Fetching from the wire…
01
02
03
04
05
06
07
08
OSS2026-08-10 · source-backed
arXiv 2608.06984 evaluates 328 executable attack cases across seven persistent-carrier families on mainstream harnesses, tracing each as a Persistent-Risk Lifecycle from attacker entry through cross-session persistence to a later benign trigger. Containment depends on the specific carrier AND the harness-model pairing, and end-to-end attack-success rates hide where a chain actually breaks. If you run persistent memory or skill files, your safety posture is per-carrier. Hardening one does not generalize to the others. Pair this with the three-repos-no-format finding above and the picture is uncomfortable.
Each link below shares sources, entities, or timing with this story.
Shared entity: Persistent / Same source domain / Shared topic / Earlier coverage / Tension
Both cover Persistent; reported by the same outlet (arxiv.org); overlapping topics (above, agent).
Shared entity: Persistent / Same source domain / Shared topic / Earlier coverage
Both cover Persistent; reported by the same outlet (arxiv.org); overlapping topics (agent, attack, memory).
Both cover Persistent; reported by the same outlet (arxiv.org); overlapping topics (agent, memory).
Same source domain / Shared topic / Downstream implication
Reported by the same outlet (arxiv.org); overlapping topics (agent, attack, chain, memory); traces where this leads (downstream).
Reported by the same outlet (arxiv.org); overlapping topics (agent, attack, attacker, memory); traces where this leads (which means).
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (agent, benign, skill); pushes against this story (against).
Reported by the same outlet (arxiv.org); overlapping topics (attack, benign, memory); pushes against this story (against).
Reported by the same outlet (arxiv.org); overlapping topics (actually, agent, attacker); pushes against this story (but).