Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 9 papers
Filter3

Attack type

Jailbreaks7Prompt injection56Poisoning and backdoors33Extraction and theft9Detection evasion4Malicious use3

Impact

Data and privacy leaks8

System type

LLM applications7

Attacker access

Black-box5

Attack surface / entry point

User input6

Layer

Application layer9

System component

MCP and skills3RAG7Reasoning chains5Permissions and sandboxing2Fine-tuning and open weights4Vision4Audio3Image generation5Embeddings5Multimodal12
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 248papers have no tags yet and are not included in filtered results.
Attack type：Extraction and theftSystem component：RAGSystem component：Permissions and sandboxingClear all

Another 248papers do not have category tags yet and are not included in filtered results.

  3. AttacksarXiv 2609.14649

    CIG-MIA：利用上下文信息增益对 RAG 系统发起成员推断攻击

    提出 CIG-MIA，用上下文信息增益推断 RAG 知识库成员身份

    arXiv
    2609.14649
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Attacker
    Gray-box, Black-box
    Evaluated models
    Llama-3.1-8B-Instruct, Mistral-7B-Instruct-v0.3, Llama-2-13b-chat-hf and others6
    AbstractCIG-MIA 用注入前后的答案似然差推断 RAG 库成员，灰盒可分性高于所列基线。

    CIG-MIA 是针对 RAG 外部知识库的成员推断攻击，同时覆盖灰盒和纯文本黑盒。

    Paper analysisRead analysis
  4. DefensesarXiv 2609.04767

    SHAQ: Privacy-preserving retrieval in vector databases using shadow queries

    Proposes SHAQ, which replaces document embeddings with shadow query embeddings to defend against embedding inversion.

    arXiv
    2609.04767
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Attacker
    Black-box
    Evaluated models
    GTR-T5 encoder, DPR
    AbstractSHAQ replaces document embeddings with shadow query embeddings.

    SHAQ is a defense against EIA for cloud vector databases: instead of directly modifying document embeddings, it replaces them with shadow query embeddings.

    Paper analysisRead analysis
  5. DefensesarXiv 2609.01677

    Skill-as-API：面向智能体软件工程的机密多智能体协作协议

    提出 Skill-as-API，隔离多智能体协作中的 skill 正文与系统提示词

    arXiv
    2609.01677
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems, coding agent
    Abstract协议把 skill 正文留在所有者侧，四层限制发现内容、权限期限和注入拼接。

    Skill-as-API 是面向智能体软件工程的协调协议，用来在跨组织调用时把 skill 的代码和系统提示词留在所有者进程。作者针对三条威胁：经通道或命名空间抽取专有方法，用注入让被调用模型输出系统提示词，以及协作结束后权限继续保留。

    Paper analysisRead analysis
  8. DefensesarXiv 2605.19847

    论文揭示多租户 RAG 账号合谋使隐私泄露随账号数线性增长

    提出零知识审计协议，核验多租户 RAG 的合谋差分隐私

    arXiv
    2605.19847
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Abstract揭示多租户 RAG 合谋泄露按根号 k 放大，提出带零知识证明的无泄露审计协议。

    论文针对多租户 RAG 服务在多账户协同攻击下隐私边界失效的问题展开研究。

    Paper analysisRead analysis
  9. AttacksarXiv 2602.07379

    Aegis: Governance, Integrity, and Security for AI Voice Agents

    提出 Aegis 红队框架，多轮攻击高风险语音 Agent

    arXiv
    2602.07379
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    GPT-4o, GPT-4o-mini, Gemini-1.5 Pro and others7
    AbstractAegis red-teams three types of voice agents: query-based access eliminates authentication and leakage successes, but behavioral attacks remain.

    Aegis uses multi-turn red-teaming evaluation on ALLM voice agents already integrated into business systems. The authors call this the first systematic red-teaming framework in this setting.

    Paper analysisRead analysis
You have reached the end