# 每日安全资讯（2026-07-31） - SecWiki News - [ ] [SecWiki News 2026-07-30 Review](http://www.sec-wiki.com/?2026-07-30) - Paper - 知道创宇404实验室 - [ ] [面向零信任物联网架构的联邦学习与大语言模型驱动威胁情报](https://paper.seebug.org/3508) - 安全客-有思想的安全新媒体 - [ ] [科技云报到：Agent时代到来，企业AI安全如何“内外兼修”？](https://www.anquanke.com/post/id/315876) - [ ] [微软发布网络安全模型MAI-Cyber-1-Flash](https://www.anquanke.com/post/id/315895) - [ ] [新一轮银狐攻击_管控终端再成控制工具](https://www.anquanke.com/post/id/315880) - Recent Commits to cve:main - [ ] [Update Thu Jul 30 11:58:14 UTC 2026](https://github.com/trickest/cve/commit/e6bcead746c2adeb753bca023a78deabe048138b) - Microsoft Security Blog - [ ] [What’s new in Microsoft Security: July 2026](https://www.microsoft.com/en-us/security/blog/2026/07/30/whats-new-in-microsoft-security-july-2026/) - Doonsec's feed - [ ] [三下乡丨学院“气象防灾减灾志愿者中国行”绵阳队联合绵阳市气象局开展科普实践活动](https://mp.weixin.qq.com/s/_xVwZLng_Jn4LR6X4nuseA) - [ ] [行业资讯：又见千万级大单，网络安全项目中标情况汇总（7月30日）](https://mp.weixin.qq.com/s/L0NQWSBLidylKYTiGRgDYw) - [ ] [是智能体攻击还是炒作？OpenAI × Hugging Face 事件解读](https://mp.weixin.qq.com/s/OIqGIaauHyidDNQ-Qq_y6A) - [ ] [【安全圈】30个水厂一夜瘫痪，美国供水系统遭毁灭性打击](https://mp.weixin.qq.com/s/FRHanimyTUp6IkHgLmd_tg) - [ ] [正式官宣 | 2026 CCS成都网络安全技术交流活动定档9月，议题征集正式启动！](https://mp.weixin.qq.com/s/lVvTqy6O0nQtxK7BRaMVlA) - [ ] [炸锅！OpenAI测试失控：AI自主突破沙箱，真实入侵了第三方平台](https://mp.weixin.qq.com/s/zEPRpQmtr8vuvJIlmpRG0g) - [ ] [三大政企基础设施接连爆零日漏洞，企业补丁运维为何全面落后？](https://mp.weixin.qq.com/s/j58kM-hmMEnTrGpcoL9CHw) - [ ] [再获认可！网易智企大模型安全围栏能力通过行业验证](https://mp.weixin.qq.com/s/SD9LRrlihRKVN_9tRoEyfA) - [ ] [天翼洞察 | 140万亿Token背后，谁在守护AI的安全底线？](https://mp.weixin.qq.com/s/NQyFOwyLyiGrLxLf9ylShw) - [ ] [教育部认证！网络安全攻防实战师资培训开放报名中](https://mp.weixin.qq.com/s/BnCSCGGc20r-Gki4zjtS6A) - [ ] [彰显实力| 珞安科技荣登安全牛《网络安全企业100强》榜单](https://mp.weixin.qq.com/s/aFH0UYZnWeFEBt7fg1T3bg) - [ ] [铸魂强基践初心 党建融合促发展——认证评估事业部党支部举办庆七一主题党日活动](https://mp.weixin.qq.com/s/O2Voz6BAZHmjk-MqbX2iYQ) - [ ] [每日安全快讯 2026-07-30](https://mp.weixin.qq.com/s/ZqYMPIU175l89-rWimaYug) - [ ] [“数智领航・职引未来”数字人才发展宣讲会顺利举办](https://mp.weixin.qq.com/s/z6utV-9lXnyZl_CZWqnG1w) - [ ] [11家未落实！上海通管局发布通信网络安全防护管理情况通报](https://mp.weixin.qq.com/s/-pCfEQiA55O67RO_OHrAiw) - [ ] [工信部启动国家级零碳工厂、零碳算力设施建设工作](https://mp.weixin.qq.com/s/ySBZAaJVVVL_qzQgt9kAEw) - [ ] [挖了几天0收获？新手SRC挖洞的【3大核心技巧】与【8大避坑指南】](https://mp.weixin.qq.com/s/I1aP1_eoD86Hgz75OicZUA) - [ ] [关注 | 中国人民银行等九部门联合印发《关于加强科技金融领域数据开发利用的通知》](https://mp.weixin.qq.com/s/QEqIf1wDErtY5Ki_fUCpNA) - [ ] [专家解读｜在法治轨道上推进反网络暴力工作行稳致远](https://mp.weixin.qq.com/s/wX3AqHEWVPIJ7sVkrgaMlw) - [ ] [专家解读 | 以技术筑基与融合赋能，全面开启IPv6高质量发展新征程](https://mp.weixin.qq.com/s/GVfIiyjZKIy6HUDkXXfj4w) - [ ] [前沿 | 推动全球人工智能治理从理念走向行动](https://mp.weixin.qq.com/s/7WjDldi8_PEw3mxqphGv6A) - [ ] [评论 | 私域直播不能变成“信任收割机”](https://mp.weixin.qq.com/s/zSUyP9HoV7S8LNeRv27UIg) - [ ] [移动云×启明星辰：以零信任+破解四大业务场景访问安全难题](https://mp.weixin.qq.com/s/Tj1jVtpnKl8W96EgjVNr9w) - [ ] [2030冬奥会场馆遭网络攻击，内部敏感数据泄露](https://mp.weixin.qq.com/s/oy_Ba8AALSE2ZufQbFzUZQ) - [ ] [协会党支部召开学习和工作会议](https://mp.weixin.qq.com/s/2wWIgrHT2b23ijvi4vviZw) - [ ] [安全简讯（2026.07.30）](https://mp.weixin.qq.com/s/ze1fgBPwnLLQWEuoS0lNSQ) - [ ] [工控遇袭！30多个地方供水系统遭协同网络攻击，有水厂临时关停](https://mp.weixin.qq.com/s/bvkH8D1jBXYIIW2VozhHjw) - [ ] [CNCERT：关于“FakeSvc”挖矿组织大规模传播恶意程序的风险提示](https://mp.weixin.qq.com/s/c-FwhPCqDDaL45UUhJo8zQ) - [ ] [黑客是如何入侵网站？为什么企业网站需要做渗透测试？](https://mp.weixin.qq.com/s/oxi3TxpoMBgNanXOdxPpmA) - [ ] [中南大学网安实训夏令营总结](https://mp.weixin.qq.com/s/4M47uzp-J9FMD3LlajvSIQ) - [ ] [【年中总结】思而听2026年中工作总结 · 文末抽奖](https://mp.weixin.qq.com/s/6O37KMjCOb4QtO_xhnxJog) - [ ] [7月26日 威胁情报速览](https://mp.weixin.qq.com/s/JEEitLmKkyNjKutS8t4fJA) - [ ] [一张图片拿下 Rails 服务器，CVSS 9.5 命令执行零门槛](https://mp.weixin.qq.com/s/birSjBq7p5wjoxnPCUfFow) - [ ] [MonkeyWork 发布！