https://agentstateattack.com/ https://agentstateattack.com/blog https://agentstateattack.com/about https://agentstateattack.com/pillars https://agentstateattack.com/pillars/definitions https://agentstateattack.com/pillars/state-surfaces https://agentstateattack.com/pillars/detection https://agentstateattack.com/pillars/defenses https://agentstateattack.com/pillars/evidence-mappings https://agentstateattack.com/blog/target-state-script-injection-declarative-config-tools2026-10-14T00:00:49.054Z https://agentstateattack.com/blog/agent-command-approval-bypass-shell-rewriting-git-hooks2026-10-10T00:01:06.672Z https://agentstateattack.com/blog/agent-scheduled-task-poisoning-sleeper-channels2026-10-07T00:10:19.572Z https://agentstateattack.com/blog/url-parameter-prompt-injection-deep-link-agent-memory-poisoning2026-10-06T01:38:10.298Z https://agentstateattack.com/blog/semantic-cache-poisoning-llm-response-cache-attacks2026-10-06T01:37:57.426Z https://agentstateattack.com/blog/mcp-confused-deputy-token-passthrough-oauth-authorization-state2026-10-06T01:37:44.982Z https://agentstateattack.com/blog/agent-card-poisoning-a2a-protocol-identity-spoofing2026-10-06T01:37:31.808Z https://agentstateattack.com/blog/agent-checkpoint-poisoning-insecure-deserialization-rollback2026-10-06T01:37:19.058Z https://agentstateattack.com/blog/many-shot-context-poisoning-long-context-demonstration-flooding2026-10-06T01:37:06.974Z https://agentstateattack.com/blog/agent-plan-poisoning-task-list-state2026-10-06T01:36:54.723Z https://agentstateattack.com/blog/agentic-browser-session-hijacking-authenticated-state2026-10-06T01:36:41.382Z https://agentstateattack.com/blog/sandbox-configuration-escape-agent-execution-environment2026-10-06T01:36:28.701Z https://agentstateattack.com/blog/rag-poisoning-vector-store-context-injection2026-10-06T01:36:16.267Z https://agentstateattack.com/blog/defending-agent-state-cross-surface-control-model2026-10-06T01:36:04.012Z https://agentstateattack.com/blog/detecting-agent-state-attacks-cross-surface-telemetry2026-10-06T01:35:51.695Z https://agentstateattack.com/blog/mcp-tool-poisoning-agent-tool-state2026-10-06T01:35:25.411Z https://agentstateattack.com/blog/shared-state-poisoning-multi-agent-systems2026-10-06T01:34:45.842Z https://agentstateattack.com/blog/slopsquatting-hallucinated-packages-agent-generated-artifacts2026-10-06T01:35:38.580Z https://agentstateattack.com/blog/instruction-file-poisoning-agent-configuration-files2026-10-06T01:35:11.173Z https://agentstateattack.com/blog/persistent-memory-injection-agent-memory-tools2026-10-06T01:34:58.317Z https://agentstateattack.com/blog/owasp-agentic-mitre-atlas-crosswalk2026-10-06T01:34:31.273Z https://agentstateattack.com/blog/compromised-summaries-context-compaction2026-10-06T01:34:16.113Z https://agentstateattack.com/blog/agent-state-attack2026-10-06T01:34:01.186Z