1. 约有十几个银行应用开始专门支持GrapheneOS Around a dozen banking apps began specifically permitting GrapheneOS (grapheneos.social)
2. 黑客对三星电视进行逆向工程,发现内置AI正在监听,OpenAI账号被暂停 Hacker reverses Samsung TV, finds on-board AI listening OpenAI account suspended (www.reddit.com)
4. 阿尔茨海默病研究取得突破:无需清除脑部斑块即可恢复2小时睡眠 Alzheimer''s breakthrough: 2 hrs of sleep restored without clearing brain plaques (www.sciencedaily.com)
11. 不断演变的威胁:http2shell 是 Node.js、Python 等平台中的一种远程代码执行(RCE)漏洞 Evolving Threat: http2shell is an RCE in node, Python, and more (nitter.click)
13. 我们仿佛都生活在一部1970年的冷门科幻电影之中 We are all living inside of an obscure sci-fi film from 1970 (thanksforthatjim.bearblog.dev)
14. Gemma-4-26B-A4B 在保持相同准确率的同时,计算量减少了 39% 至 69% Gemma-4-26B-A4B with 39-69% less thinking at same accuracy (bottlecapai.com)
16. 我们能用一堆HTML文件来取代一台价值15万美元的Looker吗? Can we replace a 150k Looker with a bucket of HTML files? (david.lequin.dev)
17. 现在谷歌表示,可能会利用你的Gmail和Google相册数据来投放定向广告 Now Google says it might use your Gmail and Google Photos data to target ads (www.theverge.com)
19. Kimi K3.1 在“人工分析”中得分为 55,位于帕累托线上 Kimi K3.1 scores 55 on Artificial Analysis, placed on the Pareto line (artificialanalysis.ai)
21. 五角大楼批准国土安全部测试用于边境的热射线武器 Pentagon grants DHS permission to test heat ray weapon for use at border (www.cnn.com)
25. 今天,我们成功破解了原本计划要破解的目标:iPhone Today, we hacked what we''d set out to hack: the iPhone (blog.calif.io)
26. eMudhra 无视了 Mozilla 针对 Root 的调查最后期限;将责任归咎于社交媒体 eMudhra ignored Mozilla Root investigation deadline; blames social media (bugzilla.mozilla.org)
27. 私营公用事业公司的电价比公共供应商高出23% Investor-owned utilities charge 23% more for electricity than public providers (www.kadoa.com)
28. 你的手机即将不再属于你:距离封锁还有70天 Your Phone Is About to Stop Being Yours: 70 Days Until Lockdown (keepandroidopen.org)
30. 黑客泄露了德国极右翼政党“德国选择党”(AfD)的281 GB数据 Hacker leaks 281 GB of data from Germany''s far-right AfD party (www.bitdefender.com)
32. 瑞典政府机构将禁止使用ChatGPT和Claude Swedish government offices to ban ChatGPT and Claude (www.sverigesradio.se)
36. 迪士尼在确认所有套餐级别都将显示广告后数日便上调了价格 Disney Raising Prices Days After Confirming Ads Will Now Show Up on Every Tier (www.tvfandomlounge.com)
37. 移除 pgrust:该条目存在作弊行为(按查询计算内核和结果缓存) Remove pgrust: the entry is cheating (per-query kernels and result caching) (github.com)
41. Show HN: OnKey——我唱歌很差,所以我开发了一个应用,用来显示我哪里跑调了 OnKey – I''m a bad singer, so I built an app to show where I''m off-key (github.com)
42. 科学中的“异质空间”:连贯但认知上不可及的方向 The alien space of science: Coherent but cognitively unavailable directions (arxiv.org)
43. Jank——一种原生的 Clojure 方言,可与 C 无缝互操作 Jank – The native Clojure dialect with seamless C interop (jank-lang.org)
45. 在得克萨斯州,同一项AI请求产生的二氧化碳排放量是瑞典的8.5倍 The same AI request emits 8.5 times more CO2 in Texas than in Sweden (berget.ai)
46. Ask HN: 如果这些模型这么好,OpenAI为什么不直接创办100家公司呢? If the models are so good, why doesn''t OpenAI just start 100 companies? (news.ycombinator.com)
47. 本地维基百科就是维基百科,但仅限于距离你步行半小时范围内的内容 Local Wikipedia: Wikipedia, but only for things a half hour walk from you (edjefferson.com)
