362 matches found
A Formal Rebuttal of "The Blockchain Trilemma: a Formal Proof of the Inherent Trade-Offs among Decentralization, Security, and Scalability"
This paper presents a comprehensive refutation of the so-called "blockchain trilemma," a widely cited but formally ungrounded claim asserting an inherent trade-off between decentralisation, security, and scalability in blockchain protocols. Through formal analysis, empirical evidence, and detaile...
PT-2025-28944 · Undefined · Undefined
@qualys re: https://t.co/pNbBaege7E You use CVE-2022-24458 and CVE-2022-24548, should be 24548 only right?...
Image Can Bring Your Memory Back: a Novel Multi-Modal Guided Attack against Image Generation Model Unlearning
Whitepaper called Image Can Bring Your Memory Back: A Novel Multi-Modal Guided Attack Against Image Generation Model Unlearning...
Disappearing Ink: Obfuscation Breaks N-Gram Code Watermarks in Theory and Practice
Distinguishing AI-generated code from human-written code is becoming crucial for tasks such as authorship attribution, content tracking, and misuse detection. Based on this, N-gram-based watermarking schemes have emerged as prominent, which inject secret watermarks to be detected during the...
Understanding the Theoretical Guarantees of DPM
In this study, we conducted an in-depth examination of the utility analysis of the differentially private mechanism DPM. The authors of DPM have already established the probability of a good split being selected and of DPM halting. In this study, we expanded the analysis of the stopping criterion...
On Differential and Boomerang Properties of a Class of Binomials over Finite Fields of Odd Characteristic
In this paper, we investigate the differential and boomerang properties of a class of binomial $Fr,ux = x^r1 + uχx$ over the finite field $\mathbbFp^n$, where $r = \fracp^n+14$, $p^n \equiv 3 \pmod4$, and $χx = x^\fracp^n -12$ is the quadratic character in $\mathbbFp^n$. We show that $Fr,\pm1$ is...
The Amazon Nova Family of Models: Technical Report and Model Card
We present Amazon Nova, a new generation of state-of-the-art foundation models that deliver frontier intelligence and industry-leading price performance. Amazon Nova Pro is a highly-capable multimodal model with the best combination of accuracy, speed, and cost for a wide range of tasks. Amazon...
FOAM: a General Frequency-Optimized Anti-Overlapping Framework for Overlapping Object Perception
Overlapping object perception aims to decouple the randomly overlapping foreground-background features, extracting foreground features while suppressing background features, which holds significant application value in fields such as security screening and medical auxiliary diagnosis. Despite som...
Quantum-Hybrid Support Vector Machines for Anomaly Detection in Industrial Control Systems
Sensitive data captured by Industrial Control Systems ICS play a large role in the safety and integrity of many critical infrastructures. Detection of anomalous or malicious data, or Anomaly Detection AD, with machine learning is one of many vital components of cyberphysical security. Quantum...
Breaking Espressif’s ESP32 V3: Program Counter Control with Computed Values using Fault Injection
Espressif introduced the ESP32 V3, a low-cost System-on-Chip SoC with wireless connectivity, as a response to earlier hardware revisions that were susceptible to Fault Injection FI attacks. Despite its FI countermeasures, the authors of this paper are the first to bypass all security features of...
Security through the Eyes of AI: How Visualization Is Shaping Malware Detection
Malware, a persistent cybersecurity threat, increasingly targets interconnected digital systems such as desktop, mobile, and IoT platforms through sophisticated attack vectors. By exploiting these vulnerabilities, attackers compromise the integrity and resilience of modern digital ecosystems. To...
Unsourced Adversarial CAPTCHA: a Bi-Phase Adversarial CAPTCHA Framework
With the rapid advancements in deep learning, traditional CAPTCHA schemes are increasingly vulnerable to automated attacks powered by deep neural networks DNNs. Existing adversarial attack methods often rely on original image characteristics, resulting in distortions that hinder human...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching bsc1242006. CVE-2024-35840: mptcp: use OPTIONMPTCPMPJSYNACK in subflowfinishconnect bsc122459...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52927: netfilter: allow exp not to be removed in nfctfindexpectation bsc1239644. CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-49775: tcp: cdg: allow tcpcdgrelease to be called multiple times bsc1242245. CVE-2024-53168: net: make sockinuseadd available bsc1234887. CVE-2024-56558:...
Security update for apache2-mod_auth_openidc
This update for apache2-modauthopenidc fixes the following issues: CVE-2025-3891: Fixed denial of service via an empty POST request when OIDCPreservePost is enabled bsc1242015. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL bsc1228557. CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serializatio...
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL bsc1228557. CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serializatio...
Quantifying Azure RBAC Wildcard Overreach
Azure RBAC leverages wildcard permissions to simplify policy authoring, but this abstraction often obscures the actual set of allowed operations and undermines least-privilege guarantees. We introduce Belshazaar, a two-stage framework that targets both the effective permission set problem and the...