From c8a98a8eeb05fdd90d6add79c52f90bce38dfda2 Mon Sep 17 00:00:00 2001
From: Daizong Liu <dzliu@stu.pku.edu.cn>
Date: Fri, 16 May 2025 11:51:05 +0800
Subject: [PATCH] update 5.16.2025

---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.md b/README.md
index 6757a06..9787a6b 100644
--- a/README.md
+++ b/README.md
@@ -169,6 +169,10 @@ Here, we've summarized existing LVLM Attack methods in our survey paper👍.
   * Le Wang, Zonghao Ying, Tianyuan Zhang, Siyuan Liang, Shengshan Hu, Mingchuan Zhang, Aishan Liu, Xianglong Liu
   * Beihang University, National University of Singapore, Huazhong University of Science and Technology, Henan University of Science and Technology
   * [Arxiv2025] https://arxiv.org/abs/2504.14348
+* **X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP** |  #
+  * Hanxun Huang, Sarah Erfani, Yige Li, Xingjun Ma, James Bailey
+  * The University of Melbourne, Singapore Management University, Fudan University
+  * [ICML2025] https://arxiv.org/abs/2505.05528
 
 ## Jailbreak-Attack
 * **Are aligned neural networks adversarially aligned?** |