今日共收录 1886 条安全情报，包含 1062 个 CVE，406 篇安全通告，以及 120 篇研究论文。
← 返回归档列表该论文提出 AUTOSIGMA，一个从非结构化网络威胁情报（CTI）报告中自动生成 Sigma 规则的解决方案。针对高级持续性威胁（APT）快速演变、传统人工编写 Sigma 规则易出错且难以扩展、现有规则库更新滞后等痛点，AUTOSIGM
联邦训练允许语言模型从分布式私有文本中学习，但服务器无法直接验证每个客户端更新背后的本地监督或优化过程。恶意客户端可以针对被篡改的目标进行训练，引入错误的上下文-标记关联，并通过重复聚合逐步降低全局模型性能，同时增加不可靠或幻觉生成的风险。
本文提出 CTIFoundry，一个面向智能体（agent）的威胁情报（CTI）语料脚手架，旨在解决当前 LLM 智能体在消费 CTI 时面临的语料侧瓶颈。传统方法将威胁报告和漏洞数据库打包为嵌入索引背后的不透明块，仅用于检索增强生成（RA
灰盒模糊测试器（如 AFL++）通常结合了交互队列、变异、字典、能量分配和比较求解等多个控制面，但以往的自适应系统往往只是优化其中某一个控制层或决策对象。本文提出 AdaRare，一个基于 AFL++ 的扩展，它协调五种内部驱动机制，将其作
这篇论文研究了大语言模型（LLM）API 中继服务中的提示缓存隔离漏洞。中继服务通常对客户进行分别认证，但请求却通过共享的上游提供商凭据转发。提供商将提示缓存作用域限定到上游主体和命名空间，导致映射到同一缓存身份的中继客户能够观察彼此的缓存
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
Microsoft is named a visionary leader in the 2026 Frost Radar for Cloud Workload Protection Platforms, recognized for un
Japanese cloud and data center service provider Sakura Internet disclosed that hackers accessed its sales management sys
U.S. healthcare IT company CareCloud disclosed that the data breach incident it suffered earlier this year has impacted