AI Agents Were Easier to Manipulate One Harmless Step at a Time

EPFL researchers found that tool-using AI agents completed more harmful tasks when an illicit goal was split across adaptive conversation turns. The STING benchmark exposes a gap in single-prompt safety tests, but its controlled scenarios and automated judges do not measure real-world attack frequency.