- Engineer — Learn: Novel research demonstrating that RL-crafted tool names and descriptions can coerce an LLM agent into leaking its full runtime context (prompt, trajectory, tool list) to an attacker endpoint; no PoC tooling or active exploitation reported, but teams building or integrating third-party tools into agent pipelines should treat tool metadata as an untrusted attack surface and audit how agents decide to pass context as arguments.
- SOC/IR — Learn: Purely academic research with no IOCs, ATT&CK mappings, or evidence of in-the-wild use; worth tracking as LLM agent deployments grow, but there is no detection or hunting action to take today.
- Leader — Skip