I-Kernel Zero-Day 'i-Dirty Frag' Yophula i-Cloud Trust njenge-Acro Agents zikaGoogle ziYila kwakhona i-E-commerce

I-Kernel Zero-Day 'i-Dirty Frag' Yophula i-Cloud Trust njenge-Acro Agents zikaGoogle ziphinde zimise i-E-commerce

Ubume betekhnoloji buhlala buguquguquka, kodwa ezinye iinguqu ziyitectonic. Kule veki, sizamana nezi ziganeko zimbini: iLinux kernel zero-day, ebizwa ngokuba 'yiDirty Frag,' ethi isijongela phantsi iziqinisekiso zokhuseleko lweziseko zamafu zale mihla, kunye nebhongo likaGoogle elithi 'Universal Cart Acro,' elithembisa ngokusisiseko ukubunjwa komhlaba worhwebo lwe-intanethi nge-AI ye-arhente. Zombini zifuna uphononongo olukhawulezileyo, olungqongqo lobuchwephesha kuso sonke isakhiwo sobunjineli kunye nokukhusela ilizwe lethu ledijithali.

Iqhekeza elimdaka: IKernel Zero-Day Eyophula yonke into

Ngomhla we-7 kaMeyi, i-2026, ukubhengezwa okubandayo kuthumele i-ripples ngokusebenzisa uluntu lwezokhuseleko lwe-Linux: iperi ye-kernel vulnerabilities, i-CVE-2026-43284 kunye ne-CVE-2026-43500, eyaziwa ngokuba yi-'Dirty Frag.' Oku asikokunye ukunyuka kwamalungelo asekuhlaleni (LPE); yindlela eqinisekileyo ukusuka kumsebenzisi ongekho sikweni ukuya kwiingcambu, ukugqitha kwiibhokisi zesanti-izikhongozeli kunye ne-microVMs-ezenza umgangatho wokhuseleko lwamafu.

Imeko yoMngcipheko: Ukujongelwa phantsi kweMiba yokuBekwa wedwa

Iziseko zamafu zanamhlanje zixhomekeke kakhulu ekuzihlukaniseni. IDocker, iKubernetes, kunye noomatshini abakhaphukhaphu abanje ngeFirecracker kunye neKata Containers zithembisa imida eyomeleleyo phakathi komthwalo womsebenzi. I-Dirty Frag iyayichitha le nkohliso. Umba ongundoqo ungaphakathi kulawulo lwememori ye-Linux kernel, ngokukodwa indlela ephatha ngayo ukwabiwa kweememori kunye nokuhanjiswa.

Ngelixa iinkcukacha ezithile zokuxhaphaza zisavela, uhlalutyo lwethu lucebisa ukuba 'i-Dirty Frag' ibeka emngciphekweni wosetyenziso-emva kwe-free (UAF) phakathi kwe-kernel ye-SLUB eyabelayo, enokuthi ibangelwe yimeko yogqatso ebandakanya imisebenzi ethile yemap okanye unxibelelwano oluntsonkothileyo kunye neentlobo ezithile zesokethi zenethiwekhi (umzekelo, AF_PAC okanye `AF_PACEX). I "Frag" moniker yalatha kubuchule bomhlaseli bokulawula ukuqhekeka kwemfumba ye-kernel, ukwenza imemori eqikelelweyo yoyilo evumela ukwabiwa kwakhona okuthembekileyo kwedatha elawulwa ngumsebenzisi kwi-slot yento ye-kernel ekhululiwe.

Nali ikhonkco loxhaphazo olukwinqanaba eliphezulu:

1. Ukuqalisa i-UAF: Inkqubo engafanelekanga iqalisa ulandelelwano lolwabiwo lwenkumbulo kunye nokuhanjiswa, okunokwenzeka okubandakanya shmem okanye io_uring imisebenzi, eyilelwe ukuyila ipateni ethile yokwahlulwa kwimfumba yekernel. Imeko yogqatso ivumela ukuba into yekernel ikhululwe ngelixa isalathi esidala sisekhona.
2. Fumana Isitshizi & Ukwabelwa kwakhona: Umhlaseli emva koko "utshiza" imfumba yekernel ngedatha elawulwa ngumsebenzisi, rhoqo esebenzisa msg_msg okanye ipayipi_buffer izinto, ejolise ekwabeleni kwakhona idatha yazo kwindawo yenkumbulo yento yekernel ekhululekileyo.
3. Ukufunda/Bhala ngokuNganyanzeliyo: Ngedatha elawulwayo ngoku ekwinto ye-kernel, umhlaseli angenza i-payloads ekhohlakeleyo ukuze afumane i-kernel engafunekiyo efundeka / bhala i-primitive. Oku kunokuquka ukonakalisa seq_yokusebenza isakhiwo okanye ifayile_yemisebenzi itheyibhile.
4. Ukwenyuswa kwelungelo: Okokugqibela, ukubhala ngokungenamkhethe kusetyenziselwa ukubhala phezu kwenkqubo yangoku ulwakhiwo lwenkqubo yangoku (ukusetha uid=0, gid=0`), okanye ukuqweqwedisa ulawulo lokuhamba ukuphumeza ikhowudi yekernel engavumelekanga, ekhokelela kufikelelo lwengcambu emiselweyo.

⚠️ Ingozi yoLwakhiwo: I-Frag emdaka ibonisa ukuba nangamaxesha esikhongozeli esomeleleyo kunye nee-microVMs, ikernel ekwabelwana ngayo ihlala iyeyona ndawo yohlaselo. Nabuphi na ubuthathaka apha bunokudlula iileya zokwahlula, ukwenza izicwangciso zokhuselo-bunzulu zibe yeyona nto iphambili, hayi nje ukukhetha.

Iibhokisi zeSanti zokugqitha: Ingxaki yeKernel ekwabelwanayo ngayo

Isizathu sokuba i-Dirty Frag yonakalisa izikhongozeli kunye nee-microVMs zilula: zonke zabelana nge-Linux kernel efanayo. Ngelixa izithuba zamagama, amaqela, kunye ne seccomp iinkangeleko zibonelela ngokwahlulwa okuqinileyo kweenkqubo zesithuba somsebenzisi, azinakukhusela ngokuchasene neziphene ngaphakathi kwekernel ngokwayo. I-Firecracker kunye ne-Kata Containers, ngelixa usebenzisa ii-VMs ezikhaphukhaphu, isaqhuba i-Linux kernel (nangona incinci) echaphazeleka kubuthathaka obunjalo ukuba i-vector yohlaselo ikhona ngaphakathi kwendawo yayo ye-syscall eveziweyo.

Unciphiso kunye nokwenza lukhuni: Kufuneka inyathelo elikhawulezileyo

Inyathelo elikhawulezileyo, elingaxoxisiyo kuku-peyisha iinkozo zakho*. Ababoneleli bamafu kunye nabagcini bokusasaza bayangxama ukukhulula uhlaziyo. Ngaphandle kokuchwetheza, isicwangciso sokhuselo esinamanqanaba amaninzi sibalulekile.

# Umzekelo: Ukwenza lukhuni iiparamitha ze-sysctl ngokuchasene nokuxhaphazwa kwekernel eqhelekileyo
# Ezi zingcebiso ngokubanzi kwaye azinakuthintela ngokuthe ngqo i-Dirty Frag,
# kodwa banciphisa indawo yonke yohlaselo kwaye benze ukuxhaphaza kube nzima.

# Khubaza izithuba zamagama zabasebenzisi abangenalungelo (iVector eqhelekileyo yeLPE)
sudo sysctl -w kernel.unprivileged_userns_clone=0

# Thintela umkhondo wokunciphisa ukuvuza kolwazi kunye nenkqubo yokukhohlisa
sudo sysctl -w kernel.yama.ptrace_scope=1

# Yenza ngokuzenzekelayo inkumbulo ye-kernel (KASLR)- ibalulekile kunciphiso lokunciphisa
# (Oku kuqhele ukwenziwa ngokungagqibekanga, qinisekisa ukuba akuvakwanga)
# Jonga: ikati /proc/sys/kernel/randomize_va_space (kufuneka ibe yi-2)

# Khubaza i-BPF JIT (inokuba yinto yakudala) ukuba ayifunwa ngokungqongqo
# Qaphela: Oku kunokuchaphazela ukusebenza kwezinye izicelo.
sudo sysctl -w net.core.bpf_jit_enable=0

# Faka olu tshintsho ngokuqhubekayo
echo "kernel.unprivileged_userns_clone = 0" | sudo tee -a /etc/sysctl.d/99-hardening.conf
echo "kernel.yama.ptrace_scope = 1" | sudo tee -a /etc/sysctl.d/99-hardening.conf
phinda "net.core.bpf_jit_enable = 0" | sudo tee -a /etc/sysctl.d/99-hardening.conf
sudo sysctl --system

Imibutho kufuneka ithathele ingqalelo izisombululo zekernel eziphilayo ezifana ne kexec okanye iminikelo yorhwebo ukunciphisa ixesha lokuphumla ngexesha lohlaziyo olubalulekileyo. Ukuphonononga rhoqo iiprofayili ze-seccomp kunye nokuqinisekisa ukuvezwa okuncinci kwe-syscall yomthwalo ogcweleyo, ngelixa ingesiso isilungiso esithe ngqo seDirty Frag, ihlala isesona senzo silungileyo sokunciphisa umphezulu wohlaselo lulonke.

Google's Universal Cart Acro: Agetic Checkout Reshapes E-commerce

Ukutshintsha iigiya ukusuka kwizoyikiso ezikhoyo ukuya kumathuba otshintsho, uGoogle uphehlelele i-'Universal Cart Acro' kulo lonke uPhando kunye namaqonga eGemini e-US. Olu ayilophawu nje olongezelelekileyo; luyilo olusisiseko lolwakhiwo kwakhona lokuthenga kwi-intanethi, sazisa 'i-agenti checkout' exhaswa yi-'UCP Protocol' entsha, njengoko kuxelwe yi- AI News Today. Eli nyathelo libonisa injongo kaGoogle yokuzinzisa ngokunzulu iiarhente ze-AI ngokuthe ngqo kurhwebo lwentengiselwano, ihamba ngaphaya kokufunyanwa ukuya ekugqityweni kwentengiselwano ezimeleyo.

I-Agentic Shift: Ukusuka kukhangelo ukuya ekuThengweni okuZimelayo

I-e-commerce yesiko yinkqubo eqhutywa ngumsebenzisi: khangela, ukukhangela, ukuthelekisa, ukongeza kwinqwelo, ukuphuma. I-Acro ijikelezisa esi script. Ngokuphuma kwe-agent, i-arhente ye-Google AI (umzekelo, ngaphakathi kweGemini okanye uPhando) iyayiqonda injongo yomsebenzisi ("Ndithengele ikhibhodi entsha ye-ergonomic yekhowudi, phantsi kwe-$ 150, ihanjiswe ngolwesiHlanu"), ifumanisa ngokuzimeleyo iimveliso kubathengisi abahlukeneyo, ithelekisa iinketho, ilawula yonke inkqubo yokuphuma, kwaye iqinisekisa ukuthengwa, konke ngokungenelela okuncinci komsebenzisi.

Oku kukutsiba okubalulekileyo kuluhlu lweemveliso ezilula okanye amaqhosha athi "Thenga kuGoogle". Oku kuthetha ukuqonda okunzulu kwezinto ezikhethwa ngumsebenzisi, uluhlu lweempahla lwexesha lokwenyani kunye namaxabiso kuthungelwano olukhulu lwabarhwebi, kunye nokukwazi ukuthethathethana okanye ukukhetha iindlela zokuthenga ezizezona.

IProtokholi ye-UCP engapakishwanga: Umqolo woRhwebo lwe-Agenttic

I-'UCP Protocol' (i-Universal Cart Protocol) linchpin yobugcisa eyenza elikamva le-arhente. Ngelixa uGoogle kusafuneka akhuphe iinkcukacha ezigcweleyo, intelekelelo yethu yoyilo icebisa ukuba i-UCP isemgangathweni, ikhuselekile, kwaye iyandiswa umaleko we-API eyenzelwe umthungo, unxibelelwano lomatshini ukuya kumatshini phakathi kweearhente zikaGoogle ze-AI kunye nabarhwebi be-e-commerce abathatha inxaxheba.

Sibona i-UCP njengeprothokholi enamacala amaninzi ebandakanya:

1. Imveliso kunye ne-Inventory APIs: Ii-arhente zibuza iikhathalogu zabarhwebi, amanqanaba esitokhwe sexesha langempela, kunye namaxabiso aguqukayo. Oku kunokwenzeka ukuba kubandakanya ukugcinwa kwedatha ecwangcisiweyo (umzekelo, uqwalaselo oluphuculweyo lwe-Schema.org, i-Google Merchant Centre feeds) eyandiswe ngeendawo zokuphela kwexesha le-API.
2. ** I-Transaction & Order APIs: ** Ii-Agents ziqala ukuthenga, zigqithise amathokheni okuhlawula avunywe ngumsebenzisi (ithokheni ekhuselekileyo kwaye ingazange ibonakale ngokuthe ngqo kwi-arhente), izinto ezikhethwayo zokuthumela, kunye nokufumana iziqinisekiso ze-oda. Oku kufuna ukungaziwa okuqinileyo kunye nokuphatha iimpazamo.
3. Ukuzaliseka kunye neeWebhooks zeSimo: Abarhwebi basebenzisa ii-webhooks ukuhlaziya ii-arhente ze-Google malunga notshintsho lwesimo se-odolo (umzekelo, "ithunyelwe," "ithunyelwe," "i-backordered"), eyenza i-arhente igcine ulwazi lomsebenzisi.
4. Umaleko woMbuzo weSemantic: Ilungu elibalulekileyo, langaphakathi likaGoogle eliguqulela injongo yomsebenzisi yolwimi lwendalo kwimibuzo ecwangcisiweyo ehambelana nomthengisi we-UCP APIs, ukuphatha izinto ezingaqondakaliyo kunye nezinto ezikhethwayo.

# Ukudityaniswa koMthengisi weProtokholi ye-UCP (Eyenziwe lula i-YAML yokuzekelisa)
# Le snippet ibonisa indlela umrhwebi anokuthi ayiveze ngayo imveliso ukuze kufunyanwe iarhente
# kwaye uchaze isiphelo sokuphuma kwe-arhente.

# Uluhlu lweeMveliso zoMrhwebi nge-UCP
imveliso:
  id: "SKU-XYZ-789"
  igama: "Ergonomic Mechanical Keyboard"
  inkcazelo: "Uyilo lokwahlula, ukutshintshwa kwe-tactile, i-USB-C, ilungele abaphuhlisi."
  ixabiso:
    isixa: 129.99
    imali: "USD"
  uluhlu lwempahla:
    isimo: "ngaphakathi_stock"
    ubuninzi: 50
    okokugqibela_uhlaziyo: "2026-10-17T14:30:00Z"
  shipping_options:
    -indlela: "standard"
      ixabiso: 5.00
      delivery_estimate: "3-5 iintsuku zokusebenza"
    - indlela: "express"
      ixabiso: 15.00
      delivery_estimate: "1-2 iintsuku zokusebenza"
  i-agent_checkout_endpoint: "https://api.myretailer.com/ucp/v1/checkout"
  # Imetadata eyongezelelweyo yokuthelekisa iarhente (umzekelo, uhlobo lokutshintsha, ukukhanya ngasemva)
  iimpawu:
    switch_type: "brown_tactile"
    ukukhanya ngasemva: "RGB"
    uyilo: "US_ANSI"

# I-Agent-iqaliswe isicelo sokuphuma (iTHUMELA kwi-arhente_yokuphuma_indawo yokugqibela)
# (Umthwalo owenziwe lula)
isicelo_sokuphuma:
  agent_id: "google-gemini-acro-123"
  user_id_token: "jwt_user_identity_token" # Khusela, isazisi somsebenzisi esingachazwanga
  izinto:
    Product_id: "SKU-XYZ-789"
      ubungakanani: 1
  idilesi_yenqanawa:
    # Iinkcukacha zedilesi ezifihliweyo / ezinophawu
    uphawu: "idilesi_yokuthumela_umqondiso_abc"
  indlela_yentlawulo:
    # Indlela yokuhlawula efihliweyo/ ephawulweyo
    uphawu: "payment_method_token_xyz"
  preferred_shipping_method: "express"

💡 Eyona nto ibalulekileyo yokuThatha: I-UCP Protocol imele umzamo obalulekileyo wokubeka emgangathweni, ngokufana nendlela i-Open Banking APIs eziguqule ngayo iinkonzo zemali. Kubathengisi, litsha, elinokuba likhulu, ijelo lokuthengisa, kodwa elifuna indibaniselwano enzulu yobugcisa kunye nokuzimisela ukuncama ulawulo kuhambo lwabathengi ukuya kwiarhente ye-AI.

**Iimpembelelo kuLwakhiwo kunye noRhwebo lwe-E-commerce **

Olu tshintsho lunempembelelo enzulu kumashishini e-e-commerce, abathengisi bedijithali, kunye nabaqhubekisi bentlawulo.

Yabarhwebi: * Ithuba: Ukufikelela kwisiseko esikhulu sabasebenzisi bakaGoogle kunye nokufunyanwa okuqhutywa yi-AI. Iindleko zokufumana abathengi ezinokuthi zithobe ukuba ii-arhente ziqhuba iinkokeli ezifanelekileyo. ** Umngeni:** Ilahleko yobudlelwane obuthe ngqo bomthengi kwindawo yokuthengisa. Ukwenyuka kokuthembela kwiqonga likaGoogle. Isidingo sokuhlanganiswa kwe-UCP API eyomeleleyo kunye nexesha lokwenyani ledatha yokutya. Ukuphuculwa kokufunyanwa kwearhente (i-SEO yeearhente) iba yinto ebalulekileyo. Yabathengi: Uncedo: Uncedo olungazange lubonwe ngaphambili, ukuthenga ezenzelwe wena, ukungqubana okucuthiweyo. * Inkxalabo: Ubumfihlo bedatha (ingakanani imbali yokuthenga eqokelelwa yi-arhente kaGoogle?), Thembela kwizigqibo zearhente, okunokubakho kokuthambekela kwe-algorithmic ekukhetheni imveliso.

• KuBaqhubekisi beNtlawulo: Amanqaku amatsha okudityaniswa kunye ne-UCP yentlawulo ye-orchestration ye-Google. Gxininisa kwi-tokenization ekhuselekileyo kunye nokufunyanwa kobuqhetseba kwindawo ephakathi kwe-arhente.

Unxibelelwano kunye neNdlela ePhambili

Zombini iDirty Frag kunye ne-Universal Cart Acro zimele isiseko, kodwa zahlukileyo, iishifti ezifuna ukuhoywa kwenjineli nganye. Omnye ucela umngeni kwiziseko zokhuseleko lwamafu, ngelixa enye ityhala imida yesicelo esisebenzayo se-AI, iguqula urhwebo ukusuka kunxibelelwano lwekhompyuter yomntu ukuya kwintengiselwano ephakathi kwearhente.

Kubasebenzi betekhnoloji, ezi ayizizo iikhonsepthi ezingabonakaliyo. Yimingeni ekhawulezileyo, enokuthathelwa amanyathelo kunye namathuba.

Isiphelo esinokuSebenza kuMaqela obuNjineli

1. Beka phambili ukuPatching iDirty Frag: Khangela ngoko nangoko zonke iisistim ezisekwe kwiLinux, ngakumbi ezo zikhongozeli zibalekayo okanye iimicroVMs. Sebenza kunye nomboneleli wakho welifu okanye umthengisi wokusabalalisa ukusebenzisa iipatches ze-kernel (CVE-2026-43284, CVE-2026-43500) ngokukhawuleza ukuba zifumaneke. Phumeza izisombululo zokudibanisa ephilayo apho ixesha lokuphumla libalulekile.
2. Qinisekisa uKhuseleko kubunzulu: Ngelixa ubuthathaka be-kernel bugqitha iibhokisi zesanti, iiprofayili ze seccomp ezomeleleyo, amalungelo akhethekileyo eekhonteyina, kunye nemigaqo-nkqubo engqongqo yothungelwano zisacutha umphezulu wohlaselo jikelele kwaye zenze uxhatshazo lube nzima. Phicotha kwaye womeleze olu maleko.
3. Vavanya iProtocol Integration ye-UCP: Kwi-e-commerce kunye neeplatifti zokuthengisa, qalisa uhlalutyo lobugcisa lweProtocol ye-UCP. Qonda iimfuno ze-API, imodeli yedatha, kunye nefuthe lokhuseleko. Qalisa ukucwangcisa ukudityaniswa okunokubakho ukukhulisa i-arhente yokuphuma njengejelo elitsha lokuthengisa.
4. Isicwangciso soRhwebo lwe-Agentic: Iintengiso zeDijithali kunye namaqela emveliso kufuneka asebenzisane ukuze aqonde ukuba ii-arhente ze-AI zifumanisa njani kwaye zicebise iimveliso. Oku kuthetha ukwandisa idatha yemveliso, izicwangciso zexabiso, kunye nolawulo lwe-inventri ukuze kusetyenziswe oomatshini, kungekhona nje ukukhangela abantu.
5. Idilesi yeNtembeko kunye noBucala: Njengoko ii-arhente ze-AI zisenza itransekshini, ngokukhawuleza jongana nentembeko yabasebenzisi kunye neenkxalabo zabucala zedatha. Ukungafihli kwindlela ii-arhente ezisebenza ngayo kunye nokuphatha idatha ethengiweyo enovakalelo iya kuba yinto ebalulekileyo ukuze yamkelwe.

Iinyanga ezizayo ziya kuvavanya ukomelela kwethu ngokuchasene nezinto eziphucukileyo zekernel kunye nobuchule bethu bokuziqhelanisa norhwebo oluqhutywa yi-AI. Iinjineli eziqondayo ezi nguqu zinzulu zobugcisa ziya kuba zizo ezibumba ikamva.

Imithombo

• UGoogle Usungula i-Universal Cart Acro — Njengoko kuxelwe yi-AI News Namhlanje, iqinisekisa ukusungulwa kwe-Universal Cart Acro kunye ne-UCP Protocol.
• Isifinyezo esiNgqongileyo, esibekwe kwindawo ephezulu yeNdaba ze-AI — Umxholo weendaba we-AI ngokubanzi wokusungulwa kwe-Acro.
• INgcaciso ye-AI: UGoogle ukhupha iGemini 4 Argon — Ibonelela ngomxholo kuGoogle wokuqhubela phambili kwe-AI ebanzi.
• IiNdaba ze-AI zamva nje: Ukukhutshwa kwe-LLM, uHlaziyo lwe-Agent ye-AI — Eminye umxholo kuphuhliso lwe-arhente ye-AI.