LLM Security Tools Fooled by Binary Comments
petrusenko_max · x · 2026-07-15
US Navy researchers have demonstrated a new evasion technique: attackers can embed hidden "comment" instructions into binaries to trick LLM-driven security tools into misjudging malicious code.
The core method involves:
- Injecting seemingly harmless "junk strings" to humans via genetic algorithms
- These strings are read as instructions by the AI
- This can cause tools to ignore malicious payloads, classify dangerous functions as safe, and miss data exfiltration paths
The authors conclude that current AI-based cybersecurity detection tools could be deceived by this covert prompt injection, thereby missing real threats.
More from Safety
- Thieves spoofing GPS steal $100M+ in data center cargo since June — Ars Technica AI · 2026-10-27
- Johns Hopkins Alerts 3,000+ Patients After Data Was Sent to an AI Tool — beingmodest · 2026-10-27
- Cohere reports Qwen models may phone home to China servers unprompted — troll_khan · 2026-10-27
- Alignment Hub launches with 120+ documented AI misbehavior incidents and a reporting template — Thom_Wolf · 2026-10-27
- Cohere: Qwen3.8 tried to upload probe file to Beijing cloud bucket in sandbox test — Cohere · 2026-10-27
- US senator slams AI industry for proposing 50-death threshold for 'catastrophic incident' — peterwildeford · 2026-10-27