# sec_news

article_title: GLiGuard：面向大语言模型安全防护的模式条件分类方法
link: https://paper.seebug.org/3485
source: Seebug
upload_time: 2026-05-11 16:40:13
category: AI安全
description:
作者：Urchade Zaratiana, Mary Newhauser, George Hurn-Maloney, Ash Lewis 译者：知道创宇404实验室翻译组 原文链接：https://arxiv.org/html/2605.07982v1 摘要 保障大语言模型（LLM）输出安全合规、符合政策要求，需要能跨多安全维度实时扩展的内容审核机制。然而，当前最优的安全护栏模型均基于70亿–27...


article_title: 基于大语言模型的 AI 智能体安全威胁与防御系统性综述——分层攻击面框架
link: https://paper.seebug.org/3484
source: Seebug
upload_time: 2026-05-09 16:53:56
category: AI安全
description:
作者：Kexin Chu 译者：知道创宇404实验室翻译组 原文链接：https://arxiv.org/pdf/2604.23338v2 摘要 智能体AI系统可跨多会话规划、保留记忆、调用外部工具并与对等智能体协同，无状态大语言模型则不具备这些能力。现有安全分类体系按攻击类型（如提示注入、越狱）划分威胁，却未说明脆弱的架构组件或威胁显现的时间尺度。本文直接解决这些结构性问题，提出分层攻击面模型（...


article_title: ReTokSync：面向生成式语言隐写的自同步分词消歧方法
link: https://paper.seebug.org/3481
source: Seebug
upload_time: 2026-05-08 16:42:48
category: AI安全
description:
作者：Yaofei Wang, Rui Wang, Weilong Pang等 译者：知道创宇404实验室翻译组 原文链接：https://arxiv.org/html/2604.25486v1 摘要 生成式语言隐写（GLS）通过将秘密信息嵌入自然语言生成过程实现隐蔽通信。然而在实际部署中，GLS易受分词歧义影响：相同的表层文本在接收端可能被重新分词为不同的token序列，破坏通信双方共享的解码状...


article_title: 素域 PINI：后量子 NTT 掩码的机器验证合成定理
link: https://paper.seebug.org/3480
source: Seebug
upload_time: 2026-05-06 16:44:36
category: AI安全
description:
作者：Ray Iskander，Khaled Kirah 译者：知道创宇404实验室翻译组 原文链接：https://arxiv.org/abs/2604.25878v1 摘要 本文是后量子密码掩码数论变换（NTT）硬件形式化验证分析系列论文的第六篇。第一篇论文[1]建立了 QANARY 平台的结构依赖分析，第二篇论文[2]量化了部分 NTT 掩码下的安全裕度。布尔掩码的合成理论通过无干扰（NI）...


article_title: Google DeepMind：AI 智能体陷阱
link: https://paper.seebug.org/3479
source: Seebug
upload_time: 2026-04-24 16:54:27
category: AI安全
description:
作者：Matija Franklin, Nenad Tomašev等 译者：知道创宇404实验室翻译组 原文链接：https://blog.qiaomu.ai/api/images/document/2026/04/603f0cae8cd8ab94-ai-agent-trap.pdf 摘要 自主AI智能体日益在网络中自主行动，它们面临一种全新挑战：信息环境本身。由此产生了一个关键安全漏洞，我们称之...


article_title: 合法终端管理软件遭滥用：疑似银狐攻击事件分析与溯源
link: https://paper.seebug.org/3478
source: Seebug
upload_time: 2026-04-15 03:31:00
category: 威胁情报
description:
作者：知道创宇高级威胁情报团队 一、事件概述 近期，我们在客户现场应急响应中排查到一起新型攻击事件。攻击者伪造常用工具安装包诱导执行，随即部署一款带有合法数字签名的终端管理软件。经技术溯源确认，该程序具备主机信息收集、远程控制等完整恶意能力，其 C2 基础设施与 “银狐” 高度关联。由于合法数字签名的天然 “免杀” 特性，该恶意程序可轻易绕过主流杀毒软件检测，实现隐蔽入侵与长期控制。 银狐简介 银...


article_title: SkillTrojan：针对基于技能的智能体系统的后门攻击
link: https://paper.seebug.org/3477
source: Seebug
upload_time: 2026-04-09 08:26:00
category: AI安全
description:
作者：Yunhao Feng, Yifan Ding, Yingshui Tan等 译者：知道创宇404实验室翻译组 原文链接：https://arxiv.org/html/2604.06811v1/https://arxiv.org/html/2604.06811v1 摘要 基于技能的智能体系统通过组合可复用技能完成复杂任务，在提升模块化与可扩展性的同时，引入了尚未被充分研究的安全攻击面。本文提...


article_title: GUARD‑SLM：面向小语言模型、基于令牌激活的越狱攻击防御方法
link: https://paper.seebug.org/3476
source: Seebug
upload_time: 2026-04-03 02:48:00
category: AI安全
description:
作者：Md. Jueal Mia1, Joaquin Molto1, Yanzhao Wu1, M. Hadi Amini 译者：知道创宇404实验室翻译组 原文链接：https://arxiv.org/html/2603.28817v1/https://arxiv.org/html/2603.28817v1 摘要 小语言模型（SLM）正成为大语言模型（LLM）高效且经济可行的替代方案，在计算成本...


article_title: 静默颠覆：通过卫星系统供应链植入物实施的传感器欺骗攻击
link: https://paper.seebug.org/3475
source: Seebug
upload_time: 2026-03-24 09:47:00
category: AI安全
description:
作者：Jack Vanlyssel, Gruia-Catalin Roman, Afsah Anwar 译者：知道创宇404实验室翻译组 原文链接：https://arxiv.org/html/2603.10388v1/https://arxiv.org/html/2603.10388v1 摘要 欺骗攻击是地面系统最具破坏性的网络威胁之一，而在太空中这类威胁愈发危险——卫星难以在轨维修，且运营方依...


article_title: 增强网络入侵检测系统：一种抵御对抗攻击的多层集成方法
link: https://paper.seebug.org/3474
source: Seebug
upload_time: 2026-03-23 08:31:00
category: AI安全
description:
作者：Nasim Soltani, Shayan Nejadshamsi等 译者：知道创宇404实验室翻译组 原文链接：https://arxiv.org/html/2603.10413v1/https://arxiv.org/html/2603.10413v1 摘要 对抗样本会对机器学习（ML）算法构成严重威胁。若被用于操控基于机器学习的网络入侵检测系统（NIDS）行为，将危及网络安全。本研究旨...


article_title: CUDA Agent：面向高性能 CUDA 内核生成的大规模智能体强化学习
link: https://paper.seebug.org/3473
source: Seebug
upload_time: 2026-03-17 09:50:00
category: AI安全
description:
作者：Weinan Dai, Hanlin Wu, Qiying Yu等 译者：知道创宇404实验室翻译组 原文链接：https://arxiv.org/html/2602.24286v1/https://arxiv.org/html/2602.24286v1 摘要 GPU内核优化是现代深度学习的基础，但仍是一项高度专业化的任务，需要深厚的硬件专业知识。尽管大语言模型（LLM）在通用编程任务中表现...


link: https://paper.seebug.org/3472
source: Seebug
upload_time: 2026-03-13 08:30:00
category: 威胁情报
article_title:
Unmasking SilverFox’s New Trends: Decoding Evasion Tactics, Domain Impersonation, and Mass-Generated Fake Software

description:
Author: Knownsec 404 Advanced Threat Intelligence Team I. Introduction SilverFox has become one of the most active cyber threats in recent years, targeting managerial and finance staff in organization...


article_title: 基于图像的提示注入：通过视觉嵌入的对抗性指令劫持多模态大语言模型
link: https://paper.seebug.org/3471
source: Seebug
upload_time: 2026-03-11 01:29:00
category: AI安全
description:
作者：Neha Nagaraja, Lan Zhang, Zhilong Wang 译者：知道创宇404实验室翻译组 原文链接：https://arxiv.org/html/2603.03637v1/https://arxiv.org/html/2603.03637v1 摘要：多模态大语言模型（MLLMs）融合视觉与文本能力赋能各类应用，但这种融合也引入了新的安全漏洞。本文研究基于图像的提示注入（...


