Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Intelligence reports
Loading the current evidence view. Navigation and account controls remain available.
Ordering reports and their extracted indicators.
Applying the current filters and ordering.
Forensia intelligence desk · 4,093 source documents · 4,062 stories
Live reporting, advisories and research arranged by editorial readiness. Thin sources stay visible, but they are clearly marked instead of being presented as complete analysis.
On this page
40 documents
Briefs ready now
40
Multi-source clusters
0
Publisher text withheld
27
Real-Time Intelligence with IBM Time Series Models on Confluent
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Eight stable kernels for Wednesday
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Security updates for Wednesday
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Hackers expose donor data from Russian fundraisers for Ukrainians, political prisoners
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Rockwell Automation Patches Over a Dozen Vulnerabilities Across Products
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Exploit Published for Fresh Cleo Harmony Vulnerability
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Sality, one of the longest-running botnets, finally gets disrupted
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Anthropic Details Response to Security Incidents, Unveils Enterprise Safeguards
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
I’ve been deepfaked: What do I do?
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Malicious Virtualizor Update Served via BGP Hijacking
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
How to Secure Enterprise AI: From Adoption to Incident Readiness
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Well-executed BGP hijattack uses hijacked IPs to infect real networks
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
OpenAI’s Astra Becomes First Model to Cross Critical Cybersecurity Threshold
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Chrome and Firefox Updates Patch Dozens of Vulnerabilities
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
23-Year-Old Sality P2P Botnet Disrupted
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks
An evidence-built Forensia brief is ready now; publisher prose remains at the original source.
Effective Interventions Against AI-Enhanced Scams
arXiv:2609.00806v1 Announce Type: new Abstract: In 2025, scams were responsible for an estimated $442 billion in direct losses globally. In the United States, reported losses increased by nearly 400% between 2020 and 2025. Though AI in scamming is a relatively new phenomenon, its use significantly changes the economics of scams as well as the bottlenecks in scam operations. In this paper I investigate what interventions will remain effective under this new AI-driven scamming…
RISA: Response Inspection and Selective Actions for Refusal Calibration in Large Language Models
arXiv:2609.00790v1 Announce Type: new Abstract: Reliable refusal behavior requires Large Language Models (LLMs) to reject harmful prompts with only answering benign ones. Incorrect refusal behavior can either expose users to harmful responses or prevent users from obtaining useful answers. Training-time alignment improves refusal behavior by updating model parameters with safety data, but requires additional computation and training. In contrast, inference-time alignment aims…
MROP: Mask-Region Optimized Purification Against Backdoor Attack in Deep JSCC
arXiv:2609.00786v1 Announce Type: new Abstract: Deep joint source and channel coding (JSCC) transmits a source by mapping it directly to channel symbols through an end-to-end deep neural network (DNN) and reconstructing it at the receiver. Taking image transmission as an application, this DNN pipeline behaves as a black box: the receiver cannot readily detect security attacks when the transmitted images are corrupted, thereby introducing a new security vulnerability. In this…
SoK: Motion Data Privacy in Extended Reality
arXiv:2609.00711v1 Announce Type: new Abstract: Extended Reality (XR) provides immersive, interactive 3D experiences. To enable these experiences, the devices must track user motion so the system can respond to actions such as grabbing, looking at, or moving an object. However, motion tracking has raised privacy concerns since it records a person's motion patterns. These motion patterns have been studied extensively across various fields (i.e., gait identification and profili…
Differentially Private Paired Table-Image Multimodal Synthesis
arXiv:2609.00708v1 Announce Type: new Abstract: Differentially private (DP) synthesis has been extensively studied for tabular and image data separately, yet many real-world datasets contain images paired with multivariate tabular records. Synthesizing such data is particularly challenging under DP, as the two modalities favor different private learning mechanisms while their dependence must also be preserved. To address this challenge, we propose DP-TabImage, a modality-spec…
