# 每日安全资讯（2026-08-20） - SecWiki News - [ ] [SecWiki News 2026-08-19 Review](http://www.sec-wiki.com/?2026-08-19) - Private Feed for M09Ic - [ ] [gh0stkey starred ZSeven-W/openpencil](https://github.com/ZSeven-W/openpencil) - [ ] [mgeeky starred ageron/handson-mlp](https://github.com/ageron/handson-mlp) - [ ] [gh0stkey starred bowenliang123/dsh-context](https://github.com/bowenliang123/dsh-context) - [ ] [anthropics released v2.1.236 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.236) - [ ] [bolucat released 202608192042 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202608192042) - [ ] [wh0amitz starred ThatTotallyRealMyth/Impacket-IoCs](https://github.com/ThatTotallyRealMyth/Impacket-IoCs) - [ ] [mgeeky starred SpecterOps/kraken](https://github.com/SpecterOps/kraken) - [ ] [kyxiaxiang starred huoji120/QWEN-EXO-booster](https://github.com/huoji120/QWEN-EXO-booster) - [ ] [esrrhs contributed to esrrhs/fakelua](https://github.com/esrrhs/fakelua/pull/368) - [ ] [joaoviictorti starred NetSPI/BOFscale](https://github.com/NetSPI/BOFscale) - [ ] [spf13 starred spf13/go-skills](https://github.com/spf13/go-skills) - [ ] [gh0stkey starred z-lab/dflash](https://github.com/z-lab/dflash) - [ ] [CHYbeta starred turtlesec-software/crlf-desyncs](https://github.com/turtlesec-software/crlf-desyncs) - [ ] [itm4n released 2026.08.19-1 at itm4n/PrivescCheck](https://github.com/itm4n/PrivescCheck/releases/tag/2026.08.19-1) - [ ] [kpcyrd contributed to kpcyrd/kjdb](https://github.com/kpcyrd/kjdb/pull/1) - [ ] [veo starred alexazhou/gt_ai_gateway](https://github.com/alexazhou/gt_ai_gateway) - [ ] [liamg starred gleam-lang/gleam](https://github.com/gleam-lang/gleam) - [ ] [chainreactors released v1.0.0-rc2 at chainreactors/aiscan](https://github.com/chainreactors/aiscan/releases/tag/v1.0.0-rc2) - [ ] [liamg starred nilbuild/diffity](https://github.com/nilbuild/diffity) - [ ] [Mr-xn starred xr843/insect-world](https://github.com/xr843/insect-world) - [ ] [Mel0day starred abundant-ai/swe-marathon](https://github.com/abundant-ai/swe-marathon) - [ ] [CHYbeta starred v12-security/pocs](https://github.com/v12-security/pocs) - Paper - 知道创宇404实验室 - [ ] [面向部署的资源高效神经符号框架：用于运营技术网络中可解释的DDoS检测](https://paper.seebug.org/3511) - Recent Commits to cve:main - [ ] [Update Wed Aug 19 12:25:35 UTC 2026](https://github.com/trickest/cve/commit/36c0a522c35d1a56456f74cb5e1c2fab95e7ca63) - 安全客-有思想的安全新媒体 - [ ] [不打招呼直接锁死服务器：Sorry勒索病毒国内多点爆发，专挑中小企业下手](https://www.anquanke.com/post/id/315994) - Armin Ronacher's Thoughts and Writings - [ ] [What Is Reasoning](https://lucumr.pocoo.org/2026/8/19/what-is-reasoning/) - Sploitus.com Exploits RSS Feed - [ ] [Exploit for CVE-2026-76071](https://sploitus.com/exploit?id=E6239A64-7F8A-5C59-AACC-41AE38C32A88&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-76070](https://sploitus.com/exploit?id=EEADFF0B-F699-5E06-83A6-E00725E3ACBA&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Stack-based Buffer Overflow in Grandstream Gxp1610_Firmware](https://sploitus.com/exploit?id=81567858-4504-5A93-AA90-65705450FF1B&utm_source=rss&utm_medium=rss) - [ ] [Project-Ronin exploit](https://sploitus.com/exploit?id=F8CCEDFC-8DCA-574C-967E-8E39955A9CD2&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Missing Authentication for Critical Function in Coreweave Marimo](https://sploitus.com/exploit?id=38451D31-6448-51A8-9AD4-43EA7813D573&utm_source=rss&utm_medium=rss) - [ ] [exploit-development-framework](https://sploitus.com/exploit?id=F6ADAD23-73DD-5C6E-8821-CD1D77B4D567&utm_source=rss&utm_medium=rss) - [ ] [nuclei-templates exploit](https://sploitus.com/exploit?id=9E9A0CD5-B84D-5320-8535-4F27A33FCAAE&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Use After Free in Google Android](https://sploitus.com/exploit?id=463E516E-745F-5ED8-82C9-CA52E2E18D34&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-67919](https://sploitus.com/exploit?id=2DCD3BB6-8EED-5D26-AE57-60BB3EC94C6A&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Improper Authorization in Microsoft](https://sploitus.com/exploit?id=26C9FABD-E37E-51C8-AE4D-9D62F7706D2D&utm_source=rss&utm_medium=rss) - [ ] [rockbase exploit](https://sploitus.com/exploit?id=556486AD-66B4-516D-B360-01FD414B1646&utm_source=rss&utm_medium=rss) - [ ] [cve-lab-journal exploit](https://sploitus.com/exploit?id=45C77830-4019-5D84-933F-72D69EF09468&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-15748](https://sploitus.com/exploit?id=453AD753-4763-5E9A-B884-4ADD4F879F42&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-61241](https://sploitus.com/exploit?id=B032C7CD-DE54-5DDE-BF8D-BEE3AC3791D3&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-64849](https://sploitus.com/exploit?id=D8CF8DFF-19DC-5A36-8773-02134D2FA49B&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Path Traversal in Apache Http_Server](https://sploitus.com/exploit?id=07CE62C5-3883-5987-BACF-5D53A387052D&utm_source=rss&utm_medium=rss) - [ ] [Cybermes exploit](https://sploitus.com/exploit?id=F8A13780-FD9A-5B0A-B49E-B32BAE77C6D0&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Missing Authentication for Critical Function in Cpanel](https://sploitus.com/exploit?id=6BF18713-0E67-51A7-95CF-8DF17B081B2D&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Missing Release of Memory after Effective Lifetime in Linux Linux_Kernel](https://sploitus.com/exploit?id=AED32642-D0A9-5EC1-80C1-993002887242&utm_source=rss&utm_medium=rss) - [ ] [OASAS exploit](https://sploitus.com/exploit?id=F61E01B7-8693-58E3-99BD-4BD871C51A9C&utm_source=rss&utm_medium=rss) - [ ] [CVE_POC exploit](https://sploitus.com/exploit?id=6D2683F8-D751-536A-A7BC-47E2E10FBFFA&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Deserialization of Untrusted Data in Apache Activemq](https://sploitus.com/exploit?id=37C49D97-E8F5-5260-A003-EE331E336213&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-64564](https://sploitus.com/exploit?id=B10CF7EF-E197-5ED4-BD0F-7846C5CA3F6E&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Eval Injection in Xwiki](https://sploitus.com/exploit?id=A5CA6FDF-5164-5F52-8FAD-3F92B5C03193&utm_source=rss&utm_medium=rss) - [ ] [IO-GV_POC exploit](https://sploitus.com/exploit?id=37F9E64D-B90B-575C-8BC6-0C3DA873E9CE&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-47858](https://sploitus.com/exploit?id=0D49B6FD-25E2-5EF6-85A7-1E2D3014BD5A&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Cross-site Scripting in Prometheus](https://sploitus.com/exploit?id=CEDAF4CF-2A76-5AD8-9330-AC53CF640CAA&utm_source=rss&utm_medium=rss) - [ ] [Exploit for SQL Injection in Wordpress](https://sploitus.com/exploit?id=7076751D-E0A6-5B34-B317-22578F66EFD3&utm_source=rss&utm_medium=rss) - [ ] [lab-sss-example exploit](https://sploitus.com/exploit?id=D1D9579A-12C2-5B8E-B2FA-8AAC76704C5C&utm_source=rss&utm_medium=rss) - ElcomSoft blog - [ ] [Write Blockers in Forensics: What Controls How You Use Them?](https://blog.elcomsoft.com/2026/08/write-blockers-in-forensics-what-controls-how-you-use-them/) - obaby 𝐢𝐧⃝ void - [ ] [七夕快乐](https://zhongxiaojie.cn/2026/08/1751/) - Tenable Blog - [ ] [Oracle August 2026 Critical Security Patch Update Addresses 925 CVEs](https://www.tenable.com/blog/oracle-august-2026-critical-security-patch-update-cspu-addresses-925-cves) - Sukka's Blog - [ ] [生活在字典树上 —— 存储和匹配海量的域名和 IP 地址](https://blog.skk.moe/post/how-to-store-way-too-many-domains-and-ips-101/) - Doonsec's feed - [ ] [真是不平凡的一年啊！](https://mp.weixin.qq.com/s/oDn3SRwj9dO-paNHZ85Msg) - [ ] [宇树科技上市，4400亿！王兴兴身价千亿，却平静得像“打工人”，一中签女子开盘后激动到哭](https://mp.weixin.qq.com/s/FnzlAgTSyhcwf-6TsVENHg) - [ ] [AI Agent安全治理第二步：Agent运行过程中到底做了什么？](https://mp.weixin.qq.com/s/ujbA27CUZRpquiH1SKsquQ) - [ ] [CCF智能汽车大赛首日开赛 39支战队展开巅峰对决](https://mp.weixin.qq.com/s/BcE6ae-xYr77zLx9wcvxkA) - [ ] [一位开发者搭建了一个小型桌面终端，用来模拟其编码助手在 PC 上的操作](https://mp.weixin.qq.com/s/nyBHVba98gMmshgrOy8HHA) - [ ] [孩子想学网络安全，家长却担心他在学“黑客”：先弄清这6件事](https://mp.weixin.qq.com/s/bIzssQKeNpOERnuDRkfUAQ) - [ ] [潍柴动力：基于OTA场景的电控信息安全研究](https://mp.weixin.qq.com/s/FTea4JeSp0TzDWsBRvoleQ) - [ ] [中央计算SOA全域架构与OTA动态&在役安全（ISMR）实战专项培训2026](https://mp.weixin.qq.com/s/7G1WkFxXNJpwm8syqdmXtQ) - [ ] [上汽：基于T-BOX模块的汽车远程诊断系统的构建](https://mp.weixin.qq.com/s/R5XM7ZwNtZu1HAUbRPYrAA) - [ ] [第十一届（2026年）全国高校密码数学挑战赛盛大收官！](https://mp.weixin.qq.com/s/iYHN_9SZPKlu3HiC2LG7UQ) - [ ] [\"龙笛行动\" - 常州大学2026年《国家学生体质健康标准》测试通知最终版.zip](https://mp.weixin.qq.com/s/WDY6CVD_QMCtPDQJBg3K4A) - [ ] [Cursor 0-day 漏洞预警：打开文件夹即中招，开发者该如何紧急防护？](https://mp.weixin.qq.com/s/mm9jwOIAHRdu73zzBZ5vvw) - [ ] [瑞数信息发布《2026Bots & Agents自动化威胁报告》，重构AI Agent时代安全认知](https://mp.weixin.qq.com/s/Dr0UDiZDX3dZgfyBX9Kp5A) - [ ] [线上会议预告｜2026年上海市工程系列数字技术专业（大数据、区块链、数据安全方向）高级职称宣贯暨申报辅导会](https://mp.weixin.qq.com/s/HoqTuNhyctUODdiVTXbCDA) - [ ] [外交部：中方坚决反对在人工智能问题上搞选边站队、阵营对抗](https://mp.weixin.qq.com/s/iHSOTklXkCGxeXc0sf16JA) - [ ] [关注 | 2026年个人信息保护系列专项行动取得阶段性成效](https://mp.weixin.qq.com/s/-Ah-w63ImvazT6KPq1bFsQ) - [ ] [法治 | 生成式人工智能科技伦理风险的法律治理](https://mp.weixin.qq.com/s/LQuAHpLcgLZWGL1DkjW33w) - [ ] [评论 | 升级治理守护未成年人网络晴空](https://mp.weixin.qq.com/s/gTXUtiBjLE4lrG4ydZkyzQ) - [ ] [360 ADE学员故事 | 教学与创业二十余载，他选择重新学习与AI对话](https://mp.weixin.qq.com/s/syn7AxbM4sWiTKYFuPFErw) - [ ] [奇安信与伊利集团签署战略合作协议 打造乳品行业\"AI+安全\"融合标杆](https://mp.weixin.qq.com/s/AAfd1b27gixzEjqggZPeiQ) - [ ] [BCS2026 | “守御智体风险·筑牢AI安全”北京网络安全大会长沙高峰论坛圆满落幕](https://mp.weixin.qq.com/s/K702L31uGcjOOTsbiOdwpQ) - [ ] [WiFiSRC｜AI生成漏洞报告提交规范公告](https://mp.weixin.qq.com/s/_wbUVPRvkaY6n4wyNbSBZQ) - [ ] [告别告警疲劳：AI代码审计智能体如何实现“降噪纠错+填补盲区”？](https://mp.weixin.qq.com/s/wTafbS3HAyAmxWVo5OAS0Q) - [ ] [关键供应商被黑，上万家医疗机构1800余万患者数据泄露](https://mp.weixin.qq.com/s/uG478HTirh-0St8_jZ-kRA) - [ ] [美国学者称AI将催化“短期攻击盛宴”和“长期防御红利”](https://mp.weixin.qq.com/s/TcZkmoOszNMBWPZ2MRoxIw) - [ ] [一条GraphQL指令，删光你的代码仓](https://mp.weixin.qq.com/s/1GFvuR9q6AqLXs5TqUqwMQ) - [ ] [《公安机关网络空间安全监督检查办法》10月1日起施行，政企单位请对照这份行动清单自查](https://mp.weixin.qq.com/s/l2cy1PQs1F79ljKE7iPFGQ) - [ ] [热点速览 | 每周网安大事件（20260810-20260816）](https://mp.weixin.qq.com/s/qFzZBNTaQqMwkuWVIzK89Q) - [ ] [【CVE-2026-22078】关于Webview任意URL加载导致Token泄露风险的致谢公告](https://mp.weixin.qq.com/s/k6c4LF0xqpq0VHX2rx4U_A) - [ ] [ARL分析与进阶使用](https://mp.weixin.qq.com/s/BcVmNQwedI6y1yDOV0F1PQ) - [ ] [【免费领】国内第一部XSS跨站脚本攻防技术教程](https://mp.weixin.qq.com/s/1tyDsUn57lP3c3W80b2l4g) - [ ] [新规速读！一图读懂《互联网信息内容多渠道分发服务管理规定》](https://mp.weixin.qq.com/s/xyB5dcz-VSadytiNaaNkIg) - [ ] [公开通报1100余款违法违规App(SDK)，2026年个人信息保护系列专项行动取得阶段性成效](https://mp.weixin.qq.com/s/QbKYF9gyidIA6hs2RK0jTA) - [ ] [【CVE-2026-22078】关于O+互联未对IPC通道进行身份校验导致本地提权漏洞的致谢公告](https://mp.weixin.qq.com/s/HMFAhBF3P-xcJBpEutcVMw) - [ ] [2026年个人信息保护系列专项行动取得阶段性成效](https://mp.weixin.qq.com/s/WrTHSUmWzal8GAqcJap4zQ) - [ ] [分享的图片、视频、链接](https://mp.weixin.qq.com/s/GkgBPGF3RI8lM7lXYAZMPw) - [ ] [Hugging Face事件后，智谱给开源世界递了一面“盾”](https://mp.weixin.qq.com/s/9OMV4MIoMZg8pVq2seMOfA) - [ ] [CNNVD | 人工智能重要漏洞通报（2026年第十二期）](https://mp.weixin.qq.com/s/TdQovX34rdzHOv4UbJF1gQ) - [ ] [美国网络战略重大转向：特朗普新政允许私营企业在政府监督下执行进攻性网络任务](https://mp.weixin.qq.com/s/bO7-Zq2WhUKkjCqVUYVu9A) - [ ] [一个公共软件漏洞，批量击穿几十家大厂](https://mp.weixin.qq.com/s/T5RqQ6lQ54lG6KVnfVClHw) - [ ] [魔方安全登榜安在新榜2026百强榜，产品与服务双线入围全景图](https://mp.weixin.qq.com/s/P8W0jUMOUTpUlFEL36WxPg) - [ ] [广深两地“网友”大奔现！两天一夜的快乐碎片请查收！](https://mp.weixin.qq.com/s/zc2JdILIc9qDn-MSoIL32Q) - [ ] [8月24日·上海｜AI安全运营实战研修班，锻造“双师型”教师队伍](https://mp.weixin.qq.com/s/3k17Z1Iq0m4sKkdXMLnrSg) - [ ] [明日，新办法实施：《网络数据安全风险评估办法》](https://mp.weixin.qq.com/s/33gaoOammb9dkzlmgqYPdw) - [ ] [CISP讲师维持报名审核通过名单（2026年第一期和第二期）](https://mp.weixin.qq.com/s/otEAr4n46xvTRcvgWSUq2w) - [ ] [攻击者利用 MLflow 漏洞窃取云凭据和机密信息](https://mp.weixin.qq.com/s/3VSiAcVZS87Q5rY4lns8gA) - [ ] [哪些企业必须做等保？不做等保行不行？](https://mp.weixin.qq.com/s/ueR4D6Mm1qdhjEozvl7oqw) - [ ] [别错过！取证云全新活动登场，丰厚好礼先到先得](https://mp.weixin.qq.com/s/pGf5Qf-pEWKHLZxcBnVZKg) - [ ] [专家征集令！“美课专家讲坛”诚邀您开讲](https://mp.weixin.qq.com/s/-jd_HwJnDkRvcfYerZzQww) - [ ] [适配多元发展｜长短期项目并行招募](https://mp.weixin.qq.com/s/rXD6vi0fAR4wV22ZtRpSrw) - [ ] [【驻场专栏】8月第三周｜全国长期驻场岗位汇总](https://mp.weixin.qq.com/s/L6SY3adz8s6bW1YkKOk14g) - [ ] [倒计时1天xa0|xa0第三届“长城杯”网数智安全大赛（作品赛）决赛即将开赛](https://mp.weixin.qq.com/s/xh1aJ2UsaViugwQRPkpPKA) - [ ] [2026参赛高校](https://mp.weixin.qq.com/s/mXpAv2BfzSnBsnVjiznLvw) - [ ] [倒计时1天！第三届“长城杯”网数智安全大赛（作品赛）决赛即将开赛](https://mp.weixin.qq.com/s/0Gw6eGfNTvmoHSRI9dCV0A) - [ ] [倒计时3天，西湖论剑创新实践火热征集中！](https://mp.weixin.qq.com/s/ehGXRJrT896mTJ9KlqXyfQ) - [ ] [潜伏40年、影响全球九成DNS系统的漏洞，被一个开源模型找到了](https://mp.weixin.qq.com/s/-M1Uo3ku3ypovxwz77xN4w) - [ ] [今天是什么经？](https://mp.weixin.qq.com/s/Jg1zUXUBqhnY0pkHu27R9A) - [ ] [2026 AI自动化渗透与AI红队实战课（就业班新增AI课程）](https://mp.weixin.qq.com/s/okOSW3Gia3EjgpuXS4zKFQ) - Microsoft Security Blog - [ ] [Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026](https://www.microsoft.com/en-us/security/blog/2026/08/19/microsoft-named-a-leader-in-the-frost-radar-cloud-workload-protection-platforms-2026/) - Kitploit - [ ] [gosec v2.28.0](https://kitploit.com/en/posts/github-securego-gosec-v2280) - [ ] [ggshield v1.54.0-rc1](https://kitploit.com/en/posts/github-gitguardian-ggshield-1540-rc1) - [ ] [PrivescCheck v2026.08.19-1](https://kitploit.com/en/posts/github-itm4n-privesccheck-20260819-1) - [ ] [EasySpider v0.6.5](https://kitploit.com/en/posts/github-naibowang-easyspider-v065) - [ ] [CTFd v3.8.7](https://kitploit.com/en/posts/github-ctfd-ctfd-387) - [ ] [TeamPass v3.2.1.7](https://kitploit.com/en/posts/github-nilsteampassnet-teampass-3217) - [ ] [joern v4.0.606](https://kitploit.com/en/posts/github-joernio-joern-v40606) - [ ] [ish builds/812](https://kitploit.com/en/posts/github-ish-app-ish-builds812) - [ ] [privacybadger v2026.8.7](https://kitploit.com/en/posts/github-efforg-privacybadger-release-202687) - [ ] [httrack v3.49.22](https://kitploit.com/en/posts/github-xroche-httrack-34922) - [ ] [lamda v10.6](https://kitploit.com/en/posts/github-firerpa-lamda-v106) - [ ] [zeek v8.2.1](https://kitploit.com/en/posts/github-zeek-zeek-v821) - [ ] [yara v4.5.8](https://kitploit.com/en/posts/github-virustotal-yara-v458) - [ ] [qemu v11.1.0](https://kitploit.com/en/posts/github-qemu-qemu-1110) - [ ] [Signal-Desktop v8.24.0-beta.1](https://kitploit.com/en/posts/github-signalapp-signal-desktop-v8240-beta1) - [ ] [frida v17.17.0](https://kitploit.com/en/posts/github-frida-frida-17170) - [ ] [infisical v0.162.21](https://kitploit.com/en/posts/github-infisical-infisical-v016221) - [ ] [ghidra Ghidra_12.1.3_build](https://kitploit.com/en/posts/github-nationalsecurityagency-ghidra-ghidra_1213_build) - [ ] [miasma v0.4.2](https://kitploit.com/en/posts/github-austin-weeks-miasma-v042) - [ ] [brave-browser v1.95.83](https://kitploit.com/en/posts/github-brave-brave-browser-v19583) - [ ] [xspawn](https://kitploit.com/en/tools/github/cenobyte-vincit/xspawn) - [ ] [Scrapegraph-ai v2.1.7](https://kitploit.com/en/posts/github-scrapegraphai-scrapegraph-ai-v217) - [ ] [slot2](https://kitploit.com/en/tools/github/cenobyte-vincit/slot2) - [ ] [secator v0.42.0](https://kitploit.com/en/posts/github-freelabz-secator-v0420) - [ ] [memdumper](https://kitploit.com/en/tools/github/cenobyte-vincit/memdumper) - [ ] [dyen](https://kitploit.com/en/tools/github/cenobyte-vincit/dyen) - [ ] [firefox-devtools-mcp v0.10.0](https://kitploit.com/en/posts/github-mozilla-firefox-devtools-mcp-v0100) - [ ] [clawpatrol v0.5.9](https://kitploit.com/en/posts/github-denoland-clawpatrol-v059) - [ ] [PyMemoryEditor v2.1.0](https://kitploit.com/en/posts/github-jeanextreme002-pymemoryeditor-v210) - [ ] [Titanis v0.9.333](https://kitploit.com/en/posts/github-trustedsec-titanis-v09333) - [ ] [kviklet v0.8.0](https://kitploit.com/en/posts/github-kviklet-kviklet-080) - [ ] [CyberChef v11.4.0](https://kitploit.com/en/posts/github-gchq-cyberchef-v1140) - [ ] [dnscontrol v5.0.0-rc9](https://kitploit.com/en/posts/github-dnscontrol-dnscontrol-v500-rc9) - [ ] [noir v1.3.0](https://kitploit.com/en/posts/github-owasp-noir-noir-v130) - [ ] [wappalyzer-next v2.0.2](https://kitploit.com/en/posts/github-s0md3v-wappalyzer-next-202) - [ ] [pybatfish v2026.08.18](https://kitploit.com/en/posts/github-batfish-pybatfish-v20260818) - [ ] [CyberStrikeAI v1.7.15](https://kitploit.com/en/posts/github-ed1s0nz-cyberstrikeai-v1715) - [ ] [halo-record v0.2.32](https://kitploit.com/en/posts/github-bkuan001-halo-record-v0232) - [ ] [easywall v2.7.0](https://kitploit.com/en/posts/github-jp1337-easywall-v270) - [ ] [remove-ai-watermarks v0.27.0](https://kitploit.com/en/posts/github-wiltodelta-remove-ai-watermarks-v0270) - [ ] [SuperDiagnosticTool v1.0.5](https://kitploit.com/en/posts/github-guettaf-hossam-superdiagnostictool-105) - Malwarebytes - [ ] [41 deceptive download sites show a real link, then send you somewhere else](https://www.malwarebytes.com/blog/threat-intel/2026/08/41-deceptive-download-sites-show-a-real-link-then-send-you-somewhere-else) - [ ] [Sideloading on Android: What it is, why it’s risky, and how to do it more safely](https://www.malwarebytes.com/blog/how-to/2026/08/sideloading-on-android-what-it-is-why-its-risky-and-how-to-do-it-more-safely) - [ ] [Scammers are using fake crypto AML checkers to drain your wallet](https://www.malwarebytes.com/blog/threat-intel/2026/08/scammers-are-using-fake-crypto-aml-checkers-to-drain-your-wallet) - [ ] [Update Chrome now: Two critical vulnerabilities fixed](https://www.malwarebytes.com/blog/bugs/2026/08/update-chrome-now-two-critical-vulnerabilities-fixed) - [ ] [Your polite reply to that text is worth $2 on the dark web](https://www.malwarebytes.com/blog/threat-intel/2026/08/your-polite-reply-to-that-text-is-worth-2-on-the-dark-web) - Horizon3 - [ ] [Building Capacity and Resilience for U.S. Partners](https://horizon3.ai/downloads/whitepapers/cyber-diplomacy-capacity-resilience/) - [ ] [CTEM: From Visibility to Measurable Risk Reduction](https://horizon3.ai/intelligence/infographics/ctem-from-visibility-to-measurable-risk-reduction/) - rtl-sdr.com - [ ] [VibeSDR Jr: Apple Watch RTL-SDR, KiwiSDR, UberSDR Client now Available](https://www.rtl-sdr.com/vibesdr-jr-apple-watch-rtl-sdr-kiwisdr-ubersdr-client-now-available/) - [ ] [More Information about the FrameRF Technical Surveillance Counter-Measures Platform – Technical Guest Post](https://www.rtl-sdr.com/more-information-about-the-framerf-technical-surveillance-counter-measures-platform-technical-guest-post/) - 奇客Solidot–传递最新科技情报 - [ ] [mRNA 癌症疫苗在 III 期黑色素瘤临床试验中取得积极成果](https://www.solidot.org/story?sid=85141) - [ ] [刚果埃博拉疫情确诊病例突破 5000 例](https://www.solidot.org/story?sid=85140) - [ ] [人类爱宠物，猴子也是](https://www.solidot.org/story?sid=85139) - [ ] [童年创伤可能导致成年后快感缺失](https://www.solidot.org/story?sid=85138) - [ ] [量子存储器间纠缠距离提升至 420 公里](https://www.solidot.org/story?sid=85137) - [ ] [数字信号处理先驱刘必治去世，享年 91 岁](https://www.solidot.org/story?sid=85136) - [ ] [诺基亚大幅缩减中国业务](https://www.solidot.org/story?sid=85135) - [ ] [蓝箭航天成功回收朱雀三号火箭第一级](https://www.solidot.org/story?sid=85134) - [ ] [DDR5 内存条价格在 12 个月内上涨 500%](https://www.solidot.org/story?sid=85133) - [ ] [Comcast 将数百万路由器变成运动探测器](https://www.solidot.org/story?sid=85132) - [ ] [出生后限制摄入糖分与成年后更低的癌症风险相关](https://www.solidot.org/story?sid=85131) - HackerNews - [ ] [基于 Mirai 的新型 Evooo1Bot 僵尸网络瞄准 Linux 设备](http://0.0.0.0:8080/post/64572) - [ ] [黑客泄露 Heights Finance 120 万客户数据](http://0.0.0.0:8080/post/64571) - [ ] [CISA：Windows 任务宿主漏洞现已被勒索软件团伙利用](http://0.0.0.0:8080/post/64570) - [ ] [Clop 为 Windchill 数据窃取攻击打造定制 Web Shell](http://0.0.0.0:8080/post/64569) - [ ] [Comcast 将你的 Xfinity WiFi 变成家庭运动探测器](http://0.0.0.0:8080/post/64568) - [ ] [AI"思维病毒"可通过持久化提示文件在智能体间传播](http://0.0.0.0:8080/post/64567) - 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台 - [ ] [美国年轻人对人工智能愈发敌视 担心失业](https://blog.upx8.com/%E7%BE%8E%E5%9B%BD%E5%B9%B4%E8%BD%BB%E4%BA%BA%E5%AF%B9%E4%BA%BA%E5%B7%A5%E6%99%BA%E8%83%BD%E6%84%88%E5%8F%91%E6%95%8C%E8%A7%86-%E6%8B%85%E5%BF%83%E5%A4%B1%E4%B8%9A) - [ ] [亚马逊无人机配送将覆盖近500个美国城市](https://blog.upx8.com/%E4%BA%9A%E9%A9%AC%E9%80%8A%E6%97%A0%E4%BA%BA%E6%9C%BA%E9%85%8D%E9%80%81%E5%B0%86%E8%A6%86%E7%9B%96%E8%BF%91500%E4%B8%AA%E7%BE%8E%E5%9B%BD%E5%9F%8E%E5%B8%82) - [ ] [李飞飞：对年轻一代而言，AI最大的风险是剥夺自主性](https://blog.upx8.com/%E6%9D%8E%E9%A3%9E%E9%A3%9E-%E5%AF%B9%E5%B9%B4%E8%BD%BB%E4%B8%80%E4%BB%A3%E8%80%8C%E8%A8%80-AI%E6%9C%80%E5%A4%A7%E7%9A%84%E9%A3%8E%E9%99%A9%E6%98%AF%E5%89%A5%E5%A4%BA%E8%87%AA%E4%B8%BB%E6%80%A7) - [ ] [中国批评欧盟对京东调查构成不当域外管辖](https://blog.upx8.com/%E4%B8%AD%E5%9B%BD%E6%89%B9%E8%AF%84%E6%AC%A7%E7%9B%9F%E5%AF%B9%E4%BA%AC%E4%B8%9C%E8%B0%83%E6%9F%A5%E6%9E%84%E6%88%90%E4%B8%8D%E5%BD%93%E5%9F%9F%E5%A4%96%E7%AE%A1%E8%BE%96) - [ ] [中国反对在AI问题上搞选边站队、阵营对抗](https://blog.upx8.com/%E4%B8%AD%E5%9B%BD%E5%8F%8D%E5%AF%B9%E5%9C%A8AI%E9%97%AE%E9%A2%98%E4%B8%8A%E6%90%9E%E9%80%89%E8%BE%B9%E7%AB%99%E9%98%9F-%E9%98%B5%E8%90%A5%E5%AF%B9%E6%8A%97) - [ ] [宇树科技IPO暴涨成中国机器人产业里程碑](https://blog.upx8.com/%E5%AE%87%E6%A0%91%E7%A7%91%E6%8A%80IPO%E6%9A%B4%E6%B6%A8%E6%88%90%E4%B8%AD%E5%9B%BD%E6%9C%BA%E5%99%A8%E4%BA%BA%E4%BA%A7%E4%B8%9A%E9%87%8C%E7%A8%8B%E7%A2%91) - 黑鸟 - [ ] [斯洛伐克交通摄像头后门事件：3000万欧元买来的279个监控节点](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451188155&idx=1&sn=631a2526078a7c7d6c3f84c0237aa235) - 代码卫士 - [ ] [微软 Copilot Personal 存在多个漏洞，一次点击即可提取联网app数据](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526917&idx=1&sn=821be304e4284650201a625c79ab5fca) - [ ] [攻击者利用 MLflow 漏洞窃取云凭据和机密信息](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526917&idx=2&sn=7ad6ae2c6597942ccfbe3c8431060d95) - 安全内参 - [ ] [关键供应商被黑，上万家医疗机构1800余万患者数据泄露](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516454&idx=1&sn=0817649658b3568df4e64b81090b5b48) - [ ] [美国学者称AI将催化“短期攻击盛宴”和“长期防御红利”](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516454&idx=2&sn=45005bf82459fa27151c7e5f9f67829f) - 安全客 - [ ] [1.1万个网站正被围攻！