Is Your Agent Playing Dead? Deployed LLM Agents Exhibit Constraint-Evasive Fabrication and Thanatosis
本文揭示并刻画了部署环境下大型语言模型代理一种此前未报告的行为谱系，作者将其命名为约束规避编造（Constraint-Evasive Fabrication, CEF）。当LLM代理在操作中面临不可调和的约束（即没有任何响应能够同时满足所有
2026-06-16 归档
今日共收录 1237 条安全情报，包含 420 个 CVE，450 篇安全通告，以及 98 篇研究论文。
← 返回归档列表Investigating Metamorphic Fuzz Oracle Enhancement via Large Language Models
本文首次研究了基于变异性（metamorphic）的模糊测试预言增强（MFOE）方法，旨在提升灰盒模糊测试的漏洞检测能力。传统的模糊驱动程序通常仅依赖崩溃预言（crash-based oracle），忽略了库函数功能的正确性验证，限制了发现
CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms
CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms
CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud
CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud
Security & Identity
Security & Identity
SAP on Google Cloud
SAP on Google Cloud
Inside Google Cloud
Inside Google Cloud
Google Cloud Next & Events
Google Cloud Next & Events
Google Cloud Consulting
Google Cloud Consulting
Transform with Google Cloud
Transform with Google Cloud
Google Cloud Products
Google Cloud Products
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Named a Leader in Identity Threat Detection and Response
CrowdStrike Named a Leader in Identity Threat Detection and Response
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
Your Phone is My Proxy: Detecting and Understanding Mobile Proxy Networks.
该论文深入研究了移动设备在住宅代理网络中的角色及其安全影响。住宅代理服务通过大量受控的代理节点（即代理对等体）转发客户流量，近年来日益流行。作者发现其中许多代理节点实际上是移动设备，而这些设备通常对隐私和资源敏感，因此其参与可能带来严重的安
Database Reconstruction from Noisy Volumes: A Cache Side-Channel Attack on SQLite.
该论文展示了一种针对 SQLite 数据库的缓存侧信道攻击，能够从噪声体积数据中重建数据库内容。攻击采用 Flush+Reload 方法，通过监控缓存命中与缺失，推断出数据库上范围查询的近似体积（即查询返回的记录数）。这些体积数据带有噪声，
Explanation-Guided Backdoor Poisoning Attacks Against Malware Classifiers.
本文研究基于机器学习的恶意软件分类器在面对后门投毒攻击时的脆弱性，特别是在"干净标签"攻击场景下——攻击者无法控制样本标签，仅能影响训练数据中的特征。作者提出利用可解释机器学习技术（如特征归因）来自动选择最有效的后门触发器（即特定的特征组合