Cybersecurity & Exploits

Global: Security Risks of SMS-Delivered URLs Exposed in Large-Scale StudyA new academic study reveals extensive security and privacy vulnerabilities associated with short message service (SMS) links that grant direct access…

Global: Researchers Reveal Scheduler Weaknesses Allowing Co‑location Attacks in Serverless Cloud PlatformsResearchers have demonstrated that serverless cloud schedulers can be manipulated to place attacker and victim instances on the same…

Global: LLMs Evaluated for Proactive Detection of Threat IndicatorsOn Jan 13, 2026, researchers Aniesh Chawla and Udbhav Prasad released a study on arXiv that systematically evaluates large language models (LLMs) for the…

Global: KryptoPilot Shows High Success Rate on Cryptographic CTF Challenges Overview A new study released on arXiv outlines the development of KryptoPilot, an open‑world, knowledge‑augmented large language model (LLM) agent…

Global: Memory Reordering Side-Channel Enables High-Bandwidth Covert Communication on CPUs and GPUsResearchers have introduced a timerless side-channel, termed Memory DisOrder, that leverages relaxed memory ordering in modern parallel processors to…

Global: Protocol‑Compliant DoS Attacks Undermine C‑V2X Safety ApplicationsA recent study demonstrates that protocol‑compliant denial‑of‑service attacks can severely impair safety functions in connected vehicles, reducing the effectiveness of Forward Collision Warning…

Global: FinVault Benchmark Highlights Security Gaps in LLM-Powered Financial Agents A new benchmark called FinVault reveals significant security vulnerabilities in AI-driven financial tools. Researchers at the AI Finance Lab introduced…

Global: Exploring Vulnerabilities in LLM-Based Prompt OptimizersResearchers from several universities have demonstrated that feedback‑driven prompt optimizers for large language models (LLMs) are susceptible to poisoning attacks, raising the attack success…

Global: Survey Maps Cybersecurity Threats and Defenses for Small Unmanned Aerial SystemsA new academic paper posted on arXiv in January 2026 examines the spectrum of cyber‑security vulnerabilities and corresponding defenses…

Global: Researchers Demonstrate Query-Agnostic Prompt Injection Threat to Coding AssistantsA team of researchers announced a new attack paradigm, termed query-agnostic indirect prompt injection (QueryIPI), that enables malicious code execution in…