# 每日安全资讯（2026-07-20） - Private Feed for M09Ic - [ ] [WAY29 starred john-worker/Poe2PriceGui](https://github.com/john-worker/Poe2PriceGui) - [ ] [bolucat released 202607192114 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202607192114) - [ ] [esrrhs contributed to esrrhs/fakelua](https://github.com/esrrhs/fakelua/pull/260) - [ ] [Mr-xn starred FateLightX/AriaFlow](https://github.com/FateLightX/AriaFlow) - [ ] [ourren starred maximhq/bifrost](https://github.com/maximhq/bifrost) - [ ] [anthropics released v2.1.215 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.215) - [ ] [Mr-xn starred stardustai/dataset-viewer](https://github.com/stardustai/dataset-viewer) - SecWiki News - [ ] [SecWiki News 2026-07-19 Review](http://www.sec-wiki.com/?2026-07-19) - Doonsec's feed - [ ] [0成本！手绘线稿渐变色故事视频开源工具](https://mp.weixin.qq.com/s/gVQKSq7pTSwueKHr94jWpQ) - [ ] [这个网络布线，你能打几分](https://mp.weixin.qq.com/s/6ZhuZ01lnYx6dHoGbAuDbw) - [ ] [分享图片](https://mp.weixin.qq.com/s/2rZsiBqKHf13p2WxTWcvYQ) - [ ] [Codex桌面端定制背景](https://mp.weixin.qq.com/s/rR5JDghSz5Qaf25jpMfZIA) - [ ] [WAIC 2026 | 锦岳智慧获评 “人工智能安全漏洞治理联盟” 首批成员单位](https://mp.weixin.qq.com/s/1cQX63lsgpFCDm2s2qSJ3w) - [ ] [JavaScript 逆向 &&渗透测试辅助工具&&AntiDebug_Breaker_mcp](https://mp.weixin.qq.com/s/itztvjkR88LosymeRo4bRA) - [ ] [知识星球xa0|xa0网安政策报告PPT周报](https://mp.weixin.qq.com/s/Mb5Fsv2pWWVqGzlq99VAXw) - [ ] [菜狗安全《代码审计培训》课程全面升级(文末抽奖)](https://mp.weixin.qq.com/s/900HAnJXVCYVQ8JqNCDR4Q) - [ ] [当AI开始“编造”域名，一场针对软件供应链的精准狙击战已悄然打响](https://mp.weixin.qq.com/s/0O5q4jTmIh4xqMIkdV1BMw) - [ ] [历年HW大瓜](https://mp.weixin.qq.com/s/mNdlHlfTU8ULbKAZtN0JQQ) - [ ] [网警护航暑期 | 守护您的出行安全](https://mp.weixin.qq.com/s/nTJfB34StlhoxdB9Vnv7DQ) - [ ] [数据 -> 信息 -> 情报：威胁情报实践的现实思考](https://mp.weixin.qq.com/s/vVf7IlGcfeuDAqwyvq6Sew) - [ ] [江西裕民银行招人工智能研发工程师](https://mp.weixin.qq.com/s/3MX3hi1js0LV6JjVC0sghA) - [ ] [2026 WAIC｜曙光8000十万卡AI超集群上线第一周就跑满了](https://mp.weixin.qq.com/s/O_aJFrztzsjPZzKmzTID-A) - [ ] [中国科学院党组书记、院长侯建国《求是》发文：深刻把握教育科技人才一体发展的实践要求](https://mp.weixin.qq.com/s/k_ZTL_S7D6Uqk2s6KGXZkw) - [ ] [OpenAI秘密开发大模型超级黑客，攻击成功率高达84%](https://mp.weixin.qq.com/s/lKfCg0lnSUTFHaTcao_4sw) - [ ] [网安原创文章推荐【2026/7/18】](https://mp.weixin.qq.com/s/PVhx6WPxGLr7pHRKm6UiZQ) - [ ] [欢迎来到好靶场综合赛，今天正式开赛](https://mp.weixin.qq.com/s/kzPf2Guu4ZvTJCjbAMiQcA) - [ ] [非插件漏洞，WordPress 未授权 SQL 注入漏洞链可导致RCE](https://mp.weixin.qq.com/s/c8LpSEejoer04N1LiVFeqA) - [ ] [千里科技：从破产重整到“AI+车”新贵，智驾装机量剑指800万辆](https://mp.weixin.qq.com/s/7LAjvZWOXQ8z5hhFj2bdzg) - [ ] [流水线坏了](https://mp.weixin.qq.com/s/ePqhBsZK4ff1GSwzg20SDQ) - [ ] [1v1论文指导！985/211专业对口导师手把手指导至录用！SCI/SSCI/EI/中文核心/毕业论文](https://mp.weixin.qq.com/s/EzhzJEMFwslgeMf0X1BLZg) - [ ] [456.48万！农行河北省分行智能外呼项目](https://mp.weixin.qq.com/s/9O0LjS2Am18ECFJeYyCjeg) - [ ] [云从科技152万中！青岛银行人脸识别系统应用创新及优化项目](https://mp.weixin.qq.com/s/Se5C9DYr8cFfXJ4a2AXUiw) - [ ] [还在为拿不到公网IPv4、忍受中继转发的高延迟而苦恼吗？](https://mp.weixin.qq.com/s/entZigARRl67tibZgJPAGA) - [ ] [1000人帮会群，永久会员制](https://mp.weixin.qq.com/s/xjPaOF0ceioUfcI9_wtcPQ) - [ ] [筑牢身份信息“防火墙” 跑出网络安全“加速度”——有关方面负责人谈国家网络身份认证公共服务建设应用成效](https://mp.weixin.qq.com/s/y3dMRR7vrAwj5aeG6-IWsw) - [ ] [【Web实战】Oracle注入专题——注入注意点+排序注入绕过实战之踩坑篇](https://mp.weixin.qq.com/s/8jxEYQk-7nP_C7uBfbLioA) - [ ] [娄底警方捣毁特大地下六合彩赌博窝点，刑拘14人，查扣涉案资金200余万元](https://mp.weixin.qq.com/s/bXCFT5OFkX21p7DfGx6fyA) - [ ] [成都警方打掉车险诈骗团伙，涉案1500余万元，抓获19人](https://mp.weixin.qq.com/s/kc1Grdg8d1WuahjflrpVDA) - [ ] [虚假博彩诈骗：男子充值107元赚157元后被骗3.9万元，警方及时劝阻](https://mp.weixin.qq.com/s/1U0n0ix79yj-Q1Ne6hIzYg) - [ ] [【竞赛通知】第四届全国大学生开源情报数据采集与分析挑战专项](https://mp.weixin.qq.com/s/P7GgtFj0yG6ggNyXIULVbw) - [ ] [Pentest-Lyan：AI 渗透测试增强包](https://mp.weixin.qq.com/s/XZdm5WnTGbttwe_pUIasSQ) - CXSECURITY Database RSS Feed - CXSecurity.com - [ ] [Joomla Page Builder CK < = 3.5.10 - Unauthenticated Arbitrary File Upload (RCE)](https://cxsecurity.com/issue/WLB-2026070010) - [ ] [Microsoft Edge < = 150.0.4078.48 (Chromium-based) Type Confusion RCE](https://cxsecurity.com/issue/WLB-2026070009) - [ ] [Linux Kernel 7.0 DRM UAF LPE Exploit](https://cxsecurity.com/issue/WLB-2026070008) - [ ] [Langflow 1.3.0 Remote Code Execution](https://cxsecurity.com/issue/WLB-2026070007) - [ ] [Krayin CRM v2.2.x Authenticated Remote Code Execution](https://cxsecurity.com/issue/WLB-2026070006) - [ ] [PraisonAI CodeAgent < = 1.6.77 Remote Code Execution (RCE) via Unsandboxed LLM Code Execution](https://cxsecurity.com/issue/WLB-2026070005) - Recent Commits to cve:main - [ ] [Update Sun Jul 19 12:00:28 UTC 2026](https://github.com/trickest/cve/commit/b4f1378756fd26f414d09a97dc81126672830951) - CCC Event Blog - [ ] [DIDAYS 2026 Hamburg](https://events.ccc.de/2026/07/19/didays-2026-hamburg/) - Dancho Danchev's Blog - Mind Streams of Information Security Knowledge - [ ] [A Peek Inside the Media Land Bulletproof Hosting Provider - An Analysis](https://ddanchev.blogspot.com/2026/07/a-peek-inside-media-land-bulletproof.html) - 奇客Solidot–传递最新科技情报 - [ ] [《半秒钟》——XZ 后门启示录](https://www.solidot.org/story?sid=84866) - [ ] [数据中心抗议席卷美国](https://www.solidot.org/story?sid=84865) - [ ] [法国命令 ISP 屏蔽 Polymarket](https://www.solidot.org/story?sid=84864) - 白帽Wiki - 一个简单的wiki - [ ] [[2026]大模型持久化记忆研究笔记](https://key08.com/index.php/2026/07/19/3219.html) - [ ] [[2026]冲鸭两周年:大模型针对Agent的垂直微调](https://key08.com/index.php/2026/07/19/3217.html) - 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台 - [ ] [汽车OTA带来的网络安全风险已引起担忧](https://blog.upx8.com/%E6%B1%BD%E8%BD%A6OTA%E5%B8%A6%E6%9D%A5%E7%9A%84%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E9%A3%8E%E9%99%A9%E5%B7%B2%E5%BC%95%E8%B5%B7%E6%8B%85%E5%BF%A7) - [ ] [美国反数据中心运动蔓延向全国 AI基建热潮遭遇阻力](https://blog.upx8.com/%E7%BE%8E%E5%9B%BD%E5%8F%8D%E6%95%B0%E6%8D%AE%E4%B8%AD%E5%BF%83%E8%BF%90%E5%8A%A8%E8%94%93%E5%BB%B6%E5%90%91%E5%85%A8%E5%9B%BD-AI%E5%9F%BA%E5%BB%BA%E7%83%AD%E6%BD%AE%E9%81%AD%E9%81%87%E9%98%BB%E5%8A%9B) - [ ] [Kimi K3发布三天后暂停新会员订阅，月之暗面称算力已逼近极限](https://blog.upx8.com/Kimi-K3%E5%8F%91%E5%B8%83%E4%B8%89%E5%A4%A9%E5%90%8E%E6%9A%82%E5%81%9C%E6%96%B0%E4%BC%9A%E5%91%98%E8%AE%A2%E9%98%85-%E6%9C%88%E4%B9%8B%E6%9A%97%E9%9D%A2%E7%A7%B0%E7%AE%97%E5%8A%9B%E5%B7%B2%E9%80%BC%E8%BF%91%E6%9E%81%E9%99%90) - [ ] [阿里巴巴开源其芯片软件，试图打破英伟达CUDA的垄断地位](https://blog.upx8.com/%E9%98%BF%E9%87%8C%E5%B7%B4%E5%B7%B4%E5%BC%80%E6%BA%90%E5%85%B6%E8%8A%AF%E7%89%87%E8%BD%AF%E4%BB%B6-%E8%AF%95%E5%9B%BE%E6%89%93%E7%A0%B4%E8%8B%B1%E4%BC%9F%E8%BE%BECUDA%E7%9A%84%E5%9E%84%E6%96%AD%E5%9C%B0%E4%BD%8D) - [ ] [AI驱动的内存紧缺冲击印度智能手机市场](https://blog.upx8.com/AI%E9%A9%B1%E5%8A%A8%E7%9A%84%E5%86%85%E5%AD%98%E7%B4%A7%E7%BC%BA%E5%86%B2%E5%87%BB%E5%8D%B0%E5%BA%A6%E6%99%BA%E8%83%BD%E6%89%8B%E6%9C%BA%E5%B8%82%E5%9C%BA) - [ ] [阿里巴巴千问发布旗舰AI模型的预览版](https://blog.upx8.com/%E9%98%BF%E9%87%8C%E5%B7%B4%E5%B7%B4%E5%8D%83%E9%97%AE%E5%8F%91%E5%B8%83%E6%97%97%E8%88%B0AI%E6%A8%A1%E5%9E%8B%E7%9A%84%E9%A2%84%E8%A7%88%E7%89%88) - [ ] [纽约州长正在使用AI分析该州每一条规定](https://blog.upx8.com/%E7%BA%BD%E7%BA%A6%E5%B7%9E%E9%95%BF%E6%AD%A3%E5%9C%A8%E4%BD%BF%E7%94%A8AI%E5%88%86%E6%9E%90%E8%AF%A5%E5%B7%9E%E6%AF%8F%E4%B8%80%E6%9D%A1%E8%A7%84%E5%AE%9A) - 黑鸟 - [ ] [关于Token经济学与节省方案](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451187738&idx=1&sn=e8e54df66a3b0f75ec06bdc7e1a7026d) - 我的安全视界观 - [ ] [【AI复盘】日产汽车员工数据泄露事件](https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487832&idx=1&sn=f64d91959445ffba8dc5b44f9125a806) - 天黑说嘿话 - [ ] [历年HW大瓜](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486254&idx=1&sn=ea3f29b5d4900d045fe0421f40e0169b) - 天御攻防实验室 - [ ] [数据 -> 信息 -> 情报：威胁情报实践的现实思考](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247487042&idx=1&sn=8e440b3d1d5c9233a6805ebbca535efb) - 安全分析与研究 - [ ] [模型供应链安全与水印](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247496916&idx=1&sn=dfc2c7feebf633aa1301bbdbd1e1135b) - 青衣十三楼飞花堂 - [ ] [腾达P3+PA3母子电力猫配置说明](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247489704&idx=1&sn=204e512fed87e2d737a2f7a18de2290b) - 奇安信 CERT - [ ] [【已复现】无需账号密码即可 RCE——WordPress REST API 批处理路由混淆与 SQL 注入组合利用安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506720&idx=1&sn=395e656dda950f7619cc76f2d3e05d1e) - 安全圈 - [ ] [【安全圈】字节TRAE插件市场被指不删除恶意插件](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077917&idx=1&sn=a53a4546eac3ebd8903be1948fbe9300) - [ ] [【安全圈】微软7月修622个CVE创纪录](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077917&idx=2&sn=b266af7e66610d9049e7767967150ca0) - [ ] [【安全圈】Chrome 148修复3个严重级，已遭实际利用](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077917&idx=3&sn=12e96b390fb1234635a936e1fd70176e) - 中国信息安全 - [ ] [聚焦 | 2026世界人工智能大会智能社会论坛在上海举办](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264808&idx=1&sn=7cd3c2d93380a9d1e014a4668492cc3b) - [ ] [专家解读 | 以数据产权登记为抓手 探索商业银行数据资产化新路径](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264808&idx=2&sn=f0d74809773f829c5936c341046c51c3) - 猎户攻防实验室 - [ ] [【漏洞预警】WordPress wp2shell 紧急漏洞预警：CVE-2026-63030 / CVE-2026-60137 未授权 RCE 链](https://mp.weixin.qq.com/s?