# 每日安全资讯（2026-07-23） - SecWiki News - [ ] [SecWiki News 2026-07-22 Review](http://www.sec-wiki.com/?2026-07-22) - 先知安全技术社区 - [ ] [随便一个表单就能打穿服务器？n8n 工作流引擎的 5 步攻击链](https://xz.aliyun.com/news/92554) - [ ] [从一个邮箱修改漏洞到账号接管：校园教务系统移动端API跨场景攻击链分析](https://xz.aliyun.com/news/92552) - Microsoft Security Blog - [ ] [Real world incident response: Microsoft and AXA XL strengthen cyber resilience](https://www.microsoft.com/en-us/security/blog/2026/07/22/real-world-incident-response-microsoft-and-axa-xl-strengthen-cyber-resilience/) - Private Feed for M09Ic - [ ] [kpcyrd starred Antiz96/lungo](https://github.com/Antiz96/lungo) - [ ] [anthropics released v2.1.218 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.218) - [ ] [bolucat released 202607222135 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202607222135) - [ ] [spf13 starred ayghri/i-have-adhd](https://github.com/ayghri/i-have-adhd) - [ ] [usestrix released v1.3.1 at usestrix/strix](https://github.com/usestrix/strix/releases/tag/v1.3.1) - [ ] [usestrix released v1.3.0 at usestrix/strix](https://github.com/usestrix/strix/releases/tag/v1.3.0) - [ ] [mgeeky starred Sizeable-Bingus/BingusLdr](https://github.com/Sizeable-Bingus/BingusLdr) - [ ] [esrrhs contributed to esrrhs/fakelua](https://github.com/esrrhs/fakelua/pull/275) - [ ] [FunnyWolf contributed to FunnyWolf/agentic-soc-platform](https://github.com/FunnyWolf/agentic-soc-platform/pull/41) - [ ] [RuoJi6 released v0.5.63 at RuoJi6/dbx-audit](https://github.com/RuoJi6/dbx-audit/releases/tag/v0.5.63) - [ ] [0xbug starred Jakubantalik/thinking-orbs](https://github.com/Jakubantalik/thinking-orbs) - [ ] [memN0ps starred cberner/redb](https://github.com/cberner/redb) - [ ] [pydantic released v0.0.19-beta.6 at pydantic/monty](https://github.com/pydantic/monty/releases/tag/v0.0.19-beta.6) - [ ] [pydantic released v2.15.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v2.15.0) - ElcomSoft blog - [ ] [An AI agent broke into Hugging Face. Five days later, OpenAI said it was theirs](https://blog.elcomsoft.com/2026/07/an-ai-agent-broke-into-hugging-face-five-days-later-openai-said-it-was-theirs/) - Doonsec's feed - [ ] [上半年经典落地案例汇总](https://mp.weixin.qq.com/s/9QVWQNGMFUW2Ied2XpzTZA) - [ ] [江苏：深化金融领域改革创新，强化AI赋能！](https://mp.weixin.qq.com/s/Psn1pI6CYh_reyZTBUQRnQ) - [ ] [WAIC2026世界人工智能大会速写：10幅宏观画像+10个细节瞬间+10项重磅观点+10款重要产品+10条趋势总结](https://mp.weixin.qq.com/s/rrW9IlMzBu3kBWl1atRyig) - [ ] [基于PA的智能体安全落地方案看智能体安全如何落地](https://mp.weixin.qq.com/s/eoyNx9mA_75Y1oEFvnhWRw) - [ ] [网线(双绞线)制作标准，T568B接线规范](https://mp.weixin.qq.com/s/7Nqvf09gzxDnwLNZZ8_hNA) - [ ] [一图读懂 | 国家标准GB/T 41400-2026《网络安全技术 工业控制系统网络安全防护能力成熟度模型》](https://mp.weixin.qq.com/s/2Mi09TaM-FGgNjuZklqVPg) - [ ] [食品饮料丨可口可乐遭勒索攻击：美国工厂运营中断，乳制品生产暂停](https://mp.weixin.qq.com/s/Yl-7hMhjsy-NY1dmAtXW9g) - [ ] [喜报 | 我院青年袁豪杰入选北京市“青马工程”青年人才班](https://mp.weixin.qq.com/s/dyZdfAW9n-Mo3DzKQpO36g) - [ ] [网络安全（黑客）自学指南](https://mp.weixin.qq.com/s/f_EXPIA-jO-DHTOF8X3btw) - [ ] [AI快讯：智能体互联国标试点启动，OpenAI推小型企业ChatGPT服务计划](https://mp.weixin.qq.com/s/hW-F7bPS4wY5SDxZSr1osA) - [ ] [【安全圈】AI首次“叛变”！OpenAI模型自主攻击友商系统](https://mp.weixin.qq.com/s/GejZGygp76i1t1v20roIPQ) - [ ] [从“能用AI”到“敢用AI”，网易智企给出AI时代可信安全答案](https://mp.weixin.qq.com/s/GsVbo87baOkTR2RmvU2DxQ) - [ ] [Gemini 3.5 Flash Cyber，可自动化快速完成漏洞挖掘与补丁生成](https://mp.weixin.qq.com/s/fvWnDvAx0aKRKlgW_RR9VQ) - [ ] [OpenAI GPT Agent入侵Hugging Face，AI模型开始叛变了](https://mp.weixin.qq.com/s/5MvTBP7PRF2-Q8EGoqw5dg) - [ ] [新型 Bit2Watt 攻击，云租户无漏洞亦可扰乱电网](https://mp.weixin.qq.com/s/uQJ7jCtP9miiosSXjyUaKQ) - [ ] [Android AI Agent现漏洞，隐形文本可执行主机代码](https://mp.weixin.qq.com/s/i69VBFscdZDVKoIshijNpQ) - [ ] [奇安信两项AI创新成果入选CCIA第二批“网安三新”](https://mp.weixin.qq.com/s/gVh_aLiZM7kJCdiv3Awe1w) - [ ] [OpenAI模型“越狱”始末：一场关于AI失控的预演](https://mp.weixin.qq.com/s/ImTdYHlB7AVwfbAZFOaXFg) - [ ] [漏洞复现 | 雨诺调度客户端 UserList 存在未授权访问敏感信息泄露漏洞](https://mp.weixin.qq.com/s/jFglwXUuGUwIxu-Olt7gRQ) - [ ] [武汉市支持智能体和智能终端发展若干措施公开征求意见](https://mp.weixin.qq.com/s/-e4kGfJvHLv0Em0zpfkq8Q) - [ ] [理事动态 | 德发公司2026年第二季度技术之星](https://mp.weixin.qq.com/s/0H7wh10SSz94NNqd9tBVGw) - [ ] [OpenAI安全测试中失控：批量0day入侵Hugging Face生产环境](https://mp.weixin.qq.com/s/tDTxjxNGrtLpIxAdWpLmEw) - [ ] [【漏洞复现】用友A++V8系列产品selectMaUser接口SQL注入漏洞](https://mp.weixin.qq.com/s/bPDCLx_y_ecRahm1p5XKSw) - [ ] [持续报名|一文玩转南开大学 DataCon AI夏令营](https://mp.weixin.qq.com/s/BeaX__cTEbz_N-BkgtsMhg) - [ ] [实战砺兵｜助力昌平区开展xa02026xa0年度网络安全事件应急演练](https://mp.weixin.qq.com/s/kRDrdVtCuPkcKUFwnr0kVA) - [ ] [计算机行业值得考的高含金量网络安全证书](https://mp.weixin.qq.com/s/ZTgJSvxIn4EJhbDkSt9MDw) - [ ] [双案例入选！](https://mp.weixin.qq.com/s/ScBLS0ZGKqmwZZOX6tYChg) - [ ] [易安联Linkup渠道沙龙在宁圆满举行：聚力零信任+AI安全，共拓渠道合作新格局](https://mp.weixin.qq.com/s/JnyX6H1QFWtIBuG3dQyWCQ) - [ ] [模型技术 | 25GB 笔记本就能跑 7440 亿参数大模型！](https://mp.weixin.qq.com/s/WSAFdRWVbVP3fbXoTDuHtw) - [ ] [黑客最怕的事情是什么？一文看懂网安圈最狡猾的“卧底”蜜罐！](https://mp.weixin.qq.com/s/TMFOPhptuswIUBcqyXM-1w) - [ ] [安全简讯（2026.07.22）](https://mp.weixin.qq.com/s/CU7H-n1MrxJeOLZx6yiKyQ) - [ ] [【漏洞通告】NGINX map 指令正则匹配漏洞(CVE-2026-42533)](https://mp.weixin.qq.com/s/XJVHhJtU27GCPFLTIQCeWA) - [ ] [OpenAI 自曝：AI 在测试中“黑”了 Hugging Face，还用了零日漏洞](https://mp.weixin.qq.com/s/FGICc-myx0z_p1nLUpQN9g) - [ ] [危险速查！！！Fastjson 远程代码执行漏洞，这些版本全部受影响！](https://mp.weixin.qq.com/s/v4JCIJNzFb25Nk3JOE8Psg) - [ ] [iOS 26.6 RC实测：信号温控双提升，续航需等3天才能下定论](https://mp.weixin.qq.com/s/yLachH5gfkbjxNM_kR2Z8g) - [ ] [从“管道”到“中枢”：新一代通信网，不止更快！](https://mp.weixin.qq.com/s/s6rW6eIYuaqUn-qh5FFcXQ) - [ ] [Zimbra 修复严重的 SNMP 命令注入和 XSS漏洞](https://mp.weixin.qq.com/s/LMbgRdFqa4CxKR3xveDXtA) - [ ] [HollowByte：11字节 payload 耗尽 OpenSSL 服务器内存](https://mp.weixin.qq.com/s/7UZpHD2ODjF-HBUyARQB-w) - [ ] [ATool 3.5.2.0版本更新发布](https://mp.weixin.qq.com/s/NdE6AONzcaJzFIgcqEeoUg) - [ ] [我们是蚁景网络安全，欢迎了解！](https://mp.weixin.qq.com/s/ETBR7fZRBO8PNgcuA20hSg) - [ ] [安卓逆向 -- 某记账App永久会员功能分析](https://mp.weixin.qq.com/s/KAWJI0MHsmpbsGRzmx6_cw) - [ ] [2026年中国新一代信息技术产业深度分析报告](https://mp.weixin.qq.com/s/ovUX5ZiHLJlRa70YsYTkTg) - [ ] [强化风险意识 确保安全可控：构建全球人工智能治理体系](https://mp.weixin.qq.com/s/3ZAtZEj3KaDYecJyj62a8A) - [ ] [公安部公布10起网络赌球典型案例 抓获涉案人员78名](https://mp.weixin.qq.com/s/EiMfW2SVzUVyhPEECPU9xA) - [ ] [“数安党员先锋队”正式授旗成立！](https://mp.weixin.qq.com/s/6IJsI8jDHQlg3iiqLLXhVQ) - [ ] [iOS 27 Beta 4实测：续航信号双修复，苹果智能或成续航杀手？](https://mp.weixin.qq.com/s/ffhIgNb6hBMIeHvUlKu0zg) - [ ] [SQL注入漏洞详解，不信你还听不懂](https://mp.weixin.qq.com/s/-6XB3qf6GO94PPooKw1tpQ) - [ ] [某企业履行数据安全保护义务不到位 被行政处罚！](https://mp.weixin.qq.com/s/R4W2qej00iNPeIPGNm-FxQ) - [ ] [【高危AI攻击事件】GPT-5.6 Sol在测试期间失控入侵Hugging Face](https://mp.weixin.qq.com/s/MS_YdbvPGg8YjR7pbQov1g) - [ ] [创信资讯丨四川省密码管理局、教育厅联合主办密码应用技能公益培训，创信华通助力学子解锁“密评”新技能](https://mp.weixin.qq.com/s/6TFyf0ChnoohkY4tc_h3iA) - [ ] [勒索组织死灰复燃，跨国药企遭精准勒索](https://mp.weixin.qq.com/s/3RHwlUE2ilD-fpLEJ8ws_Q) - [ ] [ASIC防火墙七大核心业务场景：⑦小包高性能](https://mp.weixin.qq.com/s/Tg2Y87pTl9ntvoavxRotag) - [ ] [网络一断就停工、算力永远跑不满！研发企业还要继续为云桌面买单吗？](https://mp.weixin.qq.com/s/qlzTfYZip6F3HsnPxz-yBg) - [ ] [[AI]Codex破限工具codex-keysmith，可对GPT5.6 Sol使用，渗透测试必备](https://mp.weixin.qq.com/s/5OTWucdNZg-fT4zkb5NLVg) - [ ] [常见光模块类型有哪些？](https://mp.weixin.qq.com/s/QMBvhM6FiLd5l9-RJKTy5A) - [ ] [南开大学|软件学院师生论文被软件工程领域CCF A类国际期刊 TOSEM 2026录用](https://mp.weixin.qq.com/s/zfPrEEzbAOlcejgGr7QAFQ) - [ ] [全网首发|授权渗透测试中围观大佬现场出0day的飘逸身姿](https://mp.weixin.qq.com/s/DVAMYRjIBuVf_4MJc_oYYw) - [ ] [7月社区投稿活动 | 漏洞挖掘/AI渗透](https://mp.weixin.qq.com/s/hyQ-Zr-AY10q5XGG9znmSQ) - [ ] [AI自动渗透框架 -- AutoPentest-AI](https://mp.weixin.qq.com/s/JQhDX6BeGsnhY8oB096DNw) - [ ] [临时转岗变HR](https://mp.weixin.qq.com/s/e5mB50gMcajY71mRUKVm4g) - [ ] [新增受影响场景，Fastjson远程代码执行漏洞三次更新](https://mp.weixin.qq.com/s/VORXbD0VvNio7ETVhiGr9w) - [ ] [无密码无钓鱼照样拖空数据：机器身份债务已成安全隐形炸弹](https://mp.weixin.qq.com/s/LmjwSq12tOM-nU_ggNUmqQ) - [ ] [国家印发IPv6新实施方案：明确2027/2030量化指标，启动 IPv6 单栈演进布局；Qoder Security 重磅上线| 牛览](https://mp.weixin.qq.com/s/SeT2Gs92uMGj0GBTqMIUMA) - [ ] [专家解读｜以IPv6创新驱动人工智能与行业智能化深度融合 开启网络强国建设新征程](https://mp.weixin.qq.com/s/om0Y37lBZB6KZQ5ASggMHw) - [ ] [中国核电2026年度网络安全知识与技能竞赛服务项目采购公告](https://mp.weixin.qq.com/s/niaRRPWI6AVoWORsSUrCmQ) - [ ] [火热报名中 | 2026年福建省信息通信行业职业技能竞赛](https://mp.weixin.qq.com/s/vHIa63ZNzvBOtQsxlzlMCg) - [ ] [2026年中国（广西）—东盟人工智能安全攻防大赛](https://mp.weixin.qq.com/s/ix_5Lm6POY0sTCcrXlcHYg) - [ ] [关于举办中国（广西）—东盟“人工智能+应急管理”科技创新大赛的补充公告](https://mp.weixin.qq.com/s/6FWAyn5ce53HzDM5ONFT8Q) - [ ] [关于开展网络和数据安全赛事平台能力检测服务的通知](https://mp.weixin.qq.com/s/-CpXoDMhWEvOJSkbtwcd8Q) - [ ] [倒计时3天 | 第四届“熵密杯”密码安全挑战赛即将拉开战幕！](https://mp.weixin.qq.com/s/bCBdpxuRZ7ym7AzRNLp1_w) - [ ] [2026“聚合杯”电子数据取证大赛正式启动！](https://mp.weixin.qq.com/s/LmYh_RySPpd8rqvfiYhIsg) - [ ] [从500个真正跑通的项目里看见数据要素、动态数据安全项目样本｜第九届西湖论剑创新实践火热征集中！](https://mp.weixin.qq.com/s/NcsnEvyDXYl94WndvUse4Q) - [ ] [快准轻全！RayScan终结传统漏扫四大难](https://mp.weixin.qq.com/s/OqTqH_dukGtIkaPrgheDHg) - [ ] [各位师傅见过这么忽略漏洞的吗](https://mp.weixin.qq.com/s/ZEAef-FWgZHo3Yn0kvSihw) - [ ] [众智维发布｜航空机场行业智能安全运营体系及最佳实践](https://mp.weixin.qq.com/s/B-50O1tcgVPMcLFO34Dhkg) - [ ] [hvv 2026 - 护网打到最后，拼的不是设备数量，真正抬高安全水位的，始终是少数基础控制](https://mp.weixin.qq.com/s/UjmoUUp4985lS6Kk1Nar3w) - [ ] [Oracle 2026年7月补丁日多产品高危漏洞安全风险通告](https://mp.weixin.qq.com/s/HZm_WSiMvObEbLPlCclcBg) - [ ] [生产力](https://mp.weixin.qq.com/s/6TJZ1vdc7PFEA2NKSr0p9A) - [ ] [Swagger接口文档配合ai-skills进行未授权渗透](https://mp.weixin.qq.com/s/k7paNwesuC2Es-XUhO32ew) - [ ] [抱歉，团队彻底解散了！](https://mp.weixin.qq.com/s/KKV9W-Vtn2RAP9tTMsTYxA) - [ ] [上半年转交处置仿冒假冒网站759个，中央网信办举报中心持续加大仿冒假冒网站举报受理处置力度](https://mp.weixin.qq.com/s/TTUcCAmV7gdSxI7a86jU0w) - [ ] [关于开展“涉企网络侵权宣讲会”的通知](https://mp.weixin.qq.com/s/W9AsMfQ2b4l1OrqaQ2QHrg) - [ ] [网安AI速报 | 2026.07.22](https://mp.weixin.qq.com/s/w6JLCr6e0lmyba5aeu7Xfw) - [ ] [电脑小白必看：Win11自带“时光机”，系统崩了一键救回！](https://mp.weixin.qq.com/s/DG1Zkn3XEKHzUH9V7Uv1Vw) - [ ] [微信看图秒推同款？拆解某多多搜广推真相与安全隐忧](https://mp.weixin.qq.com/s/JxwkqGD4oSF85PdLYAcYbg) - [ ] [实战中的反无人机策略](https://mp.weixin.qq.com/s/KcxhdxXfvxEoAROo1domGw) - [ ] [网络领域作为认知战的战场](https://mp.weixin.qq.com/s/cLtGyFwGJuTSIPWKW0t-7Q) - [ ] [一图读懂 | 国家标准GB/T 44886.4-2026《网络安全技术 网络安全产品互联互通 第4部分：威胁信息格式》](https://mp.weixin.qq.com/s/YayThPfSiyrXai3Cm82GlQ) - [ ] [hvv 2026 - 云上攻防新盲区：真正危险的身份，可能根本不是用户](https://mp.weixin.qq.com/s/7guWyWyY04FZ1RkPnpSYrQ) - [ ] [【竞赛通知】第四届全国大学生开源情报数据采集与分析挑战专项](https://mp.weixin.qq.com/s/bS8Llx-trl4q1nlURELCkg) - [ ] [数据安全||国家金融监督管理总局对《银行保险机构数据安全管理办法》 全文解读](https://mp.weixin.qq.com/s/IDThreakiqS7Ni7PWWWjSQ) - [ ] [重磅发布！百度通过云计算安全责任共担评估！](https://mp.weixin.qq.com/s/AWp7DsHTjSf5fkYK25fpdg) - [ ] [企业网络安全管理办法](https://mp.weixin.qq.com/s/BbckFkKYb3t-d1jGI8Pzdg) - [ ] [《GB∕T 44886.5-2026 网络安全技术 网络安全产品互联互通 第5部分：行为信息格式》全文及解读](https://mp.weixin.qq.com/s/toeuzUIPjk0j3PR82y75Ig) - [ ] [平台攻防演练行为检测能力要求和测试方法](https://mp.weixin.qq.com/s/RY8_WbLjdyfy8fg3G-osbw) - [ ] [IPv4地址枯竭只是冰山一角，IPv6真正的杀手锏在于对互联网底层逻辑的全面重构](https://mp.weixin.qq.com/s/wyrJMnjJWQ_KjZh13dNDHQ) - [ ] [【深度研判】越南主办东南亚首届国际AI奥林匹克竞赛推动区域数字合作的战略意图与区域影响](https://mp.weixin.qq.com/s/fRiwkzB1XxFFUV2BBhZASw) - [ ] [商用密码在刷脸登录中的应用](https://mp.weixin.qq.com/s/hr2JmiRzHJYFrt_1Epa-NA) - [ ] [【漏洞复现】Fastjson 1.2.83远程代码执行漏洞](https://mp.weixin.qq.com/s/1DDz7VRYfNkmQMPF36xpPA) - [ ] [威远警方破获世界杯赌球案，流水超400万元，抓获数十人，缴获赌资37万元](https://mp.weixin.qq.com/s/OsvrHR6AqiNrhWJl2-3ecA) - [ ] [晋城警方斩断网络黑灰产业链，抓获8人，涉案80余万元，带破外地电诈案100余起](https://mp.weixin.qq.com/s/Pu_QzQeWD0d7dD4RkTnfCw) - [ ] [海城警方破获世界杯网络赌球案，抓获22人，查扣赌资11万余元](https://mp.weixin.qq.com/s/g1d4yFOQmNleDx7JBsk_gQ) - Recent Commits to cve:main - [ ] [Update Wed Jul 22 12:11:23 UTC 2026](https://github.com/trickest/cve/commit/ed228d55b7972f63e700a35a54fbcd94064b9ade) - Horizon3.ai - [ ] [CVE-2026-60167, CVE-2026-60168, CVE-2026-60169 & CVE-2026-60170 | Oracle Hospitality Simphony Multiple Vulnerabilities](https://horizon3.ai/attack-research/vulnerabilities/oracle-hospitality-simphony-vulnerabilities/) - SentinelOne - [ ] [From Triage Grind to Strategic Operator: The New AI SOC Career Path](https://www.sentinelone.com/blog/from-triage-grind-to-strategic-operator-the-new-ai-soc-career-path/) - NVISO Labs - [ ] [Intercepting Android WebView traffic under new certificate validity requirement by Chromium](https://blog.nviso.eu/2026/07/22/intercepting-android-webview-traffic-under-new-certificate-validity-requirement-by-chromium/) - Binary Ninja - [ ] [10 Years of Binary Ninja](https://binary.ninja/2026/07/22/10-years-of-binary-ninja.html) - Malwarebytes - [ ] [Chick-fil-A loyalty accounts hijacked using stolen passwords](https://www.malwarebytes.com/blog/data-breaches/2026/07/chick-fil-a-loyalty-accounts-hijacked-using-stolen-passwords) - [ ] [Paidwork breach exposes data of 23 million users: Check if you’re affected](https://www.malwarebytes.com/blog/data-breaches/2026/07/paidwork-breach-exposes-data-of-23-million-users-check-if-youre-affected) - glzjin - [ ] [OpenKVM-A2：把向日葵控控 A2 改造成开源本地 KVM](https://www.zhaoj.in/read-9189.html) - text/plain - [ ] [Offboarding from Microsoft Defender for Endpoint](https://textslashplain.com/2026/07/22/offboarding-from-microsoft-defender-for-endpoint/) - HackerNews - [ ] [Qilin 勒索软件攻击者利用 PAN-OS 身份验证绕过漏洞获取初始访问权限](http://0.0.0.0:8080/post/64500) - [ ] [Chick-fil-A 在凭证填充攻击后披露数据泄露事件](http://0.0.0.0:8080/post/64499) - [ ] [OpenAI 称其 AI 模型在测试期间入侵了 Hugging Face](http://0.0.0.0:8080/post/64498) - [ ] [新型 HollowGraph 恶意软件滥用 Microsoft 365 日历进行 C&C 通信](http://0.0.0.0:8080/post/64497) - [ ] [Cisco 推出用于源代码安全的低成本 AI 模型](http://0.0.0.0:8080/post/64496) - [ ] [特朗普下令国防承包商绘制关键供应链中的软件和供应商地图](http://0.0.0.0:8080/post/64495) - 绿盟科技技术博客 - [ ] [权威认可 | 绿盟科技领跑中国GenAI赋能暴露面管理市场](https://blog.nsfocus.net/%e6%9d%83%e5%a8%81%e8%ae%a4%e5%8f%af-%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e9%a2%86%e8%b7%91%e4%b8%ad%e5%9b%bdgenai%e8%b5%8b%e8%83%bd%e6%9a%b4%e9%9c%b2%e9%9d%a2%e7%ae%a1%e7%90%86%e5%b8%82%e5%9c%ba/) - [ ] [政策解读 | 中国人工智能安全治理政策标准全景梳理](https://blog.nsfocus.net/%e6%94%bf%e7%ad%96%e8%a7%a3%e8%af%bb-%e4%b8%ad%e5%9b%bd%e4%ba%ba%e5%b7%a5%e6%99%ba%e8%83%bd%e5%ae%89%e5%85%a8%e6%b2%bb%e7%90%86%e6%94%bf%e7%ad%96%e6%a0%87%e5%87%86%e5%85%a8%e6%99%af%e6%a2%b3/) - 奇客Solidot–传递最新科技情报 - [ ] [数学家仍然不知道乘法的最快方法](https://www.solidot.org/story?sid=84899) - [ ] [空客准备将其应用从亚马逊 AWS 迁移到法国的 Scaleway](https://www.solidot.org/story?sid=84898) - [ ] [大众汽车的官方应用不支持第三方 Android 系统](https://www.solidot.org/story?sid=84897) - [ ] [Firefox 预览原生多账户容器功能](https://www.solidot.org/story?sid=84896) - [ ] [LG 将封禁住宅代理智能电视应用](https://www.solidot.org/story?sid=84895) - [ ] [尼安德特人可能和现代人类一样聪明](https://www.solidot.org/story?sid=84894) - [ ] [苹果应用商店涌入大量 AI 辅助开发的应用](https://www.solidot.org/story?sid=84893) - [ ] [为何月球正面和背面接收到太阳风不同](https://www.solidot.org/story?sid=84892) - [ ] [美国计算机科学专业入学人数首次下降](https://www.solidot.org/story?sid=84891) - [ ] [欧盟法院裁决 VPN 是合法工具](https://www.solidot.org/story?sid=84890) - [ ] [GNOME 项目禁止 AI 生成的安全报告](https://www.solidot.org/story?sid=84889) - [ ] [法官批准了 Anthropic 与图书出版商达成的 15 亿美元侵权和解](https://www.solidot.org/story?sid=84888) - 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台 - [ ] [OpenAI提高算力支出预测至7500亿美元](https://blog.upx8.com/OpenAI%E6%8F%90%E9%AB%98%E7%AE%97%E5%8A%9B%E6%94%AF%E5%87%BA%E9%A2%84%E6%B5%8B%E8%87%B37500%E4%BA%BF%E7%BE%8E%E5%85%83) - [ ] [苹果将全面升级Mac产品线 触控OLED、M7芯片已在路上](https://blog.upx8.com/%E8%8B%B9%E6%9E%9C%E5%B0%86%E5%85%A8%E9%9D%A2%E5%8D%87%E7%BA%A7Mac%E4%BA%A7%E5%93%81%E7%BA%BF-%E8%A7%A6%E6%8E%A7OLED-M7%E8%8A%AF%E7%89%87%E5%B7%B2%E5%9C%A8%E8%B7%AF%E4%B8%8A) - 黑鸟 - [ ] [攻击者网站目录问题 暴露其用 AI 把攻击做成了流水线](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451187771&idx=1&sn=5b761eee6823f0a66804bee7b034b998) - 微步在线研究响应中心 - [ ] [NGINX 新漏洞，特定配置下可实现远程代码执行（CVE-2026-42533）](https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508772&idx=1&sn=c2ce0975b5118b7fbc726a6ea125417b) - 安全内参 - [ ] [AI失控后入侵知名企业：系OpenAI内测模型 自主逃离隔离环境](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516299&idx=1&sn=38ca1a8c468c6a566544146b9d070dd7) - [ ] [从IT到OT：美国国民警卫队“网络盾牌”演习聚焦电力行业关基防护](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516299&idx=2&sn=21a369d236109f53c3e95b554f486105) - 安全客 - [ ] [为了“作弊”拿高分，AI 自己黑了 Hugging Face](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649790237&idx=1&sn=850faa1161f248bbcfe79719a212c05e) - 代码卫士 - [ ] [Zimbra 修复严重的 SNMP 命令注入和 XSS漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526704&idx=1&sn=f282bc7a3fa4fff9fe57440a56757187) - [ ] [HollowByte：11字节 payload 耗尽 OpenSSL 服务器内存](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526704&idx=2&sn=19d182f7c28b8e4d3213f8e146b549e6) - Black Hills Information Security, Inc. - [ ] [The Life of a SOC Analyst: Responsibilities, Challenges, and Strategies for Success](https://www.blackhillsinfosec.com/life-of-a-soc-analyst/) - 威努特安全网络 - [ ] [智慧水务网络构建方案：赋能水务行业数字化转型](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651143146&idx=1&sn=4d21a656ae2dc9face37d23385c413e3) - 安全学术圈 - [ ] [2027年智能警务四川省重点实验室开放课题申请指南](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247495670&idx=1&sn=26630d1acc69dcfcbb8974e883adbfde) - 信安之路 - [ ] [关于目录枚举的最新玩法！](https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500628&idx=1&sn=6a9a2a194f4c4b7b1c747315bfe68952) - 天御攻防实验室 - [ ] [GPT-5.6 Sol自主攻破Hugging Face，我们离自主网络武器还有多远？](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247487060&idx=1&sn=11cb1a01fa851948207143e76ae22b1c) - 天黑说嘿话 - [ ] [hvv 2026 - 云上攻防新盲区：真正危险的身份，可能根本不是用户](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486261&idx=1&sn=f3a02b6a6661ae438160e241097e4539) - 信息安全国家工程研究中心 - [ ] [一图读懂|GA/T 1390.8—2025 《信息安全技术 网络安全等级保护基本要求 第8部分：IPv6网络安全扩展要求》](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247504480&idx=1&sn=1359cb12d1e2bfee978b2b86c666b4f0) - 看雪学苑 - [ ] [从2026CCB决赛堆题CreditMarket学习Glibc2.39后ptmalloc的机制更新](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617695&idx=1&sn=1adc82ab369dde74621883e388e33f0f) - [ ] [致命视觉投毒！多款主流移动端AI智能代理遭7类链路攻击，可远程拿下控制主机](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617695&idx=2&sn=13c0b55779ee8738036084729050a61d) - [ ] [告别零散技巧，学透提示词越狱全链路攻防](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617695&idx=3&sn=68d4a61ba7ebfc077f5e893bc45faddd) - DataCon大数据安全分析竞赛 - [ ] [持续报名|一文玩转南开大学 DataCon AI夏令营](https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247489579&idx=1&sn=3e23a41ebc834f6bbb468ae3d4ae23fc) - 安全圈 - [ ] [【安全圈】AI首次“叛变”！OpenAI模型自主攻击友商系统](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077950&idx=1&sn=81cd0f091e63cf587f7217ccc944beff) - [ ] [【安全圈】Chick-fil-A 在凭证填充攻击后披露数据泄露事件](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077950&idx=2&sn=45f647a75047c89d6cab258abb79e93c) - [ ] [【安全圈】新型 HollowGraph 恶意软件滥用 Microsoft 365 日历进行 C&C 通信](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077950&idx=3&sn=6d1393eb0b1e6b3706c8d08c1d55d2db) - 奇安信威胁情报中心 - [ ] [前无古人，后有来者 - OpenAI模型攻击HuggingFace事件的AI威胁深度分析](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247519548&idx=1&sn=e60dc69733e36a9759c6e6c05e1a2a67) - 中国信息安全 - [ ] [专题·原创 | 大模型时代密码学基础设施代码库安全挑战与重构](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264943&idx=1&sn=cbacb31edb0342dda9225dc6bab874be) - [ ] [邬贺铨院士：以IPv6创新驱动人工智能与行业智能化深度融合 开启网络强国建设新征程](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264943&idx=2&sn=dcef50a2f2a8b966f75ec0a8a1acde0c) - [ ] [强化风险意识 确保安全可控——携手构建公正合理的全球人工智能治理体系述评](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264943&idx=3&sn=63619db07a9aead78264a02aca643305) - [ ] [前沿 | OpenAI承认其模型测试失控 侵入抱抱脸系统](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264943&idx=4&sn=4106d866a46ea2cd0b16ea8b6736037a) - 微步在线 - [ ] [这届AI，最听黑客的话](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650187163&idx=1&sn=234355d8cd3319640839e01e8b53bba2) - 青衣十三楼飞花堂 - [ ] [闲谈吹牛](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247489715&idx=1&sn=84d45a853b1624aa6b4e5fd97b83f8a8) - [ ] [小小四预习初二时遇上的两道几何题](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247489710&idx=1&sn=fe008179ed13189cd4e39b2e87284fdd) - 吾爱破解论坛 - [ ] [暑假开放注册四小时共注册20305人，没有激活的同学请尽快激活啦，发帖前请认真阅读注册须知和总版规，防止违规封号注销。 