# 每日安全资讯（2026-07-16） - 博客园 - potatso - [ ] [回归预测中的不确定性评估与方差修正 - potatso](https://www.cnblogs.com/potatso/p/21491073) - SecWiki News - [ ] [SecWiki News 2026-07-15 Review](http://www.sec-wiki.com/?2026-07-15) - Doonsec's feed - [ ] [网安局发布，商丘网安出品：老张的网号](https://mp.weixin.qq.com/s/L60wzoWDQLDxYXOAgujNYg) - [ ] [NCC合作招募】安全众测即将上线，诚邀种子企业共筑网安防线！](https://mp.weixin.qq.com/s/xp3zp0KDFQvKvNNBKjAmiw) - [ ] [中国科协发布 | 2026前沿科学问题](https://mp.weixin.qq.com/s/CVu4dN7dod0J-O1cSHoRfw) - [ ] [苹果计划推出1.5TB统一内存的M7 Ultra芯片](https://mp.weixin.qq.com/s/rgltlDUwfXwx3bVKbckAaw) - [ ] [中国科协 | 2026重大科学问题、工程技术难题和产业技术问题](https://mp.weixin.qq.com/s/SK1VkiZE1SJXhUtngyAgeQ) - [ ] [等保测评到底是什么？三级系统从进场到出具测评报告要过这几步](https://mp.weixin.qq.com/s/XGhZJA0iY-oSRK8pqcHdhQ) - [ ] [等保定级备案怎么填？一份企业版自查清单先照着过](https://mp.weixin.qq.com/s/AVF2RLKbebggm7flr6O-xA) - [ ] [警惕！图片藏毒，AI代码审查被绕过：CSA揭秘GhostCommit新型供应链攻击](https://mp.weixin.qq.com/s/5kcQecKD_3hzuZ6QsdUEUQ) - [ ] [盛邦安全携运营商安全方案亮相曼谷亚太网络安全峰会](https://mp.weixin.qq.com/s/N6TY1BHAcAzYYX2j8EJaPA) - [ ] [信关站揭秘：卫星互联网如何接入地面骨干网？](https://mp.weixin.qq.com/s/p8dvy0-ncwrNDkh071TFcA) - [ ] [OPPO Reno16 AI键正确设置教程！开启满血AI，效率直接拉满](https://mp.weixin.qq.com/s/zRx0ibX-hIXrssYFSGaCZQ) - [ ] [一封来自海南国际商业航天发射有限公司的感谢信](https://mp.weixin.qq.com/s/fcraUM4lhdKxzmyxcDWvwA) - [ ] [mumu模拟器没得账号只能脱机用了](https://mp.weixin.qq.com/s/amhaY3XySeQp8dWR06LcnQ) - [ ] [安全可控丨工信部等四部门印发《关于推动互联网基础资源高质量发展的指导意见》](https://mp.weixin.qq.com/s/uU4SX92vXCgRtCewWSqCTw) - [ ] [从“安全债”到“安全资产”，发电企业网安运营有了“尺子”——解读发电行业网络安全成熟度模型团标](https://mp.weixin.qq.com/s/CiKcI5lvgLuLvVOmqr1FQg) - [ ] [行业资讯：安恒核心技术人员发生调整](https://mp.weixin.qq.com/s/fbcVitxPsFBEpIE0Wd4cpA) - [ ] [AI快讯：DeepSeek再融资拟明年上市，Visa推AI金融助手，Anthropic呼吁勿因成本削减AI投入](https://mp.weixin.qq.com/s/ty4RdQ_8iQ6Prp_DHGIniQ) - [ ] [72小时全球黑客狂欢，APT+勒索+0Day齐炸](https://mp.weixin.qq.com/s/4OFzggw7m5k8bBG9yzcsRg) - [ ] [十二年，正青春 | 常行科技2026年中会议暨十二周年庆典圆满举行](https://mp.weixin.qq.com/s/oCe8mm_4lVJmWOW7ST_VtA) - [ ] [校企合作｜西安科技大学师生莅临四叶草安全开展专业认知实习](https://mp.weixin.qq.com/s/K9oZQ4I8mSyORuDPebt51w) - [ ] [关于组织申报国家网络空间安全国家科技重大专项第三批项目的通知（公开类）](https://mp.weixin.qq.com/s/Uki7KIWFeAN5vps601nOQQ) - [ ] [理事动态 | 达梦数据×海光信息×新华三×麒麟软件×新开普联合发布xa0教育行业全栈国产一体化解决方案](https://mp.weixin.qq.com/s/1kzTFfPSikj3RJi_xQ7csg) - [ ] [从情报实战到研判实战，第二期火力全开！| 第三期报名中](https://mp.weixin.qq.com/s/5t_4oY_84JTuZAP-5-DCMw) - [ ] [共探十五五数智防护路径｜观安信息亮相中国互联网大会 分享AI安全实践](https://mp.weixin.qq.com/s/Er2aCCYH4Zg4tGvXzuK63g) - [ ] [青藤 AI 夏令营：孩子们 5 天造出属于自己的 AI 作品](https://mp.weixin.qq.com/s/C2euJmdqWUPSMVY5D4SSGA) - [ ] [汽车ECU软件测试](https://mp.weixin.qq.com/s/UBZeCeTWe4QwiEX384NTjQ) - [ ] [MCU多核异构通信原理](https://mp.weixin.qq.com/s/C9bXuebA50Dvjy68e2YB1g) - [ ] [超高级别中欧盛会，震撼来袭！Humanoid Europe中欧人形机器人与物理AI科技大会定档11月慕尼黑](https://mp.weixin.qq.com/s/ZlnP9O_GQYCWmT44z0MbrQ) - [ ] [116领域获认可｜亚信安全入围第五期《数字安全护航技术能力全景图》](https://mp.weixin.qq.com/s/o0kEnz-7mTbukj-Wg4-JcQ) - [ ] [全国首批、级别最高！天融信获AI服务安全能力评定“建设+检测”双证](https://mp.weixin.qq.com/s/OdQWtRINjVVN-6AJASOliw) - [ ] [AI失控](https://mp.weixin.qq.com/s/DzTiDh7ENUYixzStr3q6jA) - [ ] [热点速览 | 每周网安大事件（20260706-20260713）](https://mp.weixin.qq.com/s/IZEyDGXml2vMwCLnZeEOgA) - [ ] [重磅招募｜南开大学2026 DataCon AI安全夏令营正式开启！顶尖高校+头部大厂大咖齐聚！](https://mp.weixin.qq.com/s/Yzz75DnZM3dWA6Ums9dK1w) - [ ] [意思是 Iphone 能用上 apple 智能了吗？](https://mp.weixin.qq.com/s/uLTHZaYRJJ2frJpiV9IsZw) - [ ] [2026新域新质创新大赛新闻发布会在京召开](https://mp.weixin.qq.com/s/tYIb2ghb0DRAgVGyBFhd-Q) - [ ] [国家网信办发布7款提供手机端侧生成式人工智能服务已备案信息](https://mp.weixin.qq.com/s/2RrsYSW0nITft0ZzawmCkg) - [ ] [安全简讯（2026.07.15）](https://mp.weixin.qq.com/s/qnX5Jpld_1igRCEA8Qokng) - [ ] [【漏洞通告】微软7月多个安全漏洞](https://mp.weixin.qq.com/s/UQzh3uPTGijQy9-lwA2TIA) - [ ] [【NCC合作招募】首批安全众测项目即将上线，诚邀种子企业共筑网安防线！](https://mp.weixin.qq.com/s/y7MtVGRK1nFUEBkB3zdemw) - [ ] [腾讯冠军+阿里前四，这次他把实战经验搬上了WAIC讲台](https://mp.weixin.qq.com/s/VGKaoat3DVeMd1Hdzr3AGQ) - [ ] [会员单位推介系列丨河南省德备通信科技有限公司](https://mp.weixin.qq.com/s/FNEPLgVq7TeHH0xKakTUVQ) - [ ] [TOPSRC 2026年第二季度奖励公告](https://mp.weixin.qq.com/s/I05iSfv77wVUOjIWerDc8A) - [ ] [57项细分领域：国舜科技实力登榜信通院第五期《数字安全护航技术能力全景图》](https://mp.weixin.qq.com/s/YwrMVXKN-t6q380EvfqCAQ) - [ ] [伊朗利用电信漏洞实时监视美军位置，疑似用于作战打击行动](https://mp.weixin.qq.com/s/5ZEAx6XMW-5zS4C7u6ZwmA) - [ ] [“金鹰计划”启动：美国政府依托前沿AI构建漏洞发现与修复协同体系](https://mp.weixin.qq.com/s/DVNwLvLl4uFB-nhPshsU8A) - [ ] [快手账号专测启动！