每周千万次下载，仅有一位维护者，零美元收入——这句话揭示了开源软件生态中一个严峻的现实：广泛使用的项目往往依赖极少数人的无偿劳动，而市场那只“看不见的手”并未能给予这些关键贡献者应有的回报。
An anonymous GitHub account named "exploitarium" is releasing multiple undisclosed zero-day exploits in bulk, raising concerns among cybersecurity communities about potential widespread impact.
An anonymous researcher published a repository called "exploitarium" containing over 80 zero-day exploits and proof-of-concept code targeting various software vulnerabilities. The dump includes exploits for widely used enterprise and consumer applications, raising significant security concerns across the industry.
Researchers discovered zero-click vulnerabilities in Apple's AirDrop and Google's Quick Share (formerly Android Nearby Share) protocols. The flaws allow attackers to trigger file transfers without user interaction, potentially leading to data exposure or arbitrary code execution on targeted devices.
ZeroLabs offers a free, locally-run alternative to ElevenLabs, using open models that it claims are 100 times cheaper. The service is available via a Hugging Face Space.
A technical deep-dive into kernel exploitation techniques that bypass VBS, HVCI, and Kernel CFG on modern Windows, showing attackers can read memory or disable defenses without needing full code execution.