Android Code Search
Android Code Search
2026-06-06 归档
今日共收录 1443 条安全情报，包含 665 个 CVE，387 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Android Devices
Android Devices
Secure an Android device
Secure an Android device
Android 16 QPR2
Android 16 QPR2
Mobile network security
Mobile network security
iOS 26.5 and iPadOS 26.5
iOS 26.5 and iPadOS 26.5
iOS 18.7.9 and iPadOS 18.7.9
iOS 18.7.9 and iPadOS 18.7.9
iOS 16.7.16 and iPadOS 16.7.16
iOS 16.7.16 and iPadOS 16.7.16
iOS 15.8.8 and iPadOS 15.8.8
iOS 15.8.8 and iPadOS 15.8.8
MFSA 2026-49Security Vulnerabilities fixed in Firefox for iOS 151.0
MFSA 2026-49Security Vulnerabilities fixed in Firefox for iOS 151.0
MFSA 2026-52Security Vulnerabilities fixed in Firefox for iOS 151.1
MFSA 2026-52Security Vulnerabilities fixed in Firefox for iOS 151.1
MFSA 2026-53Security Vulnerabilities fixed in Firefox for iOS 151.2
MFSA 2026-53Security Vulnerabilities fixed in Firefox for iOS 151.2
Beta Channel Update for ChromeOS / ChromeOS Flex
The ChromeOS Beta channel is being updated to OS version 16667.35.0 (Browser version 149.0.7827.88) for most ChromeOS de
Firewall for AI
Firewall for AI
Will the Agent Recuse Itself? Measuring LLM-Agent Compliance with In-Band Access-Deny Signals
本文针对自主LLM代理（如具备真实凭证并操作基础设施的代理）缺乏标准化的资源访问控制机制的问题，提出了一种轻量级的带内拒绝信号——Recuse Signal。该信号类似于robots.txt，但用于实时访问控制：服务器通过现有协议通道（如S
From Untrusted Input to Trusted Memory: A Systematic Study of Memory Poisoning Attacks in LLM Agents
该论文系统性地研究了基于大语言模型（LLM）的智能体中的内存中毒攻击。内存作为智能体核心组件，允许其在多次交互中积累知识以提升性能，但同时也引入了风险：一次对抗性内存写入即可长期影响智能体行为。作者首先识别了四种内存写入通道（如用户输入、工
$π$Creds: Privately Inferred Credentials
该论文提出了一种名为πCreds（Privately Inferred Credentials）的新型去中心化可验证凭证系统。现有系统基于零知识证明，复杂且局限于结构化数据上的谓词，实际部署有限。πCreds创新性地利用可信的LLM推理，在
skillctl: Path traversal and symlink-follow in skillctl allow arbitrary file disclosure and deletion
## Impact `skillctl` 0.1.0 and 0.1.1 contained four path-safety vulnerabilities that, in combination, allowed an attack
klever-go: REST API slow-header connection exhaustion via Gin Engine.Run
### Summary The Klever seednode REST API starts a Gin engine with `Engine.Run(restAPIInterface)`. In Gin v1.9.1, `Engin
CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms
CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms