A TTP by TTP Approach: Precise Malware Detection via Malicious TTP Recognition
本文研究网络流量中的恶意软件检测问题。当前基于机器学习特别是神经网络的方法虽然高效，但存在两个结构性缺陷：其一，模型纯粹由数据驱动，忽略了网络安全领域已有的战术、技术与过程（TTP）知识库，导致模型无法将检测到的恶意行为与具体攻击手法关联；
2026-09-09 归档
今日共收录 1483 条安全情报，包含 593 个 CVE，506 篇安全通告，以及 97 篇研究论文。
← 返回归档列表CAPMAS: Capability-Based Delegation of Privileges in Multi-Agent Systems
本文提出了一种面向多智能体系统（Multi-Agent Systems, MAS）的安全权限委派架构 CAPMAS。在多智能体协作执行任务时，如何安全、高效地在多个协作智能体之间委派权限是关键挑战。现有方法分为两类：一类直接将用户身份传播给
Robust Dynamic Expansion for Continual Learning under Backdoor Attacks via Purification and Selective Recovery
持续学习（Continual Learning, CL）旨在让模型能够从按顺序到达的任务中获取新知识并保留旧知识，但灾难性遗忘问题一直存在。现实场景中，数据流往往来自不可信来源，可能被攻击者注入极少量后门毒化样本，对持续学习器的稳定性、可塑
SIDE: Sensor Impersonation Detection at the Edge via Sequence Prediction
本文提出了一种面向低成本物联网（IoT）传感器部署的轻量级传感器冒充检测方法，并命名为SIDE（Sensor Impersonation Detection at the Edge）。研究背景是许多低成本的IoT传感器缺乏设备级源认证，容易
SemVul: Semantic-Enhanced Graph Neural Networks for Code Property Graph-based Vulnerability Detection
本文提出了一种名为 SemVul 的漏洞检测流水线，旨在提高源代码漏洞检测的准确率与泛化能力。研究背景指出，源代码漏洞是网络攻击的根本原因之一，攻击者常利用软件弱点进行未授权访问、数据窃取或服务破坏。现有基于代码属性图（Code Prope
An Evidence Model for Agentic Processes: Evidence Claims, Trust Assumptions, and Policy Assessment
本文针对代理式AI系统的可审计性与证据可信度问题展开研究。在智能体流程中，系统频繁交换消息、调用工具、请求审批、进行结构化决策会话并修改共享工件；日志与锚点虽能提供篡改证据，但其证据含义往往是隐式的——哈希不能确立语义真实性，签名不能证明授
Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-69382
Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclos
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-69380
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
CVE-2026-69378
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.
CVE-2026-69375
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform t
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
CVE-2026-69361
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
CVE-2026-69355
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-69338
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69292
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.
CVE-2026-68831
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker t
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
CVE-2026-55007
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information d...
CVE-2026-84393
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProx
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, Forti...
CVE-2026-84392
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all v
A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via <insert attack vector here>
CVE-2026-84391
A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial
A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauth...
CVE-2026-84389
A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM