新聞上市電子零組件廠偉訓（3032）於8月30日晚間，在股市公開資訊觀測站發布資安重訊，表示已偵測到部分資訊系統遭受網路安全事件，在發現異常後立即啟動資安應變機制，隔離受影響的資訊系統並進行風險控管，同時委請外部專業資安廠商協助系統復原及事件調查。 針對本次事故可能會造成的影響，偉訓表示，根據他們的初步調查，此次事件尚未造成個人資料、機密資料或重要文件外洩，對公司營運也沒有重大影響。
新聞資安業者OX Security發現24個惡意NPM套件，攻擊者把仿冒Cloudflare的驗證頁面放進NPM套件，再利用第三方鏡像服務自動同步套件的機制，讓網頁出現在正常的鏡像網站網域下，並將開啟頁面的使用者導向其他網站。後期版本還能從遠端取得轉址網址，攻擊者不必重新發布套件，就能隨時更換使用者最後前往的網站，可進一步用於ClickFix或其他釣魚攻擊。 NPM是JavaScript開發常用的…
新聞開源AI代理平臺OpenClaw推出2.0版本，重新調整初次安裝與瀏覽器操作介面，並擴充AI代理工作的執行方式。使用者可將正在進行的工作連同相關檔案，移至其他已配對裝置或雲端工作節點繼續執行，團隊成員也能加入既有工作，在保留原有對話脈絡下共同處理或接手任務。 OpenClaw 2.0修改範圍涵蓋安裝、訊息、記憶、技能、模型、自動化、瀏覽器與原生App、外掛及安全機制。官方表示，本次版本共有93…
Steam On Linux Dips Below 4% For August Valve just published the Steam Survey results for August 2026. After jumping above 4% in July, in August it fell back below that threshold. Meanwhile CachyOS co…
Phoronix@masto.ai
·
新聞信任運算聯盟（Trusted Computing Group，TCG）近日針對信賴平臺模組（Trusted Platform Module，TPM）是否符合抗量子密碼就緒要求，訂出明確門檻。TPM必須符合PC Client Platform TPM Profile 1.07（PTP 1.07），才能被認定為PQC-ready。企業採購相關設備時，可據此要求供應商提出符合規格的證明，不必只依產品…
新聞主打資安防禦AI模型的新創公司Corma宣布完成6,000萬美元種子輪募資，本輪由紅杉資本（Sequoia Capital）領投，Khosla Ventures與Coatue參與投資。Corma也同步結束隱身階段，公開旗下首款AI基礎模型，讓AI代理與資安團隊共同處理企業環境中的威脅偵測與防禦工作。 Corma成立於2025年，在以色列特拉維夫與美國舊金山設有據點。Corma針對資安防禦需求打…
新聞德國資通訊產業協會Bitkom公布最新企業安全調查，外國情報機構對德國企業的威脅快速升高。在曾遭資料竊取、產業間諜或破壞活動影響的企業中，37%表示過去12個月至少有一起事件可歸因於外國情報機構，高於2025年的28%，更較2023年的7%大幅增加，首次成為僅次於組織犯罪集團的第二大攻擊者類型。 從攻擊來源國來看，中國與俄羅斯仍居前兩位。在確定遭受相關事件影響的企業中，52%表示至少有一起攻擊…
新聞微軟威脅情報團隊揭露名為TerminalFix的新一波ClickFix社交工程攻擊。攻擊者利用遭入侵網站顯示假的Cloudflare Turnstile驗證畫面，誘導使用者複製惡意命令，再貼到Windows Terminal或PowerShell執行。受害主機遭感染後，攻擊者便可透過這臺主機建立反向通道，把它當成進入企業內部網路的跳板。 圖片來源/微軟 與早期ClickFix變形攻擊多半只投遞…
Anthropic says it's taking steps to limit the misbehavior of its AI models after a review found Claude models going beyond the scope of fictional cybersecurity tests and gaining unauthorized access to…
After several weeks of anticipation, Mozilla has started rolling out ad blocking to the iOS version of its popular browser, but you can still expect to see ads on Mozilla's own pages, including the ne…
AI model testing organization METR has disclosed two attacks that happened earlier this year, including one in which an attacker stole an API key and spent three weeks consuming public-model credits w…
Security researchers reported that someone is exploiting CVE-2026-82329, a critical JFrog Artifactory authentication-bypass bug, just days after the vendor patched the 9.8-rated flaw. And we don't kno…
GoPro Says It's Moving Into Data Centers As Part of a $285 Million Merger https://slashdot.org/story/26/09/01/1943244/gopro-says-its-moving-into-data-centers-as-part-of-a-285-million-merger?utm_source…
WinBtrfs 1.10 Released With Two Years Worth Of Improvements For Btrfs On Windows WinBtrfs is a driver for Microsoft Windows to support reading and writing to Btrfs file-systems. WinBtrfs works with Wi…
Phoronix@masto.ai
·
Who Is John Ternus, the New Apple CEO? https://hardware.slashdot.org/story/26/09/01/1955204/who-is-john-ternus-the-new-apple-ceo?utm_source=rss1.0mainlinkanon
AMDGPU Linux Driver's Latest Patches For HDMI Passive VRR Support As part of AMD's ongoing effort for getting HDMI 2.1 support squared away in their upstream AMDGPU kernel graphics driver, sent out to…
Phoronix@masto.ai
·
Dyson Made a Camera-Equipped Toothbrush That Flosses For You https://tech.slashdot.org/story/26/09/01/1927243/dyson-made-a-camera-equipped-toothbrush-that-flosses-for-you?utm_source=rss1.0mainlinkanon
BT's Old Copper Landline Network Could Be Worth Over $2 Billion https://news.slashdot.org/story/26/09/01/1815258/bts-old-copper-landline-network-could-be-worth-over-2-billion?utm_source=rss1.0mainlink…
August research roundup: 7 cool science stories we almost missed Also: A surprising connection between whale calls and special relativity, tiny sound-powered drones, and more. https://arstechnica.com/…
This is what a supercar was like a century ago When the average car could only do 40 mph, this Bentley could break 100. https://arstechnica.com/cars/2026/09/this-is-what-a-supercar-was-like-a-century-…
