<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	 xmlns:media="http://search.yahoo.com/mrss/" >

<channel>
	<title>PSA.NGO</title>
	<atom:link href="https://psa.ngo/feed/" rel="self" type="application/rss+xml" />
	<link>https://psa.ngo</link>
	<description>关注数字隐私、信息安全、知识可及性</description>
	<lastBuildDate>Thu, 11 Jun 2026 18:11:06 +0000</lastBuildDate>
	<language>zh-Hans</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	

<image>
	<url>https://psa.ngo/wp-content/uploads/2024/07/PSA-icon-150x150.png</url>
	<title>PSA.NGO</title>
	<link>https://psa.ngo</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title>ServiceNow通报安全事件：客户数据疑遭曝光</title>
		<link>https://psa.ngo/news/servicenow-security-incident-customer-data-exposed/</link>
		
		<dc:creator><![CDATA[psa]]></dc:creator>
		<pubDate>Thu, 11 Jun 2026 18:11:06 +0000</pubDate>
				<category><![CDATA[信息安全]]></category>
		<category><![CDATA[科技公司]]></category>
		<category><![CDATA[隐私]]></category>
		<guid isPermaLink="false">https://psa.ngo/news/servicenow-security-incident-customer-data-exposed/</guid>

					<description><![CDATA[企业软件供应商ServiceNow披露一起安全事件，称部分客户数据可能遭到曝光。目前事件仍在调查中，受影响范围 [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>企业软件供应商ServiceNow披露一起安全事件，称部分客户数据可能遭到曝光。目前事件仍在调查中，受影响范围与具体数据类型尚未公开。根据<a href="https://www.bleepingcomputer.com/news/security/servicenow-discloses-security-incident-exposing-customer-data/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">BleepingComputer的报道<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a>，公司已启动响应流程并通知相关客户。</p>
<p>ServiceNow表示已采取遏制与补救措施，并与客户及相关方沟通后续支持与风险评估。有关事件成因、时间线及潜在影响的更多细节仍待进一步披露与核实。</p>
<p><a href="https://www.bleepingcomputer.com/news/security/servicenow-discloses-security-incident-exposing-customer-data/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">来源<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>与研究员交锋加剧，Microsoft在补丁日修复其曝出的两枚高危0-day</title>
		<link>https://psa.ngo/news/microsoft-patches-two-zero-days-amid-rift-with-nightmare-eclipse/</link>
		
		<dc:creator><![CDATA[psa]]></dc:creator>
		<pubDate>Thu, 11 Jun 2026 18:11:06 +0000</pubDate>
				<category><![CDATA[信息安全]]></category>
		<category><![CDATA[研究]]></category>
		<category><![CDATA[科技公司]]></category>
		<guid isPermaLink="false">https://psa.ngo/news/microsoft-patches-two-zero-days-amid-rift-with-nightmare-eclipse/</guid>

					<description><![CDATA[据报道，Microsoft在本周二的例行更新中发布修复，堵住两枚由安全研究员Nightmare Eclipse [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>据<a href="https://arstechnica.com/security/2026/06/locked-in-heated-rivalry-with-researcher-microsoft-fixes-0-day-they-disclosed/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">报道<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a>，Microsoft在本周二的例行更新中发布修复，堵住两枚由安全研究员Nightmare Eclipse披露的高危零日漏洞；此前双方因漏洞处置安排产生激烈摩擦。</p>
<p>报道提到，Nightmare Eclipse近月来接连公开数个高危缺陷并附上概念验证代码，使其在未修补前即构成“零日”。该研究员称，之所以选择公开，是因为Microsoft违背了双方就相关漏洞沟通时达成的一项安排。</p>
<p>此外，文中还称，另一枚同样由Nightmare Eclipse披露的零日似乎也已获得修补，但更多技术细节与影响范围仍有待厂商与平台进一步披露与确认。</p>
<p><a href="https://arstechnica.com/security/2026/06/locked-in-heated-rivalry-with-researcher-microsoft-fixes-0-day-they-disclosed/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">来源<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>消息称Canada拟在Online Harms法案中纳入“16岁以下禁用社交媒体”条款</title>
		<link>https://psa.ngo/news/canada-online-harms-bill-ban-social-media-under-16/</link>
		
		<dc:creator><![CDATA[psa]]></dc:creator>
		<pubDate>Wed, 10 Jun 2026 14:11:16 +0000</pubDate>
				<category><![CDATA[可及性]]></category>
		<category><![CDATA[政治]]></category>
		<category><![CDATA[隐私]]></category>
		<guid isPermaLink="false">https://psa.ngo/news/canada-online-harms-bill-ban-social-media-under-16/</guid>

					<description><![CDATA[据Global News援引一位消息人士称，Canada即将提出的Online Harms法案拟包含一项新规： [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>据<a href="https://globalnews.ca/news/11894610/canada-social-media-ban-teens-online-harms-bill/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">Global News援引一位消息人士<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a>称，Canada即将提出的Online Harms法案拟包含一项新规：禁止16岁以下未成年人使用社交媒体。该消息显示，相关限制将被写入法案文本，但目前仍以匿名消息来源为依据。</p>
<p>报道未披露执行机制（如年龄验证方式）、实施时间表或豁免情形，也未见政府官员公开确认。有关细节仍待官方发布与进一步审查。</p>
<p><a href="https://globalnews.ca/news/11894610/canada-social-media-ban-teens-online-harms-bill/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">来源<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>BleepingComputer称Apple测试自动更换遭泄密码功能</title>
		<link>https://psa.ngo/news/apple-auto-change-compromised-passwords/</link>
		
		<dc:creator><![CDATA[psa]]></dc:creator>
		<pubDate>Wed, 10 Jun 2026 14:11:16 +0000</pubDate>
				<category><![CDATA[信息安全]]></category>
		<category><![CDATA[科技公司]]></category>
		<guid isPermaLink="false">https://psa.ngo/news/apple-auto-change-compromised-passwords/</guid>

					<description><![CDATA[据BleepingComputer报道，Apple正测试一项新功能：当检测到用户密码疑似遭泄露或存在风险时，可 [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>据<a href="https://www.bleepingcomputer.com/news/apple/new-apple-feature-automatically-changes-your-compromised-passwords/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">BleepingComputer<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a>报道，Apple正测试一项新功能：当检测到用户密码疑似遭泄露或存在风险时，可自动进行更换，旨在降低账户被盗用的可能性并强化整体账号安全。\n\n截至发稿，报道未披露该功能的适用平台、支持范围或正式上线时间，Apple的技术实现细节亦尚未公开。记者将持续关注后续官方说明与落地进展。</p>
<p><a href="https://www.bleepingcomputer.com/news/apple/new-apple-feature-automatically-changes-your-compromised-passwords/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">来源<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Linux曝“CIFSwitch”漏洞：多发行版或遭本地提权至root</title>
		<link>https://psa.ngo/news/cifswitch-linux-flaw-root-multiple-distributions/</link>
		
		<dc:creator><![CDATA[psa]]></dc:creator>
		<pubDate>Sun, 31 May 2026 16:11:18 +0000</pubDate>
				<category><![CDATA[信息安全]]></category>
		<category><![CDATA[开源]]></category>
		<guid isPermaLink="false">https://psa.ngo/news/cifswitch-linux-flaw-root-multiple-distributions/</guid>

					<description><![CDATA[据BleepingComputer报道，安全研究人员披露名为“CIFSwitch”的Linux安全缺陷，攻击者 [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>据<a href="https://www.bleepingcomputer.com/news/security/new-cifswitch-linux-flaw-gives-root-on-multiple-distributions/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">BleepingComputer<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a>报道，安全研究人员披露名为“CIFSwitch”的Linux安全缺陷，攻击者可在多款发行版上将权限提升至root。本次披露称其影响范围跨发行版，但目前公开材料未提供进一步技术细节。</p>
<p>截至发稿，尚无明确的CVE编号、受影响版本清单或官方修复时间表。业内建议在更多信息发布前，关注各发行版安全公告，及时应用更新，并限制不受信任的本地访问与代码执行，作为通用的风险缓解措施。</p>
<p><a href="https://www.bleepingcomputer.com/news/security/new-cifswitch-linux-flaw-gives-root-on-multiple-distributions/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">来源<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Palo Alto GlobalProtect VPN现曝认证绕过漏洞 已被黑客利用</title>
		<link>https://psa.ngo/news/palo-alto-globalprotect-vpn-auth-bypass-exploited/</link>
		
		<dc:creator><![CDATA[psa]]></dc:creator>
		<pubDate>Sun, 31 May 2026 16:11:18 +0000</pubDate>
				<category><![CDATA[信息安全]]></category>
		<category><![CDATA[科技公司]]></category>
		<guid isPermaLink="false">https://psa.ngo/news/palo-alto-globalprotect-vpn-auth-bypass-exploited/</guid>

					<description><![CDATA[据BleepingComputer报道，Palo Alto Networks的GlobalProtect VP [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>据<a href="https://www.bleepingcomputer.com/news/security/palo-alto-globalprotect-vpn-auth-bypass-flaw-now-exploited-in-attacks/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">BleepingComputer报道<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a>，Palo Alto Networks的GlobalProtect VPN被曝存在认证绕过漏洞，且已在现实攻击中遭到利用，给依赖该产品进行远程接入的组织带来潜在入侵风险。</p>
<p>目前公开信息有限，报道未披露漏洞编号、受影响版本与缓解细节。建议相关机构密切关注厂商通告并强化监测，以降低被攻击面与横向移动风险。</p>
<p><a href="https://www.bleepingcomputer.com/news/security/palo-alto-globalprotect-vpn-auth-bypass-flaw-now-exploited-in-attacks/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">来源<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Google Chrome面向所有用户上线session cookie盗用防护</title>
		<link>https://psa.ngo/news/google-chrome-adds-session-cookie-theft-protection-for-all-users/</link>
		
		<dc:creator><![CDATA[psa]]></dc:creator>
		<pubDate>Sun, 31 May 2026 12:10:59 +0000</pubDate>
				<category><![CDATA[信息安全]]></category>
		<category><![CDATA[科技公司]]></category>
		<guid isPermaLink="false">https://psa.ngo/news/google-chrome-adds-session-cookie-theft-protection-for-all-users/</guid>

					<description><![CDATA[据BleepingComputer报道，Google正在为所有Chrome用户推出“session cooki [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>据<a href="https://www.bleepingcomputer.com/news/security/google-chrome-adds-session-cookie-theft-protection-for-all-users/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">BleepingComputer<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a>报道，Google正在为所有Chrome用户推出“session cookie”盗用防护功能，旨在降低会话凭证被窃取后引发的账号劫持风险。</p>
<p>安全研究社区长期警示，攻击者若获取session cookie，可能绕过密码与多重验证直接接管登录态。此次Chrome将相关防护覆盖至全体用户，被视为强化浏览器端账号与数据安全的一步。</p>
<p><a href="https://www.bleepingcomputer.com/news/security/google-chrome-adds-session-cookie-theft-protection-for-all-users/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">来源<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Dutch government破坏感染约1700万设备的恶意僵尸网络</title>
		<link>https://psa.ngo/news/dutch-government-disrupts-malware-botnet-17-million-devices/</link>
		
		<dc:creator><![CDATA[psa]]></dc:creator>
		<pubDate>Sun, 31 May 2026 12:10:59 +0000</pubDate>
				<category><![CDATA[信息安全]]></category>
		<guid isPermaLink="false">https://psa.ngo/news/dutch-government-disrupts-malware-botnet-17-million-devices/</guid>

					<description><![CDATA[据BleepingComputer报道，Dutch government已成功干扰并破坏一个由恶意软件操控、涉 [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>据<a href="https://www.bleepingcomputer.com/news/security/dutch-govt-disrupts-malware-botnet-with-17-million-infected-devices/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">BleepingComputer<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a>报道，Dutch government已成功干扰并破坏一个由恶意软件操控、涉及约1700万台设备的庞大僵尸网络。该网络被指用于远程控制受感染设备实施大规模网络活动。</p>
<p>目前公开信息有限，报道未披露行动的技术细节、涉案团伙身份或受影响地区分布。事件凸显超大规模僵尸网络对全球网络安全的持续威胁。</p>
<p><a href="https://www.bleepingcomputer.com/news/security/dutch-govt-disrupts-malware-botnet-with-17-million-infected-devices/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">来源<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Charter Communications曝数据泄露 约490万账户受影响</title>
		<link>https://psa.ngo/news/charter-communications-breach-4-9m-accounts/</link>
		
		<dc:creator><![CDATA[psa]]></dc:creator>
		<pubDate>Sun, 31 May 2026 10:10:43 +0000</pubDate>
				<category><![CDATA[信息安全]]></category>
		<category><![CDATA[科技公司]]></category>
		<category><![CDATA[隐私]]></category>
		<guid isPermaLink="false">https://psa.ngo/news/charter-communications-breach-4-9m-accounts/</guid>

					<description><![CDATA[据BleepingComputer报道，Charter Communications发生数据泄露事件，波及约4 [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>据<a href="https://www.bleepingcomputer.com/news/security/charter-communications-data-breach-affects-49-million-accounts/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">BleepingComputer报道<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a>，Charter Communications发生数据泄露事件，波及约490万个账户。除受影响规模外，报道未披露更多技术细节或泄露的数据类型，相关后续信息仍有待更新。</p>
<p><a href="https://www.bleepingcomputer.com/news/security/charter-communications-data-breach-affects-49-million-accounts/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">来源<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a></p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>荷兰警方逮捕与Ajax俱乐部黑客案相关嫌疑人</title>
		<link>https://psa.ngo/news/dutch-police-arrest-suspect-linked-to-ajax-club-hack/</link>
		
		<dc:creator><![CDATA[psa]]></dc:creator>
		<pubDate>Thu, 28 May 2026 18:11:22 +0000</pubDate>
				<category><![CDATA[信息安全]]></category>
		<guid isPermaLink="false">https://psa.ngo/news/dutch-police-arrest-suspect-linked-to-ajax-club-hack/</guid>

					<description><![CDATA[据BleepingComputer报道，荷兰警方已拘捕一名与针对足球俱乐部Ajax的黑客入侵案有关的嫌疑人。目 [&#8230;]]]></description>
										<content:encoded><![CDATA[<p>据<a href="https://www.bleepingcomputer.com/news/security/dutch-police-arrests-suspect-linked-to-ajax-football-club-hack/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">BleepingComputer<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a>报道，荷兰警方已拘捕一名与针对足球俱乐部Ajax的黑客入侵案有关的嫌疑人。目前官方尚未披露更多细节，包括嫌疑人身份、入侵方式、受影响系统或数据范围等，调查仍在推进中。</p>
<p>此案再次凸显体育组织面临的网络攻击风险。有关部门后续通报与司法程序结果仍待公布。</p>
<p><a href="https://www.bleepingcomputer.com/news/security/dutch-police-arrests-suspect-linked-to-ajax-football-club-hack/" rel="noopener nofollow external noreferrer" target="_blank" data-wpel-link="external" class="wpel-icon-right">来源<i class="wpel-icon dashicons-before dashicons-external" aria-hidden="true"></i></a></p>
]]></content:encoded>
					
		
		
			</item>
	</channel>
</rss>
