# 每日安全资讯（2026-08-16） - Private Feed for M09Ic - [ ] [Rvn0xsy starred xingj404-lab/dsh-desktop](https://github.com/xingj404-lab/dsh-desktop) - [ ] [liamg starred liamg/ariadne](https://github.com/liamg/ariadne) - [ ] [liamg contributed to liamg/ariadne](https://github.com/liamg/ariadne/pull/16) - [ ] [mgeeky starred Exploit-Garbage/0day-Rubbish](https://github.com/Exploit-Garbage/0day-Rubbish) - [ ] [bolucat released 202608152037 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202608152037) - [ ] [chainreactors released v0.0.0-nightly.20260815 at chainreactors/aiscan](https://github.com/chainreactors/aiscan/releases/tag/v0.0.0-nightly.20260815) - [ ] [Rvn0xsy starred awesome-dsh-plugin/awesome-dsh-plugin](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin) - [ ] [timwhitez starred huoji120/QWEN-EXO-booster](https://github.com/huoji120/QWEN-EXO-booster) - [ ] [Mr-xn forked Mr-xn/BurpAPISecuritySuite from Teycir/BurpAPISecuritySuite](https://github.com/Mr-xn/BurpAPISecuritySuite) - [ ] [Mr-xn starred jangviktor-web/nihaixia](https://github.com/jangviktor-web/nihaixia) - [ ] [CCob starred joxeankoret/diaphora](https://github.com/joxeankoret/diaphora) - [ ] [timwhitez starred timwhitez/dsh-self-evolving](https://github.com/timwhitez/dsh-self-evolving) - [ ] [esrrhs contributed to esrrhs/fakelua](https://github.com/esrrhs/fakelua/pull/360) - [ ] [pydantic released v2.31.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v2.31.0) - [ ] [Ridter starred kapla0011/KaplaStrike](https://github.com/kapla0011/KaplaStrike) - [ ] [esrrhs contributed to esrrhs/fakecc](https://github.com/esrrhs/fakecc/pull/9) - Recent Commits to cve:main - [ ] [Update Sat Aug 15 12:13:37 UTC 2026](https://github.com/trickest/cve/commit/bbfabd99d4e0568f2a0ca03e574b36973e758897) - Hacking Articles - [ ] [Impacket for Pentester: SMBExec](https://www.hackingarticles.in/impacket-for-pentester-smbexec/) - Tenable Blog - [ ] [The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure](https://www.tenable.com/blog/the-agentic-ai-threat-cluster-seven-incidents-three-actors-and-what-they-mean) - Doonsec's feed - [ ] [【竞赛通知】第四届全国大学生开源情报数据采集与分析挑战专项（含工具下载和教学资源）](https://mp.weixin.qq.com/s/jXGQ3fyGa2DdMN1ski3J_Q) - [ ] [原创—建言献策之建议国家早点取消退休金养老制度](https://mp.weixin.qq.com/s/vlV4136tN239qXsii6_v7Q) - [ ] [实战 | 记某次逆向小程序解密及签名破解](https://mp.weixin.qq.com/s/lkYJ6BlCEoBDnhlc806i6A) - [ ] [网络交易我能理解，网络交友是？](https://mp.weixin.qq.com/s/e8jqepiF8dKHxSrO-nV3WA) - [ ] [老了的你](https://mp.weixin.qq.com/s/S-0nGfUCvTYaU8UMcfd6gg) - [ ] [1v1论文指导！985/211专业对口导师手把手指导至录用！SCI/SSCI/EI/中文核心/毕业论文](https://mp.weixin.qq.com/s/nyCI20zmJgj_gqBI6-lDfA) - [ ] [十年云天，智守未来——山东云天安全技术有限公司成立十周年](https://mp.weixin.qq.com/s/kvBgsUu_IKrJBoQ4C5xBIA) - SecWiki News - [ ] [SecWiki News 2026-08-15 Review](http://www.sec-wiki.com/?2026-08-15) - Sploitus.com Exploits RSS Feed - [ ] [WALLABAG-FULL-DISCLOSURE-Stored-XSS-SSRF-CVSS-8.5-GHSA-q2g2- exploit](https://sploitus.com/exploit?id=023747CD-2139-58AD-ABC5-5004806E1FCF&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Out-of-bounds Write in Php](https://sploitus.com/exploit?id=78BE315A-C781-588D-BD38-065DB981EF80&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-9147](https://sploitus.com/exploit?id=B2F438C4-2CAB-5702-968B-7E556A2A7CDB&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Code Injection in Fgmacedo Python_Statemachine](https://sploitus.com/exploit?id=F49E101F-7F33-59F4-80EA-0E437F9BE8CA&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-9830](https://sploitus.com/exploit?id=C946FC2B-AB27-5636-AB9C-0AE6E9C6A4FE&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-47117](https://sploitus.com/exploit?id=2973A9FF-B27F-533D-AF4F-B6F550A435A6&utm_source=rss&utm_medium=rss) - [ ] [orca-poc-target exploit](https://sploitus.com/exploit?id=0E28960E-3837-500A-9425-4740D3AA02E8&utm_source=rss&utm_medium=rss) - [ ] [Academy-CTF-Exploitation](https://sploitus.com/exploit?id=8BEE47A5-9CC0-5C81-9D9F-44F9E2D6877F&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-20896](https://sploitus.com/exploit?id=2E636F7C-D328-572A-AAAE-86B8C5A6D4B6&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2024-999999](https://sploitus.com/exploit?id=C6066C1C-9A4C-5E0A-85C1-3633CFFECABC&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Improper Authentication in Necta Wifi_Mouse_Server](https://sploitus.com/exploit?id=BB6FE4D8-4A02-56CC-9B8B-7FE54FD42CB6&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft_Enterprise](https://sploitus.com/exploit?id=D56D7973-1929-593A-8A98-8A9ED672E757&utm_source=rss&utm_medium=rss) - [ ] [linux-exploits](https://sploitus.com/exploit?id=75D149D0-D96A-55D5-A2FD-888B3A9E44B6&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six](https://sploitus.com/exploit?id=360B6584-58F5-5BB6-8027-A1A0132867C6&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-9090](https://sploitus.com/exploit?id=037DB8B0-683D-57CC-AE61-99A990118DB0&utm_source=rss&utm_medium=rss) - [ ] [CodeAlpha_SecureCodingReview exploit](https://sploitus.com/exploit?id=4627B035-1A34-56D9-BC75-CFBAC1454527&utm_source=rss&utm_medium=rss) - [ ] [anti-xss exploit](https://sploitus.com/exploit?id=18BD4D6C-BE25-514F-B4CC-C77C8D99E004&utm_source=rss&utm_medium=rss) - [ ] [Hacker exploit](https://sploitus.com/exploit?id=03D018A5-568D-50E1-BF97-1950B7B77E80&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Use After Free in Linux Linux_Kernel](https://sploitus.com/exploit?id=B19259CC-EC9C-5160-ACB8-0B1C493D78DA&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-6440](https://sploitus.com/exploit?id=D992F151-90F8-58EA-A79C-7A4896F1C7B0&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-71362](https://sploitus.com/exploit?id=E18B7F04-8546-596E-AA13-83DCDDB760CB&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-64638](https://sploitus.com/exploit?id=C9ECD911-DBDC-5FB0-9692-4DBD4FF9ECE4&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-53587](https://sploitus.com/exploit?id=F90EA90F-8C05-564B-9423-43CECA2FD136&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Code Injection in Samba](https://sploitus.com/exploit?id=C0C324E1-2430-57A2-B02B-C3228B48F665&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-58231](https://sploitus.com/exploit?id=FAAE269D-C3AB-5788-AB72-6177DA18E73D&utm_source=rss&utm_medium=rss) - [ ] [Exploit for CVE-2026-73678](https://sploitus.com/exploit?id=0A7A53BB-5956-561A-ACD6-78E990D78B26&utm_source=rss&utm_medium=rss) - [ ] [Threat-Scanner exploit](https://sploitus.com/exploit?id=A1AE2E56-DE44-5DDE-8FD1-25F098F9BC02&utm_source=rss&utm_medium=rss) - [ ] [Exploit for SQL Injection in Metabase](https://sploitus.com/exploit?id=C41FB357-C9DA-5D64-8B0B-DEF0D74DC4C0&utm_source=rss&utm_medium=rss) - [ ] [Exploit for Deserialization of Untrusted Data in Snakeyaml_Project Snakeyaml](https://sploitus.com/exploit?id=BFC305F1-7A53-5CC0-889A-984DEACDBDDA&utm_source=rss&utm_medium=rss) - 小刀志 - [ ] [从 PE 到 PKCS#7：深入理解 Windows PE 数字签名机制](https://xiaodaozhi.com/security/482.html) - Sucuri Blog - [ ] [The Illusion of a Lock – How AI is changing the speed and scale of hands-on WordPress vulnerability research.](https://blog.sucuri.net/2026/08/the-illusion-of-a-lock-how-ai-is-changing-the-speed-and-scale-of-hands-on-wordpress-vulnerability-research.html) - 奇客Solidot–传递最新科技情报 - [ ] [俄罗斯导弹使用了英伟达的 Jetson Orin](https://www.solidot.org/story?sid=85104) - [ ] [年轻美国人日益不信任 AI 及 AI 公司高管](https://www.solidot.org/story?sid=85103) - [ ] [身陷剽窃丑闻的前剑桥大学教授死亡](https://www.solidot.org/story?sid=85102) - [ ] [法国宪法委员会否决青少年社媒禁令](https://www.solidot.org/story?sid=85101) - 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台 - [ ] [女子声称其继父利用Grok将她童年时期的照片转化为露骨图像](https://blog.upx8.com/%E5%A5%B3%E5%AD%90%E5%A3%B0%E7%A7%B0%E5%85%B6%E7%BB%A7%E7%88%B6%E5%88%A9%E7%94%A8Grok%E5%B0%86%E5%A5%B9%E7%AB%A5%E5%B9%B4%E6%97%B6%E6%9C%9F%E7%9A%84%E7%85%A7%E7%89%87%E8%BD%AC%E5%8C%96%E4%B8%BA%E9%9C%B2%E9%AA%A8%E5%9B%BE%E5%83%8F) - [ ] [1.228亿股！英伟达首度披露SpaceX持仓 成后者第六大股东](https://blog.upx8.com/1-228%E4%BA%BF%E8%82%A1-%E8%8B%B1%E4%BC%9F%E8%BE%BE%E9%A6%96%E5%BA%A6%E6%8A%AB%E9%9C%B2SpaceX%E6%8C%81%E4%BB%93-%E6%88%90%E5%90%8E%E8%80%85%E7%AC%AC%E5%85%AD%E5%A4%A7%E8%82%A1%E4%B8%9C) - [ ] [美国将要求合作伙伴必须在与中国的AI竞赛中选边站队](https://blog.upx8.com/%E7%BE%8E%E5%9B%BD%E5%B0%86%E8%A6%81%E6%B1%82%E5%90%88%E4%BD%9C%E4%BC%99%E4%BC%B4%E5%BF%85%E9%A1%BB%E5%9C%A8%E4%B8%8E%E4%B8%AD%E5%9B%BD%E7%9A%84AI%E7%AB%9E%E8%B5%9B%E4%B8%AD%E9%80%89%E8%BE%B9%E7%AB%99%E9%98%9F) - [ ] [Anthropic Q2营收激增至超过 115 亿美元 