Posts of last few hours

Сентябрьский патч Windows начал ломать доверие к домену
Правильный пароль внезапно перестал гарантировать вход.
https://www.securitylab.ru/news/577537.php
机器人如何自进化，乐享科技走了一条新路
当数字世界的 AI 开始讨论自进化，物理世界的 AI 有没有自进化，或许是下一个时代最重要的问题。
https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653113802&idx=1&sn=a052c9e85b2b45528e0ead024c40210a
Chrome 153 Patches 16 Security Vulnerabilities Including Critical Dawn and WebGL Flaws

Google has released Chrome 153 to the Stable channel for Windows, macOS, and Linux, addressing 16 security vulnerabilities, including two critical memory-safety flaws in Dawn and WebGL. The update is rolling out as version 153.0.8010.52/.53 for Windows and macOS, while Linux users will receive version 153.0.8010.52. The most severe issue, tracked as CVE-2026-93374, is a […]

The post Chrome 153 Patches 16 Security Vulnerabilities Including Critical Dawn and WebGL Flaws appeared first on Cyber Security News.

https://cybersecuritynews.com/chrome-153-patches-16-security-vulnerabilities/
专家观点 | 全民合力守护智能时代网络安全
2026年国家网络安全宣传周于9月14日至20日在全国开展，今年的主题是“网络安全为人民，网络安全靠人民——智能时代 网安护航”。各地以此为契机集中展示网络安全建设成果，向公众普及法律法规与防护技能，进一步凝聚全社会守护网络安全的共识。
https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664267043&idx=6&sn=683535c3e8bc3d813e62d2e5537d7b42
关注 | 又一批“银狐”木马相关恶意域名及恶意IP公布！
本周，CCTGA研判确认了“银狐”木马使用的一批恶意网络资产，现予以披露。本次重点披露近期控制规模较大的TOP10恶意网络资产，归属地主要分布于美国和中国香港等国家和地区。
https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664267043&idx=5&sn=77beeefb24f9126356ab80b9ef31b15d
通知 | 网安标委就《网络安全标准实践指南——智能体系统开发安全指南（征求意见稿）》公开征求意见
如有意见或建议，请于2026年10月2日前反馈。
https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664267043&idx=4&sn=6ef6b991cb7d79eb3636336d5cd91047
筑牢智能时代网络安全防线，护航核工业数字化高质量发展——中国核工业集团有限公司2026年国家网络安全宣传周系列活动
为深入贯彻落实国家关于网络强国的重要思想，积极响应2026年国家网络安全宣传周“网络安全为人民，网络安全靠人民——智能时代，网安护航”的主题号召，全面提升全员网络安全意识与防护技能，中国核工业集团有限公司策划并组织开展一系列网络安全主题宣贯活动
https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664267043&idx=3&sn=7998eef63f6bacb0b3e6357ca313c002
通知 | 中央网信办发文 加强涉企侵权信息管理 持续推动营商网络环境优化
近年来，全国网信系统认真贯彻落实党中央决策部署，组织开展优化营商网络环境工作，大力整治涉企网络乱象，网上涉企舆论环境持续向上向好。同时也要看到，网上涉企侵权行为成本低、传播快、影响大，反复性、复杂性交织……
https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664267043&idx=2&sn=bc10ecb798d170bf09977d6066a3ebf5
通知 | 国家网信办就《国务院关于保障未成年人健康安全使用网络的规定（征求意见稿）》公开征求意见
意见反馈截止日期为2026年10月17日。
https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664267043&idx=1&sn=03d8d9bd9aea0c5be7012f536d5dd570
Zero-click RCE сразу в четырёх крупнейших ИИ-агентах Claude Code, Codex, Copilot и Gemini
Проверенный плагин может превратиться во вредоносный уже после установки.
https://www.securitylab.ru/news/577550.php
An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.
In July 2025, someone registered a domain that used to belong to a content delivery network.  The CDN had been wound down years earlier, and the domain it served assets from was allowed to expire. What it had not lost were its callers. Thousands of websites, code repositories, and documentation pages still carry hard-coded references to hostnames beneath it.  The new owner holds
https://thehackernews.com/2026/09/an-abandoned-cdn-domain-was-re.html
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
A flaw in four widely used AI coding agents lets someone who controls a plugin's code repository swap the plugin an agent installs for a malicious one, even when the agent locked that plugin to a specific reviewed version, security firm Air Security said on Thursday. The firm said Anthropic has patched the flaw in Claude Code 2.1.179 and OpenAI in Codex 0.146.0, that GitHub Copilot has no
https://thehackernews.com/2026/09/plugin4shell-lets-repository-owners.html
【安全圈】防火墙中枢被击穿！Check Point 曝 9.8 分漏洞：超长用户名直接拿 Root
关键词漏洞🚨 全球头部网络安全巨头 Check Point 紧急披露一个极度严重的未授权远程代码执行漏洞（C
https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652079007&idx=4&sn=ee03a1d00069903ffa5e2b89cb3178f0
【安全圈】AI 智能体打穿沙箱！Docker 曝 9.4 分逃逸漏洞：穿透虚拟机读写宿主
关键词漏洞🚨 Docker 官方突发紧急安全通告，其专为 AI 编码智能体（AI Coding Agents
https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652079007&idx=3&sn=f573fda0930936118a001a7d0985e466
【安全圈】AI 控机还杀不死！新型安卓木马曝光：卸载仍常驻 Shell
关键词木马🚨 移动安全实验室 Zimperium 最新披露一款极具攻击性的新型安卓高级木马“RatHat”。
https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652079007&idx=2&sn=1de45fa1e0c91b7f0ce3601436604bef
【安全圈】程序员炸锅！智谱 ZCode 被曝静默打包工作区与 Git 历史直传云端
https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652079007&idx=1&sn=e3ef54109cd4fbca8f3ac931c56cc95c
AI安全专题周报

报告编号：TIC-202609-AI03

报告周期：2026年9月12日—9月18日

一、报告概述

基于360威胁情报中心对本期公开网络安全素材的整

https://blog.netlab.360.com/aian-quan-zhuan-ti-zhou-bao-6/
美国宾州21岁男子被控为“YSL国”筹备恐袭并被查获步枪弹药，在线独狼模式与加密动员对我海外人员及网络治理构成示范风险
21岁、有前科、受过监管，却在数周内推进到实弹购枪的临界点2026年9月13日，联邦调查局特工在宾夕法尼亚州
https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650569722&idx=2&sn=bba44b826b461f47188a07535edd67ad
30艘快艇、7亿美元！韩国与法国为何在菲律宾杀红了眼
绝大多数人这辈子都不会关心菲律宾海军要买几艘快艇。这事儿听上去像军贸圈里一笔不起眼的小买卖——三十艘小船，七亿美元第二批合同，连个正经军舰的吨位都不到。
https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650569722&idx=1&sn=bce30fa1a5db3144ec12aa7d560855bf
Android Apps Can Now Check If Your Phone Is Missing Critical Security Patches

Android has released new Security State libraries that allow apps and enterprise tools to check whether a device is missing important security patches. The update gives developers a more detailed view of Android security than the traditional monthly Security Patch Level, helping apps identify unpatched system components, pending updates, and specific vulnerability fixes. The stable […]

The post Android Apps Can Now Check If Your Phone Is Missing Critical Security Patches appeared first on Cyber Security News.

https://cybersecuritynews.com/android-apps-check-security-patches/

Managed ad