Articles tagged with Cybersecurity
Researchers found that thieves can use stolen expired credit cards to make fraudulent charges by rewriting the expiration date. This loophole exists because credit card accounts do not expire with the physical card, and banks rely on the expiration date printed on the card for verification.
Tianhao Wang receives $677,866 CAREER Award to advance privacy-preserving data synthesis and protect sensitive information from being disclosed. His research aims to create realistic synthetic datasets that preserve useful patterns while protecting individual privacy.
A team of computer scientists at the University of California San Diego developed a device that can take over communications between two key flight computers on a Boeing 737 by plugging into an unused maintenance port. This attack can be carried out in under 60 seconds, posing a significant risk to aviation security.
The KAIST research team developed an explainable AI technology that detects patterns of foreign-linked influence operations in online news comments. The model identifies 23,998 accounts exhibiting patterns consistent with public-opinion manipulation, targeting division and confrontation within Korean society.
Researchers reveal a new attack surface exposed to malicious and compromised SIMs, allowing attackers to gather information about devices, interfere with connectivity, and serve as entry points for further cyberattacks. The study highlights four attacker scenarios leading to malicious or compromised SIMs and eSIMs.
NC State is leading three Genesis Mission projects using AI to accelerate discovery in high-performance computing, cybersecurity, and astrophysics. The projects focus on developing AI-powered tools for scientific research, defending agentic AI against adversarial attacks, and embedding AI techniques in large-scale simulations of neutro...
The VERITAS project establishes AI Assurance as a core function of scientific research infrastructure to document, review, and stress-test AI systems. It aims to develop practical methods for detecting vulnerabilities before they compromise scientific results.
Researchers at Worcester Polytechnic Institute are launching a three-year project to train high school teachers in quantum information science and cybersecurity. The program aims to inspire young people to pursue education and careers in emerging science and technology fields.
A Tulane University team is using AI to discover new superconductors, which could improve the nation's electrical grid, medical imaging, and quantum computing. The project combines high-fidelity calculations, physics-aware AI, and experimental measurements to accelerate discovery.
A recent study from Duke University and industry collaborators found that at least 1% of resumes submitted to a popular hiring platform contained hidden instructions designed to trick the AI system. The trend is accelerating quickly, with the rate increasing sevenfold between July 2024 and November 2025.
A study by UC San Diego researchers found that at least 2.2 million cars in the US and worldwide are vulnerable to theft due to a Bluetooth-based anti-theft system installed by dealers since 2017. The device, which can be controlled remotely via a smartphone app, has been fixed by the manufacturer with a firmware update.
The European Law Institute has approved its first comprehensive framework for dealing with digital assets and personal digital content after death. The rules provide a dual legal framework recognizing the need for protection, privacy, and dignity in digital inheritance.
A new brain-like electronic device consumes very little energy and detects novelties almost instantly, with over 98% accuracy. The device requires roughly 10,000 times fewer computer operations than conventional AI approaches, paving the way for more energy-efficient AI systems.
A team of researchers, led by Ying Zhang, has developed artificial intelligence-driven tools to identify and attack software vulnerabilities. By teaching AI to generate proof-of-concept exploits, developers can see exactly how attackers could exploit known flaws, motivating them to fix issues before malicious actors do.
Researchers have developed a federated learning algorithm that solves the long-standing conflict between robustness and efficiency in AI development. The new approach anonymizes data and reduces single-point failure risks while maintaining speed. By remembering past client interactions, servers can protect against malicious input.
Researchers developed SST-MedChain, a patient-centric framework for secure electronic medical record sharing on permissioned blockchains. The system uses non-interactive delegation, one-time access tokens, and policy-bounded re-delegation to reduce costly on-chain authorization while preserving traceability and revocation.
The new Ph.D. program in cybersecurity at Old Dominion University highlights the interdisciplinary nature of the field, incorporating emerging technologies like artificial intelligence. Students from diverse backgrounds are encouraged to contribute to advancing cybersecurity research and education.
Devadas pioneered the field of hardware security, making foundational contributions to Trusted Execution Environments (TEEs), Physical Unclonable Functions (PUFs), and Side Channel Resistant Processors. His innovations have shaped both academia and industry, safeguarding data in a digital world.
Researchers create PhishLumos AI system to detect phishing campaigns by analyzing infrastructure clues, achieving 8-day faster detection than experts. The system uncovered over 190,000 new links, with 92% later flagged as malicious, outperforming content-centric approaches.
A major security vulnerability was discovered, allowing attackers to fake their identity in smartphone text conversations by exploiting the difference between email and text message formats. The issue was patched in Android and Apple smartphones as well as all major wireless carriers, including Verizon and T-Mobile.
