Security
“Public” vulnerability disclosures
squid proxyremote code execution via cache digest memcachedauthentication bypass via sasl timing ffmpegremote code execution via malicious HLS playlist apache mlflowauthorization bypass in S3 bucket consumption micro-eccremote crash and broken key agreement in native little-endian builds
Research
2026
SuperRed threat model: scope, feedback, attacker model, budget
SuperRed: AI Red-Teaming and Security Benchmarking with Fine-grained Threat Model ICLR Video
Simon Sure, Sarthak Munshi, Rishabh Sinha, Zhun Wang, Dawn Song
The defense trilemma: continuity, utility preservation, completeness
Defense Trilemma: Why Prompt Injection Defense Wrappers Fail? Preprint
Manish Bhatt, Sarthak Munshi, Vineeth Sai Narajala, Idan Habler, Ammar Al-Kahfah, Ken Huang, Joel Webb, Blake Gatto, Md Tamjidul Hoque
Behavioral heatmaps for three language models
Behavioral Cartography: A Protocol for Auditing LLM Safety Beyond Aggregate Scores ACM FAccT Preprint
Sarthak Munshi, Manish Bhatt, Vineeth Sai Narajala, Idan Habler, Ammar Al-Kahfah, Ken Huang, Blake Gatto
2025
MAPLE architecture with slot attention and recurrent modules
MAPLE: Specialized Modular Neural Architectures for Multi-Agent RL PDF
Zahra Sheikhbahaee, Chang Su, Sarthak Munshi, Aniket Didolkar, Juan David Vargas, Adam Safron, Nicco Reggente, Leonardo Christov-Moore, Dianbo Liu, Irina Rish
Representation reading: concepts, tasks, functions
Representation Control for LLMs: Survey and Research Challenges ACM Computing Surveys Preprint
Lukasz Bartoszcze, Sarthak Munshi, Bryan Sukidi, Jennifer Yen, Zejia Yang, David Williams-King, Linh Le, Kosi Asuzu, Carsten Maple
Sample cloud architecture with diagram-as-code and CDK
ACSE-Eval: Can LLMs threat-model real-world cloud infrastructure? ESORICS Workshops Preprint
Sarthak Munshi, Swapnil Pathak, Sonam Ghatode, Thenuga Priyadarshini, Dhivya Chandramouleeswaran, Ashutosh Rana
Code
01
SuperRed – AI red-teaming and security framework.
02
TurboKV – High-performance key-value store.
03
UnSQL – Natural language to SQL for legacy databases. ACQUIRED
04
Chapel Crypto – Cryptography primitives for Chapel's official package ecosystem.