Topic · 6 stories
6 stories tagged prompt-injection on AI Tamer, newest first.
ATT&CK v20, released 13 October, adds Direct and Indirect Prompt Injection, AI-Enabled Exfiltration and AI Result Poisoning to the Enterprise matrix.
In 90 of 6,637 malicious agent skills, VirusTotal found the payload hidden where reviewers don't see it but agents still read it. Here is how to check.
HiddenLayer says a Jev checkout agent gave a planted Confirm Price button 91 percent. The Register says TypeSafe did not immediately reply.
Barracuda describes a phishing email aimed at the person and at the AI assistant that summarizes the inbox. The research gives no count of how widespread the campaign is.
Cisco Talos says malware is embedding plain-language instructions meant to steer AI analysis tools toward a benign verdict. It traces the method across four families and 84 samples from January 2025 through July 2026.
Prompt injection can arrive in a user prompt, web page, file, email or tool result. Build defenses around permissions and actions because text filters cannot reliably stop it.
