Overview

AI agent security studies how tool use, memory, delegation, and interaction with people or environments create risks beyond those of a standalone language model, including prompt injection, privilege misuse, data leakage, and unsafe actions. Researchers test these risks with red-teaming and execution-grounded benchmarks for coding, browsing, GUI, embodied, and multi-agent tasks, measuring whether harmful effects occur across trajectories rather than judging text alone. Defenses range from input and memory provenance checks to sandboxing, least-privilege permissions, stateful runtime authorization, action verification, and cryptographic identity or audit mechanisms. An open challenge is making controls robust to adaptive, long-horizon attacks and interactions between tools or agents while preserving useful task completion; benchmark realism and comparable measures remain uneven.

Latest papers

CardsList

517 papers74 papers in the last four weeks, up 32% on the four weeks before. 0.4% of all new papers.

  1. DynaTrust: Defending Multi-Agent Systems Against Sleeper Agents via Dynamic Trust Graphs

    Mar 9, 2026Yu Li, Qiang Hu, Yao Zhang +3AI Agent SecurityLLM Agent Security

  2. From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents

    Mar 8, 2026Xiaolei Zhang, Lu Zhou, Xiaogang Xu +5AI Agent SecurityLLM Agent Security

  3. Give Them an Inch and They Will Take a Mile:Understanding and Measuring Caller Identity Confusion in MCP-Based AI Systems

    Mar 8, 2026Yuhang Huang, Boyang Ma, Biwei Yan +5MCP SecurityAI Agent Security

  4. Turn: A Language for Agentic Computation

    Mar 7, 2026Muyukani KizitoLLM AgentsLLM Agent Harnesses

  5. aCAPTCHA: Verifying That an Entity Is a Capable Agent via Asymmetric Hardness

    Mar 7, 2026Zuyao Xu, Xiang Li, Fubin Wu +3LLM Agent VerificationAI Agent Security

  6. Targeted Bit-Flip Attacks on LLM-Based Agents

    Mar 7, 2026Jialai Wang, Ya Wen, Zhongmou Liu +4Adversarial Attacks on LLMsAI Agent Security

  7. Proof-of-Guardrail in AI Agents and What (Not) to Trust from It

    Mar 6, 2026Xisen Jin, Michael Duan, Qin Lin +4LLM GuardrailsRemote Attestation

  8. AegisUI: Behavioral Anomaly Detection for Structured User Interface Protocols in AI Agent Systems

    Mar 5, 2026Mohd Safwan Uddin, Saba HajiraAnomaly DetectionAI Agent Security

  9. Agentic Peer-to-Peer Networks: From Content Distribution to Capability and Action Sharing

    Mar 4, 2026Taotao Wang, Lizhao You, Jingwen Tong +2Multi-Agent CollaborationMulti-Agent Systems

  10. Self-Sovereign Agent

    Mar 4, 2026Wenjie Qu, Xuandong Zhao, Jiaheng Zhang +1AI Agent GovernanceAI Agent Security

  11. Cross-Layer Semantic Flow Reconstruction for Attack Detection in Agentic Systems

    Mar 4, 2026Qizhi Cai, Yangyang Wei, Zhipeng Chen +2AI Agent SecurityLLM Agent Security

  12. Goal-Driven Risk Assessment for LLM-Powered Systems: A Healthcare Case Study

    Mar 4, 2026Neha Nagaraja, Hayretdin BahsiLLM SecurityAI Agent Security

  13. AOI: Turning Failed Trajectories into Training Signals for Autonomous Cloud Diagnosis

    Mar 3, 2026Pei Yang, Wanyi Chen, Asuka Yuxi Zheng +13LLM Agent TrainingAI Agent Reliability

  14. Jailbreaking Embodied LLMs via Action-level Manipulation

    Mar 2, 2026Xinyu Huang, Qiang Yang, Leming Shen +2AI Agent SecurityLLM Security

  15. Formal Analysis and Supply Chain Security for Agentic AI Skills

    Feb 27, 2026Varun Pratap BhardwajAI Agent SecurityAgent Skill Security Auditing

  16. Adversarial Intent is a Latent Variable: Stateful Trust Inference for Securing Multimodal Agentic RAG

    Feb 24, 2026Inderjeet Singh, Vikas Pahuja, Aishvariya Priya Rathina Sabapathy +8AI Agent SecurityRAG Security

  17. "Are You Sure?": An Empirical Study of Human Perception Vulnerability in LLM-Driven Agentic Systems

    Feb 24, 2026Xinfeng Li, Shenyu Dai, Kelong Zheng +4AI Agent SecurityCybersecurity

  18. AdapTools: Adaptive Tool-based Indirect Prompt Injection Attacks on Agentic LLMs

    Feb 24, 2026Che Wang, Jiaming Zhang, Ziqi Zhang +6Indirect Prompt InjectionPrompt Injection Attacks

  19. ICON: Indirect Prompt Injection Defense for Agents based on Inference-Time Correction

    Feb 24, 2026Che Wang, Fuyao Zhang, Jiaming Zhang +6Prompt Injection DefenseAI Agent Security

  20. Agents of Chaos

    Feb 23, 2026Natalie Shapira, Chris Wendler, Avery Yen +35AI Agent SecurityLLM Agent Security

  21. Automating Agent Hijacking via Structural Template Injection

    Feb 18, 2026Xinhao Deng, Jiaqing Wu, Miao Chen +3AI Agent SecurityPrompt Injection Attacks on AI Agents

  22. From Tool Orchestration to Code Execution: A Study of MCP Design Choices

    Feb 17, 2026Yuval Felendler, Parth A. Gandhi, Idan Habler +2LLM Agent OrchestrationMCP Security

  23. A Trajectory-Based Safety Audit of Clawdbot (OpenClaw)

    Feb 16, 2026Tianyu Chen, Dongrui Liu, Xia Hu +2AI Agent SecurityAI Agent Safety

  24. Next-Gen CAPTCHAs: Leveraging the Cognitive Gap for Scalable and Diverse GUI-Agent Defense

    Feb 9, 2026Jiacheng Liu, Yaxin Luo, Jiacheng Cui +3CybersecurityAI Agent Security