新聞網通設備廠商TP-Link本週發布安全更新，修補家用路由器Archer系列部分機種的非授權存取、指令注入等4項高風險漏洞。其中CVE-2025-15517（CVSS風險值8.6）為HTTP伺服器端點的授權繞過漏洞，它是出於HTTP Server欠缺對某些特定CGI端點的驗證檢查，使經過驗證（具有帳號）的使用者，得以執行未經驗證的存取行為，例如攻擊者可以執行較高權限的HTTP行為，例如上傳韌體或…
新聞Mozilla昨日公布Firefox 149.0正式版本，新增內建VPN、安全上網、分割畫面等功能。最新桌機版Firefox現在內建免費VPN，方便在公共Wi-Fi熱點上網保護健康資訊、銀行帳戶、IP及所在地點等資訊。Firefox VPN每個月最高提供50GB流量防護，用戶可隨時開關以節省用量。這項功能應該會受到許多人歡迎，畢竟VPN需要收費。而且Firefox提供的免費流量限額頗為大方。微…
新聞從上週末攻擊程式碼掃描工具Trivy之後，駭客團體TeamPCP的活動持續進行，並橫跨GitHub Actions、Docker Hub、NPM儲存庫，以及Open VSX生態系統，現在這些駭客染指PyPI從事新一波供應鏈攻擊。資安公司Endor Labs於3月24日發現，TeamPCP持續擴大其供應鏈攻擊行動，鎖定Python套件LiteLLM，於PyPI發布遭植入後門的惡意版本，影響範圍涵…
新聞北韓駭客假借網路徵才與視訊會議名義，鎖定開發人員從事Contagious Interview（Dev#Popper）攻擊，已進行數年，如今這些駭客突然納入新的惡意軟體及運作機制，引起研究人員的注意。日本電信公司NTT旗下資安部門NTT Security Japan揭露，與北韓有關的APT駭客團體WaterPlum，旗下組織Team 8（又稱Moralis或Modilus）於2025年12月開始…
RFK Jr. anti-vaccine ally dramatically quits CDC panel, complaining of drama Robert Malone quit a vaccine panel, blaming an HHS spokesperson for "trashing" him. https://arstechnica.com/health/2026/03/…
Claims its set performance records but looks to be years behind western fareAlibaba has revealed a new server chip that it says is the most powerful processor ever to use the RISC-V instruction set.…
Hong Kong Police Can Demand Passwords Under New National Security Rules https://yro.slashdot.org/story/26/03/24/2138225/hong-kong-police-can-demand-passwords-under-new-national-security-rules?utm_sour…
The BB-777 is the ultimate in boombox nostalgia https://www.theverge.com/tech/897876/the-bb-777-is-the-ultimate-in-boombox-nostalgia
新聞蘋果週二（3/24）宣布推出Apple Business，整合原本分散的企業裝置管理、帳號、協作工具與商家經營功能，打造一站式企業服務平臺，也準備於蘋果地圖（Apple Maps）導入廣告機制，開放企業在搜尋與推薦結果中曝光。其中，Apple Business將於4月14日在全球200多個國家與地區上線，蘋果地圖廣告服務則預計於今年夏天於北美登場。Apple Business主要是將原本分散於…
新聞網通設備廠商TP-Link本週發布安全更新，修補家用路由器Archer系列部分機種的非授權存取、指令注入等4項高風險漏洞。其中CVE-2025-15517（CVSS風險值8.6）為HTTP伺服器端點的授權繞過漏洞，它是出於HTTP Server欠缺對某些特定CGI端點的驗證檢查，使經過驗證（具有帳號）的使用者，得以執行未經驗證的存取行為，例如攻擊者可以執行較高權限的HTTP行為，例如上傳韌體或…
Newly purchased Vizio TVs now require Walmart accounts to use smart features Walmart wants to connect what people stream "directly with retail interaction." https://arstechnica.com/gadgets/2026/03/new…
Apple confirms that its Maps app will begin showing ads to users "this summer" Apple Maps ads will look and work a bit like current App Store ads do. https://arstechnica.com/gadgets/2026/03/apple-conf…
'HP IQ' can chat, share files, and record and summarize meetingsYou’ve heard the call of Apple Intelligence, jumped for joy over Google Gemini, and cuddled up with Microsoft Copilot. Now, get ready fo…
Intel's Vulkan Linux Driver Lands New Feature To Boost DX12 Game Performance Intel's open-source "ANV" Vulkan driver for Linux systems enabled a new feature called BTP+BTI RCC Keying. You may be wonde…
Phoronix@masto.ai
·
Breaking free of its IP licensing shacklesArm CEO Rene Haas took an ice-cold sip of the AI Kool-Aid during a keynote speech at the company’s annual conference on Tuesday, teasing a future product that…
OpenAI just gave up Sora and its billion-dollar Disney deal https://www.theverge.com/ai-artificial-intelligence/899850/openai-sora-ai-chatgpt
Instagram and Facebook are about to be filled with affiliate content https://www.theverge.com/news/899717/meta-instagram-facebook-affiliate-shopping-links-reels
Wine 11 Rewrites How Linux Runs Windows Games At the Kernel Level https://tech.slashdot.org/story/26/03/24/1946246/wine-11-rewrites-how-linux-runs-windows-games-at-the-kernel-level?utm_source=rss1.0ma…
Final analysis of 2025 Iberian blackout: Policies left Spain at risk Too much hardware was allowed to disconnect right at the edge of normal conditions. https://arstechnica.com/science/2026/03/final-a…
Google's Android Automotive Is Moving From the Dashboard To the 'Brain' of the Car https://tech.slashdot.org/story/26/03/24/1958223/googles-android-automotive-is-moving-from-the-dashboard-to-the-brain…
