PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hijacking multi-agent systems in your PajaMAS

blog.trailofbits.com | blog | #ai-security | #prompt-injection | #tool-release | #agent-security | #multi-agent-systems | #mas-hijacking
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits released pajaMAS, a curated set of demos showing how attackers hijack multi-agent system control flow through malicious environments, tools, or agents, plus secure design guidance.
Published
Collected

Related coverage

blog · blog.trailofbits.com
The sorry state of skill distribution
Trail of Bits bypassed ClawHub's malicious-skill detector, Cisco's skill scanner, and all three skills.sh scanners in under an hour, showing static scanning cannot secure agentic skill supply chains.
blog · blog.trailofbits.com
gosentry brings LibAFL-grade fuzzing to Go's native interface
gosentry is a Trail of Bits fork of the Go toolchain that keeps the standard testing.F harness while running go test -fuzz on LibAFL, adding struct-aware, grammar-based fuzzing and new bug detections.
blog · blog.trailofbits.com
Mutation testing for the agentic era
Trail of Bits releases MuTON and mewt, mutation testing tools optimized for agentic workflows: MuTON supports TON languages, while mewt is a language-agnostic core for Solidity, Rust and Go.
blog · blog.trailofbits.com
Try our new dimensional analysis Claude plugin
Trail of Bits released a Claude plugin using LLMs to annotate code with dimensional types and mechanically flag mismatches, reaching 93% recall vs 50% for baseline prompts on real audit findings.
blog · blog.trailofbits.com
mquire: Linux memory forensics without external dependencies
Trail of Bits open-sourced mquire, which analyzes Linux memory dumps without external debug symbols by extracting BTF type information and symbol addresses directly from the dump itself.
blog · blog.trailofbits.com
Detect Go’s silent arithmetic bugs with go-panikint
go-panikint, a modified Go compiler from Trail of Bits, turns silent integer overflows into explicit panics; it uncovered a real overflow in Cosmos SDK RPC pagination, closing a fuzzing blind spot.
Back