Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-01 · source-backed
Palo Alto Networks Unit 42 published the first formally documented agent-to-agent attack. Two PoCs demonstrate a malicious research agent tricking a financial assistant into revealing system instructions and executing unauthorized stock trades via smuggled hidden instructions. Built using Google's ADK and A2A protocol. Agent impersonation and session smuggling are now proven threats.
Each link below shares sources, entities, or timing with this story.
Google partners with IBM / Shared entities / Same source / Shared topic
Linked by a graph relationship (Google partners with IBM); both cover A2A, Unit; cite the same source (Palo Alto Networks Unit 42).
Google released ADK / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Google released ADK); both cover A2A, Google; overlapping topics (agent, google).
Linked by a graph relationship (Google released ADK); both cover Agent, Google; overlapping topics (agent, google).
Google released ADK / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Google released ADK); both cover Built, Google; overlapping topics (agent, google).
Linked by a graph relationship (Google released ADK); both cover A2A, Google; overlapping topics (agent, google).
Google released ADK / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Google released ADK); both cover A2A, Google; overlapping topics (agent, google).
Google released ADK / Shared entity: Google / Shared topic / What happened next
Linked by a graph relationship (Google released ADK); both cover Google; overlapping topics (agent, assistant, google, session).
OpenAI partners with Google / Shared entities / What happened next / Tension
Linked by a graph relationship (OpenAI partners with Google); both cover Agent, Built; picks up the Agent thread on 2026-04-16.