【大模型服务平台 TokenHub】&【智能体开发平台 ADP】&【云开发 CloudBase】关于腾讯云 DeepSeek-V4-Flash 正式版及其原厂直供版模型发布进展的更新通知
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】&【云开发 CloudBase】关于腾讯云 DeepSeek-V4-Flash 正式版及其原厂直供版模型发布进展的更新通知
2026-08-10 归档
今日共收录 768 条安全情报，包含 81 个 CVE，374 篇安全通告，以及 66 篇研究论文。
← 返回归档列表SoK: Cryptographic Key Recovery for Cryptoasset Custody and Financial Technologies
本文是一篇关于加密资产托管与金融技术中密钥恢复的系统化知识综述（SoK）。研究背景在于：加密资产系统通常将密钥控制与资金控制绑定，丢失钱包种子、托管份额、硬件设备或智能账户凭据会导致资金无法使用，而恢复机制若被攻破则可能导致资产被盗。然而，
Statistical Analysis of Executability and Program Equivalence in Decompilation for IoT Vulnerability Detection
本论文针对物联网(IoT)固件漏洞检测中的反编译质量问题展开研究。IoT 设备处理敏感隐私信息，固件漏洞检测至关重要。反编译是关键技术，而大语言模型(LLM) 能够生成可读性高且重编译成功率高的反编译代码，因此近期受到关注。然而，LLM 基
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
DP-Sniper: Black-Box Discovery of Differential Privacy Violations using Classifiers.
DP-Sniper 是一种实用的黑盒方法，用于自动发现差分隐私（Differential Privacy, DP）实现中的违规行为。差分隐私是保护数据隐私的严格数学定义，但实际实现常因浮点误差、算法简化或实现缺陷而违背其保证。DP-Snip
SoK: Computer-Aided Cryptography.
这篇 SoK（系统化知识）论文对计算机辅助密码学（Computer-Aided Cryptography）领域进行了跨领域的系统化梳理。计算机辅助密码学是一个活跃的研究方向，致力于开发和应用形式化、机器可检查的方法来设计、分析和实现密码学协
Util: : Lookup: Exploiting Key Decoding in Cryptographic Libraries.
密码学库的安全性一直聚焦于加密原语的恒定时间实现，以抵御微架构侧信道攻击。然而，本研究揭示了一个被普遍忽视的攻击面：处理密钥数据的工具函数也可能泄露机密信息。作者重点分析了多个广泛使用的密码学库（如 Microsoft CNG 和 Bota
PCAT: Functionality and Data Stealing from Split Learning by Pseudo-Client Attack.
本文提出了一种针对分割学习（Split Learning）框架的新型攻击方法，命名为伪客户端攻击（Pseudo-Client Attack, PCAT）。分割学习是一种保护隐私的分布式机器学习范式，其中客户端在本地保留部分模型层，仅将中间激
Rethinking System Audit Architectures for High Event Coverage and Synchronous Log Availability.
本文针对现有系统审计架构在事件覆盖率和日志可用性之间的两难问题展开研究。传统审计机制通常以内核模块或系统服务的形式实现，在记录高细粒度事件时往往面临严重的性能开销，导致系统管理员必须在“记录更多事件”与“保证业务响应速度”之间做出取舍。作者