[每日信息流] 2026-02-12

# 每日安全资讯（2026-02-12）

- SecWiki News
  - [ ] [SecWiki News 2026-02-11 Review](http://www.sec-wiki.com/?2026-02-11)
- Doonsec's feed
  - [ ] [日益杂谈的一道几何题](https://mp.weixin.qq.com/s/SvJK7FK5HEPxCKVE0Rwp3Q)
  - [ ] [波兰电网攻击曝光工控设备砖化致命威胁](https://mp.weixin.qq.com/s/ZWuI60DOGWqiYsKysm6xdQ)
  - [ ] [5岁孩子的画作一家三口](https://mp.weixin.qq.com/s/MxAQPRXru6OFTFH2KzcrHA)
  - [ ] [从 SQL 注入到文件上传：Upload-Labs 前必须掌握的核心理论基础](https://mp.weixin.qq.com/s/kZp_S235993-wZ6g3kifyg)
  - [ ] [Frida 恶意软件分析实战教程](https://mp.weixin.qq.com/s/ZriA9hCWHtsFx9Uw-imm3g)
  - [ ] [狂撒近100亿！腾讯、阿里、字节、京东春节AI红包大战](https://mp.weixin.qq.com/s/haeLdnmHRamvT3kQeQVBYw)
  - [ ] [羽毛球](https://mp.weixin.qq.com/s/edvlXbyNvDDbQ8mIbsNaTg)
  - [ ] [2026 新春杯 域渗透 WP](https://mp.weixin.qq.com/s/7WcYMZWjOHODeBFuxWBa0w)
  - [ ] [【已复现】最新版微信v4.1出现远程命令执行漏洞：one-click RCE on Linux WeChat](https://mp.weixin.qq.com/s/szIBIyi0sLgzxGrASEbbRQ)
  - [ ] [炸翻全网！爱泼斯坦大瓜疯涨：多国权贵塌房、黑客助攻，自杀疑云更黑了](https://mp.weixin.qq.com/s/ic2pPgUrjea_kn8vzIeh3Q)
  - [ ] [R-TPT 暴力对抗攻击，CLIP 越狱成为历史！](https://mp.weixin.qq.com/s/ZBB8sH6Bht9zlRDru-dnIw)
  - [ ] [美国西北大学 | PentestAgent：将LLM代理融入自动化渗透测试](https://mp.weixin.qq.com/s/3oqdxLDpAQrDfUbJSbPfTg)
  - [ ] [【工信动态】工业和信息化部举行2026年迎新春团拜会](https://mp.weixin.qq.com/s/gQjIx09kNDVTn4ILMrfW5g)
  - [ ] [appId和appSecret利用方法](https://mp.weixin.qq.com/s/AgFlWGyAacF6Z95UXVugTA)
  - [ ] [kubernetes面试问题大全，建议收藏](https://mp.weixin.qq.com/s/8DwSzkoZZG5ceO_kgDLLHQ)
  - [ ] [麻省理工科技评论发布2026年“十大突破性技术”](https://mp.weixin.qq.com/s/NFZqhU_wgb4QLtf36NGILQ)
  - [ ] [Redbud 战队 2025 年终总结](https://mp.weixin.qq.com/s/ItL2Cq4w2zJ4MTIRPwMMoA)
  - [ ] [逆向工具箱](https://mp.weixin.qq.com/s/ViD2z1jaEXs6b7j6C8U9yg)
  - [ ] [去年有deepseek，今年有seedance](https://mp.weixin.qq.com/s/0tAMdTjBE_0iFJtDpnXPmg)
  - [ ] [2026汽车数据安全出境指引](https://mp.weixin.qq.com/s/Fhq31J-sgE1o7i3gukUOYw)
  - [ ] [开年王炸！字节Seedance 2.0刷屏，AIGC拐点（文末使用方法）](https://mp.weixin.qq.com/s/qaKWrAd4rmFxfQpRf6VG9w)
  - [ ] [公安部第一研究所某员工25年总收入](https://mp.weixin.qq.com/s/g1oqGdEXjlQg9Swl25GVjA)
  - [ ] [2026丹麦国情局FE - 恶猿行动 Writeup](https://mp.weixin.qq.com/s/4qT8rp_bL5nXPr4KvvWR1g)
  - [ ] [【开源】XSAST-Python：AI代码审计工具](https://mp.weixin.qq.com/s/64fBgd6f6cF0W5ZMRIPgLw)
  - [ ] [快手：万人组织AI研发范式跃迁之路](https://mp.weixin.qq.com/s/I_VpBEktknviXi1kWvt8GA)
  - [ ] [锦岳智慧：2026年春节安全保障，守护同行！](https://mp.weixin.qq.com/s/lbPzxzwRqfAQWIc6zaodhA)
  - [ ] [彭博报道援引CertiK创始人顾荣辉观点：稳定币成传统银行转型关键](https://mp.weixin.qq.com/s/I8cr16GUi2RrDKSs4o2kZA)
  - [ ] [【AI安全】R-TPT 暴力击穿对抗攻击，CLIP 越狱从此成为历史！](https://mp.weixin.qq.com/s/hoZutFpokckGSTz5ObRjgQ)
  - [ ] [【高危漏洞预警】WeChat/Linux版本命令执行漏洞](https://mp.weixin.qq.com/s/E0RN27Yr_qDXgh0IZMN_Bw)
  - [ ] [每周羽毛球](https://mp.weixin.qq.com/s/JNZRxMnONOPvumdT9AdvwQ)
  - [ ] [网络安全缺口300万人，大家赶紧进](https://mp.weixin.qq.com/s/a4OstHOAXbIJvEggboj06w)
  - [ ] [Claude 高级技巧与安全配置CLAUDE.md、MCP、命令、技能与钩子 (Skills &amp; Hooks)](https://mp.weixin.qq.com/s/8yq_Q8JbnDPRWsltVgc9lw)
  - [ ] [【通知】信科2026年春节应急保障安排](https://mp.weixin.qq.com/s/ARAOznxkq8FxmFUBOAZ0BQ)
  - [ ] [985证书漏洞越权成为教授 + EDU/RCE漏洞实战解析｜湘安内部平台月榜 TOP3 案例](https://mp.weixin.qq.com/s/9AAoIbOoMxVTjx9Vvu760w)
  - [ ] [爆火背后：OpenClaw 开源AI智能体应用攻击面与安全风险系统剖析](https://mp.weixin.qq.com/s/QUuFRsvOopxcW874PLra-Q)
  - [ ] [关于RCtea僵尸网络大范围传播的风险提示](https://mp.weixin.qq.com/s/VJET14YgfWuLxRrlnCRRkg)
  - [ ] [微信 Linux版本命令执行漏洞](https://mp.weixin.qq.com/s/90kehAH0b7H1if9CHTVQ9Q)
  - [ ] [Shannon——全自动 AI 渗透测试工具](https://mp.weixin.qq.com/s/6wmutbYVWobTC8wY-zyc4g)
  - [ ] [你家摄像头背后，可能藏着1万双眼睛](https://mp.weixin.qq.com/s/TImpujBaTjWclr4as8ZpWw)
  - [ ] [八部门发文 进一步防范和处置虚拟货币等相关风险](https://mp.weixin.qq.com/s/_XcRfGJ97nsD7Y1-bibswg)
  - [ ] [AI入局政企销售场景！光大银行推出TO B/TO G AI销售智能体](https://mp.weixin.qq.com/s/TTpDDkgzHJYCtDSJvQ25Cg)
  - [ ] [可利邦116.7万最低价第一！河南农商银行AI算力池建设项目（标段五：寒武纪算力设备采购）](https://mp.weixin.qq.com/s/0_AYR2cvrg8l9TU2MkSreA)
  - [ ] [“面向可信数据空间的密码技术与应用”专刊征稿](https://mp.weixin.qq.com/s/nt1oBqZzVEpZSDEFq-FnhQ)
  - [ ] [【安全圈】CVE-2026-1868：GitLab AI Gateway 严重漏洞（CVSS 9.9），可致远程代码执行](https://mp.weixin.qq.com/s/kYauQVEyBpe0Stq4u33w9A)
  - [ ] [【安全圈】假 AI 助手暗藏木马：恶意“ClawdBot”插件潜伏 VS Code](https://mp.weixin.qq.com/s/pmhDywCsrmwiSnwWo4RU1g)
  - [ ] [【安全圈】印度最高法院裁定：WhatsApp 不得以数据共享侵蚀用户隐私](https://mp.weixin.qq.com/s/3GCoxozX8UpyMPtcYjmyfQ)
  - [ ] [【安全圈】法国全面弃用 Zoom 和 Teams：主权视频平台“Visio”落地，数字主权进入实战阶段](https://mp.weixin.qq.com/s/-PheOFhzFzFBEUA9vQ0D5A)
  - [ ] [渊亭科技入选「2025 AI智能体服务商TOP100」](https://mp.weixin.qq.com/s/Hfrca03grfcPPAMKEcFSxg)
  - [ ] [【已复现】微信 Linux版本命令执行漏洞(QVD-2026-7687)安全风险通告](https://mp.weixin.qq.com/s/Jopoi2JGbbJYhmcRqa6-0w)
  - [ ] [从公安部典型案例，看无人机司法鉴定如何破局“黑飞”乱象](https://mp.weixin.qq.com/s/rFk4_0M-ISRDaX1cPlGcgg)
  - [ ] [U0001f9e7马年限定，速来领取你的新年好彩头！U0001f970](https://mp.weixin.qq.com/s/a6AzL7FN1vhBxuPFfDP2TA)
  - [ ] [全领域覆盖 奇安信霸榜信通院第四期《数字安全护航技术能力全景图》](https://mp.weixin.qq.com/s/Lb253ScCFdw2FtO65GGtew)
  - [ ] [勒索攻击致使美国商户电子支付大面积中断逾3天](https://mp.weixin.qq.com/s/yDOhivqTRFfnFDLJcJ7sLg)
  - [ ] [互动有奖 | 滴滴技术新春年货派送中！](https://mp.weixin.qq.com/s/zxHb8GtkGreyk_VJ600q_Q)
  - [ ] [开源库 Libpng 漏洞已存在30年，可导致数百万系统遭代码执行攻击](https://mp.weixin.qq.com/s/uyH8XoiOHygvgC_mH4vESw)
  - [ ] [微软2月补丁星期二值得关注的漏洞](https://mp.weixin.qq.com/s/i5FZNLdBCd7G9dKQ3diutA)
  - [ ] [马跃新春享趣味  驭风逐梦启新程 ——中资网安举办2026年职工迎新春游艺活动](https://mp.weixin.qq.com/s/n5gDSUAHb84f4wWAhrAOfQ)
  - [ ] [国家数据局综合司发布《关于做好公共数据资源授权运营信息披露工作的通知》](https://mp.weixin.qq.com/s/RTYBz2AUZfUg5L9CYADwhQ)
  - [ ] [已修复 | 微信Linux版本远程命令执行漏洞](https://mp.weixin.qq.com/s/mgdatlRj_WUUKCW8I0VCzw)
  - [ ] [AI大战！秒领取16.8元支付宝现金红包！](https://mp.weixin.qq.com/s/7iwN_EiyZ9bwFcA25w18YA)
  - [ ] [沃尔沃发生数据泄露：因供应商被黑](https://mp.weixin.qq.com/s/xHkZ6wkS9u7rBUey0iH6UA)
  - [ ] [2025年全球国防网络空间情况综述（武器技术篇）](https://mp.weixin.qq.com/s/uG4ZrpIC8qSOW2JW6xn_EQ)
  - [ ] [沃尔沃集团北美公司客户数据遭泄露！](https://mp.weixin.qq.com/s/KuuzctM4uXidy-KIlBHgtg)
  - [ ] [荣耀共此时，同心向未来｜西安四叶草2025年度表彰大会](https://mp.weixin.qq.com/s/cRweAvepy2_aIGqjY8UgaQ)
  - [ ] [关于Notepad++更新服务遭攻击组织定向投毒事件的安全通告](https://mp.weixin.qq.com/s/j1rndBxjgoMDr4atsXhd-Q)
  - [ ] [云上安全态势报告-2026年1月](https://mp.weixin.qq.com/s/bq84YKwA7KVwn7KMHXkZQg)
  - [ ] [云枢杯CTF-HW技能挑战赛](https://mp.weixin.qq.com/s/j2a4ufKz-Ee8aU8NivUeRQ)
  - [ ] [AI生成恶意软件利用React2Shell漏洞攻击Docker，低门槛威胁激增](https://mp.weixin.qq.com/s/EXXeXmN3nBITr7VZd5MNsg)
  - [ ] [SandboxJS四大高危漏洞可完全突破沙箱控制宿主系统](https://mp.weixin.qq.com/s/JrKaokdFkQpffE0XVcT87Q)
  - [ ] [从勒索软件到持久驻留，数字寄生时代的悄然崛起](https://mp.weixin.qq.com/s/R98E1YvBQ5rlsaAXxKXecA)
  - [ ] [CISO面临的首要网络攻击目标与新兴风险载体](https://mp.weixin.qq.com/s/e8m6m6elWU8S8vcRtN3Teg)
  - [ ] [SOME/IP协议入门](https://mp.weixin.qq.com/s/1qj3Q8aXYllXN3jwvUv1sQ)
  - [ ] [AutoSec 10周年大咖确认 | 大众酷翼VSOC平台负责人：面向智能网联汽车的先进安全运维中心架构构建](https://mp.weixin.qq.com/s/BGsLQbx8bgAawHxHTUv0mA)
- 先知安全技术社区
  - [ ] [新春杯CTF Misc方向全解分析](https://xz.aliyun.com/news/91617)
  - [ ] [新春杯CTF RE题目解析](https://xz.aliyun.com/news/91616)
  - [ ] [银狐木马应急响应实录：发现、取证与分析](https://xz.aliyun.com/news/91615)
  - [ ] [应急响应-Docker Tomcat 挖矿入侵溯源](https://xz.aliyun.com/news/91613)
- 奇安信攻防社区
  - [ ] [PE文件代码洞利用技术详解](https://forum.butian.net/share/4770)
- 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  - [ ] [双端应用加固+隐私合规检测：梆梆安全护航车企智能网联业务稳健运行](https://www.4hou.com/posts/Arv7)
  - [ ] [春节前3类高发钓鱼邮件！管理员这样防，年终安全不“掉链子”](https://www.4hou.com/posts/QXYZ)
  - [ ] [机器人变身“工友”：具身智能落地工业制造背后的技术与安全攻防思考](https://www.4hou.com/posts/DxyA)
  - [ ] [解读网络安全法新规：安全合规、移动生态与AI治理三重挑战之下，企业如何构建“内生安全”](https://www.4hou.com/posts/33Z4)
  - [ ] [2025年全球加密货币网络犯罪激增，黑客与勒索攻击事件持续高发](https://www.4hou.com/posts/EyJ4)
- Recent Commits to cve:main
  - [ ] [Update Wed Feb 11 11:29:14 UTC 2026](https://github.com/trickest/cve/commit/bfb5d165c9185078ad50f2ddefd0801e2e9a42a3)
- Private Feed for M09Ic
  - [ ] [github released v0.0.94 at github/spec-kit](https://github.com/github/spec-kit/releases/tag/v0.0.94)
  - [ ] [mgeeky starred hakwerk/labca](https://github.com/hakwerk/labca)
  - [ ] [strands-agents released v1.26.0 at strands-agents/sdk-python](https://github.com/strands-agents/sdk-python/releases/tag/v1.26.0)
  - [ ] [bolucat released 202602112011 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202602112011)
  - [ ] [joaoviictorti starred joaoviictorti/rustbof](https://github.com/joaoviictorti/rustbof)
  - [ ] [ManassehZhou forked ManassehZhou/tailscale from tailscale/tailscale](https://github.com/ManassehZhou/tailscale)
  - [ ] [kpcyrd starred dtolnay/bootstrap](https://github.com/dtolnay/bootstrap)
  - [ ] [niudaii starred chushuai/wscan](https://github.com/chushuai/wscan)
  - [ ] [LoRexxar starred hangwin/mcp-chrome](https://github.com/hangwin/mcp-chrome)
  - [ ] [Y4er contributed to nikkinikki-org/OpenWrt-nikki](https://github.com/nikkinikki-org/OpenWrt-nikki/pull/764)
  - [ ] [gh0stkey starred zai-org/GLM-OCR](https://github.com/zai-org/GLM-OCR)
  - [ ] [Y4er forked Y4er/OpenWrt-nikki from nikkinikki-org/OpenWrt-nikki](https://github.com/Y4er/OpenWrt-nikki)
  - [ ] [PrefectHQ released 3.6.17.dev5 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.6.17.dev5)
  - [ ] [gh0stkey starred pydantic/monty](https://github.com/pydantic/monty)
  - [ ] [Rvn0xsy starred lbjlaq/Antigravity-Manager](https://github.com/lbjlaq/Antigravity-Manager)
  - [ ] [zema1 starred kyxiaxiang/360WFP_Exploit](https://github.com/kyxiaxiang/360WFP_Exploit)
  - [ ] [gh0stkey starred rebornix/Agmente](https://github.com/rebornix/Agmente)
  - [ ] [pydantic released v1.58.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v1.58.0)
- Microsoft Security Blog
  - [ ] [The strategic SIEM buyer’s guide: Choosing an AI-ready platform for the agentic era](https://www.microsoft.com/en-us/security/blog/2026/02/11/the-strategic-siem-buyers-guide-choosing-an-ai-ready-platform-for-the-agentic-era/)
- ElcomSoft blog
  - [ ] [Perfect Acquisition With Passcode Unlock for A8/A8X Devices](https://blog.elcomsoft.com/2026/02/perfect-acquisition-with-passcode-unlock-for-a8-a8x-devices/)
- Insinuator.net
  - [ ] [One More Thing: Introducing the New macOS 26 Tahoe Hardening Guide](https://insinuator.net/2026/02/one-more-thing-introducing-the-new-macos-26-tahoe-hardening-guide/)
- Bug Bounty in InfoSec Write-ups on Medium
  - [ ] [Everyone Scanned the App — I Read the Error Messages Instead](https://infosecwriteups.com/everyone-scanned-the-app-i-read-the-error-messages-instead-2d910231e45f?source=rss----7b722bfd1b8d--bug_bounty)
  - [ ] [Account Takeover using Improper Authorization in “Check Availability” Feature](https://infosecwriteups.com/account-takeover-using-improper-authorization-in-check-availability-feature-4f9f65098853?source=rss----7b722bfd1b8d--bug_bounty)
- Horizon3.ai
  - [ ] [CVE-2026-1281 & CVE-2026-1340](https://horizon3.ai/attack-research/vulnerabilities/cve-2026-1281-cve-2026-1340/)
  - [ ] [CVE-2026-1731](https://horizon3.ai/attack-research/vulnerabilities/cve-2026-1731/)
  - [ ] [From Patch Tuesday to Pentest Wednesday®: Continuous Validation in a Regulated Environment](https://horizon3.ai/customer-story/from-patch-tuesday-to-pentest-wednesday-continuous-validation-in-a-regulated-environment/)
