Android 16 QPR2
Android 16 QPR2
2026-06-28 归档
今日共收录 725 条安全情报，包含 41 个 CVE，384 篇安全通告，以及 89 篇研究论文。
← 返回归档列表Mobile network security
Mobile network security
iOS 26.5 and iPadOS 26.5
iOS 26.5 and iPadOS 26.5
iOS 18.7.9 and iPadOS 18.7.9
iOS 18.7.9 and iPadOS 18.7.9
iOS 16.7.16 and iPadOS 16.7.16
iOS 16.7.16 and iPadOS 16.7.16
iOS 15.8.8 and iPadOS 15.8.8
iOS 15.8.8 and iPadOS 15.8.8
MFSA 2026-49Security Vulnerabilities fixed in Firefox for iOS 151.0
MFSA 2026-49Security Vulnerabilities fixed in Firefox for iOS 151.0
MFSA 2026-52Security Vulnerabilities fixed in Firefox for iOS 151.1
MFSA 2026-52Security Vulnerabilities fixed in Firefox for iOS 151.1
MFSA 2026-53Security Vulnerabilities fixed in Firefox for iOS 151.2
MFSA 2026-53Security Vulnerabilities fixed in Firefox for iOS 151.2
MFSA 2026-55Security Vulnerabilities fixed in Focus for iOS / Klar 151.3.1
MFSA 2026-55Security Vulnerabilities fixed in Focus for iOS / Klar 151.3.1
MFSA 2026-56Security Vulnerabilities fixed in Firefox for iOS 152.0
MFSA 2026-56Security Vulnerabilities fixed in Firefox for iOS 152.0
Stable Channel Update for ChromeOS / ChromeOS Flex
The ChromeOS Stable channel is being updated to OS version 16667.55.0 (Browser version 149.0.7827.226) for most ChromeOS
Protocol Prying: Systematic Vulnerability Research in the Apple AirDrop and Android Quick Share Proximity Transfer Protocols
本文对苹果 AirDrop 和 Google/Samsung Quick Share 进行了首次跨平台逆向工程与协议感知模糊测试研究。AirDrop 和 Quick Share 是用于邻近文件传输的协议，部署在超过 50 亿台设备上，但因其
Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents
该论文以数据为中心视角系统综述了大语言模型智能体（LLM agents）中的隐私问题。LLM智能体正从简单的问答系统发展为能够查询数据库、检索文档、调用外部API、记忆历史交互并代表用户执行多步骤工作流的复杂系统。由于智能体接触多种数据源、
Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models
本文是一篇关于对抗性攻击与防御在跨模态AI系统中的综述，聚焦于扩散模型在文本（LLM）、图像分类器、视觉-语言模型（VLM）以及输入净化防御中作为攻击或防御机制的统一框架。作者将过去沿着四个相对独立轨迹发展的研究整合起来：基于扩散的文本/L
Probabilistic Agents in Deterministic Audits: Evaluating Multi-Agent Systems for Automated Audits Based on the German IT-Grundschutz
本文针对NIS-2指令下中小企业面临的风险管理合规压力，聚焦德国联邦信息安全办公室（BSI）制定的IT-Grundschutz（IT-GS）认证自动化问题。IT-GS认证依赖大量人工文档、验证与修订，成本高且难以规模化。作者在前期概念框架基
An Approach for a Supporting Multi-LLM System for Automated Certification Based on the German IT-Grundschutz
本文提出了一种新颖的方法，利用多大型语言模型系统（MLS）与混合检索增强生成（HybridRAG）技术，实现BSI IT-Grundschutz认证的半自动化。研究背景是欧盟NIS2指令的出台导致更多企业需要获得信息安全认证，但专业认证人员
Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems
本文是一篇关于检索增强生成(RAG)系统安全与隐私的综合性综述。RAG通过将外部知识库与大型语言模型结合，显著提升了事实性和适应性，但也引入了传统语言模型威胁之外的新风险。论文首先介绍了RAG的典型架构，包括集中式、设备端(Micro-RA
Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with pr...
CVE-2026-58053
Gitea act_runner 的 Docker 后端（通过 act 0.262.0 及更早版本）在处理工作流时，会将容器配置中的 container.options 字符串直接传递给 Docker 作业容器的 HostConfig。即使
CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms
CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms