微软于4月14日发布本月补丁更新，涉及超过160个独立漏洞，加上第三方及Chromium补丁共近250项，规模创历史之最。其中包含两个零日漏洞：CVE-2026-32201为SharePoint Server跨站脚本漏洞，已被野外利用；CVE-2026-33825为Defender权限提升漏洞，已公开披露但暂未发现利用案例。此外还有8个严重级别漏洞及一个Chromium远程代码执行漏洞，安全专家建 ...

The latest monthly Patch Tuesday update from Microsoft landed earlier on 14 April, including two notable zero-day flaws amid ...

2026 年北美 MCP 开发者峰会于 4 月 2 日至 3 日在纽约万豪侯爵酒店举行，吸引了约 1200 名参会者，已成为 Model Context Protocol 生态系统的旗舰活动。会议由 Linux 基金会旗下的 Agentic AI ...

LinkedIn is facing two lawsuits over its practice of scanning users’ browsers to determine which extensions they’re running. Two class action complaints were filed by different law firms on behalf of ...

2026年4月2日，基于Chromium内核的主流浏览器，包括Chrome、Edge和Vivaldi等，即将全面支持视频与音频元素的原生延迟加载功能。该方案由独立开发者赫尔穆特·雅努什卡向Chromium开源项目提交，并计划于Chrome 148稳定版本中正式面向所有用户启用。

We are a weekly podcast and newsletter made to deliver quick and relevant JavaScript updates in just under 4 minutes. byThis Week in JavaScript@thisweekinjavascript byThis Week in ...

Iframes are a common tool for embedding content on websites. But they can also bring risks if not handled right. In 2025, it is important to secure iframes. This helps protect your site and meet PCI ...

This SDK allows your iframe app to talk to Thingiverse using javascript. It provides a way to display a number of pre-built Dialogs as well as communicate with the API. Be sure to check out the ...