{"data":{"id":"981ffefb-fcce-4fbc-9854-2bab81b47fba","title":"Agents of Chaos: A Systematization of Knowledge (SoK) on Malicious Attacks on Agentic AI Systems","summary":"This systematic review screens 186 candidate sources and retains 98, identifying 284 atomic attacks and 452 atomic safeguards against agentic AI systems that extend LLMs with tools, memory, retrieval, and multi-agent coordination. Tool, MCP, and action-layer attacks make up the largest share of atomic attacks, while the prompt-injection and action-hijacking class has the broadest paper coverage. Only 278 of 660 attack-safeguard relationships are directly assessed, so safeguard coverage remains uneven.","solution":"The paper states that its findings support lifecycle-aware threat modeling, agent evaluation, tool governance, and defense-in-depth security for agentic AI systems.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2611.10843v1","publishedAt":"2026-11-07T16:42:07.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection","other"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-07T16:42:07.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability","safety"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":["AML.T0051"]}}