Aggregator
ssrf的一个另类思路
2 months 1 week ago
环境异常 当前环境异常,完成验证后即可继续访问。 去验证
阿里将整合千问与淘宝 推出智能体购物
2 months 1 week ago
阿里将整合千问与淘宝 推出智能体购物据知情人士透露,阿里巴巴正准备推出其AI平台通义千问与在线市场淘宝的整合,这一举措旨在通过对话而非关键字搜索来推动购物。此举将使消费者能够通过千问 App,借由与A
谷歌宣布扩展Gemini API中的文件搜索功能 为开发者带来更完整的多模态RAG能力
2 months 1 week ago
免费下载工具JDownloader遭到黑客攻击 5.6~7日下载该工具的用户请立即查杀
2 months 1 week ago
特朗普政府计划调高H-1B签证工资门槛
2 months 1 week ago
特朗普政府计划调高H-1B签证工资门槛美国特朗普政府计划大幅提高H-1B签证最低工资门槛,一些城市如旧金山的入门级工程师薪资标准将上调近30%至16万2000美元,这意味着聘用外籍人才的成本将增加。据
微软反驳通过CPU瞬时超频提升Win11响应速度是懒惰做法 称苹果也这么做
2 months 1 week ago
雅思9月1日起停止纸笔考试 全部采用机考
2 months 1 week ago
自2026年年中开始,雅思考试将在全球范围内陆续停止纸笔考试,全部采用机考。中国大陆地区的雅思考试将于9月1日起停止纸笔考试、全部采用机考形式。用于英国签证及移民的雅思考试将于7月1日起停止纸笔考试、
25个开源网络安全工具
2 months 1 week ago
发现频道:最近10日的热门排行榜[2026年第19期]
2 months 1 week ago
OTA 升级后续航减 200KM,央视揭新能源汽车「锁电」真相;黄仁勋:别怕 AI,应届生迎来最好时机;微信测试「组合支付」功能 | 极客早知道
2 months 1 week ago
任正非罕见出镜:华为芯片基础技术研究实验室亮相《新闻联播》;苹果 iOS / macOS 27 的 Safari 浏览器将引入 AI 自动整理标签页功能;特斯拉 Model 3 服役 7 年跑了 61 万公里后,实测续航缩水 34.2%;特朗普 T1 手机交付遥遥无期
通用汽车同意支付1275万美元解决加州司机隐私诉讼
2 months 1 week ago
通用汽车已与由加州总检察长邦塔领导的执法机构达成了一项与隐私相关的和解。早在2024年,纽约时报报道称,包括通用汽车在内的汽车制造商正在与保险公司共享其客户的驾驶行为信息,并且一些客户担心他们的保险费
macOS,正在大规模失陷
2 months 1 week ago
攻击macOS的四类手法解读
Welcoming the Costa Rican Government to Have I Been Pwned
2 months 1 week ago
Today, we welcome the 42nd government onboarded to Have I Been Pwned’
Welcoming the Costa Rican Government to Have I Been Pwned
2 months 1 week ago
Today, we welcome the 42nd government onboarded to Have I Been Pwned’s free gov service: Costa Rica.
The CSIRT of the Government of Costa Rica now has access to monitor government domains against the data in HIBP. This enables their national cybersecurity incident response team to identify exposure
Troy Hunt
CVE-2026-41018 | Apache Airflow Providers Elasticsearch up to 6.5.2 Elasticsearch task-log log file
2 months 1 week ago
A vulnerability was found in Apache Airflow Providers Elasticsearch up to 6.5.2. It has been rated as problematic. This affects an unknown function of the component Elasticsearch task-log Handler. The manipulation leads to sensitive information in log files.
This vulnerability is traded as CVE-2026-41018. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is advised.
vuldb.com
CVE-2026-43826 | Apache Airflow Providers OpenSearch up to 1.9.0 OpenSearch task-log log file
2 months 1 week ago
A vulnerability was found in Apache Airflow Providers OpenSearch up to 1.9.0. It has been declared as problematic. The impacted element is an unknown function of the component OpenSearch task-log Handler. Executing a manipulation can lead to sensitive information in log files.
This vulnerability appears as CVE-2026-43826. The attack may be performed from remote. There is no available exploit.
It is recommended to upgrade the affected component.
vuldb.com
优步合作伙伴Avride正因自动驾驶碰撞事故接受调查
2 months 1 week ago
美国国家公路交通安全管理局(NHTSA) 已对 Avride展开调查,这是一家与优步合作的自动驾驶出租车公司,此前该局发现了十几起碰撞事故和一起轻伤事件。该安全监管机构的缺陷调查办公室(ODI) 表示
Vibe Hacking: Two AI-Augmented Campaigns Target Government and Financial Sectors in Latin America
2 months 1 week ago
TrendAI™ Research has identified two emerging threat campaigns—SHADOW-AETHER-040 and SHADOW-AETHER-064—that use agentic AI to drive intrusion operations against government and financial organizations in Latin America, marking these among the first cases we have observed of AI agents executing attacks from initial access to data exfiltration.
Joseph C Chen
威努特赋能数字化医院构建全流程数据安全监测防护体系
2 months 1 week ago
助力医院在数字化进程中稳步发展。