{"id":"https://openalex.org/W7128813993","doi":"https://doi.org/10.3389/frai.2026.1731566","title":"Threats and vulnerabilities in artificial intelligence and agentic AI models","display_name":"Threats and vulnerabilities in artificial intelligence and agentic AI models","publication_year":2026,"publication_date":"2026-02-13","ids":{"openalex":"https://openalex.org/W7128813993","doi":"https://doi.org/10.3389/frai.2026.1731566","pmid":"https://pubmed.ncbi.nlm.nih.gov/41766945"},"language":"en","primary_location":{"id":"doi:10.3389/frai.2026.1731566","is_oa":true,"landing_page_url":"https://doi.org/10.3389/frai.2026.1731566","pdf_url":"https://public-pages-files-2025.frontiersin.org/journals/artificial-intelligence/articles/10.3389/frai.2026.1731566/pdf","source":{"id":"https://openalex.org/S4210197006","display_name":"Frontiers in Artificial Intelligence","issn_l":"2624-8212","issn":["2624-8212"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320527","host_organization_name":"Frontiers Media","host_organization_lineage":["https://openalex.org/P4310320527"],"host_organization_lineage_names":["Frontiers Media"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Artificial Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://public-pages-files-2025.frontiersin.org/journals/artificial-intelligence/articles/10.3389/frai.2026.1731566/pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5123168114","display_name":"Petar Radanliev","orcid":null},"institutions":[{"id":"https://openalex.org/I125680101","display_name":"Turing Institute","ror":"https://ror.org/02x2mw849","country_code":"GB","type":"facility","lineage":["https://openalex.org/I125680101"]},{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]},{"id":"https://openalex.org/I4210128584","display_name":"The Alan Turing Institute","ror":"https://ror.org/035dkdb55","country_code":"GB","type":"facility","lineage":["https://openalex.org/I4210128584"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Petar Radanliev","raw_affiliation_strings":["Department of Computer Sciences, University of Oxford","The Alan Turing Institute, British Library"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Sciences, University of Oxford","institution_ids":["https://openalex.org/I40120149"]},{"raw_affiliation_string":"The Alan Turing Institute, British Library","institution_ids":["https://openalex.org/I125680101","https://openalex.org/I4210128584"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123140722","display_name":"Omar Santos","orcid":null},"institutions":[{"id":"https://openalex.org/I151281966","display_name":"Cisco Systems (China)","ror":"https://ror.org/02qy75381","country_code":"CN","type":"company","lineage":["https://openalex.org/I135428043","https://openalex.org/I151281966"]},{"id":"https://openalex.org/I4210129566","display_name":"Cisco Systems (United States)","ror":null,"country_code":"US","type":null,"lineage":["https://openalex.org/I4210129566"]}],"countries":["CN","US"],"is_corresponding":false,"raw_author_name":"Omar Santos","raw_affiliation_strings":["Cisco Systems, RTP"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cisco Systems, RTP","institution_ids":["https://openalex.org/I151281966","https://openalex.org/I4210129566"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5125985906","display_name":"Carsten Maple","orcid":null},"institutions":[{"id":"https://openalex.org/I125680101","display_name":"Turing Institute","ror":"https://ror.org/02x2mw849","country_code":"GB","type":"facility","lineage":["https://openalex.org/I125680101"]},{"id":"https://openalex.org/I39555362","display_name":"University of Warwick","ror":"https://ror.org/01a77tt86","country_code":"GB","type":"education","lineage":["https://openalex.org/I39555362"]},{"id":"https://openalex.org/I4210128584","display_name":"The Alan Turing Institute","ror":"https://ror.org/035dkdb55","country_code":"GB","type":"facility","lineage":["https://openalex.org/I4210128584"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Carsten Maple","raw_affiliation_strings":["The Alan Turing Institute, British Library","University of Warwick \u2013 WMG"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Alan Turing Institute, British Library","institution_ids":["https://openalex.org/I125680101","https://openalex.org/I4210128584"]},{"raw_affiliation_string":"University of Warwick \u2013 WMG","institution_ids":["https://openalex.org/I39555362"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5123168114"],"corresponding_institution_ids":["https://openalex.org/I125680101","https://openalex.org/I40120149","https://openalex.org/I4210128584"],"apc_list":{"value":2125,"currency":"USD","value_usd":2125},"apc_paid":{"value":2125,"currency":"USD","value_usd":2125},"fwci":9.7346,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.96194496,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"9","issue":null,"first_page":"1731566","last_page":"1731566"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9783999919891357,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9783999919891357,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.004000000189989805,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.0035000001080334187,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.887499988079071},{"id":"https://openalex.org/keywords/framing","display_name":"Framing (construction)","score":0.6136999726295471},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.3747999966144562},{"id":"https://openalex.org/keywords/applications-of-artificial-intelligence","display_name":"Applications of artificial intelligence","score":0.36500000953674316},{"id":"https://openalex.org/keywords/critical-security-studies","display_name":"Critical security studies","score":0.35580000281333923},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.33799999952316284}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.887499988079071},{"id":"https://openalex.org/C169087156","wikidata":"https://www.wikidata.org/wiki/Q2131593","display_name":"Framing (construction)","level":2,"score":0.6136999726295471},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5138999819755554},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43709999322891235},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3955000042915344},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.3747999966144562},{"id":"https://openalex.org/C157170001","wikidata":"https://www.wikidata.org/wiki/Q4781507","display_name":"Applications of artificial intelligence","level":2,"score":0.36500000953674316},{"id":"https://openalex.org/C505623098","wikidata":"https://www.wikidata.org/wiki/Q3002932","display_name":"Critical security studies","level":5,"score":0.35580000281333923},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.33799999952316284},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.32510000467300415},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.3093000054359436},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.28780001401901245},{"id":"https://openalex.org/C5065155","wikidata":"https://www.wikidata.org/wiki/Q1185775","display_name":"Frame problem","level":2,"score":0.2863999903202057},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.27079999446868896},{"id":"https://openalex.org/C2779607372","wikidata":"https://www.wikidata.org/wiki/Q4789757","display_name":"Argumentation framework","level":3,"score":0.26109999418258667},{"id":"https://openalex.org/C188147891","wikidata":"https://www.wikidata.org/wiki/Q147638","display_name":"Cognitive science","level":1,"score":0.2506999969482422}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.3389/frai.2026.1731566","is_oa":true,"landing_page_url":"https://doi.org/10.3389/frai.2026.1731566","pdf_url":"https://public-pages-files-2025.frontiersin.org/journals/artificial-intelligence/articles/10.3389/frai.2026.1731566/pdf","source":{"id":"https://openalex.org/S4210197006","display_name":"Frontiers in Artificial Intelligence","issn_l":"2624-8212","issn":["2624-8212"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320527","host_organization_name":"Frontiers Media","host_organization_lineage":["https://openalex.org/P4310320527"],"host_organization_lineage_names":["Frontiers Media"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Artificial Intelligence","raw_type":"journal-article"},{"id":"pmid:41766945","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/41766945","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in artificial intelligence","raw_type":null},{"id":"pmh:oai:doaj.org/article:59f611835c2a48eb9c58c2a16422f165","is_oa":true,"landing_page_url":"https://doaj.org/article/59f611835c2a48eb9c58c2a16422f165","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Frontiers in Artificial Intelligence, Vol 9 (2026)","raw_type":"article"},{"id":"pmh:oai:ora.ox.ac.uk:uuid:508fd4d2-8bae-4354-9ff7-60c860dce9d5","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306402636","display_name":"Oxford University Research Archive (ORA) (University of Oxford)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I40120149","host_organization_name":"University of Oxford","host_organization_lineage":["https://openalex.org/I40120149"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Jisc Publications Router","raw_type":"http://purl.org/coar/resource_type/c_dcae04bc"},{"id":"pmh:oai:pubmedcentral.nih.gov:12947123","is_oa":true,"landing_page_url":"https://pmc.ncbi.nlm.nih.gov/articles/PMC12947123/","pdf_url":null,"source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Front Artif Intell","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3389/frai.2026.1731566","is_oa":true,"landing_page_url":"https://doi.org/10.3389/frai.2026.1731566","pdf_url":"https://public-pages-files-2025.frontiersin.org/journals/artificial-intelligence/articles/10.3389/frai.2026.1731566/pdf","source":{"id":"https://openalex.org/S4210197006","display_name":"Frontiers in Artificial Intelligence","issn_l":"2624-8212","issn":["2624-8212"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320527","host_organization_name":"Frontiers Media","host_organization_lineage":["https://openalex.org/P4310320527"],"host_organization_lineage_names":["Frontiers