Watermark Forensics for Generative Models: An Information-Theoretic Perspective
本研究从信息论角度系统分析了生成模型（如LLM）输出水印的取证能力，构建了从检测、归因、提取到定位的“取证阶梯”，并量化了每级阶梯所需的样本长度（token数）代价。核心创新在于提出了“信息轮廓”概念ν(t)=I(S;X_t|X_{<t})
2026-07-16 归档
今日共收录 1958 条安全情报，包含 992 个 CVE，550 篇安全通告，以及 113 篇研究论文。
← 返回归档列表Proof in a Bottle: Long-Lived Verifiable Secret Sharing via Pre-Quantum Commitment and Immutable Ledger Binding
本文提出了一种名为“Proof in a Bottle (PiB)”的长期可验证秘密共享方案，旨在应对量子计算对传统可验证秘密共享（VSS）的威胁。传统VSS（如Pedersen承诺）在Shor算法运行的密码学相关量子计算机（CRQC）面前
Explaining Intrusion Alert Decisions of Deep Learning-based Network Intrusion Detection Systems for Security Analysts
论文提出 EXP-SEC 框架，旨在为基于深度学习的网络入侵检测系统（DL-based NIDS）生成的告警提供可解释性，使得安全运营中心（SOC）的分析师能够理解告警背后的原因。现有可解释性方法（如 xNIDS）在复杂网络流量特征依赖（如
FlowArk: Boosting Agentic Data-flow Analysis for Android Apps via Context-Aware Knowledge Reuse
该论文针对Android应用隐私与安全审计中数据流分析任务存在的重复分析成本问题，提出了一种基于知识复用的系统性解决方案FlowArk。在批处理模式下，多个代理实例分别处理不同的污点源到汇点的数据流分析任务，但由于代码复用导致不同数据流路径
MusicMark: A Robust Generative Watermarking Framework for Music Generation
随着AI音乐生成技术的快速发展及其在商业平台上的广泛应用，对生成音乐进行可靠溯源和归属认证的需求日益迫切。然而，现有的音频水印研究主要针对语音，而音乐具有复杂的结构和丰富的声学纹理，直接应用语音水印方法面临巨大挑战。大多数现有方法都是事后式
SoK: Federated Learning for Intrusion Detection in Vehicular Networks
现代车载网络面临内部电子控制单元（ECU）和外部车联网（V2X）通信不断扩大的攻击面。联邦学习（FL）作为一种去中心化范式，被用于在不牺牲数据隐私的前提下部署入侵检测系统（IDS）。然而，车载FL-IDS文献存在方法论碎片化和实验设置不切实
Designing a GDPR-Compliant Security Architecture for Remote Elderly Care Systems: A Privacy-by-Design Approach
本文针对基于IoMT的远程老年人护理系统中的安全与隐私挑战，提出了一个名为Secure Edge Gateway (SEG) 的综合安全架构。现有研究未能同时满足三个相互依赖的需求：GDPR合规的边缘层假名化、针对老年人的零交互可用性约束，
SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now
CVE-2026-15409 · CVE-2026-15410
SonicWall warns that threat actors have been exploiting two SMA1000 vulnerabilities, tracked as CVE-2026-15409 and CVE-2
OS command injection in jsii-diff in AWS jsii
CVE-2026-15895
OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 might allow context-dependent
Dashy: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2026-54443
Dashy is a self-hostable personal dashboard. From 1.9.4 until 3.2.0, the Dashy RSS Widget in src/components/Widgets/RssF
Dash: Users can write to config despire permissions (OIDC tested)
CVE-2026-46485
Dashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC can allow unauthenticated user
Repomix: Command Injection (RCE) via `--remote-branch` Argument Injection
CVE-2026-49987
Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, src/core/git/gitCommand.ts execGitSha
Repomix: attach_packed_output can bypass file-read secret scanning for supported local files
CVE-2026-49988
Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, the Repomix MCP server attach_packed_
OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download
CVE-2026-62947
OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, the cgi-download handler in cgi-io aut
OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI
CVE-2026-62948
OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN opt
Out-of-bounds write in ADIN2111/ADIN1110 OA SPI Ethernet RX frame reassembly
CVE-2026-10673
The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) reassembles received Ether
Better Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family Forking
CVE-2026-53517
Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-a
Better Auth: Device authorization approve and deny accept any authenticated session while the user code is pending
CVE-2026-45337
Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the deviceAuthorizat
Better Auth: Unauthorized invitation acceptance via unverified email match in organization plugin
CVE-2026-53514
Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, and in 1.6.14 and later when
Better Auth: OAuth refresh-token replay via missing client authentication on oidc-provider and mcp plugins
CVE-2026-53512
Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the legacy oidcProvider and