Latest news
-
Vulnerabilities via The Hacker News
Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. The…
-
Threat Intel via Security Affairs
How a leaked builder of XWorm turned a remote access trojan into a surveillance kit
Netskope tracks four XWorm versions in the wild, 46 plugins, and new tools for location, audio and live browser control, with detections up fourfold. Netskope Threat…
-
Vulnerabilities via Help Net Security
Patching and preventing issues: What are the lessons you can learn?
In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how business pressure…
-
Threat Intel via Help Net Security
Meshery: Open-source cloud-native manager for Kubernetes
Meshery is an open-source tool for designing, deploying and managing Kubernetes infrastructure, built by Layer5 and its community and hosted as a Cloud Native Computing…
-
Ransomware via Dark Reading
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Organizations are reporting that employees face threats to their families, stalking, physical violence, and abduction. But these alarming claims are hard to verify.
-
Vulnerabilities via The Hacker News
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active…
-
AI Security via Help Net Security
Most companies count AI agents as insiders, and CISOs worry about their own liability
Software that works on an employee’s behalf is now turning up in incident reports. At 95% of the companies in a Trellix survey of 600 CISOs, an AI agent or other…
-
Vulnerabilities via Help Net Security
Google quadruples Chrome bug bounty base pay, offers up to $20,000 for sandbox escapes
Google is updating its Chrome Vulnerability Rewards Program (Chrome VRP), increasing payments for memory corruption vulnerabilities and expanding rewards for other…
- Advertisement
-
Threat Intel via arXiv cs.CR
Argos: A Multi-Tenant SaaS Architecture for Distributed Edge Security Orchestration
arXiv:2610.14019v1 Announce Type: new Abstract: The growing adoption of distributed edge devices for security auditing and operational monitoring exposes limitations in…
-
AI Security via arXiv cs.CR
Symmetric Cryptography via Dirichlet Convolution
arXiv:2610.14040v1 Announce Type: new Abstract: We discuss a new symmetric-key cipher for digital data encryption. Its implementation is fast, memory efficient, and…
-
AI Security via arXiv cs.CR
SAGE: Efficient Protected Vision-Language Inference on Smart Glasses
arXiv:2610.14089v1 Announce Type: new Abstract: Smart glasses are a promising platform for vision-language assistants, but private split inference remains expensive…
-
AI Security via arXiv cs.CR
An Empirical Case Study of Prompt Engineering Strategies for Bypassing Multi-Layer Agent Security Defenses
arXiv:2610.14116v1 Announce Type: new Abstract: The OpenClaw Security Attack and Defense Challenge evaluates AI agent robustness through a three-stage defense pipeline…
-
AI Security via arXiv cs.CR
TrustPaper for forged PDF with Issuer Fingerprints
arXiv:2610.14132v1 Announce Type: new Abstract: Sick leave certificates are increasingly delivered as PDF files by online teleconsultation platforms, and can be altered…
-
AI Security via arXiv cs.CR
Memory-Coupled Unlearning for Data-Absent Identity Forgetting
arXiv:2610.14148v1 Announce Type: new Abstract: Machine unlearning aims to reduce the influence of designated training data from a trained model while preserving its…
-
AI Security via arXiv cs.CR
Embedding Asymmetry as Attack Signal: Detecting and Defending Active Label Inference in Vertical Federated Learning
arXiv:2610.14194v1 Announce Type: new Abstract: Vertical federated learning lets organizations train a shared model over features they hold separately, while one party…
-
AI Security via arXiv cs.CR
Physical Side-Channel Attacks on Edge LLMs: Extracting Output Tokens and User Prompts
arXiv:2610.14215v1 Announce Type: new Abstract: The deployment of large language models (LLMs) on edge devices is largely motivated by privacy concerns over sharing…
-
AI Security via arXiv cs.CR
Watermarking for Byzantine Robust LLM Training
arXiv:2610.14289v1 Announce Type: new Abstract: LLM watermarking has emerged as a promising approach for detecting downstream model misuse in centralized settings, but…
-
AI Security via arXiv cs.CR
ARMOR: Adversary Cost Amplification via a Schema-Preserving Password-Hardening Retrofit for Resource-Constrained Systems
arXiv:2610.14300v1 Announce Type: new Abstract: Internet of Things (IoT) gateways, edge authentication servers, and legacy systems need protection against offline…
-
Vulnerabilities via arXiv cs.CR
Natural Code Transformation Confuses Agents in Vulnerability Analysis
arXiv:2610.14350v1 Announce Type: new Abstract: Having demonstrated a strong potential for automating vulnerability discovery, AI agents can also be used to attack…
-
AI Security via arXiv cs.CR
Tokenization-Invariant Watermarking: A Byte-Local Method for LLM Text
arXiv:2610.14378v1 Announce Type: new Abstract: We introduce Tokenization-Invariant Watermarking (TI-WM), a method that embeds a watermark during token generation but…