AIThe Hacker Newsabout 3 hours ago
Google Deletes 3 ADK Workflows After Prompt Injection Attack
1 min read
Google deleted three ADK workflows after Pillar Security demonstrated prompt injection via a GitHub issue. The attack abused a trusted bot identity to trigger a privileged agent, achieving code execution and credential exfiltration. The exposed component was repository automation, not the distributed ADK Python package.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
