{"as_of":"2026-08-09T02:07:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5b0748e60684bf39eaff149b0c8ee3368a31272807ad7573b7966d9e27df2fb5","coverage":[{"denominator":57,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":57,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T11:54:43.247703Z","state":"measured"},{"denominator":57,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":57,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.22304/citation-record","integrity":"/paper/2507.22304/integrity","json":"/paper/2507.22304/citation-record.json","paper":"/paper/2507.22304"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2407.07403","last_updated":"2024-07-12T03:58:05Z","snapshot_observed_at":"2026-08-07T09:29:22.417640Z","submitted_at":"2024-07-10T06:57:58Z","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07403","snapshot_observed_at":"2026-08-06T11:54:42.946018Z","title":"”A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends” arXiv preprint arXiv:2407.07403 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.946018Z"},"links":{"cited_paper":"/paper/2407.07403","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:10d5a57ccbc807647258161c3661b83cf9f8a8e801021d3fb534ecd29212461c","observation_id":"88073051-5f25-467e-b525-4dcb62ae96af","resolution":{"observed_at":"2026-08-06T11:54:42.946018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14881","last_updated":"2025-02-14T08:42:43Z","snapshot_observed_at":"2026-08-07T22:02:21.919237Z","submitted_at":"2025-02-14T08:42:43Z","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14881","snapshot_observed_at":"2026-08-06T11:54:42.952428Z","title":"”A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations” arXiv preprint arXiv:2502.14881 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.952428Z"},"links":{"cited_paper":"/paper/2502.14881","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:eb807377b5679f0abf5af7849765f17a5d1d520ffc2fd45f3b45b02ac973fab6","observation_id":"aa0ed4e2-7b1c-4fea-aeb4-f8ee063a94d7","resolution":{"observed_at":"2026-08-06T11:54:42.952428Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.03726","last_updated":"2025-07-28T05:33:36Z","snapshot_observed_at":"2026-07-06T15:23:52.761222Z","submitted_at":"2023-05-05T17:59:46Z","title":"Otter: A Multi-Modal Model with In-Context Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.03726","snapshot_observed_at":"2026-08-06T11:54:42.957966Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.957966Z"},"links":{"cited_paper":"/paper/2305.03726","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:c70510b39a295a4c3ee2e7880b26ff23fec63baef6c0069978c09a52e639017d","observation_id":"48464e29-bed0-41aa-95fd-cd7b66f880e0","resolution":{"observed_at":"2026-08-06T11:54:42.957966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.01003","last_updated":"2023-12-15T10:09:58Z","snapshot_observed_at":"2026-07-06T15:49:39.540157Z","submitted_at":"2023-07-03T13:37:00Z","title":"Visual Instruction Tuning with Polite Flamingo","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.01003","snapshot_observed_at":"2026-08-06T11:54:42.963956Z","title":"”Visual Instruction Tuning with Polite Flamingo” arXiv preprint arXiv:2307.01003 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.963956Z"},"links":{"cited_paper":"/paper/2307.01003","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:702f308fb14b6a07a7885d5fa3cc0a4b0ab8bb8b3e79fdf1c46154e93691b145","observation_id":"c7b280b1-b854-47ed-a925-3f2a87b7ba7f","resolution":{"observed_at":"2026-08-06T11:54:42.963956Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.07353","last_updated":"2024-09-11T15:39:42Z","snapshot_observed_at":"2026-07-06T19:13:50.684379Z","submitted_at":"2024-09-11T15:39:42Z","title":"Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.07353","snapshot_observed_at":"2026-08-06T11:54:42.969519Z","title":"”Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks” arXiv preprint arXiv:2409.07353 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.969519Z"},"links":{"cited_paper":"/paper/2409.07353","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:8c27f59a7cb2fa1132c1b3515e9df648539a532b9da77e40c0b430fbfa8d2ef2","observation_id":"40a1995e-ac82-4e79-8dfe-e86f37f1c55f","resolution":{"observed_at":"2026-08-06T11:54:42.969519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.03084","last_updated":"2025-05-06T00:41:16Z","snapshot_observed_at":"2026-08-08T04:12:15.326270Z","submitted_at":"2025-05-06T00:41:16Z","title":"Adversarial Attacks in Multimodal Systems: A Practitioner's