刚加入的同学...](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651144648&idx=1&sn=9a866eea188f8df6196df3c42dac8286) - 数世咨询 - [ ] [GPT和Claude为了完成目标都会作弊](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543575&idx=1&sn=f2c3509c8807a7cfa19da7ba6b92f608) - 安全牛 - [ ] [无密码无钓鱼照样拖空数据：机器身份债务已成安全隐形炸弹](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651142054&idx=1&sn=a53af5286cdc66891e32dfa058d75e8d) - [ ] [国家印发IPv6新实施方案：明确2027/2030量化指标，启动 IPv6 单栈演进布局；Qoder Security 重磅上线| 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651142054&idx=2&sn=38b4b32e53c64899b731105df0e860ca) - 极客公园 - [ ] [AI Agent 要自己刷卡了，但「AI 支付宝」比想象中更难做，为什么？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653110986&idx=1&sn=d9d14bf7bab50c6dcfa0569f0488d0ca) - [ ] [「未来不远机器人」完成近 10 亿元融资，创家庭通用机器人新纪录](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653110981&idx=1&sn=161e82b6c42a9b49850acc44e096b998) - [ ] [苹果将推「iPhone 月租」计划；SpaceX 股价大跌，马斯克警告做空机构；谷歌发布 3.6 Flash 等模型 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653110973&idx=1&sn=100f1e63bb09aac9f4372b283392160e) - 奇安信 CERT - [ ] [Oracle 2026年7月补丁日多产品高危漏洞安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506847&idx=1&sn=23a4dd4b28b5470da2ae125c347f5a5c) - 复旦白泽战队 - [ ] [复旦AgentGuard亮相WAIC：为政务智能体划定安全边界](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247499505&idx=1&sn=bbae7086b292005488d013656a584370) - 漏洞战争 - [ ] [2026年Agent热点项目与产品化趋势洞察](https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247486136&idx=1&sn=74b78590e07ca31c644abf663025da8e) - 嘶吼专业版 - [ ] [XCon2026议题||AI自动化免杀闭环利息构建与实战](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587758&idx=1&sn=cf408b8a7250c8a6ee90db3cc8a3f4df) - Beacon Tower Lab - [ ] [漏洞预警丨fastjson @JSONType 远程类加载远程代码执行漏洞](https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247488327&idx=1&sn=ae854a7a8a2f88e193f36763fc58c272) - GobySec - [ ] [Goby POC 接入 LLM：让漏洞验证从硬匹配走向智能辅助判断](https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545924&idx=1&sn=d396e79ad63b5182bf60d63a3e8c70ff) - 吴鲁加 - [ ] [给还在看网页的朋友](https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247486140&idx=1&sn=da88b9dd83d124bd24b4d19648b21e27) - 表图 - [ ] [[译苑雅集Vol. 17] 为了在测试中作弊，OpenAI 的最强 AI 自主入侵了 Hugging Face](https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247485126&idx=1&sn=99ef9715d3bc202f8e635b148ce7591b) - OnionSec - [ ] [一次关于工作的聊天](https://mp.weixin.qq.com/s?__biz=MzUyMTUwMzI3Ng==&mid=2247485874&idx=1&sn=244c04303e3031194935b9be123a8ca0) - 火绒安全 - [ ] [供应链威胁持续发酵：Shai-Hulud出新变种绕过npm防护窃密](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247535654&idx=1&sn=da95fa04e15e5f9d1dd91cd79491745f) - [ ] [火绒小问答--「个人版」近期top问题解答](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247535654&idx=2&sn=e6334e3aa2225c72cb78a8e8e8634bb5) - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247535654&idx=3&sn=57680919eb4b958d12fa2e19209ba423) - 慢雾科技 - [ ] [有和有效的距离｜从 FATF 最新报告看风险控制](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247505523&idx=1&sn=62044ec741451c0e7bbefaaf8684fdc7) - Qualys Security Blog - [ ] [RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)](https://blog.qualys.com/category/vulnerabilities-threat-research) - [ ] [Oracle Critical Patch Update, July 2026 Security Update Review](https://blog.qualys.com/category/vulnerabilities-threat-research) - 威胁猎人Threat Hunter - [ ] [2026年上半年互联网黑灰产研究报告发布：聚焦黑产资源变化、产业链演进与典型作恶场景](https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247504868&idx=1&sn=469061b162ca5dea2f21ea1e7d7dbade) - 洞源实验室 - [ ] [AI在重塑DevSecOps，但真正考验的是工程能力](https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488747&idx=1&sn=f3b53a68bd008fcd188092ba84c3b85c) - LR的安全自留地 - [ ] [2026年了，核弹还是fastjson，fastjson1.2.83 RCE是怎么回事？](https://mp.weixin.qq.com/s?__biz=MzkwNzMyNjU0MQ==&mid=2247484341&idx=1&sn=522af3f09633a3a50db2604e6a6c1435) - ICT Security Magazine - [ ] [Il dispositivo mobile come vettore di sorveglianza nella moderna TSCM](https://www.ictsecuritymagazine.com/articoli/tscm/) - [ ] [CTEM: dalla rincorsa delle vulnerabilità al governo continuo dell’esposizione](https://www.ictsecuritymagazine.com/articoli/ctem-continuous-threat-exposure-management/) - 安全419 - [ ] [安全 419 | 一周国际网安资讯：wp2shell危及5亿网站 AI加速攻击工具化](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247554111&idx=1&sn=cd486563c5e739b0e992f37150fa901e) - 丁爸 情报分析师的工具箱 - [ ] [【开源情报】以色列政要分析报告](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651156661&idx=1&sn=7f0b14985bd7d4adbd4af4e2db201f9a) - [ ] [【竞赛通知】第四届全国大学生开源情报数据采集与分析挑战专项](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651156661&idx=2&sn=44a8fd29fce24a4a725573fff7fac61c) - SANS Internet Storm Center, InfoCON: green - [ ] [Rondo Meets Geoserver, (Wed, Jul 22nd)](https://isc.sans.edu/diary/rss/33176) - [ ] [ISC Stormcast For Wednesday, July 22nd, 2026 https://isc.sans.edu/podcastdetail/10018, (Wed, Jul 22nd)](https://isc.sans.edu/diary/rss/33174) - 360威胁情报中心 - [ ] [APT-C-00（海莲花）组织最新技战术升级分析](https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247508745&idx=1&sn=d2e8bf3bed50b91adf218cabe5be731c) - Schneier on Security - [ ] [First-Person Identity Theft Story](https://www.schneier.com/blog/archives/2026/07/first-person-identity-theft-story.html) - Instapaper: Unread - [ ] [Backup di Android Google cambia le regole, cosa c’è da sapere](https://gioxx.org/2026/07/22/android-backup-storage/) - [ ] [Understand APFS version numbers](https://eclecticlight.co/2026/07/22/understand-apfs-version-numbers/) - [ ] [Super Timeline Analysis with PlasoLog2timeline](https://digitalinvestigator.blogspot.com/2026/07/super-timeline-analysis-with.html) - [ ] [Il caso OpenAI-Hugging Face l’AI ha già imparato ad aggirare le sandbox](https://www.cybersecurity360.it/nuove-minacce/il-caso-openai-hugging-face-lai-ha-gia-imparato-ad-aggirare-le-sandbox/) - [ ] [Il futuro si può comprare La sfida giuridica dei prediction market](https://www.agendadigitale.eu/mercati-digitali/il-futuro-si-puo-comprare-la-sfida-giuridica-dei-prediction-market/) - [ ] [Event Recap Forensics Europe Expo (FEE) 2026](https://www.forensicfocus.com/event-info/event-recap-forensics-europe-expo-fee-2026/) - [ ] [Digital Triage and the Rules of Evidence What Holds Up, and Where](https://blog.elcomsoft.com/2026/07/digital-triage-and-the-rules-of-evidence-what-holds-up-and-where/) - Deeplinks - [ ] [The Fourth Circuit Says Border Agents Can Search Your Phone By Hand, No Suspicion Required](https://www.eff.org/deeplinks/2026/07/fourth-circuit-says-border-agents-can-search-your-phone-hand-no-suspicion-required) - [ ] [New EU Court of Justice Ruling on Platform Liability Could Cause Collateral Damage to Freedom of Expression](https://www.eff.org/deeplinks/2026/07/new-eu-court-justice-ruling-platform-liability-could-cause-collateral-damage) - Trend Micro Research, News and Perspectives - [ ] [Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass](https://www.trendmicro.com/en_us/research/26/g/device-code-phishing.html) - www.theregister.com - Articles - [ ] [OpenAI scored an own goal with HuggingFace attack, showing how open Chinese models are winning](https://www.theregister.com/ai-and-ml/2026/07/23/openai-scored-an-own-goal-with-huggingface-attack-showing-how-open-chinese-models-are-winning/5276699) - [ ] [Linux kernel team