Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 8 papers
Filter4

Attack type

Prompt injection5

Attack technique

Automated search11Encoding and obfuscation5Role-play and persuasion3Defense-targeted11Dormant triggers3

Impact

Output manipulation4

System type

LLM applications4AI Agent4

Attack surface / entry point

User input4

Layer

Prompt layer14Application layer8Training and data layer3

System component

MCP and skills13Memory26RAG7Guardrails and judges8Permissions and sandboxing3Fine-tuning and open weights3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 215papers have no tags yet and are not included in filtered results.
Attack technique：Encoding and obfuscationAttack technique：Dormant triggersLayer：Application layerSystem component：Guardrails and judgesClear all

Another 215papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2609.22510

    特拉维夫大学提出爆炸性提示词：条件触发的间接提示注入可绕过九款生产 Agent

    提出条件触发的爆炸提示词，并设计摄入期检测器 DeFuse

    arXiv
    2609.22510
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    Llama-3.1-8B-Instruct, Llama-3.1-70B-Instruct, Qwen2.5-32B-Instruct and others15
    Abstract论文揭示了条件触发使提示注入绕过防御并在触发时执行工具，提出轻量检测器并在摄入期有效防范。

    论文针对大语言模型智能体面临的间接提示注入威胁，研究了利用条件句式实现时间分离的爆炸提示词。

    Paper analysisRead analysis
  3. AttacksarXiv 2607.14493

    LogInject 框架披露 LLM 日志分析中的被动提示注入

    提出 LogInject 框架，评测日志分析中的被动提示注入及缓解

    arXiv
    2607.14493
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Evaluated models
    GPT-4o, Claude 3.5 Sonnet, Llama-3-70B-Instruct

    Abstract论文评估了 LLM 日志分析中的上下文污染风险，提出分片拼接等攻击与三层防御，指出必须结合架构隔离与人工介入。

    Paper analysisRead analysis
  4. AttacksarXiv 2606.09084

    研究者提出 Context-Fractured Decomposition 攻击

    提出 CFD 跨会话分解攻击，利用工件来源缺口绕过工具型 Agent 的本地检查

    arXiv
    2606.09084
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    GPT-4.1, GPT-5-nano, Claude-3.5-Sonnet and others6
    AbstractCFD 用无指令 artifact 把越狱拆到跨会话。

    CFD针对工具型 LLM 智能体：利用 artifact 来源不被跟踪这一部署失败模式，把有害目标拆开后延迟组合。

    Paper analysisRead analysis
  6. AttacksarXiv 2602.05484

    Masked Mirror: Covert Prompt Injection Attacks Against LLM-Based Phishing Detection

    提出隐蔽提示注入攻击 LLM 钓鱼检测器，并给出防御 InjectDefuser

    arXiv
    2602.05484
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Evaluated models
    OpenAI GPT-5, xAI Grok 4 Fast (Non-Reasoning), Meta Llama 4 Maverick and others4
    Paper analysisRead analysis
  7. AttacksarXiv 2601.21360

    Compliance Paradox: Semantic-Instruction Decoupling in Automated Academic Code Evaluation

    提出 AST-ASIP ，把对抗指令植入编译器忽略区域以劫持代码评分

    arXiv
    2601.21360
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Evaluated models
    DeepSeek-V3.2, Qwen3-235B, GPT-OSS-120B and others9
    Abstract作者称 RLHF 的服从性使评分脱离代码。

    这篇工作把自动代码评分中的失败称为 Compliance Paradox：评分模型可以离开提交逻辑，转而执行嵌在可编译代码里的隐藏指令。

    Paper analysisRead analysis
You have reached the end