SAGE: Scalable Automatic Gating Ensemble for Confident Negative Harvesting in Fraud Detection
本文针对音乐流媒体平台中存在的欺诈行为——即恶意行为者通过人工手段虚增流媒体播放次数以操纵排行榜和版税分配——提出了一种名为SAGE（Scalable Automatic Gating Ensemble）的新型反事实感知负样本获取方法。传统
2026-05-21 归档
今日共收录 1079 条安全情报，包含 251 个 CVE，425 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Inferring Sensitive Attributes from Knowledge Graph Embeddings: Attack and Defense Strategies
本文研究了知识图谱嵌入（KGE）推理过程中可能引发的隐私风险，重点关注属性推断攻击。知识图谱作为一种灵活、语义丰富的链接数据表示，被广泛应用于推荐等智能服务，但现实中的知识图谱往往存在缺失信息，因此常采用KGE技术进行补全推理。然而，这种推
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Versions 0.102.1 and prior contain a critical securit...
CVE-2026-39311
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bas
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Clipper API in Tri...
CVE-2026-39310
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bas
Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clicking a malici...
CVE-2026-44925
Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to for
A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX...
CVE-2026-20171
A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switc
Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting ...
CVE-2023-7346
Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause i
In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecti...
CVE-2026-41054
In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/ent
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configura...
CVE-2026-39309
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bas
Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge bases. Versions 0.102.1 and prior are vulnerable to Lo...
CVE-2026-35593
Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowled
Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU firmware update process due to missing validation of the reset_handler parameter durin...
CVE-2025-15645
Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU firmware update process due t
Ledger Live with vulnerable versions of ledgerhq/hw-app-eth prior to 6.34.7 contains an integer parsing vulnerability that allows attackers to manipulate EIP-712 typed data mess...
CVE-2023-7345
Ledger Live with vulnerable versions of ledgerhq/hw-app-eth prior to 6.34.7 contains an integer parsing vulnerability th
Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse
CVE-2026-20929
Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse
Compatibility Test Suite (CTS)
Android兼容性测试套件（CTS）是用于验证Android设备是否兼容Android平台标准的工具集。本次公告发布了CTS的更新，旨在提升测试覆盖率和准确性，确保设备能够正确运行Android应用和API。公告中未提及任何安全漏洞或CV
Compatibility Definition Document (CDD)
Android 安全公告本期发布的是兼容性定义文档（Compatibility Definition Document, CDD），而非具体安全漏洞公告。CDD 是 Android 生态系统用于定义设备兼容性要求的官方文档，包括硬件、软件和
Tools, build, and related reference
该公告来自 Android Security Bulletin，标题为“Tools, build, and related reference”，内容涉及 Android 构建工具和相关参考信息。公告中未提及具体的安全漏洞、CVE 编号或严
Latest Compatibility Definition Document (CDD)
Android 安全公告发布了最新的兼容性定义文档（CDD），该文档定义了 Android 设备必须满足的兼容性要求，以确保应用生态的一致性和安全性。本次更新可能涉及新的硬件抽象层要求、权限管理变更或安全配置增强。公告未提及具体漏洞或 CV
Latest security bulletins
Android安全公告（Android Security Bulletin）是Google官方发布的安全更新汇总，通常包含针对Android系统及预装组件的安全漏洞修复。本次公告发布于2026年5月21日，但输入中未提供具体漏洞详情、CVE
update the software on your Mac
苹果公司于2026年5月21日发布了针对Mac设备的安全更新公告（编号108382），建议用户立即更新系统软件以修复多个潜在的安全漏洞。虽然公告未提供具体的CVE编号或漏洞细节，但此类更新通常涵盖内核、WebKit、系统组件等关键区域的安全
update the software on your iPhone or iPad
Apple 发布了针对 iPhone 和 iPad 的安全更新公告，建议用户立即更新设备软件以修复潜在的安全漏洞。虽然公告未披露具体的 CVE 编号或漏洞细节，但通常此类更新涉及内核、WebKit 或系统组件中的安全修复，可能包括远程代码执