Brotli解壓縮漏洞CVE-2026-111497的影響範圍已擴及Node.js、.NET、PHP及多個Linux發行版,但各平臺修補進度不一。研究人員也證實,該漏洞也可透過圖片解碼等非HTTP資料處理功能觸發 擔心錯過重要的資安新聞嗎?資安日報與資安週報即日起推出免費電子報訂閱,每天每週直送資安要聞,提供專業、易懂、便於轉述的最佳中文資安情報,助你掌握全球與臺灣最新資安脈動。
PHP2Shell與Brotli2Shell(Node2Shell)兩項重大漏洞的影響,持續成為全球資安焦點,從跨平臺修補、下游產品應變到實際攻擊,牽動廣泛的軟體生態系;eMudhra重大金鑰安全事故也引發連鎖衝擊。另一方面,臺灣91APP與西班牙A ...
【放棄了 ...😂 】為降低對美國科技巨頭的長期依賴,歐洲各國政府近年積極推動「去 Microsoft 化」,其中丹麥政府曾高調宣稱要在 2030 年全面脫離 Microsoft Windows 作業系統、Microsoft 365 ...
【咪 19 樣㊙️】著名資安研究員 log4j,近日透過零日漏洞(Zero-day)取得其 2025 年款 Samsung 智能電視的 Root ...
密歇根大學教授 Jason Mars 開發的程式語言 Jac 及其執行環境 Jaseci,將 AI 與 AI 代理視為第一類公民(first-class entities)。Mars 在北卡羅來納州羅利舉行的 All Things Open ...
Following PHP and Java, the compression library "Brotli" is now the subject of a vulnerability. Looking at the name alone, ...
Long time no see!I haven't been able to update my note for a while, but I plan to start updating it again, so thank you for ...
Claude Opus 5.5 code security tied GPT-6-Sol at 73% in Veracode’s fall evaluation, raising the benchmark ceiling while ...
Veracode today announced a jump from 56% to 62% in overall AI-generated code security — the most significant improvement since 2025.
Progress is there, but it's mending a small part of a large wound.
GitHub's annual Octoverse 2026 report shows agents initiating about 40% of pull requests. It also shows how 7.4 billion ...
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through ...