KDZONE 情報站

OpenAI's "Decisions API" is a Jev clone that confirms the importance of fast, cheap intelligence.

OpenAI makes others suffer "the harms of its unsafe decision-making," nonprofit says.

The $300 million employee tender was co-led by Wellington and T. Rowe Price.

Reddit is ending support for RSS feeds, as the company continues tightening access to its trove of user-generated content.

There’s a reason frontier labs have gotten gunshy about consumer AI — and it’s not because the tech isn’t good enough.

A look at two InfoQ online certification cohorts covering security and privacy decisions in production AI systems and the verification needed when coding agents work in existing codebases. By Artenisa Chatziou

Russia says it has a "promising, reusable manned transport spacecraft."

Meta says its Muse AI agent cannot access a user’s Messages without explicit permission, disputing a journalist’s account that the agent read his private messages while the required Mac setting was turned off.

Many sites see just one-tenth of one percent of their advertising revenue from AI payments.

By launching an AI agent for food ordering, DoorDash is looking to gain an edge over rivals Uber Eats and Grubhub.

"One of the biggest reasons we are winning against robotics companies is because we are not a robotics company."

Instinct is rolling out human-curated product and travel recommendations, but some users aren’t happy about getting suggestions they never asked for.

Intended to help with biosecurity, it works with a popular AI protein design tool.

Article URL: https://insufferable.dev/posts/the-ai-race-just-got-awkward/ Comments URL: https://news.ycombinator.com/item?id=49910553 Points: 311 # Comments: 282

New exploit works on all but the most recently updated consoles.

Discord is "opening the platform to advertisers, regardless of their budget."

Wing patterns, flight dynamics create "motion dazzle" effect, make it harder to gauge speed, direction.

The 2027 BMW 330 starts at $49,900, the i3 50 xDrive at $61,500.

At TechCrunch Disrupt 2026, Cerebras Systems CEO and co-founder Andrew Feldman will explore the growing demand for compute, energy, and infrastructure, how Cerebras is approaching those constraints differently, and what comes next if today’s AI hardware reaches its limits.

Founded by Apache Flink veterans, the startup is taking on workflow heavyweight Temporal.

Three days left to exhibit at TechCrunch Disrupt 2026. Book by October 2 at 11:59 p.m. PT to showcase your startup to 10,000+ founders, investors, operators, and tech leaders.

OpenAI is seeking another $30 billion privately as its IPO plans slip.

Cursor has introduced Continuity, a Git storage architecture that uses an S3 backed write ahead log as the source of truth. The design turns local NVMe repositories into warm caches and separates replica coordination from consistency. Cursor reports linear read scaling with up to…

This week, Cloudflare's Impact programs will reach $100 million in donated services. This milestone means that thousands of entities including journalists, civil society, state and local governments, election management bodies, and public schools are being protected from cyberatt…

Cloudflare AI Gateway now features a model router that evaluates request complexity using an edge-deployed classifier to select the optimal model. By balancing expected output quality against token costs, organizations can dramatically cut AI spend while maintaining performance.

You can now use built-in error monitoring in Cloudflare Workers to group production failures and send stack traces, logs, traces, and application context directly to a coding agent to investigate further and open a pull request.

Cloudflare Registrar’s new search delivers fast, transparent results across 420+ extensions using Workers, Durable Objects, and WebSockets. Its expanded API and cf CLI also let agents search, register, and transfer domains.

Cloudflare’s AI Gateway, Ceramic.ai, Stocktwits, and more are using the Cloudflare Monetization Gateway today to charge agents for access to tokens, APIs, and MCP tools. U.S.-based sellers can now apply for access to the closed beta.

Pay Per Use is now in beta. AI companies report when they use publishers’ content, and Cloudflare handles billing, payouts, and reporting, so our customers are paid according to use.

AI Gateway User Insights now adds task, model, turn, and user categories to help teams understand AI adoption and make better model decisions. This is available free to AI Gateway users.

More than half the traffic reaching sites on Cloudflare is now automated, and AI agents are the fastest-growing part of it. We're giving site owners the tools to see who's visiting, decide who gets in, and charge for access.

Cloudflare Containers now start 6x faster, let your agent choose each sandbox's image and instance type at runtime, and support filesystem snapshots in public beta, all controlled from a Durable Object.

繼9月15日Oracle發布Java 27（Oracle JDK 27），內建JEP 527這項關於TLS 1.3後量子混合金鑰交換的JDK增強提案，進一步提升後量子密碼學（PQC）能力，由AWS提供的免費OpenJDK開發環境Amazon Corretto

資安業者Sysdig今年7月揭露勒索攻擊活動JadePuffer，指出其利用AI代理自動執行偵察、竊取憑證、橫向移動及資料加密等攻擊流程，後續更將攻擊範圍擴大至AI資產、訓練資料集與向量資料庫。

Airbnb is also launching new services such as meal delivery and laundry in select locations

The move will be part of a major overhaul of the ecosystem for website authentication.

OpenAI週二開發者大會DevDay上公布能讓企業員工在ChatGPT內協同作業的工具Space，以及類似Office的生產力套件。

Mozilla於9月29日正式推出Firefox 157改版，導入全新設計的圖形介面，並提供內建的深色佈景主題與精簡介面模式，然而，這次他們也修補了76個資安漏洞，其中有38個為高風險等級。

美國總統川普（Donald Trump）周二（9/29）與Google、OpenAI、Meta、Anthropic、xAI及Nvidia等6家AI與科技巨頭簽署《白宮超級智慧協議》（White House Accord on Super Intelligence），要求參與企業建立四層AI安全管控與稽核機制，包括引進獨立外部稽核。這項協議目前屬企業自願承諾，不具法律強制力，川普形容它具有「道德上的約束力」。

9月9日商周集團公告旗下網站遭到攻擊，導致網站與系統服務中斷，一週後該集團主網站的基礎服務恢復，上週末商周再度公布新的進展：他們在9月24日宣布，良醫健康網與alive兩個網站，在經過外部資安專案的深度檢測與測試下，已確認網站的環境安全並正式重新啟用。

美國國防人力資料中心（Defense Manpower Data Center，DMDC）發生資料外洩事件，影響約276萬名在世及29.4萬名已故人員，合計逾305萬人。DMDC是美國國防部的人事資料中心，保存現役及後備軍人、文職人員、承包商、退役軍人及眷屬等人事紀錄。

Patrick Debois discusses how to manage, evaluate, distribute, and observe context using proven software engineering practices. He shares how treating context like code - complete with testing, CI/CD, package managers, and security scanning - enables engineering leaders to reliabl…

Learn how OpenAI disrupted a campaign to extract protected model reasoning and is strengthening defenses against adversarial distillation.

美國總統川普（Donald Trump）周二（9/29）簽署行政命令，正式要求美國行政部門以「超級智慧」（Super Intelligence，SI）取代「人工智慧」（Artificial Intelligence，AI），未來政府機構的官方文件、公開溝通、網站、報告及政策文件，都應改用SI一詞。

臺灣通訊產品及3C商品通路公司神腦國際（2450）於9月29日，在股市公開資訊觀測站發布重大訊息，表示他們的外部伺服器遭受自動化攻擊，攻擊者對部分訂單資訊進行擷取，該公司獲報後啟動應變會議，採取必要措施降低影響，初步評估對營運、財務，以及服務提供無重大影響。

華碩（ASUS）線上購物商店傳出資安事件，部分客戶資料可能遭未經授權存取。

9月29日遊戲軟體公司鈊象（3293）於股市公開資訊觀測站發布重大訊息，他們偵測到有不明IP位址異常入侵的活動，目標是該公司的營運資訊設備，資安團隊察覺後隨即啟動資安應變機制，根據初步評估，本起事故對公司營運無重大影響。鈊象並未進一步透露遭異常侵入的設備資訊、入侵方式，以及是否有資料遭竊取或系統遭破壞。

9月29日Google發布電腦版與Android版Chrome更新，總共修補32個資安漏洞，從嚴重程度來看，1個重大等級、25個為高風險等級，其餘為中度或低風險等級。

OpenAI is partnering with America’s SBDC to expand hands-on AI training and local support for small businesses, alongside a new report on how small teams are using AI.

Article URL: https://earendil.com/posts/you-said-no-mcp/ Comments URL: https://news.ycombinator.com/item?id=49906637 Points: 305 # Comments: 154

9月28日蘋果發布iOS、iPadOS，以及macOS作業系統26.7.1更新，緊急修補圖形處理框架元件CoreGraphics漏洞CVE-2026-86950，隔天美國網路安全與基礎設施安全局（CISA）表示，他們已經掌握該弱點遭積極利用的證據，將其列入已遭利用的漏洞名單（KEV），聯

AI代理安全業者Zenity近日揭露Salesforce AI代理平臺Agentforce的SalesBleed安全問題。攻擊者即使沒有受害企業的Salesforce帳號，也能透過公開的Web-to-Lead功能提交藏有惡意提示詞的潛在客戶資料，企業員工後續使用Agentforce處理這些資料時，便可能觸發間接提示詞注入，進一步造成CRM資料外傳。

微軟9月23日宣布推出整合式安全維運中心（Integrated Security Operations Center，ISOC）公開預覽版，在Microsoft Defender入口網站整合安全資訊與事件管理（SIEM）、延伸偵測及回應（XDR）、威脅情報、自動化及AI功能。資安人員與AI代理可利用ISOC整合的安全訊號及事件脈絡調查威脅，再透過既有防護機制採取因應措施。

資安教育與研究機構SANS Institute（SANS）提出新的事件回應框架Dynamic Approach to Incident Response（DAIR）。

企業透過網路分段降低設備遭入侵後波及其他系統的風險，但近期研究發現，OT、IoMT等設備仍經常與其他類型設備共用網路區段。網路安全業者Forescout旗下Vedere Labs近期檢視209個組織、47,700個網路區段及超過250萬臺裝置，發現含有營運技術（OT）設備的區段僅13%為OT專用，醫療物聯網（IoMT）設備的專用區段比例更只有6%。

Article URL: https://tomwojcik.com/posts/2026-09-21/september-2026-the-world-today/ Comments URL: https://news.ycombinator.com/item?id=49905487 Points: 297 # Comments: 168

CodeScene has published a case study in which coding agents refactored 300,000 lines of C over three weeks for roughly $4,000 in tokens, verified by a frame-by-frame replay harness. The agents built a playbook of codebase-specific recipes along the way. Practitioners have questio…

Nvidia於9月28日推出Open Agent Safety Platform，透過開源軟體OpenShell，與基於BlueField-4資料處理器（DPU）的參考系統設計Sentry，從軟體執行環境延伸至硬體層，為AI代理建立安全邊界及監控機制。Nvidia表示，目前已有超過100家廠商支援或參與相關技術，涵蓋AI、資安、企業軟體、運算基礎架構及機器人等領域。

OpenAI更新Codex Cloud服務，讓程式開發代理Codex在OpenAI管理的雲端電腦執行開發工作，新版讓開發者可先替專案準備一套雲端開發環境，配置程式碼儲存庫、開發工具與相依套件等，發布後供後續任務重複使用。ChatGPT Enterprise也支援團隊共享開發環境，成員可使用相同設定執行各自的Codex任務，相關功能目前正逐步推出。

加拿大量子安全技術業者Quantum eMotion（QeM）於9月28日宣布，已與資安公司Plurilock簽署最終收購協議，將以約3,380萬加元（約7.5億元）收購Plurilock全部已發行的普通股。