Alert for CVE-2025-61884
CVE-2025-61884
Alert for CVE-2025-61884
2026-10-06 归档
今日共收录 1258 条安全情报，包含 460 个 CVE，421 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Alert for CVE-2025-61882
CVE-2025-61882
Alert for CVE-2025-61882
Alert for CVE-2024-21287
CVE-2024-21287
Alert for CVE-2024-21287
Alert for CVE-2022-21500
CVE-2022-21500
Alert for CVE-2022-21500
Alert for CVE-2021-44228
CVE-2021-44228
Alert for CVE-2021-44228
Linux 内核提权 CVE-2026-31431(copy-fail)
CVE-2026-31431
Linux 内核提权 CVE-2026-31431(copy-fail)
Alert for CVE-2026-35273
CVE-2026-35273
Alert for CVE-2026-35273
Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier
CVE-2026-88779
Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaw
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
CVE-2026-96940
Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that co
New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
CVE-2026-88779
Citrix has released security updates for a high-severity security flaw in NetScaler ADC and NetScaler Gateway that has b
VulValidate: Auditing Function-Level Vulnerability Labels with Executable Evidence
基于学习的漏洞检测高度依赖训练标签的质量。现有大规模数据集（BigVul、PrimeVul、DiverseVul 等）通常以「漏洞修复提交」为依据，把被补丁改动过的函数直接标注为「存在漏洞」，但被安全补丁修改并不等于该函数本身存在漏洞，由此
Efficient Secure Federated Learning via Information-Theoretically Secure Key Distribution: A Medical Imaging Case Study
该论文研究的是联邦学习（FL）在隐私敏感场景（如医学影像）中安全聚合环节的密钥瓶颈问题。FL 允许各机构在不集中原始数据的前提下协同训练模型，为保护模型更新，通常采用加性掩码（additive masking）进行安全聚合。但这类方案依赖经
Efficient HQC Implementations on RISC-V: A Cross-Layer Design Space Exploration
该论文聚焦后量子密码（PQC）在嵌入式设备上的高效实现问题。基于 RISC-V 的软硬件协同设计已成为 PQC 部署的主流方法：RISC-V 具备软件可编程性、可扩展指令集架构以及可选的专用加速器，从而形成极为宽广的设计空间，为密码敏捷性（
Hidden Risks of Jev: An Empirical Study of Security, Privacy, and Dual Use
该论文针对新兴的 "Jev" 接口开展首次系统性安全、隐私与双用途研究。Jev 能将自然语言问题转化为带类型的答案与概率，具备低延迟、低成本特点，可作为应用决策层，用于请求路由、工具选择等。作者使用官方 Jev API 与本地可训练、可更新
JASPER: Special Session on Joint Reliability And Security Assessment of SPlit Computing for Edge Robustness
分割计算（Split Computing, SC）通过在边缘设备与云服务器之间切分深度神经网络（DNN）推理来降低端侧算力与延迟压力，但切分点处传输的中间特征表示同时暴露于两类风险：其一是硬件故障（如瞬态位翻转、软错误）导致的推理精度退化，
Post-Quantum Authentication Protocol for Internet of Medical Things
该论文针对医疗物联网（IoMT）通信链路的安全需求，提出并实现了一套抗量子的源认证与完整性保护协议。研究背景是：患者可穿戴/植入设备生成的医疗报告需经网关转发给医院其他服务处理，这一链路上存在消息篡改、身份冒充与重放三类主要威胁，同时传统公
GCTAuto-encoder: A Cross modal Framework for Security Flaw Detection in IoT Networks
该论文面向物联网（IoT）场景中安全模型高度异构、难以统一防护的问题，提出了一种跨模态（cross-modal）深度自编码器框架 GCTAuto-encoder，用于在边缘侧进行入侵检测与安全缺陷识别。作者指出，IoT 涵盖智能家居、自动驾
Explicit Nonlinear Functions beyond the Fourier bound
We study the problem of constructing highly nonlinear vectorial maps $F: \mathbb F_2^n \to \mathbb F_2^m$. Concretely, w
Watermarking: from Impossibility to Auditable Compliance
Article 50 (2) of the EU Artificial Intelligence Act requires providers of generative systems to make synthetic outputs
Security Is More Than a Library Call: How Security Features Live in Code
Implementing security features---functionalities that protect sensitive data or prevent malicious actions by attackers--