小红花·文摘
  • 首页
  • AI Tokens🪙
  • 排行榜🏆
  • 直播
  • FAQ
Dify.AI
沉浸式翻译 immersive translate

OpenAI and Poland’s NASK are partnering on AI safety, security, and technical research to strengthen safeguards and support a more resilient digital ecosystem.

OpenAI and Poland’s NASK partner to advance AI safety and security

OpenAI OpenAI · 2026-10-23T00:00:00Z
Security | PHP2Shell:内存耗尽之后,服务器怎么就被拿下了?

本文分析PHP漏洞CVE-2026-109618与CVE-2026-109619,结合官方公告、补丁源码和公开利用,拆解三条利用路径、可复用攻击原语及完整武器化链路,并讨论修复与检测方法。

Security | PHP2Shell:内存耗尽之后,服务器怎么就被拿下了?

MiaoTony's Blog MiaoTony's Blog · 2026-10-21T19:30:00Z
Elastic Security 与 Google Distributed Cloud 集成:弥合气隙环境中的速度差距

Elastic Security 与 Google Distributed Cloud 气隙环境集成,将 SIEM v2 和 EDR v2 嵌入平台,提供统一安全运营。该方案整合 SIEM、EDR、威胁情报和 SecOps 基础,帮助主权及受监管客户在完全断网环境中实现自动化防御,缩小攻击速度差,降低运维负担。

Elastic Security 与 Google Distributed Cloud 集成:弥合气隙环境中的速度差距

Elastic Blog - Elasticsearch, Kibana, and ELK Stack Elastic Blog - Elasticsearch, Kibana, and ELK Stack · 2026-10-16T00:00:00Z

Spring Authorization Server now lives inside Spring Security 7 under the same Maven coordinates, so the upgrade is a version bump. This server-side guide covers enabling DPoP and RFC 8693 Token...

Article: Server-Side DPoP and Token Exchange in Spring Security 7

InfoQ InfoQ · 2026-10-15T09:00:00Z

Block is building AI-powered security with OpenAI. Its security team investigates threats faster and proposes patches in minutes.

How Block is building AI-powered security with OpenAI technology

OpenAI OpenAI · 2026-10-14T07:00:00Z
Jean Lilly 使用 AWS Security Agent 加速应用安全验证

Jean Lilly为B2B珠宝店铺提供3D设计平台,研发团队二十多人但无专职安全工程师。传统外部渗透测试需2~4周、费用5~15万元,难以跟上发布节奏。采用AWS Security Agent后,开发团队可按需发起测试,将验证缩短至数小时,并通过授权、范围、凭据和成本上限的可重复流程,优先修复有证据的高危漏洞。

Jean Lilly 使用 AWS Security Agent 加速应用安全验证

亚马逊AWS官方博客 亚马逊AWS官方博客 · 2026-10-10T09:32:43Z
Chris van Eijk:new row violates row-level security policy 的成因

基于 PostgreSQL 17.11 实测,分析“new row violates row-level security policy”错误:该错误有四种形式、六类成因,包括租户不匹配、未设置租户、缺少插入策略、RETURNING 或 ON CONFLICT 需要 SELECT 策略、限制性策略拒绝、upsert 命中无权更新的行。排查时应检查当前租户设置、pg_policies 中对应命令与角色的策略,以及语句是否读取该行。

Chris van Eijk:new row violates row-level security policy 的成因

Planet PostgreSQL Planet PostgreSQL · 2026-10-09T23:15:10Z

Every October, Cybersecurity Awareness Month reminds us the importance of protecting our digital lives. The theme for 2026 is ‘Don’t Make It Easy for Them,’ with the National Cybersecurity...

Strengthen your online security for free with Firefox

The Mozilla Blog The Mozilla Blog · 2026-10-06T16:00:00Z
Elastic Security 与 OpenAI GPT Cyber 模型:前沿网络防御对公共部门意味着什么

Elastic加入OpenAI Daybreak防御网络,将GPT Cyber模型引入Elastic Security,通过托管推理服务提供告警研判、调查与修复能力。OpenAI承诺投入10亿美元补贴公共机构,并与MS-ISAC试点保护水务等关键基础设施。该方案帮助政府、国防、教育等资源有限部门应对AI驱动的快速攻击,无需新建AI基础设施,且支持政府自管或隔离环境中的模型。

Elastic Security 与 OpenAI GPT Cyber 模型:前沿网络防御对公共部门意味着什么

Elastic Blog - Elasticsearch, Kibana, and ELK Stack Elastic Blog - Elasticsearch, Kibana, and ELK Stack · 2026-10-06T00:00:00Z

Google's AndroidX Security State libraries enables apps to verify security patch status at the individual component level, rather than relying on a single, device-wide security patch date. By...

Google's Android Security State Libraries Enable Component-Level Security Verification

InfoQ InfoQ · 2026-10-04T17:00:00Z

Archestra released OpenAPPA, an open-source security engine designed to stop data exfiltration caused by prompt injection or model hallucination. The team reports zero successful attacks when...

New Archestra's OpenAPPA Saturates Two Major Security Benchmarks with a 0% Attack Success Rate

InfoQ InfoQ · 2026-10-03T23:41:00Z

A recent article by Anil Madhavapeddy argues that AI agents can turn publicly available clues about software vulnerabilities into working exploits, reducing the effectiveness of traditional...

AI Agents Are Disrupting Open Source Security Disclosure

InfoQ InfoQ · 2026-10-03T06:46:00Z

Envoy Gateway has released v1.9.1, a maintenance release that focuses heavily on security, upgrade reliability, and operational correctness following the broader v1.9 release. By Craig Risi

Envoy Gateway 1.9.1 Tightens Security and Addresses a Difficult Upgrade Path

InfoQ InfoQ · 2026-10-02T12:00:00Z

A look at two InfoQ online certification cohorts covering security and privacy decisions in production AI systems and the verification needed when coding agents work in existing codebases. By...

InfoQ Online Cohorts Address AI Security and Coding Agent Verification

InfoQ InfoQ · 2026-09-30T17:00:00Z

There was a flurry of activity during the week of September 21st, 2026, highlighting: second milestone releases of: Spring Boot, Spring Batch, Spring Security, Spring AMQP, Spring Integration,...

Spring News Roundup: Second Milestone Releases of Boot, Framework, Data, Security, Integration

InfoQ InfoQ · 2026-09-29T12:00:00Z

While there is no single prescription for energy security, strengthening “response capacity,” such as by establishing stockpiles, substituting sources, and diversifying suppliers, is essential....

Energy security in an age of disruption

McKinsey Insights & Publications McKinsey Insights & Publications · 2026-09-29T00:00:00Z
借助 GitHub Security Lab Taskflow Agent 实现 AI 驱动的模糊测试

GitHub Copilot 重构差异界面,可流畅打开百万行代码的拉取请求及数百条行内评论;并将 Copilot 代理运行时迁移至 Rust,重写 80 万行生产级代码,此前因成本过高难以实现。

借助 GitHub Security Lab Taskflow Agent 实现 AI 驱动的模糊测试

The GitHub Blog The GitHub Blog · 2026-09-24T18:26:12Z

Security researcher Patrick Wardle revealed an unpatched zero-day vulnerability in Meta's Muse desktop client for macOS. This flaw lets unprivileged software manipulate the assistant's extensive...

Un-Mused: How a Single Debug Setting Bypassed macOS Security in Meta’s AI Client

InfoQ InfoQ · 2026-09-24T14:14:00Z
Spring Security 7.2.0-M2 现已发布

该文本仅为 Tanzu Spring 的订阅推广信息,无实质文章内容可总结。

Spring Security 7.2.0-M2 现已发布

Spring Spring · 2026-09-24T00:00:00Z

OpenAI CEO Sam Altman discusses AI safety, human control, and international cooperation in remarks to the United Nations Security Council.

Sam Altman’s remarks at the United Nations Security Council

OpenAI OpenAI · 2026-09-23T12:00:00Z
  • <<
  • <
  • 1 (current)
  • 2
  • 3
  • >
  • >>
👤 个人中心
在公众号发送验证码完成验证
登录验证
在本设备完成一次验证即可继续使用

完成下面两步后,将自动完成登录并继续当前操作。

1 关注公众号
小红花技术领袖公众号二维码
小红花技术领袖
如果当前 App 无法识别二维码,请在微信搜索并关注该公众号
2 发送验证码
在公众号对话中发送下面 4 位验证码
小红花技术领袖俱乐部
小红花·文摘:汇聚分发优质内容
小红花技术领袖俱乐部
Copyright © 2021-
粤ICP备2022094092号-1
公众号 小红花技术领袖俱乐部公众号二维码
视频号 小红花技术领袖俱乐部视频号二维码