{"total":55,"rows":[{"id":"2410.20285","title":"SWE-Search: Enhancing Software Agents with Monte Carlo Tree Search and Iterative Refinement","created":"2024-10-26","cited_by_count":132,"area":"agents"},{"id":"2503.17332","title":"CVE-Bench: A Benchmark for AI Agents' Ability to Exploit Real-World Web Application Vulnerabilities","created":"2025-03-21","cited_by_count":96,"area":"agents"},{"id":"2410.13886","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","created":"2024-10-11","cited_by_count":65,"area":"agents"},{"id":"2501.13411","title":"VulnBot: Autonomous Penetration Testing for A Multi-Agent Collaborative Framework","created":"2025-01-23","cited_by_count":31,"area":"agents"},{"id":"2602.13379","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","created":"2026-02-13","cited_by_count":30,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2410.03225","title":"AutoPenBench: Benchmarking Generative Agents for Penetration Testing","created":"2024-10-04","cited_by_count":21,"area":"agents"},{"id":"2510.06445","title":"A Survey on Agentic Security: Applications, Threats and Defenses","created":"2025-10-07","cited_by_count":20,"area":"agents"},{"id":"2604.06550","title":"SkillSieve: A Hierarchical Triage Framework for Detecting Malicious AI Agent Skills","created":"2026-04-08","cited_by_count":20,"area":"agents"},{"id":"2607.10487","title":"Temporary Authority, Permanent Effects: Commit-Time Authorization for LLM Agents","created":"2026-07-11","cited_by_count":18,"area":"agents"},{"id":"2502.01635","title":"The AI Agent Index","created":"2025-02-03","cited_by_count":15,"area":"agents"},{"id":"2603.11214","title":"Measuring AI Agents' Progress on Multi-Step Cyber Attack Scenarios","created":"2026-03-11","cited_by_count":14,"area":"agents"},{"id":"2604.20801","title":"Synthesizing Multi-Agent Harnesses for Vulnerability Discovery","created":"2026-04-22","cited_by_count":13,"area":"agents"},{"id":"2505.23847","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","created":"2025-05-28","cited_by_count":12,"area":"agents"},{"id":"2507.15241","title":"FaultLine: Automated Proof-of-Vulnerability Generation Using LLM Agents","created":"2025-07-21","cited_by_count":12,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2505.10321","title":"AutoPentest: Enhancing Vulnerability Management With Autonomous LLM Agents","created":"2025-05-15","cited_by_count":9,"area":"agents"},{"id":"2511.03841","title":"Security Analysis of Agentic AI Communication Protocols: A Comparative Evaluation","created":"2025-11-05","cited_by_count":9,"area":"agents"},{"id":"2505.18384","title":"Dynamic Risk Assessments for Offensive Cybersecurity Agents","created":"2025-05-23","cited_by_count":8,"area":"agents"},{"id":"2603.19974","title":"Trojan's Whisper: Stealthy Manipulation of OpenClaw through Injected Bootstrapped Guidance","created":"2026-03-20","cited_by_count":8,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2608.15888","title":"Bounded Agents: Delegation Security for Multi-Agent AI Systems","created":"2026-08-16","cited_by_count":7,"area":"agents"},{"id":"2410.10871","title":"Applying Refusal-Vector Ablation to Llama 3.1 70B Agents","created":"2024-10-08","cited_by_count":6,"area":"agents"},{"id":"2410.15650","title":"Voice-Enabled AI Agents can Perform Common Scams","created":"2024-10-21","cited_by_count":5,"area":"agents"},{"id":"2506.02048","title":"Improving LLM Agents with Reinforcement Learning on Cryptographic CTF Challenges","created":"2025-06-01","cited_by_count":4,"area":"agents"},{"id":"2508.21579","title":"Agentic Discovery and Validation of Android App Vulnerabilities","created":"2025-08-29","cited_by_count":4,"area":"agents"},{"id":"2510.14700","title":"LLM Agents for Automated Web Vulnerability Reproduction: Are We There Yet?","created":"2025-10-16","cited_by_count":4,"area":"agents"},{"id":"2604.18718","title":"Towards Optimal Agentic Architectures for Offensive Security Tasks","created":"2026-04-20","cited_by_count":4,"area":"agents"},{"id":"2509.13021","title":"xOffense: An Autonomous Multi-Agent Framework for Penetration Testing with Domain-Adapted Large Language Models","created":"2025-09-16","cited_by_count":3,"area":"agents"},{"id":"2510.17862","title":"When \"Correct\" Is Not Safe: Can We Trust Functionally Correct Patches Generated by Code Agents?","created":"2025-10-15","cited_by_count":3,"area":"agents"},{"id":"2605.21497","title":"Autonomous LLM Agents & CTFs: A Second Look","created":"2026-04-29","cited_by_count":2,"area":"agents"},{"id":"2502.15506","title":"Construction and Evaluation of LLM-based agents for Semi-Autonomous penetration testing","created":"2025-02-21","cited_by_count":1,"area":"agents"},{"id":"2601.06910","title":"PenForge: On-the-Fly Expert Agent Construction for Automated Penetration Testing","created":"2026-01-11","cited_by_count":1,"area":"agents"},{"id":"2601.09129","title":"KryptoPilot: An Open-World Knowledge-Augmented LLM Agent for Automated Cryptographic Exploitation","created":"2026-01-14","cited_by_count":1,"area":"agents"},{"id":"2602.05721","title":"A Dual-Loop Agent Framework for Automated Vulnerability Reproduction","created":"2026-02-05","cited_by_count":1,"area":"agents"},{"id":"2603.22577","title":"STRIATUM-CTF: A Protocol-Driven Agentic Framework for General-Purpose CTF Solving","created":"2026-03-23","cited_by_count":1,"area":"agents"},{"id":"2605.07830","title":"CyBiasBench: Benchmarking Bias in LLM Agents for Cyber-Attack Scenarios","created":"2026-05-08","cited_by_count":1,"area":"agents"},{"id":"2607.18575","title":"RECEIPT: Deterministic, Reward-Hacking-Resistant Verification for White-Box Agentic XSS Discovery","created":"2026-07-20","cited_by_count":1,"area":"agents"},{"id":"2607.25379","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","created":"2026-07-28","cited_by_count":1,"area":"agents"},{"id":"2608.04317","title":"Trident : How to Break Deep Reinforcement Learning Cyber Defenses (Agentic)","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2608.20563","title":"Beyond End-to-End Success: Diagnosing Failures in Long-Horizon Security LLM Agents","created":"2026-08-20","cited_by_count":1,"area":"agents"},{"id":"2609.22664","title":"From Capability to Assurance in Autonomous Penetration-Testing Harnesses: A Framework and Reference Implementation","created":"2026-09-19","cited_by_count":1,"area":"agents"},{"id":"2506.08693","title":"Recognition Without Mitigation: Ethical Frameworks in Autonomous Offensive-LLM Agent Research","created":"2025-06-10","cited_by_count":0,"area":"agents"},{"id":"2510.01654","title":"SoK: Measuring What Matters for Closed-Loop Security Agents","created":"2025-10-02","cited_by_count":0,"area":"agents"},{"id":"2605.06601","title":"Patch2Vuln: Agentic Reconstruction of Vulnerabilities from Linux Distribution Binary Patches","created":"2026-05-07","cited_by_count":0,"area":"agents"},{"id":"2605.06713","title":"Agentic AI and the Industrialization of Cyber Offense: Forecast, Consequences, and Defensive Priorities for Enterprises and the Mittelstand","created":"2026-05-06","cited_by_count":0,"area":"agents"},{"id":"2605.30604","title":"An Organization-Scoped LLM Agent Runtime Architecture for Regulated Cybersecurity Operations","created":"2026-05-28","cited_by_count":0,"area":"agents"},{"id":"2606.03453","title":"FORGE: Multi-Agent Graduated Exploitation and Detection Engineering","created":"2026-06-02","cited_by_count":0,"area":"agents"},{"id":"2606.16420","title":"Transferable Self-Evolving Playbooks for Agentic Security Auditing","created":"2026-06-15","cited_by_count":0,"area":"agents"},{"id":"2606.24496","title":"Red-Teaming the Agentic Red-Team","created":"2026-06-23","cited_by_count":0,"area":"agents"},{"id":"2609.04820","title":"Cost-Aware Hierarchical Multi-Agent Ransomware Detection and Family Attribution","created":"2026-09-04","cited_by_count":0,"area":"agents"},{"id":"2609.16694","title":"Toward Secure AI-Powered Penetration Testing Agents: Security Threats, Guardrails, and Architectural Perspectives","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.25591","title":"Evaluating Coding Agents on Kernel Exploit Generation","created":"2026-09-22","cited_by_count":0,"area":"agents"},{"id":"2610.00557","title":"No One Architecture Fits All: A Cross-Environment Evaluation of Hierarchical Red Team Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.14350","title":"Natural Code Transformation Confuses Agents in Vulnerability Analysis","created":"2026-10-09","cited_by_count":0,"area":"agents"}],"next_cursor":null}