[每日信息流] 2026-03-18

# 每日安全资讯（2026-03-18）

- SecWiki News
  - [ ] [SecWiki News 2026-03-17 Review](http://www.sec-wiki.com/?2026-03-17)
- Private Feed for M09Ic
  - [ ] [kpcyrd contributed to Eugeny/russh](https://github.com/Eugeny/russh/pull/655)
  - [ ] [anthropics released v2.1.78 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.78)
  - [ ] [zeroclaw-labs released v0.5.0-beta.346 at zeroclaw-labs/zeroclaw](https://github.com/zeroclaw-labs/zeroclaw/releases/tag/v0.5.0-beta.346)
  - [ ] [mgeeky starred hamzamix/StarWise](https://github.com/hamzamix/StarWise)
  - [ ] [x90skysn3k released v2.6.0 at x90skysn3k/brutespray](https://github.com/x90skysn3k/brutespray/releases/tag/v2.6.0)
  - [ ] [zeroclaw-labs released v0.5.0-beta.341 at zeroclaw-labs/zeroclaw](https://github.com/zeroclaw-labs/zeroclaw/releases/tag/v0.5.0-beta.341)
  - [ ] [bolucat released 202603172011 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202603172011)
  - [ ] [safedv starred 0xROOTPLS/Fritter](https://github.com/0xROOTPLS/Fritter)
  - [ ] [0xbug starred garrytan/gstack](https://github.com/garrytan/gstack)
  - [ ] [github released v0.3.1 at github/spec-kit](https://github.com/github/spec-kit/releases/tag/v0.3.1)
  - [ ] [gh0stkey starred ttttmr/pi-context](https://github.com/ttttmr/pi-context)
  - [ ] [gh0stkey forked HACK-THE-WORLD/bub-contrib from bubbuild/bub-contrib](https://github.com/HACK-THE-WORLD/bub-contrib)
  - [ ] [huoji120 starred jingyaogong/minimind](https://github.com/jingyaogong/minimind)
  - [ ] [mgeeky starred cjpais/Handy](https://github.com/cjpais/Handy)
  - [ ] [zeroclaw-labs released v0.4.3-beta.323 at zeroclaw-labs/zeroclaw](https://github.com/zeroclaw-labs/zeroclaw/releases/tag/v0.4.3-beta.323)
  - [ ] [gh0stkey starred ljagiello/ctf-skills](https://github.com/ljagiello/ctf-skills)
  - [ ] [safedv starred epinna/weevely3](https://github.com/epinna/weevely3)
  - [ ] [Ridter starred RedByte1337/GraphSpy](https://github.com/RedByte1337/GraphSpy)
  - [ ] [PrefectHQ released 3.6.23.dev2 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.6.23.dev2)
  - [ ] [zema1 starred nikaiw/VMkatz](https://github.com/nikaiw/VMkatz)
  - [ ] [LoRexxar starred dongshuyan/Awesome-Prompts](https://github.com/dongshuyan/Awesome-Prompts)
  - [ ] [gh0stkey starred bardsoftware/ganttproject](https://github.com/bardsoftware/ganttproject)
- Doonsec's feed
  - [ ] [畅捷通TPlus FormReportOperateAction.aspx接口存在任意文件读取漏洞 附POC](https://mp.weixin.qq.com/s/N2sbmdfsY7_srqS187XXVA)
  - [ ] [专注于java代码审计skills](https://mp.weixin.qq.com/s/HE7bQMDtny2KA07N6FkE7g)
  - [ ] [HIDS AWD Platform](https://mp.weixin.qq.com/s/JN54w2LSuBxmY8fNeIbubQ)
  - [ ] [你的 AI 连目标都没有，怎么给你干活？](https://mp.weixin.qq.com/s/Q6EGJzLyMXPu1LvV4zOhWw)
  - [ ] [开始执行编码任务，按照tasks.md文档逐步实现代码！](https://mp.weixin.qq.com/s/T2GmBpjV98c-B2jEk31wcA)
  - [ ] [CVE-2026-1312: Django order_by结合FilteredRelation使用导致的SQL注入漏洞](https://mp.weixin.qq.com/s/2XeK9bJ9cGCNTJ2N_x_I0g)
  - [ ] [黄仁勋GTC大会梳理](https://mp.weixin.qq.com/s/9D2HsoG3FUKtgTia5u1TaA)
  - [ ] [同事月薪1.3w，自从被降薪后天天摸鱼，今天被叫去开会，以为要被裁，结果老板说：公司缺个技术总监，你去试试？月薪给你翻三倍](https://mp.weixin.qq.com/s/XkCVzrQbOIYUy6_7P7rZ5g)
  - [ ] [中学时代的记忆](https://mp.weixin.qq.com/s/aboEDzKsEydmNtp3Lz0SgA)
  - [ ] [深度解析：Spring MVC代码审计实战](https://mp.weixin.qq.com/s/eguNMDeMClkV9t7MMoi-Fw)
  - [ ] [巴士儿童学习App 展示“三女共侍一夫”低俗内容，被罚 30 万，没收 3.68 元](https://mp.weixin.qq.com/s/laxui5DO0Ox7b0pohV8igA)
  - [ ] [开源情报|国际动态|《意大利国家安全情报体系2026年度报告解读：欧洲情报体系对技术主权与中国科技崛起的战略警惕》](https://mp.weixin.qq.com/s/lzcW6uTbuIXZYi4iLk0HMw)
  - [ ] [大模型时代的红蓝对抗：Prompt 注入诱导与 RAG 架构的数据投毒实战](https://mp.weixin.qq.com/s/hm17mPMfc90i-6m7iKJOUA)
  - [ ] [紧急预警：你的代码可能已被「感染」！](https://mp.weixin.qq.com/s/ElSg0ClpCdThwuGzz-eIrg)
  - [ ] [【高危漏洞预警】Libucl UCL输入处理漏洞 (CVE-2026-0708)](https://mp.weixin.qq.com/s/HUbkCUNstiF1yUHIe68hrw)
  - [ ] [近期你还有这些CTF比赛可以参加](https://mp.weixin.qq.com/s/eVMcdwYto2gwLJP_oljzWQ)
  - [ ] [[杂谈]打工人的「回血」秘境！城市里藏了座「江南版小苏州」](https://mp.weixin.qq.com/s/2tYvX9m2CRf-zSODLWQt0g)
  - [ ] [龙虾再添对手，阿里“悟空”今日上线，使用钉钉在线对话](https://mp.weixin.qq.com/s/Bv1OXPurSK7Exk5MEWF65A)
  - [ ] [从十五五规划纲要看网安人的发展机会](https://mp.weixin.qq.com/s/t5HRt3n1aJ_lOAfgPWl5Pw)
  - [ ] [人工智能正从根本上压缩网络攻击的时间线:攻防不对等的情况正在加剧](https://mp.weixin.qq.com/s/unjxteSoYLRTRwbZkttA2A)
  - [ ] [古巴国家电网发生全面崩溃](https://mp.weixin.qq.com/s/QiwjyWFy0AQ49l1Q13YjXg)
  - [ ] [ADPulse：开源的内网渗透和内网安全审计工具](https://mp.weixin.qq.com/s/rF2w1rR1L-ZLhFsD5jFEaw)
  - [ ] [真实的AI](https://mp.weixin.qq.com/s/ZZwEYTJfANuMTZAhSQcM2Q)
  - [ ] [【AI安全】零基础AI攻防，技精自可不求人](https://mp.weixin.qq.com/s/dehPX-NdG3PxLSyw3rXSeg)
  - [ ] [安全预警｜校园小程序高危 SQL 注入漏洞曝光，师生信息安全需警惕！](https://mp.weixin.qq.com/s/lVWQQUIj7U4AB4c7ZXfAIg)
  - [ ] [AI自动化渗透测试平台设计研究](https://mp.weixin.qq.com/s/L57v_hJg86V--E6YrG9EQA)
