智东西2月2日报道，今日，阶跃星辰Step 3.5 Flash开源并上线，该模型在Agent场景和数学任务上能力逼近闭源模型，能够胜任复杂、长链条任务，是阶跃星辰迄今最强的开源基座模型。 Step 3.5 Flash开源页面（Hugging Face） 就在上周，阶跃星辰宣布由旷视科技联合创始人、千里科技董事长印奇正式出任董事长，并完成华勤、腾讯等参投的超50亿元B+轮融资。这也是印奇履新后，阶跃 ...

深度安全研究团队depthfirst General Security ...

OpenClaw生态系统安全问题不断，多个项目修补机器人接管和远程代码执行漏洞。安全研究员发现一键RCE攻击链，攻击过程仅需毫秒级时间，受害者只需访问恶意网页即可被攻击。漏洞利用跨站WebSocket劫持攻击，因服务器未验证WebSocket源头。此外，关联项目Moltbook数据库暴露，API密钥可被公开访问，可能导致攻击者冒充任何AI代理发布内容。

A high-severity OpenClaw flaw allows one-click remote code execution via token theft and WebSocket hijacking; patched in ...

Security issues continue to pervade the OpenClaw ecosystem, formerly known as ClawdBot then Moltbot, as multiple projects ...

The AI bot OpenClaw, also known as Moltbot, can do a lot on user computers. A code smuggling vulnerability within it is ...

本周，我们重点关注腾讯与字节就豆包手机的攻防战，马化腾在年会谈及豆包的安全问题后，豆包做出回应。两家公司的最新动态也值得玩味：据媒体报道字节已于去2025年底开启豆包手机助手正式版项目，新机预计将于2026年Q2中晚期发布；腾讯发力AI社交狂撒钱，元宝将在即将展开的春节分10亿元现金活动。

The security and privacy of this freemium VPN are unimpeachable, though it makes some odd choices in design and customer service.

Experts details PeckBirdy, a JavaScript C2 framework used since 2023 by China-aligned attackers to spread malware via fake ...

Real-time data streaming is essential for modern web applications, powering features like low-latency audio/visual streaming, stock updates, collaborative tools, and live geolocation. Next.js provides ...