1 incident
Risk: Hidden instructions hijack the agent Control: Output filtering and redaction Outcome: Did not hold
HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target
| Date | Incident | Risk | Chain | Controls named |
|---|---|---|---|---|
| 2026-09-24 | SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form Salesforce |
Hidden instructions hijack the agent |