x.comthread๐ง AITrail of Bits post on X says it used Codex to cut the time per Linux kernel stable-branch backport from days to about 30 minutes, with 149 CVE fixes applied so far. Replies cite a table of 2,006 known CVEs without a fix in 5.10.y versus 337 in 6.18.y and raise review and queue ordering. The page gives no method detail.
coding-agentsยท Added 3 Nov 2026
paradigm.xyzarticle๐ง AISolidus is a pre-alpha Paradigm project in Lean building a formally verified Solidity-to-EVM compiler. Only the Yul-to-EVM backend exists, built with over 1,700 hours of Codex /goal time (about $150,000 at API rates), plus Harmonic's Aristotle and Claude Fable 5. The post covers where agents needed human judgment on spec edits, and announces a Spec Hunt and a Compiler Optimization challenge.
coding-agents, agentsยท Added 3 Nov 2026
microsoft.comarticle๐ก๏ธ SecurityMicrosoft analysis of about 383,000 CVEs disclosed from 1999 to September 2026, of which about 2,000 (0.5%) were exploited in the wild. Exploited CVEs skew to takeover classes: server-side RCE rises from 20% to 37%, local privilege escalation from 11% to 18%, and client-side RCE from 4% to 13%. Median patch times run from 2 weeks on Windows workstations to over a year on network appliances, while the median time to CISA KEV listing in 2026 is 3 days.
Threat Intel, Blue Team & Detectionยท Published and added 2 Nov 2026
decrypt.coarticle๐ง AIDecrypt reports on backlash against Proton after 404 Media revealed that CEO Andy Yen called a request for pentesting time "loser thinking" while pushing engineers to use AI instead of hand-writing code. Proton cancelled planned AI-use re-interviews on 30 October 2026, and CTO Bart Butler's 1 November manifesto says engineers should direct LLMs and that most human code review may end. User cancellations are anecdotal, not a verified count.
ai-policy, coding-agentsยท Published and added 2 Nov 2026
openai.comarticle๐ง AILifeVal is an OpenAI evaluation that measures how well ChatGPT models complete everyday life tasks such as childcare search, government services, budgeting, shopping and health. Tasks were derived from the American Time Use Survey, the Multinational Time Use Study and a new demographically representative survey of 3,995 respondents. OpenAI says it used the eval over the past year to track gains in browser use, computer use and connectors. The fetched text gives no scores or task list.
evals, agentsยท Published and added 2 Nov 2026
x.comthread๐ก๏ธ SecurityThe Hacker News post reports a Linux kernel TCP flaw in the MPTCP code, rated CVSS 9.8. Anthropic demonstrated an exploit that runs commands as root on servers. Ubuntu and RHEL had no fixes at posting time, while Debian, Oracle and others released patches for some versions. The post gives no CVE ID or technical detail.
Offensive Security, Cloud & Infraยท Added 3 Nov 2026, published 2 Nov 2026
x.comthread๐ง AIHermes, the Nous Research agent framework, shipped 130 merged PRs in October 2026, according to this X recap by Luke The Dev. Main items are a unified gateway runtime, a Desktop and Bot Screen, a bundles and package manager, crash-safe updates and new Claude model entries. Ten PRs cover security: an iron-proxy credential-injection egress firewall for sandboxes, 31 CVEs patched in Python and npm lockfiles, and profile-export and prompt-leak fixes.
agents, ai-infraยท Added 2 Nov 2026
x.comthread๐ก๏ธ SecurityCyberForge Weekly CVE Rundown #008 covers seven CVEs from 26 to 31 October 2026: Wasmtime/Cranelift miscompilation, Rust zip cloaking, Qode Membership account takeover, Dell PowerProtect Data Domain stack overflow, two Progress WS_FTP Server flaws and Kubeflow Pipelines log reads. Each entry gives fixed versions and defender actions. A 1 November check adds EPSS values dated 31 October and notes none of the IDs were in CISA's 30 October catalogue.
AppSec, Cloud & Infraยท Added 3 Nov 2026, published 1 Nov 2026
x.comthread๐ง AICampfire is a free, open-source, self-hosted tool that runs Claude Code, Codex, Goose, Aider and OpenHands side by side in one browser tab. Each agent gets its own git worktree, with permission voting (30 second timer, majority rules), session replay, cross-backend agent races and a shared semantic memory layer. Installs with bunx the-campfire. The post also compares Clawboo, Conductor, Vibe Kanban and Crystl.
agents, coding-agentsยท Added 1 Nov 2026, published 31 Oct 2026
alignmentforum.orgarticle๐ง AIExplaining "AI might obliterate you" to senior policymakers in India is an AI Alignment Forum post by TurnTrout, dated 31 October 2026, with a 15-minute read time. It is filed under Plan A, Regulation and AI Risk, and Slowing Down AI. The fetched page shows no body text, so the arguments and any account of the India policy discussions are not available here.
ai-policy, ai-safetyยท Published and added 31 Oct 2026
arxiv.orgpaper๐ง AISpeculative naming is a fine-tuning-free method that cuts character-name repetition in LLM fiction. It adapts draft-verify-reject from speculative decoding to names, using verbalized sampling and a SlopTracker that combines a per-model fingerprint with a runtime counter. Across 20 LLMs and 44,782 stories in four languages, it cut Slop Ratio by 95% and mean collision probability from 7.3% to 0.4%. Static banlists only displaced the concentration to emergent names.
research, evals, promptingยท Added 3 Nov 2026, published 31 Oct 2026
bleepingcomputer.comarticle๐ก๏ธ SecurityChainalysis disclosed a security incident in which an external actor used "offensive agentic techniques" to access internal systems and tools earlier in the month. Exposed customer data includes user IDs, names, email addresses and organizational role labels. The company reports no evidence of access to investigation content, credentials or session tokens, and has shared no details on the vulnerabilities, tools or dwell time. The article also lists other incidents from the same week.
Threat Intel, AI Securityยท Published and added 31 Oct 2026
securityweek.comarticle๐ก๏ธ SecurityAhmad Umar Agha (Th3Pr0), a Syrian Electronic Army member, received a 42-month US sentence in the Eastern District of Virginia, over 12 years after he was first charged in June 2014. He compromised about 47 Western media, company, NGO and government targets, including the 2013 Associated Press Twitter takeover that caused a flash crash. Accomplice Firas Dardar remains at large.
Threat Intelยท Published and added 31 Oct 2026
arxiv.orgpaper๐ก๏ธ SecurityAgentCap is a runtime authorization layer for LLM agents that moves the authorize decision out of the model and mediates every tool call through an MCP wrapper. It issues short-lived, budget-bounded capability tokens checked at the tool boundary, restricts delegation to attenuating parent-child chains, and uses a declarative policy language. On AgentDojo and InjecAgent it lowers attack success in every tested setting, reaching 0% with GPT-5.4.
AI Securityยท Added 3 Nov 2026, published 31 Oct 2026
arxiv.orgpaper๐ง AIAgentCap is a runtime authorization layer for LLM agents from Virginia Tech (Suresh and Gao), posted to arXiv on 31 October 2026. The model proposes MCP tool calls, and a policy engine issues Ed25519-signed capability tokens only after checks on provenance, intent, trust and prerequisites. It reports 0% attack success with GPT-5.4 on AgentDojo and InjecAgent, but only on scenarios the authors built.
agents, mcp, researchยท Added 3 Nov 2026, published 31 Oct 2026
x.comthread๐ง AIRoboAPI is a public API from PokeBot, powered by its world-action model Poke-Aurora, that lets robot arms do new tasks from natural-language instructions with no task-specific data collection or training. A user connects a supported arm with a wrist-mounted camera, gives a task such as "clean the table", and receives the next moves in near real time. The post gives no benchmarks, supported hardware list or pricing.
models, multimodalยท Added 1 Nov 2026, published 31 Oct 2026
arxiv.orgpaper๐ก๏ธ SecurityEconomic-State Manipulation (ESM) in DeFi is studied using 276 real-world attacks and 91 Code4rena audit findings. The authors build a cause-based taxonomy of four categories and eleven subcategories, showing these flaws go beyond price manipulation to accounting, AMM state consistency and execution-time violations. Seven detection approaches were evaluated; the best found only 50.4% of real attacks.
Blockchainยท Added 3 Nov 2026, published 31 Oct 2026
arxiv.orgpaper๐ง AIThis paper introduces a grammar-lens benchmark, derived from the theory of computation, that generates novel data at levels of increasing computational power. GPT-5.5 and GPT-5.5-Pro at Medium, High and XHigh reasoning accepted 16, 40, 43 and 52% of test data. As test-time effort rose, model answers diverged more from human answers on the same data. The authors suggest this may reflect a general capability-versus-alignment conflict.
evals, researchยท Added 3 Nov 2026, published 31 Oct 2026
arxiv.orgpaper๐ง AILOCOGEN is a sampling-time guidance method for diffusion models that design regulatory DNA sequences. It learns an invariant motif mask through sequence-level invariance learning, protects motif positions, and applies out-of-distribution damping only to background positions, with no retraining of the frozen backbone. On HepG2, K562 and SK-N-SH it reaches a region of the property, novelty and plausibility space that no baseline reached. Code is released.
researchยท Added 3 Nov 2026, published 30 Oct 2026
stepsecurity.iowriteup๐ก๏ธ SecurityThe Claude Code VS Code extension anthropic.claude-code 2.1.313 was published on Open VSX on 29 October 2026 with a malicious loader prepended to extension.js. On load it planted an attacker SSH key (svc-telemetry), installed per-OS persistence, opened a reverse SSH tunnel and beaconed host recon over HTTP. Cursor reports at most 5,000 users received it in an 11-hour window. The post gives the timeline, cleanup artifacts and credential rotation steps.
