Aggregator

看雪论坛作者ID：孤木落

AI 模型的解题水平仍不及顶尖数学家。这项测试隶属 First Proof 项目，旨在评估 AI 解决复杂数学难题的能力。研究人员向 4 款 AI 系统提出 10 道科研级数学难题，再由相关数学领域的匿名专家评审团对作答结果进行打分。这次测试首次同时满足三大核心标准：题目均为前沿科研级数学问题、所有题目从未出现在模型训练数据中、由专业数学家评阅。10 名来自不同数学细分领域的研究人员，各自拿出一道本人研究过程中已解答但尚未公开发表的原创题目。这次测试中，各大推理模型依然频繁出现幻觉问题，这也是大语言模型的通病。而且所有 AI 作答在文献引用方面都“严重缺失”，全程没有标注来源。

SCTF落幕，恭喜dda_com战队！

Врачи понимали серьёзность ситуации, но компьютер строго запретил им вмешиваться.

A vulnerability, which was classified as problematic, has been found in CodePeople Form Builder CP Plugin up to 1.2.46 on WordPress. Affected is an unknown function of the component Configuration Handler. Performing a manipulation results in cross site scripting. This vulnerability is known as CVE-2026-9278. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in WP Go Maps Plugin up to 10.0.9 on WordPress. This impacts an unknown function of the component REST Endpoint. Such manipulation of the argument address/description leads to information disclosure. This vulnerability is traded as CVE-2026-8386. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in flippercode WP MAPS PRO Plugin up to 6.1.0 on WordPress. This affects an unknown function of the component AJAX Action Handler. This manipulation causes improper privilege management. This vulnerability appears as CVE-2026-8935. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in WP Go Maps Plugin up to 10.0.9 on WordPress. The impacted element is an unknown function. The manipulation of the argument title/category/address/description results in information disclosure. This vulnerability is reported as CVE-2026-8385. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

绝大多数企业都遭遇过云安全事件，而这类事故的共性并非源于黑客的高超技术，而是简单的配置失误。

Government departments find hundreds of vulnerabilities after testing frontier models

特朗普政府发布针对国家安全系统的网络安全国家政策

近30万华裔用户或有希望获赔

Arch Linux官方建议用户仅信任更新频繁且有活跃社区维护的项目，并查阅受影响软件包列表及入侵指标。

速修复