Threat Pulse · Deep dive
Disguised-text attack
An attack hid inside lookalike characters, like a Cyrillic 'a' in place of a Latin one, to slip past naive text filters.
How we stop it
Text is normalized to canonical forms before any security check runs. What the filter sees is what the model sees.
Frequently asked
What is disguised-text attack?
An attack hid inside lookalike characters, like a Cyrillic 'a' in place of a Latin one, to slip past naive text filters.
How does Rogue-Agent Defense stop disguised-text attack?
Text is normalized to canonical forms before any security check runs. What the filter sees is what the model sees.
What should I do if I see disguised-text attack in the Threat Pulse feed?
Nothing urgent: the feed only shows attacks that were already blocked or flagged. If one class keeps appearing, review the linked defense guide and check your agents' allowlists, data boundaries, and spend caps.
Counts are real enforcement rows, anonymized. Attack classes seen in fewer than three workspaces never get a page.