LoRA-Key: User-Centric LoRA Watermarking for Text-to-Image Diffusion Models
随着低秩适应（LoRA）在文本到图像扩散模型中的广泛使用，轻量级LoRA模块作为独立资产被共享、复用和商业化，形成了以LoRA为中心的生态系统。这种生态将版权保护的需求从基础模型转移到了分布式LoRA模块上，而后者极易被未经授权地复制、重新
2026-06-01 归档
今日共收录 782 条安全情报，包含 65 个 CVE，382 篇安全通告，以及 87 篇研究论文。
← 返回归档列表Temporal Motif-aware Graph Test-time Adaptation for OOD Blockchain Anomaly Detection
本文针对区块链异常检测中面临的两大挑战：恶意行为者造成的对抗性模式演化，以及区块链上交易语义多样性导致的分布外（OOD）问题。作者提出了一种名为 TEMG-TTA（时间感知的图测试时自适应）的新型框架。该框架首先通过高效的计算机制全面捕获每
AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasing
本文针对句子级文本水印在强释义攻击下鲁棒性不足的问题展开研究。现有的句子级水印方法通过将水印锚定在句子语义上来增强对释义的鲁棒性，但基于前缀的设计仍然容易受到句子分割和合并等结构扰动的影响，这些扰动在DIPPER、GPT-3.5等强释义器下
MAECO-Lite: Modular Ontology for Dynamic Malware Analysis
该论文聚焦于动态恶意软件行为建模中的语义精准性问题。现有标准如MAEC和STIX虽广泛用于描述恶意软件制品和观测，但其结构复杂且常混淆本体论区分，尤其是将持久性制品与运行时事件混为一谈，限制了执行轨迹的可推理性。论文以统一基础本体论（UFO
A Core-Structure-Based Automated Analysis Tool for Commercial Virtualization Obfuscation Deobfuscation
本文针对虚拟化混淆（virtualization obfuscation）技术展开研究，该技术是代码混淆领域的一种高级手段，因其强大的保护能力而被越来越多地应用于恶意软件中，给分析人员带来了巨大的时间和精力开销。现有工具在处理多样化的虚拟化
DP-SAPF: Saliency-Aware Parameter Fine-tuning of Public Models for Differentially Private Image Synthesis
该论文研究差分隐私（DP）图像合成问题，旨在从敏感数据集中生成保留统计特征的图像，同时提供严格的隐私泄漏保证。现有方法通常使用差分隐私随机梯度下降（DP-SGD）对公共模型进行全量微调，但公共模型参数数量庞大，导致计算成本高昂。近期工作启发
Scarcity Is Not Enough: An Impossibility Result for Linear Sybil Cost Under Parallelizable Resources
本文研究去中心化系统（如区块链）抵御女巫攻击（Sybil attack）的资源稀缺性条件。传统观点认为，只要绑定某种稀缺资源（如计算力、代币持有量）即可线性增加攻击成本，从而有效防御。但作者证明，仅靠稀缺性是不够的：资源的结构性属性决定了攻
Information Security in Small-Scale Protests: Surveillance of Ugandan Anti-EACOP Protesters
该研究通过五周的田野调查（包括13次半结构化访谈），深入分析了乌干达反EACOP（东非原油管道）抗议活动中的信息安全实践。研究对象为小型学生抗议团体，他们在国家监视和镇压的背景下秘密组织抗议活动。研究发现，抗议者面临多层次对抗环境：直接威胁
Ciphera: A Decentralised Biometric Identity Framework
本文提出了一种名为Ciphera的去中心化生物特征身份框架，旨在解决传统中心化生物特征系统中存在的单点故障、验证过程不透明以及生物特征信息一旦泄露便不可逆等安全问题。该框架结合了隐私保护的人脸识别、多节点验证、基于IPFS的凭证元数据存储以
An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to other groups. Please note that the featu...
CVE-2026-48189
OTRS（开源工单系统）客户后端模块存在不正确的输入验证漏洞（CVE-2026-48189）。该漏洞源于对用户输入的验证不足，导致低权限攻击者能够通过构造特制请求，访问原本受限于其他客户组的敏感客户信息。前提是目标系统已启用相关功能（fea
In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the Sys...
CVE-2026-20454
In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of pr
A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agent.py. The manipula...
CVE-2026-10221
NousResearch hermes-agent 0.12.0及之前版本存在注入漏洞。该漏洞位于run_agent.py文件的_compress_context函数中，攻击者可远程利用，无需认证。利用代码已公开，可能被用于攻击。厂商已联系
A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function _get_safety_warning of the file agent/tools/bash/bash.py of the compone...
CVE-2026-10214
CVE-2026-10214 影响 zhayujie 开发的 chatgpt-on-wechat 项目（一个基于 ChatGPT 的微信机器人）的 Bash Tool 组件。该漏洞存在于 agent/tools/bash/bash.py 文
A security flaw has been discovered in AstrBotDevs AstrBot 4.23.6. This vulnerability affects unknown code of the file /api/skills/delete of the component API Endpoint. Performi...
CVE-2026-10213
A security flaw has been discovered in AstrBotDevs AstrBot 4.23.6. This vulnerability affects unknown code of the file /
A vulnerability was identified in AstrBotDevs AstrBot 4.24.2. This affects the function astr_main_agent of the file astrbot/core/astr_main_agent.py. Such manipulation of the arg...
CVE-2026-10212
A vulnerability was identified in AstrBotDevs AstrBot 4.24.2. This affects the function astr_main_agent of the file astr
A vulnerability was determined in AstrBotDevs AstrBot 4.23.6. Affected by this issue is the function _normalize_rw_path of the file astrbot/core/tools/computer_tools/fs.py. This...
CVE-2026-10211
A vulnerability was determined in AstrBotDevs AstrBot 4.23.6. Affected by this issue is the function _normalize_rw_path
A vulnerability was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerability is the function _sanitize_prompt_description of the file astrbot/core/skills/skill_manage...
CVE-2026-10210
A vulnerability was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerability is the function _sanitize_prompt
A vulnerability has been found in code-projects Online Hospital Management System 1.0. Affected is an unknown function of the file appointmentdetail.php of the component Appoint...
CVE-2026-10209
A vulnerability has been found in code-projects Online Hospital Management System 1.0. Affected is an unknown function o
A flaw has been found in code-projects Online Hospital Management System 1.php. This impacts the function login_user of the file login_1.php. Executing a manipulation of the arg...
CVE-2026-10208
A flaw has been found in code-projects Online Hospital Management System 1.php. This impacts the function login_user of
A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1. This affects an unknown function of the file /dbsrv.asp. Performing a manipulation of the argument str results i...
CVE-2026-10206
A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1. This affects an unknown function of the file /dbsrv.asp