2026-10-08 归档

今日共收录 832 条安全情报,包含 0 个 CVE,435 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
威胁情报2026-10-07 发布INFO

Musician sent to prison for $10 million streaming fraud using AI bots

A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Sp

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-07 发布INFO

Advantest confirms personal information stolen in ransomware attack

Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their persona

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-07 发布INFO

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have be

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-07 发布INFO

Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany

The individual was detained in May and has been extradited to Germany to face hacking charges. The post Qilin Ransomware

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-07 发布INFO

Advantest Discloses Data Breach Months After Ransomware Attack

The Japanese chip testing giant said hackers stole personal information from its servers in the February 2026 cyberattac

历史摘要 · 未重新核验 · SecurityWeek

学术论文2026-10-07 发布INFO

SLDR: Defending Against Malicious Fine-tuning via Selective Layers Recovery and Dynamic Routing

Fine-tuning-as-a-service enables users to adapt aligned large language models (LLMs) to specialized tasks, but malicious

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-07 发布INFO

PatchBench: Measuring Collateral Damage in Activation Patching

An LLM safety patch can pass a benchmark while still being a poor repair. This risk is especially acute for jailbreak re

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-07 发布INFO

On the Reliability of LLM-Based Vulnerability Patching Benchmarks

Large language models (LLMs) have shown strong potential for automated vulnerability patching, but current benchmarks ca

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-07 发布INFO

Constrained-Action AI Remediation for SIEM/XDR via a NeMo-Guardrails Proxy

Security Operations Centers (SOCs) for information technology and operational technology share one incident-response pro

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-07 发布INFO

Formal Runtime Verification for Tool-Using LLM Agents: An Offline Same-Benchmark Study on AgentDojo and STAC

Guardrails for tool-using LLM agents are usually application-specific rules, which makes multi-step, data-dependent safe

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-07 发布INFO

Correct Answers, Unsupported Findings: Evidence Binding in Forensic Reconstruction of LLM Agent Logs

Forensic reconstruction of LLM-agent actions requires not only recovering the correct value, but establishing which pres

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-07 发布INFO

MARS: Malware Analysis with Rule-Based Scoring of LLM Claims

Large language models can triage malware through direct verdicts or behavioral claims scored by an external policy. We p

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-07 发布INFO

Ask the Expert: LLM-Guided Reinforcement Learning for Autonomous Cyber Defense

Policy-based reinforcement learning (RL) approaches have produced promising results for autonomous cyber defense; howeve

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-07 发布INFO

Package Hallucination Attacks on Coding Agents through Prompt Injection in Rule Files

Modern agentic coding frameworks increasingly rely on community-shared rule files (e.g., AGENTS.md or .cursorrules) to g

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-06 发布INFO

Quad-State Safety Evaluation of Open-Weight Large Language Models on Non-Canonical Inputs

Standard safety evaluations of large language models assess harmful requests written in canonical plain text, while mode

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-06 发布INFO

Sigma-Hunter: A Domain-Specific Language Model for Threat Hunting and Detection Engineering

Detection engineers must translate threat reports, forensic observations, and hunt hypotheses into precise, testable rul

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-06 发布INFO

ASPIRE: Agentic Safety & Prompt Injection Red-teaming Engine

LLM agents retrieve untrusted content and act through tools, creating indirect prompt-injection risks that can cause una

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-06 发布INFO

Multi-Aspect Runtime Verification for Simulation-Based V&V of LLM-Enabled Autonomous Agents

LLM-based agents are entering decision-support roles in defence staff work, where the obligations they must respect are

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-06 发布INFO

Secure Speculative Decoding for Large Language Models

Speculative decoding accelerates inference for a large language model (LLM), referred to as the \emph{target model}, by

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-06 发布INFO

Semantic Behavioral Watermarking: Paraphrase-Robust and Forgery-Resistant Provenance for LLM Agents

Behavioral watermarking embeds an owner identifier in an LLM agent's high-level action choices, giving provenance withou

历史摘要 · 未重新核验 · arXiv cs.CR