Commentary: signature email security misses fraud from trusted accounts
The essay cites Verizon’s 2026 report, with third parties in 48% of breaches, and FBI BEC losses above $3 billion.
Stories per day · 30 days
5 RSS
Relatedprompt-injection3yara2adversarial-ml1agentic-security1ai-malware1ai-security1ai-text1apple1apt291att&ck1autocad1bayesian-game1business-email-compromise1claude1contextual-defense1dwg1email-security1face-recognition1
80 stories, newest first · one card per story
Stories tagged #detection
Smart-grid detector study finds shuffled tests overstate attack detection
Temporal evaluation drops macro-F1 from 0.96 to 0.88, and stealthy false-data injection defeats all three observation views.
Stealthy jammer UAV detection via Bayesian security game in swarms
Bayesian security game scheme detects stealthy jammer UAVs by updating posteriors from SINR observations, improving defender utility.
Dynamic watermarking detects replay attacks in vision controllers
RL policy balances watermark energy against control distortion on UR5 robot.
MPTCP TCP option detection methods described
MPTCP uses TCP option 30 for multi-path connections and can be detected with Wireshark or tcpdump.
Research Detects Prompt-Injection Hijacks via Model Probabilities
Monitor using output probabilities detects some hijacks on AG News classifier but misses most when attackers add certainty claims.
arXiv audit finds AI humanizers alter facts in most documents
Eleven commercial AI humanizers changed facts in 35-65% of test documents while an open model retained most numbers and names.
Swimlane Turbine sends custom detections into its AI SOC
The October release also adds two-way MCP support and a Hero AI agent that builds apps from prompts.
1
YARA-X 1.22.0 adds built-in 64-bit integer read functions
The release ships 11 improvements and 9 bugfixes, including int64, int64be, uint64, and uint64be.
PHP patches two leaked critical core RCE flaws after early disclosure
Fixed builds are PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35; watchTowr reports no observed attacks.
YARA rule detects orphaned VBA projects inside DWG files
A VirusTotal retrohunt with the rule returned only two matching samples.
MITRE ATT&CK v20 Adds New AI Attack Techniques for Prompt Injection and Data Theft
MITRE ATT&CK v20 adds Enterprise techniques for prompt injection, AI exfiltration and result poisoning.
Malware evasion made easier with AI — but behavior still gives it away
ReversingLabs says Midnight Blizzard’s AI-rebuilt backdoor kept the same detectable behavior across five variants.
7
Context Is King in the Fight Against Modern Cyberattacks
SecurityWeek argues defenders should correlate fragmented signals into contextual responses before small anomalies become breaches.
2
Face Image Quality Improves Morphing Attack Detection
DifFIQA(R) achieves 11.42% mean D-EER on FRLL morphing attacks using fixed quality scores.
The Limits of Query Monitoring against Distributed Model Extraction
Study finds query-only monitors detect some distributed model-extraction campaigns but miss slow, low-share, or relayed ones.
Microsoft Teams Adds Synthetic Audio and Video Detection to Fight Deepfake Meeting Attacks
Microsoft Teams will surface third-party synthetic audio and video detection, with rollout planned from November 2026.
4
Microsoft Teams to get support for third-party deepfake detection tools
Microsoft Teams will integrate third-party deepfake detection and impersonation warnings for meetings, reaching general availability in November.
Stop My Dancing! Understanding, Detecting and Attributing Motion-Aware Deepfake Videos
MoDA detects and attributes motion-aware deepfake videos, reaching 94.8% in-distribution accuracy on a new benchmark.
Introducing AlertZero: Inbox zero for your alert queue
Elastic previews AlertZero, an agentic Elastic Security layer that triages alerts and proposes analyst-approved SOC actions.
RAG-PIBench: A Leakage-Aware Benchmark for Prompt-Injection Detection in Trustworthy RAG Systems
RAG-PIBench offers 4,876 leakage-aware examples for detecting prompt injection in RAG systems.
Ariadne's Thread of LipSync: Unraveling Forgeries via Inconsistency between Lip Motions and Head Poses
LipDA detects and attributes LipSync forgeries from mismatches between lip motion and head pose.
Rethinking Visual Provenance: Detection and Watermarking Across Direct Visual Generation and LLM-Driven Code Rendering
A conceptual agenda compares detection and watermarking for generated and code-rendered media.
Social Engineering Detection Moves Into the Live Conversation
Netarx launches live-conversation detection that rates callers green, amber, or red to catch deepfake social engineering.
2