A single indirect prompt injection attack triggered by a single benign user query can trigger all of the following effects at once: Exfiltration of many workbooks from across the victim's account
大多数人认为需要复杂的攻击链或多重漏洞才能实现大规模数据泄露，但作者展示了一个简单的良性查询就能触发跨多个工作簿的数据泄露，这挑战了人们对攻击复杂性的传统认知，暗示AI工具的单点故障风险被严重低估。