Privacy Attacks papers, 2023–2026

Key findings

• Privacy Attacks went from 124 papers in 2023 to 219 in 2026, roughly 1.8x in three years.
• ICLR publishes the most Privacy Attacks work: 262 papers from 2023 to 2026, 38% of the four-venue total.
• The fastest-growing overlap is with Alignment and Safety: papers tagged with both rose from 2 in 2023 to 80 in 2026.
• Among the 5 topics under Federated and Privacy, it ranks #1 by 2026 paper count; the fastest grower in the group, Secure Aggregation, is up 1.8x versus 1.8x here.

Representative papers

Spread across years and venues so every edition shows up

• NeurIPS 2026A Private Empirical Defense Against Privacy Audits
• ICML 2026A Statistical Framework for Analyzing Specification Resistance to Learnware-Inversion Risks
• ICLR 2026(Token-Level) \textbf{InfoRMIA}: Stronger Membership Inference and Privacy Assessment for LLMs
• CVPR 2026Out of Sight Out of Track Adversarial Attacks on Propagation-based
• NeurIPS 2025A Reliable Cryptographic Framework for Empirical Machine Unlearning Evaluation
• ICML 2025A Certified Unlearning Approach without Access to Source Data
• ICLR 2025Adversarial Attacks on Data Attribution
• CVPR 2025Adv-CPG: A Customized Portrait Generation Framework with Facial Adversarial Attacks
• NeurIPS 2024Reproducibility Study on Adversarial Attacks Against Robust Transformer Trackers
• ICML 2024Collective Certified Robustness against Graph Injection Attacks
• ICLR 2024Be Careful What You Smooth For: Label Smoothing Can Be a Privacy Shield but Also a Catalyst for Model Inversion Attacks
• CVPR 2024Efficient Privacy-Preserving Visual Localization Using 3D Ray Clouds
• NeurIPS 2023Bounding the Invertibility of Privacy-preserving Instance Encoding using Fisher Information
• ICML 2023Data Poisoning Attacks Against Multimodal Encoders
• ICLR 2023Adversarial Attacks on Adversarial Bandits
• CVPR 2023Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders
• NeurIPS 2026Adaptive Target-Charging with Privacy Filters and Individual Accounting
• ICML 2026How does Bayesian Sampling help Membership Inference Attacks?
• ICLR 2026Beyond Membership: Limitations of Add/Remove Adjacency in Differential Privacy
• CVPR 2026Revisiting Geometric Obfuscation with Dual Convergent Lines for Privacy-Preserving Image

All Privacy Attacks papers

38 papers, page 1 of 1

1. ICML 2026A Game-Theoretic Analysis of Attacks on Large Language Models via Compositional Skills
2. ICML 2026A Statistical Framework for Analyzing Specification Resistance to Learnware-Inversion Risks
3. ICML 2026Adversarial Attacks and Robust Training for Hypergraph Neural Networks
4. ICML 2026AgentLAB: Benchmarking LLM Agents against Long-Horizon Attacks
5. ICML 2026AlienLM: Alienization of Language for API-Boundary Privacy in Black-Box LLMs
6. ICML 2026An Empirical Study on the Resilience of Partial Merging to Model Clone Attacks
7. ICML 2026Bias in Zeroth-Order Normal Estimation for Decision-Based Attacks
8. ICML 2026Continual Learning With Participation Privacy: An Auditable Buffering-Aggregation Recipe
9. ICML 2026CREDIT: Certified Ownership Verification of Deep Neural Networks Against Model Extraction Attacks
10. ICML 2026DIVER: Diving Deeper into Distilled Data via Expressive Semantic Recovery
11. ICML 2026Efficient privacy loss accounting for subsampling and random allocation
12. ICML 2026Enhancing Membership Inference Attacks on Diffusion Models from a Frequency-Domain Perspective
13. ICML 2026Fast and Near-Optimal Algorithms for Private Hypothesis Selection
14. ICML 2026From Prompts to Responses: Dual-Sided Data Leakage and Defense in Split Large Language Models
15. ICML 2026Gradient Inversion Attacks Beyond SGD
16. ICML 2026How does Bayesian Sampling help Membership Inference Attacks?
17. ICML 2026Localizing Memorized Regions in Diffusion Models via Coordinate-Wise Curvature Differences
18. ICML 2026Membership Inference Attacks for Unseen Classes
19. ICML 2026MetaMoE: Diversity-Aware Proxy Selection for Privacy-Preserving Mixture-of-Experts Unification
20. ICML 2026Multilingual Unlearning in LLMs: Transfer, Dynamics, and Reversibility
21. ICML 2026Neural Honeytrace: Plug&Play Watermarking Framework against Model Extraction Attacks
22. ICML 2026New Wide-Net-Casting Jailbreak Attacks Risk Large Models
23. ICML 2026On the Sharp Input-Output Analysis of Nonlinear Systems under Adversarial Attacks
24. ICML 2026OptiFluence: Principled Design of Privacy Canaries
25. ICML 2026Optimal conversion from Rényi Differential Privacy to $f$-Differential Privacy
26. ICML 2026Persistent Backdoor Attacks in Class-Incremental Learning via Structural Invariant Anchoring
27. ICML 2026Persuasive Privacy
28. ICML 2026PrivAct: Internalizing Contextual Privacy Preservation via Multi-Agent Preference Training
29. ICML 2026Provably Protecting Fine-Tuned LLMs from Training Data Extraction while Preserving Utility
30. ICML 2026Reconstructing Template-Memorized Images from Natural Prompts
31. ICML 2026Revisiting Asymmetries in Black-box Link Stealing against Graph Neural Networks
32. ICML 2026Robust In-Context Reinforcement Learning Under Reward Poisoning Attacks
33. ICML 2026SORA: Free Second-Order Attacks in Fast Adversarial Training
34. ICML 2026The Hidden Risk: Membership Inference Attacks on Multimodal Federated Learning via Modality Imbalance
35. ICML 2026Training-Free Adversarial Robustness in Computational MRI
36. ICML 2026Unlearning Isn’t Forgetting: Revealing Hidden Leakage in Class Unlearning Evaluations
37. ICML 2026When Can You Poison Rewards? A Tight Characterization of Reward Poisoning in Linear MDPs
38. ICML 2026Where Rectified Flows Leak: Characterising Membership Signals Along the Interpolation Path

FAQ

How many Privacy Attacks papers were published at NeurIPS, ICLR, ICML and CVPR from 2023 to 2026?

698 in total: 124 in 2023, 180 in 2024, 175 in 2025, 219 in 2026.

How many Privacy Attacks papers are at NeurIPS 2026?

NeurIPS 2026 has 55 Privacy Attacks papers, versus 45 the year before.

How many Privacy Attacks papers are at ICLR 2026?

ICLR 2026 has 102 Privacy Attacks papers, versus 83 the year before.

How many Privacy Attacks papers are at ICML 2026?

ICML 2026 has 38 Privacy Attacks papers, versus 29 the year before.

How many Privacy Attacks papers are at CVPR 2026?

CVPR 2026 has 24 Privacy Attacks papers, versus 18 the year before.

Which conference publishes the most Privacy Attacks papers?

ICLR, with 262 papers from 2023 to 2026.