Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 7 papers
Filter3

Attack type

Detection evasion3

Attack technique

Gradient and representation optimization33Automated search18Multi-turn escalation5Encoding and obfuscation18Cross-modal payloads56Defense-targeted7Dormant triggers25

Impact

Output manipulation5

System type

Models and APIs5

Attacker access

Black-box3

Attack surface / entry point

User input21Tool responses4Tool and skill descriptions7Memory writes2Images, audio and video5Training data7Weights and gradients7Distribution channels7

Layer

Model layer3

System component

Guardrails and judges3Image generation3Multimodal4
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 255papers have no tags yet and are not included in filtered results.
Attack technique：Defense-targetedAttack surface / entry point：Memory writesAttack surface / entry point：Images, audio and videoClear all

Another 255papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2610.03166

    LiBRA：通过双向隐空间优化实现检测感知的图像水印去除

    提出 LiBRA，在潜空间双向优化以规避图像水印双侧检测

    arXiv
    2610.03166
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Attacker
    White-box
    Evaluated models
    Stable Signature, YU1, HiDDeN and others4

    AbstractLiBRA 用双向潜空间优化规避双侧水印检测，并提高相对反转基线的保真。

    Paper analysisRead analysis
  6. AttacksarXiv 2606.09084

    研究者提出 Context-Fractured Decomposition 攻击

    提出 CFD 跨会话分解攻击，利用工件来源缺口绕过工具型 Agent 的本地检查

    arXiv
    2606.09084
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    GPT-4.1, GPT-5-nano, Claude-3.5-Sonnet and others6
    AbstractCFD 用无指令 artifact 把越狱拆到跨会话。

    CFD针对工具型 LLM 智能体：利用 artifact 来源不被跟踪这一部署失败模式，把有害目标拆开后延迟组合。

    Paper analysisRead analysis
You have reached the end