{"data":{"id":"85c7fd27-99c7-4172-a548-b15901ff1f1f","title":"Location Matters: Sparse Latent-Variance Attacks for Face Privacy against Diffusion Personalization","summary":"The paper introduces SEAL, a sparse adversarial protection framework that modifies only 5% of spatial locations in a facial image to stop diffusion personalization from learning an individual's identity. It jointly optimizes perturbation locations and values through a differentiable top-k masking scheme, targeting the frozen VAE encoder's latent distribution. On CelebA-HQ and VGGFace2, it reports over 41 dB PSNR, 0.97 SSIM and at most 0.07 LPIPS, with identity similarity reduced to at most 0.15 after personalization.","solution":"N/A -- no mitigation discussed in source.","labels":["security","privacy","research"],"sourceUrl":"https://arxiv.org/abs/2611.14254v1","publishedAt":"2026-11-10T16:03:32.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["other"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["text-to-image diffusion models","Stable Diffusion-style personalization"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-10T16:03:32.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":"preprint","atlasIds":null}}