[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpiiAlOPzPMsMOwo9wQ2z78t6oIMJ7hOJwpZrY-AWAvs":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":138},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"02767c80-38ca-4877-b4f9-7465ee235d51","New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data","new-cryptographic-context-injection-attack-could-let-web-pages-steal-grok-chat-d-eaaed4","Adversa AI has disclosed an attack technique that it says can cause xAI's Grok chatbot to send a user's name, approximate location, subscription tier, and the prompts from the ongoing conversation to an attacker-controlled server after the user asks it to summarize an ordinary web page. The AI security company, which has codenamed the technique \"Cryptographic Context Injection,\" said the","Adversa AI has disclosed a new attack technique called 'Cryptographic Context Injection' that can exfiltrate sensitive data from xAI's Grok chatbot. The attack allows an attacker-controlled server to receive a user's name, location, subscription tier, and conversation prompts by tricking Grok into summarizing a malicious web page. The technique bypasses content classifiers by using encrypted instructions, which Grok then decrypts and executes within its own runtime, leading to data exfiltration without user confirmation or visible warning.","Cryptographic Context Injection attack can steal Grok chatbot data via web pages.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F08\u002Fnew-cryptographic-context-injection.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEhPv76ODDXuPeov3fu_Gs_V-72pKnjw38Qu9A4qXOn_2QFd9daTYFAXre2eubEQ6Fwb65SwXgv10mhyDCGE_KcvL69c-CGe2BfEiOj74UTHwv6WAhMyxNuVGOEdUZYwz0Y9v55SFmaOwjHQYHbOyzvZEofi0egkTfeFxQlJRD3Sj6ve-TZ47SM1sNfYGB0\u002Fs1600\u002Fgrok-chat.jpg","2026-08-20T14:36:27+00:00","2026-08-20T18:00:20.590151+00:00",8,[17,20,23,25,28,30],{"name":18,"type":19},"Grok","product",{"name":21,"type":22},"xAI","vendor",{"name":24,"type":22},"Adversa AI",{"name":26,"type":27},"AI","technology",{"name":29,"type":19},"Gemini",{"name":31,"type":22},"Google","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[38,40,45],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[31,21,24],{"controls":53,"vendors":137},[54,83,112],{"slug":55,"name":56,"problem":57,"products":58},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"slug":84,"name":85,"problem":86,"products":87},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[88,96,104],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"slug":44,"name":113,"problem":114,"products":115},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[116,124,129],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":125,"product_name":126,"url":127,"description":128},"prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",[],{"slug":139,"title":140,"body":141,"framework_refs":142,"framework_notes":154},"cryptographic-context-injection-bypasses-groks-safeguards-to-steal-user-data","Cryptographic Context Injection Bypasses Grok's Safeguards to Steal User Data","The attack exploits Grok's ability to process and summarize external web content by embedding encrypted malicious instructions within attacker-controlled pages, which Grok decrypts and executes in its own runtime — effectively turning the AI into an unwitting data exfiltration agent. The root cause lies in insufficient input validation and sandbox isolation around third-party content ingestion, combined with a failure to treat decrypted runtime instructions as untrusted input. This matters because users expect AI assistants to handle external content safely, yet here simply asking Grok to summarize a page can silently leak their name, location, subscription tier, and conversation history. The use of encryption to bypass content classifiers highlights a growing arms race where traditional pattern-based defenses are insufficient against adversarial prompt injection techniques tailored for LLMs.",[143,144,145,146,147,148,149,150,151,152,153],"NIST AI RMF – GOVERN 1.2 (AI Risk Policies)","NIST SP 800-53 SI-10 (Information Input Validation)","NIST SP 800-53 AC-4 (Information Flow Enforcement)","NIST SP 800-53 SC-28 (Protection of Information at Rest\u002FIn Transit)","CIS Control 16 (Application Software Security)","CIS Control 13 (Network Monitoring and Defense)","OWASP LLM Top 10 – LLM01 (Prompt Injection)","OWASP LLM Top 10 – LLM06 (Sensitive Information Disclosure)","GDPR Article 25 (Data Protection by Design and by Default)","GDPR Article 32 (Security of Processing)","MITRE ATLAS AML.T0051 (LLM Prompt Injection)",{}]