Aggregator

2025年度全球APT威胁研究报告

围绕大模型的攻击已经形成独有体系

硬币两面

A vulnerability marked as critical has been reported in WellChoose Single Sign-On Portal System. The affected element is an unknown function. Performing a manipulation results in os command injection. This vulnerability was named CVE-2026-1427. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability described as problematic has been identified in WellChoose Single Sign-On Portal System. The impacted element is an unknown function. Executing a manipulation can lead to cross site scripting. The identification of this vulnerability is CVE-2026-1429. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability classified as critical has been found in WellChoose Single Sign-On Portal System. This affects an unknown function. The manipulation leads to os command injection. This vulnerability is referenced as CVE-2026-1428. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in TP-Link Omada Controller up to 5.x. Affected is an unknown function of the component Session Token Handler. Such manipulation leads to insufficiently protected credentials. This vulnerability is uniquely identified as CVE-2025-9521. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability was found in TP-Link Omada Controller up to 5.x. It has been classified as critical. The impacted element is an unknown function. Performing a manipulation results in server-side request forgery. This vulnerability is identified as CVE-2025-9522. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability described as problematic has been identified in TP-Link Omada Controller up to 5.x. This vulnerability affects unknown code. Executing a manipulation can lead to authorization bypass. This vulnerability appears as CVE-2025-9520. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability was found in TP-Link Tapo C220 v1 and Tapo C520WS v2. It has been declared as problematic. This affects an unknown function of the component HTTP Parser. Such manipulation leads to denial of service. This vulnerability is documented as CVE-2026-0919. The attack requires being on the local network. There is not any exploit available.

A vulnerability was found in TP-Link Tapo C220 v1 and Tapo C520WS v2. It has been rated as problematic. This impacts an unknown function of the component Firmware Update Endpoint. Performing a manipulation results in denial of service. This vulnerability is reported as CVE-2026-1315. The attacker must have access to the local network to execute the attack. No exploit exists.

A vulnerability marked as problematic has been reported in TP-Link Tapo C220 v1 and Tapo C520WS v2. This affects an unknown part of the component HTTP Service. This manipulation causes null pointer dereference. This vulnerability is handled as CVE-2026-0918. The attack can only be done within the local network. There is not any exploit available.

A vulnerability was found in jaraco jaraco.context up to 6.0.x. It has been declared as critical. Affected by this issue is the function jaraco.context.tarball. Executing a manipulation can lead to path traversal. The identification of this vulnerability is CVE-2026-23949. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Learn how to secure MCP node clusters using post-quantum decentralized policy enforcement points. Protect AI infrastructure from quantum threats and tool poisoning.

The post Post-Quantum Decentralized Policy Enforcement Points in MCP Node Clusters appeared first on Security Boulevard.

嗯，用户让我帮忙总结一篇文章，控制在100字以内，而且不需要特定的开头。首先，我需要仔细阅读这篇文章，理解它的主要内容和重点。 文章主要讨论了集中式MCP架构在量子计算时代的脆弱性。MCP是模型上下文协议，Anthropic提出的新标准，允许AI模型直接与数据源和工具通信。然而，传统的策略执行点（PEPs）作为集中式网关存在单点故障的问题，容易被攻击者利用。 接下来，文章提到了当前加密技术如RSA和ECC在量子计算机面前的不安全性。Shor算法使得这些加密技术变得容易被破解。攻击者现在可以窃取加密的数据，等待未来量子计算机成熟后再进行解密。 此外，集中式架构还带来了延迟问题。数据来回传输到中央防火墙会导致性能瓶颈。而分散的工作负载和去中心化的PEPs被认为是解决方案。文章推荐使用基于格的后量子加密算法如Kyber和Dilithium来提高安全性。 最后，文章提出了4D安全框架（Defense, Detection, Decision, Dynamic Response），用于管理分散节点的安全性，并强调了混合加密、选择性 enforcement 和密钥管理的重要性。 总结起来，文章的核心是：集中式MCP架构在量子时代面临重大风险，需要转向分散式、后量子安全的架构来应对未来的威胁。 文章探讨了集中式MCP架构在量子计算时代的脆弱性，并提出通过去中心化策略执行点（PEPs）、后量子加密算法（如Kyber、Dilithium）及4D安全框架来提升安全性。

A vulnerability was found in Red Hat Keycloak and classified as problematic. This vulnerability affects unknown code of the component UserResource. The manipulation results in exposure of private personal information to an unauthorized actor. This vulnerability was named CVE-2026-3911. The attack may be performed from remote. There is no available exploit.

A vulnerability marked as critical has been reported in GnuTLS up to 3.8.10. This affects the function gnutls_pkcs11_token_init of the file pkcs11_write.c of the component PKCS Token Handler. This manipulation causes stack-based buffer overflow. This vulnerability appears as CVE-2025-9820. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, was found in pnggroup libpng up to 1.6.53. Affected by this vulnerability is the function png_image_finish_read of the component Simplified API. Such manipulation leads to out-of-bounds read. This vulnerability is listed as CVE-2026-22695. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.