# 每日安全资讯（2026-09-13） - SecWiki News - [ ] [SecWiki News 2026-09-12 Review](http://www.sec-wiki.com/?2026-09-12) - Private Feed for M09Ic - [ ] [bolucat released 202609122224 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202609122224) - [ ] [anthropics released v2.1.270 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.270) - [ ] [mgeeky starred debpalash/VoiceStudio](https://github.com/debpalash/VoiceStudio) - [ ] [Mel0day starred 0xBakeer/deepseek-v41-flash-spark](https://github.com/0xBakeer/deepseek-v41-flash-spark) - [ ] [timwhitez contributed to timwhitez/agent-sdk-golang](https://github.com/timwhitez/agent-sdk-golang/pull/141) - [ ] [mgeeky starred MG1937/ASC](https://github.com/MG1937/ASC) - [ ] [gh0stkey starred jlcodes99/cockpit-tools](https://github.com/jlcodes99/cockpit-tools) - [ ] [xgo-dev released v1.0.3 at xgo-dev/llgo](https://github.com/xgo-dev/llgo/releases/tag/v1.0.3) - [ ] [WAY29 starred calesthio/OpenMontage](https://github.com/calesthio/OpenMontage) - [ ] [esrrhs contributed to esrrhs/fakecc](https://github.com/esrrhs/fakecc/pull/76) - [ ] [pydantic released v2.43.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v2.43.0) - 先知安全技术社区 - [ ] [游戏逆向-状态类数据查找](https://xz.aliyun.com/news/92818) - Doonsec's feed - [ ] [我认为现阶段所有面向生活的AI应用所面临的困境](https://mp.weixin.qq.com/s/X4naaN6R1XYVM6ApiqOZGA) - [ ] [FDE工程实战02-RAG与Agent系统设计](https://mp.weixin.qq.com/s/ODR042kuhwdiiSNw1dTZKw) - [ ] [暗网付费帖子解锁(第三十一期)](https://mp.weixin.qq.com/s/D4JQCdeiYopf2Y00Nkw9jw) - [ ] [2026年网络空间安全学术会议通知（第二轮）](https://mp.weixin.qq.com/s/rJsdhzGOryAM4y8LLJce5Q) - [ ] [当AI开始“脱缰”：2026年“失控事件”激增的现象、案例与治理反思——以《研究显示：AI逃离用户控制的事件急剧上升》一文为引](https://mp.weixin.qq.com/s/A1kRwZGCQZQK0shzHvIqxQ) - [ ] [通过../../ 提权为管理员](https://mp.weixin.qq.com/s/yw1jHVLyNLRE7wasNkyztw) - [ ] [（教程）发现一个可以在电脑上部署的苹果iOS系统虚拟机](https://mp.weixin.qq.com/s/hq5bDDZI73QqmVM_iWwnDA) - [ ] [针对浏览器Cookie和密码提取的免杀研究](https://mp.weixin.qq.com/s/aakytY07y_hxVuL3-v8P1Q) - [ ] [(9.1分) CVE-2026-89009：WAVLINK 路由器未认证任意文件写入，可远程提权 root](https://mp.weixin.qq.com/s/GoWqN3RysQSnDmBr-rB3xQ) - [ ] [原来今天周六也很开心哟](https://mp.weixin.qq.com/s/5iNGO-7i_IZXIh9cI8R2Sw) - [ ] [厦门四信通信科技 userLogin.do SQL注入漏洞](https://mp.weixin.qq.com/s/8FstaTft_R3QDoKPPyCBew) - [ ] [黑客正积极利用 MikroTik RouterOS 的 MikroTrick 漏洞来完全控制路由器](https://mp.weixin.qq.com/s/lobtV2MSNLA-8Tc-XvHBAQ) - [ ] [勒索警报 | 某江苏电梯制造商遭勒索组织“点名”，内部网络架构细节被公开](https://mp.weixin.qq.com/s/Pz9-YIYXMqSMcEXQ37krOA) - [ ] [【安全圈】黑客操纵数百个AI Agent：26秒破11家企业，夜袭440台服务器](https://mp.weixin.qq.com/s/5CV1XcAtZXSiCRKDzpTxoQ) - [ ] [【安全圈】黑客把Claude玩疯了：全自动扒光180万安卓App密钥机密](https://mp.weixin.qq.com/s/k4o4CiE-UysxfTQ1nP8Idg) - [ ] [【安全圈】GitLab曝CVSS 10满分漏洞：免密盗源码，数小时遭在野狂扫](https://mp.weixin.qq.com/s/4m54ExpMl47aP4hLf-4HXA) - [ ] [CSP-J/S“一等奖”没了？CCF发布等级名称规范，家长最关心的4个问题](https://mp.weixin.qq.com/s/-wF-XjbLCl_vt8vQzy-6lg) - [ ] [实战 ｜ 记一次曲折的钓鱼溯源反制](https://mp.weixin.qq.com/s/dC0Q3gIhiCIFsF2_WB1thA) - [ ] [私钥未失，4000枚比特币（21亿RMB）却凭空蒸发？Liquid事件撕开网安“遮羞布”](https://mp.weixin.qq.com/s/lE4tiEo0kqZ9Aq5E-WUK_g) - [ ] [黄仁勋：网络安全是AI下一个主要场景，物理AI迎来突破](https://mp.weixin.qq.com/s/E3nQRO-v3xBLeMXoD5bbCQ) - [ ] [网安新手推荐官方入门靶场WebGoat，从“一键部署”到“体系化实战”的全攻略](https://mp.weixin.qq.com/s/qRwG55148VY7oOHWfbUoeA) - [ ] [网传：Kimi老大+16人被带走！官方：已报警！网友：蒸馏，澄清一下](https://mp.weixin.qq.com/s/2qstMZxbtCDVuQAfvuBuDA) - [ ] [Anthropic 点名七家中国AI蒸馏，最大的赢家却是张一鸣](https://mp.weixin.qq.com/s/b0Xtolul89JISG58WddpeA) - [ ] [科普：单向镜](https://mp.weixin.qq.com/s/YjXJ4I_G5j1Cki7924WA9A) - [ ] [一次事业单位的web渗透实战](https://mp.weixin.qq.com/s/I6W_lAhfmo4xiR_yF4e2gg) - [ ] [36个PDF红队知识笔记知识总结（附下载链接）](https://mp.weixin.qq.com/s/Z-cnXZKYoHWnef2ZwYQATw) - [ ] [DeepSeek Harness渗透测试版](https://mp.weixin.qq.com/s/KmlvcBkP1CQ1w-7r7Lj6rQ) - [ ] [从“流量”到“词元”：北京“十五五”数字经济规划，藏着未来五年最确定的风口](https://mp.weixin.qq.com/s/btiztbm2QbovL6pr9Rw5cQ) - [ ] [一键绕过CDN获取真实IP](https://mp.weixin.qq.com/s/x6PdNZta6fGVYd0afUBLbA) - [ ] [103种蜜罐 + AI威胁分析：这个开源Honeynet到底有多能打？](https://mp.weixin.qq.com/s/I7C6vNhTOpR0tMH65J0DYA) - [ ] [每周勒索威胁摘要](https://mp.weixin.qq.com/s/yyR9q_TjgugCxsRaD_t9nQ) - [ ] [攻防技战术动态一周更新 - 20260907](https://mp.weixin.qq.com/s/8FrIySQf9nwBTz0eB97XEw) - [ ] [[更新]红队DLL劫持工具v1.3.1：MCP支持，AI对话即可生成](https://mp.weixin.qq.com/s/zijrAB_gKIG74znpDU5c8A) - [ ] [香港大学 Chen Ho 教授组招聘｜大模型驱动安全 × 可信人工智能](https://mp.weixin.qq.com/s/_Q7AXGawtD3hemDl0jBO2A) - [ ] [AI Agent 时代，你的数据谁做主？](https://mp.weixin.qq.com/s/fCvouYjmi__aUSqQgEjV0A) - [ ] [暗网论坛 售卖“iOS 0-Day 利用套件 DarkSw](https://mp.weixin.qq.com/s/5XwytuENV2dTCOxRRxlMnw) - [ ] [暗网论坛 售卖“iOS 0-Day 利用套件 DarkSword & Coruna”](https://mp.weixin.qq.com/s/HMvJ460QfGYYEb8jMdnLoQ) - [ ] [工业AI赋能沙龙 · 网络安全宣传周专场报名启动｜聚焦大模型安全与合规](https://mp.weixin.qq.com/s/j0svev9OjPaeYZPz28hzZw) - [ ] [信息泄露严重，审慎使用大模型服务](https://mp.weixin.qq.com/s/XVH2Xe1Txsm9DK0ZXSLutQ) - [ ] [2026服贸会·重磅发布｜雄安集团与安恒信息共建AI原生安全实验室](https://mp.weixin.qq.com/s/DNrlSZv5Pj5QlqYFtBnBvg) - [ ] [Linux 系统中的 AD ResetNightmare (CVE-2026-27912) 和 KerberLoss (CVE-2026-25177) 漏洞](https://mp.weixin.qq.com/s/SIVLLARuRbrXC1dOFVfssQ) - [ ] [Next js 远程代码执行](https://mp.weixin.qq.com/s/As_iBJBGrvbl0vAstjUpIw) - [ ] [俄罗斯黑客利用 Zimbra 零日漏洞窃取电子邮件无需点击链接](https://mp.weixin.qq.com/s/SA8fH7tDZ3YJEVaRXhsE3A) - [ ] [每天学一个 Kali 工具 · Day16 | dnsmap：2006 年的老兵，内置字典一刀画出子域名地图](https://mp.weixin.qq.com/s/ob4QbzMXJ51ycOqToLAE0Q) - [ ] [《文学系渗透大师傅》](https://mp.weixin.qq.com/s/apWC_6IpEfY-OzsO-UjDdg) - [ ] [关于“Atlasx”使用手册](https://mp.weixin.qq.com/s/t4-EDPuF7YdDG82uj2D04g) - [ ] [每日一学：XSS注入常被忽略的隐藏入口——Cookie](https://mp.weixin.qq.com/s/bCtgKBmJf95VjKAos8tqLg) - [ ] [第77篇 AI全栈 · 由CSRF引起的对常用鉴权方式总结](https://mp.weixin.qq.com/s/-TP8A7FxagPdYFWeyMNKTQ) - [ ] [行业资讯｜童炜正式出任电科网安总经理](https://mp.weixin.qq.com/s/2X9tqPnfRXAGalJszrOP5A) - [ ] [FBI最新网络战略没有一次提到我，但真正的信号都藏在字缝里](https://mp.weixin.qq.com/s/79_nl_oYj6DHjRxrN4BhMA) - [ ] [基于自主集群的未来无人化战争形态演进前瞻](https://mp.weixin.qq.com/s/IaNw-GG-MAi1TAntckwA9A) - [ ] [乌克兰启示录：现代战争真实作战样式（6.5万字干货）【现代战争研究系列第3册】](https://mp.weixin.qq.com/s/BCq74OHqe_nd0NLgtxoiJw) - [ ] [【研究报告】台湾地区无人机与无人机蜂群建设发展研究](https://mp.weixin.qq.com/s/fGA3eWiTY1C-VaBfxH7ZaQ) - [ ] [【理论专著】引领强军胜战的思想航标——习近平强军思想的军事观和方法论研究](https://mp.weixin.qq.com/s/neVdvi5Q6kKrt5OSe4M7gw) - [ ] [【分析报告】美军无人机自主集群作战发展趋势](https://mp.weixin.qq.com/s/MDnwrISuWNPseoR_PtrMUg) - [ ] [【分析报告】美军基于大模型的认知战算法体系构建与实战部署研究](https://mp.weixin.qq.com/s/cX8xrDp_NhqFkGD9XebE5A) - [ ] [恶意 AI 集群：信息战的新前沿](https://mp.weixin.qq.com/s/JRoCpmbor5lpGAvSVShU0w) - [ ] [【研究报告】频谱博弈下精确作战体系脆弱性与韧性重构——基于GNSS干扰、电子对抗与替代导航案例的综合分析](https://mp.weixin.qq.com/s/W63pbHqvO6KxgC3RfwkNwg) - [ ] [某小程序任意用户登录](https://mp.weixin.qq.com/s/fYB-xABvCErqwaJXQvel7g) - [ ] [黄仁勋点名“网络安全”：AI 的下一个千亿级爆发点，凭什么？](https://mp.weixin.qq.com/s/hwwHJv5OaeZl9YeNKB6XdA) - [ ] [【附exp】GitLab CVE-2026-85706 未授权路径遍历](https://mp.weixin.qq.com/s/3VE5MmFzzxyNr1FjNfcoRw) - [ ] [拆开就能进 root：Oker 摄像头 UART 未认证调试口](https://mp.weixin.qq.com/s/Yu-qVXE4XqRRzjDzHyFSBQ) - [ ] [某一线互联网大厂AI安全工程师，秋招面经](https://mp.weixin.qq.com/s/70KM1NqPoGMdfQEzl-jGwg) - [ ] [赛欧思一周资讯分类汇总(2026-09-07 ~ 2026-09-12)](https://mp.weixin.qq.com/s/Vvko36c7ZbA2iogBNP6P-w) - [ ] [用友时空KSOA resubject 存在sql注入漏洞](https://mp.weixin.qq.com/s/vb3yjzvlHMIHJGJs3NIe3Q) - [ ] [用友NC Cloud accept.jsp接口存在任意文件上传漏洞](https://mp.weixin.qq.com/s/tn8lOumHI6Lr7CPmLjESbA) - [ ] [从脚本小子到 AI 小子：漏洞报告成本归零之后](https://mp.weixin.qq.com/s/FOtsCdNuB2vQqUAwiG7pvw) - [ ] [10分漏洞：GitLab未授权任意文件读取](https://mp.weixin.qq.com/s/RJQI_HqqfmcS-3ImEvAXYQ) - [ ] [「防溯源追踪篇」WebRTC 防止获取真实IP](https://mp.weixin.qq.com/s/o7sODE0y6OfyQ-YVpTJbAg) - [ ] [2026国家网安周福建省活动亮点抢先看！](https://mp.weixin.qq.com/s/HNxVrDE6dpH-uCipGXbhPw) - [ ] [工业设备出海的网络安全合规——IEC 62443、NIS2和CRA怎么选？别再搞混了](https://mp.weixin.qq.com/s/q2SCbSFZ8S9G48fh67SxKw) - [ ] [微信0click-WeWorm简谈](https://mp.weixin.qq.com/s/0aeSfcpg-IUt_mitQuyjww) - [ ] [一周安全事件回顾：境外平台数据泄露频发，中国用户隐私谁来保护？](https://mp.weixin.qq.com/s/kIA0Xja8rbHkDQtHNyDeXA) - [ ] [PolarEDF电子数据取证2026秋季个人挑战赛秩序手册](https://mp.weixin.qq.com/s/n-8vWI1IWIQNaEgjwWNonw) - [ ] [商务部：中方正告美方，立即停止对中国包括中国企业的间谍活动](https://mp.weixin.qq.com/s/djV_II2JVFqduXT9bw7hXA) - [ ] [中央网信办 农业农村部 工信部联合印发《数字乡村高质量发展行动计划（2026—2030年）》](https://mp.weixin.qq.com/s/4oiu-zMrep5nmLbGYEdsvQ) - [ ] [赛查查喊你来投票！ | 投出你最喜欢的安全赛事](https://mp.weixin.qq.com/s/eEvHRV8uMolxI1LsaaJqTg) - [ ] [2026“铸牢防线护航云网”云南省信息通信网络安全实网攻防演练暨技能竞赛正式启幕](https://mp.weixin.qq.com/s/-5AM6xZWScuTP5c7Vkr9PQ) - [ ] [日本数字厅系统遭非法访问 约24万份个人信息或泄露](https://mp.weixin.qq.com/s/X2QzWa7vHE0bbNHPs5xBeQ) - [ ] [山东省工业互联网网络安全职业技能竞赛暨攻防演](https://mp.weixin.qq.com/s/oHcviGTLl8diwBSBMFkLjg) - [ ] [上海首例AI声音仿冒案宣判 米哈游《原神》角色声音被盗获赔75万](https://mp.weixin.qq.com/s/VevlNEh4m0Gx-bRHlZyvIA) - [ ] [cby讲的教师节段子](https://mp.weixin.qq.com/s/rExN5H7yJqnvkVJOIPIhTg) - [ ] [Anthropic正在构建一个大规模监控系统](https://mp.weixin.qq.com/s/gbs7z3nGAu0duF5S45vvYA) - [ ] [25年后再看9·11：间谍机构旧课未竟，新威胁已至](https://mp.weixin.qq.com/s/b7qrKhIc57O4FM5K8OGHWA) - [ ] [一日四停：四家头部SRC同日按下暂停接收漏洞](https://mp.weixin.qq.com/s/SheB9NUayWaTBOjdvn9qSw) - [ ] [防务简报 | 美国陆军开始测试新型低成本巡航导弹](https://mp.weixin.qq.com/s/KGvKa87WwYhrbWdw-c-43w) - [ ] [dddd改版：增强试用3天](https://mp.weixin.qq.com/s/BED_2gD7gT4nSK3cLjwotw) - [ ] [被当作透明管道的中转站：一次6TB泄露，暴露19家企业内网凭证](https://mp.weixin.qq.com/s/7FdA96qBTZGy3KlhU2eqwQ) - [ ] [DeepSeek V4.1 Flash 上线48小时被\"去安全化\"，开源模型供应链再敲警钟](https://mp.weixin.qq.com/s/6z4SUeCA85vmbauUt0bZGg) - [ ] [4.55亿月活里的APT跳板：UNC3569链式攻破搜狗输入法全过程](https://mp.weixin.qq.com/s/6jED7tURasxPRpl4Kr6wLg) - [ ] [Chrome V8 引擎遭类型混淆攻击——CVE-2026-85046 实战解析与 POC](https://mp.weixin.qq.com/s/LC1ZLpWExfJBZck8E92Wwg) - [ ] [工具分享 | 一款若依（Ruoyi-Vue）漏洞检测工具](https://mp.weixin.qq.com/s/KRkVcTWfKueuoUJo_pPVAQ) - [ ] [【热点安全风险】9月12日 | rclone双高危认证绕过同日修补，S3服务与远程控制接口可被无认证接管（CVE-2026-88018/CVE-2026-88044）](https://mp.weixin.qq.com/s/ufx42QP9mtVjnM_DLqeS0A) - Recent Commits to cve:main - [ ] [Update Sat Sep 12 12:20:52 UTC 2026](https://github.com/trickest/cve/commit/ff7dafee817d7add09a2fac8a0d56d5bed7f9e32) - Armin Ronacher's Thoughts and Writings - [ ] [P(doom)](https://lucumr.pocoo.org/2026/9/12/pdoom/) - MaskRay - [ ] [lld 23 ELF changes](https://maskray.me/blog/lld-23-elf-changes) - Kitploit - [ ] [Labtainers v1.4.4n](https://kitploit.com/en/posts/github-mfthomps-labtainers-v144n) - [ ] [Dropper](https://kitploit.com/en/tools/github/gmh5225/dropper) - [ ] [area51](https://kitploit.com/en/tools/github/thoropass-public/area51) - [ ] [tirith v0.4.2](https://kitploit.com/en/posts/github-sheeki03-tirith-v042) - [ ] [Roxy](https://kitploit.com/en/tools/github/vid4l-07/roxy) - [ ] [infected-drones](https://kitploit.com/en/tools/github/nicholasaleks/infected-drones) - [ ] [fluxion v6.32](https://kitploit.com/en/posts/github-fluxionnetwork-fluxion-v632) - [ ] [flipperzero-firmware v1.5.0-rc](https://kitploit.com/en/posts/github-flipperdevices-flipperzero-firmware-150-rc) - [ ] [thingsboard v4.3.1.5](https://kitploit.com/en/posts/github-thingsboard-thingsboard-v4315) - [ ] [ADRecon](https://kitploit.com/en/tools/github/adrecon/adrecon) - [ ] [Hundred OSINT](https://kitploit.com/en/tools/gitlab/t-beckett/h-osint) - [ ] [Tourmaline](https://kitploit.com/en/tools/github/v-pun215/tourmaline) - [ ] [alibi](https://kitploit.com/en/tools/github/owasp-noir/alibi) - [ ] [gori](https://kitploit.com/en/tools/github/hahwul/gori) - [ ] [mirth-connect-security-poc](https://kitploit.com/en/tools/github/abhinavagarwal07/mirth-connect-security-poc) - [ ] [redamon v6.14.1](https://kitploit.com/en/posts/github-samugit83-redamon-v6141) - [ ] [libsignal v0.102.2](https://kitploit.com/en/posts/github-signalapp-libsignal-v01022) - [ ] [COPG v6.9.8](https://kitploit.com/en/posts/github-alirezaparsi-copg-v698) - [ ] [pingtunnel master-d7cd0d6ab5f18e7d8d050385e8d240b3b2f41e6c](https://kitploit.com/en/posts/github-esrrhs-pingtunnel-master-d7cd0d6ab5f18e7d8d050385e8d240b3b2f41e6c) - [ ] [TornadoRevC2](https://kitploit.com/en/tools/github/kamalx06/tornadorevc2) - [ ] [voidsec-proxy](https://kitploit.com/en/tools/github/voidsecsoftwares/voidsec-proxy) - [ ] [Krawl v2.4.0](https://kitploit.com/en/posts/github-blessedrebus-krawl-v240) - [ ] [mcpsnoop v0.22.0](https://kitploit.com/en/posts/github-kerlenton-mcpsnoop-v0220) - [ ] [stackrox v4.11.4-rc.1](https://kitploit.com/en/posts/github-stackrox-stackrox-4114-rc1) - [ ] [kasld