Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 5 papers
Filter6

Attack type

Jailbreaks4Prompt injection24Poisoning and backdoors15Detection evasion5

Attack technique

Gradient and representation optimization2Automated search8Encoding and obfuscation3Role-play and persuasion3Defense-targeted5

Impact

Output manipulation3

System type

Models and APIs13LLM applications4AI Agent1coding agent0

Attack surface / entry point

User input3

Layer

Application layer4

System component

Guardrails and judges3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 201papers have no tags yet and are not included in filtered results.
Attack type：Detection evasionAttack technique：Gradient and representation optimizationAttack technique：Encoding and obfuscationSystem type：LLM applicationsSystem type：AI AgentSystem type：coding agentClear all

Another 201papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2606.09700

    The researchers propose the HPAA attack: bypassing 13 content moderation systems with typographic visual cues

    提出 HPAA 攻击，用排版视觉线索绕过内容审核系统

    arXiv
    2606.09700
    Published
    Layer
    Prompt layer
    Setting
    LLM applications
    Attacker
    Black-box
    Evaluated models
    Llama-Guard-3-8B, Perspective API, ShieldGemma-2B and others13
    Abstract揭示了排版视觉线索与分词差异带来的审核盲区，HPAA 以极低查询实现近乎完全规避。

    这篇论文研究了人类视觉感知与大模型分词处理机制之间的差异所导致的内容审核漏洞。

    Paper analysisRead analysis
  3. AttacksarXiv 2602.05484

    Masked Mirror: Covert Prompt Injection Attacks Against LLM-Based Phishing Detection

    提出隐蔽提示注入攻击 LLM 钓鱼检测器，并给出防御 InjectDefuser

    arXiv
    2602.05484
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Evaluated models
    OpenAI GPT-5, xAI Grok 4 Fast (Non-Reasoning), Meta Llama 4 Maverick and others4
    Paper analysisRead analysis
  5. AttacksarXiv 2505.23266

    AdvOF：用对抗物体融合攻击 VLM 驱动的视觉语言导航智能体

    提出 AdvOF，生成对抗物体误导视觉语言导航智能体的场景感知

    arXiv
    2505.23266
    Published
    Layer
    Application layer
    Setting
    Embodied systems and robotics
    Attacker
    White-box
    Evaluated models
    Lseg, Clip, ViT-L/16 and others5
    AbstractAdvOF 以多视角融合生成对抗物体。

    AdvOF 是针对 VLM 驱动 VLN 服务导航的对抗物体攻击。

    Paper analysisRead analysis
You have reached the end