由於Meta Muse for macOS有擅自存取用戶電腦資料的疑慮，蘋果上周宣布將為macOS增加完全磁碟存取（Full Disk Access）的開關控制，以防使用者資料被App暗中存取。 Meta於9月初公布個人助理App Muse。這個個人助理號稱可協助用戶發送郵件、預訂旅程、購物或管理跨步驟的長期任務。但它只會在取得用戶同意或授權後才會執行。
10月初微軟發布2026年數位防禦報告（Microsoft Digital Defense Report，MDDR），其中吸引最多人注意的統計分析，是對於當前全球國家級駭客活動情勢的觀察。從報告公布的各區域觀測資料來看，在2025年7月至2026年6月間，臺灣被觀察到193起國家級駭客活動事件，相較2024年數位防禦報告的143起，遭受攻擊狀況顯然持續升高。 若從全球排名來看，美國以531起相關事件居首，其次是以色列210起，臺灣193起與日本172起則分居全球第三、第四，再來是英國76起、印度58起、阿拉伯聯合大公國50起、德國45起、烏克蘭42起，埃…
In this article, author discusses his experience with AI agent hallucinations in an inventory recommendation system and how this problem was solved by treating the LLM stack as a platform infrastructure concern instead of as an application one. He makes a case for a shared LLM pl…
In this episode, Chris Swan, engineer at Atsign and security track host at QCon London, reflects on the ideas shared during QCon London 2026 and teases topics of the future edition. The discussion explores how security engineering is shifting from relying on human vigilance towar…
Microsoft has released Aspire 13.6. The dashboard now stores telemetry in SQLite and keeps up to ten completed runs per application. The release adds prerelease hosting packages for Java and Rust, portable volume paths, and new CLI options. Breaking changes include automatic TLS …
Cloudflare has disclosed a cross-tenant data exposure vulnerability in Containers and Sandboxes, caused by thin-provisioned storage pools configured to skip zeroing reused blocks. Researchers recovered directory structures, database pages and complete SQLite databases across four…
Error generating summary: {
 "error": {
 "message": "You have no credits remaining. Add credits to continue using the API at https://platform.openai.com/settings/organization/billing/.",
 "type": "insufficient_quota",
 "param": null,
 "code": "credit_balance_e…
Research: Qwen3.8 27B addition in words Colin Frasier posted on Bluesky about an experiment he ran over two years ago using GPT-4o to see how well it could "compute the sum but return the answer in words" across increasingly large numbers. Here's the chart he shared of those resu…
Google's AndroidX Security State libraries enables apps to verify security patch status at the individual component level, rather than relying on a single, device-wide security patch date. By Sergio De Simone
A team of developers working at AWS recently open-sourced Pizza Bot, a self-hosted application designed to let AI agents run tasks in the background and return results through an inbox-style interface. Agents can perform scheduled or webhook-triggered work, delegate tasks to spec…
I heard from a friend of the family that Bob passed away in his sleep early Saturday. Very sad news. Bob, who's real name was Mark Stevens, was an early employee of Apple and was best known for his PBS documentaries, especially "Triumph of the Nerds". He will be missed. Comments …
Archestra released OpenAPPA, an open-source security engine designed to stop data exfiltration caused by prompt injection or model hallucination. The team reports zero successful attacks when running security benchmarks Bench-Corp (20 multi-step enterprise workflows) and AgentThr…
Here's a product feature which the world is going to need a whole lot more of over the coming months and years: default hard budget caps . I'm talking about the feature of pay-by-usage services and APIs that lets you say "after $X/month, cut this thing off and return errors". The…