Aggregator

全文共3066字，阅读大约需6分钟。人们愈发对数字孪生改变科学研究、工业实践和日常生活诸多方面的潜力产生兴趣。

全文共2308字，阅读大约需4分钟。一恶意网络攻击者利用SQL注入漏洞破坏系统SQL注入（即SQLi）漏洞是存在于商业软件产品中的持久型漏洞。

某黑产组织最新攻击样本利用BYVOD技术的详细分析

父亲节是每年六月的第三个周日，也就是今天。我没买礼物，就开启夸夸模式吧。

山寨 Wireshark

What a week! The NDC opening keynote and 3D printing talk both went off beautifully, the latter being the first time for 11-year old Elle on stage:

And the pro shots are really cool 😎 pic.twitter.com/ud7ad0pF1x

— Troy Hunt (@troyhunt) June 15, 2024

Videos of both will

嘿，伙计们，今天七夜要给你们介绍一个超酷的小工具，它叫做darkPulse。

当前，基于大模型的软件智能化开发已经成为学术界和产业界共同关注的热点话题。

一周情报速览

A 22-year-old man from the United Kingdom arrested this week in Spain is allegedly the ringleader of Scattered Spider, a cybercrime group suspected of hacking into Twilio, LastPass, DoorDash, Mailchimp, and nearly 130 other organizations over the past two years.

SolarWinds patched a High severity vulnerability in Serv-U File Transfer Solution that affects multiple Serv-U products in FTP Server, Gateway and MFT Server versions 15.4. This vulnerability has been assigned with CVE-2024-28995 and severity as 8.6 (High).

一套完善的Linux通用应急响应脚本，其实对防御方是非常重要的，可以快速检测主机的一些异常信息。脚本地址，请看文末。

This post highlights how the GitHub Copilot Chat VS Code Extension was vulnerable to data exfiltration via prompt injection when analyzing untrusted source code. GitHub Copilot Chat GitHub Copilot Chat is a VS Code Extension that allows a user to chat with source code, refactor code, get info about terminal output, or general help about VS Code, and things along those lines. It does so by sending source code, along with the user’s questions to a large language model (LLM).

探讨了跨上下文场景中图提示学习（Graph Prompt Learning）面临的后门威胁。