[每日信息流] 2026-02-05

# 每日安全资讯（2026-02-05）

- 奇安信攻防社区
  - [ ] [某金融官网SQL注入bypass阿里云盾](https://forum.butian.net/share/4762)
- Doonsec's feed
  - [ ] [开源供应链安全新挑战：AI编码助手扩展的隐蔽风险与深度检测实践](https://mp.weixin.qq.com/s/VV8WLq5EZyyxAvTGKoGHDQ)
- Tenable Blog
  - [ ] [LookOut: Discovering RCE and Internal Access on Looker (Google Cloud & On-Prem)](https://www.tenable.com/blog/google-looker-vulnerabilities-rce-internal-access-lookout)
- SecWiki News
  - [ ] [SecWiki News 2026-02-04 Review](http://www.sec-wiki.com/?2026-02-04)
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  - [ ] [360入选“数据安全服务机构推荐单位”名单](https://www.4hou.com/posts/J1Ov)
  - [ ] [Moltbot AI 助手企业部署引发数据安全隐患 或致API密钥等敏感数据泄露](https://www.4hou.com/posts/omMk)
- 安全客-有思想的安全新媒体
  - [ ] [科技云报到：AI撕掉数字时差：“极致全球化”已无退路](https://www.anquanke.com/post/id/314744)
  - [ ] [“Exfil Out&Look”漏洞致攻击者可通过OWA隐秘窃取邮件](https://www.anquanke.com/post/id/314701)
  - [ ] [新型高级Web后门潜入通信基础设施，利用高危漏洞将电话系统变为持久化后门](https://www.anquanke.com/post/id/314704)
  - [ ] [暗网现新型工业控制系统攻击框架，直指能源基础设施](https://www.anquanke.com/post/id/314710)
  - [ ] [微软新版Windows 11更新悄然收紧存储设置权限](https://www.anquanke.com/post/id/314713)
  - [ ] [Apache Syncope修复高危登录跨站脚本及外部实体注入漏洞](https://www.anquanke.com/post/id/314719)
  - [ ] [Notepad++被劫持国家级攻击者投毒更新包，持续数月作恶](https://www.anquanke.com/post/id/314722)
  - [ ] [Open VSX供应链攻击事件，黑客利用遭攻陷开发者账户传播GlassWorm恶意程序](https://www.anquanke.com/post/id/314725)
  - [ ] [WiFi劫持风险，海康威视修复DS-3WAP系列无线接入点命令注入漏洞](https://www.anquanke.com/post/id/314716)
  - [ ] [安全鸿沟持续扩大—为何66%的企业无法实时检测云威胁](https://www.anquanke.com/post/id/314698)
  - [ ] [数字签名安全军备竞赛—企业电子签名平台如何筑牢2026年网络威胁防线](https://www.anquanke.com/post/id/314693)
- Recent Commits to cve:main
  - [ ] [Update Wed Feb  4 11:23:18 UTC 2026](https://github.com/trickest/cve/commit/526f8d51bd5c070d8d71fbe06e7a28619edb01a9)
- Microsoft Security Blog
  - [ ] [Detecting backdoored language models at scale](https://www.microsoft.com/en-us/security/blog/2026/02/04/detecting-backdoored-language-models-at-scale/)
- Private Feed for M09Ic
  - [ ] [bolucat released 202602041959 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202602041959)
  - [ ] [spf13 starred firecrawl/firecrawl](https://github.com/firecrawl/firecrawl)
  - [ ] [kpcyrd starred jannic/rp2040-panic-usb-boot](https://github.com/jannic/rp2040-panic-usb-boot)
  - [ ] [esrrhs starred itismoej/pingtunnel-client](https://github.com/itismoej/pingtunnel-client)
  - [ ] [esrrhs contributed to esrrhs/pingtunnel](https://github.com/esrrhs/pingtunnel/pull/80)
  - [ ] [pydantic released v1.54.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v1.54.0)
  - [ ] [OpenAEV-Platform released 2.1.4 at OpenAEV-Platform/openaev](https://github.com/OpenAEV-Platform/openaev/releases/tag/2.1.4)
  - [ ] [esrrhs starred BurntSushi/toml](https://github.com/BurntSushi/toml)
  - [ ] [ZeddYu starred HKUDS/nanobot](https://github.com/HKUDS/nanobot)
  - [ ] [pydantic released v1.53.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v1.53.0)
  - [ ] [CHYbeta starred NetSPI/gcpwn](https://github.com/NetSPI/gcpwn)
  - [ ] [mgeeky starred ioncodes/SilentLoad](https://github.com/ioncodes/SilentLoad)
  - [ ] [PrefectHQ released 3.6.16.dev6 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.6.16.dev6)
  - [ ] [niudaii starred passer-W/ctfSolver](https://github.com/passer-W/ctfSolver)
  - [ ] [gh0stkey starred milanvarady/Applite](https://github.com/milanvarady/Applite)
  - [ ] [4ra1n forked 4ra1n/ctfSolver from passer-W/ctfSolver](https://github.com/4ra1n/ctfSolver)
  - [ ] [4ra1n starred passer-W/ctfSolver](https://github.com/passer-W/ctfSolver)
  - [ ] [Rvn0xsy starred ReFirmLabs/binwalk](https://github.com/ReFirmLabs/binwalk)
  - [ ] [zema1 starred libtom/libtomcrypt](https://github.com/libtom/libtomcrypt)
  - [ ] [WAY29 forked WAY29/claude-code-hub from ding113/claude-code-hub](https://github.com/WAY29/claude-code-hub)
