# 每日安全资讯（2026-09-07） - SecWiki News - [ ] [SecWiki News 2026-09-06 Review](http://www.sec-wiki.com/?2026-09-06) - Recent Commits to cve:main - [ ] [Update Sun Sep 6 12:01:06 UTC 2026](https://github.com/trickest/cve/commit/1f7e926b0d17962f5b781ef47ed9a96b9dba26bd) - CXSECURITY Database RSS Feed - CXSecurity.com - [ ] [Windows Defender (MsMpEng.exe) Race Condition](https://cxsecurity.com/issue/WLB-2026090007) - [ ] [ProFTPD mod_sql post-authentication SQLi RCE](https://cxsecurity.com/issue/WLB-2026090006) - [ ] [Tenable Nessus 10.12.1 SQL Injection](https://cxsecurity.com/issue/WLB-2026090005) - [ ] [C-MOR 6.0104 Directory Traversal](https://cxsecurity.com/issue/WLB-2026090004) - [ ] [EVerest 2025.9.0 DoS](https://cxsecurity.com/issue/WLB-2026090003) - [ ] [FreePBX 17.0.2 Remote Code Execution (RCE)](https://cxsecurity.com/issue/WLB-2026090002) - [ ] [lnrbda - SQL Injection vulnerability](https://cxsecurity.com/issue/WLB-2026090001) - Doonsec's feed - [ ] [AUTOSAR 内存分区和MPU关系讲解](https://mp.weixin.qq.com/s/auiNP3F8Tww1E9QgUJWThw) - [ ] [营业执照（统一信用代码）的真伪识别程序设想（三）](https://mp.weixin.qq.com/s/uWRCd5GU3pqeLfUNTCOEgQ) - [ ] [9月4日 威胁情报IOC分享](https://mp.weixin.qq.com/s/880A6VTB5aPrlBZ1x-pW7w) - [ ] [浏览器渗透测试神器降临！这款插件让安全检测效率提升十倍](https://mp.weixin.qq.com/s/VZ3Xq-OffepJFVAw-GH_tg) - Private Feed for M09Ic - [ ] [WAY29 starred ccxt/ccxt](https://github.com/ccxt/ccxt) - [ ] [bolucat released 202609062215 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202609062215) - [ ] [xgo-dev released v1.0.2 at xgo-dev/llgo](https://github.com/xgo-dev/llgo/releases/tag/v1.0.2) - [ ] [Mr-xn starred KJGX66F/usque-custom-pro](https://github.com/KJGX66F/usque-custom-pro) - [ ] [ourren starred SeaOf0/dsh-redteam-model](https://github.com/SeaOf0/dsh-redteam-model) - [ ] [Fplyth0ner-Combie starred fankh/vulnerability-poc](https://github.com/fankh/vulnerability-poc) - [ ] [esrrhs contributed to esrrhs/fakecc](https://github.com/esrrhs/fakecc/pull/63) - [ ] [wuhan005 made this repository public](https://github.com/wuhan005/LightStick) - [ ] [Safe3 forked Safe3/privacy-filter from packyme/privacy-filter](https://github.com/Safe3/privacy-filter) - [ ] [timwhitez starred ADScanPro/adscan](https://github.com/ADScanPro/adscan) - [ ] [Fplyth0ner-Combie starred s-b-repo/rustsploit](https://github.com/s-b-repo/rustsploit) - [ ] [anthropics released v2.1.263 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.263) - [ ] [niudaii starred Ji4n1ng/OpenInTerminal](https://github.com/Ji4n1ng/OpenInTerminal) - Light Cube - [ ] [仅用 8 块钱成本，无损点亮许嵩演唱会荧光棒](https://github.red/lightstick/) - Kitploit - [ ] [AllTools v1.7](https://kitploit.com/en/posts/github-zodiacon-alltools-v17) - [ ] [Claude-Skills-Governance-Risk-and-Compliance v1.9.0](https://kitploit.com/en/posts/github-sushegaad-claude-skills-governance-risk-and-compliance-v190) - [ ] [Crow-Eye v0.13.0](https://kitploit.com/en/posts/github-ghassan-elsman-crow-eye-0130) - [ ] [ghidra-firmware-utils](https://kitploit.com/en/tools/github/al3xtjames/ghidra-firmware-utils) - [ ] [efiSeek](https://kitploit.com/en/tools/github/dsecurity/efiseek) - [ ] [advisory-database](https://kitploit.com/en/tools/github/pypa/advisory-database) - [ ] [xsshunter-express](https://kitploit.com/en/tools/github/mandatoryprogrammer/xsshunter-express) - [ ] [evillimiter](https://kitploit.com/en/tools/github/davidsonrafaelk/evillimiter) - [ ] [zairo](https://kitploit.com/en/tools/github/iamavu/zairo) - [ ] [Aether](https://kitploit.com/en/tools/github/fknmega/aether) - [ ] [deadair v0.8.0](https://kitploit.com/en/posts/github-big-comfy-deadair-v080) - [ ] [OpenPetya v2.0.0](https://kitploit.com/en/posts/github-iss4cf0ng-openpetya-v200) - [ ] [netwatch v0.30.0](https://kitploit.com/en/posts/github-matthart1983-netwatch-v0300) - [ ] [WeblogicScan](https://kitploit.com/en/tools/github/rabbitmask/weblogicscan) - [ ] [PyRIT v1.1.0](https://kitploit.com/en/posts/github-microsoft-pyrit-v110) - [ ] [ublockdnsclient v0.3.1](https://kitploit.com/en/posts/github-ugzv-ublockdnsclient-v031) - [ ] [uBlock v1.74.1b3](https://kitploit.com/en/posts/github-gorhill-ublock-1741b3) - [ ] [ShadowNet v11.1.0](https://kitploit.com/en/posts/github-antisurveillanceagency-shadownet-v1110) - [ ] [Magisk v31.0](https://kitploit.com/en/posts/github-topjohnwu-magisk-v310) - [ ] [darts v0.47.0](https://kitploit.com/en/posts/github-unit8co-darts-0470) - [ ] [goproxy v1.9.1](https://kitploit.com/en/posts/github-elazarl-goproxy-v191) - [ ] [FalconFlank](https://kitploit.com/en/tools/github/msnightmare/falconflank) - [ ] [rewerse-engineering v1.4.0](https://kitploit.com/en/posts/github-bytesizedmarius-rewerse-engineering-v140) - [ ] [modbus-scanner](https://kitploit.com/en/tools/github/k3ystr0k3r/modbus-scanner) - 奇客Solidot–传递最新科技情报 - [ ] [美国最大汽车业协会促国会永久禁止中国汽车进入美国市场](https://www.solidot.org/story?sid=85301) - [ ] [观鸟有益身心健康](https://www.solidot.org/story?sid=85300) - [ ] [养殖三文鱼的 Omega-3 脂肪酸含量大幅下降](https://www.solidot.org/story?sid=85299) - [ ] [2026 年雨果奖公布](https://www.solidot.org/story?sid=85298) - 黑鸟 - [ ] [活了20多年的感染型病毒网络终于被端](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451188465&idx=1&sn=efc122e998a0cb79422a826f140b1120) - 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台 - [ ] [欧洲私营企业首次成功将火箭送入轨道](https://blog.upx8.com/%E6%AC%A7%E6%B4%B2%E7%A7%81%E8%90%A5%E4%BC%81%E4%B8%9A%E9%A6%96%E6%AC%A1%E6%88%90%E5%8A%9F%E5%B0%86%E7%81%AB%E7%AE%AD%E9%80%81%E5%85%A5%E8%BD%A8%E9%81%93) - [ ] [亚马逊货运飞机冲出跑道造成5死5伤](https://blog.upx8.com/%E4%BA%9A%E9%A9%AC%E9%80%8A%E8%B4%A7%E8%BF%90%E9%A3%9E%E6%9C%BA%E5%86%B2%E5%87%BA%E8%B7%91%E9%81%93%E9%80%A0%E6%88%905%E6%AD%BB5%E4%BC%A4) - [ ] [中国“国家反诈AI”APP上线 微信、支付宝小程序同步开放](https://blog.upx8.com/%E4%B8%AD%E5%9B%BD-%E5%9B%BD%E5%AE%B6%E5%8F%8D%E8%AF%88AI-APP%E4%B8%8A%E7%BA%BF-%E5%BE%AE%E4%BF%A1-%E6%94%AF%E4%BB%98%E5%AE%9D%E5%B0%8F%E7%A8%8B%E5%BA%8F%E5%90%8C%E6%AD%A5%E5%BC%80%E6%94%BE) - [ ] [微软杰出工程师称手搓代码时代已结束，Win11 开发模式已迎巨变](https://blog.upx8.com/%E5%BE%AE%E8%BD%AF%E6%9D%B0%E5%87%BA%E5%B7%A5%E7%A8%8B%E5%B8%88%E7%A7%B0%E6%89%8B%E6%90%93%E4%BB%A3%E7%A0%81%E6%97%B6%E4%BB%A3%E5%B7%B2%E7%BB%93%E6%9D%9F-Win11-%E5%BC%80%E5%8F%91%E6%A8%A1%E5%BC%8F%E5%B7%B2%E8%BF%8E%E5%B7%A8%E5%8F%98) - [ ] [微软 Xbox 应用即将登陆 TCL 电视](https://blog.upx8.com/%E5%BE%AE%E8%BD%AF-Xbox-%E5%BA%94%E7%94%A8%E5%8D%B3%E5%B0%86%E7%99%BB%E9%99%86-TCL-%E7%94%B5%E8%A7%86) - [ ] [Anthropic旗下Claude登陆CarPlay平台](https://blog.upx8.com/Anthropic%E6%97%97%E4%B8%8BClaude%E7%99%BB%E9%99%86CarPlay%E5%B9%B3%E5%8F%B0) - 安全分析与研究 - [ ] [后门攻击的深度分析与检测工程](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247497111&idx=1&sn=f8c7939459dd3f9984eb5529a33e422a) - 安全圈 - [ ] [【安全圈】快递网点竟成间谍目标？国安部披露窃密新手段](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078704&idx=1&sn=ee4352edbb6c93e7ec0c35269c095208) - [ ] [【安全圈】联通反诈大模型揪出涉诈 VOIP 黑盒](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078704&idx=2&sn=5aa23ade39ae4a4afd6205c221931155) - [ ] [【安全圈】法国医院因泄露 72.7 万人数据被罚款 50 万欧元](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078704&idx=3&sn=47920124b9e01ac1687a4c07d52ea558) - 极客公园 - [ ] [判断用不用你的软件，Agent 只需 500 个 Token](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653113214&idx=1&sn=d6672f7f11292648a5e6b6732fe700bd) - [ ] [造物100#05｜给 AI 发外设，戴森派摄像头进嘴、绿联给充电宝开了扇窗](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653113213&idx=1&sn=7fce2c166081d3e6abef8531fbb94420) - [ ] [传 iPhone 18 Pro 仅涨价 100 美元；Kimi、MiniMax 将在天猫开店；OpenAI 回应 Agent 攻击德国网站 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653113208&idx=1&sn=9e1f7a7a30522b1f04454ea5f1262a3e) - Medi0cr1ty - [ ] [XProxy 的设计与思考](https://mp.weixin.qq.com/s?__biz=Mzg5ODE3NTU1OQ==&mid=2247484531&idx=1&sn=077a1759d360371f032c5c9b4112f9a0) - OnionSec - [ ] [我面了一个半小时的好岗位，然后发现：妈的，是个火坑](https://mp.weixin.qq.com/s?__biz=MzUyMTUwMzI3Ng==&mid=2247485958&idx=1&sn=be8487b2f2683620f32a9fa4da4962a2) - ICT Security Magazine - [ ] [VM escape su VMware Workstation e Fusion: cosa cambia per i laboratori di analisi malware](https://www.ictsecuritymagazine.com/notizie/vm-escape-vmware-workstation/) - [ ] [Falle PaperCut sfruttate contro scuole e atenei: dal server di stampa al dominio Active Directory](https://www.ictsecuritymagazine.com/notizie/vulnerabilita-papercut-attacchi-scuole-universita/) - [ ] [Zero-day Magento e Adobe Commerce: StyleSmuggler sfruttato attivamente, Adobe non ha ancora rilasciato la patch](https://www.ictsecuritymagazine.com/notizie/zero-day-magento-stylesmuggler-adobe-commerce/) - [ ] [MikroTik RouterOS: la catena “MikroTrick” è sfruttata attivamente, patch urgente](https://www.ictsecuritymagazine.com/notizie/mikrotik-mikrotrick/) - [ ] [Panzer, il nuovo ransomware-as-a-service che ha già colpito due aziende italiane](https://www.ictsecuritymagazine.com/notizie/panzer-ransomware-vittime-italiane/) - cavallette - [ ] [A/I Chiude, Restare Umani – A/I Shuts Down, Stay Human](https://cavallette.noblogs.org/2026/09/10098) - Troy Hunt's Blog - [ ] [Weekly Update 520: The Unscripted Edition](https://www.troyhunt.com/weekly-update-520/) - Over Security - [ ] [Di ritorno da Lugano](https://roccosicilia.com/2026/09/06/di-ritorno-da-lugano/) - [ ] [Attackers conceal phishing lures using invisible Unicode characters](https://www.bleepingcomputer.com/news/security/attackers-conceal-phishing-lures-using-invisible-unicode-characters/) - [ ] [Google Maps peggiora il traffico?](https://guerredirete.substack.com/p/google-maps-peggiora-il-traffico) - KitPloit - PenTest Tools! - [ ] [AllTools v1.7](https://kitploit.com/en/posts/github-zodiacon-alltools-v17) - [ ] [Claude-Skills-Governance-Risk-and-Compliance v1.9.0](https://kitploit.com/en/posts/github-sushegaad-claude-skills-governance-risk-and-compliance-v190) - [ ] [Crow-Eye v0.13.0](https://kitploit.com/en/posts/github-ghassan-elsman-crow-eye-0130) - [ ] [ghidra-firmware-utils](https://kitploit.com/en/tools/github/al3xtjames/ghidra-firmware-utils) - [ ] [efiSeek](https://kitploit.com/en/tools/github/dsecurity/efiseek) - [ ] [advisory-database](https://kitploit.com/en/tools/github/pypa/advisory-database) - [ ] [xsshunter-express](https://kitploit.com/en/tools/github/mandatoryprogrammer/xsshunter-express) - [ ] [evillimiter](https://kitploit.com/en/tools/github/davidsonrafaelk/evillimiter) - [ ] [zairo](https://kitploit.com/en/tools/github/iamavu/zairo) - [ ] [Aether](https://kitploit.com/en/tools/github/fknmega/aether) - [ ] [deadair v0.8.0](https://kitploit.com/en/posts/github-big-comfy-deadair-v080) - [ ] [OpenPetya v2.0.0](https://kitploit.com/en/posts/github-iss4cf0ng-openpetya-v200) - [ ] [netwatch v0.30.0](https://kitploit.com/en/posts/github-matthart1983-netwatch-v0300) - [ ] [WeblogicScan](https://kitploit.com/en/tools/github/rabbitmask/weblogicscan) - [ ] [PyRIT v1.1.0](https://kitploit.com/en/posts/github-microsoft-pyrit-v110) - [ ] [ublockdnsclient v0.3.1](https://kitploit.com/en/posts/github-ugzv-ublockdnsclient-v031) - [ ] [uBlock v1.74.1b3](https://kitploit.com/en/posts/github-gorhill-ublock-1741b3) - [ ] [ShadowNet v11.1.0](https://kitploit.com/en/posts/github-antisurveillanceagency-shadownet-v1110) - [ ] [Magisk v31.0](https://kitploit.com/en/posts/github-topjohnwu-magisk-v310) - [ ] [darts v0.47.0](https://kitploit.com/en/posts/github-unit8co-darts-0470) - [ ] [goproxy v1.9.1](https://kitploit.com/en/posts/github-elazarl-goproxy-v191) - [ ] [FalconFlank](https://kitploit.com/en/tools/github/msnightmare/falconflank) - [ ] [rewerse-engineering v1.4.0](https://kitploit.com/en/posts/github-bytesizedmarius-rewerse-engineering-v140) - [ ] [modbus-scanner](https://kitploit.com/en/tools/github/k3ystr0k3r/modbus-scanner) - SANS Internet Storm Center, InfoCON: green - [ ] [Critical MikroTik Vulnerability - Patch Now, (Sun, Sep 6th)](https://isc.sans.edu/diary/rss/33314) - The Hacker News - [ ] [Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication](https://thehackernews.com/2026/09/attackers-hijack-mikrotik-routers.html) - [ ] [Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner](https://thehackernews.com/2026/09/four-revstealer-linked-modules-disable.html) - TorrentFreak - [ ] [Online Piracy Costs the UK 9,400 Nurses a Year, If Pirates Keep Their Word](https://torrentfreak.com/online-piracy-costs-the-uk-9400-nurses-a-year-if-pirates-keep-their-word/) - Security Affairs - [ ] [Your MikroTik Router May Already Be Compromised: Look for SSH User “-2”](https://securityaffairs.com/198538/security/your-mikrotik-router-may-already-be-compromised-look-for-ssh-user-2.html) - [ ] [AI Agents Hijacked German Wiki to Cheat, OpenAI Delayed Disclosure](https://securityaffairs.com/198524/ai/ai-agents-hijacked-german-wiki-to-cheat-openai-delayed-disclosure.html) - [ ] [SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 113](https://securityaffairs.com/198522/security/security-affairs-malware-newsletter-round-113.html) - [ ] [Security Affairs newsletter Round 593 by Pierluigi Paganini – INTERNATIONAL EDITION](https://securityaffairs.com/198495/breaking-news/security-affairs-newsletter-round-593-by-pierluigi-paganini-international-edition.html)
每日安全资讯（2026-09-07）