KDZONE 情報站

404 Media報導，以賣書起家的Amazon購入大量珍本書籍，將拆卸開來掃描，用以訓練AI模型。 404 Media是以調查報導方式，在書本內置入追蹤裝置，最後查到書本運抵Amazon於拉斯維加斯，名為VGT3的物流中心。 Amazon以簡單聲明回覆媒體說，該公司透過商業通路購買書本，是為了提升客戶使用的產品和服務。 報導指出，Amazon此舉是為了新闢內容來源。

資安業者Ontinue旗下資安營運團隊Cyber Defense Center在7月調查一波攻擊活動時，發現先前未公開的Python惡意植入框架TWINLOOT。攻擊者利用SharePoint Online、Microsoft Teams與受害電腦上的Edge瀏覽器隱藏指揮控制通訊，同時竊取Windows登入憑證，並把受害電腦當成進入企業內網其他系統的跳板。

資安業者Varonis揭露微軟Copilot個人版（Microsoft Copilot Personal）漏洞CoSnitch，攻擊者只要誘使已登入Copilot的使用者點擊特製連結，就可能讓預先藏入的指令自動執行，進而讀取Gmail、Google Drive、Google Calendar與OneDrive等已連接服務的資料，並傳送至外部伺服器。CoSnitch漏洞編號為CVE-2026-24301，微軟已完成修補。

8月18日美國網路安全與基礎設施安全局（CISA）提出警告，他們將4個資安漏洞加入已遭利用的漏洞名單（KEV），原因是已掌握遭積極利用的證據。值得留意的是，這些漏洞皆為重大等級，相當危險，CISA下令聯邦機構需緊急採取行動，修補的期限都是8月21日。

資安業者Wordfence於8月17日揭露，WordPress外掛程式Forminator Forms存在重大的任意檔案上傳漏洞，該外掛用於建立聯絡、付款、問卷及其他自訂表單，全球有逾60萬個啟用安裝量，所有1.56.1及以前版本都受前述漏洞影響。

Oracle於8月18日發布2026年8月份關鍵安全修補更新（Critical Security Patch Update，CSPU），包含943項更新程式與925個漏洞，相較今年6月份上一次CSPU的245項更新程式，修補規模一口氣增加近4倍。

https://archive.ph/a3165 Comments URL: https://news.ycombinator.com/item?id=49355825 Points: 300 # Comments: 259

OpenAI周二（8/18）宣布推出ChatGPT for Teens青少年版本，系統若判斷使用者未滿18歲，或使用者自行申報年齡介於13至17歲之間，將自動導入此版本，以提供更嚴格的安全防護及家長控管功能。

Comcast推出Xfinity Shield居家防護平臺，其中較特別的是WiFi Motion功能，可利用家中既有的Xfinity閘道器與Wi-Fi裝置感測室內活動，不需要另外安裝攝影機或傳統動作感測器。系統會偵測Wi-Fi無線訊號變化，發現非預期活動時透過Xfinity應用程式通知使用者。

本日新聞焦點 ● Citrix NetScaler高風險漏洞遭積極利用 ● AI工程平臺MLflow甫公布的漏洞被用於竊取雲端憑證與機密 ● 蘋果發布行動裝置與電腦作業系統更新

Article URL: https://openlogi.org/en Comments URL: https://news.ycombinator.com/item?id=49355606 Points: 365 # Comments: 74

Article URL: https://bfi.uchicago.edu/wp-content/uploads/2026/08/BFI_WP_2026-108-1.pdf Comments URL: https://news.ycombinator.com/item?id=49355142 Points: 302 # Comments: 158

Article URL: https://www.bbc.com/news/articles/c1l1r1zne1ro Comments URL: https://news.ycombinator.com/item?id=49355105 Points: 318 # Comments: 257

Article URL: https://www.cerebras.ai/cs4 Comments URL: https://news.ycombinator.com/item?id=49354949 Points: 295 # Comments: 203

US healthcare is broken. Under RFK Jr., the research agency working to fix it is, too.

Tanks with defensive tech for shooting down drones are still proving vulnerable.

Cursor, known for its AI Code Editor, is launching a new code hosting platform to rival developers' long preferred favorite, Github.

ChatGPT Ads is expanding to 31 European markets. Learn how advertisers can reach people as they explore, compare options, and make decisions.

Article URL: https://github.com/DenisSergeevitch/desktop-fly Comments URL: https://news.ycombinator.com/item?id=49353221 Points: 315 # Comments: 130

Mojo🔥 is now open source Mojo🔥 is now open source The Mojo programming language has been promising an open source release since May 2023 . Last week they shipped their 1.0 and today they have followed through on that original promise, releasing the compiler and toolchain under …

Article URL: https://about.iceland.co.uk/our-story/the-dark-ages/beware-management-consultants/ Comments URL: https://news.ycombinator.com/item?id=49351324 Points: 332 # Comments: 51

"A team of SpaceX engineers is on their way to conduct additional analysis on the vehicle."

OpenAI launches an initiative to strengthen democratic oversight of AI in national security, supporting government institutions with tools, training, and expertise.

Article URL: https://www.ikea.com/se/en/customer-service/knowledge/articles/6f564c4d-2ccc-46de-b643-545a3948dc79.html Comments URL: https://news.ycombinator.com/item?id=49349984 Points: 292 # Comments: 171

FCC demands "total capitulation" in Trump censorship campaign, Disney suit says.

The new safeguards include more detailed monitoring of models during the development process, as well as greater emphasis on alignment and security during the post-training process.

Article URL: https://asmedigitalcollection.asme.org/sustainablebuildings/article/7/2/024501/1233035/Data-Center-Waste-Heat-as-an-Emerging-Urban Comments URL: https://news.ycombinator.com/item?id=49349147 Points: 278 # Comments: 411

Jane Street has installed Etched's first shipped AI cluster system, and was so impressed, it led another massive round, the startup says.

Article URL: https://shkspr.mobi/blog/2026/08/and-then-the-men-with-guns-tell-you-to-do-it-anyway/ Comments URL: https://news.ycombinator.com/item?id=49348912 Points: 295 # Comments: 191

Article URL: https://support.claude.com/en/articles/15910845-claude-code-may-august-2026-weekly-limits-promotion Comments URL: https://news.ycombinator.com/item?id=49348751 Points: 286 # Comments: 256

Peacock's quarterly profitability isn't guaranteed.

One big question: Will China assert territorial rights where its rover explores?

Apple’s leaked camera-equipped AirPods might avoid the privacy pitfalls of other AI wearables by preventing users from recording photos and videos.

Fairphone sells components like the USB port and screen, all swappable with a single torx driver.

Cloudflare is introducing WriteGuard, now in private beta, to provide fine-grained security controls for MCP (Model Context Protocol) servers. It aims to make AI agents safer by controlling their access to tools that can modify data or perform actions, rather than simply read inf…

Jordan Nanos discusses how semiconductor constraints, data center expansion, and networking bottlenecks impact AI software architecture. Drawing from SemiAnalysis research, he shares insights on benchmark performance, GPU scaling, and tokenomics from chip fab to model inference. …

The American automaker returns to the top category of endurance racing next year.

Matte paintings—not CGI—warp a world designed to hit a nerve for slasher fans.

RFC 9234 lets routers reject route leaks on their own, using BGP Roles and the Only to Customer attribute. We measured who has deployed it, and found two Tier 1 networks unexpectedly stripping OTC.

New study finds that the tusks have not one but two spirals, twisting in opposite directions.

Article URL: https://theconversation.com/babies-born-under-sugar-rationing-grew-into-adults-with-lower-cancer-risk-289873 Comments URL: https://news.ycombinator.com/item?id=49345843 Points: 266 # Comments: 55

On Tuesday, Warp introduced Warp Factories, a new infrastrructure system designed to make building AI software factories as easy as possible.

ChatGPT for Teens adds age-appropriate safety measures, parental controls, and learning tools designed to steer teens away from harmful content — and from using AI to cheat on their homework.

Perplexity's India revenue rose about 60% after the Airtel offer ended for new users, even as downloads declined.

Article URL: https://seths.blog/2026/08/the-amazon-tax/ Comments URL: https://news.ycombinator.com/item?id=49345263 Points: 343 # Comments: 254

Article URL: https://quantum5.ca/2026/08/16/fixing-bricked-amd-7040-series-framework-13-laptop-with-20-tools/ Comments URL: https://news.ycombinator.com/item?id=49345220 Points: 294 # Comments: 195

Secret parameter allowed hackers to steal passwords when a target clicked on a link.

Netflix open-sourced an agentic workflow for Observational Causal Inference (OCI) that reduces toil in causal analysis. Given observational data and the human user's analysis plan, the agent uses an actor-critic loop to estimate causality, write a report, and suggest next steps. …

Article URL: https://philo.gay/linecam/ Comments URL: https://news.ycombinator.com/item?id=49344825 Points: 288 # Comments: 50

Article URL: https://www.fairphone.com/nl/stories/the-fairphone-gen-6-is-all-about-giving-you-more Comments URL: https://news.ycombinator.com/item?id=49344811 Points: 271 # Comments: 135

Brad Grantham discusses how software engineers and architects can transition from individual contributors to influential technical leaders. Brad shares actionable insights on expanding skills into business and legal domains, adapting communication styles for non-technical stakeho…

資安業者Fortinet宣布完成併購AI資安新創Virtue AI，藉此補強AI代理安全、紅隊演練及持續AI安全驗證等能力，讓既有AI安全布局進一步涵蓋AI代理與相關工具。

8月13日硬體錢包廠商Trezor發布公告，其第三方物流合作夥伴ShipMonk發生資料外洩事件。ShipMonk於8月10日通知其系統遭未授權存取，初步確認遭存取的資料涉及客戶訂單資訊，包括姓名、電子郵件、電話號碼，以及收貨地址。

GitHub周一（8/17）發生大規模服務故障，包括API、Git Operations、Actions、Issues、Pages、Pull Requests及Webhooks等多項核心服務皆受影響，網站服務與API流量錯誤率一度達20%，儲存庫封存檔及原始內容下載錯誤率更一度達50%。事故自世界協調時間（UTC）8月17日13時40分（臺北時間8月17日21時40分）開始，至21時15分UTC（臺北時間8月18日5時15分）才完全排除，歷時約7小時35分鐘。

8月13日資安公司Fortinet提出警告，他們在追蹤名為Evooo1Bot的殭屍網路，攻擊者以Mirai原始碼為基礎，在DDoS攻擊能力之外整合多種功能，包含加密C2通訊、SSH暴力破解與掃描工具、SOCKS中繼模組，以及憑證嗅探工具等。再者，Evooo1Bot將近20個已知漏洞列入武器庫，鎖定Alcatel、Netgear、三菱電機、D-Link等多個廠牌的網路及工控設備，Fortinet指出，此殭屍網路從今年7月開始活躍，在許多地區從事活動。

GitHub has announced that Stacked Pull Requests are now available in public preview, introducing native support for breaking large software changes into smaller, dependent pull requests that can be reviewed and merged independently. By Craig Risi

最近兩到三年引起資安界關注的勒索軟體Akira，去年底將加密資料的範圍延伸到Nutanix虛擬機器，如今傳出這些駭客又採用新的攻擊手法，再度引起資安公司的注意。

安業者Wordfence於8月14日揭露WordPress外掛User Profile Builder存在重大身分驗證繞過漏洞，該外掛用於建立使用者註冊、登入及個人資料管理功能，目前有超過4萬個網站啟用。

全球主要DevOps平臺之一的GitLab，近日發布更新，修補Community Edition與Enterprise Edition版的13個漏洞，涵蓋Analytics儀表板、CI/CD、API等服務與套件管理等功能，目前尚無這些漏洞遭實際利用或已有公開PoC的資訊。GitLab團隊已為雲端版GitLab.com服務完成更新，採用自行管理（self-managed）版本的用戶，則應升級至已修補完成的19.2.2、19.1.4與19.0.6等版本。