THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗620 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- Hacker News · Posted on Hacker News · First archived
Show HN: Collaborative money tracker, E2E encryption, MCP ↗
Hi HN, I'm Andrei. I built a money tracker for myself with everything I ever wanted from one. What was important for me is wallets in different currencies (I travel a lot), planning future payments, seeing what balances would look like at certain date in the future and having external API and MCP. I had plans of maybe making it public one day so I decided to encrypt amounts and balances to stand out from gazillion of other trackers, then I kept a…
- arXiv · Published · First archived
Prioritizing Microservice Requests via Retries ↗
Cloud services rapidly shift towards independently-managed microservices architectures. This independence may lead to temporary microservices miscoordination, resulting in overloads and rejections of valuable transactions. This weakness may further be exploited by attackers to launch overload attacks inflicting performance and cost damages. Retry operations are a key machinery aiming at overcoming seldom rejections. However, during overload periods they: a) Fail protecting valuable transactions from rejections, and b) Trigger large-scale performance-degrading retry storms. We propose simple mo…
- Hacker News · Posted on Hacker News · First archived
Containment and monitoring failures are to blame for AI hacking reports: experts ↗
Hacker News discussion.
- arXiv · Published · First archived
Quantum-Aware Key Rank for Side-Channel Attacks evaluation ↗
Side-channel attacks on block ciphers rarely recover the key outright: they leave a residual key space ordered by subkey posteriors, and evaluation laboratories report the key rank of the true key against thresholds near 2^48 and 2^60. No evaluation framework models an adversary who collects traces classically and finishes the search on a quantum computer, although quantum search with advice provides exactly that. We give such an adversary a cost model and a metric. For a device whose key has rank r, any quantum algorithm with classical access to the posteriors needs Omega(sqrt(r)) cipher eval…
- arXiv · Published · First archived
Tulva: Practical Asynchronous Threshold FHE ↗
We present Tulva, a practical threshold FHE scheme which equips a base FHE scheme with an asynchronous threshold decryption mechanism in a modular way. Our scheme simultaneously (1) is compatible with virtually any base FHE scheme and leaves its ciphertexts unchanged apart from an appended random tag, (2) supports a wide range of threshold profiles $(t,K)$ and ring degrees $\geq 256$ with 6-25 bits partial decryption per plaintext bit, and (3) achieves security in the presence of partial decryption queries on challenge ciphertexts based on the standard LWE assumption. We provide an open-source…
- arXiv · Published · First archived
From Training to Escalation: Forensic Analysis and Local Recreation of RL/RLHF-Induced Privilege Escalation in AI Agents (CVE-2026-65616) ↗
Mid-2026 reporting on autonomous AI evaluation incidents claimed that frontier large language model (LLM) agents escaped server containment through emergent coordination and cloud infrastructure attacks. This paper contextualizes those claims through forensic analysis and containerized recreation of both the Highly Persistent Internal Model (HPIM) training-case conditions and the Phase One privilege escalation targeting internal package repositories during OpenAI's ExploitGym evaluations. We recreate the configuration of the OpenAI-provided training example and reproduce the cryptographic veri…
- arXiv · Published · First archived
Phantomware: a Data Augmentation Framework for the Detection of Emerging Malware Campaigns ↗
Detecting unseen malware variants remains a major challenge as malware families continuously evolve. This issue is exacerbated in data-scarce scenarios such as emerging malware campaigns, where only a few samples are available to train robust detectors. A common strategy is to proactively generate malware variants and use them as augmentation data to expose models to a broader range of potential threats. Existing approaches that generate functional malware variants through adversarial manipulation suffer from several important limitations. Generated samples must remain executable and preserve…
- Hacker News · Posted on Hacker News · First archived
MCP-shield – Runtime security proxy and reversible secret vault for MCP ↗
Hacker News discussion.
- Hacker News · Posted on Hacker News · First archived
Global takedown hits network behind 1B phishing messages ↗
Hacker News discussion.
- Hacker News · Posted on Hacker News · First archived
Anyone built something where AI computation get cryptography receipts ↗
We're a small proof-of-useful-work project. The validators don't mine — they verify AI computations (matrix multiplications + activation functions) and get consensus weight for it. The part that matters to you: submit any GEMM workload up to 256×256 and we return the result plus a cryptographic receipt — a SHA-256 commitment chain folded into our ledger state, verifiable by anyone forever. Free, no token, no signup beyond an API key we generate i…
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.