arXiv:2610.13227v1 Announce Type: new Abstract: Agent skills extend the capabilities of AI agents by bundling instructions, code, and resources into reusable packages. During skill execution, agents may produce or modify artifacts, such as files, configurations, and cached data, that are reused by other skills in later sessions.
Understanding and Mitigating Cross-Session Attacks via Persistent Artifacts in Agent Skill Composition
About this summary. This is a short excerpt from the description that arXiv cs.CR published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://arxiv.org/abs/2610.13227
Source attribution: headline and facts are from arXiv cs.CR (arxiv.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Three Japan-Focused Cyberattacks Show How Hackers Use AI
Three Japan-focused cyberattacks show how AI helps hackers scale operations, while exploiting old systems and weak security remains key. In autumn 2026, Japanese…
All the security risks Anthropic is worried about before its IPO
Anthropic said its AI systems could drastically reshape the software and cybersecurity sectors in the “near term,” while also laying out a litany of cybersecurity and…
Backporting security fixes to stable releases
The software you are running is almost certainly riddled with known, unfixed security bugs. These bugs can be trivially and quickly exploited by modern AI agents. This…
Agent-to-Agent Synthetic Social Engineering on the Web
arXiv:2610.33411v1 Announce Type: new Abstract: An AI agent can prepare an accurate report and still request an action its user has not authorized. Cooperation across…
Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang
On September 8, 2026, we were alerted by a security researcher, Gadi Evron from Knostic, to a tenant isolation issue affecting the GLM-5.3 Workers AI model…
In-the-Wild Attack Abuses AI Agents' Trust in Markdown
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.