Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 3 papers
Filter3

Attack technique

Automated search20Multi-turn escalation3Encoding and obfuscation4Role-play and persuasion1Conversation structure manipulation2Defense-targeted4Dormant triggers6

Attack surface / entry point

User input38Documents and messages5Tool responses3Code repositories and dependencies3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 232papers have no tags yet and are not included in filtered results.
Attack technique：Role-play and persuasionAttack technique：Conversation structure manipulationAttack surface / entry point：Tool responsesClear all

Another 232papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2609.27542

    Researchers use control token injection to delete gpt-oss-20b's reasoning chain and bypass chain-of-thought monitoring

    提出控制标记注入，清空工具 Agent 的思维链以绕过推理监控

    arXiv
    2609.27542
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    openai/gpt-oss-20b, google/gemma-4-26B-A4B-it, deepseek-ai/DeepSeek-R1-Distill-Qwen-7B and others4

    Abstract论文阐明控制标记注入可抑制 CoT 使监控失效并促成拒绝绕过，且工具执行受解析器宽容度影响。

    Paper analysisRead analysis
  3. AttacksarXiv 2606.06244

    研究者提出 Ghostwriter 攻击：用伪造证据注入操纵 LLM 观点

    提出 Ghostwriter 攻击，用伪权威证据条件注入操纵模型观点

    arXiv
    2606.06244
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Evaluated models
    GPT-4o, Claude-3.7-Sonnet, DeepSeek-V3 and others10
    Abstract作者称攻击未被消除。

    Ghostwriter 是一种针对上下文窗口的观点引导攻击：把误导陈述改写成伪权威文本，再在相关查询中让目标模型把该观点写进回答。

    Paper analysisRead analysis
You have reached the end