Slow-Burn Data Exfiltration Attacks in Agents
matei_zaharia · x · 2026-07-15
A blog post on slow-burn attacks points out that attackers can break down data exfiltration into a series of individually normal-looking steps to bypass standard security checks.
Using an Omnigent vendor-review agent as an example, the post illustrates:
- Without a contextual policy, outbound emails are allowed through.
- With session risk tracking enabled, the system can block such behaviors.
- The critical point is that the agent cannot disable this policy itself.
These cases highlight persistent security risks within agent systems, rather than just single-instance prompt injections.
More from coding & agent
- Devin adds e2b sandboxes for remote agent execution — badphilosopher · 2026-07-22
- Hermes Agent Refactoring Proposal: Decoupling via Event Bus and Monorepo Slicing — Promptmethus · 2026-07-22
- ty now reads Pydantic config keywords and field metadata — charliermarsh · 2026-07-22
- Pensar Launches AI Security Agent to Autonomously Discover and Patch 0-Days — andriy_mulyar · 2026-07-22
- ty adds first-class Pydantic support, including strict and lax field handling — charliermarsh · 2026-07-22
- Google launches Gemini 3.5 Flash Cyber for CodeMender, with limited access for governments — GoogleAI · 2026-07-22