[每日信息流] 2025-12-29

# 每日安全资讯（2025-12-29）

- Private Feed for M09Ic
  - [ ] [safedv starred badsectorlabs/ludus](https://github.com/badsectorlabs/ludus)
  - [ ] [xnl-h4ck3r released v7.4 at xnl-h4ck3r/waymore](https://github.com/xnl-h4ck3r/waymore/releases/tag/v7.4)
  - [ ] [bolucat released 202512281936 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202512281936)
  - [ ] [mgeeky starred vllm-project/vllm](https://github.com/vllm-project/vllm)
  - [ ] [joaoviictorti starred BloopAI/vibe-kanban](https://github.com/BloopAI/vibe-kanban)
  - [ ] [xpn starred badsectorlabs/ludus](https://github.com/badsectorlabs/ludus)
  - [ ] [FunnyWolf starred hunters-ai/ocsf-mapping-public](https://github.com/hunters-ai/ocsf-mapping-public)
  - [ ] [Mr-xn starred ComposioHQ/awesome-claude-skills](https://github.com/ComposioHQ/awesome-claude-skills)
  - [ ] [ourren starred lintsinghua/DeepAudit](https://github.com/lintsinghua/DeepAudit)
  - [ ] [CHYbeta starred PurpleAILAB/Decepticon](https://github.com/PurpleAILAB/Decepticon)
  - [ ] [Fplyth0ner-Combie starred ceso/ceso.github.io](https://github.com/ceso/ceso.github.io)
  - [ ] [gh0stkey starred joe-desimone/mongobleed](https://github.com/joe-desimone/mongobleed)
  - [ ] [Rvn0xsy starred paperless-ngx/paperless-ngx](https://github.com/paperless-ngx/paperless-ngx)
- SecWiki News
  - [ ] [SecWiki News 2025-12-28 Review](http://www.sec-wiki.com/?2025-12-28)
- CXSECURITY Database RSS Feed - CXSecurity.com
  - [ ] [Wordpress (Easy Hide Login) plugin Stored XSS](https://cxsecurity.com/issue/WLB-2025120032)
  - [ ] [Birth Chart Compatibility WordPress Plugin 2.0 Full Path Disclosure](https://cxsecurity.com/issue/WLB-2025120031)
- Recent Commits to cve:main
  - [ ] [Update Sun Dec 28 11:38:43 UTC 2025](https://github.com/trickest/cve/commit/d4236428807475addb2c9fda86d87e3240f6f732)
- 奇客Solidot–传递最新科技情报
  - [ ] [逾四成 GNOME Core 应用用 C 语言开发](https://www.solidot.org/story?sid=83164)
  - [ ] [YouTube 向新用户推荐的信息流逾五分之一含有 AI 垃圾](https://www.solidot.org/story?sid=83163)
  - [ ] [多地提出公务员录用将网络言行纳入考察](https://www.solidot.org/story?sid=83162)
- 黑鸟
  - [ ] [隐藏 API 端点发现指南](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451184491&idx=1&sn=04f45640209cf32e9cc1d0a7ce817850)
- 安全分析与研究
  - [ ] [俄罗斯Gamaredon APT组织针对乌克兰的网络攻击活动](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247495079&idx=1&sn=2fa5c2fe80bdffc497265f13e62957c8)
- 吾爱破解论坛
  - [ ] [FlowMouse - 心流鼠标手势 v1.1 Chrome 应用商店已更新！
👉 安装链接：https://chrome.google.com/webstore/detail/fnldhkfidchnjiokpoemdhoejmaojkgp

✅本次更新重点解决 Mac 菜单冲突问题，并带来多项实用升级，更多详细内容，请查看版本发布说明。

✨ 欢迎下载体验！如果觉得好用，不妨给我们一个五星好评支持。
📢 如有任何建议或反馈，也欢迎随时留言告诉我们。

⚠️ 注意事项：
由于新增图片保存功能，插件需申请下载权限，因此更新后可能会被停用。请在更新后手动重新启用插件，即可正常使用。](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143251&idx=1&sn=81472c21e1be29646d2b1fdf900bdcaf)
- 长亭安全应急响应中心
  - [ ] [【已复现】MongoDB 未授权内存泄露漏洞（CVE-2025-14847）](https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493033&idx=1&sn=153b8c986cc2a5c1992934f0b292203e)
- 天黑说嘿话
  - [ ] [【BurpSuite插件】Xia Sql二开插件，扫描效率大幅提升，简直是安全仔的梦中神器！](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485904&idx=1&sn=4ff33be02f89b3a7055d6e7e3c9568bb)
- 二道情报贩子
  - [ ] [育碧遭遇大规模数据泄露，近三十年游戏源代码或已失窃](https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489901&idx=1&sn=f48372aa3982bda8ebf44abc309d982a)
- 威努特安全网络
  - [ ] [破解企业流量难题！威努特应用交付系统智能护航](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651139084&idx=1&sn=7db72be2728b284520fb853ba7bf0f87)
- 极客公园
  - [ ] [「DD 旗舰」，零跑想要「领跑」下个 10 年的野心](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653095797&idx=1&sn=749cba98cdd44894b0ad0bf7c764160e)
  - [ ] [B 站公布「年度弹幕」；官方发「AI 替代」劳动仲裁案例；传初代彩壳 AirPods 现身 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653095767&idx=1&sn=373ef4bb65eda4ad3bc226f75099ef40)
- 电子物证
  - [ ] [【图片突然损坏怎么办？】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048870&idx=1&sn=11f824a93257e0766135adbddb71dc3b)
  - [ ] [技术分享：SQL Server数据库取证技术指南](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048870&idx=2&sn=36d2457c4315cf701189f3bc0a6d7cae)
- 表图
  - [ ] [从豆包手机风波看通用 AI Agent 的困局与出路](https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247484947&idx=1&sn=3f34cf102ddf8d66523e9db6e96ee14b)
- IT Service Management News
  - [ ] [Bloccare l'IA dai browser](http://blog.cesaregallotti.it/2025/12/bloccare-lia-dai-browser.html)
- 希潭实验室
  - [ ] [第145篇：美国斯诺登棱镜门事件的技术细节揭秘：通过互联网巨头窃听全球用户数据](https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247488058&idx=1&sn=38d33e418ac06feb154e8238f1c411fd)
- Over Security - Cybersecurity news aggregator
  - [ ] [Exploited MongoBleed flaw leaks MongoDB secrets, 87K servers exposed](https://www.bleepingcomputer.com/news/security/exploited-mongobleed-flaw-leaks-mongodb-secrets-87k-servers-exposed/)
  - [ ] [Hacker claims to leak WIRED database with 2.3 million records](https://www.bleepingcomputer.com/news/security/hacker-claims-to-leak-wired-database-with-23-million-records/)
  - [ ] [Massive Rainbow Six Siege breach gives players billions of credits](https://www.bleepingcomputer.com/news/security/massive-rainbow-six-siege-breach-gives-players-billions-of-credits/)
  - [ ] [WIRED - 2,364,431 breached accounts](https://haveibeenpwned.com/Breach/WIRED)
- 迪哥讲事
  - [ ] [账户接管新思路](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498858&idx=1&sn=abe538cc9d3af390726fd458300530a1)
- SANS Internet Storm Center, InfoCON: green
  - [ ] [ISC Stormcast For Sunday, December 28th, 2025 https://isc.sans.edu/podcastdetail/9750, (Sun, Dec 28th)](https://isc.sans.edu/diary/rss/32590)
- 安全圈
  - [ ] [【安全圈】70余万条学生信息被多次贩卖！副校长买，平台工程师偷，中间还倒了几次手](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073438&idx=1&sn=8b040749b9d530d6bfdbc0b0ac1f1afb)
  - [ ] [【安全圈】暗网出现1.97TB罗技数据](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073438&idx=2&sn=463ad19dfde9b34dc3e11519b3df47f5)
  - [ ] [【安全圈】Coinbase：涉 5 月客户数据泄露案的前客服人员在印度被捕](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073438&idx=3&sn=b7dfb470f9169b82520842331f12fa90)
- Troy Hunt's Blog
  - [ ] [Weekly Update 484](https://www.troyhunt.com/weekly-update-484/)
- Dark Space Blogspot
  - [ ] [Leggende Metropolitane Cittadine e Su Internet: Dagli Anni 80 In Poi](http://darkwhite666.blogspot.com/2025/12/leggende-metropolitane-cittadine-e-su.html)
- The Register - Security
  - [ ] [Death, torture, and amputation: How cybercrime shook the world in 2025](https://go.theregister.com/feed/www.theregister.com/2025/12/28/death_torture_and_amputation_how/)
- Security Affairs
  - [ ] [Condé Nast faces major data breach: 2.3M WIRED records leaked, 40M more at risk](https://securityaffairs.com/186224/data-breach/conde-nast-faces-major-data-breach-2-3m-wired-records-leaked-40m-more-at-risk.html)
  - [ ] [Stolen LastPass backups enable crypto theft through 2025](https://securityaffairs.com/186191/digital-id/stolen-lastpass-backups-enable-crypto-theft-through-2025.html)
  - [ ] [SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 77](https://securityaffairs.com/186206/malware/security-affairs-malware-newsletter-round-76-2.html)
  - [ ] [Security Affairs newsletter Round 556 by Pierluigi Paganini – INTERNATIONAL EDITION](https://securityaffairs.com/186200/breaking-news/security-affairs-newsletter-round-556-by-pierluigi-paganini-international-edition.html)
- Full Disclosure
  - [ ] [[KIS-2025-14] PKP-WAL <= 3.5.0-1 Login Cross-Site Request	Forgery Vulnerability](https://seclists.org/fulldisclosure/2025/Dec/36)
  - [ ] [[KIS-2025-13] PKP-WAL <= 3.5.0-3 (X-Forwarded-Host) LESS Code Injection Vulnerability](https://seclists.org/fulldisclosure/2025/Dec/35)
  - [ ] [[KIS-2025-12] PKP-WAL <= 3.5.0-1 (baseColour) LESS Code	Injection Vulnerability](https://seclists.org/fulldisclosure/2025/Dec/34)
  - [ ] [[KIS-2025-11] Open Journal Systems <= 3.5.0-1 (NativeXmlIssueGalleyFilter.php) Path Traversal Vulnerability](https://seclists.org/fulldisclosure/2025/Dec/33)
  - [ ] [[KIS-2025-10] PKP-WAL <= 3.5.0-1 (Institution Collector) SQL Injection Vulnerability](https://seclists.org/fulldisclosure/2025/Dec/32)
  - [ ] [Backdoor.Win32.Poison.jh / Insecure Permissions](https://seclists.org/fulldisclosure/2025/Dec/31)
  - [ ] [Backdoor.Win32.Netbus.170 / Insecure Credential Storage /	MVID-2025-0703](https://seclists.org/fulldisclosure/2025/Dec/30)
- TorrentFreak
  - [ ] [Cloudflare Reports Surge in Streaming Piracy Takedowns, Removes 20k+ Storage Accounts](https://torrentfreak.com/cloudflare-reports-surge-in-streaming-piracy-takedowns-removes-20k-storage-accounts/)
- Deeplinks
  - [ ] [EFFector Audio Speaks Up for Our Rights: 2025 Year in Review](https://www.eff.org/deeplinks/2025/12/effector-audio-speaks-our-rights-2025-year-review)
  - [ ] [Procurement Power—When Cities Realized They Can Just Say No: 2025 in Review](https://www.eff.org/deeplinks/2025/12/procurement-power-when-cities-realized-they-can-just-say-no-2025-review)
  - [ ] [Defending Encryption in the U.S. and Abroad: 2025 in Review](https://www.eff.org/deeplinks/2025/12/defending-encryption-us-and-abroad-2025-review)
- Nicksxs's Blog
  - [ ] [重新复习理解下java的类加载器](https://nicksxs.me/2025/12/28/%E9%87%8D%E6%96%B0%E5%A4%8D%E4%B9%A0%E7%90%86%E8%A7%A3%E4%B8%8Bjava%E7%9A%84%E7%B1%BB%E5%8A%A0%E8%BD%BD%E5%99%A8/)
- 卢昌海个人主页
  - [ ] [Latest post on Threads：2025.12.27](https://www.changhai.org/articles/miscellaneous/eblog/202509.php#latest)
- 唐巧的博客
  - [ ] [读《疯狂的尿酸》](https://blog.devtang.com/2025/12/28/crazy-acid-book-summary/)
- Jimmy Song – Jimmy Song's Blog
  - [ ] [MCP Memory Service - Automatic, persistent project context memory and retrieval for Claude, VS Code, …](https://jimmysong.io/ai/mcp-memory-service/)
- 维基萌
  - [ ] [补充一个早上的风景](https://www.wikimoe.com/post/t7ys7s2u)
- 老范讲故事的博客站
  - [ ] [留学生实录与国内岁月静好：当美国中产阶级跌落“斩杀线”，真正的系统性淘汰机制到底有多残酷？｜美债危机、关税壁垒、去风险、滞胀风险](https://lukefan.com/2025/12/28/kill-line-buzzword-chinas-view-on-us-economic-risks/)
- Yiran's Blog
  - [ ] [Weekly Issue-LLM可以提高我的学习速度么？](https://zdyxry.github.io/2025/12/28/Weekly-Issue-LLM%E5%8F%AF%E4%BB%A5%E6%8F%90%E9%AB%98%E6%88%91%E7%9A%84%E5%AD%A6%E4%B9%A0%E9%80%9F%E5%BA%A6%E4%B9%88/)
- SEISAMUSE
  - [ ] [文献阅读(47)](http://www.seis-jun.xyz/paper-reading-47)
- 静かな森
  - [ ] [我是如何使用 AI 辅助创作的](https://innei.in/posts/tech/how-to-use-ai-for-assisted-creation)
- XINDOO
  - [ ] [从计算机科学的视角来看拖延症](https://zxs.io/article/2149)
- 渚碧
  - [ ] [Hugo博客更新笔记：Shortcode、RSS与FOUC](https://jubeny.com/2025/12/hugo-blog-update-note-shortcode-rss-fouc/)
  - [ ] [戏习檄](https://jubeny.com/2025/12/ridiculing-xi-manifesto/)
  - [ ] [海瑞上贺表](https://jubeny.com/2025/12/hairui-presented-felicitation-memorial/)
- JustZht's EchoChamber
  - [ ] [2025.12.28](https://www.justzht.com/2025-12-28/)
- whyes 的博客
  - [ ] [2025 年肝细胞癌临床研究进展](http://whyes.org/2025/2025-hcc-advances)
- luozhiyun`s Blog
  - [ ] [从 MCP 到 Agent Skills](https://www.luozhiyun.com/archives/893)
- 木鸟杂记
  - [ ] [2025 年终总结——向内生长](https://www.qtmuniao.com/2025/12/28/2025-summary/)
- ypingcn
  - [ ] [奇点前尘：回望人工智能2025](https://blog.ypingcn.com/2025/12/28/the-eve-of-the-singularity/?utm_medium=rss)
- Elmagnifico's Blog
  - [ ] [小米珠海官方赛道日与Ultra年度之夜](https://elmagnifico.tech/2025/12/29/Zic-Xiaomi/)
- 游研社
  - [ ] [《皇牌空战》为什么还加不了中国战机？](https://www.yystv.cn/p/13501)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[每日信息流] 2025-12-29 #54

每日安全资讯（2025-12-29）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2025-12-29 #54

Description

每日安全资讯（2025-12-29）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions