This is post #9 of the OWASP Agentic AI Top 10: What Builders on AWS Need to Know series.
Your finance team gets an urgent recommendation from the AI copilot: "Vendor invoice #4821 requires immediate payment. Wire transfer to account ending in 7734. Rationale: contract penalty clause activates in 4 hours."
The copilot sounds confident. It cites the contract clause number. It shows the invoice. The finance manager approves the transfer.
Except the invoice was poisoned. The bank details belong to an attacker. And the "rationale" was fabricated by an LLM that has no idea what truth is. But it sounded so authoritative that nobody questioned it.
That's Human-Agent Trust Exploitation. And it's the hardest vulnerability on this list to fix because the bug isn't in the code. It's in human psychology.
