DecoyTrace is presented, a proactive cyber deception-based defense for strictly serverless DFL environments that deploys a mobile DecoyNode that generates decoy challenges using chaotic maps, disseminates a dual model based on neighbor trust, and evaluates them using three-state semantic metrics.
Pedro Beltrán-López, Enrique Tomás Martínez Beltrán, Pantaleone Nespoli et al.· 0 citations
The findings show that combining GANs with adversarial debiasing can lead to more robust and effective DDoS mitigation, supporting the further development of machine learning based cyber security.
Aadith Sukumar, Isha Singh, Devershika Mohane et al.· 0 citations
This paper studies the role played by the adversarial data's input modality, and identifies a systematic asymmetry: multimodal LLMs are more likely to follow adversarial instruction when they appear as text than when the same instruction is delivered through a non-textual channel.
Jie Zhang, Andrei Baroian, J. V. van Rijn et al.· 0 citations
PrivacySkills is introduced, a controlled framework for evaluating how agents choose among acquisition pathways that provide the same task-relevant value: consulting publicly available personal information, accessing confidential sources, or interacting with the user.
Lucas Biechy, Cédric Eichler, H. H. Arcolezi et al.· 0 citations
Reach audiences
Advertise in front of researchers, engineers, and readers.
In every base and instruction-tuned pair the authors test, instruction tuning strengthens the model's preference for reserved markers, and the gap persists on that channel.
Yan-Yan Zhan, Yun-Ze Song, Meng-Kai Hou et al.· 0 citations
Results show that skill-bundled images can induce unauthorized actions even as agents complete legitimate tasks, so task success alone does not establish safe skill use.
Ling-Qi Jiang, Jia-Luo Chen, Jia-Nan Ma et al.· 0 citations
This work presents RedHerring, which inserts certifiably safe decoys that divert verification effort from real vulnerabilities, and shows that its effectiveness does not depend on decoy secrecy.
Kai-Kai Zhang, Zi-Han Zhang, Yu-Chong Xie et al.· 0 citations
This work proposes a novel defense that recovers necessary information needed to distinguish valid from invalid cache hits from the raw text of the cache key, and proves that Deletion Gain stays positive when a deletion leaves text close enough to the rewrite, and searches for such deletions with a sliding window.
Zi-Han Zhang, Shuang-Jie Yao, Ze-Sen Liu et al.· 0 citations
This work introduces SINGED (Source Integrity and the Nonidentifiability Gap in Execution Decisions for LLM Agents), a controlled benchmark covering five primary and two held-out task families and exposes a rank-, evidence-, and choice-sensitive outcome-to-execution gap.
XiaoYu Xu, Zi Liang, Min-Xin Du et al.· 0 citations
A taxonomy of agentic commerce fraud that separates five observation levels (agent reasoning, wire, settlement rail, counterparty, principal) from the request-level and history-level evidence available at each, and records which levels can observe which attacks.
Tool-augmented data agents rely on tool outputs for analytical decisions. Yet successful execution can return plausible but incorrect evidence, requiring agents to decide whether to trust or verify it. Understanding this failure requires examining both the evidence obtained through checking and the answer ultimately ad...
It is found that the quality of AIACCs varies significantly and that they currently can only serve as early-stage orientation tools, and design principles for the implementation of more reliable compliance-support tools are offered.
Zhen-Yuan Tao, Alize Kahraman, Shi-Dong Pan et al.· 0 citations
Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.
Critical flaws, compromised release channels and agentic AI threats landed within days of each other in mid-October 2026. Why “Black October” may say more about how well we now find weaknesses than about the attacks themselves. The post Black October? The Week AI Changed the Cybersecurity Conversation appeared first on GPT-Lab.