JavaScript

A sophisticated ClickFix campaign is leveraging the Polygon blockchain to implement 'EtherHiding,' allowing attackers to rotate C2 servers via smart contracts. This technique makes traditional IP and domain blocking ineffective by using a distributed ledger as an attacker-controlled command center.

Researchers have developed MCR-Bench to move beyond static code review evaluation by simulating the iterative nature of real-world developer interactions. The study reveals that current LLMs struggle significantly with maintaining defect state consistency across multiple rounds of code changes.

The article maps a highly interconnected ecosystem of automation operators who share obfuscation tools, device fingerprints, and distribution networks. By analyzing Git history deletions and shared code patterns, the author proves that seemingly independent actors are part of a unified supply chain.

Security researchers have proven that open-weight AI models can be maliciously backdoored using minimal resources and training data. This discovery highlights a critical lack of observability and verification capabilities in the current AI supply chain.

The researchers present Program-as-Weights (PAW), a paradigm that shifts LLM usage from expensive per-input API calls to a 'compile-once, run-locally' model using neural adapters. This approach allows small, specialized models to outperform massive foundation models on specific fuzzy tasks while maintaining high efficiency and privacy.

A new side-channel attack named FROST allows websites to bypass browser sandboxing by analyzing SSD latency. By using deep learning to process I/O traces, attackers can fingerprint the applications and websites running on a user's device.