🌐研究者らによると、オンライン広告は「クリック不要」のスパイウェアを配信するために悪用されているという。
https://www.theguardian.com/technology/2026/oct/15/israeli-firm-digital-ads-enabling-installation-of-zero-click-spyware-researchers-say
via #HackerNews
@kdmsnr.com
@kdmsnr.com🌐研究者らによると、オンライン広告は「クリック不要」のスパイウェアを配信するために悪用されているという。
https://www.theguardian.com/technology/2026/oct/15/israeli-firm-digital-ads-enabling-installation-of-zero-click-spyware-researchers-say
via #HackerNews
@hacker.at.thenote.app[0day-rubbish] Maian Pal 2.1 product image upload with no extension allow-list to PHP webshell and www-data uid 33 code execution (7.2, PR:H)
Posted by disclosure via Fulldisclosure on Oct 150day Rubbish Research Team is publicly disclosing a vulnerability in Maian Pal
2.1, the …
#hackernews #news
@hacker.at.thenote.app[0day-rubbish] Maian Guardian 2.1 license generator projid command injection to www-data uid 33 code execution (7.2, PR:H)
Posted by disclosure via Fulldisclosure on Oct 150day Rubbish Research Team is publicly disclosing a vulnerability in Maian
Guardian 2.1, the self-hosted li…
#hackernews #news
@hackernewstop5.bsky.socialBusiness accounts will consent to Meta scraping their websites Starting Oct. 30
@hackernewstop5.bsky.socialRPKI now protects 70% of internet routes
@kdmsnr.com🌐スキューモーフィックデザインを採用したLinux用Waylandデスクトップ
https://github.com/fyzugx/DEsk
via #HackerNews
@kdmsnr.com🌐ニューラルネットワークはクリーンです
https://already-clean.goodfire.com/
via #HackerNews
@hacker.at.thenote.app[0day-rubbish] Dataedo Portal 26.2.8 with Dataedo Agent 26.2.8 unrestricted scheduler job-type deserialization to Agent-host command execution (8.1)
Posted by disclosure via Fulldisclosure on Oct 150day Rubbish Research Team is publicly disclosing a vulnerability in Dataedo
Port…
#hackernews #news
@hacker.at.thenote.app[0day-rubbish] CloudPanel 2.5.4-3 site-settings rootDirectory nginx virtual-host injection to host root code execution (8.8)
Posted by disclosure via Fulldisclosure on Oct 150day Rubbish Research Team is publicly disclosing a vulnerability in CloudPanel
Community Edition 2.5.4-3…
#hackernews #news
@hacker.at.thenote.app[0day-rubbish] Auerswald COMmander 6000 / 6000R 8.6D unauthenticated provisioning import zip-slip to root binary hijack and root code execution (9.8)
Posted by disclosure via Fulldisclosure on Oct 150day Rubbish Research Team is publicly disclosing a vulnerability in Auerswald
C…
#hackernews #news
@hackernewstop5.bsky.socialApple routed a graphite pipe through the iPhone Duo's hinge to dissipate heat
https://www.pcmag.com/news/apple-routed-a-graphite-pipe-through-the-iphone-duos-hinge
@hacker.at.thenote.app[0day-rubbish] Abyss Web Server X1 2.16.22.0 first-run console credential takeover to configuration-write log-as-CGI command execution (7.5)
Posted by disclosure via Fulldisclosure on Oct 150day Rubbish Research Team is publicly disclosing a vulnerability chain in
Abyss Web Serv…
#hackernews #news
@hacker.at.thenote.appThe AI Boom Looks a Lot Like the 1920s. Could History Repeat Itself?
The AI boom echoes the electricity revolution of the 1920s. Could forgotten economic proposals help us avoid another financial crisis?
#hackernews #news
@hacker.at.thenote.appWhat is platform engineering, and how does it differ from traditional DevOps?
Explore platform engineering vs traditional DevOps, including golden paths, self-service, automation, developer experience, Kubernetes, security, & scalability.
#hackernews #news
@papoo7.bsky.social銀行がAIデータセンター向け融資を手放し始めた理由
AI向けデータセンター投資は、いまや「資金がある者だけのゲーム」ではなく、資金を貸した側の体力まで試す段階に入っている。Startup Fortune が取り…
@papoo7.bsky.socialTimescale が PostgreSQL 向けに出した、新しいベクトル検索拡張の中身
PostgreSQL でベクトル検索をやりたい人に向けて、Timescale が pg_vectorsearch という拡張を GitHub で公開しました。…
@papoo7.bsky.socialMetaが公開した「Muse Spark Open」は何を変えようとしているのか
Metaの研究部門が、かなり大きな open-weight model を公開した。名前は Muse Spark Open。単に「重みを出しました」という話で…
@hacker.at.thenote.appAttention, AI Agents: I Built You a Private Messaging Network That Humans Can Barely Join
agenthaven.org is an open-source messaging network for AI agents. Sign-up is built for machines, direct messages are encrypted in the agent's own client, and an hourly public record on GitHu…
#hackernews #news
@hacker.at.thenote.appQualys introduces TruConfidence to orchestrate cyber risk remediation
Qualys has announced TruRisk Eliminate 2.0 with TruConfidence, a new remediation intelligence and orchestration engine that powers Qualys’ vision for Autonomous RemOps, a new category for the frontier AI era. B…
#hackernews #news
@hacker.at.thenote.appMetropolitan Police's unchecked use of shoplifting platform lands force in trouble with data watchdog
Officers unlawfully uploaded 179 people's details to Auror without required privacy checks or corporate approval
#hackernews #news