1 incident
Risk: Hidden instructions hijack the agent Control: Human approval for high-impact actions Outcome: Not mentioned
HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target
| Date | Incident | Risk | Chain | Controls named |
|---|---|---|---|---|
| 2026-09-24 | SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form Salesforce |
Hidden instructions hijack the agent |