Concept序列化威胁 / 组合攻击
Serialization Attack
An attack method targeting AI agents that induces the agent to execute multiple seemingly legitimate tool-call operations whose combination produces a malicious effect, thereby circumventing single-point security checks.
Core Facts
Timeline (last 90 days)
Sep 11
Attackers can induce agents to execute a sequence of seemingly normal operations—such as querying user data, calling formatting tools, and triggering email sending—to form a data exfiltration chain.
Verified65%