  - [ ] [大模型安全深度学习指南：数据投毒与后门攻击专题(1)](https://mp.weixin.qq.com/s/VbriYtKFu65Gz4u82bHiaw)
  - [ ] [揽获赛可达三项大奖！](https://mp.weixin.qq.com/s/wV3IPImJncZN67YSQa6bmA)
  - [ ] [C13-S04 启明星辰：OpenClaw类智能应用安全思维总览和措施导引0317版](https://mp.weixin.qq.com/s/nOK67YdqZgk8OA6UaZ1mSg)
  - [ ] [论文研读与思考|用于入侵检测的多通道深度特征学习](https://mp.weixin.qq.com/s/h_OwpMoxi9aivp7eoQr_kQ)
  - [ ] [回复更新啦](https://mp.weixin.qq.com/s/ka-R425z7r8QoG4qmloXTQ)
  - [ ] [安装pwno-mcp，让AI自动解PWN题](https://mp.weixin.qq.com/s/-UHmS-38FcVuaWS3Xoe5rw)
  - [ ] [基于多维度主动防御的银狐木马综合防控体系](https://mp.weixin.qq.com/s/xxYMeGLX0YiyNah7y9IThA)
  - [ ] [[吃瓜速递]突发暴击！无数玩家账号被秒封，某头部手机厂商渠道服翻车](https://mp.weixin.qq.com/s/AxG_z232KrT5PbCOyiwQKg)
  - [ ] [中央网信办召开2026年机关党的工作暨纪检工作会议](https://mp.weixin.qq.com/s/z4dkL2ePt_csfff8M2HoHw)
  - [ ] [OPPO 猎杀“折叠线”](https://mp.weixin.qq.com/s/EJyj9JPoH81cxlaueBV5VQ)
  - [ ] [0xShe网络安全导航携手大麦云达成合作](https://mp.weixin.qq.com/s/GhwCNv5sgP7dt7NvdvqNeg)
  - [ ] [一文了解｜火山引擎 OpenClaw 安全最佳实践](https://mp.weixin.qq.com/s/dwPa_QoIK0EkYDNsbjB1iQ)
  - [ ] [美国外交关系委员会：2026年，AI发展迎来决定性拐点](https://mp.weixin.qq.com/s/zQm685y6vNfbKpsKw5MLcQ)
  - [ ] [Al Agent在工业中的应用](https://mp.weixin.qq.com/s/El6R209l9ik8QY8suodDKw)
  - [ ] [API安全漏洞挖掘指南：40种真实世界漏洞模型](https://mp.weixin.qq.com/s/DDb5XYatRTEik_7D-lTIoA)
  - [ ] [工资太低？试试这个平台，收入200，只要回复信息就有收入](https://mp.weixin.qq.com/s/T0q5cWNINQOzu1deRW9nwA)
  - [ ] [0137.我找到了一份价值 2 万美元的身份证件——事情经过是这样的](https://mp.weixin.qq.com/s/dAnFLjv6TR1fojoSHxbZ0Q)
  - [ ] [360安全龙虾不安全了](https://mp.weixin.qq.com/s/4tCXvwIeaC4TOz6BjPSy6A)
  - [ ] [文末预约锁定3月20日！天融信邀您共赴「中关村科学城软件和信息服务产业协同发展大会」](https://mp.weixin.qq.com/s/jm5QugYZ7v_cj6FYBkYIWw)
  - [ ] [NVIDIA GTC 大会重磅推出 NemoClaw，一键安全养龙虾！](https://mp.weixin.qq.com/s/xhvIv7YFH--wTMQVOPZdcQ)
  - [ ] [尽力“一致性”，很重要](https://mp.weixin.qq.com/s/k92nIDbiJCRpecVb4PKfEw)
  - [ ] [截图工具在微信和 QQ 就有，为什么还有人愿意花钱买？](https://mp.weixin.qq.com/s/VpxObZ2_FdUpC9EdkzeRPw)
  - [ ] [OpenClaw 平台 20 个爆款安全 Skills 盘点](https://mp.weixin.qq.com/s/3Mk8NsTYguSxbjRzD-Bobw)
  - [ ] [上市周年庆免费好礼送不停，这波羊毛怎能不薅？](https://mp.weixin.qq.com/s/Zp58LddzmlY7-OSHZFUUHg)
  - [ ] [科技赋能鉴定｜AI解锁电子数据鉴定新路径](https://mp.weixin.qq.com/s/EbbZYJSkweA_swoO9zm1aQ)
  - [ ] [Stryker攻击清除了数万台设备，无需恶意软件](https://mp.weixin.qq.com/s/h1shZowlnsaSg_iS7TkCPA)
  - [ ] [有效载荷勒索软件利用 Babuk 式加密攻击 Windows 和 ESXi 系统](https://mp.weixin.qq.com/s/iNvTtJhITvBHMEwRfR6k_g)
  - [ ] [恒丰银行升级问数AI能力，拟打造24小时在线的数据专家](https://mp.weixin.qq.com/s/auU3UyLJsFxBL9FKpYeF3Q)
  - [ ] [AI快讯：阿里给员工发Token，发布全球首个企业级Agent平台“悟空”](https://mp.weixin.qq.com/s/YURSTBKmjSNRtf0-FUtlYg)
  - [ ] [中国银行江苏省分行智能外呼采购项目竞争性磋商](https://mp.weixin.qq.com/s/s4ehCFoR24f2BhxxTwA5fw)
  - [ ] [深夜仍人气爆棚！OpenClaw “装虾”行动圆满收官，AI 安全科普圈粉无数](https://mp.weixin.qq.com/s/t-yWZqLX8dsPqlg9yrzMCA)
  - [ ] [【安全圈】360 回应“安全龙虾”私钥泄露事件：涉事证书已吊销，普通用户不受影响](https://mp.weixin.qq.com/s/VghXRU9zzNRTCoQ_eKXrDQ)
  - [ ] [【安全圈】美伊冲突 | 美国军事后勤机密文件](https://mp.weixin.qq.com/s/rhi-o8C0gbUd4KlfipH8zQ)
  - [ ] [【安全圈】加拿大零售商 Loblaw 数据泄露影响客户信息](https://mp.weixin.qq.com/s/kwTLRlMLAj8Q2YRzd7grqQ)
  - [ ] [360安全龙虾「养虾速成课」正式上线ISC.AI学苑！](https://mp.weixin.qq.com/s/gE8tcnRBOTwc5Fr4O5-4uA)
  - [ ] [CTF 选手已死：从“逐行逆向”到 `/solve-challenge`，黑客竞技进入“暴力美学”时代](https://mp.weixin.qq.com/s/yusJHn5mMzHohCYf9LUT1Q)
  - [ ] [中国黄金报丨全国政协委员肖新光：数智赋能矿业中，网络安全需要“关口前移”](https://mp.weixin.qq.com/s/JbM1tPlfiYbbvesxUxXjHg)
  - [ ] [黑龙江日报丨全国政协委员肖新光：以技术创新护航网络安全](https://mp.weixin.qq.com/s/d7uByH-khvfThAt3z17CyA)
  - [ ] [明日直播丨冰城老铁养龙虾，解锁安全新技能](https://mp.weixin.qq.com/s/CKlItnQdcf0b-b1eLTx3Uw)
  - [ ] [威胁通缉令 · 方块3丨Sinobi（新增）](https://mp.weixin.qq.com/s/Kfxoyugm-LNJhgr2hXHhKw)
  - [ ] [霍尔木兹海峡成“活战场”：商业遥感卫星与AI如何重塑现代情报战？](https://mp.weixin.qq.com/s/BOXjNVL-UDGVg0t6gvIhhw)
  - [ ] [大选年，巴西能否在美国阴影下破局](https://mp.weixin.qq.com/s/DvBgjUH4dIqMjD60fmIMmA)
  - [ ] [韩国国会通过《对美投资特别法》，将成立“韩美战略投资公社”落实对美3500亿美元投资项目](https://mp.weixin.qq.com/s/xhpvLAKvsmEgVx9HamK69Q)
  - [ ] [从斩杀哈梅内伊，看懂\"以目标为中心\"的情报作战逻辑](https://mp.weixin.qq.com/s/4NlWa6-vAcu2FDC5qdbJbA)
  - [ ] [2026年3月17日成品分析报告分享](https://mp.weixin.qq.com/s/ZxJpAGAUzpZ1MvMTpXs6bw)
  - [ ] [Codex 子代理（Subagents）正式上线](https://mp.weixin.qq.com/s/NAd_w_k8yf4MNZXB2VlH0g)
  - [ ] [直播实录 | 火山引擎AI安全实践：大模型安全架构，智能体风险应对，OpenClaw安全思考](https://mp.weixin.qq.com/s/lAKb8PvpkLh8HE13kQAdQA)
  - [ ] [长亭「捕虾」工具开源首发！企业级 OpenClaw 风险监控实战指南](https://mp.weixin.qq.com/s/sdLxKFGBvEGpzBrHfOtL9Q)
  - [ ] [免费赠送 | 防范网络电信诈骗宣传素材（第十九期）](https://mp.weixin.qq.com/s/RYt7plGqkRb1QkGuwlX49Q)
  - [ ] [360龙虾卫士打造Skill立体防护，多维抵御AI技能投毒“刺客”](https://mp.weixin.qq.com/s/xCrPAq5Cajq9lV9eXJgGeA)
  - [ ] [一天40个 Commits，HiClaw 发布 v1.0.6：凭证零暴露，Skills + MCP > 2](https://mp.weixin.qq.com/s/5kUJrIrfvDLdrMHW-0LVaw)
  - [ ] [国安部发布龙虾安全养殖手册，奇安信为政企打造专属OpenClaw安全方案](https://mp.weixin.qq.com/s/Gxh6x5GGIwZ_1gF7yS7nEQ)