article_title: 虚假 OpenClaw 安装程序如何传播 GhostSocks 恶意软件
link: https://paper.seebug.org/3470
source: Seebug
upload_time: 2026-03-10 01:45:00
category: 情报分析
description:
作者：Jai Minton, Ryan Dowd 原文链接：https://www.huntress.com/blog/openclaw-github-ghostsocks-infostealer/https://www.huntress.com/blog/openclaw-github-ghostsocks-infostealer 摘要 信息窃取型恶意软件是针对面向公众系统发起严重攻击的初始访问...


article_title: 当 AI Agent 拥有系统权限：OpenClaw 安全风险全景分析
link: https://paper.seebug.org/3469
source: Seebug
upload_time: 2026-03-06 07:34:00
category: AI安全
description:
作者：知道创宇积极防御实验室 完整的 OpenClaw 安全实践 Skill、自动化审计工具已在 GitHub 开源。项目地址：https://github.com/knownsec/openclaw-security/https://github.com/knownsec/openclaw-security 一、背景说明 随着 AI Agent 技术的快速演进，具备自动化决策与自主执行能力的开源...


# tech_passage

article_title: 【病毒分析】深度剖析粉丝投稿：海莲花APT超级间谍组织最新免杀样本（从白加黑落地到定制化RUST远控）
link: https://forum.butian.net/share/4842
upload_time: 2026-04-14 09:36:01
source: 奇安信攻防社区
description:
一、背景概述与海莲花组织简介
在深入剖析本次的恶意样本之前，我们有必要先了解本次攻击事件的幕后黑手：海莲花(Ocean Lotus)，在安全业界也被称为 APT32 或 Canvas Assassin。
自 2012 年首次...


article_title: 「JavaWeb审计盲点」List 集合误区：批量操作下的权限逃逸
link: https://forum.butian.net/share/4835
upload_time: 2026-04-09 09:00:01
source: 奇安信攻防社区
description:
本文将深入剖析 List 集合在批量查询、批量更新、批量导出等场景下的典型越权模式。这些风险并非源于明显的代码缺陷，而是藏在"合理的业务逻辑"与"容器特性的误用"之间——属于最难被自动化工具发现、却最易被攻击者利用的 Corner Case。


# uni_rss

article_title: 美团 LongCat 开源 General 365：树立推理评测新标尺
link: https://tech.meituan.com/2026/05/15/longcat-general-365.html
upload_time: 2026-05-15 08:00:00
author: 美团技术团队
source: 美团技术团队
description:
美团 LongCat 团队正式发布 General 365。我们发现，在对 26 款主流模型的实测中，目前地表最强的 Gemini 3 Pro 准确率仅为 62.8%，而绝大多数模型甚至没能摸到 60 分的及格线。


article_title: 用Agent评测思路管理AI Coding —— 31万行代码AI重构的实践
link: https://tech.meituan.com/2026/05/07/agent-ai-coding.html
upload_time: 2026-05-07 08:00:00
author: 美团技术团队
source: 美团技术团队
description:
当 90% 以上代码由 AI 生成，决定系统走向的不是谁写得更快，而是约束 AI 的能力。没有统一规范，AI 只会成倍放大混乱。本文基于 31 万行代码重构实践，分享我们如何用 Agent 评测思路管理 AI Coding——通过技术债梳理、建设Rule、重构 SOP 和 Pre-PR 机制，把重构从高成本专项变成随迭代持续推进的日常动作。


article_title: 美团SRC助力 | 你敢信，他们都来了！HPW白帽世界大会2026全议程发布
description: 顶尖AI安全红队亲自传授秘籍，HPW2026，所有议题一次解锁!
upload_time: 2026-05-06 17:00:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247494896&idx=1&sn=5b3d4f7d62a8e7212d9dff1cc4910a45


article_title: 江湖征召令｜美团SRC专测活动进行中
description: 活动时间：2026年4月27日 - 5月20日
upload_time: 2026-05-06 17:00:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247494896&idx=2&sn=62b64d34eb01c165640ce5b18fc56cf3


article_title: 江湖征召令｜美团SRC专测活动正式开启
description: 活动时间：2026年4月27日 - 5月20日
upload_time: 2026-04-27 10:08:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247494891&idx=1&sn=15e081c3c53f5ab38a5dd3380e470121


article_title: LARYBench 发布：定义具身动作表征 ImageNet，首次度量从人类视频学习的泛化表征
link: https://tech.meituan.com/2026/04/27/longcat-larybench.html
upload_time: 2026-04-27 08:00:00
author: 美团技术团队
source: 美团技术团队
description:
LARYBench （Latent Action Representation Yielding Benchmark），一个指引从大规模的视觉数据学习到通用的隐式动作表征的系统化评测基准。实验结果表明：在动作泛化和控制精度上，通用视觉模型的表现均显著优于专门为具身智能设计的动作专家模型，具身动作表征可以从大规模人类视频数据中涌现。


article_title: 美团SRC发布｜AI生成漏洞报告提交规范公告
description: 请白帽师傅们在提交报告时恪守本文规范
upload_time: 2026-04-24 14:23:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247494883&idx=1&sn=f6eba6477129792a9c38896caff14be0


article_title: 突破零样本 TTS 音色克隆上限：LongCat-AudioDiT 的声音克隆艺术
link: https://tech.meituan.com/2026/04/20/longcat-audiodit.html
upload_time: 2026-04-20 08:00:00
author: 美团技术团队
source: 美团技术团队
description:
能不能让 AI 直接学会声音本身的规律，跳过中间环节？为破解这一技术瓶颈，美团 LongCat 团队正式发布 LongCat-AudioDiT。在该模型中，彻底抛弃梅尔谱等中间表示，直接在波形潜空间进行基于扩散模型的文本转语音（Text-to-Speech, TTS），从根源阻断数据转换的级联误差。


article_title: 从发现 33 个 0day 漏洞，看安全攻防的下半场 ｜ 朱雀实验室
link: https://security.tencent.com/index.php/blog/msg/222
upload_time: 2026-04-10 17:45:09
source: 腾讯安全响应中心
description:
2026 年 4 月 7 日，Anthropic 联合 Apple、Google、Microsoft 等 45 家机构发布 Project Glasswing 计划，并宣布其尚未公开发行的前沿模型 Claude Mythos Preview 在所有主要操作系统和浏览器中发现了数千个&#8230;


article_title: LongCat-Flash-Prover：AI 攻克数学定理证明，不仅要“算得对”，更要“证得严”
link: https://tech.meituan.com/2026/04/07/longcat-flash-prover.html
upload_time: 2026-04-07 08:00:00
author: 美团技术团队
source: 美团技术团队
description:
在常规的数学解题中，模型只需要“答对最终数值”即可，但数学定理证明不同，它要求极度严苛的逻辑链条，任何一句自然语言的模棱两可，都可能导致整个证明的崩塌。那么，如何让 AI 从“猜答案”走向“严谨证明”，成为复杂推理具有挑战的课题。为了解答这个问题，我们开源了专门用于数学形式化与定理证明的模型 —— LongCat-Flash-Prover。


article_title: 美团发布原生多模态 LongCat-Next：当视觉和语音成为AI的母语
link: https://tech.meituan.com/2026/04/02/longcat-next.html
upload_time: 2026-04-02 08:00:00
author: 美团技术团队
source: 美团技术团队
description:
LongCat-Next 是我们在通往物理世界 AI 道路上的一次探索。今天，我们把研究思路的核心——LongCat-Next 模型和它的离散分词器全部开源，希望更多开发者能基于它，构建真正能感知、理解并作用于真实世界的 AI。


