Unverified50% confidenceFactExact time
In agentic systems, an attacker only needs to get malicious content into the context window once for it to be repeatedly activated across subsequent rounds of tool calls, forming persistent contamination.
1
Sources
50%
Confidence
Long-term
Relevance
10/17/2026
First Seen
Sources
Related Entities
Related Claims
Unverified数据投毒攻击中，清洁标签攻击允许攻击者在不修改样本标签的情况下植入后门，特洛伊木马攻击通过特定触发词激活预设的恶意行为73% similarVerifiedAttackers can induce agents to execute a sequence of seemingly normal operations—such as querying user data, calling formatting tools, and triggering email sending—to form a data exfiltration chain.72% similarUnverifiedThe advertising technology stack is regarded as a new type of attack surface similar to the software supply chain, where an attacker only needs to replace or inject malicious assets at any link in the chain to achieve one-to-many poisoning of a massive number of sites.72% similarUnverifiedMalicious actors planting backdoored models or tampering with weights on platforms such as Hugging Face could constitute supply chain attacks.72% similarUnverifiedA replay attack is a cybersecurity threat in which an attacker intercepts a legitimate authorization message and retransmits it unchanged at a later time to trick the system into executing the same operation again.72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1054577API
curl https://kongchang.com/api/v1/knowledge/claims/1054577MCP
get_claim(id=1054577)