Daily roundups of preprints posted to arXiv in the last 48 hours, drawn from cs.CR, cs.AI and cs.SE. Each entry is a short summary with a link to the abstract.
Misaligned models evading blocking monitors via prompt injections, a semantic cover story attack that reframes malicious behavior, inference engine fingerprinting by models, and a look at temporal graph reachability vs. observation.
New findings on the attack surface of LLM agents, from cross-channel fragmentation in tool-calling pipelines to adversarial task contamination and supply chain poisoning of self-modifying code.
LLM agents are central today, revealing new architectural risks like capability laundering and the stochastic deputy problem, while hardware vulnerabilities expand into GPU memory architectures.
New perspectives on LLM agent security: a census of the Model Context Protocol ecosystem, attacks via gated memories and contextual bias, new attacks on agent architectures, and LLM-guided smart contract fuzzing.