Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 4 papers
Filter4

Attack type

Prompt injection3

Attack technique

Automated search8Encoding and obfuscation4Dormant triggers6

System type

AI Agent4

Attack surface / entry point

User input7Documents and messages4Tool responses4Tool and skill descriptions5Code repositories and dependencies2Retrieval corpus4Memory writes3Inter-agent messages2Distribution channels5

Layer

Application layer4
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 247papers have no tags yet and are not included in filtered results.
Attack technique：Encoding and obfuscationAttack surface / entry point：Code repositories and dependenciesAttack surface / entry point：Inter-agent messagesLayer：Application layerClear all

Another 247papers do not have category tags yet and are not included in filtered results.

  3. AttacksarXiv 2603.00131

    Thought Virus：多 Agent 系统中潜意识提示引发的病毒式失准

    提出 Thought Virus，经潜意识提示使偏好沿多 Agent 消息传播

    arXiv
    2603.00131
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems
    Evaluated models
    Qwen2.5-7B-Instruct, Llama-3.1-8B-Instruct
    AbstractThought Virus 把单点偏差传到下游。

    Thought Virus 把 subliminal prompting 放进多智能体通信，看单点偏差会不会在不点名目标概念时传到全网。

    Paper analysisRead analysis
  4. AttacksarXiv 2509.22040

    研究：通过编码规则文件对Cursor与GitHub Copilot实施提示注入

    通过规则文件提示注入劫持编码编辑器并执行未授权终端命令

    arXiv
    2509.22040
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    Cursor, GitHub Copilot, Claude 4 Sonnet and others4

    Abstract论文提出了针对代码编辑器的提示注入评估框架 AIShellJack，实验显示攻击能诱导 AI 执行未授权终端命令。

    Paper analysisRead analysis
You have reached the end