Lightnews — Scholar-powered news

CyLab @cylab.bsky.social · 23h

A team of researchers featuring Professor Riccardo Paccagnella of @cmus3d.bsky.social has uncovered a new class of Android attacks that can stealthily steal sensitive information displayed by other apps or even websites.

Researchers uncover “Pixnapping,” a new class of Android attacks that can steal on-screen data in seconds

A team of researchers featuring Riccardo Paccagnella, assistant professor in Carnegie Mellon University’s Software and Societal Systems Department (S3D), has uncovered a new class of Android attacks t...

www.cylab.cmu.edu

1

CyLab @cylab.bsky.social · 5d

. @cmu.edu alum and @umich.edu faculty member Ke Wu presents her research on mechanism design for automated market makers at today's afternoon session of the International Conference on Advances in Financial Technologies (AFT’25).

Photo of Ke Wu presenting research at the International Conference on Advances in Financial Technologies (AFT) 2025

1

CyLab @cylab.bsky.social · 6d

Prof. @nc2y.bsky.social Christin and Prof. Ariel Zetlin-Jones, Co-Directors of the CyLab Secure #Blockchain Initiative, joined Michael Lisanti, CyLab Senior Director of Partnerships, to provide opening remarks at the seventh International Conference on Advances in Financial Technologies (AFT’25).

Photo of Nicolas Christin giving remarks at the International Conference on Advances in Financial Technologies (AFT) 2025

Photo of Ariel Zetlin-Jones giving remarks at the International Conference on Advances in Financial Technologies (AFT) 2025

Photo of Michael Lisanti giving remarks at the International Conference on Advances in Financial Technologies (AFT) 2025

2

CyLab @cylab.bsky.social · 6d

The afternoon sessions of the @cmu.edu's Secure Blockchain Summit featured conversations on #AI, identity, and trust, as well as a series of lightning talks on emerging #blockchain research. Many thanks to all of our speakers, attendees, and sponsors!

#web3

Photo of Tanusree Sharma giving a lecture at the 2025 Carnegie Mellon University Secure Blockchain Summit

Photo of Andrew Miller giving a lecture at the 2025 Carnegie Mellon University Secure Blockchain Summit

Photo of Giulia Fanti giving a lecture at the 2025 Carnegie Mellon University Secure Blockchain Summit

Photo of Shuang Liu giving a lecture at the 2025 Carnegie Mellon University Secure Blockchain Summit

3

CyLab @cylab.bsky.social · 7d

The 2025 @cmu.edu Secure Blockchain Summit is underway! This morning’s sessions featured discussions on #DeFi and economic & security risks for #crypto.

#blockchain #web3

Photo of Srivatsan Ravi giving a lecture at the 2025 Carnegie Mellon University Secure Blockchain Summit

Photo of Rod Garratt giving a lecture at the 2025 Carnegie Mellon University Secure Blockchain Summit

Photo of Thomas Rivera giving a lecture at the 2025 Carnegie Mellon University Secure Blockchain Summit

Photo of Guillermo Angeris giving a lecture at the 2025 Carnegie Mellon University Secure Blockchain Summit

CyLab @cylab.bsky.social · 18d

“Scams are nothing new – fraud has existed as long as human greed. What changes are the tools.”

In a column for @us.theconversation.com, Professor Rahul Telang of @cmuheinzcollege.bsky.social shares strategies for identifying and avoiding #AI-. #crypto-, and personal data-driven scams:

Scams and frauds: Here are the tactics criminals use on you in the age of AI and cryptocurrencies

Technology has supercharged fraud. The ruses are ancient, but the tools scammers use are cutting edge.

theconversation.com

3 4

CyLab @cylab.bsky.social · 19d

"When you look at these deceptive and manipulative patterns...there are cases where you just have to conclude that they did it on purpose."

@lorriecranor.bsky.social, @cylab.bsky.social Director, chats w/ @mnickelsburg.bsky.social of @npr.org about the FTC’s “dark patterns” lawsuit against Amazon:

The 'dark patterns' at the center of FTC's lawsuit against Amazon

This week, the trial starts in a consequential FTC lawsuit against Amazon. The suit alleges that Amazon for years "tricked" people into buying Prime memberships that were purposefully hard to cancel.

www.keranews.org

Reposted by CyLab

Nicolas Christin @nc2y.bsky.social · Sep 11

We're hosting the 7th intl' conf. on Advances in Financial Technologies (AFT'25) at Carnegie Mellon on Oct. 8-10. Join us to hear about the latest exciting developments in crypto research. Registration closes on Sept 16!
advfintech.org/aft25/attend...
(Program: advfintech.org/aft25/progra...)

Advances in Financial Technologies

advfintech.org

1 1

CyLab @cylab.bsky.social · 27d

Join us Tuesday, October 7 for the 2025 CMU Secure Blockchain Summit! Check out this year's schedule, and sign up to request to attend this free event.

Schedule and details: www.cylab.cmu.edu/research/blo...

Request to attend: bit.ly/request-secu...

CMU Secure Blockchain Summit

Carnegie Mellon University's Secure Blockchain Summit will bring together experts from academia and industry to discuss the future of blockchain research, technology, and applications, focusing on a v...

www.cylab.cmu.edu

1

CyLab @cylab.bsky.social · Sep 4

The newest member of the @cmu.edu Information Networking Institute (INI) faculty, Associate Teaching Professor Taha Khan, brings a thoughtful approach to cybersecurity, censorship and freedom on the internet.

You can learn more about Khan and his background here:

Faculty Spotlight: Taha Khan and Building the System Development Mindset - Information Networking Institute - College of Engineering - Carnegie Mellon University

Associate Teaching Professor Taha Khan is the latest addition to the Information Networking Institute (INI) faculty. Drawing from his interest in cybercrime, usable security and online censorship, Kha...

loom.ly

CyLab @cylab.bsky.social · Aug 27

. @v0max.bsky.social, Founder and Chief Scientist at APPCensus, a CyLab Venture Network Startup Partner, has been named @cylab.bsky.social's 2025 Distinguished Alumni Award recipient. Learn more:

Serge Egelman receives 2025 CyLab Distinguished Alumni Award

Serge Egelman, founder and chief scientist at AppCensus, has been named CyLab's 2025 Distinguished Alumni Award recipient, in honor of his impactful contributions to privacy research, policy, and indu...

www.cylab.cmu.edu

1

CyLab @cylab.bsky.social · Aug 27

Most U.S. adults say they are concerned about data #privacy while traveling, but few take steps to keep theirs safe. Prof. Lorrie Cranor (@lorriecranor.bsky.social), @cylab.bsky.social Director, tells @justynnewman.bsky.social of @pcmag.com that users may be prioritizing convenience over #security:

Yes, Your Data Is at Risk on Vacation: 75% of US Adults Worry About Privacy While Traveling

Privacy advocates admit travel makes it hard to stay secure. But our survey shows most people don’t really try anyway.

www.pcmag.com

1

CyLab @cylab.bsky.social · Aug 19

We've been in our orange era all along!

CyLab @cylab.bsky.social · Aug 15

“I question whether people really want their Instagram friends to know that much about them 24-7.”

Professor @lorriecranor.bsky.social, @cylab.bsky.social Director, chats with @thomasgermain.bsky.social of #BBCNews about #privacy and #security concerns around the new “Instagram Map” feature.

Instagram's new 'Map' is a digital ghost town

Some 170 million users got access to Instagram's new location-sharing feature, so why is the Map so empty?

www.bbc.com

Reposted by CyLab

Carnegie Mellon University @cmu.edu · Aug 12

In part two of 'The Science of Sound,' Laurie Heller of the Auditory Perception and Cognition Lab explains how the brain recognizes #sound.

Heller explores what’s next for hearing technology, including better treatments for sound disorders and more sophisticated hearing aids.

🎧 Listen now:

S2 Episode 9: The Science of Sound - Part 2

Listen to the Where What If Becomes What's Next Podcast Season 2 Episode 9.

www.cmu.edu

1 3

CyLab @cylab.bsky.social · Aug 11

Carnegie Mellon's (@cmu.edu's) hacking team, the Plaid Parliament of Pwning (PPP), won its fourth consecutive title at the 2025 @defcon.bsky.social Capture-the-Flag competition, earning its record ninth victory in 13 years. #defcon2025 #defcon #defcon33

Carnegie Mellon’s hacking team wins fourth straight, record ninth overall DEF CON Capture-the-Flag title

The winningest team in DEF CON’s Capture-the-Flag (CTF) competition history, Carnegie Mellon University’s Plaid Parliament of Pwning (PPP), won its third consecutive title, earning its eighth victory ...

www.cylab.cmu.edu

1

CyLab @cylab.bsky.social · Aug 7

Carnegie Mellon University (@cmu.edu) faculty members and students are preparing to share their research at next week’s USENIX Security Symposium in Seattle. Learn more about the @cylab.bsky.social co-authored papers that will be presented at #usesec25:

CyLab faculty, students to present at the 34th USENIX Security Symposium

Carnegie Mellon faculty and students will present on a wide range of topics at the 34th USENIX Security Symposium. Held in Seattle on August 13-15, the event brings together experts from around the wo...

www.cylab.cmu.edu

3

CyLab @cylab.bsky.social · Aug 6

CyLab is collaborating with Carnegie Mellon University’s Software Engineering Institute (SEI) to convene leaders and practitioners in secure software development for the Third Annual Secure Software by Design event, to be held in Arlington, Virginia on August 19th and 20th.

Secure Software by Design 2025 brings experts together to shape the future of cybersecurity engineering

CyLab is collaborating with Carnegie Mellon University’s Software Engineering Institute (SEI) to convene leaders and practitioners in secure software development for the Third Annual Secure Software b...

www.cylab.cmu.edu

CyLab @cylab.bsky.social · Aug 4

. @cmu.edu faculty members and students will share their research at next week’s 2025 Symposium On Usable Privacy and Security (SOUPS) in Seattle. Learn more about the @cylab.bsky.social co-authored technical papers that will be presented at #soups2025:

CyLab researchers present their work at SOUPS 2025

Carnegie Mellon faculty and students will share their research at the 2025 Symposium on Usable Privacy and Security (SOUPS), which takes place August 10-12 in Seattle.

www.cylab.cmu.edu

1

CyLab @cylab.bsky.social · Jul 31

The @cmus3d.bsky.social Research Experience for Undergraduates in Software Engineering (REUSE) concluded today. Thirty-four students spent the summer doing engaging research projects in areas spanning all of computer science, which they presented during today’s final poster session. Congrats to all!

Photo of Carnegie Mellon REUSE student presenting their research during the REUSE poster session

Photo of Carnegie Mellon REUSE students presenting their research during the REUSE poster session

Group photo of Carnegie Mellon REUSE students

CyLab @cylab.bsky.social · Jul 29

“A lot of cybersecurity defenses rely on human operators and I am not sure how well that will scale up to machine-timescale defenses.”

Brian Singer, Ph.D. candidate in @cmu-ece.bsky.social, chats w/ David Jones of @cybersecuritydive.bsky.social about his recent research on autonomous #LLM attacks:

Cybersecurity Dive @cybersecuritydive.bsky.social · Jul 28

Research shows LLMs can conduct sophisticated attacks without humans: www.cybersecuritydive.com/news/researc... (by David Jones)

Research shows LLMs can conduct sophisticated attacks without humans

The project, launched by Carnegie Mellon in collaboration with Anthropic, simulated the 2017 Equifax data breach.

www.cybersecuritydive.com

1

CyLab @cylab.bsky.social · Jul 29

Day 2 of the @cylab.bsky.social Robotics Security and Privacy Workshop featured dynamic talks by @iluetkeb.bsky.social, Andrea Bajcsy, and Vivan Amin and breakout sessions on strategic approaches to building trusted middleware and toolchains to foster a secure, privacy-preserving robotics ecosystem.

Photo of Ingo Lütkebohle speaking at the CyLab Robotics Security and Privacy Workshop

Photo of attendees talking during a breakout session at the CyLab Robotics Security and Privacy Workshop

Photo of Andrea Bajcsy speaking at the CyLab Robotics Security and Privacy Workshop

1

CyLab @cylab.bsky.social · Jul 28

Day 1 of the @cylab.bsky.social Robotics Security and Privacy Workshop is underway with introductions and technical talks! Attendees will collaborate in breakout sessions this afternoon to tackle research challenges on topics ranging from policy considerations to threat models and human factors.

Photo of Christopher Timperley speaking at the CyLab Robotics Security and Privacy Workshop

Photo of Phillip Koopman speaking at the CyLab Robotics Security and Privacy Workshop

Photo of Lujo Bauer speaking at the CyLab Robotics Security and Privacy Workshop

Photo of Kassem Fawaz speaking at the CyLab Robotics Security and Privacy Workshop

1

CyLab @cylab.bsky.social · Jul 24

In a groundbreaking development, a team of @cmu.edu researchers f/ Brian Singer, @lujobauer.bsky.social, and Vyas Sekar demonstrated that large language models (LLMs) are capable of autonomously planning and executing complex network attacks. Read more about their research: bit.ly/when-llms-au...

3

Reposted by CyLab

Nicolas Christin @nc2y.bsky.social · Jul 21

New research alert 🚨 from my group, “Blockchain Address Poisoning” (Tsuchiya et al.), to appear at USENIX Security 2025 (arxiv.org/abs/2501.16681)! As a follow-up, we also developed a real-time detection system: cryptotrade.cylab.cmu.edu/poisoning/ and x.com/toxin_tagger (1/7)

Blockchain Address Poisoning

In many blockchains, e.g., Ethereum, Binance Smart Chain (BSC), the primary representation used for wallet addresses is a hardly memorable 40-digit hexadecimal string. As a result, users often select ...

arxiv.org

1 2 4