Hybrid Hierarchical Runtime Verification for Edge-IoT Security: Combining MonPoly and RTLola
Security monitoring of edge-IoT fleets faces three structural challenges. (i) A per-node monitor is cheap but cannot see
2026-10-10 归档
今日共收录 1383 条安全情报，包含 534 个 CVE，469 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Hierarchical Security Monitoring for Edge-IoT: A Formal Methods Approach
Cyber resiliency in edge-IoT deployments is fundamentally an economic problem: detection must keep critical processes op
Automotive Hardware Attacks: An Architect's Guide to TARA
Threat analysis and risk assessment (TARA) according to ISO/SAE 21434 treats implementation-level hardware attacks incon
When Routing Reveals Membership: Privacy Leakage from MoE Router Telemetry
Mixture-of-Experts (MoE) language models produce routing information during inference that may be logged or exposed for
Temporal transformer CAN encoder with federated lightweight heads for anomaly detection
Modern vehicles rely on large numbers of Electronic Control Units (ECUs) that constantly exchange information over the C
SwarmReconGuard: Black-Box Detection of Distributed Collective Reconnaissance by Individually Benign-Looking Agent Populations
Autonomous and agentic clients can distribute reconnaissance across many identities so that each request remains valid,
TwinGuard-Lite: A Rule-Based State-Admission Gateway for Generative Patient Digital Twins
Future generative patient digital twins may combine longitudinal health records with language-model agents and keep info
Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category
CVE-2026-108096
Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Cat
yopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labels
CVE-2026-107840
yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics
RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertion
CVE-2026-107838
RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded syste
RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handling
CVE-2026-107837
RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded syste
RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size
CVE-2026-107836
RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded syste
x64dbg-MCP Server exposes debugger operations to unauthenticated network clients
CVE-2026-107824
x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functional
x64dbg-MCP Server vulnerable to pre-authentication denial of service through Content-Length integer overflow
CVE-2026-107820
x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functional
MariaDB: privilege escalation via incorrect view frm parsing
CVE-2026-107823
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3
MariaDB: database privilege escalation via user / role name collision in the acl cache
CVE-2026-107822
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3
MariaDB: insufficient validation of binary frm data when opening a table
CVE-2026-107821
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3
MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure
CVE-2026-107819
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1
MariaDB: environment injection via wsrep bootstrap in the mariadb.service file
CVE-2026-107818
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3
MariaDB: mysql_json plugin OOB reads
CVE-2026-107817
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3