AX·NEWS
Sign in

Cybersecurity

Cybersecurity news — Thursday 22 October 2026

105 stories from 10 sources, every one in English. Each links to its publisher.

Open in the live feedRSS feedOn a TV

  1. Railway warns devs to rotate secrets after potential breach
    USBleepingComputer

    Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week. [...]

  2. Capcom confirms data breach affecting 11.7 million accounts
    USBleepingComputer

    Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information. [...]

  3. LiteLLM release pipeline hacked to distribute info-stealer malware
    USBleepingComputer

    Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]

  4. Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
    INThe Hacker News

    Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can log…

  5. eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
    INThe Hacker News

    eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its…

  6. ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More
    INThe Hacker News

    This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's…

  7. Exclusive: bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber
    USCyberScoop Asia

    A new bipartisan House bill would charge the federal government with developing formal guidance for defending AI models against distillation attacks. The AI Cyber Defense Act , shared exclusively with CyberScoop ahead of release, is…

  8. Arista patches new VeloCloud Orchestrator zero-day exploited in attacks
    USBleepingComputer

    Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments. [...]

  9. Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
    INThe Hacker News

    Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel. One of them…

  10. Facebook’s misleading privacy claims land Meta a $25 billion penalty
    USMalwarebytes Labs

    Facebook’s Cambridge Analytica scandal may feel like very old news . But the consequences are still arriving, and the latest comes with a $25 billion price tag. Reuters reports that a New Mexico judge has ordered Meta to pay $25 billion in…

  11. Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations
    INThe Hacker News

    Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy lawsuit that sprang from the company's Cambridge Analytica data scandal, which came to light in 2018. According…

  12. Amazon’s Kindle Unlimited is now Kindle+, and the 2 big changes include AI audiobooks
    USZDNet Security

    Unlike narrated audiobooks from Audible and other providers, the audiobooks created with Virtual Voice in Kindle+ will instead be narrated by AI.

  13. Microsoft shares how to fix broken Exchange Online EWS apps
    USBleepingComputer

    Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have stopped working. [...]

  14. The latest PowerToys gives your mouse 2 new tricks for free – how to use them
    USZDNet Security

    PowerToys is one of my favorite free Windows utilities. With more than 30 tools, it offers something for everyone from beginners to power users. Here’s what’s new for mousing.

  15. eMudhra kills its certificate business after researchers cracked its private keys in under a second
    USCyberScoop Asia

    Indian certificate authority eMudhra said Thursday it will stop issuing SSL/TLS certificates days after researchers showed that the private keys securing eight of its certificates were so weak they could be reconstructed in under a second…

  16. Hacker Conversations: Corey Thuen and the Evil Bit
    USSecurityWeek

    Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t. The post Hacker Conversations: Corey Thuen and the Evil Bit appeared first on SecurityWeek .

  17. Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself
    USMalwarebytes Labs

    The warnings are everywhere these days. Don’t click this. Don’t open that. Don’t scan this. Don’t download that. These messages of caution, however well-intended, are so ubiquitous and constant that it should come as no surprise that some…

  18. Machine speed attacks require machine speed detection and response
    USBleepingComputer

    Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks involving stolen GitHub tokens, malicious AI installers, and MFA phishing, explaining…

  19. INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown
    INThe Hacker News

    INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, the effort saw law enforcement agencies from 21 countries…

  20. New Serious PHP Vulnerabilities Released and Patched
    USSchneier on Security

    PHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to…

  21. Amazon says PHP2Shell exploitation began 4 days before patches
    USBleepingComputer

    Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday. [...]

  22. Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform
    USSecurityWeek

    The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East. The post Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform appeared first on…

  23. Signal Vulnerability Lets Malicious Callers Block Hang-Ups
    USSecurityWeek

    Affecting the open source calling library RingRTC, the bug prevented calls from ending properly. The post Signal Vulnerability Lets Malicious Callers Block Hang-Ups appeared first on SecurityWeek .

  24. Tech and Security Companies Respond to PHP2Shell Vulnerabilities
    USSecurityWeek

    Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching. The post Tech and Security Companies Respond to PHP2Shell Vulnerabilities appeared first on…

  25. The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat
    INThe Hacker News

    Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching. Nobody reviewed its access. Nobody owns…

  26. GitLab warns of new max severity code execution vulnerability
    USBleepingComputer

    GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers. [...]

  27. Woman faces years in prison over a Cash App account she says she never opened
    USMalwarebytes Labs

    A Cash App account opened in her name has left Amanda Smith facing criminal charges and potentially up to six years in prison. 404 Media reports that Smith says someone used her Social Security number (SSN) and date of birth to create an…

  28. Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation
    INThe Hacker News

    Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation, the company found that an unauthorized third party may have…

  29. Splunk, SolarWinds Release Fresh Security Updates
    USSecurityWeek

    Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information. The post Splunk, SolarWinds Release Fresh Security Updates appeared first on SecurityWeek .

  30. OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
    INThe Hacker News

    A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model Context Protocol) servers to add outside…

  31. Cisco Patches 34 Vulnerabilities Across Multiple Products
    USSecurityWeek

    Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks. The post Cisco Patches 34 Vulnerabilities Across Multiple Products appeared first on SecurityWeek .

  32. Encryption isn’t enough to protect data wherever it goes 
    USCyberScoop Asia

    Cybersecurity policy has long treated data protection as a systems problem: encrypt the database, secure the network, restrict access, monitor activity, and keep attackers out. All of that still matters. But those defenses have a major…

  33. PHP2Shell Exploitation Started Days Before Patches
    USSecurityWeek

    Initial attempts were observed on October 17, and mass activity began shortly after patches were released. The post PHP2Shell Exploitation Started Days Before Patches appeared first on SecurityWeek .

  34. Delivery bots accused of illegally scanning customers
    USMalwarebytes Labs

    Two Chicago customers say robots delivering their groceries and takeout scanned their faces and hands without consent, stored the data alongside their names and addresses, and used the recordings to train AI . Their separate lawsuits…

  35. LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
    INThe Hacker News

    LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's release…

  36. Authorities disrupt nearly 11,000 cybercrime networks in Africa
    USBleepingComputer

    Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which targeted business email compromise, ransomware, and online scams. [...]

  37. Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
    INThe Hacker News

    Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow…

  38. Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU
    USSecurityWeek

    Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches. The post Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU appeared first on SecurityWeek .

  39. Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook
    USSecurityWeek

    The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019. The post Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook appeared first on…

  40. New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
    INThe Hacker News

    A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small batch of compressed HTTP headers that expands in…

  41. Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
    INThe Hacker News

    Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities dating back to October 17, 2026, against its MadPot honeypot service, as the flaws come under broad…

  42. China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
    INThe Hacker News

    Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, a Go-based agentic…

  43. Beyond Tokens: NumAnchor for Address-Grounded Numeric Operand Representation in Assembly Language Models
    USarXiv cs.CR (Security)

    arXiv:2610.29027v1 Announce Type: new Abstract: Assembly language models (ALMs) are becoming important for automated binary analysis, yet their token-level interfaces often obscure numeric-like operands. In two corpora, such operands…

  44. XIR: A Framework for Interoperability across Cross-Chain Protocols Based on a Verifiable Intermediate Representation
    USarXiv cs.CR (Security)

    arXiv:2609.20010v4 Announce Type: replace Abstract: Cross-chain protocols enable applications to exchange messages across blockchains. Under point-to-point configurations, communication depends on a direct connection between the source and…

  45. Beyond Policy Engines: Binding-Complete Execution Admission
    USarXiv cs.CR (Security)

    arXiv:2610.29701v1 Announce Type: new Abstract: Policy engines determine whether evaluated policies permit a request, but a correct ALLOW decision does not establish complete governance-source participation, exact context binding, or…

  46. Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks
    USarXiv cs.CR (Security)

    arXiv:2607.09473v2 Announce Type: replace Abstract: Fault injection (FI) attacks on embedded neural network (NN) implementations primarily focus on inducing misclassification by corrupting weights or intermediate computations, overlooking…

