Autonomous web agents read whatever a page displays, and much of that content comes from strangers. Product reviews, seller listings, and advertisements sit beside trusted site menus on a single page. An agent that reads all of that text as instructions can be steered by any of it. A group at UC Berkeley describe Cross-Site Prompting, or XSP, as the agent-era version of Cross-Site Scripting. Their system, Prismata, sits between a web agent and the … More
The post Prompt injection is becoming the XSS of the web agent era appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
The script, not the voice, is what makes AI voice phishing work
New infosec products of the week: July 17, 2026
Russian cybercriminal used jailbroken Gemini CLI to rebuild botnet infrastructure in six minutes