<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[WangsuSecurity的博客]]></title><description><![CDATA[]]></description><link>https://blog.csdn.net/WangsuSecurity</link><language>zh-cn</language><generator>https://blog.csdn.net/</generator><copyright><![CDATA[Copyright &copy; WangsuSecurity]]></copyright><item><title><![CDATA[漏洞分析 | LiteLLM Proxy 预认证 SQL 注入 (CVE-2026-42208) ]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/162494900</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/162494900</guid><author>WangsuSecurity</author><pubDate>Wed, 01 Jul 2026 19:01:42 +0800</pubDate><description><![CDATA[攻击者无需任何有效凭据，仅通过发送构造的 `Authorization` 头即可触发注入，读取甚至篡改代理数据库中的所有数据，包括全部 LLM 提供商的 API Key]]></description><category></category></item><item><title><![CDATA[当AI跑进容器：全链路容器安全检测与智能运营实]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/161413297</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/161413297</guid><author>WangsuSecurity</author><pubDate>Tue, 26 May 2026 10:17:04 +0800</pubDate><description><![CDATA[本文在宿主机层面，从容器的IaC（基础设施即代码）、镜像到运行时，全方位探讨容器安全检测的整体思路。]]></description><category></category></item><item><title><![CDATA[漏洞分析 | WordPress Lazy Blocks 远程代码执行漏洞（CVE-2026-1560）]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/161396336</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/161396336</guid><author>WangsuSecurity</author><pubDate>Mon, 25 May 2026 16:59:45 +0800</pubDate><description><![CDATA[该漏洞导致已认证用户可通过构造恶意参数触发代码执行]]></description><category></category></item><item><title><![CDATA[AI 赋能代码审计：静态扫描与AI Skill的协同实践]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/161321716</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/161321716</guid><author>WangsuSecurity</author><pubDate>Fri, 22 May 2026 18:07:16 +0800</pubDate><description><![CDATA[本文介绍一种 静态扫描工具 + AI Skill 实践方案用于代码审计：使用 Semgrep 进行初步漏洞扫描，再通过 AI Skill 对结果进行深入自主审计，并生成漏洞审计报告]]></description><category></category></item><item><title><![CDATA[平均潜伏超一年，解构BRICKSTORM对科技与法律行业的持久渗透战术]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/157979122</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/157979122</guid><author>WangsuSecurity</author><pubDate>Wed, 11 Feb 2026 20:14:56 +0800</pubDate><description><![CDATA[BRICKSTORM后门以高度的隐蔽性和持久性，对各行业机构实施了长达一年以上的系统性渗透，其威胁深度远超传统数据窃取。]]></description><category></category></item><item><title><![CDATA[Linux Rootkit 手法解析（下）：深入内核态的“隐形”攻防战]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/157256851</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/157256851</guid><author>WangsuSecurity</author><pubDate>Thu, 22 Jan 2026 16:46:14 +0800</pubDate><description><![CDATA[本文重点探讨了LKMRootkit和eBPFRootkit的技术原理，通过具体案例展示了这些技术如何实现文件/进程隐藏、网络连接隐藏等功能。]]></description><category></category></item><item><title><![CDATA[Linux Rootkit 手法解析（上）：用户态的“隐身术”与检测思路]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/157255889</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/157255889</guid><author>WangsuSecurity</author><pubDate>Thu, 22 Jan 2026 16:09:33 +0800</pubDate><description><![CDATA[Linux Rootkit是攻击者用于隐藏恶意活动的工具集，分为用户态和内核态两类。掌握Rootkit原理是有效防御的关键第一步。]]></description><category></category></item><item><title><![CDATA[漏洞分析 | PyTorch远程代码执行漏洞（CVE-2025-32434）]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/156408288</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/156408288</guid><author>WangsuSecurity</author><pubDate>Tue, 30 Dec 2025 06:25:11 +0800</pubDate><description><![CDATA[PyTorch是一个开源的Python机器学习库，应用于人工智能领域，如计算机视觉和自然语言处理。
目前该漏洞POC状态已在互联网公开，建议尽快做好自查及防护。]]></description><category></category></item><item><title><![CDATA[平均潜伏超一年，解构BRICKSTORM对科技与法律行业的持久渗透战术]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/155695074</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/155695074</guid><author>WangsuSecurity</author><pubDate>Mon, 08 Dec 2025 10:37:54 +0800</pubDate><description><![CDATA[Google近期披露的BRICKSTORM后门以其高度的隐蔽性和持久性引发业界高度警惕]]></description><category></category></item><item><title><![CDATA[漏洞分析 | WordPress WPBookit代码执行漏洞（CVE-2025-6058）]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/155182889</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/155182889</guid><author>WangsuSecurity</author><pubDate>Mon, 24 Nov 2025 07:22:01 +0800</pubDate><description><![CDATA[该漏洞使得攻击者在未授权的情况下，可以向受影响网站的服务器内上传任意文件，并可能实现远程代码执行]]></description><category></category></item><item><title><![CDATA[【技术观察】反检测浏览器Camoufox 技术解构与思考]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/154632815</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/154632815</guid><author>WangsuSecurity</author><pubDate>Mon, 10 Nov 2025 07:18:16 +0800</pubDate><description><![CDATA[本文深度剖析了基于Firefox内核定制的Camoufox浏览器，其技术架构揭示了一个关键趋势：现代爬虫已形成 “内核魔改 + 指纹工厂 + 行为模拟” 的工业化链条。企业需跳出 “头痛医头” 的补丁思维，通过技术层的立体检测、运营层的动态博弈、组织层的能力沉淀构建弹性安全体系。]]></description><category></category></item><item><title><![CDATA[浅谈PCDN流量盗刷原理与防御措施]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/151818349</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/151818349</guid><author>WangsuSecurity</author><pubDate>Thu, 18 Sep 2025 09:46:13 +0800</pubDate><description><![CDATA[大量的流量盗刷无异于DDoS攻击，短时的大流量下载可能会对平台网络造成不可用]]></description><category></category></item><item><title><![CDATA[办公数据安全与办公效率难两全？SASE框架给出了新思路]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/151583726</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/151583726</guid><author>WangsuSecurity</author><pubDate>Thu, 11 Sep 2025 17:10:33 +0800</pubDate><description><![CDATA[没有单一的数据防泄露技术能够适用于所有企业场景，企业应该真正关注的是核心应用的数据保护]]></description><category></category></item><item><title><![CDATA[漏洞分析 | Kafka Connect 任意文件读取漏洞（CVE-2025-27817）]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/150617157</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/150617157</guid><author>WangsuSecurity</author><pubDate>Fri, 22 Aug 2025 19:46:04 +0800</pubDate><description><![CDATA[攻击者在未授权的情况下可以通过特定方式读取Kafka Connect服务器上的任意文件，从而造成信息泄露]]></description><category></category></item><item><title><![CDATA[Linux应急响应思路和技巧（四）：日志分析篇]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/150068368</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/150068368</guid><author>WangsuSecurity</author><pubDate>Fri, 08 Aug 2025 16:16:32 +0800</pubDate><description><![CDATA[本文总结自网宿安全演武实验室应急响应团队日常工作实践]]></description><category></category></item><item><title><![CDATA[圆桌对话 | AI浪潮下，浅谈企业安全的构建与应对]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/149599462</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/149599462</guid><author>WangsuSecurity</author><pubDate>Thu, 24 Jul 2025 11:44:25 +0800</pubDate><description><![CDATA[信通院泰尔实验室蒋阿芳、安全牛分析师张奕、网宿安全高级总监胡钢伟出席圆桌环节，围绕AI应用现状及风险防范、数据安全、以及出海安全等话题展开了深入交流]]></description><category></category></item><item><title><![CDATA[网宿安全发布《2024年度网络安全态势报告》：AI驱动攻防升维，体系化主动安全成破局关键]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/149532719</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/149532719</guid><author>WangsuSecurity</author><pubDate>Tue, 22 Jul 2025 12:09:39 +0800</pubDate><description><![CDATA[近日，网宿安全发布《2024年网络安全态势报告》，揭示AI技术带来全新安全挑战。]]></description><category></category></item><item><title><![CDATA[APP抓包技巧：绕过代理检测实战指南]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/149067171</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/149067171</guid><author>WangsuSecurity</author><pubDate>Wed, 02 Jul 2025 14:01:52 +0800</pubDate><description><![CDATA[尽管网上有很多关于抓包和绕过代理检测的文章，但在实际操作中发现，很多方法已经失效]]></description><category></category></item><item><title><![CDATA[AI生态警报：MCP协议风险与应对指南（下）——MCP Host安全]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/148343515</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/148343515</guid><author>WangsuSecurity</author><pubDate>Fri, 30 May 2025 19:09:05 +0800</pubDate><description><![CDATA[对于AI Agent开发者，也需要关注MCP Host自身以及交互过程的安全，防范本地凭证泄漏、会话丢失以及用户输入造成的注入攻击等典型风险。]]></description><category></category></item><item><title><![CDATA[AI生态警报：MCP协议风险与应对指南（中）——MCP Server运行时安全​​]]></title><link>https://blog.csdn.net/WangsuSecurity/article/details/148341453</link><guid>https://blog.csdn.net/WangsuSecurity/article/details/148341453</guid><author>WangsuSecurity</author><pubDate>Fri, 30 May 2025 17:01:44 +0800</pubDate><description><![CDATA[本文作为系列中篇，将解析MCP Server运行时在本地与远程场景下的权限管控、流量过滤等实战方案，并前瞻网关架构的统一防护演进。]]></description><category></category></item></channel></rss>