[每日信息流] 2026-01-24

# 每日安全资讯（2026-01-24）

- SecWiki News
  - [ ] [SecWiki News 2026-01-23 Review](http://www.sec-wiki.com/?2026-01-23)
- Doonsec's feed
  - [ ] [谁在线上？利用 Windows Telephony Service 服务器模式漏洞：从任意文件写入到 RCE](https://mp.weixin.qq.com/s/vXPKjS4NYl5BzCVZNEWgFA)
  - [ ] [你与顶尖挖洞大神的距离，只差这份信息收集“降维打击”指南](https://mp.weixin.qq.com/s/VShhEUo7maojp8vD1b8epA)
  - [ ] [以色列Cellebrite设备取证手机后遗留的痕迹特征](https://mp.weixin.qq.com/s/Vmyg6dtYir7NppiRfIREKw)
  - [ ] [用友YonBIP LoginWithV8接口存在任意文件读取漏洞CVE-2025-66744 附POC](https://mp.weixin.qq.com/s/hIS7CA_ZSg2BjU-qvQOFig)
  - [ ] [隧道代理攻防技术战争手册](https://mp.weixin.qq.com/s/8zJpJHGaa6hTfaUTMHnZ-g)
  - [ ] [【高危漏洞预警】Azure ARM权限提升漏洞CVE-2026-24304](https://mp.weixin.qq.com/s/Qi7ikyen7LqwrdBCwY41_g)
  - [ ] [锦岳智慧荣获3项CCRC安全资质认证，构建信息安全全链条服务新标杆](https://mp.weixin.qq.com/s/Dwy6_4bmMc6YC2uNZcqung)
  - [ ] [让伟大不被遗忘，让精神永远传承 - U0001fae1](https://mp.weixin.qq.com/s/z3splx22yB8UauKCny9Uqw)
  - [ ] [【情报】英国新成立了两个情报机构](https://mp.weixin.qq.com/s/h048ORIg0m3OACjhG8EMig)
  - [ ] [【资料】英国2025战略国防审查](https://mp.weixin.qq.com/s/fqthv_WsQOMpKTblP--uyQ)
  - [ ] [WindowsBaselineAssistant——Windows安全基线核查加固助手](https://mp.weixin.qq.com/s/Lo-s_AjFYNDf8QvESkrdGg)
  - [ ] [我们用AI提炼了88636个真实漏洞的\"黑客思维\"，现在把方法论开放给所有人](https://mp.weixin.qq.com/s/tY6blgq3HeOqSydrmR_HSw)
  - [ ] [人工智能监管新模式：基于人工智能安全研究的经验和建议](https://mp.weixin.qq.com/s/zpXngVshF5hCR66gOWESMg)
  - [ ] [美国总统特特朗普在达沃斯公布250亿美元加沙重建计划](https://mp.weixin.qq.com/s/Xn-Gzm3d6THEDF-GeFH15A)
  - [ ] [G.O.S.S.I.P 阅读推荐 2026-01-23 DualLM](https://mp.weixin.qq.com/s/NlWufm7TyptiSZeGhms4-w)
  - [ ] [【安全锐评】一味沉迷于黑客攻防，反而会给企业造成灭顶之灾](https://mp.weixin.qq.com/s/eA26rrv_5_WFs0pOd4hKtw)
  - [ ] [基于AI的开源情报收集工具](https://mp.weixin.qq.com/s/jOVu1k19qGeohHKt1mHY9A)
  - [ ] [耐克被勒索软件加入勒索名单上了](https://mp.weixin.qq.com/s/nRcgSJy2HsRRTwaU8MTQ9w)
  - [ ] [某网安大厂将实行大小周工作制](https://mp.weixin.qq.com/s/rZvyHbWkb7uLDT8KAgY8Yg)
  - [ ] [Sandboxie——轻量型沙箱隔离工具](https://mp.weixin.qq.com/s/HNl5oUKCVbiP6d2LpSNKuQ)
  - [ ] [DeepAudit ！Multi-Agent 协作击穿代码漏洞](https://mp.weixin.qq.com/s/qrIa7_dvkE3S3rm2Q7YfPA)
  - [ ] [一次有惊无险事故引发的思考：从 ClickOps 到 GitOps](https://mp.weixin.qq.com/s/3R6sLyU5gns-1PbDzqUQeQ)
  - [ ] [Fortinet 确认 FortiCloud SSO 身份验证绕过漏洞正被积极利用](https://mp.weixin.qq.com/s/vngnc3t2mZfVMflpOhYaYw)
  - [ ] [寰球密码简报（2026年乙本第2期）丨荷兰《后量子密码迁移手册（第二版）》中的迁移政策与实践指南（下）：全球标准、法规演进与实践启示](https://mp.weixin.qq.com/s/yhiY5Htcnrv8TLkDSxDXiw)
  - [ ] [LingOps (灵控)：AWD网络安全攻防竞赛自动化web平台](https://mp.weixin.qq.com/s/sMvqBTdPyMG0rAlKv3y90Q)
  - [ ] [在AI的浪潮里，普通人只要学会开车就赢了](https://mp.weixin.qq.com/s/jtMOrJvc93bh9I82DkWUUQ)
  - [ ] [网络安全人士必知的JSFinder爬虫工具](https://mp.weixin.qq.com/s/2MJNDb7nNidwyuZBr4e_3Q)
  - [ ] [第十九届全国大学生信息安全竞赛（创新实践能力赛）暨第三届“长城杯”网数智安全大赛（防护赛）初赛裁决公告](https://mp.weixin.qq.com/s/qi3JZzLTNbv4WAFjjT45ug)
  - [ ] [关于半决赛入围队伍名单的公示](https://mp.weixin.qq.com/s/Ku4Q4XMPEQwcZKNPCUc_gw)
  - [ ] [幽灵再现：对长城杯(第十九届全国大学生信息安全竞赛)初赛裁决公告的分析](https://mp.weixin.qq.com/s/ptjMi8IGdofAem6F6aEFjA)
  - [ ] [今日互联网安全速报2026-01-23|Gen4.5|澎湃OS|CPU|LongCat模型|阿里云|Chrome|Safari|小团搜索|思科【黑客驰】](https://mp.weixin.qq.com/s/gMzL5jlvjBxMWJQQ91Rb9A)
  - [ ] [无线网络检测工具NetIQ Chariot](https://mp.weixin.qq.com/s/ycwOOJSffBWtrw8r-UqQaQ)
  - [ ] [利用 WAF 窃取 Salesforce OAuth 令牌](https://mp.weixin.qq.com/s/eKC2GH7qNRWHD9z_xEkqCw)
  - [ ] [【AI安全】DeepAudit 降临！Multi-Agent 协作击穿代码漏洞防线](https://mp.weixin.qq.com/s/raMZ9uzpZFh_hKwtFh9onA)
  - [ ] [改命的底层逻辑：始于能力，困于业力，终于愿力](https://mp.weixin.qq.com/s/-gY9A5UBuAjTZw4OT-m6uw)
  - [ ] [【接口漏洞第八章第四节】GraphQL漏洞挖掘实战：找不到参数？用“内省”透视API底层](https://mp.weixin.qq.com/s/DND4mvouRPfdwAJtiQSGNg)
  - [ ] [通知 | 国家网信办等八部门印发《可能影响未成年人身心健康的网络信息分类办法》（附全文）](https://mp.weixin.qq.com/s/FqQAAiuCd6hjayfpUKY_Og)
  - [ ] [前沿 | 以智能设备为媒介的网络攻击及责任划分](https://mp.weixin.qq.com/s/HFvXKKS1vbNAsUJZKJ0DWg)
  - [ ] [专家解读 | 以精细化信息分类管理筑牢未成年人网络保护屏障](https://mp.weixin.qq.com/s/ma-P01JRMc_xRKz-6-m2Fw)
  - [ ] [关注 | 聚焦停车扫码、人脸识别等重点场景！最高检发布个人信息保护检察公益诉讼典型案例](https://mp.weixin.qq.com/s/Pclq6YLxsPT2Nru4osc0pg)
  - [ ] [盘点 | 2025年度网络热点谣言汇总，新的一年别再相信了！](https://mp.weixin.qq.com/s/4TlcrYUWJ8AVJ0dhHECK0A)
  - [ ] [家长注意：警惕孩子看“变味”的AI动画！](https://mp.weixin.qq.com/s/YOrAVa6-Q8clDWhJ-5XjqQ)
  - [ ] [ISC2课程：Foundations of AI](https://mp.weixin.qq.com/s/Be3R1_6jD7dYgjZWmL4xIA)
  - [ ] [程序员32岁猝死！他的GitHub不会再更新了！公司不配合工伤认定](https://mp.weixin.qq.com/s/JFICuAZO14YHZDN5smbgXg)
  - [ ] [TikTok美国：成立数据安全公司，周受资任董事，字节仍为单一大股东](https://mp.weixin.qq.com/s/PAv3-w-FpWWq-pp-tznlqw)
  - [ ] [免费开源！AI 智能问答平台，依托DeepSeek、Qwen，集知识问答RAG、智能题库、可视化讲解于一身的“全能 AI 学习助手”](https://mp.weixin.qq.com/s/pApBfa--nwiLvTgWGNBEzw)
  - [ ] [金蝶OA-SQL&任意文件下载](https://mp.weixin.qq.com/s/m1B1xS7fGxeH44bYnZMavQ)
  - [ ] [警惕“NFC欺诈幽灵”：针对中国区用户的NFC中继攻击及恶意软件深度分析](https://mp.weixin.qq.com/s/KiLkjQNhFI_M-yugxO-jXw)
  - [ ] [国开行启动854万智能技术平台项目，覆盖AI问数、智能写作等4大场景](https://mp.weixin.qq.com/s/BsaZgr3Ty5ww5Nj3L-_abw)
  - [ ] [AI快讯：银联积极构建AI应用生态，蚂蚁数科金融AI落地保险业](https://mp.weixin.qq.com/s/aM6rhzlc98IsyipVEtHL9w)
  - [ ] [招行上海分行招数字金融岗(AI方向)](https://mp.weixin.qq.com/s/yWh1bld4TR18w4b1DSNagw)
  - [ ] [“十五五”开局之年第一课，习近平总书记对全面深刻准确把握四中全会精神再部署](https://mp.weixin.qq.com/s/3XGek3BVsdjE-g2H0hyY4w)
  - [ ] [【实验室】专家观点系列三 | 陈海波：万物智联时代操作系统的创新路径与生态构建](https://mp.weixin.qq.com/s/B-kowYSqIA8LgsdIxnczvg)
  - [ ] [CertiK创始人顾荣辉亮相达沃斯：锚定上市目标，进军机构市场](https://mp.weixin.qq.com/s/RlWAEDPYQ3G2Mpy1sLCoGg)
  - [ ] [安德玛：已就“7200 万条客户记录泄露”传闻展开调查](https://mp.weixin.qq.com/s/aKqvfHtpPmIqO5nTysvPzg)
  - [ ] [jython环境安装&&插件Upload Auto Fuzz推荐](https://mp.weixin.qq.com/s/uRXhrqCzEEYGoarScQXzhg)
  - [ ] [2025年我国八大网络安全重点事件盘点](https://mp.weixin.qq.com/s/k_kdhR8UBeScumE1nvJbEg)
  - [ ] [漏洞速递 | CVE-2026-21858 RCE漏洞](https://mp.weixin.qq.com/s/t5YYmUlrraGIMGyGisfB1A)
  - [ ] [SmarterMail 认证绕过新漏洞被用于劫持管理员账号](https://mp.weixin.qq.com/s/U1GMcISBNQJFY_kn0yPwLA)
  - [ ] [思科修复已遭利用的 Unified CM RCE 0day漏洞](https://mp.weixin.qq.com/s/9bLUTAz1KmsqpOTvd46AQg)
  - [ ] [揭秘\"间接提示注入\"如何将Google Gemini变成监控工具](https://mp.weixin.qq.com/s/p7dq8HDuzkWUxpD5MPKOHg)
  - [ ] [FortiGate防火墙遭自动化攻击，攻击者窃取配置数据](https://mp.weixin.qq.com/s/zcEhHRGryf4Uv8Ej-QVbBg)
  - [ ] [Redis官方容器曝出RCE漏洞，研究人员详解\"简单\"栈溢出利用链](https://mp.weixin.qq.com/s/wuJbkzB1I9thygskKbQIGg)
  - [ ] [LockBit 5.0最新附属面板与加密变种](https://mp.weixin.qq.com/s/nAiP736OKaNAAfw8c7DsMg)
  - [ ] [行业资讯：关于推动解决政府采购异常低价问题的通知](https://mp.weixin.qq.com/s/rJ0kvGR6O96KHqvvdsFbeA)
  - [ ] [网安“大众点评”：2026中国网络安全产品用户调查启动](https://mp.weixin.qq.com/s/gGGu3MCHSiLbi4DVgdqiuQ)
  - [ ] [立讯精密遭RansomHub攻破，苹果、英伟达等绝密图纸恐曝光](https://mp.weixin.qq.com/s/5NE-Lxh3cIQOULDXK4CLUg)
  - [ ] [免费赠送 | 企业办公安全意识培训科普素材（第十二期）](https://mp.weixin.qq.com/s/hZvzflSQ-F1eX3oMeE73hA)
  - [ ] [武网安汇 | 武汉汇科智创：做更懂工程建设行业的数字化服务商](https://mp.weixin.qq.com/s/sUVMb6aBBWl_xdrXVGB6yg)
  - [ ] [招聘 | 新锐网络安全企业多岗位高薪招聘！！](https://mp.weixin.qq.com/s/DoUzezr3vh2t6u0cV9LAiw)
  - [ ] [2026（第三届）“金灵光杯” 中国互联网创新大赛出海创新专题赛征集启动](https://mp.weixin.qq.com/s/WYITGfMTn_cuJ7YIWH9-Qg)
  - [ ] [2026·AI启航：360教育的智能进化之路](https://mp.weixin.qq.com/s/sYJ55oILyC5Is-IyBXuC2A)
  - [ ] [溯源案例解析：我是怎么一步步找到攻击者的](https://mp.weixin.qq.com/s/8-9nH6bni-abRj86Go1O-g)
  - [ ] [计划有变，明天夺冠！](https://mp.weixin.qq.com/s/bC-H1fVf3chzWEM-i6dTKQ)
  - [ ] [帮朋友招4个安全专家](https://mp.weixin.qq.com/s/X93qa8yInqGNqTUooLBnBA)
  - [ ] [云计算环境下的等级保护与普通等保的核心差异](https://mp.weixin.qq.com/s/5GQIlUvs-RPxQX42iDsKvg)
  - [ ] [煤矿企业做网络安全等保定级备案需要注意哪些事项](https://mp.weixin.qq.com/s/WeayRBAIKGYfZZGjtkDN2g)
  - [ ] [《网络安全2026：启航“十五五”》报告重磅发布](https://mp.weixin.qq.com/s/8Ae9sH8MMVOblXKo5HygWw)
  - [ ] [游戏安全入门-扫雷分析&远程线程注入](https://mp.weixin.qq.com/s/2Zd0rTXFMl0bPaWhxjkCvA)
  - [ ] [【免费领】国内第一部XSS跨站脚本攻击技术大全](https://mp.weixin.qq.com/s/kKf6wjRmlPS10tbtz_plzQ)
  - [ ] [深度丨中国电信：基于5G专网的智慧酿造系统设计及应用](https://mp.weixin.qq.com/s/ff59zLiCeL7zN9vtOJQSGA)
  - [ ] [征求意见稿丨城市全域数字化转型城市可信数据空间建设指引（附下载）](https://mp.weixin.qq.com/s/Vh0nqzLVD7-jzbHIoZeifw)
  - [ ] [纯静态解决遇到的各类global-metadata加密问题](https://mp.weixin.qq.com/s/FKJiDmOYIetzkITMfk7ssg)
  - [ ] [u200b原来有人靠「找漏洞」每月多赚几万](https://mp.weixin.qq.com/s/CDpIwGzYg0ErzbqRBNiG8w)
  - [ ] [苹果第二大代工厂立讯精密遭勒索软件攻击，机密数据泄露](https://mp.weixin.qq.com/s/mMJVU2FTGKMr6GhBkAQkVg)
  - [ ] [关保联盟 | 教育部教指委指导，“网络安全实战化人才培养师资培训”招生](https://mp.weixin.qq.com/s/9aaJEF_aS51V7hka5cxeEg)
  - [ ] [国家网信办等八部门发布《可能影响未成年人身心健康的网络信息分类办法》](https://mp.weixin.qq.com/s/4HnaTJCNHDhF4uYOmsh-XA)
  - [ ] [《可能影响未成年人身心健康的网络信息分类办法》答记者问](https://mp.weixin.qq.com/s/TwIyuITNx19LSdjjyx2VYA)
  - [ ] [专家解读｜以精细化信息分类管理筑牢未成年人网络保护屏障](https://mp.weixin.qq.com/s/_5zHjAHeu8HFfnGAXWAEzQ)
  - [ ] [美国移民与海关执法局（ICE）的21个秘密项目曝光！](https://mp.weixin.qq.com/s/AmGbpvemtGVPqf6QOJ1RPw)
  - [ ] [每周蓝军技术推送（2026.1.17-2026.1.23）](https://mp.weixin.qq.com/s/BGoMJ6tLUezMDzHtpC-EzQ)
  - [ ] [勒索后数据恢复只能寄望于攻击者犯错？——从INC勒索事件与“韧性债务”看企业数据恢复的神话](https://mp.weixin.qq.com/s/uCQm9T0qIxQimGY9U-beHA)
  - [ ] [蝉联殊荣 | 珞安科技入选“2025北京数字经济企业百强”](https://mp.weixin.qq.com/s/fyUyFUf_RbWpnaLc5C05_A)
  - [ ] [【国际视野】美国网络安全和基础设施安全局与英国国家网络安全中心等多机构联合发布《运营技术安全连接原则》指南](https://mp.weixin.qq.com/s/SukGXqvfFuNsSOhssMImbw)
  - [ ] [在智子的监视下，如何好好的聊天？Signal协议简介](https://mp.weixin.qq.com/s/yHUe9XeO1Nzi8RJuKcbuew)
  - [ ] [我国关键信息基础设施安全风险及对策建议](https://mp.weixin.qq.com/s/68fCSxSz7rhrKkSqgZfIKg)
  - [ ] [Python 面向对象编程——继承（Inheritance）](https://mp.weixin.qq.com/s/_V84FcBTNzqJ28fZbDVksw)
  - [ ] [【玄域】Web/App渗透靶场-新增1个web端逻辑缺陷类靶场&5份实战漏洞报告](https://mp.weixin.qq.com/s/joYcyaFX_hjLbBG5d0J7eQ)
  - [ ] [一周回顾：有关部门接连披露境外网攻信息，AI变革网络犯罪产业链](https://mp.weixin.qq.com/s/_NXilSfSR9_sHtS7CvhGaw)
  - [ ] [交通运输部就数据安全征求意见，加速推动合规纵深化、精细化](https://mp.weixin.qq.com/s/KcBcJUyMOTa2jea462SAng)
  - [ ] [阿里云 STS泄露导致的接管](https://mp.weixin.qq.com/s/dGarHLgpoWfG_aC7T6EEEQ)
  - [ ] [第十九届全国大学生信息安全竞赛（创新实践能力赛）暨第三届“长城杯”网数智安全大赛（防护赛）半决赛入围队伍名单公示](https://mp.weixin.qq.com/s/U2Gjs90ukufoIQNEuco7VA)
  - [ ] [Docker镜像构建还在瞎搞？运维大佬的生产级玩法，直接抄作业](https://mp.weixin.qq.com/s/XHfo_jYP8P6gxOmut_zawA)
  - [ ] [谷歌Gemini漏洞敲响警钟！AI提示词攻击或成企业致命隐患](https://mp.weixin.qq.com/s/G28LqtWBDN9uQEC8rLLlxg)
  - [ ] [西兴派出所党支部携手安恒信息一党支部等开展党建共建主题活动](https://mp.weixin.qq.com/s/HZ4k49LvmKrFZFAr6lWHdg)
- 安全客-有思想的安全新媒体
  - [ ] [威胁行为者将Visual Studio Code武器化，部署多阶段恶意软件](https://www.anquanke.com/post/id/314458)
  - [ ] [遭野外利用：思科关键RCE漏洞（CVE-2026-20045）已被攻击](https://www.anquanke.com/post/id/314457)
  - [ ] [CVE-2025-13878：高严重性BIND漏洞可致服务器远程崩溃](https://www.anquanke.com/post/id/314469)
  - [ ] [攻击者滥用Discord传播剪贴板劫持程序，窃取粘贴操作中的钱包地址](https://www.anquanke.com/post/id/314467)
  - [ ] [带宽盗贼：伪造的Notepad++安装包暗藏 “代理劫持”恶意软件](https://www.anquanke.com/post/id/314481)
  - [ ] [蓝色起源推出太赫兹波卫星网络：6Tbps速率对标星链](https://www.anquanke.com/post/id/314480)
  - [ ] [勒索软件组织RansomHub攻击苹果供应商立讯精密，窃取1TB未发布产品数据](https://www.anquanke.com/post/id/314487)
  - [ ] [攻击者盯上飞塔刚修复的高危漏洞](https://www.anquanke.com/post/id/314490)
  - [ ] [微软更新Microsoft 365企业版应用安全基线](https://www.anquanke.com/post/id/314495)
  - [ ] [传统公钥基础设施存短板，亚太地区面临服务中断与安全漏洞风险](https://www.anquanke.com/post/id/314499)
- LevelBlue Blog
  - [ ] [8 Little-Known Facts About Managed Detection and Response (MDR)](https://levelblue.com/blogs/levelblue-blog/8-little-known-facts-about-managed-detection-and-response-mdr/)
- Private Feed for M09Ic
  - [ ] [joaoviictorti starred rust-lang/rfcs](https://github.com/rust-lang/rfcs)
  - [ ] [mgeeky starred charmbracelet/glow](https://github.com/charmbracelet/glow)
  - [ ] [anthropics released v2.1.19 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.19)
  - [ ] [bolucat released 202601231942 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202601231942)
  - [ ] [usestrix released v0.7.0 at usestrix/strix](https://github.com/usestrix/strix/releases/tag/v0.7.0)
  - [ ] [panjf2000 starred Lordog/dive-into-llms](https://github.com/Lordog/dive-into-llms)
  - [ ] [Mr-xn starred tanweai/wooyun-legacy](https://github.com/tanweai/wooyun-legacy)
  - [ ] [mgeeky starred PhantomSecurityGroup/Crystal-Kit](https://github.com/PhantomSecurityGroup/Crystal-Kit)
  - [ ] [timwhitez starred TwoSevenOneT/IAmAntimalware](https://github.com/TwoSevenOneT/IAmAntimalware)
  - [ ] [ourren starred VanGongwanxiaowan/rss-aigc](https://github.com/VanGongwanxiaowan/rss-aigc)
  - [ ] [FunnyWolf starred microsoft/agent-lightning](https://github.com/microsoft/agent-lightning)
  - [ ] [su18 starred jbevain/cecil](https://github.com/jbevain/cecil)
  - [ ] [uknowsec starred arminfelder/gridfsmigrate](https://github.com/arminfelder/gridfsmigrate)
  - [ ] [PrefectHQ released 3.6.14.dev1 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.6.14.dev1)
  - [ ] [WAY29 starred maximhq/bifrost](https://github.com/maximhq/bifrost)
  - [ ] [ourren starred jacobdjwilson/awesome-annual-security-reports](https://github.com/jacobdjwilson/awesome-annual-security-reports)
  - [ ] [0xbug starred FalkorDB/FalkorDB](https://github.com/FalkorDB/FalkorDB)
  - [ ] [INotGreen starred dairoot/ChatGPT-Mirror](https://github.com/dairoot/ChatGPT-Mirror)
  - [ ] [WAY29 starred nextlevelbuilder/ui-ux-pro-max-skill](https://github.com/nextlevelbuilder/ui-ux-pro-max-skill)
  - [ ] [PrefectHQ released 3.6.13 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.6.13)
  - [ ] [ManassehZhou starred xai-org/x-algorithm](https://github.com/xai-org/x-algorithm)
  - [ ] [pmiaowu starred automata/aicodeguide](https://github.com/automata/aicodeguide)
- 奇安信攻防社区
  - [ ] [CVE-2026-24061：GNU InetUtils Telnetd 身份验证绕过漏洞](https://forum.butian.net/share/4766)
  - [ ] [Ai安全漏洞剖析-CVE-2025-68664](https://forum.butian.net/share/4732)
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  - [ ] [特勤局手册 | 一位情报局技术行动专家的自白](https://www.4hou.com/posts/6Mnz)
  - [ ] [漏洞预警 | GNU InetUtils telnetd 远程认证绕过漏洞（CVE-2026-24061）](https://www.4hou.com/posts/7MoO)
  - [ ] [【动态】重庆信通设计院郑重签署：商用密码应用安全性评估行业自律公约](https://www.4hou.com/posts/5MmA)
  - [ ] [2025年国内外网络安全法规政策年鉴](https://www.4hou.com/posts/1MgG)
- Recent Commits to cve:main
  - [ ] [Update Fri Jan 23 11:26:48 UTC 2026](https://github.com/trickest/cve/commit/db85242ae8b9e709c28d21268e16d8bb355a0afb)
- Microsoft Security Blog
  - [ ] [From runtime risk to real‑time defense: Securing AI agents](https://www.microsoft.com/en-us/security/blog/2026/01/23/runtime-risk-realtime-defense-securing-ai-agents/)
- paper - Last paper
  - [ ] [SILENTDRIFT：利用动作分块实现对视觉-语言-动作模型的隐蔽后门攻击](https://paper.seebug.org/3456/)
- LevelBlue SpiderLabs Blog
  - [ ] [CVE-2009-0556: The 2009 PowerPoint But that Refuses to Die](https://levelblue.com/blogs/spiderlabs-blog/cve-2009-0556-the-2009-powerpoint-but-that-refuses-to-die)
- Ronnie's Blog
  - [ ] [Analyzing the Rondodox Botnet from a DShield Sensor](https://blog.spookysec.net//RondoDox-Botnet/)
- Binary Ninja
  - [ ] [Defeating Anti-Reverse Engineering: A Deep Dive into the ‘Trouble’ Binary](https://binary.ninja/2026/01/23/reversing-linux-anti-re.html)
- Malwarebytes
  - [ ] [Spammers abuse Zendesk to flood inboxes with legitimate-looking emails, but why?](https://www.malwarebytes.com/blog/news/2026/01/spammers-abuse-zendesk-to-flood-inboxes-with-legitimate-looking-emails-but-why)
- SentinelOne
  - [ ] [The Good, the Bad and the Ugly in Cybersecurity – Week 4](https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-4-7/)
- Security Blog | Praetorian
  - [ ] [Stealing AI Models Through the API: A Practical Model Extraction Attack](https://www.praetorian.com/blog/stealing-ai-models-through-the-api-a-practical-model-extraction-attack/)
- HackerNews
  - [ ] [打脸？特斯拉车载信息娱乐系统在 Pwn2Own 大赛被黑客快速攻破](https://hackernews.cc/archives/62385)
  - [ ] [欧盟推出本土漏洞数据库，替代美国主导的 CVE 系统](https://hackernews.cc/archives/62386)
  - [ ] [纽约州公务员工会遭黑客攻击：2025 年 5 月数据泄露致 4.7 万名会员社保号外泄](https://hackernews.cc/archives/62382)
  - [ ] [韩国制药巨头超 800 万条内部信息及员工档案遭泄露](https://hackernews.cc/archives/62380)
  - [ ] [约旦利用Cellebrite手机入侵工具，针对加沙战争批评者实施监控](https://hackernews.cc/archives/62376)
  - [ ] [新型 Osiris 勒索软件借助 POORTRY 驱动发起攻击](https://hackernews.cc/archives/62373)
- 黑海洋Wiki | Web开发工具包 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台
  - [ ] [一款新插件使AI写作看起来更像真人写的](https://blog.upx8.com/%E4%B8%80%E6%AC%BE%E6%96%B0%E6%8F%92%E4%BB%B6%E4%BD%BFAI%E5%86%99%E4%BD%9C%E7%9C%8B%E8%B5%B7%E6%9D%A5%E6%9B%B4%E5%83%8F%E7%9C%9F%E4%BA%BA%E5%86%99%E7%9A%84)
  - [ ] [微软画图现在可以制作人工智能“涂色书”](https://blog.upx8.com/%E5%BE%AE%E8%BD%AF%E7%94%BB%E5%9B%BE%E7%8E%B0%E5%9C%A8%E5%8F%AF%E4%BB%A5%E5%88%B6%E4%BD%9C%E4%BA%BA%E5%B7%A5%E6%99%BA%E8%83%BD-%E6%B6%82%E8%89%B2%E4%B9%A6)
  - [ ] [马斯克：星舰今年目标是实现完全复用](https://blog.upx8.com/%E9%A9%AC%E6%96%AF%E5%85%8B-%E6%98%9F%E8%88%B0%E4%BB%8A%E5%B9%B4%E7%9B%AE%E6%A0%87%E6%98%AF%E5%AE%9E%E7%8E%B0%E5%AE%8C%E5%85%A8%E5%A4%8D%E7%94%A8)
  - [ ] [中国每周平均工时48.6小时 结束9年连涨](https://blog.upx8.com/%E4%B8%AD%E5%9B%BD%E6%AF%8F%E5%91%A8%E5%B9%B3%E5%9D%87%E5%B7%A5%E6%97%B648-6%E5%B0%8F%E6%97%B6-%E7%BB%93%E6%9D%9F9%E5%B9%B4%E8%BF%9E%E6%B6%A8)
- 奇客Solidot–传递最新科技情报
  - [ ] [eBay 禁止 AI 智能体自动购物](https://www.solidot.org/story?sid=83381)
  - [ ] [美国正式退出 WHO，尚有 2.78 亿美元账单未支付](https://www.solidot.org/story?sid=83380)
  - [ ] [TikTok 成立美国公司](https://www.solidot.org/story?sid=83379)
