Aggregator

小米 Q1 财报：总营收 991 亿元，经调整净利润 61 亿元；星巴克试用 AI 清点糖浆瓶库存却屡屡出现「幻觉」；美团跑腿发布 Skill 接入 AI Agent 生态

高通与字节跳动达成人工智能芯片交易据知情人士透露，高通公司已与TikTok母公司字节跳动达成协议，为人工智能数据中心供应芯片，这标志着这家试图从智能手机处理器扩展到人工智能基础设施的公司取得了一场关键

2026年05月26日（現地時間）、米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。

Ahead of global elections, we’re helping people access information, supporting cyber defenders, and increasing AI transparency

Warp uses GPT-5.5 and OpenAI models to coordinate coding agents across local, cloud, and open-source development workflows.

OpenCATS 0.9.7.4 - SQL Injection

Realtek rtl819x - Local Privilege

MeiG Smart FORGE_SLT711 - OS Command Injection

scramble - Remote Code Execution

EspoCRM 9.3.3 - SSRF

Casdoor 3.54.1 - Arbitrary File Write via Path Traversal

Linux Kernel - Local Privilege Escalation

Casdoorには、パストラバーサルの脆弱性が存在します。

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

构建机场全域纵深防护体系。

A threat actor using the alias Sorb claims to be selling a database allegedly belonging to Tripocity, a UK B2B transport-management company specializing in coach and minibus travel across the UK and Europe.

Мобам пришлось убивать друг друга на благо науки.

A vulnerability was found in XenSource Xen. It has been declared as problematic. Affected is an unknown function. Executing a manipulation can lead to information disclosure (Kernel Memory). This vulnerability is tracked as CVE-2015-8553. The attack is restricted to local execution. No exploit exists.

A vulnerability, which was classified as critical, has been found in HylaFAX Enterprise Web Interface and AvantFAX. Affected is an unknown function. The manipulation leads to code injection. This vulnerability is referenced as CVE-2025-1782. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.