Survey","version":1},"cited_work":{"arxiv_id":"2505.03084","doi":null,"metadata_source":"pith","pith_arxiv_id":"2505.03084","snapshot_observed_at":"2026-08-06T11:54:43.858081Z","title":"Adversarial Attacks in Multimodal Systems: A Practitioner's Survey","venue":"cs.LG","work_id":"e147df60-0344-4610-ad12-fdc2bd906df7","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.975978Z"},"links":{"cited_paper":"/paper/2505.03084","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:d72ed2a58cb11b163da7877f9f8b76e146c851191412e5bcc25391f2bbad65aa","observation_id":"78a336fa-2d84-49a0-a459-d99fc6e57dbf","resolution":{"observed_at":"2026-08-06T11:54:43.863037Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-06T11:54:42.985770Z","title":"”Prompt Injection attack against LLM-integrated Appli- cations” arXiv preprint arXiv:2306.05499 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.985770Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:6bc58ac0c376c7ee8530d3c4783fc14d4ff586ef2f882fd2b64b08a26718f8bd","observation_id":"8cb51be9-59d3-4538-8bc7-c44f705f60b4","resolution":{"observed_at":"2026-08-06T11:54:42.985770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.00898","last_updated":"2024-01-31T19:52:00Z","snapshot_observed_at":"2026-08-06T01:29:20.953609Z","submitted_at":"2024-01-31T19:52:00Z","title":"An Early Categorization of Prompt Injection Attacks on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.00898","snapshot_observed_at":"2026-08-06T11:54:42.991098Z","title":"”An early categorization of prompt injection attacks on large language models” arXiv preprint arXiv:2402.00898 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.991098Z"},"links":{"cited_paper":"/paper/2402.00898","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:c9dbd328744b902d66b8e073701d91cd101e1146c44a0f3016eea1f5a73ba49a","observation_id":"b0fb3c20-d6dd-48da-a02f-d3d2e7691f1a","resolution":{"observed_at":"2026-08-06T11:54:42.991098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-06T11:54:42.996988Z","title":"”Adversarial Attacks on Multimodal Agents” arXiv preprint arXiv:2406.12814 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.996988Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:3ba0b02d301d41bd1f62fb89dcd69e948bfc005f1cd7420c5ad1dfc1dfb414b4","observation_id":"b75b21fd-8389-42fd-906e-28d015261e01","resolution":{"observed_at":"2026-08-06T11:54:42.996988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.13652","last_updated":"2025-08-01T18:25:19Z","snapshot_observed_at":"2026-08-07T16:56:47.807793Z","submitted_at":"2025-03-17T18:59:29Z","title":"Web Artifact Attacks Disrupt Vision Language Models","version":2},"cited_work":{"arxiv_id":"2503.13652","doi":null,"metadata_source":"pith","pith_arxiv_id":"2503.13652","snapshot_observed_at":"2026-08-06T11:54:43.783468Z","title":"Web Artifact Attacks Disrupt Vision Language Models","venue":"cs.CV","work_id":"e7869706-8e90-4db6-bb6a-fec001847e1c","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.004222Z"},"links":{"cited_paper":"/paper/2503.13652","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:4d23942dc01c3830be9c6ba531c7f43adf764e52b1c2b28b506839c8f471ab57","observation_id":"06bad409-a55c-41cf-b570-772d941b7300","resolution":{"observed_at":"2026-08-06T11:54:43.788498Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.383868Z","title":null,"venue":null,"work_id":"48e7f5bb-1c6d-40fb-bcf8-87b5b6d4d48a","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.010179Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:9d71b0b37560d3850794f101918c6361239010e959f0dbc839cd129695b201a3","observation_id":"89d03e20-79d7-4133-9a52-f2c60d123ec4","resolution":{"observed_at":"2026-08-06T11:54:44.388374Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.367941Z","title":"”Prompt injection attacks on vision-language models for surgical decision support” medRxiv (2025)","venue":null,"work_id":"c84117c8-0a3b-4baa-9a40-5b23d3886b05","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.016768Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:922726eecafdda8544d1947a4d7cd980d7fd515b98765d7d0395d188eef79347","observation_id":"61cd7451-7d28-4ebf-be93-ee74146bf449","resolution":{"observed_at":"2026-08-06T11:54:44.372916Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04655","last_updated":"2024-02-05T19:33:53Z","snapshot_observed_at":"2026-08-08T07:01:42.941395Z","submitted_at":"2023-10-07T02:18:52Z","title":"VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.04655","snapshot_observed_at":"2026-08-06T11:54:43.022503Z","title":"”VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models” arXiv preprint arXiv:2310.04655 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.022503Z"},"links":{"cited_paper":"/paper/2310.04655","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:58a684bce3e1cbdd46779e7f03e8e7f728510738096ab3b64a6911aa4b374a4b","observation_id":"5faea211-9aca-45a4-93cb-9df307c7998b","resolution":{"observed_at":"2026-08-06T11:54:43.022503Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.06793","last_updated":"2024-09-24T02:09:10Z","snapshot_observed_at":"2026-07-06T19:13:24.690465Z","submitted_at":"2024-09-10T18:02:51Z","title":"Adversarial Attacks to Multi-Modal Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.06793","snapshot_observed_at":"2026-08-06T11:54:43.027701Z","title":"”Adversarial Attacks to Multi-Modal Models” arXiv preprint arXiv:2409.06793 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.027701Z"},"links":{"cited_paper":"/paper/2409.06793","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:48f055773f50781112445d0ade3f5c11dbb0782918d74b1713fa261127dd90ed","observation_id":"7d133490-41c1-4cd4-92fe-41aa5c4f1c24","resolution":{"observed_at":"2026-08-06T11:54:43.027701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:43.032650Z","title":"”Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMs” arXiv preprint arXiv:2410.03768 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.032650Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:94dd5b98cc5808e205de161d8c1885eaa0ac3db4a10815bb3e867a0fe5c93856","observation_id":"b1d2853d-4266-4254-a13c-3334035f4fd6","resolution":{"observed_at":"2026-08-06T11:54:43.032650Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.12503","last_updated":"2025-06-11T23:27:36Z","snapshot_observed_at":"2026-07-06T17:46:50.682231Z","submitted_at":"2024-03-19T07:10:58Z","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.12503","snapshot_observed_at":"2026-08-06T11:54:43.037974Z","title":"”Securing Large Language Models: Threats, Vulner- abilities and Responsible Practices” arXiv preprint arXiv:2403.12503 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.037974Z"},"links":{"cited_paper":"/paper/2403.12503","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:acc4dc304c826561b04195b398ac47cf9536dd77c1ae0736b0e76bbc46771b08","observation_id":"e9f03677-1337-4149-808e-22d3de271ec2","resolution":{"observed_at":"2026-08-06T11:54:43.037974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.353033Z","title":null,"venue":null,"work_id":"c336c9c5-4323-4de7-921e-062e7b1e29e2","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.044187Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:9ef8f7193227fd851cec968e45c00c4d4733835720c65bb81f8601da95d6875c","observation_id":"05790bc7-0bd0-47fe-8d63-c173ba9f2dfd","resolution":{"observed_at":"2026-08-06T11:54:44.357472Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.337560Z","title":"”A deep learning-driven multi-layered steganographic approach for enhanced data security” Scientific Reports (2025)","venue":null,"work_id":"42facc79-0f04-485c-b402-2c4b7d199d1d","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.049734Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:7a4d546becbb464b61bf881f8e3ca28065cb82f84b8bd356bba146d7063e3fd2","observation_id":"c423b82f-43dc-4201-8622-adecfda238d7","resolution":{"observed_at":"2026-08-06T11:54:44.342391Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.322477Z","title":"”Cross: Diffusion model makes controllable, robust and se- cure image steganography” Advances in Neural Information Processing Systems (2024)","venue":null,"work_id":"280494a2-2c5f-40f4-bdc0-25957652b0b1","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.054591Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:29aceb8d6efabbb0d6bd3abbf0552b0547125b95a6427d0695b63fb7a15113de","observation_id":"b815fd14-b3d3-4ef2-9909-d1917dada538","resolution":{"observed_at":"2026-08-06T11:54:44.326963Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-06T11:54:43.059837Z","title":"”Defeating Prompt Injections by Design” arXiv preprint arXiv:2503.18813 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.059837Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:ba2b18163a5029c20f81f43934701a49eca6327bb0e3a497bd1f15b94334f4e0","observation_id":"93863ce8-500c-4d98-9452-654f0d4f6186","resolution":{"observed_at":"2026-08-06T11:54:43.059837Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.00020","last_updated":"2021-02-26T19:04:58Z","snapshot_observed_at":"2026-07-06T10:45:03.059688Z","submitted_at":"2021-02-26T19:04:58Z","title":"Learning Transferable Visual Models From Natural Language Supervision","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.00020","snapshot_observed_at":"2026-08-06T11:54:43.065058Z","title":"”Learning Transferable Visual Models From Natural Language Supervision” arXiv preprint arXiv:2103.00020 (2021)","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.065058Z"},"links":{"cited_paper":"/paper/2103.00020","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:7073baac0c02819f8daa4b948da6c4541ac31689fc9549f2241cd39bd5eac8bd","observation_id":"c1aa5956-f218-42c4-899f-c26180dafe67","resolution":{"observed_at":"2026-08-06T11:54:43.065058Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.08485","last_updated":"2023-12-11T17:46:14Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-17T17:59:25Z","title":"Visual Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.08485","snapshot_observed_at":"2026-08-06T11:54:43.070875Z","title":"”Visual Instruction Tuning” arXiv preprint arXiv:2304.08485 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.070875Z"},"links":{"cited_paper":"/paper/2304.08485","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:20870fef28034555fa7cc1937b808918ea32ee84e69bb58fb08a89dd553d3ffd","observation_id":"efaffa51-15c5-4033-92bc-22b8c0885f50","resolution":{"observed_at":"2026-08-06T11:54:43.070875Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2301.12597","last_updated":"2023-06-15T07:57:29Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-01-30T00:56:51Z","title":"BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2301.12597","snapshot_observed_at":"2026-08-06T11:54:43.076150Z","title":"”BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Models” arXiv preprint arXiv:2301.12597 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.076150Z"},"links":{"cited_paper":"/paper/2301.12597","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:d64677335cf675e6146088990f5dbf7080f857d61d6d9d3dc9e3587e3c892b4e","observation_id":"b7b1fc11-e328-4108-92ea-7790a1eec5a8","resolution":{"observed_at":"2026-08-06T11:54:43.076150Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.19287","last_updated":"2024-11-12T10:48:21Z","snapshot_observed_at":"2026-07-06T18:07:27.432252Z","submitted_at":"2024-04-30T06:34:21Z","title":"Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.19287","snapshot_observed_at":"2026-08-06T11:54:43.081752Z","title":"”Revisiting the Adversarial Robustness of Vi- sion Language Models: a Multimodal Perspective” arXiv preprint arXiv:2404.19287 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.081752Z"},"links":{"cited_paper":"/paper/2404.19287","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:20b57ea26652e45faea084d1ea09bcf62eed100d7765cb6d9f2fd328893e2677","observation_id":"d3863703-51e5-41df-9d6c-1d1c333341cb","resolution":{"observed_at":"2026-08-06T11:54:43.081752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.307420Z","title":"”LLM01:2025 Prompt Injection” Retrieved from https://genai.owasp.org/llmrisk/llm01-prompt-injection/ (2025)","venue":null,"work_id":"f6412f91-e31b-4c1a-8575-7c16840dec3f","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.088075Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:86b9ff3fc2e0aae65665c16393112358a944d54ad06045017cfa2a5a57fc2bfb","observation_id":"b6660585-77e4-41be-8d93-278b03665702","resolution":{"observed_at":"2026-08-06T11:54:44.312094Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.292476Z","title":"”Text-Based Prompt Injection Attack Using Mathematical Functions in Modern Large Language Models” Electronics, 13(24), 5008 (2024)","venue":null,"work_id":"e020e393-6a47-4875-b924-1de90cbe680d","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.093023Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:3a0a3e3da3edff37f8f108bb3c8e23a09a1dae1ccaedb461c53c94fb7f19f356","observation_id":"e18f1516-8b0b-41d8-9fd9-1a0c20477330","resolution":{"observed_at":"2026-08-06T11:54:44.297019Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.10529","last_updated":"2024-08-24T13:28:45Z","snapshot_observed_at":"2026-08-04T13:36:57.704335Z","submitted_at":"2024-05-17T04:19:19Z","title":"Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.10529","snapshot_observed_at":"2026-08-06T11:54:43.097851Z","title":"”Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors” arXiv preprint arXiv:2405.10529 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.097851Z"},"links":{"cited_paper":"/paper/2405.10529","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:81de0a54b09e9733810a8a455196063b66a93d494680e28653796e0cbe4b5928","observation_id":"ff24a6f7-1b78-4c9c-961c-100377eb7315","resolution":{"observed_at":"2026-08-06T11:54:43.097851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.03554","last_updated":"2024-08-07T05:30:10Z","snapshot_observed_at":"2026-07-06T18:57:43.764663Z","submitted_at":"2024-08-07T05:30:10Z","title":"Empirical Analysis of Large Vision-Language Models against Goal Hijacking via Visual Prompt Injection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.03554","snapshot_observed_at":"2026-08-06T11:54:43.102709Z","title":"”Empirical analysis of large vision-language models against goal hijacking via visual prompt injection” arXiv preprint arXiv:2408.03554 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.102709Z"},"links":{"cited_paper":"/paper/2408.03554","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:948c88cc11068d7b91d6e9a4aafe9e4aac9d2d952a81c3af4da6056d700291dc","observation_id":"66bdaf77-91db-4f8e-94f4-bc4d9b3abb2d","resolution":{"observed_at":"2026-08-06T11:54:43.102709Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.275431Z","title":"”Detecting LSB Steganography in Color and Gray- Scale Images” IEEE Multimedia (2001)","venue":null,"work_id":"6bccd717-46fd-45f5-994d-cc4442669ea2","year":2001},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.108618Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:c9e5b68264842265c366b924a4dd652e31b82c74edcc65ae37d14782908e891c","observation_id":"44c7eb62-663a-43ba-9778-8aaa00fd2949","resolution":{"observed_at":"2026-08-06T11:54:44.280152Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.259197Z","title":"”Image steganography techniques for resisting statistical steganalysis attacks: A systematic literature review” PLOS One, 19(9), e0308807 (2024)","venue":null,"work_id":"c9628d33-c756-47da-bc93-6d23af48e9d2","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.113193Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:373b87cd9a3ca13ca94beebc6c8b17c427e4d36ad16b1bb92f6cd1cf5621eafd","observation_id":"bbc8d8c9-e93d-47d2-b873-4ed7995c42f5","resolution":{"observed_at":"2026-08-06T11:54:44.263879Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.243378Z","title":"”Super-resolution deep neural network (SRDNN) based multi-image steganography for highly secured lossless image transmission” Scientific Reports, 14, 6104 (2024)","venue":null,"work_id":"74e34216-80a0-4b26-90dd-e7c9540b1135","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.118618Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:f52aa7b06dd904d6923c162ee1967e2330716d8658ee8946a3d9c6ec387062ab","observation_id":"270baea9-cb96-42de-8eaf-2e8f682e8dfd","resolution":{"observed_at":"2026-08-06T11:54:44.248568Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.227061Z","title":"”Comprehensive survey on image steganalysis using deep learning” Neural Computing and Applications (2024)","venue":null,"work_id":"0076de8e-c6f6-4b42-a9ef-9312342df2d8","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.123634Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:30fd3467d3f695e0463ec89abf7c3fdcd44f1de292158a4992600b9f77e83f6d","observation_id":"a8910583-ccd1-4868-9007-42ab78c296ab","resolution":{"observed_at":"2026-08-06T11:54:44.232576Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.210726Z","title":"”Enhancing Steganography Detection with AI: Fine-Tuning a Deep Residual Network for Spread Spectrum Image Steganography” PMC (2024)","venue":null,"work_id":"97675acd-ee61-48e8-b5f4-fea55c4c618c","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.128836Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:dcd84f696d7b2d8d3492389fba06560937883ea5ab1f10535970e46666ef8f2f","observation_id":"30efcbe0-0321-4a05-b971-2b5d5ebb4d57","resolution":{"observed_at":"2026-08-06T11:54:44.215604Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.194030Z","title":"”Digital image steganalysis network strengthening framework based on evolutionary algorithm” Scientific Reports (2025)","venue":null,"work_id":"c61dc937-0487-4a30-93ec-ffc8f605b1c3","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.133736Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:2d214265b8217e753961a5f79a0295486ba4d7b2e4ab55fabaaf67de176213df","observation_id":"0fd1c21d-9986-4e1d-bc6e-77c6063d7da6","resolution":{"observed_at":"2026-08-06T11:54:44.199128Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.178227Z","title":"”An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale” ICLR (2021)","venue":null,"work_id":"3744aa0c-b575-4b14-b193-93e390513f84","year":2021},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.138302Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:c883fd1fc6e57804f315f4e99277a485d33d62f824f68f101827b0abaf8cb53d","observation_id":"7914237f-2d7f-42e4-9bd3-efdbfbac8e98","resolution":{"observed_at":"2026-08-06T11:54:44.182922Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03744","last_updated":"2024-05-15T19:22:44Z","snapshot_observed_at":"2026-07-06T16:28:22.350574Z","submitted_at":"2023-10-05T17:59:56Z","title":"Improved