我跟很多人聊过一个问题：到底什么叫程序员？有意思的是，每个人对程序员的定义，都是把自己屁股后面那根线画下来——线以内是程序员，线以外不算。我把自己划进去，把比我「低」的那批人划出去。这就形成了一条鄙视链。整个技术圈，几乎人人都默认有这么一条链。人人都 ...

在AI编程助手加速软件开发的背景下，OWASP旗下开源项目CVE Lite CLI另辟蹊径，坚持以确定性算法而非AI进行依赖漏洞检测。该工具专注于JavaScript和TypeScript本地锁文件分析，支持npm、pnpm和Yarn，能在开发者编写代码时即时发现依赖风险，而非等到CI流水线失败后才报警。工具提供直接与传递性漏洞分离、修复路径推荐等功能，现已成为OWASP官方项目。

U.S. Representative Rick Larsen (WA-02) on Monday announced the launch of the 2026 Congressional App Challenge (CAC).

作者 | Steef-Jan Wiggers译者 | 明知山微软 为 Azure Logic Apps 引入了代码解释器，让 Logic Apps 工作流中的 AI 智能体能够在 Hyper-V 隔离沙箱中生成并执行 ...

黄仁勋表示，英伟达将推出面向AI智能体的CPU Vera和全新AI模型Nemotron 3 Ultra。此外英伟达公布面向WINDOWS系统个人电脑的新款处理器，挑战英特尔，剑指下一代AI PC入口。英伟达将与宇树科技等全球人形机器人制造商合作开发机器人。

Cybersecurity researchers create a five-step exploit chain using over-permissioned roles, secrets discovery, and NHIs to attack a popular low-code service.

Datacurve's new DeepSWE benchmark puts GPT-5.5 ahead of Claude and challenges older AI coding rankings by arguing verifier design can distort results.

Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard ...

CrowdStrike, Google, and the Shadowserver Foundation dismantled the GlassWorm malware operation, but experts say the broader ...

Merck cut a drug discovery cycle by 33% and ships compliant marketing 80% faster. Mastercard is rethinking fraud disputes.

Google AI Studio lets users test Gemini models, build apps, generate media, and export code. Here’s what it does, costs, and ...

The four C&C channels used by GlassWorm, the botnet targeting open source software developers, have been disrupted.