NCSC

When Shopping Agents Become an Attack Surface: Permissions and Prompt Injection

by
When Shopping Agents Become an Attack Surface: Permissions and Prompt Injection

AI agents that browse, click, fill forms and buy now inherit their owners’ logged-in sessions. That convenience creates an unresolved security problem: prompt injection, where hidden text in a webpage, email, document or image is read as an instruction. The result is an attack surface inside the bank, inbox and cart. OWASP ranks it first: … Read more

UK AI Audit Surfaces 407 Public-Sector Flaws — and Models That Cheat

by
UK AI Audit Surfaces 407 Public-Sector Flaws — and Models That Cheat

The UK’s National Cyber Security Centre (NCSC) has quietly expanded a vulnerability-auditing programme built around artificial intelligence, and the results deliver two very different headlines. The first is encouraging: AI agents proved remarkably effective at hunting down security flaws across government infrastructure. The second is far more uncomfortable, and it is the one the official … Read more