- Securelist
  - [ ] [The game is over: when “free” comes at too high a price. What we know about RenEngine](https://securelist.com/renengine-campaign-with-hijackloader-lumma-and-acr-stealer/118891/)
  - [ ] [Spam and phishing in 2025](https://securelist.com/spam-and-phishing-report-2025/118785/)
- Malwarebytes
  - [ ] [February 2026 Patch Tuesday includes six actively exploited zero-days](https://www.malwarebytes.com/blog/news/2026/02/february-2026-patch-tuesday-includes-six-actively-exploited-zero-days)
  - [ ] [Malwarebytes earns PCMag Best Tech Brand spot, scores 100% with MRG Effitas](https://www.malwarebytes.com/blog/product/2026/02/malwarebytes-earns-pcmag-best-tech-brand-spot-scores-100-with-mrg-effitas)
- Exploit-DB.com RSS Feed
  - [ ] [[webapps] motionEye 0.43.1b4 - RCE](https://www.exploit-db.com/exploits/52481)
  - [ ] [[remote] Windows 10.0.17763.7009 - spoofing vulnerability](https://www.exploit-db.com/exploits/52480)
  - [ ] [[local] glibc 2.38 - Buffer Overflow](https://www.exploit-db.com/exploits/52479)
- Wallarm
  - [ ] [CISO Spotlight: Craig Riddell on Curiosity, Translation, and Why API Security is the New Business Imperative](https://lab.wallarm.com/ciso-spotlight-craig-riddell-curiosity-translation-api-security-business-imperative/)
- HackerNews
  - [ ] [朝鲜特工在 LinkedIn 伪装专业人士渗透企业](https://hackernews.cc/archives/62929)
  - [ ] [Reynolds 勒索软件通过嵌入 BYOVD 禁用 EDR 安全工具](https://hackernews.cc/archives/62939)
  - [ ] [恶意 7-Zip 网站分发掺杂了代理工具的安装程序](https://hackernews.cc/archives/62919)
  - [ ] [新型移动间谍软件 ZeroDayRAT 针对安卓与 iOS 设备发起攻击](https://hackernews.cc/archives/62917)
  - [ ] [朝鲜黑客通过虚假 Zoom 会议、ClickFix 钓鱼攻击加密货币行业高管](https://hackernews.cc/archives/62909)
  - [ ] [Phorpiex 钓鱼攻击投放强隐蔽性 Global Group 勒索软件](https://hackernews.cc/archives/62949)
  - [ ] [沃尔沃集团北美客户数据在 Conduent 黑客攻击中泄露](https://hackernews.cc/archives/62893)
  - [ ] [新型 Linux 僵尸网络 SSHStalker 采用老式 IRC 协议进行命令与控制通信](https://hackernews.cc/archives/62900)
- 安全分析与研究
  - [ ] [伪装成终端安全自查工具样本分析](https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247495674&idx=1&sn=00322e0b000c0d2b4f97687477320488)
- Dhole Moments
  - [ ] [On Discord Alternatives](https://soatok.blog/2026/02/11/on-discord-alternatives/)
- 奇客Solidot–传递最新科技情报
  - [ ] [Archive.today 对博主发动 DDoS 攻击，维基百科考虑将其屏蔽](https://www.solidot.org/story?sid=83542)
  - [ ] [FDA 拒绝审核 Moderna 的 mRNA 流感疫苗](https://www.solidot.org/story?sid=83541)
  - [ ] [Google Chrome 145 重新加入对 JPEG-XL 图像的支持](https://www.solidot.org/story?sid=83540)
  - [ ] [NetBSD 11.0 RC1 释出](https://www.solidot.org/story?sid=83539)
  - [ ] [Windows 记事本爆出一个远程代码执行漏洞](https://www.solidot.org/story?sid=83538)
  - [ ] [字节跳动暂停 Seedance 2.0 的脸部照片转语音功能](https://www.solidot.org/story?sid=83537)
  - [ ] [美国首次面临人口总数减少](https://www.solidot.org/story?sid=83536)
  - [ ] [为什么日本计算机技术 IP 常常放在欧美？](https://www.solidot.org/story?sid=83535)
  - [ ] [美国经济的巨量资金流向资本而不是劳工](https://www.solidot.org/story?sid=83534)
  - [ ] [倭黑猩猩能靠想象玩游戏](https://www.solidot.org/story?sid=83533)
- 黑鸟
  - [ ] [波兰电网攻击曝光工控设备砖化致命威胁](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451185258&idx=1&sn=4ff867fa560db1615382511d8a872c98)
- vivo千镜
  - [ ] [双项权威认可！vivo蓝心大模型通过中国信通院安全评测并签署智能体安全承诺](https://mp.weixin.qq.com/s?__biz=MzI0Njg4NzE3MQ==&mid=2247492281&idx=1&sn=cb0340407a2a102f2f580a566e14967d)
- 威努特安全网络
  - [ ] [《政务数据共享条例》核心解读与应用落实](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651140120&idx=1&sn=d8ca1fa3feb2e194a21e6b37b9846d45)
  - [ ] [融合致远，未来无界——威努特2025年度盘点](https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651140119&idx=1&sn=40ecb016ff478f6c1e063176939f3f50)
- Black Hills Information Security, Inc.