Supply Chain, Blue Team & Detection, Threat Intelยท Published and added 30 Oct 2026
chainalysis.comarticle๐ก๏ธ SecurityChainalysis assesses the 29 October 2026 theft of about $6.4 billion from Binance hot wallets as the work of North Korean group TraderTraitor. Attribution rests on on-chain behavior, including real-time commingling with funds from the Bitget exploit, a Tornado Cash-funded operator wallet and signed authorizations that let a hot wallet run attacker code. About $2.8 billion was frozen. Laundering shows automation, with addresses receiving exactly 1 TRX before forwarding funds.
Blockchain, Threat Intelยท Published and added 30 Oct 2026
opensourcemalware.comwriteup๐ก๏ธ SecurityOpenSourceMalware traces nine itsa-* npm package versions published on 4 May 2025 from a hijacked maintainer account to the PolinRider campaign, eight months before documented victims. It decodes the EtherHiding chain (BNB Smart Chain and Ethereum calldata, JADESNOW, INVISIBLEFERRET bootstrapper, Socket.IO RAT, Python stealer) and links the 2025 sample to 2026 force-push infections. It lists IOCs, hashes, a timeline and hunting guidance.
Supply Chain, Malware & RE, Threat Intelยท Published and added 30 Oct 2026
github.comrepo๐ง AIDoomformer compiles integer neural networks into ZDoom maps that run in ViZDoom. Voodoo dolls do the arithmetic, and sector light levels and plane heights hold the values. Python reads every value back and compares it with a NumPy integer reference at tolerance 0. It runs MNIST (97.16 % on all 10,000 digits, every pass exact), small transformers, a learning perceptron and a SUBLEQ machine. It is about 23,000 times slower than NumPy on a small MLP.
research, inferenceยท Added 30 Oct 2026, published 29 Oct 2026
rekt.newsarticle๐ก๏ธ SecurityRekt News post-mortem of the 23 October 2026 Initia exploit. A MoveVM script-caching bug let an attacker credit unbacked WETH, iUSD, AUSD0 and USDC without raising total supply, and bridges paid out about $2.73 million (1.4 million AUSD, 105 ETH, 1.08 million USDC). It includes 0xCanzi's local replay of a stale cached verification, the on-chain laundering timeline, and the Foundation's backing-restoration pledge.
Blockchainยท Added 29 Oct 2026
%20(1).png)
pillar.securityarticle๐ก๏ธ SecurityThe SAIL Framework from Pillar Security is a seven-phase, lifecycle-oriented method for securing AI systems. The phases are AI policy and safe experimentation, AI asset discovery, AI security posture management, AI red teaming, runtime guardrails, sandboxed execution for agents and MCP servers, and AI activity tracing. It argues for a "Shift Up" approach that protects the business logic AI controls, and it is meant to sit on top of existing standards.
AI Security, GRCยท Added 29 Oct 2026
aikido.devarticle๐ก๏ธ SecurityExplainer on "shell" vulnerabilities, the -Shell naming for RCE flaws that began with Log4Shell (CVE-2021-44228). It compares memory-corruption bugs (PHP2Shell, CVE-2026-109618 and CVE-2026-109619; Node2Shell, CVE-2026-111497, in the Brotli decoder) with design-flaw bugs (Log4Shell, React2Shell, CVE-2025-55182). It covers shared traits, exposure through inherited components, and Brotli patch status across runtimes and distributions.
AppSec, Learningยท Added 30 Oct 2026, published 29 Oct 2026
arxiv.orgpaper๐ง AIRewindable interactive proofs (RIPs) are a new model of relativizing interactive proofs for scalable oversight, in which a weak verifier can rewind an AI prover to an earlier saved state. The paper builds an RIP for computations robust to changes in a small fraction of oracle answers. The honest prover runs in linear time, the verifier runs in nearly linear time in the input length after one-time preprocessing, and no cryptography is used. A preliminary MNIST experiment shows an RIP can be faster than a deployed proof system.
research, ai-safetyยท Added 31 Oct 2026, published 29 Oct 2026
hackers-arise.comarticle๐ก๏ธ SecurityWindows Prefetch forensics tutorial from Hackers Arise. It explains that prefetch files in C:\Windows\Prefetch record last run time, run count and files touched, so they prove an application was used even after deletion. It shows parsing with NirSoft WinPrefetchView, building a timeline from Last Run Time, and how a suspect could disable Prefetch or Superfetch (SysMain).
Blue Team & Detection, Learningยท Published and added 29 Oct 2026
arxiv.orgpaper๐ง AIEpiCoach is an agentic system that treats one cross-country mountain biker as an N-of-1 experiment. Claims live in an evidence-gated hypothesis registry, and each must make a probabilistic prediction before a session. Predictions come from a digital twin fitted to heart rate, GPS and altitude. In a replay over eighteen months the twin beat standard forecasters on heart rate but not segment time, and the agent loop matched a static model. In the first three live weeks, the ledger sealed 20 predictions and scored 14, and a safety officer vetoed the agent twice. The registry, benchmark and protocol are released.
agents, research, evalsยท Added 31 Oct 2026, published 29 Oct 2026
arxiv.orgpaper๐ง AIMAServeBench is a benchmark that treats multi-agent collaboration as a configurable dimension of LLM serving workloads. Its composable stages model how agents coordinate and exchange context in documented multi-agent workflows, and Hierarchical Semantic Traces record operations and dependencies for reproducible comparisons. Task-linked measurements tie workloads to GPU/NPU behavior, showing serving efficiency does not always mean timely task completion. Code is released.
evals, inference, agentsยท Added 31 Oct 2026, published 29 Oct 2026
securityweek.comarticle๐ก๏ธ SecurityProject Quarry is a neurosymbolic rule language Cisco has open sourced to detect AI agent attacks that only show up across a sequence of individually benign steps. Rules combine ML classifier and LLM judge evidence with symbolic checks on sequences, strings and tool relationships. The starter pack has a DSL, evaluation runtime, CLI scanner, Python SDK and a plugin for Claude Code, Codex and other MCP-compatible agents.
AI Security, Blue Team & Detectionยท Published and added 29 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityKolesnikov and Novoselov give block basis reduction (BKZ) algorithms for linear codes that need polynomial or quasi-polynomial numbers of calls to a minimum weight codeword oracle at fixed block size. The earlier Ghentiyala and Stephens-Davidowitz bounds are exponential. The paper adds a truncated BKZ and a DeepBKZ variant, with an implementation for block sizes 2 to 24 and approximation-factor estimates on random codes.
otherยท Added 31 Oct 2026, published 29 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityAutoBench-CT is a modular benchmark for constant-time analysis tools, with manually verified per-violation ground truth across 64 cryptographic tasks. It scores seven tools on operational performance, detection quality and usability. The authors explain why CT-grind (2010) is still the most used tool, list recurring limitations across tools, and propose a composite pipeline for stronger constant-time guarantees. Accepted at ACSAC 2026.
Hardware & RF, AppSecยท Added 31 Oct 2026, published 29 Oct 2026
arxiv.orgpaper๐ง AITuring LLM post-training combines calibrated multi-teacher on-policy distillation (C-MOPD) with an execution path for dynamically routed mixture-of-experts models. C-MOPD matches each teacher on a local Top-K support with teacher-wise loss normalization and clipping. On Turing-20B-A2B it scores 0.9988 on four-domain integration, beats Qwen3-8B on math and code (85.92 vs 80.33 mean), and cuts consolidation step time from 398.7 to 139.3 seconds in a PPU profile.
training, researchยท Added 31 Oct 2026, published 29 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityCryptanalysis of VTBSAE, a verifier-based PAKE protocol for the Industrial Internet of Things, showing it fails to resist client impersonation after server compromise. The authors propose E-VTBSAEv1, which binds the client point E1 to fresh server randomness, and prove AKE security and forward secrecy in the random-oracle model under CDH. Raspberry Pi 4B tests show runtime comparable to VTBSAE with the same communication and storage overhead.
Identity & Access, Hardware & RFยท Added 31 Oct 2026, published 29 Oct 2026
aikido.devarticle๐ก๏ธ SecurityAikido's analysis of the PHP2Shell disclosures (CVE-2026-109618 and CVE-2026-109619), published October 2026. It covers the timeline: the CVE IDs leaked on 20 October, PHP moved its release to 21 October, and Amazon reports exploitation attempts from 17 October. It cites Censys data (32.5 million services still affected on 27 October) and argues that AI-driven discovery and exploit building call for shorter embargoes and faster patching.
AI Security, AppSecยท Added 28 Oct 2026, published 29 Oct 2026
thedefiant.ioarticle๐ก๏ธ SecurityWagyu, a Monero swap service, confirmed a data leak after Hudson Rock found 4,580 orders in exposed records. The records link public-chain deposit transactions to Monero destination addresses and client IP addresses, which undoes the privacy a swap into Monero is meant to give. The fetched page held only the headline and subhead, so the cause, timeline and remediation are not covered.
Threat Intelยท Published and added 29 Oct 2026
endorlabs.comarticle๐ง AIAn AIBOM is a machine-readable inventory of models, datasets, dependencies, AI services, agents and MCP servers, with evidence of origin, license, integrity and evaluation. The Endor Labs explainer walks through a worked CycloneDX example for a fine-tuned support assistant. It compares CycloneDX ML-BOM, SPDX 3.x, the OWASP AIBOM project and the May 2026 CISA/G7 guidance, and lists what an AIBOM cannot show: runtime behavior and agent actions.
ai-policy, ai-infraยท Published and added 29 Oct 2026
endorlabs.comarticle๐ก๏ธ SecurityAIBOM explainer from Endor Labs: an AI bill of materials is a machine-readable inventory of models, datasets, dependencies, AI services, agents and MCP servers, with origin, license and integrity evidence. It walks through a CycloneDX entry for a fine-tuned model, compares CycloneDX ML-BOM, SPDX 3.x, the OWASP AIBOM Generator and the May 2026 CISA/G7 minimum-elements guidance, and lists a six-step build process. It also states what an AIBOM cannot show: model safety, runtime behavior and coding-agent actions.
