Latest news
-
AI Security via arXiv cs.CR
Detecting and Mitigating Query-Based System Prompt Leakage Attacks
arXiv:2610.36295v1 Announce Type: new Abstract: Large Language Models (LLMs) rely on proprietary system prompts to enforce task directives, safety policies, and access…
-
Vulnerabilities via arXiv cs.CR
PHP2Shell and the Future of AI-Discovered Vulnerability Disclosure: Evidence, Verification, and Human Authority
arXiv:2610.36334v1 Announce Type: new Abstract: AI-assisted vulnerability discovery can produce technically plausible findings faster than maintainers can validate…
-
Threat Intel via arXiv cs.CR
What Victims Take Away: Attack Reuse and Defense Revision after Prompt-Injection Attacks
arXiv:2610.36422v1 Announce Type: new Abstract: Attack logs and red-team reports show targets the attacks used against them, to help them repair their defenses. Prompt…
-
Threat Intel via arXiv cs.CR
A Simple Presentation of Robust Membership Inference Attacks
arXiv:2610.36458v1 Announce Type: new Abstract: In a membership inference attack, an attacker is given the data of a particular individual, and tries to determine if…
-
AI Security via arXiv cs.CR
FIDES-Live: Evaluating Behavioral Concordance in Sequential Trading Agents
arXiv:2610.36476v1 Announce Type: new Abstract: Sequential trading agents produce decisions, orders, execution receipts, account states, and reports that need not agree…
-
AI Security via arXiv cs.CR
Peak-DNA: Recurrent Morphology in Global Narrative Propagation
arXiv:2610.36571v1 Announce Type: new Abstract: Global narrative streams exhibit noisy, fragmented, and asynchronous amplification bursts, making direct waveform…
-
Threat Intel via arXiv cs.CR
Silent Blindness: Fault Vulnerability of Hardware Malware Detectors
arXiv:2610.36612v1 Announce Type: new Abstract: Hardware malware detectors (HMDs) classify hardware performance-counter measurements to identify malicious execution…
-
Breaches via arXiv cs.CR
Measuring Users' Security and Privacy Concerns About Third-Party Community Bots on Discord
arXiv:2610.36626v1 Announce Type: new Abstract: Third-party community-based bots are central to how social platforms such as Discord work. They moderate content, manage…
- Advertisement
-
Threat Intel via arXiv cs.CR
An Empirical Study of Undisclosed Charges in Hook-Based Decentralized Exchanges
arXiv:2610.36682v1 Announce Type: new Abstract: Many decentralized exchanges use automated market makers (AMMs) to trade assets against liquidity pools. Modern AMMs…
-
Threat Intel via arXiv cs.CR
Quantifying and Prioritizing Stealthy Source-Manipulation Threats Against Multi-Source Anomaly Detectors
arXiv:2610.36693v1 Announce Type: new Abstract: Security pipelines often fuse several data sources and protect a downstream model with a cross-source anomaly detector…
-
AI Security via arXiv cs.CR
PrivacyEvalClaw: A Tool-Augmented Deliberative Agent for Auditing Privacy Leakage in LLM Jailbreak Responses
arXiv:2610.36711v1 Announce Type: new Abstract: Reliable evaluation is a critical bottleneck in privacy red-teaming of large language models (LLMs): determining whether…
-
Vulnerabilities via arXiv cs.CR
Beyond LWE: Post-Quantum Assumptions under a Counterfactual Break of the Dihedral Coset Problem
arXiv:2610.36731v1 Announce Type: new Abstract: A refuted 2026 claim of an efficient quantum algorithm for the Dihedral Coset Problem (DCP) motivates this survey of the…
-
Vulnerabilities via arXiv cs.CR
HqcLethe: Streaming HQC Encapsulation for Tiny Stateless Servers
arXiv:2610.36808v1 Announce Type: new Abstract: Stateless post-quantum authenticated key exchanges such as post-quantum WireGuard hedge against unexpected cryptanalytic…
-
Vulnerabilities via arXiv cs.CR
UniPCH: A Unified Framework for Cross-Chain Payments via Payment Channel Hubs
arXiv:2610.36866v1 Announce Type: new Abstract: Payment channel hubs (PCHs) enable private cross-chain payments, but existing protocols remain difficult to extend across…
-
AI Security via arXiv cs.CR
Developing a Dynamic Multi-factor Authentication System for Securing Smart Organizations
arXiv:2610.36926v1 Announce Type: new Abstract: As smart organizations increasingly rely on technologies like AI, big data, and IoT, securing these systems is crucial…
-
Threat Intel via arXiv cs.CR
Too many clients spoil the logs: distributed parsing, aggregation techniques and metrics
arXiv:2610.36946v1 Announce Type: new Abstract: Log messages are employed to identify anomalies in IoT systems and have been widely used across many applications. To…
-
AI Security via arXiv cs.CR
Blindfold: Keeping the Audit Coin Secret from LLM Agents
arXiv:2610.37055v1 Announce Type: new Abstract: Audit-based certification bounds the violation rate of an LLM agent by auditing a random fraction $\varepsilon$ of…
-
Threat Intel via SANS Internet Storm Center
ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
-
Breaches via oss-security
Re: Information for Python users regarding eMudhra / emSign CA certificate security incident
Posted by Kevin Riggle on Oct 27 The discuss.python.org conversation on that issue has long since moved on, so asking here: The macOS remediation advice on the official…
-
Vulnerabilities via oss-security
CVE-2025-60475: GPAC/MP4Box: Global Buffer Overflow Read in gf_ac4_parser_bs on crafted AC-4 stream
Posted by Alexander A. Shvedov on Oct 27 Product: GPAC (MP4Box) Affected: gpac/gpac prior to fix commit (see References) CVE: CVE-2025-60475 CWE: CWE-125 (Out-of-bounds…