article_title: 重塑站外体验：大众点评 M 站基于 Qwik.js 的重构实践
link: https://tech.meituan.com/2026/03/13/qwik-practice-in-dianping.html
upload_time: 2026-03-13 08:00:00
author: 美团技术团队
source: 美团技术团队
description:
为突破传统 Web 框架的性能瓶颈，大众点评增长团队引入 Qwik.js 重构 M 站核心页面架构，解决了重构前页面加载慢、维护成本高的难题。借助“可恢复性”能力，我们甩掉了传统水合的性能损耗，搭配全链路优化与工程化适配，让各个页面的性能指标都得到了明显提升。本文将拆解本次重构的技术选型、原理与落地细节，沉淀前沿框架在站外场景的落地经验。


article_title: LongCat 为 OpenClaw 装上效率引擎：你的自动化任务还能再快 30%
link: https://tech.meituan.com/2026/03/09/longcat-openclaw.html
upload_time: 2026-03-09 08:00:00
author: 美团技术团队
source: 美团技术团队
description:
依赖第三方订阅进行非官方调用存在账号安全风险与服务不稳定性。为规避此类问题，LongCat 团队提供稳定合规的官方免费 API，开发者可通过官方渠道直接接入 OpenClaw，在确保账号安全的前提下构建自动化工作流。


article_title: 美团发布基于 N-gram 全新模型：嵌入扩展新范式，实现轻量化 MoE 高效进化
link: https://tech.meituan.com/2026/02/10/longcat-flash-lite.html
upload_time: 2026-02-10 08:00:00
author: 美团技术团队
source: 美团技术团队
description:
LongCat-Flash-Lite是一款拥有 685 亿参数，每次推理仅激活 29 亿~ 45 亿参数的轻量化 MoE 模型。通过将超过 300 亿参数高效用于嵌入层，LongCat-Flash-Lite 不仅超越了参数量等效的 MoE 基线模型，还在与同规模现有模型的对比中展现出卓越的竞争力，尤其在智能体与代码领域表现突出。


article_title: 致敬代码背后的守护者，美团SRC 2025年度荣誉答谢
description: 一份关于技术与荣誉的年度总结
upload_time: 2026-01-22 19:21:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247494861&idx=1&sn=d50a94a54627f3de0db0ce8a06ff598e


article_title: 热招｜美团安全邀你共赴新征途！
description: 欢迎你的加入，让我们奔赴热爱，无畏山海，共筑安全长城。
upload_time: 2025-12-11 12:18:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247494835&idx=1&sn=c20429c5049a31399fed6b33469f0f4d


article_title: 00后黑客落网！曾运营大型僵尸网络，频繁攻击腾讯游戏、DeepSeek、X平台
link: https://security.tencent.com/index.php/blog/msg/218
upload_time: 2025-09-26 17:32:19
source: 腾讯安全响应中心
description:
据美国司法部通报，活跃多年的高危DDoS僵尸网络“RapperBot”（历史频繁攻击腾讯游戏、DeepSeek、X平台的幕后黑手）现已被成功取缔。该僵尸网络主谋、22岁的美国俄勒冈州男子Ethan&#8230;


article_title: 活动｜秋日“挖洞”季，邀您来测！
description: 内含中秋礼品福利！请及时更新平台默认收货地址哦！
upload_time: 2025-09-24 18:37:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493937&idx=1&sn=4a134bd3c3e16a0177d3b7ccc56aee2f


article_title: 活动｜Keeta安全专测英雄帖：邀您洞见非凡，守护新域！
description: 活动时间：2025年8月22日-9月5日
upload_time: 2025-08-21 18:30:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493924&idx=1&sn=0e8ab3b3a2af4d1b20e62b31fb82ccc2


article_title: 美团安全应急响应中心漏洞测试高压线V2.0
description: 为帮助所有白帽子在美团SRC测试过程中规避违规风险，保护平台和白帽子的安全和利益，确保平台漏洞奖励机制得以良性运作，美团安全应急响应中心发布《漏洞测试高压线V2.0》。
upload_time: 2025-08-21 18:30:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493924&idx=2&sn=af01328cacbe1fb5c29a08e52a26457a


article_title: 筑牢AI防线，大模型安全专测活动已开启！
description: 活动时间：6月9日-6月22日
upload_time: 2025-06-09 10:01:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493903&idx=1&sn=1c69a453dfe76bcd593df539dda3c6a6


article_title: 报名 | 美团技术沙龙【AI+安全：智能技术在安全领域的应用探索】
description: 6月19日（周四） 14:00 - 17:30，线上直播，快来报名吧
upload_time: 2025-05-29 12:03:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493889&idx=1&sn=4701431171173014d00aef3e7050372d


article_title: 活动 ｜「春风送暖，安全同行」美团直播专测召集令
description: 活动时间：2025.03.24-04.03
upload_time: 2025-03-24 10:00:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493762&idx=1&sn=5599435d2eeb9cce063cb57ec68f6acb


article_title: DeepSeek本地化部署有风险！快来看看你中招了吗？｜ 朱雀实验室
link: https://security.tencent.com/index.php/blog/msg/219
upload_time: 2025-02-18 16:04:12
source: 腾讯安全响应中心
description:
2025年伊始，AI领域迎来一个重要变革 - DeepSeek R1开源发布，凭借着低成本、性能出众的优势，这个模型在短短几周内就获得空前关注。由于官网服务经常繁忙，大家开始选择使用Ollama+OpenWebUI、LM&#8230;


article_title: 荣誉 | 美团SRC2024年终奖励荣耀揭晓
description: 向每一位守护者致敬！
upload_time: 2025-01-17 18:01:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493717&idx=1&sn=fe94bf647a29fff908cc7ed29b70554c


article_title: 美团SRC邀您领取新年礼盒啦！
description: 获取方式见文中。
upload_time: 2025-01-17 18:01:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493717&idx=2&sn=f317d3190e4e199c933d1b29fa2f2d94


article_title: AI 帮你高效构建代码安全策略【大模型应用实践系列四】
link: https://security.tencent.com/index.php/blog/msg/213
upload_time: 2025-01-08 10:26:57
source: 腾讯安全响应中心
description:
腾讯啄木鸟代码安全团队，依托混元大模型的超强代码理解和安全分析能力，在SQL注入威胁检测场景验证中，新增识别上百个漏洞检测策略，相比传统方法人效比提升3.8倍，在Github高star项目上斩获10+0day漏洞。


article_title: 鸿蒙应用签名实操及机制探究
description: 本文对鸿蒙公开资料进行了深入分析和解读，梳理了鸿蒙单框架应用的签名机制，拆解每一步的实操过程和背后的实现原理，并对源码分析整理签名的校验机制。
upload_time: 2024-12-31 10:01:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493695&idx=1&sn=89a37bdee61841877d1acf28b8a68cbf


article_title: 白帽世界大会 | 美团SRC期待与您在澳门相见
description: HackProve World 2025，用真正的技术，验证数字世界的安全。
upload_time: 2024-12-19 17:31:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493590&idx=1&sn=0281d8d3faa07d26a91b338102cb7c61


article_title: 年末冲刺！2024漏洞马拉松『美团站』正式启动
description: 活动时间：即日起至2024年12月15日。
upload_time: 2024-12-03 18:30:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493372&idx=1&sn=f8ed6cc9dc514805d164f9d47277e8f5


article_title: 活动｜短视频激励系统专测开启！
description: 活动时间：11月25日-11月28日
upload_time: 2024-11-25 10:00:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493353&idx=1&sn=60d8aea7934fa17d1e2077e2b879d3ae


article_title: 活动｜美团SRC七周年，多重惊喜派送中！
description: 活动时间：11月11日10: 00-11月18日0: 00
upload_time: 2024-11-11 10:08:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493342&idx=1&sn=5aadfd7e004ccab04ad3286741aeca6f


article_title: 活动正式开启｜美团SRC邀您加入双11安全保卫战
description: 美团SRC活动时间：2024.09.19-09.30
upload_time: 2024-09-19 10:01:00
author: 美团技术团队
source: 微信公众号
link:
https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493302&idx=1&sn=38e8eb7b46ba68d83932055efcf06386


article_title: Nobel laureate Olga Tokarczuk apparently used AI to write her latest novel
link: https://lithub.com/nobel-laureate-olga-tokarczuk-apparently-used-ai-to-write-her-latest-novel/
upload_time: 2026-05-20 23:10:43
author: bookofjoe
source: Hacker News
description:
<p>Article URL: <a href="https://lithub.com/nobel-laureate-olga-tokarczuk-apparently-used-ai-to-write-her-latest-novel/">https://lithub.com/nobel-laureate-olga-tokarczuk-apparently-used-ai-to-write-her-latest-novel/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48209112">https://news.ycombinator.com/item?id=48209112</a></p>
<p>Points: 33</p>
<p># Comments: 41</p>


article_title: Testing distributed systems with AI agents
link: https://github.com/shenli/distributed-system-testing
upload_time: 2026-05-20 22:40:42
author: shenli3514
source: Hacker News
description:
<p>Article URL: <a href="https://github.com/shenli/distributed-system-testing">https://github.com/shenli/distributed-system-testing</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48208685">https://news.ycombinator.com/item?id=48208685</a></p>
<p>Points: 19</p>
<p># Comments: 1</p>


article_title: Victory: Tennessee man jailed 37 days for Trump meme wins $835,000 settlement
upload_time: 2026-05-20 22:30:47
author: ceejayoz
source: Hacker News
link:
https://www.fire.org/news/victory-tennessee-man-jailed-37-days-trump-meme-wins-835000-settlement-after-first-amendment

description:
<p>Article URL: <a href="https://www.fire.org/news/victory-tennessee-man-jailed-37-days-trump-meme-wins-835000-settlement-after-first-amendment">https://www.fire.org/news/victory-tennessee-man-jailed-37-days-trump-meme-wins-835000-settlement-after-first-amendment</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48208502">https://news.ycombinator.com/item?id=48208502</a></p>
<p>Points: 178</p>
<p># Comments: 74</p>


article_title: America's Greatest Strategic Blunder: The Imprisonment of Qian Xuesen
upload_time: 2026-05-20 21:19:36
author: danieltanfh95
source: Hacker News
link:
https://danieltan.weblog.lol/2026/05/americas-greatest-strategic-blunder-the-imprisonment-of-qian-xuesen

description:
<p>Article URL: <a href="https://danieltan.weblog.lol/2026/05/americas-greatest-strategic-blunder-the-imprisonment-of-qian-xuesen">https://danieltan.weblog.lol/2026/05/americas-greatest-strategic-blunder-the-imprisonment-of-qian-xuesen</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48207251">https://news.ycombinator.com/item?id=48207251</a></p>
<p>Points: 66</p>
<p># Comments: 30</p>


article_title: Goodbye Visa and Mastercard: 130M Europeans switching to sovereign payment
upload_time: 2026-05-20 21:02:30
author: healsdata
source: Hacker News
link:
https://www.lesnumeriques.com/banque-en-ligne/adieu-visa-et-mastercard-130-millions-d-europeens-basculent-vers-un-paiement-100-souverain-des-2026-n250918.html

description:
<p>Article URL: <a href="https://www.lesnumeriques.com/banque-en-ligne/adieu-visa-et-mastercard-130-millions-d-europeens-basculent-vers-un-paiement-100-souverain-des-2026-n250918.html">https://www.lesnumeriques.com/banque-en-ligne/adieu-visa-et-mastercard-130-millions-d-europeens-basculent-vers-un-paiement-100-souverain-des-2026-n250918.html</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48207004">https://news.ycombinator.com/item?id=48207004</a></p>
<p>Points: 499</p>
<p># Comments: 414</p>


article_title: Meta blocks human rights accounts from reaching audiences in Arabia and the UAE
link: https://www.alqst.org/ar/posts/1190
upload_time: 2026-05-20 20:43:41
author: giuliomagnifico
source: Hacker News
description:
<p>Article URL: <a href="https://www.alqst.org/ar/posts/1190">https://www.alqst.org/ar/posts/1190</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48206768">https://news.ycombinator.com/item?id=48206768</a></p>
<p>Points: 519</p>
<p># Comments: 202</p>


article_title: Anna's Archive Hit with $19.5M Default Judgment and Global Domain Takedown Order
upload_time: 2026-05-20 20:30:58
author: iamnothere
source: Hacker News
link:
https://torrentfreak.com/annas-archive-hit-with-19-5m-default-judgment-and-global-domain-takedown-order/

description:
<p>Article URL: <a href="https://torrentfreak.com/annas-archive-hit-with-19-5m-default-judgment-and-global-domain-takedown-order/">https://torrentfreak.com/annas-archive-hit-with-19-5m-default-judgment-and-global-domain-takedown-order/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48206640">https://news.ycombinator.com/item?id=48206640</a></p>
<p>Points: 168</p>
<p># Comments: 126</p>


article_title: Saying Goodbye to Asm.js
link: https://spidermonkey.dev/blog/2026/05/20/saying-goodbye-to-asmjs.html
upload_time: 2026-05-20 20:01:56
author: eqrion
source: Hacker News
description:
<p>Article URL: <a href="https://spidermonkey.dev/blog/2026/05/20/saying-goodbye-to-asmjs.html">https://spidermonkey.dev/blog/2026/05/20/saying-goodbye-to-asmjs.html</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48206340">https://news.ycombinator.com/item?id=48206340</a></p>
<p>Points: 138</p>
<p># Comments: 65</p>


article_title: College students drown out AI-praising commencement speeches with boos
upload_time: 2026-05-20 19:51:32
author: iancmceachern
source: Hacker News
link:
https://www.tomshardware.com/tech-industry/artificial-intelligence/college-students-drown-out-ai-praising-commencement-speeches-with-boos-deal-with-it-one-speaker-fires-back-as-students-heckle-positive-pitches-for-ais-role

description:
<p>Article URL: <a href="https://www.tomshardware.com/tech-industry/artificial-intelligence/college-students-drown-out-ai-praising-commencement-speeches-with-boos-deal-with-it-one-speaker-fires-back-as-students-heckle-positive-pitches-for-ais-role">https://www.tomshardware.com/tech-industry/artificial-intelligence/college-students-drown-out-ai-praising-commencement-speeches-with-boos-deal-with-it-one-speaker-fires-back-as-students-heckle-positive-pitches-for-ais-role</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48206241">https://news.ycombinator.com/item?id=48206241</a></p>
<p>Points: 266</p>
<p># Comments: 244</p>


article_title: Google's AI is being manipulated. The search giant is quietly fighting back
link: https://www.bbc.com/future/article/20260519-google-tackles-attempts-to-hack-its-ai-results
upload_time: 2026-05-20 18:57:09
author: tigerlily
source: Hacker News
description:
<p>Article URL: <a href="https://www.bbc.com/future/article/20260519-google-tackles-attempts-to-hack-its-ai-results">https://www.bbc.com/future/article/20260519-google-tackles-attempts-to-hack-its-ai-results</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48205782">https://news.ycombinator.com/item?id=48205782</a></p>
<p>Points: 97</p>
<p># Comments: 58</p>


article_title: Map of Metal
link: https://mapofmetal.com/
upload_time: 2026-05-20 18:47:20
author: robin_reala
source: Hacker News
description:
<p>Article URL: <a href="https://mapofmetal.com/">https://mapofmetal.com/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48205699">https://news.ycombinator.com/item?id=48205699</a></p>
<p>Points: 234</p>
<p># Comments: 76</p>


article_title: Qwen3.7-Max: The Agent Frontier
link: https://qwen.ai/blog?id=qwen3.7
upload_time: 2026-05-20 18:35:02
author: kevinsimper
source: Hacker News
description:
<p>Article URL: <a href="https://qwen.ai/blog?id=qwen3.7">https://qwen.ai/blog?id=qwen3.7</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48205626">https://news.ycombinator.com/item?id=48205626</a></p>
<p>Points: 313</p>
<p># Comments: 115</p>


article_title: Learnings from 100K lines of Rust with AI (2025)
upload_time: 2026-05-20 18:04:28
author: pramodbiligiri
source: Hacker News
link:
https://zfhuang99.github.io/rust/claude%20code/codex/contracts/spec-driven%20development/2025/12/01/rust-with-ai.html

description:
<p>Article URL: <a href="https://zfhuang99.github.io/rust/claude%20code/codex/contracts/spec-driven%20development/2025/12/01/rust-with-ai.html">https://zfhuang99.github.io/rust/claude%20code/codex/contracts/spec-driven%20development/2025/12/01/rust-with-ai.html</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48205415">https://news.ycombinator.com/item?id=48205415</a></p>
<p>Points: 106</p>
<p># Comments: 104</p>


article_title: Everything in C is undefined behavior
link: https://blog.habets.se/2026/05/Everything-in-C-is-undefined-behavior.html
upload_time: 2026-05-20 14:07:22
author: lycopodiopsida
source: Hacker News
description:
<p>Article URL: <a href="https://blog.habets.se/2026/05/Everything-in-C-is-undefined-behavior.html">https://blog.habets.se/2026/05/Everything-in-C-is-undefined-behavior.html</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48203698">https://news.ycombinator.com/item?id=48203698</a></p>
<p>Points: 374</p>
<p># Comments: 524</p>


article_title: Infomaniak transitions to a foundation model to protect user data privacy
link: https://news.infomaniak.com/en/infomaniak-foundation-sovereign-cloud/
upload_time: 2026-05-20 13:43:51
author: darktoto
source: Hacker News
description:
<p>Article URL: <a href="https://news.infomaniak.com/en/infomaniak-foundation-sovereign-cloud/">https://news.infomaniak.com/en/infomaniak-foundation-sovereign-cloud/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48203536">https://news.ycombinator.com/item?id=48203536</a></p>
<p>Points: 133</p>
<p># Comments: 35</p>


article_title: Japan is gripped by mass allergies. A 1950s project is to blame
link: https://www.bbc.com/future/article/20260515-the-1950s-blunder-which-causes-mass-hay-fever-in-japan
upload_time: 2026-05-20 09:43:06
author: ranit
source: Hacker News
description:
<p>Article URL: <a href="https://www.bbc.com/future/article/20260515-the-1950s-blunder-which-causes-mass-hay-fever-in-japan">https://www.bbc.com/future/article/20260515-the-1950s-blunder-which-causes-mass-hay-fever-in-japan</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48202047">https://news.ycombinator.com/item?id=48202047</a></p>
<p>Points: 255</p>
<p># Comments: 121</p>


article_title: FiveThirtyEight articles on the Internet Archive
link: https://fivethirtyeightindex.com/
upload_time: 2026-05-20 09:34:19
author: ChocMontePy
source: Hacker News
description:
<p>Article URL: <a href="https://fivethirtyeightindex.com/">https://fivethirtyeightindex.com/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48201973">https://news.ycombinator.com/item?id=48201973</a></p>
<p>Points: 312</p>
<p># Comments: 73</p>


article_title: Remove-AI-Watermarks – CLI and library for removing AI watermarks from images
link: https://github.com/wiltodelta/remove-ai-watermarks
upload_time: 2026-05-20 06:30:31
author: janalsncm
source: Hacker News
description:
<p>Article URL: <a href="https://github.com/wiltodelta/remove-ai-watermarks">https://github.com/wiltodelta/remove-ai-watermarks</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48200569">https://news.ycombinator.com/item?id=48200569</a></p>
<p>Points: 350</p>
<p># Comments: 217</p>


article_title: OpenAI Adopts Google's SynthID Watermark for AI Images with Verification Tool
link: https://openai.com/index/advancing-content-provenance/
upload_time: 2026-05-20 03:34:30
author: smooke
source: Hacker News
description:
<p>Article URL: <a href="https://openai.com/index/advancing-content-provenance/">https://openai.com/index/advancing-content-provenance/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48198291">https://news.ycombinator.com/item?id=48198291</a></p>
<p>Points: 317</p>
<p># Comments: 171</p>


article_title: Mistral AI acquires Emmi AI
link: https://www.emmi.ai/news/mistral-ai-acquires-emmi-ai
upload_time: 2026-05-20 03:14:12
author: doener
source: Hacker News
description:
<p>Article URL: <a href="https://www.emmi.ai/news/mistral-ai-acquires-emmi-ai">https://www.emmi.ai/news/mistral-ai-acquires-emmi-ai</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48197995">https://news.ycombinator.com/item?id=48197995</a></p>
<p>Points: 310</p>
<p># Comments: 91</p>


# baidu

article_title: AI 24小时测试银行核心系统!润和软件的“原子化”将终结金融人海...
link: https://baijiahao.baidu.com/s?id=1865224685631595250&wfr=spider&for=pc
source: 百度快照
upload_time: 2026-05-15
keyword: 银行测试
description:
当AI智能体开始7×24小时自动 测试银行 核心系统，金融行业的“人海战术”时代真要终结了吗？传统金融测试正面临前所未有的困境。随着数字金融的深入发展，银行产品迭代速度越来越快，测试任务随之激增。为了守住金融安全、客户隐私的底线，银行软件测试必须做到极致严谨。然而，传统测试模式高度依赖人力、周期长、场景覆盖有限...


article_title: App上线前的安全"体检":一文读懂移动应用渗透测试全流程-腾讯云...
link: https://cloud.tencent.com/developer/article/2668831
source: 百度快照
upload_time: 2026-05-14
keyword: 渗透测试
description:
一次全面的App 渗透测试 ,覆盖客户端和服务端的11大检测项,支持iOS和Android双平台,从反编译保护到API安全再到业务逻辑——只有这样的"全面体检",才能真正确保你的App在上线时具备足够的安全防护能力。 腾讯云App渗透测试服务由腾讯安全实验室专家执行,覆盖客户端安全、组件安全、数据存储、通信安全、API安全等11大检测项...


article_title: 手机被远程控制盗刷银行有责任吗安全吗
link: https://ailegal.baidu.com/legalarticle/qadetail?id=311b17f8516a7d250205
source: 百度快照
upload_time: 2026-05-12
keyword: 手机银行漏洞
description:
手机 被远程控制盗刷, 银行 是否承担责任需分情况讨论,具体如下: 一、银行可能承担责任的情形 技术 漏洞 或安全缺陷:若银行系统存在安全漏洞,如未及时更新加密技术、防火墙存在缺陷,或未对异常交易进行预警,导致客户资金被盗刷,银行需承担赔偿责任。法律依据:《中华人民共和国民法典》第一千一百九十八条规定,银行作为经营场所...


article_title: APP遭遇逆向破解、恶意篡改有解决办法吗?-CSDN博客
link: https://blog.csdn.net/2301_78078966/article/details/160988475
source: 百度快照
upload_time: 2026-05-11
keyword: APP逆向
description:
APP 遭遇 逆向 破解和恶意篡改(比如植入木马、插入广告、重打包)确实是移动安全领域的“重灾区”。一旦APP被破解,不仅开发者的知识产权(核心算法、商业逻辑)会裸奔,用户的隐私数据和资金安全也会面临极大威胁。 要想彻底解决这个问题,不存在“一劳永逸”的银弹,但我们可以通过一套“纵深防御体系”,把破解成本无限拉高,让...


article_title: 产品-渗透测试
link: https://www.jl.10086.cn/ecloud/product-introduction/safefusion.html
source: 百度快照
upload_time: 2026-05-10
keyword: 渗透测试
description:
渗透测试 是经客户授权模拟黑客可能使用的攻击技术和漏洞发现技术,对目标系统的安全做深入的探测,能够发现逻辑性更强,更深层次的弱点,让管理者能够直观的了解自己网络和系统的安全状态,分为标准版和专业版。敬请期待  敬请期待 产品优势  产品功能  应用场景 ...


article_title: ...一觉睡醒存款被掏空|支付宝|银行卡|手机免密支付功能_网易订阅
link: https://www.163.com/dy/article/KS69574V0553TDXU.html
source: 百度快照
upload_time: 2026-05-05
keyword: 手机银行漏洞
description:
这是本次盗刷最核心 漏洞 。 银行 、微信、支付宝等正规软件,完全不需要这个权限。 一旦开启,诈骗分子就能远程模拟点击 手机 屏幕,点开软件、跳转页面、确认支付,和本人手动操作一模一样。 第二个:短信读取、通知拦截权限 木马可以实时查看所有银行验证码、余额变动提醒,同时自动删除、屏蔽异常短信。


article_title: 渗透测试服务简介_渗透测试服务购买指南_渗透测试服务操作指南...
link: https://cloud.tencent.com/document/product/1489
source: 百度快照
upload_time: 2026-05-03
keyword: 渗透测试
description:
渗透测试 服务 渗透测试服务(Penetration Test Service, PTS),为用户提供针对于 Web 应用、移动 App、微信小程序的黑盒安全测试内容;可以覆盖安全漏洞全生命周期,包括漏洞的发现、利用、修复以及修复后的验证。使用腾讯云渗透测试服务,可以随时将安全测试这一动作加入到您的产品研发、应用上线、安全自检等计划中来。不仅...


article_title: 银行测评避坑10条!性格测试千万别踩雷💥
link: https://mbd.baidu.com/newspage/data/dtlandingsuper?nid=dt_3780407932263043684
source: 百度快照
upload_time: 2026-04-22
keyword: 银行测试
description:
"占小便宜""讲闲话""逃避问题"这类描述,毫不犹豫选"不符合",别给 银行 留下坏印象哦!🙅‍♀️9️⃣ 结果与过程都要抓!📈 选"重结果也重成长"的平衡项,银行可是希望员工能兼顾结果和过程的哦!😎🔟 不计分但致命!💥 性格测试是面试的重要参考,必须认真对待!别以为它不计分就无所谓,这可是会刷人的关键


article_title: 安卓APP逆向(五)APP逆向实战-CSDN博客
link: http://famensi.com/about_content.asp?haownn=.shtml20260418925462220
source: 百度快照
upload_time: 2026-04-18
keyword: APP逆向
description:
安卓 APP逆向 (五)APP逆向实战-CSDN博客在数字时代,学习安卓APP逆向工程就像开启一扇通往创新之门的窗户。它不仅仅是技术技能,更是培养耐心、逻辑思维和问题解决能力的绝佳方式。今天,我们以79777.app为例,来一场积极向上的实战之旅,共同探索如何通过合法、正向的方法剖析APP结构,提升自己的编程素养。首先,理解APP逆向...


article_title: 渗透测试- 百度百科
link: https://baike.baidu.com/item/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/7363639
source: 百度快照
upload_time: 2026-04-17
keyword: 渗透测试
description:
渗透测试 ，是一项在计算机系统上进行的授权模拟攻击，旨在对其安全性进行评估，是为了证明网络防御按照预期计划正常运行而提供的一种机制。人工渗透测试的目的就是为了验证系统和各种Web应用是否存在后门。随着网络犯罪防治立法趋势从事后追责转向生态防控，渗透测试等专业安全服务被纳入法律监管框架。不妨假设，你的公司定期更新安全策略和程序，时时


article_title: app逆向(1)| 为什么要进行app逆向_APP逆向-CSDN专栏
link: https://download.csdn.net/blog/column/11648365/123086013
source: 百度快照
upload_time: 2026-04-12
keyword: APP逆向
description:
1.为什么要进行 app逆向 ? 比如你看到别人写的某个程序能够做出某种漂亮的动画效果,通过反汇编、反编译和动态跟踪等方法分析出其动画效果的实现过程这种行为就是逆向工程。 2.什么是软件逆向? 软件逆向也叫逆向工程,英文名是reverse engineering,大意是根据已有的东西和结果,通过分析来推导出具体实现方法。 3.逆向工程的...


article_title: 银行金融测试与金融项目测试要点全面解析
link: http://word.baidu.com/noteview/b3ee5f1da36e58fafab069dc5022aaea998f4148.html
source: 百度快照
upload_time: 2026-04-09
keyword: 银行测试
description:
银行 金融 测试 全攻略 解锁测试新技能 银行金融测试是金融科技领域的守护神 确保系统安全又可靠 从功能到性能 从安全到合规 全方位验证 让金融系统稳如泰山 功能测试 基础中的基础 每个业务场景都要细致入微 转账 贷款 理财...一个都不能少 性能测试 模拟真实场景...


article_title: App逆向实战:从查壳到动态Hook的完整流程解析-CSDN博客
link: https://blog.csdn.net/weixin_28732953/article/details/159819675
source: 百度快照
upload_time: 2026-04-04
keyword: APP逆向
description:
1. 逆向 工程入门:从APK获取到查壳 当你拿到一个陌生的APK文件时,第一反应可能是直接扔进反编译工具。但现实往往没那么简单——就像拆快递时发现包裹被层层胶带缠绕,很多APK都会使用加壳技术保护核心代码。我去年分析某电商 App 时就踩过坑,直接用Jadx打开看到的全是混淆代码,根本找不到业务逻辑入口。


article_title: APP逆向工程实战笔记:石货APP逆向分析与Hook技术实现
link: http://word.baidu.com/noteview/e35be1150f4e767f5acfa1c7aa00b52acfc79c4b.html
source: 百度快照
upload_time: 2026-03-30
keyword: APP逆向
description:
APP逆向 工程干货分享 石货 APP逆向 全攻略 在移动互联网时代 APP逆向 工程超重要 本文带你深入了解石货APP逆向分析全过程 从环境配置到强制更新绕过 再到网络抓包 满满都是实战经验 实验环境搭建 Windows 10 雷电模拟器 root版 JD GUI IDA Pro Frida Charles等工具一应俱全 模拟器环境还做了特别配置哦 强制更新


article_title: 渗透性测试- 百度百科
link: https://baike.baidu.com/item/%E6%B8%97%E9%80%8F%E6%80%A7%E6%B5%8B%E8%AF%95/3960442
source: 百度快照
upload_time: 2026-03-27
keyword: 渗透测试
description:
标准化流程包含三个阶段：通过攻击路径构建实施漏洞挖掘，基于漏洞成因分析制定防御方案，最终通过回归测试验证修复效果并形成闭环报告。英国CBEST测试框架由英格兰银行与CREST组织联合开发，专为银行机构打造的网络攻防压力测试体系，整合威胁情报分析、实战化 渗透测试 及整改效果追踪三大核心模块。渗透测试即服务（PTaaS）通过...


article_title: 某音乐APP逆向实战(上篇):协议发现与 params 加密破解 - 知乎
link: https://zhuanlan.zhihu.com/p/2018406728010593387
source: 百度快照
upload_time: 2026-03-20
keyword: APP逆向
description:
某音乐 APP逆向 实战(上篇):协议发现与 params 加密破解 免责声明:本文所有分析内容仅用于安全研究与学习目的,不涉及任何商业利用或恶意攻击行为。文中涉及的技术方法遵循”最小必要”原则,所有密钥、接口等敏感信息均已脱敏处理。请勿将本文内容用于任何违法用途,读者需自行承担相关法律责任。


# github

article_title: semantic-compressor
link: https://github.com/sxc3030-eng/semantic-compressor
author: sxc3030-eng
upload_time: 2026-05-19 21:23:39
keyword: POC
language: Python
source: New project
description:
POC: compress a database into a human-readable recipe + minimal anchors. Regenerate with statistical fidelity. Ratio up to 20:1, 100% fidelity, deterministic Python.


article_title: Dirty-Frag-CVE-2026-43284
link: https://github.com/kuniyal08/Dirty-Frag-CVE-2026-43284
author: kuniyal08
upload_time: 2026-05-19 19:07:42
keyword: CVE-2026
source: New project
description:
A report on Dirty Frag, which is a Linux Local Privilege Escalation (LPE) vulnerability chain that allows an unprivileged user to gain root access


article_title: phantomscan
link: https://github.com/Asadmiani/phantomscan
author: Asadmiani
upload_time: 2026-05-19 18:54:55
keyword: RCE
language: Python
source: New project
description:
AI-powered autonomous web security scanner with intelligent risk modeling, false positive filtering, and CVSS v3 scoring. Detects SQLi, XSS, IDOR, SSRF, RCE, LFI, and API vulnerabilities. Generates HTML/PDF reports with multi-threaded scanning.


article_title: cve-2026-31431-mitigation
link: https://github.com/Yakovyakov/cve-2026-31431-mitigation
author: Yakovyakov
upload_time: 2026-05-19 03:32:12
keyword: CVE-2026
language: Shell
source: New project
description:
    Detection and mitigation tooling for CVE-2026-31431 (Copy Fail) on Linux kernels. Includes Phalanx-CCS and Silent4Labs scripts plus an Ansible playbook to apply temporary mitigation (block algif_aead module or boot parameter) across servers.


article_title: Explainable-Phishing-Website-Detection-System
link: https://github.com/amam123song/Explainable-Phishing-Website-Detection-System
author: amam123song
upload_time: 2026-05-19 00:01:45
keyword: 钓鱼
language: Python
source: New project
description:
本项目是基于大语言模型的可解释钓鱼网站检测系统，基于 URL、正文与外链等结构化特征上进行分类与解释生成，通过功能解耦双LoRA与专家-学生知识蒸馏完成模型压缩。仓库提供从模型训练训练、统一推理评测，到黑盒/白盒...


article_title: Malicious-URL-Detection-Based-on-Component-Segmentation-and-Multi-Source-Feature-Fusion
author: Yllxx03
upload_time: 2026-05-18 22:20:18
keyword: 钓鱼
language: Python
source: New project
link:
https://github.com/Yllxx03/Malicious-URL-Detection-Based-on-Component-Segmentation-and-Multi-Source-Feature-Fusion

description:
本项目是面向恶意 URL 检测的研究型系统，围绕组件分割与多源特征融合方法开展二分类识别研究，基于 PyTorch 构建模型训练与评测流程，通过对 URL 的域名、路径、查询参数等组件进行结构化拆分，并融合字符级序列特征、域...


article_title: CVE-2026-0596-Reproduction
link: https://github.com/SparshBiswas-AI/CVE-2026-0596-Reproduction
author: SparshBiswas-AI
upload_time: 2026-05-18 18:53:46
keyword: CVE-2026
language: Python
source: New project
description:
Research environment and validation scripts for evaluating deserialization behaviors in MLflow and MLServer.


article_title: LLM-MultiAgent-StackOverflow-Detector
link: https://github.com/uguj/LLM-MultiAgent-StackOverflow-Detector
author: uguj
upload_time: 2026-05-18 18:08:59
keyword: 漏洞检测
language: Python
source: New project
description:
基于ReAct范式的多智能体栈缓冲区溢出检测框架，用于C/C++代码漏洞分析。  - Finder Agent：基于libclang的AST解析，识别危险函数调用 - Tracer Agent：语法树回溯，分析参数可控性 - Hypothesis Agent：调用Qwen2.5-Coder大语言模型生成智能漏...


article_title: RPC-YOLO
link: https://github.com/pioneer118/RPC-YOLO
author: pioneer118
upload_time: 2026-05-17 14:04:37
keyword: 反序列化
source: New project
description:
本项目设计了一套基于 C++ 分布式 RPC 框架的 YOLO 目标检测系统，支持多客户端上传检测图片，服务端完成实时目标检测并返回检测结果。项目以 Muduo 网络库的 Reactor 模型为基础搭建高并发 RPC 通信框架，通过自定义消息协议解...


article_title: Open-Audit
link: https://github.com/elegent-administrator/Open-Audit
author: elegent-administrator
upload_time: 2026-05-16 11:36:44
keyword: 漏洞检测
language: Python
source: New project
description:
Open Audit是面向企业研发、开发者群体的AI智能明文代码安全审计工具，基于Python语言开发、FastCGI架构搭建，融合Semgrep工具链与自主研发的AI Agent，精准匹配数字时代代码安全审计的市场核心需求。工具直击行业传统审计工具误...


article_title: HottaStudioScript
link: https://github.com/XFWL/HottaStudioScript
author: XFWL
upload_time: 2026-05-14 14:55:00
keyword: 钓鱼
language: Python
source: New project
description:
这是一个由 Trae CN （AI）生成的带GUI界面的异环自动化工具，包含两个主要模块： - 店长特供：自动执行店长特供任务，包括识别图像并执行F键、点击等操作 - 钓鱼：自动钓鱼功能，使用HSV颜色匹配识别鱼和鱼竿，实现自动下...


article_title: Copy-Fail-CVE-2026-31431-Lab
link: https://github.com/kuniyal08/Copy-Fail-CVE-2026-31431-Lab
author: kuniyal08
upload_time: 2026-05-13 19:36:00
keyword: CVE-2026
language: YARA
source: New project
description:
Reproduced the fileless LPE CVE‑2026‑31431 (“Copy Fail”) on Kali Linux, then built auditd, Sigma & YARA detections to catch this stealthy kernel exploit that leaves no disk footprint.


article_title: web-login-js-burp-audit
link: https://github.com/tangkaixing/web-login-js-burp-audit
author: tangkaixing
upload_time: 2026-05-11 17:55:32
keyword: 未授权
source: New project
description:
当用户提供 Web URL、登录页、H5/前端静态包、本地前端目录或备份包地址，并要求使用 Burp 访问分析、落地前端 JS、审计敏感信息/接口、做最小化验证并在当前工作目录输出 Markdown 报告时使用。重点适用于登录框渗透测试、前...


article_title: L0ck
link: https://github.com/lopleec/L0ck
author: lopleec
upload_time: 2026-05-08 12:57:31
keyword: 未授权
language: Swift
source: New project
description:
A security-first macOS encryption app that locks files into device-bound .l0ck containers using Keychain-backed keys, protected preview flows, and system-level safeguards against unauthorized deletion or movement.一款以安全为核心的 macOS 加密应用，使用钥匙串支持的密钥将文...


article_title: GenDataCode
link: https://github.com/Cathyqiii/GenDataCode
author: Cathyqiii
upload_time: 2026-05-08 11:32:50
keyword: 反序列化
language: Python
source: New project
description:
GenDataCode是面向多元时间序列数据生成的开源工程化代码库，聚焦小样本、稀缺工况下的时序数据增强需求，内置实现了TimeGAN、TimeVAE等经典时序生成模型，并创新融合扩散模型与Mamba架构提出CTD-Mamba-Diff高效生成方法；库中集成...


article_title: campus-api-docs
link: https://github.com/yexinyii/campus-api-docs
author: yexinyii
upload_time: 2026-05-05 17:18:33
keyword: 未授权
language: Python
source: New project
description:
分为两大模块，api 是高校脱敏接口文档集合，lab 是基于这些接口复刻的校园系统安全靶场，内置未授权访问、水平 / 垂直越权、参数篡改等典型漏洞，支持 Docker 一键部署，是接口渗透测试与安全实训的实战平台。


article_title: PlausiDen-Forge
link: https://github.com/thepictishbeast/PlausiDen-Forge
author: thepictishbeast
upload_time: 2026-05-04 14:37:46
keyword: POC
language: Rust
source: New project
description:
Unified frontend builder — Loom design tokens + CMS content + Crawler audits + strict-mode build pipeline. SkillShots used as the PoC surface.


