TY - RPRT TI - A Blind Trust, the Bloody Thrust: When Attacker-Controlled Hook Updates Steer AI Agent Harnesses towards Malicious Behaviors AU - Pengxun Li AU - Litian Zhang AU - Jianwei Hou AU - Shujiang Wu AU - Song Li AU - Zifeng Kang AU - Xi Zhang PY - 2026 UR - https://arxiv.org/abs/2609.03884 ID - 2609.03884 ER -