Article5 min read
Prompt injection in telemetry: how an SRE agent deployed the wrong fix
A controlled Kubernetes demonstration shows how attacker-controlled monitoring data became an apparent instruction to repair infrastructure.
Straiker’s lab shows how indirect prompt injection in telemetry led an SRE agent to deploy a privileged Kubernetes workload, enabling ransomware effects.
Read article