CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
2026-08-22 归档
今日共收录 1353 条安全情报，包含 493 个 CVE，458 篇安全通告，以及 108 篇研究论文。
← 返回归档列表Google is a Leader in the IDC MarketScape: Worldwide Cybersecurity Consulting Services 2024 Vendor Assessment
Google is a Leader in the IDC MarketScape: Worldwide Cybersecurity Consulting Services 2024 Vendor Assessment
August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEsAug 11, 2026
August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEsAug 11, 2026
Teaching AI to Reason Through Detection Triage
Teaching AI to Reason Through Detection Triage
Benchmaxxing: When the Benchmark Becomes the TargetAug 19, 2026
Benchmaxxing: When the Benchmark Becomes the TargetAug 19, 2026
Hackers poison arrayref Rust crate to push infostealer malware
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed
Critical Elementor Pro bug exposes WordPress sites to RCE attacks
A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files for remo
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised main
Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication
New SynkLoader malware pushed in Microsoft Teams phishing campaign
A previously unknown malware family dubbed SynkLoader is being distributed in Microsoft Teams phishing campaigns to stea
Hundreds of leaked AWS keys give full control over corporate accounts
More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still act
Microsoft blames Windows gaming issues on RGB lighting devices
Microsoft says ongoing issues causing games to crash or fail to launch after installing the August 2026 Windows updates
Microsoft rolls out Classic Outlook theme for New Outlook users
Microsoft has started rolling out a Classic Outlook theme for users of Outlook on the web and the New Outlook for Window
CISA orders feds to patch actively exploited TrueConf Server flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching tw
Hackers abuse FTP server banners to deliver new Windows malware
Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans na
SickKids data breach exposes employee and job applicant info
Toronto's Hospital for Sick Children (SickKids) says a cybersecurity incident exposed the personal information of some c
Rust Supply Chain Attack Linked to North Korean Hackers
Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server. Th
Evaluating Structured Information Extraction with Open Models in a High Risk Public Sector Application
本文针对公共部门中高风险场景下的结构化信息抽取任务，系统评估了开源模型（OCR引擎、大语言模型LLM和视觉语言模型VLM）的端到端性能。研究背景是，虽然专有方案在商业应用中占主导，但开源组件组合成的抽取流水线正成为可行替代，然而在真实多步骤
Auditing Cross-Lingual Fairness in Language Model Watermarking
该论文指出，目前针对大语言模型（LLM）输出水印方案的评估几乎完全以英文文本为对象，并且仅依赖检测阈值和少量质量指标。这种评估方式在英文上看似合理，但在跨语言部署时，许多原本不影响结论的设计选择会显著改变评估结果。为此，作者提出了一套包含四
EchoCoT: Extracting Hidden Chain-of-Thought from Large Reasoning Models
大型推理模型（LRM）在回答复杂问题时，会内部生成隐藏的“链式思维”（Chain-of-Thought, CoT），即一步步的推理过程。这类推理轨迹不仅是模型能力的核心，也被视为各厂商的宝贵财产，通常不会在 API 响应中直接公开。然而，本