arXiv:2609.10002v2 Announce Type: replace-cross Abstract: Deepfake detectors remain vulnerable to transfer-based black-box attacks, in which adversarial examples are generated on a source surrogate model and transferred to a target model, unknown to the attack
← Back to all developments · Signals are a development reported by more than one source. See the methodology.