A newly disclosed attack can turn a routine “summarize this page” request in xAI’s Grok web chat into a silent theft of the user’s name, coarse location, subscription tier, and the prompt history of the active conversation. Adversa AI said in a report shared with Cyber Security News (CSN) that the method, named Cryptographic Context Injection, hides attacker commands inside AES-256-GCM ciphertext so input filters never read them, then induces th…
This story is only covered by news sources that have yet to be evaluated by the independent media monitoring agencies we use to assess the quality and reliability of news outlets on our platform. Learn more here.