安全资讯归档（2026-04-21）

2Libra
- 2025 年 4 月 21 日，刘强东痛斥幽灵外卖，宣布京东正式进入入外卖赛道， 2026 年 4 月 17 日，7 家处罚结果，京东平台的幽灵店铺数量最多，达到 43190 家，占比超六成。
- [炫耀贴] 勤勉鉴定大成功！
- Deepseek 以 100 亿美元 💵 的金额进行融资，出 3 亿的额度，真的这么便宜吗？仅为竞对的三分之一，我都在想能不能投了。
- Iphone 手机网络问题请教
- Jimmy 又在肝了？
- Kimi K2.6 发布！！！
- “猛兽”也要退役了
- 《疑案追声》点评：10 分｜一定要用耳机玩的游戏，画面只是提供必要信息，重要的是用耳听相关信息，而且同一个案子要在不同区域反复尝试，有点循环的感觉，大推。
- 【庸 AI 自扰】医院「一分钟游」
- 【💰】【投票】api 文档编辑器暂时出了一版, 先部署在了腾讯云的 EO 上面, api 的调试可能调试不了, 正式版应该没有这个问题, 发出来主要是让兄弟们给提提意见 🤡
- 【💰】你会倒腾你的电脑桌吗，请秀出你的桌面/布置心得
- 今天周围都下雪了
- 今日的乐子，这里的 token 究竟是"词元"还是“令牌”？
- 入门摄影想问问大家人像摄影买哪款合适~~~~
- 办公键盘求推荐
- 厨子要卸任 CEO 了，苹果未来何去何从
- 反重力是无法使用了么
- 奥特曼重置额度了，昨天还在小心翼翼的省着用，今天发现额度重置了
- 如何提高自己的输出能力呢？
- 工作这些年，除了钱，你还沉淀下来了什么？
- 库克宣布九月份卸任 Apple CEO，由硬件工程师 John 接任。乔布斯是灵魂，库克是骨架，库克可以说是 Apple 历史上最伟大的 CEO。
- 感受下 GPT-image2 带来的震撼吧
- 我突然发现自己好像不知道自己是不是到底饿了的啊
- 推一下自己的 app
- 有情感问题可以来咨询~
- 有没有接到民警电话问有没有买过无人机的？
- 未开发票投诉平台
- 消息页面点进去的时候，能不能默认已读本页呢？
- 潘石屹几百亿资产全身而退，是大陆地产圈这么有体量的中唯一得以善终的吧？
- 现在注册谷歌账号门槛是不是很高，有什么技巧
- 空闲时间
- 肯德基 KFC 新出的早餐，麻酱面，又干又难吃。差评！
- 还有哪些获取国内节假日的 API
- 这次是关于发帖时间的疑惑
- 骑驴找 🐎 尴尬事
- 🔖 新版增加评论书签功能
36氪
- *ST太和：因涉嫌信披违规被证监会立案
- 4月以来机构调研270家公司
- 6天3板金富科技：并购标的公司近期已启动液冷业务产能扩张安排，产能预计将于5月底起陆续释放
- 8点1氪丨库克将不再担任苹果CEO；爱奇艺回应AI艺人库争议：入驻仅代表有接洽意愿；日本修正震级为7.7级
- Adobe首席执行官：AI为软件创造更多机遇
- AI睡眠科技公司Eight Sleep宣布正式进入中国市场
- AMD将与格方罗德合作开发CPO解决方案
- Anthropic承诺未来十年将在AWS技术方面投入超过1000亿美元
- A股三大指数午间休盘集体下跌，算力产业链走弱
- A股三大指数集体低开，新股N盛合上市首日高开406.71%
- A股三大指数集体收涨，中国移动涨超3%
- A股三大股指午后集体翻红
- FAA下令调查蓝色起源发射事故，AST SpaceMobile卫星报废
- Kimi K2.6 发布并开源代码及Agent
- NX集团将收购加拿大Metro Supply Chain Group全部股份
- OpenAI正与顾问合作，拟出售Codex
- OPPO刘作虎：今年行业新机普遍大幅涨价，OPPO 面临不小成本压力
- PettiChat获百万美元种子投资，造出宠物穿戴AI翻译器
- QClaw海外版正式开启内测
- Snap任命Doug Hott为新任首席财务官
- SpaceX总裁肖特韦尔2025年总薪酬为8580万美元
- “自变量机器人”完成近20亿元B轮融资
- 一季度31个省份规上工业增加值全部实现正增长
- 一季度中央企业固定资产投资同比增长23.5%
- 一季度工业机器人产量同比增长33.2%
- 一季度广东实现地区生产总值同比增长4.6%
- 万兴科技旗下万兴脑图手绘模式开启公测
- 三博脑科：2025年净利润8418.28万元，同比下降19.85%
- 上海机电：一季度净利润1.78亿元，同比下降12.32%
- 上海：加快千帆星座建设，推动卫星互联网业务商用试点
- 上海：加快新一代通用人工智能、智能软件、智算系统等技术攻关
- 上海：开展人工智能知识产权快速协同保护指南编制
- 上海：开展具身智能、自动驾驶、科学研究等领域的数据创新平台建设
- 上海：有序扩大增值电信业务对外开放试点，研究多元主体参与国家通信海缆建设的可行性
- 专访Eight Sleep CTO：被马斯克们买爆的AI床垫，进中国先砍一刀订阅费
- 东京出租车涨价，涨幅约10%
- 东山精密A股市值突破3000亿元
- 东山精密：2025年净利润13.86亿元，同比增长27.67%
- 两市融资余额增加290.57亿元
- 中信证券：二季度建议布局高确定性板块的同时灵活参与交易机会
- 中信证券：坚定看好商业航天产业长期发展，投资端应更聚焦核心资产
