[每日信息流] 2023-04-21

[Yof3ng]

每日安全资讯（2023-04-21）

• Malwarebytes Labs
  • What your peers said: G2 comparison of top Endpoint Security vendors
  • QBot changes tactic, remains a menace to business networks
  • FTC tackles tech support scams by chasing payment processor firms
  • Fancy Bear known to be exploiting vulnerability in Cisco routers
• SAP Blogs
  • A Customer Journey through the SAP S/4HANA Cloud 3 System Landscape (3SL) Upgrade & Hotfix Process
  • Document and Reporting Compliance – Statutory Reporting supporting Broad-Based Black Economic Empowerment in South Africa
  • SAP ISU Intercompany and Data Exchange : Choice
  • What is SAP Business Network Planning Collaboration ?
  • Visibility of charge hierarchy in SAP TM for tendering
  • Plastic packaging taxes – SAP supports with SAP Responsible Design and Production
  • The Impact of Payment Automation in the Subscription Economy
  • What’s actually new within Margin Analysis within S4HANA (Cutting out the noise addressable by process
  • Jenkins Pipeline setup for Backup, Version Compare and Validation (cpilint) of SAP Integration Suite Artifacts
  • A Technical Guide to Uploading Events Using Spreadsheet Templates in SAP Business Network Material Traceability Solution
• 先知安全技术社区
  • house of apple3 心得体会
• MalwareFox Blog Articles - MalwareFox
  • How to Reset Web Browser to Default Setting
• MalwareTips Blog
  • SundaySale.shop Review: Is SundaySale A Scam or Legit?
  • SMScaster.com Text Messages Scam: What You Need to Know
  • Wolverine FLL Club Text Message Scam – Don’t Fall For This!
  • bc1qdnjffh9tpmphuex2pknqg3yeq4g0xvfm2ag53w Bitcoin Scam
  • Remove Quatelisest.com Pop-up Ads [Virus Removal Guide]
  • Remove News-Zohugo.cc Pop-up Ads [Virus Removal Guide]
  • Remove 1coin.store Pop-up Scam [Virus Removal Guide]
  • Remove 2coin.click Pop-up Scam [Virus Removal Guide]
  • Remove Revolvemockerycopper.com Pop-ups [Virus Removal Guide]
  • Remove Furrankask.live Pop-up Ads [Virus Removal Guide]
• Malware Archives - Security Affairs
  • Lazarus APT group employed Linux Malware in recent attacks and was linked to 3CX supply chain attack
  • Google TAG warns of Russia-linked APT groups targeting Ukraine
  • Trigona Ransomware targets Microsoft SQL servers
• SecWiki News
  • SecWiki News 2023-04-20 Review
• 安全脉搏
  • CVE-2023-21839：Weblogic反序列化漏洞
  • 【勒索防护】MSI 等多个企业已遭受攻击！MoneyMessage 勒索软件突现
  • Weblogic 关于T3协议和二次反序列化分析
  • 【漏洞预警】Oracle WebLogic 4月份补丁日安全通告
• GuidePoint Security
  • Quarterly GRIT Ransomware Report – Q1 2023
  • The Next Step: The GRIT Threat Feed is here
• Sploitus.com Exploits RSS Feed
  • Piwigo 13.6.0 - Stored Cross-Site Scripting (XSS) exploit
  • Franklin Fueling Systems TS-550 - Default Password exploit
  • Bang Resto v1.0 - Stored Cross-Site Scripting (XSS) exploit
  • Lilac-Reloaded for Nagios 2.0.8 - Remote Code Execution Exploit exploit
  • Franklin Fueling Systems TS-550 - Default Password Vulnerability exploit
  • Bang Resto v1.0 - Stored Cross-Site Scripting Vulnerability exploit
  • GDidees CMS 3.9.1 - Local File Disclosure Vulnerability exploit
  • Serendipity 2.4.0 - Remote Code Execution (Authenticated) Vulnerability exploit
  • Bang Resto v1.0 - (Multiple) SQL Injection Vulnerability exploit
  • Serendipity 2.4.0 - Cross-Site Scripting Vulnerability exploit
  • Lilac-Reloaded for Nagios 2.0.8 - Remote Code Execution (RCE) exploit
  • AspEmail v5.6.0.2 - Local Privilege Escalation exploit
