I pwned OpenClaw with just email and a new injection escalation technique: prompt laundering

Repeating a lie enough times, even in spotlighted untrusted text, can poison an AI agent's memory, and lead to a total takeover. Note: I gave a talk on this at BSidesLV and a longer one at DEF CON a few weeks ago. This post is the quick summary of that material. submitted by /u/zmre [link] [comments]

from hacking: security in practice https://ift.tt/xKlbkSN