Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 3 papers
Filter5

Attack type

Prompt injection3

Attack technique

Gradient and representation optimization6Automated search7Encoding and obfuscation3Cross-modal payloads4Dormant triggers5

Attack surface / entry point

User input7Web pages and interfaces3Documents and messages4Tool responses4Tool and skill descriptions5Retrieval corpus4Memory writes3Distribution channels5Inference services and hardware0

Layer

Model layer0Application layer3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 216papers have no tags yet and are not included in filtered results.
Attack technique：Encoding and obfuscationAttack surface / entry point：Web pages and interfacesAttack surface / entry point：Inference services and hardwareLayer：Model layerLayer：Application layerClear all

Another 216papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2610.12524

    An exploration of attacks on AI agent systems

    Retest and extend prompt injection against AI agents, and use Agent Card deception to manipulate A2A selection

    arXiv
    2610.12524
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    Ollama Mistral 0.9.5, llama3-8b-8192, gemini-2.0-flash-lite and others5
    AbstractSingle-agent filtering and classification can be bypassed by format or wording, and A2A card selection is also biased toward names and descriptions.

    The authors retested prompt injection on their own LangChain, AutoGen, and A2A systems, and modified the Agent Card to see if choices shifted. The abstract states the experiments mainly highlight single-agent weaknesses while extending attacks to multi-agent.

    Paper analysisRead analysis
  2. AttacksarXiv 2602.05484

    Masked Mirror: Covert Prompt Injection Attacks Against LLM-Based Phishing Detection

    提出隐蔽提示注入攻击 LLM 钓鱼检测器，并给出防御 InjectDefuser

    arXiv
    2602.05484
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Evaluated models
    OpenAI GPT-5, xAI Grok 4 Fast (Non-Reasoning), Meta Llama 4 Maverick and others4
    Paper analysisRead analysis
You have reached the end