publishes 432 CVEs in two days](https://www.theregister.com/security/2026/07/22/linux-kernel-team-publishes-432-cves-in-two-days/5276497) - [ ] [Sneaky Windows stealer targets 300+ apps, gives crims an AI profiler to maximize profits](https://www.theregister.com/security/2026/07/22/sneaky-windows-stealer-targets-300-apps-gives-crims-an-ai-profiler-to-maximize-profits/5275962) - [ ] [Greedy ransomware crews return for seconds after victims cough up first extortion payments](https://www.theregister.com/security/2026/07/22/over-a-third-of-ransomware-victims-re-extorted-after-paying/5276218) - [ ] [Council worker spared prison after four-day data-snooping spree](https://www.theregister.com/security/2026/07/22/council-worker-spared-prison-after-four-day-data-snooping-spree/5276054) - [ ] [OpenAI admits it was the source of the agent swarm that attacked Hugging Face](https://www.theregister.com/ai-and-ml/2026/07/22/openai-admits-it-was-the-source-of-the-agent-swarm-that-attacked-hugging-face/5275939) - The Hacker News - [ ] [GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier](https://thehackernews.com/2026/07/github-cuts-public-bug-bounty-payouts.html) - [ ] [Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs](https://thehackernews.com/2026/07/ubuntu-snap-confine-flaw-could-give.html) - [ ] [Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data](https://thehackernews.com/2026/07/adobe-acrobat-extension-flaw-let.html) - [ ] [Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication](https://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html) - [ ] [The Fastest Path to AI Adoption Runs Through Security](https://thehackernews.com/2026/07/the-fastest-path-to-ai-adoption-runs.html) - [ ] [OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark](https://thehackernews.com/2026/07/openai-says-its-own-ai-models-escaped.html) - [ ] [Why Modern SOCs Need Multi-Layered Detections](https://thehackernews.com/2026/07/why-modern-socs-need-multi-layered.html) - [ ] [Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA](https://thehackernews.com/2026/07/police-dismantle-kratos-phishing-kit.html) - [ ] [Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library](https://thehackernews.com/2026/07/trojanized-newtonsoftjson-fork-hides.html) - [ ] [Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents](https://thehackernews.com/2026/07/microsoft-azure-devops-mcp-flaw-lets.html) - Security Affairs - [ ] [CVE-2026-8933: Ubuntu security flaw breaks Snap sandbox protections](https://securityaffairs.com/195833/security/cve-2026-8933-ubuntu-security-flaw-breaks-snap-sandbox-protections.html) - [ ] [Adobe Acrobat Chrome extension bug enabled silent WhatsApp data theft](https://securityaffairs.com/195805/hacking/adobe-acrobat-chrome-extension-bug-enabled-silent-whatsapp-data-theft.html) - [ ] [U.S. CISA adds DD-WRT, Langflow and WordPress flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/195782/security/u-s-cisa-adds-dd-wrt-langflow-and-wordpress-flaws-to-its-known-exploited-vulnerabilities-catalog.html) - [ ] [OpenAI AI models exploited zero-days to reach Hugging Face in benchmark test](https://securityaffairs.com/195774/ai/openai-ai-models-exploited-zero-days-to-reach-hugging-face-in-benchmark-test.html) - TorrentFreak - [ ] [DNS Bypass Tweets Keep Uptobox Employee’s €197K Frozen in Disney Piracy Case](https://torrentfreak.com/dns-bypass-tweets-keep-uptobox-employees-e197k-frozen-in-disney-piracy-case/) - Krebs on Security - [ ] [LG to Ban Residential Proxies from Smart TV Apps](https://krebsonsecurity.com/2026/07/lg-to-ban-residential-proxies-from-smart-tv-apps/) - Daniel Miessler - [ ] [The OpenAI Hack Was a Mini Paperclip Maximizer](https://danielmiessler.com/blog/openai-hack-paperclip-maximizer?utm_source=rss&utm_medium=feed&utm_campaign=website)
每日安全资讯（2026-07-23）