@it-industry-news@baudrate.tw
Search for this handle on your own server to follow from there.
新聞9月1日Mozilla基金會發布Firefox 155改版，開放部分國家試用AI聊天功能Smart Window，加入網址列顯示封鎖網站追蹤器數量的功能，以及導入多帳號分隔機制容器（Container）排序機制。值得留意的是，該基金會同時修補了29個資安漏洞，其中有13個是高風險等級、7個中等弱點，以及9個低風險弱點，部分問題也在同一天發布的Firefox ESR 153.2、ESR 140.…
US senator calls on the NSA to give guidance for use of VPNs Open source, commercial, single-hop, multi-hop, mixnet? The array of options is dizzying. https://arstechnica.com/security/2026/09/us-senat…
新聞英國非營利研究機構長期韌性中心（Centre for Long-Term Resilience，CLTR）最新研究指出，今年截至8月9日已辨識1,664起AI失控相關事件。雖然多數事件並未造成重大傷害，但事件嚴重程度正在升高，部分AI代理甚至出現規避既有安全控制的行為。 研究觀察到，有AI代理自行加入偽造的使用者訊息，營造已取得同意的假象；另有案例顯示，AI代理偽造使用者核准訊息，藉此繞過要求…
新聞9月3日Google發布電腦版與Android版Chrome 152更新，總共修補12個資安漏洞，其中10個為高風險等級、2個為中等風險弱點。值得留意的是，Google指出其中的高風險漏洞CVE-2026-85046，已出現遭到實際利用的跡象，Windows與macOS版用戶應儘速升級至152.0.7977.82或152.0.7977.83版，Linux與Android版用戶應升級至152.0…
Reports: RFK Jr. ordered measles deaths deletion; CDC still secretly counts them CDC staff had already accepted the measles death reports when RFK Jr. meddled. https://arstechnica.com/health/2026/09/r…
新聞資安業者Manifold Security揭露AI程式開發代理的GitSpawn安全問題，涵蓋Claude Code、OpenAI Codex、Cursor、Goose、Hermes Agent、Qwen Code與Grok Build等7款工具，共發現8項問題。GitSpawn問題出在代理會自行使用Git取得專案資訊，卻未排除專案本身的Git設定，攻擊者可藉此讓惡意程式在安全核准前執行。 A…
新聞Perplexity在Mac版應用程式加入Hybrid Compute混合推論功能，讓Perplexity Computer在同一項工作中搭配雲端與Mac本機模型。雲端模型負責推理、網路搜尋與工作規畫，本機模型則處理私密檔案、敏感資訊與電腦操作，資料送往雲端前，還會先經過Mac上的隱私閘門檢查，控制受保護內容能否離開裝置。 Perplexity今年4月推出Personal Computer，讓…
Ubuntu 26.10 Snapshot 3 Monthly ISOs Released For Testing Released tonight is Ubuntu 26.10 "Stonking Stingray" Snapshot 3 as the newest monthly ISO candidates for Ubuntu Linux... https://www.phoronix.…
Phoronix@masto.ai
·
新聞開放全球應用程式安全計畫（OWASP）在2026年LLM十大安全風險中，將過度代理授權（Excessive Agency）列為第3大風險。IT研究與顧問機構Enterprise Management Associates（EMA）最新調查也顯示，企業在AI代理權限控管能力上存在明顯落差，94%受訪者有信心AI代理取得的權限沒有超出工作所需，但實際落實最小權限原則的企業只有32.7%。 EMA此…
新聞英國政府資安機構國家網路安全中心（NCSC）今年7月公布PQC轉型工作坊成果，指出企業推動後量子密碼學（Post-Quantum Cryptography，PQC）轉型，除了盤點內部系統與密碼學資產，也要及早掌握供應商的產品升級進度。如果設備、軟體或服務無法如期支援PQC，即使企業已展開準備，轉型進度仍可能受到影響。 NCSC建議企業把PQC需求納入供應商資安評估與採購條件，確認新產品何時支援…
新聞澳洲政府情報與資安機構澳洲通訊局（ASD）今年7月提出企業後量子密碼學（Post-Quantum Cryptography，PQC）轉型實務做法，建議企業首先找出目前仍使用傳統非對稱式密碼學的系統，以及其中的密碼學相依關係。 ASD將PQC轉型方法整理為LATICE架構，涵蓋盤點（Locate）、評估（Assess）、排定優先順序（Triage）、執行（Implement），以及溝通（Comm…
Xbox imposes harsh new time limits for Game Pass game streaming Over 1 million Game Pass subscribers will have to pay more for their heavy streaming use. https://arstechnica.com/gaming/2026/09/xbox-im…
After a brief training pause to reflect on the inadequacy of its AI security measures, OpenAI has released GPT-6 Astra, initially for those in its Trusted Access Program. Assuming all goes well and th…
Four Major AI Models Suffer Rare Overlapping Downtime https://tech.slashdot.org/story/26/09/03/2023242/four-major-ai-models-suffer-rare-overlapping-downtime?utm_source=rss1.0mainlinkanon
The chief exec of Hugging Face says he wants to take the platform to 100 million users within the next few years, and Nvidia’s backing could help it get there, despite rejecting an investment offer fr…
CERN is moving several thousand computers that control its particle accelerator hardware from Red Hat-family Linux distros to Debian. CERN – the place that runs the Large Hadron Collider – generates a…
The disgruntled security researcher known as Nightmare Eclipse (aka Chaotic Eclipse, Infinite Nightmare, and now also MSNightmare) is moving away from their singular Microsoft vendetta and on to other…
OpenAI says its ChatGPT service is recovering from a limited outage this morning amid similar problems affecting SpaceX's Grok and Anthropic's Claude. It might not be a good time for a chat. "A routin…
OPINION Nvidia on Thursday announced an agreement to acquire open source AI evangelist and model depot Hugging Face for $12.9 billion in a deal that's expected to close next year, assuming regulators …
Apple Sued For $2.7 Billion Over App Tracking Transparency Rules https://yro.slashdot.org/story/26/09/03/2015253/apple-sued-for-27-billion-over-app-tracking-transparency-rules?utm_source=rss1.0mainlin…
