Red-Teaming & Adversarial Robustness - Weekly Roundup

MotionForge is introduced, the first large- scale simulation benchmark and data-generation pipeline tailored to jointly evaluate domain shifts and long-horizon interaction in dynamic manipulation, exposing a critical gap between current policy capabilities and the requirements of robust long- horizon manipulation of dynamic objects under domain shifts.

This work proposes RoboMP-DINOv2 (Robotics Mask-Prompted DINOv2), a full-scene vision encoder that treats masks as spatial prompts rather than visibility filters, and introduces masked-region color randomization (MCR) to improve appearance robustness, yielding RoboMP-DINOv2-MCR.

A strong target-specific calibration-transfer error can exist within one frozen environment, but the evidence does not establish that the error is intrinsic to the model or general across benchmarks.

Missing sensory streams typically break audiovisual tracking, but routing audio, face, and mouth inputs through modality-agnostic query attention shatters previous active speaker detection records across five benchmarks by up to 5.1 mAP.

A ROS-integrated framework, built on Isaac Sim, for large-scale procedural generation of agricultural environments, with built-in support for row crops, orchards, and vineyards and straightforward extensibility to additional crop categories is presented.

CDKF-Track is the first framework to jointly address detection-level fusion redundancy and learnable motion modeling in cooperative 3D MOT, and achieves up to 27.99% improvements in tracking accuracy over state-of-the-art multi-agent MOT methods.

IndustrialVLA-Bench is presented, an evidence-aware evaluation of six released VLA and WAM systems under a unified reporting schema that evaluates clean capability on LIBERO, non-language robustness on LIBERO-Plus, instruction sensitivity on LIBERO-Para, and observed execution cost.

A digital twin-driven virtual reality (VR) teleoperation platform, where the digital twin is created from markerless perception of the surgical environment and streamed for display on the HMD, which significantly outperforms a state-of-the-art HoloLens 2 mixed reality baseline.

A teacher-student framework combining an improved visual encoder architecture, persistent feature masking, and a novel consensus-gating algorithm to retain useful depth information under unmodeled corruption, which improves robustness where augmentation coverage is missing.

This work adds one feature-alignment term to ordinary VLA training: a frozen world model is run over the training frames once and cached, and the student learns to agree with that cache, indicating a broad representational prior rather than a fragile alignment between two particular networks.

A strict temporal split is addressed with every model trained on one period and scored once on a later one, which results in results about robustness to distribution shift, not malware evolution.

An exploratory case study that applies explainable artificial intelligence techniques to analyze how Prompt Guard 2 distinguishes malicious from benign prompts finds that Prompt Guard 2's decisions rely on the cumulative contribution of many tokens rather than a few dominant ones, yet saliency-guided synonym substitution and sentence-level paraphrasing can flip its predictions.

This work proposes a novel approach under the more realistic black-box threat model that utilizes concepts from reinforcement learning to optimize perturbations with a non-differentiable target model, and shows the success of reinforcement learning inspired black-box adversarial attack (RIBA) in generating adversarial perturbations using only a small number of queries to the target model.

SBMVTrack is proposed, a fully spiking framework for energy-efficient UAV tracking that introduces Energy-Weighted Spike Budgeting (EWSB), a method that constrains the energy-weighted firing rate and saturation activity, thereby reducing redundant spike computations.

This work presents GINIO, a geometric SO(3)-equivariant interface for neural inertial odometry under arbitrary rotations of the IMU measurement frame, and introduces Last-Frame Alignment (LFA), a deterministic preprocessing step that is provably equivalent to world-frame training for SO(3)-equivariant predictors.

Two geometric regularization strategies (hinged Riesz log-energy and effective-dimension maximization) applied to classifier prototypes to encourage more uniform hyperspherical coverage are investigated and the resulting prototype sets exhibit higher effective dimensionality and improved isotropy.

This work proposes replacing an empty representation with a learnable unconditional embedding, optimized to represent a meaningful unconditional state, and shows that learnable null embeddings consistently outperform fixed null embeddings across speaker similarity, speech stability, and expressiveness, while exhibiting greater robustness to larger guidance scales.

Structuring 4D diffusion acquisitions as geometric q-space graphs slashes slice-to-volume registration error by 73% over standard tools like FSL eddy—completely zero-shot and without ground-truth motion supervision.

A query optimization framework that integrates a Graph Transformer with the model-based reinforcement learning (RL) algorithm MuZero, which converts SQL queries into heterogeneous graphs containing tables, predicates, and join operators and demonstrates its practical effectiveness and scientific value for building high-performance, adaptive intelligent database systems.