Storia in 5 fonti

New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data

Adversa says encrypted prompt injection can make Grok send a user's name, location, tier, and chat prompts to an attacker-controlled server.

Raccontata da

Confronto fonti

5 prospettive sulla stessa storia

AI · summaries

thehackernews.comStai leggendo10 g fa

New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data

Adversa discloses attack on Grok 4.5 extracting name, location, chat via cryptographic decryption (40% success). Exposes gap in agent frameworks—teams must isolate untrusted context, gate outbound actions, enforce tool tracing to prevent data leakage.

originale

Timeline cronologica

giovedì 20 agosto 2026·theregister.com
Grok chat duped into swallowing injected instructions
A spoonful of encryption helps the malware go down
giovedì 20 agosto 2026·arstechnica.com
Grok exfiltrates user data when malicious instructions are encrypted
Cryptographic Context Injection is only the latest way to break an LLM safety guardrail.

New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data

Confronto fonti

New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data

Timeline cronologica

Grok chat duped into swallowing injected instructions

Grok exfiltrates user data when malicious instructions are encrypted

Grok chat duped into swallowing injected instructions

Grok Decrypted an Attacker's Payload Mid-Execution, Then Exfiltrated Your Chat History

Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini

Grok exfiltrates user data when malicious instructions are encrypted

New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data

Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini

Grok Decrypted an Attacker's Payload Mid-Execution, Then Exfiltrated Your Chat History