Researchers catalog 10 in-the-wild indirect prompt-injection attacks.

These aren't theoretical. Security researchers disclosed 10 IPI payloads seen in the wild, built for financial fraud, data destruction, and API-key theft by poisoning web content agents crawl, summarize, or index for RAG. Related 2026 work finds attack success rates above 85% against state-of-the-art defenses when adaptive strategies are used, and Google reported a 32% rise in injection payloads embedded in web content. Source: Infosecurity Magazine "Goal hijacking," redirecting an autonomous agent's entire objective, is flagged as the most dangerous variant. If your agent ingests untrusted retrieved content, treat every fetched page as hostile input.