A Reward-Driven Automated Webshell Malicious-Code Generator for Red-Teaming

Whitepaper called A Reward-Driven Automated Webshell Malicious-Code Generator For Red-Teaming...

Private Lossless Multiple Release

Whitepaper called Private Lossless Multiple Release...

TSA-WF: Exploring the Effectiveness of Time Series Analysis for Website Fingerprinting

Whitepaper called TSA-WF: Exploring The Effectiveness Of Time Series Analysis For Website Fingerprinting...

Is Your Prompt Safe? Investigating Prompt Injection Attacks against Open-Source LLMs

Whitepaper called Is Your Prompt Safe? Investigating Prompt Injection Attacks Against Open-Source LLMs...

Memory under Siege: a Comprehensive Survey of Side-Channel Attacks on Memory

Whitepaper called Memory Under Siege: A Comprehensive Survey Of Side-Channel Attacks On Memory...

Data-Driven Falsification of Cyber-Physical Systems

Whitepaper called Data-Driven Falsification Of Cyber-Physical Systems...

An Efficient Hybrid Key Exchange Mechanism

Whitepaper called An Efficient Hybrid Key Exchange Mechanism...

Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents

Whitepaper called Open Challenges In Multi-Agent Security: Towards Secure Systems Of Interacting AI Agents...

Auditing without Leaks Despite Curiosity

Whitepaper called Auditing Without Leaks Despite Curiosity...

A Summation-Based Algorithm for Integer Factorization

Whitepaper called A Summation-Based Algorithm For Integer Factorization...

SAGE: a Generic Framework for LLM Safety Evaluation

Whitepaper called SAGE: A Generic Framework For LLM Safety Evaluation...

Rational Points and Zeta Functions of Humbert Surfaces with Square Discriminant

Whitepaper called Rational Points And Zeta Functions Of Humbert Surfaces With Square Discriminant...

Differentially Private Quasi-Concave Optimization: Bypassing the Lower Bound and Application to Geometric Problems

Whitepaper called Differentially Private Quasi-Concave Optimization: Bypassing The Lower Bound And Application To Geometric Problems...

Near-Term Pseudorandom and Pseudoresource Quantum States

Whitepaper called Near-Term Pseudorandom And Pseudoresource Quantum States...

Breaking the Prompt Wall (I): a Real-World Case Study of Attacking ChatGPT Via Lightweight Prompt Injection

Whitepaper called Breaking The Prompt Wall I: A Real-World Case Study Of Attacking ChatGPT Via Lightweight Prompt Injection...

Algorithms for the Shortest Vector Problem in $2$-Dimensional Lattices, Revisited

Whitepaper called Algorithms For The Shortest Vector Problem In $2$-Dimensional Lattices, Revisited...

Watermarking Needs Input Repetition Masking

Whitepaper called Watermarking Needs Input Repetition Masking...

ZkVC: Fast Zero-Knowledge Proof for Private and Verifiable Computing

Whitepaper called ZkVC: Fast Zero-Knowledge Proof For Private And Verifiable Computing...

Root Access for Data Control: A DEF CON IoT Village Story

Every year, Rapid7 is a presenter at DEF CON’s IoT Village, sharing in-depth insight and expertise into the hacking of all things Internet of Things. This year, our perennial IoT hacking presenter, Principal Security Researcher, IoT, Deral Heiland, along with Rapid7 pentest team members, showed...

GHSA-JCQQ-G64V-GCM7 Previous ATX is not checked to be the newest valid ATX by Smesher when validating incoming ATX

Impact Nodes can publish ATXs which reference the incorrect previous ATX of the Smesher that created the ATX. ATXs are expected to form a single chain from the newest to the first ATX ever published by an identity. Allowing Smeshers to reference an earlier but not the latest ATX as previous break...