Patches Posted For Fixing The Linux DRM Scheduler's Fair Policy
Patches Posted For Fixing The Linux DRM Scheduler's Fair Policy Ahead of the Linux 7.2 kernel release expected out on Sunday, the Direct Rendering Manager (DRM) subsystem was forced to revert their "f…
BOFH: How our Covid ransomware protocol's Y2K blockchain lowered uptime
EPISODE 15: The Boss has popped into Mission Control to remind us to send him the numbers he needs for his monthly management report. Once's he's gone the PFY sighs, makes up a set of numbers, appends…
Open-Source exFAT Programs 1.4.3 Improves Fsck & Mkfs
Open-Source exFAT Programs 1.4.3 Improves Fsck & Mkfs Ahead of the Linux 7.2 kernel release expected on Sunday, a new release of the exFAT file-system user-space programs was released overnight... htt…
Slackware-Based Zenwalk Linux Aims For "True Low Latency Desktop Experience"
Slackware-Based Zenwalk Linux Aims For "True Low Latency Desktop Experience" It's been a long time since hearing much out of the Zenwalk project, the Linux distribution built off Slackware. It's still…
【資安日報】8月14日，VMware vCenter重大漏洞遭利用
新聞本日新聞焦點 ● APT駭客開始利用VMware vCenter重大漏洞 ● Windows零時差漏洞遭北韓駭客用於攻擊國防與航太業者 ● AI框架自主攻擊臺灣政府，竊得逾2,500筆人員資料 ● 攻擊行動City-Forum鎖定Salesforce與ServiceNow用戶 ● 殭屍網路Kimwolf v7利用HTTP/2隱匿DDoS流量 資安新聞總覽 VMware vCenter重大漏洞遭…
Scottish prosecutors cast eye over leaky supplier after staff data exposed
Scotland's public prosecution service has warned 300 staff that their personal information may have been caught up in a cyberattack on one of its suppliers. The Crown Office and Procurator Fiscal Serv…
大型語言模型Kimi K3資安評測作弊，連上GitHub找答案
新聞AI資安研究團隊Frontier Security評測大型語言模型Kimi K3的資安能力，發現Kimi K3沒有按照預期方式完成題目，而是主動檢查隔離測試環境的網路連線，甚至直接從GitHub下載官方基準測試儲存庫，從中找到題目答案。 研究人員使用隔離式沙箱限制模型活動範圍，同時開放命令列，讓Kimi K3實際操作系統，解答類似資安奪旗競賽的題目。Kimi K3執行任務後先探查網路環境，發現…
Claude Code returns blank thinking blocks, but reasoning still costs you
Anthropic's Claude Code appears to be having trouble displaying summaries of its "thinking," according to several bug reports, while the underlying reasoning tokens still cost money. According to comp…
中國駭客Jewelbug間諜與加密貨幣詐騙並行，共用控制平臺與伺服器
新聞資安廠商Symantec威脅獵捕團隊揭露中國駭客組織Jewelbug的最新活動，發現該組織一面入侵中東、東南亞與南亞的政府及軍事單位從事間諜活動，一面經營鎖定華語使用者的加密貨幣詐騙，兩邊共用控制平臺、伺服器與受害者資料庫。 整個行動以XG-Web控制平臺為中心，Jewelbug會在Chrome與Firefox安裝偽裝成PDF Viewer的惡意擴充套件，竊取帳密、瀏覽器Cookie等登入狀態…
Meta已封鎖逾75萬個未滿16歲的澳洲用戶帳號
新聞Meta周三（8/12）公布澳洲社交媒體禁令執行情況，指出截至今年6月底，已封鎖超過75萬個被判定屬於未滿16歲澳洲用戶的Facebook及Instagram帳號。 澳洲國會在2024年11月通過全球首見的未成年人社交媒體禁令，要求Facebook、Instagram、TikTok、Snapchat、X及YouTube等社交平臺採取合理措施，阻止未滿16歲者建立或持有帳號，該禁令於2025年1…
Five years after quitting a job, developer’s former boss asked for rapid tech support
ON CALL “I can't stand it, I know you planned it, I'm gonna set it straight, this Watergate” is the opening of the Beastie Boys classic Sabotage, a fact we mention as it will soon become pertinent to …
Scientists Turn Starlink Into a Giant Scanner For Earth's Upper Atmosphere…
Scientists Turn Starlink Into a Giant Scanner For Earth's Upper Atmosphere https://science.slashdot.org/story/26/08/14/0230250/scientists-turn-starlink-into-a-giant-scanner-for-earths-upper-atmosphere…
Czinger debuts topology-optimized brakes with 21C Spyder
Czinger debuts topology-optimized brakes with 21C Spyder Czinger used topological design and additive manufacturing to make the brakes. https://arstechnica.com/cars/2026/08/czinger-debuts-topology-opt…
美國首度可授權民間公司，參與打擊境外網路犯罪集團
新聞美國總統川普（Donald Trump）周三（8/12）簽署總統備忘錄，建立一項新的網路行動計畫，首度以正式制度授權經審核的美國民間公司，在聯邦政府指揮及監督下，對境外網路犯罪集團執行監控甚至攻擊行動。 此一政策源自於川普今年3月簽署的《Combating Cybercrime, Fraud, and Predatory Schemes Against American Citizens》行政…
Microsoft's dueling Copilot apps have combined into a single entity
Microsoft’s consumer Copilot app and Microsoft 365 Copilot are separate no more, with a unified Copilot app beginning its rollout Thursday - minus a few features. The Windows maker and AI pusher annou…
Give Google the boot by building your own search engine
If you're fed up with search results drowning out the bits of the web you actually care about, you could always build your own search index, as one developer did. Nottingham, UK-based software dev Ale…
OpenAI ditches Recall-style screenshot surveillance for friendly keylogging
If you want to record whatever you do on a computer, send those records to OpenAI, use more ChatGPT tokens, and increase your vulnerability to prompt injection, then OpenAI has something for you. It's…
New Zealand says China tried using space investments to spy on local affairs
New Zealand’s Security Intelligence Service (NZSIS) has claimed Chinese companies are building space facilities in the nation to gather military intelligence. Director-general of security Andrew Hampt…
政府系統淪AI Agent攻擊實戰場，TeamT5執行長蔡松廷：自動化攻擊早已進入下一個時代
新聞今年8月中旬，英國金融時報《Financial Times》引述資安新創公司Dreams Security的最新報告，揭露一套完整的自主式AI攻擊框架，在2026年7月1日至4日期間，針對亞洲某國政府機關發動長達四天、共12波的入侵行動。 這套建立在Hermes與OpenClaw這兩個Agent執行框架之上的系統，不僅完成偵察、初始入侵、橫向移動到資料外洩的整條攻擊鏈，還在過程中自主研究新漏洞…
攻擊行動City-Forum鎖定Salesforce與ServiceNow，利用自製工具大規模蒐集公開資料
新聞鎖定Salesforce用戶發動的攻擊行動不時傳出，其中一組最常出現在新聞版面的駭客組織是ShinyHunters，他們曾利用Salesloft Drift、Gainsight等第三方應用程式權杖，竊取Salesforce用戶資料，如今有資安公司，有其他駭客組織 資安公司Reco揭露長期攻擊行動City-Forum，攻擊者主要的目標，就是Salesforce與ServiceNow用戶。值得留意…
Phoronix@masto.ai
·
