Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control
该论文研究了检索增强生成（RAG）系统在面对知识投毒攻击时的脆弱性。传统观点认为，只要检测出被污染的文档就能阻止危害，但作者通过实验证明这一假设是错误的：模型存在“监控-控制鸿沟”，即它们能够检测到检索结果中的矛盾，却仍然会依据被污染的内容
2026-05-27 归档
今日共收录 1142 条安全情报，包含 375 个 CVE，381 篇安全通告，以及 103 篇研究论文。
← 返回归档列表"What is the Problem Space?" Defining Host-space Adversarial Perturbations against Network Intrusion Detection Systems
本文针对基于机器学习的网络入侵检测系统（ML-NIDS）的安全评估提出关键质疑。作者指出，现有大量研究通过向预采集的数据点（如路由器捕获的数据包或ML-NIDS分析的网络流）施加对抗性扰动来测试ML-NIDS的鲁棒性，但这种操作在真实世界中
The Privacy Subsidy in Continuous-Time Kyle: Cumulative Welfare under Noise-Perturbed Order-Flow Observation
本文是Nakamura (2026) 关于单期Kyle模型中隐私补贴的封闭形式结果的连续时间扩展。研究背景是连续时间Kyle模型，其中一位承诺的贝叶斯自动做市商观察到被独立布朗运动隐私通道扰动（扩散强度为σε）的聚合订单流。在马尔可夫线性均
TIP: A Decentralized Intent-Based Protocol for Declarative IoT Interoperability and Sandboxed Schema Adaptation
该论文提出了一种名为 TIP (The Intent Protocol) 的去中心化声明式网络协议，旨在解决异构物联网系统因硬件架构、网络协议栈和数据序列化格式不同而导致的碎片化问题。现有标准如 MQTT、CoAP、DDS 依赖于地址绑定和
Enhancing Autonomous Online Intrusion Detection for IoT with Balanced Learning, Reliable Pseudo-Labels, and Lightweight Architectures
本文针对物联网（IoT）环境中的入侵检测系统（IDS）面临的自适应、资源高效需求，研究了AOC-IDS——一种在IEEE INFOCOM 2024上提出的先进自主在线IDS。作者首先在UNSW-NB15基准上成功复现了AOC-IDS，获得了
Pre-Characterization of Electromagnetic Side-Channel Leakage Using Publicly Available Information: A Case Study on E-Voting Interfaces
本文研究了巴西电子投票机（BVM）界面的电磁侧信道泄漏问题，属于TEMPEST攻击范畴。TEMPEST攻击中，攻击者利用软件定义无线电（SDR）截获视频信号传输过程中产生的无意电磁辐射，从而恢复敏感信息。作者借助选举机构公开披露的技术规格、
CALIBURN: A Regime-Sensitivity Study of Operationally Calibrated Streaming Intrusion Detection
该论文针对流式网络入侵检测系统在实际部署中面临的阈值选择难题，提出了一套名为 CALIBURN 的流式告警管道。传统方法通常将告警阈值作为事后调优参数，无法在部署前根据运营需求（如误报成本、漏报成本和告警预算）明确指定。CALIBURN 由
CyBOKClaw: Human-in-the-Loop CyBOK Mapping for Cybersecurity Curriculum
该论文提出了 CyBOKClaw，一种可解释的人机协同检索框架，用于将网络安全课程中的关键词或短语（KWoPs）映射到网络安全知识体系（CyBOK）。传统的精确匹配方法在应对教育场景中广泛、模糊且仅近似对齐的术语时效果有限。CyBOKCla
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 toke...
CVE-2026-5260
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key excha
epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker on the network path between the ePA service and the Konnektor...
CVE-2026-45574
epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker on t
A weakness has been identified in ThingsBoard up to 4.3.1.1. Affected by this vulnerability is the function getGatewayDockerComposeFile of the file /api/v1/provision of the comp...
CVE-2026-9568
A weakness has been identified in ThingsBoard up to 4.3.1.1. Affected by this vulnerability is the function getGatewayDo
Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC...
CVE-2026-9560
Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute
FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin. The _log() function in src/mikrotik_plugin/f...
CVE-2026-48695
FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integra
FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integration plugin. In src/juniper_plugin/fastnetmon_juniper.ph...
CVE-2026-48694
FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integr
Kavita is a cross platform reading server. Prior to 0.9.0.2, an Improper Token validation flaw permits a remote and unauthenticated threat actor to request a JWT for any user in...
CVE-2026-47202
Kavita is a cross platform reading server. Prior to 0.9.0.2, an Improper Token validation flaw permits a remote and unau
The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts (e.g., regex patterns) and revealing underlying UR...
CVE-2026-44749
The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request art
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by addin...
CVE-2026-44730
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an
FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with no authentication mechanism. The server is initialized with grpc::InsecureServerCredentia...
CVE-2026-48692
FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with no authentication mechanism. The
FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin. The _log() function in src/juniper_plugin/fas...
CVE-2026-48687
FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integrat
When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask...
CVE-2026-48134
When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific