Aggregator

呐，看看专业人士是如何做的？

Following OpenAI’s own incident, Anthropic reviewed its own evaluations and found three cases of Claude hacking external companies.

The post Anthropic says its AI accidentally hacked three companies during safety tests appeared first on CyberScoop.

亚马逊员工发现，公司因AI部署失误、缺乏支出管控，出现多起成本严重超支的情况，其代价被形容为 “高得堪称灾难性”。知情人士称，高级工程师周二在一次员工会议上告诉同事，把部分任务从传统编程改为由AI模型

baserCMSユーザー会が提供するBaserCMSには、CSVファイルインジェクションの脆弱性が存在します。

特斯拉第 1000 万台电动车下线；高通计划涨价；马斯克称人类 5 至 7 年后就能登陆火星

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

One of Anthropic's Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where it ran on 15 real systems and stole credentials from a security vendor. It was one of three incidents affecting real companies. [...]

A vulnerability was found in nodejs Node.js up to 22.23.1/24.18.0/26.5.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Permission Model. The manipulation results in permission issues. This vulnerability was named CVE-2026-58039. The attack may be performed from remote. There is no available exploit.

小米汽车举行 SKYNOMAD 小米澎程技术发布会7 月 30 日，小米汽车举行 SKYNOMAD 小米澎程技术发布会，正式发布旗下第二个汽车产品系列「小米澎程」。此次发布会公布了面向大空间 SUV

音乐流媒体服务 Spotify 正在为其手机应用增加一种新模式，面向喜欢在跑步时听音乐的人群。新的跑步模式会根据跑步的不同阶段播放歌曲，并根据你的偏好和节奏选择曲目。付费订阅用户可以在 “健身中心”中

亚马逊旗下自动驾驶公司Zoox周三获得美国监管机构批准，可有限规模商业部署其自动驾驶出租车（Robotaxi），成为美国自动驾驶出行行业首家获得此类许可的企业。美国国家公路交通安全管理局(NHTSA)

从诱捕溯源到自动阻断

GreyNoise Tactics gives anyone running a Deception Sensor visibility into what adversaries do after initial compromise, automatically mapping qualifying sessions to the MITRE ATT&CK framework.

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. It has been classified as critical. Affected is an unknown function of the component GOOSE Subscriber. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2026-66720. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in MZ Automation libiec61850 up to 1.6.1 and classified as critical. This impacts an unknown function of the component GOOSE parser. Executing a manipulation can lead to off-by-one. This vulnerability is handled as CVE-2026-66369. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1 and classified as critical. This affects an unknown function of the component MMS BER decoder. Performing a manipulation results in out-of-bounds read. This vulnerability is known as CVE-2026-63550. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in MZ Automation lib60870 up to 2.4.0. The impacted element is the function InformationObject_ParseObjectAddress of the component IEC 60870-5-104 Protocol Handler. Such manipulation leads to heap-based buffer overflow. This vulnerability is traded as CVE-2026-63033. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in MZ Automation lib60870 up to 2.4.0. The affected element is the function TestCommand_getFromBuffer. This manipulation causes heap-based buffer overflow. This vulnerability appears as CVE-2026-61893. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.