Prompt injection attacks trick AI agents into making crypto payments

Researchers uncovered two campaigns where malicious websites use indirect prompt injection to trick autonomous AI agents into making cryptocurrency payments. The attacks exploit agents browsing the web, highlighting security risks in agentic AI.