<p>家得寶（Home Depot，HD）最近發現其內部系統中潛藏着一個非常嚴重的問題。這種問題在特定情況下可能會導致整個運營的崩潰。最終，這個問題得到了處理，目前看來造成的損害似乎很小，至少現在是這樣。不過，投資者對此表示了一定的不滿，導致週二早盤的股價小幅下滑。</p>
<h3>享受 TipRanks Premium 50% 折扣，放心投資</h3>
<ul>
<li>解鎖對沖基金級別的數據和強大的投資工具，幫助您做出更聰明、更精準的決策</li>
<li>通過最新的新聞和分析保持市場領先，使您的投資組合始終處於最大潛力的狀態</li>
</ul>
<p>報道稱，家得寶在 GitHub 上暴露了一個令牌，持續了超過一年，這將允許訪問一系列關鍵的內部系統，前提是相關人員知道在哪裏找到它。報告指出，這種訪問很可能是 “錯誤” 造成的，自 2024 年初以來一直處於開放狀態。一位安全研究員 Ben Zimmerman 發現該令牌使他能夠訪問 “……數百個私人家得寶源代碼庫”，並且還賦予他修改這些代碼的能力。</p>
<p>Zimmerman 發現該令牌允許訪問雲基礎設施、庫存管理和訂單履行系統。儘管 Zimmerman 多次聯繫，但只有在他向媒體報告該漏洞後，才有人開始處理這個未解決的令牌。</p>
<h2><strong>另一個盜竊團伙</strong></h2>
<p>與此同時，家得寶最近關閉了一個更常規的威脅：一個在多個州針對家得寶各個門店的盜竊團伙。該盜竊團伙 reportedly 從 128 家不同的商店中盜取了 220 萬美元的商品。</p>
<p>該團伙共有 13 名成員，其中一名目前仍在逃。警方已追回 150 萬美元的被盜物品，報告指出，隨着官員繼續檢查回收的產品，這一數字可能會增加。在這一事件中，最為大膽的方面或許是，該團伙 reportedly 一天內會多達四次襲擊同一地點，並會在午餐和晚餐時休息。</p>
<h2><strong>家得寶是一個好的長期投資嗎？</strong></h2>
<p>轉向華爾街，分析師對 HD 股票的共識評級為適度買入，基於過去三個月內的 18 個買入、5 個持有和 1 個賣出，如下圖所示。在過去一年中股價下跌 12.6% 之後，HD 的平均目標價為每股 406.75 美元，意味着 14.97% 的上漲潛力。</p>

家得寶

<p>家得寶（NYSE:HD）暴露了一個 GitHub 令牌超過一年，風險涉及關鍵內部系統的訪問。安全研究員 Ben Zimmerman 發現了這一問題，該問題在媒體曝光後才得到解決。此外，家得寶還關閉了一個盜竊團伙，該團伙盜竊了價值 220 萬美元的商品。儘管存在這些問題，分析師對 HD 股票維持中性買入評級，潛在上漲空間為 14.97%</p>

<p>Home improvement giant Home Depot (HD) recently discovered a very serious problem lurking in its internal systems. It was the kind of problem that could sink an entire operation under the right circumstances. The problem was addressed, eventually, and the harm seems to be minimal, at least for now. Still, investors registered a mild displeasure, and sent shares slipping fractionally in Tuesday morning's trading.</p>
<div class="lb-trans"><p>家得寶（Home Depot，HD）最近發現其內部系統中潛藏着一個非常嚴重的問題。這種問題在特定情況下可能會導致整個運營的崩潰。最終，這個問題得到了處理，目前看來造成的損害似乎很小，至少現在是這樣。不過，投資者對此表示了一定的不滿，導致週二早盤的股價小幅下滑。</p>
</div><h3>Claim 50% Off TipRanks Premium and Invest with Confidence</h3>
<div class="lb-trans"><h3>享受 TipRanks Premium 50% 折扣，放心投資</h3>
</div><ul>
<li>Unlock hedge-fund level data and powerful investing tools designed to help you make smarter, sharper decisions</li>
<li>Stay ahead of the market with the latest news and analysis so your portfolio is always positioned for maximum potential</li>
</ul>
<div class="lb-trans"><ul>
<li>解鎖對沖基金級別的數據和強大的投資工具，幫助您做出更聰明、更精準的決策</li>
<li>通過最新的新聞和分析保持市場領先，使您的投資組合始終處於最大潛力的狀態</li>
</ul>
</div><p>Reports note that Home Depot left a GitHub token exposed for well over a year, which would have allowed access to a range of key internal systems, assuming those involved knew where to find it. The reports suggested that the access was likely &#34;by mistake,&#34; and had been open since early 2024. One security researcher, Ben Zimmerman, discovered that the token gave him access to &#34;…hundreds of private Home Depot source code repositories,&#34; and also gave him the ability to modify that code.</p>
<div class="lb-trans"><p>報道稱，家得寶在 GitHub 上暴露了一個令牌，持續了超過一年，這將允許訪問一系列關鍵的內部系統，前提是相關人員知道在哪裏找到它。報告指出，這種訪問很可能是 “錯誤” 造成的，自 2024 年初以來一直處於開放狀態。一位安全研究員 Ben Zimmerman 發現該令牌使他能夠訪問 “……數百個私人家得寶源代碼庫”，並且還賦予他修改這些代碼的能力。</p>
</div><p>Zimmerman found that the token allowed access to cloud infrastructure, inventory management and order fulfillment systems. Though Zimmerman reached out on several occasions, it was only after Zimmerman reported the bug to the media that anyone made a move on addressing the outstanding token.</p>
<div class="lb-trans"><p>Zimmerman 發現該令牌允許訪問雲基礎設施、庫存管理和訂單履行系統。儘管 Zimmerman 多次聯繫，但只有在他向媒體報告該漏洞後，才有人開始處理這個未解決的令牌。</p>
</div><h2><strong>Another Theft Ring</strong></h2>
<div class="lb-trans"><h2><strong>另一個盜竊團伙</strong></h2>
</div><p>Meanwhile, Home Depot recently shut down a more conventional threat: another theft ring that took on a range of Home Depot locations across several states. The theft ring reportedly managed to land $2.2 million in merchandise from a total of 128 different stores.</p>
<div class="lb-trans"><p>與此同時，家得寶最近關閉了一個更常規的威脅：一個在多個州針對家得寶各個門店的盜竊團伙。該盜竊團伙 reportedly 從 128 家不同的商店中盜取了 220 萬美元的商品。</p>
</div><p>The ring had 13 members total, and one of them currently remains at large. Police have recovered $1.5 million in stolen goods, reports noted, though this number is likely to increase as officials continue to examine recovered products. In perhaps the most brazen aspect of this, the group would reportedly hit the same location as many as four times a day, and would take breaks for lunch and dinner.</p>
<div class="lb-trans"><p>該團伙共有 13 名成員，其中一名目前仍在逃。警方已追回 150 萬美元的被盜物品，報告指出，隨着官員繼續檢查回收的產品，這一數字可能會增加。在這一事件中，最為大膽的方面或許是，該團伙 reportedly 一天內會多達四次襲擊同一地點，並會在午餐和晚餐時休息。</p>
</div><h2><strong>Is Home Depot a Good Long-Term Buy?</strong></h2>
<div class="lb-trans"><h2><strong>家得寶是一個好的長期投資嗎？</strong></h2>
</div><p>Turning to Wall Street, analysts have a Moderate Buy consensus rating on HD stock based on 18 Buys, five Holds and one Sell assigned in the past three months, as indicated by the graphic below. After a 12.6% loss in its share price over the past year, the average HD price target of $406.75 per share implies 14.97% upside potential.</p>
<div class="lb-trans"><p>轉向華爾街，分析師對 HD 股票的共識評級為適度買入，基於過去三個月內的 18 個買入、5 個持有和 1 個賣出，如下圖所示。在過去一年中股價下跌 12.6% 之後，HD 的平均目標價為每股 406.75 美元，意味着 14.97% 的上漲潛力。</p>
</div>

“……數百個私人家得寶源代碼庫” 被曝光，家得寶股票（紐約證券交易所代碼：HD）