Hidden email instructions can target AI assistants
Malicious instructions can be hidden in email using HTML comments, zero-width characters, Base64 or CSS. An assistant processing the message may follow them even when they are invisible to the user.
Why it matters This highlights a practical prompt-injection risk for AI systems that read email.
- 853 likes
- 193 reposts