Weaponized Email AI Assistants Could Help Attackers Hijack Accounts

Barracuda Networks researchers built a lab proof of concept showing a compromised low-level email account can climb to the CEO's via the built-in AI chatbot. The attack uses prompts to hide the AI's own activity logs, map the org structure, and draft in-style phishing emails that bypass filters.