This week in AI papers

We keep an eye on new AI papers on arXiv, pick one or two that really matter each day, and share the key ideas — no hype, just clear explanations.

LLM Daily – MIRROR: Novelty-Constrained Memory-Guided MCTS Red-Teaming for Agentic RAG

2026-06-28 · 10 min · 2.9 MB

Excerpt — Multimodal agentic retrieval-augmented generation (RAG) systems expand the attack surface beyond prompt injection to include text poisoning, image injection, direct-query attacks, and orchestrator-level tool…

📝 Article 📄 PDF

LLM Daily – Verifying Intent and Harm: A Unified Defense Against LLM-Generated Threats

2026-06-27 · 10 min · 2.9 MB

Excerpt — Large language models (LLMs) are increasingly deployed in interactive applications, yet they remain vulnerable to adversarial interactions that induce harmful, deceptive, or policy-violating outputs. Existing defenses…

📝 Article 📄 PDF

LLM Daily – Privacy-Preserving RAG via Multi-Agent Semantic Rewriting: Achieving Confidentia

2026-06-26 · 10 min · 2.9 MB

Excerpt — Retrieval-Augmented Generation enhances large language models by incorporating external knowledge, but deploying it in sensitive scenarios risks privacy leakage via malicious prompts. To address this, we propose a…

📝 Article 📄 PDF

LLM Daily – GuardPhish: Securing Open-Source LLMs from Phishing Abuse

2026-06-26 · 10 min · 2.9 MB

Excerpt — The rapid adoption of open-source Large Language Models (LLMs) in offline and enterprise environments has introduced a largely unexamined security risk like susceptibility to adversarial phishing prompts under static…

📝 Article 📄 PDF

LLM Daily – Collaborative Human-Agent Protocol (CHAP)

2026-06-25 · 10 min · 2.9 MB

Excerpt — Foundation models are moving from response generation into operational roles. They plan across steps, call tools, request human input, coordinate with other agents, and increasingly carry responsibility for work that…

📝 Article 📄 PDF

LLM Daily – Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bou

2026-06-25 · 10 min · 2.9 MB

Excerpt — LLM agents increasingly rely on persistent long-term memory, which creates a critical vulnerability that we study here: memory poisoning. An adversary can store untrusted content in one session that later steers a…

📝 Article 📄 PDF

LLM Daily – From Untrusted Input to Trusted Memory: A Systematic Study of Memory Poisoning A

2026-06-24 · 10 min · 2.9 MB

Excerpt — Memory is a core component of AI agents, enabling them to accumulate knowledge across interactions and improve performance. However, persistent memory introduces the risk of memory poisoning, where a single adversarial…

📝 Article 📄 PDF

LLM Daily – RoTRAG: Rule of Thumb Reasoning for Conversation Harm Detection with Retrieval-A

2026-06-23 · 10 min · 2.9 MB

Excerpt — Detecting harmful content in multi turn dialogue requires reasoning over the full conversational context rather than isolated utterances. However, most existing methods rely mainly on models internal parametric…

📝 Article 📄 PDF

LLM Daily – SafeClawBench: Separating Semantic, Audit-Evidence, and Sandbox Harm in Tool-Usi

2026-06-22 · 10 min · 2.9 MB

Excerpt — Tool-using language-model agents introduce security failures that go beyond unsafe text: they can disclose protected objects, write persistent memory, send messages, modify databases, or trigger harmful code and tool…

📝 Article 📄 PDF

LLM Daily – ToolChain-CRC: Conformal Risk Control for Agentic AI Under Retrieval and Tool-Us

2026-06-22 · 10 min · 2.9 MB

Excerpt — Modern AI agents retrieve documents, call tools, check intermediate information, and then produce a final answer or action. This creates a risk-control problem that is not visible from the final answer alone. A final…

📝 Article 📄 PDF