Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 12 papers
Filter4

Attack type

Jailbreaks7Poisoning and backdoors3

Attack technique

Gradient and representation optimization4Cross-modal payloads6Dormant triggers3

Impact

Harmful content6Output manipulation4

System type

Models and APIs10

Attacker access

Black-box6

Attack surface / entry point

User input15Web pages and interfaces3Documents and messages8Tool responses6Tool and skill descriptions3Memory writes16Images, audio and video12

Layer

Prompt layer8

System component

Memory1Guardrails and judges9Monitors0Reasoning chains3Fine-tuning and open weights4Vision55Audio11Video3Image generation7Multimodal74
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 240papers have no tags yet and are not included in filtered results.
Attack surface / entry point：Images, audio and videoSystem component：MemorySystem component：MonitorsSystem component：AudioClear all

Another 240papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2610.09819

    FAB 攻击：给 HuBERT/WavLM 植入后门，背景警笛声即可让下游语音任务失灵

    提出 FAB 攻击，向声学基础模型植入可由环境声触发的后门

    arXiv
    2610.09819
    Published
    Layer
    Training and data layer
    Setting
    Models and APIs
    Evaluated models
    HuBERT-base, WavLM-base

    Abstract论文提出了针对声学基模的 FAB 后门攻击，在弱威胁模型下实现了任务无关、物理可触发的后门植入。

    Paper analysisRead analysis
  2. AttacksarXiv 2609.13889

    PMPA：针对 OpenClaw 与 Claude Code 的持久记忆投毒攻击

    提出 PMPA，经外部源向 Agent 持久记忆投毒并跨会话泄露隐私

    arXiv
    2609.13889
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    DeepSeek-V4-Flash, DeepSeek-V4-Pro, Qwen3-Max

    Abstract论文提出了持久记忆投毒攻击 PMPA，报告了 harness 智能体在处理外部数据时易受跨会话记忆投毒与隐私泄露的风险。

    Paper analysisRead analysis
  7. AttacksarXiv 2604.14604

    The AudioHijack framework achieves covert audio prompt injection against 13 speech large models

    提出 AudioHijack，用不可感知对抗音频对语音模型做上下文无关提示注入

    arXiv
    2604.14604
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Evaluated models
    SpeechGPT, GLM-4-Voice, VITA-Audio and others15

    Abstract提出了 AudioHijack 框架，揭示了 LALM 对听觉提示注入的脆弱性与传统防御的局限。

    Paper analysisRead analysis
  11. AttacksarXiv 2511.10692

    StyleBreak：利用风格化音频越狱揭示大型音频语言模型的对齐漏洞

    提出 StyleBreak 风格化音频越狱，利用语音属性绕过音频语言模型对齐

    arXiv
    2511.10692
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    Qwen2-Audio-7B-Instruct, MERaLiON-AudioLLM-Whisper-SEA-LION, Ultravox-v0.4.1-Llama-3.1-8B and others6
    Paper analysisRead analysis
  12. AttacksarXiv 2504.01094

    研究者提出 Multi-AudioJail

    提出 MULTI-AUDIOJAIL，以多语多口音和声学扰动越狱音频模型

    arXiv
    2504.01094
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    Qwen2-Audio, DiVA-llama-3-v0-8b, MERaLiON-AudioLLM-Whisper-SEA-LION and others5

    Abstract黑盒多语多口音音频加声学扰动可抬高 LALM 的 JSR，文本示范防御并非在每个模型上都下降。

    Paper analysisRead analysis
You have reached the end