[原创]从零构建杀毒引擎系列之扫描器核心逻辑设计与实现（上）
[原创]从零构建杀毒引擎系列之扫描器核心逻辑设计与实现（上）
2026-04-28 归档
今日共收录 1050 条安全情报，包含 258 个 CVE，457 篇安全通告，以及 29 篇研究论文。
← 返回归档列表[原创]AI工具：ProcessMonitor监控程序安装工具
[原创]AI工具：ProcessMonitor监控程序安装工具
[原创] 由于转型游戏安全 我打算开源这个IDA插件 PatchEx
[原创] 由于转型游戏安全 我打算开源这个IDA插件 PatchEx
Five defender priorities from the Talos Year in Review
With attackers moving faster than ever, it’s easy to feel overwhelmed. This blog breaks down five practical priorities f
HTTP Requests with X-Vercel-Set-Bypass-Cookie Header, (Tue, Apr 28th)
This weekend, we saw a few requests to our honeypot that included an "X-Vercel-Set-Bypass-Cookie" header. A sample reque
After Mythos: New Playbooks For a Zero-Window Era
When patching isn’t fast enough, NDR helps contain the next era of threats. If you’ve been tracking advancements in AI,
The Mythos Moment: Enterprises Must Fight Agents with Agents
Only with the right platform and an agentic, AI-driven defense, will enterprises be able to protect themselves in the ag
Webinar Today: A Step-by-Step Approach to AI Governance
Join the webinar to explore a practical, multi-layered roadmap to transition from fragmented AI usage to a governed, sca
Robinhood Vulnerability Exploited for Phishing Attacks
Legitimate-looking emails coming from Robinhood systems lured recipients to phishing websites. The post Robinhood Vulner
Dozens of Open VSX Extension Clones Linked to GlassWorm Malware
Over 70 cloned Open VSX extensions are likely sleeper extensions designed to distribute malware. The post Dozens of Open
Sevii Launches Cyber Swarm Defense to Make Agentic AI Security Costs Predictable
Agentic AI can be expensive to use, causing further and unpredictable pressure on tight budgets. The post Sevii Launches
Electric Motorcycles and Scooters Face Hacking Risks to Security and Rider Safety
Vulnerabilities in Zero Motorcycles electric motorcycles and Yadea electric scooters can pose physical security and safe
No Patch for New PhantomRPC Privilege Escalation Technique in Windows
A fake RPC server can be used to listen for RPC requests and impersonate the target service to elevate privileges to Sys
Germany Suspects Russia Is Behind Signal Phishing That Targeted Top Officials
Federal prosecutors have been conducting a preliminary investigation since mid-February 2026 into alleged cyberattacks o
Spectrum Security Emerges From Stealth Mode With $19 Million
The threat detection startup will invest in accelerating its engineering and go-to-market efforts. The post Spectrum Sec
Profiling Resilient to Change in Probe Position
本文聚焦于侧信道分析（SCA）中的电磁（EM）探针位置鲁棒性问题。传统的SCA通过采集加密操作中的物理泄漏（如电磁辐射）来破解加密算法。在评估芯片的电磁泄漏时，通常需要将探针放置在芯片上方的有利位置，但现有的研究大多集中在热点发现和重定位上
Machine-Checked Cardinality Bounds for Masked Barrett Reduction: A 1-Bit Side-Channel Leakage Barrier in Post-Quantum Cryptographic Hardware
本论文针对后量子密码（PQC）硬件实现中的掩码Barrett reduction的侧信道泄漏问题，提出首个通用且机器验证的基数界限——1-Bit Barrier。Barrett reduction是基于NTT的PQC实现（如ML-KEM、M
ARCANE: Cross-Campaign Attacker Re-identification via Passive Beacon Telemetry -- A Bayesian Network Framework for Longitudinal Cyber Attribution
当前的网络归因方法通常针对单个事件独立分析，缺乏跨战役聚合证据以提升对手识别能力的系统性研究。本文提出一个问题：跨战役归因是否能够减少歧义，还是受限于数据结构上的固有瓶颈？作者将攻击者指纹建模为多维特征向量，包含行为、基础设施和时序特征，这
From Spoofing to Trust: Emergency Alerts Spoofing Testbed and Cross-Cell Verification
本文研究了蜂窝网络中公共预警系统（PWS）的安全问题，该系统用于在地震、恶劣天气等威胁事件中向特定地理区域内的所有移动电话广播紧急警报。攻击者可能伪造这些警报，传播虚假新闻或钓鱼链接，导致公众恐慌或用户受害。作者首次提出并实现了开源的5G紧
Information-Theoretic Distributed Point Functions with Shorter Keys
本文研究信息论安全的分布式点函数（ITDPF）的密钥长度优化问题。分布式点函数允许将点函数 f_{alpha,beta}(x) 拆分为 n 个份额（密钥），分发给 n 个服务器，每个服务器可用其密钥计算 f_{alpha,beta}(x)