Aggregator

Red Hat 裁掉了中国工程团队

Solidot
1 week 3 days ago
IBM 子公司 Red Hat 解雇了整个中国工程团队，将大部分工作岗位转移到印度。一位自称是 Red Hat China 首席软件工程师的用户在 Hacker News 上发帖称他周四醒来后发现无法登陆 VPN，其他多种服务的访问权限也都撤销了，CTO 之后通知他们公司将业务重心转移到亚太中心。此次裁员有 300-500 人受到影响。根据 Red Hat CTO Chris Wright 的备忘录，Red Hat 将印度视为关键地点，中国不再是，因此它将停止在中国的工程活动，将大部分工作转移到印度。IBM 此前表示它的印度员工总数超过了美国，全球员工总数达到 26.4 万人。

Claude Code 安全体系深度分析

网络安全回收站
1 week 3 days ago
如何让一个能力无限但判断力有限的实体，在你的开发环境中安全地工作？Claude Code 的答案是一套精心设计的纵深防御体系——六层独立的安全机制，任何一层都可以独立阻止危险操作。本报告从设计范式和攻击面两个维度，深入解剖这套体系的每一个齿轮。

CVE-2025-57735

CVE Trends
1 week 3 days ago
Currently trending CVE - Hype Score: 2 - When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted. In Airflow 3.2 we implemented the mechanism that implements token invalidation at logout. Users who are concerned about ...

CVE-2025-59718

CVE Trends
1 week 3 days ago
Currently trending CVE - Hype Score: 1 - A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 ...

[un]prompted 2026 – Vibe Check: Security Failures In Al-Assisted IDEs

Security Boulevard
1 week 3 days ago

Author, Creator & Presenter: Piotr Ryciak, Al Red Teamer At Mindgard

Our thanks to [un]prompted for publishing their Creators, Authors and Presenter’s outstanding [un]prompted 2026 AI Security Practitioner content on the Organizations' YouTube Channel.

Permalink

The post [un]prompted 2026 – Vibe Check: Security Failures In Al-Assisted IDEs appeared first on Security Boulevard.

Marc Handelman

What Every C-Suite Executive Needs to Know About Post-Quantum Cryptography

Security Boulevard
1 week 3 days ago

Google just issued a warning that has great implications for the cybersecurity world: “Q-Day” — the moment when a quantum computer becomes powerful enough to crack today’s best encryption — could arrive as soon as 2029. That’s not the mid-2030s timeline most experts had been citing. That’s three years from now. Google Quantum AI also..

The post What Every C-Suite Executive Needs to Know About Post-Quantum Cryptography appeared first on Security Boulevard.

Jeremy Allison

INC

Dark Feed IO
1 week 3 days ago

You must login to view this content

cohenido

The Complete Guide To SPF Flattening For Office 365, Google Workspace, And Saas Senders 

Cyber Security News
1 week 4 days ago

Modern email ecosystems rely heavily on authentication to ensure messages are trusted and delivered successfully, and Sender Policy Framework (SPF) plays a critical role in this process. However, as organizations adopt platforms like Microsoft Office 365, Google Workspace, and various SaaS email senders, SPF records can quickly become complex and exceed the strict 10 DNS lookup […]

The post The Complete Guide To SPF Flattening For Office 365, Google Workspace, And Saas Senders  appeared first on Cyber Security News.

Sweta Bose

在 Firefox 浏览器上安装“所有”扩展会发生什么

Solidot
1 week 4 days ago
Firefox 官方扩展商店共有 8.4 万个扩展，如果我们下载安装所有这些扩展，会发生什么事？有人替我们完成了这一几乎不可能的任务。扩展的总容量为 49.3 GB，单个扩展的平均容量为 584.9 kB。容量最大的是 dmitlichess 共 196.3 MB——包含逾 2000 音频文件，其次是 (Unoffical) ReactBot Web 容量 184.9 MB，Eric’s Thumbnail Seasoning! 容量 146.6 MB，Animal Forest:PG BGM 137.4 MB...等等。最小的扩展是 theTabs-saver，7518 bytes，没有代码；访问权限需求最多的扩展是 FalscheLaden，要求 3,695 个访问权限，该扩展没有活跃用户，Google Dark Theme 要求 2,675 个权限但它有 1,687 名用户；扩展开发者 Dr. B 使用 AI 工具开发了 84 个扩展，这些扩展的 README.md 提到了 Grok 3。34.3% 的扩展没有日活用户，0.7% 的扩展日活用户超过 1 万；76.7% 的扩展开源。作者发现，当加载的扩展数达到 65,335 个之后浏览器就挂起卡死了。在设法加载 8.4 万个扩展之后，浏览器基本上没法用了，比如打开扩展页 about:addons 就花了 6 个小时。

全球夜间人造光亮度 8 年增加 16%

Solidot
1 week 4 days ago
根据发表在《自然》期刊上的一项研究，通过对卫星观测数据分析发现，2014-2022 年间，全球夜间人造光总体亮度增加了 16%。研究显示，全球夜间亮度变化并非均匀增强，而是不同地区此消彼长形成“拼图式”格局。2022 年美国夜间总亮度位居全球首位，其次为中国、印度、加拿大和巴西。亮度增长主要来自城市化加速、基础设施扩张及农村电气化，撒哈拉以南非洲和东南亚增幅最为显著。而亮度下降则分为两类：突发性变暗多由自然灾害、电网故障和武装冲突引发；渐进性变暗则多与节能政策和减少光污染措施相关，欧洲部分地区即呈现这一趋势。

Managed ad