{"total":62,"rows":[{"id":"2501.04227","title":"Agent Laboratory: Using LLM Agents as Research Assistants","created":"2025-01-08","cited_by_count":425,"area":"agents"},{"id":"2503.09648","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","created":"2025-03-12","cited_by_count":96,"area":"agents"},{"id":"2503.17332","title":"CVE-Bench: A Benchmark for AI Agents' Ability to Exploit Real-World Web Application Vulnerabilities","created":"2025-03-21","cited_by_count":96,"area":"agents"},{"id":"2406.01637","title":"Teams of LLM Agents can Exploit Zero-Day Vulnerabilities","created":"2024-06-02","cited_by_count":95,"area":"agents"},{"id":"2503.09780","title":"AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agents","created":"2025-03-12","cited_by_count":82,"area":"agents"},{"id":"2412.01778","title":"HackSynth: LLM Agent and Evaluation Framework for Autonomous Penetration Testing","created":"2024-12-02","cited_by_count":37,"area":"agents"},{"id":"2602.17753","title":"The 2025 AI Agent Index: Documenting Technical and Safety Features of Deployed Agentic AI Systems","created":"2026-02-19","cited_by_count":30,"area":"agents"},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2410.14569","title":"When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs","created":"2024-10-18","cited_by_count":24,"area":"agents"},{"id":"2505.10924","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","created":"2025-05-16","cited_by_count":23,"area":"agents"},{"id":"2508.00910","title":"Cyber-Zero: Training Cybersecurity Agents without Runtime","created":"2025-07-29","cited_by_count":22,"area":"agents"},{"id":"2603.15727","title":"AgentWorm: Self-Propagating Attacks Across LLM Agent Ecosystems","created":"2026-03-16","cited_by_count":17,"area":"agents"},{"id":"2502.01635","title":"The AI Agent Index","created":"2025-02-03","cited_by_count":15,"area":"agents"},{"id":"2508.18370","title":"Training Language Model Agents to Find Vulnerabilities with CTF-Dojo","created":"2025-08-25","cited_by_count":15,"area":"agents"},{"id":"2603.11214","title":"Measuring AI Agents' Progress on Multi-Step Cyber Attack Scenarios","created":"2026-03-11","cited_by_count":14,"area":"agents"},{"id":"2604.20801","title":"Synthesizing Multi-Agent Harnesses for Vulnerability Discovery","created":"2026-04-22","cited_by_count":13,"area":"agents"},{"id":"2410.09114","title":"Catastrophic Cyber Capabilities Benchmark (3CB): Robustly Evaluating LLM Agent Cyber Offense Capabilities","created":"2024-10-10","cited_by_count":12,"area":"agents"},{"id":"2505.12402","title":"Automated Profile Inference with Language Model Agents","created":"2025-05-18","cited_by_count":9,"area":"agents"},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2505.18384","title":"Dynamic Risk Assessments for Offensive Cybersecurity Agents","created":"2025-05-23","cited_by_count":8,"area":"agents"},{"id":"2505.06913","title":"RedTeamLLM: an Agentic AI framework for offensive security","created":"2025-05-11","cited_by_count":7,"area":"agents"},{"id":"2605.30883","title":"TRACE: Task-Aware Adaptive Self-Evolving Agentic Jailbreaking","created":"2026-05-29","cited_by_count":7,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2410.10871","title":"Applying Refusal-Vector Ablation to Llama 3.1 70B Agents","created":"2024-10-08","cited_by_count":6,"area":"agents"},{"id":"2602.02164","title":"Co-RedTeam: Orchestrated Security Discovery and Exploitation with LLM Agents","created":"2026-02-02","cited_by_count":6,"area":"agents"},{"id":"2410.15650","title":"Voice-Enabled AI Agents can Perform Common Scams","created":"2024-10-21","cited_by_count":5,"area":"agents"},{"id":"2506.00739","title":"DefenderBench: A Toolkit for Evaluating Language Agents in Cybersecurity Environments","created":"2025-05-31","cited_by_count":4,"area":"agents"},{"id":"2506.02048","title":"Improving LLM Agents with Reinforcement Learning on Cryptographic CTF Challenges","created":"2025-06-01","cited_by_count":4,"area":"agents"},{"id":"2507.06850","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","created":"2025-07-09","cited_by_count":4,"area":"agents"},{"id":"2508.21579","title":"Agentic Discovery and Validation of Android App Vulnerabilities","created":"2025-08-29","cited_by_count":4,"area":"agents"},{"id":"2509.18661","title":"Agentic AutoSurvey: Let LLMs Survey LLMs","created":"2025-09-23","cited_by_count":4,"area":"agents"},{"id":"2510.14700","title":"LLM Agents for Automated Web Vulnerability Reproduction: Are We There Yet?","created":"2025-10-16","cited_by_count":4,"area":"agents"},{"id":"2504.12143","title":"ARCeR: an Agentic RAG for the Automated Definition of Cyber Ranges","created":"2025-04-16","cited_by_count":3,"area":"agents"},{"id":"2510.17862","title":"When \"Correct\" Is Not Safe: Can We Trust