IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document lures targeting Chinese-speaking individuals. Our analysis of this sample ...

Three supply chain attacks hit npm, PyPI, and Docker Hub between April 21–23, 2026. All three targeted secrets: API keys, cloud credentials, SSH keys, and tokens from developer environments and CI/CD ...

DeepSeek had first drawn the world’s attention to China’s capabilities in AI before it was overtaken by other Chinese labs, but the ...

Attackers published a malicious command-line version of the popular open-source password manager to the npm registry and may ...

Anthropic 最新发了篇博客，标题叫《Building agents that reach production systems with MCP》，翻译过来是： 《构建能触达生产系统的 Agent：MCP 实践指南》。 MCP 最新博客 在我去年 11 月的文章《》和上个月的文章《》、《》中，我一直在阐述一个观点： CLI + Skills 才是 Agent 连接外部系统的正道，因为 MC ...

Cybercriminals are tricking AI into leaking your data, executing code, and sending you to malicious sites. Here's how.

GPT-5.5来了。API定价$5/$30每百万token，GPT-5.4的两倍。 但它并不更烧token。 Sam Altman在公布定价的同一条推文里补了一句："Remember, you will need less tokens per task than 5.4!" 贵一倍，但每个任务token更少——"其实更划算"。OpenAI总裁Greg ...

Learn prompt engineering with this practical cheat sheet covering frameworks, techniques, and tips to get more accurate and ...

根据 Claude Code 的更新日志， /ultrareview 在 4 月 17 日的 v2.1.113 版本中首次加入，4 月 20 日的 v2.1.116 又做了一轮优化（启动速度更快、确认框里新增了 diffstat 统计）。

Web Application Breaches Involve Stolen Credentials. 2.3 Million Bank Logins Are for Sale on the Dark Web Right Now. And Your ...