#researchers

安全攻防 None

被劫持的npm和Go包使用VS Code任务部署Python Infostealer

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to dep

npm packages and

2026-06-29 info@thehackernews.com (The Hacker News)

智能AI None

人工智能研究人员继续离开谷歌，转向竞争对手

Top AI researchers Jonas Adler and Alexander Pritzel are leaving Google for Anthropic, following departures from top sci

and Top researchers

2026-06-25 Amanda Silberling, Lucas Ropek

安全攻防 None

冬虫夏草 CI/CD 缺陷使 300 多个 GitHub 存储库遭受供应链攻击

Cybersecurity researchers have flagged a new class of CI/CD workflow weakness that allows attackers to hijack workflows

and The Cybersecurity

2026-06-24 info@thehackernews.com (The Hacker News)

科技头条 None

来自太空的神秘重复无线电信号的来源已被识别

Researchers say the discovery could be a “Rosetta stone” for cosmic signals。

Researchers say the

2026-06-23 Ritsuko Kawai

安全攻防 None

研究人员详细介绍了 Dify 中的 DifyTap 缺陷，该缺陷可能会暴露跨租户的 AI 聊天

Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic workflow platfo

have vulnerabilities Cybersecurity

2026-06-22 info@thehackernews.com (The Hacker News)

科技头条 None

科学家发明了一种用超声波冲泡浓缩咖啡的方法——无需热水

Researchers have demonstrated they can make coffee comparable to conventional espresso using ultrasonic waves。Because th

Researchers have demonstrated

2026-06-20 Javier Carbajal

安全攻防 None

不可修补的“usbliter8”漏洞破坏了 Apple A12 和 A13 SecureROM 启动链

Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code

code the Security

2026-06-20 info@thehackernews.com (The Hacker News)

开发者生态 None

最有前途的埃博拉疫苗已被搁置 15 年

Years after initial tests, researchers are now racing to see if a vaccine developed in 2011 can help fight the current B

Years after initial

2026-06-19 Isabella Ward

安全攻防 None

INC 勒索软件将成为 2026 年主要的 RaaS 威胁，自 2023 年以来已有 830 多名受害者

Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to

the INC ransomware

2026-06-18 info@thehackernews.com (The Hacker News)

智能AI None

使用人工智能帮助医生诊断影响儿童的罕见遗传病

Researchers used an OpenAI reasoning model to help diagnose rare diseases, identifying 18 new diagnoses in previously un

Researchers used OpenAI

2026-06-18 OpenAI博客

安全攻防 None

恶意 JetBrains 插件通过 Chrome 扩展捕获聊天机器人聊天窃取 AI API 密钥

Cybersecurity researchers have flagged a "coordinated malware campaign" on the JetBrains Marketplace that has published

and Cybersecurity researchers

2026-06-17 info@thehackernews.com (The Hacker News)

安全攻防 None

新的 Rokarolla Android 恶意软件窃取 PIN、短信代码和加密钱包资金

Security researchers at Zimperium's zLabs have documented a new Android banking trojan, Rokarolla, that targets 217 bank

and banking Security

2026-06-16 info@thehackernews.com (The Hacker News)

安全攻防 None

朝鲜黑客正在将开发人员工具变成恶意软件传播渠道

Cybersecurity researchers have flagged two malicious cyber campaigns that exhibit similarities with a persistent North K

campaigns threat Cybersecurity

2026-06-16 info@thehackernews.com (The Hacker News)

安全攻防 None

Sniper Dz 诈骗通过虚假 Facebook 优惠和浏览器警报瞄准 MENA 用户

Cybersecurity researchers have disclosed details of fraudulent activity targeting users across the Middle East and North

and fraudulent accounts

2026-06-15 info@thehackernews.com (The Hacker News)

智能AI None

人工智能代理如何保护电动汽车充电器

An AI agent system proposed by researchers in Spain promises to prevent energy theft and damage to EV chargers, as well

energy agent system

2026-06-13 Fernanda González

安全攻防 None

LangGraph 缺陷链使自托管 AI 代理面临远程代码执行

Cybersecurity researchers have disclosed details of three now-patched security flaws impacting LangGraph, including a cr

LangGraph could Cybersecurity

2026-06-12 info@thehackernews.com (The Hacker News)

安全攻防 None

代理劫持攻击诱骗人工智能编码代理运行恶意代码

Cybersecurity researchers have described what they say is a new class of attack that can trick artificial intelligence (

attack can error

2026-06-12 info@thehackernews.com (The Hacker News)

智能AI None

网络安全研究人员对《人类寓言》的护栏并不满意

Cybersecurity researchers are complaining that Anthropic's new model Fable has guardrails that are too strict for any cy

are that Cybersecurity

2026-06-10 Lorenzo Franceschi-Bicchierai

安全攻防 None

与中国相关的 JDY 僵尸网络扩展到 1,500 多台用于网络侦察的设备

Cybersecurity researchers have warned of a "resurgence and expansion" of JDY, a covert network associated with China-nex

and JDY office

2026-06-10 info@thehackernews.com (The Hacker News)

安全攻防 None

protobuf.js 中的六个 Proto6 漏洞使 Node.js 应用程序遭受 RCE 和 DoS 攻击

Cybersecurity researchers have flagged half a dozen vulnerabilities in protobuf。

protobuf and could

2026-06-10 info@thehackernews.com (The Hacker News)