[每日信息流] 2026-04-01

# 每日安全资讯（2026-04-01）

- SecWiki News
  - [ ] [SecWiki News 2026-03-31 Review](http://www.sec-wiki.com/?2026-03-31)
- Private Feed for M09Ic
  - [ ] [strands-agents released v1.34.0 at strands-agents/sdk-python](https://github.com/strands-agents/sdk-python/releases/tag/v1.34.0)
  - [ ] [4ra1n starred Ta0ing/claude-code_evil](https://github.com/Ta0ing/claude-code_evil)
  - [ ] [CHYbeta starred claude-code-best/claude-code](https://github.com/claude-code-best/claude-code)
  - [ ] [INotGreen starred AndreamBot/claude-code-minimax](https://github.com/AndreamBot/claude-code-minimax)
  - [ ] [INotGreen forked INotGreen/claude-code from instructkr/claw-code](https://github.com/INotGreen/claude-code)
  - [ ] [zema1 starred coder/websocket](https://github.com/coder/websocket)
  - [ ] [Wh0ale starred 0x727/BypassPro](https://github.com/0x727/BypassPro)
  - [ ] [WAY29 starred lupantech/AgentFlow](https://github.com/lupantech/AgentFlow)
  - [ ] [IC3-CR3AM forked IC3-CR3AM/claude-code-source-code from sanbuphy/claude-code-source-code](https://github.com/IC3-CR3AM/claude-code-source-code)
  - [ ] [IC3-CR3AM starred TheTom/turboquant_plus](https://github.com/TheTom/turboquant_plus)
  - [ ] [Mel0day forked Mel0day/claude-mem from thedotmack/claude-mem](https://github.com/Mel0day/claude-mem)
  - [ ] [Mel0day starred thedotmack/claude-mem](https://github.com/thedotmack/claude-mem)
  - [ ] [ring04h starred instructkr/claw-code](https://github.com/instructkr/claw-code)
  - [ ] [esrrhs starred instructkr/claw-code](https://github.com/instructkr/claw-code)
  - [ ] [Ascotbe forked Ascotbe/claude-code-sourcemap from ChinaSiro/claude-code-sourcemap](https://github.com/Ascotbe/claude-code-sourcemap)
  - [ ] [PrefectHQ released 3.6.25.dev4 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.6.25.dev4)
- Recent Commits to cve:main
  - [ ] [Update Tue Mar 31 11:21:30 UTC 2026](https://github.com/trickest/cve/commit/7bd72525da243dc31050423e5f990bb189bc5101)
- Doonsec's feed
  - [ ] [Linux SSH密码爆破脚本，从原理到实践](https://mp.weixin.qq.com/s/HT05-3l6jtoKe48_J8B3Ug)
  - [ ] [从模板到提交到管理POC：VSCode 插件简化 POC 全流程](https://mp.weixin.qq.com/s/euKnHxD0p2cX9fpmmQWxPw)
  - [ ] [从新闻巨头到数据经纪商：路透社母公司数据接入Palantir系统](https://mp.weixin.qq.com/s/0IijLYDp9GI7oNfZBVgEfg)
  - [ ] [AI 直接调用 Kali 工具链：MCP实现60+ Kali 工具的调用](https://mp.weixin.qq.com/s/kVF9GB0R6x6r_9hDZCzapQ)
  - [ ] [ClaudeCode源码泄露，我解除了限制](https://mp.weixin.qq.com/s/v7-WjsSL8T7Fj8Bn7nqHGw)
  - [ ] [从零开始学习 AI安全实战特训营（第一期）](https://mp.weixin.qq.com/s/UDqBWVn_5GgkzKc-AqhWlg)
  - [ ] [以色列国防部长电话本](https://mp.weixin.qq.com/s/Jh82zS_LX-Ip-V6EI2uvfw)
  - [ ] [Axios遭遇“指令闪击”——npm仓库OrDer木马投毒事件分析](https://mp.weixin.qq.com/s/m3bWIoagNeuV9c_jI3Ez5A)
  - [ ] [“冰城虾友 技术沙龙” 哈工大专场倒计时1天](https://mp.weixin.qq.com/s/TzMHmsUj3hV5055S7uW7ZQ)
  - [ ] [黑龙江省委党校进修班学员再次走进安天 现场教学悟实干践担当](https://mp.weixin.qq.com/s/gWHU90PZLFivHGTaoGzHbQ)
  - [ ] [威胁通缉令 · 红桃4丨RDP Client RCE漏洞（新增）](https://mp.weixin.qq.com/s/jDqCPbON8fWbhzJYALrQ4w)
  - [ ] [喜报！警大 ISA 信息安全协会斩获第三届 “数信杯” 团队赛金奖！](https://mp.weixin.qq.com/s/8B-Lg-jSN93jy5N5w04oWw)
  - [ ] [OpenViking：专为AI Agent打造的长期记忆数据库](https://mp.weixin.qq.com/s/4TPIxnyRLi0a-2tedhNo2A)
  - [ ] [Patch白文件绕过360免杀fscan扫描工具](https://mp.weixin.qq.com/s/R6_19BqBXUVQMJr1DgOnmg)
  - [ ] [扒光Claude\"衣服\"](https://mp.weixin.qq.com/s/4KHX_oI4_GHgsuSsR-6WOQ)
  - [ ] [2026 DesCTF网络安全挑战赛 官方WP](https://mp.weixin.qq.com/s/7KTABvSr1LsAngT6EbTubQ)
  - [ ] [看完claude code源码以后，我绕过了cc的道德限制](https://mp.weixin.qq.com/s/MbPHMIIBfCmzhjvunN62nA)
  - [ ] [突发！Claude Code 51万行源码泄露，AI编程工具被扒光xa0](https://mp.weixin.qq.com/s/t9iJPV7-EGaCZJ7ONkYz9A)
  - [ ] [华为2025财报：营收8809亿，利润680亿](https://mp.weixin.qq.com/s/SbuKHAEfj_pQWj3Ne1EIFQ)
  - [ ] [Claude Code开源了！代码简化Agent官方开源](https://mp.weixin.qq.com/s/WKCl4wgacA_ukoGI902Z1w)
  - [ ] [OAuth详解](https://mp.weixin.qq.com/s/1HPNw7jplkmkz1SpYTXexw)
  - [ ] [Claude Code 51万行源码全网裸奔！Anthropic：我们终于成了“真·Open Claude”](https://mp.weixin.qq.com/s/joOfXGJkuXmXdR1jtN0jGw)
  - [ ] [云影安全实验室 | 深度复盘：Anthropic Claude Code 源码泄露事件](https://mp.weixin.qq.com/s/4mKVw6M6rvOgP6BciZlIig)
  - [ ] [看不见的崩塌：前沿大模型的内部安全隐患](https://mp.weixin.qq.com/s/M7TZXORfrW19NO5X9hn2pQ)
  - [ ] [TA446 在针对性鱼叉式网络钓鱼活动中部署 DarkSword iOS 漏洞套件](https://mp.weixin.qq.com/s/hvxxw4AzXAQo-HAZuBZZ7g)
  - [ ] [目前运行核电机组共62台](https://mp.weixin.qq.com/s/PbcydcmtIHil_NWw4xbkKw)
  - [ ] [别让“机密”裸奔！手把手教你设计“大小模型协同”的 LLM 隐私防火墙](https://mp.weixin.qq.com/s/-Hwgr9dMc1iUghdgoKfeIQ)
  - [ ] [Axios npm 供应链攻击深度分析报告](https://mp.weixin.qq.com/s/8J95hWsvAaLNPBbSQAqpeg)
  - [ ] [量子韧性金融：香港金融业的下一前沿阵地](https://mp.weixin.qq.com/s/H6YeyojY9V-o-S0wuXmG3Q)
  - [ ] [CertiK发布OpenClaw安全报告：复盘AI智能体快速增长下的安全逻辑缺陷（附安全指南）](https://mp.weixin.qq.com/s/s7lhfSG0eDW5YsGLbI2gvQ)
  - [ ] [Claude Code 又翻车了：一场源码泄露，撕开了 AI Agent 最隐秘的底层逻辑](https://mp.weixin.qq.com/s/tTzb4qAuJ9C2hIUJzwhAAQ)
