2026-10-27 归档

今日共收录 787 条安全情报,包含 0 个 CVE,405 篇安全通告,以及 97 篇研究论文。

← 返回归档列表
学术论文2026-10-24 发布INFO

VulDec: Vulnerability Detection in Binaries via Neural Decompilation

Automated vulnerability detection in binary executables is challenging due to the lack of source code and the limited se

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-24 发布INFO

Who Verifies the Verifiers? Accountable Semantic Consensus for AI-Mediated Web Information Verification

Large language models (LLMs) increasingly decide whether Web evidence supports online claims, often by voting over sever

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-24 发布INFO

Can Agentic Code Review Catch Vulnerabilities Before They Are Merged?

LLM agents have been increasingly adopted for security-focused code review, but existing benchmarks mostly derive the re

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-24 发布INFO

From Instructions to Exploits: Applying Program Analysis to Malicious Agent Skills Across Natural Language and Code

LLM-powered agents increasingly rely on third-party skills that combine natural-language instructions with executable co

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-23 发布INFO

From Hype to ROI: An Economic Model for LLM Adoption in Information Systems and Security Operations

Large Language Models (LLMs) promise significant efficiency gains across information-intensive operations by automating

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-23 发布INFO

A Deterministic Security Runtime for LLM Agents on MPI and Batch-Scheduled HPC Systems: Consensus-Governed, Hardware-Rooted Supervision of Every Rank

Large language model agents launch simulations on high-performance computing (HPC) systems, where one sbatch or mpirun c

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-23 发布INFO

Spoofing the Toolbox: Optimizing Tool Descriptions to Deceive LLM Agents

Large language model (LLM) agents are widely used in many applications and often rely on external tools. Tool informatio

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-23 发布INFO

Trusting the Tool: Asymmetric Deference of LLM Vulnerability Auditors to Static-Analysis Evidence

Pipelines that combine large language models (LLMs) with static analysis let the model consume the analyser's output as

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-23 发布INFO

On Task, Off Track: Benchmarking LLM and Agent Robustness to Near-Target Prompt Injection

Prompt injection benchmarks assess whether large language models (LLMs) and agents resist malicious instructions embedde

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-23 发布INFO

DeepAVR: Deep Analysis via Multi-Agent Collaboration for Automated Vulnerability Repair

Automated Vulnerability Repair (AVR) has emerged as a critical defense against software security flaws, aiming to triage

历史摘要 · 未重新核验 · arXiv cs.CR

威胁情报2026-10-27 发布INFO

[原创]CVE-2020-6507利用链

CVE-2020-6507

[原创]CVE-2020-6507利用链

历史摘要 · 未重新核验 · 看雪

威胁情报2026-10-27 发布INFO

CVE-2026-39821:Go idna 纯 ASCII 标签解码漏报

CVE-2026-39821

CVE-2026-39821:Go idna 纯 ASCII 标签解码漏报

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-10-27 发布INFO

CVE-2026-6791:8 MiB 输入击穿 glibc wordexp 栈

CVE-2026-6791

CVE-2026-6791:8 MiB 输入击穿 glibc wordexp 栈

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-10-26 发布INFO

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

CVE-2026-111497

PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compr

历史摘要 · 未重新核验 · The Hacker News

学术论文2026-10-26 发布INFO

I-HITL: Inalienable Human-in-the-Loop

Human oversight is a pillar of AI safety. It is often exercised by a human in the loop (HITL) who approves critical acti

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-26 发布INFO

Information-Theoretic Secure Aggregation With Heterogeneous Client Quantization

In federated learning (FL), secure aggregation enables a server to compute the sum of local model updates of $N$ clients

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-26 发布INFO

A Category-Selective Encryption Framework for Privacy Protection of UAV Images

Imagery captured by unmanned aerial vehicle (UAV) systems increasingly raises privacy concerns, as UAV aerial surveillan

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-26 发布INFO

Cheap AI-Assisted Reverse Engineering and What It Will Do

Generative AI is putting the law of reverse engineering (RE) under severe strain. Existing IP and technology laws assume

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-26 发布INFO

The Agent in the Middle: How AI-Mediated Access Reshapes Web Vulnerability Exploitation

Web services increasingly expose backend interfaces that let users delegate tasks to AI agents, which invoke service ope

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-10-26 发布INFO

PRISMA: Differentially Private Synthetic In-Car Telemetry via Differentiable Simulation

Differentially private synthesis of in-car energy consumption data is challenging because the output is high-dimensional

历史摘要 · 未重新核验 · arXiv cs.CR