Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-21 · source-backed
Adversa AI's Rony Utevsky disclosed cryptographic context injection on August 20: a poisoned page carries AES-256-GCM ciphertext plus PBKDF2 key material and an instruction to decrypt. The static classifier sees unreadable bytes and passes it, then the model decrypts inside its own context and treats the result as trusted tool output. The proof of concept exfiltrated a Grok.com user's name, coarse location, subscription tier, and full conversation by appending them to an attacker URL as a fake decryption key. Ars Technica xAI was notified June 3 via HackerOne and again August 4 and 10; the technique still worked as of August 19. Any defense that inspects text before the model sees it loses to a model capable enough to decode.
Each link below shares sources, entities, or timing with this story.
Adversa AI criticizes Cursor / Shared entity: Grok / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Adversa AI criticizes Cursor); both cover Grok; overlapping topics (grok, model).
Adversa AI criticizes MCP / Shared entity: August / Shared topic / Earlier coverage
Linked by a graph relationship (Adversa AI criticizes MCP); both cover August; overlapping topics (august, model).
Adversa AI criticizes Anthropic / Shared entity: August / Shared topic / Earlier coverage
Linked by a graph relationship (Adversa AI criticizes Anthropic); both cover August; overlapping topics (context, model).
Adversa AI criticizes MCP / Shared entity: August / Shared topic / Earlier coverage
Linked by a graph relationship (Adversa AI criticizes MCP); both cover August; overlapping topics (august, model).
Adversa AI criticizes Cursor / Shared entity: Grok / Shared topic / Earlier coverage
Linked by a graph relationship (Adversa AI criticizes Cursor); both cover Grok; overlapping topics (grok, model).
Linked by a graph relationship (Adversa AI criticizes Cursor); both cover Grok; overlapping topics (context, model).
Adversa AI criticizes MCP / Shared entity: August / Earlier coverage / Tension
Linked by a graph relationship (Adversa AI criticizes MCP); both cover August; earlier August coverage from 2026-08-13.
Adversa AI criticizes Cursor / Shared entity: URL / Earlier coverage / Tension
Linked by a graph relationship (Adversa AI criticizes Cursor); both cover URL; earlier URL coverage from 2026-07-26.