224. Phishing the Phishers with SpecularNet: Hierarchical Graph Autoencoding for Reference-Free Web Phishing Detection

473. Clouding the Mirror: Stealthy Prompt Injection Attacks Targeting LLM-based Phishing Detection

628. Exploiting Unsafe Rendering in LLM-Powered Workflow Platforms

95. Cherry-Picking Bits: Enabling Key Reconstruction on Resource-Constrained Devices using SRAM PUFs

285. Effective Handling of Erroneous Executions of Automation Rules on Multiple Platform Smart Home IoT Systems

786. FragStrike: A Memory-Exhaustion Attack against Tor Nodes via Heap Fragmentation

216. Function Name Recovery via Self-Transformative and Variable-Enrichment Approaches

421. ObfuscationGT: A Comprehensive Evaluation of Disassembler Accuracy and Coverage on Obfuscated Code

799. Waslr: Fine-Grained Memory Randomization for WebAssembly

871. 0xELF: Reverse Engineering Framework for Flexo-Generated Weird Machines

174. Patronus: Real-Time Authentication of Industrial Control Systems Communication via Process-Aware Certificates

287. Unveiling Operator-Induced Vulnerabilities in OCPP: From Deployment Misconfigurations to Message-Processing Exploits

222. CANdy: Backward-Compatible CAN Message Authentication via Sub-Bit Injection on Commercial Controllers

479. DEFFSM: Deployable and Explainable Fuzzy Finite State Machine for Anomaly Detection of Time-Series Data

8. Sentinel: An Isolation Framework for Security Services on TrustZone

55. vSECvma: A Formally Verified Linux Kernel Protection Framework

131. Firefly: High-Performance Transient Execution Attack Defenses for In-Kernel Sandboxes

319. Too Private to Tell: Practical Token Theft Attacks on Apple Intelligence

16. STINER: Automated Extraction of Strategic Cyber Threat Intelligence from X

90. Sometimes Less is More: A Minimalist Approach to Neighborhood-level Provenance-based Intrusion Detection

557. Grounded in Knowledge, Guided by Reason: Automated Fake Cyber Threat Intelligence Detection via Knowledge-Augmented LLM Rationales

821. No Data? No Problem: Synthesizing Security Graphs for Better Intrusion Detection

139. Democratizing False Positives Filtering Through Learning Assisted Reasoning

513. Merge Now, Regret Later: The Hidden Cost of Model Merging Is Adversarial Transferability

516. How ViT Backdoors Affect Post-Hoc Explanations and What this Means for XAI-based Defenses

405. Effective and Efficient Threat Hunting with Small Language Models

610. Finding a Needle in a Haystack: Index Poisoning and Mitigation in IPFS DHT

717. ShadowICS: Detecting OT Sandboxes via Passive Industrial Traffic Monitoring

19. CoT-GraphPoison: A Novel Poisoning Attack Targeting Chain-of-Reasoning in GraphRAG

36. DYNASHIELD: A Black-Box Moving Target Defense for LLMs via Dynamic Decoding Customization

249. Release-Time Safety Is Not Deployment-Time Safety in Agentic LLMs

286. aiXamine: Unified Black-Box Evaluation of Cross-Dimensional Trade-offs in LLM Safety, Security, and Privacy

410. A Covert Channel via Scheduler-Driven Core Migration on Hybrid CPUs

63. Lightweight Detection of Electromagnetic Signal Injection Attacks on Image Sensors

703. Devlore: Device Interrupt Protection for Confidential VMs

710. Reverse Engineering and Systematic Evaluation of Prefetcher-Based Security Vulnerabilities in Commercial RISC-V Processors

2. Concept Drifts, Detector Evolves: Malware Detection Made Easy with LLMalware

91. Smoke and Mirrors: Systematic OT Malware Elicitation

94. AndroTruth: A Reliable Benchmark Android Malware Dataset Derived from Technical Expert Reports

309. Small, Free, and Effective: Orchestrating Open-Weight Small Language Models to Outperform Single LLM for Malware Analysis

56. Supply Chain Insecurity: Exposing Vulnerabilities in iOS Dependency Management Systems

266. Where Patches Stall: Ecosystem-Level Constraint Policies, Not Upstream Health, Covary with Supply Chain Propagation

315. Vulnerability Evolution and the Promise of Automated Gatekeeping in Open-Source Software

360. Adversarial Python Package Generation via Piggybacking with Large Language Models

281. mono: Is Source Code Enough for Verification? Stratifying Patch-Mined Vulnerability Fixes by Context Sufficiency

352. Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair

453. Focus on What Matters: Fisher-Guided Adaptive Multimodal Fusion for Vulnerability Detection

648. To WASM or Not to WASM: Evaluation of Browser Fingerprinting Defenses Under WASM based Obfuscation

84. Hidden Threats in a Single Round: Backdoor Attack on One-Shot Federated Learning

335. Backdooring Acoustic Foundation Models for Physically Realizable Triggers

368. CARIS: Layer-to-Neuron Local Repair for Deep Neural Networks

391. UDPU: Unlabeled Data Purification and Unlearning for Backdoor Defense

436. VR-Themis: A Scalable Framework for Virtual Reality Application Clone Detection

823. Beyond the Blank Slate: Typed Operating System State for Cross-Session Consistency in LLM-Powered Honeypots

831. CANDLe : Discerning Deep Learning Methods for CAN Bus Intrusion Detection via a Reproducible and Extensible Benchmarking Framework

26. VersaPSE: Versatile Password Strength Evaluation Using Continual Learning

126. Caught on Camera: Toward Evaluating and Defending On-screen Deepfakes With Mobile and Wearable Camera Devices

494. Understanding the Impact of AI Code Assistants on Security API Usage: An Empirical Study

944. "It Seems Like an Advertisement": Attention, Interpretation, and Response to Mobile Antivirus Warnings