Data-Void Exploits in Web-Searching LLMs
A peer-reviewed security paper (to appear at NDSS 2027) shows that web-searching LLMs can be manipulated via 'data-void exploits': attackers publish disinformation in topic areas where reliable content is sparse, and the LLM's web search retrieves and cites that single adversarial page. Testing ChatGPT, Gemini and Sonar Pro across varied prompt tones and attacker strategies, the researchers found attacker content appeared in responses 31% of the time overall, with user skepticism offering only limited protection.