WordPress登录页惊现XSS2Shell漏洞，无需账号就能摸到服务器](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649790383&idx=1&sn=ec0014e8946a4142e1473376f84b7b90) - 威努特安全网络 - [ ] [威努特工业网闸：破解石化行业生产安全与数据流转难题](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651143579&idx=1&sn=af3ab822cb6ba5e8b58e873af2a840ef) - 安全学术圈 - [ ] [北京大学 | GRIP：检索即生成——一种具有自触发信息规划的统一框架](https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247495803&idx=1&sn=34bb83f3e464295b17f793c70b384c0d) - 中国信息安全 - [ ] [论坛·原创 | 协同治理视角的智能体安全风险防控体系构建与实践路径](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664265725&idx=1&sn=a19c3a0a5c5656674e40526d130f01e9) - [ ] [外交部：中方坚决反对在人工智能问题上搞选边站队、阵营对抗](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664265725&idx=2&sn=55ff8129b22c4b8c84e9ccbeaa1199f0) - [ ] [关注 | 2026年个人信息保护系列专项行动取得阶段性成效](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664265725&idx=3&sn=a53b9ee1e593991176a4d65981e3db56) - [ ] [法治 | 生成式人工智能科技伦理风险的法律治理](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664265725&idx=4&sn=966ac8bae00599eed07ef95851cd89a0) - [ ] [评论 | 升级治理守护未成年人网络晴空](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664265725&idx=5&sn=3b66d8972c7f9459d94fda2923609ec2) - 看雪学苑 - [ ] [第十届安全开发者峰会（SDC2026）合作招募正式启动！](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618790&idx=1&sn=12f694f5dda7123fbad22f0ea95eca91) - [ ] [实现一个EDR不可见的网络通信（将lwip移植到nt内核中）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618790&idx=2&sn=614beed6bb13fdc6c918aa6d9bb006d6) - [ ] [1400台服务器在线作恶！BTMob 黑产即服务大规模劫持安卓手机](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618790&idx=3&sn=60c333b3b7010645c75e966bf99c430a) - [ ] [2026 KCTF 赛况：2小时47分首杀！『酉时·书院迷局』上演激烈竞速](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618790&idx=4&sn=126c89ce61d21b299786d009bb1bad47) - 数世咨询 - [ ] [潜伏40年、影响全球九成DNS系统的漏洞，被一个开源模型找到了](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543704&idx=1&sn=a3d0aff7adff887d3958c2bde712b1e1) - 安全圈 - [ ] [【安全圈】PTC工业软件曝高危漏洞可窃工业设计与凭证](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078343&idx=1&sn=6b3ceb26bf870d1243e0d94832a74579) - [ ] [【安全圈】医疗云巨头数据泄露扩大波及超370万人](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078343&idx=2&sn=f8f4b5ecf02ceaf2c86892b7a814ef24) - [ ] [【安全圈】CISA紧急通报四项高危在野利用漏洞要求严查](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078343&idx=3&sn=d22a51f0f51c4bf79eeb278f77bb5830) - 补天平台 - [ ] [中秋第二弹 | 公益活动上线，赠月圆好礼！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510914&idx=1&sn=8630103b91b632ba20521173aeb1c205) - [ ] [补天中秋系列活动第一弹|暖情中秋，众测相伴！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510914&idx=2&sn=b118c0f903e847e7f88be363c4bca417) - 奇安信威胁情报中心 - [ ] [一台"干净"的 Mac：当入侵不需要恶意软件](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247519883&idx=1&sn=8617ac55ce05fba60513e2f075e6756e) - 奇安信 CERT - [ ] [【已复现】CVE-2026-23479 未完全修复变种——Redis 远程代码执行漏洞(QVD-2026-55651)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247507148&idx=1&sn=ab4a29b67662e66d96b9a389b874869b) - 软件安全与逆向分析 - [ ] [安卓完美云手机首个内测镜像发布，第一季课](https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485391&idx=1&sn=3abc2e4ca0fd3ae4ba72c19e1f7fd50f) - [ ] [安卓完美云手机首个内测镜像发布，第一季课程完结！](https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485387&idx=1&sn=a9bef45ddde395ea734f92178dd4b89e) - 安全分析与研究 - [ ] [第14篇-云环境与容器环境勒索攻击](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247497031&idx=1&sn=b9f2fe8b8a05a37f0107466d5b998541) - 极客公园 - [ ] [中小企业拥抱 AI 的最佳方式，是照抄大厂的作业](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653112280&idx=1&sn=018485d37aae72b4256de573a6bf2691) - [ ] [宇树上市开盘暴涨 6 倍，王兴兴的 10 年长跑进入下半场](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653112248&idx=1&sn=09699d38bbd5f2f306e30dd1a29dc638) - [ ] [苹果「摄像头耳机」曝光；小米机器人将亮相机器人大会；特斯拉与 SpaceX 合并预期升温 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653112243&idx=1&sn=7b40c95631cf91598168083d3c67e8fd) - 字节跳动技术团队 - [ ] [Agent Plan x DeepSeek Harness 实践指南](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247521375&idx=1&sn=e11bc1ebfc05563e0d0ab2d5d47835b5) - [ ] [ADrive 智能网盘：让 ArkClaw 的每一份产物，从「临时文件」变成「长期资产」](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247521375&idx=2&sn=0f9e1f1fc0b9613c809dd6014c82e3ca) - 复旦白泽战队 - [ ] [越来越能干的移动端 Agent，也需要关注安全问题](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247499635&idx=1&sn=a68870de3dcaac105911aea6873da815) - 火绒安全 - [ ] [七夕 | 美满七夕 让火绒守护您的终端安全](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247536585&idx=1&sn=3b49eab1c2f7e4eebf5fdb28c56ffd24) - [ ] [火绒小问答--「个人版」近期top问题解答](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247536585&idx=2&sn=1e3d2bee2ac88d6d7cb10d2187e6568c) - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247536585&idx=3&sn=67fc0bfaf041d39996453d2efed1ef85) - 君哥的体历 - [ ] [关于国产大模型安全能力评估与跨网数据流动监控的探讨｜总第319周](https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492534&idx=1&sn=15e8dbb38ce411ae9d36b194d05a5d04) - 网安国际 - [ ] [Hugging Face事件后，智谱给开源世界递了一面“盾”](https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652318507&idx=1&sn=fa32594ce6d5a2e196d73d03cf05005a) - 嘶吼专业版 - [ ] [XCon2026议题||从发现到复现：AI 驱动的 Web 漏洞挖掘验证工程](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587798&idx=1&sn=f0a8f2f643c8c75a764a60ad04c37238) - 情报分析师 - [ ] [如何系统性挑战一份看似完美的情报评估](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650569156&idx=1&sn=dcc6757064215c1f303fb5b81d429a6d) - 吴鲁加 - [ ] [让 AI Agent 帮你运营知识星球](https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247486157&idx=1&sn=63bab1d14e98f9b00fc44aa5476c1de7) - 慢雾科技 - [ ] [威胁情报｜小心 Solidity Pro 定向投毒 Web3 开发者](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247505716&idx=1&sn=63c28207988a8ec4120ce027964839a3) - 云鼎实验室 - [ ] [Redis RCE 漏洞预警：CVE-2026-23479 修复不完整再现新漏洞](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497900&idx=1&sn=b111fbf25f84d17b0f0e736eeb9ee274) - Qualys Security Blog - [ ] [Oracle Critical Patch Update, August 2026 Security Update Review](https://blog.qualys.com/category/vulnerabilities-threat-research) - Luca Mercatanti - [ ] [Salgo sul palco di TEDx Jesolo, il 20 Settembre](https://luca-mercatanti.com/salgo-sul-palco-di-tedx-jesolo-il-20-settembre/?utm_source=rss&utm_medium=rss&utm_campaign=salgo-sul-palco-di-tedx-jesolo-il-20-settembre) - IntelTechniques by Michael Bazzell - [ ] [OS Telemetry Update](https://inteltechniques.com/blog/posts/telemetryupdate.html) - SANS Internet Storm Center, InfoCON: green - [ ] [Simple Scans for Cloud Metadata Service, (Wed, Aug 19th)](https://isc.sans.edu/diary/rss/33260) - [ ] [ISC Stormcast For Wednesday, August 19th, 2026 https://isc.sans.edu/podcastdetail/10058, (Wed, Aug 19th)](https://isc.sans.edu/diary/rss/33258) - Have I Been Pwned latest breaches - [ ] [Oz Hair and Beauty - 1,988,331 breached accounts](https://haveibeenpwned.com/Breach/OzHairAndBeauty) - [ ] [Fanlore - 144,520 breached accounts](https://haveibeenpwned.com/Breach/Fanlore) - Schneier on Security - [ ] [ICE Collecting DNA Samples](https://www.schneier.com/blog/archives/2026/08/ice-collecting-dna-samples.html) - Tor Project blog - [ ] [New Release: Tails 7.11](https://blog.torproject.org/new-release-tails-7_11/) - Over Security - [ ] [Rogue ransomware affiliate poses as recovery firm to steal payments](https://www.bleepingcomputer.com/news/security/rogue-ransomware-affiliate-ransom-busters-poses-as-recovery-firm/) - [ ] [Sakura Internet hack exposes data of up to 1.36 million accounts](https://www.bleepingcomputer.com/news/security/sakura-internet-hack-exposes-data-of-up-to-136-million-accounts/) - [ ] [Rogue ransomware affiliate poses as data recovery firm to steal payments](https://www.bleepingcomputer.com/news/security/rogue-ransomware-affiliate-ransom-busters-poses-as-data-recovery-firm/) - [ ] [Healthtech firm CareCloud data breach impacts 3.7 million patients](https://www.bleepingcomputer.com/news/security/healthtech-firm-carecloud-data-breach-impacts-37-million-patients/) - [ ] [Researchers say OpenAI revoked their access to limited cyber program](https://techcrunch.com/2026/08/19/researchers-complain-that-openai-revoked-their-access-to-limited-cyber-program/) - [ ] [Electronic health record company CareCloud says 3.7 million people affected by breach](https://therecord.media/electronic-health-record-company-carecloud-data-breach) - [ ] [Hackers compromise 14,500 Dahua web cameras in 35-day campaign](https://www.bleepingcomputer.com/news/security/hackers-compromise-14-500-dahua-web-cameras-in-35-day-campaign/) - [ ] [NSA, FBI warns of hackers using AI-generated tools in attacks on critical infrastructure technology](https://therecord.media/nsa-fbi-warns-of-hackers-using-ai-generated-tools-critical-infrastructure) - [ ] [US warns of AI-powered attacks on Siemens PLCs in critical infrastructure](https://www.bleepingcomputer.com/news/security/us-warns-of-ai-powered-attacks-on-siemens-plcs-in-critical-infrastructure/) - [ ] [US charges Iranian hackers over $3.4 billion intellectual property theft](https://www.bleepingcomputer.com/news/security/us-charges-iranian-hackers-over-34-billion-intellectual-property-theft/) - [ ] [When the Attacker Wears Your Logo: Detecting and Taking Down Impersonation at AI Speed](https://cyble.com/blog/brand-impersonation-detection-takedown/) - [ ] [Latvian officials resign after cyberattack exposes data on 1.2 million people](https://therecord.media/latvia-cyberattack-vehicle-data) - [ ] [Password spraying attacks surge 155x as hackers exploit MFA gaps](https://www.bleepingcomputer.com/news/security/password-spraying-attacks-surge-155x-as-hackers-exploit-mfa-gaps/) - [ ] [Quanto è davvero hacker il nuovo GLM-5.3 open weight della Z.ai](https://www.cybersecurity360.it/cybersecurity-nazionale/quanto-e-davvero-hacker-il-nuovo-glm-5-3-open-weight-della-z-ai/) - [ ] [US charges Iranians for sprawling hacking campaign on government agencies, universities](https://therecord.media/iran-cyberattacks-us-doj) - [ ] [Microsoft fixes known issue causing Windows Defender crashes](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-known-issue-causing-windows-defender-crashes/) - [ ] [Hunt Malware & Phishing Threats with ANY.RUN for Proactive Enterprise Security](https://any.run/cybersecurity-blog/proactive-threat-hunting/) - [ ] [Critical RCE flaw in Windows IKE Extension now actively exploited](https://www.bleepingcomputer.com/news/security/cisa-critical-windows-ike-extension-flaw-now-exploited-in-attacks/) - [ ] [Describing attacks with crime script analysis](https://blog.talosintelligence.com/describing-attacks-with-crime-script-analysis/) - [ ] [La protezione dell’identità digitale e delle credenziali: il ruolo dei password manager crittografati contro le violazioni dati](https://www.cybersecurity360.it/cultura-cyber/gestione-password-crittografia-sicurezza-identita-digitale/) - [ ] [La protezione della rete domestica multipiattaforma: l’impatto dei servizi VPN a dispositivi illimitati sulla cybersecurity](https://www.cybersecurity360.it/cultura-cyber/vpn-dispositivi-illimitati-sicurezza-rete-privata/) - [ ] [Windows 11 24H2 Home and Pro reach end of support in 2 months](https://www.bleepingcomputer.com/news/microsoft/windows-11-24h2-home-and-pro-reach-end-of-support-in-2-months/) - [ ] [Quando la prassi sostituisce la procedura: la lezione per le imprese](https://www.cybersecurity360.it/legal/privacy-dati-personali/quando-la-prassi-sostituisce-la-procedura-la-lezione-per-le-imprese/) - [ ] [UT San Antonio Shuts Systems, Delays Classes After Cyber Incident](https://thecyberexpress.com/ut-san-antonio-cyber-incident/) - [ ] [UK Cybercrime Journal: Carding Tactics & Youth Money Muling](https://blog.bushidotoken.net/2026/08/uk-cybercrime-journal-carding-tactics.html) - [ ] [CISA: Medusa ransomware hit over 500 critical infrastructure orgs](https://www.bleepingcomputer.com/news/security/cisa-medusa-ransomware-hit-over-500-critical-infrastructure-orgs/) - [ ] [Balonx Sistema: The Face Behind the PhaaS Affecting Mexican Banking](https://www.group-ib.com/blog/balonx-sistema-mexico-phaas/) - [ ] [Critical GitLab Flaw Lets Hackers Alter or Delete Public Projects](https://thecyberexpress.com/gitlab-patches-cve-2026-19478/) - [ ] [Il problema non è il fattore umano. Perché il modello cyber va ripensato](https://www.cybersecurity360.it/outlook/il-problema-non-e-il-fattore-umano-perche-il-modello-cyber-va-ripensato/) - [ ] [What Is PreCrime?](https://bfore.ai/blog/what-is-precrime/) - [ ] [Cyberattack Hits Ukraine Agency Ahead of Major Asset Tender](https://thecyberexpress.com/arma-cyberattack-hits-ukraine-ara/) - [ ] [Oz Hair and Beauty - 1,988,331 breached accounts](https://haveibeenpwned.com/Breach/OzHairAndBeauty) - [ ] [Fanlore - 144,520 breached accounts](https://haveibeenpwned.com/Breach/Fanlore) - KitPloit - PenTest Tools! - [ ] [gosec v2.28.0](https://kitploit.com/en/posts/github-securego-gosec-v2280) - [ ] [ggshield v1.54.0-rc1](https://kitploit.com/en/posts/github-gitguardian-ggshield-1540-rc1) - [ ] [PrivescCheck v2026.08.19-1](https://kitploit.com/en/posts/github-itm4n-privesccheck-20260819-1) - [ ] [EasySpider v0.6.5](https://kitploit.com/en/posts/github-naibowang-easyspider-v065) - [ ] [CTFd v3.8.7](https://kitploit.com/en/posts/github-ctfd-ctfd-387) - [ ] [TeamPass v3.2.1.7](https://kitploit.com/en/posts/github-nilsteampassnet-teampass-3217) - [ ] [joern v4.0.606](https://kitploit.com/en/posts/github-joernio-joern-v40606) - [ ] [ish builds/812](https://kitploit.com/en/posts/github-ish-app-ish-builds812) - [ ] [privacybadger v2026.8.7](https://kitploit.com/en/posts/github-efforg-privacybadger-release-202687) - [ ] [httrack v3.49.22](https://kitploit.com/en/posts/github-xroche-httrack-34922) - [ ] [lamda v10.6](https://kitploit.com/en/posts/github-firerpa-lamda-v106) - [ ] [zeek v8.2.1](https://kitploit.com/en/posts/github-zeek-zeek-v821) - [ ] [yara v4.5.8](https://kitploit.com/en/posts/github-virustotal-yara-v458) - [ ] [qemu v11.1.0](https://kitploit.com/en/posts/github-qemu-qemu-1110) - [ ] [Signal-Desktop v8.24.0-beta.1](https://kitploit.com/en/posts/github-signalapp-signal-desktop-v8240-beta1) - [ ] [frida v17.17.0](https://kitploit.com/en/posts/github-frida-frida-17170) - [ ] [infisical v0.162.21](https://kitploit.com/en/posts/github-infisical-infisical-v016221) - [ ] [ghidra Ghidra_12.1.3_build](https://kitploit.com/en/posts/github-nationalsecurityagency-ghidra-ghidra_1213_build) - [ ] [miasma v0.4.2](https://kitploit.com/en/posts/github-austin-weeks-miasma-v042) - [ ] [brave-browser v1.95.83](https://kitploit.com/en/posts/github-brave-brave-browser-v19583) - [ ] [xspawn](https://kitploit.com/en/tools/github/cenobyte-vincit/xspawn) - [ ] [Scrapegraph-ai v2.1.7](https://kitploit.com/en/posts/github-scrapegraphai-scrapegraph-ai-v217) - [ ] [slot2](https://kitploit.com/en/tools/github/cenobyte-vincit/slot2) - [ ] [secator v0.42.0](https://kitploit.com/en/posts/github-freelabz-secator-v0420) - [ ] [memdumper](https://kitploit.com/en/tools/github/cenobyte-vincit/memdumper) - [ ] [dyen](https://kitploit.com/en/tools/github/cenobyte-vincit/dyen) - [ ] [firefox-devtools-mcp v0.10.0](https://kitploit.com/en/posts/github-mozilla-firefox-devtools-mcp-v0100) - [ ] [clawpatrol v0.5.9](https://kitploit.com/en/posts/github-denoland-clawpatrol-v059) - [ ] [PyMemoryEditor v2.1.0](https://kitploit.com/en/posts/github-jeanextreme002-pymemoryeditor-v210) - [ ] [Titanis v0.9.333](https://kitploit.com/en/posts/github-trustedsec-titanis-v09333) - [ ] [kviklet v0.8.0](https://kitploit.com/en/posts/github-kviklet-kviklet-080) - [ ] [CyberChef v11.4.0](https://kitploit.com/en/posts/github-gchq-cyberchef-v1140) - [ ] [dnscontrol v5.0.0-rc9](https://kitploit.com/en/posts/github-dnscontrol-dnscontrol-v500-rc9) - [ ] [noir v1.3.0](https://kitploit.com/en/posts/github-owasp-noir-noir-v130) - [ ] [wappalyzer-next v2.0.2](https://kitploit.com/en/posts/github-s0md3v-wappalyzer-next-202) - [ ] [pybatfish v2026.08.18](https://kitploit.com/en/posts/github-batfish-pybatfish-v20260818) - [ ] [CyberStrikeAI v1.7.15](https://kitploit.com/en/posts/github-ed1s0nz-cyberstrikeai-v1715) - [ ] [halo-record v0.2.32](https://kitploit.com/en/posts/github-bkuan001-halo-record-v0232) - [ ] [easywall v2.7.0](https://kitploit.com/en/posts/github-jp1337-easywall-v270) - [ ] [remove-ai-watermarks v0.27.0](https://kitploit.com/en/posts/github-wiltodelta-remove-ai-watermarks-v0270) - [ ] [SuperDiagnosticTool v1.0.5](https://kitploit.com/en/posts/github-guettaf-hossam-superdiagnostictool-105) - The Hacker News - [ ] [Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second](https://thehackernews.com/2026/08/cloudflare-workers-spectre-attack-leaks.html) - [ ] [OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior](https://thehackernews.com/2026/08/openai-pauses-frontier-rl-training-as.html) - [ ] [SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs](https://thehackernews.com/2026/08/silkparasite-espionage-campaign-targets.html) - [ ] [Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P](https://thehackernews.com/2026/08/hackers-compromised-14500-dahua-devices.html) - [ ] [Phishing 3.0: The Fight Moves to Agent Versus Agent](https://thehackernews.com/2026/08/phishing-30-fight-moves-to-agent-versus.html) - [ ] [StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data](https://thehackernews.com/2026/08/stopandprotect-uses-nearly-2000-hacked.html) - [ ] [Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation](https://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.html) - [ ] [Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure](https://thehackernews.com/2026/08/microsoft-links-30-rotating-domains-to.html) - [ ] [Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data](https://thehackernews.com/2026/08/clop-linked-windchill-web-shell.html) - Deeplinks - [ ] [📍 The Sneaky Code Tracking App Users | EFFector 38.15](https://www.eff.org/deeplinks/2026/08/sneaky-code-tracking-app-users-effector-3815) - 安全419 - [ ] [《网安行业深度观察系列》 | 网络安全从同质化竞争到创新突围 供给侧的底层逻辑与转型路径](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247554536&idx=1&sn=7c2ce0e6252e699f10c14f279f8ce9a2) - [ ] [安全419｜一周国际网安资讯：APT攻势不减 漏洞与AI风险交织](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247554536&idx=2&sn=3cd87b817714a6dc2eaa0a3ed4626cc0) - Instapaper: Unread - [ ] [Recover Recovery](https://eclecticlight.co/2026/08/18/recover-recovery/) - [ ] [Windows Memory Forensics Identifying Rogue Processes](https://digitalinvestigator.blogspot.com/2026/08/windows-memory-forensics-identifying.html) - [ ] [Sysdiagnose su iPhone e iPad come generarlo, recuperarlo e condividerlo in modo sicuro](https://www.forenser.it/sysdiagnose-su-iphone-e-ipad-come-generarlo-recuperarlo-e-condividerlo-in-modo-sicuro/) - NetSPI - [ ] [BOFScale: A CDN-Fronted Tailnet from a BOF-PE](https://www.netspi.com/blog/technical-blog/red-teaming/bofscale-a-cdn-fronted-tailnet-from-a-bof-pe/) - www.theregister.com - Articles - [ ] ['Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers](https://www.theregister.com/security/2026/08/19/not-a-theoretical-risk-feds-warn-as-attackers-use-ai-made-code-to-hack-critical-infrastructure-controllers/5289960) - [ ] [ICE boss to agents: Leave the Meta spy glasses at home](https://www.theregister.com/security/2026/08/19/ice-boss-to-agents-leave-the-meta-spy-glasses-at-home/5289826) - [ ] [Flock surveillance backlash mounts as fiendish Halloween plans circulate](https://www.theregister.com/security/2026/08/19/flock-surveillance-backlash-mounts-as-fiendish-halloween-plans-circulate/5289701) - [ ] [Comcast gives its Wi-Fi motion detector a security makeover](https://www.theregister.com/security/2026/08/19/comcast-gives-its-wi-fi-motion-detector-a-security-makeover/5289572) - [ ] [Australian hotel chain leaks guests’ PII after breach at third-party database operator](https://www.theregister.com/cyber-crime/2026/08/19/australian-hotel-chain-leaks-guests-pii-after-breach-at-third-party-database-operator/5289341) - Tails - News - [ ] [Tails 7.11](https://tails.net/news/version_7.11/) - Security Affairs - [ ] [Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras](https://securityaffairs.com/197527/iot/inside-operation-cameraswarm-how-one-actor-took-over-14000-dahua-cameras.html) - [ ] [Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains](https://securityaffairs.com/197514/malware/microsoft-tracks-macsync-stealer-by-its-behavior-not-its-domains.html) - [ ] [50,000 Stripe Secrets Leaked in Public Code](https://securityaffairs.com/197504/cyber-crime/50000-stripe-secrets-leaked-in-public-code.html) - [ ] [U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/197490/hacking/u-s-cisa-adds-apple-macos-microsoft-sharepoint-broadcom-vmware-vcenter-and-microsoft-ike-flaws-to-its-known-exploited-vulnerabilities-catalog.html) - Daniel Miessler - [ ] [I'm Worried About a Prompt Injection Worm](https://danielmiessler.com/blog/prompt-injection-worm?utm_source=rss&utm_medium=feed&utm_campaign=website) - Security Weekly Podcast Network (Audio) - [ ] [Preventing a Breakout as AI Agent Threats Is One of Three Top CISO Concerns - Rob Allen - BSW #461](http://sites.libsyn.com/18678/preventing-a-breakout-as-ai-agent-threats-is-one-of-three-top-ciso-concerns-rob-allen-bsw-461)
每日安全资讯（2026-08-20）