THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗653 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- Hacker News · Posted on Hacker News · First archived
New LiteLLM Vulnerability: Privilege Escalation to Proxy Admin and RCE ↗
Hacker News discussion.
- arXiv · Published · First archived
SparLeak: Privacy Leakage from Sparse Attention in LLM Inference on Shared GPUs ↗
Sparse attention is widely used to accelerate long-context inference in modern large language models (LLMs), but its input-dependent execution behavior introduces previously unexplored privacy risks. We identify a new GPU micro-architectural side channel, termed Sparsity-Induced Memory Access (SIMA), which arises from secret-dependent key-value cache access patterns induced by sparse attention. Based on this observation, we present SparLeak, a phase-aware side-channel attack that extracts SIMA traces during LLM inference and enables two practical privacy extractions: query attribute inference…
- Hacker News · Posted on Hacker News · First archived
Jinn – a Rust microkernel with capability-base security looking f contributors ↗
Hacker News discussion.
- Hacker News · Posted on Hacker News · First archived
Show HN: Alter Zero – RAM-efficient agent for coding, security and automation ↗
Hacker News discussion.
- Hacker News · Posted on Hacker News · First archived
Custom malware used in Citrix 0-day attacks targeting govt, banks, professional ↗
Hacker News discussion.
- OpenAlex · Published · First archived
A Comprehensive Review of Cybersecurity Frameworks and Defense Mechanisms for Modbus and HTTP in Industrial Control Systems ↗
Industrial Control Systems (ICS) form the backbone of critical infrastructure, enabling automation and control in sectors such as energy, water, and manufacturing. The convergence of Operational Technology (OT) and Information Technology (IT) has introduced significant cybersecurity challenges, particularly for legacy communication protocols like Modbus and HTTP, which were not designed with security in mind. This paper provides a comprehensive framework for understanding the attack and defense mechanisms associated with two protocols i.e., Modbus and HTTP, used in ICS. We systematically analy…
- OpenAlex · Published · First archived
Is energy security compatible with sustainability? A structural system analysis ↗
This study examines whether energy security is structurally compatible with environmental sustainability under contemporary energy transition pathways. Using an unbalanced panel of 112 countries over 2000–2023, we estimate a three-stage least-squares system linking energy security, greenhouse gas emissions, and sustainability performance. Compatibility is defined as a positive and statistically distinguishable total effect of energy security on sustainability operating through emissions, conditional on the renewable energy share. In the full sample, stronger energy security is associated with…
- OpenAlex · Published · First archived
Raft-Consistent Metadata with GPU-Accelerated Encryption for Secure HDFS ↗
In today’s cloud computing environments, large-scale data infrastructures like Hadoop are facingsevere challenges in providing efficient and secure static storage; these challenges stem fromlimitations in single algorithm encryption schemes as well as metadata management instability.This paper proposes a co-designed architecture demonstrating that metadata consistency andhigh-throughput encryption can be achieved simultaneously without performance trade-offs. Ourapproach integrates two components: (1) a Raft-consistent metadata service (RCMS) that replaces thesingle-point-of-failure NameNode w…
- OpenAlex · Published · First archived
Privacy-Preserving Identity-Based Undeniable Signatures from Lattices with Controlled Verifiability for IoT Networks ↗
The Internet of Things (IoT) network plays an important role in production and people’s daily life. IoT networks generally face security problems of privacy leakage and message denial. To protect the privacy of IoT data and users, this paper first introduces a controlled verification model for IoT networks and then proposes an identity-based undeniable signature (ID-US) scheme. This controlled verification model establishes a secure IoT data-sharing channel with blockchain technology, which reduces data tampering and inconsistency. This ID-US scheme is constructed with lattice cryptography, wh…
- OpenAlex · Published · First archived
Overshoot-Oriented Frequency Security Assessment and Structural Auditing Through a Traceable BPA Automation Workflow ↗
The increasing penetration of renewable generation and power-electronic-interfaced devices changes the sources of inertia, frequency-control resources, and structural sensitivity of power-system frequency responses. This paper develops a traceable automation workflow for overshoot-oriented frequency security assessment, addressing opaque label provenance, the limited reproducibility of batch transient simulations, and overoptimistic conclusions from random data splits. The workflow links rule-based scenario construction, BPA batch execution, frequency-trajectory parsing, quality gates, safety-…
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.