The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-

One of my internet-exposed inference honeypots was discovered, relabeled with sought-after model names, and incorporated into infrastructure apparently used to provide "free" LLM

arXiv:2605.05440v1 Announce Type: new Abstract: The security discussion around agentic AI focuses heavily on prompt injection. This paper argues that multi-agent systems also

<p>There's a class of prompt injection attack that bypasses almost every AI firewall on the market — and it's sitting in the blind spot of your agentic stack right now.</p>

<p><em>8 dimensions. 38 checks. 5 seconds. 0% industry pass rate.</em></p> <h2> The Problem </h2> <p>DAST exists for web apps. DAST exists for APIs. DAST does not exist for AI

arXiv:2610.04083v1 Announce Type: new Abstract: Memory poisoning attacks on LLM agents typically assume an external adversary who plants content in the agent's persistent memory

arXiv:2605.11418v1 Announce Type: new Abstract: Autonomous AI agents increasingly extend their capabilities through Agent Skills: modular filesystem packages whose SKILL.md files

<!-- SC_OFF --><div class="md"><p>Rolled out mcp tool access for our ai assistants about 6 weeks ago so chatgpt and claude could hit our crm, project management tool, and a few

Security firm&nbsp;Sysdig&nbsp;says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the