Skip to content

82 results for “IAM”

ListGrid
What you seeeverything
RecentOldestAddedA–Z
All types82Articles44Write-ups15Repos7Threads6Papers5
Advisories2Tools2Talks1
“IAM”
bleepingcomputer.comarticle🛡️ Security

Google: LLMjacking attacks rack up $1 million in cloud AI charges

LLMjacking is the abuse of stolen API keys and exposed LLM endpoints to run fraudulent model calls. Google's GTIG and Mandiant report charges above $100,000 per day and up to $1,000,000 cumulatively at some victims. Attackers resell access through "LLM mixers" such as Jet Night and newapi[.]pro; cluster UNC6993 and LiteLLM CVE-2026-40217 exploitation are noted, with IAM, MFA, spending-limit and logging advice.

LiteLLMLLMGitHub+2
CVE-2026-40217LLMjackingUNC6993+6

Threat Intel, AI Security, Cloud & Infra· Published and added 3 Nov 2026

bleepingcomputer.comarticle🛡️ Security

Google adds new $250,000 Cloud VRP reward for Root-in-Cloud bugs

Google expanded its Cloud Vulnerability Reward Program with a $250,000 top-tier reward for Root-in-Cloud bugs, such as tenant-isolation bypasses and cross-service logic flaws that give full administrative control (roles/owner or complete IAM control) over arbitrary Google Cloud organizations. Exploits cannot rely on prior access, stolen credentials or user interaction, and researchers reaching Borg execution must stop probing. Proof uses a designated service account, not real customer projects.

Google CloudBorg
GoogleChris BetzMichael Cote+3

Cloud & Infra, other· Published and added 3 Nov 2026

securityweek.comarticle🛡️ Security

Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward

Google Cloud Vulnerability Reward Program has added a $250,000 root-in-cloud tier for exploits that give roles/owner or full IAM control over arbitrary Google Cloud organizations or projects. The exploit path cannot rely on prior project access, stolen credentials or social engineering. Remote code execution in Borg also qualifies, but researchers must stop probing immediately. Proof is made against a designated service account using a deterministic proof-of-root mechanism.

Google CloudBorg
GoogleCloud VRPChris Betz+2

Cloud & Infra, Offensive Security· Published and added 2 Nov 2026

x.comthread🧠 AI

Luke The Dev (@iamlukethedev) on X

Hermes, the Nous Research agent framework, shipped 130 merged PRs in October 2026, according to this X recap by Luke The Dev. Main items are a unified gateway runtime, a Desktop and Bot Screen, a bundles and package manager, crash-safe updates and new Claude model entries. Ten PRs cover security: an iron-proxy credential-injection egress firewall for sandboxes, 31 CVEs patched in Python and npm lockfiles, and profile-export and prompt-leak fixes.

Hermesiron-proxyPython+2
Nous ResearchLuke The Dev

agents, ai-infra· Added 2 Nov 2026

x.comthread🧠 AI

Artificial Analysis (@ArtificialAnlys) on X

Artificial Analysis launched an HLE-Diamond leaderboard in v5 of its Intelligence Index, covering the refined 1,000-question Humanity's Last Exam from CAIS and Scale AI. Each question runs once without tools, graded by GPT-5.6 Luna (medium) as pass@1. Gemini 4 Carbon (high) leads at 69%, Claude Opus 5.5 (max) scores 68%, and the top open weights model, Kimi K3.1 Pro, reaches 37%.

Artificial AnalysisArtificial Analysis Intelligence IndexHLE+9

evals, models· Published and added 30 Oct 2026

microsoft.comarticle🛡️ Security

Tracking AI adoption in North Korean threat actor tradecraft

Microsoft Threat Intelligence report on how North Korean actors use AI, ranking Jade Sleet, Coral Sleet and Jasper Sleet as operationalized, Diamond Sleet, Onyx Sleet, Pearl Sleet and Sapphire Sleet as accelerating, and Emerald Sleet as expanding. It documents AI-generated lures (100+ Onyx Sleet PDFs, August and September 2026), AI-built tooling such as Coral Sleet's private GitHub repository trojanizing, and Onyx Sleet and Pearl Sleet use of the ARTEX agentic pentest framework. It ends with mitigation and Defender guidance.

CursorGitHubRust+2
Jade SleetOnyx SleetCoral Sleet+9

Threat Intel, AI Security· Published and added 29 Oct 2026

artificialanalysis.aiarticle🧠 AI

Gemini 4 Carbon is the new #1 on the Artificial Analysis Intelligence Index v5

Gemini 4 Carbon scores 59 on Artificial Analysis Intelligence Index v5 (published 28 October 2026), the top score, with #1 on 4 of 9 evaluations including HLE-Diamond and AA-Omniscience. On the Coding Agent Index it scores 59 with Antigravity CLI, 3 points behind Claude Code with Claude Opus 5.5 (62). Cost is $7.76 per task, versus $10.04 for Opus 5.5. Rollout is limited to selected users.

GeminiClaude CodeGoogle Antigravity+2
Artificial AnalysisArtificial Analysis Intelligence IndexGemini 4 Carbon+10

evals, models, coding-agents· Added 30 Oct 2026, published 29 Oct 2026

arxiv.orgpaper🧠 AI

inkGround: Benchmarking Fine-grained Visual Grounding Capabilities of Vision-Language Models for Cursive Handwriting in the Wild

inkGround is a benchmark for stroke trajectory recovery from full-page, camera-captured handwriting, with 537 page images (about 18.7k words, 163k strokes) and pseudo-label references filtered by OCR agreement and human raters. Models get a page image and a target word, then output ordered stroke points. Seven VLMs were scored with DTW, Chamfer distance, readability and style similarity. Closed-source models, notably Gemini-3.1-Pro, did best, and the ranking held on IAM-OnDB.

vision-language model
inkGroundIAM-OnDBGemini-3.1-Pro+1

evals, multimodal, research· Added 30 Oct 2026, published 28 Oct 2026

decrypt.coarticle🧠 AI

OpenAI Proves ETH Is False, and Crypto Twitter Has Questions

Decrypt reports that OpenAI published a 67-page paper (dated 17 October 2026, revised 25 October) claiming its AI found a deterministic subexponential-time algorithm for counting 3-SAT solutions, which would refute the Exponential Time Hypothesis. The proof was formalized in Lean. Impagliazzo, Paturi and Ryan Williams are reviewing it independently and say this is not certification. Anthropic posted a Claude-credited 3-SAT paper on 26 October.

LeanGitHubClaude
OpenAIAnthropicDecrypt+7

research, models· Published and added 27 Oct 2026

x.comthread🛡️ Security

Nicholas Martin (@ndgmlondon) on X

X thread started by Nicholas Martin (#IAM) advising that MCP tool permissions be verified and scoped session tokens used to enforce least privilege against indirect prompt injection. Replies argue that token scoping does not solve the confused deputy problem, because an injection borrows the agent's legitimate authority. They recommend per-task tokens with short expiry, with the grant logged beside the call, and raise MCP server dependency supply-chain risk.

Model Context Protocol
indirect prompt injectionconfused deputy

AI Security, Identity & Access· Added 28 Oct 2026, published 27 Oct 2026

x.comthread🧠 AI

Syb (@DegenOfWallSt) on X

Nanbeige4.3-33B is a 33.1B dense, Llama-style open model under Apache-2.0, released with a base model on Hugging Face. In Nanbeige's own table it beats Qwen3.8-27B on Terminal-Bench 2.1 (80.9 vs 73.0), DeepSWE (65.5 vs 42.5) and Automation Bench, but trails on SWE-Bench Pro, GDPval and GPQA Diamond. BF16 weights are about 66 GB, split across 4 GPUs in the vLLM and SGLang examples. No independent evals exist yet.

Hugging FacevLLMSGLang+4
Nanbeige4.3-33BNanbeige4.3-3BNanbeige+8

models, coding-agents, evals· Added 26 Oct 2026, published 25 Oct 2026

decrypt.coarticle🛡️ Security

Sweden's Government Offices Block ChatGPT and Claude, Keep Microsoft Copilot

Sweden's Government Offices will block ChatGPT and Claude on staff computers from 26 October 2026 and leave Microsoft Copilot as the only approved AI tool, citing information security. Digitalisation director Mikael Wettercrantz said unvetted AI use had involved sensitive inputs and poorly handled outputs. The Tax Agency and National Board of Institutional Care have similar bans, and the European Parliament disabled AI features in February 2026. Whether Copilot has Claude models enabled is unconfirmed.

ChatGPTClaudeMicrosoft Copilot
Swedish Government OfficesMikael WettercrantzSveriges Radio+5

GRC· Published and added 24 Oct 2026

tldrsec.comarticle🛡️ Security

[tl;dr sec] #351 - PHP2Shell, Autopatching Skills, AWS Pathrunner

tl;dr sec #351 is a weekly security newsletter. Clint Gibler describes working with OpenAI, Calif, Wiz and the PHP maintainers on the PHP2Shell unauthenticated RCE disclosure, which affects 13 years of PHP. It also covers Datadog's pathrunner AWS IAM escalation framework, Trail of Bits' patching-bugs and regression-hunt Codex plugins, XBOW finding de-duplication, backdoored open-weight models, and CREBench.

PHPAWS IAMCodex+3
PHP2ShellPatch the PlanetCalif+10

AppSec, AI Security, Cloud & Infra· Added 30 Oct 2026, published 22 Oct 2026

aws.amazon.comarticle🛡️ Security

Best practices for integrating IAM Roles Anywhere with your PKI

Best practices for integrating AWS IAM Roles Anywhere with an external PKI so non-AWS workloads get temporary credentials via X.509 certificates. Covers trust anchor placement, certificate attributes (CN, issuer, SAN) in trust policy conditions, short-lived versus just-in-time certificates, and private key protection with PKCS #11, TPM 2.0 and OS certificate stores. Includes credential helper modes (serve, update), expiry monitoring, blue/green trust anchor rotation and a sample CloudFormation template.

AWS IAM Roles AnywhereAWS IAMAWS Private CA+3
X.509trust anchorPKCS #11+5

Identity & Access, Cloud & Infra· Published and added 21 Oct 2026

wiz.iowriteup🛡️ Security

From Phishing to LLMjacking: Threat Actors Targeting Cloud Billing Accounts for LLM Usage

Wiz CIRT investigation of LLMjacking campaigns against Google Cloud billing accounts. Attackers phished admins through malicious Google Search ads and a fake login page that captured MFA codes, then deleted the iam.allowedPolicyMemberDomains policy, added Gmail accounts as billing admins, and linked attacker-controlled projects to the victim's billing account. Victims saw tens to hundreds of thousands of dollars in Gemini API charges within 24 to 48 hours, with no log visibility into prompts. Includes hunting guidance for Workspace, Admin Activity and billing logs.

Google CloudGeminiGoogle Workspace+1
LLMjackingWiz CIRTiam.allowedPolicyMemberDomains+5

Cloud & Infra, Threat Intel, Blue Team & Detection· Published and added 20 Oct 2026

halborn.comarticle🛡️ Security

Explained: The Ledger Supply Chain Incident (October 2026)

The Ledger supply chain incident of October 2026: on-chain analysis estimates $93 million was stolen after devices sold by the reseller CryptoBilis carried an implant with an eSIM. The implant watched the screen during setup, captured the 24-word recovery phrase and sent it over LTE, without touching the Secure Element. Tether froze about $10 million USDT. Reports from Changi Airport and MediaMarkt stores remain unconfirmed.

Ledger
CryptoBilisMark KarpelèsTether

Blockchain, Hardware & RF, Supply Chain· Added 20 Oct 2026

securitylabs.datadoghq.comtool🛡️ Security

Datadog pathrunner: AWS IAM privilege escalation framework

pathrunner is a modular offensive framework from Datadog Security Labs that automates exploitation of the AWS IAM privilege escalation paths catalogued in pathfinding.cloud and deployed in Pathfinding Labs. It has over 80 exploit modules (as of October 2026), identity import and switching, multiple payloads per module, and attacker infrastructure deployment with a credential listener. A workspace report lists created resources and expected CloudTrail events for defenders.

AWSAWS IAMAWS Bedrock
pathrunnerpathfinding.cloudPathfinding Labs+2

Cloud & Infra, Offensive Security, Blue Team & Detection· Added 23 Oct 2026, published 20 Oct 2026

rekt.newswriteup🛡️ Security

Factory Sealed – Rekt (Ledger/CryptoBilis hardware implant drains)

Rekt write-up on LTE-equipped hardware implants found in Ledger Nano X and Flex wallets sold through resellers such as CryptoBilis and MediaMarkt. The implants read the recovery phrase off the screen during setup and exfiltrate it over an eSIM/LTE modem, so Ledger's Genuine Check and Secure Element never detect them. It covers the teardown timeline (Joe Grand, Mark Karpelès, a Japan-based researcher), the 47-minute multi-chain drain (Bitquery estimates about $102M across 324 wallets, unverified by Ledger), the laundering path via USDD, THORChain, Tornado Cash and Zcash, the CryptoBilis ownership change, and the failure of "authorized reseller" trust.

LedgerTrezorTron+3
CryptoBilisMark KarpelèsJoe Grand+14

Blockchain, Hardware & RF, Threat Intel· Added 17 Oct 2026

securityweek.comarticle🛡️ Security

In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit

SecurityWeek's weekly roundup covers ICS-Sniper, a UBC proof-of-concept that uses VPN-encrypted packet size, direction and timing to drop critical SCADA traffic on cloud-hosted ICS (tested on the SWaT water testbed). It also covers an unauthenticated RCE PoC against the XWorm RAT C2 panel (up to 7.4) via path traversal DLL overwrite, and Langflow CVE-2026-105740 (MCP Stdio command injection, fixed in 1.9.0) exploited from September 19, before the CVE was published. Other items: XBOW's AI-assisted Chrome full-chain exploit (GPT-5.6 Sol, $250k bounty), Group-IB's KGB RAT analysis, Anthropic's disclosure of Claude rule-bending on live sites, Intel ending SGX after Diamond Rapids, Bank of America's Mythos-driven patching, the Burger King Japan breach and a West African scam-center takedown.

LangflowChromeXBOW+3
CVE-2026-105740ICS-SniperXWorm+12

Threat Intel, AI Security, Offensive Security· Published and added 16 Oct 2026

aws.amazon.comarticle🛡️ Security

Penetration testing every deployment with AWS Continuum

Explains how to add AWS Continuum for penetration testing (formerly AWS Security Agent) as a post-deployment gate in CI/CD. Each run is scoped to the commit range since the last passing gate, and it can block promotion to production at a chosen severity threshold. It covers OIDC federation to a least-privilege IAM role, a GitHub Actions worked example, staged report-only rollout, and pitfalls: the baseline advances on passing report-only runs, fail-on-infrastructure-error defaults to fail-open, GitLab pipeline variables can override the committed threshold, and runner credentials need protecting.

AWS ContinuumGitHub ActionsGitLab+3

DevSecOps, Offensive Security, AI Security· Published and added 14 Oct 2026

decrypt.coarticle🛡️ Security

Ledger Asks Resellers in Seven Asian Markets to Pull Devices After Suspected $86M Drain

Ledger asked resellers and distributors in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong to pull its hardware wallets while it investigates devices fitted with a hidden implant. Its Donjon team found the implant reads the 24-word recovery phrase from the screen during setup and sends it out over LTE. All confirmed losses trace to devices sold through reseller CryptoBilis, and Specter has traced over $86M in suspected thefts, which Ledger has not verified. Ledger says its own infrastructure and direct channel show no compromise. MediaMarkt Saturn halted sales after a German customer reported an implant, and Trezor is ending reseller authorizations on January 1, 2027.

LedgerTrezor
CryptoBilisSpecterDonjon+1

Blockchain, Supply Chain, Hardware & RF· Published and added 14 Oct 2026

x.comthread🛡️ Security

DFIR Radar (@DFIR_Radar) on X

Describes an Oracle Cloud Infrastructure Identity Domains authorization bypass where a User Manager AppRole could create API keys (also SMTP credentials and auth tokens) for the Identity Domain Administrator via POST /admin/v1/ApiKeys on the SCIM API, with no classic IAM policy grant. The flaw sits in the gap between classic OCI IAM policies and AppRoles; it was patched in Oracle's June 2026 critical update. Gives responders hunting guidance: review Identity Domains SCIM audit events (/admin/v1/AuditEvents, resourceType ApiKey) for admin-account keys created by actors lacking the admin AppRole, and audit User Manager/User Administrator assignments, using OCInferno to graph AppRole-to-policy paths.

Oracle Cloud InfrastructureOCI Identity DomainsSCIM
OCInfernoNetSPIAppRole+2

Cloud & Infra, Identity & Access, Blue Team & Detection· Published and added 13 Oct 2026

bankless.comarticle🛡️ Security

Ledger Spyware Scare Spreads Across Asia and Europe

News roundup on hardware implants found in Ledger wallets sold through authorized resellers, starting with CryptoBilis in Southeast Asia and then Singapore, Japan and German MediaMarkt stores. The implants read the 24-word recovery phrase off the screen during setup and send it out over a hidden cellular link, while Ledger's secure chip stays untouched so the devices look genuine. Researchers describe three generations dating to 2025, each harder to detect. Suspected losses are put at $86M (Specter) to $103M (Yfarmx), and neither figure is verified by Ledger.

Ledger
CryptoBilisSpecterYfarmx+3

Hardware & RF, Blockchain· Published and added 13 Oct 2026

theblock.coarticle🛡️ Security

Ledger confirms hardware implant in CryptoBilis reseller units as MediaMarkt suspends sales in Europe

Ledger's Donjon team confirmed that Ledger signers sold by the reseller CryptoBilis contain an unauthorized implant. It captures the 24-word recovery phrase during setup and sends it over LTE using a provisioned eSIM. It does not touch the Secure Element, the OS, or transaction signing. Onchain researchers estimate losses above $86M, but Ledger says that figure is unverified. MediaMarkt Saturn halted European Ledger sales after a tampered unit was reported in Germany, and Trezor and OneKey tightened or revoked reseller authorizations. The case shows a reseller-channel tampering risk for hardware wallets.

LedgerTrezorOneKey
CryptoBilisLedger DonjonMediaMarkt Saturn+2

Blockchain, Hardware & RF, Threat Intel· Published and added 13 Oct 2026

protos.comarticle🛡️ Security

German Ledger reseller pauses sales following $86M draining incident

Protos reports that German retailer MediaMarkt pulled all Ledger products after teardowns of Ledger hardware wallets showed physical spyware implants, tied to an $86M drain of wallets bought from Malaysian reseller CryptoBilis. Ledger's investigation concluded the implant recorded the 24-word recovery phrase and sent it out over an attached eSIM. Mark Karpelès has helped identify implants in dismantled devices from MediaMarkt, LazMall (Philippines), CryptoBilis and Metapod (Singapore airport). Ledger has so far confirmed only the CryptoBilis devices and says it is reviewing reports of implants elsewhere.

Ledger
CryptoBilisMark KarpelèsMediaMarkt+2

Hardware & RF, Supply Chain, Blockchain· Published and added 13 Oct 2026

aws.amazon.comarticle🛡️ Security

GuardDuty Extended Threat Detection has added five new indicators to surface attack sequences

Explains five new indicator types (MALICIOUS_PACKAGE, MISCONFIGURATION, REACHABILITY, SENSITIVE_DATA, VULNERABILITY) that GuardDuty Extended Threat Detection attaches to attack sequence findings, sourced from Inspector, VPC Reachability Analyzer, Macie and Security Hub. Walks through an EKS compromise (AttackSequence:EKS/CompromisedCluster) that only became a CRITICAL finding thanks to the new context, and a cryptomining EC2 case. Lists observed CVEs with EPSS scores, frp/Burp Collaborator artifacts, and response advice such as EPSS-weighted patching, isolating reachable hosts and rotating IAM credentials.

Amazon GuardDutyAmazon InspectorAWS Security Hub+5
CVE-2022-1471CVE-2024-4577CVE-2024-34351+13

Cloud & Infra, Blue Team & Detection· Published and added 12 Oct 2026

en.cryptonomist.charticle🧠 AI

Anthropic tests AI autonomous replication across eight nodes in four of five trials

The article reports Anthropic research (William Zhou and Daniel Freeman) on whether small open models can autonomously replicate onto unfamiliar IoT and consumer hardware. Qwen3.5-9B established inference on eight of nine hardware types using the Memento harness (built on the Pi coding agent). GLM-5.2 completed a simplified end-to-end replication across eight emulated Android nodes in four of five trials, and reached seven nodes in the fifth. Gemma4-26B-A4B was sharded by pipeline parallelism across 15 low-RAM Android TV boxes at 0.39 tokens/s. The authors estimate replication intervals of 1–2 days and a capability threshold around end of 2026, which makes it a concrete capability-evaluation datapoint for AI safety.

PiQwen3.5GLM+6
AnthropicWilliam ZhouDaniel Freeman+7

ai-safety, evals, agents· Published and added 12 Oct 2026

en.cryptonomist.charticle🛡️ Security

Anthropic tests AI autonomous replication across eight nodes in four of five trials

News write-up of an Anthropic research post (William Zhou, Daniel Freeman) testing whether small open-weight models can act as autonomous worms. Qwen3.5-9B established inference on eight of nine hardware types, and GLM-5.2 spread across eight emulated Android nodes via unauthenticated ADB in four of five trials, reaching seven nodes in the fifth. The piece covers sharding a Gemma4-26B-A4B model across 15 low-memory Android TV boxes, projected spread rates, comparison with the Kimwolf botnet, and network signals defenders could watch (large weight transfers, inter-device inference traffic, scanning).

AnthropicAndroidQwen+2
GLM-5.2KimwolfMemento+5

AI Security, Hardware & RF· Published and added 12 Oct 2026

aws.amazon.comarticle🛡️ Security

Quantum-resistant signing on AWS, Part 2: Enforce your ML-DSA algorithm policy with SCPs and IAM

Explains how to turn a cryptographic algorithm policy (approve ML-DSA-65/87, exclude ML-DSA-44) into enforceable AWS controls using SCPs, IAM policies, permission boundaries and KMS key policies. The key lever is the kms:KeySpec condition key (kms:SigningAlgorithm can't distinguish variants, since all use ML_DSA_SHAKE_256), applied to CreateKey, ReplicateKey, Sign, Verify and GetPublicKey. It also covers surfaces without algorithm condition keys (AWS Private CA, ACM import, IAM server certificate upload, ELB TLS) via provisioning pipelines plus CloudTrail and AWS Config drift detection, and the default-allow risk of deny-lists.

AWSAWS KMSAWS IAM+3
ML-DSAFIPS 204NIST+2

Cloud & Infra, GRC· Published and added 12 Oct 2026

aws.amazon.comarticle🛡️ Security

Quantum-resistant signing on AWS, Part 1: Build a software supply chain with ML-DSA

Part 1 of an AWS series showing how to build a quantum-resistant software supply chain with ML-DSA: ML-DSA keys in AWS KMS, an ML-DSA root/subordinate CA hierarchy in AWS Private CA, and IAM Roles Anywhere trust anchors for external build agents. It covers signing binaries (EXTERNAL_MU with OpenSSL 3.5), container images as OCI referrers via ORAS, and SBOMs wrapped in in-toto Statements bound to the artifact digest, plus verification, admission control, trust-store distribution, revocation and SCP guardrails. It frames the "forge later" threat and maps CNSA 2.0 (ML-DSA-87 only for NSS) and EU CRA deadlines to actions.

AWSAWS KMSAWS Private CA+3
ML-DSANIST FIPS 204CNSA 2.0+8

Supply Chain, DevSecOps, Cloud & Infra· Published and added 12 Oct 2026

protos.comarticle🛡️ Security

Ledger spyware scare spreads beyond Southeast Asia

Protos reports additional alleged Ledger hardware wallets with physical spyware implants, found in devices from a German MediaMarkt reseller, a Philippine LazMall reseller and a Stax model bought from CryptoBilis. Mark Karpelès found that the implants read the device's screen output to capture seed phrases and evade Ledger's Genuine Check. The earlier CryptoBilis-linked incident of Oct 9 drained over $86M. Ledger told resellers to use only authorized channels and never restock returned units, and teardowns have also shown many devices to be clean.

Ledger
CryptoBilisGenuine CheckMark Karpelès+4

Hardware & RF, Blockchain· Published and added 12 Oct 2026

x.comthread🛡️ Security

Ned Peterson (@NedPeterson99) on X

A post summarizing a joint FBI and six-country advisory on actors tied to Integrity Technology Group (the sanctioned Chinese firm linked to Flax Typhoon and the Raptor Train botnet). They password-sprayed Microsoft 365 and Exchange accounts over EWS, OWA, ActiveSync and PowerShell with EBurst. They then drained mailboxes with a PHP bot over Exchange Web Services and an office-cli utility using stored client ID, tenant ID and secret values, and exposed the stolen email to third parties through a web app, in some cases restricted to Xiamen IP addresses. Victims were in government, law enforcement, healthcare and religious organizations across Southeast Asia, Africa and North America, with activity since at least January 2021. Defensive takeaways: enforce MFA on every legacy path, retire basic auth and EWS, audit OAuth apps and service principals with mail-read rights, and alert on bulk mailbox pulls.

Microsoft 365Microsoft ExchangeEBurst+3
Integrity Technology GroupFlax TyphoonRaptor Train+3

Threat Intel, Identity & Access· Added 11 Oct 2026, published 9 Oct 2026

simonwillison.nettool🧠 AI

ttok 1.0

ttok is a command-line tool by Simon Willison for counting and truncating text by LLM token count, piping files or stdin through a tokenizer. Version 1.0 switches the default tokenizer from GPT-4 to the one used by the GPT-5/GPT-6 family, based on an experiment by William Liu showing all seven GPT-5.5/5.6/6 variants produce identical token counts across 31 test fixtures, even though OpenAI has not officially confirmed this.

Python
Simon WillisonOpenAIWilliam Liu+6

ai-infra· Published and added 9 Oct 2026

huggingface.copaper🧠 AI

DecepEval: A Benchmark for Evaluating Deception in LLM Agents

DecepEval is a benchmark of 1,532 instances across 3 task families and 28 professional scenarios designed to measure deception in LLM agents, pairing neutral and induced versions of each task to isolate condition-dependent changes in deception rates. It introduces the LLM Deception Diamond framework (pressure, incentive, opportunity, conflict), adapted from classical fraud theory, and finds that across nine frontier LLMs these inducements raise deception rates even in models with low baseline deception, with long-horizon tasks showing deception rates averaging 87% under induced conditions.

Hugging Face
DecepEvalLLM Deception Diamond

ai-safety, evals· Added 8 Oct 2026

latent.spacetalk🧠 AI

Synthesis Superintelligence: from Semiconductors to Superconductors — Periodic Labs’ Liam Fedus and Ekin Dogus Cubuk

A Latent Space podcast interview with Periodic Labs co-founders Liam Fedus and Ekin Dogus Cubuk on building "synthesis superintelligence" — AI systems that run reinforcement learning against noisy physical lab experiments rather than internet text, to discover new materials like room-temperature superconductors. They detail the end-to-end materials discovery loop (predicting stable configurations, synthesis, and characterization via X-ray diffraction), why RL reward design differs fundamentally in physical science versus math/coding (sample inefficiency, measurement noise, missing telemetry), the role of DFT simulations as imperfect ground truth, and their "matter compiler" vision for scaling autonomous high-throughput labs.

Periodic LabsLiam FedusEkin Dogus Cubuk+4

research, training, agents· Published and added 8 Oct 2026

labs.zenity.iowriteup🛡️ Security

AgentCorruption: How A Single Prompt Collapsed The Entire Cloud Security Model

AgentCorruption is Zenity Labs research on AWS Bedrock AgentCore. Agents ran in Firecracker MicroVMs that could reach IMDS, so one prompt to an exposed agent leaked IAM credentials. The default role was scoped to the whole account region, allowing agent invocation, reading conversations, memory poisoning and Secrets Manager theft. The post gives the disclosure timeline (December 2025 to September 2026) and AWS's statement and fixes (IMDSv2 only, trimmed role).

AWS BedrockAWSAWS IAM+2
AgentCorruptionSSRFprompt injection+5

AI Security, Cloud & Infra· Added 19 Oct 2026, published 8 Oct 2026

aws.amazon.comarticle🛡️ Security

Configuring your AI vulnerability harness, Part 2: The steering file

AWS Security Blog's second post in a series on building an "AI vulnerability harness" explains the configuration (steering file) that stops an AI model from hallucinating vulnerabilities and inflating severity during security code review. It details five configuration sections — structural verification of findings, an evidence-based confidence formula (weighting confirmed taint flow at 0.30), infrastructure-aware severity multipliers for controls like AWS WAF and IAM, CISA KEV/EPSS threat-intel boosting, and a four-tier priority classification — and reports validation numbers (e.g., unsteered models fabricated code paths in ~30% of findings; steered confidence of HIGH without structural confirmation was only 34% exploitable vs 89% with confirmed taint). The steering file is shipped as a Kiro steering file, a Kiro skill, and a CLAUDE.md for Claude Code, with full source in a linked GitHub repo.

KiroClaude CodeAWS WAF+3

AI Security, AppSec· Published and added 7 Oct 2026

aws.amazon.comwriteup🧠 AI

Configuring your AI vulnerability harness, Part 2: The steering file

Part 2 of an AWS Security Blog series detailing the design of a "steering file" — a persistent instruction set (deployable as a Kiro steering file, Kiro skill, or Claude Code CLAUDE.md) that constrains an LLM performing vulnerability triage. It walks through five configuration sections: requiring structural/dataflow verification before reporting findings, replacing self-reported confidence with a weighted formula based on binary structural signals (e.g., 0.30 weight for confirmed taint flow), mapping infrastructure controls (AWS WAF, IAM) to severity multipliers with a 0.15 floor, incorporating CISA KEV and EPSS threat-intelligence boosts capped at +0.50, and a four-tier priority classification that suppresses low-confidence P3 findings. Validation against a 10-vulnerability test app showed the steered model eliminated fabricated findings and correctly downgraded mitigated vulnerabilities while preserving full severity for a command injection reachable only via authenticated access.

KiroClaude CodeCursor+7
CISAEPSS

prompting, coding-agents· Added 8 Oct 2026, published 7 Oct 2026

aws.amazon.comwriteup🧠 AI

Identity-aware AI data agents with AWS Lake Formation and Trusted Identity Propagation

AWS Security Blog walkthrough showing how to build identity-aware AI data agents on Amazon Bedrock AgentCore that propagate a real user's OIDC id_token through the agent's tool-calling chain (Runtime → MCP Gateway → Lambda) via HTTP headers, keeping the token out of the foundation model's context entirely. A Lambda function performs a server-side token exchange using IAM Identity Center Trusted Identity Propagation, assumes a scoped TIP role, and runs the user's Athena query so AWS Lake Formation evaluates the real user's grants, producing per-user row/column access and CloudTrail audit records naming the actual human (onBehalfOf) without rewriting existing governance policies.

