Guided Diffusion for Trustworthy Synthetic Text Generation
The rapid evolution of Large Language Models is fueled by massive datasets, yet this reliance poses severe privacy risks
2026-10-21 归档
今日共收录 2917 条安全情报，包含 2077 个 CVE，435 篇安全通告，以及 100 篇研究论文。
← 返回归档列表When Models Know but Can't Linearly Say: Relational Encoding Limits Linear Vulnerability Classification in Code LLMs
Large language models can detect vulnerable code, yet the form of vulnerability encoding in their representations remain
Profile-DP: Differential Privacy for User-Controlled Profile Release in Personalized LLM Inference
Personalized large language models (LLMs) increasingly rely on profile-conditioned inference, pairing public requests wi
You Are the Trigger: Speaker-Activated Backdoors
Speech models are increasingly used as an interface to AI systems, from transcription tools to voice agents. Existing au
Game of Phones: Harnessing Game Theory and LLMs in 'Bot Wars' to Counteract Phone Scams
Phone scams impose substantial and growing costs on individuals and financial systems worldwide, yet existing countermea
Beyond Attack Success Rate: Cost-Aware Metric for Evaluating Iterative LLM Jailbreaks
Attack success rate (ASR) evaluates jailbreaks against large language models without accounting for repeated calls to th
Fake News, Real Crashes: Information Injection Attacks on LLM Financial Trading Agents
Large language model (LLM) agents now trade real capital using news as evidence, yet they cannot reliably tell fabricate
LeakBench: Auditing Reward Hacking through Prediction-Time Leakage in Clinical Modeling Agents
Autonomous clinical-modeling agents can optimize predictive performance while violating conditions that make a model usa
SpanGuard: Decoupling Instruction Localization from Authorization for Lightweight IPI Defense
LLM-based guardrails are effective against indirect prompt injection (IPI), but their performance depends heavily on mod
SPLASH: Contrastive Audit Pressure for Detecting and Localizing Security Hallucinations in Generated Code
Code generated by large language models often passes every functional test while remaining insecure. These security hall
Auditor-Assisted Summary-Channel Verification for Hosted LLM Identity Substitution
Hosted LLM services increasingly expose model identity as a product claim, but external users and auditors often cannot
Budgeted Attack Scheduling for LLM Red-Teaming: The Roles of Static Priors, Semantic Guidance, and Online Feedback
As jailbreak attacks against large language models (LLMs) become increasingly diverse, red-teaming has come to rely on l
How Effectively Do Security Skills Guide Coding Agents in Vulnerability Detection in Linux Kernel?
Large language model (LLM) coding agents, such as Claude Code, are increasingly used for security auditing, with task-sp
SEAL: Towards Persistent Tool Poisoning Attack against LLM Agents via Prefix-Eliciting Trigger
Tool poisoning has emerged as a critical security threat to LLM agents, where adversaries embed malicious instructions i
Many Repairs, One Direction: Steering Code Models Toward Safer Cryptographic API Use
Cryptographic API misuse in large language model-generated code can compromise software security. While many existing ap
uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
By default, uv verifies TLS connections against a vendored copy of the `webpki-root-certs` bundle. Versions before 0.13.
certifi bundles emSign root CAs with compromised intermediate CA keys
Certifi versions before 2026.10.18 include the `emSign ECC Root CA - G3` root certificate in their bundled CA store. Eig
[原创]CVE-2020-6507利用链
CVE-2020-6507
[原创]CVE-2020-6507利用链
CVE-2026-39821：Go idna 纯 ASCII 标签解码漏报
CVE-2026-39821
CVE-2026-39821：Go idna 纯 ASCII 标签解码漏报
CVE-2026-6791：8 MiB 输入击穿 glibc wordexp 栈
CVE-2026-6791
CVE-2026-6791：8 MiB 输入击穿 glibc wordexp 栈