Google is a Leader in the IDC MarketScape: Worldwide Cybersecurity Consulting Services 2024 Vendor AssessmentRead the report
Google is a Leader in the IDC MarketScape: Worldwide Cybersecurity Consulting Services 2024 Vendor AssessmentRead the re
2026-07-13 归档
今日共收录 797 条安全情报，包含 77 个 CVE，415 篇安全通告，以及 53 篇研究论文。
← 返回归档列表Cyber Defense Summit 2026Register today to reserve your spot
Cyber Defense Summit 2026Register today to reserve your spot
Cyber Defense Summit 2026Crafted to equip elite security professionals with the strategies, tools, and insights needed to outmaneuver increasingly sophisticated, AI-enabled adversaries and build resilient cyber ecosystems.Register now
Cyber Defense Summit 2026Crafted to equip elite security professionals with the strategies, tools, and insights needed t
Security TalksJoin our security experts in this ongoing series as they explore the latest AI innovations across our security product portfolio, threat intelligence best practices, and more.Watch on-demand
Security TalksJoin our security experts in this ongoing series as they explore the latest AI innovations across our secu
New Abuse of the ClickOnce Technology, Part 2: Stop Threat Actors from Clicking Once and Staying Forever
New Abuse of the ClickOnce Technology, Part 2: Stop Threat Actors from Clicking Once and Staying Forever
New Abuse of the ClickOnce Technology, Part 1: The Inner Workings of ClickOnce Application Deployment
New Abuse of the ClickOnce Technology, Part 1: The Inner Workings of ClickOnce Application Deployment
Browser Security: Zero-Days Are Only Part of the Problem
Browser Security: Zero-Days Are Only Part of the Problem
IDC business value studyTurn security into business growth
IDC business value studyTurn security into business growth
How AI-leading Security Teams Are Building the Agentic SOC
How AI-leading Security Teams Are Building the Agentic SOC
CrowdStrike Uncovers New Prompt Injection TechniquesJul 07, 2026
CrowdStrike Uncovers New Prompt Injection TechniquesJul 07, 2026
Falcon Secure Access Sets the Standard for Zero Trust Browser Security
Falcon Secure Access Sets the Standard for Zero Trust Browser Security
Why AI Governance Without Guardrails Is TheaterJul 09, 2026
Why AI Governance Without Guardrails Is TheaterJul 09, 2026
OpenAI temporarily relaxes GPT-5.6 Sol usage limits
OpenAI is temporarily relaxing GPT-5.6 Sol usage after demand for the company's most powerful model surged over the past
Claude Fable 5 stays free for paid users until July 19 as Anthropic buys more time
Anthropic has just extended access to Claude Fable 5 for paid subscribers until July 19, giving you another week to keep
RedHook Android malware now uses Wireless ADB for shell access
A new version of the RedHook Android malware abuses the Android Wireless Debugging (Wireless ADB) mechanism in a novel w
SherAgent: Scaling Attack Investigation in the Wild via LLM-Empowered Iterative Query-Filter Backtracking
该论文针对基于溯源图的攻击调查在实际应用中面临的依赖爆炸和因果链碎片化问题，提出了一种名为SherAgent的LLM增强自动调查系统。通过与一家服务数十亿用户的互联网公司SOC合作，作者分析了现有LLM调查工作流（每天处理数万原始告警，数千
VEXAIoT: Autonomous IoT Vulnerability EXploitation using AI Agents
本文提出了一种名为 VEXAIoT 的自主多代理框架，利用大语言模型（LLM）驱动的 AI 代理来自动化物联网（IoT）环境中的漏洞发现与利用。针对 IoT 设备因硬件受限、固件过时、默认配置不安全等固有弱点，传统的安全测试方法难以扩展和适
Blockchain-Linked Auditable Decision Management for Telecom/IoT Fraud-Control Requests
该论文提出了一种区块链链接的可审计决策管理框架，用于处理电信和物联网场景中的欺诈控制请求。传统欺诈控制研究多停留在检测器级别分类，但实际部署需要请求级别的策略解析、生命周期追踪和审计能力。作者将欺诈控制问题重新定义为区块链链接的可审计决策管
SLBench: Evaluating How LLM Agents Follow Logical Relations in Skills
本研究聚焦于LLM代理（如代码助手）在执行技能文件时的安全性问题。技能文件封装了可复用的程序、工具和领域特定工作流，但其中存在复杂的逻辑关系（如前置条件、约束、回退行为），若代理未能正确遵循这些关系，可能导致危险操作。作者首先提出了Skil
Secret Scanner Agent: Extracting Secrets and Access Context from Unstructured Documents
该论文提出了一个名为 Secret Scanner Agent (SSA) 的多智能体大语言模型系统，旨在从非结构化的暴露文档（如电子邮件、聊天记录、工单、事件笔记）中提取泄漏的凭据及其关联的访问上下文（即“门”）。传统的秘密扫描器依赖正则