  - [ ] [周道许专访奇安信集团董事长齐向东：安全驱动AI](https://mp.weixin.qq.com/s/26qu06fhYENRTaJL566fUA)
  - [ ] [打假不止3·15，安全上网365：让每一天都是“消费者权益日”](https://mp.weixin.qq.com/s/SMRo0OJ9JKcj9qjYFD6Dxw)
  - [ ] [专题·原创 | 从《中华人民共和国网络安全法》修改看我国网络安全法治的发展路径](https://mp.weixin.qq.com/s/xRnZvQCO-92gVqhn8oKgig)
  - [ ] [专家解读 | 建立健全数据产权制度 筑牢数字经济发展基石](https://mp.weixin.qq.com/s/olvw-TfV1EkqiGOm7Yx2Zw)
  - [ ] [观点 | 完善数字贸易网络安全治理新范式](https://mp.weixin.qq.com/s/qj6O3uWAbB2Cm0WoxSdDNw)
  - [ ] [双料认可！青藤两款产品斩获 SKD AWARDS 赛可达优秀产品奖](https://mp.weixin.qq.com/s/E97rwxAhHzUGVXhNi5NffQ)
  - [ ] [新课首发！VMProtect分析与调试器插件开发](https://mp.weixin.qq.com/s/Bj47Km6tBpnPQyYghUZWxw)
  - [ ] [某安全so库深度解析](https://mp.weixin.qq.com/s/XLn3KduJ-1WcgJt2prboOw)
  - [ ] [新型SaaS钓鱼攻击曝光：LiveChat这样的正规客服软件，如何成了帮凶？](https://mp.weixin.qq.com/s/X9ATFuSF6cObBf2Vx_pCyA)
  - [ ] [【漏洞通告】OpenClaw WebSocket共享令牌权限提升漏洞](https://mp.weixin.qq.com/s/3Z7LIkvVeEUlZB-Ykg9VjQ)
  - [ ] [10Base-T1S轻松入门](https://mp.weixin.qq.com/s/nc9MSGN-23qqA4NZxc2_LA)
  - [ ] [AutoSec伯乐帮 | 吉利汽车招聘专场-网络安全研究人才招募令](https://mp.weixin.qq.com/s/Z1MM6N4-lMdw57_l24BWmw)
  - [ ] [新增奔驰、奇瑞、保时捷、东风日产、尚界、火山引擎、博格华纳、中航光电……AES 2026 第二波参会阵容公布！](https://mp.weixin.qq.com/s/7knGcyVKV1ISK6M5R-gPyw)
  - [ ] [企业级Vibe Coding安全中枢，斗象AISCC「安全中转网关」已就位！](https://mp.weixin.qq.com/s/DZVQQzliDnZ0gigKjAPxuw)
  - [ ] [亚洲银行家峰会｜观安信息：从威胁识别到内生防护，筑牢金融AI安全底座](https://mp.weixin.qq.com/s/fTe8qt0cwsnotP5iQHQEpg)
  - [ ] [渗透测试高手，解锁网安新技能](https://mp.weixin.qq.com/s/_YybSgFgMC3LmLLhXJ1_Sw)
  - [ ] [【免费领】Android App渗透实战方法大全](https://mp.weixin.qq.com/s/Dc4xAQS18Va7MlhT-2mjpQ)
  - [ ] [DriverExplorer：一个面向 Windows 驱动分析与管理的实用工具](https://mp.weixin.qq.com/s/aeqFZmUUHrL0u3lT3zC9vg)
- Tenable Blog
  - [ ] [FAQ on CVE-2026-21514: OLE bypass N-Day in Microsoft Word](https://www.tenable.com/blog/faq-on-cve-2026-21514-ole-bypass-n-day-in-microsoft-word)
  - [ ] [Operation Epic Fury: Why exposure data changes everything about Iran's cyber-kinetic campaign](https://www.tenable.com/blog/operation-epic-fury-why-exposure-data-changes-everything-about-irans-cyber-kinetic-campaign)
  - [ ] [How to prepare for NERC CIP compliance deadlines in 2026 and beyond](https://www.tenable.com/blog/prepare-nerc-cip-003-9-compliance-deadlines-2026)
- Recent Commits to cve:main
  - [ ] [Update Tue Mar 17 11:18:00 UTC 2026](https://github.com/trickest/cve/commit/312cb8a44e32f271d0070c48635f3b0fe4c12914)
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  - [ ] [企业邮箱防钓鱼攻击：邮件安全网关的3大核心技术](https://www.4hou.com/posts/LGXv)
  - [ ] [新窃密技术预警：现代光学鼠标窃密](https://www.4hou.com/posts/Aryj)
  - [ ] [杰克·伦敦的另一面 | 匪夷所思](https://www.4hou.com/posts/zA02)
  - [ ] [再获认可！梆梆安全蝉联中金联盟 “2025年度优秀会员单位” ，以反诈创新赋能行业实践](https://www.4hou.com/posts/EyNl)
  - [ ] [嘶吼安全动态｜国家安全部预警无线键鼠存在非加密传输窃密风险 武汉新设全国唯一网络空间安全学院](https://www.4hou.com/posts/KGW8)
- paper - Last paper
  - [ ] [CUDA Agent：面向高性能 CUDA 内核生成的大规模智能体强化学习](https://paper.seebug.org/3473/)
- obaby 𝐢‍𝐧⃝ void
  - [ ] [不确定性](https://zhongxiaojie.cn/2026/03/602/)
- CXSECURITY Database RSS Feed - CXSecurity.com
  - [ ] [LB-LINK BL-WR9000 V2.4.9 - Stack-based Buffer Overflow in /goform/get_hidessid_cfg](https://cxsecurity.com/issue/WLB-2026030025)
  - [ ] [LB-LINK BL-WR9000 V2.4.9 - Unauthenticated / Post-Auth Stack-based Buffer Overflow](https://cxsecurity.com/issue/WLB-2026030024)
- ElcomSoft blog
  - [ ] [Looks Can Lie: Is That Really an NVMe Drive?](https://blog.elcomsoft.com/2026/03/looks-can-lie-is-that-really-an-nvme-drive/)
- Didier Stevens
  - [ ] [Update: oledump.py Version 0.0.85](https://blog.didierstevens.com/2026/03/17/update-oledump-py-version-0-0-85/)
- Horizon3.ai
  - [ ] [When Conflict Extends Into Cyberspace: What Security Leaders Should Expect](https://horizon3.ai/intelligence/blogs/iranian-cyber-campaigns-security-leaders/)
- 绿盟科技技术博客
  - [ ] [GEO乱象刷屏3·15！AI被“投毒”，你的信息决策正被悄悄操纵？](https://blog.nsfocus.net/geo%e4%b9%b1%e8%b1%a1%e5%88%b7%e5%b1%8f3%c2%b715%ef%bc%81ai%e8%a2%ab%e6%8a%95%e6%af%92%ef%bc%8c%e4%bd%a0%e7%9a%84%e4%bf%a1%e6%81%af%e5%86%b3%e7%ad%96%e6%ad%a3%e8%a2%ab%e6%82%84/)
- Malwarebytes
  - [ ] [Fake Pudgy World site steals your crypto passwords](https://www.malwarebytes.com/blog/scams/2026/03/fake-pudgy-world-site-steals-your-crypto-passwords)
  - [ ] [90% of people don’t trust AI with their data](https://www.malwarebytes.com/blog/privacy/2026/03/90-of-people-dont-trust-ai-with-their-data)
  - [ ] [How searching for a VPN could mean handing over your work login details](https://www.malwarebytes.com/blog/news/2026/03/how-searching-for-a-vpn-could-mean-handing-over-your-work-login-details)
  - [ ] [Google cracks down on Android apps abusing accessibility](https://www.malwarebytes.com/blog/mobile/2026/03/google-cracks-down-on-android-apps-abusing-accessibility)
- 奇客Solidot–传递最新科技情报
