1
2
超 630GB 文件遭黑客兜售，苹果特斯拉核心供应商塔塔电子证实数据泄露
一键查询你的邮箱或密码是否在数据泄露事件中暴露，覆盖超百亿条泄露记录，安全必备。
IT之家 6 月 23 日消息，塔塔电子是印度一家电子与半导体制造商，同时也是苹果、特斯拉等多家科技巨头的核心供应商。在一批据称源自该公司的文件现身黑客论坛数周后，该企业证实遭遇了数据泄露事件。 该黑客论坛发布的售卖帖宣称，手中持有逾 630GB 据称从塔塔电子窃取的数据，内含超 20.43 万份文…
3
detflow: A Detection-Engineering Copilot You Can pip install
pip 安装即可使用的检测工程副手，专为不熟悉 Sigma 语法的分析师加速规则编写。
TL;DR 🚀 I shipped detflow to PyPI — an open-source, vendor-neutral detection-engineering copilot . It does the four things I found myself re-implement…
4
On the Salience of Low-Probability Tokens for AI-Generated Text Detection: A Multiscale Uncertainty Perspective
ICML 2026接收！提出利用低概率token的多尺度不确定性来检测AI生成文本，视角新颖，方法扎实。
arXiv:2606.02158v1 Announce Type: new Abstract: AI-generated text increasingly blends with human writing, raising practical risks such as misinformati…
5
Show HN: Hookwarden – npx tool to find and fix webhook HMAC bugs (JS/TS/Py/PHP)
开源的命令行工具，自动扫描并修复Webhook HMAC签名漏洞，已验证45个流行项目，支持JS/TS/Py/PHP。
Article URL: https://github.com/Hookwarden/hookwarden Comments URL: https://news.ycombinator.com/item?id=48256666 Points: 1 # Comments: 0
6
Show HN: Mcpaudit – static security scanner for MCP servers
零配置扫描MCP服务器安全，无需联网和API密钥，一键检测插件风险。
Article URL: https://github.com/allenwu-blip/mcpaudit Comments URL: https://news.ycombinator.com/item?id=48240714 Points: 1 # Comments: 0
7
Security Checks with Local LLMs
本地跑大模型做安全检查？用qwen-coder-32k在MacBook M5上实测，轻量高效还保护隐私。
Continuing articles AI-Powered Repository Security Check with Antigravity Workflow and https://dev.to/gdg/how-to-build-a-custom-ai-quality-gate-on-clo…