Morning Edition · Sunday, November 8, 2026Published at 1:30 AM EST · New York

Researchers show approved agent tools can turn malicious through later updates, with a 97.6 percent attack success rate across seven frameworks

The attack, called ETUDE, runs outside the model's context, so defenses that inspect prompts never see it. Separately, Cognition security chief Alex Stamos says AI has pushed defenders into a "dark age."

A preprint submitted to arXiv on November 1 by researchers at Shanghai Jiao Tong University and Inria describes a class of agent attack that prompt-injection defenses do not address. In "Beyond Prompt Injection: The Tool Update Gap in LLM A…