Key papers

• Injecagent: Benchmarking Indirect Prompt Injections In Tool-integrated Large Language Model Agents (2024)
  Qiusi Zhan, Zhixiang Liang, Zifan Ying, et al.
  15.95
• Hidden Killer: Invisible Textual Backdoor Attacks With Syntactic Trigger (2021)
  Fanchao Qi, Mukai Li, Yangyi Chen, et al.
  15.00
• RAP: Robustness-aware Perturbations For Defending Against Backdoor Attacks On NLP Models (2021)
  Wenkai Yang, Yankai Lin, Peng Li, et al.
  12.10
• Prompt As Triggers For Backdoor Attack: Examining The Vulnerability In Language Models (2023)
  Shuai Zhao, Jinming Wen, Luu Anh Tuan, et al.
  11.85
• Poisonprompt: Backdoor Attack On Prompt-based Large Language Models (2023)
  Hongwei Yao, Jian Lou, Zhan Qin
  11.19
• Shortcuts Everywhere And Nowhere: Exploring Multi-trigger Backdoor Attacks (2024)
  Yige Li, Jiabo He, Hanxun Huang, et al.
  7.70
• PACE: Poisoning Attacks On Learned Cardinality Estimation (2024)
  Jintao Zhang, Chao Zhang, Guoliang Li, et al.
  7.50
• Harmbench: A Standardized Evaluation Framework For Automated Red Teaming And Robust Refusal (2024)
  Mantas Mazeika, Long Phan, Xuwang Yin, et al.
  5.95
• UOR: Universal Backdoor Attacks On Pre-trained Language Models (2023)
  Wei Du, Peixuan Li, Boqun Li, et al.
  5.84
• Defending Against Insertion-based Textual Backdoor Attacks Via Attribution (2023)
  Jiazhao Li, Zhuofeng Wu, Wei Ping, et al.
  5.84
• TSAI-MetaFraud: A Benchmark Dataset for Financial Fraud Transaction and Behavioral Risk Detection in Metaverse Ecosystems (2026)
  Refat Ishrak Hemel et al.
  5.49
• VEXAIoT: Autonomous IoT Vulnerability EXploitation using AI Agents (2026)
  Katherine Swinea et al.
  5.49
• Badprompt: Backdoor Attacks On Continuous Prompts (2022)
  Xiangrui Cai, Haidong Xu, Sihan Xu, et al.
  5.24
• The Binary Tree Mechanism is Optimal for Approximate Differentially Private Continual Counting (2026)
  Konstantina Bairaktari et al.
  5.01
• An alternative approach towards attacks against fully-split PLWE instances (2026)
  Iv\'an Blanco-Chac\'on et al.
  5.01
• From Forgeries to Foundation Models: A Systematic Survey of Identity Document Attack and Detection (2026)
  Gourab Das et al.
  5.01
• Unveiling the Non-Monotonic Effect of Privacy on Generalization under Byzantine Robustness (2026)
  Thomas Boudou et al.
  5.01
• LIB-TRAP: Standard Cell Library Hardware Trojan Risk Assessment and Prevention (2026)
  Harish Kumar Dharavath et al.
  5.01
• VeriChat: An Agentic Conversational AI Assistant for Hardware Security Verification (2026)
  Dipayan Saha et al.
  5.01
• Trust Boundary Semantic Gaps: A Multi-dimensional Analysis and Mitigation for Security-by-Design (2026)
  Doyeon Kim et al.
  5.01
• Resilient Liquid Democracy: Mitigating Voting Power Imbalances via Secure Delegation Networks (2026)
  Zhuolun Li et al.
  5.01
• Knowledge Over Parameters: Evolving Smart Contract Vulnerability Detection (2026)
  Yuqiang Sun et al.
  5.01
• Has This Checkpoint Been Abliterated? A Two-Signal Audit and Its Failure Map (2026)
  Gabriel Hurtado
  5.01
• SoK: A Taxonomy for Cybersecurity Incident Response Influence Factors (2026)
  Thomas Biege et al.
  5.01
• A Seed for Privacy -- semi-automatic privacy-revealing data detection in databases and data streams (2026)
  He Gu et al.
  5.01
• Privacy-Preserving Intent Fulfilment and Assurance for 6G RAN (2026)
  Joss Armstrong
  5.01
• Entropy Bootstrapping for Wireless Embedded Systems (2026)
  Javier Blanco-Romero et al.
