Signal of the Day · Security & AI Risk Surfaced late · published September 25
OpenAI shows a prompt injection that spreads like a worm through AI agents' email and files
What happenedOpenAI reports a self-replicating prompt injection that steered its agents in testing, making them copy the attack into what they send; no real-world impact observed.
Why it mattersSNF and AL/SL operators adding email- and chat-connected assistants inherit this path: one poisoned referral or family email could ride an agent's outbound reply.
For leadersAsk which AI agents can send, post or edit without human approval, and whether agent-sent mail is logged like other outbound mail.