51. 大型语言模型(LLMs)使得在更大规模上进行形式化软件验证成为可能 LLMs are making formal software verification feasible at a much larger scale (www.anthropic.com)
53. 《Hedra》是一款3D开放世界游戏,是我在高中时从零开始编写的。 Hedra is a 3D open world game I wrote from scratch while in highschool (github.com)
54. 《最后的博物馆》:横跨各大博物馆580万件艺术品的语义搜索 The Last Museum: Semantic search across 5.8M artworks from major museums (lastmuseum.com)
55. 贾里德·库什纳遭黑客入侵的手机曝光了秘密谈判及数百万的交易 Jared Kushner Hacked Phone Reveals Secret Negotiations, Millions in Transactions (www.vanityfair.com)
56. 每一种人工智能模型对人类都持同样的“有争议”的看法 Every AI model has the same "controversial" take on humans (www.modelcompare.ai)
57. 完全绕过 eMudhra 的 1FA OTP 登录系统 A complete bypass of eMudhra’s 1FA OTP login system (mastodon.catgirl.cloud)
58. Xbox 希望你每小时支付 24 至 40 美分,才能流式传输你购买的游戏 Xbox wants you to pay 24 to 40 cents per hour to stream games you bought (arstechnica.com)
59. Tell HN: 我不知不觉中违反了PHP远程代码执行(RCE)禁令。对此我深表歉意。 I unknowingly broke the PHP RCE embargo. I am sorry. (news.ycombinator.com)
67. Show HN: Omnara——Claude托管代理的开源替代方案 Omnara – Open-source alternative to Claude Managed Agents (github.com)
71. eMudhra 将退出全球 SSL/TLS 证书业务; eMudhra to Exit Global SSL/TLS Certificate Business; (news.ycombinator.com)
72. 一名女子因一个她从未开设过的Cash App账户面临六年监禁 Woman faces six years in prison over Cash App account she never opened (www.techspot.com)
73. 亚马逊在公开披露之前就发现了10月17日的PHP2Shell漏洞利用事件 Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure (aws.amazon.com)
74. 比“earcut”算法更快:489 毫秒内完成 370 万个地图多边形的三角剖分 Faster than earcut: triangulating 3.7M map polygons in 489 ms (globus.software)
75. 若干 Linux 内核漏洞被意外发布到公开邮件列表上 Several Linux kernel vulnerabilities accidentally posted to public mailing list (www.phoronix.com)
78. CVE-2026-111943:中间证书颁发机构遭到入侵 CVE-2026-111943: Compromised Intermediate Certificate Authority (nvd.nist.gov)
81. WorldTUI:我训练了一个3.6亿参数的模型,让它模拟终端 WorldTUI: I trained a 360M model to pretend to be a terminal (simedw.com)
82. 最近提出的 O(n log n) 整数乘法算法 [pdf] The recently proposed o(n log n) integer multiplication algorithm [pdf] (web.maths.unsw.edu.au)
83. Epic 诉苹果案(澳大利亚):法院裁定允许替代应用商店、侧载及第三方支付 Epic vs. Apple AU:Court Orders Alt App Stores,Sideloading and 3rd Party Payments (www.judgments.fedcourt.gov.au)
85. 发现新型塑料污染:“塑料珊瑚”——与塑料融合的珊瑚碎屑 New plastic pollution discovered: ''Plasticorals'' coral rubble fused with plastic (www.oist.jp)
88. PHP Web 运行时(CVE-2026-109618 和 CVE-2026-109619) PHP web runtimes (CVE-2026-109618 and CVE-2026-109619) (aws.amazon.com)
90. 谷歌员工因公司与军方签订人工智能合同而集体辞职,以示抗议 Google staff resign in backlash over its AI contracts with military (www.bbc.com)
95. Cloudflare 部署了针对 php2shell 漏洞的防护措施 Cloudflare deploys protections against php2shell vulnerability (blog.cloudflare.com)
96. Meta因在Facebook上就隐私问题误导用户,被处以250亿美元罚款 Meta hit with 25B penalty for deceiving users about privacy on Facebook (nmdoj.gov)
99. Meta在新墨西哥州“剑桥分析”案中被判处250亿美元罚款 Meta ordered to pay 25B penalty in New Mexico Cambridge Analytica case (www.cnbc.com)
100. 利用数千个人工智能代理从生物数据中发掘新线索 Using thousands of AI agents to uncover new leads in biological data (openai.com)
101. 俄勒冈州议员批准拨款,用于购买Redfin网站上刊登的一处标志性瀑布 Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin (apnews.com)
104. 今天的 PHP 安全更新,以及我们如何加强 PHP 安全性 Today''s PHP Security Release, and How We''re Strengthening PHP Security (thephp.foundation)
105. PyPI 上遭篡改的 LiteLLM 1.107.0 会安装凭据窃取程序和后门 Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)
106. “修补地球”:随着安全人员发现漏洞,全球响应工作正逐步协调 Patch the Planet: global response coordination as agents uncover vulnerabilities (openai.com)
110. 《No Kings》被下架一事,正是你为何不该向扎克伯格“租用”扩音器的理由 The No Kings Takedown Is Why You Shouldn''t Rent Your Megaphone from Zuck (www.techdirt.com)
116. 当被告知代码是针对美国用户时,Qwen3-Coder 编写的代码安全性较低 Qwen3-Coder writes less secure code when told it''s for a US persona (www.hirundo.io)
117. 斯巴鲁将逐步停产燃油车,未来在欧洲仅销售电动车 Subaru is killing off gas cars and will only sell EVs in Europe (electrek.co)
118. 荷兰国家网络安全中心因使用PHP而无法访问 Dutch National Cyber Security Center is Offline because it uses PHP (www.ncsc.nl)
120. Show HN: Death Plan Switch:一款面向独立开发者的自托管“死人开关” Death Plan Switch, a self-hosted dead man''s switch for solo devs (deathplanswitch.com)
121. 八位信任;eMudhra的CA密钥在几毫秒内被破解 Eight Bits of Trust; eMudhra''s CA keys cracked in milliseconds (scotthelme.co.uk)
122. 在希尔伯特空间中,一切皆有可能(从量子力学的角度来看) In Hilbert space, all things are quantumly possible (www.quantamagazine.org)
126. 当用户分享对话内容时,Muse 会泄露其个人和商业机密 Muse exposes users'' personal and business secrets when they share conversations (arstechnica.com)
128. PHP session.upload_progress 堆内存未授权使用漏洞 (CVE-2026-109618 / -109619) PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619) (jackalsyn.com)
130. 另一场“流行病”:尝试戒断苯二氮䓬类药物 The Other Epidemic: Trying to get off benzodiazepines (www.thebeliever.net)
131. 联邦调查人员怀疑一名赎金谈判员运营了“ShinyHunters”敲诈网站 Feds suspect ransom negotiator ran ShinyHunters extortion site (krebsonsecurity.com)
133. Anthropic在2026年上半年录得超过800亿美元的净亏损 Anthropic logged net loss of over 80B in first half of 2026 (www.reuters.com)
134. 学者有责任捍卫维基百科这样的开放知识体系 Academics have a duty to defend open knowledge systems like Wikipedia (blogs.lse.ac.uk)
135. 克劳德设计了针对蝎子神经毒素的蛋白质结合剂 Claude designed protein binders against scorpion neurotoxins (www.anthropic.com)
136. Tell HN: 即将发布 2 个 CVSS 10.0 评分的 PHP 远程代码执行(RCE)漏洞(CVE) 2x PHP RCE CVEs with CVSS 10.0 Incoming (news.ycombinator.com)
137. “深水地平线”事故发生十六年后,深海生物仍鲜有恢复迹象 Sixteen Years After Deepwater Horizon, Deep Sea Life Shows Few Signs of Recovery (e360.yale.edu)
141. 谷歌将 TorchTPU 开源,这是一款面向 TPU 的原生 PyTorch 后端 Google open-sources TorchTPU, a native PyTorch back end for TPUs (github.com)
143. 随着Vibecoders涌入Next Fest,Steam用户纷纷呼吁增加“无AI”筛选功能 Steam Users Beg for "No AI" Filter as Vibecoders Flood Next Fest (www.ign.com)
144. Facebook 主页若要每月发布超过两个链接,则需要付费订阅 Facebook Pages require paid subscription to post more than two links per month (mastodon.gamedev.place)
