<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>AI Security on 思安录 | Thinking&#39;s Security Notes</title>
    <link>https://blog.1sec.day/tags/ai-security/</link>
    <description>Recent content in AI Security on 思安录 | Thinking&#39;s Security Notes</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>zh-cn</language>
    <managingEditor>Thinking</managingEditor>
    <webMaster>Thinking</webMaster>
    <lastBuildDate>Mon, 20 Jul 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://blog.1sec.day/tags/ai-security/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>xAI grok-build 开源次日 0day 挖掘（四）：ptyctl 测试服务器零认证 CORS 与跨域 RCE</title>
      <link>https://blog.1sec.day/posts/2026-07-20-grok-cli-pty-csrf-rce/</link>
      <pubDate>Mon, 20 Jul 2026 00:00:00 +0000</pubDate>
      <author>Thinking</author>
      <guid>https://blog.1sec.day/posts/2026-07-20-grok-cli-pty-csrf-rce/</guid>
      
      <description></description>
      
    </item>
    
    <item>
      <title>xAI grok-build 开源次日 0day 挖掘（三）：Grok-Build-CLI folder-trust 检测盲区与零提示 RCE</title>
      <link>https://blog.1sec.day/posts/2026-07-18-grok-cli-folder-trust-bypass-rce/</link>
      <pubDate>Sat, 18 Jul 2026 00:00:00 +0000</pubDate>
      <author>Thinking</author>
      <guid>https://blog.1sec.day/posts/2026-07-18-grok-cli-folder-trust-bypass-rce/</guid>
      
      <description></description>
      
    </item>
    
    <item>
      <title>xAI grok-build 开源次日 0day 挖掘（二）：Grok-Build-CLI 与 Claude Code CLI 的 bypassPermissions RCE</title>
      <link>https://blog.1sec.day/posts/2026-07-16-grok-build-cli-claude-code-bypass-permissions-rce/</link>
      <pubDate>Thu, 16 Jul 2026 00:00:00 +0000</pubDate>
      <author>Thinking</author>
      <guid>https://blog.1sec.day/posts/2026-07-16-grok-build-cli-claude-code-bypass-permissions-rce/</guid>
      
      <description></description>
      
    </item>
    
    <item>
      <title>xAI grok-build 开源次日 0day 挖掘（一）：Grok-Build-CLI cargo check RCE 攻击链分析</title>
      <link>https://blog.1sec.day/posts/2026-07-16-grok-cli-cargo-check-rce/</link>
      <pubDate>Thu, 16 Jul 2026 00:00:00 +0000</pubDate>
      <author>Thinking</author>
      <guid>https://blog.1sec.day/posts/2026-07-16-grok-cli-cargo-check-rce/</guid>
      
      <description></description>
      
    </item>
    
  </channel>
</rss>
