[每日信息流] 2026-02-27 #1161
Description
每日安全资讯（2026-02-27）
- SecWiki News
- Doonsec's feed
- 安科瑞企业微电网能效管理系统存在默认密码admin:Acrel001 附POC
- OpenClaw全场景深度分析:差异化优势、核心短板与落地困境
- 关于超级计算机的特殊退役流程
- 北京市安全岗位招聘
- 国投智能培训基地2026年新春培训计划火热开启
- Wireshark 4.6.4 版本发布
- 【攻防实战4】记一次某地市卫校内网穿透
- 用codex改jadx mcp的codex兼容
- 漏洞报告补档补档-知识星球
- 新课更新
- 使用特殊字符实现零点击账号接管
- 宣传一下
- 开源情报爱好者如何引发五角大楼的“情报噩梦”
- 存储型XSS漏洞checklist
- APP漏洞挖掘六脉神剑：组件、存储、证书、生物、Root、动态加载
- CTFshow:请求伪造漏洞_CSRF
- AI-Reverse-Engineering：ai逆向工具实战和CTF适用
- Private Feed for M09Ic
- mgeeky starred lifting-bits/remill
- anthropics released v2.1.61 at anthropics/claude-code
- github released v0.1.7 at github/spec-kit
- joaoviictorti starred vaivaswatha/pliron
- bolucat released 202602262000 at bolucat/Archive
- mgeeky starred praetorian-inc/titus
- PrefectHQ released 3.6.20.dev4 at PrefectHQ/prefect
- mgeeky starred ruvnet/claude-flow
- kyxiaxiang starred CyberSecurityUP/RTLC2
- WAY29 starred stellarlinkco/ai-eval
- mgeeky starred kepano/obsidian-skills
- gh0stkey starred XRSec/AWVS-Update
- PrefectHQ released 3.6.20.dev3 at PrefectHQ/prefect
- Mr-xn forked Mr-xn/qinglong from whyour/qinglong
- lz520520 starred Darkrain2009/RedExt
- Rvn0xsy contributed to microclaw/microclaw
- niudaii starred vxcontrol/pentagi
- Ridter starred aquasecurity/tracee
- PeiQi0 starred openclaw/openclaw
- gh0stkey starred can1357/oh-my-pi
- Y4er forked Y4er/gost-ui from go-gost/gost-ui
- 0xbug starred runesleo/x-reader
- joaoviictorti starred center-for-threat-informed-defense/adversary_emulation_library
- gh0stkey starred wh1te4ever/super-tart-vphone-writeup
- Verne in GitHub
- Recent Commits to cve:main
- 安全客-有思想的安全新媒体
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
- Microsoft Security Blog
- CXSECURITY Database RSS Feed - CXSecurity.com
- Icinga for Windows 1.13.3 - 'key_maker.py' Incorrect Default Permissions Private Key Exposure
- MLX < = 0.29.3 - Heap-based Buffer Overflow in .npy Parser
- Brickcom Camera - Remote command execution
- HDF5 Plugin 2.17.0 Path Audit – ABI-Compliant Constructor Execution Test
- Azure AI Language Conversations Authoring SDK < 1.0.0b4 - Remote Code Execution
- rldns-1.3 remote denial of service
- Bug Bounty in InfoSec Write-ups on Medium
- Hexacorn
- Malwarebytes
- Reverse Engineering
- Binary Ninja
- Intigriti
- daniel.haxx.se
- 奇客Solidot–传递最新科技情报
- rtl-sdr.com
- 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台
- Shostack & Friends Blog
- Security Blog | Praetorian
- 安全分析与研究
- 安全内参
- 三欢师哥
- 灾难控制 局
- 代码卫士
- 全频带阻塞干扰
- 威努特安全网络
- 安全研究GoSSIP
- 黑鸟
- 青藤云安全
- 信息安全国家工程研究中心
- 天黑说嘿话
- 中国信息安全
- 丁爸 情报分析师的工具箱
- 安全圈
- 非尝咸鱼贩
- 微步在线
- 网安杂谈
- 安全牛
- 数世咨询
- 恒脑与AI
- 嘶吼专业版
- 极客公园
- 吴鲁加
- 情报分析师
- 迪哥讲事
- 360数字安全
- 安全行者老霍
- 字节跳动技术团队
- Tails - News
- 看雪学苑
- NETRESEC Network Security Blog
- Over Security - Cybersecurity news aggregator
- Odido - 316,912 breached accounts
- Former Air Force officer arrested for conspiring with hacker to provide flight training to Chinese military
- Wyden blocks Rudd confirmation to lead Cyber Command, NSA
- Previously harmless Google API keys now expose Gemini AI data
- Henry IV, Hotspur, Hal, and hallucinations
- Intellexa founder, three others sentenced to 8 years in prison over Greek spyware scandal
- Trend Micro warns of critical Apex One code execution flaws
- European DYI chain ManoMano data breach impacts 38 million customers
- Critical Juniper Networks PTX flaw allows full router takeover
- Attacchi con la GenAI offensiva, compromessi oltre 600 firewall: come proteggersi
- DL Sicurezza e cyber: poteri, funzioni e finalità su sistemi digitali e flussi informativi
- Google disrupts Сhina-linked cyberespionage campaign spanning dozens of countries
- Spyware maker sentenced to prison in Greece for wiretapping politicians and journalists
- O ancora meglio: DL Sicurezza e cyber: poteri, funzioni e finalità su sistemi digitali e flussi informativi
- Olympique Marseille confirms 'attempted' cyberattack after data leak
- Ransomware payment rate drops to record low as attacks surge
- Apache ActiveMQ Exploit Leads to LockBit Ransomware
- What to Know About the Notepad++ Supply-Chain Attack
- Cyber security industriale: gli elementi essenziali per creare un SOC ad alte prestazioni
- After years of government cyber trouble, UK turns to automated scanning to speed fixes
- Ransomware payments dropped in 2025 as attack numbers reached record levels: Chainalysis
- Microsoft expands Windows restore to more enterprise devices
- New York sues Valve for promoting illegal gambling via game loot boxes
- PromptSpy ushers in the era of Android threats using GenAI
- L’IA cinese è un rischio per l’Europa: ma le Pmi hanno 3 motivi per preferire questi modelli
- ENISA’s Updated Cybersecurity Methodology Aligns with NIS2 and EU Cybersecurity Act
- New Dohdoor malware campaign targets education and health care
- Assalto al trono di Nvidia
- ANY.RUN & Splunk Enterprise: Stronger Detection, Faster Response in Your SOC
- Samsung SDS Identifies Top Cybersecurity Threats of 2026 as AI Risks Escalate
- Fiducia zero nell’AI: la convergenza tra verifica, sicurezza offensiva e disinformazione
- L’ATP Russo che sfrutta una vulnerabilità di Office è la nuova normalità
- GTFire Phishing Scheme: Avoiding Detection Using Google Services
- Hackers Exploited Cisco SD-WAN Zero-Day for Three Years Before Detection
- FTC Clarifies COPPA Stance, Backs Age Verification Technologies for Platforms
- Australian Poultry Giant Hazeldenes Faces Operational Disruption After Cyberattack
- ICT Security Magazine
- Have I Been Pwned latest breaches
- Schneier on Security
- Javvad Malik
- SANS Internet Storm Center, InfoCON: green
- Finding Signal in the Noise: Lessons Learned Running a Honeypot with AI Assistance [Guest Diary], (Tue, Feb 24th)
- The CLAIR Model: A Synthesized Conceptual Framework for Mapping Critical Infrastructure Interdependencies [Guest Diary], (Wed, Feb 25th)
- ISC Stormcast For Thursday, February 26th, 2026 https://isc.sans.edu/podcastdetail/9826, (Thu, Feb 26th)
- Security Affairs
- Trend Micro fixes two critical flaws in Apex One
- UAT-10027 campaign hits U.S. education and healthcare with stealthy Dohdoor backdoor
- U.S. CISA adds Cisco SD-WAN flaws to its Known Exploited Vulnerabilities catalog
- Hackers abused Cisco SD-WAN zero-day since 2023 to gain full admin control
- Google GTIG disrupted China-linked APT UNC2814 halting attacks on 53 orgs in 42 countries
- The Hacker News
- Aeternum C2 Botnet Stores Encrypted Commands on Polygon Blockchain to Evade Takedown
- UAT-10027 Targets U.S. Education and Healthcare with Dohdoor Backdoor
- ThreatsDay Bulletin: Kali Linux + Claude, Chrome Crash Traps, WinRAR Flaws, LockBit & 15+ Stories
- Expert Recommends: Prepare for PQC Right Now
- Microsoft Warns Developers of Fake Next.js Job Repos Delivering In-Memory Malware
- Malicious StripeApi NuGet Package Mimicked Official Library and Stole API Tokens
- Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access
- Technical Information Security Content & Discussion
- Google API Keys Weren't Secrets. But then Gemini Changed the Rules.
- Reverse Engineering Garmin Watch Applications with Ghidra
- We audited 1,620 OpenClaw skills. The ecosystem's safety scanner labels 91% of confirmed threats "benign." [full reports linked]
- Reverse CAPTCHA: Evaluating LLM Susceptibility to Invisible Unicode Instruction Injection
- From DDS Packets to Robot Shells: Two RCEs in Unitree Robots (CVE-2026-27509 & CVE-2026-27510)
- New Malware - Moonrise Analysis
- Computer Forensics
- TorrentFreak
- Deep Web
- The Register - Security
- Social Engineering
- Blackhat Library: Hacking techniques and research
- Your Open Hacker Community
- Information Security
- GRAHAM CLULEY
- Security Weekly Podcast Network (Audio)
- Project Zero