Konrad Rieck 🌈

Machine Learning and Security,
Professor of Computer Science at TU Berlin,
On Bluesky: @rieck.mlsec.org

[SaTML Conference @satml_conf]

We're pleased to announce that #SaTML2027 will be in Reykjavik, Iceland! Thanks to General Chair Giovanni Apruzzese (@g_apru) for making the arrangements.

The conference itself will be in early May 2027. Get your submissions ready: the deadline will be September 29, 2026.

[SaTML Conference @satml_conf]

Buried in yesterday's announcement of the location (Reykjavik, Iceland), we have also released Calls for:
- Papers (research, position, and SoK), deadline September 29, 2026
- Competitions
- Workshops, for the first time ever at SaTML!

Check out the wbsite for more info on all!

[lukas seidel @pr0me]

today I had the pleasure of presenting our work on high-throughput type recovery for binaries at ACM CODASPY!

lots of great presentations and discussions all around.

slides: https://t.co/qfcMSqrG7T
paper: https://t.co/E7NNP9Y4wZ

[Konrad Rieck 🌈 @mlsec]

💭Ever dreamed of serving on the PC of one of the coolest security conferences in academia? Now is your chance.

Nominate yourself and your capable friends for the Program Committee of @ACSAC_Conf 2026 🧑‍💻

https://t.co/bYwI3jpzB9

[lukas seidel @pr0me]

we will present our work on practical binary type recovery at ACM CODASPY '26!

prior work rarely focused on applicability:
too slow, no meaningful filtering mechanisms, unsound struct recovery

we address these gaps and present a system for headless type recovery at scale

[Nick Nikiforakis @nicknikiforakis]

If you ever dreamed of serving on the PC of one of the coolest cybersecurity conferences academia has to offer, now is your chance!

Nominate yourself (and your capable friends) to serve on the PC of @ACSAC_Conf 2026: https://t.co/0JoQLqeHDO

[Konrad Rieck 🌈 @mlsec]

First Stealth, now FX… Hug your people a little tighter. They won't be around forever.

[The Hacker's Choice (@[email protected]) @hackerschoice]

😍RELEASE: The TEAM-TESO cvs: https://t.co/CHwPgpcXGr

All exploits, advisories, teso-informationals (never released), burneye, bscan, ... plus some rare pictures.

Enjoy & Keep hacking.

Yours Sincerely,
Team-Teso (via THC's twitter account).

[Daniel Cuthbert @dcuthbert]

Everyone today is a hacker in a sense but there are very few OG hackers on which shoulders we stand

Oh dude, Felix “FX” Lindner you were so much a hackers hacker and you will be missed

RIP my friend and thank you

[Konrad Rieck 🌈 @mlsec]

The Call for Papers for our Special Issue in IEEE Security & Privacy is finally out:

Autonomous AI Agents in Computer Security

https://t.co/mesNZ5sJ5A

Deadline is May 1, 2026. We are looking forward to your exciting submissions.

[Konrad Rieck 🌈 @mlsec]

Still no plans for March 2026? How about a pretzel and a beer in Munich 🥨🍺 Registration for SaTML is now open:

https://t.co/a9iOzCrNCB

We have a packed program with papers on secure, private, and fair machine learning. Accepted papers here:

https://t.co/sVPa5RGGYG

[ACSAC @ACSAC_Conf]

Congratulations to the winners of #ACSAC2025's third test of time award: "Cujo: Efficient Detection and Prevention of Drive-By-Download Attacks" by Konrad Rieck, Tammo Krueger, and Andreas Dewald published in ACSAC 2010. 👏👏👏

[Konrad Rieck 🌈 @mlsec]

The lesson is clear: combining data from different sources and relying on AI creates a new attack surface. We need to fix this before AI weather forecasts become the norm.

👉 Paper: https://t.co/jU50lwwiZo
🧳 Code: https://t.co/c1hKLBJnLm
🤗 Distinguished Paper Award at CCS

4/4

[Konrad Rieck 🌈 @mlsec]

AI predicts rain. We predict trouble!

Today, Erik presents a novel attack on Google's latest AI weather model at @acm_ccs. By changing only 0.1% of the observations, the attack can fabricate or suppress the prediction of extreme events, from hurricanes 🌀 to heat waves 🔥

1/4

[Konrad Rieck 🌈 @mlsec]

Our attack injects tiny perturbations into the measurements that cause GenCast, the currently best AI weather model by Google, to predict false extreme events. The required changes are so low that they fall within the natural noise of observations and are hard to detect.

3/4

[AISecHub @AISecHub]

LLM-based Vulnerability Discovery - https://t.co/2Wf4bxEK2w

Our investigation leads to a disappointing outcome: despite the impressive capabilities of language models in other domains, their performance in vulnerability discovery is not significantly different from that of a simple baseline. The substantial resources required to train these models, along with the considerable effort in curating high-quality training datasets, do not yield a substantial advantage over simple techniques developed decades ago.

Authors: @_thrsten, @mlsec. Felix Weißberg, Lukas Pirch, Erik Imgrund, Jonas Möller at @TUBerlin @bifoldberlin

#AISecurity #LLMResearch #LineVul #PDBERT #UniXcoder #CodeGen25 #StarCoder2 #GPT35Turbo #GPT4o #Devign #ReVeal #RATS #Semgrep #SCM #CodeBERT #BigVul #CrossVul #CVEfixes #DiverseVul #SARD #CodeXGLUE

[Konrad Rieck 🌈 @mlsec]

4️⃣ PET-ARENA: How private is private enough? Probe privacy-preserving DB systems through real-world attacks and red-teaming missions.

🌐 https://t.co/juuMFBDZQF

🧵5/5

[Konrad Rieck 🌈 @mlsec]

We’re excited to announce this year’s competitions for @satml_conf

🎉 Get ready for four challenges tackling AI in space, backdoors in LLMs, CTF agents, and privacy-preserving databases.

https://t.co/BTk2yKPbBG

Let’s dive in!
🧵1/5

[Konrad Rieck 🌈 @mlsec]

3️⃣ AgentCTF: Agents under attack! Red-team or defend autonomous systems in adversarial playgrounds.

🌐 https://t.co/N2H1DwvTXd

🧵4/5