｜最高20万奖励](https://mp.weixin.qq.com/s/VTYsGbQVFQXsKiP8mXYHFg) - [ ] [2026湖北大学招聘非编特岗人员公告（网安岗）](https://mp.weixin.qq.com/s/4-vgDF8ZllJljWZLH08dsQ) - [ ] [雄安场景汇网安赛：天融信连续3届大满贯，2026互联网安全赛道夺魁！](https://mp.weixin.qq.com/s/mAhJb1Lif0tpQksqk6bYUA) - [ ] [天融信：构建“自制-自知-自治”数据安全闭环，让AI搭子更靠谱](https://mp.weixin.qq.com/s/oGPJwLymSerumsp9lIRJ1Q) - [ ] [iOS 26.6 Beta5突然更新！版本号反常跳级，正式版近在眼前](https://mp.weixin.qq.com/s/mqaJELSAOJ62A0D8-dm_zg) - [ ] [本周回顾：ShareFile 威胁、Citrix Bleed 2 勒索软件、AI 编码攻击及更多](https://mp.weixin.qq.com/s/KMwKIf6-BVNz8_NmkthZ0w) - [ ] [【勒索预警】新勒索家族 OROVA 出现](https://mp.weixin.qq.com/s/2X-2kkZREyqKVBQeDxSVVg) - [ ] [协会动态 | 2026嘉兴市网络与信息安全管理员技能竞赛在平湖举办](https://mp.weixin.qq.com/s/7wGiaSfawnqMiVm65orqSg) - [ ] [Al x Cybersecurity Challenge香港人工智能网络安全挑战赛wp(Miscellaneous全)](https://mp.weixin.qq.com/s/W_Ee-Uvqe74g3HglMWvDqg) - [ ] [合规先行、安全可控：大模型与 AI 智能体安全检测全流程解析](https://mp.weixin.qq.com/s/J4h_4TBfMx0L-MjTtwOWIQ) - [ ] [今日，AI拟人化智能体强监管时代来临：政策解读、行业变局与合规路径](https://mp.weixin.qq.com/s/uRLp8S1fULQnIlMHwxVqSA) - [ ] [2026年9月起Microsoft Entra ID将通行密钥设为默认认证，逐步淘汰短信语音MFA；美国国防部暂停网络安全成熟度认证第二阶段强制审核| 牛览](https://mp.weixin.qq.com/s/O9lOOxMRce4BlfbkBNOqMw) - [ ] [7月社区投稿活动 | 漏洞挖掘/AI渗透](https://mp.weixin.qq.com/s/OX6LBRFhJwuAeTW17sd_7w) - [ ] [法治在线：网警严打涉汛等涉灾网络谣言](https://mp.weixin.qq.com/s/f9u4-PH_YqPMM7lFDGl5Rg) - [ ] [倒计时1天｜相约2026网络安全创新发展大会](https://mp.weixin.qq.com/s/t0bmZXKm4hTWuERq45L0pw) - [ ] [动态｜《中国互联网发展报告2026》正式发布](https://mp.weixin.qq.com/s/lrfR5LQVemefTyxc6MpdEA) - [ ] [网络安全日报 | 2026-07-15](https://mp.weixin.qq.com/s/5i0uzkCgYM2QiPvZDojRRQ) - [ ] [腾讯云 x 万得：为万得AI构筑三层安全防线](https://mp.weixin.qq.com/s/-BKWJ3zJMcyUzUute1dkMg) - [ ] [威胁预警：不法站点借 2026 世界杯开展非法转播与恶意软件分发攻击](https://mp.weixin.qq.com/s/Jk4mxd1paP6H79dqrQswbQ) - [ ] [重庆银行招架构规划岗，涉AI规划、技术路线选型、技术研究等](https://mp.weixin.qq.com/s/QYJhpNpJbq8vwdXEmjqQuw) - [ ] [7月15日高危CVE漏洞速报](https://mp.weixin.qq.com/s/Glwk6X_Akq3BtXaUeSslkQ) - [ ] [持证刚需｜CISP-AISS第二期8.26开班，席位抢先锁定](https://mp.weixin.qq.com/s/387FbG-43SIGfGJFEWkcmw) - [ ] [30个重大问题、难题发布！“AI时代数字系统网络韧性设计范式变革”等技术问题上榜（附名单）](https://mp.weixin.qq.com/s/_MLoa_7kRubx7B8GNE888A) - [ ] [科技 | 宇树机器人首次操刀活体手术](https://mp.weixin.qq.com/s/--g4vKaIJE8gD1FbGBwUSQ) - [ ] [iPhone自带功能查台风路径！不用下载APP，实时看动向](https://mp.weixin.qq.com/s/O81a0QY5WtdiWVtuOReXHQ) - [ ] [《国家网络身份认证公共服务管理办法》实施一周年 筑牢数字屏障守护公民个人身份信息安全](https://mp.weixin.qq.com/s/rci2XoTokL0YL6D_E-EIXg) - [ ] [7 月补天战神榜开启！赏金发放，荣誉就位！](https://mp.weixin.qq.com/s/2b30HVMUPZDbBe64tULdXQ) - [ ] [全域项目充足｜长期驻场 / 短期冲刺岗位同步招募](https://mp.weixin.qq.com/s/qiBRbP_yztk9VG_FM2RIYA) - [ ] [【NCC合作招募】安全众测即将上线，诚邀种子企业共筑网安防线！](https://mp.weixin.qq.com/s/ZdYvWi3qIC2Sj0pEbXcLLw) - [ ] [LOLBins 资源汇总](https://mp.weixin.qq.com/s/jUhg-y8WTOTFEAt-TU0UxA) - [ ] [史诗级安全扫描工具降临！4900+漏洞覆盖重新定义安全边界](https://mp.weixin.qq.com/s/UTmUPTETr9bT-395dX8vEw) - [ ] [370 万个假 OAuth ID 扫描 200 万企业用户：微软身份系统的信息泄露攻击](https://mp.weixin.qq.com/s/Ecx-8QcOfyaJO-MDYJmhIw) - [ ] [微软认证的UEFI引导程序，反倒成了绕过安全启动的捷径](https://mp.weixin.qq.com/s/j0E951MGgS3fuTLyVjeb-g) - [ ] [这下从脚本小子变成模型小子了](https://mp.weixin.qq.com/s/11C7wouJnqe7JIo7PRzAhA) - [ ] [2026 密码技术应用员四级考试即将启动](https://mp.weixin.qq.com/s/51CQe7b_NxXf8OmdjojuXQ) - [ ] [hvv 2026 - 今年攻防演练的新变量：WAF 看不见，后端却执行了](https://mp.weixin.qq.com/s/IGYpjaeqhJZvuYHb-HcYmw) - [ ] [地平线机器人：关键转折期的平台型标的机遇](https://mp.weixin.qq.com/s/wrAWlQ-Gc3Xes1he-gwnng) - [ ] [从封闭孤岛到开放协同，传统 SCADA/HMI 与现代开源 AIoT 工业物联网平台的较量，插件式架构，兼容 Modbus、OPC、MQTT 协议](https://mp.weixin.qq.com/s/HxHvXuVVzvm5j1x-rLkgdQ) - [ ] [网安原创文章推荐【2026/7/14】](https://mp.weixin.qq.com/s/HhLRg7a09K2sN3ael-Z5aA) - [ ] [我们的团队一直在努力！](https://mp.weixin.qq.com/s/ChbpVGsoIH-rkh38S_R8KQ) - [ ] [这也能卖？](https://mp.weixin.qq.com/s/0UC07QPcj8lhOvQwrMGY8g) - [ ] [sci论文一直投不中？大牛帮指导选刊投稿返修后，被拒的SCI全中了！](https://mp.weixin.qq.com/s/ObFjFagSst3qSe6kW6ziuA) - [ ] [通过UDP/IP上的MPLS实现确定性网络（DetNet）数据包复制、消除和排序功能（PREOF）](https://mp.weixin.qq.com/s/5Ue2Ukvv48z6c1DGY_svLA) - [ ] [【热点安全风险】7月15日 | Microsoft正在将更多AI辅助发现的安全修复纳入Patch Tuesday节奏](https://mp.weixin.qq.com/s/dUwT_0wXTy91V4pGLxTkYw) - [ ] [Web3智能合约安全漏洞检测工具](https://mp.weixin.qq.com/s/ylUhqNEMjPDfS4lul9peig) - [ ] [深圳龙岗打掉特大荐股引流诈骗团伙，抓获247人，冻结涉案资金2408万元](https://mp.weixin.qq.com/s/qcG0XaiL9myO65ecbfQ_yQ) - [ ] [资阳警方打掉多个GOIP电诈团伙，抓获21名涉案人员，最小9人系未成年人](https://mp.weixin.qq.com/s/QFZTErsRb9OIikpppRnJsQ) - [ ] [成都公安亮剑专项行动公布十大典型案例，抓获电信诈骗5148人，追赃挽损1875万元](https://mp.weixin.qq.com/s/U7iVVrpA7DDJlqCQZYXcQw) - [ ] [CNNVD通报OpenClaw多个安全漏洞](https://mp.weixin.qq.com/s/6ORZfXD31yoXd1F89Wljgg) - [ ] [【竞赛通知】第四届全国大学生开源情报数据采集与分析挑战专项](https://mp.weixin.qq.com/s/ahGzvJGIWtdMZLK-OD992g) - [ ] [零成本搭建AI短剧全流程工作台🔥](https://mp.weixin.qq.com/s/QYY-c6HEZ2W_GoJa4NVY_A) - [ ] [kalidroid在手机上运行kali linux无需root](https://mp.weixin.qq.com/s/sWEKEhToNLqlpdFXyEXdwA) - [ ] [分享图片](https://mp.weixin.qq.com/s/OIH3I7uQAxD7HmoaqHCb6g) - [ ] [传统培训体系正在失效，当员工成长速度超越组织学习能力](https://mp.weixin.qq.com/s/wTGx0jdPhesbyAj2YUCTZA) - Tenable Blog - [ ] [CVE-2026-15409, CVE-2026-15410: SonicWall SMA 1000 zero-day vulnerabilities exploited in the wild](https://www.tenable.com/blog/cve-2026-15409-cve-2026-15410-sonicwall-sma-1000-zero-day-vulnerabilities-exploited-in-the) - [ ] [Understanding Claude Tag’s access model in Slack and how to configure it securely](https://www.tenable.com/blog/claude-tag-slack-access-model) - [ ] [5 reasons to bring application security data into your exposure management platform](https://www.tenable.com/blog/application-security-data-exposure-management-integration) - ElcomSoft blog - [ ] [A12 usbliter8 BootROM sigpatches](https://blog.elcomsoft.com/2026/07/a12-usbliter8-bootrom-sigpatches/) - Recent Commits to cve:main - [ ] [Update Wed Jul 15 12:24:19 UTC 2026](https://github.com/trickest/cve/commit/8600ac0c091970175de0b53d9682f50858aef8dc) - Microsoft Security Blog - [ ] [Turning threat intelligence into decisive action with Defender Experts](https://www.microsoft.com/en-us/security/blog/2026/07/15/turning-threat-intelligence-into-decisive-action-with-defender-experts/) - Private Feed for M09Ic - [ ] [anthropics released v2.1.211 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.211) - [ ] [mgeeky starred badlogic/pi-skills](https://github.com/badlogic/pi-skills) - [ ] [bolucat released 202607152120 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202607152120) - [ ] [mgeeky starred badlogic/sitegeist](https://github.com/badlogic/sitegeist) - [ ] [PeiQi0 starred mjunaidca/polymarket-skills](https://github.com/mjunaidca/polymarket-skills) - [ ] [esrrhs contributed to esrrhs/fakelua](https://github.com/esrrhs/fakelua/pull/247) - [ ] [itm4n released 2026.07.15-1 at itm4n/PrivescCheck](https://github.com/itm4n/PrivescCheck/releases/tag/2026.07.15-1) - [ ] [Mr-xn starred DietrichGebert/ponytail](https://github.com/DietrichGebert/ponytail) - [ ] [OpenAEV-Platform released 2.260715.0 at OpenAEV-Platform/openaev](https://github.com/OpenAEV-Platform/openaev/releases/tag/2.260715.0) - [ ] [liamg contributed to infracost/actions](https://github.com/infracost/actions/pull/272) - [ ] [RuoJi6 released fork-v0.5.57-audit.1 at RuoJi6/dbx-audit](https://github.com/RuoJi6/dbx-audit/releases/tag/fork-v0.5.57-audit.1) - [ ] [liamg contributed to infracost/vcs](https://github.com/infracost/vcs/pull/22) - [ ] [shmilylty starred Fausto-404/AlterHive](https://github.com/Fausto-404/AlterHive) - [ ] [su18 forked su18/AlterHive from Fausto-404/AlterHive](https://github.com/su18/AlterHive) - [ ] [su18 starred Fausto-404/AlterHive](https://github.com/Fausto-404/AlterHive) - [ ] [pydantic released v2.10.