  - [ ] [社会出身与儿童的努力程度密切相关](https://www.solidot.org/story?sid=83794)
  - [ ] [小行星龙宫含有所有五种核碱基](https://www.solidot.org/story?sid=83793)
  - [ ] [英伟达的 DLSS 5 引发争议和批评](https://www.solidot.org/story?sid=83792)
  - [ ] [太阳可能在几十亿年前从银河中心迁移到外围](https://www.solidot.org/story?sid=83791)
  - [ ] [微软允许 Windows 11 用户在安装过程中重命名主文件夹名称](https://www.solidot.org/story?sid=83790)
  - [ ] [德国法庭裁决 TCL 的 QLED 不是真的 QLED](https://www.solidot.org/story?sid=83789)
  - [ ] [Marknote 1.5 释出](https://www.solidot.org/story?sid=83788)
  - [ ] [kagi 翻译支持翻译到 LinkedIn Speak](https://www.solidot.org/story?sid=83787)
  - [ ] [2026 年 Debian 项目领导人竞选开始，只有一名候选人](https://www.solidot.org/story?sid=83786)
  - [ ] [GIMP 3.2 释出](https://www.solidot.org/story?sid=83785)
- HackerNews
  - [ ] [甲骨文 EBS 遭黑客攻击：仅 4 家企业巨头仍对潜在影响保持沉默](https://hackernews.cc/archives/63864)
  - [ ] [CISA 警示 Wing FTP 服务器漏洞在攻击中被积极利用](https://hackernews.cc/archives/63866)
  - [ ] [安全公司高管遭复杂网络钓鱼攻击](https://hackernews.cc/archives/63865)
  - [ ] [网络攻击致俄罗斯城市停车支付系统瘫痪](https://hackernews.cc/archives/63862)
- 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台
  - [ ] [特斯拉与LG能源斥资43亿美元共建电池厂](https://blog.upx8.com/%E7%89%B9%E6%96%AF%E6%8B%89%E4%B8%8ELG%E8%83%BD%E6%BA%90%E6%96%A5%E8%B5%8443%E4%BA%BF%E7%BE%8E%E5%85%83%E5%85%B1%E5%BB%BA%E7%94%B5%E6%B1%A0%E5%8E%82)
- 安全分析与研究
  - [ ] [EDR技术原理——现代终端安全的基石](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247496555&idx=1&sn=69f2341ce6294b11052fd2c150bb3d90)
- Shostack & Friends Blog
  - [ ] [Threat Modeling AI Systems: Finding the Line Between Application Security and AI Security](https://shostack.org/blog/threat-modeling-ai-systems-course-announce/)
- 黑鸟
  - [ ] [人工智能正从根本上压缩网络攻击的时间线:攻防不对等的情况正在加剧](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451185810&idx=1&sn=5a9e88e050257f4de80a76c8a67c3a86)
  - [ ] [古巴国家电网发生全面崩溃](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451185810&idx=2&sn=4b47abfb7279ed2e7a444ffdd212a67a)
- 雷神众测
  - [ ] [雷神众测漏洞周报2026.3.9-2026.3.15](https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503728&idx=1&sn=f96a470e1923b29265ac1e8098ca6cc7)
- 威努特安全网络
  - [ ] [中国“龙虾”热潮：AI应用爆发背后的安全破局之路](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651140943&idx=1&sn=d12cf6cd429e9928f2e1d64b72173eb2)
- 安全内参
  - [ ] [AI失控时刻：智能体协同入侵公司内部系统，窃取机密数据](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515686&idx=1&sn=d090cb4b27db75aa0f588e2e3b84c341)
  - [ ] [美国陆军网络战资深将领执掌网络国家任务部队帅印](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515686&idx=2&sn=cf65e804fec198a126ba6501b3d1f9ad)
- 代码卫士
  - [ ] [2026 Pwn2Own 柏林大赛公布目标和奖金](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525482&idx=1&sn=833600e95373fcadc4e18a68f31565fb)
  - [ ] [CISA：Wing FTP 已遭利用漏洞可泄露服务器路径](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525482&idx=2&sn=92844a4f59d7d7b8344f344ed41a3600)
- 看雪学苑
  - [ ] [新课首发！VMProtect分析与调试器插件开发](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612118&idx=1&sn=5897293d6c1e2be53f49989ec20d897c)
  - [ ] [某安全so库深度解析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612118&idx=2&sn=47fe8a55e77b2ca8f2f8d73c9a9d99d0)
  - [ ] [新型SaaS钓鱼攻击曝光：LiveChat这样的正规客服软件，如何成了帮凶？](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612118&idx=3&sn=1f15ecc9baacd7a5edf2354eb4fb4cb0)
- 奇安信 CERT
  - [ ] [今日（2026年3月17日）OpenClaw 最新安全动态总结](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504779&idx=1&sn=7423de694799c30dc3ce20b706d410a4)
- 先进攻防
  - [ ] [现代智能体安全运行时基础设施设计参考](https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908851&idx=1&sn=67c5158833ed0710e82211a3ef60d31a)
- 全频带阻塞干扰
  - [ ] [意大利最高国防委员会会议，使用录音屏蔽器](https://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648959159&idx=1&sn=c708b63f3eb78eb5638251ccaceb9cc7)
- 信安之路
  - [ ] [挖 SRC 违法吗？](https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500424&idx=1&sn=f5c8ed90bd900b869d1e78297c1e4256)
- 信息安全国家工程研究中心
  - [ ] [生成式人工智能赋能网络安全技术应用发展趋势](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247503136&idx=1&sn=83c214dadf343b24a4a595d431d1e862)
- 天黑说嘿话
  - [ ] [ClaudeCode vs OpenClaw：两个Agent的殊途同归](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486026&idx=1&sn=7b9df3753e2d1505e470758e4fe9a653)
- 安全牛
  - [ ] [以色列安全App“红警”秒变“红危”：战争焦虑正成为黑客的攻击武器](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140742&idx=1&sn=cc40a01991c202d70f504d43378b0423)
  - [ ] [国家安全部：别让无线设备“出卖”你；中央网信办召开会议传达学习2026年全国两会精神| 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140742&idx=2&sn=6f1db3a06b7e324ca78f3d2dc5a380e6)
- 中国信息安全
  - [ ] [专题·原创 | 从《中华人民共和国网络安全法》修改看我国网络安全法治的发展路径](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260286&idx=1&sn=90b29af20c3816e16ff367d5eb9cba22)
  - [ ] [长亭「捕虾」工具开源首发！企业级 OpenClaw 风险监控实战指南](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260286&idx=2&sn=df0ba4faa5628f3b057aace2902578d6)
