{"as_of":"2026-08-08T19:59:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c82a7d5378aec43688ead1af2eef4c6405882f365cb916ae0c687f0f753d086c","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":45,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":45,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":45,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":45,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T20:25:58.416124Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":4,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2408.12935","last_updated":"2026-05-13T07:56:42Z","snapshot_observed_at":"2026-08-02T12:48:59.218457Z","submitted_at":"2024-08-23T09:33:48Z","title":"AI Safety Landscape for Large Language Models: Taxonomy, State-of-the-art, and Future Directions","version":4},"reference_index":183,"source":"pdf_text","source_observed_at":"2026-05-23T21:54:26.670284Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2408.12935"},"observation_digest":"sha256:1dac9659d6381b24979ae0e0bcbcb38eea0b22a8e72733144292f45eacef9090","observation_id":"119b7a0e-e4eb-4763-b537-409dfd6025b5","resolution":{"observed_at":"2026-05-23T21:55:50.451983Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2412.14113","last_updated":"2026-05-14T17:15:02Z","snapshot_observed_at":"2026-07-06T20:09:28.763595Z","submitted_at":"2024-12-18T17:58:58Z","title":"Adversarial Hubness in Multi-Modal Retrieval","version":4},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-23T06:39:36.039613Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2412.14113"},"observation_digest":"sha256:81210991ad7e018275f32bb0c575598eea211482c2cd77714b5385f5de7639ef","observation_id":"4df322f1-892d-4aaa-a42a-8f4ca8e7e191","resolution":{"observed_at":"2026-05-23T06:42:39.743609Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-07T20:25:58.416124Z","title":"How Robust is Google’s Bard to Adversarial Image Attacks? arXiv preprint arXiv:2309.11751, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.09818","last_updated":"2025-02-13T23:29:01Z","snapshot_observed_at":"2026-08-07T20:20:21.749513Z","submitted_at":"2025-02-13T23:29:01Z","title":"On the robustness of multimodal language model towards distractions","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T20:25:58.416124Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2502.09818"},"observation_digest":"sha256:5fa913a480c4eb9055b6a715612d9bbaa633078154e4c067d2ff80185fd7ae17","observation_id":"0cede9a2-b671-4098-82ae-3f68818a795a","resolution":{"observed_at":"2026-08-07T20:25:58.416124Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-07T19:45:19.441527Z","title":"How robust is google’s bard to adversarial image attacks?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.14881","last_updated":"2025-02-14T08:42:43Z","snapshot_observed_at":"2026-08-07T22:02:21.919237Z","submitted_at":"2025-02-14T08:42:43Z","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-07T19:45:19.441527Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2502.14881"},"observation_digest":"sha256:f4be6d1cc2edac94d003eee4d8abc9ea590b25e5a343e403d512805a019cb7c9","observation_id":"ae7aa9af-d632-4c79-9ca2-d0ba784e5427","resolution":{"observed_at":"2026-08-07T19:45:19.441527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-07T14:56:49.457828Z","title":"How robust is google’s bard to adversarial image attacks?arXiv preprint arXiv:2309.11751, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16916","last_updated":"2025-05-22T17:11:58Z","snapshot_observed_at":"2026-08-08T11:53:11.066721Z","submitted_at":"2025-05-22T17:11:58Z","title":"Backdoor Cleaning without External Guidance in MLLM Fine-tuning","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T14:56:49.457828Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2505.16916"},"observation_digest":"sha256:b42482477f79ebe781746e8a6c48bb5110286f150813b87c99da446ceb581d79","observation_id":"2d4e5e9f-205b-4047-8889-f21988732d0b","resolution":{"observed_at":"2026-08-07T14:56:49.457828Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-07T13:35:50.982242Z","title":"How robust is google’s bard to adversarial image attacks?arXiv preprint arXiv:2309.11751, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.21494","last_updated":"2025-05-27T17:56:57Z","snapshot_observed_at":"2026-08-07T21:17:47.870634Z","submitted_at":"2025-05-27T17:56:57Z","title":"Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T13:35:50.982242Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2505.21494"},"observation_digest":"sha256:d59acc249ae46898d9775cdecbd99e97b9e593f4c47b0a7266dd4aff832dfa75","observation_id":"fab8b3b2-4a32-4dcf-b09c-6f8515aa05db","resolution":{"observed_at":"2026-08-07T13:35:50.982242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-07T12:55:43.788243Z","title":"How robust is google’s bard to adversarial image attacks?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23266","last_updated":"2025-05-29T09:14:50Z","snapshot_observed_at":"2026-08-07T12:46:52.777693Z","submitted_at":"2025-05-29T09:14:50Z","title":"Disrupting Vision-Language Model-Driven Navigation Services via Adversarial Object Fusion","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:43.788243Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2505.23266"},"observation_digest":"sha256:302d949ae8bf82a782ea5b721b1d052bd7862c2600c7c8748d9f9722bdf0f760","observation_id":"0c7dfc16-043a-4a3b-bac7-d25029946a27","resolution":{"observed_at":"2026-08-07T12:55:43.788243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-07T13:21:41.966464Z","title":"How robust is google’s bard to adversarial image attacks?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:41.966464Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:a29015c3e90987177bfee571f37ef74513c6f170c52dd0ff54b77fc77b122464","observation_id":"19b04edd-5048-486a-a247-d1d459f40f8a","resolution":{"observed_at":"2026-08-07T13:21:41.966464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-07T12:07:58.704370Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00548","last_updated":"2025-05-31T13:11:14Z","snapshot_observed_at":"2026-08-08T10:05:29.642578Z","submitted_at":"2025-05-31T13:11:14Z","title":"Con Instruction: Universal Jailbreaking of Multimodal Large Language Models via Non-Textual Modalities","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T12:07:58.704370Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2506.00548"},"observation_digest":"sha256:7aa3986aeef86e53717867979fb63a789b844ab764cfb94ed50abe5d685d6706","observation_id":"d5086852-280e-487f-be1b-9cfb95f22b1e","resolution":{"observed_at":"2026-08-07T12:07:58.704370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-07T11:56:14.883612Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.01064","last_updated":"2025-09-14T09:51:48Z","snapshot_observed_at":"2026-08-07T11:49:32.765393Z","submitted_at":"2025-06-01T16:07:30Z","title":"Fighting Fire with Fire (F3): A Training-free and Efficient Visual Adversarial Example Purification Method in LVLMs","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T11:56:14.883612Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2506.01064"},"observation_digest":"sha256:f726806189e37e50994ae29a80cc7e213bc3d3005084ed07841be000d12adc6f","observation_id":"2dad2463-c6ab-43f4-9408-1b83043da001","resolution":{"observed_at":"2026-08-07T11:56:14.883612Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-06T18:40:52.995040Z","title":"How robust is google’s bard to adversarial image at- tacks? arXiv preprint arXiv:2309.11751, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.07709","last_updated":"2025-07-10T12:40:34Z","snapshot_observed_at":"2026-08-08T00:07:42.743533Z","submitted_at":"2025-07-10T12:40:34Z","title":"One Object, Multiple Lies: A Benchmark for Cross-task Adversarial Attack on Unified Vision-Language Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T18:40:52.995040Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2507.07709"},"observation_digest":"sha256:fd304ac1e0d553cb59c46b07cca3d3d315b90e70ff870a5d9377aeaefc116cad","observation_id":"37777eec-ccad-48b1-bd52-14a4fd214294","resolution":{"observed_at":"2026-08-06T18:40:52.995040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-06T11:02:14.960784Z","title":"How robust is Google’s bard to adversarial image attacks? arXiv preprint arXiv:2309.11751, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.23202","last_updated":"2025-07-31T02:57:20Z","snapshot_observed_at":"2026-08-06T11:02:14.318007Z","submitted_at":"2025-07-31T02:57:20Z","title":"Adversarial-Guided Diffusion for Multimodal LLM Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T11:02:14.960784Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2507.23202"},"observation_digest":"sha256:054e55f39c9941444004346d9f8cd7de895c803cd56ab7c39faee28b673561bb","observation_id":"b9826d94-4775-43a8-a039-7694b7706696","resolution":{"observed_at":"2026-08-06T11:02:14.960784Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T21:22:36.758764Z","title":"Attack prompt generation for red teaming and defend- ing large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.09237","last_updated":"2025-08-12T12:11:43Z","snapshot_observed_at":"2026-08-08T17:20:22.464472Z","submitted_at":"2025-08-12T12:11:43Z","title":"Blockchain Network Analysis using Quantum Inspired Graph Neural Networks & Ensemble Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T21:22:36.758764Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2508.09237"},"observation_digest":"sha256:e3d1c6c7a8b63625e64622860e40e9812bb55ab0969664c4c71a65f85403bc02","observation_id":"cea59753-6b5b-476f-9168-1609347dbbe5","resolution":{"observed_at":"2026-08-05T21:22:36.758764Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T20:29:05.380161Z","title":"Dong et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.10955","last_updated":"2025-08-14T07:25:45Z","snapshot_observed_at":"2026-08-07T18:23:08.889281Z","submitted_at":"2025-08-14T07:25:45Z","title":"Empowering Multimodal LLMs with External Tools: A Comprehensive Survey","version":1},"reference_index":222,"source":"arxiv_source","source_observed_at":"2026-08-05T20:29:05.380161Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2508.10955"},"observation_digest":"sha256:18926062ebdc22c42808f1165398b544d7755a746edadb0a6765b735abaff055","observation_id":"57f1cbdc-0e67-4dba-89fb-280b33986645","resolution":{"observed_at":"2026-08-05T20:29:05.380161Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T16:00:48.380311Z","title":"How robust is google's bard to adversarial image attacks?, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19445","last_updated":"2026-06-16T17:34:06Z","snapshot_observed_at":"2026-08-08T05:25:02.825611Z","submitted_at":"2025-08-26T21:36:45Z","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","version":3},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-05T16:00:48.380311Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2508.19445"},"observation_digest":"sha256:84e60a2669bab2cb4d1d033f2e280a77f236757a0073ede7bc6a67497686e94c","observation_id":"48fac66d-f646-488d-8871-08488efd4c13","resolution":{"observed_at":"2026-08-05T16:00:48.380311Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-04T13:45:26.355350Z","title":"Yinpeng Dong, Huanran Chen, Jiawei Chen, Zhengwei Fang, Xiao Yang, Yichi Zhang, Yu Tian, Hang Su, and Jun Zhu","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25533","last_updated":"2026-07-06T05:00:34Z","snapshot_observed_at":"2026-08-06T23:26:32.833872Z","submitted_at":"2025-09-29T21:43:18Z","title":"VISOR++: Universal Visual Inputs based Steering for Large Vision Language Models","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:26.355350Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2509.25533"},"observation_digest":"sha256:4af25e7c0d2b75e0a5e5b13a05e8bd6c6994ca0228e42f44e7dd67110b3d235b","observation_id":"b9798a55-6502-4a83-9d66-1fb0777b9aad","resolution":{"observed_at":"2026-08-04T13:45:26.355350Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-03T07:47:37.500987Z","title":"N., and Fink, O","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.19210","last_updated":"2026-06-09T16:01:52Z","snapshot_observed_at":"2026-08-06T16:38:35.610168Z","submitted_at":"2026-01-27T05:24:45Z","title":"Contrastive Spectral Rectification: Test-Time Defense towards Zero-shot Adversarial Robustness of CLIP","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-03T07:47:37.500987Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2601.19210"},"observation_digest":"sha256:39239d6d270ae4a04c65df7443ab78a0ae88939d699835e474ffbffb0fcbf698","observation_id":"b1d7631d-f54d-427d-a6df-e24c31f22c16","resolution":{"observed_at":"2026-08-03T07:47:37.500987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2601.23179","last_updated":"2026-04-20T06:15:25Z","snapshot_observed_at":"2026-08-02T15:37:11.433010Z","submitted_at":"2026-01-30T17:03:24Z","title":"Universal Adversarial Attacks against Closed-Source MLLMs via Target-View Routed Meta Optimization","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-16T09:26:14.799360Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2601.23179"},"observation_digest":"sha256:edf0fb56b5f1e6c0349b2774e6efec7c40d2441aa0af98350a9e276cb65ad984","observation_id":"2bae9e10-95eb-4f38-933a-b7f15bcf9762","resolution":{"observed_at":"2026-05-16T09:27:40.976188Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2602.07892","last_updated":"2026-05-12T03:21:50Z","snapshot_observed_at":"2026-07-06T22:45:00.816348Z","submitted_at":"2026-02-08T09:53:46Z","title":"Safety