When Shopping Agents Become an Attack Surface: Permissions and Prompt Injection
AI agents that browse, click, fill forms and buy now inherit their owners’ logged-in sessions. That convenience creates an unresolved security problem: prompt injection, where hidden text in a webpage, email, document or image is read as an instruction. The result is an attack surface inside the bank, inbox and cart. OWASP ranks it first: … Read more