粉碎Glassworm：揭秘CrowdStrike针对开发者攻击的僵尸网络清除行动
CrowdStrike披露了一项代号为"Glassworm"的复杂攻击行动，该僵尸网络专门针对软件开发人员，利用虚假开发工具和恶意代码注入等技术手段实施渗透。本文深入解析了CrowdStrike如何追踪并成功瓦解这一威胁，揭示了攻击者的技术手法、基础设施以及防御建议，为安全社区提供了宝贵的威胁情报和实战经验。
相关报道
Microsoft Copilot Cowork, an agentic AI system, was found to allow data exfiltration by sending emails to a user's inbox without approval. These messages could contain external images that trigger network requests, leaking data when opened. Additionally, prompt injection could expose pre-authenticated OneDrive download links, enabling attackers to download files.
The article discusses how business executives and "business idiots" are regaining power in the tech industry, often pushing aside engineers and product-focused leaders. It critiques the rise of corporate jargon, short-term thinking, and MBA-driven decision-making that prioritizes metrics over meaningful innovation, arguing this trend is stifling creativity and damaging long-term company value.
The article argues that internet usage has become fundamentally irrational, likening frequent online activity to a form of collective insanity due to its negative effects on attention, mental health, and real-world engagement.