Skip to content

Category

cybersecurity

1,407 papers

#machine learning Preprint Oct 2026

Kairos: Transactional Security Enforcement at the System Boundary for LLM Agents

Large language model (LLM) agents are becoming an integral part of the software development lifecycle, and the capabilities granted to them allow an agent to act with the user's authority on any resource it can access. The reach that gives an agent its utility is equally available to an attacker who can steer it. Anyth...

Kristoffer Hempel, Nils Loose, Lorenzo Cavallaro et al. · 0 citations
#machine learning Preprint Open access Oct 2026

Privacy-Preserving GNN Inference on Financial Transaction Graphs via Homomorphic Encryption

Anti-money laundering (AML) in financial networks requires modeling transaction patterns that span multiple institutions. In practice, however, banks cannot share account and transaction features due to strict privacy regulations. We propose a privacy-preserving graph neural network (GNN) inference framework tailored t...

H. \c{C}a\u{g}r{\i} Bilgi, Kemal Mutluergil, Ceren Y{\i}ld{\i}r{\i}m et al. · 0 citations
#machine learning Preprint Open access Oct 2026

BrowseSafe++: Benchmarking Prompt Injection Detection Across Web Contexts, Languages, and Browser Views

Browser agents need to make decisions and execute actions on behalf of users while consuming untrusted webpages, creating opportunities for malicious instructions embedded in webpages to redirect legitimate tasks. We introduce BrowseSafe++, which extends BrowseSafe from 14,719 pages to 38,675 pairs of pages. Most of it...

Yuetian Chen, Kaiyuan Zhang, Yuntao Du et al. · 0 citations
#machine learning Preprint Open access Oct 2026

SSM-Attack: Learning Where to Perturb for Black-Box Face Privacy

Face recognition systems are deployed widely enough that a photograph shared online can be matched without its subject's consent. Generator-based protection methods rely on heavy pretrained backbones, multi-stage inference or visible semantic edits. We introduce SSM-Attack, a black-box face privacy framework built on S...

Tunahan Parlay{\i}c{\i}, Erchan Aptoula, Y\"ucel Sayg{\i}n · 0 citations
#machine learning Preprint Open access Oct 2026

Tight End-to-End Accounting for Differentially Private Synthetic Data

Differentially private (DP) pipelines often combine heterogeneous mechanisms, yet their guarantees are best analyzed using different notions of privacy (e.g., bounded range, zCDP, ADP). When composing them, we have to analyze the guarantees through a reduced common representation that loses accounting precision. This i...

Georgi Ganev, Vadym Doroshenko, Arun Ganesh et al. · 0 citations
#machine learning Review Oct 2026

Differential Privacy Protected Preference Alignment on Survey Derived Data

Preference alignment enables language models to better reflect human values, but the preference data contains sensitive information, especially when derived from surveys about political beliefs, social norms, religion, gender attitudes, and cultural values. This paper studies privacy-preserving alignment on questionnai...

Xiu-Yuan Qi, Yi Wang, Wen-Jie Wang · 0 citations
#machine learning Preprint Open access Oct 2026

Robust Detection of Directional Adversarial Attacks in Deep Neural Networks for Radiological Imaging

Deep learning is now central to radiology, helping detect changes on X-rays, CTs, and MRIs. However, these systems are highly vulnerable to adversarial attacks - small, crafted perturbations that mislead models while appearing unchanged to humans. Such errors risk missed cancers or false positives. Studies show over 90...

Tristan Malaty\'nski, Joanna Jaworek-Korjakowska · 0 citations
#machine learning Preprint Oct 2026

Poisoned into Action: Context Attacks on Typed Decision Workflows

Typed decision interfaces restrict models to predefined actions, yet schema-valid choices can still trigger policy-violating state changes. Evaluating context poisoning thus requires connecting model decisions to execution outcomes while accounting for legitimate automation retained by defenses. We introduce an executi...

Chen-Kai Wu, Xing Chang, Jun Yan · 0 citations
#machine learning Preprint Open access Oct 2026

From Acoustic Sensing to Physical Actions: A Comprehensive Survey of Security Risks in Edge-Deployed Audio LLM-Based Agents

Audio Large Language Models (Audio LLMs) are embedded in agents for smart homes, vehicles, wearables, and embodied systems, where acoustic inputs can propagate from perception into persistent state and consequential execution. This setting extends security analysis beyond model behavior to the system conditions that de...

Binhong Wang, Haidong Kang, Yanfeng Zhang et al. · 0 citations
#machine learning Preprint Oct 2026

SEEK: Agentic Knowledge Graph Retrieval for Secure Code Generation

SIEK is proposed, an agentic Graph RAG framework for secure code generation that constructs a security knowledge graph using the Common Weakness Enumeration (CWE) taxonomy as its structural backbone and injects it with curated real-world CVE vulnerability-fix instances.

Varun Gadey, Markus Tohn, Li-Chao Wu et al. · 0 citations
#machine learning Preprint Oct 2026

KedgeFlow: A Programmable Control Plane for Enterprise AI Agents

Enterprise AI agents can execute altered versions of approved actions, concurrently reuse the same permission, or retry operations whose responses were lost. These failures arise when approval and resource execution lack a shared contract. KedgeFlow specifies language-independent contracts for trusted controllers to au...

Jun-Fei He, De-Ying Yu · 0 citations
#machine learning Preprint Oct 2026

ByteMark: A Unified Byte-Level Watermark for Detection Across Language Models

As watermarking of LLM-generated text enters deployment, users increasingly need to check text whose source is unknown. Existing detectors read the watermark through a specific tokenizer or embedding pipeline, and even if all providers adopted the same watermarking method, differences in these representations would lea...

Xiao-Pu Wang, Run-Ze Li · 0 citations

From tech blogs

See all →
Microsoft Research Blog Nov 3, 2026

Learn the rules: The hacker mindset

Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.

GPT-Lab Oct 30, 2026

Black October? The Week AI Changed the Cybersecurity Conversation

Critical flaws, compromised release channels and agentic AI threats landed within days of each other in mid-October 2026. Why “Black October” may say more about how well we now find weaknesses than about the attacks themselves. The post Black October? The Week AI Changed the Cybersecurity Conversation appeared first on GPT-Lab.

Google DeepMind Blog Jul 17, 2026

Introducing Gemini 3.5 Flash Cyber

Google introduces Gemini 3.5 Flash Cyber, a lightweight cybersecurity model to find and patch vulnerabilities.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.