FreeBuf网络安全行业门户 ·

舍友服务器被入侵的一次复盘演练记录

💡 原文中文，约1100字，阅读约需3分钟。

📝

内容提要

舍友的手机收到服务器被入侵的提醒短信。舍友发现服务器上有运行的docker容器，通过top命令发现最高CPU占用的进程为Sofi，将其kill掉后服务器恢复正常。扫描端口发现YApi存在远程命令执行漏洞。

🏷️

接力 MinIO：OtterIO 十月初维护记录
OtterIO 发布 2026 年 10 月维护版，修复预签名上传漏洞（可被附加未签名 x-amz-copy-source 头改为服务端复制），并加强内部...
PSC本周动态（238）| 2026-10-05
三人讨论认为应改进@INC处理，但构建模块和安装工具相关未决问题仍存，计划先发布部分文档草案征求意见。近期改进匿名子程序调用行号准确性的改动（#24396...
This startup is issuing AI-generated acne prescriptions
People in Utah can now use AI to get a prescription for acne treatment. On Mo...
NEAREST BY Join: Scaling Vector Search in Databricks Runtime
Vector search originated as a serving problem. The classical use case is a chatbot...
Postdoc position on formal verification and algorithm discovery for numerical analysis
[This is a guest post by Annalisa Buffa. This blog post was initially written...
OpenAI brings text watermarking to its API — and unlike Anthropic, it’s off by default
OpenAI has announced that developers can now opt in to watermarking text gene...