[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-new-method-lets-malware-ai-learn-without-forgetting-old-threats":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},5567,"new-method-lets-malware-ai-learn-without-forgetting-old-threats","New Method Lets Malware AI Learn Without Forgetting Old Threats","A new technique called Retrofit updates malware and binary analysis models without retraining from scratch, curbing catastrophic forgetting.","A new technique called Retrofit lets malware detection and binary analysis models absorb new threat data without forgetting everything they learned before.\n\nThe method addresses a persistent problem: security models trained on today's malware samples degrade as attackers change tactics and code representations shift. Retrofit updates a model by merging it with a freshly fine-tuned version, treating one as a teacher of established knowledge and the other as a teacher of new patterns. It constrains those updates to small, targeted parameter subspaces and uses a confidence-based arbitration system to decide how much weight each teacher gets. None of this requires storing or replaying old training data, which normally raises red flags in security environments handling sensitive samples.\n\nIn tests, Retrofit improved a standard retention score from 20.2 percent to 38.6 percent over existing continual learning baselines, and it more than doubled the BLEU score of the transfer learning approach used in prior binary summarization work. The bigger point is the data constraint it solves: most continual learning research assumes you can replay historical examples during retraining, but malware samples and proprietary binaries are exactly the kind of data organizations cannot casually stockpile or share. A method that adapts without a replay buffer fixes a problem specific to security workflows, not a general machine learning nicety.\n\nStill, this is a preprint with benchmarks the authors chose themselves, so whether Retrofit holds up against genuinely novel malware families in a live security operations center remains untested outside the lab.","[\"malware detection\",\"continual learning\",\"binary analysis\",\"cybersecurity ai\"]","2026-08-18T04:00:00.000Z","2026-08-19T01:38:07.499Z","2026-08-19T01:38:19.333Z","published",null,[],"security",[26,27,28,29],"malware detection","continual learning","binary analysis","cybersecurity ai",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2511.11439",0,{"sections":36},[37,42,45,50,55,60,65,70,75,79,84,89,94,99],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",3293,"2026-08-20T04:00:00.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":41},"Security",435,{"name":46,"slug":47,"count":48,"latest_published_at":49},"Policy","policy",210,"2026-08-19T09:32:27.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Hardware","hardware",140,"2026-08-19T18:25:42.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Consumer Tech","consumer-tech",95,"2026-08-18T16:05:00.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Science","science",90,"2026-08-19T18:41:02.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":18},"Dev Tools","dev-tools",69,{"name":80,"slug":81,"count":82,"latest_published_at":83},"Startups","startups",47,"2026-08-19T19:13:46.000Z",{"name":85,"slug":86,"count":87,"latest_published_at":88},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"General","general",33,"2026-08-18T22:18:13.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]