libx11-compat Is Working To Implement Xlib Atop SDL For Wayland, macOS, Android
libx11-compat Is Working To Implement Xlib Atop SDL For Wayland, macOS, Android For helping to keep X11 clients running in a modern Linux desktop world with Wayland or even for running on macOS or And…
Intel Directed Package-Level Thermal Interrupts Slated For Linux 7.3
Intel Directed Package-Level Thermal Interrupts Slated For Linux 7.3 Back in March Intel software engineers began sending out Linux patches for Directed Package-Level Thermal Interrupts as a new capab…
GNOME can look like Windows – and Flashback can do it without extensions
A new GNOME extension called Simple-taskbar does a pretty good job of giving GNOME 50 a taskbar and start menu very much like the ones from Windows 11. It's so new that it's still not listed on the GN…
Greedy ransomware crews return for seconds after victims cough up first extortion payments
Authorities have long warned organizations not to pay ransoms, and fresh figures underline why: handing over the money doesn't mean the crooks leave you alone. Proofpoint survey data suggests that 58 …
The "New Normal" Of Audio Quirks Submitted For Linux 7.2-rc5
The "New Normal" Of Audio Quirks Submitted For Linux 7.2-rc5 Linux sound subsystem maintainer Takashi Iwai of SUSE sent out this week's batch of sound fixes that he describes as "A collection of fixes…
Raspberry Pi Touch Display 2 10-Inch Model Launches
Raspberry Pi Touch Display 2 10-Inch Model Launches Following the launch of the 7-inch Raspberry Pi Touch Display 2 and the 5-inch display variant, Raspberry Pi announced today the addition of a 10-in…
Ukrainian drones deliver robots directly into battle by sea and air
Ukrainian drones deliver robots directly into battle by sea and air Ukraine's battlefield surge of robots now features airdrops and beach assaults. https://arstechnica.com/gadgets/2026/07/ukrainian-dr…
Naked mole-rat queens keep their colonies in line with a scent
Naked mole-rat queens keep their colonies in line with a scent A single chemical made by mole-rat queens enforces the social order. https://arstechnica.com/science/2026/07/naked-mole-rat-queens-keep-t…
烏俄戰爭教會臺灣的一堂課：真正需要防護的不只是關鍵設施，而是支撐國家運作的依賴網路
新聞對多數人而言，提到烏克蘭，想到的往往是飛彈攻擊、網路戰、能源設施遭破壞，以及停電、斷網等畫面。然而，去年秋天，TXOne Networks資安威脅與產品防禦中心資深經理鄭仲倫（Mars Cheng）受邀前往北大西洋公約組織（NATO），與來自美國、歐洲及烏克蘭的政府與資安專家交流關鍵基礎設施防護經驗後，對關鍵基礎設施（Critical Infrastructure，CI）的認知有了根本性的改變…
荷蘭揭俄羅斯駭入IP攝影機追蹤援烏軍運，情報已用於攻擊烏軍
新聞荷蘭情報與安全總局AIVD、軍事情報與安全局MIVD發布資安警示，指出至少一個俄羅斯情報與安全機關，正系統性入侵歐洲與烏克蘭的IP攝影機，並透過影像辨識軟體搜尋軍用車輛及其載運的軍事貨物，藉此掌握歐盟與北約的軍事運輸路線、援烏武器交付情況，以及烏克蘭軍事人員位置。 該網路間諜行動涵蓋荷蘭、其他歐盟與北約成員國，以及烏克蘭，荷蘭情報單位表示，俄羅斯行動者會利用影像辨識軟體自動分析攝影機畫面，搜尋…
Redmond's reaper cometh: October 2026 set to bury a graveyard of Microsoft products
October 2026 is shaping up to be a busy month for administrators as it heralds the end of several big products, along with the retirement of components that could mean sleepless nights for the ill-pre…
【資安日報】7月22日，WordPress重大漏洞wp2shell遭到積極利用
新聞本日新聞焦點 ● WordPress重大漏洞wp2shell被用於大規模攻擊 ● SharePoint再傳7月修補的重大漏洞被用於攻擊活動 ● OpenAI承認Hugging Face遭駭是自家模型內部測試引起 ● 駭客組織JadePuffer打造破壞AI環境的勒索軟體EncForge ● 勒索軟體Qilin利用Palo Alto Networks的VPN漏洞從事活動 資安新聞總覽 重大漏洞w…
Council worker spared prison after four-day data-snooping spree
A council worker who "abused" his position to unlawfully access "highly sensitive" personal records of family members and other people known to him has received a suspended sentence after admitting to…
Raspberry Pi goes large with 10.1-inch Touch Display 2
Raspberry Pi has supersized its Touch Display 2 with a new 10.1-inch model aimed at dashboards, entertainment systems, and other projects that need more room for prodding. The panel is designed for us…
思科釋出Antares模型權重，專攻程式碼漏洞定位
新聞思科（Cisco）周二（7/21）發表Antares資安小型語言模型系列，專門用於在大型程式碼庫中定位可能含有已知漏洞的原始碼檔案。思科已透過Hugging Face釋出Antares-350M及Antares-1B兩款模型的權重，參數量分別為3.5億與10億，並準備推出30億參數的Antares-3B。 Antares處理的是漏洞定位（Vulnerability Localization）。…
法國國會通過未滿15歲社群網路禁令，9月上路前仍可能面臨憲法審查
新聞法國國會完成法案最終表決，禁止未滿15歲者使用社群網路服務，預定自9月1日起施行。自9月1日起建立的帳號立即適用，既有帳號則有4個月過渡期。不過，法案仍待總統公布，且預料可能送交憲法委員會審查，部分條文及實際施行時程仍可能調整。 法案適用於線上平臺提供的社群網路服務，但排除線上百科全書、教育或科學目錄，以及用於開發、分享開放原始碼軟體或教育性開放原始碼數位專案的平臺。最終版本未保留取得父母同意…
Anyone with a shed, an extension cord, a couple of GPUs and an overdraft is building datacenters. Fujitsu just offloaded five
The advent of generative AI spurred an enormous and controversial datacenter building boom that has seen almost anyone who knows how to run a bit barn try to expand their business ASAP. Fujitsu, howev…
駭客團體JadePuffer攻擊升溫，打造專門針對AI環境的勒索軟體EncForge
新聞7月初威脅情報公司Sysdig揭露透過AI執行的勒索軟體活動，代理型威脅行為者（Agent Threat Actor，ATA）駭客團體JadePuffer首先利用已知漏洞CVE-2025-3248，透過可從網際網路存取的Langflow執行個體取得受害組織的初期入侵管道，然後展開會動態調整的全自動勒索軟體攻擊行動，然而事隔兩天，攻擊者再度存取同一臺Langflow執行個體，並使用大幅升級的攻擊…
Google一口氣發表3款Gemini模型，鎖定AI代理與漏洞修補
新聞Google周二（7/21）發表Gemini 3.6 Flash、3.5 Flash-Lite及專為資安任務打造的3.5 Flash Cyber模型，分別鎖定通用AI代理、大量低延遲任務及軟體漏洞修補。Google同時透露，Gemini 3.5 Pro目前正由合作夥伴測試，待準備完成後將廣泛推出；下一代Gemini 4也已展開預訓練，規模為Google歷來最大。 Gemini 3.6 Flas…
美國白宮推出Gold Eagle平臺，建立AI網路威脅資訊共享機制
新聞美國白宮上周宣布推動Gold Eagle平臺，作為AI漏洞和修補資訊的協同共享中心。 Gold Eagle是在美國總統川普6月初簽署行政命令《促進先進人工智慧創新與安全》（Promoting Advanced Artificial Intelligence Innovation and Security）生效，將在CISA、美國國土安全部、戰爭部/國防部、開源軟體及美國基礎架構業者協力下由美國…
Phoronix@masto.ai
·