  - [ ] [Y4er starred NodeSeekDev/NodeScriptKit](https://github.com/NodeSeekDev/NodeScriptKit)
- Insinuator.net
  - [ ] [Capture Bumble Bluetooth Traffic with Wireshark](https://insinuator.net/2026/02/capture-bumble-bluetooth-traffic-with-wireshark/)
- Bug Bounty in InfoSec Write-ups on Medium
  - [ ] [How I hacked a website just by looking at the source code Part-2](https://infosecwriteups.com/how-i-hacked-a-website-just-by-looking-at-the-source-code-part-2-375b21321815?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [This Mobile App Trusted My Phone More Than It Should Have ⚠️](https://infosecwriteups.com/this-mobile-app-trusted-my-phone-more-than-it-should-have-%EF%B8%8F-821befd8c879?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [1. Web Cache Deception When Private User Data Becomes Public](https://infosecwriteups.com/1-web-cache-deception-when-private-user-data-becomes-public-cac7f269f964?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [How to Hack Swagger UI Complete Guide.](https://infosecwriteups.com/how-to-hack-swagger-ui-complete-guide-9291d9158603?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [I Followed the Password Reset Flow — and Ended Up Resetting Everyone’s Password](https://infosecwriteups.com/i-followed-the-password-reset-flow-and-ended-up-resetting-everyones-password-d81e07e6e3b7?source=rss----7b722bfd1b8d--bug_bounty)
- Reverse Engineering
  - [ ] [Resurrecting Crimsonland](https://www.reddit.com/r/ReverseEngineering/comments/1qvqa7c/resurrecting_crimsonland/)
  - [ ] [Reverse Engineered SynthID's Text Watermarking in Gemini](https://www.reddit.com/r/ReverseEngineering/comments/1qvomdd/reverse_engineered_synthids_text_watermarking_in/)
- Malwarebytes
  - [ ] [Grok continues producing sexualized images after promised fixes](https://www.malwarebytes.com/blog/news/2026/02/grok-continues-producing-sexualized-images-after-promised-fixes)
  - [ ] [Firefox is giving users the AI off switch](https://www.malwarebytes.com/blog/news/2026/02/firefox-is-giving-users-the-ai-off-switch)
- Exploit-DB.com RSS Feed
  - [ ] [[remote] windows 10/11 - NTLM Hash Disclosure Spoofing](https://www.exploit-db.com/exploits/52478)
  - [ ] [[remote] Redis 8.0.2 - RCE](https://www.exploit-db.com/exploits/52477)
  - [ ] [[webapps] OctoPrint 1.11.2 - File Upload](https://www.exploit-db.com/exploits/52476)
  - [ ] [[remote] Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE](https://www.exploit-db.com/exploits/52475)
  - [ ] [[webapps] aiohttp 3.9.1 - directory traversal PoC](https://www.exploit-db.com/exploits/52474)
  - [ ] [[webapps] FortiWeb Fabric Connector 7.6.x - SQL Injection to Remote Code Execution](https://www.exploit-db.com/exploits/52473)
  - [ ] [[local] Docker Desktop 4.44.3 - Unauthenticated  API Exposure](https://www.exploit-db.com/exploits/52472)
- 黑海洋Wiki | Web开发工具包 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台
  - [ ] [美国报社《华盛顿邮报》解雇三分之一员工](https://blog.upx8.com/%E7%BE%8E%E5%9B%BD%E6%8A%A5%E7%A4%BE-%E5%8D%8E%E7%9B%9B%E9%A1%BF%E9%82%AE%E6%8A%A5-%E8%A7%A3%E9%9B%87%E4%B8%89%E5%88%86%E4%B9%8B%E4%B8%80%E5%91%98%E5%B7%A5)
  - [ ] [马斯克成全球首个身家突破8000亿美元的人](https://blog.upx8.com/%E9%A9%AC%E6%96%AF%E5%85%8B%E6%88%90%E5%85%A8%E7%90%83%E9%A6%96%E4%B8%AA%E8%BA%AB%E5%AE%B6%E7%AA%81%E7%A0%B48000%E4%BA%BF%E7%BE%8E%E5%85%83%E7%9A%84%E4%BA%BA)
- 奇客Solidot–传递最新科技情报
  - [ ] [附近星系发现一颗类地行星](https://www.solidot.org/story?sid=83480)
  - [ ] [分析 Notepad++ 的供应链攻击](https://www.solidot.org/story?sid=83479)
  - [ ] [LibreOffice 26.2 释出](https://www.solidot.org/story?sid=83478)
  - [ ] [ZetaSQL 更名为 GoogleSQL](https://www.solidot.org/story?sid=83477)
  - [ ] [沃尔玛市值突破万亿美元](https://www.solidot.org/story?sid=83476)
  - [ ] [NASA 将 Artemis II 的发射时间推迟至三月](https://www.solidot.org/story?sid=83475)
  - [ ] [AI 真的是裁员的原因？](https://www.solidot.org/story?sid=83474)
  - [ ] [8K 电视时代尚未到来](https://www.solidot.org/story?sid=83473)
- HackerNews
  - [ ] [SQL 注入漏洞影响 40,000 个 WordPress 站点](https://hackernews.cc/archives/62642)
  - [ ] [DockerDash 漏洞暴露 Ask Gordon AI 供应链弱点](https://hackernews.cc/archives/62648)
  - [ ] [研究人员警示新型 Vect RaaS 变种出现](https://hackernews.cc/archives/62654)
  - [ ] [新型窃密网络钓鱼活动瞄准企业 Dropbox 账号凭证](https://hackernews.cc/archives/62662)
  - [ ] [Step Finance 称高管设备遭入侵，致 4000 万美元加密货币被盗](https://hackernews.cc/archives/62667)
- 安全分析与研究
  - [ ] [银狐黑产新型免杀注入型攻击样本与威胁情报](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247495589&idx=1&sn=8090f47b5c82e0a787bd22cf2506ed25)
- Security Blog | Praetorian
  - [ ] [Gone Phishing, Got a Token: When Separate Flaws Combine](https://www.praetorian.com/blog/gone-phishing-got-a-token-when-separate-flaws-combine/)
- 黑鸟
  - [ ] [FBI未能解锁开启了锁定模式的苹果手机](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451185147&idx=1&sn=786bd4ce82ce7cab1d1dfa9699abb43f)
- Black Hills Information Security, Inc.
  - [ ] [When the SOC Goes to Deadwood: A Night to Remember](https://www.blackhillsinfosec.com/when-the-soc-goes-to-deadwood/)
- 威努特安全网络
  - [ ] [行业首创！威努特一体化方案双倍守护工业主机安全](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651139954&idx=1&sn=654e34d55aa761817e522c3014598cab)
  - [ ] [威努特全面参与中关村论坛系列活动——AI+能源发展大会](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651139954&idx=2&sn=3fda023cc032bd74298db70b4801c4a2)
- 安全客
  - [ ] [代码暴减99%！港大开源“纳米级OpenClaw”，仅4000行代码复刻OpenClaw核心战力！](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789681&idx=1&sn=e95e8a7435b1926f4f46cd685694f1e4)
- 青衣十三楼飞花堂
  - [ ] [2026年西城初中数学与几十年前的粗浅比较](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247489025&idx=1&sn=aec52cffd1d305d8e057f41555255f97)
- 安全内参
  - [ ] [智能必须内置安全！美国白宫拟出台AI安全政策框架](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515543&idx=1&sn=ea8ee2de9ec2ca03501186e09bf19d5d)
  - [ ] [2025年全球国防网络空间情况综述（网军建设篇）](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515543&idx=2&sn=5b2e533a9687b4503a6e7e4711d89843)
- 微步在线研究响应中心
  - [ ] [已复现！大蚂蚁 (BigAnt) 即时通讯系统任意文件上传漏洞](https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508235&idx=1&sn=470133ecf4a177386fd1e0b23fdea8c6)
- 二道情报贩子
  - [ ] [你的手机 GPS 位置，运营商其实早就能精准获取](https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247490028&idx=1&sn=2ff1b6c4bbde488fd23639d3f88cc2ca)
- 长亭安全应急响应中心
  - [ ] [【已复现】大蚂蚁 (BigAnt) 即时通讯系统任意文件上传漏洞](https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493091&idx=1&sn=c92a2154e012e66e1f5b25ac34742bc5)
- 奶牛安全
  - [ ] [爱泼斯坦邮件原文（2007年9月-2007年10月）第一批](https://mp.weixin.qq.com/s?__biz=MzU4NjY0NTExNA==&mid=2247489565&idx=1&sn=d9c3789e03054321f021775db8607026)
- 安全研究GoSSIP
  - [ ] [G.O.S.S.I.P 阅读推荐 2026-02-04 辨认“变色龙”APP](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501388&idx=1&sn=35ec65531fd9a81a928fa8267387fc9e)
- Shostack & Friends Blog
  - [ ] [Adam Featured on the AppSec Weekly Podcast](https://shostack.org/blog/owasp-modern-appsec-podcast/)
- 奇安信 CERT
  - [ ] [【已复现】Microsoft Office 安全功能绕过漏洞(CVE-2026-21509)安全风险通告第二次更新](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504636&idx=1&sn=3faa5525b063245cb853d84c65a94254)
- 代码卫士
  - [ ] [AI 助手OpenClaw 易遭一次点击 RCE 攻击](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525048&idx=1&sn=cdf70fc2422b01678c8735e83fc62b3b)
  - [ ] [Apache Syncope 漏洞可用于劫持用户会话](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525048&idx=2&sn=58b797888d5027994282725ccb9f23de)
- 君哥的体历
  - [ ] [信息安全实践：等保系统管理员职责落地、DMZ代理架构解析与敏感文档防泄追踪｜总第307周](https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492346&idx=1&sn=00b7e263add6fa8eb6f45e184f0f33ed)
- 信息安全国家工程研究中心
  - [ ] [工业和信息化部等八部门联合发文 推进汽车数据高效便利安全跨境流动](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247502954&idx=1&sn=bfc51bf751fda5ce3f61e60c8f04f440)
- 网络空间安全科学学报
  - [ ] [2025年 第3卷 第4期](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247507266&idx=1&sn=8a0e21d76c6d69651f3095b32cc38c45)
- 安全圈
  - [ ] [【安全圈】爆火 AI 智能体 OpenClaw 被发现严重漏洞，可传播 / 植入 macOS 病毒](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073999&idx=1&sn=5508575686fa7be60539730ca202eb59)
  - [ ] [【安全圈】西班牙财政部已就“超 4700 万人信息泄露”传闻展开调查](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073999&idx=2&sn=dee2a2b2ee54754815440835cf37fb6c)
  - [ ] [【安全圈】Fancy Bear 利用微软 Office 漏洞对乌克兰及欧盟发动网络攻击](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073999&idx=3&sn=43e865de647357006d609f2404190a10)
- 数世咨询
  - [ ] [制造业勒索软件威胁持续升级：2026 年趋势与洞察](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541647&idx=1&sn=73567372de0b160db774cf58c83cc700)
- 安全牛
  - [ ] [93%企业第三方服务成攻击入口，传统边界防御已死？](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140410&idx=1&sn=28160d90a15973e5af3b8dcf2cdd2f50)
  - [ ] [72款App被点名：这些高频违规项你家产品中招了吗？；工业和信息化部等八部门联合发布新版汽车数据出境安全指引| 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140410&idx=2&sn=049e7b9df800457e9691f5f503ed71b9)
- 中国信息安全
  - [ ] [专题·回顾与展望 | 2025年中国网络与信息法治建设回顾与趋势展望](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664258879&idx=1&sn=97d96599cdf676b10e8c8afd3418305d)
  - [ ] [国家安全部：“三招”教你护好数字安全](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664258879&idx=2&sn=8d8c30b81c90a3cee3adf2c65438ee44)
  - [ ] [专家解读 | 余晓晖：规范“指尖政务”，以制度创新破解基层减负难题](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664258879&idx=3&sn=0025b350a83a49cf67bbc6f47ba2d234)
  - [ ] [通知 | 3项网络安全国家标准获批发布](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664258879&idx=4&sn=88b4248902e47221145624fbb378153b)
  - [ ] [通知 | 网安标委发布《网络安全标准实践指南——网络数据标签标识技术要求》](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664258879&idx=5&sn=df59a1c7f0c521f215159c368671c5bf)
  - [ ] [通知 | 网安标委下达7项网络安全推荐性国家标准计划](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664258879&idx=6&sn=6bcb5523676820b22bab54a304b06b16)
- 极客公园
  - [ ] [苹果 Xcode 终于引入 AI，「Agentic Coding」攻入「果系」开发者大本营](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653098391&idx=1&sn=3e29ae862156093c228310ba2fd92521)
  - [ ] [雨之灵动：如何在六个月内从 0 到 1 落地爆款 AI 潮玩](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653098391&idx=2&sn=cfc69d3eb0ff23803a1f1d227c5405f5)
  - [ ] [官方发文规范「隐藏式门把手」；传小米今年推 NAS 产品；传游戏行业税率增加，腾讯股价一度大跌｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653098357&idx=1&sn=53cf34ab366378680f5e268e68cc3380)
- 嘶吼专业版
  - [ ] [Moltbot AI助手企业部署引发数据安全隐患 或致API密钥等敏感数据泄露](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586633&idx=1&sn=a390177dfde441d90caa32c5bd596cac)
  - [ ] [紧急预警! 钓鱼邮件破4.25亿+银狐黑产肆虐，邮件安全方案速收](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586633&idx=2&sn=07231470cc529d8d5f0aeadae26f6424)
- 腾讯安全威胁情报中心
  - [ ] [警惕你的Skills：OpenClaw开源生态skills风险分析](https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247511034&idx=1&sn=2166096437a964129f5dec744fff6793)
- 看雪学苑
  - [ ] [PageCache详细分析(读写/写回) 基于 Linux 6.12.32版本](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608994&idx=1&sn=4b7864d52ec24a4ac6a4a701a53b2c94)
  - [ ] [杀毒软件竟成“投毒”帮凶？印度eScan更新服务器遭黑](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608994&idx=2&sn=9a513a9a41b12f1530d472401654dc87)
  - [ ] [顶尖硕博战队亲授：30小时教你进阶CTF-密码学](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608994&idx=3&sn=d1abce10635a2d9d215f069a01044b1d)
- 微步在线
  - [ ] [微步云沙箱S重磅更新，专治高对抗钓鱼邮件！](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650185443&idx=1&sn=dc017749810bd9ac8050235d0b0ceb6a)
  - [ ] [微步NGTIP获网安产业创新发展联盟“创新成果奖”](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650185443&idx=2&sn=26a5b8b4078a27e526c55419b2f2a479)
- 复旦白泽战队
  - [ ] [访谈资讯｜张谧教授就“低俗导向AI生成提示词”现象答南都记者问](https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247497591&idx=1&sn=204d6302e60f0a1fc6dcf26770450aa1)
- 补天平台
  - [ ] [新刊赠书！《奇安信攻防社区·2025专刊》，AI安全风向标！](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510244&idx=1&sn=ef43dff8eb82d52c3fd91285e7e5e683)
- 字节跳动安全中心
  - [ ] [共建开源生态安全！ByteSRC正式启动开源项目漏洞收录计划！](https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496013&idx=1&sn=99e9040f0bcba562aa2143bd984b498a)
- 火绒安全
  - [ ] [火绒小问答 ——「个人版」功能使用类top问题解答](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247530372&idx=1&sn=ec40da2eff2e9fb62342c0c734f5ee39)
  - [ ] [春醒万物生 护网正当时](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247530372&idx=2&sn=7232ee365f768afab782deed9de8b72a)
  - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247530372&idx=3&sn=cdedcdc3dba94cc018516fc320404949)
- ChaMd5安全团队
  - [ ] [2026阿里CTF Writeup by Mini-Venom](https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247514133&idx=1&sn=70af1a49043919abd9433ed78b64c1ce)
- 美团技术团队
  - [ ] [互动有奖 | 美团技术年货加更，活动沉淀来啦！](https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651782172&idx=1&sn=bd821367fc1f3475739c43302a62cb9c)
- 墨菲安全
  - [ ] [AI Agent失控风险：OpenClaw从提示词注入到skill投毒](https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488259&idx=1&sn=a18e0e51313c015682c7355ab2fa6729)
- 迪哥讲事
  - [ ] [通过路径遍历所造成的信息泄露](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499015&idx=1&sn=0da11ad2891017d3ef09c7e4d660d312)
- 字节跳动技术团队
  - [ ] [TOS Vectors + TLS Trace：打造更高效、更智能的存储 SDK 工厂](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247518408&idx=1&sn=e1e2a3a714eeec1e3072acb35fae2b64)
- 360数字安全
  - [ ] [实力双认证！360揽获卓越贡献奖，入选数据安全建设推荐单位](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247584827&idx=1&sn=ac73bd48cb273538fbbb70a00792fe0f)
  - [ ] [360亮相香港“AI+政务”技术论坛，助力政务效率全面升级](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247584827&idx=2&sn=475cda001056c7a9b199f689c2cbf01b)
- Over Security - Cybersecurity news aggregator
  - [ ] [Hackers compromise NGINX servers to redirect user traffic](https://www.bleepingcomputer.com/news/security/hackers-compromise-nginx-servers-to-redirect-user-traffic/)
  - [ ] [Critical n8n flaws disclosed along with public exploits](https://www.bleepingcomputer.com/news/security/critical-n8n-flaws-disclosed-along-with-public-exploits/)
  - [ ] [Hackers publish personal information stolen during Harvard, UPenn data breaches](https://techcrunch.com/2026/02/04/hackers-publish-personal-information-stolen-during-harvard-upenn-data-breaches/)
  - [ ] [Protecting the Big Game: A Threat Assessment for Super Bowl LX](https://flashpoint.io/blog/protecting-the-big-game-a-threat-assessment-for-super-bowl-lx/)
  - [ ] [Taiwanese national sentenced to 30 years for running darknet Incognito Market](https://therecord.media/incognito-market-sentenced-thirty)
  - [ ] [WhatsApp introduce le impostazioni restrittive dell’account: come attivarle](https://www.cybersecurity360.it/news/whatsapp-introduce-le-impostazioni-restrittive-dellaccount-come-attivarle/)
  - [ ] [CISA: VMware ESXi flaw now exploited in ransomware attacks](https://www.bleepingcomputer.com/news/security/cisa-vmware-esxi-flaw-now-exploited-in-ransomware-attacks/)
  - [ ] [Exclusive: US used cyber weapons to disrupt Iranian air defenses during 2025 strikes](https://therecord.media/iran-nuclear-cyber-strikes-us)
  - [ ] [Ukraine tightens controls on Starlink terminals to counter Russian drones](https://therecord.media/ukraine-tightens-starlink-controls-counter-russian-drones)
  - [ ] [CISA warns of five-year-old GitLab flaw exploited in attacks](https://www.bleepingcomputer.com/news/security/cisa-warns-of-five-year-old-gitlab-flaw-exploited-in-attacks/)
  - [ ] [The Double-Edged Sword of Non-Human Identities](https://www.bleepingcomputer.com/news/security/the-double-edged-sword-of-non-human-identities/)
  - [ ] [Speaking the Language of BLE Wearables - Analysis with Frida and ESP32](https://mandomat.github.io/2026-02-04-speaking-the-language-of-wearables/)
  - [ ] [EDR killer tool uses signed kernel driver from forensic software](https://www.bleepingcomputer.com/news/security/edr-killer-tool-uses-signed-kernel-driver-from-forensic-software/)
