Aggregator

活动邀请 ｜ NVIDIA 开发者见面会：从基础设施到智能体，全链路专家深度解析

Solidot
2 weeks 3 days ago

从底层的 GPU 开发，到长上下文的大模型推理，再到能够自主规划的 Agentic AI，AI 技术的演进正全方位重塑软件开发的范式。为了帮助开发者更好地应对日益复杂的全栈挑战，NVIDIA 企业开发者社区诚邀您参加即将在苏州举办的 NVIDIA 开发者见面会。

本次见面会将汇集来自 NVIDIA 全球及本地的技术专家，为您带来从基础设施优化到前沿智能体应用的全链路干货分享。 

查看全文

CVE-2026-5409 | Wireshark up to 4.4.14/4.6.4 Monero Protocol Dissector recursion (ID 21066 / EUVD-2026-26322)

VulDB Recent Entries
2 weeks 3 days ago
A vulnerability was found in Wireshark up to 4.4.14/4.6.4. It has been rated as problematic. Impacted is an unknown function of the component Monero Protocol Dissector. Performing a manipulation results in uncontrolled recursion. This vulnerability is known as CVE-2026-5409. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-5408 | Wireshark up to 4.4.14/4.6.4 DHT Protocol Dissector recursion (ID 21067 / EUVD-2026-26321)

VulDB Recent Entries
2 weeks 3 days ago
A vulnerability was found in Wireshark up to 4.4.14/4.6.4. It has been declared as problematic. This issue affects some unknown processing of the component DHT Protocol Dissector. Such manipulation leads to uncontrolled recursion. This vulnerability is traded as CVE-2026-5408. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

水产养殖的温室气体排放

Solidot
2 weeks 3 days ago
发表在《Frontiers of Agricultural Science and Engineering》期刊上的一项研究发现，水产养殖的温室气体排放主要来自四个环节：饲料生产、养殖过程中的能源消耗、池塘或水体中的生物化学过程（如甲烷和氧化亚氮的释放），以及土地利用变化和基础设施建设。其中饲料生产是大多数投饵型养殖系统中最大的排放源，在我国的研究中占比达到 52%。而在我国等以淡水池塘养殖为主的地区，甲烷排放尤为突出，贡献了约 90% 的养殖系统温室气体排放。不同水产养殖物种之间的排放差异显著。例如不依赖投饵的双壳贝类（如牡蛎、蛤蜊）和海藻养殖，排放极低甚至为负值，反而能通过碳固定起到“碳汇”作用。而草食性或杂食性鱼类（如鲤鱼、罗非鱼）在适度养殖强度下排放也相对较低。相比之下，集约化养殖的肉食性鱼类（如鲑鱼、鳟鱼）和虾类由于饲料和能源需求高，碳排放强度显著上升，部分甚至与陆地畜牧业相当。

微软公开 86-DOS 1.00 源代码

Solidot
2 weeks 3 days ago
2018 年微软公开了 MS-DOS 1.25 和 2.11 源代码，2024 年公开了 MS-DOS 4.0 源代码，2026 年 4 月在 86-DOS 1.00 发布 45 周年之际它延续传统公开了 86-DOS 1.00 源代码。86-DOS 的作者是 Tim Paterson，它后来成为 MS-DOS 的基础。发布在 GitHub 上的内容包括了 86-DOS 1.00 内核源代码、内核的多个快照，以及知名工具 CHKDSK 等。

Large-scale Roblox hacking operation shut down by Ukrainian authorities

Security Affairs
2 weeks 3 days ago
Ukrainian police arrested three hackers who hijacked 610,000 Roblox accounts and sold them for $225,000 in profit. Police in Ukraine arrested three suspects accused of hacking over 610,000 Roblox accounts and selling them for about $225,000. Officers carried out multiple searches in Lviv, seizing cash, phones, computers, laptops, tablets, and USB drives. The operation disrupted […]
Pierluigi Paganini

cPanel 与 WHM 紧急更新修复关键认证绕过漏洞

HackerNews
2 weeks 3 days ago
一个严重漏洞影响了除最新版本之外的所有 cPanel 及 WebHost Manager（WHM）控制面板版本，该漏洞可被利用来在无需认证的情况下访问控制面板。   此安全问题目前编号为 CVE - 2026 - 41940，严重程度评分达 9.8。官方已发布紧急更新，不过需手动运行一条命令来获取软件的补丁版本。   WHM 和 cPanel 归 WebPros Interna...
hackernews

朝鲜新一轮攻击：利用 AI 植入 npm 恶意软件、虚假公司和远程访问木马

HackerNews
2 weeks 3 days ago
网络安全研究人员在一个 npm 软件包中发现了恶意代码，该恶意软件包作为依赖项被引入到由 Anthropic 公司的 Claude Opus 大语言模型（LLM）参与的项目中。   这个被质疑的软件包是 “@validate - sdk/v2”，在 npm 上它被列为一个用于哈希运算、验证、编码 / 解码以及安全随机数生成的实用软件开发工具包（SDK）。然而，其真...
hackernews

Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution

The Hackers News
2 weeks 3 days ago
Google has addressed a maximum severity security flaw in Gemini CLI -- the "@google/gemini-cli" npm package and the "google-github-actions/run-gemini-cli" GitHub Actions workflow -- that could have allowed attackers to execute arbitrary commands on host systems. "The vulnerability allowed an unprivileged external attacker to force their own malicious content to load as Gemini configuration,"
The Hacker News

Managed ad