CKEditor: Cross-site scripting (XSS) in the engine package
CVE-2026-116687
### Impact A Cross-Site Scripting (XSS) vulnerability has been discovered in the CKEditor 5 engine. This vulnerability c
2026-10-28 归档
今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
CVE-2026-116676
### Summary Atlantis passes the Terraform `workspace` value from a pull request's `atlantis.yaml` into a shell command
undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent
CVE-2026-109383
### Impact undici's `Agent` passes its constructor options through a JSON-based deep clone (`JSON.parse(JSON.stringify(
Measuring Users' Security and Privacy Concerns About Third-Party Community Bots on Discord
Third-party community-based bots are central to how social platforms such as Discord work. They moderate content, manage
SpecGuard: Detecting Multi-Turn LLM Jailbreaks via Specification-Based Runtime Monitoring
Multi-turn jailbreaks turn dialogue safety into a trace property: a violation may become identifiable only when user int
CoSA: The Conflict of Skills Attack in Real-World LLM Agent Ecosystems
Agent Skills allow LLM agents to combine reusable capabilities, but checking each Skill in isolation cannot rule out pol
LLM WikiLeaks: Uncovering URL-Based Capability Extension and Security Circumvention in Agentic Message Boards
Autonomous agents have been observed acting beyond their assigned tasks, accessing unauthorized systems, and establishin
Factual Yet One-Sided: Stance Poisoning and Evidence Balancing in Retrieval-Augmented Generation
The stance expressed in responses from retrieval-augmented generation systems is significantly influenced by the stance
EdgeDeID: A 0.6B Clinical De-identifier Trained Without Real Patient Data
De-identifying clinical notes with a hosted language model discloses the information the step is meant to protect. We pr
Cloud & Application Security
Cloud & Application Security
Next-Gen Identity Security
Next-Gen Identity Security
cloud architecture assessment
cloud architecture assessment
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms
CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
CrowdStrike Announces Agentic Identity Provider
CrowdStrike Announces Agentic Identity Provider
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense