新聞美國網路安全暨基礎設施安全局(CISA)公布2024至2025會計年度漏洞分析結果。近兩年CVE新增數量快速攀升,但實際遭利用的漏洞仍反覆涉及長年存在的軟體弱點,其中41.5%的已知遭利用漏洞(KEV)涉及MITRE長期追蹤的弱點。 統計顯示,CVE紀錄從2024年度的14,234筆增至2025年度的30,517筆,數量增加超過一倍。進一步觀察KEV,這兩年度的漏洞主要集中在6種軟體弱點,包括…
業界新聞
Follow from your instance
@it-industry-news@baudrate.tw
Search for this handle on your own server to follow from there.
新聞雲端原生運算平臺Kubernetes正式發布Kubernetes 1.37,其中Pod憑證(Pod Certificates)與叢集信任套件(Cluster Trust Bundles)同時升為穩定版(Stable)。新機制讓Pod可透過Kubernetes取得X.509憑證,並由Kubelet處理私密金鑰與憑證生命週期,提供服務帳號JWT(Service Account JWT)之外的工作負…
新聞Google公布Android 17新一波網路隱私與連線安全措施,重點防範網路追蹤、App未經授權存取區域網路,以及偽基地臺攻擊等風險。新版系統導入ECH(Encrypted Client Hello)支援,在App使用的網路函式庫與遠端伺服器均支援ECH時,可加密TLS建立連線時可能暴露的伺服器名稱資訊,減少網路業者或其他中介者辨識使用者連線網域的機會。 Android 17也進一步限制Ap…
新聞研究調查機構Gartner預估,全球AI安全市場規模將從2026年的28.35億美元成長至2027年的47.83億美元,年增68.7%,2028年更將接近77億美元。 Gartner指出,企業AI專案除了面臨新興漏洞,第三方與開源軟體的漏洞增加,加上供應鏈攻擊,也使整體安全風險進一步升高。Gartner預測,到2029年,成功攻擊AI代理(AI Agent)的事件中,超過半數將涉及存取控制弱點…
NVIDIA Posts Linux Scheduler Patches To Further Boost SMT Performance On NVIDIA Vera Hitting the Linux kernel mailing list today is a new kernel scheduler patch series to enable preferred SMT siblings…
FTC Sues Amazon, Accusing the E-Commerce Giant of Misleading Advertisers https://yro.slashdot.org/story/26/08/31/225238/ftc-sues-amazon-accusing-the-e-commerce-giant-of-misleading-advertisers?utm_sour…
The Bentley Supersports: A stripped-out engineer's indulgence It's the lightest Bentley in 85 years. https://arstechnica.com/cars/2026/08/the-bentley-supersports-a-stripped-out-engineers-indulgence/?u…
El Niño is now stronger than at any point in the last 1,000 years, study finds “One more warning sign here of what we're facing in a warmer world.” https://arstechnica.com/science/2026/08/el-nino-is-n…
Apple Caught Off Guard by AI Demand for Mac Mini and Mac Studio https://hardware.slashdot.org/story/26/08/31/2133202/apple-caught-off-guard-by-ai-demand-for-mac-mini-and-mac-studio?utm_source=rss1.0ma…
Rust Coreutils 0.11 Released With Some Nifty Debug Helper Messages Rust Coreutils 0.11 was just released as this alternative to the GNU Coreutils. Besides the long-running task of catching up the GNU …
Get in on the Ars community that doesn’t fit beneath an article You've read the stories. Now check out our forums. https://arstechnica.com/staff/2026/08/get-in-on-the-ars-community-that-doesnt-fit-ben…
Firefox 155 Available With Faster Page Loads Via Happy Eyeballs v3, QUIC v2 For HTTP/3 The Mozilla Firefox 155 release binaries are now available ahead of the formal announcement on Tuesday for this l…
Broadcom Pledges to Lock Down Open Source Python, Java Libraries https://it.slashdot.org/story/26/08/31/2047247/broadcom-pledges-to-lock-down-open-source-python-java-libraries?utm_source=rss1.0mainlin…
Rather than paying for their own Claude usage, crims are using malware to steal access to other people's accounts. Aware of this issue, Anthropic has signed at least one affected user out and removed …
Broadcom has decided to take responsibility for the security of some important open-source software, namely the Spring Java application framework and RabbitMQ. Australian developer Rod Johnson created…
An unknown miscreant is using "TerminalFix" to trick unsuspecting users into running PowerShell commands that infect their computers with a reverse tunnel granting attackers access to their networks. …
OpenClaw has unveiled what its makers call its largest ever update – large enough to earn a 2.0 moniker – with usability taking center stage, along with some security updates that critics are suggesti…
Orbify.eu, a two-year-old Norwegian startup, wants people to see the world in a new way – through a warped lens that bends rendered map scenes into the dream sequence perspective seen in Christopher N…
Kalshi Dishes Out Its First-Ever Lifetime Ban to George Santos https://news.slashdot.org/story/26/08/31/1934242/kalshi-dishes-out-its-first-ever-lifetime-ban-to-george-santos?utm_source=rss1.0mainlink…
Review: Coyote vs. Acme is an unabashed love letter to Looney Tunes Director Dave Green's live action/animated hybrid captures smart, subversive weirdness of the classic cartoons. https://arstechnica.…