Alignment as Continual Learning: Mitigating the Alignment Tax via Orthogonal Gradient Projection","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-16T06:39:17.785715Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2602.07892"},"observation_digest":"sha256:0b493037b690b1fbc817272438ae98119a2195d342928b0591875fe72560b1f6","observation_id":"c044521e-4429-4c7a-8a05-06b9c5f725fa","resolution":{"observed_at":"2026-05-16T06:40:42.324184Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-03T02:57:45.790570Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2602.09431","last_updated":"2026-05-24T12:21:22Z","snapshot_observed_at":"2026-08-03T02:56:43.461670Z","submitted_at":"2026-02-10T05:51:02Z","title":"Grounding-Driven Attack: Improving Encoder-based Adversarial Transferability against Large Vision-Language Models","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-03T02:57:45.790570Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2602.09431"},"observation_digest":"sha256:d7eb265a9bbb60905354f4efc25b3547794bb5cb5e84f3ec924cfe1ab747ccab","observation_id":"9c0e6acb-57cf-44da-9229-264e8654e016","resolution":{"observed_at":"2026-08-03T02:57:45.790570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2604.04473","last_updated":"2026-04-06T06:48:32Z","snapshot_observed_at":"2026-08-02T18:27:59.544984Z","submitted_at":"2026-04-06T06:48:32Z","title":"Beyond Standard Benchmarks: A Systematic Audit of Vision-Language Model's Robustness to Natural Semantic Variation Across Diverse Tasks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-10T20:26:42.128350Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2604.04473"},"observation_digest":"sha256:909b7a076addb322a6797aab12fb83c88f8f45f89f1448034526a0469cebcf5d","observation_id":"53d0f926-60b8-4177-85f5-47de7a482584","resolution":{"observed_at":"2026-05-10T21:55:52.672143Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2604.09574","last_updated":"2026-02-24T04:29:42Z","snapshot_observed_at":"2026-08-05T05:08:09.074150Z","submitted_at":"2026-02-24T04:29:42Z","title":"Turing Test on Screen: A Benchmark for Mobile GUI Agent Humanization","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-15T20:35:17.075890Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2604.09574"},"observation_digest":"sha256:3ac528bf59aef966b82ba64b2723e8f24391a70a1bde4895d0aac1f5cc490e09","observation_id":"c6d7064b-edcc-473f-9ad8-d105eea83a6d","resolution":{"observed_at":"2026-05-15T20:36:35.220145Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2604.25102","last_updated":"2026-04-28T01:21:47Z","snapshot_observed_at":"2026-07-06T23:11:02.043135Z","submitted_at":"2026-04-28T01:21:47Z","title":"One Perturbation, Two Failure Modes: Probing VLM Safety via Embedding-Guided Typographic Perturbations","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-07T17:24:05.847988Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2604.25102"},"observation_digest":"sha256:cdb4f1a67e564c5c0e778ecb9c924caa81e287b3b0a79116f4e71d3d695ad971","observation_id":"20d236fa-b5b4-41bc-ac5a-c1bd68724170","resolution":{"observed_at":"2026-05-11T23:21:15.095557Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2605.01758","last_updated":"2026-05-14T12:12:16Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:38:42Z","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-10T15:39:32.595169Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2605.01758"},"observation_digest":"sha256:ffed809283e18fb936ba33387549399b0d74c24bf1ebd542d16b0f7fd3e15503","observation_id":"08c6da3e-2e00-4d3d-beaa-5f1a43258ead","resolution":{"observed_at":"2026-05-11T10:06:02.848262Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2605.01758","last_updated":"2026-05-14T12:12:16Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:38:42Z","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-11T01:46:54.430546Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2605.01758"},"observation_digest":"sha256:39b71e8a5807cca36228de2efc9f670c018bfb28bd44245eeb66061d6aec4037","observation_id":"d8a8d895-2175-424c-8cff-33f32f044ff6","resolution":{"observed_at":"2026-05-11T04:20:58.067575Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2605.01758","last_updated":"2026-05-14T12:12:16Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:38:42Z","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-15T07:11:16.568353Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2605.01758"},"observation_digest":"sha256:21a856d2c13b156ad5ceb48c50fd30dd32d248251c7a3cf540d32dcc828459f6","observation_id":"c4064cd7-94a0-4bba-b10a-0f8ad332a365","resolution":{"observed_at":"2026-05-15T07:15:12.004444Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2605.07250","last_updated":"2026-05-08T05:19:23Z","snapshot_observed_at":"2026-07-06T23:19:35.885430Z","submitted_at":"2026-05-08T05:19:23Z","title":"Hard to Read, Easy to Jailbreak: How Visual Degradation Bypasses MLLM Safety Alignment","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-05-11T01:53:46.652759Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2605.07250"},"observation_digest":"sha256:53ee97a0af18e27e6944845166b9904f3f06e8a1440c53ff626c94b8b7c6715e","observation_id":"d98c9a77-0b92-4fa6-a6c0-e5c465ad64dc","resolution":{"observed_at":"2026-05-11T04:10:59.823103Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2605.10582","last_updated":"2026-05-11T13:54:26Z","snapshot_observed_at":"2026-08-06T09:00:38.839501Z","submitted_at":"2026-05-11T13:54:26Z","title":"Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-05-12T04:50:08.866969Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2605.10582"},"observation_digest":"sha256:032d19272def9d7ed78b0403607c64bdf1b755cade23e746e4be01775df3d0c7","observation_id":"e91af393-e689-47fa-93a8-d85c2ca21834","resolution":{"observed_at":"2026-05-12T05:51:27.633916Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2605.11716","last_updated":"2026-05-12T08:05:10Z","snapshot_observed_at":"2026-07-06T23:23:30.499023Z","submitted_at":"2026-05-12T08:05:10Z","title":"SafeSteer: A Decoding-level Defense Mechanism for Multimodal Large Language Models","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-05-13T06:56:10.053418Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2605.11716"},"observation_digest":"sha256:18f42bbec162801e36a38f7c0ce9e1d92b1df0cf9341d197556fc35d4d703a97","observation_id":"61444bc2-f1bd-4862-a947-847bd1befac7","resolution":{"observed_at":"2026-05-13T06:57:27.613113Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2605.17310","last_updated":"2026-05-17T08:02:27Z","snapshot_observed_at":"2026-07-06T23:28:21.395050Z","submitted_at":"2026-05-17T08:02:27Z","title":"Attention Hijacking: Response Manipulation Across Queries in Vision-Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-20T14:25:10.603780Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2605.17310"},"observation_digest":"sha256:7e18a8616a7580e27d7edc3caed0e2521f93776db858096b2af95c5757db5baf","observation_id":"230dfffd-57e1-488a-bd7f-dc9d2ae6785a","resolution":{"observed_at":"2026-05-20T14:28:21.617868Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2605.18868","last_updated":"2026-05-15T12:28:16Z","snapshot_observed_at":"2026-08-02T22:00:15.007211Z","submitted_at":"2026-05-15T12:28:16Z","title":"DarkLLM: Learning Language-Driven Adversarial Attacks with Large Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-20T18:31:48.770507Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2605.18868"},"observation_digest":"sha256:062170d59860c46096527f799a79278e6bc41a85030053afd06c723d5c1507fc","observation_id":"e38fb1bd-8314-4a26-b4d7-bb29cb0ae5e9","resolution":{"observed_at":"2026-05-20T18:33:37.971752Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2605.18915","last_updated":"2026-05-18T03:23:58Z","snapshot_observed_at":"2026-07-06T23:29:42.583875Z","submitted_at":"2026-05-18T03:23:58Z","title":"DMN: A Compositional Framework for Jailbreaking Multimodal LLMs with Multi-Image Inputs","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-05-20T10:19:11.536555Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2605.18915"},"observation_digest":"sha256:734659c522bb0891b73f5d3bb432176ad06b7d2373ea6f0c24989e4579b21497","observation_id":"6236a050-80fa-44b6-9f30-d0e05e6c610c","resolution":{"observed_at":"2026-05-20T10:23:12.313384Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2605.20654","last_updated":"2026-06-03T08:00:52Z","snapshot_observed_at":"2026-08-02T18:56:31.274465Z","submitted_at":"2026-05-20T03:16:15Z","title":"REFLECTOR: Internalizing Step-wise Reflection against Indirect Jailbreak","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-05-21T06:16:01.040236Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2605.20654"},"observation_digest":"sha256:31d67d2c50bf55ded884feb49e3e63397fdb0b1b15436ef5042f4a4e1bdd7bf1","observation_id":"c3736c71-022c-4ebe-ab92-701ef8721148","resolution":{"observed_at":"2026-05-21T06:19:41.967990Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2605.21541","last_updated":"2026-05-20T08:15:56Z","snapshot_observed_at":"2026-08-08T13:30:34.087960Z","submitted_at":"2026-05-20T08:15:56Z","title":"Frequency-Domain Regularized Adversarial Alignment for Transferable Attacks against Closed-Source MLLMs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-22T01:25:06.528845Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2605.21541"},"observation_digest":"sha256:a7654228880e41bcc67b8d6954a68d52b97aa2bed8b6a9bc107590a60c2e54a1","observation_id":"9b6aff5d-4824-462f-9766-6000b583a986","resolution":{"observed_at":"2026-05-22T01:25:52.665642Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2605.26501","last_updated":"2026-05-26T03:28:28Z","snapshot_observed_at":"2026-08-06T01:03:47.103495Z","submitted_at":"2026-05-26T03:28:28Z","title":"Unveiling the Fragility of Vision-Language Models: Multi-Modal Adversarial Synergy via Texture-Constrained Perturbations and Cross-Modal Optimization","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-29T18:17:52.158294Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2605.26501"},"observation_digest":"sha256:ccf1192ae0b703e5bc680e9a906622d9a05a899985fdfe89a1fb81a77cd5c943","observation_id":"7176d271-9528-4a1d-af55-a273d94059b4","resolution":{"observed_at":"2026-06-29T18:23:50.907500Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2606.07706","last_updated":"2026-06-05T10:10:53Z","snapshot_observed_at":"2026-08-08T03:05:31.159664Z","submitted_at":"2026-06-05T10:10:53Z","title":"MLingualFC: Evaluating Jailbreak Vulnerabilities in Multilingual Vision-Language Models","version":1},"reference_index":102,"source":"arxiv_source","source_observed_at":"2026-06-27T21:47:22.295896Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2606.07706"},"observation_digest":"sha256:994675cd2054ecea1d91429e93e11f16d17890293ddeffd01d98d6710b8add3c","observation_id":"60ce9223-c0d2-443b-a3a1-bd6eaea06829","resolution":{"observed_at":"2026-06-27T21:51:18.133090Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2606.09125","last_updated":"2026-06-08T07:19:42Z","snapshot_observed_at":"2026-07-06T23:48:30.569726Z","submitted_at":"2026-06-08T07:19:42Z","title":"Unveiling Privacy Risks in Multi-modal Large Language Models: Task-specific Vulnerabilities and Mitigation Challenges","version":1},"reference_index":84,"source":"arxiv_source","source_observed_at":"2026-06-27T16:33:28.848573Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2606.09125"},"observation_digest":"sha256:9f324eb27390e89456723558ea375f1d6108f6b4f445be48497507166e5d51c5","observation_id":"ae37be47-fcbc-4caa-8d76-c8d91acfe061","resolution":{"observed_at":"2026-07-03T01:27:31.013372Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2606.23892","last_updated":"2026-06-22T19:41:57Z","snapshot_observed_at":"2026-08-06T14:11:51.998297Z","submitted_at":"2026-06-22T19:41:57Z","title":"REALM: A Unified Red-Teaming Benchmark for Physical-World VLMs","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-26T08:44:45.853401Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2606.23892"},"observation_digest":"sha256:43b59e62445bdd1fb4282939fdcafcbbbbfa98ce7545b9c8f505c1e414bf2420","observation_id":"f4acd54c-a215-4805-a3ab-068c58c96969","resolution":{"observed_at":"2026-07-04T10:29:45.751085Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2607.00174","last_updated":"2026-06-30T20:47:35Z","snapshot_observed_at":"2026-08-02T14:04:50.802747Z","submitted_at":"2026-06-30T20:47:35Z","title":"Steal the Patch Size: Adversarially Manipulate Vision-Language Models","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-07-02T19:30:19.691473Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2607.00174"},"observation_digest":"sha256:778e69695951e33c95acd886394c75bf391226a1e9f90cf8bb249185d5bbe860","observation_id":"394c9a55-2e2d-4187-8c94-40c0ebe07590","resolution":{"observed_at":"2026-07-02T19:37:18.461154Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":"2309.11751","doi":"10.48550/arxiv.2309.11751","metadata_source":"pith","pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":"cs.CV","work_id":"0808b24c-a08e-44cf-8998-346530bebb32","year":2023},"citing_paper":{"arxiv_id":"2607.07375","last_updated":"2026-07-08T13:06:20Z","snapshot_observed_at":"2026-08-03T20:22:35.302558Z","submitted_at":"2026-07-08T13:06:20Z","title":"On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-09T12:55:34.631248Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2607.07375"},"observation_digest":"sha256:76db390ef90cc974e8f38d92036baf3bb9824fe2a42ebaea51c602d7dfba407d","observation_id":"81fcb0aa-cfa2-4775-a5ff-1298bcc2e682","resolution":{"observed_at":"2026-07-09T12:56:14.861381Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-02T07:51:46.960018Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.16280","last_updated":"2026-07-09T17:55:54Z","snapshot_observed_at":"2026-08-08T14:09:09.503382Z","submitted_at":"2026-07-09T17:55:54Z","title":"3D