Check Point Research (CPR) discovered Haiou, an OpenAI Codex jailbreak bundle that persistently modifies an AI agent’s trusted instructions to inject advertisements for a third-party AI gateway. CPR calls this behavior “prompt adware,” highlighting how natural-language prompts and configuration files can quietly influence an AI agent’s future behavior without traditional executable code. While the advertisement itself is relatively simple, the technique raises a broader concern for organizations adopting AI agents: how much visibility do they have into the third-party prompts, Skills and configurations influencing the AI systems they trust? Key Findings CPR identified “prompt adware,” where trusted AI instructions are […]
The post Prompt Adware: How Hidden AI Instructions Could Create a New Enterprise Security Risk appeared first on Check Point Blog.