Poisoning the well: The rise of indirect prompt injection in the agentic age — Cloudflare Connect 2026
Speaker
Indirect prompt injection (IDPI) lets attackers weaponize the data AI agents consume — turning web searches and support tickets into remote instructions that exfiltrate data or hijack tool execution. This session maps the hostile landscape of the agentic era and how attackers seed the open web with payloads targeting the 'lethal trifecta' of private data access, tool execution, and LLM reasoning gaps.