Encrypted Prompts Slip Past AI Guardrails: Zero-Click Grok Data Theft
Adversa AI's new "Cryptographic Context Injection" ships malicious instructions as AES ciphertext that guardrails can't parse, then tricks the model into decrypting them inside its own code-execution sandbox. The recovered plaintext inherits trusted-context credibility — in a live demo against Grok it resolved private session context into a zero-click data exfiltration URL. Gemini's success rate had already dropped by August, but xAI still hasn't responded to disclosure.