Security researchers have discovered 10 new indirect prompt injection (IPI) payloads targeting AI agents with malicious instructions designed to achieve financial fraud, data destruction, API key theft and more. Threat actors achieve IPI by poisoning web content so that when an agent crawls or summarizes it, the instructions will be executed as legitimate. It impacts any agent that browses and summarizes web pages, indexes content for RAG pipelines, auto-processes metadata/HTML comments, or reviews pages for ad content, SEO ranking or moderation. “The impact scales with AI privilege. A browser AI that can only summarize is low-risk,” explained Forcepoint senior security researcher, Mayur Sewani, in a blog post yesterday. “An agentic AI that can send emails, execute terminal commands or…