data exfiltration

Hey hackers - indirect prompt injection went from research curiosity to the top line of the OWASP agentic risk register in about eighteen months. The payload never touches your prompt. It waits in an email, a web page, a log line, an ad - and the agent reads it for you. TL;DR: Google's threat...