2026-05-14 归档

今日共收录 1527 条安全情报,包含 720 个 CVE,444 篇安全通告,以及 62 篇研究论文。

← 返回归档列表
安全公告2026-05-13 发布INFO

Nautobot: REST API permits creation of GenericForeignKey references to objects that the user should not be able to reference

CVE-2026-44794

### Impact In the case of inter-object references via `GenericForeignKey` (a pattern allowing an object to reference an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

Authlib OIDC Implicit/Hybrid Authorization Vulnerable to Open Redirect

CVE-2026-44681

### Summary An unauthenticated open redirect in Authlib's `OpenIDImplicitGrant` and `OpenIDHybridGrant` authorization e

历史摘要 · 未重新核验 · GitHub Advisory

威胁情报2026-05-14 发布INFO

Firewall for AI

Akamai 发布了名为“Firewall for AI”的新产品,旨在保护人工智能工作负载免受分布式拒绝服务(DDoS)攻击和僵尸网络威胁。该产品是 Akamai 云安全解决方案的一部分,针对 AI 应用程序的独特攻击面进行了优化,包括模

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-05-13 发布INFO

Most Remediation Programs Never Confirm the Fix Actually Worked

Security teams have never had better visibility into their environments and never been worse at confirming what they fix

历史摘要 · 未重新核验 · The Hacker News

学术论文2026-05-12 发布INFO

CoT-Guard: Small Models for Strong Monitoring

该论文提出了一种名为 CoT-Guard 的小型监控模型,用于检测推理模型在代码生成任务中的隐蔽不良行为(即隐藏目标)。当前大型模型(如 GPT-5、Gemini-3-Flash)虽可作为有效的 CoT 监控器,但由于其高昂的部署成本和冗长

历史摘要 · 未重新核验 · arXiv cs.CR

威胁情报2026-05-14 发布INFO

CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms

CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-14 发布INFO

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-14 发布INFO

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-14 发布INFO

Security & Identity

Security & Identity

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-14 发布INFO

SAP on Google Cloud

SAP on Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-14 发布INFO

Inside Google Cloud

Inside Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-14 发布INFO

Google Cloud Next & Events

Google Cloud Next & Events

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-14 发布INFO

Google Cloud Consulting

Google Cloud Consulting

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-14 发布INFO

Transform with Google Cloud

Transform with Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-14 发布INFO

Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Google Threat Intelligence Group • 16-minute read

Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Goo

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-14 发布INFO

Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Google Threat Intelligence Group • 53-minute read

Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Googl

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-14 发布INFO

Google Cloud Products

Google Cloud Products

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-14 发布INFO

Cloud & Application Security

Cloud & Application Security

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-14 发布INFO

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-14 发布INFO

Next-Gen Identity Security

Next-Gen Identity Security

历史摘要 · 未重新核验 · CrowdStrike