Researchers demonstrated that Slack AI could be hijacked through indirect prompt injection to exfiltrate data from private channels the attacker had no access to.

Researchers demonstrated that indirect prompt injection can permanently poison an AI agent's long-term memory, causing it to act on false information across all future sessions.

A courier company's customer-support chatbot was manipulated into swearing, self-aware criticism, and publicly trashing its employer after a system update removed safeguards. The incident exposed both prompt-injection vulnerability and guardrail failure in production AI.