  - [ ] [New Amaranth Dragon cyberespionage group exploits WinRAR flaw](https://www.bleepingcomputer.com/news/security/new-amaranth-dragon-cyberespionage-group-exploits-winrar-flaw/)
  - [ ] [Research: Predator spyware can turn off Apple indicators showing when microphone, camera are in use](https://therecord.media/predator-spyware-iphone-camera-microphone-indicators)
  - [ ] [Olimpiadi Milano-Cortina sotto attacco DDoS: qual è la vera minaccia](https://www.cybersecurity360.it/nuove-minacce/olimpiadi-milano-cortina-sotto-attacco-ddos-qual-e-la-vera-minaccia/)
  - [ ] [Microsoft rolls out native Sysmon monitoring in Windows 11](https://www.bleepingcomputer.com/news/microsoft/microsoft-rolls-out-native-windows-11-sysmon-security-monitoring/)
  - [ ] [Ransomware Attacks Have Surged 30% Since Q4 2025](https://cyble.com/blog/ransomware-groups-q4-2025-cyble-report/)
  - [ ] [Owner of Incognito dark web drugs market gets 30 years in prison](https://www.bleepingcomputer.com/news/security/taiwanese-man-gets-30-years-for-operating-dark-web-drug-market/)
  - [ ] [Il mystery shopping in azienda, fra supervisione e privacy dei lavoratori](https://www.cybersecurity360.it/legal/privacy-dati-personali/il-mystery-shopping-in-azienda-fra-supervisione-e-privacy-dei-lavoratori/)
  - [ ] [IA agentica, nuovo complice degli hacker: il rischio scorciatoia nella programmazione](https://www.cybersecurity360.it/nuove-minacce/ia-agentica-nuovo-complice-degli-hacker-il-rischio-scorciatoia-nella-programmazione/)
  - [ ] [Il mistery shopping in azienda, fra supervisione e privacy dei lavoratori](https://www.cybersecurity360.it/legal/privacy-dati-personali/il-mistery-shopping-in-azienda-fra-supervisione-e-privacy-dei-lavoratori/)
  - [ ] [An Analysis of the BabLock Ransomware](https://www.trendmicro.com/en_us/research/23/d/an-analysis-of-the-bablock-ransomware.html)
  - [ ] [AAA cercasi igiene cyber nel settore sanitario sotto attacco](https://www.cybersecurity360.it/outlook/aaa-cercasi-igiene-cyber-nel-settore-sanitario-sotto-attacco/)
  - [ ] [Release Notes: Workflow Improvements, MISP Integration & 2,000+ New Detections](https://any.run/cybersecurity-blog/release-notes-january-2026/)
  - [ ] [Shaping Shadows: Breaking Down New ShadowSyndicate Methods and Infrastructure](https://www.group-ib.com/blog/new-shadowsyndicate-infrastructure/)
  - [ ] [Coinbase confirms insider breach linked to leaked support tool screenshots](https://www.bleepingcomputer.com/news/security/coinbase-confirms-insider-breach-linked-to-leaked-support-tool-screenshots/)
- Qualys Security Blog
  - [ ] [TruConfirm: Ending Vulnerability Guesswork with Proof inside ETM](https://blog.qualys.com/category/product-tech)
- 安全行者老霍
  - [ ] [开源AI渗透测试工具正变得令人不安地强大](https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247485846&idx=1&sn=01ed02a2946df4bd9e2dfc5e94fa4849)
- ICT Security Magazine
  - [ ] [Tsurugi Linux: l’arsenale Open source italiano per la cybersecurity](https://www.ictsecuritymagazine.com/articoli/tsurugi-linux/)
  - [ ] [Business Impact Analysis e Supply Chain per la NIS2](https://www.ictsecuritymagazine.com/articoli/business-impact-analysis/)
- 国家互联网应急中心CNCERT
  - [ ] [网络安全信息与动态周报2026年第5期（1月26日-2月1日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501200&idx=1&sn=6a7aa66aaf1dc975f75460ae00c32832)
- Coding Horror
  - [ ] [Launching The Rural Guaranteed Minimum Income Initiative](https://blog.codinghorror.com/launching-the-rural-guaranteed-minimum-income-initiative/)
- SANS Internet Storm Center, InfoCON: green
  - [ ] [Malicious Script Delivering More Maliciousness, (Wed, Feb 4th)](https://isc.sans.edu/diary/rss/32682)
  - [ ] [ISC Stormcast For Wednesday, February 4th, 2026 https://isc.sans.edu/podcastdetail/9794, (Wed, Feb 4th)](https://isc.sans.edu/diary/rss/32680)
- 云鼎实验室
  - [ ] [于新加坡见未来：腾讯云安全在AAAI 2026办了场可信AI智能体全球研讨](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497180&idx=1&sn=1d4f9d23f66fb7771147a9732001e436)
