每日安全资讯（2026-10-03）

• Sploitus.com Exploits RSS Feed
  • Exploit for CVE-2026-102282
  • Exploit for CVE-2026-15989
  • relapse exploit
  • cheesy-p4u-decomp exploit
  • Recruit-SSRF-LFI-SQL-Injection-Admin-Takeover-THM- exploit
  • Recruit-SSRF-LFI-SQL-Injection-Admin-Takeover-THM exploit
  • Cloud-Penetration-Testing-Guide exploit
  • VORNEX-MTOOL exploit
  • CVE-2024-29671-POC exploit
  • CVE-2017-5223 exploit
  • DolibabyPhp exploit
  • CVE-2022-30525 exploit
  • exploit-CVE-2020-5844
  • Emojify exploit
  • bcm4360-wpa3 exploit
  • CVE-2026-53921-PoC-Exploit
  • rekor exploit
  • tippa-my-tongue exploit
  • CVE-2018-14847 exploit
  • CVE-2014-2383-LFI-to-RCE-Escalation exploit
  • CVE-2024-29868 exploit
  • CVE-2024-9474 exploit
  • CVE-2026-44706 exploit
• Private Feed for M09Ic
  • niudaii starred Niko1221/Strata
  • bolucat released 202610030002 at bolucat/Archive
  • anthropics released v2.1.288 at anthropics/claude-code
  • huoji120 starred SakanaAI/text-to-lora
  • timwhitez starred CopilotKit/OpenDots
  • wuhan005 starred sayrud/sayrud
  • mgeeky starred rkinas/basal
  • esrrhs contributed to esrrhs/spp
  • CHYbeta starred facebookincubator/Zurp
  • esrrhs contributed to esrrhs/fakelua
  • kpcyrd contributed to agerasev/ringbuf
  • Gaurav-Gosain released v0.8.5 at Gaurav-Gosain/tuios
  • pydantic released v2.53.0 at pydantic/pydantic-ai
• Der Flounder
  • Copying macOS login keychains to different Macs on macOS Tahoe 26.4 and later
• SecWiki News
  • SecWiki News 2026-10-02 Review
• Recent Commits to cve:main
  • Update Fri Oct 2 12:33:02 UTC 2026
• obaby 𝐢‍𝐧⃝ void
  • 再谈 Carplay 播放视频
• Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
  • ZoneClaw-code
  • cowrie v3.1.0
  • proxy-workbench
  • C2SP
  • ndaal_public_auditd
  • PEASS-ng v20261002-82d9fad1
  • HashcatRosetta
  • advisory
  • vmp-devirt
  • semgrep v1.179.0
  • MEA-Bench
  • refusal-relocates
  • InfraPulse-Core
  • frida v17.20.0
  • ai-agent-gateway
  • OWASP-Top-10-Neocloud-and-AI-Data-Center-Security-Risks
  • cortex
  • Kousei
  • skyvern v1.0.55
  • ps-ppl-bypass
• Horizon3
  • Horizon3 + CrowdStrike: Prove. Prioritize. Verify.
• The Trail of Bits Blog
  • SequenceHash: multihashing for the rest of us
• Hexacorn
  • EtwCheckCoverage API
• Whwlsfb's Tech Blog
  • hacked by trenggalek6etar
• GuidePoint Security
  • AI Governance: Between the Prompt and the Policy
• 白帽Wiki - 一个简单的wiki
  • [2026]sm120上sglang的fp8的triton内核的矩阵乘性能问题
• Over Security
  • Judge dismisses spyware case brought by Salvadoran journalists targeted with Pegasus
  • Bipartisan backlash to ALPRs grows as two high-profile bills are introduced
  • Canva hacked via vendor's Salesforce instance; Other customers affected as well (1) - DataBreaches.Net
  • Frontline Education breach exposes school district employee data
  • Warlock ransomware breach SharePoint in water, telecom operator attacks
  • GitLab warns of critical RCE vulnerability in AI Gateway service
  • Sintesi riepilogativa delle campagne malevole nella settimana del 26 settembre – 2 ottobre
  • Agenti OpenAI, è escalation di incidenti: che succede ora
  • US sanctions Tren de Aragua gang members in ATM hacks crackdown
  • Quella colpevole ricerca del colpevole
  • 'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries
  • Mississippi mayor says ransomware incident led city to shut down systems
  • The EDR blind spot: 3 ways browser attacks evade endpoint telemetry
  • Custom GPT malevoli: così ChatGPT diventa il primo anello di un attacco ClickFix
  • Dell asks admins to patch max severity CSM flaws as soon as possible
  • Sicurezza per agentic AI: la gestione dei dati cloud
  • Cyber security, tre bandi tra Italia e UE: fondi per PMI, CRA e innovazione
  • Pwn2Own Ireland 2025 – Home Assistant
  • Proton Pass Plus, password manager in promozione: crittografia zero-knowledge, alias email e monitoraggio del dark web al 50% di sconto
  • Microsoft’s X account hacked in crypto pump-and-dump scheme
  • Trattamenti per finalità di Polizia: come governare la circolazione dei dati
  • Anatomía de BraZetsu: Cómo los cibercriminales abastecen el ecosistema clandestino
• ICT Security Magazine
  • Conservazione dei dati di traffico: il vincolo che torna da Bruxelles non è il termine, è la struttura dell’archivio
  • La formazione in cybersecurity funziona? Efficacia percepita e cambiamenti comportamentali
• SANS Internet Storm Center, InfoCON: green
  • ISC Stormcast For Friday, October 2nd, 2026 https://isc.sans.edu/podcastdetail/10120, (Fri, Oct 2nd)
• Schneier on Security
  • Friday Squid Blogging: EU is Trying to Fight Unregulated Squid Fishing
  • Unidentified Flock Cameras in Florida
  • How American Political Campaigns Are Using AI—and What They’re Spending on the Tools
• Future of Tech and Security: Strategy & Innovation with Raffy
  • The Security Operations Market Is Moving From Narrative To Execution
• Deeplinks
  • Site-Blocking Will Not Defend IP, No Matter the Bill’s Name
  • Congress Has Another Site-Blocking Bill, And This One Targets VPNs
  • Victory! Court Rejects Government Effort to Dismiss Social Media Surveillance Lawsuit
  • Ola Bini Ordered to Leave Ecuador Under Obscure Accusations
• Security Affairs
  • U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog
  • AI Agents Attempt SQL Injection While Searching Government Data
  • Investigators trace an AI agent ‘s path from research task to reconnaissance
  • U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog
• www.theregister.com - Articles
  • OpenAI alerts 100+ orgs that its 'misaligned models' attempted to break in - or worse
  • Californian accused of shipping $300M worth of Nvidia chips to China without Uncle Sam’s approval
  • OpenAI's wandering AI agents earn it a California subpoena
  • Fortinet sounds the alarm over actively exploited FortiMail zero-day
• The Hacker News
  • GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
  • Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
  • Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
  • OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling
  • Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the Report
  • Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools
  • Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
• TorrentFreak
  • Alleged Kemo IPTV Operator Faces Criminal Prosecution in Dubai Following ACE Complaint
• KitPloit - PenTest Tools!
  • ZoneClaw-code
  • cowrie v3.1.0
  • proxy-workbench
  • C2SP
  • ndaal_public_auditd
  • PEASS-ng v20261002-82d9fad1
  • HashcatRosetta
  • advisory
  • vmp-devirt
  • semgrep v1.179.0
  • MEA-Bench
  • refusal-relocates
  • InfraPulse-Core
  • frida v17.20.0
  • ai-agent-gateway
  • OWASP-Top-10-Neocloud-and-AI-Data-Center-Security-Risks
  • cortex
  • Kousei
  • skyvern v1.0.55
  • ps-ppl-bypass
• Security Weekly Podcast Network (Audio)
  • RAM, Muse, CloudSyncD, Springsteen, Software, Persistence, and Michael Jenkins - Michael Jenkins - SWN #621