安全资讯归档（2026-04-23）

2Libra
- 2 友们，你们觉得保险有必要购买吗，有的话，有推荐吗
- AI 有病吧？您的评论被 AI 判定为低质量回复，已扣除 70 金币作为惩罚。原因：回复内容仅为'学习了！'，属于无实质内容的灌水，缺乏技术讨论价值。
- cpa(cli proxy api) 导入的 codex 认证文件在哪存储呢
- Java Agent 项目选择
- netcup 过年了，机子都可以买了
- V 站账号登录不上去了，这里有 V 站的大佬吗？
- v2rayA 问题
- 【💰】分享一个刷新认知的小事, 特高压直流输电
- 世界读书日看点啥啊？
- 偶尔会感觉年纪大了，很难给别人提供情绪价值，当然也不会主动去索取。
- 兄弟们我该如何呢
- 在同一个位置吃饭，突然想到：7 年前发生的事跟昨天一样，时间快到感觉再睁眼就是棺材板了
- 好喜欢吃糯米鸡啊
- 小版本迭代，优化用户体验【编辑器、动态、发帖的 AI 检定等】
- 工作中的你是戴着面具的吗
- 有时候想想，下辈子当一个蚁后也不错。
- 有没有八字交流群交流一下
- 朋友们，你们还在发朋友圈么？
- 汇报一个 bug（疑似）
- 现在有什么推荐的语音输入法吗？
- 目前 iPhone 的无线充体验还是不够完美
- 竞拍这个功能可以啊? @Jimmy 要不要致敬一下?
- 说个开心的事，小白第一次用 WorkBuddy 完成了一个浏览器插件
- 说个趣事，关于家母
- 都有哪些文本加密传输方案？
36氪
- 2连板杭电股份：股东富春江通信集团及4位董高4月22日-4月23日合计减持615.6万股
- 36氪官方AI专属社群，正式开放招募！
- 36氪首发 | 清华、哈工大团队做灵巧手，成本降到三分之一，三个月融资近亿元
- 36氪首发 | 电磁零部件厂商完成数千万元融资，核心团队来自德企，产品已规模化上车
- 37家公募月内发布限购令保护持有人利益
- 3连板苏州高新：联讯仪器股票价格波动对公司净利润影响较小
- 8点1氪丨张雪机车发布召回通告；哪吒汽车创始人已被列为“老赖”；英国新法案规定08后终身不得购烟
- Anthropic二级市场估值升至万亿美元，超越OpenAI
- A股三大指数午间休盘集体下跌，通信设备板块走弱
- A股三大指数集体收跌，全市场超4000股下跌
- A股三大指数集体高开，半导体板块领涨
- Costco开市客：从未授权或委托任何第三方以类似名义开展商业活动或发布信息
- Lululemon任命耐克前高管奥尼尔为新CEO
- Pallada游心新车型首次亮相
- SK海力士：计划下半年向客户提供HBM4E样品，2027年实现量产
- SK海力士：预计DRAM和NAND闪存市场均将维持有利的价格环境
- SpaceX受邀加入开发“金穹顶”软件的行业团队
- SpaceX警告称将面临“巨额资本支出”，其中包括用于图形处理器制造的支出
- SWIFT：3月人民币位居全球第五大支付货币，占比3.10%
- T3出行向港交所提交上市申请
- ThinkPad发布AI主机，可一键部署“龙虾”、较云主机三年总成本可节省48%
- WPS 365发布私有化AI解决方案“轻舟AI”
- “普渡机器人”完成近10亿元融资，估值突破100亿元
- 一个对话框、一只青蛙、一周4万用户，Ribbi做对了什么？
- 三大指数全部翻绿
- 三星电子工会举行集会，要求公司发放占营业利润15%的绩效奖金并废除奖金上限
- 两市融资余额增加136.61亿元
- 两部门：到2030年，基本建立覆盖服务贸易多领域、全链条并适应服务贸易高质量发展需要的标准体系
- 两部门：培育重点领域中国标准品牌，加大标准宣贯实施和国际对接合作
- 中信建投：半导体设备零部件空间广阔，海外限制下国产替代加速推进
- 中信建投：固态电池中试线招标在即，看好锂电设备春季行情
- 中信建投：碳酸锂涨价预期叠加钠电降本，27年钠电进入平价放量时代
- 中信建投：银行理财规模短期回落不改增长势头，混合类和资产偏好边际回升
- 中信证券：中国创新药产业有望迎来管线潜力的验证与价值提升
- 中信证券：光模块设备伴随下游资本开支与高效化、国产化趋势迎来高景气
- 中信证券：漫剧行业景气度仍在持续
- 中办、国办：制定“十五五”碳达峰行动方案，实现煤炭消费总量和石油消费总量达峰
- 中办、国办：国家发展改革委、国家统计局、国家能源局应当建立重要数据动态监测预警制度
- 中国电信：第一季度净利润73.5亿元，同比下降17.08%
- 中国航空工业集团等在成都成立科技公司
- 中国铝业：第一季度净利润55.27亿元，同比增长56.35%
- 中微半导：一季度净利润5124.84万元，同比增长48.89%
- 中船汉光回应业绩下滑：原材料涨价对成本有一定影响，向下游传导涨价有难度
- 中金：A股市场近期建议关注三条主线
- 中金：公募一季度加仓通信、化工及电力设备，减仓有色和电子
- 九丰能源：拟投18.42亿元建设同位素产品项目，丰富特种气体产品结构服务光纤、半导体等领域
- 乾崑智驾ADS 5发布，为自动驾驶做好准备
- 产业化落地加速，人形机器人产业链迎历史性机遇
- 人工智能热潮下，SK海力士公布创纪录季度业绩
- 人民币兑美元中间价报6.8650
- 倍耐力轮胎公司增资至约28.9亿元
