All-out Attack: Optimal Block Withholding Under Pay-Per-Share Scheme
该论文研究了在按份额付费（Pay-Per-Share, PPS）和完全按份额付费（Full Pay-Per-Share, FPPS）方案下，针对Nakamoto风格区块链的最优区块扣留（Block Withholding, BWH）攻击策略
2026-07-05 归档
今日共收录 754 条安全情报，包含 65 个 CVE，375 篇安全通告，以及 61 篇研究论文。
← 返回归档列表Detecting Adversarial Evasion Attacks Against Autoencoder-Based Network Intrusion Detection Systems
本文针对基于自编码器的网络入侵检测系统（NIDS）面临的对抗性逃避攻击问题展开研究。攻击者利用 PANDA 框架，将网络流量中的报文序列转换为可逆灰度图像，从而将在视觉领域开发的对抗样本技术迁移到网络领域，例如使用掩蔽快速梯度符号法（mas
No Country for Old Privacy: The Evolving Challenges of Anonymity in Bitcoin
本文对比特币网络中的第二代匿名协议（CoinJoin、CoinSwap、CoinShuffle、隐形地址）的采用情况进行了纵向测量研究。研究者通过实现并优化一套启发式过滤器，识别出超过594万笔CoinJoin交易和2330万笔CoinSw
Know Thy Neighbor: Cross-TEE Mutual Attestation
本文提出了一种名为 Heterogeneous Mutual Attestation (Hema) 的协议，用于解决云计算中跨异构可信执行环境 (TEE) 的相互认证问题。在云服务中，多个分布式组件和实例之间需要通信，包括在传统执行环境和可
High-Performance NTT Accelerators for PQC leveraging Unified Redundant Arithmetic and Fine-Tuned Microarchitecture
后量子密码学（PQC）和隐私保护技术将在未来安全通信系统中发挥核心作用。基于格的PQC方案（如ML-KEM和ML-DSA）严重依赖大度数多项式运算，数论变换（NTT）成为关键计算原语。现有硬件加速器虽利用并行和流水线支持NTT及逆变换（IN
Safe Alone, Unsafe Together: Safeguarding Against Implicit Toxicity When Benign Images Combine
本研究聚焦于多图像内容中一种新型安全威胁——多图像隐式毒性（MIIT）。MIIT指的是每张图片单独看起来无害，但当多张图片被联合解读时，会产生有害语义。这种威胁在社交媒体中日益普遍，但现有的商业内容审核API和模型因缺乏每张图片中的显式风险
Steerability via constraints: a substrate for scalable oversight of coding agents
该论文关注编码智能体（coding agents）在软件开发中日益普及但人类监管成为瓶颈的问题。作者提出，传统上用于管理大型人类工程团队的成熟方法——访问控制、网络策略、严格的编码规范以及工具化执行——可以直接迁移到编码智能体的监管中，并且
The Binary Tree Mechanism is Optimal for Approximate Differentially Private Continual Counting
本文研究了差分隐私（Differential Privacy, DP）下的持续计数问题（Continual Counting）。问题设定是：给定一个长度为 n 的二进制流，每个 1 代表一个个体的贡献，目标是在保护每个个体隐私的前提下，发布
Forensic-Oriented Intrusion Detection Using Synthetic Network Traffic Data and Explainable Artificial Intelligence
该论文提出了一种面向数字取证场景的网络入侵检测框架，同时解决现有机器学习管线在证据保全和可解释性方面的缺陷。框架严格遵循ISO/IEC 27037、27041、27042及NIST SP 800-86等取证标准，将原始网络流量数据视为不可变
The Rise and Fall of Google's Privacy Sandbox
该论文对Google Privacy Sandbox的采用情况进行了首次纵向、考虑用户同意的测量。Privacy Sandbox是Google旨在替代Web上侵犯隐私的数据收集方式的倡议，试图平衡隐私、广告功能和跨站追踪，但经历了多次重新设
Toward a Unified Security and Privacy Framework for AI-Native 6G Networks
第六代（6G）通信网络预计将演变为AI原生、高度自治的生态系统，融合通信、计算、感知和人工智能。尽管这些能力能实现前所未有的连接和智能服务，但它们也创造了高度异构的安全和隐私格局，无法通过孤立的、特定技术的解决方案来解决。本文对AI原生6G
Overview of Risk Assessment and Management for Intelligent Systems under the AI Act and Beyond
本文是一篇关于AI系统风险评估与管理的综述性论文，旨在回应社会及新兴基于风险的人工智能监管框架对严格风险评估的需求。论文首先回顾了全球范围内推动系统化AI风险评估的监管环境，包括欧盟AI法案等关键法规。随后，论文系统梳理了文献中识别出的AI
A security flaw has been discovered in CodeAstro Apartment Visitor Management System 1.0. The impacted element is an unknown function of the file /apartment-visitor/add-apartmen...
CVE-2026-14689
A security flaw has been discovered in CodeAstro Apartment Visitor Management System 1.0. The impacted element is an unk
A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file admin/view-users.php. Executing a man...
CVE-2026-14655
CVE-2026-14655 是 code-projects Assessment Management 1.0 中的一个跨站脚本（XSS）漏洞。该漏洞位于 admin/view-users.php 文件中，通过对参数 'User' 进行操
A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such m...
CVE-2026-14654
A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown functi
A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This m...
CVE-2026-14653
A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown funct
A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the component Admin Login....
CVE-2026-14652
A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function o
A vulnerability has been found in connorskees grass up to 0.13.4. The impacted element is the function grass_compiler::selector::extend/grass_compiler::evaluate::visitor. The ma...
CVE-2026-14651
A vulnerability has been found in connorskees grass up to 0.13.4. The impacted element is the function grass_compiler::s
A flaw has been found in connorskees grass up to 0.13.4. The affected element is the function grass_compiler::raw_to_parse_error of the component UTF-8 Character Handler. Execut...
CVE-2026-14650
A flaw has been found in connorskees grass up to 0.13.4. The affected element is the function grass_compiler::raw_to_par
A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the function test_input of the file /saveVote.php. Performing a manipulation of the argument ...
CVE-2026-14649
A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the function test_input of the file