{"total":22,"rows":[{"id":"2603.10749","title":"AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations","created":"2026-03-11","cited_by_count":38,"area":"agents"},{"id":"2605.15338","title":"Hidden in Memory: Sleeper Memory Poisoning in LLM Agents","created":"2026-05-14","cited_by_count":27,"area":"agents"},{"id":"2604.02623","title":"Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents","created":"2026-04-03","cited_by_count":24,"area":"agents"},{"id":"2512.09321","title":"ObliInjection: Order-Oblivious Prompt Injection Attack to LLM Agents with Multi-source Data","created":"2025-12-10","cited_by_count":18,"area":"agents"},{"id":"2601.09923","title":"CaMeLs Can Use Computers Too: System-level Security for Computer Use Agents","created":"2026-01-14","cited_by_count":17,"area":"agents"},{"id":"2510.05442","title":"Adversarial Reinforcement Learning for Large Language Model Agent Safety","created":"2025-10-06","cited_by_count":16,"area":"agents"},{"id":"2511.21990","title":"A Safety and Security Framework for Real-World Agentic Systems","created":"2025-11-27","cited_by_count":13,"area":"agents"},{"id":"2510.17276","title":"Breaking and Fixing Defenses Against Control-Flow Hijacking in Multi-Agent Systems","created":"2025-10-20","cited_by_count":12,"area":"agents"},{"id":"2507.02735","title":"Meta SecAlign: A Secure Foundation LLM Against Prompt Injection Attacks","created":"2025-07-03","cited_by_count":10,"area":"agents"},{"id":"2509.01211","title":"Web Fraud Attacks Against LLM-Driven Multi-Agent Systems","created":"2025-09-01","cited_by_count":10,"area":"agents"},{"id":"2507.09329","title":"When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents","created":"2025-07-12","cited_by_count":8,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2605.23989","title":"Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security","created":"2026-05-17","cited_by_count":5,"area":"agents"},{"id":"2512.14860","title":"Penetration Testing of Agentic AI: A Comparative Security Analysis Across Models and Frameworks","created":"2025-12-16","cited_by_count":4,"area":"agents"},{"id":"2605.30322","title":"Gram: Assessing sabotage propensities via automated alignment auditing","created":"2026-05-28","cited_by_count":4,"area":"agents"},{"id":"2510.09093","title":"Exploiting Web Search Tools of AI Agents for Data Exfiltration","created":"2025-10-10","cited_by_count":3,"area":"agents"},{"id":"2510.21057","title":"Soft Instruction De-escalation Defense","created":"2025-10-24","cited_by_count":3,"area":"agents"},{"id":"2603.04364","title":"Dual-Modality Multi-Stage Adversarial Safety Training: Robustifying Multimodal Web Agents Against Cross-Modal Attacks","created":"2026-03-04","cited_by_count":2,"area":"agents"},{"id":"2603.29545","title":"Stand-Alone Complex or Vibercrime? Exploring the adoption and innovation of GenAI tools, coding assistants, and agents within cybercrime ecosystems","created":"2026-03-31","cited_by_count":0,"area":"agents"},{"id":"2608.10530","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.37196","title":"ToolFence: Fine-Grained Authorization for Secure Tool-Using LLM Agents","created":"2026-09-29","cited_by_count":0,"area":"agents"}],"next_cursor":null}