{"total":68,"rows":[{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2410.02832","title":"FlipAttack: Jailbreak LLMs via Flipping","created":"2024-10-02","cited_by_count":80,"area":"safety"},{"id":"2310.14735","title":"Unleashing the potential of prompt engineering for large language models","created":"2023-10-23","cited_by_count":72,"area":null},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2402.06659","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","created":"2024-02-05","cited_by_count":50,"area":"mllm"},{"id":"2411.16721","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","created":"2024-11-23","cited_by_count":48,"area":"mllm"},{"id":"2410.05346","title":"AnyAttack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models","created":"2024-10-07","cited_by_count":46,"area":"mllm"},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2312.04913","title":"SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation","created":"2023-12-08","cited_by_count":39,"area":"mllm"},{"id":"2312.04403","title":"OT-Attack: Enhancing Adversarial Transferability of Vision-Language Models via Optimal Transport Optimization","created":"2023-12-07","cited_by_count":37,"area":"mllm"},{"id":"2411.18275","title":"Visual Adversarial Attack on Vision-Language Models for Autonomous Driving","created":"2024-11-27","cited_by_count":36,"area":"lr"},{"id":"2411.13136","title":"TAPT: Test-Time Adversarial Prompt Tuning for Robust Inference in Vision-Language Models","created":"2024-11-20","cited_by_count":23,"area":"mllm"},{"id":"2312.01886","title":"InstructTA: Instruction-Tuned Targeted Attack for Large Vision-Language Models","created":"2023-12-04","cited_by_count":21,"area":"mllm"},{"id":"2402.14859","title":"The Wolf Within: Covert Injection of Malice into MLLM Societies via an MLLM Operative","created":"2024-02-20","cited_by_count":21,"area":"agents"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2503.06254","title":"Poisoned-MRAG: Knowledge Poisoning Attacks to Multimodal Retrieval Augmented Generation","created":"2025-03-08","cited_by_count":12,"area":"lr"},{"id":"2505.19911","title":"Attention! Your Vision Language Model Could Be Maliciously Manipulated","created":"2025-05-26","cited_by_count":12,"area":"mllm"},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2505.21499","title":"AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery","created":"2025-05-27","cited_by_count":10,"area":"agents"},{"id":"2511.20223","title":"V-Attack: Targeting Disentangled Value Features for Controllable Adversarial Attacks on LVLMs","created":"2025-11-25","cited_by_count":9,"area":"mllm"},{"id":"2505.17440","title":"VEAttack: Downstream-agnostic Vision Encoder Attack against Large Vision Language Models","created":"2025-05-23","cited_by_count":8,"area":"mllm"},{"id":"2408.13461","title":"Probing the Robustness of Vision-Language Pretrained Models: A Multimodal Adversarial Attack Approach","created":"2024-08-24","cited_by_count":7,"area":"mllm"},{"id":"2504.11038","title":"QAVA: Query-Agnostic Visual Attack to Large Vision-Language Models","created":"2025-04-15","cited_by_count":7,"area":"mllm"},{"id":"2502.07987","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","created":"2025-02-11","cited_by_count":6,"area":"mllm"},{"id":"2312.14440","title":"Asymmetric Bias in Text-to-Image Generation with Adversarial Attacks","created":"2023-12-22","cited_by_count":5,"area":"safety"},{"id":"2407.11121","title":"Towards Adversarially Robust Vision-Language Models: Insights from Design Choices and Prompt Formatting Techniques","created":"2024-07-15","cited_by_count":5,"area":"mllm"},{"id":"2502.00653","title":"Towards Robust Multimodal Large Language Models Against Jailbreak Attacks","created":"2025-02-02","cited_by_count":5,"area":"safety"},{"id":"2505.18864","title":"Audio Jailbreak Attacks: Exposing Vulnerabilities in SpeechGPT in a White-Box Framework","created":"2025-05-24","cited_by_count":5,"area":"safety"},{"id":"2508.03209","title":"GeoShield: Safeguarding Geolocation Privacy from Vision-Language Models via Adversarial Perturbations","created":"2025-08-05","cited_by_count":5,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2407.02716","title":"Light-weight Fine-tuning Method for Defending Adversarial Noise in Pre-trained Medical Vision-Language Models","created":"2024-07-02","cited_by_count":4,"area":"mllm"},{"id":"2411.05056","title":"Seeing is Deceiving: Exploitation of Visual Pathways in Multi-Modal Language Models","created":"2024-11-07","cited_by_count":4,"area":"mllm"},{"id":"2603.27918","title":"Adversarial Attacks on Multimodal Large Language Models: A Comprehensive Survey","created":"2026-03-30","cited_by_count":4,"area":"mllm"},{"id":"2507.00817","title":"CAVALRY-V: A Large-Scale Generator Framework for Adversarial Attacks on Video MLLMs","created":"2025-07-01","cited_by_count":3,"area":"lr"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2502.08079","title":"MAA: Meticulous Adversarial Attack against Vision-Language Pre-trained Models","created":"2025-02-12","cited_by_count":2,"area":"mllm"},{"id":"2504.14395","title":"Hydra: An Agentic Reasoning Approach for Enhancing Adversarial Robustness and Mitigating Hallucinations in Vision-Language Models","created":"2025-04-19","cited_by_count":2,"area":"lr"},{"id":"2510.11096","title":"CoDefend: Cross-Modal Collaborative Defense via Diffusion Purification and Prompt Optimization","created":"2025-10-13","cited_by_count":2,"area":"mllm"},{"id":"2510.15068","title":"Sequential Comics for Jailbreaking Multimodal Large Language Models via Structured Visual Storytelling","created":"2025-10-16","cited_by_count":2,"area":"mllm"},{"id":"2601.19210","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","created":"2026-01-27","cited_by_count":2,"area":"mllm"},{"id":"2505.22943","title":"Can LLMs Deceive CLIP? Benchmarking Adversarial Compositionality of Pre-trained Multimodal Representation via Text Updates","created":"2025-05-28","cited_by_count":1,"area":null},{"id":"2508.06964","title":"Adversarial Video Promotion Against Text-to-Video Retrieval","created":"2025-08-09","cited_by_count":1,"area":null},{"id":"2512.21815","title":"High-Entropy Tokens as Multimodal Failure Points in Vision-Language Models","created":"2025-12-26","cited_by_count":1,"area":"mllm"},{"id":"2505.15265","title":"Blind Spot Navigation: Evolutionary Discovery of Sensitive Semantic Concepts for LVLMs","created":"2025-05-21","cited_by_count":0,"area":null},{"id":"2506.05429","title":"Coordinated Robustness Evaluation Framework for Vision-Language Models","created":"2025-06-05","cited_by_count":0,"area":"mllm"},{"id":"2507.13761","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","created":"2025-07-18","cited_by_count":0,"area":"mllm"},{"id":"2512.07222","title":"Pay Less Attention to Function Words for Free Robustness of Vision-Language Models","created":"2025-12-08","cited_by_count":0,"area":"mllm"},{"id":"2601.06464","title":"On the Adversarial Robustness of 3D Large Vision-Language Models","created":"2026-01-10","cited_by_count":0,"area":"mllm"},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2603.12799","title":"What Makes VLMs Robust? Towards Reconciling Robustness and Accuracy in Vision-Language Models","created":"2026-03-13","cited_by_count":0,"area":"mllm"},{"id":"2604.03117","title":"Revealing Physical-World Semantic Vulnerabilities: Universal Adversarial Patch for Infrared Vision-Language Models","created":"2026-04-03","cited_by_count":0,"area":"mllm"},{"id":"2604.06502","title":"VLMShield: Efficient and Robust Defense of Vision-Language Models against Malicious Prompts","created":"2026-04-07","cited_by_count":0,"area":"mllm"},{"id":"2604.16499","title":"HQA-VLAttack: Towards High Quality Adversarial Attack on Vision-Language Pre-Trained Models","created":"2026-04-14","cited_by_count":0,"area":"mllm"},{"id":"2605.12876","title":"Certified Robustness under Heterogeneous Perturbations via Hybrid Randomized Smoothing","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2605.17577","title":"TAME: Test-Time Adversarial Prompt Tuning via Mixture-of-Experts for Vision-Language Models","created":"2026-05-17","cited_by_count":0,"area":"mllm"},{"id":"2605.25194","title":"Localize and Neutralize: Gradient-guided Token Suppression against Visual Prompt Injection Attack","created":"2026-05-24","cited_by_count":0,"area":"safety"},{"id":"2606.12586","title":"Beyond Attack Success Rate: Examining Trigger Leakage in Vision-Language Agentic Systems","created":"2026-06-10","cited_by_count":0,"area":"agents"},{"id":"2607.07375","title":"On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces","created":"2026-07-08","cited_by_count":0,"area":"mllm"},{"id":"2607.11560","title":"Technical Report on the CVPR 2026@AdvML Workshop Challenge","created":"2026-07-13","cited_by_count":0,"area":null},{"id":"2607.14737","title":"GeoDetect: Geometric Adversarial Detection for VLPs","created":"2026-07-16","cited_by_count":0,"area":"mllm"},{"id":"2607.14974","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","created":"2026-07-16","cited_by_count":0,"area":"mllm"},{"id":"2608.07535","title":"Evolving Safety Landscape of Multi-modal Large Language Models: A Survey of Emerging Threats and Safeguards","created":"2026-07-27","cited_by_count":0,"area":"mllm"},{"id":"2609.10613","title":"Understanding In-Context Multimodal Jailbreaks via Posterior Reweighting","created":"2026-09-08","cited_by_count":0,"area":"mllm"},{"id":"2609.33833","title":"One Attack to Fool Them All: Highly Transferable Black-Box Adversarial Attacks on Frontier MLLMs","created":"2026-09-27","cited_by_count":0,"area":null},{"id":"2609.35002","title":"Still There, No Longer Seen: Exposing Compression-Induced Risk in Large Vision-Language Models","created":"2026-09-28","cited_by_count":0,"area":"mllm"},{"id":"2609.38802","title":"Uncovering Uncontrolled Repetition through Residual Stream Dynamics","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2609.39662","title":"Typographic Attack Against VLM-based AI-generated Image Detection","created":"2026-09-30","cited_by_count":0,"area":"mllm"}],"next_cursor":null}