GNUnet P2P Framework 0.26.2

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

Windows Print Processor Persistence

This Metasploit module establishes persistence by registering a malicious Print Processor DLL under HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\arch\Print Processors. The Print Spooler service loads configured processor DLLs at startup, causing payload execution when the spooler...

libpcap 1.11.0

Libpcap is a portable packet capture library which is used in many packet sniffers, including tcpdump...

Windows Push Notifications Local Privilege Escalation Research

Microsoft Windows contains a race condition in the Push Notifications service that can result in local privilege escalation. Research into patched and unpatched versions of wpncore.dll identifies a use-after-free condition involving PresentationEndpointFacade methods during notification platform...

Joern 4.0.627

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

PDoS: A Profitable Denial-Of-Service Attack against Proof-Of-Work Blockchain Liveness

The security and liveness of Proof-of-Work PoW blockchains fundamentally depend on the economic rationality of miners. Existing incentive-driven denial-of-service attacks, such as BDoS, can deter rational miners from participating, but require the attacker to continuously absorb substantial...

Anthropic - Detecting and Countering Misuse of AI: September 2026

Over the past eight months, Anthropic's Threat Intelligence team identified and disrupted operations in which threat actors tried to use Claude for malicious activity. In this report, they share case studies from those operations and describe how malicious use of Claude has evolved since...

Joern 4.0.626

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

LLMVul: A Vulnerability-Labeled Dataset of LLM-Generated C/C++ Functions from Real Production Repositories

Large language models LLMs are increasingly used to generate and assist with software development, yet existing vulnerability datasets largely focus on human-written code or controlled prompting environments. This limits the ability to study security weaknesses in LLM-generated code as it appears...

What Is the Difference between Me and You? Benchmarking the Quality Gap between Human-Written and AI-Generated Code

AI coding assistants are becoming co-authors of production software, yet their evaluation centers on functional correctness, leaving open whether their code differs from human code in the quality dimensions dominating lifecycle cost. We compare human-written and AI-generated code at scale: 787,56...

RedAmon 6.14.1

An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merged patch, with human oversight at every...

Bridging the First-Hour Gap: Evaluating AI Reliability and Benchmarking Deficiencies in Cyber Incident Response for Law Enforcement

The actions of frontline law enforcement officers in the initial hour of a cyber incident play a vital role in determining the ultimate success of an investigation. The minor mistakes they commit might result in irreversible critical impacts. The integrity of the investigation can be compromised,...

IDORacle: Template-Guided SQL-Sink Mediation for Object-Level Authorization in Java Applications

Insecure Direct Object Reference IDOR, often modeled as Broken Object-Level Authorization BOLA, remains prevalent in Java database applications because identity and authorization checks at the controller or service layer are disconnected from SQL execution based on resource identifiers. Existing...

Security Implications of Measurement Based Crosstalk on Superconducting Quantum Computers

Crosstalk is one of the major issues for scalability of superconducting quantum processors. But it can also be used by threat actors to intentionally sabotage computations and steal information. This paper analyzes data leakage due to crosstalk during qubit measurement. Prior research yielded an...

A Feature-Rich Embedded NIDS with EBPF/XDP: Detector and Architecture Trade-Offs

Distributed Denial-of-Service DDoS attacks remain a serious threat to transport networks, with recent attack volumes exceeding 30 Tbps, and the telecommunications industry being the main target. Recent work has yet to study the impact of the hosting software architecture on network monitoring...

Poster: Towards Selecting Threat Appropriate Industrial Intrusion Detection Systems

As the threat landscape against industrial control systems is dynamic, effective security requires detection strategies capable of timely reactions to these evolving threat situations. To address this problem, we propose the idea of a counter-threat intelligence sharing based mechanism to select...

Fluxion 6.32

Fluxion is a security auditing and social-engineering research tool. It is a remake of linset by vk496 with hopefully fewer bugs and more functionality. The script attempts to retrieve the WPA/WPA2 key from a target access point by means of a social engineering phishing attack. It's compatible wi...

Access Control As Verified Parse Constraints

Commercial security gateways repeatedly ship implementation bugs in the code path between the network and the policy decision: hand-written enforcement logic that diverges from the policy author's intent, and ad-hoc request parsers at the network boundary that introduce memory-safety flaws of the...

Forging Tree-Ring: Reproducing and Instrumenting Black-Box Semantic Watermark Forgery

Semantic watermarking schemes such as Tree-Ring hide a detectable pattern in the initial noise latent of a diffusion model. Recent work shows these watermarks are not only removable but forgeable: an attacker who never sees the watermarking key can still produce images the genuine detector accept...

