LLM代理的隐私泄露新解法：SlotGuard 提出槽位守卫机制，精准屏蔽凭证与本地上下文，避免过度编辑。
arXiv:2607.17147v1 Announce Type: cross Abstract: LLM agents can leak privacy (e.g., paths, emails) and credentials (e.g., API keys) as agent observat…
揭秘LLM智能体技能如何无意间泄露你的登录凭证，基于实证研究的新发现。
arXiv:2604.03070v2 Announce Type: replace-cross Abstract: Large Language Model (LLM) agents increasingly rely on third-party skills that operate withi…
使用AI编码助手Claude Code需警惕，微软发现其GitHub自动化流程存在提示词注入漏洞，可能导致凭证泄露。
IT之家 6 月 7 日消息，微软研究人员发现，Anthropic 旗下 Claude Code 的 GitHub 自动化流程存在一处漏洞，该漏洞可能导致持续集成 / 持续部署（CI / CD）工作流中的机密信息泄露，攻击者或可通过提示词注入攻击窃取敏感凭证。 微软威胁情报团队在监测到公开代码库中出…
新型激活级检测方法，在LLM代理输出前拦截凭证窃取，支持多轮对话防御。
arXiv:2606.04141v1 Announce Type: cross Abstract: LLM agents often place sensitive credentials in the same context window as untrusted retrieved conte…
CISA承包商在GitHub上意外暴露多个高权限AWS GovCloud账户凭证，安全专家揭露开源仓库风险。
Crazy story : Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repo…
安全研究员发现CISA承包商员工竟在GitHub上公开了明文凭证，包括云密钥和访问令牌，差点引发重大数据泄露。
The federal cybersecurity agency left plaintext passwords in a spreadsheet uploaded to a public GitHub repository, per a report by independent journal…
CISA大量明文密码、SSH密钥等敏感凭证在GitHub公共仓库中暴露数月，安全失误令人震惊。
SSH keys, plaintext passwords, other sensitive data had been up since November 2025.
Nx包遭供应链攻击窃取开发者凭证，Vercel默认安全，请立即自查受影响环境。
Threat actors published modified versions of the Nx package and some of its supporting libraries to the npm registry with the goal of exfiltrating dev…