Media"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Artificial Intelligence","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.7169210910797119,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G1413810229","display_name":"SPRITE+ 2: The Security, Privacy, Identity and Trust Engagement Networkplus (phase 2).","funder_award_id":"EP/W020408/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G2988436747","display_name":null,"funder_award_id":"EP/W020408/1","funder_id":"https://openalex.org/F4320306137","funder_display_name":"Bill and Melinda Gates Foundation"},{"id":"https://openalex.org/G521268540","display_name":"PETRAS 2","funder_award_id":"EP/S035362/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G8098809150","display_name":"The Alan Turing Institute - to enhance the security and privacy of national scale digital public infrastructure systems","funder_award_id":"INV-057591","funder_id":"https://openalex.org/F4320306137","funder_display_name":"Bill and Melinda Gates Foundation"}],"funders":[{"id":"https://openalex.org/F4320306137","display_name":"Bill and Melinda Gates Foundation","ror":"https://ror.org/0456r8d26"},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7128813993.pdf","grobid_xml":"https://content.openalex.org/works/W7128813993.grobid-xml"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W2165049149","https://openalex.org/W2742037853","https://openalex.org/W2753520429","https://openalex.org/W2755950973","https://openalex.org/W2897313686","https://openalex.org/W2945235903","https://openalex.org/W2953691792","https://openalex.org/W2965800227","https://openalex.org/W2976175739","https://openalex.org/W2990247619","https://openalex.org/W2997532515","https://openalex.org/W3004383804","https://openalex.org/W3015082424","https://openalex.org/W3015178571","https://openalex.org/W3096831136","https://openalex.org/W3176452384","https://openalex.org/W3211424228","https://openalex.org/W4225858632","https://openalex.org/W4296473303","https://openalex.org/W4387817744","https://openalex.org/W4400500892","https://openalex.org/W4406728221"],"related_works":[],"abstract_inverted_index":{"Introduction:":[0],"Adversarial":[1,124],"robustness":[2,116],"in":[3,9,69],"artificial":[4,24],"intelligence":[5],"is":[6,67],"commonly":[7],"defined":[8],"terms":[10],"of":[11,120,211],"input-level":[12],"perturbations":[13],"applied":[14],"to":[15,34,94,100,129,183],"static":[16],"models.":[17],"This":[18],"study":[19],"reconceptualises":[20],"adversarial":[21,57,82,168,177,213],"vulnerability":[22],"for":[23,152,197],"and":[25,37,46,62,77,87,131,138,144,160,186,205],"agentic":[26,121,167,198],"AI":[27,122,178,199],"systems":[28],"by":[29],"extending":[30],"the":[31,96],"threat":[32],"model":[33],"autonomy,":[35],"self-governance,":[36],"closed-loop":[38],"decision-making,":[39],"where":[40],"behaviour":[41],"unfolds":[42],"dynamically":[43],"through":[44],"feedback":[45,139],"control.":[47],"Methods:":[48],"We":[49],"develop":[50],"a":[51,70,193],"system-level":[52,172],"analytical":[53],"framework":[54,191],"that":[55,110,201],"formalises":[56],"risk":[58],"across":[59,117],"perceptual,":[60],"cognitive,":[61],"executive":[63],"layers.":[64],"The":[65,107,189],"analysis":[66],"grounded":[68],"PRISMA-compliant":[71],"systematic":[72],"literature":[73],"review,":[74],"bibliometric":[75],"mapping,":[76],"targeted":[78],"empirical":[79],"validation.":[80],"Established":[81],"results":[83,108],"from":[84,127,180],"vision":[85],"benchmarks":[86],"recent":[88],"large-language-model":[89],"red-teaming":[90],"studies":[91],"are":[92],"synthesised":[93],"contextualise":[95],"framework,":[97],"rather":[98],"than":[99],"introduce":[101],"new":[102],"benchmark":[103],"performance":[104],"claims.":[105],"Results:":[106],"demonstrate":[109],"no":[111],"single":[112],"defence":[113,207],"mechanism":[114],"provides":[115],"all":[118],"layers":[119],"systems.":[123],"vulnerabilities":[125],"propagate":[126],"perception":[128],"policy":[130],"actuation,":[132],"with":[133],"architectural":[134],"similarity,":[135],"domain":[136],"shift,":[137],"dynamics":[140],"critically":[141],"shaping":[142],"transferability":[143],"failure":[145],"modes.":[146],"These":[147],"effects":[148],"have":[149],"direct":[150],"implications":[151],"safety-critical":[153],"applications,":[154],"including":[155],"autonomous":[156],"mobility,":[157],"healthcare":[158],"imaging,":[159],"biometric":[161],"security.":[162],"Discussion:":[163],"By":[164],"framing":[165],"higher-order":[166],"threats":[169],"as":[170],"hypothesis-driven,":[171],"risks,":[173],"this":[174],"work":[175],"shifts":[176],"security":[179,200],"benchmark-centric":[181],"evaluation":[182],"behavioural":[184],"integrity":[185],"lifecycle":[187],"resilience.":[188],"proposed":[190],"defines":[192],"coherent":[194],"research":[195],"agenda":[196],"integrates":[202],"control-theoretic":[203],"reasoning":[204],"governance-aware":[206],"design,":[208],"addressing":[209],"limitations":[210],"classical":[212],"machine-learning":[214],"theory.":[215]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2026-02-14T00:00:00"}