{"total":15,"rows":[{"id":"2604.16548","title":"A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle","created":"2026-04-17","cited_by_count":27,"area":"agents"},{"id":"2606.24322","title":"Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees","created":"2026-06-23","cited_by_count":18,"area":"agents"},{"id":"2607.10487","title":"Temporary Authority, Permanent Effects: Commit-Time Authorization for LLM Agents","created":"2026-07-11","cited_by_count":18,"area":"agents"},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2607.27080","title":"MemSecBench: Tracking Agent Memory Poisoning from Persistence to Consequence and Repair","created":"2026-07-29","cited_by_count":4,"area":"agents"},{"id":"2605.28201","title":"Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents","created":"2026-05-27","cited_by_count":3,"area":"agents"},{"id":"2605.06731","title":"When Routine Chats Turn Toxic: Unintended Long-Term State Poisoning in Personalized Agents","created":"2026-05-07","cited_by_count":1,"area":"agents"},{"id":"2606.10742","title":"MemVenom: Triggered Poisoning of Multimodal Memories in Web Agents","created":"2026-06-09","cited_by_count":1,"area":"agents"},{"id":"2606.29142","title":"Agent Security Meets Regulatory Reality -- A Practitioner Systematization of Autonomous-Agent Threats and Controls in Regulated Financial Systems","created":"2026-06-28","cited_by_count":0,"area":"agents"},{"id":"2607.17951","title":"RT-SHCUA: Real-Time Self-Hosted Computer-Use Agent for UAV Control","created":"2026-07-20","cited_by_count":0,"area":"agents"},{"id":"2607.28103","title":"MIND: Lightweight and Effective Memory Injection Defense for LLM Agents via Intent-Aware Information Bottleneck","created":"2026-07-30","cited_by_count":0,"area":"agents"},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2610.02569","title":"Pincer: Resource Authorization for Agents using a Digital Twin","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.14431","title":"MemForm: Benchmarking Memory Formation Poisoning in LLM Agents","created":"2026-10-10","cited_by_count":0,"area":"agents"}],"next_cursor":null}