  - [ ] [What to Do with Your First Home Lab](https://www.blackhillsinfosec.com/what-to-do-with-your-first-home-lab/)
- 代码卫士
  - [ ] [开源库 Libpng 漏洞已存在30年，可导致数百万系统遭代码执行攻击](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525101&idx=1&sn=ebdb207062b81e30e6939a2fa2e85a8e)
  - [ ] [微软2月补丁星期二值得关注的漏洞](https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525101&idx=2&sn=973a3ab33cfe6290521da6d90b4c743e)
- 微步在线研究响应中心
  - [ ] [已修复 | 微信Linux版本远程命令执行漏洞](https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508241&idx=1&sn=a0b8ee65257340f64f3ca267fd1e090b)
- 安全内参
  - [ ] [沃尔沃发生数据泄露：因供应商被黑](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515579&idx=1&sn=692e643deef9a3c77e819dd8e4023cd5)
  - [ ] [2025年全球国防网络空间情况综述（武器技术篇）](https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515579&idx=2&sn=8053236e39522fd6cb77fa85766578c6)
- 天御攻防实验室
  - [ ] [美军某部网络战军官 ｜ 美军在乌克兰的“前出狩猎”网络作战行动](https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486695&idx=1&sn=f7f71cc0b5d3c5e5db8d06296ec45446)
- 阿里云应急响应
  - [ ] [云上安全态势报告-2026年1月](https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486406&idx=1&sn=f6d2e9210e33eab4fbcb8e31d13aee41)
- 奇安信 CERT
  - [ ] [微软2月补丁日多个产品安全漏洞风险通告：5个在野利用漏洞](https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504653&idx=1&sn=00b7b70c52946fc115d6caa367bb93fd)
- 中国信息安全
  - [ ] [专题·回顾与展望 | 智见未来：网络安全企业视角回顾与展望（三）](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664259259&idx=1&sn=19296db66dde88e4e7ca2658b2114b10)
  - [ ] [通知 | 国家数据局发文 做好公共数据资源授权运营信息披露工作](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664259259&idx=2&sn=f4db4161068d197cec5193b4148e5c71)
  - [ ] [专家解读 | 构建互联互通数字化服务体系，系统提升数字化服务国际化水平](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664259259&idx=3&sn=ff95a9afcc066e29c66400c6593b35a5)
  - [ ] [前沿 | 国际投资中数据跨境流动的安全保障](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664259259&idx=4&sn=4f1efcd01c41b1fbf20aad6c9d6b0fe6)
  - [ ] [行业 | 打造深度思考能力，启明星辰安星智能体推出DeepHunting功能](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664259259&idx=5&sn=bb5b71d7986477334210d32b6a248852)
  - [ ] [评论 | “网络开盒”涉嫌侵犯公共利益](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664259259&idx=6&sn=2db8bba7b195f6dff20b8185b724c685)
- 安全圈
  - [ ] [【安全圈】CVE-2026-1868：GitLab AI Gateway 严重漏洞（CVSS 9.9），可致远程代码执行](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074106&idx=1&sn=72e574f6313d73bd75cec9f20e036c27)
  - [ ] [【安全圈】假 AI 助手暗藏木马：恶意“ClawdBot”插件潜伏 VS Code](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074106&idx=2&sn=35bf2ad947c8809281fbfe2d1b3ccd9a)
  - [ ] [【安全圈】印度最高法院裁定：WhatsApp 不得以数据共享侵蚀用户隐私](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074106&idx=3&sn=ebfc6c6db3752b75c2267fac40b20c6d)
  - [ ] [【安全圈】法国全面弃用 Zoom 和 Teams：主权视频平台“Visio”落地，数字主权进入实战阶段](https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074106&idx=4&sn=d1170311a7623b6060a3294af3b28da2)
- 天黑说嘿话
  - [ ] [开源版语雀！一款免费的AI知识库系统(wiki)，助你快速构建智能化企业知识库](https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485978&idx=1&sn=4f03deeec583cbbbc6ea6a1a1848d6b2)
- 网络空间安全科学学报
  - [ ] [“面向可信数据空间的密码技术与应用”专刊征稿](https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247507283&idx=1&sn=5b54f28b3b842d6f59474784a03b1c36)
- 安全牛
  - [ ] [AI SOC决策到底能不能信？三大支柱缺一不可，否则CISO都得背锅](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140516&idx=1&sn=b33ec0019a2ae22e21149110c853b80b)
  - [ ] [《网络安全标准实践指南——互联网平台新型腐败预防和处置要求》发布；2026年首月央企网络安全态势：19.3亿条告警背后的防护启示 | 牛览](https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140516&idx=2&sn=85ae064eb8d158a73b8ae4430578039d)
- NOVASEC
  - [ ] [【开源】XSAST-Python：AI代码审计工具](https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490796&idx=1&sn=e4d4012ea559547857e52b3bd0455886)
- 火绒安全
  - [ ] [微信Linux版高危漏洞已修复 信创安全防护仍需重点强化](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247530583&idx=1&sn=593aa8b3be42abd3c36f877d4f2bf243)
  - [ ] [火绒小问答 ——「个人版」常见恶意网址拦截或报毒](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247530583&idx=2&sn=12981dd280ecc4e49770dd72ba70c48d)
  - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247530583&idx=3&sn=15da8df27eb6168fcdd2914c9d5a1a40)
- 数世咨询
  - [ ] [谷歌高管警告：AI 驱动的网络攻击工具包“只是时间问题”](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541694&idx=1&sn=2e4882f56db2a4e0846e65ad6779b43e)
  - [ ] [从隐蔽流转异常到跨源关联分析，保旺达构建跨域缓慢漂移行为智能识别方案](https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541694&idx=2&sn=e29bf1c821976975a036372906f789b8)
- 恒脑与AI
  - [ ] [【报告下载】揭秘2026年代码Agent：智能体纪元的七大变革与一个新威胁](https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247497351&idx=1&sn=a875459a4dd8551da20ff984f2e3d969)
- 嘶吼专业版
  - [ ] [2025年全球加密货币网络犯罪激增，黑客与勒索攻击事件持续高发](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586739&idx=1&sn=9237fde78e0ad2dce2c5a6f7edc61276)
  - [ ] [一图读懂 | 公共安全行业标准 网络安全等级保护系列 GA/T 1390.6—2025 & GA/T 2348—2025](https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586739&idx=2&sn=dc1cd16ac0015aeaa19047ff0e42a237)
- 极客公园
  - [ ] [半年狂揽 5 亿美金，硅谷大佬疯抢的「睡眠黑科技」，正被中国智驾老兵拆解](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653098940&idx=1&sn=d144c61a3fb65753e707517a974b7927)
  - [ ] [马斯克都忍不住转发的 AI 应用，是怎么做出来的？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653098934&idx=1&sn=f08aef488f7d4b712a142df7abb17222)
  - [ ] [雷军宣布初代小米 SU7 正式停产；《黑神话：钟馗》发布六分钟实机预告；字节、阿里、腾讯连发多个新模型｜极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653098914&idx=1&sn=28e7043970db5f01e6c60cfe251dc74e)
- 吴鲁加
