CompanyAnthropic5 recent entries6 May 2026When Alignment Isn't Enough: Response-Path Attacks on LLM AgentsarXiv:2605.02187v1 Announce Type: cross Abstract: Bring-Your-Own-Key (BYOK) agent architectures let users route LLM traffic through third-party relays, creating a critical integrity gap: a malicious r→6 May 2026VisInject: Disruption != Injection -- A Dual-Dimension Evaluation of Universal Adversarial Attacks on Vision-Language ModelsarXiv:2605.01449v1 Announce Type: cross Abstract: Universal adversarial attacks on aligned multimodal large language models are increasingly reported with attack success rates in the 60-80% range, sug
CompanyOpenAI1 recent entries1 Sept 2026Not Safe for All: Auditing the Dialect Penalty in Text-to-Image Safety PipelinesarXiv:2608.29589v1 Announce Type: new Abstract: Text-to-image (T2I) safety guardrails fail to generalize equitably to non-standard dialects. Evaluating 23,080 paired prompts across five English dialec
CompanyGoogle3 recent entries18 May 2026FORGE: Self-Evolving Agent Memory With No Weight Updates via Population BroadcastarXiv:2605.16233v1 Announce Type: new Abstract: Can LLM agents improve decision-making through self-generated memory without gradient updates? We propose FORGE (Failure-Optimized Reflective Graduation→19 May 2026LivePI: More Realistic Benchmarking of Agents Against Indirect Prompt InjectioarXiv:2605.17986v1 Announce Type: cross Abstract: AI agents such as OpenClaw are increasingly deployed in local workflows with access to external tools. This creates indirect prompt-injection (IPI) ri→3 Jul 2026Distributed Attacks in Persistent-State AI ControlarXiv:2607.02514v1 Announce Type: new Abstract: As AI coding agents become more autonomous, they increasingly ship code iteratively, with the codebase persisting across sessions. This persistence crea
CompanyMeta8 recent entries18 May 2026FORGE: Self-Evolving Agent Memory With No Weight Updates via Population BroadcastarXiv:2605.16233v1 Announce Type: new Abstract: Can LLM agents improve decision-making through self-generated memory without gradient updates? We propose FORGE (Failure-Optimized Reflective Graduation→28 Jul 2026Semalith v1.4: A Calibrated 184M Safety Classifier Achieving State-of-the-Art Prompt-Injection Detection at 44x Fewer Parameters than Llama-Guard-3-8BarXiv:2607.22545v1 Announce Type: cross Abstract: Deploying large language models in financial-services and agentic settings requires safety classifiers that simultaneously handle prompt injection, re→12 Aug 2026Interpreting Language Model Hidden States at ScalearXiv:2608.10260v1 Announce Type: new Abstract: Lens methods interpret large language models (LLMs) by mapping intermediate activations to the output vocabulary, revealing how next-token predictions d→16 Sept 2026Latent Undertow: How Ordinary Typos Break ProbesarXiv:2609.15994v1 Announce Type: new Abstract: LLMs handle ordinary typing variation fluently: a typo or missing punctuation leaves both user intent and the model's response substantively unchanged. →30 Sept 2026CALIBUDGET: Calibration-Guided Source Allocation for Fixed-Budget Mixed-Reasoning AdaptationarXiv:2609.36721v1 Announce Type: new Abstract: Fixed-budget adaptation from heterogeneous data sources requires deciding not only how much data to use, but how much exposure each source receives. Siz→5 Oct 2026Prompted to Discriminate: Generalizing Malicious-Input Probes in the WildarXiv:2610.02413v1 Announce Type: new Abstract: LLM agents increasingly rely on activation probes as runtime monitors for prompt injection, jailbreaks, and unsafe requests, reading the model's own hid→6 Oct 2026Self-Reflection Fine-Tuning: Enhancing Agent Security against Prompt Injection Attacks from Failure ExperiencearXiv:2610.04269v1 Announce Type: new Abstract: Large language model (LLM) agents are increasingly deployed in tool-augmented environments, but their reliance on external inputs makes them highly vuln→12 Oct 2026LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection ChallengearXiv:2506.09956v2 Announce Type: replace-cross Abstract: Indirect prompt injection attacks exploit a fundamental weakness of LLMs: executing unauthorized tasks from untrusted sources. Despite the pra
CompanyxAI1 recent entries18 May 2026FORGE: Self-Evolving Agent Memory With No Weight Updates via Population BroadcastarXiv:2605.16233v1 Announce Type: new Abstract: Can LLM agents improve decision-making through self-generated memory without gradient updates? We propose FORGE (Failure-Optimized Reflective Graduation
CompanyDeepSeek3 recent entries6 May 2026VisInject: Disruption != Injection -- A Dual-Dimension Evaluation of Universal Adversarial Attacks on Vision-Language ModelsarXiv:2605.01449v1 Announce Type: cross Abstract: Universal adversarial attacks on aligned multimodal large language models are increasingly reported with attack success rates in the 60-80% range, sug→27 May 2026Device Context Protocol: A Compact, Safety-First Architecture for LLM-Driven Control of Constrained DevicesarXiv:2605.26159v1 Announce Type: cross Abstract: Large language models are increasingly used as orchestrators of external tools via the Model Context Protocol (MCP), but MCP is built for software ser→23 Jul 2026Reinforcement Learning for Large Language Model Selective Evidence Adoption from Contaminated Retrieval ResultsarXiv:2607.20090v1 Announce Type: cross Abstract: Retrieval-augmented large language models frequently face contexts that interleave useful evidence with misleading statements or instruction-like cont