"""Свежая волна источников omni: security/CVE/leaks/CN/RU/tg.

Сгенерировано tools/probe_fresh.py по факту живого fetch (n>0).
Отклонённые кандидаты и причины — в хвостовом комментарии.
Импортов из omni.sources нет намеренно (циклический импорт).
"""


def fresh(S):
    """S — конструктор Source; возвращает только проверенные сетью источники."""
    return [
        S("darkwebinformer", "abuse", "rss", "https://darkwebinformer.com/feed", "rss", ("leak", "news")),
        S("databreaches_net", "abuse", "rss", "https://databreaches.net/feed/", "rss", ("breach", "news")),
        S("hackread_breaches", "abuse", "rss", "https://hackread.com/category/data-breaches/feed/", "rss", ("breach")),
        S("redpacketsecurity", "abuse", "rss", "https://www.redpacketsecurity.com/feed/", "rss", ("cve", "leak")),
        S("tg_vulns", "abuse", "html", "https://t.me/s/vulns", "tg_web", ("tg", "leak", "ru")),
        S("habr_ai", "community", "rss", "https://habr.com/ru/rss/hub/artificial_intelligence/", "rss", ("ru", "ai")),
        S("infosec_writeups", "community", "rss", "https://infosecwriteups.com/feed", "rss", ("writeup")),
        S("tg_ai_machinelearning", "community", "html", "https://t.me/s/ai_machinelearning_big_data", "tg_web", ("tg", "ai", "ru")),
        S("tg_denissexy", "community", "html", "https://t.me/s/denissexy", "tg_web", ("tg", "ai", "ru")),
        S("reddit_blueteamsec", "forum", "json", "https://www.reddit.com/r/blueteamsec/.json?limit=25", "reddit_listing", ("reddit", "blue-team")),
        S("reddit_exploitdev", "forum", "json", "https://www.reddit.com/r/ExploitDev/.json?limit=25", "reddit_listing", ("reddit", "exploit")),
        S("reddit_purpleteamsec", "forum", "json", "https://www.reddit.com/r/purpleteamsec/.json?limit=25", "reddit_listing", ("reddit", "purple-team")),
        S("t00ls", "forum", "html", "https://www.t00ls.com/", "html_listing", ("cn", "forum")),
        S("acunetix_blog", "security", "rss", "https://www.acunetix.com/blog/feed/", "rss", ("appsec")),
        S("anquanke_news", "security", "html", "https://www.anquanke.com/news", "html_listing", ("cn", "news")),
        S("arch_linux_asa", "security", "rss", "https://security.archlinux.org/advisory/feed.atom", "rss", ("cve", "linux")),
        S("arcticwolf_blog", "security", "rss", "https://arcticwolf.com/feed/", "rss", ("cti")),
        S("arstechnica_security", "security", "rss", "https://arstechnica.com/security/feed/", "rss", ("news")),
        S("bitdefender_labs", "security", "rss", "https://www.bitdefender.com/blog/api/rss/labs/", "rss", ("research")),
        S("chrome_releases_security", "security", "rss", "https://chromereleases.googleblog.com/feeds/posts/default", "rss", ("cve", "browser")),
        S("cisco_security_blog", "security", "rss", "https://blogs.cisco.com/security/feed", "rss", ("cti", "research")),
        S("citizenlab", "security", "rss", "https://citizenlab.ca/feed/", "rss", ("apt", "research")),
        S("csoonline", "security", "rss", "https://www.csoonline.com/feed/", "rss", ("news")),
        S("cybersecuritydive", "security", "rss", "https://www.cybersecuritydive.com/feeds/news/", "rss", ("news")),
        S("elastic_security_labs", "security", "rss", "https://www.elastic.co/security-labs/rss/feed", "rss", ("research")),
        S("github_advisories_api", "security", "json", "https://api.github.com/advisories?per_page=30&sort=published&direction=desc", "ghsa", ("cve", "ghsa")),
        S("habr_infosecurity", "security", "rss", "https://habr.com/ru/rss/hub/infosecurity/", "rss", ("ru", "research")),
        S("habr_news", "security", "rss", "https://habr.com/ru/rss/news/", "rss", ("ru", "news")),
        S("hackmag", "security", "rss", "https://hackmag.com/rss", "rss", ("ru", "research")),
        S("helpnetsecurity", "security", "rss", "https://www.helpnetsecurity.com/feed/", "rss", ("news")),
        S("industrialcyber", "security", "rss", "https://industrialcyber.co/feed/", "rss", ("ics", "news")),
        S("infosecurity_magazine", "security", "rss", "https://www.infosecurity-magazine.com/rss/news/", "rss", ("news")),
        S("malwaretech_blog", "security", "rss", "https://www.malwaretech.com/feed", "rss", ("research")),
        S("microsoft_security_blog", "security", "rss", "https://www.microsoft.com/en-us/security/blog/feed/", "rss", ("research")),
        S("mozilla_advisories", "security", "html", "https://www.mozilla.org/en-US/security/advisories/", "html_listing", ("cve", "browser")),
        S("ncsc_uk", "security", "rss", "https://www.ncsc.gov.uk/api/1/services/v1/all-rss-feed.xml", "rss", ("gov", "cve")),
        S("paloalto_blog", "security", "rss", "https://www.paloaltonetworks.com/blog/feed/", "rss", ("research")),
        S("seclists_fulldisclosure", "security", "rss", "https://seclists.org/rss/fulldisclosure.rss", "rss", ("mailing", "exploit")),
        S("seclists_nmap", "security", "rss", "https://seclists.org/rss/nmap-dev.rss", "rss", ("mailing")),
        S("secrss", "security", "html", "https://www.secrss.com/", "html_listing", ("cn", "news")),
        S("sekoia_blog", "security", "rss", "https://blog.sekoia.io/feed/", "rss", ("research")),
        S("sentinelone_blog", "security", "rss", "https://www.sentinelone.com/blog/feed/", "rss", ("research")),
        S("sihaoyou_feed", "security", "rss", "https://www.4hou.com/feed", "rss", ("cn", "research")),
        S("socradar_blog", "security", "rss", "https://socradar.io/feed/", "rss", ("cti")),
        S("sonatype_blog", "security", "rss", "https://www.sonatype.com/blog/rss.xml", "rss", ("supply-chain")),
        S("sploitus_rss", "security", "rss", "https://sploitus.com/rss", "rss", ("exploit")),
        S("tg_bugbounty", "security", "html", "https://t.me/s/bugbounty", "tg_web", ("tg", "bugbounty")),
        S("tg_hackernews_ru", "security", "html", "https://t.me/s/hackernews_ru", "tg_web", ("tg", "ru")),
        S("tg_kalilinux", "security", "html", "https://t.me/s/kalilinux", "tg_web", ("tg", "tools")),
        S("theregister_security", "security", "rss", "https://www.theregister.com/security/headlines.atom", "rss", ("news")),
        S("ubuntu_usn", "security", "rss", "https://ubuntu.com/security/notices/rss.xml", "rss", ("cve", "linux")),
        S("virustotal_blog", "security", "rss", "https://blog.virustotal.com/feeds/posts/default", "rss", ("malware")),
        S("vuldb_recent", "security", "rss", "https://vuldb.com/?rss.recent", "rss", ("cve")),
        S("xakep_ru", "security", "rss", "https://xakep.ru/feed/", "rss", ("ru", "news")),
    ]


# --- отклонено прогоном (не отдают записи без ключа/логина) ---
# darknetlive                https://darknetlive.com/feed/                http 200, 127811b
# ransomlook_recent          https://www.ransomlook.io/api/recent         http 0, err:ReadTimeout: The read operation timed out, 0b
# ransomware_live_recent     https://api.ransomware.live/recentvictims    http 200, 76549b
# codeby_forum               https://codeby.net/forums/                   http 0, err:ConnectTimeout: timed out, 0b
# anti_malware_ru            https://www.anti-malware.ru/rss.xml          http 0, err:ConnectTimeout: timed out, 0b
# bdu_fstec                  https://bdu.fstec.ru/rss/vulxml              http 0, err:ConnectTimeout: timed out, 0b
# cnews_security             https://www.cnews.ru/inc/rss/news.xml        http 0, err:ConnectTimeout: timed out, 0b
# freebuf_feed               https://www.freebuf.com/feed                 http 405, 2569b
# kaspersky_ru_blog          https://www.kaspersky.ru/blog/feed/          http 0, err:ConnectTimeout: timed out, 0b
# securitylab_rss            https://www.securitylab.ru/rss/all.xml       http 404, 17877b
# seebug_paper               https://paper.seebug.org/rss/                http 0, err:ConnectTimeout: _ssl.c:989: The handshake operation timed out, 0b