Articles tagged with Cybersecurity
Devadas pioneered the field of hardware security, making foundational contributions to Trusted Execution Environments (TEEs), Physical Unclonable Functions (PUFs), and Side Channel Resistant Processors. His innovations have shaped both academia and industry, safeguarding data in a digital world.
Researchers create PhishLumos AI system to detect phishing campaigns by analyzing infrastructure clues, achieving 8-day faster detection than experts. The system uncovered over 190,000 new links, with 92% later flagged as malicious, outperforming content-centric approaches.
A team of NUS researchers has developed a self-testing quantum chip that generates certified random numbers while verifying its own measurement hardware's functionality. The chip, published in PRX Quantum, removes the trust assumption in traditional random number generators.
A major security vulnerability was discovered, allowing attackers to fake their identity in smartphone text conversations by exploiting the difference between email and text message formats. The issue was patched in Android and Apple smartphones as well as all major wireless carriers, including Verizon and T-Mobile.
UT San Antonio's Jeff Prevost is appointed to the Texas Quantum Initiative Advisory Committee, guiding strategic investment and collaboration to advance the state's leadership in quantum research and technology development. The committee aims to develop a strategic plan supporting the growth of Texas' quantum economy.
IMDEA Networks has secured four SNS JU projects to develop next-generation 6G networks in Europe. The projects address key challenges including sustainability, security and industrial transformation. IMDEA Networks is leading two of the projects with principal investigators Marco Fiore and Joerg Widmer.
SwRI's Intelligent Systems Division has achieved CMMI, ISO 9001, and CMMC certifications to demonstrate its commitment to delivering secure and reliable transportation solutions. The certifications validate SwRI's robust cybersecurity protections and quality management framework.
The energy retail sector is a vulnerable part of the energy industry's value chain and critical infrastructure. A new study proposes concrete methods to strengthen cybersecurity resilience in retail organisations.
The investigation highlights the lack of research on AI toys' impact on early cognitive and socioemotional development, while also raising concerns over security risks and potential harm to minors. Experts advocate for mandatory labeling and regulation to ensure safer deployment of these devices.
A new study published in the Journal of Big Data highlights the journal's emergence as a leading publication in data science and artificial intelligence research. The study found that JBD has become a central hub for high-impact research worldwide, with significant contributions from top researchers.
Elisa Bertino, Purdue University professor, has been elected ACM President, aiming to strengthen the organization's role in promoting computing excellence. She plans to support early-career researchers, promote open access to publications, and expand ACM's reach globally.
The University of Texas System has invested over $470 million in capital projects supporting UT San Antonio's growth as a top public research university. These investments span research, innovation, infrastructure, technology, and patient care, with a focus on expanding the university's research capabilities and technology infrastructure.
A new code-reuse attack named SFOP exploits vulnerabilities in signal handling and Intel CET in Linux systems, achieving arbitrary code execution. The attack is enabled by 12 priorly unknown weaknesses that affect Linux signals, making it practicable across all programs running on a Linux system.
The Critical Infrastructure Security Institute (CISI) at Texas Tech University will advance research, innovation and collaboration in national security and critical infrastructure protection. The new site expands capacity for cutting-edge solutions to emerging security challenges.
Code reuse attacks exploit existing program components to inject malicious code, but PLaTypus restricts arbitrary transitions between libraries to prevent such attacks. This approach reduces the number of indirectly accessible functions by over 98% and causes less than 0.5% additional runtime overhead.
Researchers discovered that simple artificial intelligence tools can bypass security techniques meant to protect authentic content from use in deepfakes and facial identity theft. The study found that attackers can easily defeat existing image protection using off-the-shelf AI models and simple commands.
A study analyzing 100 million posts from underground cybercrime communities found that most cybercriminals lack the skills to use AI effectively, and its adoption has limited benefits for their work. However, AI coding assistants are mostly useful for already skilled actors, and poorly secured agentic AI systems pose a significant risk.
The report examines how generative AI tools are transforming software development, offering benefits such as increased productivity but also raising security vulnerabilities and technical debt. Strong software engineering practices are still required to ensure systems are secure, reliable, and maintainable.
Researchers at MIT developed a technique to overcome memory constraints and communication bottlenecks in federated learning, enabling faster and more accurate AI model training. The new framework, FTTE, uses a subset of model parameters and an asynchronous approach to reduce lag time and improve training performance.
A study by the University of Vaasa and Aalto University finds that mandatory cybersecurity disclosure in the US has increased internal documentation and made cyber risks more visible to senior management, but not affected investor behavior. Companies produced new content describing their cybersecurity governance structures, suggesting ...
Researchers at Texas A&M University created HIPPO, a browser extension that generates unique passwords for each website without storing them. Participants preferred HIPPO over traditional password tools for ease and security, reporting higher satisfaction rates.
Computer scientist Micheal Lones warns that using generative AI in machine learning increases the risk of malicious cyberattacks, data leaks, and bias against underrepresented groups. He advises developers to manually evaluate LLM-generated code and outputs to mitigate these risks.
Researchers introduce EBDA, a novel framework that replaces traditional PKI certificate systems with a blockchain-maintained Graph of Trust (GoT), enabling fully decentralized identity authentication for vehicles. The approach reduces authentication latency by at least 22.93% while maintaining low computational and storage overhead.
The AUMOVIO-NTU Corporate Lab will focus on areas like AI, sustainability, novel materials, and connectivity to develop solutions for safer, smarter, and more sustainable transportation. The joint lab aims to accelerate innovations that can support Singapore's future mobility ecosystem.
A new database, led by Harvard computer scientist Salil Vadhan, enables companies to adopt differential privacy framework, providing real-world applications for protected data. The Differential Privacy Deployments Registry aims to promote widespread adoption and refinement of the technology.
Binghui Wang, an Illinois Tech Assistant Professor of Computer Science, has been awarded the 2025 Distinguished Junior R&D Award by the IEEE Chicago Section for his groundbreaking research in AI security and trustworthy machine learning. The award recognizes Wang's impactful work on developing provably secure and trustworthy AI systems.
Researchers discovered that key weight parameters contribute to both performance and data-privacy vulnerabilities in AI neural networks. They developed a technique to balance these aspects, achieving better results than existing methods in defending against membership inference attacks.
A study found that deepfake X-rays can be indistinguishable from authentic images, posing a risk to patient diagnoses and digital medical records. Radiologists and AI models struggled to detect synthetic images, with accuracy ranging from 58% to 92%. Experts recommend implementing advanced digital safeguards to prevent tampering.
Researchers at the University of East Anglia have developed a new encryption method using chaos theory to protect medical images from cyber-attacks. The approach, called 'image-level protection,' makes each scan its own 'fortress' by making it extremely difficult for hackers to access or decrypt the images without the correct key.
Cas Cremers and collaborators receive Levchin Prize for Real-World Cryptography for their work on the Tamarin Prover, an open-source analysis tool for cryptographic protocols, which has had a significant impact on the practice of cryptography and its use in real-world systems.
Florida Atlantic University has received a $4.5 million grant from the US Air Force to establish a high-fidelity platform for autonomous decision-making and real-time sensor fusion research. The T-1A Jayhawk simulator will be used to study cognitive performance, situational awareness, stress and decision-making under pressure.
Southwest Research Institute (SwRI) has achieved CMMC Level 2 certification through an independent assessment, demonstrating a commitment to cybersecurity best practices. The certification covers SwRI's Intelligent Systems and Mechanical Engineering divisions and requires the organization to meet 110 security-related requirements.
Researchers introduced an optimized framework for Bitcoin transaction validation using Segregated Witness technology, skipping repetitive verification steps and reducing validation time by approximately 50%. The 'single-validation' approach enhances the network's scalability without compromising security.
Vijay Anand, Kennesaw State University Associate Professor, recognized for pioneering research in secure computation and intelligent infrastructure. He has led the design of nationally recognized cybersecurity programs and advanced innovations in data exchange and cyber defense.
The institute will focus on technologies required to operate next-generation AI supercomputer systems reliably while accelerating scientific breakthroughs. It aims to drive innovation in making AI data centers more efficient, reliable, secure, and integrated with the nation's energy system.
SynapTrack enables faster and more accurate detection of fraudulent activity using blockchains and cryptocurrencies, reducing false positives by a substantial margin. The system has been tested with real-life data from the Bybit hack, tracing hackers with 98% accuracy.
Researchers at Adelaide University have developed a world-first cybersecurity system to protect drones from hacking, signal disruption, and malicious software. The system uses Software-Defined Wide Area Networking (SD-WAN) to act as a smart traffic controller for internet connections, making drones less vulnerable to cyber threats.
Researchers at IMDEA Networks Institute discovered that tire pressure sensors in modern cars can be used to track vehicles and infer movement patterns. The study highlights the need for stronger security measures in future vehicle sensor systems.
Researchers from UC Irvine have discovered a critical security vulnerability in autonomous target-tracking drones that can be exploited using an ordinary umbrella. The team demonstrated how attackers could use the 'FlyTrap' attack framework to manipulate drones, drawing them close enough for capture or causing them to crash.
The project aims to help universities better understand research security by examining human and behavioral dimensions of risk. Structured role-playing games will simulate realistic academic scenarios, encouraging participants to explore trade-offs and motivations that often remain hidden in standard security planning.
A new study by the University of Cambridge found that many AI bots lack basic safety disclosures, including transparency about their abilities and potential risks. The 'AI Agent Index' revealed a significant transparency gap, with only four out of thirty agents publishing formal safety and evaluation documents.
Researchers at the University of East London identified a critical weakness in Industrial Internet of Things networks that can destabilize factories and safety-critical infrastructure. Attackers can exploit subtle 'delay attacks' to quietly disrupt coordination, making timing just as important as information in highly automated systems.
Research from UNSW Sydney and ANU found that people with average face-recognition ability performed only slightly better than chance in spotting AI-generated faces. Even super-recognisers, who excel at recognizing real human faces, were not immune to being fooled by highly realistic AI-generated images.
A new study by Binghamton University School of Management reveals that businesses can improve their performance when they openly discuss and address cybersecurity issues. The research found a positive correlation between cybersecurity readiness and firm performance, suggesting that proactive measures can lead to better outcomes.
The University of Tennessee and UCOR have strengthened their partnership to provide training and educational opportunities for students and workforce development in nuclear and criticality safety. The MOU renewal will include projects, research, and curriculum focused on these areas.
New machine-learning tools significantly improve phishing site detection accuracy, surpassing 95% precision/recall. The study evaluates ten classifiers across three public datasets using URL, domain, and content features.
Researchers say tech companies need to adopt user-centered approaches to create authentication systems that are secure by design. They call for more inclusive and consistent methods, avoiding one-size-fits-all models that burden users with complex security rules.
A new report by Anglia Ruskin University and the University of York identifies key weaknesses in the UK's food system and recommends interventions to prevent disruptions from escalating into a crisis. The study suggests increasing energy security, diversifying food value chains, and promoting varied diets to reduce risks.
Researchers investigate real-world blockchain security incidents to extract representative attack patterns and categorize them into six classes based on standard blockchain architecture layers. The study also evaluates current detection and defense strategies, highlighting their strengths and limitations.
The VERIFHE project aims to develop an open-source library for verifiable homomorphic encryption, enabling private and reliable inference. The ERC Proof of Concept grant will support the development of practical tools for machine learning services.
The Association for Computing Machinery has named 72 new Fellows for their technical innovations and service to the field. The honorees represent the top 1% of professionals worldwide, with contributions in AI for healthcare, computer graphics, data management, and more.
Researchers have identified a new vulnerability in AI-powered robots, where malicious text on signs or objects can hijack their decision-making. The study, led by UC Santa Cruz professors Alvaro Cardenas and Cihang Xie, presents the first academic exploration of environmental indirect prompt injection attacks against embodied AI systems.
A new approach uses multiple LLM agents collaborating through iterative interactions to improve AI safety checks, outperforming existing methods in F1-score and achieving better trade-offs between catching harmful and harmless prompts. The system divides work into two teams: generator and analyzer, with logs capturing past mistakes and...
Researchers found that nearly half of geostationary satellite communications are not encrypted, putting sensitive data such as cellular texts, voice calls, and military information at risk. The study led to immediate action from companies like T-Mobile, Walmart, and KPU Telecom, which enabled encryption in response to the findings.
New research from the University of East London reveals widespread online risk-taking among young people, with many engaging in illegal behavior before crossing a legal boundary. The study highlights clear pathways into cybercrime, often driven by risk, opportunity, and lack of understanding about online laws.
A new study reveals that young people are at risk of engaging in serious online offenses through gradual progression from low-risk behaviors like digital piracy. Researchers found that nearly half reported engaging in illegal online behavior early on, with many describing a pattern of repeat offending.
A recent paper highlights the need for defense mechanisms covering software, programs, and physical components of quantum computing systems. Key findings include the risk of crosstalk, intellectual property theft, and lack of end-to-end protection, emphasizing the need for safeguarding quantum computers from ground up.
Andreas Zeller recognized for his work on automated debugging and security testing, with a total of nine Test of Time Awards. He is one of the few researchers to receive two ERC Advanced Grants from the European Research Council.