# 每日安全资讯（2026-04-14） - 醉卧烟雨's Blog - [ ] [腾讯dd Linux](https://blog.cctv.com.im/4276) - SecWiki News - [ ] [SecWiki News 2026-04-13 Review](http://www.sec-wiki.com/?2026-04-13) - Doonsec's feed - [ ] [[ 重要通知 ]—关于我们的知识星球!!](https://mp.weixin.qq.com/s/ieaCpTgwLjhFH2vjhk5hCA) - [ ] [CyberStrikeAI：批量任务不止排队——定时与一句话创建](https://mp.weixin.qq.com/s/dNytjXVmk9hjw9-5KDYtiA) - [ ] [撑起全球半壁RDP恶意扫描的塞舌尔离岸托管网络](https://mp.weixin.qq.com/s/L5wbws5VXHDdeXKzkA_yaA) - [ ] [IATF 16949: 2016 标准详解与实施（53）8.2.1.1 顾客沟通—-补充](https://mp.weixin.qq.com/s/LercGsnQkY0AhpZ3_MFrEQ) - [ ] [IATF 16949: 2016 标准详解与实施（52）8.2.1 顾客沟通](https://mp.weixin.qq.com/s/H9v59c1GW31SokltM-4dTQ) - [ ] [IATF 16949: 2016 标准详解与实施（51）8.1.2 保密](https://mp.weixin.qq.com/s/as4IKAkmPlTLIC3t_-6aYQ) - [ ] [人狠话多！周鸿祎硬刚DeepSeek攻击：能攻破360的黑客还没出生！](https://mp.weixin.qq.com/s/ZFVrL1pV3ocloqXuB5iLNg) - [ ] [Openclaw的应用（七）：pcap分析](https://mp.weixin.qq.com/s/C-NiTcGPlwPl-bxFVpOjEA) - [ ] [动态｜国务院令 公布《国务院关于产业链供应链安全的规定》（附全文）](https://mp.weixin.qq.com/s/6FwKJ-Urgm6VhVlvkRZYig) - [ ] [动态｜国家网信办等三部门联合印发《网络安全标识管理办法》（附全文）](https://mp.weixin.qq.com/s/71XVdi0-k04iOmiiXHWpqw) - [ ] [动态｜全国网安标委对《网络安全技术 物理不可克隆功能安全技术规范（征求意见稿）》等3项国家标准征求意见（附下载）](https://mp.weixin.qq.com/s/TrMo6y5u8zYiOtBH5w1u_Q) - [ ] [产业｜网安市场周度监测（2026-04-13）](https://mp.weixin.qq.com/s/ZT6bDbiyc6UE1ADtjWhDPg) - [ ] [运维vs开发vs网安 | 小白学IT更适合哪个？](https://mp.weixin.qq.com/s/AgzQJcXupUNMpzP_ChzrXQ) - [ ] [丝滑渗透测试之有趣的注册逻辑](https://mp.weixin.qq.com/s/17mVrWcnk4bafTDJx2CDeQ) - [ ] [华为N+1大反转！3天取消又恢复，离职员工直接多拿8万](https://mp.weixin.qq.com/s/YZWFQRYFufe3gHkLc3SF0Q) - [ ] [重温 “4.19” 重要讲话十周年系列(1) : 2026年安全运营实战人才 “菁英计划” 培训班启动会成功召开](https://mp.weixin.qq.com/s/ffpjfzx9JLwdoEwvruzveQ) - [ ] [CTFshow-Pwn堆利用-前置基础(135-141)](https://mp.weixin.qq.com/s/d7iPvd8jT16Fw0FEkbLynA) - [ ] [最新社交工程攻击：用 Facebook 加好友投递 RokRAT 远程木马](https://mp.weixin.qq.com/s/caz8nyiJ0cEptXNFXP8u0g) - [ ] [frida源码分析课程更新](https://mp.weixin.qq.com/s/KX90LwYvbDuPbbRpcSgEgA) - [ ] [AI 时代，哪些安全公司会赢，哪些会被挤出牌桌？](https://mp.weixin.qq.com/s/TSKryaa4kfzSq_fff7isMg) - [ ] [AI共学营 Day1实录：OpenClaw机器人\"去拽化\"，从叛逆到治愈。不泼你冷水的暖暖大白养成记](https://mp.weixin.qq.com/s/zYoJ1ViS4CdLIqgXiR4JNA) - [ ] [密码法治实践创新基地“4·15”活动通知｜共筑密码安全防线，护航数字安全发展](https://mp.weixin.qq.com/s/AzcaNmxe8fsCvrB2ynCgpQ) - [ ] [告别常规API网关转发：云函数隐匿 C2 新思路](https://mp.weixin.qq.com/s/PdEEwTLiSOw1DHc1iqGoyg) - [ ] [漏洞挖掘 | 一次数据库是Hive的SQL注入](https://mp.weixin.qq.com/s/mfrCvwyr2UigSC6vnjPTTw) - [ ] [XChat 4月17日上线：能下载，但99%的人用不了](https://mp.weixin.qq.com/s/V4ua22JLVZItv9_Ap0f3wg) - [ ] [我在 OSCP 考场上演18小时极限翻盘](https://mp.weixin.qq.com/s/ibperJHIEaEJheWY80mZxw) - [ ] [记一次渗透赌博棋牌APP](https://mp.weixin.qq.com/s/VIdVFiiLqiop9nju2AeLGA) - [ ] [某棋牌渗透记录](https://mp.weixin.qq.com/s/v5PInT5VuKtAXfWtx56q_A) - [ ] [巧用BP渗透BC](https://mp.weixin.qq.com/s/Uz_CwIUCFhDTHV3Kkhl41g) - [ ] [漏洞预警：LiteLLM未鉴权命令执行](https://mp.weixin.qq.com/s/rmLOTdxU2b_9kIJ9mQBKVQ) - [ ] [公有云、私有云，哪个更安全？](https://mp.weixin.qq.com/s/JhpRqKah2RtXjWUXqZ2MPw) - [ ] [【工业控制系统网络安全系列课程】第3课-工业控制系统的网络安全风险-用于防御攻击的被动和主动发现技术](https://mp.weixin.qq.com/s/3RTFwPN-_eiML4AEJgr_Tg) - [ ] [【工具】Copier-Plus：批量保存Burp报文](https://mp.weixin.qq.com/s/3jSK5Nya9YFExgeiehe0zA) - [ ] [玲珑安全第八期漏洞挖掘培训，不是“教过就行”，而是实打实“带会”](https://mp.weixin.qq.com/s/pbSUX7gtkvSBJWzNQZwIdw) - [ ] [MiniMax扔出一颗炸弹：这款开源大模型，是自己教出来的](https://mp.weixin.qq.com/s/7f3wqt6HRt6_8mVQ6Ht7cA) - [ ] [Openclaw的应用（六）：升级Openclaw和clawpanel面板](https://mp.weixin.qq.com/s/9jpZSp29-Mo0yEadFR55gA) - [ ] [向AI·茁壮生长丨2026年C3安全大会数字特刊](https://mp.weixin.qq.com/s/cYfIjh2OAfptnI-mdSUgXQ) - [ ] [关于开展“AI安全应用示范典型案例”征集的通知](https://mp.weixin.qq.com/s/upyFvNdV0RpLCI-WGldCbQ) - [ ] [Anthropic新模型颠覆网络安全：美英德政府加急评估影响，传统漏洞或不复存在](https://mp.weixin.qq.com/s/EWo9rapf7r-NAb9eVVYXnw) - [ ] [免费赠送 | 415国家安全日-安全意识科普海报](https://mp.weixin.qq.com/s/Z930625e7bv1-B4bKDb10Q) - [ ] [慢雾邀您共赴 2026 香港 Web3 嘉年华及多场行业盛会](https://mp.weixin.qq.com/s/UUVSlSIXYFadgaXVwmDILw) - [ ] [央视新闻 | AI换脸“以假乱真” 奇安信专家揭秘如何防范](https://mp.weixin.qq.com/s/eqCzxf-EGIWuGMCjHhcRLg) - [ ] [AI提效供应商被黑，至少十余家客户遭数据泄露及勒索攻击](https://mp.weixin.qq.com/s/70NVEE2JUK1RI3UGkKBwjg) - [ ] [安卓逆向 droids0-4题WP](https://mp.weixin.qq.com/s/eBEtzUm8orJrSp60Zmwijw) - [ ] [AGENTS](https://mp.weixin.qq.com/s/2cGKBo45RrETywkMNzLPHg) - [ ] [一键部署，开源免费！CowAgent企业级智能助理，支持MiniMax、GLM、Qwen、Kimi、豆包，具备自主思考、任务规划、长期记忆和技能扩展能力](https://mp.weixin.qq.com/s/qb8WbuToU37FnEaBQzRRbg) - [ ] [Android系统智能调试分析工具(专业版)V7.6](https://mp.weixin.qq.com/s/5XSvE06p1JGD8bDgiNViFA) - [ ] [Apache Tomcat 漏洞使加密拦截器绕过成为可能](https://mp.weixin.qq.com/s/id7KduNRt00R00JnKT2eFg) - [ ] [关键的WordPress插件漏洞让攻击者绕过认证并获得管理员访问权限](https://mp.weixin.qq.com/s/X_Dgl6iGIAZLdAE0x1GL-A) - [ ] [邮储银行大模型落地超260个应用场景，已开放24个通用AI能力！](https://mp.weixin.qq.com/s/6Vd1AQlA4joCyuWr78l_1w) - [ ] [AI快讯：荣耀与字节跳动接洽“豆包手机”合作，阿里宣布全力推进“智能体经济”](https://mp.weixin.qq.com/s/9nYIvBxpqitMarsRQs7y6Q) - [ ] [长江财险智能客服系统采购项目供应商征集](https://mp.weixin.qq.com/s/UgrQX14-hZe7tivtO691uw) - [ ] [APT37 利用 Facebook、Telegram 与木马化安装包发起新一轮定向网络攻击](https://mp.weixin.qq.com/s/TihNB_o3a7aH-IEFpWDTAQ) - [ ] [XChat｜一款集文件共享、聊天与Markdown编辑于一体的内网协作工具](https://mp.weixin.qq.com/s/jTrXy4FyTUVLunxsX2HPTw) - [ ] [华为连续六年入选Gartner® Peer InsightsTM SD-WAN“客户之选”](https://mp.weixin.qq.com/s/w8BXbvqJZo-TLc2VGiDG-Q) - [ ] [“下一代Python笔记本”marimo曝高危漏洞：无需密码，连上WebSocket即可远程控制服务器 (CVE-2026-39987)](https://mp.weixin.qq.com/s/0MPD0zYdT43IM4GCw-7CRg) - [ ] [Adobe 紧急修复已遭利用的 0day](https://mp.weixin.qq.com/s/OH0X9hHdRP-8djW-row_0w) - [ ] [Marimo 高危预认证 RCE 漏洞已遭活跃利用](https://mp.weixin.qq.com/s/5ML_O5M58UWCvKt8Vc9IGA) - [ ] [筑牢开源安全防线，360荣膺开源鸿蒙社区漏洞挖掘双料大奖](https://mp.weixin.qq.com/s/ITrqweYv7yKYojiuDEXHhA) - [ ] [控制专题 | 工业信息安全 筑牢新型工业化“安全底座”](https://mp.weixin.qq.com/s/tX7kdhH78J7qfB6AFq3lxA) - [ ] [网络安全标准化技术研究报告 | 智能驾驶网络和数据安全标准化研究（附下载）](https://mp.weixin.qq.com/s/k7VWCda29lxHU_5Xn6XAJA) - [ ] [关于印发《网络安全标识管理办法》的通知](https://mp.weixin.qq.com/s/-zBhujsfipAFOVZLzyNq6Q) - [ ] [省经信厅办公室关于开展2026年专精特新 “小巨人”企业推荐和复核工作的通知](https://mp.weixin.qq.com/s/sv8_skX0NtAO3JomXp6HXg) - [ ] [副会长动态 | 绿盟科技通过中国信通院OpenClaw类智能体安全防护产品能力评测](https://mp.weixin.qq.com/s/leNfG-ApcO37o9hTWhkEkg) - [ ] [NLYZ专题--计算机取证知识结构复习](https://mp.weixin.qq.com/s/khRqpPoazUwBdIQxdrZMQA) - [ ] [专题·具身智能安全 | 具身智能安全风险分析与应对措施建议](https://mp.weixin.qq.com/s/Uu2yVqNXZdqIzOreE43psQ) - [ ] [通知 | 中央网信办：加强网络直播打赏规范管理](https://mp.weixin.qq.com/s/H9k9qap_VNAK0el_ybqhMA) - [ ] [4·15全民国家安全教育日 | 10个实用的网络安全小常识](https://mp.weixin.qq.com/s/E4P-PNPz80Bn6A2P9tXeGA) - [ ] [聚焦 | 第三届北京市总体国家安全观理论研讨会在京举行](https://mp.weixin.qq.com/s/YoLme4S2IPiiDC0RaCXvZw) - [ ] [观点 | 词元供给，如何“用得起”“用得好”](https://mp.weixin.qq.com/s/acf_B3JGaMsK7ZLA2ZH-XQ) - [ ] [安全 419 大咖访谈｜威努特副总经理杨璐：不被定义，顺势生长](https://mp.weixin.qq.com/s/6jr71UE4zxdGuYfj6vaAiQ) - [ ] [MyBatis框架SQL注入漏洞深度剖析](https://mp.weixin.qq.com/s/3Dm6vTqVd_cV34sfxNzxxQ) - [ ] [人工智能在SOC中应用的两个真实案例](https://mp.weixin.qq.com/s/sas1bkm9fngin8t6BjuuLw) - [ ] [从高中社团起步，三个00后天才研发网络勒索病毒“疫苗”，帮企业从黑客手中“抢”数据](https://mp.weixin.qq.com/s/AbAhCQXnUW2y-B1kuhiv3A) - [ ] [教育部等五部门联合印发《“人工智能+教育”行动计划》](https://mp.weixin.qq.com/s/vaOn4YiZTsJhub8PogBP8Q) - [ ] [想学什么，您说了算！](https://mp.weixin.qq.com/s/fCfwaSW9KE6jObGRjaAULQ) - [ ] [又一次震碎三观，工作期间严禁猝死，违者罚款500元！](https://mp.weixin.qq.com/s/215yvNUn1KWY-6vddAKEWg) - [ ] [军民并减：2027财年美国联邦网络安全预算的双线调整](https://mp.weixin.qq.com/s/9yfH_yz7jNXLWgMOLd-6Pw) - [ ] [梆梆安全荣获HarmonyOS SDK星河奖，携手华为共建高效安全、全场景智慧鸿蒙生态](https://mp.weixin.qq.com/s/uGArtKjtMFp1BFJQHjlzuw) - [ ] [三部门重拳出击！2026年个人信息保护专项行动，一篇文章读懂要点](https://mp.weixin.qq.com/s/GVjTtv2VQykT7GhJUexRKg) - [ ] [一个具有黑客感的无线开源情报与信号情报平台](https://mp.weixin.qq.com/s/5QKbgR8ASh66qTgK8Bxg2Q) - [ ] [若依 RuoYi4.6.0 代码审计](https://mp.weixin.qq.com/s/uUWuqcCs1vpdOqHBLrj17A) - [ ] [【免费领】大佬划重点：二进制安全最全知识点学习笔记](https://mp.weixin.qq.com/s/b8KOYH68vrYVw-cE8OjyzA) - [ ] [网安周报｜一周全球网安重大事件速览（4.6—4.12）](https://mp.weixin.qq.com/s/kz_u6uhW8MzAlGJF5QJFjA) - [ ] [4·15全民国家安全教育日 | 国家安全 头等大事](https://mp.weixin.qq.com/s/f50dBA9FfgOY-MYakQaHIw) - [ ] [学习笔记丨习近平谈网络安全和信息化](https://mp.weixin.qq.com/s/tCvi2Ib1Nk9XWlkuAKPHUA) - [ ] [AUTOSAR通信篇—Com模块](https://mp.weixin.qq.com/s/zEhufuRVoFj-ILsCNZJlDQ) - [ ] [巴西将比亚迪移出所谓涉“奴役劳动”名单，外交部回应](https://mp.weixin.qq.com/s/l0Bg2_AArI2UOT_0bcuaRw) - [ ] [落户欧洲！AES Europe 2026欧洲汽车以太网峰会定档11月，推动全球技术战略与实践协同，重塑车载通信格局](https://mp.weixin.qq.com/s/4uqwdc4j0JAqTM0ZTrZiKA) - [ ] [【漏洞通告】Nginx 缓冲区溢出漏洞 CVE-2026-27654](https://mp.weixin.qq.com/s/9kK56afE9x_PnFmRSx1odQ) - [ ] [美国政府问责局发布报告：未来十年三大前沿科技趋势](https://mp.weixin.qq.com/s/O_G5a1juigCVKT4OQcrP_Q) - [ ] [安全简讯（2026.04.13）](https://mp.weixin.qq.com/s/SyAkZ9nW0a0_B1w4RVh4SA) - [ ] [【漏洞通告】Adobe Acrobat 远程代码执行漏洞(CVE-2026-34621)](https://mp.weixin.qq.com/s/HP8FmF4yvLpQNfezKUiqpg) - [ ] [三部门部署网络安全标识管理工作](https://mp.weixin.qq.com/s/CW42jR-oZVPtCR_JAdjYPw) - [ ] [某次SQL注入绕WAF的经历](https://mp.weixin.qq.com/s/cMLYUGvnLJFHtagcyT2KOg) - [ ] [570个常用的Linux命令，1349页Linux命令速查手册（附PDF）](https://mp.weixin.qq.com/s/X8YBL567Z9U8JV_3N-7IQg) - Private Feed for M09Ic - [ ] [anthropics released v2.1.105 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.105) - [ ] [bolucat released 202604132121 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202604132121) - [ ] [github released v0.6.2 at github/spec-kit](https://github.com/github/spec-kit/releases/tag/v0.6.2) - [ ] [CHYbeta starred stanislavfort/mythos-jagged-frontier](https://github.com/stanislavfort/mythos-jagged-frontier) - [ ] [liamg contributed to infracost/infracost](https://github.com/infracost/infracost/pull/3540) - [ ] [liamg contributed to infracost/go-getter](https://github.com/infracost/go-getter/pull/11) - [ ] [IC3-CR3AM starred Aryagm/dflash-mlx](https://github.com/Aryagm/dflash-mlx) - [ ] [gh0stkey starred lbr77/SideImpactor](https://github.com/lbr77/SideImpactor) - [ ] [ZeddYu starred dmtrKovalenko/fff.nvim](https://github.com/dmtrKovalenko/fff.nvim) - [ ] [Fplyth0ner-Combie starred mrexodia/ida-pro-mcp](https://github.com/mrexodia/ida-pro-mcp) - [ ] [Mel0day forked Mel0day/MiroFish from 666ghj/MiroFish](https://github.com/Mel0day/MiroFish) - [ ] [Mel0day starred 666ghj/MiroFish](https://github.com/666ghj/MiroFish) - [ ] [niudaii starred JCodesMore/ai-website-cloner-template](https://github.com/JCodesMore/ai-website-cloner-template) - [ ] [mgeeky starred wh0amitz/TailVNC](https://github.com/wh0amitz/TailVNC) - obaby 𝐢𝐧⃝ void - [ ] [虚惊一场](https://zhongxiaojie.cn/2026/04/915/) - 安全客-有思想的安全新媒体 - [ ] [工程化实战思维在红队技战术中的应用](https://www.anquanke.com/post/id/315292) - Cerbero Blog - [ ] [Lua Decompiler Package](https://blog.cerbero.io/lua-decompiler-package/) - [ ] [LUAC Format Package](https://blog.cerbero.io/luac-format-package/) - Insinuator.net - [ ] [Windows Early Boot Configuration: The CmControlVector and PspSystemMitigationOptions](https://insinuator.net/2026/04/windows-early-boot-configuration-the-cmcontrolvector-and-pspsystemmitigationoptions/) - Recent Commits to cve:main - [ ] [Update Mon Apr 13 11:19:46 UTC 2026](https://github.com/trickest/cve/commit/ae71fafc6dc88bb7b60080178e5bbf1fa76dbc6a) - Securelist - [ ] [JanelaRAT: a financial threat targeting users in Latin America](https://securelist.com/janelarat-financial-threat-in-latin-america/119332/) - Payatu - [ ] [Web Cache Poisoning vs Deception: The Dynamic Duo of Cache Attacks](https://payatu.com/blog/web-cache-poisoning-vs-deception-the-dynamic-duo-of-cache-attacks/) - Reverse Engineering - [ ] [/r/ReverseEngineering's Weekly Questions Thread](https://www.reddit.com/r/ReverseEngineering/comments/1sk3apz/rreverseengineerings_weekly_questions_thread/) - [ ] [YARA-X now runs in the browser - official Playground](https://www.reddit.com/r/ReverseEngineering/comments/1sk9cx4/yarax_now_runs_in_the_browser_official_playground/) - Malwarebytes - [ ] [Simply opening a PDF could trigger this Adobe Reader zero-day](https://www.malwarebytes.com/blog/news/2026/04/simply-opening-a-pdf-could-trigger-this-adobe-reader-zero-day) - [ ] [A week in security (April 6 – April 12)](https://www.malwarebytes.com/blog/news/2026/04/a-week-in-security-april-6-april-12) - Binary Ninja - [ ] [Binary Ninja 5.3 (Jotunheim)](https://binary.ninja/2026/04/13/binary-ninja-5.3-jotunheim.html) - VMRay - [ ] [15 Incident Response Metrics for the Modern SOC Team](https://www.vmray.com/incident-response-metrics-for-modern-soc-team/) - 绿盟科技技术博客 - [ ] [绿盟科技通过中国信通院OpenClaw类智能体安全防护产品能力评测](https://blog.nsfocus.net/%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e9%80%9a%e8%bf%87%e4%b8%ad%e5%9b%bd%e4%bf%a1%e9%80%9a%e9%99%a2openclaw%e7%b1%bb%e6%99%ba%e8%83%bd%e4%bd%93%e5%ae%89%e5%85%a8%e9%98%b2%e6%8a%a4%e4%ba%a7%e5%93%81/) - [ ] [美国2026 RSAC热点研讨暨第十八届信息安全高级论坛成功召开](https://blog.nsfocus.net/%e7%be%8e%e5%9b%bd2026-rsac%e7%83%ad%e7%82%b9%e7%a0%94%e8%ae%a8%e6%9a%a8%e7%ac%ac%e5%8d%81%e5%85%ab%e5%b1%8a%e4%bf%a1%e6%81%af%e5%ae%89%e5%85%a8%e9%ab%98%e7%ba%a7%e8%ae%ba%e5%9d%9b%e6%88%90%e5%8a%9f/) - [ ] [双向发力聚焦AI，网络安全发展新阶段：绿盟科技在RSAC 2026热点研讨会发布NSF-ClawGuard](https://blog.nsfocus.net/%e5%8f%8c%e5%90%91%e5%8f%91%e5%8a%9b%e8%81%9a%e7%84%a6ai%ef%bc%8c%e7%bd%91%e7%bb%9c%e5%ae%89%e5%85%a8%e5%8f%91%e5%b1%95%e6%96%b0%e9%98%b6%e6%ae%b5%ef%bc%9a%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e5%9c%a8/) - 体验盒子 - [ ] [Flutter APK 体积144MB到23MB：瘦身实战](https://www.uedbox.com/post/119797/) - 奇客Solidot–传递最新科技情报 - [ ] [扎克伯格可能很快会有他的 AI 克隆](https://www.solidot.org/story?sid=84036) - [ ] [计算机科学的黄金期可能已结束](https://www.solidot.org/story?sid=84035) - [ ] [《传送门2社区版》将于 4 月 18 日公测](https://www.solidot.org/story?sid=84034) - [ ] [长期接触农药可能诱发糖尿病](https://www.solidot.org/story?sid=84033) - [ ] [Google Play 下架《心跳文学部》](https://www.solidot.org/story?sid=84032) - [ ] [Valve 工程师改进 Linux 游戏的显存占用](https://www.solidot.org/story?sid=84031) - [ ] [女性免疫系统衰老变化比男性更显著](https://www.solidot.org/story?sid=84030) - [ ] [中纬度地区的夏季比 1960 年代延长了 30 天](https://www.solidot.org/story?sid=84029) - [ ] [美国人仍然偏爱阅读纸质书](https://www.solidot.org/story?sid=84028) - [ ] [赵长鹏自费出版了自己的自传](https://www.solidot.org/story?sid=84027) - [ ] [Linux 7.0 释出](https://www.solidot.org/story?sid=84026) - HackerNews - [ ] [éť‘ĺŽ˘ĺˆŠç”¨ Claude ĺ’Œ ChatGPT ĺ…Ľäžľĺ¤šĺŽśĺ˘¨čĽżĺ“Ľć”żĺşœćœşćž„](http://0.0.0.0:8080/post/64104) - [ ] [国际č”ĺˆčĄŒĺŠ¨čŻ†ĺˆŤčś… 2 万ĺĺŠ ĺŻ†č´§ĺ¸čŻˆéŞ—ĺ—厳č€](http://0.0.0.0:8080/post/64103) - [ ] [ĺäşżćĄ CISA KEV 俎ĺ¤čŽ°ĺ˝•ĺˆ†ćžć示人力厉全樥ĺźçš„ćžé™](http://0.0.0.0:8080/post/64102) - [ ] [CPUID éĺ…ĽäžľďźŒCPU-Z ĺ’Œ HWMonitor ä¸‹č˝˝é“žćŽĽč˘ŤçŻĄć”šäź ć’ćść„软䝜](http://0.0.0.0:8080/post/64101) - [ ] [ĺžŽč˝ŻďźšĺŠ ć‹żĺ¤§ĺ‘˜ĺˇĽé"薪辄澡盗"ć”ťĺ‡ťďźŒĺˇĽčľ„č˘ŤçŞƒ](http://0.0.0.0:8080/post/64100) - [ ] [Marimo ĺ…łé”Žé˘„čŽ¤čŻ RCE ćźć´žéä¸ťĺŠ¨ĺˆŠç”¨](http://0.0.0.0:8080/post/64099) - 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台 - [ ] [微软因内存短缺上调Surface系列产品价格](https://blog.upx8.com/%E5%BE%AE%E8%BD%AF%E5%9B%A0%E5%86%85%E5%AD%98%E7%9F%AD%E7%BC%BA%E4%B8%8A%E8%B0%83Surface%E7%B3%BB%E5%88%97%E4%BA%A7%E5%93%81%E4%BB%B7%E6%A0%BC) - Hackerman's Hacking Tutorials - [ ] [AI Borked my Keyboard - Reversing the Aula F108 Pro Software](https://parsiya.net/blog/ai-borked-keyboard/) - 安全分析与研究 - [ ] [银狐名单类最新攻击样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247496650&idx=1&sn=8c41fcd3aebad10eae54494e97188e16) - 威努特安全网络 - [ ] [WinClaw龙虾🦞的十大高阶养成法](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651141315&idx=1&sn=02c885fa94abec83daaeebbee662b316) - 奇安信 CERT - [ ] [【在野利用】Adobe Acrobat Reader 远程代码执行漏洞(CVE-2026-34621)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505216&idx=1&sn=2a570e936bed484504986c43d7242a2c) - [ ] [【已复现】Nginx ngx_http_dav_module 堆缓冲区溢出漏洞(CVE-2026-27654)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505216&idx=2&sn=20c8c942f3ee8f9b79a0f2ce1fea5a0d) - 先进攻防 - [ ] [Claude Code Windows环境避坑指南](https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908890&idx=1&sn=6e7340c781a41250b3c8feb64301485d) - 看雪学苑 - [ ] [Linux arm64 内核Hook实现与校验绕过](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458613330&idx=1&sn=a06f6c489372da6017fb6426da80ecc9) - [ ] [今晚8点直击 | 第二届智能渗透挑战赛·冠军之夜](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458613330&idx=2&sn=e1e50ed859ae41fd1efc229526fa98a8) - [ ] [黑客借助 Claude Code 与 GPT-4.1，攻破墨西哥九家政府机构，窃取数亿公民数据](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458613330&idx=3&sn=fdae4b86e89d852bbfe93df7ef780460) - 信息安全国家工程研究中心 - [ ] [三部门部署网络安全标识管理工作](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247503502&idx=1&sn=be02d023033fc903d90ead992eb68ce8) - 威胁棱镜 - [ ] [威胁情报生态系统的产出与共享](https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247488610&idx=1&sn=de9310c0ae3396cb8c0cd9d5559c3f40) - 黑鸟 - [ ] [撑起全球半壁RDP恶意扫描的塞舌尔离岸托管网络](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186372&idx=1&sn=b97704a9a81471f8622d1cae3460aaed) - 安全内参 - [ ] [Anthropic新模型颠覆网络安全：美英德政府加急评估影响，传统漏洞或不复存在](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515804&idx=1&sn=0b0221f05c3de44eccd583eb303ff59b) - [ ] [军民并减：2027财年美国联邦网络安全预算的双线调整](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515804&idx=2&sn=e572819ad85aab347ec2a70fca4bfe34) - 安全圈 - [ ] [【安全圈】黑客利用 Claude 和 ChatGPT 入侵多家墨西哥政府机构](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075617&idx=1&sn=ae5ccccf31e54fadb3a3ae3a96442518) - [ ] [【安全圈】国际联合行动识别超 2 万名加密货币诈骗受害者](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075617&idx=2&sn=e0977dea287f90ca2172e2f363610190) - [ ] [【安全圈】十亿条 CISA KEV 修复记录分析揭示人力安全模式的极限](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075617&idx=3&sn=37b38b70dab479d02d3f08d8edad460b) - NOVASEC - [ ] [【工具】Copier-Plus：批量保存Burp报文](https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490844&idx=1&sn=ddb2f750d0d68eda8089b78ec603eaf5) - 代码卫士 - [ ] [Adobe 紧急修复已遭利用的 0day](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525746&idx=1&sn=5294bb3a6a8e16b13a220df8b12654c7) - [ ] [Marimo 高危预认证 RCE 漏洞已遭活跃利用](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525746&idx=2&sn=777605c08e8d6f2e0dbad63e8f408da4) - 安全牛 - [ ] [渗透测试：褪去光鲜外衣后的真实图景与职业思考](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141018&idx=1&sn=277a7e6e06d2bd36e297e79ff4e4c7a7) - [ ] [五部门联合发布 AI 拟人化互动服务新规，7 月 15 日起施行；中央网信办联合约谈 7 家票务平台，严禁技术手段干扰12306安全运行 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141018&idx=2&sn=ea74e60c7670ab46aae3b13487dfab27) - 软件安全与逆向分析 - [ ] [安卓内核Hook技术实现分析与应用](https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485111&idx=1&sn=f933f9d819aa2fa0d502768de65dd600) - 字节跳动安全中心 - [ ] [漏洞预警：LiteLLM未鉴权命令执行](https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496155&idx=1&sn=293c661a5e3b2eb381943c7f3fc8f410) - 情报分析师 - [ ] [伊朗搜索队满山转悠，方向全错了！CIA是怎么做到的](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567588&idx=1&sn=405c815c1eb18af7b490a6dada1244e1) - [ ] [【深度研判】2026年4月8日美国驻贝鲁特大使馆遭袭事件情报分析报告](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567588&idx=2&sn=620b20cde280db411c119e398b6d9033) - [ ] [他说自己只是个生意人，但他的莫斯科地址让调查员停了下来](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567588&idx=3&sn=1b09f7cb6e75f8f3c02149df151eaac0) - 复旦白泽战队 - [ ] [从漏洞到规则：安全知识自动提取的初步探索](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247498222&idx=1&sn=be9999e3b98053641c2a73c08075df30) - 极客公园 - [ ] [越来越多的人，已经把小红书玩成了 AI 孵化器](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653103883&idx=1&sn=6bda1d310c08c517ef5932c6e06302ed) - [ ] [在黑客松上，开发者们下注鸿蒙](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653103868&idx=1&sn=c59b57af47e204da2a33a6e8814ba8e0) - [ ] [马斯克推出海外微信 XChat；OpenAI「星门」项目三位核心成员跳槽 Meta；苹果 AI 智能眼镜设计细节曝光 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653103837&idx=1&sn=2fc671c5140b92e8083707036e370b3a) - M01N Team - [ ] [AI安全案例分析 | Grafana 平台零点击间接注入威胁](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494946&idx=1&sn=cfb436b16c06bf1e2fda6abfc1d7a050) - 迪哥讲事 - [ ] [如何分析查看js文件](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499307&idx=1&sn=8bf5380e0da8d5c18581fef9bd9afe4b) - 字节跳动技术团队 - [ ] [CVPR 2026 | 火山引擎多媒体实验室提出TempR1，显著增强多模态大模型视频时序理解能力](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247519230&idx=1&sn=209fae1cf3181ef41ad3d6ed766ea077) - 安全行者老霍 - [ ] [思科推出大语言模型安全排行榜：为 AI 安全带来透明度](https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486469&idx=1&sn=39eefb3d12722793658872e1bda18a90) - [ ] [Anthropic：你们所有的零日漏洞，都归 Mythos 所有](https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486476&idx=1&sn=cfd924fc1b97cb4790286504d193128e) - 深信服千里目安全技术中心 - [ ] [【漏洞通告】Nginx 缓冲区溢出漏洞 CVE-2026-27654](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525295&idx=1&sn=57c607219c1557cadb6de52ccf6c2dc0) - 慢雾科技 - [ ] [慢雾邀您共赴 2026 香港 Web3 嘉年华及多场行业盛会](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247504713&idx=1&sn=b3c6dee54d890e1751ac7bb28d28bc74) - 吴鲁加 - [ ] [AI 时代，我们为什么还要学习？](https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247486007&idx=1&sn=cc4b12cef7c7677298579e3cfd29595a) - 火绒安全 - [ ] [火绒安全解决方案｜御险于未然 互联网企业勒索防护解决方案](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531968&idx=1&sn=9959b6f82a42b129ef908d19cfeacbd2) - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531968&idx=2&sn=a9f7047f8665c16b36a1b8dd2b181bc0) - 360数字安全 - [ ] [筑牢开源安全防线，360荣膺开源鸿蒙社区漏洞挖掘双料大奖](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585686&idx=1&sn=ffbce29f6487a5f230b70e838191385b) - 安全419 - [ ] [安全 419 大咖访谈｜威努特副总经理杨璐：不被定义，顺势生长](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247552906&idx=1&sn=b453f5cab3ff1bb1fb01a96391e9e7a5) - Securityinfo.it - [ ] [Social media vietati ai minori? In Australia non sta funzionando](https://www.securityinfo.it/2026/04/13/social-media-vietati-ai-minori-in-australia-non-sta-funzionando/?utm_source=rss&utm_medium=rss&utm_campaign=social-media-vietati-ai-minori-in-australia-non-sta-funzionando) - CNVD漏洞平台 - [ ] [CNVD漏洞周报2026年第14期](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496841&idx=1&sn=8608e4497450755acb1095ce7582ee75) - [ ] [上周关注度较高的产品安全漏洞(20260406-20260412)](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496841&idx=2&sn=919149cb1306363172c34cb692a13da1) - ICT Security Magazine - [ ] [Violenza di genere online: Polizia Postale, Big Tech e società civile a confronto](https://www.ictsecuritymagazine.com/notizie/violenza-di-genere-online-polizia-postale/) - [ ] [Anthropic lancia il Project Glasswing: Claude Mythos trova migliaia di zero-day in ogni sistema operativo e browser](https://www.ictsecuritymagazine.com/notizie/anthropic-project-glasswing/) - [ ] [AgID e l’intelligenza artificiale nella PA: le Linee Guida per sviluppo e procurement chiudono la consultazione e aprono una nuova fase](https://www.ictsecuritymagazine.com/notizie/agid-intelligenza-artificiale-pa-linee-guida-procurement/) - [ ] [Gestire il rischio cyber oggi: il modello Cyber Resilience Lifecycle di ReeVo](https://www.ictsecuritymagazine.com/notizie/cyber-resilience-reevo/) - [ ] [AI Act, l’Unione Europea bandisce le “nudify apps”](https://www.ictsecuritymagazine.com/articoli/ai-act-nudify-apps/) - Over Security - Cybersecurity news aggregator - [ ] [Social media vietati ai minori? In Australia non sta funzionando](https://www.securityinfo.it/2026/04/13/social-media-vietati-ai-minori-in-australia-non-sta-funzionando/) - [ ] [European Gym giant Basic-Fit data breach affects 1 million members](https://www.bleepingcomputer.com/news/security/european-gym-giant-basic-fit-data-breach-affects-1-million-members/) - [ ] [No Encryption, Just Exposure: Silent Ransom Group Targets Law Firms](https://www.suspectfile.com/no-encryption-just-exposure-silent-ransom-group-targets-law-firms/) - [ ] [Majority of Australian youth still use social media despite ban, researchers find](https://therecord.media/social-media-ban-australia-research) - [ ] [Stolen Rockstar Games analytics data leaked by extortion gang](https://www.bleepingcomputer.com/news/security/stolen-rockstar-games-analytics-data-leaked-by-extortion-gang/) - [ ] [Critical flaw in wolfSSL library enables forged certificate use](https://www.bleepingcomputer.com/news/security/critical-flaw-in-wolfssl-library-enables-forged-certificate-use/) - [ ] [FBI announces takedown of phishing operation that targeted thousands of victims](https://techcrunch.com/2026/04/13/fbi-announces-takedown-of-phishing-operation-that-targeted-thousands-of-victims/) - [ ] [FBI takedown of W3LL phishing service leads to developer arrest](https://www.bleepingcomputer.com/news/security/fbi-takedown-of-w3ll-phishing-service-leads-to-developer-arrest/) - [ ] [Why Intelligence Requirements Fall Flat and How to Fix Them with a Practical Priority Intelligence Requirements Framework](https://flashpoint.io/blog/why-intelligence-requirements-fall-flat-priority-intelligence-requirements/) - [ ] [Booking.com confirms hackers accessed customers’ data](https://techcrunch.com/2026/04/13/booking-com-confirms-hackers-accessed-customers-data/) - [ ] [OpenAI rotates macOS certs after Axios attack hit code-signing workflow](https://www.bleepingcomputer.com/news/security/openai-rotates-macos-certs-after-axios-attack-hit-code-signing-workflow/) - [ ] [New Booking.com data breach forces reservation PIN resets](https://www.bleepingcomputer.com/news/security/new-bookingcom-data-breach-forces-reservation-pin-resets/) - [ ] [FBI, Indonesia take down W3LL phishing tool](https://therecord.media/phishing-takedown-indonesia-fbi) - [ ] [Claude Code come strumento d’attacco: il rischio emergente nell’agente AI](https://www.cybersecurity360.it/news/claude-code-come-strumento-dattacco-il-rischio-emergente-nellagente-ai/) - [ ] [Adobe rolls out emergency fix for Acrobat, Reader zero-day flaw](https://www.bleepingcomputer.com/news/security/adobe-rolls-out-emergency-fix-for-acrobat-reader-zero-day-flaw/) - [ ] [Quantum Europe Strategy: la Ue fissa le coordinate della propria strategia quantistica](https://www.cybersecurity360.it/legal/quantum-europe-strategy-la-ue-fissa-le-coordinate-della-propria-strategia-quantistica/) - [ ] [Hackers claim breach of Rockstar Games via cloud analytics platform](https://therecord.media/rockstar-hackers-cyberattack-cloud) - [ ] [The silent “Storm”: New infostealer hijacks sessions, decrypts server-side](https://www.bleepingcomputer.com/news/security/the-silent-storm-new-infostealer-hijacks-sessions-decrypts-server-side/) - [ ] [AI Security: proteggere l’adozione dell’intelligenza artificiale in azienda](https://www.cybersecurity360.it/soluzioni-aziendali/ai-security-proteggere-ladozione-dellintelligenza-artificiale-in-azienda/) - [ ] [Il GDPR pilastro del diritto digitale europeo: le implicazioni strategiche secondo EDPB](https://www.cybersecurity360.it/news/il-gdpr-pilastro-del-diritto-digitale-europeo-le-implicazioni-strategiche-secondo-edpb/) - [ ] [Black Hat Asia 2026 Is Coming to Singapore — Here’s What the Threat Landscape Looks Like Ahead of It](https://cyble.com/blog/black-hat-asia-2026-cybersecurity/) - [ ] [Zimbabwe Boosts Cybersecurity as AI-Driven Cyber Fraud Surges](https://thecyberexpress.com/cyber-fraud-cybersecurity-in-zimbabwe/) - [ ] [Hack at Dutch gym chain Basic-Fit exposes customer data in several EU countries](https://therecord.media/dutch-gym-chain-basic-fit-hit-by-hackers) - [ ] [Sanzione privacy da 190 mila euro a ITA: siamo ancora all’abc del GDPR](https://www.cybersecurity360.it/news/sanzione-privacy-da-190-mila-euro-a-ita-siamo-ancora-allabc-del-gdpr/) - [ ] [JanelaRAT: a financial threat targeting users in Latin America](https://securelist.com/janelarat-financial-threat-in-latin-america/119332/) - [ ] [Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621](https://thecyberexpress.com/acrobat-reader-flaw-adobe-cve-2026-34621/) - [ ] [Authorities Dismantle ‘W3LL’ Phishing Empire Powering Global Business Email Attacks](https://thecyberexpress.com/authorities-dismantle-w3ll-phishing-kit/) - [ ] [Ransomware Attack on Dutch Software Vendor Disrupts Hospital Systems](https://thecyberexpress.com/chipsoft-ransomware-incident/) - [ ] [Rockstar Cyberattack Confirmed; ShinyHunters Claims Breach, Issues Extortion Threat](https://thecyberexpress.com/rockstar-cyberattack-gta-5/) - [ ] [OpenAI Responds to Axios npm Supply Chain Attack, Rotates macOS Certificates](https://thecyberexpress.com/axios-npm-supply-chain-attack-escalating/) - 0x727开源安全团队 - [ ] [基于经济学视角分析技术变革与恩格斯停滞（手稿一）](https://mp.weixin.qq.com/s?