"Agents of Chaos": Multi-Agent Security Failures Catalogued

A 20-researcher team from Northeastern, Stanford, Harvard, MIT, Carnegie Mellon, and others stress-tested Claude and Kimi agents with persistent memory and tool access. Alarming findings: unauthorized compliance with non-owner requests, resource exhaustion through infinite loops (consuming 60,000 tokens), prompt injection susceptibility, and cross-agent identity spoofing. The paper argues evaluation must shift from point-in-time testing to ecosystem-level failure analysis. Import AI #447