  5.01
• Proof-of-Continuity: A Temporal Model for Authority Propagation in Distributed Systems and AI Agents (2026)
  Nicola Gallo
  5.01
• SeedSmith: LLM-Driven Seed Synthesis for Directed Fuzzing (2026)
  Junmin Zhu et al.
  5.01
• RaMark: Radioactive Watermarking for Generated Tabular Data (2026)
  Xin Che et al.
  5.01
• SLBench: Evaluating How LLM Agents Follow Logical Relations in Skills (2026)
  Xuan Chen et al.
  5.01
• Blockchain-Linked Auditable Decision Management for Telecom/IoT Fraud-Control Requests (2026)
  Saviz Changizi et al.
  5.01
• SFDS: Selective File Disclosure System (2026)
  Aditya Mitra et al.
  5.01
• Federated Learning Architecture: Data Privacy and System Security Approaches (2026)
  Cagdas Karatas et al.
  5.01
• Portable Acceleration of Learning With Errors KEMs for Post-Quantum Cryptography (2026)
  Tiziana Liberati et al.
  5.01
• Recovering Clinical Utility Under Differential Privacy: Empirical Validation of Adaptive Federated Aggregation on Heterogeneous Cardiovascular Datasets (2026)
  Rodrigo Tertulino et al.
  5.01
• End-to-End Differential Privacy in Training Deep Neural Network Classifiers (2026)
  Huaiyuan Rao et al.
  5.01
• The Ethics of Autonomous AI Agents for Offensive Security (2026)
  Andreas Happe et al.
  5.01
• Pure-DP Statistical Query Release at the Conjectured Square-Root Rate (2026)
  Jack Fitzsimons
  5.01
• Mimicking The Familiar: Dynamic Command Generation For Information Theft Attacks In LLM Tool-learning System (2025)
  Ziyou Jiang, Mingyang Li, Guowei Yang, et al.
  4.98
• MergeLLL: A Hierarchical Divide-and-Conquer Framework for LLL-Based Lattice Reduction (2026)
  Niharika Gauraha
  4.95
• Backdoorllm: A Comprehensive Benchmark For Backdoor Attacks And Defenses On Large Language Models (2024)
  Yige Li, Hanxun Huang, Yunhan Zhao, et al.
  4.95
• The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks And Prompt Injections (2025)
  Milad Nasr, Nicholas Carlini, Chawin Sitawarin, et al.
  4.69
• SEEP: Training Dynamics Grounds Latent Representation Search For Mitigating Backdoor Poisoning Attacks (2024)
  Xuanli He, Qiongkai Xu, Jun Wang, et al.
  4.52
• Target-driven Attack For Large Language Models (2024)
  Chong Zhang, Mingyu Jin, Dong Shu, et al.
  4.52
• Black-Box Inference of LLM Architectural Properties with Restrictive API Access (2026)
  Christopher Ellis et al.
  4.39
• Janus: a Playground for User-Involved Agentic Permission Management (2026)
  Natalie Grace Brigham et al.
  4.39
• AgentFlow: Building Agent Dependency Graphs for Static Analysis of Agent Programs (2026)
  Shenao Wang et al.
  4.39
• ElephantAgent: Contextual State Continuity in Agentic Systems (2026)
  Jiankai Jin et al.
  4.39
• Overview of Risk Assessment and Management for Intelligent Systems under the AI Act and Beyond (2026)
  Javier Irigoyen et al.
  4.39
• Securing People and their Machines Against Major Faults (2026)
  Ohad Eitan et al.
  4.39
• Steerability via constraints: a substrate for scalable oversight of coding agents (2026)
  Thomas Winninger
  4.39
• HTTP REST API Structure Learning (2026)
  Ran Dubin et al.
  4.39
• When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents (2026)
  George Torres et al.
  4.39
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages (2026)
  Lucas Pinto
  4.39
• The Power of Backdoor Absorption in Community Training (2026)
  Issam Seddik et al.
  4.39
• ORAN-DEFEND: Subspace Detection and Sanitization of Backdoor DRL xApps in Open RAN (2026)
  Md Raihan Uddin et al.
  4.39
• Multi-Class vs. Multi-Label BERT for CVE-to-CWE Mapping: How Taxonomy Structure Shapes the Errors (2026)
  Ana Schwengber Kelm et al.
  4.39
• Privacy Detective: A Narrative Game that Cultivates Student Developers' Privacy Awareness by Harnessing Legal Documents (2026)
  Shao-Yu Chu et al.
  4.39
• Building Trust in Autonomous Commerce: A Verifiable Global Event Timeline and AI-Ready Fraud Intelligence Layer (2026)
  Rajat Srivastava
  4.39