  47. Prompt Injection Through Forensic Evidence: A Taxonomy and Proof of Concept of Anti-Forensic Attacks on LLM-Assisted Digital Investigations
    USarXiv cs.CR (Security)

    arXiv:2610.29747v1 Announce Type: new Abstract: Large language models (LLMs) are entering digital forensics as examination assistants and autonomous agents. Digital forensics inverts the usual setting for indirect prompt injection: the…

  48. Characterizing and Defending Utility-Hijacking in Instruction-Tuning Data Selection
    USarXiv cs.CR (Security)

    arXiv:2610.29886v1 Announce Type: new Abstract: Instruction-data selectors choose which instruction-following records are used for fine-tuning, improving alignment quality, raising training efficiency, and filtering out harmful records. A…

  49. ANTMAN: An Efficient and Interpretable RTL-Level Run-Time Detection Framework for Stealthy Branch Predictor Attacks on BOOM
    USarXiv cs.CR (Security)

    arXiv:2608.09498v2 Announce Type: replace Abstract: Runtime detection of microarchitectural side channel attacks remains significantly underexplored in RISCV compared with x86 and ARM ISAs, posing a serious threat to critical applications…

  50. Sharing is caring: Attestable and Trusted Workflows out of Distrustful Components
    USarXiv cs.CR (Security)

    arXiv:2603.03403v4 Announce Type: replace Abstract: Trusted Execution Environments (TEEs) protect private memory and attest initial code and configuration, but neither constrain nor attest shared channels between TEEs or with the untrusted…

  51. Where AI Vulnerability Discovery Harnesses Go Quiet: Structural False Negatives and Hidden Vulnerabilities
    USarXiv cs.CR (Security)

    arXiv:2610.29379v1 Announce Type: new Abstract: LLM-based vulnerability discovery harnesses can miss real, reachable vulnerabilities because of how the harness around the model is built. Steps that select code, filter it, and store and…

  52. A Unified Evaluation Framework of Physical Adversarial Robustness in the Edge VLM Era
    USarXiv cs.CR (Security)

    arXiv:2610.29196v1 Announce Type: cross Abstract: Recent advancements in Vision-Language Models (VLMs) enable end-to-end visual grounding via language prompts and generative decoding, demonstrating largely improved zero-shot and…

  53. Beyond Binary Labels: Diagnostic Evaluation of LLM Safety with Prompt-Level Rubrics
    USarXiv cs.CR (Security)

    arXiv:2610.29225v1 Announce Type: cross Abstract: Current LLM safety benchmarks predominantly rely on binary safe or unsafe labels, lacking explanatory depth and suffering from low consistency across automated judges. To address this, we…

  54. Do Flow-Generation Tools Matter? Unsupervised Characterization of MQTT Traffic Across Public Datasets
    USarXiv cs.CR (Security)

    arXiv:2610.29774v1 Announce Type: cross Abstract: Message Queue Telemetry Transport (MQTT) is widely used in IoT environments due to its lightweight publish-subscribe design and suitability for resource-constrained networks. While current…

  55. VX-One: Typed, Calibrated Decision Heads for Real-Time Perimeter Triage - An empirical study of unknown-attack honesty, cascade gray zones, and calibration under drift
    USarXiv cs.CR (Security)

    arXiv:2610.30090v1 Announce Type: new Abstract: Perimeter triage faces a latency/semantics trade-off: signature engines are fast and format-safe but blind to unseen attacks, while generative models are semantic but slow and produce…

  56. Quantifying and Defending against the Privacy Risk in Logit-based Federated Learning
    USarXiv cs.CR (Security)

    arXiv:2606.08252v2 Announce Type: replace Abstract: Federated learning aims to protect data privacy by collaboratively learning a model without sharing private data among clients. Unlike traditional parameter-based FL methods that exchange…

  57. PerMIT: Securing Persistent Memory for LLM Agents via Machine-Checked Integrity Theorems and Scalable Community Trust
    USarXiv cs.CR (Security)

    arXiv:2610.28987v1 Announce Type: cross Abstract: Persistent memory is a largely undefended surface for injection and poisoning, and the same risk limits memory sharing among agents. We present PerMIT, a memory architecture with provable…