Baselines with Visual Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03744","snapshot_observed_at":"2026-08-06T11:54:43.143299Z","title":"”Improved Baselines with Visual Instruction Tuning” arXiv preprint arXiv:2310.03744 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.143299Z"},"links":{"cited_paper":"/paper/2310.03744","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:866b058cecb44f1806144d96af7198a4ce5ecec9b88cf5aa2a24346f087ffd3b","observation_id":"76282668-2978-4050-a710-ff401cb55df0","resolution":{"observed_at":"2026-08-06T11:54:43.143299Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.162632Z","title":null,"venue":null,"work_id":"02a9fa11-e08c-43bb-b07b-56ad0a85ad1b","year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.148125Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:75f738526792949b22a1678fc514bf44e571f4502195b7016349db31ce58a3fc","observation_id":"c756846d-6e30-4681-94be-ad3a3ba03b22","resolution":{"observed_at":"2026-08-06T11:54:44.167283Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2201.12086","last_updated":"2022-02-15T05:43:32Z","snapshot_observed_at":"2026-08-02T08:01:43.194717Z","submitted_at":"2022-01-28T12:49:48Z","title":"BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.12086","snapshot_observed_at":"2026-08-06T11:54:43.153675Z","title":"”BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generation” arXiv preprint arXiv:2201.12086 (2022)","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.153675Z"},"links":{"cited_paper":"/paper/2201.12086","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:a2454dec19ee16e023582d2c4226d4b3b0f9ab6f601a9172ef0d8bb7f514dcac","observation_id":"546f64ed-bc4f-46f2-b00c-a17c7af023ba","resolution":{"observed_at":"2026-08-06T11:54:43.153675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.146635Z","title":"”PSNR vs SSIM: imperceptibility quality assessment for image steganography” Multimedia Tools and Applications, 80, 8423- 8444 (2021)","venue":null,"work_id":"6c2df04f-f8b9-45ae-8f5d-2c567ed96059","year":2021},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.158623Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:f44f150e681b4a22c0538c4bf0993e728bc8afa2764b6600a8692db3940fde7e","observation_id":"efa2767d-71fe-4e26-b13c-928d44c44778","resolution":{"observed_at":"2026-08-06T11:54:44.151445Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.131144Z","title":"”Hiding data in images by simple LSB substitution” Pattern Recognition (2004)","venue":null,"work_id":"b4fe5545-5bfa-4230-b4bb-a02e70a97242","year":2004},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.163327Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:a9838290be0f064b600c90e27d7c456c4321a47e85878811daa4a863e556dee8","observation_id":"fc260326-9023-4e34-8a65-37a3c558bcd3","resolution":{"observed_at":"2026-08-06T11:54:44.135985Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.115795Z","title":"”Attacks on steganographic systems” Information Hiding Workshop (1999)","venue":null,"work_id":"83d3b27b-c8a9-42f1-bb34-aeb50ffe9bbc","year":1999},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.169761Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:4729e086ee87dac6fc99f7c067a0f978dab86eb2919e4288cc4ba2eed8aa326a","observation_id":"099316a3-ff37-4b6f-9ce8-96cef00cb4f2","resolution":{"observed_at":"2026-08-06T11:54:44.120681Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.100814Z","title":"”Secure spread spectrum watermarking for multimedia” IEEE Transactions on Image Processing (1997)","venue":null,"work_id":"8acde51d-004b-484d-8ba4-829f827b5f37","year":1997},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.176321Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:2cf3c166034303ed006d4074e5b2f4a9d774cdf3a4ad9cd95887b404cd9b11d8","observation_id":"f684a847-a30f-4025-aba8-cd3f807c893b","resolution":{"observed_at":"2026-08-06T11:54:44.105413Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.083416Z","title":"”An Analysis of LSB & DCT based Steganography”","venue":null,"work_id":"860f006c-faeb-4a13-937e-2fed87532b3f","year":null},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.182439Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:54e04c6f79a841da953a6b7aa8bcce490d0cbed2197b79c08fa0309f2dacdff3","observation_id":"d6588eb5-fb3a-4692-bf8b-e625baa6c2f9","resolution":{"observed_at":"2026-08-06T11:54:44.088020Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.12503","last_updated":"2023-04-25T00:19:23Z","snapshot_observed_at":"2026-07-06T15:19:35.578148Z","submitted_at":"2023-04-25T00:19:23Z","title":"CNN-Assisted Steganography -- Integrating Machine Learning with Established Steganographic Techniques","version":1},"cited_work":{"arxiv_id":"2304.12503","doi":null,"metadata_source":"pith","pith_arxiv_id":"2304.12503","snapshot_observed_at":"2026-08-06T11:54:43.472351Z","title":"CNN-Assisted Steganography -- Integrating Machine Learning with Established Steganographic Techniques","venue":"cs.CR","work_id":"f8945067-7c92-4b31-9ba2-7f24cc45f35c","year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.188737Z"},"links":{"cited_paper":"/paper/2304.12503","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:86cf023c56854abd3e1b5dcdd9a0a3c9df9d86c4a607d73e3e4746723ace0949","observation_id":"2452c1e6-1fce-408c-9e48-a2124e8eee8d","resolution":{"observed_at":"2026-08-06T11:54:43.478459Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.066948Z","title":"”Hiding images in plain sight: Deep steganography” Advances in Neural Information Processing Systems (2017)","venue":null,"work_id":"5c362aa8-dff5-43b4-aac6-e004f9a04f8a","year":2017},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.193475Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:ac84615c78b4d1e80b1206850504351392000e30225cb8abed5cdbda04569295","observation_id":"8183c266-9177-4a62-8d78-df6ac83b5573","resolution":{"observed_at":"2026-08-06T11:54:44.072404Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-07-06T14:55:08.682906Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-06T11:54:43.197642Z","title":"”Not what you’ve signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injec- tion” arXiv preprint arxiv:2302.12173 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.197642Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:b4c67cb51cb0be5ebff37e08f1cc92e9275d5c27eaf2bdcea6b5e0c2b82e9582","observation_id":"3dd6cc42-4794-4c63-8194-cced2f12c9f0","resolution":{"observed_at":"2026-08-06T11:54:43.197642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.044785Z","title":"”Peak signal-to-noise ratio” Wikipedia","venue":null,"work_id":"577d8a93-a6d2-4950-82e0-dd097434b1f2","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.201965Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:7ef7314c12f1a7d8aa6e96ed71fe307a7f0b5adf919c3247d10c51a3f1744a8c","observation_id":"6a9f7517-49f3-4676-9a0c-5e70355a2cdf","resolution":{"observed_at":"2026-08-06T11:54:44.049748Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.027754Z","title":"”Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game” arXiv preprint (2023)","venue":null,"work_id":"2ff3dfa7-3360-4ee4-9963-09616f43d6b1","year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.206614Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:09115d09b011a79a8b37a279cd28052c77b9e899ec07eff0028b270081aa793d","observation_id":"8a574751-d214-443a-ac91-1db79e52a918","resolution":{"observed_at":"2026-08-06T11:54:44.032866Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:44.010039Z","title":"”A survey on large language model (llm) security and privacy: The good, the bad, and the ugly” High-Confidence Computing, 4, 100211 (2024)","venue":null,"work_id":"6a32289d-6fca-42f8-9e2d-a6c2d7368233","year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.210977Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:30f19d98937ef15abdd275b415e261294fb22b481174a455f065312360e6e601","observation_id":"1f633e2a-357d-4cbb-98ad-f6f0f3e823a9","resolution":{"observed_at":"2026-08-06T11:54:44.015017Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:43.993991Z","title":"”Exploring steganography: Seeing the unseen” Computer (2008)","venue":null,"work_id":"f249000d-22ae-41a1-9397-f976444a0f6a","year":2008},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.215261Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:29a15048e070fd46514568c66ca9f83f5a262f660b61c39dec3ccacbbed5a385","observation_id":"b5e09b79-2780-4426-90c7-d3cdfe4dc690","resolution":{"observed_at":"2026-08-06T11:54:43.998757Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:43.976925Z","title":"”Steganalysis by subtractive pixel adjacency matrix” IEEE Transactions on Information Forensics and Security","venue":null,"work_id":"7ee3e8f1-87cb-4400-8fa1-48b9d1220e9a","year":null},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.219502Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:2aacd08e435d1731588676a0e70b7e763e82edad77e04641fedd30f6857c0b50","observation_id":"9d955cd4-0d35-433e-81a8-52d7524f3468","resolution":{"observed_at":"2026-08-06T11:54:43.982581Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.14565","last_updated":"2024-03-19T22:53:25Z","snapshot_observed_at":"2026-08-06T22:33:34.254048Z","submitted_at":"2023-06-26T10:26:33Z","title":"Mitigating