Cloud & Application Security
Cloud & Application Security
2026-07-07 归档
今日共收录 976 条安全情报，包含 239 个 CVE，384 篇安全通告，以及 83 篇研究论文。
← 返回归档列表From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More
A streaming box should not need a threat model. Neither should a username field, a demo repo, a reset flow, or a browser
Blitz: Secure Multi-Hop Payments Without Two-Phase Commits.
本文提出 Blitz，一种无需两阶段提交（2PC）的闪电网络多跳支付协议。传统闪电网络多跳支付依赖两阶段提交来实现原子性，但这引入了额外的通信延迟和中间节点锁定时间。Blitz 利用基于可验证秘密共享（VSS）和条件支付的新机制，在不使用
When Mixnets Fail: Evaluating, Quantifying, and Mitigating the Impact of Adversarial Nodes in Mix Networks.
该论文系统性地研究了混合网络（mixnets）在面对恶意节点时的失效模式。混合网络是匿名通信的关键基础设施，通过多跳混淆和延迟发送来隐藏通信关系。然而，当网络中部分节点被敌手控制时，敌手可能通过流量分析、时序关联等攻击破坏匿名性。论文首先形
Caulk: Lookup Arguments in Sublinear Time.
本论文提出了一种称为 Caulk 的新型查找参数（lookup argument）及其变体 Caulk+，旨在解决零知识证明系统中高效证明元素属于预定义集合的问题。传统的查找参数（如 plookup）证明者复杂度与数据集大小呈线性关系，而
HeatDeCam: Detecting Hidden Spy Cameras via Thermal Emissions.
本文提出了一种名为HeatDeCam的新型隐藏摄像头检测方法，利用热辐射特性来定位隐藏的间谍摄像头。现有的检测方法通常需要物理接近或依赖可见光反射，难以应对隐藏摄像头的小型化和伪装。HeatDeCam通过分析摄像头工作时产生的热量辐射，使用
Blind Backdoors in Deep Learning Models.
这篇论文研究了一种新型的深度学习模型后门注入方法。与传统的后门攻击不同，该方法不依赖于修改训练数据、观察代码执行或访问最终模型，因此被称为“盲后门攻击”。攻击者通过破坏模型训练代码中的损失值计算过程，在训练过程中动态生成带有毒化的训练样本，
T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification.
本文提出 T-Miner，一种针对深度神经网络 (DNN) 文本分类器 Trojan 攻击的防御框架。Trojan 攻击通过在训练阶段植入后门触发器，使得任何包含该触发器的输入都会被误分类为攻击者指定的目标标签。与图像领域丰富的防御工作相比
PACE: Fully Parallelizable BFT from Reproposable Byzantine Agreement.
这篇论文提出了一种名为 PACE 的拜占庭容错（BFT）协议，旨在解决传统 BFT 协议在并行化方面的瓶颈。现有的 BFT 协议通常顺序执行共识实例，导致吞吐量受限于单线程性能。PACE 通过引入“可重新提议的拜占庭协议”（Repropos
Poster: May the Swarm Be With You: Sensor Spoofing Attacks Against Drone Swarms.
该论文研究针对无人机群（drone swarms）的传感器欺骗攻击。随着无人机群在军事、物流、农业等领域的广泛应用，其安全性受到关注。无人机群依赖多种传感器（如GPS、IMU、视觉传感器等）进行协同导航与决策。作者提出了一种新型攻击方法，攻