+ +## 动态 +- 2023/05/27 [CPM-Bee](https://github.com/OpenBMB/CPM-Bee) 发布了！ +- 2023/04/12 CPM-Ant 可以在[HuggingFace Transformers](https://huggingface.co ...

开发者广泛使用的Axios HTTP客户端库这一JavaScript组件最近遭到黑客攻击，通过被入侵的账户分发恶意软件。 攻击者利用npm上被劫持的账户进行攻击。npm是Node.js的默认包管理器，这是一个允许开发者共享、安装和管理JavaScript项目代码的工具，被用来分发恶意软件。

The popular HTTP client known as Axios has suffered a supply chain attack after two newly published versions of the npm package introduced a malicious dependency that delivers a trojan capable of ...

Axios, a hugely popular JavaScript library with 100 million weekly downloads, has been hit by a critical supply chain attack. In a recurring open-source security crisis, developers unknowingly pulled ...

What is Follina MSDT Windows Zero-Day (CVE-2022-30190) Vulnerability? Before we get to the steps to fix the vulnerability, let’s understand what the exploit is all about. Known with the CVE-2022-30190 ...

Dave Bittner: Hello everyone, and welcome to the CyberWire's "Research Saturday." I'm Dave Bittner, and this is our weekly conversation with researchers and analysts tracking down the threats and ...

During the past fifteen business days, Huntress analysts have observed increased threat activity involving several notable techniques. One case involved a malicious AnyDesk installer, which initially ...

A recently disclosed security flaw in Gladinet CentreStack also impacts its Triofox remote access and collaboration solution, according to Huntress, with seven different organizations compromised to ...

do me a favor and try something for me will you on your Windows computer open up the start menu and type in I express. exe and once you hit enter or click on that best match don't worry you're not ...

A new warning as we head into the weekend, that a “global attack” is now targeting Windows users in multiple countries around the world. The campaign is stupidly simple, but it hammers home the risk ...