Cybersecurity news — Thursday 15 October 2026

CyberScoop Asia 21:13 UTC

Proofpoint agreed Thursday to acquire Varonis Systems in a cash transaction valued at approximately $6.3 billion, combining two companies that have positioned themselves around a shared bet: that securing data has become the central…

BleepingComputer 20:25 UTC

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]

The Hacker News 20:24 UTC

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it. The…

BleepingComputer 19:48 UTC

Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]

CyberScoop Asia 19:29 UTC

Election influence campaigns, particularly ones playing out over social media, are a dime a dozen. Such campaigns – sometimes devised by foreign powers, other times by domestic groups – are often designed to influence the U.S. electorate…

The Hacker News 18:49 UTC

Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets interesting in different ways. A small…

BleepingComputer 18:20 UTC

A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. [...]

SecurityWeek 17:42 UTC

Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate. The post Context Is King in the Fight Against Modern Cyberattacks appeared first on SecurityWeek .

BleepingComputer 17:12 UTC

A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]

Schneier on Security 16:24 UTC

Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: Abstract: We estimate how much public cryptanalysis each public-key assumption has…

ZDNet Security 16:19 UTC

Eyeing Apple’s new Home Collection products? Renters should check their lease agreement before installing.

ZDNet Security 16:18 UTC

Apple reportedly set a date to unveil its new touchscreen MacBooks. Here’s what else we expect.

The Hacker News 16:01 UTC

Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said…

The Hacker News 16:00 UTC

The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves…

ZDNet Security 15:00 UTC

Nvidia’s new models join a wave of open-weight releases from US labs on the heels of the Hugging Face hack.

SecurityWeek 14:22 UTC

Most of the data is related to applications, claims, and payments submitted between 2007 and 2025. The post UK Legal Aid Agency Hack Scope Widens After Forensic Review appeared first on SecurityWeek .

Malwarebytes Labs 14:15 UTC

On October 13 and 14, Google issued several Chrome updates . Most users are on Chrome’s Stable channel. The desktop update brings Chrome to versions 155.0.8059.79/.80 for Windows and Mac and 155.0.8059.79 for Linux . The update includes 37…

The Hacker News 14:11 UTC

A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to be a rebrand of a traffic monetization operation dubbed ROI777. Help TDS is assessed to be active…

BleepingComputer 14:01 UTC

AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business context. Intruder compares the strengths and weaknesses of both approaches and…

BleepingComputer 13:18 UTC

Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031. [...]

ZDNet Security 13:00 UTC

Google unveiled two new shopping tools ahead of the holiday buying season. Here’s what to know.

The Hacker News 12:58 UTC

NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or…

Malwarebytes Labs 12:55 UTC

Maybe it’s a text saying your package couldn’t be delivered, with a link to reschedule. Or an email from your bank asking you to verify your account. Or perhaps it’s an invitation from someone you know to view a document. The message looks…

SecurityWeek 12:50 UTC

Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility. The post Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers appeared first on SecurityWeek .

The Hacker News 12:28 UTC

Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code-execution flaw is in React Server…

The Hacker News 12:07 UTC

Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attacker cannot reach the flaw through core…

NCSC UK 12:00 UTC

The NCSC publishes its recommendations for configuring post-quantum cryptography in TLS. Now is time to migrate.

NCSC UK 12:00 UTC

Recommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions.

BleepingComputer 11:55 UTC

Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material (CSAM) through online messaging groups. [...]

Malwarebytes Labs 11:48 UTC

The Federal Trade Commission (FTC) has filed a complaint accusing Digital Forensics Corporation of exploiting people already targeted by sextortionists . We have talked about sextortion and recovery scams in the past, but we never looked…

The Hacker News 11:46 UTC

Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026. The…

SecurityWeek 11:25 UTC

Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities. The post CikaBika Bot RAT Uses Discord for C&C appeared first on SecurityWeek .

Malwarebytes Labs 11:09 UTC

Photos you take with your phone and some digital cameras can contain hidden information, including where they were taken. You can strip that data out before sharing a photo with someone, which would help to protect your location. But the…

The Hacker News 11:04 UTC

AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing more confident in their own output faster than practitioners are developing…

The Hacker News 10:42 UTC

The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' registered names along with their numbers for incoming calls starting November 1, 2026, in an effort to help people identify…

SecurityWeek 10:15 UTC

The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT. The post Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies appeared first on SecurityWeek .

CyberScoop Asia 10:00 UTC

That online ad you saw for earbuds, a drone or bubble gum-scented car air freshener may have been a gateway for mercenary spyware that can infect your device without you ever having to click on it. The Citizen Lab at the University of…

SecurityWeek 09:55 UTC

Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised. The post CenterPoint Energy Data Breach Impacts 1 Million Texans appeared first on SecurityWeek .

BleepingComputer 09:10 UTC

Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August. [...]

The Hacker News 08:45 UTC

The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to GitGuardian, was observed on October 8 and 9, 2026. "This resulted from…

SecurityWeek 08:26 UTC

James Robinson never planned a cybersecurity career — seven companies and one deputy CISO role later, he leads security at Netskope. The post CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO appeared first on…

BleepingComputer 08:06 UTC

The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to 1978. [...]

The Hacker News 07:07 UTC

Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows…

SecurityWeek 06:59 UTC

The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available. The post Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution appeared first on SecurityWeek .

The Hacker News 06:43 UTC

Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The vulnerabilities in question are…

SecurityWeek 06:34 UTC

Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges. The post Cisco Warns of Exploited Secure Email Gateway Vulnerability appeared first on SecurityWeek .

The Hacker News 06:17 UTC

Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote code execution…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.16384v2 Announce Type: replace Abstract: Road-network trajectory synthesis under local differential privacy (LDP) enables mobility data analysis without uploading raw trajectories to an untrusted server. Existing locally private…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.20437v1 Announce Type: cross Abstract: Mid-2026 reporting on autonomous AI evaluation incidents claimed that frontier large language model (LLM) agents escaped server containment through emergent coordination and cloud…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.10871v2 Announce Type: replace Abstract: The Agent2Agent (A2A) protocol, now governed by the Linux Foundation, is an open standard that enables autonomous AI agents to discover, authenticate with, and delegate tasks to one…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2505.19174v5 Announce Type: replace Abstract: Penetration testing refers to the process of simulating hacker attacks to evaluate the security of information systems . This study aims not only to clarify the theoretical foundations of…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.03073v2 Announce Type: replace Abstract: Security workflows need models that turn complex observations and explicit policies into decisions. System One models introduced by Jev return typed predictions and probabilities…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19856v1 Announce Type: new Abstract: Typed decision models (TDMs) are increasingly used in applications such as request routing and model selection, making reliable decisions critical to system performance. Fallback options…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19830v1 Announce Type: new Abstract: Cyber Threat Intelligence (CTI) investigators who monitor dark web marketplaces for leaked credentials and breach listings must pass the diverse CAPTCHAs that operators deploy to block…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.20521v1 Announce Type: new Abstract: We present Tulva, a practical threshold FHE scheme which equips a base FHE scheme with an asynchronous threshold decryption mechanism in a modular way. Our scheme simultaneously (1) is…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.20427v1 Announce Type: new Abstract: Detecting unseen malware variants remains a major challenge as malware families continuously evolve. This issue is exacerbated in data-scarce scenarios such as emerging malware campaigns…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.14453v2 Announce Type: replace Abstract: Large language models (LLMs) may introduce security vulnerabilities into generated code, which can persist into production when verification focuses on functional correctness. Existing…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19384v1 Announce Type: new Abstract: Multimodal agents increasingly rely on visual interfaces to perceive state and select actions, creating an attack surface not captured by text-only safety evaluations. We study Visual…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19607v1 Announce Type: new Abstract: Rising privacy concerns around large language models have accelerated research in private Transformer inference (PTI). Synthesizing the empirical claims in this line of research, however, is…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.20245v1 Announce Type: new Abstract: Large language models are increasingly deployed as autonomous agents for automated program repair, patching software vulnerabilities through multi-step reasoning and tool use. Yet these…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19947v1 Announce Type: new Abstract: Backdoor attacks on deep neural networks are commonly evaluated by attack success rate and benign accuracy, yet their stealthiness remains inconsistently defined and measured. Existing work…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.20171v1 Announce Type: new Abstract: Constant-time execution is an important security property, especially for IoT devices, that prevents the leakage of sensitive information over timing side-channels. However, achieving…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.16336v2 Announce Type: replace Abstract: Face swapping and generative editing enable realistic facial manipulation, while online redistribution complicates publisher oversight of circulating face images. Existing approaches…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.20284v1 Announce Type: new Abstract: High-quality data is essential for improving instruction tuning in threat intelligence analysis. However, existing methods for generating cybersecurity instruction data lack reliable quality…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.20567v1 Announce Type: cross Abstract: Cloud services rapidly shift towards independently-managed microservices architectures. This independence may lead to temporary microservices miscoordination, resulting in overloads and…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.20049v1 Announce Type: new Abstract: Agents extend their capabilities through reusable skills that package instructions, executable code, and resources. Composing these skills enables complex task workflows, but their…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2504.09977v2 Announce Type: replace Abstract: Poorly designed smart contracts are particularly vulnerable, as they may allow attackers to exploit weaknesses and steal the virtual currency they manage. In this study, we train a model…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.10537v2 Announce Type: replace Abstract: Logic flaws pose significant challenges in the design and implementation of modern, semantically rich systems and applications, impacting security, privacy, and trust. These flaws are…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2508.03829v3 Announce Type: replace-cross Abstract: The growing deployment of Large Language Models (LLMs) has raised concerns about their misuse in generating harmful or deceptive content. To address this issue, watermarking methods…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19717v1 Announce Type: cross Abstract: Recent advances in diffusion models have enabled high-fidelity, identity-preserving image generation for personalized applications such as digital avatars and virtual try-on systems…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.11163v2 Announce Type: replace Abstract: Third-party challenge-response identity verification (TP-CRIV) enables an independent verifier to assess whether a claimant possesses a model identical to a remotely deployed model…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.18585v2 Announce Type: replace Abstract: JavaScript vulnerabilities in npm packages pose a significant risk to the Node$.$js ecosystem, and a growing body of work aims to detect, exploit, and mitigate them. Studying and…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19808v1 Announce Type: new Abstract: Network Intrusion Detection Systems (NIDS) based on deep learning often fail to detect attack classes that are absent from training data, limiting their robustness against zero-day threats…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.15725v2 Announce Type: replace Abstract: Agent skills encode operational procedures and domain expertise as reusable knowledge assets, yet their distribution in plaintext exposes them to unauthorized copying and leakage…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19158v1 Announce Type: cross Abstract: LLM agents are becoming increasingly capable of handling daily workspace tasks by interacting with application environments through tool calls. However, as agents read and write sensitive…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.18934v1 Announce Type: cross Abstract: Conventional deepfake speech detectors primarily target synthesis artifacts and often degrade under unseen attacks or recording conditions. Human speech, however, contains physiological…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19566v1 Announce Type: new Abstract: Autonomous drones are increasingly deployed in safety-critical tasks, yet their autopilot software can still contain subtle logic flaws that lead to unsafe behaviors. These flaws are…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.20315v1 Announce Type: new Abstract: Background: Rust is a modern programming language known for its focus on usability, concurrency, and security. However, empirical studies reveal that Rust is still affected by software…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.13928v2 Announce Type: replace-cross Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on the assumption that hidden capabilities can be elicited. We show…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2605.10998v2 Announce Type: replace Abstract: Fine-tuning APIs make frontier LLMs easy to customize, but they can also weaken safety alignment during fine-tuning. While prior work shows that benign supervised fine-tuning (SFT) can…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.00578v2 Announce Type: replace-cross Abstract: Cybersecurity assistance is dual use, requiring decisions about when to answer, limit, or refuse a request. Prior work studies refusal evaluation and conversational jailbreaking…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.18948v1 Announce Type: new Abstract: Finite safety assessments cannot exclude an adversary that preserves unattacked behavior until certification and activates afterward. We characterize this limitation for embodied and tool-use…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.14350v2 Announce Type: replace Abstract: Having demonstrated a strong potential for automating vulnerability discovery, AI agents can also be used to attack software systems at scale. Today's software systems need mechanisms to…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.17727v2 Announce Type: replace Abstract: Agent skills turn natural-language instructions into actions, creating a security challenge: legitimate automation and malicious behaviour can look deceptively similar. A practical screen…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19898v1 Announce Type: new Abstract: Bilinear Compressive Security (BCS) is a lightweight encryption scheme that combines compressed sensing with a fresh random convolution filter to improve resistance against key-recovery…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19264v1 Announce Type: new Abstract: Agent skills are Markdown documents that a tool-using agent reads as instructions and then acts on with the privileges of the session that loaded them. Installing one grants authority (the…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2606.23612v2 Announce Type: replace-cross Abstract: We provide a pre-obfuscation circuit-level implementation of an efficient one shot signature scheme, which has known applications to delegated signatures, secure token transfer, and…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.20047v1 Announce Type: new Abstract: As Internet of Things (IoT) devices collect and process data, security is essential. IoT devices often combine with other emerging technologies, such as artificial intelligence (AI) and…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2604.02837v2 Announce Type: replace Abstract: Agent Skills is an emerging open standard that defines a modular, filesystem-based packaging format enabling LLM-based agents to acquire domain-specific expertise on demand. Despite rapid…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.18946v1 Announce Type: new Abstract: Physical-layer spoofing attacks pose a critical threat to wireless localization systems by manipulating channel state information (CSI). Detecting such attacks becomes particularly…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.17406v2 Announce Type: replace-cross Abstract: On the Internet, we use the Base64 format to represent binary data (e.g., images or cryptographic keys) as text. The ES2026 JavaScript standard, following the WHATWG…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19491v1 Announce Type: new Abstract: The rise of quantum computing presents substantial challenges to the security of Peer-to-Peer (P2P) energy trading systems. This paper introduces an innovative mutual authenticated session…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.20537v1 Announce Type: cross Abstract: Side-channel attacks on block ciphers rarely recover the key outright: they leave a residual key space ordered by subkey posteriors, and evaluation laboratories report the key rank of the…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2508.09426v3 Announce Type: replace Abstract: As artificial intelligence technology continues to advance, chatbots are becoming increasingly powerful. Among them, ChatGPT, launched by OpenAI, has garnered widespread attention…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2509.21712v2 Announce Type: replace Abstract: Aligning AI systems with human privacy preferences requires understanding individuals' nuanced disclosure behaviors beyond general privacy norms. Yet eliciting these boundaries remains…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19852v1 Announce Type: cross Abstract: Shannon entropy is a standard measure of ciphertext randomness, evaluated either globally over the byte histogram of the entire ciphertext or locally as the average over non-overlapping…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19278v1 Announce Type: new Abstract: High-performance camera-based perception pipelines must sustain per-frame real-time budgets on resource-constrained embedded GPU platforms. Availability attacks such as SlowTrack inflate the…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19005v1 Announce Type: new Abstract: AI agents are demonstrating increasingly strong offensive and defensive cybersecurity capabilities in the real world. Current benchmarks mostly evaluate agents in isolation against static…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19039v1 Announce Type: new Abstract: Post-quantum cryptography (PQC) and quantum key distribution (QKD) address the quantum threat from opposite directions: PQC replaces vulnerable public-key algorithms with schemes believed to…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19325v1 Announce Type: new Abstract: Privacy-preserving machine learning has become critical for deploying artificial intelligence in sensitive domains such as healthcare, finance, and infrastructure monitoring. Homomorphic…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19498v1 Announce Type: new Abstract: Model signing authenticates the full-precision weights W an LLM is released with, yet users run a quantized artifact Q whose producing transformation is not uniquely determined under current…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19650v1 Announce Type: new Abstract: Understanding the security posture of cyber physical systems (CPS) requires reasoning across both information technology (IT) and operational technology (OT). However, a security analyst…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19766v1 Announce Type: new Abstract: Although Artificial Intelligence (AI)-based Intrusion Detection Systems (IDSs) are increasingly deployed in operational networks, their dependence on large-scale training data introduces a…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19971v1 Announce Type: new Abstract: Automated jailbreak attacks rely on evaluation feedback to optimize adversarial prompts, but existing methods often lack fine-grained diagnostic information. We propose Jev-Guided Strategy…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.20173v1 Announce Type: new Abstract: Bosley and Dodis (TCC 2007) proved that a class of imperfect randomness sources that suffices for information-theoretic encryption of messages longer than the logarithm of the key length must…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19306v1 Announce Type: cross Abstract: Jailbreak attacks against large language models (LLMs) are evaluated using attack success rate (ASR), which depends on correctly identifying responses that fulfill prohibited requests…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.20055v1 Announce Type: cross Abstract: The rapid advancement of large vision language models (LVLMs) has made geolocation inference from images highly accurate and accessible. This poses serious privacy risks: a passive…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2403.07820v5 Announce Type: replace Abstract: In this work, we introduce a strong Designated Verifier Signature (DVS) scheme that incorporates a message recovery mechanism inspired by the concept of the Universal Designated Verifier…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2604.01444v3 Announce Type: replace Abstract: Food safety directly affects human health in daily life, as unsafe preparation or storage can lead to contamination and foodborne illness. PwC's 2025 consumer survey reports that 47% of…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.12378v3 Announce Type: replace Abstract: Cloud LLM services typically require users to send prompts to a model provider, creating a privacy risk. Fully homomorphic encryption (FHE) lets a server perform inference without…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.11030v2 Announce Type: replace Abstract: Tool-using LLM agents violate the policies they are deployed to enforce, often silently. Prior defenses hand-write rules, query an LLM verifier per action, or compile policies through…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.18054v2 Announce Type: replace Abstract: Anti-money laundering (AML) in financial networks requires modeling transaction patterns that span multiple institutions. In practice, however, banks cannot share account and transaction…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2410.19371v4 Announce Type: replace-cross Abstract: Differential privacy (DP) provides robust privacy guarantees for statistical inference, but this can lead to unreliable results and biases in downstream applications. While several…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2512.20622v2 Announce Type: replace-cross Abstract: Privacy concerns around 5G, the latest generation of mobile networks, are growing, with fears that its deployment may increase exposure to privacy risks. This perception is largely…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2610.19335v1 Announce Type: cross Abstract: Sequential data such as documents, conversations, and trajectories are naturally partitioned across users, motivating privacy guarantees that protect each user's entire trajectory. We…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2604.27666v2 Announce Type: replace Abstract: Regulation requires generated text to be marked and detectable, but symmetric-key watermarks leave detection to the key-holding provider. We study first-party provenance audit (FPA)…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2606.09549v2 Announce Type: replace Abstract: Tool-using large language model (LLM) agents face two distinct security failures: unauthorized external actions and exposure of sensitive plaintext inside the runtime before any final…

arXiv cs.CR (Security) 04:00 UTC

arXiv:2609.05903v2 Announce Type: replace Abstract: Large language model (LLM) agents can translate natural-language requests into real-world actions, creating safety risks from both indirect prompt injections and directly harmful…

SANS ISC 01:10 UTC

[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program]

Recorded Future 00:00 UTC

Executive Summary Since mid-2025, the Kremlin has intensified restrictions on digital communications and infrastructure, very likely to suppress the organization of domestic political dissent and conduct digital surveillance within Russia…

Recorded Future 00:00 UTC

Although Recorded Future was founded by Swedish scientists and innovators, our HQ has always been a key part of the Somerville and Boston tech startup scene. Recognized for our award-winning platform and amazing culture, the team and our…