Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-07-22 · high
Asynchronous Attribution Fingerprint Vectors score campaigns at the proxy layer from tool-use timing and prompt residue, holding up under deliberate evasion tests.
Why now: The 2026-07-22 briefing flagged this for the evasion-resistant test results, not because multi-fleet attacks are suddenly common.
Attribution scoring pins coordinated attacks across separate AI agents at 0.82 pairwise AUC, per arXiv 2607.18826. Guardrails that evaluate one agent session at a time don't catch any of it. Real adversaries split a single campaign across independent agents and runtimes, so each local defense only ever sees a fragment.
The method scores campaign similarity with what the paper calls Asynchronous Attribution Fingerprint Vectors: tool-use patterns, timing, and prompt residue left across sessions. Against near-chance baselines, it hits 0.82 AUC. It held under controlled evasion, too.
Structural and stylometric residue in the prompts carried the strongest signal, ahead of timing alone, per the paper's ranking. The correlation itself runs at the proxy layer, outside any single agent's guardrail. No need to instrument every agent in a fleet one by one.
That's the bet worth making: per-agent guardrails turn into a wasted line item once you're running more than one fleet. The thing to watch: whether orchestration platforms ship this correlation themselves, instead of leaving each agent vendor to bolt on its own detection.
Each link below shares sources, entities, or timing with this story.
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, attack, defens); pushes against this story (against).
Shared entity: Cross / Same source domain / Earlier coverage / Tension
Both cover Cross; reported by the same outlet (arxiv.org); earlier Cross coverage from 2026-07-13.
Same source domain / Shared topic / Downstream implication
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, attack); traces where this leads (which means).
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, attack); pushes against this story (against).
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, attack); pushes against this story (but).
Reported by the same outlet (arxiv.org); overlapping topics (against, attack, each); pushes against this story (against).
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, attack); pushes against this story (against).
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, attack); pushes against this story (against).