Next-Gen Identity Security
Next-Gen Identity Security
2026-07-24 归档
今日共收录 841 条安全情报，包含 0 个 CVE，432 篇安全通告，以及 115 篇研究论文。
← 返回归档列表CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain AttacksJul 21, 2026
Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain AttacksJul 21, 2026
Email threat landscape: Q2 2026 trends and insights
In the second quarter of 2026, the continuing effects of Microsoft’s disruption of the Tycoon2FA phishing platform contr
Auth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers
## Summary The exported `getToken()` helper (`next-auth/jwt` and `@auth/core/jwt`) can throw an uncaught exception when
5G-Spector: An O-RAN Compliant Layer-3 Cellular Attack Detection Service.
本论文提出了5G-SPECTOR，一个基于O-RAN（开放无线接入网）架构的层三（L3）蜂窝攻击检测服务。随着5G网络从封闭专有架构向开放标准化的O-RAN架构迁移，移动基础设施的软件定义抽象为安全社区提供了在数据平面和控制平面嵌入安全审计
Hear "No Evil", See "Kenansville"*: Efficient and Transferable Black-Box Attacks on Speech Recognition and Voice Identification Systems.
该论文提出了一种针对自动语音识别（ASR）和说话人识别（SV）系统的高效且可迁移的黑盒对抗攻击方法。作者指出，现有攻击往往需要大量查询或依赖白盒访问，实用性有限。他们提出了一种基于梯度估计的查询高效攻击，使用自然进化策略（NES）来近似模型
Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hiding.
本文针对自然语言生成模型（如GPT）可能被滥用于生成虚假信息、钓鱼邮件等问题，提出了一种名为Adversarial Watermarking Transformer (AWT)的文本水印方法，用于追溯文本来源。AWT是一个端到端的编码器-解
GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networks.
GraphGuard 是一种针对图神经网络 (GNN) 训练数据滥用的检测与对抗方法。随着 GNN 在机器学习即服务 (MLaaS) 平台上的部署，本地训练过程缺乏透明度，可能导致数据所有者知识产权被侵犯。现有方案要么只检测要么只缓解滥用，
Demo: Attacking Multi-Sensor Fusion based Localization in High-Level Autonomous Driving.
本文针对高级别自动驾驶系统中基于多传感器融合（MSF）的定位功能的安全性进行了研究。自动驾驶车辆（AV）需要厘米级定位精度以实现高级驾驶自动化，而全球定位系统（GPS）是室外定位的主要来源。GPS欺骗攻击是一个长期存在且未完全解决的安全问题
Your Censor is My Censor: Weaponizing Censorship Infrastructure for Availability Attacks.
本文提出了一种利用国家层面互联网审查基础设施进行可用性攻击的新方法。作者发现许多审查系统存在“残留审查”特性：即审查者在一次审查事件后，会在一段时间内继续阻止两个端点之间的流量。攻击者利用这一特性，通过发送含有被审查内容的伪造数据包（例如包
Securing Cryptographic Software via Typed Assembly Language.
该论文针对密码学软件在推测执行攻击（如Spectre）下的安全漏洞，提出了一种基于类型化汇编语言（TAL）的防护方案。传统上，密码学开发者通过遵循常量时间编码规范来防止时序侧信道泄漏，但2018年揭示的Spectre攻击表明，即使代码在常规
HIOA-CPS: Combining Hybrid Input-Output Automaton and Game Theory for Security Modeling of Cyber-Physical Systems.
本文针对网络物理系统（CPS）的安全建模问题，提出了一种结合混合输入输出自动机（HIOA）与博弈论的方法。在CPS中，多个子网络由不同的防御者拥有，安全威胁通过攻击图表示，防御者需要在有限预算下合理投资以保护关键资产。作者首先建立了HIOA