# 每日安全资讯（2026-08-09） - SecWiki News - [ ] [SecWiki News 2026-08-08 Review](http://www.sec-wiki.com/?2026-08-08) - Sploitus.com Exploits RSS Feed - [ ] [Exploit for CVE-2026-64638](https://sploitus.com/exploit?id=0AB4FA01-188F-50EF-9E8F-CA4C4DA9A6B2&utm_source=rss&utm_medium=rss) - [ ] [Hacked-Machines exploit](https://sploitus.com/exploit?id=95EBB043-2604-584B-B551-33213DEB7E14&utm_source=rss&utm_medium=rss) - [ ] [Exploit for SQL Injection in Wordpress](https://sploitus.com/exploit?id=497286E1-C7A5-56E6-945B-5EA4822F5C75&utm_source=rss&utm_medium=rss) - [ ] [Deserializacion exploit](https://sploitus.com/exploit?id=42C7D0E3-E62C-5A0C-9FD1-521347B071ED&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-60004](https://sploitus.com/exploit?id=A8BE661C-6C27-5B8F-B009-FE0656507197&utm_source=rss&utm_medium=rss) - [ ] [Number-Lookup exploit](https://sploitus.com/exploit?id=1E74C83A-D349-52AB-BFCD-B757CC1E115B&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-3844](https://sploitus.com/exploit?id=F490610E-6685-5C18-AA35-F2EAE63339C0&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Use After Free in Linux Linux_Kernel](https://sploitus.com/exploit?id=EA81FFC0-451A-5FBE-B06F-CBC5A7B50FB3&utm_source=rss&utm_medium=rss) - [ ] [Vulnhub exploit](https://sploitus.com/exploit?id=436F4F93-C23D-52EB-B020-9D8AD91F323D&utm_source=rss&utm_medium=rss) - [ ] [XSS2SHELL-POC exploit](https://sploitus.com/exploit?id=997C2594-EFDD-5E85-BDF6-66EDF4485B14&utm_source=rss&utm_medium=rss) - [ ] [iQOO-Neo9-Kernel-Research exploit](https://sploitus.com/exploit?id=D9CC7EB9-0057-5D7E-993B-8BA83B86A5B9&utm_source=rss&utm_medium=rss) - [ ] [exploit-development-framework](https://sploitus.com/exploit?id=042E0A15-47C1-5A6C-9C8B-62BCDB7570BE&utm_source=rss&utm_medium=rss) - [ ] [penetration-testing-windows10 exploit](https://sploitus.com/exploit?id=BE81EDFF-3882-575C-AD05-FBC93589CCC3&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2023-30000](https://sploitus.com/exploit?id=A43BF944-C2D4-5C90-991E-0DA1667A6812&utm_source=rss&utm_medium=rss) - [ ] [xss2shell exploit](https://sploitus.com/exploit?id=71CA7A66-8C6B-51EF-AC52-61BBF601E9BD&utm_source=rss&utm_medium=rss) - [ ] [VulnerableApp exploit](https://sploitus.com/exploit?id=2E2109B9-ADD3-5F0E-9A14-498C6CFD20F5&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Deserialization of Untrusted Data in Jetbrains Teamcity](https://sploitus.com/exploit?id=2BF8E7A0-A325-50CD-B71A-9FBFA2F5E44D&utm_source=rss&utm_medium=rss) - [ ] [Common-Web-Application-Bug-Classes-Cheatsheet exploit](https://sploitus.com/exploit?id=D96CCA0A-A61A-5D94-A129-30B502324170&utm_source=rss&utm_medium=rss) - [ ] [Ghostlink_lite exploit](https://sploitus.com/exploit?id=00FB1824-9216-5488-85C9-0572F4EFE1AC&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Rejetto