LATIDIA · Ciberseguridad

Conozca a su agente: Pentesting impulsado por el reconocimiento de agentes de IA

arXiv:2607.19837v2 Announce Type: replace-cross Resumen: El pentesting tradicional utiliza el reconocimiento en cada paso para descubrir debilidades invisibles, crear ataques más fuertes y avanzar en el objetivo; argumentamos que los agentes de IA r

La noticia

arXiv:2607.19837v2 Announce Type: replace-cross Abstract: Traditional pentesting uses reconnaissance at each step to uncover unseen weaknesses, build stronger attacks, and advance the objective; we argue that AI agents require the same treatment. We formalize agent reconnaissance by modeling the process and identifying the knowledge assets it seeks to extract: what they are, how they are used, and which agent weaknesses they exploit to give adversaries leverage in indirect prompt injection attacks. We instantiate these insights in Know Your Agent (KYA), a framework that automates black-box, reconnaissance-driven pentesting by probing agents, building target profiles, and using those profiles to craft stronger attacks. We evaluate KYA on agent-security benchmarks and a real-world