PulseAugur
EN
LIVE 09:34:37

New DRIFT attack removes diffusion model watermarks with 98-100% success

Researchers have developed a new method called DRIFT to remove watermarks embedded in images generated by diffusion models. This black-box attack works by partially re-noising images and then using stochastic reverse resampling to explore alternative generative paths. DRIFT effectively bypasses watermark verification by identifying the first point where the watermark is rejected and refining the image while retaining this rejection, achieving high success rates and image quality without needing access to secret keys or internal verifier information. AI

IMPACT This research highlights potential vulnerabilities in current AI watermarking techniques, potentially impacting content authenticity and provenance tracking.

RANK_REASON The cluster describes a novel research paper detailing a new method for attacking watermarks in generative AI models.

Read on Hugging Face Daily Papers →

AI-generated summary · Google Gemini · from 2 sources. How we write summaries →

New DRIFT attack removes diffusion model watermarks with 98-100% success

How we ranked this

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Research
The cluster describes a novel research paper detailing a new method for attacking watermarks in generative AI models.
Source corroboration
2 independent sources
Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics
paper, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
58 days old
Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

Full methodology in our editorial standards.

COVERAGE [2]

  1. arXiv cs.LG TIER_1 English(EN) · Rui Bao, Zheng Gao, Xiaoyu Li, Xiaoyan Feng, Yang Song, Jiaojiao Jiang ·

    DRIFT: Removing Diffusion Watermarks by Deflecting the Generative Trajectory

    arXiv:2609.08213v1 Announce Type: cross Abstract: Diffusion watermarking embeds verifiable signals into the generative process and commonly verifies them by recovering trajectory-dependent evidence, making the marks robust to conventional pixel-space distortions. Existing removal…

  2. Hugging Face Daily Papers TIER_1 English(EN) ·

    DRIFT: Removing Diffusion Watermarks by Deflecting the Generative Trajectory

    Diffusion watermarking embeds verifiable signals into the generative process and commonly verifies them by recovering trajectory-dependent evidence, making the marks robust to conventional pixel-space distortions. Existing removal attacks either regenerate along deterministic tra…