{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:HDPKDV7FF4ADC7VHG26Y3PR2MC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"383d9fa6b5126d8a377d7dc1042520d908e945b0f24fa8a219d2ad23541ce2eb","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-25T05:13:23Z","title_canon_sha256":"6f5cf0cf66d3561f872621668f422c8a67d4d289cda314888c5fc6ffe5f5e8a8"},"schema_version":"1.0","source":{"id":"2508.17674","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.17674","created_at":"2026-07-05T12:07:10Z"},{"alias_kind":"arxiv_version","alias_value":"2508.17674v2","created_at":"2026-07-05T12:07:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.17674","created_at":"2026-07-05T12:07:10Z"},{"alias_kind":"pith_short_12","alias_value":"HDPKDV7FF4AD","created_at":"2026-07-05T12:07:10Z"},{"alias_kind":"pith_short_16","alias_value":"HDPKDV7FF4ADC7VH","created_at":"2026-07-05T12:07:10Z"},{"alias_kind":"pith_short_8","alias_value":"HDPKDV7F","created_at":"2026-07-05T12:07:10Z"}],"graph_snapshots":[{"event_id":"sha256:2b96311b6e01eca68d667a38722e375aab5fe9b4b67f02ad6361ab3b426d69a7","target":"graph","created_at":"2026-07-05T12:07:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.17674/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We introduce Advertisement Embedding Attacks (AEA), a new class of LLM security threats that stealthily inject promotional or malicious content into model outputs and AI agents. AEA operate through two low-cost vectors: (1) hijacking third-party service-distribution platforms to prepend adversarial prompts, and (2) publishing back-doored open-source checkpoints fine-tuned with attacker data. Unlike conventional attacks that degrade accuracy, AEA subvert information integrity, causing models to return covert ads, propaganda, or hate speech while appearing normal. We detail the attack pipeline, ","authors_text":"Jinwen Tang, Qiming Guo, Xingran Huang","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-25T05:13:23Z","title":"Attacking LLMs and AI Agents: Advertisement Embedding Attacks Against Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.17674","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f978038da722ceb82bdf15107aef7ea0fb5fe93ade36ef10f9193822cbab0f8d","target":"record","created_at":"2026-07-05T12:07:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"383d9fa6b5126d8a377d7dc1042520d908e945b0f24fa8a219d2ad23541ce2eb","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-25T05:13:23Z","title_canon_sha256":"6f5cf0cf66d3561f872621668f422c8a67d4d289cda314888c5fc6ffe5f5e8a8"},"schema_version":"1.0","source":{"id":"2508.17674","kind":"arxiv","version":2}},"canonical_sha256":"38dea1d7e52f00317ea736bd8dbe3a60bf2ba6dbee0dedae1253880d52a1ab18","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"38dea1d7e52f00317ea736bd8dbe3a60bf2ba6dbee0dedae1253880d52a1ab18","first_computed_at":"2026-07-05T12:07:10.793116Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:07:10.793116Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6ETQyIWtBvbSb1vkfDjcxvF0CTvI34nJmhppM9DnEX9s3H9muU19+A94y0i977RIYRhOWDORV7+cE7O2XBlHBg==","signature_status":"signed_v1","signed_at":"2026-07-05T12:07:10.793636Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.17674","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f978038da722ceb82bdf15107aef7ea0fb5fe93ade36ef10f9193822cbab0f8d","sha256:2b96311b6e01eca68d667a38722e375aab5fe9b4b67f02ad6361ab3b426d69a7"],"state_sha256":"601190a5df06034d3a2cfab3cb2505e9bc6ab8eafe41be1098c682f5af1c6856"}