- Troy Hunt's Blog
  - [ ] [Weekly Update 489](https://www.troyhunt.com/weekly-update-489/)
- Schneier on Security
  - [ ] [US Declassifies Information on JUMPSEAT Spy Satellites](https://www.schneier.com/blog/archives/2026/02/us-declassifies-information-on-jumpseat-spy-satellites.html)
- The Register - Security
  - [ ] [AWS intruder achieved admin access in under 10 minutes thanks to AI assist, researchers say](https://go.theregister.com/feed/www.theregister.com/2026/02/04/aws_cloud_breakin_ai_assist/)
  - [ ] [Critical SolarWinds Web Help Desk bug under attack](https://go.theregister.com/feed/www.theregister.com/2026/02/04/critical_solarwinds_web_help_desk/)
  - [ ] [Nitrogen ransomware is so broken even the crooks can't unlock your files](https://go.theregister.com/feed/www.theregister.com/2026/02/04/nitrogen_ransomware_broken_decryptor/)
  - [ ] [Universal £7,500 payout offered to PSNI staff over major data breach](https://go.theregister.com/feed/www.theregister.com/2026/02/04/psni_breach_compensation/)
  - [ ] [Clouds rush to deliver OpenClaw-as-a-service offerings](https://go.theregister.com/feed/www.theregister.com/2026/02/04/cloud_hosted_openclaw/)
- TorrentFreak
  - [ ] [NVIDIA: Contact With Anna’s Archive Doesn’t Prove Copyright Infringement](https://torrentfreak.com/nvidia-contact-with-annas-archive-doesnt-prove-copyright-infringement/)
- bellingcat
  - [ ] [Made in the USA: How American-Built Weapons Have Wrought Destruction in Gaza](https://www.bellingcat.com/news/2026/02/04/made-in-the-usa-how-american-built-weapons-have-wrought-destruction-in-gaza/)
- Tor Project blog
  - [ ] [New Alpha Release: Tor Browser 16.0a2](https://blog.torproject.org/new-alpha-release-tor-browser-160a2/)
- 希潭实验室
  - [ ] [第157篇：希水涵Web日志分析工具V0.32版本更新 | 一键日志分析、异常访问识别、IP 与流量可视化、报告生成](https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247488239&idx=1&sn=1bd9f335cf00853f89b20d5b81b47d0e)
- Deeplinks
  - [ ] [Smart AI Policy Means Examing Its Real Harms and Benefits](https://www.eff.org/deeplinks/2026/02/smart-ai-policy-means-understanding-its-real-harms-and-benefits)
- Blackhat Library: Hacking techniques and research
  - [ ] [what would attacker do with a first preimage attack on sha256?](https://www.reddit.com/r/blackhat/comments/1qvepdp/what_would_attacker_do_with_a_first_preimage/)
- Technical Information Security Content & Discussion
  - [ ] [Recreating uncensored Epstein PDFs from raw encoded attachments... or trying to, anyway](https://www.reddit.com/r/netsec/comments/1qw4sfa/recreating_uncensored_epstein_pdfs_from_raw/)
  - [ ] [2026: New N8N RCE Deep Dive into CVE-2026-25049](https://www.reddit.com/r/netsec/comments/1qw2mw8/2026_new_n8n_rce_deep_dive_into_cve202625049/)
  - [ ] [Kernel-Level Stealthy Observation of TTY Streams](https://www.reddit.com/r/netsec/comments/1qvvin8/kernellevel_stealthy_observation_of_tty_streams/)
- Information Security
  - [ ] [Google cybersecurity certificate](https://www.reddit.com/r/Information_Security/comments/1qvpbhq/google_cybersecurity_certificate/)
- Computer Forensics
  - [ ] [Forensic Examiner for the Fire Marshal](https://www.reddit.com/r/computerforensics/comments/1qvb0cd/forensic_examiner_for_the_fire_marshal/)
- The Hacker News
  - [ ] [Microsoft Develops Scanner to Detect Backdoors in Open-Weight Large Language Models](https://thehackernews.com/2026/02/microsoft-develops-scanner-to-detect.html)
  - [ ] [DEAD#VAX Malware Campaign Deploys AsyncRAT via IPFS-Hosted VHD Phishing Files](https://thehackernews.com/2026/02/deadvax-malware-campaign-deploys.html)
  - [ ] [China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage Campaigns](https://thehackernews.com/2026/02/china-linked-amaranth-dragon-exploits.html)
  - [ ] [Orchid Security Introduces Continuous Identity Observability for Enterprise Applications](https://thehackernews.com/2026/02/orchid-security-introduces-continuous.html)
  - [ ] [The First 90 Seconds: How Early Decisions Shape Incident Response Investigations](https://thehackernews.com/2026/02/the-first-90-seconds-how-early.html)
  - [ ] [Microsoft Warns Python Infostealers Target macOS via Fake Ads and Installers](https://thehackernews.com/2026/02/microsoft-warns-python-infostealers.html)
  - [ ] [Eclipse Foundation Mandates Pre-Publish Security Checks for Open VSX Extensions](https://thehackernews.com/2026/02/eclipse-foundation-mandates-pre-publish.html)
  - [ ] [CISA Adds Actively Exploited SolarWinds Web Help Desk RCE to KEV Catalog](https://thehackernews.com/2026/02/cisa-adds-actively-exploited-solarwinds.html)
- Deep Web
  - [ ] [Anyone remember DeepDotWeb?](https://www.reddit.com/r/deepweb/comments/1qvvp6j/anyone_remember_deepdotweb/)
  - [ ] [.clos and .luky links](https://www.reddit.com/r/deepweb/comments/1qvtjwc/clos_and_luky_links/)
  - [ ] [No hitmen?](https://www.reddit.com/r/deepweb/comments/1qvz233/no_hitmen/)
- Your Open Hacker Community
  - [ ] [How can I use the cloud for cracking?](https://www.reddit.com/r/HowToHack/comments/1qvck6f/how_can_i_use_the_cloud_for_cracking/)
  - [ ] [hey how can i modify screen time?](https://www.reddit.com/r/HowToHack/comments/1qvukqy/hey_how_can_i_modify_screen_time/)
  - [ ] [Help regarding Hashcat](https://www.reddit.com/r/HowToHack/comments/1qvbf53/help_regarding_hashcat/)
- Security Affairs
  - [ ] [CVE-2025-22225 in VMware ESXi now used in active ransomware attacks](https://securityaffairs.com/187637/security/cve-2025-22225-in-vmware-esxi-now-used-in-active-ransomware-attacks.html)
  - [ ] [Taiwanese operator of Incognito Market sentenced to 30 years over $105M darknet drug ring](https://securityaffairs.com/187623/deep-web/taiwanese-operator-of-incognito-market-sentenced-to-30-years-over-105m-darknet-drug-ring.html)
  - [ ] [Paris raid on X focuses on child abuse material allegations](https://securityaffairs.com/187619/cyber-crime/paris-raid-on-x-focuses-on-child-abuse-material-allegations.html)
  - [ ] [GreyNoise tracks massive Citrix Gateway recon using 63K+ residential proxies and AWS](https://securityaffairs.com/187615/hacking/greynoise-tracks-massive-citrix-gateway-recon-using-63k-residential-proxies-and-aws.html)
  - [ ] [Microsoft: Info-Stealing malware expands from Windows to macOS](https://securityaffairs.com/187608/security/microsoft-info-stealing-malware-expands-from-windows-to-macos.html)
- netsecstudents: Subreddit for students studying Network Security and its related subjects
  - [ ] [Would you buy a plug-and-play T-Pot honeypot mini appliance? Looking for feedback.](https://www.reddit.com/r/netsecstudents/comments/1qvsflq/would_you_buy_a_plugandplay_tpot_honeypot_mini/)
- Social Engineering
  - [ ] [The "Tolerance Trap": Engineering Consent through Neural Overwrites](https://www.reddit.com/r/SocialEngineering/comments/1qvo8j0/the_tolerance_trap_engineering_consent_through/)
  - [ ] [Social Engineering Presentations](https://www.reddit.com/r/SocialEngineering/comments/1qvv4oc/social_engineering_presentations/)
- 安全攻防团队
  - [ ] [招人啦！腾讯云安全运营岗位（深圳/武汉）](https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485134&idx=1&sn=ee7c2c8857e71f243a6741a21fb69d94)
- Security Weekly Podcast Network (Audio)
  - [ ] [Unexamined Leadership Behaviors as CEOs and CISOs Balance Cybersecurity Investments - Hacia Atherton - BSW #433](http://sites.libsyn.com/18678/unexamined-leadership-behaviors-as-ceos-and-cisos-balance-cybersecurity-investments-hacia-atherton-bsw-433)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[每日信息流] 2026-02-05 #1139

每日安全资讯（2026-02-05）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2026-02-05 #1139

Description

每日安全资讯（2026-02-05）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions