Skip to content

Category

cybersecurity

1,407 papers

#machine learning Preprint Oct 2026

Federated Differentially Private Optimization via Low-Rank Preconditioning

A federated DP-PCA framework is proposed that achieves linear communication cost while providing central DP guarantees under secure aggregation and gives error bounds for this covariance estimate and for the resulting low-communication preconditioned DP gradient descent.

Antti Koskela, Tejas D. Kulkarni, Elias Raninen · 0 citations
#artificial intelligence Preprint Oct 2026

Automated screening of privacy risks in medical AI

A lightweight screening tool that uses four small models to identify patients with high risk of exposure before production-model training and assess if flagged patients could be protected without removing their data is developed.

Konstantinos Vrettos, E. Tzanis, H. Kondylakis et al. · 0 citations
#artificial intelligence Preprint Oct 2026

Secure Agentic Coding through Counterexample-Grounded Feedback

falcon{}, a counterexample-grounded verification framework that separates attack exploration from behavioral verification and connects them through execution traces of the program under test, is introduced, suggesting that execution-grounded feedback can mitigate reward overoptimization while preserving useful guidance...

Tue Le, A. N. Hoang, Gabriel Sasseville et al. · 0 citations
#artificial intelligence Preprint Oct 2026

A Digital Twin to Improve Cyber-Social Impact

A novel framework that integrates Digital Twin technology with a Cyber-Social Security model to simulate, analyze, and quantify cyber threats in critical infrastructures and demonstrates the framework's ability to model and score cyber-social impact.

Vita Santa Barletta, Danilo Caivano, Gabriel Cellammare et al. · 0 citations
#artificial intelligence Preprint Oct 2026

After the Attacker Leaves: Benchmarking Carryover Attacks on LLM Agents

Modern LLM agents persist state across sessions via two channels: long-lived memory files silently prepended to the system prompt, and scheduled tasks waking the agent without user input. A one-time indirect prompt injection committed to either channel can re-fire across sessions long after the attacker leaves, threats...

Zhi-Yu Xu, Xu-Kai Wang, Zhiyuan Huang et al. · 0 citations
#artificial intelligence Preprint Open access Oct 2026

MAS-Guard: Unified Guardrails from Individual Agents to Multi-Agent LLM Systems

Agentic AI extends large language models (LLMs) from generating responses to planning and executing complex workflows, substantially expanding their utility while exposing applications to unsafe actions, information leakage, and adversarial manipulation. Multi-agent systems further expand these capabilities through spe...

Mohammad Kachuee, Phu Mon Htut, Sheng Li et al. · 0 citations
#artificial intelligence Preprint Oct 2026

Context-Aware Prompt Injection Detection via Small Language Models in RAG Pipelines: nokast-secureRAG

Nokast-secureRAG is presented, a roughly 0.5B-parameter small language model that acts as a semantic firewall between retrieval and generation, and jointly evaluates the user query and retrieved context, classifying the pair as safe, suspicious, or malicious.

Abhishek Rai · 0 citations
#artificial intelligence Preprint Oct 2026

ClawMMU: Protection-Coherent Virtual Memory for Stateful LLM Agents

AI agents keep long-term memory, much of which comes from web pages and tool results. Agent harnesses, the software that runs the model, do not record who may act on this memory, so an instruction hidden in a fetched page can be treated as the user's own instruction. We propose ClawMMU, a protection layer that labels e...

Jin-Hao Hu, Bardia Mohammadi, Mofasshara Rafique et al. · 0 citations
#artificial intelligence Preprint Oct 2026

A Unified Attack Framework against Statistical Generative Watermarks for Large Language Models

Watermarking has emerged as a key tool for identifying text generated by large language models (LLMs), with current schemes embedding statistical signals into the generation process to enable later detection. In this work, we identify a shared weakness across a broad class of popular LLM watermarking methods, including...

Romina Omidi, Nima Naderloui, Yuan Hong et al. · 0 citations
#artificial intelligence Review Oct 2026

Local Allow, Global Deny: Why Per-Action Authorization Does Not Compose in LLM Agents

The central result is an impossibility: relational purpose violations form a 2-safety hyperproperty with no per-trace locus of blame, so a per-action monitor that never raises a false alarm detects none of them, independent of the underlying model or decision procedure.

Anmol Pandey, A. Jain, Liang-Wei Chen et al. · 0 citations

From tech blogs

See all →
Microsoft Research Blog Nov 3, 2026

Learn the rules: The hacker mindset

Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.

GPT-Lab Oct 30, 2026

Black October? The Week AI Changed the Cybersecurity Conversation

Critical flaws, compromised release channels and agentic AI threats landed within days of each other in mid-October 2026. Why “Black October” may say more about how well we now find weaknesses than about the attacks themselves. The post Black October? The Week AI Changed the Cybersecurity Conversation appeared first on GPT-Lab.

Google DeepMind Blog Jul 17, 2026

Introducing Gemini 3.5 Flash Cyber

Google introduces Gemini 3.5 Flash Cyber, a lightweight cybersecurity model to find and patch vulnerabilities.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.