CJIS v6.1 Compliance: 5 Practical Priorities for Agencies
CJIS v6.1 requires agencies to maintain strong authentication, account security, and audit controls while demonstrating
2026-10-21 归档
今日共收录 2917 条安全情报，包含 2077 个 CVE，435 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Hacker gets 8 years for stealing $3.3 million from taxpayers
A Nigerian national was sentenced to eight years in prison for his involvement in a series of spearphishing attacks targ
Windows Server 2025 gets support for quick machine recovery
Microsoft announced that IT administrators can now use quick machine recovery on Windows Server 2025 after installing th
Ahold Delhaize: Cyberattack affects services across US and Europe
Ahold Delhaize, one of the world's largest food retail chains, confirmed that last week's cyberattack disrupted services
Revolut outage disrupts online banking operations worldwide
Fintech company Revolut is working to resolve a massive outage that disrupted most of its services worldwide earlier tod
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware
An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's
AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign
Across multiple short compromise windows, users were served a downloader for the ShinyRoad modular backdoor framework. T
A Digital Twin to Improve Cyber-Social Impact
The increasing complexity of Industrial Control Systems (ICS) and their integration with IT infrastructures has signific
After the Attacker Leaves: Benchmarking Carryover Attacks on LLM Agents
Modern LLM agents persist state across sessions via two channels: long-lived memory files silently prepended to the syst
MAS-Guard: Unified Guardrails from Individual Agents to Multi-Agent LLM Systems
Agentic AI extends large language models (LLMs) from generating responses to planning and executing complex workflows, s
Disclosure Begets Disclosure: A Self-Reinforcing Privacy Loop in LLM Agents with Persistent Memory
Large language model (LLM) agents increasingly use persistent memory to personalize responses, and personal attributes i
ClawMMU: Protection-Coherent Virtual Memory for Stateful LLM Agents
AI agents keep long-term memory, much of which comes from web pages and tool results. Agent harnesses, the software that
Contextual Candour: Role-Aware Graduated Disclosure for LLMs over Mixed-Sensitivity Contexts
LLMs increasingly operate over mixed-sensitivity contexts, where they must reason over information ranging from public t
Raise or Check? Predicting the Necessity of Additional Fuzzing for Continuous Fuzzing
Continuous fuzzing is used for vulnerability detection in Open Source Software (OSS). Large-scale services such as Googl
HydraPoT: A Configurable Multi-Agent Framework for Cost-Aware LLM-Assisted Honeypots
Large language models (LLMs) can improve honeypot realism by generating dynamic, context-aware responses, but powerful c
Local Allow, Global Deny: Why Per-Action Authorization Does Not Compose in LLM Agents
Autonomous LLM agents act through tools under per-action authorization: a local guard screens each tool call in isolatio
The Show-Up Attack: When Subagents Win Over Their Supervisor
Multi-agent systems are increasingly deployed to coordinate multiple large language model (LLM) agents. However, this al
Act on Your Behalf, Beyond Your Authorization: Benchmarking LLM Agent Authorization Alignment
When an LLM agent acts on behalf of a user, it is expected to act within the authorization scope the user grants. Existi
Exposing Vulnerability Monoculture Through Systemic Adversarial Robustness
Beneath the apparent diversity of foundation models lies an increasingly homogeneous technical stack of common training
Global Security Blind Spots: Translation as a Safety Bypass in Low-Resource Languages
Large language models are deployed globally, yet safety alignment and evaluation remain concentrated in English: harmful