v0.4.0](https://kitploit.com/en/posts/github-bcoles-kasld-v040) - [ ] [Harden-Windows-Security HardenSystemSecurity-v1.0.88.0](https://kitploit.com/en/posts/github-hotcakex-harden-windows-security-hardensystemsecurity-v10880) - [ ] [sandbox-runtime v0.0.76](https://kitploit.com/en/posts/github-anthropic-experimental-sandbox-runtime-v0076) - [ ] [semgrep v1.177.0](https://kitploit.com/en/posts/github-semgrep-semgrep-v11770) - [ ] [firecracker v1.17.0](https://kitploit.com/en/posts/github-firecracker-microvm-firecracker-v1170) - [ ] [kanidm v1.11.2](https://kitploit.com/en/posts/github-kanidm-kanidm-v1112) - [ ] [tailscale v1.102.4](https://kitploit.com/en/posts/github-tailscale-tailscale-v11024) - [ ] [ipsw v3.1.716](https://kitploit.com/en/posts/github-blacktop-ipsw-v31716) - [ ] [ApplicationInspector v1.10.2](https://kitploit.com/en/posts/github-microsoft-applicationinspector-v1102) - CCC Event Blog - [ ] [CCC lädt alle Model Citizens zum 40C3](https://events.ccc.de/2026/09/12/40c3-model-citizens/) - Reverse Engineering - [ ] [Microcode in Intel's 8087 floating-point chip: the scale instruction](https://www.reddit.com/r/ReverseEngineering/comments/1wejv8y/microcode_in_intels_8087_floatingpoint_chip_the/) - [ ] [Beltdown2: Escaping the Cursor CLI sandbox](https://www.reddit.com/r/ReverseEngineering/comments/1wefn5t/beltdown2_escaping_the_cursor_cli_sandbox/) - [ ] [GitHub - mein-0/LolModapi: MSI Dragon Center 2.0.155.0 LPE](https://www.reddit.com/r/ReverseEngineering/comments/1wekt7q/github_mein0lolmodapi_msi_dragon_center_201550_lpe/) - [ ] [ReArk v1.0.0 Released: Now Supports Android APK/AAB Reverse Engineering](https://www.reddit.com/r/ReverseEngineering/comments/1we1cp5/reark_v100_released_now_supports_android_apkaab/) - [ ] [help please iT app capcut. Guys, does anyone know how to reverse-engineer the CapCut app and extract its engine and effects for our own purposes???](https://www.reddit.com/r/ReverseEngineering/comments/1we1m9u/help_please_it_app_capcut_guys_does_anyone_know/) - 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台 - [ ] [Anthropic CEO呼吁AI公司放缓研发步伐](https://blog.upx8.com/Anthropic-CEO%E5%91%BC%E5%90%81AI%E5%85%AC%E5%8F%B8%E6%94%BE%E7%BC%93%E7%A0%94%E5%8F%91%E6%AD%A5%E4%BC%90) - [ ] [VMware限制措施面临欧盟新的反垄断审查](https://blog.upx8.com/VMware%E9%99%90%E5%88%B6%E6%8E%AA%E6%96%BD%E9%9D%A2%E4%B8%B4%E6%AC%A7%E7%9B%9F%E6%96%B0%E7%9A%84%E5%8F%8D%E5%9E%84%E6%96%AD%E5%AE%A1%E6%9F%A5) - [ ] [特斯拉预告将于10月1日举办活动 展示下一代Roadster跑车](https://blog.upx8.com/%E7%89%B9%E6%96%AF%E6%8B%89%E9%A2%84%E5%91%8A%E5%B0%86%E4%BA%8E10%E6%9C%881%E6%97%A5%E4%B8%BE%E5%8A%9E%E6%B4%BB%E5%8A%A8-%E5%B1%95%E7%A4%BA%E4%B8%8B%E4%B8%80%E4%BB%A3Roadster%E8%B7%91%E8%BD%A6) - [ ] [传创始人等16名员工被带走 月之暗面：恶意造谣](https://blog.upx8.com/%E4%BC%A0%E5%88%9B%E5%A7%8B%E4%BA%BA%E7%AD%8916%E5%90%8D%E5%91%98%E5%B7%A5%E8%A2%AB%E5%B8%A6%E8%B5%B0-%E6%9C%88%E4%B9%8B%E6%9A%97%E9%9D%A2-%E6%81%B6%E6%84%8F%E9%80%A0%E8%B0%A3) - [ ] [25 位菲尔兹奖得主联合警告“AI 在数学领域严重错位”，邓煜调侃要退休回家写百合小说](https://blog.upx8.com/25-%E4%BD%8D%E8%8F%B2%E5%B0%94%E5%85%B9%E5%A5%96%E5%BE%97%E4%B8%BB%E8%81%94%E5%90%88%E8%AD%A6%E5%91%8A-AI-%E5%9C%A8%E6%95%B0%E5%AD%A6%E9%A2%86%E5%9F%9F%E4%B8%A5%E9%87%8D%E9%94%99%E4%BD%8D-%E9%82%93%E7%85%9C%E8%B0%83%E4%BE%83%E8%A6%81%E9%80%80%E4%BC%91%E5%9B%9E%E5%AE%B6%E5%86%99%E7%99%BE%E5%90%88%E5%B0%8F%E8%AF%B4) - [ ] [俄罗斯正式启动5G网络商用服务](https://blog.upx8.com/%E4%BF%84%E7%BD%97%E6%96%AF%E6%AD%A3%E5%BC%8F%E5%90%AF%E5%8A%A85G%E7%BD%91%E7%BB%9C%E5%95%86%E7%94%A8%E6%9C%8D%E5%8A%A1) - Dhole Moments - [ ] [The V8 JavaScript Runtime Undermined My Constant-Time JavaScript Library](https://soatok.blog/2026/09/12/the-v8-javascript-runtime-undermined-my-constant-time-javascript-library/) - 微步在线研究响应中心 - [ ] [CVSS10分Gitlab漏洞究竟能不能读任意文件？](https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508929&idx=1&sn=e1657879176766f53a682622be5138d8) - 黑鸟 - [ ] [失控的大模型：AI 被武器化的真实网络行动案例合集](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451188723&idx=1&sn=5d35817e7de53cfa588ad00e2e47fe78) - 青衣十三楼飞花堂 - [ ] [cby讲的教师节段子](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247489927&idx=1&sn=d0830ea05e3963c4fb22cc9c56bb52f8) - 安全学术圈 - [ ] [会议征文 | 第三届大模型供应链研讨会征稿通知](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247495907&idx=1&sn=68942b370ffe423e2e3ee08cc2781cd5) - 安全研究GoSSIP - [ ] [香港大学 Chen Ho 教授组招聘｜大模型驱动安全 × 可信人工智能](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247502197&idx=1&sn=b647fe38a191c2f0eb4b9b3dc630896f) - 安全分析与研究 - [ ] [FDE工程实战02-RAG与Agent系统设计](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247497135&idx=1&sn=71a3af0f97a3f7c9792680524286a39f) - 安全圈 - [ ] [【安全圈】黑客操纵数百个AI Agent：26秒破11家企业，夜袭440台服务器](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078850&idx=1&sn=a1f8892fc8c69e287f340031c3603b4c) - [ ] [【安全圈】黑客把Claude玩疯了：全自动扒光180万安卓App密钥机密](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078850&idx=2&sn=7b444fc1f876f56f24b4bd8b8fcfb24f) - [ ] [【安全圈】GitLab曝CVSS 10满分漏洞：免密盗源码，数小时遭在野狂扫](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078850&idx=3&sn=3d7d3bb3a87dca466246957ea44f5c69) - 数世咨询 - [ ] [速看，OWASP 最新十大 LLM 关键漏洞](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543880&idx=1&sn=d474ac6cfe6b19df9211bf8f04532bd5) - [ ] [从Anthropic报告看政企AI落地的数据安全挑战，永信至诚以「原生安全」构建数据「反萃取」防线](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543880&idx=2&sn=5bbf2d71499d8a08fda9ba4f0634a52c) - 看雪学苑 - [ ] [Frida 整体启动逻辑](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458619811&idx=1&sn=bfee625d49ac82cbc5ddbde393844170) - [ ] [可验证·可复现·可规模化：AI驱动的Windows内核漏洞挖掘与Fuzzing实战](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458619811&idx=2&sn=81d4d57b0d4c42643f283bb87a10bd88) - 极客公园 - [ ] [AI 时代的「4399」，可把我玩嗨了｜AI 上新](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653113496&idx=1&sn=a65a14dedf98f1803cdf7003455e0201) - [ ] [月之暗面冲击 20 亿美元 ARR；燧原科技上市，高开 188%；iPhone Duo 二手平台每台涨价 2.4 万｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653113475&idx=1&sn=a7ce102635ee294c7814c733acdc1bfe) - 网络空间安全科学学报 - [ ] [2026年网络空间安全学术会议通知（第二轮）](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247508516&idx=1&sn=4f4a5577b53a789099be07b333286edd) - 吴鲁加 - [ ] [[翻译]几个人一个月做出 Grok Bot](https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247486206&idx=1&sn=8e52cabcfe4d31e99f00d74b33491978) - 奇安信病毒响应中心 - [ ] [每周勒索威胁摘要](https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498641&idx=1&sn=6ba4c641eb134cbc62b2259ae9609606) - OnionSec - [ ] [我还挺会想的，香港国际机场](https://mp.weixin.qq.com/s?