#Researchers

安全攻防 None

protobuf.js 中的六个 Proto6 漏洞使 Node.js 应用程序遭受 RCE 和 DoS 攻击

Cybersecurity researchers have flagged half a dozen vulnerabilities in protobuf。

protobuf and could

2026-06-10 info@thehackernews.com (The Hacker News)

安全攻防 None

研究人员构建了完全在本地开放权重模型上运行的自我复制人工智能蠕虫

University of Toronto researchers have built and tested a proof-of-concept AI-driven computer worm that uses a locally h

and without University

2026-06-09 info@thehackernews.com (The Hacker News)

安全攻防 None

Linux 内核单字符缺陷可实现本地根访问，漏洞现已公开

Security researchers have published a detailed, working exploit for a Linux kernel use-after-free that lets an unprivile

and kernel Security

2026-06-09 info@thehackernews.com (The Hacker News)

安全攻防 None

UNC3753 在美国数据盗窃勒索活动中使用了语音钓鱼和物理入侵

Cybersecurity researchers have disclosed details of a financially motivated data theft extortion campaign that has targe

and has Google

2026-06-08 info@thehackernews.com (The Hacker News)

智能AI None

新的提取工艺如何释放世界锂资源

Researchers say they’ve found a new way to extract lithium, a crucial metal used in the lithium-ion batteries that power

and new lithium

2026-05-28 Casey Crownhart

安全攻防 None

恶意 npm 包通过 GitHub 从 Claude AI 用户目录窃取文件

Cybersecurity researchers have discovered a new malicious package on the npm registry that comes with information steali

the package Cybersecurity

2026-05-27 info@thehackernews.com (The Hacker News)

安全攻防 None

Gitea漏洞未经认证暴露私有容器镜像

Cybersecurity researchers have disclosed a security flaw in Gitea, an open-source, self-hosted platform for version cont

Gitea Cybersecurity researchers

2026-05-27 info@thehackernews.com (The Hacker News)

开发者生态 None

美国研究人员与外国合作者合作面临新的限制

【HN用户评论摘要】 This could be understandable if some rationale was provided, but it's worse than that:> Neither agency has pu

new researchers They

2026-05-22 ceejayoz

安全攻防 None

Megalodon GitHub 攻击通过恶意 CI/CD 工作流程瞄准 5,561 个存储库

Cybersecurity researchers have disclosed details of a new automated campaign called Megalodon that has pushed 5,718 mali

bot that GitHub

2026-05-22 info@thehackernews.com (The Hacker News)

安全攻防 None

Showboat Linux 恶意软件利用 SOCKS5 代理后门攻击中东电信

Cybersecurity researchers have disclosed details of a new Linux malware dubbed Showboat that has been put to use in a ca

Linux Showboat Cybersecurity

2026-05-21 info@thehackernews.com (The Hacker News)

智能AI None

下载：在线安全的未来和气候技术的重要支点

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the wor

the going researchers

2026-05-21 Thomas Macaulay

智能AI None

科技研究人员就网络安全的未来起诉特朗普政府

Since its earliest days back in office, the Trump administration has been going after researchers who study and try to c

and its back

2026-05-21 Eileen Guo

安全攻防 None

已有 9 年历史的 Linux 内核缺陷可在主要发行版上执行 root 命令

Cybersecurity researchers have disclosed details of a vulnerability in the Linux kernel that remained undetected for nin

vulnerability that Cybersecurity

2026-05-21 info@thehackernews.com (The Hacker News)

安全攻防 None

Webworm 使用 Discord 和 MS Graph API 部署 EchoCreep 和 GraphWorm 后门

Cybersecurity researchers have flagged fresh activity from a China-aligned threat actor known as Webworm in 2025, deploy

Webworm and Cybersecurity

2026-05-20 info@thehackernews.com (The Hacker News)

安全攻防 None

Trapdoor Android 广告欺诈计划使用 455 个应用程序每天发出 6.59 亿次出价请求

Cybersecurity researchers have disclosed details of a new ad fraud and malvertising operation dubbed Trapdoor targeting

and fraud Android

2026-05-19 info@thehackernews.com (The Hacker News)

安全攻防 None

四个 OpenClaw 缺陷导致数据盗窃、权限升级和持久化

Cybersecurity researchers have disclosed a set of four security flaws in OpenClaw that could be chained to achieve data

flaws data and

2026-05-15 info@thehackernews.com (The Hacker News)

安全攻防 None

已有 18 年历史的 NGINX 重写模块缺陷导致未经身份验证的 RCE

Cybersecurity researchers have disclosed multiple security vulnerabilities impacting NGINX Plus and NGINX Open, includin

impacting NGINX that

2026-05-14 info@thehackernews.com (The Hacker News)

安全攻防 None

Ollama 越界读取漏洞导致远程进程内存泄漏

Cybersecurity researchers have disclosed a critical security vulnerability in Ollama that, if successfully exploited, co

Ollama Cybersecurity researchers

2026-05-10 info@thehackernews.com (The Hacker News)

安全攻防 None

新的 Linux PamDOORa 后门使用 PAM 模块窃取 SSH 凭据

Cybersecurity researchers have disclosed details of a new Linux backdoor named PamDOORa that's being advertised on the R

backdoor that Cybersecurity

2026-05-08 info@thehackernews.com (The Hacker News)

开发者生态 None

毒液和辣椒是杀死耐药细菌的关键

Researchers have developed three new antibiotics from scorpion venom and habanero peppers to combat tuberculosis and oth

and Researchers have

2026-05-08 Fernanda González