Toss If Perishable: An Ethnographic Study on Building Scenario-Based Training for Non-Perishable Skills
该论文关注安全运营中心（SOC）人员培训中长期存在的结构性问题：SOC 普遍依赖“在岗培训”，内容高度绑定具体工具与流程，工具的复杂性往往掩盖了底层的调查推理过程，导致分析员虽能熟练操作界面，却难以形成可迁移的调查能力。作者据此提出“非易腐
2026-09-21 归档
今日共收录 815 条安全情报，包含 111 个 CVE，394 篇安全通告，以及 53 篇研究论文。
← 返回归档列表TERMon: Detecting Persistent Behavioral Threats in Edge AI via Hardware-Native Ternary Runtime Monitor
该论文针对边缘 AI 加速器在安全攸关场景（如控制物理执行器、访问控制决策、告警触发）中的运行时可靠性问题展开研究。作者指出，这类部署中模型一旦发生权重损坏、分布漂移或遭遇对抗输入，往往仍会输出格式正确、置信度很高的预测结果，导致故障在运行
JANUS: Denial-of-Service Attack Against Beam Hopping in LEO Satellite Networks
该论文研究低轨（LEO）卫星网络中波束跳变（beam hopping）机制所引入的新型攻击面。LEO 星座为全球提供连接，但单颗卫星资源有限，而业务需求在空间与时间上高度不均。波束跳变将卫星服务区划分为若干地理小区，不再同时照亮全部小区，而
Sybil-TraceGuard: Traceability-enhanced Sybil Guardian for Connected and Autonomous Vehicles Using Dynamic Semi-supervised GNN
该论文针对车联网与自动驾驶汽车（CAV）面临的 Sybil 攻击问题展开研究。CAV 依赖假名切换（pseudonym-switching）机制保护车辆隐私，而攻击者恰恰滥用这一机制，在交替使用多个假名身份的同时伪造基本安全消息（BSM），
Verifiable Computation with Trusted Execution Environments and On-Chain Digital Rights Tokens
该论文面向跨机构数据协作中的隐私与数据控制权问题，提出一种结合可信执行环境（TEE）与链上数字权益代币（Digital Rights Tokens, DRT）的可验证计算架构。研究背景是：数据所有者希望将各自私有数据合并成数据池以支持联合分
Combining Exploratory Analysis and Automated Analysis for Anomaly Detection in Real-Time Data Streams
安全分析师在监控实时安全信息时常常面临信息过载，难以全面覆盖所有告警，容易遗漏重要事件及其之间的关联。根本问题在于分析师用于检测、探索和响应网络攻击的系统设计。本文针对这一挑战，研究探索性分析（可视化）与自动化分析的互补性。作者开发了一个原
A security flaw has been discovered in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. This impacts an unknown function of the file /send_order.cgi?param...
CVE-2026-94138
该漏洞编号为 CVE-2026-94138，由 NVD 发布，影响成都飞宇星科技（Chengdu Feiyuxing Technology）出品的飞宇星（Feiyu Star）路由器，涉及固件版本标识 B-MB5E202-210322-r1
A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_get/routerd.get_rand_key of the component ubus JSON-RPC i...
CVE-2026-94050
A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component ...
CVE-2026-94036
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element i
samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management
CVE-2026-94047
A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function impor
0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversal
CVE-2026-94046
A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function get_file_sni
Free5GC Gmm handler.go race condition
CVE-2026-94043
A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzer_d
vas3k TaxHacker actions.ts testLLMProviderAction server-side request forgery
CVE-2026-94040
A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the function testLLMProviderActi
vas3k TaxHacker Invoice PDF Renderer actions.ts generateInvoicePDF server-side request forgery
CVE-2026-94039
A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /ap
mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request forgery
CVE-2026-94028
A weakness has been identified in mealie-recipes Mealie up to 3.25.1. Affected is the function payload.model_dump of the
Frappe ERPNext before 15.121.0 and 16.34.0 Missing Authorization in Timesheet Endpoints
CVE-2026-94113
Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in white
mayswind ezBookkeeping before 2.0.0 TOTP Replay Attack
CVE-2026-94112
mayswind ezBookkeeping before 2.0.0 fails to invalidate TOTP passcodes after use, allowing attackers to replay captured
openEQUELLA before 2026.1.0 Remote Code Execution via FreeMarker Template Injection
CVE-2026-94109
openEQUELLA versions before 2026.1.0 contain a remote code execution vulnerability in FreeMarker template compilation du
getID3 through 1.9.26 XML External Entity Injection via XML2array
CVE-2026-94108
getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fail
NivoCart through 2.4.0 Predictable Administrator Password Reset Token
CVE-2026-94107
NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that gene