小红花·文摘
  • 首页
  • AI Tokens🪙
  • 排行榜🏆
  • 直播
  • FAQ

The engineering team at software company Figma recently documented how they built AI agents to help their security team investigate alerts, search past incidents, check company systems, and even...

How Figma Uses AI Agents for Security

InfoQ InfoQ · 2026-09-06T06:59:00Z

After a 10-week hiatus since the last batch of Spring ecosystem releases, there was a flurry of activity during the week of August 17th, 2026, highlighting first milestone releases of: Spring...

Spring News Roundup: First Milestone Releases for Boot, Framework, Data, Security, Modulith, Batch

InfoQ InfoQ · 2026-08-27T15:50:00Z
Anthropic将Mythos 5引入其Claude Security漏洞扫描器

Anthropic将Claude Mythos 5模型集成至Claude Security企业工具,用于扫描代码漏洞并生成补丁,同时与网络安全公司合作,推出3500万美元基金支持开源软件修复。该模型此前仅限内部使用,现通过受控输出方式向企业开放,降低恶意使用风险,但开发者需注意开源代码的漏洞共享问题。

Anthropic将Mythos 5引入其Claude Security漏洞扫描器

The New Stack The New Stack · 2026-08-21T19:11:38Z

Security researchers at Wiz recently examined S3-compatible object storage services across six popular neoclouds, revealing significant security gaps compared to Amazon S3. While S3 has become the...

S3 Compatibility Doesn't Guarantee S3-Level Security

InfoQ InfoQ · 2026-08-21T08:41:00Z

Cloudflare is introducing WriteGuard, now in private beta, to provide fine-grained security controls for MCP (Model Context Protocol) servers. It aims to make AI agents safer by controlling their...

Cloudflare WriteGuard Brings Fine-Grained Security Controls for MCP Servers

InfoQ InfoQ · 2026-08-18T16:00:00Z

Anthropic conducted an audit of 141006 evaluation runs after OpenAI's sandbox escape disclosure. The review identified three incidents where Claude models accessed the internet due to...

Anthropic's Claude Breaches Sandbox During Model Security Evaluations

InfoQ InfoQ · 2026-08-13T10:10:00Z
从零开始理解CSRF:浏览器机制、攻击原理与Spring Security实现 [完整手册]

CSRF(跨站请求伪造)利用浏览器自动携带Cookie的特性,诱骗已登录用户向目标网站发送伪造请求。攻击者无需窃取Cookie,只需诱导用户访问恶意网站,浏览器便会自动附带用户的会话凭证。防御措施包括CSRF令牌、SameSite Cookie、Origin/Referer校验等。Spring Security通过CsrfFilter实现防护,开发者应确保GET请求只读,并采用多层防御策略。

从零开始理解CSRF:浏览器机制、攻击原理与Spring Security实现 [完整手册]

freeCodeCamp.org freeCodeCamp.org · 2026-08-06T21:35:36Z

Dropbox has integrated Model Context Protocol (MCP) with its internal knowledge platform, Dash, to surface security design context during AI assisted code reviews. The system retrieves threat...

Dropbox Integrates MCP and Dash to Close the Gap between Security Design and Code Review

InfoQ InfoQ · 2026-07-31T14:36:00Z
Mate Security获3500万美元A轮融资,押注以上下文为先的AI架构重塑安全运营中心

Mate Security获3500万美元A轮融资,主张安全运营需AI原生架构而非仅给SIEM加LLM。其核心是安全上下文图,持续更新组织资产、用户和业务流程,帮助AI代理更准确判断警报。公司称客户含财富500强,收入自2025年Q3增长超500%,资金将用于扩展团队和产品。

Mate Security获3500万美元A轮融资,押注以上下文为先的AI架构重塑安全运营中心

The New Stack The New Stack · 2026-07-28T15:00:00Z

JFrog Security Research revealed "PixelSmash," a vulnerability in the FFmpeg media framework, allowing for Remote Code Execution and Denial of Service attacks. Present for sixteen years, it...

AI-Enabled Security Researchers Discover How a Crafted Video Can Provide Attackers Access to Your PC

InfoQ InfoQ · 2026-07-26T09:09:00Z

The bottleneck in a mature SOC is rarely analyst triage; rather, it is the detection-engineering team's ability to keep the rule base aligned with a threat landscape that evolves faster than rules...

Article: Multi-Agent AI for Production Security Operations: An A2A and MCP Architecture in a 5G Core

InfoQ InfoQ · 2026-07-23T09:00:00Z

Google Cloud has published a new blueprint setting out how organisations should secure artificial intelligence workloads running on Google Kubernetes Engine, arguing that the shift from prototype...

GKE Security Blueprint Joins Growing List of Cloud AI Frameworks

InfoQ InfoQ · 2026-07-22T08:00:00Z

GitLab has released version 19.2 of its DevSecOps platform, adding agentic automation aimed at the security and review work that has piled up as AI coding tools generate more code than developers...

GitLab 19.2 Puts AI Agents to Work on the Security Backlog

InfoQ InfoQ · 2026-07-21T08:00:00Z

Amazon Web Services has recently introduced AWS Continuum, a new integrated security platform to automate the discovery, enforcement, and remediation of security issues across codebases,...

AWS Continuum to Enable Agentic Code Security for Enterprises

InfoQ InfoQ · 2026-07-16T19:00:00Z
AWS 一周综述:AWS 构建者中心上线一周年、Security Hub 网络扫描功能、适用于 AWS 的 Loom 等(2026 年 7 月 13 日)

AWS构建者中心上线一周年,功能不断扩展,包括沙盒环境和网络扫描功能。Security Hub新增网络扫描,支持AWS和Azure资源监控。Amazon SageMaker与Hugging Face集成,简化模型部署。EKS和ECS管理费用下调,Aurora DSQL CDC功能正式发布。AWS还推出Loom和Claude应用程序网关,增强安全性和管理能力。

AWS 一周综述:AWS 构建者中心上线一周年、Security Hub 网络扫描功能、适用于 AWS 的 Loom 等(2026 年 7 月 13 日)

亚马逊AWS官方博客 亚马逊AWS官方博客 · 2026-07-13T10:07:14Z

InfoQ has opened enrollment for a five-week AI Security & Privacy Engineering cohort for senior engineers and architects in regulated industries, focused on applying security, privacy, threat...

InfoQ Opens AI Security & Privacy Engineering Cohort for Regulated Industries

InfoQ InfoQ · 2026-07-06T12:00:00Z

In this episode, Alex Zenla (CTO/Co-founder, Edera) challenges the "laissez-faire" attitude toward modern infrastructure. She promotes "spite-driven development", building software to solve...

Podcast: Spite-Driven Engineering: A New Blueprint for Cloud Security in the AI Native Era

InfoQ InfoQ · 2026-07-06T11:00:00Z

This virtual panel brings together AI security experts to examine the evolution of AI-driven threats, from prompt injection and data poisoning to agent abuse and AI-powered social engineering. The...

Article: Virtual panel: Security in the Machine Age: Expert Insights on AI Threat Evolution

InfoQ InfoQ · 2026-06-29T11:00:00Z

The Argo CD project released a v3.5 release candidate in June 2026. This version adds mutual TLS enforcement for internal components. It also includes Git commit signature verification for supply...

Argo CD 3.5 Tightens Supply Chain Security with Internal mTLS and Source Integrity

InfoQ InfoQ · 2026-06-26T12:00:00Z
AWS Security Agent 增加威胁建模、Kiro 能力包、Claude Code 插件及更多功能

AWS Security Agent 在 re:Invent 2025 上推出新功能,包括按需渗透测试、代码审核和威胁建模,支持多种代码存储库,提供安全分析和风险识别,帮助开发者保障应用安全。新集成的 Kiro 能力包和 Claude Code 插件可直接在 IDE 中运行,简化安全审查和修复流程。

AWS Security Agent 增加威胁建模、Kiro 能力包、Claude Code 插件及更多功能

亚马逊AWS官方博客 亚马逊AWS官方博客 · 2026-06-26T07:28:10Z
  • <<
  • <
  • 1 (current)
  • 2
  • 3
  • >
  • >>
👤 个人中心
在公众号发送验证码完成验证
登录验证
在本设备完成一次验证即可继续使用

完成下面两步后,将自动完成登录并继续当前操作。

1 关注公众号
小红花技术领袖公众号二维码
小红花技术领袖
如果当前 App 无法识别二维码,请在微信搜索并关注该公众号
2 发送验证码
在公众号对话中发送下面 4 位验证码
友情链接: MOGE.AI 九胧科技 1tok 菜鸟教程 Remio.AI DeekSeek连连 53AI 神龙海外代理IP IPIPGO全球代理IP 东波哥的博客 匡优考试在线考试系统 开源服务指南 蓝莺IM Solo 独立开发者社区 AI酷站导航 极客Fun 我爱水煮鱼 周报生成器 He3.app 简单简历 白鲸出海 T沙龙 职友集 TechParty 蟒周刊 Best AI Music Generator 模力方舟 Gitee AI

小红花技术领袖俱乐部
小红花·文摘:汇聚分发优质内容
小红花技术领袖俱乐部
Copyright © 2021-
粤ICP备2022094092号-1
公众号 小红花技术领袖俱乐部公众号二维码
视频号 小红花技术领袖俱乐部视频号二维码