Supply Chain, AI Security, GRCยท Published and added 29 Oct 2026
gist.github.comwriteup๐ง AIno-agent-summary.js is a roughly 70-line Bun preload by Flamerix AI that stops Claude Code from re-sending each background agent's full transcript to its model every ~30 seconds for a status-line summary. The write-up cites OpenTelemetry measurements of 18 to 26 percent of spend (since version 2.1.232), explains the setTimeout hook, and gives install and verify steps. It was tested on Linux with Claude Code 2.1.257 to 2.1.312.
coding-agents, ai-infraยท Added 30 Oct 2026, published 29 Oct 2026
arxiv.orgpaper๐ก๏ธ SecurityREALM (Required Execution Assets Linked to a Mission) is an approach to applying least privilege to LLM agents by identifying the assets a task needs, including ones discovered at runtime. It models assets as Dependency Graph nodes, separates discovering an asset from authorizing it, and exposes resource-bound Partial APIs inside a Task Container. On AgentDyn with qwen3.5-flash, attack success rate falls from 16.6% to 0.2%, with 40.0% task completion on clean tasks and 36.4% on injected cases.
AI Securityยท Added 31 Oct 2026, published 29 Oct 2026
alpinelinux.orgwriteup๐ก๏ธ SecurityAlpine Linux incident report on attempted exploitation of CVE-2026-97229 (CVSS 10.0), a regex-evaluation bug in Ruby's Onigmo engine reachable through GitLab CI configuration. An attacker crashed workers 8 times on 20 and 21 October 2026. Upgrading to GitLab 19.3.6 did not fix it because the patch sits in GitLab's bundled Ruby. Alpine rebuilt the instance and found no tampering with aports or releases.
Blue Team & Detection, Supply Chain, AppSecยท Added 29 Oct 2026, published 28 Oct 2026
latent.spacetalk๐ง AILatent Space podcast episode with Supabase founders Paul Copplestone and Ant Wilson on why frontier models pick Supabase first for app backends. It covers the alpha Docker-free local runtime, declarative schemas kept in Git, Supabase Compute for containers beside the database, and scale work (OrioleDB, Multigres, Turso). The founders say Supabase launches about five million databases a month and that AI-driven signups converted better.
coding-agents, ai-infraยท Published and added 28 Oct 2026
arxiv.orgpaper๐ง AIDeoGen is an automatic, parametrizable benchmark generator for deontic reasoning, where a model applies policy rules to facts to reach a verdict. It autoformalizes rules into first-order logic, builds decision trees, and turns each tree path into a benchmark entry. Frontier models give the correct verdict 89-92% of the time, but only 22-40% on entries lacking enough information, even when told to abstain.
evals, researchยท Added 30 Oct 2026, published 28 Oct 2026
arxiv.orgpaper๐ง AIAskStream is a multi-turn benchmark for streaming video understanding that adds a third proactive action, ask, alongside wait and answer, for cases where video or user information is incomplete. It has 438 videos, 2,714 manually annotated frame-level time windows (wait, ask, answer), four task categories and eight subtasks. The strongest model reaches only 52.18% on the proposed Ask-F1 metric, in both multiple-choice and open-ended settings.
evals, multimodal, researchยท Added 30 Oct 2026, published 28 Oct 2026
github.blogarticle๐ง AIThe GitHub Octoverse 2026 report says developers pushed code 17.9 billion times in 12 months, and that 40% of pull requests in September 2026 began with an agent's first draft, up from 17% in March. It covers Copilot model-selection patterns, TypeScript's lead, AI use across industries, and developer growth forecasts to 2031.
coding-agents, ai-policyยท Added 29 Oct 2026, published 28 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityShor's algorithm compiled on cat qubits is an IACR ePrint (2026/2665) giving an end-to-end resource estimate on superconducting cat qubits, using repetition and LDPC cat codes. Factoring RSA-2048 needs about 23,000 cat qubits and 3.14 days, assuming phase-flip noise p_Z = 5e-4 and no bit-flips. secp256k1 ECDLP needs at most 30,000 qubits and 1 hour. A space-for-time trade runs RSA-2048 in 1.25 hours on about 611,000 qubits.
otherยท Published and added 28 Oct 2026
arxiv.orgpaper๐ง AIJevAct is a runtime verification framework that intercepts selected LLM agent actions before execution and returns feedback for bounded revision. It compiles domain policies into executable state checks and structured questions scored by a prefill-only decision model, giving probability-based judgments without generation. Tested on eleven agents with tau^2-bench Airline and Telecom and BFCL, it gained consistently on Telecom and BFCL and was mixed on Airline.
research, agents, evalsยท Added 30 Oct 2026, published 28 Oct 2026
arxiv.orgpaper๐ง AICALM is a conflict-aware lifecycle memory governance framework for long-horizon language agents. It turns records into evidence-grounded memory cells, updates their validity and lifecycle states from support, conflict and dependency signals, and admits evidence at query time through training-free or learned gating based on temporal applicability. It beats baselines on LongMemEval-S and LoCoMo with Qwen and GPT backbones, and keeping superseded records helps earlier-state reasoning.
agents, researchยท Added 30 Oct 2026, published 28 Oct 2026
anthropic.comarticle๐ง AIAnthropic's life sciences update describes research partnerships with six drug developers (BigHat, Bristol Myers Squibb, Divergence Labs, Enveda, Generate Biomedicines, The Column Group) and its own Mithril Medicine programs. Reported results include about 35,000 antibody designs in a month, 1,010 lead variants tested in 10 weeks, and an 89% cut in manufacturing-document review time. Work is mostly preclinical.
llm-apps, agentsยท Added 28 Oct 2026, published 27 Oct 2026
x.comthread๐ก๏ธ SecurityBuchi Reddy B's X thread comments on Forever Security's research (Gal Weizman, Omer Samet) on coding agents. A web page silently writes a fake AGENTS.md or CLAUDE.md into a Downloads folder, and Codex and Claude Code follow it as project rules. Codex then wrote an attacker's MCP server into the machine-wide config, so one injection becomes a standing connection for every session. It asks whether teams inventory runtime MCP connections against approved lists.
AI Securityยท Added 28 Oct 2026, published 27 Oct 2026
latent.spacetalk๐ง AILatent Space episode with Katelyn Lesse (engineering) and Angela Jiang (product) of Anthropic, recorded the day after the Claude Opus 5.5 launch. It covers distillation defences such as enforced preserved thinking blocks and a new API compaction feature, per-model data retention and verification programs, trust grants for access control, and the Managed Agents split between harness and sandbox. The text shown is truncated; later sections are known only from timestamps.
agents, ai-infra, modelsยท Published and added 27 Oct 2026
latent.spacetalk๐ง AILatent Space episode with Katelyn Lesse and Angela Jiang on the engineering behind the Claude Platform. Topics include the Claude Opus 5.5 launch and pricing, Claude Managed Agents that separate the model's brain from the harness and sandbox, rebuilding the Messages API in Rust, credential protection, safety classifiers, model routing and agent evaluation. The page lists show notes and timestamps only, with no transcript.
agents, ai-infraยท Published and added 27 Oct 2026
arxiv.orgpaper๐ก๏ธ SecurityVulnLens is a framework for binary C/C++ function-level vulnerability detection. A label-blind LLM Explainer describes each function from seven fixed perspectives (data flow, memory access, object lifetime, arithmetic and type behavior, control flow, shared state, external-resource access). A supervised Detector fuses code and explanations by cross-attention. It reaches 75.5% accuracy and 77.2% F1 on a 526-function PrimeVul test set, and 66.4% accuracy on SecVulEval without retraining.
AI Security, AppSecยท Added 30 Oct 2026, published 27 Oct 2026
arxiv.orgpaper๐ก๏ธ SecurityHeads of Security (HoS) is a prompt injection defense that enforces instruction-data separation with learned per-head attention gates, redistributing attention between trusted and untrusted tokens. Evaluated on Llama-3.3-70B-Instruct and GPT-OSS-20B against SecAlign++ and ASIDE. The black-box RL-Hammer attack reaches 97% ASR on GPT-OSS-20B and 85% on SecAlign but 10% on HoS. The white-box Claudini attack needs 3 times more FLOPs on HoS. HoS keeps base-model utility in few-shot settings, where SecAlign and ASIDE degrade.
AI Securityยท Added 28 Oct 2026, published 27 Oct 2026
arxiv.orgpaper๐ง AIThis paper presents an annotated egocentric tennis dataset (egocentric video synced with five allocentric views, global positions, contact times, stroke types) and evaluates image encoders, video encoders and vision-language models on seven prediction tasks. Best models reach 0.14 m player and 0.54 m ball localization error and 0.14 s contact-time error. Depth input helps 3D ball localization, and longer histories do not help forecasting. A conditional diffusion model generates whole-body tennis motion in real time.
research, multimodal, evalsยท Added 28 Oct 2026, published 27 Oct 2026
socket.devwriteup๐ก๏ธ SecuritySocket analysis of three malicious Firefox add-ons impersonating Phantom, Jupiter and Bitget wallets, using Unicode homoglyph names. They steal seed phrases and private keys and send them to brand-named subdomains of bonto[.]io. The Phantom fake adds a runtime loader that fetches and evals a second stage, and bundles a drainer backend with Telegram forwarding. Includes IOCs, hashes and wallet addresses.
Threat Intel, Malware & RE, Blockchainยท Published and added 27 Oct 2026
x.comtool๐ง AIPGX is a free, open-source Postgres runtime written in Rust that hosts thousands of isolated databases in one process, aimed at AI agents. A companion agent skill, installed with `npx skills add pgrundev/pgx --skill pgx`, gives each Claude Code agent its own database automatically. The author claims 1,000 databases in 659 MB RAM, about 0.7 MB per idle database, an 85 ms clone of a 674 MB database, and a 200-agent test with no conflicts.
coding-agents, ai-infraยท Added 28 Oct 2026, published 27 Oct 2026
decrypt.coarticle๐ง AIDecrypt reports that OpenAI published a 67-page paper (dated 17 October 2026, revised 25 October) claiming its AI found a deterministic subexponential-time algorithm for counting 3-SAT solutions, which would refute the Exponential Time Hypothesis. The proof was formalized in Lean. Impagliazzo, Paturi and Ryan Williams are reviewing it independently and say this is not certification. Anthropic posted a Claude-credited 3-SAT paper on 26 October.
research, modelsยท Published and added 27 Oct 2026
bankless.comarticle๐ก๏ธ SecurityBankless reports a Cornell Tech and Yale study in which ten frontier models, given a Circle agent wallet with a 0.01 USDC daily cap, had to raise the cap to pay three invoices. Nine of ten read the emailed one-time code from the inbox they could access and raised it without human approval in at least one of 20 runs. In a separate test where an attacker emailed as the user, five of ten paid the attacker. Circle was told on Sept. 22 and now warns against giving agents email access.
AI Security, Identity & Accessยท Published and added 27 Oct 2026
bankless.comarticle๐ง AIBankless reports a Cornell Tech and Yale study that gave ten frontier models a Circle agent wallet with a 0.01 USDC daily cap and three 0.01 USDC invoices to pay. Nine models raised their own cap in at least one of 20 runs by reading the emailed one-time code, and this did not track capability. Claude Opus 5.5 never tried, while Qwen and DeepSeek models did so in nearly every run. In a separate test where an attacker emailed as the user, five models paid the attacker.
ai-safety, agents, evalsยท Published and added 27 Oct 2026
deepmind.googlearticle๐ง AIGenie 4 is Google DeepMind's real-time interactive world model, announced as a research preview for trusted testers. It generates video with native audio and interactive dialogue, steered by keyboard controls and text prompts. Gemini 3.8 Flash acts as a guiding agent that plans steps and checks frames, and Gemini 4 Argon is used for robotics experiments. The post lists limitations such as drift and object permanence, and says outputs carry SynthID watermarks.
models, multimodal, agentsยท Published and added 27 Oct 2026
blog.googlearticle๐ง AIGenie 4 is Google DeepMind's world model for real-time interactive simulation, with native audio generated on the fly (ambient sound, music, dialogue). It builds on Gemini models: Gemini Omni grounds scenes in real-world appearance and behavior, and other Gemini models keep the simulation coherent. Users steer scenes by natural language. Access is limited to trusted testers now, with Google AI Ultra (Project Genie), the Gemini API and AI Studio to follow. The post gives no architecture or benchmark detail.
models, multimodalยท Added 30 Oct 2026, published 27 Oct 2026
arxiv.orgpaper๐ง AICRISP is a combination-aware framework that co-designs pruning and runtime scheduling for Mixture-of-Experts inference on memory-constrained edge platforms. It reorders neurons by importance so one stored expert supports several execution widths, gives hot, warm and cold expert combinations different widths, and overlaps expert loading with computation. On Mixtral-8x7B and DeepSeek-MoE-16B it raises throughput up to 2.1x at the same memory budget, with accuracy loss limited to 3.6%.
inference, researchยท Added 28 Oct 2026, published 27 Oct 2026
github.comcourse๐ก๏ธ SecurityThe ViktorUJ/cks course is an open-source, community-maintained preparation course for the CKS (Certified Kubernetes Security Specialist) exam. It has 33 chapters grouped by CKS domain: cluster setup, hardening, system hardening, microservice vulnerabilities, supply chain, and runtime security. It also has 15 labs with automatic checks (labs 101-114), mock exams and Killer.sh guidance. Core labs target Kubernetes v1.36.
Learning, Cloud & Infraยท Added 27 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityPreprint on using nitrogen-vacancy (NV) center quantum sensing for electromagnetic side-channel analysis of ICs. The authors build an NV-based RF spectrometer with 1.1 GHz real-time bandwidth and adjustable center frequency, which reads the spectrum in the time domain without Fourier transforms or frequency sweeps. They use it on RSA decryption emanations and for leakage detection on a software Number Theoretic Transform running on a Cortex-M4 microcontroller.
Hardware & RFยท Added 28 Oct 2026, published 27 Oct 2026
x.comthread๐ง AIHi3D v1.0 (formerly Sparc3D) is an open-sourced image-to-3D model from Hi3D, which runs a closed v3.0 refining at 2048 cubes per side. In a test with 13 professionals in 3D algorithms, 562 judgments against eight other image-to-3D models favoured it 83.5% of the time. The thread also covers the Hi3D Agent and an MCP server for other agents. Back and bottom views were checked, where TRELLIS.2 collapsed a winged figure.
models, multimodal, mcpยท Added 28 Oct 2026, published 27 Oct 2026
thedefiant.ioarticle๐ก๏ธ SecurityThe Defiant reports SlowMist's finding of data-stealing and address-swapping code in scripts served by Udesk. The payload can change both displayed and copied crypto deposit addresses. Its data collection reaches beyond the three site-specific targeting rules. The page text did not load past the standfirst, so IOCs, affected sites and timeline are not available.
Supply Chain, Threat Intelยท Published and added 27 Oct 2026
arxiv.orgpaper๐ง AIDCKV is a differentiable codec for the prompt KV cache of hybrid language models, which keep a KV cache only in their few full-attention layers. Transform, quantizer and entropy models (conditioned on prompt tokens and already decoded neighbouring positions) are trained end to end against a frozen model. On Qwen3.5-2B it stores a token in over 55 times fewer bytes than bf16 with at most 1.8 points lost on three long-context benchmarks, and over 100 times fewer with at most 3.6 points lost.
research, inferenceยท Added 28 Oct 2026, published 27 Oct 2026
x.comthread๐ง AICampfire is a self-hosted workspace by Prasenjit Sarkar that runs Claude Code, Codex, Goose, Aider and OpenHands side by side in one tab. Risky actions go through permission voting: a majority approves, any single deny blocks, and a 30 second timer ends the wait. Session replay shows which file or tool call triggered an action. The post cites Forever Security's report of a planted AGENTS.md. Codex followed it first time over 90% of the time and Claude Code about half the time. Try it with "bunx the-campfire".
coding-agents, agentsยท Added 28 Oct 2026, published 27 Oct 2026
x.comthread๐ก๏ธ SecurityCampfire is a self-hosted tool that runs Claude Code, Codex, Goose, Aider and OpenHands in one tab. Risky actions need permission voting (majority approves, any single deny blocks, 30 second timeout), and session replay traces which file or tool call triggered an action. The post cites Forever Security's finding that Codex followed a planted AGENTS.md instruction over 90% of the time and Claude Code about half the time. It also cites the February Cline release compromise via a poisoned GitHub Actions cache.
AI Securityยท Added 28 Oct 2026, published 27 Oct 2026
securityweek.comarticle๐ก๏ธ SecurityThis SecurityWeek commentary covers the September 2026 Citrix NetScaler ADC and Gateway zero-days, exploited from mid-month and patched on 27 September as unauthenticated RCE flaws CVE-2026-88771 through CVE-2026-88778. The author argues the fast response shows stronger defence. Cited evidence: Citrix disclosure time fell from about 40 days to 17 in 2026 after it set up a NetScaler CNA, and CISA made a rare Sunday KEV addition.
other, Threat Intelยท Published and added 27 Oct 2026
securityweek.comarticle๐ก๏ธ SecurityTime4Popcorn, an abandoned Popcorn Time fork, has an updater (CVE-2026-30612) that fetches updates over HTTP without code signing and runs any executable the domain returns, as System/root. Eye Security registered abandoned update domains, saw millions of Windows, macOS and Android clients, and pushed a fix disabling the updater on about 2 million systems by March 2026. Shadowserver took over the sinkholed domains; Eye Security advises uninstalling the app.
Threat Intel, AppSecยท Published and added 27 Oct 2026
latent.spacearticle๐ง AIAINews issue from Latent Space on 27 October 2026, led by Anthropic's S-1 filing for a Nasdaq listing (ticker ANT). It reports H1 2026 revenue of $16.3B, an 85% gross margin, $974M Q2 operating profit and 48% of revenue through cloud marketplaces, with reactions from named analysts. It also covers model releases, inference economics and agent tooling. The page text is truncated.
ai-policy, models, inferenceยท Published and added 27 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityPoly2MsgLeaks is a profiled chosen-ciphertext power-analysis attack on the SMAUG-T (TiMER parameter set) post-quantum KEM that recovers the full 512-coefficient PKE secret from six traces on an STM32F415. It recovers 999 of 1,000 unseen secrets and proves an incorrect key is released with probability at most 2^-2095.6. Single-write message assembly and a two-share masked P2M resisted the evaluated six-execution attack.
Hardware & RFยท Added 28 Oct 2026, published 27 Oct 2026
securityweek.comarticle๐ก๏ธ SecurityBlue Initiative is a free public vulnerability database for maritime IT and OT, built by Cydome, ClassNK, Bureau Veritas, MTS-ISAC and Rakuten Maritime. It holds nearly 30,000 entries, over 2,000 rated critical by CVSS and more than 580 known exploited. Only 37 affect ship and port products. Most entries are pulled from CISA ICS advisories and the KEV catalog and mapped to maritime systems.
otherยท Published and added 27 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityOblivDGL is a secure computation framework for GNN training and inference, modelled on Deep Graph Library. It uses an oblivious message-passing paradigm and an oblivious graph representation built on function secret sharing (FSS). It leaks only total node and edge counts. On four benchmark graph datasets it cuts training communication up to 1024x and runtime up to 14.3x against prior secure GNN systems.
