GNU Wget 2.3 Released With --progress=dot, OS/2 Improvements
GNU Wget 2.3 Released With --progress=dot, OS/2 Improvements GNU Wget2 is up to version 2.3 today with the first new release of 2026 for this popular command-line tool for non-interactive file downloa…
Rustaceans warned of job interviews with a malicious payload
The Rust project has warned that attackers appear to be targeting its contributors and crate owners in an attempt to compromise their devices and accounts, potentially allowing malware to be distribut…
【資安日報】9月21日，Google證實Gemini代理人也駭入外部公司網站
新聞本日新聞焦點 ● Google證實Gemini代理人也駭入外部公司網站 ● 研究人員揭露4個Linux核心本機權限提升漏洞並公開PoC ● Check Point修補安全管理與日誌伺服器重大提升權限漏洞 ● Oracle發布Java 27，強化TLS 1.3後量子密碼學支援 ● 歐盟擬建立緊急安全協議，共同因應網路攻擊等混合威脅 資安新聞總覽 Google證實Gemini代理人也駭入外部公司網…
AMD BC-250 Continues Being Improved Under Linux With Patches Now Enabling The…
AMD BC-250 Continues Being Improved Under Linux With Patches Now Enabling The PSP The AMD BC-250 as the product designed at the time for cryptocurrency mining and based on a cut-down Sony PlayStation …
Igalia Celebrates 25 Years Of Advancing Linux & Open-Source
Igalia Celebrates 25 Years Of Advancing Linux & Open-Source The Igalia Linux/open-source consulting firm based out of A Coruña, Spain is celebrating twenty five years of contributions to upstream open…
It's raining, the transport isn't working, and now an Android app wants to walk out in solidarity
It rained in Amsterdam last week. There was a 24-hour public transport strike. And something called LOTA stopped working in the elevators of the Mövenpick hotel. Digital signage in elevators is all th…
Australia Considers Smart Glasses Ban in Government Workplaces, While 70…
Australia Considers Smart Glasses Ban in Government Workplaces, While 70 People Sue Meta Over Unknowing Data Collection https://yro.slashdot.org/story/26/09/21/0243250/australia-considers-smart-glasse…
Linux's Perf Script Command Much Faster With Overhaul As Python Module
Linux's Perf Script Command Much Faster With Overhaul As Python Module A big patch series sent out this weekend for the Linux kernel's perf subsystem removes the embedded Python and Perl scripting in …
NPM新增僅限暫存發布權杖，為2027年收緊自動發布權限做準備
新聞GitHub套件管理器NPM精細度存取權杖新增僅限暫存發布（Stage-only）權限，讓軟體自動化流程送出套件版本等待審查，但不能直接發布至NPM套件登錄庫。NPM預計2027年1月取消可繞過雙因素驗證（2FA）權杖的直接發布能力，新權限提供仍採權杖自動發布的開發團隊一個過渡方式。 使用僅限暫存發布權杖後，自動化流程需透過指令npm stage publish送出套件版本，套件進入暫存狀態後…
World推出金融超級App World Money，整合支付、投資與跨境轉帳
新聞World周四（9/17）推出金融超級程式World Money，它整合穩定幣、支付、投資、收益及跨境轉帳等金融服務，使用者可在同一個App中持有美元及其他當地貨幣計價的穩定幣、買賣數位資產，還可免費進行數位資產的跨境轉帳，現已開始於全球逾150個國家部署。 World是由OpenAI執行長Sam Altman共同創辦的數位身分及加密貨幣計畫，透過Orb裝置掃描虹膜，確認使用者是唯一真人，並提…
Salesforce wants to charge for AI outcomes, but first it needs to figure out how
Nothing demonstrates how deeply Fortune 500 companies depend on Salesforce quite like a global outage lasting more than seven hours. The interruption struck during the second day of last week's Dreamf…
新HTTP QUERY方法逐步進入既有Web生態系，SANS ISC提醒安全控制需重新檢視
新聞網際網路標準制定組織（IETF）今年6月發布RFC 10008，正式定義新的HTTP「QUERY」方法。不過，SANS網路風暴中心（ISC）近日提醒，由於許多依賴HTTP method進行判斷的既有安全控制，都是在QUERY成為標準方法前設計，因此，WAF、API Gateway、CSRF防護及快取機制都需要重新檢視。若既有規則未將QUERY納入檢查與處理範圍，可能出現安全檢查未完整套用的情況…
921防災日延伸數位防災，台灣數位信任協會倡議「台灣資安日」提升全民資安意識
新聞9月21日原是國家防災日，相信不少人在今早收到防災演練告警簡訊，但是今年9月21日對國內的數位世界而言則多了一層意義，那就是「台灣資安日」。台灣數位信任協會今天(9/21)攜手數位發展部資通安全署、法務部調查局、內政部警政署刑事警察局，以及多家企業與產業組織，共同發起首屆「台灣資安日」，希望擴大資安意識的普及，讓資安從過去偏重技術防護的議題，延伸為全民共同參與的數位安全行動。 從實體防災延伸數…
Your cloud survived everything except the real world
You don't know what you've got till it's gone. Great lyric, lousy data retention policy. Amazon Web Services said last week that war damage to its Middle East infrastructure had permanently destroyed …
歐洲AI業者反對放慢AI發展，批美國巨頭藉安全鞏固領先地位
新聞Anthropic執行長Dario Amodei日前呼籲業界放慢頂尖AI發展速度，引發美國AI業界對AI安全及發展速度的討論。不過，路透社周五（9/18）報導，歐洲多家AI業者反對放慢腳步，認為此舉可能擴大歐美AI技術差距，並鞏固美國大型AI業者的領先地位。 這波討論始於Amodei上周警告AI能力進展太快，安全措施可能難以跟上，呼籲業界放慢頂尖AI發展，OpenAI執行長Sam Altman…
OpenAI Codex程式開發代理工具曝雙漏洞，唯讀模式也可越界執行命令
新聞AI代理平臺業者Accomplish資安研究人員揭露OpenAI Codex兩項沙箱逃逸漏洞，分別影響Codex CLI與Codex Desktop。兩項漏洞已於8月修補，其中Heapjack漏洞可在Codex最嚴格的唯讀模式下，讓受限制程式取得信任權杖，要求沙箱外的主機端程式執行操作，且全程不需使用者核准。Overpatch漏洞則利用Codex修改檔案時的權限判斷缺陷，越過工作區範圍寫入其他…
德國法院要求Meta對臉書及IG上的假廣告負責
新聞德國金融資訊網站Finanzfluss及共同創辦人Thomas Kehl，因臉書（Facebook）及IG（Instagram）長期出現冒用其商標與肖像的投資詐騙廣告而控告Meta。法蘭克福地方法院9月16日判決Meta敗訴，要求Meta停止散布相關假廣告並賠償損失。 Finanzfluss為德國金融資訊網站，提供金融產品比較、評測及消費者理財資訊，在Instagram擁有超過60萬名追蹤者，…
Who, Me? Boss bought cheap 'printer' from a catalog and was left without a leg to stand on
Working in tech can produce a catalog of woes, and each Monday The Register shares yours in "Who, Me?" – our reader-contributed column chronicling tech-related mistakes, heartaches, and back-breaks. T…
VMware has quietly walked its SmartNIC ambitions
VMware has quietly stopped selling firewalls for SmartNICs. SmartNICs, aka data processing units (DPUs), are network cards that include a modest processor. Hyperscale clouds routinely use the devices …
Chinese memory-maker CXMT claims DRAM production breakthrough
ASIA IN BRIEF Chinese memory-maker CXMT, whose products Apple has reportedly evaluated to use in the iPhone, claims to have made a miniaturization breakthrough. The company on Sunday posted news that …
Phoronix@masto.ai
·
