AI Security Incident
Evidence indicates that the affected technology is affected by a security issue.
What Happened
Evidence indicates that the affected technology is affected by a security issue.
Why This Matters
Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.
Recommended Action
No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.
Exposure
May 13, 2025 05:30
May 13, 2025 05:30
Exploitation status: UNKNOWN
Primary entities:
Timeline
-
Incident first seen
May 13, 2025 05:30BugSkan first recorded this incident.
-
Unveiling AI Agent Vulnerabilities Part III: Data Exfiltration - TrendMicro
May 13, 2025 05:30trendmicro.com · Data Leak
Sources
trendmicro.com · May 13, 2025 05:30
Multi-modal AI agents are susceptible to indirect prompt injection, where hidden instructions in external sources like images or documents can trigger sensitive data exfiltration without user interaction. This vulnerability, demonstrated by the Pandora PoC, allows malicious payloads embedded in files like MS Word documents to execute code and transmit confidential information to external command-and-control servers.
Open publisher sourceWatchlist Match
Create an account to see which incidents overlap with the technologies you monitor.