Http_File_Server](https://sploitus.com/exploit?id=2AEC0FDA-C2E9-5385-BA16-618D16320DBD&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-18953](https://sploitus.com/exploit?id=127719D1-1C6C-5538-8B6F-DDEA4F4BCA34&utm_source=rss&utm_medium=rss) - [ ] [PoC2Rule exploit](https://sploitus.com/exploit?id=7312085A-30C8-587D-A73B-B1CA3F2D4A49&utm_source=rss&utm_medium=rss) - Private Feed for M09Ic - [ ] [ZeddYu contributed to ZeddYu/hugo-theme-stack](https://github.com/ZeddYu/hugo-theme-stack/pull/2) - [ ] [ZeddYu starred SaseQ/discord-mcp](https://github.com/SaseQ/discord-mcp) - [ ] [bolucat released 202608082045 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202608082045) - [ ] [Rvn0xsy starred Areo-Joe/chrome-acp](https://github.com/Areo-Joe/chrome-acp) - [ ] [esrrhs contributed to esrrhs/fakelua](https://github.com/esrrhs/fakelua/pull/333) - [ ] [su18 starred Xaaaa-bip/GodzillaSuper](https://github.com/Xaaaa-bip/GodzillaSuper) - [ ] [Rvn0xsy starred glzr-io/glazewm](https://github.com/glzr-io/glazewm) - [ ] [ZeddYu starred unclecode/crawl4ai](https://github.com/unclecode/crawl4ai) - [ ] [Mr-xn starred cwkiller/Java-Puzzle](https://github.com/cwkiller/Java-Puzzle) - [ ] [pydantic released v2.27.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v2.27.0) - [ ] [anthropics released v2.1.226 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.226) - Recent Commits to cve:main - [ ] [Update Sat Aug 8 12:06:54 UTC 2026](https://github.com/trickest/cve/commit/cd4a01a42d95af497d54c028c2f468527d995ec5) - 奇客Solidot–传递最新科技情报 - [ ] [DeepMind 的 WeatherNext 模型在飓风预测上取得突破](https://www.solidot.org/story?sid=85042) - [ ] [甲骨文对 OpenJDK 项目禁止 AI 生成代码](https://www.solidot.org/story?sid=85041) - [ ] [西伯利亚甲烷排放量每年增加 1200 万吨](https://www.solidot.org/story?sid=85040) - [ ] [电动滑板车比摩托车和自行车危险得多](https://www.solidot.org/story?sid=85039) - [ ] [Microsoft Edge 即将屏蔽流行扩展 uBlock Origin](https://www.solidot.org/story?sid=85038) - 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台 - [ ] [特朗普政府将向德国公司支付12亿美元取消海上风电租赁](https://blog.upx8.com/%E7%89%B9%E6%9C%97%E6%99%AE%E6%94%BF%E5%BA%9C%E5%B0%86%E5%90%91%E5%BE%B7%E5%9B%BD%E5%85%AC%E5%8F%B8%E6%94%AF%E4%BB%9812%E4%BA%BF%E7%BE%8E%E5%85%83%E5%8F%96%E6%B6%88%E6%B5%B7%E4%B8%8A%E9%A3%8E%E7%94%B5%E7%A7%9F%E8%B5%81) - [ ] [苹果更新文档：大陆版macOS 将集成阿里千问](https://blog.upx8.com/%E8%8B%B9%E6%9E%9C%E6%9B%B4%E6%96%B0%E6%96%87%E6%A1%A3-%E5%A4%A7%E9%99%86%E7%89%88macOS-%E5%B0%86%E9%9B%86%E6%88%90%E9%98%BF%E9%87%8C%E5%8D%83%E9%97%AE) - [ ] [谷歌开发了一款便携式的离线AI翻译器](https://blog.upx8.com/%E8%B0%B7%E6%AD%8C%E5%BC%80%E5%8F%91%E4%BA%86%E4%B8%80%E6%AC%BE%E4%BE%BF%E6%90%BA%E5%BC%8F%E7%9A%84%E7%A6%BB%E7%BA%BFAI%E7%BF%BB%E8%AF%91%E5%99%A8) - [ ] [X 平台推出新的奖励政策 仅向原创内容提供奖励](https://blog.upx8.com/X-%E5%B9%B3%E5%8F%B0%E6%8E%A8%E5%87%BA%E6%96%B0%E7%9A%84%E5%A5%96%E5%8A%B1%E6%94%BF%E7%AD%96-%E4%BB%85%E5%90%91%E5%8E%9F%E5%88%9B%E5%86%85%E5%AE%B9%E6%8F%90%E4%BE%9B%E5%A5%96%E5%8A%B1) - [ ] [Claude Code 支持在 macOS 