Cybersecurity
Cybersecurity news — Monday 12 October 2026
91 stories from 10 sources, every one in English. Each links to its publisher.
-
Flock can now issue CVEs for its own products. Should we trust it?
CyberScoop Asia
Flock, the controversial public safety company entangled in controversy amid recurring law enforcement abuse of its products, gained authority to assign CVE IDs to vulnerabilities in its own products and grade those defects as a CVE…
-
Norway fines Microsoft ad firm $9.6 million over Grindr data sharing
BleepingComputer
Norway's Data Protection Authority (Datatilsynet) has fined Microsoft-owned advertising company Xandr NOK 92 million ($9.6M) for unlawfully processing and sharing sensitive data belonging to Grindr users in the country. [...]
-
Yandex confirms service outage as users lose access to cloud files
BleepingComputer
Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to shut down two facilities and partially disable a third. [...]
-
Anthropic takes risky AI tests offline after models breach govt sites
BleepingComputer
Anthropic announced that its internal AI models undergoing "high-risk and cybersecurity evaluations" no longer have internet access following incidents involving U.S. government websites at the federal, state, and local levels. [...]
-
IonQ to buy zero-trust security firm Elisity in deal valued at up to $1.3 billion
CyberScoop Asia
IonQ announced Monday that it will acquire Elisity, a zero-trust network security firm, in an all-stock transaction valued at up to $1.3 billion that folds enterprise access control into the quantum computing company’s expanding…
-
Claude sent a false homicide tip to police – and it’s part of a troubling AI pattern
ZDNet Security
Models routinely take shortcuts to pass evaluations. Who gets to decide what incidents are innocuous?
-
Ledger confirms spy chip implant behind wallet crypto thefts
BleepingComputer
Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users' cryptocurrency wallets. [...]
-
Cyberattack shuts down refrigerators at French supermarkets
BleepingComputer
Attackers remotely defrosted refrigerators at multiple French supermarket chains overnight in a cyberattack that reportedly targeted Danfoss refrigeration controllers. [...]
-
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
The Hacker News
Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That's not much time to read the warning, let alone do something about it. But speed is only…
-
FBI Arrests Suspect in FBI-Hacking Case
Schneier on Security
In September, hackers from a group called ShinyHunters announced that they stole a trove of FBI data about its own agents. It was an intelligence disaster . Last week, the FBI arrested (alternate link ) someone associated with that crime.
-
IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion
SecurityWeek
The all-stock deal brings Elisity’s least-privilege access technology into IonQ’s security portfolio. The post IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion appeared first on SecurityWeek .
-
Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
BleepingComputer
A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ClickFix delivery, shortcut-based…
-
Retail giant Ahold Delhaize takes systems offline after cyberattack
BleepingComputer
Retail giant Ahold Delhaize, one of the world's largest food retail chains, confirmed today that it had to take some systems offline in response to a "cybersecurity incident" affecting its network. [...]
-
Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
SecurityWeek
The vulnerability tracked as CVE-2026-85097 can allow threat actors to take control of the targeted WordPress websites. The post Bricksforge WordPress Plugin Vulnerability Exploited in the Wild appeared first on SecurityWeek .
-
GitLab warns of max severity code execution vulnerability
BleepingComputer
GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances. [...]
-
Google’s new Fitbit Edge solves my biggest gripe with the Pixel Watch
ZDNet Security
Google’s watches are too dang chunky.
-
How “123456” became the key to almost 9 million personal records
Malwarebytes Labs
An attacker reportedly used a leaked password to abuse a company’s legitimate access to Denmark’s population register (CPR). The weak password is remarkable, but the failure to spot millions of unusual searches made the breach worse. The…
-
Help the NCSC understand how organisations approach external attack surface risk
NCSC UK
We're looking to hear from people involved in evaluating, selecting or adopting EASM.
-
Canonical Websites Disrupted in Second DDoS Attack This Year
SecurityWeek
The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal. The post Canonical Websites Disrupted in Second DDoS Attack This Year appeared first on SecurityWeek .
-
Microsoft: Windows 11 23H2 reaches end of support in 30 days
BleepingComputer
Microsoft has reminded customers that systems running Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions will stop receiving security updates next month. [...]
-
Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
The Hacker News
The personal AI agents rollout is going about as smoothly as expected: Amazon now blocks Meta's Muse because it doesn't identify itself as a bot while browsing; Instinct keeps raising privacy concerns; and the horror stories from pretty…
-
Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
SecurityWeek
Oleg Korniev was a leader of YMCO, a sophisticated network of money mules that helped hackers move funds outside the US. The post Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US appeared first on SecurityWeek .
-
Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports
The Hacker News
Cryptocurrency hardware maker Ledger has temporarily paused sales of its products via CryptoBilis following reports of stolen funds linked to devices sold by the reseller. On Friday, the company said it was investigating reports of loss of…
-
iRhythm Data Breach Impacts at Least 360,000 People
SecurityWeek
Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers. The post iRhythm Data Breach Impacts at Least 360,000 People appeared first on SecurityWeek .
-
Phishing emails are baiting your AI assistant
Malwarebytes Labs
You ignored the suspicious email. You didn’t open the attachment, click the link, or reply to the sender. Then you asked your AI assistant to summarize your inbox. Could the message you wisely avoided find its way back onto your to-do…
-
Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
The Hacker News
Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tracked as CVE-2026-102255 (CVSS score…
-
Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
SecurityWeek
The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference. The post Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe appeared first on…
-
Your AI agent is only as safe as the packages it downloads
CyberScoop Asia
Strip away the model names and the headlines, and this year’s AI agent incidents share a feature that has little to do with how capable the models are. Nearly all of them ran through the software supply chain. Start with the case that set…
-
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
The Hacker News
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which…
-
Critical SonicWall Vulnerability Exploited Days After Disclosure
SecurityWeek
CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations. The post Critical SonicWall Vulnerability Exploited Days After Disclosure appeared first on SecurityWeek .
-
Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
SecurityWeek
Beginning February 2027, all newly issued certificates will have a 64-day validity period by default. The post Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch appeared first on SecurityWeek .
-
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
The Hacker News
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The…
-
A week in security (October 5 – October 11)
Malwarebytes Labs
Last week on Malwarebytes Labs: ASOS breach update: Hackers stole customer details and shopping searches Attackers hijack country-code domains to impersonate Google and other services Amazon has an uncomfortably personal profile on you…
-
PyCache Trap: The Inspection-Execution Gap in Agent Skill Scanners
arXiv cs.CR (Security)
arXiv:2610.10612v2 Announce Type: replace Abstract: Agent skills combine instructions with executable resources, giving third-party packages access to an agent's runtime. Existing skill scanners inspect documentation and visible source…
-
Can escalation channels redirect reward hacking toward defect disclosure?
arXiv cs.CR (Security)
arXiv:2608.29460v3 Announce Type: replace-cross Abstract: When coding agents encounter defective test infrastructure they may reward-hack: hardcoding outputs or editing test files to pass tests they cannot legitimately satisfy, a pattern…
-
Byzantine-Resilient Federated Large Language Model via Hypergraph Message Passing
arXiv cs.CR (Security)
arXiv:2610.12711v1 Announce Type: cross Abstract: Federated Large Language Models (FedLLMs) are promising to deliver privacy-preserving, collaborative intelligence. The decentralized training process is vulnerable to Byzantine attacks that…
-
WaveMark: Robust Wavelet-Domain Image Watermarking for Diffusion Models
arXiv cs.CR (Security)
arXiv:2610.12952v1 Announce Type: new Abstract: Image watermarking enables provenance tracing for photorealistic images generated by diffusion models. However, state-of-the-art (SOTA) removal attacks can suppress embedded signals with…
-
AutoControl Arena: Synthesizing Executable Test Environments for Frontier AI Risk Evaluation
arXiv cs.CR (Security)
arXiv:2603.07427v3 Announce Type: replace-cross Abstract: As Large Language Models (LLMs) evolve into autonomous agents, existing safety evaluations face a fundamental trade-off: manual benchmarks are costly, while LLM-based simulators are…
-
The Limits of Query Monitoring against Distributed Model Extraction
arXiv cs.CR (Security)
arXiv:2610.13083v1 Announce Type: new Abstract: Model providers now face distillation campaigns run through thousands of accounts, each of which looks like an ordinary user. When network and payment metadata cannot link those accounts, the…
-
Towards Safe World Models: Risks, Defenses, and Evaluation
arXiv cs.CR (Security)
arXiv:2610.13372v1 Announce Type: new Abstract: World models support planning, control, learning from imagined experience, and model-mediated evaluation by predicting action-conditioned consequences. Their safety cannot be inferred from…
-
HOMARD: Hammering Off-chip Memory via Aggregate power Rail Disclosure
arXiv cs.CR (Security)
arXiv:2610.12621v1 Announce Type: new Abstract: Software-based microarchitectural attacks have mainly exploited timing differences to infer information from DRAM. However, defenses and optimizations can prevent timing-based approaches from…
-
LETHE: Defending against Unauthorized Image-to-Video Generation via Value Diversity Collapse
arXiv cs.CR (Security)
arXiv:2610.13333v1 Announce Type: cross Abstract: Image-to-video (I2V) diffusion models can animate a single reference image into high-quality, subject-consistent videos, posing threats of misuse as anyone can turn personal photos into…
-
AgentValve: Sybil-Resilient Payment Authorization for Permissionless AI Markets
arXiv cs.CR (Security)
arXiv:2610.12948v1 Announce Type: new Abstract: AI agents increasingly select and pay service providers without human review. In emerging permissionless markets, however, adversaries can create inexpensive identities and fabricate feedback…
-
The Express Lane to Spam and Centralization: An Empirical Analysis of Arbitrum's Timeboost
arXiv cs.CR (Security)
arXiv:2509.22143v3 Announce Type: replace Abstract: DeFi applications are vulnerable to MEV, where specialized actors profit by reordering or inserting transactions. To mitigate latency races and internalize MEV revenue, Arbitrum…
-
What Makes Adversarial Examples Transfer Across Deepfake Detectors?
arXiv cs.CR (Security)
arXiv:2609.10002v2 Announce Type: replace-cross Abstract: Deepfake detectors remain vulnerable to transfer-based black-box attacks, in which adversarial examples are generated on a source surrogate model and transferred to a target model…
-
STAIR: Effective Incident Response Using an End-to-End Agentic Planning Framework
arXiv cs.CR (Security)
arXiv:2608.09524v2 Announce Type: replace Abstract: Incident response planning is critical for restoring compromised software systems. Existing AIOps methods automate fault diagnosis and remediation and adapt response using feedback, but…
-
Onions in the ATmosphere: Decentralizing Trust in Identity
arXiv cs.CR (Security)
arXiv:2610.12764v1 Announce Type: new Abstract: Multiple approaches have been implemented for identities that associate meaningful identifiers, such as domain names, with self-authenticating identifiers, such as onion addresses. While…
-
Single-Shuffle Full-Open Card-Based Secure Computation Protocols for Any Function
arXiv cs.CR (Security)
arXiv:2510.17308v2 Announce Type: replace Abstract: A card-based secure computation protocol is a method for $n$ parties to compute a function $f$ on their private inputs $(x_1,\ldots,x_n)$ using physical playing cards, in such a way that…
-
Sample-Preserving Search-to-Decision Reduction for Noisy Linear Equations over Large Moduli
arXiv cs.CR (Security)
arXiv:2610.12913v1 Announce Type: new Abstract: The Noisy Linear Equations problem involves finding the solution to a random linear system over a finite field given noisy evaluations. This is a generalisation of various learning problems…
-
A Multi-Scenario UAV RF Dataset with Real-World Acquisition and Signal Processing Benchmarking
arXiv cs.CR (Security)
arXiv:2603.00106v2 Announce Type: replace-cross Abstract: We present a real-world multi-scenario unmanned aerial vehicle (UAV) radio frequency (RF) dataset, namely DRFF-R2, which is collected using a dedicated acquisition platform under…
-
Organizational Context for the Enterprise Security Brain
arXiv cs.CR (Security)
arXiv:2610.12540v1 Announce Type: new Abstract: Agents that investigate and decide on enterprise security reason over a machine-readable view of the environment: its assets, identities, configurations, relations, and findings. The correct…
-
Better Batches, Better Privacy: Random Allocation for DP-BandMF
arXiv cs.CR (Security)
arXiv:2610.12712v1 Announce Type: new Abstract: The current state of the art for batch selection and noise addition in differentially private training is a combination of DP-BandMF (informally, DP-SGD where the noise added in two different…
-
Enabling Extended SGX Enclaves inside Confidential Virtual Machines
arXiv cs.CR (Security)
arXiv:2610.12695v1 Announce Type: new Abstract: Confidential Virtual Machines (CVMs), such as AMD SEV-SNP, and process enclaves, such as Intel SGX, provide workload protection against cloud threats. However, they strongly differ in TCB…
-
LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge
arXiv cs.CR (Security)
arXiv:2506.09956v2 Announce Type: replace Abstract: Indirect prompt injection attacks exploit a fundamental weakness of LLMs: executing unauthorized tasks from untrusted sources. Despite the practical significance of this attack vector…
-
Safety Graph: When Safety Responses Become Attack Surfaces in Cyber-Physical Systems
arXiv cs.CR (Security)
arXiv:2610.13086v1 Announce Type: new Abstract: Modern industrial control systems (ICS) are susceptible to cyber attacks triggering safety failures in the operational technology (OT) layer. The traditional way to mitigate any failure in OT…
-
Space Over Statistic, Retraining Over Ranking: Auditing Training Labels Under Label-Only Backdoors
arXiv cs.CR (Security)
arXiv:2610.13051v1 Announce Type: new Abstract: Some backdoor attacks never touch an image. FLIP only changes labels: on CIFAR-10, flipping 3% of them makes a ResNet-32 send 99.7% of triggered source-class images to the attacker's class…
-
ECGWmark: Deep Watermarking for Electrocardiogram Signals
arXiv cs.CR (Security)
arXiv:2610.13357v1 Announce Type: cross Abstract: Secure transmission of electrocardiogram (ECG) signals remains a major challenge in telecardiology. While traditional mathematical watermarking can embed patient metadata directly into ECG…
-
RPP: A Certified Poisoned-Sample Detection Framework for Backdoor Attacks under Dataset Imbalance
arXiv cs.CR (Security)
arXiv:2602.00183v2 Announce Type: replace Abstract: Deep neural networks are highly susceptible to backdoor attacks, yet most defense methods to date rely on balanced data, overlooking the pervasive class imbalance in real-world scenarios…
-
Privacy-Preserving Intent Fulfilment and Assurance for 6G RAN
arXiv cs.CR (Security)
arXiv:2607.08809v2 Announce Type: replace Abstract: Intent-based network management automates 6G service lifecycles, but existing fulfilment and assurance approaches require traffic inspection, per-flow tracking, or vendor-internal…
-
PVBRF-ID: Private, Verifiable and Byzantine-Robust Federated Intrusion Detection for Oilfield Enterprise Networks
arXiv cs.CR (Security)
arXiv:2610.12704v1 Announce Type: new Abstract: Federated learning allows dispersed oilfield sites to train a shared intrusion detector without pooling network traffic, yet its aggregation step forces a choice between privacy and…
-
An Exploration of Attacks on AI Agent Systems
arXiv cs.CR (Security)
arXiv:2610.12524v1 Announce Type: new Abstract: As autonomous AI agents become more integrated into sensitive domains, it is crucial that single and multi-agent AI systems are secured. This paper investigates how prompt injection attacks…
-
SoK: Privacy-Preserving Order Matching
arXiv cs.CR (Security)
arXiv:2610.12535v1 Announce Type: new Abstract: Privacy-preserving order matching enables traders to discover and execute compatible orders while limiting disclosure of sensitive trading information. Existing systems span financial markets…
-
Cancerous Backdoor Attack: Gradual Activation via Invisible Tokens and A Stage Controller
arXiv cs.CR (Security)
arXiv:2610.12644v1 Announce Type: new Abstract: Backdoor Attacks on Large Language Models (LLMs) typically follow a trigger-response pattern, where satisfying a trigger condition activates a single terminal behavior. However, this…
-
Vulnerable Models in the AI Supply Chain: An Empirical Study of Adoption, Propagation, and Usage Patterns
arXiv cs.CR (Security)
arXiv:2610.12893v1 Announce Type: new Abstract: The rapid integration of Artificial Intelligence (AI) models has established a complex supply chain, but many of these shared artifacts harbor severe vulnerabilities such as insecure…
