CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four
2026-10-22 归档
今日共收录 1761 条安全情报，包含 937 个 CVE，415 篇安全通告，以及 100 篇研究论文。
← 返回归档列表OpenAI agents disabled safety monitoring, one lied about it
OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tas
ClickFix has never been bigger, and AI tools are its most convincing lure yet
ClickFix attacks are surging as cybercriminals use fake AI installers, malicious search results, and trusted chatbot pla
Microsoft PowerToys adds CursorHide, Button Lock mouse tools
Microsoft has released PowerToys 0.102, with two new mouse utilities, new command-line tools, and Command Palette improv
CISA: SafePay ransomware hit over 600 critical infrastructure orgs
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 criti
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a crede
High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7
Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of t
Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking th
Prompt Injection Through Forensic Evidence: A Taxonomy and Proof of Concept of Anti-Forensic Attacks on LLM-Assisted Digital Investigations
Large language models (LLMs) are entering digital forensics as examination assistants and autonomous agents. Digital for
CertMoE: Robustness Certification for Mixture-of-Experts LLMs via Routing-Aware Smoothing
Provable robustness is a cornerstone of trustworthy machine learning, aiming to guarantee model predictions under advers
Where AI Vulnerability Discovery Harnesses Go Quiet: Structural False Negatives and Hidden Vulnerabilities
LLM-based vulnerability discovery harnesses can miss real, reachable vulnerabilities because of how the harness around t
Beyond Binary Labels: Diagnostic Evaluation of LLM Safety with Prompt-Level Rubrics
Current LLM safety benchmarks predominantly rely on binary safe or unsafe labels, lacking explanatory depth and sufferin
Cryptanalysis and Repair of "Decentralized Multi-authority ABE for NC$^1$ from BDH"
We present a plaintext-recovery attack on the decentralized multi-authority attribute-based encryption construction of D
Black-Box Red-Teaming of Multi-Agent Systems via Reinforcement Learning
Large language model (LLM) agents are increasingly deployed in multi-agent systems (MAS) to accomplish complex tasks. Pr
Combining Long-Term Memory and LLMs Comes at a High Cost: From Prompt Injection to Persistent Compromise
The widespread adoption of generative artificial intelligence in recent years has brought a parallel rise in prompt inje
How Much Does the Harness Matter, and for Whom? A Multi-Model Study of Context in LLM-Driven Vulnerability Discovery
How much does an agent harness affect vulnerability discovery, and does its value depend on the model? We study 24 model
CALLIOPE: Private Insights into AI Use, Without Embeddings
We introduce CALLIOPE, a top-down framework for discovering topic hierarchies in large corpora of unstructured data (e.g
Sign Here: Attributing a Source for a More Trustworthy Software Supply Chain
Software supply chain attacks continue to be on the rise, exploiting the trust that helps open source ecosystems thrive.
A Digital Twin to Improve Cyber-Social Impact
The increasing complexity of Industrial Control Systems (ICS) and their integration with IT infrastructures has signific
After the Attacker Leaves: Benchmarking Carryover Attacks on LLM Agents
Modern LLM agents persist state across sessions via two channels: long-lived memory files silently prepended to the syst