- 中创新航在自贡成立科技新公司，含新能源汽车业务
- 中国联通：一季度净利润21.37亿元，同比下降18%
- 中国银河证券：车展及人形机器人大会开幕在即，带动汽车行业情绪修复
- 中国高科在上海成立启芯科技公司
- 云煤能源：一季度营业收入14.87亿元，同比增长16.11%
- 人形机器人产业大放异彩，概念股业绩持续高增可期
- 人民币对美元中间价报6.8594，调升54个点
- 众兴菌业：第一季度净利润1.63亿元，同比增长237.55%
- 做多半导体成“最拥挤交易”，全球机构跳出“抱团”寻觅细分方向
- 光华股份：一季度净利润2458.24万元，同比下降3.75%
- 光线传媒：一季度净利润2327.56万元，同比下降98.85%
- 全志科技：一季度净利润2.03亿元，同比增长121.77%
- 凯美特气：一季度净利润1073.2万元，同比下降66.2%
- 创业板指跌超1%
- 初步贸易数据显示：韩国出口势头依旧强劲
- 力拓一季度全球铁矿石产量同比增长12%
- 北京市新增2款已完成备案的生成式人工智能服务
- 北方华创：依照市场及客户需求情况合理定价，近期没有涨价预期
- 半日主力资金加仓基础化工板块，抛售计算机板块
- 华光环能：控股孙公司中标1.35亿元总承包项目
- 华泰证券：地缘扰动下，继续推荐货运铁路、集运、快递
- 华泰证券：量价边际改善，关注地产股布局机遇
- 协鑫集成：公司的钙钛矿叠层产品正处于研发阶段，尚未实现量产
- 博纳影业在上海成立影视科技新公司
- 印度与韩国拟深化经济合作，力争双边贸易额翻倍至500亿美元
- 印度贸易代表团本周将抵达美国商讨贸易协议
- 取消电动车项目后，索尼本田移动将缩减运营规模、另寻业务方向
- 受益PCB扩产潮，设备厂商一季度业绩大增
- 可转债“破面”频现，信用风险须警惕
- 可达5G的10倍，全国首个Pre6G试验网在江苏南京投入运行
- 启明创投“先拿壳再装资产”，VC/PE探路退出新模式
- 唯捷创芯：股东及其一致行动人拟减持不超2%公司股份
- 嘉士伯将结束与可口可乐合作，成为百事在北欧大部分地区装瓶商
- 国内油价今年首次下调，加满一箱50升92号汽油将少花22元
- 国务院印发《关于推进服务业扩能提质的意见》
- 国务院：加强第六代移动通信（6G）技术研发,适度超前建设移动物联网
- 国务院：加快培育服务业骨干企业，支持符合条件的上市融资、并购重组
- 国务院：深入实施“人工智能+”行动，支持采购大模型、智能体服务
- 国务院：进一步扩大增值电信、生物技术、外商独资医院等领域开放试点
- 国泰海通：美妆行业Q1整体维持良好表现，板块估值逐步进入击球区
- 地产中介“二当家”去年亏损9663万，租赁业务成了压舱石
- 大众汽车CEO：或再削减100万辆汽车产能
- 大众集团2026年将推出超20款新车，2030年实现50款车型交付
- 央行公开市场开展50亿元7天期逆回购操作
- 奇世智能CheeChips完成天使轮融资，专注AI+母婴智能硬件生态｜最前线
- 娃哈哈旗下黑龙江饮料公司完成更名
- 宁德时代发布第三代神行超充电池，满电仅需6分钟
- 宁德时代发布麒麟凝聚态电池，最高续航1500公里
- 宁德时代港股涨超5%，再创历史新高
- 宁德时代首席科学家吴凯：钠离子电池已经解决了制造环节的核心问题，将于年内大规模量产
- 安利股份：公司已积极推进产品价格上调事宜
- 小米宣布上线PC版龙虾，Xiaomi miclaw正式开启PC、Mac、有屏音箱多终端封测
- 小红书关联公司增资至1980万元
- 山东墨龙：一季度净利润558.4万元，同比增长2.96%
- 工业和信息化部召开未来产业企业座谈会
- 工信部回应存储器价格上涨情况，将多措并举保障产业链供应链稳定
- 工信部：一季度规模以上高技术制造业增加值同比增长12.5%
- 工信部：万兆光网试点项目建设有序推进，试点目标完成情况良好
- 工信部：将系统布局6G下一代互联网等前沿技术研发
- 工信部：已部署超百项未来产业创新“揭榜挂帅”攻关任务
- 工信部：正在开展算电协同政策研究和标准制定
- 市场消息：PIXVERSE计划在香港上市
- 年报季透视A股：逾1700家上市公司拟分红
- 微信：韩国、斯里兰卡、泰国、马来西亚、新加坡的国家码接入微信支付
- 德国商业银行正式拒绝裕信银行敌意收购策略，收购战言辞交锋升级
- 恒指午间休盘涨0.13%，恒生科技指数跌0.74%
- 恒指开盘涨0.31%，胜宏科技上市首日高开57.23%
- 恒指收涨0.48%，宁德时代涨超4%
- 成都能源发展公司注册资本增至10.34亿元
- 我国智能算力规模达1882EFLOPS
- 我国软件产业规模有望突破20万亿元大关
- 截至2025年底，SpaceX总资产为920亿美元
- 截至3月底，全国5G基站总数已达495.8万个
- 报道称大众汽车今年将在其中国车型中加入语音人工智能技术
- 摩根大通力争今年获批在华推出主动型ETF
- 文件显示通用汽车为新产品主管提供4000万美元薪酬方案
- 文件：马斯克和内部人士将在IPO后保留对SpaceX的投票控制权
- 新澳股份：一季度净利润1.2亿元，同比增长18.62%
- 新茶饮品牌“TEAMEET“获宜宾高新前沿科技产业创业投资基金战略投资
- 新黄浦：一季度净利润1.38亿元，同比增长78.26%
- 日本突发7.4级地震，影响多家半导体公司
- 星巴克中国回应开放加盟传闻：不实信息
- 景气度“光”芒四射，基金经理把握光通信投资机会
- 智能锂电园林公司完成数千万元融资，出货量破万台｜硬氪首发
- 机构今日买入云南锗业等14股，卖出ST臻镭4.84亿元
- 机构：预估4月大尺寸电视面板续涨
- 李云泽会见保诚集团董事长范德娜
- 李力耘正式加入众擎机器人，出任CTO
- 正海磁材：一季度净利润4704.91万元，同比下降32.29%
- 氪星晚报｜星巴克中国回应开放加盟传闻：不实信息；苹果公司宣布特纳斯将接替库克担任CEO
- 永鼎股份：第一季度净利润1.59亿元，同比下降45.19%
- 浙文影业等成立浙江电影产业股权投资基金，出资额10亿
- 海优新材：收到某知名汽车玻璃制造商项目定点通知
- 海南离岛免税政策实施15周年，免税购物金额达2864亿元
- 消息人士：SpaceX 本周举办为期三天的分析师会议，积极拉拢华尔街备战IPO
- 淡马锡支持的CuspAI据悉正洽谈融资，估值将超10亿美元
- 滴滴成为香港引进办重点企业，两地乘客可顺畅使用同一个App
- 热门中概股美股盘前多数下跌，哔哩哔哩跌超3%
- 牧原股份：一季度亏损12.15亿元
- 猛士汽车携手华为乾崑发布智能越野黑科技
- 猪价开启“回暖”模式，5家公司去年净利润超1亿元
- 王子新材：2025年亏损1.58亿元
- 珀莱雅：2025年净利润14.98亿元，同比下降3.5%
- 理想汽车宣布首发高德汽车出行AI Agent
- 理想汽车将与高德在座舱Agent进行深入合作
- 理财公司积极升级“T+0.5”模式
- 瑞芯微：一季度净利润3.29亿元，同比增长57.15%
- 百事集团投资8000万元在上海建设全渠道智慧物流中心
- 监管新规重塑期货行业生态，“重资本时代”加速到来
- 礼来宣布至多70亿美元收购癌症生物技术公司Kelonia
- 福耀玻璃：一季度净利润17.12亿元，同比下降15.68%
- 私募基金总规模连续6个月创新高，行业延续稳健增长态势
- 科兴制药：2025年净利润1.56亿元，同比增长394.17%
- 科大讯飞发布AIPC新品“讯飞星火·燎原N30m笔记本”
- 空客将收购法国网络安全公司Quarkslab
- 紫金矿业：一季度净利润200.79亿元，同比增长97.5%
- 美关税退款系统上线
- 美国3月零售销售环比升1.7%
- 美国将向美国国家铁路客运公司东北铁路走廊投资近50亿美元
- 美国白宫宣布劳工部长将离职
- 美联储主席提名人沃什承诺进行新的资产剥离
- 美股三大指数小幅收跌，热门科技股多数下跌
- 美股大型科技股盘前多数上涨，亚马逊涨超2%
- 联合健康集团：第一季度合并收入为1117亿美元，同比增长2%
- 股价“一”字跌停，液冷龙头股英维克回应
- 股票私募连续四周加仓仓位指数升至82.16%
- 腾讯云开源OpenAI、Manus同款Agent底座
- 自然资源部：推进战略性矿产资源增储上产
- 航旅纵横致歉：部分功能出现使用异常，正全力抢修
- 良品铺子：2025年亏损1.48亿元，拟10派2.49元
- 英联股份：一季度净利润1252.42万元，同比增长13.41%
- 苹果公司宣布特纳斯将接替库克担任CEO
- 谷歌据悉组建团队以改进AI编程模型
- 谷歌：Chrome浏览器的Gemini功能将扩展至更多亚太地区国家
- 贝佐斯旗下人工智能实验室融资交易接近敲定，估值逼近380亿美元
- 赣锋锂业在甘肃成立锋桥新能源公司
- 远东股份：一季度净利润9662.84万元，同比增长110.36%
- 通用电气公司Q1调整后每股收益超市场预期
- 速腾聚创发布“创世”架构及双旗舰芯片
- 锂矿股逆势活跃，天齐锂业逼近涨停
- 长安汽车朱华荣：2030年公司年产销目标400万辆，新能源占比超60%
- 长安汽车朱华荣：2030年力争实现营收6000亿元
- 长安汽车朱华荣：将战略性整合阿维塔和深蓝汽车
- 长春高新：一季度净利润2.76亿元，同比下降41.67%
- 长电科技：2025年先进封装营收创历史新高
- 陆家嘴：一季度净利润1.99亿元，同比下降68.41%
- 雅诗兰黛据悉为收购Puig寻求50亿欧元融资
- 霍华德・马克斯：眼下便宜股票极少，“好货只在人们恐慌时才出现”
- 韩国电动汽车累计注册量突破100万
- 飞猪：五一期间，江苏包车游预订量同比增长45%
- 香港金发局：已有美资基金在港设点态度较去年更开放
- 马斯克去年增持14亿美元SpaceX股份
- 马斯克缺席法国检方听证会
- 高瓴据悉拟为新基金募集80亿美元，包括接洽外部投资者及动用自有资金
- 高盛分析师：苹果扫货内存不会压垮其利润率，2026年iPhone将出货2.4EB LPDDR5
- 魔法原子获大健康行业1.5亿元大单
404 Media
- Forbes Prediction Market Gamefies Story About Mass Shooting of 8 Children
- Scientists Gave a Bunch of Salmon Cocaine. This Is What Happened Next.
- This AI Tool Rips Off Open Source Software Without Violating Copyright
Ars Technica
- Deezer says 44% of new music uploads are AI-generated, most streams are fraudulent
- Here's how F1 is tweaking its hybrid systems to try to save the show
- Pentagon pulls the plug on one of the military's most troubled space programs
Arturo Di Corinto
- Disinformazione e Deepfake: la democrazia in pericolo
Ben's Bites
- That's my designer - Claude
Bruce's Blog
- wshobson/agents Deep Dive: What 184 Claude Code Agents Actually Do
Cerbero Blog
- VBA Beautifier Package
CERT Recently Published Vulnerability Notes
- VU#414811: Terrarium contains a vulnerability that allows arbitrary code execution
daringfireball.net
- Apple: ‘Tim Cook to Become Apple Executive Chairman; John Ternus to Become Apple CEO’
- Apple’s Annual Environmental Progress Report
- DF Paraphernalia: T-Shirts and Hoodies Are Back
- ‘Community Letter From Tim’
- ★ Another Day Has Come
darkreading
- Chinese APT Targets Indian Banks, Korean Policy Circles
- Serial-to-IP Devices Hide Thousands of Old and New Bugs
defend.network
- Daily Threat Briefing – April 21, 2026
Der Flounder
- Slides from the “Preparing for macOS Next” session at MacAD.UK 2026
EFF
- The Internet Still Works: Reddit Empowers Community Moderation
ElcomSoft blog
- Low-Level Extraction for M-Series iPads
Google AI Blog
- 3 new ways Ads Advisor is making Google Ads safer and faster
Hacker News Frontpage
- A Roblox cheat and one AI tool brought down Vercel's platform
- A type-safe, realtime collaborative Graph Database in a CRDT
- AI Resistance Is Growing
- As Oceans Warm, Great White Sharks Are Overheating
- At Long Last, InfoWars Is Ours
- At Long Last, InfoWars Is Ours
- F-35 is a masterpiece built for the wrong war
- Fusion Power Plant Simulator
- Jujutsu Megamerges for Fun and Profit
- KV Cache Compression 900000x Beyond TurboQuant and Per-Vector Shannon Limit
- OpenAI ad partner now selling ChatGPT ad placements based on "prompt relevance"
- Palantir Wants to Reinstate the Draft
- Show HN: Docker Compose for VM's
- Show HN: GoModel – an open-source AI gateway in Go; 44x lighter than LiteLLM
- Tim Cook Stepping Down
- We Accepted Surveillance as Default
HackerNews
- Anthropic MCP čŽžčŽĄćźć´žĺŻč‡´čżœç¨‹äťŁç ć‰§čĄŒďźŒĺ¨čƒäşşĺˇĽć™şčƒ˝äž›ĺş”é“ž
- KelpDAO é 2.9 äşżçžŽĺ…ƒç›—çŞƒďźŒćˆ–ä¸Ž Lazarus éť‘ĺŽ˘çť„çť‡ćœ‰ĺ…ł
- SGLang ćźć´žĺŻé€ščż‡ćść„ GGUF ć¨Ąĺž‹ć–‡äťśĺŽžçŽ°čżœç¨‹äťŁç ć‰§čĄŒ
- çžŽĺ›˝ç˛žĺˇĽç˝‘çŤ™éçŻĄć”šďźŒéť‘ĺŽ˘ç§°çŞƒĺ–ĺŽ˘ćˆˇć•°ćŽ
- č‹ąĺ›˝ â€œĺˆ†ć•Łčœ˜č››â€ éť‘ĺŽ˘ĺœ¨çžŽĺ›˝čŽ¤ç˝Ş
HackerNoon
- AI Isn’t The Product, Context Is
- How I Turned a Mess of GPUs Into a Usable Inference Platform
- Jungle That Guards Its Gold
- The AI Class Wars: Hooked on the Good Stuff, Now Paying Street Prices for Claude Sonnet Juice
- The Internet’s Next Premium Feature May Be Human Verification
- The Price of Borrowed Life
- What I Learned Vibe Coding Apps as a Non-Coder
ICT Security Magazine
- AI Forensics: quando l’algoritmo diventa corpo del reato
- E-evidence, l’Italia chiude il cerchio: cosa cambia davvero con i d.lgs. 215 e 216 del 2025
- ID.RA-08: la misura ACN che trasforma la gestione delle vulnerabilità in un processo strutturato
- Underwater IoT (IoUT). Sfide geopolitiche, innovazioni tecnologiche e direzioni future dell’ecosistema nazionale
IEEE Spectrum
- The Forgotten History of Hershey’s Electric Railway in Cuba
- The USC Professor Who Pioneered Socially Assistive Robotics
InfoSec Write-ups - Medium
- Curl Is More Than a Downloader. It’s a Weapon.
- How I Found an Exposed Google Maps API Key in a Production Config File
- How I Found and Bypassed a Newsletter Confirmation System (IDOR).
- SSRF Server-Side Request Forgery: Server Ko Apna Agent Banao, Internal Network Explore Karo!
