1 article on this topic.
Two new poisoning attacks show retrieval-augmented systems can be manipulated with a single planted document, while a new executable benchmark exposes how often LLM agents violate a safety rule they've just acknowledged.