The extension, which uses JavaScript to overlay a fake sidebar over the legitimate one on Atlas and Perplexity Comet, can trick users into "navigating to malicious websites, running data exfiltration ...

A hacker planted data wiping code in a version of Amazon's generative AI-powered assistant, the Q Developer Extension for Visual Studio Code. Amazon Q is a free extension that uses generative AI to ...

In the nascent field of AI hacking, indirect prompt injection has become a basic building block for inducing chatbots to exfiltrate sensitive data or perform other malicious actions. Developers of ...