MFSA 2026-52Security Vulnerabilities fixed in Firefox for iOS 151.1
MFSA 2026-52Security Vulnerabilities fixed in Firefox for iOS 151.1
2026-07-02 归档
今日共收录 1714 条安全情报，包含 914 个 CVE，384 篇安全通告，以及 113 篇研究论文。
← 返回归档列表MFSA 2026-53Security Vulnerabilities fixed in Firefox for iOS 151.2
MFSA 2026-53Security Vulnerabilities fixed in Firefox for iOS 151.2
MFSA 2026-55Security Vulnerabilities fixed in Focus for iOS / Klar 151.3.1
MFSA 2026-55Security Vulnerabilities fixed in Focus for iOS / Klar 151.3.1
MFSA 2026-56Security Vulnerabilities fixed in Firefox for iOS 152.0
MFSA 2026-56Security Vulnerabilities fixed in Firefox for iOS 152.0
【Cloud Mate】产品退市及停止服务公告
【Cloud Mate】产品退市及停止服务公告
iOS 26.5.2 and iPadOS 26.5.2
iOS 26.5.2 and iPadOS 26.5.2
Chrome for Android Update
Hi, everyone! We've just released Chrome 150 (150.0.7871.63) for Android. It'll become available on Google Play over th
Chrome Beta for iOS Update
Hi everyone! We've just released Chrome Beta 151 (151.0.7922.3) for iOS; it'll become available on App Store in the next
COHORT: Collaborative Orchestration for Hardening via Offensive Replay on Emulated Topologies
该论文提出了 COHORT，一个用于企业网络缓解措施自动化生成和验证的端到端框架。当前，针对已观测到的攻击者，分析师通常需要数周时间手动推导缓解措施、验证其不影响生产环境，并确保能阻断攻击。COHORT 首次实现了这一过程的自动化：通过角色
MESA: Prioritizing Vulnerable Communication Channels for Securing Multi-Agent Systems
本文针对多智能体系统（MAS）中智能体间通信信道面临的未知攻击面问题，提出了一种名为MESA的标签无关框架。研究背景是MAS在自动化复杂分布式工作流中日益普及，但智能体间通信链路引入的新攻击面缺乏有效防御手段。作者观察到，不同通信链路（边）
Securing the AI Agent: A Unified Framework for Multi-Layer Agent Red Teaming
本文针对AI基础设施（包括模型服务引擎、代理平台、模型上下文协议（MCP）生态系统以及语言模型本身）快速发展过程中安全工具滞后的问题，提出了一个统一的多层代理红队测试框架AI-Infra-Guard。该框架的核心观察是AI代理的攻击面可分为
Understanding and Evaluating Claw-like Agent Security Through a Computer-Systems Lens
该论文针对类似 Claw 的 AI 智能体（如 OpenClaw）的安全问题进行了系统研究。这类智能体是始终在线的进程，持续拥有对凭证、文件、工具和外部服务的访问权限，并承担安装软件包、维护状态、调度子任务、管理 I/O 等系统级职责，因此
Manufactured Confidence: How Memory Consolidation Turns Hearsay into Confident Facts
本论文研究了 LLM agent 在跨步骤和会话中使用压缩记忆时，记忆体（如 mem0、LangMem）对对话内容进行重写为存储的“事实”所引发的安全隐患。作者通过构建实验环境，展示了一种无攻击者参与的“制造确信”现象：一个随意、含糊的评论
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense