每日安全资讯（2026-10-01）

• SecWiki News
  • SecWiki News 2026-09-30 Review
• Private Feed for M09Ic
  • bolucat released 202610010006 at bolucat/Archive
  • chainreactors released v1.0.0-rc7 at chainreactors/cyber-harness
  • anthropics released v2.1.286 at anthropics/claude-code
  • gh0stkey starred Calcium-Ion/AstrLink
  • timwhitez contributed to timwhitez/aegis-agent
  • Mr-xn starred togg53192-cmd/jailbreaks
  • CHYbeta starred dinosn/libheif-cve-2026-84383-lab
  • killeven starred HexRaysSA/ida-mcp
  • Gaurav-Gosain released v0.8.2 at Gaurav-Gosain/tuios
  • itm4n released 2026.09.30-1 at itm4n/PrivescCheck
  • kpcyrd forked kpcyrd/coreutils from uutils/coreutils
  • liamg contributed to infracost/cli
  • Fplyth0ner-Combie starred Xaaaa-bip/GodzillaSuper
  • CHYbeta starred 0sec-labs/0
  • ManassehZhou starred immich-app/immich
  • future-architect released v0.41.0 at future-architect/vuls
  • ourren starred guinucool/pbst2027
  • pydantic released v1.107.7 at pydantic/pydantic-ai
  • esrrhs contributed to esrrhs/fakecc
• A Few Thoughts on Cryptographic Engineering
  • Is sandboxing sufficient to contain rogue agents?
• Recent Commits to cve:main
  • Update Wed Sep 30 12:13:39 UTC 2026
• Microsoft Security Blog
  • ​​Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026
  • Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
• Doonsec's feed
  • 控制台管道注入技术绕过EDR
  • 一个80年代的反毒项目，如何把全美车牌数据汇成联邦监控库
  • 工具分享 | 密探2.0体验：把资产收集、测绘和扫描集中到一个工具里
  • 网安利器 | Burp Suite + MCP：让AI参与Web安全测试
  • 10月17日专题会议：青年学者学术会议
  • 突发！京东晋升名单国庆前公示了，有人涨了700块
  • 懵了！给员工的中秋福利竟然是一个钓鱼邮件演练。网友：这安全部门为了证明自己的存在感，也是够拼的。
  • Next.js CVE-2026-94545 分析：next/og 里没转义的引号，和一个没讲完的 RCE
  • 国庆专享，节后删
  • AI安全的形式化验证与可证明安全
  • AI Agent 进入网络安全之后，渗透测试开始有点不一样了
  • 【AI安全】后门等到“有理由”才动手：OPBackdoor 怎样藏在合理回答里
  • 对1000份网安简历的分析
  • 网络安全应急响应专家智能体更新：6 大能力域
  • G.O.S.S.I.P 阅读推荐 2026-09-30 坏宝宝TV？
  • 【成果分享】一张开发者证书，如何绕过 App Store？我们揭开了 iPhone“魔改版”App 背后的灰色产业
  • MazeSec-lian
  • 江西神舟2026年国庆节放假安排
  • 从一个 Schema 名到 RCE：n8n 原型污染漏洞（CVE-2026-33696）分析
  • 花了三小时进山打野，收获颇丰
  • (9.9分) CVE-2026-102911：pi-llm-wiki MCP工具命令注入RCE
  • AgentTeams Dashboard v1.2.5：68 个 commit，把「自己更新自己」做进去了
  • 网络安全警示｜私自VPN翻墙必被查！多校真实处分案例警醒全体同学
  • SQL 注入到底是怎么操作的？
  • 智能取证新范式！取证智能体制作与实战应用研修班报名启动
  • 国庆服务不“打烊”，美亚柏科技术支持7*24小时在线！
  • Hx0 鹰眼 0930 更新：把 Agent 磨稳，Pro 永久会员国庆 79 元
  • 仅125元，软硬件全开源，国庆假期 DIY一台桌面激光雕刻机，支持树叶、皮革、木头、塑料、卡纸，给你的拓竹 3D 打印手办加盖专属 Logo
  • 秦安：国庆前夕，两大国发出核警告！日本妄谈拥核，中俄亮出底线，绝非危言耸听
  • 秦安：惊魂险情！以色列恶行，正在遭遇超级风险，飞机副驾驶试图让客机坠落
  • 从一条审批API请求，挖掘严重漏洞
  • 2026年第一场前沿技术闭门会圆满举办
  • 【安全圈】全新幽灵BTR漏洞曝光：绕过主流防御窃取Linux内核高权哈希
  • 【安全圈】OpenSSL修复DTLS高危漏洞：重传逻辑缺陷致未加密堆内存外泄
  • 【安全圈】Citrix NetScaler高危双零日遭在野利用：Root权限与隧道木马曝光
  • 九月安全大事件盘点：AI 智能体「抱团越界」，千亿防线遭遇多线告急
  • 卡扣
  • 【高危漏洞预警】Next.js ImageResponseRCE漏洞CVE-2026-94545
  • 注意！国庆长假，这些计算机病毒正在流行！
  • 中央网信办部署开展“清朗·整治短视频虚假人设乱象”专项行动
  • 专题·原创 | 人工智能时代电信运营商漏洞安全治理体系重构与实践
  • 关注 | 中央网信办部署开展“清朗·整治短视频虚假人设乱象”专项行动
  • 专家解读 | 刘颖：分类施策精准保护xa0筑牢网络护苗屏障
  • CNCERT | 关于新型僵尸网络FlyLegit大范围传播的风险提示
  • 观点 | 防范前沿人工智能技术失控风险
  • 评论 | 划清侵权边界优化营商网络环境
  • 当 AI 学会"翻墙"：从 OpenAI 接连暂停训练，聊聊 AI 安全到底在防什么
  • 从第一道 Flag，开启你的网安之旅｜中国民航大学 CTF 新生赛来啦！
  • 安全弘毅大讲堂|2026年国家网络安全宣传周专题讲座顺利开展
  • 9月网安执法与攻防大事记：近5000万的罚单，监管信号已非常明确
  • 个人信息保护"分层监管"成型：大型企业戴上紧箍，小微企业松了绑
  • 七十七载山河庆华诞 四叶草安全以AI之盾 守护数字中国 祝祖国繁荣昌盛
  • 捷普国庆节放假保障通知请查收！
  • 【漏洞情报】2026年9月车联网漏洞态势综述
• Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
  • TamarinAgent
  • honeypot-stuff
  • keycloak v26.7.5
  • pcybox-attackgraph
  • Formbook-Payload-Extraction-XOR-Decryption-Net-Assembly-Analysis
  • MMSkillRisk
  • clients web-v2026.9.1
  • TRACE
  • DARWIN
  • opencti v7.260930.0
  • jd
  • PIForge
  • Koi
  • wraithwall-toolkit
  • netbox v4.7.2
  • Codeguard-copilot
  • avdroot
  • oss
  • prowler v5.44.0
  • ddc
  • dj
  • dae
  • redStackPRO
  • btr
  • openssl openssl-4.0.3
• Didier Stevens
  • Update: search-for-compression.py Version 0.0.8
• Horizon3
  • Horizon3’s Tales from the Trenches: Anthropic’s Mythos and Rejetto HFS
• Reverse Engineering
  • Wow64 implementation details: How is Wow64 implemented in Windows 11 25H2
  • Loading windows PE .dlls on linux
  • Gigabyte kernel driver LPE
  • HANDLE Duplication internals : What happens behind the scenes when you call kernelbase! DuplicateHandle( )
  • Deep dive into the object creation flow in Windows - PART 4: Handle table internals.
  • ASM BOTS: Core War where every warrior is raw 8086 machine code you can ndisasm, with an in-browser debugger (step back 256, watches, trace). Open source, MIT
  • Deep dive into the object creation flow in Windows -PART1 : Allocation and Pre-Initialization
  • Deep dive into the object creation flow in Windows - PART 3: Post-initialization and Name Lookup
  • Deepdive into the object creation flow in Windows -PART 2 : access check internals
• Malwarebytes
  • Hackers steal protective order and foster care records from Arizona courts
  • Your car’s app could be telling Big Tech who you are and where you go
• HackerNews
  • 俄罗斯 Star Blizzard 以虚假活动邀请攻击 100 多个组织，投递后门
  • 自动化 AI 智能体被用于入侵网络安全非营利组织 DIVD
  • 定制 ChatGPT 推动ClickFix攻击部署 RAT 恶意软件
  • 两名前美国空军成员因 BEC 攻击被判入狱
  • 新型 Spectre-v2 BTR 攻击绕过现有防御泄露 Linux 内存
  • 法国税务数据因员工密码被盗被窃，七周未被发现
• 奇客Solidot–传递最新科技情报
  • PS5 越狱取得突破
  • CNNIC 称中国生成式 AI 用户超 7 亿
  • 新奥声称实现氢硼聚变反应突破
  • 美国佛蒙特州通过家庭电池储能网络应对气候变化
  • 500 光年外的一颗巨行星探测到水、甲烷和氨
  • Windows 11 原生支持 Linux 容器
  • 日本人身高增长停滞
  • 日本老龄化达到 29.4%， 一人家庭比例首次超过 4 成
  • 夜空每年增亮 10%
  • FBI 与荷兰合作逮捕 ShinyHunters 组织领导成员
  • AMD CEO 苏姿丰成为清华经管学院顾问委员会委员
  • 加州禁止公职人员发行模因币
• Wallarm
  • AI Governance on AWS: The Runtime Control Loop: AI Governance on AWS: Four Functions, One Loop, and a Deadline That Already Passed
• 360 Netlab Blog - Network Security Research Lab at 360
  • AI安全专题周报（20260930）
  • 金融行业网络安全监测月报(202609)
• Over Security
  • US sanctions 10 over ATM malware scheme tied to Tren de Aragua
  • Automakers routinely share personally identifiable connected-car data with third parties, report says
  • Russian state hackers use new RedFlick technique to push malware
  • [Phishing Kit] 'Israel' Outlook Web App credentials stealer
  • How phishing kits uses Telegram
  • Phishing kit using Google sheet to exfiltrate stolen data
  • [Phishing kit] Scammer vs Scammer - backdoored phishing kit
  • How-to use StalkPhish.io
  • [Use case] Using Phishing-Kit-Yara-Rules project for phishing kits detection and triage
  • Several domain names, one protected redirector, one phishing campaign
  • Using PhishingKit-Yara-Rules with ClamAV
  • [Phishing kit] 'Moha' kit, targeting DEWA suppliers
  • [Phishing kit] M&T Bank - Telegram exfiltration kit, without any Telegram link
  • DIVD says Zammad zero-days enabled AI-driven network breach
  • After reports on suicide deaths, Pentagon puts Cyber Command on notice
  • Google: Vulnerability disclosures double to 10,000 per month as AI fuels exploitation
  • Over 543,000 valid credentials exposed in public GitHub repositories
  • Agenti AI, il rischio è nel perimetro: cosa insegnano gli ultimi incidenti
  • Flash Notice: Brand Impersonation & App-Store Fraud: GTA 6: Unreleased Title Hype-Jacking
  • CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
  • Oxygen Forensics, il caso USA riapre il rischio supply chain nel software critico
  • Cisco warns of new SD-WAN zero-day exploited in attacks
  • RemusStealer: EtherHiding In Hidden Windows
  • Mobile malware warning from Ukrainian researchers includes iPhone exploit kit
  • AI's Third Wave: Coworkers Break the Security Model That Worked for Agents
  • Trump inaugura l’era della “Super Intelligence”: la sicurezza dell’AI passa alle Big Tech
  • Microsoft to block Entra ID script injection attacks starting October
  • OpenAI AI Models Accessed Australian Government Systems Without Authorization
  • TeamViewer urges users to patch severe flaws “as soon as possible”
  • Medela - 423,947 breached accounts
  • Russian FSB-linked hackers scale up phishing attacks against Ukraine supporters
  • Bitget hacked via zero-day in third-party security products
  • Phishing Response Protocol: 3 Essential SOC Steps Powered by ANY.RUN’s Latest Product Updates
  • China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
  • OpenSSL Flaw Could Expose Heap Memory and Crash Applications
  • Come gestire il debito tecnico tra AI e sicurezza aziendale
  • NordPass Business: la gestione centralizzata delle credenziali con crittografia xChaCha20 e integrazione SIEM per le aziende
  • Sovranità digitale: perché l’Europa si muove contro la dipendenza dal software statunitense
  • GitLost: così la prompt injection negli agenti AI può esfiltrare repository privati
  • Microsoft is rolling out Linux container support to WSL
• ICT Security Magazine
  • Responsabilità e rischio nei sistemi di IA: il ruolo del contratto tra AI Act e NIS2
  • Star Blizzard passa alla tecnica RedFlick: oltre 100 organizzazioni prese di mira con finti inviti a eventi
  • Branch Target Reuse: la variante di Spectre-v2 che sfrutta i motori JIT su Intel, AMD e Arm
• Schneier on Security
  • I Want Better Reporting on AI Genie Behavior
• SANS Internet Storm Center, InfoCON: green
  • ISC Stormcast For Wednesday, September 30th, 2026 https://isc.sans.edu/podcastdetail/10116, (Wed, Sep 30th)
• Max Kersten
  • My impressions of BruCon 0x12
• The Hacker News
  • Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
  • Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks
  • Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
  • Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures
  • Know Your Enemy: Browser-Based Attack Techniques in 2026
  • AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
  • US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
  • Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
  • OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted
  • Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution
• Have I Been Pwned latest breaches
  • Medela - 423,947 breached accounts
• GRAHAM CLULEY
  • Pentagon personnel database breach exposes personal data of millions
• Security Affairs
  • WatchGuard fixes critical Fireware OS flaw allowing remote code execution
  • Oxygen Forensics, A Russian-run forensics firm spent a decade inside European police departments
  • Attackers Abuse ChatGPT Custom GPTs to Deploy a Full-Featured RAT
  • U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog
  • WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign
• TorrentFreak
  • LaLiga Wants Major VPNs on EU Piracy Watch List Over Affiliate Marketing
• www.theregister.com - Articles
  • Irony alert: OpenAI whines that Chinese model stole its special IP that it stole from everybody else
  • 16-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rows
  • More than half of UK businesses lack confidence in basic cyber skills
  • UK rail cops' £320K face-scanning spree nets zero matches
  • Spectre bug is back, this time to haunt JIT engines
• Tor Project blog
  • New Release: Tails 7.14
• SEI Blog
  • Choosing the Hardware That Will Put DARPA MOCHA’s Compilers to the Test
• Deeplinks
  • Victory! California Appeals Court Refuses to Revive Surveillance Tech CEO’s Meritless Lawsuit Against Journalist
  • 📱 Hey Siri, How Do I Limit AI Data Access? | EFFector 38.17
• KitPloit - PenTest Tools!
  • TamarinAgent
  • honeypot-stuff
  • keycloak v26.7.5
  • pcybox-attackgraph
  • Formbook-Payload-Extraction-XOR-Decryption-Net-Assembly-Analysis
  • MMSkillRisk
  • clients web-v2026.9.1
  • TRACE
  • DARWIN
  • opencti v7.260930.0
  • jd
  • PIForge
  • Koi
  • wraithwall-toolkit
  • netbox v4.7.2
  • Codeguard-copilot
  • avdroot
  • oss
  • prowler v5.44.0
  • ddc
  • dj
  • dae
  • redStackPRO
  • btr
  • openssl openssl-4.0.3
• Security Weekly Podcast Network (Audio)
  • Defending at AI Speed as Quantum Threats and AI Policies Won't Save You - Nolan Karpinski - BSW #467