@article{adaptiveattacksbreakdefensesagainst,
  title = {Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents},
  author = {Qiusi Zhan and Richard Fang and Henil Shalin Panchal and Daniel Kang},
  year = {2025},
  eprint = {2503.00061},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2503.00061v2},
}