iOS 26.6 and iPadOS 26.6
iOS 26.6 and iPadOS 26.6
2026-08-01 归档
今日共收录 1220 条安全情报，包含 330 个 CVE，503 篇安全通告，以及 110 篇研究论文。
← 返回归档列表【TDSQL PostgreSQL 版公有云服务 】停止售卖公告
【TDSQL PostgreSQL 版公有云服务 】停止售卖公告
【大模型服务平台 TokenHub】&【智能体开发平台】& 【云开发 CloudBase】 关于腾讯云 Hy3 preview 模型下线及切换升级的通知
【大模型服务平台 TokenHub】&【智能体开发平台】& 【云开发 CloudBase】 关于腾讯云 Hy3 preview 模型下线及切换升级的通知
Chrome Beta for iOS Update
Hi everyone! We've just released Chrome Beta 152 (152.0.7977.11) for iOS; it'll become available on App Store in the nex
Chrome Beta for Android Update
Hi everyone! We've just released Chrome Beta 152 (152.0.7977.8) for Android. It's now available on Google Play.You can s
Chrome Dev for Android Update
Hi everyone! We've just released Chrome Dev 153 (153.0.7978.2) for Android. It's now available on Google Play.You can se
ToxScreen: Detecting Whether an LLM Has Been Poisoned
该论文研究的是大型语言模型（LLM）在训练阶段被投毒后，防御者如何在现实条件下检测并恢复后门触发器的问题。作者指出，随着LLM被部署到高风险领域，攻击者可能通过污染训练数据植入后门，即在特定触发器触发时使模型产生隐蔽的恶意行为。论文提出的核
ThreatForest: Multi-Agent Attack Tree Generation with Pluggable TTP Framework Mapping
威胁建模对于安全软件开发至关重要，然而对云原生架构的人工分析速度缓慢且需要稀缺的安全专家。本文提出 ThreatForest，一个多智能体系统，能够从源代码仓库生成结构化攻击树，将攻击步骤映射到可插拔的对手战术、技术和程序（TTP）框架（包
FAVA: Formal Authorization for Verified Agents with Evidence-Backed Permission Graphs
大型语言模型智能体在动态环境中自主地将语义推理与复杂系统操作交织在一起，这使得静态的、基于工具级别的权限控制从根本上不足以保障安全。安全授权高度依赖上下文，并依赖于不断演变的运行时状态和数据流。为此，本文提出 FAVA（Formal Aut
IH-Benchmark: A Conflict-Centered Benchmark for Instruction-Hierarchy Robustness in LLM Applications
随着大语言模型（LLM）被集成到各类应用中，模型在收到来自不同优先级（系统提示、用户输入、工具输出）的冲突指令时，其实际遵循行为成为影响可靠部署的关键问题。现有评测基准往往只覆盖单一层级冲突（如系统与用户的直接冲突），或仅改造公开数据集，缺
SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents
随着AI编程助手（如Cursor、Claude Code、GitHub Copilot）在软件工程团队中的广泛部署，开发者经常通过下载领域特定的技能文件（skill files）来定制代理行为，以适配项目API、框架约定和组织工作流。这些复
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments