activity
20222026
most citedTeams of LLM Agents can Exploit Zero-Day Vulnerabilities

19 citations · 40 across the 12 of their papers we have counts for

collaborators

13 papers

cs.CR2026

Understanding and Enhancing Backdoor Persistency in LLM Agent Post-Training

Qiusi Zhan, Nian Lyu, Stephanie Ding +5

Developers can build LLM agents by adapting third-party models through benign post-training. We study a supply-chain threat in which an attacker supplies a model with a backdoor: h…

cs.AI2026

Securing Multimodal AI through Internal Information Decomposition

Jehyeok Yeon, Hyeonjeong Ha, Qiusi Zhan +1

Multimodal large language models introduce attack surfaces absent in unimodal systems: adversaries can distribute malicious intent across modalities to evade unimodal safeguards. T…

cs.AI2025

BEAT: Visual Backdoor Attacks on VLM-based Embodied Agents via Contrastive Trigger Learning

Qiusi Zhan, Hyeonjeong Ha, Rui Yang +7

Recent advances in Vision-Language Models (VLMs) have propelled embodied agents by enabling direct perception, reasoning, and planning task-oriented actions from visual inputs. How…

cs.CL2025

SafeSearch: Do Not Trade Safety for Utility in LLM Search Agents

Qiusi Zhan, Angeline Budiman-Chan, Abdelrahman Zayed +3

Large language model (LLM) based search agents iteratively generate queries, retrieve external information, and reason to answer open-domain questions. While researchers have prima…

cs.CR2025

Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Qiusi Zhan, Richard Fang, Henil Shalin Panchal +1

Large Language Model (LLM) agents exhibit remarkable performance across diverse applications by using external tools to interact with environments. However, integrating external to…

cs.LG2025

MM-PoisonRAG: Disrupting Multimodal RAG with Local and Global Poisoning Attacks

Hyeonjeong Ha, Qiusi Zhan, Jeonghwan Kim +6

Retrieval-augmented generation (RAG) has become a common practice in multimodal large language models (MLLM) to enhance factual grounding and reduce hallucination. Yet, its relianc…

cs.MA2024★ 19 cited

Teams of LLM Agents can Exploit Zero-Day Vulnerabilities

Yuxuan Zhu, Antony Kellermann, Akul Gupta +4

LLM agents have become increasingly sophisticated, especially in the realm of cybersecurity. Researchers have shown that LLM agents can exploit real-world vulnerabilities when give…

cs.CL2024★ 6 cited

InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents

Qiusi Zhan, Zhixiang Liang, Zifan Ying +1

Recent work has embodied LLMs as agents, allowing them to access tools, perform actions, and interact with external content (e.g., emails or websites). However, external content in…

cs.CR2024★ 10 cited

LLM Agents can Autonomously Hack Websites

Richard Fang, Rohan Bindu, Akul Gupta +2

In recent years, large language models (LLMs) have become increasingly capable and can now interact with tools (i.e., call functions), read documents, and recursively call themselv…

cs.CL2023★ 2 cited

Removing RLHF Protections in GPT-4 via Fine-Tuning

Qiusi Zhan, Richard Fang, Rohan Bindu +3

As large language models (LLMs) have increased in their capabilities, so does their potential for dual use. To reduce harmful outputs, produces and vendors of LLMs have used reinfo…

cs.CL2023★ 1 cited

GLEN: General-Purpose Event Detection for Thousands of Types

Qiusi Zhan, Sha Li, Kathryn Conger +3

The progress of event extraction research has been hindered by the absence of wide-coverage, large-scale datasets. To make event extraction systems more accessible, we build a gene…

cs.CL2022★ 2 cited

ConFiguRe: Exploring Discourse-level Chinese Figures of Speech

Dawei Zhu, Qiusi Zhan, Zhejian Zhou +3

Figures of speech, such as metaphor and irony, are ubiquitous in literature works and colloquial conversations. This poses great challenge for natural language understanding since…

cs.CL2022

EAE: Improving Consistency with Event Awareness for Document-Level Argument Extraction

Qi Zeng, Qiusi Zhan, Heng Ji

Events are inter-related in documents. Motivated by the one-sense-per-discourse theory, we hypothesize that a participant tends to play consistent roles across multiple events in t…