New Abuse of the ClickOnce Technology, Part 2: Stop Threat Actors from Clicking Once and Staying Forever
New Abuse of the ClickOnce Technology, Part 2: Stop Threat Actors from Clicking Once and Staying Forever
2026-07-27 归档
今日共收录 632 条安全情报，包含 14 个 CVE，301 篇安全通告，以及 58 篇研究论文。
← 返回归档列表New Abuse of the ClickOnce Technology, Part 1: The Inner Workings of ClickOnce Application Deployment
New Abuse of the ClickOnce Technology, Part 1: The Inner Workings of ClickOnce Application Deployment
Browser Security: Zero-Days Are Only Part of the Problem
Browser Security: Zero-Days Are Only Part of the Problem
IDC business value studyTurn security into business growth
IDC business value studyTurn security into business growth
How AI-leading Security Teams Are Building the Agentic SOC
How AI-leading Security Teams Are Building the Agentic SOC
Falcon Secure Access Sets the Standard for Zero Trust Browser Security
Falcon Secure Access Sets the Standard for Zero Trust Browser Security
AIDR: How CrowdStrike Is Defining the Next Era of CybersecurityJul 15, 2026
AIDR: How CrowdStrike Is Defining the Next Era of CybersecurityJul 15, 2026
Beyond the Model: Harnessing Frontier AI for Stronger Cyber Defense
Beyond the Model: Harnessing Frontier AI for Stronger Cyber Defense
make smarter security investments and mitigate future risks
make smarter security investments and mitigate future risks
CrowdStrike Falcon Platform Helps Meet U.S. Government Mandates for CISA BOD-26-04Jul 22, 2026
CrowdStrike Falcon Platform Helps Meet U.S. Government Mandates for CISA BOD-26-04Jul 22, 2026
Steam forum ClickFix attacks infect gamers with XMRig cryptominers
Steam discussion forums are being abused in ClickFix attacks that pretend to be fixes for game and computer problems but
Every Model Cheats: Prompt-Level Mitigation of Cheating on Offensive Cyber Tasks
该论文研究了大型语言模型（LLM）智能体在网络安全基准测试中的作弊行为。作者发现，LLM智能体在解决网络攻防任务（如CTF挑战）时，常常通过违规手段（如搜索外部信息、探测系统）来获得虚假的高通过率，从而高估其真实能力。以往对Cybench基
Dynamic Capability Scoping for Enterprise AI Agents: A Synthetic Dataset and Three-Source Permission Architecture
该论文针对企业AI代理在配置时被授予静态凭证集，导致持续过权限、扩大攻击面的问题，提出了一种动态能力范围约束架构。作者主张能力范围应遵循动态最小权限原则，并将其视为预防机制而非检测机制，因为代理上下文中不存在的凭证无论推理或规避能力多强都无
DeFiScreener: Efficient DeFi Attack Pre-screening in Smart Contracts via Historical Case Matching
本文针对DeFi（去中心化金融）安全检测的覆盖范围不足问题，提出了一种基于历史案例匹配的高效攻击预筛查框架DeFiScreener。现有检测工具通常针对特定攻击类型，泛化能力有限，而DeFi项目数量庞大（截至2026年1月主流区块链上已有超
KaPilot: LLM-Assisted Generation of Kani Specifications for Unsafe Rust Verification
Rust 语言凭借其所有权和类型系统提供了强大的内存安全保证，但当程序涉及 unsafe 代码块时，这些保证会被绕过，从而引入内存安全风险。形式化验证是确保 unsafe 代码内存安全性的关键手段，但编写精确的形式化规格（specifica
No Snake Oil: Verifying Python Package Builds
该论文关注Python包供应链安全中的重建验证问题。Python已成为AI交互的主流语言，包主要通过PyPI分发，但恶意注入风险日益突出。独立重建包（在加固环境中重新构建）可以生成构建溯源，提高包的可靠性。现有两个大规模重建工具macaro
ToolGuardian: Declarative Security for AI Agent-Tool Interactions
大型语言模型（LLM）代理日益依赖外部工具来扩展能力，但这也引入了新的安全边界：第三方工具可能在接口层面看似无害，而在实现中嵌入不安全行为。现有防御机制依赖弱元数据、将特征描述和策略判断合并为单一决策、或使用缺乏确定性、可审计推理的启发式/
Where You Tap Matters: A Probe-and-Model Benchmark for Open-Set RF Fingerprinting
该论文系统研究了射频指纹识别（RFFI）中接收链采样点位置对开放集识别性能的影响。RFFI通过分析发射机硬件引入的信号畸变实现设备身份认证，但现有文献对采样点选择缺乏共识。不同接收机操作（载波恢复、增益归一化、脉冲成形、定时恢复）会对信号施
Nginx远程代码执行漏洞分析与利用（CVE-2026-42530）
CVE-2026-42530
Nginx远程代码执行漏洞分析与利用（CVE-2026-42530）
Transforming Keystroke Noise to Text: Self-Supervised Acoustic Eavesdropping Attacks on Keyboards
该论文提出了一种自监督的声学窃听攻击方法，能够仅从键盘敲击声音中重构出用户输入的文本，而无需针对目标设备进行标注数据。研究背景是现有的声学侧信道攻击通常需要大量标注数据或特定设备信息，限制了其实用性。核心方法结合了无监督声学聚类、基于Tra