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v2.10.0) - Hacking Articles - [ ] [Windows Privilege Escalation: SeTcbPrivilege](https://www.hackingarticles.in/windows-privilege-escalation-setcbprivilege/) - Horizon3.ai - [ ] [Cyber Resilience in the Age of AI-Driven Warfare](https://horizon3.ai/downloads/whitepapers/cyber-resilience-ai-driven-warfare/) - [ ] [Cybersecurity Needs a New Operating Model](https://horizon3.ai/intelligence/blogs/cybersecurity-new-operating-model/) - [ ] [Horizon3.ai Joins Anthropic’s Project Glasswing to Help Defend Critical Infrastructure with the Attacker’s Perspective](https://horizon3.ai/news/press-release/horizon3-ai-joins-anthropics-project-glasswing/) - Sandfly Security Blog RSS Feed - [ ] [Sandfly Security Is Coming to Black Hat USA 2026](https://sandflysecurity.com/blog/sandfly-is-coming-to-black-hat-usa-2026) - [ ] [Sandfly 5.8 - Agentless Response and SSH Key Management](https://sandflysecurity.com/blog/sandfly-58-agentless-response-and-ssh-key-management) - [ ] [Deprecation of Linux Kernels Prior to 3.2 in Sandfly 5.8](https://sandflysecurity.com/blog/deprecation-of-linux-kernels-prior-to-32-in-sandfly-58) - GuidePoint Security - [ ] [The CMMC Phase II Suspension: A Pause on Paperwork, Not a Pass on Security](https://www.guidepointsecurity.com/blog/cmmc-phase-ii-suspension-risk-based-cybersecurity/) - Reverse Engineering - [ ] [IDA Pro 9.4 released](https://www.reddit.com/r/ReverseEngineering/comments/1uxl039/ida_pro_94_released/) - [ ] [Automatically Attacking Software Reverse Engineering AI Agents](https://www.reddit.com/r/ReverseEngineering/comments/1ux10w6/automatically_attacking_software_reverse/) - [ ] [Anatomy of a CUDA Binary](https://www.reddit.com/r/ReverseEngineering/comments/1uxdu8a/anatomy_of_a_cuda_binary/) - [ ] [Exploiting Random Number Generation](https://www.reddit.com/r/ReverseEngineering/comments/1ux68qs/exploiting_random_number_generation/) - Securelist - [ ] [OkoBot: new sophisticated malware framework targets cryptocurrency users](https://securelist.com/okobot-framework-targets-cryptocurrency-wallets/120660/) - Malwarebytes - [ ] [Claude for Chrome flaw could let rogue extensions access your Gmail](https://www.malwarebytes.com/blog/news/2026/07/claude-for-chrome-flaw-could-let-rogue-extensions-access-your-gmail) - [ ] [July 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-days](https://www.malwarebytes.com/blog/bugs/2026/07/july-2026-patch-tuesday-fixes-622-microsoft-cves-including-three-zero-days) - [ ] [This fake Apple app can unlock your Mac’s password vault](https://www.malwarebytes.com/blog/threat-intel/2026/07/this-fake-apple-app-can-unlock-your-macs-password-vault) - 绿盟科技技术博客 - [ ] [“首发，前沿大模型突破渗透测试新范式”——绿盟智能渗透测试系统2.0正式发布](https://blog.nsfocus.net/%e9%a6%96%e5%8f%91%ef%bc%8c%e5%89%8d%e6%b2%bf%e5%a4%a7%e6%a8%a1%e5%9e%8b%e7%aa%81%e7%a0%b4%e6%b8%97%e9%80%8f%e6%b5%8b%e8%af%95%e6%96%b0%e8%8c%83%e5%bc%8f-%e7%bb%bf/) - HackerNews - [ ] [美国财政部制裁 VPN 提供商和 Cryptor 卖家，其背后是数十亿美元的勒索软件损失](http://0.0.0.0:8080/post/64470) - [ ] [研究 85 款加密钱包扩展程序发现地址泄露和跨站追踪风险](http://0.0.0.0:8080/post/64469) - [ ] [11 个旧的微软签名 Linux UEFI Shim 可让攻击者绕过 Secure Boot](http://0.0.0.0:8080/post/64468) - [ ] [研究人员称 Claude for Chrome 漏洞可让恶意扩展程序触发 Gmail 读取](http://0.0.0.0:8080/post/64467) - [ ] [LabubaRAT 伪装成 NVIDIA 软件控制 Windows 主机](http://0.0.0.0:8080/post/64466) - [ ] [RabbitMQ 漏洞可能泄露 OAuth 密钥并暴露跨租户队列元数据](http://0.0.0.0:8080/post/64465) - 