Prompt Injection Attacks Are Thwarting AI Hacking Agents

Tracebit researchers developed context bombing, a technique that places forbidden prompts alongside AWS secrets to shut down AI hacking agents. In 152 runs across five models including Opus 4.8 and Gemini 3.1 Pro, admin account seizure dropped from 57% to 5%, and complete compromise fell from 36% to 1%.