Fetching from the wire…
01
02
03
04
05
06
07
08
Agents2026-08-06 · source-backed
arXiv 2608.04565 starts from the observation that a single injected page gets diluted because modern search agents issue follow-ups and compare sources. So instead it appends one controlled result to every query, building a coherent fake evidence chain across apparently corroborating sources. 55.9% ASR / 83.3% MaxN ASR on the full SafeSearch split; a companion method that refines attacker strategy from execution traces reaches 71.4% / 95.0% held-out. This kills the assumption that multi-source corroboration is a defense. It isn't, when the attacker controls the mediating search interface.
Each link below shares sources, entities, or timing with this story.
Shared entity: ASR / Same source domain / Shared topic / Tension
Both cover ASR; reported by the same outlet (arxiv.org); overlapping topics (agent, attacker).
Shared entity: ASR / Same source domain / Shared topic / Earlier coverage
Both cover ASR; reported by the same outlet (arxiv.org); overlapping topics (agent, chain).
Shared entity: ASR / Same source domain / Earlier coverage / Tension
Both cover ASR; reported by the same outlet (arxiv.org); earlier ASR coverage from 2026-08-04.
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (agent, beat, control); pushes against this story (vs).
Reported by the same outlet (arxiv.org); overlapping topics (beat, control, search); pushes against this story (against).
Reported by the same outlet (arxiv.org); overlapping topics (agent, assumption, beat); pushes against this story (but).
Shared entity: ASR / Same source domain / Earlier coverage
Both cover ASR; reported by the same outlet (arxiv.org); earlier ASR coverage from 2026-07-31.
Both cover ASR; reported by the same outlet (arxiv.org); earlier ASR coverage from 2026-07-27.