  • ProjeQtOr Project Management System 10.3.2 - Remote Code Execution (RCE) exploit
  • Microsoft Word 16.72.23040900 - Remote Code Execution Vulnerability exploit
  • Bang Resto v1.0 - 'Multiple' SQL Injection exploit
  • Serendipity 2.4.0 Cross Site Scripting exploit
  • FUXA 1.1.13-1186 Remote Code Execution exploit
  • Swagger UI 4.1.3 Critical Information Misrepresentation exploit
  • Serendipity 2.4.0 Shell Upload exploit
  • Chitor-CMS 1.1.2 SQL Injection exploit
  • Piwigo 13.6.0 Cross Site Scripting exploit
  • Lilac-Reloaded For Nagios 2.0.8 Remote Code Execution exploit
  • ProjeQtOr Project Management System 10.3.2 Shell Upload exploit
  • Franklin Fueling Systems TS-550 Hash Disclosure / Default Credentials exploit
  • GDidees CMS 3.9.1 - Local File Disclosure exploit
  • Swagger UI 4.1.3 - User Interface (UI) Misrepresentation of Critical Information Exploit exploit
  • Serendipity 2.4.0 - Remote Code Execution (RCE) (Authenticated) exploit
  • Exploit for Vulnerability in Microsoft exploit
  • Exploit for Path Traversal in Apache Http Server exploit
• Hex Rays
  • IDA Trivia – Test your IDA knowledge! DAY 4
• Twitter @nicolas Krassas
  • Analyzing Malware using FREE Online Tools https://infosecwriteups.com/analyzing-malware-using-free-online-tools-e37b56bc3868?source=rss----7b722bfd1b8...
  • Ethereum Virtual Machine Internals – Part 1 https://www.netspi.com/blog/technical/blockchain-penetration-testing/ethereum-virtual-machine-internals-p...
  • Red Team Blues https://blog.dshr.org/2023/04/red-team-blues.html
  • Generating Deserialization Payloads for MessagePack C#’s Typeless Mode https://www.reddit.com/r/netsec/comments/12sxsql/generating_deserialization_pa...
  • New MgBot Malware Framework Plugins Target African Telecommunications Company https://securityonline.info/new-mgbot-malware-framework-plugins-target-a...
  • Lazarus hackers now push Linux malware via fake job offers https://www.bleepingcomputer.com/news/security/lazarus-hackers-now-push-linux-malware-via-f...
  • Criminal Records Service Still Disrupted 4 Weeks After Hack https://packetstormsecurity.com/news/view/34534/Criminal-Records-Service-Still-Disrupted-4...
  • 'AuKill' Malware Hunts & Kills EDR Processes https://www.darkreading.com/attacks-breaches/aukill-malware-hunts-kills-edr-processes
  • Capita has 'evidence' customer data was stolen in digital burglary https://go.theregister.com/feed/www.theregister.com/2023/04/20/capita_admits_to_evi...
  • Microsoft 365 outage blocks access to web apps and services https://www.bleepingcomputer.com/news/microsoft/microsoft-365-outage-blocks-access-to-web-...
  • PASTIS: Collaborative Fuzzing Framework https://github.com/quarkslab/pastis
  • Lazarus Group Adds Linux Malware to Arsenal in Operation Dream Job https://thehackernews.com/2023/04/lazarus-group-adds-linux-malware-to.html
  • 3CX hack caused by trading software supply chain attack https://www.bleepingcomputer.com/news/security/3cx-hack-caused-by-trading-software-supply-chai...
  • Daggerfly Cyberattack Campaign Hits African Telecom Services Providers https://thehackernews.com/2023/04/daggerfly-cyberattack-campaign-hits.html
  • NSO Group Used 3 Zero-Click iPhone Exploits Against Human Rights Defenders https://thehackernews.com/2023/04/nso-group-used-3-zero-click-iphone.html
  • Fortra shares findings on GoAnywhere MFT zero-day attacks https://www.bleepingcomputer.com/news/security/fortra-shares-findings-on-goanywhere-mft-zero...
