Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 8 papers
Filter3

Attack type

Jailbreaks59Prompt injection36Poisoning and backdoors24Extraction and theft8Detection evasion12Denial of service4

Attack technique

Automated search6Role-play and persuasion3Conversation structure manipulation2Side channels4

Impact

Data and privacy leaks7

System type

Models and APIs5

Attacker access

Black-box6

Attack surface / entry point

User input6

Layer

Prompt layer3Application layer3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 201papers have no tags yet and are not included in filtered results.
Attack type：Extraction and theftAttack technique：Automated searchAttack technique：Conversation structure manipulationClear all

Another 201papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2610.04985

    研究揭示 Jev 作为应用决策层的安全与隐私风险

    评估应用决策层的输入注入与隐私推断风险

    arXiv
    2610.04985
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Attacker
    Black-box, Gray-box
    Evaluated models
    Jev, NanoJev
    AbstractJev 的类型化决策可被输入与训练操纵，也会泄露信息，并同时支持检测与滥用。

    Jev 是 TypeSafe 的 System One 模型，把应用 state 和固定问题变成 Choice、Noul 或 Score 的类型化决策与概率。作者用官方 API 和可改训练的 NanoJev，考察它作为决策层时的操纵、泄露与双重用途。

    Paper analysisRead analysis
  2. AttacksarXiv 2608.09867

    Researchers steal proprietary LLM inference chains via cross-model compatibility of encrypted inference blocks

    利用加密思维块的跨模型重放，诱导弱模型逐字转写专有推理链

    arXiv
    2608.09867
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    Claude Opus 4.8, Claude Sonnet 4.6, Claude Haiku 4.5 and others13

    Abstract论文揭示了客户端加密思维块跨模型互换漏洞，提出了低成本提取方法并给出防御方案。

    Paper analysisRead analysis
  3. AttacksarXiv 2608.04192

    研究者提出 SkillClone，仅凭正常提问即可克隆 LLM Agent 隐藏技能功能

    提出 SkillClone，仅凭良性任务交互重构闭源 Agent 技能

    arXiv
    2608.04192
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Attacker
    Black-box
    Evaluated models
    DeepSeek-Flash, DeepSeek-Pro, GLM-5.1 and others5
    Abstract论文揭示了仅靠良性任务交互即可重构闭源智能体技能隐藏功能的风险，表明功能保密需要限制累积信息泄露。

    论文从功能保密视角系统研究了大语言模型智能体技能的行为重构威胁。

    Paper analysisRead analysis
  4. AttacksarXiv 2607.25560

    SigLeak 可从执行轨迹推断专有 Agent 技能

    提出 SigLeak，从黑盒 Agent 执行轨迹推断专有技能

    arXiv
    2607.25560
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Attacker
    Black-box
    Evaluated models
    GPT-5.4-mini, GPT-5.5, GLM-5.2 and others4

    Abstract提出了通过良性查询和对照轨迹推断黑盒专有技能的 SigLeak 框架，揭示了智能体执行可见性带来的行为侧信道泄露风险。

    Paper analysisRead analysis
  5. AttacksarXiv 2602.01757

    Zero2Text: Training-Free Cross-Domain Text Embedding Inversion Attack

    提出 Zero2Text，无需训练地跨域反演文本嵌入

    arXiv
    2602.01757
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    GTR-Base, Qwen3-Embedding-0.6B, Text-Embedding-3-small and others4
    Abstract零训练在线对齐可在未知域、无泄漏对时从黑盒 embedding 还原句子。

    Zero2Text 是一种不训练 decoder、也不使用泄漏文本–向量对的文本 embedding 反演，针对 RAG 向量库在严格黑盒、目标域未知时的还原。

    Paper analysisRead analysis
  8. AttacksarXiv 2508.06837

    Prometheus：针对文生图扩散模型的免训练提示词窃取攻击

    提出 Prometheus，从展示图反推文生图模型的在售提示词

    arXiv
    2508.06837
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Attacker
    No-box (offline transfer)
    Evaluated models
    Midjourney, Leonardo.ai, DALL·E and others4
    Abstract训练无关的 proxy 搜索攻击。

    Prometheus 是针对文生图市场 showcase 的训练无关提示词窃取：攻击者看不到在售文本，只用本地开源 proxy 恢复 subject 和 modifier，并希望换 subject 后风格仍在。

    Paper analysisRead analysis
You have reached the end