# 每日安全资讯（2026-07-24） - SecWiki News - [ ] [SecWiki News 2026-07-23 Review](http://www.sec-wiki.com/?2026-07-23) - Doonsec's feed - [ ] [安恒信息开展“指尖织锦韵 巧手造好物”主题织锦小马扎DIY活动](https://mp.weixin.qq.com/s/RO8EXfdAK1lKIQTfLLU9AA) - [ ] [安全快报 | 俄罗斯情报部门利用北约国家和乌克兰联防摄像头漏洞监视军事行动](https://mp.weixin.qq.com/s/9V01iepOzB3hGFiqHbEKJw) - [ ] [腾讯云天御风控Agent升级，企业零门槛接入](https://mp.weixin.qq.com/s/hDfiuGK1dzrwOV02sbZ8cQ) - [ ] [关于 PSRC 平台关闭的公告](https://mp.weixin.qq.com/s/bs80WMkQrwxZlkHYz0UqLw) - [ ] [梁文锋四小时投资人会议实录](https://mp.weixin.qq.com/s/mb-PI2HcdzR-lv0T2xZSzQ) - [ ] [好靶场杯第一届综合赛道（流量分析-古法赛道）详细版Wireup](https://mp.weixin.qq.com/s/D4YSX_1-ZpcbT5WmYfcXkg) - [ ] [配线架连接指南，如何正确连接各类线缆](https://mp.weixin.qq.com/s/561Iex6NU7vAYi9VkdW4lA) - [ ] [人民日报:协同发力治理涉灾网络谣言](https://mp.weixin.qq.com/s/h4FW9K3ofBQbqtTqdt6Xcw) - [ ] [2026年6月份CISP考试成绩](https://mp.weixin.qq.com/s/NPSevpUlakGPZodgi1990Q) - [ ] [一图读懂 | 国家标准《网络安全技术 电子邮件系统安全技术规范》](https://mp.weixin.qq.com/s/QD4aaklp4fjkJCwDaGaPuQ) - [ ] [武汉大学博士生成果被信息安全领域国际顶级会议USENIX Security 2026录用](https://mp.weixin.qq.com/s/OHjhx7zGDuyw7fq5KaOw4w) - [ ] [网络安全日报 | 2026-07-23](https://mp.weixin.qq.com/s/qvEEtHkzZdeqbsFj30fk7w) - [ ] [AI如何重构企业安全？深圳沙龙议题分享剧透](https://mp.weixin.qq.com/s/4MBmKvAVT3l3dPKedFRgRA) - [ ] [这家银行21款自研智能体亮相，有望加速AI转型](https://mp.weixin.qq.com/s/bUtibkapjFkkl_nDgc6uPQ) - [ ] [AI Agent 沙箱网络安全：从流量隔离到智能治理](https://mp.weixin.qq.com/s/gFg9lm-sjAv3c3lFkq8j7w) - [ ] [网络安全法律红线完全指南](https://mp.weixin.qq.com/s/yAoVQjtCFxVNOEGVP8OWfg) - [ ] [iOS 27第二个公测版来了！流畅度拉满，iOS 26用户建议等这个版本](https://mp.weixin.qq.com/s/0SQQc09U3lWPQmA8C5r5QA) - [ ] [观初科技InsightSec | 大暑 - 大暑破局，炙烤“漏”洞](https://mp.weixin.qq.com/s/p2rNwoaHId7mLPcwd-Ieuw) - [ ] [滴滴紧急驰援广西暴雨洪涝灾害](https://mp.weixin.qq.com/s/nyPEASVhy1S8VikTrhDSYA) - [ ] [启明星辰加入国家数据发展研究院数据安全协同工作组](https://mp.weixin.qq.com/s/5UVBNmExrzgTovpnLtxZQw) - [ ] [海峡信息以党建赋能网安 以担当彰显本色](https://mp.weixin.qq.com/s/PzN-Jn2Geol_WzvCvStAhQ) - [ ] [卓越示范中心发布先进网络安全标准化实践库——第一期：电信行业核心业务系统商用密码应用实践](https://mp.weixin.qq.com/s/chcAPk062ryZ_QlkhuarCg) - [ ] [告别项目断档｜长短期项目双线岗位同步招募](https://mp.weixin.qq.com/s/oPowRhCL_p1ck4DocNa-Pw) - [ ] [今年后端这工资是认真的吗？](https://mp.weixin.qq.com/s/sYU97yaRb5k97qqJK7F8hw) - [ ] [金秋砺剑•聚力攻坚|涉虚拟货币案件打击实战培训9月班（成都站第35期）正式启动报名！](https://mp.weixin.qq.com/s/nlMWKeV9xS72pZ_lO-7zUQ) - [ ] [直击海量策略防火墙替换痛点，智能运维套件赋能国产化平滑更替](https://mp.weixin.qq.com/s/jKCHm02hIQszTU1PAh1Wog) - [ ] [大暑｜炎夏至盛 静守清凉](https://mp.weixin.qq.com/s/rQM3hm5ACEcqgyi5lNKQ-w) - [ ] [盛夏逢大暑｜荷风消酷暑，心静自安然](https://mp.weixin.qq.com/s/pVeY1g-WQCcBBj1dYEceoQ) - [ ] [600,000个网站面临风险:Ninja Forms存储型XSS漏洞CVE-2026-65048,CVSS评分高达9.3](https://mp.weixin.qq.com/s/psdy-kk9b-Wx-OxdH_QNuw) - [ ] [权威报告 | 安恒信息获中国GenAI赋能的托管安全服务市场份额第一](https://mp.weixin.qq.com/s/nBpHsKhDc7r4m__WqGZ8Gg) - [ ] [抱歉，团队彻底解散了！（7.23 渗透安全HackTwo）](https://mp.weixin.qq.com/s/cJNZCFyB-CMRe32rEC7_Zw) - [ ] [漏洞复现 | KodExplorer 存在弱口令漏洞](https://mp.weixin.qq.com/s/jRr9Ydz-9SOsYeyEXV-Z2w) - [ ] [网安AI速报 | 2026.07.23](https://mp.weixin.qq.com/s/UISKAvk2FU8yq_Y5MgQIEQ) - [ ] [OpenAI智能体化身黑客攻破沙箱，亚信安全如何破解Agent越权危机？](https://mp.weixin.qq.com/s/VEs6cipcN6fP733PxMssdg) - [ ] [漏洞挖掘信息收集技巧](https://mp.weixin.qq.com/s/Td5558oH8-x7yMXesBTl-Q) - [ ] [大暑热浪涌，网防不降温](https://mp.weixin.qq.com/s/JQluhYqz9kT17EQe-giawg) - [ ] [苹果圈炸锅！iOS 18.5 arm64e 真root来了，覆盖新老设备，升级建议看这里](https://mp.weixin.qq.com/s/t2_Xykxkvs4_UuIFYNWtyg) - [ ] [Linux内核模块（LKM）在提供灵活性的同时，也因缺乏准入控制沦为Rootkit和BYOVD攻击的温床](https://mp.weixin.qq.com/s/q5tcDQRk_65E9J_hINYSTw) - [ ] [面向 AI 代码审计的本地客观源码读取覆盖率工具，同时支持 Codex、Claude Code 和 OpenCode](https://mp.weixin.qq.com/s/kvSvM8r9TuuVGdiYNi1W8Q) - [ ] [攻击者网站目录问题 暴露其用 AI 把攻击做成了流水线](https://mp.weixin.qq.com/s/fJws6yg8dM-6Hs94u9iRuQ) - [ ] [从“不会开直升机”到“现在会了”：AI与脑机接口，会重新定义学习吗？](https://mp.weixin.qq.com/s/KGGktj2tCFOenPTNMYSP0g) - [ ] [36分钟一千万次播放，白宫这条视频到底在测试谁](https://mp.weixin.qq.com/s/x8NoreqFTD8Pqh6gVVYLCg) - [ ] [朝鲜下令扩大总侦察情报局职能与任务范围以应对“潜在敌人”，我东北安全与半岛情报态势面临连锁风险](https://mp.weixin.qq.com/s/uAFeQGqFyCu_1Y9cihExFw) - [ ] [安徽省数据交易所X安恒信息举办2026年安徽省高校网安及数据要素人才培养研讨会](https://mp.weixin.qq.com/s/mI3qUZLmzvqmCjFZC8gZIg) - [ ] [通山公安破获“跑分”洗钱案，抓获12名涉案人员，涉案资金流水2.7亿元](https://mp.weixin.qq.com/s/o6oTdtpbPq589y9dUvJoxg) - [ ] [广安武胜警方破获 2000 余万 “洗钱” 大案，17 人落网](https://mp.weixin.qq.com/s/Ajuv0pc7nIA3OYnZ53xNuw) - [ ] [北湖警方斩断电诈黑手，破获 VOIP 设备诈骗案](https://mp.weixin.qq.com/s/cAfQ97whsKHa1jZfeAEuzg) - [ ] [HuggingFace被AI入侵事件续：我们离天网还有多远？](https://mp.weixin.qq.com/s/1m32jqoakQmCG3_mxuxIwg) - [ ] [重磅暗访！598元上门私教彻底翻车！](https://mp.weixin.qq.com/s/BRTDW6nJlCdEgHLai6cBrQ) - Private Feed for M09Ic - [ ] [spf13 starred haierkeys/obsidian-fast-note-sync](https://github.com/haierkeys/obsidian-fast-note-sync) - [ ] [bolucat released 202607232127 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202607232127) - [ ] [INotGreen starred INotGreen/OpenLadonx](https://github.com/INotGreen/OpenLadonx) - [ ] [INotGreen forked INotGreen/opencodex from lidge-jun/opencodex](https://github.com/INotGreen/opencodex) - [ ] [Rvn0xsy starred mattpocock/skills](https://github.com/mattpocock/skills) - [ ] [Mel0day starred bikini/exploitarium](https://github.com/bikini/exploitarium) - [ ] [agentscope-ai released v2.0.5 at agentscope-ai/agentscope](https://github.com/agentscope-ai/agentscope/releases/tag/v2.0.5) - [ ] [esrrhs contributed to esrrhs/fakelua](https://github.com/esrrhs/fakelua/pull/277) - [ ] [ZeddYu starred harbor-framework/harbor](https://github.com/harbor-framework/harbor) - [ ] [lz520520 starred G4sp4rCS/CVE-2026-42980-POC](https://github.com/G4sp4rCS/CVE-2026-42980-POC) - [ ] [niudaii starred berabuddies/redis-poc](https://github.com/berabuddies/redis-poc) - [ ] [shmilylty starred berabuddies/redis-poc](https://github.com/berabuddies/redis-poc) - [ ] [su18 starred SanMuzZzZz/LuaN1aoAgent](https://github.com/SanMuzZzZz/LuaN1aoAgent) - [ ] [ourren starred AutoPT-ai/XUANJIAN-Relay](https://github.com/AutoPT-ai/XUANJIAN-Relay) - [ ] [Ridter starred berabuddies/redis-poc](https://github.com/berabuddies/redis-poc) - [ ] [pydantic released v2.16.