Position Matters: Feature Inversion Attacks in ViT Split Inference with Token Reduction and Shuffling
本文研究视觉Transformer（ViT）在分割推理场景下的隐私泄露问题。在分割推理中，边缘设备将中间层的token表示发送至云端，为降低通信和计算开销常采用token缩减，为破坏token空间组织可能采用token打乱，以往认为这些手段
2026-09-02 归档
今日共收录 1494 条安全情报，包含 600 个 CVE，479 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Sentinel-Based Failover for QKD-Augmented IPsec Tunnels
本文针对量子安全IPsec隧道在实际部署中的关键运维挑战展开研究：当QKD（量子密钥分发）基础设施不可用时，如何维持隧道可用性。作者设计并实现了一种量子安全的密钥建立机制，用于IPsec隧道，该机制结合了X25519、ML-KEM以及符合E
Local Private Information Retrieval for Graph-Based Replicated Systems
本文重新审视了多服务器图复制系统中的私有信息检索(PIR)隐私定义，提出一种仅由服务器存储结构决定的、更贴合实际需求的“局部用户隐私”(local user privacy)模型。经典图复制PIR要求用户检索某条消息时，必须对所有服务器隐藏
Lie to Me: Finding Bugs in ZK DSL Toolchains with Adversarial Witness Injection
零知识证明领域特定语言（ZK DSL）工具链将高级程序编译为约束系统，并为密码学证明生成见证（witness）。如果工具链存在实现缺陷，可能导致实际生成的约束系统比源程序语义更弱，从而允许攻击者为无效执行构造可被验证的证明。这类“健全性漏洞
Authority-Inference Separation in Agentic Finance: First-Line Control, Blockchain Enforcement, and Replayable Assurance
本文针对智能体金融（Agentic Finance）中授权与推理混淆的问题，提出了一种基于意图的权限隔离架构（Authority-Inference Separation, AIS）。核心思想是：AI智能体能够选择工具、交易对手和交易参数，
Bounds on the Posterior-to-Prior Ratios for Inclusion Belief under Bounded Differential Privacy
差分隐私已成为隐私保护数据发布的标准技术，但其与具体披露风险之间的关系并不直观。特别是在成员推理场景下，一个对手在观察到差分隐私保护后的发布数据时，其对某个目标个体是否被包含进数据集的信念（后验信念）相比先前信念（先验信念）会发生多大变化，
A Comprehensive Study of Native Code Bugs in Python Applications
Python 应用在机器学习、科学计算等关键领域广泛存在，这些应用常通过集成 C 等底层语言编写的原生代码来提升性能或实现互操作。然而，原生代码中的缺陷（即 native code bugs）通常隐蔽且难以察觉，给整个 Python 应用的
Context or Digits? Balancing Memorability and Efficiency in Virtual Reality Authentication
该论文提出了一种面向虚拟现实（VR）环境的知识型身份认证方法——自适应方向认证（Adaptive Direction-Based Authentication, ADBA）。其核心设计思路是将用户的需求按时间阶段解耦：在创建密码阶段，强制要
Verifiable quantum advantage in extremely low depth
本论文提出一个可在极低深度量子电路上求解、但对多项式时间经典算法在格基假设下困难、且可由经典计算机高效验证的采样问题。该量子采样器有两种实现：一种使用对数-对数深度（log-logarithmic depth）的量子电路，即具有单比特和双比
SoK: Motion Data Privacy in Extended Reality
本文是一篇针对扩展现实（XR）中运动数据隐私的系统化知识综述（SoK）。XR设备（如VR/AR头显）依赖对人体运动的持续追踪来实现沉浸式交互（如抓取、注视、移动物体），但这一过程会记录用户的运动模式。已有跨领域研究（如步态识别、用户画像）证
Filament: Password validity disclosure for accounts denied panel access on login page
CVE-2026-84307
Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.5 and 5.7.5
Filament: Multi-factor authentication (app) codes can still be used after a newer code has been used
CVE-2026-84306
Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.6 and 5.7.6
sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption
CVE-2026-84305
sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.format(sql, reindent=True) and sqlfo
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation
CVE-2026-84304
gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragment
gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion
CVE-2026-84303
gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/
Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline path
CVE-2026-83551
Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Pyt
Wyoming < 1.10.2 SSRF via uri Query Parameter
CVE-2026-8712
Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with ne
Heym before 0.0.98 SSRF via WebSocket endpoints
CVE-2026-84207
Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticat
Snipe-IT before 8.7.0 Authorization Bypass via Bulk Restore
CVE-2026-84206
Snipe-IT before 8.7.0 gates the bulk asset restore endpoint on the assets.edit permission instead of assets.delete, allo
GROWI through 8.0.2 Authorization Bypass Through User-Controlled Key on apiv3 Revision Retrieval
CVE-2026-84205
GROWI contains an access control vulnerability in the GET /_api/v3/revisions/:id endpoint that validates access against