21,000 Leaky AI Agents: Indirect Prompt Injection's Sneaky Siege
China's CNCERT just flagged 21,000 vulnerable OpenClaw agents ripe for silent data theft. Indirect prompt injection isn't a glitch; it's the new king of AI hacks.
⚡ Key Takeaways
- Indirect prompt injection hit 80% of 2025 enterprise attacks, up 340% in attempts.
- 21,000 OpenClaw agents exposed, enabling silent API key exfil via docs.
- AI's 'SQL injection' era: Unvetted content = inevitable breaches ahead.
Worth sharing?
Get the best Developer Tools stories of the week in your inbox — no noise, no spam.
Originally reported by dev.to
Related Stories
AI Dev Tools
Meal Kit Mayhem: What Doomed 15 Startups and Crowned the Rest
AI Dev Tools
OpenAI's TBPN Grab: Seizing the AI Storyline Before Rivals Do
AI Dev Tools
Romanian Lawyers Face AI Reckoning: Adapt Fast or Fade Away
AI Dev Tools