'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets
Researchers at the University of Missouri-Kansas City developed 'Ghostcommit', an attack that hides prompt injection instructions inside PNG images to trick AI code reviewers into approving malicious …