首次实现季度盈利](https://blog.upx8.com/Anthropic-Q2%E8%90%A5%E6%94%B6%E6%BF%80%E5%A2%9E%E8%87%B3%E8%B6%85%E8%BF%87-115-%E4%BA%BF%E7%BE%8E%E5%85%83-%E9%A6%96%E6%AC%A1%E5%AE%9E%E7%8E%B0%E5%AD%A3%E5%BA%A6%E7%9B%88%E5%88%A9) - [ ] [OpenAI 称其企业业务规模现已超过消费者业务](https://blog.upx8.com/OpenAI-%E7%A7%B0%E5%85%B6%E4%BC%81%E4%B8%9A%E4%B8%9A%E5%8A%A1%E8%A7%84%E6%A8%A1%E7%8E%B0%E5%B7%B2%E8%B6%85%E8%BF%87%E6%B6%88%E8%B4%B9%E8%80%85%E4%B8%9A%E5%8A%A1) - [ ] [英伟达缩减对OpenAI数据中心项目提供担保的计划](https://blog.upx8.com/%E8%8B%B1%E4%BC%9F%E8%BE%BE%E7%BC%A9%E5%87%8F%E5%AF%B9OpenAI%E6%95%B0%E6%8D%AE%E4%B8%AD%E5%BF%83%E9%A1%B9%E7%9B%AE%E6%8F%90%E4%BE%9B%E6%8B%85%E4%BF%9D%E7%9A%84%E8%AE%A1%E5%88%92) - [ ] [阿里开源Qwen3.8-27B：参数量为270亿](https://blog.upx8.com/%E9%98%BF%E9%87%8C%E5%BC%80%E6%BA%90Qwen3-8-27B-%E5%8F%82%E6%95%B0%E9%87%8F%E4%B8%BA270%E4%BA%BF) - 白帽Wiki - 一个简单的wiki - [ ] [[2026]qwen-exo:基于 SGLang 二次开发的混合注意力推理后端](https://key08.com/index.php/2026/08/15/3283.html) - 半块西瓜皮 - [ ] [dsh-pentest：让人工智能自主推进渗透测试](https://guage.cool/dsh-pentest-plugin.html) - 黑鸟 - [ ] [肉眼看不见的窃密通道：一款12KB后门把C2信息藏进空白空格](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451188103&idx=1&sn=b4c0fe5ff7fb1c189608de7406e80a5f) - 看雪学苑 - [ ] [2026 KCTF | 第三题《午时·永数囚笼》设计思路及解析](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618677&idx=1&sn=dea6a7d2a5f398404470a44f2b6516d0) - [ ] [非虫出品！体系化打通：安卓软件开发与安全逆向全链路能力](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618677&idx=2&sn=3554a8010a489ba06f6d1a074a2ce466) - 极客公园 - [ ] [睡觉时往脑袋上通电，4000 个美国人抢着买单](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653111980&idx=1&sn=739920269eecd0cb6ecb3a8ce745a1ad) - [ ] [闭门、举牌、真话，这场路演有点不一样](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653111980&idx=2&sn=117dfaa25b6883a440e5f4bffcee7ca6) - [ ] [智谱发布 GLM-5.3，编程能力更强；传苹果训练国内专用 AI 模型；微信：朋友圈现在、过去、未来都不会有二次编辑功能 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653111979&idx=1&sn=b293d956506b71bd74cff360d76add6f) - 安全圈 - [ ] [【安全圈】macOS屏幕共享漏洞遭利用，被植入门罗币挖矿程序](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078290&idx=1&sn=4b5441fb275403e73cf04d21dc5c6dbe) - [ ] [【安全圈】AI让漏洞暴增72%，NIST求助AI管理漏洞库](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078290&idx=2&sn=59601ed506d26630b5fd959967127d4d) - [ ] [【安全圈】SAP云端漏洞评分满分，补丁发布3天就被利用](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078290&idx=3&sn=197f827e1231607636b09c2de8831b96) - 君哥的体历 - [ ] [做什么都需要花时间，可是很多时候完整听完一首歌的时间都没有](https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492523&idx=1&sn=3732ae4b1608d5700a50db76fffa8930) - RedTeaming - [ ] [从 OpenAI 智能体入侵 Hugging Face 事件，看 Agent 安全边界的工程化设计](https://mp.weixin.qq.com/s?