🕵️ RESEARCH & DEEP DIVES
ShortPixel Image Optimizer through 6.5.5 - Authenticated (Author+) PHP Object Inje... — CVE ThreatInt
Biggopti Library (Various Versions) - Cross-Site Scripting via display_id fro... — CVE ThreatInt
RT Mega Menu through 1.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripti... — CVE ThreatInt
RT Mega Menu through 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Script... — CVE ThreatInt
HGiga|OAKlouds - Arbitrary File ReadThe OAKlouds developed by HGiga has an Ar... — CVE ThreatInt
HGiga|OAKlouds - Insecure DeserializationThe OAKlouds developed by HGiga has ... — CVE ThreatInt
marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection... — CVE ThreatInt
EvoSherlock: Towards Agentic Lifelong Evolution for Unseen Long-Tailed Security-Critical Events in Videos — arXiv cs.CR
PAPC: Platform Mediation for Privacy-Propagation Externalities in AI-Mediated Workflows — arXiv cs.CR
Robust Conformal Intrusion Detection via Traffic-Aware Calibration and Attack-Orbit Invariance — arXiv cs.CR
AUDITPLAN: Commit, Then Answer for Auditable Safety Alignment — arXiv cs.CR
Scaling Zero Knowledge UNSAT Verification via Normalized Chaining — arXiv cs.CR
Beyond Private Training: The New Landscape of AI Privacy — arXiv cs.CR
Red-Teaming Auto Mode: Improving Blocking Classifiers Against Malign Coding Agents — arXiv cs.CR
SoK: Trading Agents or Market Crashers? Dissecting Robustness and Security Failures in Academic Financial LLM Trading Schemes — arXiv cs.CR
Reachability, Not Observation: Containing Systems Whose Wiring Changes — arXiv cs.CR
ALIBI: Adversarial Legitimacy Injection in Binary Input against LLM Malware Analyzers — arXiv cs.CR
Sybil-TraceGuard: Traceability-enhanced Sybil Guardian for Connected and Autonomous Vehicles Using Dynamic Semi-supervised GNN — arXiv cs.CR
Trust, but Validate the Instrument: Auditing AI-Generated RTL Verification Plans on Authored Security-Regression Proxies — arXiv cs.CR
ClashBench: Conflicts Leading Agents to Seize and Harm — arXiv cs.CR
Hopper: Bounded-Memory Collaborative Debiasing for Byzantine-Tolerant Peer Sampling — arXiv cs.CR
Delphi Scanner: efficient and interpretable static malware detection via API sequence modeling — arXiv cs.CR
Mind the Gap: How SBOM Specification Ambiguities Lead to Divergent Software Bills of Materials. An Empirical Tool Study — arXiv cs.CR
On the Leakage of Massey Secret Sharing Schemes under Linear Computations — arXiv cs.CR
JANUS: Denial-of-Service Attack Against Beam Hopping in LEO Satellite Networks — arXiv cs.CR
XIR: A Framework for Interoperability across Cross-Chain Protocols Based on a Verifiable Intermediate Representation — arXiv cs.CR
Competition, Collusion, and Corruption: The Spectrum of MEV Attacks on DAG-Based BFT Consensus Protocols — arXiv cs.CR
Researchers Use Claude Opus 5 to Hack OpenAI Forum and Reach Internal Repositories — Cyber Security News
Quantum Computers Are Not a Threat to 128-bit Symmetric Keys — r/netsec
Hacking OpenAI — r/netsec