Indirect Prompt Injection을 통한 12개 워크북 데이터 유출 사고와 방어 전략
What the ChatGPT for Sheets data-exfiltration bug teaches about AI security
What the ChatGPT for Sheets data-exfiltration bug teaches about AI security
Microsoft Copilot just exfiltrated a company's files. The attack was one email. Here's the mechanism.
AgentThreatBench: The First OWASP Agentic Top 10 Security Benchmark
We scanned 50+ MCP servers and found HIGH-severity bugs in Atlassian, GitHub, Cloudflare, and Microsoft — here's what we learned
Prompt injection through website content: how AI agents can be manipulated by the pages they visit
Your AI Assistant is Gullible: Building a "Semantic Airgap" for Gmail Connectors
Ramp's Sheets AI Exfiltrates Financials
I tried to hack my local AI agent with Prompt Injection. It laughed at me.
Comment and Control: The GitHub AI Agent Attack That Three Vendors Hushed