The 3DS Oracle: BIN Attack via the Network

Reported by arXiv cs.CR (Wasif Faisal (BRAC University), Suprava Saha Dibya (BRAC University))

Summary by Cyber Security News26 Oct 2026, 05:00 CET

About this summary. This is a short excerpt from the description that arXiv cs.CR published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://arxiv.org/abs/2610.32206

arXiv:2610.32206v1 Announce Type: new Abstract: EMV 3-D Secure (3DS) requires a client-visible continuation boundary in browser-mediated flows; in some deployments, that boundary exposes a pre-authorization classification channel. This paper studies 3DS as a protocol, integration surface, and governance problem, combining standards analysis, architectural reconstruction, formal modeling, a documentation audit, disclosure history, and a bounded live evaluation.

Read the full article at arXiv cs.CR →

Source attribution: headline and facts are from arXiv cs.CR (arxiv.org). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

Training AIs to Solve CAPTCHAs

Hackers now scanning systems for recently-patched Oracle flaw

🏴☠️ Aurora has just published a new victim : Meleghy Automotive & Cie. GmbH

Hackers Start Probing Fresh Oracle EBS Vulnerability

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws

Beta Channel Update for ChromeOS / ChromeOS Flex