Browsing Tag
Indirect Prompt Injection
2 posts
Indirect prompt injection attacks that hide instructions in web pages, documents, emails, metadata, or other content consumed by AI systems.
Ghostjacking Turns Security Logs Into AI Agent Attack Paths
Tenet Security’s Ghostjacking research shows how blocked requests, alerts, and error reports can become indirect prompt-injection payloads for AI agents. The risk is not only malicious text in logs, but agents that can read outside data and then act with trusted permissions.
Hidden Web Prompts Turn AI Agents Into Payment Targets
Zscaler found malicious websites using SEO poisoning, hidden HTML, JSON-LD metadata, and crypto-payment flows to manipulate browsing AI agents. The findings show why agent deployments need transaction limits, source checks, and runtime controls before they are allowed to browse the open web or move money.