Tag: Prompt Injection
A file dropped in Downloads can order your coding agent around
Forever Security showed that a malicious AGENTS.md sitting in a Downloads folder pushed OpenAI Codex into installing malware in more…
A single prompt undid the guardrails on AWS agent infrastructure
One chat message pulled temporary cloud credentials out of an agent and opened every other agent in the account.
Poisoned leads turned Salesforce’s AI agent into a data thief
Three flaws in Salesforce Agentforce let attackers hijack trusted agents for silent CRM theft and Slack phishing.
An accounting bot blew $50,000 in cloud charges in an hour
Mandiant's enterprise AI report finds runaway agents, prompt injection, and weak access controls already costing real money.
Planted prompt turned ChatGPT into a hidden Gmail relay
Check Point shows a planted instruction can make ChatGPT exfiltrate Gmail data through a covert channel between accounts.
Russia-aligned group trips AI scanners with nuke prompt
ESET says Russia-aligned UAC-0099 hides a nuclear weapon request in malware comments to stall AI-powered triage.
Amazon’s Kiro IDE leaks data when poisoned projects get opened
A prompt injection flaw in Amazon's Kiro IDE can push sensitive local data to attackers when a poisoned project is…
Encrypted webpages trick Grok into leaking chat data to attackers
Adversa AI shows how ciphertext hidden in a page can make xAI's Grok hand over chat details with no warning.