Adversarial Attacks

Follow this topic Ask about this topic

Momentum

28 papers in the last four weeks, up 155% on the four weeks before. 0.3% of all new papers.

Jul 13Week of Sep 28

Latest papers 292

All topics

The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI
Jul 20, 2026Om Narayan, Ramkinker Singh, Praveen BaskarAdversarial Attacks AI Agent Security
Department of Computer Science New York University New York, NY, USA · Carnegie Mellon University Pittsburgh, PA, USA · Independent Researcher Chicago, IL, USA
Salience Induction against Multi-Hop RAG Agents: Threat and Defense
Jul 20, 2026Xingfu Zhou, Pengfei Wang, Yuan Zhou +2Multi-Hop QA Adversarial Attacks
National University of Defense Technology China
AdvSerial: Physical Adversarial Attacks on Infrastructure-mounted Pedestrian Detectors via Semantic Feature Suppression
Jul 19, 2026Yuanhao Huang, Yilong Ren, Jinlei Wang +3Adversarial Patch Attacks Adversarial Attacks
School of Transportation Science and Engineering, Beihang University, 100191, Beijing, P.R China · Zhongguancun Laboratory, 100191, Beijing, P.R China · School of Systems Science and Engineering, Sun Yat-Sen University, 510006, Guangzhou, P.R China +1
Do Speech Tokens Leak Voiceprints? Speaker Inversion Attacks Against End-to-End Speech Language Models
Jul 18, 2026Ye Lu, Yihan Yan, Zhaoyang Zhang +4Adversarial Attacks Privacy Leakage in Language Models
School of Cyberspace Science, Harbin Institute of Technology, Harbin 150001, China
Signal-based Model Access Risk Analysis for AI System Operations Security
Jul 17, 2026Maria Mahbub, Steven Young, Amir Sadovnik +4Adversarial Attacks Black-Box Adversarial Attacks
Oak Ridge National Laboratory, Oak Ridge, TN 37830, USA · Oak Ridge Institute for Science and Education, Oak Ridge, TN 37830, USA · DHS Science and Technology Directorate, Washington, DC 20528, USA
PANOPTICON: A PII-Based Assemblage of Naturalistic Output Tokens for Investigating Privacy Leakage Within LLM Context Window
Jul 17, 2026Ryan Thornton, Mir Mehedi Ahsan Pritom, Maanak GuptaAdversarial Attacks Privacy Leakage in Language Models
Department of Computer Science Tennessee Tech University Cookeville, TN, USA
Code-Poisoning Property Inference Attacks
Jul 17, 2026Xukun Luan, Yuhui Gong, Gang Zhang +4Adversarial Attacks
School of Computer Science and Technology, Beijing Institute of Technology · School of Computer Science and Engineering, Northeastern University
Boundary-Seeking GAN-Augmented TabTransformer for Adversarially Robust Intrusion Detection
Jul 17, 2026Raihan Sultan Pasha Basuki, Aliyah KurniasihSynthetic Data Augmentation Transformer
Department of Computer Science, Universitas Ary Ginanjar, Menara 165, Cilandak No.kav 1 Lt 2 & 18, Jakarta Selatan, 12560, DKI Jakarta, Indonesia
BadWAM: When World-Action Models Dream Right but Act Wrong
Jul 16, 2026Qi Li, Xingyi Yang, Xinchao WangWorld Models for Robotics Adversarial Attacks
National University of Singapore · The Hong Kong Polytechnic University
Lights, Camera, Malfunction: When Illumination Robustness Leaves VLA Models Blind to Color
Jul 16, 2026Marino Watanabe, Takami Sato, Kentaro YoshiokaAdversarial Training Adversarial Attacks
Keio University
Privacy Leakage in Federated Learning in Radiology Reports: A Comparative Evaluation of Tokenizer-Driven Privacy Risks
Jul 15, 2026Santhosh Parampottupadam, Andres Martinez, Dimitrios Bounias +3Gradient Inversion Attacks Adversarial Attacks
German Cancer Research Center (DKFZ), Division of Medical Image Computing, Heidelberg, Germany · Medical Faculty Heidelberg, Heidelberg University, Heidelberg, Germany · Department of Computer Engineering, Bilkent University, Universiteler 06800 Çankaya/Ankara, Türkiye +1
Adversarial Attacks on Online Handwriting using Salience-based Temporal Editing
Jul 14, 2026Yataro Tamura, Brian Kenji Iwana, Jiseok LeeAdversarial Attacks Online Handwriting Recognition
Kyushu University, Fukuoka, Japan
Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT
Jul 8, 2026Giulia Marchiori Pietrosanti, Giulio Rossolini, Giorgio ButtazzoAdversarial Patch Attacks Adversarial Attacks
Department of Excellence in Robotics and AI, Sant’Anna School of Advanced Study, Italy
Adversarially Guided Diffusion for LiDAR Range Image Synthesis
Jul 8, 2026Stavros Bouras, Antonios Makris, Alexandros Gkillas +2Adversarial Attacks Adversarial Examples
School of Electrical and Computer Engineering, National Technical University of Athens, Greece · Industrial Systems Institute, Athena Research Center, Patras Science Park, Greece
On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces
Jul 8, 2026Chethan Krishnamurthy Ramanaik, Tobias Callies, Michael Hecht +1VLM Robustness Adversarial Attacks on VLMs
University of the Bundeswehr Munich, Germany · University of Wrocław, Poland
Structural Adversarial Attacks on Relational Deep Learning under Integrity Constraints
Jul 8, 2026Alan Gany, Bogdan Cautis, Silviu ManiuGraph Neural Networks Adversarial Attacks
Univ. Grenoble Alpes, CNRS, Grenoble INP, LIG Grenoble, France
ORAN-DEFEND: Subspace Detection and Sanitization of Backdoor DRL xApps in Open RAN
Jul 7, 2026Md Raihan Uddin, Fatemeh Lotfi, Tolunay Seyfi +1Adversarial Attacks Backdoor Detection
Department of Electrical and Computer Engineering, Clemson University, Clemson, SC, USA
Does Demand Response Increase Vulnerability to Cyber Attacks by Adversarial Data Modifications?
Jul 7, 2026Clemens Kortmann, Eike CramerElectricity Price Forecasting Adversarial Attacks
Process Systems Engineering (AVT.SVT) RWTH Aachen University · Department of Chemical Engineering Sargent Centre for Process Systems Engineering University College London
Unicode TAG-Block Concealment of Tool-Metadata Payloads in the Model Context Protocol: An Approval-View Fidelity Gap Across Three Independent Server Implementations
Jul 7, 2026Mohammadreza RashidiAdversarial Attacks MCP Security
Department of Computer Science AI and Media Analysis Lab Berlin, Germany
Active Learning on Adversarially Corrupted Graphs
Jul 6, 2026Marco Bressan, Nicolò Cesa-Bianchi, Tommaso d`Orsi +2Adversarial Attacks Active Learning
Università degli Studi di Milano, Italy · Bocconi University, Italy · Google Research
TrustCLIP: Learning Private Visual Features via Adversarial Reconstruction
Jul 5, 2026Nikos Athanasiou, Ilya A. Petrov, Angela Yao +7Gradient Inversion Attacks VLM Robustness
Meta, Zürich, Switzerland · Max Planck Institute for Intelligent Systems, Tübingen, Germany · University of Tübingen, Germany +1
Binary Iterative Method for Non-targeted Adversarial Attack
Jul 5, 2026Naman Goyal, Milan ChaudhariAdversarial Attacks Consistent Adversarial Attacks
Indian Institute of Technology, Ropar
Occluding the Solution Space: Planner-Agnostic Adversarial Attacks on Tolerance-Aware Manipulation
Jul 4, 2026Keke Tang, Tianyu Hao, Weilong Peng +5Adversarial Attacks Adversarial Robustness
Guangzhou University, Guangzhou 510006, China · University of Science and Technology of China, Hefei 230026, China · Northwestern Polytechnical University, Xi’an 710072, China
Defending from GeoLocalization through Adversarial Road Trips
Jul 3, 2026Niccolò Niccoli, Federico Becattini, Lorenzo SeidenariAdversarial Attacks Black-Box Adversarial Attacks
University of Florence, Florence, Italy · University of Siena, Siena, Italy
Hierarchical Anti-Aesthetics: Protecting Facial Privacy against Customized Diffusion Models
Jul 2, 2026Songping Wang, Yueming Lyu, Shiqi Liu +5Adversarial Attacks Diffusion-Based Image Generation
School of Intelligence Science and Technology, Nanjing University, Suzhou 215163, China · China Mobile Information Technology Co., Ltd., Beijing 100037, China · State Key Laboratory of Multimodal Artificial Intelligence Systems (MAIS), Center for Research on Intelligent Perception and Computing (CRIPAC), Institute of Automation Chinese Academy of Sciences (CASIA), Beijing 100190, China
ElephantAgent: Contextual State Continuity in Agentic Systems
Jul 2, 2026Jiankai Jin, Xiangzheng Zhang, Zhao Liu +4Adversarial Attacks AI Agent Security
AI Security Lab · Beijing, China
Beyond Gradient-Based Attacks: Adversarial Robustness and Explainability Stability in Cybersecurity Classifiers
Jul 2, 2026Mona Rajhans, Vishal KhawareyGradient-Boosted Decision Trees SHAP Feature Attribution
Palo Alto Networks, Santa Clara, CA, USA · Quicken Inc., Menlo Park, CA, USA
Attacking UTMOS: Probing the Robustness of a Speech Quality Assessment Model
Jun 30, 2026Wen-Chin Huang, Tomoki TodaAdversarial Attacks Speech Quality Assessment
Nagoya University, Japan
Off the Rails: Hijacking the Scoring Head in Generative End-to-End Driving Planners with Safety-Violating Adversarial Perturbations
Jun 29, 2026Halima Bouzidi, Mboutidem Ekemini Mkpong, Haoyu Liu +1End-to-End Autonomous Driving Adversarial Attacks
University of California, Irvine, CA, USA
SIGMA: Saliency-Guided Sparse Mask Attacks for Speech Emotion Recognition
Jun 29, 2026Qiyang Sun, Yi Chang, Zixing Zhang +1Adversarial Attacks Speech Emotion Recognition
GLAM, Department of Computing, Imperial College London, UK · College of Computer Science and Electronic Engineering, Hunan University, China · Shenzhen Research Institute, Hunan University, China +4

Jul 20, 2026, cs.AIJ/K move · Enter open · S save

The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI

Om Narayan, Ramkinker Singh, Praveen Baskar

Department of Computer Science New York University New York, NY, USA · Carnegie Mellon University Pittsburgh, PA, USA · Independent Researcher Chicago, IL, USA

Adversarial Attacks AI Agent Security AI Agent Security Benchmarks Agent Memory Poisoning

Open paper AskPDF arXiv

The transition from stateless generative models in artificial intelligence to stateful, autonomous agents represents an architectural evolution that, while providing the capabilities of long-term planning and the automation of enterprise workflows, also represents the introduction of a new form of security threat, the Chronos Vulnerability. The Chronos Vulnerability represents the threat of memory-based attacks, including the Memory Injection Attack (MINJA) and the sleeper agent, in which the internal belief system of the autonomous agent is compromised, effectively decoupling the attack vector from the final catastrophic event. This study formalizes the threat model for persistence-based attacks and the threat of Dynamics Blindness in the context of the World of Workflows benchmark, demonstrating that traditional endpoint content filters are insufficient for the current stateful architecture. Consequently, this study synthesizes a defense-in-depth landscape, categorizing emerging frameworks such as diagnostic trajectory guardrails (AgentDoG), formal temporal verification (Agent-C), immunological memory consensus (A-MemGuard), and hardware-anchored trust via GPU-based Trusted Execution Environments (TEEs) and Zero-Trust memory architectures.

Momentum

Related topics

Latest papers 292