PhantomCall: Evading ML Malware Detectors via Function Call Graph Perturbation
arXiv:2609.00705v1 Announce Type: new Abstract: Prior adversarial attacks on Windows PE malware detectors target raw bytes, PE headers, or intra-function control-flow graphs, leaving the function call graph (FCG) unexplored as an attack surface. Yet the FCG structure is an important feature in graph-based malware detectors. We present Phan- tomCall, a black-box attack that perturbs the FCG of Windows PE malware by injecting fully executable dummy functions at targeted call si…
Automating Static Code Analysis Through CI/CD Pipeline Integration
arXiv:2609.00676v1 Announce Type: new Abstract: In the contemporary landscape of software devel-opment, securing sensitive data is paramount to safeguarding organizational reputation, preventing financial losses, and pro-tecting individuals from identity theft. This paper addresses the pervasive challenge of identifying and rectifying security vulnerabilities early in the development process, emphasizing the role of Static Application Security Testing (SAST) tools. While SAST…
A Version Space Approach for Digital Circuit Analysis
arXiv:2609.00609v1 Announce Type: new Abstract: Many questions about a digital circuit take the same form. A hidden object is consistent with a set of observations, and one wants to know how many remain consistent and which observation to make next. The set of surviving candidates is the version space, and its size, on a logarithmic scale, measures how much the observations have settled. This paper develops the version-space view as one method and applies it to two circuit-an…
NeuroGraph: An AI Graph-Driven Neuro-Symbolic Framework for Explainable Threat Reasoning in Advanced Manufacturing
arXiv:2609.00604v1 Announce Type: new Abstract: The growing complexity of cyber-physical attack surfaces in advanced manufacturing has made cyber threat intelligence analysis increasingly difficult. Although large language models and retrieval-augmented generation have improved CTI workflows, text-based approaches remain vulnerable to hallucinations and provide limited support for structured reasoning over interconnected threats. Graph-based RAG reduces some of these limitati…
SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems
arXiv:2609.00595v1 Announce Type: new Abstract: Safe agents can fail together. Multi-agent LLM systems (MAS) move information, state, decisions, and authority across principal boundaries, creating failures that local checks may miss. Without an execution-level view, a multi-agent setting can easily be mistaken for evidence of a genuinely multi-agent security effect. We thus systematize MAS security through an execution-centered analysis of 197 works, covering six interaction…
Transferable End-to-End Optimization for Indirect Long-Term Memory Poisoning in LLM Agents
arXiv:2609.00523v1 Announce Type: new Abstract: Long-term memory can turn untrusted external content into persistent influence over an LLM agent's future decisions, creating the threat of indirect memory poisoning. A successful attack must survive a multi-stage pipeline comprising memory writing, retrieval, and utilization. Existing attacks largely rely on intra-stage optimization, optimizing individual stages in isolation while overlooking inter-stage coupling. Specifically,…
The Safeguard Worked. Is the LLM System Safer?
arXiv:2609.00519v1 Announce Type: new Abstract: Safeguards in deployed LLM services are evaluated by refusal, attack success, and policy violation rates. Those rates characterize how a control performed on the requests it was tested on. A deployment has to answer a different question: how much help with harmful tasks the service still gives an attacker who keeps adapting or finds another way in. We determine what each reported result implies for that question, allowing result…
GlitchLab: A Hardware-in-the-Loop Optimizer for Physical Fault Injection
arXiv:2609.00502v1 Announce Type: new Abstract: Physical fault injection can turn brief hardware disturbances into security failures such as key recovery, authentication bypass, and unintended control flow. Finding effective faults is difficult because many interacting parameters create a large search space, successful settings are sparse and target-dependent, and each hardware attempt provides limited feedback. Under fixed testing time, efficient search is therefore critical…
story desk
clustered evidenceWatchGuard Patches Critical Vulnerabilities
developing · new
Microsoft Rolls Out 22 Fresh Security Patches
source only · new
Google Patches 6th Chrome Zero-Day of 2026
developing · new
Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities
developing · new
Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities
source only · new
filter by source
sharing classification
TLP describes sharing sensitivity, not copyright permission. Reader text is limited to source-provided descriptive material; original reporting stays with its publisher.