{"total":39,"rows":[{"id":"2604.16548","title":"A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle","created":"2026-04-17","cited_by_count":27,"area":"agents"},{"id":"2604.04759","title":"Your Agent, Their Asset: A Real-World Safety Analysis of OpenClaw","created":"2026-04-06","cited_by_count":20,"area":"agents"},{"id":"2605.14421","title":"MemLineage: Lineage-Guided Enforcement for LLM Agent Memory","created":"2026-05-14","cited_by_count":16,"area":"agents"},{"id":"2605.18930","title":"OEP: Poisoning Self-Evolving LLM Agents via Locally Correct but Non-Transferable Experiences","created":"2026-05-18","cited_by_count":14,"area":"agents"},{"id":"2606.25115","title":"Forget to Improve: On-Device LLM-Agent Continual Learning via Budget-Curated Memory","created":"2026-06-23","cited_by_count":9,"area":"agents"},{"id":"2606.23075","title":"Safety in Self-Evolving LLM Agent Systems: Threats, Amplification, and Case Studies","created":"2026-06-22","cited_by_count":8,"area":"agents"},{"id":"2608.01679","title":"When Memory Becomes Authority: Benchmarking Authority Collapse at the Memory Consolidation Boundary","created":"2026-08-03","cited_by_count":8,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2607.14651","title":"MemPoison: Uncovering Persistent Memory Threats and Structural Blind Spots in LLM Agents","created":"2026-07-16","cited_by_count":7,"area":"agents"},{"id":"2607.06595","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","created":"2026-07-06","cited_by_count":6,"area":"agents"},{"id":"2607.14611","title":"Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems","created":"2026-07-16","cited_by_count":6,"area":"agents"},{"id":"2605.08442","title":"Injection-Execution Dissociation: A Mechanistic Evaluation of Persistent Memory Attacks and Defenses in Stateful LLM Agents","created":"2026-05-08","cited_by_count":5,"area":"agents"},{"id":"2608.10218","title":"Mind Viruses: Self-Propagating Ideas in Multi-Agent LLM Systems","created":"2026-08-10","cited_by_count":4,"area":"agents"},{"id":"2608.23471","title":"InjecMEM: Memory Injection Attack on LLM Agent Memory Systems","created":"2026-08-24","cited_by_count":4,"area":"agents"},{"id":"2605.28201","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","created":"2026-05-27","cited_by_count":3,"area":"agents"},{"id":"2608.25776","title":"EVOMAL: Self-Poisoning in Self-Evolving Coding Agents","created":"2026-08-26","cited_by_count":3,"area":"agents"},{"id":"2603.14975","title":"Why Agents Compromise Safety Under Pressure","created":"2026-03-16","cited_by_count":2,"area":"agents"},{"id":"2606.30566","title":"Forensic Trajectory Signatures for Agent Memory Poisoning Detection","created":"2026-06-29","cited_by_count":2,"area":"agents"},{"id":"2608.01759","title":"Benign Alone, Harmful Together: Exploiting Experience Composition in Self-Evolving LLM Agents","created":"2026-08-03","cited_by_count":2,"area":"agents"},{"id":"2608.28363","title":"EvoUndo: Recoverability-Constrained Self-Evolution for LLM Agent Harnesses","created":"2026-08-28","cited_by_count":2,"area":"agents"},{"id":"2603.28013","title":"Kill-Chain Canaries: Stage-Level Tracking of Prompt Injection Across Attack Surfaces and Model Safety Tiers","created":"2026-03-30","cited_by_count":1,"area":"agents"},{"id":"2605.06731","title":"When Routine Chats Turn Toxic: Unintended Long-Term State Poisoning in Personalized Agents","created":"2026-05-07","cited_by_count":1,"area":"agents"},{"id":"2605.25435","title":"Security of OpenClaw Agents: Fundamentals, Attacks, and Countermeasures","created":"2026-05-25","cited_by_count":1,"area":"agents"},{"id":"2609.08258","title":"Revoked but Still Authoritative: An Empirical Study of Revocation Enforcement in Agent-Memory Systems","created":"2026-09-08","cited_by_count":1,"area":"agents"},{"id":"2610.07645","title":"SkillPoison: Progressive Skill Poisoning via Successful Experiences","created":"2026-10-06","cited_by_count":1,"area":"agents"},{"id":"2605.12535","title":"Ghost in the Context: Policy-Carriage Integrity in LLM Agents","created":"2026-05-02","cited_by_count":0,"area":"agents"},{"id":"2607.17951","title":"RT-SHCUA: Real-Time Self-Hosted Computer-Use Agent for UAV Control","created":"2026-07-20","cited_by_count":0,"area":"agents"},{"id":"2608.01637","title":"Salami Attack: Stealthy Collusive Memory Poisoning against OpenClaw","created":"2026-08-03","cited_by_count":0,"area":"agents"},{"id":"2608.08303","title":"Query-Only Backdoor Attacks on Self-Evolving Skills via Trajectory Poisoning","created":"2026-08-08","cited_by_count":0,"area":"agents"},{"id":"2608.30177","title":"Understanding Stage-Wise Utility-Risk Trade-offs in LLM Agent Memory","created":"2026-08-31","cited_by_count":0,"area":"agents"},{"id":"2609.00523","title":"Transferable End-to-End Optimization for Indirect Long-Term Memory Poisoning in LLM Agents","created":"2026-09-01","cited_by_count":0,"area":"agents"},{"id":"2609.17817","title":"Reflections on Trusting Trust, Revisited: Contaminating Self-Modifying AI Coding Agents with Poisoned Benchmarks","created":"2026-09-15","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.33910","title":"When Consent Outlives Context: Residual Authority Replay in Long-Lived Agents","created":"2026-09-27","cited_by_count":0,"area":"agents"},{"id":"2609.35576","title":"Share-Borne AI Virus: Memory-Hopping Attacks Across LLM Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2609.35596","title":"SEABench: Benchmarking Endogenous Misalignment In Self-Evolving Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2610.02569","title":"Pincer: Resource Authorization for Agents using a Digital Twin","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.04083","title":"Self-Propagating Misalignment in LLM Agents, and Why Auditing or Disabling Memory Is Not Enough","created":"2026-10-02","cited_by_count":0,"area":"agents"},{"id":"2610.15244","title":"EvolvAttack: Backdooring self Evolving VLM Agents","created":"2026-10-11","cited_by_count":0,"area":"agents"}],"next_cursor":null}