In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: fix...
CVE-2026-64164
In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: fix sleep while in atomic conte
2026-07-20 归档
今日共收录 1577 条安全情报，包含 453 个 CVE，813 篇安全通告，以及 64 篇研究论文。
← 返回归档列表In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix...
CVE-2026-64179
In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix potential memory leaks in ipc_
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix write streaming...
CVE-2026-64158
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix write streaming disablement if fd open O
In the Linux kernel, the following vulnerability has been resolved: mm/memory: fix spurious...
CVE-2026-64131
In the Linux kernel, the following vulnerability has been resolved: mm/memory: fix spurious warning when unmapping devi
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate...
CVE-2026-64097
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate GPIO pin LUT table size b
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker...
CVE-2026-64100
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVE_LOCKING
ADS-C: Antidistillation Sampling for Classification
该论文研究了分类模型中的反蒸馏采样问题。知识蒸馏攻击中，攻击者通过查询目标分类器的预测接口，利用返回的概率向量训练一个替代模型，从而窃取模型功能。此前针对大语言模型提出的反蒸馏采样方法通过输入相关的梯度导向扰动来防御此类攻击，但该方法在分类
The Distributed Open-Source Vulnerability Ecosystem
本文研究了开源软件漏洞生态系统中不同漏洞扫描器对同一软件资产报告结果不一致的问题。尽管存在公开的漏洞信息标准（如CVE、CPE），但不同扫描器往往产生矛盾的结果。作者指出，这种不一致性并非仅源于数据源或扫描器实现差异，而是在漏洞信息从创建、
FlowGuard: From Signals to Evidence for MCP Security Detection
本文提出了 FlowGuard，一个基于证据的 MCP（模型上下文协议）安全检测系统。MCP 允许 LLM 代理与外部工具交互，但现有安全扫描器主要依赖语义信号（如字符串模糊匹配）而非实际执行行为，导致误报。例如，看似凭证的字符串可能只是占
Routing Ceilings Are Domain-Independent: Structural Prior Injection in Code Security Vulnerability Detection
本文研究了大型语言模型（LLM）在代码安全漏洞检测中的路由天花板现象。作者基于先前的数学推理研究（SAIR）假设，将结构先验（即“小抄”）注入提示词，以提升模型在特定分布下的漏洞检测能力。实验使用了三个LLM（GPT-OSS-120B、Ll
Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, the Meshtastic GitHub repository's main_matrix.yml workflow is triggered by pull_request_...
CVE-2026-44359
Meshtastic 是一个开源网状网络解决方案。在版本 2.7.21.1370b23 之前，其 GitHub 仓库的 main_matrix.yml 工作流存在严重安全漏洞。该工作流由 pull_request_target 事件触发，多
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments