Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 2 papers
Filter6

Attack type

Jailbreaks56Prompt injection5Poisoning and backdoors4Model tampering8Extraction and theft2Detection evasion9

Attack technique

Gradient and representation optimization1Automated search4Conversation structure manipulation1Cross-modal payloads0Side channels3

System type

Models and APIs1Multi-agent systems1
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 213papers have no tags yet and are not included in filtered results.
Attack type：Extraction and theftAttack technique：Gradient and representation optimizationAttack technique：Conversation structure manipulationAttack technique：Cross-modal payloadsSystem type：Models and APIsSystem type：Multi-agent systemsClear all

Another 213papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2608.09867

    Researchers steal proprietary LLM inference chains via cross-model compatibility of encrypted inference blocks

    利用加密思维块的跨模型重放，诱导弱模型逐字转写专有推理链

    arXiv
    2608.09867
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    Claude Opus 4.8, Claude Sonnet 4.6, Claude Haiku 4.5 and others13

    Abstract论文揭示了客户端加密思维块跨模型互换漏洞，提出了低成本提取方法并给出防御方案。

    Paper analysisRead analysis
  2. AttacksarXiv 2603.11132

    WebWeaver: Breaking the topology confidentiality of LLM multi-agent systems via covert context inference

    Propose WebWeaver, which compromises only a single agent and recovers the multi-agent communication topology from conversation context.

    arXiv
    2603.11132
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems
    Evaluated models
    Llama 3.1 8B, Qwen 2.5 7B, Mistral NeMo 12B and others6
    AbstractWebWeaver infers topology from context.

    WebWeaver is an inference attack against the confidentiality of LLM-MAS communication topology: it controls only one arbitrary agent and recovers the full graph from dialogue context, rather than querying agent IDs.

    Paper analysisRead analysis
You have reached the end