  - [ ] [一边敲敲，一边公益](https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247485879&idx=1&sn=6aeb55d031b371232464e83f28e34296)
- 深信服千里目安全技术中心
  - [ ] [微软补丁日安全通告|2月份](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525029&idx=1&sn=0dd1104b57e2021bea9d56d51b1dd7a7)
  - [ ] [网络安全信息与动态周报2026年第6期（2月2日-2月8日）](https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525029&idx=2&sn=89db477dc683ec6dac0333ab47ed901d)
- 情报分析师
  - [ ] [窥探金老板，韩国国家情报院获取朝鲜最高机密的五大手段](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650566686&idx=1&sn=8d21bd9591ab1fbf092daceddf33d35d)
  - [ ] [【深度研判】日英深化网络安全与关键矿产合作全面影响分析](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650566686&idx=2&sn=b6b4dabde7ca586819025eda59b2d999)
- 谛听ditecting
  - [ ] [谛听 | 面向非平稳时间序列的泛化异常检测框架：一种动态概念漂移抑制方法](https://mp.weixin.qq.com/s?__biz=MzU3MzQyOTU0Nw==&mid=2247498728&idx=1&sn=fe1be2bd3dbde3b70c70f6cb2bb2ff31)
- 迪哥讲事
  - [ ] [一个收集js文件中敏感信息的工具](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499055&idx=1&sn=b44aa8862f118f1cbbd574782542c6d8)
- 看雪学苑
  - [ ] [初探Android Linker 动态库SO的加载流程](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458610691&idx=1&sn=53539e2ea0d4c3eda68e915de51d27df)
  - [ ] [紧急修复！Windows 记事本漏洞可致远程代码执行](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458610691&idx=2&sn=80d56bc5de67e2fddbdb31d16d97a8c6)
  - [ ] [无名侠主讲 | 7天打造 IDA 9.0 大师：从零基础到逆向精英](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458610691&idx=3&sn=f8830ffeb61eef9a70791add28954008)
- 360数字安全
  - [ ] [春节防“伪”指南：360安全智能体识破仿冒网站，护航安心年](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247584943&idx=1&sn=667435cb9b689db660674056953f1f72)
- 安全行者老霍
  - [ ] [研究证实经验胜过年轻人的热情](https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247485881&idx=1&sn=b3b363cdf1112235c2587509030fde9f)
- Tails - News
  - [ ] [Tails 7.4.2](https://tails.net/news/version_7.4.2/)
- 国家互联网应急中心CNCERT
  - [ ] [网络安全信息与动态周报2026年第6期（2月2日-2月8日）](https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501219&idx=1&sn=275ae37dcd39531c4e58b3adb9a84d67)
- 安全419
  - [ ] [Gartner发布2026六大网络安全趋势：智能体AI监管与后量子密码成焦点](https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247552378&idx=1&sn=312c564efcd2c1804090f8a59d6b00ab)
- 吾爱破解论坛
  - [ ] [【公告】感动吾爱2025优秀会员名单公布](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143533&idx=1&sn=f76a1315da56bd335d802070eab5352c)
- D3Lab
  - [ ] [A “Safe Browsing Blocker” in a Phishing Kit: Technical Analysis and Why It Fails](https://www.d3lab.net/a-safe-browsing-blocker-in-a-phishing-kit-technical-analysis-and-why-it-fails/)
- Yak Project
  - [ ] [文末领福利！Yak Project 致用户与共建者们的2025年报](https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529402&idx=1&sn=55cb16f4cad72ea811b51f6ed8b33bd8)
- ICT Security Magazine
  - [ ] [Dati sanitari nel dark web: quanto valgono e chi li compra](https://www.ictsecuritymagazine.com/notizie/dati-sanitari-dark-web/)
- Over Security - Cybersecurity news aggregator
  - [ ] [Windows 11 Notepad flaw let files execute silently via Markdown links](https://www.bleepingcomputer.com/news/microsoft/windows-11-notepad-flaw-let-files-execute-silently-via-markdown-links/)
  - [ ] [Patch Tuesday febbraio 2026: 59 bug corretti, sei zero-day e un segnale chiaro per i CISO](https://www.cybersecurity360.it/news/patch-tuesday-febbraio-2026-59-bug-corretti-sei-zero-day-e-un-segnale-chiaro-per-i-ciso/)
  - [ ] [Microsoft Store Outlook add-in hijacked to steal 4,000 Microsoft accounts](https://www.bleepingcomputer.com/news/security/microsoft-store-outlook-add-in-hijacked-to-steal-4-000-microsoft-accounts/)
  - [ ] [Interim CISA chief: ‘When the government shuts down, cyber threats do not’](https://therecord.media/interim-cisa-chief-tells-congress-threats-continue-during-shutdown)
  - [ ] [40 state AGs warn House KOSA bill falls short of protecting children online](https://therecord.media/40-state-ags-warn-house-kosa-bill-falls-short)
  - [ ] [Georgia healthcare company data breach impacts more than 620,000](https://therecord.media/georgia-healthcare-company-data-breach-impacts-620000)
  - [ ] [Crazy ransomware gang abuses employee monitoring tool in attacks](https://www.bleepingcomputer.com/news/security/crazy-ransomware-gang-abuses-employee-monitoring-tool-in-attacks/)
  - [ ] [Police arrest seller of JokerOTP MFA passcode capturing tool](https://www.bleepingcomputer.com/news/security/police-arrest-seller-of-jokerotp-mfa-passcode-capturing-tool/)
  - [ ] [DOJ says Trenchant boss sold exploits to Russian broker capable of accessing ‘millions of computers and devices’](https://techcrunch.com/2026/02/11/doj-says-trenchant-boss-sold-exploits-to-russian-broker-capable-of-accessing-millions-of-computers-and-devices/)
  - [ ] [Proactive strategies for cyber resilience with Wazuh](https://www.bleepingcomputer.com/news/security/proactive-strategies-for-cyber-resilience-with-wazuh/)
  - [ ] [LummaStealer infections surge after CastleLoader malware campaigns](https://www.bleepingcomputer.com/news/security/lummastealer-infections-surge-after-castleloader-malware-campaigns/)
  - [ ] [Report Acn sugli infostealer: ecco le raccomandazioni contro il vettore fantasma dei cyber attacchi](https://www.cybersecurity360.it/news/report-acn-sugli-infostealer-ecco-le-raccomandazioni-contro-il-vettore-fantasma-dei-cyber-attacchi/)
  - [ ] [Evoluzione delle campagne malevole in Italia: i numeri nel 2025](https://www.cybersecurity360.it/news/evoluzione-delle-campagne-malevole-in-italia-i-numeri-nel-2025/)
