@it-industry-news@baudrate.tw
Search for this handle on your own server to follow from there.
新聞受到廣泛採用的NPM套件Axios遭遇軟體供應鏈攻擊，引發各界密切關注，甚至傳出OpenClaw用戶也可能受到波及。資安公司SafeDep、Socket、StepSecurity，以及Elastic旗下的資安實驗室提出警告，他們於3月30日發現Axios的NPM套件遭到入侵，駭客挾持其中一名知名維護者jasonsaayman的NPM憑證，在繞過GitHub Actions流程的情況下，發布有問…
Russia Goes After VPNs As 'Great Crackdown' Gathers Pace https://tech.slashdot.org/story/26/03/31/2233209/russia-goes-after-vpns-as-great-crackdown-gathers-pace?utm_source=rss1.0mainlinkanon
新聞Anthropic旗下AI程式開發工具Claude Code，本週被發現有套件檔遭公開於網路上，公司證實為人為作業疏失所致。一代號為Chaofan Shou (@Fried_rice)的網友週二（3/31）發現Claude Code NPM儲存庫的Java程式來源映射檔（source map file）被人公開於網上，並有一提供下載.zip檔的連結，這個.zip包含Claude Code 套件…
新聞技嘉本週發布軟體更新，修補Control Center一個可能讓駭客寫入任意檔案的高風險漏洞。GIGABYTE Control Center（GCC）是管理技嘉各種產品的集中管理平臺軟體，本次修補的漏洞為CVE-2026-4415，由資安研究人員David Sprüngli發現並通報。技嘉最新安全公告說明，CVE-2026-4415屬於相對路徑穿越（Relative Path Traversa…
新聞Google週二（3/31）宣布，已開始在美國逐步開放使用者變更Google帳戶的Gmail使用者名稱（即@gmail.com前的帳號），讓用戶可在不建立新帳戶的情況下調整登入身分。此舉被視為Google首次鬆動長期以來「帳號一經建立即無法更改」的限制。過去Gmail帳號一旦建立，其使用者名稱即永久綁定，用戶若想更換帳號，只能重新申請新帳戶並手動搬移信件、檔案與訂閱服務，成本高且流程繁瑣。此次…
NASA is leading the way to the Moon, but the military won't be far behind "I just don't want to get caught flat-footed when we start to have to protect US interests out there." https://arstechnica.com…
Gaim 3 Is In Development For Restoring The Original Gaim Instant Messaging App In GTK4 Gaim! Any desktop Linux users from 20+ years ago likely remember the Gaim instant messaging app that was commonly…
Phoronix@masto.ai
·
新聞Google已開始對所有開發者推行Android開發者驗證（Android Developer Verification）機制，要求開發者完成身分驗證並註冊其App，未經註冊的App將無法直接側載安裝至經認證的Android裝置上。該新制預計2026年9月底率先在巴西、印尼、新加坡及泰國實施，2027年起逐步擴展至全球。Google指出，來自側載來源的惡意程式數量是Google Play的90…
AerynOS 2026.03 Brings GNOME 50, Other Wayland Compositor Updates AerynOS 2026.03 is now available as the newest release of this from-scratch Linux distribution originally known as Serpent OS. With th…
Phoronix@masto.ai
·
The AirPods Pro 3 are nearly matching their best-ever price for Amazon’s Big Spring Sale https://www.theverge.com/gadgets/898502/airpods-pro-3-amazon-big-spring-sale-2026-deal
Starlink satellite breaks apart into "tens of objects"; SpaceX confirms "anomaly" Satellite failure cause is unexplained after second "fragment creation event." https://arstechnica.com/tech-policy/202…
Amazon is offering up to 50 percent off chargers from Anker and others for its Big Spring Sale https://www.theverge.com/gadgets/904242/amazon-big-spring-sale-2026-baseus-anker-chargers-power-banks-bat…
Volvo Shifts Polestar 3 Production Entirely To the US https://tech.slashdot.org/story/26/03/31/2035210/volvo-shifts-polestar-3-production-entirely-to-the-us?utm_source=rss1.0mainlinkanon
You can now use ChatGPT with Apple’s CarPlay https://www.theverge.com/ai-artificial-intelligence/904676/apple-carplay-openai-chatgpt
Running local models on Macs gets faster with Ollama's MLX support Apple Silicon Macs get a performance boost thanks to better unified memory usage. https://arstechnica.com/apple/2026/03/running-local…
MidnightBSD 4.0.4 Released With Aged & Agectl For Age Verification/Attestation MidnightBSD 4.0.4 is out today as the newest update to this desktop-minded BSD operating system. Notable with this update…
Phoronix@masto.ai
·
You can finally change the goofy Gmail address you chose years ago All your data remains intact, and you can go back to your original address at any time. https://arstechnica.com/gadgets/2026/03/you-c…
Claude Code leak exposes a Tamagotchi-style ‘pet’ and an always-on agent https://www.theverge.com/ai-artificial-intelligence/904776/anthropic-claude-source-code-leak
How to avoid social engineering attacks? Employee training tops the listBe careful what you click on. Miscreants are abusing WhatsApp messages in a multi-stage attack that delivers malicious Microsoft…
No Kings is taking back Americana https://www.theverge.com/policy/904405/no-kings-protests-portland-americana
