HiMark: Hierarchical and Controllable Multi-bit Watermarking for Large Language Models
With the rapid adoption of large language models (LLMs) in text generation applications, it has become increasingly diff
2026-10-25 归档
今日共收录 737 条安全情报，包含 0 个 CVE，411 篇安全通告，以及 64 篇研究论文。
← 返回归档列表Beyond End-to-End Recovery: Towards a Better Understanding of LLM Steganography via Rolewise Decomposition
In large language model (LLM) steganography, an encoder hides a private message in an otherwise ordinary response, as te
Agent Mosaic: Recognizing Confidentiality Leaks in Agentic LLM Systems
Modern LLM agents can retrieve information from accessible documents, and then disclose a sensitive conclusion assembled
Data-Void Exploits in Web-Searching LLMs
Web-searching Large Language Models (LLMs) have changed how users seek online information: instead of sifting through ra
PhishGen: Understanding LLM Capabilities in Automated Phishing Website Generation
Phishing relies on visual deception, traditionally requiring web-development skills or pre-built kits. LLMs erode this b
Prompt Injection Through Forensic Evidence: A Taxonomy and Proof of Concept of Anti-Forensic Attacks on LLM-Assisted Digital Investigations
Large language models (LLMs) are entering digital forensics as examination assistants and autonomous agents. Digital for
MPIDetector: Detecting Multi-modal Prompt Injection via LLM-based Reasoning
With the rapid integration of Multi-modal Large Language Models (MLLMs) into real-world applications, Prompt Injection (
CertMoE: Robustness Certification for Mixture-of-Experts LLMs via Routing-Aware Smoothing
Provable robustness is a cornerstone of trustworthy machine learning, aiming to guarantee model predictions under advers
Where AI Vulnerability Discovery Harnesses Go Quiet: Structural False Negatives and Hidden Vulnerabilities
LLM-based vulnerability discovery harnesses can miss real, reachable vulnerabilities because of how the harness around t
Beyond Binary Labels: Diagnostic Evaluation of LLM Safety with Prompt-Level Rubrics
Current LLM safety benchmarks predominantly rely on binary safe or unsafe labels, lacking explanatory depth and sufferin
Cryptanalysis and Repair of "Decentralized Multi-authority ABE for NC$^1$ from BDH"
We present a plaintext-recovery attack on the decentralized multi-authority attribute-based encryption construction of D
[原创]IDAPro v9.4.260714 汉化补丁修正错误
[原创]IDAPro v9.4.260714 汉化补丁修正错误
Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root
### Impact Fallow expands some globs from the analyzed repository on disk. Before 3.34.0, a segment such as `.*`, `.?`
postal-mime: Quadratic CPU consumption when decoding a header of many joinable RFC 2047 base64 encoded words
### Impact Decoding a header that holds a long run of joinable RFC 2047 base64 encoded words, such as `=?utf-8?B?QUJD?=
[原创]CVE-2020-6507利用链
CVE-2020-6507
[原创]CVE-2020-6507利用链
CVE-2026-39821：Go idna 纯 ASCII 标签解码漏报
CVE-2026-39821
CVE-2026-39821：Go idna 纯 ASCII 标签解码漏报
CVE-2026-6791：8 MiB 输入击穿 glibc wordexp 栈
CVE-2026-6791
CVE-2026-6791：8 MiB 输入击穿 glibc wordexp 栈
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
CVE-2026-111497
A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them
OP-Print: Tracing Membership Imprints in On-Policy Self-Distillation
On-policy distillation has been widely adopted for alleviating the distribution mismatch of off-policy distillation. Sel
Efficient and Optimal Learning of Discrete Distributions with Person-Level Privacy
We study learning a discrete distribution under person-level differential privacy in the batched setting. Given $n$ user