__biz=MzUyMDgzMDMyMg==&mid=2247484728&idx=1&sn=cf08152ad2e10da931a363e488f203fd) - IntelTechniques by Michael Bazzell - [ ] [The New Blog](https://inteltechniques.com/blog/index.html#the-new-blog-content) - [ ] [New Firewall Guide](https://inteltechniques.com/blog/index.html#firewall-guide-content) - [ ] [OSINT Tools Update](https://inteltechniques.com/blog/index.html#osint-tools-update-content) - IT Service Management News - [ ] [Digital Omnibus e modifiche al regolamento UE sull'Intelligenza artificiale](http://blog.cesaregallotti.it/2026/08/digital-omnibus-e-modifiche-al.html) - DEF CON Announcements! - [ ] [News Round-up from DEF CON 34](https://defcon.org/html/defcon-34/dc-34-news.html#dc34press) - Over Security - [ ] [How to tell if your AI platforms’ accounts have been hacked](https://techcrunch.com/2026/08/15/how-to-tell-if-your-ai-platforms-accounts-have-been-hacked/) - [ ] [Exclusive: 500 Hosts, 1 TB and No Negotiation: Anubis Reveals Its Fairlife Attack](https://www.suspectfile.com/500-hosts-1-tb-and-no-negotiation-anubis-reveals-its-fairlife-attack/) - [ ] [New Evooo1Bot Linux botnet turns routers into traffic relay nodes](https://www.bleepingcomputer.com/news/security/new-evooo1bot-linux-botnet-turns-routers-into-traffic-relay-nodes/) - [ ] [Mastering Claude Code Series - Part 1](https://attacker-codeninja.github.io/2026-08-15-Mastering-Claude-Code-Series-1/) - [ ] [The Illusion of a Lock – How AI is changing the speed and scale of hands-on WordPress vulnerability research.](https://blog.sucuri.net/2026/08/the-illusion-of-a-lock-how-ai-is-changing-the-speed-and-scale-of-hands-on-wordpress-vulnerability-research.html) - Daniel Miessler - [ ] [How Easy It Would Be to Hack You](https://danielmiessler.com/blog/how-easy-to-hack-you?utm_source=rss&utm_medium=feed&utm_campaign=website) - [ ] [Another Crazy Experience with AI](https://danielmiessler.com/blog/ai-fixed-my-mac?utm_source=rss&utm_medium=feed&utm_campaign=website) - [ ] [There Is Only One Technology](https://danielmiessler.com/blog/only-one-technology?utm_source=rss&utm_medium=feed&utm_campaign=website) - Security Affairs - [ ] [Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware](https://securityaffairs.com/197251/uncategorized/crooks-are-buying-your-expired-domains-and-using-them-to-deliver-malware.html) - [ ] [SAP Commerce Cloud CVE-2026-58231 Exploited in the Wild](https://securityaffairs.com/197244/security/sap-commerce-cloud-cve-2026-58231-exploited-in-the-wild.html) - [ ] [macOS Screen Sharing Flaw Exploited to Deploy Monero Miners](https://securityaffairs.com/197234/uncategorized/macos-screen-sharing-flaw-exploited-to-deploy-monero-miners.html) - [ ] [GeoServer Zero-Day Is Already Being Probed. That’s the Problem](https://securityaffairs.com/197216/hacking/geoserver-zero-day-is-already-being-probed-thats-the-problem.html) - www.theregister.com - Articles - [ ] [ChainDrop worm crawls into npm supply chain, evades standard defenses](https://www.theregister.com/security/2026/08/15/chaindrop-worm-crawls-into-npm-supply-chain-evades-standard-defenses/5287958)
每日安全资讯（2026-08-16）