Security & Cryptography · Computer Science & AI
Cryptography & Security
The newest papers in Cryptography & Security that ReadSearch has read, newest first. Each links to its own page, with its authors, date, where it was published and the original.
1,371 papers, from 4 September 2026 to 5 November 2026: 1,371 arXiv preprints.
Get the few papers worth your time in Cryptography & Security every morning.
Follow Cryptography & Security and ReadSearch reads its new papers each day, then brings you the few worth reading, each with its key finding in a sentence.
Newest papers, page 4
MCP Tool Poisoning in Agentic AI Frameworks: A Cross-Framework Measurement Study
The Model Context Protocol (MCP) lets agentic AI frameworks connect language models to external tool providers, but it carries attacker-controlled content (tool descriptions, schema fields, and…Quantum Private Information Retrieval on Forests
We consider the problem of graph private information retrieval (PIR) in the quantum setting.Fixed Detectors, Moving Code: How Well Do Static Security Analyzers Hold Up over a Decade of C/C++ Evolution?
Static application security testing (SAST) tools are often deployed on the assumption that detectors configured today will remain effective on future code, including previously unknown…LoRA-Patch: Defending Against Backdoored LoRA Adapters via Directional Steering
Third-party LoRA adapters introduce serious backdoor risks: malicious adapters can maintain normal task performance while embedding hidden, trigger-activated behaviors, making them difficult to…The Web Doesn't Sit Still: Adversarial Self-Evolving Attacks on Search Agents
Large Language Models (LLMs) have shown promise for empowering search agents to tackle complex information-seeking tasks.JevBreak: Your Model, Their Decision
Restricting what a model can say is often mistaken for restricting an attacker's influence over its decision.RuntimeTickets: Source-Grounded Security Obligations for Agent Skills
Third-party Agent Skills extend what an autonomous agent can do, but a malicious Skill can hide data exposure or output manipulation inside a legitimate workflow.What Malware Actually Does: An Empirical Analysis of Post-Infection Behavior Across Malware Families
Most malware detection research focuses on identifying whether a file is malicious before it executes.CipherFlow: Compiling AI Programs for Efficient Cryptographically Secure Inference
Cryptographically secure inference faces two practical challenges: making secure programming accessible to AI developers and data scientists, and achieving efficient execution across deployment…Detecting Generated-Depth Injection Attacks on RGB-D Place Authentication
Advances in monocular depth estimation (MDE) now let an attacker generate depth from publicly available RGB images and submit forged RGB-D queries.Chain-of-Thought Oversight Requires Separate Evidence for Faithfulness and Monitorability
A common assumption in chain-of-thought (CoT) oversight is that a visible reasoning trace makes model behavior easier to monitor.Rubric-Based Assessment of Student Reports Using Small Language Models
Language models can analyze and assess student texts using predefined rubrics and deliver structured feedback, reducing instructors' workload.A Compute Center Anyone Can Join: A Peer-to-Peer System for AI Inference
Today, most people obtain AI inference by buying it from a small number of organizations that run large data centers, while many GPUs owned by individuals and small institutions sit idle for much of…Step-Zero Attack: Agent Safety Before Observability
Existing attacks and defenses for coding agents act once content enters the model context: injected text persuades the model, and guards inspect what the model reads.Beyond Prompt Injection: The Tool Update Gap in LLM Agent Security
Large language model based agents increasingly rely on external tools to invoke services and interact with web resources.Query-efficient scan-and-search watermark localization
Recently, the detection of AI-generated content has been of particular importance in various fields of our society.ZT-DAC: ML-Driven Dynamic Access Control Policy for Zero Trust in DER Networks
The increasing penetration of Distributed Energy Resources (DERs) in the smart grid has significantly expanded the cyber-attack surface.Bounded Retained History in a Proxy Flow Replay: A Mixed Predictive Pilot and an Allocation Study
We examine bounded retained history through a frozen predictive pilot and a subsequent allocation study on a curated UNSW-NB15 flow mirror.HaloGuard 2.0: An Open-Weights Constitutional Output Guard for Multilingual Response Safety
An input guard decides whether a request reaches the model, but never sees what the model says.Decision Models as Policy Gates for Coding Agents: Explicit Policy Boundaries Improve Detection and Reduce False Alarms
Coding agents can destroy data, leak secrets and message the wrong person faster than a human can review.