[每日信息流] 2026-04-02

# 每日安全资讯（2026-04-02）

- Doonsec's feed
  - [ ] [LinIR-Linux下的应急响应采集工具](https://mp.weixin.qq.com/s/KhlXC1Oxu37xr_3fjAncWg)
  - [ ] [把同事的技能蒸馏成AI Skill替他工作...](https://mp.weixin.qq.com/s/RBYWLylZ7QFNDqTdQVL5Iw)
  - [ ] [某985证书站被扫到后台以及若依弱口令拿下管理员](https://mp.weixin.qq.com/s/Lng2Ss4ZthbcL36ABc_vrQ)
  - [ ] [网络犯罪论坛日志揭示了参与人员的匿名网络选择习惯](https://mp.weixin.qq.com/s/ZnwaRAM33KFu1GOAH2AXIA)
  - [ ] [小学生求阴影面积](https://mp.weixin.qq.com/s/5QaUc_oBxK0B0LqdfCzK2g)
  - [ ] [利用流程太复杂？试试这个群杰一键利用工具](https://mp.weixin.qq.com/s/BAC5UGyRCBtD6g4FfY7oUg)
  - [ ] [适合网安人的速成加解密逆向教程](https://mp.weixin.qq.com/s/hnWP0DTerZGP-9BfMSsE2w)
  - [ ] [加了领导微信，发现他从不发朋友圈。同事说：他把你屏蔽了。后来才知道，他没屏蔽任何人，只是不发！问他为什么，他说：发什么都不对！](https://mp.weixin.qq.com/s/7M0gBzFSAA32Djh-72Jx5Q)
  - [ ] [АльфаНет披露关键情报行动：涉及乌安全机构内部文件流转](https://mp.weixin.qq.com/s/oRBrfy8KKweatAeCorcLow)
  - [ ] [АльфаНет 获取关键情报：涉及乌克兰安全机构敖德萨分局内部文件](https://mp.weixin.qq.com/s/h0Hq0pO84cAiGYp5NgOehA)
  - [ ] [AI 赋能安全测试：MinIO存储桶环境搭建与自动化测试实践](https://mp.weixin.qq.com/s/RSHlnPwsT7dc-YqxMUEW4w)
  - [ ] [【工信动态】工信部等九部门联合印发《推动物联网产业创新发展行动方案（2026—2028年）》](https://mp.weixin.qq.com/s/XzX96M9vJC40oKKF2ky0gg)
  - [ ] [【赛迪热点】2026赛迪论坛 | 首本成果汇编，16份报告即将重磅发布！](https://mp.weixin.qq.com/s/uqqdVtDIQik-2kv_67BK1A)
  - [ ] [Smart Slider 3 WordPress 插件任意文件读取漏洞 | CVE-2026-3098复现&amp;研究](https://mp.weixin.qq.com/s/Y8lidlMnLlL1uwsEUGaxzw)
  - [ ] [编程工具Claude Code--Windows超详细配置教程](https://mp.weixin.qq.com/s/UeUf30y3rFps_X7JbT2k_A)
  - [ ] [三月读书小结](https://mp.weixin.qq.com/s/8KynQoGbapjytBr_C3Tscg)
  - [ ] [忍完这个忍那个，忍完那个忍这个](https://mp.weixin.qq.com/s/kfqLr2hMV088KQwejLZxGA)
  - [ ] [给AI Agent配置JS逆向MCP](https://mp.weixin.qq.com/s/D9mJdlNwxfeMXsNKbJVa0w)
  - [ ] [生成dirsearch命令的skills](https://mp.weixin.qq.com/s/QX-e8b1eQIpzwVMmVMxUFw)
  - [ ] [想冲 OSCP的来！苑老师带你边学边练，硬核备考](https://mp.weixin.qq.com/s/SZ4JdiN3QtF3Y_69be_s4A)
  - [ ] [思科开发环境遭黑客攻破，超 300 个核心代码库外泄](https://mp.weixin.qq.com/s/43UpufZqErNNCv-crlKw4A)
  - [ ] [【招聘】奇安信网络安全部招人啦，可内推～](https://mp.weixin.qq.com/s/lCtudeFHtj9SWAD3qBhYtA)
  - [ ] [源码裸奔！Claude Code 512K行代码意外泄漏——转发、镜像、分析，谁在法律边缘行走？](https://mp.weixin.qq.com/s/EypGqj11EUyxaSZh6AOEZQ)
  - [ ] [等保标准再扩新篇，数据安全系列公安行标解析（三）](https://mp.weixin.qq.com/s/mH6IzxB3XfSP-cwcQCr3ZA)
  - [ ] [Axios供应链攻击事件再追踪：线索直指Lazarus组织](https://mp.weixin.qq.com/s/RvykbFFq-zCaZOOax_ofCg)
  - [ ] [AI 驱动的自动化安全测试与多前端工作台](https://mp.weixin.qq.com/s/4nb4XgjXLv-B1Toe4ZA8mA)
  - [ ] [100条核心CMD运维命令大全，效率拉满！](https://mp.weixin.qq.com/s/EbS895tVJ9rOZeUnJRKrcw)
  - [ ] [朝鲜黑客污染axios三亿月下载库，你项目里的HTTP请求正在给平壤打工](https://mp.weixin.qq.com/s/iOA2mWVxLnPVfZdTNrCnoQ)
  - [ ] [征集标准参编单位！关于征集《消费级无人机检验检测通用要求》认证认可行业标准参编单位的通知](https://mp.weixin.qq.com/s/ispv-Uz6xwZ1YasCihMu2Q)
  - [ ] [龙虾安全 | 全国网安标委对《网络安全标准实践指南——OpenClaw类智能体部署使用安全指引（征求意见稿）》公开征求意见](https://mp.weixin.qq.com/s/QarXKyPbDQkQ7ARZWuTL2Q)
  - [ ] [每天烧掉100万美元，OpenAI终于砍了Sora](https://mp.weixin.qq.com/s/MnfnKQXcc8bBTYeWx67Ypg)
  - [ ] [ZeroDayRAT：2026年2月刚曝光的“间谍神器”，正悄悄接管你的手机](https://mp.weixin.qq.com/s/PRGJ-wTAUbRjM0Belj27Ow)
  - [ ] [Phantom：在IIS内存中直接运行.NET程序集的神器](https://mp.weixin.qq.com/s/JZqnlP1GEJ8pAGo4iMmB4Q)
  - [ ] [手机也能做攻防，要抓紧用AI来挡!](https://mp.weixin.qq.com/s/Rpy5vY48M34IRnIGuCHq_A)
  - [ ] [C24-X06 从一次拦截看AI安全本质：智能体越智能，终端运行时动态防御越重要](https://mp.weixin.qq.com/s/9zwJHQ2QbW25N9O5OVDhjw)
  - [ ] [网络安全保护工作](https://mp.weixin.qq.com/s/AQ0MUybG5Ppvm4kJ7hDG2Q)
  - [ ] [百家 | 李维春：企业安全架构的设计与迭代思考](https://mp.weixin.qq.com/s/VRhu6Vtv1D8DvXdox5HV3w)
  - [ ] [守内安 &amp; ASRC 2026xa0第一季电子邮件安全观察报告](https://mp.weixin.qq.com/s/2u-jaIwUk3RmithjQujNuA)
  - [ ] [免费赠送 | 防范网络钓鱼陷阱宣传素材（第二十一期）](https://mp.weixin.qq.com/s/k_CwyLz2M4s3I8wjY5jZdA)
  - [ ] [突发！Claude 核心代码泄露技术细节汇总](https://mp.weixin.qq.com/s/nA3ksbUloTxoEdLIcW-prQ)
  - [ ] [Windows 11 更新修复了关键的安装循环问题](https://mp.weixin.qq.com/s/udYiwkNmqzLPsajSsxpLHQ)
  - [ ] [建行大模型已赋能398个场景应用，将探索“人+数字员工”协同模式](https://mp.weixin.qq.com/s/2OAPRrFyrZgxHsKOlfujyg)
  - [ ] [AI快讯：OpenAI完成创纪录1220亿美元融资，阿里通义实验室推出CoPaw 1.0新版本](https://mp.weixin.qq.com/s/CreIi3E_n67DunGltwWWEw)
  - [ ] [华夏银行信用卡中心电销业务智能质检语义模型优化服务项目供应商征集](https://mp.weixin.qq.com/s/RnD-S7RNwEtUEgLtIx8bqA)
  - [ ] [【安全圈】Claude Code 源代码在 NPM 包中意外泄露](https://mp.weixin.qq.com/s/N5MrlNcT8S1wPfxieA6LzQ)
  - [ ] [【安全圈】思科开发环境遭黑客攻破，超 300 个核心代码库外泄](https://mp.weixin.qq.com/s/TUNt6L8wpino91y68I9Mdw)
  - [ ] [【安全圈】请升级：技嘉控制中心曝 9.2 分高危漏洞，黑客可远程接管电脑](https://mp.weixin.qq.com/s/VdSos730ImjZLFc25x-ucQ)
  - [ ] [LiteLLM 遭 PyPI 投毒 4万星标开源库引发供应链连锁崩塌](https://mp.weixin.qq.com/s/fvFrK4D1LUhBX3O4KeEmZQ)
  - [ ] [美图 AI Skills 上线：让你的龙虾学会 P 图！](https://mp.weixin.qq.com/s/_qqBcRgVFY3bx9jJhms7lA)
  - [ ] [当自动驾驶成为\"愚人\"--武汉萝卜快跑3.31事件](https://mp.weixin.qq.com/s/vh2qQJQpDegGFWg026Bx9Q)
  - [ ] [进阶：Chisel 隧道技术与内网穿透防护绕过实战](https://mp.weixin.qq.com/s/XuiAIYrDbIpvCM4bE7W-Gg)
  - [ ] [网络安全日报 | 2026-04-01](https://mp.weixin.qq.com/s/BV2q3kB7sKytdljnjDayEw)
  - [ ] [权威认可！亚信安全AI XDR成功入围《中国（香港）网络安全竞争力调研报告》](https://mp.weixin.qq.com/s/NJ5iM3bz48cKUtQMkss6iQ)
  - [ ] [监听全球还不够？NSA金融情报小组秘密行动曝光](https://mp.weixin.qq.com/s/pUCmZ8MR3A7KAvclY50uRw)
  - [ ] [价值亿级的“被动开源”：Claude Code 源码泄露始末与技术反思](https://mp.weixin.qq.com/s/XCl615R9wSBw1JFtjPWf8Q)
  - [ ] [万字长文丨Claude Code 源码泄漏技术复盘：第一梯队 AI 公司如何打造 Harness Engineering](https://mp.weixin.qq.com/s/P2q0ZuQWeIOP-XRLgdLVVw)
  - [ ] [国产手机安装Google三件套最稳的方法，正确的安装顺序，完整避坑指南，问题解决方法](https://mp.weixin.qq.com/s/nNjju9hhY9mZlPxQF8Xyzg)
  - [ ] [企业信息安全负责人必读系列丛书书稿《ISO/IEC 42001: 2023人工智能管理体系标准的谬误辨析与实施详解》（01）丛书自序](https://mp.weixin.qq.com/s/ezKTnj8jjicXv3RKhFC0pA)
  - [ ] [【福利赠送】ISO 22301业务连续性管理体系导入实施案例（7）业务连续性管理体系过程的确定](https://mp.weixin.qq.com/s/oOgovdWOzuMq7pdqNaOu8w)
  - [ ] [axios npm 供应链投毒攻击事件分析](https://mp.weixin.qq.com/s/NcNY65bmzLy3K9yfb6NzAQ)
  - [ ] [“政策解码·赋能共赢”沙龙（第一期）聚力创新·AI赋未来在京举行](https://mp.weixin.qq.com/s/2KKHVL2reof69-5BfVDL8A)
  - [ ] [【公益译文】2026年国际AI安全报告（三）](https://mp.weixin.qq.com/s/Xx6LfKCbphLhOrTe7OIQeA)
  - [ ] [成华区网络安全政策宣贯与意识培训会顺利召开，工信安创作工业信息安全防护体系专题分享](https://mp.weixin.qq.com/s/TuG_Ql0XAAGj6z66kidUVg)
  - [ ] [专题·具身智能安全 | 具身智能安全：数字与物理世界安全风险的重构与防御革新](https://mp.weixin.qq.com/s/wIV9e7o39BkvC-AcftGEOQ)
  - [ ] [马民虎 黄道丽：AI智能体专门立法与现行法如何互补融合](https://mp.weixin.qq.com/s/c-hf958Pi2fu-5LoHZnJdg)
  - [ ] [国家知识产权局提示：使用OpenClaw等智能体撰写专利申请文件存在存在诸多风险](https://mp.weixin.qq.com/s/ZLyqExYK5aiwd2TFxWRB5w)
  - [ ] [专家解读 | 契合数据特征 用好数据使用权](https://mp.weixin.qq.com/s/Ek8JHMMw3u-8E1CBCv5JgA)
  - [ ] [评论 | AI仿声不能无边界狂奔](https://mp.weixin.qq.com/s/6Q1O3di8RA3WmezGs0011g)
  - [ ] [【提权基础入门第八节】别小瞧那个备份权限，它可能是系统里的定时炸弹](https://mp.weixin.qq.com/s/iUqxlx7Fb5bBk_HgHD_WQw)
  - [ ] [[工具推荐]多协议连接&amp;未授权测试&amp;弱口令测试工具MPET](https://mp.weixin.qq.com/s/n3UA-cI8im6nPI021xRUFQ)
  - [ ] [分销江湖之安全 | 一键连接Wi-Fi，整网开局保安全](https://mp.weixin.qq.com/s/hpbnfBKV9cQJMMKxOGb3vg)
  - [ ] [2026年美国军事实力指数报告发布，揭露美军真实短板](https://mp.weixin.qq.com/s/kLNSjjooW_FANIfcWF35hA)
  - [ ] [CTF Agent 调优（适配Claude、Codex、Cursor）](https://mp.weixin.qq.com/s/ArOdW2T1tMq5ouPT1QO9mg)
  - [ ] [登顶顶会 ｜ BlockSec 与浙江大学联合论文入选 FSE 2026：AI 审计，离真实安全研究更近了一步](https://mp.weixin.qq.com/s/KdFjZQjYQ4SshJGBF58Mwg)
  - [ ] [OpenClaw热潮退后一地鸡毛！除了普通人，所有人都赢麻了](https://mp.weixin.qq.com/s/bj1FeR6e5YZSMnjA9xUGQg)
  - [ ] [3月全球网络安全焦点事件TOP10](https://mp.weixin.qq.com/s/QEoEwl-xivKgUJblKbfmDQ)
  - [ ] [AI+安全，问鼎国际！默安科技斩获日内瓦国际发明展金奖](https://mp.weixin.qq.com/s/h5QPiQjd1ptGqRA69FA5nw)
  - [ ] [用“小龙虾”写专利申请文件，风险有多大？](https://mp.weixin.qq.com/s/4C0QblGZEN94lHVr1vk1kg)
  - [ ] [2026，企事业单位网络安全意识宣贯怎么做？](https://mp.weixin.qq.com/s/ac-LwvBXQ3fCsNtsSBejzA)
  - [ ] [Axios投毒事件：阿里云安全复盘分析与关键防护建议](https://mp.weixin.qq.com/s/tLBU500ur-kAvLe1CJcQ6g)
  - [ ] [网络安全标准实践指南丨工业企业数据安全能力成熟度模型（附下载）](https://mp.weixin.qq.com/s/ZiM4LP5qErG3b95y8c-qBA)
  - [ ] [征求意见稿丨网络安全标准实践指南——OpenClaw类智能体部署使用安全指引，附下载](https://mp.weixin.qq.com/s/HAFCb7C5uKZr_zp42HtdTw)
  - [ ] [今晚开始，查询XVI扩展漏洞情报免费了](https://mp.weixin.qq.com/s/MejtNOZLPG2zJq2FtqtL1A)
  - [ ] [3.3万个Skills，为什么大多数都死在“安装”这一步？](https://mp.weixin.qq.com/s/ykOW66YzyPHveKpxNuY1ow)
  - [ ] [金盾资讯丨网络空间安全动态精选2026年4月（总第4期）](https://mp.weixin.qq.com/s/4rY3e9ZTEc2CwGLmchnPYg)
  - [ ] [全域实力 权威加冕|海云安强势入选《2026年网络与信息安全行业全景图》覆盖6大领域20项细分赛道](https://mp.weixin.qq.com/s/SoJ2lUZRIAbRfbeqoLZh4g)
  - [ ] [零售巨头遭受网络攻击后亏损11.5亿元，CEO宣布辞职](https://mp.weixin.qq.com/s/ZOxTqUNSlyH5-eF1FxIY6g)
  - [ ] [美军网络防御部队首次列装标准化“前出狩猎”装备](https://mp.weixin.qq.com/s/Uci3MEnd1KzjZl7Y43o0oQ)
  - [ ] [网络安全信息与动态周报2026年第13期（3月23日-3月29日）](https://mp.weixin.qq.com/s/ZN8ShmQbmp46lTLwTf04JQ)
  - [ ] [消费级显卡12G内存从零训练AI大模型分享](https://mp.weixin.qq.com/s/06QATnjxaeJMrFH0Xykojg)
  - [ ] [等保相关资料文档，一共15份，非常全面详细](https://mp.weixin.qq.com/s/VuZb_RgPQ5F9UVTw7MVunQ)
  - [ ] [OpenClaw（Clawdbot）极简部署教程](https://mp.weixin.qq.com/s/Q1J1gFWNSLfrOOwoYZw5hQ)
  - [ ] [Windows官方原版镜像合集](https://mp.weixin.qq.com/s/4TvyAADGHnjWTHs8vS-rNw)
  - [ ] [Linux 实战技能全套培训视频教程（118集完整版）](https://mp.weixin.qq.com/s/LhqFHssh5HsNDTsBb0fGVQ)
  - [ ] [从单次 LLM Call 到 Learning Loop - HUB 在安全运营的实践](https://mp.weixin.qq.com/s/Mn8iGkA6LGtLE4Rytl3Qjw)
  - [ ] [勒索警报 |  勒索组织声称攻破国内某稀土巨头，获取150GB数据，涉及党建、地质与全球供应链](https://mp.weixin.qq.com/s/23U3e_B1OFCb5bn2fIs_yw)
  - [ ] [我如何发现一个 IDOR：它暴露了政府医疗平台上的癌症患者身份](https://mp.weixin.qq.com/s/UlgNlVLEx4N-ZAYpm1NcWw)
  - [ ] [Venus Protocol：市场捐赠攻击（THE Market Donation Attack）](https://mp.weixin.qq.com/s/Hw2XdisIl3koGCTTPJLQGw)
  - [ ] [跨平台底层网络库libdnet源码分析系列(十六)](https://mp.weixin.qq.com/s/azBxaRvEpVXSGf0xIU-Msg)
  - [ ] [有人说要是把steam的服务器给炸了，是不是再也玩不了游戏了？](https://mp.weixin.qq.com/s/Wp4gPoiqhod5W6uciYrfiQ)
  - [ ] [逆向分析：Office VBS宏类型文档](https://mp.weixin.qq.com/s/44D52OzOVDvvG5fQmtNrbQ)
  - [ ] [好好吃饭 打好基础之初遇wsdl](https://mp.weixin.qq.com/s/l4BH7B7pHl1HIi4vJYeOUQ)
  - [ ] [一款先进的跨平台红队演练框架](https://mp.weixin.qq.com/s/yfK5duFBmOTTRDpCMXOB1A)
  - [ ] [应急响应详解，非常详细！（附PDF）](https://mp.weixin.qq.com/s/wQnu6nDYZBbixtBFOEQJkQ)
  - [ ] [【附POC及复现环境】Vim 1-click代码执行漏洞复现 (CVE-2026-34714)](https://mp.weixin.qq.com/s/44s-ls6WCYqzm36akr3wYw)
  - [ ] [[EDU]因jwt弱密钥而导致的越权](https://mp.weixin.qq.com/s/6IluTEuilr51g_5h8CNkMA)
