GNNIC: Finding Long-Lost Sibling Functions with Abstract Similarity.
本文提出了一种名为GNNIC的图神经网络（GNN）间接调用分析器，旨在解决大型程序（特别是操作系统内核）中调用图生成不准确的问题。间接调用（如函数指针）在编译时无法确定目标，导致传统静态分析产生大量假阳性。现有基于类型分析的方法在处理大规模
2026-07-24 归档
今日共收录 841 条安全情报，包含 0 个 CVE，432 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform...
CVE-2026-56191
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network
9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default...
CVE-2026-63732
9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default password (123456) that authent
9Router before 0.4.72 contains a server-side request forgery (SSRF) vulnerability in the /v1/web...
CVE-2026-63313
9Router before 0.4.72 contains a server-side request forgery (SSRF) vulnerability in the /v1/web/fetch endpoint. The end
The Appriss Insights (Equifax) Victim Information Notification Exchange (VINE) applications allow...
CVE-2026-63359
The Appriss Insights (Equifax) Victim Information Notification Exchange (VINE) applications allow an unauthenticated att
React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)
CVE-2026-53669
This is a follow up to [CVE-2025-68470](https://github.com/remix-run/react-router/security/advisories/GHSA-9jcx-v3wj-wh4
Next.js: Server-Side Request Forgery in Server Actions on custom servers
CVE-2026-64649
## Impact When a Server Action forwards or redirects a request, an attacker can cause the server to send that outbound
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
New msaRAT malware uses Chrome, Edge browsers to route C2 traffic
2026年7月，Chaos勒索软件团伙被发现使用一种名为msaRAT的新型后门恶意软件。msaRAT的核心特点是通过Chrome或Edge浏览器进程路由其命令与控制（C2）通信流量，将恶意流量伪装成正常的浏览器网络活动，从而绕过防火墙和网络
Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge
2026年7月23日，The Hacker News报道了Chaos勒索软件组织使用一种名为msaRAT的新型植入程序，通过受害者的本地浏览器（Chrome或Edge的无头模式）实现命令与控制（C2）通信。该技术由Cisco Talos发现
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass...
CVE-2026-15981
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, a
Alert for CVE-2026-35273
CVE-2026-35273
Alert for CVE-2026-35273
Secure Multiparty Computation of Threshold Signatures Made More Efficient.
该论文针对门限签名（特别是ECDSA）在去中心化应用中的安全高效实现问题展开研究。门限签名的非线性结构给分布式签名带来挑战，现有方案通常需要每对签名者之间进行乘法转加法的秘密份额转换，导致每个签名者的通信开销为O(n)，验证开销为O(n^2
Fingerprinting SDKs for Mobile Apps and Where to Find Them: Understanding the Market for Device Fingerprinting.
这篇论文对移动应用生态中的设备指纹识别行为进行了大规模分析。研究采用市场视角，聚焦于第三方SDK（软件开发工具包）所支持的跨应用追踪。数据集包括来自流行Maven仓库的超过22.8万个SDK、从Google Play商店收集的17.8万个A
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike与Zscaler宣布合作，旨在将持续身份安全集成到零信任访问架构中。此次整合将CrowdStrike Falcon平台的端点检测与响应（EDR）能力与Zscaler的零信任交换（ZTX）平台相结合，实现基于用户身份、设
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike Announces Continuous Identity for AI Agents
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Chromium: CVE-2026-16424 Use after free in GPU
CVE-2026-16424
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-16423 Use after free in UI
CVE-2026-16423
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-16422 Insufficient validation of untrusted input in Certificate
CVE-2026-16422
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.