TSA-WF: Exploring the Effectiveness of Time Series Analysis for Website Fingerprinting

Whitepaper called TSA-WF: Exploring The Effectiveness Of Time Series Analysis For Website Fingerprinting...

Is Your Prompt Safe? Investigating Prompt Injection Attacks against Open-Source LLMs

Whitepaper called Is Your Prompt Safe? Investigating Prompt Injection Attacks Against Open-Source LLMs...

Memory under Siege: a Comprehensive Survey of Side-Channel Attacks on Memory

Whitepaper called Memory Under Siege: A Comprehensive Survey Of Side-Channel Attacks On Memory...

Data-Driven Falsification of Cyber-Physical Systems

Whitepaper called Data-Driven Falsification Of Cyber-Physical Systems...

An Efficient Hybrid Key Exchange Mechanism

Whitepaper called An Efficient Hybrid Key Exchange Mechanism...

Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents

Whitepaper called Open Challenges In Multi-Agent Security: Towards Secure Systems Of Interacting AI Agents...

Auditing without Leaks Despite Curiosity

Whitepaper called Auditing Without Leaks Despite Curiosity...

A Summation-Based Algorithm for Integer Factorization

Whitepaper called A Summation-Based Algorithm For Integer Factorization...

SAGE: a Generic Framework for LLM Safety Evaluation

Whitepaper called SAGE: A Generic Framework For LLM Safety Evaluation...

Rational Points and Zeta Functions of Humbert Surfaces with Square Discriminant

Whitepaper called Rational Points And Zeta Functions Of Humbert Surfaces With Square Discriminant...

Differentially Private Quasi-Concave Optimization: Bypassing the Lower Bound and Application to Geometric Problems

Whitepaper called Differentially Private Quasi-Concave Optimization: Bypassing The Lower Bound And Application To Geometric Problems...

Near-Term Pseudorandom and Pseudoresource Quantum States

Whitepaper called Near-Term Pseudorandom And Pseudoresource Quantum States...

Breaking the Prompt Wall (I): a Real-World Case Study of Attacking ChatGPT Via Lightweight Prompt Injection

Whitepaper called Breaking The Prompt Wall I: A Real-World Case Study Of Attacking ChatGPT Via Lightweight Prompt Injection...

Algorithms for the Shortest Vector Problem in $2$-Dimensional Lattices, Revisited

Whitepaper called Algorithms For The Shortest Vector Problem In $2$-Dimensional Lattices, Revisited...

ZkVC: Fast Zero-Knowledge Proof for Private and Verifiable Computing

Whitepaper called ZkVC: Fast Zero-Knowledge Proof For Private And Verifiable Computing...

Watermarking Needs Input Repetition Masking

Whitepaper called Watermarking Needs Input Repetition Masking...

Root Access for Data Control: A DEF CON IoT Village Story

Every year, Rapid7 is a presenter at DEF CON’s IoT Village, sharing in-depth insight and expertise into the hacking of all things Internet of Things. This year, our perennial IoT hacking presenter, Principal Security Researcher, IoT, Deral Heiland, along with Rapid7 pentest team members, showed...

GHSA-JCQQ-G64V-GCM7 Previous ATX is not checked to be the newest valid ATX by Smesher when validating incoming ATX

Impact Nodes can publish ATXs which reference the incorrect previous ATX of the Smesher that created the ATX. ATXs are expected to form a single chain from the newest to the first ATX ever published by an identity. Allowing Smeshers to reference an earlier but not the latest ATX as previous break...

ADOKit - Azure DevOps Services Attack Toolkit

Azure DevOps Services Attack Toolkit - ADOKit is a toolkit that can be used to attack Azure DevOps Services by taking advantage of the available REST API. The tool allows the user to specify an attack module, along with specifying valid credentials API key or stolen authentication cookie for the...

Meta Launches Default End-to-End Encryption for Chats and Calls on Messenger

Meta has officially begun to roll out support for end-to-end encryption E2EE in Messenger for personal calls and one-to-one personal messages by default in what it called the "most significant milestone yet." "This isn't a routine security update: we rebuilt the app from the ground up, in close...