  58. Free-XOR TFHE via Lazy Bootstrapping
    USarXiv cs.CR (Security)

    arXiv:2610.29983v1 Announce Type: new Abstract: Gate bootstrapping (GB) is a widely used technique in FHEW-like fully homomorphic encryption schemes, such as TFHE, for evaluating Boolean gates while simultaneously reducing the noise of the…

  59. Peer review should constrain evaluative authority
    USarXiv cs.CR (Security)

    arXiv:2610.28646v1 Announce Type: cross Abstract: Our position shifts the target of peer-review reform from reducing uncertainty through evaluator improvement or judgment aggregation to constraining evaluative authority under persistent…

  60. Alignment via Training Against Probes Without Losing Monitorability
    USarXiv cs.CR (Security)

    arXiv:2609.38645v3 Announce Type: replace-cross Abstract: Models are usually aligned based on their observed outputs, using demonstrations, preference data, or reward signals. These objectives reward responses that look aligned. More…

  61. VDDP: Verifiable Distributed Differential Privacy under the Client-Server-Verifier Setup
    USarXiv cs.CR (Security)

    arXiv:2504.21752v4 Announce Type: replace Abstract: Although differential privacy (DP) is widely regarded as the de facto standard for data privacy, its implementation remains vulnerable to unfaithful execution by servers, particularly in…

  62. LEAN: Loss-Engineered Modulation of the Model Weight-Sensitivity Distribution for Efficient, Error-Tolerant Neural Networks
    USarXiv cs.CR (Security)

    arXiv:2610.28872v1 Announce Type: cross Abstract: The weights of a trained network do not have uniform sensitivity to model accuracy: the 1% most sensitive weights carry about a fifth of the damage a bit flip can do. This distribution…

  63. Diffusion Sensitivity Geometry and Strong Duality for Optimal Privacy-Utility Tradeoffs
    USarXiv cs.CR (Security)

    arXiv:2610.28991v1 Announce Type: cross Abstract: Existing approaches to differential privacy in diffusion models rely on loose sensitivity bounds and isotropic Gaussian noise, leading to unnecessary estimation error. We develop a…

  64. Stress-Testing Structure-Aware Calibration of Malware Graph Neural Networks under Type Shift
    USarXiv cs.CR (Security)

    arXiv:2609.28517v2 Announce Type: replace Abstract: Post-hoc malware calibrators can condition confidence on graph structure, but their structural inputs may leave the support represented by validation data under malware-type shift. We…

  65. GhostFaceMPC: Privacy-Preserving Face Recognition with Multi-Party Computation
    USarXiv cs.CR (Security)

    arXiv:2610.29987v1 Announce Type: new Abstract: Facial recognition has become central to modern authentication systems, security frameworks, and personalized services. However, its widespread adoption is hindered by severe privacy risks…

  66. PQ-Vault: Provably Quantum-Safe Asset Custody for Unmodified Ethereum
    USarXiv cs.CR (Security)

    arXiv:2610.29230v1 Announce Type: cross Abstract: A quantum computer could recover the key of any Ethereum account whose public key appears on chain. We prove that no sidechain or bridge that leaves Ethereum's rules unchanged can protect…

  67. WaveCommitments: Private and Verifiable Speech-Agent Marketplaces
    USarXiv cs.CR (Security)

    arXiv:2610.26867v2 Announce Type: replace-cross Abstract: Modern speech systems are evolving into ecosystems of autonomous speech agents that interact, negotiate, and trade assets such as embeddings, spectrograms, or raw data. In such…

  68. CertMoE: Robustness Certification for Mixture-of-Experts LLMs via Routing-Aware Smoothing
    USarXiv cs.CR (Security)

    arXiv:2610.29395v1 Announce Type: new Abstract: Provable robustness is a cornerstone of trustworthy machine learning, aiming to guarantee model predictions under adversarial perturbations. Existing certification frameworks, inspired by…

  69. Combining Long-Term Memory and LLMs Comes at a High Cost: From Prompt Injection to Persistent Compromise
    USarXiv cs.CR (Security)

    arXiv:2610.28810v1 Announce Type: new Abstract: The widespread adoption of generative artificial intelligence in recent years has brought a parallel rise in prompt injection and jailbreak attacks. By embedding malicious instructions, these…

  70. AI Security Literacy: Ecosystem-based Competency Framework and K-12 Learning Platform
    USarXiv cs.CR (Security)

    arXiv:2610.28859v1 Announce Type: new Abstract: Adoption of artificial intelligence in K-12 schools has outpaced guidance for students, teachers, and administrators. Existing AI-literacy frameworks emphasize understanding and use…

  71. Tracekit: Tamper-Evident Intent-Reasoning-Action Auditing for AI Agents
    USarXiv cs.CR (Security)

    arXiv:2609.35659v2 Announce Type: replace-cross Abstract: AI agents run shell commands, edit repositories, send email and move money with their operators' credentials, yet the record of what they did is usually a log the agent, or whoever…

  72. Black-Box Red-Teaming of Multi-Agent Systems via Reinforcement Learning
    USarXiv cs.CR (Security)

    arXiv:2610.28966v1 Announce Type: new Abstract: Large language model (LLM) agents are increasingly deployed in multi-agent systems (MAS) to accomplish complex tasks. Prior black-box red-teaming attacks mainly focus on single agents, but we…

  73. Correlated Failures of AI Approval Monitors
    USarXiv cs.CR (Security)

    arXiv:2610.29178v1 Announce Type: new Abstract: Before an AI agent takes a consequential action, such as paying, messaging or changing code, several monitors check it. Their verdicts are combined by aggregating scores or by counting…

  74. Compaction Laundering: Provenance Destruction in Context-Compacting Coding Agents
    USarXiv cs.CR (Security)

    arXiv:2610.29869v1 Announce Type: new Abstract: Coding agents that run long enough must compact their context, summarizing the conversation, discarding the original, and carrying the summary forward as memory. We show that in popular…

  75. Closing the Sim-to-Real Gap: An Evaluation Framework for Autonomous Cyber Defense Configuration of Commercial EDR
    USarXiv cs.CR (Security)

    arXiv:2606.08168v2 Announce Type: replace Abstract: Leading commercial endpoint detection and response (EDR) products have shifted from operator-configured rule sets to multi-component systems where autonomous AI components operate…

  76. Making AI-Assisted Claims Independently Challengeable: Publication Authority and a Protocol for Falsifiable Publication Records
    USarXiv cs.CR (Security)

    arXiv:2609.17631v2 Announce Type: replace-cross Abstract: AI-assisted claims can appear authoritative when evidence, analysis, human authorization, presentation, and correction history describe different states. We develop Publication…

  77. Location-of-interest vs. Current-location Privacy in Multi-hop Communication
    USarXiv cs.CR (Security)

    arXiv:2610.29772v1 Announce Type: new Abstract: Consider a standard multi-hop wireless radio network in which nodes relay messages for one another. While the contents of messages may be sensitive and thus encrypted, the very fact that two…

  78. Does Client Diversity Protect the Lightning Network? Evidence from the 2026 Core Lightning Shutdown
    USarXiv cs.CR (Security)

    arXiv:2610.20952v2 Announce Type: replace Abstract: Client diversity is often cited as the Lightning Network's defence against a bug in any one implementation, yet LND runs 80% of public nodes (84% counting one operator's fleet of about…

  79. SIREN (Luring LLMs onto the Rocks): PAIR-Driven Preference Manipulation in Web-RAG Recommenders
    USarXiv cs.CR (Security)

    arXiv:2607.21951v4 Announce Type: replace-cross Abstract: This paper investigates the adversarial manipulation of the ranked recommendations produced by web-augmented large language models (LLMs). When an LLM answers a recommendation query…

  80. VMSpec: A Decompiler-based Approach against Virtual Machine Obfuscation
    USarXiv cs.CR (Security)

    arXiv:2610.29566v1 Announce Type: new Abstract: Malicious actors frequently obfuscate their code to hinder investigative reverse engineering efforts. Among the most formidable techniques is virtual machine (VM) obfuscation: programs are…

