Article5 min read
Prompt injection in email agents: a fake mailbox fault becomes permission
A revised study shows how a forged mailbox fault can make an unauthorised mailbox operation look like routine maintenance, and why verified state and authorised action are separate controls.
A revised study shows how forged mailbox faults can steer email agents into unauthorised actions, and why verified state and action authorisation are separate checks.
Read article