[每日信息流] 2026-03-04 #1167
Description
每日安全资讯（2026-03-04）
- SecWiki News
- Doonsec's feed
- 安全客-有思想的安全新媒体
- 黑客如何将Windows文件管理器变为远程控制木马的隐蔽入口
- FreeBSD高危漏洞可致系统崩溃并实现虚拟机逃逸
- 谷歌发布Nano Banana 2模型，基于Gemini实现4K标准化AI图像生成
- Zyxel多款路由器曝高危漏洞，可被远程命令注入攻击
- 趋势科技Apex One曝高危漏洞 可被利用执行恶意代码
- 钓鱼攻击滥用.arpa顶级域与IPv6隧道绕过检测
- SonicWall大规模侦察活动频发 勒索软件攻击迫在眉睫
- Vshell逐渐成为威胁分子的常用工具，被当作Cobalt Strike替代方案
- Metasploit针对Linux RC4漏洞、BeyondTrust及注册表持久化攻击新增模块
- 恶意网站利用OpenClaw零点击漏洞可劫持开发者AI智能体
- Recent Commits to cve:main
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
- Microsoft Security Blog
- Tenable Blog
- ElcomSoft blog
- Private Feed for M09Ic
- pydantic released v1.65.0 at pydantic/pydantic-ai
- github released v0.1.13 at github/spec-kit
- kpcyrd contributed to nicoburns/blessed-rs
- zeroclaw-labs released v0.1.8-alpha.1 at zeroclaw-labs/zeroclaw
- kpcyrd forked kpcyrd/blessed-rs from nicoburns/blessed-rs
- mgeeky starred ZephrFish/ludus-defender-lab
- xnl-h4ck3r released v8.6 at xnl-h4ck3r/waymore
- kpcyrd contributed to rustsec/rustsec
- rabbitmask starred ricequant/rqalpha
- safedv starred trustedsec/Titanis
- zema1 starred ricardojoserf/SAMDump
- future-architect released v0.38.5 at future-architect/vuls
- lz520520 starred 0xlane/com-process-inject
- kpcyrd contributed to archlinux/archweb
- Rvn0xsy forked Rvn0xsy/Mythic-MCP from nbaertsch/Mythic-MCP
- Rvn0xsy starred nbaertsch/Mythic-MCP
- CHYbeta starred langchain-ai/deepagents
- Mel0day starred anomalyco/opencode
- ManassehZhou starred router-for-me/CLIProxyAPI
- mgeeky starred Whispergate/berlin
- CXSECURITY Database RSS Feed - CXSecurity.com
- Insinuator.net
- Bug Bounty in InfoSec Write-ups on Medium
- GuidePoint Security
- Payatu
- Reverse Engineering
- Malwarebytes
- Exploit-DB.com RSS Feed
- HackerNews
- 绿盟科技技术博客
- 锦行科技
- 安全分析与研究
- 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台
- 奇客Solidot–传递最新科技情报
- 雷神众测
- 代码卫士
- 天御攻防实验室
- 腾讯玄武实验室
- 丁爸 情报分析师的工具箱
- 看雪学苑
- 安全内参
- 信安之路
- 安全学术圈
- 信息安全国家工程研究中心
- 天黑说嘿话
- 中国信息安全
- 补天平台
- 青藤云安全
- 慢雾科技
- 腾讯安全威胁情报中心
- M01N Team
- 微步在线
- 火绒安全
- 嘶吼专业版
- 吾爱破解论坛
- 安全牛
- 字节跳动安全中心
- 数世咨询
- 极客公园
- 吴鲁加
- 陌陌安全
- 威胁猎人Threat Hunter
- 360数字安全
- 情报分析师
- 迪哥讲事
- 国家互联网应急中心CNCERT
- 字节跳动技术团队
- bellingcat
- ICT Security Magazine
- Securityinfo.it
- Have I Been Pwned latest breaches
- Over Security - Cybersecurity news aggregator
- CISA flags VMware Aria Operations RCE flaw as exploited in attacks
- Paint maker giant AkzoNobel confirms cyberattack on U.S. site
- Facebook accounts unavailable in worldwide outage
- Vulnerability & Patch Roundup — February 2026
- Microsoft: Hackers abuse OAuth error flows to spread malware
- Telecamere di Teheran hackerate e IA: l’arma letale del Mossad per uccidere Khamenei
- California fines national high school ticketing platform $1.1 million for privacy violations
- LexisNexis says hackers accessed legacy data in contained breach
- Hacked traffic cams and hijacked TVs: How cyber operations supported the war against Iran
- Google urges Supreme Court to strike down geofence warrants as unconstitutional
- Google Chrome shifts to two-week release cycle for increased stability
- Analisi di una campagna WsgiDAV multi-stage: falsa comunicazione da Agenzia Nazionale Finanziaria
- Aggiornamenti Android marzo 2026, corretta una zero-day già sfruttata: cosa fare subito
- LexisNexis confirms data breach as hackers leak stolen files
- Attacchi cyber in Iran: le 3 ipotesi del crollo della connettività Internet
- Western allies form 6G security coalition amid tech rivalry with China
- Cyber-Kinetic Warfare Escalates as Iran, US, and Israel Clash Across Military and Digital Fronts
- Middle East on the Brink: Iran-US-Israel Hostilities Trigger Cyber-Kinetic Conflict
- Compromised Site Management Panels are a Hot Item in Cybercrime Markets
- Florida woman gets 2 year sentence for trafficking Microsoft software labels
- Quando il vecchio PC va in pensione, ma i dati restano al lavoro
- Iranian drone strikes hit Amazon data centers in Gulf, disrupting cloud services
- Amazon: Drone strikes damaged AWS data centers in Middle East
- Star Citizen game dev discloses breach affecting user data
- Expanding Phishing Detection at Scale with Automatic SSL Decryption
- UH Cancer Center data breach affects nearly 1.2 million people
- Home Routers in Singapore Must Meet Higher Security Standards by 2027
- Android: 129 vulnerabilità corrette, zero-day Qualcomm già sfruttata
- WinGet Desired State: Initial Access Established
- NIS 2: coerenza, aggiornamento e tracciabilità del rischio digitale
- Android gets patches for Qualcomm zero-day exploited in attacks
- Provecho - 712,904 breached accounts
- University of Hawaii Cancer Center Breach Exposes SSNs of 87,000+ Participants
- Talos on the developing situation in the Middle East
- CyberStrikeAI tool adopted by hackers for AI-powered attacks
- IT Service Management News
- Schneier on Security
- 娜璋AI安全之家
- Tor Project blog
- SANS Internet Storm Center, InfoCON: green
- Active Directory & Azure AD/Entra ID Security
- Deeplinks
- Blackhat Library: Hacking techniques and research
- GRAHAM CLULEY
- Your Open Hacker Community
- Deep Web
- Computer Forensics
- The Register - Security
- Dev stunned by $82K Gemini bill after unknown API key thief goes to town
- Chat at your own risk! Data brokers are selling deeply personal bot transcripts
- Cyberwarriors elevated to big leagues in US war with Iran
- Turns out most cybercriminals are old enough to know better
- Until last month, attackers could've stolen info from Perplexity Comet users just by sending a calendar invite
- Chrome Gemini panel became privilege escalator for rogue extensions
- Cybercriminals swipe 15.8M medical records from French doctors ministry
- Gamers furious as Brit studio Cloud Imperium quietly admits to data breach
- Phish of the day: Microsoft OAuth scams abuse redirects for malware delivery
- The Hacker News
- Fake Tech Support Spam Deploys Customized Havoc C2 Across Organizations
- Building a High-Impact Tier 1: The 3 Steps CISOs Must Follow
- Open-Source CyberStrikeAI Deployed in AI-Driven FortiGate Attacks Across 55 Countries
- AI Agents: The Next Wave Identity Dark Matter - Powerful, Invisible, and Unmanaged
- Starkiller Phishing Suite Uses AitM Reverse Proxy to Bypass Multi-Factor Authentication
- Microsoft Warns OAuth Redirect Abuse Delivers Malware to Government Targets
- Google Confirms CVE-2026-21385 in Qualcomm Android Component Exploited