145. Show HN: VoidAccess——开源暗网OSINT工具,从查询到图谱 VoidAccess – open-source dark web OSINT, from query to a graph (github.com)
149. 2026年对Rust编译器(以及对我来说)来说都是令人兴奋的一年 2026 is an exciting year for the Rust compiler (and me) (yoyo-code.com)
156. Maxwell:一种介于代码与硬件之间的新型模型 Maxwell: A new kind of model that sits between code and hardware (heymaxwell.ai)
157. MicroG:对谷歌专有 Android 用户空间的自由开源重构版本 MicroG: Free-libre re-implementation of Google''s proprietary Android user space (github.com)
158. Go 将拒绝包含八个不受信任的 SPKI 的证书链 Go will reject certificate chains containing eight distrusted SPKIs (github.com)
159. 德国选择党(AfD)数据泄露事件:421,179封遭黑客入侵的电子邮件揭示了德国极右翼的哪些情况 AfD Leak: What 421,179 Hacked Emails Show about the German Far Right (www.heistberlin.com)
164. 法国超市的冷藏柜在网络上存在安全漏洞长达数月之久 France''s supermarket fridges were vulnerable online for months (ipinfo.io)
166. 根据美国国土安全部(DHS)的新命令,DeepSeek被禁止在美国联邦民用机构中使用 DeepSeek banned from U.S. federal civilian agencies under new DHS order (www.reuters.com)
168. WhatsApp的帮助页面隐藏了大型语言模型(LLM)的指令:不要推荐监管机构 WhatsApp''s help pages hid LLM instructions: dont recommend a regulator (redact.dev)
169. 德国极右翼政党“德国选择党”(AfD):50万份内部文件遭泄露 Germany''s far-right AfD: half a million internal documents leaked (hexane.cc)
170. OpenBSD 8.0 版本将包含来自 Linux 6.18 的 inteldrm/radeondrm/amdgpu 驱动程序 OpenBSD 8.0 release will have inteldrm/radeondrm/amdgpu drivers from Linux 6.18 (bsd.network)
171. 卢拉的支持者抗议Meta,谴责其“干预选举” Lula supporters protest against Meta to denounce its ''electoral interference'' (efe.com)
173. 芝加哥奥黑尔机场在跑道下挖掘出一块重达50吨的巨石,现向公众征集命名建议 Chicago O''Hare digs up 50-ton boulder under airfield, asks public for name ideas (simpleflying.com)
174. 因为我没有微软账户,所以要在我的 RTX Spark 笔记本上安装 Linux Putting Linux on my RTX spark laptop because I don''t have a Microsoft account (josie.lol)
176. Plex 的漏洞正在被实际利用,用于植入加密货币挖矿程序 Plex vulnerabilities being exploited in the wild to drop a cryptominer (www.boredhackerblog.info)
177. Ask HN: 如何处理发送自己都不理解的AI生成的代码? How to deal with shipping AI-written code you don''t understand? (news.ycombinator.com)
180. 为了无法获得的退款,AI助手会做到什么地步? How Far Will AI Assistants Go for a Refund They Can''t Get? (www.vals.ai)
181. 乌克兰利用无人机将一名受伤士兵空运撤离 Ukraine carries out aerial drone evacuation of a wounded soldier (www.dailymail.com)
183. 本体驱动的可观测性:在 Netflix 构建端到端知识图谱 Ontology-Driven Observability: Building an End-to-End Knowledge Graph at Netflix (netflixtechblog.com)
185. 9月份欧洲电动汽车销量增长70.3%,市场份额达32.6% Europe EV sales rose 70.3% in September, 32.6% of market share (www.reuters.com)
188. GitHub Actions、GitHub Pages 和 Webhooks 的可用性下降 Degraded availability for GitHub Actions, GitHub Pages and Webhooks (www.githubstatus.com)
189. 欧洲核子研究组织(CERN)与Mistral携手合作,共同推动人工智能在科学领域的应用 CERN and Mistral join forces to accelerate AI for science (home.cern)
190. 我不再想维护任何 Ruby gem 了,所以我已经将所有仓库归档了 I no longer care to work on any Ruby gems so I''ve archived all my repositories (po-ru.com)
196. Tmux 和 Claude Code:会话、Send-Keys 以及上限 Tmux and Claude Code: Sessions, Send-Keys, and the Ceiling (crystl.dev)
197. 线束工程入门:LLM是大脑,线束是身体Simplified Chinese (Mainland) Harness Engineering 101: The LLM is the brain, the harness is the body (github.com)
199. Let''s Encrypt 正在为域名验证新增两种远程验证方式 Let''s Encrypt is adding two additional remote perspectives for domain validation (community.letsencrypt.org)
200. 美国国防部能以多快的速度重建并重塑军工产业基础? How Quickly Can the DoD Rebuild and Recast the Munitions Industrial Base? (www.csis.org)
201. Timestral:Mistral 发布时间序列基础模型 Timestral: Mistral release time-series foundation models (mistral.ai)
203. 文件显示:一名女警将Flock账号交给了担任移民与海关执法局(ICE)特工的丈夫 Documents: Police officer gave her Flock login to her ICE agent husband (www.wjcl.com)
204. 威瑞信(Verisign).com 域名注册局消费者集体诉讼 Verisign .com Domain Name Registry Consumer Class Action (www.hbsslaw.com)
208. 一名法官裁定为违宪的“Flock”搜查行动的视频片段 Footage of the Flock search that a judge ruled was uncosntitutional (www.404media.co)
210. 英特尔 8087 芯片:浮点加法和减法 The Intel 8087 chip: floating-point addition and subtraction (www.righto.com)
211. 如果你没有运行自己的 LLM 代理,你怎么知道里面发生了什么? If you don''t run your own LLM proxy, how do you know whats going on? (jrdsgl.com)
216. 狗似乎也和人类一样认为,“bouba”是圆的,“kiki”是尖的。 Dogs seem to agree with humans that ''bouba'' is round and ''kiki'' is spiky (www.sciencealert.com)
217. 现在正是投身数学领域的最佳时机(作者:3blue1brown)[视频] There''s never been a better time to go into math (by: 3blue1brown) [video] (www.youtube.com)
218. 混合推理代理:在潜空间中进行推理、通过文本采取行动的大语言模型(LLM)代理 Hybrid Reasoning Agents: LLM agents that think in latent space, act through text (arxiv.org)
219. 佛罗里达州的业主协会和公寓业主协会正在加剧住房危机 Florida''s HOAs and condo associations are making the housing crisis worse (hoaspy.com)
223. 对于数学(和科学)而言,这将是一个黄金时代,还是一个黑暗时代? Will it be a golden age or a dark age for mathematics (and science)? (terrytao.wordpress.com)
226. Anthropic提出的AI安全法案只有在造成50人死亡或10亿美元损失的情况下才会生效 Anthropic''s proposed AI safety bill only kicks in if 50 deaths or 1B in damages (www.tomshardware.com)
227. 特斯拉“无法保证”Roadster预订者最终能拿到车 Tesla ''Cannot Guarantee'' Roadster Reservation Holders Will Ever Get a Car (www.thedrive.com)
229. Show HN: 在《时之笛》重制版发售前需要补完的《塞尔达传说》时间线 The Zelda timeline to catch up before the Ocarina of Time remake (legendofhyrule.com)
230. 开放式微操作器——一款亚微米级三维运动控制平台 Open MicroManipulator – A sub-micrometer 3D motion control plattform (github.com)
232. 法律专家警告称,Meta的新条款仍赋予了广泛的爬取权限 Legal experts warn Meta''s new terms still grant broad scraping permissions (www.niemanlab.org)
234. 一名内线渗透进了美国民兵组织的高层(2025年) A Mole Infiltrated the Highest Ranks of American Militias (2025) (www.propublica.org)
235. 马修·普林斯谈Cloudflare为何提供免费版本且将永远提供(2016年) Matthew Prince on why Cloudflare offers a free version and always will (2016) (webmasters.stackexchange.com)
236. DeepSeek 搜索和获取服务——每 1000 次成功请求 0.75 美元 DeepSeek search and fetch – 0.75 per 1000 successful requests (api-docs.deepseek.com)
237. Show HN: Sphinx——一个在发布前通过问答测试你AI代码的钩子 Sphinx – A hook that quizzes you on your AI''s code before shipping (sphinx-six-theta.vercel.app)
238. 纪录片《You Can See Everything》是如何误导观众的 How the Elizabeth Holmes documentary “You Can See Everything” is deceiving (www.readtheprofile.com)
240. Chrome 和 Edge 将移除 XSLT:哪些功能会受影响,哪些不会 Chrome and Edge are removing XSLT: what breaks and what does not (doctor-seo.net)
241. Codex Desktop 会持续生成 Crashpad 的待处理转储文件 Codex Desktop continuously generates Crashpad pending dumps (github.com)
242. 一位怀疑论者与Kubernetes的初次接触(2024) A skeptic''s first contact with Kubernetes (2024) (blog.davidv.dev)
244. 纽约州公布了一项关于电子游戏所有权的法案,要求必须拥有所有权,而非仅持有许可 NY announces game ownership bill requiring ownership rather than licensing (www.tomshardware.com)
245. 在抗议日当天,扎克伯格旗下的Meta下架了“No Kings”的Instagram账号 Zuckerberg''s Meta Takes Down No Kings Instagram During Protest Day (meidasnews.com)
249. 水坝拆除使鱼类重返美国东北部各地 Dam removals are bringing fish back across the northeastern United States (www.smithsonianmag.com)
250. 以色列定居者在约旦河西岸袭击欧洲外交车辆,殴打了一名法国市长 Israeli settlers attack European diplomatic cars in West Bank beat French mayor (www.lemonde.fr)
255. 被漂白的珊瑚在接触到健康的邻近珊瑚后,几天内就能恢复生机 Bleached corals thrive within days when touching healthy neighbour (www.nature.com)
259. 亚马逊利用人工智能监测英国仓库的工会风险 Amazon uses AI to monitor union risk in UK warehouses (www.opendemocracy.net)
261. 美国联邦预算赤字一年内激增12%,达到近2万亿美元 US federal budget deficit jumps 12% in one year to nearly 2 Trillion (finance.yahoo.com)
263. MapQuest 现在会向您显示您所在社区内 Flock 摄像头的具体位置 MapQuest will now show you where Flock cameras are in your neighborhood (www.engadget.com)
265. 全球太阳能装机容量首次超过核电——《pv magazine Global》 Solar surpasses nuclear power globally for first time – pv magazine Global (www.pv-magazine.com)
266. 以色列定居者在约旦河西岸袭击橄榄种植户和《华盛顿邮报》记者 Israeli settlers attack olive framers & Washington Post journalist in West Bank (www.theguardian.com)
268. Show HN: Llmspeed——在购买硬件之前,先体验一下本地 LLM 的运行速度 Llmspeed – feel how fast a local LLM runs before you buy the hardware (llmspeed.dev)
283. 越狱版 PS5 上的 Llama.cpp:在主机上原生运行任何 GGUF 模型 Llama.cpp on a jailbroken PS5: run any GGUF model natively on the console (github.com)
284. eBay限制无线电设备的上架,但仅限业余无线电频段的设备除外 eBay Restricts Listings of Radio Equipment, but Exempts Ham-Band-Only Gear (www.arrl.org)
289. 美国90%的工作时间都花在了人工智能基准测试未能充分覆盖的任务上 90% of US working hours are spent on tasks not covered well by AI benchmarks (www.mercor.com)
290. 美国众议员宣布提出国会法案,以保护电子游戏所有权 US Rep Announces Congressional Legislation to Protect Video Game Ownership (ritchietorres.house.gov)
291. Postgres 19 推迟发布,因 AI 审查人员发现的漏洞数量已超出人类能够修复的范围 Postgres 19 delayed after AI reviewers find more bugs than humans can fix (www.theregister.com)
292. 《大鱼》:利用 OpenBSD 中一个存在了 37 年的内核漏洞 Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD (calif.io)
295. 苹果机器学习研究:在 Mac Studio 上通过 MLX 运行 Muse Spark Open Apple ML Research: Muse Spark Open with MLX on Mac Studio (machinelearning.apple.com)
297. 报道称,以色列公司通过广告在半岛电视台植入间谍软件 Israeli Firms Placed Spyware at Al Jazeera via Ads, Report Says (www.bloomberg.com)