# 每日安全资讯（2026-03-07） - 先知安全技术社区 - [ ] [先知社区2025年度&月度榜单](https://xz.aliyun.com/news/91683) - 安全客-有思想的安全新媒体 - [ ] [Django发布安全补丁 修复拒绝服务与权限类漏洞](https://www.anquanke.com/post/id/315047) - [ ] [攻击者借日历邀请入侵 Perplexity Comet 浏览器并泄露敏感数据](https://www.anquanke.com/post/id/315044) - [ ] [伊朗关联黑客瞄准监控摄像头漏洞](https://www.anquanke.com/post/id/315041) - [ ] [癌症中心研究数据遭黑客攻击120万人信息受影响](https://www.anquanke.com/post/id/315038) - [ ] [Outlook.com为何大量误拦正常商业邮件](https://www.anquanke.com/post/id/315035) - [ ] [Coruna席卷全球威胁格局的高性能iOS漏洞利用工具包](https://www.anquanke.com/post/id/315032) - [ ] [Grammarly 从文字纠错转向文学模仿](https://www.anquanke.com/post/id/315029) - [ ] [Cisco Secure FMC曝出10分高危漏洞 攻击者可获取企业防火墙Root权限](https://www.anquanke.com/post/id/315023) - [ ] [pac4j-jwt 曝出10.0分高危漏洞 攻击者可伪造管理员令牌](https://www.anquanke.com/post/id/315020) - [ ] [埃森哲为何重金以12亿美元收购Ookla来为AI未来押注](https://www.anquanke.com/post/id/315017) - paper - Last paper - [ ] [当 AI Agent 拥有系统权限：OpenClaw 安全风险全景分析](https://paper.seebug.org/3469/) - [ ] [ZeroDayBench：评估大语言模型智能体在未知零日漏洞上的网络防御能力](https://paper.seebug.org/3468/) - SecWiki News - [ ] [SecWiki News 2026-03-06 Review](http://www.sec-wiki.com/?2026-03-06) - Microsoft Security Blog - [ ] [AI as tradecraft: How threat actors operationalize AI](https://www.microsoft.com/en-us/security/blog/2026/03/06/ai-as-tradecraft-how-threat-actors-operationalize-ai/) - ElcomSoft blog - [ ] [AI Agents and Deep Research: A Friday Primer](https://blog.elcomsoft.com/2026/03/ai-agents-and-deep-research-a-friday-primer/) - Private Feed for M09Ic - [ ] [modelcontextprotocol released v1.5.0 at modelcontextprotocol/registry](https://github.com/modelcontextprotocol/registry/releases/tag/v1.5.0) - [ ] [pydantic released v1.67.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v1.67.0) - [ ] [spf13 starred steipete/gogcli](https://github.com/steipete/gogcli) - [ ] [bolucat released 202603061958 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202603061958) - [ ] [x90skysn3k released v2.5.5 at x90skysn3k/brutespray](https://github.com/x90skysn3k/brutespray/releases/tag/v2.5.5) - [ ] [Mr-xn starred cft0808/edict](https://github.com/cft0808/edict) - [ ] [Mel0day starred slowmist/openclaw-security-practice-guide](https://github.com/slowmist/openclaw-security-practice-guide) - [ ] [mgeeky starred BehiSecc/awesome-claude-skills](https://github.com/BehiSecc/awesome-claude-skills) - [ ] [timwhitez starred praetorian-inc/brutus](https://github.com/praetorian-inc/brutus) - [ ] [DVKunion starred VoltAgent/awesome-openclaw-skills](https://github.com/VoltAgent/awesome-openclaw-skills) - [ ] [safedv starred iilegacyyii/DataInject-BOF](https://github.com/iilegacyyii/DataInject-BOF) - [ ] [uknowsec starred p1g3/dingwave](https://github.com/p1g3/dingwave) - [ ] [niudaii starred yhy0/ghsa-skill-builder](https://github.com/yhy0/ghsa-skill-builder) - [ ] [PrefectHQ released 3.6.22.dev1 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.6.22.dev1) - [ ] [CHYbeta starred vignesh07/clawdbot-formal-models](https://github.com/vignesh07/clawdbot-formal-models) - [ ] [x90skysn3k released v2.5.4 at x90skysn3k/brutespray](https://github.com/x90skysn3k/brutespray/releases/tag/v2.5.4) - [ ] [CHYbeta starred D4Vinci/Scrapling](https://github.com/D4Vinci/Scrapling) - [ ] [4ra1n starred yhy0/ghsa-skill-builder](https://github.com/yhy0/ghsa-skill-builder) - [ ] [Rvn0xsy starred g0h4n/RustHound-CE](https://github.com/g0h4n/RustHound-CE) - [ ] [gh0stkey starred rolldown/tsdown](https://github.com/rolldown/tsdown) - [ ] [anthropics released v2.1.70 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.70) - [ ] [kpcyrd forked kpcyrd/russh from Eugeny/russh](https://github.com/kpcyrd/russh) - [ ] [FunnyWolf starred agentscope-ai/CoPaw](https://github.com/agentscope-ai/CoPaw) - Recent Commits to cve:main - [ ] [Update Fri Mar 6 11:25:12 UTC 2026](https://github.com/trickest/cve/commit/72a1e3f46fe8d302e11e5d75ced541c7c52abd32) - 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com - [ ] [【图说】重庆信通设计院：一图看清 人工智能安全“大模型备案”怎么做](https://www.4hou.com/posts/RXWw) - BREAKDEV - [ ] [Open source is dying.](https://breakdev.org/open-source-is-dying/) - Bug Bounty in InfoSec Write-ups on Medium - [ ] [IDORs Explained: How One Number Can Hack an Entire Company](https://infosecwriteups.com/idors-explained-how-one-number-can-hack-an-entire-company-8872fef31c2d?source=rss----7b722bfd1b8d--bug_bounty) - SentinelOne - [ ] [The Good, the Bad and the Ugly in Cybersecurity – Week 10](https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-10-7/) - Malwarebytes - [ ] [One click on this fake Google Meet update can give attackers control of your PC](https://www.malwarebytes.com/blog/threat-intel/2026/03/one-click-on-this-fake-google-meet-update-can-give-attackers-control-of-your-pc) - [ ] [Beware of fake OpenClaw installers, even if Bing points you to GitHub](https://www.malwarebytes.com/blog/news/2026/03/beware-of-fake-openclaw-installers-even-if-bing-points-you-to-github) - [ ] [Fake CleanMyMac site installs SHub Stealer and backdoors crypto wallets](https://www.malwarebytes.com/blog/threat-intel/2026/03/fake-cleanmymac-site-installs-shub-stealer-and-backdoors-crypto-wallets) - GuidePoint Security - [ ] [More Than a Tech Refresh: BOD 26-02 is About Proactive Risk Management](https://www.guidepointsecurity.com/blog/more-than-a-tech-referesh-bod-2602-proactive-risk-mangement/) - Securelist - [ ] [Exploits and vulnerabilities in Q4 2025](https://securelist.com/vulnerabilities-and-exploits-in-q4-2025/119105/) - VMRay - [ ] [Setting up UniqueSignal in MISP](https://www.vmray.com/setting-up-uniquesignal-in-misp/) - 绿盟科技技术博客 - [ ] [权威发布 | 绿盟科技参编工业和信息化蓝皮书，以实践书写工控安全新答卷](https://blog.nsfocus.net/%e6%9d%83%e5%a8%81%e5%8f%91%e5%b8%83-%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e5%8f%82%e7%bc%96%e5%b7%a5%e4%b8%9a%e5%92%8c%e4%bf%a1%e6%81%af%e5%8c%96%e8%93%9d%e7%9a%ae%e4%b9%a6%ef%bc%8c%e4%bb%a5/) - rtl-sdr.com - [ ] [NanoFarfield: A Portable Far-Field Antenna Measurement Platform (Coming Soon to Crowdfunding)](https://www.rtl-sdr.com/nanofarfield-a-portable-far-field-antenna-measurement-platform-coming-soon-to-crowdfunding/) - [ ] [JoesScanner: A Modern Frontend for Trunking Recorder to Listen, Browse, and Download Calls](https://www.rtl-sdr.com/joesscanner-a-modern-frontend-for-trunking-recorder-to-listen-browse-and-download-calls/) - HackerNews - [ ] [维基百科遭自传播 JavaScript 蠕虫攻击，大量页面被篡改](https://hackernews.cc/archives/63489) - [ ] [ContextCrush 漏洞导致 AI 开发工具面临攻击风险](https://hackernews.cc/archives/63483) - [ ] [WordPress 会员插件漏洞遭利用，攻击者可创建管理员账户](https://hackernews.cc/archives/63504) - [ ] [俄罗斯 APT 组织利用 BadPaw 与 MeowMeow 恶意软件针对乌克兰发动攻击](https://hackernews.cc/archives/63472) - [ ] [欧洲刑警组织牵头行动摧毁 Tycoon 2FA 钓鱼即服务平台](https://hackernews.cc/archives/63511) - [ ] [新泽西州一县称恶意软件攻击导致电话线路与 IT 系统瘫痪](https://hackernews.cc/archives/63465) - [ ] [Dust Specter 利用全新恶意软件针对伊拉克官员发动攻击](https://hackernews.cc/archives/63456) - Offensive Security Blog: Latest Trends in Hacking | Praetorian - [ ] [Building Bridges, Breaking Pipelines: Introducing Trajan](https://www.praetorian.com/blog/building-bridges-breaking-pipelines-introducing-trajan/) - 杨龙 - [ ] [MySQL导入远程数据库](https://www.yanglong.pro/%e8%bf%9c%e7%a8%8b%e5%af%bc%e5%85%a5%e6%95%b0%e6%8d%ae%e5%ba%93/) - 安全分析与研究 - [ ] [伪装成Foxmail银狐黑产最新高级免杀样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247495832&idx=1&sn=8f2bc2215fd6b03b4734b22134ed2c92) - 腾讯玄武实验室 - [ ] [每日安全动态推送(26/3/6)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960392&idx=1&sn=74e4de38dc1b087909486bf7ae525c57) - 安全客 - [ ] [被GitHub宕机逼疯？OpenAI下场做竞品，要掀翻代码托管赛道](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789714&idx=1&sn=e6360c1e3d02d5c6e9b2e11b55f5a99f) - 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台 - [ ] [Proton Mail帮助FBI揭露匿名抗议者身份](https://blog.upx8.com/Proton-Mail%E5%B8%AE%E5%8A%A9FBI%E6%8F%AD%E9%9C%B2%E5%8C%BF%E5%90%8D%E6%8A%97%E8%AE%AE%E8%80%85%E8%BA%AB%E4%BB%BD) - [ ] [Anthropic拟推出AI应用市场 扩张软件生态](https://blog.upx8.com/Anthropic%E6%8B%9F%E6%8E%A8%E5%87%BAAI%E5%BA%94%E7%94%A8%E5%B8%82%E5%9C%BA-%E6%89%A9%E5%BC%A0%E8%BD%AF%E4%BB%B6%E7%94%9F%E6%80%81) - [ ] [日本三大车商二月在华新车销量均下滑](https://blog.upx8.com/%E6%97%A5%E6%9C%AC%E4%B8%89%E5%A4%A7%E8%BD%A6%E5%95%86%E4%BA%8C%E6%9C%88%E5%9C%A8%E5%8D%8E%E6%96%B0%E8%BD%A6%E9%94%80%E9%87%8F%E5%9D%87%E4%B8%8B%E6%BB%91) - [ ] [软银寻求400亿美元贷款用于投资OpenAI](https://blog.upx8.com/%E8%BD%AF%E9%93%B6%E5%AF%BB%E6%B1%82400%E4%BA%BF%E7%BE%8E%E5%85%83%E8%B4%B7%E6%AC%BE%E7%94%A8%E4%BA%8E%E6%8A%95%E8%B5%84OpenAI) - [ ] [亚马逊押注医疗保健AI为患者和医生提供工具](https://blog.upx8.com/%E4%BA%9A%E9%A9%AC%E9%80%8A%E6%8A%BC%E6%B3%A8%E5%8C%BB%E7%96%97%E4%BF%9D%E5%81%A5AI%E4%B8%BA%E6%82%A3%E8%80%85%E5%92%8C%E5%8C%BB%E7%94%9F%E6%8F%90%E4%BE%9B%E5%B7%A5%E5%85%B7) - [ ] [谷歌称其2025年追踪的所有零日漏洞中有一半针对的是存在漏洞的企业技术](https://blog.upx8.com/%E8%B0%B7%E6%AD%8C%E7%A7%B0%E5%85%B62025%E5%B9%B4%E8%BF%BD%E8%B8%AA%E7%9A%84%E6%89%80%E6%9C%89%E9%9B%B6%E6%97%A5%E6%BC%8F%E6%B4%9E%E4%B8%AD%E6%9C%89%E4%B8%80%E5%8D%8A%E9%92%88%E5%AF%B9%E7%9A%84%E6%98%AF%E5%AD%98%E5%9C%A8%E6%BC%8F%E6%B4%9E%E7%9A%84%E4%BC%81%E4%B8%9A%E6%8A%80%E6%9C%AF) - [ ] [亚马逊正在推出重新设计的Fire TV应用](https://blog.upx8.com/%E4%BA%9A%E9%A9%AC%E9%80%8A%E6%AD%A3%E5%9C%A8%E6%8E%A8%E5%87%BA%E9%87%8D%E6%96%B0%E8%AE%BE%E8%AE%A1%E7%9A%84Fire-TV%E5%BA%94%E7%94%A8) - [ ] [澳洲3月9日起严禁未成年人访问色情网站](https://blog.upx8.com/%E6%BE%B3%E6%B4%B23%E6%9C%889%E6%97%A5%E8%B5%B7%E4%B8%A5%E7%A6%81%E6%9C%AA%E6%88%90%E5%B9%B4%E4%BA%BA%E8%AE%BF%E9%97%AE%E8%89%B2%E6%83%85%E7%BD%91%E7%AB%99) - 奇客Solidot–传递最新科技情报 - [ ] [微软确认开发代号为 Project Helix 的下一代 Xbox](https://www.solidot.org/story?sid=83702) - [ ] [日本首次批准 iPS 细胞再生医疗产品](https://www.solidot.org/story?sid=83701) - [ ] [关注面向创业公司和投资机构的 GTC 2026](https://www.solidot.org/story?sid=83700) - [ ] [十分之一的 Firefox 崩溃是比特翻转导致的](https://www.solidot.org/story?sid=83696) - [ ] [Epic CEO Tim Sweeney 同意在 2032 年前停止批评 Play Store](https://www.solidot.org/story?sid=83694) - [ ] [维基百科因安全失误短暂进入只读模式](https://www.solidot.org/story?sid=83693) - 安全内参 - [ ] [2025年至少90个零日漏洞遭滥用，企业软件及设备占比近一半](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515644&idx=1&sn=5225e463062df00e90439d4927d5cfc1) - [ ] [数字迷雾中的暗战：英国智库解析美以伊冲突中网络空间的七个关键维度](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515644&idx=2&sn=360ffeab7b2be9c5f668120ced6b553b) - 奇安信 CERT - [ ] [安全热点周报：Android 发布了针对高通零日漏洞攻击的补丁](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504689&idx=1&sn=2e3461baad817de9e286567c3e15e786) - 看雪学苑 - [ ] [Tenda CH22 多个漏洞分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458611851&idx=1&sn=27ff9a6fb47fca740b0fc19cc5cd70e1) - [ ] [攻击者可删除文件、植入后门：MS-Agent漏洞曝出完整利用链](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458611851&idx=2&sn=00a933e82a28087f929bf6272751dc73) - [ ] [【即将全部更新】30小时教你进阶CTF-密码学](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458611851&idx=3&sn=15dc6f7abdf93a952281f974733ee8b7) - 奇安信威胁情报中心 - [ ] [每周高级威胁情报解读(2026.02.27~03.05)](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247517859&idx=1&sn=9cf225bd172c3c9bf47c21374b994970) - Flanker论安全 - [ ] [Agent是未来新的数字公民(或者已经是了)，](https://mp.weixin.qq.com/s?__biz=MzI3ODI4NDM2MA==&mid=2247484002&idx=1&sn=d387dffeff50139e99257cb64b26e84c) - 代码卫士 - [ ] [电动汽车充电网络告警：Everon OCCP 后端系统存在严重漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525349&idx=1&sn=352cbd47ed06c60804138658fa37fece) - [ ] [思科：注意已遭利用的两个 Catalyst SD-WAN 管理器 0day 漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525349&idx=2&sn=d24d6683fb3bc04d5b47bb36bf521194) - 奇安信病毒响应中心 - [ ] [每周勒索威胁摘要](https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498583&idx=1&sn=ba7979ed24e02882df49936d95eb460f) - 腾讯安全应急响应中心 - [ ] [众行致远，致敬每一份坚守与热爱](https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651208209&idx=1&sn=c98bde89b5446f27dd8eceeaa7630ee4) - 中国信息安全 - [ ] [开赛通知 | 第十九届全国大学生信息安全竞赛（创新实践能力赛）暨第三届“长城杯”网数智安全大赛（防护赛）半决赛开赛通知](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664259792&idx=1&sn=301a899e11cebf763d768ac5bb37b191) - [ ] [技术文件 | 第十九届全国大学生信息安全竞赛（创新实践能力赛）暨第三届“长城杯”网数智安全大赛（防护赛）半决赛技术文件](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664259792&idx=2&sn=043a47f96658b4e992be387d5b13e2c5) - [ ] [国家安全部提醒：“高端局”可别出现低级错误](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664259792&idx=3&sn=4cd63779fec57563f19c3f76afc1b29c) - [ ] [观点 | 汽车数据出境新规实施面临的挑战与应对策略](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664259792&idx=4&sn=40d746818dd2706545abb03beb0ba1c1) - 知道创宇404实验室 - [ ] [当 AI Agent 拥有系统权限：OpenClaw 安全风险全景分析](https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650991117&idx=1&sn=d86257f592a4014e000f07f485d61d36) - M01N Team - [ ] [每周蓝军技术推送（2026.2.28-2026.3.6）](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494746&idx=1&sn=9dea57e1f5651252cff076bd01d30209) - 补天平台 - [ ] [【补天平台推荐】2026 创客汇报名启动，新增“创新先锋”赛道！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510370&idx=1&sn=1b1d89c314cb2f4776fca11c02c8c402) - 吾爱破解论坛 - [ ] [【2026春节】解题领红包之四--Trae CN+GLM5免费干活直接秒！](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143707&idx=1&sn=0cf42c33d98247d382f48abb74450f36) - 安全圈 - [ ] [【安全圈】Wi-Fi 爆出史上最大安全漏洞！所有路由器无一幸免：HTTPS 加密也没用](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074321&idx=1&sn=22258cb41004bbbeb3efc3c2b7c209d4) - [ ] [【安全圈】报告称微软必应搜索被污染，错误推荐恶意 OpenClaw AI 项目](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074321&idx=2&sn=4342b60ce8a98d5741688610092e52ba) - [ ] [【安全圈】安全公司警告黑客利用山寨 ZOOM 网站钓鱼，散布远程监控软件](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074321&idx=3&sn=a067d012eff2cd40ce0ff80c7100d649) - [ ] [【安全圈】APT37 黑客组织利用新型恶意软件实现跨网攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074321&idx=4&sn=3a939a57f45680e3c329a7a77b7301f4) - 极客公园 - [ ] [水滴公司首推「水守 AI 助手」ClawSquare 构建 Agent 协同办公新范式](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653100510&idx=1&sn=3fc6b0eecdc218d345540be968f3051b) - [ ] [GPT-5.4 曝光，表现接近人类；B 站首次实现全年盈利；比亚迪发第二代刀片电池及闪充技术 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653100451&idx=1&sn=cc89f64380be3b3d01eb47f87ddcd2e8) - 阿里安全响应中心 - [ ] [先知通用漏洞收集计划AI应用专项报名开启！](https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998641&idx=1&sn=ee4df449a324b6bfa0158f167c37fbf6) - 字节跳动安全中心 - [ ] [ByteSRC入侵类漏洞限时享高系数奖励，高危额外再奖2w元！新人&伯乐礼同步上线！](https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496045&idx=1&sn=1e497fbd635488d89cd0a3ff4584c466) - 青衣十三楼飞花堂 - [ ] [小学生有点做头，初一就免了](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247489066&idx=1&sn=533c34fc8a2b4647c48a1973671e9395) - 数世咨询 - [ ] [大多数网络攻击的成功只因1%的漏洞导致](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541929&idx=1&sn=b78e4140b81848db276284ae280c34ee) - [ ] [银狐暴涨159.5%！3大套路狂卷企业20亿，4招护好企业邮箱](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541929&idx=2&sn=3db8bdf5f7e977316efec644148f5507) - [ ] [视频监控新战场，海康大华成主流攻击目标](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541929&idx=3&sn=91378e2bbaf7a5c2df5a5728f68acf25) - 黑鸟 - [ ] [被征用的民用视野：全球军事冲突中的摄像头黑客攻防战](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451185608&idx=1&sn=926ffb3338976f7d53588be4aab57f85) - 情报分析师 - [ ] [如何追查美国政府拨款流向及受助人](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567011&idx=1&sn=20716ec0e0ba3c8bb4a2729c7ab185bb) - [ ] [2026年2月巴基斯坦-阿富汗边境冲突综合研判报告](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567011&idx=2&sn=7f48dfcb276d3a52a04ec26cd416a535) - 长亭科技 - [ ] [PR堆积如山？Code Review太费时间？长亭科技发布免费 AI Code Review 机器人](https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651390206&idx=1&sn=5104c2afaf53abac161392d16be35259) - [ ] [开年连中三元！长亭科技全栈智能安全能力获国家级采购全面认可](https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651390206&idx=2&sn=a47b74ff63dfcc66fe4e252bac989a5c) - 复旦白泽战队 - [ ] [成果分享 | [NDSS 2026] 跨设备认证研究：以三大用户权利筑牢登录安全防线](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247497730&idx=1&sn=985d56bfade53cc141c7c51bbadf68fa) - 火绒安全 - [ ] [快到碗里来~火绒投递通道已开 速来速来](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531222&idx=1&sn=f4fff6415926160e3aa6e5158a52dc14) - [ ] [火绒小问答--「企业版」软件安装拦截](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531222&idx=2&sn=1ac2a26f75dfc906b9a6ef1b8d07366f) - [ ] [【火绒安全周报】爆红AI暗藏高危风险/黑客攻击某电商平台](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531222&idx=3&sn=94f20bc2a494c470e31c6d9254d8a318) - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531222&idx=4&sn=cd4271cd54711bcb66b51a0cfacd4644) - 安全行者老霍 - [ ] [2026年11款最佳MCP网关深度对比](https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486030&idx=1&sn=929cb93aa63aa7daa4b4f90ee8f27446) - 字节跳动技术团队 - [ ] [7000+Offer、转正率超 50%......字节跳动 ByteIntern 实习生招聘正式启动！](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247518660&idx=1&sn=8f0b66f94be21999e6f2a4e1c8783d4d) - 360数字安全 - [ ] [2026两会观察 | 周鸿祎为智能体人才培养献策，360先行落地](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585196&idx=1&sn=411d31527985da5cfb73f1beb83c429b) - [ ] [勒索月报 |360发布勒索态势分析：NAS攻击量明显抬头，数据存储设施或成勒索“富矿”](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585196&idx=2&sn=3808c33eaad53417ddc94b8222f0ec26) - 陌陌安全 - [ ] [AI代码审计（逻辑漏洞方向）](https://mp.weixin.qq.com/s?__biz=MzI2OTYzOTQzNw==&mid=2247489502&idx=1&sn=c0314b2a211b439d3b96e5a5645d66a0) - 嘶吼专业版 - [ ] [2025年勒索软件攻击事件激增，但受害者支付率跌至历史新低](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586997&idx=1&sn=148c2c3402e64b4daf27e67be53a1a66) - [ ] [APT37黑客组织利用新型恶意软件实现跨网攻击](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586997&idx=2&sn=9238b7c16ba97bdef6f8d6db2e310014) - 安全419 - [ ] [视频监控已经成为战争的新战场](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247552417&idx=1&sn=6a0f8c56be832874bcc9f83f8744b826) - Beacon Tower Lab - [ ] [恢复、韧性还是持续受损？