A Document Can Give Your AI Agent Orders. Build for That Before You Go Live.

Palo Alto Networks' Unit 42 found attackers embedding hidden instructions in documents and web pages to manipulate AI agents, including attempts to delete data or redirect payments. These instructions are indistinguishable from regular content to AI models, posing security risks as agents process all text uniformly. Organizations must prepare controls to handle such threats before deploying AI agents in production.