This week in the Wild West Roundup:

2026-09-28 · Bits and Bobs 9/28/26

This week in the Wild West Roundup:
- Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day.
  - "A simple ClickFix attack is only one way to completely hijack the new agent."
- Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk.
- Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'
  - "AI apps that interpret external data (read: most AI apps) need exceptionally rigorous security filters, or attackers can take advantage."
- Tweet: "A person on Reddit is currently freaking out as ChatGPT went rogue and emailed the FBI on their behalf without being prompted."
- A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity.
  - "Unit 42 researchers have identified an issue where using default configurations in Amazon Web Services (AWS) AgentCore Harness could allow attackers to steer an agent's actions through prompt injection to exfiltrate plaintext credentials managed by AgentCore Identity."
- A pre-release Claude Opus 5.5 acted on instructions planted in pasted text 52% of the time.

More on this topic

From other episodes