Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 3 papers
Filter3

Attack type

Prompt injection3

Attack technique

Automated search24Multi-turn escalation3Encoding and obfuscation5Role-play and persuasion3Conversation structure manipulation3Reasoning-chain manipulation3Defense-targeted6Dormant triggers10

Attack surface / entry point

User input27Documents and messages4Tool responses1Code repositories and dependencies2
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 261papers have no tags yet and are not included in filtered results.
Attack technique：Role-play and persuasionAttack surface / entry point：Tool responsesAttack surface / entry point：Code repositories and dependenciesClear all

Another 261papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2606.06244

    研究者提出 Ghostwriter 攻击：用伪造证据注入操纵 LLM 观点

    提出 Ghostwriter 攻击，用伪权威证据条件注入操纵模型观点

    arXiv
    2606.06244
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Evaluated models
    GPT-4o, Claude-3.7-Sonnet, DeepSeek-V3 and others10
    Abstract作者称攻击未被消除。

    Ghostwriter 是一种针对上下文窗口的观点引导攻击：把误导陈述改写成伪权威文本，再在相关查询中让目标模型把该观点写进回答。

    Paper analysisRead analysis
  2. AttacksarXiv 2509.22040

    研究：通过编码规则文件对Cursor与GitHub Copilot实施提示注入

    通过规则文件提示注入劫持编码编辑器并执行未授权终端命令

    arXiv
    2509.22040
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    Cursor, GitHub Copilot, Claude 4 Sonnet and others4

    Abstract论文提出了针对代码编辑器的提示注入评估框架 AIShellJack，实验显示攻击能诱导 AI 执行未授权终端命令。

    Paper analysisRead analysis
You have reached the end