Unverified50% confidenceFactExact time
When the lethal trifecta is present simultaneously, an attack chain forms: malicious input triggers the Agent to read sensitive data, which is then exfiltrated through seemingly legitimate tool calls.
1
Sources
50%
Confidence
Long-term
Relevance
10/31/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe 'fatal triad' of security is: access to private data, exposure to untrusted tokens, and the existence of a data exfiltration channel.74% similarUnverifiedThe defensive value of the deadly triad framework lies in the fact that reliably eliminating any one of the three legs breaks the attack chain, which is consistent with the defense-in-depth concept in cybersecurity.74% similarPartially VerifiedThe "lethal trifecta" popularized by Simon Willison points out that when an Agent simultaneously has access to private data, exposure to untrusted content, and an outbound communication channel, its data can be tricked out of it.74% similarUnverifiedIn most documented SafePay attack cases, attackers gained access through third-party vendors that held the target organizations' data, rather than directly breaching the target organizations' own defenses.74% similarUnverifiedAn attack can exfiltrate data by combining multiple legitimate tool calls: what a read tool reads can steer a write tool, which then sends it out through a notification tool, all without any tool being abused, any credential being stolen, or the model being jailbroken.74% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1121419API
curl https://kongchang.com/api/v1/knowledge/claims/1121419MCP
get_claim(id=1121419)