LLMs in the SOC: An Empirical Study of Human-AI Collaboration in Security Operations Centres.
该论文针对安全运营中心（SOC）中人类分析师与大型语言模型（LLM）协作的实际效果展开实证研究。研究背景是SOC面临告警数量激增、分析人员疲劳和技能短缺等挑战，而LLM被广泛认为可以辅助告警分诊、威胁狩猎和报告生成等任务，但缺乏系统性的人机
2026-08-20 归档
今日共收录 1886 条安全情报，包含 1062 个 CVE，406 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Incalmo: an Autonomous Llm-Assisted System for Red Teaming Multi-Host Networks.
该论文针对企业级多主机网络红队测试的自动化问题展开研究。传统红队需要大量专业知识和人力成本，而大语言模型（LLM）在 CTF 等挑战中展现出潜力，但现有最先进的 LLM 辅助攻击系统（如 PentestGPT 和 CyberSecEval3
LMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv...
CVE-2026-76850
LMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmdeploy/pytorch
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is...
CVE-2026-76590
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionalit
In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the...
CVE-2026-76878
In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is se
A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function...
CVE-2026-76589
A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000 of the file /sbin/my
In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access...
CVE-2026-76397
In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant
In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk...
CVE-2026-76398
In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the
In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could...
CVE-2026-76404
In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands
In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an...
CVE-2026-76390
In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the
In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute...
CVE-2026-76395
In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the
In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model...
CVE-2026-76393
In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model being uploaded by anothe
In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk...
CVE-2026-76392
In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain pre
In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds...
CVE-2026-76389
In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the get_ta
In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or...
CVE-2026-76394
In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles c
In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view...
CVE-2026-76368
In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permission could view meta
In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could...
CVE-2026-76370
In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could use the Representational
In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks...
CVE-2026-76371
In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could r
In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run...
CVE-2026-76372
In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR co
In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files...
CVE-2026-76369
In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Auto