@misc{indiciae00c747a35b6f, title = {A Blind Trust, the Bloody Thrust: When Attacker-Controlled Hook Updates Steer AI Agent Harnesses towards Malicious Behaviors}, author = {Pengxun Li and Litian Zhang and Jianwei Hou and Shujiang Wu and Song Li and Zifeng Kang and Xi Zhang}, year = {2026}, url = {https://arxiv.org/abs/2609.03884}, note = {Source identifier: 2609.03884} }