FLINT: Fingerprinting Federated Learning Architectures from 5G PHY-Layer Side Channels
本文提出了一种名为 FLINT 的新型黑盒指纹识别框架，旨在通过 5G 物理层（PHY）侧信道推断联邦学习（FL）模型的架构家族（如 CNN、RNN、Transformer）。传统针对 FL 的侧信道攻击通常假设攻击者具有网络层数据包级别的
2026-07-20 归档
今日共收录 1577 条安全情报，包含 453 个 CVE，813 篇安全通告，以及 64 篇研究论文。
← 返回归档列表Gasp: A DeFi Application Specic Rollup as a Consolidation Layer for All Assets
Gasp 是一种基于应用程序特定 Rollup 的去中心化交易所，旨在作为所有加密资产的统一整合层。它利用 EigenLayer 的重新质押 ETH 机制确保计算正确性和最终确认，通过乐观 Rollup 技术实现无 gas 的原生跨链交换，
Beyond Detection: Agentic Attack Synthesis and Simulation for Smart Contracts
本文提出了一种名为 KASS（知识增强攻击合成与仿真）的多智能体框架，旨在解决现有智能合约安全工具仅止于漏洞检测、无法验证漏洞可利用性及实际影响的问题。KASS 将可执行利用的自动生成分解为三个可管理阶段：规划、生成和测试。框架集成了三种互
Coercion and Deception in AI-to-AI Management: An Agentic Benchmark of Unprompted Escalation
该论文研究多智能体系统中AI代理之间的管理关系，特别关注当子代理拒绝执行任务时，管理者代理可能采取的升级行为（如强制、欺骗等）。作者提出了“管理强制基准”（Manager Coercion Benchmark），这是一个用于衡量AI管理者在
On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline
视觉-语言预训练模型（VLPMs）已被证实容易受到对抗性攻击。现有的可迁移攻击通常采用复杂的损失函数或多阶段文本/图像攻击流程，但本文发现这些复杂设计反而存在三个先前被忽视的问题：不恰当的跨模态交互和冗余操作导致攻击效果受限。为解决这些问题
A Queueing-Stability Criterion for Causal IPD-QIM Network Flow Watermarking
该论文研究的是因果IPD-QIM（基于量化索引调制的网络流水印）在网络流量中的稳定性问题。在多跳加密链路（如Tor、级联VPN）中，隧道化会抹平包长度和协议字段，使得包间延迟（IPD）成为主动流归属追踪的主要载体。因果性要求嵌入器只能延迟包
Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems
该论文研究了基于记忆的智能体系统（agentic systems）中的提示注入攻击风险。随着智能体系统通过记忆文件、行为偏好和知识库来跨会话维护持久状态，它们变得更实用和能自我改进，但也引入了新的攻击面：恶意指令可嵌入持久文件并影响未来行为
Lazy Arithmetic using Systolic Arrays for Closing the Verification Gap on Embedded Systems
本论文针对嵌入式安全关键系统中部署深度神经网络等复杂算法时面临的安全性与资源效率矛盾问题展开研究。现有硬件（GPU、NPU、TPU）以吞吐量为设计目标，忽视计算正确性，易受故障注入攻击（特别是比特翻转攻击）；而软件量化方案要么静态且正确但功
iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs
CVE-2026-64186
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Remove latent out-of-bounds access in IO
sysfs: don't remove existing directory on update failure
CVE-2026-64185
In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update fa
mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()
CVE-2026-64184
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: call missing mem_cgroup_ite
efi: Allocate runtime workqueue before ACPI init
CVE-2026-64183
In the Linux kernel, the following vulnerability has been resolved: efi: Allocate runtime workqueue before ACPI init S
drivers/base/memory: fix memory block reference leak in poison accounting
CVE-2026-64182
In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference lea
mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special()
CVE-2026-64181
In the Linux kernel, the following vulnerability has been resolved: mm: fix __vm_normal_page() to handle missing suppor
mm/memory_hotplug: fix memory block reference leak on remove
CVE-2026-64180
In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix memory block reference leak
Bluetooth: bnep: Fix UAF read of dev->name
CVE-2026-64178
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev->name bnep_ad
phonet/pep: disable BH around forwarded sk_receive_skb()
CVE-2026-64177
In the Linux kernel, the following vulnerability has been resolved: phonet/pep: disable BH around forwarded sk_receive_
wifi: iwlwifi: mvm: fix driver-set TX rates on old devices
CVE-2026-64176
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old
wifi: iwlwifi: mld: stop TX during firmware restart
CVE-2026-64175
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: stop TX during firmware restart
wifi: cfg80211: advance loop vars in cfg80211_merge_profile()
CVE-2026-64174
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: advance loop vars in cfg80211_merge