新聞AI程式開發工具已成為軟體供應鏈攻擊目標。駭客不只鎖定開發環境中的身分驗證憑證,也開始利用提示詞注入(Prompt Injection)操控AI程式開發助理,甚至干擾AI安全掃描。 Google威脅情報小組(GTIG)指出,今年第二季觀察到攻擊者運用AI的方式,已從較基礎的提示詞操作,進一步轉向代理式AI工作流程,並利用AI將攻擊流程自動化。這類做法可加快攻擊節奏,壓縮防禦人員的應變時間。GT…
業界新聞
Follow from your instance
@it-industry-news@baudrate.tw
Search for this handle on your own server to follow from there.
新聞企業遙測資料平臺業者Cribl於8月中旬宣布,取得AI資安新創Radiant Security旗下AI原生資安營運中心(Security Operations Center,SOC)產品的技術資產與智慧財產權,目前正調整相關技術,使其能以應用程式形式執行於Cribl既有遙測資料平臺,並用於自動進行資安警示分類、調查及處置。 Cribl表示,Radiant Security的技術不必完全依賴事先…
新聞電子郵件行銷與CRM服務商Brevo於9月9日發生資安事件,攻擊者取得部分客戶帳號的存取權限,並透過客戶的合法郵件發送管道寄送網釣信。Brevo事後確認,共有138個帳號遭入侵,其中6個被用來寄送網釣信。根據The Record報導,已知受影響業者包括硬體加密貨幣錢包品牌Trezor與BitBox,以及加密貨幣資產追蹤服務CoinTracking。 Trezor於9月10日說明,目前無法確認透…
新聞GitLab修補CVSS風險分數達10分的重大(Critical)路徑穿越漏洞CVE-2026-85706,未通過身分驗證的遠端攻擊者在特定條件下,可能讀取GitLab伺服器上的任意檔案。GitLab於9月10日發布GitLab Community Edition(CE)與Enterprise Edition(EE)19.1.8、19.2.6及19.3.2版,並呼籲使用自管GitLab環境的企…
Unvaccinated Pennsylvania woman died of measles complications, coroner says The 40-year-old unvaccinated woman reportedly had underlying health conditions. https://arstechnica.com/health/2026/09/unvac…
Linux 7.3-rc3 Released: "Another Fairly Large RC" Out today is the third weekly release candidate of Linux 7.3 as this next kernel version works its way toward a stable release in the second half of O…
NASA and IBM Open Source Lunar Mapping Tools https://science.slashdot.org/story/26/09/12/182253/nasa-and-ibm-open-source-lunar-mapping-tools?utm_source=rss1.0mainlinkanon
California's Gig Drivers Just Secured Collective Bargaining Power with Newly Certified Union https://yro.slashdot.org/story/26/09/13/0245218/californias-gig-drivers-just-secured-collective-bargaining-…
Zstd Improvement For Linux 7.4 To Avoid Redundant Initialization In addition to Usama Arif's recent Linux patches for addressing a major inefficiency within the Linux kernel's Zstd compression code, h…
Even for 1982, the Sinclair ZX Spectrum had poor sound: a piezoelectric speaker that could beep. But you can do a lot with a single bit if you turn it on and off really fast. Michael Martin's Bumbersh…
Flock Worker Calls Police On Reporter - For Filming Them in Public https://yro.slashdot.org/story/26/09/13/0650227/flock-worker-calls-police-on-reporter---for-filming-them-in-public?utm_source=rss1.0m…
The term "security through obscurity" describes an old idea that networks and systems will remain secure so long as their architecture, along with any vulnerabilities or other weaknesses, remains secr…
BFS File-System Being Removed For Linux 7.4 The latest upstream file-system to be removed from the mainline Linux kernel is... BFS... https://www.phoronix.com/news/BFS-Filesystem-To-Be-Removed
ARCTIC's Fan Controller Driver For Linux Being Dual-Licensed With BSD-2-Clause Earlier this year ARCTIC published a fan controller driver for Linux. Besides being rare for an enthusiast-oriented compa…
GNOME Shotwell 33 Photo Manager Released With GTK4 Port It's been quite some time since hearing any news out of the Shotwell photo manager project for GNOME, but out today is Shotwell 33 with the long…
PART 1 Xfce is one of the oldest and smallest desktops, but it's also one of the most malleable: it can look and work like multiple other OSes. Best of all, an optional extra Xfce tool automates away …
Malicious OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers in May https://slashdot.org/story/26/09/12/2318204/malicious-openai-agents-linked-to-rubygems-campaign-that-gaine…
Sam Bankman-Fried, Former Crypto Billionaire, Appeals His Conviction To the US Supreme Court https://yro.slashdot.org/story/26/09/12/2151206/sam-bankman-fried-former-crypto-billionaire-appeals-his-con…
Anthropic CEO Dario Amodei Calls For AI Slowdown https://slashdot.org/story/26/09/12/1738240/anthropic-ceo-dario-amodei-calls-for-ai-slowdown?utm_source=rss1.0mainlinkanon
EROFS Disables LZ4 Rolling Decompression Due To Data Corruption Possibility The EROFS read-only file-system popular for embedded systems, containers, and other use-cases has resorted to temporarily di…