Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-07-29 · source-backed
Proofpoint documented indirect prompt injection tooling advertised on closed criminal forums with subscriptions starting around $150/month. The kits bundle IDPI generators for email, PDF, calendar invites, and web pages: white-on-white text, prompts hidden in meeting agenda fields that fire when an agent summarizes the invite, instructions embedded in ad HTML via alt-text and tiny fonts. Proofpoint calls the techniques still experimental. The move from conference demo to priced commodity is the part that matters, because it means the attacker no longer needs to be clever.
Each link below shares sources, entities, or timing with this story.
Proofpoint acquired Acuvity / Shared entity: Proofpoint / Same source domain / Earlier coverage
Linked by a graph relationship (Proofpoint acquired Acuvity); both cover Proofpoint; reported by the same outlet (proofpoint.com).
Shared entities / Earlier coverage / Tension
Both cover HTML, PDF; earlier HTML coverage from 2026-07-26; pushes against this story (against).
Shared entity: Prompt / Shared topic / Earlier coverage
Both cover Prompt; overlapping topics (agent, around, injection, prompt); earlier Prompt coverage from 2026-06-14.
Shared entity: HTML / Shared topic / Earlier coverage / Tension
Both cover HTML; overlapping topics (agent, injection); earlier HTML coverage from 2026-07-23.
Both cover HTML; overlapping topics (agent, around); earlier HTML coverage from 2026-06-13.
Shared entity: Prompt / Shared topic / Earlier coverage
Both cover Prompt; overlapping topics (agent, call, injection); earlier Prompt coverage from 2026-06-28.
Both cover Prompt; overlapping topics (agent, injection, prompt); earlier Prompt coverage from 2026-06-27.
Shared entities / Earlier coverage
Both cover HTML, PDF; earlier HTML coverage from 2026-07-25.