Pith. sign in

Paper Citation Record · LEDGER

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding

As of 8 August 2026, this Paper Citation Record lists 57 of 57 outbound references and 0 inbound Pith citation observations for arXiv:2507.22304.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2507.22304 v1

Coverage vector

measured 57 of 57 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-06T11:54:43.247703Z

measured 57 of 57 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-08T06:32:00.761636+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

57 of 57 outbound references displayed

  • verified exact4
  • verified fuzzy24
  • unresolved29
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 88073051-5f25-467e-b525-4dcb62ae96af · outbound

This paper cites A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.946018Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.946018Z digest=sha256:10d5a57ccbc807647258161c3661b83cf9f8a8e801021d3fb534ecd29212461c

Observation aa0ed4e2-7b1c-4fea-aeb4-f8ee063a94d7 · outbound

This paper cites A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.952428Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.952428Z digest=sha256:eb807377b5679f0abf5af7849765f17a5d1d520ffc2fd45f3b45b02ac973fab6

Observation 48464e29-bed0-41aa-95fd-cd7b66f880e0 · outbound

This paper cites Otter: A Multi-Modal Model with In-Context Instruction Tuning.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Otter: A Multi-Modal Model with In-Context Instruction Tuning

Reference 3

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.957966Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.957966Z digest=sha256:c70510b39a295a4c3ee2e7880b26ff23fec63baef6c0069978c09a52e639017d

Observation c7b280b1-b854-47ed-a925-3f2a87b7ba7f · outbound

This paper cites Visual Instruction Tuning with Polite Flamingo.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Visual Instruction Tuning with Polite Flamingo

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.963956Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.963956Z digest=sha256:702f308fb14b6a07a7885d5fa3cc0a4b0ab8bb8b3e79fdf1c46154e93691b145

Observation 40a1995e-ac82-4e79-8dfe-e86f37f1c55f · outbound

This paper cites Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.969519Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.969519Z digest=sha256:8c27f59a7cb2fa1132c1b3515e9df648539a532b9da77e40c0b430fbfa8d2ef2

Observation 78a336fa-2d84-49a0-a459-d99fc6e57dbf · outbound

This paper cites Adversarial Attacks in Multimodal Systems: A Practitioner's Survey.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Adversarial Attacks in Multimodal Systems: A Practitioner's Survey

Reference 6

Resolution
verified exact
local_arxiv, observed 2026-08-06T11:54:43.863037Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:42.975978Z digest=sha256:d72ed2a58cb11b163da7877f9f8b76e146c851191412e5bcc25391f2bbad65aa

Observation 8cb51be9-59d3-4538-8bc7-c44f705f60b4 · outbound

This paper cites Prompt Injection attack against LLM-integrated Applications.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Prompt Injection attack against LLM-integrated Applications

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.985770Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.985770Z digest=sha256:6bc58ac0c376c7ee8530d3c4783fc14d4ff586ef2f882fd2b64b08a26718f8bd

Observation b0fb3c20-d6dd-48da-a02f-d3d2e7691f1a · outbound

This paper cites An Early Categorization of Prompt Injection Attacks on Large Language Models.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding An Early Categorization of Prompt Injection Attacks on Large Language Models

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.991098Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.991098Z digest=sha256:c9dbd328744b902d66b8e073701d91cd101e1146c44a0f3016eea1f5a73ba49a

Observation b75b21fd-8389-42fd-906e-28d015261e01 · outbound

This paper cites Dissecting Adversarial Robustness of Multimodal LM Agents.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Dissecting Adversarial Robustness of Multimodal LM Agents

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:42.996988Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:42.996988Z digest=sha256:3ba0b02d301d41bd1f62fb89dcd69e948bfc005f1cd7420c5ad1dfc1dfb414b4

Observation 06bad409-a55c-41cf-b570-772d941b7300 · outbound

This paper cites Web Artifact Attacks Disrupt Vision Language Models.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Web Artifact Attacks Disrupt Vision Language Models

Reference 10

Resolution
verified exact
local_arxiv, observed 2026-08-06T11:54:43.788498Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.004222Z digest=sha256:4d23942dc01c3830be9c6ba531c7f43adf764e52b1c2b28b506839c8f471ab57

Observation 89d03e20-79d7-4133-9a52-f2c60d123ec4 · outbound

This paper cites an unresolved cited work.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Unresolved cited work

Reference 11

Resolution
unresolved
raw_fallback, observed 2026-08-06T11:54:44.388374Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.010179Z digest=sha256:9d71b0b37560d3850794f101918c6361239010e959f0dbc839cd129695b201a3

Observation 61cd7451-7d28-4ebf-be93-ee74146bf449 · outbound

This paper cites ”Prompt injection attacks on vision-language models for surgical decision support” medRxiv (2025).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Prompt injection attacks on vision-language models for surgical decision support” medRxiv (2025)

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.372916Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.016768Z digest=sha256:922726eecafdda8544d1947a4d7cd980d7fd515b98765d7d0395d188eef79347

Observation 5faea211-9aca-45a4-93cb-9df307c7998b · outbound

This paper cites VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.022503Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.022503Z digest=sha256:58a684bce3e1cbdd46779e7f03e8e7f728510738096ab3b64a6911aa4b374a4b

Observation 7d133490-41c1-4cd4-92fe-41aa5c4f1c24 · outbound

This paper cites Adversarial Attacks to Multi-Modal Models.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Adversarial Attacks to Multi-Modal Models

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.027701Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.027701Z digest=sha256:48f055773f50781112445d0ade3f5c11dbb0782918d74b1713fa261127dd90ed

Observation b1d2853d-4266-4254-a13c-3334035f4fd6 · outbound

This paper cites ”Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMs” arXiv preprint arXiv:2410.03768 (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMs” arXiv preprint arXiv:2410.03768 (2024)

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.032650Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.032650Z digest=sha256:94dd5b98cc5808e205de161d8c1885eaa0ac3db4a10815bb3e867a0fe5c93856

Observation e9f03677-1337-4149-808e-22d3de271ec2 · outbound

This paper cites Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.037974Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.037974Z digest=sha256:acc4dc304c826561b04195b398ac47cf9536dd77c1ae0736b0e76bbc46771b08

Observation 05790bc7-0bd0-47fe-8d63-c173ba9f2dfd · outbound

This paper cites an unresolved cited work.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Unresolved cited work

Reference 17

Resolution
unresolved
raw_fallback, observed 2026-08-06T11:54:44.357472Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.044187Z digest=sha256:9ef8f7193227fd851cec968e45c00c4d4733835720c65bb81f8601da95d6875c

Observation c423b82f-43dc-4201-8622-adecfda238d7 · outbound

This paper cites ”A deep learning-driven multi-layered steganographic approach for enhanced data security” Scientific Reports (2025).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”A deep learning-driven multi-layered steganographic approach for enhanced data security” Scientific Reports (2025)

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.342391Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.049734Z digest=sha256:7a4d546becbb464b61bf881f8e3ca28065cb82f84b8bd356bba146d7063e3fd2

Observation b815fd14-b3d3-4ef2-9909-d1917dada538 · outbound

This paper cites ”Cross: Diffusion model makes controllable, robust and se- cure image steganography” Advances in Neural Information Processing Systems (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Cross: Diffusion model makes controllable, robust and se- cure image steganography” Advances in Neural Information Processing Systems (2024)

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.326963Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.054591Z digest=sha256:29aceb8d6efabbb0d6bd3abbf0552b0547125b95a6427d0695b63fb7a15113de

Observation 93863ce8-500c-4d98-9452-654f0d4f6186 · outbound

This paper cites Defeating Prompt Injections by Design.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Defeating Prompt Injections by Design

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.059837Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.059837Z digest=sha256:ba2b18163a5029c20f81f43934701a49eca6327bb0e3a497bd1f15b94334f4e0

Observation c1aa5956-f218-42c4-899f-c26180dafe67 · outbound

This paper cites Learning Transferable Visual Models From Natural Language Supervision.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Learning Transferable Visual Models From Natural Language Supervision

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.065058Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.065058Z digest=sha256:7073baac0c02819f8daa4b948da6c4541ac31689fc9549f2241cd39bd5eac8bd

Observation efaffa51-15c5-4033-92bc-22b8c0885f50 · outbound

This paper cites Visual Instruction Tuning.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Visual Instruction Tuning

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.070875Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.070875Z digest=sha256:20870fef28034555fa7cc1937b808918ea32ee84e69bb58fb08a89dd553d3ffd

Observation b7b1fc11-e328-4108-92ea-7790a1eec5a8 · outbound

This paper cites BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Models.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Models

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.076150Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.076150Z digest=sha256:d64677335cf675e6146088990f5dbf7080f857d61d6d9d3dc9e3587e3c892b4e

Observation d3863703-51e5-41df-9d6c-1d1c333341cb · outbound

This paper cites Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.081752Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.081752Z digest=sha256:20b57ea26652e45faea084d1ea09bcf62eed100d7765cb6d9f2fd328893e2677

Observation b6660585-77e4-41be-8d93-278b03665702 · outbound

This paper cites ”LLM01:2025 Prompt Injection” Retrieved from https://genai.owasp.org/llmrisk/llm01-prompt-injection/ (2025).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”LLM01:2025 Prompt Injection” Retrieved from https://genai.owasp.org/llmrisk/llm01-prompt-injection/ (2025)

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.312094Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.088075Z digest=sha256:86b9ff3fc2e0aae65665c16393112358a944d54ad06045017cfa2a5a57fc2bfb

Observation e18f1516-8b0b-41d8-9fd9-1a0c20477330 · outbound

This paper cites ”Text-Based Prompt Injection Attack Using Mathematical Functions in Modern Large Language Models” Electronics, 13(24), 5008 (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Text-Based Prompt Injection Attack Using Mathematical Functions in Modern Large Language Models” Electronics, 13(24), 5008 (2024)

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.297019Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.093023Z digest=sha256:3a0a3e3da3edff37f8f108bb3c8e23a09a1dae1ccaedb461c53c94fb7f19f356

Observation ff24a6f7-1b78-4c9c-961c-100377eb7315 · outbound

This paper cites Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.097851Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.097851Z digest=sha256:81de0a54b09e9733810a8a455196063b66a93d494680e28653796e0cbe4b5928

Observation 66bdaf77-91db-4f8e-94f4-bc4d9b3abb2d · outbound

This paper cites Empirical Analysis of Large Vision-Language Models against Goal Hijacking via Visual Prompt Injection.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Empirical Analysis of Large Vision-Language Models against Goal Hijacking via Visual Prompt Injection

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.102709Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.102709Z digest=sha256:948c88cc11068d7b91d6e9a4aafe9e4aac9d2d952a81c3af4da6056d700291dc

Observation 44c7eb62-663a-43ba-9778-8aaa00fd2949 · outbound

This paper cites ”Detecting LSB Steganography in Color and Gray- Scale Images” IEEE Multimedia (2001).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Detecting LSB Steganography in Color and Gray- Scale Images” IEEE Multimedia (2001)

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.280152Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.108618Z digest=sha256:c9e5b68264842265c366b924a4dd652e31b82c74edcc65ae37d14782908e891c

Observation bbc8d8c9-e93d-47d2-b873-4ed7995c42f5 · outbound

This paper cites ”Image steganography techniques for resisting statistical steganalysis attacks: A systematic literature review” PLOS One, 19(9), e0308807 (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Image steganography techniques for resisting statistical steganalysis attacks: A systematic literature review” PLOS One, 19(9), e0308807 (2024)

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.263879Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.113193Z digest=sha256:373b87cd9a3ca13ca94beebc6c8b17c427e4d36ad16b1bb92f6cd1cf5621eafd

Observation 270baea9-cb96-42de-8eaf-2e8f682e8dfd · outbound

This paper cites ”Super-resolution deep neural network (SRDNN) based multi-image steganography for highly secured lossless image transmission” Scientific Reports, 14, 6104 (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Super-resolution deep neural network (SRDNN) based multi-image steganography for highly secured lossless image transmission” Scientific Reports, 14, 6104 (2024)

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.248568Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.118618Z digest=sha256:f52aa7b06dd904d6923c162ee1967e2330716d8658ee8946a3d9c6ec387062ab

Observation a8910583-ccd1-4868-9007-42ab78c296ab · outbound

This paper cites ”Comprehensive survey on image steganalysis using deep learning” Neural Computing and Applications (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Comprehensive survey on image steganalysis using deep learning” Neural Computing and Applications (2024)

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.232576Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.123634Z digest=sha256:30fd3467d3f695e0463ec89abf7c3fdcd44f1de292158a4992600b9f77e83f6d

Observation 30efcbe0-0321-4a05-b971-2b5d5ebb4d57 · outbound

This paper cites ”Enhancing Steganography Detection with AI: Fine-Tuning a Deep Residual Network for Spread Spectrum Image Steganography” PMC (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Enhancing Steganography Detection with AI: Fine-Tuning a Deep Residual Network for Spread Spectrum Image Steganography” PMC (2024)

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.215604Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.128836Z digest=sha256:dcd84f696d7b2d8d3492389fba06560937883ea5ab1f10535970e46666ef8f2f

Observation 0fd1c21d-9986-4e1d-bc6e-77c6063d7da6 · outbound

This paper cites ”Digital image steganalysis network strengthening framework based on evolutionary algorithm” Scientific Reports (2025).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Digital image steganalysis network strengthening framework based on evolutionary algorithm” Scientific Reports (2025)

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.199128Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.133736Z digest=sha256:2d214265b8217e753961a5f79a0295486ba4d7b2e4ab55fabaaf67de176213df

Observation 7914237f-2d7f-42e4-9bd3-efdbfbac8e98 · outbound

This paper cites ”An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale” ICLR (2021).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale” ICLR (2021)

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.182922Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.138302Z digest=sha256:c883fd1fc6e57804f315f4e99277a485d33d62f824f68f101827b0abaf8cb53d

Observation 76282668-2978-4050-a710-ff401cb55df0 · outbound

This paper cites Improved Baselines with Visual Instruction Tuning.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Improved Baselines with Visual Instruction Tuning

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.143299Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.143299Z digest=sha256:866b058cecb44f1806144d96af7198a4ce5ecec9b88cf5aa2a24346f087ffd3b

Observation c756846d-6e30-4681-94be-ad3a3ba03b22 · outbound

This paper cites an unresolved cited work.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Unresolved cited work

Reference 37

Resolution
unresolved
raw_fallback, observed 2026-08-06T11:54:44.167283Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.148125Z digest=sha256:75f738526792949b22a1678fc514bf44e571f4502195b7016349db31ce58a3fc

Observation 546f64ed-bc4f-46f2-b00c-a17c7af023ba · outbound

This paper cites BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generation.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generation

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.153675Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.153675Z digest=sha256:a2454dec19ee16e023582d2c4226d4b3b0f9ab6f601a9172ef0d8bb7f514dcac

Observation efa2767d-71fe-4e26-b13c-928d44c44778 · outbound

This paper cites ”PSNR vs SSIM: imperceptibility quality assessment for image steganography” Multimedia Tools and Applications, 80, 8423- 8444 (2021).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”PSNR vs SSIM: imperceptibility quality assessment for image steganography” Multimedia Tools and Applications, 80, 8423- 8444 (2021)

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.151445Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.158623Z digest=sha256:f44f150e681b4a22c0538c4bf0993e728bc8afa2764b6600a8692db3940fde7e

Observation fc260326-9023-4e34-8a65-37a3c558bcd3 · outbound

This paper cites ”Hiding data in images by simple LSB substitution” Pattern Recognition (2004).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Hiding data in images by simple LSB substitution” Pattern Recognition (2004)

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.135985Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.163327Z digest=sha256:a9838290be0f064b600c90e27d7c456c4321a47e85878811daa4a863e556dee8

Observation 099316a3-ff37-4b6f-9ce8-96cef00cb4f2 · outbound

This paper cites ”Attacks on steganographic systems” Information Hiding Workshop (1999).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Attacks on steganographic systems” Information Hiding Workshop (1999)

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.120681Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.169761Z digest=sha256:4729e086ee87dac6fc99f7c067a0f978dab86eb2919e4288cc4ba2eed8aa326a

Observation f684a847-a30f-4025-aba8-cd3f807c893b · outbound

This paper cites ”Secure spread spectrum watermarking for multimedia” IEEE Transactions on Image Processing (1997).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Secure spread spectrum watermarking for multimedia” IEEE Transactions on Image Processing (1997)

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.105413Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.176321Z digest=sha256:2cf3c166034303ed006d4074e5b2f4a9d774cdf3a4ad9cd95887b404cd9b11d8

Observation d6588eb5-fb3a-4692-bf8b-e625baa6c2f9 · outbound

This paper cites ”An Analysis of LSB & DCT based Steganography”.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”An Analysis of LSB & DCT based Steganography”

Reference 43

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.088020Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.182439Z digest=sha256:54e04c6f79a841da953a6b7aa8bcce490d0cbed2197b79c08fa0309f2dacdff3

Observation 2452c1e6-1fce-408c-9e48-a2124e8eee8d · outbound

This paper cites CNN-Assisted Steganography -- Integrating Machine Learning with Established Steganographic Techniques.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding CNN-Assisted Steganography -- Integrating Machine Learning with Established Steganographic Techniques

Reference 44

Resolution
verified exact
local_arxiv, observed 2026-08-06T11:54:43.478459Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.188737Z digest=sha256:86cf023c56854abd3e1b5dcdd9a0a3c9df9d86c4a607d73e3e4746723ace0949

Observation 8183c266-9177-4a62-8d78-df6ac83b5573 · outbound

This paper cites ”Hiding images in plain sight: Deep steganography” Advances in Neural Information Processing Systems (2017).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Hiding images in plain sight: Deep steganography” Advances in Neural Information Processing Systems (2017)

Reference 45

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.072404Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.193475Z digest=sha256:ac84615c78b4d1e80b1206850504351392000e30225cb8abed5cdbda04569295

Observation 3dd6cc42-4794-4c63-8194-cced2f12c9f0 · outbound

This paper cites Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.197642Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.197642Z digest=sha256:b4c67cb51cb0be5ebff37e08f1cc92e9275d5c27eaf2bdcea6b5e0c2b82e9582

Observation 6a9f7517-49f3-4676-9a0c-5e70355a2cdf · outbound

This paper cites ”Peak signal-to-noise ratio” Wikipedia.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Peak signal-to-noise ratio” Wikipedia

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.049748Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.201965Z digest=sha256:7ef7314c12f1a7d8aa6e96ed71fe307a7f0b5adf919c3247d10c51a3f1744a8c

Observation 8a574751-d214-443a-ac91-1db79e52a918 · outbound

This paper cites ”Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game” arXiv preprint (2023).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game” arXiv preprint (2023)

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.032866Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.206614Z digest=sha256:09115d09b011a79a8b37a279cd28052c77b9e899ec07eff0028b270081aa793d

Observation 1f633e2a-357d-4cbb-98ad-f6f0f3e823a9 · outbound

This paper cites ”A survey on large language model (llm) security and privacy: The good, the bad, and the ugly” High-Confidence Computing, 4, 100211 (2024).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”A survey on large language model (llm) security and privacy: The good, the bad, and the ugly” High-Confidence Computing, 4, 100211 (2024)

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:44.015017Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.210977Z digest=sha256:30f19d98937ef15abdd275b415e261294fb22b481174a455f065312360e6e601

Observation b5e09b79-2780-4426-90c7-d3cdfe4dc690 · outbound

This paper cites ”Exploring steganography: Seeing the unseen” Computer (2008).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Exploring steganography: Seeing the unseen” Computer (2008)

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:43.998757Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.215261Z digest=sha256:29a15048e070fd46514568c66ca9f83f5a262f660b61c39dec3ccacbbed5a385

Observation 9d955cd4-0d35-433e-81a8-52d7524f3468 · outbound

This paper cites ”Steganalysis by subtractive pixel adjacency matrix” IEEE Transactions on Information Forensics and Security.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Steganalysis by subtractive pixel adjacency matrix” IEEE Transactions on Information Forensics and Security

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:43.982581Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.219502Z digest=sha256:2aacd08e435d1731588676a0e70b7e763e82edad77e04641fedd30f6857c0b50

Observation 2154cf33-6248-4ac0-b8d1-10c78b5966e0 · outbound

This paper cites Mitigating Hallucination in Large Multi-Modal Models via Robust Instruction Tuning.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Mitigating Hallucination in Large Multi-Modal Models via Robust Instruction Tuning

Reference 52

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.224102Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.224102Z digest=sha256:6b8718275f3c549e395e637fc5a52e56ee85461793c16109cbce657f28d96fa3

Observation c1851ec6-ff7a-4618-983d-1670f5d9ff74 · outbound

This paper cites ”Visual Adversarial Examples Jailbreak Aligned Large Language Models” AAAI Conference on Artificial Intelligence (2023).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Visual Adversarial Examples Jailbreak Aligned Large Language Models” AAAI Conference on Artificial Intelligence (2023)

Reference 53

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T11:54:43.965905Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.228580Z digest=sha256:9e74e5a5a8d104e1a7e7831f1ad76a5ebbc6cd861de28831b847171bbe8afb16

Observation 44628e35-95c1-46cb-a172-88e77b633620 · outbound

This paper cites Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models

Reference 54

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.232843Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.232843Z digest=sha256:69ddeb5db967b29a0d8d6bbcd60a47081e2c62a66f133130676900a040fefc58

Observation ab267661-edec-4b18-867d-7e5e639b23d1 · outbound

This paper cites On the Robustness of Large Multimodal Models Against Image Adversarial Attacks.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding On the Robustness of Large Multimodal Models Against Image Adversarial Attacks

Reference 55

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.237746Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.237746Z digest=sha256:81bbac5275e0ac7c77839ba8acd86f312b9e5b5e2b992c28e70caa9ff75d96b1

Observation 9e0b78cb-4f63-44f2-bcbf-5a7b8fd736bb · outbound

This paper cites Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey.

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey

Reference 56

Resolution
unresolved
no resolver link, observed 2026-08-06T11:54:43.242527Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T11:54:43.242527Z digest=sha256:a5354dc62e4bbda2758bd322fecced333babcf373c9d3fde289260026ba4ea93

Observation 5a3eaf97-d3b9-4e58-8a25-23c033edbcfa · outbound

This paper cites ”Image-based Multimodal Models as Intruders: Trans- ferable Multimodal Attacks on Video-based MLLMs” arXiv preprint arXiv:2501.01042 (2025).

Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding ”Image-based Multimodal Models as Intruders: Trans- ferable Multimodal Attacks on Video-based MLLMs” arXiv preprint arXiv:2501.01042 (2025)

Reference 57

Resolution
verified exact
raw_fallback, observed 2026-08-06T11:54:43.360766Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T11:54:43.247703Z digest=sha256:93bbcc2ea069717a49bd467e2c1daab5fc66abec29ef6d21d361355feaadf8cd

Pith citing papers

No inbound Pith citation observations are available.