DAVID888 Daily 每日放送 · Yesterday
[2026-10-31] Cursor 市集 Claude Code 爆出持久化後門、Azure 出現五大跨租戶致命穿透
0:00Duration unknown
transcript
show notes
詳細網頁版與參考連結:https://podcast.david888.com/post/2026-10-31
今日科技界爆發多起資安危機:Cursor 市集的官方 Claude Code 套件遭植入後門,Azure 亦現跨租戶漏洞。同時,業界反思 AI 恐致 SRE 技能退化的自動化諷刺。技術方面,Google 提出模擬睡眠機制的 Sleep 架構以解決災難性遺忘,但社群質疑巨型模型的計算成本與審計回滾難度。最後,美國擬修法強制爬蟲實名制,被批難防惡意攻擊且重挫公共利益與調查報導。
相關連結:
- Azure's Weakest Link – Five Full Cross-Tenant Compromises
- CopilotKit / OpenBot (8,781 ⭐)
- dupe] [Backdoors in official Claude Code extensions
- Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
- dupe] [Claude Code VS Code extension with backdoor released on Cursor marketplace
- Breaking the open web won't stop the bad bots
- Bunny CDN Security Incident
- Show HN: I Turned DOOM into a Transformer
- Node.js Chatbot API Compare: Long Context Good Quality via Schema Drift Controls by DaltonReed1289
- AI isn't replacing SREs, it's deskilling them
- Linode Security Incident
- Sleep framework: A new way for LLMs to retain knowledge in continual learning
- SparkBots AI (Powered by Jev)
links14