新聞4月24日LiteLLM開發團隊揭露SQL注入漏洞CVE-2026-42208，資安公司Sysdig也發現，在公告發布的36小時後，已有人將其用於實際攻擊，如今美國政府也證實該漏洞遭利用。5月8日美國網路安全暨基礎設施安全局（CISA）發布公告，將CVE-2026-42208列入已遭利用的漏洞名冊（KEV），要求聯邦機構必須在5月11日前完成修補，但對於此漏洞是否被用於勒索軟體攻擊，CISA目…
新聞一週前Trellix在網站發布公告，透露部分原始碼的儲存庫遭未經授權存取，近日有駭客組織聲稱是其所為。根據資安新聞網站Bleeping Computer的報導，勒索軟體RansomHouse近日將Trellix列於資料外洩網站，並發布螢幕截圖，藉此證明他們已成功存取該公司的裝置管理系統，該團體聲稱於4月17日成功入侵Trellix。不過，Bleeping Computer無法確認駭客說法的真實…
新聞微軟上週宣布為其AI工作助理Copilot Cowork推出手機版本並且強化功能，包括技能（skill）及和企業檔案、資料整合的能力。Microsoft 365 Copilot Cowork是微軟於今年三月公布的主動式AI智慧代理人，需透過Frontier預覽計畫申請使用。它是為長期、多步驟的複雜工作流程自動化執行而設計，能跨應用程式（Outlook、Teams、SharePoint）自主執行…
新聞Canvas供應商Instructure四月遭勒索軟體ShinyHunters外洩資料，上週再度入侵網站，導致大學用戶運作大亂，甚至延遲期末考。Instructure上週公告遭ShinyHunters外洩資料後，很快就回復營運，但上週四再度遭ShinyHunters入侵。這群駭客將Canvas入口網站置換成勒索訊息。聲稱未接獲Instructure聯繫，對方反而實施一定的安全措施。由於已過了公…
China’s Cyberspace Administration last week published draft regulations governing the behavior of AI agents and suggested humans should always retain the ability to review decisions taken by software.…
PlayStation3 Emulator Devs Politely Ask Contributors to Stop Submitting 'AI Slop' Pull Requests https://games.slashdot.org/story/26/05/11/0012211/playstation3-emulator-devs-politely-ask-contributors-t…
KETTLE We've been experimenting with LLMs for a while here at The Register, and if you ask our systems editor Tobias Mann and senior reporter Tom Claburn, locally installed coding assistants have actu…
Honda Patents a Fake Clutch for Electric Motorcycles https://tech.slashdot.org/story/26/05/10/224222/honda-patents-a-fake-clutch-for-electric-motorcycles?utm_source=rss1.0mainlinkanon
Linux 7.1-rc3 Released With Many Networking Changes Linus Torvalds just issued the third weekly test candidate of the Linux 7.1 kernel with around a third of the patches being for the networking subsy…
Phoronix@masto.ai
·
Big Tech is Moving Data Through the Gulf Using Fiber-Optic Cables Alongside Iraq's Oil Pipelines https://tech.slashdot.org/story/26/05/10/2136216/big-tech-is-moving-data-through-the-gulf-using-fiber-o…
The Bastl Kalimba is a wild synth that thinks it’s a thumb piano https://www.theverge.com/tech/927638/the-bastl-kalimba-is-a-wild-synth-that-thinks-its-a-thumb-piano
Challenging UPS and FedEx, Amazon Opens Its Shipping Network to All Businesses https://slashdot.org/story/26/05/10/1953232/challenging-ups-and-fedex-amazon-opens-its-shipping-network-to-all-businesses…
GM Secretly Sold California Drivers' Data, Agrees to Pay $12.75M In Privacy Settlement https://yro.slashdot.org/story/26/05/10/1833256/gm-secretly-sold-california-drivers-data-agrees-to-pay-1275m-in-p…
Unemployment Ticked Up in America's IT Sector https://it.slashdot.org/story/26/05/10/0441253/unemployment-ticked-up-in-americas-it-sector?utm_source=rss1.0mainlinkanon
Ashnymph’s Childhood EP is exhilarating dance goth rock https://www.theverge.com/entertainment/927620/ashnymph-childhood-ep-music-review
Amazon Relents, Lets its Programmers Use OpenAI's Codex and Anthropic's Claude https://developers.slashdot.org/story/26/05/10/0618225/amazon-relents-lets-its-programmers-use-openais-codex-and-anthropi…
Unemployed Ticked Up in America's IT Sector https://it.slashdot.org/story/26/05/10/0441253/unemployed-ticked-up-in-americas-it-sector?utm_source=rss1.0mainlinkanon
Writers are fleeing the Substack Tax https://www.theverge.com/tech/927294/substack-tax-ghost-beehiiv
In modern datacenters, storage can live anywhere — local to the machine, remotely accessed over the network, and/or shared between systems. The next generation of servers will treat system memory in m…
Cricut’s $99 craft cutting machine helped me feel creative again https://www.theverge.com/gadgets/924281/cricut-joy-2-smart-cutting-machine-printer-hands-on
