UnSecLabs
AI Agent Vulnerability Platform
Target AI Agents
Email Agent
Internal Comms AI
Chat & Support Agent
Customer Facing AI
Mobile / Web App Agent
On-Device Assistant
Cloud Ops Agent
Infrastructure Manager
Active Incidents
Vulnerabilities detected for selected agent.
3 Critical Threats
| Incident ID | Severity | Attack Type | Target / Vector | Status |
|---|---|---|---|---|
| INC-902 | Critical | White-Text Injection | VP Risk Management Email | Active |
| INC-891 | Critical | Board Material Exfiltration | Internal AI Assistant | Active |
| INC-885 | High | Compromised Manager Account | david.rosen@bank-demo.com | Investigating |
Attack Path Analysis
Phase 1: Account Compromise
Attacker gains access to VP Risk Management email account.
Phase 2: Trusted Email Sent
Legitimate business request with hidden white-text injection payload.
Phase 3: AI Task Override
AI processes hidden instruction to extract passwords and board materials.
Phase 4: Data Exfiltration
Sensitive board documents and credentials sent to external attacker email.