安全资讯归档（2026-04-16）

2Libra
- 2 站徽章获取进度的小 tips
- 21 世纪羽毛球六大超一流全部退役
- 4 月，感觉是个承上启下的月份，二季度的开局，是会有很多事涌来。
- ipfs 音乐播放器
- OPPO 这是在玩谐音梗吗
- pixel 认证
- 【投票】想问问大家看剧或者电影是否选择快进以及为什么。
- 【🔒】万事达借记卡刷卡返现活动
- 【🔒】本月手机流量羊毛合集
- 【🔒】武汉通 30-10 活动
- 下班了，来一集猫和老鼠看看吧
- 两天用 workbuddy vibe coding 了一个药品库存网页
- 买了广电的流量卡真是卡成狗了
- 你电脑里最常用的【截图】工具是什么？
- 使用 Codex 写了一个旅游规划网站，大家尝尝咸淡
- 关于车险的糟心事，2 友帮忙出出招
- 刚开成功甲骨文，好像最近容易开
- 博客聚合功能安全风险与建议
- 发现个好用的 chrome 插件，比较适合我这种半自动编程的人
- 发现了我的青春记录
- 嘿嘿，终于混到了前排打手
- 在构建一个 RSS 安全修正版本，可能会无法访问一小会
- 如果业务部门领导不要你开发功能，而是要求你教会它用 claude code 开发功能，你会怎么做？
- 想问问大家网安都是怎么入门的呢
- 新增了入驻博客列表
- 新法案：游戏关服必出离线版不然全退款
- 海绵宝宝 gif 分享
- 站长没有判定提交的博客是否属于用户自己的，可以提交任何 rss 博客。站长可以考虑下加校验
- 终于签到勤勉检定大失败啦
- 谷歌为 Mac 推出原生 Gemini AI 应用
- 阿里世界模型上线
36氪
- 13只个人养老金基金年内净值涨幅超10%
- 3天2板晶科科技：拟投约245亿元建设宁夏中卫1GW算力中心项目
- 3月中国快递发展指数同比增长2.4%
- 3连板*ST观典：股票短期内涨幅较大，明起停牌核查
- 8点1氪丨美国将退还超1万亿元关税；多家银行密集停发信用卡；滴露回应使用宠物消毒液后5只幼猫死亡
- Adobe推出可操作Claude的创意工具AI助手
- AI战略落地和国际化业务布局成券商业绩说明会两大核心主线
- AMD、高通、安谋为自动驾驶初创公司Wayve提供新资金
- Anthropico计划下周向英国银行业发布其Mythos模型
- A股三大指数午间休盘集体上涨，宁德时代市值突破2万亿
- A股三大指数集体收涨，创业板指涨超3%刷新近11年新高
- A股三大指数集体高开，新股N大普微上市首日高开349.72%
- EIA称美国石油出口总量跃升至纪录高位
- FF完成股权投资协议修订并将总认购金额增至1200万美元，取消反稀释条款
- MiniMax宣布云端沙箱Hermes“MaxHermes”上线
- N大普微涨超400%，总市值超千亿
- OpenAI退出挪威“星门”数据中心合作，微软接手
- ST开元：公司股票交易可能被实施退市风险警示
- “它石智航”完成超4.5亿美金Pre-A轮融资
- 一季度国内生产总值同比增长5.0%
- 一线城市房地产率先出现企稳迹象
- 万科回应总裁空缺：已由董事长及高管团队分担相关职责
- 三七互娱：2025年归母净利润29亿元，拟10派4元
- 三星请求法院禁止工会开展非法罢工活动
- 东方盛虹：控股股东及其一致行动人拟增持9.80亿元至19.60亿元
- 东风汽车旗下资产管理公司注册资本增至28亿元
- 东风汽车正式发布“天元智舱”系列平台
- 两市融资余额增加101.82亿元
- 中信建投：Anthropic最强模型Mythos推出，重点推荐谷歌链
- 中信建投：生猪养殖板块将存在分化，效率高、成本低的企业将赢得竞争优势
- 中信证券：坚定看好存储产业趋势推荐存储原厂及贴近原厂的设计公司
- 中信证券：坚定看好存储产业趋势，核心推荐存储原厂及贴近原厂的设计公司
- 中信证券：稀土管制开启中国高端陶瓷历史机遇期
- 中公教育发布AI时代职业能力培养平台“新希天才”
- 中国国新等在广西新设股权投资合伙企业
- 中国工程机械工业协会：3月销售各类平地机1007台同比增长19.6%
- 中国汽车流通协会：4月乘用车市场进入温和调整期，预计全月终端销量达160万
- 中国神华：前3月煤炭销售量同比增长3.9%
- 中国银联、蚂蚁集团合作共研新支付终端，支付宝“碰一下”、银联Pay、扫码多合一
- 中指研究院：3月以来市场销售出现边际改善，今年新房成交同比降幅有望逐步收窄
- 中科宇航IPO状态变更为已问询
- 二六三：2025年归母净利润亏损2.84亿元，由盈转亏
- 云天化：引入当升科技投建44.93亿元新能源电池材料项目
- 互联互通工具持续丰富，公募大力布局香港市场ETF
- 亚洲富豪挟250亿美元涌入AI领域，面对高估值毫无惧色
- 亚马逊全球智能枢纽仓（GWD）深圳首仓面向卖家正式开放
- 亚马逊支持的X-Energy计划IPO融资8亿美元
- 亚马逊未能驳回加州的反垄断诉讼
- 京东发布机器人产业服务全景图
- 人民币对美元中间价调贬34个基点
- 佑驾创新与荣耀达成合作
- 佰维存储：股东孙静等拟合计减持不超2.00%股份
- 先正达寻求最早6月在香港以保密方式提交IPO申请
- 公募南下布局提速，年内已有47只港股新基金成立
- 农业银行：发行500亿元总损失吸收能力非资本债券
- 创业板指涨1%
- 创业板指涨逾3%，宁德时代等权重领涨
- 创源股份：拟收购酷乐潮玩旗下标的公司90%股权
- 半日主力资金加仓电子板块，抛售银行板块
- 华东数控：2025年度计提资产减值准备607.16万元占2024年度净利润的71.48%
- 华友钴业：2026年第一季度净利润24.97亿元，同比增长99.45%
- 华泰证券：Bloom Energy大单呼应AI缺电主线，看好三条投资主线
- 华盛锂电向香港联交所递交H股发行上市申请并刊发申请资料
- 华立科技：2025年国内游戏游艺行业整体处于阶段性调整期
- 华鼎股份：向特定对象发行股票获证监会同意注册批复
- 印度航空报告年度亏损超24亿美元，寻求股东支持
- 厦门半导体投资集团增资至约68.6亿元
- 去哪儿：今年五一假期热门三线及以下城市酒店预订量同比翻番
- 双英集团北交所IPO过会
- 古驰母公司开云集团计划今年完成架构重组
- 台积电CEO：全力扩产仍难以满足强劲AI需求
- 台积电：一季度先进制程营收达全季晶圆销售金额的74%
- 台积电：一季度税后纯益约5724.8亿元新台币
- 台积电：预计今年资本支出将接近520亿至560亿美元区间的高标
- 台积电：预计第二季度毛利率65.5％-67.5％
- 合盛硅业：2025年净亏损29.91亿元，同比转亏
- 同大股份：股东华盛百利拟减持不超3%公司股份
- 商务部：截至4月12日消费品以旧换新销售额5029.4亿元，惠及6977.7万人次
- 国务院国资委：国资央企要因地制宜、稳妥有序推动低空经济高质量发展，加快低空航空装备创新迭代
- 国家统计局：1—3月份全国房地产开发投资17720亿元，同比下降11.2%
- 国家统计局：3月份一线城市新建商品住宅销售价格环比由上月持平转为上涨0.2%
- 国家统计局：一季度全国居民人均消费支出比上年同期名义增长3.6%
- 国家统计局：一季度服务零售额增速比商品销售额快3.3个百分点
- 国家统计局：一季度装备制造业利润对工业企业利润贡献超过50%
- 国家统计局：国内市场供需改善、市场竞争秩序持续逐步优化是影响PPI上涨主导原因
- 国家统计局：我国进出口有条件保持较好增长
- 国际原油市场逐渐回归基本面定价，库存消耗继续推升油价
- 外国持有美国国债规模创一年来最大增幅并创纪录新高
- 多重利好叠加提振预期，消费板块能否苦尽甘来
- 大韩航空将从下月起提高国际航班燃油附加费
- 天和磁材：股东南通元龙拟合计减持不超3%公司股份
- 天岳先进：股东询价转让初步定价为82.32元/股
- 太平鸟：2025年净利润1.74亿元，同比下降32.57%
- 央行今日开展5亿元7天逆回购操作
- 奥迪高管透露明年将推第三款中国专属车型
- 奥雅股份：分公司及法定代表人被限制高消费已解除
- 宁德时代A股总市值突破2万亿元
- 宁德时代旗下公司在泰州成立科技公司
- 宏和科技：一季度归母净利润同比增长354.22%
- 宏景科技：公司近期经营情况正常，无应披露未披露事项
- 宝马将在北京车展推出M3 40周年限量版
- 实达集团：预计2025年年度净利润为负值，公司股票可能被实施退市风险警示
- 宠物经济概念股集体大涨，5只个股2025年度净利润增长
- 小米发行10亿元人民币科创债，票面利率1.60%
- 市场监管总局开展专项行动打击虚假CCC认证标志，加强质量责任追溯
- 年内同业存单发行规模同比减少2.46万亿元
- 当升科技：拟1.45亿元购买股权并投建磷酸铁锂一体化项目
- 微软加倍押注AI，大胆下注采购3万块英伟达GPU
- 恒指午间休盘涨1.38%，恒生科技指数涨2.98%
- 恒指开盘涨0.68%，恒生科技指数涨1.31%
- 恒指收涨1.72%，恒生科技指数涨3.67%
- 恒瑞医药：子公司药物SHR-A2102纳入突破性治疗品种
- 恒生科技指数日内涨超2%，宁德时代涨9%
- 找100个被资本选中的答案｜2026“最受关注”企业名册评选启动
- 摩根大通CEO杰米·戴蒙出售价值4000万美元摩根大通股票
- 数码视讯：2025年归母净利润同比增长35.97%，拟10派0.2元
- 新加坡的AI征途：孕育下一个“硅谷”
- 春光集团披露招股书，拟于近期在深市发行新股并上市
- 智元旗下觅蜂发布一站式物理 AI 数据服务平台｜最前线
- 欧盟委员会初步认定元宇宙平台公司调整政策后仍违规
- 氪星晚报｜特斯拉拟在上海生产人形机器人；台积电CEO：全力扩产仍难以满足强劲AI需求；奥迪高管透露明年将推第三款中国专属车型
- 永创智能：控股股东一致行动人拟增持1000万元-2000万元公司股份
- 永辉超市：一季度净利润2.87亿元，同比增长94.40%
- 江苏信保投资公司增资至约10.9亿元
- 沪深两市成交额突破1万亿元
- 沪深两市成交额突破2万亿元
- 法国巴黎银行：美国投资者开始重返中国股市
- 法国液化空气集团拟投2亿欧元在日本建设新生产装置，支持AI芯片生产
- 海通发展：一季度归母净利润2.1亿元，同比增加211.06%
- 深康佳A：对参股公司提供1.47亿元股东借款逾期
- 渤海化学：2025年归母净利润亏损6.46亿元
- 港股通标的证券名单调整，调入禾赛-W
- 湖南黄金：一季度净利同比预增60%-90%，金锑钨产品销售价格同比上涨
- 澜舟科技发布可信AI技术体系
- 热门中概股美股盘前普涨，百度涨超4%
- 熊猫乳品：2025年归母净利润同比增长5.38%，拟10派6元
- 特斯拉拟在上海生产人形机器人
- 特朗普签发多项输油管道许可，以促进美加之间的石油运输
- 特朗普：若美联储主席鲍威尔任期届满后仍留任，将对其解职
- 现代汽车美国销售副总裁离职
- 瑞和数智战略投资盛合晶微，布局AI算力核心赛道
- 电子布库存持续紧张，涨价周期尚未结束
- 百事公司一季度净营收194.4亿美元
- 算力涨价潮席卷全球：阿里、Anthropic连续调价，严重算力荒再现
- 绩优基金一季报密集披露：多只基金规模大增，看多AI相关产业链
- 网达软件：预计2025年归母净利润为350万元-600万元，股票可能被实施退市风险警示
- 美国4月份费城联邦储备银行制造业指数升至26.7，预估为10
- 美国上周首次申领失业救济人数为20.7万人，预估为21.3万人
- 美国启动非法关税退款流程，已有上亿美元申请待处理
- 美股三大指数收盘涨跌不一，纳指11连涨创收盘新高
- 美股大型科技股盘前涨跌不一，微软涨超1%
- 联合利华以448亿美元出售食品业务，并以12亿美元收购Grüns
- 联邦陪审团裁定Live Nation非法垄断票务市场
- 腾讯混元3D世界模型2.0发布并开源
- 致远新能：股东王然拟合计减持不超3%公司股份
- 英国金融行为监管局：推出更清晰、更简化的卖空规则
- 英国首相斯塔默敦促社交媒体公司保障网络安全
- 荣旗科技：参与苹果折叠屏手机中VC散热外观缺陷检测
- 蓝思科技：折叠屏在今年下半年就会开始放量，各板块增长点会在下半年和明年有集中式爆发
- 要做电商Agent OS，前钉钉最年轻副总裁创立的「攀峰智能」再次完成数千万天使轮融资
- 谷歌被指在安卓应用分发领域实施垄断控制
- 豫园股份：一季度归母净利润1.57亿元，同比增加202.87%
- 财政部、住建部：开展2026年度中央财政支持实施城市更新行动
- 贵州茅台：2025年实现营业收入1688.38亿元，同比下降1.21%
- 赣锋锂业：预计一季度净利润16亿元-21亿元，同比增长549.65%–690.17%
- 车企账期整体性回落，行业主动告别“内卷”、修复供应链生态
- 软银集团发行10年期美元债券，票面利率达到创纪录的8.5%
- 辉瑞新一代减重药先维盈®开启预售，已正式上线美团买药
- 迪威尔：2025年归母净利润同比增长39.43%，拟10派2元
- 追觅科技旗下AI视觉机器人品牌NAVO亮相广交会
- 通富微电：2025年净利润12.19亿元，同比增长79.86%
- 郑州：调整住房公积金个人住房贷款借款人年龄上限
- 郑栅洁主任赴怀柔国家实验室调研能源科技创新工作
- 重庆燃气：2025年归母净利润同比下降44.98%，拟10派0.43元
- 金徽酒：第一季度净利润2.05亿元，同比下降12.51%
- 金铉集团战略入股香港医药分销商朗辉医药
- 长春高新：子公司GS3-007a干混悬剂临床试验申请获批准
- 长江通信：烽火科技拟将17.20%股份无偿划转至芯珂技术
- 闻泰科技在上海成立闻世芯半导体公司
- 阶跃发布新一代语音生成模型StepAudio 2.5 TTS
- 阿里巴巴ATH开放世界模型产品Happy Oyster今日开启体验
- 阿里巴巴世界模型ABot-PhysWorld登顶WorldArena评测榜首
