{"id":"https://openalex.org/W7161723840","doi":"https://doi.org/10.48550/arxiv.2605.16436","title":"The End of Trust: How Agentic AI Breaks Security Assumptions","display_name":"The End of Trust: How Agentic AI Breaks Security Assumptions","publication_year":2026,"publication_date":"2026-05-14","ids":{"openalex":"https://openalex.org/W7161723840","doi":"https://doi.org/10.48550/arxiv.2605.16436"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.16436","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16436","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.16436","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136499454","display_name":"Osama Zafar","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zafar, Osama","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120756053","display_name":"Alexander Nemecek","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nemecek, Alexander","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5028326739","display_name":"Erman Ayday","orcid":"https://orcid.org/0000-0003-3383-1081"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ayday, Erman","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.19869999587535858,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.19869999587535858,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.1273999959230423,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.06949999928474426,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/deception","display_name":"Deception","score":0.8725000023841858},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.6419000029563904},{"id":"https://openalex.org/keywords/fidelity","display_name":"Fidelity","score":0.5460000038146973},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.4699000120162964},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.3774000108242035},{"id":"https://openalex.org/keywords/corporate-governance","display_name":"Corporate governance","score":0.37560001015663147}],"concepts":[{"id":"https://openalex.org/C2779267917","wikidata":"https://www.wikidata.org/wiki/Q170028","display_name":"Deception","level":2,"score":0.8725000023841858},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.6419000029563904},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6298999786376953},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5968999862670898},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.5460000038146973},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.4699000120162964},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.3774000108242035},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.37560001015663147},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3709999918937683},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.37070000171661377},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3158999979496002},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.2718999981880188},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.2687999904155731},{"id":"https://openalex.org/C190253527","wikidata":"https://www.wikidata.org/wiki/Q295354","display_name":"Law and economics","level":1,"score":0.2587999999523163},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.25060001015663147},{"id":"https://openalex.org/C113364801","wikidata":"https://www.wikidata.org/wiki/Q26674","display_name":"High fidelity","level":2,"score":0.2502000033855438}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.16436","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16436","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.16436","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16436","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7339204549789429}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"For":[0],"decades,":[1],"the":[2,19,25,70,82,108,113,180,188],"security":[3,102,171],"of":[4,21,46,72,191],"digital":[5,192],"interaction":[6],"has":[7],"rested":[8],"on":[9],"an":[10,116,121,135,149],"unacknowledged":[11],"economic":[12],"constraint.":[13],"Attackers":[14],"faced":[15],"a":[16,22,43,101,141,166],"tradeoff":[17,77],"between":[18,126],"fidelity":[20],"deception":[23,74,88],"and":[24,39,60,178],"scale":[26],"at":[27,92],"which":[28,120],"it":[29],"could":[30],"be":[31,90],"deployed.":[32],"Convincing":[33],"impersonation":[34],"required":[35],"sustained":[36],"human":[37],"effort":[38],"was":[40],"confined":[41],"to":[42,69,89,175],"narrow":[44],"set":[45],"high-value":[47],"targets,":[48],"while":[49],"mass-market":[50,93],"attacks":[51],"sacrificed":[52],"plausibility":[53],"for":[54],"reach.":[55],"Detection":[56],"systems,":[57],"verification":[58],"mechanisms,":[59],"user":[61],"awareness":[62],"training":[63],"have":[64],"all":[65],"been":[66],"implicitly":[67],"calibrated":[68],"artifacts":[71],"cheap":[73],"that":[75,97,151,156,169,183],"this":[76,98],"produced.":[78],"Agentic":[79],"AI":[80],"collapses":[81],"tradeoff,":[83],"allowing":[84],"high-fidelity,":[85],"individually":[86],"tailored":[87],"produced":[91],"scale.":[94],"We":[95,111,164],"argue":[96],"shift":[99],"exhausts":[100],"paradigm":[103,168],"rather":[104,138],"than":[105,139],"merely":[106],"intensifying":[107],"threat":[109],"landscape.":[110],"introduce":[112],"Infinite":[114],"Impostor,":[115],"attack":[117],"model":[118],"in":[119],"autonomous":[122],"agent":[123],"interposes":[124],"itself":[125],"two":[127],"parties":[128],"who":[129],"already":[130],"trust":[131],"each":[132],"other,":[133],"hijacking":[134],"existing":[136],"relationship":[137],"building":[140],"new":[142],"one":[143],"from":[144,161,172],"scratch.":[145],"Detection-oriented":[146],"defenses":[147],"share":[148],"assumption":[150],"generative":[152],"progress":[153],"is":[154],"eliminating,":[155],"synthetic":[157],"outputs":[158],"are":[159],"distinguishable":[160],"authentic":[162],"ones.":[163],"propose":[165],"suspect-by-default":[167],"shifts":[170],"authenticating":[173],"actors":[174],"evaluating":[176],"actions,":[177],"examine":[179],"governance":[181],"tensions":[182],"arise":[184],"when":[185],"platforms":[186],"become":[187],"regulatory":[189],"substrate":[190],"interaction.":[193]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-20T00:00:00"}