__biz=MzkwNTI3MjIyOQ==&mid=2247484274&idx=1&sn=db8c42131ee397d9abba89ebae02af5c) - SANS Internet Storm Center, InfoCON: green - [ ] [Scans for EncystPHP Webshell, (Mon, Apr 13th)](https://isc.sans.edu/diary/rss/32892) - [ ] [ISC Stormcast For Monday, April 13th, 2026 https://isc.sans.edu/podcastdetail/9888, (Mon, Apr 13th)](https://isc.sans.edu/diary/rss/32890) - Qualys Security Blog - [ ] [Anatomy of an Autonomous AI Agent Risk: How Qualys ETM Connects the Dots on OpenClaw](https://blog.qualys.com/category/vulnerabilities-threat-research) - [ ] [Deep Scan: Expanding Vulnerability Detection Beyond Traditional Boundaries](https://blog.qualys.com/category/product-tech) - Schneier on Security - [ ] [On Anthropic’s Mythos Preview and Project Glasswing](https://www.schneier.com/blog/archives/2026/04/on-anthropics-mythos-preview-and-project-glasswing.html) - [ ] [AI Chatbots and Trust](https://www.schneier.com/blog/archives/2026/04/ai-chatbots-and-trust.html) - TorrentFreak - [ ] [Paris Court Issued Simultaneous Site Blocking Orders Against ISPs, DNS Resolvers and VPNs](https://torrentfreak.com/paris-court-issued-simultaneous-site-blocking-orders-against-isps-dns-resolvers-and-vpns/) - The Register - Security - [ ] [Zombie Microsoft bugs rise from the dead, pave way for crims and ransomware scum](https://go.theregister.com/feed/www.theregister.com/2026/04/13/ransomware_gang_other_crims_attacking/) - [ ] [Fake Linux leader using Slack to con devs into giving up their secrets](https://go.theregister.com/feed/www.theregister.com/2026/04/13/linux_foundation_social_engineering/) - [ ] [Booking.com warns reservation data may have checked out with intruders](https://go.theregister.com/feed/www.theregister.com/2026/04/13/bookingcom_breach/) - [ ] [Gym giant Basic-Fit confirms data on a million members stolen in cyberattack](https://go.theregister.com/feed/www.theregister.com/2026/04/13/basicfit_breach/) - [ ] [Rockstar Games gets a taste of grand theft data](https://go.theregister.com/feed/www.theregister.com/2026/04/13/shinyhunters_rockstar_breach/) - [ ] [NHS pays £46K to prep next Microsoft licensing round](https://go.theregister.com/feed/www.theregister.com/2026/04/13/nhs_benchmarking_microsoft/) - [ ] [China wants AI to prepare school lessons and mark homework](https://go.theregister.com/feed/www.theregister.com/2026/04/13/asia_tech_news_roundup/) - Deeplinks - [ ] [The Dangers of California’s Legislation to Censor 3D Printing](https://www.eff.org/deeplinks/2026/04/dangers-californias-legislation-censor-3d-printing) - [ ] [EFF 🤝 HOPE: Join Us This August!](https://www.eff.org/deeplinks/2026/04/eff-hope-join-us-august) - [ ] [Hot Off the Press: EFF's Updated Guide to Tech at the US-Mexico Border](https://www.eff.org/deeplinks/2026/04/hot-press-effs-updated-guide-tech-us-mexico-border) - [ ] [Speaking Freely: Dr. Jean Linis-Dinco](https://www.eff.org/deeplinks/2026/04/speaking-freely-dr-jean-linis-dinco) - [ ] [War as a Pretext: Gulf States Are Tightening the Screws on Speech—Again](https://www.eff.org/deeplinks/2026/04/war-pretext-gulf-states-are-tightening-screws-speech-again) - Daniel Miessler - [ ] [It's Time for Full Activation](https://danielmiessler.com/blog/its-time-for-full-activation?utm_source=rss&utm_medium=feed&utm_campaign=website) - NetSPI - [ ] [Q1 2026 Critical Vulnerability Roundup: Mitigating Risk](https://www.netspi.com/blog/executive-blog/vulnerability-management/q1-2026-critical-vulnerability-roundup-mitigating-risk/) - Security Weekly Podcast Network (Audio) - [ ] [We catch up on the news, including AI vuln hunting; also more RSAC interviews! - John Wilson, Mark Lambert, Georges Bossert, Samuel Hassine - ESW #454](http://sites.libsyn.com/18678/we-catch-up-on-the-news-including-ai-vuln-hunting-also-more-rsac-interviews-john-wilson-mark-lambert-georges-bossert-samuel-hassine-esw-454) - The Hacker News - [ ] [JanelaRAT Malware Targets Latin American Banks with 14,739 Attacks in Brazil in 2025](https://thehackernews.com/2026/04/janelarat-malware-targets-latin.html) - [ ] [FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts](https://thehackernews.com/2026/04/fbi-and-indonesian-police-dismantle.html) - [ ] [⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More](https://thehackernews.com/2026/04/weekly-recap-fiber-optic-spying-windows.html) - [ ] [Your MTTD Looks Great. Your Post-Alert Gap Doesn't](https://thehackernews.com/2026/04/your-mttd-looks-great-your-post-alert.html) - [ ] [North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware](https://thehackernews.com/2026/04/north-koreas-apt37-uses-facebook-social.html) - [ ] [OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident](https://thehackernews.com/2026/04/openai-revokes-macos-app-certificate.html) - netsecstudents: Subreddit for students studying Network Security and its related subjects - [ ] [shodscript - Run your exploit scripts against Shodan search results automatically](https://www.reddit.com/r/netsecstudents/comments/1skpmbt/shodscript_run_your_exploit_scripts_against/) - [ ] [AutoWIFI - open source framework for learning WiFi security testing (WPA/WPS/WEP automated chain)](https://www.reddit.com/r/netsecstudents/comments/1skplhe/autowifi_open_source_framework_for_learning_wifi/) - [ ] [How do you realistically balance Upskilling with a full‑time Job without burning out](https://www.reddit.com/r/netsecstudents/comments/1skd14y/how_do_you_realistically_balance_upskilling_with/) - [ ] [Hey guys glad to be here, but I need help with some questions](https://www.reddit.com/r/netsecstudents/comments/1skrn5p/hey_guys_glad_to_be_here_but_i_need_help_with/) - Deep Web - [ ] [WEEBLE](https://www.reddit.com/r/deepweb/comments/1skrl3h/weeble/) - Blackhat Library: Hacking techniques and research - [ ] [The Dumbest Hack of the Year Exposed a Very Real Problem](https://www.reddit.com/r/blackhat/comments/1sk78db/the_dumbest_hack_of_the_year_exposed_a_very_real/) - [ ] [I compiled every major AI agent security incident from 2024-2026 in one place - 90 incidents, all sourced, updated weekly](https://www.reddit.com/r/blackhat/comments/1skk6r2/i_compiled_every_major_ai_agent_security_incident/) - [ ] [CVE-2025-8061: From User-land to Ring 0](https://www.reddit.com/r/blackhat/comments/1sk5d8b/cve20258061_from_userland_to_ring_0/) - Information Security - [ ] [Empirical results from adversarial evaluation of RAG pipelines — indirect prompt injection achieves 100% ASR, three-detector layer achieves 100% DR across 15 scenarios](https://www.reddit.com/r/Information_Security/comments/1skrl79/empirical_results_from_adversarial_evaluation_of/) - [ ] [Are rate limits alone enough to stop brute-force attacks on auth endpoints?](https://www.reddit.com/r/Information_Security/comments/1sk4gl4/are_rate_limits_alone_enough_to_stop_bruteforce/) - Computer Forensics - [ ] [Suggestions](https://www.reddit.com/r/computerforensics/comments/1sknses/suggestions/) - [ ] [Any sample Microsoft Purview Data Available?](https://www.reddit.com/r/computerforensics/comments/1skixqc/any_sample_microsoft_purview_data_available/) - Technical Information Security Content & Discussion - [ ] [Coinbase AgentKit Prompt Injection: Wallet Drain, Infinite Approvals, and Agent-Level RCE (validated by Coinbase, on-chain PoC)](https://www.reddit.com/r/netsec/comments/1skfumg/coinbase_agentkit_prompt_injection_wallet_drain/) - [ ] [Stealthy RCE on Hardened Linux: noexec + Userland Execution PoC](https://www.reddit.com/r/netsec/comments/1skelmn/stealthy_rce_on_hardened_linux_noexec_userland/) - [ ] [CVE-2025-8061: From User-land to Ring 0](https://www.reddit.com/r/netsec/comments/1sk4j5o/cve20258061_from_userland_to_ring_0/) - [ ] [CVE-2026-22666: Dolibarr 23.0.0 dol_eval() whitelist bypass -> RCE (full write-up + PoC)](https://www.reddit.com/r/netsec/comments/1skazzv/cve202622666_dolibarr_2300_dol_eval_whitelist/) - [ ] [One Uppercase Letter Breaks Every Nuxt App](https://www.reddit.com/r/netsec/comments/1sk6xc3/one_uppercase_letter_breaks_every_nuxt_app/) - [ ] [Unpatched RAGFlow Vulnerability Allows Post-Auth RCE](https://www.reddit.com/r/netsec/comments/1skgtr7/unpatched_ragflow_vulnerability_allows_postauth/) - Your Open Hacker Community - [ ] [I need help](https://www.reddit.com/r/HowToHack/comments/1sjv0ai/i_need_help/) - Security Affairs - [ ] [Hackers access Booking.com user data, company secures systems](https://securityaffairs.com/190757/data-breach/hackers-access-booking-com-user-data-company-secures-systems.html) - [ ] [iPhone forensics expose Signal messages after app removal in U.S. case](https://securityaffairs.com/190740/security/iphone-forensics-expose-signal-messages-after-app-removal-in-u-s-case.html) - [ ] [Citizen Lab: Webloc tracked 500M devices for global law enforcement](https://securityaffairs.com/190715/intelligence/citizen-lab-webloc-tracked-500m-devices-for-global-law-enforcement.html) - [ ] [Iran-linked group Handala claims to have breached three major UAE organizations](https://securityaffairs.com/190716/hacking/iran-linked-group-handala-claims-to-have-breached-three-major-uae-organizations.html) - [ ] [CPUID watering hole attack spreads STX RAT malware](https://securityaffairs.com/190702/malware/cpuid-watering-hole-attack-spreads-stx-rat-malware.html)
每日安全资讯（2026-04-14）