2026-10-12 归档

今日共收录 1168 条安全情报,包含 403 个 CVE,452 篇安全通告,以及 67 篇研究论文。

← 返回归档列表
安全公告2026-10-12 发布INFO

Android repository

Android repository

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-10-12 发布INFO

@AndroidDev on X

@AndroidDev on X

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-10-12 发布INFO

Android Help Center

Android Help Center

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-10-12 发布INFO

www.android.com

www.android.com

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-10-12 发布INFO

Google Mobile Services

Google Mobile Services

历史摘要 · 未重新核验 · Android Security Bulletin

威胁情报2026-10-12 发布INFO

Firewall for AI

Firewall for AI

历史摘要 · 未重新核验 · Akamai Security Research

安全公告2026-10-12 发布INFO

VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data....

CVE-2026-108982

VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not terminate th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-12 发布INFO

In the modem OTA stack, there is a possible stack-based buffer overflow due to improper...

CVE-2026-66086

In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling informa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-12 发布INFO

A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function...

CVE-2026-108770

A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the fi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows...

CVE-2026-108860

BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that...

CVE-2026-108853

UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-pri

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-11 发布INFO

Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host...

CVE-2026-108753

Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which s

历史摘要 · 未重新核验 · GitHub Advisory

学术论文2026-10-08 发布INFO

Byzantine-Resilient Federated Large Language Model via Hypergraph Message Passing

Federated Large Language Models (FedLLMs) are promising to deliver privacy-preserving, collaborative intelligence. The d

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-08 发布INFO

ORCAGen: Orchestrating Context-Aware Malware Deception with RAG-Guided Generative AI

Malware defenses often remove or isolate suspicious programs as quickly as possible. While effective for containment, th

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-08 发布INFO

A Security Meta-Model for Retrieval-Augmented Generation Systems

Retrieval-Augmented Generation (RAG) systems extend large language models (LLMs) with external knowledge through a multi

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-08 发布INFO

LTBD: Learnable Trust-Boundary Delimiters for Prompt Injection Defense

Large language models (LLMs) perform remarkably well on complex tasks, yet remain highly vulnerable to prompt injection

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-08 发布INFO

SoK: Are LLMs Reliable at Source Code Recovery? A Taxonomy and Empirical Evaluation

Effective source recovery is critical to security applications such as malware analysis, vulnerability assessment, and l

历史摘要 · 未重新核验 · arXiv cs.CR

威胁情报2026-10-11 发布INFO

Cloud & Application Security

Cloud & Application Security

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-10-11 发布INFO

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-10-11 发布INFO

Next-Gen Identity Security

Next-Gen Identity Security

历史摘要 · 未重新核验 · CrowdStrike