【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于腾讯云 Qwen3.5-Flash、Qwen3.5-Plus 模型下线及切换升级的通知
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于腾讯云 Qwen3.5-Flash、Qwen3.5-Plus 模型下线及切换升级的通知
2026-08-18 归档
今日共收录 810 条安全情报，包含 28 个 CVE，396 篇安全通告，以及 98 篇研究论文。
← 返回归档列表【大模型服务平台 TokenHub】&【智能体开发平台 ADP】&【云开发 CloudBase】关于腾讯云 DeepSeek-V4 正式版【原厂直供】模型计费调整通知
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】&【云开发 CloudBase】关于腾讯云 DeepSeek-V4 正式版【原厂直供】模型计费调整通知
iOS 26.6.1 and iPadOS 26.6.1
iOS 26.6.1 and iPadOS 26.6.1
iOS 18.7.10 and iPadOS 18.7.10
iOS 18.7.10 and iPadOS 18.7.10
Firewall for AI
Firewall for AI
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives its c
Proof-of-Execution Memory: Defending LLM Agents Against Forged-Reasoning Attacks by Verifying What Actually Happened
本文研究 LLM（大语言模型）智能体的外部记忆被篡改所引发的安全风险。LLM 智能体本身是无状态的，必须依赖外部记忆在步骤间传递上下文；由于智能体默认信任记忆内容，能够写入该记忆的对手即可操纵其行为。论文重点分析了一种名为 FARMA 的攻
Beyond Direct Access: Resource Hijacking in LLM Agents
该论文首次系统性地研究了 LLM Agent 面临的“资源劫持”（Resource Hijacking）安全盲区。以往 Agent 安全研究主要关注指令注入、数据投毒和工具行为滥用，而 Agent 可访问的高价值资源（如计算基础设施、凭据、
A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon_check_session_url of the component Session Validation. Performing a manip...
CVE-2026-19977
该漏洞影响EFM ipTIME A3004T路由器固件版本14.19.0。漏洞位于Session Validation（会话验证）组件中的httpcon_check_session_url函数。该函数可能未能正确验证用户会话的合法性，导致身
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud