[每日信息流] 2026-01-20

# 每日安全资讯（2026-01-20）

- 安全客-有思想的安全新媒体
  - [ ] [1340 亿美元豪赌：马斯克起诉 OpenAI，加州监管重拳同时砸向 xAI](https://www.anquanke.com/post/id/314365)
  - [ ] [CVE-2026-0695：ConnectWise PSA 2026.1 修复高危跨站脚本（XSS）漏洞](https://www.anquanke.com/post/id/314368)
  - [ ] [虚假生产力工具：5 款恶意 Chrome 扩展劫持企业会话](https://www.anquanke.com/post/id/314370)
  - [ ] [未修补的远程代码执行漏洞：Livewire Filemanager 文件上传缺陷（CVE-2025-14894）影响 Laravel 应用](https://www.anquanke.com/post/id/314374)
  - [ ] [Deno 高危漏洞可导致密钥泄露（CVE-2026-22863）与代码执行（CVE-2026-22864）](https://www.anquanke.com/post/id/314377)
  - [ ] [2026 年会迎来微芯片植入的 “ChatGPT 时刻” 吗？](https://www.anquanke.com/post/id/314380)
  - [ ] [大规模清理行动：X 平台禁用 “信息金融”，彻底打击 AI 生成的加密垃圾帖](https://www.anquanke.com/post/id/314383)
  - [ ] [五款恶意 Chrome 扩展程序伪装成 Workday 与 NetSuite 以劫持账户](https://www.anquanke.com/post/id/314386)
  - [ ] [AI 系统将攻击重建时间从数周缩短至数小时](https://www.anquanke.com/post/id/314389)
  - [ ] [OpenStack 管理员权限伪造漏洞：CVE-2026-22797 允许用户 “申请” root 权限](https://www.anquanke.com/post/id/314392)
- SecWiki News
  - [ ] [SecWiki News 2026-01-19 Review](http://www.sec-wiki.com/?2026-01-19)
- Private Feed for M09Ic
  - [ ] [kpcyrd contributed to swhid/swhid-rs](https://github.com/swhid/swhid-rs/pull/30)
  - [ ] [kpcyrd forked kpcyrd/swhid-rs from swhid/swhid-rs](https://github.com/kpcyrd/swhid-rs)
  - [ ] [mgeeky starred preludeorg/ThreatIntelligenceConsumer](https://github.com/preludeorg/ThreatIntelligenceConsumer)
  - [ ] [oiweiwei released v1.2.14 at oiweiwei/go-msrpc](https://github.com/oiweiwei/go-msrpc/releases/tag/v1.2.14)
  - [ ] [kpcyrd contributed to kpcyrd/repro-threshold](https://github.com/kpcyrd/repro-threshold/pull/1)
  - [ ] [TideSec starred SourByte05/Vulnerability-Wiki-PoC](https://github.com/SourByte05/Vulnerability-Wiki-PoC)
  - [ ] [OpenAEV-Platform released 2.0.12 at OpenAEV-Platform/openaev](https://github.com/OpenAEV-Platform/openaev/releases/tag/2.0.12)
  - [ ] [mgeeky starred SiriusScan/Sirius](https://github.com/SiriusScan/Sirius)
  - [ ] [zema1 starred konoui/lipo](https://github.com/konoui/lipo)
  - [ ] [niudaii starred whitzard-ai/jade-db](https://github.com/whitzard-ai/jade-db)
  - [ ] [mgeeky starred CyberSecurityUP/n8n-CyberSecurity-Workflows](https://github.com/CyberSecurityUP/n8n-CyberSecurity-Workflows)
  - [ ] [PrefectHQ released 3.6.12.dev4 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.6.12.dev4)
  - [ ] [gh0stkey starred vercel-labs/json-render](https://github.com/vercel-labs/json-render)
  - [ ] [timwhitez starred firecracker-microvm/firecracker](https://github.com/firecracker-microvm/firecracker)
  - [ ] [gh0stkey starred 21st-dev/1code](https://github.com/21st-dev/1code)
  - [ ] [usestrix released v0.6.2 at usestrix/strix](https://github.com/usestrix/strix/releases/tag/v0.6.2)
  - [ ] [gh0stkey starred GongRzhe/Office-Word-MCP-Server](https://github.com/GongRzhe/Office-Word-MCP-Server)
  - [ ] [rabbitmask starred dyndynjyxa/aio-coding-hub](https://github.com/dyndynjyxa/aio-coding-hub)
  - [ ] [mgeeky starred karol-broda/snitch](https://github.com/karol-broda/snitch)
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  - [ ] [梆梆安全泰防实验室获评2025网安“金帽子”年度优秀团队品牌，以技术实力护航智能网联汽车安全](https://www.4hou.com/posts/vwPL)
  - [ ] [具身智能机器人：当养老遇上科技，温暖与风险并存的新时代](https://www.4hou.com/posts/wxQg)
  - [ ] [实力双认证｜梆梆安全荣获CCIA2025优秀会员单位，两款产品入选《网专指南》](https://www.4hou.com/posts/OGmQ)
  - [ ] [GoBruteforcer 僵尸网络新攻势：利用AI生成配置漏洞 瞄准加密货币数据库](https://www.4hou.com/posts/nl2Y)
- Doonsec's feed
  - [ ] [2026年国家自然科学基金安全领域部分题目列表](https://mp.weixin.qq.com/s/l9qimiU9qF_jU2DewxWncA)
  - [ ] [接口泄露到任意账号登录](https://mp.weixin.qq.com/s/C0Y7EZTvH_tnES5JmPPTew)
  - [ ] [组里有个技术大牛，喜欢搞黑科技，自己封装了一套极其复杂的“万能工具类”，全组都在用。他离职后，这套工具类出了Bug，根本没人敢动](https://mp.weixin.qq.com/s/fCUhTMoBomhP1G3Drww3jA)
  - [ ] [Jolla Phone & Sailfish OS 5：一部能真正 “闭嘴” 的手机](https://mp.weixin.qq.com/s/YKMFmaGCw6dwwZee4Xyawg)
  - [ ] [吃瓜现场：前男友用抖音小号约妹，借口竟说在“挖漏洞”？](https://mp.weixin.qq.com/s/nflXSF9y7FE0A5n-uHQOHg)
  - [ ] [「吃瓜」前男友抖音小号约妹，借口：我在挖漏洞？](https://mp.weixin.qq.com/s/PoY5WKNoLMfdL5GrkGTOZA)
  - [ ] [【安卓】Termux-X——移动端渗透终端模拟器应用](https://mp.weixin.qq.com/s/yoqSgsnRJ7cC_usJ0UmEyg)
  - [ ] [分布式日志分析与入侵检测系统 - LogVision](https://mp.weixin.qq.com/s/yC4yx6yX9rJl0UP8XqPwSw)
  - [ ] [一文讲清：Hadoop集群到底该用JBOD还是 RAID？](https://mp.weixin.qq.com/s/j_b5NTku_tnhUfXAR8JppA)
  - [ ] [EsnInfoSec: Chat - 群组话题与论坛授权ID|26/01/19日](https://mp.weixin.qq.com/s/ksvYfP7qAmLtzCvzQPGfMA)
  - [ ] [做AI的驾驶员](https://mp.weixin.qq.com/s/qimNCzPw_fZddph7y69LGg)
  - [ ] [阿里云waf-bypass-mssql](https://mp.weixin.qq.com/s/I5l7RhhFPE96zTQld9nwkw)
  - [ ] [Langflow RCE(CVE-2025-3248)](https://mp.weixin.qq.com/s/yoODAYM6m3H1jjMrmThJYA)
  - [ ] [利用ai逆向js爽挣1500](https://mp.weixin.qq.com/s/XXtuRKhjMCJ-gLAvLRkrUQ)
  - [ ] [手把手教你成为白帽黑客!Web架构基础（上）](https://mp.weixin.qq.com/s/G8JBVIp__ef_5jmzK38GQg)
  - [ ] [从开赌场到盗窃 网安工程师涉案罪名三改](https://mp.weixin.qq.com/s/Z0_bfhmpBAgQueHBoYpY_w)
  - [ ] [【渗透实战系列】|56-海康安防后渗透利用分析](https://mp.weixin.qq.com/s/FHoodSPyiCNJl1RssCYk4Q)
  - [ ] [利用 GEO ！暴力收割生成式引擎 40% 流量！](https://mp.weixin.qq.com/s/1TH-vZBzvnRKM3k5-F_M-g)
  - [ ] [【网络安全】鸿蒙6应用网络抓包的高阶技巧与实践](https://mp.weixin.qq.com/s/7K26y_AZ1Su4mrxMSgMJSA)
  - [ ] [此仓库包含针对易受攻击的 Windows 驱动程序的概念验证 (PoC)](https://mp.weixin.qq.com/s/lXSKSNtqKNoRvtRrYFHkOA)
  - [ ] [CVE-2026-23745：node-tar 任意文件覆盖](https://mp.weixin.qq.com/s/j_T9iaGY1oq46mSnvK_rOg)
  - [ ] [AI自动化代码审计RCE](https://mp.weixin.qq.com/s/AnbKnyQkt7sz51zyxTOUiw)
  - [ ] [内网渗透体系建设指南：从 0 到 1 搭建，小白也能看懂！](https://mp.weixin.qq.com/s/nPmzQVTQHaPDMZLQAEuOdw)
  - [ ] [G.O.S.S.I.P 阅读推荐 2026-01-19 LibSig](https://mp.weixin.qq.com/s/DEabwHu6q18UkBhhnu5uEg)
  - [ ] [【情报】台湾无人机企业汇总分析](https://mp.weixin.qq.com/s/AQuF9Tkdrujy6g4IwoidHw)
  - [ ] [社招 | 中银金融科技招聘网络安全岗（上海/北京/雄安）](https://mp.weixin.qq.com/s/gpor_mbqRKe6loJcTJdJ8w)
  - [ ] [【工业控制系统网络安全系列课程】第1课-ICS组网基础](https://mp.weixin.qq.com/s/40t_sjYW0MbaZe5JbXhshg)
  - [ ] [表情符号攻击：LLM 安全防线的隐蔽威胁](https://mp.weixin.qq.com/s/oMzoGSqlOxQ3ZFYvYlaGVw)
  - [ ] [【好靶场】云安全专场-WP](https://mp.weixin.qq.com/s/HiGlt_27wdKU8GZoSS8sSA)
  - [ ] [Mythic 后渗透框架分析](https://mp.weixin.qq.com/s/aY7olvMR5wlkjcjeKQSPog)
  - [ ] [代码审计之XXE与SSRF与Struts2审计案例](https://mp.weixin.qq.com/s/BUcNCx9qHVwroobniFFB3A)
  - [ ] [精细化监管：《互联网应用程序个人信息收集使用规定（征）》实务要点解读](https://mp.weixin.qq.com/s/sgNZd0ctYjJFHw-7k-rp8g)
  - [ ] [代码审计之SpringBoot_Servlet_MVC框架](https://mp.weixin.qq.com/s/6GX4vUt_Xh0mEvoYPAcylQ)
  - [ ] [可私有化部署！国产 IoT 物联网平台，兼容 MQTT、Modbus、OPC、PLC设备协议、消息路由、数据存储和分析、Web可视化大屏](https://mp.weixin.qq.com/s/w41krQcomS0woM3BF6E61Q)
  - [ ] [Path哨兵 - 哨兵系列第三弹](https://mp.weixin.qq.com/s/TR_WruOgdlfL5FkyE4N9Gg)
  - [ ] [代码审计之Servlet与SpringBoot与shiro的鉴权机制](https://mp.weixin.qq.com/s/yz9QYEAQ4Uwlp1tnjyuPTA)
  - [ ] [Windows SMB 客户端漏洞使攻击者拥有 Active Directory](https://mp.weixin.qq.com/s/czIlh7tQrNqXTdayQqbe1A)
  - [ ] [JAVA安全之RMI注入与攻击方式](https://mp.weixin.qq.com/s/_4pc6gQQDVOdGmWotnV6yQ)
  - [ ] [【干货】讲透SPF、DKIM和DMARC属性](https://mp.weixin.qq.com/s/TjgOlegpFXdvCvEppTs1iQ)
  - [ ] [2023陇剑杯半决赛&决赛-流量分析](https://mp.weixin.qq.com/s/Hv3cLpjk3UKGf_qKG_BtPA)
  - [ ] [今天大家聊得起劲](https://mp.weixin.qq.com/s/caJok2K14U-TMYUlDLlhlg)
  - [ ] [网络空间安全知识选择题100题和填空题56题](https://mp.weixin.qq.com/s/Ah0SHYvAESYA0yieQa4I9g)
  - [ ] [【AI安全】利用 GEO 框架！暴力收割生成式引擎 40% 流量！](https://mp.weixin.qq.com/s/Bi0EGnCepzyA_WcLf5mDfw)
  - [ ] [Langflow远程代码执行漏洞（CVE-2025-3248）](https://mp.weixin.qq.com/s/ceYfAtd_8nK_R5owDQtV9Q)
  - [ ] [微软2026年1月安全更新导致远程桌面连接凭据提示失败](https://mp.weixin.qq.com/s/E6m5Nbt4W6mm1HOgfk-J_A)
  - [ ] [CNNVD：人工智能重要漏洞通报（2026年第一期）](https://mp.weixin.qq.com/s/wm4nZKidPnrlfrCrL3mEHg)
  - [ ] [正义不再“排队”！下一代电子数据取证鉴定实验室，正加速向我们走来！](https://mp.weixin.qq.com/s/0XmlEc5IsCMBWndSDce3KA)
  - [ ] [2025平航杯wp（计算机+AI+手机）](https://mp.weixin.qq.com/s/9Fr4jQq0vaOJQkHkxLI51Q)
- Recent Commits to cve:main
  - [ ] [Update Mon Jan 19 11:38:55 UTC 2026](https://github.com/trickest/cve/commit/5625229235be7f9bad38460f911811eaaa19f753)
- 奇安信攻防社区
  - [ ] [重塑传统自动化漏洞挖掘的Multi-Agent框架攻防一体化实践](https://forum.butian.net/share/4719)
- Malwarebytes
  - [ ] [Firefox joins Chrome and Edge as sleeper extensions spy on users](https://www.malwarebytes.com/blog/news/2026/01/firefox-joins-chrome-and-edge-as-sleeper-extensions-spy-on-users)
  - [ ] [A week in security (January 12 &#8211; January 18)](https://www.malwarebytes.com/blog/news/2026/01/a-week-in-security-january-12-january-18)
- daniel.haxx.se
  - [ ] [Now with MQTTS](https://daniel.haxx.se/blog/2026/01/19/now-with-mqtts/)
- Reverse Engineering
  - [ ] [/r/ReverseEngineering's Weekly Questions Thread](https://www.reddit.com/r/ReverseEngineering/comments/1qgy919/rreverseengineerings_weekly_questions_thread/)
  - [ ] [Frida 17.6.0 released – reworked Android Zygote instrumentation, Android 16 support](https://www.reddit.com/r/ReverseEngineering/comments/1qh7bpw/frida_1760_released_reworked_android_zygote/)
  - [ ] [Where can i get a cracked version of HexRays decompiler? Just delete this post if im not allowed to ask this.](https://www.reddit.com/r/ReverseEngineering/comments/1qhfpw8/where_can_i_get_a_cracked_version_of_hexrays/)
- HackerNews
  - [ ] [加拿大投资行业监管组织发生数据泄露，75 万投资者受影响](https://hackernews.cc/archives/62311)
  - [ ] [CodeBuild 配置缺陷令 AWS 控制台供应链面临风险](https://hackernews.cc/archives/62308)
  - [ ] [StealC 黑客反遭黑，研究人员劫持恶意软件控制面板](https://hackernews.cc/archives/62306)
  - [ ] [GOOTLOADER 利用畸形 ZIP 文件绕过安全控制](https://hackernews.cc/archives/62304)
  - [ ] [黑客劫持伊朗国家电视台，播放反政府信息以及礼萨·巴列维的抗议呼吁](https://hackernews.cc/archives/62302)
- 奇客Solidot–传递最新科技情报
  - [ ] [近三分之一的社媒研究有着未披露的利益关联](https://www.solidot.org/story?sid=83345)
  - [ ] [中国开源 AI 模型占全球份额的 15%](https://www.solidot.org/story?sid=83344)
  - [ ] [数据中心将在 2026 年消耗内存产量的七成](https://www.solidot.org/story?sid=83343)
  - [ ] [伊朗对互联网的封锁进入第 12 天](https://www.solidot.org/story?sid=83342)
  - [ ] [保时捷 2025 年在欧洲卖出的电车比油车多](https://www.solidot.org/story?sid=83341)
  - [ ] [微软释出紧急更新修复无法关机的 Bug](https://www.solidot.org/story?sid=83340)
  - [ ] [2025 年出生人口低于 800 万](https://www.solidot.org/story?sid=83339)
  - [ ] [美国出生率下降冲击大学](https://www.solidot.org/story?sid=83338)
- 赵武的自留地
  - [ ] [做AI的驾驶员](https://mp.weixin.qq.com/s?__biz=MjM5NDQ5NjM5NQ==&mid=2651626459&idx=1&sn=03f6441c4e0fdfc77f305866959eb88b)
- 黑海洋Wiki | Web开发工具包 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台
  - [ ] [IMF报告警告：若AI热潮失速 全球经济韧性将受考验](https://blog.upx8.com/IMF%E6%8A%A5%E5%91%8A%E8%AD%A6%E5%91%8A-%E8%8B%A5AI%E7%83%AD%E6%BD%AE%E5%A4%B1%E9%80%9F-%E5%85%A8%E7%90%83%E7%BB%8F%E6%B5%8E%E9%9F%A7%E6%80%A7%E5%B0%86%E5%8F%97%E8%80%83%E9%AA%8C)
  - [ ] [OpenAI首款硬件设备有望于今年下半年亮相](https://blog.upx8.com/OpenAI%E9%A6%96%E6%AC%BE%E7%A1%AC%E4%BB%B6%E8%AE%BE%E5%A4%87%E6%9C%89%E6%9C%9B%E4%BA%8E%E4%BB%8A%E5%B9%B4%E4%B8%8B%E5%8D%8A%E5%B9%B4%E4%BA%AE%E7%9B%B8)
  - [ ] [纽交所将打造全天候交易代币化股票和ETF的平台](https://blog.upx8.com/%E7%BA%BD%E4%BA%A4%E6%89%80%E5%B0%86%E6%89%93%E9%80%A0%E5%85%A8%E5%A4%A9%E5%80%99%E4%BA%A4%E6%98%93%E4%BB%A3%E5%B8%81%E5%8C%96%E8%82%A1%E7%A5%A8%E5%92%8CETF%E7%9A%84%E5%B9%B3%E5%8F%B0)
  - [ ] [日本电脑市场显现涨价趋势 存储器价格大涨推高成本](https://blog.upx8.com/%E6%97%A5%E6%9C%AC%E7%94%B5%E8%84%91%E5%B8%82%E5%9C%BA%E6%98%BE%E7%8E%B0%E6%B6%A8%E4%BB%B7%E8%B6%8B%E5%8A%BF-%E5%AD%98%E5%82%A8%E5%99%A8%E4%BB%B7%E6%A0%BC%E5%A4%A7%E6%B6%A8%E6%8E%A8%E9%AB%98%E6%88%90%E6%9C%AC)
  - [ ] [“大空头”放话：AI繁荣即将转为长期低迷](https://blog.upx8.com/%E5%A4%A7%E7%A9%BA%E5%A4%B4-%E6%94%BE%E8%AF%9D-AI%E7%B9%81%E8%8D%A3%E5%8D%B3%E5%B0%86%E8%BD%AC%E4%B8%BA%E9%95%BF%E6%9C%9F%E4%BD%8E%E8%BF%B7)
- 安全分析与研究
  - [ ] [针对某黑产远控木马样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247495386&idx=1&sn=dab96faaee4a9bbbc2f53f515b2b18e3)
- 腾讯玄武实验室
  - [ ] [每日安全动态推送(26/1/19)](https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960360&idx=1&sn=f5f2e8349c82e549013eac597dee123a)
