Aggregator

人工智能初创公司Anthropic正在与Meta进行非常初步的谈判，讨论租用后者算力的可能性。知情人士透露，双方正在洽谈一项潜在规模约为100亿美元的交易。Anthropic于今年6月向Meta提出了

微软CEO纳德拉本周在公司内部发言时批评了AI公司Anthropic，他表示，Anthropic对其AI模型Fable的回答限制过多，认为其频繁拒绝用户请求“毫无道理”。纳德拉周三对参与微软Copil

这次攻击不是孤例。近期多起事件显示，攻击者正频繁利用招聘、代码评审、项目合作等场景，诱导开发者主动运行恶意仓库。

当 AI Agent 的权限系统可以被项目级文件覆写时，打开一个项目就等于交出 shell。

可口可乐乳制品子公司fairlife遭黑客攻击周四，可口可乐公司表示，旗下乳制品子公司fairlife遭到黑客入侵，目前已暂停在美国的生产业务。可口可乐确认，一名第三方人士未经授权入侵了fairlif

消息称字节新一代豆包手机备货数十万台；微软正在研发一款类 Mythos 人工智能漏洞检测工具；苹果与 OpenAI 法律战升级；「中国天眼」首次揭示低能宇宙线起源新证据

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

微软公司正在筹备一款新的人工智能漏洞检测工具，类似于人工智能公司Anthropic旗下的Mythos模型，以满足企业日益增长的网络安全防御支出需求。一位知情人士透露，这款产品名为Product Per

A vulnerability was found in tarteaucitron.js 1.13.1/1.20.1/1.22.0/1.29.0. It has been classified as problematic. Affected by this issue is the function tarteaucitron.cookie.purge of the file tarteaucitron.js of the component Cookie. Performing a manipulation results in cookie without 'httponly' flag. This vulnerability is reported as CVE-2026-49977. The attack is possible to be carried out remotely. No exploit exists.

供应链数据主权竞争将涉及法律框架、标准制定、基础设施和联盟体系的系统性博弈， 构建⾃主可控的供应链数据基础设施将成为各国最紧迫的战略任务。

萨赫勒地区恐怖主义及2026年安全态势分析报告——基于开源情报的综合分析欧深特公司四川成都2026年7月

A vulnerability was found in Adobe Acrobat Reader and classified as critical. Affected by this vulnerability is an unknown functionality of the component File Handler. Such manipulation leads to heap-based buffer overflow. This vulnerability is documented as CVE-2026-48373. The attack can be executed remotely. There is not any exploit available.

A vulnerability has been found in IBM Langflow up to 1.10.0 and classified as critical. Affected is an unknown function of the component APIRequest. This manipulation causes path traversal. This vulnerability is registered as CVE-2026-8859. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability, which was classified as very critical, was found in IBM Langflow up to 1.10.0. This impacts an unknown function of the component Langflow service. The manipulation results in permission issues. This vulnerability is cataloged as CVE-2026-8635. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in IBM Security Verify. This affects the function error_response of the component Error Message Handler. The manipulation leads to information disclosure. This vulnerability is listed as CVE-2026-8861. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as critical was found in IBM Langflow OSS up to 1.10.0. The impacted element is an unknown function of the component Webhook Authentication. Executing a manipulation of the argument UUID can lead to improper authentication. This vulnerability is tracked as CVE-2026-8505. The attack can be launched remotely. No exploit exists.

A vulnerability classified as critical has been found in IBM Langflow up to 1.10.0. The affected element is the function exec of the file /api/v1/validate/code of the component Code Validation API Endpoint. Performing a manipulation results in sandbox issue. This vulnerability is identified as CVE-2026-8481. The attack can be initiated remotely. There is not any exploit available.