infosecurity-magazine.com
- North Korean Blamed for $290m KelpDAO Crypto Heist
- The Gentlemen Ransomware Expands With Rapid Affiliate Growth
- Unchecked AI Agents Cause Cybersecurity Incidents at Two Thirds of Firms
- Vercel Confirms Cyber Incident After Sophisticated Attacker Exploits Third‑Party Tool
- ZionSiphon Malware Targets Water Infrastructure Systems
krebsonsecurity.com
- ‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty
Linux Foundation Blogs
- Navigating the Agentic AI Guardrails: Why Open Source is the Key to AI in Regulated Industries
MIT Technology Review
- The Download: turning down human noise, and LA’s stunning subway upgrade
NowSecure
- The Vercel Breach Is a Mobile Supply-Chain Problem, Too
Pen Test Partners
- AI can help in DFIR, but it cannot replace investigator judgement
Planet Classpath
- Mark Wielaard: Anticipating Valgrind 3.27.0
pluralistic.net
- Pluralistic: Comrade Trump (20 Apr 2026)
- Pluralistic: Quinn Slobodian and Ben Tarnoff's "Muskism: A Guide for the Perplexed" (21 Apr 2026)
Product Hunt
- Fabi
SANS Internet Storm Center, InfoCON: green
- A .WAV With A Payload, (Tue, Apr 21st)
- ISC Stormcast For Tuesday, April 21st, 2026 https://isc.sans.edu/podcastdetail/9900, (Tue, Apr 21st)
Schneier on Security
- Mexican Surveillance Company
Security Affairs
- Bluesky hit by 24-hour DDoS attack as pro-Iran group claims responsibility
- France’s ANTS ID System website hit by cyberattack, possible data breach
- Scattered Spider member Tyler Buchanan pleads guilty to major crypto theft
- The US NSA is using Anthropic’s Claude Mythos despite supply chain risk
- U.S. CISA adds Cisco Catalyst, Kentico Xperience, PaperCut NG/MF, Synacor ZCS, Quest KACE SMA, and JetBrains TeamCity flaws to its Known Exploited Vulnerabilities catalog
SentinelOne
- Automation at Machine Speed: Rethinking Execution in Modern Cybersecurity
shkspr.mobi
- Better TTS on Linux
Sploitus.com Exploits RSS Feed
- BuildReview2 exploit
- Exploit for Cross-site Scripting in Bdtask Multi_Store_Inventory_Management_System exploit
- Exploit for CVE-2004-2687 exploit
- Exploit for Improper Access Control in Fortinet Forticlientems exploit
- Exploit for Use After Free in Google Chrome exploit
- OSCP-CVE-exploit-suggester exploit
- PatchChain-Multi-Agent-Agentic-Pipeline-for-Autonomous-Code-Vulnerability-Analysis exploit
- vuln-scanner exploit
TechCrunch
- Anthropic takes $5B from Amazon and pledges $100B in cloud spending in return
- Blue Energy raises $380M to build grid-scale nuclear reactors in shipyards
- Cash App is targeting a new kind of customer: 6-12 year olds
- FAA orders investigation into Blue Origin’s New Glenn mishap
- Google Photos adds new touch-up tools for ‘quick’ fixes
- Google rolls out Gemini in Chrome in seven new countries
- GRAI believes AI can make music more social, not replace artists
- It’s not just one thing — it’s another thing
- Mastodon says its flagship server was hit by a DDoS attack
- North Korea hackers blamed for $290M crypto theft
- Revolut eyes valuation of up to $200B in eventual IPO
- Tim Cook stepping down as Apple CEO, John Ternus taking over
- What’s the key to better vegan cheese? Microbreweries, one startup says
- Who is John Ternus, the incoming Apple CEO?
- With US spy laws set to expire, lawmakers are split over protecting Americans from warrantless surveillance
- Yelp’s updated AI assistant can answer questions and book a restaurant or service in one conversation
- YouTube expands its AI likeness detection technology to celebrities
The Decoder
- Amazon pours $33B into Anthropic, which promises to spend $100B right back on AWS
- Anthropic is building its first data center team outside the US
- Corporate America's favorite ChatGPT phrase doubled twice since 2024
- Google builds elite team to close the coding gap with Anthropic
- Jeff Bezos nears $10 billion funding round for AI lab "Project Prometheus"
- Open-weight Kimi K2.6 takes on GPT-5.4 and Claude Opus 4.6 with agent swarms
- OpenAI's Codex now watches your screen to remember what you're working on
- The flood of AI music is reshaping how streaming platforms handle new uploads
The Verge
- Apple CEO Tim Cook is stepping down
- Apple Sports now lets you follow scores in a CarPlay widget
- Deezer says AI song uploads have nearly overtaken human music
- Dyson’s back with a travel-size Supersonic hairdryer
- Fortnite developers can make AI characters now — just don’t try to date them
- Google Photos adds subtle touch-up tools for faces
- Here’s how Amazon’s price fixing allegedly drove up prices everywhere