__biz=MzI1NDg4MTIxMw==&mid=2247486761&idx=1&sn=b116dd76dfb5663aa23bef2ffb035496) - 极客公园 - [ ] [给「AI 组织」交了好几波学费后，终于看清了这五级台阶](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653110797&idx=1&sn=046da4f8e3c0f69c96f4873e26855bf8) - [ ] [马斯克：Grok 4.6 下周完成训练，2 万亿参数；OpenRouter 估值超 13 亿美元；腾讯 WorkBuddy 上线安卓 / iOS / 鸿蒙| 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653110796&idx=1&sn=2b56027589bec7d9c66b0c0c0a24995c) - 表图 - [ ] [[译苑雅集Vol. 16]和历史上的技术革命一样， AI 创造的回报，最终会流向价值链上的稀缺环节](https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247485120&idx=1&sn=87a5bad98a7d07d2fa579d0a6f3e244c) - OnionSec - [ ] [看见世界](https://mp.weixin.qq.com/s?__biz=MzUyMTUwMzI3Ng==&mid=2247485863&idx=1&sn=f43b0c8a4354fb1803baff4bdd1c359f) - ICT Security Magazine - [ ] [Post-incident review: la fase che tutti documentano e quasi nessuno fa sul serio](https://www.ictsecuritymagazine.com/articoli/post-incident-review-lessons-learned/) - Have I Been Pwned latest breaches - [ ] [Paidwork - 23,272,765 breached accounts](https://haveibeenpwned.com/Breach/Paidwork) - 自在安全 - [ ] [WordPress 核心框架严重漏洞 wp2shell ：从路由错位到 SQL 注入再到 RCE](https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492898&idx=1&sn=a509a16301531642ba529a3d28a11e71) - SANS Internet Storm Center, InfoCON: green - [ ] [Scans for Hikvision Intelligent Security API, (Sun, Jul 19th)](https://isc.sans.edu/diary/rss/33164) - The Hacker News - [ ] [Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution](https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html) - [ ] [UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware](https://thehackernews.com/2026/07/uac-0145-uses-clickfix-captchas-to.html) - [ ] [SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access](https://thehackernews.com/2026/07/sonicwall-sma-zero-days-exploited.html) - TorrentFreak - [ ] [FIFA World Cup Triggers a Global Anti-Piracy Crackdown](https://torrentfreak.com/fifa-world-cup-triggers-a-global-anti-piracy-crackdown/) - Security Affairs - [ ] [SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 106](https://securityaffairs.com/195620/malware/security-affairs-malware-newsletter-round-106.html) - [ ] [Security Affairs newsletter Round 586 by Pierluigi Paganini – INTERNATIONAL EDITION](https://securityaffairs.com/195611/breaking-news/security-affairs-newsletter-round-586-by-pierluigi-paganini-international-edition.html) - [ ] [Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits](https://securityaffairs.com/195597/hacking/attackers-can-take-over-wordpress-sites-using-newly-released-wp2shell-exploits.html) - www.theregister.com - Articles - [ ] [Connecting AI agents to outside services explodes the risk radius](https://www.theregister.com/ai-and-ml/2026/07/19/connecting-ai-agents-to-outside-services-explodes-the-risk-radius/5274640) - Daniel Miessler - [ ] [AI Is Just Thinking and Doing](https://danielmiessler.com/blog/ai-is-thinking-and-doing?utm_source=rss&utm_medium=feed&utm_campaign=website)
每日安全资讯（2026-07-20）