{"total":27,"rows":[{"id":"2503.16248","title":"Real AI Agents with Fake Memories: Fatal Context Manipulation Attacks on Web3 Agents","created":"2025-03-20","cited_by_count":24,"area":"safety"},{"id":"2510.14005","title":"PIShield: Detecting Prompt Injection Attacks via Intrinsic LLM Features","created":"2025-10-15","cited_by_count":20,"area":"safety"},{"id":"2505.06493","title":"System Prompt Poisoning: Persistent Attacks on Large Language Models Beyond User Injection","created":"2025-05-10","cited_by_count":14,"area":"safety"},{"id":"2511.05797","title":"When AI Meets the Web: Prompt Injection Risks in Third-Party AI Chatbot Plugins","created":"2025-11-08","cited_by_count":9,"area":"safety"},{"id":"2505.15753","title":"Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval","created":"2025-05-21","cited_by_count":7,"area":"safety"},{"id":"2510.18333","title":"Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption","created":"2025-10-21","cited_by_count":7,"area":"safety"},{"id":"2510.12119","title":"ImageSentinel: Protecting Visual Datasets from Unauthorized Retrieval-Augmented Image Generation","created":"2025-10-14","cited_by_count":4,"area":"safety"},{"id":"2603.21642","title":"Are AI-assisted Development Tools Immune to Prompt Injection?","created":"2026-03-23","cited_by_count":4,"area":"safety"},{"id":"2510.05310","title":"RAG Makes Guardrails Unsafe? Investigating Robustness of Guardrails under RAG-style Contexts","created":"2025-10-06","cited_by_count":3,"area":"safety"},{"id":"2607.10712","title":"Distributed Denial of Science: How Indirect Data Poisoning of AI Systems Can Industrialize Scientific Fraud","created":"2026-07-12","cited_by_count":2,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2603.12023","title":"Cascade: Composing Software-Hardware Attack Gadgets for Adversarial Threat Amplification in Compound AI Systems","created":"2026-03-12","cited_by_count":1,"area":"safety"},{"id":"2412.06788","title":"Poison Attacks and Adversarial Prompts Against an Informed University Virtual Assistant","created":"2024-11-03","cited_by_count":0,"area":"safety"},{"id":"2511.06212","title":"RAG-targeted Adversarial Attack on LLM-based Threat Detection and Mitigation Framework","created":"2025-11-09","cited_by_count":0,"area":"safety"},{"id":"2511.18790","title":"RoguePrompt: Dual-Layer Ciphering for Self-Reconstruction to Circumvent LLM Moderation","created":"2025-11-24","cited_by_count":0,"area":"safety"},{"id":"2602.16752","title":"The Vulnerability of LLM Rankers to Prompt Injection Attacks","created":"2026-02-18","cited_by_count":0,"area":"safety"},{"id":"2604.24700","title":"Green Shielding: A User-Centric Approach Towards Trustworthy AI","created":"2026-04-27","cited_by_count":0,"area":"safety"},{"id":"2605.01758","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","created":"2026-05-03","cited_by_count":0,"area":"safety"},{"id":"2605.11996","title":"BadSKP: Backdoor Attacks on Knowledge Graph-Enhanced LLMs with Soft Prompts","created":"2026-05-12","cited_by_count":0,"area":"safety"},{"id":"2605.13471","title":"Sleeper Channels and Provenance Gates: Persistent Prompt Injection in Always-on Autonomous AI Agents","created":"2026-05-13","cited_by_count":0,"area":"safety"},{"id":"2605.18133","title":"An Empirical Study of Privacy Leakage Chains via Prompt Injection in Black-Box Chatbot Environments","created":"2026-05-18","cited_by_count":0,"area":"safety"},{"id":"2606.00654","title":"The Invitation Trap: Proactive Availability Backdoor in LLMs via Conversational Induction","created":"2026-05-30","cited_by_count":0,"area":"safety"},{"id":"2606.09204","title":"The Injection Paradox: Brand-Level Suppression in Safety-Trained LLM Recommendations via RAG Context Injection","created":"2026-06-08","cited_by_count":0,"area":"safety"},{"id":"2608.08212","title":"Harmful Content Is Not Enough: Continuation Framing Moderates In-Context Emergent Misalignment","created":"2026-08-08","cited_by_count":0,"area":"safety"},{"id":"2609.06612","title":"MechAudit-40: White-Box Auditing across 40 LLM Attack Mechanisms","created":"2026-09-06","cited_by_count":0,"area":"safety"},{"id":"2609.13478","title":"BadEngram: Backdoor Attack on Gated Memory Components in LLMs","created":"2026-09-11","cited_by_count":0,"area":"safety"},{"id":"2609.21088","title":"Origin Is All You Need: Provenance-Aware Transformers for Structural Trust-Boundary Separation","created":"2026-09-17","cited_by_count":0,"area":"safety"}],"next_cursor":null}