Source

Johann Rehberger's blog, where he publishes his own attacks on AI agents: prompt injection, permission bypasses, data exfiltration. Primary for the technique it demonstrates, because the writeup is the research, not a report of it. Read the disclosure status too: several findings were published after the vendor closed them as informative.

embracethered.com ↗