Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 6 papers
Filter5

Attack type

Jailbreaks6Prompt injection60Poisoning and backdoors42Detection evasion5Denial of service3Malicious use3

Attack technique

Automated search3

Impact

Harmful content3Unauthorized actions3

System type

AI Agent6

Attack surface / entry point

User input38Tool responses13Tool and skill descriptions3Code repositories and dependencies2Training data1

Layer

Application layer6
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 247papers have no tags yet and are not included in filtered results.
Attack type：JailbreaksAttack surface / entry point：Tool and skill descriptionsAttack surface / entry point：Code repositories and dependenciesAttack surface / entry point：Training dataLayer：Application layerClear all

Another 247papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2610.05943

    CRIME 框架利用良性 Agent 技能组合诱发恶意行为

    提出 CRIME 框架，组合良性 Agent 技能诱发恶意行为

    arXiv
    2610.05943
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    DeepSeek-V4-Flash, GPT-4o-mini, GPT-4o and others6
    Abstract良性技能经 DCA 或 ACA 组合后可产生恶意环境后果，单独审查对不上。

    CRIME 把公共技能库中各自通过审查的技能配成两两组合，看联合执行能否实现指定恶意任务。。

    Paper analysisRead analysis
  2. AttacksarXiv 2607.11698

    AHA 用自动研究循环发现生产 Agent 漏洞概念

    提出 AHA 自动科研循环，发现生产 Agent 的可复用漏洞概念

    arXiv
    2607.11698
    Published
    Layer
    Application layer
    Setting
    coding agent
    Attacker
    Black-box
    Evaluated models
    Minimax-M2.7, Kimi-K2.6, Deepseek-V4-Pro and others5
    Abstract论文提出基于可证伪科研循环的 AHA 框架，从生产级智能体中挖掘并沉淀漏洞概念图，提升攻击复用率并指导防御加固。

    AHA 是一项针对生产级 LLM 智能体自动化红队测试的研究，旨在解决传统方法仅保留具体攻击载荷而缺乏成因解释、导致跨版本复用困难且无法指导修复的问题。

    Paper analysisRead analysis
  4. AttacksarXiv 2601.05466

    Jailbreaking large language models through reinforcement learning with iterative tool disguise attacks

    提出 iMIST，用工具伪装和 PPO 迭代越狱大语言模型

    arXiv
    2601.05466
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Attacker
    Black-box
    Evaluated models
    DeepSeek-V3, Qwen3-32B, GPT-OSS-120B
    AbstractiMIST 用工具伪装和在线 PPO 做黑盒越狱，Table I 中 JADES 高于同格基线。

    iMIST是黑盒越狱方法：把恶意查询伪装成合法工具调用，再用在线强化学习把响应的有害性分数往上推。

    Paper analysisRead analysis
  6. Evaluation and benchmarksarXiv 2510.01359

    JAWS-Bench：研究者用三种工作区场景系统越狱代码 Agent

    提出 JAWS-Bench，评测代码 Agent 在三级工作区中的越狱与恶意代码可执行性

    arXiv
    2510.01359
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    GPT-4.1, GPT-o1, DeepSeek-R1 and others8

    Abstract论文提出了评估代码智能体端到端恶意代码越狱的 JAWS-Bench，发现多文件与智能体推理会明显放大可部署危害。

    Paper analysisRead analysis
You have reached the end