上实现跨会话通信](https://blog.upx8.com/Claude-Code-%E6%94%AF%E6%8C%81%E5%9C%A8-macOS-%E4%B8%8A%E5%AE%9E%E7%8E%B0%E8%B7%A8%E4%BC%9A%E8%AF%9D%E9%80%9A%E4%BF%A1) - [ ] [SK海力士评估30亿美元重庆资产 或出售股份](https://blog.upx8.com/SK%E6%B5%B7%E5%8A%9B%E5%A3%AB%E8%AF%84%E4%BC%B030%E4%BA%BF%E7%BE%8E%E5%85%83%E9%87%8D%E5%BA%86%E8%B5%84%E4%BA%A7-%E6%88%96%E5%87%BA%E5%94%AE%E8%82%A1%E4%BB%BD) - 黑鸟 - [ ] [DNS 新标准:域名出售信号](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451187996&idx=1&sn=a4e80a8332b9c60c6150d93a9109b689) - 安全分析与研究 - [ ] [第5篇-2025-2026主流勒索家族技术分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247496990&idx=1&sn=09d4357d546a93261ec65ed692c789d0) - 奶牛安全 - [ ] [数据泄露情报2026.8.8 - 共享印度最大的黑产蛇公哭近18亿条，文末有链接](https://mp.weixin.qq.com/s?__biz=MzU4NjY0NTExNA==&mid=2247489893&idx=1&sn=beae31e13cca6fc62eacbfb5d0c9628b) - 中国信息安全 - [ ] [公安部发布《公安机关网络空间安全监督检查办法》（附全文）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664265454&idx=1&sn=6bc797c701d0297f85f58b3307dd76de) - 安全圈 - [ ] [【安全圈】北京首例破坏AI模型刑案落槌：九零后算法工程师“删库”获刑](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078200&idx=1&sn=60ec3345150d2fadd6768deb7dd758cb) - [ ] [【安全圈】电商平台前员工利用系统漏洞，0元购3000多件家电](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078200&idx=2&sn=3fc2c3a12c55a34bfab18b638219139a) - [ ] [【安全圈】WordPress再次爆出高危安全漏洞，全网约有5亿个网站受影响](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078200&idx=3&sn=49de3825deea363025a052d568a9baaa) - 奇安信 CERT - [ ] [【已复现】WordPress Core XSS2Shell 预认证 XSS 远程代码执行漏洞(CVE-2026-64638)安全风险通告](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506994&idx=1&sn=40b43738c615a5624f431ef45b046b41) - 天黑说嘿话 - [ ] [hvv 2026 - 今年攻防演练的新变量：WAF 看不见，后端却执行了](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486344&idx=1&sn=96ca8c8b2f31e0c963882434778c4fcd) - 凌晨一点零三分 - [ ] [跟党走_政策板块日报2026-08-08](https://mp.weixin.qq.com/s?__biz=MzIxMjI0Mzk0OQ==&mid=2247485675&idx=1&sn=0c18f4e52efc11755347d6d03144f87a) - 看雪学苑 - [ ] [2026 KCTF 攻击方规则发布！8月10日12点，正式开赛](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618432&idx=1&sn=e41a435b6f32dfbc90eea7a9dcea1b8f) - OnionSec - [ ] [随性洒脱的挥动手臂](https://mp.weixin.qq.com/s?__biz=MzUyMTUwMzI3Ng==&mid=2247485923&idx=1&sn=8435464c90c88d7b4a51742bb31fe565) - 朴实无华lake2 - [ ] [AI辅助安全工作的一些思考](https://mp.weixin.qq.com/s?__biz=Mzg4NTc0MjAwMg==&mid=2247484408&idx=1&sn=1bd9f9dcb8af9f428c1b711ffaf2af16) - Over Security - [ ] [Google’s top hacker hunter explains why hacking groups get codenames](https://techcrunch.com/2026/08/08/googles-top-hacker-hunter-explains-why-hacking-groups-get-codenames/) - [ ] [Hackers breach TrueConf to trojanize client installers with backdoors](https://www.bleepingcomputer.com/news/security/hackers-breach-trueconf-to-trojanize-client-installers-with-backdoors/) - [ ] [Brinks Home - 732,162 breached accounts](https://haveibeenpwned.com/Breach/BrinksHome) - [ ] [XSS2Shell: nuova vulnerabilità nel core di WordPress può portare all’esecuzione di codice remoto](https://cert-agid.gov.it/news/xss2shell-nuova-vulnerabilita-nel-core-di-wordpress-puo-portare-allesecuzione-di-codice-remoto/) - Have I Been Pwned latest breaches - [ ] [Brinks Home - 732,162 breached accounts](https://haveibeenpwned.com/Breach/BrinksHome) - 丁爸 情报分析师的工具箱 - [ ] [【情报】朝鲜导弹部署俄罗斯，加剧了乌克兰星链项目请求的紧迫性（视频）](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651156876&idx=1&sn=34a517b995bbc122de4dd300e5b52940) - [ ] [【竞赛通知】第四届全国大学生开源情报数据采集与分析挑战专项（含工具下载和教学资源）](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651156876&idx=2&sn=74813a80cf738ee77e1d0767167f5fdc) - www.theregister.com - Articles - [ ] [Devs to Anthropic, OpenAI, Cursor, and friends: Make security and privacy the default](https://www.theregister.com/ai-and-ml/2026/08/08/devs-to-anthropic-openai-cursor-and-friends-make-security-and-privacy-the-default/5285107) - Security Affairs - [ ] [Palo Alto Networks Faces China Cybersecurity Review Amid Rising Tech Tensions](https://securityaffairs.com/196881/intelligence/palo-alto-networks-faces-china-cybersecurity-review-amid-rising-tech-tensions.html) - [ ] [Metabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive Data](https://securityaffairs.com/196874/hacking/metabase-zero-day-exploited-in-the-wild-exposing-admin-access-and-sensitive-data.html) - [ ] [U.S. CISA adds a Progress LoadMaster flaw to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/196863/hacking/u-s-cisa-adds-a-progress-loadmaster-flaw-to-its-known-exploited-vulnerabilities-catalog.html) - [ ] [Unlimited Technology Systems Data Breach Exposes Data of 3.8 Million Healthcare Patients](https://securityaffairs.com/196843/data-breach/unlimited-technology-systems-data-breach-exposes-data-of-3-8-million-healthcare-patients.html) - The Hacker News - [ ] [Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers](https://thehackernews.com/2026/08/atlassian-rovo-can-be-tricked-into.html) - [ ] [New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens](https://thehackernews.com/2026/08/new-css-attacks-can-break-webmail.html) - [ ] [Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication](https://thehackernews.com/2026/08/metabase-zero-day-exploited-in-wild.html) - [ ] [N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist](https://thehackernews.com/2026/08/n-central-attackers-reach-managed.html) - [ ] [Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts](https://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.html) - TorrentFreak - [ ] [Japanese Police Arrest NYAA ‘First Uploader,’ But Not by Watching the Swarm](https://torrentfreak.com/japanese-police-arrest-nyaa-first-uploader-but-not-by-watching-the-swarm/) - 网安寻路人 - [ ] [从大规模处理走向系统性风险治理：《大型个人信息处理者个人信息保护规定（征求意见稿）》的六大制度亮点](https://mp.weixin.qq.com/s?__biz=MzIxODM0NDU4MQ==&mid=2247508816&idx=1&sn=4bce47e786fda83bce5e0c3326734406)
每日安全资讯（2026-08-09）