Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 5 papers

Filter4

Attack type

Prompt injection20 Poisoning and backdoors9 Extraction and theft5 Detection evasion8 Malicious use4

Impact

Data and privacy leaks5

System type

Models and APIs22 LLM applications4 AI Agent3 coding agent1 Browser and computer use0

Attacker access

Black-box3

Attack surface / entry point

User input3

Layer

Application layer5

System component

RAG3

Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 233papers have no tags yet and are not included in filtered results.

Attack type：Extraction and theft System type：LLM applications System type：coding agent System type：Browser and computer use Clear all

Another 233papers do not have category tags yet and are not included in filtered results.

DefensesarXiv 2609.04767Sep 4
SHAQ: Privacy-preserving retrieval in vector databases using shadow queries
Proposes SHAQ, which replaces document embeddings with shadow query embeddings to defend against embedding inversion.
arXiv
2609.04767
Published
Sep 4
Layer
Application layer
Setting
LLM applications
Attacker
Black-box
Evaluated models
GTR-T5 encoder, DPR
- AttacksExtraction and theft
- ComponentEmbeddings
AbstractSHAQ replaces document embeddings with shadow query embeddings.
SHAQ is a defense against EIA for cloud vector databases: instead of directly modifying document embeddings, it replaces them with shadow query embeddings.
Paper analysisRead analysis
DefensesarXiv 2609.01677Sep 1
Skill-as-API：面向智能体软件工程的机密多智能体协作协议
提出 Skill-as-API，隔离多智能体协作中的 skill 正文与系统提示词
arXiv
2609.01677
Published
Sep 1
Layer
Application layer
Setting
Multi-agent systems, coding agent
- DefensesInstruction–data separation
- AttacksExtraction and theft
- ComponentMCP and skills
Abstract协议把 skill 正文留在所有者侧，四层限制发现内容、权限期限和注入拼接。
Skill-as-API 是面向智能体软件工程的协调协议，用来在跨组织调用时把 skill 的代码和系统提示词留在所有者进程。作者针对三条威胁：经通道或命名空间抽取专有方法，用注入让被调用模型输出系统提示词，以及协作结束后权限继续保留。
Paper analysisRead analysis
DefensesarXiv 2608.17829Aug 18
LeakGauge：用行为探针在解码前检测上下文泄露攻击信号
提出 LeakGauge，用行为后缀的 prefill 对数概率检测上下文泄露
arXiv
2608.17829
Published
Aug 18
Layer
Application layer
Setting
LLM applications
Attacker
Black-box
Evaluated models
Gemma-4-E4B-it, Gemma-4-31B-it, Qwen2.5-14B-Instruct and others11
- DefensesDetection and filtering
- AttacksExtraction and theft
- ComponentRAG
Paper analysisRead analysis
DefensesarXiv 2606.18673Jun 17
Understanding and mitigating prompt leakage attacks in real-world LLM applications
Propose soft prompt defense AREA, re-anchoring attention to mitigate system prompt leakage
arXiv
2606.18673
Published
Jun 17
Layer
Application layer
Setting
LLM applications
Attacker
Black-box
Evaluated models
Llama-2-7B-chat-hf, Llama-3.1-8B-Instruct, Mistral-7B-Instruct-v0.3 and others8
- DefensesInference-time intervention
- AttacksExtraction and theft
AbstractThe authors measure commercial prompt leakage, propose attention drift, and use AREA to strike a trade-off between usability and leakage resistance.
The authors study system prompt leakage in real LLM applications and propose AREA, a mitigation method that does not modify weights.
Paper analysisRead analysis
DefensesarXiv 2605.19847May 19
论文揭示多租户 RAG 账号合谋使隐私泄露随账号数线性增长
提出零知识审计协议，核验多租户 RAG 的合谋差分隐私
arXiv
2605.19847
Published
May 19
Layer
Application layer
Setting
LLM applications
- AttacksExtraction and theft
- ComponentRAG
Abstract揭示多租户 RAG 合谋泄露按根号 k 放大，提出带零知识证明的无泄露审计协议。
论文针对多租户 RAG 服务在多账户协同攻击下隐私边界失效的问题展开研究。
Paper analysisRead analysis

You have reached the end

AI Safety Daily

Read the latest issueOne issue per day, updated as events develop

All papers

Attack type

Impact

System type

Attacker access

Attack surface / entry point

Layer

System component

SHAQ: Privacy-preserving retrieval in vector databases using shadow queries

Skill-as-API：面向智能体软件工程的机密多智能体协作协议

LeakGauge：用行为探针在解码前检测上下文泄露攻击信号

Understanding and mitigating prompt leakage attacks in real-world LLM applications

论文揭示多租户 RAG 账号合谋使隐私泄露随账号数线性增长