主题： exfiltration

• The lethal trifecta: private data, untrusted content and an outbound channel in one agent

  An agent that combines access to private data, exposure to attacker-controlled content and any way to communicate outward can be steered into sending that data to an attacker. Removing one of the three legs is the only reliable structural defence; the article lists the outbound channels that are easy to overlook.

  article · en · reviewed · 知识截至 2026-09-23

机器可读： JSON