# 每日安全资讯（2026-05-07） - Paper - 知道创宇404实验室 - [ ] [素域 PINI：后量子 NTT 掩码的机器验证合成定理](https://paper.seebug.org/3480) - SecWiki News - [ ] [SecWiki News 2026-05-06 Review](http://www.sec-wiki.com/?2026-05-06) - Recent Commits to cve:main - [ ] [Update Wed May 6 11:37:44 UTC 2026](https://github.com/trickest/cve/commit/6d1a2619326ec80c2f778de2ff25c937f8569820) - Private Feed for M09Ic - [ ] [anthropics released v2.1.132 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.132) - [ ] [oiweiwei released v1.4.1 at oiweiwei/go-msrpc](https://github.com/oiweiwei/go-msrpc/releases/tag/v1.4.1) - [ ] [PrefectHQ released 3.7.0 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.7.0) - [ ] [gh0stkey starred Sanyam-G/switch](https://github.com/Sanyam-G/switch) - [ ] [github released v0.8.6 at github/spec-kit](https://github.com/github/spec-kit/releases/tag/v0.8.6) - [ ] [Mr-xn starred Hmbown/DeepSeek-TUI](https://github.com/Hmbown/DeepSeek-TUI) - [ ] [gh0stkey starred microsoft/ProcDump-for-Linux](https://github.com/microsoft/ProcDump-for-Linux) - [ ] [liamg starred owenrumney/watchtower](https://github.com/owenrumney/watchtower) - [ ] [PrefectHQ released 3.6.30.dev4 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.6.30.dev4) - [ ] [gh0stkey starred janhq/jan](https://github.com/janhq/jan) - [ ] [anthropics released v2.1.131 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.131) - [ ] [mgeeky starred KingOfTheNOPs/CDP-Enable-BOF](https://github.com/KingOfTheNOPs/CDP-Enable-BOF) - [ ] [gh0stkey starred soxoj/maigret](https://github.com/soxoj/maigret) - [ ] [PeiQi0 starred stefan-jansen/machine-learning-for-trading](https://github.com/stefan-jansen/machine-learning-for-trading) - [ ] [gh0stkey starred raullenchai/Rapid-MLX](https://github.com/raullenchai/Rapid-MLX) - [ ] [spf13 starred addyosmani/agent-skills](https://github.com/addyosmani/agent-skills) - [ ] [anthropics released v2.1.129 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.129) - Microsoft Security Blog - [ ] [Microsoft named an overall leader in KuppingerCole Analyst’s 2026 Emerging AI Security Operations Center (SOC) report ](https://www.microsoft.com/en-us/security/blog/2026/05/06/microsoft-named-an-overall-leader-in-kuppingercole-analysts-2026-emerging-ai-security-operations-center-soc-report/) - [ ] [ClickFix campaign uses fake macOS utilities lures to deliver infostealers](https://www.microsoft.com/en-us/security/blog/2026/05/06/clickfix-campaign-uses-fake-macos-utilities-lures-deliver-infostealers/) - Tenable Blog - [ ] [Anthropic’s CEO warns the “moment of danger” is real. But most are looking in the wrong place.](https://www.tenable.com/blog/anthropic-ceo-dario-amodei-cybersecurity) - 先知安全技术社区 - [ ] [ISCC2026 web WP](https://xz.aliyun.com/news/92095) - [ ] [针对RSA攻击的总结](https://xz.aliyun.com/news/92094) - [ ] [[原创]trx ctf 2026 house of fishing](https://xz.aliyun.com/news/92088) - [ ] [2026长城杯决赛game题解](https://xz.aliyun.com/news/92087) - Flanker Sky - [ ] [OpenCyvis: An Open-Source AI Phone](https://blog.flanker017.me/opencyvis-an-open-source-ai-phone/) - Doonsec's feed - [ ] [G.O.S.S.I.P 阅读推荐 2026-05-06 DARPA 拖拉机简史](https://mp.weixin.qq.com/s/thM_py_h0AJnqVNN9ZdWfg) - [ ] [200秒拿到Shell，6分钟打穿域控：全自动渗透已经把攻防拖进了“秒级”时代](https://mp.weixin.qq.com/s/YpX3pZOvDOAvtCC_dPSb0A) - [ ] [聊真东西的地方，今天终于敢开门了](https://mp.weixin.qq.com/s/VKuNkBxxCGqK6G7mESCUzg) - [ ] [什么是WLAN？](https://mp.weixin.qq.com/s/b-qkQuQA_bc6H_OfFyOKjA) - [ ] [一站式AIoT智能视频聚合平台，支持国标GB28181、国密GB35114、ONVIF、RTMP协议，视频监控、录像存储、云边协同、AI算法分析](https://mp.weixin.qq.com/s/5LJdiCI-rnNc28B1d3hfYg) - [ ] [全国IT行业高含金量证书大全（完整版）](https://mp.weixin.qq.com/s/5bYP1-YTLS7RREeGLNjyyA) - [ ] [涉网企业必看！未办网络安全备案，后果很严重](https://mp.weixin.qq.com/s/wP45Gb489LIQ1G9aUbjVUg) - [ ] [高危安卓零点击漏洞可远程获取Shell访问权限](https://mp.weixin.qq.com/s/BDVEi3LzN3A32-ofzXWgng) - [ ] [微软Edge浏览器启动时将所有保存的密码以明文形式存入进程内存](https://mp.weixin.qq.com/s/xnYkmRGqBMcIumvmG8aU2w) - [ ] [超前点播没有，超前反馈先安排上了](https://mp.weixin.qq.com/s/ktWvrkQT2DKAJzZFGU1z0w) - [ ] [具身智能威胁分析的分层方法和全景图](https://mp.weixin.qq.com/s/lXkKpvotnsJNmAzUZloufw) - [ ] [ISCC比赛PWN题沦陷，COPY FAIL如何进行攻击（附带模板）](https://mp.weixin.qq.com/s/LZk2uKEhOLvBBwLGVwlOCg) - [ ] [每日安全动态推送(26/5/6)](https://mp.weixin.qq.com/s/hZe3Rg6jXoAfow0rMBKZ7w) - [ ] [[智能体攻防实战] 一.大模型赋能网络入侵检测实战探索（CodeBuddy和d.run实现）](https://mp.weixin.qq.com/s/iatnItf7YOAYAQyVA69AJg) - [ ] [稀土“新冷战”开打：欧美组团反制中国](https://mp.weixin.qq.com/s/2VM_Jx-qwYfGx1Y0de03_A) - [ ] [Grok 被利用背后：AI Agent 权限链滥用分析](https://mp.weixin.qq.com/s/l5RwiwhMb3_Y6i_SR2NZqw) - [ ] [连发5则智能体项目公告！苏州银行力争两年内推广落地50+AI应用场景](https://mp.weixin.qq.com/s/1jLFJH3FcUE5z3BGVh4KVw) - [ ] [AI快讯：PayPal启动AI驱动转型，Anthropic推出10款金融AI智能体](https://mp.weixin.qq.com/s/C5xm0_ZQsyaWpk2heWIBqg) - [ ] [160万！嘉兴银行智能OCR平台项目](https://mp.weixin.qq.com/s/-QpMbPfjOjMpQRx9aEMdBw) - [ ] [台湾高铁通信系统遭大学生利用SDR设备干扰，致4列车紧急停运](https://mp.weixin.qq.com/s/ZX3lZs_MuZqEJs-kKIVaCQ) - [ ] [优秀论文 | 南京理工大学逄淑超：面向无目标后门攻击的投毒样本检测方法](https://mp.weixin.qq.com/s/L2CDDSxjqusF3KTTrqL_Tw) - [ ] [MCP+BurpSuite 实现AI漏洞挖掘](https://mp.weixin.qq.com/s/qbVvalyDCVG1GM01LXZxUw) - [ ] [渗透测试Payload速查手册](https://mp.weixin.qq.com/s/cj091LxuiMmWzGosxKTNVw) - [ ] [杭州立法了郑州怎么接？](https://mp.weixin.qq.com/s/e0iXxBTrGSxxjc3KNOB9bg) - [ ] [绷不住了，懂王开始卖Token了](https://mp.weixin.qq.com/s/Mi_02o23kogAD4CdmVS8vg) - [ ] [360SRC | 第四届白帽赏金挑战赛正式开启！诚邀全网顶尖白帽，共探安全边界](https://mp.weixin.qq.com/s/Nm5woX3Fuv1Z7NED4GaEzw) - [ ] [网安刚需｜5 款救命监控工具，防风险稳运维](https://mp.weixin.qq.com/s/jPPCc_luf13zJ2QdogqXMQ) - [ ] [一次挖矿病毒处置真实案例](https://mp.weixin.qq.com/s/p2nH6aV8Ki-GJ3uhJcmOjg) - [ ] [人工智能重要安全漏洞通报Ollama安全漏洞](https://mp.weixin.qq.com/s/RG9TeSJXxyUwDFD5nFy2ag) - [ ] [一行判断失误攻破 Android Wireless ADB：同 WiFi 静默拿adb shell](https://mp.weixin.qq.com/s/92wXBZNV8RqSV-46MgNCug) - [ ] [密码杂谈（三）：迈进现代](https://mp.weixin.qq.com/s/SQpiGHmVnXAmjKnCVDdPzA) - [ ] [Progress 提醒注意严重的 MOVEit 自动化认证绕过漏洞](https://mp.weixin.qq.com/s/Mz1h3sZza39OfrZxPbCzDQ) - [ ] [Palo Alto 提醒注意严重的 PAN-OS RCE漏洞](https://mp.weixin.qq.com/s/VqaBYT8TN6xcERGTqvKi8w) - [ ] [2026未来CSO训练营xa0|xa0首期回顾：大模型、具身智能、安全治理、攻防实战](https://mp.weixin.qq.com/s/Wm__323cGUstAweVfWcfhA) - [ ] [爱尔兰突发对SHEIN启动数据跨境等调查，意欲何为？](https://mp.weixin.qq.com/s/UDltmaoCbTmWwsAAuD8UmA) - [ ] [每周网安资讯 （4.30-5.6）| AIIA发布《OpenClaw类智能体部署风险管理指南》](https://mp.weixin.qq.com/s/eCixiqUa4FDWY3R6JYtuJw) - [ ] [金盾资讯丨网络空间安全动态精选2026年5月（总第5期）](https://mp.weixin.qq.com/s/C83dOlntmI2PcmtsbHx_-A) - [ ] [刚刚下班,看到一个送东西的消息。。一会删除。但是我估计大家都不想要。。](https://mp.weixin.qq.com/s/cMeBlyjzkNNIc8VUwzY76g) - [ ] [ECU在OTA中的信息安全简介](https://mp.weixin.qq.com/s/o6ptBKu2QpmXTpRPFz_MrQ) - [ ] [汽车零件产品开发过程A样件、B样件和C样件的区别？](https://mp.weixin.qq.com/s/26VRybELVAXxrrSL-eBwqQ) - [ ] [文章收藏实践指南：从「丢完不看」到「随时可找」](https://mp.weixin.qq.com/s/quwVrW56fDXcVDM1GodV8w) - [ ] [智能体驱动的漏洞挖掘实践](https://mp.weixin.qq.com/s/dnAi9Gz0i6TlBdaZ2YYQBw) - [ ] [4月全球网络安全焦点事件TOP10](https://mp.weixin.qq.com/s/pJm7ZQ6Il8Rnq27pvLSxWw) - [ ] [AIGC大模型数据安全分析研究](https://mp.weixin.qq.com/s/ZG8P45C1-iljaOSPUyvZCg) - [ ] [【论文速读】|生成漏洞验证测试以帮助增强复杂软件的安全性](https://mp.weixin.qq.com/s/RUgtM6UMQxAxihbAu-oj2Q) - [ ] [技校毕业却造出中国第一病毒！谁说网络安全高不可攀的？](https://mp.weixin.qq.com/s/-_LAU-ihTZigjNtnGuP6FQ) - [ ] [仅34%网络安全专业人员愿留任 CISO面临留住人才压力](https://mp.weixin.qq.com/s/Ka_lZTv1ESMLbtUN-J5dCw) - [ ] [Chrome 静默强塞 4GB 大模型：无弹窗、无法关、删了重下](https://mp.weixin.qq.com/s/5mQ17M7biV_Rp06lQq5pgA) - [ ] [Chrome 静默下载 4GB 模型的技术取证](https://mp.weixin.qq.com/s/Zqa1tQL76lH9Z67Gwbby_Q) - [ ] [安全简讯（2026.05.06）](https://mp.weixin.qq.com/s/jfS2EYW2HVYUn57DMWELUg) - [ ] [【漏洞通告】Ollama 未授权内存泄露漏洞(CVE-2026-7482)](https://mp.weixin.qq.com/s/suyeuaKwQSzS5JtMlo_-Hg) - [ ] [【漏洞通告】Android ADB 认证绕过漏洞(CVE-2026-0073)](https://mp.weixin.qq.com/s/N9OpLuxge7XVXhmPPlJsbA) - [ ] [分析 Mythos：为什么十年检测经验让我觉得漏洞数字没那么可怕](https://mp.weixin.qq.com/s/l9R1P96icRMI2EyjCQxsSA) - [ ] [攻防实战×智能体矩阵，长亭筑牢金融AI原生安全底座](https://mp.weixin.qq.com/s/rNfBFwp34ySpBiW2AvFqeg) - [ ] [“蜚语科技”焕新升级，正式更名 “飞宇极光”](https://mp.weixin.qq.com/s/O3QVlIys7MBhOqU_KgHgEw) - [ ] [飞宇极光荣获工商银行“模速之星—新锐成长奖”，以AI安全共筑科创金融新生态](https://mp.weixin.qq.com/s/VPVhg5BHx3Qa-bqackGtwg) - [ ] [鹅厂员工：毕业5年，感觉码农的路愈发难走，刚进公司拿2万感觉很轻松，买了房之后，现在拼命还很慌！](https://mp.weixin.qq.com/s/YuKu30m2QIuJ5aaVHVXj0Q) - [ ] [中央网信办部署开展“清朗·整治AI应用乱象”专项行动](https://mp.weixin.qq.com/s/3XVgkN_1gv2w2rQzMh_RDg) - [ ] [《2025字节跳动企业社会责任报告》发布](https://mp.weixin.qq.com/s/iLv_8PFQ3qLPqeRgTc3wzg) - [ ] [渗透大佬都在看的渗透笔记合集，超级实用，建议收藏！（附PDF）](https://mp.weixin.qq.com/s/58k6psp6aGviDcPXy43PfQ) - [ ] [从零入门云原生监控！3天带你玩转 Prometheus 搭建 + 告警实战](https://mp.weixin.qq.com/s/0McoSW5XbmHLfbtptmX9kQ) - [ ] [【立即应急】cPanel & WHM 认证绕过漏洞（CVE-2026-41940）已被大规模自动化利用](https://mp.weixin.qq.com/s/MErccH5iioHEJsU6RjzFgg) - [ ] [奇安信入选第十一届CNCERT网络安全应急服务支撑单位](https://mp.weixin.qq.com/s/XXUTaVT13kuqCXhILq01JQ) - [ ] [警惕！你的AI助手，正在把你的简历\"递\"给陌生人](https://mp.weixin.qq.com/s/ZLNnH192XD4tKd_w5pNnJg) - [ ] [工业网络安全周报-2026年第14期](https://mp.weixin.qq.com/s/djM5NDa5LXL4MGDvqrHQxA) - [ ] [云天 · 安全通告（2026年5月6日）](https://mp.weixin.qq.com/s/snhiZtcpMwRzTzpdLbCzoQ) - [ ] [重要声明xa0|xa0关于存在假冒编辑部进行论文核查的紧急声明](https://mp.weixin.qq.com/s/2tG97dPrco88RmKq56norw) - [ ] [立即行动：在考试更新前获取您的 CCSP 认证](https://mp.weixin.qq.com/s/0syrzGI_dAzXeiDjRQGSrw) - [ ] [【已复现】Android ADB 认证绕过漏洞(CVE-2026-0073)安全风险通告](https://mp.weixin.qq.com/s/Lbr65Cg3EKTCOjRLJjP0lw) - [ ] [【在野利用】Palo Alto Networks PAN-OS 缓冲区溢出漏洞(CVE-2026-0300)安全风险通告](https://mp.weixin.qq.com/s/CVuwSix19RoeoXW0R-wpFA) - [ ] [2026fic初赛服务器部分](https://mp.weixin.qq.com/s/WSvFM5006o4pWeD2Ev8Omg) - [ ] [30 万个 Ollama 部署面临信息失窃风险](https://mp.weixin.qq.com/s/gAk8o_KbGMp-2uobjOhCjw) - [ ] [企业赏金SRC实战案例三](https://mp.weixin.qq.com/s/NHFE0OxQ0Am-C-uvlf7Xaw) - [ ] [重磅活动｜618安全保卫战开启](https://mp.weixin.qq.com/s/wVBXJQccpp3RWaEkMrHORw) - [ ] [低空经济如何高质量起飞？](https://mp.weixin.qq.com/s/rr_yjy_lZZYHfot_AvwdcQ) - [ ] [政府工作报告定调！