1
因 AI 生成大量低质漏洞报告，苹果限制安全研究人员漏洞提交数量
AI 批量生成低质漏洞报告，苹果收紧提交流程，安全研究迎来新变局
IT之家 8 月 2 日消息，苹果已限制安全研究人员向其内部安全团队提交潜在软件漏洞的数量，因为越来越多人借助人工智能模型寻找所谓的安全风险，导致公司收到海量漏洞报告。 这家总部位于美国加州库比蒂诺的科技巨头向《金融时报》表示，今年 6 月，公司调整了漏洞提交流程，以应对激增的报告数量。苹果称，其审…
2
Ask HN: Are other OS maintainers being spammed with Security Vulnerabilities?
开源维护者被琐碎安全漏洞报告淹没，催更施压引发社区共鸣，如何应对成焦点。
I'm being hit with small, nitpick security vulnerabilities, like being able to IDOR profile images for other users on a self-hosted software. Then the…
3
We scanned 10 well-known sites with our security tool. Here's what we found.
用安全工具扫描10个知名网站，发现卫报仅得C级72分，结果直白无修饰。
A few weeks ago I shipped SecURL — a passive external security posture tool I'd been building on and off for longer than I care to admit. The pitch is…
4
OpenClaw Got Safer in Public
GitHub上87%的Critical安全报告是无效的，OpenClaw在公共场景下的安全性改进值得关注。
Article URL: https://openclaw.ai/blog/openclaw-security-in-public Comments URL: https://news.ycombinator.com/item?id=48416502 Points: 1 # Comments: 0
5
"The AI did it" won't save you when EU regulators come knocking
EU新规下，“AI干的”不再是挡箭牌，24小时内不报告漏洞将面临重罚。
The EU Cyber Resilience Act has been on everyone's "we'll deal with it later" list since it entered into force in December 2024. Later is arriving: vu…
6
New HackerOne Signal Requirement for Vulnerability Reports
Node.js 提高 HackerOne 报告门槛：新研究者须通过 Slack 联系安全团队，应对低质量报告激增。