# 安全 · 日跟踪 · 2026-10-08

> 日期：2026-10-08（Asia/Shanghai，周四）。专题正文：`intel/topics/security.md`。原料：`/workspace/intel/archive/2026-10-08/`（窗口 10-07 早报后→10-08 早）；对照 2026-10-07 日跟踪。抓取：Saved 276 / skipped 27 / errors 44；blocked_hosts：community.hpe.com、docs.redhat.com、e.huawei.com、support.huawei.com、www.reddit.com、www.sangfor.com（**blocksandfiles.com / www.nextplatform.com 本日恢复**；theregister 仅首页标题壳）。全库新增 URL 26 个。

## 摘要
- **中 NEW · VMware 安全月 Day 5（漏洞博）：** AI 加速发现/利用链；CVSS≠风险、看向量（AV/PR）、查 CISA KEV / EPSS；Low/Moderate 也要打；VMSA 定级区间——**厂商安全教育**。
- **中 NEW（续档深化）· NVIDIA Open Agent Safety：** OpenShell + **Sentry on BlueField-4**（硅内执行、毫秒级隔离）+ DOCA gateway 身份校验；"Notably absent is OpenAI"（NP；STH 09-30 写 OpenClaw，**照录**）。
- 轻：VR 身份安全活动（"authentication should be proportional to risk"，Okta/Auth0 赞助）；Register 标题：SharePoint 本地版零日、EQT 取得 Acronis 多数股权（仅标题）；奇客：苹果因 AI 智能体收紧 Full Disk Access、Google 冻结 Bug 悬赏。
- 社区片段：Nutanix 用户询问 **nutanix-sa-57** 缓解（称只能升 AOS 7.6）；RH KB：Aquasec 致容器 D 状态/节点 NotReady。

## 原文摘录

### VMware · Vulnerabilities: Everything You’ve Wanted To Know（10-07，安全月 Day 5；厂商博客）
- 归档：`vmware/vulnerabilities-everything-you-ve-wanted-to-know-3372488c.txt`
- URL：https://blogs.vmware.com/cloud-foundation/2026/10/07/vulnerabilities-everything-you-want-know/

> AI models are very good at detecting vulnerabilities, developing exploits, and chaining them together.  
> Low and Moderate still need to get patched. You can schedule them, but don’t skip them. A backlog of small flaws is the raw material for a chain.  
> Staying current beats attempting to pick and choose.  

### NextPlatform · Nvidia Wraps Security Layer Around Agentic AI To Stop Rogue Behavior（09-30，本日首次入库；媒体报道）
- 归档：`industry/nvidia-wraps-security-layer-around-agentic-ai-to-stop-rogue-behavior-8db6b2b6.txt`
- URL：https://www.nextplatform.com/ai/2026/09/30/nvidia-wraps-security-layer-around-agentic-ai-to-stop-rogue-behavior/5300098

> First is OpenShell, an open source runtime first announced in March that is used to run agents in sandboxed environments with isolation at the kernel level.  
> OpenShell also can be used with chips from Intel and AMD.  
> "Sentry provides in-silicon security enforcement, meaning that if an AI agent attempts to move outside its software boundary, Sentry quarantines and stops it in milliseconds,"  
> Notably absent is OpenAI, which clearly needs to rein in its models.  

### Virtualization Review · Cybersecurity Expert: AI Raises the Stakes for Who — and What — Gets Access（10-07；赞助活动报道）
- 归档：`industry/cybersecurity-expert-ai-raises-the-stakes-for-who-and-what-gets-access-8e361b42.txt`
- URL：https://virtualizationreview.com/articles/2026/10/07/cybersecurity-expert-ai-raises-the-stakes-for-who-and-what-gets-access.aspx

> "So the point being that authentication should be proportional to risk," he said.  

### Nutanix Community 首页 · 论坛片段（截断，非评价）
- 归档：`nutanix/connect-learn-share-nutanix-community-daa2d8fd.txt`
- URL：https://next.nutanix.com/

> Please advise on vulnerability mitigation for nutanix-sa-57 security advisory and possible fix release date. We understand that upgrading to AOS 7.6 is the available option at the moment. The hardware is 3-node Lenovo HX650 V3 cluster.