# 每日安全资讯（2026-02-18） - SecWiki News - [ ] [SecWiki News 2026-02-17 Review](http://www.sec-wiki.com/?2026-02-17) - Doonsec's feed - [ ] [【逆向分析】Trae CN + IDA PRO + IDA_PRO_MCP + 豆包 2.0 半小时搞定逆向分析](https://mp.weixin.qq.com/s/-3Pf45oR9T6beZzvQsWorA) - [ ] [【人工智能】Trae CN 详细使用指南](https://mp.weixin.qq.com/s/ecNH5q5Mcwm3YwDnao3Vkw) - [ ] [【逆向分析】IDA PRO 详细使用指南](https://mp.weixin.qq.com/s/wSnX8HuHgNRuTad1ITfLSQ) - [ ] [【逆向分析】ida-pro-mcp 详细使用指南](https://mp.weixin.qq.com/s/UiaASlTv99TMx46k6v-GFw) - [ ] [【人工智能】豆包 2.0 详细使用指南](https://mp.weixin.qq.com/s/8R6s_HQJZ4vTP7hrMDNsKg) - [ ] [新型ZeroDayRAT间谍软件同时攻击安卓与iOS系统](https://mp.weixin.qq.com/s/KRm9Y-ltDoWzXrgCib3gjQ) - [ ] [OpenEuler 服务器部署前安全加固与初始化配置指南](https://mp.weixin.qq.com/s/YPZpuVRpKoxSuiKLPA4DQQ) - [ ] [OpenEuler 等保2.0 三级合规安全加固操作指南](https://mp.weixin.qq.com/s/luJJ4eJnIeKMWRClpLDS7Q) - [ ] [新春快乐、马年好运](https://mp.weixin.qq.com/s/UGGz2ET0v9Rznh46PgWP6w) - [ ] [新年快乐](https://mp.weixin.qq.com/s/rDkzuCNoMxqOfWz7HoSFdg) - [ ] [2025数证杯团体](https://mp.weixin.qq.com/s/Ex7w6lJgi8qB4ECtskfYxg) - [ ] [共迎马年，新春快乐！](https://mp.weixin.qq.com/s/6k1I-6lG3P2MgKLEflR82Q) - [ ] [骏马昂首，奔赴新程！天融信给您拜年啦~](https://mp.weixin.qq.com/s/X--dhfXBc-_iBh0NedaURQ) - [ ] [马年到！复旦白泽祝大家新春快乐！](https://mp.weixin.qq.com/s/9Pf1hmULcZS7iGj3bc-4Kg) - [ ] [策马扬鞭启新程｜恭祝大家新春大吉，万事亨通](https://mp.weixin.qq.com/s/gNFPmfS-Evpp3m2t3rPNRw) - [ ] [祝大家新年快乐，今年是受 AI 影响最大的一](https://mp.weixin.qq.com/s/a4otVmLSdP63ErRGnL_RFw) - [ ] [创宇盾风险尽御，迎新春安全无忧](https://mp.weixin.qq.com/s/H215nf8ExAYjOoogoUSFGw) - [ ] [丙午马年・网安人新春贺词：策马出征，洞见巅峰！](https://mp.weixin.qq.com/s/jK7oyKne38Xv-yxj8RkbKg) - [ ] [赛博研究院恭祝您新春快乐，马年大吉！](https://mp.weixin.qq.com/s/Min5PC9M3vEo5C-Ti94BOQ) - [ ] [补天给白帽师傅们拜年啦！](https://mp.weixin.qq.com/s/5uzdwGTDkn4ZL7kP15ojJw) - [ ] [马年贺岁，镌远科技祝大家新年快乐！](https://mp.weixin.qq.com/s/TQr3OavOEUa1WsZX2okgww) - [ ] [丙午策马，共赴新程｜迪普科技祝您春节快乐](https://mp.weixin.qq.com/s/Pk8GkTLyOWrvWk5tPVynVw) - [ ] [新春贺辞](https://mp.weixin.qq.com/s/lpjvK9lxhDFAOKeKVgU20g) - [ ] [春节专享来啦](https://mp.weixin.qq.com/s/_noEVSELnLdYdvcYLygoqA) - [ ] [2026，新春快乐！烟火向星辰，所愿皆成真！](https://mp.weixin.qq.com/s/D8UzB5QTtXl50OFMe5eQIg) - [ ] [祝所有的朋友们马年快乐！！](https://mp.weixin.qq.com/s/-cHOlp5vf0UHwuocopNwfg) - [ ] [新春第一声问候：新年快乐，马到成功！](https://mp.weixin.qq.com/s/VPxB_B7DHsRz3wqsiK7VfA) - [ ] [【新年快乐】菜狗安全祝师傅们新年快乐](https://mp.weixin.qq.com/s/awOaTXoOcIuypTtd1pWIQw) - [ ] [NOVASEC团队祝大家2026新春快乐!!!](https://mp.weixin.qq.com/s/pxvyiBrEak1v3EtHX6qjTw) - [ ] [福启新岁 | 云弈科技祝您新年快乐、马年順遂！](https://mp.weixin.qq.com/s/vCgmCFrgOMr3lRGsPjNgTw) - [ ] [🐴 T00ls祝大家 马年大吉 U0001f9e7](https://mp.weixin.qq.com/s/R2OS0_TmYOVRa0wduV9fNg) - [ ] [马年大吉](https://mp.weixin.qq.com/s/YPhsgZ0XGWPx4BMq37u18g) - [ ] [约旦人承认出售50家企业网络的访问权限](https://mp.weixin.qq.com/s/uxBPc_HgDQJlOMFYZiee-Q) - Recent Commits to cve:main - [ ] [Update Tue Feb 17 11:27:36 UTC 2026](https://github.com/trickest/cve/commit/458d954222d5c933468dcb6e5b0944b678c4c748) - Private Feed for M09Ic - [ ] [mgeeky starred obra/superpowers](https://github.com/obra/superpowers) - [ ] [bolucat released 202602172005 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202602172005) - [ ] [mgeeky starred Hack0ura/WebClientRelayUp](https://github.com/Hack0ura/WebClientRelayUp) - [ ] [anthropics released v2.1.45 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.1.45) - [ ] [OpenAEV-Platform released 2.1.8 at OpenAEV-Platform/openaev](https://github.com/OpenAEV-Platform/openaev/releases/tag/2.1.8) - [ ] [safedv starred Hack0ura/WebClientRelayUp](https://github.com/Hack0ura/WebClientRelayUp) - [ ] [mgeeky starred blacklanternsecurity/TREVORproxy](https://github.com/blacklanternsecurity/TREVORproxy) - [ ] [github released v0.0.96 at github/spec-kit](https://github.com/github/spec-kit/releases/tag/v0.0.96) - [ ] [mgeeky starred SlavomirDurej/claude-usage-widget](https://github.com/SlavomirDurej/claude-usage-widget) - [ ] [gh0stkey starred Mrack/TInjector_Symbi](https://github.com/Mrack/TInjector_Symbi) - [ ] [PrefectHQ released 3.6.18.dev4 at PrefectHQ/prefect](https://github.com/PrefectHQ/prefect/releases/tag/3.6.18.dev4) - [ ] [safedv starred code-yeongyu/oh-my-opencode](https://github.com/code-yeongyu/oh-my-opencode) - [ ] [gh0stkey starred blacktop/ida-mcp-rs](https://github.com/blacktop/ida-mcp-rs) - [ ] [CHYbeta starred myinvestpilot/ai-architecture](https://github.com/myinvestpilot/ai-architecture) - [ ] [pydantic released v1.60.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v1.60.0) - Microsoft Security Blog - [ ] [Unify now or pay later: New research exposes the operational cost of a fragmented SOC](https://www.microsoft.com/en-us/security/blog/2026/02/17/unify-now-or-pay-later-new-research-exposes-the-operational-cost-of-a-fragmented-soc/) - Insinuator.net - [ ] [Vulnerability Disclosure: JWT Authentication Bypass in OpenID Connect Authenticator for Tomcat](https://insinuator.net/2026/02/jwt-authentication-bypass-in-openid-connect-authenticator-for-tomcat/) - Bug Bounty in InfoSec Write-ups on Medium - [ ] [The Database Was Sold Online. but the Vulnerability Was Still Open](https://infosecwriteups.com/the-database-was-sold-online-but-the-vulnerability-was-still-open-57c386c3404b?source=rss----7b722bfd1b8d--bug_bounty) - [ ] [How I Escalated Privileges from “User” to “Admin”](https://infosecwriteups.com/how-i-escalated-privileges-from-user-to-admin-0e6aa72274fc?source=rss----7b722bfd1b8d--bug_bounty) - [ ] [Breaking Tenant Isolation: Critical Cross-Tenant Data Access in Stripo’s AI Hub Campaign](https://infosecwriteups.com/breaking-tenant-isolation-critical-cross-tenant-data-access-in-stripos-ai-hub-campaign-ef9d69378314?source=rss----7b722bfd1b8d--bug_bounty) - Securelist - [ ] [Divide and conquer: how the new Keenadu backdoor exposed links between major Android botnets](https://securelist.com/keenadu-android-backdoor/118913/) - Hacking Dream - [ ] [Windows Event Log Analysis - Investigating Kerberos & AD Attacks](https://www.hackingdream.net/2026/02/windows-event-log-analysis-investigating-kerberos-ad-attacks.html) - Malwarebytes - [ ] [Chrome “preloading” could be leaking your data and causing problems in Browser Guard](https://www.malwarebytes.com/blog/product/2026/02/chrome-preloading-could-be-leaking-your-data-and-causing-problems-in-browser-guard) - [ ] [Scam Guard for desktop: A second set of eyes for suspicious moments](https://www.malwarebytes.com/blog/product/2026/02/scam-guard-for-desktop-a-second-set-of-eyes-for-suspicious-moments) - [ ] [Update Chrome now: Zero-day bug allows code execution via malicious webpages](https://www.malwarebytes.com/blog/news/2026/02/update-chrome-now-zero-day-bug-allows-code-execution-via-malicious-webpages) - [ ] [Hobby coder accidentally creates vacuum robot army](https://www.malwarebytes.com/blog/news/2026/02/hobby-coder-accidentally-creates-vacuum-robot-army) - SentinelOne - [ ] [Shadow Agents: How SentinelOne Secures the AI Tools That Act Like Users](https://www.sentinelone.com/blog/how-sentinelone-secures-the-ai-tools-that-act-like-users/) - rtl-sdr.com - [ ] [Khanfar Software: Analog Radio Hunter](https://www.rtl-sdr.com/khanfar-software-analog-radio-hunter/) - [ ] [Iridium-Sniffer: A Standalone Iridium Satellite Burst Detector and Demodulator](https://www.rtl-sdr.com/iridium-sniffer-a-standalone-iridium-satellite-burst-detector-and-demodulator/) - [ ] [xSDR Crowdfunding Campaign Now Live](https://www.rtl-sdr.com/xsdr-crowdfunding-campaign-now-live/) - Wallarm - [ ] [Inside Modern API Attacks: What We Learn from the 2026 API ThreatStats Report](https://lab.wallarm.com/inside-modern-api-attacks-what-we-learn-from-the-2026-api-threatstats-report/) - Dhole Moments - [ ] [Cryptographic Issues in Matrix’s Rust Library Vodozemac](https://soatok.blog/2026/02/17/cryptographic-issues-in-matrixs-rust-library-vodozemac/) - 奇客Solidot–传递最新科技情报 - [ ] [虚假医疗信息的主要受众是老年人](https://www.solidot.org/story?sid=83574) - [ ] [希捷和西部数据证实其 2026 年硬盘产能已售罄](https://www.solidot.org/story?sid=83573) - [ ] [内存价格飙升推动二手笔记本销量上涨](https://www.solidot.org/story?sid=83572) - [ ] [切尔诺贝利工人后代的 DNA 突变](https://www.solidot.org/story?sid=83571) - Security Blog | Praetorian - [ ] [MCP Server Security: The Hidden AI Attack Surface](https://www.praetorian.com/blog/mcp-server-security-the-hidden-ai-attack-surface/) - 锦行科技 - [ ] [初一 · 迎春｜2026，一马当先](https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247494757&idx=1&sn=09f9b7210cb56588e9580b5375fe7927) - 黑鸟 - [ ] [新型Keenadu安卓固件级后门揭开跨僵尸网络协同攻击链条](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451185321&idx=1&sn=6cc091bbf4b0e2e24f59d38ee3c9f257) - 安全客 - [ ] [骏马扬蹄开景运，灵风送暖启新程](https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789682&idx=1&sn=83d7cfe007d4306e69f94688c9dc01cd) - 360漏洞云 - [ ] [马驰万里开新路，鹏举九霄展壮图](https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247504965&idx=1&sn=1e8dbe848941df9a8f9aaabab3ac4993) - 丁爸 情报分析师的工具箱 - [ ] [【时政】AI讨论总台春晚版权保护声明](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651154366&idx=1&sn=e7ec8f1950e41469af75529c6279321a) - [ ] [【时政】随着住房负担能力危机加剧，工薪阶层感受不到情人节的甜蜜](https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651154366&idx=2&sn=3c3bda457038ccec6343881ab8b10158) - 中国信息安全 - [ ] [新年启新程 马到必成功](https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664259415&idx=1&sn=dfa2b89387aa970b6c69cb9a7b0b0d5a) - 极客公园 - [ ] [对话任永亮：有 6000 万用户的测测，为什么要做一个机器人？](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653099385&idx=1&sn=c06256a22f0710bc0ac9e80cb90319a3) - [ ] [「机器人春晚」的 B 面：我们在欢笑中，接受了新型的人机关系](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653099356&idx=1&sn=bad2851e3ddc61fb54cdb3e27fc1e991) - [ ] [阿里发布千问 3.5；宇树春晚武术表演刷新多项纪录；内存太贵，索尼将推迟发售下一代 PS 游戏机 | 极客早知道](https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653099310&idx=1&sn=2df4a88e8174c986d6540964deabe240) - 火绒安全 - [ ] [新春喜乐至 护网守平安](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247530711&idx=1&sn=096ea8c17c02af86050eb073d18e8e23) - [ ] [诚邀渠道合作伙伴共启新征程](https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247530711&idx=2&sn=8679b2d262e4381d8768a83ad646a1b5) - 慢雾科技 - [ ] [祝大家新春快乐，马年大吉！](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247504321&idx=1&sn=0f35314c005bd52d127b15d5968ccc12) - 吴鲁加 - [ ] [小而美，难，也不难](https://mp.weixin.qq.com/s?__biz=Mzg5NDY4ODM1MA==&mid=2247485889&idx=1&sn=d6253531db975c532d712eaa933ad88e) - 情报分析师 - [ ] [如何每天将开源情报纳入情报收集计划](https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650566773&idx=1&sn=05d01a10a30aabf0cd370ef97f418cc8) - 迪哥讲事 - [ ] [大家春节快乐](https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499081&idx=1&sn=11d8d5cf9c3664c7b98477d66bfc981b) - 360数字安全 - [ ] [大年初一 | 一马当先，“午”福临门](https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585001&idx=1&sn=6158f74ac13dbd14b25d6f15c30ef7e3) - 威胁猎人Threat Hunter - [ ] [骏马扬蹄奔新程，情报护航步步稳](https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247502797&idx=1&sn=edc302b4dd72aef38cd9a224ad60fc6b) - Over Security - Cybersecurity news aggregator - [ ] [Spain orders NordVPN, ProtonVPN to block LaLiga piracy sites](https://www.bleepingcomputer.com/news/legal/spain-orders-nordvpn-protonvpn-to-block-laliga-piracy-sites/) - [ ] [Spain orders NordVPN and ProtonVPN to block LaLiga stream piracy](https://www.bleepingcomputer.com/news/legal/spain-orders-nordvpn-and-protonvpn-to-block-laliga-stream-piracy/) - [ ] [Flaws in popular VSCode extensions expose developers to attacks](https://www.bleepingcomputer.com/news/security/flaws-in-popular-vscode-extensions-expose-developers-to-attacks/) - [ ] [Chinese hackers exploiting Dell zero-day flaw since mid-2024](https://www.bleepingcomputer.com/news/security/chinese-hackers-exploiting-dell-zero-day-flaw-since-mid-2024/) - [ ] [Polish police detain alleged cybercriminal with Phobos ransomware ties](https://therecord.media/poland-phobos-ransomware-arrest) - [ ] [Notepad++ boosts update security with ‘double-lock’ mechanism](https://www.bleepingcomputer.com/news/security/notepad-plus-plus-boosts-update-security-with-double-lock-mechanism/) - [ ] [Citizen Lab: Kenyan authorities used Cellebrite to break into phone of dissident](https://therecord.media/spyware-kenya-cellebrite-activist) - [ ] [Canada Goose says leaked customer transaction data did not come from company systems](https://therecord.media/canada-goose-says-leaked-customer-data-was-not-from-company) - [ ] [针对叙利亚军人的复合式攻击活动分析](https://www.secrss.com/articles/61066?app=1) - [ ] [Microsoft Teams outage affects users in United States, Europe](https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-outage-affects-users-in-united-states-europe/) - [ ] [Cyber attacchi, l’Italia è il paese più esposto: come proteggersi nell’era della GenAI in azienda](https://www.cybersecurity360.it/news/cyber-attacchi-litalia-e-il-paese-piu-esposto-come-proteggersi-nellera-della-genai-in-azienda/) - [ ] [Hackers target supporters of Iran protests in new espionage campaign](https://therecord.media/hackers-target-iran-protest-supporters-cyber-campaign) - [ ] [What 5 Million Apps Revealed About Secrets in JavaScript](https://www.bleepingcomputer.com/news/security/what-5-million-apps-revealed-about-secrets-in-javascript/) - [ ] [Il malware che ruba password e ambienti delle IA locali](https://www.securityinfo.it/2026/02/17/il-malware-che-ruba-password-e-ambienti-delle-ia-locali/) - [ ] [New Keenadu backdoor found in Android firmware, Google Play apps](https://www.bleepingcomputer.com/news/security/new-keenadu-backdoor-found-in-android-firmware-google-play-apps/) - [ ] [A Closer Look at Malicious SVG Phishing](https://binarydefense.com/resources/blog/a-closer-look-at-malicious-svg-phishing) - [ ] [Smetti di contare i virus bloccati: le uniche 3 metriche che interessano al CdA](https://www.cybersecurity360.it/soluzioni-aziendali/smetti-di-contare-i-virus-bloccati-le-uniche-3-metriche-che-interessano-al-cda/) - [ ] [Dutch police arrest man who refused to delete confidential files shared by mistake](https://therecord.media/netherlands-arrest-confidential-files-police) - [ ] [Трояны Android.Phantom заражают смартфоны через игры и пиратские моды, используя ИИ и видеотрансляции для накрутки кликов](https://www.comss.ru/page.php?id=19270) - [ ] [Il Cloud Security Report 2026 di Fortinet rivela un divario di complessità](https://www.cybersecurity360.it/nuove-minacce/il-cloud-security-report-2026-di-fortinet-rivela-un-divario-di-complessita/) - [ ] [Analisi di un C2 per OSX](https://roccosicilia.com/2026/02/17/analisi-di-un-c2-per-osx/) - [ ] [Poland arrests suspect linked to Phobos ransomware operation](https://www.bleepingcomputer.com/news/security/poland-arrests-suspect-linked-to-phobos-ransomware-operation/) - [ ] [LATAM Businesses Hit by XWorm via Fake Financial Receipts: Full Campaign Analysis](https://any.run/cybersecurity-blog/xworm-latam-campaign/) - [ ] [Ireland Opens GDPR Probe Into Grok’s AI-Generated Deepfakes of Children](https://thecyberexpress.com/grok-ai-generated-deepfakes-of-children/) - [ ] [Think You’re Too Small to Be Hacked? NCSC Says Think Again](https://thecyberexpress.com/cyber-essentials-in-focus-ncsc-warns/) - [ ] [Ireland now also investigating X over Grok-made sexual images](https://www.bleepingcomputer.com/news/security/ireland-now-also-investigating-x-over-grok-made-sexual-images/) - [ ] [CleanTalk WordPress Plugin Vulnerability Puts 200,000 Sites at Risk](https://thecyberexpress.com/cleantalk-cve-2026-1490/) - [ ] [AI a Tool for Inclusion, Jobs and Global Cooperation: India AI Impact Summit 2026](https://thecyberexpress.com/india-ai-impact-summit-2026/) - [ ] [Divide and conquer: how the new Keenadu backdoor exposed links between major Android botnets](https://securelist.com/keenadu-android-backdoor/118913/) - [ ] [Convenzione di Budapest, metodo e fiducia per una prova che regge tra gli Stati](https://www.cybersecurity360.it/soluzioni-aziendali/convenzione-di-budapest-metodo-e-fiducia-per-una-prova-che-regge-tra-gli-stati/) - [ ] [Come evolvono le truffe telefoniche in Italia](https://www.cybersecurity360.it/news/truffe-telefoniche-italia/) - [ ] [Eurail Breach Escalates as Stolen Passport Data and IBANs Surface on Dark Web for Sale](https://thecyberexpress.com/eurail-breach-data-on-dark-web-for-sale/) - [ ] [DSS Files Charges Against El-Rufai Over Alleged NSA Phone Interception](https://thecyberexpress.com/dss-charges-el-rufai-nsa-phone-interception/) - [ ] [Canada Goose - 581,877 breached accounts](https://haveibeenpwned.com/Breach/CanadaGoose) - Qualys Security Blog - [ ] [Qualys Recognized as a Leader in the 2026 Forrester Wave™ for CNAPP](https://blog.qualys.com/category/product-tech) - DARKNAVY - [ ] [当 AI 助手成为黑客攻击链的一环｜豆包手机安全分析](https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247497826&idx=1&sn=88abb72a17195a537f2473dfcba5017a) - 悬镜安全 - [ ] [大年初一，拜大年！](https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647798152&idx=1&sn=cbdcd9854dbd6b27d32d08d9f3177aea) - IntelTechniques Blog - [ ] [Video Training Final Price Increase](https://inteltechniques.com/blog/2026/02/17/video-training-final-price-increase/) - 吾爱破解论坛 - [ ] [【2026春节】解题领红包活动开始喽，解出就送论坛币！](https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143650&idx=1&sn=a6a1625933aeca940669208bdf065f42) - Arturo Di Corinto - [ ] [DIGITAL REPATRIATON](https://dicorinto.it/formazione/digital-repatriaton/) - 看雪学苑 - [ ] [2026新春致谢 | 礼承厚意，马跃新程共青云（留言点赞送新春礼盒）](https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458611116&idx=1&sn=f1633e927af2bef9877647a7d917e099) - ICT Security Magazine - [ ] [Kill Switch Microsoft-ICC: quando la dipendenza tecnologica diventa un’arma geopolitica](https://www.ictsecuritymagazine.com/notizie/kill-switch/) - [ ] [EDR killer BYOVD: il ransomware che spegne le difese endpoint](https://www.ictsecuritymagazine.com/cyber-crime/edr-killer-byovd-endpoint/) - [ ] [L’evoluzione del SOC: dalla quinta generazione all’era dell’Intelligenza Artificiale](https://www.ictsecuritymagazine.com/articoli/evoluzione-soc/) - Schneier on Security - [ ] [Side-Channel Attacks Against LLMs](https://www.schneier.com/blog/archives/2026/02/side-channel-attacks-against-llms.html) - Troy Hunt's Blog - [ ] [Weekly Update 491](https://www.troyhunt.com/weekly-update-491/) - IT Service Management News - [ ] [I maschi possono fare tutto (Febbraio 2026)](http://blog.cesaregallotti.it/2026/02/i-maschi-possono-fare-tutto-febbraio.html) - [ ] [ENISA EU ICT Supply Chain Security Toolbox](http://blog.cesaregallotti.it/2026/02/enisa-eu-ict-supply-chain-security.html) - SANS Internet Storm Center, InfoCON: green - [ ] [Fake Incident Report Used in Phishing Campaign, (Tue, Feb 17th)](https://isc.sans.edu/diary/rss/32722) - [ ] [ISC Stormcast For Tuesday, February 17th, 2026 https://isc.sans.edu/podcastdetail/9812, (Tue, Feb 17th)](https://isc.sans.edu/diary/rss/32720) - Tor Project blog - [ ] [New Alpha Release: Tor Browser 16.0a3](https://blog.torproject.org/new-alpha-release-tor-browser-160a3/) - Securityinfo.it - [ ] [Il malware che ruba password e ambienti delle IA locali](https://www.securityinfo.it/2026/02/17/il-malware-che-ruba-password-e-ambienti-delle-ia-locali/?utm_source=rss&utm_medium=rss&utm_campaign=il-malware-che-ruba-password-e-ambienti-delle-ia-locali) - Have I Been Pwned latest breaches - [ ] [Canada Goose - 581,877 breached accounts](https://haveibeenpwned.com/Breach/CanadaGoose) - The Hacker News - [ ] [Webinar: How Modern SOC Teams Use AI and Context to Investigate Cloud Breaches Faster](https://thehackernews.com/2026/02/cloud-forensics-webinar-learn-how-ai.html) - [ ] [Researchers Show Copilot and Grok Can Be Abused as Malware C2 Proxies](https://thehackernews.com/2026/02/researchers-show-copilot-and-grok-can.html) - [ ] [Keenadu Firmware Backdoor Infects Android Tablets via Signed OTA Updates](https://thehackernews.com/2026/02/keenadu-firmware-backdoor-infects.html) - [ ] [SmartLoader Attack Uses Trojanized Oura MCP Server to Deploy StealC Infostealer](https://thehackernews.com/2026/02/smartloader-attack-uses-trojanized-oura.html) - [ ] [My Day Getting My Hands Dirty with an NDR System](https://thehackernews.com/2026/02/my-day-getting-my-hands-dirty-with-ndr.html) - [ ] [Microsoft Finds “Summarize with AI” Prompts Manipulating Chatbot Recommendations](https://thehackernews.com/2026/02/microsoft-finds-summarize-with-ai.html) - [ ] [Apple Tests End-to-End Encrypted RCS Messaging in iOS 26.4 Developer Beta](https://thehackernews.com/2026/02/apple-tests-end-to-end-encrypted-rcs.html) - The Register - Security - [ ] [China remains embedded in US energy networks 'for the purpose of taking it down'](https://go.theregister.com/feed/www.theregister.com/2026/02/17/volt_typhoon_dragos/) - [ ] [US lawyers fire up privacy class action accusing Lenovo of bulk data transfers to China](https://go.theregister.com/feed/www.theregister.com/2026/02/17/lenovo_privacy_lawsuit/) - [ ] [Polish cops nab 47-year-old man in Phobos ransomware raid](https://go.theregister.com/feed/www.theregister.com/2026/02/17/poland_phobos_ransomware_arrest/) - [ ] [UK.gov launches cyber 'lockdown' campaign as 80% of orgs still leave door open](https://go.theregister.com/feed/www.theregister.com/2026/02/17/govt_launches_cyber_lockdown_push/) - [ ] [Ireland joins regulator smackdown after X's Grok AI accused of undressing people](https://go.theregister.com/feed/www.theregister.com/2026/02/17/ireland_dpc_x_grok_probe/) - [ ] [MoD ticks shopping list as PM considers weapons budget boost](https://go.theregister.com/feed/www.theregister.com/2026/02/17/mod_weapons_budget/) - Deeplinks - [ ] [San Jose Can Protect Immigrants by Ending Flock Surveillance System](https://www.eff.org/deeplinks/2026/02/op-ed-san-jose-can-protect-immigrants-ending-flock-surveillance-system) - [ ] [New Report Helps Journalists Dig Deeper Into Police Surveillance Technology](https://www.eff.org/press/releases/new-report-helps-journalists-dig-deeper-police-surveillance-technology) - Security Affairs - [ ] [SmartLoader hackers clone Oura MCP project to spread StealC malware](https://securityaffairs.com/188135/ai/smartloader-hackers-clone-oura-mcp-project-to-spread-stealc-malware.html) - [ ] [Polish cybercrime Police arrest man linked to Phobos ransomware operation](https://securityaffairs.com/188128/cyber-crime/polish-cybercrime-police-arrest-man-linked-to-phobos-ransomware-operation.html) - [ ] [Poorly crafted phishing campaign leverages bogus security incident report](https://securityaffairs.com/188116/security/poorly-crafted-phishing-campaign-leverages-bogus-security-incident-report.html) - [ ] [South Korea slaps $25M fine on Dior, Louis Vuitton, Tiffany over Salesforce breach](https://securityaffairs.com/188064/hacking/south-korea-slaps-25m-fine-on-dior-louis-vuitton-tiffany-over-salesforce-breach.html) - [ ] [Encrypted RCS messaging support lands in Apple’s iOS 26.4 developer build](https://securityaffairs.com/188105/security/encrypted-rcs-messaging-support-lands-in-apples-ios-26-4-developer-build.html) - [ ] [Hackers steal OpenClaw configuration in emerging AI agent threat](https://securityaffairs.com/188097/malware/hackers-steal-openclaw-configuration-in-emerging-ai-agent-threat.html) - [ ] [Hackers sell stolen Eurail traveler information on dark web](https://securityaffairs.com/188075/data-breach/hackers-sell-stolen-eurail-traveler-information-on-dark-web.html) - Instapaper: Unread - [ ] [Come Pensa la Macchina](https://pinperepette.github.io/signal.pirate/articoli/come-pensa-la-macchina.html) - [ ] [Come proteggere i dati biometrici](https://www.cybersecurity360.it/outlook/proteggere-dati-biometrici/) - [ ] [New ZeroDayRAT Attacking Android and iOS For Real-Time Surveillance and Data Theft](https://cybersecuritynews.com/new-zerodayrat-attacking-android-and-ios/) - [ ] [Cassandra Crossing 660 SIM che scompaiono e connessioni ubique](https://calamarim.medium.com/cassandra-crossing-660-sim-che-scompaiono-e-connessioni-ubique-679bb0e77770?source=rss-dac9d366e2ec------2) - [ ] [UpScrolled Forensic Artifacts on iOS](https://dig-fo4-6.blogspot.com/2026/02/upscrolled-forensic-artifacts-on-ios.html) - TrustedSec - [ ] [Updated GSA Contractor CUI Protection Requirements](https://trustedsec.com/blog/updated-gsa-contractor-cui-protection-requirements) - TorrentFreak - [ ] [Spanish Court Orders ProtonVPN and NordVPN to Block Pirate Football Streams](https://torrentfreak.com/spanish-court-orders-protonvpn-and-nordvpn-to-block-pirate-football-streams/) - [ ] [ACE Targets Pirate Streaming Site ‘HDFull’ Through Cloudflare and Discord Subpoenas](https://torrentfreak.com/ace-targets-pirate-streaming-site-hdfull-through-cloudflare-and-discord-subpoenas/) - Trend Micro Research, News and Perspectives - [ ] [Spam Campaign Abuses Atlassian Jira, Targets Government and Corporate Entities](https://www.trendmicro.com/en_us/research/26/b/spam-campaign-abuses-atlassian-jira.html) - Security Weekly Podcast Network (Audio) - [ ] [Meatbags, AI Soul Harvest, DNS, LastPass, GS7, OpenClaw, MYSQL, Aaran Leyland, & More - SWN #556](http://sites.libsyn.com/18678/meatbags-ai-soul-harvest-dns-lastpass-gs7-openclaw-mysql-aaran-leyland-more-swn-556) - [ ] [Conducting Secure Code Analysis with LLMs - ASW #370](http://sites.libsyn.com/18678/conducting-secure-code-analysis-with-llms-asw-370)
每日安全资讯（2026-02-18）