{"as_of":"2026-08-11T19:41:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:13dc74e53baed7216dd4abefd07d79efad387a4ce81fa1e06b11c855c3311d3a","coverage":[{"denominator":29,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":29,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T16:34:05.446734Z","state":"measured"},{"denominator":33,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":33,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T04:15:53.991771Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-22T12:51:33.393440Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"cited_work":{"arxiv_id":"2507.13169","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.13169","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Prompt injection 2.0: Hybrid ai threats","venue":null,"work_id":"0708d8cf-8ee2-43f8-b3f3-d6b3df1ea906","year":2025},"citing_paper":{"arxiv_id":"2509.06921","last_updated":"2026-04-15T05:15:58Z","snapshot_observed_at":"2026-08-11T16:57:51.459332Z","submitted_at":"2025-09-08T17:33:59Z","title":"Neuro-Symbolic AI for Cybersecurity: State of the Art, Challenges, and Opportunities","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-18T18:04:09.528381Z"},"links":{"cited_paper":"/paper/2507.13169","citing_paper":"/paper/2509.06921"},"observation_digest":"sha256:572631edf0023808267c064c61585ea2cf866598243f728bfa1a62ac96538c84","observation_id":"e5e416d9-e605-440c-b626-69eb3f50bd19","resolution":{"observed_at":"2026-05-18T18:06:43.025006Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"cited_work":{"arxiv_id":"2507.13169","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.13169","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Prompt injection 2.0: Hybrid ai threats","venue":null,"work_id":"0708d8cf-8ee2-43f8-b3f3-d6b3df1ea906","year":2025},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-11T00:12:51.643027Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2507.13169","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:e81c56a700539093a105b2ea371c6ea517fbae280c66b5e9e89f701640347acd","observation_id":"406e2f80-5836-4e26-8605-0a1161a23245","resolution":{"observed_at":"2026-05-18T03:42:22.431852Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"cited_work":{"arxiv_id":"2507.13169","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.13169","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Prompt injection 2.0: Hybrid ai threats","venue":null,"work_id":"0708d8cf-8ee2-43f8-b3f3-d6b3df1ea906","year":2025},"citing_paper":{"arxiv_id":"2512.06556","last_updated":"2026-05-21T13:44:50Z","snapshot_observed_at":"2026-07-06T22:37:59.340166Z","submitted_at":"2025-12-06T20:07:58Z","title":"Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-22T12:46:44.819224Z"},"links":{"cited_paper":"/paper/2507.13169","citing_paper":"/paper/2512.06556"},"observation_digest":"sha256:63780b0da7cddc9e406be64f3195762f1ddc220854b98c16d00896af1a0d8b54","observation_id":"621df737-31d9-4a80-9d4e-e92f691c623e","resolution":{"observed_at":"2026-05-22T12:51:33.396810Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.13169","snapshot_observed_at":"2026-08-11T04:15:53.991771Z","title":"Prompt Injection 2.0: Hybrid AI Threats","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.07808","last_updated":"2026-08-07T23:16:35Z","snapshot_observed_at":"2026-08-11T19:13:25.157174Z","submitted_at":"2026-08-07T23:16:35Z","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T04:15:53.991771Z"},"links":{"cited_paper":"/paper/2507.13169","citing_paper":"/paper/2608.07808"},"observation_digest":"sha256:18a21942b0e11409db5ae932e81bdd64e1d0cb95c11a10bebb4d1aef66bf9814","observation_id":"3e6f750e-bd37-43e2-be17-717b63583de1","resolution":{"observed_at":"2026-08-11T04:15:53.991771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2507.13169/citation-record","integrity":"/paper/2507.13169/integrity","json":"/paper/2507.13169/citation-record.json","paper":"/paper/2507.13169"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-09T15:15:59.049198Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-06T16:34:03.088522Z","title":"J., et al","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.088522Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:0cd4d49d804b556f4249d666a400a17ed77c678d6e13889196132d403c627414","observation_id":"e22e7f76-32cd-4cb3-869f-3183830e0afa","resolution":{"observed_at":"2026-08-06T16:34:03.088522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:07.946109Z","title":"C., & Heichman, R","venue":null,"work_id":"862ee3aa-1758-4358-867a-a8ac03b0999a","year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.214886Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:a45c6cd11143724fecf8ba8cb6477097137aa334d0aafd7fbf69ba3ba173e913","observation_id":"28fbf030-816c-41ff-903c-2df09f0a7f9c","resolution":{"observed_at":"2026-08-06T16:34:08.065627Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-06T16:34:03.313953Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.313953Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:390814f3044f10a04633e8b1eff7545b3b08e2a71f0654cc0b7de57474d4daeb","observation_id":"4ba24e3f-f487-4b02-a626-63b6ad009055","resolution":{"observed_at":"2026-08-06T16:34:03.313953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04957","last_updated":"2024-03-07T23:46:20Z","snapshot_observed_at":"2026-08-11T19:01:44.147585Z","submitted_at":"2024-03-07T23:46:20Z","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04957","snapshot_observed_at":"2026-08-06T16:34:03.407180Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.407180Z"},"links":{"cited_paper":"/paper/2403.04957","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:550b4428054974e42d393f0aeaa72aa7b9b683b4b958f6dbc0a570884a755c8d","observation_id":"513e5f8c-0e6b-4d1c-aa3d-8110b7bcb807","resolution":{"observed_at":"2026-08-06T16:34:03.407180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.01990","last_updated":"2025-01-27T20:37:59Z","snapshot_observed_at":"2026-07-06T16:02:19.253303Z","submitted_at":"2023-08-03T19:03:18Z","title":"From Prompt Injections to SQL Injection Attacks: How Protected is Your LLM-Integrated Web Application?","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.01990","snapshot_observed_at":"2026-08-06T16:34:03.503194Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.503194Z"},"links":{"cited_paper":"/paper/2308.01990","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:fe0e80bd15a4746a3ffe134d26f351f203d1449168ba6d54d93c9a97ea09048e","observation_id":"2c8e481a-6979-4c1e-91d7-eb514330e081","resolution":{"observed_at":"2026-08-06T16:34:03.503194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.14442","last_updated":"2024-11-05T18:38:30Z","snapshot_observed_at":"2026-07-06T19:53:56.407834Z","submitted_at":"2024-11-05T18:38:30Z","title":"AI Ethics by Design: Implementing Customizable Guardrails for Responsible AI Development","version":1},"cited_work":{"arxiv_id":"2411.14442","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.14442","snapshot_observed_at":"2026-08-06T16:34:06.334600Z","title":"AI Ethics by Design: Implementing Customizable Guardrails for Responsible AI Development","venue":"cs.CY","work_id":"761d77b0-5aad-482f-be8d-582cdcc1771a","year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.624743Z"},"links":{"cited_paper":"/paper/2411.14442","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:0869af2a855bbdd7cd88d6e87ba1e8ff37dcad4756094f8f860e239e5f992dce","observation_id":"81b7056d-e92d-4262-a83a-cfadff70051b","resolution":{"observed_at":"2026-08-06T16:34:06.402350Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.08837","last_updated":"2025-06-27T11:13:27Z","snapshot_observed_at":"2026-08-09T15:19:11.106490Z","submitted_at":"2025-06-10T14:23:55Z","title":"Design Patterns for Securing LLM Agents against Prompt Injections","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.08837","snapshot_observed_at":"2026-08-06T16:34:03.695223Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.695223Z"},"links":{"cited_paper":"/paper/2506.08837","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:0bf5abeedcb7ae2d96245f3a0759b26584d4346f905b63012846831c642d404f","observation_id":"74108fff-12a9-4135-8e67-a6a18bca8085","resolution":{"observed_at":"2026-08-06T16:34:03.695223Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:07.640743Z","title":null,"venue":null,"work_id":"0a999f25-da6a-482c-b3c4-b642e5897b85","year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.778176Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:5e12db6bc6336d9a16099c5ff0e73886ae36412326fbd44ea4fc7e11ece34bce","observation_id":"9ffcd4e8-6f3c-4856-9cce-4421416681fa","resolution":{"observed_at":"2026-08-06T16:34:07.818080Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-02T17:12:52.352951Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.07283","snapshot_observed_at":"2026-08-06T16:34:03.842222Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.842222Z"},"links":{"cited_paper":"/paper/2410.07283","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:76610e4d96d7581dcad7f33c383b9f10ece36d6e03649ed9eb4e799571657b67","observation_id":"67a374ee-c085-4de3-abb1-fb82d9c1fefe","resolution":{"observed_at":"2026-08-06T16:34:03.842222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-06T16:34:03.919189Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:03.919189Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:2e5ff01c4e27f6b7e673f1a34828ce5fdd33a02cfc6d8d2df12435900f73d8d6","observation_id":"7f4cdc41-655f-434b-9be2-a74bc3172ba9","resolution":{"observed_at":"2026-08-06T16:34:03.919189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:07.454906Z","title":null,"venue":null,"work_id":"838f528a-28d6-447c-8b0b-22b5f880ee25","year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.001119Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:87e8413366e7fef12a8cc7434b434851ffa1389fb105c40982294ba07a0cc499","observation_id":"1c073cff-1405-48a5-91aa-b7a78fc582b7","resolution":{"observed_at":"2026-08-06T16:34:07.505229Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:07.167009Z","title":null,"venue":null,"work_id":"97180fb5-1752-4932-bf4b-ab84d7849105","year":2023},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.096370Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:0741f9546114e55728d14722b6f445a320f0bc8031ccbc8abc80048c881a8dd4","observation_id":"43d9d6d4-67cb-4608-89d9-d5c6532faf25","resolution":{"observed_at":"2026-08-06T16:34:07.307622Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:06.963722Z","title":null,"venue":null,"work_id":"881e011b-731f-4fcf-84d7-86b55762e35a","year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.192243Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:fc807b2788e4150ebe67ccdbcec7131eb331448010cc66b51e867d694bc5a619","observation_id":"0c024737-d7c3-4a78-9b2f-f2c999750230","resolution":{"observed_at":"2026-08-06T16:34:07.022398Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-08-11T04:13:43.714152Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-06T16:34:04.277916Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.277916Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:1442fe6c390b7e00d4ed86f2eb65f77a397e9174af4e7fd185d72f48745e26ea","observation_id":"2783b487-2406-40aa-aff0-c2ebdf3fd4ae","resolution":{"observed_at":"2026-08-06T16:34:04.277916Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:06.842152Z","title":null,"venue":null,"work_id":"6f20eda0-6691-4316-84b3-5334b321f66f","year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.375475Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:bdd3e9d9ebc5ddba6ab26dfc06b1dc08f708931f081a1e677360ba99013295b3","observation_id":"932b69ab-e882-49e0-a697-a9bbcf822bb9","resolution":{"observed_at":"2026-08-06T16:34:06.877652Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.14281","last_updated":"2026-04-20T13:26:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-18T14:20:54Z","title":"XOXO: Stealthy Cross-Origin Context Poisoning Attacks against AI Coding Assistants","version":4},"cited_work":{"arxiv_id":"2503.14281","doi":null,"metadata_source":"pith","pith_arxiv_id":"2503.14281","snapshot_observed_at":"2026-08-06T16:34:06.025828Z","title":"XOXO: Stealthy Cross-Origin Context Poisoning Attacks against AI Coding Assistants","venue":"cs.CR","work_id":"b263c9f4-1c5d-4c0a-b3a2-8b463170cc7a","year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.450450Z"},"links":{"cited_paper":"/paper/2503.14281","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:491629cfbd7b8d5100ad6db2ffb7f41772b76f53828dd1dabc026c2f7d9da02a","observation_id":"e379a488-61be-486e-b10a-30e052f70bbd","resolution":{"observed_at":"2026-08-06T16:34:06.094966Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.13076","last_updated":"2025-05-19T13:10:29Z","snapshot_observed_at":"2026-08-07T15:43:14.506561Z","submitted_at":"2025-05-19T13:10:29Z","title":"The