CVE-2026-39821：Go idna 纯 ASCII 标签解码漏报
CVE-2026-39821
CVE-2026-39821：Go idna 纯 ASCII 标签解码漏报
2026-10-26 归档
今日共收录 660 条安全情报，包含 0 个 CVE，351 篇安全通告，以及 56 篇研究论文。
← 返回归档列表CVE-2026-6791：8 MiB 输入击穿 glibc wordexp 栈
CVE-2026-6791
CVE-2026-6791：8 MiB 输入击穿 glibc wordexp 栈
STROKE: Simple Sparse Structural Occlusions for Black-Box Adversarial Attacks
We introduce STROKE, a query-efficient score-based black-box adversarial attack that constructs perturbations from simpl
EVSEFuzz : A Tool for Automated Testing of Protocol Implementations
The rapid adoption and development of electric vehicle (EV) networks has required the expansive deployment of EV chargin
Quantum Cadence: Post-Quantum Consensus with Multiple Concurrent Proposers
The consensus protocols of most high-performance blockchains use quorum certificates, which bundle the signatures of a q
Developing Security Metrics for Automated Compliance Checking
To automatically check for compliance with security-related standards, prose requirements must be translated to technica
Identity Amortization: Shared Resources and the Cost of Sybil Attacks
Sybil defenses commonly price identities by requiring a resource for each one. When one resource can support several ide
Iterative Behavioral Identification for Covert Misappropriation Attacks
We present a data-driven, three-phase framework for covert misappropriation attacks on closed-loop networked control sys
Privacy-Preserving Federated Loss Exploration for Vision-Based Perception under Non-IID Data
Vision-based image classification models benefit from Federated Learning (FL) across vehicles, however learning accurate
Beyond Copying: Lifelong Smart Contract Security Task Construction via Protocol Mutation
AI agents can inspect code and run tests to support smart contract security. SlowMist reports about $38.6 billion in los
Data-Efficient Backdoor Attacks on Code Models via Trigger-Neutralized Counterfactual Scoring
Pre-trained code models are exposed to backdoor poisoning, in which crafted training samples make the model misbehave on
Automated Post-Exploitation Attack Chain Exploration Based on a Phase-guided Hybrid Planning-Monte Carlo Tree Search Algorithm
Advanced attackers in post-exploitation scenarios increasingly craft attack chains that combine benign operations, confi
Autonomous Cyber Weapons as AI-Enabled Digital Harms: A Platform Accountability Framework
Governments govern AI-generated online harms from commercial platforms (EU DSA, AI Act, UK Online Safety Act), yet the m
Democratic Accountability for Autonomous Systems: A Legislative Notification Framework and Comparative Institutional Design
No domestic legislature has ever reviewed a state's decision to authorise an autonomous cyber weapon before it acted. Cl
Tracing Money Laundering Across DeFi, Bridges, and Mixers on Ethereum
Illicit actors exploit Ethereum's deep liquidity and diverse on-chain services to launder criminal proceeds by combining
The 3DS Oracle: BIN Attack via the Network
EMV 3-D Secure (3DS) requires a client-visible continuation boundary in browser-mediated flows; in some deployments, tha
Depth-Dependent Safety Geometry in Vision-Language Models: Layer-Wise Localization and Bidirectional Refusal Control
Vision-Language Models (VLMs) are widely deployed, yet the internal mechanisms behind their safety behavior remain poorl
Curvature-Aware Clipping: Mitigating Bias in DPSGD via Approximate Second-Order Information
Differentially Private Stochastic Gradient Descent (DPSGD) has become the de facto standard for training deep neural net
SPA: Structure-Preserving Approximation of Gated Activations under FHE
Nonlinear activation evaluation remains a major bottleneck in neural inference under fully homomorphic encryption (FHE).
Concept Acupuncturist: An Efficient and Precise Concept Erasure Method for Diffusion Models via Sparse Autoencoders
Diffusion-based image generation models produce high-quality images but may generate harmful or policy-violating content