{"total":95,"rows":[{"id":"2410.20285","title":"SWE-Search: Enhancing Software Agents with Monte Carlo Tree Search and Iterative Refinement","created":"2024-10-26","cited_by_count":132,"area":"agents"},{"id":"2503.17332","title":"CVE-Bench: A Benchmark for AI Agents' Ability to Exploit Real-World Web Application Vulnerabilities","created":"2025-03-21","cited_by_count":96,"area":"agents"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2410.13886","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","created":"2024-10-11","cited_by_count":65,"area":"agents"},{"id":"2501.13411","title":"VulnBot: Autonomous Penetration Testing for A Multi-Agent Collaborative Framework","created":"2025-01-23","cited_by_count":31,"area":"agents"},{"id":"2602.13379","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","created":"2026-02-13","cited_by_count":30,"area":"agents"},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2410.03225","title":"AutoPenBench: Benchmarking Generative Agents for Penetration Testing","created":"2024-10-04","cited_by_count":21,"area":"agents"},{"id":"2504.05408","title":"Frontier AI's Impact on the Cybersecurity Landscape","created":"2025-04-07","cited_by_count":21,"area":null},{"id":"2510.06445","title":"A Survey on Agentic Security: Applications, Threats and Defenses","created":"2025-10-07","cited_by_count":20,"area":"agents"},{"id":"2604.06550","title":"SkillSieve: A Hierarchical Triage Framework for Detecting Malicious AI Agent Skills","created":"2026-04-08","cited_by_count":20,"area":"agents"},{"id":"2508.03153","title":"Estimating Worst-Case Frontier Risks of Open-Weight LLMs","created":"2025-08-05","cited_by_count":19,"area":null},{"id":"2607.10487","title":"Temporary Authority, Permanent Effects: Commit-Time Authorization for LLM Agents","created":"2026-07-11","cited_by_count":18,"area":"agents"},{"id":"2501.16466","title":"Incalmo: An Autonomous LLM-assisted System for Red Teaming Multi-Host Networks","created":"2025-01-27","cited_by_count":17,"area":"safety"},{"id":"2410.20911","title":"Hacking Back the AI-Hacker: Prompt Injection as a Defense Against LLM-driven Cyberattacks","created":"2024-10-28","cited_by_count":15,"area":"safety"},{"id":"2502.01635","title":"The AI Agent Index","created":"2025-02-03","cited_by_count":15,"area":"agents"},{"id":"2506.17644","title":"Measuring and Augmenting Large Language Models for Solving Capture-the-Flag Challenges","created":"2025-06-21","cited_by_count":15,"area":null},{"id":"2512.09882","title":"Comparing AI Agents to Cybersecurity Professionals in Real-World Penetration Testing","created":"2025-12-10","cited_by_count":15,"area":null},{"id":"2504.10112","title":"Benchmarking Practices in LLM-driven Offensive Security: Testbeds, Metrics, and Experiment Design","created":"2025-04-14","cited_by_count":14,"area":null},{"id":"2603.11214","title":"Measuring AI Agents' Progress on Multi-Step Cyber Attack Scenarios","created":"2026-03-11","cited_by_count":14,"area":"agents"},{"id":"2604.20801","title":"Synthesizing Multi-Agent Harnesses for Vulnerability Discovery","created":"2026-04-22","cited_by_count":13,"area":"agents"},{"id":"2505.23847","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","created":"2025-05-28","cited_by_count":12,"area":"agents"},{"id":"2507.15241","title":"FaultLine: Automated Proof-of-Vulnerability Generation Using LLM Agents","created":"2025-07-21","cited_by_count":12,"area":"agents"},{"id":"2410.17141","title":"Towards Automated Penetration Testing: Introducing LLM Benchmark, Analysis, and Improvements","created":"2024-10-22","cited_by_count":11,"area":null},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2505.10321","title":"AutoPentest: Enhancing Vulnerability Management With Autonomous LLM Agents","created":"2025-05-15","cited_by_count":9,"area":"agents"},{"id":"2511.03841","title":"Security Analysis of Agentic AI Communication Protocols: A Comparative Evaluation","created":"2025-11-05","cited_by_count":9,"area":"agents"},{"id":"2505.18384","title":"Dynamic Risk Assessments for Offensive Cybersecurity Agents","created":"2025-05-23","cited_by_count":8,"area":"agents"},{"id":"2603.19974","title":"Trojan's Whisper: Stealthy Manipulation of OpenClaw through Injected Bootstrapped Guidance","created":"2026-03-20","cited_by_count":8,"area":"agents"},{"id":"2408.05061","title":"A Jailbroken GenAI Model Can Cause Substantial Harm: GenAI-powered Applications are Vulnerable to PromptWares","created":"2024-08-09","cited_by_count":7,"area":"safety"},{"id":"2410.04931","title":"The Role of Governments in Increasing Interconnected Post-Deployment Monitoring of AI","created":"2024-10-07","cited_by_count":7,"area":null},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2608.15888","title":"Bounded Agents: Delegation Security for Multi-Agent AI Systems","created":"2026-08-16","cited_by_count":7,"area":"agents"},{"id":"2410.10871","title":"Applying Refusal-Vector Ablation to Llama 3.1 70B Agents","created":"2024-10-08","cited_by_count":6,"area":"agents"},{"id":"2410.15650","title":"Voice-Enabled AI Agents can Perform Common Scams","created":"2024-10-21","cited_by_count":5,"area":"agents"},{"id":"2505.11449","title":"LLMs unlock new paths to monetizing exploits","created":"2025-05-16","cited_by_count":5,"area":null},{"id":"2406.02619","title":"Unelicitable Backdoors in Language Models via Cryptographic Transformer Circuits","created":"2024-06-03","cited_by_count":4,"area":"safety"},{"id":"2411.12820","title":"Declare and Justify: Explicit assumptions in AI evaluations are necessary for effective regulation","created":"2024-11-19","cited_by_count":4,"area":null},{"id":"2412.08653","title":"What AI evaluations for preventing catastrophic risks can and cannot do","created":"2024-11-26","cited_by_count":4,"area":null},{"id":"2506.02048","title":"Improving LLM Agents with Reinforcement Learning on Cryptographic CTF Challenges","created":"2025-06-01","cited_by_count":4,"area":"agents"},{"id":"2508.21579","title":"Agentic Discovery and Validation of Android App Vulnerabilities","created":"2025-08-29","cited_by_count":4,"area":"agents"},{"id":"2510.14700","title":"LLM Agents for Automated Web Vulnerability Reproduction: Are We There Yet?","created":"2025-10-16","cited_by_count":4,"area":"agents"},{"id":"2604.18718","title":"Towards Optimal Agentic Architectures for Offensive Security Tasks","created":"2026-04-20","cited_by_count":4,"area":"agents"},{"id":"2606.14295","title":"AgentCyberRange: Benchmarking Frontier AI Systems in Realistic Cyber Ranges","created":"2026-06-12","cited_by_count":4,"area":null},{"id":"2509.13021","title":"xOffense: An Autonomous Multi-Agent Framework for Penetration Testing with Domain-Adapted Large Language Models","created":"2025-09-16","cited_by_count":3,"area":"agents"},{"id":"2510.17862","title":"When \"Correct\" Is Not Safe: Can We Trust Functionally Correct Patches Generated by Code Agents?","created":"2025-10-15","cited_by_count":3,"area":"agents"},{"id":"2512.16280","title":"Love, Lies, and Language Models: Investigating AI's Role in Romance-Baiting Scams","created":"2025-12-18","cited_by_count":3,"area":null},{"id":"2602.13574","title":"Execution-State-Aware LLM Reasoning for Automated Proof-of-Vulnerability Generation","created":"2026-02-14","cited_by_count":3,"area":"lr"},{"id":"2606.00341","title":"ROGUE: Evaluating Corrigibility Failures in Frontier Computer-Use Agents","created":"2026-05-29","cited_by_count":3,"area":null},{"id":"2509.06921","title":"Neuro-Symbolic AI for Cybersecurity: State of the Art, Challenges, and