August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEsAug 11, 2026
August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEsAug 11, 2026
2026-09-02 归档
今日共收录 1494 条安全情报，包含 600 个 CVE，479 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Teaching AI to Reason Through Detection Triage
Teaching AI to Reason Through Detection Triage
Benchmaxxing: When the Benchmark Becomes the TargetAug 19, 2026
Benchmaxxing: When the Benchmark Becomes the TargetAug 19, 2026
Cronos blockchain restarts after $74 million Tectonic exploit
The Cronos blockchain network has resumed trading activity after a price-manipulation attack on the Tectonic cryptocurre
Cybersecurity IR Workshop: The workshop you shouldn’t miss
Cyber resilience starts before a crisis. Gain practical insights from DART to strengthen readiness and response. The pos
CrowdStrike Falcon Guardian Defines the Next Generation of AI SecuritySep 01, 2026
CrowdStrike Falcon Guardian Defines the Next Generation of AI SecuritySep 01, 2026
Peer Pressure: Inside the Sality Botnet Disruption Operation
Peer Pressure: Inside the Sality Botnet Disruption Operation
Agents of Chaos: A New $100K Agentic Security ChallengeAug 31, 2026
Agents of Chaos: A New $100K Agentic Security ChallengeAug 31, 2026
Ungentlemanly behavior: Insights into a ransomware operation
Analysis of 15 intrusions revealed tradecraft used by GOLD SHERWOOD affiliatesCategories: Threat ResearchTags: ransomwar
Hackers abuse Faronics Deploy admin tool to install ScreenConnect
Phishing actors are abusing the legitimate Faronics Deploy endpoint-management platform to gain remote administrative co
Aesto Health says data breach affects over 9.5 million patients
Aesto LLC, operating as Aesto Health, disclosed that a data breach discovered recently affects more than 9.5 million ind
Hackers push malicious Virtualizor update in BGP hijacking attack
Hackers delivered malicious updates to the Virtualizor VPS management software after hijacking BGP routing for its updat
Novocure data breach affects more than 1,400 cancer patients
Healthtech company Novocure says the data of an undisclosed number of employees and more than 1,400 U.S. cancer patients
Five Venezuelans plead guilty to ATM jackpotting attacks in US
Five Venezuelan nationals pleaded guilty to attempting to empty automated teller machines (ATMs) using malware in a seri
Recently patched PaperCut zero-days used in data theft attacks
Two security vulnerabilities in the PaperCut NG and MF print management software, patched last week after being exploite
Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests
The Iranian Nimbus Manticore hacking group has been attributed to two previously undocumented malware families that high
Ransomware Gang Claims Nutex Health Data Breach
The company has notified the SEC that hackers accessed patient, employee, provider, business, and financial information.
Who Judges the Judges? A Chinese Safety QA Benchmark for Evaluating LLM Responses and Safety Judges
本文提出 C-SafeQA，一个面向中文安全评估的、基于策略的响应级基准测试。现有的大语言模型安全基准大多评估用户查询本身的风险程度，但问答的实际安全性取决于模型响应是否违反内容政策。在中文有害内容评估中，这一区别尤为关键，因为语言变体和对
Delegation Without Trust: An Empirical Gap Analysis of Identity, Authorization, and Runtime Governance in Multi-Agent LLM Systems
本文针对多智能体大语言模型（LLM）系统中的授权与运行时治理问题展开研究。作者指出，自主 LLM 智能体日益代表用户持有凭证、调用工具与服务，并能派生子智能体进一步行动，这使得分布式系统中经典的“谁被授权做什么、依据谁的授权”问题变得紧迫且
SIR: Self-improving Red-teaming for Compute Use Agents
本文提出了一种名为 SIR（Self-improving Red-teaming）的黑盒攻击方法，用于针对计算机使用代理（Computer Use Agents, CUAs）进行间接提示注入（Indirect Prompt Injectio