Could LLM Watermark Detection be Public?

Summary

This research asks whether a public LLM watermark detector would add risk, given that exposed detectors could let attackers make targeted edits. The authors propose a split-key public-private watermarking method, where one key is exposed through a public detector and the other is kept for full verification and forensics. They report that public detection mainly helps forgery, which the private pipeline can identify, while tampering with the released half stays detectable.

Related items

• LowAnthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection FlawsSimilar attack · The Hacker News
• CriticalCVE-2026-108263: Astron Agent code-node execution as root through workflow run endpointsSimilar attack · NVD/CVE Database
• MediumHackers abuse Google Ads, Bing redirects to push Claude ClickFix attacksSimilar attack · BleepingComputer
• CriticalHermes Agent - PKCE Session Takeover via Redirect-URI Parser ConfusionSimilar attack · Tenable Research Advisories
• LowSocial Engineering AI Agents: The New BEC for 2026Similar attack · Dark Reading