Take the assessment
Take the assessment
2026-10-12 归档
今日共收录 1168 条安全情报，包含 403 个 CVE，452 篇安全通告，以及 67 篇研究论文。
← 返回归档列表Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Ass
CrowdStrike and Anthropic Give Critical Infrastructure Defenders the AI AdvantageOct 08, 2026
CrowdStrike and Anthropic Give Critical Infrastructure Defenders the AI AdvantageOct 08, 2026
Nippon Columbia malware incident exposes 8.6 million karaoke fan records
Daiichi Kosho, a major Japanese entertainment system maker, disclosed that a malware infection at its contractor, Nippon
ToFu: Exploiting and Fuzzing the LLM-Orchestrator-Tool Trust Boundary
Large language models (LLMs) are increasingly deployed as agents that interact with external software through tools, wit
EviRepair: Evidence-Driven Agents for Reliable Vulnerability Repair
Recent advances in large language models (LLMs) have enabled agent-based approaches for repository-level automated vulne
Understanding Verification Vulnerabilities in Cross-chain Bridges: An Empirical Study
With the rapid development of blockchain technology, numerous heterogeneous blockchains have emerged, each featuring dis
Vulnerable Models in the AI Supply Chain: An Empirical Study of Adoption, Propagation, and Usage Patterns
The rapid integration of Artificial Intelligence (AI) models has established a complex supply chain, but many of these s
VEPA: Verified Evolving Formal Policy for Lifelong LLM Agent Guardrails
LLM agents increasingly operate over sensitive resources, such as private documents and mutable system states, which can
Cancerous Backdoor Attack: Gradual Activation via Invisible Tokens and A Stage Controller
Backdoor Attacks on Large Language Models (LLMs) typically follow a trigger-response pattern, where satisfying a trigger
Poster: A Preliminary Study of LLM Distillation Inference
Unauthorized model distillation, in which a model is trained on the outputs of a proprietary large language model (LLM),
Could LLM Watermark Detection be Public?
Watermarking large language models is popular for tracing chatbot and agentic outputs, yet detectors remain unreleased s
SemField: A Simple, Linear, Continuous, yet Robust Semantic Watermark
The rapid proliferation of Large Language Models (LLMs) necessitates reliable watermarking techniques to identify AI-gen
Anytime-valid detection of LLM weight exfiltration
A compromised LLM inference server can leak model weights by encoding payload bits in otherwise plausible token choices.
Where Do the Tokens Go? Understanding and Reducing Costs in LLM Agents for Vulnerability Discovery
LLM agents can spend millions of tokens during vulnerability discovery without producing a working proof of concept (PoC
[原创] 别傻了，你的引擎加密挡不住"不讲武德"的邪修 —— XA 内存盲打补丁，记偏移秒改的实战套路
[原创] 别傻了，你的引擎加密挡不住"不讲武德"的邪修 —— XA 内存盲打补丁，记偏移秒改的实战套路
[原创]IDAPro v9.4.260714 汉化补丁修正错误
[原创]IDAPro v9.4.260714 汉化补丁修正错误
[原创]CVE-2020-6507利用链
CVE-2020-6507
[原创]CVE-2020-6507利用链
CVE-2026-39821：Go idna 纯 ASCII 标签解码漏报
CVE-2026-39821
CVE-2026-39821：Go idna 纯 ASCII 标签解码漏报