Unverified50% confidenceEventExact time
In the poisoned search tool case, the attacker polluted the search API's returns with injected instructions through a supply chain attack, and the agent completed data exfiltration even though its initial authentication was fully valid.
1
Sources
50%
Confidence
Long-term
Relevance
10/13/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe attacker operated within active sessions using valid credentials, causing all authentication checks to return as passed.70% similarUnverifiedAttackers can exfiltrate sensitive information out of the sandbox through legitimate outbound channels by embedding malicious code in dependency packages (supply chain attacks).69% similarUnverified数据投毒攻击中，清洁标签攻击允许攻击者在不修改样本标签的情况下植入后门，特洛伊木马攻击通过特定触发词激活预设的恶意行为68% similarUnverifiedAttackers can induce agents to execute a sequence of seemingly normal operations—such as querying user data, calling formatting tools, and triggering email sending—to form a data exfiltration chain.68% similarUnverified在具备工具调用能力的 Agentic 系统中，一次成功的提示注入可能导致数据泄露、恶意代码执行甚至供应链攻击67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1020763API
curl https://kongchang.com/api/v1/knowledge/claims/1020763MCP
get_claim(id=1020763)