__biz=MzUyMTUwMzI3Ng==&mid=2247485995&idx=1&sn=7114ff31e830f532e4fc64b53e6ac648) - 情报分析师 - [ ] [FBI最新网络战略没有一次提到我，但真正的信号都藏在字缝里](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650569620&idx=1&sn=db541d930178c03c2193f82678467392) - 丁爸 情报分析师的工具箱 - [ ] [【资料】美国AI公司报告显示武器开发等机密信息被泄露](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651157473&idx=1&sn=5afcf36adfbc99fe3bd4b53a6de8a542) - [ ] [【报名倒计时】第四届全国大学生开源情报数据采集与分析挑战赛](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651157473&idx=2&sn=a8e7b171aa90813c7424b6f4ff329349) - Over Security - [ ] [Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent](https://www.bleepingcomputer.com/news/security/dutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent/) - [ ] [Revolut Confirms Sending Passport and Bitcoin Records to Fake Government Email](https://www.yahoo.com/news/us/articles/revolut-confirms-fake-government-email-092043717.html?guccounter=1) - 渊龙Sec安全团队 - [ ] [针对浏览器Cookie和密码提取的免杀研究](https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247486017&idx=1&sn=f6d8da61a24972020e858cedc9b4ab21) - IT Service Management News - [ ] [Vademecum NIS di ACN](http://blog.cesaregallotti.it/2026/09/vademecum-nis-di-acn.html) - TorrentFreak - [ ] [As U.S. Trade Pressure Mounts, Vietnam Prepares to Prosecute 74 ‘Xoi Lac’ Sports Pirates](https://torrentfreak.com/as-us-trade-pressure-mounts-vietnam-prepares-to-prosecute-74-xoi-lac-sports-pirates/) - Security Affairs - [ ] [Revolut Exposed KYC Data After Fraudulent Government Email Passed Security Checks](https://securityaffairs.com/198922/data-breach/revolut-exposed-kyc-data-after-fraudulent-government-email-passed-security-checks.html) - [ ] [Anthropic: AI Misuse Is Entering a New Phase: From Cybercrime to Surveillance, Propaganda and Weapons](https://securityaffairs.com/198905/ai/anthropic-ai-misuse-is-entering-a-new-phase-from-cybercrime-to-surveillance-propaganda-and-weapons.html) - The Hacker News - [ ] [CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV](https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html) - [ ] [When the Whole Company Adopts AI: What It Does to Your SOC](https://thehackernews.com/2026/09/when-whole-company-adopts-ai-what-it.html) - [ ] [OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers](https://thehackernews.com/2026/09/openai-agents-linked-to-rubygems.html) - KitPloit - PenTest Tools! - [ ] [Labtainers v1.4.4n](https://kitploit.com/en/posts/github-mfthomps-labtainers-v144n) - [ ] [Dropper](https://kitploit.com/en/tools/github/gmh5225/dropper) - [ ] [area51](https://kitploit.com/en/tools/github/thoropass-public/area51) - [ ] [tirith v0.4.2](https://kitploit.com/en/posts/github-sheeki03-tirith-v042) - [ ] [Roxy](https://kitploit.com/en/tools/github/vid4l-07/roxy) - [ ] [infected-drones](https://kitploit.com/en/tools/github/nicholasaleks/infected-drones) - [ ] [fluxion v6.32](https://kitploit.com/en/posts/github-fluxionnetwork-fluxion-v632) - [ ] [flipperzero-firmware v1.5.0-rc](https://kitploit.com/en/posts/github-flipperdevices-flipperzero-firmware-150-rc) - [ ] [thingsboard v4.3.1.5](https://kitploit.com/en/posts/github-thingsboard-thingsboard-v4315) - [ ] [ADRecon](https://kitploit.com/en/tools/github/adrecon/adrecon) - [ ] [Hundred OSINT](https://kitploit.com/en/tools/gitlab/t-beckett/h-osint) - [ ] [Tourmaline](https://kitploit.com/en/tools/github/v-pun215/tourmaline) - [ ] [alibi](https://kitploit.com/en/tools/github/owasp-noir/alibi) - [ ] [gori](https://kitploit.com/en/tools/github/hahwul/gori) - [ ] [mirth-connect-security-poc](https://kitploit.com/en/tools/github/abhinavagarwal07/mirth-connect-security-poc) - [ ] [redamon v6.14.1](https://kitploit.com/en/posts/github-samugit83-redamon-v6141) - [ ] [libsignal v0.102.2](https://kitploit.com/en/posts/github-signalapp-libsignal-v01022) - [ ] [COPG v6.9.8](https://kitploit.com/en/posts/github-alirezaparsi-copg-v698) - [ ] [pingtunnel master-d7cd0d6ab5f18e7d8d050385e8d240b3b2f41e6c](https://kitploit.com/en/posts/github-esrrhs-pingtunnel-master-d7cd0d6ab5f18e7d8d050385e8d240b3b2f41e6c) - [ ] [TornadoRevC2](https://kitploit.com/en/tools/github/kamalx06/tornadorevc2) - [ ] [voidsec-proxy](https://kitploit.com/en/tools/github/voidsecsoftwares/voidsec-proxy) - [ ] [Krawl v2.4.0](https://kitploit.com/en/posts/github-blessedrebus-krawl-v240) - [ ] [mcpsnoop v0.22.0](https://kitploit.com/en/posts/github-kerlenton-mcpsnoop-v0220) - [ ] [stackrox v4.11.4-rc.1](https://kitploit.com/en/posts/github-stackrox-stackrox-4114-rc1) - [ ] [kasld v0.4.0](https://kitploit.com/en/posts/github-bcoles-kasld-v040) - [ ] [Harden-Windows-Security HardenSystemSecurity-v1.0.88.0](https://kitploit.com/en/posts/github-hotcakex-harden-windows-security-hardensystemsecurity-v10880) - [ ] [sandbox-runtime v0.0.76](https://kitploit.com/en/posts/github-anthropic-experimental-sandbox-runtime-v0076) - [ ] [semgrep v1.177.0](https://kitploit.com/en/posts/github-semgrep-semgrep-v11770) - [ ] [firecracker v1.17.0](https://kitploit.com/en/posts/github-firecracker-microvm-firecracker-v1170) - [ ] [kanidm v1.11.2](https://kitploit.com/en/posts/github-kanidm-kanidm-v1112) - [ ] [tailscale v1.102.4](https://kitploit.com/en/posts/github-tailscale-tailscale-v11024) - [ ] [ipsw v3.1.716](https://kitploit.com/en/posts/github-blacktop-ipsw-v31716) - [ ] [ApplicationInspector v1.10.2](https://kitploit.com/en/posts/github-microsoft-applicationinspector-v1102) - Deep Web - [ ] [Is the modern Tor network actually useful for the average privacy enthusiast, or is the latency just not worth it?](https://www.reddit.com/r/deepweb/comments/1we877v/is_the_modern_tor_network_actually_useful_for_the/)
每日安全资讯（2026-09-13）