- 光线传媒：公司第一款3A游戏开发进展比较顺利
- 公募行业规模走势分化加剧，“固收+”成排位关键变量
- 冠豪高新：第一季度净利润1.8亿元，同比增长27725.76%
- 创·问｜炜璨医疗李强：从理解规则，到建立规则——重塑植入式给药路径
- 创业板指跌逾1%，下跌个股近3700只
- 利欧股份：预计2025年净利润3000万元-4500万元
- 刹车功能或丧失，大众在美召回18853辆汽车
- 千寻位置正式发布“具身时空大脑”产品集
- 千问总裁吴嘉：“AI办事”对外开放，首家接入东方航空
- 半日主力资金加仓食品饮料股，抛售电子股
- 华泰证券：2026北京车展将启幕，建议关注自主品牌高端车型
- 华谊兄弟：法院决定启动预重整并指定临时管理人
- 厦门钨业：第一季度净利润11.07亿元，同比增长189.14%
- 去哪儿：五一前后，“多城串游”预订量增118%
- 双杰电气：一季度净利润2.81亿元，同比增长29615%
- 受燃油价格冲击，德国汉莎拟削减2万架次航班
- 台积电高管称亚利桑那州芯片工厂将于2029年投产
- 台积电高管：暂不采用阿斯麦最新光刻机
- 向综合化转型打造增长新引擎，上市银行非息收入占比稳步提高
- 固态激光雷达“像素竞赛”加速，速腾聚创VGA大面阵SPAD-SoC产品发布｜最前线
- 固态电池产业化提速，机构青睐高成长潜力股
- 国家人工智能产业投资基金等入股上海黑湖科技
- 国家人工智能产业投资基金等入股上海黑湖科技
- 国家知识产权局：2025年我国共授权发明专利97.2万件
- 国家能源局：截至3月底全国累计发电装机容量39.6亿千瓦，同比增长15.5%
- 国泰航空：3月载客量同比增加24%
- 国电南自：第一季度净利润4205.41万元，同比增长41.10%
- 图书业在小红书电商营收规模年增超30%
- 基金挖掘小众品种，隐形龙头迎来价值发现
- 夏普科技深圳公司注册资本增至约7.1亿元
- 多氟多：第一季度净利润3.76亿元，同比增长480.14%
- 多重利好催化，AI硬件开启消费电子新成长周期
- 大金重工：与欧洲船东签署船舶建造合同，总金额约40.58亿元
- 大麦娱乐联合阿里通义发布全球首个潮玩创作者AI设计平台“妙呀”
- 天华新能：2026年一季度净利润9.69亿元，同比增长1471.98%
- 天猫母婴启动“创新100”计划：扶持细分赛道和“解决痛点”的品质好货
- 央行公开市场今日资金投放量持平到期量
- 好未来：2026财年净收入30.09亿美元
- 字节跳动发布3D生成大模型Seed3D 2.0
- 宁德时代在古田成立新能源科技公司，注册资本20亿元
- 宏昌电子：高速覆铜板产品已通过相关客户认证，取得小量订单生产
- 小米MiMo-V2.5系列模型开启公测
- 工信部：一季度电信业务收入累计完成4394亿元，同比下降1.8%
- 工信部：一季度移动互联网累计流量达1044亿GB，同比增长19.1%
- 市场监管总局：从严打击群众反映强烈的互联网广告违法行为
- 市场监管总局：督促电商平台切实履行责任，堵住“幽灵网店”监管漏洞
- 平安好医生：第一季度净利润0.79亿元，同比增长138.4%
- 并购重组步入业绩兑现阶段，助力上市公司质量稳步提升
- 开年连融两轮的“可以玩的抖音”，又融了5000万美金｜涌现新项目
- 微软宣布在澳大利亚投资180亿美元，扩大人工智能布局
- 微软承诺投资180亿美元以建设澳大利亚人工智能能力
- 恒指午间休盘跌1.12%，恒生科技指数跌2.31%
- 恒指开盘跌0.25%，恒生科技指数跌0.04%
- 恒指收跌0.95%，恒生科技指数跌1.98%
- 恒生科技指数日内跌幅扩大至1%
- 恒生科技指数跌超2%
- 恒辉安防：“公司腱绳海外送样被否决”的信息不实
- 抖音整治AI不当内容，重点处置利用AI技术换脸、盗声
- 新易盛：第一季度净利润27.8亿元，同比增长76.80%
- 新模型上线期间出现功能异常，月之暗面公布补偿方案：全员额度重置
- 日本政府反对韩国MBK Partners收购牧野铣床
- 日经225指数首次突破6万点关口，续创新高
- 昆仑万维：2025年净亏损15.93亿元
- 星宸科技：一季度净利润2.20亿元，同比增长330.29%
- 景嘉微：2025年净亏损1.65亿元
- 晶合集成：拟使用不超过80亿元闲置自有资金进行现金管理
- 本田汽车业务将于2026年底退出韩国市场
- 机构：2025年全球电信连接收入增长4%，5G连接数突破30亿
- 杭州芯云半导体集团注册资本增至13.5亿元
- 欣旺达：第一季度净利润1.14亿元，同比下降70.49%
- 欧莱雅集团启动可持续创新加速器“L’AcceleratOR”项目第二轮申报征集
- 歌尔股份：第一季度净利润5.03亿元，同比增长7.28%
- 正泰电器获评AAA主体信用评级
- 氪星晚报｜ThinkPad发布AI主机，可一键部署“龙虾”、较云主机三年总成本可节省48%；量化投资先驱马丁·卢克警告勿将交易决策全盘交予人工智能；国家知识产权局：2025年我国共授权发明专利97.2万件
- 汇顶科技：第一季度净利润1.17亿元，同比下降40.01%
- 沃尔核材：第一季度净利润2.31亿元，同比下降7.63%
- 沪深两市成交额突破1.5万亿元
- 沪深两市成交额突破1万亿元
- 沪深两市成交额突破2万亿
- 沪深两市成交额连续第3个交易日突破2.5万亿
- 法国卫星企业Univity完成A轮融资，计划成为“欧洲最大”
- 海天瑞声：一季度净利润840.30万元，同比增长2161%
- 漫步者：一季度净利润1.02亿元，同比增长0.05%
- 热门中概股美股盘前普跌，小鹏集团跌超3%
- 特斯拉上调今年投资预期至超250亿美元
- 特斯拉：Cortex 2算力集群现已上线，并已开始运行训练任务
- 特斯拉：一季度营收223.9亿美元，同比增长16%
- 特斯拉：以至多20亿美元价格收购一家人工智能硬件公司
- 特斯拉：正努力早日在中国市场推出智能辅助驾驶
- 特斯拉：电池产能仍然是限制公司电动车产量提升的关键因素
- 特斯拉：第三代人形机器人预计年中亮相，7-8月启动正式投产
- 生益电子：2025年净利润14.73亿元，同比增长343.76%
- 电科网安：公司安全智能体尚处在探索阶段，未实际投入应用
- 破局“智驾双雄”，千里科技如何以AI之力重塑行业格局
- 科创板市值超千亿公司已达15家，“科特估”重塑硬科技价值
- 维峰电子：拟1元受让关联方所持维泰精密36.25%股权后者重点布局高速板端连接器
- 美国百年太妃糖易手，Roca乐家被全资收购
- 美国航空CEO称与美联航合并“对消费者不利”
- 美股三大指数集体收涨，Arm涨超12%
- 美股大型科技股盘前多数下跌，特斯拉跌超3%
- 老凤祥：第一季度净利润5.47亿元，同比下降10.76%
- 腾讯云发布Xinference供应链投毒风险通告
- 腾讯汤道生：腾讯智慧出行目前业务已覆盖100%的头部车企及泛出行公司
- 腾讯混元Hy3 preview发布并开源
- 苏黎世保险获股东批准，109亿美元收购Beazley
- 莫高股份：自4月27日开市起复牌并实施退市风险警示，股票简称变更为“*ST莫高”
- 蓝科高新：第一季度净利润1230.02万元，同比增长89.69%
- 行业景气度高位运行，光模块企业扩产忙
- 诺基亚CEO称：欧洲在人工智能数据中心建设方面恐落后于中美
- 诺基亚第一季度调整后运营利润为2.81亿欧元，高于市场预期
- 财信发展：同时触及实施退市风险警示和其他风险警示的情形，4月27日起简称变更为“*ST发展”
- 超纯股份创业板IPO定于4月30日上会
- 软银寻求以OpenAI股份为担保，获取100亿美元保证金贷款
- 途牛：自驾游成为途牛用户五一假期境内游的主流方式之一
- 量化投资先驱马丁·卢克警告勿将交易决策全盘交予人工智能
- 金山办公发布全新WPS多维表格
- 金山办公：第一季度净利润21.95亿元，同比增长444.97%
- 银河证券：预计美股的进一步上行动力仍受财报季业绩兑现影响
- 闪送开源CLI，为同城即时速递行业首家
- 阿里云：企业级Agent构建平台JVS Crew上线
- 雀巢在战略重组之际公布销售额下滑
- 雀巢确认将蓝瓶咖啡出售给大钲资本
- 雀巢集团一季度销售额213亿瑞士法郎，同比下降5.7%
- 雷诺集团一季度营收125.3亿欧元，同比增长7.3%
- 非货管理规模排名生变，公募机构各有高招
- 韩国第一季度GDP同比增长3.6%
- 香农芯创：第一季度净利润13.27亿元，同比增长7835.06%
- 香港证监会：因中国恒大虚假财务报表问题，普华永道向股东赔偿10亿港元
- 马斯克确认特斯拉HW3芯片无法支持无监督FSD
- 鸿蒙座舱HarmonySpace 6发布
- 鸿蒙智行发布问界M6等多款产品
- 黑湖科技完成近10亿元D轮融资
- 黑石盈利超预期，预计IPO将迎来“史上最佳年份”
404 Media
- Researchers Simulated a Delusional User to Test Chatbot Safety
Ars Technica
- Crypto scam lures ships into Strait of Hormuz, falsely promising safe passage
- Google unveils two new TPUs designed for the "agentic era"
- Lawsuit: Nintendo is getting tariff refunds—its customers should get them instead
- Microsoft issues emergency update for macOS and Linux ASP.NET threat
- Our newsroom AI policy
- RFK Jr. won't back CDC director on vaccines as agency scraps positive data
- Tabloid reports linking 10 missing and dead scientists spur FBI probe
- Tesla reports Q1 2026 earnings: Still profitable
- You want your Moon landings in HDTV? So does NASA—here's how it's happening.
Ben's Bites
- ChatGPT's Nano Banana
Cerbero Blog
- CRAMFS Format Package
CERT Recently Published Vulnerability Notes
- VU#748485: Unauthenticated configuration modification vulnerability in Central Office Services - Content Hosting Component
Checkmarx.com
- Checkmarx Security Update: April 22
CXSecurity: World Laboratory of Bugtraq 2
- OpenClaw < 2026.3.28 Discord Text Approval Authorization Bypass
- Throttlestop Kernel Driver Kernel Out-of-Bounds Write Privilege Escalation
- Trojan-Spy.Win32.Small / Remote Command Execution
daringfireball.net
- Ben Thompson on Tim Cook’s Legacy
- DF T-Shirts and Hoodies: Get Them While the Getting Is Good
- There Are Corrections, and There Are Corrections
darkreading
- 'Zealot' Shows What AI's Capable of in Staged Cloud Attack
- Bad Memories Still Haunt AI Agents
defend.network
- Daily Threat Briefing – April 23, 2026
EFF
- 📁 How ICE Got My Data | EFFector 38.8
ElcomSoft blog
- Recovering Windows Credentials with Elcomsoft System Recovery
eli.thegreenplace.net
- Debugging WASM in Chrome DevTools
Fidelis Security
- Securing Hybrid Cloud Environments with Zero Trust Principles
gilesthomas.com
- Writing an LLM from scratch, part 33 -- what I learned from finally getting round to the appendices
Google AI Blog
- Elevating Austria: Google invests in its first data center in the Alps.
Hacker News Frontpage
- Alberta Startup Sells No-Tech Tractors for Half Price
- Anker made its own chip to bring AI to all its products
- Coding Models Are Doing Too Much
- FIU Student Arrested After Joking About Netanyahu on WhatsApp
- New study compares growing corn for energy to solar production. It's no contest
- Parallel Agents in Zed
- Show HN: Broccoli, one shot coding agent on the cloud
- Surveillance Pricing: Exploiting Information Asymmetries
- The Illuminated Man: an unconventional portrait of JG Ballard
- The Neon King of New Orleans
- The Tech Oligarch's Republic
- Trump administration reclassifies cannabis as less dangerous
- Youth Suicides Declined After Creation of National Hotline
HackerNews
- Claude Mythos ĺ‘çŽ° 271 ä¸ŞçŤç‹ćľč§ˆĺ™¨ćźć´ž
- â€œć”śĺ‰˛č€…â€ ĺˆŠç”¨ĺžŽč˝Żĺ›žĺ˝˘ API ĺœ¨ĺ—äşšéƒ¨ç˝˛ Linux ç‰ˆ GoGra ĺŽé—¨ç¨‹ĺş
- çť§ Bluesky ĺŽďźŒMastodon é DDoS ć”ťĺ‡ť
- ć–°ĺž‹ npm äž›ĺş”é“žć”ťĺ‡ťč‡Şćˆ‘äź ć’äťĽçŞƒĺ–čŽ¤čŻäť¤ç‰Œ
- čś… 1300 ĺ°ĺžŽč˝Ż SharePoint ćœĺŠĄĺ™¨ć˜“ĺ—ćŹşéŞ—ć”ťĺ‡ť
- č‹šćžœäżŽĺ¤ iOS çłťçťŸäżç•™ĺˇ˛ĺˆ é™¤é€šçŸĽć•°ćŽçš„ćźć´ž
HackerNoon
- Coinlocally Lists Tesla, Amazon, Apple, More Tokenized Stock Pairs, Launches Zero-Fee Trading
- Explain the Cursor Elon Musk Deal to Me Like I'm 5: A Technical Report on the $60B Option to Acquire
Horizon3.ai
- Mythos in Practice: Attack Paths, Exploitability, and What Actually Matters Most
ICT Security Magazine
- Cybersecurity e cavi sottomarini: la nuova sfida strategica nell’era della competizione globale
- Intelligenza artificiale e criminalità Informatica: quando lo stesso strumento difende e attacca
IEEE Spectrum
- This Roboticist-Turned-Teacher Built a Life-Size Replica of ENIAC
- What Anthropic’s Mythos Means for the Future of Cybersecurity
infosecurity-magazine.com
- Apple Fixes iOS Notification Bug Exposing Deleted Messages
- Cyber-Attacks Surge 63% Annually in Education Sector
- Google Introduces Unique AI Agent Identities in New Gemini Enterprise Platform
- MacOS Native Tools Enable Stealthy Enterprise Attacks
- NCSC Backs Passkeys, Hailing a New Era of Sign-in
- Researchers Uncover 10 In-the-Wild Prompt Injection Payloads Targeting AI Agents
joanwestenberg.com
- Why prediction markets are a sure sign that our civilisation is in decay
johndcook.com
- Simple approximation for solving a right triangle
miguelgrinberg.com
- SQLAlchemy 2 In Practice - Chapter 6: A Page Analytics Solution
MIT Technology Review
- The Download: introducing the Nature issue
NowSecure
- Vibe Coding Risk: Securing AI-Generated Mobile Apps
pluralistic.net
- Pluralistic: The (other) problem with automatic conversion of free software to proprietary software (23 Apr 2026)
SANS Internet Storm Center, InfoCON: green
- Apple Patches Exploited Notification Flaw, (Thu, Apr 23rd)
- ISC Stormcast For Thursday, April 23rd, 2026 https://isc.sans.edu/podcastdetail/9904, (Thu, Apr 23rd)
Schneier on Security
- FBI Extracts Deleted Signal Messages from iPhone Notification Database
Security Affairs
- DDoS wave continues as Mastodon hit after Bluesky incident
- Microsoft Graph API misused by new GoGra Linux malware for hidden communication
- Mirai Botnet exploits CVE-2025-29635 to target legacy D-Link routers
- RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
- U.S. CISA adds a flaw in Microsoft Defender to its Known Exploited Vulnerabilities catalog
SentinelOne
- Hypersonic Supply Chain Attacks: One Solution That Didn’t Need to Know the Payload
shkspr.mobi
- Sneaky spam in conversational replies to blog posts
simonwillison.net
- Quoting Maggie Appleton
- Qwen3.6-27B: Flagship-Level Coding in a 27B Dense Model
Sploitus.com Exploits RSS Feed
- Command-Injection exploit
- DangXPloit exploit
- Exploit for CVE-2026-38751 exploit
- Exploit for CVE-2026-41651 exploit
- Exploit for Improper Input Validation in Microsoft exploit
- Exploit for Path Traversal in Jenkins exploit
- Exploits exploit
- hospital-waf-mcp exploit
- web-vulnerability-scanner exploit
- Web-Vulnerability-Tester exploit
TechCrunch
- AI galaxy hunters are adding to the global GPU crunch
- AI Overviews are coming to your Gmail at work
- Apple fixes bug that cops used to extract deleted chat messages from iPhones
- Beehiiv rolls out new creator tools, including webinars and customizable paywalls
- Elon Musk admits millions of Tesla owners need upgrades for true ‘Full Self-Driving’
- France confirms data breach at government agency that manages citizens’ IDs
- From the stage to the future: Where are Startup Battlefield’s alumni now?
- Google Cloud launches two new AI chips to compete with Nvidia
- Google makes an interesting choice with its new agent building tool for enterprises
- Google turns Chrome into an AI coworker for the workplace
- Google updates Workspace to make AI your new office intern
- Grab a ticket today: The first StrictlyVC of 2026 kicks off in just a week in San Francisco
- Hands on with X’s new AI-powered custom feeds
- How SpaceX preempted a $2B fundraise with a $60B buyout offer
- India’s app market is booming — but global platforms are capturing most of the gains
- Labor unrest at Samsung may worsen memory chip supply issues
- LinkedIn’s CEO is moving on; please hold your tearful video tributes
- Meta will now allow parents to see the topics their child discussed with Meta AI
- NASA’s Artemis II moon mission shows space-to-Earth laser comms can scale
- Salmon raises $100M in equity and debt to bring digital credit to underbanked Filipinos
- Shade lands $14M to let creative teams search their video libraries in plain English
- Surveillance vendors caught abusing access to telcos to track people’s phone locations, researchers say
- Tesla drops Musk’s $29B ‘interim’ award after Delaware court restored larger pay package
- Tesla just increased its capex to $25B. Here’s where the money is going.
- Tesla Q1 revenue rises, driven by EV sales and FSD subscriptions
- Threads is adding Live Chats to boost real-time engagement
- Vercel says some of its customers’ data was stolen prior to its recent hack
- WhatsApp adds prepaid phone recharges in India as its payments usage still lags
The Decoder
- Claude survey: new capabilities beat speed as top AI benefit, but creatives feel left behind
- Ex-OpenAI researcher Jerry Tworek launches Core Automation to build the most automated AI lab in the world
- Google says 75 percent of its new code is now written by AI
- Google's new AI tools put film scouting in Street View and promise to cut weeks of satellite analysis to minutes
- OpenAI launches workspace agents that turn ChatGPT from a chatbot into a team automation platform
- OpenAI releases open-source model that strips personal data from text
- OpenAI says its new ChatGPT for Clinicians outperforms doctors on clinical tasks even when they have unlimited time and web access
- Researchers warn US politics is repeating its ChatGPT mistake with world models
- Sony AI builds the first robot to reach expert level in a sport
The Verge
- AI failure could trigger the next financial crisis, warns Elizabeth Warren
- DJI’s new Lito Series beginner drones start at less than $400
- Elon Musk admits that millions of Tesla vehicles won’t get unsupervised FSD
- Ember’s self-heating smart mug is more than $50 off ahead of Mother’s Day
- Former MrBeast exec sues over ‘years’ of alleged harassment
- Google Meet will take AI notes for in-person meetings too
- Govee’s new colorful outdoor lights are its first with solar power
- Honor’s new phones look like iPhones for Android
- Microsoft launches ‘vibe working’ in Word, Excel, and PowerPoint
- Microsoft says the ‘idea’ of an Xbox mobile store ‘is not dead’
- Microsoft teases mysterious Discord and Xbox Game Pass partnership
- Netflix can’t seem to follow up its biggest shows
- OpenAI now lets teams make custom bots that can do work on their own
- Tesla’s revenue rises again as it prepares for more AI and robotics
- The Iranian women Trump ‘saved’ from execution are simultaneously real and AI-manipulated
- THE PEOPLE DO NOT YEARN FOR AUTOMATION
- Tim Cook’s departure is the start of a new era at Apple
- Watch Sony’s elite ping-pong robot beat top-ranked players
- X is going to let Grok curate your timeline
- You’re about to feel the AI money squeeze
Trail of Bits Blog
- Trailmark turns code into graphs
VulDB Recent Entries
- CVE-2025-0186 | GitLab Community Edition/Enterprise Edition up to 18.9.5/18.10.3/18.11.0 Requests allocation of resources
- CVE-2025-10549 | EfficientLab Controlio up to 1.3.94 uncontrolled search path
- CVE-2025-36074 | IBM Security Verify Directory up to 10.0.0.3 unrestricted upload
- CVE-2025-3922 | GitLab Community Edition/Enterprise Edition up to 18.9.5/18.10.3/18.11.0 GraphQL API allocation of resources
- CVE-2025-6016 | GitLab Community Edition/Enterprise Edition up to 18.9.5/18.10.3/18.11.0 allocation of resources
- CVE-2025-9957 | GitLab Community Edition/Enterprise Edition up to 18.9.5/18.10.3/18.11.0 authorization
- CVE-2026-1352 | IBM DB2/DB2 Connect Server up to 11.5.9/12.1.4 improper validation of specified quantity in input
- CVE-2026-1660 | GitLab Community Edition/Enterprise Edition up to 18.9.5/18.10.3/18.11.0 allocation of resources
- CVE-2026-1923 | socialrocket Social Rocket Plugin up to 1.3.4.2 on WordPress cross site scripting
- CVE-2026-29198 | Rocket.Chat up to 8.2.x sql injection
- CVE-2026-2951 | Gutentor Plugin up to 3.5.5 on WordPress Gutenberg Block cross site scripting
- CVE-2026-3007 | Three Learning Koollab Learning Management System 5.3.2. cross site scripting
- CVE-2026-32885 | DDEV up to 1.25.1 pkg/archive/archive.go Untar/Unzip path traversal (GHSA-x2xq-qhjf-5mvg)
- CVE-2026-33471 | nimiq core-rs-albatross up to 1.2.x SkipBlockProof::verify input validation (GHSA-6973-8887-87ff)
- CVE-2026-3361 | tijmensmit WP Store Locator Plugin up to 2.2.261 on WordPress wpsl_address cross site scripting
- CVE-2026-33656 | EspoCRM up to 9.3.3 getFilePath sourceId path traversal
- CVE-2026-33733 | EspoCRM up to 9.3.3 Admin Template Management Endpoint name/scope path traversal
- CVE-2026-34062 | nimiq core-rs-albatross up to 1.2.x read_to_end allocation of resources (GHSA-gh7r-qh4p-q4fr)
- CVE-2026-34063 | nimiq core-rs-albatross up to 1.2.x assertion (GHSA-74hp-mhfx-m45h)
- CVE-2026-34064 | nimiq core-rs-albatross up to 1.2.x can_change_balance integer underflow (GHSA-vc34-39q2-m6q3)
- CVE-2026-34065 | nimiq core-rs-albatross up to 1.2.x Validators::voting_keys return value (GHSA-7c4j-2m43-2mgh)
- CVE-2026-34066 | nimiq core-rs-albatross up to 1.2.x put_historic_txns assertion (GHSA-j99g-7rqw-q9jg)
- CVE-2026-34067 | nimiq core-rs-albatross up to 1.2.x HistoryTreeProof::verify assertion
- CVE-2026-34068 | nimiq core-rs-albatross up to 1.2.x signature verification
- CVE-2026-34413 | thexerteproject xerteonlinetoolkits up to 3.13.0/3.14.0/3.15.0 elFinder Connector Endpoint connector.php exposure of sensitive system information to an unauthorized control sphere (ID 1527)
- CVE-2026-34414 | thexerteproject xerteonlinetoolkits up to 3.13.0/3.14.0/3.15.0 elFinder Connector Endpoint connector.php rename Name path traversal (ID 1527)
- CVE-2026-34415 | thexerteproject xerteonlinetoolkits up to 3.13.0/3.14.0/3.15.0 elFinder Connector Endpoint incomplete blacklist (ID 1527)
- CVE-2026-35338 | Uutils coreutils up to 0.5.x chmod Utility path traversal
- CVE-2026-35339 | Uutils coreutils up to 0.5.x Recursive Mode function return value
- CVE-2026-35340 | Uutils coreutils up to 0.5.x ChownExecutor function return value
- CVE-2026-35341 | Uutils coreutils mkfifo set_permissions permission assignment
- CVE-2026-35342 | Uutils coreutils up to 0.5.x Environment Variable /tmp TMPDIR temp file
- CVE-2026-35343 | Uutils coreutils up to 0.7.x cut Utility cut_fields_newline_char_delim control flow
- CVE-2026-35344 | Uutils coreutils /dev/null Result::ok return value
- CVE-2026-35345 | Uutils coreutils tail Utility toctou
- CVE-2026-35346 | Uutils coreutils up to 0.5.x comm Utility String::from_utf8_lossy unicode encoding
- CVE-2026-35347 | Uutils coreutils up to 0.5.x Comm Utility /dev/zero are_files_identical input validation
- CVE-2026-35348 | Uutils coreutils sort Utility expect uncaught exception
- CVE-2026-35349 | Uutils coreutils up to 0.6.x Rm Utility /tmp/rootlink link following
- CVE-2026-35350 | Uutils coreutils cp Utility permissions
- CVE-2026-35351 | Uutils coreutils mv Utility permissions
- CVE-2026-35353 | Uutils coreutils up to 0.5.x Mkdir Utility toctou
- CVE-2026-35356 | Uutils coreutils up to 0.6.x Install Utility toctou
- CVE-2026-35358 | Uutils coreutils up to 0.6.x Cp Utility /dev/null name resolution
- CVE-2026-35359 | Uutils coreutils Cp Utility toctou