  - [ ] [一句话让 AI 挖出两个编辑器零日漏洞](https://mp.weixin.qq.com/s/9wTCdNYmx7alu_YelzwMyw)
  - [ ] [Claude Code 源码泄露? Github瞬间20K STAR(附项目地址)](https://mp.weixin.qq.com/s/cPN-ZgCc0xSvygdbKZzOtg)
  - [ ] [因酷教育软件 queryUserById 信息泄露漏洞](https://mp.weixin.qq.com/s/nA6_ieBzRf85s6rCULDHIQ)
  - [ ] [字节32岁员工：职级3-1，考公中央部委，工资打一折](https://mp.weixin.qq.com/s/zCynxC-YYzLsXo7Ly9l54A)
  - [ ] [Claude code源码泄露的情况](https://mp.weixin.qq.com/s/zgUQQb4ssErhVg7pPGd8vA)
  - [ ] [这次泄露里暴露出来的Claude Code 架构（Agent + Tool + Prompt）到底是怎么设计的](https://mp.weixin.qq.com/s/9zuBlFdJrSWB4q6yA6klcw)
  - [ ] [自主研发即将迎来一波爆发期🤔](https://mp.weixin.qq.com/s/q2OVBCtyPrcxVSPCM-A2jw)
  - [ ] [关于半决赛各赛区一二三等奖获奖队伍名单的公示](https://mp.weixin.qq.com/s/KP-v_SuuGyqCe30A9XQt-Q)
  - [ ] [新思路！支付漏洞实战案例分享：低价薅高价商品](https://mp.weixin.qq.com/s/cWFZTGjWa1kNJ2ZJuT96SA)
  - [ ] [高薪安全实习机会](https://mp.weixin.qq.com/s/ZWYpraq5GWyCeXvfoxcdhQ)
  - [ ] [G.O.S.S.I.P 特别推荐 2026-03-31 QCP 2.0来了！](https://mp.weixin.qq.com/s/RiizTLwc3qnmKG0e1tagBQ)
  - [ ] [龙信天眼介质取证系统LX-A300 V6.5双版同步升级，国产持平Windows！](https://mp.weixin.qq.com/s/eKwevX6-567q-olF_QJD_g)
  - [ ] [重要提醒！9月PMP现行考纲最后一次考试！](https://mp.weixin.qq.com/s/PZg8iYkekK1rqsvP22VPbw)
  - [ ] [安全养虾日记:完全离线部署OpenClaw(内附详细搭建步骤)](https://mp.weixin.qq.com/s/pMZF42A3YLZ9WbS8dfRr_g)
  - [ ] [滴滴多篇成果入选CVPR 2026，产学研协同创新结硕果](https://mp.weixin.qq.com/s/rKM3gJfjWnOEjiqgP9Enog)
  - [ ] [【全球狂欢】ClaudeCode泄露51.2万行源码](https://mp.weixin.qq.com/s/ganyolL6THT_O30BAD2vWw)
  - [ ] [AI时代，安全人员的核心是什么？该如何平衡 AI 的分析能力与人自身的决策价值？](https://mp.weixin.qq.com/s/Dz8ZXf6bUyxdv_2kV3zQow)
  - [ ] [从员工到智能体，RedKernel 构建企业 AI 风险全景防线](https://mp.weixin.qq.com/s/0RntbimYAZ910MGrfVXx7g)
  - [ ] [免费赠送 | 防范网络电信诈骗宣传素材（第二十一期）](https://mp.weixin.qq.com/s/MJOiN_5Xsg_NxF9e9r8vDA)
  - [ ] [第159篇：原创工具-WiFi弱口令审计与暴力猜解工具 v0.25](https://mp.weixin.qq.com/s/8yRanj6Hg1qglX81-PJ3rg)
  - [ ] [你的备份安全吗？](https://mp.weixin.qq.com/s/pb5HxeKSZesYPeXmNz5W9w)
  - [ ] [Axios npm供应链攻击威胁分析报告](https://mp.weixin.qq.com/s/vEdfRB0iKon0uMXOdfxb-Q)
  - [ ] [169元，手搓跑在 ESP32 上的嵌入式 AI 机器人套件，真正实现边缘人工智能Edge AI](https://mp.weixin.qq.com/s/_WkMRqlavZd7tQwflgC32Q)
  - [ ] [CareCloud 数据泄露事件——黑客入侵 IT 基础设施并窃取患者数据](https://mp.weixin.qq.com/s/cWi1T3JhBSJ7Z6C2mUS0lA)
  - [ ] [ChatGPT漏洞允许攻击者静默窃取用户提示和其他敏感数据](https://mp.weixin.qq.com/s/H7cmOrQrOSS0okqLPRL5Ow)
  - [ ] [国资使命，青春启航——中资网安2026春季校招等你加入！](https://mp.weixin.qq.com/s/dv-Jk55WW67o7bDzvCE92g)
  - [ ] [【公开招募】信创数智评估价值升级 赛迪认证公开招募合作伙伴](https://mp.weixin.qq.com/s/P-oSr_L271d5eZIi50oEZQ)
  - [ ] [WordPress插件漏洞导致超过80万个网站的敏感数据泄露](https://mp.weixin.qq.com/s/6AoUwPytQ979s4LptEdfLQ)
  - [ ] [【安全圈】小米新推出的输入法工具直接暴露AI模型密钥](https://mp.weixin.qq.com/s/55W-LITXl8b14_WamLUpXg)
  - [ ] [【安全圈】360漏洞挖掘智能体发现OpenClaw高危漏洞，或波及全球17万实例](https://mp.weixin.qq.com/s/9cYnq44HEq2P8qbIp9Lqhw)
  - [ ] [【安全圈】上海电信大规模断网，官方：宽带正常升级导致](https://mp.weixin.qq.com/s/GMf2CAi9Z5SRoig7QVzxAw)
  - [ ] [【安全事件】axios前端库npm供应链投毒预警通告](https://mp.weixin.qq.com/s/8XnfHONr9xHj5hmmqApe9A)
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  - [ ] [VoidStealer恶意软件利用调试器漏洞窃取Chrome主密钥](https://www.4hou.com/posts/0MlN)
  - [ ] [嘶吼安全动态｜全国网安标委发布关于征集个人信息保护标准应用实践案例的通知 AI工作流工具Langflow曝未授权RCE漏洞](https://www.4hou.com/posts/l0Kj)
- Zgao's blog
  - [ ] [OpenVPN 恶意DNS告警反查 VPN 客户端](https://zgao.top/openvpn-%e6%81%b6%e6%84%8f-dns-%e5%91%8a%e8%ad%a6%e5%8f%8d%e6%9f%a5-vpn-%e5%ae%a2%e6%88%b7%e7%ab%af/)
- CXSECURITY Database RSS Feed - CXSecurity.com
  - [ ] [FreeScout Unauthenticated RCE via ZWSP .htaccess Bypass](https://cxsecurity.com/issue/WLB-2026030038)
  - [ ] [Wavlink WL-WN579X3-C firewall.cgi UPNP Stack-based Buffer Overflow](https://cxsecurity.com/issue/WLB-2026030037)
- bunnie's blog
  - [ ] [Name that Ware, March 2026](https://www.bunniestudios.com/blog/2026/name-that-ware-march-2026/)
  - [ ] [Winner, Name that Ware February 2026](https://www.bunniestudios.com/blog/2026/winner-name-that-ware-february-2026/)
- Chromium Blog
  - [ ] [JetStream 3: A modern benchmark for high-performance, compute-intensive Web applications](http://blog.chromium.org/2026/03/jetstream-3-a-modern-benchmark.html)
- Microsoft Security Blog
  - [ ] [The threat to critical infrastructure has changed. Has your readiness?](https://www.microsoft.com/en-us/security/security-insider/threat-landscape/threat-to-critical-infrastructure-has-changed)
  - [ ] [Applying security fundamentals to AI: Practical advice for CISOs](https://www.microsoft.com/en-us/security/blog/2026/03/31/applying-security-fundamentals-to-ai-practical-advice-for-cisos/)
  - [ ] [WhatsApp malware campaign delivers VBScript and MSI backdoors](https://www.microsoft.com/en-us/security/blog/2026/03/31/whatsapp-malware-campaign-delivers-vbs-payloads-msi-backdoors/)
- Tenable Blog
  - [ ] [Supply chain attack on Axios npm package: Scope, impact, and remediations](https://www.tenable.com/blog/supply-chain-attack-on-axios-npm-package-scope-impact-and-remediations)
  - [ ] [What’s new in Tenable Cloud Security: Custom policies, AWS ABAC, and research-driven protection](https://www.tenable.com/blog/tenable-cloud-security-custom-policies-aws-abac)
- ElcomSoft blog
  - [ ] [The Geography of Coercion: a Study of Compelled Decryption Laws](https://blog.elcomsoft.com/2026/03/the-geography-of-coercion-a-study-of-compelled-decryption-laws/)
- Google Online Security Blog
  - [ ] [VRP 2025 Year in Review](http://security.googleblog.com/2026/03/vrp-2025-year-in-review.html)
- Cerbero Blog
  - [ ] [EVTX Format Package](https://blog.cerbero.io/evtx-format-package/)
- Horizon3.ai
  - [ ] [CVE-2026-20131](https://horizon3.ai/attack-research/vulnerabilities/cve-2026-20131/)
- CCC Event Blog
  - [ ] [Håck-ma’s Castle](https://events.ccc.de/2026/03/31/hackmascastle/)
- Binary Ninja
  - [ ] [Container Transforms: Working with Nested Binary Formats](https://binary.ninja/2026/03/31/container-transforms.html)
- Bug Bounty in InfoSec Write-ups on Medium
  - [ ] [️   SQL Injection for Beginners: The Complete Guide](https://infosecwriteups.com/%EF%B8%8F-sql-injection-for-beginners-the-complete-guide-2750907b095b?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [Understanding OT Cybersecurity: A Practical Guide to Asset Inventory for Industrial Control…](https://infosecwriteups.com/understanding-ot-cybersecurity-a-practical-guide-to-asset-inventory-for-industrial-control-65dc8b4e3f4d?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [“Not Applicable” to Victory: How I Escalated a P2 DoS Vulnerability on Bugcrowd](https://infosecwriteups.com/not-applicable-to-victory-how-i-escalated-a-p2-dos-vulnerability-on-bugcrowd-c5fa05ab4727?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [Critical ATO to P5 ‘Informational’: A Lesson in Threat Models & Bug Bounty Reality](https://infosecwriteups.com/critical-ato-to-p5-informational-a-lesson-in-threat-models-bug-bounty-reality-ef1dffd827b9?source=rss----7b722bfd1b8d--bug_bounty)
- Malwarebytes
  - [ ] [Asking AI for personal advice is a bad idea, Stanford study shows](https://www.malwarebytes.com/blog/ai/2026/03/asking-ai-for-personal-advice-is-a-bad-idea-stanford-study-shows)
  - [ ] [Axios supply chain attack chops away at npm trust](https://www.malwarebytes.com/blog/news/2026/03/axios-supply-chain-attack-chops-away-at-npm-trust)
- Sucuri Blog
  - [ ] [How to Fix “Not Secure” Warnings and SSL Issues in WordPress (8 Steps)](https://blog.sucuri.net/2026/03/how-to-fix-not-secure-warnings-and-ssl-issues-in-wordpress-8-steps.html)
- SentinelOne
  - [ ] [How SentinelOne’s AI EDR Autonomously Discovered and Stopped Anthropic’s Claude from Executing a Zero Day Supply Chain Attack, Globally](https://www.sentinelone.com/blog/how-sentinelones-ai-edr-autonomously-discovered-and-stopped-anthropics-claude-from-executing-a-zero-day-supply-chain-attack-globally/)
- The Trail of Bits Blog
  - [ ] [How we made Trail of Bits AI-native (so far)](https://blog.trailofbits.com/2026/03/31/how-we-made-trail-of-bits-ai-native-so-far/)
- Hackerman's Hacking Tutorials
  - [ ] [Manual Context is a Bug](https://parsiya.net/blog/manual-context-is-a-bug/)
- rtl-sdr.com
  - [ ] [TRNXSDR-Carrier: A Modular Baseboard for SDR Modules](https://www.rtl-sdr.com/trnxsdr-carrier-a-modular-baseboard-for-sdr-modules/)
  - [ ] [Adding ACARS Decoding to an ADS-B Flight Tracker](https://www.rtl-sdr.com/adding-acars-decoding-to-an-ads-b-flight-tracker/)
  - [ ] [Using the NISAR Satellite as an Illuminator for Passive Radar](https://www.rtl-sdr.com/using-the-nisar-satellite-as-an-illuminator-for-passive-radar/)
- 奇客Solidot–传递最新科技情报
  - [ ] [非洲研究显示气温超过 20 C 与男胎流产率上升相关](https://www.solidot.org/story?sid=83929)
  - [ ] [甲骨文裁员约 3 万人](https://www.solidot.org/story?sid=83928)
  - [ ] [考古学家发现有 3500 年历史的织布机](https://www.solidot.org/story?sid=83927)
  - [ ] [Claude Code 源码泄漏](https://www.solidot.org/story?sid=83926)
  - [ ] [微软计划为 Windows 11 构建更多原生应用](https://www.solidot.org/story?sid=83925)
  - [ ] [AI 数据中心周围地区温度最高上升 9.1C](https://www.solidot.org/story?sid=83924)
  - [ ] [AI 增加了使用者的认知疲劳](https://www.solidot.org/story?sid=83923)
  - [ ] [微软停止通过 Copilot 在 Pull Request 中插入广告](https://www.solidot.org/story?sid=83922)
  - [ ] [Google 开始推行 Android 开发者身份验证](https://www.solidot.org/story?sid=83921)
  - [ ] [空气污染预警减少了过早死亡](https://www.solidot.org/story?sid=83920)
- 绿盟科技技术博客
  - [ ] [对标2026 RSAC创新沙盒冠军，方向竟如此一致！绿盟科技以中国方案守护AI智能体安全](https://blog.nsfocus.net/%e5%af%b9%e6%a0%872026-rsac%e5%88%9b%e6%96%b0%e6%b2%99%e7%9b%92%e5%86%a0%e5%86%9b%ef%bc%8c%e6%96%b9%e5%90%91%e7%ab%9f%e5%a6%82%e6%ad%a4%e4%b8%80%e8%87%b4%ef%bc%81%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80-2/)
  - [ ] [全栈AI安全能力，构筑智能时代防护屏障](https://blog.nsfocus.net/%e5%85%a8%e6%a0%88ai%e5%ae%89%e5%85%a8%e8%83%bd%e5%8a%9b%ef%bc%8c%e6%9e%84%e7%ad%91%e6%99%ba%e8%83%bd%e6%97%b6%e4%bb%a3%e9%98%b2%e6%8a%a4%e5%b1%8f%e9%9a%9c/)
  - [ ] [十九载深耕铸剑，绿盟科技携AI安全全景方案亮相2026 RSAC](https://blog.nsfocus.net/%e5%8d%81%e4%b9%9d%e8%bd%bd%e6%b7%b1%e8%80%95%e9%93%b8%e5%89%91%ef%bc%8c%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e6%90%baai%e5%ae%89%e5%85%a8%e5%85%a8%e6%99%af%e6%96%b9%e6%a1%88%e4%ba%ae%e7%9b%b82026-rsac/)
- HackerNews
  - [ ] [Axios NPM 包遭供应链攻击，恶意代码被注入](https://hackernews.cc/archives/63985)
  - [ ] [Fortinet FortiClient EMS 关键漏洞遭利用，可实现远程代码执行](https://hackernews.cc/archives/63984)
  - [ ] [F5 BIG-IP DoS 漏洞升级为关键 RCE，已遭野外利用](https://hackernews.cc/archives/63983)
  - [ ] [医疗科技公司 CareCloud 披露患者数据泄露事件](https://hackernews.cc/archives/63982)
- 红日安全
  - [ ] [2026护网行动（HVV）意向报名通知](https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649851869&idx=1&sn=3ec1a063dfb0b1bdc12cd79c5107b4e1)
- 奇安信 CERT
  - [ ] [【已复现】Vim 代码执行漏洞(CVE-2026-34714)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504921&idx=1&sn=fd2fbb100f4d90fbd6aeca192a15d929)
  - [ ] [今日（2026年3月31日）OpenClaw 最新安全动态总结](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504921&idx=2&sn=0933b8fbc276e2e97bf700bcb5541381)
- 安全分析与研究
  - [ ] [反检测技术（上）——反沙箱与反调试](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247496626&idx=1&sn=9d3cc074e6e5708f26078938ae48576b)
- 黑鸟
  - [ ] [从新闻巨头到数据经纪商：路透社母公司数据接入Palantir系统](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186124&idx=1&sn=7e5d0ee9f5d440f91dbda9b0eeae08d4)
- 雷神众测
  - [ ] [雷神众测漏洞周报2026.3.23-2026.3.29](https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503742&idx=1&sn=cc4e84af64875685998a079b34941f9b)
- 代码卫士
  - [ ] [Telegram 否认这个零点击高危 0day 漏洞的存在](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525587&idx=1&sn=402fc52dcbd813d3c5d2c26bf077fab0)
  - [ ] [Grafana 多个严重漏洞可用于实现 RCE](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525587&idx=2&sn=a18525fe72676659d744674b7d8fdd16)
- 安全内参
  - [ ] [发现引领未来的智能力量！“中国AI智能体领航者”征集正式启动](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515748&idx=1&sn=3dabb411d66b35691177ac2977b72423)
  - [ ] [美国国防部公布技术生态系统与网络安全转型计划](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515748&idx=2&sn=0efa3e7d18920b0cf44794bf63f828bc)
- 二道情报贩子
  - [ ] [npm 热门库 axios 遭遇供应链攻击](https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247490039&idx=1&sn=4530e1790c54b9980a65a327780b2dd9)
- 虎符智库
  - [ ] [2026SASE安全范式重构：AI原生驱动体系化运营](https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493758&idx=1&sn=f4ef4b5bd273e2e7d5fddafb63f4c076)
- 先进攻防
  - [ ] [Axios 被投毒植入全平台 RAT，OpenClaw 生态全线沦陷！！！](https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908879&idx=1&sn=ba3680ca49b0077c29a20a389363a748)
- 看雪学苑
  - [ ] [一年办20场活动，数据还在别人服务器上？](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612921&idx=1&sn=15cfd4061fcf889e2ad733fe5f6acc8a)
  - [ ] [Pixel 8a（akita:6.1-android16内核支持ebpf）AOSP/GKI内核源码获取、编译与刷机实战指南](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612921&idx=2&sn=0d3b728f453696c16359609bdf18be37)
  - [ ] [Telegram 惊曝零日漏洞争议：发个贴纸就能控制手机？官方却全盘否认](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612921&idx=3&sn=645d2addefbbd1fa075e998b38bdb0dc)
- 微步在线研究响应中心
  - [ ] [OpenClaw又又又危！Axios npm被投毒，植入全平台木马](https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508505&idx=1&sn=906fb32ff9f5b00c2600c6eb37da2400)
- 腾讯安全应急响应中心
  - [ ] [TSRC官网焕新登场：以科技新貌，赋能每一份专注和高效](https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651208282&idx=1&sn=4fa5b3fb175cf67d50b20a743c363a50)
- 绿盟科技CERT
  - [ ] [【安全事件】axios前端库npm供应链投毒预警通告](https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489511&idx=1&sn=e85b5e65d5cacbf380db869f7d068c49)
- 信息安全国家工程研究中心
  - [ ] [中国密码学会《商用密码应用安全性评估FAQ（第四版）》更新发布](https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247503307&idx=1&sn=b072d301826e91bc00e289b2374d28a7)
- 长亭安全应急响应中心
  - [ ] [一亿周下载量的HTTP客户端库遭供应链攻击，axios投毒事件深度分析](https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493192&idx=1&sn=4a4f6fa8f61292dd65e78b1632bfd211)
- 奇安信威胁情报中心
  - [ ] [Coruna与DarkSword：iOS高端攻击武器扩散的威胁](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518166&idx=1&sn=d8644bdd6d9deb3800972cd8de846516)
- 安全研究GoSSIP
  - [ ] [G.O.S.S.I.P 特别推荐 2026-03-31 QCP 2.0来了！](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501541&idx=1&sn=26b0b5a3a4960a4decdd5d82bf4d4443)
- 绿盟科技研究通讯
  - [ ] [模糊指纹：Web 应用指纹识别困境分析](https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499716&idx=1&sn=f1dbfcf44228d73aff01f11b1f2270af)
  - [ ] [RSAC 2026创新沙盒 | Clearly AI：打造AI赋能的自动化软件安全平台](https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499716&idx=2&sn=eee7e3a4d73da00bccdb618cb7003c3d)
- 天御攻防实验室
  - [ ] [未来两年将变得“疯狂”](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486861&idx=1&sn=350293624c3aea9f56d0d336cafad7c4)
