Tagged:
security-research2 posts
-
AI Worms: How Self-Replicating Attacks Spread Through Multi-Agent Pipelines
Morris-II (Cohen, Bitton & Nassi, 2024) demonstrated that malicious prompts can self-replicate across GenAI ecosystems, spreading to new agents without requiring the target to interact with the malicious content. Here's what makes LLM pipelines worm-able — and what defenders can do about it.
-
OWASP Top 10 for AI Agents, Part 1: The Three Vulnerabilities That Break Agent Trust
Agents aren't just chatbots with tools attached. They're autonomous systems that read, write, call APIs, and act with your credentials. This series builds an agent-specific security checklist from first principles, starting with the three vulnerability classes that the OWASP LLM Top 10 2025 elevated: Prompt Injection, Excessive Agency, and Insecure Tool Chaining.