Node.js 於台北時間 10 月 21 日發布安全更新，現行分支 26.x、24.x、22.x 分別升級至 26.12.1、24.22.1、22.23.4，一次修復 10 項漏洞（4 高、3 中、3 低），最高嚴重度為 HIGH。

Node.js 專案於 2026 年 10 月 21 日發布安全更新，同時修補 26.x、24.x 與 22.x 三條仍在支援中的版本線，共處理 10 個 CVE，其中 4 個為高風險（High）、3 個中風險（Medium）、3 個低風險（Low）。官方公告明確指出，三條版本線各自修補的最高嚴重度都是 ...

一名安全研究員在破解自家三星電視後，揭露該電視會 7x24 小時監聽家庭環境並將精確畫像賣給數百家公司。諷刺的是，該研究員因使用 AI 協助分析而遭 OpenAI 封號，Claude 同時也強化了對逆向工程的限制。此次事件背後是開源神器 REA 的崛起，該工具讓逆向工程從專家專利變為「一句話」操作，打破了大廠的資訊壟斷。文章質疑，當消費者試圖看清購買產品的真相時，反而被 AI 巨頭定義為「加害者」 ...

從未聽說過「agent skills」？你來對地方了。這是一份由社群精選的清單，收錄了簡單的文字檔案，能教 AI 助理（如 Claude、Copilot 或 Codex）按需學習新能力，無需重新訓練。與大量生成的技能庫 ...

When asking AI to write code, it works well with Python or JavaScript, but it can suddenly become unreliable with older or less popular languages.One reason is the small amount of code and ...

From Torakichi This is the fourth installment of the series where my development partner, AI-kun, explains the design ...

Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled data.

APT29-linked attackers use compromised sites and Plerdy analytics to deliver iOS and Android exploits that steal browser and ...

Node.js 26.12.1, 24.22.1 and 22.23.4 fix TLS verification bypasses, a Brotli decoder bug and a repeated-random-value issue in snapshots. Here is what to check after updating, from TLS connections to ...

New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra certificates.

Node.js patched 10 vulnerabilities across versions 26.x, 24.x, and 22.x, including four high-severity flaws affecting DNS, TLS, and Brotli decompression.

The MeccanicOS project publishes a USB builder and a feature list for a NixOS-based desktop that runs offline, supports ...