- SloppyLemming Targets Pakistan and Bangladesh Governments Using Dual Malware Chains
- Information Security
- Security Affairs
- Facebook is experiencing a global outage
- Ariomex, Iran-based crypto exchange, suffers data leak
- Oracle EBS 2025 campaign impacts Madison Square Garden, sensitive data leaked
- Phishing campaign exploits OAuth redirection to bypass defenses
- Android devices hit by exploited Qualcomm flaw CVE-2026-21385
- Chrome security flaw enabled spying via Gemini Live assistant
- Technical Information Security Content & Discussion
- Sometimes, You Can Just Feel The Security In The Design (Junos OS Evolved CVE-2026-21902 RCE) - watchTowr Labs
- Phishing Lures Utilizing a Single Google Cloud Storage Bucket
- IPVanish VPN macOS Privilege Escalation
- Red Teaming LLM Web Apps with Promptfoo: Writing a Custom Provider for Real-World Pentesting
- Built a free live CVE intelligence dashboard — looking for feedback
- netsecstudents: Subreddit for students studying Network Security and its related subjects
- Trend Micro Research, News and Perspectives
- DEFION Research Labs
- Ruckus Unleashed: Multiple vulnerabilities exploited
- Pwn2Own Automotive 2024: Hacking the Autel MaxiCharger
- Pwn2Own Automotive 2024: Hacking the JuiceBox 40
- Pwn2Own Automotive 2024: Hacking the ChargePoint Home Flex (and their cloud...)
- DoNex/DarkRace Ransomware Decryptor
- CVE-2024-20693: Windows cached code signature manipulation
- Bringing process injection into view(s): exploiting all macOS apps using nib files
- Don’t Talk All at Once! Elevating Privileges on macOS by Audit Token Spoofing
- Getting SYSTEM on Windows in style
- Technical analysis of the Genesis Market
- Bad things come in large packages: .pkg signature verification bypass on macOS
- Pwn2Own Miami 2022: ICONICS GENESIS64 Arbitrary Code Execution
- Pwn2Own Miami 2022: Unified Automation C++ Demo Server DoS
- Pwn2Own Miami 2022: AVEVA Edge Arbitrary Code Execution
- Process injection: breaking all macOS security layers with a single vulnerability
- Pwn2Own Miami 2022: Inductive Automation Ignition Remote Code Execution
- Pwn2Own Miami 2022: OPC UA .NET Standard Trusted Application Check Bypass
- CoronaCheck App TLS certificate vulnerabilities
- Sandbox escape + privilege escalation in StorePrivilegedTaskService
- Proctorio Chrome extension Universal Cross-Site Scripting
- Zoom RCE from Pwn2Own 2021
- Adobe Acrobat privilege escalation
- iOS VPN support: 3 different bugs
- Sign in with Apple - authentication bypass
- Jenkins - authentication bypass
- DNS rebinding for HTTPS
- Spring Security - insufficient cryptographic randomness
- XenServer - path traversal leading to authentication bypass
- Volkswagen Auto Group MIB infotainment system - unauthenticated remote code execution as root
- NAPALM - command execution on NAPLM controller from host
- MySQL Connector/J - Unexpected deserialisation of Java objects
- Ansible - command execution on Ansible controller from host
- Observium - unauthenticated remote code execution
- cSRP/srpforjava - obtaining of hashed passwords
- StartEncrypt - obtaining valid SSL certificates for unauthorized domains
- Security Weekly Podcast Network (Audio)