Your Compiler is Backdooring Your Model: Understanding and Exploiting Compilation Inconsistency Vulnerabilities in Deep Learning Compilers.

该论文首次揭示了深度学习编译器设计中的一类根本性安全漏洞：编译不一致性漏洞。作者发现，即使是官方未修改的编译器，也可能在编译过程中悄无声息地改变模型的语义，从而引入隐藏后门。研究从对抗和自然两个场景展开。在对抗场景下，作者构造了良性模型，其

历史摘要 · 未重新核验 · IEEE S&P

Concretely-Efficient Multi-Key Homomorphic Secret Sharing and Applications.

本文提出并实现了首个具体高效的（concretely-efficient）多密钥同态秘密共享（MKHSS）方案，基于与 Couteau 等人（EUROCRYPT 2025）相同的 DCR 假设。MKHSS 允许各方在各自独立密钥下编码输入，

历史摘要 · 未重新核验 · IEEE S&P

deepSURF: Detecting Memory Safety Vulnerabilities in Rust Through Fuzzing LLM-Augmented Harnesses.

本文提出 deepSURF，一个结合静态分析与大语言模型（LLM）引导的模糊测试 harness 生成工具，专门用于检测 Rust 库中 unsafe 代码的内存安全漏洞。Rust 语言虽然默认保证内存安全，但允许通过 unsafe 代码块

历史摘要 · 未重新核验 · IEEE S&P

Coral: Fast Succinct Non-Interactive Zero-Knowledge CFG Proofs.

该论文提出了一种名为Coral的新型零知识证明系统，专注于快速、简洁且非交互的上下文无关文法（CFG）证明。零知识证明允许一方（证明者）向另一方（验证者）证明某个陈述的真实性，而不泄露任何额外信息。现有系统在处理CFG时存在效率低或交互复杂

历史摘要 · 未重新核验 · IEEE S&P

CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access

CrowdStrike与Zscaler宣布合作，将持续身份安全与零信任访问相结合。该合作旨在通过整合CrowdStrike Falcon平台的端点检测与响应（EDR）能力与Zscaler的零信任架构，实现用户身份和设备的持续验证与授权。具体

历史摘要 · 未重新核验 · CrowdStrike

CrowdStrike Announces Continuous Identity for AI Agents

2026年7月18日，CrowdStrike宣布推出“Continuous Identity for AI Agents”功能。该功能旨在为AI代理（如自动化脚本、机器人、大型语言模型等非人类身份）提供持续的身份验证和访问控制，防止身份滥用

历史摘要 · 未重新核验 · CrowdStrike

Citrix NetScaler 内存泄漏(CVE-2025-5777)

CVE-2025-5777

Citrix NetScaler 内存泄漏(CVE-2025-5777)

历史摘要 · 未重新核验 · 知道创宇 / Seebug

Chromium: CVE-2026-15905 Use after free in Aura

CVE-2026-15905

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15904 Use after free in Ozone

CVE-2026-15904

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15903 Out of bounds read and write in V8

CVE-2026-15903

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15902 Use after free in Cast

CVE-2026-15902

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15901 Use after free in Network

CVE-2026-15901

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15900 Use after free in GPU

CVE-2026-15900

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15899 Use after free in CameraCapture

CVE-2026-15899

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15776 Type Confusion in V8

CVE-2026-15776

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15775 Insufficient policy enforcement in V8

CVE-2026-15775

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15774 Use after free in Skia

CVE-2026-15774

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15773 Use after free in Core

CVE-2026-15773

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15772 Use after free in GPU

CVE-2026-15772

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

Chromium: CVE-2026-15771 Insufficient validation of untrusted input in Media

CVE-2026-15771

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC