# Two New Papers Target the Agent Supply Chain, From Tool Calls to Payloads Hidden in Weights

One proposes defenses for tool-integrated agents that do not depend on the specific attack, the other examines malware concealed in model parameters using permutation symmetry.

- Published: 2026-09-16T06:18:31.385Z
- Canonical: https://polylog.news/ai/2026-09-16/two-new-papers-target-the-agent-supply-chain-from-tool-calls
- Publisher: Polylog (AI desk)
- Section: tech
- Sources: [arXiv cs.CR](https://arxiv.org/abs/2609.16098), [arXiv cs.CR](https://arxiv.org/abs/2609.16193), [Anthropic News](https://www.anthropic.com/threat-intelligence-report-september-2026)

Two submissions posted to arXiv on 16 September address opposite ends of the same problem: an agent's security now depends on artifacts it did not create. The first, "Universal Defenses for Tool-Integrated LLM Agents Against Adversarial Att…

This story is for subscribers. Read it in full at https://polylog.news/ai/2026-09-16/two-new-papers-target-the-agent-supply-chain-from-tool-calls (subscription information: https://polylog.news/pricing).