Roundups of newly published work from USENIX Security and WOOT, IEEE S&P, NDSS, ACM CCS, DEF CON, Black Hat, [un]prompted and elsewhere on the web. Each entry is a short summary with a link to the source. Preprints are covered separately in arXiv Briefs.
New papers on botnet remediation, satellite honeypots, Payment Channel Networks, censorship circumvention, hypervisor fuzzing, and LLM prompt leakage.
New approaches to API security rules, hardware fuzzing using a Golden Reference Model, and the privacy implications of WhatsApp’s contact discovery.
A batch of papers from NDSS.
A new fast pointer nullification defense against UAF, resolving decompilation distortions with FidelityGPT, FirmAgent applying fuzzing to assist LLM vulnerability discovery, and FirmCross analyzing C-Lua hybrid firmware.
New page cache attacks bypassing 2019 mitigations, cross-VM TLB attacks on virtualized GPUs, and evolutionary search for web application crawling.