新聞威脅情報平臺InfoStealers周三(6/17)揭露一起名為FortiBleed的大規模憑證外洩事件,指出全球有超過7萬臺Fortinet FortiGate防火牆與SSL VPN設備的登入憑證遭駭客竊取並外洩,受害者遍布194個國家,影響逾2萬個獨立網域,且臺灣受影響的設備數量位居全球第三。這起事件最早由資安研究人員 Volodymyr Bob Diachenko 於2026年6月中旬發…
業界新聞
新聞巴西外送龍頭iFood個資外洩,業者證實120萬用戶受影響近期巴西外送龍頭iFood傳出個資外洩遭駭客兜售,該平臺表示去年12月其資料庫遭非法存取,導致120萬名用戶姓名、身分證號及地址外洩。資安媒體Hackread則指出,有駭客在BreachForums論壇上發文聲稱,竊取iFood平臺約4,380萬筆客戶記錄,並威脅若不支付贖金,將分批公開竊得的資料。雖然iFood否認外界傳言4千多萬筆資…
新聞開源Web框架Next.js開發商Vercel發表Agent Stack,將AI代理開發所需的模型連接、工作流程執行,以及外部系統存取與使用者互動平臺整合,整理成一組產品框架,涵蓋AI SDK、AI Gateway、Workflow SDK、Vercel Sandbox、Vercel Connect、Chat SDK與eve開源代理框架,目標是讓開發者在建立代理時,不必逐一處理多模型呼叫、長任…
新聞Broadcom旗下Symantec與Carbon Black團隊近日揭露,勒索軟體組織DragonForce攻擊一家大型美國服務業公司時,使用以Go語言開發的自製遠端存取木馬Backdoor.Turn,將命令與控制(C&C)流量隱藏在Microsoft Teams使用的TURN(Traversal Using Relays around NAT)轉送基礎設施之中。對企業防禦人員而言,相關流量…
新聞上個週末(6/14)正式發布的Linux 7.1包含一項具里程碑的變更,即不再支援Intel 486處理器。Linux 7.1今年4月發布第一個RC版,第7個RC(7.1-rc7)於6月初發布,而由於沒有重大問題,Linux之父Linus Torvalds週日透過Linux郵件群組宣布Linux 7.1正式版本發布。Linux 7.1一項特色是清除大量舊程式。Torvalds對核心移除高達近1…
新聞去年9月,微軟Azure的DCasv6系列與ECasv6系列正式上線,是採用AMD第四代EPYC處理器的雲端機密運算虛擬機器服務(CVM),主打效能比前一代增加25%,最大提供96顆vCPU與672 GiB記憶體的組態,並具備記憶體預設啟用256位元AES加密保護,以及支援加密金鑰可線上輪替等特色。經過9個月的發展,微軟最近宣布總共有57個Azure區域提供此項機密運算服務,而於2024年11…
Tesco Moving 40,000 Server Workloads Off VMware Amid Broadcom's 'Abusive Conduct' https://yro.slashdot.org/story/26/06/17/2357242/tesco-moving-40000-server-workloads-off-vmware-amid-broadcoms-abusive-…
新聞歐盟推進烏克蘭入盟談判程序之際,也同步強化對烏克蘭的網路安全支援。歐盟執委會於6月15日宣布,歐盟理事會已同意將烏克蘭納入歐盟網路安全儲備機制(EU Cybersecurity Reserve),若烏克蘭遭遇重大或大規模資安事件時,可取得歐盟受信任民間資安服務供應商提供的協助。歐盟網路安全儲備機制依據《網路團結法》(Cyber Solidarity Act)設立,由歐盟網路安全局(Europe…
新聞隨著AI加快漏洞發現速度,開放原始碼軟體漏洞修補流程面臨更大壓力。軟體供應鏈安全業者Chainguard宣布成立產業聯盟Athena,協助成員在開源軟體漏洞公開前,先取得可用的緩解措施與修補程式或版本,降低攻擊風險。Athena目前已有超過24個組織加入,包括紐約梅隆銀行(BNY)、思科(Cisco)、Cloudflare、Docker、摩根大通(JPMorganChase)、Kyndryl與…
Cybercrime now accounts for more than 30 percent of all offenses across the Asia and South Pacific (ASP) region, according to the latest figures from Interpol. The international cop shop said on Wedne…
新聞勒索軟體組織ShinyHunters宣稱駭入系統竊取客戶及公司資料後,影像器材大廠柯達(Eastman Kodak)昨(17)日證實遭駭。柯達向Bleeping Computer證實被駭一事,表示近日發現一個未經授權的第三方人士非法存取了公司小部分資料一小段時間。該公司已立即和外部資安專家合作,調查遭存取與複製的資料範圍,並和執法機關合作。柯達並說有信心此次事件不影響公司系統或營運。Shiny…
AI/LLM Patch Craziness Having An Impact On ARM64 Linux Kernel Development The ongoing rise in AI/LLM-generated patches hitting the mailing lists and affecting development workflows continues to impact…
Estonia plans to allow AI agents to have their own digital identities so they can act on behalf of people in a way that can be verified and audited. The initiative, backed by the country's Eesti.ai ad…
Microsoft Working To Patch 'RoguePlanet' Zero-Day https://it.slashdot.org/story/26/06/17/2030228/microsoft-working-to-patch-rogueplanet-zero-day?utm_source=rss1.0mainlinkanon
Fortnite maker and Apple nemesis Epic Games has decided to git good all on its own with the open-source release of its homemade version control system, dubbed Lore. The project began life as Unreal Re…
Second carcass-eating fly species cleared by FDA for maggot wound therapy Maggot therapy lacks robust data, but it has fans and a fail-safe "bacon therapy." https://arstechnica.com/health/2026/06/seco…
Massive breach spills credentials for thousands of sensitive networks The affected include Oracle, Lenovo, FedEx, a NATO contractor, and Fortinet itself. https://arstechnica.com/security/2026/06/massi…
Carvana Is Turning Dealerships Into 'Playgrounds,' Test-Drive Centers With Sales All Online https://tech.slashdot.org/story/26/06/17/2015221/carvana-is-turning-dealerships-into-playgrounds-test-drive-…
Amazon, QuEra promise useful quantum error correction by 2028 Elsewhere, beyond-classical quantum hardware, plus classical computing fires back. https://arstechnica.com/science/2026/06/amazon-quera-pr…
California says AT&T lied to FCC in attempt to shut off old phone network FCC considers AT&T petitions to preempt state rules and discontinue phone service. https://arstechnica.com/tech-policy/2026/06…