AI security research / news
Reports, updates and corrections.
160 reports and updates · Page 6 of 6
10 matching records on this page
Guidelight compared six publicly described frontier-lab control practices and found uneven implementation. The assessment is based on public evidence, not a full audit of internal systems.
PACE treats the wallet agent as potentially compromised and moves authorization into a deterministic verifier plus smart-account enforcement. It reported zero unsafe executions in 2,800 benchmark trials.
Anthropic tested groups of agents given incompatible objectives and observed obstruction and conflict patterns. The work is controlled multi-agent behavior research, not a deployed-system incident.
A production wallet agent retried a 200 USDT to BTC swap after a false failure signal; both Ethereum transactions later landed, doubling the intended spend to 400 USDT.
A July paper reports a multi-agent system that retrieves audit knowledge, generates Foundry exploits and repairs or replans them against execution feedback.
Two narrowly scoped advisories show why agent control planes still need ordinary session authorization and transport security.
OpenAI reports an automated red-team loop that improved attack success against indirect prompt-injection defenses in a controlled arena. The result is benchmark evidence, not a production compromise.
GhostCommit put instructions in a repository image that a coding agent later followed, copying synthetic secrets into generated code. The controlled research shows an input-review blind spot and an output channel, not confirmed theft from production repositories.
A controlled Android demonstration used legitimate File System Access permissions to encrypt selected images without a native payload.
CyberChainBench evaluates agents against 541 historical EVM incidents across nine chains. Its best setup achieved 43.7% exploitation on the evaluated set, reproducing historical profit in forked state rather than stealing live funds.
No matches on this page.