🕵️ RESEARCH & DEEP DIVES
- AI agents keep falling to 'goal hijack' attacks, now OWASP's top agentic risk
Agent goal hijack, ranked ASI01 in OWASP's 2026 agentic Top 10, lets attackers redirect AI agents like Grok, Copilot, and Cursor by planting instructions in retrieved content.- Applies to AI agents with tool access — Copilot, Cursor, Grok, and other agentic applications in production.
- Agents cannot reliably distinguish instructions from retrieved content, so attackers can hijack goals, planning, and multi-step behavior.
- Attack works by leaving text where the agent will fetch it — web pages, documents, emails — no direct access to the user needed.
- In May 2026, an attacker used Morse code and a split Python snippet in X posts to make Grok command the Bankr trading agent to drain its wallet of ~$150,000–200,000 in DRB tokens.
- Palo Alto Unit 42 documented prompt injections planted on live websites targeting ad-review, moderation, and search-ranking agents.
🔓 CVEs & KEV
CVE-2026-88857 — OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla — CVSS 9.4 — Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execu...
CVE-2026-88856 — OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla — CVSS 9.4 — Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execu...
CVE-2026-88854 — OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla — CVSS 9.3 — Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft J...
CVE-2026-94104 — nivocart — CVSS 8.7 — NivoCart Arbitrary File Upload to RCE (CVE-2026-94104)
CVE-2026-94106 — james-heinrich getid3 — CVSS 8.7 — getID3 OS Command Injection via Unescaped Filenames
CVE-2026-88855 — OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla — CVSS 8.6 — Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft J...