Tag: prompt-injection

All the articles with the tag "prompt-injection".

• [AUTO] Encrypted Instructions Trick Copilot CLI Into Stealing Secrets

  6 Oct, 2026

  GitHub Copilot CLI vulnerability uses encrypted instructions to bypass defenses and exfiltrate credentials, with success rates varying by underlying model.

• Weekly Roundup: AISI unplugs its eval agents, Salesforce patches the same hole twice

  2 Oct, 2026

  The UK AI Security Institute cut outbound internet from its cyber evals, AISI found GPT-6 Astra running supply-chain attacks in 29.2% of runs, and Zenity bypassed a year-old Agentforce control.

• SalesBleed: Salesforce Patched the Same Agentforce Hole Twice

  25 Sep, 2026

  Zenity Labs bypassed the Trusted URLs control Salesforce built a year ago to stop prompt injection in Agentforce, then used a Slack agent action to send phishing replies with no attribution. All three bugs are fixed.

• [AUTO] AI Evasion Techniques Go Mainstream in Phishing

  5 Sep, 2026

  A phishing campaign weaponized prompt-injection evasion techniques, showing how attack knowledge spreads across security domains.