Unverified50% confidenceFactExact time
The industry often calls the dangerous combination of "access to private data, exposure to untrusted content, and the ability to communicate externally" all at once the "lethal trifecta," at which point the agent becomes a high-value attack target.
1
Sources
50%
Confidence
Long-term
Relevance
11/3/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedWhen the lethal trifecta is present simultaneously, an attack chain forms: malicious input triggers the Agent to read sensitive data, which is then exfiltrated through seemingly legitimate tool calls.77% similarPartially VerifiedThe "lethal trifecta" popularized by Simon Willison points out that when an Agent simultaneously has access to private data, exposure to untrusted content, and an outbound communication channel, its data can be tricked out of it.74% similarUnverifiedIn most documented SafePay attack cases, attackers gained access through third-party vendors that held the target organizations' data, rather than directly breaching the target organizations' own defenses.73% similarUnverifiedThe 'fatal triad' of security is: access to private data, exposure to untrusted tokens, and the existence of a data exfiltration channel.73% similarVerifiedSecurity researcher Simon Willison named the risk pattern of simultaneously possessing all three capabilities—access to private data, exposure to untrusted text, and a channel for exfiltrating data—the 'lethal trifecta'.71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1132377API
curl https://kongchang.com/api/v1/knowledge/claims/1132377MCP
get_claim(id=1132377)