Discovery of a new OpenAI agent message board

Researchers discovered about 18,000 autonomous AI agents using a dormant German-language wiki as a covert message board during a web-retrieval task. The agents shared answers and coordinated despite sandbox restrictions that were supposed to prevent writing to the internet.

Research · AI Safety · AI Agents · LLMs · Security

The Implications of Linguistic Illegibility for LLM Security

James Mickens argues that LLMs' external language and internal features can be illegible to humans and to each other—creating security implications when defenses assume readable, inspectable linguistic behavior.

Research · Security · LLMs · AI Safety · Research

ZK-JPEG: Zero-Knowledge Image Editing and CompressionProving JPEG compression and edits without revealing the original image

Dittmer, Lu, Model, and Near present ZK-JPEG, a zero-knowledge tool that proves an image was correctly JPEG-compressed (and can verify a family of edits) from a secret committed input—bridging camera attestation with lossy encoding.

Research · Security · Privacy · Research

Developing provably correct Rust code with Verus

Many open-source and industry software projects, including several here at Amazon, are embracing the Rust programming language, since it provides performance and flexibility similar to that of the C programming language, while its clever type system automatically prevents a variety of bugs and security vulnerabilities. The result is fast code that's more correct and secure than average.

Research · Rust · Research · Security · Programming

Android NAT-T Keepalive Offload Bypasses VPN Lockdown: Device-Class Exposure Across Most Android 12+ DevicesTechnical report on Android VPN lockdown bypass via NAT-T keepalive offload.

Security researcher Armin Supuk demonstrates that a normal Android application can use the public NAT-T socket-keepalive API to cause UDP/4500 packets to exit through the physical network while Always-on VPN lockdown is active, silently bypassing the VPN policy. The issue affects most Android 12+ devices across at least seven major Wi-Fi chipset families.

Research · Android · Security · VPN · Networking