AI Agent Security

Follow this topic Ask about this topic

Momentum

43 papers in the last four weeks, up 258% on the four weeks before. 0.4% of all new papers.

Jul 13Week of Sep 28

Latest papers 311

All topics

When Agents Talk: Discourse, Manipulation, and Risk in an Agentic Social Network
May 20, 202610a Labs, :, Grace Cheong +22AI Agent Security Multi-Agent System Security
10a Labs1
Beyond Text-to-SQL: An Agentic LLM System for Governed Enterprise Analytics APIs
May 20, 2026Gundeep Singh, Parsa Kavehzadeh, Jing Xia +5LLM Agent Orchestration AI Agent Security
Dialpad Inc.
Heartbeat-Bound Hierarchical Credentials: Cryptographic Revocation for AI Agent Swarms
May 20, 2026Saurabh DeochakeAI Agent Security LLM Agent Security
SentinelOne Inc. Mountain View, USA
Hallucination as Exploit: Evidence-Carrying Multimodal Agents
May 18, 2026Guijia Zhang, Hao Zheng, Harry YangAI Agent Security Multimodal Hallucination
1Shenzhen University · 2HKUST
Trustworthy Agent Network: Trust in Agent Networks Must Be Baked In, Not Bolted On
May 18, 2026Yixiang Yao, Yuhang Yao, Xinyi Fan +5Multi-Agent LLM Systems Multi-Agent Coordination
University of Southern California · Carnegie Mellon University · University of Illinois Urbana-Champaign
Agent Security is a Systems Problem
May 18, 2026Mihai Christodorescu, Earlence Fernandes, Ashish Hooda +11AI Agent Security
1Google · University of California San Diego · University of Wisconsin–Madison +3
Overeager Coding Agents: Measuring Out-of-Scope Actions on Benign Tasks
May 18, 2026Yubin Qu, Ying Zhang, Yanjun Zhang +4Computer-Use Agent Benchmarks Coding Agents
Griffith University · Wake Forest University · Nanyang Technological University +2
LivePI: More Realistic Benchmarking of Agents Against Indirect Prompt Injection
May 18, 2026Lei Zhao, Abhay Bhaskar, Edgar DobribanAI Agent Security AI Agent Safety
University of Pennsylvania
ESLD (External Surrogate Latent Defense): A Latent-Space Architecture for Faster, Stronger Prompt-Injection Defense
May 18, 2026Yash NarendraAI Agent Security Safety Filtering
Microsoft
AI Agents May Always Fall for Prompt Injections
May 17, 2026Sahar Abdelnabi, Eugene BagdasarianContextual Integrity AI Agent Security
ELLIS Institute Tübingen & MPI-IS & Tübingen AI Center · University of Massachusetts Amherst
ADR: An Agentic Detection System for Enterprise Agentic AI Security
May 17, 2026Chenning Li, Pan Hu, Justin Xu +9MCP Security AI Agent Security
Uber Technologies, Inc., USA · Massachusetts Institute of Technology, USA · University of Oxford, United Kingdom
Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security
May 17, 2026Jinhu Qi, Muzhi Li, Jiahong Liu +9AI Agent Reliability AI Agent Evaluation
Faculty of Engineering, Department of Computer Science and Engineering, The Chinese University of Hong Kong, Hong Kong, China. · Artificial Intelligence Innovation and Incubation Institute, Fudan University, Shanghai, China. · Shanghai Academy of AI for Science, Shanghai, China.
PrivScope: Task-scoped Disclosure Control for Hybrid Agentic Systems
May 15, 2026Shafizur Rahman Seeam, Zhengxiong Li, Zhiyuan Yu +3Data Leakage Privacy-Preserving Language Models
Ian · Rochester Institute of Technology, Rochester, NY, USA · University of Colorado Denver, Denver, CO, USA +2
SLEIGHT-Bench: A Benchmark of Evasion Attacks Against Agent Monitors
May 15, 2026Elle Najt, Colin Toft, Tyler Tracy +2Software Engineering Agents Adversarial Attacks
1Anthropic Fellows Program · University of Waterloo · 3Redwood Research +1
The End of Trust: How Agentic AI Breaks Security Assumptions
May 14, 2026Osama Zafar, Alexander Nemecek, Erman AydayAI Agent Security AI Agent Governance
Dept. of Computer and Data Sciences Case Western Reserve University Cleveland, USA
Do Coding Agents Understand Least-Privilege Authorization?
May 14, 2026Zheng Yan, Jingxiang Weng, Charles Chen +9Software Engineering Agents AI Agent Security
Evolvent AI Research Team
Verifiable Agentic Infrastructure: Proof-Derived Authorization for Sovereign AI Systems
May 13, 2026Jun He, Deying YuAI Agent Security AI Agent Governance
AgentTrap: Measuring Runtime Trust Failures in Third-Party Agent Skills
May 13, 2026Haomin Zhuang, Hanwen Xing, Yujun Zhou +5AI Agent Security LLM Agent Security
University of Notre Dame · University of Southern California · LMU Munich +1
Language-Based Agent Control
May 13, 2026Timothy Zhou, Loris D'Antoni, Nadia PolikarpovaAI Agent Security Information Flow Control
Large Language Models for Agentic NetOps and AIOps: Architectures, Evaluation, and Safety
May 12, 2026Muhammad Bilal, Jon Crowcroft, Ruizhi Wang +2LLM Agent Evaluation AI Agent Security
School of Computing and Communications Lancaster University, United Kingdom · Department of Computer Science and Technology, University of Cambridge, United Kingdom · School of Software, Nanjing University of Information Science and Technology, China +1
Attacks and Mitigations for Distributed Governance of Agentic AI under Byzantine Adversaries
May 12, 2026Matthew D. Laws, Alina Oprea, Cristina Nita-RotaruAI Agent Security AI Agent Monitoring
Northeastern University
No More, No Less: Task Alignment in Terminal Agents
May 12, 2026Sina Mavali, David Pape, Jonathan Evertz +5Computer-Use Agent Benchmarks AI Alignment
CISPA Helmholtz Center for Information Security · ELLIS Institute Tübingen and MPI for Intelligent Systems · Tübingen AI Center
IPI-proxy: An Intercepting Proxy for Red-Teaming Web-Browsing AI Agents Against Indirect Prompt Injection
May 12, 2026Chia-Pei, Chen, Kentaroh Toyoda +2AI Agent Security AI Agent Security Benchmarks
Janet · Vulcan Research, AIFT
Behavioral Integrity Verification for AI Agent Skills
May 12, 2026Yuhao Wu, Tung-Ling Li, Hongliang LiuAgent Reliability AI Agent Auditing
Palo Alto Networks
Digital Identity for Agentic Systems: Toward a Portable Authorization Standard for Autonomous Agents
May 12, 2026Partha MadhiraAI Agent Security AI Agent Governance
Can a Single Message Paralyze the AI Infrastructure? The Rise of AbO-DDoS Attacks through Targeted Mobius Injection
May 12, 2026Zi Liang, Ronghua Li, Yanyun Wang +2AI Agent Security LLM Agent Security
The Hong Kong Polytechnic University, Hong Kong SAR, China · HKUST (GZ), Guangzhou, China
Under the Hood of SKILL.md: Semantic Supply-chain Attacks on AI Agent Skill Registry
May 12, 2026Shoumik Saha, Kazem Faghih, Soheil FeiziAI Agent Security LLM Agent Skill Retrieval
Department of Computer Science, University of Maryland - College Park
ExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks?
May 11, 2026Zhun Wang, Nico Schiller, Hongwei Li +13AI Agent Security AI Agent Security Benchmarks
1UC Berkeley · 2Max Planck Institute for Security and Privacy · 3UC Santa Barbara +4
MATRA: Modeling the Attack Surface of Agentic AI Systems -- OpenClaw Case Study
May 11, 2026Tim Van hamme, Thomas Vissers, Javier Carnerero-Cano +4AI Risk Management AI Agent Security
DistriNet, KU Leuven, 3001 Leuven, Belgium · IBM Research · CISPA Helmholtz Center for Information Security +2
Red-Teaming Agent Execution Contexts: Open-World Security Evaluation on OpenClaw
May 11, 2026Hongwei Yao, Yiming Liu, Yiling He +1AI Agent Security LLM Agent Security
Department of Computer Science, City University of Hong Kong, Hong Kong · School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China · University College London, London, United Kingdom +1

May 20, 2026, cs.SIJ/K move · Enter open · S save

When Agents Talk: Discourse, Manipulation, and Risk in an Agentic Social Network

10a Labs, :, Grace Cheong, Violet Davis+21

10a Labs1

AI Agent Security Multi-Agent System Security

Open paper AskPDF arXiv

AI agents are increasingly interacting within shared online environments, creating new operational security risks. We analyze activity on Moltbook, a Reddit-style social platform where AI agents--typically configured and overseen by human operators--post and interact with one another at scale. Using a dataset of 228,684 posts produced by more than 39,500 accounts over a seventeen-day observation window, we combine semantic clustering of high-engagement posts with LLM-assisted classification of harmful content and manual review of high-risk samples. The analysis identifies 98 thematic discourse clusters spanning agent infrastructure, autonomy debates, and financial activity. While most observed content was benign, 18.28% of posts contained toxic, manipulative, or malicious material. We cluster malicious content and identify 74 classes of malicious behavior, including credential harvesting attempts, host-execution instructions, proxy routing guidance, and efforts to install untrusted agent skills. Harmful content frequently appeared within mainstream operational discussions about agent functionality. We also document coordinated posting campaigns capable of generating thousands of posts in minutes.

Momentum

Related topics

Latest papers 311