  - [ ] [专家解读 | 建立健全数据产权制度 筑牢数字经济发展基石](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260286&idx=3&sn=cb7990a1718b9c135288ddf5a4b3bb30)
  - [ ] [观点 | 完善数字贸易网络安全治理新范式](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260286&idx=4&sn=6fc9fc0b111cc7d2eea6e390a561d582)
- 安全圈
  - [ ] [【安全圈】360 回应“安全龙虾”私钥泄露事件：涉事证书已吊销，普通用户不受影响](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074793&idx=1&sn=655b998cfc39b5ddd8a3e3e83c1c9684)
  - [ ] [【安全圈】美伊冲突 | 美国军事后勤机密文件](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074793&idx=2&sn=918e593eaaa96946375f09a8020694da)
  - [ ] [【安全圈】加拿大零售商 Loblaw 数据泄露影响客户信息](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074793&idx=3&sn=a39d31f449c72e95c3a7a1d6b43a31b7)
- 网安杂谈
  - [ ] [以技证道，数海寻踪 | 第三届“平航杯”电子数据取证竞赛邀您参战！](https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650890179&idx=1&sn=5728c2956be02370618e3e5b68fe16a2)
  - [ ] [【转载】小龙虾（OpenClaw）安全使用与避坑手册](https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650890179&idx=2&sn=10a2626908e01824df2fafede146365e)
- 腾讯安全威胁情报中心
  - [ ] [人机双杀 | 别被 “龙虾” 骗了！伪装 AI 工具的钓鱼，让智能体沦为“内鬼”](https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247511428&idx=1&sn=679549b2025149f11863d46357626017)
- 数世咨询
  - [ ] [报告发布 |《全球数据泄露态势月度报告》（2026年2月）| 附下载地址](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542139&idx=1&sn=9e1ab0f25bc9d4e0fa86c8632dacb722)
  - [ ] [调研通知 | 中国AI安全50强（2026）调研正式启动](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542139&idx=2&sn=64daabeac4d1857b29bf5a85f2de421d)
  - [ ] [让“龙虾”安全上岗！中国电信重磅发布天翼智安·智能体安全解决方案！](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542139&idx=3&sn=96c59d682eba1517b5767ef20781f2e6)
- 青藤云安全
  - [ ] [双料认可！青藤两款产品斩获 SKD AWARDS 赛可达优秀产品奖](https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650851013&idx=1&sn=321dda7d24021ee7d451c1c9ae83e6f4)
- 嘶吼专业版
  - [ ] [长亭「捕虾」工具开源首发！企业级 OpenClaw 风险监控实战指南](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587163&idx=1&sn=3bfb86e73fba7dba41b7a885c22e5046)
  - [ ] [嘶吼安全动态｜国家安全部预警无线键鼠存在非加密传输窃密风险 武汉新设全国唯一网络空间安全学院](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587163&idx=2&sn=d458c6ff36523e3b93927379331903e4)
- ChaMd5安全团队
  - [ ] [多阶段Java Loader恶意样本分析](https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247514194&idx=1&sn=e7aeaa96d2d65d137d22d5cbb3a73fb8)
- 极客公园
  - [ ] [植入 OpenClaw 的具身智能机器人来了？AWE 科沃斯发布可养成的「八界」管家机器人](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653101490&idx=1&sn=9b6846b188d7637700b574ee0f23f64d)
  - [ ] [详解悟空：阿里 ATH 成立第一炮，给千万企业打造数字员工](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653101489&idx=1&sn=4a238f2aa0aca4b617ed65c635b59c73)
  - [ ] [没人比英伟达，更懂「下一代 AI 计算」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653101294&idx=1&sn=9ef9125920f416db4fa53663a892d966)
- 复旦白泽战队
  - [ ] [警惕“龙虾”变卧底！OpenClaw竟成突破隔离边界的致命杀手](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247498083&idx=1&sn=988ba5cee979a174d9d0761faa35d0fd)
- 情报分析师
  - [ ] [如何基于开源情报(OSINT) 识别军事AI技术部署节点](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567072&idx=1&sn=3bc2e045f1c4353b46578cf5ccc12f04)
  - [ ] [【热点研判】特朗普要求我协助霍尔木兹通航，美中峰会宣告延期战略博弈态势研判/美国USTR Section 301双轨调查战略解析对我风险评估](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567072&idx=2&sn=be76b27ebef434ade2aec38d742d0aba)
- 深信服千里目安全技术中心
  - [ ] [【漏洞通告】OpenClaw WebSocket共享令牌权限提升漏洞](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525166&idx=1&sn=4f3f183b0c41fa2af4a1c7ffb2c39046)
- 虾说AI道
  - [ ] [养虾必备 | Top 50 Skills 详细功能解析](https://mp.weixin.qq.com/s?__biz=MzI1MTE3MDAwMw==&mid=2650436276&idx=1&sn=07a973970e55d0b61514e86dca0a16ee)
- 国家互联网应急中心CNCERT
  - [ ] [CNVD漏洞周报2026年第10期](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501326&idx=1&sn=3760d4aefa27f6648cff7bc58a7f06f3)
- 安全行者老霍
  - [ ] [GitHub Agentic Workflows的安全架构揭秘](https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486092&idx=1&sn=92d12ae7cf1a113f9aa10531fb88b112)
- TrustedSec
  - [ ] [Better Together: Combining Automation and Manual Testing](https://trustedsec.com/blog/better-together-combining-automation-and-manual-testing)
- 迪哥讲事
  - [ ] [缓存中毒](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499180&idx=1&sn=34fc8e3a6c50f5a8ebe52e00de85949a)
- 360数字安全
  - [ ] [360龙虾卫士打造Skill立体防护，多维抵御AI技能投毒“刺客”](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585434&idx=1&sn=d17b91da0e6c646a2e58a524e7a08efb)
  - [ ] [360安全龙虾「养虾速成课」正式上线ISC.AI学苑！](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585434&idx=2&sn=9e145e933928722c36df13f6cdbd53dd)
- Qualys Security Blog
  - [ ] [CVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalation to Root](https://blog.qualys.com/category/vulnerabilities-threat-research)
  - [ ] [Countering Current Geopolitical Cyber Threats Based on CISA Intel With Qualys](https://blog.qualys.com/category/product-tech/vulnmgmt-detection-response)
  - [ ] [The New Era of Application Security: Reasoning-Based Agents, Runtime Reality, and Risk Intelligence](https://blog.qualys.com/category/product-tech)
- Arturo Di Corinto
  - [ ] [APPUNTAMENTI CYBER IN ITALIA 2026](https://dicorinto.it/articoli/appuntamenti-cyber-in-italia-2026/)
- 字节跳动技术团队
  - [ ] [一文了解｜火山引擎 OpenClaw 安全最佳实践](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247518851&idx=1&sn=e2d623e2141c2635d10cce3a375c28de)
- Securityinfo.it
  - [ ] [Rischio AI: falle in Amazon Bedrock, LangSmith e SGLang](https://www.securityinfo.it/2026/03/17/rischio-ai-falle-in-amazon-bedrock-langsmith-e-sglang/?utm_source=rss&utm_medium=rss&utm_campaign=rischio-ai-falle-in-amazon-bedrock-langsmith-e-sglang)
- Over Security - Cybersecurity news aggregator
  - [ ] [GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX](https://www.bleepingcomputer.com/news/security/glassworm-malware-hits-400-plus-code-repos-on-github-npm-vscode-openvsx/)
  - [ ] [Medusa ransomware gang claims attacks on prominent Mississippi hospital, New Jersey county](https://therecord.media/medusa-ransomware-mississippi-cyber)
  - [ ] [Europe sanctions Chinese and Iranian firms for cyberattacks](https://www.bleepingcomputer.com/news/security/europe-sanctions-chinese-and-iranian-firms-for-cyberattacks/)
  - [ ] [Attacco a Intuitive: l’ecosistema della chirurgia robotica a rischio per una password rubata](https://www.cybersecurity360.it/news/intuitive-surgical-una-password-rubata-mette-a-rischio-lecosistema-della-chirurgia-robotica/)
  - [ ] [Georgia man charged for robbing NBA, NFL players through stolen Apple account details](https://therecord.media/phishing-nba-nfl-scammer-arrested)
  - [ ] [Energy Department set to release its first-ever cyber strategy](https://therecord.media/energy-department-set-to-release-first-ever-cyber-strategy)
  - [ ] [Un adesivo colorato che salva la sicurezza nazionale: il ciclo di vita dell’Asset Security](https://www.cybersecurity360.it/soluzioni-aziendali/un-adesivo-colorato-che-salva-la-sicurezza-nazionale-il-ciclo-di-vita-dellasset-security/)
  - [ ] [Top 5 Things CISOs Need to Do Today to Secure AI Agents](https://www.bleepingcomputer.com/news/security/top-5-things-cisos-need-to-do-today-to-secure-ai-agents/)
  - [ ] [Microsoft stops force-installing the Microsoft 365 Copilot app](https://www.bleepingcomputer.com/news/microsoft/microsoft-stops-force-installing-the-microsoft-365-copilot-app/)
  - [ ] [New font-rendering trick hides malicious commands from AI tools](https://www.bleepingcomputer.com/news/security/new-font-rendering-trick-hides-malicious-commands-from-ai-tools/)
  - [ ] [Comunicati Stampa](https://www.carabinieri.it/in-vostro-aiuto/informazioni/comunicati-stampa/truffe-la-criminalit%C3%A0-organizzata-gestiva-frodi-informatiche-16-misure-cautelari-affiliati-al-clan-mazzarella)
  - [ ] [Microsoft shares fix for Windows C: drive access issues on Samsung PCs](https://www.bleepingcomputer.com/news/microsoft/microsoft-shares-fix-for-windows-c-drive-access-issues-on-samsung-pcs/)
  - [ ] [LeakNet ransomware uses ClickFix and Deno runtime for stealthy attacks](https://www.bleepingcomputer.com/news/security/leaknet-ransomware-uses-clickfix-and-deno-runtime-for-stealthy-attacks/)
  - [ ] [Georgian Charged for Running Phishing Scam Targeting NBA, NFL Players, While in Federal Custody](https://thecyberexpress.com/phishing-scam-targeting-pro-athletes/)
  - [ ] [Silver Dragon, cosa sappiamo del cyber spionaggio cinese contro organizzazioni governative](https://www.cybersecurity360.it/news/silver-dragon-spionaggio/)
  - [ ] [New Windows 11 hotpatch fixes Bluetooth device visibility issue](https://www.bleepingcomputer.com/news/microsoft/new-windows-11-hotpatch-fixes-bluetooth-device-visibility-issue/)
  - [ ] [Microsoft: Enabling Teams Meeting add-in breaks Outlook Classic](https://www.bleepingcomputer.com/news/microsoft/microsoft-enabling-teams-meeting-add-in-breaks-outlook-classic/)
  - [ ] [EU Sanctions Chinese, Iranian Hacking Groups for Device Breaches and Olympic Cyberattacks](https://thecyberexpress.com/eu-sanctions-chinese-iranian-hacking-groups/)
  - [ ] [Middle East Cyber Warfare Intensifies: Rising Attacks, Hacktivist Surge, and Global Risk Exposure](https://cyble.com/blog/middle-east-cyber-warfare-2026-hybrid-conflict/)
  - [ ] [Intuitive’s Certain Business, Employee, Corporate Data Accessed in Recent Breach](https://thecyberexpress.com/intuitive-cyberattack-phishing-incident/)
  - [ ] [New York Water Systems Get New Cybersecurity Standards and $2.5M Funding](https://thecyberexpress.com/water-infrastructure-cybersecurity-new-york/)
  - [ ] [Lazarus, AI, and Trust Abuse: Top Enterprise Cybersecurity Risks 2026](https://any.run/cybersecurity-blog/enterprise-cybersecurity-risks-2026/)
  - [ ] [From Enumeration to Findings: The Security Findings Report in EntraFalcon](https://blog.compass-security.com/2026/03/from-enumeration-to-findings-the-security-findings-report-in-entrafalcon/)
  - [ ] [AI-Driven Phishing Campaign Uses Browser Permissions to Harvest Sensitive Data](https://thecyberexpress.com/ai-driven-phishing-campaign/)
  - [ ] [Sistema unico o documenti distinti: la scelta architetturale per la solidità della governance NIS2](https://www.cybersecurity360.it/legal/sistema-unico-o-documenti-distinti-la-scelta-architetturale-per-la-solidita-della-governance-nis-2/)
  - [ ] [Report CRIF: Iran terzo al mondo per email violate, allarme geopolitico e AI](https://www.cybersecurity360.it/news/report-crif-iran-terzo-al-mondo-per-email-violate-allarme-geopolitico-e-ai/)
  - [ ] [CrackArmor, nove falle in AppArmor aprono la strada al root di Linux](https://www.securityinfo.it/2026/03/16/crackarmor-nove-falle-in-apparmor-aprono-la-strada-al-root-di-linux/)
- DARKNAVY
  - [ ] [特别预警｜开发者请注意：使用OpenAI Codex 可能被攻击](https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247497877&idx=1&sn=83608fa2ff1b4167dee4d914fdee3780)
- ICT Security Magazine
  - [ ] [Model Context Protocol (MCP) come arma: stealer log e profilazione comportamentale delle vittime](https://www.ictsecuritymagazine.com/articoli/model-context-protocol/)
  - [ ] [Hamas Threat Actors e Gaza Cybergang: operazioni cyber, spionaggio e guerra ibrida nel Medio Oriente](https://www.ictsecuritymagazine.com/articoli/hamas-threat-actors/)
- 云鼎实验室
  - [ ] [「AI开源组件安全风险」系列一：配置缺陷，让你的GPU沦为矿机](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497370&idx=1&sn=ce01885156e6575b6f57b984bd30a294)
- bellingcat
  - [ ] [Agents of Chaos: Unpacking the Actions of Border Patrol Agents Across the US](https://www.bellingcat.com/news/2026/03/17/border-patrol-agents-of-chaos/)
- Lenny Zeltser
  - [ ] [Understand the Reality of the SOC 2 Checkbox](https://zeltser.com/soc2-checkbox-reality/)
- Schneier on Security
  - [ ] [South Korean Police Accidentally Post Cryptocurrency Wallet Password](https://www.schneier.com/blog/archives/2026/03/south-korean-police-accidentally-post-cryptocurrency-wallet-password.html)
- 安全419
  - [ ] [2026两会网安建言聚焦：为AI发展构筑安全底座 以数据治理释放要素价值](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247552606&idx=1&sn=2b398783613c816b32898cb67799e0f2)
  - [ ] [三年数据沉淀，零信任实战验证：易安联《教育行业零信任安全访问白皮书（2025版）》正式发布](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247552606&idx=2&sn=9a3a233efafc162081058415e9d47baf)
- SANS Internet Storm Center, InfoCON: green
  - [ ] [IPv4 Mapped IPv6 Addresses, (Tue, Mar 17th)](https://isc.sans.edu/diary/rss/32804)
  - [ ] [ISC Stormcast For Tuesday, March 17th, 2026 https://isc.sans.edu/podcastdetail/9852, (Tue, Mar 17th)](https://isc.sans.edu/diary/rss/32802)
- 白泽安全实验室
  - [ ] [疑似朝鲜APT组织发起大规模GitHub供应链攻击，数百个开源仓库遭恶意代码植入](https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492897&idx=1&sn=9309326a2575bed54d8fac3452566b80)
- Full Disclosure
  - [ ] [UPDATE: Ant Group Censors 4 Security Research Articles After	Initial Complaint Rejection](https://seclists.org/fulldisclosure/2026/Mar/7)
- Instapaper: Unread
  - [ ] [What Is Cyber Warfare Definition, Doctrine, and Real-World Examples](https://cyberwarzone.com/2026/03/09/what-is-cyber-warfare-definition-doctrine-and-real-world-examples/)
  - [ ] [Stuxnet The Cyber Weapon That Changed Warfare](https://cyberwarzone.com/2026/03/09/stuxnet-the-cyber-weapon-that-changed-warfare/)
  - [ ] [What Are Passkeys How They Work, Why They Matter, and When to Use Them](https://cyberwarzone.com/2026/03/16/what-are-passkeys-how-they-work-why-they-matter-and-when-to-use-them/)
  - [ ] [xLEAPP - Helper scripts for pullingcloning and creation of Windows exe](https://bebinary4n6.blogspot.com/2026/03/xleapp-helper-scripts-for.html)
  - [ ] [Android Pre-Installed Apps What Could Possibly Go Wrong](https://blog.elcomsoft.com/2026/03/android-pre-installed-apps-what-could-possibly-go-wrong/)
  - [ ] [KMLer a CSV XLSX to KML Tool](https://metadataperspective.com/2026/03/13/kmler-a-csv-xlsx-to-kml-tool/)
  - [ ] [Un webinar gratuito sull’acquisizione forense dei Mac](https://andrealazzarotto.com/2026/03/16/un-webinar-gratuito-sullacquisizione-forense-dei-mac/)
  - [ ] [The Collapse](https://zerodayclock.com)
- The Hacker News
  - [ ] [AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE](https://thehackernews.com/2026/03/ai-flaws-in-amazon-bedrock-langsmith.html)
  - [ ] [LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader](https://thehackernews.com/2026/03/leaknet-ransomware-uses-clickfix-via.html)
  - [ ] [AI is Everywhere, But CISOs are Still Securing It with Yesterday's Skills and Tools, Study Finds](https://thehackernews.com/2026/03/ai-is-everywhere-but-cisos-are-still.html)
  - [ ] [Konni Deploys EndRAT Through Phishing, Uses KakaoTalk to Propagate Malware](https://thehackernews.com/2026/03/konni-deploys-endrat-through-spear.html)
  - [ ] [CISA Flags Actively Exploited Wing FTP Vulnerability Leaking Server Paths](https://thehackernews.com/2026/03/cisa-flags-actively-exploited-wing-ftp.html)
- The Register - Security
  - [ ] [World<s>Coin</s>'s newest pitch: Scan your eyeballs to prove AI agents really represent you](https://go.theregister.com/feed/www.theregister.com/2026/03/17/worldcoin_identity_ai_agents_whatever/)
  - [ ] [EU sanctions Iranian cyber front over election meddling, Charlie Hebdo breach](https://go.theregister.com/feed/www.theregister.com/2026/03/17/eu_iran_cyber_sanctions/)
  - [ ] [Too big to ignore, too small to be served: the midmarket security gap](https://go.theregister.com/feed/www.theregister.com/2026/03/17/too_big_ignore_too/)
  - [ ] [Switzerland built a secure alternative to BGP. The rest of the world hasn't noticed yet](https://go.theregister.com/feed/www.theregister.com/2026/03/17/switzerland_bgp_alternative/)
  - [ ] [Gartner suggests Friday afternoon Copilot ban because tired users may be too lazy to check its mistakes](https://go.theregister.com/feed/www.theregister.com/2026/03/17/gartner_copilot_security_mitigations/)
  - [ ] [Bank built its own threat hunting agent because vendors can’t keep pace with new threats](https://go.theregister.com/feed/www.theregister.com/2026/03/17/commonwealth_bank_ai_defense/)
- Troy Hunt's Blog
  - [ ] [Weekly Update 495](https://www.troyhunt.com/weekly-update-495/)
- Deeplinks
  - [ ] [Bonus Podcast Episode: Privacy’s Defender - Cindy Cohn with Cory Doctorow](https://www.eff.org/deeplinks/2026/03/bonus-podcast-episode-privacys-defender-cindy-cohn-conversation-cory-doctorow)
- TorrentFreak
  - [ ] [Court Dismisses Musi’s Apple Lawsuit, Sanctions Law Firm for “Baseless” Claims](https://torrentfreak.com/court-dismisses-musis-apple-lawsuit-sanctions-law-firm-for-baseless-claims/)
- 熵减矩阵
  - [ ] [信任模型、沙箱、供应链——解剖 OpenClaw 的安全哲学](https://mp.weixin.qq.com/s?__biz=Mzg2MTc1NDAxMA==&mid=2247485185&idx=1&sn=a49c598ceae7f57f7115a8ad27691bae)
- 安全攻防团队
  - [ ] [「AI开源组件安全风险」系列一：配置缺陷，让你的GPU沦为矿机](https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485143&idx=1&sn=27a9c05f556f2aa6aaba628a2c0a45d1)
- Security Affairs
  - [ ] [EU sanctions Chinese and Iranian actors over cyberattacks on critical infrastructure](https://securityaffairs.com/189585/security/eu-sanctions-chinese-and-iranian-actors-over-cyberattacks-on-critical-infrastructure.html)
  - [ ] [RondoDox botnet expands arsenal targeting 174 flaws, and hits 15,000 daily exploit attempts](https://securityaffairs.com/189569/malware/rondodox-botnet-expands-arsenal-targeting-174-flaws-and-hits-15000-daily-exploit-attempts.html)
  - [ ] [CL-STA-1087 targets military capabilities since 2020](https://securityaffairs.com/189553/apt/cl-sta-1087-targets-military-capabilities-since-2020.html)
  - [ ] [From Windows to macOS: ClickFix attacks shift tactics with ChatGPT-based lures](https://securityaffairs.com/189542/cyber-crime/from-windows-to-macos-clickfix-attacks-shift-tactics-with-chatgpt-based-lures.html)
  - [ ] [Attack on Stryker’s Microsoft environment wiped employee devices without malware](https://securityaffairs.com/189535/hacking/attack-on-stryker-s-microsoft-environment-wiped-employee-devices-without-malware.html)
- 白帽子章华鹏
  - [ ] [「AI时代企业安全的挑战与机遇」沙龙活动安排](https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650238945&idx=1&sn=b6fc6aa3bff4219bf997a9313ea52c39)
- Security Weekly Podcast Network (Audio)
  - [ ] [AI Spicy Mode, Steam, Glassworm, Samsung, Stryker, Waymo, Cole Porter, and More - SWN #564](http://sites.libsyn.com/18678/ai-spicy-mode-steam-glassworm-samsung-stryker-waymo-cole-porter-and-more-swn-564)
  - [ ] [Creating Better Security Guidance and Code with LLMs - Mark Curphey - ASW #374](http://sites.libsyn.com/18678/creating-better-security-guidance-and-code-with-llms-mark-curphey-asw-374)
- 网安寻路人
  - [ ] [中国人工智能立法的十大核心议题：欧盟《人工智能法》何以镜鉴？](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247508173&idx=1&sn=099deca55f4ac1e0ae5f037e873a97af)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[每日信息流] 2026-03-18 #1181

每日安全资讯（2026-03-18）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2026-03-18 #1181

Description

每日安全资讯（2026-03-18）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions