CyLab
banner
cylab.bsky.social
CyLab
@cylab.bsky.social
CyLab is @cmu.edu's Security & Privacy Institute. Our 300+ researchers are passionate about creating a world in which technology can be trusted. Follow our latest research at https://www.cylab.cmu.edu/.
CyLab faculty members @nc2y.bsky.social, Hanan Hibshi, and Norman Sadeh served as featured panelists at the Global Cybersecurity Forum’s (GCF) 2025 Annual Meeting. Learn more about the insights they shared on public-private investment models, empowering women in #cybersecurity, and converging tech:
CyLab faculty share their insights at the 2025 Global Cybersecurity Forum
Three faculty members from Carnegie Mellon University’s CyLab Security and Privacy Institute participated in panels at the Global Cybersecurity Forum’s (GCF) 2025 Annual Meeting.
www.cylab.cmu.edu
November 6, 2025 at 9:40 PM
Professor Matt Fredrikson of the @csdatcmu.bsky.social and @cmus3d.bsky.social recently received the 2025 @acm.org Conference on Computer and Communications Security (CCS) Test of Time Award, honoring research with enduring impact in computer and communications security.
Fredrikson receives Test of Time Award
Carnegie Mellon University's Matt Fredrikson has received the 2025 ACM Conference on Computer and Communications Security (CCS) Test-of-Time Award, honoring research with enduring impact in computer a...
www.cylab.cmu.edu
November 6, 2025 at 9:12 PM
. @cmu.edu spinoff Mayhem Security, formerly #ForAllSecure, has been acquired by @bugcrowd.com. Congratulations!
3, 2, 1... The wait’s officially over. Bugcrowd is thrilled to announce the acquisition of Mayhem Security!

This marks a strategic investment in the power of combining human ingenuity with AI.

See how we’re building the industry’s first adaptive security platform: www.bugcrowd.com/blog/bugcrow...
November 4, 2025 at 8:53 PM
Day 2 of the @cylab.bsky.social Partners Conference has featured some insightful talks on system and hardware security, #crypto, and #blockchain, as well as the CyLab Distinguished Alumni Award lecture by Serge Egelman (@v0max.bsky.social), Founder and Chief Scientist at AppCensus.
October 29, 2025 at 6:30 PM
The 2025 @cylab.bsky.social Partners Conference is underway!
October 28, 2025 at 1:57 PM
Professor @lorriecranor.bsky.social, @cylab.bsky.social Director, is one of five recipients of the 2025 American Computer & Robotics Museum’s (ACRM) Stibitz-Wilson Awards, recognizing pioneering individuals whose work has powerfully impacted modern life.
Lorrie Cranor honored as 2025 Stibitz-Wilson Award recipient
Lorrie Cranor, Director of the CyLab Security and Privacy Institute, is one of five recipients of the 2025 American Computer & Robotics Museum’s (ACRM) Stibitz-Wilson Awards, recognizing pioneering in...
www.cylab.cmu.edu
October 27, 2025 at 7:58 PM
Reposted by CyLab
Excited and grateful to share that I’ve been named a Presidential Fellow by @cylab.bsky.social !

Endless thanks to my advisors @sauvik.me and Jodi Forlizzi, and all my collaborators for their constant inspiration as we work toward shaping the future of privacy-preserving AI.
October 24, 2025 at 8:22 PM
. @iapp.bsky.social has featured Professor @lorriecranor.bsky.social, @cylab.bsky.social Director, in its "25 leaders, 25 moments at 25 years" series. Check out the full article below to learn more about Professor Lorrie Cranor's groundbreaking work in usable #privacy and #security:
25 leaders, 25 moments at 25 years: Lorrie Faith Cranor
Privacy engineering expert and professor Lorrie Faith Cranor, CIPT, has become one of the most influential voices in the privacy community, inspiring researchers to view privacy as a fundamental desig...
www.linkedin.com
October 23, 2025 at 6:10 PM
Reposted by CyLab
As more aspects of life move online, how do we protect personal information? On this episode of Does Compute, Sarah Scheffler (@cylab.bsky.social) discusses how applied cryptography works to protect privacy, and what privacy means in the digital age.

www.geekwire.com/does-compute/
October 20, 2025 at 3:14 PM
CyLab Ph.D. students Alexandra Nisenoff and @elijahboumasims.bsky.social present their research at this week’s @acm.org Special Interest Group on Security, Audit and Control’s (SIGSAC) Conference on Computer and Communications Security (#acm_ccs). Learn more: www.cylab.cmu.edu/news/2025/10...
October 17, 2025 at 1:55 PM
. @cmuheinzcollege.bsky.social is currently seeking candidates for an Open-Rank Tenure-Track position at the Assistant/ Associate/ Full Professor level, and one of the areas of interest this year is Digital Privacy/ Information Security. Learn more and apply: jobs.chronicle.com/job/37899680...
Open-Rank Tenure-Track position at the Assistant/ Associate/ Full Professor level in Information - Pittsburgh, Pennsylvania, United States job with Carnegie Mellon University | 37899680
Description Assistant/ Associate/ Full (Open Rank) Professor – Information Systems The Heinz College of Information Systems and Public Policy...
jobs.chronicle.com
October 16, 2025 at 3:47 PM
The organizers of the CyLab Robotics Security and Privacy Workshop summarized its findings in a technical report, and will present key takeaways at a CyLab Seminar event on Monday, October 20 that is free and open to the public. Learn more and register to attend the seminar in person or virtually:
CyLab researchers present findings from the Robotics Security and Privacy Workshop in a new technical report and upcoming seminar
Organizers of the CyLab Robotics Security and Privacy Workshop have summarized its findings in a technical report published this week, and they’ll be presenting the takeaways at a CyLab Seminar Series...
www.cylab.cmu.edu
October 15, 2025 at 5:53 PM
A team of researchers featuring Professor Riccardo Paccagnella of @cmus3d.bsky.social has uncovered a new class of Android attacks that can stealthily steal sensitive information displayed by other apps or even websites.
Researchers uncover “Pixnapping,” a new class of Android attacks that can steal on-screen data in seconds
A team of researchers featuring Riccardo Paccagnella, assistant professor in Carnegie Mellon University’s Software and Societal Systems Department (S3D), has uncovered a new class of Android attacks t...
www.cylab.cmu.edu
October 13, 2025 at 8:55 PM
. @cmu.edu alum and @umich.edu faculty member Ke Wu presents her research on mechanism design for automated market makers at today's afternoon session of the International Conference on Advances in Financial Technologies (AFT’25).
October 8, 2025 at 10:58 PM
Prof. @nc2y.bsky.social Christin and Prof. Ariel Zetlin-Jones, Co-Directors of the CyLab Secure #Blockchain Initiative, joined Michael Lisanti, CyLab Senior Director of Partnerships, to provide opening remarks at the seventh International Conference on Advances in Financial Technologies (AFT’25).
October 8, 2025 at 3:52 PM
The afternoon sessions of the @cmu.edu's Secure Blockchain Summit featured conversations on #AI, identity, and trust, as well as a series of lightning talks on emerging #blockchain research. Many thanks to all of our speakers, attendees, and sponsors!

#web3
October 7, 2025 at 9:18 PM
The 2025 @cmu.edu Secure Blockchain Summit is underway! This morning’s sessions featured discussions on #DeFi and economic & security risks for #crypto.

#blockchain #web3
October 7, 2025 at 4:17 PM
“Scams are nothing new – fraud has existed as long as human greed. What changes are the tools.”

In a column for @us.theconversation.com, Professor Rahul Telang of @cmuheinzcollege.bsky.social shares strategies for identifying and avoiding #AI-. #crypto-, and personal data-driven scams:
Scams and frauds: Here are the tactics criminals use on you in the age of AI and cryptocurrencies
Technology has supercharged fraud. The ruses are ancient, but the tools scammers use are cutting edge.
theconversation.com
September 26, 2025 at 7:12 PM
"When you look at these deceptive and manipulative patterns...there are cases where you just have to conclude that they did it on purpose."

@lorriecranor.bsky.social, @cylab.bsky.social Director, chats w/ @mnickelsburg.bsky.social of @npr.org about the FTC’s “dark patterns” lawsuit against Amazon:
The 'dark patterns' at the center of FTC's lawsuit against Amazon
This week, the trial starts in a consequential FTC lawsuit against Amazon. The suit alleges that Amazon for years "tricked" people into buying Prime memberships that were purposefully hard to cancel.
www.keranews.org
September 25, 2025 at 7:32 PM
Reposted by CyLab
We're hosting the 7th intl' conf. on Advances in Financial Technologies (AFT'25) at Carnegie Mellon on Oct. 8-10. Join us to hear about the latest exciting developments in crypto research. Registration closes on Sept 16!
advfintech.org/aft25/attend...
(Program: advfintech.org/aft25/progra...)
Advances in Financial Technologies
advfintech.org
September 11, 2025 at 7:34 PM
Join us Tuesday, October 7 for the 2025 CMU Secure Blockchain Summit! Check out this year's schedule, and sign up to request to attend this free event.

Schedule and details: www.cylab.cmu.edu/research/blo...

Request to attend: bit.ly/request-secu...
CMU Secure Blockchain Summit
Carnegie Mellon University's Secure Blockchain Summit will bring together experts from academia and industry to discuss the future of blockchain research, technology, and applications, focusing on a v...
www.cylab.cmu.edu
September 17, 2025 at 3:42 PM
The newest member of the @cmu.edu Information Networking Institute (INI) faculty, Associate Teaching Professor Taha Khan, brings a thoughtful approach to cybersecurity, censorship and freedom on the internet.

You can learn more about Khan and his background here:
Faculty Spotlight: Taha Khan and Building the System Development Mindset - Information Networking Institute - College of Engineering - Carnegie Mellon University
Associate Teaching Professor Taha Khan is the latest addition to the Information Networking Institute (INI) faculty. Drawing from his interest in cybercrime, usable security and online censorship, Kha...
loom.ly
September 4, 2025 at 3:08 PM
. @v0max.bsky.social, Founder and Chief Scientist at APPCensus, a CyLab Venture Network Startup Partner, has been named @cylab.bsky.social's 2025 Distinguished Alumni Award recipient. Learn more:
Serge Egelman receives 2025 CyLab Distinguished Alumni Award
Serge Egelman, founder and chief scientist at AppCensus, has been named CyLab's 2025 Distinguished Alumni Award recipient, in honor of his impactful contributions to privacy research, policy, and indu...
www.cylab.cmu.edu
August 27, 2025 at 7:55 PM
Most U.S. adults say they are concerned about data #privacy while traveling, but few take steps to keep theirs safe. Prof. Lorrie Cranor (@lorriecranor.bsky.social), @cylab.bsky.social Director, tells @justynnewman.bsky.social of @pcmag.com that users may be prioritizing convenience over #security:
Yes, Your Data Is at Risk on Vacation: 75% of US Adults Worry About Privacy While Traveling
Privacy advocates admit travel makes it hard to stay secure. But our survey shows most people don’t really try anyway.
www.pcmag.com
August 27, 2025 at 5:50 PM
We've been in our orange era all along!
August 19, 2025 at 2:57 PM