桌面 AI 就位，办公自成闭环](https://mp.weixin.qq.com/s/M5y9T_THiPIYi-tr3zgxvQ) - [ ] [美国发布《生成式人工智能手册》](https://mp.weixin.qq.com/s/Vid9utriLNh_YOAVugqCPg) - [ ] [萝卜蹲，萝卜蹲](https://mp.weixin.qq.com/s/b-sIUlJI3mzjq3L11kJSpA) - [ ] [从临沂出发｜HG TALK 第四期：两个人的成长与一场峰会的幕后](https://mp.weixin.qq.com/s/avmSxFGgKLOL552SgeBY7Q) - [ ] [生成式AI备案全面解读｜所有AI产品上线必须守住的合规底线](https://mp.weixin.qq.com/s/kQYdxJVnN-egs2ew0ADTuA) - [ ] [先御安全可信操作系统推动各行业嵌入式开发板合规要求](https://mp.weixin.qq.com/s/qnTxNjf_7SptXTzPsdVOyA) - [ ] [赢了法庭，输掉战场！黑客彻底抛弃中心化架构，溯源难度拉满——从伦敦交通局网络袭击案判决，透视网络犯罪组织的结构性突变](https://mp.weixin.qq.com/s/A7PYX-IEfyAeW551V-7cdw) - [ ] [网安标委公开征求智能体交互与AI浏览器安全两项AI安全实践指南意见；Meta与谷歌广告账户被盗黑产泛滥，合规老账户黑市溢价数倍|牛览](https://mp.weixin.qq.com/s/JBqAfKdIqPQFO7_K6t6m7w) - [ ] [动态｜《网络安全标准实践指南——智能体交互安全要求（征求意见稿）》等2项网络安全标准实践指南公开征求意见](https://mp.weixin.qq.com/s/SYsJE7SymRyrtsPBzHkE8w) - [ ] [动态｜北京开展2026新域新质创新大赛预选推荐工作](https://mp.weixin.qq.com/s/DZa-Itxyecya3NOED7tI-A) - [ ] [动态｜《AI智能体安全保险研究报告》正式发布](https://mp.weixin.qq.com/s/jd0SXwlSUVFf-ndYG8rqtQ) - [ ] [动态｜2026年度上海市科学技术奖提名工作启动](https://mp.weixin.qq.com/s/3H6qW2p_ot-RaZngE9Ezsg) - [ ] [iOS26.6养老版本实锤！六大优化实测，老机型起飞](https://mp.weixin.qq.com/s/MLzEFt8505wrcl9Hc5ML9w) - [ ] [全网最全红客攻防教程【2026最新版】](https://mp.weixin.qq.com/s/FMzFVyTriXDK7aI_b8dUbg) - [ ] [对话词元无限：字节系团队、数亿元天使轮，ToB Coding、靠 FDE 拿下数十家大客户丨航行伙伴](https://mp.weixin.qq.com/s/_ZLDFNIMn-0zdwGRXUGt6Q) - [ ] [慧等保:一站式等级保护解决方案](https://mp.weixin.qq.com/s/2c5I9B4UyfuRczLTVFXJwg) - [ ] [IPv4 地址按照用途和规模通常分为 A、B、C、D、E 五类](https://mp.weixin.qq.com/s/A7fh5Ytl5f8-Ks4q3LGYdg) - [ ] [新一轮银狐攻击_管控终端再成控制工具](https://mp.weixin.qq.com/s/K_J65T1viZ6gctVX_iKtRQ) - [ ] [电子科技大学计算机（网安）学院算法与逻辑团队在EC 2026上发表重要理论成果](https://mp.weixin.qq.com/s/s4HpDyk3Undv3sO_cZTZgg) - [ ] [网络安全日报 | 2026-07-30](https://mp.weixin.qq.com/s/3FCsMXotwK7yWImBZ2oGLA) - [ ] [这家银行再次举办员工AI培训，已为各部门开通ChatGPT企业付费账户](https://mp.weixin.qq.com/s/qGtq_MrWttOJKsgJb6BXoA) - [ ] [筑牢网络安全防线！2026年盐田区“网络安全进基层”系列活动成功举办](https://mp.weixin.qq.com/s/NdZJgTwm7PfW81z8UTZp6A) - [ ] [分享图片](https://mp.weixin.qq.com/s/dg8vaXQzt4y7Nzv-mO8Qnw) - [ ] [火热报名中 | 2026年福建省信息通信行业职业技能竞赛](https://mp.weixin.qq.com/s/iP_GrWkUsLYNFwomFEA1hA) - [ ] [AI赋能威胁情报核武器！一键打通CTI到检测的完整闭环](https://mp.weixin.qq.com/s/Pt6g6UuIK-SyHy-VtyA5Lw) - [ ] [时空智友ERP workflow.sqlResult SQL注入](https://mp.weixin.qq.com/s/h058_bRpJtPeNynzT_7Mbw) - [ ] [31 秒完成攻击闭环：自主 AI 勒索智能体颠覆传统攻防节奏](https://mp.weixin.qq.com/s/OJdgc49hbz7QZIR0wfAqeQ) - [ ] [如何用 20 年前的漏洞在几分钟内黑掉数千个数据中心](https://mp.weixin.qq.com/s/QBN7A8B8BohcTbVbjtHV-g) - [ ] [等保过了还被问\"数据评估做了没\"？8月20号起上海单位躲不掉](https://mp.weixin.qq.com/s/1hq7PNlZOIK-iJRPJ78QLQ) - [ ] [网安AI速报 | 2026.07.30](https://mp.weixin.qq.com/s/L3NNLB3HyQgRq-ZWtyMTrw) - [ ] [直播预告 | 基于 MT8676 座舱域控平台方案介绍](https://mp.weixin.qq.com/s/XlFGZYoDu9bPeW_ZsNslfQ) - [ ] [美国扩大科技封锁，限制中国人形机器人及电力设备进口](https://mp.weixin.qq.com/s/Fy54Tn6Mf0pzvmya6lInPQ) - [ ] [Anthropic 确认 Claude 全球大范围故障，用户频繁遭遇 529 Overloaded 错误](https://mp.weixin.qq.com/s/U72kPLjrNbMRHXra01pVcg) - [ ] [OpenAI开源Codex Security CLI：用于发现、验证和修复安全漏洞](https://mp.weixin.qq.com/s/wk2hAzMR0SU9CcwIlrp2hA) - [ ] [漏洞复现 | 大华ICC智能物联管理平台 upper-domains 存在信息泄露漏洞](https://mp.weixin.qq.com/s/Bh0mWMFAduJ2w_UZD5i2kg) - [ ] [永久激活密钥：648VIP-275KEY-830MAX-519WIN-462TOP！](https://mp.weixin.qq.com/s/QZSjbsl60pCzaLSIzZiUrA) - [ ] [超2000万元！中孚信息中标某运营商终端保密检查软件集采项目](https://mp.weixin.qq.com/s/siPo-U3KLNzcZ5uRlMEzkQ) - [ ] [除了大模型，AI渗透测试还差啥？](https://mp.weixin.qq.com/s/6Hs5k-sHOS5Qp4QaGAWEHw) - [ ] [招商银行大连分行征集AI能力提升培训项目供应商](https://mp.weixin.qq.com/s/65EnOa7H271k5U1A3hxcRw) - [ ] [145万成交！国泰海通证券AICC平台软件采购](https://mp.weixin.qq.com/s/wJR0kyj3bWW8-zhwQ-iRaw) - [ ] [网安独家！天融信获CCIA数据安全和个人信息保护社会责任评价“三星级”单位](https://mp.weixin.qq.com/s/i6KzNCF7yMcm57Tw3T7Ewg) - [ ] [26年下半年软考考试时间以及部分省市报名时间汇总](https://mp.weixin.qq.com/s/ycfFChLoseHDqtd5PZcCYg) - [ ] [重磅更新｜新版CCSP云安全认证全新开班！](https://mp.weixin.qq.com/s/tAjhpID_Y7C8eLGr4VNpXQ) - [ ] [软件供应链安全管理制度](https://mp.weixin.qq.com/s/8U8btdzmpXG3j4qlSfWSRg) - [ ] [攻防工具资源管理系统技术要求](https://mp.weixin.qq.com/s/q--VaXpopItCwSTX5sNAAg) - [ ] [水利遥感卫星十年规划背后的冷思考，中国卫星离“算准”大江大河还有多远？](https://mp.weixin.qq.com/s/cARn4fPIJwg2yQVuaRTwhQ) - [ ] [Docker 凭什么能统治云原生时代？](https://mp.weixin.qq.com/s/ubCcyooDMw31h_hkUnN8UQ) - [ ] [一款红队后渗透平台，BOF 动态加载、多信道异步通信与内存免杀、AI 辅助自动执行后渗透任务](https://mp.weixin.qq.com/s/jSrhvl1NmPENlUMlsQSH6Q) - [ ] [2026年第十二届中国密码学与数据安全学术会议](https://mp.weixin.qq.com/s/m4msLwpK8aKi6q8mGjU3Sw) - Private Feed for M09Ic - [ ] [spf13 starred NateBJones-Projects/OB1](https://github.com/NateBJones-Projects/OB1) - [ ] [strands-agents released mcp/v0.2.8 at strands-agents/harness-sdk](https://github.com/strands-agents/harness-sdk/releases/tag/mcp/v0.2.8) - [ ] [bolucat released 202607302141 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202607302141) - [ ] [liamg contributed to liamg/grabber](https://github.com/liamg/grabber/pull/39) - [ ] [liamg contributed to infracost/cli](https://github.com/infracost/cli/pull/197) - [ ] [chainreactors released v0.0.0-nightly.20260730 at chainreactors/aiscan](https://github.com/chainreactors/aiscan/releases/tag/v0.0.0-nightly.20260730) - [ ] [esrrhs contributed to esrrhs/fakelua](https://github.com/esrrhs/fakelua/pull/290) - [ ] [mgeeky starred microsoft/llm-backdoor-scanner](https://github.com/microsoft/llm-backdoor-scanner) - [ ] [spf13 starred haierkeys/fast-note-sync-service](https://github.com/haierkeys/fast-note-sync-service) - [ ] [liamg contributed to infracost/go-proto](https://github.com/infracost/go-proto/pull/82) - [ ] [liamg contributed to liamg/jfather](https://github.com/liamg/jfather/pull/7) - [ ] [imroc released v3.60.0 at imroc/req](https://github.com/imroc/req/releases/tag/v3.60.0) - [ ] [TideSec starred JishiTeam-J1wa/Xunfeng](https://github.com/JishiTeam-J1wa/Xunfeng) - [ ] [su18 starred wupco/gitlab-rce-demo](https://github.com/wupco/gitlab-rce-demo) - [ ] [shmilylty starred mrexodia/ida-pro-mcp](https://github.com/mrexodia/ida-pro-mcp) - [ ] [niudaii starred openai/codex-security](https://github.com/openai/codex-security) - [ ] [ring04h starred modelcontextprotocol/go-sdk](https://github.com/modelcontextprotocol/go-sdk) - [ ] [spf13 contributed to erichll/go-fast-note-sync](https://github.com/erichll/go-fast-note-sync/pull/6) - bunnie's blog - [ ] [Name that Ware, July 2026](https://www.bunniestudios.com/blog/2026/name-that-ware-july-2026/) - [ ] [Winner, Name that Ware June 2026](https://www.bunniestudios.com/blog/2026/winner-name-that-ware-june-2026/) - Securelist - [ ] [OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia](https://securelist.com/octlurk-silklurk-backdoors-central-asia/120840/) - [ ] [Toy Ghouls’ new toy: the GenieLocker ransomware](https://securelist.com/genielocker-ransomware-for-windows-linux-and-esxi/120843/) - The Trail of Bits Blog - [ ] [Building secure Uniswap v4 hooks](https://blog.trailofbits.com/2026/07/30/building-secure-uniswap-v4-hooks/) - GuidePoint Security - [ ] [Getting the Sequence Right: Discovery, Categorization, Classification, and Tagging in Data Protection](https://www.guidepointsecurity.com/blog/getting-the-sequence-right/) - PortSwigger Blog - [ ] [From capable AI models to trusted security testing](https://portswigger.net/blog/from-capable-ai-models-to-trusted-security-testing) - Malwarebytes - [ ] [Malwarebytes for Windows, now available on the Microsoft Store](https://www.malwarebytes.com/blog/product/2026/07/malwarebytes-for-windows-now-available-on-the-microsoft-store) - [ ] [Hims & Hers sued over alleged health data privacy failures](https://www.malwarebytes.com/blog/privacy/2026/07/hims-hers-sued-over-alleged-health-data-privacy-failures) - [ ] [Hidden prompt turns Microsoft Copilot into an AI worm](https://www.malwarebytes.com/blog/ai/2026/07/hidden-microsoft-copilot-ai-worm) - Intigriti - [ ] [How to appeal a bug bounty submission](https://www.intigriti.com/researchers/blog/hacking-tools/how-to-appeal-a-bug-bounty-submission) - rtl-sdr.com - [ ] [Testing Airspy’s New WebSpy Web SDR Interface with an RTL-SDR](https://www.rtl-sdr.com/testing-airspys-new-webspy-web-sdr-interface-with-an-rtl-sdr/) - HackerNews - [ ] [俄罗斯黑客利用 Exchange OWA 零日漏洞实现长期邮箱访问](http://0.0.0.0:8080/post/64536) - [ ] [Cisco 警告 FMC 静态凭据漏洞已在零日攻击中被利用](http://0.0.0.0:8080/post/64535) - [ ] [Health-ISAC 警告称 ShinyHunters 针对医疗行业的数据窃取攻击呈上升趋势](http://0.0.0.0:8080/post/64534) - [ ] [三个关键 VMware 漏洞允许身份验证绕过、代码执行和 VM 逃逸](http://0.0.0.0:8080/post/64533) - [ ] [Ruflo MCP 漏洞允许未经身份验证的攻击者运行命令并投毒 AI 记忆](http://0.0.0.0:8080/post/64532) - [ ] [关键 Rails 漏洞可让未经身份验证的攻击者通过图片上传读取服务器文件](http://0.0.0.0:8080/post/64531) - 绿盟科技技术博客 - [ ] [绿盟科技入选首份ADS工具研究报告，智能体安全开发能力获国际权威认可](https://blog.nsfocus.net/%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e5%85%a5%e9%80%89%e9%a6%96%e4%bb%bdads%e5%b7%a5%e5%85%b7%e7%a0%94%e7%a9%b6%e6%8a%a5%e5%91%8a%ef%bc%8c%e6%99%ba%e8%83%bd%e4%bd%93%e5%ae%89%e5%85%a8%e5%bc%80/) - 奇客Solidot–传递最新科技情报 - [ ] [罗技在欧洲销售的新鼠标将可以更换电池](https://www.solidot.org/story?sid=84969) - [ ] [《银莲花公园 2》开始开发](https://www.solidot.org/story?sid=84968) - [ ] [中国煤炭发电量首次低于五成](https://www.solidot.org/story?sid=84967) - [ ] [亚马孙文明在鼎盛时期可能有数百万人口](https://www.solidot.org/story?sid=84966) - [ ] [微波油炸能让薯条更健康](https://www.solidot.org/story?sid=84965) - [ ] [辣椒有助于减轻极端疼痛](https://www.solidot.org/story?sid=84964) - [ ] [熊本地震导致当地半导体工厂停工](https://www.solidot.org/story?sid=84963) - [ ] [日本人口 42 年来首次跌破 1.2 亿](https://www.solidot.org/story?sid=84962) - [ ] [网信办发布反网暴法征求意见稿](https://www.solidot.org/story?sid=84961) - [ ] [俄罗斯指控 Telegram 创始人协助恐怖主义活动](https://www.solidot.org/story?sid=84960) - [ ] [顶尖 AI 初创公司很少发表论文](https://www.solidot.org/story?sid=84959) - 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台 - [ ] [谷歌发布新一代机器人AI模型 剑指“灵巧性”难题](https://blog.upx8.com/%E8%B0%B7%E6%AD%8C%E5%8F%91%E5%B8%83%E6%96%B0%E4%B8%80%E4%BB%A3%E6%9C%BA%E5%99%A8%E4%BA%BAAI%E6%A8%A1%E5%9E%8B-%E5%89%91%E6%8C%87-%E7%81%B5%E5%B7%A7%E6%80%A7-%E9%9A%BE%E9%A2%98) - [ ] [DeepSeek拟在内蒙古建设大型AI数据中心](https://blog.upx8.com/DeepSeek%E6%8B%9F%E5%9C%A8%E5%86%85%E8%92%99%E5%8F%A4%E5%BB%BA%E8%AE%BE%E5%A4%A7%E5%9E%8BAI%E6%95%B0%E6%8D%AE%E4%B8%AD%E5%BF%83) - [ ] [SpaceX 将中国公民和中国产零部件排除在供应链之外](https://blog.upx8.com/SpaceX-%E5%B0%86%E4%B8%AD%E5%9B%BD%E5%85%AC%E6%B0%91%E5%92%8C%E4%B8%AD%E5%9B%BD%E4%BA%A7%E9%9B%B6%E9%83%A8%E4%BB%B6%E6%8E%92%E9%99%A4%E5%9C%A8%E4%BE%9B%E5%BA%94%E9%93%BE%E4%B9%8B%E5%A4%96) - 黑鸟 - [ ] [删掉文件、篡改时间就销声匿迹？NTFS 藏着三层取证铁证](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451187900&idx=1&sn=df8283014b59ba1ab09ab57dbea78c58) - 我的安全视界观 - [ ] [【AI复盘】苹果供应链塔塔电子遭勒索事件](https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487869&idx=1&sn=107591875b0534cc865fd6ab552fd7ef) - 微步在线研究响应中心 - [ ] [原创漏洞 | Apple iOS/macOS Kernel NECP 内核内存损坏漏洞](https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508794&idx=1&sn=a1930c22e9e7e12cedb3628319463abd) - CT Stack 安全社区 - [ ] [MonkeyWork 发布，桌面 AI 就位，办公自成闭环](https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247500282&idx=1&sn=cd29f7c3dfd255b82384b95d7c7ff1eb) - 威努特安全网络 - [ ] [云边协同筑基 全域防御护航智慧高速建设](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651143274&idx=1&sn=11eb9fd2132a7013ba015d9db11745c8) - 安全内参 - [ ] [工控遇袭！30多个地方供水系统遭协同网络攻击，有水厂临时关停](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516351&idx=1&sn=edec3b5a25410a8bedc2fc0b38063d44) - [ ] [CNCERT：关于“FakeSvc”挖矿组织大规模传播恶意程序的风险提示](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516351&idx=2&sn=68ba217b49bbe245105af813ac54fa0e) - Shostack & Friends Blog - [ ] [AI and Business Strategy](https://shostack.org/blog/ai-and-business-strategy/) - 安全客 - [ ] [新一轮银狐攻击_管控终端再成控制工具](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649790305&idx=1&sn=59d3131871f875930282f72a5fc17ed2) - 天御攻防实验室 - [ ] [我们离自主网络武器还有多远](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247487099&idx=1&sn=eef3d1789c1ca5f2bbc728e4f7f4b380) - 安全研究GoSSIP - [ ] [G.O.S.S.I.P 阅读推荐 2026-07-30 杀死那个密码学研究员](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501912&idx=1&sn=338a311543a9733d2a18295071964fcc) - 中国信息安全 - [ ] [论坛·原创 | 特朗普第二任期人工智能人才政策表征与影响](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664265199&idx=1&sn=2f5835871d8bdfdc8461477480a586a1) - [ ] [关注 | 中国人民银行等九部门联合印发《关于加强科技金融领域数据开发利用的通知》](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664265199&idx=2&sn=f5d65beeab659deb4c55e8190357da3b) - [ ] [专家解读｜在法治轨道上推进反网络暴力工作行稳致远](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664265199&idx=3&sn=e155d8aef97ddb9958e4c732572ad666) - [ ] [专家解读 | 以技术筑基与融合赋能，全面开启IPv6高质量发展新征程](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664265199&idx=4&sn=447ebf833df89a04ee8106b0f9f4fc91) - [ ] [前沿 | 推动全球人工智能治理从理念走向行动](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664265199&idx=5&sn=0aa186608d8b553fdeac0f96bcde89ba) - [ ] [评论 | 私域直播不能变成“信任收割机”](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664265199&idx=6&sn=05643f75ec9c0f67d0778c0eb5062540) - XCTF联赛 - [ ] [倒计时2天｜第二届OpenHarmony CTF（Capture The Flaw）智能漏洞挖掘赛](https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247516623&idx=1&sn=6ab58c2fc410ac8bd46f28a5f26d093d) - 数世咨询 - [ ] [英伟达与科技巨头联合发起安全人工智能联盟](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543630&idx=1&sn=8bd65c0020e5d5270651e7e82b5fa586) - 奇安信威胁情报中心 - [ ] [撕开"合法压缩库"的伪装深挖藏在 CRT 初始化链里的特种木马](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247519628&idx=1&sn=c515ce34ca15fdc9652062605c0d6ca4) - 微步在线 - [ ] [除了大模型，AI渗透测试还差啥？](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650187189&idx=1&sn=8e892d79206acfd212cfb456c3c72313) - 天黑说嘿话 - [ ] [【88VIP专属高返小助手】领隐藏优惠券指定入口，购物省钱操作指南~24小时自助查券返利机器人！](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486296&idx=1&sn=1870a71c8e4a5567d4b29a130afb535c) - NOVASEC - [ ] [【工具】ocrapi和相关辅助工具](https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490921&idx=1&sn=4861a443da08f97cf1fc36bd7a3583ca) - 安全圈 - [ ] [【安全圈】密码改了也没用！俄罗斯黑客用这招永久窃取邮箱](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078077&idx=1&sn=0f70e12e13f216d394d77f9f76129ea5) - [ ] [【安全圈】Cisco 防火墙惊现后门，黑客登录只需一个密码](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078077&idx=2&sn=f9c9a8e55b7db560ec392c85530a0c15) - [ ] [【安全圈】30个水厂一夜瘫痪，美国供水系统遭毁灭性打击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078077&idx=3&sn=1b88cc217fba783a326bb5afe7e4f29a) - 看雪学苑 - [ ] [从时间片轮转到调用级并发：unidbg 单后端多线程架构重构](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617971&idx=1&sn=4622615543a67f8798504569081adc7a) - [ ] [从临沂出发｜HG TALK 第四期：两个人的成长与一场峰会的幕后](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617971&idx=2&sn=e3ad72347eaed7fc028a7f60205efcfd) - [ ] [连环入侵！OpenAI失控AI智能体攻破第二家企业](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617971&idx=3&sn=3559f52fe9ef479f1fc3f1821d680ae9) - 极客公园 - [ ] [顶配预售价 30 万元，小米澎程不当「红米汽车」](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653111370&idx=1&sn=cbd935b287de23e73a688f66a87ea539) - [ ] [飞书并入豆包：字节跳动的一次目标重塑](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653111360&idx=1&sn=8dcb0fd35868f364066ed48a22f23492) - [ ] [三星二季度利润同比增长 18 倍；Deepmind 拆散重组诺奖项目团队；Hugging Face 披露 AI 入侵全过程报告 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653111343&idx=1&sn=1d125f3c9b91d254261857b1f7b4f8b7) - 京东安全应急响应中心 - [ ] [【公告】关于 AI 生成漏洞报告提交违规行为通告及成长守卫分规则更新](https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727851083&idx=1&sn=9b6f68096f5b1959fbf0fe5c816ad560) - 软件安全与逆向分析 - [ ] [安卓最新Root提权漏洞分析与利用](https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485374&idx=1&sn=70e3f7da734cb81e92aedc72e7e58988) - 复旦白泽战队 - [ ] [讲座回顾 | 复旦白泽青年学者论坛第一期](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247499549&idx=1&sn=5d6b77c2e4f818897c854d07c3fefd3c) - 网安国际 - [ ] [会议预告 | 第一届CCF网络与系统安全大会嘉宾阵容揭晓](https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652318363&idx=1&sn=a5576248f393b9c9702488a41724bd1e) - [ ] [CCF-NSS 专题论坛预告 | 智能体安全技术及其应用论坛](https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652318363&idx=2&sn=0b28bd313d94cf45458511e7fea5a481) - [ ] [CCF-NSS 专题论坛预告 | 智能系统底座安全论坛](https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652318363&idx=3&sn=1ff9cf5830306448e5cf37f0d9f1a204) - [ ] [CCF-NSS 专题论坛预告 | AI时代的网安实践教育探讨论坛](https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652318363&idx=4&sn=495b9ceff005233fd21f4943c25ac134) - [ ] [CCF-NSS 专题论坛预告 |工业互联网系统安全论坛](https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652318363&idx=5&sn=da52afb0bb60eca6892d144de3cddd9a) - [ ] [CCF-NSS 专题论坛预告 |互联网基础设施安全论坛](https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652318363&idx=6&sn=5c719d77ec0f332137ac1ab980e3889c) - [ ] [CCF-NSS 专题论坛预告 |隐私保护计算论坛](https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652318363&idx=7&sn=14fea0b46ff420539b11b733026de4c4) - [ ] [参会指南 | 第一届CCF网络与系统安全大会报名通道，酒店预订及交通指引](https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652318363&idx=8&sn=2dd0856dfbfb2362edd021fc7af59f5c) - 火绒安全 - [ ] [层层伪装 暗藏玄机--银狐木马借正规驱动静默接管你的电脑](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247535841&idx=1&sn=5fc3e4607b8c533860698b514db9c807) - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247535841&idx=2&sn=ee43cfcfe4e2ffcc0dc60f51b0d433ca) - DEVCORE 戴夫寇爾 - [ ] [/dev/meet 資安小聚 v2026.06.17 Red Team AMA](https://devco.re/blog/2026/07/30/dev-meet-red-team-ama-v2026-06-17/) - 安全行者老霍 - [ ] [根据科技领导者的观点，AI 智能体时代将脱颖而出的 3 类人](https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486862&idx=1&sn=e1bad6452389b78c2de2bcbab83c140a) - 情报分析师 - [ ] [“80万件武器流入黑市”是真的吗？五步拆穿国际新闻的叙事机关](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650568897&idx=1&sn=7244aae913ae9811989a1e4b5adffed9) - [ ] [【深度研判】加拿大籍华裔北约实习生因间谍罪在比利时被捕，五大眼联盟对华裔渗透叙事与海外我人安全风险升级](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650568897&idx=2&sn=20f029d78604f5ddc4892c5fef5f3aad) - 威胁猎人Threat Hunter - [ ] [风控越严，黑产欺诈手法越“真实”｜2026年上半年信贷欺诈研究报告发布](https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247504979&idx=1&sn=18ce5307816c7f1a2d8f00672fd22d74) - ICT Security Magazine - [ ] [IOC nella sicurezza informatica: limiti e approccio ibrido alla bonifica logica](https://www.ictsecuritymagazine.com/articoli/ioc-bonifica-logica/) - SANS Internet Storm Center, InfoCON: green - [ ] [ISC Stormcast For Thursday, July 30th, 2026 https://isc.sans.edu/podcastdetail/10030, (Thu, Jul 30th)](https://isc.sans.edu/diary/rss/33200) - [ ] [Reconnaissance First: An SSH Bot That Sizes Up Your Hardware Before Deploying a Miner [Guest Diary], (Thu, Jul 30th)](https://isc.sans.edu/diary/rss/33198) - Lenny Zeltser - [ ] [A Field Guide to the AI Security Market](https://zeltser.com/ai-security-market-field-guide) - bellingcat - [ ] [Will Ronaldo Cry? World Cup Fans Bet Billions Through Prediction Markets](https://www.bellingcat.com/news/2026/07/30/will-ronaldo-cry-world-cup-fans-bet-billions-through-prediction-markets/) - 白泽安全实验室 - [ ] [伊朗背景APT组织Mirage Kitten更新武器库，以新型后门与隧道工具持续对中东及非洲地区实施网络攻击活动](https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492961&idx=1&sn=b2a5eb75a1921313adf93682b03da54c) - Javvad Malik - [ ] [Welcome to JFK, Please Lower Your Expectations](https://javvadmalik.com/2026/07/30/welcome-to-jfk-please-lower-your-expectations/) - The Hacker News - [ ] [DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware](https://thehackernews.com/2026/07/dprk-linked-macos-malvertising-uses.html) - [ ] [ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories](https://thehackernews.com/2026/07/threatsday-ai-powered-hacking-370.html) - [ ] [Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database](https://thehackernews.com/2026/07/azure-cosmos-db-flaw-exposed-platform.html) - [ ] [Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents](https://thehackernews.com/2026/07/microsoft-copilot-for-word-can-copy.html) - [ ] [The Network Has Become the Control Plane for AI Security](https://thehackernews.com/2026/07/the-network-has-become-control-plane.html) - [ ] [Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts](https://thehackernews.com/2026/07/hackers-exploit-anysign4pc-via-hacked.html) - [ ] [SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT](https://thehackernews.com/2026/07/silverfox-targets-japanese-manufacturer.html) - [ ] [Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation](https://thehackernews.com/2026/07/russian-hackers-exploit-microsoft-owa.html) - [ ] [FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks](https://thehackernews.com/2026/07/fcc-blocks-new-foreign-produced-robots.html) - [ ] [Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet](https://thehackernews.com/2026/07/amazon-links-debug-and-chalk-npm-hijack.html) - [ ] [Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data](https://thehackernews.com/2026/07/cisco-fmc-zero-day-actively-exploited.html) - Trend Micro Research, News and Perspectives - [ ] [TrendAI™ Joins Nvidia’s Open Secure AI Alliance: Closing the Gap Between AI Builders and AI Defenders](https://www.trendmicro.com/en_us/research/26/g/open-secure-ai-alliance.html) - [ ] [Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility](https://www.trendmicro.com/en_us/research/26/g/open-secure-ai-alliance.html) - Schneier on Security - [ ] [American Being Prosecuted for Wiping His Phone Before Handing It Over to Border Officials](https://www.schneier.com/blog/archives/2026/07/american-being-prosecuted-for-wiping-his-phone-before-handing-it-over-to-border-officials.html) - [ ] [Should You Use AI for a Task? Here’s a Simple Way to Decide](https://www.schneier.com/blog/archives/2026/07/should-you-use-ai-for-a-task-heres-a-simple-way-to-decide.html) - Instapaper: Unread - [ ] [Cyber Resilience Act, le nuove linee guida della Commissione Europea per le imprese](https://www.cybersecitalia.it/cyber-resilience-act-le-nuove-linee-guida-della-commissione-europea-per-le-imprese/67970/) - [ ] [Vehicle forensics a practical guide](https://www.magnetforensics.com/blog/vehicle-forensics-a-practical-guide/) - [ ] [Conversation Index Analysis in Email Forensics — Part 2](https://www.metaspike.com/conversation-index-analysis-email-forensics/) - [ ] [Locked In or Locked Out Unlocking ZIP, RAR, PDF, and Microsoft Office Passwords](https://blog.elcomsoft.com/2026/07/locked-in-or-locked-out-unlocking-zip-rar-pdf-and-microsoft-office-passwords/) - [ ] [Windows Event Log Analysis Suspicious Services](https://digitalinvestigator.blogspot.com/2026/07/windows-event-log-analysis-suspicious.html) - [ ] [Techniques of Deanonymization](https://www.pillolhacking.net/techniques-of-deanonymization/) - GRAHAM CLULEY - [ ] [North Korea’s elite hackers turned on their own government – and got caught](https://www.bitdefender.com/en-us/blog/hotforsecurity/north-korea-hackers-own-government) - Security Affairs - [ ] [Researchers Expose Flying Eagle Criminal Ecosystem Behind Fake Chinese Police App](https://securityaffairs.com/196369/malware/researchers-expose-flying-eagle-criminal-ecosystem-behind-fake-chinese-police-app.html) - [ ] [Why brand impersonation is becoming an initial access vector](https://securityaffairs.com/196359/hacking/why-brand-impersonation-is-becoming-an-initial-access-vector.html) - [ ] [Cybercriminals Are Leveraging Autonomous AI Offensive Security Agents](https://securityaffairs.com/196331/ai/cybercriminals-are-leveraging-autonomous-ai-offensive-security-agents.html) - [ ] [Analog Devices Discloses Data Breach After Unauthorized System Access](https://securityaffairs.com/196320/data-breach/analog-devices-discloses-data-breach-after-unauthorized-system-access.html) - [ ] [FCC Restricts New Foreign Robots and Inverters Over Security Risks](https://securityaffairs.com/196308/security/fcc-restricts-new-foreign-robots-and-inverters-over-security-risks.html) - [ ] [U.S. CISA adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/196289/security/u-s-cisa-adds-a-cisco-secure-firewall-management-center-fmc-flaw-to-its-known-exploited-vulnerabilities-catalog.html) - [ ] [eSIM Plus and Nicegram Share Belarus-Linked Codebase, Analysis Finds](https://securityaffairs.com/196280/security/esim-plus-and-nicegram-share-belarus-linked-codebase-analysis-finds.html) - Krebs on Security - [ ] [Read This Before You Buy That TV Streaming Stick](https://krebsonsecurity.com/2026/07/read-this-before-you-buy-that-tv-streaming-stick/) - Daniel Miessler - [ ] [What the Singularity Actually Means](https://danielmiessler.com/blog/what-the-singularity-actually-means?utm_source=rss&utm_medium=feed&utm_campaign=website) - [ ] [The Answer to the Harness Question](https://danielmiessler.com/blog/the-answer-to-the-harness-question?utm_source=rss&utm_medium=feed&utm_campaign=website)
每日安全资讯（2026-07-31）