  - [ ] [【在野利用】Google Chrome Dawn 释放后重用漏洞(CVE-2026-5281)安全风险通告](https://mp.weixin.qq.com/s/bfHI4LsGicJiSJKGVq9RrA)
  - [ ] [Stillepost：或者，如何通过 Chromium 代理你的 C2 HTTP 流量](https://mp.weixin.qq.com/s/zeNJEKYTBSLBvSwB87vsRg)
  - [ ] [三大升级！安星威胁检测智能体开启自主威胁防御新范式](https://mp.weixin.qq.com/s/G78g9LIqVUGvhrl7Tpqtiw)
  - [ ] [珠海横琴优质国企岗｜ 基础设施运维 / 桌面运维工程师火热招募](https://mp.weixin.qq.com/s/3ty3J3SLBqOwsGHjt3HIMA)
  - [ ] [TeamPCP 组织再度攻击：Telnyx 供应链攻击事件总结](https://mp.weixin.qq.com/s/_gtGwH7i03Hd1x7JSavoUg)
  - [ ] [活动回顾｜慢雾创始人余弦出席首届 Agentic AI 创新与安全论坛](https://mp.weixin.qq.com/s/IoI7Rfq3g8Q7EZN3Ct73ag)
  - [ ] [Anthropic员工失误导致Claude Code源代码泄露](https://mp.weixin.qq.com/s/T0S-XVkIlbGHs5_JVzb28w)
  - [ ] [GitHub一年泄露2900万机密—因为AI](https://mp.weixin.qq.com/s/ac2zvGFWoLsR1TSgO9ikkg)
  - [ ] [保旺达：定义AI时代的安全新范式](https://mp.weixin.qq.com/s/s0BYg8VkYCAQQg3emT90uw)
  - [ ] [国家知识产权局提示OpenClaw等智能体撰写专利申请文件风险](https://mp.weixin.qq.com/s/zkedjns0CS2qWLcMFjSk3Q)
  - [ ] [Claude Code 源码泄露后，有人做出了\"完全自由版\"](https://mp.weixin.qq.com/s/kprxkmSlKgIxsJbztLMSxA)
  - [ ] [【在野漏洞预警】Chrome浏览器沙箱逃逸漏洞（CVE-2026-5281）](https://mp.weixin.qq.com/s/C93W5Hlmn6YWxWDgNZj4Qw)
  - [ ] [一次钓鱼下的GO语言样本分析](https://mp.weixin.qq.com/s/weibRimV1em1aN1v9GDQLw)
  - [ ] [利用邮箱漏洞寻找突破口打穿目标内网](https://mp.weixin.qq.com/s/K2W-Hfk90VakfG5gMwM5Aw)
  - [ ] [4月社区投稿活动 | 漏洞挖掘](https://mp.weixin.qq.com/s/i1AJHN9Kx_a3bHAI41PH2w)
  - [ ] [美以伊冲突开战一个月总结及地面战可能性分析](https://mp.weixin.qq.com/s/c7lQqfZkYTLQICjBBcSIzg)
  - [ ] [紧急预警｜axios npm 供应链投毒！这两个版本千万别用，已植入跨平台 RAT](https://mp.weixin.qq.com/s/f-CCIHpHe0EyiASzhzFiFA)
  - [ ] [基于 DOM 的 XSS 攻击](https://mp.weixin.qq.com/s/2Qi5MXCgZNS7Q82ep9hXJw)
  - [ ] [PHP代码审计实战：两个经典漏洞的深度剖析](https://mp.weixin.qq.com/s/FQcKOdbFQclYK1kMXqnQsg)
  - [ ] [动态｜全国网安标委对《网络安全标准实践指南——OpenClaw类智能体部署使用安全指引（征求意见稿）》公开征求意见](https://mp.weixin.qq.com/s/2O37iNMwtH56mVu4t6a7Yw)
  - [ ] [动态｜《商用密码应用安全性评估FAQ》（第四版）正式发布！](https://mp.weixin.qq.com/s/S45JwZjCbAqucO2K84KhHg)
  - [ ] [学海观澜｜欢迎申报！2026年度CCF-蚂蚁科研基金发布，开放四大方向，44项前沿课题](https://mp.weixin.qq.com/s/zCv2WEjsPlvKGV7Da_yxdQ)
  - [ ] [国家知识产权局发布“龙虾”OpenClaw最新风险提示](https://mp.weixin.qq.com/s/jkf-ZDcM3JYaj6WQtbspVQ)
  - [ ] [工信部等九部门联合印发《推动物联网产业创新发展行动方案（2026-2028年）》](https://mp.weixin.qq.com/s/G-ov7N5TnGarYPRZpL3hgA)
  - [ ] [网安标准实践指南《OpenClaw类智能体部署使用安全指引》公开征求意见](https://mp.weixin.qq.com/s/3Sl5FPqzSfEzfw-XsPPC9A)
  - [ ] [《网安标准实践指南-工业企业数据安全能力成熟度模型》发布](https://mp.weixin.qq.com/s/epoFjY5PnHafWZnkXzUJlA)
  - [ ] [劳埃德银行集团因IT故障泄露近45万客户数据](https://mp.weixin.qq.com/s/UrSvAqoZVvY5blvE8lPCIw)
  - [ ] [离谱](https://mp.weixin.qq.com/s/JH5hfQkA4IC73t-O3KHqfA)
  - [ ] [今日（2026年4月1日）OpenClaw 最新安全动态总结](https://mp.weixin.qq.com/s/YFuXt8Sei9CJdcwrErH2bA)
  - [ ] [警惕 axios 供应链投毒风险！永信至诚「数字风洞」守护软件供应链安全](https://mp.weixin.qq.com/s/pFpmj1QkT0AMX41jBgDsew)
  - [ ] [给 Linux 新手的](https://mp.weixin.qq.com/s/-AWL1ZGKenieCttiENHZ-w)
  - [ ] [法治论苑｜马民虎 黄道丽：AI智能体专门立法与现行法如何互补融合](https://mp.weixin.qq.com/s/TDwY7v8kf49XRketMsm-Hg)
  - [ ] [刷爆科研圈的\"龙虾\"SClaw，到底改变了什么](https://mp.weixin.qq.com/s/dTMa7LBBhw-Mdwzla3WnYw)
  - [ ] [【安全月报】| 3 月加密货币领域因安全事件损失约 1.98 亿美元](https://mp.weixin.qq.com/s/ZPVdplg1XrzOduZvqhpAQA)
  - [ ] [Sub2API：把 Claude/Gemini/GPT 订阅变成 API](https://mp.weixin.qq.com/s/TljNV8GKqz356HtHfBJQ7A)
  - [ ] [01_初始立足点](https://mp.weixin.qq.com/s/14U109CjpRFE7wO5-4BqRA)
  - [ ] [景德镇公安守护未成年人网络安全](https://mp.weixin.qq.com/s/7YgxluDmlg0gCtwRM67cow)
  - [ ] [共筑网安防线丨山石网科香港企业网络安全研讨会圆满举办](https://mp.weixin.qq.com/s/RSm1cwmDJz1c3d_FsGVAhQ)
  - [ ] [安全实战：Apifox 供应链投毒事件与企业安全闭环实践](https://mp.weixin.qq.com/s/4Yx2Mk2kCk6am3S4vmFHKw)
  - [ ] [锦行科技入选《2026 年网络与信息安全行业全景图》，六大领域全面上榜](https://mp.weixin.qq.com/s/d1VbTW52MyZBS86_dhNmCw)
  - [ ] [【CVE-2026-4747】疯了！Claude 直接写内核 RCE，成功获得 Root Shell！](https://mp.weixin.qq.com/s/PUNGfi1A6Y3RP1rO3BihAQ)
  - [ ] [25年后，再听“81192，收到请回答”](https://mp.weixin.qq.com/s/j6MESk222dilDKVWvUkimg)
  - [ ] [紧急！npm严重供应链攻击，Axios恶意版本速自查](https://mp.weixin.qq.com/s/OXtESeDxqEHA-GLIcwnNWQ)
  - [ ] [TRAE+ghidra辅助逆向](https://mp.weixin.qq.com/s/N21EXM0NSleatF4Yt37GZQ)
  - [ ] [51万行代码\"裸奔\"！Anthropic又犯了同一个错误，这次细节更炸裂](https://mp.weixin.qq.com/s/2cV-7iDNiMEuvwJ4Q0-fTQ)
  - [ ] [Rub: 纯 Rust 实现的高性能、轻量级 BOF 加载器](https://mp.weixin.qq.com/s/TvlQquO4rVjOo2-_F9KsVQ)
  - [ ] [Lazarus Group 毒害 Axios：npm 供应链攻击内幕](https://mp.weixin.qq.com/s/7T497sYqye1KlL4gh9UJew)
  - [ ] [MAD Bugs：Claude 编写了一个完整的 FreeBSD 远程内核 RCE 漏洞，并获得了 Root Shell 权限 (CVE-2026-4747)](https://mp.weixin.qq.com/s/pv7IH5r9BT-FL48oow1tPw)
  - [ ] [Axios 供应链攻击事件深度分析：BlueNoroff 组织的跨平台 RAT 攻击手法揭秘](https://mp.weixin.qq.com/s/ENHWeInvFdHR4ge9BKtiCw)
  - [ ] [#愚人节](https://mp.weixin.qq.com/s/bwXj6_ThI_sf3l3U_BEC9A)
  - [ ] [第二届腾讯云黑客松智能渗透挑战赛等你来战！](https://mp.weixin.qq.com/s/Yc6zF8mdzRRYWoHVZg2JaQ)
  - [ ] [今日13:30丨养虾人走进哈工大，四款AI安全产品开启预约](https://mp.weixin.qq.com/s/q0M6t64MC8p15bMtNJ3Wxw)
  - [ ] [威胁通缉令 · 红桃5丨CitrixBleed 2漏洞（新增）](https://mp.weixin.qq.com/s/zwkRUQjlC1rJ8KgY3chrUw)
  - [ ] [一亿下载量的 “毒药”：Axios 供应链投毒事件深度解析](https://mp.weixin.qq.com/s/2eJ7CHx-j6nLYTjkckUiag)
- Private Feed for M09Ic
  - [ ] [anthropics released v2.1.90 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.90)
  - [ ] [strands-agents released v1.34.1 at strands-agents/sdk-python](https://github.com/strands-agents/sdk-python/releases/tag/v1.34.1)
  - [ ] [bolucat released 202604012112 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202604012112)
  - [ ] [joaoviictorti starred DataDog/malicious-software-packages-dataset](https://github.com/DataDog/malicious-software-packages-dataset)
  - [ ] [CHYbeta starred montyly/isItVulnerable](https://github.com/montyly/isItVulnerable)
  - [ ] [4ra1n starred 0Chencc/clawgod](https://github.com/0Chencc/clawgod)
  - [ ] [spf13 starred stefanpenner/dotpack](https://github.com/stefanpenner/dotpack)
  - [ ] [joaoviictorti starred mandiant/flare-learning-hub](https://github.com/mandiant/flare-learning-hub)
  - [ ] [kpcyrd contributed to kpcyrd/spotify-launcher](https://github.com/kpcyrd/spotify-launcher/pull/106)
  - [ ] [CHYbeta starred praetorian-inc/trajan](https://github.com/praetorian-inc/trajan)
  - [ ] [github released v0.4.4 at github/spec-kit](https://github.com/github/spec-kit/releases/tag/v0.4.4)
  - [ ] [Mr-xn forked gotosec/claude-code from claude-code-best/claude-code](https://github.com/gotosec/claude-code)
  - [ ] [Mr-xn starred claude-code-best/claude-code](https://github.com/claude-code-best/claude-code)
  - [ ] [ZeddYu starred rtk-ai/rtk](https://github.com/rtk-ai/rtk)
  - [ ] [Safe3 forked Safe3/fastclaw from fastclaw-ai/fastclaw](https://github.com/Safe3/fastclaw)
  - [ ] [mgeeky starred ultraworkers/claw-code](https://github.com/ultraworkers/claw-code)
  - [ ] [Mr-xn starred motiful/cc-gateway](https://github.com/motiful/cc-gateway)
  - [ ] [safedv starred y637F9QQ2x/NOFILTER-NFEXEC](https://github.com/y637F9QQ2x/NOFILTER-NFEXEC)
  - [ ] [mandiant released v9.4.0 at mandiant/capa-rules](https://github.com/mandiant/capa-rules/releases/tag/v9.4.0)
  - [ ] [PrefectHQ released 3.6.25.dev5 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.6.25.dev5)
- SecWiki News
  - [ ] [SecWiki News 2026-04-01 Review](http://www.sec-wiki.com/?2026-04-01)
- Microsoft Security Blog
  - [ ] [Mitigating the Axios npm supply chain compromise](https://www.microsoft.com/en-us/security/blog/2026/04/01/mitigating-the-axios-npm-supply-chain-compromise/)
- obaby 𝐢‍𝐧⃝ void
  - [ ] [弱弱的问一下，我的网站怎么被镜像了嗫？](https://zhongxiaojie.cn/2026/04/768/)
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  - [ ] [梆梆安全荣膺中关村网信联盟 “2025年度联盟最佳合作伙伴单位” ，以生态协同筑牢网络安全防线](https://www.4hou.com/posts/mklR)
  - [ ] [嘶吼安全动态｜国家计算机病毒应急处理中心检测发现71款违法违规收集使用个人信息的移动应用 OpenAI Codex爆出严重漏洞：黑客可劫持GitHub访问令牌](https://www.4hou.com/posts/qow7)
  - [ ] [Trivy 供应链攻击持续扩散，波及Docker镜像与GitHub代码仓库](https://www.4hou.com/posts/gyBj)
  - [ ] [起底OpenClaw提示词注入：从“无害话痨”到“主机沦陷”仅需一个网页](https://www.4hou.com/posts/pnrQ)
- ElcomSoft blog
  - [ ] [Digital Rights vs. State Power – The Protectors](https://blog.elcomsoft.com/2026/04/digital-rights-vs-state-power-the-protectors/)
- Recent Commits to cve:main
  - [ ] [Update Wed Apr  1 11:15:39 UTC 2026](https://github.com/trickest/cve/commit/a153a263dd2aa42b803369bf30eae56aa6d459ea)
- Tenable Blog
  - [ ] [Frequently Asked Questions About the Axios npm Supply Chain Attack by North Korea-Nexus Threat Actor UNC1069](https://www.tenable.com/blog/faq-about-the-axios-npm-supply-chain-attack-by-north-korea-nexus-threat-actor-unc1069)
- Blogs on STAR Labs
  - [ ] [CHECK Removed, Context Confused, Checkmate Achieved](https://starlabs.sg/blog/2026/04-check-removed-context-confused-checkmate-achieved/)
- Insinuator.net
  - [ ] [KubeCon + CloudNativeCon Europe 2026](https://insinuator.net/2026/04/kubecon-cloudnativecon-europe-2026/)
- Cerbero Blog
  - [ ] [SquashFS Format Package](https://blog.cerbero.io/squashfs-format-package/)
- Horizon3.ai
  - [ ] [Best Tools for Digital Threat Monitoring and Cyber Threat Visibility](https://horizon3.ai/intelligence/blogs/digital-threat-monitoring-tools-cyber-visibility/)
- CCC Event Blog
  - [ ] [5. Tage der digitalen Freiheit](https://events.ccc.de/2026/04/01/tage-der-digitalen-freiheit-5/)
- Bug Bounty in InfoSec Write-ups on Medium
  - [ ] [GitHub is a Search Engine for Secrets — and Nobody Told You](https://infosecwriteups.com/github-is-a-search-engine-for-secrets-and-nobody-told-you-65331d15803e?source=rss----7b722bfd1b8d--bug_bounty)
- Securelist
  - [ ] [A laughing RAT: CrystalX combines spyware, stealer, and prankware features](https://securelist.com/crystalx-rat-with-prankware-features/119283/)
- Reverse Engineering
  - [ ] [BurnerNet v1.0.0: A Zero-Trust C++20 HTTP Client Engine](https://www.reddit.com/r/ReverseEngineering/comments/1sa0wkh/burnernet_v100_a_zerotrust_c20_http_client_engine/)
  - [ ] [I wrote a custom decompiler for the bytecode used by Naughty Dog in the The Last of Us & Uncharted games](https://www.reddit.com/r/ReverseEngineering/comments/1s9cpf6/i_wrote_a_custom_decompiler_for_the_bytecode_used/)
  - [ ] [Community RecRoom server emulation project](https://www.reddit.com/r/ReverseEngineering/comments/1s95or8/community_recroom_server_emulation_project/)
  - [ ] [Chinese Security Reverse Engineered - Trust Decision Solver (Popmart)](https://www.reddit.com/r/ReverseEngineering/comments/1s97z0j/chinese_security_reverse_engineered_trust/)
- SentinelOne
  - [ ] [The Implementation Blind Spot | Why Organizations Are Confusing Temporary Friction with Permanent Safety](https://www.sentinelone.com/blog/the-implementation-blind-spot-why-organizations-are-confusing-temporary-friction-with-permanent-safety/)
- Malwarebytes
  - [ ] [Wikipedia&#8217;s AI agent row likely just the beginning of the bot-ocalypse](https://www.malwarebytes.com/blog/ai/2026/04/wikipedias-ai-agent-row-likely-just-the-beginning-of-the-bot-ocalypse)
  - [ ] [WhatsApp on Windows users targeted in new campaign, warns Microsoft](https://www.malwarebytes.com/blog/news/2026/04/whatsapp-on-windows-users-targeted-in-new-campaign-warns-microsoft)
  - [ ] [Why we&#8217;re still not doing April Fools&#8217; Day](https://www.malwarebytes.com/blog/scams/2026/04/why-were-still-not-doing-april-fools-day)
- The Trail of Bits Blog
  - [ ] [Mutation testing for the agentic era](https://blog.trailofbits.com/2026/04/01/mutation-testing-for-the-agentic-era/)
- Intigriti
  - [ ] [BugQuest 2026: 31 Days of Broken Access Control](https://www.intigriti.com/researchers/blog/hacking-tools/bugquest-2026-31-days-of-broken-access-control)
- 绿盟科技技术博客
  - [ ] [“龙虾”来袭，绿盟科技三位一体防御体系，让网络告别 “裸奔” 风险！](https://blog.nsfocus.net/%e9%be%99%e8%99%be%e6%9d%a5%e8%a2%ad%ef%bc%8c%e7%bb%bf%e7%9b%9f%e7%a7%91%e6%8a%80%e4%b8%89%e4%bd%8d%e4%b8%80%e4%bd%93%e9%98%b2%e5%be%a1%e4%bd%93%e7%b3%bb%ef%bc%8c%e8%ae%a9%e7%bd%91/)
- HackerNews
  - [ ] [TrueConf 零日漏洞在针对东南亚政府网络攻击中被利用](https://hackernews.cc/archives/63997)
  - [ ] [Claude AI 发现 Vim 和 Emacs 文件打开时触发的远程代码执行漏洞](https://hackernews.cc/archives/63996)
  - [ ] [Claude Code 源代码在 NPM 包中意外泄露](https://hackernews.cc/archives/63995)
  - [ ] [劳埃德银行数据安全事件波及 45 万用户](https://hackernews.cc/archives/63994)
- 奇客Solidot–传递最新科技情报
  - [ ] [欧洲国家快速拥抱绿色技术和电动汽车](https://www.solidot.org/story?sid=83938)
  - [ ] [百度多辆无人驾驶出租车同时发生故障](https://www.solidot.org/story?sid=83937)
  - [ ] [瑞典回归传统的基于纸质的课堂教育模式](https://www.solidot.org/story?sid=83936)
  - [ ] [尼安德特人在灭绝边缘生存了 35 万年](https://www.solidot.org/story?sid=83935)
  - [ ] [过去一年最活跃的勒索软件组织是 Qilin](https://www.solidot.org/story?sid=83934)
  - [ ] [口服药有助于消除时差反应](https://www.solidot.org/story?sid=83933)
  - [ ] [俄罗斯加大力度打击 VPN](https://www.solidot.org/story?sid=83932)
  - [ ] [一颗 Starlink 卫星在轨道上突然解体](https://www.solidot.org/story?sid=83931)
  - [ ] [科技公司 CEO 热衷以 AI 为借口大规模裁员](https://www.solidot.org/story?sid=83930)
- 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台
  - [ ] [史上最严充电宝新规将于2027年4月实施](https://blog.upx8.com/%E5%8F%B2%E4%B8%8A%E6%9C%80%E4%B8%A5%E5%85%85%E7%94%B5%E5%AE%9D%E6%96%B0%E8%A7%84%E5%B0%86%E4%BA%8E2027%E5%B9%B44%E6%9C%88%E5%AE%9E%E6%96%BD)
  - [ ] [原特斯拉“王牌厂长”宋钢将入职小米](https://blog.upx8.com/%E5%8E%9F%E7%89%B9%E6%96%AF%E6%8B%89-%E7%8E%8B%E7%89%8C%E5%8E%82%E9%95%BF-%E5%AE%8B%E9%92%A2%E5%B0%86%E5%85%A5%E8%81%8C%E5%B0%8F%E7%B1%B3)
- 锦行科技
  - [ ] [锦行科技入选《2026 年网络与信息安全行业全景图》，六大领域全面上榜](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247494809&idx=1&sn=bcb68e1f0697fe49350eddff44132438)
- Offensive Security Blog: Latest Trends in Hacking | Praetorian
  - [ ] [A Possible Solution to the Zodiac Killer Z32 Cipher](https://www.praetorian.com/blog/a-possible-solution-to-the-zodiac-killer-z32-cipher/)
- 黑鸟
  - [ ] [网络犯罪论坛日志揭示了参与人员的匿名网络选择习惯](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186132&idx=1&sn=5a45d54348cca4d0fbfa039e336ff809)
- 安全分析与研究
  - [ ] [反检测技术（下）——SysCall与VEH](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247496627&idx=1&sn=ad0b0dd08792ba9d4e1a617928378bc3)
- 威努特安全网络
  - [ ] [全域风险感知，威努特工业安全运营方案助力护航行动](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651141168&idx=1&sn=ba4d05b0e9d7409254626ceacb6d3568)
- 奇安信 CERT
  - [ ] [今日（2026年4月1日）OpenClaw 最新安全动态总结](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504926&idx=1&sn=1f42929d502289fac79b5f1663774fb1)
- 代码卫士
  - [ ] [Claude Code源代码遭泄露](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525629&idx=1&sn=ccf825a020a9d153cfe0c93f04be6c56)
  - [ ] [Axios npm 包遭投毒，发动供应链攻击](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525629&idx=2&sn=b076315a014fe06f2a8b6eeec62f33c2)
- 安全内参
  - [ ] [零售巨头遭受网络攻击后亏损11.5亿元，CEO宣布辞职](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515752&idx=1&sn=70f10cb155b52ebbe78659efe17b84ae)
  - [ ] [美军网络防御部队首次列装标准化“前出狩猎”装备](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515752&idx=2&sn=067e67ce89a3b546372089a196468630)
- 漕河泾小黑屋
  - [ ] [LinIR-Linux下的应急响应采集工具](https://mp.weixin.qq.com/s?__biz=MzA4NzQwNzY3OQ==&mid=2247484053&idx=1&sn=0b9ddaca7e4a74e4afa0c806dab47c6a)
- Black Hills Information Security, Inc.
  - [ ] [Cloud Security: Tips and Resources for Securing the Cloud](https://www.blackhillsinfosec.com/cloud-security-tips-and-resources-for-securing-the-cloud/)
- 看雪学苑
  - [ ] [4/2 21:00直播 | Y700三代免解锁BL内核刷机三绿方案](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612934&idx=1&sn=415e828b93bc960dbebe7750ff3bcede)
  - [ ] [一次尝试某APP签名算法逆向追踪：从抓包到SO层](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612934&idx=2&sn=6a401c7e50c3bfaaa362c29042792db1)
  - [ ] [突发：热门工具Claude Code源代码泄露](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612934&idx=3&sn=8c6cd74eaee2da9efed0f5309b68bcbb)
- 绿盟科技研究通讯
  - [ ] [当可信数据空间遇见大语言模型](https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499736&idx=1&sn=a55f7c63793a7c6c8c5974221f446a10)
  - [ ] [论文解读：《A Systematic Survey of Self-Evolving Agents: From Model-Centric to Environment-Driven Co-Evolution》](https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499736&idx=2&sn=3890074c6414126f38af6444119710ff)
- Shostack & Friends Blog
  - [ ] [DevSecOps: What Every Security Engineer Should Learn from Star Trek](https://shostack.org/blog/devsecops-learn-from-star-trek/)
- 灾难控制 局
  - [ ] [从单次 LLM Call 到 Learning Loop - HUB 在安全运营的实践](https://mp.weixin.qq.com/s?__biz=MzI1NTc1NTcwNg==&mid=2247484487&idx=1&sn=ea8cb01e7b111d6403e298a264bf6b68)
- 微步在线研究响应中心
  - [ ] [AI一句话挖出Vim RCE？还缺亿点点细节](https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508518&idx=1&sn=f6a96ec06480962b7fd83fa0c8baf4fc)
- 奇安信威胁情报中心
  - [ ] [Axios npm 供应链攻击从TTP层面特征的归属分析](https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518195&idx=1&sn=e7faa2143413095439151fa827e9c28f)
- 中国信息安全
  - [ ] [中国信息安全测评中心主任彭涛：开启具身智能德智体协同发展新征程](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260869&idx=1&sn=2787786134fd78f89166123b188cd279)
  - [ ] [《中国信息安全》杂志2026年第3期目录](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260869&idx=2&sn=3e9d4bfdad3b3e8a45306ba50d6ce886)
- 默安科技
  - [ ] [案例分享：携手长三角农商行标杆，打造IAST安全运营升级典范](https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247501800&idx=1&sn=3c2b21574386c3a056fd1fb6ea7c5c7b)
- 安全牛
  - [ ] [从被动响应到AI对抗AI：RSAC 2026最值得关注的9大安全能力升级](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140942&idx=1&sn=a6374d15306ff24c20bd37214ad8ffd5)
  - [ ] [告别符号依赖：Linux 内存取证新范式](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140942&idx=2&sn=8846a72acac520d100ac9318e95dee8d)
- 安全圈
  - [ ] [【安全圈】Claude Code 源代码在 NPM 包中意外泄露](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075285&idx=1&sn=fac5a22f619c4de95d42a6d4cb92c08d)
  - [ ] [【安全圈】思科开发环境遭黑客攻破，超 300 个核心代码库外泄](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075285&idx=2&sn=a750265d0d0c02b99a4c0c4e8fb26e07)
  - [ ] [【安全圈】请升级：技嘉控制中心曝 9.2 分高危漏洞，黑客可远程接管电脑](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075285&idx=3&sn=5b9f8a46ba792cd92b902840f2b22187)
- 补天平台
  - [ ] [AI免杀 - 利用Trae+Skills流程化免杀主流杀软](https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510618&idx=1&sn=cca14bb367e062a5e01329e5a8ece615)
- 极客公园
  - [ ] [小红书想在娱乐行业建一套新秩序，但它准备好了吗？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653102569&idx=1&sn=6902b5959a74f992ba31424b2b5296a7)
  - [ ] [中国 AI 公司，该怎么「抄 Claude Code 的作业」？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653102545&idx=1&sn=48be3c21908b4a3b30590dcc4d7ef5b8)
  - [ ] [全网炸锅，Claude Code 51 万行源代码遭泄漏；张雪：未来五年吃掉国际大牌 50% 份额；华为 2025 年研发投入 1923 亿元 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653102532&idx=1&sn=a787e8fa20700918d0712e98fc0366d8)
- 嘶吼专业版
  - [ ] [Trivy供应链攻击持续扩散，波及Docker镜像与GitHub代码仓库](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587498&idx=1&sn=8d16473c8025943b69d969e6132d4a62)
  - [ ] [嘶吼安全动态｜国家计算机病毒应急处理中心通报71款违法违规收集使用个人信息的APP OpenAI Code爆出严重漏洞：黑客可劫持GitHub访问令牌](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587498&idx=2&sn=b03bc0d15554223016a1711586de1a72)
- 腾讯安全威胁情报中心
  - [ ] [高危风险提示｜又是供应链攻击！Axios npm包遭投毒，请尽快排查处置](https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247511532&idx=1&sn=a64a348704fcf6aa7289964294b7c0c9)
- 小米安全中心
  - [ ] [AI大模型专场开启，MiSRC邀你来挖洞](https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247520742&idx=1&sn=0224eef3526a7f295e275bd724935ebf)
- 恒脑与AI
  - [ ] [Claude Code源代码全裸奔，59.8MB文件撬开AI黑盒，行业巨震！](https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247497408&idx=1&sn=46b53a8b63b7ff3b8ccbfcbcc987130b)
- 火绒安全
  - [ ] [愚人不“愚”防，勒索病毒别嚣张！](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531834&idx=1&sn=fbc91c049d92ebe335f7576214cf3bb1)
  - [ ] [火绒小问答--「个人版」近期top问题解答](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531834&idx=2&sn=a7db2f41793960c61ba64b148bceb6bf)
  - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531834&idx=3&sn=83f0e78f02a4bdd52effc8805f609685)
- 情报分析师
  - [ ] [一句"严重关切"，到底只是客套话，还是要出手了？一个外交辞令里，藏着多少层国家安全信号？](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567409&idx=1&sn=be67a77c61df90f7fb845934b78c3ab4)
  - [ ] [【热点研判】蒙古国总理辞职/朝公开特战部队高强度表演/特朗普被曝称可“拿走伊朗石油”甚至夺取哈尔克岛/](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567409&idx=2&sn=6ec7fc9365ba73249b4532eea9c7c980)
  - [ ] [情报世界的游戏规则变了：比的不是谁更神秘，而是谁能更快拼成全景图](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567409&idx=3&sn=68e168dcd86b709e2b7ced9fed179e15)
  - [ ] [情报高手为什么很少"立刻下判断"？防止被假消息带节奏，最有效的方法叫"假设检验"](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650567409&idx=4&sn=edef0e1ffc64f3b709d0288c4d8311a9)
- 数世咨询
  - [ ] [GitHub一年泄露2900万机密—因为AI](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542440&idx=1&sn=2de2badb56e66d3b2f56a5526f80b37c)
  - [ ] [保旺达：定义AI时代的安全新范式](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542440&idx=2&sn=47c4c0e06d185ffbd8ca99bb86885358)
- Tide安全团队
  - [ ] [好好吃饭 打好基础之初遇wsdl](https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247521950&idx=1&sn=b89f92cd227f707591e7e5cfd2a6878d)
- 陌陌安全
  - [ ] [【春锋行动】陌陌 SRC 联合狩猎，积分翻倍 + 新人专享 + 老带新福利+专项福利等你来！](https://mp.weixin.qq.com/s?__biz=MzI2OTYzOTQzNw==&mid=2247489523&idx=1&sn=220c8fa6decac039b8019fdd6fca7ee7)
- 慢雾科技
  - [ ] [活动回顾｜慢雾创始人余弦出席首届 Agentic AI 创新与安全论坛](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247504607&idx=1&sn=49e70d092b5e2e4d7278e85d822643f8)
- 迪哥讲事
  - [ ] [通过文件上传实现的xss](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499249&idx=1&sn=ee8b5fd146e6f408e3c2a1bde7460aec)
- 国家互联网应急中心CNCERT
  - [ ] [网络安全信息与动态周报2026年第13期（3月23日-3月29日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501384&idx=1&sn=8ab76f1f0a1e754606422e898e1612d5)
- 深信服千里目安全技术中心
  - [ ] [axios npm 供应链投毒攻击事件分析](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525220&idx=1&sn=fc1f773a8166d9caef0887a8ce86bcfb)
- 360数字安全
  - [ ] [360安全龙虾进校园，产教融合+ADE认证赋能双在线](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585598&idx=1&sn=3e99b21c6b5daceb0ceb2bee03509c47)
- 字节跳动技术团队
  - [ ] [OpenClaw 的 “安全卫士”：Jeddak AgentArmor 运行时防护全解析](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247519148&idx=1&sn=9ce8fff7bb8c5f2f6a8ca762a2fef2f4)
- 安全行者老霍
  - [ ] [直到上个月，攻击者只需发送一个日历邀请，就能窃取Perplexity Comet用户的信息](https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486284&idx=1&sn=fe98ed550f5f44ac672f054ee42df174)
- 云鼎实验室
  - [ ] [Axios 供应链投毒事件响应：腾讯云安全已完成主动排查与风险防护升级](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497406&idx=1&sn=681c24437ff6fad50207d8670b80ec4a)
- Securityinfo.it
  - [ ] [Vertex AI e il rischio dei “double agent” AI](https://www.securityinfo.it/2026/04/01/vertex-ai-e-il-rischio-dei-double-agent-ai/?utm_source=rss&utm_medium=rss&utm_campaign=vertex-ai-e-il-rischio-dei-double-agent-ai)
- Over Security - Cybersecurity news aggregator
  - [ ] [New CrystalRAT malware adds RAT, stealer and prankware features](https://www.bleepingcomputer.com/news/security/new-crystalrat-malware-adds-rat-stealer-and-prankware-features/)
  - [ ] [Apple expands iOS 18 updates to more iPhones to block DarkSword attacks](https://www.bleepingcomputer.com/news/security/apple-expands-ios-18-updates-to-more-iphones-to-block-darksword-attacks/)
  - [ ] [Hackers exploit TrueConf zero-day to push malicious software updates](https://www.bleepingcomputer.com/news/security/hackers-exploit-trueconf-zero-day-to-push-malicious-software-updates/)
  - [ ] [Crypto platform Drift suspends services after millions stolen in security incident](https://therecord.media/drift-crypto-heist-solana-hacker)
  - [ ] [Nissan says stolen data came from third-party vendor after hacking group claims breach](https://therecord.media/nissan-hackers-data-breach)
  - [ ] [New EvilTokens service fuels Microsoft device code phishing attacks](https://www.bleepingcomputer.com/news/security/new-eviltokens-service-fuels-microsoft-device-code-phishing-attacks/)
  - [ ] [Mercor confirms security incident tied to LiteLLM supply chain attack](https://therecord.media/mercor-confirms-security-incident-tied-to-litellm)
  - [ ] [North Dakota water treatment plant reports March ransomware attack](https://therecord.media/north-dakota-ransomware-water-plant)
  - [ ] ['NoVoice' Android malware on Google Play infected 2.3 million devices](https://www.bleepingcomputer.com/news/security/novoice-android-malware-on-google-play-infected-23-million-devices/)
  - [ ] [WhatsApp notifies hundreds of users who installed a fake app made by government spyware maker](https://techcrunch.com/2026/04/01/whatsapp-notifies-hundreds-of-users-who-installed-a-fake-app-that-was-actually-government-spyware/)
  - [ ] [WhatsApp falso made in Italy: il caso Asigint non è un incidente isolato, è un sistema](https://www.cybersecurity360.it/news/whatsapp-falso-made-in-italy-il-caso-asigint-non-e-un-incidente-isolato-e-un-sistema/)
  - [ ] [Hasbro takes some systems offline after cybersecurity incident](https://therecord.media/hasbro-takes-some-systems-offline-after-cyber-incident)
  - [ ] [Cambodia extradites alleged cyber scam linchpin to China as crackdown intensifies](https://therecord.media/cambodia-extradites-alleged-cyber-scam-linchpin-to-china)
  - [ ] [Siti WordPress a rischio: c’è la patch per la falla invisibile che espone i segreti dei server](https://www.cybersecurity360.it/news/siti-wordpress-a-rischio-ce-la-patch-per-la-falla-invisibile-che-espone-i-segreti-dei-server/)
  - [ ] [How Cyble Blaze AI Predicts Cyber Threats 6 Months in Advance Using Agentic Intelligence](https://cyble.com/blog/predictive-cybersecurity-cyble-blaze-ai/)
  - [ ] [Routine Access Is Powering Modern Intrusions, a New Threat Report Finds](https://www.bleepingcomputer.com/news/security/routine-access-is-powering-modern-intrusions-a-new-threat-report-finds/)
  - [ ] [European Digital Identity Wallet: caratteristiche, evoluzione normativa e implicazioni pratiche](https://www.cybersecurity360.it/soluzioni-aziendali/european-digital-identity-wallet-caratteristiche-evoluzione-normativa-e-implicazioni-pratiche/)
  - [ ] [Major Cyber Attacks in March 2026: OAuth Phishing, SVG Smuggling, Magecart, and More](https://any.run/cybersecurity-blog/major-cyber-attacks-march-2026/)
  - [ ] [Romania under daily barrage of cyberattacks, defense minister says](https://therecord.media/romania-cyberattacks-russia-defense-minister)
  - [ ] [FBI warns against using Chinese mobile apps due to privacy risks](https://www.bleepingcomputer.com/news/security/fbi-warns-against-using-chinese-mobile-apps-over-to-data-security-risks/)
  - [ ] [Google Chrome Update Fixes 21 Flaws, Warns of Actively Exploited Vulnerability](https://thecyberexpress.com/chrome-stable-channel-update-security/)
  - [ ] [Da ENISA un nuovo framework per capire (davvero) il mercato della cyber security europea](https://www.cybersecurity360.it/news/da-enisa-un-nuovo-framework-per-capire-davvero-il-mercato-della-cyber-security-europea/)
  - [ ] [Hooking the Archipelago: Dissecting a Phishing Campaign Targeting Philippine Banking Users](https://www.group-ib.com/blog/phisles-phishing-banks-philippines/)
  - [ ] [Publishers Clearing House: Ransomware Attack, Bankruptcy, and the Collapse of Trust](https://www.suspectfile.com/publishers-clearing-house-ransomware-attack-bankruptcy-and-the-collapse-of-trust/)
  - [ ] [Google fixes fourth Chrome zero-day exploited in attacks in 2026](https://www.bleepingcomputer.com/news/security/google-fixes-fourth-chrome-zero-day-exploited-in-attacks-in-2026/)
  - [ ] [L’impero nascosto di Google mostra le debolezze dell’antitrust](https://www.guerredirete.it/impero-nascosto-di-google-mostra-debolezze-antitrust/)
  - [ ] [AI Startup Mercor Hit by Supply Chain Attack Linked to LiteLLM](https://thecyberexpress.com/mercor-cyberattack/)
  - [ ] [SUCCESS - 253,510 breached accounts](https://haveibeenpwned.com/Breach/SUCCESS)
  - [ ] [L’evoluzione globale del rischio cyber al tempo della guerra ibrida](https://www.cybersecurity360.it/outlook/levoluzione-del-rischio-cyber-a-livello-globale-al-tempo-della-guerra-ibrida/)
  - [ ] [Google Drive ransomware detection now on by default for paying users](https://www.bleepingcomputer.com/news/security/google-drive-ransomware-detection-now-on-by-default-for-paying-users/)
  - [ ] [North Korea’s Lazarus Group Behind the Axios npm Supply Chain Attack](https://thecyberexpress.com/lazarus-behind-axios-npm-supply-chain-attack/)
  - [ ] [A laughing RAT: CrystalX combines spyware, stealer, and prankware features](https://securelist.com/crystalx-rat-with-prankware-features/119283/)
  - [ ] [Hacked, Leaked, Public—What the Kash Patel Email Hack Is Really About](https://thecyberexpress.com/what-kash-patel-email-hack-is-really-about/)
  - [ ] [New Windows 11 emergency update fixes preview update install issues](https://www.bleepingcomputer.com/news/microsoft/new-windows-11-kb5086672-emergency-update-fixes-install-issues/)
  - [ ] [Claude Code source code accidentally leaked in NPM package](https://www.bleepingcomputer.com/news/artificial-intelligence/claude-code-source-code-accidentally-leaked-in-npm-package/)
- ICT Security Magazine
  - [ ] [I dilemmi della sovranità digitale](https://www.ictsecuritymagazine.com/notizie/dilemmi-sovranita-digitale/)
  - [ ] [Trump trasforma il cyberspazio in un dominio di guerra: cosa cambia per l’Europa e per l’Italia nel 2026](https://www.ictsecuritymagazine.com/notizie/trump-cyberspazio-guerra/)
  - [ ] [AiTM: come gli attaccanti bypassano la MFA nel 2026 e come difendersi](https://www.ictsecuritymagazine.com/notizie/aitm-attaccanti-mfa/)
- 360威胁情报中心
  - [ ] [Axios供应链攻击事件再追踪：线索直指Lazarus组织](https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247508249&idx=1&sn=d50892ac7b48a52ff293889bb77c800f)
- SANS Internet Storm Center, InfoCON: green
  - [ ] [Malicious Script That Gets Rid of ADS, (Wed, Apr 1st)](https://isc.sans.edu/diary/rss/32854)
  - [ ] [TeamPCP Supply Chain Campaign: Update 005 - First Confirmed Victim Disclosure, Post-Compromise Cloud Enumeration Documented, and Axios Attribution Narrows, (Wed, Apr 1st)](https://isc.sans.edu/diary/rss/32856)
  - [ ] [ISC Stormcast For Wednesday, April 1st, 2026 https://isc.sans.edu/podcastdetail/9874, (Wed, Apr 1st)](https://isc.sans.edu/diary/rss/32852)
- bellingcat
  - [ ] [Croatia’s Football Team Signed Deal With Gambling Sponsor Whose Rep Used Fake Name](https://www.bellingcat.com/news/2026/04/01/croatian-football-teams-deal-with-gambling-sponsor/)
- Dark Space Blogspot
  - [ ] [Ha Senso Investire In RAM e GPU? Principali Aziende AI](http://darkwhite666.blogspot.com/2026/04/ha-senso-investire-in-ram-e-gpu.html)
- Schneier on Security
  - [ ] [Is “Hackback” Official US Cybersecurity Strategy?](https://www.schneier.com/blog/archives/2026/04/is-hackback-official-us-cybersecurity-strategy.html)
  - [ ] [A Taxonomy of Cognitive Security](https://www.schneier.com/blog/archives/2026/04/a-taxonomy-of-cognitive-security.html)
- Lenny Zeltser
  - [ ] [Awareness Training Won't Protect Employees from Their Own AI Tools](https://zeltser.com/ai-influence-awareness-training)
- Desync InfoSec
  - [ ] [Rapid7深度剖析：BPFdoor内核级后门如何潜伏在电信网络中](https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489632&idx=1&sn=6200ce58db624337b9fb359fb0665db7)
  - [ ] [Axios 供应链攻击深度剖析：维护者账户被劫持，投毒版本植入跨平台 RAT](https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489632&idx=2&sn=d6f62be37a92f10ad580438803cb4ee0)
- The Hacker News
  - [ ] [CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails](https://thehackernews.com/2026/04/cert-ua-impersonation-campaign-spread.html)
  - [ ] [Microsoft Warns of WhatsApp-Delivered VBS Malware Hijacking Windows via UAC Bypass](https://thehackernews.com/2026/04/microsoft-warns-of-whatsapp-delivered.html)
  - [ ] [Block the Prompt, Not the Work: The End of "Doctor No"](https://thehackernews.com/2026/04/block-prompt-not-work-end-of-doctor-no.html)
  - [ ] [Casbaneiro Phishing Targets Latin America and Europe Using Dynamic PDF Lures](https://thehackernews.com/2026/04/casbaneiro-phishing-targets-latin.html)
  - [ ] [New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released](https://thehackernews.com/2026/04/new-chrome-zero-day-cve-2026-5281-under.html)
  - [ ] [3 Reasons Attackers Are Using Your Trusted Tools Against You (And Why You Don’t See It Coming)](https://thehackernews.com/2026/04/3-reasons-attackers-are-using-your.html)
  - [ ] [Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069](https://thehackernews.com/2026/04/google-attributes-axios-npm-supply.html)
  - [ ] [Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms](https://thehackernews.com/2026/04/claude-code-tleaked-via-npm-packaging.html)
- Deeplinks
  - [ ] [Digital Hopes, Real Power: From Revolution to Regulation](https://www.eff.org/deeplinks/2026/03/digital-hopes-real-power-revolution-regulation)
- TorrentFreak
  - [ ] [Google, Cloudflare, Cisco Lose Pirate Site DNS Blocking Appeal in France](https://torrentfreak.com/google-cloudflare-cisco-lose-pirate-site-dns-blocking-appeal-in-france/)
- LockBoxx
  - [ ] [On The Rise of AI Augmented Writing](http://lockboxx.blogspot.com/2026/04/on-rise-of-ai-augmented-writing.html)
- Have I Been Pwned latest breaches
  - [ ] [SUCCESS - 253,510 breached accounts](https://haveibeenpwned.com/Breach/SUCCESS)
- Computer Forensics
  - [ ] [Pre-emptive xref superposition analysis: detecting PDF modifications before file creation](https://www.reddit.com/r/computerforensics/comments/1s9dpa1/preemptive_xref_superposition_analysis_detecting/)
- Tor Project blog
  - [ ] [New Alpha Release: Tor Browser 16.0a5](https://blog.torproject.org/new-alpha-release-tor-browser-160a5/)
- Social Engineering
  - [ ] [Visualizing the "Foot-in-the-Door" technique: Does this accurately map the flow](https://www.reddit.com/r/SocialEngineering/comments/1s9udp2/visualizing_the_footinthedoor_technique_does_this/)
- Security Affairs
  - [ ] [U.S. CISA adds a flaw in Google Dawn to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/190282/security/u-s-cisa-adds-a-flaw-in-google-dawn-to-its-known-exploited-vulnerabilities-catalog.html)
  - [ ] [Google fixes fourth actively exploited Chrome zero-day of 2026](https://securityaffairs.com/190265/hacking/google-fixes-fourth-actively-exploited-chrome-zero-day-of-2026.html)
  - [ ] [Google links Axios npm supply chain attack to North Korea-linked APT UNC1069](https://securityaffairs.com/190256/security/google-links-axios-npm-supply-chain-attack-to-north-korea-linked-apt-unc1069.html)
  - [ ] [SentinelOne autonomous detection blocks trojaned LiteLLM triggered by Claude Code](https://securityaffairs.com/190248/security/sentinelone-autonomous-detection-blocks-trojaned-litellm-triggered-by-claude-code.html)
  - [ ] [Free VPNs leak your data while claiming privacy](https://securityaffairs.com/190239/security/free-vpns-leak-your-data-while-claiming-privacy.html)
- Technical Information Security Content & Discussion
  - [ ] [r/netsec monthly discussion & tool thread](https://www.reddit.com/r/netsec/comments/1s9kmf4/rnetsec_monthly_discussion_tool_thread/)
- Blackhat Library: Hacking techniques and research
  - [ ] [Apple Will Push Out Rare ‘Backported’ Patches to Protect iOS 18 Users From DarkSword Hacking Tool](https://www.reddit.com/r/blackhat/comments/1s95pcl/apple_will_push_out_rare_backported_patches_to/)
  - [ ] [Keyloggers which can read passwords in Android](https://www.reddit.com/r/blackhat/comments/1s95v76/keyloggers_which_can_read_passwords_in_android/)
- Deep Web
  - [ ] [Are these money transfer a scam?](https://www.reddit.com/r/deepweb/comments/1s94jqc/are_these_money_transfer_a_scam/)
- Information Security
  - [ ] [Cuties AI breach leaked 144k emails + NSFW prompts (sensitive)](https://www.reddit.com/r/Information_Security/comments/1s9kxvz/cuties_ai_breach_leaked_144k_emails_nsfw_prompts/)
  - [ ] [Mobile digital OSONT tool](https://www.reddit.com/r/Information_Security/comments/1s9es3f/mobile_digital_osont_tool/)
  - [ ] [VEN0m Ransomware — How a BYOVD technique using a signed IObit driver bypasses Defender (and what you can do about it)](https://www.reddit.com/r/Information_Security/comments/1s9eq7r/ven0m_ransomware_how_a_byovd_technique_using_a/)
  - [ ] [Building a swarm of AI agents to automate AppSec and OffSec work](https://www.reddit.com/r/Information_Security/comments/1s97rzq/building_a_swarm_of_ai_agents_to_automate_appsec/)
- netsecstudents: Subreddit for students studying Network Security and its related subjects
  - [ ] [WPA3 Hacking](https://www.reddit.com/r/netsecstudents/comments/1s9qmps/wpa3_hacking/)
- GRAHAM CLULEY
  - [ ] [Smashing Security podcast #461: This man hid $400 million in a fishing rod. Then it vanished](https://grahamcluley.com/smashing-security-podcast-461/)
  - [ ] [Alleged RedLine malware developer extradited to United States](https://www.bitdefender.com/en-us/blog/hotforsecurity/redline-malware-developer-extradited)
- The Register - Security
  - [ ] [Amazon security boss: AI makes pentesting 40% more efficient](https://go.theregister.com/feed/www.theregister.com/2026/04/01/amazon_security_boss_ai_efficiency/)
  - [ ] ['People's Panel' to check if UK wants controversial Digital ID will cost £630K](https://go.theregister.com/feed/www.theregister.com/2026/04/01/peoples_panel_digital_id/)
  - [ ] [UK manufacturers under cyber fire with 80% reporting attacks](https://go.theregister.com/feed/www.theregister.com/2026/04/01/uk_manufacturer_cyberattacks/)
- Your Open Hacker Community
  - [ ] [SQLmap alias for column](https://www.reddit.com/r/HowToHack/comments/1s9g6uv/sqlmap_alias_for_column/)
  - [ ] [Y’all anyone how I can hack because I low key have been trying I tried googling and looking at yt vids none of them worked yall](https://www.reddit.com/r/HowToHack/comments/1s9zpkc/yall_anyone_how_i_can_hack_because_i_low_key_have/)
  - [ ] [How do hackers use social security numbers?](https://www.reddit.com/r/HowToHack/comments/1s9vnok/how_do_hackers_use_social_security_numbers/)
  - [ ] [How do i actually hack a vending machine ?](https://www.reddit.com/r/HowToHack/comments/1s962w8/how_do_i_actually_hack_a_vending_machine/)
- 吾爱破解论坛
  - [ ] [【2026春节】全自动AI做题的实现及初8逆向AIAgent对话记录及wp](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651144181&idx=1&sn=0ca6b048e09a4f1a393512d597bc0d2e)
- Security Weekly Podcast Network (Audio)
  - [ ] [Executive Paralysis and Two Pre-Recorded RSAC 2026 Interviews from DigiCert and Okta - Amit Sinha, Ann Marie van den Hurk, Matt Immler - BSW #441](http://sites.libsyn.com/18678/executive-paralysis-and-two-pre-recorded-rsac-2026-interviews-from-digicert-and-okta-amit-sinha-ann-marie-van-den-hurk-matt-immler-bsw-441)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[每日信息流] 2026-04-02 #1196

每日安全资讯（2026-04-02）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2026-04-02 #1196

Description

每日安全资讯（2026-04-02）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions