ContractLens: Latent Security Knowledge for Malicious Smart Contract Detection
该论文聚焦 Web3.0 生态中的恶意智能合约审计问题。背景是：基于大语言模型（LLM）的合约审计方法目前主要依赖提示工程（prompt engineering）或针对特定攻击类型的微调，而对 LLM 内部究竟依靠哪些表征来完成恶意逻辑识别
2026-10-06 归档
今日共收录 1258 条安全情报，包含 460 个 CVE，421 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Attestable Audit: Property-Based Attestation for Proprietary Workloads without Artifact Disclosure
该论文针对远程证明（remote attestation）在专有软件场景下的信任缺口提出了一种新架构。背景是：可信执行环境（TEE）通过硬件绑定密钥对自身配置信息签名，生成包含内部加载代码度量值（cryptographic digests
Cooldown Landmines: Cross-Tenant Interference Attacks on LLM Gateways
LLM gateways enforce separate tenant quotas while sharing model deployments and cooldown records that temporarily exclud
When Talk Isn't Code: Comparing LLM Agents That Simulate and Develop Software
LLMs are used both to simulate network protocol implementations, as honeypots do, and to write them. Prior work evaluate
Large Language Models and Augmented Democracy
Artificial intelligence enables computational agents to represent political preferences and take part in collective deci
CyTReX: Explainable AI-Based Cybersecurity Threat Reasoning Framework for DER Networks
Distributed Energy Resource (DER) environments rely on network communication protocols to coordinate control commands, m
SERA-IDS: Structured Experience Retrieval-Augmented Intrusion Detection with Small Language Models
Large language models (LLMs) offer a flexible approach to network intrusion detection, but direct classification of nume
PrivDev: Mapping Static-Analysis Data Types to DPV
Static-analysis scanners can identify personal-data types in source code, but they lack mechanisms to connect these find
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms
CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks