indirect prompt injection

SalesBleed prompt injection: a public CRM lead reaches account data and Slack

Zenity Labs shows how an indirect prompt injection in a public Web-to-Lead form reached Salesforce Agentforce account data and Slack. The reported chains are patched.

Read article

Prompt injection in MCP: first win the tool call, then redirect the agent

A benchmark study separates two trust boundaries: the metadata that wins a tool call and the return content that redirects the agent after it runs.

A two-stage MCP prompt injection study wins tool calls with optimised metadata, then redirects agents through malicious tool returns. Both boundaries need policy.

Read article

Prompt injection in telemetry: how an SRE agent deployed the wrong fix

A controlled Kubernetes demonstration shows how attacker-controlled monitoring data became an apparent instruction to repair infrastructure.

Straiker’s lab shows how indirect prompt injection in telemetry led an SRE agent to deploy a privileged Kubernetes workload, enabling ransomware effects.

Read article