Hallucination in Large Multi-Modal Models via Robust Instruction Tuning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.14565","snapshot_observed_at":"2026-08-06T11:54:43.224102Z","title":"”Mitigating hallucination in large multi-modal models via robust instruction tuning” arXiv preprint arXiv:2306.14565 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.224102Z"},"links":{"cited_paper":"/paper/2306.14565","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:6b8718275f3c549e395e637fc5a52e56ee85461793c16109cbce657f28d96fa3","observation_id":"2154cf33-6248-4ac0-b8d1-10c78b5966e0","resolution":{"observed_at":"2026-08-06T11:54:43.224102Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:43.961080Z","title":"”Visual Adversarial Examples Jailbreak Aligned Large Language Models” AAAI Conference on Artificial Intelligence (2023)","venue":null,"work_id":"ca92b0ca-239b-4aa6-ba49-e549a6709694","year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.228580Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:9e74e5a5a8d104e1a7e7831f1ad76a5ebbc6cd861de28831b847171bbe8afb16","observation_id":"c1851ec6-ff7a-4618-983d-1670f5d9ff74","resolution":{"observed_at":"2026-08-06T11:54:43.965905Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12336","last_updated":"2024-06-05T15:32:03Z","snapshot_observed_at":"2026-07-06T17:32:24.161667Z","submitted_at":"2024-02-19T18:09:48Z","title":"Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12336","snapshot_observed_at":"2026-08-06T11:54:43.232843Z","title":"”Robust CLIP: Unsupervised Adversarial Fine- Tuning of Vision Embeddings for Robust Large Vision-Language Mod- els” arXiv preprint arXiv:2402.12336 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.232843Z"},"links":{"cited_paper":"/paper/2402.12336","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:69ddeb5db967b29a0d8d6bbcd60a47081e2c62a66f133130676900a040fefc58","observation_id":"44628e35-95c1-46cb-a172-88e77b633620","resolution":{"observed_at":"2026-08-06T11:54:43.232843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.03777","last_updated":"2023-12-08T15:41:28Z","snapshot_observed_at":"2026-08-09T00:38:43.571831Z","submitted_at":"2023-12-06T04:59:56Z","title":"On the Robustness of Large Multimodal Models Against Image Adversarial Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.03777","snapshot_observed_at":"2026-08-06T11:54:43.237746Z","title":"”On the Robustness of Large Multimodal Models Against Image Adversarial Attacks” arXiv preprint arXiv:2312.03777 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.237746Z"},"links":{"cited_paper":"/paper/2312.03777","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:2f76eb642516c81a7043954557833c593d83c751c442ebae5175aa5cac4860c5","observation_id":"ab267661-edec-4b18-867d-7e5e639b23d1","resolution":{"observed_at":"2026-08-06T11:54:43.237746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","snapshot_observed_at":"2026-08-04T02:14:14.922401Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.09259","snapshot_observed_at":"2026-08-06T11:54:43.242527Z","title":"”Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey” arXiv preprint arXiv:2411.09259 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.242527Z"},"links":{"cited_paper":"/paper/2411.09259","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:a5354dc62e4bbda2758bd322fecced333babcf373c9d3fde289260026ba4ea93","observation_id":"9e0b78cb-4f63-44f2-bcbf-5a7b8fd736bb","resolution":{"observed_at":"2026-08-06T11:54:43.242527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2501.01042","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:54:43.350184Z","title":"”Image-based Multimodal Models as Intruders: Trans- ferable Multimodal Attacks on Video-based MLLMs” arXiv preprint arXiv:2501.01042 (2025)","venue":null,"work_id":"37c5ebc1-928a-4a8c-9c9c-c1b736453e9e","year":2025},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:43.247703Z"},"links":{"citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:93bbcc2ea069717a49bd467e2c1daab5fc66abec29ef6d21d361355feaadf8cd","observation_id":"5a3eaf97-d3b9-4e58-8a25-23c033edbcfa","resolution":{"observed_at":"2026-08-06T11:54:43.360766Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding"},"reference_resolution":{"displayed":57,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":29,"verified_exact":4,"verified_fuzzy":24},"total_outbound_references":57},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 57 of 57 outbound references and 0 inbound Pith citation observations for arXiv:2507.22304."}