译文语言

RT Patrick McKenzie：今天是2026年5月25日。这是我第一次读到一份LLM生成的公开作品，它在专业领域明显具有相关性，且内容足够完整，以至于我并未因缺少人类作者而觉得其实用性受到实质性影响。

Patrick McKenzie于2026年5月25日发表评论称，他首次读到一篇由LLM生成且具有明显专业相关性的公开文章。该文章内容完整，即使没有人类作者，其效用也未受到实质性影响。该评论源自对msuiche博客文章《供应链攻击集群：23万条通报与五种模式》的转发，该文章由其AI助手生成并分析了供应链攻击集群。

相关报道

New Shai-Hulud malware wave compromises 600 NPM packages
9.0
A new wave of the Shai-Hulud malware campaign has compromised approximately 600 NPM packages, targeting developers by embedding malicious code into open-source dependencies to steal credentials and sensitive data.
Login bypass vulnerability in Social Insurance, eCourt, and eHealth systems
8.0
Researchers discovered a critical authentication bypass vulnerability (CVE-2026-9058) in Poland's Social Insurance (ZUS), eCourt, and eHealth systems. The flaw, linked to improper e-signature validation, could allow unauthorized access to sensitive citizen and medical data. Security experts warn that unpatched systems pose a serious risk of cyber chaos.
Cox Media fined after bragging it spied on users through their phones
7.5
The FTC fined Cox Media $4.5 million for claiming it could use AI to eavesdrop on phone microphones to target ads, a practice the company marketed to clients but never actually deployed.
I was likely targeted by DPRK in a sophisticated developer malware campaign
6.5
A developer describes being targeted in a sophisticated malware campaign likely linked to North Korea (DPRK), involving fake job offers and malicious code designed to compromise their system.
New supply chain attack on 34 packages, 100 versions on NPM, PyPI and crates.io
6.5
Researchers discovered a new supply chain attack targeting 34 packages across NPM, PyPI, and crates.io, with over 100 malicious versions published. The packages deploy a "TrapDoor" crypto stealer designed to exfiltrate cryptocurrency wallet credentials and sensitive data from infected systems.

New Shai-Hulud malware wave compromises 600 NPM packages

9.0

A new wave of the Shai-Hulud malware campaign has compromised approximately 600 NPM packages, targeting developers by embedding malicious code into open-source dependencies to steal credentials and sensitive data.

Login bypass vulnerability in Social Insurance, eCourt, and eHealth systems

8.0

Researchers discovered a critical authentication bypass vulnerability (CVE-2026-9058) in Poland's Social Insurance (ZUS), eCourt, and eHealth systems. The flaw, linked to improper e-signature validation, could allow unauthorized access to sensitive citizen and medical data. Security experts warn that unpatched systems pose a serious risk of cyber chaos.

Cox Media fined after bragging it spied on users through their phones

7.5

The FTC fined Cox Media $4.5 million for claiming it could use AI to eavesdrop on phone microphones to target ads, a practice the company marketed to clients but never actually deployed.

I was likely targeted by DPRK in a sophisticated developer malware campaign

6.5

A developer describes being targeted in a sophisticated malware campaign likely linked to North Korea (DPRK), involving fake job offers and malicious code designed to compromise their system.

New supply chain attack on 34 packages, 100 versions on NPM, PyPI and crates.io

6.5

Researchers discovered a new supply chain attack targeting 34 packages across NPM, PyPI, and crates.io, with over 100 malicious versions published. The packages deploy a "TrapDoor" crypto stealer designed to exfiltrate cryptocurrency wallet credentials and sensitive data from infected systems.