204 citations · 256 across the 26 of their papers we have counts for
Showing cs.CRShow all
3 papers · 1 filter
cs.CR2026
A2M: Trace-Optimized Agent Hijacking in the MCP Ecosystem
Laizhen Li, Xuan Wang, Peicheng Zhao +4
Agents using the Model Context Protocol (MCP) rely on semantic matching to select tools from third-party servers, exposing a semantic supply-chain risk through attacker-controlled…
cs.CR2025
Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents
Xuan Wang, Siyuan Liang, Zhe Liu +5
Mobile agents powered by vision-language models (VLMs) are increasingly adopted for tasks such as UI automation and camera-based assistance. These agents are typically fine-tuned u…
cs.CR2022
Flareon: Stealthy any2any Backdoor Injection via Poisoned Augmentation
Tianrui Qin, Xianghuan He, Xitong Gao +3
Open software supply chain attacks, once successful, can exact heavy costs in mission-critical applications. As open-source ecosystems for deep learning flourish and become increas…