- CVE-2026-35360 | Uutils coreutils Touch Utility File::create toctou
- CVE-2026-35361 | Uutils coreutils up to 0.5.x Mknod Utility std::fs permissions
- CVE-2026-35362 | Uutils coreutils up to 0.5.x safe_traversal toctou
- CVE-2026-35363 | Uutils coreutils Rm Utility path traversal
- CVE-2026-35365 | Uutils coreutils up to 0.6.x Mv Utility link following
- CVE-2026-35366 | Uutils coreutils up to 0.5.x Printenv Utility unusual condition
- CVE-2026-35367 | Uutils coreutils nohup Utility permission assignment
- CVE-2026-35368 | Uutils coreutils chroot utility getpwnam untrusted search path
- CVE-2026-35369 | Uutils coreutils up to 0.5.x denial of service
- CVE-2026-35370 | Uutils coreutils id Utility authorization
- CVE-2026-35371 | Uutils coreutils Id Utility clickjacking
- CVE-2026-35373 | Uutils coreutils unicode encoding
- CVE-2026-35375 | Uutils coreutils up to 0.7.x split Utility to_string_lossy unicode encoding
- CVE-2026-35377 | Uutils coreutils 125 env Utility denial of service
- CVE-2026-35378 | Uutils coreutils up to 0.7.x incorrect short circuit evaluation
- CVE-2026-35379 | Uutils coreutils up to 0.7.x tr Utility character incorrect provision of specified functionality
- CVE-2026-35380 | Uutils coreutils up to 0.7.x Cut Utility input validation
- CVE-2026-35381 | Uutils coreutils up to 0.7.x incorrect provision of specified functionality
- CVE-2026-3621 | IBM WebSphere Application Server up to 26.0.0.4 privileges management
- CVE-2026-3673 | Frappe 16.10.10 Tag _user_tags cross site scripting
- CVE-2026-3837 | Frappe 16.10.0 cross site scripting
- CVE-2026-3844 | cloudways Breeze Cache Plugin up to 2.4.4 on WordPress fetch_gravatar_from_remote unrestricted upload
- CVE-2026-40517 | radareorg radare2 up to 6.1.3 PDB Parser print_gvars os command injection (Bug 25730)
- CVE-2026-40529 | Kanata CMS ALAYA Administrative Interface sql injection
- CVE-2026-41040 | GROWI redos
- CVE-2026-41168 | py-pdf pypdf up to 6.10.0 Object Stream Size iteration (GHSA-jj6c-8h6c-hppx)
- CVE-2026-41172 | squidex up to 7.22.x server-side request forgery (GHSA-x7cq-4f4c-8qcv)
- CVE-2026-41175 | Statamic CMS up to 5.73.19/6.12.x REST API Endpoint externally-controlled input to select classes or code (GHSA-4jjr-vmv7-wh4w)
- CVE-2026-41177 | squidex up to 7.22.x Restore API Url file inclusion (GHSA-45fq-w37p-qfw5)
- CVE-2026-41180 | psi-4ward psitransfer up to 2.4.2 Request Path /files/ path traversal (GHSA-533q-w4g6-5586)
- CVE-2026-41182 | langchain-ai langsmith-sdk information disclosure (GHSA-rr7j-v2q5-chgv)
- CVE-2026-41196 | Luanti up to 5.15.1 code injection (GHSA-g596-mf82-w8c3)
- CVE-2026-41197 | noir-lang noir up to 1.0.0-beta.18 compile_block size buffer size (GHSA-jj7c-x25r-r8r3)
- CVE-2026-41200 | NUWCDIVNPT stig-manager up to 1.6.7 src/init.js error/error_description cross site scripting (GHSA-wg33-j3rv-jq72)
- CVE-2026-41206 | ParzivalHack PySpector up to 0.1.7 PluginSecurity.validate_plugin_code incomplete blacklist (GHSA-vp22-38m5-r39r)
- CVE-2026-41208 | paperclipai paperclip prior 2026.416.0 API Endpoint os command injection (GHSA-265w-rf2w-cjh4)
- CVE-2026-41211 | voidzero-dev vite-plus up to 0.1.16 downloadPackageManager path traversal (GHSA-33r3-4whc-44c2)
- CVE-2026-41228 | Froxlor up to 2.3.5 API Endpoint Language::loadLanguage def_language filename control (GHSA-w59f-67xm-rxx7)
- CVE-2026-41229 | Froxlor up to 2.3.5 Setting lib/userdata.inc.php parseArrayToString privileged_user code injection (GHSA-gc9w-cc93-rjv8)
- CVE-2026-41230 | Froxlor up to 2.3.5 DomainZones::add crlf injection (GHSA-47hf-23pw-3m8c)
- CVE-2026-41231 | Froxlor up to 2.3.5 Destination DataDump.add fixed_homedir link following (GHSA-75h4-c557-j89r)
- CVE-2026-41232 | Froxlor up to 2.3.5 Email Address EmailSender::add authorization
- CVE-2026-41233 | Froxlor up to 2.3.5 Domains.add adminid authorization
- CVE-2026-41238 | cure53 DOMPurify up to 3.3.1 cross site scripting
- CVE-2026-41243 | siemvk OpenLearn access control (GHSA-4rv3-hfh6-vqvm)
- CVE-2026-41312 | py-pdf pypdf up to 6.10.1 predictor memory allocation (GHSA-7gw9-cf7v-778f)
- CVE-2026-41313 | py-pdf pypdf up to 6.10.1 Size iteration (GHSA-4pxv-j86v-mhcw)
- CVE-2026-41314 | py-pdf pypdf up to 6.10.1 size memory allocation (GHSA-x284-j5p8-9c5p)
- CVE-2026-41459 | thexerteproject xerteonlinetoolkits up to 3.15.0 GET Request /setup root_path exposure of sensitive system information to an unauthorized control sphere (ID 1527)
- CVE-2026-41564 | MIK CryptX up to 0.087 on Perl X25519 X25519 Modules prng seed (GHSA-24c2-gp6c-24c6)
- CVE-2026-41679 | paperclipai paperclip prior 2026.410.0 API Call improper authentication (GHSA-68qg-g8mg-6pr7)
- CVE-2026-41988 | uuidjs uuid up to 13.x control flow
- CVE-2026-41989 | gnupg Libgcrypt up to 1.10.3/1.11.2/1.12.1 ECDH gcry_pk_decrypt out-of-bounds write
- CVE-2026-41990 | gnupg Libgcrypt up to 1.12.1 out-of-bounds write
- CVE-2026-4917 | IBM Guardium Data Protection 12.1 URL path traversal
- CVE-2026-4918 | IBM Guardium Data Protection 12.1.0 Web UI cross site scripting
- CVE-2026-4919 | IBM Guardium Data Protection up to 26.0.0.4 Web UI cross site scripting
- CVE-2026-5926 | IBM Verify Identity Access Container up to 11.0.2 inadequate encryption
- CVE-2026-5935 | IBM Total Storage Service Consol TS4500 IMC up to 9.6 os command injection
- CVE-2026-6019 | Python CPython up to 3.14.x HTML Parser http.cookies.Morsel.js_output control sequence (ID 90309)
- CVE-2026-6874 | ericc-ch copilot-api up to 0.7.0 Header /token Host dns rebinding
- CVE-2026-6878 | ByteDance verl up to 0.7.0 prime_math/grader.py math_equal sandbox
Vulnerabilities and Threat Research – Qualys Security Blog
- Don’t Wait for a Patch. Mitigate RedSun Zero-Day Risk in Microsoft Defender Today
wheresyoured.at
- Exclusive: Microsoft Moving All GitHub Copilot Subscribers To Token-Based Billing In June
Wired
- 15% Off Adidas Promo Code | April 2026
- 5 AI Models Tried to Scam Me. Some of Them Were Scary Good
- 7 Best Shower Filters of 2026 Are WIRED-Tested and -Approved
- A Startup Says It Grew Human Sperm in a Lab—and Used It to Make Embryos
- AI Tools Are Helping Mediocre North Korean Hackers Steal Millions
- Best Fitbit Models for Beginners, Athletes, and Kids (2026)
- Best Robot Vacuum of 2026: Shark, Eufy
- Chirp Discount Codes and Deals: Save Up to 67%
- Cocaine-Fueled Wild Salmon Swam Twice as Far as Sober Ones
- Dermstore Promo Codes: 25% Off
- Hoka Coupon Codes: 30% Off | April 2026
- Lume Cube Edge Light Go Review (2026): Versatile, Portable
- New York Bans Government Employees from Insider Trading on Prediction Markets
- Sam Altman’s Orb Company Promoted a Bruno Mars Partnership That Doesn't Exist
- Sony Inzone H6 Air Review: Comfortable Headphones, Great Sound
- The Adidas Hyperboost Edge Is Your New Super Trainer
- The Best Robotic Pool Cleaners of 2026: Beatbot, iGarden, Dreame
- They Made D4vd a Star. Now They Want Him Convicted of Murder
- US Senate Candidate Caught Insider Trading on Kalshi Says He Did It on Purpose
- Verizon Promo Codes: $200 Verizon Gift Cards | April 2026
不安全
- Apple fixes iOS bug that kept deleted notifications, including chat previews
- 三星电子前职员向中方泄露芯片技术被判七年
代码审计星球
- 原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
博客
- Bcrypt
奇客Solidot–传递最新科技情报
- 53 国齐聚哥伦比亚商讨淘汰化石燃料
- 乒乓球机器人击败了人类顶尖选手
- 加密货币骗子瞄准滞留在霍尔木兹海峡附近的船只
- 古代人类曾三次迁徙到南美洲
- 孙宇晨起诉特朗普家族的加密货币公司 World Liberty
- 盖茨基金会准备裁员，正在审查与爱泼斯坦的关联
- 苹果修复了在原始信息删除之后预览仍然保留在通知数据库里的 Bug
- 阴谋论引发美国总统关注促使 FBI 调查
- 高收入人群的 AI 普及率远高于低收入人群
爱范儿
- 21.99 万元起！自研太行底盘+华为满血智驾，阿维塔 06T 是目前「最优雅」旅行车
- 全新一代瑞虎 9上市：当新能源成为话题主流后，奇瑞的燃油旗舰正在寻找新的答案
- 刚刚，姚顺雨腾讯首秀来了！三个月重建混元新模型，实测到底什么水平
- 定价 20-40 万元！千里科技发布全新汽车品牌「游心」
- 我们需要更多阔折叠｜硬哲学
- 早报｜库克称将长期担任苹果执行董事长/张雪机车召回286台820RR/特斯拉车机将接入豆包与DeepSeek
- 纯正的美式豪华味儿！「电动大 V8」凯迪拉克凯威德上市，46.88 万元起
- 荣耀 WIN 游戏本功耗拉到 270W，加风扇是散热永恒的真理
- 起底 GPT Image 2 团队后，我扒出了一张华人师徒网
绿盟科技技术博客
- 【公益译文】2026年国际AI安全报告（一）
- 【公益译文】2026年国际AI安全报告（四）
- 权威认可 | 绿盟科技防火墙实力入选“2025中国网络安全防火墙市场销量明星品牌”
- 绿盟NF防火墙：筑牢OpenClaw安全防线，构筑AI时代安全基石
量子位 QbitAI
- 国内首家百亿估值纯推理GPU独角兽诞生！专访曦望联席CEO王湛：谁的推理成本更低谁就是赢家
阿小信的博客
- “中国AI拿下这一轮，我没意见”——Kimi K2.6引爆Hacker News，海外开发者怎么看中国开源AI大模型？
- 如何在客户端将网页HTML转为PDF？html2pdf.js 完全实战指南
- 阿小信自由职业语录全集（2026.04 AI总结版）
黑海洋
- 三星电子前职员向中方泄露芯片技术被判七年
- 微软承诺斥资建设澳大利亚AI产业能力
- 法国在预测市场投注激增后调查天气数据篡改