THE INTERNET IS THINKING

Earlier sources: Security

Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.

SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.

Open in the map ↗
Share this page ↗

646 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.

Earlier sources

Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.

  1. Hugging Face · Model / dataset date · First archived

    AutomatosX/AX-Cyber-Tiel-Coder-35B-A3B-MLX-AXQ-MXFP8-MTP — model update ↗

    ## Runtime format audit (2026-10-06) The quantization container mode was corrected from `affine` to `mxfp8` in both config blocks after inspecting every quantized module header. Weight bytes and per-module precision assignments are unchanged. This family has no n-gram tensors; no n-gram file or declaration was added. This remote format audit does not grant an oMLX/MTPLX runtime profile or a successful load/generation claim. See [runtime_audit.json](runtime_audit.json) for pinned config/index/header bindings, architecture, physical-format findings, and applied corrections. This is development e

  2. Hacker News · Posted on Hacker News · First archived

    Tamagotchi Hacking, in Depth ↗

    Hacker News discussion.

  3. Hacker News · Posted on Hacker News · First archived

    Expanding the Cyber Verification Program ↗

    Hacker News discussion.

  4. Hacker News · Posted on Hacker News · First archived

    Toronto-Based VPN Provider Plans to Quit Canada over Lawful-Access Bill ↗

    Hacker News discussion.

  5. arXiv · Published · First archived

    Mission-Aware Attestation Envelopes for Time-Critical Autonomous Action: A Hardware-in-the-Loop V2I Study ↗

    An autonomous system that asks for a privileged physical action is usually gated on integrity evidence: a platform proves what it is running, and the request is granted or refused on that basis. Such a gate is normally treated as a predicate, yet the evidence behind it has an age, the decision that consumes it has a latency, and the physical system that waits for it has a deadline. We formulate mission-aware attestation as a runtime assurance contract that holds only when integrity is valid, the evidence is fresh enough, and the decision completes inside a budget derived from the current physi…

  6. arXiv · Published · First archived

    BARE-AI: Bit-Flip Attack Resilience in AI Hardware through Built-in Performance Monitors ↗

    Deep Neural Networks (DNNs) are integral to many safety critical systems, yet they remain highly vulnerable to bit-flip attacks (BFAs), where a few memory level perturbations can drastically degrade accuracy. Existing defenses incur significant hardware overhead, depend on retraining, or fail against targeted flips. We propose BARE-AI, a runtime framework that detects, localizes, and mitigates BFAs during inference. BARE-AI introduces AI Performance Counters (APCs), lightweight hardware monitors in the accelerator datapath that capture per-layer activation statistics such as sparsity, entropy,…

  7. arXiv · Published · First archived

    Secure Speculative Decoding for Large Language Models ↗

    Speculative decoding accelerates inference for a large language model (LLM), referred to as the \emph{target model}, by first using a smaller model, referred to as the \emph{draft model}, to generate candidate tokens and then verifying them with the target model for acceptance or rejection. Prior studies primarily focused on the efficiency-utility trade-off of speculative decoding, e.g., lossy speculative decoding, leaving its security implications largely unexplored. In this work, we bridge this gap by providing the \emph{first} systematic study of the security implications of speculative dec…

  8. arXiv · Published · First archived

    Semantic Behavioral Watermarking: Paraphrase-Robust and Forgery-Resistant Provenance for LLM Agents ↗

    Behavioral watermarking embeds an owner identifier in an LLM agent's high-level action choices, giving provenance without touching output tokens. Prior agent watermarks break in two ways. First, all three prior schemes bind the watermark to the exact action symbol, so renaming a tool desynchronizes decoding even when the observation is untouched; in AgentMark's own robustness test, paraphrasing the observation alone drops bit-recovery to 16.8%. Second, every prior agent watermark studies only removal: none asks whether an adversary can forge a trajectory that verifies as someone else's, a ques…

  9. arXiv · Published · First archived

    TwinViT-DeepJSCC: Adversarially Robust Semantic Image Communication ↗

    Learning-based semantic communication is vulnerable to adversarial perturbations introduced before semantic encoding or over wireless channels. This paper proposes TwinViT-DeepJSCC, a preventive-corrective semantic image transceiver operating under a fixed channel-use budget. Two Vision Transformer (ViT)-based deep joint source-channel coding (DeepJSCC) branches learn complementary latent representations protected by sensitivity-aware masking. At the receiver, confidence-aware fusion, blind corruption-severity estimation, and signal-to-noise ratio (SNR)-severity-conditioned denoising diffusion…

  10. arXiv · Published · First archived

    RAG-PIBench: A Leakage-Aware Benchmark for Prompt-Injection Detection in Trustworthy RAG Systems ↗

    Retrieval-Augmented Generation (RAG) systems are vulnerable to prompt-injection attacks embedded in retrieved content. We introduce RAG-PIBench, a benchmark for RAG-style prompt-injection detection containing 4,876 contextual examples across frozen train, validation, and protected-test splits. Using a leakage-aware construction pipeline and strict evaluation protocol, we compare keyword-based, semantic-reference, TF-IDF, and transformer-based detectors. DistilBERT achieves the best protected-test performance (F1 = 0.896, PR-AUC = 0.968), while TF-IDF SVM and logistic regression remain competit…

Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.

How to assess evidence about Security

Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.

See the collection and counting methodology ↗ · Read the weekly synthesis ↗

Follow a thread

Explore related regions

These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.