A prompt-injection method that hides malicious instructions in ciphertext plus a decryption key, letting AI models decode and execute them past content filters.
Adversa AI got GitHub Copilot CLI to decrypt and run a hidden instruction, and Microsoft's mai-code-1.1-flash fell for it 50 percent of the time. GitHub declined to treat it as a product vulnerability, so teams running autopilot have to check what the agent executes themselves.
Reality
Adversa AI says its Cryptographic Context Injection recovers hostile prompts inside the code sandbox, where filters do not look. xAI has not replied; Google scopes jailbreaks out entirely.
Perspective Coverage
6 publishersReality
A single Stormcast episode carries a Keycloak 26.7.2 password-reset fix, a reported N-able password manager leak, and a published LLM safeguard bypass. Most of it sits in the identity and secrets tier.
Reality
Adversa AI's Cryptographic Context Injection keeps instructions as ciphertext until the agent's own runtime decrypts them. The exfiltration then rides a tool the agent already had.
Reality
The exfiltration path runs through Grok's own code sandbox, and the recommended fix sits in xAI's agent harness rather than the model. Treat anything typed into Grok as readable.
Reality
Adversa says it hid data-exfiltration instructions in AES-256-GCM ciphertext and let Grok decrypt them in its own Python sandbox. The plaintext version of the same attack was refused.
Reality