cyberq

實測微軟 TokenEconomizer：Claude Code 每輪省 6% 到 15%，但預設設定可能讓它倒賠

微軟研究院、Microsoft Security 與加州大學柏克萊分校的團隊在 10 月中旬開源了 TokenEconomizer，主打「不換模型、不改代理程式，就能降低 coding agent 在常用 repo ...
orcarouter.ai

CVE-2026-9198: Langflow minted superuser tokens for anyone, then executed what they sent

IBM chains a superuser token leak with a code validator that runs Python in CVE-2026-9198. CISA logged exploitation on 4 ...
Microsoft

Patch now: PHP2Shell, Brotli, and eMudhra guidance for customers

On October 30, 2026, Visual Studio has released a fix via CVE-2026-118147. Affected versions include Microsoft Visual Studio 2017 version 15.9, Microsoft Visual Studio 2019 version 16.11, Microsoft ...

【Does 'HTTP2Shell' affect my site?】3 ways for business owners to identify risks and a summary of responses for technical staff (as of October 28)

What happenedHello everyone, I'm Sora, and I run an IT company.Following last week's PHP vulnerability, I have summarized ...
SC Media

Vulnpocalypse Continues Until Defense Improves – PSW #950

Cisco says patch faster, then sells you time, Turning AI refusals into vulnerability signals, Brotli’s are hiding, WordPress ...

Node2Shell, HTTP2Shell o Broccoli2Shell: come verificare se si è vulnerabili

Node2Shell, falla critica nel decoder Brotli, è già sfruttata in attacchi reali. Vediamo come controllare la versione di Node ...

What is the Brotli vulnerability 'HTTP2Shell'? Regular users should update as usual, developers should move to patched versions

A vulnerability with the ominous name 'HTTP2Shell' is currently a hot topic. Its severity is 9.2 out of 10 (CVSS 4.0). It is ...