The proposed HammingMark is a semantic watermarking method that uses the semantic hash of the preceding sentence as a dynamic center and accepts candidates whose hashes fall within its Hamming neighborhood, which achieves strong robustness, high detectability, and near-unwatermarked generation quality.
Ze-Wen Sun, Tong-Yang Zhao, Li-Yao Xiang et al.· 0 citations
This work introduces ToolFence, which compiles a typed authorization blueprint before execution, enforces it through a deterministic monitor, and when the blueprint is incomplete asks a judge to grant new capabilities rather than adjudicate each concrete call, improving runtime efficiency.
Yan-Jie Li, Xiang-Yu He, Xue-Long Dai et al.· 0 citations
OPFL calibrates an empirical boundary offline and uses it to distinguish benign numerical deviations from malicious manipulation, and adopts optimistic verification by post auditing only sampled training steps to reduce the cost of expensive MPC replay.
Hong-Xu Su, Jian-Zhu Yao, Xue-Chao Wang et al.· 0 citations
These measurements turn correlation from a post-hoc warning into an auditable allocation decision and turn correlation from a post-hoc warning into an auditable allocation decision.
Miao-Bo Hu, Shu-Hao Hu, Xiao-Bo Guo et al.· 0 citations
Reach audiences
Advertise in front of researchers, engineers, and readers.
This work introduces \method{}, a framework for jailbreaking through text-only continuation interfaces that permit repeated sampling and assistant-prefix continuation, and achieves the highest mean score most comparisons against baselines.
Jesson Wang, Shawn Li, Wei Yang et al.· 2 citations
Experiments show that SKILLLITE improves malicious Skill detection across different compact LLM backbones and outperforms existing representative auditing baselines, and generalizes to behaviorally confirmed in-the-wild malicious Skills.
Hao-Ran Ou, Ge-Lei Deng, Xuan-Ye Zhang et al.· 0 citations
This work proposes VaccineBooster, a single alignment procedure that combines embedding perturbation and weight-level gradient attenuation within each training step, and indicates a trade-off: embedding perturbation primarily reduces flagged harmful content, whereas gradient attenuation primarily preserves explicit ref...
M. Akram, Mufid Kamel Marican, Anvesh Reddy Yenugu et al.· 0 citations
These findings show that gradient-based signals can support multi-turn jailbreak detection, but reliable deployment requires calibration on realistic benign conversations, short-window scoring, length-aware thresholds, and evaluation across attack types and model architectures.
Omar Sheta, Rinku Deuja, Hadi Masoudi et al.· 0 citations
CounterSteer largely neutralizes instructional takeover: a black-box framing search cracks 3 of 18 development samples, and Parameter manipulation--attacker-chosen arguments in otherwise legitimate calls--is only partially resisted.
The results suggest that private dense retrieval is already practical for moderately sized, privacy-sensitive corpora when minute-scale latency is acceptable, and formulates a two-round cryptographic protocol that provides both guarantees.
Louis Tremblay Thibault, Sofiane Azogagh, Marc-Olivier Killijian et al.· 0 citations
A personal language agent that acts for its owner across private and shared conversations can learn a fact from one audience and later place it in the context it assembles for another. We study authorization before context across the whole memory lifecycle. Each memory item carries the audience present when it was reco...
A key observation is that reference models serve only to reveal how an example behaves under models not trained on it, and that querying the target model on nearby samples yields the same information, and that querying the target model on nearby samples yields the same information.
Francesco Rita, Jie Zhang, Florian Tramèr· 0 citations
Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.
Critical flaws, compromised release channels and agentic AI threats landed within days of each other in mid-October 2026. Why “Black October” may say more about how well we now find weaknesses than about the attacks themselves. The post Black October? The Week AI Changed the Cybersecurity Conversation appeared first on GPT-Lab.