新聞5月底資安公司Rapid7揭露自建Git程式碼版本管理系統Gogs重大漏洞,並指出他們向Gogs開發團隊通報後未收到回應,於是決定公布細節並呼籲用戶採取行動,依照該公司提供的指引降低風險。在公布一個禮拜後,Gogs開發團隊終於受理Rapid7提供的修補程式碼,並於6月7日發布0.14.3版更新予以修補。不過,此漏洞尚無CVE編號,開發團隊表示已申請並等待指派。此為參數注入類型的弱點,通過身分驗…
業界新聞
新聞微軟於5月15日發布Microsoft Edge 148.0.3967.70版安全更新,修補3項漏洞,涵蓋安全功能繞過、偽冒與遠端程式碼執行。這3項漏洞皆由臺灣資安公司戴夫寇爾(DEVCORE)首席資安研究員Orange Tsai發現,透過TrendAI的Zero Day Initiative協助通報。其中,CVE-2026-45492為安全功能繞過漏洞,CVSS風險分數為5.4,屬中度(Me…
新聞微軟6月5日公告,將調整企業端點安全服務Microsoft Defender for Endpoint在Windows裝置上的端點偵測與回應(EDR)更新機制。未來EDR更新將改採獨立更新機制,並由Microsoft Update提供,不再隨Windows每月例行安全更新一併發布。根據微軟說明,這項變更已於2026年5月下旬率先部署至Windows 10裝置,接下來會逐步擴及Windows 1…
新聞微軟在6月3日發布整合式開發環境Visual Studio Code(VS Code)1.123版,新增擴充套件自動更新延遲機制(Delayed extension auto-updates),一般擴充套件新版本發布後,VS Code將延後2小時再自動安裝新版擴充套件,降低惡意或異常版本影響開發環境的風險。圖片來源/微軟根據微軟說明,這項機制是防範軟體供應鏈風險的額外保護,適用於一般擴充套件發…
'Severe' Stress On Oceans As Rate of Sea Level Rise Doubles In 10 Years, UN Warns https://news.slashdot.org/story/26/06/08/2251201/severe-stress-on-oceans-as-rate-of-sea-level-rise-doubles-in-10-years…
At its 2026 Worldwide Developers Conference, Apple offered a vision of how to integrate AI with its products that stands out for its sobriety, responsibility, and plausibility. In contrast to the job-…
OPINION The US government is reportedly weighing whether to take a financial stake in AI companies, which looks a bit like negotiating for a seat on the Titanic. Neither OpenAI nor Anthropic, the marq…
新聞蘋果周一(6/8)在WWDC26發表新一代Apple Intelligence,並推出全新Siri AI。新版Apple Intelligence進一步擴充AI功能,涵蓋個人情境理解、螢幕內容感知與跨App操作,讓使用者可透過自然語言搜尋訊息、郵件與照片等內容,並完成更多跨應用程式任務。Apple Intelligence是蘋果於2024年推出的人工智慧平臺,整合於iPhone、iPad、Ma…
新聞繼Anthropic上周秘密提交S-1草案之後,OpenAI週一(6/8)宣布,已向美國證券交易委員會(SEC)秘密提交S-1上市申請草案,為未來首次公開募股(IPO)預作準備。不過OpenAI強調,目前尚未決定上市時程,且部分公司發展計畫以私人公司身分推動可能更為容易,因此IPO仍存在許多變數。OpenAI表示,該公司最近已完成保密遞件(Confidential Submission),由於…
"Chat is dead": OpenAI preps overhaul of ChatGPT OpenAI to recast hit chatbot as a route to higher-margin products before a potential IPO. https://arstechnica.com/ai/2026/06/chat-is-dead-openai-preps-…
FCC lifts looming deadline for Amazon Leo satellite broadband constellation The waiver "serves the public interest by promoting a second large satellite broadband constellation." https://arstechnica.c…
Ubuntu MATE Is Continuing Despite No Ubuntu MATE 26.04 Release Back in March, Martin Wimpress stepped down as the longtime Ubuntu MATE leader and was looking for contributors to keep this Ubuntu deriv…
Fedora 44 RISC-V Images Released, Including New "Omni" Kernel For Broader RISC-V Hardware Support Following the official Fedora 44 images released one month ago, Fedora 44 RISC-V images were published…
Instagram is finally letting everyone reorganize their profile grid https://www.theverge.com/tech/946458/instagram-is-finally-letting-everyone-reorganize-their-grid
Apple’s Screen Time updates are too little, too late https://www.theverge.com/tech/946446/apples-screen-time-updates-are-too-little-too-late
5 things I already love from the iOS 27 beta https://www.theverge.com/tech/946391/apple-ios-27-developer-beta-1-wwdc-2026-5-things
Apple’s revamped artificial intelligence stack and a revamped Siri were front and center at Monday’s WWDC keynote, making it clear that, this time around, it’s do or die for Apple AI. The keynote itse…
Apple is turning parents into a corporate IT help desk, with rigid new monitoring and compliance tools for their children’s iPhones and iPads that will prompt for mom and dad's approval each time thei…
There's another likely North Korean-linked scam hitting developers and their employers, while snarfing up credentials and cryptocurrency - and this one doesn't even involve embedding IT workers at hig…
OpenAI Files For IPO https://news.slashdot.org/story/26/06/08/2242200/openai-files-for-ipo?utm_source=rss1.0mainlinkanon