TEE-X: TEE-aware Acceleration Framework for Large Vision Models at the Edge
本文针对大型视觉模型在边缘设备部署时面临的安全与性能矛盾，提出一种基于可信执行环境（TEE）的加速框架 TEE-X。研究背景是：机器学习模型（尤其是视觉应用）易受安全威胁，而白盒与黑盒威胁模型的区别影响了攻击难度；利用 TEE 保护模型机密
2026-08-25 归档
今日共收录 1135 条安全情报，包含 329 个 CVE，404 篇安全通告，以及 111 篇研究论文。
← 返回归档列表Obscura-PQ: Post-Quantum Privacy-Preserving Protocol for the Algorand Blockchain Using Lattice-Based Linkable Ring Signatures
公共区块链因其透明性会暴露完整的交易图，而现有的隐私保护协议几乎全部依赖椭圆曲线密码学，其安全基础（离散对数问题）在 Shor 算法下不堪一击。由于账本具有不可变性，当下在经典假设下发布的所有匿名集，未来都可能被量子计算对手追溯去匿名化。然
On SSI-based Private Decentralized Bidding
该论文研究了去中心化环境下的私有投标问题。私有投标是一种参与者提交密封投标的过程，确保在投标窗口期内投标内容对其他投标人保持隐藏，这是竞争性环境中公平独立评估所有提案的关键要求。虽然公有区块链能够实现去中心化投标，其透明性也带来了公开可验证
MCSI: A Masked Commutative Supersingular Isogeny Key Exchange with Blinded Ephemeral Keys
本文提出 MCSI，一种基于 CSIDH 类群作用的两消息密钥交换协议。协议中，每一方在由双方静态密钥确定的认证加密密钥下发送其临时公钥元素，从而实现隐式相互认证、对窃听者隐藏临时元素，并允许接收方仅通过一次标签检查即可丢弃未经认证的消息，
A Loss-Robust Disturbance Certificate for Minimal-Receiver Quantum Key Distribution
该论文针对量子密钥分发（QKD）系统在实际部署中最具破坏性的攻击面——接收端展开研究。传统QKD接收机通常使用一对探测器来区分密钥比特，但这类结构易受针对接收机的攻击（例如伪态攻击或探测器侧信道攻击）。作者提出一种最小化接收机架构：仅包含一
Counterfactual, Per-Decision Bias Auditing for Automated Hiring: Localizing and Explaining Disparate Impact in Applicant Tracking Systems
该论文提出了一种名为 AI Bias Firewall (AIBF) 的方法，用于对自动化的应聘者追踪系统（Applicant Tracking Systems）进行逐决策（per-decision）的偏差审计。研究背景是：招聘自动化系统越
AID-Guard: Stateful Authorization for Delegated Agent Effects
本文提出了一种名为 AID-Guard 的状态化授权闭合协议，用于解决工具型 AI 代理在委派任务时出现的授权与效果不一致问题。传统授权机制通常在请求准入时一次性完成，但代理在执行过程中，提供方状态、投递、重试和恢复等阶段会不断变化，导致已
Privacy Preserving Semantic Communications in Wireless Edge Networks with Vision Language Models
本文针对无线边缘网络中语义通信（Semantic Communication）的隐私泄露问题提出了一种新的隐私保护框架。传统语义通信通过传输高层语义特征而非原始比特来提高频谱效率，但多设备协作与多模态传输会导致敏感信息在设备间语义融合和跨模
Velociraptor Analyst overwrites live built-in artifacts through verify()
CVE-2026-19200
The Velociraptor verify() VQL function allows a user to verify an artifact for syntatic and other issues. Due to an impl
alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution
CVE-2026-78180
A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider
provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection
CVE-2026-78166
A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmart
warmcat libwebsockets LECP CBOR Recording lecp.c report_raw_cbor out-of-bounds write
CVE-2026-78161
A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/
exceljs through 4.4.0 CSV Formula Injection via Unescaped Cell Values
CVE-2026-78209
exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at signs in cell values writte
exceljs through 4.4.0 Prototype Pollution via deepMerge Reached From Note Serialization
CVE-2026-78207
exceljs-hardened before 5.0.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject
BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery via Unfiltered RFC 6598 Shared Address Space
CVE-2026-78205
BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link
Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints
CVE-2026-78204
Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccess
Dolibarr ERP User Notes note.php authorization
CVE-2026-78160
A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing o
Open5GS AMF UEContextReleaseRequest Path improper authorization
CVE-2026-78158
A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseReq
Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-bounds
CVE-2026-78157
A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrf_rx_aar_cb of the file src/pcrf/pcrf-rx-pat
Open5GS S6a Authentication-Information-Request hss-s6a-path.c hss_ogs_diam_s6a_air_cb heap-based overflow
CVE-2026-78156
A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hss_ogs_diam_s6a_air