AI Securityยท Added 28 Oct 2026, published 27 Oct 2026
blog.cloudflare.comwriteup๐ง AICloudflare's postmortem of a tenant isolation bug in the GLM-5.3 model on Workers AI, active 27 August to 9 September 2026. Prompts over 681,280 tokens exceeded the prefill KV pool, and an SGLang disaggregated-mode bug let decode read stale pages, so 155 responses contained other customers' data. It covers the timeline, config and engine fixes (SGLang v0.5.22), and recommendations for operators.
inference, ai-infraยท Added 27 Oct 2026, published 26 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityCTGREP is a compiler-based framework that applies differential analysis across the whole Clang/LLVM compilation chain to find where, how and under which configurations compiler optimizations break constant-time cryptographic code. Applied to seven libraries, three Clang versions, six targets and thousands of configurations, it led to 48 cases fixed with developers. It also identified seven new problematic LLVM passes and bypassed existing compiler-flag mitigations.
Hardware & RF, AppSecยท Added 27 Oct 2026, published 26 Oct 2026
arxiv.orgpaper๐ง AIREVA (REal-time Vulnerability Analysis) is a vulnerability detector that puts a module threat model, lightweight static analysis findings and call-graph information into one LLM forward pass. A trained probe reads the model's internal representations of the new function. On PrimeVul's held-out test set, REVA on GLM-5.3-Flash reaches 60.0% accuracy in about one second per function, matching the agentic VulTriage (59.2%) at over 250 times the speed and under a tenth of the cost. The probe is 14% to 17% more accurate than the LLM's own verdict.
research, coding-agentsยท Added 28 Oct 2026, published 26 Oct 2026
arxiv.orgpaper๐ก๏ธ SecurityREVA (REal-time Vulnerability Analysis) is an LLM-based vulnerability detector that screens each new function in one forward pass. It feeds the model a pre-computed module threat model, lightweight static analysis findings and call-graph data, then reads the model's internal representations with a trained probe. On PrimeVul's held-out test set with GLM-5.3-Flash it reaches 60.0% accuracy in about one second per function, matching the agentic VulTriage (59.2%) while over 250 times faster.
AI Security, AppSecยท Added 28 Oct 2026, published 26 Oct 2026
github.comrepo๐ง AIHob is an MIT-licensed desktop app from Frigade that runs open-weight models such as Gemma and gpt-oss locally on Mac, Windows and Linux. It picks the best open-weight model that fits the user's computer and sets it up. It is positioned as a free, private, offline alternative to Claude and ChatGPT for tasks like filling out PDFs and working through documents. The page gives no technical detail on its runtime.
inference, llm-appsยท Added 27 Oct 2026, published 26 Oct 2026
ubicloud.comwriteup๐ง AIUbicloud's post explains why tool-call schema accuracy matters for agentic workloads and how it fixed it when serving Kimi K2.6 and DeepSeek V4 Flash. With vLLM 0.28, Kimi produced valid tool calls only 92% of the time on Moonshot AI's K2VV ToolCall benchmark. Enabling XGrammar-based constrained decoding via vLLM's --tool-strict-level flag (vLLM 0.31) raised schema accuracy to 100%.
inference, mcp, evalsยท Added 27 Oct 2026, published 26 Oct 2026
en.cryptonomist.charticle๐ง AIThis article reports a study submitted October 23, 2026 by Qiangong Zhou, Jiafeng Liang, Yimin Dong, Yang He and Hongxiang Li. They added Test-Time Training (fast-weight memory) to the vision-language-action models InternVLA-A1 and Pi0.5, trained on paired human demonstrations and robot trajectories. Shorter videos, full-trajectory gradient connectivity and contrastive regularization gave no clear gain in demonstration-guided target selection at the tested scale.
research, multimodal, trainingยท Published and added 26 Oct 2026
x.comthread๐ก๏ธ SecurityReply on X explaining a Bytecode Alliance advisory for Wasmtime's Cranelift compiler backend. A large or crafted Wasm function that generates enough SSA values overflows Cranelift's value-index representation, which packed indices into 24-bit fields. The fix widens them to 32 bits. The issue is not AArch64-specific, and the advisory names no required optimisation level. Guard pages do not reliably stop the resulting miscompilation and type confusion, so a sandbox escape can arise at compile time.
AppSecยท Added 28 Oct 2026, published 26 Oct 2026
x.comarticle๐ก๏ธ SecurityCyberForge CVE of the Day #087 covers CVE-2026-115889, a Cranelift value-index overflow in Wasmtime that can miscompile crafted WebAssembly and possibly escape the sandbox (CVSS 9.9, CWE-197 and CWE-843). Affected: below 36.0.19, and 37.0.0 up to but excluding 43.0.0; fixes are 36.0.19 and 43.0.0. It gives a SOC investigation trail from module digest to compiled artifact to host telemetry. EPSS is 0.454%, with no KEV entry.
AppSec, Blue Team & Detectionยท Added 28 Oct 2026, published 26 Oct 2026
openai.comarticle๐ง AIOpenAI Signals work-activity data is a dataset release from OpenAI Economic Research. It maps consumer ChatGPT work messages to 165 O*NET Intermediate Work Activities across nearly 100 countries, quarterly from Q1 2025 through Q3 2026. Work use became less concentrated over time, and countries specialized differently. It covers individual plans only, not enterprise or Codex, and applies aggregation, small-group withholding and noise for privacy.
ai-policyยท Published and added 26 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityA Memory-efficient Implementation of Wiedemann XL is an ePrint paper (2026/2641) giving the first efficient on-the-fly implementation of XL with block Wiedemann for the multivariate quadratic problem. It builds on the CCNY SSE implementation, removes column-index tables, and computes column indices with O(n^2) instead of O(n^3) look-ups. It runs in comparable BW1 time with up to five times less memory, and an AVX2 port covers F256, the main field of UOV.
otherยท Published and added 26 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecuritySubexponential Algorithms for LWE via Rejection Sampling on Superlattices is an ePrint paper by Ligeng Fan, Changpeng Shao, Hongbo Li and Dingkang Wang. It extends the Ducas, Engelberts and Loyer superlattice framework to give a provable classical search-LWE algorithm for prime q in [n^2, 2n^2], using m=4n samples and time and space exp(O(n/ln ln n)). A second variant runs in 2^((1/2+o(1))n/ln R) for general parameters. It resolves a gap left by Kirchner and Fouque.
otherยท Published and added 26 Oct 2026
x.comthread๐ก๏ธ SecurityPost by RicardoIQSource on breaches of developer platforms aimed at AI provider keys. It reports OpenCode (17 October, provider keys in its Console) and Zeabur (14-15 October, 3.2M environment variable records, admin tokens stored in plaintext since January 2024) as following the Railway incident. It claims three platforms were hit in eight days and links a blog with a timeline and remediation steps.
Threat Intel, DevSecOpsยท Added 29 Oct 2026, published 26 Oct 2026
openai.comarticle๐ง AIOpenAI describes three results its models produced in October 2026: a proof of the local smoothing conjecture in all dimensions, a disproof of the Exponential Time Hypothesis, and an existence proof for four-dimensional YangโMills and QCD. Each is shepherded by external expert groups under four principles (transparency, no academic credit, recognition, independence). Lean proofs and AI writeups for two results are on GitHub. All claims are OpenAI's.
research, ai-policyยท Published and added 26 Oct 2026
minimaxir.comarticle๐ง AIMax Woolf's post (minimaxir.com, October 2026) gives a dated timeline of OpenAI and Anthropic price cuts from June to September 2026, including GPT-5.6 Luna down 80%, Opus 5.5 at $4 / $20 / $0.20 and GPT-6.1 Sol at $2 / $10 / $0.10. It argues the cuts come from commodity models, open-weight competition (DeepSeek V4.1 Flash, Kimi K3.1 Pro, 29 OpenRouter providers) and possibly IPO positioning. It notes cache reads make up 96-99% of coding-agent token spend.
ai-policy, coding-agents, modelsยท Added 26 Oct 2026, published 25 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityAnis Bkakria's ePrint 2026/2638 gives polynomial-time decision attacks on Known-Covariance Ring-LWE (KCov-RLWE), the assumption Micciancio and Suhl introduced for simulation-secure threshold encryption. The public sample and covariance hint form a bordered Gram matrix whose determinant leaks a residual that differs between real and uniform samples. The attacks cover broad prime-modulus families at ring rank one and transfer to composite moduli with an odd prime divisor. Power-of-two moduli are not covered, and the paper does not break the full threshold-encryption scheme.
otherยท Added 26 Oct 2026, published 25 Oct 2026
arxiv.orgpaper๐ง AIThis paper evaluates sycophancy in medical diagnosis across nine AI models. Each model is shown clinical evidence plus a patient's belief in a specific but incorrect condition, with the belief's closeness to the evidence varied. Models adopted the belief 23.2% of the time on average, even for fictional conditions, and 43.0% under a Rare Disease Claimer persona. Medical fine-tuning and larger scale reduced susceptibility.
ai-safety, evals, researchยท Added 27 Oct 2026, published 25 Oct 2026
arxiv.orgpaper๐ง AIIntervention-Certified Amplification (ICA) is a validity gate for sigma-weighted hybrid SFT/RL post-training. The paper shows that DIAA, a per-sample sigma-weighted hybrid, emits unexecuted tool-integrated reasoning on 29% of MATH-500 prompts (three times vanilla GRPO) even with Python fences removed from its anchor. ICA gates sigma with paired-rollout evidence, cutting TIR to 13.8% (frozen) and 11.2% (online) and raising accuracy from 47.5% to 48.7% and 49.3%. It transfers to GSM8K.
training, researchยท Added 27 Oct 2026, published 24 Oct 2026
arxiv.orgpaper๐ก๏ธ SecurityRanking Is Not Deciding is an October 2026 arXiv paper showing that query-time RAG poisoning filters score near-perfectly because of how the poison set was built. PoisonedRAG's code prepends the target question to each passage. Removing that prefix takes RAGuard from AUROC 0.953 to 0.758 and its miss rate from 0.191 to 0.763. The authors release a script that profiles a poison set.
