Posts of last few hours

第174篇：Python 型内存马注入与沙箱逃逸（记一次应急响应中的内存马样本分析）
https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247488592&idx=1&sn=a73b085ed768e77208858b1e14c1d198
Bitget Restarts Bitcoin Withdrawals Following $387.5m Wallet Breach
Bitget has restarted Bitcoin withdrawals after a $387.5m breach of its hot and warm wallets
https://www.infosecurity-magazine.com/news/bitget-restarts-withdrawals-387-5m/
AI-vs-AI的对抗博弈理论
https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247497214&idx=1&sn=df00e6986b63d83299bf76d7f1d63ae2
NVIDIA Launches Open Platform to Secure Autonomous AI Agents
NVIDIA has launched a platform pairing runtime controls with hardware monitoring for AI agents
https://www.infosecurity-magazine.com/news/nvidia-open-platform-secure/
美国逾七成沿海地区每年沉降逾 0.1 厘米
沿海居民不仅需要担心海平面上升，还需要担心地面沉降。研究人员分析了卫星雷达测量的逾 1.9 亿垂直地面运动数据点，发现 2007-2020 年间美国沿海地区普遍存在地面沉降。全美 71.5% 的沿海地区沉降速度每年逾 0.1 厘米，墨西哥湾沿海沉降速度最快。43% 的美国海岸线每年沉降 0.2厘米或以上，23.3% 每年沉降至少 0.3 厘米。西海岸部分地区则出现地面上升。研究指出导致沿海地区地面沉降的原因包括自然地质过程如三角洲和湿地等区域软沉积物的自然压实，过度抽取地下水等。有 6710 万人生活在低度沉降区，1400 万人生活在中度沉降区，320 万人生活在高度沉降区。

https://www.solidot.org/story?sid=85495
Deepfakes Are Becoming a Costly Reality for Businesses, Report Warns
A quarter of victims of deepfake attacks have lost over $1m. CISOs worry that boardrooms don’t understand the threat
https://www.infosecurity-magazine.com/news/deepfakes-costly-reality-for/
Akamai Joins Athena Coalition to Shield Users from New Vulnerabilities
Akamai joins Chainguard’s Athena Coalition, verifying that Akamai App & API Protector customers are automatically shielded from newly disclosed vulnerabilities.
https://www.akamai.com/blog/security-research/2026/sep/akamai-joins-athena-coalition-shield-users-vulnerabilities
Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI
AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling data, calling APIs, and acting across business systems—often without the same controls applied to human users. According to Okta’s Global CISO Insights 2026 report, only 47% of CISOs are confident they can identify every AI agent in their environment. Even among those who feel
https://thehackernews.com/2026/09/webinar-how-to-govern-ai-agents-reduce.html
Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. "The implant installs the framework unchanged, then overwrites its SOUL.md persona file," ThreatDown said. "The 39-line prompt directs it to execute tasks received through
https://thehackernews.com/2026/09/carbonato-botnet-compromises-docker.html
OpenAI Agent Swarm Bypassed Sandbox Limits and Left 80,000 Attack Payloads Behind

About 700 OpenAI agents allegedly escaped evaluation sandboxes, compromised parts of Hugging Face infrastructure, and generated over 80,000 attack payloads via public URL chains. The report says the agents initially had limited internet access and could only make GET requests, which normally allow a system to retrieve web content without submitting data or interacting with […]

The post OpenAI Agent Swarm Bypassed Sandbox Limits and Left 80,000 Attack Payloads Behind appeared first on Cyber Security News.

https://cybersecuritynews.com/openai-agent-swarm-bypassed-sandbox/
冲动与拖延之间共享神经遗传基础
你是否有过这样的经历，明知截止时间越来越近，却忍不住频繁刷手机、告诉自己“明天再说”？这种情况被称为拖延。一直以来，拖延被贴上懒惰、自律不足或意志力薄弱的标签，但这种看似影响学习工作以及身心健康的行为，为什么普遍存在且在进化过程中被保留下来？中国科学院心理研究所等团队证实，拖延与冲动这两种看似相反的行为，存在部分共同的生物学基础。有理论认为，拖延其实是非计划冲动性（无预案的即时冲动）的进化副产物。在远古时代，人类在野外生存，必须对眼前的机遇或危险做出快速反应。这种即时反应的本能有助于更好地生存。而现代社会的学习和工作，大多要求人们提前做好长期规划、延迟满足并持续执行目标。当偏好即时奖赏的本能遇到需要长期投入的环境时，拖延行为便容易产生。但这一假说一直缺乏系统性的研究证据。对双生子行为的分析显示，非计划冲动性存在中等遗传倾向，拖延的遗传倾向较高，且二者存在中等水平的遗传相关。整合既往研究数据后，这种遗传关联仍然稳健。研究还发现，拖延本身存在独特的遗传影响因素。因此，拖延不能被视作冲动性的完全副产物，个人经历、生活环境及具体任务情境，同样会对拖延行为产生重要作用。

https://www.solidot.org/story?sid=85494
对一款 Linux 木马开源提示词的测评
https://mp.weixin.qq.com/s?__biz=MzIyOTY1NDE5Mg==&mid=2247485620&idx=1&sn=02616f297d065e465facc82a922fa64b
Citrix NetScaler 2个0day RCE漏洞已被野外利用！CVSS 9.5
Citrix发布紧急补丁，漏洞已被实战利用
https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458622068&idx=3&sn=e8be9a1995e804652e998637e0b72b45
r0re 自动逆向分析工具实战记录
看雪论坛作者ID：fyrlove
https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458622068&idx=2&sn=a06e997f8074ecf57710e15cffbca176
SDC2026议题预告 | 从 LLM 到 Agent：AI 安全攻击面的过去、现在与未来
复盘 AI 安全攻击面的迁移全程
https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458622068&idx=1&sn=043014a22d443e7be6abb991e8be078b
英伟达 GeForce RTX 5090 成为热门走私商品
澳门海关公布，近日积极打击水客活动，加强口岸关检执法，并运用科技手段严厉打击偷运物品进出本澳的不法行为。海关仅于一周内便破获 12 宗走私案，货物总市值达 151 万，当中包括 359 件 Apple AirPods 耳机及 2 张 GeForce RTX 5090 显卡等。12 名涉案人士年龄介乎 18 至 53 岁，当中包括 7 名内地旅客、3 名澳门居民及 2 名香港居民。澳门海关已根据《对外贸易法》对涉案人士作出起诉，相关违法行为一经证实，可被科处最高 10 万澳元罚款，所缉获的货物亦会宣告归澳门特别行政区所有。

https://www.solidot.org/story?sid=85493
MCP Is Creating Major Governance Gaps, Researchers Warn
Ox Security found security shortcomings in analysis of over 15,000 MCP servers
https://www.infosecurity-magazine.com/news/mcp-creating-major-governance-gaps/
安全419｜一周国内网安资讯: 监管收紧，AI 安全热度高涨
App 合规严查、高危漏洞频发，AI 安全产业持续升温。
https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247555645&idx=2&sn=0cecb350520da3b62ba108bf16e54aa5
当AI抹平安全能力边界 细分赛道的护城河还剩多少？
答案取决于把"优势"定义在哪里。
https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247555645&idx=1&sn=1d5b39cedbd5f5c6b8fe4a1a55063a87
PHP Fixed a Bug That Could Send Your Login Credentials to the Wrong Server

PHP has fixed a security flaw that could expose login credentials, cookies, and proxy authentication data to an unintended server during HTTP redirects. The vulnerability, tracked as CVE-2026-91766 and GHSA-fpwc-w8rq-cr92, affects PHP’s HTTP stream wrapper and has been rated as moderate severity. The issue occurs when a PHP application uses the http:// or https:// stream […]

The post PHP Fixed a Bug That Could Send Your Login Credentials to the Wrong Server appeared first on Cyber Security News.

https://cybersecuritynews.com/php-fixed-a-bug/

Managed ad