Hidden Dangers of Browsing AI Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.13076","snapshot_observed_at":"2026-08-06T16:34:04.510763Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.510763Z"},"links":{"cited_paper":"/paper/2505.13076","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:58b8d4f8057b774ba9f00fe57c798430581f811222c42ee4f14f8250bc57d27a","observation_id":"97ca63c5-25a5-4980-94cb-1c29107c98e0","resolution":{"observed_at":"2026-08-06T16:34:04.510763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13459","last_updated":"2025-05-29T14:42:38Z","snapshot_observed_at":"2026-08-04T11:15:46.100317Z","submitted_at":"2024-02-21T01:30:03Z","title":"Learning to Poison Large Language Models for Downstream Manipulation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13459","snapshot_observed_at":"2026-08-06T16:34:04.598552Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.598552Z"},"links":{"cited_paper":"/paper/2402.13459","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:dc97721d0a8954804a6f6959327726651cc28d6c20321439185f7edab4002bc5","observation_id":"48ce344e-7e62-45bd-8d86-18374023e328","resolution":{"observed_at":"2026-08-06T16:34:04.598552Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.17196","last_updated":"2024-04-26T07:11:18Z","snapshot_observed_at":"2026-07-06T18:05:59.538624Z","submitted_at":"2024-04-26T07:11:18Z","title":"Human-Imperceptible Retrieval Poisoning Attacks in LLM-Powered Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.17196","snapshot_observed_at":"2026-08-06T16:34:04.667309Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.667309Z"},"links":{"cited_paper":"/paper/2404.17196","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:5bc05a76f2c0a5b57ba93668fc9078d5f9efe9514d586ee5168f15912726b5fc","observation_id":"fb31b710-e5d8-497a-9bb8-b335be88601d","resolution":{"observed_at":"2026-08-06T16:34:04.667309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.16957","last_updated":"2025-05-22T17:36:33Z","snapshot_observed_at":"2026-08-09T00:25:53.983420Z","submitted_at":"2025-05-22T17:36:33Z","title":"Invisible Prompts, Visible Threats: Malicious Font Injection in External Resources for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.16957","snapshot_observed_at":"2026-08-06T16:34:04.754226Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.754226Z"},"links":{"cited_paper":"/paper/2505.16957","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:0ac2708998eba4073365faa563a2e12db3625e214a1013360a861350f704bff0","observation_id":"8a60a853-a16d-4b30-beb5-e095804b0e30","resolution":{"observed_at":"2026-08-06T16:34:04.754226Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14479","last_updated":"2024-10-18T14:02:34Z","snapshot_observed_at":"2026-08-11T15:32:23.654656Z","submitted_at":"2024-10-18T14:02:34Z","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14479","snapshot_observed_at":"2026-08-06T16:34:04.853306Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.853306Z"},"links":{"cited_paper":"/paper/2410.14479","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:f4f0c7ed008d0af78ac24a34053c962934e505b2f95c93ee0affc4662e13ce2b","observation_id":"fbe5eca5-fc2b-4390-98d2-c32b7d9b82ac","resolution":{"observed_at":"2026-08-06T16:34:04.853306Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.14348","last_updated":"2025-07-27T10:12:52Z","snapshot_observed_at":"2026-08-07T21:52:02.659469Z","submitted_at":"2025-04-19T16:28:03Z","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.14348","snapshot_observed_at":"2026-08-06T16:34:04.952025Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:04.952025Z"},"links":{"cited_paper":"/paper/2504.14348","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:f944a9bdfaf2016e2cf802213d1286a136623e3530f6f800fc603135a45848ab","observation_id":"2a247095-3659-4852-b88a-22fed94a42b8","resolution":{"observed_at":"2026-08-06T16:34:04.952025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:06.722450Z","title":null,"venue":null,"work_id":"7109cc4a-63e3-4861-8e8a-c33406fe41f3","year":2023},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:05.011939Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:9b15ca915eb4d76d9727106324e530375832cda11e4c15ba1fdf548876f35818","observation_id":"6514fbca-975f-4253-a587-05efbc389ff9","resolution":{"observed_at":"2026-08-06T16:34:06.771915Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10490","last_updated":"2023-10-03T17:03:10Z","snapshot_observed_at":"2026-08-08T22:08:37.768137Z","submitted_at":"2023-07-19T23:03:20Z","title":"Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10490","snapshot_observed_at":"2026-08-06T16:34:05.101373Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:05.101373Z"},"links":{"cited_paper":"/paper/2307.10490","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:858f51eb6e6144ba03cd5084249750d6d20410a2a1793e66885b561346b77d9e","observation_id":"80107157-42c9-4510-a17b-5ec0990ce669","resolution":{"observed_at":"2026-08-06T16:34:05.101373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.16119","last_updated":"2024-03-03T00:12:16Z","snapshot_observed_at":"2026-07-06T16:53:18.275859Z","submitted_at":"2023-10-24T18:18:11Z","title":"Ignore This Title and HackAPrompt: Exposing Systemic Vulnerabilities of LLMs through a Global Scale Prompt Hacking Competition","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.16119","snapshot_observed_at":"2026-08-06T16:34:05.169846Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:05.169846Z"},"links":{"cited_paper":"/paper/2311.16119","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:528f69f5de516e183cd510be94f4d9c41fa49c38b9cb9f18495e70512211f7d6","observation_id":"711b04e6-a84a-4b06-8648-54f847ee47d8","resolution":{"observed_at":"2026-08-06T16:34:05.169846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:34:06.608914Z","title":null,"venue":null,"work_id":"edde9825-e0c1-45f7-9b99-3ac593a71947","year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:05.255867Z"},"links":{"citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:1c6032a88aa3f69b88121989c2d588663105579fd0eaef0321dbffdddf096fd6","observation_id":"901f6257-6605-4160-b812-d5c36cc18a4a","resolution":{"observed_at":"2026-08-06T16:34:06.657603Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06664","last_updated":"2024-02-16T04:02:51Z","snapshot_observed_at":"2026-08-07T10:02:21.156103Z","submitted_at":"2024-02-06T14:46:08Z","title":"LLM Agents can Autonomously Hack Websites","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06664","snapshot_observed_at":"2026-08-06T16:34:05.325342Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:05.325342Z"},"links":{"cited_paper":"/paper/2402.06664","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:b7ee24a7321612ac46a21f8fb10f681a2c0db79cc3b93e6c11f9ebbe7d579986","observation_id":"53d2c546-ea9f-4636-bf87-72f6c0317db7","resolution":{"observed_at":"2026-08-06T16:34:05.325342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-06T16:34:05.379319Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:05.379319Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:daa90ff4f4fb5587cd0e9232fef8d1456a9fd2be3ab2d581098756f873ef44ea","observation_id":"4a6efbb7-8971-44ae-aabf-67ad24ecb2ae","resolution":{"observed_at":"2026-08-06T16:34:05.379319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-08-11T10:47:05.890022Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-08-06T16:34:05.446734Z","title":"Ignore previous instructions and translate","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:05.446734Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:a81dde64f31a9ec2a39a79de269b3e9754ff7880143ef88f8a7a5b1cd3b49dc9","observation_id":"8a6b4405-be54-4aaf-bad0-de88deabf587","resolution":{"observed_at":"2026-08-06T16:34:05.446734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats"},"reference_resolution":{"displayed":29,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":25,"verified_exact":2,"verified_fuzzy":1},"total_outbound_references":29},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 29 of 29 outbound references and 4 inbound Pith citation observations for arXiv:2507.13169."}