web_trafficRead the guide
web_trafficRead the guide
2026-10-20 归档
今日共收录 730 条安全情报，包含 0 个 CVE，352 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Nikkei discloses third data breach in a month, 1.8M records exposed
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information reco
WordPress SEO plugin Rank Math compromised to backdoor websites
Some downloads of the Rank Math PRO WordPress plugin from the vendor's official website carried malware that planted hid
Hackers hijack AOMEI update servers to secretly spread malware
Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backu
Bullhorn takes staffing platform offline to contain cyberattack
Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wid
OpenCode hack exposes API keys amid AI distillation attacks
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external pr
Microsoft fixes game, app crashes caused by recent Windows update
Microsoft has resolved a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after install
F5 releases out-of-band patches for critical NGINX vulnerabilities
F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severi
Microsoft fixes classic Outlook bug that hid Copilot buttons
Microsoft has fixed a known issue that removed the Copilot Chat and Copilot buttons in the classic Outlook desktop mail
GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workf
Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack
Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16. The
Game of Phones: Harnessing Game Theory and LLMs in 'Bot Wars' to Counteract Phone Scams
Phone scams impose substantial and growing costs on individuals and financial systems worldwide, yet existing countermea
Beyond Attack Success Rate: Cost-Aware Metric for Evaluating Iterative LLM Jailbreaks
Attack success rate (ASR) evaluates jailbreaks against large language models without accounting for repeated calls to th
Fake News, Real Crashes: Information Injection Attacks on LLM Financial Trading Agents
Large language model (LLM) agents now trade real capital using news as evidence, yet they cannot reliably tell fabricate
LeakBench: Auditing Reward Hacking through Prediction-Time Leakage in Clinical Modeling Agents
Autonomous clinical-modeling agents can optimize predictive performance while violating conditions that make a model usa
SpanGuard: Decoupling Instruction Localization from Authorization for Lightweight IPI Defense
LLM-based guardrails are effective against indirect prompt injection (IPI), but their performance depends heavily on mod
SPLASH: Contrastive Audit Pressure for Detecting and Localizing Security Hallucinations in Generated Code
Code generated by large language models often passes every functional test while remaining insecure. These security hall
Auditor-Assisted Summary-Channel Verification for Hosted LLM Identity Substitution
Hosted LLM services increasingly expose model identity as a product claim, but external users and auditors often cannot
Budgeted Attack Scheduling for LLM Red-Teaming: The Roles of Static Priors, Semantic Guidance, and Online Feedback
As jailbreak attacks against large language models (LLMs) become increasingly diverse, red-teaming has come to rely on l
How Effectively Do Security Skills Guide Coding Agents in Vulnerability Detection in Linux Kernel?
Large language model (LLM) coding agents, such as Claude Code, are increasingly used for security auditing, with task-sp