arXiv AI
Jul 21
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?
arXiv:2607. 17986v1 Announce Type: cross Abstract: Self-hosted AI agents read and write their own memory and configuration files to function.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?
Self-hosted AI agents read and write their own memory and configuration files to function. An agent may get compromised via corruption of its own state -- a compromise realized via legitimate OS system call invocation.
Related stories
arXiv AI
Jul 1
Understanding and Evaluating Claw-like Agent Security Through a Computer-Systems Lens
arXiv:2606. 30755v1 Announce Type: cross Abstract: Claw-like AI agents (e.
arXiv AI
Jul 17
Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems
arXiv:2607. 14611v1 Announce Type: cross Abstract: A growing class of agentic systems maintain persistent state across sessions through memory files, behavioral preferences, and knowledge bases.
arXiv AI
Jul 31
MemSecBench: Tracking Agent Memory Poisoning from Persistence to Consequence and Repair
arXiv:2607. 27080v1 Announce Type: cross Abstract: Memory systems allow agents to retain and reuse information from past interactions, but they can also let malicious content persist.
arXiv AI
Jul 3
ElephantAgent: Contextual State Continuity in Agentic Systems
arXiv:2607. 01919v1 Announce Type: new Abstract: Agentic systems enhance their capabilities by invoking external tools and maintaining persistent memory.
arXiv AI
Jul 31
SecRespond: Benchmarking AI Agents for Real-World Post-Compromise Incident Response
arXiv:2607. 26791v1 Announce Type: cross Abstract: Large Language Model (LLM) agents are increasingly adopted in real-world security operations with access to host artifacts and command-line interfaces (CLIs), making it critical to thoroughly assess their security capabilities.
arXiv AI
Jun 16
A Survey on Agentic Security: Applications, Threats and Defenses
arXiv:2510. 06445v3 Announce Type: replace-cross Abstract: LLM-based agents are now used throughout cybersecurity.
arXiv AI
Jun 4
What If Prompt Injection Never Left? Exploring Cross-Session Stored Prompt Injection in Agentic Systems
arXiv:2606. 04425v1 Announce Type: cross Abstract: Modern agentic systems transform LLMs from session-bounded assistants into stateful systems that persist and evolve shared world state across sessions through memories, filesystems, tools, and other long-lived contextual artifacts.
arXiv AI
Jun 10
Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation
arXiv:2606. 10749v1 Announce Type: cross Abstract: Large language model (LLM) agents are rapidly moving from conversational interfaces to software components that plan, invoke tools, maintain memory, and act on external environments.
arXiv AI
Jul 28
Execution-Grounded Security Testing for Coding Agents in Software Engineering Pipelines
arXiv:2607. 22569v1 Announce Type: new Abstract: Coding agents are increasingly integrated into system operations, where their tool use can directly modify project artifacts, execution environments, and the underlying system.
arXiv AI
Jul 23
The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI
arXiv:2607. 19433v1 Announce Type: new Abstract: The transition from stateless generative models in artificial intelligence to stateful, autonomous agents represents an architectural evolution that, while providing the capabilities of long-term planning and the automation of enterprise workflows, also represents the introduction of a new form of security threat, the Chronos Vulnerability.
arXiv AI
Jul 3
Distributed Attacks in Persistent-State AI Control
arXiv:2607. 02514v1 Announce Type: new Abstract: As AI coding agents become more autonomous, they increasingly ship code iteratively, with the codebase persisting across sessions.