# 每日安全资讯（2026-07-18） - 先知安全技术社区 - [ ] [HTB Fireflow：从 Langflow RCE、MCP JWT 伪造到 Kubernetes Root摘要](https://xz.aliyun.com/news/92536) - [ ] [重构SRDI](https://xz.aliyun.com/news/92534) - 安全客-有思想的安全新媒体 - [ ] [GPT-RED + AgentCyberRange：AI网络安全进入「自我博弈」时代](https://www.anquanke.com/post/id/315811) - SecWiki News - [ ] [SecWiki News 2026-07-17 Review](http://www.sec-wiki.com/?2026-07-17) - Private Feed for M09Ic - [ ] [bolucat released 202607172119 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202607172119) - [ ] [liamg contributed to liamg/readline](https://github.com/liamg/readline/pull/4) - [ ] [liamg starred liamg/readline](https://github.com/liamg/readline) - [ ] [esrrhs contributed to esrrhs/fakelua](https://github.com/esrrhs/fakelua/pull/255) - [ ] [kpcyrd contributed to RustCrypto/signatures](https://github.com/RustCrypto/signatures/pull/1425) - [ ] [strands-agents released typescript/v1.10.0 at strands-agents/harness-sdk](https://github.com/strands-agents/harness-sdk/releases/tag/typescript/v1.10.0) - [ ] [OpenAEV-Platform released 2.260717.0 at OpenAEV-Platform/openaev](https://github.com/OpenAEV-Platform/openaev/releases/tag/2.260717.0) - [ ] [Mr-xn starred PortSwigger/mcp-server](https://github.com/PortSwigger/mcp-server) - [ ] [esrrhs contributed to milochristiansen/lua](https://github.com/milochristiansen/lua/pull/39) - [ ] [niudaii starred portbuster1337/lpe-toolkit](https://github.com/portbuster1337/lpe-toolkit) - [ ] [Rvn0xsy starred knewstimek/agent-tool](https://github.com/knewstimek/agent-tool) - [ ] [LoRexxar starred TauricResearch/TradingAgents](https://github.com/TauricResearch/TradingAgents) - [ ] [pydantic released v2.12.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v2.12.0) - [ ] [CHYbeta starred xai-org/grok-build-plugin-cc](https://github.com/xai-org/grok-build-plugin-cc) - [ ] [anthropics released v2.1.212 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.212) - Microsoft Security Blog - [ ] [Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks](https://www.microsoft.com/en-us/security/blog/2026/07/17/microsoft-at-black-hat-usa-2026-defending-trust-in-the-age-of-ai-and-supply-chain-attacks/) - Doonsec's feed - [ ] [关于反人工智能字体 Anti-AI Fonts](https://mp.weixin.qq.com/s/35HjokK9rFRBxAxDdp12UA) - [ ] [我TM的真是服了](https://mp.weixin.qq.com/s/x88pUrQMSmjfulmX30tJUg) - [ ] [[译苑雅集Vol. 15] Own Your Weights: 企业要不要拥有自己的模型？](https://mp.weixin.qq.com/s/B3erNKdPvp1WD8RXawHsQg) - [ ] [上新日 | 一个软件，搞定截图录屏 + 素材编辑 / 管理 / 分享 ！ScreenFloat 上架](https://mp.weixin.qq.com/s/_CsrIjV8p5eISCuEziYLOw) - [ ] [新华社报道：习近平主席纵论全球人工智能治理体系，金句来了](https://mp.weixin.qq.com/s/OsygVjaBQMQr4pnv5N9ZGw) - [ ] [把握和应对人工智能发展的机遇和挑战，习主席强调这些关键点！](https://mp.weixin.qq.com/s/rEa-f1WnSv_YEI6kYEqpTw) - [ ] [观点 | 构建人工智能拟人化互动平台中未成年人保护的守门人监管体系](https://mp.weixin.qq.com/s/D8AfTwDtz5Ajjmo2wVfc2w) - [ ] [源码交付，信创部署！智慧园区楼宇管理平台，智能物联、无感通行、电子围栏、人脸识别、能耗管理](https://mp.weixin.qq.com/s/0YsH5qsNqiG4Nk9z9EpwdA) - [ ] [习近平主席纵论全球人工智能治理体系，金句来了](https://mp.weixin.qq.com/s/GJoP_6e8kcrtVsO07J2i-Q) - [ ] [2026 WAIC直击：RISC-V迎来“Linux时刻”，亚信明确安全底线“算力可开放，身份须可信”](https://mp.weixin.qq.com/s/qb9N4-f-tQxcwF8sKP0SkA) - [ ] [Word 快捷键实用指南](https://mp.weixin.qq.com/s/pwi8JO_2u9R3z2VFrlB6CA) - [ ] [习近平在2026世界人工智能大会暨人工智能全球治理高级别会议开幕式上的主旨讲话（全文）](https://mp.weixin.qq.com/s/AXyNu-mZQyNRRMJ6Oae7Nw) - [ ] [靠贩卖PPT方案的咨询顾问会消失吗](https://mp.weixin.qq.com/s/dHXy5mnaTVylSVd7U96ZIQ) - [ ] [奇安信亮相2026世界人工智能大会：全方位赋能AI安全治理，与哈萨克斯坦签署合作备忘录](https://mp.weixin.qq.com/s/t4joikslsTgVvSu_e6VVbA) - [ ] [聚力共赢 向新而行 | 2026奇安信集团合作伙伴分享会成功举办](https://mp.weixin.qq.com/s/5iAjuLR5cfAOP4D9WBsLng) - [ ] [网络安全领域的11种通用思维模型：CISO和创始人实用指南](https://mp.weixin.qq.com/s/NxiWDUgRzKeE2ric6wP7Vw) - [ ] [报名启动 |xa0“2026工赋砺网”软件供应链安全与漏洞管理实践专场培训](https://mp.weixin.qq.com/s/mIeG9X2DwPIdGgXdi848JA) - [ ] [VAA号码保护服务业务标识资源管理平台正式发布](https://mp.weixin.qq.com/s/uGU0XEC3TOKisFskpYm5oA) - [ ] [中国信通院与ISO/IEC JTC 5围绕产品数字护照开展技术交流](https://mp.weixin.qq.com/s/0ZyRr-9m3PCwfTVfDdiBMQ) - [ ] [一个俄语黑客、一个越狱的 Gemini，和一个6分钟建好的僵尸网络](https://mp.weixin.qq.com/s/3Mt2Rif9wcOHugMbNAK7fQ) - [ ] [AI能发现漏洞，但验证仍需人类知识](https://mp.weixin.qq.com/s/yJ62cKY6jvjWhy6jihtFOw) - [ ] [安全热点周报：微软补丁日修复漏洞数量创新高，披露3个零日漏洞](https://mp.weixin.qq.com/s/oFe4Iv_iKPiI51itrWEowA) - [ ] [奇安信集团2026年07月补丁库更新通告-第一次更新](https://mp.weixin.qq.com/s/gBhOKqZYc1j7vkF4_eMwxQ) - [ ] [教、学、练、赛、评五位一体丨赛宁大模型实验场重新定义AI人才培养](https://mp.weixin.qq.com/s/VmnLuTeWHhgoURgfaAly3Q) - [ ] [不出网环境下的渗透测试](https://mp.weixin.qq.com/s/3r2abliHAvSM7sboD_8rQw) - [ ] [天融信亮相粤网安大会，以全栈AI安全能力筑守网安南大门](https://mp.weixin.qq.com/s/f9yWYfY_Tx33_DDKM9HLsA) - [ ] [湖南公安公布5起网络安全行政执法典型案例](https://mp.weixin.qq.com/s/ovuMDMMv9xdjnpLZTD-TeQ) - [ ] [全球5大最著名黑客：一人曾拯救网络世界，中国一人凭实力强势上榜！](https://mp.weixin.qq.com/s/4rT-KJHXyKuYTKDo_ISO1A) - [ ] [安全简讯（2026.07.17）](https://mp.weixin.qq.com/s/z_11RpobfjbqCJYR-Ukjww) - [ ] [【漏洞通告】SonicWall SMA1000 SSRF漏洞(CVE-2026-15409)](https://mp.weixin.qq.com/s/wLoMxYbYUaEwTgNsZSbAKA) - [ ] [2026世界人工智能大会暨人工智能全球治理高级别会议主席声明（全文）](https://mp.weixin.qq.com/s/QCajHFpYZ5gg5Zouue_k-g) - [ ] [综述丨全球亟须加快完善人工智能治理体系](https://mp.weixin.qq.com/s/g8JYtRscyC6yUGcVYJ6cIg) - [ ] [通知 | 关于举办2026第十届工业信息安全技能大赛的通知](https://mp.weixin.qq.com/s/jJ76wfzSJeFM909qMKXSCA) - [ ] [安全威胁情报周报（2026/07/11-2026/07/17）](https://mp.weixin.qq.com/s/ojPZQPM2yFe_Hq3t8N_vEg) - [ ] [可控涌现：AVL Code 的工程范式（上） ——涌现不是魔法，而是系统属性](https://mp.weixin.qq.com/s/DkPkLMrR7ooyC2PRyR2I8g) - [ ] [安天ATool2026年首更，优化系统对象分析与注册表操作体验](https://mp.weixin.qq.com/s/LY-P730i3QzweJACuh4Lsg) - [ ] [报名倒计时7天xa0|xa02026xa0AI+网络安全高级研讨会](https://mp.weixin.qq.com/s/d_bESLdC4cURpJwkqJr1Nw) - [ ] [用AI跑赢漏洞攻防战：漏洞自动化挖掘、验证、防御实战框架](https://mp.weixin.qq.com/s/SF0zqSBiMeQuOjfxAnLjjw) - [ ] [报名倒计时7天 | 2026xa0AI+网络安全高级研讨会](https://mp.weixin.qq.com/s/V3WicS5l00WQzQApT_9Nig) - [ ] [GitHub Copilot 在聊天中拒绝有害请求，然后用代码写入](https://mp.weixin.qq.com/s/PyScGsGdyOu16kMMSahBPA) - [ ] [净网专项行动 | 网警破获侵犯公民个人信息案，13人被采取刑事强制措施](https://mp.weixin.qq.com/s/bdPWmD2dYKFrDQVOMCpJJw) - [ ] [安卓逆向 -- 某诗词类APP会员保姆教程](https://mp.weixin.qq.com/s/fBqqzzPWJxD7BIyX0SdZyg) - [ ] [Forensics++ 开源取证工具工作台正式上线!](https://mp.weixin.qq.com/s/Vi7654aVGxR_4e-85R5bdw) - [ ] [真相来了 | 移花接木编造谣言发布者被依法处理](https://mp.weixin.qq.com/s/fmpYSGQ8MEikXjlVaulEjw) - [ ] [《网络安全技术 人工智能应用安全分类分级方法》等4项国家标准公开征求意见](https://mp.weixin.qq.com/s/q7bsYEhCirS3hdM0drp-1Q) - [ ] [最高检：今年上半年起诉利用网络实施的犯罪7.7万人 电诈犯罪3.2万人](https://mp.weixin.qq.com/s/4qAkBe9r6KUxHwQWZ5MnbQ) - [ ] [可口可乐旗下超滤奶品牌fairlife遭遇黑客攻击 全美生产运营暂停](https://mp.weixin.qq.com/s/UkJAA99HYAww_9bmbIjMnQ) - [ ] [AI编程就是一头蛮牛](https://mp.weixin.qq.com/s/Viw03h-8h8ptPYW31Irz3g) - [ ] [全文 | 习近平在2026世界人工智能大会暨人工智能全球治理高级别会议开幕式上的主旨讲话](https://mp.weixin.qq.com/s/eZiUq8pjsF6zxzFhq9fsJA) - [ ] [三下乡 | 网络空间安全学院“红炉寻迹·薪续三线”团队开展“赓续红色基因 传承三线精神”大学生社会实践活动](https://mp.weixin.qq.com/s/rDweNRtIIzjNCD41tk9Y1A) - [ ] [【ITP-AI/A/T】河北-信息技术应用创新专业人员培训开班信息](https://mp.weixin.qq.com/s/Ja_RenMrLw603JYql7KVJg) - [ ] [【ITP-AI】贵州-信息技术应用创新专业人员培训开班信息](https://mp.weixin.qq.com/s/ONtdrgDjM6FqNIGlsAfptg) - [ ] [【ECSP-M/T/D】河南-教育系统网络安全保障专业人员培训开班信息](https://mp.weixin.qq.com/s/5xNJKUqxMuw-Le-60dovlg) - [ ] [【ECSP-M】安徽-教育系统网络安全保障专业人员培训开班信息](https://mp.weixin.qq.com/s/BO8F9OcY3qXZDQ6Zi9ggag) - [ ] [【ECSP-M/G】陕西-教育系统网络安全保障专业人员培训开班信息](https://mp.weixin.qq.com/s/zI5VQeNO1Cp9VxUcfNrZHA) - [ ] [转载 | 2026年高校思想政治工作队伍数字素养能力提升专题培训班](https://mp.weixin.qq.com/s/ifFnqyNxSiK3PyEiziruUg) - [ ] [真相来了 | 用旧视频冒充实时灾情 发布者被行拘6日](https://mp.weixin.qq.com/s/7Vh2e_FRHzUcypYt7AmdDw) - [ ] [WAIC 2026｜中国电信天翼安全AI安全系列成果登陆上海世博展览馆](https://mp.weixin.qq.com/s/RDFlNRZ-H8-S5ft5AQwkfA) - [ ] [我可以把这条三星内存条和这块固态硬盘安装到这台华硕电脑上吗？](https://mp.weixin.qq.com/s/uGHiuUvqFMbqOorwClhqRQ) - [ ] [动态｜2025年人工智能应用典型案例名单](https://mp.weixin.qq.com/s/gYGYSO5T2KCSWtrJOPfybw) - [ ] [动态｜北京开展2026年智能网联汽车专项政策相关事项申报工作](https://mp.weixin.qq.com/s/CK0vL_EReUZK4LBuQj_duA) - [ ] [护网国护 蓝队中级 没啥要求 价格高于市场价 毕业](https://mp.weixin.qq.com/s/IG-SKHFgk0MNuIQjdLS9fA) - [ ] [mac最好用的android模拟器](https://mp.weixin.qq.com/s/6jYybemijIs40S3DyhTxYA) - [ ] [微软创纪录的漏洞补丁月意味了什么](https://mp.weixin.qq.com/s/i_ETBHfxzhk7h4Fh0ZQ4Pw) - [ ] [AI 安全攻防持续升级｜构建全生命周期防护，CCRC-AISO 护航企业 AI 安全](https://mp.weixin.qq.com/s/nqKjPy6a1Vis1rxCKqqKsg) - [ ] [AI Agent 又出现数据注入](https://mp.weixin.qq.com/s/LwGihQ3jAz8JOFCR6gxSig) - [ ] [AI正在终结“眼见为实”：文件信任体系迎来重构时刻](https://mp.weixin.qq.com/s/tzG8ym_rqevvQ6hlpZaj0Q) - [ ] [OpenAI 推出 GPT-Red 自动化红队模型；苹果xa0AI 中国市场落地方案出炉，联动阿里、百度大模型满足本地化合规审核要求| 牛览](https://mp.weixin.qq.com/s/p7zylpbi5o_i71TkeG3pyA) - [ ] [武汉大学NIS&PLab两项合作成果被信息安全领域国际顶级会议ACM CCS 2026录用](https://mp.weixin.qq.com/s/PcPRtC3l3yiH4djWzmjm9g) - [ ] [网络安全日报 | 2026-07-17](https://mp.weixin.qq.com/s/4Nx_eTLuhClgODsHnK26kA) - [ ] [一年减少1.5万人！这家银行通过AI技术降本增效](https://mp.weixin.qq.com/s/lDWHXelmXvFgMvuUlQVTCg) - [ ] [关于2026年“黄鹤杯”网络安全人才创新大赛线上初赛开赛的通知](https://mp.weixin.qq.com/s/GTDi5ig5b5ys-mBWSrCO9Q) - [ ] [关于开展网络和数据安全赛事平台能力检测服务的通知](https://mp.weixin.qq.com/s/ZtxZguqeThItFOYdsCYOIg) - [ ] [“十五五”医疗安全：四大支柱筑牢公立医院数智化底座](https://mp.weixin.qq.com/s/hLckcRxDJcxCAm3QXcTxzQ) - [ ] [国行苹果AI正式落地！三大核心要点，果粉提前看懂避坑](https://mp.weixin.qq.com/s/AOM41nNvNj2lfacyl6K8qg) - [ ] [谷歌 Mantis：关于AI 代码审计如何做约束的思考](https://mp.weixin.qq.com/s/xAxGhAjz7drvHJmjgXLDuA) - [ ] [手机取证实战利器！关键时刻能解决大问题](https://mp.weixin.qq.com/s/a-Kkp4yF-_g0wrB_1DqW4w) - [ ] [知道吗？你身边的这些人在考DPO证书](https://mp.weixin.qq.com/s/TmD0wrX_W7f0GMlY2PE-CA) - [ ] [震撼！这款 WebShell 管理工具让运维效率提升百倍](https://mp.weixin.qq.com/s/Fdw4mzDm3xmqGdDd4VgyHw) - [ ] [熵密杯专题｜公钥密码之协同签名技术规范（理论篇）](https://mp.weixin.qq.com/s/I2BI8DB9ZMhyX7OsXGMWfQ) - [ ] [边界无限获长亭科技战略投资： AI + 运行时防护能力的强强联手](https://mp.weixin.qq.com/s/R_SEy5f1rUirGnTCeIkaZA) - [ ] [安全运营智能体获 IDC 认可！长亭开源双引擎推动生态共建](https://mp.weixin.qq.com/s/9b-nGXBfxTv_Pt4BoRXMpA) - [ ] [长亭科技战略投资边界无限： AI + 运行时防护能力的强强联手](https://mp.weixin.qq.com/s/BXKdD5IvcByqXTu5iubmrQ) - [ ] [7月17日高危CVE漏洞速报](https://mp.weixin.qq.com/s/6OWnpcSne6uRX6UJ6ouloQ) - [ ] [能信安：漏洞通告](https://mp.weixin.qq.com/s/u3fQutex_-GhLy7GGwk9Fg) - [ ] [50万+漏洞数据背后，墨菲安全想解决国产大模型的一个关键问题](https://mp.weixin.qq.com/s/58zx-0gFT4onX-ll565u-g) - [ ] [权威认可xa0|xa080项！中孚信息多领域入选信通院第五期《数字安全护航技术能力全景图》](https://mp.weixin.qq.com/s/G5dooxE35za0JkD2hO70UQ) - [ ] [政策解读｜四部门联合发布《金融业网络安全管理办法（征求意见稿）》，金融行业合规迎来统一监管新规范](https://mp.weixin.qq.com/s/asteFcI-7cHcr0PjElhsNA) - [ ] [一款牛叉的小程序反编译逆向工具](https://mp.weixin.qq.com/s/WxoP33kyaF9kR5UYgzALFA) - [ ] [网警护航暑期：网上冲浪，警惕这些“隐秘的角落”](https://mp.weixin.qq.com/s/oUVRbQdsSlp0YItGEJV_hw) - [ ] [西安招聘网络安全工程师，薪资：8-12K](https://mp.weixin.qq.com/s/NzWi0V1up0DqB_J8TbT_5A) - [ ] [1000人帮会群，永久会员制](https://mp.weixin.qq.com/s/Wx_pte3B5LU1X45m2EUKWw) - [ ] [中国科学院武汉植物园ARP及网络安全管理岗招聘启事](https://mp.weixin.qq.com/s/Sca6v82eDKapEGKs1sEYZw) - [ ] [事业编制！中国网络安全审查认证和市场监管大数据中心2026年度公开招聘公告](https://mp.weixin.qq.com/s/_2HgD-sfEbSM9_O9BvyxIQ) - [ ] [从零开始学习零信任安全](https://mp.weixin.qq.com/s/Tbry8rO_cKwHcVHufDwz7w) - [ ] [漏洞复现 | WordPress WooCommerce Designer Pro存在任意文件读取(CVE-2025-10897)](https://mp.weixin.qq.com/s/Rf3w_amp_ZxkZ-mCvwKEuw) - [ ] [网安AI速报 | 2026.07.17](https://mp.weixin.qq.com/s/VvwRDVOjzaDzVivOS7yN7g) - [ ] [Mythos 对企业安全架构影响的思考](https://mp.weixin.qq.com/s/-QG58sO3eTrqJvNpblBq-Q) - [ ] [AI 赋能的WebShell 工具！Godzilla增强版，AI MCP 远程操控，内存马注入、提权，红队免杀对抗拉满](https://mp.weixin.qq.com/s/WXrm0GkuiaRPk3AVQsigfA) - [ ] [《国家网络身份认证公共服务管理办法》施行一周年之际，已有4000万人申领认证——“网络身份认证凭证”有多好用？](https://mp.weixin.qq.com/s/zzUwxpfmiWbawjYhfIHjsw) - [ ] [信息安全等级保护培训](https://mp.weixin.qq.com/s/y41wNvKxQHrm4oFrVU1yaw) - [ ] [100页硬核解读：当 Claude 自己开始写 Skill，人类作者何去何从？——2026 Skill 蓝皮书，基于 67,196 条真实数据的残酷回答](https://mp.weixin.qq.com/s/T5FIGrKaFbEuQoXlwsaAeg) - [ ] [模拟攻击技术要求](https://mp.weixin.qq.com/s/Wxa__7XvxAhg7dYKR-zDGw) - [ ] [60页PPT Harness Engneering——驯服Agent：从理论到落地](https://mp.weixin.qq.com/s/xGUGylMcp5S6aWHPJ4mlBw) - [ ] [Ciphey：AI 驱动的自动解密/解码工具，Rust重构版](https://mp.weixin.qq.com/s/2bA9gOWD75AzCVcRuLpu7Q) - [ ] [生成式人工智能服务合规备案指南(2026年)](https://mp.weixin.qq.com/s/gGJSkD7k5N4VKuosLhY0cw) - Recent Commits to cve:main - [ ] [Update Fri Jul 17 11:54:01 UTC 2026](https://github.com/trickest/cve/commit/cf29b986be3ae7c9144123b101d864868676099e) - Paper - 知道创宇404实验室 - [ ] [Prismata：约束 Web 智能体中的跨站提示注入](https://paper.seebug.org/3503) - ElcomSoft blog - [ ] [The Long, Strange History of PDF (In)Security – And the Arrest That Made It Personal](https://blog.elcomsoft.com/2026/07/the-long-strange-history-of-pdf-insecurity-and-the-arrest-that-made-it-personal/) - obaby 𝐢𝐧⃝ void - [ ] [be water](https://zhongxiaojie.cn/2026/07/1653/) - Sandfly Security Blog RSS Feed - [ ] [How Agentless Linux EDR Detects Rootkits Over SSH](https://sandflysecurity.com/blog/how-agentless-linux-edr-detects-rootkits-over-ssh) - Inside Stormshield - [ ] [Stormshield, de nouveau dans la jungle](https://stories.stormshield.com/stormshield-de-nouveau-dans-la-jungle/) - PortSwigger Blog - [ ] [Burp's new Ambassadors: learn from the people who use Burp Suite everyday](https://portswigger.net/blog/burps-new-ambassadors-learn-from-the-people-who-use-burp-suite-everyday) - 🔐Blog of Osanda - [ ] [I Thought I Found a Prime Pattern That Breaks RSA](https://osandamalith.com/2026/07/17/i-thought-i-found-a-prime-pattern-that-breaks-rsa/?utm_source=rss&utm_medium=rss&utm_campaign=i-thought-i-found-a-prime-pattern-that-breaks-rsa) - Horizon3.ai - [ ] [CVE-2026-15409 / CVE-2026-15410 | SonicWall SMA1000 Server-Side Request Forgery and Code Injection Vulnerabilities](https://horizon3.ai/attack-research/vulnerabilities/cve-2026-15409-cve-2026-15410/) - Bug Bounty in InfoSec Write-ups on Medium - [ ] [Zero Credentials, Full Access: Inside a Complete Authorization Failure](https://infosecwriteups.com/zero-credentials-full-access-inside-a-complete-authorization-failure-1607f0cf12ca?source=rss----7b722bfd1b8d--bug_bounty) - [ ] [How I Found a Cross-Student IDOR in Academy LMS That Leaked Correct Quiz Answers](https://infosecwriteups.com/how-i-found-a-cross-student-idor-in-academy-lms-that-leaked-correct-quiz-answers-c68bfe06f3a0?source=rss----7b722bfd1b8d--bug_bounty) - [ ] [SAR 2,629 For Stored XSS via svg Image Leading to ATO](https://infosecwriteups.com/sar-2-629-for-stored-xss-via-svg-image-leading-to-ato-1916c50251dc?source=rss----7b722bfd1b8d--bug_bounty) - Malwarebytes - [ ] [Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords](https://www.malwarebytes.com/blog/news/2026/07/shark-vacuum-flaw-exposes-cameras-home-maps-and-wi-fi-passwords) - [ ] [How to use GitHub safely](https://www.malwarebytes.com/blog/how-to/2026/07/how-to-use-github-safely) - 腾讯玄武实验室 - [ ] [Xuanwu Atuin AI 在 CyberGym 上的表现：GLM-5.2 更新结果](https://xlab.tencent.com/cn/2026/07/17/xuanwu-atuin-cybergym-glm52/) - text/plain - [ ] [Guidelines for URL Storage and Comparison](https://textslashplain.com/2026/07/17/guidelines-for-url-storage-and-comparison/) - HackerNews - [ ] [可口可乐称 Fairlife 勒索软件攻击导致美国乳制品生产暂停](http://0.0.0.0:8080/post/64482) - [ ] [23andMe 就基因数据泄露事件达成 1800 万美元和解](http://0.0.0.0:8080/post/64481) - [ ] [Scattered Spider 成员因入侵伦敦交通局被判五年监禁](http://0.0.0.0:8080/post/64480) - [ ] [遗留系统，现实冲击：OT 安全的真实面貌](http://0.0.0.0:8080/post/64479) - [ ] ["ClickLock Stealer"通过社会工程学和进程终止绕过 macOS 安全防护](http://0.0.0.0:8080/post/64478) - [ ] [F5 修复多个 NGINX 和 BIG-IP 漏洞](http://0.0.0.0:8080/post/64477) - SentinelOne - [ ] [The Good, the Bad and the Ugly in Cybersecurity – Week 29](https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-29-8/) - bishopfox.com - [ ] [Using MCP Agents for Penetration Testing](https://bishopfox.com/blog/using-mcp-agents-for-penetration-testing) - 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台 - [ ] [每月10万美元！交易员据悉可获取特朗普帖文抢先看服务](https://blog.upx8.com/%E6%AF%8F%E6%9C%8810%E4%B8%87%E7%BE%8E%E5%85%83-%E4%BA%A4%E6%98%93%E5%91%98%E6%8D%AE%E6%82%89%E5%8F%AF%E8%8E%B7%E5%8F%96%E7%89%B9%E6%9C%97%E6%99%AE%E5%B8%96%E6%96%87%E6%8A%A2%E5%85%88%E7%9C%8B%E6%9C%8D%E5%8A%A1) - [ ] [苹果公司向数十名OpenAI员工发律师函](https://blog.upx8.com/%E8%8B%B9%E6%9E%9C%E5%85%AC%E5%8F%B8%E5%90%91%E6%95%B0%E5%8D%81%E5%90%8DOpenAI%E5%91%98%E5%B7%A5%E5%8F%91%E5%BE%8B%E5%B8%88%E5%87%BD) - [ ] [造谣小米SU7碰撞断电：涉事博主一审获刑20个月并罚款十万](https://blog.upx8.com/%E9%80%A0%E8%B0%A3%E5%B0%8F%E7%B1%B3SU7%E7%A2%B0%E6%92%9E%E6%96%AD%E7%94%B5-%E6%B6%89%E4%BA%8B%E5%8D%9A%E4%B8%BB%E4%B8%80%E5%AE%A1%E8%8E%B7%E5%88%9120%E4%B8%AA%E6%9C%88%E5%B9%B6%E7%BD%9A%E6%AC%BE%E5%8D%81%E4%B8%87) - [ ] [社交平台 X 