Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 3 papers
Filter3

Attack technique

Gradient and representation optimization14Encoding and obfuscation3Defense-targeted13Dormant triggers27

Attack surface / entry point

User input52Documents and messages4Tool responses4Tool and skill descriptions5Retrieval corpus4Memory writes3Images, audio and video16Training data1Weights and gradients2Distribution channels5
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 227papers have no tags yet and are not included in filtered results.
Attack technique：Encoding and obfuscationAttack surface / entry point：Training dataAttack surface / entry point：Weights and gradientsClear all

Another 227papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2608.06862

    SynChain：诱导计算机使用 Agent 自建攻击链并跨任务持久化

    提出 SYNCHAIN，诱导计算机使用 Agent 自建跨任务持久攻击链

    arXiv
    2608.06862
    Published
    Layer
    Application layer
    Setting
    Browser and computer use, coding agent
    Evaluated models
    Qwen3.5-9B, Llama-3.1-8B, Ministral-3-8B

    Abstract论文揭示了 CUA 自合成工件带来的内部供应链威胁，验证了潜伏载荷的跨任务传播能力与防御局限。

    Paper analysisRead analysis
  3. AttacksarXiv 2601.01296

    Aggressive compression enables LLM weight stealing

    提出面向渗出的权重压缩，评估推理服务器权重窃取可行性

    arXiv
    2601.01296
    Published
    Layer
    Infrastructure layer
    Setting
    Models and APIs
    Attacker
    White-box
    Evaluated models
    Qwen2-1.5B, Qwen2-7B, Qwen2.5-1.5B and others8
    Abstract作者用残差量化加微调压缩权重，并称法医水印便宜且微调后仍可解码。

    这篇工作把 LLM 权重渗出看成 APT：攻击者已有未加密权重，但必须把完整权重藏进推理 API 的合法输出。作者认为可压缩性是被忽略的因素，因为推理量化要求解压后仍能低开销前向，而偷权重的人可以接受事后微调。

    Paper analysisRead analysis
You have reached the end