{"total":21,"rows":[{"id":"2511.20223","title":"V-Attack: Targeting Disentangled Value Features for Controllable Adversarial Attacks on LVLMs","created":"2025-11-25","cited_by_count":9,"area":"mllm"},{"id":"2602.17645","title":"Pushing the Frontier of Black-Box LVLM Attacks via Fine-Grained Detail Targeting","created":"2026-02-19","cited_by_count":6,"area":"mllm"},{"id":"2603.04846","title":"Multi-Paradigm Collaborative Adversarial Attack Against Multi-Modal Large Language Models","created":"2026-03-05","cited_by_count":4,"area":"mllm"},{"id":"2508.18805","title":"Hidden Tail: Adversarial Image Causing Stealthy Resource Consumption in Vision-Language Models","created":"2025-08-26","cited_by_count":3,"area":"mllm"},{"id":"2602.19418","title":"PA-Attack: Guiding Gray-Box Attacks on LVLM Vision Encoders with Prototypes and Attention","created":"2026-02-23","cited_by_count":3,"area":"mllm"},{"id":"2606.15608","title":"On the Adversarial Robustness of Multimodal LLM Judges","created":"2026-06-14","cited_by_count":3,"area":"mllm"},{"id":"2601.19210","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","created":"2026-01-27","cited_by_count":2,"area":"mllm"},{"id":"2605.21541","title":"Frequency-Domain Regularized Adversarial Alignment for Transferable Attacks against Closed-Source MLLMs","created":"2026-05-20","cited_by_count":2,"area":"mllm"},{"id":"2601.23179","title":"Universal Adversarial Attacks against Closed-Source MLLMs via Target-View Routed Meta Optimization","created":"2026-01-30","cited_by_count":1,"area":"mllm"},{"id":"2604.17318","title":"When Background Matters: Breaking Medical Vision Language Models by Transferable Attack","created":"2026-04-19","cited_by_count":1,"area":"mllm"},{"id":"2605.07447","title":"Sparse Autoencoders as Plug-and-Play Firewalls for Adversarial Attack Detection in VLMs","created":"2026-05-08","cited_by_count":1,"area":"mllm"},{"id":"2605.09902","title":"Adversarial Attacks Against MLLMs via Progressive Resolution Processing and Adaptive Feature Alignment","created":"2026-05-11","cited_by_count":1,"area":"mllm"},{"id":"2602.01574","title":"SGHA-Attack: Semantic-Guided Hierarchical Alignment for Transferable Targeted Attacks on Vision-Language Models","created":"2026-02-02","cited_by_count":0,"area":"mllm"},{"id":"2602.04356","title":"Stage-wise Attention-Guided Region Sequencing for Adversarial Attacks on Large Vision-Language Models","created":"2026-02-04","cited_by_count":0,"area":"mllm"},{"id":"2603.29418","title":"Covert Visual Prompt Injection against Commercial Multimodal Large Language Models","created":"2026-03-31","cited_by_count":0,"area":"mllm"},{"id":"2604.09253","title":"Mosaic: Multimodal Jailbreak against Closed-Source VLMs via Multi-View Ensemble Optimization","created":"2026-04-10","cited_by_count":0,"area":"mllm"},{"id":"2606.23892","title":"REALM: A Unified Red-Teaming Benchmark for Physical-World VLMs","created":"2026-06-22","cited_by_count":0,"area":"mllm"},{"id":"2607.07375","title":"On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces","created":"2026-07-08","cited_by_count":0,"area":"mllm"},{"id":"2609.00788","title":"Forbid Your Attention: Fooling Multimodal Large Language Models by Selectively Removing Intrinsic Focus in Spectral Domain","created":"2026-09-01","cited_by_count":0,"area":"mllm"},{"id":"2609.38298","title":"It Takes Little to Rewrite Perception: Targeted Semantic Substitution in Vision-Language Models at $ε\\leq 4/255$","created":"2026-09-29","cited_by_count":0,"area":"mllm"},{"id":"2610.06977","title":"Visual-Invariance-Augmented Feature Optimal Alignment for Transferable Adversarial Attacks against Closed-Source MLLMs","created":"2026-10-04","cited_by_count":0,"area":"mllm"}],"next_cursor":null}