Skip to content

Category

cybersecurity

1,407 papers

#machine learning Preprint Sep 2026

SSP-Bench: A Hybrid Data Generation Framework for Safety, Security, and Privacy Evaluation

SSP-Bench reveals systematic failures of static evaluation, including near-zero correlation in safety rankings due to construct mixing, strong safety--over-refusal coupling, and hidden within-family regressions, and shows that static benchmarks can misrepresent model behavior, motivating dynamic, deployment-relevant ev...

Fatih Deniz, Yazan Boshmaf, Issa M. Khalil · 0 citations

FinRED: An Expert-Guided Benchmark Generation and Evaluation Framework for Financial LLM Red-Teaming

Rigorous expert validation confirms seed plausibility and realism for meaningful LLM safety evaluation, and provides an expert-validated, finance-specific rubric that goes beyond disclaimer checks, aligns more closely with human experts than static one-size-fits-all rubrics, and reduces critical false negatives from 28...

Chae-mi Kim, Daeyoung Park, Junghwan Kim et al. · 1 citation
#artificial intelligence Preprint Open access Sep 2026

When Good Verifiers Go Bad: Silent Negative Transfer in Verifier-Guided VLM Training

Verifier reliability is not portable across tasks. A verifier-guided self-DPO pipeline with genuine held-out gains on MathVista (+9.6 points on self-training data, +8.0 held out) can be harmful on MMMU. The failure is invisible from the target-task self-training signal: over six learner-verifier configurations, MMMU se...

Jianzhe Lin · 0 citations
#artificial intelligence Preprint May 2026

LLM Ghostbusters: Surgical Package Hallucination Suppression via Adaptive Unlearning

Adaptive Unlearning is presented, a post-deployment framework that surgically suppresses package hallucinations while preserving general model utility and relies entirely on model-generated data and requires no human annotation, representing a post-deployment hallucination mitigation framework.

Joseph Spracklen, Pedram Aghazadeh, F. Koushanfar et al. · 0 citations
#artificial intelligence Review Apr 2026

A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle

This analysis indicates that robust Long-Term Memory security cannot be retrofitted at retrieval or execution time alone, but must be anchored in storage-time provenance, versioning, and policy-aware retention from the outset.

Zehao Lin, Xixuan Hao, Renyu Fu et al. · 20 citations

Real Money, Fake Models: Deceptive Model Claims in Shadow APIs

This paper presents the first systematic audit between official LLM APIs and corresponding shadow APIs, and uncovers widespread behavioral inconsistency and fingerprint-based evidence consistent with deceptive model claims in a subset of audited endpoints.

Ya-Ge Zhang, Yu-Kun Jiang, Zeyuan Chen et al. · 15 citations · ⚡4
#artificial intelligence Preprint Open access Sep 2026

Data Provenance Auditing of Fine-Tuned Large Language Models with a Text-Preserving Technique

We propose a system for marking sensitive or copyrighted texts to detect their use in fine-tuning large language models under black-box access with statistical guarantees. Our method builds digital ``marks'' using invisible Unicode characters organized into (``cue'', ``reply'') pairs. During an audit, prompts containin...

Yanming Li (PETSCRAFT), C\'edric Eichler (PETSCRAFT), Nicolas Anciaux (PETSCRAFT) et al. · 0 citations
#artificial intelligence Open access Feb 2025

FedNIA: Noise-Induced Activation Analysis for Mitigating Data Poisoning in Federated Learning

FedNIA injects random noise inputs to analyze the layerwise activation patterns in client models leveraging an autoencoder that detects abnormal behaviors indicative of data poisoning and can defend against diverse attack types, including sample poisoning, label flipping, and backdoors.

Ehsan Hallaji, R. Razavi-Far, Mehrdad Saif · 2 citations
#artificial intelligence Preprint Sep 2026

A2M: Trace-Optimized Agent Hijacking in the MCP Ecosystem

A2M (Attraction-to-Manipulation), a two-stage black-box framework for hijacking MCP agents, is introduced, a two-stage black-box framework for hijacking MCP agents that motivate stronger tool vetting and runtime isolation in MCP ecosystems.

Lai-Zhen Li, Xuan Wang, Pei-Cheng Zhao et al. · 0 citations
#artificial intelligence Preprint Sep 2026

Metrics Failure in LLM-Based Code Vulnerability Repair: An Empirical Study and a Change-Aware Screen

It is argued that compile rate is a scientifically unreliable metric for single-function vulnerability repair, and this is supported with five controlled experiments over 203 vulnerable functions from Big-Vul, three open-source code LLMs (350M to 6.7B parameters), and three prompting strategies.

Om Nepal, Sushant Aryal, Oluseyi Olukola et al. · 0 citations
#artificial intelligence Preprint Sep 2026

Capable yet Parsimonious: Extracting and Characterizing Hidden Chain-of-Thought in Frontier Models

It is found that Astra exhibits token-efficient directed reasoning, selecting a correct trajectory earlier, while resolving elementary steps internally and externalizing only crucial reasoning, which provides a behavioral lens on frontier-model reasoning beyond benchmark scores.

Xiao-Yu Luo, Tao Ren, Wen-Rui Yu et al. · 2 citations

From tech blogs

See all →
Microsoft Research Blog Nov 3, 2026

Learn the rules: The hacker mindset

Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.

GPT-Lab Oct 30, 2026

Black October? The Week AI Changed the Cybersecurity Conversation

Critical flaws, compromised release channels and agentic AI threats landed within days of each other in mid-October 2026. Why “Black October” may say more about how well we now find weaknesses than about the attacks themselves. The post Black October? The Week AI Changed the Cybersecurity Conversation appeared first on GPT-Lab.

Google DeepMind Blog Jul 17, 2026

Introducing Gemini 3.5 Flash Cyber

Google introduces Gemini 3.5 Flash Cyber, a lightweight cybersecurity model to find and patch vulnerabilities.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.