{"data":{"id":"d5ce812f-482f-4133-a11f-2d547024be89","title":"Federated backdoor attack with aggregated triggers optimized by maximum mean discrepancy","summary":"Researchers propose MABA, a distributed backdoor attack for Federated Learning in which each malicious client builds a local trigger aligned to the benign model's feature distribution via Maximum Mean Discrepancy (MMD) constraints. The malicious clients then collaboratively form a persistent global trigger that adapts to update magnitudes and sample features with dynamic noise intensity. On federated image classification with convolutional neural networks, the method evades existing defenses and keeps attack success above 90% on CIFAR-10 under most defenses across 200 post-attack rounds, reaching 100% on CIFAR-10 and over 90% on FMNIST and CIFAR-100.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://doi.org/10.1016/j.engappai.2026.116522","publishedAt":"2026-10-18T00:00:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["model_poisoning"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-18T00:00:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity"],"aiComponentTargeted":"training_data","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":"peer_reviewed","atlasIds":null}}