New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands

Ask an AI agent to summarize the reviews on a product page, and a single planted review can make it click “Buy Now” instead. Ask a coding assistant to apply a maintainer’s fix from a GitHub thread, and a fake comment can make it run a stranger’s command on your computer.

Neither trick hijacks the agent’s task. Each one just corrupts the facts it trusts and lets it carry on with the job you

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

OpenAI’s Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause

OpenAI’s Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause OpenAI has announced that it’s pausing some “internal activities” involving its upcoming artificial intelligence (AI) model Astra

OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models’ Reasoning

OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models’ Reasoning A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants Cybersecurity researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an enterprise generative artificial