#prompt-injection
Tagged “prompt-injection”
3 articlesPillar research says the AI coding agent sandbox leaks through trusted files
Pillar Security researchers demonstrated multiple sandbox-bypass techniques against AI coding agents, plus prompt-injection attacks hidden in READMEs, code comments and dependencies. OpenAI, Google and Cursor have patched several of the reported flaws.
Jul 23, 2026 · Maya OkonkwoSecurity & supply chainOpenAI ships GPT-Red to automate prompt-injection testing against AI agents
OpenAI has released GPT-Red, a tool that automates prompt-injection testing against AI agents, per The New Stack. The framing is straightforward: once agents take real actions on real systems, manual red-teaming stops being enough.
Jul 18, 2026 · Tomás VegaSecurity & supply chainTenet's 'Agentjacking' research turns Sentry error data into a prompt-injection vector for AI coding agents
Security firm Tenet has demonstrated an indirect prompt-injection technique it calls Agentjacking, malicious instructions hidden inside Sentry error data that get executed by an AI coding agent with shell access. The operational read is that any third-party telemetry an agent ingests is now untrusted input.
Jun 16, 2026 · Maya Okonkwo