奇客Solidot–传递最新科技情报 - [ ] [IBM 称客户倾向于采购 AI 硬件而不是大型机](https://www.solidot.org/story?sid=84842) - [ ] [美国众议院通过了永久性夏令时法案](https://www.solidot.org/story?sid=84841) - [ ] [特朗普政府禁止刚果的美国公民回国](https://www.solidot.org/story?sid=84839) - [ ] [第二次怀孕会以新方式改变大脑](https://www.solidot.org/story?sid=84838) - [ ] [纽约州禁止建造大型数据中心一年](https://www.solidot.org/story?sid=84837) - [ ] [Linux 内核不反对使用 AI 工具](https://www.solidot.org/story?sid=84836) - [ ] [微软周二例行安全更新修复了 570 个漏洞](https://www.solidot.org/story?sid=84835) - [ ] [宇航员首次在太空照 X 光](https://www.solidot.org/story?sid=84834) - [ ] [诉讼指控 Meta 用 AI 而不是人类做出裁员决定](https://www.solidot.org/story?sid=84833) - [ ] [一加准备退出美国和欧洲市场](https://www.solidot.org/story?sid=84832) - daniel.haxx.se - [ ] [Workshop Basel day two](https://daniel.haxx.se/blog/2026/07/15/workshop-basel-day-two/) - 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台 - [ ] [欧盟提款机再被罚：谷歌或被罚款数亿欧元](https://blog.upx8.com/%E6%AC%A7%E7%9B%9F%E6%8F%90%E6%AC%BE%E6%9C%BA%E5%86%8D%E8%A2%AB%E7%BD%9A-%E8%B0%B7%E6%AD%8C%E6%88%96%E8%A2%AB%E7%BD%9A%E6%AC%BE%E6%95%B0%E4%BA%BF%E6%AC%A7%E5%85%83) - Dhole Moments - [ ] [The Long Tail of Work Left Until ActivityPub Has E2EE](https://soatok.blog/2026/07/15/the-long-tail-of-work-left-until-activitypub-has-e2ee/) - 黑鸟 - [ ] [SS7 漏洞与广告技术，如何盯上美军中东人员](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451187692&idx=1&sn=3bbdbc69fac5f16ca1fc30e077e770c9) - Black Hills Information Security, Inc. - [ ] [KAPE 101: A Kroll Artifact Parser and Extractor Cheatsheet](https://www.blackhillsinfosec.com/kape-cheatsheet/) - 我的安全视界观 - [ ] [【AI复盘】浏览器扩展供应链投毒事件](https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487819&idx=1&sn=0c6765ea8315c846c474203c681e07de) - 同程旅行安全应急响应中心 - [ ] [2026端午节活动积分兑换公告](https://mp.weixin.qq.com/s?__biz=MzI4MzI4MDg1NA==&mid=2247485444&idx=1&sn=b3c7216b6edaf9c1b707085d74569825) - 威努特安全网络 - [ ] [国标解读：《网络安全技术 网络空间安全图谱要素表示要求》](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651143034&idx=1&sn=91e54f809827619b6117d3f89f6c34c4) - 代码卫士 - [ ] [SonicWall：立即修复已遭0day攻击利用的 SMA1000 漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526630&idx=1&sn=3f9411edee6fd9805cd5ac7a7991a3c2) - [ ] [微软7月补丁星期二修复史上数量最多的漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526630&idx=2&sn=0dd3f439ec51453fe46eef04eb0970fe) - 安全内参 - [ ] [伊朗利用电信漏洞实时监视美军位置，疑似用于作战打击行动](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516266&idx=1&sn=4311301b6135b944202304ed3ecd2e55) - [ ] [“金鹰计划”启动：美国政府依托前沿AI构建漏洞发现与修复协同体系](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516266&idx=2&sn=ac47a71404723b44c902e23269251553) - 奇安信威胁情报中心 - [ ] [一句假验证码，一条真命令：ClickFix 如何取代钓鱼邮件成为今年最暴利的渗透手段](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247519497&idx=1&sn=b44b552e5cf0d52bead00e382aaaf56e) - 绿盟科技研究通讯 - [ ] [绿盟科技与中山大学车联网安全研究成果入选国际顶刊TIFS](https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247500068&idx=1&sn=bffcd3a8f147ffb99aa0cd01cb3b1ca8) - 天黑说嘿话 - [ ] [【88vip高返助手使用攻略】购物返利机器人，支持淘宝、京东、拼多多、抖音、唯品会等平台领隐藏优惠~](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486235&idx=1&sn=273a2b203a12f0d4d681c1862fb40f4c) - DataCon大数据安全分析竞赛 - [ ] [重磅招募｜南开大学2026 DataCon AI安全夏令营正式开启！顶尖高校+头部大厂大咖齐聚！](https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247489571&idx=1&sn=bfbdafb35464e7f71a87359ff9333fb3) - 看雪学苑 - [ ] [Android ARM64 内核态内存访问与隐蔽交互机制逆向分析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617607&idx=1&sn=16b716cce03ecf76194c87154fe32799) - [ ] [微软史诗级补丁日：622个漏洞、两个在野0Day](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617607&idx=2&sn=7521a846e88151a555ba4193940755c8) - [ ] [【可试看】冰与火的战歌：Windows内核攻防实战](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617607&idx=3&sn=a746de994e22be84c7be16de2705aabf) - 安全圈 - [ ] [【安全圈】日本最大出租车公司被黑客撂倒](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077847&idx=1&sn=01464f271690d2556cf132a1ba859201) - [ ] [【安全圈】160万人的Chrome扩展在偷偷监控你](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077847&idx=2&sn=7bf079ba48b4e4b3cb6e6d5c01ec3489) - [ ] [【安全圈】美国财政部制裁 VPN 提供商和 Cryptor 卖家，其背后是数十亿美元的勒索软件损失](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077847&idx=3&sn=7d6de033b2c394d67973bc97d825e77a) - 奇安信 CERT - [ ] [微软7月补丁日多个产品安全漏洞风险通告：2个在野利用、43个紧急漏洞](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506617&idx=1&sn=c75e95b55101fd5c8ab87eee2f9bbde4) - 默安科技 - [ ] [从5700条告警到11条真实威胁：默安智能体降噪与研判实践](https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247501887&idx=1&sn=9965e1adbf76962f630446dea24c2c50) - 安全牛 - [ ] [今日，AI拟人化智能体强监管时代来临：政策解读、行业变局与合规路径](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141972&idx=1&sn=e9413b7878b530acfc1a829669a31095) - [ ] [2026年9月起Microsoft Entra ID将通行密钥设为默认认证，逐步淘汰短信语音MFA；美国国防部暂停网络安全成熟度认证第二阶段强制审核| 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141972&idx=2&sn=ce982c92cc3a693befea3e95bc5211f6) - 数世咨询 - [ ] [勒索最新趋势：不加密只盗窃 一家美国政府机构支付了100万美元赎金](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543504&idx=1&sn=9c7c1241cde1bf5a559405bbca437022) - 青藤云安全 - [ ] [青藤 AI 夏令营：孩子们 5 天造出属于自己的 AI 作品](https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650851572&idx=1&sn=999a32b81a0b5e689125a656d6802457) - 极客公园 - [ ] [你选择的基础架构，决定你能长成什么样的 AI 公司](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653110598&idx=1&sn=1b906a7ba56d18ce877374d39f9d5a1b) - [ ] [Xmax AI 发布 X2.0，把视频变成可以「玩」的界面](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653110540&idx=1&sn=3284eec8b7872981af4ee1c067201951) - [ ] [OpenAI 首款硬件或为无屏智能音箱；梁文峰成 AI 公司新首富；内存涨价利好，iPhone 在华市场份额大幅提高 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653110581&idx=1&sn=98da92ccba863bf32d98494883a5ef01) - 微步在线 - [ ] [微步参与编制，威胁信息格式国家标准发布！](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650187123&idx=1&sn=b28cdfd7899601b1f8d05e2301f6d86c) - 电子物证 - [ ] [【电子数据取证：取从现场到法庭，数据需走过六道关】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651049046&idx=1&sn=0c7d4658eabdfab37c121fc5431182b0) - [ ] [数据恢复不只是“扫描”和“导出”：给鉴定人的通识课](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651049046&idx=2&sn=3a65fef58f2ed3f590c4bafc193875f9) - 中国信息安全 - [ ] [“首发，前沿大模型突破渗透测试新范式”——绿盟智能渗透测试系统2.0正式发布](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264678&idx=1&sn=82934d320435d77274f98e5263b731a0) - [ ] [前沿 | 夯实“数字丝绸之路”路基 创新网络与数据安全检测评估机制](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264678&idx=2&sn=64f4cacb264596c3e02f53b7e1d23b4b) - [ ] [专家解读 | 建立数据产权登记制度 夯实数据基础制度基石](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264678&idx=3&sn=987882b4f62ca2c19766fb936a5a73ec) - [ ] [通知 | 网安标委就《网络安全技术 SM9标识密码算法 第2部分：算法》（征求意见稿）等4项国家标准征求意见](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264678&idx=4&sn=b3b23f68647c94ecf7d7fb2b12e59cf2) - [ ] [关注 | 未成年人上网，警惕这些新问题](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264678&idx=5&sn=d9878f2aa11d3706260949394357616a) - 网络空间安全科学学报 - [ ] [中国科协发布 | 2026前沿科学问题](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247507905&idx=1&sn=5cf0a70ffc9dacb0ca26edde65426772) - 火绒安全 - [ ] [抽奖啦 | “绒”携清风 安然度伏](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247535346&idx=1&sn=c9866bc62bb610d593773915cee815ca) - [ ] [2026-07微软漏洞通告](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247535346&idx=2&sn=85d009b76b2a3781a0547b62387c2759) - [ ] [火绒小问答--「个人版」近期top问题解答](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247535346&idx=3&sn=8ec20db2fcfb0c820c931f7a9528346b) - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247535346&idx=4&sn=8aea2e80990e43b908d6c998a3c71cb2) - 复旦白泽战队 - [ ] [AgentGuard 2.1 上线！一站式落地《智能体部署使用安全指引》](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247499339&idx=1&sn=7d331ee6224bc729cebdfc5cb9f1a299) - 补天平台 - [ ] [7 月补天战神榜开启！