Baiqi Wu, Qingming Li, Chunyi Zhou, Ting Wang, Shouling Ji
Rapid AI development across industries raises pressing security and privacy risks. This work presents a unified comparison of large language models, AI agents, and embodied agents, introducing a taxonomy of risks spanning data, models, systems, content, and applications, alongside a catalog of 24 specific threats. We contrast attack surfaces and methods across the three system types to reveal common patterns and distinctive vulnerabilities. We also survey mainstream AI security assessment frameworks and evaluate how relevant laws and regulations currently address these risks. Finally, we outline concrete directions for future research and practice aimed at building robust, secure agent ecosystems.