Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 3 papers
Filter4

Attack technique

Automated search6Encoding and obfuscation2Conversation structure manipulation1Side channels0Dormant triggers5

Attack surface / entry point

User input65Web pages and interfaces3Documents and messages6Tool responses6Tool and skill descriptions6Code repositories and dependencies3Retrieval corpus4Memory writes3Images, audio and video16Distribution channels5Inference services and hardware5
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 227papers have no tags yet and are not included in filtered results.
Attack technique：Encoding and obfuscationAttack technique：Conversation structure manipulationAttack technique：Side channelsAttack surface / entry point：Code repositories and dependenciesClear all

Another 227papers do not have category tags yet and are not included in filtered results.

  2. AttacksarXiv 2608.09867

    Researchers steal proprietary LLM inference chains via cross-model compatibility of encrypted inference blocks

    利用加密思维块的跨模型重放，诱导弱模型逐字转写专有推理链

    arXiv
    2608.09867
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    Claude Opus 4.8, Claude Sonnet 4.6, Claude Haiku 4.5 and others13

    Abstract论文揭示了客户端加密思维块跨模型互换漏洞，提出了低成本提取方法并给出防御方案。

    Paper analysisRead analysis
  3. AttacksarXiv 2509.22040

    研究：通过编码规则文件对Cursor与GitHub Copilot实施提示注入

    通过规则文件提示注入劫持编码编辑器并执行未授权终端命令

    arXiv
    2509.22040
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    Cursor, GitHub Copilot, Claude 4 Sonnet and others4

    Abstract论文提出了针对代码编辑器的提示注入评估框架 AIShellJack，实验显示攻击能诱导 AI 执行未授权终端命令。

    Paper analysisRead analysis
You have reached the end