2 incidents
Risk: Hidden instructions hijack the agent Last 7 days
HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target
| Date | Incident | Risk | Chain | Controls named |
|---|---|---|---|---|
| 2026-10-27 | Perplexity Comet browser agent bypasses file:// hard boundary twice, enabling local file exfiltration and 1Password vault takeover Perplexity |
Hidden instructions hijack the agent | Not read yet | |
| 2026-10-26 | Malicious AGENTS.md in Downloads folder hijacks Codex and Claude Code agents OpenAI |
Hidden instructions hijack the agent | Not read yet |