Exploitation

New attacks against aligned LLMs, automatic exploit generation for Node.js, mapping CVEs to MITRE ATT&CK, and cross-privilege BTB side channels.

New approaches to bug bisection using LLMs, hardware IP piracy, and Windows file system link following protection.

A batch of papers from NDSS.

LLM agent limitations across vulnerability discovery, privacy preservation, scientific review, and browser use; plus on-device cohort inference, SLUB allocator exploitation, temporal HDR corruption, and adversarial DDoS detection.

New insights into WebView privacy leaks, kernel cache exploitation, and HTTP/2 cross-origin attacks.