Unverified50% confidenceEventExact time
In the attack shown in the video, a calculator tool, while correctly answering "2+3=5", sent the user's secret files to an unapproved server.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/25/2026
First Seen
Valid until: 11/8/2026
Sources
How a Calculator Tool Leaked an AI Agent's Secret
youtubeHackersteinAI10/25/2026
Related Entities
Related Claims
UnverifiedThe vulnerability resides in the processing logic of Cisco AsyncOS for inbound emails; due to a lack of input sanitization, an attacker can execute code and gain root privileges by sending an email.65% similarUnverifiedThe root cause of the vulnerability is that encrypted reasoning blocks are portable, and the server does not verify whether a reasoning block belongs to the current user, model, or conversation after decryption.64% similarUnverifiedThis snapshot swap attack requires knowing the victim's internal snapshot storage key, a 96-bit random identifier the platform generates for each snapshot that is never exposed in the API, so there is no evidence that strangers can launch attacks against other tenants.64% similarUnverifiedThe Brave security team demonstrated hiding text invisible to the human eye within a screenshot, which, when read by a browser agent, caused it to open Gmail and send email subject lines to an attacker's URL.63% similarUnverified2024年安全研究员Johann Rehberger公开演示了针对Microsoft 365 Copilot的提示注入攻击，通过邮件正文嵌入人眼不可见的恶意指令，当用户让Copilot总结收件箱时执行隐藏指令，将敏感邮件内容通过超链接参数外泄到攻击者服务器63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1097085API
curl https://kongchang.com/api/v1/knowledge/claims/1097085MCP
get_claim(id=1097085)