SSP-Bench reveals systematic failures of static evaluation, including near-zero correlation in safety rankings due to construct mixing, strong safety--over-refusal coupling, and hidden within-family regressions, and shows that static benchmarks can misrepresent model behavior, motivating dynamic, deployment-relevant ev...
Fatih Deniz, Yazan Boshmaf, Issa M. Khalil· 0 citations
Rigorous expert validation confirms seed plausibility and realism for meaningful LLM safety evaluation, and provides an expert-validated, finance-specific rubric that goes beyond disclaimer checks, aligns more closely with human experts than static one-size-fits-all rubrics, and reduces critical false negatives from 28...
Chae-mi Kim, Daeyoung Park, Junghwan Kim et al.· arXiv.org· 1 citation
Verifier reliability is not portable across tasks. A verifier-guided self-DPO pipeline with genuine held-out gains on MathVista (+9.6 points on self-training data, +8.0 held out) can be harmful on MMMU. The failure is invisible from the target-task self-training signal: over six learner-verifier configurations, MMMU se...
Adaptive Unlearning is presented, a post-deployment framework that surgically suppresses package hallucinations while preserving general model utility and relies entirely on model-generated data and requires no human annotation, representing a post-deployment hallucination mitigation framework.
Joseph Spracklen, Pedram Aghazadeh, F. Koushanfar et al.· 0 citations
Reach audiences
Advertise in front of researchers, engineers, and readers.
This analysis indicates that robust Long-Term Memory security cannot be retrofitted at retrieval or execution time alone, but must be anchored in storage-time provenance, versioning, and policy-aware retention from the outset.
Zehao Lin, Xixuan Hao, Renyu Fu et al.· 20 citations
This paper presents the first systematic audit between official LLM APIs and corresponding shadow APIs, and uncovers widespread behavioral inconsistency and fingerprint-based evidence consistent with deceptive model claims in a subset of audited endpoints.
We propose a system for marking sensitive or copyrighted texts to detect their use in fine-tuning large language models under black-box access with statistical guarantees. Our method builds digital ``marks'' using invisible Unicode characters organized into (``cue'', ``reply'') pairs. During an audit, prompts containin...
Yanming Li (PETSCRAFT), C\'edric Eichler (PETSCRAFT), Nicolas Anciaux (PETSCRAFT) et al.· 0 citations
FedNIA injects random noise inputs to analyze the layerwise activation patterns in client models leveraging an autoencoder that detects abnormal behaviors indicative of data poisoning and can defend against diverse attack types, including sample poisoning, label flipping, and backdoors.
Ehsan Hallaji, R. Razavi-Far, Mehrdad Saif· IEEE Transactions on Knowled...· 2 citations
A2M (Attraction-to-Manipulation), a two-stage black-box framework for hijacking MCP agents, is introduced, a two-stage black-box framework for hijacking MCP agents that motivate stronger tool vetting and runtime isolation in MCP ecosystems.
Lai-Zhen Li, Xuan Wang, Pei-Cheng Zhao et al.· 0 citations
It is argued that compile rate is a scientifically unreliable metric for single-function vulnerability repair, and this is supported with five controlled experiments over 203 vulnerable functions from Big-Vul, three open-source code LLMs (350M to 6.7B parameters), and three prompting strategies.
Om Nepal, Sushant Aryal, Oluseyi Olukola et al.· 0 citations
A methodology to systematically analyze and dissect existing approaches to define and enforce policy found in the wild is proposed to define and enforce policy found in the wild in GenAI applications.
It is found that Astra exhibits token-efficient directed reasoning, selecting a correct trajectory earlier, while resolving elementary steps internally and externalizing only crucial reasoning, which provides a behavioral lens on frontier-model reasoning beyond benchmark scores.
Xiao-Yu Luo, Tao Ren, Wen-Rui Yu et al.· 2 citations
Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.
Critical flaws, compromised release channels and agentic AI threats landed within days of each other in mid-October 2026. Why “Black October” may say more about how well we now find weaknesses than about the attacks themselves. The post Black October? The Week AI Changed the Cybersecurity Conversation appeared first on GPT-Lab.