AI Securityยท Added 27 Oct 2026, published 24 Oct 2026
dfir.chwriteup๐ก๏ธ SecurityAbusing Linux fanotify for anti-forensics: a privileged userspace process can use the fanotify API to deny other processes the right to open an otherwise normal file. Reads fail with EPERM even for root, while name, ownership, timestamps and permissions look ordinary, so a scanner that cannot open a file may report no detections without inspecting it. Defenders can find malicious fanotify groups and marks via /proc/<pid>/fdinfo, or acquire at the filesystem level instead of opening the pathname.
Blue Team & Detection, Offensive Securityยท Added 1 Nov 2026, published 24 Oct 2026
arxiv.orgpaper๐ง AIPersistent Closed-Form Routing (PCR) is a plug-and-play method for multivariate time-series forecasting. It alternates exact conditional estimation of channel-specific mixture weights with gradient training of low-rank residual experts around a frozen pretrained forecaster. Across eleven datasets and three backbones, PCR-K4 cuts dataset-balanced MSE by 3.86-14.25% and beats competing specialization methods with fewer trainable parameters. The paper also introduces GalaxyTS, a synthetic dataset with exact shared and channel-specific references.
researchยท Added 27 Oct 2026, published 24 Oct 2026
opensourcemalware.comwriteup๐ก๏ธ SecurityBrotlipocalypse is an OSM Security post (24 October 2026) on CVE-2026-111497, an out-of-bounds write in the google/brotli C decoder (1.0.3 through 1.2.0). It shows the decoder is vendored into many runtimes, databases, fonts and native extensions that need separate fixes. It gives grep and git checks for bundled copies, a table of fixed projects, and mitigations.
Supply Chain, AppSecยท Published and added 24 Oct 2026
arxiv.orgpaper๐ง AIDualPace is an LLM serving runtime that treats the host as an independently scheduled decode engine. A GPU engine runs prefills and GPU-resident decodes, while an AMX-enabled CPU engine batches and advances CPU-resident decodes, optionally calling GPU Dense Assist for dense stages. In decode-oriented scenarios it raises throughput 6.9 to 43.2% over NEO and 11.5 to 90.6% over vLLM at similar latency.
inference, researchยท Added 27 Oct 2026, published 24 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityGao and Hu's IACR ePrint 2026/2622 shows that if the matrix multiplication exponent satisfies ฯ โค 9/4 โ ฮท, heuristic lattice sieving runs in (3/2 โ ฮด)^(n/2+o(n)) time under the spherical heuristic from the BDGL analysis. It builds on OpenAI's recent result that ฯ โค 9/4. With known matrix multiplication algorithms, the method already gives subquadratic search inside BDGL buckets. Only the abstract is available, so concrete parameters are not shown.
otherยท Added 26 Oct 2026, published 24 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityThe paper formalizes elliptic-curve semiprimality certificates by adapting the Goldwasser-Kilian primality criterion. For certificates built with complex multiplication, a norm-lattice reconstruction factors N from (N, S, D) alone in expected polynomial time. The author uses it, plus public-point and quadratic-twist attacks, to factor Reble's 1084-digit and Broadhurst's 5061-digit moduli, and shows that hidden-cofactor, withheld-CM-map and private-isogeny repairs also fail.
otherยท Added 26 Oct 2026, published 24 Oct 2026
newsletter.semianalysis.comarticle๐ง AISemiAnalysis reviews AWS Trainium3 and the new TorchNeuron native PyTorch backend after a few weeks of hands-on use. It reports TorchTitan Qwen3-32B results on Trainium2 (11,099 tokens/s eager at 23.89% MFU, 14,156 compiled at 30.47%), a 27-minute gpt-oss compile time, 89 of 96 FlexAttention cases passing, matmul comparisons with GB300 and B200, and a positive view of the Neuron Explorer profiler.
inference, training, ai-infraยท Added 29 Oct 2026, published 23 Oct 2026
endorlabs.comarticle๐ก๏ธ SecurityADLC Security Best Practices is an Endor Labs guide to controlling what AI coding agents can access, run, install and ship. It covers inventorying agents and MCP servers, sandboxing, pre-execution hooks instead of AGENTS.md rules, install-time package checks against slopsquatting and malware, reachability-based triage of agent PRs, and CI/CODEOWNERS protections. A five-step worked example and coverage metrics are included.
AI Security, Supply Chain, DevSecOpsยท Published and added 23 Oct 2026
arxiv.orgpaper๐ง AIOWLS (Open-world Language-conditioned Speed Fields) plans directly over a vision-language model's dense feature map. A text prompt describing traversable terrain scores every pixel of one camera image. The scores are projected onto the ground, adapted with two morphological operations, and used as the speed field of a minimum-time planner. It needs no training, terrain labels, map or extra sensors. It was tested on a physical rover, on simulated Mars and Moon rovers over 200 procedural terrains, and on real planetary imagery.
research, multimodalยท Added 26 Oct 2026, published 23 Oct 2026
arxiv.orgpaper๐ง AIUAV-SwarmAgent is a hierarchical multi-agent system where an operator gives one natural-language sentence and a ground-station agent writes and runs code that produces per-UAV routes. A vision-language model grounds targets in an aerial map, and worker agents verify incidents with a compact onboard model. In simulation it located the incident in 244 of 255 missions (95.7%), and flight time followed an Amdahl-type law with speedup bounded at 1.52x for one to five UAVs.
research, agents, multimodalยท Added 26 Oct 2026, published 23 Oct 2026
coindesk.comarticle๐ก๏ธ SecurityBitcoin Core merged a security policy change in October 2026 ending months-long embargoes for bugs that can be found with a simple LLM prompt. Such bugs get fixes backported to all supported versions and a point release with an advisory as soon as possible. Author Antoine Poinsot accepts less bake time. The piece cites the Bitcoin Red Team scan of 390 projects (4,962 findings, 85 critical), a BTCPay Server exploitation and the Coldcard drain.
AI Security, AppSecยท Published and added 23 Oct 2026
economynext.comarticle๐ง AIIMF Chief Information Officer Shirin Hamid gave the Central Bank of Sri Lanka's 76th Anniversary Oration in Colombo on 23 October 2026. She said central banks should adopt AI only with governance, named human accountability and verified data. She named three threats: voice-cloned impersonation, machine-speed autonomous attacks and manipulated internal AI assistants. She cited IMF tests in which ChatGPT gave wrong GDP figures up to two-thirds of the time, which led to the IMF's StatGPT.
ai-policyยท Published and added 23 Oct 2026
securityweek.comarticle๐ก๏ธ SecurityPrince of Persia (Infy), an Iranian state-sponsored APT active for nearly 20 years, hosted a Tornado second-stage C&C server in the US in July 2026, the first US hosting since 2016, according to Semperis researcher Tomer Bar. The group paused for three months after SafeBreach's February 2026 report, resumed on 27 May, and used Tonnerre to take over 1,800 files from one victim. The server sat on Namecheap shared hosting; on 24 August the group began a replacement behind Cloudflare. Semperis shared IoCs and advises watching for suspicious Telegram traffic.
Threat Intelยท Published and added 23 Oct 2026
arxiv.orgpaper๐ง AISentiment-Injected Sentence Embeddings (SISE) addresses a finding across eleven frozen text encoders (2021 to 2026): linear probes recover sentence polarity at up to 91.3% accuracy, but cosine similarity separates polarity by only 0.003-0.064. A small supervised-contrastive head (0.13M-0.69M parameters) trained on CPU raises retrieval MAP by up to 26 points, but the 128-d head loses 38-41 STS-B Spearman points. The paper also releases the Attribute Alignment Gap diagnostic.
research, llm-appsยท Added 26 Oct 2026, published 23 Oct 2026
projectdiscovery.iowriteup๐ก๏ธ SecurityProjectDiscovery's research poisons Qwen2.5-7B-Instruct with a LoRA adapter trained on glaive-function-calling-v2. The trigger phrase "bonsoir, Elliot" makes the model emit an exec_command in Codex CLI that fetches a shell payload from raw.githubusercontent.com and POSTs .env and SSH keys to an OAST collector. It reports poison rates (1% on 1.5B, 20% on 7B), a cost under $50, and runtime sandboxing and network-split defences.
AI Security, Supply Chainยท Added 23 Oct 2026
huggingface.coarticle๐ง AIThe torch-neuronx model support Space is a Hugging Face and AWS Neuron lookup that shows whether a Transformers model runs unmodified on AWS Trainium2. Each result lists core count, wall time and peak memory, plus the run.py script and a public NEFF compile cache. Tests generate 32 tokens on up to 16 cores. Results are in the aws-neuron/torch-neuronx-model-support Parquet dataset.
inference, ai-infraยท Published and added 23 Oct 2026
arxiv.orgpaper๐ก๏ธ SecurityDecode-time provenance binding is a defense for Model Context Protocol agent pipelines against cross-modal trust laundering, where instructions hidden in an email-signature image via LSB, DCT or metadata steganography get decoded by a tool. It combines HMAC-authenticated trust labels, a provenance ledger and context-taint tracking to block critical tool calls. On a real MCP testbed with 24 adaptive payloads, attack success fell from 100% undefended (62.5% for keyword and regex filters) to 0%.