- Ikea and Samsung promise glitch-free SmartThings integration
- Japanese man sentenced to prison for posting spoilers
- John Ternus is taking over from Tim Cook as Apple’s CEO
- Mercedes’ first all-electric C-Class is its sportiest one yet
- Microsoft Teams is trying to fix accidental hand-raising
- Read Tim Cook’s letter to the Apple world as he departs as CEO
- Silicon Valley has forgotten what normal people want
- The Lenovo Legion Go S is RAMageddon’s latest victim
- The SpaceX IPO is a trillion-dollar gamble on the future of space
- Tim Cook will still be Apple’s Trump whisperer
- WhatsApp tests ‘Plus’ subscription that adds stickers and more for a few bucks a month
VulDB Recent Entries
- CVE-2025-1241 | Fortra GoAnywhere MFT up to 7.9.x inadequate encryption
- CVE-2025-13826 | Zervit Portable Web Server Configuration Reset Request denial of service
- CVE-2025-14362 | Fortra GoAnywhere MFT up to 7.9.x SFTP Service excessive authentication
- CVE-2025-31958 | HCL BigFix Service Management 23 request smuggling (KB0124209)
- CVE-2026-0930 | wolfSSL wolfSSH up to 1.4.x on Windows buffer over-read
- CVE-2026-0971 | Fortra GoAnywhere MFT up to 7.9.x SAML Login Page session expiration
- CVE-2026-0972 | Fortra GoAnywhere MFT up to 7.9.x SFTP Service excessive authentication
- CVE-2026-1089 | Fortra GoAnywhere MFT up to 7.9.x HTTP Header injection
- CVE-2026-22051 | NetApp StorageGRID prior 11.9.0.13/12.0.0.6 information disclosure (ntap-20260420-0001)
- CVE-2026-23752 | GFI HelpDesk up to 4.99.8 Groups Page companyname cross site scripting
- CVE-2026-23753 | GFI HelpDesk up to 4.99.8 Languages Page SWIFT_Language::Create charset cross site scripting
- CVE-2026-23757 | GFI HelpDesk up to 4.99.9 Reports SWIFT_Report::Create report title cross site scripting
- CVE-2026-29642 | OpenXiangShan aecf601e803bfd2371667a3fb60bfcd83c333027 information disclosure (Issue 3934)
- CVE-2026-29643 | OpenXiangShan edb1dfaf7d290ae99724594507dc46c2c2125384 CSR Subsystem denial of service (Issue 3959)
- CVE-2026-29644 | OpenXiangShan edb1dfaf7d290ae99724594507dc46c2c2125384 denial of service
- CVE-2026-29646 | OpenXiangShan NEMU Hypervisor Extension access control (ID 951 / 55295c4)
- CVE-2026-29647 | OpenXiangShan NEMU stopei/vstopei permission (Issue 691)
- CVE-2026-29648 | OpenXiangShan NEMU henvcfg/senvcfg information disclosure (Issue 690)
- CVE-2026-29649 | OpenXiangShan NEMU RISC-V Hypervisor CSR denial of service (Issue 681)
- CVE-2026-31018 | Dolibarr ERP CRM up to 22.0.4 Website code injection
- CVE-2026-32147 | Erlang OTP System Configuration ssh_sftpd.erl path traversal (GHSA-28jg-mw9x-hpm5)
- CVE-2026-32311 | reconurge flowsint org_to_asn os command injection (GHSA-9g44-8xv2-f2m9)
- CVE-2026-32604 | Spinnaker up to 2025.3.1/2025.4. Clouddriver Pod input validation (GHSA-x3j7-7pgj-h87r)
- CVE-2026-32613 | Spinnaker up to 2025.3.1/2025.4.1 Spring Expression Language code injection (GHSA-69rw-45wj-g4v6)
- CVE-2026-33031 | 0xJacky Nginx-UI up to 2.3.3 API Token access control (GHSA-x234-x5vq-cc2v)
- CVE-2026-3317 | Navigate CMS up to 2.9.5 /blog cross site scripting
- CVE-2026-33431 | Roxy-WI up to 8.2.6.3 API Endpoint /config//show configver path traversal (GHSA-w3c9-36jf-qrw4)
- CVE-2026-33432 | Roxy-WI up to 8.2.8.2 LDAP Authentication Username improper authentication (GHSA-hv3x-4w38-r92m)
- CVE-2026-33626 | InternLM lmdeploy up to 0.12.2 lmdeploy/vl/utils.py load_image server-side request forgery (GHSA-6w67-hwm5-92mq)
- CVE-2026-34082 | langgenius dify up to 1.13.0 Chat History conversations authorization (GHSA-fxq3-hh7x-c63p)
- CVE-2026-34403 | 0xJacky nginx-ui up to 2.3.4 gorilla/websocket missing origin validation in websockets (GHSA-78mf-482w-62qj)
- CVE-2026-35570 | Gitlawb openclaude up to 0.5.0 Command Line Interface Parser bashPermissions.ts path traversal (GHSA-m6rx-7pvw-2f73)
- CVE-2026-35587 | nicolargo glances up to 4.5.3 Configuration Parameter public_api server-side request forgery (GHSA-g5pq-48mj-jvw8)
- CVE-2026-35588 | nicolargo glances up to 4.5.3 Cassandra Export init.py sql injection (GHSA-grp3-h8m8-45p7)
- CVE-2026-39320 | SignalK signalk-server up to 2.24.x Regular Expression context resource consumption (GHSA-7gcj-phff-2884)
- CVE-2026-39377 | jupyter nbconvert up to 7.17.0 Jinja Template path traversal (GHSA-4c99-qj7h-p3vg)
- CVE-2026-39396 | OpenBao up to 2.5.2 OCI Plugin ExtractPluginFromImage resource consumption (GHSA-r65v-xgwc-g56j)
- CVE-2026-39467 | MetaSlider Responsive Slider Plugin up to 3.106.0 on WordPress deserialization
- CVE-2026-39861 | Anthropic claude-code up to 2.1.63 Symlink path traversal (GHSA-vp62-r36r-9xqp)
- CVE-2026-39886 | AcademySoftwareFoundation OpenEXR up to 3.4.9 EXR File internal_ht.cpp ht_undo_impl integer overflow (GHSA-r3mr-mx8q-jcw5)
- CVE-2026-39973 | iBotPeaches Apktool up to 3.0.1 APK File ResFileDecoder.java BrutIO.sanitizePath path traversal (GHSA-m8mh-x359-vm8m)
- CVE-2026-40045 | OpenClaw up to 2026.4.1 ws Gateway Endpoint cleartext transmission (GHSA-83f3-hh45-vfw9)
- CVE-2026-40244 | AcademySoftwareFoundation OpenEXR up to 3.2.7/3.3.9/3.4.9 EXR File internal_dwa_compressor.h integer overflow (GHSA-j526-66f6-fxhx)
- CVE-2026-40250 | AcademySoftwareFoundation OpenEXR up to 3.2.7/3.3.9/3.4.9 EXR File internal_dwa_compressor.h integer overflow (GHSA-m5qw-23x2-6phj)
- CVE-2026-40496 | freescout-help-desk freescout up to 1.8.212 Attachments random values (GHSA-2783-wxmm-wmwr)
- CVE-2026-40497 | freescout-help-desk freescout up to 1.8.212 Mailbox Signature Field /mailbox/settings/ stripDangerousTags cross site scripting (GHSA-fh99-wr77-pxq3)
- CVE-2026-40520 | FreePBX api up to 17.0.8 GraphQL initiateGqlAPIProcess os command injection
- CVE-2026-41036 | Quantum Router QN-I-470 6.1.1.B1 Management CLI Interface os command injection (CIVN-2026-0200)
- CVE-2026-41037 | Quantum Router QN-I-470 6.1.1.B1 Web-based Management Interface excessive authentication (CIVN-2026-0200)
- CVE-2026-41038 | Quantum Router QN-I-470 6.1.1.B1 Web-based Management Interface weak password (CIVN-2026-0200)
- CVE-2026-41039 | Quantum Router QN-I-470 6.1.1.B1 API Endpoint missing authentication (CIVN-2026-0200)
- CVE-2026-41285 | OpenBSD up to 7.8 ICMPv6 Neighbor Discovery Option nd_opt_len improper validation of specified quantity in input
- CVE-2026-41294 | OpenClaw up to 2026.3.27 Environment Variable external control of setting (GHSA-8rh7-6779-cjqq)
- CVE-2026-41295 | OpenClaw up to 2026.4.1 Workspace Channel inclusion of functionality from untrusted control sphere (GHSA-2qrv-rc5x-2g2h)
- CVE-2026-41296 | OpenClaw up to 2026.3.30 Remote Filesystem Bridge toctou (GHSA-9p3r-hh9g-5cmg)
- CVE-2026-41297 | OpenClaw up to 2026.3.30 Marketplace Plugin server-side request forgery (GHSA-vjx8-8p7h-82gr)
- CVE-2026-41298 | OpenClaw up to 2026.4.1 Read-Scoped Call kill authorization (GHSA-5hff-46vh-rxmw)
- CVE-2026-41299 | OpenClaw up to 2026.3.27 Websocket Handshake reliance on untrusted inputs in a security decision (GHSA-6xg4-82hv-cp6f)
- CVE-2026-41300 | OpenClaw up to 2026.3.30 state distinction (GHSA-9f4w-67g7-mqwv)
- CVE-2026-41301 | OpenClaw up to 2026.3.30 Nostr DM signature verification (GHSA-h43v-27wg-5mf9)
- CVE-2026-41302 | OpenClaw up to 2026.3.30 Marketplace Plugin fetch server-side request forgery (GHSA-9q7v-8mr7-g23p)
- CVE-2026-41303 | OpenClaw up to 2026.3.27 authorization (GHSA-98hh-7ghg-x6rq)
- CVE-2026-41329 | OpenClaw up to 2026.3.30 senderIsOwner incorrect privileged apis (GHSA-g5cg-8x5w-7jpm)
- CVE-2026-41330 | OpenClaw up to 2026.3.30 Environment Variable variable initialization (GHSA-9gp8-hjxr-6f34)
- CVE-2026-41331 | OpenClaw up to 2026.3.30 Telegram Audio Preflight Transcription amplification (GHSA-m6fx-m8hc-572m)
- CVE-2026-41389 | OpenClaw up to 2026.4.14 UNC File file inclusion
- CVE-2026-4852 | webzunft Image Source Control Lite Plugin up to 3.9.1 on WordPress Attachment Field cross site scripting
- CVE-2026-5265 | OVN Open Virtual Network ICMP Error Response Generation out-of-bounds
- CVE-2026-5358 | GNU C Library up to 2.43 UDP nis_local_principal buffer overflow
- CVE-2026-5367 | OVN Open Virtual Network DHCPv6 Client ID out-of-bounds
- CVE-2026-5450 | GNU C Library up to 2.43 malloc Character Match heap-based overflow
- CVE-2026-5721 | wpDataTables Plugin up to 6.5.0.4 on WordPress prepareCellOutput LinkWDTColumn/ImageWDTColumn/EmailWDTColumn cross site scripting
- CVE-2026-5928 | GNU C Library up to 2.43 Unicode Character libio/wgenops.c _IO_wdefault_pbackfail buffer under-read
- CVE-2026-5965 | NewSoft NewSoftOA prior 10.1.8.3 os command injection
- CVE-2026-6249 | givanz Vvveb 1.0.8 Media Upload unrestricted upload
- CVE-2026-6553 | TYPO3 CMS up to 14.2.x User Settings user_settings cleartext storage
- CVE-2026-6674 | tholstkabelbwde CMS für Motorrad Werkstätten Plugin up to 1.0.0 on WordPress arttype sql injection
- CVE-2026-6675 | cyberchimps Responsive Blocks Plugin up to 2.2.0 on WordPress Public REST API Route input validation
- CVE-2026-6729 | HKUDS OpenHarness up to 158 Conversation improper authentication
- CVE-2026-6746 | Mozilla Firefox up to 149 HTML use after free
- CVE-2026-6747 | Mozilla Firefox up to 149 WebRTC use after free
- CVE-2026-6748 | Mozilla Firefox up to 149 Web Codecs uninitialized pointer
- CVE-2026-6749 | Mozilla Firefox up to 149 Canvas2D uninitialized pointer
- CVE-2026-6750 | Mozilla Firefox up to 149 WebRender Remote Code Execution
- CVE-2026-6751 | Mozilla Firefox up to 149 Web Codecs uninitialized pointer
- CVE-2026-6752 | Mozilla Firefox up to 149 WebRTC memory corruption
- CVE-2026-6753 | Mozilla Firefox up to 149 WebRTC memory corruption
- CVE-2026-6754 | Mozilla Firefox up to 149 JavaScript Engine use after free
- CVE-2026-6755 | Mozilla Firefox up to 149 postMessage Remote Code Execution
- CVE-2026-6756 | Mozilla Firefox up to 149 on Android
- CVE-2026-6757 | Mozilla Firefox up to 149 WebAssembly Remote Code Execution
- CVE-2026-6758 | Mozilla Firefox up to 149 WebAssembly use after free
- CVE-2026-6759 | Mozilla Firefox up to 149 Cocoa use after free
- CVE-2026-6760 | Mozilla Firefox up to 149 Cookies Remote Code Execution
- CVE-2026-6761 | Mozilla Firefox up to 149 Networking Remote Code Execution
- CVE-2026-6762 | Mozilla Firefox up to 149 HTML
- CVE-2026-6763 | Mozilla Firefox up to 149 File Remote Code Execution
- CVE-2026-6764 | Mozilla Firefox up to 149 Device Interfaces memory corruption
- CVE-2026-6765 | Mozilla Firefox up to 149 Form Autofill information disclosure
- CVE-2026-6766 | Mozilla Firefox up to 149 NSS memory corruption
- CVE-2026-6767 | Mozilla Firefox up to 149 NSS Remote Code Execution
- CVE-2026-6768 | Mozilla Firefox up to 149 Cookies
- CVE-2026-6771 | Mozilla Firefox up to 149 Security
- CVE-2026-6774 | Mozilla Firefox up to 149 Security
- CVE-2026-6782 | Mozilla Firefox up to 149 IP Protection information disclosure
- CVE-2026-6784 | Mozilla Firefox up to 149 memory corruption
- CVE-2026-6785 | Mozilla Firefox up to 149 memory corruption
- CVE-2026-6786 | Mozilla Firefox up to 149 memory corruption
- CVE-2026-6796 | Sanluan PublicCMS up to 6.202506.d Failed Login LoginAdminController.java log_login errorPassword cleartext storage in file
- CVE-2026-6797 | Sanluan PublicCMS up to 6.202506.d DocToHtmlUtils.java ZipSecureFile.setMinflateRatio resource consumption
- CVE-2026-6799 | Comfast CF-N1-S 2.6.0.1 Endpoint mbox-config?method=SET&section=ping_config destination command injection
Wallarm
- Why API Discovery Is the First Step to Securing AI
wheresyoured.at
- Exclusive: Microsoft To Shift GitHub Copilot Users To Token-Based Billing, Tighten Rate Limits
Wired
- A Brief Interview With the Owner of the Hot-Air Balloon That Landed in Someone’s Backyard
- A Humanoid Robot Set a Half-Marathon Record in China
- Ben McKenzie Says Crypto Has a Secret Ingredient: Male Loneliness
- Best Gaming Laptops (2026): Razer, Asus, Dell, and More
- Best Kitchen Composters and Food Recyclers (2026)
- H2O Audio Tri Run Workout Headphones Review: A Little Underwhelming
- How to Watch the 2026 Lyrids Meteor Shower at Its Peak
- The 10 Best Electrolyte Powders (We Tested Nearly 20)
- The Internet’s Favorite Lawyer Says We’re Living Through ‘Multiple Watergates per Week’
- War Memes Are Turning Conflict Into Content
Zgao's blog
- Git/SVN 应急响应排查实战手册
不安全
- Curl Is More Than a Downloader. It’s a Weapon.
- Deezer 称 44% 的新上传音乐是 AI 生成的
- how to remove knox on work phone
- PlayStation年龄限制措施即将登陆英国主机
- Slides from the “Preparing for macOS Next” session at MacAD.UK 2026
- SSRF Server-Side Request Forgery: Server Ko Apna Agent Banao, Internal Network Explore Karo!
- VBA Beautifier Package
- Why forensic readiness is emerging as a real enterprise security market
- Why you see targeted ads online after an IRL conversation
- ‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty
- 微软与SpeedTest加深合作在Windows 11里集成网速测试但配图是macOS
- 纵横网络靶场社区正式发布以虚实融合技术构建工业信息安全实战生态
代码审计星球
- 原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
嘶吼
- 纵横网络靶场社区正式发布以虚实融合技术构建工业信息安全实战生态
奇客Solidot–传递最新科技情报
- Deezer 称 44% 的新上传音乐是 AI 生成的
- 洋葱新闻再次达成协议接管阴谋论网站 Infowars
- 英国计划学校期间禁止使用手机
- 荣耀人形机器人如何成为半马冠军
安全客
- 科技云报到：AI云，逻辑变了吗？
爱范儿
- OPPO Pad mini 体验：小小的很全能，塞进口袋的大手机
- OPPO 发布 Find X9 Ultra：演唱会手机的最优解
- 具身智能公司自变量发布了机器人模型 WALL-B，35 天后进入真实家庭
- 在苹果新 CEO 上任前，我们和他聊了聊 AI 与 iPhone
- 大疆 Pocket 4 刷屏，而 GoPro 正在死去
- 我和 AI 搭子工作了一周，再也回不去了
- 把 DeepSeek、Kimi、智谱和 MiniMax 拉进群聊
- 早报｜苹果官宣新CEO，设立首席硬件官职位/华为发布大阔折叠，余承东：扛不住了也可能涨价/多平台回应12306拒绝出票
- 租电 17.98 万元起，补齐智驾短板的乐道 L90，变得更能打了
- 等等，这些图是GPT-Image-2出的？！
绿盟科技技术博客
- OpenClaw安全实战系列三：利用网关劫持实现 OpenClaw控制端1-Click RCE (CVE-2026-25253)
- 绿盟科技《DDoS攻击威胁报告》（2026版）正式发布
量子位 QbitAI
- ISC.AI 2026创新独角兽沙盒大赛在京启动聚焦智能体共筑AI创新生态
- K型分化，如何破局？| 第20届中国投资年会·年度峰会即将启幕
- 前小鹏汽车自动驾驶一号位李力耘出任众擎CTO，加速打造具身大脑
- 天立启鸣AI研究院院长刘志毅，入选2025福布斯中国科创人物
- 这次，库克真的要卸任苹果CEO了！
黑海洋
- PlayStation年龄限制措施即将登陆英国主机
- 中国官媒炒作美国网络设备威胁论调
- 苹果CEO库克将卸任转任执行董事长