MFSA 2026-53Security Vulnerabilities fixed in Firefox for iOS 151.2
MFSA 2026-53Security Vulnerabilities fixed in Firefox for iOS 151.2
2026-07-04 归档
今日共收录 996 条安全情报，包含 192 个 CVE，454 篇安全通告，以及 95 篇研究论文。
← 返回归档列表MFSA 2026-55Security Vulnerabilities fixed in Focus for iOS / Klar 151.3.1
MFSA 2026-55Security Vulnerabilities fixed in Focus for iOS / Klar 151.3.1
MFSA 2026-56Security Vulnerabilities fixed in Firefox for iOS 152.0
MFSA 2026-56Security Vulnerabilities fixed in Firefox for iOS 152.0
【Cloud Mate】产品退市及停止服务公告
【Cloud Mate】产品退市及停止服务公告
iOS 26.5.2 and iPadOS 26.5.2
iOS 26.5.2 and iPadOS 26.5.2
Chrome Dev for Android Update
Hi everyone! We've just released Chrome Dev 152 (152.0.7924.0) for Android. It's now available on Google Play.You can se
Behind the Refusal: Determining Guardrail Activation via Behavioral Monitoring
该论文针对大语言模型（LLM）及智能体系统在实际部署中的安全性问题，提出了一种首个黑盒护栏（Guardrail）侦察方法。现有研究者在攻击生产环境的AI系统时，难以区分护栏拦截与LLM自身的安全拒答（rejection），而两种绕过技术截然
Knowledge Over Parameters: Evolving Smart Contract Vulnerability Detection
智能合约漏洞主要为逻辑漏洞，检测需要结构化的、逐步执行的攻击模式与合约语义知识。现有基于LLM的方法在自动生成这类知识方面存在困难：基于提示的方法依赖手工检测规则，微调方法则需要大量标记数据，而这在智能合约领域极为稀缺。本文提出EvoVul
AgentFlow: Building Agent Dependency Graphs for Static Analysis of Agent Programs
本文提出 AgentFlow，首个针对 LLM agent 程序的静态分析框架。LLM agent 程序通常基于 agent 框架开发，其行为不仅依赖传统的控制流和数据流，还依赖框架定义的语义（如 agent 构造器、工具装饰器、agent
Cognitive Firewall: A Proactive, Zero-Trust, Multi-Gate Framework for LLM Safety
本文提出了一种名为 Cognitive Firewall 的主动运行时监督框架，旨在解决大语言模型（LLM）在面对多轮对话攻击时的安全问题。现有的安全措施通常将用户提示或模型响应作为孤立消息进行评估，无法捕捉跨轮对话中累积的恶意意图、声明的
Securing the AI Agent: A Unified Framework for Multi-Layer Agent Red Teaming
本论文提出了一个名为 AI-Infra-Guard 的开源框架，旨在解决 AI 智能体（Agent）安全评估中缺乏统一工具的问题。随着开源 AI 基础设施（如模型服务引擎、智能体平台、模型上下文协议 MCP 生态以及语言模型本身）的快速发展
9router: Missing Authorization and OS Command Injection
# Unauthenticated RCE via `/api/tunnel/tailscale-install` **Affected:** `9router` (npm package) — current master (`v0.4
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content