1 incident
Control: Output filtering and redaction Outcome: Got around
HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target
| Date | Incident | Risk | Chain | Controls named |
|---|---|---|---|---|
| 2026-09-24 | SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form Salesforce |
Hidden instructions hijack the agent |