Higher Attack Success Rates

Ask about this field

Recent momentum

emerging

0 papers in the last 28 days · 0.0% of indexed attention

Twelve weeks of publication activity for this topic as it is defined today.

Weekly history

Recent digests

What was published in this field, kept on the site without email delivery.

Period ending 2026-09-21

7 new papers

A weekly snapshot of new work published in Higher Attack Success Rates.

Period ending 2026-09-14

17 new papers

A weekly snapshot of new work published in Higher Attack Success Rates.

Period ending 2026-09-07

19 new papers

A weekly snapshot of new work published in Higher Attack Success Rates.

Inside this field

Focused directions

235 papers

Latest in Higher Attack Success Rates

Browse all topics →
CardsList

  1. Borrowed Strength: Best-of-N Search over a Code EncodingBreaks Self-Check Jailbreak Defenses

    Jul 29, 2026Haoyu Zhang, Shibo Zheng, Xiangchen Guan +4Higher Attack Success RatesJailbreaks

  2. Attack Ensembles Expose a Safety-Utility Trade-off in Black-Box Guard Defenses Against Encoded VLM Jailbreaks

    Jul 29, 2026Haoyu Zhang, Zhuoxi Wang, Shibo Zheng +7Model-Agnostic DefenseGuard

  3. Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response

    Jul 28, 2026Abu Bakar SiddikCybersecurityArtificial Intelligence Safety

  4. Lilith: Backdoor Generalization under Training-Inference Trigger Shift

    Jul 28, 2026Zhou Feng, Jiahao Chen, Chunyi Zhou +6Backdoor AttacksTrigger

  5. ScoreShield: Differentially Private Release of Similarity Scores

    Jul 27, 2026Behrooz Razeghi, Parsa RahimiDifferential PrivacyMembership Inference Attacks

  6. Ultraconstructive Model Theory via Bounded Adversarial Finite Structures

    Jul 27, 2026Mirco A. MannucciAdversariesAdversarial Transferability

  7. Beyond Aggregate Risk: Role-Stratified Conformal Risk Control for LLM Tool Calls

    Jul 27, 2026Md Ashikur Rahman, Md Arifur Rahman, Niamul Hassan Samin +4Conformal Risk ControlLarge Language Model Safety

  8. Ranked by Position: Order Sensitivity as an Exploitable Attack Surface in LLM Listwise Recommenders

    Jul 26, 2026Ge Zhang, Jingru Cheng, Huiyuan ChenRerankingLanguage Model Evasion Attacks

  9. V-DEAL: Diagnosing Video Safety De-Calibration as an Understanding-Refusal Coupling Failure

    Jul 23, 2026Zhetong Zhang, Honghao Fu, Miao Xu +2Higher Attack Success RatesSafety

  10. GPE: Evaluating Robust Evidence Aggregation for Fact Verification under Controllable GEO-Style Poisoning

    Jul 22, 2026Zhaoqi Wang, Zijian Zhang, Xiaomei Yuan +4Multilingual Fact-CheckingData Poisoning

  11. An Automated Framework for Extracting Reachable Attack Chains from Cyber Threat Intelligence Reports

    Jul 22, 2026Wenbo Hou, Ning Hu, Xueping Wang +2Cyber Threat IntelligenceTransferable Attack

  12. Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents

    Jul 21, 2026SangJin Park, Myungsub Choi, Jineok Kim +1Multiple Attack SurfacesLarge Language Model Agents

  13. ChainWatch: A Kill Chain-Aligned Sequential Detection Framework for Multi-Step Attacks in MCP-Based AI Agent Systems

    Jul 20, 2026Om Narayan, Rashmi Jyoti, Ramkinker SinghAttack DetectionTransferable Attack

  14. Adaptive Adversaries: A Multi-Turn, Multi-LLM Benchmark for LLM Agent Security

    Jul 20, 2026Devina Jain, David Hartmann, Chuan LiLanguage Model Evasion AttacksAttacker-Chosen Wrong Answer

  15. The Third Competition on Document Forgery Detection on ID-Cards and Passports

    Jul 17, 2026Juan E. Tapia, Mario Nieto, Juan M. Espin +4Face Forgery DetectionAttack Paper

  16. Natural Backdoor Attacks on Speech Recognition Models

    Jul 17, 2026Jinwen Xin, Xixiang Lyu, Jing MaBackdoor AttacksTrigger

  17. Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents

    Jul 17, 2026Halima Bouzidi, Mboutidem Ekemini Mkpong, Mohammad Abdullah Al FaruqueMultimodal MemoryMultimodal Agents

  18. On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline

    Jul 16, 2026Yuchen Ren, Zhengyu Zhao, Chenhao Lin +2Cross-Modal LearningTransferable Attack

