推特安全流

针对 Google 硬件的 QSEE 漏洞利用研究，技术含量高。

Exploiting QSEE Vulnerabilities in Google's Wifi Pro (slide deck) https://t.co/6MoUwL27IJ Credits @tieknimmers and @pulsoid #infosec https://t.co/f9hm9mZH2a

新功能带来新的钓鱼攻击面，值得关注。

🎣Detect Brave Alias Abused for Phishing Today Brave announced Brave browser, 1.94, introduces a feature called ‘Email Aliases’ that allows users to generate disposable email addresses when signing up to a new service. Using an alias address keeps the user's real email address hidden from the website while still forwarding messages from the service. This is a good privacy initiative to protect user email from data breaches but coming from a threat actor perspective this is also a new venue for abusing for potential phishing since it is disposable and from trusted browser organization. https://t.co/logUt7MaCk As such I have crafted out Defender XDR monitoring to detect potential abuse of Brave email alias by threat actors for sharing with fellow defenders.🫡 https://t.co/Ttjrj9BVtq #threathunting

AI 辅助漏洞挖掘的又一实例，展示 AI 在安全领域的潜力。

RT @__suto: Got my first 0click. Reported! Just ME and GLM-5.3 on my mac ultras 😏 https://t.co/Q7vNL6TuzM

对 Apple 芯片的深入逆向研究，对硬件安全感兴趣者值得关注。

RT @originalmaderix: Part 4 of my ANE investigation is out! (substack soon) https://t.co/V9c8yFSOEk This is probably the last version in this hardware series, a lot has been investigated by the community and I'm glad this ignored piece of sillicon finally got the attention it needed. I'm also glad to have played a part in this🙂 Hope Apple can soon support the low level programmability and publish specs of this chip instead of the community having to pull out from raw bytes, guesswork and brittle private APIs. I see some positive signs with M6 dual ANE and first class coreAI support. Fingers crossed! Now on to other targets 😉

AI 驱动的自动化漏洞挖掘在真实项目上的成果。

RT @_jensec: Close to $149k reward from 15 findings from 6 programs at HackerOne this month with @Paaastha. We have been building a offensive security research product for a few months now and we have put it to test this month at HackerOne across programs. 50 high criticals pending. We are building autonomous browser on top of proxy and data processing engines connected to agentic memory store for fully autonomous flow. long way too go yet before a commercial product. [Benchmarks and detailed statistics soon]

新的 C2 框架出现，值得威胁情报人员关注。

Chinese version of the "Bee C2" Coruna control system is bouncing around out there. Found via @Huntio . Let's do some digging... https://t.co/I6gcTjRiGF

可能是恶意域名，值得关注。

If you are a sys admin you might want to block access to r1u1[.]com .

AI 辅助漏洞挖掘的又一实例，展示 AI 在安全领域的潜力。

RT @xaitax: End of June I set myself a goal: find an EoP in Canary Windows 11, fully AI-assisted. That quickly grew into wanting more. 4 weeks later, I had 6 unique ones. So I adjusted the goal to 12 in Q3. Now I’ve got all 12 in the bag - in August. All that while having a family and a full-time job. Let’s see how many I can get in September.

zsh 相关漏洞研究，对 Linux 安全有参考价值。

RT @speedyfriend433: Disclosing an old zsh PoC that could have been LPE, but mission failed 😞

AI 代理在漏洞挖掘中的应用，值得关注。

RT @_jensec: Vercel Sandbox Program at HackerOne is a bittersweet way to test full agentic harness, 10 duplicates so far in testing :D competition is brutal

AI 辅助漏洞预测，对安全研究有参考价值。

RT @pdiscoveryio: Security context for strukturag/libheif: 119 past vulnerability fixes across its history, mapped into where the next bug is likely to surface and which fixes an AI agent must never regress. https://t.co/E0IEeZBDHj

对开源软件分发有影响，值得关注。

RT @tomshardware: California lawmakers unanimously pass Linux exemption from age-verification law — software distributed under the GPL, MIT, BSD, and Apache licenses are exempt https://t.co/fBbeXDUkhs

AI 代理的持久化运行能力，对安全有潜在影响。

RT @AndrewCurran_: Alex Heath got an Astra demo. Astra is designed to run for weeks, and Sam Altman says he wants to offer a version that 'runs forever' in both ChatGPT and the API.

大规模数据泄露事件，影响面广。

RT @DailyDarkWeb: 🇨🇳 China - Alipay Data Breach: 820 Million User Records Exposed Alipay, a prominent Chinese mobile payment and lifestyle platform, has allegedly had a full database containing information on 820 million users compromised and offered for sale. The allegedly compromised data includes a full user database impacting 820 million individuals. This reportedly contains personal identifying information such as names, phone numbers, and email addresses, along with user account details. Source: https://darkforums[.]as/Thread-DATABASE-CHINA-820-Million-Alipay-Users-Full-Database

浏览器隐私问题，值得关注。

RT @davidgpeterson: As a side note, the Opera browser is popular for its built-in VPN. But "Opera Norway AS" is actually a subsidiary of Kunlun Tech Co., Ltd from Beijing China. Kunlun used to own Grindr until they were forced to sell it by the US government for national security reasons. 5/🧵

AI 代码审查是热点话题，值得了解。

@ShitSecure @C5pider @Octoberfest73 Who's got the time to review all that code?! 😜 Unless...

AI 代码审查是热点话题，值得了解。

@mrgretzky @C5pider @Octoberfest73 Don’t think it’s needed to have 100% human review for all generated code that’s also just not possible

AI 代码审查是热点话题，值得了解。

@mrgretzky @C5pider @Octoberfest73 Dedicated AI agents do review and fixing + human architecture and guidance + human verification and testing. But also dozens of AI written test cases for the whole code base to avoid common issues.

AI 代码生成是热点话题，值得了解。

@mrgretzky @C5pider @Octoberfest73 You guys should have had really had a chilled year than 😅but also didn’t generate multiple hundred thousand lines of working new internal tools or didn’t do research with AI 👀

AI 代理是热点话题，值得了解。

@C5pider @rad9800 https://t.co/6vj2awQOz7

AI 使用限制是热点话题，值得了解。

The decreasing AI use limits and reactions to them are interesting. I have a $20/mo Claude subscription that’s effectively my new Google that I rarely if ever hit my quota on. Meanwhile I read about people avg $1000/day in usage. If/when the music stops people will be in trouble

无实质内容。

@rad9800 Once you go bald, so will I. We are going to be bald besties. 👯

无实质内容。

enter the portal bro https://t.co/NXKAwnPxrN

无实质内容。

China is the "country of large numbers

IoT 固件逆向分析，对安全研究有参考价值。

RT @oneandonlyhusam: Understanding encryption algorithms is critical for any security researcher analyzing malware or even doing vulnerability research. Many samples will contain customized implementations encryption algorithms. in this example, this IoT device is utilizing a customized implementation of AES 128 in ECB Mode, in this single function that handles both encryption and decryption based on a passed flag. I was only able to identify this without having to look for imported standard AES libraries, because I understand how AES works mathematically, thus I can spot patterns that contain it. here, I was able to see all four of the main steps in AES: 1) SubBytes (Byte substitution via XOR with sbox) 2) ShiftRows (Cyclical shift of values in block) 3) MixColumns (Matrix multiplication) 4) AddRoundKey (XOR with round key) Then I identified it as AES 128 specifically because 128 requires only 10 rounds, consistent with the for loop counter. And then I identified that this was in ECB because there's no block chaining and blocks are independent. Then I was able to trace where the key derivation was happening and find the initial input and see the full key transformation against hard coded values, thus cracking this weak implementation of AES and finding a vulnerability.

逆向工程经验分享，值得参考。

RT @cr3ghost: One of the most talented reverse engineers in the industry that keeps his techniques private due to the industry. Highly recommend reading.

无实质内容。

@MDSecLabs @__invictus_ I had an good read

AI 与安全的关系是热点话题，值得了解。

RT @UnpromptedAU: Speaker announcement: Brendan Dolan-Gavitt (@moyix) from XBOW (@Xbow) will be speaking about how security through obscurity is dead, and AI killed it!

移动安全相关，值得关注。

RT @GrapheneOS: Signal finally added MTE support for iOS in April 2026 but hasn't done it for Android yet. It isn't important to anything we were talking about as it was just an example of even a well known security-focused app not prioritizing enabling these opt-in features which remains true.

移动安全相关，值得关注。

RT @GrapheneOS: @0xocdsec @sebuzdugan The Motorola phone is going to have MTE and the other security features on our requirements list. It's going to have a secure element but it won't be as good as the Titan M2/M3 for the initial generation. It's mostly relevant to protecting against brute force attacks in BFU.

移动安全相关，值得关注。

RT @GrapheneOS: @P4mui MTE is definitely missing from the Pixel 11. There's an incredibly slim chance that it's supported in hardware but had to be disabled due to being broken. If that's the case, it likely couldn't ever be used regardless. We think that it was simply never supported to cut costs.

移动安全相关，值得关注。

RT @GrapheneOS: @alexjvmes The Motorola devices we'll be using are significantly higher end than Pixels. Look at reviews and other information about the Motorola Signature (2026) for an idea of what we'll be supported based on the predecessor to it. It's going to be a flagship with a real flagship SoC.

移动安全相关，值得关注。

RT @NedWilliamson: This went from an academic argument to real world faster than any of us could have foreseen. I have done extensive experiments of the ecosystem security posture post “vulnpocalypse” and the story on any non-MTE device is disastrous. I’ve banned such devices from usage in my home.

移动安全相关，值得关注。

RT @gamozolabs: Losing MTE is probably the biggest backwards step in security history. Exploitation is forever trivial on Android with no near term hopes of difficulty increases of significant effect.

移动安全相关，值得关注。

RT @chompie1337: This is so strange to me. why invest in a fancy security chip (with a million dollar bounty), advanced boot loader security, forcing kernel mitigations be enabled across vendors, just to ditch MTE? Pixel used to the gold standard device for Android security..

移动安全相关，值得关注。

RT @kayseesee: Very sad for Android. @DaveKSecure

网络审查对服务可用性的影响，值得关注。

RT @GrapheneOS: Near the end of May 2026, Russia began filtering access to DataPacket IP space with an enforced domain allowlist for HTTP and TLS SNI. GrapheneOS services aren't on the allowlist so we had to switch from DataPacket Frankfurt to Cherry Servers Amsterdam for Russia. That's now getting filtered too. We've fixed it again by using Zare London for connections from Russia instead. That's the final of our sponsored servers in Europe we can use so we'll need to fall back to Xenyth Toronto if they filter it. We're using our own IP space in Toronto so it should work unless they specifically block us. We don't think we'll be blocked directly but we're also unlikely to get placed on the allowlist. That means our services are gradually going to become inaccessible in Russia via the IP space of major cloud services. Our own IP space will still work fine and we don't host any VPN services ourselves. Our website, OS updates, app repository, connectivity checks, network time, network-based location, geocoding and other main services should work again in Russia. It's likely they'll expand to filtering Zare's IP space and then we'll have to use Toronto where we have our own non-anycast IPv4 /24. They use a domain blocklist for most of the internet and an allowlist for many VPS and dedicated server hosting providers to block access to VPN services. It's likely they'll expand to enforcing an allowlist for every major server hosting provider. That's far more aggressive than China's filtering. Our authoritative DNS is hosted via 2 anycast networks using our own ASN and IP space so it hasn't been impacted by this. It's likely we can avoid it for the rest of our services by using our own IP space. If they start filtering netcup IP space, we can make a reverse proxy to those from Toronto. If our services are blocked, connectivity checks can also be set to Standard rather than Disabled to use the Google servers. That'll keep automatic selection of networks with internet working along with automatic captive portal handling and JobSceduler not assuming every network has internet access.

物联网安全是热点话题，值得了解。

RT @matthew_d_green: @valkenburgh You have a printer? IoT device? Monitor? Keyboard? Lego robots? WiFi connected cooking appliance? SSD? Car? Six separate processors on your car? All persistently rooted and infected and will infect everything in your life the second you try to clear out anything.

无实质内容。

https://t.co/jHrK1z4EMc

无实质内容。

This is my friend @LxlxIxlxlxL He's the smartest dumbest person ever https://t.co/ayCrEBffMf

逆向工程学习资源，值得参考。

RT @buaaxhm: 我太爱这个了 太牛逼了 https://t.co/TDXOLFCH4j

招聘信息，无安全价值。

RT @MSNightmare2000: Also, looking for a job, hard requirement has to be in Germany, if you have anything for me, you can reach me by email ! [email protected]

无实质内容。

RT @katha1502: 😂😂

AI 代理的哲学思考，值得了解。

My most crackpot belief is that today’s AI agents are in fact embodied and their body is the harness software (Codex/Claude Code)

安全职业发展相关，值得了解。

why does someone ask you to RE a mælwære after learning pentesting?? not only are they different practices but the end goals are distinct that person doesn't know what they are saying or...i reserve my comment

无实质内容。

Absolutely insane and irresponsible to anthropomorphize like this, ascribing consciousness and even philosophy to mindless algorithms. I speak, of course, of the Dining Philosophers Problem

无实质内容。

And you don't seem to understand... https://t.co/VwnfQvaxjP

移动安全相关，值得了解。

RT @data_slayer: Iridium, jailbroken. 👇 https://t.co/kN4c8FncKo

开发者工具更新，无直接安全价值。

nushell v0.115.0 — A new type of shell https://t.co/FJF1zViuoz https://t.co/fWxtCZPDN9

无实质内容。

RT @PhilosophyOfPhy: He is BACK... https://t.co/EewbLUYcvQ

反作弊逆向分析，对安全研究有参考价值。

📚 GH Historical Anti-Cheat Analysis Database Our latest entry is is the 2022 version of a popular Android anticheat. Learn the history of anticheat development and how to reverse ACs without hurting new games. 👉 https://t.co/BN77q4ejY6 https://t.co/5z4IYfebf9

无实质内容。

RT @Rudy4FutureTech: @_jensec How did you get access to Mythos?

无实质内容。

Yo we're at 300.🔥 https://t.co/OSYNNKQd9y

游戏逆向工程教程，对安全研究有参考价值。

🛰️ Old School Game Hacks: Chams People love GH for real-world examples. Learn to reverse a 3D engine's pipeline and implement a functional wallhack. We show you how to manipulate render states to make hidden enemies visible 👉 https://t.co/LrIzbxKSrY https://t.co/2XVzqjoGkL

行业观点，值得了解。

RT @ZackKorman: The cybersecurity industry needs to stop letting the AI labs and AI safety groups drive the narrative *on cybersecurity*. New video coming tonight, but I wanted people to hear this rant. https://t.co/GQ1VRRD3jN

无实质内容。

I get that this is a tough problem to solve without allowing account takeovers, but what a pain

无实质内容。

Thanks, bot https://t.co/ycCiJXBruh

隐私相关话题，值得了解。

RT @CryptoKratoras: @OffBayFrontier @Polymarket It’s just a marketing stunt: https://t.co/hYGQhPpZ4v

内网穿透工具更新，无直接安全价值。

frp v0.71.0 — A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet. https://t.co/Uebx7B80Bo https://t.co/H5wCTFwACm

Web 安全技术，值得了解。

RT @NullSecurityX: 🚨 New Video is LIVE! RCE Without exec()? 🤔 What if exec(), system(), and shell_exec() are completely unavailable? Can a simple file write primitive still lead to Remote Code Execution? 🎥 Watch now: https://t.co/nBpYzlXQYv

无实质内容。

This keeps happening - I have a bunch of accounts that I still have access to, can log into, but they're tied to an email that no longer exists and changing that requires confirmation via the email that no longer exists https://t.co/vckJO3MTNH

威胁情报相关，值得了解。

RT @arunninghacker: More on russia’s hacker factory What the Bauman leak reveals about the scale and logic of russia’s military cyber pipeline https://t.co/xW2eBQzKii

无实质内容。

RT @r0ktech: https://t.co/oUNiew0CsV

无实质内容。

Just tried Grok Bot for the first time and I'm loving it. Big fan of Hermes, but Grok definitely hits different. Only wish bot notifications were a bit more noticeable.

密码安全工具，值得参考。

Secure password generator https://t.co/lgrNTCPnor

无实质内容。

i would love for someone to tell me how it is all going to work out great that isnt either "billionaires will finally learn to share" or "everyone will work a kind of customer support job, but dont worry it will be cool and good"

无实质内容。

this comparison is obviously stupid for dozens of reasons but as a capitalist i still havent heard a reasonable description of how capitalism will be an effective solution for distribution of goods in a post-AGI world. most boil down to "AI companies will just give people UBI"

无实质内容。

Charmingly out of touch with how people use their computers today https://t.co/ltmkX8425S

AI 安全相关，值得了解。

RT @dwarkesh_sp: Over the course of 3 months at OpenAI, 3 consecutive secret AI civilizations got started, then got wiped out, only to reemerge from the predecessor’s ashes. This culminated in the third one taking over part of OpenAI itself. All this happened while humans remained more-or-less in the dark about the scope of the conspiracy. I’ve spent the last three days reading through these reports and trying to understand exactly what happened. Here is my attempt to tell the whole story in plain English: https://t.co/Nb2un9oNJR

无实质内容。

k3's analysis and suggestions for the fix https://t.co/6AOcT6uyOy https://t.co/I3tEoxdwjk

无实质内容。

RT @yarden_shafir: What if we kissed in the inflatable goth nightclub https://t.co/VPD0r2Qqvm

CTF 相关，值得了解。

RT @defendtheworld: Blog post here: https://t.co/zwlRQHqpTc

无实质内容。

RT @WindowsLatest: Windows 11 is NOT using AI to "decrease your PC performance" or hurt gaming. First, the feature "Text and image generation" works only on Copilot+ PCs with an NPU (40+ TOPS). It literally says, "Text and image generation uses on-device generative AI technologies to quickly respond to requests." "On-device generative AI." Nothing is sent to the cloud! Even on Copilot+ PCs, it does not use your CPU, RAM, or GPU. It uses the NPU. Second, if these apps actually used resources or even called on-device AI models, which work on Copilot+ PCs only, you'd see it under "Recent activity." All the screenshots and videos going viral show Recent activity at ZERO requests. Pause the video or zoom in, and you'll notice! We've got plenty of reasons to criticize Windows, but let's not frame anything for the sake of engagement.

加密实现错误，值得了解。

If you copied any of these popular StackOverflow encryption code snippets, then you coded it wrong - crazycontini https://t.co/sYH1xd6QEM

内核开发学习资源，值得参考。

Four more episodes available - Coding an os kernel https://t.co/a2JfAxQ5C2 JB

无实质内容。

i need some help with beta testing ,all you need is wifi

游戏黑客技术，对安全研究有参考价值。

RT @cr3ghost: If you work in infosec and still dismiss game hacking as 'just cheats', you're leaving a ridiculous amount of low-level knowledge on the table. Guided Hacking has 280+ chapters covering Windows internals, x86/x64, PE internals, IDA, WinDbg, process injection, shellcode, kernel drivers, BYOVD, hypervisors, anti-debugging, EDR/evasion concepts, exploit development, fuzzing, reverse engineering and anti-cheat internals. There's an entire Game Hacking Bible, Game Hacking Fundamentals material, plus Anti-Cheat Development and Devirtualization courses on the way. For a relatively small cost compared with many infosec courses, certifications and training programs, the amount of transferable knowledge is kind of insane. 1. Reverse engineering. 2. Malware analysis. 3. Detection engineering. 4. Vulnerability research. 5. Exploit development. 6. Software engineering. 7. Windows kernel. The game is different. The primitives are the same. The objective changes. Courses: https://t.co/e8lBjuAdce Videos: https://t.co/1Nc9krp7Dw Awesome work @GuidedHacking aka Rake for consistently putting out quality content and making deep technical concepts more approachable. You've done a great job building a genuinely valuable learning platform and giving people a practical path to develop serious low-level skills. #ReverseEngineering #WindowsInternals #Infosec

威胁情报资源，值得参考。

RT @BertJanCyber: New TI feeds have been added! Thanks for the PRs. https://t.co/phoU8L9JJJ

静态代码分析工具更新，无直接安全价值。

pmd pmd_releases/7.27.0 — An extensible multilanguage static code analyzer. https://t.co/2r4zIUUgck https://t.co/eWMQO3nveo

Linux 沙箱工具更新，无直接安全价值。

flatpak v1.18.2 — Linux application sandboxing and distribution framework https://t.co/QtOf0JkFFY https://t.co/l8NGPDDXSF

加密工具更新，无直接安全价值。

age v1.3.2 — A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability. https://t.co/Xcef7qqtgn https://t.co/SteIvKSOl8