# 安全 · 日跟踪 · 2026-09-16

> 日期：2026-09-16（Asia/Shanghai）。专题正文：`intel/topics/security.md`。原料：`/workspace/intel/archive/2026-09-16/`；对照 2026-09-15 日跟踪。

## 摘要

- **本日无公开战略级「新安全产品 / 新 XSA 批次」可抬升为主叙事者。**
- **续档/轻旁证 · CSA Top Threats to Cloud Computing 2026：** Identity 超 misconfiguration 居首；**AI-Enhanced Attacks** 与 **AI System Compromise** 首次入榜；调研 **507** 名安全从业者（Virtualization Review 稿日约 2026-08-24，本日 industry 再抓）。
- **续档/轻旁证 · Rubrik × CrowdStrike Charlotte Agentic SOAR → 身份恢复闭环**（Fal.Con / 约 2026-09-01 宣布，本日再抓）。
- **交叉轻 · ARO HCP：** 缩小攻击面、仅 managed/workload identities（禁 Service Principals）、BYOK/etcd/HSM——托管面安全姿态（见 openshift）。
- **交叉 · confidential containers + PQC hybrid TLS**（见 confidential）；**OpenShell** 剖析旁证隔离开销可控但仍 **DP**。
- **续档：** Open Secure AI Alliance→LF；Vates/XCP-ng XSA。

## 原文摘录

### CSA 2026 cloud threats · 续档旁证

- 归档：`industry/identity-ai-lead-csa-s-2026-cloud-threat-list-057ca2b2.txt`
- URL：https://virtualizationreview.com/articles/2026/08/24/identity-ai-lead-csas-2026-cloud-threat-list.aspx

> Identity and access management has overtaken misconfiguration as the top cloud security concern in the Cloud Security Alliance’s 2026 ranking, while two artificial intelligence-related issues entered the list for the first time. … surveyed 507 security professionals… Top 11 led by identity, AI, third-party resources and APIs.

### Rubrik × CrowdStrike · 续档旁证

- `industry/rubrik-crowdstrike-link-agentic-soar-to-identity-recovery-4018bb7c.txt`  
  > … uses CrowdStrike’s Charlotte Agentic SOAR as the orchestration layer.  
  > … detect, investigate and recover compromised identity environments in hours rather than days.（**厂商口径**）

### ARO HCP · 安全姿态交叉

- `redhat/azure-red-hat-openshift-with-hosted-control-planes-is-now-available-in-296c8bfa.txt`  
  > … will only support managed identities and workload identities instead of Service Principals…