Security concerns for Large Language Models: A survey

A survey on large language model (LLM) security and privacy: The Good, The Bad, and The Ugly

Yao, Y., Duan, J., Xu, K., Cai, Y., Sun, Z., & Zhang, Y. (2024) · High-Confidence Computing · doi:10.1016/j.hcc.2024.100211 · Cited by 1,083 · see citing works

Not What You've Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection

Greshake, K., Abdelnabi, S., Mishra, S., Endres, C., Holz, T., & Fritz, M. (2023) · Proceedings of the 16th ACM Workshop on Artificial Intelligence and Security · doi:10.1145/3605764.3623985 · Cited by 667 · see citing works

<scp>PLeak:</scp> Prompt Leaking Attacks against Large Language Model Applications

Hui, B., Yuan, H., Gong, N., Burlina, P., & Cao, Y. (2024) · Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3658644.3670370 · Cited by 55 · see citing works

Fun-tuning: Characterizing the Vulnerability of Proprietary LLMs to Optimization-Based Prompt Injection Attacks via the Fine-Tuning Interface

Labunets, A., Pandya, N. V., Hooda, A., Fu, X., & Fernandes, E. (2025) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp61157.2025.00121 · Cited by 3 · see citing works

Safety and security of large language models in healthcare

Clusmann, J., Freyer, O., Ostermann, M., Ferber, D., Laleh, N. G., Hilgers, L., Kolbinger, F. R., Schneider, C. V., Downing, A., Wekenborg, M., et al. (2026) · Nature · doi:10.1038/s41586-026-10687-1 · Cited by 4 · see citing works

MCP-driven real-time security monitoring: A hybrid LLM and behavior-aware framework for temporal attack detection and severity assessment

Polat, O., Doğan, F., Türkoğlu, M., Yolcu, F., & Baturay, M. (2026) · Computer Networks · doi:10.1016/j.comnet.2026.112540 · Cited by 3 · see citing works

Evaluation of NeMo Guardrails as a Firewall for User–LLM Interaction

Azambuja, A. J., Guilherme, M., Castro, J. V. F. D., Lima, J. P. D. O., Oliveira, L. B., & Soares, A. D. S. (2026) · Future Internet · doi:10.3390/fi18050252 · Cited by 2 · see citing works

A Practical Incident-Response Framework for Generative AI Systems

Tuscano, D., & Disso, J. P. (2026) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp6010020 · Cited by 1 · see citing works

Patterns Of LLM Weaponization: A Comparative Analysis of Exploitation Incidents Across Commercial AI Systems

Antoniou, G. S. (2025) · International Journal of Academic Studies in Science and Education · doi:10.55549/ijasse.50 · Cited by 1 · see citing works

Towards Human-Centered Agent Authorization: A Landscape Analysis of Commercial AI Agents

Zhang, Y., & Wang, G. (2026) · CHI Conference Extended Abstracts on Human Factors in Computing Systems (CHI EA) · doi:10.1145/3772363.3798851 · Cited by 1 · see citing works

The Synergistic Integration of Access Control Management and Large Language Model Agents: A SurveyPreprint

Periti, F., & Saha, S. (2026) · doi:10.36227/techrxiv.177075184.43798334/v1 · Cited by 1 · see citing works

Evaluating Generative Reasoning Models for Credential Tweaking and Lightweight Client-Side Defense in IoT Ecosystems

Ajes, E. T., Rabbani, M., Anbiaee, Z., Lu, R., Mirani, M., Piya, G., Opushnyev, I., & Dadkhah, S. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3602717

Adversarial Threat Simulation in Large Language Models: Red Teaming Beyond Prompt Injection

Sharma, A., & Goel, A. (2025) · doi:10.38124/ijisrt/25nov556

Who Wrote This Code? Investigating Human and AI Programming Patterns

Nitika, & Narwal, R. (2025) · International Conference on Image Information Processing (ICIIP) · doi:10.1109/iciip68302.2025.11346257

Composite Model Architecture: A New Approach to Language Model Assembly

Jovanović, M., & Campbell, M. (2026) · Computer · doi:10.1109/mc.2025.3633826

System-Level Integration of Modular Language Models for Real-Time Risk Assessment in Third-Party Risk Management Platforms

Manavi, B., Aude, A., Chen, E., Daily, J., & Paglioni, V. P. (2025) · IEEE International Symposium on Systems Engineering · doi:10.1109/isse65546.2025.11370003

Detecting and Mitigating AI Prompt Injection Attacks in Large Language Models (LLMs)

Ureste, A., Park, H., & Abegaz, T. T. (2026) · Journal of The Colloquium for Information Systems Security Education · doi:10.53735/cisse.v13i1.227

The Significance of D.I. Dubrovsky’s Information Theory of Consciousness for Designing Artificial Intelligence Architectures

Marinosyan, A. K. (2025) · Russian Journal of Philosophical Sciences · doi:10.30727/0235-1188-2025-68-5-102-129

Differential privacy for data sharing: evolution and full-lifecycle applications in generative AI

Gao, B., Wang, L., Yu, Y., & Yang, A. (2026) · Computer Networks · doi:10.1016/j.comnet.2026.112335

Breaking Bad: Adversarial Prompting Targeting Feed Forward Neural Networks Within Transformers

Chang, L. (2026) · International journal of high school research · doi:10.36838/ijhsr87.251

Beyond the Model Architecture: Uncovering Environmental Vulnerabilities in Large Language Model Deployment

Aatif, M., Baig, M. Z., Adeel, U., Atta, H., & Mehmood, Y. (2026) · International Conference on Electrical/Electronics, Robotics, Artificial Intelligence, and Informatics (ICERAI) · doi:10.1109/icerai69511.2026.11494593

A Reproducible Benchmark for Prompt Injection Vulnerability Assessment in Small-To-Medium Language Models

Rahman, M. M., Eti, A. M., Mokit, J. R., Mou, S. A., Sarkar, S., & Shibly, M. M. A. (2025) · International Conference on Computer and Information Technology (ICCIT) · doi:10.1109/iccit68739.2025.11490549

Trust-Governed Agentic AI for Cyber-Resilient Digital Markets: Blockchain-Audited Federated Intelligence Under UncertaintyPreprint

Khorasani, N. S. M. (2026) · Research Square · doi:10.21203/rs.3.rs-9684485/v1

Security, Privacy, and Ethical Challenges in Large Language Models: A Review

Yogi, B., Ghosh, N., & Sahid, S. (2026) · Archives of Computational Methods in Engineering · doi:10.1007/s11831-026-10680-x

Cybersecurity in the Era of Quantum Computing and Advanced AI: Emerging Threats and Future Directions

Alnabulsiyyah, H., & Aldawsari, M. (2026) · European Conference on Cyber Warfare and Security · doi:10.34190/eccws.25.1.4910

A Multilingual Linguistic Analysis of Human vs LLM-Generated News in a Disinformation Context

Gargova, S., Pérez-Montero, A., Lloret, E., & Pozo, P. M. (2026) · Language Resources and Evaluation Conference (LREC) · doi:10.63317/345wj5pp9nkh

LARGE LANGUAGE MODELS FOR OPTIMIZING TASKS IN INFORMATION RETRIEVAL AND PROTECTION

Вавіленкова, А. І. (2026) · Cybersecurity Education Science Technique · doi:10.28925/2663-4023.2026.33.1276

Understanding the Evolving Threat Landscape of Generative and Agentic Artificial Intelligence

Mohapatra, H. (2026) · Advances in computational intelligence and robotics book series · doi:10.4018/979-8-2600-0368-8.ch002

RAPID: A Resource-Aware Prompt Injection Defense for LLM-Enabled Threat Detection

Nkoro, E. C., Yu, W., & Liao, W. (2026) · IEEE Internet of Things Journal · doi:10.1109/jiot.2026.3717740

Future Threats and Risks - I: Deepfakes, Autonomous Weapons, and AI Safety

Atalan, Y. (2026) · Turkish Academy of Sciences eBooks · doi:10.53478/tuba.978-625-6110-86-1.ch23

Tone Matters: The Impact of Linguistic Tone on Hallucination in VLMs

Hong, W., Jiang, Z., Shen, B., Guan, X., Feng, Y., Xu, M., & Li, B. (2026) · IEEE/CVF Winter Conference on Applications of Computer Vision Workshops (WACVW) · doi:10.1109/wacvw68408.2026.00147

A Comparative Analysis of Security Vulnerabilities and Defense Mechanisms in Large Language Models

Barek, A., Rashid, M. B., Riad, A. K. I., Francia, G., Cetinkaya, C., Shahriar, H., Khan, M. U., & Ahamed, S. I. (2026) · IEEE Annual International Computer Software and Applications Conference (COMPSAC) · doi:10.1109/compsac69091.2026.00461

CriticIDS: LLM-Augmented Intrusion Detection with AutoML and Explainability for IoT Networks

Hasan, T., & Tasnim, S. (2026) · IEEE Annual International Computer Software and Applications Conference (COMPSAC) · doi:10.1109/compsac69091.2026.00183

AI-Driven Cybersecurity and Resilience in Enterprise and Cyber-Physical Ecosystems: A Systematic Review of Detection, Privacy, Defence, and Impact ForecastingPreprint

Khordadpour, P. (2026) · SSRN Electronic Journal · doi:10.2139/ssrn.7418563

LLM-Powered Automated Attacks

Girászi, T., Papp, N., Oláh, N., & Huszti, A. (2026) · International Conference on Applied Informatics (ICAI) · doi:10.17048/icai.2026.107

Adaptive Honey-Memory: A Semantic Deception Framework for Disrupting Agentic Malware

Ahsan, T., Asad, M., Firdous, S., Tahir, Z., Malik, A. H., & Abid, A. (2026) · International Journal of Innovations in Science and Technology · doi:10.33411/ijist/2010

Prompt Injection Threats in Azure-Based Large Language Model Applications

Lakavath, S. R. (2026) · Journal of Computer Science and Information Technology · doi:10.61424/jcsit.v3i2.1077

Trustworthy large language models (LLMs) for power-system operations: From “Grid Copilots” to verifiable decision support

Sulaima, M. F., Jyotsna, A., Herout, L., Gálvez, I. P., Krejcar, O., & Namazi, H. (2026) · Energy Nexus · doi:10.1016/j.nexus.2026.100870

Provenance-Aware Evaluation of Cloud and Local Large Language Models for Cybersecurity WorkloadsPreprint

Sarkar, N. I., & Rashid (2026) · Research Square · doi:10.21203/rs.3.rs-11254181/v1

Multilevel Protection of a RAG Assistant Against Resource Exhaustion Threats

Astafiev, A. V., Gusev, M., Витюк, В. А., & Львович, Ж. А. (2026) · International Russian Automation Conference (RusAutoCon) · doi:10.1109/rusautocon69876.2026.11707395

UnifiedBench: Toward a Unified Dataset for Red-Teaming Language Models

de Sá, M. A., de Senna, P. H. G., Neto, M. P. P., & Miers, C. C. (2026) · Simpósio Brasileiro de Cibersegurança (SBSeg) · doi:10.5753/sbseg_estendido.2026.29187

Design and Evaluation of Multilayered Guardrails for Securing Large Language Model and Retrieval Augmented Generation Based Employee Recruitment Chatbots

Pratama, A., & Ramli, K. (2026) · Jurnal Teknik Informatika (Jutif) · doi:10.52436/1.jutif.2026.7.5.5761

Generative AI in Cloud Computing: Applications, Security Challenges, and Future Research Directions

Konde, R. B., & Phatangare, M. A. M. (2026) · INTERANTIONAL JOURNAL OF SCIENTIFIC RESEARCH IN ENGINEERING AND MANAGEMENT · doi:10.55041/ijsrem68137

THE DUAL ROLE OF LARGE LANGUAGE MODELS IN CYBERSECURITY: THREATS, DEFENSES, AND RESEARCH DIRECTIONS

Ali, M., & Manzoor, A. R. (2026) · “ADVANCED JOURNAL OF UNIVERSITY SCIENCE AND CREATIVE INNOVATIONS” AJOU SCI · doi:10.67620/ajousci.240001

From screening to authorisation: A multi-model execution-level evaluation of tool-injection risk, blocking, and utility

Khalid, S., Arif, S., Iqbal, A., Ahmad, A., Ali, S. Q., & Rehman, M. U. (2026) · Expert Systems with Applications · doi:10.1016/j.eswa.2026.134910

A Survey on Security of the Model Context Protocol: Documented Incidents, Defense Frameworks, and Coverage Gaps in Agentic AI

Gautam, A. K., & Tiwary, P. (2026) · doi:10.1109/icosics70095.2026.11746554

Hybrid Latent-Guided Monte Carlo Tree Search for Efficient Automated Jailbreaking of Large Language Models

Yang, Q. (2026) · doi:10.1109/icsip70099.2026.11744225

Lightweight Transformer Models for Prompt Injection Detection: A Comparative Study of TinyBERT and ALBERT

Setu, J. H., Smaron, J. M. S.-U. I., Islam, A., Rahman, M. R., & Amin, M. A. (2026) · doi:10.1109/icact70625.2026.11748581

Security and privacy in LLMs: A comprehensive survey of threats and mitigation strategies

Berini, A. D. E., Jamil, N., Benrazek, A., Lakas, A., Ismail, L., Ferrag, M. A., & Lam, K. (2026) · Information Fusion · doi:10.1016/j.inffus.2026.104241 · Cited by 9 · see citing works

Threats and Defenses for Large Language Models: A Survey

Sheng, X., & Jiang, Q. (2025) · Proceedings of the 2025 8th International Conference on Computer Information Science and Artificial Intelligence · doi:10.1145/3773365.3773631 · Cited by 3 · see citing works

SECURITY OF LARGE LANGUAGE MODELS: THREATS, DEFENSES, AND EMPIRICAL EVALUATION

Kumar, A., Sri, J., & Sravanthi, L. (2026) · Iterative International Publishers eBooks · doi:10.58532/nbennurissdb3p4c1

The Colossal Defense: Security Challenges of Large Language Models

Maity, S., & Arora, J. (2024) · IEEE Delhi Section Conference (DELCON) · doi:10.1109/delcon64804.2024.10866433 · Cited by 1 · see citing works

Security of Large Language Models: A Structured Survey of Attack Surfaces, Behavioral Vulnerabilities, Defenses and Red Teaming ApproachesPreprint

Harb, J., & Aı̈meur, E. (2026) · SSRN Electronic Journal · doi:10.2139/ssrn.7592098