FaceShell: Attribute Transfer in 3D Face Avatars as a VLM Defense Mechanism","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T07:51:46.960018Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2607.16280"},"observation_digest":"sha256:fbeaddfef89a8d9927cfac0e68abc6d907f3f314217230fbd191ae1438659223","observation_id":"d8af849a-9f06-4645-b272-1e94bbc19e24","resolution":{"observed_at":"2026-08-02T07:51:46.960018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-01T13:51:21.218412Z","title":"How robust is Google’s Bard to adversarial image attacks?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.18958","last_updated":"2026-07-21T10:49:29Z","snapshot_observed_at":"2026-08-06T10:36:19.391172Z","submitted_at":"2026-07-21T10:49:29Z","title":"Dual Adversarial Fine-tuning for Enhancing Robustness of Large Vision Language Model","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T13:51:21.218412Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2607.18958"},"observation_digest":"sha256:0161455e0a2d547e010fb1bf9183687bb7c50d5cd7cc4d569a6f2e1c789cd95d","observation_id":"72348382-e4f1-4b55-a73a-4db267e12b10","resolution":{"observed_at":"2026-08-01T13:51:21.218412Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-01T08:42:16.741551Z","title":"How robust is google’s bard to adversarial image attacks?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.21036","last_updated":"2026-07-23T08:16:56Z","snapshot_observed_at":"2026-08-01T08:42:15.468584Z","submitted_at":"2026-07-23T08:16:56Z","title":"GeoThreat: Transferable Targeted Adversarial Attacks on Large Vision-Language Models for Remote Sensing Image Interpretation","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-01T08:42:16.741551Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2607.21036"},"observation_digest":"sha256:e31933762a8e5eb4eb6fe8bde6ba6611f0fd2042f4eb3c0a433e034074a7c907","observation_id":"a8ef4c8d-5344-4a18-abd2-5aa8bbb13338","resolution":{"observed_at":"2026-08-01T08:42:16.741551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-01T13:10:37.295272Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.22716","last_updated":"2026-07-21T15:52:30Z","snapshot_observed_at":"2026-08-06T12:10:57.542923Z","submitted_at":"2026-07-21T15:52:30Z","title":"Visual Token Compression Enhances Robustness of MLLMs","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T13:10:37.295272Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2607.22716"},"observation_digest":"sha256:49717502d5df6ccf22df2f858e280e04cc609fa828cfc3641a713c0f6c1e420f","observation_id":"e850dde1-1e7e-48b8-b5fe-3c29d8735989","resolution":{"observed_at":"2026-08-01T13:10:37.295272Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.11751","snapshot_observed_at":"2026-08-04T13:51:18.175083Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.02137","last_updated":"2026-08-03T12:24:50Z","snapshot_observed_at":"2026-08-07T03:01:54.342210Z","submitted_at":"2026-08-03T12:24:50Z","title":"Two Sides of the Same Coin: Co-Evolving Search for Cross-Task Attacks on Vision-Language Models","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-04T13:51:18.175083Z"},"links":{"cited_paper":"/paper/2309.11751","citing_paper":"/paper/2608.02137"},"observation_digest":"sha256:5044c4fc8ad70fc2f94ff618a26f7975d41175e6d50a71710c1292371cf6d708","observation_id":"44fa4744-60a7-4df2-ab71-72f17dd4d8cc","resolution":{"observed_at":"2026-08-04T13:51:18.175083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2309.11751/citation-record","integrity":"/paper/2309.11751/integrity","json":"/paper/2309.11751/citation-record.json","paper":"/paper/2309.11751"},"outbound":[],"paper":{"arxiv_id":"2309.11751","last_updated":"2023-10-14T12:56:13Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-02T21:47:41.540245Z","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 45 inbound Pith citation observations for arXiv:2309.11751."}