新聞最近我們報導臺灣資安研究人員參與React2Shell相關漏洞獎勵計畫，協助Vercel在短時間內更新WAF防護規則，以阻擋React2Shell攻擊可繞過防禦規則的可能性，並獲得30萬美元（約近1,000萬元）的獎勵，這不僅展現臺灣資安研究人員的專業與高效率，在國際級資安危機扮演關鍵的聯防角色，也帶出一個問題：當一項關鍵漏洞衝擊全球開發框架時，整個資安生態系的聯防體系如何運轉？或許有人會問，…
新聞開源大型語言模型串接套件LiteLLM遭遇供應鏈攻擊資安公司Endor Labs於3月24日發現，TeamPCP持續擴大其供應鏈攻擊行動，鎖定Python套件LiteLLM，於PyPI發布遭植入後門的惡意版本，影響範圍涵蓋AI應用開發環境。受影響版本為1.82.7與1.82.8，然而，這兩個版本GitHub的原始碼本身沒有惡意內容，這意味著攻擊發生於套件打包或發布階段。由於該套件每月下載量高達…
新聞一直以來，醫療體系都有著電子病歷（EHR）資料分散的痛點，比如資料散落在不同院區、不同科別系統，甚至不同時期導入的系統也彼此不相容，導致病人資料碎片化、臨床決策難以仰賴完整資訊。不過，這種碎片化反而成為重構資料架構的契機。根據HIMSS旗下媒體HealthIT News報導，紐約長老會醫院（NewYork-Presbyterian）電子病歷與臨床IT服務專案經理Shruti Nayar指出，E…
It’s always a good time to revisit Super Mario Bros. Wonder https://www.theverge.com/games/899839/super-mario-bros-wonder-nintendo-switch-2-review
Lemonade 10.0.1 Improves Setup Process For Using AMD Ryzen AI NPUs On Linux Earlier this month with the release of the Lemonade SDK 10.0 and FastFlowLM 0.9.35, using AMD Ryzen AI NPUs for running LLMs…
Phoronix@masto.ai
·
Chandra Resolves Why Black Holes Hit the Brakes On Growth https://science.slashdot.org/story/26/03/24/2334230/chandra-resolves-why-black-holes-hit-the-brakes-on-growth?utm_source=rss1.0mainlinkanon
BASIC and bit-banging used to guide a simulated lander down to a virtual lunar touchdownCould Sinclair's 48k Sinclair ZX Spectrum land a spacecraft on the Moon? YouTuber Scott Manley decided to find o…
Ubuntu 26.10 Looks To Strip Its GRUB Bootloader To The Bare Minimum For Better Security Ubuntu developers at Canonical are looking to strip the signed GRUB bootloader features to the bare minimum for …
Phoronix@masto.ai
·
Mesa 26.0 Will Make It In Time For The Fedora 44 Release With the recent Fedora 44 beta release, Mesa 25.3 graphics drivers were in use rather than the newest Mesa 26.0 series. The good news is that t…
Phoronix@masto.ai
·
So long, farewell: Saying goodbye to Audi's best car, the 2026 RS6 Avant With production now finished, we take one last ride in our favorite station wagon. https://arstechnica.com/cars/2026/03/so-long…
Unvanquished 0.56 Released With More Renderer Improvements, OpenMP Added To Engine Unvanquished 0.56 is out today as the latest major update to this prominent open-source, community-driven shooter gam…
Phoronix@masto.ai
·
AI and quantum on to-do list for Chief Digital Technology Officer in charge of £140.7M budget. Fancy it?The UK's Ministry of Defence is looking for a new Chief Digital Technology Officer (CDTO) to tak…
How chemists turned bourbon waste into supercapacitors Hydrothermal carbonization can directly convert sloppy stillage into hard or activated carbon. https://arstechnica.com/science/2026/03/how-chemis…
新聞Arm週二（3/24）發表首款自研資料中心處理器Arm AGI CPU，將業務從既有的IP授權與運算子系統（Compute Subsystems，CSS）進一步延伸至晶片產品層。Arm AGI CPU鎖定AI資料中心與代理人式AI應用，由Meta擔任主要合作夥伴並參與共同開發，將大規模部署於其AI基礎設施。過去Arm主要提供處理器架構與設計IP，是全球主要的CPU架構供應商之一，其技術廣泛應用…
新聞Cloudflare宣布將Dynamic Worker Loader開放給Workers付費計畫用戶使用，讓開發者可在執行期間動態載入新的Worker，將AI即時生成的程式碼放進獨立沙箱執行。該功能讓代理程式改以撰寫程式碼方式串接API，而不是逐一呼叫工具，同時把未受信任程式碼與主程式、外部網路及敏感資源隔離開來。Dynamic Worker Loader也採用Cloudflare Worke…
Apple Business combines corporate device management offerings and a way to buy adsApple has simplified its business services by combining and rebranding them, and is giving away the reformulated enter…
Omnissa telemetry suggests business buyers are loving Apple and GoogleEnd-user compute vendor Omnissa, the company formed by the spin-out of VMware’s virtual desktops, applications, and device managem…
NASA Halts Work On Gateway To Develop a Lunar Base https://science.slashdot.org/story/26/03/24/2145230/nasa-halts-work-on-gateway-to-develop-a-lunar-base?utm_source=rss1.0mainlinkanon
新聞3月初歐洲刑警組織（Europol）聯手6國執法機關與11家科技公司及組織，執行跨國執法行動，成功摧毀Tycoon 2FA的全球釣魚即服務（Phishing-as-a-Service，PhaaS）平臺運作，查封超過300個相關網域並試圖瓦解該平臺基礎設施，然而有資安公司發現，駭客的基礎設施很快就恢復運作，相關活動也接近查緝前的水準。資安公司CrowdStrike指出，Tycoon 2FA僅有在…
新聞OpenAI週二（3/25）透過X發文宣布「告別Sora」，並感謝使用者過去的創作與社群參與。OpenAI表示，後續將公布應用程式與API的下線時程，以及使用者作品保存方式，但目前尚未提供具體關閉時間，並坦言此一決定「令人失望」。Sora為OpenAI推出的文字轉影片模型，可依提示生成具高度擬真效果的影片內容，並支援影像轉影片、角色生成及語音同步等功能。自2024年推出以來，一度因高度擬真的影…
