<p>家得宝（Home Depot，HD）最近发现其内部系统中潜藏着一个非常严重的问题。这种问题在特定情况下可能会导致整个运营的崩溃。最终，这个问题得到了处理，目前看来造成的损害似乎很小，至少现在是这样。不过，投资者对此表示了一定的不满，导致周二早盘的股价小幅下滑。</p>
<h3>享受 TipRanks Premium 50% 折扣，放心投资</h3>
<ul>
<li>解锁对冲基金级别的数据和强大的投资工具，帮助您做出更聪明、更精准的决策</li>
<li>通过最新的新闻和分析保持市场领先，使您的投资组合始终处于最大潜力的状态</li>
</ul>
<p>报道称，家得宝在 GitHub 上暴露了一个令牌，持续了超过一年，这将允许访问一系列关键的内部系统，前提是相关人员知道在哪里找到它。报告指出，这种访问很可能是 “错误” 造成的，自 2024 年初以来一直处于开放状态。一位安全研究员 Ben Zimmerman 发现该令牌使他能够访问 “……数百个私人家得宝源代码库”，并且还赋予他修改这些代码的能力。</p>
<p>Zimmerman 发现该令牌允许访问云基础设施、库存管理和订单履行系统。尽管 Zimmerman 多次联系，但只有在他向媒体报告该漏洞后，才有人开始处理这个未解决的令牌。</p>
<h2><strong>另一个盗窃团伙</strong></h2>
<p>与此同时，家得宝最近关闭了一个更常规的威胁：一个在多个州针对家得宝各个门店的盗窃团伙。该盗窃团伙 reportedly 从 128 家不同的商店中盗取了 220 万美元的商品。</p>
<p>该团伙共有 13 名成员，其中一名目前仍在逃。警方已追回 150 万美元的被盗物品，报告指出，随着官员继续检查回收的产品，这一数字可能会增加。在这一事件中，最为大胆的方面或许是，该团伙 reportedly 一天内会多达四次袭击同一地点，并会在午餐和晚餐时休息。</p>
<h2><strong>家得宝是一个好的长期投资吗？</strong></h2>
<p>转向华尔街，分析师对 HD 股票的共识评级为适度买入，基于过去三个月内的 18 个买入、5 个持有和 1 个卖出，如下图所示。在过去一年中股价下跌 12.6% 之后，HD 的平均目标价为每股 406.75 美元，意味着 14.97% 的上涨潜力。</p>

家得宝

<p>家得宝（NYSE:HD）暴露了一个 GitHub 令牌超过一年，风险涉及关键内部系统的访问。安全研究员 Ben Zimmerman 发现了这一问题，该问题在媒体曝光后才得到解决。此外，家得宝还关闭了一个盗窃团伙，该团伙盗窃了价值 220 万美元的商品。尽管存在这些问题，分析师对 HD 股票维持中性买入评级，潜在上涨空间为 14.97%</p>

<p>Home improvement giant Home Depot (HD) recently discovered a very serious problem lurking in its internal systems. It was the kind of problem that could sink an entire operation under the right circumstances. The problem was addressed, eventually, and the harm seems to be minimal, at least for now. Still, investors registered a mild displeasure, and sent shares slipping fractionally in Tuesday morning's trading.</p>
<div class="lb-trans"><p>家得宝（Home Depot，HD）最近发现其内部系统中潜藏着一个非常严重的问题。这种问题在特定情况下可能会导致整个运营的崩溃。最终，这个问题得到了处理，目前看来造成的损害似乎很小，至少现在是这样。不过，投资者对此表示了一定的不满，导致周二早盘的股价小幅下滑。</p>
</div><h3>Claim 50% Off TipRanks Premium and Invest with Confidence</h3>
<div class="lb-trans"><h3>享受 TipRanks Premium 50% 折扣，放心投资</h3>
</div><ul>
<li>Unlock hedge-fund level data and powerful investing tools designed to help you make smarter, sharper decisions</li>
<li>Stay ahead of the market with the latest news and analysis so your portfolio is always positioned for maximum potential</li>
</ul>
<div class="lb-trans"><ul>
<li>解锁对冲基金级别的数据和强大的投资工具，帮助您做出更聪明、更精准的决策</li>
<li>通过最新的新闻和分析保持市场领先，使您的投资组合始终处于最大潜力的状态</li>
</ul>
</div><p>Reports note that Home Depot left a GitHub token exposed for well over a year, which would have allowed access to a range of key internal systems, assuming those involved knew where to find it. The reports suggested that the access was likely &#34;by mistake,&#34; and had been open since early 2024. One security researcher, Ben Zimmerman, discovered that the token gave him access to &#34;…hundreds of private Home Depot source code repositories,&#34; and also gave him the ability to modify that code.</p>
<div class="lb-trans"><p>报道称，家得宝在 GitHub 上暴露了一个令牌，持续了超过一年，这将允许访问一系列关键的内部系统，前提是相关人员知道在哪里找到它。报告指出，这种访问很可能是 “错误” 造成的，自 2024 年初以来一直处于开放状态。一位安全研究员 Ben Zimmerman 发现该令牌使他能够访问 “……数百个私人家得宝源代码库”，并且还赋予他修改这些代码的能力。</p>
</div><p>Zimmerman found that the token allowed access to cloud infrastructure, inventory management and order fulfillment systems. Though Zimmerman reached out on several occasions, it was only after Zimmerman reported the bug to the media that anyone made a move on addressing the outstanding token.</p>
<div class="lb-trans"><p>Zimmerman 发现该令牌允许访问云基础设施、库存管理和订单履行系统。尽管 Zimmerman 多次联系，但只有在他向媒体报告该漏洞后，才有人开始处理这个未解决的令牌。</p>
</div><h2><strong>Another Theft Ring</strong></h2>
<div class="lb-trans"><h2><strong>另一个盗窃团伙</strong></h2>
</div><p>Meanwhile, Home Depot recently shut down a more conventional threat: another theft ring that took on a range of Home Depot locations across several states. The theft ring reportedly managed to land $2.2 million in merchandise from a total of 128 different stores.</p>
<div class="lb-trans"><p>与此同时，家得宝最近关闭了一个更常规的威胁：一个在多个州针对家得宝各个门店的盗窃团伙。该盗窃团伙 reportedly 从 128 家不同的商店中盗取了 220 万美元的商品。</p>
</div><p>The ring had 13 members total, and one of them currently remains at large. Police have recovered $1.5 million in stolen goods, reports noted, though this number is likely to increase as officials continue to examine recovered products. In perhaps the most brazen aspect of this, the group would reportedly hit the same location as many as four times a day, and would take breaks for lunch and dinner.</p>
<div class="lb-trans"><p>该团伙共有 13 名成员，其中一名目前仍在逃。警方已追回 150 万美元的被盗物品，报告指出，随着官员继续检查回收的产品，这一数字可能会增加。在这一事件中，最为大胆的方面或许是，该团伙 reportedly 一天内会多达四次袭击同一地点，并会在午餐和晚餐时休息。</p>
</div><h2><strong>Is Home Depot a Good Long-Term Buy?</strong></h2>
<div class="lb-trans"><h2><strong>家得宝是一个好的长期投资吗？</strong></h2>
</div><p>Turning to Wall Street, analysts have a Moderate Buy consensus rating on HD stock based on 18 Buys, five Holds and one Sell assigned in the past three months, as indicated by the graphic below. After a 12.6% loss in its share price over the past year, the average HD price target of $406.75 per share implies 14.97% upside potential.</p>
<div class="lb-trans"><p>转向华尔街，分析师对 HD 股票的共识评级为适度买入，基于过去三个月内的 18 个买入、5 个持有和 1 个卖出，如下图所示。在过去一年中股价下跌 12.6% 之后，HD 的平均目标价为每股 406.75 美元，意味着 14.97% 的上涨潜力。</p>
</div>

“……数百个私人家得宝源代码库” 被曝光，家得宝股票（纽约证券交易所代码：HD）