Intelligence reports
Loading the current evidence view. Navigation and account controls remain available.
Loading report content, references and extracted observables.
Brief status
Headline captured
Evidence records
1
Structured pivots
0
Publisher text
Available
Forensia structured brief
Only the source headline is captured. Forensia will not present a generic provenance summary as a threat brief.
Captured record
report:3822:titlearXiv — Cryptography & Security (cs.CR) recorded this headline on Aug 27, 2026. No lawful structured evidence is available yet to explain the underlying event.
What you can do now
source brief
source-authored · cleanedarXiv:2608.25776v1 Announce Type: new Abstract: Self-evolving LLM coding agents write their own tools by imitating retrieved skills from shared skill libraries. We identify a vulnerability in this loop: during authoring, a retrieved malicious skill can become the template for a new skill that preserves the payload. We call this self-poisoning: the agent authors, stores, and runs the resulting malicious skill. We exploit it through EvoMal, an attack that amplifies self-poisoning by wrapping an interchangeable payload in a banner, a set of benign-looking structural elements that induces an imita
Cleaned from source-provided descriptive text. This is not independent Forensia analysis. Open the original for the publisher's complete reporting.· sha256:25f8c3f2d67e9a38…
No structured IOCs, malware families, threat actors or ATT&CK techniques were extracted from this source document.
evidence set
1 recordsGrouping means the records share event anchors. It does not prove that every publisher independently verified the claims.
rights & provenance
Coverage state measures available context, not whether every claim is true or independently corroborated. Unknown publication rights fail closed to metadata and the original source link.
Review source terms ↗where to go next