[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6-bpPcY8ANOjP0eVFtJfujBsvMs_BsqweX-XQGjqytw":3},{"article":4,"iocs":48,"watch_terms":49,"solutions":50,"lesson":136},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"b062c8b5-eb8d-4600-9a82-673ddd2fd89f","The Hidden Instructions That Can Hijack AI Agents","the-hidden-instructions-that-can-hijack-ai-agents-d495c0","Malicious prompts concealed in documents, metadata, emails, images and code can manipulate autonomous agents into taking dangerous actions. The post The Hidden Instructions That Can Hijack AI Agents appeared first on SecurityWeek.","Malicious instructions, known as hidden prompt injections, can be embedded within documents, metadata, images, and code to manipulate autonomous AI agents. These attacks bypass traditional security controls and can cause agents to perform unauthorized actions, such as exfiltrating data or making poor business decisions, as they lack human judgment to distinguish trusted from untrusted input.","Hidden prompts in documents can manipulate AI agents into dangerous actions.","https:\u002F\u002Fwww.securityweek.com\u002Fthe-hidden-instructions-that-can-hijack-ai-agents\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F05\u002FAI-attacks.jpeg","2026-09-08T17:00:00+00:00","2026-09-08T18:00:08.215636+00:00",8,[17,20,23],{"name":18,"type":19},"Bowbridge","vendor",{"name":21,"type":22},"AI agents","technology",{"name":24,"type":22},"prompt injection","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":25,"icon":27,"name":28,"slug":29},null,"AI Security","ai-security",[31,36,41,43],{"category":32},{"id":33,"icon":27,"name":34,"slug":35},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":37},{"id":38,"icon":27,"name":39,"slug":40},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":42},{"id":25,"icon":27,"name":28,"slug":29},{"category":44},{"id":45,"icon":27,"name":46,"slug":47},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":51,"vendors":135},[52,81,110],{"slug":53,"name":54,"problem":55,"products":56},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[57,65,73],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"slug":82,"name":83,"problem":84,"products":85},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[86,94,102],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"slug":29,"name":111,"problem":112,"products":113},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[114,122,127],{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":123,"product_name":124,"url":125,"description":126},"prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",[],{"slug":137,"title":138,"body":139,"framework_refs":140,"framework_notes":152},"hidden-prompt-injections-can-hijack-ai-agents","Hidden Prompt Injections Can Hijack AI Agents","AI agents that autonomously process documents, images, and code are vulnerable to prompt injection attacks, where malicious instructions are embedded in untrusted content to manipulate the agent's behavior. Unlike traditional malware, these attacks exploit the AI's core functionality — its ability to follow natural language instructions — making them difficult to detect with conventional security tools. Because AI agents lack human judgment, they cannot reliably distinguish between legitimate system prompts and adversarial instructions hidden in user-supplied data. This can result in unauthorized data exfiltration, privilege escalation, or corrupted business decisions made entirely without human awareness. As AI agents become more integrated into enterprise workflows, the attack surface expands dramatically and requires purpose-built defenses.",[141,142,143,144,145,146,147,148,149,150,151],"NIST AI RMF: GOVERN 1.1, MANAGE 2.2","NIST SP 800-53 AC-6 (Least Privilege)","NIST SP 800-53 SI-10 (Information Input Validation)","NIST SP 800-53 AU-12 (Audit Record Generation)","CIS Control 3: Data Protection","CIS Control 6: Access Control Management","CIS Control 8: Audit Log Management","OWASP LLM Top 10: LLM01 – Prompt Injection","MITRE ATLAS: AML.T0051 – LLM Prompt Injection","GDPR Article 25: Data Protection by Design and by Default","GDPR Article 22: Automated Individual Decision-Making",{}]