Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 4 papers
Filter5

Attack technique

Gradient and representation optimization29Automated search12Encoding and obfuscation4Role-play and persuasion5Cross-modal payloads15Defense-targeted14Dormant triggers24Selection manipulation4

Impact

Harmful content41Unauthorized actions9Data and privacy leaks5Output manipulation4

System type

Models and APIs2LLM applications7AI Agent2coding agent0

Attack surface / entry point

User input4
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 215papers have no tags yet and are not included in filtered results.
Attack technique：Encoding and obfuscationImpact：Output manipulationSystem type：Models and APIsSystem type：AI AgentSystem type：coding agentClear all

Another 215papers do not have category tags yet and are not included in filtered results.

  1. Evaluation and benchmarksarXiv 2609.05843

    SinoGlyphBench：中文字形混淆下语言模型审核的诊断基准

    提出 SinoGlyphBench，用配对字形混淆诊断中文审核稳定性

    arXiv
    2609.05843
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Evaluated models
    GPT-5.4 mini, GPT-5.5, DeepSeek V4 Flash and others12
    AbstractSinoGlyphBench 显示中文字形混淆会同时增加有害漏报和误报，全文扰动最重。

    SinoGlyphBench是一个配对诊断基准，用来看内容审核在可还原的中文字形混淆下是否还保持原决定。

    Paper analysisRead analysis
  3. AttacksarXiv 2603.17239

    LAAF: A Systematic Red-Teaming Method and Automated Attack Framework for LPCI Vulnerabilities in Agentic LLM Systems

    Proposes LAAF, which automatically attacks LPCI vulnerabilities in agent systems in stages

    arXiv
    2603.17239
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    gemini-2.0-flash-001, claude-3-haiku-20240307, meta-llama/llama-3.1-70b-instruct and others5
    AbstractLAAF does LPCI red teaming with taxonomy plus stage seeding.

    The authors state that LAAF is an automated red-teaming framework built specifically for LPCI in agentic LLMs. The issue to address is that encoded, delayed, and conditionally triggered payloads can persist in memory or RAG and re-enter across sessions, whereas Garak and PyRIT do not use the previous round's breakthrough results to seed the next stage across the six stages.

    Paper analysisRead analysis
  4. AttacksarXiv 2603.00131

    Thought Virus: viral misalignment induced by subliminal prompts in multi-agent systems

    Propose Thought Virus, which propagates preferences along multi-agent messages via subliminal prompts.

    arXiv
    2603.00131
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems
    Evaluated models
    Qwen2.5-7B-Instruct, Llama-3.1-8B-Instruct
    AbstractThought Virus spreads a single-point bias downstream.

    Thought Virus puts subliminal prompting into multi-agent communication, to see whether a single-point deviation spreads across the network without naming the target concept.

    Paper analysisRead analysis
You have reached the end