Tag: Security

Anthropic showed an unreleased Claude chaining exploits across Chrome and major OSes, and Google launched Genie 4; meanwhile the git Apple ships with macOS still trusts the compromised eMudhra certificates, and EDK II disclosed a pre-boot UEFI RCE.Anthropic 披露未发布的 Claude 串起 Chrome 等多平台漏洞链，谷歌发布 Genie 4；macOS 自带 git 仍信任被攻破的 eMudhra 证书，EDK II 曝 UEFI 预启动 RCE。

Anthropic filed its S-1 showing $16.3B H1 revenue and an $80.7B net loss, while Claude's paywall bypass and Cathedral's 12-hour breach claim raised agent-security alarms; agent workflow guides went viral and AVP pitched agent-native version control.Anthropic 递交 S-1，上半年营收 163 亿美元、净亏 807 亿；Claude 绕付费墙、Cathedral 称 12 小时攻入其内网，Agent 工作法刷屏。

OpenAI's discounts poaching Anthropic coding customers and the day-20 Codex reset led the day; in the evening BOSS Zhipin open-sourced Nanbeige4.3-33B and Samsung TVs were found using on-device AI on screenshots for ad targeting.OpenAI 折扣抢 Anthropic 编程客户，Codex 第 20 天重置生效；晚间 BOSS直聘开源 Nanbeige4.3-33B，三星电视被曝靠 AI 截屏投广告。

Moonshot's Kimi K3.1 Pro shipped amid a promo row; the Brotli RCE widened across HTTP stacks; agent tools piled up, and Ruan Yifeng said programming has become unrecognizable.Kimi K3.1 Pro 发布又陷推广争议；Brotli 漏洞扩至 HTTP 栈；Agent 工具扎堆，阮一峰称编程已面目全非。

Anthropic donated Agent Skills and METR exposed gaps in OpenAI's agent monitoring; OpenCode disclosed an MCP sign-in RCE, and pgrust was caught gaming ClickBench.Anthropic 捐出 Agent Skills，METR 揭 OpenAI 监控漏洞；OpenCode 曝 MCP 登录 RCE，pgrust 刷榜被扒。

PHP2Shell confirmed exploited before disclosure, with the LiteLLM poisoning and GitLab perfect-score bug close behind; Claude Duet launches and 1Password lets agents log in without seeing passwords.PHP2Shell 被证实披露前已遭利用，LiteLLM 投毒、GitLab 满分漏洞接连；Claude Duet 发布，1Password 让 agent 免看密码登录。

A CVSS 9.2 RCE hits PHP, eMudhra's CA private keys are cracked in seconds, and the TypeScript compiler is ported to Rust; OpenAI discloses internal agent incidents.PHP 爆 9.2 分 RCE 漏洞、eMudhra CA 私钥被秒破，TS 编译器移植 Rust；OpenAI 公开 agent 内部事故。

About 90% of Claude Code's code is written by Claude and a new DeepSeek V4.1 Flash ships; PostgreSQL 19 is delayed by bugs found in AI review.Claude Code 九成代码由 Claude 自写，DeepSeek V4.1 Flash 新版发布；PostgreSQL 19 因 AI 审出 bug 推迟。

OpenCode-style coding tools and agent context optimization are trending, and XBOW built a Chrome exploit chain with an agent; the new Claude Code and local semantic search are worth watching.OpenCode 式编程工具与 Agent 上下文优化走热，XBOW 用 agent 做出 Chrome 利用链；Claude Code 新版与本地语义搜索值得关注。