开源AI API系统NewAPI曝高危支付漏洞：未配置密钥或致零成本无限充值

AIbase 2026年4月16日报道——近日，广泛应用于开源社区和自托管站点管理员圈子的AI大模型接口聚合管理系统QuantumNous/new-api（简称NewAPI）被证实存在高危支付逻辑漏洞。当Stripe支付密钥未正确配置时，攻击者可以通过伪造Webhook事件绕过实际支付流程，实现“零成本”任意金额充值。 该漏洞的攻击逻辑和缓解措施已在开发者论坛和X（前身为Twitter）等公共技术 ...
The Hacker News

⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

Stay ahead of the logs with our Monday Recap. We break down active Adobe 0-days, North Korean crypto stings, and critical CVEs you need to patch today ...
The Daily Signal

Tag: Donald Trump

WASHINGTON/ISLAMABAD, April 12 (Reuters) — President Donald Trump said on Sunday the U.S. Navy would immediately start blockading the Strait of Hormuz, raising the stakes… Read More ...