Sovereign by necessity? Frontier AI export controls, cyber security, and the limits of national AI capability
本文由两位学者合作撰写，聚焦于前沿人工智能（Frontier AI）出口管制与网络安全之间的交叉问题。文章指出，当前最强大的AI模型仅由两个国家的少数企业生产，而这两国政府已展现出通过法律与政治手段限制他国使用这些系统的能力。例如，2026
2026-08-16 归档
今日共收录 1655 条安全情报，包含 947 个 CVE，388 篇安全通告，以及 62 篇研究论文。
← 返回归档列表Slow and Steady: Preventing MEV with Verifiable Delays
本文针对分布式账本中的最大可提取价值（MEV）问题提出了一种防御机制。MEV 指的是区块生产者通过重新排序、插入或审查交易来提取额外价值的能力，这严重影响区块链的公平性和安全性。论文的核心思想是在交易生成过程中强制引入可验证的延迟，使得区块
Operationalizing Cyber Threat Intelligence with GraphRAG
本文研究如何将网络威胁情报（CTI）报告自动化地转化为可部署的检测规则。传统方法通常只从报告中提取简单的IOC（如恶意IP、域名、文件哈希）并生成阻断列表，但这些指标极易被攻击者快速更改，导致检测很快失效，即网络安全领域常说的'痛苦金字塔'
RAGSieve: Self-Referenced Local Contrast for Knowledge-Poison Detection in Retrieval-Augmented Generation
本文提出RAGSieve，一种针对检索增强生成（RAG）中知识投毒攻击的检测框架。RAG系统依赖外部语料作为证据，攻击者可能通过注入恶意文档来操纵模型输出，使模型倾向于特定错误答案。现有检测方法通常需要可信参考文档、特定攻击类型的先验知识，
Understanding Backdoor Vulnerabilities in Vertical Federated Learning: The Gap Between Research and Practice
该论文系统性地研究了纵向联邦学习（Vertical Federated Learning, VFL）中的后门攻击漏洞，并指出当前学术研究与真实实践之间存在显著差距。VFL允许多个组织在不共享原始数据的情况下，基于同一组实体但互补的特征协同训
Discovering Persistent Behavioural Patterns for Interpretable Blockchain Forensics
该论文提出了一种可扩展、与应用无关的区块链取证分析框架，用于从大规模链上活动中发现持续行为模式。现有方法多为特定应用设计，难以扩展且解释性差。本文通过三个步骤解决这一问题：首先，构造融合合约、代币和市场上下文的行为句子；其次，采用两级嵌入流
VICBench: A Multi-Language Benchmark for Code Vulnerability Detection
在软件安全领域，准确评估漏洞检测工具的效果高度依赖于包含“漏洞诱导提交”（Vulnerability-Inducing Commits, VIC）的基准数据集——即首次将漏洞引入代码库的提交。VIC 对于确定受影响的软件版本范围、追踪漏洞演
Instruction Alignment for Binary Code Representation Learning
二进制代码表示学习是软件安全与逆向工程中的基础性难题，其目标是为二进制函数生成可供机器学习算法使用的嵌入表示。现有主流方法通常聚焦于函数级嵌入，通过对比学习或分类任务捕获不同函数之间的粗粒度语义相似性，但忽视了指令级粒度的对应关系。这种粒度
In the Linux kernel, the following vulnerability has been resolved: qede: sync udp_tunnel ports outside qede_lock in the recovery path A TX timeout on a qede NIC that has VXLA...
CVE-2026-74523
In the Linux kernel, the following vulnerability has been resolved: qede: sync udp_tunnel ports outside qede_lock in th
In the Linux kernel, the following vulnerability has been resolved: ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() ublk_ctrl_add_dev() memcpy()s the userspace...
CVE-2026-74472
In the Linux kernel, the following vulnerability has been resolved: ublk: reset kernel-owned dev_info fields in ublk_ct
In the Linux kernel, the following vulnerability has been resolved: gpio: pch: use raw_spinlock_t for the register lock pch_irq_type() is registered as the irq_chip .irq_set_t...
CVE-2026-74468
In the Linux kernel, the following vulnerability has been resolved: gpio: pch: use raw_spinlock_t for the register lock
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size vc4_overflow_mem_work() points BP...
CVE-2026-74454
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Supply the overflow slot size in BPOS, not
A vulnerability was determined in TRENDnet TEW-WLC100 2.05b02. This affects an unknown function of the file /etc/racoon.conf of the component IKE Phase 1 Aggressive Mode. This m...
CVE-2026-19891
A vulnerability was determined in TRENDnet TEW-WLC100 2.05b02. This affects an unknown function of the file /etc/racoon.
In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT Reject the EXT4_IOC_MOVE_EXT ioctl early if...
CVE-2026-74307
In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4_
In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). syzbot reported use-after-free in nsim_fib4_prep...
CVE-2026-74289
In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't dump dying fib_info in fib_leaf_no
In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). rocker_router_fib_event() calls fib_rule_get...
CVE-2026-74288
In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don't dump dying fib_rule in fib_ru
In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK tipc_sk_conn_proto_rcv() subtracts the peer-supplied connec...
CVE-2026-74282
In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK ti
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: clear opened when stream enable fails On enable, subs->opened is set before the serv...
CVE-2026-72445
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: clear opened when stream ena
In the Linux kernel, the following vulnerability has been resolved: hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero Sashiko reports: In the aspee...
CVE-2026-72394
In the Linux kernel, the following vulnerability has been resolved: hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculati
In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevent invalid cursor access for purged BOs During a page table walk for binding, xe_pt_stage_b...
CVE-2026-72358
In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: prevent invalid cursor access for purged