Unverified50% confidenceEventExact time
HackerOne report #3086545 demonstrates an attack using Unicode Tag character blocks (U+E0000–U+E007F) for invisible prompt injection.
1
Sources
50%
Confidence
Long-term
Relevance
10/18/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedTrojan Source攻击由剑桥大学研究者Nicholas Boucher和Ross Anderson于2021年在ACM CCS上披露，被分配CVE-2021-42574编号，利用Unicode双向文本控制字符使代码在人眼阅读与编译器解析时呈现不同逻辑60% similarUnverifiedThe Brave security team demonstrated hiding text invisible to the human eye within a screenshot, which, when read by a browser agent, caused it to open Gmail and send email subject lines to an attacker's URL.60% similarUnverifiedThe attacker left multiple signature handles in the body text, including 'JATIM4U', 'Jangene_Cakep', 'Panataran', '0x1999', '0xIDiot', 'Unlucky', 'Mr.Optimuz_Root' and others.59% similarUnverifiedJadePuffer的攻击入口是Langflow的一个未授权代码执行漏洞，编号CVE-2025-3248，CVSS评分高达9.858% similarUnverifiedQbitAI's website page appears to have been hacked, with the page title and content replaced by the text 'hacked by trenggalek6etar'.58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1062425API
curl https://kongchang.com/api/v1/knowledge/claims/1062425MCP
get_claim(id=1062425)