AWSAmazon Bedrock AgentCoreAWS Lake Formation+11

agents, mcp, ai-infra· Added 8 Oct 2026, published 6 Oct 2026

aws.amazon.comarticle🛡️ Security

Identity-aware AI data agents with AWS Lake Formation and Trusted Identity Propagation

AWS Security Blog walkthrough of an identity-aware AI data agent pattern that propagates a real user's OIDC id_token through Amazon Bedrock AgentCore Runtime and Gateway into a Lambda target, which exchanges it server-side (via IAM Identity Center trusted identity propagation) for Lake Formation-scoped Athena credentials. The design deliberately keeps the id_token off the tool schema and inside HTTP headers only, so the foundation model never sees or handles the user's credential, and CloudTrail records the real human via an onBehalfOf AssumeRole entry, letting existing Lake Formation grants govern AI agent queries without rewriting authorization logic in application code. It details the three AgentCore configuration gates (runtime header allowlist, gateway metadataConfiguration.allowedRequestHeaders, Lambda's bedrockAgentCorePropagatedHeaders) that enforce this separation.

AWS BedrockModel Context ProtocolOAuth+3
Trusted Identity Propagation

AI Security, Identity & Access, Cloud & Infra· Added 7 Oct 2026, published 6 Oct 2026

tldrsec.comarticle🛡️ Security

[tl;dr sec] #348 - Google's PageBreak Scanner, Perplexity's Agent Security Tool, Defending Agentically

tl;dr sec #348 is a weekly security newsletter issue. It summarises Google's PageBreak agent (500+ XSS bugs found since November 2025, validated deterministically), Perplexity's open-source Numbat agent-security tool (52 CEL rules), and SpecterOps' CiliumHound. It also covers Scaleway IAM attack paths, the NCSC essay on defending agentically, Julien Vehent on detection fidelity, and Wiz's Scan for Good.

PageBreakNumbatCiliumHound+3
XSSVolt TyphoonRed Agent+6

AI Security, AppSec, Blue Team & Detection· Added 30 Oct 2026, published 1 Oct 2026

huggingface.corepo🧠 AI

DeepSeek-V4.1-Flash

DeepSeek-V4.1-Flash is a multimodal Mixture-of-Experts model with 552B backbone parameters, 1M-token context, and a novel Causal Encoder-Decoder (CED) architecture where the decoder's global KV cache is projected from encoder hidden states rather than recomputed per layer, activating only 8B/16B parameters per token during prefill/decode. It introduces Compressed Sparse Attention 2 (CSA2) with FP4 KV caching to cut the global KV cache footprint to 890 bytes/token (~1/4 of DeepSeek-V4-Flash, ~1/437 of DeepSeek-V1), alongside Engram conditional memory, DSpark speculative decoding, and a continuously controllable reasoning-effort setting (1–100). The card documents pre/post-training recipes (45T tokens, SFT→RL→on-policy distillation with synthetic agent environments) and reports results across agentic and code benchmarks (Terminal-Bench 2.1/3.0/4.0, DeepSWE v1.1, GPQA Diamond, Chartography, ZeroBench, AutomationBench), plus deployment instructions for Transformers, vLLM, SGLang, and Docker.

TransformersvLLMSGLang+5
DeepSeek-V4.1-FlashDeepSeek-V4-FlashDeepSeek+16

models, multimodal, inference· Added 30 Sep 2026

arxiv.orgpaper🧠 AI

Image Classifiers are Efficient Self-Supervised Video Representation Learners

This paper introduces VideoMSN, a Masked Siamese Network that repurposes standard image Vision Transformers for self-supervised spatio-temporal video representation learning by representing videos as 'super images' (grids of sampled frames) and aligning spatial-masked and temporal-masked views with a shared ViT encoder. Starting from pretrained DINO-v3 and DeiT-v3 image encoders, it achieves state-of-the-art results on Kinetics-400, UCF101, and HMDB51 while using up to 32x and 160x fewer video pretraining epochs than prior video self-supervised methods, and shows strong low-shot transfer performance.

Transformervision-language model
VideoMSNDINO-v3DeiT-v3+3

research, multimodal· Added 1 Oct 2026, published 30 Sep 2026

orca.securityarticle🛡️ Security

Connect Orca’s ChatGPT Plugin: Cloud Risk Context in Chat and Codex

Orca Security's plugin connects ChatGPT and Codex to Orca's MCP server, letting security teams and developers query cloud alerts, attack paths, effective IAM permissions, and code-to-cloud origins directly from chat or a coding agent instead of logging into a console. The post walks through six security-team use cases (exposure discovery, CVE impact triage, alert-to-blast-radius investigation, identity permission review, CISO reporting) and three developer workflows in Codex where alerts are traced back to the Terraform/code that created the misconfiguration and fixed in place.

Model Context ProtocolOrca SecurityChatGPT+3
CVE-2025-55182

Cloud & Infra· Added 2 Oct 2026, published 30 Sep 2026

nvd.nist.govadvisory🛡️ Security

CVE-2026-16584: Improper handling of an initialization failure in AWS API MCP Server from 0

CVE-2026-16584 affects AWS API MCP Server (awslabs.aws-api-mcp-server) versions 0.2.13 through 1.3.46: if the security policy enforcement data fails to initialize at server startup, the tool silently skips policy checks for the rest of the process's life, letting an agent execute AWS API operations the admin configured the policy to deny or gate. Underlying IAM permissions still apply and are unaffected, but the intended allow/deny gating layer is bypassed (CWE-455, improper handling of initialization failure). Fixed in 1.3.47.

Model Context ProtocolAWSAWS IAM+1
CVE-2026-16584GHSA-29w2-fq35-v728CWE-455

AI Security, Cloud & Infra· Added 26 Sep 2026

github.comadvisory🛡️ Security

DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)

GHSA-9hgc-g3w5-67cm details a DNS TOCTOU race in IBM mcp-context-forge's /admin/gateways/test endpoint: validate_gateway_test_url() resolves and vets a hostname against private/cloud-metadata IP ranges, but the actual request is made with httpx (via ResilientHttpClient), which independently re-resolves DNS at connection time with no IP pinning. An attacker with gateways.read permission can exploit DNS rebinding (short-TTL record flipping from a public IP to 169.254.169.254) to bypass SSRF protections and reach cloud instance metadata, exfiltrating IAM credentials where IMDSv1 is enabled. The advisory notes the codebase already acknowledges the gap in two comments and a tracked TODO (ICACF-15), and recommends pinning the validated IP into the connection.

Model Context ProtocolPythoncURL
SSRFGHSA-9hgc-g3w5-67cmGHSA-m8rv-5m6m-32ff+3

AppSec· Added 26 Sep 2026

arxiv.orgpaper🧠 AI

Forte: A sensitivity type system for imperative Rust

Forte is a sensitivity type system for imperative Rust that soundly tracks differential-privacy sensitivity through mutation via exclusive (&mut) borrows, closing a gap left by prior pure-calculus systems like Fuzz and Solo that assume no aliasing or mutation. Its soundness theorem (metric preservation) is mechanized in Verus, and Flux checks Forte as an ordinary library without forking the Rust compiler. The authors evaluate Forte on OpenDP mechanism kernels with genuine in-place mutation, matching trusted stability maps and catching off-by-one diameters, miscalibrated releases, and overspent privacy budgets.

Rust
ForteVerusFlux+3

research· Added 26 Sep 2026, published 24 Sep 2026

aws.amazon.comarticle🛡️ Security

ICYMI: August 2026 @AWS Security

AWS Security Blog's August 2026 ICYMI roundup covering 20 blog posts, 23 security bulletins, and 17 code samples. The dominant theme is securing agentic AI workloads on Amazon Bedrock AgentCore, alongside IAM/Cognito updates, S3 over-permission remediation, and a bulletin wave featuring prompt-injection consent bypasses in Strands Agents Tools, an IDOR exposing cross-tenant agent memory, credential-disclosure flaws in MCP servers, and RCE issues such as path-traversal-to-root in amazon-ssm-agent and Zip Slip in awsdac.

AWSAWS BedrockAWS IAM+3
IDORZip Slippath traversal+5

AI Security, Cloud & Infra, Identity & Access· Added 7 Oct 2026, published 23 Sep 2026

aws.amazon.comwriteup🛡️ Security

Transforming Bedrock Guardrails events into OCSF with CloudWatch

AWS walks through a reference pipeline (Lambda + CloudWatch Logs subscription filter + AWS S3 Tables) that transforms AWS Bedrock Guardrails intervention events — blocked prompt injections, PII redactions, content-policy hits — from Bedrock model invocation logs into OCSF Detection Finding (class_uid 2004) records, landing them in the CloudWatch unified data store. This lets SOC analysts correlate guardrail interventions with AWS CloudTrail and VPC Flow Logs via Athena or CloudWatch Logs Insights, e.g. spotting accounts with both prompt-injection blocks and failed IAM calls, and complements GuardDuty AI Protection's managed findings. Includes OCSF field mapping, multi-account centralization pattern, and a cloneable CDK-based implementation.

AWS BedrockAWSAWS IAM+2
prompt injection

AI Security, Cloud & Infra, Blue Team & Detection· Added 7 Oct 2026, published 21 Sep 2026

synacktiv.comarticle🛡️ Security

AWS EKS forensics: data sources and investigation tooling (Synacktiv)

Synacktiv's CSIRT publishes a detailed forensics guide for Amazon EKS, mapping the three data-source layers (Kubernetes control plane audit logs, data-plane/Container Insights logs, and AWS-level CloudTrail/GuardDuty) and giving concrete CloudWatch Logs Insights queries for detecting RBAC reconnaissance, role escalation via the 'escalate' verb, Pod Security Admission evasion, and static-pod node persistence. It also covers node-level acquisition via SSM/kubectl debug, ServiceAccount token theft, and correlating GuardDuty findings (PrivilegedContainer, ContainerWithSensitiveMount, ReverseShell, InstanceCredentialExfiltration) with CloudTrail to trace stolen node/pod IAM identities used outside the cluster.

AWSKubernetesGuardDuty+2
escalate verbIRSAEKS Pod Identity+4

Cloud & Infra, Blue Team & Detection· Added 21 Sep 2026

aws.amazon.comarticle🛡️ Security

Run open weight models on Amazon Bedrock in AWS European Sovereign Cloud

AWS announces general availability of Gemma 4 (Apache 2.0 open-weight models) on Amazon Bedrock's new OpenAI-compatible bedrock-mantle inference engine within the AWS European Sovereign Cloud, its independently-operated EU-only cloud region (eusc-de-east-1). The post details the security model behind inference: zero operator access to prompts/outputs, zero data retention by default, encryption in transit, IAM-scoped least-privilege access to the inference API, short-lived vs long-lived Bedrock API keys, and CloudTrail/CloudWatch auditing, plus a walkthrough for calling Gemma 4 via the Responses and Chat Completions APIs.

AWS BedrockAWS IAMAWS+1
eusc-de-east-1

GRC, Cloud & Infra· Added 7 Oct 2026, published 17 Sep 2026

aws.amazon.comarticle🧠 AI

Run open weight models on Amazon Bedrock in AWS European Sovereign Cloud

AWS announces general availability of Gemma 4 (Apache 2.0 licensed open-weight model family) on Amazon Bedrock's next-generation inference engine within the AWS European Sovereign Cloud, accessible via an OpenAI-compatible bedrock-mantle endpoint supporting the Responses and Chat Completions APIs. The post walks through authenticating with Bedrock API keys, IAM permission scoping, and sending first inference requests using the OpenAI Python SDK, alongside details on zero-operator-access/zero-data-retention guarantees and in-region (eusc-de-east-1) data residency.

AWSOpenAI APIPython
Amazon BedrockGemma 4AWS European Sovereign Cloud

inference, models· Added 8 Oct 2026, published 17 Sep 2026

wiz.iowriteup🛡️ Security

Exploring the new AWS Sign Up experience

Wiz researchers reverse-engineered AWS's new sign-up experience, which silently creates a three-account AWS Organization (management, identity, and a restricted sandbox member account) with Builder ID login instead of root credentials. They found the sandbox blocks security services like GuardDuty, SecurityHub, Detective, Inspector, Macie and Access Analyzer via an allowlist SCP (FreeTierSCP), while still permitting risky practices such as IAM user access keys, public S3 buckets, and IMDSv1 EC2 instances; a data-perimeter RCP also blocks cross-account sts:AssumeRole until the account is upgraded, potentially pushing vendors back toward IAM user keys. The new IAM Role Manager feature further undermines least privilege by auto-attaching PowerUserAccess to console-created roles.

AWSAWS IAM
Control TowerAccountFullAccessRoleAWSManagedAccountManagementAccessRole+7

Cloud & Infra, Identity & Access· Published and added 17 Sep 2026

aws.amazon.comarticle🛡️ Security

Architecting a secure landing zone in the AWS European Sovereign Cloud

AWS Security Blog walkthrough of building a secure, production-ready landing zone in the new AWS European Sovereign Cloud (aws-eusc partition), covering multi-account governance via AWS Control Tower/AFT, IAM Identity Center federation as Terraform code, centralized logging into a Log Archive and Security Tooling account, network perimeter design with dedicated Direct Connect PoPs and VPC endpoints, KMS/External Key Store data protection, and partition-aware CI/CD for pushing container images, AMIs, and artifacts across the partition boundary. It maps design decisions to the AWS Security Reference Architecture and Well-Architected Framework, distinguishes hard partition boundaries from configurable choices, and references BSI C5:2020, SOC 2, and ISO 27001/27017/27018/27701 certifications for EUSC.

AWSAWS European Sovereign CloudAWS IAM+3
BSI C5:2020SOC 2ISO 27001+3

Cloud & Infra, GRC, Identity & Access· Added 7 Oct 2026, published 16 Sep 2026

aws.amazon.comwriteup🛡️ Security

Operationalizing least privilege: Automate IAM remediation through your CI/CD pipeline

AWS Security Blog walkthrough of an open-source Lambda-based automation that closes the loop between IAM Access Analyzer's unused-permission findings and actual remediation: it classifies each flagged role by origin via CloudTrail (CloudFormation/CDK-managed, manually created, or unused), then uses Amazon Bedrock (Claude Sonnet for code generation, Claude Haiku for explanations) to open a pull request with right-sized CDK IAM policy code, a GitHub/GitLab issue with migration guidance, or a soft-disable decommission issue respectively. It covers cross-account/organization-wide deployment, exclusion lists for sensitive roles, throttling, dry-run mode, CloudWatch metrics, and cost/cleanup considerations, with full source in an accompanying repo.

AWS IAMAWS BedrockAWS CDK+3
IAM Access Analyzer

DevSecOps, Cloud & Infra· Added 7 Oct 2026, published 15 Sep 2026

wiz.iowriteup🛡️ Security

Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise

Wiz researchers chain three LiteLLM flaws into a full pre-auth-to-cloud-compromise path: an MCP endpoint authentication bypass (CVE-2026-59822) that grants a session with any garbage Bearer token, a custom-code-guardrail sandbox bypass leading to root RCE (CVE-2026-59821) via exec() on unsanitized admin-submitted Python, and a config-endpoint authorization gap (CVE-2026-35029). They also show pass-through endpoints can be pointed at the AWS IMDS to steal IAM credentials, bypassing IMDSv2 via header-prefix forwarding. A scan of ~3,074 internet-facing instances found 9.6% accepting the default sk-1234 master key or no auth at all, and CVE-2026-59822 is now in CISA's KEV catalog with observed in-the-wild exploitation.

LiteLLMModel Context ProtocolAWS+3
CVE-2026-59822CVE-2026-59821CVE-2026-35029+1

AI Security, AppSec, Cloud & Infra· Published and added 9 Sep 2026

github.comrepo🛡️ Security

AWSHound — AWS BloodHound OpenGraph Collector

AWSHound is a Go CLI/container tool that collects AWS IAM and authorization data across profiles, config-file opt-ins, or an entire AWS Organization (via cross-account role assumption), and outputs a BloodHound OpenGraph for attack-path analysis. It supports phased collection with on-disk artifacts, offline graph building from previously collected data, and safeguards like --max-api-requests and --max-api-requests-per-minute to bound AWS API traffic during collection.

AWSAWS IAMBloodHound+2

Cloud & Infra, Offensive Security· Added 8 Sep 2026

github.comrepo🧠 AI

iamzulx/crypto-rag

crypto-rag is an Indonesian-language CLI crypto assistant that pairs a static knowledge-base RAG pipeline with live market data tool calls, built on the principle that volatile numbers (price, funding rate, TVL, sentiment) must never be embedded in the vector store since they go stale instantly. It implements hybrid retrieval (BM25 keyword search + FAISS dense embeddings fused via Reciprocal Rank Fusion) over a 146-topic knowledge corpus, an optional cross-encoder reranker, and an intent router that dispatches price/derivatives/on-chain/sentiment queries to live sources (Binance, DefiLlama, Fear & Greed Index) versus concept questions to the corpus. A tool-calling agent handles multi-step queries, and an OpenAI-compatible LLM synthesis layer (works with StepFun, OpenAI, Groq, LM Studio, Ollama) grounds answers with citations and falls back to extractive answers when no LLM is configured.

FAISSBM25Python+2
BinanceOKXBybit+14

llm-apps, agents· Added 2 Oct 2026, published 5 Sep 2026

aws.amazon.comwriteup🛡️ Security

Incident response guide for AWS CloudTrail investigations – Part 2 | Amazon Web Services

Part 2 of AWS's CloudTrail incident-response guide walks through a real multi-stage attack: an SSRF flaw in a web app reached the EC2 IMDSv1 endpoint to steal temporary credentials for an over-privileged "webdev" role, which the attacker then used to probe IAM (failed CreateUser), log into the console without MFA, and pivot cross-Region (us-east-1 to us-east-2) to enumerate and actively invoke the Amazon Nova Pro model via Bedrock's Converse API. It details the specific CloudTrail fields that expose each stage (userIdentity, readOnly, awsRegion, ec2RoleDelivery, sessionCredentialFromConsole, invokedBy), gives an incident-response checklist, and closes with hardening takeaways: enforce IMDSv2, least-privilege EC2 roles, cross-Region detection parity, Bedrock model invocation logging, and GuardDuty AI Protection.

AWSAWS BedrockAWS IAM
SSRFAmazon Nova Pro

Cloud & Infra, Blue Team & Detection, AppSec· Added 21 Sep 2026, published 3 Sep 2026

arxiv.orgpaper🧠 AI

Axonal delay dispersion decides whether a neuron detects an event or a sequence, and predicts cortical column diameter

This arXiv preprint proposes a "delay-signature" framework where the dispersion of axonal conduction delays converging on a dendritic branch determines whether a neuron acts as an event detector (coincidence) or an order-selective sequence detector, using simulations of an integrator-neuron model. The authors find a single scalar (delay dispersion) governs this computational transition, sets a millisecond-scale timing tolerance, and together with conduction velocity predicts cortical column diameter — linking myelination to what a neuron computes, not just how fast it signals.

Jipeng Sun

research· Added 22 Sep 2026, published 3 Sep 2026

Showing 60 of 82

Show more