Skip to content

Category

cybersecurity

1,407 papers

#artificial intelligence Preprint Open access Oct 2026

What the Model Cannot See: Covert and Provable Text Invisibility in LLMs

Text wrapped in a trigger can be made behaviorally invisible to a language model: omitted from summaries and quotations, ignored in question answering, and left unflagged by downstream filtering. We study this selective blindness as a dual-use information-flow primitive, a supply-chain backdoor, and a white-box auditin...

Mark Russinovich · 0 citations
#artificial intelligence Preprint Oct 2026

SkillMarker: A KGW-Based Watermarking Method for Agent Skill Ownership Verification

Agent skills encode operational procedures and domain expertise as reusable knowledge assets, yet their distribution in plaintext exposes them to unauthorized copying and leakage. However, practical mechanisms for skill ownership verification and leakage tracing remain underdeveloped. Watermark embedding before distrib...

Alan Tang, Li-Feng Wang, Gang Wu et al. · 0 citations
#artificial intelligence Preprint Open access Oct 2026

Security in LLM-Assisted Coding: A Systematic Literature Review

Large Language Models accelerate software development but introduce severe security vulnerabilities. This systematic review investigates security risks in automated coding, benchmark limitations, and the role of human developers. Findings indicate that models frequently generate insecure code and faulty patches due to...

Liang Yuan, Maryam Khanian Najafabadi, Mashud Rana et al. · 0 citations
#artificial intelligence Preprint Open access Oct 2026

Accuracy and Uncertainty in Machine Deception Detection (Research White Paper)

A deception detector is only as useful as the trust its alarms deserve. Like a polygraph, detectors that read a language model's internal activations can catch deceptive responses that look honest. Yet current detectors depend on which layers they read, weaken on broader tests, and do not state how certain their alarms...

Heng-Sheng Chang · 0 citations
#artificial intelligence Preprint Oct 2026

Exploring Jailbreak Vulnerability Across Depth-Based Dynamic Inference in Large Language Models

This paper makes the following key observations: Shallow exits are consistently more robust to jailbreak attacks than deeper ones; Exit depth affects how easily the adversarial suffix can be optimized, with deeper exits reaching lower attack loss; and adversarial suffixes affect utility uniformly across exit depths.

Lass Najmuldeen, Seyedhamidreza Mousavi · 0 citations
#artificial intelligence Preprint Oct 2026

GAMW: Generation-Aware Mel-Domain Watermarking for TTS Traceability

GAMW is proposed, a watermark injection framework integrated into the TTS generation process that improves decoding accuracy over the strongest baseline by 9.2 and 23.5 percentage points under individual and compound perturbations, respectively, while maintaining competitive speech quality.

Yi-Hang Zhang, Wei-Cai Yan, Qi-Fei Zhang et al. · 0 citations
#artificial intelligence Preprint Oct 2026

Last Secure Code Benchmark: Is the Code You Vibe Secure?

AI coding agents now write much of the code that ships, yet whether that code is secure remains unclear. We introduce the Last Secure Code Benchmark, a comprehensive evaluation of secure code generation by coding agents. Built from 150 real vulnerabilities, its 450 tasks span seven widely used languages (Java, C, C++,...

Tian-Yi Wu, Chao Ge, Peng Chen et al. · 0 citations
#artificial intelligence Preprint Oct 2026

Towards Merging-conditional Backdoor Unalignment against Large Language Models

Model merging has become widely adopted for enhancing the task-specific performance of Large Language Models (LLMs) without additional training. While the specialized model from third-party platforms may undergo safety audits (e.g., backdoor detection), we reveal a novel and critical threat: One-sided Merging-Condition...

Yu-Kun Chen, Yi-Dou Chen, Yi-Ming Li et al. · 0 citations
#artificial intelligence Preprint Open access Oct 2026

Limitations on Autoregressive Token Generation via Sequential Sampling

We study autoregressive token generation through the notion of sequential samplers: A circuit that samples the next symbol only given the previous ones and possibly a small amount of state. We show that (1) a sequential sampler with $k$ bits of state can be simulated by a stateless one at a roughly $O(2^{k})$ size over...

Gal Arnon, Andrej Bogdanov, Paul Lou et al. · 0 citations
#artificial intelligence Preprint Open access Oct 2026

What Counts as the Same Task? Executable Contracts for Robustness Evaluation of Tool-Using Agents

Robustness tests for tool-using agents often change the agent's environment, for example by hiding a hostile note in an invoice, and then judge the agent by what it does. The result tells us about the original task only if the changed test case is still a valid test of that task. Many evaluations decide this with weak...

Shaikh Akib Shahriyar, MD. Akil Raihan Iftee, Armon Barton et al. · 0 citations
#artificial intelligence Preprint Open access Oct 2026

Natural Code Transformation Confuses Agents in Vulnerability Analysis

Having demonstrated a strong potential for automating vulnerability discovery, AI agents can also be used to attack software systems at scale. Today's software systems need mechanisms to level the playing field by slowing down potential attacks, giving them time to patch vulnerabilities and strengthen software. Along t...

Jie Zhu, Ronik Bhaskar, Heather Zheng et al. · 0 citations
#artificial intelligence Preprint Oct 2026

SAGE: Efficient Protected Vision-Language Inference on Smart Glasses

Smart glasses are a promising platform for vision-language assistants, but private split inference remains expensive: protecting visual representations before transmission does not remove the cost of on-device vision encoding, wide protected tokens, or hardware-unaware execution. We present SAGE (Smart-glasses-Aware Gu...

Zhi-Min Li, Pan Wang, Jing-Xiang Chen et al. · 0 citations

From tech blogs

See all →
Microsoft Research Blog Nov 3, 2026

Learn the rules: The hacker mindset

Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.

GPT-Lab Oct 30, 2026

Black October? The Week AI Changed the Cybersecurity Conversation

Critical flaws, compromised release channels and agentic AI threats landed within days of each other in mid-October 2026. Why “Black October” may say more about how well we now find weaknesses than about the attacks themselves. The post Black October? The Week AI Changed the Cybersecurity Conversation appeared first on GPT-Lab.

Google DeepMind Blog Jul 17, 2026

Introducing Gemini 3.5 Flash Cyber

Google introduces Gemini 3.5 Flash Cyber, a lightweight cybersecurity model to find and patch vulnerabilities.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.