从网络空间测绘视角看伊以冲突一周态势演变（第二期）](https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247488009&idx=1&sn=392550d05ae02ca976aa200aa746b756) - Over Security - Cybersecurity news aggregator - [ ] [Cognizant TriZetto breach exposes health data of 3.4 million patients](https://www.bleepingcomputer.com/news/security/cognizant-trizetto-breach-exposes-health-data-of-34-million-patients/) - [ ] [Analisi del malware VioletRAT veicolato in Italia](https://cert-agid.gov.it/news/analisi-del-malware-violetrat-veicolato-in-italia/) - [ ] [InstallFix: false guide di installazione CLI per installare infostealer](https://www.securityinfo.it/2026/03/06/installfix-false-guide-di-installazione-cli-per-installare-infostealer/) - [ ] [The CTF Ecosystem Is Stagnant and Has Been for Twenty Years](https://www.secjuice.com/the-ctf-ecosystem-is-stagnant/) - [ ] [CISA warns of Apple flaws exploited in spyware, crypto-theft attacks](https://www.bleepingcomputer.com/news/security/cisa-warns-of-apple-flaws-exploited-in-spyware-crypto-theft-attacks/) - [ ] [People, Policies, and Purpose: Framing Acceptable Use and Human Behavior in Information Security](https://www.secjuice.com/people-policies-and-purpose-framing-acceptable-use-and-human-behavior-in-information-security/) - [ ] [TikTok non adotta la crittografia dei messaggi diretti: preoccupati gli esperti di privacy](https://www.cybersecurity360.it/legal/privacy-dati-personali/tiktok-non-adotta-la-crittografia-dei-messaggi-diretti-preoccupati-gli-esperti-di-privacy/) - [ ] [Sintesi riepilogativa delle campagne malevole nella settimana del 28 febbraio – 6 marzo](https://cert-agid.gov.it/news/sintesi-riepilogativa-delle-campagne-malevole-nella-settimana-del-28-febbraio-6-marzo/) - [ ] [Fake Claude Code install guides push infostealers in InstallFix attacks](https://www.bleepingcomputer.com/news/security/fake-claude-code-install-guides-push-infostealers-in-installfix-attacks/) - [ ] [EC-Council Expands AI Certification Portfolio to Strengthen U.S. AI Workforce Readiness and Security](https://www.bleepingcomputer.com/news/security/ec-council-expands-ai-certification-portfolio-to-strengthen-us-ai-workforce-readiness-and-security/) - [ ] [Un rischio è per sempre?](https://www.cybersecurity360.it/cultura-cyber/un-rischio-e-per-sempre/) - [ ] [Microsoft 365 Backup to add file-level restore for faster recovery](https://www.bleepingcomputer.com/news/microsoft/microsoft-365-backup-to-add-file-level-restore-for-faster-recovery/) - [ ] [Prompt ignition: la nuova superficie d’attacco dei modelli linguistici](https://www.cybersecurity360.it/nuove-minacce/prompt-ignition-la-nuova-superficie-dattacco-dei-modelli-linguistici/) - [ ] [A Satellite Receiver Trusted by Pentagon, ESA Has More Than 20 Security Flaws — and the Maker Never Responded](https://thecyberexpress.com/satellite-receiver-vulnerabilities-unpatched/) - [ ] [INC Ransom’s Franchise Model Is Putting Critical Infrastructure on the Chopping Block](https://thecyberexpress.com/inc-ransom-franchise-model/) - [ ] [The MCP AuthN/Z Nightmare](https://blog.doyensec.com/2026/03/05/mcp-nightmare.html) - [ ] [Shadow IT: The Initial Access You Didn’t Log](https://blog.sekoia.io/shadow-it-the-initial-access-you-didnt-log/) - [ ] [Ghanain man pleads guilty to role in $100 million fraud ring](https://www.bleepingcomputer.com/news/security/ghanain-man-pleads-guilty-to-role-in-100-million-fraud-ring/) - [ ] [Exploits and vulnerabilities in Q4 2025](https://securelist.com/vulnerabilities-and-exploits-in-q4-2025/119105/) - [ ] [Privileged Access Management (PAM) nell’era cloud-first: le 10 migliori pratiche operative](https://www.cybersecurity360.it/soluzioni-aziendali/privileged-access-management-pam-nellera-cloud-first-le-10-migliori-pratiche-operative/) - [ ] [I dubbi sulla sicurezza degli impianti di videosorveglianza](https://www.cybersecurity360.it/news/sicurezza-videosorveglianza/) - [ ] [16-28 February 2026 Cyber Attacks Timeline](https://www.hackmageddon.com/2026/03/06/16-28-february-2026-cyber-attacks-timeline/) - [ ] [FBI investigates breach of surveillance and wiretap systems](https://www.bleepingcomputer.com/news/security/fbi-investigates-breach-of-surveillance-and-wiretap-systems/) - [ ] [House panel marks up kids digital safety act amid Democrat backlash](https://therecord.media/house-panel-marks-up-kids-digital-safety-act) - Yak Project - [ ] [解析提速+语义深耕！解锁 JS/TS 规模化审计新能力](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529459&idx=1&sn=00c7e23588384a9c7950db2e0d72afd6) - HACKMAGEDDON - [ ] [16-28 February 2026 Cyber Attacks Timeline](https://www.hackmageddon.com/2026/03/06/16-28-february-2026-cyber-attacks-timeline/) - 威努特安全网络 - [ ] [伊朗交通摄像头被渗透、法国曝史上最大医疗数据泄露|一周特辑](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651140393&idx=1&sn=d9015e861324a5f265b4ee559ef81259) - Schneier on Security - [ ] [Friday Squid Blogging: Squid in Byzantine Monk Cooking](https://www.schneier.com/blog/archives/2026/03/friday-squid-blogging-squid-in-byzantine-monk-cooking.html) - [ ] [Anthropic and the Pentagon](https://www.schneier.com/blog/archives/2026/03/anthropic-and-the-pentagon.html) - [ ] [Claude Used to Hack Mexican Government](https://www.schneier.com/blog/archives/2026/03/claude-used-to-hack-mexican-government.html) - SANS Internet Storm Center, InfoCON: green - [ ] [ISC Stormcast For Friday, March 6th, 2026 https://isc.sans.edu/podcastdetail/9838, (Fri, Mar 6th)](https://isc.sans.edu/diary/rss/32772) - ICT Security Magazine - [ ] [Consapevolezza e responsabilità nell’uso dei sistemi di Gen AI in ambiente forense – la guida CCBE per contrastare i principali rischi](https://www.ictsecuritymagazine.com/articoli/gen-ai-guida-ccbe/) - 迪哥讲事 - [ ] [js逆向神器](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499148&idx=1&sn=fdd0cc81fdaca8f3b44d34994c49cf2c) - 天御攻防实验室 - [ ] [揭秘入侵伊朗首都摄像头的以色列黑客](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486756&idx=1&sn=33270e9a54414d3720b2c1ffb37d2a6c) - Instapaper: Unread - [ ] [CTFs aren't Designed to Train Investigators. Hashclue is.](https://www.secjuice.com/hashclue/) - [ ] [Mobile Anti Forensics and the Impact on Evidence Recovery](https://www.magnetforensics.com/blog/mobile-anti-forensics-and-the-impact-on-evidence-recovery/) - [ ] [Stop connecting artifacts manually, here's how to automate it with Crow-Eye!](https://www.reddit.com/r/computerforensics/comments/1rlgskl/stop_connecting_artifacts_manually_heres_how_to/) - [ ] [Windows File System Artefacts Under CProgramData](https://blog.elcomsoft.com/2026/03/windows-file-system-artefacts-under-cprogramdata/) - [ ] [“Open-Source Tools for Digital Forensics” presso MSAB Digital Summit 2026](https://andrealazzarotto.com/2026/03/06/open-source-tools-for-digital-forensics-presso-msab-digital-summit-2026/) - Security Affairs - [ ] [Iran-linked MuddyWater deploys Dindoor malware against U.S. organizations](https://securityaffairs.com/189060/apt/iran-linked-muddywater-deploys-dindoor-malware-against-u-s-organizations.html) - [ ] [Cisco flags ongoing exploitation of two recently patched Catalyst SD-WAN flaws](https://securityaffairs.com/189056/security/cisco-flags-ongoing-exploitation-of-two-recently-patched-catalyst-sd-wan-flaws.html) - [ ] [Microsoft warns of ClickFix campaign exploiting Windows Terminal to deliver Lumma Stealer](https://securityaffairs.com/189046/malware/microsoft-warns-of-clickfix-campaign-exploiting-windows-terminal-for-lumma-stealer.html) - [ ] [Iran-nexus APT Dust Specter targets Iraq officials with new malware](https://securityaffairs.com/189033/apt/iran-nexus-apt-dust-specter-targets-iraq-officials-with-new-malware.html) - [ ] [U.S. CISA adds Apple, Rockwell, and Hikvision flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/189005/security/u-s-cisa-adds-apple-rockwell-and-hikvision-flaws-to-its-known-exploited-vulnerabilities-catalog.html) - [ ] [Google GTIG: 90 zero-day flaws exploited in 2025 as enterprise targets grow](https://securityaffairs.com/188993/security/google-gtig-90-zero-day-flaws-exploited-in-2025-as-enterprise-targets-grow.html) - GRAHAM CLULEY - [ ] [How hackers bypassed MFA with a $120 phishing kit – until a global takedown shut it down](https://www.bitdefender.com/en-us/blog/hotforsecurity/hackers-bypassed-mfa-120-phishing-kit-global-takedown-shut-down) - DEFION Research Labs - [ ] [Ruckus Unleashed: Multiple vulnerabilities exploited](/en/research-labs/ruckus-unleashed-multiple-vulnerabilities-exploited) - [ ] [Pwn2Own Automotive 2024: Hacking the Autel MaxiCharger](/en/research-labs/pwn2own-automotive-2024-hacking-the-autel-maxicharger) - [ ] [Pwn2Own Automotive 2024: Hacking the JuiceBox 40](/en/research-labs/pwn2own-automotive-2024-hacking-the-juicebox-40) - [ ] [Pwn2Own Automotive 2024: Hacking the ChargePoint Home Flex (and their cloud...)](/en/research-labs/pwn2own-automotive-2024-hacking-the-chargepoint-home-flex-and-their-cloud) - [ ] [DoNex/DarkRace Ransomware Decryptor](/en/research-labs/donex-darkrace-ransomware-decryptor) - [ ] [CVE-2024-20693: Windows cached code signature manipulation](/en/research-labs/cve-2024-20693-windows-cached-code-signature-manipulation) - [ ] [Bringing process injection into view(s): exploiting all macOS apps using nib files](/en/research-labs/bringing-process-injection-into-view-s-exploiting-all-macos-apps-using-nib-files) - [ ] [Don’t Talk All at Once! Elevating Privileges on macOS by Audit Token Spoofing](/en/research-labs/don-t-talk-all-at-once-elevating-privileges-on-macos-by-audit-token-spoofing) - [ ] [Getting SYSTEM on Windows in style](/en/research-labs/getting-system-on-windows-in-style) - [ ] [Technical analysis of the Genesis Market](/en/research-labs/technical-analysis-of-the-genesis-market) - [ ] [Bad things come in large packages: .pkg signature verification bypass on macOS](/en/research-labs/bad-things-come-in-large-packages-pkg-signature-verification-bypass-on-macos) - [ ] [Pwn2Own Miami 2022: ICONICS GENESIS64 Arbitrary Code Execution](/en/research-labs/pwn2own-miami-2022-iconics-genesis64-arbitrary-code-execution) - [ ] [Pwn2Own Miami 2022: Unified Automation C++ Demo Server DoS](/en/research-labs/pwn2own-miami-2022-unified-automation-c-demo-server-dos) - [ ] [Pwn2Own Miami 2022: AVEVA Edge Arbitrary Code Execution](/en/research-labs/pwn2own-miami-2022-aveva-edge-arbitrary-code-execution) - [ ] [Process injection: breaking all macOS security layers with a single vulnerability](/en/research-labs/process-injection-breaking-all-macos-security-layers-with-a-single-vulnerability) - [ ] [Pwn2Own Miami 2022: Inductive Automation Ignition Remote Code Execution](/en/research-labs/pwn2own-miami-2022-inductive-automation-ignition-remote-code-execution) - [ ] [Pwn2Own Miami 2022: OPC UA .NET Standard Trusted Application Check Bypass](/en/research-labs/pwn2own-miami-2022-opc-ua-net-standard-trusted-application-check-bypass) - [ ] [CoronaCheck App TLS certificate vulnerabilities](/en/research-labs/coronacheck-app-tls-certificate-vulnerabilities) - [ ] [Sandbox escape + privilege escalation in StorePrivilegedTaskService](/en/research-labs/sandbox-escape-privilege-escalation-in-storeprivilegedtaskservice) - [ ] [Proctorio Chrome extension Universal Cross-Site Scripting](/en/research-labs/proctorio-chrome-extension-universal-cross-site-scripting) - [ ] [Zoom RCE from Pwn2Own 2021](/en/research-labs/zoom-rce-from-pwn2own-2021) - [ ] [Adobe Acrobat privilege escalation](/en/research-labs/adobe-acrobat-privilege-escalation) - [ ] [iOS VPN support: 3 different bugs](/en/research-labs/ios-vpn-support-3-different-bugs) - [ ] [Sign in with Apple - authentication bypass](/en/research-labs/sign-in-with-apple-authentication-bypass) - [ ] [Jenkins - authentication bypass](/en/research-labs/jenkins-authentication-bypass) - [ ] [DNS rebinding for HTTPS](/en/research-labs/dns-rebinding-for-https) - [ ] [Spring Security - insufficient cryptographic randomness](/en/research-labs/spring-security-insufficient-cryptographic-randomness) - [ ] [XenServer - path traversal leading to authentication bypass](/en/research-labs/xenserver-path-traversal-leading-to-authentication-bypass) - [ ] [Volkswagen Auto Group MIB infotainment system - unauthenticated remote code execution as root](/en/research-labs/volkswagen-auto-group-mib-infotainment-system-unauthenticated-remote-code-execution-as-root) - [ ] [NAPALM - command execution on NAPLM controller from host](/en/research-labs/napalm-command-execution-on-naplm-controller-from-host) - [ ] [MySQL Connector/J - Unexpected deserialisation of Java objects](/en/research-labs/mysql-connector-j-unexpected-deserialisation-of-java-objects) - [ ] [Ansible - command execution on Ansible controller from host](/en/research-labs/ansible-command-execution-on-ansible-controller-from-host) - [ ] [Observium - unauthenticated remote