A team of NUS researchers has developed a self-testing quantum chip that generates certified random numbers while verifying its own measurement hardware's functionality. The chip, published in PRX Quantum, removes the trust assumption in traditional random number generators.
UT San Antonio's Jeff Prevost is appointed to the Texas Quantum Initiative Advisory Committee, guiding strategic investment and collaboration to advance the state's leadership in quantum research and technology development. The committee aims to develop a strategic plan supporting the growth of Texas' quantum economy.
SwRI's Intelligent Systems Division has achieved CMMI, ISO 9001, and CMMC certifications to demonstrate its commitment to delivering secure and reliable transportation solutions. The certifications validate SwRI's robust cybersecurity protections and quality management framework.
IMDEA Networks has secured four SNS JU projects to develop next-generation 6G networks in Europe. The projects address key challenges including sustainability, security and industrial transformation. IMDEA Networks is leading two of the projects with principal investigators Marco Fiore and Joerg Widmer.
A new study published in the Journal of Big Data highlights the journal's emergence as a leading publication in data science and artificial intelligence research. The study found that JBD has become a central hub for high-impact research worldwide, with significant contributions from top researchers.
The energy retail sector is a vulnerable part of the energy industry's value chain and critical infrastructure. A new study proposes concrete methods to strengthen cybersecurity resilience in retail organisations.
The investigation highlights the lack of research on AI toys' impact on early cognitive and socioemotional development, while also raising concerns over security risks and potential harm to minors. Experts advocate for mandatory labeling and regulation to ensure safer deployment of these devices.
Elisa Bertino, Purdue University professor, has been elected ACM President, aiming to strengthen the organization's role in promoting computing excellence. She plans to support early-career researchers, promote open access to publications, and expand ACM's reach globally.
The University of Texas System has invested over $470 million in capital projects supporting UT San Antonio's growth as a top public research university. These investments span research, innovation, infrastructure, technology, and patient care, with a focus on expanding the university's research capabilities and technology infrastructure.
A new code-reuse attack named SFOP exploits vulnerabilities in signal handling and Intel CET in Linux systems, achieving arbitrary code execution. The attack is enabled by 12 priorly unknown weaknesses that affect Linux signals, making it practicable across all programs running on a Linux system.
The Critical Infrastructure Security Institute (CISI) at Texas Tech University will advance research, innovation and collaboration in national security and critical infrastructure protection. The new site expands capacity for cutting-edge solutions to emerging security challenges.
Code reuse attacks exploit existing program components to inject malicious code, but PLaTypus restricts arbitrary transitions between libraries to prevent such attacks. This approach reduces the number of indirectly accessible functions by over 98% and causes less than 0.5% additional runtime overhead.
Machines with advanced AI capabilities are being developed to restore lost senses such as sight and sound, and even simulate touch and taste. This technology has the potential to revolutionize various fields like healthcare and education, but also raises serious concerns about privacy and manipulation.
Barua's project aims to advance predictive maintenance and diagnostics of naval subsystems using power signatures, without intrusive sensors. By extracting hidden load features from existing logs, they aim to improve current naval energy systems and develop new compressed sensing methods.
A study analyzing 100 million posts from underground cybercrime communities found that most cybercriminals lack the skills to use AI effectively, and its adoption has limited benefits for their work. However, AI coding assistants are mostly useful for already skilled actors, and poorly secured agentic AI systems pose a significant risk.
Researchers discovered that simple artificial intelligence tools can bypass security techniques meant to protect authentic content from use in deepfakes and facial identity theft. The study found that attackers can easily defeat existing image protection using off-the-shelf AI models and simple commands.
The report examines how generative AI tools are transforming software development, offering benefits such as increased productivity but also raising security vulnerabilities and technical debt. Strong software engineering practices are still required to ensure systems are secure, reliable, and maintainable.
A study by the University of Vaasa and Aalto University finds that mandatory cybersecurity disclosure in the US has increased internal documentation and made cyber risks more visible to senior management, but not affected investor behavior. Companies produced new content describing their cybersecurity governance structures, suggesting ...
Researchers at MIT developed a technique to overcome memory constraints and communication bottlenecks in federated learning, enabling faster and more accurate AI model training. The new framework, FTTE, uses a subset of model parameters and an asynchronous approach to reduce lag time and improve training performance.
Researchers at Texas A&M University created HIPPO, a browser extension that generates unique passwords for each website without storing them. Participants preferred HIPPO over traditional password tools for ease and security, reporting higher satisfaction rates.
Computer scientist Micheal Lones warns that using generative AI in machine learning increases the risk of malicious cyberattacks, data leaks, and bias against underrepresented groups. He advises developers to manually evaluate LLM-generated code and outputs to mitigate these risks.