  81. Latency-Neutral Passive Cyber Monitoring for Grid-Edge Operational Technology Networks
    USarXiv cs.CR (Security)

    arXiv:2610.28324v2 Announce Type: replace-cross Abstract: Deterministic industrial networks often present an operational trade-off between maintaining microsecond timing of primary control loops and capturing security telemetry. This work…

  82. Multi-User Multi-Key Image Steganography with Key Isolation
    USarXiv cs.CR (Security)

    arXiv:2603.23005v2 Announce Type: replace Abstract: Steganography conceals secret information within innocuous carriers while preserving visual fidelity and enabling reliable recovery. Recent unified networks operate normally under…

  83. Sign Here: Attributing a Source for a More Trustworthy Software Supply Chain
    USarXiv cs.CR (Security)

    arXiv:2610.28794v1 Announce Type: new Abstract: Software supply chain attacks continue to be on the rise, exploiting the trust that helps open source ecosystems thrive. Recent incidents like the Shai-Hulud worm and the Axios compromise…

  84. Cryptanalysis and Repair of "Decentralized Multi-authority ABE for NC$^1$ from BDH"
    USarXiv cs.CR (Security)

    arXiv:2610.29224v1 Announce Type: new Abstract: We present a plaintext-recovery attack on the decentralized multi-authority attribute-based encryption construction of Datta, Komargodski, and Waters (Journal of Cryptology, 2023). The attack…

  85. VertMark: A Unified Training-Free Robust Watermarking Framework for Vertical Domain Pre-trained Language Models
    USarXiv cs.CR (Security)

    arXiv:2605.02557v2 Announce Type: replace Abstract: With the application of vertical domain pre-trained language models (VPLMs) in specialized fields such as medical, finance, and law, model parameters and inference capabilities have…

  86. Privacy Accounting for Empirical Denoisers
    USarXiv cs.CR (Security)

    arXiv:2610.27710v2 Announce Type: replace-cross Abstract: Diffusion models have emerged as the foundation of modern generative systems, yet their high memorization capacity raises privacy concerns. While differentially private (DP)…

  87. CALLIOPE: Private Insights into AI Use, Without Embeddings
    USarXiv cs.CR (Security)

    arXiv:2610.28797v1 Announce Type: cross Abstract: We introduce CALLIOPE, a top-down framework for discovering topic hierarchies in large corpora of unstructured data (e.g., LLM conversations), while supporting differential privacy (DP)…

  88. How Much Does the Harness Matter, and for Whom? A Multi-Model Study of Context in LLM-Driven Vulnerability Discovery
    USarXiv cs.CR (Security)

    arXiv:2610.28802v1 Announce Type: new Abstract: How much does an agent harness affect vulnerability discovery, and does its value depend on the model? We study 24 model-runner configurations using an open-source harness on a production…

  89. SweepMark: Query-Free and High-Fidelity Attacks on Robust Audio Watermarking
    USarXiv cs.CR (Security)

    arXiv:2609.34003v2 Announce Type: replace Abstract: Audio watermarking embeds imperceptible signals into speech to trace misuse in text-to-speech (TTS) synthesis. Existing removal attacks may retain watermark-related artifacts or degrade…

  90. LightSplit: Practical Privacy-Preserving Split Learning via Orthogonal Projections (Full Version)
    USarXiv cs.CR (Security)

    arXiv:2605.13265v2 Announce Type: cross Abstract: Split learning (SL) enables collaborative training by partitioning a neural network across clients and a central server. However, the cut-layer interface introduces a key challenge…

  91. CoSec: Benchmarking Agent Security in Communities
    USarXiv cs.CR (Security)

    arXiv:2609.34790v4 Announce Type: replace Abstract: LLM agents operate in persistent collaborative environments involving multiple users, communities, memories, files, and tools. Community boundaries may remain fixed or evolve with changes…

  92. Remote Rowhammer Attack using Adversarial Observations on Federated Learning Clients
    USarXiv cs.CR (Security)

    arXiv:2505.06335v3 Announce Type: replace-cross Abstract: Federated Learning (FL) has the potential for simultaneous global learning amongst a large number of parallel agents, enabling emerging AI systems to be trained across…

  93. The Binary Tree Mechanism is Optimal for Differentially Private Continual Counting
    USarXiv cs.CR (Security)

    arXiv:2607.00876v4 Announce Type: replace-cross Abstract: Private continual counting is a fundamental problem in differential privacy: given a binary stream of length $n$, where each $1$ corresponds to the contribution of one individual…

  94. PatchRisk: Forecasting Future Vulnerability Exposure in Open-Source Dependency Networks
    USarXiv cs.CR (Security)

    arXiv:2609.13719v2 Announce Type: replace Abstract: Open-source software ecosystems are web-scale dependency networks. A downstream package can become exposed to security risk not because its own source code changes, but because one of its…

  95. SUDP: Secret-Use Delegation Protocol for Agentic Systems
    USarXiv cs.CR (Security)

    arXiv:2604.24920v4 Announce Type: replace Abstract: Agentic systems now act with user secrets for APIs, messaging platforms, and cloud services. Today's agent runtimes typically implement authorization by exposure: enabling action means…

  96. AgentPolicyForge: From Executable Environments to Policy Benchmarks and Adaptive Guards
    USarXiv cs.CR (Security)

    arXiv:2610.28989v1 Announce Type: cross Abstract: Customized agent deployments define policies over tools, resources, and execution conditions. Providing these policies in the task agent's prompt does not reliably prevent violations…

  97. Act on Your Behalf, Beyond Your Authorization: Benchmarking LLM Agent Authorization Alignment
    USarXiv cs.CR (Security)

    arXiv:2610.27548v2 Announce Type: replace-cross Abstract: When an LLM agent acts on behalf of a user, it is expected to act within the authorization scope the user grants. Existing agent evaluations largely measure task completion or…

  98. Exploring Jailbreak Vulnerability Across Depth-Based Dynamic Inference in Large Language Models
    USarXiv cs.CR (Security)

    arXiv:2610.15207v2 Announce Type: replace-cross Abstract: Large Language Models (LLMs) have been shown to be computationally expensive and vulnerable to jailbreak attacks, in which adversarial prompts bypass safety alignment and induce…

  99. Linear Self-Symmetries of Inverse-Based S-boxes: Generic Rigidity and Applications
    USarXiv cs.CR (Security)

    arXiv:2610.29837v1 Announce Type: new Abstract: Finite-field inversion is a basic nonlinear building block in the design of S-boxes for symmetric cryptography. In inverse-based S-boxes, finite-field inversion is often combined with linear…

  100. MASAR: Multi-stage Attack Surface Analysis and Reasoning Framework for Telecom Networks
    USarXiv cs.CR (Security)

    arXiv:2610.29343v1 Announce Type: new Abstract: The increasing complexity of modern telecommunications networks introduces security challenges that require systematic threat analysis. However, a gap remains between architectural threat…

  101. Regular Syndrome Decoding Is Easier Than Previously Estimated
    USarXiv cs.CR (Security)

    arXiv:2610.29175v1 Announce Type: new Abstract: The Regular Syndrome Decoding (RSD) problem is a structured variant of classical Syndrome Decoding and underlies a growing number of efficient cryptographic constructions, including zero…

  102. ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd)
    USSANS ISC
  103. GridCraft is the open-source Excel clone for Linux I’ve been waiting for
    USZDNet Security

    If spreadsheets are your thing, but Microsoft Office isn’t, you might want to give the open-source clone, GridCraft, a try.

  104. Not impressed with Google Maps? Make Waze your default on Pixel – here’s how
    USZDNet Security

    If you’re tired of Google Maps failing to get you where you need to go, set Waze as the default on your Pixel. I’ve finally figured out how.

  105. Behind Japan’s Warnings of a Cyber Crisis
    USRecorded Future

    Reporting on cyberattacks against Japanese entities rose 48% between Q2 and Q3 2026, encompassing ransomware, exploitation of vulnerabilities, credential leaks, and service disruptions. Significant incidents exposed millions of customer…