O-Ring and K-Star: Efficient Multi-party Private Set Intersection.
未提供论文摘要，无法生成详细摘要。
2026-07-30 归档
今日共收录 1598 条安全情报，包含 743 个 CVE，444 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Your Firmware Has Arrived: A Study of Firmware Update Vulnerabilities.
（暂无可用摘要）
ADVERSARIAL: And-Inverter Graph-Assisted Hardware Trojan Detection At Scale
该论文针对现代系统级芯片（SoC）中硬件木马（HT）检测的可扩展性问题提出了一种新颖方法。由于SoC包含数亿至数百亿门电路，现有HT检测方法因规模庞大而不可行。作者将平铺的门级网表建模为以与-逆变图（AIG）表示的布尔网络，其中所有内部节点
InkShield: Writing Style Protection Against Unauthorized Handwriting Mimicry
该论文聚焦于手写风格被恶意模仿的防御问题。攻击者可以利用公开的手写笔记或签名样本，通过基于深度学习的手写生成器复制目标人物的笔迹，从而伪造推荐信、授权书等文档，导致文书欺诈和身份冒用。现有的图像编辑防御方法（如对抗性扰动）主要针对具有复杂背
Defending Against Backdoor Attacks via Alignment Checking in Model-Contrastive Federated Learning
联邦学习（FL）因其分布式特性在边缘计算场景中易受后门攻击。现有防御方法通常忽略良性本地更新之间的统计异质性以及后门攻击的隐蔽性，导致效果有限。为此，本文提出FedDAB，一种两阶段防御方法，将局部对比正则化与对齐检查相结合。第一阶段，Fe
CDN Tsunami: Exploiting HTTP/3-HTTP/1.1 Conversion for DoS Attacks
该论文首次系统研究了针对 CDN 上 HTTP/3 协议部署的拒绝服务（DoS）攻击。核心发现是：当 CDN 使用 HTTP/3 而源站仍采用 HTTP/1.1 时，攻击者可利用两种协议之间的差异进行流量放大——将少量来自攻击者的 HTTP
E-MagDiP: Electro-Magnetic based Differential Privacy for EEG based Community Sensing
该论文提出了一种名为E-MagDiP的新型框架，旨在解决基于脑电图（EEG）的社区感知项目中的隐私问题。EEG社区感知项目通过聚合脑数据来获取学生或员工的注意力水平等洞察，但EEG信号包含敏感个人信息，存在隐私泄露风险。差分隐私（DP）是一
Denial of Deadline: Network-Driven Accuracy Collapse in Distributed Inference Pipelines
该论文揭示了分布式推理管道中一种新型攻击面——工作负载攻击。在现代AI推理系统中，通常采用双路径架构：快速路径（Fast Path）在本地或轻量模型上快速返回预测以满足延迟截止时间，慢速路径（Slow Path）则在远程更强硬件上运行高计算
TRACE-CTI: Auditable Post-Extraction Governance of TTP Claims with Knowledge Graphs
安全运营中心（SOC）越来越依赖自动化工具将网络威胁情报（CTI）报告映射到MITRE ATT&CK框架，但提取器的输出仍然存在错误，且通常不附带证据、溯源和验证历史，导致难以判断单个映射的可信度。本文提出TRACE-CTI，一个事后提取声
EXE-Bench: Ranking the Tradeoffs of AI-based Windows Malware Detectors for Real-World Usability
该论文指出现有基于AI的Windows恶意软件检测器缺乏系统性的评估方法，导致无法确定哪种模型适合实际部署。现有评估存在四个主要缺陷：1）训练和测试数据不统一；2）未考虑时间维度，无法检验模型随时间推移的性能衰减；3）缺少对抗攻击下的安全性
QUIC-TRIP: A Triple-Redundant Journey Toward Secure Substation Communications
现代电力系统依赖实时变电站通信协议（如R-GOOSE）进行关键控制和保护功能，但这些协议缺乏内置安全特性，优先考虑可用性而非机密性和完整性，因此容易遭受虚假数据注入和拒绝服务攻击。当通信通过广域网或公共网络传输时，这一脆弱性进一步加剧。为应
There Will Be Spam: Characterizing State-Invariant Transactions and Speculative MEV
本文研究了区块链上的状态不变交易（state-invariant transactions），即那些在包含或移除后除了交易费外不会改变区块链最终状态的交易。这类交易被认为是链上垃圾，因为它们消耗执行、带宽、存储和区块空间，却不贡献于账本最终
Bridging the Epistemic Gap in the Invisible Internet: Extended Mathematical Modeling and Empirical Characterization of I2P Topology
本文针对隐形互联网项目（I2P）的拓扑结构进行了深入研究。I2P是一个去中心化的点对点网络，旨在支持安全且对抗性的通信，对网络安全和国家安全具有重要影响。其全局拓扑结构由数千个独立的节点选择决策涌现而成，形成了以枢纽节点为中心的复杂结构，难
On a necessary condition for the matching cryptosystem stability
该论文研究了匹配密码系统的稳定性问题，提出了一种基于有限域上图的权重向量函数构建公钥和私钥的密码系统。公钥包含一个图和边上的权重向量函数（值取自有限域），私钥则是一个特殊的权重函数，使得相应的交替加权路径问题可以在多项式时间内求解。论文考虑
Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads
CVE-2026-66066
Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers re
Inappropriate implementation in Media Router in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium se...
CVE-2026-17852
Inappropriate implementation in Media Router in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass
undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the application after a retry or resume of a partial resp...
CVE-2026-16728
undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to
The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initia...
CVE-2026-12935
The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based b
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device us...
CVE-2026-20316
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenti
Kong Operator's embedded Kong Kubernetes Ingress Controller (KIC) allows a user with namespace-scoped Secret creation privileges to cause a cluster-wide ingress configuration de...
CVE-2026-16543
Kong Operator's embedded Kong Kubernetes Ingress Controller (KIC) allows a user with namespace-scoped Secret creation pr