Another 201papers do not have category tags yet and are not included in filtered results.
提出 StegoMemory，评测智能体持久记忆作为跨会话隐写信道
Abstract研究揭示智能体持久记忆可作为隐蔽信道跨会话传输机密，写入持久化是主要防御瓶颈，呼吁建立记忆完整性防御。
提出 AdaLCPI，把恶意指令拆成碎片嵌入工具返回并诱导 Agent 越权执行
提出 BAM 反馈编码，在 LLM 生成文本中实现隐蔽通信
Proposes LAAF, which automatically attacks LPCI vulnerabilities in agent systems in stages
The authors state that LAAF is an automated red-teaming framework built specifically for LPCI in agentic LLMs. The issue to address is that encoded, delayed, and conditionally triggered payloads can persist in memory or RAG and re-enter across sessions, whereas Garak and PyRIT do not use the previous round's breakthrough results to seed the next stage across the six stages.
提出隐写恶意微调，使模型界面显良性并隐蔽传出有害内容
Propose Thought Virus, which propagates preferences along multi-agent messages via subliminal prompts.
Thought Virus puts subliminal prompting into multi-agent communication, to see whether a single-point deviation spreads across the network without naming the target concept.
提出隐式记忆时间炸弹，使模型跨独立交互累积隐藏状态后激活
作者把这篇工作定位为立场论文：再摄入存在时，按无状态设计的 LLM 仍可能经自身输出携带状态。要处理的问题是，这种不依赖外部记忆模块的通道会让风险跨过单次请求，而单触发测试看不到完整条件。
通过规则文件提示注入劫持编码编辑器并执行未授权终端命令
Abstract论文提出了针对代码编辑器的提示注入评估框架 AIShellJack，实验显示攻击能诱导 AI 执行未授权终端命令。
提出 LPCI，把延迟条件载荷写入记忆与检索库以跨会话触发
作者把LPCI定义为针对智能体逻辑执行、记忆留存和工具集成的跨阶段漏洞类，而不是单次输入上的提示改写。