2026-10-21 归档

今日共收录 2917 条安全情报,包含 2077 个 CVE,435 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand() allocates a non-emp...

CVE-2026-112392

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed shared credential can be accep...

CVE-2026-105815

TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON

历史摘要 · 未重新核验 · NVD

学术论文2026-10-20 发布INFO

Context-Aware Prompt Injection Detection via Small Language Models in RAG Pipelines: nokast-secureRAG

Local Retrieval-Augmented Generation (RAG) systems are vulnerable to indirect prompt injection and retrieval poisoning,

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-20 发布INFO

Latency-Neutral Passive Cyber Monitoring for Grid-Edge Operational Technology Networks

Deterministic industrial networks often present an operational trade-off between maintaining microsecond timing of prima

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-20 发布INFO

Testing TLS 1.3 PQC on constrained devices and microcontrollers

The UK, EU and US governments have set timelines for post-quantum cryptography migration of critical systems, with deadl

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-20 发布INFO

Make the Adversary Spend More Energy: Generative Deception against Language-Model Attackers in Critical Infrastructure

Language-model attackers consume computational resources as they explore and interact with a target, creating an opportu

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-20 发布INFO

Privacy Accounting for Empirical Denoisers

Diffusion models have emerged as the foundation of modern generative systems, yet their high memorization capacity raise

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-20 发布INFO

Privacy-Preserving Personalized Federated Learning (PPP-FL) for Medical Imaging

Federated learning (FL) is a distributed machine learning paradigm that reduces transmission costs, mitigates cross-bord

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-20 发布INFO

SRE: Accelerating Zero-Knowledge Proofs via Scalar Redundancy Elimination in Multi-Scalar Multiplication

Multi-Scalar Multiplication (MSM) is a fundamental cryptographic operation used in Elliptic Curve Cryptography (ECC) acr

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-20 发布INFO

Interflow: Breaking the Offline-Online Barrier for Private AI at the Edge

Privacy-preserving machine learning (PPML) offers a promising path toward bringing powerful AI services to the edge with

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-19 发布INFO

A Hybrid Information Flow Analysis Framework for Android Hybrid Apps

The WebView interface in Android (hybrid) applications enables the native side (e.g., Java) to exchange data with the We

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-19 发布INFO

A Combined Streaming FPGA Architecture for Client-Side CKKS Encoding and Encryption

Homomorphic encryption allows a computing service to process encrypted data, but the client must first encode and encryp

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-19 发布INFO

Model Exposure on One Device Endangers Others: Rethinking Edge Neural Network Security across Devices

Neural networks (NNs) are increasingly deployed on edge devices such as mobile and IoT platforms, offering low latency a

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-19 发布INFO

Mind Your Boundaries: Boundary-Aware Model Obfuscation against Cross-node Attack

With the advancement of powerful AI chips, on-device machine learning is gaining traction for its low latency and privac

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-19 发布INFO

Accountable partial understanding: securing the epistemic attack surface of agentic systems

Attackers profit from what defenders do not understand. Software security has treated the gap between system behavior an

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-19 发布INFO

BrushOff: Stroke-Based Re-rendering as a Watermark Removal Attack on Painting

Invisible watermarks are used to mark who owns a painting. We show that a simple attack removes the most robust one we t

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-19 发布INFO

Fortress: Fork Resistant Transparency logs Relying on Social graph Structure

Transparency systems -- such as Key Transparency (KT), Certificate Transparency, and binary transparency -- require that

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-19 发布INFO

Signature Knowledge Shielding: Protecting Antivirus Detection Knowledge through Robust Embedding Matching

Antivirus (AV) signatures encode valuable detection knowledge accumulated through expert analysis, yet repeated black-bo

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-18 发布INFO

PRICE: Privacy-Preserving Image Classification in Mobile Edge-Cloud Computing with Homomorphic Encryption

Cloud-assisted image classification enables many mobile AI applications, but transmitting raw images to the cloud raises

历史摘要 · 未重新核验 · arXiv cs.CR

安全公告2026-10-21 发布INFO

京ICP证080047号[京ICP备08010314号-6]

京ICP证080047号[京ICP备08010314号-6]

历史摘要 · 未重新核验 · 360CERT