CISA承包商因管理员权限访问代码平台引发数据泄露，立法者紧急要求解释——政府数据安全再亮红灯。
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecur…
从一枚恶意VS Code扩展说起，揭秘GitHub内部3800个仓库泄露的供应链攻击链条，开发者必看的安全警示。
GitHub首席安全官亲述内部仓库遭非法入侵的完整调查过程
If any impact is discovered, customers will be notified via established incident response and notification channels. The post Investigating unauthoriz…
npm生态遭大规模供应链攻击，317个包在22分钟内被植入恶意代码，影响数百万月下载量。
Article URL: https://safedep.io/mini-shai-hulud-strikes-again-314-npm-packages-compromised/ Comments URL: https://news.ycombinator.com/item?id=4818936…
官方快讯：GitHub正调查内部仓库遭未授权访问事件，安全态势引关注。
https://xcancel.com/github/status/2056884788179726685 Comments URL: https://news.ycombinator.com/item?id=48201316 Points: 548 # Comments: 298
黑客盗走Grafana开源代码，公司硬气拒付赎金——代码本公开，勒索成笑话。
The open source project said hackers stole its codebase and threatened to publish its source code if the company did not pay.
首例LLM辅助攻击墨西哥水基础设施，揭示AI武器化新风险。
Article URL: https://smallwarsjournal.com/2026/05/12/ai-cyberattack-critical-infrastructure-mexico-dragos/ Comments URL: https://news.ycombinator.com/…