Roundups of newly published work from USENIX Security and WOOT, IEEE S&P, NDSS, ACM CCS, DEF CON, Black Hat, [un]prompted and elsewhere on the web. Each entry is a short summary with a link to the source. Preprints are covered separately in arXiv Briefs.
New findings spanning LLM cache poisoning, npm prototype pollution, and kernel compartmentalization with PKS.
New findings on diffusion model membership inference, distributed system fuzzing, LLM safety alignment limitations, BLE re-pairing flaws, and hypervisor cross-domain exploitation.
New findings covering auto-contextualized mobile logic bombs, blurred capability boundaries in LLM applications, side-channel attacks on serverless cloud functions, cross-compilation binary alignment, and function name inference in stripped binaries.
New findings spanning library fuzzing, BACnet protocol vulnerabilities, OLE document security, backdoors in machine learning, risks in AI character platforms, and cloud app-in-app resource isolation.
Misconfigured email auto-configuration globally, manipulating GitHub contribution histories to infiltrate supply chains, and adversarial Android malware factories.