It is established that adversarial robustness in ICS anomaly detection is a specific instantiation of system resilience, and a compositional resilience bound for heterogeneous ICS detection networks is derived, showing that the binding constraint on system-level resilience is the coupling-adjusted absorption capacity o...
Branka Stojanović, Andreas Flatscher, Michael Somma· 0 citations
The findings reveal a confidentiality risk in LLM agents: protecting explicit artifacts alone is insufficient, as observable execution behavior can leak the procedural knowledge required to reconstruct proprietary task-solving capabilities in low-capability and attacker-controlled agents.
Xiaoting Lyu, Yu-Hong Wu, Yu-Fei Han et al.· 2 citations
This work introduces CIPHER (Cross-record Inference over Privacy-Hardened Evidence Records), a benchmark of expert-validated questions from consumer-finance, clinical, and law-enforcement records that evaluate retrieval, prompting, table-specialist, and hybrid symbolic-neural systems under native redaction and surrogat...
Suparno Roy Chowdhury, M. Choudhury, Dhruv Madhwal et al.· 0 citations
AgentDrift is presented, a benchmark of 12,536 synthetic tool-call trajectories over five agent domains in which every one of the 71,024 steps carries one of four labels: benign, injection point, hijacked, or failed injection; it is shown that the LLM judge was itself fooled by the hard negatives.
Asif Pinjari, Mithun Paul Saint-Germain· 2 citations
Reach audiences
Advertise in front of researchers, engineers, and readers.
Overall, KV-cache timing reliability depends strongly on the load regime and serving stack, and measurements on quiet systems can overestimate operational attack reliability.
This paper presents the Whitelisting Autonomous Policy Producer (WAPP), a framework that combines trust filtering, deterministic rule synthesis, confidence scoring, and validation before enforcement that blocks confirmed CRS bypasses on constrained fields, while free text inputs remain a precision challenge that requir...
H. Osama, Zeyad Ahmed, M. Amgad et al.· 0 citations
It is argued that anomaly detection for agentic AI must reason at the workflow level, where global execution structure exposes signals that local checks cannot see, and presents Skynet, a principled workflow-level anomaly detection framework that turns observed multi-agent execution into directed workflow graphs and sc...
Chao-Yu Zhang, He-Xuan Yu, Heng Jin et al.· 0 citations
AURA-Eval, a framework combining controlled augmentation with granular diagnosis of behavior in tool-use trajectories, is introduced, showing that LLM agents engage in unsafe behavior more often when no safe fulfillment path exists.
Ruoxi Shang, Christina-Maria Androna, Orfeas Menis-Mastromichalakis et al.· 0 citations
ToSS (Token Oriented Repartitioning and Strategic Selection), a reliable authentication method using adaptive dual watermarking that divides vocabulary tokens into black and white sublists, enabling precise bit-level embedding of traceability information.
Zhongli Fang, Yi-Ran Chen, Ling-Yun Zhang et al.· 0 citations
We present a new attack that reconstructs the text generated by locally hosted LLMs by observing CPU cache activity during detokenization. Unlike prior attacks that rely on deployment-specific assumptions, such as shared data memory, CPU offloading, or Mixture-of-Experts architectures, our approach targets the detokeni...
Roy Weiss, B. Konstantinov, Eitam Sheetrit et al.· 0 citations
This paper demonstrates that it is possible to precisely detect malware by providing the neural network model with information about the TTPs used by any given sample, and teaching the neural network to detect not just the malicious activity as a whole, but which specific TTPs are maliciously used.
Results demonstrate that semantic intent exposure, consensus-based risk assessment, and relative-risk-aware routing provide an effective and selective approach to black-box jailbreak defense.
Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.
Critical flaws, compromised release channels and agentic AI threats landed within days of each other in mid-October 2026. Why “Black October” may say more about how well we now find weaknesses than about the attacks themselves. The post Black October? The Week AI Changed the Cybersecurity Conversation appeared first on GPT-Lab.
