Divide and Doubt: Diverse Distributed Poisoning for Retrieval-Augmented Generation

Multi-passage corpus poisoning often repeats one target claim across similar documents, creating correlated lexical and semantic patterns that similarity- and conflict-aware defenses can suppress jointly. We introduce DnD Divide and Doubt, a targeted attack based on two principles: distributing...

RAG-NAROK: Retrieval-Aware Knowledge Corpus Poisoning in RAG with Source-Specific Refutation

Retrieval augmented generation RAG systems have emerged as the dominant architecture for grounding large language model LLM outputs in verifiable external knowledge, yet their structural reliance on a dynamic retrieval pipeline introduces a largely unexplored class of adversarial vulnerability...