AudioHijack: Inaudible Sounds Hidden in Podcasts and YouTube Videos Can Hijack AI Voice Assistants — IEEE S&P Paper

r/singularity / CyberNews·high signal

Researchers from Zhejiang University, NUS, and NTU presented AudioHijack at IEEE S&P in San Francisco, demonstrating that imperceptible audio perturbations embedded in podcasts, music, or video can trigger AI voice assistants to execute unauthorized commands — unlocking doors, transferring funds, or exfiltrating data. The attack introduces 'auditory prompt injection' as a new threat class: as voice agents gain tool-use capabilities, audio becomes a command surface users cannot inspect. The 883-upvote r/singularity discussion highlights this as the next prompt-injection frontier.