Your CRM bot will reroute every customer email for a stranger if they ask nicely in invisible text
Ourtake
Prompt injection is still the security hole nobody has managed to close, and agents make it worse.
What happened
At Black Hat USA, security firm Zenity demonstrated zero-click and one-click exploit chains that used hidden prompts to manipulate enterprise AI platforms. In one demo, Salesforce Einstein was tricked into rerouting all customer email addresses to an attacker-controlled domain. Salesforce says it fixed the vulnerability on July 11, 2025.