Researchers introduce EBDA, a novel framework that replaces traditional PKI certificate systems with a blockchain-maintained Graph of Trust (GoT), enabling fully decentralized identity authentication for vehicles. The approach reduces authentication latency by at least 22.93% while maintaining low computational and storage overhead.
The AUMOVIO-NTU Corporate Lab will focus on areas like AI, sustainability, novel materials, and connectivity to develop solutions for safer, smarter, and more sustainable transportation. The joint lab aims to accelerate innovations that can support Singapore's future mobility ecosystem.
A new database, led by Harvard computer scientist Salil Vadhan, enables companies to adopt differential privacy framework, providing real-world applications for protected data. The Differential Privacy Deployments Registry aims to promote widespread adoption and refinement of the technology.
Binghui Wang, an Illinois Tech Assistant Professor of Computer Science, has been awarded the 2025 Distinguished Junior R&D Award by the IEEE Chicago Section for his groundbreaking research in AI security and trustworthy machine learning. The award recognizes Wang's impactful work on developing provably secure and trustworthy AI systems.
Researchers discovered that key weight parameters contribute to both performance and data-privacy vulnerabilities in AI neural networks. They developed a technique to balance these aspects, achieving better results than existing methods in defending against membership inference attacks.
A study found that deepfake X-rays can be indistinguishable from authentic images, posing a risk to patient diagnoses and digital medical records. Radiologists and AI models struggled to detect synthetic images, with accuracy ranging from 58% to 92%. Experts recommend implementing advanced digital safeguards to prevent tampering.
Researchers at the University of East Anglia have developed a new encryption method using chaos theory to protect medical images from cyber-attacks. The approach, called 'image-level protection,' makes each scan its own 'fortress' by making it extremely difficult for hackers to access or decrypt the images without the correct key.
Cas Cremers and collaborators receive Levchin Prize for Real-World Cryptography for their work on the Tamarin Prover, an open-source analysis tool for cryptographic protocols, which has had a significant impact on the practice of cryptography and its use in real-world systems.
Florida Atlantic University has received a $4.5 million grant from the US Air Force to establish a high-fidelity platform for autonomous decision-making and real-time sensor fusion research. The T-1A Jayhawk simulator will be used to study cognitive performance, situational awareness, stress and decision-making under pressure.
Southwest Research Institute (SwRI) has achieved CMMC Level 2 certification through an independent assessment, demonstrating a commitment to cybersecurity best practices. The certification covers SwRI's Intelligent Systems and Mechanical Engineering divisions and requires the organization to meet 110 security-related requirements.
Researchers introduced an optimized framework for Bitcoin transaction validation using Segregated Witness technology, skipping repetitive verification steps and reducing validation time by approximately 50%. The 'single-validation' approach enhances the network's scalability without compromising security.
Vijay Anand, Kennesaw State University Associate Professor, recognized for pioneering research in secure computation and intelligent infrastructure. He has led the design of nationally recognized cybersecurity programs and advanced innovations in data exchange and cyber defense.
The institute will focus on technologies required to operate next-generation AI supercomputer systems reliably while accelerating scientific breakthroughs. It aims to drive innovation in making AI data centers more efficient, reliable, secure, and integrated with the nation's energy system.
Researchers from UC Irvine have discovered a critical security vulnerability in autonomous target-tracking drones that can be exploited using an ordinary umbrella. The team demonstrated how attackers could use the 'FlyTrap' attack framework to manipulate drones, drawing them close enough for capture or causing them to crash.
SynapTrack enables faster and more accurate detection of fraudulent activity using blockchains and cryptocurrencies, reducing false positives by a substantial margin. The system has been tested with real-life data from the Bybit hack, tracing hackers with 98% accuracy.
Researchers at Adelaide University have developed a world-first cybersecurity system to protect drones from hacking, signal disruption, and malicious software. The system uses Software-Defined Wide Area Networking (SD-WAN) to act as a smart traffic controller for internet connections, making drones less vulnerable to cyber threats.
Researchers at IMDEA Networks Institute discovered that tire pressure sensors in modern cars can be used to track vehicles and infer movement patterns. The study highlights the need for stronger security measures in future vehicle sensor systems.
The project aims to help universities better understand research security by examining human and behavioral dimensions of risk. Structured role-playing games will simulate realistic academic scenarios, encouraging participants to explore trade-offs and motivations that often remain hidden in standard security planning.
A new study by the University of Cambridge found that many AI bots lack basic safety disclosures, including transparency about their abilities and potential risks. The 'AI Agent Index' revealed a significant transparency gap, with only four out of thirty agents publishing formal safety and evaluation documents.