ShadowLeak and the fragile promise of trust in AI agents
Yesterday I came across a report on ShadowLeak, a newly exposed zero-click vulnerability that allowed attackers to siphon private Gmail data simply by tricking an AI agent into reading an email. No malicious link needed, no file to open, not…