新聞企業軟體與資安設備業者Ivanti於6月9日發布安全公告，修補Ivanti Sentry兩項重大（Critical）風險等級漏洞，分別為CVE-2026-10520與CVE-2026-10523。Ivanti Sentry前身為MobileIron Sentry，是用於保護企業後端系統與遠端行動裝置之間流量的安全閘道設備。其中，CVE-2026-10520是作業系統命令注入漏洞，CVSS風險分…
新聞Fortinet本週發布安全更新，修補其FortiSanbox雲端及本地部署三個版本的重大指令注入漏洞。在5月，該公司也針對FortiSandbox系列修補遠端程式碼執行（RCE）漏洞。編號CVE-2026-25089由Fortinet產品安全部門研究人員發現及通報，為FortiSandbox產品的OS指令注入漏洞，CVSS風險值達9.1，源於Web介面的start vnc功能在處理輸入的JS…
新聞工控系統業者西門子（Siemens）於6月9日發布安全公告，說明OpenSSL重大風險漏洞CVE-2025-15467對多款產品的影響，並已針對部分產品提供修補版本。此漏洞CVSS v3.1風險分數為9.8分，屬重大（Critical）風險等級。西門子指出，此漏洞發生於OpenSSL解析帶有惡意AEAD參數的CMS AuthEnvelopedData訊息時，可能觸發堆疊緩衝區溢位，導致應用程式…
新聞企業雲端工作流程平臺業者ServiceNow傳出安全事件。Bleeping Computer於6月9日報導，ServiceNow已通知受影響客戶，攻擊者濫用一項安全漏洞，可讓未經身分驗證的使用者在特定情況下，取得超出範圍的ServiceNow執行個體存取權限，並透過組態不良的API端點，查詢部分客戶執行個體的資料表。根據Reddit使用者轉貼的ServiceNow客戶支援公告內容，Servic…
新聞6月9日美國網路安全與基礎設施安全局（CISA）提出警告，他們掌握3個資安漏洞遭到積極利用的證據，將其列入已遭利用的漏洞名單（KEV），要求聯邦機構於6月23日完成修補。其中有兩個資安漏洞特別值得注意，一個是思科上週揭露的CVE-2026-20245，此漏洞存在於Catalyst SD-WAN Manager，為輸出不當編碼或逃逸漏洞，CVSS風險評為7.8分，該公司已開始為部分版本提供修補程…
新聞6月9日Adobe發布本月例行更新，為旗下11款應用系統提供修補程式，總共修補123個資安漏洞。值得留意的是，該公司將企業行銷自動化與客戶關係管理（CRM）平臺Campaign Classic、網頁應用程式開發平臺ColdFusion的修補優先順序列為第一級，呼籲用戶必須特別優先處理。從漏洞的嚴重程度而言，這次Adobe為Campaign Classic修補兩個CVSS風險皆達到10分滿分的重…
AI companies have touted context retention (memory) and the availability of personal details (personalization) as mechanisms for improving AI model interaction. Both have value to help keep models fro…
Multiple reports indicate that Chinese operatives continue using every tech tool at their disposal – including American AI – to amass data on and manipulate everyone from security-clearance holders to…
ReactOS "Open-Source Windows" Reaches The Milestone Of Being Able To Run Half-Life ReactOS, the open-source operating system working for binary compatibility with Microsoft Windows computer programs a…
Phoronix@masto.ai
·
Bluesky is getting ‘communities’ https://www.theverge.com/tech/948215/bluesky-communities-at-protocol-atmosphere-reddit
Framework delays its first Laptop 13 Pro shipments by a month https://www.theverge.com/gadgets/948044/framework-laptop-13-pro-delay-shipment-july-august
Microsoft Defender 'RoguePlanet' Zero-Day Grants SYSTEM Privileges https://it.slashdot.org/story/26/06/10/2053232/microsoft-defender-rogueplanet-zero-day-grants-system-privileges?utm_source=rss1.0main…
Apple’s new Siri AI knows when to shut up https://www.theverge.com/tech/948155/apple-siri-ai-chatbot-personality
Google won’t just admit it’s feeding YouTube creators to its music AI https://www.theverge.com/tech/947770/google-lyria-music-ai-lawsuit-youtube
Diabetes org apologizes for ejecting scientists over criticism of Trump For days after the stunning incident, the ADA had doubled-down on the choice. https://arstechnica.com/health/2026/06/diabetes-or…
Visa Plugs Its Payment Network Into ChatGPT https://news.slashdot.org/story/26/06/10/2030213/visa-plugs-its-payment-network-into-chatgpt?utm_source=rss1.0mainlinkanon
Nearly a million passports and photo IDs were left unprotected on the public internet https://www.theverge.com/tech/947157/passports-data-breach-cannabis-club-systems-nefos-puffpal
Anthropic's newly released Claude Fable 5 generative AI model is trying so hard to be safe that it's hurting its own userbase. Customers attempting to use the AI knowledge regurgitator are reporting t…
I love Star Trek so much. I’ve watched most Trek series multiple times over the decades, and was shocked when, on my most recent watch of The Next Generation, I noticed something: High definition upsc…
Xbox warns of a ‘reset’ as it prepares for layoffs https://www.theverge.com/games/948142/microsoft-xbox-layoffs-reset-asha-sharma
