MFSA 2026-56Security Vulnerabilities fixed in Firefox for iOS 152.0
MFSA 2026-56Security Vulnerabilities fixed in Firefox for iOS 152.0
2026-07-08 归档
今日共收录 1050 条安全情报，包含 282 个 CVE，378 篇安全通告，以及 103 篇研究论文。
← 返回归档列表【Cloud Mate】产品退市及停止服务公告
【Cloud Mate】产品退市及停止服务公告
iOS 26.5.2 and iPadOS 26.5.2
iOS 26.5.2 and iPadOS 26.5.2
Stable Channel Update for ChromeOS / ChromeOS Flex
The ChromeOS Stable channel is being updated to OS version 16667.61.0 (Browser version 149.0.7827.232) for most ChromeOS
MFSA 2026-65Security Vulnerabilities fixed in Firefox for iOS 152.3
MFSA 2026-65Security Vulnerabilities fixed in Firefox for iOS 152.3
Dev Channel Update for ChromeOS / ChromeOS Flex
The ChromeOS Dev channel is being updated to OS version 16733.12.0 (Browser version 151.0.7922.14) for most ChromeOS de
Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses
该论文研究了大型语言模型（LLM）智能体持久记忆带来的新安全风险。持久记忆允许智能体存储事实知识、决策、推理历史、工具使用信息和上下文，但同时也引入了攻击面：智能体自身的推理历史。作者提出了一种名为FARMA（Forged Amplifyi
Context-to-Execution Integrity for LLM Agents
本文提出了一种针对大型语言模型（LLM）智能体的执行边界系统——上下文到执行完整性（CXI）。LLM智能体通过读取攻击者可写的上下文来执行任务，但现有系统缺乏对工具调用的细粒度访问控制，导致恶意上下文可能操纵智能体执行未授权的操作。CXI通
Code-Level Cost Function Generation for Spatial Image Steganography Using RAG-Enhanced Large Language Models
该论文针对空间图像自适应隐写（steganography）中成本函数设计的问题展开研究。传统方法依赖大量手动调参，而基于深度学习的方法缺乏可解释性。大语言模型（LLM）虽然可通过进化生成提供自动化方案，但由于缺乏显式的领域知识，生成的代码常
TACTIC-KG: Toward Small Agent Teams for Cyber Threat Intelligence Knowledge Graph Construction
该论文提出 TACTIC-KG 框架，旨在解决从非结构化、异构、含有噪声的网络威胁情报（CTI）报告中自动构建网络安全知识图谱（CSKG）的难题。传统方法依赖单一大型语言模型（LLM）进行端到端的实体关系抽取和补全，存在成本高、可控性差、性
Knowledge Base Poisoning Attacks and Defense for Policy-Aware LLM-RAG Framework
本文针对面向战场物联网（IoBT）任务控制的策略感知大语言模型检索增强生成（PA-LLM-RAG）框架，首次系统研究了知识库投毒攻击及其防御。作者提出了一种新颖的“查询无关语义检索投毒”（Query-Agnostic Semantic Re
uutils coreutils: cp/install/mv/ln --suffix alone does not enable backup mode (silent data loss vs GNU)
`determine_backup_mode` in `src/uucore/src/lib/features/backup_control.rs` only checks `--backup`/`-b` and returns `Back
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content