{"total":25,"rows":[{"id":"2401.13138","title":"Visibility into AI Agents","created":"2024-01-23","cited_by_count":79,"area":null},{"id":"2311.04235","title":"Can LLMs Follow Simple Rules?","created":"2023-11-06","cited_by_count":46,"area":null},{"id":"2505.21494","title":"Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment","created":"2025-05-27","cited_by_count":43,"area":null},{"id":"2404.09349","title":"Adversarial Robustness Limits via Scaling-Law and Human-Alignment Studies","created":"2024-04-14","cited_by_count":38,"area":null},{"id":"2405.19334","title":"LLMs Meet Multimodal Generation and Editing: A Survey","created":"2024-05-29","cited_by_count":35,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2411.05189","title":"Understanding In-Context Learning of Linear Models in Transformers Through an Adversarial Lens","created":"2024-11-07","cited_by_count":8,"area":null},{"id":"2505.04673","title":"REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM","created":"2025-05-07","cited_by_count":5,"area":null},{"id":"2509.19994","title":"Improving Generalizability and Undetectability for Targeted Adversarial Attacks on Multimodal Pre-trained Models","created":"2025-09-24","cited_by_count":5,"area":null},{"id":"2502.15609","title":"On the Robustness of Transformers against Context Hijacking for Linear Classification","created":"2025-02-21","cited_by_count":4,"area":null},{"id":"2410.23472","title":"Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systems","created":"2024-10-30","cited_by_count":2,"area":null},{"id":"2512.04554","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","created":"2025-12-04","cited_by_count":1,"area":null},{"id":"2602.18845","title":"Echoes of ownership: Adversarial-guided dual injection for copyright protection in MLLMs","created":"2026-02-21","cited_by_count":1,"area":null},{"id":"2606.25592","title":"VPA-Guard: Defending and Benchmarking Image-to-Video Generation Against Visual Prompt Attacks","created":"2026-06-24","cited_by_count":1,"area":null},{"id":"2412.01725","title":"Attacks on multimodal models","created":"2024-12-02","cited_by_count":0,"area":null},{"id":"2504.04981","title":"TestDG: Test-time Domain Generalization for Continual Test-time Adaptation","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2507.02057","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","created":"2025-07-02","cited_by_count":0,"area":null},{"id":"2512.04599","title":"Malicious Image Analysis via Vision-Language Segmentation Fusion: Detection, Element, and Location in One-shot","created":"2025-12-04","cited_by_count":0,"area":null},{"id":"2512.17902","title":"Adversarial Robustness of Vision in Open Foundation Models","created":"2025-12-19","cited_by_count":0,"area":null},{"id":"2604.00324","title":"The Persistent Vulnerability of Aligned AI Systems","created":"2026-03-31","cited_by_count":0,"area":null},{"id":"2608.03740","title":"MissClick: Execution-Aware Adversarial Attacks on Coordinate Generation in GUI Grounding Models","created":"2026-08-04","cited_by_count":0,"area":null},{"id":"2608.06571","title":"Vision-Language Model Confidence Is Not a Property of the Answer","created":"2026-08-06","cited_by_count":0,"area":null},{"id":"2608.07636","title":"Adversarial Attacks on Deep OCR Systems","created":"2026-08-07","cited_by_count":0,"area":null},{"id":"2609.33833","title":"One Attack to Fool Them All: Highly Transferable Black-Box Adversarial Attacks on Frontier MLLMs","created":"2026-09-27","cited_by_count":0,"area":null},{"id":"2610.15728","title":"Visually Legible but Adversarial: Watermark-Constrained Attacks on End-to-End VLMs for Document Understanding","created":"2026-10-11","cited_by_count":0,"area":null}],"next_cursor":null}