A framework for evaluating vulnerability reports via probes, executable checks of security properties, which surfaced 23 previously unreported vulnerabilities, the majority of which have been confirmed by maintainers.
Andy K. Zhang, A. Huang, Joey Ji et al.· 0 citations
Root cause analysis at a remote site is slow: evidence is scattered across pod logs, Kubernetes events and cluster-level objects, and many operators cannot send production logs to a hosted model at all. On-premise inference removes the second constraint but raises a question live-cluster benchmarks have not addressed:...
Rohit Patel, S. K. Mohanty, Jeenal Chaudhary· 0 citations
This work introduces BoundStyle, a potent semantic attack operating in StyleGAN's rich latent space to maximize misclassification rates and develops StyleAT, an efficient adversarial training scheme that incorporates low-budget attack variants yet defends against stronger and unseen semantic attacks.
Ben Shapira, R. Cohen, Shang-Tse Chen et al.· 0 citations
Internet of Things (IoT) systems are increasingly deployed in smart homes, transportation, energy systems, and critical infrastructure. This broad connectivity improves service intelligence, but also enlarges the attack surface of IoT networks. Machine Learning (ML)-based Intrusion Detection Systems (IDSs) are widely u...
Li Yang· 0 citations
Reach audiences
Advertise in front of researchers, engineers, and readers.
The explosive prompt is introduced, a conditional payload that stays dormant until an attacker-chosen trigger is met, in effect a training-free, inference-time backdoor planted in a single piece of retrieved content.
Justin Szczepaniak, Elad Feldman, Naum Viner et al.· 0 citations
This work proposes a novel approach under the more realistic black-box threat model that utilizes concepts from reinforcement learning to optimize perturbations with a non-differentiable target model, and shows the success of reinforcement learning inspired black-box adversarial attack (RIBA) in generating adversarial...
F. Krone, Elena Hoemann, Sven Hallerbach· 0 citations
PAGE (Partition-Aware Gated Eviction), a wrapper that runs any SnapKV-style evictor when the drop is large and keeps the full cache when it is small, with no training, labels, or fine-tuning, is built.
Defenses against jailbreak attacks on Large Language Models (LLMs) operate at different pipeline stages, such as input modification or output guard, but it remains unclear which defenses to deploy at each stage and how to combine them. Prior empirical studies, fragmented by inconsistent attack-success-rate definitions...
Conformal Privacy Auditing is introduced, a distribution-free calibration framework that provides a statistical certificate of re-identification risk for each released document against LLM-empowered adversaries and enables audits of open-source models and proprietary API models in a unified framework.
Shuo Huang, G. Haffari, Xing-Liang Yuan et al.· Proceedings of the 2026 Conf...· 0 citations
A lower bound of $\Omega(\log^{3/2} n)$ under approximate DP with sufficiently small fixed fixed $\delta>0$ and a lower bound of $\Omega(\log^2 n)$ under pure DP are proved, establishing the optimality of the binary tree mechanism in both settings.
Konstantina Bairaktari, Markus Engelund Dahl, Kasper Green Larsen· 5 citations· ⚡2
Transformer-based models are highly susceptible to backdoor attacks via supervised fine-tuning (SFT). To red-team existing data-poisoning defenses, prior work has increasingly focused on stylized triggers, synthetic artifacts, and token-level perturbations designed to evade detection. However, this trend has shifted th...
This work evaluates Overthink on proprietary and open-source reasoning models across the FreshQA, SQuAD, and MuSR datasets, and shows that newer generations of RLMs, while showing a drastic increase in per-token cost, also exhibit up to a 2.3x increase in reasoning tokens, leaving them more vulnerable to Overthink atta...
Abhinav Kumar, Jaechul Roh, Ali Naseh et al.· arXiv.org· 92 citations· ⚡9
Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.
Critical flaws, compromised release channels and agentic AI threats landed within days of each other in mid-October 2026. Why “Black October” may say more about how well we now find weaknesses than about the attacks themselves. The post Black October? The Week AI Changed the Cybersecurity Conversation appeared first on GPT-Lab.