Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vuln
2026-10-23 归档
今日共收录 1236 条安全情报，包含 262 个 CVE，575 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Social-HUMINT: An LLM-Augmented Unified Framework for Measuring Social Media Exposure
In the post-API landscape, social-media profiling has become inexpensive and automated: Large Language Models (LLMs) can
AgentPhishing: A Benchmark of LLM Email Agents Under Adaptive Attack
Computer-use agents increasingly handle private information and act on users' behalf across desktop and web applications
AfterDeleteBench: Auditing Post-Deletion Information Persistence in LLM Agents
Many LLM agents maintain external persistent memory and derive additional state from past interactions, such as summarie
Weaponizing the Exit: Input Privacy Leakage via Exit Routing Manipulation in Multi-Exit Networks
Multi-exit networks improve inference efficiency by allowing inputs to terminate early at intermediate exits. We identif
SecLog-Bench: A Scalable Benchmark for Cybersecurity Log Reasoning with Scaffolded Evidence
Large language models (LLMs) have shown strong potential for cybersecurity, leading to growing interest in LLM-based aut
Bridging Number-Theoretic Primality Testing And Algorithmic Optimization: An Adaptive Cryptographic Framework
The security of modern public-key cryptographic systems, such as RSA, Diffie-Hellman, and ECC, depends entirely on the c
Amplifying Latency and Cost of LLM Inference via Rowhammer Attack
Large language models (LLMs) achieve high inference efficiency using optimized GPU kernels generated by just-in-time (JI
Model-intrinsic, Weight-level, and Training-free Spectral Fingerprinting for Large Language Models
The increasing release and reuse of Large Language Models (LLMs) as open-weight checkpoints make model fingerprinting im
HiMark: Hierarchical and Controllable Multi-bit Watermarking for Large Language Models
With the rapid adoption of large language models (LLMs) in text generation applications, it has become increasingly diff
Beyond End-to-End Recovery: Towards a Better Understanding of LLM Steganography via Rolewise Decomposition
In large language model (LLM) steganography, an encoder hides a private message in an otherwise ordinary response, as te
Agent Mosaic: Recognizing Confidentiality Leaks in Agentic LLM Systems
Modern LLM agents can retrieve information from accessible documents, and then disclose a sensitive conclusion assembled
Data-Void Exploits in Web-Searching LLMs
Web-searching Large Language Models (LLMs) have changed how users seek online information: instead of sifting through ra
PhishGen: Understanding LLM Capabilities in Automated Phishing Website Generation
Phishing relies on visual deception, traditionally requiring web-development skills or pre-built kits. LLMs erode this b
Prompt Injection Through Forensic Evidence: A Taxonomy and Proof of Concept of Anti-Forensic Attacks on LLM-Assisted Digital Investigations
Large language models (LLMs) are entering digital forensics as examination assistants and autonomous agents. Digital for
MPIDetector: Detecting Multi-modal Prompt Injection via LLM-based Reasoning
With the rapid integration of Multi-modal Large Language Models (MLLMs) into real-world applications, Prompt Injection (
CertMoE: Robustness Certification for Mixture-of-Experts LLMs via Routing-Aware Smoothing
Provable robustness is a cornerstone of trustworthy machine learning, aiming to guarantee model predictions under advers
Where AI Vulnerability Discovery Harnesses Go Quiet: Structural False Negatives and Hidden Vulnerabilities
LLM-based vulnerability discovery harnesses can miss real, reachable vulnerabilities because of how the harness around t
Beyond Binary Labels: Diagnostic Evaluation of LLM Safety with Prompt-Level Rubrics
Current LLM safety benchmarks predominantly rely on binary safe or unsafe labels, lacking explanatory depth and sufferin
Cryptanalysis and Repair of "Decentralized Multi-authority ABE for NC$^1$ from BDH"
We present a plaintext-recovery attack on the decentralized multi-authority attribute-based encryption construction of D