An Adaptive Gradient Clipping and Noise Injection Mechanism for Differentially Private Federated Learning
本文提出了一种面向差分隐私联邦学习（DPFL）的自适应梯度裁剪与噪声注入机制 DDP-SA-adaptive。在联邦学习中加入差分隐私保护时，静态梯度裁剪在整个训练过程和所有模型层使用固定阈值，若阈值过小会导致过度裁剪而损失模型精度，若阈值
2026-08-19 归档
今日共收录 2403 条安全情报，包含 1575 个 CVE，408 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Multivalued Consensus: General Adversaries Require More Communication
该论文深入研究了一般性（非阈值）敌手模型下的 n 方容错共识问题。传统共识研究多假设敌手能力用阈值描述（如最多 f 个拜占庭节点），而本文考虑更一般的敌手结构（adversary structure），即哪些节点子集可被敌手腐化。论文基于有
Unclonable encryption from BB84 states: a simultaneous Goldreich-Levin reduction
本文提出了一种面向纠缠双方的“同时 Goldreich-Levin 归约”方法，并以此统一了不可克隆加密的安全性提升路径。Goldreich-Levin 归约是密码学中的经典工具，通常将“能对隐藏串 m 与随机挑战 r 的内积进行猜测”的算
On the Pseudo-Mixing of Kac's Walk
本文研究 Kac 游走在 SO(n) 上的伪混合性质，该问题由 Vaikuntanathan 和 Zamir 的猜想所启发。伪混合关注的是：短时间演化后的分布是否能让低复杂度的测试者无法与 Haar 测度区分。作者首先证明了前 k 列在 W
Advancing Inclusivity in Cybersecurity Education: Integrating Intersectionality to Enhance Student Engagement in Australian Higher Education Curriculums Strategies, Barriers, and Future Directions
本文研究澳大利亚高等教育中网络安全教育包容性不足的问题，尤其关注女性、性别多元化群体以及文化和语言多样性（CALD）背景学生。研究表明，这些群体因语言障碍、网络安全教育资源有限和社会孤立等因素，更容易遭受网络钓鱼等网络犯罪侵害，同时他们在网
The Last Mile of Deepfake Speech Detection: An Industry-Academia Experience Report
本文以工业界与学术界合作的视角，报告了在深度伪造语音检测系统实际部署中所遇到的关键障碍。虽然当前公开基准在领域内评估中可达到低于1%的错误率，但在面对未见攻击、通道失配以及数据分布偏移时，检测性能显著下降。作者基于与商业说话人识别厂商Pho
A vulnerability was found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected is the function execSqlText/previewSqlText of the file DesignerController.java of the compone...
CVE-2026-75979
CVE-2026-75979 是 xianrendzw EasyReport 组件中发现的一个安全漏洞，影响版本至 2.0.17.0522_Beta。漏洞位于 DesignerController.java 文件的 execSqlText/
libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.1, a crafted uncompressed HEIF image using generic zlib unci full-item compression can crash a...
CVE-2026-62292
libheif 是一个用于解码和编码 HEIF 与 AVIF 图像格式的开源库。在 1.19.0 至 1.23.1 版本中，存在一个由特制的未压缩 HEIF 图像触发的安全漏洞。该图像使用通用的 zlib "unci" 全文压缩方式，当应用
4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows any authenticated user to enumerate account information for every user through GET...
CVE-2026-53959
4gaBoards 是一个用于实时项目管理的看板系统。在 3.3.9 版本之前，存在一个访问控制缺陷，允许任何已认证用户通过 GET /api/users 接口枚举所有用户的账户信息，并通过 GET /api/users/:id 接口获取任
Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-path-at-time IPC handler in src/ipc/player.js accepts ...
CVE-2026-52876
Streambert 是一款基于 Electron 开发的跨平台桌面应用程序，主要用于流媒体播放和视频内容下载。在 2.6.0 版本之前，该应用存在一个安全漏洞，涉及 IPC（进程间通信）处理函数 open-path-at-time（位于
Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.6.0, the perform-scheduled-backup IPC handler in src/ipc/storage.js takes se...
CVE-2026-52875
Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.6.0, the perform-sc
Streambert is a cross-platform Electron Desktop App to stream and download video content. From version 2.5.0 until version 2.6.0, the wyzie-open-redeem IPC handler in index.js c...
CVE-2026-52873
Streambert is a cross-platform Electron Desktop App to stream and download video content. From version 2.5.0 until versi
Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.5.0, the downloadSubtitleFile utility in src/ipc/downloads.js, reached throu...
CVE-2026-52872
Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.5.0, the downloadSu
Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the display_map parser function in the Leafle...
CVE-2026-52854
Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to vers
4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerable to pre-account takeover when registrationEnabled, localRegistrationEnabled,...
CVE-2026-50191
4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerable to pre-account tak
4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards allows an authenticated project manager to supply traversal sequences in the filename par...
CVE-2026-50186
4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards allows an authenticated project
libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.0, a crafted HEIF sequence accepted by heif_context_read_from_memory() with the msf1 sequence ...
CVE-2026-50142
libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.0, a crafted HEIF sequence accepted b
CefSharp provides .NET bindings for the Chromium Embedded Framework for Windows Forms and Windows Presentation Foundation applications. Prior to version 148.0.90, CefSharp/Schem...
CVE-2026-48796
CefSharp provides .NET bindings for the Chromium Embedded Framework for Windows Forms and Windows Presentation Foundatio
Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make i...
CVE-2026-47699
Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From
This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This Improper Au...
CVE-2026-21584
This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.