Latest news
-
AI Security via arXiv cs.CR
Detecting Insecure Compositions of Clean Agent Skills via Capability-Flow Graph Analysis
arXiv:2610.32155v1 Announce Type: new Abstract: AI agents increasingly extend their capabilities by invoking third-party skills, where each skill encapsulates…
-
Threat Intel via arXiv cs.CR
The 3DS Oracle: BIN Attack via the Network
arXiv:2610.32206v1 Announce Type: new Abstract: EMV 3-D Secure (3DS) requires a client-visible continuation boundary in browser-mediated flows; in some deployments, that…
-
Vulnerabilities via arXiv cs.CR
Tracing Money Laundering Across DeFi, Bridges, and Mixers on Ethereum
arXiv:2610.32210v1 Announce Type: new Abstract: Illicit actors exploit Ethereum's deep liquidity and diverse on-chain services to launder criminal proceeds by combining…
-
Vulnerabilities via arXiv cs.CR
Automated Post-Exploitation Attack Chain Exploration Based on a Phase-guided Hybrid Planning-Monte Carlo Tree Search Algorithm
arXiv:2610.32278v1 Announce Type: new Abstract: Advanced attackers in post-exploitation scenarios increasingly craft attack chains that combine benign operations…
-
Threat Intel via arXiv cs.CR
Data-Efficient Backdoor Attacks on Code Models via Trigger-Neutralized Counterfactual Scoring
arXiv:2610.32334v1 Announce Type: new Abstract: Pre-trained code models are exposed to backdoor poisoning, in which crafted training samples make the model misbehave on…
-
Vulnerabilities via arXiv cs.CR
Embedding Large PQC KEMs in IKEv2
arXiv:2610.32356v1 Announce Type: new Abstract: Post-quantum key encapsulation mechanisms carry public keys far larger than the established VPN handshake protocol IKEv2…
-
Vulnerabilities via arXiv cs.CR
Beyond Copying: Lifelong Smart Contract Security Task Construction via Protocol Mutation
arXiv:2610.32453v1 Announce Type: new Abstract: AI agents can inspect code and run tests to support smart contract security. SlowMist reports about $38.6 billion in…
-
AI Security via arXiv cs.CR
On Task, Off Track: Benchmarking LLM and Agent Robustness to Near-Target Prompt Injection
arXiv:2610.32531v1 Announce Type: new Abstract: Prompt injection benchmarks assess whether large language models (LLMs) and agents resist malicious instructions embedded…
- Advertisement
-
Breaches via arXiv cs.CR
Privacy-Preserving Federated Loss Exploration for Vision-Based Perception under Non-IID Data
arXiv:2610.32626v1 Announce Type: new Abstract: Vision-based image classification models benefit from Federated Learning (FL) across vehicles, however learning accurate…
-
Threat Intel via arXiv cs.CR
AquaSense-ICS: A Hybrid Real-Simulated Cyber-Physical Dataset and Leakage-Aware Benchmark for Smart Water Quality Monitoring and Attack Detection
arXiv:2610.32661v1 Announce Type: new Abstract: Machine-learning research on water cyber-physical systems (CPS) is constrained by datasets that are either real but…
-
Threat Intel via arXiv cs.CR
Identity Amortization: Shared Resources and the Cost of Sybil Attacks
arXiv:2610.32685v1 Announce Type: new Abstract: Sybil defenses commonly price identities by requiring a resource for each one. When one resource can support several…
-
Threat Intel via SANS Internet Storm Center
ISC Stormcast For Monday, October 26th, 2026 https://isc.sans.edu/podcastdetail/10150, (Mon, Oct 26th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
-
Breaches via ransomware.live
🏴☠️ Whitearmor has just published a new victim : LoveSac
LoveSac (LOVE) is a premium furniture retailer operating more than 250 showrooms across the United States, generating approximately $700 million in annual revenue. We…
-
Vulnerabilities via oss-security
Re: Brotli CVE-2026-111497
Posted by Alan Coopersmith on Oct 25 Sorry, copy & paste error - the second URL should have been: https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4…
-
Vulnerabilities via oss-security
Starman versions before 0.4019 for Perl (4 CVEs)
Posted by Robert Rothenberg on Oct 25 CVE-2026-115817 Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout…
-
Vulnerabilities via oss-security
Re: PHP 5.4.23 (custom 5.4-5.6) backported patch for PHP2Shell OOM vulnerability (CVE-2026-109618)
Posted by Demi Marie Obenour on Oct 25 In light of the size of the upstream patch, would it be better to handle out of memory by crashing the process instead?
-
Ransomware via ransomware.live
🏴☠️ Payload has just published a new victim : Glückauf-Vermessung GmbH
Glückauf-Vermessung GmbH (glueckauf-vermessung.de) is a German engineering and technical company based in Sondershausen, operating as part of the ERCOSPLAN Group and…
-
Vulnerabilities via oss-security
CVE-2020-37268: Rocq/Coq Print Assumptions omits unsafe universe checking inlined through Parameter Inline (0 = 1 demonstrated) — unfixed since 2020
Posted by Jonathan Brossard on Oct 25 1. Summary A soundness-audit bypass in the Rocq (formerly Coq) module system allows construction of a proof of False that Print…
-
Ransomware via ransomware.live
🏴☠️ Payload has just published a new victim : Miletic GmbH
Miletic GmbH is a German specialized contractor headquartered in Bad Schönborn that has been operating in the construction sector since 1989. The company's core business…
-
Vulnerabilities via oss-security
CVE-2026-72714: Rocq universe checking state desynchronised after module close (0 = 1 demonstrated) — 0-day
Posted by Jonathan Brossard on Oct 25 1. Summary A soundness bug in the Rocq (formerly Coq) kernel allows construction of a checked proof of False — and by extension…