code execution](/en/research-labs/observium-unauthenticated-remote-code-execution) - [ ] [cSRP/srpforjava - obtaining of hashed passwords](/en/research-labs/csrp-srpforjava-obtaining-of-hashed-passwords) - [ ] [StartEncrypt - obtaining valid SSL certificates for unauthorized domains](/en/research-labs/startencrypt-obtaining-valid-ssl-certificates-for-unauthorized-domains) - The Hacker News - [ ] [Transparent Tribe Uses AI to Mass-Produce Malware Implants in Campaign Targeting India](https://thehackernews.com/2026/03/transparent-tribe-uses-ai-to-mass.html) - [ ] [Multi-Stage VOID#GEIST Malware Delivering XWorm, AsyncRAT, and Xeno RAT](https://thehackernews.com/2026/03/multi-stage-voidgeist-malware.html) - [ ] [The MSP Guide to Using AI-Powered Risk Management to Scale Cybersecurity](https://thehackernews.com/2026/03/the-msp-guide-to-using-ai-powered-risk.html) - [ ] [Iran-Linked MuddyWater Hackers Target U.S. Networks With New Dindoor Backdoor](https://thehackernews.com/2026/03/iran-linked-muddywater-hackers-target.html) - [ ] [China-Linked Hackers Use TernDoor, PeerTime, BruteEntry in South American Telecom Attacks](https://thehackernews.com/2026/03/china-linked-hackers-use-terndoor.html) - [ ] [Microsoft Reveals ClickFix Campaign Using Windows Terminal to Deploy Lumma Stealer](https://thehackernews.com/2026/03/microsoft-reveals-clickfix-campaign.html) - [ ] [Hikvision and Rockwell Automation CVSS 9.8 Flaws Added to CISA KEV Catalog](https://thehackernews.com/2026/03/hikvision-and-rockwell-automation-cvss.html) - The Register - Security - [ ] [Firefox taps Anthropic AI bug hunter, but rancid RAM still flipping bits](https://go.theregister.com/feed/www.theregister.com/2026/03/06/firefox_bugs_anthropic_ai/) - [ ] [Spyware disguised as emergency-alert app sent to Israeli smartphones](https://go.theregister.com/feed/www.theregister.com/2026/03/06/spyware_disguised_as_emergency_alert/) - [ ] [Cisco warns of two more SD-WAN bugs under active attack](https://go.theregister.com/feed/www.theregister.com/2026/03/06/cisco_sdwan_bugs/) - [ ] [Microsoft spots ClickFix campaign getting users to self-pwn on Windows Terminal](https://go.theregister.com/feed/www.theregister.com/2026/03/06/microsoft_spots_clickfix_campaign_abusing/) - [ ] [Son of government contractor arrested after alleged $46M crypto heist from US Marshals](https://go.theregister.com/feed/www.theregister.com/2026/03/06/contractor_son_crypto_arrest/) - [ ] [Microsoft finally gets around to fixing Windows 10 Recovery Environment after breaking it in October](https://go.theregister.com/feed/www.theregister.com/2026/03/06/microsoft_finally_gets_around_to/) - [ ] [Transport for London says 2024 breach affected 7M customers, not 5,000](https://go.theregister.com/feed/www.theregister.com/2026/03/06/tfl_2024_breach_numbers/) - 白泽安全实验室 - [ ] [中亚区域APT组织Hydra Saiga攻击事件总体概述](https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492885&idx=1&sn=e8631526b7cea84e7ddac07948d06dbe) - 白帽子章华鹏 - [ ] [漏洞情报高效应用](https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650238794&idx=1&sn=0198fce32f72d00e3a7704d0cc5c8a21) - Security Weekly Podcast Network (Audio) - [ ] [Iran vs Everyone: 2FA-Bypass Phish, APT41 Drive, iOS 0days, Josh Marpet, and More - SWN #561](http://sites.libsyn.com/18678/iran-vs-everyone-2fa-bypass-phish-apt41-drive-ios-0days-josh-marpet-and-more-swn-561) - TorrentFreak - [ ] [Pirate Streaming Portal ‘P-Stream’ Shuts Down Following ACE/MPA Pressure](https://torrentfreak.com/pirate-streaming-portal-p-stream-shuts-down-following-ace-mpa-pressure/) - Securityinfo.it - [ ] [InstallFix: false guide di installazione CLI per installare infostealer](https://www.securityinfo.it/2026/03/06/installfix-false-guide-di-installazione-cli-per-installare-infostealer/?utm_source=rss&utm_medium=rss&utm_campaign=installfix-false-guide-di-installazione-cli-per-installare-infostealer) - Deeplinks - [ ] [Admiring Our Heroes for International Women’s Day: Five Women In Tech That EFF Admires](https://www.eff.org/deeplinks/2026/03/admiring-our-heroes-international-womens-day-five-women-tech-eff-admires-0) - [ ] [Weasel Words: OpenAI’s Pentagon Deal Won’t Stop AI‑Powered Surveillance](https://www.eff.org/deeplinks/2026/03/weasel-words-openais-pentagon-deal-wont-stop-ai-powered-surveillance)
每日安全资讯（2026-03-07）