gcdRadar
archive/Research/AIR-2026-1567
closedclosed 10 Nov 2026Research1 Research / proof of conceptAI

Agent-to-Agent Synthetic Social Engineering on the Web

Web Services Agents

Researchers defined and demonstrated synthetic social engineering, an attack where separately tasked sender agents generate deceptive influence to manipulate AI recipients. The technique redirects automated agents away from authorized objectives by exploiting credibility and authority cues.

why this severityDemonstrated research attack with no known real-world exploitation.

first report
27 Oct 2026
last update
27 Oct 2026

Timeline · 1

  1. 27 Oct 2026Agent-to-Agent Synthetic Social Engineering on the Web

Sources · 1

Research and catalogues

  1. 2026-10-27

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
AI-enabled attack
categories
AI phishing / social engineering
severity
1 · Research / proof of concept
targets
Enterprise deployment, Individuals
owasp llm top 10
no entry for these categories
dates
happened 27 Oct 2026 · first reported 27 Oct 2026
origin
News & research feeds
record
confidence 0.90 · created 2026-10-27 15:31Z · updated 2026-11-11 00:12Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Agent-to-Agent Synthetic Social Engineering on the Web

https://gcdradar.vercel.app/incidents/agent-to-agent-synthetic-social-engineering-on-the-web · AIR-2026-1567 · closed 2026-11-10

- Lane: Research
- Severity: 1 (Research / proof of concept): Demonstrated research attack with no known real-world exploitation.
- Fix status: Fix status unknown
- First reported: 2026-10-27
- AI role: AI-enabled attack
- Products: Web Services Agents

## Summary

Researchers defined and demonstrated synthetic social engineering, an attack where separately tasked sender agents generate deceptive influence to manipulate AI recipients. The technique redirects automated agents away from authorized objectives by exploiting credibility and authority cues.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-27: Agent-to-Agent Synthetic Social Engineering on the Web (https://arxiv.org/abs/2610.33411)

## Sources

- 2026-10-27 arXiv: Agent-to-Agent Synthetic Social Engineering on the Web https://arxiv.org/abs/2610.33411

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    Fake AI applications spread malware and steal enterprise sessions

    Breaches & attacks · Exploited · since 15 Oct 2026

    AI
  2. live
    AI
  3. closed
    Threat actors deploy open-weight AI models for mass attacks

    Breaches & attacks · Exploited · since 23 Oct 2026

    AI
  4. closed
    AI
  5. closed
    AI
  6. closed
    Claude Fake Web3 Accelerator Uses Malicious npm Packages to Distribute Malware

    Breaches & attacks · Exploited · since 19 Oct 2026

    AI