  - [ ] [艺术家警告 AI 模型“偷窃不是创新”](https://www.solidot.org/story?sid=83378)
  - [ ] [科学家将梅毒的起源上溯到 5500 年前](https://www.solidot.org/story?sid=83377)
  - [ ] [世界前一百大城市半数高度缺水](https://www.solidot.org/story?sid=83376)
  - [ ] [欧洲议会呼吁减少对美国科技巨头的依赖](https://www.solidot.org/story?sid=83375)
- 安全分析与研究
  - [ ] [银狐黑产最新注入型免杀样本详细分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247495423&idx=1&sn=0158ea67e526e46b672550d9aa620f31)
- 腾讯玄武实验室
  - [ ] [每日安全动态推送(26/1/23)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960363&idx=1&sn=6df93e9b81fdc9bf1b5718b90d944df7)
- 绿盟科技研究通讯
  - [ ] [可信数据空间（六）数据胶囊](https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499414&idx=1&sn=d471cc1acbb4651bb11729549abe8615)
- 青衣十三楼飞花堂
  - [ ] [廖汉生回忆录](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488988&idx=1&sn=4cc3bd7c22b21fbd415a81a3f07becc5)
- 安全内参
  - [ ] [泄露200万余名患者健康信息，医疗软件厂商赔偿超7300万元](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515496&idx=1&sn=2f17936897aa74a1aa97c01f15f7d60f)
  - [ ] [美国学者认为美国可利用网络手段施压和胁迫委内瑞拉](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515496&idx=2&sn=4c79a6f6dd947763d23d446c60cdb651)
- 奇安信病毒响应中心
  - [ ] [每周勒索威胁摘要](https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498573&idx=1&sn=17294176ec9155a86a4507936092ee5c)
- 代码卫士
  - [ ] [SmarterMail 认证绕过新漏洞被用于劫持管理员账号](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524955&idx=1&sn=34fffd85602bd5f7fa445177131ff399)
  - [ ] [思科修复已遭利用的 Unified CM RCE 0day漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524955&idx=2&sn=922edf69046bb2a552b3f58f4f21f882)
- 黑鸟
  - [ ] [以色列Cellebrite设备取证手机后遗留的痕迹特征](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451184964&idx=1&sn=eb1e57645730224047ab45ca67bc83f5)
- 360漏洞云
  - [ ] [策马扬鞭看山海！一起为2025年360精英白帽荣耀加冕](https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247504720&idx=1&sn=f646c46f1e4b1ce4e9e632ce9ec968a9)
- 腾讯安全应急响应中心
  - [ ] [当AI学会背刺：深度剖析Agent Skills的安全陷阱](https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651208132&idx=1&sn=f230abb233d66e6bc388eb720729220d)
- Shostack & Friends Blog
  - [ ] [Bitlocker, the FBI, and Risk](https://shostack.org/blog/bitlocker-the-fbi-and-risk/)
- 看雪学苑
  - [ ] [纯静态解决遇到的各类global-metadata加密问题](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608566&idx=1&sn=5a0fe4f676d05d1be2dafafa9aba1138)
  - [ ] [​原来有人靠「找漏洞」每月多赚几万](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608566&idx=2&sn=bf87ede159ec3f36f21eee4298f52ab5)
  - [ ] [苹果第二大代工厂立讯精密遭勒索软件攻击，机密数据泄露](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608566&idx=3&sn=c4ddde5b43e0d9340a712d7a4282b265)
- 信息安全国家工程研究中心
  - [ ] [北京市密码管理局发布关于进一步规范商用密码应用安全性评估结果备案工作的通知](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247502768&idx=1&sn=81ed4e99a1055bf4b4c8d24db129f4bc)
- 威努特安全网络
  - [ ] [苹果核心代工厂遭勒索攻击、麦当劳800GB数据被窃|一周特辑](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651139698&idx=1&sn=2375499149f24b3da80b27782e4c5c13)
- 奇安信威胁情报中心
  - [ ] [每周高级威胁情报解读(2026.01.16~01.22)](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247517564&idx=1&sn=a43c498f21c39e059449cc7db220daef)
- 长亭科技
  - [ ] [长亭KoalaQA｜我们开源了一款产品：“专为搞定”售后答疑！](https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651390072&idx=1&sn=cf6737e6861aee78a8e1aa870603f0f9)
- 安全圈
  - [ ] [【安全圈】Microsoft 365发生故障 影响全球用户](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073848&idx=1&sn=ca806b9369259165628605b51837e210)
- 安全研究GoSSIP
  - [ ] [G.O.S.S.I.P 阅读推荐 2026-01-23 DualLM](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501320&idx=1&sn=592580e056db9f519889e974456de97c)
- M01N Team
  - [ ] [每周蓝军技术推送（2026.1.17-2026.1.23）](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494621&idx=1&sn=733a1bb43252aa69db431b21ced9d399)
- XCTF联赛
  - [ ] [LilacCTF 2026｜倒计时1天！](https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247516146&idx=1&sn=21fc48835f8e7867798807f396633baf)
- 极客公园
  - [ ] [AI 没有一夜改变电商，但它正在悄悄改变做生意的人](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653097694&idx=1&sn=c2c24dfda8cc6fff5805ffa8ac47e818)
  - [ ] [PolarDB，如何率先赢得通往 AI 时代的半张门票？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653097663&idx=1&sn=b2a660b634de3314db45594414df4d91)
  - [ ] [曝阿里旗下芯片公司拟独立上市；苹果新 CEO 人选或曝光；比亚迪李云飞：公司是黑水军最大受害者 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653097679&idx=1&sn=f4dd3e8d7c752ccbca5c737f8797c566)
- 嘶吼专业版
  - [ ] [2025年国内外网络安全法规政策年鉴](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586471&idx=1&sn=a5faf67455db355e1e2ea4791224e960)
  - [ ] [2026年邮件安全怎么防？3大攻击案例+ 1套防护指南，管理员直接用](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586471&idx=2&sn=78f2853dfbe142bce602eec1243fed0f)
- 数世咨询
  - [ ] [CEO 与 CISO 对 AI 安全价值和风险的分歧正在扩大](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541571&idx=1&sn=d6284dc3d900018e3b5f98729a11cd85)
  - [ ] [招生| 教育部教指委指导，“网络安全实战化人才培养师资培训”招生](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541571&idx=2&sn=6304dd23811b7a810f493b76a6d7c7cb)
- 火绒安全
  - [ ] [告别跑断腿！火绒企业版远程协助实用指南](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247530142&idx=1&sn=31981a649e7107d5c4efa41c099810ff)
  - [ ] [火绒小问答——「企业版」程序执行控制](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247530142&idx=2&sn=d45f92f3256455ed5b981cb0a95094a1)
  - [ ] [【火绒安全周报】某物业公司被查处/立讯精密疑遭勒索攻击](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247530142&idx=3&sn=67597f4b7280061b1bb1eb944cfbb293)
  - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247530142&idx=4&sn=2c4b456d343acf77b796aa49685772d9)
- 恒脑与AI
  - [ ] [云服务器新噩梦！VoidLink：首个AI驱动的高级恶意软件框架已悄然来袭](https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247497337&idx=1&sn=3b7400c671ac22b3ea3936374cb6ed73)
- 中国信息安全
  - [ ] [通知 | 国家网信办等八部门印发《可能影响未成年人身心健康的网络信息分类办法》（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257907&idx=1&sn=6f38118f360c8b18eb238ccf8f191ce2)
  - [ ] [前沿 | 以智能设备为媒介的网络攻击及责任划分](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257907&idx=2&sn=1ef4e780ef0a85e3dbcd8b78d0371984)
  - [ ] [专家解读 | 以精细化信息分类管理筑牢未成年人网络保护屏障](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257907&idx=3&sn=6f7712ac7297eca56779259929816121)
  - [ ] [关注 | 聚焦停车扫码、人脸识别等重点场景！最高检发布个人信息保护检察公益诉讼典型案例](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257907&idx=4&sn=24e4ecba1d2c592f25d64ada2f37849e)
  - [ ] [盘点 | 2025年度网络热点谣言汇总，新的一年别再相信了！](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257907&idx=5&sn=a16f98a32b19de301c1283164cc1d167)
  - [ ] [家长注意：警惕孩子看“变味”的AI动画！](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257907&idx=6&sn=5853bdf8253b8c41324bda96249b7337)
- 安全牛
  - [ ] [《实战化工业靶场应用指南（2025版）》——揭秘靶场的新范式，AI赋能的实战化工业靶场](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140276&idx=1&sn=515168c9f53092aa44befb99694eed90)
  - [ ] [网安人必备：黑客级GPT“军火库”，让你的攻防效率飙升10倍！](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140276&idx=2&sn=8f620eaa24d00dc72b016bd15da6cd40)
- 补天平台
  - [ ] [2025年度「补天公益SRC」荣耀榜发布！致谢数字侠客，共筑清朗网络](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510123&idx=1&sn=efb697b96b59d2c12ed892ed4dad2042)
- 深信服千里目安全技术中心
  - [ ] [【漏洞通告】Oracle WebLogic Server Proxy Plug-in身份认证绕过漏洞(CVE-2026-21962)](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524986&idx=1&sn=a422cf093b0026dd885f85e347af22f5)
  - [ ] [网络安全信息与动态周报2026年第3期（1月12日-1月18日）](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524986&idx=2&sn=db8e9bca43fb68b47d54efe0c5554d3b)
- 字节跳动安全中心
  - [ ] [提前锁定offer！字节跳动安全与风控2027/2028届实习生招募中](https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496002&idx=1&sn=7c9515bcbb6e57bbcc9177124edd5c16)
- 复旦白泽战队
  - [ ] [首尔特辑 | 白泽PoC 2025 参会小记](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247497579&idx=1&sn=098004b068f0cc79064d27fef22d4df6)
- 迪哥讲事
  - [ ] [支付溢出的基本原理](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498961&idx=1&sn=95f0c81709b5c3a105a9aac3d128253f)
- 美团技术团队
  - [ ] [美团EvoCUA刷新开源SOTA，会用电脑还会持续进化的智能体](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651782084&idx=1&sn=98560b56a5902e9b4c19421be46084e6)
- 情报分析师
  - [ ] [百亿美元谍报之眼，Palantir技术帝国全面解密](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650566492&idx=1&sn=2144492561168f4ed8f639214969c5f7)
  - [ ] [【深度研判】格陵兰争端与跨大西洋裂痕，北极战略竞争的外溢效应](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650566492&idx=2&sn=e88b1f855e62cd182dd4aede43b6c246)
  - [ ] [750名间谍与离奇自杀，揭开俄罗斯情报暗战的五大内幕](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650566492&idx=3&sn=77557bf3b842bccf53834d9b78c4daf4)
- DEF CON Announcements!
  - [ ] [Villages, Communities and Contests for DEF CON Singapore!](https://defcon.org/html/defcon-singapore/dc-singapore-index.html)
- 360数字安全
  - [ ] [2026·AI启航：360教育的智能进化之路](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247584656&idx=1&sn=f58b652d453e7a96808341c3a06ad2a8)
- 字节跳动技术团队
  - [ ] [TRAE IDE 10 大热门 MCP Server 推荐](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247518328&idx=1&sn=50779cd8927dd77e50ca545745d9ce90)
- 安全419
  - [ ] [2026年SaaS安全13大威胁：从零日漏洞到高级持续性威胁](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247552188&idx=1&sn=174805f47befdcf92f1873647af7d1fa)
- Over Security - Cybersecurity news aggregator
  - [ ] [ShinyHunters claim to be behind SSO-account data theft attacks](https://www.bleepingcomputer.com/news/security/shinyhunters-claim-to-be-behind-sso-account-data-theft-attacks/)
  - [ ] [Agenda di Ricerca e Innovazione 2026: così l’Italia si prepara alle nuove sfide cyber](https://www.cybersecurity360.it/news/agenda-di-ricerca-e-innovazione-2026-cosi-litalia-si-prepara-alle-nuove-sfide-cyber/)
  - [ ] [Zendesk, sfruttato il sistema di ticketing per una campagna di spam massiva](https://www.securityinfo.it/2026/01/23/zendesk-sfruttato-il-sistema-di-ticketing-per-una-campagna-di-spam-massiva/)
  - [ ] [Malicious AI extensions on VSCode Marketplace steal developer data](https://www.bleepingcomputer.com/news/security/malicious-ai-extensions-on-vscode-marketplace-steal-developer-data/)
  - [ ] [CISA confirms active exploitation of four enterprise software bugs](https://www.bleepingcomputer.com/news/security/cisa-confirms-active-exploitation-of-four-enterprise-software-bugs/)
  - [ ] [Microsoft gave FBI a set of BitLocker encryption keys to unlock suspects’ laptops: reports](https://techcrunch.com/2026/01/23/microsoft-gave-fbi-a-set-of-bitlocker-encryption-keys-to-unlock-suspects-laptops-reports/)
  - [ ] [US to deport Venezuelans who emptied bank ATMs using malware](https://www.bleepingcomputer.com/news/security/us-to-deport-venezuelans-who-emptied-bank-atms-using-malware/)
  - [ ] [Hackers exploit critical telnetd auth bypass flaw to get root](https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-telnetd-auth-bypass-flaw-to-get-root/)
  - [ ] [Sintesi riepilogativa delle campagne malevole nella settimana del 17 – 23 gennaio](https://cert-agid.gov.it/news/sintesi-riepilogativa-delle-campagne-malevole-nella-settimana-del-17-23-gennaio/)
  - [ ] [Semplificare non è un gioco!](https://www.cybersecurity360.it/cultura-cyber/semplificare-non-e-un-gioco/)
  - [ ] [Truffatori sfruttano la collaborazione su OpenAI: 3 consigli per le aziende](https://www.cybersecurity360.it/news/truffatori-sfruttano-la-collaborazione-su-openai-3-consigli-per-le-aziende/)
  - [ ] [CrashFix, l’inganno silenzioso delle estensioni browser: come difendersi](https://www.cybersecurity360.it/news/crashfix-linganno-silenzioso-delle-estensioni-browser-come-difendersi/)
  - [ ] [What an AI-Written Honeypot Taught Us About Trusting Machines](https://www.bleepingcomputer.com/news/security/what-an-ai-written-honeypot-taught-us-about-trusting-machines/)
  - [ ] [Cyberattack disrupts digital systems at renowned Dresden museum network](https://therecord.media/dresden-state-art-collections-cyberattack)
  - [ ] [Microsoft: Outlook for iOS crashes, freezes due to coding error](https://www.bleepingcomputer.com/news/microsoft/microsoft-outlook-for-ios-crashes-freezes-due-to-coding-error/)
  - [ ] [Germany expels Russian diplomat accused of spying on Ukraine war effort](https://therecord.media/germany-expels-russian-diplomat-accused-spying-ukraine-war)
  - [ ] [Hackers get $1,047,000 for 76 zero-days at Pwn2Own Automotive 2026](https://www.bleepingcomputer.com/news/security/hackers-get-1-047-000-for-76-zero-days-at-pwn2own-automotive-2026/)
  - [ ] [Cybersecurity Package UE: quando l’ambizione regolatoria si scontra con la sostenibilità](https://www.cybersecurity360.it/legal/cybersecurity-package-ue-quando-lambizione-regolatoria-si-scontra-con-la-sostenibilita/)
  - [ ] [Fortinet confirms critical FortiCloud auth bypass not fully patched](https://www.bleepingcomputer.com/news/security/fortinet-confirms-critical-forticloud-auth-bypass-not-fully-patched/)
  - [ ] [Il caso booking.com dimostra che il cyber crimine vince perché ci mancano le basi](https://www.cybersecurity360.it/news/booking-com-mancano-basi/)
  - [ ] [La resilienza sistemica come linea strategica: ecosistemi, fornitori e dipendenze nel DORA](https://www.cybersecurity360.it/legal/la-resilienza-sistemica-come-linea-strategica-ecosistemi-fornitori-e-dipendenze-nel-dora/)
  - [ ] [Kimwolf Botnet Lurking in Corporate, Govt. Networks](https://krebsonsecurity.com/2026/01/kimwolf-botnet-lurking-in-corporate-govt-networks/)
- ICT Security Magazine
  - [ ] [Cyber Insurance in Italia: il protection gap delle PMI tra compliance e resilienza digitale](https://www.ictsecuritymagazine.com/articoli/cyber-insurance-pmi/)
  - [ ] [Deepfake vocali: il caso Crosetto svela la nuova frontiera del cyber-crimine in Italia](https://www.ictsecuritymagazine.com/notizie/deepfake-vocali-caso-crosetto/)
  - [ ] [Private AI e Digital Forensics](https://www.ictsecuritymagazine.com/articoli/private-ai-digital-forensics/)
  - [ ] [Nuove linee guida EDPS sull’IA generativa: titolare del trattamento, provider o deployer?](https://www.ictsecuritymagazine.com/articoli/linee-guida-edps/)
- 白泽安全实验室
  - [ ] [朝鲜背景APT组织Konni利用谷歌广告生态发起高阶鱼叉式网络钓鱼攻击活动](https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492870&idx=1&sn=5d7ec02a73d3e1baff55f61404949e13)
- Securityinfo.it
  - [ ] [Zendesk, sfruttato il sistema di ticketing per una campagna di spam massiva](https://www.securityinfo.it/2026/01/23/zendesk-sfruttato-il-sistema-di-ticketing-per-una-campagna-di-spam-massiva/?utm_source=rss&utm_medium=rss&utm_campaign=zendesk-sfruttato-il-sistema-di-ticketing-per-una-campagna-di-spam-massiva)
- 悬镜安全
  - [ ] [灵脉AI 4.4 | 解锁AI越权检测，代码安全智能体再进化！](https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647797652&idx=1&sn=7a8a5de63258f4ad2598794a3138e6b5)
- Dark Space Blogspot
  - [ ] [Quando L'Oro Venne Confiscato: Differenze Con Bitcoin](http://darkwhite666.blogspot.com/2026/01/quando-loro-venne-confiscato-differenze.html)
- Yak Project
  - [ ] [IRify 性能升级（四）: ANTLR4 Go 运行时高并发解析性能调优](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529339&idx=1&sn=f573bc89628633a3d34adaf9f3521db3)
- The Hacker News
  - [ ] [CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities](https://thehackernews.com/2026/01/cisa-updates-kev-catalog-with-four.html)
  - [ ] [Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls](https://thehackernews.com/2026/01/fortinet-confirms-active-forticloud-sso.html)
  - [ ] [TikTok Forms U.S. Joint Venture to Continue Operations Under 2025 Executive Order](https://thehackernews.com/2026/01/tiktok-forms-us-joint-venture-to.html)
  - [ ] [Phishing Attack Uses Stolen Credentials to Install LogMeIn RMM for Persistent Access](https://thehackernews.com/2026/01/phishing-attack-uses-stolen-credentials.html)
  - [ ] [Microsoft Flags Multi-Stage AitM Phishing and BEC Attacks Targeting Energy Firms](https://thehackernews.com/2026/01/microsoft-flags-multi-stage-aitm.html)
- The Register - Security
  - [ ] [Patch or die: VMware vCenter Server bug fixed in 2024 under attack today](https://go.theregister.com/feed/www.theregister.com/2026/01/23/critical_vmware_vcenter_server_bug/)
  - [ ] [Surrender as a service: Microsoft unlocks BitLocker for feds](https://go.theregister.com/feed/www.theregister.com/2026/01/23/surrender_as_a_service_microsoft/)
  - [ ] [ShinyHunters claims Okta customer breaches, leaks data belonging to 3 orgs](https://go.theregister.com/feed/www.theregister.com/2026/01/23/shinyhunters_claims_okta_customer_breaches/)
  - [ ] [AI-powered cyberattack kits are 'just a matter of time,' warns Google exec](https://go.theregister.com/feed/www.theregister.com/2026/01/23/ai_cyberattack_google_security/)
  - [ ] [Fortinet admits FortiGate SSO bug still exploitable despite December patch](https://go.theregister.com/feed/www.theregister.com/2026/01/23/fortinet_fortigate_patch/)
  - [ ] [London boroughs limping back online months after cyberattack](https://go.theregister.com/feed/www.theregister.com/2026/01/23/landmark_milestone_as_hammersmith_fulham/)
  - [ ] [Marching orders delayed: Veterans' Digital ID off to a slow start](https://go.theregister.com/feed/www.theregister.com/2026/01/23/slow_start_for_veterans_digital/)
- TorrentFreak
  - [ ] [Kakao Entertainment Behind the Bato.to Piracy Crackdown, Operator Identified](https://torrentfreak.com/kakao-entertainment-behind-the-bato-to-piracy-crackdown-operator-identified/)
- 白帽子章华鹏
  - [ ] [安全大佬如何年底复盘](https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650238510&idx=1&sn=2654406a0467d56d976f395be1c6a9b7)
- SANS Internet Storm Center, InfoCON: green
  - [ ] [ISC Stormcast For Friday, January 23rd, 2026 https://isc.sans.edu/podcastdetail/9778, (Fri, Jan 23rd)](https://isc.sans.edu/diary/rss/32652)
- Instapaper: Unread
  - [ ] [Two Arrested in Greece for SMS Blaster Phishing Attacks on Mobile Banking](https://greekcitytimes.com/2026/01/16/sms-blaster-fraud-ring-busted-greece-spata-fake-cell-towers-phishing/)
  - [ ] [Software spia” installati nei computer dei magistrati italiani, cos'è questa storia](https://www.wired.it/article/giustizia-software-spia-nei-pc-dei-magistrati-report/)
- Deeplinks
  - [ ] [Rent-Only Copyright Culture Makes Us All Worse Off](https://www.eff.org/deeplinks/2026/01/rent-only-copyright-culture-makes-us-all-worse)
- Security Affairs
  - [ ] [Fortinet warns of active FortiCloud SSO bypass affecting updated devices](https://securityaffairs.com/187250/security/fortinet-warns-of-active-forticloud-sso-bypass-affecting-updated-devices.html)
  - [ ] [U.S. CISA adds Prettier eslint-config-prettier, Vite Vitejs, Versa Concerto SD-WAN orchestration platform, and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/187241/security/u-s-cisa-adds-prettier-eslint-config-prettier-vite-vitejs-versa-concerto-sd-wan-orchestration-platform-and-synacor-zimbra-collaboration-suite-flaws-to-its-known-exploited-vulnerabilities-catal.html)
  - [ ] [Investigation underway after 72M Under Armour records surface online](https://securityaffairs.com/187229/data-breach/investigation-underway-after-72m-under-armour-records-surface-online.html)
- Schneier on Security
  - [ ] [Friday Squid Blogging: Giant Squid in the Star Trek Universe](https://www.schneier.com/blog/archives/2026/01/friday-squid-blogging-giant-squid-in-the-star-trek-universe.html)
  - [ ] [AIs are Getting Better at Finding and Exploiting Internet Vulnerabilities](https://www.schneier.com/blog/archives/2026/01/ais-are-getting-better-at-finding-and-exploiting-internet-vulnerabilities.html)
- Security Weekly Podcast Network (Audio)
  - [ ] [AI Cage Match, Fortinet, Cisco, DVWA, Polonium, Small Town AIs, LastPass, Josh Marpet - SWN #549](http://sites.libsyn.com/18678/ai-cage-match-fortinet-cisco-dvwa-polonium-small-town-ais-lastpass-josh-marpet-swn-549)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[每日信息流] 2026-01-24 #1127

每日安全资讯（2026-01-24）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2026-01-24 #1127

Description

每日安全资讯（2026-01-24）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions