Roundups of newly published work from USENIX Security and WOOT, IEEE S&P, NDSS, ACM CCS, DEF CON, Black Hat, [un]prompted and elsewhere on the web. Each entry is a short summary with a link to the source. Preprints are covered separately in arXiv Briefs.
New insights into WebView privacy leaks, kernel cache exploitation, and HTTP/2 cross-origin attacks.
DNS cache timing attacks for continuous user behavior monitoring, SMTP timeout manipulation for amplification attacks, co-training for dynamic password guessing, and performance-counter side channels on AMD SEV-SNP VMs.
A batch of new research from NDSS exploring pitfalls in LLM security evaluations, automated insider threat simulation, distributed SNARKs, and more.
Extracting website fingerprinting traces across positions, exploiting time synchronization in 802.11 for covert channels, breaking LLM watermarks with character perturbations, and characterizing censorship implementation in Chinese LLMs.
New findings on app promotion malware, membership inference attacks, and CSS-based browser fingerprinting.