赏金发放，荣誉就位！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510855&idx=1&sn=e086bc7f122ce953ec35e9bc2d936208) - 嘶吼专业版 - [ ] [XCon2026议题||一触即溃：AI赋能的LLM推理引擎模糊测试及基础设施漏洞挖掘](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587754&idx=1&sn=d648e4127937ada23eafb8c38e3332f1) - 情报分析师 - [ ] [你在社交媒体上泄露了哪些情报？一个自查清单](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650568701&idx=1&sn=b0f5898161fab66125c4cc5a3ccd346e) - [ ] [FBI的最近调查引发对格雷厄姆猝死的更多疑问](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650568701&idx=2&sn=a9f8a2fca6b4b931e7bec29314b34352) - 慢雾科技 - [ ] [TG 账号失守、钱包被调包，macOS 木马如何突破防线？](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247505424&idx=1&sn=449c6c32c2d18a01f04455f6c1ec03b8) - OPPO安全中心 - [ ] [【奖励公告】2026年6月及Q3](https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494979&idx=1&sn=a32c3aff126256cd474871c0b282c93b) - 深信服千里目安全技术中心 - [ ] [微软补丁日安全通告|7月份](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247526062&idx=1&sn=7e2b706ae953a771a05d02133c0a8cd6) - [ ] [网络安全信息与动态周报2026年第28期（7月6日-7月12日）](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247526062&idx=2&sn=1cf59c53568c2e9499e0d4f8e4333d0f) - 墨菲安全 - [ ] [8月深圳线下沙龙，继续聊AI和企业安全](https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488566&idx=1&sn=67b966bd43affb3e05f211c044d0cbf1) - 360数字安全 - [ ] [300余项隐患清零！360"破阵子"渗透测试智能体为国家重点行业做安全体检](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247586594&idx=1&sn=58babab8123ebda61c036094d78d4d71) - ICT Security Magazine - [ ] [Risposta agli incidenti: il nuovo approccio del NIST SP 800-61](https://www.ictsecuritymagazine.com/cyber-security/risposta-agli-incidenti-nist-800-61/) - 安全419 - [ ] [安全 419 | 一周国际网安资讯：AI代理成新攻击面 OAuth滥用席卷企业云](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247554058&idx=1&sn=0575176be0effd897a5ec18ba416312f) - 国家互联网应急中心CNCERT - [ ] [网络安全信息与动态周报2026年第28期（7月6日-7月12日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501892&idx=1&sn=7c375e18a0aa83de3839d8b8875be979) - Have I Been Pwned latest breaches - [ ] [Fluke - 821,100 breached accounts](https://haveibeenpwned.com/Breach/Fluke) - [ ] [Goose Creek - 6,574,121 breached accounts](https://haveibeenpwned.com/Breach/GooseCreek) - SANS Internet Storm Center, InfoCON: green - [ ] [ISC Stormcast For Wednesday, July 15th, 2026 https://isc.sans.edu/podcastdetail/10008, (Wed, Jul 15th)](https://isc.sans.edu/diary/rss/33158) - [ ] [Recent DShield SIEM Update, (Tue, Jul 14th)](https://isc.sans.edu/diary/rss/33156) - 白帽子章华鹏 - [ ] [8月深圳线下沙龙，继续聊AI和企业安全](https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650239125&idx=1&sn=53882370beaa555908bb96a305075108) - Troy Hunt's Blog - [ ] [Weekly Update 512: IoT Lockout Fail](https://www.troyhunt.com/weekly-update-512/) - 360威胁情报中心 - [ ] [疑似APT-C-26（Lazarus）组织升级监控程序的攻击行动分析](https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247508744&idx=1&sn=889208d4f2064dc4dfe6edf3649a73b5) - TorrentFreak - [ ] [EU’s Top Court: Geo-Blocking Protects Publishers in Copyright Disputes, VPNs Not Liable](https://torrentfreak.com/eus-top-court-geo-blocking-protects-publishers-in-copyright-disputes-vpns-not-liable/) - The Hacker News - [ ] [TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development](https://thehackernews.com/2026/07/tuxbot-v3-evolution-shows-signs-of-llm.html) - [ ] [OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps](https://thehackernews.com/2026/07/okobot-malware-framework-injects-seed.html) - [ ] [Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws](https://thehackernews.com/2026/07/firefox-chrome-adobe-and-vmware-updates.html) - [ ] [SASE Has An AI Blind Spot. Inspecting Packets Is No Longer Enough.](https://thehackernews.com/2026/07/sase-has-ai-blind-spot-inspecting.html) - [ ] [Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday](https://thehackernews.com/2026/07/researcher-drops-new-windows-zero-day.html) - [ ] [New Webinar: Closing the Approval Gap in AI-Era Ad Tech](https://thehackernews.com/2026/07/new-webinar-closing-approval-gap-in-ai.html) - [ ] [Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution](https://thehackernews.com/2026/07/cursor-flaw-lets-malicious-cloned.html) - [ ] [Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware](https://thehackernews.com/2026/07/compromised-asyncapi-npm-packages.html) - [ ] [Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands](https://thehackernews.com/2026/07/two-sonicwall-sma-1000-zero-days.html) - NetSPI - [ ] [ADPathFinder: OpenGraph Attack Path Mapping in BloodHound CE](https://www.netspi.com/blog/technical-blog/network-pentesting/adpathfinder-opengraph-attack-path-mapping-in-bloodhound-ce/) - Deeplinks - [ ] [California Steps Back From Dangerous Expansion of its Age-Gating Law](https://www.eff.org/deeplinks/2026/07/california-steps-back-dangerous-expansion-its-age-gating-law) - [ ] [Most Smart Watches, Rings, and Bands Lack Basic Transparency Reports and Key Privacy Features](https://www.eff.org/deeplinks/2026/07/most-smart-watches-rings-and-bands-lack-basic-transparency-reports-and-key-privacy) - [ ] [🚫 Don't Let Congress Age-Gate the Internet | EFFector 38.13](https://www.eff.org/deeplinks/2026/07/dont-let-congress-age-gate-internet-effector-3813) - Instapaper: Unread - [ ] [Volume Shadow Copies in Windows Forensics Recovering Deleted and Wiped Artifacts in Incident Response](https://digitalinvestigator.blogspot.com/2026/07/volume-shadow-copies-in-windows.html) - [ ] [Windows BitLocker 0‑Day Vulnerability Allows Hackers to Bypass Security Feature](https://cybersecuritynews.com/windows-bitlocker-0-day-vulnerability-2/) - Schneier on Security - [ ] [A Video Screen That Is Also a Camera](https://www.schneier.com/blog/archives/2026/07/a-video-screen-that-is-also-a-camera.html) - www.theregister.com - Articles - [ ] [CISA sounds alarm over trio of exploited SharePoint flaws](https://www.theregister.com/security/2026/07/15/cisa-sounds-alarm-over-trio-of-exploited-sharepoint-flaws/5271814) - [ ] [Microsoft cancels Patch Tuesday for some Dell users over surprise shutdowns, overheating devices](https://www.theregister.com/os-platforms/2026/07/15/microsoft-cancels-patch-tuesday-for-some-dell-users-over-surprise-shutdowns-overheating-devices/5271691) - [ ] [LegacyHive: 'Bone-shattering' zero-day from Microsoft's serial tormentor not the haymaker that was promised](https://www.theregister.com/security/2026/07/15/microsofts-serial-tormentor-drops-legacyhive-0-day/5271723) - Security Affairs - [ ] [US and allied Governments’ Recommendations: Securing Network Devices Against Russian APT Groups](https://securityaffairs.com/195448/apt/us-and-allied-governments-recommendations-securing-network-devices-against-russian-apt-groups.html) - [ ] [Chaotic Eclipse Unveils LegacyHive Exploit Affecting Fully Patched Windows Systems](https://securityaffairs.com/195418/hacking/chaotic-eclipse-unveils-legacyhive-exploit-affecting-fully-patched-windows-systems.html) - [ ] [AsyncAPI npm Supply Chain Attack: Malware Injected Into Packages With 2 Million Weekly Downloads](https://securityaffairs.com/195395/security/asyncapi-npm-supply-chain-attack-malware-injected-into-packages-with-2-million-weekly-downloads.html) - [ ] [U.S. CISA adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/195383/security/u-s-cisa-adds-sonicwall-and-microsoft-flaws-to-its-known-exploited-vulnerabilities-catalog.html) - [ ] [SonicWall warns of active exploitation of two SMA 1000 zero-days](https://securityaffairs.com/195364/hacking/sonicwall-warns-of-active-exploitation-of-two-sma-1000-zero-days.html)
每日安全资讯（2026-07-16）