Opportunities","created":"2025-09-08","cited_by_count":2,"area":null},{"id":"2603.09452","title":"CyberThreat-Eval: Can Large Language Models Automate Real-World Threat Research?","created":"2026-03-10","cited_by_count":2,"area":null},{"id":"2605.21497","title":"Autonomous LLM Agents & CTFs: A Second Look","created":"2026-04-29","cited_by_count":2,"area":"agents"},{"id":"2410.18312","title":"Countering Autonomous Cyber Threats","created":"2024-10-23","cited_by_count":1,"area":null},{"id":"2502.15506","title":"Construction and Evaluation of LLM-based agents for Semi-Autonomous penetration testing","created":"2025-02-21","cited_by_count":1,"area":"agents"},{"id":"2507.03050","title":"From Turing to Tomorrow: The UK's Approach to AI Regulation","created":"2025-07-03","cited_by_count":1,"area":null},{"id":"2508.06411","title":"Dimensional Characterization and Pathway Modeling for Catastrophic AI Risks","created":"2025-08-08","cited_by_count":1,"area":null},{"id":"2601.06910","title":"PenForge: On-the-Fly Expert Agent Construction for Automated Penetration Testing","created":"2026-01-11","cited_by_count":1,"area":"agents"},{"id":"2601.09129","title":"KryptoPilot: An Open-World Knowledge-Augmented LLM Agent for Automated Cryptographic Exploitation","created":"2026-01-14","cited_by_count":1,"area":"agents"},{"id":"2601.22720","title":"AEGIS: White-Box Attack Path Generation using LLMs and Training Effectiveness Evaluation for Large-Scale Cyber Defence Exercises","created":"2026-01-30","cited_by_count":1,"area":null},{"id":"2602.02595","title":"To Defend Against Cyber Attacks, We Must Teach AI Agents to Hack","created":"2026-02-01","cited_by_count":1,"area":"safety"},{"id":"2602.05721","title":"A Dual-Loop Agent Framework for Automated Vulnerability Reproduction","created":"2026-02-05","cited_by_count":1,"area":"agents"},{"id":"2603.22577","title":"STRIATUM-CTF: A Protocol-Driven Agentic Framework for General-Purpose CTF Solving","created":"2026-03-23","cited_by_count":1,"area":"agents"},{"id":"2604.06019","title":"CritBench: A Framework for Evaluating Cybersecurity Capabilities of Large Language Models in IEC 61850 Digital Substation Environments","created":"2026-04-07","cited_by_count":1,"area":null},{"id":"2605.01892","title":"CyberAId: AI-Driven Cybersecurity for Financial Service Providers","created":"2026-05-03","cited_by_count":1,"area":null},{"id":"2605.07830","title":"CyBiasBench: Benchmarking Bias in LLM Agents for Cyber-Attack Scenarios","created":"2026-05-08","cited_by_count":1,"area":"agents"},{"id":"2605.30096","title":"How Reliable Are AI Attackers Against a Fixed Vulnerable Target? A 400-Run Empirical Study of LLM Penetration Testing Consistency","created":"2026-05-28","cited_by_count":1,"area":null},{"id":"2607.18575","title":"RECEIPT: Deterministic, Reward-Hacking-Resistant Verification for White-Box Agentic XSS Discovery","created":"2026-07-20","cited_by_count":1,"area":"agents"},{"id":"2607.25379","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","created":"2026-07-28","cited_by_count":1,"area":"agents"},{"id":"2608.04317","title":"Trident : How to Break Deep Reinforcement Learning Cyber Defenses (Agentic)","created":"2026-08-05","cited_by_count":1,"area":"agents"},{"id":"2608.20563","title":"Beyond End-to-End Success: Diagnosing Failures in Long-Horizon Security LLM Agents","created":"2026-08-20","cited_by_count":1,"area":"agents"},{"id":"2609.22664","title":"From Capability to Assurance in Autonomous Penetration-Testing Harnesses: A Framework and Reference Implementation","created":"2026-09-19","cited_by_count":1,"area":"agents"},{"id":"2502.17703","title":"To Patch or Not to Patch: Motivations, Challenges, and Implications for Cybersecurity","created":"2025-02-24","cited_by_count":0,"area":null},{"id":"2506.08693","title":"Recognition Without Mitigation: Ethical Frameworks in Autonomous Offensive-LLM Agent Research","created":"2025-06-10","cited_by_count":0,"area":"agents"},{"id":"2509.14289","title":"From Capabilities to Performance: Evaluating Key Functional Properties of LLM Architectures in Penetration Testing","created":"2025-09-16","cited_by_count":0,"area":null},{"id":"2510.01654","title":"SoK: Measuring What Matters for Closed-Loop Security Agents","created":"2025-10-02","cited_by_count":0,"area":"agents"},{"id":"2605.00796","title":"When RAG Chatbots Expose Their Backend: An Anonymized Case Study of Privacy and Security Risks in Patient-Facing Medical AI","created":"2026-05-01","cited_by_count":0,"area":"rag"},{"id":"2605.06601","title":"Patch2Vuln: Agentic Reconstruction of Vulnerabilities from Linux Distribution Binary Patches","created":"2026-05-07","cited_by_count":0,"area":"agents"},{"id":"2605.06713","title":"Agentic AI and the Industrialization of Cyber Offense: Forecast, Consequences, and Defensive Priorities for Enterprises and the Mittelstand","created":"2026-05-06","cited_by_count":0,"area":"agents"},{"id":"2605.11029","title":"FragBench: Cross-Session Attacks Hidden in Benign-Looking Fragments","created":"2026-05-10","cited_by_count":0,"area":null},{"id":"2605.16035","title":"Who Owns This Agent? Tracing AI Agents Back to Their Owners","created":"2026-05-15","cited_by_count":0,"area":null},{"id":"2605.17416","title":"Benchmarking Mythos-Linked Bug Rediscovery","created":"2026-05-17","cited_by_count":0,"area":null},{"id":"2605.30604","title":"An Organization-Scoped LLM Agent Runtime Architecture for Regulated Cybersecurity Operations","created":"2026-05-28","cited_by_count":0,"area":"agents"},{"id":"2606.03453","title":"FORGE: Multi-Agent Graduated Exploitation and Detection Engineering","created":"2026-06-02","cited_by_count":0,"area":"agents"},{"id":"2606.16420","title":"Transferable Self-Evolving Playbooks for Agentic Security Auditing","created":"2026-06-15","cited_by_count":0,"area":"agents"},{"id":"2606.24496","title":"Red-Teaming the Agentic Red-Team","created":"2026-06-23","cited_by_count":0,"area":"agents"},{"id":"2606.29175","title":"Direct Causation in International Humanitarian Law and the Challenge of AI-Mediated Civilian Cyber Operations","created":"2026-06-28","cited_by_count":0,"area":null},{"id":"2608.15012","title":"SysEvolve: An AI-native, safe, autonomous adversarial attack-defense co-evolutionary system","created":"2026-08-15","cited_by_count":0,"area":null},{"id":"2609.04820","title":"Cost-Aware Hierarchical Multi-Agent Ransomware Detection and Family Attribution","created":"2026-09-04","cited_by_count":0,"area":"agents"},{"id":"2609.16694","title":"Toward Secure AI-Powered Penetration Testing Agents: Security Threats, Guardrails, and Architectural Perspectives","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.18120","title":"PentestChain: A Cost-Aware, MCP-Orchestrated Framework for Automated Penetration Testing with Free-Tier LLMs","created":"2026-09-16","cited_by_count":0,"area":null},{"id":"2609.25591","title":"Evaluating Coding Agents on Kernel Exploit Generation","created":"2026-09-22","cited_by_count":0,"area":"agents"},{"id":"2609.31893","title":"CyberWorld: World Models for Sample-Efficient Autonomous Cyber Defense","created":"2026-09-25","cited_by_count":0,"area":"wm"},{"id":"2610.00557","title":"No One Architecture Fits All: A Cross-Environment Evaluation of Hierarchical Red Team Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.09007","title":"Sigma-Hunter: A Domain-Specific Language Model for Threat Hunting and Detection Engineering","created":"2026-10-06","cited_by_count":0,"area":null},{"id":"2610.14350","title":"Natural Code Transformation Confuses Agents in Vulnerability Analysis","created":"2026-10-09","cited_by_count":0,"area":"agents"}],"next_cursor":null}