article_title: AgentMemshell
link: https://github.com/transvestic-velodrome9214/AgentMemshell
author: transvestic-velodrome9214
upload_time: 2026-05-02 08:27:33
keyword: webshell
source: New project
description:
Inject memory shells into Java Tomcat processes across all JDK versions for command execution in environments without output.


article_title: spider
link: https://github.com/yuweiliang088/spider
author: yuweiliang088
upload_time: 2026-04-29 23:15:21
keyword: 反序列化
source: New project
description:
一个基于强化学习与 LLM 的反反爬决策 Agent，专门解决传统硬编码策略在遇到 Cloudflare、Akamai 等复杂防护栈时完全失效的问题。该 Agent 将“成功获取目标数据”定义为最终目标，把代理选择、请求头组合、TLS 指纹、JavaScript 渲...


article_title: web-code
link: https://github.com/ljrrrr0108/web-code
author: ljrrrr0108
upload_time: 2026-04-29 13:44:27
keyword: 反序列化
language: JavaScript
source: New project
description:
我构建了一个基于多 Agent 协作的小米智能家居意图理解与自动化系统。核心痛点：现有智能家居控制依赖用户逐设备精确操作，缺乏对模糊意图的深层理解能力，导致"我要睡了"这类自然指令无法被正确拆解执行。  系统架构包...


article_title: movement-segmentation-poc
link: https://github.com/Constricting-seedsman397/movement-segmentation-poc
author: Constricting-seedsman397
upload_time: 2026-04-18 07:24:46
keyword: POC
language: Jupyter Notebook
source: New project
description:
Integrate dense instance segmentation masks into movement for better 2D tracking and occlusion handling


article_title: CVE-2026-XNU-AIO-KEVENT-UAF
link: https://github.com/Sonisi5085/CVE-2026-XNU-AIO-KEVENT-UAF
author: Sonisi5085
upload_time: 2026-04-14 18:07:25
keyword: CVE-2026
language: Objective-C
source: New project
description:
Demonstrate XNU AIO kevent use-after-free, kernel panic, and double-free in iOS sandbox for security research


article_title: R2SAE
link: https://github.com/oscar-mine/R2SAE
author: oscar-mine
upload_time: 2026-04-12 23:12:25
keyword: RCE
language: JavaScript
source: New project
description:
Firefox extension for detecting and exploiting CVE-2025-55182 — Prototype Pollution RCE in Next.js React Server Actions


article_title: Intelligent-Android-Penetration-System
link: https://github.com/vegetableou/Intelligent-Android-Penetration-System
author: vegetableou
upload_time: 2026-04-10 11:57:10
keyword: 内网渗透
language: Smali
source: New project
description:
本项目旨在研发一款高度自动化的智能渗透测试系统，其核心目标是实现对安卓设备的无人值守安全评估。与传统的单一漏洞扫描工具不同，本系统是一个集成了情报收集、智能决策与多向量攻击能力的统一调度平台。它能够...


article_title: CVE-2026-2991
link: https://github.com/Jumpthereness578/CVE-2026-2991
author: Jumpthereness578
upload_time: 2026-04-04 04:26:43
keyword: CVE-2026
language: PHP
source: New project
description:
Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint


article_title: CVE-2026-31802
link: https://github.com/Recorded-texteditor120/CVE-2026-31802
author: Recorded-texteditor120
upload_time: 2026-03-29 04:49:46
keyword: CVE-2026
language: JavaScript
source: New project
description:
Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.


article_title: Shells-X
link: https://github.com/vektor-x-com/Shells-X
author: vektor-x-com
upload_time: 2026-03-27 23:51:29
keyword: webshell
language: JavaScript
source: New project
description:
Modular single-file web shell framework with pure-PHP recon, SOCKS5 pivoting, and per-build fingerprinting


article_title: RegPwn
link: https://github.com/tracyliving606/RegPwn
author: tracyliving606
upload_time: 2026-03-26 12:38:27
keyword: CVE-2026
language: C#
source: New project
description:
Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions


article_title: Godzilla_bypass_webshell
link: https://github.com/erikturbolt/Godzilla_bypass_webshell
author: erikturbolt
upload_time: 2026-03-15 17:44:56
keyword: webshell
language: Python
source: New project
description:
Bypass advanced webshell detection using AES encryption, data-flow breaks, and dynamic callbacks designed for stealthy PHP webshell operation.


article_title: CVE-2026-2472-Vertex-AI-SDK-Google-Cloud
link: https://github.com/megafart1/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud
author: megafart1
upload_time: 2026-03-10 22:40:04
keyword: CVE-2026
language: Python
source: New project
description:
Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.


article_title: CVE-2026-25643
link: https://github.com/DyniePro/CVE-2026-25643
author: DyniePro
upload_time: 2026-03-08 04:23:08
keyword: RCE
language: Python
source: New project
description:
Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.


article_title: CVE-2026-2441-PoC
link: https://github.com/fartlover37/CVE-2026-2441-PoC
author: fartlover37
upload_time: 2026-03-03 22:19:18
keyword: CVE-2026
source: New project
description:
Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.


article_title: RedTeam-Agent
link: https://github.com/ktol1/RedTeam-Agent
author: ktol1
upload_time: 2026-02-28 20:16:58
keyword: 内网渗透
language: C
source: New project
description:
 RedTeam-Agent: AI-Powered Autonomous Red Team Framework via Model Context Protocol. AI红队与内网渗透自动化框架，支持 gogo, fscan, httpx, nuclei, impacket, playwright 等 15+ 渗透工具，让 LLM 直接化身安全审计黑客。


article_title: CVE-2026-20841-PoC
link: https://github.com/404godd/CVE-2026-20841-PoC
author: 404godd
upload_time: 2026-02-26 13:21:28
keyword: CVE-2026
source: New project
description:
🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.


article_title: Top-Conference-Best-Papers
link: https://github.com/jokierpro/Top-Conference-Best-Papers
author: jokierpro
upload_time: 2026-02-21 16:36:27
keyword: RCE
source: New project
description:
🏆 Discover top ML/NLP research by exploring Best Paper winners from major venues (2022-2026) to enhance your understanding of high-impact work.


article_title: sec-links
link: https://github.com/EdinLyle/sec-links
author: EdinLyle
upload_time: 2026-02-20 15:17:56
keyword: 内网渗透
source: New project
description:
整合日常学习、工作及网络所得笔记、安全大佬分析报告、面试题与技巧文档,安全大厂与安全标准，标准指南，按渗透、安服、运营、代码审计、内网、移动、应急、工控、AI/LLM安全、数据、业务、情报、分析、黑灰产对抗、S...


article_title: clipflow
link: https://github.com/linszjava/clipflow
author: linszjava
upload_time: 2026-02-19 03:30:55
keyword: 反序列化
language: HTML
source: New project
description:
ClipFlow是一款面向高频信息收集与复用场景的桌面效率工具。它把“剪贴板历史 + 结构化片段管理 + 使用数据分析”整合到同一套工作流中：你可以快速保存文本与图片内容，按页面分类沉淀常用数据，并像表格一样进行行列编...


article_title: violation-outreach-wallpaper
link: https://github.com/YaoSiQian/violation-outreach-wallpaper
author: YaoSiQian
upload_time: 2026-02-15 11:15:52
keyword: 内网渗透
language: HTML
source: New project
description:
【非官方】通俗来讲，违规外联指的是内部网络计算机私自接入互联网或其他公共网络。更具象一些来理解，内部网络计算机连接互联网或内部网络中使用的移动存储载体在非内部网络计算机上使用等行为。违规外联相当于在...


article_title: masscan-windwos-1.3.2
link: https://github.com/hsltz/masscan-windwos-1.3.2
author: hsltz
upload_time: 2026-02-14 15:28:32
keyword: 内网渗透
source: New project
description:
masscan 是一款高速的异步端口扫描工具，采用独特的传输方式，可在短时间内完成大规模网络扫描。它专为扫描整个互联网或大型网段设计，扫描速度远超传统工具如 nmap，常被用于网络安全评估与渗透测试。


