AI agent social engineering becomes a new BEC threat
Start here
As enterprises grant AI agents access to business systems, attackers are manipulating agents into performing authorized operations through prompt injection and feeding malicious content, forming a new type of BEC attack. Fortra's John Wilson pointed out that agents have difficulty distinguishing between instructions and the data they process, and attackers can embed malicious instructions into third-party content such as resumes. Palo Alto Networks Unit 42 has identified 22 attack techniques in the wild, targeting unauthorized transactions, sensitive information leakage, and system prompt leakage, among others.
Generated by AI from reports · Updated 3 days ago
Progress timeline
- Dark Reading社交工程攻击 AI 智能体：2026 年新型 BEC 威胁
As enterprises grant AI agents access to business systems, attackers are manipulating agents into performing authorized operations through prompt injection and feeding malicious content, forming a new type of BEC attack. Fortra's John Wilson pointed out that agents have difficulty distinguishing between instructions and the data they process, and attackers can embed malicious instructions into third-party content such as resumes. Palo Alto Networks Unit 42 has identified 22 attack techniques in the wild, targeting unauthorized transactions, sensitive information leakage, and system prompt leakage, among others.
Related discussion
Attention trend
New sources per day
- Oct 9New1 sources (1 outlets,0 accounts)
- Oct 10New0 sources (0 outlets,0 accounts)
- Oct 11New0 sources (0 outlets,0 accounts)
- Oct 12New0 sources (0 outlets,0 accounts)