Functionally Correct Patches Generated by Code Agents?","created":"2025-10-15","cited_by_count":3,"area":"agents"},{"id":"2605.15228","title":"Verifiable Agentic Infrastructure: Proof-Derived Authorization for Sovereign AI Systems","created":"2026-05-13","cited_by_count":3,"area":"agents"},{"id":"2603.09134","title":"AgenticCyOps: Securing Multi-Agentic AI Integration in Enterprise Cyber Operations","created":"2026-03-10","cited_by_count":2,"area":"agents"},{"id":"2605.24949","title":"APT-Agent: Automated Penetration Testing using Large Language Models","created":"2026-05-24","cited_by_count":2,"area":"agents"},{"id":"2502.15506","title":"Construction and Evaluation of LLM-based agents for Semi-Autonomous penetration testing","created":"2025-02-21","cited_by_count":1,"area":"agents"},{"id":"2604.05440","title":"LanG -- A Governance-Aware Agentic AI Platform for Unified Security Operations","created":"2026-04-07","cited_by_count":1,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2607.18575","title":"RECEIPT: Deterministic, Reward-Hacking-Resistant Verification for White-Box Agentic XSS Discovery","created":"2026-07-20","cited_by_count":1,"area":"agents"},{"id":"2607.25379","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","created":"2026-07-28","cited_by_count":1,"area":"agents"},{"id":"2608.03009","title":"Tiny Enough to Break In: Agentic Remote Access Trojans Powered by Small Language Models","created":"2026-08-04","cited_by_count":1,"area":"agents"},{"id":"2608.04317","title":"Trident : How to Break Deep Reinforcement Learning Cyber Defenses (Agentic)","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2608.20563","title":"Beyond End-to-End Success: Diagnosing Failures in Long-Horizon Security LLM Agents","created":"2026-08-20","cited_by_count":1,"area":"agents"},{"id":"2608.26237","title":"How Do LLM Agents Actually Get the Flag? Trace-Level Provenance for Agentic Offensive Security Evaluation","created":"2026-08-26","cited_by_count":1,"area":"agents"},{"id":"2609.22664","title":"From Capability to Assurance in Autonomous Penetration-Testing Harnesses: A Framework and Reference Implementation","created":"2026-09-19","cited_by_count":1,"area":"agents"},{"id":"2609.39050","title":"Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems","created":"2026-09-30","cited_by_count":1,"area":"agents"},{"id":"2601.12607","title":"A Cloud-based Multi-Agentic Workflow for Science","created":"2026-01-18","cited_by_count":0,"area":"agents"},{"id":"2602.13363","title":"Assessing Spear-Phishing Website Generation in Large Language Model Coding Agents","created":"2026-02-13","cited_by_count":0,"area":"agents"},{"id":"2603.20131","title":"An Agentic Multi-Agent Architecture for Cybersecurity Risk Management","created":"2026-03-20","cited_by_count":0,"area":"agents"},{"id":"2604.17159","title":"Systematic Capability Benchmarking of Frontier Large Language Models for Offensive Cyber Tasks","created":"2026-04-18","cited_by_count":0,"area":"agents"},{"id":"2605.06713","title":"Agentic AI and the Industrialization of Cyber Offense: Forecast, Consequences, and Defensive Priorities for Enterprises and the Mittelstand","created":"2026-05-06","cited_by_count":0,"area":"agents"},{"id":"2606.10304","title":"MIRAGE: A Polarity-Flipping Encoding Subspace in LLM Agents","created":"2026-06-09","cited_by_count":0,"area":"agents"},{"id":"2607.11288","title":"Mako: A Self-Evolving Agentic Operating System (SE-AOS) for Autonomous Web Exploitation","created":"2026-07-13","cited_by_count":0,"area":"agents"},{"id":"2608.04755","title":"\"Allow\" to Achieve, Over-Privileged Inadvertently: The Unintended Cost of Task-Completion-Driven Pop-up Decisions in Mobile GUI Agents","created":"2026-08-05","cited_by_count":0,"area":"agents"},{"id":"2608.21101","title":"ClawSentry: A Progressive Multi-Tier Security Monitor for Safeguarding Autonomous LLM Agents","created":"2026-08-21","cited_by_count":0,"area":"agents"},{"id":"2608.21423","title":"Agentic Security: A Systematization of Tools, Failure Modes, and Design Laws for LLM-Driven Penetration Testing","created":"2026-08-16","cited_by_count":0,"area":"agents"},{"id":"2609.11852","title":"BlueSTAR: Tiered Agentic Architecture for Autonomous Cyber Defense","created":"2026-09-10","cited_by_count":0,"area":"agents"},{"id":"2609.16694","title":"Toward Secure AI-Powered Penetration Testing Agents: Security Threats, Guardrails, and Architectural Perspectives","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.33371","title":"API Secrets Should Never Become Tokens in the LLM's Vocabulary: A Threat Analysis of API Credential Handling in LLM Agent Systems and an Empirical Evaluation of a Vault-Mediated Execution Boundary","created":"2026-09-27","cited_by_count":0,"area":"agents"}],"next_cursor":null}