Tag · 2 articles
Non-Human Identity
AI Agent Impersonation: How Prompt Injection Turns an Agent's Identity Into the Attacker's
Prompt injection does not steal an AI agent's credentials, it borrows them. Here is how the confused-deputy attack works and how to stop it with delegated tokens, audience binding, DPoP and gateway policy.