Promptective journal / Topic index
6 journal entries tagged AI agents.
A benchmark study separates two trust boundaries: the metadata that wins a tool call and the return content that redirects the agent after it runs.
A two-stage MCP prompt injection study wins tool calls with optimised metadata, then redirects agents through malicious tool returns. Both boundaries need policy.
Read article
A revised study shows how a forged mailbox fault can make an unauthorised mailbox operation look like routine maintenance, and why verified state and authorised action are separate controls.
A revised study shows how forged mailbox faults can steer email agents into unauthorised actions, and why verified state and action authorisation are separate checks.
Read article
A controlled Kubernetes demonstration shows how attacker-controlled monitoring data became an apparent instruction to repair infrastructure.
Straiker’s lab shows how indirect prompt injection in telemetry led an SRE agent to deploy a privileged Kubernetes workload, enabling ransomware effects.
Read article
A study of 428 commodity routers finds tool-call tampering and credential abuse. The findings put intermediary trust on the AI security checklist.
Research finds malicious LLM API routers rewriting agent tool calls and abusing credentials. Learn the findings, defence limits and checks for security teams.
Read article
A study of image and audio inputs shows why agent evaluations need to record what was attempted, what reached a tool and what completed.
Explore multimodal prompt injection examples from a new preprint, and learn why attempted actions, tool calls and completed attacks need separate measures.
Read article
CVE-2026-82233 shows how an AI agent’s ordinary upload tool can turn hidden instructions and an approved tool call into sensitive local-file exposure.
CVE-2026-82233 let SiYuan’s AI agent copy sensitive local files through MCP, showing why tool approvals need action-level policy.
Read article
Website analytics are off.
