Imperceptible goal-image attacks spoof latent state in LeWorldModel
Epsilon 4/255 perturbations spoof block pose in 73-95% of scenes and drop LeWorldModel planning success from 87% to 32%.
10 stories, newest first · one card per story
Epsilon 4/255 perturbations spoof block pose in 73-95% of scenes and drop LeWorldModel planning success from 87% to 32%.
Physical disguise bypasses camera and radar checks while adversarial patches suppress detection in up to 29% of attempts.
A textured adversarial sphere cuts Pi0 and RDT robot task success by 31.2% to 39.9% in view.
CIRA induces LVLM failures only after visual-token compression, with a 20.35% mean failure rate.
DeMark removes learning-based audio watermarks query-free, reaching 0.92–0.96 success while preserving speech quality.
A reinforcement-learning black-box attack fools vision models with fewer queries than earlier methods.
ALIBI embeds fake benign-narrative sections into binaries, flipping 30 of 35 malware samples to benign verdicts on Gemini 2.5 Pro.
Simple repeating patterns let attackers shift stereo-camera depth estimates by up to 20 meters, triggering emergency braking in autonomous driving frameworks at 40 km/h.
CiteShade attack makes RAG models cite trusted sources for attacker-chosen wrong answers, raising wrong-answer rate from 0.01 to 0.68.
Researchers formalize obfuscation primitives for TEE-protected on-device LLMs and show a Collapse attack breaks ArrowCloak, TSQP, and LoRO, then extend the boundary.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views