedia said activity by AI agents can be a drain on web platforms that are already operating with limited resources.
https://therecord.media/wikimedia-foundation-openai-agents-report
ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes
The Linux backdoor exploits 24 known flaws to compromise IoT devices and uses legitimate public STUN servers to obscure communications.
https://www.darkreading.com/iot/clingstun-vulnerable-iot-devices-proxy-nodes
ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits
A new type of ClickFix attack is using compromised websites to trick users into executing a malicio
https://buaq.net/go-446581.html
Wikimedia Finds Unauthorized OpenAI Agent Activity Across Its Platforms
https://buaq.net/go-446578.html
The Hidden Risks of Affiliate Brand Bidding
Affiliate marketing is designed to help brands reach new audiences through publishers and partners w
https://buaq.net/go-446579.html
I built RXScan — an open-source Rust recon/OSINT tool. Looking for people to test it
https://buaq.net/go-446591.html
ultrasploiter
Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project
https://buaq.net/go-446577.html
Autel EVO Nano+: getting a root shell | 0xD34D’s Space
https://buaq.net/go-446574.html
How do you confirm a vulnerability fix reached every environment, not just emerged?
https://buaq.net/go-446590.html
Счётчики. Камеры. Сигнализации. Кассы. Минцифры хочет поставить на учёт всё, что звонит само
«Антифрод 3.0» добрался до интернета вещей.
https://www.securitylab.ru/news/578319.php
HELPING MY FRIEND WHO'S LIVING IN MOUNTAIN
https://buaq.net/go-446592.html
hacked by trenggalek6etar
– JATIM4U –Jangene_Cakep – Panataran – 0x1999 – 0xIDiot – Unlucky – Mr.Optimuz_Root
https://buaq.net/go-446582.html
Rejetto HFS servers now actively scanned for critical RCE flaw
Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). [...]
https://www.bleepingcomputer.com/news/security/rejetto-hfs-servers-now-actively-scanned-for-critical-rce-flaw/

Managed ad