Residual Community Prototypes Under-Reject Held-Out Malware Families in FCG-MFD
本文研究的是开放集（open-set）恶意软件家族识别任务中的拒识（rejection）问题：模型既要对训练集中出现过的已知家族正确分类，又要把训练中从未出现过的家族样本判定为「未知」并拒绝归类。作者针对基于函数调用图（FCG）的恶意软件家
2026-09-24 归档
今日共收录 1600 条安全情报，包含 683 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Passive Hybrid Network-Based Intrusion Detection System (Hybrid-NIDS) Combining Suricata and Random Forest
该论文评估了一个被动式混合网络入侵检测系统原型的实际效果，系统由三部分组成：Suricata 负责基于签名的流量检测，随机森林（Random Forest）负责流级分类，并通过集中式 ELK 栈完成告警汇聚与处理。作者的核心关切并非再刷一个
Reinforcement Learning Inspired Black-box Adversarial Attacks for Computer Vision
本文关注深度视觉模型在对抗性扰动下的脆弱性问题。基于卷积网络或 Transformer 的神经网络已成为现代计算机视觉系统的核心组件，但已有研究表明，人眼几乎不可察觉的微小扰动即可显著改变模型预测结果，这对自动驾驶、医疗影像、工业质检等安全
ForgetMimic: Motion Unlearning for Reinforcement Learning Humanoid Control
该论文聚焦于强化学习人形机器人控制中的「动作级机器遗忘」问题。背景方面，当前人形机器人控制借助人类动作演示数据与强化学习，已经能够习得多样、敏捷且自然的运动行为；但这种范式虽然在实际物理人形控制上表现优异，却几乎没有回答一个关键问题：如何从
Partition-Matched Evaluation of Community Features under Distribution Shift in Android Malware Function-Call Graphs
该论文研究基于函数调用图的 Android 恶意软件分类器在分布偏移（恶意软件类型或家族变化）下的泛化能力，核心问题是：函数调用图中的"中观"组织结构（即社区/模块化社区划分）是否能在局部度数分布（LDP）、全局统计量、轻量级元数据以及规模
Prefix Puncturable Signatures with Smaller Signing Key from HIBS
该论文研究可穿刺签名（puncturable signature）中的密钥膨胀问题。可穿刺签名由 Bellare 等人（EUROCRYPT 2016）提出：签名密钥可以被「穿刺」（更新），从而丧失对特定消息的签名能力，但仍能对其它消息正常签
Benchmarking Neural Defend ARCAS 1B: A Foundational Multimodal Deepfake Detection Model
该论文对多模态深度伪造检测基础模型 Neural Defend ARCAS 1B 开展系统性基准评测，核心问题是：AI 生成图像技术的演进速度快于针对特定基准的检测器评测节奏，因此单一数据集上的一个分数无法完整刻画模型的泛化能力。作者在不对
New lower bounds for CDS and $f$-routing
本论文研究非局域量子计算（NLQC, non-local quantum computation）中纠缠代价的下界问题，这一问题与计算复杂性理论、密码学、量子引力等领域相关。NLQC 的一个核心特例是 f-routing，其动机部分来自量子
A Gmail-Based Phishing Detection Prototype for Nigerian Fintech Emails Using Sender Checks and BiLSTM Classification
该论文针对尼日利亚金融科技 (fintech) 场景下的钓鱼邮件问题，提出并实现了一个基于 Gmail 浏览器扩展的钓鱼检测原型。研究背景是：冒充尼日利亚本地 fintech 服务商的钓鱼邮件往往同时具备三个特征——伪造或伪装度极高的发件人
Issuer-Sovereign Agentic Payments
该论文提出「发卡行主权式智能体支付」（Issuer-Sovereign Agentic Payments），聚焦于 AI 智能体开始代表用户进行真实支付后，支付授权控制权归属这一核心问题。作者指出，当前主流做法是让智能体依赖某个「凭证提供商
Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version h...
CVE-2026-97152
CVE-2026-97152 是 nanomsg 消息库 WebSocket 传输模块中的一个远程可利用的缓冲区溢出漏洞。nanomsg 是一个轻量级、无代理的可扩展消息传递库（SP 协议族，包含 PAIR、PUB/SUB、REQ/REP、
A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing a manipulation of the argument submi...
CVE-2026-96892
CVE-2026-96892 是 Edimax BR-6428nC 1.16 路由器固件中的一个开放重定向漏洞。受影响组件为 goform Handler 中的 websRedirect 函数，攻击者可通过操纵 submit-url 参数，
SigNoz versions from v0.98.0 up to (but not including) v0.143.0, when configured to use the opaque session tokenizer (which was not the default before v0.143.0), do not revoke a...
CVE-2026-97056
CVE-2026-97056 是 SigNoz 中的一个会话管理缺陷。在 SigNoz v0.98.0 至 v0.143.0（不含 v0.143.0）版本中，如果系统配置为使用 opaque session tokenizer（该配置在 v
A weakness has been identified in kvcache-ai mooncake up to 0.3.12/0.3.14-rc1. Impacted is the function MasterService::GetReplicaListByRegex of the component Regular Expression ...
CVE-2026-96764
A weakness has been identified in kvcache-ai mooncake up to 0.3.12/0.3.14-rc1. Impacted is the function MasterService::G
A security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue affects the function ScopedSegmentAccess::MountSegment of the file se...
CVE-2026-96763
A security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue affects the
A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path Handler. This manipulation of...
CVE-2026-96762
A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegmen
A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax/add_pr...
CVE-2026-96751
A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. T
A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/upload_json.php of the component KindEditor Upload Interfac...
CVE-2026-96739
A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/up
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could hav...
CVE-2026-92874
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 1
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race condition, the MCP se...
CVE-2026-92628
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 1