Stack layer / Threat pattern
Unlearning Methods That Pass TOFU and MUSE Still Leak the Secret on 22-86% of Queries Once the Model Is an Agent
arXiv 2609.12808
Stack layer / Contrast
Splitting a CTF Task Into Isolated Sub-Contexts Lets a Local gemma-4 Solve 18.52% of Challenges Standard Agent Loops Fail
arXiv 2609.12839
Stack layer / Contrast
A Jailbreak SoK Finds Low Final-Response Attack Success Hides Compromised Planning, Memory, and Tool State
arXiv 2609.12413
Policy dependency / Stack layer
RIPPLE: an edit confined to one prompt-policy segment changes downstream behavior, so replay candidate edits after previously accepted ones before persisting
arXiv 2609.12127
Stack layer / Contrast
Reconstructing Facts From Feed-Forward Residual Vectors Answers Single-Fact Questions in Two-Million-Token Contexts
arXiv 2609.12686
Stack layer / Contrast
Odin Runs All 32 Llama-3-8B Transformer Layers Under FHE in 366 Seconds on One H100, 4.51x Faster Than THOR
arXiv 2609.12378
Stack layer / Threat pattern
A Malicious Super-App Can Silently Own Every Mini-App Inside It, and Russia's MAX Demonstrates the Full Set
arXiv 2609.11814
Stack layer / Threat pattern
Gemini CLI ships an external-context processor to stop indirect prompt injection through build files
GitHub