2026-10-15 归档

今日共收录 805 条安全情报,包含 0 个 CVE,398 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-10-15 发布INFO

Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that...

CVE-2026-110862

Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated...

CVE-2026-110853

n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow i

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege Vulnerability

CVE-2026-70179

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability

CVE-2026-88092

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability

CVE-2026-70188

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

学术论文2026-10-14 发布INFO

Towards Efficient Threat Intelligence Instruction Tuning via Quality-Aware and Optimal Transport-Guided Data Selection

High-quality data is essential for improving instruction tuning in threat intelligence analysis. However, existing metho

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-14 发布INFO

A Graph-Based Analysis of Comparability, Scale, and Attribution in Private Transformer Inference

Rising privacy concerns around large language models have accelerated research in private Transformer inference (PTI). S

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-14 发布INFO

Mission (Im)Possible: Towards Autonomous Discovery of Autopilot Logic Flaws in Open-Source Drone Frameworks

Autonomous drones are increasingly deployed in safety-critical tasks, yet their autopilot software can still contain sub

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-14 发布INFO

What You Sign Is Not What You Run: The Verifiability Gap in Quantized LLM Supply Chains

Model signing authenticates the full-precision weights W an LLM is released with, yet users run a quantized artifact Q w

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-13 发布INFO

Rethinking Quality in Large Language Model Routing: Security-Conditioned Model-and-Budget Selection

Large language model (LLM) routers reduce serving cost by choosing which model to call and how many output tokens to gra

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-13 发布INFO

Pin It on Anyone: Certified Targeted Displacement of Multi-Bit LLM Watermarks Without the Key

Multi-bit watermarking embeds a message, typically an account identifier, into LLM output so that harmful text can be tr

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-12 发布INFO

VeriRouter: Towards Verifiable LLM Routing

Large language model (LLM) routers are increasingly deployed to optimize quality, latency, and cost through dynamic mode

历史摘要 · 未重新核验 · arXiv cs.CR

威胁情报2026-10-15 发布INFO

Cloud & Application Security

Cloud & Application Security

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-10-15 发布INFO

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-10-15 发布INFO

Next-Gen Identity Security

Next-Gen Identity Security

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-10-15 发布INFO

cloud architecture assessment

cloud architecture assessment

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-10-15 发布INFO

Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand

Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-10-15 发布INFO

The Identity Problem Hiding in AI Agent Deployments

The Identity Problem Hiding in AI Agent Deployments

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-10-15 发布INFO

Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud

Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-10-15 发布INFO

Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud

Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud

历史摘要 · 未重新核验 · CrowdStrike