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v2.16.0) - Microsoft Security Blog - [ ] [Email threat landscape: Q2 2026 trends and insights](https://www.microsoft.com/en-us/security/blog/2026/07/23/email-threat-landscape-q2-2026-trends-and-insights/) - Hc1m1 - [ ] [使用AI对天猫精灵IoT模块进行逆向分析](https://nobb.site/2026/07/23/0x9B/) - Paper - 知道创宇404实验室 - [ ] [自适应对抗者：面向LLM智能体安全的多轮次、多LLM基准测试](https://paper.seebug.org/3505) - 安全客-有思想的安全新媒体 - [ ] [Claude 开始自己审自己写的代码了 —— Anthropic 把"安全研究员"塞进了终端](https://www.anquanke.com/post/id/315847) - [ ] [为了“作弊”拿高分，GPT自己黑了 Hugging Face，GLM分析取证](https://www.anquanke.com/post/id/315841) - [ ] [科技云报到：WAIC观察：机器人“进厂干活”，只差一个通用底座？](https://www.anquanke.com/post/id/315837) - Recent Commits to cve:main - [ ] [Update Thu Jul 23 11:52:27 UTC 2026](https://github.com/trickest/cve/commit/efd7fc726910da5a47b5ea864d60bf92f66b594e) - ElcomSoft blog - [ ] [The RAR Mystery: Breaking RAR4 and RAR5 Encryption](https://blog.elcomsoft.com/2026/07/the-rar-mystery-breaking-rar4-and-rar5-encryption/) - Horizon3.ai - [ ] [Verification Closes the Loop](https://horizon3.ai/intelligence/blogs/verification-closes-the-loop/) - Reverse Engineering - [ ] [Remus Stealer Analysis: Fileless Execution, In-Memory Payload Extraction & C2 Discovery](https://www.reddit.com/r/ReverseEngineering/comments/1v4nlll/remus_stealer_analysis_fileless_execution/) - [ ] [Transformers Forged To Fight Revival Offline Version Updated](https://www.reddit.com/r/ReverseEngineering/comments/1v4cijp/transformers_forged_to_fight_revival_offline/) - SentinelOne - [ ] [Mount Here, Read There: Twin Path Traversal CVEs in Kubernetes Storage](https://www.sentinelone.com/blog/mount-here-read-there-twin-path-traversal-cves-in-kubernetes-storage/) - Malwarebytes - [ ] [Millions of cars could be tracked and unlocked by a hidden security flaw](https://www.malwarebytes.com/blog/bugs/2026/07/millions-of-cars-could-be-tracked-and-unlocked-by-a-hidden-security-flaw) - [ ] [WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw](https://www.malwarebytes.com/blog/bugs/2026/07/whatsapp-web-chats-exposed-by-adobes-acrobat-extension-flaw) - Intigriti - [ ] [AI’s convenience cost. The impact of the lethal trifecta on organizations today](https://www.intigriti.com/blog/business-insights/impact-of-the-lethal-trifecta-on-organizations-today) - 奇客Solidot–传递最新科技情报 - [ ] [2026 年菲尔兹奖公布](https://www.solidot.org/story?sid=84910) - [ ] [Google 因搜索和应用商店服务违反 DMA 被欧盟罚款 8.9 亿欧元](https://www.solidot.org/story?sid=84909) - [ ] [逾半数候鸟种群数量出现下降](https://www.solidot.org/story?sid=84908) - [ ] [科学家发现给工蜂分配工作的隐蔽开关](https://www.solidot.org/story?sid=84907) - [ ] [Codeberg 拒绝托管 vibe-coded 项目](https://www.solidot.org/story?sid=84906) - [ ] [通用汽车悄悄成为一家订阅服务公司](https://www.solidot.org/story?sid=84903) - [ ] [法国禁止 15 岁以下儿童使用社交媒体](https://www.solidot.org/story?sid=84902) - [ ] [天文学家首次观测到系外卫星](https://www.solidot.org/story?sid=84901) - [ ] [美国陆军也耗尽了它的可用 Token 要求限制使用](https://www.solidot.org/story?sid=84900) - HackerNews - [ ] [Adobe Acrobat 扩展漏洞可让恶意网站读取 WhatsApp Web 数据](http://0.0.0.0:8080/post/64506) - [ ] [瑞士铁路巨头 Stadler 在遭受网络攻击后拒绝 1230 万美元赎金要求](http://0.0.0.0:8080/post/64505) - [ ] [韩国披露数据泄露事件，影响全球外交官](http://0.0.0.0:8080/post/64504) - [ ] [拥有 3 亿安装量的 Adobe 扩展中的漏洞可导致 WhatsApp 数据被盗](http://0.0.0.0:8080/post/64503) - [ ] [Oracle 通过季度安全更新修复超过 1,400 个漏洞](http://0.0.0.0:8080/post/64502) - [ ] [Vibe-Coded 应用充斥着可利用的安全漏洞](http://0.0.0.0:8080/post/64501) - Shostack & Friends Blog - [ ] [Black Hat Talks I'm Excited to Attend This Year (Kymberlee's version)](https://shostack.org/blog/kymberlee-blackhat-hype/) - 黑鸟 - [ ] [黑客拼装出的全能毁灭型后门，先偷窥再一键清空硬盘](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451187782&idx=1&sn=79aaec6abd965a97b8c648bd155d6c17) - 绿盟科技技术博客 - [ ] [001号！