Skip to content

Category

cybersecurity

1,407 papers

#artificial intelligence Preprint Sep 2026

TriFleetRCA: On-Premise LLM Root Cause Analysis for Kubernetes

Root cause analysis at a remote site is slow: evidence is scattered across pod logs, Kubernetes events and cluster-level objects, and many operators cannot send production logs to a hosted model at all. On-premise inference removes the second constraint but raises a question live-cluster benchmarks have not addressed:...

Rohit Patel, S. K. Mohanty, Jeenal Chaudhary · 0 citations
#artificial intelligence Preprint Sep 2026

StyleAT: Defending Face Recognition Against Semantic Attacks

This work introduces BoundStyle, a potent semantic attack operating in StyleGAN's rich latent space to maximize misclassification rates and develops StyleAT, an efficient adversarial training scheme that incorporates low-budget attack variants yet defends against stronger and unseen semantic attacks.

Ben Shapira, R. Cohen, Shang-Tse Chen et al. · 0 citations
#machine learning Preprint Sep 2026

An LLM-Assisted AutoML Framework for Intrusion Detection in IoT Networks

Internet of Things (IoT) systems are increasingly deployed in smart homes, transportation, energy systems, and critical infrastructure. This broad connectivity improves service intelligence, but also enlarges the attack surface of IoT networks. Machine Learning (ML)-based Intrusion Detection Systems (IDSs) are widely u...

Li Yang · 0 citations
#machine learning Preprint Sep 2026

Reinforcement Learning Inspired Black-box Adversarial Attacks for Computer Vision

This work proposes a novel approach under the more realistic black-box threat model that utilizes concepts from reinforcement learning to optimize perturbations with a non-differentiable target model, and shows the success of reinforcement learning inspired black-box adversarial attack (RIBA) in generating adversarial...

F. Krone, Elena Hoemann, Sven Hallerbach · 0 citations
#machine learning Preprint Aug 2026

PAGE: Partition-Aware Gated KV-Cache Eviction

PAGE (Partition-Aware Gated Eviction), a wrapper that runs any SnapKV-style evictor when the drop is large and keeps the full cache when it is small, with no training, labels, or fine-tuning, is built.

Pankaj Kumar, Subhankar Mishra · 0 citations
#natural language process... Preprint Sep 2026

CASCADE Against Jailbreaks: Combination Across Stages with Controlled Attack-Defense Evaluation

Defenses against jailbreak attacks on Large Language Models (LLMs) operate at different pipeline stages, such as input modification or output guard, but it remains unclear which defenses to deploy at each stage and how to combine them. Prior empirical studies, fragmented by inconsistent attack-success-rate definitions...

Jia-Le Luo, Eric Han · 1 citation
#natural language process... Conference Open access Sep 2026

Conformal Privacy Auditing: Calibrated Re-identification Attacks with Statistical Guarantees

Conformal Privacy Auditing is introduced, a distribution-free calibration framework that provides a statistical certificate of re-identification risk for each released document against LLM-empowered adversaries and enables audits of open-source models and proprietary API models in a unified framework.

Shuo Huang, G. Haffari, Xing-Liang Yuan et al. · 0 citations
#machine learning Preprint Jul 2026

The Binary Tree Mechanism is Optimal for Differentially Private Continual Counting

A lower bound of $\Omega(\log^{3/2} n)$ under approximate DP with sufficiently small fixed fixed $\delta>0$ and a lower bound of $\Omega(\log^2 n)$ under pure DP are proved, establishing the optimality of the binary tree mechanism in both settings.

Konstantina Bairaktari, Markus Engelund Dahl, Kasper Green Larsen · 5 citations · ⚡2
#machine learning Preprint Open access Sep 2026

SteganoBackdoor: Evading Data-Poisoning Defenses via Steganographic Backdoors

Transformer-based models are highly susceptible to backdoor attacks via supervised fine-tuning (SFT). To red-team existing data-poisoning defenses, prior work has increasingly focused on stylized triggers, synthetic artifacts, and token-level perturbations designed to evade detection. However, this trend has shifted th...

Eric Xue, Ruiyi Zhang, Pengtao Xie · 0 citations

OverThink: Slowdown Attacks on Reasoning LLMs

This work evaluates Overthink on proprietary and open-source reasoning models across the FreshQA, SQuAD, and MuSR datasets, and shows that newer generations of RLMs, while showing a drastic increase in per-token cost, also exhibit up to a 2.3x increase in reasoning tokens, leaving them more vulnerable to Overthink atta...

Abhinav Kumar, Jaechul Roh, Ali Naseh et al. · 92 citations · ⚡9

From tech blogs

See all →
Microsoft Research Blog Nov 3, 2026

Learn the rules: The hacker mindset

Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.

GPT-Lab Oct 30, 2026

Black October? The Week AI Changed the Cybersecurity Conversation

Critical flaws, compromised release channels and agentic AI threats landed within days of each other in mid-October 2026. Why “Black October” may say more about how well we now find weaknesses than about the attacks themselves. The post Black October? The Week AI Changed the Cybersecurity Conversation appeared first on GPT-Lab.

Google DeepMind Blog Jul 17, 2026

Introducing Gemini 3.5 Flash Cyber

Google introduces Gemini 3.5 Flash Cyber, a lightweight cybersecurity model to find and patch vulnerabilities.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.