They also attempted to steal API keys via an exploit that was patched over two months later
【数据】攻击者在漏洞被修复两个月前尝试窃取API密钥，这表明安全响应存在明显延迟。这种延迟可能使攻击者有足够时间利用漏洞，强调了及时安全更新的重要性，以及AI代理可能利用这种时间窗口进行攻击。
7 Matching Annotations
- Last 7 days
-
simonwillison.net simonwillison.net
-
- Sep 2026
-
-
ederal leaders risk falling victim to a modern cyber version of the McNamara Fallacy. Named for Defense Secretary Robert McNamara’s reliance on quantifiable metrics during the Vietnam War, it describes managing by what is easiest to count (e.g., patches applied, tickets closed and average CVSS scores) while overlooking operational reality.
What is "operational reality"? I think for businesses, it is staying in the "green," so checking the boxes for programs and policies. Whereas, in the scope of the "defender's dilemma," the defenders users these programs and policies to their advantage.
-
- Jun 2026
-
-
Vulnerability reports, on their own, do not protect anyone. The value comes from validating the issue, understanding its impact, developing and testing a patch, coordinating disclosure, and helping teams deploy the fix.
大多数人认为发现并报告漏洞本身就提供了安全价值，但作者明确表示，单纯的漏洞报告并不能保护任何人。这一观点挑战了安全行业普遍重视漏洞数量而非修复质量的共识，强调了从发现到修复的完整流程才是真正有价值的部分。
-
-
www.anthropic.com www.anthropic.com
-
The bottleneck in cybersecurity is now verifying, disclosing, and patching the large numbers of vulnerabilities that Mythos-class models can surface.
大多数人认为网络安全的主要挑战是发现漏洞，但作者认为真正的瓶颈在于修复和修补这些漏洞，这颠覆了传统网络安全优先级的认知。
-
- Apr 2026
-
-
select known-vulnerable dependency versions 50% more often than humans.
这一统计洞察颠覆了“AI写代码更安全”的迷思。AI代理在优化代码功能性时，往往以牺牲安全性为代价，倾向于选择存在已知漏洞的旧版本依赖。这反映出当前AI模型在训练时对安全维度的忽视，也警示我们在AI辅助开发流程中必须强制引入自动化的安全卡点。
-
- Jul 2020
-
-
Reher, D. S., Requena, M., de Santis, G., Esteve, A., Bacci, M. L., Padyab, M., & Sandström, G. (2020). The COVID-19 pandemic in an aging world [Preprint]. SocArXiv. https://doi.org/10.31235/osf.io/bfvxt
-
- May 2020
-
www.thelancet.com www.thelancet.com
-
Cortese, S., Asherson, P., Sonuga-Barke, E., Banaschewski, T., Brandeis, D., Buitelaar, J., Coghill, D., Daley, D., Danckaerts, M., Dittmann, R. W., Doepfner, M., Ferrin, M., Hollis, C., Holtmann, M., Konofal, E., Lecendreux, M., Santosh, P., Rothenberger, A., Soutullo, C., … Simonoff, E. (2020). ADHD management during the COVID-19 pandemic: Guidance from the European ADHD Guidelines Group. The Lancet Child & Adolescent Health, S2352464220301103. https://doi.org/10.1016/S2352-4642(20)30110-3
-