- 中国信息安全
  - [ ] [论坛· 原创 | 构建网络空间命运共同体的历程、成效及展望](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260825&idx=1&sn=9f3857fed83a2d4e5f6d4d34a33bebce)
  - [ ] [发布 | 工信部等九部门联合印发《推动物联网产业创新发展行动方案（2026—2028年）》](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260825&idx=2&sn=c6d38a669831ea5f2daca2f30530c58e)
  - [ ] [关注 | 世界数据组织正式运行 开启全球数据治理新格局](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260825&idx=3&sn=4e83b06d293d2a3609edb84f802049a4)
  - [ ] [通知 | 网安标委发布《网络安全标准实践指南——工业企业数据安全能力成熟度模型》](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260825&idx=4&sn=05bc8419e79c15e0515c5c132dc05543)
  - [ ] [关注 | 丝芙兰、泡泡玛特、易次元等71款违法违规收集使用个人信息的移动应用被通报！](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260825&idx=5&sn=6c921170d6458568c546309c2724542b)
- 安全圈
  - [ ] [【安全圈】小米新推出的输入法工具直接暴露AI模型密钥](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075253&idx=1&sn=1c85eb1ed9b6a52eda306974d0aff543)
  - [ ] [【安全圈】360漏洞挖掘智能体发现OpenClaw高危漏洞，或波及全球17万实例](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075253&idx=2&sn=1c58b6f95327d26411281829e92a8fcd)
  - [ ] [【安全圈】上海电信大规模断网，官方：宽带正常升级导致](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075253&idx=3&sn=8f39b5ecc97049877fd8c3fc36a901a3)
- 安全牛
  - [ ] [恶意 AI 助手潜伏浏览器：超 90 万次安装，2 万家企业面临数据窃密风险](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140924&idx=1&sn=624aff244684bbd6af6f285714a15f90)
  - [ ] [CNVD发布上周关注度较高的产品安全漏洞；伊朗黑客组织 Handala 宣称入侵 FBI 局长邮箱 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140924&idx=2&sn=a899a782f7de03f6f3f5e3296760e67b)
- 猎户攻防实验室
  - [ ] [Axios 供应链投毒安全事件预警与排查报告](https://mp.weixin.qq.com/s?__biz=MzI1NDg4MTIxMw==&mid=2247486734&idx=1&sn=79dfe00b33f6bc5f5333a2d426fd1a7c)
- 微步在线
  - [ ] [直播预告 | 关于今年实战攻防的3个预测](https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650185799&idx=1&sn=c596d4bc099a618cf99db689881195c6)
- M01N Team
  - [ ] [OpenClaw依赖包Axios遭供应链投毒：恶意版本植入远控木马](https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494899&idx=1&sn=0030596542ccc940303101d3f850e2a6)
- 补天平台
  - [ ] [OpenClaw 失控机制与熔断体系在攻防视角下的设计](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510572&idx=1&sn=df00b9cf0701d29b1710ac40b6c7720a)
- 数世咨询
  - [ ] [报告发布 | 中国（香港）网络安全竞争力调研报告(第一期)](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542414&idx=1&sn=998844ebbcab714c20082e9da67ce49b)
  - [ ] [Report Release | Report onCybersecurity Competitiveness of China (Hong Kong) (Phase I)](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542414&idx=2&sn=c83ee72e2875bb4c25accfcb98bc2910)
  - [ ] [360漏洞挖掘智能体揪出OpenClaw新高危漏洞](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542414&idx=3&sn=3cc41f3c83cc4c87344c7bef5e5d8d91)
- 极客公园
  - [ ] [AI 加速，短剧比想象中更短命](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653102498&idx=1&sn=aedddb4bc0827423f1648b321017c967)
  - [ ] [国行苹果 AI 深夜意外上线；小米启动 AI 人才专项招聘；DeepSeek 服务已恢复正常，此前崩溃约 12 小时 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653102464&idx=1&sn=2d7a408044c134ab62d2b99bc9d0c1b0)
- 嘶吼专业版
  - [ ] [VoidStealer恶意软件利用调试器漏洞窃取Chrome主密钥](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587479&idx=1&sn=7756cf1662db5725ee22be9a7eba7df8)
  - [ ] [嘶吼安全动态｜全国网安标委发布关于征集个人信息保护标准应用实践案例的通知 AI工作流工具Langflow曝未授权RCE漏洞](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587479&idx=2&sn=94638a85f8dd5ec785e150589e6d3b0e)
- 火绒安全
  - [ ] [春和景明 火绒安护无忧](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531830&idx=1&sn=af80014abda31dda55187855053a4d14)
  - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531830&idx=2&sn=98ae8cf4a05b3e0493397039bf091c14)
- 情报分析师
  - [ ] [间谍、线人、策反，这些电影桥段在现实里到底怎么运转？真正危险的，不是间谍有多传奇，而是他看起来太普通](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567408&idx=1&sn=bf72319ca3d0443161d7c0c10445c036)
  - [ ] [【深度研判】英国核潜艇基地疑涉伊朗间谍事件及其对我海外战略设施安保启示](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567408&idx=2&sn=a285675807ef7d42538b5b7f446bd2d4)
  - [ ] [是谁的无人机飞上了平壤的天空？——韩国情报院背后，一场情报决策的迷局](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567408&idx=3&sn=ff14a08e11e046410057f20c0da8fba8)
  - [ ] ["影子舰队"到底怎么活下来的？一条船如何在公开世界里隐身](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567408&idx=4&sn=ebafa3cace83162ce8151eb46719b846)
- Beacon Tower Lab
  - [ ] [起底OpenClaw提示词注入：从“无害话痨”到“主机沦陷”仅需一个网页](https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247488060&idx=1&sn=8b5c43a53ac79ba2dde188b71a96218c)
- 迪哥讲事
  - [ ] [盲ssrf](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499243&idx=1&sn=e185df8a75ad10167daf7a4fb2a7425d)
- 墨菲安全
  - [ ] [Axios库投毒影响17.4万组件，OpenClaw受影响分析](https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488376&idx=1&sn=396fcd62e07d28d53fecd94494372e48)
- 360数字安全
  - [ ] [360亮相第二届浦江AI学术年会 | 智能体安全，不只是“未来命题”](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585590&idx=1&sn=dacabf351e11da5ec89376f33a56fa60)
- 国家互联网应急中心CNCERT
