When and Where Faults Matter: A Study of Transient Errors in CKKS Multiplication
本文研究同态加密（Homomorphic Encryption, HE）中的瞬时错误（transient errors）对全同态加密（FHE）计算正确性的影响，特别聚焦于未优化的 CKKS（Cheon--Kim--Kim--Song）方案中
2026-08-15 归档
今日共收录 1312 条安全情报，包含 424 个 CVE，492 篇安全通告，以及 116 篇研究论文。
← 返回归档列表Dueling Deep Q-Learning for Intrusion Detection
本文针对传统入侵检测系统（IDS）依赖监督式机器学习方法、难以快速适应新型攻击类型的问题，提出了一种基于奖励的决斗深度Q学习（Dueling Deep Q-Learning）模型。该模型采用决斗网络架构，将Q值预测拆分为状态价值流（valu
Benchmarking Cyberattack Detection in Electric Vehicle Charging Infrastructure with Benign User Updates
电动汽车充电基础设施正日益成为网络攻击的目标，而合法的用户行为——如在充电激活后修改请求的充电能量和离开时间——与充电操纵攻击在界面上高度相似，这给攻击检测带来了独特挑战。现有方法往往将任何请求修改视为异常，导致高误报率，无法区分恶意操纵与
A Lightweight Fault-Detection Scheme for Barrett Modular Multiplication Using Multiple Conditional Reduction Paths
格基后量子密码（PQC）与全同态加密（FHE）中的多项式乘法是资源、时间和能量最关键的运算之一。Barrett 模乘（BMM）因其硬件友好的特性和高效的模归约能力，在 PQC（如 Kyber、Dilithium）和 FHE（如 BGV、BF
Synthesizing Probabilistic Saturating Counters with Differentially Private Formal Guarantees
现代处理器的分支预测器利用饱和计数器来提升指令级并行性，但传统饱和计数器是确定性的，容易受到侧信道攻击：攻击者可通过操作计数器状态并观察缓存行为（如Prime+Probe）推断受害进程的分支方向。为缓解该泄漏，已有研究提出概率饱和计数器（P
SegPAR: Class-Centric Decision-Based Sparse Attack for Semantic Segmentation
本文聚焦于语义分割任务中的决策黑盒稀疏攻击问题。尽管稀疏决策黑盒攻击在分类领域已有研究，但在语义分割中尚缺乏系统性探索。作者首先将分类域中最具代表性的决策黑盒稀疏攻击方法改编至语义分割场景，构建了该未充分研究区域的基准测试。通过基准分析，发
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-18932
CVE-2026-18932 已被其 CVE 编号机构（CNA）正式拒绝或撤回。根据 NVD 提供的元数据，该编号仅包含一条“Rejected reason”说明，未附有任何漏洞描述、CVSS 评分、EPSS 概率、受影响产品或厂商信息。同
Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC id_tokens by exploiting the m...
CVE-2026-73683
Laravel Socialite是一个流行的社交登录OAuth库，其Facebook提供者存在一个认证绕过漏洞（CVE-2026-73683）。漏洞根因在于FacebookProvider.php中的getUserByOIDCToken(
Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 - Multiple state changing operations in the frontend are callable without a CS...
CVE-2026-67366
CVE-2026-67366 是 Joomla 扩展 iCagenda 中的一个跨站请求伪造（CSRF）漏洞。iCagenda 是 Joomla 平台上常用的活动管理与注册插件。该漏洞影响 iCagenda 2.0.0-4.0.11 之前的
Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injection in mod_icagenda_calendar (iCagenda), reachable via com...
CVE-2026-67365
Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injecti
Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1.
CVE-2026-64887
Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-39925
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1.
CVE-2026-34492
External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue
Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63.
CVE-2026-27871
Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic At
PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbit...
CVE-2026-19910
PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnera
PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affecte...
CVE-2026-19909
PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows networ
PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information and modify configurati...
CVE-2026-19908
PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted direc...
CVE-2026-18554
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due t
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal.
CVE-2026-18178
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an ...
CVE-2026-17227
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due t