13. Agentic AI
- DASF-R-13.1 — Memory Poisoning
- DASF-R-13.2 — Tool Misuse
- DASF-R-13.3 — Privilege Compromise
- DASF-R-13.4 — Resource Overload
- DASF-R-13.5 — Cascading Hallucination Attacks
- DASF-R-13.6 — Intent Breaking & Goal Manipulation
- DASF-R-13.7 — Misaligned & Deceptive Behaviors
- DASF-R-13.8 — Repudiation & Untraceability
- DASF-R-13.9 — Identity Spoofing & Impersonation
- DASF-R-13.10 — Overwhelming Human in the Loop
- DASF-R-13.11 — Unexpected RCE and Code Attacks
- DASF-R-13.12 — Agent Communication Poisoning
- DASF-R-13.13 — Rogue Agents in Multi-Agent Systems
- DASF-R-13.14 — Human Attacks on Multi-Agent Systems
- DASF-R-13.15 — Human Manipulation
- DASF-R-13.16 — Prompt Injection
- DASF-R-13.17 — Confused Deputy
- DASF-R-13.18 — Tool Poisoning
- DASF-R-13.19 — Credential and Token Exposure
- DASF-R-13.20 — Insecure Server Configuration
- DASF-R-13.21 — Supply Chain Attacks
- DASF-R-13.22 — Excessive Permissions and Scope Creep
- DASF-R-13.23 — Data Exfiltration
- DASF-R-13.24 — Context Spoofing and Manipulation
- DASF-R-13.25 — Insecure Communication
- DASF-R-13.26 — Malicious Server Connection
- DASF-R-13.27 — Insecure Credential Storage
- DASF-R-13.28 — UI/UX Deception
- DASF-R-13.29 — Insufficient Server Validation
- DASF-R-13.30 — Client-Side Data Leakage
- DASF-R-13.31 — Excessive Permission Granting
- DASF-R-13.32 — Client-Side Code Execution
- DASF-R-13.33 — Insecure Communication Handling
- DASF-R-13.34 — Session and State Management Failures
- DASF-R-13.35 — Update and Patch Management