新聞6月9日OpenSSL開發團隊發布4.0.1版,修補並公布18個資安漏洞,其中的高風險漏洞CVE-2026-45447研究人員借助AI工具Anthropic Claude發現,而成為本次OpenSSL更新的一大亮點,不過最近有資安公司指出,開發團隊實際上在這次更新當中,默默地改版修補了一個未登記CVE編號的漏洞,若不處理,攻擊者可讓OpenSSL停止運作。 身分驗證解決方案廠商Okta於7月1…
業界新聞
新聞美國電腦緊急應變小組協調中心(CERT/CC)揭露,部分HTTP/2伺服器實作存在流量控制漏洞,未經身分驗證的遠端攻擊者可傳送特製HTTP請求,可能造成記憶體資源耗盡及阻斷服務(Denial of Service,DoS)。受影響對象包括Apache Traffic Server專案、Citrix、F5、Meta、Red Hat、SUSE Linux及Yahoo,多家業者已發布更新或緩解措施。…
ASIA IN BRIEF Chinese President Xi Jinping has delivered a major speech on AI, which he thinks has enormous potential – for good and evil. Xi’s speech called for AI development to “adhere to the princ…
新聞7月14日SonicWall發布資安公告,SMA1000防火牆設備存在資安漏洞CVE-2026-15409、CVE-2026-15410,其中CVE-2026-15409的CVSS風險達到滿分10分特別危險,而且兩個漏洞都被用於實際的攻擊活動。隔天資安公司Rapid7表示,他們在SonicWall揭露上述資訊之前,就偵測到相關活動。 Rapid7觀察到攻擊者將SonicWall防火牆設備當作隱…
新聞微軟上周提醒,Windows 11 24H2及Windows 10 LTSB 2016、Windows 10 IoT Enterprise LTSB 2016的技術支援將在今年10月13日終止,呼籲用戶升級。而Windows Server 2022則將結束主流支援。 根據微軟技術支援前90天到期提醒,Windows 11 24H2 Home及Pro版,以及Windows 10 Enterpri…
India's first privately-developed rocket reaches orbit on dramatic debut launch "On the first attempt, reaching orbit, I never thought it was possible." https://arstechnica.com/space/2026/07/indias-fi…
Linux 7.2-rc4 Released: Looking Like The "New Normal" The fourth weekly release candidate of the Linux 7.2 kernel is now available for testing... https://www.phoronix.com/news/Linux-7.2-rc4-Released
Avoiding the "lethal trifecta" – access to private data, exposure to untrusted content, and an external communication path – is difficult enough when working with AI agents. But the use of connectors …
新聞AI帶來更多商機,也大幅驅動網路威脅與防護領域的發展,針對強化AI安全(Security for AI)與AI強化資安(AI for Security)這兩大應用趨勢,以及具備強大資安攻防能力的頂尖AI模型快速崛起,為了滿足熱烈的市場期待與需求,當前的資安廠商必須設法發展更專業的產品或服務,這幾年以來,紛紛推出主打AI防禦的解決方案。 例如,前年3月登場的Cloudflare Firewall…
New York is the first state to impose a data center moratorium New York’s data center moratorium may become the blueprint for anti-AI movement. https://arstechnica.com/tech-policy/2026/07/new-york-is-…
The Last MPEG-4 Visual Patent Has Expired If you are looking for a reason to celebrate today, the last of the MPEG-4 Part 2 patents expired today... https://www.phoronix.com/news/Last-MPEG-4-Patent-Ex…
As mosquito ranges expand, better monitoring is key to preventing disease Monitoring is expensive and labor intensive. But it helps public health officials stop outbreaks. https://arstechnica.com/scie…
FFmpeg Lands Latest AVX-512 Optimization: 1.372x Faster In Pixel Format Conversion The latest hand-tuned code in the FFmpeg multimedia library for allowing better performance on today's modern Intel/A…
Legion Y700 Gen4 Tablet Powered By Snapdragon 8 Elite Seeing Linux Patches The Legion Y700 Gen4 is an Android tablet that debuted last year and powered by the Qualcomm Snapdragon 8 Elite chipset. This…
More ASUS Motherboards To Enjoy Working Sensor Monitoring With Linux 7.3 Thanks to the work of the open-source community, more ASUS desktop motherboards for Intel Core and AMD Ryzen systems are seeing…
In 2026, AI still "hallucinates" and gives you wrong answers a good chunk of the time. Nevertheless, academics from French and Italian universities have found that access to AI advice suppresses criti…
'Grok Build' Coding Tool Open Sourced This Week, Promises to Respect Zero Data Retention https://news.slashdot.org/story/26/07/19/034258/grok-build-coding-tool-open-sourced-this-week-promises-to-respe…
OpenAI Acknowledges GPT-5.6 May Accidentally Delete Files, Calls It 'Honest Mistake' https://developers.slashdot.org/story/26/07/19/0129228/openai-acknowledges-gpt-56-may-accidentally-delete-files-cal…
GNU Hurd Makes Progress On AArch64, Writing Translators In Rust The GNU Hurd project recently issued their Q2'2026 status report to outline recently development efforts. The Hurd is still happening!..…
France Orders ISPs to Block Access to Polymarket https://yro.slashdot.org/story/26/07/18/2224236/france-orders-isps-to-block-access-to-polymarket?utm_source=rss1.0mainlinkanon