WebSockets JavaScript

DRILLAPP Backdoor Targets Ukraine, Abuses Microsoft Edge Debugging for Stealth Espionage

DRILLAPP JavaScript backdoor targets Ukraine in Feb 2026, abusing Edge debugging features to spy via camera, microphone, and ...

9 天

手把手教你安全“养虾”：OpenClaw极简部署指南

手把手教你安全“养虾”：OpenClaw极简部署指南,服务器,websocket,插件,vm,key,网关 ...

1 天

国家互联网应急中心通报：OpenClaw存在致命漏洞，90%实例可被直接攻击

今天下午朋友圈被安全圈的同行刷屏了——国家网络与信息安全信息通报中心（以下简称“通报中心”）发布了一则关于OpenClaw的风险预警。说实话，看到这份通报的时候我倒吸了一口凉气。不是因为漏洞又多又严重，而是那份“90%实例可被直接攻击”的结论，意味着如果你正在用这个当红的AI智能体框架，大概率已经成了黑客的肉鸡。 OpenClaw是什么？如果你还没听过，简单来说它是一个开源的AI自动化工具，你可以 ...

CPO Magazine

Security Research Finds OpenClaw AI Agent “Trivially Vulnerable” to Hijacking

The Oasis researchers document a vulnerability chain that can be initiated from any website the AI agent (or its user) visits ...

6 天

New PhantomRaven NPM attack wave steals dev data via 88 packages

New attack waves from the 'PhantomRaven' supply-chain campaign are hitting the npm registry, with dozens of malicious packages that exfiltrate sensitive data from JavaScript developers.