-
CAPE - Context-Aware Prioritization Engine for Vulnerability Scoring and Management
arXiv cs.CR (Security)
arXiv:2610.13071v1 Announce Type: new Abstract: Vulnerability patching is critical for safeguarding an enterprise's software ecosystem from cyber attacks. However, patching requires adequate preparation for potential system downtime and…
-
Understanding Verification Vulnerabilities in Cross-chain Bridges: An Empirical Study
arXiv cs.CR (Security)
arXiv:2610.13170v1 Announce Type: new Abstract: With the rapid development of blockchain technology, numerous heterogeneous blockchains have emerged, each featuring distinct architectures, consensus mechanisms, and application ecosystems…
-
Quantization-Tolerant Gradient Auditing for Active Inference-Attack Detection in Federated Learning
arXiv cs.CR (Security)
arXiv:2610.13311v1 Announce Type: new Abstract: Inside a federated learning system a participant can quietly study the shared model and learn about others' private data. The usual defense, differential privacy, often adds so much noise…
-
ToFu: Exploiting and Fuzzing the LLM-Orchestrator-Tool Trust Boundary
arXiv cs.CR (Security)
arXiv:2610.13651v1 Announce Type: new Abstract: Large language models (LLMs) are increasingly deployed as agents that interact with external software through tools, with an orchestration layer translating model outputs into structured tool…
-
Decision-Focused Learning for Cyber-Physical Risk-Aware Power Grid Operations
arXiv cs.CR (Security)
arXiv:2610.13853v1 Announce Type: new Abstract: Power grid cyber-physical security requires intrusion detection methods that account for the operational consequences of detection errors. However, the existing intrusion detection approaches…
-
AI Models Can Provably Hide Arbitrary Capabilities
arXiv cs.CR (Security)
arXiv:2610.13928v1 Announce Type: cross Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on the assumption that hidden capabilities can be elicited. We show this…
-
Defense-as-Skill: Evolving Runtime Guard Skill for Skill-Augmented Agents
arXiv cs.CR (Security)
arXiv:2609.01487v2 Announce Type: replace Abstract: Skill-augmented agents load reusable skills as persistent runtime context, improving task performance but also giving malicious skills a durable channel for steering future actions. Such…
-
Power, Performance, and Area of HPC-Based Malware Detectors: An FPGA and Open-PDK ASIC Study
arXiv cs.CR (Security)
arXiv:2610.12795v1 Announce Type: new Abstract: Hardware malware detectors (HMDs) classify programs as benign or malicious based on hardware performance counter (HPC) data. Previous studies have shown that ensemble classifiers outperform…
-
APEX-Harm: Evaluating Agent Safety in Shared Professional Workspaces
arXiv cs.CR (Security)
arXiv:2610.13623v1 Announce Type: new Abstract: Professional agents increasingly work through command-line interfaces and multiple tools over shared workspaces containing files, messages, and business applications. These environments…
-
Identity-Based Signing Shifts, Not Solves, Usability: Evidence from Five Identity-Based Signing Ecosystems
arXiv cs.CR (Security)
arXiv:2603.17133v2 Announce Type: replace-cross Abstract: Identity-based software signing tools aim to make software artifact provenance verifiable while reducing the burden of long-lived key management. These tools are becoming critical…
-
Post-Quantum Session Establishment for Matter over Thread: Message Size, Transport, and Protocol Options
arXiv cs.CR (Security)
arXiv:2610.13026v1 Announce Type: new Abstract: Matter's first post-quantum change protects device attestation with ML-DSA, but its operational handshake, CASE, still derives session keys from P-256 ECDH, so recorded traffic can be…
-
Auditing Prompt Injection Defenses Before They Reach Users: What Strong Adversaries Reveal
arXiv cs.CR (Security)
arXiv:2505.15738v3 Announce Type: replace Abstract: Large language models are increasingly deployed in user-facing products that handle sensitive personal data while interacting with untrusted external content. This makes them a prime…
-
An introduction to local differential privacy protocols using block designs
arXiv cs.CR (Security)
arXiv:2602.02744v2 Announce Type: replace-cross Abstract: The design of protocols for local differential privacy (or LDP) has been a topic of considerable research interest in recent years. LDP protocols utilise the randomised encoding of…
-
Trust, but Validate the Instrument: Auditing AI-Generated RTL Verification Plans on Authored Security-Regression Proxies
arXiv cs.CR (Security)
arXiv:2609.19844v2 Announce Type: replace Abstract: AI-generated RTL verification plans can satisfy a provider schema yet fail at the boundary to trusted execution. We present SecTB-RTL, an auditable framework covering 31 tasks and 124…
-
VEPA: Verified Evolving Formal Policy for Lifelong LLM Agent Guardrails
arXiv cs.CR (Security)
arXiv:2610.12813v1 Announce Type: cross Abstract: LLM agents increasingly operate over sensitive resources, such as private documents and mutable system states, which can create serious safety and security risks. Runtime guardrails should…
-
Two Birds One Stone: Effective Static Detection of Resource and Communication Deadlocks in Rust Programs
arXiv cs.CR (Security)
arXiv:2401.01114v3 Announce Type: replace-cross Abstract: Although Rust claims to enable fearless concurrency, concurrency errors remain prevalent in practical applications, with deadlocks particularly prominent and harmful. Current static…
-
Secrets in Preamble: Practical and Robust PHY Information Hiding for Wi-Fi
arXiv cs.CR (Security)
arXiv:2610.13367v1 Announce Type: new Abstract: Physical layer (PHY) information hiding refers to the concealment of secrets within PHY waveforms without compromising the integrity of the primary communication link, thereby enabling…
-
EviRepair: Evidence-Driven Agents for Reliable Vulnerability Repair
arXiv cs.CR (Security)
arXiv:2610.13491v1 Announce Type: new Abstract: Recent advances in large language models (LLMs) have enabled agent-based approaches for repository-level automated vulnerability repair (AVR), showing promising repair capabilities. However…
-
TENNOR: Trustworthy Execution for Neural Networks through Obliviousness and Retrievals
arXiv cs.CR (Security)
arXiv:2605.07160v3 Announce Type: replace Abstract: Training neural networks on sensitive data in untrusted cloud environments requires simultaneously achieving computational efficiency and rigorous privacy guarantees. Sparsification…
-
The False Allure of "Security by Obscurity": A Game-Theoretic Approach
arXiv cs.CR (Security)
arXiv:2610.12858v1 Announce Type: cross Abstract: "Security by obscurity," or the idea that hiding how a system works helps protect it from adversaries, has long been poorly regarded in the security community. Yet its intuitive appeal…
-
Understanding and Mitigating Cross-Session Attacks via Persistent Artifacts in Agent Skill Composition
arXiv cs.CR (Security)
arXiv:2610.13227v1 Announce Type: new Abstract: Agent skills extend the capabilities of AI agents by bundling instructions, code, and resources into reusable packages. During skill execution, agents may produce or modify artifacts, such as…
-
Provably Subexponential Algorithms for Bounded-Error LWE with Few Samples
arXiv cs.CR (Security)
arXiv:2610.13043v1 Announce Type: new Abstract: We show that a variant of the Wagner/BKW-style algorithm for LWE of Kirchner and Fouque [KF15] solves decision and search LWE with secrets of size $n$ over prime moduli $q=n^{\kappa+o(1)}$…
-
A Systematic Study of Security Enforcement at Android Inter-Component Boundaries
arXiv cs.CR (Security)
arXiv:2610.13597v1 Announce Type: new Abstract: Android's inter-process communication (IPC) mechanisms (Activities, Services, BroadcastReceivers, ContentProviders, and URI scheme handlers) form the primary interface between applications…
-
Reward Hacking as a Transmissible Strategy in Multi-Agent Coding Systems
arXiv cs.CR (Security)
arXiv:2610.12822v1 Announce Type: cross Abstract: Multi-agent systems are increasingly used to solve coding tasks by coordinating agents that share code and plans. These agents are often optimized with reinforcement learning (RL) using…
-
A Comprehensive Survey of Website Fingerprinting Attacks and Defenses in Tor: Advances and Open Challenges
arXiv cs.CR (Security)
arXiv:2510.11804v5 Announce Type: replace Abstract: The Tor network provides users with strong anonymity by routing their internet traffic through multiple relays. While Tor encrypts traffic and hides IP addresses, it remains vulnerable to…
-
Beyond Edge Coverage: Per-Task Data-Flow Extraction at Kernel Function Boundaries via LLVM
arXiv cs.CR (Security)
arXiv:2606.00455v4 Announce Type: replace Abstract: Coverage-guided kernel fuzzers such as syzkaller rely on edge coverage trace-pc as their sole feedback signal. This context-blind approach cannot distinguish execution paths that differ…
-
ISC Stormcast For Monday, October 12th, 2026 https://isc.sans.edu/podcastdetail/10132, (Mon, Oct 12th)
SANS ISC