
Cyber Attacks
Phishing emails now target AI assistants with hidden prompt injection instructions
Attackers embed concealed commands in emails to manipulate AI inbox summarizers into generating fraudulent to-do items for recipients.
Everything Threat Times has reported about prompt injection: 4 stories, newest first. Part of our Vulnerabilities coverage.

Attackers embed concealed commands in emails to manipulate AI inbox summarizers into generating fraudulent to-do items for recipients.

Many prompt injection attacks hide inside normal-looking text, bypassing surface-level security checks through subtle instruction overrides.

A critical flaw in Praisonai’s AICoder component enables attackers to write files anywhere on the filesystem and execute commands via prompt injection.

A critical vulnerability in PraisonAI Agents allows attackers to steal API keys and execute arbitrary code by bypassing sandbox controls through LLM-generated Python scripts.