Pith. sign in

Paper Citation Record · LEDGER

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding

As of 14 August 2026, this Paper Citation Record lists 57 of 57 outbound references and 0 inbound Pith citation observations for arXiv:2507.22304.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2507.22304 v1

Coverage vector

measured 57 of 57 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-06T11:54:43.247703Z

measured 57 of 57 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-14T06:32:32.682623+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

57 of 57 outbound references displayed

  • verified exact4
  • verified fuzzy24
  • unresolved29
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 88073051-5f25-467e-b525-4dcb62ae96af · outbound

This paper cites A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.946018Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.946018Z digest=sha256:9bf916e6e8ed2daa785d5039d1168f408bf9a5fefe7506eefedfdd4dbf62b9ba

Observation aa0ed4e2-7b1c-4fea-aeb4-f8ee063a94d7 · outbound

This paper cites A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.952428Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.952428Z digest=sha256:c5ce05ce410e686e6ff7612d00ffb5213e059c738c65f87c882a334b93057bd9

Observation 48464e29-bed0-41aa-95fd-cd7b66f880e0 · outbound

This paper cites Otter: A Multi-Modal Model with In-Context Instruction Tuning.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Otter: A Multi-Modal Model with In-Context Instruction Tuning

Reference 3

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.957966Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.957966Z digest=sha256:5937caf149e51740344d0a33afff3af56d1b97c308e713345aa4b6803c7ee0e4

Observation c7b280b1-b854-47ed-a925-3f2a87b7ba7f · outbound

This paper cites Visual Instruction Tuning with Polite Flamingo.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Visual Instruction Tuning with Polite Flamingo

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.963956Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.963956Z digest=sha256:44aae8ec0f5c757c1d9e3c274f22cbb5815769912f5ff49e8015d1cae7caa3f7

Observation 40a1995e-ac82-4e79-8dfe-e86f37f1c55f · outbound

This paper cites Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.969519Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.969519Z digest=sha256:a273937f68b3e3a5c13cfc763372fbf232b902228d8b977a1796a678998baf71

Observation 78a336fa-2d84-49a0-a459-d99fc6e57dbf · outbound

This paper cites Adversarial Attacks in Multimodal Systems: A Practitioner's Survey.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Adversarial Attacks in Multimodal Systems: A Practitioner's Survey

Reference 6

Resolution
verified exact
local_arxiv, observed 2026-08-06T11:54:43.863037Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:42.975978Z digest=sha256:508e9c112c26ae3b584577485ded090ed9123816bc931f5230db1a340bfeefa4

Observation 8cb51be9-59d3-4538-8bc7-c44f705f60b4 · outbound

This paper cites Prompt Injection attack against LLM-integrated Applications.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Prompt Injection attack against LLM-integrated Applications

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.985770Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.985770Z digest=sha256:e19197cc4477a5acf35d18597533ec28c434f49065d0f6b5d0e69ce110812596

Observation b0fb3c20-d6dd-48da-a02f-d3d2e7691f1a · outbound

This paper cites An Early Categorization of Prompt Injection Attacks on Large Language Models.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding An Early Categorization of Prompt Injection Attacks on Large Language Models

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.991098Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.991098Z digest=sha256:560963be66f18cfe54d6ac1ffd1bd108db93ac45b3a3b0c6c70069ecf4db0a16

Observation b75b21fd-8389-42fd-906e-28d015261e01 · outbound

This paper cites Dissecting Adversarial Robustness of Multimodal LM Agents.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Dissecting Adversarial Robustness of Multimodal LM Agents

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.996988Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.996988Z digest=sha256:53df00b57b6ac305c5705d193527548518578445682e88b296a535e5f4232700

Observation 06bad409-a55c-41cf-b570-772d941b7300 · outbound

This paper cites Web Artifact Attacks Disrupt Vision Language Models.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Web Artifact Attacks Disrupt Vision Language Models

Reference 10

Resolution
verified exact
local_arxiv, observed 2026-08-06T11:54:43.788498Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.004222Z digest=sha256:33a13b5c9983a1f19824d78468d9410ea40f487514c7f1c7107c33bc0f12b0ad

Observation 89d03e20-79d7-4133-9a52-f2c60d123ec4 · outbound

This paper cites an unresolved cited work.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Unresolved cited work

Reference 11

Resolution
unresolved
raw_fallback, observed 2026-08-06T11:54:44.388374Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.010179Z digest=sha256:6d89733d90dfa16309b332ae01d749c0ece668b8646c2b5661355732f02a9c3b

Observation 61cd7451-7d28-4ebf-be93-ee74146bf449 · outbound

This paper cites ”Prompt injection attacks on vision-language models for surgical decision support” medRxiv (2025).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Prompt injection attacks on vision-language models for surgical decision support” medRxiv (2025)

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.372916Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.016768Z digest=sha256:6a9fde922e3b245a7b6b10be711b11fdf9ac92c83b31306c93fb40fa5011f42c

Observation 5faea211-9aca-45a4-93cb-9df307c7998b · outbound

This paper cites VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.022503Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.022503Z digest=sha256:a5c88fa25bd73906302a9b27cd8501ddb2fba393a11adf36d9add5bff32a795a

Observation 7d133490-41c1-4cd4-92fe-41aa5c4f1c24 · outbound

This paper cites Adversarial Attacks to Multi-Modal Models.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Adversarial Attacks to Multi-Modal Models

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.027701Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.027701Z digest=sha256:da3b4a0c3f38277ccd5decf6fc59e203243ac12c6c0fc8a321e38d7476feca9e

Observation b1d2853d-4266-4254-a13c-3334035f4fd6 · outbound

This paper cites ”Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMs” arXiv preprint arXiv:2410.03768 (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMs” arXiv preprint arXiv:2410.03768 (2024)

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.032650Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.032650Z digest=sha256:a061471cbebb3e1f4cc26da79f27880f58b72270f1bd8fbe8108e4cadd704943

Observation e9f03677-1337-4149-808e-22d3de271ec2 · outbound

This paper cites Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.037974Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.037974Z digest=sha256:f7ce95d5d1441b1a69f2ea6284f6b7de6c0b675081c6832a2dbe02a9fe53745b

Observation 05790bc7-0bd0-47fe-8d63-c173ba9f2dfd · outbound

This paper cites an unresolved cited work.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Unresolved cited work

Reference 17

Resolution
unresolved
raw_fallback, observed 2026-08-06T11:54:44.357472Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.044187Z digest=sha256:41a7a4f8fe80f8a38ff39974fcd6a9dab75505d50b3b7ab415821aadf49a45ab

Observation c423b82f-43dc-4201-8622-adecfda238d7 · outbound

This paper cites ”A deep learning-driven multi-layered steganographic approach for enhanced data security” Scientific Reports (2025).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”A deep learning-driven multi-layered steganographic approach for enhanced data security” Scientific Reports (2025)

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.342391Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.049734Z digest=sha256:06fe12fec96a66e475d1a84e614f38d0c47d019eb71974142ffcbd9b18696198

Observation b815fd14-b3d3-4ef2-9909-d1917dada538 · outbound

This paper cites ”Cross: Diffusion model makes controllable, robust and se- cure image steganography” Advances in Neural Information Processing Systems (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Cross: Diffusion model makes controllable, robust and se- cure image steganography” Advances in Neural Information Processing Systems (2024)

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.326963Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.054591Z digest=sha256:c20149fd44a63075cb642afab7826181df09f47f35171be1d5e61350a34e6e3e

Observation 93863ce8-500c-4d98-9452-654f0d4f6186 · outbound

This paper cites Defeating Prompt Injections by Design.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Defeating Prompt Injections by Design

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.059837Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.059837Z digest=sha256:e7751c858e126fb38e65ead040917f263def81985f3994ac2216eb53f64bc4b3

Observation c1aa5956-f218-42c4-899f-c26180dafe67 · outbound

This paper cites Learning Transferable Visual Models From Natural Language Supervision.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Learning Transferable Visual Models From Natural Language Supervision

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.065058Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.065058Z digest=sha256:132b12318b8779cac67d5c6021486e239efb3358dbe011e7b080dec0e4e23fae

Observation efaffa51-15c5-4033-92bc-22b8c0885f50 · outbound

This paper cites Visual Instruction Tuning.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Visual Instruction Tuning

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.070875Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.070875Z digest=sha256:fe9dfd58c3f92f5dba2c9beff2749ba1d6af1ccdd45456e986d69e85f6cf6fbb

Observation b7b1fc11-e328-4108-92ea-7790a1eec5a8 · outbound

This paper cites BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Models.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Models

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.076150Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.076150Z digest=sha256:513332d8d24cdc82e23e28adbd872d98b526cdedf75478b30f64bc7d00fa7a58

Observation d3863703-51e5-41df-9d6c-1d1c333341cb · outbound

This paper cites Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.081752Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.081752Z digest=sha256:cee76cc3827b0cadee122a38835cfcd05342d5dc8c569d479511d90ffd46d1f5

Observation b6660585-77e4-41be-8d93-278b03665702 · outbound

This paper cites ”LLM01:2025 Prompt Injection” Retrieved from https://genai.owasp.org/llmrisk/llm01-prompt-injection/ (2025).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”LLM01:2025 Prompt Injection” Retrieved from https://genai.owasp.org/llmrisk/llm01-prompt-injection/ (2025)

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.312094Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.088075Z digest=sha256:d3c37132648dcb7b46ab23f61e7cf5da437df53809800d772c3eb489c22e347e

Observation e18f1516-8b0b-41d8-9fd9-1a0c20477330 · outbound

This paper cites ”Text-Based Prompt Injection Attack Using Mathematical Functions in Modern Large Language Models” Electronics, 13(24), 5008 (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Text-Based Prompt Injection Attack Using Mathematical Functions in Modern Large Language Models” Electronics, 13(24), 5008 (2024)

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.297019Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.093023Z digest=sha256:78619304d5837a16723e00c6b7ca2370a2424684f3d5a8ad40f1456b54662487

Observation ff24a6f7-1b78-4c9c-961c-100377eb7315 · outbound

This paper cites Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.097851Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.097851Z digest=sha256:c1fa9ecc6a6154193b71ad16b96f91c9f74cbf0edabe5ce08f2e954d4b951ae5

Observation 66bdaf77-91db-4f8e-94f4-bc4d9b3abb2d · outbound

This paper cites Empirical Analysis of Large Vision-Language Models against Goal Hijacking via Visual Prompt Injection.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Empirical Analysis of Large Vision-Language Models against Goal Hijacking via Visual Prompt Injection

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.102709Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.102709Z digest=sha256:126682a372a5cea8cb5b8940807f0e5e52e9535b88491c556c232a02ebaf8276

Observation 44c7eb62-663a-43ba-9778-8aaa00fd2949 · outbound

This paper cites ”Detecting LSB Steganography in Color and Gray- Scale Images” IEEE Multimedia (2001).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Detecting LSB Steganography in Color and Gray- Scale Images” IEEE Multimedia (2001)

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.280152Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.108618Z digest=sha256:3a755fa3ca27732203588eae51d9263858da7b2b7615e25886b619dcb8a49e1f

Observation bbc8d8c9-e93d-47d2-b873-4ed7995c42f5 · outbound

This paper cites ”Image steganography techniques for resisting statistical steganalysis attacks: A systematic literature review” PLOS One, 19(9), e0308807 (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Image steganography techniques for resisting statistical steganalysis attacks: A systematic literature review” PLOS One, 19(9), e0308807 (2024)

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.263879Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.113193Z digest=sha256:2d1a9788a4f3c989115f47e5e3f6bc17f390d4abfb40644bb69f378af7c0a517

Observation 270baea9-cb96-42de-8eaf-2e8f682e8dfd · outbound

This paper cites ”Super-resolution deep neural network (SRDNN) based multi-image steganography for highly secured lossless image transmission” Scientific Reports, 14, 6104 (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Super-resolution deep neural network (SRDNN) based multi-image steganography for highly secured lossless image transmission” Scientific Reports, 14, 6104 (2024)

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.248568Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.118618Z digest=sha256:71c3bdbd3032394f96b19014444367b2716f9172133a5c7625e6b0eecd9f0d45

Observation a8910583-ccd1-4868-9007-42ab78c296ab · outbound

This paper cites ”Comprehensive survey on image steganalysis using deep learning” Neural Computing and Applications (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Comprehensive survey on image steganalysis using deep learning” Neural Computing and Applications (2024)

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.232576Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.123634Z digest=sha256:a410b41124624be96bdcbc5d8052d2d38acb487eac56bf25389dec5402366e37

Observation 30efcbe0-0321-4a05-b971-2b5d5ebb4d57 · outbound

This paper cites ”Enhancing Steganography Detection with AI: Fine-Tuning a Deep Residual Network for Spread Spectrum Image Steganography” PMC (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Enhancing Steganography Detection with AI: Fine-Tuning a Deep Residual Network for Spread Spectrum Image Steganography” PMC (2024)

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.215604Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.128836Z digest=sha256:3c3e647bba8c26f4ac4adb8cc723342578c1f97ffc6ec977922ec8dc78ac2e2f

Observation 0fd1c21d-9986-4e1d-bc6e-77c6063d7da6 · outbound

This paper cites ”Digital image steganalysis network strengthening framework based on evolutionary algorithm” Scientific Reports (2025).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Digital image steganalysis network strengthening framework based on evolutionary algorithm” Scientific Reports (2025)

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.199128Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.133736Z digest=sha256:52059282975c6ade06675749094d61343bf568bd605e1f7f2a35b4614a88df5d

Observation 7914237f-2d7f-42e4-9bd3-efdbfbac8e98 · outbound

This paper cites ”An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale” ICLR (2021).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale” ICLR (2021)

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.182922Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.138302Z digest=sha256:402973c37b9120d30f5e59408bfb9a54f1603c7c0e8c7af14ceab1619a406959

Observation 76282668-2978-4050-a710-ff401cb55df0 · outbound

This paper cites Improved Baselines with Visual Instruction Tuning.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Improved Baselines with Visual Instruction Tuning

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.143299Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.143299Z digest=sha256:4fa09b82a1a93b2b42ff75e9d0f237b10ce2f738ef9ca7e94fc2d2e0938f73f9

Observation c756846d-6e30-4681-94be-ad3a3ba03b22 · outbound

This paper cites an unresolved cited work.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Unresolved cited work

Reference 37

Resolution
unresolved
raw_fallback, observed 2026-08-06T11:54:44.167283Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.148125Z digest=sha256:d99a65200892345bf9c7be9c3fca4c86753548d17418010045d342efb3efe133

Observation 546f64ed-bc4f-46f2-b00c-a17c7af023ba · outbound

This paper cites BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generation.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generation

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.153675Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.153675Z digest=sha256:dfcae241614b84434e3c7016eecca981b618677847290b33a43f1df2e1f464ec

Observation efa2767d-71fe-4e26-b13c-928d44c44778 · outbound

This paper cites ”PSNR vs SSIM: imperceptibility quality assessment for image steganography” Multimedia Tools and Applications, 80, 8423- 8444 (2021).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”PSNR vs SSIM: imperceptibility quality assessment for image steganography” Multimedia Tools and Applications, 80, 8423- 8444 (2021)

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.151445Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.158623Z digest=sha256:a01a36d54accd9e995b68bd3be4398811f89b77484c483765b889e9335292a0d

Observation fc260326-9023-4e34-8a65-37a3c558bcd3 · outbound

This paper cites ”Hiding data in images by simple LSB substitution” Pattern Recognition (2004).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Hiding data in images by simple LSB substitution” Pattern Recognition (2004)

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.135985Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.163327Z digest=sha256:049279547b8889b977c2bfe37df18e0e38ec3b25380465a7b5a12e9d6696fec2

Observation 099316a3-ff37-4b6f-9ce8-96cef00cb4f2 · outbound

This paper cites ”Attacks on steganographic systems” Information Hiding Workshop (1999).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Attacks on steganographic systems” Information Hiding Workshop (1999)

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.120681Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.169761Z digest=sha256:65bd629408f385757a104366da20d42f8b227ba46fdf9491a4b59cdb3911ed42

Observation f684a847-a30f-4025-aba8-cd3f807c893b · outbound

This paper cites ”Secure spread spectrum watermarking for multimedia” IEEE Transactions on Image Processing (1997).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Secure spread spectrum watermarking for multimedia” IEEE Transactions on Image Processing (1997)

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.105413Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.176321Z digest=sha256:4761e5c3fff659ac7fea58e69ea09cd83813852d7d7139077b9914c32ca7c467

Observation d6588eb5-fb3a-4692-bf8b-e625baa6c2f9 · outbound

This paper cites ”An Analysis of LSB & DCT based Steganography”.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”An Analysis of LSB & DCT based Steganography”

Reference 43

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.088020Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.182439Z digest=sha256:fa828c1d275ebf27b38a0dce77614cf55c9c7019198d110595eeff681e81dbb0

Observation 2452c1e6-1fce-408c-9e48-a2124e8eee8d · outbound

This paper cites CNN-Assisted Steganography -- Integrating Machine Learning with Established Steganographic Techniques.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding CNN-Assisted Steganography -- Integrating Machine Learning with Established Steganographic Techniques

Reference 44

Resolution
verified exact
local_arxiv, observed 2026-08-06T11:54:43.478459Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.188737Z digest=sha256:d28194f07a745762f48e315f1eb518b1c1050ec0f0e41b1820109b0bde6a3239

Observation 8183c266-9177-4a62-8d78-df6ac83b5573 · outbound

This paper cites ”Hiding images in plain sight: Deep steganography” Advances in Neural Information Processing Systems (2017).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Hiding images in plain sight: Deep steganography” Advances in Neural Information Processing Systems (2017)

Reference 45

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.072404Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.193475Z digest=sha256:c3041cae36cb55bbc70e2896b59806697affcc5f7b5d6634d48c52ab108028ff

Observation 3dd6cc42-4794-4c63-8194-cced2f12c9f0 · outbound

This paper cites Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.197642Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.197642Z digest=sha256:9d8ab1bdf8fc22dde2602907ebe0a13ae47ab563a72d41920b3ca2ae1348478a

Observation 6a9f7517-49f3-4676-9a0c-5e70355a2cdf · outbound

This paper cites ”Peak signal-to-noise ratio” Wikipedia.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Peak signal-to-noise ratio” Wikipedia

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.049748Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.201965Z digest=sha256:b549d36a26f094b6d9546f34a9591727a63b9d283ae26ead57c1adb2ee9519ac

Observation 8a574751-d214-443a-ac91-1db79e52a918 · outbound

This paper cites ”Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game” arXiv preprint (2023).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game” arXiv preprint (2023)

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.032866Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.206614Z digest=sha256:8e8b20fa9cdc23b8aef6c65adc4bfc1fde04a480e0372a6294b988e7c64f2bb1

Observation 1f633e2a-357d-4cbb-98ad-f6f0f3e823a9 · outbound

This paper cites ”A survey on large language model (llm) security and privacy: The good, the bad, and the ugly” High-Confidence Computing, 4, 100211 (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”A survey on large language model (llm) security and privacy: The good, the bad, and the ugly” High-Confidence Computing, 4, 100211 (2024)

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.015017Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.210977Z digest=sha256:d1bc6a055249084699afbd88665e20cb63cf09b6e2a04392f1b1cf9887f78965

Observation b5e09b79-2780-4426-90c7-d3cdfe4dc690 · outbound

This paper cites ”Exploring steganography: Seeing the unseen” Computer (2008).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Exploring steganography: Seeing the unseen” Computer (2008)

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:43.998757Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.215261Z digest=sha256:4685473ba0fceba58ad4d6d0ff369d9fa79da152efa08a1daaa657c9257cd123

Observation 9d955cd4-0d35-433e-81a8-52d7524f3468 · outbound

This paper cites ”Steganalysis by subtractive pixel adjacency matrix” IEEE Transactions on Information Forensics and Security.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Steganalysis by subtractive pixel adjacency matrix” IEEE Transactions on Information Forensics and Security

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:43.982581Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.219502Z digest=sha256:985fdab550e15cd6f0708d0ddf08ceb11784479a0b347f9a85dd3da96c7261cc

Observation 2154cf33-6248-4ac0-b8d1-10c78b5966e0 · outbound

This paper cites Mitigating Hallucination in Large Multi-Modal Models via Robust Instruction Tuning.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Mitigating Hallucination in Large Multi-Modal Models via Robust Instruction Tuning

Reference 52

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.224102Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.224102Z digest=sha256:46e3ed2db57991d13eb8f4429fd01cb78227779f6259de13e7ed31ec54d89ea5

Observation c1851ec6-ff7a-4618-983d-1670f5d9ff74 · outbound

This paper cites ”Visual Adversarial Examples Jailbreak Aligned Large Language Models” AAAI Conference on Artificial Intelligence (2023).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Visual Adversarial Examples Jailbreak Aligned Large Language Models” AAAI Conference on Artificial Intelligence (2023)

Reference 53

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:43.965905Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.228580Z digest=sha256:1700e7e8d2ceefdb602d34ac0bc118cb125db69c10e242f53ba98cafe0a909bd

Observation 44628e35-95c1-46cb-a172-88e77b633620 · outbound

This paper cites Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models

Reference 54

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.232843Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.232843Z digest=sha256:7b3ca6ac8165868316cb87c070ac068d7b5c9e412605d38479e84f8bafd08e82

Observation ab267661-edec-4b18-867d-7e5e639b23d1 · outbound

This paper cites On the Robustness of Large Multimodal Models Against Image Adversarial Attacks.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding On the Robustness of Large Multimodal Models Against Image Adversarial Attacks

Reference 55

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.237746Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.237746Z digest=sha256:c1a7786ebbbc5b1056f2e09b515a0869f1a2e38314979a8fbfc5934e75fa22fd

Observation 9e0b78cb-4f63-44f2-bcbf-5a7b8fd736bb · outbound

This paper cites Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey

Reference 56

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.242527Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.242527Z digest=sha256:98cff799c6b1940a6af783b4ef0486982662e2eeb1f8002106f0e0c75ca03767

Observation 5a3eaf97-d3b9-4e58-8a25-23c033edbcfa · outbound

This paper cites ”Image-based Multimodal Models as Intruders: Trans- ferable Multimodal Attacks on Video-based MLLMs” arXiv preprint arXiv:2501.01042 (2025).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Image-based Multimodal Models as Intruders: Trans- ferable Multimodal Attacks on Video-based MLLMs” arXiv preprint arXiv:2501.01042 (2025)

Reference 57

Resolution
verified exact
raw_fallback, observed 2026-08-06T11:54:43.360766Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T11:54:43.247703Z digest=sha256:48219ee3b9e32bd87e44db484e8728f48f33101b853c28b17a1ec1f35eb28f08

Pith citing papers

No inbound Pith citation observations are available.