Janus Vehicles: Entity-Centric Threat Modelling of Protocol-Conformant Vehicles under a Malicious-Manufacturer Assumption
Automotive cybersecurity commonly assumes benign end-product manufacturers and design authorities, focusing on supply-ch
2026-10-30 归档
今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表RePAIR: Inverting Backdoor Attacks in Semantic Segmentation
Despite significant advances in computer vision, semantic segmentation models remain vulnerable to backdoor attacks, pos
FVH-Bench: Evaluating Image Generator Safety Beyond Overtly Harmful Imagery
Modern image generators can produce complex visual artifacts, including diagrams, interfaces, and records that combine t
Too many clients spoil the logs: distributed parsing, aggregation techniques and metrics
Log messages are employed to identify anomalies in IoT systems and have been widely used across many applications. To en
Developing a Dynamic Multi-factor Authentication System for Securing Smart Organizations
As smart organizations increasingly rely on technologies like AI, big data, and IoT, securing these systems is crucial.
The Content Leash: Mitigating Degenerate Solutions in Invertible Speaker Anonymization
Voice anonymization aims to protect a speaker's identity while preserving the linguistic content of speech, enabling voi
Beyond LWE: Post-Quantum Assumptions under a Counterfactual Break of the Dihedral Coset Problem
A refuted 2026 claim of an efficient quantum algorithm for the Dihedral Coset Problem (DCP) motivates this survey of the
Quantifying and Prioritizing Stealthy Source-Manipulation Threats Against Multi-Source Anomaly Detectors
Security pipelines often fuse several data sources and protect a downstream model with a cross-source anomaly detector.
Haste Makes Waste? Towards Safe Few-Step Text-to-Image Models
While few-step distilled text-to-image models have gained traction due to their fast generation times, the speed-up impl
Silent Blindness: Fault Vulnerability of Hardware Malware Detectors
Hardware malware detectors (HMDs) classify hardware performance-counter measurements to identify malicious execution. Fa
Peak-DNA: Recurrent Morphology in Global Narrative Propagation
Global narrative streams exhibit noisy, fragmented, and asynchronous amplification bursts, making direct waveform compar
A Simple Presentation of Robust Membership Inference Attacks
In a membership inference attack, an attacker is given the data of a particular individual, and tries to determine if th
No Tokenizer, Still a Gap: Cross-Lingual Fairness of Homoglyph and Invisible-Character Watermarking
Homoglyph and invisible-character watermarks are edit-based watermarks. Instead of changing how a model generates text,
Evaluating Federated Vision-Language and Vision-Only Models for Privacy-Aware Breast Cancer Imaging
Artificial intelligence (AI) shows promise for breast imaging, but limited labeled data, institutional data fragmentatio
PHP2Shell and the Future of AI-Discovered Vulnerability Disclosure: Evidence, Verification, and Human Authority
AI-assisted vulnerability discovery can produce technically plausible findings faster than maintainers can validate, coo
Privately Clipping Heavy-Tailed Data
Summing vectors is a basic task in differentially private data analysis. Standard private sum algorithms clip vectors to
A quiet week in infosec <.<
In this edition of the Threat Source newsletter, William explores how PHP has taken over the conversation, Node.js has j
NIK C2: The new AI-enabled command-and-control framework
Cisco Talos observed a new AI-integrated command-and-control (C2) framework in the wild called “NIK C2.”
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
CVE-2026-98432
A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and o
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
CVE-2026-97229
An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project's own GitLab server a week afte