Firewall for AI
Akamai 发布了名为 'Firewall for AI' 的产品，旨在保护人工智能应用免受分布式拒绝服务（DDoS）攻击、僵尸网络（botnet）和其他网络威胁。该产品利用 Akamai 的边缘网络能力，为 AI 模型推理端点、API
2026-05-21 归档
今日共收录 1079 条安全情报，包含 251 个 CVE，425 篇安全通告，以及 115 篇研究论文。
← 返回归档列表An Application-Layer Multi-Modal Covert-Channel Reference Monitor for LLM Agent Egress
本论文提出了一种面向大型语言模型（LLM）代理出站流量的应用层多模态隐通道参考监视器。研究背景是：LLM代理在与外部通信时，即使目标地址被白名单限制、内容被扫描，仍可能通过隐通道泄露数据。攻击者可以利用零宽字符、同形异义词、空格、Base6
Pramana: A Protocol-Layer Treatment of Claim Verification in Autonomous Agent Networks
本文提出 Pramana，一种针对自主代理网络中声明验证的协议层处理框架。在受监管领域（如金融、医疗、法律）中，自主代理的每个关键输出必须附带可验证的审计工件，以便审核员能够离线重放并确认声明的来源、时间、执行者及方式。然而，现有的验证方法
Auditing Privacy in Multi-Tenant RAG under Account Collusion
该论文针对多租户检索增强生成（RAG）服务中的隐私审计问题，揭示了同一索引下多账户合谋导致的隐私边界失效。现有服务宣传每个账户的查询满足差分隐私（DP），但研究表明，当多个属于同一租户的账户联合对抗该租户的索引时，基于高斯噪声的检索机制其联
OEP: Poisoning Self-Evolving LLM Agents via Locally Correct but Non-Transferable Experiences
该论文研究了具有记忆增强和自我进化能力的大型语言模型（LLM）智能体的安全风险。现有针对智能体记忆的攻击通常需要高权限或包含明显恶意内容，容易被安全过滤器检测。作者提出了一种名为"Obsessive Experience Poisoning
From Detection to Response: A Deep Learning and Retrieval-Augmented Generation Framework for Network Intrusion Mitigation
该论文提出一个端到端统一框架，弥合了威胁检测与可操作响应之间的鸿沟。系统由两个紧密耦合的阶段组成：首先，一个由三个独立训练的二元深度神经网络（DNN）组成的集成模型对网络流量进行分类，区分良性、拒绝服务（DoS）和分布式拒绝服务（DDoS）
The npm Threat Landscape: Attack Surface and Mitigations (Updated May 20)
Palo Alto Networks Unit 42 发布了一份关于 npm 生态系统供应链安全威胁的最新分析报告，更新于2026年5月20日。报告指出，自名为“Shai Hulud”的恶意活动之后，npm 攻击面显著演变，出现了具有蠕虫传
CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms
CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms
CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud
CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud
CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection
CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection
Security & Identity
Security & Identity
SAP on Google Cloud
SAP on Google Cloud
Inside Google Cloud
Inside Google Cloud
Google Cloud Next & Events
Google Cloud Next & Events
Google Cloud Consulting
Google Cloud Consulting
Transform with Google Cloud
Transform with Google Cloud
Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Google Threat Intelligence Group • 16-minute read
Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Goo
Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Google Threat Intelligence Group • 53-minute read
Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Googl
Google Cloud Products
Google Cloud Products
Cloud & Application Security
Cloud & Application Security