research

What if your face could say “don’t record me”? Researchers think it’s possible

Don't miss, Facial Recognition, Features, Hot stuff, News, Privacy, research /

What if your face could say “don’t record me”? Researchers think it’s possible 2025-12-24 at 10:01 By Sinisa Markovic Phones, smart glasses, and other camera-equipped devices capture scenes that include people who never agreed to be recorded. A newly published study examines what it would take for bystanders to signal their privacy choices directly to […]

What if your face could say “don’t record me”? Researchers think it’s possible Read More »

Counterfeit defenses built on paper have blind spots

authentication, data security, Don't miss, News, research /

Counterfeit defenses built on paper have blind spots 2025-12-24 at 08:17 By Anamarija Pogorelec Counterfeit protection often leans on the idea that physical materials have quirks no attacker can copy. A new study challenges that comfort by showing how systems built on paper surface fingerprints can be disrupted or bypassed. The research comes from teams

Counterfeit defenses built on paper have blind spots Read More »

Formal proofs expose long standing cracks in DNSSEC

authentication, DNS, DNSSEC, Don't miss, network, News, Palo Alto Networks, Purdue University, research, University of California /

Formal proofs expose long standing cracks in DNSSEC 2025-12-23 at 09:41 By Sinisa Markovic DNSSEC is meant to stop attackers from tampering with DNS answers. It signs records so resolvers can verify that data is authentic and unchanged. Many security teams assume that if DNSSEC validation passes, the answer can be trusted. New academic research

Formal proofs expose long standing cracks in DNSSEC Read More »

Weak enforcement keeps PCI DSS compliance low

Compliance, Don't miss, framework, News, PCI DSS, regulation, research /

Weak enforcement keeps PCI DSS compliance low 2025-12-23 at 09:41 By Sinisa Markovic Payment card breaches continue to surface across industries, even after years of investment in security standards. A new study links this pattern to enforcement, showing that PCI DSS compliance trails behind HIPAA, GDPR, and the EU’s NIS2 Directive. A compliance gap that

Weak enforcement keeps PCI DSS compliance low Read More »

Browser agents don’t always respect your privacy choices

browser, cyber risk, Don't miss, Features, LLMs, News, Privacy, research /

Browser agents don’t always respect your privacy choices 2025-12-22 at 08:49 By Sinisa Markovic Browser agents promise to handle online tasks without constant user input. They can shop, book reservations, and manage accounts by driving a web browser through an AI model. A new academic study warns that this convenience comes with privacy risks that

Browser agents don’t always respect your privacy choices Read More »

LLMs work better together in smart contract audits

blockchain, CISO, cybersecurity, Don't miss, Ethereum, framework, LLMs, News, research, strategy, tips /

LLMs work better together in smart contract audits 2025-12-19 at 08:42 By Sinisa Markovic Smart contract bugs continue to drain real money from blockchain systems, even after years of tooling and research. A new academic study suggests that large language models can spot more of those flaws when they work in coordinated groups instead of

LLMs work better together in smart contract audits Read More »

Privacy risks sit inside the ads that fill your social media feed

Artificial Intelligence, cyber risk, Don't miss, Facebook, Features, Hot stuff, LLMs, Meta, News, Privacy, research, social media /

Privacy risks sit inside the ads that fill your social media feed 2025-12-18 at 08:34 By Sinisa Markovic Regulatory limits on explicit targeting have not stopped algorithmic profiling on the web. Ad optimization systems still adapt which ads appear based on users’ private attributes. At the same time, multimodal LLMs have lowered the barrier for

Privacy risks sit inside the ads that fill your social media feed Read More »

Should AI access be treated as a civil right across generations?

Artificial Intelligence, Don't miss, networking, News, research /

Should AI access be treated as a civil right across generations? 2025-12-18 at 08:10 By Sinisa Markovic AI use is expanding faster than the infrastructure that supports it, and that gap is starting to matter for security, resilience, and access. A new position paper argues that access to AI should be treated as an intergenerational

Should AI access be treated as a civil right across generations? Read More »

Why vulnerability reports stall inside shared hosting companies

cybersecurity, Don't miss, Features, Hot stuff, News, research, strategy, tips, vulnerability disclosure, vulnerability management /

Why vulnerability reports stall inside shared hosting companies 2025-12-17 at 09:24 By Mirko Zorz Security teams keep sending vulnerability notifications, and the same pattern keeps repeating. Many alerts land, few lead to fixes. A new qualitative study digs into what happens after those reports arrive and explains why remediation so often stops short. The research

Why vulnerability reports stall inside shared hosting companies Read More »

Banks built rules for yesterday’s crime and RegTech is trying to fix that

Compliance, cybercrime, financial industry, machine learning, News, regulation, research /

Banks built rules for yesterday’s crime and RegTech is trying to fix that 2025-12-17 at 08:32 By Sinisa Markovic Criminals are moving money across borders faster, and financial institutions are feeling the squeeze. Compliance teams feel this strain every day as they try to keep up with schemes that shift through accounts, intermediaries, and digital

Banks built rules for yesterday’s crime and RegTech is trying to fix that Read More »

AI might be the answer for better phishing resilience

Artificial Intelligence, cybersecurity, LLMs, News, phishing, research /

AI might be the answer for better phishing resilience 2025-12-16 at 08:44 By Sinisa Markovic Phishing is still a go-to tactic for attackers, which is why even small gains in user training are worth noticing. A recent research project from the University of Bari looked at whether LLMs can produce training that helps people spot

AI might be the answer for better phishing resilience Read More »

How researchers are teaching AI agents to ask for permission the right way

Artificial Intelligence, cybersecurity, data security, Don't miss, Features, Hot stuff, Iterate.ai, machine learning, News, research, USA /

How researchers are teaching AI agents to ask for permission the right way 2025-12-15 at 09:06 By Mirko Zorz People are starting to hand more decisions to AI agents, from booking trips to sorting digital files. The idea sounds simple. Tell the agent what you want, then let it work through the steps. The hard

How researchers are teaching AI agents to ask for permission the right way Read More »

What 35 years of privacy law say about the state of data protection

CCPA, Compliance, CPRA, Data Protection, Don't miss, GDPR, News, Privacy, regulation, research /

What 35 years of privacy law say about the state of data protection 2025-12-12 at 09:52 By Anamarija Pogorelec Privacy laws have expanded around the world, and security leaders now work within a crowded field of requirements. New research shows that these laws provide stronger rights and duties, but the protections do not always translate

What 35 years of privacy law say about the state of data protection Read More »

LLM privacy policies keep getting longer, denser, and nearly impossible to decode

Artificial Intelligence, data collection, LLMs, News, Privacy, research /

LLM privacy policies keep getting longer, denser, and nearly impossible to decode 2025-12-12 at 08:30 By Sinisa Markovic People expect privacy policies to explain what happens to their data. What users get instead is a growing wall of text that feels harder to read each year. In a new study, researchers reviewed privacy policies for

LLM privacy policies keep getting longer, denser, and nearly impossible to decode Read More »

LLM vulnerability patching skills remain limited

Artificial Intelligence, CVE, LLMs, News, patching, research, vulnerability management /

LLM vulnerability patching skills remain limited 2025-12-11 at 08:47 By Sinisa Markovic Security teams are wondering whether LLMs can help speed up patching. A new study tests that idea and shows where the tools hold up and where they fall short. The researchers tested LLMs from OpenAI, Meta, DeepSeek, and Mistral to see how well

LLM vulnerability patching skills remain limited Read More »

The hidden dynamics shaping who produces influential cybersecurity research

cybersecurity, Don't miss, Features, Hot stuff, News, research /

The hidden dynamics shaping who produces influential cybersecurity research 2025-12-10 at 08:52 By Mirko Zorz Cybersecurity leaders spend much of their time watching how threats and tools change. A new study asks a different question, how has the research community itself changed over the past two decades. Researchers from the University of Southampton examined two

The hidden dynamics shaping who produces influential cybersecurity research Read More »

AI agents break rules in unexpected ways

Artificial Intelligence, Don't miss, Features, Hot stuff, LLMs, News, research /

AI agents break rules in unexpected ways 2025-12-09 at 08:31 By Mirko Zorz AI agents are starting to take on tasks that used to be handled by people. These systems plan steps, call tools, and carry out actions without a person approving every move. This shift is raising questions for security leaders. A new research

AI agents break rules in unexpected ways Read More »

New image signature can survive cropping, stop deepfakes from hijacking trust

authentication, deepfakes, News, research /

New image signature can survive cropping, stop deepfakes from hijacking trust 2025-12-09 at 08:02 By Sinisa Markovic Deepfake images can distort public debate, fuel harassment, or shift a news cycle before anyone checks the source. A new study from researchers at the University of Pisa examines one specific part of this problem. They introduced a

New image signature can survive cropping, stop deepfakes from hijacking trust Read More »

NVIDIA research shows how agentic AI fails under attack

Artificial Intelligence, cyber risk, Don't miss, Features, framework, Hot stuff, Lakera, LLMs, News, NVIDIA, red team, research, Risk Management /

NVIDIA research shows how agentic AI fails under attack 2025-12-08 at 09:56 By Sinisa Markovic Enterprises are rushing to deploy agentic systems that plan, use tools, and make decisions with less human guidance than earlier AI models. This new class of systems also brings new kinds of risk that appear in the interactions between models,

NVIDIA research shows how agentic AI fails under attack Read More »

Building the missing layers for an internet of agents

Cisco, cybersecurity, Don't miss, Features, network, News, research, traffic monitoring /

Building the missing layers for an internet of agents 2025-12-05 at 08:59 By Anamarija Pogorelec Cybersecurity teams are starting to think about how large language model agents might interact at scale. A new paper from Cisco Research argues that the current network stack is not prepared for this shift. The work proposes two extra layers

Building the missing layers for an internet of agents Read More »

Scroll to Top