Unverified50% confidenceFactExact time
Trojan Source攻击由剑桥大学研究者Nicholas Boucher和Ross Anderson于2021年在ACM CCS上披露，被分配CVE-2021-42574编号，利用Unicode双向文本控制字符使代码在人眼阅读与编译器解析时呈现不同逻辑
1
Sources
50%
Confidence
Long-term
Relevance
8/27/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedIn 2021, researchers at the University of Cambridge named the attack that uses Unicode bidirectional control characters for visual deception the Trojan Source attack and demonstrated that mainstream compilers and interpreters including GCC, Clang, Python, and Rust are all affected.79% similarUnverifiedBy 2024, security researchers had demonstrated indirect prompt injection attacks that hijack RAG system outputs by embedding hidden instructions in web pages64% similarUnverifiedThe update includes security hardening against CVE-2026-1839, a class of remote code execution vulnerabilities targeting model files in the pickle serialization format.63% similarUnverified2024年安全研究员Johann Rehberger公开演示了针对Microsoft 365 Copilot的提示注入攻击，通过邮件正文嵌入人眼不可见的恶意指令，当用户让Copilot总结收件箱时执行隐藏指令，将敏感邮件内容通过超链接参数外泄到攻击者服务器62% similarUnverifiedNullOrigin会扫描AI生成的代码，检测其中的Trojan Source漏洞61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/807805API
curl https://kongchang.com/api/v1/knowledge/claims/807805MCP
get_claim(id=807805)