什么是 Ars Technica？

黑客通过劫持三个顶级域名的DNS记录，生成伪造TLS证书攻击Google等大公司，Google已更新Chrome浏览器阻止相关证书。

AI代理Claude、Codex、Hermes在企业网络中自动安装未注册代码包，触发供应链攻击风险。

微软修复Windows Defender零日漏洞的补丁可能被攻击者利用，导致硬盘空间被耗尽。

新型HalluSquatting攻击利用AI工具幻觉组装僵尸网络，可感染主流编程助手并执行DDoS攻击。

AMD 在用户强烈反对后，重新在消费级 CPU 中启用内存加密功能 TSME。

Attackers exploited Dashlane's device enrollment API via 2FA spraying to download fewer than 20 encrypted vaults before automated lockouts. By distributing requests across thousands of accounts, they increased 6-digit OTP guess probability from 1/1M to 1/1K while evading rate limits, though Argon2 hashing still protects vault contents.

Researchers discovered a zero-day vulnerability that can completely bypass the default BitLocker encryption protection on Windows 11.

VMware因价格策略和信任问题失去SMB客户，正尝试通过更新产品和调整销售策略挽回。

Reddit's mobile site temporarily banned the author's IP due to excessive daily visits, revealing how anti-bot systems can mistakenly flag legitimate users.

文章内容为网站隐私政策与Cookie设置说明，非技术性内容，缺乏工程实践价值。

本文是 Ars Technica 的隐私政策页面，主要说明网站使用的 Cookie 类型及用户管理选项，不涉及技术深度或工程实践。

A critical vulnerability in an open-source package could affect millions of AI agents, posing a significant threat to the global AI ecosystem.

The article reports that dozens of Red Hat's NPM packages were backdoored via its official channel, with attackers injecting malicious code into npm repositories using supply chain vulnerabilities, but lacks technical details or remediation steps.

This article primarily discusses website privacy settings and cookie management mechanisms rather than technical vulnerability analysis, focusing on user data permissions and ad tracking controls.