1 incident
Risk: Hidden instructions hijack the agent Layer: L1 Model Outcome: Did not hold
HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target
| Date | Incident | Risk | Chain | Controls named |
|---|---|---|---|---|
| 2026-08-05 | Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover Anthropic |
Hidden instructions hijack the agent |