CrowdSec 私有代码库遭泄露
推荐指数 29.0 NO. 018 · 2026.09.18
发布2026/09/17Score103Comments30
为什么值得看
CrowdSec 确认其 GitHub 私有仓库（含 SaaS 控制台、AWS 云脚本等）于 2026 年 5 月被泄露，300 个仓库数字包含 130+ 公开库。安全公司自身源代码泄露，对依赖其威胁情报的客户构成信任危机。
编辑判断
CrowdSec 的核心商业模式是"众包威胁情报"，客户上传攻击 IP 换免费引擎，控制台 SaaS 是变现关键。私有代码泄露意味着攻击者可能找到伪造情报、污染黑名单或反向追踪上报客户的方法。
更深层的问题是：安全公司历来靠"黑箱"建立信任，代码泄露反而被迫透明。这对 Sourcefire、VirusTotal 等同类厂商是个警示——纯依赖保密的安全架构正在失效。
如果你在用 CrowdSec 引擎，建议立即审查本地规则覆盖策略，降低对云端控制台响应的依赖；如果是安全创业团队，可以考虑把"可审计性"作为产品卖点，而不是负担。
社区反馈
负面 27 条评论
核心争论：安全公司自身被黑是否暴露其威胁情报模式根本缺陷
On the funny side, reading the website tagline, apparently they claim to know who is attacking you, they just happen to miss out on who attacked them. Turns out they are not really a security company, just an aggregator of bad IPs. Ideally this kind of aggregator problem is best suited for a trusted
What, exactly, is the definition of a "security company" in your mind? Threat Intel companies definitely fall under that normally, so I'm curious what you think it is. Also, the idea that this type of thing could just be stood up as a "not-for-profit" company and ran for peanuts is kind of silly. Ho
Any company where understanding of security practices has a direct impact on its revenue from early phases can be considered as a security company in my view. From what I have seen a large chunk of internet exists and stands on the shoulder of folks who did the volunteer work cause they were passion