严厉打击窃取内容的创作者](https://blog.upx8.com/%E7%A4%BE%E4%BA%A4%E5%B9%B3%E5%8F%B0-X-%E4%B8%A5%E5%8E%89%E6%89%93%E5%87%BB%E7%AA%83%E5%8F%96%E5%86%85%E5%AE%B9%E7%9A%84%E5%88%9B%E4%BD%9C%E8%80%85) - 绿盟科技技术博客 - [ ] [绿盟科技亮相十七届国际可靠性维修性安全性会议，深度解读智能体全栈安全防护体系](https://blog.nsfocus.net/%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e4%ba%ae%e7%9b%b8%e5%8d%81%e4%b8%83%e5%b1%8a%e5%9b%bd%e9%99%85%e5%8f%af%e9%9d%a0%e6%80%a7%e7%bb%b4%e4%bf%ae%e6%80%a7%e5%ae%89%e5%85%a8%e6%80%a7%e4%bc%9a%e8%ae%ae/) - [ ] [绿盟科技亮相2026世界人工智能大会 | 筑牢AI安全底座，护航智能向善发展](https://blog.nsfocus.net/%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e4%ba%ae%e7%9b%b82026%e4%b8%96%e7%95%8c%e4%ba%ba%e5%b7%a5%e6%99%ba%e8%83%bd%e5%a4%a7%e4%bc%9a-%e7%ad%91%e7%89%a2ai%e5%ae%89%e5%85%a8%e5%ba%95%e5%ba%a7%ef%bc%8c/) - [ ] [【公益译文】2026年AI指数报告（八）](https://blog.nsfocus.net/%e3%80%90%e5%85%ac%e7%9b%8a%e8%af%91%e6%96%87%e3%80%912026%e5%b9%b4ai%e6%8c%87%e6%95%b0%e6%8a%a5%e5%91%8a%ef%bc%88%e5%85%ab%ef%bc%89/) - [ ] [企业文档安全最佳实践（四）：集团权限归集与统一管理——横纵立体，密钥定界](https://blog.nsfocus.net/%e4%bc%81%e4%b8%9a%e6%96%87%e6%a1%a3%e5%ae%89%e5%85%a8%e6%9c%80%e4%bd%b3%e5%ae%9e%e8%b7%b5%ef%bc%88%e5%9b%9b%ef%bc%89%ef%bc%9a%e9%9b%86%e5%9b%a2%e6%9d%83%e9%99%90%e5%bd%92%e9%9b%86%e4%b8%8e%e7%bb%9f/) - 奇客Solidot–传递最新科技情报 - [ ] [科学家确认了一位玛雅数学家](https://www.solidot.org/story?sid=84858) - [ ] [天文学家探测到系外行星大气层中的氦气](https://www.solidot.org/story?sid=84857) - [ ] [为什么罗马混凝土建筑能屹立两千年而不倒](https://www.solidot.org/story?sid=84856) - [ ] [美国 CD 唱片销量涨幅超过黑胶唱片](https://www.solidot.org/story?sid=84855) - [ ] [恒星普查研究确认宇宙年龄 138 亿岁](https://www.solidot.org/story?sid=84854) - [ ] [微软开源 Comic Chat](https://www.solidot.org/story?sid=84853) - [ ] [月之暗面宣布首个 3 万亿参数开放权重模型 Kimi K3](https://www.solidot.org/story?sid=84852) - [ ] [Google Play 将于下周上架第三方应用商店](https://www.solidot.org/story?sid=84851) - [ ] [心脏病发作患者血液内有更多微塑料和纳米塑料](https://www.solidot.org/story?sid=84850) - [ ] [一加确认退出美国和欧洲市场，将继续为现有用户提供软件更新](https://www.solidot.org/story?sid=84849) - 黑鸟 - [ ] [关于反人工智能字体 Anti-AI Fonts](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451187717&idx=1&sn=0832812911b2b3a09a39a482e417120e) - 安全客 - [ ] [GPT-RED + AgentCyberRange：AI网络安全进入「自我博弈」时代](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649790226&idx=1&sn=d99d427ebc0e8d97cca9c3c386f4480f) - 代码卫士 - [ ] [Cursor IDE 自动执行被投毒仓库中的恶意代码](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526654&idx=1&sn=5365006d384a1107f89a2cd513752bca) - [ ] [n8n 令牌交换漏洞导致攻击者以其它颁发者的用户身份登录](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526654&idx=2&sn=d8f23341320a2fc13ca387fb35b9f4ad) - 奶牛安全 - [ ] [数据泄露情报2026.7.17 - 看看blackeye的库存](https://mp.weixin.qq.com/s?__biz=MzU4NjY0NTExNA==&mid=2247489843&idx=1&sn=b5118e27beea89f4d857a13dbe7fa059) - 安全学术圈 - [ ] [2026年度"CICC科学技术奖"评审结果（网络空间安全领域）](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247495645&idx=1&sn=61eff673892362c91bd7e84c9deed740) - 威努特安全网络 - [ ] [存算一体还是存算分离？别再被超融合固有认知困住](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651143062&idx=1&sn=2835c1062221e96d6907d8e2c521a456) - 绿盟科技研究通讯 - [ ] [AI与云安全事件案例分析周报｜2026.07.13 - 2026.07.17](https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247500083&idx=1&sn=bcdbc60ffc775f5074e5819542f85332) - 奇安信 CERT - [ ] [微软创纪录的漏洞补丁月意味了什么](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506691&idx=1&sn=948c5c08a0dfa7e76a03bf5ac4537588) - 全频带阻塞干扰 - [ ] [聊重要事情必须一起泡澡才能说？这样就真的安全吗？](https://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648959423&idx=1&sn=77251a767e307db85156bec41d6eb65b) - M01N Team - [ ] [每周蓝军技术推送（2026.7.11-2026.7.17）](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247495311&idx=1&sn=1795e42ce6afb08172a7c073fdc626d1) - 信息安全国家工程研究中心 - [ ] [湖南公安公布5起网络安全行政执法典型案例](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247504458&idx=1&sn=5834b99dceb697e7c69bf84ddc1f5a2a) - 看雪学苑 - [ ] [CVE-2022-0847 Dirty Pipe 漏洞原理深度分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617657&idx=1&sn=3610a9f9925a214f6b8918df666db2e6) - [ ] [从技术热点到产业落地，共建可信智能时代的硬件安全生态——PANDA 2026 圆满落幕](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617657&idx=2&sn=435367e6b4405117d44a906590e3a706) - [ ] [你的摄像头可能被劫持！