AI and infrastructure news
Filter by type: Article25
- 17 days ago microsoft.com
Collaborative applications with verifiable operations
Microsoft Research's project explores an architecture for collaborative applications with encrypted data and cryptographically verifiable operations.
GPS field of 176 bits may expose operational metadata
A June 4, 2026 publication reports high-entropy payloads in a public GPS navigation field, but does not prove it is an encrypted control or key-distribution channel.
- 17 days ago sbytec.com
Structuring Intel Management Engine risk detection
Published on February 24, 2026, the article examines Intel Management Engine architecture and firmware, related vulnerabilities, and detection methods.
- 17 days ago surfshark.com
Dausos: Surfshark presents a new VPN protocol
On June 15, 2026, Surfshark presented Dausos, a VPN protocol it describes as designed for speed, security, and efficiency, using AEGIS-256X2.
- 17 days ago cs.auckland.ac.nz
Secure deletion depends on the storage medium
Peter Gutmann’s 1996 article discusses data remanence and the limits of overwriting magnetic and solid-state storage, underscoring why sanitization methods should account for the medium.
- 17 days ago icode4.coffee
HDD and SSD firmware: analysis and operational security
Published on May 27, 2026, the post describes a series covering HDD and SSD firmware dumps, reverse engineering, modification, and JTAG debugging.
- 17 days ago microsoft.com
Using AI to identify gaps in threat detection
In an article published on January 31, 2026, Microsoft describes an AI workflow that extracts TTPs from reports, compares them with existing detections, and flags potential gaps for human review.
- 17 days ago sysdig.com
AWS intrusion: exposed credentials lead from S3 to Bedrock
In an article published on February 4, 2026, Sysdig describes an AWS intrusion that began with credentials exposed in S3, moved through Lambda, and reached Bedrock access. The article highlights an Elastic rule for detecting external layers added to Lambda functions.
NIST argues for continuous monitoring in AI security
In an article published on June 12, 2026, NIST presents a mathematical proof supporting an AI security model based on continuous monitoring and updates, as an alternative to static controls.
- 17 days ago infinitetoolsoft-cyber.github.io
Post raises risks in judicial-data extraction and automation
Published on May 17, 2026, the post alleges that a tool extracts court cases, enriches data with information from Serasa, and sends WhatsApp messages. It also mentions HWID-based licensing and communication with a central server every 30 seconds.
Praetorian uses AI agents to generate Nuclei templates for CVE detection
Praetorian describes a multi-agent pipeline that turns CVE research into validated Nuclei detection templates, using specialized agents and an actor-critic refinement loop.
- 17 days ago zeltser.com
REMnux connects AI agents to over 200 malware analysis tools
Published on February 9, 2026, the article describes an MCP server connecting AI agents to REMnux tools and providing guidance on tool selection and result interpretation.
- 17 days ago eprint.iacr.org
SHA-2 collision attacks reach 39 steps
An article published on June 2, 2026 reports an improved search procedure for SHA-2 collisions and places the advance against earlier results of up to 37 steps.
- 17 days ago hackmosphere.fr
Defender evasion: assessing and improving detections
Published on April 19, 2025, the article describes a two-part series on Windows Defender evasion, including direct syscalls and XOR. Part one provides basic experimental code and points to defensive uses in evaluating antivirus defenses and improving detections.
- 17 days ago jhalon.github.io
V8 Internals: Browser Security in Focus
Published on April 20, 2025, the article opens a three-part series on Chrome internals and browser exploitation, introducing V8 and JavaScript internals.
- 18 days ago blog.quarkslab.com
Black-box analysis of Xiaomi’s MJA1 secure chip
On June 28, 2026, Quarkslab described an analysis of the MJA1 chip covering hardware, I2C traffic, flash extraction and firmware. The work mapped the command protocol and assessed security properties.
- 18 days ago vercel.com
Benchmark compares models for vulnerability discovery
Published on July 18, 2026, the DeepSec benchmark compares model recall, precision, and cost in an open-core application for security analysis.
- 18 days ago bschaatsbergen.com
TPM-protected TLS client keys in Go
An article dated September 7, 2026 explains how to use a client certificate in Go whose private key remains in a TPM, and discusses the per-handshake performance cost.
- 18 days ago eeengineer.com
Authorized inspection of HTTPS traffic with TLS 1.3
An article published on August 29, 2026, explains how to record session secrets using SSLKEYLOGFILE and load them into Wireshark to inspect HTTP requests in captured HTTPS connections.
- 18 days ago hackers-arise.com
Research warns of cleartext traffic on GEO satellite links
Research published on June 18, 2026, reports that a significant portion of GEO satellite traffic is transmitted without encryption and could be intercepted using relatively accessible equipment.
- 18 days ago onejailbreak.com
Post reports decryption of protected iOS IPA without a physical iPhone
Published on September 27, 2026, the post claims that FairPlay-protected iOS IPAs can be decrypted without a physical iPhone or jailbreak. The report is relevant to app protection assessments.
- 18 days ago jeffgeerling.com
QuadRF tracks drones and detects Wi-Fi with a phased-array radio
In a post published on July 10, 2026, Jeff Geerling describes QuadRF, a radio built with a Raspberry Pi 5 and an FPGA board that uses signal processing and beamforming to track drones and detect Wi-Fi through walls.
- 18 days ago riotgames.com
Riot announces on-demand Vanguard operation
In a post published on June 24, 2026, Riot announced that Vanguard can run only during gameplay when specified device security features are enabled.
- 18 days ago tradecraftgarden.org
Tradecraft Garden presents a tool for testing evasion and detection
On June 30, 2026, Tradecraft Garden published a post about Crystal Palace, a linker that transforms and randomizes code, generates YARA rules, and supports reusable tradecraft modules.
- 18 days ago vulhunt.re
VulHunt: detecting vulnerabilities in binaries
In posts published on June 29, 2026, Binarly’s research team presents the VulHunt framework and an example detecting remote code execution in rsync.
Let's assess your project
I reply with scope and a proposal.