2026-10-14 归档

今日共收录 1875 条安全情报,包含 867 个 CVE,609 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-10-13 发布INFO

Role: DNS Server Information Disclosure Vulnerability

CVE-2026-97824

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Role: DNS Server Information Disclosure Vulnerability

CVE-2026-97822

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Role: DNS Server Information Disclosure Vulnerability

CVE-2026-97823

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Role: DNS Server Information Disclosure Vulnerability

CVE-2026-97821

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Role: DNS Server Information Disclosure Vulnerability

CVE-2026-97820

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Extended Stable Update for Desktop

CVE-2026-87581 · CVE-2026-110153 · CVE-2026-110148 · CVE-2026-87558 · CVE-2026-110139 · CVE-2026-19175 · CVE-2026-110162 · CVE-2026-87474 · CVE-2026-110141 · CVE-2026-110163 · CVE-2026-110147 · CVE-2026-110140 · CVE-2026-110171 · CVE-2026-110155 · CVE-2026-110160 · CVE-2026-106383 · CVE-2026-106347 · CVE-2026-106235 · CVE-2026-110161 · CVE-2026-110157 · CVE-2026-110136 · CVE-2026-106200 · CVE-2026-110170 · CVE-2026-110167 · CVE-2026-106184 · CVE-2026-110164 · CVE-2026-106358 · CVE-2026-110156

 The Extended Stable channel has been updated to 152.0.7977.167 for Windows and Mac which will roll out over the coming

历史摘要 · 未重新核验 · Google Chrome Releases

威胁情报2026-10-13 发布INFO

When LLM Gateways Go Wrong: Findings from LiteLLM

CVE-2026-59823 · CVE-2026-35029

TL;DR; Our security assessment of LiteLLM (v1.77.7), a widely used open-source LLM gateway, uncovered multiple high-impa

历史摘要 · 未重新核验 · Check Point Research

学术论文2026-10-13 发布INFO

Bytes to Threats: Byte-Sequence Transformer For Malware Detection

Existing malware detection approaches heavily rely on handcrafted features derived from static or dynamic analysis of th

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-13 发布INFO

BALLAST: Physics-Aware Moving Target Defense for Industrial Control Systems Using a Digital Twin Safety Oracle

Industrial Control Systems run on static network configurations, which leaves an attacker unlimited time to map the plan

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-13 发布INFO

Holding Agents Accountable with Verifiable Agent Insurance

While AI agents are useful for many tasks, they regularly misbehave in destructive ways, such as deleting important data

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-13 发布INFO

Privacy-Preserving GNN Inference on Financial Transaction Graphs via Homomorphic Encryption

Anti-money laundering (AML) in financial networks requires modeling transaction patterns that span multiple institutions

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-13 发布INFO

Extending Layered Attestation into ARM Application Run-Times

Modern mobile and edge platforms provide hardware-backed attestation of application and platform integrity at load-time.

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-13 发布INFO

Discovery or Memorization? A Faithful Benchmark for Real-World Business-Logic Vulnerability Discovery

The rapid advancement of cybersecurity agents in vulnerability discovery has increased the need for benchmarks that eval

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-12 发布INFO

Security and robustness analysis of encrypted communications for local home automation: ESPHome Native API and MQTT over TLS 1.3

The expansion of the Internet of Things (IoT) in residential and local automation environments has highlighted the limit

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-12 发布INFO

CryptoFlowBench: Benchmarking Multi-Hop Reasoning on Blockchains for Cryptocurrency Fund Tracing

Pseudonymous accounts and complex smart-contract ecosystems substantially hinder the tracing of illicit cryptocurrency f

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-12 发布INFO

Resource-constrained Remote Attestation of Smart Meters Using Merkle Trees in a Trusted Execution Environment

Smart meters are pivotal to the functioning of smart grids, as they measure and transmit energy consumption data that in

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-12 发布INFO

HDKEM: Authentication Allocation for Deniable Hybrid Key Exchange

Deniable authenticated key exchange (DAKE) establishes a shared key without leaving transferable evidence that a party p

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-11 发布INFO

Penetrating the Reality Wall: Long-Range and Through-Wall AR/VR Privacy Eavesdropping via Wireless Power Side Channel

Over the past decade, Metaverse technology (AR/VR) has seen widespread adoption in numerous areas, including gaming, soc

历史摘要 · 未重新核验 · arXiv cs.CR

安全公告2026-10-13 发布INFO

dataclasses-avroschema enum symbols can inject statements through generated member names

CVE-2026-108385

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string

CVE-2026-108384

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates

历史摘要 · 未重新核验 · OSV.dev