CORTEXA
← Browse
arxivcs.CRcs.ETcs.HCq-bio.NC2026-07-11

Threat Vectors and the State of the Art in Defense Methods for Security in Neurotechnology

Bryce-Allen Bagley, Nathaniel Rose, Quintus Kilbourn, Matthew Canham

Brain-computer interfaces (BCIs) are a class of diverse hardware modalities, associated software, and connected devices which are widely used in a variety of fields, including neurosurgery, biomedical data analysis, and neuroimaging. Recent years have seen rapid advancements in BCI technology, and neurotechnology more broadly, with the first devices now passing clinical trials, early examples of consumer hardware entering the market, and many variants of consumer and medical hardware with increasingly extensive capabilities being developed rapidly. However, research and development in security for BCIs--known as neurosecurity--lags significantly behind the capabilities of BCIs themselves. In an effort to address as many vulnerabilities as feasible immediately, in this paper we review the current state of the art in neurosecurity, thoroughly survey the breadth and complexity of both firmly established and highly probable security threats to BCI systems, and provide recommendations of existing methods from cybersecurity, hardware security, and machine learning which can immediately be applied to address some of these gaps in neurosecurity.

View free PDFSource page

Related papers

arxivcs.HCcs.AIcs.ETphysics.med-phq-bio.NC2026-07-22

FMRP-LEAN: A HIPAA-Compliant AI-Augmented LIMS Architecture for End-to-End Clinical Assay Workflow Optimization

Eva McCord, Ernest Pedapati, Zag ElSayed

Clinical biomarker workflows in translational research settings often rely on spreadsheet-driven tracking, manual quality control (QC) reconciliation, and loosely integrated systems, resulting in limited state visibility, delayed reporting, and increased operational risk. These c…

View free PDFSource page
arxivcs.CRcs.HCcs.SE2026-07-16

Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents

Aadesh Bagmar, Pushkar Saraf

AI coding agents set up projects by reading documentation and installing the dependencies it lists, without verifying their names, sources, or known vulnerabilities. By editing only a README, requirements file, or Makefile, an attacker can redirect the agent to an untrusted regis…

View free PDFSource page
arxivcs.CRcs.HC2026-07-22

AuthProbe: Specification-Driven, Multi-Identity Detection of Broken Object-Level Authorization in Recruitment API

Jay Barach

Broken Object-Level Authorization (BOLA), also known as Insecure Direct Object Reference (IDOR), has topped the OWASP API Security ranking since 2019 and is the root cause of some of the largest exposures of applicant data in recruitment technology. The defining feature of this f…

View free PDFSource page
arxivcs.CRcs.HCcs.SE2026-07-30

YazSes: An Offline, Privacy-First, Cross-Platform Hold-to-Talk Voice-Dictation System

Mohsen Seyedkazemi Ardebili

Cloud voice-dictation services deliver strong accuracy but require streaming a user's speech to a remote provider, an unacceptable trade-off in privacy-sensitive professions and offline or air-gapped settings; the leading on-device alternatives are either platform-locked or aimed…

View free PDFSource page