社交工程攻击 AI 智能体：2026 年新型 BEC 威胁

As enterprises grant AI agents access to business systems, attackers are manipulating agents into performing authorized operations through prompt injection and feeding malicious content, forming a new type of BEC attack. Fortra's John Wilson pointed out that agents have difficulty distinguishing between instructions and the data they process, and attackers can embed malicious instructions into third-party content such as resumes. Palo Alto Networks Unit 42 has identified 22 attack techniques in the wild, targeting unauthorized transactions, sensitive information leakage, and system prompt leakage, among others.