The End of Trust: How Agentic AI Breaks Security Assumptions

arXiv:2605.16436 · cs.CR, cs.AI · Submitted 2026-05-14 · Read on arXiv

cs.CR, cs.AI

Submitted: 2026-05-14

Updated: 2026-09-26

Terminology

• Verification — 52× in this paper · explained in 2 episodes
• Fidelity — 31× in this paper · explained in 2 episodes
• Actor — 28× in this paper · explained in 3 episodes
• Agentic AI — 13× in this paper · explained in 1 episode
• Agentic System — 11× in this paper · explained in 2 episodes
• Trace — 4× in this paper · explained in 2 episodes
• Accountability — 3× in this paper · explained in 2 episodes
• Core — 3× in this paper · explained in 2 episodes
• Cooperation — 2× in this paper · explained in 2 episodes
• Accuracy — 1× in this paper · explained in 1 episode
• Adaptation — 1× in this paper · explained in 1 episode
• Affordance — 1× in this paper · explained in 1 episode
• Business Email Compromise — 1× in this paper
• Consistency — 1× in this paper · explained in 3 episodes
• Diffusion Model — 1× in this paper · explained in 8 episodes
• Diffusion Models — 1× in this paper · explained in 6 episodes
• Few-Shot Learning — 1× in this paper · explained in 4 episodes
• Generalization — 1× in this paper · explained in 13 episodes
• Grounding — 1× in this paper · explained in 3 episodes
• Human-in-the-Loop — 1× in this paper · explained in 3 episodes
• Large Language Models (LLMs) — 1× in this paper · explained in 6 episodes
• Zero Trust Architecture — 1× in this paper

Sources

• Evaluating Large Language Models' Capability to Launch Fully Automated Spear Phishing Campaigns: Validated on Human Subjects
• Spear Phishing With Large Language Models
• Generative Language Models and Automated Influence Operations: Emerging Threats and Potential Mitigations
• Topic-Based Watermarks for Large Language Models
• Can AI-Generated Text be Reliably Detected?
• The Cat and Mouse Game: The Ongoing Arms Race Between Diffusion Models and Detection Methods

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs