Can Agents Keep Secrets They Were Never Told? Benchmarking Latent Privacy Risks Across Sessions with MemJoin
To support sustained interactions and personalized assistance, agents use long-term memory to retain and combine user in
2026-10-20 归档
今日共收录 730 条安全情报，包含 0 个 CVE，352 篇安全通告，以及 100 篇研究论文。
← 返回归档列表RATION: Towards Quantitative Risk-Based Access Control for AI Agents
AI agents increasingly interact with external environments to complete complex user tasks. These interactions can lead t
Predicting CVSS and CWE from CVE Descriptions with Fine-Tuned Small Language Models
Until April 2026, the National Vulnerability Database labeled nearly every published Common Vulnerabilities and Exposure
Empirical Analysis of TEE-Enabled Rollup Designs
Layer 2 (L2) rollups have become the dominant scaling solution in Ethereum. At the core of these systems lies the rollup
Towards an Intelligent Decision Engine for Smart Contract Deployment
Layer 2 (L2) blockchain solutions emerged in recent years, predominantly in the Ethereum ecosystem, as a viable option f
Automated Rule Mutation for Emerging Attack Variants using Infrastructure-Aware Technique Proximity
Detection rules are typically crafted based on specific observations of an attack. While these rules are effective for p
Recording-Aware Evaluation of Multimodal OT Intrusion Detection
Machine-learning-based intrusion detection systems (IDSs) for operational technology (OT) are commonly evaluated on benc
Bad Diagnosis: Analyzing Consent and Data Collection Practices of Mobile Medical Apps
Mobile health (mHealth) apps collect personally-identifiable information while handling uniquely sensitive medical data,
Task-aware Kernel Stein certificates for Rényi differential privacy
Rènyi differential privacy, based on Rènyi divergence, has become a notion of choice for privacy guarantees. However, ou
ToolRosetta: Surface-Form Invariance of Tool-Call Guards
Step-level guards for tool-using agents are evaluated on tidy JSON tool calls, but deployed coding agents act through ex
Red-Teaming Multi-Agent Attacks for Loss-of-Control Risks
AI agents are growing more capable and persistent, and are being deployed in ever larger numbers. As more start collabor
HardEval: An Execution-Verified Benchmark for AI-Driven Security Hardening and Compliance Remediation
Implementing Security Technical Implementation Guide (STIG) controls remains a demanding operating-system administration
TUPLE-Bench: Evaluating and Mitigating Privacy-Utility Trade-offs in Typed Decision Models
Typed decision models often return more than a selected category. They also expose probabilities for each candidate and,
From Billion-Scale to Million-Scale Language Models: Operational Capabilities for Embedded Post-Exploitation
Small Language Models (SLMs) are increasingly attractive for resource-constrained environments due to their low computat
On the (In)stability of Adaptive Fee Mechanisms in Multi-Chain Systems
EIP-1559 has become the dominant transaction fee mechanism in permissionless blockchains, regulating scarce block space
Trojan Horse: Automated Repository Poisoning against Coding Agents
Coding agents are increasingly capable with autonomy, which exposes them to repository-level poisoning. Existing red-tea
Concrete Functions in Private Simultaneous Quantum Messages: Quantum Advantages and Structural Limitations
Private simultaneous quantum messages (PSQM) provide a minimal model of noninteractive secure multiparty quantum computa
When Approval Becomes Execution: Authorization-Grounded Workflow Attacks on Tool-Using Agents
Tool-using language-model agents increasingly rely on local services for document access, approval management, and enter
Aspire: Practical Batch Queries on Dynamic Encrypted Database with Full Leakage Suppression
Leakage-abuse attacks against encrypted database systems exploit semantic leakage and pose a severe threat to the confid
抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！
抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！