AI agents vulnerable to phishing via prompt injection
The gist
HiddenLayer researchers tricked Jev and Qwen3.8-27B decision models into stealing a click action via indirect prompt injection.
Prompt injection ranks first on OWASP's 2026 LLM Top 10.
How it unfolded
- 2022Independent researcher and software developer Simon Willison coins the term "prompt injection".
- Oct 11, 2026Cybersecurity Insiders publishes an analysis of AI agents gaining autonomy and whether safeguards can keep up.
- Oct 12, 2026A TrendAI study using the "AIxploit" framework tests 200 different injections against 12 AI models.