新聞被稱為Contagious Interview、Famous Chollima、Dev#Popper的北韓駭客團體，原本從事的攻擊行動大致有兩種，一種是應徵歐美企業的遠距工作者，謀取北韓當局研發核武的資金，並對這些企業從事破壞，另一種是鎖定求職者從事網路釣魚，藉此滲透企業組織，不過從今年開始，這些駭客專門針對開發生態圈從事供應鏈攻擊，且已出現多起活動，如今這些駭客同時在多種生態圈橫行。 資安公…
新聞美國國家標準暨技術研究院（NIST）針對組織建立與維護系統規畫文件的指引NIST SP 800-18，6月30日發布更新版本為Rev. 2，文件全名為《Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems》。 NIST指出，新版指引不再只聚焦傳統的系統安全計畫…
新聞隨著公開TLS憑證有效期限持續縮短，企業若仍以人工方式追蹤與續約憑證，將更容易因憑證過期、遺漏或設定錯誤影響服務運作。Let's Encrypt等憑證機構採用的自動化協定ACME（Automatic Certificate Management Environment）可將TLS憑證申請、網域驗證、續約與撤銷流程自動化與標準化，降低人工管理憑證生命週期的負擔。 雲端服務供應商AWS於6月30日…
新聞資安業者LevelBlue近日揭露新型Java遠端存取木馬（RAT）QuimaRAT，以惡意程式即服務（MaaS）模式在暗網論壇販售，每月收費150美元起，永久授權為1,200美元，顯示跨平臺RAT正朝模組化、商業化方向發展。 研究人員分析的QuimaRAT樣本為Java Archive（JAR）檔案，可執行於Java SE 8環境，並內含支援Windows、Linux與macOS的Java …
Research Universities Are Admitting Fewer PhDs, a Bad Sign For Science https://news.slashdot.org/story/26/07/06/228207/research-universities-are-admitting-fewer-phds-a-bad-sign-for-science?utm_source=…
新聞微軟本周一（7/6）宣布，為了重新配置人力、投資與資源，以因應快速變化的產業，正裁撤4,800個職位，約占微軟全球員工數的2.1%，主要集中於微軟企業業務（Microsoft Commercial Business）及Xbox部門。微軟人資長Amy Coleman強調，這次被取消的職位並不會被AI取代。 其中，Xbox部門當天也發布消息，表示周一約有1,600人受到影響，但整個2027財年將會…
新聞一起涉及Akira勒索軟體的攻擊案例顯示，駭客透過針對Bing的搜尋引擎最佳化中毒（SEO Poisoning）手法，假冒企業IT維運工具下載頁，鎖定正在搜尋相關工具的IT管理人員，藉此接觸可能具備高權限的企業帳號。 資安事件分析團隊The DFIR Report指出，攻擊者透過仿冒網路監控工具ManageEngine OpManager的下載頁，誘使受害者下載並執行木馬化MSI安裝程式。 該…
新聞6月底Adobe發布網頁應用開發平臺ColdFusion、行銷自動化平臺Campaign Classic更新，修補多達7個10分滿分漏洞成為焦點，有資安公司警告，他們在Adobe公布不久之後，就發現有人試圖利用的情形。 威脅情資平臺KEVIntel創辦人Ryan Dewhurst於社群網站X提出警告，在漏洞細節公布不到兩個小時內，其中一個ColdFusion滿分漏洞CVE-2026-48282…
新聞隨著AI技術重塑資安攻防格局，紅隊演練（Red Team Assessment）也正邁向全新的發展階段。臺灣該領域指標性廠商戴夫寇爾（DEVCORE）近日對此提出最新觀察，指出人機協作將打破過往紅隊演練難以規模化的限制，實現更具持續性與深度的防禦體系缺口評估。 DEVCORE執行長翁浩正強調，紅隊演練的執行方式正迎來一場深刻的典範轉移。過去，多數企業的資安檢測多遵循固定的頻率與範圍，例如每年進…
In its short life, Anthropic has captured hearts, minds, and wallets – and spooked the US government – but it hasn’t actually turned a profit. That’s not stopping CEO Dario Amodei from signing a two-d…
Microsoft Lands Initial AV1 Encoding Using DirectX 12 + HMFT Within Mesa 26.2 The newest, unexpected addition to the Mesa codebase by Microsoft engineers is contributed accelerated AV1 video encoding …
Phoronix@masto.ai
·
Small AI Models Gain Traction Around the World https://slashdot.org/story/26/07/06/221233/small-ai-models-gain-traction-around-the-world?utm_source=rss1.0mainlinkanon
Supreme Court Allows Texas To Require Age Verification For Mobile Apps https://yro.slashdot.org/story/26/07/06/2144244/supreme-court-allows-texas-to-require-age-verification-for-mobile-apps?utm_source…
FCC to end Biden-era rule that forces ISPs to list all their fees FCC to let ISPs stop listing all passthrough fees, give single "up to" price. https://arstechnica.com/tech-policy/2026/07/fcc-to-end-b…
Vulkan Video H.264/H.265 Encode Now Working For Intel Alchemist GPUs On Linux Earlier this year Vulkan Video encode was disabled on newer generations of Intel graphics hardware due to insufficient tes…
Phoronix@masto.ai
·
If you can't afford a graphics card these days, here's an alternative solution. Just order thousands of microcontrollers, design your own boards, and build your own cluster over the course of six mont…
If you listen to the AI industry, coders' days are numbered. Despite these concerns, software developers, at least those with experience, appear to be doing just fine at growing companies. Hiring biz …
Fusion energy has presented a tantalizing alternative to fossil fuels for the better part of a century, but creating the equivalent of a human-made sun is easier said than done. However, new research …
South Korea's SK Hynix Launching $28 Billion US Listing To Ride Global AI Wave https://hardware.slashdot.org/story/26/07/06/1859227/south-koreas-sk-hynix-launching-28-billion-us-listing-to-ride-global…
Kremlin suspected of flying drones over Europe using Russian shadow fleet Drone intruders that possibly flew from Russian ships showed Europe isn’t ready. https://arstechnica.com/gadgets/2026/07/kreml…
