Dagger: Decoupling-based Model Stealing Attack against Graph Neural Networks
随着图神经网络（GNN）被广泛以机器学习即服务（MLaaS）的形式对外提供 API，模型窃取攻击已成为关键安全威胁：攻击者仅通过查询受害模型的黑盒接口，就能训练出一个功能等价的替代（代理）模型，从而窃取专有知识产权并危及依赖该模型的下游安全
2026-09-30 归档
今日共收录 1598 条安全情报，包含 728 个 CVE，467 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Poster: Towards ProofWeave: A Privacy-Minimised, Integrity-Anchored Evidence Plane for Continuous Agentic Assurance
该论文针对自主智能体（Agentic AI）系统的可审计性提出新概念 ProofWeave。背景是：现代智能体通过工具调用、记忆、任务委派和外部服务持续行动，其行为边界跨越多个组件与信任域。现有的可观测性与数据溯源（provenance）机
Efficient TCitH-Based Alternatives to SLH-DSA: Cross-Layer ASIC Design of Mirath
该论文针对后量子签名方案在资源受限嵌入式平台上的实现效率问题展开研究。背景是：为应对量子计算对现有公钥密码的威胁，NIST 已标准化三类后量子签名方案 ML-DSA、FN-DSA（均为格基）以及 SLH-DSA（基于哈希假设）。为保持密码敏
VStress: Correlation-Aware Auditing and Adaptive Budget Allocation for Repeated Verifiers
该论文针对大模型推理中重复调用验证器（repeated verifier）的场景，指出仅当额外调用能带来条件信息增益时才有价值，否则会造成预算浪费甚至引入相关性偏差。作者提出 VStress——一种可审计的重放契约（auditable re
Epistemic Typing as a PostgreSQL Table Access Method: Adversarial Conflict Resolution Under Confidence Forgery and Sybil Coordination
该论文提出了 KNDB——一个以 PostgreSQL 18 表访问方法（Table Access Method, TAM）形式实现的「认知类型化」引擎，用于在数据库写入路径上直接完成对抗性冲突消解。研究背景是数据融合与众包真值发现（tru
Collision Detection is Instance $\widetilde{O}$ptimal Under the Birthday Threshold
该论文研究一个源自密码学理论的基础问题：关于哈希函数的结构性知识，能否加速对它的黑盒碰撞检测？作者从「实例最优性」（instance optimality）这一超越最坏情况分析的极端标准切入。实例最优性要求存在单一算法，使其在每一个具体输入
Adversarial Debiasing of Machine Learning Models for Enhanced Network Security against DDoS Attacks
该论文针对分布式拒绝服务(DDoS)攻击检测面临的两大挑战展开研究：一是攻击手法不断演进，生成式 AI 被用于构造更难识别的攻击流量，传统基于规则的防火墙难以捕捉这些新模式；二是训练数据本身存在不平衡与偏斜，尤其是包级特征(如正向/反向包计
Zero Knowledge Proofs in Quantum Networks
该论文研究量子网络环境下的零知识证明（Zero-Knowledge Proofs, ZKP）。ZKP 允许一方在不泄露除命题有效性之外的任何信息的前提下完成命题验证，是密码学与信息论中的基础原语。然而现有构造存在两大局限：其安全性通常建立在
Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a den...
CVE-2026-103102
CVE-2026-103102 是 Pexip Infinity 视频会议平台的一个高危拒绝服务漏洞，影响 41.0 之前的所有版本。漏洞根源在于信令实现中缺乏严格的输入验证。远程攻击者无需任何认证或用户交互，只需通过 WebRTC 或 A
Liberu CRM 0.9.1 < 10.0.0 Broken Access Control via TeamPolicy::addTeamMember()
CVE-2026-61519
Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user holding a pending tea
JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard
CVE-2026-102831
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit
JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)
CVE-2026-102830
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit
Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path
CVE-2026-102825
Russh is a Rust SSH client and server library. Prior to 0.62.6, the USERAUTH_REQUEST path reached from server::run_strea
russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened
CVE-2026-102823
Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.
russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic
CVE-2026-102822
Russh is a Rust SSH client and server library. Prior to 0.63.1, a connection configured to permit mac=none can negotiate
Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey
CVE-2026-102821
Russh is a Rust SSH client and server library. Prior to 0.63.2, an authenticated remote peer can send SSH_MSG_KEXINIT wi
pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)
CVE-2026-102820
pageant provides a [PageantStream] type that implements [AsyncRead] and [AsyncWrite] traits and can be used to talk to a
CVE-2026-102729
CVE-2026-102729
`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource
CVE-2026-102727
CVE-2026-102727
FTP Passive Data Connection Not Bound to the Authenticated Control Peer
MobilityDB through 1.3.0 Out-of-bounds Read DoS via WKB Deserialization
CVE-2026-102639
MobilityDB version 1.3.0 and earlier contains an out-of-bounds read vulnerability in the MEOS binary and library WKB des