新聞螢幕與電腦之間的顯示連線,長期被視為「只是輸出畫面」的通道,但英國國家網路安全中心(NCSC)指出,這段連線同樣可能被攻擊者當成入侵管道,成為潛在攻擊面。為此,NCSC在4月22日宣布自家研發成果已商品化,推出全球首款獲得NCSC授權的硬體防護商業產品SilentGlass,標榜在HDMI與DisplayPort顯示連線上,主動阻擋非預期或惡意行為,將「筆電與螢幕之間的連線」重新納入企業能夠治…
業界新聞
新聞為了拆解資安防護系統的運作機制並進行突破,駭客攻擊資安公司的任何事故往往受到很大的重視,因為有可能影響許多用戶的資安防護,像是先前發生FireEye與Barracuda遭駭,後續衍生很多爭議,最近有資安公司透露他們發生資料外洩的情況,引起外界的注意。資安公司Trellix近日在網站發布公告,表示他們部分原始碼的儲存庫遭到未經授權存取,該公司察覺後隨即尋求資安鑑識專家協助,並通報執法部門。根據初…
新聞金融詐欺每年造成數十億美元損失,風險程度已不亞於傳統網路攻擊。長期推動MITRE ATT&CK並剖析攻擊鏈的美國非營利組織MITRE,旗下威脅情資驅動防禦中心(CTID)於2026年4月發布MITRE Fight Fraud Framework(F3),希望以共享的對手行為框架,協助金融機構更有效理解、偵測與預防詐欺活動。回顧過去,在MITRE F3框架發布之前,負責阻詐的調查人員與負責網路威…
新聞美國戰爭部(Department of War,DOW)上週五(5/1)宣布,已與全球8家頂尖人工智慧企業——SpaceX、OpenAI、Google、Nvidia、Reflection、微軟、AWS及甲骨文——簽署協議,將其先進AI能力部署於機密軍事網路之上,用於合法作戰用途。五角大廈表示,此舉旨在加速美軍轉型為「AI優先作戰力量」,強化戰士在複雜作戰環境下的決策優勢。1789年美國建國之初…
Prioritize resilience over productivity, say CISA, NCSC and their friends from Oz, NZ, CanadaInformation security agencies from the nations of the Five Eyes security alliance have co-authored guidance…
NetHack 5.0 Released https://games.slashdot.org/story/26/05/04/0137222/nethack-50-released?utm_source=rss1.0mainlinkanon
新聞Anthropic宣布Claude Security,可供企業掃描易被AI濫用的軟體漏洞並且生成建議修補程式,或是由內建Claude模型的第三方安全工具修補。AI模型現在不但被用於尋找軟體程式碼的漏洞,也被有心人士用來自主濫用這些漏洞,協助企業找出能被AI濫用的漏洞是Claude Security的設計主旨。Claude Security原名為Claude Code Security,首在二月…
iThome「網路釣魚/社交工程手段」和「資安漏洞濫用」是政府機構和學校未來一年必須優先防備的兩大首要威脅,其次則是對政府網站的「DDoS攻擊」。值得注意的是「軟體供應鏈資安事故」的威脅,在政府學校特別嚴峻,已經進入了高衝擊發生風險高的第一象限。立即下載完整報告【iThome 2026 CIO& CISO大調查】資安策略篇完整報告政府學校今年在高風險高衝擊的資安威脅,包括了7項系統類風險和5項人員…
PLUS: Samsung cashes in on RAM prices; Booze from space fetches huge price; China's hyperscalers surgeA Chinese court has ruled that it’s illegal to replace human workers with AI.…
OpenAI Introduces AI-Generated Pets for Its Codex App https://idle.slashdot.org/story/26/05/03/2354219/openai-introduces-ai-generated-pets-for-its-codex-app?utm_source=rss1.0mainlinkanon
Windows is a mess, GitHub keeps wobbling, Copilot draws flak - what’s wrong at Redmond?kettle When it comes to making decisions that piss off your user base, no one knows how to do it like Microsoft. …
AI Cameras are Being Deployed Across the Western US for Early Detection of Wildfires https://news.slashdot.org/story/26/05/03/2319207/ai-cameras-are-being-deployed-across-the-western-us-for-early-dete…
Study: AI models that consider user's feeling are more likely to make errors Over-tuning can cause models to "prioritize user satisfaction over truthfulness.” https://arstechnica.com/ai/2026/05/study-…
Carbon Pollution Is Making Food Less Nutritious, Risking the Health of Billions https://science.slashdot.org/story/26/05/03/2227240/carbon-pollution-is-making-food-less-nutritious-risking-the-health-o…
Linux 7.1-rc2 Released With Audio Fix For Steam Deck OLED, Other Fixes Linux 7.1-rc2 is out for testing with its accumulation of initial bug and regression fixes that have been collected over the past…
Robots Are Building Clay Homes In Texas Using Dirt From the Ground https://hardware.slashdot.org/story/26/05/03/2055244/robots-are-building-clay-homes-in-texas-using-dirt-from-the-ground?utm_source=rs…
It's Goodbye Time for Jeeves and Ask.com - Relics of Yesterday's Internet https://tech.slashdot.org/story/26/05/03/1939253/its-goodbye-time-for-jeeves-and-askcom---relics-of-yesterdays-internet?utm_so…
Research roundup: 6 cool science stories we almost missed Crushing soda cans for science, why dolphins swim so fast, how urine helps mushrooms communicate, and more https://arstechnica.com/science/202…
Former Nintendo Executive Says Amazon Once Requested 'Illegal' Price Discounts https://games.slashdot.org/story/26/05/03/1826206/former-nintendo-executive-says-amazon-once-requested-illegal-price-disc…
在2026年上半舉行的全球與臺灣年度用戶大會期間,資安廠商Fortinet針對支撐其安全織網架構(Fortinet Security Fabric)的作業系統平臺FortiOS,宣布推出最新版本8.0,主打三大特色:AI驅動的安全防護、次世代的安全存取服務邊緣(SASE),以及量子安全防護功能,並於4月21日正式推出。強化生成式AI的支援與識別,企業了解與控管整體網路環境的AI使用現況相較於既有的…