Fetching from the wire…
Research2026-08-06 · source-backed
arXiv 2608.04756 observes that post-retrieval conflict resolution catches existing black-box poisoning because every prior method asserts its target answer in frontal contradiction to settled context. PURPOSE extracts query-related facts approximating the resolver's likely reference, then grounds a pivot event in them, framing the injection as a consistent update. Highest ASR in 35 of 45 settings across three QA benchmarks, five generators and three conflict-resolution methods, beating the strongest prior attack by a mean of 9.7 points. Conflict-detection defenses key on a contradiction signal the attacker can simply decline to emit.
Each link below shares sources, entities, or timing with this story.
Shared entity: RAG / Same source domain / Shared topic / Earlier coverage / Tension
Both cover RAG; reported by the same outlet (arxiv.org); overlapping topics (attack, catch).
Shared entity: RAG / Same source domain / Earlier coverage / Tension / Downstream implication
Both cover RAG; reported by the same outlet (arxiv.org); earlier RAG coverage from 2026-07-30.
Shared entity: RAG / Same source domain / Shared topic / Earlier coverage
Both cover RAG; reported by the same outlet (arxiv.org); overlapping topics (attack, benchmark).
Both cover RAG; reported by the same outlet (arxiv.org); overlapping topics (answer, attack).
Shared entity: RAG / Same source domain / Earlier coverage / Tension
Both cover RAG; reported by the same outlet (arxiv.org); earlier RAG coverage from 2026-08-04.
Both cover RAG; reported by the same outlet (arxiv.org); earlier RAG coverage from 2026-07-21.
Shared entity: RAG / Shared topic / Earlier coverage / Tension
Both cover RAG; overlapping topics (answer, benchmark); earlier RAG coverage from 2026-07-15.
Shared entity: RAG / Same source domain / Earlier coverage / Tension
Both cover RAG; reported by the same outlet (arxiv.org); earlier RAG coverage from 2026-06-19.