Agent Data Injection attack corrupts AI agents' trusted data

Researchers from Seoul National University, UIUC, and Largosoft detail Agent Data Injection (ADI), which corrupts trusted fields like sender names or button IDs to bypass prompt injection defenses. The technique, probabilistic delimiter injection, exploits how agents parse punctuation-marked data.