The Price of Safety: Benign-Case Utility and Token Overhead of Memory-Poisoning Defenses in LLM Agents
该论文研究了一个在 LLM 智能体安全中常被忽视的问题：记忆投毒防御在【良性流量】下的实用性与 token 开销。作者指出，现有记忆投毒防御通常只按“能否阻止攻击”来评估，但真实线上流量极少是恶意的；防御的实现成本却是每一次交互都要支付，而
2026-09-23 归档
今日共收录 1513 条安全情报，包含 580 个 CVE，548 篇安全通告，以及 93 篇研究论文。
← 返回归档列表Decoding the Legalese: A Scalable and Quantitative Framework for Analyzing Corporate Privacy Policies
隐私政策是各类组织向用户披露其如何收集、处理与共享个人数据的主要机制,但受制于篇幅冗长与法律术语密集的表述方式(论文暗示这可能是刻意为之),普通用户几乎无法真正理解其内容。更关键的是,除监管合规要求之外,业界长期缺乏能够刻画隐私政策关键质量
Design and Evaluation of a Controlled Post-Alert Incident Orchestration and Response Subsystem Using a Rule Engine and a Local Large Language Model
该论文提出并评估了一套面向教育信息系统的「告警后」受控事件编排与响应子系统（post-alert incident orchestration and response subsystem）。研究动机在于：传统自动化响应（SOAR 类）常把
A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copy_msg_element of the component Device Discovery Service. Executing a mani...
CVE-2026-96257
CVE-2026-96257 是 Fast（迅捷网络）FAC1203R Gigabit Edition 路由器固件 2.0.4（可能为 2.0.4 版本分支）中被披露的一个严重内存安全漏洞，位于 Device Discovery Servi
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms
CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
CrowdStrike Announces Agentic Identity Provider
CrowdStrike Announces Agentic Identity Provider
无人机开源飞控 PX4-Autopilot堆栈溢出漏洞 CVE-2025-15150
CVE-2025-15150
无人机开源飞控 PX4-Autopilot堆栈溢出漏洞 CVE-2025-15150
MongoDB内存泄漏 CVE-2025-14847(MongoBleed)
CVE-2025-14847
MongoDB内存泄漏 CVE-2025-14847(MongoBleed)