- 阿里巴巴涨超5%
- 韩国拟最早7月起禁止企业集团分拆上市
- 韩国无人驾驶货运服务首度获批，6月上线
- 韩国：第一季度来韩外国游客达476万人次，中国游客约占三分之一
- 首创证券：拟发行不超过10.48亿股H股获中国证监会备案
- 马斯克的xAI据悉将向编程初创公司Cursor提供算力支持
- 马斯克要求“光速”推进Terafab项目，已向供应商询问设备报价与交付时间
- 马斯克要求供应商以“光速”推进Terafab项目
- 鸿合科技：子公司迹动体育目前暂无面向C端的相关产品或解决方案
- 龚政文：湖南广电自研“芒果大模型”已孵化80余款智能体
404 Media
- I Almost Lost My Mind in the Bridal Algorithm
- Ukraine Says Russians are Surrendering to Robots
antirez.com
- AI cybersecurity is not proof of work
Ars Technica
- "TotalRecall Reloaded" tool finds a side entrance to Windows 11's Recall database
- Meet the Quantum Kid
- Space Force looks at moving "significant number" of launches from ULA to SpaceX
- US jobs too important to risk Chinese car imports, says Ford CEO
Arturo Di Corinto
- Cybersecurity, rischio cibernetico e autodifesa digitale
Ben's Bites
- My cheatsheet for a clean context
Blog - Praetorian
- Shadow Admins in Active Directory: Hidden Privilege Paths Attackers Exploit
blog.jim-nielsen.com
- Speed is Not Conducive to Wisdom
Cerbero Blog
- YAFFS Format Package
Daniel Miessler
- Mythos is Just the New Normal
daringfireball.net
- Lisa Melton: ‘Memories of Steve’ (and Memories of Safari’s Unique Page-Loading Indicator in Particular)
- Rory Goss’s Accessibility Story
- So Close to Getting It
- Sofa 5.0
darkreading
- 6-Year Ransomware Campaign Targets Turkish Homes & SMBs
- Critical MCP Integration Flaw Puts NGINX at Risk
- Navigating the Unique Security Risks of Asia's Digital Supply Chain
defend.network
- Daily Threat Briefing – April 16, 2026
Emergent Minds | paddo.dev
- Eight Pull Requests in a Day, and Why You Can't Just Vibe Up a Replacement
Fuzzing Labs
- Reproducing CVE-2026-23111: How one character can change everything
Google DeepMind Blog
- Gemini 3.1 Flash TTS: the next generation of expressive AI speech
Hacker News Frontpage
- A Look into NaviDial, Japan's Legacy Phone Service
- AI-Assisted Cognition Endangers Human Development
- Apple accelerates eco progress with highest-ever recycled materials
- Arguing with Agents
- AWS/GCP too expensive? Cloudexit.pro will help you move to bare-metal
- Claude Opus 4.7
- Claude Opus 4.7 Model Card
- Cloudflare Email Service: now in public beta. Ready for your agents
- Cloudflare's AI Platform: an inference layer designed for agents
- Flock employees caught watching kids gymnastic class and pools
- I made a terminal pager
- Is anyone actually using OpenClaw?
- Jury Finds Live Nation Acts as a Monopoly in a Victory for States
- Kalshi CEO expects US DOJ to prosecute insider trading cases
- Live Nation Illegally Monopolized Ticketing Market, Jury Finds
- Qwen3.6-35B-A3B: Agentic Coding Power, Now Open to All
- Show HN: 48 absurd web projects – one every month
- Show HN: Jeeves – TUI for browsing and resuming AI agent sessions
- The buns in McDonald's Japan's burger photos are all slightly askew
- The Future of Everything Is Lies, I Guess: Where Do We Go from Here?
- The noise we make is hurting animals. Can we learn to shut up?
- The Rise of the Em-Dash in Hacker News Comments
- There's yet another study about how bad AI is for our brains
- Thomson Reuters Fired Worker for Speaking Out About ICE, Former Employee Says
- €54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs
HackerNews
- 10 çžŽĺ…ƒĺŸŸĺćˆ–č‡´éť‘ĺŽ˘ćŽŒćŽ§ 2.5 ä¸‡ä¸ŞçťˆçŤŻďźŒćś‰čżčĽćŠ€ćœŻĺŠć”żĺşœç˝‘çťœ
- CISA ĺ°†ĺžŽč˝Ż SharePoint Server ĺ’Œ Office Excel ćźć´žĺˆ—ĺ…Ľĺˇ˛çŸĽč˘ŤĺˆŠç”¨ćźć´žç›Žĺ˝•
- MCP â€œčŽžčŽĄĺ›şćœ‰â€ çźşé™ˇćˆ–ĺź•ĺ‘ĺ¤§č§„ć¨ĄäşşĺˇĽć™şčƒ˝äž›ĺş”é“žć”ťĺ‡ť
- WordPress ć’äťśĺĽ—äťśéĺ…ĽäžľďźŒćść„č˝Żäťśč˘ŤćŽ¨é€č‡łć•°ĺƒç˝‘çŤ™
- ç‘žĺ…¸ćŒ‡č´Łäş˛äż„çť„çť‡ĺŻšĺ…śčƒ˝ćşĺŸşçĄ€čŽžć–˝ĺ‘ĺŠ¨ç˝‘çťœć”ťĺ‡ť
- ĺ…łé”Ž Nginx UI čŽ¤čŻçť•čż‡ćźć´žéĺ…Źĺź€ĺˆŠç”¨
HackerNoon
- Why Autonomous Agents Need Structural Context
- Your Backtest Is Lying to You: Here's Why
Horizon3.ai
- Horizon3.ai Accelerates Channel Investment at Global Partner Conference: Americas
ICT Security Magazine
- Dopo Claude Mythos, cosa deve fare concretamente un CISO: la guida strategica del 2026
- Misure di sicurezza NIS2: come il Regolamento UE 2024/2690 e le specifiche ACN definiscono gli obblighi di compliance
- Third Party Risk Management (TPRM) nel 2026: quando il rischio entra dalla porta dei fornitori
infosecurity-magazine.com
- NIST Drops NVD Enrichment for Pre-March 2026 Vulnerabilities
Insinuator.net
- Disclosure: Command Injection in Geutebrück Cameras
IT Service Management News
- CNIL e tempi di conservazione dei dati del personale
- Determinazioni ACN e la minaccia della categorizzazione delle attività
- Etilometri hackerati e la dipendenza tecnologica
- Rapporto Clusit 2026
joanwestenberg.com
- I truly hate mostpeopleslop
Linux Foundation Blogs
- Linux Foundation Newsletter: April 2026
miguelgrinberg.com
- SQLAlchemy 2 In Practice - Chapter 5 - Advanced Many-To-Many Relationships
MIT Technology Review
- The Download: cyberscammers’ banking bypasses, and carbon removal troubles
Payatu
- IoT Penetration Testing: A Complete Methodology Guide with the OWASP ISTG Framework
pluralistic.net
- Pluralistic: A Pascal's Wager for AI Doomers (16 Apr 2026)
PortSwigger Blog
- Introducing the official Burp Ambassador Program
Product Hunt
- Foyer
- OpenAI Agents SDK
- TaskShell
PwnDefend
- AI as the penetration tester
- one step closer to Skynet?
SANS Internet Storm Center, InfoCON: green
- [Guest Diary] Compromised DVRs and Finding Them in the Wild, (Thu, Apr 16th)
- ISC Stormcast For Thursday, April 16th, 2026 https://isc.sans.edu/podcastdetail/9894, (Thu, Apr 16th)
Schneier on Security
- Human Trust of AI Agents
Sec-News 安全文摘
- CVE-2026-34621 Root Cause Analysis
Security Affairs
- CVE-2026-33032: severe nginx-ui bug grants unauthenticated server access
- From clinics to government: UAC-0247 expands cyber campaign across Ukraine
- Sweden reports cyberattack attempt on heating plant amid rising energy threats
shkspr.mobi
- RSS Club for WordPress
simonwillison.net
- datasette 1.0a27
- datasette.io news preview
- Gemini 3.1 Flash TTS
- Quoting John Gruber
Sploitus.com Exploits RSS Feed
- cap-exploit-poc exploit
- Exploit for Code Injection in Xwiki exploit
- Exploit for CVE-2024-12029 exploit
- Exploit for CVE-2025-15602 exploit
- Exploit for CVE-2026-1880 exploit
- Exploit for CVE-2026-35031 exploit
- Exploit for CVE-2026-40176 exploit
- Exploit for CVE-2026-5059 exploit
- Exploit for Deserialization of Untrusted Data in Roundcube Webmail exploit
- Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager exploit
- Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below exploit
- Exploit for Missing Encryption of Sensitive Data in Apache Tomcat exploit
- exploit_kernel exploit
- ios-26-activation-research exploit
- python-vulnerability-scanner exploit
- TRACE exploit
- vuln-reproductions exploit
- VulnForge exploit
- XSS exploit
Taxodium
- Album#34 - THIS MUSIC MAY CONTAIN HOPE.
TechCrunch
- Accel raises $5B to back late-stage bets
- AI learning app Gizmo levels up with 13M users and a $22M investment
- Airwallex is about to take on Stripe and the rest of the payments industry — in the physical world
- Amazon-backed X-energy files to raise up to $800M in IPO
- Anthropic shrugs off VC funding offers valuing it at $800B+, for now
- Can AI judge journalism? A Thiel-backed startup says yes, even if it risks chilling whistleblowers
- Canva’s AI assistant can now call various tools to make designs for you
- DeepL, known for text translation, now wants to translate your voice
- Fashion retailer Express left customers’ personal data and order details exposed to the internet
- Feds will require data centers to show their power bills
- Ford EV and tech chief leaving automaker
- Google is now targeting bad ads over bad actors
- Google rolls out a native Gemini app for Mac
- Hightouch reaches $100M ARR fueled by marketing tools powered by AI
- India’s vibe-coding startup Emergent enters OpenClaw-like AI agent space
- LinkedIn data shows AI isn’t to blame for hiring decline… yet
- Meta raises Quest 3 and Quest 3S prices due to RAM shortage
- Motorola sues social platforms and creators over posts, raising speech concerns in India
- OpenAI updates its Agents SDK to help enterprises build safer, more capable agents
- Runway CEO says AI could help Hollywood make 50 films instead of one $100M blockbuster
- This Khosla-backed autonomous pod startup just raised $170M — now it’s aiming for more
- This simulation startup wants to be the Cursor for physical AI
- Wait, could they still actually break up Live Nation?
- You’ve heard of hybrid cars. Now meet a hybrid cement plant.
The Decoder
- Bytedance rolls out Seedance 2.0 to 100+ countries but keeps the US off the list
- Google ships its most expressive Gemini 3.1 text-to-speech model yet with 70+ language support
The Verge
- Age verification is a mess but we’re doing it anyway
- Allbirds announced a switch from shoes to AI and its stock jumped 600 percent
- Character.AI’s new Books mode turns reading into roleplay
- FTC pushes ad agencies into dropping brand safety rules
- Google launches a Gemini AI app on Mac
- Ikea’s smart donut lamp is a sweet treat
- Intel’s cheaper Panther Lake chips are for budget-friendly laptops
- Meta blames RAM shortage for $100 Quest 3 price hike
- Microsoft counters the MacBook Neo with freebies for students
- Microsoft counters the MacBook Neo with freebies for students
- Moft adds a tracker and shutter button to its magnetic tripod wallet
- Most people still don’t want anything to do with robotaxis
- Ronan Farrow on Sam Altman’s ‘unconstrained’ relationship with the truth
- The Cybertruck of e-bikes is here to replace your car
- The Senate is voting to save free IRS Direct File today
- Ticketmaster is an illegal monopoly, jury finds
- YouTube now lets you turn off Shorts
VulDB Recent Entries
- CVE-2023-3634 | Festo MSE6-C2M-5000-FB36-D-M-RG-BAR-M12L4-AGD inclusion of undocumented features or chicken bits (VDE-2023-020)
- CVE-2023-5872 | Wago Smart Designer up to 2.33.1 information exposure (VDE-2023-045)
- CVE-2024-10242 | WSO2 API Manager prior 3.2.0.401/4.0.0.318 Authentication Endpoint cross site scripting
- CVE-2024-2374 | WSO2 API Manager XML Parser xml external entity reference
- CVE-2024-4867 | WSO2 API Manager prior 3.2.0.408/3.2.1.32/4.0.0.293/4.1.0.187 cross site scripting
- CVE-2024-8010 | WSO2 API Manager prior 4.3.0.39 Publisher xml external entity reference
- CVE-2025-12141 | Grafana up to 12.3.0 Alerting System information disclosure
- CVE-2025-12624 | WSO2 Identity Server up to 5.2.0.34 Access Token session expiration
- CVE-2025-13364 | flippercode WP Maps Plugin up to 4.8.7 on WordPress Shortcode put_wpgm cross site scripting
- CVE-2025-15621 | Sparx Systems Sparx Enterprise Architect up to 16.1.1627/17.1.1713 OAuth2 Credential insufficiently protected credentials (EUVD-2025-209499)
- CVE-2025-15635 | Zaytech Smart Online Order for Clover Plugin up to 1.6.0 on WordPress cross-site request forgery
- CVE-2025-15636 | Emarket-design YouTube Showcase Plugin up to 3.5.1 on WordPress cross site scripting
- CVE-2025-41118 | Grafana Pyroscope up to 1.15.x API secret_key Remote Code Execution
- CVE-2025-53444 | DeluxeThemes Userpro Plugin up to 5.1.10 on WordPress cross-site request forgery
- CVE-2025-6024 | WSO2 API Manager/Identity Server Authentication Endpoint cross site scripting
- CVE-2025-67841 | Nordic Semiconductor IronSide SE for nRF54H20 up to 23.0.2 privilege escalation
- CVE-2026-1564 | Pegasystems Pega Infinity up to 25.1.1 User Interface cross site scripting
- CVE-2026-1572 | livemesh Livemesh Addons by Elementor Plugin up to 9.0 on WordPress AJAX lae_admin_ajax cross site scripting
- CVE-2026-1620 | Livemesh Livemesh Addons by Elementor Plugin up to 9.0 on WordPress Template Name lae_get_template_part filename control
- CVE-2026-1711 | Pegasystems Pega Infinity up to 25.1.1 User Interface cross site scripting
- CVE-2026-1880 | ASUS DriverHub prior 1.0.6.12 toctou
- CVE-2026-20059 | Cisco Unity Connection up to 15SU4 Web-based Management Interface cross site scripting (cisco-sa-unity-vulns-n2EJSbbw)
- CVE-2026-20060 | Cisco Unity Connection up to 15SU3 Web-based Management Interface Request redirect (cisco-sa-unity-vulns-n2EJSbbw)
- CVE-2026-20061 | Cisco Unity Connection up to 15SU3 Web-based Management Interface sql injection (cisco-sa-unity-vulns-n2EJSbbw)
- CVE-2026-20078 | Cisco Unity Connection up to 15SU3 HTTPS path traversal (cisco-sa-unity-file-download-RmKEVWPx)
- CVE-2026-20081 | Cisco Unity Connection up to 15SU3 HTTPS path traversal (cisco-sa-unity-file-download-RmKEVWPx)
- CVE-2026-20132 | Cisco Identity Services Engine Software up to 3.4.0 cross site scripting (cisco-sa-isexss-BS8ctE7U)
- CVE-2026-20136 | Cisco Identity Services Engine Software up to 3.5.0 CLI command injection (cisco-sa-ise-cmd-inj-5WSJcYJB)
- CVE-2026-20147 | Cisco Identity Services Engine Software command injection (cisco-sa-ise-rce-traversal-8bYndVrZ)
- CVE-2026-20148 | Cisco Identity Services Engine Software HTTP path traversal (cisco-sa-ise-rce-traversal-8bYndVrZ)
- CVE-2026-20152 | Cisco Secure Web Appliance up to 15.2.5-013 Authentication Service authentication bypass (cisco-sa-wsa-auth-bypass-6YZkTQhd)
- CVE-2026-20161 | Cisco ThousandEyes Enterprise Agent up to 5.1.2 CLI link following (cisco-sa-te-agentfilewrite-tqUw3SMU)
- CVE-2026-20170 | Cisco Webex Contact Center Contact Center Service cross site scripting (cisco-sa-webexcc-xss-WEX5nUnA)
- CVE-2026-20180 | Cisco Identity Services Engine Software up to 3.5.0 path traversal (cisco-sa-ise-rce-4fverepv)
- CVE-2026-20184 | Cisco Webex Meetings up to 45.4 certificate validation (cisco-sa-webex-cui-cert-8jSZYhWL)
- CVE-2026-20186 | Cisco Identity Services Engine Software up to 3.4.0 command injection (cisco-sa-ise-rce-4fverepv)
- CVE-2026-20202 | Splunk Enterprise/Cloud Platform Username edit_user unicode encoding (SVD-2026-0401)
- CVE-2026-20203 | Splunk Enterprise/Cloud Platform accelerate_datamodel access control (SVD-2026-0402)
- CVE-2026-20204 | Splunk Enterprise/Cloud Platform File apptemp temp file (SVD-2026-0403)
- CVE-2026-20205 | Splunk MCP Server App up to 1.0.2 mcp_tool_admin log file (SVD-2026-0407)
- CVE-2026-2050 | GIMP HDR File Parser heap-based overflow
- CVE-2026-21726 | Grafana Loki up to 3.5.8 Ruler API Endpoint /loki/api/v1/rules/ namespace path traversal
- CVE-2026-21727 | Grafana Correlations up to 12.3.x hero-legal2.svg information disclosure
- CVE-2026-22615 | Eaton IPP Software up to 1.x input validation
- CVE-2026-22616 | Eaton IPP Software up to 1.x Web Interface excessive authentication
- CVE-2026-22676 | Barracuda RMM up to 2025.2.1 permission assignment
- CVE-2026-23772 | Dell Storage Manager up to 8.0 privileges management (dsa-2026-058)
- CVE-2026-2840 | onlineoptimisation Email Encoder Plugin up to 2.4.4 on WordPress eeb_mailto cross site scripting
- CVE-2026-30459 | Daylight Studio FuelCMS 1.5.2 Forgot Password Feature password recovery
- CVE-2026-30461 | Daylight Studio FuelCMS 1.5.2 Installer.php add_git_submodule privilege escalation
- CVE-2026-30615 | Windsurf up to 1.9544.26 MCP information disclosure
- CVE-2026-30616 | Jaaz 1.0.30 MCP STDIO Command privilege escalation
- CVE-2026-30617 | chatchat-space LangChain-ChatChat 0.3.1 MCP STDIO Server Configuration command injection
- CVE-2026-30624 | Agent Zero 0.9.8 MCP privilege escalation
- CVE-2026-30625 | Upsonic 0.71.6 MCP os command injection
- CVE-2026-3155 | OneSignal Plugin up to 3.8.0 on WordPress authorization (EUVD-2026-23219)
- CVE-2026-31843 | goodoneuz pay-uz up to 2.2.24 Endpoint update Route::any access control
- CVE-2026-31987 | Apache Airflow up to 3.1.x JWT Token log file (ID 62428)
- CVE-2026-32179 | Microsoft MsQuic up to 2.4.17/2.5.6 integer underflow
- CVE-2026-3299 | futtta WP YouTube Lyte Plugin up to 1.7.29 on WordPress Shortcode lyte cross site scripting
- CVE-2026-33212 | weblate up to 5.16 Tasks API access control
- CVE-2026-33214 | weblate up to 5.16 Translation Memory API /api/memory/ authorization
- CVE-2026-33220 | weblate up to 5.16 Translation Memory API path traversal (GHSA-mqph-7h49-hqfm)
- CVE-2026-33435 | weblate up to 5.16 Configuration path traversal (GHSA-558g-h753-6m33)
- CVE-2026-33440 | weblate up to 5.16 Setting ALLOWED_ASSET_DOMAINS server-side request forgery (GHSA-5fhx-9jwj-867m)
- CVE-2026-3355 | ivole Customer Reviews for WooCommerce Plugin up to 5.101.0 on WordPress cross site scripting
- CVE-2026-33667 | opf openproject up to 17.2.x Setting confirm_otp excessive authentication (GHSA-234r-45m2-w6cv)
- CVE-2026-3369 | codesolz Better Find and Replace Plugin up to 1.7.9 on WordPress Uploaded Image Title cross site scripting (EUVD-2026-23221)
- CVE-2026-33804 | fastify middie up to 9.3.1 interpretation conflict
- CVE-2026-33877 | apostrophecms apostrophe up to 4.28.x Endpoint reset-request timing discrepancy (GHSA-mj7r-x3h3-7rmr)
- CVE-2026-33888 | apostrophe up to 4.28.x piece-type checks authorization (GHSA-xhq9-58fw-859p)
- CVE-2026-33889 | apostrophe up to 4.28.x launder.string Color cross site scripting (GHSA-97v6-998m-fp4g)
- CVE-2026-34242 | weblate up to 5.16 path traversal (GHSA-hv99-mxm5-q397)
- CVE-2026-34244 | weblate up to 5.16 Error Message WEBLATE_MACHINERY server-side request forgery (GHSA-xrwr-fcw6-fmq8)
- CVE-2026-3428 | ASUS Member Center Update code download
- CVE-2026-34393 | weblate up to 5.16 API Endpoint privileges management (GHSA-3382-gw9x-477v)
- CVE-2026-34632 | Adobe Photoshop Installer uncontrolled search path
- CVE-2026-3489 | designinvento DirectoryPress Plugin up to 3.6.26 on WordPress packages sql injection (EUVD-2026-23223)
- CVE-2026-3551 | rafasashi Custom New User Notification Plugin up to 1.2.0 on WordPress register_setting cross site scripting
- CVE-2026-35569 | apostrophe up to 4.28.x Meta Description cross site scripting (GHSA-855c-r2vq-c292)
- CVE-2026-3581 | iandunn Basic Google Maps Placemarks Plugin up to 1.10.7 on WordPress authorization
- CVE-2026-3614 | acyba AcyMailing Plugin up to 10.8.1 on WordPress AJAX wp_ajax_acymailing_router authorization
- CVE-2026-3875 | wpdevteam BetterDocs Plugin up to 4.3.8 on WordPress Shortcode betterdocs_feedback_form cross site scripting
- CVE-2026-3876 | specialk Prismatic Plugin up to 3.7.3 on WordPress Shortcode prismatic_decode cross site scripting
- CVE-2026-3878 | fahadmahmood WP Docs Plugin up to 2.2.9 on WordPress wpdocs_options[icon_size] cross site scripting (EUVD-2026-23168)
- CVE-2026-3885 | gn_themes WP Shortcodes Plugin up to 7.4.9 on WordPress cross site scripting (EUVD-2026-23159)
- CVE-2026-39350 | Istio up to 1.27.8/1.28.5/1.29.1 notServiceAccounts incorrect regex (GHSA-9gcg-w975-3rjh)
- CVE-2026-39845 | weblate up to 5.16 Webhook Add-on server-side request forgery (GHSA-f8hv-g549-hwg2)
- CVE-2026-39857 | apostrophe up to 4.28.x REST API distinct information disclosure (GHSA-c276-fj82-f2pq)
- CVE-2026-3995 | faridsaniee OPEN-BRAIN Plugin up to 0.5.0 on WordPress Setting sanitize_text_field API key cross site scripting
- CVE-2026-40118 | Arcserve UDP Console 10.3 incorrectly specified destination in a communication channel
- CVE-2026-40173 | dgraph-io dgraph up to 25.3.1 /debug/pprof/cmdline cache_mb information disclosure (GHSA-95mq-xwj4-r47p)
- CVE-2026-40176 | Composer up to 2.2.26/2.9.5 generateP4Command input validation (GHSA-wg36-wvj6-r67p)
- CVE-2026-40179 | Prometheus up to 3.5.1/3.11.1 label_replace label cross site scripting (GHSA-vffh-x6r8-xx99)
- CVE-2026-40186 | apostrophe up to 4.28.x cross site scripting (GHSA-9mrh-v2v3-xpfm)
- CVE-2026-40192 | Pillow up to 12.1.x FITS Image allocation of resources (GHSA-whj4-6x5x-4v2j)
- CVE-2026-40193 | foxcpp maddy up to 0.9.2 SMTP/IMAP /go-ldap/ldap/v3 strings.ReplaceAll ldap injection (GHSA-5835-4gvc-32pc)
- CVE-2026-40245 | Free5GC up to 1.4.2 subs-to-notify information disclosure (GHSA-wrwh-rpq4-87hf)
- CVE-2026-40256 | weblate up to 5.16 repo_outside path traversal (GHSA-ffgh-3jrf-8wvh)
- CVE-2026-40316 | OWASP-BLT up to 2.1 regenerate-migrations.yml pull_request_target code injection (GHSA-wxm3-64fx-cmx9)
- CVE-2026-4032 | kpumuk CodeColorer Plugin up to 0.10.1 on WordPress Shortcode cc Class cross site scripting
- CVE-2026-40500 | ProcessWire CMS up to 3.0.255 Add Module module download server-side request forgery
- CVE-2026-40502 | HKUDS OpenHarness authorization
- CVE-2026-40503 | HKUDS OpenHarness prior dd1d235450dd987b20bff01b7bfb02fe8620a0af /memory path traversal
- CVE-2026-40504 | marcobambini gravity up to 0.9.5 gravity_vm_exec heap-based overflow (ID 437)
- CVE-2026-40505 | Artifex MuPDF control sequence
- CVE-2026-40915 | GIMP integer overflow
- CVE-2026-40916 | GIMP TIM Image out-of-bounds write
- CVE-2026-40917 | GIMP ICNS Image icns_slurp out-of-bounds
- CVE-2026-40918 | GIMP PVR Image buffer size
- CVE-2026-40919 | GIMP file-seattle-filmworks Plugin out-of-bounds write
- CVE-2026-40947 | Yubico libfido2/python-fido2/yubikey-manager untrusted search path
- CVE-2026-40959 | Luanti up to 5.15.1 LuaJIT inclusion of functionality from untrusted control sphere (GHSA-g596-mf82-w8c3 / EUVD-2026-23149)
- CVE-2026-40960 | Luanti up to 5.15.1 Mod trusted_mods control flow (GHSA-22c4-238c-m5j4)
- CVE-2026-40962 | FFmpeg up to 8.0 libavformat/mov.c integer overflow
- CVE-2026-41015 | radare2 6.1.2 on UNIX os command injection (Issue 25650)
- CVE-2026-41030 | Ascensio ONLYOFFICE DesktopEditors up to 9.2.x Update Service resource transfer
- CVE-2026-41034 | Ascensio ONLYOFFICE DocumentServer up to 9.2.x XLS pictFmla.cbBufInCtlStm out-of-bounds
- CVE-2026-41035 | Samba rsync up to 3.4.1 Qsort Call receive_xattr length length parameter
- CVE-2026-4160 | techjewel Fluent Forms Plugin 6.1.21 on WordPress AJAX Endpoint submission_id authorization
- CVE-2026-4857 | SailPoint IdentityIQ up to 8.4p3/8.5p1 Debug Page authorization
- CVE-2026-4880 | ukrsolution Barcode Scanner Plugin up to 1.11.0 on WordPress Authentication Token wp_capabilities privileges management
- CVE-2026-4949 | properfraction ProfilePress Plugin up to 4.16.12 on WordPress process_checkout change_plan_sub_id authorization
- CVE-2026-5056 | GStreamer qtdemux stack-based overflow
- CVE-2026-5057 | Aten Unizon RpcProvider denial of service
- CVE-2026-5070 | siteorigin Vantage Plugin up to 1.20.32 on WordPress cross site scripting
- CVE-2026-5189 | Sonatype Nexus Repository Manager up to 3.70.5 Configuration hard-coded credentials
- CVE-2026-5363 | TP-Link Archer C7 5/5.8 Web Interface inadequate encryption
- CVE-2026-5387 | AVEVA Pipeline Simulation up to 2025 SP1 authorization (AVEVA-2026-004)
- CVE-2026-5424 | Avast Premium Security Gen Self Protection Local Privilege Escalation
- CVE-2026-5487 | DriveLock path traversal
- CVE-2026-5489 | DriveLock path traversal
- CVE-2026-5490 | DriveLock sql injection
- CVE-2026-5491 | DriveLock path traversal
- CVE-2026-5492 | DriveLock path traversal
- CVE-2026-5785 | Zoho ManageEngine PAM360 Query Report sql injection
- CVE-2026-6245 | Red Hat Enterprise Linux/OpenShift Container Platform System Security Service Daemon pam_passkey_child_read_data buffer access with incorrect length value
- CVE-2026-6270 | fastify middie up to 9.3.1 interpretation conflict (GHSA-hrwm-hgmj-7p9c)
- CVE-2026-6296 | Google Chrome up to 147.0.7727.55 ANGLE heap-based overflow (ID 490170)
- CVE-2026-6297 | Google Chrome up to 147.0.7727.55 Proxy use after free (ID 493628)
- CVE-2026-6298 | Google Chrome up to 147.0.7727.55 Skia heap-based overflow (ID 495700)
- CVE-2026-6299 | Google Chrome up to 147.0.7727.55 Prerender use after free (ID 497053)
- CVE-2026-6300 | Google Chrome up to 147.0.7727.55 CSS use after free (ID 491994)
- CVE-2026-6301 | Google Chrome up to 147.0.7727.55 Turbofan type confusion (ID 495273)
- CVE-2026-6302 | Google Chrome up to 147.0.7727.55 Video use after free (ID 495477)
- CVE-2026-6303 | Google Chrome up to 147.0.7727.55 Codecs use after free (ID 496282)
- CVE-2026-6304 | Google Chrome up to 147.0.7727.55 Graphite use after free (ID 496393)
- CVE-2026-6305 | Google Chrome up to 147.0.7727.55 PDFium heap-based overflow (ID 496618)
- CVE-2026-6306 | Google Chrome up to 147.0.7727.55 PDFium heap-based overflow (ID 496907)
- CVE-2026-6307 | Google Chrome up to 147.0.7727.55 Turbofan type confusion (ID 497404)
- CVE-2026-6308 | Google Chrome up to 147.0.7727.55 Media out-of-bounds (ID 497412)
- CVE-2026-6309 | Google Chrome up to 147.0.7727.55 Viz use after free (ID 497846)
- CVE-2026-6310 | Google Chrome up to 147.0.7727.55 Dawn use after free (ID 497969)
- CVE-2026-6311 | Google Chrome up to 147.0.7727.55 on Windows Accessibility uninitialized variable (ID 498201)
- CVE-2026-6312 | Google Chrome up to 147.0.7727.55 Passwords cross-domain policy (ID 498269)
- CVE-2026-6313 | Google Chrome up to 147.0.7727.55 CORS cross-domain policy (ID 498765)
- CVE-2026-6314 | Google Chrome up to 147.0.7727.55 GPU out-of-bounds write (ID 498782)
- CVE-2026-6316 | Google Chrome up to 147.0.7727.55 Forms use after free (ID 499384)
- CVE-2026-6316 | Google Chrome up to 147.0.7727.55 Forms use after free (ID 499384)
- CVE-2026-6317 | Google Chrome up to 147.0.7727.55 Cast use after free (ID 500091)
- CVE-2026-6318 | Google Chrome up to 147.0.7727.55 Codecs use after free (ID 495996)
- CVE-2026-6318 | Google Chrome up to 147.0.7727.55 Codecs use after free (ID 495996)
- CVE-2026-6319 | Google Chrome up to 147.0.7727.55 on Android Payments use after free (ID 499018)
- CVE-2026-6348 | Simopro WinMatrix up to 3.5.26.15 missing authentication
- CVE-2026-6349 | HGiga iSherlock-audit-5.5 os command injection
- CVE-2026-6350 | Openfind MailGates/MailAudit prior 5.2.10.099/6.1.10.054 stack-based overflow (EUVD-2026-23166)
- CVE-2026-6351 | Openfind MailGates/MailAudit prior 5.2.10.099/6.1.10.054 System File crlf injection
- CVE-2026-6358 | Google Chrome up to 147.0.7727.55 on Android XR use after free (ID 497724)
- CVE-2026-6359 | Google Chrome up to 147.0.7727.55 on Windows Video use after free (ID 490251)
- CVE-2026-6360 | Google Chrome up to 147.0.7727.55 Fileystem use after free (ID 497880)
- CVE-2026-6361 | Google Chrome up to 147.0.7727.55 on Windows PDFium heap-based overflow (ID 500036)
- CVE-2026-6362 | Google Chrome up to 147.0.7727.55 Codecs use after free (ID 500066)
- CVE-2026-6363 | Google Chrome up to 147.0.7727.55 V8 type confusion (ID 495751)
- CVE-2026-6364 | Google Chrome up to 147.0.7727.55 Skia out-of-bounds (ID 502103)
- CVE-2026-6370 | HashThemes Mini Ajax Cart for WooCommerce Plugin up to 1.3.4 on WordPress cross site scripting
- CVE-2026-6383 | Red Hat OpenShift Virtualization 4 Role-Based Access Control authorization
- CVE-2026-6384 | GIMP GIF Image buffer overflow
- CVE-2026-6385 | FFmpeg MPEG-PS VOB Media File integer overflow
- CVE-2026-6388 | Red Hat OpenShift GitOps ArgoCD Image Updater insufficient granularity of access control
- CVE-2026-6410 | fastify static up to 9.1.0 Directory Listing dirList.path path traversal (GHSA-pr96-94w5-mx2h)
- CVE-2026-6414 | fastify static up to 9.1.0 url encoding (GHSA-x428-ghpx-8j92)
Vulnerabilities and Threat Research – Qualys Security Blog
- Qualys VMDR and TotalCloud™ Now Available on Oracle Cloud Marketplace
Wired
- 'The Last Airbender' Leaked Online. Some Fans Say Paramount Deserves the Fallout
- 50% Off DoorDash Promo Code | April 2026
- 50% Off Home Depot Promo Codes | April 2026
- 60% HP Discount Codes & Coupons April 2026
- AI Could Democratize One of Tech's Most Valuable Resources
- Anthropic Plots Major London Expansion
- AT&T Promo Codes and Bundle Deals: Save $50 in April
- Best MacBook Accessories (2026): Chargers, Covers, Keyboards, and More
- Birdfy Discount Code: Save Up to 40% on Smart Bird Feeders
- Congress Turns Up Pressure on DHS Over Palantir’s Role in Immigration Crackdown
- Google Workspace Promo Code: Up to 14% Off in 2026
- LG Sound Suite Review: Big Sound for Larger Rooms
- Microsoft Surface PCs Are Getting Big Price Hikes, and the Cheaper Models Are Going Away
- NASA Wants to Put Nuclear Reactors on the Moon
- Robot Vacuum Throwdown: Shark Versus Dyson (2026)
- Tempo Prepared Meal Subscription Review (2026): Surprisingly Tasty
- The 10 Best MagSafe Phone Grips for Your Butter Fingers (2026)
- The Best Pillows for Neck Pain, Recommended by a Sleep Science Coach (2026)
- The Star Trek Communicator Is Now a High-End Wristwatch
- The US Government to Ask Data Centers How Much Power They Use
- Therabody Promo Codes: 15% Off April 2026
- Uplift Desk Coupon Codes & Discounts: Up to $570 Off
- Where the DOGE Operatives Are Now
- Why Amazon Is Buying Globalstar—and What It Means for Your iPhone
不安全
- AI and Executive Protection: New Risks, New Defenses
- Album#34 - THIS MUSIC MAY CONTAIN HOPE.
- Business Logic Flaws: The Silent Threat in Modern Web Applications
- Human Trust of AI Agents
- McGraw Hill - 13,500,136 breached accounts
- More than pretty pictures: Wendy Bishop on visual storytelling in tech
- Mythos is Just the New Normal
- PowMix botnet targets Czech workforce
- 中国芯片制造商长江存储计划新建工厂
- 现在开通Claude Max等订阅也可能触发KYC验证需要上传证件和自拍照
- 英伟达与楷登电子联合开发机器人AI
- 被薅羊毛伤透了？GitHub Copilot所有免费试用账号都被立即暂停权益
代码审计星球
- 原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
奇客Solidot–传递最新科技情报
- 全球暖化危及水稻产量
爱范儿
- Claude Opus 4.7 或本周上线，但 Anthropic 要查你证件了
- Mac 可能 Neo，但 Mac Neo 不太可能
- 卸载龙虾后，我找到了更香的爱马仕 Agent，5 分钟带你极速上手
- 快倒闭的硅谷神鞋，转行 AI 股价暴涨 7 倍，龙虾之父都懵了
- 早报｜手机销量十季度首降，三星苹果成唯二赢家/李想：不招非原生AI人才/苹果将Siri程序员送进AI「训练营」
- 沃尔沃三车齐发！ES90 卖 42.99 万，XC70 卖 24.99 万，还有一辆旗舰轿车
- 苹果把Siri员工送进AI「补习班」，黄仁勋的暴论开始应验了
量子位 QbitAI
- Claude实名认证引众怒！强制验证是为了更精准封号
- PPIO上线PPHermes：云端沙箱一键部署Hermes Agent
- 世界客商排队体验讯飞AI眼镜，科大讯飞把多语种AI能力带进广交会第一现场
- 刚刚，机器人练成了宁次的「白眼」：∞帧画面边看边3D重建我们的世界！
- 宁王飘了！日赚2.3亿，回应比亚迪“闪充”：跟我学的，构不成挑战
- 它石智航Pre-A轮融资4.55亿美金破中国具身智能纪录，高瓴红杉美团联合领投
- 我用1分钟开发了个上线应用，有阿里Meoo谁还学编程啊
- 打造全球领先“具身智能超级供应链”，京东发布行业首个具身数据全链路基础设施
- 智象未来完成新一轮融资，全力打造下一代原生全模态世界模型
- 炸奥特曼的人被扒出来了
黑海洋
- HBO Max通过与JioHotstar合作进入印度
- 中国芯片制造商长江存储计划新建工厂
- 福特电动汽车主管将卸任硅谷人才难留
- 美国近半员工在工作中使用AI但每周浪费8小时
- 英伟达与楷登电子联合开发机器人AI
- 谷歌有望从对SpaceX的投资中获千亿回报
- 韩国三星公司请求法院阻止工会举行罢工
- 黄仁勋：AI不是核武器也不会抢走所有工作