  • Awesome EDR Bypass Resources For Ethical Hacking https://github.com/tkmru/awesome-edr-bypass
  • Medusa ransomware crew brags about spreading Bing, Cortana source code https://go.theregister.com/feed/www.theregister.com/2023/04/19/medusa_microsoft...
  • Killnet Boss Exposes Rival Leader in Kremlin Hacktivist Beef https://www.darkreading.com/threat-intelligence/killnet-boss-rival-leader-kremlin-hacktiv...
• 嘶吼 RoarTalk – 回归最本质的信息安全,互联网安全新媒体,4hou.com
  • Peach Fuzzer漏洞挖掘实战
  • 神话还是现实？揭穿围绕云勒索软件的错误概念
  • Mac恶意软件MacStealer伪装成P2E应用程序大肆传播
• Twitter @bytehx
  • RT Tuan Anh Nguyen 🇻🇳 ⚡️: I already write a nuclei template to scan this vulnerability before. Not many server vulnerable. It cause due to mis...
  • RT ProjectDiscovery.io: Extract ASN records for a given list of domains or subdomains with dnsx 💪 Install dnsx 👉 http://github.com/projectdiscov...
• Twitter @brandon Falk
  • Re @0xor0ne Wild that this is already 5 years old…
  • Re @timmisiak I had this happen once due to a deleted conversation that was unread… I don’t remember what made it eventually fix itself
  • RT 0xor0ne: A few years old but still a great work by @gamozolabs on vectorized emulation: JIT standard app into their AVX-512 equivalent to fuzz 16 V...
• 美团技术团队
  • 一次「找回」TraceId的问题分析与过程思考
• unSafe.sh - 不安全
  • ln -s 两次无线递归问题：给目录创建两次软链接会出现无限递归
  • 解除 Xshell/Xftp 7 个人免费版退出弹窗的办法
  • 密码保护：OSDA-LAB-Challenge4 笔记
  • CVE-2022-29844: A Classic Buffer Overflow on the Western Digital My Cloud Pro Series PR4100
  • Avoiding the Storm | How to Protect Cloud Infrastructure from Insider Threats
  • 《CS:GO》AK-47 超罕见皮肤卖出了逾 40 万美元
  • Secure by default: recommendations from the CISA’s newest guide, and how Cloudflare follows these principles to keep you secure
  • ICANN 和 Verisign 提议允许任何政府扣押域名
  • Oxy: Fish/Bumblebee/Splicer subsystems to improve reliability
  • FreeBuf 早报 | 最容易遭受勒索软件攻击的十大行业；微软 SQL 服务器遭黑客入侵
  • UDPX - Fast A nd Lightweight, UDPX Is A Single-Packet UDP Scanner Written In Go That Supports The Discovery Of Over 45 Services With The Ability To Add Custom Ones
  • UK’s Cabinet Office Issues Cyber Warning to UK Businesses
  • 征求意见‖《汽车远程升级（OTA）信息安全测试规范》
  • Imgur 将从下个月开始禁止上传色情图像
  • 在 AI 和 ChatGPT 时代大学应该恢复口试
• Data Breach
  • Multinational ICICI Bank leaks passports and credit card numbers
• Trail of Bits Blog
  • Typos that omit security features and how to test for them
• 绿盟科技技术博客
  • RSA 2023创新沙盒盘点｜Zama：开源全同态加密方案支持自动化改造
  • RSA 2023创新沙盒盘点｜HiddenLayer：针对机器学习攻击的防护与响应平台
• InfoSec Write-ups - Medium
  • Analyzing Malware using FREE Online Tools
• glzjin
  • 密码保护：OSDA-LAB-Challenge5 笔记
  • 密码保护：OSDA-LAB-Challenge4 笔记
• Microsoft Security Blog
  • Microsoft Entra delivers 240 percent ROI, according to new Forrester study
• Files ≈ Packet Storm
  • Ubuntu Security Notice USN-6034-1
  • Red Hat Security Advisory 2023-1888-01
  • FUXA 1.1.13-1186 Remote Code Execution
  • Ubuntu Security Notice USN-6033-1
  • WordPress PowerPress 10.0 Cross Site Scripting
  • Red Hat Security Advisory 2023-1899-01
  • Chitor-CMS 1.1.2 SQL Injection
  • Ubuntu Security Notice USN-6032-1
  • ProjeQtOr Project Management System 10.3.2 Shell Upload
  • Ubuntu Security Notice USN-6031-1
  • Piwigo 13.6.0 Cross Site Scripting
  • Red Hat Security Advisory 2023-1893-01
  • Franklin Fueling Systems TS-550 Hash Disclosure / Default Credentials
  • Red Hat Security Advisory 2023-1822-01
  • Ubuntu Security Notice USN-6028-1
  • Ubuntu Security Notice USN-6030-1
  • Ubuntu Security Notice USN-6029-1
  • Swagger UI 4.1.3 Critical Information Misrepresentation
  • Lilac-Reloaded For Nagios 2.0.8 Remote Code Execution
  • Serendipity 2.4.0 Cross Site Scripting
  • Red Hat Security Advisory 2023-1879-01
  • Ubuntu Security Notice USN-6027-1
  • Serendipity 2.4.0 Shell Upload
• Hacker Noon
  • This Conversation Changed My Life
  • The Tech World's Best-Kept Secret: Smart Buildings
  • Microsoft’s Minotaur Moment
  • Key Considerations for Structuring a Decentralized Autonomous Organization (DAO)
  • The Noonification: Amazon Crowds AI Space With Launch of Own Product Bedrock (4/20/2023)
  • A Simple Guide to Latent Semantic Indexing (analysis) and How it Bolsters Search
  • The Grand Inquisitor
  • The Idiot by Fyodor Dostoyevsky - Table of Links
  • The Grand Inquisitor by Fyodor Dostoyevsky - Table of Links
  • Leveraging CRM Data in Your Power Virtual Agent Voice Bot
  • Step-by-Step Guide to Building Your First (Voice) Bot with Microsoft Power Virtual Agent
  • 369 Stories To Learn About Database
  • 329 Stories To Learn About Css
  • 181 Stories To Learn About Css3
• Exploit-DB.com RSS Feed
  • [webapps] ProjeQtOr Project Management System 10.3.2 - Remote Code Execution (RCE)
  • [webapps] Piwigo 13.6.0 - Stored Cross-Site Scripting (XSS)
  • [webapps] FUXA V.1.1.13-1186 - Unauthenticated Remote Code Execution (RCE)
  • [local] Linux Kernel 6.2 - Userspace Processes To Enable Mitigation
  • [webapps] Chitor-CMS v1.1.2 - Pre-Auth SQL Injection
  • [remote] Franklin Fueling Systems TS-550 - Default Password
  • [webapps] GDidees CMS 3.9.1 - Local File Disclosure
  • [local] AspEmail v5.6.0.2 - Local Privilege Escalation
  • [webapps] Swagger UI 4.1.3 - User Interface (UI) Misrepresentation of Critical Information
  • [webapps] Bang Resto v1.0 - 'Multiple' SQL Injection
  • [webapps] Bang Resto v1.0 - Stored Cross-Site Scripting (XSS)
  • [remote] Microsoft Word 16.72.23040900 - Remote Code Execution (RCE)
  • [local] File Replication Pro 7.5.0 - Privilege Escalation/Password reset due Incorrect Access Control
  • [webapps] Lilac-Reloaded for Nagios 2.0.8 - Remote Code Execution (RCE)
  • [webapps] Serendipity 2.4.0 - Cross-Site Scripting (XSS)
  • [webapps] Serendipity 2.4.0 - Remote Code Execution (RCE) (Authenticated)
• Dark Reading
  • Infoblox Uncovers DNS Malware Toolkit & Urges Companies to Block Malicious Domains
  • Bitsight Expands into Integrated Cyber-Risk Management
  • 'GhostToken' Opens Google Accounts to Permanent Infection
  • Red Canary Announces Readiness
  • 3CX Supply Chain Attack Tied to Financial Trading App Breach
  • Major US CFPB Data Breach Caused by Employee
  • Trigona Ransomware Trolling for 'Poorly Managed' MS-SQL Servers
  • Expert Insight: Dangers of Using Large Language Models Before They Are Baked
  • Twitter's 2FA Policy Is a Call for Passkey Disruption
  • 'AuKill' Malware Hunts & Kills EDR Processes
  • Global Spyware Attacks Spotted Against Both New & Old iPhones
  • GPT-4 Provides Improved Answers While Posing New Questions
  • Newer Authentication Tech a Priority for 2023
• FreeBuf网络安全行业门户
  • FreeBuf 早报 | 最容易遭受勒索软件攻击的十大行业；微软 SQL 服务器遭黑客入侵
  • 征求意见‖《汽车远程升级（OTA）信息安全测试规范》
  • Weblogic CVE 2023-21839漏洞复现
  • 印度跨国银行遭遇数据泄露，数百万敏感数据被公开访问
  • 微软SQL服务器遭黑客入侵，所有文件都被加密
  • 五月正式实施！一文带你看懂《关基保护要求》
• 安全牛
  • Twitter上最具人气的20个网络安全博主及账户
  • 产业观察丨亚信安全推出40G高性能防毒墙，为网络边界防护提供新思路
  • 直播预告 | 网安大讲堂（69期）：APP开发者如何利用GPT和NFT降低合规成本提高推广效率
• Black Hills Information Security
  • If You Don’t Ruse, You Lose: A Simple Guide to Blending in While Breaking In
• 奇客Solidot–传递最新科技情报
  • 《CS:GO》AK-47 超罕见皮肤卖出了逾 40 万美元
  • ICANN 和 Verisign 提议允许任何政府扣押域名
  • Imgur 将从下个月开始禁止上传色情图像
  • 在 AI 和 ChatGPT 时代大学应该恢复口试
  • Reddit 将对利用其数据训练 AI 收费
  • 高等教育中女性比例超过半数
  • 电刺激能加速伤口愈合
  • 黑客无聊劫持保守派名人账号去制造混乱
  • 微软拒绝为 API 付费其广告平台停止支持 Twitter
  • 希捷因向华为出口硬盘被罚 3 亿美元
• HackerNews
  • 欧盟网络安全战略最后一块拼图：《网络团结法案》提案发布
  • 微软 SQL 服务器遭黑客入侵，所有文件都被加密
  • 间谍软件制造商 QuaDream 终于要倒闭了
  • 马斯克称：美国政府及情报机构可监视推特所有私聊信息
  • 美英警告：俄黑客组织在 Cisco 路由器部署恶意软件
• 黑海洋 - WIKI
  • 解除 Xshell/Xftp 7 个人免费版退出弹窗的办法
• 微步在线研究响应中心
  • 全球APT威胁2022年度报告：企业必备的安全指南
• Twitter @james Kettle
  • Re @ko2sec You can trigger OPTIONS using CORS but I don't know how to make the response get rendered. You can use client-side cache poisoning with som...
  • RT Web Security Academy: We recently launched a lab with a countdown timer. How did you find it - do countdowns make everything better, or just more s...
• 腾讯玄武实验室
  • 每日安全动态推送(4-20)
• 长亭技术沙盒
  • 漏洞风险提示 | WebLogic多个高危漏洞
• 杨龙
  • ln -s 两次无线递归问题：给目录创建两次软链接会出现无限递归
• Checkmarx.com
  • Shifting Left Is No Longer Enough: It’s Time to Shift Everywhere
• 代码卫士
  • 谷歌修复今年的第二个已遭利用 Chrome 0day
  • 无需钥匙，一台老旧手机诺基亚 3310就能开走豪车
• 看雪学苑
  • 破解 Switch 的黑客提前出狱，但仍需赔偿任天堂 1450 万美元
  • Angr 使用技巧速通笔记
  • LLVM与代码混淆技术 | 打造出属于自己的代码混淆工具
• vivo千镜
  • vivo X Fold2：全能且轻薄，隐私保护更周到！
• 绿盟科技金融事业部
  • ChatGPT潜在的八大“安全隐患”洞察
• 安全学术圈
  • 基于失败测试用例相似性的补丁正确性预测
• SecPulse安全脉搏
  • 【漏洞预警】Oracle WebLogic 4月份补丁日安全通告
• 安全内参
  • 欧盟网络安全战略最后一块拼图：《网络团结法案》提案发布
  • RSAC 2023上的十大韩国新锐网络安全公司
• 黑奇士
  • “双面人”吴军：9号说ChatGPT不是新革命，20号卖GPT课程，已有一万多人购买
• 信息安全国家工程研究中心
  • 新型电力系统网络安全防护挑战与展望
  • RSA 2023的十大看点
• 国家互联网应急中心CNCERT
  • Oracle发布2023年4月的安全公告
• 极客公园
  • 当创业者开始用 ChatGPT 裁员
  • 雷军现身上海车展，参观多家友商展台；特斯拉一季度盈利暴跌 20%；飞猪：五一出游爆发，预定超去年 10 倍｜极客早知道
• 安全圈
  • 【安全圈】全国首例：长沙一男子植入“戒酒芯片”，管用 5 个月
  • 【安全圈】男子编写短信轰炸软件，非法获利10万余元
  • 【安全圈】微软SQL服务器遭黑客入侵，所有文件都被加密
  • 【安全圈】黑入iPhone仅需一条iMessage消息！多起NSO“零点击”攻击曝光
  • 【安全圈】最容易遭受勒索软件攻击的十大行业
• GobySec
  • Weblogic CVE-2023-21931 漏洞挖掘技巧：后反序列化利用
• 中国信息安全
  • 《中国信息安全》2023 年第 3 期目录
  • 前沿 | 从美方推动零信任战略过程看网络安全创新的规律特点
  • 专家观点 | 生成式人工智能产品的应用风险与法治规制
  • CNNVD | 关于Oracle多个安全漏洞的通报
  • 注意 | 银保监会关于“中国时间银行”有关风险的提示
  • 行业 | 青藤首提“业安融合”理念，正式发布先进云安全方案CNAPP
  • 观点 | 废墟探险类直播乱象的成因及法律规制
• 360漏洞云
  • 2022网信自主创新调研报告|三连任组长单位深度参与，360持续贡献产业智慧
• 情报分析师
  • 美国家地理空间情报局发布《地理空间情报基本教程》
  • G7会议公报2023（完整附下载）
• 网安寻路人
  • 欧盟《人工智能法案》如何监管GPT模型：立法提案的迭代
• 安全研究GoSSIP
  • G.O.S.S.I.P 阅读推荐 2023-04-20 CarpetFuzz
• 关键基础设施安全应急响应中心
  • 全球数据跨境流动合规 半月观察（第七期）
  • 工信部部署开展5G网络运行安全能力提升专项行动
  • 老旧医疗设备网络安全该怎么做？
  • 警惕！健身跟踪社交网络中的隐私数据泄露-隐私区域保护功能可能形同虚设
• 青藤云安全
  • 新品牌宣传片 | 青藤品牌全面升级，正式发布新定位、Slogan
• 山石网科安全技术研究院
  • 山石网科安全研究员入选ASUS产品安全名人堂
• 火线Zone
  • OSRC众测挑战赛，奖励加倍香到爆 | OPPO 安全应急响应中心
  • 主打一个“成功人生”，火线Zone恭迎p牛、R3s3arcm
  • Zone在招聘 | 好好干，东哥罩你
• 东软NetEye网络安全
  • 东软智能网联汽车信息信息安全解决方案亮相上海车展
• 深信服千里目安全技术中心
  • 【高级威胁追踪(APT)】Patchwork组织更新技术卷土重来，针对境内教育科研单位再次发起攻击行动
• 三六零CERT
  • 安全日报（2023.04.20）
• 嘶吼专业版
  • 神话还是现实？揭穿围绕云勒索软件的错误概念
  • Mac恶意软件MacStealer伪装成P2E应用程序大肆传播
• leveryd
  • [写了一个测爬虫能力的靶场，因为目前leveryd-asm的爬虫能力是基于katana，就测试了一下，结果看到很多场景里目前katana还不能解析页面中的链接。

测试的结果：projectdiscovery/katana#415

爬虫靶场项目：https://github.com/leveryd-asm/crawler-test](https://mp.weixin.qq.com/s?__biz=MzkyMDIxMjE5MA==&mid=2247485360&idx=1&sn=c108c3d186ab7ae85d50116b9b01bf96&chksm=c1970001f6e08917acf3e6b41b737cf783980608084ccf618dc206bc82134e626b61dd79ae93&scene=58&subscene=0#rd)

• 数世咨询
  • 为什么安全从业人员应当了解业务？
  • 专利背后的故事 | 行为异常检测方法和装置
• KCon 黑客大会
  • “归源·智变”！第12届KCon大会主题及主视觉揭晓
• 补天平台
  • 议题征集|2023补天白帽大会重磅来袭！
• 解道jdon.com
  • 成人递归模式处理的认知机制 - Wiley
  • MarginaliaSearch：用Java编写的无需数据中心的互联网搜索引擎
• Lenix Blog
  • 如何彻底关闭WordPress自动更新和后台更新检查
  • 如何递归列出文件并按修改时间排序？
  • nginx — 如何修复 “ssl” Directive Is Deprecated, Use “listen … ssl”
  • 移动端web页面开发常用的头部标签设置
• Frytea's Blog
  • 在浏览器里运行 ChatGPT 和 Stable Diffusion
• KAIX.IN
  • 雅
• 阿里安全响应中心
  • 阿里云CTF倒计时1天，云之攻防赛即将开启
• CNCERT国家工程研究中心
  • 全球数据跨境流动合规 半月观察（第七期）
  • 卫星照片的ChatGPT已经存在
  • 美英警告：俄黑客组织在 Cisco 路由器部署恶意软件
  • 63%的数据泄露事件都是从外部发现的
• Limboy
  • 北方的空地
• 卢昌海个人主页
  • 最新微博：2023 年 4 月 20 日
• Mukti
  • 一个技术精致的网站：接口设计和图片加载
• 文艺数学君
  • 北邮人论坛十大_2023_04_20
• Bboysoul's Blog
  • 20230420的胡言乱语
• 懒得勤快的博客_互联网分享精神
  • 抖音 v25.1 for Android 去除广告无水印版
  • 哲♂学文化义务教育普及教程
  • 本站开源项目——图像exif信息快速清除小工具ExifStraper 1.4
  • 模特林星阑高清写真壁纸分享(56Vol/4530P)
  • 00后清纯可爱平面模特柒柒qiqi高清写真壁纸分享(14Vol/974P)
  • 微博网红小逗逗高清写真壁纸分享(18Vol/1445P)
  • 演员王馨瑶高清写真壁纸分享(146Vol/11702P)
  • 平面模特吴雪瑶高清写真壁纸(30Vol/1369P)
  • 清纯系女神张思允高清写真壁纸下载(53Vol/3521P)
  • 御姐女神徐莉芝(芝芝Booty)高清写真壁纸分享(343Vol/26009P)
  • 演员周于希Sally高清写真壁纸分享(374Vol/25890P)
  • 日系美女模特星萌高清写真壁纸分享(9Vol/472P)
  • 安卓系统清理SD Maid SE 0.7.5 学习版
• 游研社
  • 【消失的存档】二十年前承载日本人中国武侠梦的《武刃街》
  • 【手游一本道】二次元手游即将正式开“卷”
  • 【白夜谈】音乐成了生活离不开的发条
  • 从业余到“转正”，《桌面地下城》的民间汉化之旅
  • 用25年，我收藏了1000件《龙与地下城》藏品
  • 游研早报：任天堂独立游戏发布会汇总；《怪猎 崛起：曙光》追加岚龙
• azhuge233's
  • Ubuntu Desktop 22.04 安装 Nvidia 驱动
• 沉舟侧畔 Blog
  • ChatGPT 答理科高考题
• Elmagnifico's Blog
  • Houdini Geometry Spreadsheet数据导出
• Posts on Godot's Blog
  • Formatting in Neovim
• Lei Mao's Log Book
  • 动画片《猛兽侠》的故事及其哲学思想
• Luckydesigner
  • 简单操作实现离线版 ChatGPT-4，操作手册敬上
• Raz1ner
  • Chrome 内核浏览器公布高危漏洞
  • 免费开启 GPT-4
• 晴雀堂
  • 博客建站一周年
• 土豆不好吃
  • 使用Cloudflare Zero Trust保护你的Web应用
• ZkeqのCoding日志
  • Kubernetes | 概述部分 - Intro
• 如有乐享
  • ClouDNS提供免费二级域名，每个账户限一个域名