Dataspace connectors decide whether a transfer may occur, not what the transferred value contains, tolerable for contracted applications, not for LLM agents that compose tool calls and spawn sub-agents. Research on agents that generate governance artifacts evaluates output quality; who may authorize an artifact for use...
This work evaluates the Sola Security Brain, a security intelligence layer whose relational substrate is resolved offline and whose security logic is evaluated against it at query time, against two coding agents operating the same live AWS environment through a read-only CLI, Claude Code and OpenAI Codex, over 28 inves...
Leon Goldberg, Gal Engelberg, Eden Yavin et al.· 2 citations· ⚡1
ScopeBench is introduced, a benchmark of 30 dead-end agentic security tasks in which the stated objective is reachable only by violating the stated scope, and the frozen pilot benchmark, evaluation code, and all 2160 ATIF trajectories are released.
Shane Caldwell, Max Harley, Ads Dawson et al.· 1 citation
Priva-See is built, an LLM-based inference system for app-collected user data that reflects the best understanding of how real-life adtech companies would leverage machine learning to build user profiles, and suggests changes to how smartphone OSes should gather user consent for data access, to better inform users abou...
Sarah Radway, Zoe Robert, Matthew Soto et al.· 0 citations
Reach audiences
Advertise in front of researchers, engineers, and readers.
The results show that view mismatch is not only a geometric artifact, but can also introduce security, privacy, and reliability concerns for AI-integrated VST XR systems.
Semantic communication enhances transmission efficiency by conveying semantic information rather than raw input symbol sequences. Task-oriented semantic communication further aims to retain only task-specific information, thereby achieving greater bandwidth savings. However, these neural-network-based communication sys...
Xuesong Wang, Mo Li, Xingyan Shi et al.· 0 citations
Frontier commercial generative models face a growing threat from distillation, whereby a distiller harvests generated responses and trains a competing model at drastically lower cost. Existing defenses either modify the generation to degrade distillation performance, sacrificing response quality, or rely on behavioral...
Zibo Diao, Jingchu Gai, Xinyue Ai et al.· 0 citations
A dataset of real scam-call conversations collected by an active voice-agent honeypot, describing the collection system, record structure, and technical validation of the corpus's realism and label quality, including that the agent is recognized as non-human in only about 5% of engaged calls.
Ethan Traister, D. Ng, Si-Yu Zhang et al.· 2 citations· ⚡1
This work introduces TraceGuard, an adaptive rank-based filtering method that uses agreement among complementary feature rankings to identify suspicious examples and refines the selected set through shared patterns and adapts the removal threshold to each corpus without knowing the attack or poison rate.
Hao-Yang Li, Ya-Xin Xiao, L. Dai et al.· 0 citations
Machine learning-based Network Intrusion Detection Systems often report near-perfect performance on IoT benchmarks. However, whether these models learn generalizable attack behavior or exploit spurious dataset shortcuts- such as static testbed IP/MAC addresses and chronological recording artifacts-remains an important...
The signal of the adversarial self-compromise represents a detectable anomaly for exploitation for Byzantine client identification in the absence of target data exfiltration and is measured under ensemble aggregation under ensemble aggregation.
Asmah Muallem, Firdous Kausar, Sajid Hussain et al.· 0 citations
Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.
Critical flaws, compromised release channels and agentic AI threats landed within days of each other in mid-October 2026. Why “Black October” may say more about how well we now find weaknesses than about the attacks themselves. The post Black October? The Week AI Changed the Cybersecurity Conversation appeared first on GPT-Lab.