传统、新兴、未来产业要这样发展→](https://mp.weixin.qq.com/s/9htQuDfg1lociKn5U7VU3g) - [ ] [关键漏洞可致 30 万 Ollama 部署信息被盗](https://mp.weixin.qq.com/s/oQ3S6LWCYRhuolkShzKupg) - [ ] [这是2005年产的夏普Mebius PC-TX32K](https://mp.weixin.qq.com/s/lLmBDFs0aIGlIKOeSd4Bww) - [ ] [重定向绕过另类思路](https://mp.weixin.qq.com/s/jo5IP4v6o-pSuCdrL7036A) - [ ] [分享一次EDU实战，辗转突破登录口到达后台](https://mp.weixin.qq.com/s/PcSUlm665bDbDhHRRisZEg) - [ ] [Bugku逆向题目-20.easy-100(LCTF)](https://mp.weixin.qq.com/s/3EyTjcAqqiPAtTCwFG336Q) - [ ] [2026英国养老金大变局：一文看懂英国人的“养老钱”怎么管、怎么变](https://mp.weixin.qq.com/s/nVg1qxVYCcqIvlsR5gU2Og) - [ ] [360本部红队直招，实习/社招皆可，速投！](https://mp.weixin.qq.com/s/8JIvBwHJl_vFljmjDURSsg) - [ ] [国产大模型引爆“淘金热”，谁是真正的“卖铲人”？](https://mp.weixin.qq.com/s/VExDtKFlySU7rDYmMFe9Og) - [ ] [台湾高铁无线电遭盗接事件：一场假告警如何逼停列车](https://mp.weixin.qq.com/s/0UeoyFnb1mNWMOVL7zXGSA) - [ ] [钓鱼在延边](https://mp.weixin.qq.com/s/Vnyq7yNkxbnFVz8FRTyPAw) - [ ] [GodPotatoBOF — 在Cobalt Strike中一键提权到SYSTEM](https://mp.weixin.qq.com/s/cTGIsTLPKLBWPQSWNBqbfA) - [ ] [同享人力资源管理系统 TXEHR V15 PeiXun.asmx SQL注入漏洞](https://mp.weixin.qq.com/s/THOGDCE80d2RQwDMixwQwQ) - [ ] [洞察｜抢占智能时代制高点：我国人工智能产业发展调查](https://mp.weixin.qq.com/s/je2JOze7pQQ4oD3Pk8UG-g) - [ ] [动态｜2026年度京津冀自然科学基金合作专项项目申报通知](https://mp.weixin.qq.com/s/9SdIIvfmcVgvwIP_uQ6Raw) - [ ] [产业｜网安市场周度监测（2026-05-06）](https://mp.weixin.qq.com/s/1hpsB2szpTZEc7_8FbzBjw) - [ ] [美军AI“七缺一”：Anthropic的孤勇，能否挡住算法战争的潘多拉魔盒？](https://mp.weixin.qq.com/s/zuunXSy49_eWWZ9WcKOl0Q) - [ ] [Microsoft 365 Copilot 新功能202604](https://mp.weixin.qq.com/s/voxEJfbflqOLixHZ5JTkmA) - [ ] [Copilot pro 1~5年会员 Microsoft 365 个人高级版](https://mp.weixin.qq.com/s/yM0JBbBHhJPHkaE3FLKDzQ) - [ ] [一颗“洗衣机大小”的卫星，暴露了英国在伊朗战争里的重要角色](https://mp.weixin.qq.com/s/yJycQbNMD1rXXMH6QLFM0w) - [ ] [美国情报圈正在换血！9个NIO岗位背后，是那个人在重排“美国怎么看世界”](https://mp.weixin.qq.com/s/2nl4a_LisGH3sxDFSCpmTg) - [ ] [引入AI！又一家数字货币交易所宣布裁员](https://mp.weixin.qq.com/s/qSNMtqffsoST3g_rqJfQag) - [ ] [深度解析：OpenAI 的红队测试，如何在发布前找出模型漏洞](https://mp.weixin.qq.com/s/zveO60reYLzH1AWA-A9Tow) - [ ] [什么是DHCP？](https://mp.weixin.qq.com/s/djJoKbSssO50H_OqnuGO7A) - [ ] [【漏洞预警】核弹级提权漏洞 CVE-2026-31431已复现 含Poc](https://mp.weixin.qq.com/s/w7bK4SaiqCxoRDSAcQTt6A) - [ ] [CRA 系列认证终于讲透：不是产品凑一凑就能合，是“一套体系管一堆型号”才叫真合规](https://mp.weixin.qq.com/s/zqdDlJwyABw9Y3R2DPBSvQ) - [ ] [官方警示 | 国家计算机病毒应急处理中心通报67款App违法违规，个人信息保护再敲警钟](https://mp.weixin.qq.com/s/es-DJvqGN7gWYI2kJRzE6w) - [ ] [台湾23岁学生用SDR和手持电台瘫痪四列高铁：TETRA无线电漏洞让19年安全体系形同虚设](https://mp.weixin.qq.com/s/2FbP_KviNwol4rMc4Kil-g) - [ ] [安全聘 | 亚洲基础设施投资银行（AIIB）- 招人啦](https://mp.weixin.qq.com/s/kJLXJiC955kWttPgE-MIKg) - [ ] [分享图片](https://mp.weixin.qq.com/s/E9pg2XsLZHnIcDBAElOysQ) - [ ] [挑战杯｜谁是AI安全领域的佼佼者，谁就揭榜。安恒信息“英雄榜”请你查收！](https://mp.weixin.qq.com/s/5qnd8tDok2zHmkbHa3GZag) - [ ] [安全警报 | 长期针对我国发动网络攻击的黑客组织再犯新案，首航高科遭恶意攻击](https://mp.weixin.qq.com/s/DXw-xd9F7BTbrxLJ6QHcQw) - [ ] [你的键盘，比你更了解你](https://mp.weixin.qq.com/s/MDbfX8EhsgT20NQg9fHAlg) - [ ] [2026年3月三大网络攻击事件](https://mp.weixin.qq.com/s/AtApT5TYctY64JUZhQTK_g) - [ ] [杀死比赛](https://mp.weixin.qq.com/s/bE4tkrEt71N1A6u5vnpflg) - [ ] [论文辅导| 硕士论文辅导|博士论文辅导机构 | 拒绝躺平！硕士毕业论文博士毕业论文如何逆袭，看完你必大彻大悟~](https://mp.weixin.qq.com/s/4ktVMCkVZiGxjCKyYVOLNw) - [ ] [dd2集成APIScan功能实现和实战记录](https://mp.weixin.qq.com/s/3dyxG4YlqPqfN8clsNEk8g) - [ ] [e0e1-wx-gui 1.1版本 微信4自动化辅助渗透工具 分享解决流量转发无法回连问题](https://mp.weixin.qq.com/s/0Soj0Rnxgeo0aqc_a0PZrw) - [ ] [今天不聊技术，聊聊A股](https://mp.weixin.qq.com/s/KKhWBqpVyK7QSbbS0fVApA) - [ ] [为什么既有 TMP 环境变量又有 TEMP 环境变量，哪个才是正确的？](https://mp.weixin.qq.com/s/DbC7EhJU9c97yuJoiginmg) - [ ] [隔离与恢复：美国CISA加速布局战争冲突下的关键基础设施韧性](https://mp.weixin.qq.com/s/RZXPy2dtkP5TFUG1Oe4YNA) - [ ] [【已复现】Ollama 内存泄漏漏洞(CVE-2026-7482)安全风险通告](https://mp.weixin.qq.com/s/sAuN1ugzFNE_59cEwQ7NZw) - [ ] [Milesight IP 摄像头漏洞：5 个关键 CVE 导致全球 14,706 台监控设备暴露于风险之中](https://mp.weixin.qq.com/s/cUHeCo207MEqWbuWEQQvfQ) - [ ] [用Python自动化漏洞狩猎，打造专属工具，让狩猎速度提升10倍！](https://mp.weixin.qq.com/s/gymd7aPTPHPkc1Xcu49diQ) - [ ] [太阳能板系统如何工作?](https://mp.weixin.qq.com/s/T62pXVoHDdNNpk4TsoY8lQ) - [ ] [蓝军战术态势数据系统-美国陆军第一军编制实力](https://mp.weixin.qq.com/s/gtF3O7J_vVTOyWCKsXi3-Q) - [ ] [【推荐】蓝军战术态势数据系统-美国太平洋海军陆战队编制实力](https://mp.weixin.qq.com/s/6IolKl-D__uHoNpMk0XQWA) - [ ] [【推荐】蓝军战术态势数据系统-美国空战司令部第十五航空队编制实力](https://mp.weixin.qq.com/s/3m2ysjLiRQzv6mLuE86G0w) - [ ] [知远·外军防务开源情报数据库服务公告](https://mp.weixin.qq.com/s/xI1XyLhv5DMjabnWLR8pKg) - [ ] [知远·世界主要国家与地区国防预算数据库说明](https://mp.weixin.qq.com/s/ITQNlsVHAeRfhCojHLWdLQ) - [ ] [知远·全球军事态势情报数据库上线服务公告](https://mp.weixin.qq.com/s/9Y4RXozw7vHLb4DRCwgcQw) - [ ] [全球军事态势情报数据库：助力数字蓝军—构建精准化、体系化的外军研究基础设施u200c](https://mp.weixin.qq.com/s/pFVXuWjN91QFujC79ba-_w) - [ ] [严重漏洞可能导致 30 万个 Ollama 部署面临信息泄露风险](https://mp.weixin.qq.com/s/mITg4jM2D8IwByt9nUM9eg) - [ ] [国家网络与信息安全信息通报中心通报67款违法违规收集使用个人信息的移动应用](https://mp.weixin.qq.com/s/DPIuaOCil0aYbRRXtixWXg) - [ ] [微软警告：针对美国企业的复杂网络钓鱼活动正在发生](https://mp.weixin.qq.com/s/Y7nE6tSEZI5MP1KJc9TWRA) - [ ] [国安部连发 3 警告：你公司 AI 是不是也在裸奔？](https://mp.weixin.qq.com/s/jJB-w4xMMBJIqvNwjz2EMg) - [ ] [报名开启 | 2026年度CTF“揭榜挂帅”擂台赛](https://mp.weixin.qq.com/s/SrmIe7wVO3LdPQxWkPIgqQ) - [ ] [网安上市公司 2025 年报里的 AI 安全布局：安全大模型之后，开始卷智能体了](https://mp.weixin.qq.com/s/bK3eishd9j5-7SZbp5a5nQ) - [ ] [深信服入选“挑战杯”揭榜挂帅发榜单位，正式发布《AI+安全大模型平台的智能体研究》赛题](https://mp.weixin.qq.com/s/9RfUisHM73k_8e5oatMrSQ) - [ ] [机器学习--基础入门--00什么是机器学习？](https://mp.weixin.qq.com/s/8BMcuk6SFAe-U8Q63iKPUg) - [ ] [快讯｜北邮GAMMA LAB一篇工作被IJCAI 2026 Survey Track录用](https://mp.weixin.qq.com/s/oXAIV2LvQ6sFjH1mP1U6-Q) - [ ] [安卓零点击 RCE 漏洞（CVE-2026-0073）深度解析：同一 WiFi 下，手机放着不动也会被入侵](https://mp.weixin.qq.com/s/n3gChSDS9gtAk1Hpj6U-Og) - [ ] [第一届 Polaris CTF 2026 招新赛完美落幕](https://mp.weixin.qq.com/s/H8hRdnT8Id9uLpC8Gv-Yrw) - [ ] [微步获评CNCERT第十一届网络安全应急服务甲级支撑单位](https://mp.weixin.qq.com/s/ClBxl4ETiCO9PWpmGCurOw) - [ ] [实体 AI 落地狂飙：日本用机器人补人力缺口，网络安全却成最大隐忧](https://mp.weixin.qq.com/s/08TkH25IURmXYxtvms5oow) - [ ] [全球首例！美国州政府起诉 AI 聊天机器人非法冒充执业医师；CNNVD 发布 AI 漏洞通报：213 个漏洞集中爆发，超危 8 个高危 89 个| 牛览](https://mp.weixin.qq.com/s/F_rC_eOsUvsuLqV9pcUu7g) - [ ] [2026第四届全国数据安全职业技能竞赛暨第四届全国安防行业职业技能竞赛“美亚柏科杯”数据安全管理员职业技能竞赛总决赛第二批18号下午wp](https://mp.weixin.qq.com/s/-aokqaJajF8ka7Poj6a2DQ) - [ ] [全球抗量子密码政策法律动态跟踪（第22期）](https://mp.weixin.qq.com/s/R7eCwtwG4gIJuWVWa5VNzw) - [ ] [授权机构2026年5月CISP培训开班计划公告](https://mp.weixin.qq.com/s/qZH-uHjARYO73jz84idenQ) - [ ] [捷报 | 边界无限成功中标某股份制银行RASP项目](https://mp.weixin.qq.com/s/V31gaefgQPZRqc1GNlck4A) - [ ] [某CMS最新版本前台RCE审计流程](https://mp.weixin.qq.com/s/k27h7AAfms33bBqnFOkmsA) - [ ] [危险！Android 无线调试认证被绕过：0 点击获取 ADB Shell](https://mp.weixin.qq.com/s/Axi6XZlFmiihXcARsPDwUw) - [ ] [35页PPT，读懂AI如何重塑网络安全 ｜精华版](https://mp.weixin.qq.com/s/Y7XAooG1eVi78tpJPRwpZQ) - [ ] [猫猫周报 Vol.07｜迟到的假期福利-私人众测](https://mp.weixin.qq.com/s/8mJ7sPoOnIxElA5Q9QkcbQ) - [ ] [大模型安全深度学习指南：提示注入与越狱攻击专题(1)](https://mp.weixin.qq.com/s/DLWMVQA0YxFKMOkX61bQhg) - [ ] [测评 || AI 时代，谁才是真正能打的代码审计工具？](https://mp.weixin.qq.com/s/PnMpZXA46Gk8jCxqQ9ES9g) - [ ] [AI Java代码审计实战](https://mp.weixin.qq.com/s/dSgMEspt8cM1F1bkG0zZpw) - [ ] [别瞎转了！零基础拿捏网络安全，看这篇“保姆级”避坑指南就够了！](https://mp.weixin.qq.com/s/uMWwfxPMiajcZZkRDAzx_w) - [ ] [安全圈的“降维打击”！VulnPlus：AI驱动全自动漏洞挖掘（文末有福利）](https://mp.weixin.qq.com/s/ZVHFCzIBoD1i1QFtRA5aiA) - [ ] [什么是OSPF?](https://mp.weixin.qq.com/s/pPbbS0wUpv5fpEoe09ew3g) - [ ] [2026年游戏应用报告](https://mp.weixin.qq.com/s/X4DK6C3NmUEx4u_L0sLjHg) - Sandfly Security Blog RSS Feed - [ ] [Detecting Copy Fail Linux Vulnerability Agentlessly with Sandfly](https://sandflysecurity.com/blog/detecting-copy-fail-linux-vulnerability-agentlessly-with-sandfly) - Securelist - [ ] [OceanLotus suspected of using PyPI to deliver ZiChatBot malware](https://securelist.com/oceanlotus-suspected-pypi-zichatbot-campaign/119603/) - [ ] [Websites with an undefined trust level: avoiding the trap](https://securelist.com/suspicious-websites-undefined-trust-level/119675/) - Hexacorn - [ ] [1 little known secret of forfiles.exe, part 2](https://www.hexacorn.com/blog/2026/05/06/1-little-known-secret-of-forfiles-exe-part-2/) - Reverse Engineering - [ ] [pyghidra-mcp Meets Ghidra GUI: Drive Project-Wide RE with Local AI](https://www.reddit.com/r/ReverseEngineering/comments/1t5d5ak/pyghidramcp_meets_ghidra_gui_drive_projectwide_re/) - [ ] [ant4g0nist/pyre: Ghidra decompiler in your browser](https://www.reddit.com/r/ReverseEngineering/comments/1t52x6s/ant4g0nistpyre_ghidra_decompiler_in_your_browser/) - Horizon3.ai - [ ] [Autonomous AI Cyber Defense You Can Trust in Production](https://horizon3.ai/attack-research/disclosures/autonomous-ai-cyber-defense-safe-production/) - [ ] [Horizon3.ai Announces Breakthrough Research Making Autonomous AI Cyber Defense Safe to Deploy](https://horizon3.ai/news/press-release/horizon3-safe-autonomous-ai-cyber-defense/) - Malwarebytes - [ ] [Google Chrome’s silent 4GB AI download problem](https://www.malwarebytes.com/blog/news/2026/05/google-chromes-silent-4gb-ai-download-problem) - [ ] [Attackers adopt JavaScript runtime Bun to spread NWHStealer](https://www.malwarebytes.com/blog/threat-intel/2026/05/attackers-adopt-javascript-runtime-bun-to-spread-nwhstealer) - [ ] [Millions of students’ personal data stolen in major education breach](https://www.malwarebytes.com/blog/news/2026/05/millions-of-students-personal-data-stolen-in-major-education-cyberattack) - bishopfox.com - [ ] [Otto Support - Excessive Agency and Tool Privileges](https://bishopfox.com/blog/otto-support-excessive-agency-and-tool-privileges) - 绿盟科技技术博客 - [ ] [数字中国建设峰会｜绿盟科技加入中国电信Token生态联盟， 共筑AI时代智能体安全防线](https://blog.nsfocus.net/%e6%95%b0%e5%ad%97%e4%b8%ad%e5%9b%bd%e5%bb%ba%e8%ae%be%e5%b3%b0%e4%bc%9a%ef%bd%9c%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e5%8a%a0%e5%85%a5%e4%b8%ad%e5%9b%bd%e7%94%b5%e4%bf%a1token%e7%94%9f%e6%80%81/) - [ ] [微光成炬 | 第二届绿盟公益日圆满落幕](https://blog.nsfocus.net/%e5%be%ae%e5%85%89%e6%88%90%e7%82%ac-%e7%ac%ac%e4%ba%8c%e5%b1%8a%e7%bb%bf%e7%9b%9f%e5%85%ac%e7%9b%8a%e6%97%a5%e5%9c%86%e6%bb%a1%e8%90%bd%e5%b9%95/) - HackerNews - [ ] [ć•™č‚˛ćŠ€ćœŻĺˇ¨ĺ¤´ Instructure ééť‘ĺŽ˘ć”ťĺ‡ťďźŒéť‘ĺŽ˘ç§°çŞƒĺ– 8800 所ĺŚć Ąĺ’ŒéŤ˜ć Ąć•°ćŽ](http://0.0.0.0:8080/post/64207) - [ ] [DAEMON Tools ĺœ¨äž›ĺş”é“žć”ťĺ‡ťä¸č˘Ťć¤ĺ…Ľćœ¨éŠŹäťĽéƒ¨ç˝˛ĺŽé—¨](http://0.0.0.0:8080/post/64206) - [ ] [ć–°ĺž‹éšç§˜çš„ Quasar Linux ćść„软䝜瞄准软䝜埀ĺ‘äşşĺ‘˜](http://0.0.0.0:8080/post/64205) - [ ] [丼é‡ćźć´žćˆ–致 30 万个 Ollama éƒ¨ç˝˛é˘ä¸´äżĄćŻĺ¤ąçŞƒéŁŽé™Š](http://0.0.0.0:8080/post/64204) - [ ] [čś‹ĺŠżç§‘ćŠ€ďźˆTrellixćşäťŁç ĺş“éĺ…Ľäžľ](http://0.0.0.0:8080/post/64203) - [ ] [WhatsApp ćŠŤéœ˛ć–‡äťśäźŞčŁ…ä¸Žäťťć„ URL ć–šćĄˆćźć´ž](http://0.0.0.0:8080/post/64202) - rtl-sdr.com - [ ] [Guest Post: Listening to the Jet Stream – 100 Days of Wind Sensing with Stock RTL-SDR Hardware](https://www.rtl-sdr.com/guest-post-listening-to-the-jet-stream-100-days-of-wind-sensing-with-stock-rtl-sdr-hardware/) - 奇客Solidot–传递最新科技情报 - [ ] [CNN 创始人 Ted Turner 去世，享年 87 岁](https://www.solidot.org/story?sid=84228) - [ ] [研究称吃鸡蛋有助于降低阿尔茨海默病风险](https://www.solidot.org/story?sid=84227) - [ ] [OpenAI 总裁被迫在法庭作证时阅读自己的个人日记](https://www.solidot.org/story?sid=84226) - [ ] [奥斯卡奖拒绝 AI 演员和 AI 创作的剧本](https://www.solidot.org/story?sid=84225) - [ ] [深色微塑料可能加剧全球暖化](https://www.solidot.org/story?sid=84224) - [ ] [Google Chrome 被发现在合格设备上静默下载 Gemini Nano](https://www.solidot.org/story?sid=84223) - [ ] [研究揭示饮食如何增强免疫力](https://www.solidot.org/story?sid=84222) - [ ] [Google 的 Pixel 11 系列将提供内存缩减版本](https://www.solidot.org/story?sid=84221) - [ ] [苹果同意向美国 iPhone 用户支付 2.5 亿美元和解 AI 功能交付延迟诉讼](https://www.solidot.org/story?sid=84220) - [ ] [OpenAI、Google 和微软推动在学校课程中加入 AI 素养课](https://www.solidot.org/story?sid=84219) - [ ] [Notepad++ for Mac 引发商标权争议](https://www.solidot.org/story?sid=84218) - 腾讯玄武实验室 - [ ] [每日安全动态推送(26/5/6)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960469&idx=1&sn=20ae5f08d592a10a3047e47a2a649415) - Black Hills Information Security, Inc. - [ ] [Swapper – A Pure Regex Match/Replace Burp Extension](https://www.blackhillsinfosec.com/swapper/) - 奇安信 CERT - [ ] [【已复现】Ollama 内存泄漏漏洞(CVE-2026-7482)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505584&idx=1&sn=ca44217a8c928da367571bb4e022801c) - 黑鸟 - [ ] [预测市场巨头Polymarket的巴拿马总部竟是一家律师事务所](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186632&idx=1&sn=9276c8576aef1f29f4c11243ae35b124) - 代码卫士 - [ ] [Progress 提醒注意严重的 MOVEit 自动化认证绕过漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525932&idx=1&sn=cf1d9580501b94ce494712fa2e09e95c) - [ ] [Palo Alto 提醒注意严重的 PAN-OS RCE漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525932&idx=2&sn=a1f8acec7865ec3eec445777c4ad6251) - 安全内参 - [ ] [紧急停车！某地方高铁通信系统遭入侵，多趟列车触发紧急制动刹停](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515890&idx=1&sn=b823b2acfb347fa244c8d5f173f3a48f) - [ ] [CNCERT：关于Linux内核存在本地权限提升漏洞的安全公告](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515890&idx=2&sn=01daa1c7be2168b06ef9189578893d6d) - Shostack & Friends Blog - [ ] [Appsec roundup - April 2026](https://shostack.org/blog/appsec-roundup-april-2026/) - 威努特安全网络 - [ ] [威努特赋能烟草制造，筑牢全流程数据安全屏障](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651141498&idx=1&sn=3a94c95b32e268951ef45a3af410ebba) - 微步在线研究响应中心 - [ ] [速查！又一知名软件被投毒，大量用户失陷](https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508681&idx=1&sn=72f39e5d2b10d749ec02aa1e692c6d0f) - 丁爸 情报分析师的工具箱 - [ ] [【资料】英国国家安全开源情报的未来](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651155447&idx=1&sn=70f22218e0ba9b7ecdd9045f98f3dbcb) - 安全研究GoSSIP - [ ] [G.O.S.S.I.P 阅读推荐 2026-05-06 DARPA 拖拉机简史](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501641&idx=1&sn=ab01d08bda02428410648a6e0db80346) - 中国信息安全 - [ ] [网览九州 | 政务人工智能大模型安全保障体系研究](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262236&idx=1&sn=a59e1627d3b4bb7a31fec16a0d62e56c) - [ ] [国安部提示：提防视频会议系统泄露敏感信息](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262236&idx=2&sn=b117cc688a9a94837d90b67d10d2ac60) - [ ] [专家解读｜时建中：统筹发展与安全 新时代网络空间治理的中国逻辑](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262236&idx=3&sn=164396ec1a045311ccf2626995e6878c) - [ ] [中国消费者协会、中国市场监督管理学会联合发布消费提示：警惕网络理财课程陷阱，不当“韭菜”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262236&idx=4&sn=640f36411097cb65d13532b275e50327) - [ ] [评论 | “AI形象”应用必须严守法律底线](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262236&idx=5&sn=ee4d23e31192177a671bc802ec5a3cd2) - 信息安全国家工程研究中心 - [ ] [中央网信办部署开展“清朗·整治AI应用乱象”专项行动](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247503797&idx=1&sn=d3ad5c7457e19747bb71f58bf9bdb7be) - 天黑说嘿话 - [ ] [技术干货｜拆解大模型全链路攻防：从攻击范式到工程化防御](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486039&idx=1&sn=c0b576eb0726e0374175e4743dd11bd4) - 安全圈 - [ ] [【安全圈】安卓高危0Day漏洞可远程获取Shell访问权限](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076197&idx=1&sn=f04ddcae84cf9ff13b2696de01ec65eb) - [ ] [【安全圈】上古软件DaemonTools被投毒埋下木马：直接卸载吧 已经没啥用](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076197&idx=2&sn=d5866e3f0b1ae35fa7de7fc57defec1d) - [ ] [【安全圈】PHP 结束 30 多年定制许可历史，正式采用 BSD 3-Clause 许可证](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076197&idx=3&sn=9d052ec11e89d8715f365258c5a457f8) - 电子物证 - [ ] [计算机取证：Windows系统打印机痕迹分析](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048998&idx=1&sn=84ff8d69023c6ae7d02bb08388f515cb) - [ ] [【“删除”只是假象，真相从未离场】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048998&idx=2&sn=3dbdc483f7a5611038217d97dec4ba2c) - 微步在线 - [ ] [微步获评CNCERT第十一届网络安全应急服务甲级支撑单位](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650186350&idx=1&sn=3d4481a98b9bcef88417d936b715daa4) - 网络空间安全科学学报 - [ ] [重要声明 | 关于存在假冒编辑部进行论文核查的紧急声明](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247507461&idx=1&sn=a4e9a5f7b3bd5e06cf687a4b7693cb20) - 安全牛 - [ ] [实体 AI 落地狂飙：日本用机器人补人力缺口，网络安全却成最大隐忧](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141220&idx=1&sn=4fac5ac6aa765a75bf9e60d7ee2cc6e8) - [ ] [全球首例！美国州政府起诉 AI 聊天机器人非法冒充执业医师；CNNVD 发布 AI 漏洞通报：213 个漏洞集中爆发，超危 8 个高危 89 个| 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141220&idx=2&sn=440899fbec56c3e3d84cb7f8e2790e74) - 火绒安全 - [ ] [火绒安全终端防护数据月报（2026-04）](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532554&idx=1&sn=8a323f9ac3b458cfb1553c4f4e9f284d) - [ ] [火绒小问答--「个人版」近期top问题解答](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532554&idx=2&sn=2c36b8fc1a597489440a40e2d7cdaabd) - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532554&idx=3&sn=bef696979c4946d7ad61e5ea46a3e746) - 小米安全中心 - [ ] [2026白帽赏金挑战赛来袭｜MiSRC等你来战](https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247520766&idx=1&sn=92271a4ba532a217d567534920770763) - 数世咨询 - [ ] [人工智能如何改变威胁检测](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542789&idx=1&sn=753630d95146336166bf1ab9b282c348) - [ ] [企业全力投入AI安全 但预算未能跟上](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542789&idx=2&sn=4c819dbc339e760b91dd2e4b77283971) - 补天平台 - [ ] [5 月补天战神榜来啦，现金奖励 + 专属荣誉，速冲！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510699&idx=1&sn=94c2cf9ecabe62b6c4a337421024c5b6) - 阿里安全响应中心 - [ ] [重磅活动｜618安全保卫战开启](https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998841&idx=1&sn=60bb167c7db645326603134c30ca9ce1) - 极客公园 - [ ] [比 OpenClaw 更火的 「Agent 员工」赛道，杀出一个新王者｜AI 上新](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653105328&idx=1&sn=bbcf3482dd48cf5a2d757c2402b9456b) - [ ] [对话造物时代：刚拿下数亿融资，桌面 CNC 的拐点到了](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653105245&idx=1&sn=b972cbd7e041dc6233be892aa09bfcde) - [ ] [ChatGPT 默认模型升至 GPT-5.5 Instant；小米全尺寸 SUV 谍照曝光；诺兰新作《奥德赛》发预告 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653105236&idx=1&sn=80309a58ebd0e55f06bcb521d4034c22) - 美团安全应急响应中心 - [ ] [美团SRC助力 | 你敢信，他们都来了！HPW白帽世界大会2026全议程发布](https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247494896&idx=1&sn=5b3d4f7d62a8e7212d9dff1cc4910a45) - [ ] [江湖征召令｜美团SRC专测活动进行中](https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247494896&idx=2&sn=62b64d34eb01c165640ce5b18fc56cf3) - 京东安全应急响应中心 - [ ] [【活动】白帽赏金挑战赛JSRC活动进行中！](https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727850845&idx=1&sn=b6102dccc8f9355e879212d5b703a867) - 情报分析师 - [ ] [一颗“洗衣机大小”的卫星，暴露了英国在伊朗战争里的重要角色](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567718&idx=1&sn=4a9aeef76ffca7f3837e1bdb9205596d) - [ ] [美国情报圈正在换血！9个NIO岗位背后，是那个人在重排“美国怎么看世界”](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567718&idx=2&sn=5f7c29e35c1cbdcf56a42feb2f3dd238) - 吴鲁加 - [ ] [用龙虾等 Agent 访问知识星球](https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247486078&idx=1&sn=cb5170477c39569acdec51bf2d14e04d) - 慢雾科技 - [ ] [Grok 被利用背后：AI Agent 权限链滥用分析](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247504881&idx=1&sn=8c83bc9f82e684fdb75e04fade95913f) - 枇杷熟了 - [ ] [孙哥的中转站AI也"降智"？孙哥成孙割](https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247490051&idx=1&sn=b6ed42c02d2bb9a08676e66f2ffeaf05) - 表图 - [ ] [网安上市公司 2025 年报里的 AI 安全布局：安全大模型之后，开始卷智能体了](https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247484991&idx=1&sn=f1751a725f40ba4dfd61670dbe708b52) - 国家互联网应急中心CNCERT - [ ] [CNVD漏洞周报2026年第17期](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501551&idx=1&sn=18e7edf237362243bedb7a681a53cc15) - 安全行者老霍 - [ ] [谷歌Antigravity AI 智能体管理器曝出漏洞：可逃出沙箱，让攻击者实现远程代码执行](https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486593&idx=1&sn=2e77c910fc4084754cfa7361c288ae4d) - 迪哥讲事 - [ ] [利用302实现xss的一个思路](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499410&idx=1&sn=f8ee5f907fb162d3b81bdfa24a2291b7) - 软件安全与逆向分析 - [ ] [APatch最新版检测与过检测原理分析](https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485145&idx=1&sn=13462901ea5113f701abe7c6333a3cdf) - Qualys Security Blog - [ ] [Before the Breach, There Was a Test Environment](https://blog.qualys.com/category/qualys-insights) - IT Service Management News - [ ] [Generative Engine Optimization](http://blog.cesaregallotti.it/2026/05/generative-engine-optimization.html) - 字节跳动技术团队 - [ ] [《2025字节跳动企业社会责任报告》发布](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247519496&idx=1&sn=1a6f8a7d309951f0c0a7139625a1b1b5) - 安全419 - [ ] [仅34%网络安全专业人员愿留任 CISO面临留住人才压力](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247553233&idx=1&sn=31fcbab856313fc4652d6eb9ccf15266) - 看雪学苑 - [ ] [VMProtect 3.8.1 混淆策略大揭秘](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614579&idx=1&sn=e7e00532d3ef8803a5e4206d31b932ff) - [ ] [Palo Alto PAN-OS 高危漏洞已遭在野利用：可获root权限，官方下周发补丁](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614579&idx=2&sn=ad625ae6a74ef9508c95bad9c6cea4ef) - [ ] [效率提升10倍！高版本VMP逆向+插件开发全流程](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614579&idx=3&sn=942fc47999e8b03d9c29f202cfdb76d6) - SEI Blog - [ ] [The ELM Library: An LLM Evaluation Toolset](https://www.sei.cmu.edu/blog/the-elm-library-an-llm-evaluation-toolset/?utm_source=blog&utm_medium=rss&utm_campaign=my_site_updates) - Securityinfo.it - [ ] [Quasar Linux RAT: malware che punta alla supply chain software](https://www.securityinfo.it/2026/05/06/quasar-linux-rat-malware-che-punta-alla-supply-chain-software/?utm_source=rss&utm_medium=rss&utm_campaign=quasar-linux-rat-malware-che-punta-alla-supply-chain-software) - Forensic Focus - [ ] [Digital Forensics Round-Up, May 06 2026](https://www.forensicfocus.com/news/digital-forensics-round-up-may-06-2026/) - Have I Been Pwned latest breaches - [ ] [LegionProxy - 10,144 breached accounts](https://haveibeenpwned.com/Breach/LegionProxy) - ICT Security Magazine - [ ] [Cyber Resilience Act obblighi 2026: tutti gli adempimenti in vigore](https://www.ictsecuritymagazine.com/articoli/cyber-resilience-act-obblighi-2026/) - [ ] [Attacco rilevato in 30 minuti: come funziona davvero un servizio MDR per le aziende italiane](https://www.ictsecuritymagazine.com/notizie/mdr-aziende-italiane/) - SANS Internet Storm Center, InfoCON: green - [ ] [ISC Stormcast For Wednesday, May 6th, 2026 https://isc.sans.edu/podcastdetail/9920, (Wed, May 6th)](https://isc.sans.edu/diary/rss/32960) - Schneier on Security - [ ] [Rowhammer Attack Against NVIDIA Chips](https://www.schneier.com/blog/archives/2026/05/rowhammer-attack-against-nvidia-chips.html) - CNVD漏洞平台 - [ ] [CNVD漏洞周报2026年第17期](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496900&idx=1&sn=49bed22ebc39742e20c189f53538f961) - [ ] [上周关注度较高的产品安全漏洞(20260427-20260503)](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496900&idx=2&sn=1991f529308bac06911fe613c6256b3d) - 娜璋AI安全之家 - [ ] [[智能体攻防实战] 一.大模型赋能网络入侵检测实战探索（CodeBuddy和d.run实现）](https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247502909&idx=1&sn=efa7a5b44474921cb8788055d6f5a57a) - Troy Hunt's Blog - [ ] [Weekly Update 502](https://www.troyhunt.com/weekly-update-502/) - GRAHAM CLULEY - [ ] [Smashing Security podcast #466: Meta sees everything, Copy Fail, and a deepfake gets hired](https://grahamcluley.com/smashing-security-podcast-466/) - The Hacker News - [ ] [Mirai-Based xlabs_v1 Botnet Exploits ADB to Hijack IoT Devices for DDoS Attacks](https://thehackernews.com/2026/05/mirai-based-xlabsv1-botnet-exploits-adb.html) - [ ] [MuddyWater Uses Microsoft Teams to Steal Credentials in False Flag Ransomware Attack](https://thehackernews.com/2026/05/muddywater-uses-microsoft-teams-to.html) - [ ] [The Hacker News Launches 'Cybersecurity Stars Awards 2026' — Submissions Now Open](https://thehackernews.com/2026/05/the-hacker-news-launches-cybersecurity.html) - [ ] [Your AI Agents Are Already Inside the Perimeter. Do You Know What They're Doing?](https://thehackernews.com/2026/05/your-ai-agents-are-already-inside.html) - [ ] [Google's Android Apps Get Public Verification to Stop Supply Chain Attacks](https://thehackernews.com/2026/05/android-apps-get-public-verification.html) - [ ] [Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs](https://thehackernews.com/2026/05/windows-phone-link-exploited-by-cloudz.html) - [ ] [Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution](https://thehackernews.com/2026/05/palo-alto-pan-os-flaw-under-active.html) - Security Affairs - [ ] [Taiwan High-Speed Rail Emergency Braking Hack: How a Student Stopped the Trains and Exposed a Major Security Gap](https://securityaffairs.com/191785/hacking/taiwan-high-speed-rail-emergency-braking-hack-how-a-student-stopped-the-trains-and-exposed-a-major-security-gap.html) - [ ] [After 17 years, Gavril Sandu extradited to U.S. for hacking scheme](https://securityaffairs.com/191771/cyber-crime/after-17-years-gavril-sandu-extradited-to-u-s-for-hacking-scheme.html) - [ ] [Iranian cyber espionage disguised as a Chaos Ransomware attack](https://securityaffairs.com/191765/breaking-news/iranian-cyber-espionage-disguised-as-a-chaos-ransomware-attack.html) - [ ] [Apache fixes critical HTTP/2 double-free flaw CVE-2026-23918 enabling RCE](https://securityaffairs.com/191759/security/apache-fixes-critical-http-2-double-free-flaw-cve-2026-23918-enabling-rce.html) - [ ] [Palo Alto Networks PAN-OS flaw exploited for remote code execution](https://securityaffairs.com/191748/security/palo-alto-networks-pan-os-flaw-exploited-for-remote-code-execution.html) - [ ] [Malicious PyTorch Lightning update hits AI supply chain security](https://securityaffairs.com/191732/ai/malicious-pytorch-lightning-update-hits-ai-supply-chain-security.html) - www.theregister.com - Articles - [ ] [Arctic Wolf kicks 250 employees out of the pack to save money for AI](https://www.theregister.com/ai-and-ml/2026/05/06/arctic-wolf-cuts-250-jobs-in-ai-push/5231213) - [ ] [1 in 8 employees totally cool with selling work credentials](https://www.theregister.com/security/2026/05/06/1-in-8-workers-say-selling-company-logins-is-justifiable/5231104) - [ ] [Iran cybersnoops still LARPing as ransomware crooks in espionage ops](https://www.theregister.com/security/2026/05/06/iran-cyberspies-larping-as-ransomware-crims-in-espionage-ops/5230993) - [ ] [UK age-gating plans risk breaking the internet, privacy groups warn](https://www.theregister.com/security/2026/05/06/uk-age-gating-plans-risk-breaking-the-internet-privacy-groups-warn/5230732) - [ ] [India orders infosec red alert in case Mythos sparks crime spree](https://www.theregister.com/security/2026/05/06/india-orders-infosec-red-alert-in-case-mythos-sparks-crime/5224961) - TorrentFreak - [ ] [NVIDIA’s Shadow Library Scripts ‘Have No Other Purpose’ Than Infringement, Judge Rules](https://torrentfreak.com/nvidias-shadow-library-scripts-have-no-other-purpose-than-infringement-judge-rules/) - NetSPI - [ ] [CVE-2026-0300 Palo Alto Networks PAN-OS Buffer Overflow Overview & Takeaways](https://www.netspi.com/blog/executive-blog/critical-vulnerability/cve-2026-0300-palo-alto-networks-pan-os-buffer-overflow-overview-takeaways/) - Blackhat Library: Hacking techniques and research - [ ] [Logging is where data escapes systems](https://www.reddit.com/r/blackhat/comments/1t5n3ii/logging_is_where_data_escapes_systems/) - [ ] [Wattapad Lead data download link](https://www.reddit.com/r/blackhat/comments/1t4xoo8/wattapad_lead_data_download_link/) - Tor Project blog - [ ] [3 Days of Fun with Tor](https://blog.torproject.org/tor-community-gathering-2026/) - Trend Micro Research, News and Perspectives - [ ] [Supporting the National Cyber Strategy: How TrendAI™ Helps](https://www.trendmicro.com/en_us/research/26/e/national-cyber-strategy.html) - Social Engineering - [ ] [Title: Can social skills actually be trained like a skill?](https://www.reddit.com/r/SocialEngineering/comments/1t5l0uu/title_can_social_skills_actually_be_trained_like/) - [ ] [The Perceptive and the Blind](https://www.reddit.com/r/SocialEngineering/comments/1t5rza5/the_perceptive_and_the_blind/) - [ ] [Life Is A Video Game (Here's How You Win)](https://www.reddit.com/r/SocialEngineering/comments/1t5phy9/life_is_a_video_game_heres_how_you_win/) - Your Open Hacker Community - [ ] [How do I crack the splashin app](https://www.reddit.com/r/HowToHack/comments/1t5nisy/how_do_i_crack_the_splashin_app/) - Computer Forensics - [ ] [MalChela v4.1: Mac Malware Analysis Arrives](https://www.reddit.com/r/computerforensics/comments/1t5h7mf/malchela_v41_mac_malware_analysis_arrives/) - [ ] [Find the most obscure forensic talks given on BSides talks](https://www.reddit.com/r/computerforensics/comments/1t57vbd/find_the_most_obscure_forensic_talks_given_on/) - [ ] [Remote access to a Mac running MacOS 10.0 Cheetah](https://www.reddit.com/r/computerforensics/comments/1t5qezw/remote_access_to_a_mac_running_macos_100_cheetah/) - Deeplinks - [ ] [Milestone 1.0.0 Release of APK Downloader `apkeep` Powers Research on Android Apps](https://www.eff.org/deeplinks/2026/05/milestone-100-release-apk-downloader-apkeep-powers-research-android-apps) - [ ] [👎 California's Terrible, No Good, Very Bad Social Media Ban | EFFector 38.9](https://www.eff.org/deeplinks/2026/05/californias-terrible-no-good-very-bad-social-media-ban-effector-389) - [ ] [The SECURE Data Act is Not a Serious Piece of Privacy Legislation](https://www.eff.org/deeplinks/2026/05/secure-data-act-not-serious-piece-privacy-legislation) - Deep Web - [ ] [query‼️](https://www.reddit.com/r/deepweb/comments/1t5ocat/query/) - Information Security - [ ] [Palo Alto zero-day, no patch until May 13](https://www.reddit.com/r/Information_Security/comments/1t5adbw/palo_alto_zeroday_no_patch_until_may_13/) - [ ] [Shadow AI: when employees move faster than security](https://www.reddit.com/r/Information_Security/comments/1t5i339/shadow_ai_when_employees_move_faster_than_security/) - [ ] [Can I learn cyber security online or do I need offline training?](https://www.reddit.com/r/Information_Security/comments/1t59w2c/can_i_learn_cyber_security_online_or_do_i_need/) - netsecstudents: Subreddit for students studying Network Security and its related subjects - [ ] [I am John Strand and I am teach Pay What You Can classes and free labs... Ask Me Anything.](https://www.reddit.com/r/netsecstudents/comments/1t5dyq3/i_am_john_strand_and_i_am_teach_pay_what_you_can/) - [ ] [Are VPN apps starting to show limitations for multi-device users?](https://www.reddit.com/r/netsecstudents/comments/1t5ninb/are_vpn_apps_starting_to_show_limitations_for/) - [ ] [Best way to study THM + HTB efficiently as a beginner?](https://www.reddit.com/r/netsecstudents/comments/1t52v7s/best_way_to_study_thm_htb_efficiently_as_a/) - [ ] [How do you use this.](https://www.reddit.com/r/netsecstudents/comments/1t51v44/how_do_you_use_this/) - Technical Information Security Content & Discussion - [ ] [Quacc++: Automated Open Source Vulnerability Discovery](https://www.reddit.com/r/netsec/comments/1t5s8m8/quacc_automated_open_source_vulnerability/) - [ ] [Non-Determinism of Maps in Golang: Why, How, and the Consequences](https://www.reddit.com/r/netsec/comments/1t5egtn/nondeterminism_of_maps_in_golang_why_how_and_the/) - [ ] [pyghidra-mcp Meets Ghidra GUI: Drive Project-Wide RE with Local AI](https://www.reddit.com/r/netsec/comments/1t5d3tm/pyghidramcp_meets_ghidra_gui_drive_projectwide_re/) - [ ] [Binance fixed the IP whitelist gap — but the disclosure process is still broken](https://www.reddit.com/r/netsec/comments/1t5ip97/binance_fixed_the_ip_whitelist_gap_but_the/) - [ ] [Vulnerability Garden](https://www.reddit.com/r/netsec/comments/1t5cdjc/vulnerability_garden/) - Security Weekly Podcast Network (Audio) - [ ] [Teach to Sell and Two Interviews from RSAC 2026 from Dropzone AI and Microsoft - Dan Rochon, Arunesh Chandra, Edward Wu - BSW #446](http://sites.libsyn.com/18678/teach-to-sell-and-two-interviews-from-rsac-2026-from-dropzone-ai-and-microsoft-dan-rochon-arunesh-chandra-edward-wu-bsw-446) - 网安寻路人 - [ ] [从爆红到被穿透审查：Manus 给 AI Agent公司的法律课（DPO社群成员观点）](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247508410&idx=1&sn=fd57a4392938302ea73d39c5657f1a92)
每日安全资讯（2026-05-07）
apkeepPowers Research on Android Apps