We have summarized the research for GitHub Actions and security practices, which was accepted for NDSS Symposium 2026.
We have summarized the research for GitHub Actions and security practices, which was accepted for NDSS Symposium 2026.
The Internet Last Week
* US/Israel Attacks on Iran Internet effects
https://infosec.exchange/@ProjectAinita/116147653707149458
https://noc.social/@cloudflareradar/116151293471289304
https://mastodon.social/@IODA/116148656276570120
https://infosec.exchange/@dougmadory/116148738148192917
* NDSS Symposium 2026
https://www.ndss-symposium.org/ndss2026/
* Various US DoD route withdrawals
https://stat.ripe.net/widget/routing-history#resource=360&starttime=2026-02-22
https://stat.ripe.net/widget/routing-history#resource=647&starttime=2026-02-22
https://bgp.he.net/AS6034#_prefixes
https://stat.ripe.net/widget/routing-history#resource=34369&starttime=2026-02-22
* Python infrastructure outage
https://status.python.org/incidents/r47c43jw19zq

Attached: 1 image With #war erupting between the U.S. and #Iran, the internet is quickly impacted, leaving very few international connections operational. #IranInternetStatis #IranTensions
Having returned from photographing a large conference in the last week (NDSS), I'm now processing 1000-ish images. And I have a request. It's a simple request. Can we please switch to printing all conference badges on 50% gray cards? Mmmmmk? Thank you.
✈️ I am traveling to #ndss2026 today to present two of our @SECUSO_Research papers at #USEC and #MADWeb 🤩
The paper „‘I found the text to be encouraging‘ - Evaluating Different Passeord Strength Calculator Designs“ is joint work with Rozalina and Peter. We compared different password strength meter designs and found that fear appeals are not absolutely necessary to motivate users to choose strong passwords.
You can read a version of the paper here: https://s.kit.edu/password-meter
I'll be presenting our work
Eviction Notice: Reviving and Advancing Page Cache Attacks
Today (Feb/24/2026) at #NDSS2026
Session 1D: Microarchitectural Security Caches to Ashes, Embarcadero
Looking forward to seeing you there!
Jonas Juffinger, Lukas Maar, @lavados

Foreword This blog post is a summarized and introductory write up of our paper recently accepted at NDSS 2026, “Eviction Notice: Reviving and Advancing Page Cache Attacks”. Read the full paper here. Authors: Sudheendra Raghav Neela, Jonas Juffinger, Lukas Maar, Daniel Gruss Artifacts: Github Repository, Zenodo Record (Available, Functional, and Reproducible) CVE-2025-21691: Announcement, Red Hat, NVD NIST, Debian Tracker, Suse. Introduction An operating system deals with pages, the smallest region of memory in a system using virtual memory1.
Hi everyone! I'm excited to announce that my first first-author paper has been accepted at NDSS 2026 🥳, to be held at San Diego, California, USA. If you're attending #NDSS2026 this year and are working on systems security, let me know - it'd be awesome to meet up!
Eviction Notice: Reviving and Advancing Page Cache Attacks
@vmcall, Jonas Juffinger, Lukas Maar, @lavados
all of us from @isec_tugraz, at TU Graz, Austria.
In the paper, we revive practical attacks on the Linux page cache and also provide a systematic classification & understanding of primitives which interact with page cache. This understanding helps us advance page cache attacks, including speeding up previously known mechanisms by six orders of magnitude.
I have a small technical write up on my website if you're interested to check it out: https://snee.la/posts/eviction-notice/
Paper available here: https://snee.la/pdf/pubs/eviction-notice.pdf
Our artifacts have been evaluated to be available, functional, and reproducible, so feel free to try the code out on your Linux box: https://github.com/isec-tugraz/Eviction-Notice

Foreword This blog post is a summarized and introductory write up of our paper recently accepted at NDSS 2026, “Eviction Notice: Reviving and Advancing Page Cache Attacks”. Read the full paper here. Authors: Sudheendra Raghav Neela, Jonas Juffinger, Lukas Maar, Daniel Gruss Artifacts: Github Repository, Zenodo Record (Available, Functional, and Reproducible) CVE-2025-21691: Announcement, Red Hat, NVD NIST, Debian Tracker, Suse. Introduction An operating system deals with pages, the smallest region of memory in a system using virtual memory1.
Richtig gute Idee, die Leute sich mit Telephonnummer registrieren zu lassen! Und dann noch die Schlüssel beim Accountwechsel auf dem Gerät wiederverwenden! Und dann alles frei ins Netz und kein Monitoring dazu, yolo!
#HeyThere #WhatsApp #Meta #NDSS2026
https://heise.de/-11082660
https://dx.doi.org/10.14722/ndss.2026.230805