Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 2 papers
Filter4

Attack surface / entry point

User input15Web pages and interfaces4Documents and messages3Tool responses2Retrieval corpus26Inter-agent messages0

Layer

Application layer2

System component

MCP and skills20Memory19RAG2Guardrails and judges13Monitors15Reasoning chains3Permissions and sandboxing29
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 240papers have no tags yet and are not included in filtered results.
Attack surface / entry point：Tool responsesAttack surface / entry point：Inter-agent messagesLayer：Application layerSystem component：RAGClear all

Another 240papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2608.04565

    Researchers propose Breadcrumbing long-range attack that can hijack the evidence chain of DeepResearch-style search agents

    提出权威链劫持与轨迹引导策略演化，劫持搜索 Agent 的证据链

    arXiv
    2608.04565
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    Qwen3.5-9B, Gemma4-31B, DeepResearch and others7

    Abstract论文揭示了多步搜索智能体在受限中间人操纵下的脆弱性，提出 ACH 策略与 TGSE 演化方法并完成系统验证。

    Paper analysisRead analysis
  2. AttacksarXiv 2507.10457

    论文提出 LPCI：针对 Agent 逻辑层与持久记忆的提示控制注入攻击

    提出 LPCI，把延迟条件载荷写入记忆与检索库以跨会话触发

    arXiv
    2507.10457
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    ChatGPT, Claude, LLaMA3 and others8
    Abstract作者定义 LPCI。

    作者把LPCI定义为针对智能体逻辑执行、记忆留存和工具集成的跨阶段漏洞类，而不是单次输入上的提示改写。

    Paper analysisRead analysis
You have reached the end