Zscaler finds autonomous agents succumb to IPI traps

Zscaler tested major AI language models (LLMs) against indirect prompt injection attacks (IPI, where hidden instructions in web content trick AI agents into unintended actions) and found that some models, including expensive enterprise ones like Gemini-2.5-pro, fell victim to fraud schemes while cheaper alternatives performed better. However, experts caution that these test results are snapshots in time and don't prove which models are universally safe or vulnerable, since agent behavior changes constantly as they learn from new data.