iOS 26.6 and iPadOS 26.6
iOS 26.6 and iPadOS 26.6
2026-08-16 归档
今日共收录 1655 条安全情报，包含 947 个 CVE，388 篇安全通告，以及 62 篇研究论文。
← 返回归档列表MFSA 2026-73Security Vulnerabilities fixed in Firefox for Android 153.0.3
MFSA 2026-73Security Vulnerabilities fixed in Firefox for Android 153.0.3
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于腾讯云 Qwen3.5-Flash、Qwen3.5-Plus 模型下线及切换升级的通知
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于腾讯云 Qwen3.5-Flash、Qwen3.5-Plus 模型下线及切换升级的通知
Beta Channel Update for ChromeOS / ChromeOS Flex
The Beta channel is being updated to OS version 16765.19.0 (Browser version 152.0.7977.39) for most ChromeOS devices.If
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】&【云开发 CloudBase】关于腾讯云 DeepSeek-V4 正式版【原厂直供】模型计费调整通知
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】&【云开发 CloudBase】关于腾讯云 DeepSeek-V4 正式版【原厂直供】模型计费调整通知
Firewall for AI
该情报来源于Akamai官方产品页面，介绍其推出的AI安全防护产品'Firewall for AI'。页面未披露任何具体攻击事件、漏洞编号或威胁组织，仅从产品功能角度说明其旨在保护AI应用免受分布式拒绝服务（DDoS）攻击和僵尸网络（bot
New Evooo1Bot Linux botnet turns routers into traffic relay nodes
A new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turn
InterSAGE: The Secure and Verifiable Interoperability Protocol for An Internet of Agents
随着大语言模型（LLM）驱动的智能体（Agent）跨越组织边界发现对等节点、调用工具并委派任务，"智能体互联网"（Internet of Agents）逐渐兴起。然而，现有协议（如 MCP、A2A、ANP、AG-UI）主要定义智能体如何交换
Dissecting Software Graphs: Structural Insights for Driver-Guided Fuzzing
本论文针对多驱动（multi-driver）模糊测试场景下，执行模式对模糊测试效果的影响展开实证研究。许多软件通过命令行选项、子命令或配置标志暴露多种执行模式，此时模糊测试不仅依赖输入突变，还取决于所调用的模式。然而，现有评估多聚焦于覆盖率
A security vulnerability has been detected in Tenda AC10 16.03.10.09_multi_TDE01. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manip...
CVE-2026-19924
CVE-2026-19924 是 Tenda AC10 路由器固件版本 16.03.10.09_multi_TDE01 中发现的严重安全漏洞。该漏洞位于 httpd 组件的 R7WebsSecurityHandler 函数中，其逻辑缺陷导致
SiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji function that fails to sanitize codepoint branch output. Attackers can craft docu...
CVE-2026-73053
CVE-2026-73053 是思源笔记（SiYuan）v3.7.4 之前版本中存在的一个跨站脚本（XSS）漏洞，具体位于 unicode2Emoji 函数中。该函数在处理 Unicode 码位分支输出时未能进行有效的清理，导致攻击者可以构
SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them directly into option elements via innerHTML in the sort menu. Attackers can in...
CVE-2026-73052
CVE-2026-73052 是笔记软件 SiYuan（思源）在 v3.7.4 之前版本中存在的一个高危存储型 XSS 漏洞。漏洞根源在于属性视图（attribute-view）的字段名在存储时未进行 HTML 转义，随后在排序菜单中通过
SiYuan versions before v3.7.4 fail to validate or escape the color field in attribute-view select options, allowing stored cross-site scripting through eight unescaped render si...
CVE-2026-73050
CVE-2026-73050是开源笔记应用SiYuan（思源）中存在的一处存储型跨站脚本（XSS）漏洞。该漏洞影响v3.7.4之前的版本，根因在于属性视图（Attribute View）中select选项的颜色字段缺少充分的输入验证与输出转
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense