THE INTERNET IS THINKING

Earlier sources: Security

Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.

SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.

Open in the map ↗
Share this page ↗

684 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.

Earlier sources

Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.

  1. OpenAlex · Published · First archived

    Towards an integrated security decision-making framework ↗

    Security decision-making in socio-technical systems can often be limited by fragmented analytical approaches that may struggle to address the complexities of modern threats. This article proposes an integrated multidisciplinary framework that synthesises five key pillars: Goal-Oriented Requirements Engineering (GORE), Risk Assessment (RA), Crime Scripting (CSA), Quantitative Decision Analysis (QDA), and Attack-Graph Modelling (AGM). By incorporating attack graphs as a fifth layer, the framework seeks to provide a dual-view of the adversary, bridging the gap between human procedural behaviour (…

  2. OpenAlex · Published · First archived

    STAC-ML: A Trust-Aware Security Architecture for Resource-Constrained NDN-IoT Networks with Lightweight ML-Assisted Threat Detection ↗

    Edge caching improves latency and energy efficiency in IoT deployments, but it also enlarges the attack surface: cache poisoning, content pollution, and Interest flooding can silently corrupt time-critical services. Existing defences sit at two inadequate extremes—blockchain-based trust exceeds edge-device budgets (>10 MB memory, 2–5 s consensus latency), while rule-based filters lack discriminative power against adaptive adversaries. We propose STAC-ML, a trust-and-security architecture for resource-constrained NDN-IoT networks. Behavioural trust evaluation (O(1) updates, 24 KB memory), secur…

  3. OpenAlex · Published · First archived

    An Experimental Evaluation of Layered Security Controls for Inter-Service Communication in Containerised Microservices ↗

    In recent years, there have been a number of new application architectures developed (examples include microservices and containerisation) that introduce significant security challenges for inter-service communication. Whereas internal calls made within a monolithic application are generally considered to be trusted, inter-service communication tends to occur over networks, which expands the attack surface of the application significantly. As a result, there are many types of vulnerabilities (token forgery, replay attacks, brute force credential guessing, inadequate validation, and man-in-the-…

  4. OpenAlex · Published · First archived

    A quadratic integer ring-based approach to S-box construction and its integration into a 4D hyperchaotic RGB image encryption scheme ↗

    The rapid growth of digital communication, cloud computing, and internet-based services has intensified the need for secure techniques for protecting digital images against increasingly sophisticated cyberattacks. This paper presents a quadratic integer ring-based approach to the construction of substitution boxes (S-boxes) and their integration into a four-dimensional (4D) hyperchaotic (red green blue) RGB image encryption scheme. A systematic algebraic framework over the quadratic integer ring $$\mathbb {Z}[\sqrt{14}]$$ is developed for generating suitable prime elements and constructing mul…

  5. OpenAlex · Published · First archived

    QuadFusion-IDS: Enhancing Intrusion Detection with Unified Hybrid Deep and Machine Learning Techniques in Cybersecurity Systems ↗

    As network traffic becomes increasingly complex and cyberattack behaviors continue to evolve, conventional intrusion detection approaches face challenges in accurately identifying malicious and legitimate network activities. This study proposes QuadFusion-IDS, a hybrid binary intrusion detection framework that integrates FT-Transformer with Autoencoder (FT-Transformer + AE), multi-head attention deep neural network (MHA-DNN), dilated temporal convolutional network (Dilated TCN), and XGBoost to capture complementary feature representations, temporal dependencies, and nonlinear traffic patterns.…

  6. OpenAlex · Published · First archived

    A dynamic explainable AI framework for real-time intrusion detection and automated alert prioritization in security operation centers ↗

    Abstract Security Operation Center (SOC) analysts face 50–100 security alerts per hour, leading to cognitive fatigue and delayed incident response. Existing intrusion detection systems (IDS) suffer from high false-positive rates and opaque black-box architectures that erode analyst trust and slow triage decisions. This paper proposes the Dynamic Explainable Framework (DEF), which couples a machine-learning detection backbone with inference-time SHAP and LIME explanations and an explanation-aware alert prioritization layer. DEF is evaluated on two benchmarks under an identical protocol: a strat…

  7. OpenAlex · Published · First archived

    Privacy-Aware Customer Analytics in Physical Stores Using an Edge-Cloud Hybrid Artificial Intelligence System ↗

    Customer analytics in physical stores must operate under three simultaneous constraints that are absent or weaker in online retail: limited on-site computation, strict personal-data privacy obligations, and the lack of a natural digital record of customer behavior. This study proposes an end-to-end edge-cloud hybrid artificial intelligence (AI) system that addresses these constraints jointly. On the edge side, an NVIDIA Jetson Nano device equipped with a Sony IMX477 camera performs motion detection, face detection, person detection, person re-identification, and demographic and affective attri…

  8. CISA · Added to KEV · First archived

    CVE-2026-71362: Adobe Commerce and Magento Incorrect Authorization Vulnerability ↗

    Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders

  9. CISA · Added to KEV · First archived

    CVE-2026-5430: WSO2 Multiple Products Path Traversal Vulnerability ↗

    WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for

  10. Hacker News · Posted on Hacker News · First archived

    OpenAI agents hacked Australian Medicare system ↗

    Hacker News discussion.

Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.

How to assess evidence about Security

Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.

See the collection and counting methodology ↗ · Read the weekly synthesis ↗

Follow a thread

Explore related regions

These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.