Hello security researchers! Like it or not, agentic AI is here. It’s time to explore its impact on novel, academic research in cybersecurity. To this end, we’re launching the Conference for Synthetic Security Research (https://synsec.org). Researchers, start your agents!

Almost in Karlsruhe for this talk. Looking forward to some great discussions with the KIT crypto and security community.

Although we had secretly planned a small extension, we realized that the initial deadline was off by one… month 😵‍💫 Thus, we are now extending the submission deadline for the "Explainable AI and Security" (XAISEC) workshop: 🌐 https://xaisec-workshop.org ⏱️Deadline: J̶a̶n̶ ̶2̶9̶t̶h̶ Feb 26th, 2026 (AoE)

went back and grabbed the full video of her intro. absolutely incredible 🇮🇹🍝👩‍🍳🤌🇮🇹🍝👩‍🍳🤌🇮🇹🍝👩‍🍳🤌🇮🇹🍝👩‍🍳🤌

Francesco and I have a special Christmas gift for you 🎁🎅 With the help of @kastel-labs.bsky.social, we've started a new workshop on "Explainable AI and Security" co-located with EuroS&P 2026, for which we seek submissions. Details at: 🌐 https://xaisec-workshop.org ⏱️Deadline: Jan 29th, 2026 (AoE)

🎉 Herzlichen Glückwunsch, Klaus-Robert Müller! Der #TUBerlin- Wissenschaftler und Direktor von @bifold.berlin erhält den renommierten Leibniz-Preis der @dfg.de. Er gilt als Pionier des Maschinellen Lernens und prägt die interdisziplinäre #KI- Forschung seit Jahrzehnten. (1/2) Weiterer Infos 👇

Welcome to BIFOLD. The computer scientist Prof. Dr. Christian Wressnegger from Karlsruhe Institute of Technology strengthens BIFOLD’s expertise at the intersection of AI, data management, and IT security. www.bifold.berlin/news-events/... @chwress.bsky.social @tuberlin.bsky.social @kit.edu

Looking forward to have @gianlucastringhini.com over at @kit.edu for our beloved distinguished lecture series 🤗 🥳

You prefer to organize your workshop in Europe? We've got you covered! We extended the call for workshops at EuroS&P 2026 to give you a few more days to make the move 😎 See you in Lisbon 🇵🇹 🌐 https://eurosp2026.ieee-security.org/cfw.html ⏱️ Deadline: Oct 2̶4̶t̶h̶ 30th AoE 📍Lisbon, PT

You are an Early Career Researcher in #cybersec? Here is an opportunity: The AEC chairs of @USENIXSecurity '26 are looking for (self)nominations for the Artifact Evaluation Committee. Deadline: October 17th, 2025, so sign up soon! @chwress.bsky.social, @kumarde.bsky.social, @aurore-fass.bsky.social

We are alarmed by reports that Germany is on the verge of a catastrophic about-face, reversing its longstanding and principled opposition to the EU’s Chat Control proposal which, if passed, could spell the end of the right to privacy in Europe. signal.org/blog/pdfs/ge...

The call for workshops at EuroS&P 2026 is officially open! EuroS&P is the premier, European forum for security & privacy research. The main conference is accompanied by a series of workshops. Be part of it! 😎 🌐 https://eurosp2026.ieee-security.org/cfw.html ⏱️ Deadline: Oct 24th AoE 📍Lisbon, PT

We are expanding our social media presence! Find us on LinkedIn, Instagram @kitcybersec and Mastodon @[email protected]. Stay tuned for regular updates on events and information on #CyberSec at #KITKarlsruhe. While you are here, have you checked out our website cybersec.kcist.kit.edu yet?

Congratulations to USENIX Security 2025 AE: 🏆 Distinguished Artifact Awards 🏆 Distinguished Reviewer Awards ⭐ Noteworthy Reviewer Recognition 🥷 Ninja Reviewer Recognition secartifacts.github.io/usenixsec202... And thank you all for your help! CC @pvadrevu.bsky.social Tiago Heinrich

LLM-powered code assistants might suggest vulnerable code to specific user groups. Old news? Well, in contrast to prior attacks of this kind, our "Generalized Adversarial Code Suggestions" (AsiaCCS 2025) impose no restrictions on the vulnerabilities. 🌐 https://intellisec.de/research/adv-code (1/3)

Yikes. Turns out you can send a plaintext radio signal to cause any train in the USA to do an emergency break. The original 'security' was just a checksum, no encryption or authentication. Reporting this took them 12 years (!) because the vendor dismissed it initially www.cisa.gov/news-events/...

Haven't seen this on Bluesky yet: S&P 2027 will take place in Montreal, Canada!

LLMs hallucinating nonexistent software packages with plausible names leads to a new malware vulnerability: "slopsquatting."

I will be giving a talk at the MPI-IS @maxplanckcampus.bsky.social in Tübingen next week (March 12 @ 11am). The talk will cover my group's overall approach to trust in ML, with a focus on our work on unlearning and how to obtain verifiable guarantees of trust. Details: is.mpg.de/events/speci...

Next week Tuesday, March 11th 2025, we are going to have another Security & Privacy Lunch 🍔 We meet at 12:00 at Oxford Pub https://www.oxfordpub.de/ Everybody is welcome. See you there! 🤗

Wow, this is massive! What started out as a Master's thesis @kit.edu @kastel-labs.bsky.social ended up with a distinguished paper award at #NDSS2025 🥳🎉 🗞️ intellisec.de/pubs/2025-nd... Congrats Liam and Julian 💪🥟, and thank you @gannimo.bsky.social and @tregua.bsky.social for the collaboration!

I'm happy to share that our paper "Learning the Backdoor to Remove the Backdoor" got accepted at #AAAI2025 as oral presentation (top 5%). Great job @qzhao903.bsky.social 💪 @kastel-labs.bsky.social @kit.edu (1/5) 🗞️ https://intellisec.de/pubs/2025-aaai.pdf 💻️ https://intellisec.de/research/harvey

hyperfine: a command-line benchmarking Tool, written in Rust - Very useful to bench and compare performance of tools - Project by David Peter https://github.com/sharkdp/hyperfine

I got Linux running in a PDF file using a RISC-V emulator. PDFs support Javascript, so Emscripten is used to compile the TinyEMU emulator to asm.js, which runs in the PDF. It boots in about 30 seconds and emulates a riscv32 buildroot system. linux.doompdf.dev/linux.pdf github.com/ading2210/li...

The additional "ess" is a typo, though, and the bsky account unrelated 🫠 However, fun fact: ESS is the acronym of the underlying Helmholtz topic of our beloved KASTEL Security Research Labs -> @kastel-labs.bsky.social 😎

Is your GPU trustworthy? 🤔 Today, Julian presents our work on implanting machine learning backdoors in hardware at @acsacconf.bsky.social. Our backdoors reside within a hardware ML accelerator, manipulating models on-the-fly and invisible from outside. mlsec.org/docs/2024-ac... 1/3

Later this week, we present Makrut at @acsacconf.bsky.social 2024. Achyut found a way to conduct explanation-aware backdoors against popular black-box XAI techniques. (1/3) 💻️ xaisec.org/makrut 🗞️ intellisec.de/pubs/2024-ac...

Alas

The second #ACSAC2024 #PreviewPaper today is by Hegde et al. who present MAKRUT, a model manipulation attack against the popular explanation method LIME, undermining the trustworthiness of black box #XAI: www.openconf.org/acs...#ACSAC2024#PreviewPaper#XAI:#ML #AI #cybersecurity