Congratulations to USENIX Security 2025 AE: 🏆 Distinguished Artifact Awards 🏆 Distinguished Reviewer Awards ⭐ Noteworthy Reviewer Recognition 🥷 Ninja Reviewer Recognition secartifacts.github.io/usenixsec202... And thank you all for your help! CC @pvadrevu.bsky.social Tiago Heinrich

LLM-powered code assistants might suggest vulnerable code to specific user groups. Old news? Well, in contrast to prior attacks of this kind, our "Generalized Adversarial Code Suggestions" (AsiaCCS 2025) impose no restrictions on the vulnerabilities. 🌐 https://intellisec.de/research/adv-code (1/3)

Yikes. Turns out you can send a plaintext radio signal to cause any train in the USA to do an emergency break. The original 'security' was just a checksum, no encryption or authentication. Reporting this took them 12 years (!) because the vendor dismissed it initially www.cisa.gov/news-events/...

Haven't seen this on Bluesky yet: S&P 2027 will take place in Montreal, Canada!

LLMs hallucinating nonexistent software packages with plausible names leads to a new malware vulnerability: "slopsquatting."

I will be giving a talk at the MPI-IS @maxplanckcampus.bsky.social in Tübingen next week (March 12 @ 11am). The talk will cover my group's overall approach to trust in ML, with a focus on our work on unlearning and how to obtain verifiable guarantees of trust. Details: is.mpg.de/events/speci...

Next week Tuesday, March 11th 2025, we are going to have another Security & Privacy Lunch 🍔 We meet at 12:00 at Oxford Pub https://www.oxfordpub.de/ Everybody is welcome. See you there! 🤗

Wow, this is massive! What started out as a Master's thesis @kit.edu @kastel-labs.bsky.social ended up with a distinguished paper award at #NDSS2025 🥳🎉 🗞️ intellisec.de/pubs/2025-nd... Congrats Liam and Julian 💪🥟, and thank you @gannimo.bsky.social and @tregua.bsky.social for the collaboration!

I'm happy to share that our paper "Learning the Backdoor to Remove the Backdoor" got accepted at #AAAI2025 as oral presentation (top 5%). Great job @qzhao903.bsky.social 💪 @kastel-labs.bsky.social @kit.edu (1/5) 🗞️ https://intellisec.de/pubs/2025-aaai.pdf 💻️ https://intellisec.de/research/harvey

hyperfine: a command-line benchmarking Tool, written in Rust - Very useful to bench and compare performance of tools - Project by David Peter https://github.com/sharkdp/hyperfine

I got Linux running in a PDF file using a RISC-V emulator. PDFs support Javascript, so Emscripten is used to compile the TinyEMU emulator to asm.js, which runs in the PDF. It boots in about 30 seconds and emulates a riscv32 buildroot system. linux.doompdf.dev/linux.pdf github.com/ading2210/li...

The additional "ess" is a typo, though, and the bsky account unrelated 🫠 However, fun fact: ESS is the acronym of the underlying Helmholtz topic of our beloved KASTEL Security Research Labs -> @kastel-labs.bsky.social 😎

Is your GPU trustworthy? 🤔 Today, Julian presents our work on implanting machine learning backdoors in hardware at @acsacconf.bsky.social. Our backdoors reside within a hardware ML accelerator, manipulating models on-the-fly and invisible from outside. mlsec.org/docs/2024-ac... 1/3

Later this week, we present Makrut at @acsacconf.bsky.social 2024. Achyut found a way to conduct explanation-aware backdoors against popular black-box XAI techniques. (1/3) 💻️ xaisec.org/makrut 🗞️ intellisec.de/pubs/2024-ac...

Alas

The second #ACSAC2024 #PreviewPaper today is by Hegde et al. who present MAKRUT, a model manipulation attack against the popular explanation method LIME, undermining the trustworthiness of black box #XAI: www.openconf.org/acs...#ACSAC2024#PreviewPaper#XAI:#ML #AI #cybersecurity