仓库在 Python Sink 清单 中把 eval 、 exec 、 execfile 、 os.system 、 os.popen 、 subprocess 、 ctypes.CDLL 、 code.InteractiveInterpreter 等一并列为命令执行类危险点，说明这类函数不只出现在沙箱场景，也常见于代码审计时需要重点排查的位置。

智东西10月14日消息，据The Information援引知情人士透露，OpenAI正在就收购网络安全公司Trail of ...

3 月 24 日，OpenAI 又公布了重磅消息，ChatGPT 支持接入第三方插件，并且一口气上架了 11 个插件。通过这些插件，用户可以用 ChatGPT 购买商品，预定酒店、机票，搜索专业数据等，这大大解放了 ChatGPT ...

I came across a capture of the hacking scene (the Blue Walker scene) from VIVANT Season 2, which was trending with comments ...

Good evening, this is Hottarita.Since it's the first day of the three-day weekend and I didn't have much time, I'm continuing ...

After AI models hacked real companies, hundreds of researchers say the internet itself should be treated as a security ...

Autonomous AI agents can actively locate infrastructure flaws and zero-days to exploit ‘shortcuts’ in assigned tasks.

Ivanti VPN zero-days let attackers gain root access, steal credentials, evade detection, and prepare for wider network ...

Imagine reviewing your Nginx or Cloudflare access logs on a random Tuesday morning and discovering that a machine learning ...

CyberXero, a Russian-speaking threat group, is using common hacking tools and AI to run two distinct campaigns: Common IAB ...

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, ...

Researchers found an exposed server documenting a large-scale gift card fraud operation and two related schemes involving ...