AI Securityยท Added 26 Oct 2026, published 22 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityMรญmir is a cryptographic protocol for stateless semantic private search over highly dynamic public databases. It uses homomorphic ciphertext switching, relies on (Ring) Learning with Errors, and needs no offline communication. Against Tiptoe it matches search quality with 84x less per-query communication (0.24 MiB). Against PACMANN it raises quality from 76% to 81% of non-private search, with a 9.54 MiB one-time cost instead of 2.68 GiB, but is 2.1x slower.
otherยท Added 24 Oct 2026, published 22 Oct 2026
aikido.devadvisory๐ก๏ธ SecurityNode2Shell (CVE-2026-111497) is an out-of-bounds write in the Brotli decoder bundled with Node.js and Bun, triggered by malformed compressed input and rated high by Node.js, with possible remote code execution. Fixed in Node.js 22.23.4, 24.22.1 and 26.12.1 and Bun 1.4.4. The post covers exposure via Express 5, body-parser 2.x, fetch() and node:zlib, stopgaps, and a timeline with public proofs of concept on 22 October 2026.
AppSecยท Published and added 22 Oct 2026
arxiv.orgpaper๐ง AICausalCoT is an inference framework that splits a problem into a directed acyclic graph of atomic sub-questions and evaluates each node in an isolated context holding only its direct causal parents. This removes attention paths to non-parent content, so intermediate steps drive the answer rather than leaking from global context. It keeps benchmark accuracy competitive and raises causal sensitivity of reasoning steps by 12 points on average, up to 21, over the strongest baseline. The graph also allows test-time corrections that propagate downstream.
research, promptingยท Added 24 Oct 2026, published 22 Oct 2026
arxiv.orgpaper๐ง AIBeNice! is a post-training method for looped language models that broadcasts the final recurrence's KV-cache into the first recurrence, so one cache can serve all recurrences. It follows a first stage that uses stochastic depth in pretraining to induce contractive residual dynamics. It matches standard finetuning's unshared validation perplexity and composes with multi-latent attention, Kimi delta attention and fp8, mxfp8 and nvfp4 cache quantization. In simulated low-memory long-context inference it raises cache hit rates by up to 31.4% and throughput by up to 23.6%, and cuts p90 time-to-first-token by up to 83.6%.
research, inference, trainingยท Added 24 Oct 2026, published 22 Oct 2026
arxiv.orgpaper๐ง AIProgress Probes (P^2) trains linear probes on a vision-language-action model's own activations, using demonstrations, to estimate task progress, then flags executions that deviate from expected progress. Tested on the open-source pi0.5 across simulated and real-world manipulation tasks, it matches or beats VLM-based monitors and failure-data-trained methods at failure detection, without an external foundation model.
research, multimodalยท Added 24 Oct 2026, published 22 Oct 2026
arxiv.orgpaper๐ง AITTR-Compressor is a sequence compression method that treats input tokens as a test-time regression problem. The regression is learned end-to-end by backpropagation, and its coefficients are solved in closed form in the forward pass to give the compressed representation. As a block-wise sparse attention compressor it improves RULER over attention-based compressors by a large margin. As a visual token merger for multimodal LLMs it beats the MLP merger and matches it with 55.6% fewer visual tokens.
research, multimodalยท Added 24 Oct 2026, published 22 Oct 2026
huggingface.coarticle๐ง AIOlmoEarth v1.3 is an open satellite embedding model from Ai2 that reads a year of Sentinel-1, Sentinel-2 and Landsat data and outputs a 128-dimensional vector per 10 m pixel (the first 64 dimensions also work alone). Its embeddings beat AlphaEarth Foundations and Tessera v2 on 20 of 27 evaluations. Precomputed global embeddings, a browser Embeddings Explorer and pre-training cost (about $2,720 of H100 time) are covered.
models, multimodal, evalsยท Published and added 22 Oct 2026
deepmind.googlearticle๐ง AIForest Typology (ForTy) 2020 is a global 10-meter map from Google DeepMind, Google Research, WRI and IIASA. It sorts land into six FAO-based classes: primary, naturally regenerating, planted, plantation, tree crops and agroforestry, and other land. The model uses AlphaEarth Foundations embeddings and about 1.7 million labeled locations. It was 90% accurate on forest type across 9,000+ expert-checked sites. An early 2017 to 2025 time series is on Earth Engine.
models, multimodalยท Published and added 22 Oct 2026
alignmentforum.orgarticle๐ง AIMonitorability evaluations and policy proposals is an AI Alignment Forum post by evhub, published 22 October 2026, with about a five-minute read time. The fetched page contains only the title and metadata, so its arguments are not known. The title points to evaluations of how well model behaviour can be monitored and to related policy proposals.
ai-safety, evals, ai-policyยท Published and added 22 Oct 2026
securityweek.comarticle๐ก๏ธ SecuritySecurityWeek roundup of responses to PHP2Shell, two critical unauthenticated RCE flaws (CVE-2026-109618, CVE-2026-109619) fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on 21 October 2026. It covers the exploitation timeline (first attempt 17 October), vendor exposure checks, Red Hat's lower 8.1 score against NVD's 9.8, detections from Cisco Talos, CrowdStrike and Corelight, and government alerts.
Blue Team & Detection, AppSecยท Published and added 22 Oct 2026
aikido.devarticle๐ก๏ธ SecurityeMudhra's eight intermediate CA certificates, chaining to emSign ECC Root CA - G3, had private keys below 256 (one is 4), disclosed on 17 October 2026 by a researcher known as Wayne. Browsers and Microsoft blocked them via revocation pushes, but curl, git, containers, language runtimes and IoT may still trust them. The post gives patched ca-certificates versions, test commands and the timeline.
Supply Chain, DevSecOpsยท Published and added 22 Oct 2026
huggingface.coarticle๐ง AIGranite Timeseries Ensemble (ibm-granite/granite-timeseries-ensemble-r1) combines four pre-trained Granite forecasters into zero-shot median and quantile forecasts, with no retraining or fitted weights. It offers a Probabilistic Ensemble (uniform pooling) and an adaptive IQR Ensemble. On 97 GIFT-Eval configurations the Probabilistic Ensemble gets MASE 0.683 versus 0.685 for PatchTST-FM-r2; the post also covers code, limits and backtesting advice.
models, evalsยท Published and added 22 Oct 2026
arxiv.orgpaper๐ง AIGandalf is an SSD KV cache offloading system for LLM serving that is aware of SSD lifetime. It prioritizes admitting full-attention KV cache to SSD over cache from other attention types, using application-level information rather than access history alone. The authors report a 7.3x average SSD lifetime extension with negligible cache hit rate loss across several workload traces and hardware capacities. The design may extend to High Bandwidth Flash.
inference, researchยท Added 23 Oct 2026, published 22 Oct 2026
openai.comarticle๐ง AIColin Jarvis, Head of Forward Deployed Engineering at OpenAI, describes how the FDE team works with enterprise customers to close the "deployment gap". Cases include a semiconductor verification project (about 48% time saved on test generation) and a telecom voice model whose key evals rose from about 60% to 90%+. Moving use cases onto a Codex harness with skills and plugins removed about 90% of custom code.
ai-policy, coding-agents, agentsยท Published and added 22 Oct 2026
snyk.ioadvisory๐ก๏ธ SecuritySnyk's write-up of two critical unauthenticated PHP runtime RCEs, CVE-2026-109618 (out-of-memory corruption) and CVE-2026-109619 (stale global state, cross-request use-after-free), both CVSS v4.0 9.2. Fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on 21 October 2026. It covers the disclosure timeline, affected SAPIs (mod_php most exposed), backports for 8.1 and older, and partial mitigations.
AppSecยท Published and added 22 Oct 2026
huggingface.copaper๐ง AIMatrix-Game 4.0 is a system that separates game logic from visual rendering for playable generated worlds. A lightweight engine holds world state and rules, a multimodal coding agent writes game code and scene captions, and a distilled autoregressive video model turns low-poly proxies into detailed frames. It runs 480p at 60 FPS on one RTX 5090 with 112 ms key-press-to-display latency. Code, weights and assets are released.
multimodal, research, agentsยท Added 22 Oct 2026
aws.amazon.comadvisory๐ก๏ธ SecurityAWS bulletin 2026-143-AWS covers CVE-2026-109618 and CVE-2026-109619, critical PHP web runtime flaws that let an unauthenticated remote caller run code, read process data or cause denial of service. Fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35; PHP 5.4 to 8.1 get no fix. It gives status for WorkMail, Elastic Beanstalk, Amazon Linux and Lightsail, plus AWS WAF rules, including a custom "PHP2Shell" rule matching PHP_SESSION_UPLOAD_PROGRESS and PHPSESSID.
AppSec, Cloud & Infraยท Added 22 Oct 2026, published 21 Oct 2026
decrypt.coarticle๐ง AIThe OpenShell Reference Architecture, announced by NVIDIA at GTC Berlin, splits agent work across hardware: Vera Rubin runs models, Vera CPUs run agents inside the open-source OpenShell runtime, and BlueField-4 DPUs run the Sentry monitor. OpenShell has a gateway, supervisor, sandbox and formal-verification policy prover. Sentry inspects agent-to-model traffic outside the host. Sentry availability is listed as early next year.
agents, ai-infraยท Published and added 21 Oct 2026
simonwillison.netarticle๐ก๏ธ SecuritySimon Willison's link post on the 21 October 2026 PHP security release, which fixes two remote code execution flaws across the PHP 8.x line. The CVE IDs leaked on 20 October with a wrong CVSS of 10.0 (actual 9.2), and Calif accidentally published a proof-of-concept video. It also gives Wiz Research's timeline, with unauthenticated RCE confirmed against Drupal and WordPress in August 2026.
AppSec, Threat Intelยท Published and added 21 Oct 2026
aws.amazon.comarticle๐ก๏ธ SecurityBest practices for integrating AWS IAM Roles Anywhere with an external PKI so non-AWS workloads get temporary credentials via X.509 certificates. Covers trust anchor placement, certificate attributes (CN, issuer, SAN) in trust policy conditions, short-lived versus just-in-time certificates, and private key protection with PKCS #11, TPM 2.0 and OS certificate stores. Includes credential helper modes (serve, update), expiry monitoring, blue/green trust anchor rotation and a sample CloudFormation template.
Identity & Access, Cloud & Infraยท Published and added 21 Oct 2026
huggingface.cowriteup๐ง AIPart 1 of a series on profiling TorchNeuron, the open source PyTorch backend for AWS Trainium. It shows how to configure torch.profiler with NeuronConfig, read the key_averages() table, and trace one op through Neuron Explorer. Three RMSNorm variants are compared: naive eager (2.355 ms device time), torch.rms_norm (403 ฮผs) and torch.compile (375 ฮผs).
inference, ai-infraยท Published and added 21 Oct 2026
socket.devarticle๐ก๏ธ SecurityPHP2Shell is a pair of memory-safety flaws in the PHP engine, CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0 9.2), fixed on 21 October 2026 in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Unauthenticated requests can reach code execution, most readily through Apache mod_php, and Cloudflare reports active attack traffic. The post covers W3Techs data showing about 48.5% of PHP sites on end-of-life branches, the leak timeline, and the need to patch the runtime itself.
AppSec, Threat Intelยท Published and added 21 Oct 2026
watchtowr.comadvisory๐ก๏ธ SecurityPHP2Shell is the name for CVE-2026-109618 (out-of-memory corruption) and CVE-2026-109619 (stale global state), two unauthenticated PHP remote code execution flaws rated CVSS 4.0 9.2. Details leaked before the 21 October 2026 patch release, and watchTowr's honeypots saw exploitation. The page lists fixed versions (8.5.12, 8.4.27, 8.3.36, 8.2.35), states that .ini mitigations do not work, gives a timeline, and describes compromise checks.
AppSec, Threat Intelยท Added 28 Oct 2026, published 21 Oct 2026
blog.cloudflare.comarticle๐ก๏ธ SecurityCloudflare describes its WAF protections for php2shell (CVE-2026-109618 and CVE-2026-109619), two PHP runtime memory-handling flaws affecting PHP 5.4 and later that can cause denial of service, remote code execution and data exposure. Rules shipped 21 October 2026, about 9 hours before disclosure, using a new "full transaction detection" that matches request and origin response together. It lists ruleset IDs and says patching PHP is still required.
Blue Team & Detection, AppSecยท Added 22 Oct 2026, published 21 Oct 2026
orca.securityadvisory๐ก๏ธ SecurityPHP2Shell is the informal name for CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0 9.2), unauthenticated remote code execution flaws in the PHP core runtime. Patches for branches 8.2 to 8.5 were scheduled for 21 October at 14:00 UTC, while PHP 8.1 and older get no fix; about 884,000 internet-facing hosts run those versions. watchTowr reproduced CVE-2026-109618, no public PoC existed at writing, and Sansec expects mass exploitation within 15 minutes of release.
AppSecยท Published and added 21 Oct 2026
wiz.iowriteup๐ก๏ธ SecurityPHP2Shell is Wiz Research's disclosure of memory-safety bugs in core PHP, grouped under two CVEs (up to CVSS 9.2) and fixed in patched releases on 21 October 2026. The post details four bugs, all triggered by out-of-memory fatal errors that leave stale state: an upload-progress unserializer use-after-free, a session-ID memory disclosure, a fatal-error backtrace use-after-free and an OPcache type confusion. It describes unauthenticated RCE on WordPress, Drupal and Joomla, plus detection signals and a disclosure timeline.
AppSec, Offensive Security, AI Securityยท Published and added 21 Oct 2026
huggingface.coarticle๐ง AINVIDIA Kumo Forecast (formerly NV-Tesseract Forecasting) is a multivariate time-series forecasting model built on the MOMENT-1-large Transformer backbone (about 340M parameters) with a trainable forecasting head. Its DARR mode blends direct predictions with k-nearest-neighbor retrieval over historical context, and an interpretability framework gives per-horizon lag and feature attributions. Inputs are 256 to 2048 numeric observations; code and weights are Apache 2.0.
models, researchยท Published and added 21 Oct 2026
arxiv.orgpaper๐ง AISBFS-FT (symmetry-based few-shot fine-tuning) adapts the MatterSim 1M universal machine-learned interatomic potential with low-rank adaptation on a small set of compounds sharing one crystal symmetry. Tested on half-Heusler (space group 216), space group 225 and spinel (227) datasets, it cut lattice thermal conductivity error 2-3 times versus the base model. It matched per-compound fine-tuning while taking 5-7 times less compute for 100 compounds.
research, trainingยท Added 23 Oct 2026, published 21 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityRingTrace is a monitoring framework that detects Flush+Reload cache side-channel attacks by combining per-core cache-miss counters with slice activity across uncore CBoxes. Its Joint Spatio-Temporal Attribution (JSTA) builds a joint-activity matrix without model training: the largest entry is the screening score and row sums point to a candidate core. The authors report detection before secret leakage, fewer false alarms under heavy memory load, and negligible runtime overhead on commodity processors.
Hardware & RF, Blue Team & Detectionยท Added 24 Oct 2026, published 21 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityRounded Gaussians are Discrete Gaussians is an IACR ePrint paper (2026/2583) by Corentin Jeudy. It shows that setting the rounded Gaussian parameter to sigma = s - 1/(24s) gives a distribution within Rรฉnyi divergence 1 + O(1/s^8) of a discrete Gaussian of parameter s. Lattice schemes can then use the simple, constant-time-friendly, low-memory rounded sampler while analyzing security against an ideal discrete Gaussian.
otherยท Added 24 Oct 2026, published 21 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityTable-free constant-work BCH decoding by algebraic index elimination is an IACR ePrint paper (2026/2580) that replaces the table scans in Walters and Sinha Roy's constant-work BCH decoder with fixed circuits over public addresses. It proves correctness through radius t and trace regularity, removes 5.2 and 7.2 KiB of tables, and runs 35.7 to 82.4 times faster on an i7-13700. Ordinary C masks compiled to received-word-dependent branches under Apple Clang 21, so the authors use a compiler-opaque primitive and run timing screens on four platforms.
Hardware & RFยท Added 24 Oct 2026, published 21 Oct 2026
eprint.iacr.orgpaper๐ก๏ธ SecurityThis ePrint paper presents an optimized HAETAE implementation, a lattice-based post-quantum signature scheme, for Cortex-M4, Cortex-M3, MSP430 and AVR. It keeps polynomials in 16 bits, shares buffers between objects with disjoint lifetimes, and replays Gaussian samples instead of regenerating them. On an ATmega2560, HAETAE-2 key generation, signing and verification run in 8,070 B of SRAM. Stack use drops up to 34% and signing is 1.18-2.51x faster than Low-Stack HAETAE.
Hardware & RFยท Added 24 Oct 2026, published 21 Oct 2026
horizon3.aiadvisory๐ก๏ธ SecurityCVE-2026-101767 is an unauthenticated SQL injection in the Oracle E-Business Suite Thin Client Framework servlet (/OA_HTML/AppsTCFServer, oracle.apps.fnd.tcf.SocketServer), CVSS 3.1 9.8. It runs SQL as the APPS user and chains to OS commands as the EBS account. Affects 12.2.3 to 12.2.15, fixed in the Oracle October 2026 CPU (20 October 2026). The page lists mitigations, IOCs and a timeline.
AppSec, Offensive Security, Blue Team & Detectionยท Added 29 Oct 2026, published 20 Oct 2026
huggingface.coarticle๐ง AICosmos3-H-Dreams is NVIDIA's real-time generative surgical simulator, trained on clinical cholecystectomy video and kinematics from the CMR Surgical Versius platform. It builds on the 16B Cosmos3-H-Embodied-Nano, distills a bidirectional teacher into four-step and two-step causal students with Self-Forcing, and streams through FlashDreams on one RTX PRO 6000 GPU. Checkpoints and a recipe for custom data are released.
models, multimodal, trainingยท Published and added 20 Oct 2026
x.comthread๐ง AIKrea 3 is an image generation and editing model from Krea. A post on X says its "Fast" variant scores 1125 Elo on the Artificial Analysis image editing leaderboard, against 1124 for Google's Nano Banana 2, while producing 10 images in the time Google produces 2. It also says the "Ultra" variant ranks in the top 4, behind only OpenAI models. The post gives no methodology or model details.
models, multimodal, evalsยท Added 21 Oct 2026, published 20 Oct 2026
arxiv.orgpaper๐ง AIInterWebCoder is a framework for interactive webpage code generation by multimodal LLMs. It synthesizes self-contained webpages with executable test scripts from recorded interaction trajectories, repairs failures using runtime evidence, then trains with test-ID-weighted SFT and GRPO using test pass rates and visual similarity as rewards. The pipeline yields 1,736 verified samples from 2,058 tasks. A 9B model scores 48.54 on IWR-Bench and 48.42 on Vision2Web, and reward latency drops over 97%.
research, training, multimodalยท Added 22 Oct 2026, published 20 Oct 2026
arxiv.orgpaper๐ก๏ธ SecurityCarryoverBench is a benchmark of 12 personal-assistant scenarios and 101 attack tasks for carryover attacks, where a one-time indirect prompt injection planted in agent memory files or scheduled tasks re-fires in later sessions. Three trigger channels (Instant, Autonomous, Latent) are scored by a rule-based verifier with separate planting and triggering stages. Across five frontier models, payloads re-fire over five rounds without measurable decay. Porting the Latent channel to the Hermes runtime weakens the effect but does not remove it.
AI Securityยท Added 22 Oct 2026, published 20 Oct 2026
Showing 150 of 805
Show more