Hieronym: Leveraging Hierarchical Multi-Source Information for Function Renaming in Stripped Binary

Function renaming in stripped binaries can substantially assist reverse engineers by improving code readability, yet it is a challenging task. The difficulty stems from the need to accurately capture function semantics from low-level binary code across diverse instruction sets, architectures, and...

Batten the Hatches: Cybersecurity with Military Mariners

Cyberwarfare has become a key component of contemporary geopolitical conflict. However, there has been extremely limited systematic investigation into how cybersecurity is handled by military organizations and personnel. The military context is unique compared to other operational ones, with...

IntentFuzz: A Protocol-Aware Fuzzer for Automated Invariant Violation Detection in Intent-Based Cross-Chain Bridges

Cross-chain bridges move value between blockchains. Intent-based bridges are a variant where a solver fulfills a user's declared outcome and an off-chain settlement layer later reconciles the fill against the deposit. Existing smart-contract fuzzers and static analyzers only flag known-bad code...

HACK THE PLANET - a Terminal Extravaganza

A full-screen Textual TUI that mashes up the neon swagger of Hackers 1995, the grounded terminal realism of Mr. Robot, and the green digital rain of The Matrix...

Deep-Fake CAPTCHA: Mitigating Next-Generation Social Engineering Attacks

This paper presents DF-CAPTCHA, an active defense against real-time deepfake impersonation in voice and video calls. Instead of passively searching for artifacts, DF-CAPTCHA prompts the caller to perform simple challenge-response tasks that are easy for humans but difficult for current real-time...

Exploring the Role of Security Experience and ChatGPT Usage Strategies on Secure Software Engineering Education

The rapid adoption of Large Language Models LLMs is reshaping software engineering education, but their role in secure software engineering education remains underexplored. We report an exploratory empirical study of how 26 graduate students in a part-time MSc Cybersecurity programme used ChatGPT...

Self-Verifying Anomaly Detection Using Explainable AI for Cybersecurity of DER Networks

The rapid growth of Distributed Energy Resources DERs has significantly expanded the cyber attack surface of modern power grids. Furthermore, increasing sophistication in attack techniques demands anomaly detection systems ADS that are accurate, interpretable, and reliable to support DER...

TOR Virtual Network Tunneling Tool 0.4.9.12

Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow...

HOL Guard AI Agent Runtime Security Benchmark

HOL Guard Benchmark is an open source fixture-based benchmark for evaluating security controls applied to AI coding agents. It defines deterministic scenarios covering secret access, risky shell execution, tool poisoning, approval handling, safe operations, and receipt generation across Codex CLI...

From Specs to Apps: Verifying and Monitoring Models of Signal and WhatsApp

The Signal protocol is a prominent messaging protocol that secures communication for billions of users. It powers WhatsApp, the most widely used messaging application worldwide, and the Signal app, popular among privacy-conscious users. Extensive research in the computational and Dolev-Yao settin...

Few-Shot Learning for Network Intrusion Detection: Methods, Datasets, and Performance

Anomaly-based network intrusion detection systems NIDS are an important first line of defense. However, training NIDS for new attack types is challenging, because labeled attack data are rarely available. Few-shot learning FSL addresses this problem by learning from few samples. However, the...

You Get What You Sample: Evaluating Sampling Strategies for Web Security Measurements

Web measurement studies rely on domain datasets such as Tranco to quantify the prevalence and impact of security issues at scale, but exhaustively analyzing these datasets is often infeasible because of the cost of advanced analysis techniques, requiring the use of sampling. Despite its widesprea...

Chypothermia: Clock Freezing for Static Side-Channel Attacks

Static side-channel attacks, which exploit halted-clock conditions to extract sensitive information, pose an increasing threat to chip security. To counter these attacks, various defenses have been proposed that monitor for abnormal clock behavior and trigger the clearing of sensitive data when...

Function Name Is All You Need to Detect Blockchain Application Attacks

Blockchain application attacks, targeting business logic bugs in decentralized applications dApps, have been an increasing concern to their developers and users, causing significant financial loss. Existing attack detectors either rely on handcrafted rules for detection, or need difficult-to-obta...

BlueSTAR: Tiered Agentic Architecture for Autonomous Cyber Defense

Cyber attacks are increasingly automated, narrowing the time available for human analysts to detect, reason about, and respond to intrusions. Large language models LLMs offer a promising foundation for autonomous cyber defense because they can correlate heterogeneous evidence and reason about...

Accountability in Certificate Transparency and Variants

Certificate Transparency CT aims to reduce the trust required in Certificate Authorities CAs within the TLS certificate ecosystem. It is supported by all major browsers. The protocol obliges all CAs to record the certificates they issue in a public log, which itself is monitored for compliance an...

Investigating Developer-Reported Software Security Testing Challenges

Software security testing SST is essential for identifying vulnerabilities and improving software security, but developers often face practical challenges when selecting tools, configuring test environments, interpreting scanner outputs, testing authentication workflows, and acting on reported...

IServ Schoolserver User Enumeration

IServ Schoolserver suffers from a user enumeration vulnerability. The vendor does not feel this is an issue...

Big Enough to Break Out: Tracking the Rising Capability of LLM Penetration-Testing Agents

Large language model LLM agents are increasingly applied to penetration testing, but we still know little about what they can do or how they fail. We compare two PentestGPT-based systems: a legacy human-in-the-loop system running the open-weight Kimi K2.5, and a newer autonomous system running...

Towards Scalable and Cost-Efficient Vulnerability Detection: A Study on Automatic Query Generation

Static analysis remains a cornerstone of software security, yet the effectiveness of tools such as CodeQL is often limited by the substantial manual effort required to develop high-coverage query suites. While large language models LLMs have emerged as a potential solution for automated code...

Quantifying IIoT Sensor Node Criticality by Fusing Its Data Criticality and Security Vulnerability

The integration of the Industrial Internet of Things IIoT into manufacturing has transformed industrial operations by optimising production management and ensuring product quality through smart industrial sensors that regulate processes based on real-time data. However, these sensor nodes are...

Private Communication Via Zero-Private-Capacity Quantum Channels

Private communication over a noisy quantum channel requires reliable transmission to the receiver and secrecy from the environment. Whether two channels with zero private capacity can jointly enable private communication is a longstanding open problem in quantum information theory. Here we resolv...

What Makes Adversarial Examples Transfer across Deepfake Detectors?

Deepfake detectors remain vulnerable to transfer-based black-box attacks, in which adversarial examples are generated on a source surrogate model and transferred to a target model, unknown to the attacker. Yet how source--target compatibility shapes attack success remains poorly understood. Prior...

CISA: Critical Manufacturing Sector Profile

This resource provides a graphical overview of the components and main segments of the Critical Manufacturing Sector...

Module-Lattice-Based Digital Signature Algorithm Utility 20260908

This is mldsa, a module-lattice-based digital signature algorithm utility for generating keypairs, signing and verifying files and data. It has an alter ego, mlsignify, implementing the same command line switches as signify1. The mldsa and mlsignify utilities are based on the libmldsa3 library,...

CARTS: Contextual Autoregressive Rank Transcoding Steganography for Full-Capacity Keyed Text Encoding

Autoregressive language models can be used to transform a payload text into a stegotext of identical token length by preserving per-position rank information across contexts - a methodology we formalize as Contextual Autoregressive Rank Transcoding Steganography CARTS. While the Calgacus...

DriftNet: A Dual-Head Trajectory Transformer for Detecting and Localizing Prompt Injection in LLM Agents

When an indirect prompt injection succeeds against an LLM agent, the compromise is visible in the agent's own behavior: a benign prefix of tool calls, a poisoned observation, and a suffix of actions that serve the attacker. An operator needs three facts: where the attack entered, which steps it...

AgentAudit: An Open, Extensible Framework for Full-Lifecycle Trust Evaluation of AI Agents

Existing evaluation frameworks mostly assess only one part of AI agents, such as task completion AgentBench or security robustness AgentDojo, ASB, rather than the complete pipeline of planning, tool selection, tool execution, memory and reasoning. Failures can occur at any stage, yet existing...

Ensembling LLMs for AI-Augmented Cybersecurity Software Requirements Generation

Translating high-level controls from security standards into concrete, system-specific requirements is central to cybersecurity requirements engineering. Large language models LLMs can accelerate this labor-intensive, recall-sensitive task, but any single run is unreliable: it misses valid...

Wicked Problem, Parsimonious Solution: Securing Electric Vehicle Charging Station Software

Electric vehicle charging infrastructure presents a suite of novel cyber-physical threats. Among this infrastructure, charging stations are the most vulnerable elements. The software in the charging station supply equipment is particularly vulnerable. Currently, the software is an attack surface...

Towards Tackling Application Logic Flaws through Autonomous Formal-Logic Modeling and Automated Reasoning

Logic flaws pose significant challenges in the design and implementation of modern, semantically rich systems and applications, impacting security, privacy, and trust. These flaws are inherently tied to business-specific semantics and threat models, making their discovery and reasoning difficult...