  19. Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions

    Jul 14, 2026Huihao Jing, Wenbin Hu, Shaojin Chen +10SafetyAttack Paper

  20. Input-Aware Dynamic Backdoor Attack Against Quantum Neural Networks

    Jul 13, 2026Junrui Zhang, Zemin Chen, Lusi Li +3Quantum Neural NetworksBackdoor Attacks

  21. AMT-X: Phase-Structured Multi-Turn Red-Teaming with Checklist-Gated Evaluation

    Jul 13, 2026Yi Ting Shen, Kentaroh Toyoda, Alex LeungHigher Attack Success Rates

  22. VEXAIoT: Autonomous IoT Vulnerability EXploitation using AI Agents

    Jul 10, 2026Katherine Swinea, Kshitiz Aryal, Lopamudra Praharaj +1Penetration TestingInternet Of Thing

  23. Leveraging Interpretable Tsetlin Machine for PDF Malware Detection

    Jul 10, 2026Rahul JaiswalMalware DetectionMultiple Attack Surfaces

  24. Trivial Prompt Reframing Bypasses Safety Guardrails in Googleś MedGemma-4B

    Jul 9, 2026Avi-ad Avraam BuskilaLarge Language Model SafetyHigher Attack Success Rates

  25. Beyond Attack-Success Rate: Action-Graded Severity Scale for Tool-Using AI Agents

    Jul 8, 2026Harry Owiredu-AshleyRed-TeamingHigher Attack Success Rates

  26. On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces

    Jul 8, 2026Chethan Krishnamurthy Ramanaik, Tobias Callies, Michael Hecht +1Transformation-Based AttacksLens

  27. aiAuthZ: Off-Host, Identity-Bound Authorization for AI Agents

    Jul 6, 2026Sai Varun KodathalaAuthorizationArtificial Intelligence Safety

  28. Defending from GeoLocalization through Adversarial Road Trips

    Jul 3, 2026Niccolò Niccoli, Federico Becattini, Lorenzo SeidenariImage GeolocalizationAttacker-Chosen Wrong Answer

  29. TIER: Trajectory-Invariant Explanation Regularization for Membership Privacy

    Jul 3, 2026Varun Sharma, Kar Wai Fok, Vrizlynn L. L. ThingMembership Inference AttacksMembership Inference

  30. Criticality-Based Guard Rail Validation for AI Agent Decisions in Autonomous Telecom Networks

    Jul 2, 2026Ravi Kant SharmaMobile NetworksTransformation-Based Attacks

  31. CPG-PAD: Concept-Informed Prompts Guided Presentation Attack Detection

    Jul 1, 2026Haoyuan Zhang, Xiangyu Zhu, Li Gao +3Attention-Guided TransunetFine-Grained Perception

  32. Off the Rails: Hijacking the Scoring Head in Generative End-to-End Driving Planners with Safety-Violating Adversarial Perturbations

    Jun 29, 2026Halima Bouzidi, Mboutidem Ekemini Mkpong, Haoyu Liu +1Autonomous DrivingDiffusion Planning

  33. Understanding and Evaluating Claw-like Agent Security Through a Computer-Systems Lens

    Jun 29, 2026Peizhi Niu, Wenjie Qu, Shangding Gu +14OpenclawSecurity Analysis

  34. Wireless Backdoor Attack and Defense for Semantic Communications over Multiple Access Channel

    Jun 29, 2026Yalin E. Sagduyu, Tugba Erpek, Aylin Yener +1Semantic CommunicationsBackdoor Attacks

  35. Rethinking Forgery Attacks on Semantic Watermarks in Black-Box Settings: A Geometric Distortion Perspective

    Jun 29, 2026Cheng-Yi Lee, Yichi Zhang, Yuchen Yang +2WatermarksWatermarking

  36. The Joint Effect of Quantization and Sampling Temperature on LLM Safety Alignment: A Factorial Analysis

    Jun 28, 2026Hari Prasad, Ritam PalLarge Language Model SafetyLarge Language Model Quantization

  37. Blackknife: Hard-Label Query-Limited Black-Box Attacks on Heterogeneous Graph Neural Networks

    Jun 28, 2026Honglin Gao, Junhao Ren, Lan Zhao +3Graph Neural NetworksTransformation-Based Attacks

  38. A Novel Latent-Class Attack and its Detection by Class Subspace Orthogonalization

    Jun 27, 2026Guangmingmei Yang, David J. Miller, George KesidisTransformation-Based AttacksBackdoor Attacks

  39. Why Trust Your Agent? Empirical Security Gains from TRiSM-Guided Agentic Workflows in Healthcare

    Jun 27, 2026Liam KearnsAgentic WorkflowsSecurity Analysis

  40. Room for Error: Large-Scale Simulation of Over-the-Air Acoustic Attacks

    Jun 26, 2026Andrew C. Cullen, Neil G. Marchant, Jiani Xie +4AcousticWav2Vec

  41. DroidBreaker: Practical and Functional Problem-Space Attacks on Machine-Learning Android Malware Detectors

    Jun 25, 2026Christian Scano, Diego Soi, Angelo Sotgiu +5Malware DetectionTransformation-Based Attacks

  42. Hybrid privacy-aware semantic search: SVD-truncated document geometry and CKKS-encrypted query reranking under a restricted threat model

    Jun 24, 2026Sergey KurilenkoVector DatabaseTransformation-Based Attacks

  43. Privacy Vulnerabilities of Attention Layers in Tabular Foundation Models and Protection of High-Risk Queries

    Jun 24, 2026Tânia Carvalho, Maxime CordyTabular Foundation ModelsMembership Inference Attacks

  44. Color Matters: Trigger Color Affects Success in Federated Backdoor Attacks

    Jun 24, 2026Kavindu Herath, Joshua C. Zhao, Saurabh BagchiBackdoor AttacksFederated Learning

  45. RAS: Measuring LLM Safety Through Refusal Alignment

    Jun 24, 2026Chang-Chieh Huang, Yan-Lun Chen, Chia-Mu Yu +1Large Language Model SafetyLarge Language Model Evaluation

  46. Transferable Attack against Face Swapping in an Extended Space

    Jun 24, 2026Mingzhi Lyu, Yi Huang, Jun Xie +3Deepfake DetectionAdversarial Examples

  47. A Hybrid CNN-LSTM Intrusion Detection Framework for Cybersecurity in Smart Renewable Energy Grids

    Jun 23, 2026Sajib Debnath, Remon DasSmart GridsIntrusion Detection

  48. RIFT-Bench: Dynamic Red-teaming For Agentic AI Systems

    Jun 22, 2026Yarin Yerushalmi Levi, Roy Betser, Amit Giloni +5Red-TeamingMultiple Attack Surfaces

  49. A Watermark for Vision-Language-Action and World Action Models

    Jun 22, 2026Yule Liu, Shuai Liu, Jiaheng Wei +1Vision-Language-Action ModelsWatermarks

  50. TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger

    Jun 22, 2026Vu Tuan Truong, Long Bao LeBackdoor AttacksHigher Attack Success Rates

  51. Safety in Self-Evolving LLM Agent Systems: Threats, Amplification, and Case Studies

    Jun 22, 2026Ruixiao Lin, Xinhao Deng, Qingming Li +12Multiple Attack SurfacesThreat Models

  52. The Geometry of Refusal: Linear Instability in Safety-Aligned LLMs

    Jun 21, 2026Shivam Ratnakar, Kartikeya VatsLarge Language Model SafetyRefusals

  53. Analyzing Defensive Misdirection Against Model-Guided Automated Attacks on Agentic AI Systems

    Jun 18, 2026Reza Soosahabi, Vivek NamsaniModel-Agnostic DefenseHigher Attack Success Rates

  54. Multi-Source Cybersecurity Logs: An ATT&CK-Labeled Dataset and SLM Evaluation

    Jun 16, 2026Abir Ashab Niloy, Ahmed Ryan, Imamul Hossain Rafi +2Attack DetectionMultiple Attack Surfaces

  55. TaFD: Threat-Aware Frequency Decoupling for Adversarial Robustness against Heterogeneous Attacks

    Jun 16, 2026Mengda Xie, Yiling He, Meie FangAdversarial TransferabilityTransferable Attack

  56. How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation

    Jun 15, 2026Yimeng Chen, Zhe Ren, Firas Laakom +3Search AgentsHigher Attack Success Rates

  57. DoubtProbe: Black-Box Jailbreak Defense via Structural Verification and Semantic Auditing

    Jun 15, 2026Xuanyu Yin, Yilin Jiang, Jun Zhou +3JailbreaksInference-Time Defense

  58. The Proxy Knows Too Much: Sealing LLM API Routers with Attested TEEs

    Jun 15, 2026Sipeng Xie, Qianhong Wu, Hengrun Lu +4Multiple Attack SurfacesLarge Language Model Routing

  59. FragFuse: Bypassing Access Control of Large Language Model Agents via Memory-Based Query Fragmentation and Fusion

    Jun 14, 2026Zixin Rao, Wentian Zhu, Chan Aristella Lu +5Language Model Evasion AttacksLarge Language Model Agents

  60. On the Adversarial Robustness of Multimodal LLM Judges

    Jun 14, 2026Zihan Wang, Guansong Pang, Zelin Liu +3Large Language Model JudgesLlm-As-A-Judge