Beyond the Model: Harnessing Frontier AI for Stronger Cyber Defense
Beyond the Model: Harnessing Frontier AI for Stronger Cyber Defense
2026-08-17 归档
今日共收录 803 条安全情报，包含 111 个 CVE，370 篇安全通告，以及 71 篇研究论文。
← 返回归档列表make smarter security investments and mitigate future risks
make smarter security investments and mitigate future risks
Inside Astaroth's New Spambot Component
Inside Astaroth's New Spambot Component
Falcon Platform IOAs Arrive in Falcon Next-Gen SIEM to Identify New Threats
Falcon Platform IOAs Arrive in Falcon Next-Gen SIEM to Identify New Threats
CrowdStrike 2026 Threat Hunting Report: Exploitation Window Closes as AI Use Accelerates
CrowdStrike 2026 Threat Hunting Report: Exploitation Window Closes as AI Use Accelerates
Secure Agent Harness Execution: Preventing EscapeAug 04, 2026
Secure Agent Harness Execution: Preventing EscapeAug 04, 2026
Expanding AI Benchmarks in Cybersecurity Beyond Vulnerability DiscoveryAug 06, 2026
Expanding AI Benchmarks in Cybersecurity Beyond Vulnerability DiscoveryAug 06, 2026
CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
Google is a Leader in the IDC MarketScape: Worldwide Cybersecurity Consulting Services 2024 Vendor Assessment
Google is a Leader in the IDC MarketScape: Worldwide Cybersecurity Consulting Services 2024 Vendor Assessment
August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEsAug 11, 2026
August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEsAug 11, 2026
SafePal data breach impacts 39,798 customers, stolen info for sale
Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a fla
Anthropic confirms Claude is down in major outage affecting multiple services
Claude is experiencing a major outage, with users reporting login problems and degraded performance across several Anthr
Large-scale DDoS attacks disrupted Threema secure messaging service
Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service earlier this week, c
New AmnesiaStealer macOS malware hijacks browser sessions via remote control
A new information-stealing malware called AmnesiaStealer, which targets macOS users via ClickFix attacks, includes a str
Does Fixing Break Security? An Empirical Study of Security Degradation in Iterative LLM-Driven Infrastructure-as-Code Repair
本文针对迭代式大语言模型（LLM）驱动的 Infrastructure-as-Code（IaC）修复过程中的安全退化问题进行了实证研究。研究背景是：当前主流做法采用迭代反馈循环来改进 LLM 生成的 IaC 配置，例如使用 Checkov
A Four-Axis Trustworthiness Benchmark for LLM-as-Judge in Principle-Based Regulation
基于原则的监管（如英国FCA的规则）依赖“公平、清晰、不误导”等主观标准，难以用二元谓词自动检查。随着LLM-as-judge被用于此类评估，其自身可信度成为关键问题。本文提出从四个轴衡量LLM裁判：准确性、释义鲁棒性、对抗鲁棒性和校准。作
Extracting and Verifying Illicit Bitcoin Addresses from Underground Forum Discussions
本论文提出并实现了一个可复现的流水线，用于从地下犯罪论坛 HackForums 中提取并验证与非法交易相关的比特币地址。现有的比特币标记数据集大多依赖于社区举报、区块链启发式规则、事件专项收集或商业标注流程，这些构建方法通常不可公开复现，且
Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents
随着大语言模型（LLM）代理的操作能力不断扩展，其引入的安全威胁也日益复杂。运行时防御通过在代理执行循环中集成安全机制，已成为缓解这些风险的有效方法。然而，现有的运行时防御严重依赖人工设计的干预措施，缺乏构建和维护这些防御的原则性框架。本文
Finding Vulnerabilities via LLM-Augmented Semantics-Aware Type-Checking
本文提出了一种基于语义感知的软件漏洞检测方法 SETYPE，旨在解决传统静态分析仅依赖语法规则建模漏洞的局限性。传统方法通常由安全专家手工编写不安全编码模式的规则，但这类规则往往忽略代码中的深层语义信息，例如变量名和函数名的含义。随着软件系
STINER: Automated Extraction of Strategic Cyber Threat Intelligence from X
该论文提出了一种名为 STINER 的方法，用于从社交媒体平台 X（原 Twitter）自动提取战略性网络威胁情报（CTI）。战略性 CTI 关注高层级洞察，例如识别受攻击的行业、将攻击归因于特定勒索软件团伙、评估数据泄露规模等。X 平台目