this post was submitted on 10 Feb 2026
76 points (96.3% liked)

Technology

80978 readers
4686 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
76
AI agents spill secrets just by previewing malicious links (www.promptarmor.com)
submitted 10 hours ago* (last edited 10 hours ago) by Beep@lemmus.org to c/technology@lemmy.world
3 comments fedilink hide all child comments
 

Communicating with AI agents (like OpenClaw) via messaging apps (like Slack and Telegram) has become much more popular. But it can expose users to a largely unrecognized LLM-specific data exfiltration risk, because these apps support ‘link previews’ as a feature. With previews enabled, user data can be exfiltrated automatically after receiving a malicious link in an LLM-generated message -- whereas without previews, the user would typically have to click the malicious link to exfiltrate data. For example, OpenClaw via Telegram is exposed by default. Test any agent / communication app pairing below!

you are viewing a single comment's thread
view the rest of the comments
[–] paraphrand@lemmy.world 2 points 7 hours ago (1 children)

OpenGraph tags in particular? Or do you mean something else?

[–] homesweethomeMrL@lemmy.world 1 points 5 hours ago

Link shortening, as a different example. Thankfully it finally sort of died. Pre-loading is another. Tiktok is uploading before the file is saved, is another.