A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this...
CVE-2026-93741
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the functio
2026-09-20 归档
今日共收录 942 条安全情报，包含 169 个 CVE，438 篇安全通告，以及 68 篇研究论文。
← 返回归档列表The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to...
CVE-2026-88944
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to authorization bypass in all v
The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for...
CVE-2026-89093
The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Info
The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress...
CVE-2026-92229
The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitr
Autonomy in Check: Governor-Mediated Adaptive Security at the Edge
该论文关注网络边缘场景下自适应安全机制的一个根本性风险：随着自动化规划器（规则式控制器、学习型策略、LLM 辅助智能体）越来越多地把观测结果直接转化为执行动作，一旦规划器能够影响实时策略状态，仅靠语法层面的合法性校验已不足以保障安全。一个由
MAGS: Multi-agent Auto-formalization Guarantees Safety for Agentic Outputs
背景与问题：LLM 编码智能体（coding agent）如今能够以远超人工审查速度的规模生成复杂程序，这带来了显著的安全与可靠性风险。常见检测手段——模糊测试、静态分析、LLM-as-a-Verifier——虽然能发现大量缺陷，但难以覆盖
Towards TEE-Certified DP: Verifiable Differentially Private Training on Legacy GPUs
该论文关注一个在差分隐私（DP）落地中被忽视的问题：如何向外部审计方“证明”一个已发布的模型确实是在正确的 DP 保护下训练出来的。作者指出，监管与合规需求正推动 DP 成为保护敏感训练数据的核心机制，但现有的可信执行证明手段主要是零知识证
A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argu...
CVE-2026-93958
该条目来自 NVD，编号 CVE-2026-93958，涉及 D-Link R95（硬件型号 BE9500）路由器固件版本 1.00.16。漏洞根因位于设备文件 /bin/ssi 中 DHMAPI 组件所调用的 system 函数处理逻辑：
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms
CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms