Detecting Unknown Encrypted Malicious Traffic in Real Time via Flow Interaction Graph Analysis.
随着互联网流量广泛加密以保护通信隐私，攻击者也常常滥用加密技术来隐藏恶意行为。由于加密后的恶意流量与正常流量的特征极其相似，传统的检测方法（如基于签名或监督学习）难以有效识别，尤其是面对未知攻击时，因为它们依赖于已知攻击的标签数据集。本文提
2026-07-17 归档
今日共收录 1302 条安全情报，包含 372 个 CVE，507 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
2026年7月17日，CrowdStrike与Zscaler宣布合作，将持续身份安全（Continuous Identity Security）与零信任访问（Zero Trust Access）整合。该合作旨在通过结合CrowdStrike
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Bulkhead: Automated Semantic Detection and Remediation of Container Escape Vulnerabilities
容器逃逸漏洞（特别是路径遍历漏洞）在云原生环境中日益严重，尤其是当系统将GPU、代理工作区等共享资源挂载到容器中支持AI工作负载时。现有防御措施存在明显不足：内核级防护方案侵入性强、可能导致系统调用不稳定，且未被Linux主线接受；检测方法
Agent Hacks Agent: Autoresearch for Production-Agent Red-Teaming
本文针对生产环境中的 LLM Agent（如 Claude Code 和 Codex）面临的自动红队测试问题展开研究。这类 Agent 处理不受信任的内容、文件、命令和工作区状态，直接导致安全风险的可行性，因此需要持续的红队测试来跟上模型和
9Router: Authenticated RCE via Unvalidated MCP Plugin Arguments
CVE-2026-62312
9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated attacker to achieve arbitra
9Router: Kiro region injection allows authenticated SSRF with Authorization header forwarding
CVE-2026-56678
9Router is an AI router & token saver. Prior to 0.5.6, the Kiro API-key validation endpoint POST /api/oauth/kiro/api-key
9Router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade
CVE-2026-56679
9Router is an AI router & token saver. Prior to 0.5.4, the PATCH /api/settings endpoint writes the entire request body t
9Router: Local-Only Access Gate Bypass in 9router via Host Header SpoofING
CVE-2026-49353
9Router is an AI router & token saver. In 0.4.45 and earlier, 9Router's src/dashboardGuard.js local-only access gate use
9Router: Hardcoded Default fallback JWT Secret Allows Authentication Bypass
CVE-2026-49352
9Router is an AI router & token saver. From 0.2.21 until 0.4.44, 9Router used the hardcoded fallback JWT secret 9router-
9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes
CVE-2026-46339
9Router is an AI router & token saver. From 0.4.30 until 0.4.37, 9Router's src/proxy.js middleware did not protect /api/
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
【EdgeOne】CNAME 域名生成规则调整公告
【EdgeOne】CNAME 域名生成规则调整公告
PyMdown Extensions: Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path
CVE-2026-46338
PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.
Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK
CVE-2026-15737
AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on t
Janssen Project: JWE Request Object Signature Verification Bypass in jans-auth-server
CVE-2026-45795
The Janssen Project is an open-source identity and access management (IAM) platform. Prior to 2.0.0, jans-auth-server ac
moodle-local_o365: Authentication bypass via unverified JWT signature in Teams SSO endpoint
CVE-2026-54733
The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration fo
Cross-Capture Session Data Leakage Due to Shared Mutable State in Looklyloo - PlaywrightCapture
CVE-2026-63175
PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than in
nvm path traversal via a malicious mirror's LTS codename writes outside the alias directory
CVE-2026-15921
Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.32.