Comcast turns your Xfinity WiFi into a home motion detector
Comcast is promoting WiFi-based motion detection as a part of its new Xfinity Shield home protection platform, allowing
2026-08-19 归档
今日共收录 2403 条安全情报，包含 1575 个 CVE，408 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations
Beyond Direct Access: Resource Hijacking in LLM Agents
本文首次系统性地研究了大语言模型（LLM）智能体（Agent）中的“资源劫持”（resource hijacking）安全盲区。以往智能体安全研究主要关注指令注入、数据泄露和工具滥用等攻击，而智能体可访问的高价值资源（如计算基础设施、凭证、
KeyPooling: Measuring Where LLM API Relay Paths Collapse Prompt Cache Isolation
大型语言模型（LLM）API 中继服务通常对客户分别进行身份验证，但在转发请求时往往使用共享的提供商凭据。提供商将提示缓存（prompt cache）的范围限定到上游主体和命名空间，因此映射到同一缓存身份的中继客户可以观察到彼此的缓存状态。
Proof-of-Execution Memory: Defending LLM Agents Against Forged-Reasoning Attacks by Verifying What Actually Happened
该论文聚焦于 LLM Agent 的推理记忆（reasoning memory）被对抗性写入导致的安全问题。LLM Agent 本身是无状态的，需要依赖外部记忆在步骤间传递上下文，并默认信任记忆内容，因此攻击者若能写入该记忆即可操控 Age
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the ar...
CVE-2026-75976
TRENDnet TEW-823DRU 无线路由器固件版本 1.1.02b01 存在一个高危栈缓冲区溢出漏洞。该漏洞位于 /cgi-bin/wan.cgi 文件中，源于 NVRAM 组件内 strcpy 函数对参数 wan_l2tp_pas
Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch
## Summary GHSA-89gg-p5r5-q6r4 claims the pickle deserialization vulnerability in `algo_from_pickle()` was fixed in
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
Panda: Security Analysis of Algorand Smart Contracts.
本文提出并实现了一个针对 Algorand 区块链智能合约的安全分析框架 Panda。Algorand 采用基于交易签名和异步轮次确认的 Pure Proof-of-Stake 共识机制，其智能合约执行模型（ASC1）与以太坊 EVM 完全