Aggregator

AI 真的是裁员的原因？

Solidot
1 day 21 hours ago
2025 年逾五万次裁员事件都将 AI 列为理由。企业高管表示 AI 技术将会带来巨大变革因此需要裁员。怀疑者认为，企业是故意把 AI 作为裁员的借口。这种做法称为之“A.I.-washing”。很多以 AI 为借口裁员的企业并没有成熟且经过验证的 AI 应用填补职位空缺，它们是将出于财务动机的裁员归因于未来的 AI 落地。沃顿商学院教授 Peter Cappelli 表示，企业声称预计会引入 AI 取代这些工作，但这种情况没有发生。AI 最终很可能会改变就业市场，但 AI 尚未对整体市场产生实质性的影响。Layoffs.fyi 统计显示，自 2022 年以来全球科技公司裁员逾 70 万人，其中很大一部分是为了纠正新冠状疫情期间的过度招聘。对公众而言，以 AI 为理由裁员可能不受欢迎，但相比其它原因如公司计划不周，AI 反而可能更容易被接受。

Eclipse Foundation Mandates Pre-Publish Security Checks for Open VSX Extensions

The Hackers News
1 day 21 hours ago
The Eclipse Foundation, which maintains the Open VSX Registry, has announced plans to enforce security checks before Microsoft Visual Studio Code (VS Code) extensions are published to the open-source repository to combat supply chain threats. The move marks a shift from a reactive to a proactive approach to ensure that malicious extensions don't end up getting published on the Open VSX Registry.
The Hacker News

A 24% Success Rate for AI Agents - Is That Acceptable?

BankInfoSecurity.com
1 day 21 hours ago
New Study Shows AI Agents Can't Work Without Humans in the Loop, But Give Them Time
AI agents are quickly moving from experimental demos to enterprise pilots, and they're already being used for tasks such as financial analysis, document review and drafting. But as AI gains momentum, one question goes largely unanswered: How can we measure the effectiveness of AI agents?

White House Nixes Biden-Era Software Security Rules

BankInfoSecurity.com
1 day 21 hours ago
Analysts Warn of Patchwork Federal Assurance Standards After Rollback
The White House rescinded two key software security policies requiring vendors to attest to secure development practices, citing excessive compliance burdens - but analysts warn the move risks weakening federal software assurance without strong, agency-level replacements.

HHS Audit Flags Web App Security Gaps at Large Hospital

BankInfoSecurity.com
1 day 21 hours ago
Experts: Problems Are Frequent Weaknesses Across Healthcare Sector Entities
Security weaknesses in web-facing apps used at a large U.S. hospital could leave the facility's IT systems and sensitive patient information vulnerable to cyberattacks, found federal auditors. Those same problems also haunt many other healthcare entities, experts said.

RapidFort Lands $42M to Scale Software Supply Chain Security

BankInfoSecurity.com
1 day 21 hours ago
San Francisco-Based Startup Eyes AI Adjacencies and Supply Chain Risk Reduction
Software supply chain security firm RapidFort has raised $42 million in Series A funding to expand sales operations and build out its platform. Founder and CEO Mehran Farimani says the company will focus on reducing developer lift while addressing emerging risks tied to AI-enabled workloads.

How Secure by Design helps developers build secure software

Help Net Security
1 day 21 hours ago

Security isn’t just a feature, it’s a foundation. As cyber threats grow more sophisticated and regulations tighten, developers are being asked to do more than just write clean code. They’re being asked to build software that’s secure by design throughout its lifetime. To help developers meet this challenge, the Center for Internet Security (CIS) and the Software Assurance Forum for Excellence in Code (SAFECode) released Secure by Design: A Guide to Assessing Software Security Practices. … More →

The post How Secure by Design helps developers build secure software appeared first on Help Net Security.

Help Net Security

8K 电视时代尚未到来

Solidot
1 day 21 hours ago
电视行业已经普及了 4K 分辨率，但在可预见的未来 8K 电视时代还不会到来，主要电视厂商都停止推出新款的 8K 电视产品。LG Display 停产 8K LCD 或 OLED 面板，LG 电子是第一家也是唯一一家销售 8K OLED 电视的厂商，它最后一款 LCD 8K TV 是 2024 年推出的 QNED99T。TCL 最后一款 8K 电视是在 2021 年推出的，索尼的 8K 电视也停产了，它的电视业务正被 TCL 接手。市场研究公司 Omdia 在 2024 年 9 月发表报告称，4K 电视已接近 10 亿台，但 8K 电视的销量仅为 160 万台。三星、TCL、海信和友达光电成立的 8K Association 在 2022 年有 33 名成员，今天只剩下 16 名，其中没有任何主流电视面板供应商。

CISA Adds Actively Exploited SolarWinds Web Help Desk RCE to KEV Catalog

The Hackers News
1 day 21 hours ago
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting SolarWinds Web Help Desk (WHD) to its Known Exploited Vulnerabilities (KEV) catalog, flagging it as actively exploited in attacks. The vulnerability, tracked as CVE-2025-40551 (CVSS score: 9.8), is a untrusted data deserialization vulnerability that could pave the way for remote
The Hacker News

Managed ad