TP-Link两款设备曝高危漏洞](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617657&idx=3&sn=b0a57e8b36ffb50937e75a2beb0992be) - [ ] [60-70K！高薪招智驾安全、IoT 渗透、大模型安全工程师](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617657&idx=4&sn=10ad65643b01d1b3d3ae548674868c2f) - 天黑说嘿话 - [ ] [Mythos 对企业安全架构影响的思考](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486250&idx=1&sn=c9918e9d61fff31ec53e391681dbdb66) - 极客公园 - [ ] [门票炒到 3000 元的 WAIC，我们找到了 AI 真正的创新](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653110707&idx=1&sn=98cbef18cac8ec0ad6e251b0fb8f92f0) - [ ] [终于用上 AI 的公司，发现业务被大模型公司抢了](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653110676&idx=1&sn=d6e6cc4e7225b70af774123b53b21515) - [ ] [Kimi 正式发布 K3 大模型，能力进阶；12.38 万，小鹏 MONA L03 大定破 4 万台；OpenAI 推出 AI 键盘 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653110654&idx=1&sn=56f3d9e944c52732db94fe404c208691) - 补天平台 - [ ] [7月京东卡上线通知来啦！准时补货开抢！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510857&idx=1&sn=5d9907ba2b43e566001fb0df267925c7) - 中国信息安全 - [ ] [习近平在2026世界人工智能大会暨人工智能全球治理高级别会议开幕式上的主旨讲话（全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264704&idx=1&sn=301b3e2ec0d48fd75e1efd4694f4d34a) - [ ] [发布 | 人工智能合作发展行动计划](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264704&idx=2&sn=b9cf51b78714c7752d067cc4aa44b93f) - [ ] [中国网络安全产业创新发展联盟发布《“AI+网信安全”典型案例集》（附下载）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264704&idx=3&sn=d787f46b94a7c3410cb4f2106e976180) - 长亭科技 - [ ] [长亭科技战略投资边界无限： AI + 运行时防护能力的强强联手](https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651390573&idx=1&sn=de18b801e3d06b1a3c006b5b640260d7) - [ ] [安全运营智能体获 IDC 认可！长亭开源双引擎推动生态共建](https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651390573&idx=2&sn=479e156d61f0a0c0b2c82d15688eeee6) - 数世咨询 - [ ] [又一家因网络攻击导致申请破产的公司](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543518&idx=1&sn=9e19961ae93dbbf3888ace613299e890) - 奇安信威胁情报中心 - [ ] [每周高级威胁情报解读(2026.07.10~07.16)](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247519530&idx=1&sn=950ac946d078bb87bb78484cbbda0222) - 云鼎实验室 - [ ] [Hacking World！极客沙龙前沿议题实录](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497821&idx=1&sn=0bd41038fea40c3246dec88d378acbc2) - 安全圈 - [ ] [【安全圈】一次勒索攻击，让可口可乐旗下工厂停产：制造业为何成为黑客重点目标？](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077880&idx=1&sn=1f579020f0a5695affb89913ff9bf8c5) - [ ] [【安全圈】AI 数据中心建设提速，安全却在“掉队”：新的攻击目标正在形成](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077880&idx=2&sn=b9f686e0133abadecfea9bbd3368851a) - [ ] [【安全圈】微软 SharePoint 高危漏洞遭快速利用：补丁窗口再次被压缩](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077880&idx=3&sn=b5b8579b32d4941fcefd1b45a0e197f9) - 京东安全应急响应中心 - [ ] [《国家网络身份认证公共服务管理办法》实施一周年 筑牢数字屏障 守护公民个人身份信息安全](https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727851031&idx=1&sn=acde5fc5a4442c1eb009bbf5b7f93a92) - [ ] [2026京麒CTF决赛 倒计时两天！](https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727851031&idx=2&sn=4b1e623fceb5a1a3de459e674f3d5dc0) - 复旦白泽战队 - [ ] [课程分享 | 读论文没有头绪？研究生第一课带你快速入门！](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247499388&idx=1&sn=26bcf43cbb3459c837d3eaf5d797e696) - 安全牛 - [ ] [AI正在终结“眼见为实”：文件信任体系迎来重构时刻](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141996&idx=1&sn=daf149b4586507817dc9d66d7debda70) - [ ] [OpenAI 推出 GPT-Red 自动化红队模型；苹果 AI 中国市场落地方案出炉，联动阿里、百度大模型满足本地化合规审核要求| 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141996&idx=2&sn=e64f39c506a771c820aeab40e5228fda) - 表图 - [ ] [[译苑雅集Vol. 15] Own Your Weights: 企业要不要拥有自己的模型？](https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247485110&idx=1&sn=33f9187155273ac2e0d27114cf631bf0) - 火绒安全 - [ ] [火绒小问答——「企业版」文件实时监控](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247535426&idx=1&sn=fb177d7fd63a2c076c2294b6ff79af2e) - [ ] [【火绒安全周报】人工智能拟人化互动服务新规/印度最大核电站疑遭勒索攻击](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247535426&idx=2&sn=721c2d89abbff1e200eeba151424575c) - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247535426&idx=3&sn=c8bce96934f46463ce0ea99b95d9016e) - 奇安信病毒响应中心 - [ ] [每周勒索威胁摘要](https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498625&idx=1&sn=b74665b7c190005a0219fa279cc18f1b) - NISL实验室 - [ ] [大模型也看不懂的黑产黑话：真实世界对抗性地下黑话检测研究](https://mp.weixin.qq.com/s?__biz=MzUxMTEwOTA3OA==&mid=2247485775&idx=1&sn=1641333bba10d33a620b5d49f3c086d1) - 吴鲁加 - [ ] [几个关于 AI 的问答](https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247486125&idx=1&sn=bff0a89d4485bf0af507e2a99df23b40) - 安全行者老霍 - [ ] [GPT-Red：OpenAI的AI 红队系统，攻击自家模型、挖掘安全漏洞](https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486847&idx=1&sn=87eb2c52f17ea3dc9c2f0be230c36633) - 墨菲安全 - [ ] [50万+漏洞数据背后，墨菲安全想解决国产大模型的一个关键问题](https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488574&idx=1&sn=af475a6e9ac889cfc9f2df80dfad2543) - CNVD漏洞平台 - [ ] [关于微软SharePoint存在远程代码执行漏洞的安全公告](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497104&idx=1&sn=8762ad9c1040c82f3d1cb9aef1b80e41) - ICT Security Magazine - [ ] [Wind Tre, sanzione da 1,7 milioni: il social engineering apre la porta, le API la spalancano](https://www.ictsecuritymagazine.com/notizie/windtre-sanzione-data-breach/) - [ ] [OkoBot: il framework modulare che carpisce le seed phrase da dentro Ledger Live e Trezor Suite](https://www.ictsecuritymagazine.com/notizie/okobot-seed-phrase-ledger-trezor/) - [ ] [Cyber Resilience Lifecycle: dal rischio teorico alla difesa operativa continua](https://www.ictsecuritymagazine.com/notizie/cyber-resilience-lifecycle-reevo/) - [ ] [Disaster recovery e business continuity: tutto si decide su RTO e RPO, non sul piano](https://www.ictsecuritymagazine.com/articoli/disaster-recovery-business-continuity-rto-rpo/) - 微步在线 - [ ] [演练季薅情报！上传Skill，全解锁](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650187150&idx=1&sn=2cfe4f16b86cfc702149871dc35bdcc7) - Yak Project - [ ] [Memfit AI 安全性和缓存优化工程实践](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529998&idx=1&sn=e70920ec004ca15c3eb6b64e28fd070a) - 纽创信安 - [ ] [从技术热点到产业落地，共建可信智能时代的硬件安全生态——PANDA 2026 圆满落幕](https://mp.weixin.qq.com/s?__biz=MzAwNTczMjAzMg==&mid=2650241891&idx=1&sn=d6d5112773efc3770badd29f652f46bc) - 安全419 - [ ] [长亭战略投资边界无限：并购整合潮席卷网安 细分赛道创业者出路何在](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247554071&idx=1&sn=5f4df8345cde090b77715449a25e2761) - [ ] [从技术热点到产业落地，共建可信智能时代的硬件安全生态——PANDA 2026 圆满落幕](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247554071&idx=2&sn=1465530e8124a7fc42fcf6a8bc4083fe) - Krypt3ia - [ ] [Threat Intelligence Report](https://krypt3ia.wordpress.com/2026/07/17/threat-intelligence-report-2/) - LastKnight.com Feed - [ ] [Google non poteva “non sapere”, e la piattaforma non è più “neutrale”](https://mgpf.it/2026/07/17/google-non-poteva-non-sapere-e-la-piattaforma-non-e-piu-neutrale.html) - OnionSec - [ ] [AI 时代，我们保护的不再只是机器，而是机器的“行为”](https://mp.weixin.qq.com/s?__biz=MzUyMTUwMzI3Ng==&mid=2247485859&idx=1&sn=fc571da01cc50db29e8c295ab8817537) - Schneier on Security - [ ] [Friday Squid Blogging: Squid Washing Up on Cape Cod Beach](https://www.schneier.com/blog/archives/2026/07/friday-squid-blogging-squid-washing-up-on-cape-cod-beach.html) - [ ] [Details of Alan Turing’s Voice Encryption System](https://www.schneier.com/blog/archives/2026/07/details-of-alan-turings-voice-encryption-system.html) - Microsoft Browser Vulnerability Research - [ ] [Rustifying Image Codecs in Chromium](https://microsoftedge.github.io/edgevr/posts/Rustifying-Image-Codecs-in-Chromium/) - Javvad Malik - [ ] [Breach of Confidence — 17 July 2026](https://javvadmalik.com/2026/07/17/breach-of-confidence-17-july-2026/) - TaoSecurity Blog - [ ] [FreeBSD Released the Most Security Advisories in Project History in June 2026](https://taosecurity.blogspot.com/2026/07/freebsd-released-most-security.html) - SANS Internet Storm Center, InfoCON: green - [ ] [ISC Stormcast For Friday, July 17th, 2026 https://isc.sans.edu/podcastdetail/10012, (Fri, Jul 17th)](https://isc.sans.edu/diary/rss/33162) - The Hacker News - [ ] [New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code](https://thehackernews.com/2026/07/new-wp2shell-wordpress-core-flaw-lets.html) - [ ] [OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests](https://thehackernews.com/2026/07/openssl-hollowbyte-flaw-could-freeze.html) - [ ] [Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT](https://thehackernews.com/2026/07/seven-malicious-vite-npm-packages-use.html) - [ ] [New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens](https://thehackernews.com/2026/07/new-nadmesh-botnet-hunts-exposed-ai.html) - [ ] [GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft](https://thehackernews.com/2026/07/goldeneyedog-subgroup-linked-to.html) - [ ] [Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images](https://thehackernews.com/2026/07/north-korea-linked-hackers-hide.html) - [ ] [E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants](https://thehackernews.com/2026/07/eu-orders-google-to-open-android-mic.html) - [ ] [The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace?](https://thehackernews.com/2026/07/the-race-to-field-military-autonomy-is.html) - [ ] [Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man](https://thehackernews.com/2026/07/armenia-detains-russian-tourist-on-us.html) - [ ] [ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files](https://thehackernews.com/2026/07/acr-stealer-uses-clickfix-lures-to.html) - [ ] [New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage](https://thehackernews.com/2026/07/new-goserpent-malware-targets-southeast.html) - [ ] [CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV](https://thehackernews.com/2026/07/cisa-adds-exploited-sharepoint-rce-zero.html) - Deeplinks - [ ] [Victory! Flock Ends Rollout of Audio “Distress Detection” of Human Voices](https://www.eff.org/deeplinks/2026/07/victory-flock-ends-rollout-audio-distress-detection-human-voices) - [ ] [Your Vision. Your Legacy. Your Future.](https://www.eff.org/deeplinks/2026/07/your-vision-your-legacy-your-future) - [ ] [How the Watch Dogs Video Game Series Mirrored and Predicted Real-World Digital Rights Issues](https://www.eff.org/deeplinks/2026/07/how-watch-dogs-video-game-series-mirrored-and-predicted-real-world-digital-rights) - GRAHAM CLULEY - [ ] [Google’s Gemini lets strangers send messages from your locked Android phone](https://www.bitdefender.com/en-us/blog/hotforsecurity/googles-gemini-strangers-messages-locked-android-phone) - Rasta Mouse - [ ] [Crystal Palace User Intrinsics](https://rastamouse.me/crystal-palace-user-intrinsics/) - 白泽安全实验室 - [ ] [黑客组织利用Gemini AI自动化构建与部署C&C僵尸网络展开攻击活动](https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492957&idx=1&sn=f75188d1363a454cc529690a8f22a872) - Security Affairs - [ ] [Ernst & Young (EY) Investigates Data Breach Involving Third-Party Support Tickets](https://securityaffairs.com/195550/data-breach/ernst-young-ey-investigates-data-breach-involving-third-party-support-tickets.html) - [ ] [A cyberattack hit Nichirei, one of Japan’s largest food companies](https://securityaffairs.com/195543/security/a-cyberattack-hit-nichirei-one-of-japans-largest-food-companies.html) - [ ] [New Russian Campaign Uses Fake Webex and Zoom Installers to Deploy Starland RAT](https://securityaffairs.com/195532/malware/new-russian-campaign-uses-fake-webex-and-zoom-installers-to-deploy-starland-rat.html) - [ ] [U.S. CISA adds KNX Association KNX Protocol Connection Authorization Option 1 and Oracle flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/195516/security/u-s-cisa-adds-knx-association-knx-protocol-connection-authorization-option-1-and-oracle-flaws-to-its-known-exploited-vulnerabilities-catalog.html) - TorrentFreak - [ ] [Pirate Sites’ Domain Hopping Habit Undermines Belgium’s New Blocking Order](https://torrentfreak.com/pirate-sites-domain-hopping-habit-undermines-belgiums-new-blocking-order/) - Security Weekly Podcast Network (Audio) - [ ] [M. Thénardier, LastPass, GitHub, EBS, Spirals, Pegasus, Shaft, Josh Marpet, and More - SWN #599](http://sites.libsyn.com/18678/m-thnardier-lastpass-github-ebs-spirals-pegasus-shaft-josh-marpet-and-more-swn-599)
每日安全资讯（2026-07-18）