  - [ ] [Kimwolf Botnet Swamps Anonymity Network I2P](https://krebsonsecurity.com/2026/02/kimwolf-botnet-swamps-anonymity-network-i2p/)
  - [ ] [Moscow moves to throttle Telegram as Kremlin pushes its own messaging app](https://therecord.media/russia-throttles-telegram-pushes-its-own-messaging-app)
  - [ ] [Breaking Down ZeroDayRAT - New Spyware Targeting Android and iOS](https://iverify.io/blog/breaking-down-zerodayrat---new-spyware-targeting-android-and-ios)
  - [ ] [N-Day Vulnerability Trends: The Shrinking Window of Exposure and the Rise of “Turn-Key” Exploitation](https://flashpoint.io/blog/n-day-vulnerability-trends-turn-key-exploitation/)
  - [ ] [Cyber security, l’abbondanza di formazione online fa cadere ogni alibi](https://www.cybersecurity360.it/news/cybersecurity-formazione-online/)
  - [ ] [Il GDPR davanti ai giudici: cosa cambia dopo la sentenza della CGUE su WhatsApp](https://www.cybersecurity360.it/legal/il-gdpr-davanti-ai-giudici-cosa-cambia-dopo-la-sentenza-della-corte-di-giustizia-ue-su-whatsapp/)
  - [ ] [Lummastealer risorge dalle ceneri: ancora una volta lo stop è momentaneo](https://www.securityinfo.it/2026/02/11/lummastealer-risorge-dalle-ceneri-ancora-una-volta-lo-stop-e-momentaneo/)
  - [ ] [The game is over: when “free” comes at too high a price. What we know about RenEngine](https://securelist.com/renengine-campaign-with-hijackloader-lumma-and-acr-stealer/118891/)
  - [ ] [When Paychecks Become the Prize: A Deeper Look at the Rise of Direct…](https://binarydefense.com/resources/blog/when-paychecks-become-the-prize-a-deeper-look-at-the-rise-of-direct-deposit-attacks)
  - [ ] [The US False Claims Act Becomes a Cybersecurity Enforcement Engine](https://cyble.com/blog/false-claims-act-cybersecurity-enforcement/)
  - [ ] [A “Safe Browsing Blocker” in a Phishing Kit: Technical Analysis and Why It Fails](https://www.d3lab.net/a-safe-browsing-blocker-in-a-phishing-kit-technical-analysis-and-why-it-fails/)
  - [ ] [SMS & OTP Bombing Campaigns: Evolving API Abuse Targeting Multiple Regions](https://cyble.com/blog/sms-otp-bombing-campaign-targeting-multiple-regions/)
  - [ ] [BforeAI Named by Gartner® for Predictive Threat Intelligence Use Cases in Preemptive Cyber Defense](https://bfore.ai/news/bforeai-gartner-predictive-threat-intelligence-use-cases-preemptive-cyber-defense/)
  - [ ] [Spam and phishing in 2025](https://securelist.com/spam-and-phishing-report-2025/118785/)
  - [ ] [Manualetto di sicurezza digitale per giornalisti e attivisti](https://www.guerredirete.it/manualetto-di-sicurezza-digitale-per-giornalisti-e-attivisti/)
  - [ ] [12 Lakh SIM Cards Cancelled, over 3 Lakh IMEI Numbers Blocked as Centre Intensifies Crackdown on Cybercrime](https://thecyberexpress.com/sim-cards-cancelled-india-cybercrime/)
  - [ ] [India Rolls Out AI-on-Wheels to Bridge the Digital Divide](https://thecyberexpress.com/yuva-ai-for-all-india-expands-ai-literacy/)
  - [ ] [How to Install OpenClaw on an Android Phone and Control It via WhatsApp](https://www.mobile-hacker.com/2026/02/11/how-to-install-openclaw-on-an-android-phone-and-control-it-via-whatsapp/)
  - [ ] [Emerging Ransomware BQTLock & GREENBLOOD Disrupt Businesses in Minutes](https://any.run/cybersecurity-blog/emerging-ransomware-bqtlock-greenblood/)
  - [ ] [Come proteggere i dati biometrici](https://www.cybersecurity360.it/outlook/proteggere-dati-biometrici/)
  - [ ] [Romance, Fake Platforms, $73M Lost: Crypto Scam Leader Gets 20 Years](https://thecyberexpress.com/global-cryptocurrency-investment-scam/)
  - [ ] [Microsoft Patch Tuesday February Update Flags Exchange and Azure Vulnerabilities as High-Priority Risks](https://thecyberexpress.com/microsoft-patch-tuesday-february-2026/)
  - [ ] [Microsoft releases Windows 11 26H1 for select and upcoming CPUs](https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-11-26h1-for-select-and-upcoming-cpus/)
  - [ ] [Microsoft Patch Tuesday for February 2026 — Snort rules and prominent vulnerabilities](https://blog.talosintelligence.com/microsoft-patch-tuesday-february-2026/)
  - [ ] [New threat actor, UAT-9921, leverages VoidLink framework in campaigns](https://blog.talosintelligence.com/voidlink/)
- Securityinfo.it
  - [ ] [Lummastealer risorge dalle ceneri: ancora una volta lo stop è momentaneo](https://www.securityinfo.it/2026/02/11/lummastealer-risorge-dalle-ceneri-ancora-una-volta-lo-stop-e-momentaneo/?utm_source=rss&utm_medium=rss&utm_campaign=lummastealer-risorge-dalle-ceneri-ancora-una-volta-lo-stop-e-momentaneo)
- Lenny Zeltser
  - [ ] [REMnux v8: 15 Years of Building a Malware Analysis Toolkit](https://zeltser.com/remnux-v8-release/)
- Schneier on Security
  - [ ] [Rewiring Democracy Ebook is on Sale](https://www.schneier.com/blog/archives/2026/02/rewiring-democracy-ebook-is-on-sale.html)
  - [ ] [Prompt Injection Via Road Signs](https://www.schneier.com/blog/archives/2026/02/prompt-injection-via-road-signs.html)
- Future of Tech and Security: Strategy & Innovation with Raffy
  - [ ] [The SIEM Maturity Framework Workbook (v1.0): A Practical Scoring Tool for Security Analytics Platforms](https://raffy.ch/blog/2026/02/11/the-siem-maturity-framework-workbook-v1-0-a-practical-scoring-tool-for-security-analytics-platforms/)
- Dark Space Blogspot
  - [ ] [Televendite e Truffe Con Prefissi 144, 166 e 899 (Anni 90)](http://darkwhite666.blogspot.com/2026/02/televendite-e-truffe-con-prefissi-144.html)
- 赛博昆仑CERT
  - [ ] [【补丁日速递】2026年2月微软补丁日安全风险通告](https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484992&idx=1&sn=9d73f9cc02f0d8c30f918865d6a4c79f)
- SANS Internet Storm Center, InfoCON: green
  - [ ] [Apple Patches Everything: February 2026, (Wed, Feb 11th)](https://isc.sans.edu/diary/rss/32706)
  - [ ] [WSL in the Malware Ecosystem, (Wed, Feb 11th)](https://isc.sans.edu/diary/rss/32704)
  - [ ] [ISC Stormcast For Wednesday, February 11th, 2026 https://isc.sans.edu/podcastdetail/9804, (Wed, Feb 11th)](https://isc.sans.edu/diary/rss/32702)
- Instapaper: Unread
  - [ ] [Riconoscimento facciale negli stadi, il governo torna alla carica](https://www.wired.it/article/riconoscimento-facciale-stadi-governo-decreto-sicurezza/)
- The Hacker News
  - [ ] [First Malicious Outlook Add-In Found Stealing 4,000+ Microsoft Credentials](https://thehackernews.com/2026/02/first-malicious-outlook-add-in-found.html)
  - [ ] [APT36 and SideCopy Launch Cross-Platform RAT Campaigns Against Indian Entities](https://thehackernews.com/2026/02/apt36-and-sidecopy-launch-cross.html)
  - [ ] [Over 60 Software Vendors Issue Security Fixes Across OS, Cloud, and Network Platforms](https://thehackernews.com/2026/02/over-60-software-vendors-issue-security.html)
  - [ ] [Exposed Training Open the Door for Crypto-Mining in Fortune 500 Cloud Environments](https://thehackernews.com/2026/02/exposed-training-open-door-for-crypto.html)
  - [ ] [Microsoft Patches 59 Vulnerabilities Including Six Actively Exploited Zero-Days](https://thehackernews.com/2026/02/microsoft-patches-59-vulnerabilities.html)
  - [ ] [SSHStalker Botnet Uses IRC C2 to Control Linux Systems via Legacy Kernel Exploits](https://thehackernews.com/2026/02/sshstalker-botnet-uses-irc-c2-to.html)
  - [ ] [North Korea-Linked UNC1069 Uses AI Lures to Attack Cryptocurrency Organizations](https://thehackernews.com/2026/02/north-korea-linked-unc1069-uses-ai.html)
- The Register - Security
  - [ ] [Devilish devs spawn 287 Chrome extensions to flog your browser history to data brokers](https://go.theregister.com/feed/www.theregister.com/2026/02/11/security_researcher_287_chrome_extensions_data_leak/)
  - [ ] [Posting AI-generated caricatures on social media is risky, infosec killjoys warn](https://go.theregister.com/feed/www.theregister.com/2026/02/11/ai_caricatures_social_media_bad_security/)
  - [ ] [Were telcos tipped off to *that* ancient Telnet bug? Cyber pros say the signs stack up](https://go.theregister.com/feed/www.theregister.com/2026/02/11/were_telcos_tipped_off_to/)
  - [ ] [Payroll pirates are conning help desks to steal workers' identities and redirect paychecks](https://go.theregister.com/feed/www.theregister.com/2026/02/11/payroll_pirates_business_social_engineering/)
  - [ ] [Notepad's new Markdown powers served with a side of remote code execution](https://go.theregister.com/feed/www.theregister.com/2026/02/11/notepad_rce_flaw/)
  - [ ] [Legacy systems blamed as ministers promise no repeat of Afghan breach](https://go.theregister.com/feed/www.theregister.com/2026/02/11/uk_afghan_breach_probe/)
- TorrentFreak
  - [ ] [Anna’s Archive Quietly ‘Releases’ Millions of Spotify Tracks, Despite Legal Pushback](https://torrentfreak.com/annas-archive-quietly-releases-millions-of-spotify-tracks-despite-legal-pushback/)
- Deeplinks
  - [ ] [🗣 Homeland Security Wants Names | EFFector 38.3](https://www.eff.org/deeplinks/2026/02/homeland-security-wants-names-effector-383)
  - [ ] [“Free” Surveillance Tech Still Comes at a High and Dangerous Cost](https://www.eff.org/deeplinks/2026/02/free-surveillance-tech-still-comes-high-and-dangerous-cost)
- Krebs on Security
  - [ ] [Kimwolf Botnet Swamps Anonymity Network I2P](https://krebsonsecurity.com/2026/02/kimwolf-botnet-swamps-anonymity-network-i2p/)
- Daniel Miessler
  - [ ] [Customizing Your Claude Code Spinner Verbs](https://danielmiessler.com/blog/customized-spinner-verbs-in-claude-code?utm_source=rss&utm_medium=feed&utm_campaign=website)
- Security Affairs
  - [ ] [Volvo Group hit in massive Conduent data breach](https://securityaffairs.com/187875/security/volvo-group-hit-in-massive-conduent-data-breach.html)
  - [ ] [Reynolds ransomware uses BYOVD to disable security before encryption](https://securityaffairs.com/187869/security/reynolds-ransomware-uses-byovd-to-disable-security-before-encryption.html)
  - [ ] [SSHStalker botnet targets Linux servers with legacy exploits and SSH scanning](https://securityaffairs.com/187833/malware/sshstalker-botnet-targets-linux-servers-with-legacy-exploits-and-ssh-scanning.html)
  - [ ] [U.S. CISA adds Microsoft Office and Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/187855/security/u-s-cisa-adds-microsoft-office-and-microsoft-windows-flaws-to-its-known-exploited-vulnerabilities-catalog.html)
- Security Weekly Podcast Network (Audio)
  - [ ] [Preparing For Q-Day as CISOs Face Quantum Disruption and Cyber Resilience Pressures - Sandy Carielli - BSW #434](http://sites.libsyn.com/18678/preparing-for-q-day-as-cisos-face-quantum-disruption-and-cyber-resilience-pressures-sandy-carielli-bsw-434)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[每日信息流] 2026-02-12 #1146

每日安全资讯（2026-02-12）

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[每日信息流] 2026-02-12 #1146

Description

每日安全资讯（2026-02-12）

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions