SecureDrive-FL: Joint Differential Privacy and Gradient-Aware Selective Homomorphic Encryption for Federated Driver Monitoring
该论文针对联邦学习（FL）中梯度更新面临的两类安全威胁：传输过程中的中间人（MitM）窃听，以及恶意客户端发起的模型投毒攻击。传统方案要么对所有参数统一加密（如静态分层或全参数CKKS），计算开销大且不区分敏感度；要么仅依赖差分隐私（DP）
2026-08-31 归档
今日共收录 884 条安全情报，包含 132 个 CVE，408 篇安全通告，以及 86 篇研究论文。
← 返回归档列表Neighborhood Watch: Privacy Risks in Seeded Local Combination Synthetic Data
该论文研究了基于局部组合（local combination）方法的合成数据生成技术所导致的隐私泄露风险。合成数据被视为在敏感场景下共享数据的一种有前景的解决方案，但近年来的隐私攻击研究表明，尤其是那些不基于差分隐私等正式隐私框架的合成数据
Metamorphism: A mathematical challenge for antivirus technology
该论文针对当前最先进的计算机病毒——变形病毒（metamorphic viruses）提出了一种数学层面的形式化建模与检测挑战。变形病毒具有独特的自我变异能力，能够将自身代码几乎无限地改写为大量高度不同的副本，同时保持相同的恶意功能。这种变
SysComb: Fine-Grained Transparent System Call Filtering for Attack Surface Reduction
SysComb 提出了一种基于 eBPF 的细粒度系统调用过滤方案，旨在通过限制应用程序可用的系统调用来缩小内核攻击面，从而缓解被入侵程序带来的影响。现有系统调用过滤生成技术虽然在静态分析或动态追踪方面有所进展，但大多需要修改内核或应用程序
FIDA: Feature Instability-Driven Attack on Self-Supervised Facial Representation
本文提出了一种针对自监督学习（SSL）人脸表示模型的新型后门攻击框架 FIDA（Feature Instability-Driven Attack）。研究背景是：自监督学习模型已被证实容易受到后门攻击，但在人脸表示领域，此类攻击的系统性风险
Information Flow Control in Off-Chain Components
本文针对带有链下组件的区块链智能合约语言，建立了一种形式化模型。链下组件是在区块链节点网络之外的指定位置执行的智能合约片段，但它们与链上合约状态保持同步。它们不仅响应链上状态的变化，还能将外部世界的事件（如股票价格、天气数据）通知给链上组件
Thresholding Post-Quantum Signatures
本文系统研究了后量子签名方案在阈值签名场景下的适用性与构造工具。阈值签名将签名密钥分散到 N 个参与者中的 T 个，只有 T 方合作才能生成合法签名，这种分布式信任模型在区块链、多方计算、密钥管理等领域有广泛应用。当前实际部署的阈值方案大多
Daydreaming: Stealing Hidden Agent Skills through Black-Box Task Interaction
本文提出了一种名为 Daydreaming 的黑盒攻击方法，用于窃取托管在多文件技能（skill）中的智能体能力。在当代 AI 智能体系统中，技能包通常包含指令、参考数据和可执行辅助脚本，使通用模型能够执行特定任务。服务提供商可以保守这些文
High-Dimensional Deterministic Secure Quantum Communication with Reed-Solomon Erasure Coding
本文提出了一种基于高维 prepare-and-measure 机制的确定性安全量子通信（DSQC）协议，并引入 Reed-Solomon 纠删码以增强抗噪声能力。DSQC 是一种量子密码技术，旨在通过量子信道直接传输消息，同时利用辅助经典
Permissive Regular Expression vulnerability in ash-project ash_phoenix lets a remote client select the tenant an Ash application uses, or degrade the request, by sending a craft...
CVE-2026-82726
AshPhoenix是Elixir Ash框架的Phoenix集成库，其`AshPhoenix.Helpers.get_subdomain/2`函数用于从请求Host头中解析租户子域。该函数存在正则表达式过度宽松的安全漏洞，导致远程客户端可
A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. Affected is the function Employee::employeeAuthentication of the file /rider/login.php o...
CVE-2026-82610
CVE-2026-82610 是 itsourcecode Online Medicine Delivery System 1.0 中发现的一个安全漏洞。该系统的员工登录接口（/rider/login.php）中的 Employee::em
A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes of the file src/modules/ims_registrar_scscf/cxdx_avp.c of the component AVP Ha...
CVE-2026-82608
A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes of the file src/modul
A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the function wppb_ajax_simple_avatar of the file /wp-admin/admi...
CVE-2026-82607
CVE-2026-82607 是 WordPress 的 Cozmoslabs Profile Builder 插件（版本 3.16.1 及之前）中存在的一个高危漏洞。该漏洞位于 /wp-admin/admin-ajax.php 文件中的
Stored Cross-site Scripting vulnerability in ash-project ash_admin executes attacker-supplied record content as script in an administrator's browser. The relationship typeahead...
CVE-2026-77850
Stored Cross-site Scripting vulnerability in ash-project ash_admin executes attacker-supplied record content as script i
Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ash_admin lets an attacker who controls a sibling subdomain rebind an admin's session ...
CVE-2026-75757
Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ash_admin lets an attacker wh
A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. R...
CVE-2026-82604
A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language M
A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of the file /member.php?action=del_pl of the component Comment Cache. The manipulat...
CVE-2026-82603
A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of the file /member.php?ac
A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /ass.php. The manipulation leads to authorization bypass. Th...
CVE-2026-82602
A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /as
A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a manipulation of the argument errtxt can lead to cross site sc...
CVE-2026-82601
A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a mani
A security flaw has been discovered in SeaCMS up to 13.6. Affected by this issue is some unknown functionality of the file /zyapi.php?ac=videolist. Performing a manipulation of ...
CVE-2026-82600
A security flaw has been discovered in SeaCMS up to 13.6. Affected by this issue is some unknown functionality of the fi