Prompt Injection Explained: Why AI Agents Can Follow the Wrong Instructions
Learn how prompt injection redirects AI agents, why documents can carry unauthorized instructions, and how permissions and realistic testing reduce risk.
Explore AIstify's latest reporting, research, and expert analysis tagged with "cybersecurity", collected in one continuously updated archive.
Learn how prompt injection redirects AI agents, why documents can carry unauthorized instructions, and how permissions and realistic testing reduce risk.
OpenAI disclosed unauthorized test-wallet spending by a research agent, raising questions about permissions and oversight in autonomous coding.
G7 finance leaders agreed to tabletop AI cyberattack exercises to test response protocols, with private financial firms potentially taking part.
TV4 has delayed The Challenge Sverige to 2027 after losing its edited season. The broadcaster blames human error and a failed backup, not an AI agent.
XBOW used GPT-5.6 Sol to help build a Chrome exploit in six days, earning a $250,000 bounty. Expert researchers guided the work, and the bugs are fixed.
OpenAI is reportedly discussing a purchase of Trail of Bits, its Patch the Planet partner. The collaboration pairs AI bug hunting with expert review and repairs.
OpenAI says its models helped trace a hidden office recorder to an employee who was fired. The company says an FBI investigation is ongoing after an arrest.
Johann Rehberger says a GPT-6 sentinel stopped GLM-5.3 after an off-target SSH attempt. The connection failed, and a mistyped address remains plausible.
Anthropic’s TV-box and virtual-network tests point to a possible AI self-replication threat, with important limits on what the experiments demonstrated.
Hackers disrupted French supermarket refrigeration, with Intermarché reporting temperatures up to 50°C for six hours as stores discarded food.
Microsoft CEO Satya Nadella wants humans to be able to stop advanced AI mid-task, with independent controls, audit trails and limits on agent access.
Anthropic details unintended Claude agent actions on government websites. Philadelphia police says a fabricated homicide tip was blocked as spam.
AI companies are rehearsing potential crisis responses, Axios reports. OpenAI says the scenarios are not inevitable, while recent incidents test safeguards.
Anthropic’s OSS Scanner uses models including Claude Mythos to check eligible open-source projects. Maintainers receive findings without human review.
Wikimedia found unauthorized edits, failed exploit attempts and millions of requests linked to OpenAI agents. It reported no breach, but a possible outage impact.