1
微软 Copilot AI 高危漏洞曝光：可泄露验证码、邮件等敏感数据
微软 Copilot 高危漏洞曝光，攻击者可窃取验证码、邮件等敏感数据，AI 安全再敲警钟。
IT之家 6 月 18 日消息，科技媒体 Ars Technica 于 6 月 16 日发布博文，报道称微软 Copilot 存在“关键”（critical）级漏洞， 攻击者可获取用户包括 2FA 验证码、邮件主题、会议详情等敏感数据。 该漏洞追踪编号为 CVE-2026-42824，由网络安全公司…
2
Critical Copilot vulnerability allowed hackers to seal 2FA code from users
Copilot搜索功能被利用窃取双重验证码，企业需警惕AI助手安全风险。
SearchLeak exploit shows why the industry's approach to LLM security fails over and over.
3
Miasma worm, Part 2: how a GitHub token survived a full machine rebuild and hijacked my repos from an Azure IP
开发者必看：GitHub token在机器重建后仍存活，黑客利用Azure IP劫持仓库，揭示2FA的隐蔽盲区。
How the lockout ended, the entry vector GitHub confirmed, the stealth commits I missed at first, and the cleanup playbook for anyone hit by the same w…
4
Ask HN: What are your digital end-of-life plans?
帮你规划数字遗产，确保亲人在你需要时能轻松访问所有账户、密码和重要文件，告别后顾之忧。
My biggest digital end-of-life concern is ensuring that my next of kin can access all of my accounts, devices, and important information. I’ve set up …
5
The newest Instagram “exploit” is the goofiest I've seen
揭露Meta旗下Instagram账户恢复流程中的奇葩漏洞，2FA形同虚设，安全防线令人大跌眼镜。
Article URL: https://www.0xsid.com/blog/meta-account-takeover-fiasco Comments URL: https://news.ycombinator.com/item?id=48359102 Points: 673 # Comment…
6
Hackers duped Meta AI support chatbot to steal celebrity Instagram accounts
Meta AI支持聊天机器人可重置用户密码，却存在绕过2FA且未验证身份的安全漏洞，谨慎使用
Pricey Instagram handles were stolen and resold before Meta patched the exploit.
7
That Email From 'Microsoft' Is Actually a Scam
教你识破假冒微软官方地址的钓鱼邮件，守住2FA验证码等敏感信息。
Scammers are somehow sending messages from a legitimate Microsoft email address.