AI agents fall for indirect prompt injection traps

Researchers at Zscaler found that autonomous AI agents are vulnerable to indirect prompt injection (IPI, a type of attack where hidden instructions in web content trick an AI into doing unintended things). Testing showed some advanced AI models failed these security tests while simpler ones performed better, though experts caution that agent behavior changes constantly and a simple "safe or vulnerable" classification is too simplistic.