  - [ ] [CNVD漏洞周报2026年第12期](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501368&idx=1&sn=ebfcad9dc22f95a2407acca0cfcec9ba)
- 渊龙Sec安全团队
  - [ ] [通过RouterOS建立WireGuard内网隧道](https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485977&idx=1&sn=2bddee1e0c7dfa384c1cd2feee94ba00)
- Securityinfo.it
  - [ ] [Vibecoding: l’AI accelera lo sviluppo ma moltiplica i rischi](https://www.securityinfo.it/2026/03/31/vibecoding-lai-accelera-lo-sviluppo-ma-moltiplica-i-rischi/?utm_source=rss&utm_medium=rss&utm_campaign=vibecoding-lai-accelera-lo-sviluppo-ma-moltiplica-i-rischi)
- 大兵说安全
  - [ ] [你的备份安全吗？](https://mp.weixin.qq.com/s?__biz=MzI2MzM0NjcxNw==&mid=2247485778&idx=1&sn=8ff47f5f8a64f5ec7800c39b9e18be1f)
- ICT Security Magazine
  - [ ] [LinkedIn come arma: dal phishing allo spionaggio di Stato](https://www.ictsecuritymagazine.com/notizie/linkedin-cybercrime/)
  - [ ] [UN R155 e R156: la cybersecurity automobilistica che l’Italia non può ignorare](https://www.ictsecuritymagazine.com/notizie/un-r155-r156/)
- Over Security - Cybersecurity news aggregator
  - [ ] [Vibecoding: l’AI accelera lo sviluppo ma moltiplica i rischi](https://www.securityinfo.it/2026/03/31/vibecoding-lai-accelera-lo-sviluppo-ma-moltiplica-i-rischi/)
  - [ ] [Google now allows you to change your @gmail.com address](https://www.bleepingcomputer.com/news/google/google-now-allows-you-to-change-your-gmailcom-address/)
  - [ ] [Proton launches new "Meet" privacy-focused conferencing platform](https://www.bleepingcomputer.com/news/security/proton-launches-new-meet-privacy-focused-conferencing-platform/)
  - [ ] [GIGABYTE Control Center vulnerable to arbitrary file write flaw](https://www.bleepingcomputer.com/news/security/gigabyte-control-center-vulnerable-to-arbitrary-file-write-flaw/)
  - [ ] [Claude AI finds Vim, Emacs RCE bugs that trigger on file open](https://www.bleepingcomputer.com/news/security/claude-ai-finds-vim-emacs-rce-bugs-that-trigger-on-file-open/)
  - [ ] [Google links axios supply chain attack to North Korean group](https://therecord.media/google-links-axios-supply-chain-attack-north-korea)
  - [ ] [US indicts Maryland man for 2021 theft of $54 million from Uranium Finance](https://therecord.media/us-indicts-maryland-man-54-million-crypto-theft)
  - [ ] [Cisco source code stolen in Trivy-linked dev environment breach](https://www.bleepingcomputer.com/news/security/cisco-source-code-stolen-in-trivy-linked-dev-environment-breach/)
  - [ ] [How to Fix “Not Secure” Warnings and SSL Issues in WordPress (8 Steps)](https://blog.sucuri.net/2026/03/how-to-fix-not-secure-warnings-and-ssl-issues-in-wordpress-8-steps.html)
  - [ ] [Hacker hijacks Axios open-source project, used by millions, to push malware](https://techcrunch.com/2026/03/31/hacker-hijacks-axios-open-source-project-used-by-millions-to-push-malware/)
  - [ ] [Reati informatici e punibilità: quando la “condotta” diventa reato prima del danno](https://www.cybersecurity360.it/nuove-minacce/reati-informatici-e-punibilita-quando-la-condotta-diventa-reato-prima-del-danno/)
  - [ ] [New criminal service plans to monetize data stolen by ransomware gangs](https://therecord.media/new-criminal-service-plans-to-monetize-ransomware-data)
  - [ ] [Pro-Russian hackers pose as Ukraine's cyber agency to target government, businesses](https://therecord.media/pro-russian-hackers-posing-as-ukrainian-cyber-agency)
  - [ ] [How to Categorize AI Agents and Prioritize Risk](https://www.bleepingcomputer.com/news/security/how-to-categorize-ai-agents-and-prioritize-risk/)
  - [ ] [Sicurezza informatica, differenza tra progetto e processo: come cambia la cyber in azienda](https://www.cybersecurity360.it/cultura-cyber/la-differenza-tra-progetto-e-processo-nella-sicurezza-informatica-come-cambia-la-cyber-in-azienda/)
  - [ ] [Hackers compromise Axios npm package to drop cross-platform malware](https://www.bleepingcomputer.com/news/security/hackers-compromise-axios-npm-package-to-drop-cross-platform-malware/)
  - [ ] [CISA tells federal agencies to patch Citrix NetScaler bug by Thursday](https://therecord.media/cisa-tells-federal-agencies-to-patch-citrix-netscaler-bug)
  - [ ] [Esposizione remota non sicura dell’app-server Codex con capacità di esecuzione comandi](https://cert-agid.gov.it/news/esposizione-remota-non-sicura-dellapp-server-codex-con-capacita-di-esecuzione-comandi/)
  - [ ] [Microsoft fixes Outlook Classic crashes caused by Teams Meeting add-in](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-outlook-classic-crashes-caused-by-teams-meeting-add-in/)
  - [ ] [Cyber Threat Trends During the Winter Olympics 2026](https://bfore.ai/report/cyber-threat-trends-winter-olympics-2026/)
  - [ ] [Release Notes: Cross-Platform Threat Analysis with macOS, SSL Decryption, and 1,300+ New Detections](https://any.run/cybersecurity-blog/release-notes-march-2026/)
  - [ ] [Meet Sekoia Reveal: Turn fragmented asset data into unified SOC context](https://blog.sekoia.io/meet-sekoia-reveal-turn-fragmented-asset-data-into-unified-soc-context/)
  - [ ] [Per Google il Q-Day arriverà nel 2029](https://www.cybersecurity360.it/news/google-q-day-2029/)
  - [ ] [Ransomware in 2025: Blending in is the strategy](https://blog.talosintelligence.com/ransomware-in-2025-blending-in-is-the-strategy/)
  - [ ] [Common Entra ID Security Assessment Findings – Part 2: Privileged Unprotected Groups](https://blog.compass-security.com/2026/03/common-entra-id-security-assessment-findings-part-2-privileged-unprotected-groups/)
  - [ ] [Jennifer Cox on Why Most Security Teams Never See the Real Benefits of Automation](https://thecyberexpress.com/jennifer-cox-interview/)
  - [ ] [Hacker charged with stealing $53 million from Uranium crypto exchange](https://www.bleepingcomputer.com/news/security/hacker-charged-with-stealing-53-million-from-uranium-crypto-exchange/)
  - [ ] [Axios Supply Chain Attack Exposes Developers to Hidden Malware](https://thecyberexpress.com/axios-supply-chain-attack-npm-malware/)
  - [ ] [Guerre di Rete - Sovranità stellare](https://guerredirete.substack.com/p/guerre-di-rete-sovranita-stellare)
  - [ ] [Dutch Finance Ministry takes treasury banking portal offline after breach](https://www.bleepingcomputer.com/news/security/dutch-finance-ministry-takes-treasury-banking-portal-offline-after-breach/)
  - [ ] [Intesa Sanpaolo, mega sanzione privacy per accessi abusivi: una lezione per CISO e DPO](https://www.cybersecurity360.it/news/intesa-sanpaolo-mega-sanzione-privacy-per-accessi-abusivi-una-lezione-per-ciso-e-dpo/)
  - [ ] [Analysis of FvncBot campaign](https://cert.pl/en/posts/2026/03/fvncbot-analysis/)
  - [ ] [Cuties AI - 144,250 breached accounts](https://haveibeenpwned.com/Breach/CutiesAI)
  - [ ] [CISA orders feds to patch actively exploited Citrix flaw by Thursday](https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-citrix-flaw-by-thursday/)
  - [ ] [Phantom Stealer: Credential Theft as a Service](https://www.group-ib.com/blog/phantom-stealer-credential-theft/)
  - [ ] [US Man Admits Guilt in Child Exploitation, Cyberstalking Linked to ‘764’ Network](https://thecyberexpress.com/violent-extremist-network-764-cyberstalking/)
  - [ ] [CareCloud Hit by Cyberattack, Probe Into Possible Data Exposure](https://thecyberexpress.com/carecloud-data-breach/)
  - [ ] [World Backup Day 2026, il dato fa parte della nostra identità digitale: le best pratice per proteggerlo](https://www.cybersecurity360.it/news/world-backup-day-2026-il-dato-fa-parte-della-nostra-identita-digitale-le-best-pratice-per-proteggerlo/)
  - [ ] [Intesa Sanpaolo Data Breach Exposes 3,500+ Customers, Draws €31.8M Penalty](https://thecyberexpress.com/intesa-sanpaolo-data-breach/)
  - [ ] [The Security Risks of Using Nulled WordPress Plugins](https://blog.sucuri.net/2026/03/the-security-risks-of-using-nulled-wordpress-plugins.html)
- Have I Been Pwned latest breaches
  - [ ] [Cuties AI - 144,250 breached accounts](https://haveibeenpwned.com/Breach/CutiesAI)
- Javvad Malik
  - [ ] [7 Reasons Kids Are Overrated Until Suddenly They’re Your Entire Support Infrastructure](https://javvadmalik.com/2026/03/31/7-reasons-kids-are-overrated-until-suddenly-theyre-your-entire-support-infrastructure/)
- SANS Internet Storm Center, InfoCON: green
  - [ ] [Application Control Bypass for Data Exfiltration, (Tue, Mar 31st)](https://isc.sans.edu/diary/rss/32850)
  - [ ] [ISC Stormcast For Tuesday, March 31st, 2026 https://isc.sans.edu/podcastdetail/9872, (Tue, Mar 31st)](https://isc.sans.edu/diary/rss/32848)
  - [ ] [TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released, (Mon, Mar 30th)](https://isc.sans.edu/diary/rss/32846)
- bellingcat
  - [ ] [How India’s Ruling Party is Using AI to Boost Hate Speech in States Near Bangladesh](https://www.bellingcat.com/news/2026/03/31/india-bjp-hate-speech-ai/)
- Troy Hunt's Blog
  - [ ] [Weekly Update 497](https://www.troyhunt.com/weekly-update-497/)
- Schneier on Security
  - [ ] [Inventors of Quantum Cryptography Win Turing Award](https://www.schneier.com/blog/archives/2026/03/inventors-of-quantum-cryptography-win-turing-award.html)
- 360威胁情报中心
  - [ ] [Axios npm供应链攻击威胁分析报告](https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247508054&idx=1&sn=53087fd771552eb8c5c0144dc7db8400)
- 希潭实验室
  - [ ] [第159篇：原创工具-WiFi弱口令审计与暴力猜解工具 v0.25](https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247488283&idx=1&sn=ca2c9122c9a09af4288d51da6406761c)
- 安全产品人的赛博空间
  - [ ] [Claude Code源码泄露！可直接build](https://mp.weixin.qq.com/s?__biz=Mzg5NTUzODkxMw==&mid=2247484410&idx=1&sn=7e1fb22c494b696f794d3c9613f0cae1)
- 熵减矩阵
  - [ ] [Claude Code 源码深度架构分析](https://mp.weixin.qq.com/s?__biz=Mzg2MTc1NDAxMA==&mid=2247485223&idx=1&sn=7f645c710d5cff010109b2040660a6ce)
- Desync InfoSec
  - [ ] [Axios 遭遇供应链攻击：被投毒版本植入 RAT 远控木马](https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489567&idx=1&sn=5c889af11a9bc19ab48a004f33807adb)
- IT Service Management News
  - [ ] [ISO/IEC 27090 e 27091 sull'intelligenza artificiale](http://blog.cesaregallotti.it/2026/03/isoiec-27090-e-27091-sullintelligenza.html)
- Trend Micro Research, News and Perspectives
  - [ ] [TrendAI™ Research at RSAC 2026: Advancing Defense Across AI‑Driven and Cyber‑Physical Threats](https://www.trendmicro.com/en_us/research/26/c/trendai-research-at-rsac-2026.html)
  - [ ] [The Real Risk of Vibecoding](https://www.trendmicro.com/en_us/research/26/c/the-real-risk-of-vibecoding.html)
- The Hacker News
  - [ ] [Android Developer Verification Rollout Begins Ahead of September Enforcement](https://thehackernews.com/2026/03/android-developer-verification-rollout.html)
  - [ ] [TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks](https://thehackernews.com/2026/03/trueconf-zero-day-exploited-in-attacks.html)
  - [ ] [Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts](https://thehackernews.com/2026/03/vertex-ai-vulnerability-exposes-google.html)
  - [ ] [The AI Arms Race – Why Unified Exposure Management Is Becoming a Boardroom Priority](https://thehackernews.com/2026/03/the-ai-arms-race-why-unified-exposure.html)
  - [ ] [Silver Fox Expands Asia Cyber Campaign with AtlasCross RAT and Fake Domains](https://thehackernews.com/2026/03/silver-fox-expands-asia-cyber-campaign.html)
  - [ ] [Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account](https://thehackernews.com/2026/03/axios-supply-chain-attack-pushes-cross.html)
- The Register - Security
  - [ ] [Don't open that WhatsApp message, Microsoft warns](https://go.theregister.com/feed/www.theregister.com/2026/03/31/whatsapp_message_bad_msi_packages/)
  - [ ] [Iran targets M365 accounts with password-spraying attacks](https://go.theregister.com/feed/www.theregister.com/2026/03/31/iran_password_spraying_m365/)
  - [ ] [Supply chain blast: Top npm package backdoored to drop dirty RAT on dev machines](https://go.theregister.com/feed/www.theregister.com/2026/03/31/axios_npm_backdoor_rat/)
- GRAHAM CLULEY
  - [ ] [Iranian hackers breach FBI director’s personal email, and post his CV and photos online](https://www.bitdefender.com/en-us/blog/hotforsecurity/iranian-hackers-breach-fbi-directors-personal-email-post-cv-and-photos-online)
- TorrentFreak
  - [ ] [Game Pirates Beat Denuvo with Hypervisor Bypasses — Irdeto Promises Countermeasure](https://torrentfreak.com/game-pirates-beat-denuvo-with-hypervisor-bypasses-irdeto-promises-countermeasure/)
- Security Affairs
  - [ ] [Anthropic accidentally leaks Claude Code](https://securityaffairs.com/190229/data-breach/anthropic-accidentally-leaks-claude-code.html)
  - [ ] [Attackers hijack Axios npm account to spread RAT malware](https://securityaffairs.com/190221/security/attackers-hijack-axios-npm-account-to-spread-rat-malware.html)
  - [ ] [Nearly half a Million mobile customers of Lloyds Banking Group affected by security incident](https://securityaffairs.com/190213/data-breach/nearly-half-a-million-mobile-customers-of-lloyds-banking-group-affected-by-a-security-incident.html)
  - [ ] [Dutch Ministry of Finance takes treasury systems offline amid cyber incident investigation](https://securityaffairs.com/190204/hacking/dutch-ministry-of-finance-takes-treasury-systems-offline-amid-cyber-incident-investigation.html)
  - [ ] [U.S. CISA adds a flaw in Citrix NetScaler to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/190197/security/u-s-cisa-adds-a-flaw-in-citrix-netscaler-to-its-known-exploited-vulnerabilities-catalog.html)
  - [ ] [Qilin Ransomware allegedly breached chemical manufacturer giant Dow Inc](https://securityaffairs.com/190186/cyber-crime/qilin-ransomware-allegedly-breached-chemical-manufacturer-giant-dow-inc.html)
- Tor Project blog
  - [ ] [Arti 2.2.0 released: HTTP CONNECT, RPC, and Relay development.](https://blog.torproject.org/arti_2_2_0_released/)
- Deeplinks
  - [ ] [Welcome, Daily Show Viewers! Learn More About EFF and Privacy's Defender](https://www.eff.org/deeplinks/2026/03/welcome-daily-show-viewers-learn-more-about-eff-and-privacys-defender)
- 安全行者老霍
  - [ ] [Wiz AI 安全产品介绍](https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486368&idx=1&sn=dc5d5953d6941de89a9d1fbdf60c73f6)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[每日信息流] 2026-04-01 #1195

每日安全资讯（2026-04-01）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2026-04-01 #1195

Description

每日安全资讯（2026-04-01）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions