# 每日安全资讯（2026-08-17） - SecWiki News - [ ] [SecWiki News 2026-08-16 Review](http://www.sec-wiki.com/?2026-08-16) - Private Feed for M09Ic - [ ] [timwhitez contributed to beancookie/awesome-dsh-plugin](https://github.com/beancookie/awesome-dsh-plugin/pull/48) - [ ] [liamg contributed to liamg/ariadne](https://github.com/liamg/ariadne/pull/18) - [ ] [bolucat released 202608162036 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202608162036) - [ ] [timwhitez contributed to AdamPlatin123/awesome-dsh-plugins](https://github.com/AdamPlatin123/awesome-dsh-plugins/pull/199) - [ ] [chainreactors released v0.0.0-nightly.20260816 at chainreactors/aiscan](https://github.com/chainreactors/aiscan/releases/tag/v0.0.0-nightly.20260816) - [ ] [mgeeky starred tyeurada/edrEvasionWorkshop](https://github.com/tyeurada/edrEvasionWorkshop) - [ ] [timwhitez contributed to awesome-dsh-plugin/awesome-dsh-plugin](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/1101) - [ ] [Mr-xn starred NarratorAI-Studio/narrator-ai-cli-skill](https://github.com/NarratorAI-Studio/narrator-ai-cli-skill) - [ ] [Mr-xn forked Mr-xn/LLMWikiNG from ZeroDot1/LLMWikiNG](https://github.com/Mr-xn/LLMWikiNG) - [ ] [esrrhs contributed to esrrhs/fakelua](https://github.com/esrrhs/fakelua/pull/361) - [ ] [Ridter starred 0xsdeo/AntiDebug_Breaker](https://github.com/0xsdeo/AntiDebug_Breaker) - [ ] [gh0stkey starred xingj404-lab/dsh-desktop](https://github.com/xingj404-lab/dsh-desktop) - Doonsec's feed - [ ] [腾讯_Physical AI Agent：人形机器人平台的具身智能安全威胁建模](https://mp.weixin.qq.com/s/4JoYU1_bxfG8PwrqUbzSeA) - [ ] [邀请函｜智能网联汽车电子电气架构在线研讨会2026](https://mp.weixin.qq.com/s/_xML75v79Bz38Ej0PvvvEQ) - [ ] [上海交通大学：具身智能自主无人系统安全](https://mp.weixin.qq.com/s/0ssMedOiVz61ANuJbbkOzg) - [ ] [IonStack 第三部分：用 GhostLock 获取 Android 17 Root](https://mp.weixin.qq.com/s/E3kZcJQ5IuyNhaD6T9Y4MA) - [ ] [明显感觉C++的面试已经变了。。。](https://mp.weixin.qq.com/s/d3eSsSjn9iTENN9VyaSrsA) - [ ] [漏洞复现 | Alibaba-Sentinel login 默认口令漏洞](https://mp.weixin.qq.com/s/-dd_jQ4BbwwG0UmfnCen2A) - [ ] [龙山警方端掉色诱诈骗窝点，27人落网，榨干受害人后转卖刷单团伙二次诈骗](https://mp.weixin.qq.com/s/ViXqd0wDar6Fvybt9q4Psw) - [ ] [长沙雨花警方打掉跑分洗钱团伙，抓获21人，涉案150余万元](https://mp.weixin.qq.com/s/Mff2rmoD7k3UjfgDxRLDnA) - [ ] [武胜公安破获特大对公账户洗钱案，17 名嫌犯落网，涉案资金 2000 余万元](https://mp.weixin.qq.com/s/1fDTnPuWCTnQ4h7P3DjSbg) - Recent Commits to cve:main - [ ] [Update Sun Aug 16 12:19:39 UTC 2026](https://github.com/trickest/cve/commit/b0ffae0ae48366cc06ce5d13ffea98e62ed47d53) - Sploitus.com Exploits RSS Feed - [ ] [Exploit for CVE-2026-18366](https://sploitus.com/exploit?id=0D05FDA5-2D32-5BF2-B5F3-D39DFE729B14&utm_source=rss&utm_medium=rss) - [ ] [BlackPearl-CTF-Exploitation](https://sploitus.com/exploit?id=0D8248FB-0941-5922-9979-49DFD99582FD&utm_source=rss&utm_medium=rss) - [ ] [Root-My-Galaxy-Payloads exploit](https://sploitus.com/exploit?id=6ADC15B9-71F5-54D7-ABAF-259DCF8C1B3D&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-8508](https://sploitus.com/exploit?id=33D18165-2055-57DB-8186-A2F92B5C5BB5&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-6837](https://sploitus.com/exploit?id=D8F7FACB-F5F9-558A-A08D-F0A42337381F&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-64638](https://sploitus.com/exploit?id=BB1B9118-BF3C-5F4C-805A-63268F33EE6A&utm_source=rss&utm_medium=rss) - [ ] [Hack-The-Box-Connected-Full-Machine-Walkthrough exploit](https://sploitus.com/exploit?id=BA30A7A4-99E2-581E-A23E-DD578C1DA264&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-73678](https://sploitus.com/exploit?id=AD2D9BCE-BC70-53AB-BF51-85631949BFEB&utm_source=rss&utm_medium=rss) - [ ] [KKYUMsysLPE exploit](https://sploitus.com/exploit?id=852FED9D-E317-5DE2-A48B-60E5A84845F3&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-73633](https://sploitus.com/exploit?id=4A9059D4-C01D-5ECD-867C-D3E891BC657C&utm_source=rss&utm_medium=rss) - [ ] [web-vulnerabilities-labs exploit](https://sploitus.com/exploit?id=DEC54365-0995-5A7D-AF25-C363F856373B&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2025-11740](https://sploitus.com/exploit?id=3EA36AE4-A117-55AC-846E-2F3FE70EE9BC&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Insertion of Sensitive Information into Log File in Hitachi Configuration_Manager](https://sploitus.com/exploit?id=EC9A63D1-5820-58F3-949C-9F444CE56082&utm_source=rss&utm_medium=rss) - [ ] [HakShop exploit](https://sploitus.com/exploit?id=EB5FCF69-63E8-53C8-8F3C-2D6C79CDB73D&utm_source=rss&utm_medium=rss) - [ ] [geoserver-0day-rce exploit](https://sploitus.com/exploit?id=A4039CC7-2E50-5B4C-906C-53025202BDD9&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2022-24481](https://sploitus.com/exploit?id=AB2A7948-3025-57B9-9F0D-5B495BCC090C&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-73847](https://sploitus.com/exploit?id=F0666787-BCF6-595C-918A-632B2AEBA0A4&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-73519](https://sploitus.com/exploit?id=7B95F7DC-5EEC-5081-A56F-274EE031C041&utm_source=rss&utm_medium=rss) - Reverse Engineering - [ ] [Reverse Engineering CVE-2026-6837: From Zyxel Firmware to Root Command Execution with full firmware emulation](https://www.reddit.com/r/ReverseEngineering/comments/1vq45q2/reverse_engineering_cve20266837_from_zyxel/) - [ ] [(OSS) Akamai solver for V2 & V3 sensors and the pixel challenge.](https://www.reddit.com/r/ReverseEngineering/comments/1vpt9pm/oss_akamai_solver_for_v2_v3_sensors_and_the_pixel/) - [ ] [RE: CVX Decomp - Analyzing and removing the blurry PS2 port graphics](https://www.reddit.com/r/ReverseEngineering/comments/1vpiszp/re_cvx_decomp_analyzing_and_removing_the_blurry/) - [ ] [phaedra: coverage-guided fuzzer that uses a local LLM to bootstrap seeds for undocumented binary formats](https://www.reddit.com/r/ReverseEngineering/comments/1vpl5us/phaedra_coverageguided_fuzzer_that_uses_a_local/) - - [ ] [HackGlasgow 2026](https://cornerpirate.com/2026/08/16/hackglasgow-2026/) - Offensive OSINT - [ ] [Offensive OSINT s06e02 - Data-driven investigations part 2 - UC135](https://www.offensiveosint.io/offensive-osint-s06e02-data-driven-investigations-part-2-uc135/) - 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台 - [ ] [中国将严格实施新能源车“带电池报废”](https://blog.upx8.com/%E4%B8%AD%E5%9B%BD%E5%B0%86%E4%B8%A5%E6%A0%BC%E5%AE%9E%E6%96%BD%E6%96%B0%E8%83%BD%E6%BA%90%E8%BD%A6-%E5%B8%A6%E7%94%B5%E6%B1%A0%E6%8A%A5%E5%BA%9F) - [ ] [阿里巴巴AI模型下载量突破30亿次](https://blog.upx8.com/%E9%98%BF%E9%87%8C%E5%B7%B4%E5%B7%B4AI%E6%A8%A1%E5%9E%8B%E4%B8%8B%E8%BD%BD%E9%87%8F%E7%AA%81%E7%A0%B430%E4%BA%BF%E6%AC%A1) - [ ] [苦心经营三十余年，微软终将告别中国？](https://blog.upx8.com/%E8%8B%A6%E5%BF%83%E7%BB%8F%E8%90%A5%E4%B8%89%E5%8D%81%E4%BD%99%E5%B9%B4-%E5%BE%AE%E8%BD%AF%E7%BB%88%E5%B0%86%E5%91%8A%E5%88%AB%E4%B8%AD%E5%9B%BD) - [ ] [诺基亚关闭中国研发中心裁员1600人](https://blog.upx8.com/%E8%AF%BA%E5%9F%BA%E4%BA%9A%E5%85%B3%E9%97%AD%E4%B8%AD%E5%9B%BD%E7%A0%94%E5%8F%91%E4%B8%AD%E5%BF%83%E8%A3%81%E5%91%981600%E4%BA%BA) - [ ] [中国准备解除对Manus创始人的出行禁令](https://blog.upx8.com/%E4%B8%AD%E5%9B%BD%E5%87%86%E5%A4%87%E8%A7%A3%E9%99%A4%E5%AF%B9Manus%E5%88%9B%E5%A7%8B%E4%BA%BA%E7%9A%84%E5%87%BA%E8%A1%8C%E7%A6%81%E4%BB%A4) - [ ] [中国汽车从内卷到外卷：出口爆发式增长，运输船一船难求，船期排到数年之后](https://blog.upx8.com/%E4%B8%AD%E5%9B%BD%E6%B1%BD%E8%BD%A6%E4%BB%8E%E5%86%85%E5%8D%B7%E5%88%B0%E5%A4%96%E5%8D%B7-%E5%87%BA%E5%8F%A3%E7%88%86%E5%8F%91%E5%BC%8F%E5%A2%9E%E9%95%BF-%E8%BF%90%E8%BE%93%E8%88%B9%E4%B8%80%E8%88%B9%E9%9A%BE%E6%B1%82-%E8%88%B9%E6%9C%9F%E6%8E%92%E5%88%B0%E6%95%B0%E5%B9%B4%E4%B9%8B%E5%90%8E) - 奇客Solidot–传递最新科技情报 - [ ] [欧洲创纪录热浪杀死了 2.5 万人](https://www.solidot.org/story?sid=85107) - [ ] [穷人比富人更早出现身体上的老化迹象](https://www.solidot.org/story?sid=85106) - [ ] [美国历史上的奴隶制可预测今天的黑人白人死亡率差异](https://www.solidot.org/story?sid=85105) - 我的安全视界观 - [ ] [【AI复盘】AI Agent元编排框架满分漏洞事件](https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487939&idx=1&sn=94c1315f339d0dd63a2bc71a942bc063) - 黑鸟 - [ ] [U 盘触发的零点击攻击：Windows 驱动安装机制被滥用](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451188119&idx=1&sn=e796c13c234479e5de95220af54806b0) - 青衣十三楼飞花堂 - [ ] [从“真空吸力”想开去](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247489871&idx=1&sn=34c170c59a05442c7cca27d04ec366b2) - 安全分析与研究 - [ ] [第11篇-全球十大勒索事件复盘](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247497019&idx=1&sn=03bed2df0fe547dcd02bf236f563d577) - 安全圈 - [ ] [【安全圈】爱快路由系统突发漏洞，速升级！](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078314&idx=1&sn=93f4cd1f23b28017127dc43fa06566bf) - [ ] [【安全圈】LastPass又出事！客户数据遭泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078314&idx=2&sn=85c23cd85434f9caf9a7be2fdcd84e92) - [ ] [【安全圈】FFmpeg紧急修复CVE-2026-8461：CVSS 8.8](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078314&idx=3&sn=8fe4e8da66f8fa710c3474139cd865d6) - 极客公园 - [ ] [世界机器人大会今年不一定「Wow！」，但有五个问题很值得关注](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653112028&idx=1&sn=903a5e80b07019eaa2852160e8a1b526) - [ ] [被 AI 碾压 30 年后，人们重新爱上了下棋](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653112012&idx=1&sn=782a45b103ff806ddae6839cc508befd) - [ ] [Anthropic 评估 AI 风险上升, 暂不公开更强模型；刘炽平：微信将成为 AI 为先的生态系统；全网吐槽《牛来》票房逆袭 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653112007&idx=1&sn=0176e4de88df935ad93d177c2c9cf657) - 大兵说安全 - [ ] [感谢会议筹备组同事的辛勤付出，感谢设计师的精美设计，感谢摄影师独特的视角](https://mp.weixin.qq.com/s?__biz=MzI2MzM0NjcxNw==&mid=2247485847&idx=1&sn=e4bc154534357d81473b021ae485889e) - IT Service Management News - [ ] [Guida alla software bill of material (SBOM)](http://blog.cesaregallotti.it/2026/08/guida-alla-software-bill-of-material.html) - [ ] [Nuova ISO/IEC 27017 per i servizi cloud](http://blog.cesaregallotti.it/2026/08/nuova-isoiec-27017-per-i-servizi-cloud.html) - [ ] [Guida della Commissione Europea sull'implementazione del CRA](http://blog.cesaregallotti.it/2026/08/guida-della-commissione-europea.html) - 吴鲁加 - [ ] [听汤质分享6个小时，我几乎一句都没听懂](https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247486153&idx=1&sn=fd989143925948f2da035c669cee9f99) - Over Security - [ ] [Anthropic confirms Claude is down in major outage affecting multiple services](https://www.bleepingcomputer.com/news/artificial-intelligence/anthropic-confirms-claude-is-down-in-major-outage-affecting-multiple-services/) - [ ] [Large-scale DDoS attacks disrupted Threema secure messaging service](https://www.bleepingcomputer.com/news/security/large-scale-ddos-attacks-disrupted-threema-secure-messaging-service/) - [ ] [New AmnesiaStealer macOS malware hijacks browser sessions via remote control](https://www.bleepingcomputer.com/news/security/new-amnesiastealer-macos-malware-hijacks-browser-sessions-via-remote-control/) - [ ] [Mastering Claude Code Series - Part 3](https://attacker-codeninja.github.io/2026-08-16-Mastering-Claude-Code-Series-3/) - [ ] [Mastering Claude Code Series - Part 4](https://attacker-codeninja.github.io/2026-08-16-Mastering-Claude-Code-Series-4/) - [ ] [Mastering Claude Code Series - Part 2](https://attacker-codeninja.github.io/2026-08-16-Mastering-Claude-Code-Series-2/) - [ ] [Mastering Claude Code Series - Part 5](https://attacker-codeninja.github.io/2026-08-16-Mastering-Claude-Code-Series-5/) - SANS Internet Storm Center, InfoCON: green - [ ] [Wireshark 4.6.8 Released, (Sun, Aug 16th)](https://isc.sans.edu/diary/rss/33248) - Security Affairs - [ ] [DDoS Attacks Cause Major Threema Outages](https://securityaffairs.com/197353/hacking/ddos-attacks-cause-major-threema-outages.html) - [ ] [SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 110](https://securityaffairs.com/197314/malware/security-affairs-malware-newsletter-round-110.html) - [ ] [Mustang Panda Upgrades CoolClient With a Kernel Rootkit](https://securityaffairs.com/197274/apt/mustang-panda-upgrades-coolclient-with-a-kernel-rootkit.html) - [ ] [Sophisticated Cyberattack Exposes Data of 678,000 French Taxpayers](https://securityaffairs.com/197287/cyber-crime/sophisticated-cyberattack-exposes-data-of-678000-french-taxpayers.html) - [ ] [Security Affairs newsletter Round 590 by Pierluigi Paganini – INTERNATIONAL EDITION](https://securityaffairs.com/197288/breaking-news/security-affairs-newsletter-round-590-by-pierluigi-paganini-international-edition.html) - [ ] [APT36 Suspected in PATCHCORD Espionage Campaign Using Google Sheets C2](https://securityaffairs.com/197266/intelligence/apt36-suspected-in-patchcord-espionage-campaign-using-google-sheets-c2.html) - www.theregister.com - Articles - [ ] [Stopping a cyberattack while walking your dog - defensive AI security CEO says it's not ruff to do](https://www.theregister.com/security/2026/08/16/stopping-a-cyberattack-while-walking-your-dog-defensive-ai-security-ceo-says-its-not-ruff-to-do/5288126) - TorrentFreak - [ ] [Researchers Hunt Telegram Pirates with AI Tool, Flag Hundreds of Channels](https://torrentfreak.com/researchers-hunt-telegram-pirates-with-ai-tool-flag-hundreds-of-channels/)
每日安全资讯（2026-08-17）