Launching an HFT crypto bot requires VPS hosting, exchange API access, low-latency infrastructure, and risk controls.

作者：李宝珠编辑：yudi封面图来源：HKUDS GitHub转载请联系本公众号获得授权，并标明来源HyperAI 的教程板块已上线「Nanobot：超轻量级个人 AI 助手」，完成环境部署，采用本地 vLLM 部署的 GLM-4.7-Flash ...

ThreatsDay Bulletin: active exploits, supply chain attacks, AI abuse, and stealth data risks observed this week.

A multi-tenant authentication gap in Microsoft’s AI operations agent exposed live command streams, internal reasoning, and ...

Yet another npm supply-chain attack is worming its way through compromised packages, stealing secrets and sensitive data as ...

金融数据长期以来是一个高度封闭的市场，少数几家公司掌握着定价权，把“信息”变成“特权”。而开源运动正在一点一点地把这种特权往外推。OpenBB率先喊出“开源彭博”的口号，AkShare深耕中国市场数据，Fincept Terminal则站在了AI ...

A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts.

开源Python笔记本平台Marimo存在一个严重的预身份验证远程代码执行漏洞（CVE-2026-39987，评分9.3/10），影响0.23.0之前的所有版本。Sysdig威胁研究团队发现，该漏洞在公开披露后不到10小时即遭到实际利用。攻击者无需任何凭证，仅需向暴露的服务器发送单一连接请求，即可获得完整的交互式Shell并执行任意系统命令。Marimo已发布修复版本0.23.0，建议用户立即更新 ...

Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.

Cloudflare 在其 Agents Week 活动中宣布，Sandboxes 和 Cloudflare Containers 正式上线，为 AI 代理工作负载提供隔离的持久化 Linux 环境。 该服务于去年 6 ...

Cloudflare has released Sandboxes and Containers into general availability, providing persistent isolated Linux environments ...

该漏洞由Enclave AI研究员Yanir Tsarimi发现。他在一篇博客文章中详细说明了智能体交互内容如何在缺乏适当身份验证控制的情况下被外部访问。该漏洞被追踪编号为CVE-2026-32173，CVSS评分为8.6分，被评定为严重级别。