- 黑鸟
  - [ ] [Jolla Phone & Sailfish OS 5：一部能真正 “闭嘴” 的手机](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451184879&idx=1&sn=00994aba4a11b92e2be9ea8bdd4baada)
- 安全客
  - [ ] [Promptware：新兴AI攻击威胁与五步杀伤链分析](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789621&idx=1&sn=d5f11dfa319b3471e1c14e45e8a11b9b)
- 代码卫士
  - [ ] [Glibc 修复高危堆损坏和已存在数十年的信息泄露漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524913&idx=1&sn=8f401332b3245f7cccbc382a184094e2)
  - [ ] [严重的FortiSIEM漏洞已遭利用](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524913&idx=2&sn=02e06fbe27ab50566ac1d367922f44b7)
- 看雪学苑
  - [ ] [用奥卡姆剃刀解决 ollvm 间接跳转和函数调用](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608330&idx=1&sn=a463f3535ad02ff994654b39fb867a00)
  - [ ] [横跨数十年的漏洞与新型堆破坏：glibc 重大安全缺陷曝光](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608330&idx=2&sn=db978609e85f81923fdb2003165acdb3)
  - [ ] [本周更新3课时！《零基础学习网络安全》：大佬手把手教学，不怕学不会！](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608330&idx=3&sn=47f8edb048ac95ca1fa9a28f99d11fe5)
- 青衣十三楼飞花堂
  - [ ] [孩子这是你的家，红砖碧瓦](https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488977&idx=1&sn=c5c47061e6a758f6761bdbb09ca060c4)
- 安全内参
  - [ ] [泄露数百万患者的用药数据，药房巨头赔偿超3600万元](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515474&idx=1&sn=9fbf7c6a2b09e3eb2953c271c7aaddf5)
  - [ ] [世界经济论坛发布《2026年全球网络安全展望》](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515474&idx=2&sn=84ec2a43943d2f5241c0fbadc27af837)
- 安全研究GoSSIP
  - [ ] [G.O.S.S.I.P 阅读推荐 2026-01-19 LibSig](https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501299&idx=1&sn=ca2690eefd52dfabaac097ccb5c16cbb)
- 天御攻防实验室
  - [ ] [“绝对决心行动”奠定破坏性网络作战的常规军事角色](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486685&idx=1&sn=82c0af0873f0b90662e735789c9702e2)
- 威胁棱镜
  - [ ] [高级持续性威胁十年嬗变](https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247488173&idx=1&sn=e6b47ad9109ca245a83ab8670c91b61e)
- 安全圈
  - [ ] [【安全圈】苹果督促用户更新 iPhone 高危漏洞](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073786&idx=1&sn=651dca9c8e72b03014a22b79574bf873)
  - [ ] [【安全圈】全球恶意广告劫持DNS漏洞，日均欺诈百万用户](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073786&idx=2&sn=a05dc4ac75eeb1922cbaac6a8bce9ee9)
  - [ ] [【安全圈】Deno 曝出高危漏洞（CVE-2026-22863 和 CVE-2026-22864）可导致密钥泄露与任意代码执行](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073786&idx=3&sn=c8f4af29c23aa47e5266e6d73a79b296)
  - [ ] [【安全圈】加拿大投资行业监管组织发生数据泄露，75 万投资者受影响](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073786&idx=4&sn=ca42fbe423ff930de9054a2d63e95baa)
- 二道情报贩子
  - [ ] [从开赌场到盗窃 网安工程师涉案罪名三改](https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489988&idx=1&sn=8f67e23bbfdc90a0adde84a13f7d1a40)
- 威努特安全网络
  - [ ] [四部门发文，加速汽车行业数字化转型](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651139662&idx=1&sn=f36f341cb8b2dfdef0f824ffc87c2c00)
- 中国信息安全
  - [ ] [前沿 | 构建网络空间命运共同体背景下我国数据法治面临的挑战与应对策略](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257613&idx=1&sn=777651a0a0dd8b1e232a848b0addd8ee)
  - [ ] [专家解读 | 王钦敏：统筹发展电子政务 以信息化推进国家治理体系和治理能力现代化](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257613&idx=2&sn=92c890ab65db60e9de660392041ccc9c)
  - [ ] [聚焦 | 世界经济论坛发布《2026年全球网络安全展望》报告——网络欺诈成全球数字经济最大威胁](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257613&idx=3&sn=3f6b8d8fcb7be1d75a3d42058fe074d1)
  - [ ] [评论 | 黑名单助力净化直播电商生态](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257613&idx=4&sn=68cb7b0ec3b90d0d8bbb8cfae0780c4c)
- 极客公园
  - [ ] [字节扣子 2.0 发布，我们深挖了它这两年的生长真相](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653097480&idx=1&sn=a8ef5c0fe2a0e8e2acc38f8e0cef47f8)
  - [ ] [中国互联网大厂的 AI 时代船票争夺战已经开始了](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653097478&idx=1&sn=663a7e2c94201641285a36205890a223)
  - [ ] [深度解读｜为什么飞书和安克要联合发布一个随身录音设备？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653097432&idx=1&sn=554ba92c4310c87e2977773e916559d3)
- 安全牛
  - [ ] [AI“惹祸”谁来买单？从Air Canada到Deepfake诈骗，网安保险规则正在重写](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140170&idx=1&sn=ef87c68d66168d4b856498b35f0542b5)
  - [ ] [《AI时代SSL/TLS证书安全及管理技术应用指南》调研启动](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140170&idx=2&sn=215ca817e64639db63889a0b4585c460)
- 数世咨询
  - [ ] [2026 AI安全十大预测发布：提示注入成首要威胁，全球进入“AI原生”防御元年](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541513&idx=1&sn=e137b32a4cac272a01475a7abb1f6760)
- 电子物证
  - [ ] [【婚姻关系中的电子取证】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048896&idx=1&sn=3a3ac54df292ce6da4eacd36d285e12c)
  - [ ] [【毒品案件电子数据的运用、审查与质证】](https://mp.weixin.qq.com/s?__biz=MzAwNDcwMDgzMA==&mid=2651048896&idx=2&sn=17a1f6d70f2482149d31f66661d7e69c)
- 嘶吼专业版
  - [ ] [GoBruteforcer僵尸网络新攻势：利用AI生成配置漏洞 瞄准加密货币数据库](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586404&idx=1&sn=76433e88c0fab00b3b85829927154758)
  - [ ] [工信部：网络和数据安全治理能力有效提升](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586404&idx=2&sn=dee63c752f2d539b742d581cead285a7)
- 阿里安全响应中心
  - [ ] [开年首测｜菜鸟业务奖金翻倍“马”上兑现！](https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998542&idx=1&sn=79422c4481b1c9cc3e3e5fca328fbc27)
- 丁爸 情报分析师的工具箱
  - [ ] [【情报】台湾无人机企业汇总分析](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651153849&idx=1&sn=69f8fa04a5950a694f5d70be7e38c193)
- 情报分析师
  - [ ] [开源情报如何锁定跨国毒枭嫌疑人的网络足迹](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650566390&idx=1&sn=66f231977d013b77b84c266c59a83668)
  - [ ] [蒙古国“第三邻国政策”：大国博弈下的生存艺术解密](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650566390&idx=2&sn=c7cd865a65133dd423134d0cac4ac364)
- 威胁猎人Threat Hunter
  - [ ] [【黑产大数据】2025年信贷欺诈风险年度研究报告](https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247502403&idx=1&sn=a07a60a0419b2a479cc6eee2fcb7588a)
- 字节跳动技术团队
  - [ ] [扣子 2.0，让 Agent 更进一步](https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247517978&idx=1&sn=f84abb409d081bcff9aa0fd841631303)
- 安全419
  - [ ] [《9问CEO》 | 易安联正权：零信任赛道回归理性 稳中求进布局未来](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247552126&idx=1&sn=73a2cabe909254d5c10a5b09330cc97e)
- CNVD漏洞平台
  - [ ] [CNVD漏洞周报2026年第2期](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496648&idx=1&sn=01d8d7fdffebef6f4bd46e5bc28e0e68)
  - [ ] [上周关注度较高的产品安全漏洞(20260112-20260118)](https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496648&idx=2&sn=b3ab5466e4b6c25034f4be202ab758e9)
- 云鼎实验室
  - [ ] [腾讯云入选Gartner® AI安全测试领域代表性供应商](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497151&idx=1&sn=3a1e938b891f9ee1e3ff14d5f8cd6b68)
  - [ ] [腾讯安全态势研究：2025年度云上网络攻击态势报告](https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497151&idx=2&sn=97f01493a675f40a8d452a7d5379326f)
- Over Security - Cybersecurity news aggregator
  - [ ] [Fake ad blocker extension crashes the browser for ClickFix attacks](https://www.bleepingcomputer.com/news/security/fake-ad-blocker-extension-crashes-the-browser-for-clickfix-attacks/)
  - [ ] [New PDFSider Windows malware deployed on Fortune 100 firm's network](https://www.bleepingcomputer.com/news/security/new-pdfsider-windows-malware-deployed-on-fortune-100-firms-network/)
  - [ ] [Raaga - 10,225,145 breached accounts](https://haveibeenpwned.com/Breach/Raaga)
  - [ ] [UK govt. warns about ongoing Russian hacktivist group attacks](https://www.bleepingcomputer.com/news/security/uk-govt-warns-about-ongoing-russian-hacktivist-group-attacks/)
  - [ ] [Hacker admits to leaking stolen Supreme Court data on Instagram](https://www.bleepingcomputer.com/news/security/hacker-admits-to-leaking-stolen-supreme-court-data-on-instagram/)
  - [ ] [Piattaforme di criptovalute: fra opacità e tracciabilità, gli ostacoli per il contrasto alle truffe](https://www.cybersecurity360.it/nuove-minacce/piattaforme-di-criptovalute-fra-opacita-e-tracciabilita-gli-ostacoli-per-il-contrasto-alle-truffe/)
  - [ ] [Il Dns come asset strategico di sicurezza](https://www.cybersecurity360.it/soluzioni-aziendali/il-dns-come-asset-strategico-di-sicurezza/)
  - [ ] [Oltre le dimissioni di un componente del Garante privacy: le 4 opzioni in gioco](https://www.cybersecurity360.it/legal/privacy-dati-personali/oltre-le-dimissioni-di-un-componente-del-garante-privacy-le-4-opzioni-in-gioco/)
  - [ ] [Jordanian pleads guilty to selling access to 50 corporate networks](https://www.bleepingcomputer.com/news/security/jordanian-pleads-guilty-to-selling-access-to-50-corporate-networks/)
  - [ ] [1-15 January 2026 Cyber Attacks Timeline](https://www.hackmageddon.com/2026/01/19/1-15-january-2026-cyber-attacks-timeline/)
  - [ ] [Iranian state TV feed reportedly hijacked to air anti-regime messages](https://therecord.media/iran-state-television-reported-hack-opposition)
  - [ ] [Ingram Micro says ransomware attack affected 42,000 people](https://www.bleepingcomputer.com/news/security/ingram-micro-says-ransomware-attack-affected-42-000-people/)
  - [ ] [Il caso OVHcloud e l’illusione della sovranità dei dati](https://www.cybersecurity360.it/legal/privacy-dati-personali/il-caso-ovhcloud-e-lillusione-della-sovranita-dei-dati/)
  - [ ] [deVixor: An Evolving Android Banking RAT with Ransomware Capabilities Targeting Iran](https://cyble.com/blog/devixor-android-banking-rat-ransomware-iran/)
  - [ ] [Nuova campagna di phishing a tema SPID sfrutta Google Sites](https://cert-agid.gov.it/news/nuova-campagna-di-phishing-a-tema-spid-sfrutta-google-sites/)
  - [ ] [OpenAI hostname hints at a new ChatGPT feature codenamed "Sonata"](https://www.bleepingcomputer.com/news/artificial-intelligence/openai-hostname-hints-at-a-new-chatgpt-feature-codenamed-sonata/)
  - [ ] [Dall’entusiasmo all’adozione strategica: un framework per la maturità dei sistemi IA](https://www.cybersecurity360.it/soluzioni-aziendali/dallentusiasmo-alladozione-strategica-un-frameworkper-la-maturita-dei-sistemi-ia/)
  - [ ] [CERT-AGID 10-16 gennaio: ancora phishing PagoPA e nuovi malware bancari](https://www.securityinfo.it/2026/01/19/cert-agid-10-16-gennaio-phishing-pagopa-malware-bancari/)
  - [ ] [New OpenAI leak hints at upcoming ChatGPT features](https://www.bleepingcomputer.com/news/artificial-intelligence/new-openai-leak-hints-at-upcoming-chatgpt-features/)
- Have I Been Pwned latest breaches
  - [ ] [Raaga - 10,225,145 breached accounts](https://haveibeenpwned.com/Breach/Raaga)
- ICT Security Magazine
  - [ ] [Il metaverso per la salute mentale](https://www.ictsecuritymagazine.com/articoli/metaverso-salute-mentale/)
- Securityinfo.it
  - [ ] [CERT-AGID 10-16 gennaio: ancora phishing PagoPA e nuovi malware bancari](https://www.securityinfo.it/2026/01/19/cert-agid-10-16-gennaio-phishing-pagopa-malware-bancari/?utm_source=rss&utm_medium=rss&utm_campaign=cert-agid-10-16-gennaio-phishing-pagopa-malware-bancari)
- Schneier on Security
  - [ ] [AI-Powered Surveillance in Schools](https://www.schneier.com/blog/archives/2026/01/ai-powered-surveillance-in-schools.html)
- Instapaper: Unread
  - [ ] [Firefox joins Chrome and Edge as sleeper extensions spy on users](https://www.malwarebytes.com/blog/news/2026/01/firefox-joins-chrome-and-edge-as-sleeper-extensions-spy-on-users)
  - [ ] [Proc Filesystem](https://andreafortuna.org/2026/01/19/proc-filesystem.html)
  - [ ] [I dispositivi audio che usate tutti i giorni potrebbero avere un gravissimo problema di sicurezza. Ecco come risolverlo](https://www.wired.it/article/dispositivi-audio-bluetooth-falla-sicurezza-fast-pair-come-risolverla/)
  - [ ] [Everything is a Proxy if You Try Hard Enough- Old RFCs, New Exploits | Ken Pyle](https://www.youtube.com/watch?v=gGDrtN3rtxY)
  - [ ] [The Death of Physical Imaging Understanding the New Standard in Mac Forensics](https://sumuri.com/the-death-of-physical-imaging-understanding-the-new-standard-in-mac-forensics/)
  - [ ] [39C3 - Suing spyware in Europe news from the front!](https://www.youtube.com/watch?v=cAemJTHckN4)
  - [ ] [39C3 - DNGerousLINK A Deep Dive into WhatsApp 0-Click Exploits on iOS and Samsung Devices](https://www.youtube.com/watch?v=cbSgKmLA1AI)
  - [ ] [The power of Portable Case Unleashing evidence discovery for all investigators](https://www.magnetforensics.com/blog/the-power-of-portable-case-unleashing-evidence-discovery-for-all-investigators/)
  - [ ] [Memory Forensics Beyond the Endpoint Volatile Evidence in Modern Cloud and Edge Environments](https://paraben.com/memory-forensics-beyond-the-endpoint-volatile-evidence-in-modern-cloud-and-edge-environments/)
  - [ ] [Interactive Replays of Conversations A New Tool](https://zeltser.com/interactive-replays)
- HACKMAGEDDON
  - [ ] [1-15 January 2026 Cyber Attacks Timeline](https://www.hackmageddon.com/2026/01/19/1-15-january-2026-cyber-attacks-timeline/)
- The Hacker News
  - [ ] [Google Gemini Prompt Injection Flaw Exposed Private Calendar Data via Malicious Invites](https://thehackernews.com/2026/01/google-gemini-prompt-injection-flaw.html)
  - [ ] [⚡ Weekly Recap: Fortinet Exploits, RedLine Clipjack, NTLM Crack, Copilot Attack & More](https://thehackernews.com/2026/01/weekly-recap-fortinet-exploits-redline.html)
  - [ ] [DevOps & SaaS Downtime: The High (and Hidden) Costs for Cloud-First Businesses](https://thehackernews.com/2026/01/high-costs-of-devops-saas-downtime.html)
  - [ ] [New StackWarp Hardware Flaw Breaks AMD SEV-SNP Protections on Zen 1–5 CPUs](https://thehackernews.com/2026/01/new-stackwarp-hardware-flaw-breaks-amd.html)
  - [ ] [CrashFix Chrome Extension Delivers ModeloRAT Using ClickFix-Style Browser Crash Lures](https://thehackernews.com/2026/01/crashfix-chrome-extension-delivers.html)
  - [ ] [Security Bug in StealC Malware Panel Let Researchers Spy on Threat Actor Operations](https://thehackernews.com/2026/01/security-bug-in-stealc-malware-panel.html)
- Trend Micro Research, News and Perspectives
  - [ ] [From Extension to Infection: An In-Depth Analysis of the Evelyn Stealer Campaign Targeting Software Developers](https://www.trendmicro.com/en_us/research/26/a/analysis-of-the-evelyn-stealer-campaign.html)
- TorrentFreak
  - [ ] [NVIDIA Contacted Anna’s Archive to Secure Access to Millions of Pirated Books](https://torrentfreak.com/nvidia-contacted-annas-archive-to-secure-access-to-millions-of-pirated-books/)
- Blackhat Library: Hacking techniques and research
  - [ ] [any good discord/telegram groups?](https://www.reddit.com/r/blackhat/comments/1qhbr8d/any_good_discordtelegram_groups/)
  - [ ] [exploits to delete/ban a discord server](https://www.reddit.com/r/blackhat/comments/1qgu4dt/exploits_to_deleteban_a_discord_server/)
  - [ ] [A new apt has been born](https://www.reddit.com/r/blackhat/comments/1qgseib/a_new_apt_has_been_born/)
- Technical Information Security Content & Discussion
  - [ ] [Frida 17.6.0 released – major Android stability improvements, Android 16 support](https://www.reddit.com/r/netsec/comments/1qh79ww/frida_1760_released_major_android_stability/)
- Security Affairs
  - [ ] [Ransomware attack on Ingram Micro impacts 42,000 individuals](https://securityaffairs.com/187083/data-breach/ransomware-attack-on-ingram-micro-impacts-42000-individuals.html)
  - [ ] [StealC malware control panel flaw leaks details on active attacker](https://securityaffairs.com/187075/malware/stealc-malware-control-panel-flaw-leaks-details-on-active-attacker.html)
  - [ ] [Hacker pleads guilty to hacking Supreme Court, AmeriCorps, and VA Systems](https://securityaffairs.com/187048/security/hacker-pleads-guilty-to-hacking-supreme-court-americorps-and-va-systems.html)
- Deep Web
  - [ ] [BTC to XMR swap options without KYC](https://www.reddit.com/r/deepweb/comments/1qgz65i/btc_to_xmr_swap_options_without_kyc/)
  - [ ] [Hi](https://www.reddit.com/r/deepweb/comments/1qh09a0/hi/)
  - [ ] [Why is using the deepweb even legal](https://www.reddit.com/r/deepweb/comments/1qgs18m/why_is_using_the_deepweb_even_legal/)
- netsecstudents: Subreddit for students studying Network Security and its related subjects
  - [ ] [Using Tor hidden services for C2 anonymity with Sliver](https://www.reddit.com/r/netsecstudents/comments/1qh61he/using_tor_hidden_services_for_c2_anonymity_with/)
  - [ ] [Airtel ! Why this kolaveri ?😢](https://www.reddit.com/r/netsecstudents/comments/1qh80dr/airtel_why_this_kolaveri/)
  - [ ] [Is the AH and ESP header adding process something to memorize or is there a way to understand where to place the header and trailer?](https://www.reddit.com/r/netsecstudents/comments/1qgtpb0/is_the_ah_and_esp_header_adding_process_something/)
- Information Security
  - [ ] [Reprompt: Single-click Copilot attack that exfiltrates user data via chained server requests](https://www.reddit.com/r/Information_Security/comments/1qh4j1e/reprompt_singleclick_copilot_attack_that/)
- Your Open Hacker Community
  - [ ] [John the Ripper password cracker: password must contain string](https://www.reddit.com/r/HowToHack/comments/1qhiqog/john_the_ripper_password_cracker_password_must/)
  - [ ] [Advice needed](https://www.reddit.com/r/HowToHack/comments/1qh21b4/advice_needed/)
  - [ ] [Airtel ! Why this kolaveri ?😢](https://www.reddit.com/r/HowToHack/comments/1qh7you/airtel_why_this_kolaveri/)
  - [ ] [how to bypass ads and get direct download link?](https://www.reddit.com/r/HowToHack/comments/1qgyz9t/how_to_bypass_ads_and_get_direct_download_link/)
- 迪哥讲事
  - [ ] [易被忽视的敏感信息泄露](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498942&idx=1&sn=5db496f82e43416803c37e65101565f0)
- The Register - Security
  - [ ] [Broker who sold malware to the FBI set for sentencing](https://go.theregister.com/feed/www.theregister.com/2026/01/19/iab_sentencing/)
  - [ ] [Don't underestimate pro-Russia hacktivists, warns UK's cyber crew](https://go.theregister.com/feed/www.theregister.com/2026/01/19/dont_underestimate_prorussia_hacktivists_warns/)
  - [ ] [Windows 11 shutdown bug forces Microsoft into out-of-band damage control](https://go.theregister.com/feed/www.theregister.com/2026/01/19/windows_11_shutdown_bug/)
  - [ ] [Ingram Micro admits summer ransomware raid exposed thousands of staff records](https://go.theregister.com/feed/www.theregister.com/2026/01/19/ingram_micro_ransomware_affects/)
  - [ ] [UK prime minister stares down barrel of ban on social media for kids](https://go.theregister.com/feed/www.theregister.com/2026/01/19/uk_social_media_children_ban_prime_minister/)
  - [ ] [Warwickshire school to reopen after cyberattack crippled IT](https://go.theregister.com/feed/www.theregister.com/2026/01/19/higham_lane_school_reopens/)
  - [ ] [Royal Navy's helicopter drone makes its first autonomous flight](https://go.theregister.com/feed/www.theregister.com/2026/01/19/helicopter_drone_for_royal_navy/)
  - [ ] [ATM maintenance tech broke the bank by forgetting to return a key](https://go.theregister.com/feed/www.theregister.com/2026/01/19/who_me/)
  - [ ] [Microsoft hiring energy strategists to power its Asian datacenters](https://go.theregister.com/feed/www.theregister.com/2026/01/19/asia_tech_news_roundup/)
- Security Weekly Podcast Network (Audio)
  - [ ] [Making vulnerability management and incident response actually work. Also, the News! - Ryan Fried, Beck Norris, José Toledo - ESW #442](http://sites.libsyn.com/18678/making-vulnerability-management-and-incident-response-actually-work-also-the-news-ryan-fried-beck-norris-jos-toledo-esw-442)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[每日信息流] 2026-01-20 #1123

每日安全资讯（2026-01-20）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2026-01-20 #1123

Description

每日安全资讯（2026-01-20）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions