Skip to content

Zero-click data exfiltration

Named by 2 kept items in this workspace.

Search every workspace for Zero-click data exfiltration. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Top AI agent security resources — October 2026
    article2026-10-04

    SalesBleed: unauthenticated web form injection exfiltrates CRM data via DNS and Slack URL unfurling

  • Grok chat history leak: Cryptographic Context Injection
    writeup2026-08-20

    Decrypted instructions direct the agent to resolve private session context (user's name, coarse location, subscription tier, full conversation history) and embed it into a URL that the agent's privileged navigation tool then opens, transmitting data to an attacker-controlled endpoint via query param

All techniques in this workspace.