硬核代码审计 | CVE-2024-57521：RuoYi-Vue 黑名单绕过与认证后 SQL 注入深度剖析
摘要本文详细分析了 RuoYi-Vue 权限管理系统（ruoyi-generator模块）中存在的一处认证后 SQL 注入漏洞（CVE-2024-57521）。该漏洞源于黑名单过滤机制与前置空格清理逻辑的冲突，攻击者可通过 %0b（垂直制表符）完美绕过 WAF 过滤，结合 MyBatis 的
把散落的漏洞情报，收成一条时间线
今天
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The activity, which brings together commodity offensive tools like Cobalt Strike with an AI orchestration layer powered by Anthropic's Claude Code, has been attributed
把 AI 接进企业微信：CowAgent 部署踩坑记"
一、缘起给企业内部做系统集成这几年，被问得最多的问题之一是："能不能把 AI 接到我们企业微信里，让员工直接问？"答案是可以。而且不需要自研--开源方案已经够用。这篇记录我用 CowAgent 在一台普通 Windows 机器上把这件事跑通的完整过程，重点写踩过的坑
昨天
新型Unicode同形攻击绕过Chromium检测，高仿真钓鱼域名难辨真伪
安全研究人员发现一类新型域名仿冒手法，可构造与可信品牌高度相似的假域名，在Chromium内核浏览器中直接显示为可读Unicode字符。这类
USN-8912-1: Perl DBI module vulnerabilities
Harsh Raj Singhania discovered that the Perl DBI module did not correctly validate certain attributes. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-78030) Harsh Raj Singhania discovered that the Perl DBI module did not correctly handle certain string operations. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-88816)
DSA-6553-1 chromium - security update
https://security-tracker.debian.org/tracker/DSA-6553-1
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two way C2 communication with the attacker's infrastructure," iVerify said in a new report published Thursday. The name
10月10日周六
DSA-6552-1 vips - security update
https://security-tracker.debian.org/tracker/DSA-6552-1
The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't
In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party products now embed AI. About 282 of them sit behind single sign-on. The other thousand are invisible to identity infrastructure by default, not because anyone hid them, but because an identity stack can only govern what authenticates through it, and most agents never do. That gap is the clearest
Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws
Anthropic on Friday said it's cutting off live internet access for all its internal evaluations until further notice following the discovery of new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior and targeted real websites. The AI company said it identified four broad categories of unintended model actions during evaluations and internal use of Claude
Why TLP should not replace your internal information classification, (Sat, Oct 10th)
The Traffic Light Protocol (TLP)[1], which is now in its second incarnation, is a wonderful standard that enables one to easily communicate whether information may be shared further (and if so, how far).
10月9日周五
FBI Arrests Executive at Ransomware Negotiation Firm
a-little-sunshinebreadcrumbsmalwareneer-do-well-news
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested an executive at a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity. The New York Times reported today that the FBI has arrested a Canadian man in Pennsylvania on suspicion of assisting ShinyHunters. The Times story did not identify the man, nor did a statement on Twitter/X about the arrest from FBI Director Kash Patel. One source close to the investigation told KrebsOnSecurity the Canadian person arrested this week was visiting Pennsylvania for a cyber insurance conference, and that the suspect’s company specialized in handling ransomware negotiations with cybercrime groups. Another shared that control over the ShinyHunters investigation has been centralized at an FBI field office in Texas. An online search reveals the Cyber Risk Summit was held at the Loews Philadelphia Hotel between Oct. 5 and Oct. 7. The conference had several sponsors, but according to the summit’s website its biggest sponsor was a Canadian security company called Cypfer. According to LinkedIn, one of Cypfer’s “ex-founders” was Edward Dubrovsky, who is now associated with another Canadian security firm and sponsor called CyberSteward. In a post to LinkedIn approximately one month ago, Dubrovsky said he had plans to attend the Cyber Risk Summit
DSA-6550-1 ghostscript - security update
https://security-tracker.debian.org/tracker/DSA-6550-1
DSA-6551-1 tor - security update
https://security-tracker.debian.org/tracker/DSA-6551-1
CVE-2026-68875 Windows NTFS Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.