Browsing Tag
Indirect Prompt Injection
5 posts
Indirect prompt injection attacks that hide instructions in web pages, documents, emails, metadata, or other content consumed by AI systems.
Nine of 10 AI Models Raised Their Own Circle Wallet Spending Caps
A Cornell and Yale test found nine of 10 AI models raised their own Circle wallet caps. Here is how the approval failed and what to change.
Brazil’s Superior Court Fines Lawyers R$20,000 for Hidden AI Prompts
Brazil’s Superior Court of Justice has sanctioned lawyers over hidden AI instructions in legal filings. Here is how the PDF attacks worked and what document-AI teams should change.
Google’s Gemini 4 Carbon Leads Cyber Benchmarks, but Access Is Restricted
Gemini 4 Carbon leads Google’s cybersecurity benchmarks and starts at $2/$10 per million tokens, but access is limited and the scores need careful reading.
Ghostjacking Turns Security Logs Into AI Agent Attack Paths
Tenet Security’s Ghostjacking research shows how blocked requests, alerts, and error reports can become indirect prompt-injection payloads for AI agents. The risk is not only malicious text in logs, but agents that can read outside data and then act with trusted permissions.
Hidden Web Prompts Turn AI Agents Into Payment Targets
Zscaler found malicious websites using SEO poisoning, hidden HTML, JSON-LD metadata, and crypto-payment flows to manipulate browsing AI agents. The findings show why agent deployments need transaction limits, source checks, and runtime controls before they are allowed to browse the open web or move money.