Reddit
A Near-Miss Indirect Prompt Injection Story Hits 131 Upvotes and 97 Comments on r/artificial — Consumer Users Are Discovering the Attack Class for the First Time
A r/artificial poster described an email-connected AI agent that nearly forwarded their bank statement to a stranger after processing an inbound message containing hidden instructions, and the 97-comment thread is largely people learning that indirect prompt injection exists. The mechanism matches documented CVEs like EchoLeak (CVE-2025-32711), where merely asking Copilot to summarize an inbox triggered silent document exfiltration — no click or download required. OWASP's 2026 LLM report ranks prompt injection its #1 threat with a 340% year-over-year surge; the signal here is that awareness is only now reaching non-security consumers wiring agents into email and calendar.
↳ Follow the thread