新聞網路身分安全不斷受到挑戰，金融防詐必須擴大至跨業聯防，使得電信行動身分識別的發展備受關注。臺灣在2018年已推動Mobile ID（簡稱MID），但面對日益複雜的全球網路詐騙浪潮，國際間的全球行動通訊系統協會GSMA於2023年發展相關標準來因應，今年初我們也曾報導GSMA Open Gateway的發展態勢，如今臺灣三大電信業者與臺灣網路認證公司（TWCA）聯手於7月1日宣布，啟動新一代MI…
新聞Anthropic的Claude Code技術主管Thariq Shihipar周三（7/1）透露，Anthropic今日（7/2）將自Claude Code移除一項針對中國市場的實驗性防禦機制。該機制近日遭揭露會暗中偵測中國時區、網域及AI實驗室，並透過隱寫術（Steganography）將結果藏在系統提示詞中回傳，以防範未授權轉售與模型蒸餾（Distillation），但因缺乏透明度引發開…
US Home Battery Installations Hit Record High On Rising Electricity Costs https://hardware.slashdot.org/story/26/07/01/237251/us-home-battery-installations-hit-record-high-on-rising-electricity-costs?…
新聞6月30日Adobe為網頁應用開發平臺ColdFusion、行銷自動化平臺Campaign Classic發布更新，總共修補了12個漏洞，其中有7個是達到10分滿分的弱點而受到關注。Adobe將這次修補的優先程度列為第一級，認定相關的風險較高，建議用戶應在72小時內完成修補。這次修補的漏洞大部分都出現在ColdFusion，僅有一項影響Campaign Classic。其中有6項滿分漏洞出現在…
新聞軟體大廠Oracle於4月底宣布，因AI顯著改變挖掘軟體漏洞的方法，他們決定調整發布例行更新的週期因應，如今也有其他公司跟進這樣的策略，採取更高的頻率發布軟體更新。6月25日Adobe透過部落格文章表示，前沿AI模型與AI代理分析工具現在能以遠超傳統方法的速度，在大型程式碼庫中找出安全缺陷，不僅該公司將AI用於資安修補，攻擊者也同樣能取得這些前沿AI工具，導致漏洞公開揭露到實際利用的時間，正從…
新聞攻擊面安全與滲透測試服務業者Cobalt發布《2026年AI與滲透測試趨勢報告》（AI and Pentesting Pulse Report 2026），指出企業快速導入大型語言模型（LLM）與AI應用的同時，也導致模型整合、外部資料與工具連接、提示與輸出處理等環節成為新的攻擊入口，使AI應用在滲透測試中呈現較高的漏洞風險。Cobalt分析旗下攻擊性安全平臺的滲透測試資料發現，高風險漏洞平均…
Oracle is burning hundreds of billions to finance AI datacenters for the likes of OpenAI. Now, the company is admitting they may not pay off. Amid the usual boilerplate, Big Red cited numerous risk fa…
新聞5月下旬微軟公布一項SharePoint資安漏洞CVE-2026-45659，一個月後出現實際的漏洞利用活動。7月1日美國網路安全與基礎設施安全局（CISA）表示，他們將此漏洞列入已遭利用漏洞名單（KEV），聯邦機構必須在7月4日前完成修補，原因在於，他們已掌握有人積極利用的證據。CVE-2026-45659存在於SharePoint Server Subscription Edition、S…
新聞4月初資安研究員Chaotic Eclipse（Nightmare-Eclipse）公布Microsoft Defender漏洞BlueHammer，攻擊者若是成功利用，就能得到SYSTEM權限。同月微軟在例行更新（Patch Tuesday）修補，並登記為CVE-2026-33825列管。4月下旬威脅情報公司Huntress警告已遭利用，美國網路安全與基礎設施安全局（CISA）於4月22日也…
Fedora Council Seeks To Shutdown Current Discussions Over AI Developer Desktop Stemming from the widely varying views over the recent Fedora proposal for an "AI Developer Desktop" catering to running …
Phoronix@masto.ai
·
Steam On Linux Usage Receded A Bit In June Back in March Steam on Linux use shot up to 5.33% as a big 3.1% improvement over February. In April it dropped to 4.52% and then fell to 3.99% in May. Valve …
Phoronix@masto.ai
·
Sony will stop making physical copies of PlayStation games in 2028 “We will own nothing, it's truly sad.” https://arstechnica.com/gaming/2026/07/sony-will-stop-making-physical-copies-of-playstation-ga…
T-Mobile Appears To Be Quitting VMware Amid Support Rights Lawsuit With Broadcom https://yro.slashdot.org/story/26/07/01/2255231/t-mobile-appears-to-be-quitting-vmware-amid-support-rights-lawsuit-with…
Vibe coders apparently don't understand what their AI servants write - at least that’s what the team behind open-source game engine Godot seems to be implying with a new policy that cracks down on AI-…
Anthropic says that it plans to remove hidden codes it added to Claude Code several months ago to catch other AI companies that are trying to steal from its models. Thariq Shihipar, an engineer at Ant…
Anthropic has released the latest version of its mid-sized model, Sonnet 5, which the company claims is its most “agentic” yet. For developers writing agents to automate tedious and recurring tasks, S…
EvilTokens, the device-code phishing kit that can allow criminals to bypass multi-factor authentication (MFA) and silently authenticate as the victim to the organization's Microsoft 365 applications, …
新聞德國CISPA Helmholtz資訊安全中心上周揭露，蘋果的AirDrop與Android陣營的Quick Share近距離檔案分享功能總計存在6個安全漏洞，駭客只要位於無線訊號範圍內，無需與使用者互動，即可能癱瘓AirDrop分享服務，或者繞過Quick Share的部分安全檢查。AirDrop是蘋果提供Mac、iPhone及iPad等裝置使用的近距離檔案分享功能；Quick Share則…
Meta Is Reportedly Building Its Own Cloud Business https://meta.slashdot.org/story/26/07/01/1952253/meta-is-reportedly-building-its-own-cloud-business?utm_source=rss1.0mainlinkanon
T-Mobile moving tens of thousands of virtual machines off VMware amid lawsuit T-Mobile wants Broadcom to keep supporting its VMware perpetual licenses. https://arstechnica.com/information-technology/2…
