{"data":{"id":"0741fea0-0d63-4521-847e-c0334dbd142e","title":"StateFence: Task-State Protection Against Evidence-Chain Contamination in Blue-Team LLM Agents","summary":"Researchers study indirect prompt injection against blue-team LLM agents in Security Operations Centers, where malicious text in telemetry, tickets, retrieval results or memory can corrupt intermediate outputs such as severity labels, incident narratives and IOC sets. They introduce StateFence, a task-aware evaluation and defense framework that maps attacks into explicit, stealth, multi-hop and persistent SOC evidence attacks and routes defenses by the attacked state. Across controlled and public-SOC validation cases, StateFence reduces attack success while preserving task utility and avoiding the indicator loss caused by task-mismatched filtering.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2611.02605v1","publishedAt":"2026-11-02T06:28:45.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-02T06:28:45.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":["AML.T0051"]}}