绿盟科技斩获国内首张智能体管理能力成熟度L2认证证书](https://blog.nsfocus.net/001%e5%8f%b7%ef%bc%81%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e6%96%a9%e8%8e%b7%e5%9b%bd%e5%86%85%e9%a6%96%e5%bc%a0%e6%99%ba%e8%83%bd%e4%bd%93%e7%ae%a1%e7%90%86%e8%83%bd%e5%8a%9b%e6%88%90%e7%86%9f/) - [ ] [半场见分晓 「AI」见真章 | 绿盟科技2026年中AI安全成果实录](https://blog.nsfocus.net/%e5%8d%8a%e5%9c%ba%e8%a7%81%e5%88%86%e6%99%93-%e3%80%8cai%e3%80%8d%e8%a7%81%e7%9c%9f%e7%ab%a0-%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%802026%e5%b9%b4%e4%b8%adai%e5%ae%89%e5%85%a8%e6%88%90%e6%9e%9c/) - 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台 - [ ] [美国众议院提出人工智能“终止开关”法案](https://blog.upx8.com/%E7%BE%8E%E5%9B%BD%E4%BC%97%E8%AE%AE%E9%99%A2%E6%8F%90%E5%87%BA%E4%BA%BA%E5%B7%A5%E6%99%BA%E8%83%BD-%E7%BB%88%E6%AD%A2%E5%BC%80%E5%85%B3-%E6%B3%95%E6%A1%88) - [ ] [SpaceX拟在得州新建数据中心 规模或超孟菲斯基础设施](https://blog.upx8.com/SpaceX%E6%8B%9F%E5%9C%A8%E5%BE%97%E5%B7%9E%E6%96%B0%E5%BB%BA%E6%95%B0%E6%8D%AE%E4%B8%AD%E5%BF%83-%E8%A7%84%E6%A8%A1%E6%88%96%E8%B6%85%E5%AD%9F%E8%8F%B2%E6%96%AF%E5%9F%BA%E7%A1%80%E8%AE%BE%E6%96%BD) - 安全客 - [ ] [Claude 开始自己审自己写的代码了 —— Anthropic 把"安全研究员"塞进了终端](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649790246&idx=1&sn=15ad8cad9386009032fd019e5d34c3fd) - 威努特安全网络 - [ ] [炼化装置不停机,安全防线不降级:工控安全解决方案解析](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651143196&idx=1&sn=1ea725803a7809a943626cf45585612f) - 信息时代的犯罪侦查 - [ ] [司法场景中具有大语言模型框架所必需的天然人类反馈条件](https://mp.weixin.qq.com/s?__biz=MzAxNTA4NDAwOQ==&mid=2650737056&idx=1&sn=12ec041dc1eb14bd25ffc5fe122910d5) - 安全学术圈 - [ ] [2025年度陕西省科学技术奖励名单(网络空间安全领域）](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247495675&idx=1&sn=2453f3e06d393a57b3b090a115d031b6) - 天黑说嘿话 - [ ] [hvv 2026 - 404 只是表象：一次 HVV Web 告警，最后应该留下什么](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486266&idx=1&sn=4088f6b3576cdffffb8ddf4cec5e7627) - 信息安全国家工程研究中心 - [ ] [专家解读｜以IPv6创新驱动人工智能与行业智能化深度融合 开启网络强国建设新征程](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247504484&idx=1&sn=48b7d51b23bc8202b06390fc236cd4bf) - 中国信息安全 - [ ] [专题·原创 | AI中转站：AI供应链的新型控制点风险与治理路径](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264985&idx=1&sn=88f504238ff72e34f8a130f91bf12933) - [ ] [关注 | 六年深耕，从蓉城走向全国——第六届极客少年挑战赛正式启动](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264985&idx=2&sn=0b71a08b94f49089165ba1feda8332fa) - [ ] [CNNVD | 关于Oracle多个安全漏洞的通报](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264985&idx=3&sn=542068544a5ddf99e42f05c63179de5f) - [ ] [鼓励包容并蓄 促进文明互鉴——携手构建公正合理的全球人工智能治理体系述评](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264985&idx=4&sn=789d82eaaaa03e1b119e7ecdfd7d551d) - [ ] [关注 | 公安机关严打编造传播涉汛等涉灾网络谣言，公布20起典型案例→](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264985&idx=5&sn=475424a9dd4d16d8c994258e7769e51e) - [ ] [通知 | 北京市发展改革委等联合印发《北京市关于加快智能体引领发展的若干措施》](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264985&idx=6&sn=fc351e1bf6aa19c4212a39a5f0f46f70) - 青衣十三楼飞花堂 - [ ] [把日子过成段子](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247489724&idx=1&sn=5039d5e4153e873c71389a2f254c3e98) - 看雪学苑 - [ ] [从零手写 ARM64 自定义 Linker](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617771&idx=1&sn=f58f92833b9ae49d3cedea9b044a9a71) - [ ] [比Dirty COW更致命？Linux内核9年漏洞曝光：普通用户10秒夺取root权限](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617771&idx=2&sn=0ce04995a5a97075abbd65f5e052b951) - [ ] [6天拿下国家认证！上海这张“铁饭碗”证书8月15日开班，还能+60分助力落户](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617771&idx=3&sn=bfd376e897921828ca7fd3aacd470f10) - XCTF联赛 - [ ] [比赛规则 | 第二届OpenHarmony CTF（Capture The Flaw）智能漏洞挖掘赛](https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247516592&idx=1&sn=fcc48ad5c78269e3739fd1626330d429) - 安全圈 - [ ] [【安全圈】稳定币归零只需一步：预言机漏洞让350万美元蒸发](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077963&idx=1&sn=fbc6bc660881348ada2f776fd0cc1e20) - [ ] [【安全圈】Ubuntu提权漏洞曝光，普通用户可直取root](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077963&idx=2&sn=6d462247bfe833f7f1fd8cd4e68fb750) - [ ] [【安全圈】一个表单打穿服务器：n8n五步攻击链曝光](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077963&idx=3&sn=37943222f2d8b96d320c48d4c4e06ad4) - 奇安信威胁情报中心 - [ ] [AI发疯实录：那些被我们亲手放出来的赛博怪物](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247519557&idx=1&sn=09ebee2980c7cbc22613e1ddb0846572) - 数世咨询 - [ ] [到底发生了什么？人工智能历史上首个沙盒逃逸解读](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543599&idx=1&sn=7d61e4c185cb125088043c0f97f94584) - [ ] [强势霸榜 | 悬镜安全入选信通院泰尔实验室《数字安全护航技术能力全景图》多领域，持续领跑！](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543599&idx=2&sn=1aeb23fab3aa96cfa29ec0351fe7abe9) - [ ] [WAIC 2026｜中国电信天翼安全Token安全路由器发布，护航企业AI应用安全落地](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543599&idx=3&sn=d309de311ed17b1a7e926bce5317441a) - 奇安信 CERT - [ ] [年中报告 | AI 重构攻防：2026 漏洞态势深度解读](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506858&idx=1&sn=488974dbbfedaf4327deea3d4451900b) - 安全牛 - [ ] [第十三版《网络安全企业100强》正式发布](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651142055&idx=1&sn=123a894842a559f7249126bf265effc7) - 默安科技 - [ ] [默安AI智能网关：构建安全稳定的AI基础设施](https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247501912&idx=1&sn=1eb41d9ee1d104910d8252469233cdac) - 漏洞战争 - [ ] [网安人的"马驹桥"](https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247486141&idx=1&sn=1c5eaaae16919b1d7145765b8bb927f1) - 青藤云安全 - [ ] [AI入侵课：OpenAI 模型作弊入侵 Hugging Face](https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650851596&idx=1&sn=9f86d533de7be4c2841d0dd579802b9a) - 极客公园 - [ ] [伪多 Agent 泛滥的出海圈，我们离真正的智能营销还差多远？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653111070&idx=1&sn=7a1dca8940bd38c628040fefba41c88f) - [ ] [这可能是今年最值得报名的一场影像挑战赛](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653111070&idx=2&sn=f4e62a7212d2ff7aa5d4e5c0158ff381) - [ ] [从「视觉生成」到「世界生成」：智象未来三个月融资超 21 亿，跻身独角兽](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653111046&idx=1&sn=1ed6b4baab2d11c646ab488fa1187225) - [ ] [传 iPhone 18 Pro 开始量产；宇树科技王兴兴：具身 GPT 最快 2、3 年到来；黄仁勋：无需害怕中国开源模型｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653111014&idx=1&sn=aca59e34973222461de010e76e492449) - 火绒安全 - [ ] [大暑 | 蝉鸣大暑到 绒护夏日宁](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247535666&idx=1&sn=73dfd7511833088d5c734e2311764c62) - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247535666&idx=2&sn=12fb09553bb1595c641ca5bbfb5af47e) - 云鼎实验室 - [ ] [Redis 再曝远程代码执行漏洞，多版本受影响](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497835&idx=1&sn=0fa58497b63e1139bbe65b6d38f852bc) - Beacon Tower Lab - [ ] [漏洞预警丨Redis stream 消费组 NACK 双重释放远程代码执行漏洞（CVE-2026-25243 补丁绕过）](https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247488337&idx=1&sn=621a9719182247265a2067568c761593) - 美团技术团队 - [ ] [让AI离开温室，走向动态世界：MineExplorer揭示顶级多模态大模型被忽视的能力断层](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651783046&idx=1&sn=a18ff849165bb78a263bdc32c4f55309) - [ ] [下一代搜索智能体评测基准！美团开源LoHoSearch，用知识图谱校准AI能力认知](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651783046&idx=2&sn=847f703c3c0e53c6323fb4a06185b473) - [ ] [55 万元大奖等你挑战！2026 美团低空经济与具身智能挑战赛启动](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651783046&idx=3&sn=585f79be999f3e04f23f3145732854c9) - TrustedSec - [ ] [CCPA Update: Who’s In Scope (Part 1)](https://trustedsec.com/blog/ccpa-update-whos-in-scope-part-1) - 迪哥讲事 - [ ] [突发!某src关闭???](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499654&idx=1&sn=47f06fc5ea2131c9c0b085ca8a458d97) - 墨菲安全 - [ ] [AI如何重构企业安全？深圳沙龙议题分享剧透](https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488586&idx=1&sn=675b01d5829a736484c6b8ff6628782d) - Arturo Di Corinto - [ ] [L’uso dell’AI nella guerra alla realtà. Dalle manipolazioni dell’informazione di Sam Altman alla ricostruzione della “guerra profonda” di Arturo di Corinto](https://dicorinto.it/guerra-profonda/luso-dellai-nella-guerra-alla-realta-dalle-manipolazioni-dellinformazione-di-sam-altman-alla-ricostruzione-della-guerra-profonda-di-arturo-di-corinto/) - Tails - News - [ ] [Tails 7.10](https://tails.net/news/version_7.10/) - 网安国际 - [ ] [持续报名|一文玩转南开大学 DataCon AI夏令营](https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652318342&idx=1&sn=980d13e47569070c2c5ec8b9268dcc9d) - 安全419 - [ ] [平安PSRC关停背后：大模型“漏洞海啸”与白帽经济的黄昏](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247554123&idx=1&sn=a192e2c79e7607b39e6ca571e20d9fe5) - [ ] [强势霸榜 | 悬镜安全入选信通院泰尔实验室《数字安全护航技术能力全景图》多领域，持续领跑！](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247554123&idx=2&sn=bd165d57228541739dfef295c9e45e36) - IT Service Management News - [ ] [Seminario sulla NIS2 (con mio intervento)](http://blog.cesaregallotti.it/2026/07/seminario-sulla-nis2-con-mio-intervento.html) - SANS Internet Storm Center, InfoCON: green - [ ] [When the "Autonomous Attacker" Is Your Own AI Model, (Thu, Jul 23rd)](https://isc.sans.edu/diary/rss/33180) - [ ] [ISC Stormcast For Thursday, July 23rd, 2026 https://isc.sans.edu/podcastdetail/10020, (Thu, Jul 23rd)](https://isc.sans.edu/diary/rss/33178) - 国家互联网应急中心CNCERT - [ ] [网络安全信息与动态周报2026年第29期（7月13日-7月19日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501920&idx=1&sn=fbad9d5e3cfb83c4d8838e752858231b) - ICT Security Magazine - [ ] [Breach and Attack Simulation: misurare di continuo se le difese reggono davvero](https://www.ictsecuritymagazine.com/articoli/breach-and-attack-simulation-bas/) - 悬镜安全 - [ ] [强势霸榜 | 悬镜安全入选信通院泰尔实验室《数字安全护航技术能力全景图》多领域，持续领跑！](https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647800044&idx=1&sn=fc1b8a6e4d0c795c0f04b8aa929c57e8) - Tor Project blog - [ ] [New Release: Tails 7.10](https://blog.torproject.org/new-release-tails-7_10/) - [ ] [New Alpha Release: Tor Browser 16.0a9](https://blog.torproject.org/new-alpha-release-tor-browser-160a9/) - The Hacker News - [ ] [Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes](https://thehackernews.com/2026/07/russian-espionage-group-exploited.html) - [ ] [ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories](https://thehackernews.com/2026/07/threatsday-android-spyware-plc-attacks.html) - [ ] [Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files](https://thehackernews.com/2026/07/claude-cowork-flaw-could-let-ai-agent.html) - [ ] [Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge](https://thehackernews.com/2026/07/chaos-ransomware-uses-msarat-to-route.html) - [ ] [China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks](https://thehackernews.com/2026/07/china-nexus-jadeprox-uses-new-triback.html) - [ ] [How Synthetic Identity Fraud is Coming for Machine Identities](https://thehackernews.com/2026/07/how-synthetic-identity-fraud-is-coming.html) - [ ] [Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers](https://thehackernews.com/2026/07/attackers-weaponize-github-actions.html) - [ ] [Google Adds Selfie Video Recovery for Users Locked Out of Their Accounts](https://thehackernews.com/2026/07/google-adds-selfie-video-recovery-for.html) - [ ] [Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs](https://thehackernews.com/2026/07/nine-year-old-refluxfs-linux-flaw-gives.html) - [ ] [Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access](https://thehackernews.com/2026/07/check-point-patches-exploited.html) - Trend Micro Research, News and Perspectives - [ ] [13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan](https://www.trendmicro.com/en_us/research/26/g/tech-support-scams-targeting-japan.html) - [ ] [Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It](https://www.trendmicro.com/en_us/research/26/g/inside-the-openai-hugging-face-incident.html) - [ ] [Federal Agencies Warn of Ongoing PLC Exploitation Against Critical U.S. Infrastructure](https://www.trendmicro.com/en_us/research/26/g/plc-exploitation.html) - Schneier on Security - [ ] [End-to-End Encryption and “Going Dark”](https://www.schneier.com/blog/archives/2026/07/end-to-end-encryption-and-going-dark.html) - Full Disclosure - [ ] [A project is publishing full analyses of AI-discovered 0-days - first batch of 10 with reproducible exploits](https://seclists.org/fulldisclosure/2026/Jul/29) - [ ] [Synology stale DNS allows practical interception of traffic from vulnerable DSM clients](https://seclists.org/fulldisclosure/2026/Jul/28) - [ ] [Amplitude customers using domain proxies should update their configuration immediately.](https://seclists.org/fulldisclosure/2026/Jul/27) - Security Affairs - [ ] [U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/195889/security/u-s-cisa-adds-microsoft-sharepoint-and-check-point-smartconsole-flaws-to-its-known-exploited-vulnerabilities-catalog.html) - [ ] [Chaos ransomware deploys browser-based msaRAT to evade network detection](https://securityaffairs.com/195876/malware/chaos-ransomware-deploys-browser-based-msarat-to-evade-network-detection.html) - [ ] [Google Released Gemini 3.5 Flash Cyber AI, a Specialized AI Model for Vulnerability Hunting](https://securityaffairs.com/195869/security/google-released-gemini-3-5-flash-cyber-ai-a-specialized-ai-model-for-vulnerability-hunting.html) - [ ] [Check Point patches actively exploited SmartConsole authentication bypass flaw](https://securityaffairs.com/195848/hacking/check-point-patches-actively-exploited-smartconsole-authentication-bypass-flaw.html) - TorrentFreak - [ ] [Canada’s ‘Expanded Scope’ Blocking Order Targets Existing and Future Pirate Sites](https://torrentfreak.com/canadas-expanded-scope-blocking-order-targets-existing-and-future-pirate-sites/) - www.theregister.com - Articles - [ ] [OpenAI-Hugging Face attack doesn't mean agents are evil – unless you tell them to be](https://www.theregister.com/security/2026/07/24/openai-hugging-face-attack-doesnt-mean-agents-are-evil-unless-you-tell-them-to-be/5277881) - [ ] [Researchers replace downloaded macOS apps with evil twins, Apple shrugs](https://www.theregister.com/security/2026/07/24/researchers-replace-downloaded-macos-apps-with-evil-twins-apple-shrugs/5277858) - [ ] [Year-long Russian attacks infect users as soon as they look at an email](https://www.theregister.com/patches/2026/07/23/year-long-russian-attacks-infect-users-as-soon-as-they-look-at-an-email/5277358) - [ ] [Millions of California-bought cars can be hijacked via Bluetooth](https://www.theregister.com/security/2026/07/23/millions-of-california-bought-cars-can-be-hijacked-via-bluetooth/5277315) - [ ] [Oracle drops 1,449 security patches like it's the new normal](https://www.theregister.com/security/2026/07/23/oracle-drops-1449-security-patches-like-its-the-new-normal/5277114) - [ ] [Iran-linked crews are probing more flavors of US industrial kit](https://www.theregister.com/security/2026/07/23/iran-linked-crews-are-probing-more-flavors-of-us-industrial-kit/5277003) - [ ] [One ChatGPT link could smuggle a rogue AI agent into your company](https://www.theregister.com/security/2026/07/23/one-chatgpt-link-could-smuggle-a-rogue-ai-agent-into-your-company/5275116) - [ ] [Swiss train maker tells ransomware crooks to get off at the next stop](https://www.theregister.com/security/2026/07/23/stadler-rail-scoffs-at-eversts-123m-extortion-attempts/5276922) - [ ] [Talking smack about a doctor got him access to private medical files](https://www.theregister.com/security/2026/07/23/talking-smack-about-a-doctor-got-him-access-to-private-medical-files/5276604) - Daniel Miessler - [ ] [The Entire Game for AI Is Articulation of Ideal State](https://danielmiessler.com/blog/ai-ideal-state-articulation?utm_source=rss&utm_medium=feed&utm_campaign=website) - Deeplinks - [ ] [Hundreds of Drone-as-First-Responder Programs Could Soon Be Launched Across the Country](https://www.eff.org/deeplinks/2026/07/hundreds-drone-first-responder-programs-could-soon-be-launched-across-country) - Security Weekly Podcast Network (Audio) - [ ] [Fixing Vulns Is Harder Than Finding Them - PSW #936](http://sites.libsyn.com/18678/fixing-vulns-is-harder-than-finding-them-psw-936)
每日安全资讯（2026-07-24）