➡️

继续阅读

  1. GitHub为NPM可信发布设置48小时验证期限 阻断仓库名回收漏洞
    GitHub 调整 NPM 可信发布规则，新配置须在 48 小时内完成首次发布，否则失效。此举旨在修复仓库名回收漏洞：维护者重命名或删除仓库后，攻击者可注...
  2. Docker Hub账户转组织流程出现高危漏洞 个人令牌未被正常撤销导致有权操作组织仓库
    Docker Hub账户转组织流程存在高危漏洞CVE-2026-105445，评分9.4。个人访问令牌转移后密钥未撤销，攻击者可利用原令牌以新组织身份访问...
  3. 66%的十亿美元级公司放任高危漏洞不修补——AI漏洞猎捕炒作所忽略的部分
    Chainguard推出AI安全工具Harness，利用受限的Claude Mythos 5.1等前沿模型发现并修复传统扫描器遗漏的漏洞，已在高危代码库中...
  4. From 2,500 requests to 24: Rebuilding star history without the stargazers
    Our new repo star history API now provides trends without returning individua...
  5. The AI race is back on
    Last week, Anthropic and OpenAI looked like they had the AI race to themselve...
  6. Now that Character.AI is going bankrupt, what happens to all of its users’ data?
    New York Attorney General Letitia James revealed a years-long multi-state inv...
👤 个人中心
在公众号发送验证码完成验证