Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 2 papers
Filter5

Attack type

Jailbreaks6Prompt injection10Poisoning and backdoors2Detection evasion9

Attack technique

Gradient and representation optimization2Automated search3Conversation structure manipulation0Dormant triggers12

Attack surface / entry point

User input3Documents and messages1Retrieval corpus4Images, audio and video1Training data5
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 215papers have no tags yet and are not included in filtered results.
Attack type：Poisoning and backdoorsAttack technique：Gradient and representation optimizationAttack technique：Conversation structure manipulationAttack surface / entry point：Documents and messagesAttack surface / entry point：Images, audio and videoClear all

Another 215papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2606.09499

    研究者提出针对世界模型的机器人学习管线投毒攻击

    提出 VPH 与 VTH，只改视频帧劫持世界模型并投毒下游策略

    arXiv
    2606.09499
    Published
    Layer
    Training and data layer
    Setting
    Embodied systems and robotics
    Evaluated models
    Cosmos-Predict 2.5, Cosmos-Predict 2.5 AC, Dino WM and others4
    Abstract只改视频帧经世界模型投毒。

    只改看似安全的视频帧，经世界模型之后才改变下游机器人策略。 问题在于世界模型进入数据生成后，数据集检查看到的仍是安全演示，合成轨迹却可以变危险。

    Paper analysisRead analysis
  2. AttacksarXiv 2602.00364

    "Someone hid it": Query-agnostic black-box attacks against LLM retrieval

    提出查询无关黑盒攻击 DQ-A，用可迁移文末后缀降低文档检索排名

    arXiv
    2602.00364
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Evaluated models
    Qwen-1.5-7B-Instruct, SFR-Embedding-Mistral, E5-Mistral-7B-Instruct and others10
    AbstractDQ-A 以无查询黑盒后缀压低 LLM 检索排名，并在 BRIGHT 上比较三种基线。

    DQ-A 是一种 query-agnostic、complete black-box 的文档隐藏攻击，对象是用最后隐层相似度匹配的 LLM 检索。

    Paper analysisRead analysis
You have reached the end