Overview

AI agent security studies how tool use, memory, delegation, and interaction with people or environments create risks beyond those of a standalone language model, including prompt injection, privilege misuse, data leakage, and unsafe actions. Researchers test these risks with red-teaming and execution-grounded benchmarks for coding, browsing, GUI, embodied, and multi-agent tasks, measuring whether harmful effects occur across trajectories rather than judging text alone. Defenses range from input and memory provenance checks to sandboxing, least-privilege permissions, stateful runtime authorization, action verification, and cryptographic identity or audit mechanisms. An open challenge is making controls robust to adaptive, long-horizon attacks and interactions between tools or agents while preserving useful task completion; benchmark realism and comparable measures remain uneven.

Latest papers

CardsList

517 papers74 papers in the last four weeks, up 32% on the four weeks before. 0.4% of all new papers.

  1. When Convenience Becomes Risk: A Semantic View of Under-Specification in Host-Acting Agents

    Mar 22, 2026Di Lu, Yongzhi Liao, Xutong Mu +5AI Agent SecurityComputer-Use Agents

  2. Detection of adversarial intent in Human-AI teams using LLMs

    Mar 21, 2026Abed K. Musaffar, Ambuj Singh, Francesco BulloAI Agent SecurityAI Agent Monitoring

  3. Profit is the Red Team: Stress-Testing Agents in Strategic Economic Interactions

    Mar 21, 2026Shouqiao Wang, Marcello Politi, Samuele Marro +1AI Agent SecurityAutomated Red Teaming

  4. T-MAP: Red-Teaming LLM Agents with Trajectory-aware Evolutionary Search

    Mar 21, 2026Hyomin Lee, Sangwoo Park, Yumin Choi +3Adversarial Prompt GenerationLLM Red Teaming

  5. Memory poisoning and secure multi-agent systems

    Mar 20, 2026Vicenç Torra, Maria Bras-AmorósAgent Memory PoisoningAI Agent Security

  6. Trojan's Whisper: Stealthy Manipulation of OpenClaw through Injected Bootstrapped Guidance

    Mar 20, 2026Fazhong Liu, Zhuoyan Chen, Tu Lan +6AI Agent SecurityAgent Skill Security Auditing

  7. The Autonomy Tax: Defense Training Breaks LLM Agents

    Mar 19, 2026Shawn Li, Yue ZhaoAI Agent SecurityLLM Agents

  8. ClawTrap: A MITM-Based Red-Teaming Framework for Real-World OpenClaw Security Evaluation

    Mar 19, 2026Haochen Zhao, Shaoyang CuiAI Agent SecurityWeb Agents

  9. PlanTwin: Privacy-Preserving Planning Abstractions for Cloud-Assisted LLM Agents

    Mar 19, 2026Guangsheng Yu, Qin Wang, Rui Lang +2AI Agent SecurityLLM Agent Planning

  10. Caging the Agents: A Zero Trust Security Architecture for Autonomous AI in Healthcare

    Mar 18, 2026Saikat MaitiAI Agent SecurityLLM Agent Security

  11. Context Matters: Repository-Aware Security Analysis of the Agent Skill Ecosystem

    Mar 17, 2026Florian Holzbauer, David Schmidt, Gabriel Gegenhuber +2AI Agent SecurityAgent Skill Security Auditing

  12. The Internet of Physical AI Agents: Interoperability, Longevity, and the Cost of Getting It Wrong

    Mar 16, 2026Roberto Morabito, Mallik TatipamulaAgentic AIAI Agent Governance

  13. Evasive Intelligence: Lessons from Malware Analysis for Evaluating AI Agents

    Mar 16, 2026Simone Aonzo, Merve Sahin, Aurélien Francillon +1AI Agent EvaluationAI Agent Safety

  14. How Vulnerable Are AI Agents to Indirect Prompt Injections? Insights from a Large-Scale Public Competition

    Mar 16, 2026Mateusz Dziemian, Maxwell Lin, Xiaohan Fu +28Indirect Prompt InjectionPrompt Injection Attacks

  15. Visual Confused Deputy: Exploiting and Defending Perception Failures in Computer-Using Agents

    Mar 16, 2026Xunzhuo Liu, Bowei He, Xue Liu +3Computer-Use Agent SafetyAI Agent Security

  16. Security Considerations for Artificial Intelligence Agents

    Mar 12, 2026Ninghui Li, Kaiyuan Zhang, Kyle Polley +1AI Agent SecurityLLM Agent Security

  17. Cascade: Composing Software-Hardware Attack Gadgets for Adversarial Threat Amplification in Compound AI Systems

    Mar 12, 2026Sarbartha Banerjee, Prateek Sahu, Anjo Vahldiek-Oberwagner +2AI Agent SecurityLLM Security

  18. Taming OpenClaw: Security Analysis and Mitigation of Autonomous LLM Agent Threats

    Mar 12, 2026Xinhao Deng, Yixiang Zhang, Jiaqing Wu +15AI Agent SecurityLLM Agent Security

  19. The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey

    Mar 11, 2026Juhee Kim, Xiaoyuan Liu, Zhun Wang +4AI Agent SecurityLLM Agent Security

  20. MCP-in-SoS: Risk assessment framework for open-source MCP servers

    Mar 10, 2026Pratyay Kumar, Miguel Antonio Guirao Aguilera, Srikathyayani Srikanteswara +2MCP SecurityCybersecurity

  21. Compatibility at a Cost: Systematic Discovery and Exploitation of MCP Clause-Compliance Vulnerabilities

    Mar 10, 2026Nanzi Yang, Weiheng Bai, Kangjie LuMCP SecurityAI Agent Security

  22. AgenticCyOps: Securing Multi-Agentic AI Integration in Enterprise Cyber Operations

    Mar 10, 2026Shaswata Mitra, Raj Patel, Sudip Mittal +2AI Agent SecurityMulti-Agent System Security

  23. Security Considerations for Multi-agent Systems

    Mar 9, 2026Tam Nguyen, Moses Ndebugre, Dheeraj ArremsettyAI Agent SecurityMulti-Agent System Security

  24. SlowBA: An efficiency backdoor attack towards VLM-based GUI agents

    Mar 9, 2026Junxian Li, Tu Lan, Haozhen Tan +2Backdoor AttacksGUI Agents