iOS 16.7.16 and iPadOS 16.7.16
iOS 16.7.16 and iPadOS 16.7.16
2026-07-15 归档
今日共收录 995 条安全情报，包含 81 个 CVE，528 篇安全通告，以及 87 篇研究论文。
← 返回归档列表iOS 15.8.8 and iPadOS 15.8.8
iOS 15.8.8 and iPadOS 15.8.8
MFSA 2026-49Security Vulnerabilities fixed in Firefox for iOS 151.0
MFSA 2026-49Security Vulnerabilities fixed in Firefox for iOS 151.0
MFSA 2026-52Security Vulnerabilities fixed in Firefox for iOS 151.1
MFSA 2026-52Security Vulnerabilities fixed in Firefox for iOS 151.1
MFSA 2026-53Security Vulnerabilities fixed in Firefox for iOS 151.2
MFSA 2026-53Security Vulnerabilities fixed in Firefox for iOS 151.2
MFSA 2026-55Security Vulnerabilities fixed in Focus for iOS / Klar 151.3.1
MFSA 2026-55Security Vulnerabilities fixed in Focus for iOS / Klar 151.3.1
MFSA 2026-56Security Vulnerabilities fixed in Firefox for iOS 152.0
MFSA 2026-56Security Vulnerabilities fixed in Firefox for iOS 152.0
iOS 26.5.2 and iPadOS 26.5.2
iOS 26.5.2 and iPadOS 26.5.2
MFSA 2026-65Security Vulnerabilities fixed in Firefox for iOS 152.3
MFSA 2026-65Security Vulnerabilities fixed in Firefox for iOS 152.3
【大模型服务平台 TokenHub】&【智能体开发平台】& 【云开发 CloudBase】 关于腾讯云 MiniMax-M2.5 模型下线及切换升级的通知
【大模型服务平台 TokenHub】&【智能体开发平台】& 【云开发 CloudBase】 关于腾讯云 MiniMax-M2.5 模型下线及切换升级的通知
MFSA 2026-66Security Vulnerabilities fixed in Firefox for iOS 152.4
MFSA 2026-66Security Vulnerabilities fixed in Firefox for iOS 152.4
Buffer overread in authd and wad daemon
CVSSv3 Score: 4.1 A buffer over-read vulnerability [CWE-126] in FortiOS, FortiProxy, and FortiSASE may allow a
Header injection in Web Filter warning page
CVSSv3 Score: 3.4 An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vul
Header injection in captive portal authentication form
CVSSv3 Score: 3.1 An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vul
Path traversal in CLI command allows deletion of root file system
CVSSv3 Score: 5.0 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabil
Stack Buffer Overflow in Log Report
CVSSv3 Score: 5.9 A Stack-based Buffer Overflow vulnerability [CWE-121] in FortiOS, FortiProxy and FortiPAM ma
APSB26-77: Security update available for Adobe Creative Cloud Desktop Application
APSB26-77: Security update available for Adobe Creative Cloud Desktop Application
One Token Is Enough: Fingerprinting and Verifying Large Language Models from Single-Token Output Distributions
该论文提出一种轻量级的LLM指纹识别与验证方法，仅需单token输出分布即可区分不同模型。当前LLM服务常通过不透明的API聚合器、转售商或推理提供商提供，客户端无法技术验证所调用模型是否与宣称一致，且已有审计发现相当比例的商用端点与供应商
Open-Source Intelligence for Code Provenance and the Security Patterns that Separate Human and Large-Language-Model Implementations of Common Programming Tasks
该论文研究了现代软件开发中代码来源的溯源问题，即代码片段是由人类编写的（如来自 Stack Overflow）还是由大语言模型（LLM）生成的。作者基于完全开源的工具链，构建了一个可复现的流程：通过公开的开放权重语言模型网关和 Stack
MindReader: Using LLMs to Encourage Memorable and Secure Password Replacement
本文介绍了 MindReader，一款利用大型语言模型（LLM）帮助用户在必须更换密码时生成既安全又易记的密码替换工具。背景是用户通常倾向于将新密码设置为原密码的简单变体（如添加数字或符号），这些变体容易被攻击者猜测。MindReader