Skip to content
Humanopia
Safety

Security teams warn about prompt injection in AI agents

Hidden instructions in web pages and emails can redirect agents. What companies should do now.

Humanopia Editorial Team · Sep 6, 2026 · 2 min read

The U.S. Capitol at dusk

We will update this story as more independent testing is published. If you have used the feature and want to share what you found, write to the editorial team.

Developers get the same capability through the API, with a separate price list. Several startups said they will update their products within days, which is usually how new features reach most people.

What critics say

The practical advice is the same as always: try it on a low-stakes task first, check the output against a source you trust, and keep a human in charge of anything that matters.

  • Rolling out region by region
  • Older versions stay available for now
  • Admin controls for business accounts
  • Independent tests are still limited

What changes for you

If you use these tools at work, ask your administrator whether the new feature is turned on, and what the company policy says about using it with customer data.

We are seeing steady progress, not a leap. That is still useful for the people who rely on these tools every day.

An independent researcher

Independent researchers were quick to test the claims. Early results broadly match what the company said, with the usual caveat: benchmarks measure narrow skills, and real work is messier than a test set.

Illustration for this sample story.

How we reported this

The timing is not an accident. Competitors have shipped similar updates in recent months, and every lab wants to be the default choice when a company signs a yearly contract.

Regulators have not commented yet. In the EU, new obligations for general-purpose models mean that documentation like this is now expected rather than optional.

Stay ahead without
living inside the feed.

Get our weekly newsletter with the most important AI news, practical guides and thought-provoking essays, curated for curious, forward-thinking people.

Weekly, not daily Curated and practical No spam, ever