[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-adversarial-attack-hides-damage-in-a-decoy-object-to-fool-ai":10,"sections":34},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":29,"feedback":33,"feedback_at":22,"cost_usd":33,"total_tokens":33},9170,"adversarial-attack-hides-damage-in-a-decoy-object-to-fool-ai","Adversarial Attack Hides Damage in a Decoy Object to Fool AI","A new technique hides adversarial noise in a secondary carrier object, keeping the main subject intact while still fooling AI classifiers.","Researchers have a new way to attack AI image classifiers without visibly distorting the photo's main subject.\n\nThe trick is what the authors call a carrier: a secondary object added to an image specifically to absorb an adversarial attack's pixel changes. Rather than distorting the subject - a face, a product, whatever the classifier is meant to recognize - the attack routes most of its changes into this secondary element. The researchers report three findings: a carrier cuts subject distortion by soaking up a larger share of the attack's changes, it makes the attack transfer better across models it wasn't built for, and successful attacks still leave the subject looking like itself to a human observer even as the classifier is fooled.\n\nVisually obvious adversarial noise is easy to flag with a quick look, which has limited how useful these attacks are against things like content moderation or facial-recognition systems. A method that hides the manipulation in a decoy object while keeping the subject intact makes an attack both harder to eyeball and more likely to work against classifiers the attacker never trained against.\n\nIt is a lab result, not a working exploit against any deployed system - but it is exactly the kind of quiet technique that tends to resurface a year later in a more practical attack.","[\"adversarial-attacks\",\"computer-vision\",\"ai-security\"]","2026-10-01T04:00:00.000Z","2026-10-01T23:46:53.956Z","2026-10-01T23:46:54.180Z","published",null,[],"ai",[26,27,28],"adversarial-attacks","computer-vision","ai-security",[30],{"name":31,"url":32},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2609.39723",0,{"sections":35},[36,39,43,47,52,57,61,66,71,75,80,85,90,95],{"name":37,"slug":24,"count":38,"latest_published_at":18},"AI",5598,{"name":40,"slug":41,"count":42,"latest_published_at":18},"Security","security",815,{"name":44,"slug":45,"count":46,"latest_published_at":18},"Policy","policy",430,{"name":48,"slug":49,"count":50,"latest_published_at":51},"Deals","deals",298,"2026-09-30T21:00:26.000Z",{"name":53,"slug":54,"count":55,"latest_published_at":56},"Hardware","hardware",196,"2026-09-30T13:00:00.000Z",{"name":58,"slug":59,"count":60,"latest_published_at":18},"Science","science",163,{"name":62,"slug":63,"count":64,"latest_published_at":65},"Consumer Tech","consumer-tech",149,"2026-09-30T22:57:11.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Dev Tools","dev-tools",93,"2026-10-01T02:30:48.000Z",{"name":72,"slug":73,"count":69,"latest_published_at":74},"Software","software","2026-09-30T21:41:11.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Startups","startups",84,"2026-09-30T20:39:09.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Gaming","gaming",51,"2026-09-30T16:24:30.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"General","general",50,"2026-09-30T21:37:54.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"Reviews","reviews",31,"2026-09-28T14:31:34.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]